Function at 0x401ec0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x405a3b
mov eax, dword fs:[0]
push eax
sub esp, 0x454
mov eax, dword [0x407018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x424], esi
mov dword [ebp - 4], 1
mov al, 0x72
mov byte [ebp - 0x12], al
xor eax, eax
push 0xff
push eax
mov byte [ebp - 0x11], al
mov word [ebp - 0x41b], ax
mov byte [ebp - 0x419], al
mov byte [ebp - 0x170], al
lea eax, [ebp - 0x16f]
push eax
mov dword [ebp - 0x70], 0xf97d3398
mov dword [ebp - 0x6c], 0xd0e1f24d
mov dword [ebp - 0x68], 0x51c98d85
mov dword [ebp - 0x64], 0xbb936a41
mov dword [ebp - 0x60], 0xe961a90a
mov dword [ebp - 0x5c], 0xe9de0522
mov dword [ebp - 0x58], 0x64068b72
mov dword [ebp - 0x54], 0x3c50eda2
mov dword [ebp - 0x50], 0x11e23dde
mov dword [ebp - 0x4c], 0x58dfb7f4
mov dword [ebp - 0x48], 0xcc3c9347
mov dword [ebp - 0x44], 0x3399fb4c
mov dword [ebp - 0x40], 0x7377591a
mov dword [ebp - 0x3c], 0x8cf4784a
mov dword [ebp - 0x38], 0x3651ac52
mov dword [ebp - 0x34], 0xa491d8ca
mov word [ebp - 0x30], 0x148f
mov dword [ebp - 0x2c], 0x7263694d
mov dword [ebp - 0x28], 0x666f736f
mov dword [ebp - 0x24], 0x6e492074
mov dword [ebp - 0x20], 0x6e726574
mov dword [ebp - 0x1c], 0x45207465
mov dword [ebp - 0x18], 0x6f6c7078
mov word [ebp - 0x14], 0x6572
mov dword [ebp - 0x420], 0x544547
call sub.MSVCR100.dll_memset
add esp, 0xc
mov eax, 4
lea ebx, [ebp - 0x41c]
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x41c], 0x82dc9d3
call fcn.004010e0
lea ecx, [ebp - 0x170]
push ecx
mov ecx, 0x42
lea edx, [ebp - 0x70]
lea eax, [ebp - 0x418]
call section..text
push 0x38
lea edx, [ebp - 0x45c]
push 0
push edx
call sub.MSVCR100.dll_memset
lea eax, [ebp - 0x1f0]
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x450], eax
lea eax, [ebp - 0x170]
mov dword [ebp - 0x434], ecx
add esp, 0xc
mov dword [ebp - 0x460], 0x3c
mov dword [ebp - 0x44c], 0x80
mov dword [ebp - 0x430], pe_nt_image_headers32
lea ecx, [eax + 1]
jmp 0x402070
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402070
lea edx, [ebp - 0x460]
push edx
sub eax, ecx
mov ecx, dword [esi]
push 0
push eax
lea eax, [ebp - 0x170]
push eax
call ecx
mov eax, dword [ebp - 0x434]
mov ecx, eax
mov dword [ebp - 0x2f8], 0xf
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 0x30c], 0
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4020b4
sub ecx, esi
mov edi, ecx
lea esi, [ebp - 0x30c]
call fcn.00402560
push 6
push str._NAME_
mov edx, esi
push edx
xor eax, eax
mov byte [ebp - 4], 2
call fcn.004024b0
lea ecx, [ebp + 0x24]
push ecx
push 6
mov edi, eax
call fcn.004022b0
push 5
push str._KEY_
mov edx, esi
push edx
xor eax, eax
call fcn.004024b0
lea ecx, [ebp + 8]
push ecx
push 5
mov edi, eax
call fcn.004022b0
mov esi, dword [ebp - 0x424]
mov eax, dword [esi + 4]
push 0
push 0
push 0
push 1
lea edx, [ebp - 0x2c]
push edx
call eax
mov ecx, dword [ebp - 0x450]
mov edx, dword [esi + 8]
push 0
push 0
push 3
push 0
push 0
push 0x1f91
mov edi, eax
push ecx
push edi
call edx
cmp dword [ebp - 0x2f8], 0x10
mov ebx, eax
mov eax, dword [ebp - 0x30c]
jae 0x402156
lea eax, [ebp - 0x30c]
mov ecx, dword [esi + 0xc]
push 0
push 0x4000000
push 0
push 0x40621e
push 0
push eax
lea eax, [ebp - 0x420]
push eax
push ebx
call ecx
mov edx, dword [esi + 0x10]
push 0
push 0
push 0
push 0
push eax
mov dword [ebp - 0x424], eax
call edx
mov eax, dword [ebp - 0x424]
mov ecx, dword [esi + 0x20]
push eax
call ecx
mov edx, dword [esi + 0x20]
push ebx
call edx
mov eax, dword [esi + 0x20]
push edi
call eax
mov esi, 0x10
cmp dword [ebp - 0x2f8], esi
jb 0x4021bd
mov ecx, dword [ebp - 0x30c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edi, edi
mov ebx, 0xf
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x2fc], edi
mov byte [ebp - 0x30c], 0
cmp dword [ebp + 0x1c], esi
jb 0x4021e9
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x18], edi
mov byte [ebp + 8], 0
cmp dword [ebp + 0x38], esi
jb 0x402205
mov eax, dword [ebp + 0x24]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00404fe6
mov esp, ebp
pop ebp
ret 0x38