Function at 0x41dc03
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34c
push esi
xor eax, eax
push 0x1fe
push eax
lea ecx, [ebp - 0x34a]
push ecx
mov word [ebp - 0x34c], ax
call fcn.0042e0f3
xor eax, eax
push 0x36
push eax
lea ecx, [ebp - 0xc2]
push ecx
mov dword [ebp - 0xcc], 0x65002e
mov dword [ebp - 0xc8], 0x650078
mov word [ebp - 0xc4], ax
call fcn.0042e0f3
xor ecx, ecx
push 0x2e
push ecx
lea edx, [ebp - 0x6e]
push edx
mov dword [ebp - 0x80], 0x460020
mov dword [ebp - 0x7c], 0x720069
mov dword [ebp - 0x78], 0x660065
mov dword [ebp - 0x74], 0x78006f
mov word [ebp - 0x70], cx
call fcn.0042e0f3
xor eax, eax
push 0x7f
push eax
lea edx, [ebp - 0x14b]
push edx
mov dword [ebp - 0x40], 0x720050
mov dword [ebp - 0x3c], 0x67006f
mov dword [ebp - 0x38], 0x610072
mov dword [ebp - 0x34], 0x20006d
mov dword [ebp - 0x30], 0x690046
mov dword [ebp - 0x2c], 0x65006c
mov dword [ebp - 0x28], 0x73
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
mov byte [ebp - 0x14c], al
call fcn.0042e0f3
lea eax, [ebp - 0x14c]
push eax
call fcn.0040af03
mov esi, dword [ebp + 8]
push 0
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x34c]
push edx
push esi
call fcn.00417443
lea eax, [ebp - 0x14c]
add esp, 0x44
push eax
call fcn.0040b303
add esp, 4
push 1
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x34c]
push edx
call fcn.0042e293
add esp, 4
lea eax, [ebp + eax*2 - 0x34c]
push eax
push esi
call fcn.00417443
mov dword [ebp - 0x8c], 0xafb5aeea
push 0
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x34c]
push edx
call fcn.0042e403
push 0
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x34c]
mov eax, 0x5c
push edx
mov word [ebp - 0x80], ax
call fcn.0042e403
push 0
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x34c]
push ecx
call fcn.0042e403
lea edx, [ebp - 0x8c]
push edx
push 0
push 0x15
lea eax, [ebp - 0x34c]
push eax
push esi
call fcn.00428153
add esp, 0x48
test eax, eax
jne 0x41de78
lea ecx, [ebp - 0x346]
push pe_nt_image_headers32
push ecx
call fcn.0042e0a3
lea eax, [ebp - 0x40]
mov edx, 0x20
push eax
mov word [ebp - 0x80], dx
call fcn.0042e293
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x346]
push eax
call fcn.0042e073
add esp, 0x18
push 1
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x34c]
push edx
call fcn.0042e293
add esp, 4
lea eax, [ebp + eax*2 - 0x34c]
push eax
push esi
call fcn.00417443
push 0
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x34c]
push edx
call fcn.0042e403
push 0
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x34c]
mov eax, 0x5c
push edx
mov word [ebp - 0x80], ax
call fcn.0042e403
push 0
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x34c]
push ecx
call fcn.0042e403
lea edx, [ebp - 0x8c]
push edx
push 0
push 0x15
lea eax, [ebp - 0x34c]
push eax
push esi
call fcn.00428153
add esp, 0x48
test eax, eax
jne 0x41de78
pop esi
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x41dea0
lea ecx, [ebp - 0x34c]
push ecx
call fcn.0042e293
lea edx, [eax + eax + 2]
push edx
lea eax, [ebp - 0x34c]
push eax
push esi
call fcn.0042e073
add esp, 0x10
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret