Function at 0x41f6e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xd2c
mov eax, dword [0x56fda8]
xor eax, esp
mov dword [esp + 0xd28], eax
push ebx
push esi
push edi
push 1
lea eax, [esp + 0xbbc]
mov esi, ecx
push eax
mov dword [esp + 0x1c], esi
call fcn.00419e20
test eax, eax
je 0x42035f
push 2
lea ecx, [esp + 0xb44]
push ecx
mov ecx, esi
call fcn.00419e20
test eax, eax
je 0x42035f
push 0xe0
lea edx, [esp + 0x3c]
mov bl, 0x7a
push 0
push edx
mov byte [esp + 0x24], 0x1e
mov byte [esp + 0x25], 0x15
mov byte [esp + 0x26], 0xe
mov byte [esp + 0x27], 0x12
mov byte [esp + 0x28], 0x13
mov byte [esp + 0x29], 0x14
mov byte [esp + 0x2a], 0x11
mov byte [esp + 0x2b], 0x1f
mov byte [esp + 0x2c], 3
mov byte [esp + 0x2d], 0x77
mov byte [esp + 0x2e], 0x1e
mov byte [esp + 0x2f], 0xe
mov byte [esp + 0x30], 0xf
mov byte [esp + 0x31], 9
mov byte [esp + 0x32], 0x18
mov byte [esp + 0x33], 0x68
mov byte [esp + 0x34], 0x6a
mov byte [esp + 0x35], bl
mov byte [esp + 0x36], 0x13
mov byte [esp + 0x37], 0x37
mov byte [esp + 0x38], 0x3b
mov byte [esp + 0x39], 0x3d
mov byte [esp + 0x3a], 0x3f
mov byte [esp + 0x3b], 0x11
mov byte [esp + 0x3c], 0x33
mov byte [esp + 0x3d], 0x2e
mov byte [esp + 0x3e], bl
mov byte [esp + 0x3f], 9
mov byte [esp + 0x40], 0x69
mov byte [esp + 0x41], 0x6b
mov byte [esp + 0x42], 0x6a
mov byte [esp + 0x43], 0
call fcn.00455980
push 0xe0
lea eax, [esp + 0x14c]
push 0
push eax
mov dword [esp + 0x130], 0x1f20
mov byte [esp + 0x134], 0x1e
mov byte [esp + 0x135], 0x15
mov byte [esp + 0x136], 0xe
mov byte [esp + 0x137], 0x12
mov byte [esp + 0x138], 0x13
mov byte [esp + 0x139], 0x14
mov byte [esp + 0x13a], 0x11
mov byte [esp + 0x13b], 0x1f
mov byte [esp + 0x13c], 3
mov byte [esp + 0x13d], 0x77
mov byte [esp + 0x13e], 0x1e
mov byte [esp + 0x13f], 0xe
mov byte [esp + 0x140], 0xf
mov byte [esp + 0x141], 9
mov byte [esp + 0x142], 0x18
mov byte [esp + 0x143], 0x68
mov byte [esp + 0x144], 0x6a
mov byte [esp + 0x145], bl
mov byte [esp + 0x146], 0x13
mov byte [esp + 0x147], 0x37
mov byte [esp + 0x148], 0x3b
mov byte [esp + 0x149], 0x3d
mov byte [esp + 0x14a], 0x3f
mov byte [esp + 0x14b], 0x11
mov byte [esp + 0x14c], 0x33
mov byte [esp + 0x14d], 0x2e
mov byte [esp + 0x14e], bl
mov byte [esp + 0x14f], 9
mov byte [esp + 0x150], 0x69
mov byte [esp + 0x151], 0x6b
mov byte [esp + 0x152], 0x6b
mov byte [esp + 0x153], 0
call fcn.00455980
mov dword [esp + 0x234], 0x1f21
mov byte [esp + 0x238], 0x1e
mov byte [esp + 0x239], 0x15
mov byte [esp + 0x23a], 0xe
mov byte [esp + 0x23b], 0x12
push 0xe0
lea ecx, [esp + 0x25c]
push 0
push ecx
mov byte [esp + 0x248], 0x13
mov byte [esp + 0x249], 0x14
mov byte [esp + 0x24a], 0x11
mov byte [esp + 0x24b], 0x1f
mov byte [esp + 0x24c], 3
mov byte [esp + 0x24d], 0x77
mov byte [esp + 0x24e], 0x1e
mov byte [esp + 0x24f], 0xe
mov byte [esp + 0x250], 0xf
mov byte [esp + 0x251], 9
mov byte [esp + 0x252], 0x18
mov byte [esp + 0x253], 0x68
mov byte [esp + 0x254], 0x6a
mov byte [esp + 0x255], bl
mov byte [esp + 0x256], 0x13
mov byte [esp + 0x257], 0x37
mov byte [esp + 0x258], 0x3b
mov byte [esp + 0x259], 0x3d
mov byte [esp + 0x25a], 0x3f
mov byte [esp + 0x25b], 0x11
mov byte [esp + 0x25c], 0x33
mov byte [esp + 0x25d], 0x2e
mov byte [esp + 0x25e], bl
mov byte [esp + 0x25f], 9
mov byte [esp + 0x260], 0x69
mov byte [esp + 0x261], 0x6b
mov byte [esp + 0x262], 0x68
mov byte [esp + 0x263], 0
call fcn.00455980
push 0xe0
lea edx, [esp + 0x36c]
push 0
push edx
mov dword [esp + 0x350], 0x1f22
mov byte [esp + 0x354], 0x1e
mov byte [esp + 0x355], 0x15
mov byte [esp + 0x356], 0xe
mov byte [esp + 0x357], 0x12
mov byte [esp + 0x358], 0x13
mov byte [esp + 0x359], 0x14
mov byte [esp + 0x35a], 0x11
mov byte [esp + 0x35b], 0x1f
mov byte [esp + 0x35c], 3
mov byte [esp + 0x35d], 0x77
mov byte [esp + 0x35e], 0x1e
mov byte [esp + 0x35f], 0xe
mov byte [esp + 0x360], 0xf
mov byte [esp + 0x361], 9
mov byte [esp + 0x362], 0x18
mov byte [esp + 0x363], 0x68
mov byte [esp + 0x364], 0x6a
mov byte [esp + 0x365], bl
mov byte [esp + 0x366], 0x13
mov byte [esp + 0x367], 0x37
mov byte [esp + 0x368], 0x3b
mov byte [esp + 0x369], 0x3d
mov byte [esp + 0x36a], 0x3f
mov byte [esp + 0x36b], 0x11
mov byte [esp + 0x36c], 0x33
mov byte [esp + 0x36d], 0x2e
mov byte [esp + 0x36e], bl
mov byte [esp + 0x36f], 9
mov byte [esp + 0x370], 0x69
mov byte [esp + 0x371], 0x6b
mov byte [esp + 0x372], 0x69
mov byte [esp + 0x373], 0
call fcn.00455980
mov dword [esp + 0x454], 0x1f23
mov byte [esp + 0x458], 0x1e
mov byte [esp + 0x459], 0x15
mov byte [esp + 0x45a], 0xe
mov byte [esp + 0x45b], 0x12
mov byte [esp + 0x45c], 0x13
mov byte [esp + 0x45d], 0x14
mov byte [esp + 0x45e], 0x11
mov byte [esp + 0x45f], 0x1f
mov byte [esp + 0x460], 3
push 0xe0
lea eax, [esp + 0x47c]
push 0
push eax
mov byte [esp + 0x46d], 0x77
mov byte [esp + 0x46e], 0x1e
mov byte [esp + 0x46f], 0xe
mov byte [esp + 0x470], 0xf
mov byte [esp + 0x471], 9
mov byte [esp + 0x472], 0x18
mov byte [esp + 0x473], 0x68
mov byte [esp + 0x474], 0x6a
mov byte [esp + 0x475], bl
mov byte [esp + 0x476], 0x13
mov byte [esp + 0x477], 0x37
mov byte [esp + 0x478], 0x3b
mov byte [esp + 0x479], 0x3d
mov byte [esp + 0x47a], 0x3f
mov byte [esp + 0x47b], 0x11
mov byte [esp + 0x47c], 0x33
mov byte [esp + 0x47d], 0x2e
mov byte [esp + 0x47e], bl
mov byte [esp + 0x47f], 9
mov byte [esp + 0x480], 0x69
mov byte [esp + 0x481], 0x6b
mov byte [esp + 0x482], 0x6e
mov byte [esp + 0x483], 0
call fcn.00455980
push 0xe0
lea ecx, [esp + 0x58c]
push 0
push ecx
mov dword [esp + 0x570], 0x1f24
mov byte [esp + 0x574], 0x1e
mov byte [esp + 0x575], 0x15
mov byte [esp + 0x576], 0xe
mov byte [esp + 0x577], 0x12
mov byte [esp + 0x578], 0x13
mov byte [esp + 0x579], 0x14
mov byte [esp + 0x57a], 0x11
mov byte [esp + 0x57b], 0x1f
mov byte [esp + 0x57c], 3
mov byte [esp + 0x57d], 0x77
mov byte [esp + 0x57e], 0x1e
mov byte [esp + 0x57f], 0xe
mov byte [esp + 0x580], 0xf
mov byte [esp + 0x581], 9
mov byte [esp + 0x582], 0x18
mov byte [esp + 0x583], 0x68
mov byte [esp + 0x584], 0x6a
mov byte [esp + 0x585], bl
mov byte [esp + 0x586], 0x13
mov byte [esp + 0x587], 0x37
mov byte [esp + 0x588], 0x3b
mov byte [esp + 0x589], 0x3d
mov byte [esp + 0x58a], 0x3f
mov byte [esp + 0x58b], 0x11
mov byte [esp + 0x58c], 0x33
mov byte [esp + 0x58d], 0x2e
mov byte [esp + 0x58e], bl
mov byte [esp + 0x58f], 9
mov byte [esp + 0x590], 0x69
mov byte [esp + 0x591], 0x68
mov byte [esp + 0x592], 0x6b
mov byte [esp + 0x593], 0
call fcn.00455980
add esp, 0x48
mov dword [esp + 0x62c], 0x1f26
mov byte [esp + 0x630], 0x1e
mov byte [esp + 0x631], 0x15
mov byte [esp + 0x632], 0xe
mov byte [esp + 0x633], 0x12
mov byte [esp + 0x634], 0x13
mov byte [esp + 0x635], 0x14
mov byte [esp + 0x636], 0x11
mov byte [esp + 0x637], 0x1f
mov byte [esp + 0x638], 3
mov byte [esp + 0x639], 0x77
mov byte [esp + 0x63a], 0x1e
mov byte [esp + 0x63b], 0xe
mov byte [esp + 0x63c], 0xf
push 0xe0
lea edx, [esp + 0x654]
push 0
push edx
mov byte [esp + 0x649], 9
mov byte [esp + 0x64a], 0x18
mov byte [esp + 0x64b], 0x68
mov byte [esp + 0x64c], 0x6a
mov byte [esp + 0x64d], bl
mov byte [esp + 0x64e], 0x13
mov byte [esp + 0x64f], 0x37
mov byte [esp + 0x650], 0x3b
mov byte [esp + 0x651], 0x3d
mov byte [esp + 0x652], 0x3f
mov byte [esp + 0x653], 0x11
mov byte [esp + 0x654], 0x33
mov byte [esp + 0x655], 0x2e
mov byte [esp + 0x656], bl
mov byte [esp + 0x657], 9
mov byte [esp + 0x658], 0x69
mov byte [esp + 0x659], 0x68
mov byte [esp + 0x65a], 0x6a
mov byte [esp + 0x65b], 0
call fcn.00455980
push 0xe0
lea eax, [esp + 0x764]
push 0
push eax
mov dword [esp + 0x748], 0x1f25
mov byte [esp + 0x74c], 0x1e
mov byte [esp + 0x74d], 0x15
mov byte [esp + 0x74e], 0xe
mov byte [esp + 0x74f], 0x12
mov byte [esp + 0x750], 0x13
mov byte [esp + 0x751], 0x14
mov byte [esp + 0x752], 0x11
mov byte [esp + 0x753], 0x1f
mov byte [esp + 0x754], 3
mov byte [esp + 0x755], 0x77
mov byte [esp + 0x756], 0x1e
mov byte [esp + 0x757], 0xe
mov byte [esp + 0x758], 0xf
mov byte [esp + 0x759], 9
mov byte [esp + 0x75a], 0x18
mov byte [esp + 0x75b], 0x68
mov byte [esp + 0x75c], 0x6a
mov byte [esp + 0x75d], bl
mov byte [esp + 0x75e], 0x13
mov byte [esp + 0x75f], 0x37
mov byte [esp + 0x760], 0x3b
mov byte [esp + 0x761], 0x3d
mov byte [esp + 0x762], 0x3f
mov byte [esp + 0x763], 0x11
mov byte [esp + 0x764], 0x33
mov byte [esp + 0x765], 0x2e
mov byte [esp + 0x766], bl
mov byte [esp + 0x767], 9
mov byte [esp + 0x768], 0x69
mov byte [esp + 0x769], 0x69
mov byte [esp + 0x76a], 0x6b
mov byte [esp + 0x76b], 0
call fcn.00455980
mov dword [esp + 0x84c], 0x1f27
mov byte [esp + 0x850], 0x1e
mov byte [esp + 0x851], 0x15
mov byte [esp + 0x852], 0xe
mov byte [esp + 0x853], 0x12
mov byte [esp + 0x854], 0x13
mov byte [esp + 0x855], 0x14
mov byte [esp + 0x856], 0x11
mov byte [esp + 0x857], 0x1f
mov byte [esp + 0x858], 3
mov byte [esp + 0x859], 0x77
mov byte [esp + 0x85a], 0x1e
mov byte [esp + 0x85b], 0xe
mov byte [esp + 0x85c], 0xf
mov byte [esp + 0x85d], 9
mov byte [esp + 0x85e], 0x18
mov byte [esp + 0x85f], 0x68
mov byte [esp + 0x860], 0x6a
mov byte [esp + 0x861], bl
push 0xe1
lea ecx, [esp + 0x873]
push 0
push ecx
mov byte [esp + 0x86e], 0x13
mov byte [esp + 0x86f], 0x37
mov byte [esp + 0x870], 0x3b
mov byte [esp + 0x871], 0x3d
mov byte [esp + 0x872], 0x3f
mov byte [esp + 0x873], 0x11
mov byte [esp + 0x874], 0x33
mov byte [esp + 0x875], 0x2e
mov byte [esp + 0x876], bl
mov byte [esp + 0x877], 0xc
mov byte [esp + 0x878], 0x62
mov byte [esp + 0x879], 0x6b
mov byte [esp + 0x87a], 0
call fcn.00455980
push 0xe1
lea edx, [esp + 0x983]
push 0
push edx
mov dword [esp + 0x968], 0x1f50
mov byte [esp + 0x96c], 0x1e
mov byte [esp + 0x96d], 0x15
mov byte [esp + 0x96e], 0xe
mov byte [esp + 0x96f], 0x12
mov byte [esp + 0x970], 0x13
mov byte [esp + 0x971], 0x14
mov byte [esp + 0x972], 0x11
mov byte [esp + 0x973], 0x1f
mov byte [esp + 0x974], 3
mov byte [esp + 0x975], 0x77
mov byte [esp + 0x976], 0x1e
mov byte [esp + 0x977], 0xe
mov byte [esp + 0x978], 0xf
mov byte [esp + 0x979], 9
mov byte [esp + 0x97a], 0x18
mov byte [esp + 0x97b], 0x68
mov byte [esp + 0x97c], 0x6a
mov byte [esp + 0x97d], bl
mov byte [esp + 0x97e], 0x13
mov byte [esp + 0x97f], 0x37
mov byte [esp + 0x980], 0x3b
mov byte [esp + 0x981], 0x3d
mov byte [esp + 0x982], 0x3f
mov byte [esp + 0x983], 0x11
mov byte [esp + 0x984], 0x33
mov byte [esp + 0x985], 0x2e
mov byte [esp + 0x986], bl
mov byte [esp + 0x987], 0xc
mov byte [esp + 0x988], 0x63
mov byte [esp + 0x989], 0x6a
mov byte [esp + 0x98a], 0
call fcn.00455980
lea eax, [esp + 0xbe8]
push eax
lea ecx, [esp + 0xc64]
push 0x78
push ecx
mov dword [esp + 0xa78], 0x1f51
call fcn.0045668f
push 0x478f1c
lea edx, [esp + 0xc70]
push pe_nt_image_headers32
push edx
call fcn.00458045
add esp, 0x48
lea eax, [esp + 0xb40]
push eax
lea ecx, [esp + 0xc34]
push pe_nt_image_headers32
push ecx
call fcn.00458045
lea edx, [esp + 0x24]
add esp, 0xc
xor ebx, ebx
mov dword [esp + 0x10], edx
mov esi, dword [esp + 0x10]
mov ecx, 0x40
lea edi, [esp + 0xa40]
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov al, byte [esp + ecx + 0xa40]
test al, al
je 0x420267
xor al, 0x5a
mov byte [esp + ecx + 0xa40], al
mov al, byte [esp + ecx + 0xa41]
test al, al
je 0x42027b
xor al, 0x5a
mov byte [esp + ecx + 0xa41], al
mov al, byte [esp + ecx + 0xa42]
test al, al
je 0x42028f
xor al, 0x5a
mov byte [esp + ecx + 0xa42], al
mov al, byte [esp + ecx + 0xa43]
test al, al
je 0x4202a3
xor al, 0x5a
mov byte [esp + ecx + 0xa43], al
add ecx, 4
cmp ecx, 0x100
jb 0x420253
lea ecx, [esp + 0xa40]
lea eax, [esp + 0xc30]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4202e0
test dl, dl
je 0x4202dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4202e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4202c0
xor eax, eax
jmp 0x4202e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x420324
add dword [esp + 0x10], 0x104
inc ebx
cmp ebx, 0xa
jb 0x42023f
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov dword [eax + 0x501924], ecx
mov dword [eax + 0x501928], ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd28]
xor ecx, esp
call fcn.00455303
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x14]
imul ebx, ebx, 0x104
mov ecx, dword [esp + ebx + 0x118]
mov dword [eax + 0x501928], ecx
mov dword [eax + 0x501924], 1
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd28]
xor ecx, esp
call fcn.00455303
mov esp, ebp
pop ebp
ret
mov ecx, esi
call fcn.0041a210
mov ecx, dword [esp + 0xd34]
pop edi
mov byte [esi + 0x501923], 5
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00455303
mov esp, ebp
pop ebp
ret