Function at 0x41ef70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
mov eax, dword [ebp + 0x14]
mov ebx, ecx
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 8], edx
mov edx, dword [ebp + 8]
mov esi, dword [ebp + 0x20]
mov byte [esp + 0x1c], 0x30
mov dword [esp + 0x18], 0x30303030
mov dword [esp + 0x14], 0x30303030
mov edi, dword [ebx + 0x14]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x54], ecx
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x58], esi
mov dword [esp + 0x28], edx
mov dword [esp + 4], edi
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ecx
test eax, eax
je 0x41f183
mov edx, edi
mov edi, dword [ebp + 0x10]
test ecx, ecx
mov ecx, 9
cmovne ecx, edx
test ecx, ecx
mov dword [esp + 0xc], ecx
je 0x41f18e
xor edx, edx
div edi
add al, 0x30
mov ecx, edx
mov edx, 0xcccccccd
mov byte [esp + 0x14], al
mov eax, edi
mov dword [esp], ecx
mul edx
test ecx, ecx
je 0x41f1ac
mov ecx, dword [esp + 0xc]
shr edx, 3
cmp ecx, 1
je 0x41f168
cmp edi, 0xa
jb 0x41f59a
mov eax, dword [esp]
mov ecx, edx
xor edx, edx
div ecx
mov ecx, 0x51eb851f
add al, 0x30
mov byte [esp + 0x15], al
mov eax, edi
mov edi, edx
mul ecx
test edi, edi
je 0x41f22d
mov ecx, dword [esp + 0xc]
shr edx, 5
mov dword [esp], edi
cmp ecx, 2
je 0x41f168
mov ecx, dword [ebp + 0x10]
cmp ecx, 0x64
jb 0x41f59a
mov eax, dword [esp]
mov edi, edx
xor edx, edx
div edi
add al, 0x30
mov edi, edx
mov byte [esp + 0x16], al
mov eax, ecx
mov ecx, 0x10624dd3
mul ecx
test edi, edi
je 0x41f25d
mov ecx, dword [esp + 0xc]
shr edx, 6
mov dword [esp], edi
cmp ecx, 3
je 0x41f168
mov ecx, dword [ebp + 0x10]
cmp ecx, 0x3e8
jb 0x41f59a
mov eax, dword [esp]
mov edi, edx
xor edx, edx
div edi
add al, 0x30
mov edi, edx
mov byte [esp + 0x17], al
mov eax, ecx
mov ecx, 0xd1b71759
mul ecx
test edi, edi
je 0x41f267
mov ecx, dword [esp + 0xc]
shr edx, 0xd
mov dword [esp], edi
cmp ecx, 4
je 0x41f168
mov ecx, dword [ebp + 0x10]
cmp ecx, 0x2710
jb 0x41f59a
mov eax, dword [esp]
mov edi, edx
xor edx, edx
div edi
add al, 0x30
mov edi, edx
mov byte [esp + 0x18], al
mov eax, ecx
mov ecx, 0xa7c5ac5
shr eax, 5
mul ecx
test edi, edi
je 0x41f271
mov ecx, dword [esp + 0xc]
shr edx, 7
mov dword [esp], edi
cmp ecx, 5
je 0x41f168
mov ecx, dword [ebp + 0x10]
cmp ecx, 0x186a0
jb 0x41f59a
mov eax, dword [esp]
mov edi, edx
xor edx, edx
div edi
add al, 0x30
mov edi, edx
mov byte [esp + 0x19], al
mov eax, ecx
mov ecx, 0x431bde83
mul ecx
test edi, edi
je 0x41f27b
mov ecx, dword [esp + 0xc]
shr edx, 0x12
mov dword [esp], edi
cmp ecx, 6
jne 0x41f285
mov edi, dword [esp + 4]
lea eax, [edx + edx*4]
mov dword [esp + 0x2c], ecx
cmp dword [esp], eax
jae 0x41f1b6
mov eax, dword [esp + 8]
mov edx, ecx
jmp 0x41f354
mov eax, dword [esp + 8]
xor edx, edx
jmp 0x41f350
lea ecx, [edi + edi*4]
xor edx, edx
mov edi, dword [esp + 4]
mov dword [esp + 0x2c], 0
cmp ecx, eax
mov eax, dword [esp + 8]
jbe 0x41f200
jmp 0x41f354
mov edx, 1
jmp 0x41f348
lea eax, [ecx - 1]
mov dword [esp + 0x20], ebx
nop dword [eax]
mov ecx, eax
movzx ecx, byte [esp + eax + 0x14]
mov dword [esp], eax
mov edi, 0x30
mov edx, ecx
inc dl
add eax, 0xffffffff
setb dh
cmp cl, 0x39
movzx ebx, dl
cmovae ebx, edi
mov edi, dword [esp]
mov byte [esp + edi + 0x14], bl
jb 0x41f1ef
test dh, dh
jne 0x41f1c0
mov ebx, dword [esp + 0x20]
mov edi, dword [esp + 4]
mov eax, dword [esp + 8]
cmp cl, 0x38
jbe 0x41f237
mov ecx, dword [ebp + 8]
add eax, 1
adc ecx, 0
jae 0x41f21f
mov al, 1
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
jmp 0x41f254
mov dword [esp + 8], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
jmp 0x41f23e
mov edx, 2
jmp 0x41f348
mov ecx, dword [ebp + 8]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 1
xor eax, eax
mov edx, dword [esp + 0xc]
jmp 0x41f371
mov edx, 3
jmp 0x41f348
mov edx, 4
jmp 0x41f348
mov edx, 5
jmp 0x41f348
mov edx, 6
jmp 0x41f348
mov edi, dword [ebp + 0x10]
cmp edi, 0xf4240
jb 0x41f59a
mov ecx, edx
xor edx, edx
mov eax, dword [esp]
div cx
add al, 0x30
mov ecx, edx
mov edx, 0x6b5fca6b
mov byte [esp + 0x1a], al
mov eax, edi
mul edx
test cx, cx
je 0x41f2cb
mov eax, ecx
mov ecx, dword [esp + 0xc]
shr edx, 0x16
cmp ecx, 7
jne 0x41f2d2
mov edi, dword [esp + 4]
movzx eax, ax
jmp 0x41f318
mov edx, 7
jmp 0x41f348
cmp edi, 0x989680
jb 0x41f59a
mov ecx, edx
xor edx, edx
div cx
add al, 0x30
mov ecx, edx
mov edx, 0x55e63b89
mov byte [esp + 0x1b], al
mov eax, edi
mul edx
test cx, cx
je 0x41f320
shr edx, 0x19
cmp dword [esp + 0xc], 8
mov dword [esp + 0x24], edx
jne 0x41f327
movzx eax, cx
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 4]
mov edx, dword [esp + 0x24]
mov dword [esp], eax
jmp 0x41f16c
mov edx, 8
jmp 0x41f348
cmp dword [ebp + 0x10], 0x5f5e100
jb 0x41f59a
mov eax, ecx
xor edx, edx
div word [esp + 0x24]
mov edx, 9
add al, 0x30
mov byte [esp + 0x1c], al
mov eax, dword [esp + 8]
mov edi, dword [esp + 4]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 1
xor eax, eax
lea ecx, [esp + 0x30]
cmp edi, 9
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x64], ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x68], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x6c], ecx
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], ecx
mov ecx, 9
cmovb ecx, edi
cmp dword [esp + 0x10], 0
cmove ecx, edx
cmp dword [ebx + 8], 0
mov dword [esp + 0x48], ecx
je 0x41f4ee
mov dword [esp + 0xc], edx
mov edx, dword [ebx + 0xc]
xor edi, edi
mov dword [esp + 0x24], ecx
mov dword [esp], edx
mov edx, dword [ebp + 0x1c]
nop word cs:[eax + eax]
nop
xor ecx, ecx
cmp byte [edx], 0xc0
lea edx, [edx + 1]
setge cl
add edi, ecx
dec esi
jne 0x41f3e0
add edi, dword [ebp + 0x18]
mov ecx, 0x14
test al, al
jne 0x41f4ab
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x28]
mov eax, ecx
or eax, edx
je 0x41f4a6
mov eax, edx
mov dword [esp + 0x20], ebx
mov ebx, edx
shr eax, 0xa
shld ebx, ecx, 0x16
mov dword [esp + 0x44], eax
push 2
push 0x540be400
push edx
push ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x38], edx
call fcn.004fee90
mov esi, 0x9502f8
xor ecx, ecx
cmp esi, ebx
mov ebx, 0
sbb ebx, dword [esp + 0x44]
mov ebx, 0xa
cmovae edx, dword [esp + 0x28]
cmovae eax, dword [esp + 8]
cmovae ebx, ecx
cmp eax, 0x186a0
mov ecx, edx
sbb ecx, 0
jb 0x41f47c
push 0
push 0x186a0
push edx
push eax
call fcn.004fee90
or ebx, 5
lea ecx, [eax + 0x5fff6]
lea edx, [eax + 0x7ff9c]
lea esi, [eax + 0xdfc18]
add eax, 0x7d8f0
and ecx, edx
and eax, esi
xor eax, ecx
shr eax, 0x11
lea ecx, [ebx + eax + 1]
mov ebx, dword [esp + 0x20]
jmp 0x41f4ab
mov ecx, 1
cmp dword [esp + 0x10], 0
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x24]
mov esi, dword [esp]
cmove eax, dword [esp + 0xc]
inc eax
test edx, edx
cmove eax, edx
add eax, ecx
add edi, eax
sub esi, edi
jbe 0x41f4ee
mov eax, dword [ebx + 0x20]
xor ecx, ecx
cmp al, 3
cmovne ecx, eax
movzx eax, cl
test cl, cl
je 0x41f502
cmp eax, 1
jne 0x41f4fb
mov dword [esp + 0x10], 0
jmp 0x41f508
lea ecx, [esp + 0x5c]
mov edx, ebx
call fcn.0041f5c0
jmp 0x41f54f
mov eax, esi
inc esi
shr eax, 1
shr esi, 1
mov dword [esp + 0x10], esi
mov esi, eax
mov eax, dword [ebx]
mov edi, dword [ebx + 4]
mov dword [esp + 0x20], ebx
mov ebx, dword [ebx + 0x1c]
inc esi
mov dword [esp], eax
nop dword [eax + eax]
dec esi
je 0x41f534
push ebx
push dword [esp + 4]
call dword [edi + 0x10]
add esp, 8
test al, al
je 0x41f520
jmp 0x41f54d
cmp ebx, 0x110000
je 0x41f54d
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x5c]
call fcn.0041f5c0
test al, al
je 0x41f557
mov al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x10]
mov esi, 0xffffffff
neg eax
mov dword [esp + 8], eax
nop word cs:[eax + eax]
mov eax, dword [esp + 8]
add eax, esi
cmp eax, 0xffffffff
je 0x41f58d
push ebx
push dword [esp + 4]
call dword [edi + 0x10]
add esp, 8
inc esi
test al, al
je 0x41f570
jmp 0x41f591
mov esi, dword [esp + 0x10]
cmp esi, dword [esp + 0x10]
setb al
jmp 0x41f54f
mov ecx, 0x516670
mov edx, 0x19
push 0x516e90
call fcn.0050d590
add esp, 4
ud2