Function at 0x4021e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaa0
mov eax, dword [0x41a084]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x318], 0
push 0x103
push 0
lea eax, [ebp - 0x317]
push eax
call fcn.0040e3a0
add esp, 0xc
push 0x41d0a8
lea ecx, [ebp - 0x318]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push str.ldTemp.data
lea edx, [ebp - 0x318]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
mov byte [ebp - 0xaa0], 0x2f
mov byte [ebp - 0xa9f], 0x28
mov byte [ebp - 0xa9e], 0x33
mov byte [ebp - 0xa9d], 0x39
mov byte [ebp - 0xa9c], 0x31
mov byte [ebp - 0xa9b], 0x31
mov byte [ebp - 0xa9a], 0x6e
mov byte [ebp - 0xa99], 0x6f
mov byte [ebp - 0xa98], 0x73
mov byte [ebp - 0xa97], 0x38
mov byte [ebp - 0xa96], 0x25
mov byte [ebp - 0xa95], 0x38
mov byte [ebp - 0xa94], 0
push 0xc
push 0x69
lea eax, [ebp - 0xaa0]
push eax
call fcn.004048e0
add esp, 0xc
push 0xc
push 0x34
lea ecx, [ebp - 0xaa0]
push ecx
call fcn.004048e0
add esp, 0xc
mov byte [ebp - 0x638], 0
push 0x103
push 0
lea edx, [ebp - 0x637]
push edx
call fcn.0040e3a0
add esp, 0xc
push 0x41e2c0
lea eax, [ebp - 0x638]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0xaa0]
push ecx
lea edx, [ebp - 0x638]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
xor eax, eax
mov word [ebp - 0x210], ax
push 0x206
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.0040e3a0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x520], dx
push 0x206
push 0
lea eax, [ebp - 0x51e]
push eax
call fcn.0040e3a0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xa48], cx
push 0x40e
push 0
lea edx, [ebp - 0xa46]
push edx
call fcn.0040e3a0
add esp, 0xc
push 0x208
lea eax, [ebp - 0x210]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x318]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x208
lea edx, [ebp - 0x520]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x638]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
lea ecx, [ebp - 0x210]
push ecx
push str.IMAGE_LIST
push 0x83
call fcn.00405dc0
add esp, 0x10
mov dword [ebp - 0xa90], 0x44
push 0x40
push 0
lea edx, [ebp - 0xa8c]
push edx
call fcn.0040e3a0
add esp, 0xc
mov dword [ebp - 0x530], 0
xor eax, eax
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], eax
push 0x4177b0
lea ecx, [ebp - 0xa48]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea edx, [ebp - 0x520]
push edx
lea eax, [ebp - 0xa48]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0x4177b4
lea ecx, [ebp - 0xa48]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0xa48]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0x4177bc
lea ecx, [ebp - 0xa48]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0x4177c0
lea edx, [ebp - 0xa48]
push edx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0xa90]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0xa48]
push edx
push 0
call dword [0x41e224]
mov eax, dword [ebp - 0x530]
push eax
call dword [0x41e248]
mov ecx, dword [ebp - 0x52c]
push ecx
call dword [0x41e248]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00408266
mov esp, ebp
pop ebp
ret