Function at 0x41ec80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add byte [ebx + 0x4d], cl
dec esp
dec edi
inc ebx
xor al, 0x83
les eax, [esi + ebx*2]
cmp dword [ebp - 0x31c], 0
jne 0x41e574
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
call dword [edi + 0x50]
add esp, 4
or edi, 0x14f78
add edi, 0x460f
call 0x41dd22
add byte [edi + 0x35], al
inc esi
dec ebx
dec ecx
inc esp
inc ebp
inc esi
push eax
dec esp
add esp, 4
jmp 0x41dd2a
pop edi
push ebx
or ebx, 0x12f77
pop ebx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
push eax
or eax, 0x18275
jmp 0x41e581
xor eax, 0x15667
sub eax, 0x5f51
pop eax
push edx
push ebx
add esp, 4
and edx, 0x109da
sub edx, 0xd9d0
sub edx, 0x4d4c
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push edi
push ebx
add esp, 4
call 0x41e5e1
add byte [edi], dh
dec ebx
dec esi
cmp dword [ebx], edi
xor al, 0x3d
inc edx
xor al, byte [ebx - 0x187efb3c]
or ebx, dword [eax]
add byte [ecx + 0x4cafcf], al
add byte [edi + 0x50], bl
add eax, 0x1017
add eax, 0x54bb
pop eax
cmp dword [ebp - 0x15fc], 0
jne 0x41e617
mov dword [ebp - 0x31c], 0
jmp 0x41e8be
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push edi
push ecx
add esp, 4
add edi, 0x119cd
sub edi, 0xca43
and edi, 0x699b
pop edi
push esi
or esi, 0x1847c
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x13792
or edx, 0x8cfd
pop edx
cmp dword [ebp - 0xcb4], 0
jne 0x41e673
mov dword [ebp - 0x31c], 0
jmp 0x41e8be
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push edi
push edi
add esp, 4
xor edi, 0x6b28
pop edi
push edi
push ecx
add esp, 4
add edi, 0x90ff
xor edi, 0x3eb9
pop edi
push esi
or esi, 0x190e
or esi, 0x20f3
add esi, 0xc23e
pop esi
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push eax
sub eax, 0x1726f
and eax, 0x80bf
pop eax
push eax
push eax
add esp, 4
call 0x41e6fd
add byte [esi], dh
inc esp
dec edx
dec esi
inc esi
cmp al, 0x4e
dec esi
xor eax, dword [ebx - 0x177efb3c]
xchg edx, eax
add byte [eax], 0
or eax, 0x14544
pop eax
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x34], dx
push ecx
call 0x41e771
add byte [edx + eax*2], bh
inc ebx
inc eax
dec esp
push eax
add esp, 4
pop ecx
push edi
and edi, 0x7a96
pop edi
push eax
jmp 0x41e783
add eax, 0xf29e
pop eax
push ebx
push eax
add esp, 4
sub ebx, 0x3327
pop ebx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x41e7b3
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x1604], ecx
jmp 0x41e80d
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x41e6db
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x41e6db
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x41e7f7
mov dword [ebp - 0x1600], 0xffffffff
jmp 0x41e801
mov dword [ebp - 0x1600], 1
mov eax, dword [ebp - 0x1600]
mov dword [ebp - 0x1604], eax
cmp dword [ebp - 0x1604], 0
jne 0x41e856
push edx
xor edx, 0x6a38
sub edx, 0x16cad
xor edx, 0x13dd
or edx, 0x169bf
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x350e
add ebx, 0x138f9
xor ebx, 0x5f2d
pop ebx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x41e8be
push ecx
push edx
add esp, 4
xor ecx, 0x10df5
or ecx, 0x16425
sub ecx, 0x9247
xor ecx, 0x81ac
pop ecx
push ecx
or ecx, 0x1220b
sub ecx, 0xc607
and ecx, 0x14516
pop ecx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x41e8b4
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x41e67f
mov dword [ebp - 0x31c], 0
push edx
push ecx
add esp, 4
or edx, 0xd84b
or edx, 0xe1c5
add edx, 0xc6c0
pop edx
push eax
sub eax, 0xcc4
add eax, 0x6588
sub eax, 0x17f5a
add eax, 0xf323
pop eax
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push eax
push ebx
add esp, 4
add eax, 0x7b64
jmp 0x41e913
jmp 0x41e918
xor eax, 0x13eea
pop eax
push eax
push ecx
add esp, 4
or eax, 0x27a0
xor eax, 0x8eaa
pop eax
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x41e961
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x41ec52
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x41e989
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x41ec52
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x41e9bb
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x41ec52
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x41e9e0
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x41ec52
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x41ea3a
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x41ec46
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x41eaaa
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x41eb5c
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
ror byte [edi], cl
invalid
test dword [eax], eax
add byte [eax], al
push ebx
xor ebx, 0x9e46
pop ebx
push esi
push ecx
push esi
add esp, 4
call 0x41eb6d
add byte [esi + 0x3c], cl
inc esi
aaa
inc ebx
xor eax, dword [ebx + 0x9e804c4]
add byte [eax], al
add byte [eax], al
aas
inc ecx
xor al, 0x3e
xor al, 0x50
cmp dword [ebx + eax*4 - 0x3c], eax
add al, 0x81
int1
stosb byte es:[edi], al
jmp 0xf1c2eb89
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push esi
push edi
add esp, 4
sub esi, 0x942c
pop esi
push eax
add byte [esi + 0x50], bl
xor eax, 0x1334f
call 0x41ec80
add byte [ecx + 0x38], cl
inc ebx
cmp al, 0x4e
cmp bh, byte ss:[eax]
xor al, 0x83
les eax, [ecx + eax*4]
loopne 0x41ec68
aas
add dword [eax], eax
or eax, 0xf23a
pop eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push edx
and edx, 0xc19e
jmp 0x41ecab
xor edx, 0x110a0
xor edx, 0x14778
pop edx
push esi
jmp 0x41ecbe
sub esi, 0x11c6
or esi, 0xd510
add esi, 0xd5b9
pop esi
cmp dword [ebp - 0x3e8], 0
je 0x41ece3
cmp dword [ebp - 0xab8], 0
jne 0x41ed29
push edi
sub edi, 0x15eec
pop edi
push eax
sub eax, 0xbfec
pop eax
push edx
add edx, 0x12f30
jmp 0x41ed01
and edx, 0x3d4c
add edx, 0x1210e
pop edx
push ecx
jmp 0x41ed14
pop ecx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push ecx
push edx
add esp, 4
xor ecx, 0xcb9
pop ecx
push ecx
jmp 0x41ed48
pop ecx
push edx
xor edx, 0x8eb8
or edx, 0xa774
or edx, 0x13781
pop edx
push ecx
and ecx, 0x6a28
pop ecx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push eax
push ebx
add esp, 4
xor eax, 0x15f9d
pop eax
push eax
push eax
add esp, 4
or eax, 0x3392
pop eax
push eax
jmp 0x41edaf
pop eax
push edi
push eax
add esp, 4
and edi, 0x14aff
add edi, 0x9af1
pop edi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push eax
push esi
add esp, 4
jmp 0x41ee35
pop eax
push ecx
push edi
add esp, 4
jmp 0x41ee42
or ecx, 0x1652c
or ecx, 0x13017
pop ecx
push edi
sub edi, 0x8b83
and edi, 0x4d3
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
push ebx
add esp, 4
xor esi, 0x91d6
and esi, 0x93fa
or esi, 0xe18
xor esi, 0x5b41
pop esi
push edx
sub edx, 0xb934
and edx, 0x73c2
sub edx, 0x19ba
pop edx
cmp dword [ebp - 0x1614], 0
jne 0x41eece
mov dword [ebp - 0x2fc], 0
jmp 0x41f175
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ebx
push edi
add esp, 4
sub ebx, 0x15364
or ebx, 0x29fd
pop ebx
push eax
or eax, 0x12e3
pop eax
push ecx
push ebx
add esp, 4
or ecx, 0x1028a
and ecx, 0x113dc
add ecx, 0x9126
pop ecx
cmp dword [ebp - 0xcc4], 0
jne 0x41ef2a
mov dword [ebp - 0x2fc], 0
jmp 0x41f175
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push eax
and eax, 0xca5b
and eax, 0x7b7d
or eax, 0x3a19
pop eax
push eax
xor eax, 0x5d45
xor eax, 0x44c6
pop eax
push esi
sub esi, 0xdf5a
pop esi
push ebx
and ebx, 0xeb48
pop ebx
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
push ecx
add esp, 4
sub ebx, 0x8b69
add ebx, 0x145d9
sub ebx, 0x3165
pop ebx
push edx
push edi
add esp, 4
xor edx, 0xd67e
add edx, 0xb16c
pop edx
push ebx
xor ebx, 0x7df3
pop ebx
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push edx
add edx, 0x1460e
pop edx
push ecx
push ebx
add esp, 4
sub ecx, 0x1029
call 0x41f03d
add byte [edi + 0x43], cl
dec eax
inc eax
inc edi
inc ecx
dec eax
dec ebp
add esp, 4
and ecx, 0x14c3a
xor ecx, 0x6a3b
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x41f06a
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x41f0c4
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x41ef92
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x41ef92
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x41f0ae
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x41f0b8
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x41f10d
push ebx
add ebx, 0x9521
pop ebx
push ebx
xor ebx, 0x158c8
sub ebx, 0x14907
jmp 0x41f0ea
pop ebx
push edi
xor edi, 0x174c2
pop edi
push esi
push edx
add esp, 4
add esi, 0x123ec
pop esi
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x41f175
push eax
push edx
add esp, 4
call 0x41f122
add byte [ebx], dh
dec esi
dec edi
inc esi
cmp byte [ebp + 0x33], al
xor ecx, dword [edi + 0x3a]
add esp, 4
call 0x41f135
add byte [esi + 0x45], al
dec ebp
xor eax, 0x49353435
dec ebp
add esp, 4
or eax, 0xc2ae
pop eax
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x41f16b
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x41ef36
mov dword [ebp - 0x2fc], 0
push edx
push eax
add esp, 4
and edx, 0xd813
call 0x41f18d
add byte [eax + 0x34], dl
inc eax
dec esi
inc eax
xor al, 0x4e
add esp, 4
call 0x41f19d
add byte [edi + 0x42], cl
inc esi
cmp al, 0x44
dec esp
add esp, 4
sub edx, 0x18487
pop edx
cmp dword [ebp - 0x2fc], 0
jne 0x41faac
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e