Function at 0x41cda0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e21a6
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x651ea8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
call fcn.004beff0
lea ecx, [ebx + 0x1c]
mov dword [ebp - 4], 0
call fcn.004bf110
lea eax, [ebx + 0x20]
mov dword [eax], vtable.IAbstractApplication.0
mov dword [0x6d7a70], eax
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x60]
mov dword [ebx], vtable.CPythonApplication.2.0
mov dword [ebx + 0x1c], vtable.CPythonApplication.1.0
mov dword [eax], vtable.CPythonApplication.0
call fcn.004a64b0
lea ecx, [ebx + 0x7c]
mov byte [ebp - 4], 3
call fcn.004bf5b0
lea ecx, [ebx + 0xe8]
mov byte [ebp - 4], 4
call fcn.005438b0
lea ecx, [ebx + 0x15c]
mov byte [ebp - 4], 5
call fcn.0050a730
lea ecx, [ebx + 0x180]
mov byte [ebp - 4], 6
call fcn.0050b8f0
lea ecx, [ebx + 0x1b8]
mov byte [ebp - 4], 7
call fcn.0050f050
lea ecx, [ebx + 0x1cc]
mov byte [ebp - 4], 8
call fcn.00503e10
lea eax, [ebx + 0x1f4]
mov dword [eax], vtable.CMovieMan.0
push 0
mov dword [0x6da230], eax
mov byte [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebx + 0x21c]
mov byte [ebp - 4], 0xa
call fcn.004e5c50
lea ecx, [ebx + 0x2bc]
mov byte [ebp - 4], 0xb
call fcn.00492550
lea ecx, [ebx + 0x2e8]
mov byte [ebp - 4], 0xc
call fcn.00428f80
lea ecx, [ebx + 0x720]
mov byte [ebp - 4], 0xd
call fcn.0048e1e0
lea ecx, [ebx + 0x7a8]
mov byte [ebp - 4], 0xe
call fcn.004e87d0
lea ecx, [ebx + 0x848]
mov byte [ebp - 4], 0xf
call fcn.00451ad0
lea ecx, [ebx + 0x81a0]
mov byte [ebp - 4], 0x10
call fcn.0046c5f0
mov byte [ebp - 4], 0x11
lea ecx, [ebx + 0x29a88]
call fcn.00442080
lea ecx, [ebx + 0x2a2b4]
mov byte [ebp - 4], 0x12
call fcn.004444a0
lea ecx, [ebx + 0x2a3c0]
mov byte [ebp - 4], 0x13
call fcn.00478020
lea ecx, [ebx + 0x2ca28]
call fcn.0043d540
lea ecx, [ebx + 0x2d710]
mov byte [ebp - 4], 0x15
call fcn.00431d20
lea ecx, [ebx + 0x2d7e4]
mov byte [ebp - 4], 0x16
call fcn.0048d730
lea ecx, [ebx + 0x2d834]
mov byte [ebp - 4], 0x17
call fcn.00468860
lea ecx, [ebx + 0x2d854]
mov byte [ebp - 4], 0x18
call fcn.0044d5a0
lea ecx, [ebx + 0x2e48c]
mov byte [ebp - 4], 0x19
call fcn.0043a6d0
lea edi, [ebx + 0x2e50c]
mov byte [ebp - 4], 0x1a
mov ecx, edi
call fcn.00424350
lea ecx, [ebx + 0x2fb18]
mov byte [ebp - 4], 0x1b
call fcn.0047e4c0
lea ecx, [ebx + 0x2fb64]
mov byte [ebp - 4], 0x1c
call fcn.00547490
lea ecx, [ebx + 0x2fbac]
call fcn.004756d0
lea ecx, [ebx + 0x2fbbc]
mov byte [ebp - 4], 0x1e
call fcn.00447820
lea ecx, [ebx + 0x2fbd4]
mov byte [ebp - 4], 0x1f
call fcn.00477150
lea ecx, [ebx + 0x2fbf4]
call fcn.004767c0
lea ecx, [ebx + 0x2fc14]
mov byte [ebp - 4], 0x21
call fcn.0043e8f0
lea ecx, [ebx + 0x2fcac]
mov byte [ebp - 4], 0x22
call fcn.00418ac0
lea ecx, [ebx + 0x2fce8]
mov byte [ebp - 4], 0x23
call fcn.00407b20
lea ecx, [ebx + 0x2fd94]
mov byte [ebp - 4], 0x24
call fcn.00409460
lea ecx, [ebx + 0x30130]
mov byte [ebp - 4], 0x25
call fcn.00406810
lea ecx, [ebx + 0x30204]
mov byte [ebp - 4], 0x26
call fcn.004c0470
lea ecx, [ebx + 0x30218]
mov byte [ebp - 4], 0x27
call fcn.004c1c90
lea ecx, [ebx + 0x30220]
mov byte [ebp - 4], 0x28
call fcn.004883d0
mov byte [ebp - 4], 0x29
lea esi, [ebx + 0x32a30]
mov dword [ebx + 0x32918], 0
xorps xmm0, xmm0
mov dword [ebx + 0x3292c], 0
mov dword [ebx + 0x32944], 0
mov dword [ebx + 0x32954], 0
mov dword [ebx + 0x32958], 0
mov dword [ebx + 0x3295c], 0
mov dword [ebx + 0x32960], 0
mov dword [ebx + 0x32964], 0
mov dword [ebx + 0x32968], 0
mov dword [ebx + 0x3296c], 0
mov dword [ebx + 0x32970], 0
mov dword [ebx + 0x32974], 0
mov dword [ebx + 0x32978], 0
mov dword [ebx + 0x3297c], 0
mov dword [ebx + 0x32980], 0
mov dword [ebx + 0x32984], 0
mov dword [ebx + 0x32988], 0
mov dword [ebx + 0x3298c], 0
mov dword [ebx + 0x32990], 0
mov dword [ebx + 0x32994], 0
mov dword [ebx + 0x32998], 0
mov dword [ebx + 0x3299c], 0
mov dword [ebx + 0x329a0], 0
mov dword [ebx + 0x329b0], 0
mov dword [ebx + 0x329b4], 0
mov dword [ebx + 0x329b8], 0
mov dword [ebx + 0x329bc], 0
mov dword [ebx + 0x329c0], 0
mov dword [ebx + 0x329c4], 0
mov dword [ebx + 0x329c8], 0
mov dword [ebx + 0x329cc], 0
mov dword [ebx + 0x329d0], 0
mov dword [ebx + 0x329ec], 0
mov dword [ebx + 0x329f0], 0
mov dword [ebx + 0x329f4], 0
mov dword [ebx + 0x329f8], 0
mov dword [ebx + 0x329fc], 0
mov dword [ebx + 0x32a00], 0
mov dword [ebx + 0x32a1c], 0
mov dword [ebx + 0x32a20], 0
mov dword [ebx + 0x32a24], 0
mov dword [ebx + 0x32a28], 0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0040f8e0
mov dword [esi], eax
mov dword [ebx + 0x32a3c], 1
mov byte [ebx + 0x32a40], 0
mov dword [ebx + 0x32a44], 0
mov word [ebx + 0x32a48], 0
mov dword [ebx + 0x32a5c], 0
mov dword [ebx + 0x32a60], 0xf
mov byte [ebx + 0x32a4c], 0
mov byte [ebp - 4], 0x2b
call fcn.004a8770
mov ecx, dword [0x6da220]
call fcn.0043d500
mov dword [ebx + 0x3293c], 0x320
mov dword [ebx + 0x32940], 0x258
mov dword [0x6d7efc], ebx
mov dword [ebx + 0x32a6c], 0
mov dword [ebp - 0x20], 0
movq xmm0, qword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
unpcklps xmm0, xmm0
movq qword [ebx + 0x3291c], xmm0
mov dword [ebx + 0x32924], eax
call fcn.004a6640
mov dword [ebx + 0x32948], eax
mov dword [ebx + 0x3294c], 0
mov dword [ebx + 0x32950], 0
mov dword [ebx + 0x32a64], 0
mov dword [ebx + 0x32928], 0x3c
mov word [ebx + 0x32a68], 1
mov dword [ebx + 0x329d4], 0
mov dword [ebx + 0x329d8], 0
mov dword [ebx + 0x329dc], 0
mov dword [ebx + 0x32a08], 0
mov dword [ebx + 0x32a14], 0
mov dword [ebx + 0x32a18], 0
mov dword [ebx + 0x32a0c], 0
mov dword [ebx + 0x32a10], 0
mov dword [ebx + 0x178], edi
mov dword [ebx + 0x32a7c], 0
mov dword [ebx + 0x32a80], 0
mov dword [ebx + 0x32a04], 0
mov dword [ebx + 0x329e0], 0x3fc00000
mov dword [ebx + 0x329e4], 0x3fc00000
mov dword [ebx + 0x329e8], 0x3d4ccccd
mov dword [ebx + 0x329a4], 0
mov dword [ebx + 0x329a8], 0
mov dword [ebx + 0x329ac], 0
mov dword [ebx + 0x32a78], 0xffffffff
mov ecx, dword [0x6da20c]
push 0x65
call fcn.004b6130
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret