Function at 0x41136b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x432683
call fcn.00425db8
sub esp, 0x3a8
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 0x20], esi
push 1
lea ecx, [ebp - 0x6c]
pop ebx
mov dword [ebp - 4], ebx
call fcn.004118fc
lea eax, [ebp + 0xc]
push esi
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 2
mov dword [ebp - 0x94], 0x4346ac
mov dword [ebp - 0x74], 0x4346a4
call fcn.004028fa
push esi
push esi
push 3
push 0x80
push ebx
lea eax, [ebp - 0x94]
push SysReAllocStringLen
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 3
call fcn.004119a0
lea ecx, [ebp - 0x94]
mov edi, eax
mov byte [ebp - 4], 2
call fcn.00401ced
cmp edi, esi
je 0x411442
mov edi, dword [ebp + 8]
lea eax, [ebp - 0xd]
push esi
push eax
push 0x440144
mov ecx, edi
mov dword [edi], 0x4344bc
mov dword [edi + 0x20], 0x4344b4
call fcn.00403beb
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x6c], 0x4346a0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.00411f8c
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.00401ced
and byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.00401ced
mov eax, edi
jmp 0x4118e8
push esi
push esi
push 0x4e
lea ecx, [ebp - 0x6c]
call fcn.00411ae2
and byte [ebp - 0xe4], 0
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0xe3]
push 0x27
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xe4]
lea ecx, [ebp - 0x6c]
push eax
call fcn.00418f67
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x94]
call fcn.004038c4
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
push 0x43b9c4
and ecx, eax
mov byte [ebp - 4], 5
push ecx
call fcn.00418f44
pop ecx
mov byte [ebp - 0xd], al
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x94]
call fcn.00401ced
cmp byte [ebp - 0xd], 0
push esi
je 0x4114c8
push 2
push 0xffffffffffffffb0
jmp 0x4114d6
push esi
push esi
lea ecx, [ebp - 0x6c]
call fcn.00411ae2
push esi
push esi
push 0x40
lea ecx, [ebp - 0x6c]
call fcn.00411ae2
lea eax, [ebp - 0x134]
push 0x50
push eax
lea ecx, [ebp - 0x6c]
call fcn.00418fea
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0xe]
push esi
push eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 0x4344bc
mov dword [ebp - 0x9c], 0x4344b4
call fcn.004025bb
movzx eax, word [ebp - 0x24]
push eax
mov byte [ebp - 4], 6
movzx eax, word [ebp - 0x26]
push eax
movzx eax, word [ebp - 0x28]
push eax
movzx eax, word [ebp - 0x2a]
push eax
movzx eax, word [ebp - 0x2e]
push eax
movzx eax, word [ebp - 0x30]
push eax
lea eax, [ebp - 0xbc]
push 0x43b988
push eax
call fcn.004178e9
add esp, 0x20
lea eax, [ebp - 0xbc]
push 0x43b984
push eax
push 0x43b960
lea eax, [ebp - 0xe9]
push 5
push eax
sub esp, 0x28
lea eax, [ebp - 0xd]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x43b950
call fcn.004038c4
lea eax, [ebp - 0x314]
push eax
call fcn.0041118a
add esp, 0x34
push eax
lea eax, [ebp - 0xee]
push 5
push eax
sub esp, 0x28
lea eax, [ebp - 0x16]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x43b944
mov byte [ebp - 4], 7
call fcn.004038c4
lea eax, [ebp - 0x2c4]
push eax
call fcn.0041118a
add esp, 0x34
push eax
lea eax, [ebp - 0xf4]
push 6
push eax
sub esp, 0x28
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x19]
push ebx
push eax
push 0x43b938
call fcn.004038c4
lea eax, [ebp - 0x274]
push eax
call fcn.0041118a
add esp, 0x34
push eax
push 0x10
pop esi
lea eax, [ebp - 0x104]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x17]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x43b928
mov byte [ebp - 4], 9
call fcn.004038c4
lea eax, [ebp - 0x224]
push eax
call fcn.0041118a
add esp, 0x34
push eax
lea eax, [ebp - 0x114]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x1b]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x43b918
mov byte [ebp - 4], 0xa
call fcn.004038c4
lea eax, [ebp - 0x1d4]
push eax
call fcn.0041118a
add esp, 0x34
push eax
lea eax, [ebp - 0x124]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x1a]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x43b8e0
mov byte [ebp - 4], 0xb
call fcn.004038c4
lea eax, [ebp - 0x184]
push eax
call fcn.0041118a
add esp, 0x34
push eax
lea eax, [ebp - 0x134]
push esi
push eax
sub esp, 0x28
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
push eax
push 0x43b8fc
mov byte [ebp - 4], 0xc
call fcn.004038c4
lea eax, [ebp - 0x29c]
push eax
call fcn.0041118a
add esp, 0x34
mov esi, eax
lea eax, [ebp - 0x15]
push ebx
push eax
push 0x43b914
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0xd
call fcn.004038c4
push esi
push eax
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 0xe
push eax
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x2ec]
push eax
mov byte [ebp - 4], 0xf
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x1fc]
push eax
mov byte [ebp - 4], 0x10
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x33c]
push eax
mov byte [ebp - 4], 0x11
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x1ac]
push eax
mov byte [ebp - 4], 0x12
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x3b4]
push eax
mov byte [ebp - 4], 0x13
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0x14
call fcn.0041906d
add esp, 0xc
push eax
lea eax, [ebp - 0x364]
push eax
mov byte [ebp - 4], 0x15
call fcn.00418dc0
add esp, 0xc
push eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x16
call fcn.0041906d
add esp, 0xc
push eax
mov byte [ebp - 4], 0x17
push dword [ebp + 8]
call fcn.00418dc0
add esp, 0xc
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x16
call fcn.00401ced
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x15
call fcn.00401ced
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x14
call fcn.00401ced
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x13
call fcn.00401ced
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x12
call fcn.00401ced
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x11
call fcn.00401ced
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x10
call fcn.00401ced
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 0xf
call fcn.00401ced
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0xe
call fcn.00401ced
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0xd
call fcn.00401ced
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], 0xc
call fcn.00401ced
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xb
call fcn.00401ced
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0xa
call fcn.00401ced
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 9
call fcn.00401ced
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 8
call fcn.00401ced
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 7
call fcn.00401ced
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 6
call fcn.00401ced
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 2
call fcn.00401ced
mov dword [ebp - 0x6c], 0x4346a0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x18
call fcn.00411f8c
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.00401ced
and byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.00401ced
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret