Function at 0x404330
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1920
call fcn.00441cb0
mov eax, dword [0x457664]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x18e6]
push edi
push 0xe2
push 0
push eax
mov dword [ebp - 0x1920], esi
mov dword [ebp - 0x1904], 0xe44ce496
mov dword [ebp - 0x1900], 0xff46efee
mov dword [ebp - 0x18fc], 0xff46b274
mov dword [ebp - 0x18f8], 0xff46b678
mov dword [ebp - 0x18f4], 0xff46ba6c
mov dword [ebp - 0x18f0], 0xff46be61
mov dword [ebp - 0x18ec], 0x20410352
mov word [ebp - 0x18e8], 0x4607
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x17e6]
mov dword [ebp - 0x1804], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1800], 0x946efee
mov dword [ebp - 0x17fc], 0x9464474
mov dword [ebp - 0x17f8], 0x9464078
mov dword [ebp - 0x17f4], 0x9464c6c
mov dword [ebp - 0x17f0], 0x9464861
mov dword [ebp - 0x17ec], 0x9410352
mov word [ebp - 0x17e8], 0xb0f1
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x16e6]
mov dword [ebp - 0x1704], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1700], 0x946efee
mov dword [ebp - 0x16fc], 0x9464474
mov dword [ebp - 0x16f8], 0x9464078
mov dword [ebp - 0x16f4], 0x2c464c6c
mov dword [ebp - 0x16f0], 0x8e464861
mov dword [ebp - 0x16ec], 0x9410352
mov word [ebp - 0x16e8], 0xb0f1
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x15e6]
mov dword [ebp - 0x1604], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1600], 0x2046efee
mov dword [ebp - 0x15fc], 0x20466d74
mov dword [ebp - 0x15f8], 0x20466978
mov dword [ebp - 0x15f4], 0x2046f06c
mov dword [ebp - 0x15f0], 0x20466161
mov dword [ebp - 0x15ec], 0x20410352
mov word [ebp - 0x15e8], 0x99d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x14e6]
mov dword [ebp - 0x1504], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1500], 0x7f46efee
mov dword [ebp - 0x14fc], 0xa6466d74
mov dword [ebp - 0x14f8], 0xa6463678
mov dword [ebp - 0x14f4], 0xb546376c
mov dword [ebp - 0x14f0], 0xa6463e61
mov dword [ebp - 0x14ec], 0xa6410352
mov word [ebp - 0x14e8], 0x995e
call sub.VCRUNTIME140.dll_memset
push 0xe2
mov dword [ebp - 0x1404], 0xe44ce496
lea eax, [ebp - 0x13e6]
mov dword [ebp - 0x1400], 0x7f46efee
mov dword [ebp - 0x13fc], 0xa6466d74
mov dword [ebp - 0x13f8], 0xa6463678
mov dword [ebp - 0x13f4], 0xb546376c
mov dword [ebp - 0x13f0], 0xa6463e61
mov dword [ebp - 0x13ec], 0xa6410352
mov word [ebp - 0x13e8], 0x995e
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x48
mov dword [ebp - 0x1304], 0xe44ce496
lea eax, [ebp - 0x12e6]
mov dword [ebp - 0x1300], 0x2046efee
mov dword [ebp - 0x12fc], 0x20466d74
mov dword [ebp - 0x12f8], 0x3f466978
push 0xe2
push 0
push eax
mov dword [ebp - 0x12f4], 0x946656c
mov dword [ebp - 0x12f0], 0x7d468e61
mov dword [ebp - 0x12ec], 0x20410352
mov word [ebp - 0x12e8], 0x99f1
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x11e6]
mov dword [ebp - 0x1204], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1200], 0x2046efee
mov dword [ebp - 0x11fc], 0x20466d74
mov dword [ebp - 0x11f8], 0x20466978
mov dword [ebp - 0x11f4], 0x20464c6c
mov dword [ebp - 0x11f0], 0x20463e61
mov dword [ebp - 0x11ec], 0x9410352
mov word [ebp - 0x11e8], 0x46d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x10e6]
mov dword [ebp - 0x1104], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1100], 0xff46efee
mov dword [ebp - 0x10fc], 0x3f463b74
mov dword [ebp - 0x10f8], 0x20466978
mov dword [ebp - 0x10f4], 0xff46656c
mov dword [ebp - 0x10f0], 0x3f463761
mov dword [ebp - 0x10ec], 0x20410352
mov word [ebp - 0x10e8], 0x99d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0xfe6]
mov dword [ebp - 0x1004], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x1000], 0x8e46efee
mov dword [ebp - 0xffc], 0xff46eb74
mov dword [ebp - 0xff8], 0x20466978
mov dword [ebp - 0xff4], 0x30468a6c
mov dword [ebp - 0xff0], 0xb5464861
mov dword [ebp - 0xfec], 0x20410352
mov word [ebp - 0xfe8], 0xb0d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0xee6]
mov dword [ebp - 0xf04], 0xe44ce496
push 0
push eax
mov dword [ebp - 0xf00], 0xdb46efee
mov dword [ebp - 0xefc], 0xb5468274
mov dword [ebp - 0xef8], 0x7246b678
mov dword [ebp - 0xef4], 0xb546656c
mov dword [ebp - 0xef0], 0x8e464861
mov dword [ebp - 0xeec], 0x9410352
mov word [ebp - 0xee8], 0xcb87
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0xde6]
mov dword [ebp - 0xe04], 0xe44ce496
push 0
push eax
mov dword [ebp - 0xe00], 0x7646efee
mov dword [ebp - 0xdfc], 0xc346b274
mov dword [ebp - 0xdf8], 0xdb468a78
mov dword [ebp - 0xdf4], 0xdb46ba6c
mov dword [ebp - 0xdf0], 0xff463c61
mov dword [ebp - 0xdec], 0x20410352
mov word [ebp - 0xde8], 0x7ad8
call sub.VCRUNTIME140.dll_memset
add esp, 0x48
mov dword [ebp - 0xd04], 0xe44ce496
lea eax, [ebp - 0xce6]
mov dword [ebp - 0xd00], 0x7f46efee
mov dword [ebp - 0xcfc], 0xa6466174
mov dword [ebp - 0xcf8], 0xa6463678
push 0xe2
push 0
push eax
mov dword [ebp - 0xcf4], 0x2c46376c
mov dword [ebp - 0xcf0], 0x2c463e61
mov dword [ebp - 0xcec], 0xa6410352
mov word [ebp - 0xce8], 0x955e
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0xbe6]
mov dword [ebp - 0xc04], 0xe44ce496
push 0
push eax
mov dword [ebp - 0xc00], 0x3f46efee
mov dword [ebp - 0xbfc], 0x3f463274
mov dword [ebp - 0xbf8], 0xc3463b78
mov dword [ebp - 0xbf4], 0x3046866c
mov dword [ebp - 0xbf0], 0xa646f461
mov dword [ebp - 0xbec], 0x20410352
mov word [ebp - 0xbe8], 0x89d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0xae6]
mov dword [ebp - 0xb04], 0xe44ce496
push 0
push eax
mov dword [ebp - 0xb00], 0x7f46efee
mov dword [ebp - 0xafc], 0xff46b274
mov dword [ebp - 0xaf8], 0x7f46b678
mov dword [ebp - 0xaf4], 0x7246376c
mov dword [ebp - 0xaf0], 0xc3464861
mov dword [ebp - 0xaec], 0x20410352
mov word [ebp - 0xae8], 0x99d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x9e6]
mov dword [ebp - 0xa04], 0xe44ce496
push 0
push eax
mov dword [ebp - 0xa00], 0x2046efee
mov dword [ebp - 0x9fc], 0xc3466d74
mov dword [ebp - 0x9f8], 0x20466978
mov dword [ebp - 0x9f4], 0x20468a6c
mov dword [ebp - 0x9f0], 0x20469a61
mov dword [ebp - 0x9ec], 0x20410352
mov word [ebp - 0x9e8], 0x99d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x8e6]
mov dword [ebp - 0x904], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x900], 0x2046efee
mov dword [ebp - 0x8fc], 0xc3466d74
mov dword [ebp - 0x8f8], 0x20466978
mov dword [ebp - 0x8f4], 0x20468a6c
mov dword [ebp - 0x8f0], 0x20469a61
mov dword [ebp - 0x8ec], 0x20410352
mov word [ebp - 0x8e8], 0x46d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x7e6]
mov dword [ebp - 0x804], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x800], 0x7246efee
mov dword [ebp - 0x7fc], 0x7f466d74
mov dword [ebp - 0x7f8], 0x20466978
mov dword [ebp - 0x7f4], 0x20463a6c
mov dword [ebp - 0x7f0], 0x2046e761
mov dword [ebp - 0x7ec], 0x20410352
mov word [ebp - 0x7e8], 0x99d8
call sub.VCRUNTIME140.dll_memset
add esp, 0x48
mov dword [ebp - 0x704], 0xe44ce496
push 0xe2
lea eax, [ebp - 0x6e6]
mov dword [ebp - 0x700], 0x7f46efee
push 0
push eax
mov dword [ebp - 0x6fc], 0x20466d74
mov dword [ebp - 0x6f8], 0xdb463b78
mov dword [ebp - 0x6f4], 0xc346866c
mov dword [ebp - 0x6f0], 0x2c46cf61
mov dword [ebp - 0x6ec], 0x20410352
mov word [ebp - 0x6e8], 0x99d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x5e6]
mov dword [ebp - 0x604], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x600], 0x2046efee
mov dword [ebp - 0x5fc], 0xc3464474
mov dword [ebp - 0x5f8], 0x3f467678
mov dword [ebp - 0x5f4], 0x3f463a6c
mov dword [ebp - 0x5f0], 0x3f463761
mov dword [ebp - 0x5ec], 0x20410352
mov word [ebp - 0x5e8], 0xc6d8
call sub.VCRUNTIME140.dll_memset
push 0xe2
lea eax, [ebp - 0x4e6]
mov dword [ebp - 0x504], 0xe44ce496
push 0
push eax
mov dword [ebp - 0x500], 0x946efee
mov dword [ebp - 0x4fc], 0x9464474
mov dword [ebp - 0x4f8], 0x9464078
mov dword [ebp - 0x4f4], 0x2c464c6c
mov dword [ebp - 0x4f0], 0x9464861
mov dword [ebp - 0x4ec], 0x9410352
mov word [ebp - 0x4e8], 0xb0f1
call sub.VCRUNTIME140.dll_memset
push 0xee
lea eax, [ebp - 0x3f2]
mov dword [ebp - 0x404], 0xe458e3e3
push 0
push eax
mov dword [ebp - 0x400], 0x2046efee
mov dword [ebp - 0x3fc], 0x20466d74
mov dword [ebp - 0x3f8], 0x2046f778
mov word [ebp - 0x3f4], 0x652d
call sub.VCRUNTIME140.dll_memset
push 0xe6
lea eax, [ebp - 0x2ea]
mov dword [ebp - 0x304], 0xe440e48a
push 0
push eax
mov dword [ebp - 0x300], 0x2046efee
mov dword [ebp - 0x2fc], 0x2046f374
mov dword [ebp - 0x2f8], 0xbe4669e6
mov dword [ebp - 0x2f4], 0x20d8656c
mov dword [ebp - 0x2f0], 0x2046ff61
mov word [ebp - 0x2ec], 0x9dcc
call sub.VCRUNTIME140.dll_memset
push 0xf2
lea eax, [ebp - 0x1f6]
mov dword [ebp - 0x204], 0xe45ce3f7
push 0
push eax
mov dword [ebp - 0x200], 0x3f46efee
mov dword [ebp - 0x1fc], 0x3f46f374
mov word [ebp - 0x1f8], 0x69e6
call sub.VCRUNTIME140.dll_memset
add esp, 0x48
mov dword [ebp - 0x104], 0xe458e3e3
lea eax, [ebp - 0xf2]
mov dword [ebp - 0x100], 0x2046efee
mov dword [ebp - 0xfc], 0x78463374
mov dword [ebp - 0xf8], 0x2046f778
push 0xee
push 0
push eax
mov word [ebp - 0xf4], 0x8af2
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
test esi, esi
je 0x404d6c
lea eax, [ebp - 0x1904]
mov dword [ebp - 0x190c], 0
mov dword [ebp - 0x1910], eax
push 0
push 0
push 0
push eax
call fcn.004201b0
mov ebx, eax
mov dword [ebp - 0x1914], ebx
test ebx, ebx
je 0x404d84
push ebx
call fcn.0041ef70
mov dword [ebp - 0x1918], eax
mov dword [ebp - 0x1908], 0
test eax, eax
je 0x404d61
mov ecx, esi
sub ecx, ebx
mov dword [ebp - 0x191c], ecx
movzx eax, word [ebx]
movzx esi, word [ebx + ecx]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towupper]
push esi
mov di, ax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towupper]
add esp, 8
lea ebx, [ebx + 2]
cmp di, ax
jne 0x404d28
mov eax, dword [ebp - 0x1908]
inc eax
mov dword [ebp - 0x1908], eax
cmp eax, dword [ebp - 0x1918]
jae 0x404d61
mov ecx, dword [ebp - 0x191c]
jmp 0x404ce8
push dword [ebp - 0x1914]
call fcn.0041fc30
mov esi, dword [ebp - 0x190c]
mov eax, dword [ebp - 0x1910]
inc esi
add eax, 0x100
mov dword [ebp - 0x190c], esi
mov dword [ebp - 0x1910], eax
cmp esi, 0x19
jge 0x404d84
mov esi, dword [ebp - 0x1920]
jmp 0x404ca4
push dword [ebp - 0x1914]
call fcn.0041fc30
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00441849
mov esp, ebp
pop ebp
ret 4