Function at 0x41b3fe
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5a0
push ebx
push ebp
push esi
xor ebx, ebx
mov dword [esp + 0x64], edx
mov ebp, ecx
mov dword [esp + 0x18], 0x99aa9f7d
push edi
mov dword [esp + 0x20], 0x5f919c9c
mov ecx, ebx
mov dword [esp + 0x24], 0x50605e64
mov dword [esp + 0x28], 0x9d9f9358
mov dword [esp + 0x2c], 0x99a491a0
mov dword [esp + 0x30], 0x6b959c92
mov dword [esp + 0x34], 0x79837d50
mov dword [esp + 0x38], 0x5e675075
mov dword [esp + 0x3c], 0x87506b60
mov dword [esp + 0x40], 0x9f949e99
mov dword [esp + 0x44], 0x7e50a3a7
mov dword [esp + 0x48], 0x5e655084
mov dword [esp + 0x4c], 0x79506b61
mov dword [esp + 0x50], 0x809f969e
mov dword [esp + 0x54], 0x5e98a491
mov word [esp + 0x58], 0x5961
mov al, byte [esp + ecx + 0x1c]
sub al, 0x30
mov byte [esp + ecx + 0x6c], al
inc ecx
cmp ecx, 0x3e
jl 0x41b491
movzx eax, word [0x42ca18]
mov edi, ebx
and eax, 0x2807c441
mov byte [esp + 0xaa], bl
imul esi, eax, 0x850a5f44
lea eax, [esp + 0x1c]
push 0x3c
push ebx
push eax
mov dword [0x42ca1c], esi
call fcn.00404560
movzx eax, byte [0x42ca16]
add esp, 0xc
mov ecx, 0x18eb
mov edx, 0xb3507b39
add ax, cx
mov word [0x42ca18], ax
movzx eax, word [0x42ca44]
push ebx
add eax, 0x690eb37b
push ebx
mov dword [0x42ca24], eax
lea eax, [esi + 0x3a3f]
push ebx
mov word [0x42ca34], ax
lea eax, [esp + 0x78]
push ebx
push eax
push 2
pop ecx
call fcn.00415f33
call eax
movzx edx, word [0x42ca18]
mov si, word [0x42ca20]
mov dword [esp + 0x5c], eax
mov eax, 0x60fe
imul edx, eax
movzx eax, byte [0x42ca16]
mov dword [esp + 0x18], eax
lea ecx, [eax + 0x48f846d5]
mov eax, 0x8e0
sub si, ax
mov dword [0x42ca1c], ecx
mov word [0x42ca34], si
cmp dword [esp + 0x5c], ebx
je 0x41bd75
push dword [ebp]
mov eax, 0xc364
mov dword [esp + 0x20], 0x3c
add word [0x42ca44], ax
mov edx, 0x9e7f4339
movzx eax, si
and esi, 0x26eb
sub eax, 0x3cec303f
mov dword [esp + 0x34], 0x104
mov dword [0x42ca24], eax
sub esi, 0xbfe
imul eax, dword [esp + 0x1c], 0xe16eb75e
and esi, 0x6c9e
mov ecx, esi
mov word [0x42ca20], si
mov dword [0x42ca1c], eax
lea eax, [esp + 0xb0]
mov dword [esp + 0x30], eax
mov eax, 0xe15a
imul ecx, eax
mov word [0x42ca18], cx
xor ecx, ecx
inc ecx
call fcn.00415f33
call eax
and dword [0x42ca1c], 0xb5c2baee
mov ecx, eax
mov eax, 0xbe16
add ecx, ecx
xor word [0x42ca44], ax
movzx eax, word [0x42ca34]
xor eax, 0xfb4c77a3
mov dword [esp + 0x4c], ecx
push ecx
mov dword [0x42ca24], eax
call fcn.0040630b
mov dword [esp + 0x4c], eax
mov edx, 0xc589a631
mov eax, dword [0x42ca24]
pop ecx
add eax, 0xffffcd31
mov word [0x42ca18], ax
lea eax, [esp + 0x1c]
push eax
push 0x80000000
push ebx
push dword [ebp]
push 2
pop ecx
call fcn.00415f33
call eax
test eax, eax
je 0x41bcc7
movzx eax, word [0x42ca20]
mov ecx, 0x2045
push ebx
push 0x4400000
push 3
push ebx
push ebx
push dword [esp + 0x48]
and eax, 0x7a98db23
mov edx, 0xe4f8f001
push dword [esp + 0x44]
mov dword [0x42ca1c], eax
add eax, 0x161b
push dword [esp + 0x78]
mov word [0x42ca20], ax
movzx eax, byte [0x42ca16]
and ax, cx
push 2
pop ecx
mov word [0x42ca34], ax
call fcn.00415f33
call eax
mov dx, word [0x42ca18]
mov ecx, eax
mov al, dl
mov dword [esp + 0x18], ecx
or al, 0xb6
movzx eax, al
imul eax, eax, 0x6c
mov dword [esp + 0x14], eax
mov byte [0x42ca16], al
movzx eax, al
test ecx, ecx
je 0x41bcae
add eax, 0xffff9242
mov ecx, 0x5839
add cx, word [0x42ca44]
mov esi, 0x84480100
movzx edx, ax
mov word [0x42ca18], ax
mov eax, 0x333a
xor cx, ax
mov eax, edx
and eax, 0x93b6
mov word [0x42ca44], cx
mov word [0x42ca20], ax
mov eax, dword [esp + 0x14]
movzx eax, al
imul eax, eax, 0x46883d68
cmp dword [esp + 0x28], 4
mov dword [0x42ca24], eax
jne 0x41b739
lea ecx, [edx - 0x5389]
mov esi, 0x84c83100
mov word [0x42ca44], cx
push ebx
push esi
push ebx
push ebx
push ebx
push dword [esp + 0x5c]
movzx eax, cx
mov edx, 0xad1bc01
push dword [ebp + 4]
or eax, 0xea14fd02
push dword [esp + 0x34]
mov dword [0x42ca1c], eax
push 2
pop ecx
call fcn.00415f33
call eax
mov esi, eax
movzx eax, word [0x42ca24]
mov edx, eax
mov dword [esp + 0x64], esi
and edx, 0x7744
mov word [0x42ca34], dx
test esi, esi
je 0x41bc64
mov cx, word [0x42ca18]
or eax, 0x2f27
mov word [0x42ca44], ax
sub edx, 0x373a1ec1
movzx eax, cl
imul eax, eax, 0x3e
push 4
mov dword [0x42ca1c], edx
mov edx, 0xc4435159
mov dword [esp + 0x64], 0x4380
xor al, 0x4f
mov byte [0x42ca16], al
mov eax, 0x5e69
add ax, cx
mov word [0x42ca20], ax
lea eax, [esp + 0x64]
push eax
push 0x1f
push esi
push 2
pop ecx
call fcn.00415f33
call eax
movzx eax, byte [0x42ca34]
imul eax, eax, 0x19
mov byte [0x42ca16], al
cmp dword [ebp + 0x20], ebx
je 0x41b8a4
mov ax, word [0x42ca20]
mov ecx, 0xaa63
mov dx, ax
and dx, cx
mov ecx, 0x51c8
xor ax, cx
mov word [0x42ca44], dx
movzx ecx, ax
mov word [0x42ca18], ax
or ecx, 0xf4358429
imul eax, dword [ebp + 0x20], 0x3e8
push 4
mov dword [0x42ca1c], ecx
add cl, 0x27
mov byte [0x42ca16], cl
mov dword [esp + 0x18], eax
movzx eax, dx
mov edx, 0xc4435159
xor eax, 0x47242cb9
mov dword [0x42ca24], eax
lea eax, [esp + 0x18]
push eax
push 6
push esi
push 2
pop ecx
call fcn.00415f33
call eax
mov eax, dword [0x42ca1c]
mov edx, 0xc4435159
add eax, 0xffffa429
mov word [0x42ca18], ax
movzx eax, byte [0x42ca16]
or eax, 0xe1d45da5
push 4
mov dword [0x42ca24], eax
lea eax, [esp + 0x18]
push eax
push 5
push esi
push 2
pop ecx
call fcn.00415f33
call eax
push dword [ebp + 0x14]
mov eax, 0xc28
mov edx, 0x8e87bc01
push dword [ebp + 0x10]
add ax, word [0x42ca20]
push dword [ebp + 0xc]
mov word [0x42ca34], ax
push dword [ebp + 8]
push esi
push 2
pop ecx
call fcn.00415f33
call eax
test eax, eax
je 0x41bc25
mov ax, word [0x42ca44]
mov ecx, 0x6115
mov dx, word [0x42ca34]
sub ax, cx
mov esi, dword [0x42ca1c]
mov word [0x42ca20], ax
add esi, 0xfffff8e9
movzx ecx, dx
or dl, 0xa7
mov eax, ecx
mov word [0x42ca44], si
xor eax, 0x27e62a49
mov byte [0x42ca16], dl
mov dword [0x42ca1c], eax
and ecx, 0xe3003cf3
mov eax, 0x2103
mov dword [0x42ca24], ecx
or ax, si
movzx ecx, si
mov esi, dword [esp + 0x64]
mov edx, 0xacec4ce5
mov word [0x42ca34], ax
mov eax, 0xe89e
imul ecx, eax
lea eax, [ebp + 0x18]
push ebx
mov dword [esp + 0x14], 4
mov word [0x42ca18], cx
lea ecx, [esp + 0x14]
push ecx
push eax
push 0x20000013
push esi
push 2
pop ecx
call fcn.00415f33
call eax
test eax, eax
jne 0x41b9b9
movzx eax, byte [0x42ca16]
mov ecx, 0x721a
sub ax, cx
mov word [esp + 0x10], ax
mov eax, dword [0x42ca24]
mov cx, word [esp + 0x10]
xor eax, 0x47f8796f
mov dword [0x42ca1c], eax
imul eax, dword [0x42ca24], 0x5a13
or dword [ebp + 0x18], 0xffffffff
mov word [0x42ca34], ax
jmp 0x41b9c0
mov cx, word [0x42ca18]
movzx eax, word [0x42ca20]
xor eax, 0xd1cb03a8
movzx ecx, cx
mov dword [0x42ca24], eax
mov eax, 0xc0e1
imul ecx, eax
mov eax, 0x6c4d
or ax, word [0x42ca20]
mov dword [esp + 0x10], ebx
mov word [0x42ca18], ax
mov word [0x42ca44], cx
jmp 0x41bb17
mov edx, dword [esp + 0x14]
test edx, edx
je 0x41bb63
movzx ecx, word [0x42ca34]
add ecx, 0x359ca204
mov dword [0x42ca1c], ecx
test edi, edi
je 0x41ba4e
mov ecx, dword [0x42ca24]
inc edx
mov eax, ecx
and cl, 0x78
xor eax, 0x9ffa
mov byte [0x42ca16], cl
mov word [0x42ca20], ax
mov eax, dword [esp + 0x10]
add eax, edx
push eax
push edi
call fcn.0040688c
pop ecx
jmp 0x41ba86
mov eax, dword [0x42ca24]
xor cl, 0xd9
or eax, 0xd263
mov byte [0x42ca16], cl
movzx ecx, word [0x42ca44]
mov word [0x42ca20], ax
mov eax, 0x94c9
imul ecx, eax
lea eax, [edx + 1]
push eax
mov word [0x42ca18], cx
call fcn.0040630b
mov edi, eax
mov eax, dword [0x42ca1c]
or eax, 0xb150
mov word [0x42ca44], ax
mov ax, word [0x42ca20]
pop ecx
mov ecx, 0x6fe3
add ax, cx
mov word [0x42ca18], ax
movzx eax, ax
add eax, 0x231f9b7b
mov dword [0x42ca24], eax
movzx eax, byte [0x42ca16]
test edi, edi
je 0x41bb43
push dword [esp + 0x14]
mov ecx, 0xe7f0
mov byte [0x42ca16], bl
or ax, cx
mov word [0x42ca44], ax
lea eax, [esp + 0x1b4]
push eax
mov eax, dword [esp + 0x18]
add eax, edi
push eax
call fcn.00402970
mov eax, dword [0x42ca24]
add esp, 0xc
add eax, 0xffffd0ad
mov word [0x42ca20], ax
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x10]
mov byte [eax + edi], bl
mov eax, dword [esp + 0x14]
add dword [esp + 0x10], eax
lea eax, [esp + 0x14]
mov edx, 0xa7abc4a5
push eax
push 0x400
lea eax, [esp + 0x1b8]
push eax
push esi
push 2
pop ecx
call fcn.00415f33
call eax
test eax, eax
jne 0x41b9fe
jmp 0x41bb63
imul ecx, eax, 0xca
mov edx, 0x44ba
movzx eax, cl
sub ax, dx
xor cl, 0xa3
mov word [0x42ca18], ax
mov byte [0x42ca16], cl
imul edx, dword [0x42ca1c], 0x7fc8d723
mov ebx, dword [esp + 0x10]
mov dword [0x42ca1c], edx
test ebx, ebx
jne 0x41bbc7
test edi, edi
je 0x41bbc7
movzx eax, dl
mov ecx, edx
imul eax, eax, 0xd3
and ecx, 0xb4ac
push edi
mov word [0x42ca34], cx
mov byte [0x42ca16], al
movzx eax, cx
imul eax, eax, 0x4711ed24
mov dword [0x42ca24], eax
imul eax, edx, 0x1818
mov word [0x42ca20], ax
call fcn.004062f0
mov edx, dword [0x42ca1c]
mov ebx, dword [esp + 0x14]
pop ecx
movzx ecx, word [0x42ca44]
mov eax, 0x31e9
and cx, ax
mov dword [ebp + 0x1c], ebx
mov eax, ecx
and edx, 0x9bb6
and eax, 0x9f51
mov word [0x42ca20], dx
mov word [0x42ca34], ax
add ecx, 0xffffa350
mov eax, dword [esp + 0x68]
mov bl, 1
mov word [0x42ca44], cx
mov dword [eax], edi
movzx edi, byte [0x42ca16]
movzx eax, cx
xor edi, 0x9ac75f2b
imul eax, eax, 0x64995fa6
mov dword [0x42ca1c], eax
jmp 0x41bc32
mov edi, dword [0x42ca24]
mov dx, word [0x42ca20]
mov eax, 0x3dd2
sub dx, ax
imul eax, edi, 0x7dc6e5fc
push esi
mov word [0x42ca18], dx
mov edx, 0xc71af175
push 2
pop ecx
mov dword [0x42ca24], eax
call fcn.00415f33
call eax
mov dl, byte [0x42ca16]
jmp 0x41bc6d
sub dl, 0x41
mov byte [0x42ca16], dl
push dword [esp + 0x18]
movzx eax, dl
mov edx, 0xc71af175
or eax, 0x1db80948
mov dword [0x42ca1c], eax
mov eax, 0xf2b4
or ax, word [0x42ca20]
push 2
pop ecx
mov word [0x42ca44], ax
call fcn.00415f33
call eax
mov ecx, dword [0x42ca1c]
mov dx, word [0x42ca18]
jmp 0x41bcf3
mov ecx, dword [0x42ca24]
or ecx, 0x910550a7
add eax, 0xffffc71c
mov word [0x42ca20], ax
jmp 0x41bcf3
movzx eax, byte [0x42ca16]
movzx ecx, word [0x42ca44]
imul eax, eax, 0xfb
movzx edx, al
mov eax, 0x3d66
or dx, ax
xor ecx, 0x44187c4e
mov word [0x42ca18], dx
push dword [esp + 0x48]
mov ax, dx
mov esi, 0x7a86
and ax, si
and cl, 0x89
mov word [0x42ca34], ax
movzx eax, dx
add eax, 0x7d3747d9
mov byte [0x42ca16], cl
mov dword [0x42ca1c], eax
call fcn.004062f0
movzx esi, byte [0x42ca16]
mov edx, 0xc71af175
pop ecx
push dword [esp + 0x5c]
lea eax, [esi - 0xa74]
mov word [0x42ca34], ax
mov eax, dword [0x42ca24]
and eax, 0x1c5
mov word [0x42ca44], ax
lea eax, [esi - 0x6236]
push 2
pop ecx
mov word [0x42ca18], ax
call fcn.00415f33
call eax
mov si, word [0x42ca34]
mov dl, byte [0x42ca16]
jmp 0x41bd9b
sub dl, 0x2c
mov edi, 0xf5a0
movzx eax, dl
xor ax, di
mov byte [0x42ca16], dl
mov word [0x42ca18], ax
imul eax, ecx, 0x80cb
mov word [0x42ca44], ax
mov ecx, 0xa198
mov eax, 0xf90c
xor cx, si
pop edi
mov word [0x42ca20], cx
pop esi
movzx ecx, dl
or cx, ax
mov al, bl
pop ebp
mov word [0x42ca34], cx
pop ebx
add esp, 0x5a0
ret