Function at 0x41c31a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x453a5d
call fcn.004534f4
sub esp, 0x54
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x2c], esi
xor ebx, ebx
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [ebp - 4], ebx
mov edi, dword [ebp + 8]
push edi
call fcn.0041c1db
test al, al
je 0x41c52b
mov al, 0x78
mov dword [ebp - 0x5e], 0x7a6d5378
mov dword [ebp - 0x5a], 0x3b746d76
mov dword [ebp - 0x56], 0x746c363a
mov word [ebp - 0x52], 0x74
mov edx, ebx
mov dword [ebp - 0x14], edx
cmp edx, 0xc
jae 0x41c39a
movsx ecx, al
and ecx, 0x8000000f
jns 0x41c387
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x5d]
sub al, cl
mov byte [ebp + edx - 0x5d], al
inc edx
mov dword [ebp - 0x14], edx
mov al, byte [ebp - 0x5e]
jmp 0x41c372
mov byte [ebp - 0x51], bl
mov al, 0x46
mov dword [ebp - 0x43], 0x6b784946
mov dword [ebp - 0x3f], 0x4c6b7a67
mov dword [ebp - 0x3b], 0x476b726f
mov byte [ebp - 0x37], bl
mov edx, ebx
mov dword [ebp - 0x18], edx
cmp edx, 0xb
jae 0x41c3e4
movsx ecx, al
and ecx, 0x8000000f
jns 0x41c3d1
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x42]
sub al, cl
mov byte [ebp + edx - 0x42], al
inc edx
mov dword [ebp - 0x18], edx
mov al, byte [ebp - 0x43]
jmp 0x41c3bc
mov byte [ebp - 0x37], bl
lea edx, [ebp - 0x42]
lea ecx, [ebp - 0x5d]
call fcn.0040c457
cmp dword [edi + 0x14], 0x10
jb 0x41c3fa
mov edi, dword [edi]
push ebx
push 0x80
push 3
push ebx
push ebx
push 0xc0000000
push edi
call eax
mov dword [esi + 0xc], eax
cmp eax, 0xffffffff
je 0x41c52b
mov dword [ebp + 8], ebx
mov al, 0x61
mov dword [ebp - 0x50], 0x75664861
mov dword [ebp - 0x4c], 0x666d6a47
mov dword [ebp - 0x48], 0x667b6a54
mov byte [ebp - 0x44], bl
mov edx, ebx
mov dword [ebp - 0x1c], edx
cmp edx, 0xb
jae 0x41c462
movsx ecx, al
and ecx, 0x8000000f
jns 0x41c44f
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x4f]
sub al, cl
mov byte [ebp + edx - 0x4f], al
inc edx
mov dword [ebp - 0x1c], edx
mov al, byte [ebp - 0x50]
jmp 0x41c43a
mov byte [ebp - 0x44], bl
lea edx, [ebp - 0x4f]
lea ecx, [ebp - 0x5d]
call fcn.0040c457
lea ecx, [ebp + 8]
push ecx
push dword [esi + 0xc]
call eax
mov ebx, eax
test ebx, ebx
je 0x41c52b
push ebx
call fcn.004448c3
pop ecx
mov edi, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov al, 0x77
mov dword [ebp - 0x36], 0x686c5977
mov dword [ebp - 0x32], 0x73704d6b
mov word [ebp - 0x2e], 0x6c
xor edx, edx
mov dword [ebp - 0x20], edx
cmp edx, 8
jae 0x41c4d5
movsx ecx, al
and ecx, 0x8000000f
jns 0x41c4c2
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x35]
sub al, cl
mov byte [ebp + edx - 0x35], al
inc edx
mov dword [ebp - 0x20], edx
mov al, byte [ebp - 0x36]
jmp 0x41c4ad
mov byte [ebp - 0x2d], 0
lea edx, [ebp - 0x35]
lea ecx, [ebp - 0x5d]
call fcn.0040c457
push 0
lea ecx, [ebp + 8]
push ecx
push ebx
push edi
push dword [esi + 0xc]
call eax
test eax, eax
je 0x41c52b
mov eax, dword [ebp + 8]
mov ecx, eax
dec eax
mov dword [ebp + 8], eax
test ecx, ecx
je 0x41c522
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
je 0x41c513
mov al, byte [edi]
mov byte [ecx], al
inc dword [esi + 4]
jmp 0x41c51c
push edi
push ecx
mov ecx, esi
call fcn.00412fee
inc edi
mov dword [ebp - 0x24], edi
jmp 0x41c4f5
push dword [ebp - 0x28]
call fcn.004448be
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41c53e
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4