Function at 0x441602
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x128
mov eax, 0x490cf1
call fcn.0045a8ee
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x15]
xor ebx, ebx
mov dword [ebp - 0x68], 0x66385441
push ebx
sub esp, 0xc
mov dword [ebp - 0x14], ebx
mov ecx, esp
mov dword [ebp - 0x64], 0x305a6949
lea edx, [ebp - 0x1a]
mov dword [ebp - 0x60], 0x3249785a
lea esi, [ebp - 0x68]
mov dword [ebp - 0x5c], 0x7638534c
push eax
push edx
push esi
mov dword [ebp - 0x58], 0x4849444d
mov dword [ebp - 0x54], 0x3739434e
mov dword [ebp - 0x50], 0x70634145
mov dword [ebp - 0x4c], 0x4859424f
mov dword [ebp - 0x48], 0x3038445a
mov dword [ebp - 0x44], 0x5a776949
mov dword [ebp - 0x40], 0x76345149
mov dword [ebp - 0x3c], 0x785a574e
mov dword [ebp - 0x38], 0x4359484a
mov dword [ebp - 0x34], 0x79395242
mov dword [ebp - 0x30], 0x576b7863
mov dword [ebp - 0x2c], 0x30345241
mov dword [ebp - 0x28], 0x76517866
mov dword [ebp - 0x24], 0x53776a48
mov dword [ebp - 0x20], 0x41414141
mov word [ebp - 0x1c], 0x414b
mov dword [ebp - 0x118], 0x366b7949
mov dword [ebp - 0x114], 0x75517a49
mov dword [ebp - 0x110], 0x4f414859
mov dword [ebp - 0x10c], 0x79427765
mov dword [ebp - 0x108], 0x5067534d
mov dword [ebp - 0x104], 0x64497743
mov dword [ebp - 0x100], 0x70346844
mov dword [ebp - 0xfc], 0x2f63414a
mov dword [ebp - 0xf8], 0x38514742
mov dword [ebp - 0xf4], 0x6f68544c
mov dword [ebp - 0xf0], 0x50307a4a
mov dword [ebp - 0xec], 0x76567866
mov dword [ebp - 0xe8], 0x4f737849
mov dword [ebp - 0xe4], 0x4773774b
mov dword [ebp - 0xe0], 0x6741584a
mov dword [ebp - 0xdc], 0x49636d4b
mov dword [ebp - 0xd8], 0x71784442
mov dword [ebp - 0xd4], 0x68306a4c
mov dword [ebp - 0xd0], 0x43737841
mov dword [ebp - 0xcc], 0x4a594249
mov dword [ebp - 0xc8], 0x46415342
mov dword [ebp - 0xc4], 0x335a4442
mov dword [ebp - 0xc0], 0x77515859
mov dword [ebp - 0xbc], 0x75594347
mov dword [ebp - 0xb8], 0x70514263
mov dword [ebp - 0xb4], 0x5338444b
mov dword [ebp - 0xb0], 0x3045514c
mov dword [ebp - 0xac], 0x76494444
mov dword [ebp - 0xa8], 0x7073514a
mov dword [ebp - 0xa4], 0x376b4450
mov dword [ebp - 0xa0], 0x72555849
mov dword [ebp - 0x9c], 0x5455694f
mov dword [ebp - 0x98], 0x32417742
mov dword [ebp - 0x94], 0x4630534a
mov dword [ebp - 0x90], 0x4e346744
mov dword [ebp - 0x8c], 0x53386750
mov dword [ebp - 0x88], 0x69416e63
mov dword [ebp - 0x84], 0x54594341
mov dword [ebp - 0x80], 0x71304441
mov dword [ebp - 0x7c], 0x47344366
mov dword [ebp - 0x78], 0x65554845
mov dword [ebp - 0x74], 0x30424348
mov dword [ebp - 0x70], 0x41416745
mov word [ebp - 0x6c], 0x4841
mov byte [ebp - 0x6a], 0x63
call fcn.0040a169
lea eax, [ebp - 0x134]
push eax
call fcn.0042a0a8
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.004103c8
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0x15]
mov ecx, esp
lea edx, [ebp - 0x69]
lea esi, [ebp - 0x118]
push eax
push edx
push esi
call fcn.0040a169
lea eax, [ebp - 0x128]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004103eb
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.00455078
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.00455078
test esi, esi
je 0x4418eb
lea eax, [ebp - 0x14]
push eax
push edi
call esi
test eax, eax
je 0x4418ee
mov eax, dword [ebp - 0x14]
call fcn.0045a89d
ret