Function at 0x4150d8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov dword [ebp - 0x754], eax
jne 0x414559
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x4147cb
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x4145b3
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x4147bf
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x414623
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x4146d5
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x4146d5
push ecx
push esi
add esp, 4
sub ecx, 0x3722
add ecx, 0x171e6
or ecx, 0x16e29
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0xafda
pop ebx
push ebx
add ebx, 0x159f4
sub ebx, 0x16a4f
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x4146c7
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x4146ce
jmp 0x414614
jmp 0x4146d5
push ecx
sub ecx, 0x711e
or ecx, 0x12ee3
and ecx, 0x1e4d
or ecx, 0x13420
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x17d81
sub edx, 0x14e8a
add edx, 0x797e
pop edx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x414734
mov dword [ebp - 0xca8], 0
jmp 0x4147a3
push ebx
push esi
add esp, 4
xor ebx, 0x1732d
pop ebx
push eax
push edi
add esp, 4
add eax, 0x183da
and eax, 0x1115e
pop eax
push esi
sub esi, 0xbc65
add esi, 0x8e6b
or esi, 0x486a
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x414799
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x4147a3
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x4147ba
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x4147cb
jmp 0x4145a4
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0
je 0x4148a6
push edx
call 0x4147e5
add byte [ecx], bh
xor eax, 0x36354045
add esp, 4
jmp 0x4147ee
or edx, 0xd292
pop edx
push edi
push edi
add esp, 4
jmp 0x414803
and edi, 0xa19f
pop edi
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x1974], eax
push edi
or edi, 0x18b3
pop edi
push ebx
push ecx
add esp, 4
and ebx, 0x42c
pop ebx
push ecx
call 0x414838
add byte [ebx], dh
inc esp
aaa
cmp cl, byte ss:[edx + 0x4c]
add esp, 4
sub ecx, 0xc612
add ecx, 0xa277
pop ecx
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x4148a6
push ebx
call 0x414875
add byte [ecx + 0x50], cl
dec eax
inc esp
xor al, 0x45
cmp dword [eax + 0x39], edx
add esp, 4
add ebx, 0xf24b
pop ebx
push esi
push eax
add esp, 4
and esi, 0xa300
add esi, 0x9b4f
add esi, 0x8a43
pop esi
mov dword [ebp - 0x79c], 0
jmp 0x414f90
push ecx
add ecx, 0x4b74
pop ecx
push esi
push ebx
add esp, 4
or esi, 0x16ba1
pop esi
push edx
push edi
add esp, 4
or edx, 0xbcc
or edx, 0x3913
and edx, 0x446e
add edx, 0x98e1
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push edx
push eax
add esp, 4
or edx, 0x64a6
add edx, 0x1813b
and edx, 0xa3ac
pop edx
push eax
or eax, 0x1109c
and eax, 0x16f0c
add eax, 0x20f
add eax, 0x38fd
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x414949
mov dword [ebp - 0x31c], 0
jmp 0x414bf0
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push edx
or edx, 0x310a
xor edx, 0x30c7
xor edx, 0x833b
jmp 0x414974
pop edx
push edx
push edx
add esp, 4
xor edx, 0x24de
add edx, 0x377
sub edx, 0x10e3e
pop edx
cmp dword [ebp - 0xcb4], 0
jne 0x4149a5
mov dword [ebp - 0x31c], 0
jmp 0x414bf0
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push edi
and edi, 0x39ad
or edi, 0x2fef
sub edi, 0x15e6b
pop edi
push esi
push ebx
add esp, 4
add esi, 0xff95
jmp 0x4149d6
xor esi, 0xf494
xor esi, 0x3ea3
add byte [eax], al
pop esi
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
add esi, 0xb844
sub esi, 0x7ff8
pop esi
push eax
jmp 0x414a23
jmp 0x414a29
xor eax, 0x352a
pop eax
push eax
jmp 0x414a36
pop eax
push ecx
and ecx, 0x180f1
pop ecx
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x34], dx
push ecx
push eax
add esp, 4
call 0x414aa7
add byte [edx + 0x33], al
inc edx
cmp al, byte [edi - 0x7d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [ecx + 0x44], cl
cmp byte [ebx + eax*2 + 0x50], al
xor eax, 0x4c48340
xor ecx, 0x101a4
xor ecx, 0x7ec
pop ecx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x414ae5
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x1604], ecx
jmp 0x414b3f
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x414a0d
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x414a0d
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x414b29
mov dword [ebp - 0x1600], 0xffffffff
jmp 0x414b33
mov dword [ebp - 0x1600], 1
mov eax, dword [ebp - 0x1600]
mov dword [ebp - 0x1604], eax
cmp dword [ebp - 0x1604], 0
jne 0x414b88
push edx
push edi
add esp, 4
sub edx, 0x18b6
or edx, 0x1fc
add edx, 0x10342
pop edx
push eax
push edi
add esp, 4
and eax, 0xd183
and eax, 0xae1f
jmp 0x414b79
pop eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x414bf0
push esi
push ecx
add esp, 4
call 0x414b9b
add byte [edi + 0x4a], cl
aas
xor ecx, dword [ebp + 0x46]
cmp al, 0x49
add esp, 4
call 0x414bae
add byte [edx + 0x47], cl
dec ecx
cmp al, 0x4c
dec ebp
dec edi
dec edi
inc ebp
add esp, 4
jmp 0x414bb9
pop esi
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x414be6
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x4149b1
mov dword [ebp - 0x31c], 0
push ebx
push ebx
add esp, 4
call 0x414c05
add byte [ebp + 0x3d], cl
push eax
cmp byte ss:[eax], bh
cmp eax, 0xc4834932
add al, 0xe8
or eax, dword [eax]
add byte [eax], al
add byte [esi + 0x4c], cl
xor eax, 0x39383d38
inc esp
dec edi
push eax
add esp, 4
xor ebx, 0xcfee
pop ebx
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push edi
push edi
add esp, 4
or edi, 0xb352
xor edi, 0xd91c
pop edi
push esi
push eax
add esp, 4
jmp 0x414c50
or esi, 0x6032
add esi, 0x15fce
sub esi, 0x4fe8
pop esi
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x414c93
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x414f84
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x414cbb
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x414f84
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x414ced
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x414f84
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x414d12
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x414f84
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x414d6c
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x414f78
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x414ddc
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x414e8e
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x414e8e
push eax
and eax, 0x1001b
pop eax
push edx
push edi
add esp, 4
call 0x414e25
add byte [edx + 0x40], cl
inc eax
cmp al, 0x43
inc esi
dec ebx
inc ecx
cmp eax, 0x8104c483
ror dword [eax + eax], cl
add byte [ecx + 0xe01fc2], al
add byte [ecx + 0x1281cca], al
add byte [edx - 0x75], bl
test dword [eax + edi*8 - 0x7afc0001], edx
invalid
push edi
xor edi, 0x1097
sub edi, 0x161aa
and edi, 0x11f37
pop edi
push ebx
xor ebx, 0x8bd7
or ebx, 0x129ef
call 0x414ebc
add byte [edx + 0x42], cl
dec esp
inc esp
dec ebx
push eax
cmp eax, dword [ebx - 0x74a4fb3c]
xchg ebp, eax
xchg esp, eax
clc
invalid
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push ebx
sub ebx, 0x1536d
and ebx, 0x11c07
add ebx, 0x53db
pop ebx
push edx
push edx
add esp, 4
sub edx, 0xe498
and edx, 0x18
and edx, 0x15fd3
add edx, 0xbd37
pop edx
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push edx
push esi
add esp, 4
xor edx, 0x11c82
xor edx, 0xbe28
pop edx
push ecx
and ecx, 0xe8e1
or ecx, 0xb685
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0x2bb9
add ebx, 0x9082
pop ebx
cmp dword [ebp - 0x3e8], 0
je 0x415015
cmp dword [ebp - 0xab8], 0
jne 0x41505b
push edx
add edx, 0x14ada
or edx, 0x3050
add edx, 0x12a97
jmp 0x415031
pop edx
push edx
xor edx, 0x492a
pop edx
push edi
jmp 0x415040
xor edi, 0x12aa3
pop edi
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push edi
and edi, 0x34f0
pop edi
push edx
and edx, 0x602b
or edx, 0x15463
pop edx
push ebx
sub ebx, 0x75fa
sub ebx, 0x12ba
xor ebx, 0x14796
pop ebx
push eax
jmp 0x415096
pop eax
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
and ebx, 0x17562
call 0x4150d8
add byte [edx], bh
xor eax, dword [eax + 0x37]
cmp dword [edx + 0x39], ecx
xor bh, byte [edx]
add esp, 4
pop ebx
push ebx
push ecx
add esp, 4
xor ebx, 0x41a8
sub ebx, 0x8cfc
sub ebx, 0xfb30
pop ebx
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ecx
push ecx
add esp, 4
and ecx, 0x752d
and ecx, 0x173ef
and ecx, 0x1bae
and ecx, 0x1746b
pop ecx
push ebx
xor ebx, 0xca7
and ebx, 0x3aad
add ebx, 0x1308e
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push edx
push ecx
add esp, 4
add edx, 0x237e
or edx, 0x86a8
pop edx
push ecx
push edi
add esp, 4
jmp 0x4151d2
jmp 0x4151d9
and ecx, 0x2860
pop ecx
push esi
sub esi, 0x13b77
pop esi
cmp dword [ebp - 0x1614], 0
jne 0x415200
mov dword [ebp - 0x2fc], 0
jmp 0x4154a7
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push eax
push eax
add esp, 4
and eax, 0x102ff
pop eax
push ebx
push edi
add esp, 4
add ebx, 0x28bf
pop ebx
push eax
and eax, 0x10f7a
xor eax, 0x38a7
xor eax, 0x11d04
or eax, 0x16a8b
pop eax
cmp dword [ebp - 0xcc4], 0
jne 0x41525c
mov dword [ebp - 0x2fc], 0
jmp 0x4154a7
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edx
push ebx
add esp, 4
sub edx, 0xcbc5
jmp 0x41527b
sub edx, 0x1cdd
sub edx, 0xbc7d
pop edx
push ebx
push edi
add esp, 4
sub ebx, 0xaf15
add ebx, 0xf4ab
pop ebx
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
push esi
add esp, 4
call 0x4152d8
add byte [edx + 0x4b], cl
inc ebx
cmp edi, dword [edi]
cmp cl, byte [esi + 0x3a]
aas
add esp, 4
add edi, 0xcbfa
sub edi, 0x17bb7
pop edi
push esi
and esi, 0x456e
or esi, 0x1060
pop esi
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
invalid
invalid
invalid
invalid