Function at 0x4119d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51c708
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push esi
push edi
mov eax, dword [0x562494]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
xor eax, eax
mov dword [ebp - 0x6c], 0x740062
mov dword [ebp - 0x68], 0x5f006e
mov dword [ebp - 0x64], 0x61006c
mov dword [ebp - 0x60], 0x6f0079
mov dword [ebp - 0x5c], 0x740075
mov word [ebp - 0x58], ax
call fcn.00409bb0
mov ecx, eax
test ecx, ecx
je 0x411f41
mov eax, dword [ecx]
push 2
push 0xa
mov eax, dword [eax]
call eax
test eax, eax
je 0x411f4b
cmp dword [eax + 8], 0xa
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
jl 0x411f37
xor eax, eax
mov dword [esi - 0xc], 0xa
mov word [esi + 0x14], ax
mov edx, 0x14
lea eax, [ebp - 0x6c]
mov ecx, esi
push 0x14
push eax
call fcn.0040a070
add esp, 8
lea eax, [edi + 0x30]
mov dword [ebp - 4], 0
push esi
mov ecx, eax
mov dword [ebp - 0x18], eax
call fcn.00433290
mov dword [ebp - 0x10], eax
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
lock xadd dword [esi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x411adb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x411f50
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x411f50
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [edi + 0x314], 0
jne 0x411b44
push 0x1cc
lea ecx, [edi + 0x30]
call fcn.00433300
mov ecx, eax
call fcn.00431ce0
push 0x3c
lea ecx, [edi + 0x30]
mov esi, eax
call fcn.00433300
mov ecx, eax
call fcn.00431ce0
mov ecx, dword [ebp - 0x10]
push 1
mov dword [ebp - 0x90], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x94], esi
mov edx, dword [ecx]
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 0
movups xmm0, xmmword [ebp - 0x94]
movups xmmword [eax], xmm0
call dword [edx + 0x50]
xor eax, eax
mov dword [ebp - 0x84], 0x61006d
mov dword [ebp - 0x80], 0x6e0069
mov dword [ebp - 0x7c], 0x6c005f
mov dword [ebp - 0x78], 0x620061
mov dword [ebp - 0x74], 0x6c0065
mov word [ebp - 0x70], ax
call fcn.00409bb0
mov ecx, eax
test ecx, ecx
je 0x411f57
mov eax, dword [ecx]
push 2
push 0xa
mov eax, dword [eax]
call eax
test eax, eax
je 0x411f61
cmp dword [eax + 8], 0xa
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
jl 0x411f37
xor eax, eax
mov dword [esi - 0xc], 0xa
mov word [esi + 0x14], ax
mov edx, 0x14
lea eax, [ebp - 0x84]
mov ecx, esi
push 0x14
push eax
call fcn.0040a070
add esp, 8
push esi
lea ecx, [edi + 0x30]
mov dword [ebp - 4], 1
call fcn.00433290
mov dword [ebp - 0x10], eax
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
lock xadd dword [esi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x411c21
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x411f66
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x411f66
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x411c33
mov eax, dword [ecx]
push dword [edi + 0x318]
call dword [eax + 0x30]
mov dword [ebp - 0x40], 0x750073
mov dword [ebp - 0x3c], 0x5f0062
mov dword [ebp - 0x38], 0x61006c
mov dword [ebp - 0x34], 0x650062
mov dword [ebp - 0x30], 0x6c
call fcn.00409bb0
mov ecx, eax
test ecx, ecx
je 0x411f6d
mov eax, dword [ecx]
push 2
push 9
mov eax, dword [eax]
call eax
test eax, eax
je 0x411f77
cmp dword [eax + 8], 9
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
jl 0x411f37
xor eax, eax
mov dword [esi - 0xc], 9
mov word [esi + 0x12], ax
mov edx, 0x12
lea eax, [ebp - 0x40]
mov ecx, esi
push 0x12
push eax
call fcn.0040a070
add esp, 8
push esi
lea ecx, [edi + 0x30]
mov dword [ebp - 4], 2
call fcn.00433290
mov edi, eax
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [esi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x411d03
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x411f7c
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x411f7c
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
test edi, edi
je 0x411d2f
mov esi, dword [ebp - 0x14]
mov ecx, edi
mov eax, dword [edi]
push dword [esi + 0x31c]
call dword [eax + 0x30]
mov eax, dword [esi + 0x31c]
cmp dword [eax - 0xc], 0
jne 0x411d2f
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x114]
xor eax, eax
mov dword [ebp - 0x2c], 0x740062
mov dword [ebp - 0x28], 0x5f006e
mov dword [ebp - 0x24], 0x65006c
mov dword [ebp - 0x20], 0x740066
mov word [ebp - 0x1c], ax
call fcn.00409bb0
mov ecx, eax
test ecx, ecx
je 0x411f83
mov eax, dword [ecx]
push 2
push 8
mov eax, dword [eax]
call eax
test eax, eax
je 0x411f8d
cmp dword [eax + 8], 8
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
jl 0x411f37
xor eax, eax
mov dword [esi - 0xc], 8
mov word [esi + 0x10], ax
mov edx, 0x10
lea eax, [ebp - 0x2c]
mov ecx, esi
push 0x10
push eax
call fcn.0040a070
add esp, 8
mov ecx, dword [ebp - 0x18]
push esi
mov dword [ebp - 4], 3
call fcn.00433290
mov edi, eax
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [esi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x411dfe
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x411f92
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x411f92
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
test edi, edi
je 0x411e2a
mov esi, dword [ebp - 0x14]
mov ecx, edi
mov eax, dword [edi]
push dword [esi + 0x320]
call dword [eax + 0x30]
mov eax, dword [esi + 0x320]
cmp dword [eax - 0xc], 0
jne 0x411e2a
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x114]
mov dword [ebp - 0x54], 0x740062
mov dword [ebp - 0x50], 0x5f006e
mov dword [ebp - 0x4c], 0x690072
mov dword [ebp - 0x48], 0x680067
mov dword [ebp - 0x44], 0x74
call fcn.00409bb0
mov ecx, eax
test ecx, ecx
je 0x411f99
mov eax, dword [ecx]
push 2
push 9
mov eax, dword [eax]
call eax
test eax, eax
je 0x411fa3
cmp dword [eax + 8], 9
lea esi, [eax + 0x10]
mov dword [ebp - 0x10], esi
jl 0x411f37
xor eax, eax
mov dword [esi - 0xc], 9
mov word [esi + 0x12], ax
mov edx, 0x12
lea eax, [ebp - 0x54]
mov ecx, esi
push 0x12
push eax
call fcn.0040a070
add esp, 8
mov ecx, dword [ebp - 0x18]
push esi
mov dword [ebp - 4], 4
call fcn.00433290
mov edi, eax
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x411efa
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x411fa8
mov ecx, dword [ecx + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x411fa8
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
test edi, edi
je 0x411f26
mov esi, dword [ebp - 0x14]
mov ecx, edi
mov eax, dword [edi]
push dword [esi + 0x324]
call dword [eax + 0x30]
mov eax, dword [esi + 0x324]
cmp dword [eax - 0xc], 0
jne 0x411f26
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0x114]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.0040a130
push 0x80004005
call fcn.0040a130
call fcn.00409240
call edx
jmp 0x411adb
push 0x80004005
call fcn.0040a130
call fcn.00409240
call edx
jmp 0x411c21
push 0x80004005
call fcn.0040a130
call fcn.00409240
call edx
jmp 0x411d03
push 0x80004005
call fcn.0040a130
call fcn.00409240
call edx
jmp 0x411dfe
push 0x80004005
call fcn.0040a130
call fcn.00409240
call edx
jmp 0x411efa