Function at 0x4019e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7ec
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea edx, [ebp - 0x674]
mov dword [ebp - 0x674], 0xa
lea ecx, [ebp - 0x100]
call fcn.00401230
mov edi, dword [ebp - 0x674]
test edi, edi
je 0x401fd6
push 0x400
lea eax, [ebp - 0x670]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
test edi, edi
je 0x401a6a
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea esi, [ebp - 0x100]
nop word [eax + eax]
push esi
lea eax, [ebp - 0x670]
push 0x400
push eax
call ebx
add esp, 0xc
add esi, 0x16
sub edi, 1
jne 0x401a50
lea edx, [ebp - 0x670]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x401a73
lea eax, [ebp - 0x24]
sub edx, ecx
push eax
lea ecx, [ebp - 0x670]
call fcn.00401490
add esp, 4
mov dword [ebp - 0x7e4], 0xaad0fe7a
mov dword [ebp - 0x7e0], 0x81723f74
mov dword [ebp - 0x7dc], 0x13cd52aa
mov dword [ebp - 0x7d8], 0xdb15150d
mov dword [ebp - 0x7d4], 0x734f692
mov dword [ebp - 0x7d0], 0x41978614
mov dword [ebp - 0x7cc], 0xdc178e4f
mov dword [ebp - 0x7c8], 0x2f238423
mov dword [ebp - 0x7c4], 0x9325a446
mov dword [ebp - 0x7c0], 0x14a80bfc
mov dword [ebp - 0x7bc], 0x88cb890a
mov dword [ebp - 0x7b8], 0xc46795cb
mov dword [ebp - 0x7b4], 0xedf30650
mov dword [ebp - 0x7b0], 0xf71278cf
mov dword [ebp - 0x7ac], 0x943de844
mov dword [ebp - 0x7a8], 0x9c719791
mov dword [ebp - 0x7a4], 0x41d07c0
mov dword [ebp - 0x7a0], 0xa90dd38e
mov dword [ebp - 0x79c], 0x325ce933
mov dword [ebp - 0x798], 0xb363b9a7
mov dword [ebp - 0x794], 0x1a41cd7c
mov dword [ebp - 0x790], 0x592441b5
mov dword [ebp - 0x78c], 0x5364651b
mov dword [ebp - 0x788], 0xa9fb1553
mov dword [ebp - 0x784], 0x9ff4de12
mov dword [ebp - 0x780], 0xae8d9584
mov dword [ebp - 0x77c], 0xe0508751
mov dword [ebp - 0x778], 0xae313f1f
mov dword [ebp - 0x774], 0xeff60965
mov dword [ebp - 0x770], 0x78268922
mov dword [ebp - 0x76c], 0x1985e595
mov dword [ebp - 0x768], 0xa852ac5a
mov dword [ebp - 0x764], 0x49dc8244
mov dword [ebp - 0x760], 0xad652991
mov dword [ebp - 0x75c], 0xfd1240db
mov dword [ebp - 0x758], 0xc220dcc4
mov dword [ebp - 0x754], 0x9217a36b
mov dword [ebp - 0x750], 0x54049ee8
mov dword [ebp - 0x74c], 0x63e261d9
mov dword [ebp - 0x748], 0x1adeed74
mov dword [ebp - 0x744], 0xcfffc4a0
mov dword [ebp - 0x740], 0x11754fa8
mov dword [ebp - 0x73c], 0x36801c85
mov dword [ebp - 0x738], 0x2050dcd5
mov dword [ebp - 0x734], 0x691b8692
mov dword [ebp - 0x730], 0xb0f74583
mov dword [ebp - 0x72c], 0xf7e58ad0
mov dword [ebp - 0x728], 0x32cd623b
mov dword [ebp - 0x724], 0x18e435d7
mov dword [ebp - 0x720], 0x177a6314
mov dword [ebp - 0x71c], 0x4dacad1c
mov dword [ebp - 0x718], 0x4aea8778
mov dword [ebp - 0x714], 0x5b71f3d2
mov dword [ebp - 0x710], 0x1bfd5edf
mov dword [ebp - 0x70c], 0xaeb05f72
mov dword [ebp - 0x708], 0xfefa10b1
mov dword [ebp - 0x704], 0xac016b83
mov dword [ebp - 0x700], 0x2e21de21
mov dword [ebp - 0x6fc], 0x600e05f6
mov dword [ebp - 0x6f8], 0x4ebfe976
mov dword [ebp - 0x6f4], 0xf7cb851c
mov dword [ebp - 0x6f0], 0x8bcb68a
mov dword [ebp - 0x6ec], 0x1410ff6d
mov dword [ebp - 0x6e8], 0x695bbec6
mov dword [ebp - 0x6e4], 0x2a524828
mov dword [ebp - 0x6e0], 0xebddcd
mov dword [ebp - 0x6dc], 0x5e3bf095
mov dword [ebp - 0x6d8], 0xbe099cb9
mov dword [ebp - 0x6d4], 0x92def41c
mov dword [ebp - 0x6d0], 0x367f65a7
mov dword [ebp - 0x6cc], 0xc49a4529
mov dword [ebp - 0x6c8], 0x45734633
mov dword [ebp - 0x6c4], 0xb0a1886f
mov dword [ebp - 0x6c0], 0x8ed2efe0
mov dword [ebp - 0x6bc], 0x2d25c7e
mov dword [ebp - 0x6b8], 0x6f0e271f
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x6b4], 0x6bc46642
lea edx, [ebp - 0x14]
mov dword [ebp - 0x6b0], 0xaa603380
mov esi, 0xc
mov dword [ebp - 0x6ac], 0xa24358d5
mov dword [ebp - 0x6a8], 0x7edebc29
mov dword [ebp - 0x6a4], 0x4a70730a
mov dword [ebp - 0x6a0], 0x2c0bbd88
mov dword [ebp - 0x69c], 0x4e199ae3
mov dword [ebp - 0x698], 0xa100bcb7
mov dword [ebp - 0x694], 0xb3ebfc37
mov dword [ebp - 0x690], 0x5215bcf
mov dword [ebp - 0x68c], 0xc75ce553
mov dword [ebp - 0x688], 0x40285752
mov dword [ebp - 0x684], 0x22182cd3
mov dword [ebp - 0x680], 0xe001e908
mov dword [ebp - 0x67c], 0x9f55d949
mov dword [ebp - 0x678], 0x906498f8
mov dword [ebp - 0x674], 0x170
mov dword [ebp - 0x14], 0xe5130982
mov dword [ebp - 0x10], 0x91123b40
mov dword [ebp - 0xc], 0x4b4feeb0
mov dword [ebp - 8], 0xd5eea559
nop word [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x401fd6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x401e60
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x7e4]
call fcn.004016b0
push 0x403170
push 0x403170
push str.l32.d
push 0x40332c
push 0x403150
push 5
call fcn.004010f0
push 0x403170
push 0x403170
push 0x403334
push 0x40333c
push 0x403344
push 5
mov esi, eax
call fcn.004010f0
add esp, 0x3c
mov edi, eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call esi
mov ebx, eax
test ebx, ebx
je 0x401fc3
push edi
call esi
mov dword [ebp - 0x7e8], eax
test eax, eax
jne 0x401f13
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401fec
mov esp, ebp
pop ebp
ret
push 0x40334c
push 0x403350
push 0x403354
push str.Virt
push 0x40316f
push 5
call fcn.004011a0
push 0x403360
push 0x403364
push 0x403368
push 0x40336c
push 0x40316f
push 5
mov edi, eax
call fcn.004011a0
add esp, 0x30
mov esi, eax
push edi
push ebx
call dword [0x4043cc]
mov edi, dword [ebp - 0x7e8]
push esi
push edi
mov dword [ebp - 0x7ec], eax
call dword [0x4043cc]
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp - 0x7e8], eax
test ecx, ecx
je 0x401fb7
test eax, eax
je 0x401fb7
push 0x40
push 0x3000
push dword [ebp - 0x674]
push 0
call ecx
mov esi, eax
test esi, esi
je 0x401fb7
push dword [ebp - 0x674]
lea eax, [ebp - 0x270]
push eax
push esi
call dword [ebp - 0x7e8]
call esi
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
call esi
push edi
call esi
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401fec
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401fec
mov esp, ebp
pop ebp
ret