Function at 0x410c00
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov al, 0x6c
push ebx
mov byte [ebp - 0x33], al
mov byte [ebp - 0x30], al
mov al, 0x70
push esi
mov esi, dword [0x409044]
mov byte [ebp - 0x2f], al
mov byte [ebp - 0x29], al
mov al, 0x73
mov byte [ebp - 0x28], al
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x1a], al
mov byte [ebp - 0x14], al
mov byte [ebp - 0xb], al
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x3c]
push edi
mov cl, 0x65
mov bl, 0x74
mov dl, 0x6f
push eax
push 0x40a030
mov byte [ebp - 0x3c], 0x43
mov byte [ebp - 0x3b], 0x72
mov byte [ebp - 0x3a], cl
mov byte [ebp - 0x39], 0x61
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x37], cl
mov byte [ebp - 0x36], 0x54
mov byte [ebp - 0x35], dl
mov byte [ebp - 0x34], dl
mov byte [ebp - 0x32], 0x68
mov byte [ebp - 0x31], cl
mov byte [ebp - 0x2e], 0x33
mov byte [ebp - 0x2d], 0x32
mov byte [ebp - 0x2c], 0x53
mov byte [ebp - 0x2b], 0x6e
mov byte [ebp - 0x2a], 0x61
mov byte [ebp - 0x27], 0x68
mov byte [ebp - 0x26], dl
mov byte [ebp - 0x25], bl
mov byte [ebp - 0x24], 0
mov byte [ebp - 0x20], 0x50
mov byte [ebp - 0x1f], 0x72
mov byte [ebp - 0x1e], dl
mov byte [ebp - 0x1d], 0x63
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x19], 0x33
mov byte [ebp - 0x18], 0x32
mov byte [ebp - 0x17], 0x46
mov byte [ebp - 0x16], 0x69
mov byte [ebp - 0x15], 0x72
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], 0
mov byte [ebp - 0x10], 0x50
mov byte [ebp - 0xf], 0x72
mov byte [ebp - 0xe], dl
mov byte [ebp - 0xd], 0x63
mov byte [ebp - 0xc], cl
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x32
mov byte [ebp - 7], 0x4e
mov byte [ebp - 6], cl
mov byte [ebp - 5], 0x78
mov byte [ebp - 4], bl
mov byte [ebp - 3], 0
call esi
mov edi, dword [0x40907c]
push eax
call edi
lea ecx, [ebp - 0x20]
dec eax
push ecx
push 0x40a030
mov dword [0x40ccf0], eax
call esi
push eax
call edi
dec eax
mov dword [0x40ccf4], eax
lea edx, [ebp - 0x10]
push edx
push 0x40a030
call esi
push eax
call edi
dec eax
mov dword [0x40ccf8], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, edx
mov eax, eax
nop
mov edx, edx
nop
mov ebx, ebx
nop
pushal
pushfd
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
movzx eax, byte [eax + 0x68]
cmp eax, 0x70
jne 0x410d4f
mov eax, 0
mov dword [eax], eax
popfd
popal
mov ecx, ecx
mov edx, edx
nop
nop
mov ecx, ecx
nop
mov edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [0x40ccf0]
test eax, eax
je 0x410d79
push 0
push 2
call eax
mov esi, eax
jmp 0x410d7c
mov esi, dword [ebp + 8]
cmp esi, 0xffffffff
je 0x410df5
lea eax, [ebp - 0x164]
mov dword [ebp - 0x164], 0x128
push eax
push esi
call dword [0x40ccf4]
test eax, eax
je 0x410dee
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x140]
push ecx
push edi
call fcn.00411b40
add esp, 8
test eax, eax
je 0x410dda
lea edx, [ebp - 0x164]
push edx
push esi
call dword [0x40ccf8]
test eax, eax
je 0x410dee
lea eax, [ebp - 0x140]
push eax
push edi
call fcn.00411b40
add esp, 8
test eax, eax
jne 0x410db4
push esi
call dword [fcn.00409080]
mov eax, dword [ebp - 0x15c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call dword [fcn.00409080]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret