Function at 0x41d6b9
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push ebx
add ebx, 0x1649e
and ebx, 0x137d0
pop ebx
push ebx
call fcn.0041d06f
add byte [ebp + 0x4b], al
cmp eax, dword [ecx + 0x3b]
aas
cmp eax, 0x8104c483
add esp, 4
invalid
jmp 0x41d07a
add esp, 4
sub ebx, 0x705
or ebx, 0xa0c7
and ebx, 0x7841
pop ebx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x41d0cd
invalid
push edi
xor edi, 0x1e0b
and edi, 0x10c5e
pop edi
push edi
push edi
add esp, 4
or edi, 0xf016
xor edi, 0x771f
pop edi
push edx
call 0x41d0c4
add byte [ecx], bh
dec eax
inc esp
aaa
inc eax
add esp, 4
pop edx
jmp 0x41d2fb
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push edx
or edx, 0x11783
sub edx, 0x1115
pop edx
push ecx
push edi
add esp, 4
xor ecx, 0x109fb
and ecx, 0xbb5b
call 0x41d111
add byte [edi], bh
dec esi
dec ebp
dec edx
push eax
aaa
dec eax
inc edi
inc eax
add esp, 4
pop ecx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x41d17c
push esi
add esi, 0x1451d
pop esi
push edx
push esi
add esp, 4
xor edx, 0x8a8
pop edx
push ebx
push edi
add esp, 4
add ebx, 0x180ac
sub ebx, 0x761b
xor ebx, 0x1f49
sub ebx, 0x18567
pop ebx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x41d2ad
cmp dword [ebp - 0xc80], 0
jle 0x41d2a1
push edx
jmp 0x41d18f
sub edx, 0x7c2
pop edx
push esi
push edi
add esp, 4
xor esi, 0xaf1b
or esi, 0x10376
pop esi
push edi
call 0x41d1b7
add byte [ecx], bh
cmp eax, 0x344a3b41
inc ebp
inc esi
add esp, 4
pop edi
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x41d23d
push ecx
push eax
add esp, 4
add ecx, 0x182d6
call 0x41d1e8
add byte [edx], dh
dec edi
dec eax
xor al, 0x46
dec eax
add esp, 4
xor ecx, 0x14821
call 0x41d1ff
add byte [esi + 0x45], al
cmp byte ds:[edx + esi + 0x4b], cl
dec edx
add esp, 4
pop ecx
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x41d225
mov dword [ebp - 0x15c8], 1
jmp 0x41d22f
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x41d2a1
push edi
push eax
add esp, 4
xor edi, 0xc23e
add edi, 0x9ffe
add edi, 0xb515
or edi, 0xd034
pop edi
push ecx
add ecx, 0x577f
xor ecx, 0xd9ab
and ecx, 0x1ee1
pop ecx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x41d17c
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x41d2f6
push eax
push ebx
add esp, 4
and eax, 0x119e8
add eax, 0x17796
sub eax, 0xda69
xor eax, 0xefdd
pop eax
push esi
sub esi, 0x17d83
xor esi, 0x5969
add esi, 0x18214
pop esi
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x41d337
jmp 0x41d044
push ecx
push eax
add esp, 4
sub ecx, 0x12adf
pop ecx
push ebx
push edx
add esp, 4
xor ebx, 0x14a21
pop ebx
push eax
xor eax, 0x75ef
or eax, 0x16971
or eax, 0xeede
add eax, 0x96a6
pop eax
mov dword [ebp - 0x3e8], 0
push edi
or edi, 0xd83a
sub edi, 0xc7ae
pop edi
push esi
push edx
add esp, 4
and esi, 0x2350
pop esi
push edx
call 0x41d35f
add byte [esi], dh
inc esp
inc ebp
xor al, 0x37
xor al, byte [ebx - 0x157efb3c]
xchg ebx, eax
inc ebp
add byte [eax], al
pop edx
push eax
push esi
add esp, 4
or eax, 0xa9af
or eax, 0x1ce0
or eax, 0xe4c6
pop eax
push ebx
sub ebx, 0x919e
and ebx, 0x139c7
xor ebx, 0x5c7d
or ebx, 0x11ebc
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push edx
push ebx
add esp, 4
and edx, 0xd762
or edx, 0xa1aa
add edx, 0xcccb
pop edx
push ecx
push esi
add esp, 4
jmp 0x41d3d5
xor ecx, 0x185e
sub ecx, 0x4c48
pop ecx
mov dword [ebp - 0x20a4], 0xffffffff
push ebx
push edx
add esp, 4
or ebx, 0x8c58
pop ebx
push ebx
or ebx, 0x6747
pop ebx
push ecx
push esi
add esp, 4
or ecx, 0x10b23
pop ecx
push esi
push edx
add esp, 4
or esi, 0xe6e
sub esi, 0x13686
pop esi
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x41d43b
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push esi
xor esi, 0xb6dd
call 0x41d451
add byte [0x3e3d4249], bh
cmp eax, 0x83454a36
les eax, [esi + ebx*2]
push ebx
or ebx, 0x25e6
call 0x41d469
add byte [edx], dh
push eax
dec ecx
aaa
dec edx
dec eax
add esp, 4
pop ebx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x41d4b5
push edx
push edi
add esp, 4
and edx, 0x1523e
call 0x41d497
add byte [ecx + 0x43], cl
inc edx
cmp ecx, dword [edi + 0x49]
cmp byte [eax - 0x7d], cl
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
dec ebx
inc edi
aas
dec eax
inc edi
inc ebp
add esp, 4
add edx, 0xfdc8
pop edx
jmp 0x41d6e3
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push ecx
push edi
add esp, 4
call 0x41d4de
add byte [ecx + 0x48], cl
cmp bh, byte [eax]
cmp al, 0x4b
xor eax, dword [esi - 0x7d]
les eax, [ecx + eax*4]
sal esp, 0xf8
add byte [eax], al
sub ecx, 0x525a
pop ecx
push esi
jmp 0x41d4f6
sub esi, 0x16b49
pop esi
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x41d564
push edi
xor edi, 0x1169c
or edi, 0x7195
and edi, 0x9f3e
pop edi
push esi
push esi
add esp, 4
add esi, 0x13a88
jmp 0x41d546
or esi, 0xdf66
and esi, 0x6717
pop esi
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x41d695
cmp dword [ebp - 0xc88], 0
jle 0x41d689
push edi
or edi, 0xa66a
jmp 0x41d57e
xor edi, 0x14d61
pop edi
push eax
push edi
add esp, 4
sub eax, 0x171a7
sub eax, 0x6974
add eax, 0xe94b
and eax, 0x217f
pop eax
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x41d625
push ecx
xor ecx, 0x885f
add ecx, 0x3578
sub ecx, 0xe203
or ecx, 0x12414
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x1624c
sub eax, 0xd2bd
and eax, 0x90aa
pop eax
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x41d60d
mov dword [ebp - 0x15a0], 1
jmp 0x41d617
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x41d689
push edx
push edi
add esp, 4
call 0x41d639
add byte [0x343f4150], dh
cmp cl, byte ds:[edx + 0x41]
add esp, 4
and edx, 0x2abf
pop edx
push eax
and eax, 0x3bdc
sub eax, 0x9e5b
xor eax, 0x8729
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x41d564
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x41d6de
push edx
push edi
add esp, 4
jmp 0x41d6aa
pop edx
push ecx
call 0x41d6b9
add byte [edi + 0x40], cl
xor bh, byte ss:[ebx]
xor al, 0x3b
add esp, 4
jmp 0x41d6c3
add ecx, 0xf86e
add ecx, 0x14f38
pop ecx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x41d71f
jmp 0x41d42c
push esi
or esi, 0x11a59
xor esi, 0x233f
pop esi
push eax
or eax, 0x75cf
call 0x41d705
add byte [ebx + 0x34], al
dec edx
inc edi
xor cl, byte [esi + 0x4c]
add esp, 4
add eax, 0xde6b
add eax, 0x13ddb
pop eax
mov dword [ebp - 0xab8], 0
push esi
push edi
add esp, 4
xor esi, 0xa021
pop esi
push eax
push edi
add esp, 4
sub eax, 0xd984
sub eax, 0x3e37
pop eax
push ecx
add ecx, 0xb533
xor ecx, 0x14d09
sub ecx, 0x5072
pop ecx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push ebx
jmp 0x41d7ad
sub ebx, 0xf5aa
pop ebx
push edi
push ebx
add esp, 4
or edi, 0x1153d
call 0x41d7cd
add byte [ecx + 0x3f], cl
inc edi
dec ebx
dec edx
inc ecx
cmp al, byte [ebx - 0x307efb3c]
test al, 0x7c
add byte [eax], al
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push ecx
push eax
add esp, 4
or ecx, 0x134b3
sub ecx, 0x11a6d
call 0x41d890
add byte [0x3e493749], bh
inc esp
dec esi
dec ebp
dec esp
add esp, 4
xor ecx, 0x16055
pop ecx
push edi
add edi, 0x14305
pop edi
push ecx
jmp 0x41d8ab
pop ecx
push edx
push eax
add esp, 4
add edx, 0x164c6
jmp 0x41d8bc
xor edx, 0xe47
pop edx
push edi
push esi
add esp, 4
add edi, 0xa7b2
jmp 0x41d8d3
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push eax
add eax, 0xa7a2
pop eax
push ecx
push ebx
add esp, 4
and ecx, 0x10005
add ecx, 0x7e62
add ecx, 0x119d3
pop ecx
push edi
push esi
add esp, 4
and edi, 0x155f6
xor edi, 0x13021
pop edi
cmp dword [ebp - 0x15d8], 0
jne 0x41d946
mov dword [ebp - 0x31c], 0
jmp 0x41dc02
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push ebx
push eax
add esp, 4
sub ebx, 0x1812d
jmp 0x41d968
pop ebx
push eax
push esi
add esp, 4
xor eax, 0x88b
xor eax, 0x2f76
or eax, 0xa0c9
jmp 0x41d989
pop eax
cmp dword [ebp - 0xc98], 0
jne 0x41d9a2
mov dword [ebp - 0x31c], 0
jmp 0x41dc02
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push edi
push eax
add esp, 4
add edi, 0x15cd3
sub edi, 0x987f
xor edi, 0x820e
jmp 0x41d9cd
pop edi
push edi
push edx
add esp, 4
add edi, 0xd60a
or edi, 0x3beb
pop edi
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ebx
push ecx
add esp, 4
and ebx, 0x12589
jmp 0x41da21
pop ebx
push esi
push edi
add esp, 4
and esi, 0xe40b
or esi, 0x14b1b
jmp 0x41da38
xor esi, 0x130f2
pop esi
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push edx
push esi
add esp, 4
xor edx, 0x130b
or edx, 0xac9f
pop edx
push esi
jmp 0x41dab2
call 0x41dac1
add byte [ecx + 0x3b], al
inc ebp
dec eax
dec esp
cmp byte [edi], dh
xor cl, byte [esi - 0x7d]
les eax, [ecx + eax*4]
out dx, al
dec edi
arpl word [eax], ax
add byte [esi + 0xf], bl
mov bh, 0x95
hlt
push ebx
push eax
add esp, 4
or ebx, 0x2b39
and ebx, 0x15b69
xor ebx, 0x143fa
pop ebx
push edi
and edi, 0x11ea7
sub edi, 0xcf9a
and edi, 0x14087
xor edi, 0x6f55
pop edi
cmp dword [ebp - 0x31c], 0
jne 0x41e54d
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
add byte [eax], al
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push eax
push edx
add esp, 4
add eax, 0x6dbd
sub eax, 0xb920
sub eax, 0xdef4
xor eax, 0x9a4e
pop eax
push edi
add edi, 0x1410c
pop edi