Function at 0x4123b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bbe23
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x4ed310]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x20], 0x52464e49
mov eax, dword [ebp - 0x20]
mov esi, ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x18], 0x4544524f
mov eax, dword [ebp - 0x18]
mov cl, 0x52
mov dword [ebp - 0x1c], 0x43455241
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], cl
xor eax, eax
mov dword [ebp - 0x12c], esi
mov word [ebp - 0x8c], 1
mov dword [ebp - 0x84], edx
mov word [ebp - 0x6e], 0xaa55
xor ecx, ecx
lea ecx, [ecx]
movzx edx, byte [ebp + ecx - 0x8b]
movzx edi, byte [ebp + ecx - 0x8c]
shl edx, 8
add eax, edi
add ecx, 2
add eax, edx
cmp ecx, 0x20
jb 0x412450
neg eax
mov word [ebp - 0x70], ax
mov eax, dword [ebx]
mov edx, dword [eax + 4]
push 0x20
lea ecx, [ebp - 0x8c]
push ecx
mov ecx, ebx
call edx
mov eax, dword [esi]
mov ecx, dword [esi + 4]
sub ecx, eax
sar ecx, 2
cmp ecx, 1
jae 0x4124b7
push str.No_ElTorito_images_to_write.
lea ecx, [ebp - 0xd4]
call fcn.004030a0
push 0x4e2d94
lea edx, [ebp - 0xd4]
push edx
call fcn.00499164
mov ecx, dword [eax]
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov al, byte [ecx + 0x1c]
neg al
sbb al, al
and al, 0x88
mov byte [ebp - 0x4c], al
mov dx, word [ecx + 0x24]
mov word [ebp - 0x4a], dx
mov ax, word [ecx + 0x26]
mov word [ebp - 0x46], ax
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x44], edx
mov eax, dword [ecx + 0x20]
sub eax, 0
je 0x41263f
dec eax
je 0x412549
dec eax
jne 0x412647
mov byte [ebp - 0x4b], 4
cmp dword [ecx + 0x14], 8
jb 0x412517
mov ecx, dword [ecx]
lea eax, [ebp - 0x48]
push eax
call fcn.00412180
test al, al
jne 0x412647
push str.Could_not_read_MBR_for_producing_an_ElTorito_boot_image.
lea ecx, [ebp - 0xd4]
call fcn.004030a0
push 0x4e2d94
lea ecx, [ebp - 0xd4]
push ecx
call fcn.00499164
cmp dword [ecx + 0x14], 8
jb 0x412551
mov ecx, dword [ecx]
xor edx, edx
mov eax, ecx
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], dx
lea esi, [eax + 2]
lea ebx, [ebx]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x412570
sub eax, esi
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00401bf0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 4], 0
call fcn.00402a20
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 8
mov esi, eax
mov edi, edx
jb 0x4125b9
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0049855c
add esp, 4
xor edx, edx
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], dx
cmp esi, 0x12c000
jne 0x4125d9
test edi, edi
je 0x412630
cmp esi, 0x168000
jne 0x4125e5
test edi, edi
je 0x412621
cmp esi, 0x2d0000
jne 0x4125f1
test edi, edi
je 0x412612
push str.Invalid_ElTorito_floppy_emulation_type.
lea ecx, [ebp - 0xfc]
call fcn.004030a0
push 0x4e2d94
lea eax, [ebp - 0xfc]
push eax
call fcn.00499164
mov esi, dword [ebp - 0x12c]
mov byte [ebp - 0x4b], 3
mov byte [ebp - 0x48], dl
jmp 0x412647
mov esi, dword [ebp - 0x12c]
mov byte [ebp - 0x4b], 2
mov byte [ebp - 0x48], dl
jmp 0x412647
mov esi, dword [ebp - 0x12c]
mov byte [ebp - 0x4b], 1
mov byte [ebp - 0x48], dl
jmp 0x412647
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0x48], 0
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push 0x20
lea eax, [ebp - 0x4c]
push eax
mov ecx, ebx
call edx
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov edi, 1
sar eax, 2
movzx eax, ax
mov ecx, edi
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], edi
cmp cx, ax
jae 0x4128dc
movzx eax, ax
dec eax
mov dword [ebp - 0x138], eax
jmp 0x412696
mov esi, dword [ebp - 0x12c]
mov edx, dword [esi]
xor eax, eax
movzx ecx, di
mov esi, dword [edx + ecx*4]
cmp ecx, dword [ebp - 0x138]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
sete al
add al, 0x90
inc ecx
push ecx
mov byte [ebp - 0xac], al
lea eax, [ebp - 0x20]
mov edx, 1
push str.IMAGE_u
push eax
mov byte [ebp - 0xab], 0
mov word [ebp - 0xaa], dx
call fcn.0049a1fb
lea eax, [ebp - 0x20]
add esp, 0xc
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x412710
sub eax, ecx
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0xa8]
push edx
call fcn.004986a0
mov eax, dword [ebx]
mov edx, dword [eax + 4]
add esp, 0xc
push 0x20
lea ecx, [ebp - 0xac]
push ecx
mov ecx, ebx
call edx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov al, byte [esi + 0x1c]
neg al
sbb al, al
and al, 0x88
mov byte [ebp - 0x6c], al
mov cx, word [esi + 0x24]
mov word [ebp - 0x6a], cx
mov dx, word [esi + 0x26]
mov word [ebp - 0x66], dx
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x64], eax
mov eax, dword [esi + 0x20]
sub eax, 0
je 0x4128b1
dec eax
je 0x4127bc
dec eax
jne 0x4128b9
mov byte [ebp - 0x6b], 4
cmp dword [esi + 0x14], 8
jb 0x41279f
mov ecx, dword [esi]
jmp 0x4127a1
mov ecx, esi
lea edx, [ebp - 0x68]
push edx
call fcn.00412180
test al, al
jne 0x4128b9
push str.Could_not_read_MBR_for_producing_an_ElTorito_boot_image.
jmp 0x4125f6
cmp dword [esi + 0x14], 8
jb 0x4127c4
mov esi, dword [esi]
xor eax, eax
mov word [ebp - 0xc8], ax
mov eax, esi
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0xb8], 0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4127e6
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebp - 0xc8]
call fcn.00401bf0
lea ecx, [ebp - 0xc8]
push ecx
mov dword [ebp - 4], 1
call fcn.00402a20
add esp, 4
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xb4], 8
mov esi, eax
mov edi, edx
jb 0x41283b
mov edx, dword [ebp - 0xc8]
push edx
call fcn.0049855c
add esp, 4
xor eax, eax
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0xb8], 0
mov word [ebp - 0xc8], ax
cmp esi, 0x12c000
jne 0x412864
test edi, edi
je 0x4128a2
cmp esi, 0x168000
jne 0x412870
test edi, edi
je 0x412893
cmp esi, 0x2d0000
jne 0x412923
test edi, edi
jne 0x412923
mov edi, dword [ebp - 0x130]
mov byte [ebp - 0x6b], 3
mov byte [ebp - 0x68], al
jmp 0x4128b9
mov edi, dword [ebp - 0x130]
mov byte [ebp - 0x6b], 2
mov byte [ebp - 0x68], al
jmp 0x4128b9
mov edi, dword [ebp - 0x130]
mov byte [ebp - 0x6b], 1
mov byte [ebp - 0x68], al
jmp 0x4128b9
mov byte [ebp - 0x6b], 0
mov byte [ebp - 0x68], 0
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push 0x20
lea eax, [ebp - 0x6c]
push eax
mov ecx, ebx
call edx
inc edi
mov dword [ebp - 0x130], edi
cmp di, word [ebp - 0x134]
jb 0x412690
mov ecx, dword [ebx + 0x30]
test ecx, ecx
je 0x412908
mov eax, dword [ebx + 0x24]
sub eax, ecx
mov byte [ebp - 0x125], 0
je 0x412908
mov esi, eax
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push 1
lea eax, [ebp - 0x125]
push eax
mov ecx, ebx
call edx
dec esi
jne 0x4128f3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00499155
mov esp, ebp
pop ebp
ret
push str.Invalid_ElTorito_floppy_emulation_type.
lea ecx, [ebp - 0x124]
call fcn.004030a0
push 0x4e2d94
lea ecx, [ebp - 0x124]
push ecx
jmp 0x41260d