Function at 0x41b628
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x413b28], 1
je 0x41b65a
mov esp, esp
inc edx
dec edx
ror esi, 0xd
rol esi, 0xd
add esp, 0
jg 0x41b650
jp 0x41b64b
jle 0x41b650
lcall 0x413b, 0x28a175c3
add byte [ecx + 0x23ebfc45], cl
mov eax, dword [0x413b28]
mov dword [ebp - 4], eax
jmp 0x41b67d
nop
jae 0x41b676
pushf
lea ebx, [ebx + 0x6940]
lea ebx, [ebx - 0x6940]
popf
jle 0x41b66f
jle 0x41b671
lea esi, [esi]
jb 0x41b676
xor eax, 0xd2e9c033
add dword [eax], eax
add byte [esi], bh
xor eax, eax
jmp 0x41b84f
jle 0x41b67f
jbe 0x41b692
lea ecx, [ecx]
lea ebx, [ebx + 0x3fc1]
lea ebx, [ebx - 0x3fc1]
ja 0x41b692
mov edx, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.00427d04
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00418252
add esp, 0xc
lea edx, [edx]
xor edx, dword [esp + 0x10]
xor edx, dword [esp + 0x10]
ror ebx, 0x1d
ror ebx, 3
test dword [esp + 0x10], eax
jnp 0x41b6de
pushf
xor eax, esi
xor eax, esi
xor esi, edx
xor esi, edx
xor esp, 0
jo 0x41b6d3
popf
mov ecx, ecx
jp 0x41b6d9
jo 0x41b6db
jp 0x41b6de
mov edx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
lea ebx, [ebx + 0x1f59]
sub ebx, 0x1f59
jb 0x41b72c
lea edx, [edx]
jb 0x41b724
jbe 0x41b726
lea esi, [esi]
jae 0x41b72c
mov ecx, 0xe8458a41
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
jae 0x41b796
je 0x41b7a5
jne 0x41b79a
lea esp, [esp]
jno 0x41b79f
jb 0x41b7a1
jne 0x41b7a5
add eax, 0x783d836c
cmp al, byte [ecx]
add byte [edx + ebp - 9], dh
invalid
cmp dword [0x413a78], 0
je 0x41b7d8
neg edx
neg edx
ror esi, 0x15
ror esi, 0xb
js 0x41b7ba
shr esp, 0
jp 0x41b7c5
jbe 0x41b7c1
jnp 0x41b7c5
mov ecx, 0xe8458db5
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x413a78]
push ecx
call fcn.00430b8f
mov dword [ebp - 8], eax
xchg ecx, ecx
je 0x41b7e7
nop
xchg esp, esp
mov edx, edx
jne 0x41b7e3
jne 0x41b7e7
mov ebp, 0x6a0d6a00
add byte [ebp - 0x17ad17ab], cl
pop esi
retf 0xffff
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00418252
add esp, 0xc
cmp edi, dword [esp]
nop
xchg edi, eax
xchg edi, eax
jle 0x41b80e
pushf
add esp, 0
popf
lea esp, [esp]
jge 0x41b80b
jg 0x41b80e
mov edx, 0xf87d83
cmp dword [ebp - 8], 0
je 0x41b833
jns 0x41b816
mov esi, esi
test dword [esp], ecx
shr esp, 0
jns 0x41b827
jae 0x41b822
jp 0x41b824
js 0x41b827
mov ecx, 0x50f8458b
mov eax, dword [ebp - 8]
push eax
call fcn.00427d04
add esp, 4
add esp, 0
rol ebx, 2
rol ebx, 0x1e
xchg ebx, eax
xchg ebx, eax
js 0x41b840
jb 0x41b848
jg 0x41b844
jae 0x41b848
mov ebp, 0x84d8bbf
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4