Function at 0x41b5b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x40c
mov eax, dword [0x464504]
mov ebp, dword [esp + 0x438]
mov ecx, dword [0x45d9b8]
mov edx, esp
movzx esi, word [esp + 0x434]
mov edi, dword [esp + 0x424]
mov dword [0x464504], edx
mov dword [esp], eax
mov dword [esp + 4], str.OmcObjLoader.LinkExternalSymbol
mov dword [ebp + 8], ecx
movsd xmm0, qword [0x45d9b0]
movsd qword [ebp], xmm0
mov ebx, dword [0x46047c]
test ebx, ebx
je 0x41b627
nop dword [eax + eax]
lea eax, [ebx + 0x64]
push edi
push eax
call fcn.00401c40
add esp, 8
test eax, eax
je 0x41b647
mov ebx, dword [ebx]
test ebx, ebx
jne 0x41b610
push str.SYSTEM
push edi
call fcn.00401c40
add esp, 8
test eax, eax
je 0x41b708
xor ebx, ebx
cmp dword [ebp], 0
jne 0x41b684
jmp 0x41b66e
movzx eax, si
push ebp
push eax
push dword [esp + 0x430]
mov eax, dword [esp + 0x438]
push dword [eax + 0x14]
push ebx
call fcn.0041bc20
add esp, 0x14
mov bl, 1
cmp dword [ebp], 0
jne 0x41b684
push 0x43fdf5
push edi
call fcn.00401c40
add esp, 8
test eax, eax
je 0x41b861
test bl, bl
mov ebx, dword [esp + 0x428]
jne 0x41b960
mov al, byte [edi]
test al, al
je 0x41b842
cmp byte [ebx], 0
je 0x41b8a3
lea esi, [esp + 0x108]
push 0x201
push esi
push edi
call fcn.00401d60
add esp, 0xc
push 0x201
push esi
push 0x43fe10
call fcn.00401f00
add esp, 0xc
push 0x201
push esi
push ebx
call fcn.00401f00
add esp, 0xc
mov eax, dword [0x45d9ac]
mov eax, dword [eax - 4]
mov ebx, dword [eax - 0x1c]
push esi
call fcn.00401c20
add esp, 4
inc eax
push dword [esp + 0x43c]
push ebp
push eax
push esi
push dword [0x45d9ac]
jmp 0x41b92b
push str.dlink
mov ebx, dword [esp + 0x42c]
push ebx
call fcn.00401c40
add esp, 8
test eax, eax
je 0x41b897
push str.REGMOD
push ebx
call fcn.00401c40
add esp, 8
test eax, eax
je 0x41b8c3
push str.TRAP
push ebx
call fcn.00401c40
add esp, 8
test eax, eax
jne 0x41b693
movzx ecx, si
mov esi, dword [esp + 0x43c]
lea ebx, [esp + 0x30c]
mov byte [esp + 0x11a], 0
mov word [esp + 0x118], 0x7061
mov dword [esp + 0x114], 0x72546d65
mov dword [esp + 0x110], 0x74737953
mov dword [esp + 0x10c], 0x5f5f7265
mov byte [esp + 0x312], 0
mov word [esp + 0x310], 0x7265
mov byte [esp + 0x12], 0
mov word [esp + 0x10], 0x7061
mov dword [esp + 0xc], 0x72546d65
mov dword [esp + 0x108], 0x6e6e7552
mov dword [esp + 0x30c], 0x6e6e7552
mov dword [esp + 8], 0x74737953
lea edx, [esp + 8]
push esi
push ebp
push ecx
push dword [esp + 0x43c]
push dword [esp + 0x43c]
push edx
push ebx
lea eax, [esp + 0x124]
push eax
mov ebx, dword [esp + 0x448]
call fcn.0041b5b0
add esp, 0x20
mov eax, dword [ebp]
mov dword [0x45d9c0], eax
mov dword [ebp], 0
mov eax, dword [0x45d9ac]
mov ecx, dword [eax - 4]
push esi
push ebp
push 0xd
push str.SYSTEM__TRAP
push eax
call dword [ecx - 0x1c]
add esp, 0x14
mov eax, dword [ebp]
mov dword [0x45d9c4], eax
mov dword [ebp], 0x41c0f0
jmp 0x41b960
mov eax, dword [0x45d9ac]
mov ecx, dword [eax - 4]
push dword [esp + 0x43c]
push ebp
push pe_nt_image_headers32
push ebx
push eax
call dword [ecx - 0x1c]
jmp 0x41b934
push 0x43fdfc
mov esi, dword [esp + 0x42c]
push esi
call fcn.00401c40
add esp, 8
test eax, eax
je 0x41b8cf
push 0x43fe08
push esi
call fcn.00401c40
add esp, 8
test eax, eax
jne 0x41b684
mov ebx, dword [esp + 0x428]
mov dword [ebp], 0x45d9bc
jmp 0x41b960
cmp al, 0x5f
jne 0x41b8dd
mov eax, dword [0x45d9ac]
mov ecx, dword [eax - 4]
push dword [esp + 0x43c]
push ebp
push pe_nt_image_headers32
push edi
push eax
call dword [ecx - 0x1c]
jmp 0x41b934
mov dword [ebp], 0x41c0a0
jmp 0x41b960
mov dword [ebp], 0x41c150
mov ebx, esi
jmp 0x41b960
lea esi, [esp + 0x108]
push 0x101
push esi
push 0x43fe0e
call fcn.00401d60
add esp, 0xc
push 0x101
push esi
push edi
call fcn.00401f00
add esp, 0xc
mov eax, dword [0x45d9ac]
mov eax, dword [eax - 4]
mov ebx, dword [eax - 0x1c]
push esi
call fcn.00401c20
add esp, 4
inc eax
push dword [esp + 0x43c]
push ebp
push eax
push esi
push dword [0x45d9ac]
call ebx
mov ebx, dword [esp + 0x43c]
add esp, 0x14
cmp dword [ebp], 0
jne 0x41b960
mov eax, dword [0x45d9ac]
mov ecx, dword [eax - 4]
push dword [esp + 0x43c]
push ebp
push pe_nt_image_headers32
push dword [esp + 0x42c]
push eax
call dword [ecx - 0x1c]
add esp, 0x14
cmp dword [ebp], 0
mov eax, dword [0x45ea80]
jne 0x41b984
test eax, eax
jle 0x41b984
push 0xb
push str._Unmapped
call dword [0x45f304]
add esp, 8
mov eax, dword [0x45ea80]
test eax, eax
jle 0x41ba31
cmp eax, 2
jg 0x41b99c
mov eax, dword [ebp]
test eax, eax
jne 0x41ba31
push 0xa
push str.external
call dword [0x45f304]
add esp, 8
push pe_nt_image_headers32
push dword [esp + 0x424]
call dword [0x45f304]
add esp, 8
push 2
push 0x43fe28
call dword [0x45ea7c]
add esp, 8
push dword [ebp]
call dword [0x45ea74]
add esp, 4
push 3
push 0x43fe2c
call dword [0x45f304]
add esp, 8
push pe_nt_image_headers32
push edi
call dword [0x45f304]
add esp, 8
push 2
push 0x43fe2f
call dword [0x45f304]
add esp, 8
push pe_nt_image_headers32
push ebx
call dword [0x45f304]
add esp, 8
push 2
push 0x43fe31
call dword [0x45f304]
add esp, 8
call dword [0x45ea6c]
mov eax, dword [esp]
mov dword [0x464504], eax
add esp, 0x40c
pop esi
pop edi
pop ebx
pop ebp
ret