Function at 0x41978a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x52f9bf
call fcn.0050ad90
push ecx
push ebx
push esi
push edi
mov esi, ecx
push dword [ebp + 8]
mov dword [ebp - 0x10], esi
push 0x135
call fcn.0050aaf6
xor ebx, ebx
lea ecx, [esi + 0x60]
mov dword [ebp - 4], ebx
call fcn.00494142
lea edi, [esi + 0x1c0]
mov byte [ebp - 4], 1
mov ecx, edi
call fcn.00477d75
lea ecx, [esi + 0x2e4]
mov byte [ebp - 4], 2
call fcn.00494142
lea ecx, [esi + 0x444]
mov byte [ebp - 4], 3
call fcn.00494142
lea ecx, [esi + 0x5a4]
mov byte [ebp - 4], 4
call fcn.00494142
lea ecx, [esi + 0x704]
mov byte [ebp - 4], 5
call fcn.00477d75
lea ecx, [esi + 0x828]
mov byte [ebp - 4], 6
call fcn.00494142
lea ecx, [esi + 0x988]
mov byte [ebp - 4], 7
call fcn.00494142
lea ecx, [esi + 0xae8]
mov byte [ebp - 4], 8
call fcn.00494142
lea ecx, [esi + 0xc48]
mov byte [ebp - 4], 9
call fcn.00477d75
lea ecx, [esi + 0xd6c]
mov byte [ebp - 4], 0xa
call fcn.00477d75
lea ecx, [esi + 0xe90]
mov byte [ebp - 4], 0xb
call fcn.00477d75
lea ecx, [esi + 0xfb4]
mov byte [ebp - 4], 0xc
call fcn.00477d75
lea ecx, [esi + 0x10d8]
mov byte [ebp - 4], 0xd
call fcn.00477d75
lea ecx, [esi + 0x11fc]
mov byte [ebp - 4], 0xe
call fcn.00477d75
lea ecx, [esi + 0x1320]
mov byte [ebp - 4], 0xf
call fcn.00477d75
lea ecx, [esi + 0x1444]
mov byte [ebp - 4], 0x10
call fcn.00477d75
mov byte [ebp - 4], 0x11
lea ecx, [esi + 0x1568]
call fcn.00477d75
lea ecx, [esi + 0x168c]
mov byte [ebp - 4], 0x12
call fcn.00477d75
lea ecx, [esi + 0x17b0]
mov byte [ebp - 4], 0x13
call fcn.0047508a
lea ecx, [esi + 0x18d4]
mov byte [ebp - 4], 0x14
call fcn.00470c62
lea ecx, [esi + 0x19a4]
mov byte [ebp - 4], 0x15
call fcn.00470c62
lea ecx, [esi + 0x1a74]
mov byte [ebp - 4], 0x16
call fcn.00470c62
lea ecx, [esi + 0x1b44]
mov byte [ebp - 4], 0x17
call fcn.00470c62
lea ecx, [esi + 0x1c14]
mov byte [ebp - 4], 0x18
call fcn.00470c62
lea ecx, [esi + 0x1ce4]
mov byte [ebp - 4], 0x19
call fcn.00470c62
lea ecx, [esi + 0x1db4]
mov byte [ebp - 4], 0x1a
call fcn.00470c62
lea ecx, [esi + 0x1e84]
mov byte [ebp - 4], 0x1b
call fcn.00470c62
lea ecx, [esi + 0x1f54]
mov byte [ebp - 4], 0x1c
call fcn.00470c62
lea ecx, [esi + 0x2024]
mov byte [ebp - 4], 0x1d
call fcn.00470c62
lea ecx, [esi + 0x20f4]
mov byte [ebp - 4], 0x1e
call fcn.00470c62
lea ecx, [esi + 0x21c4]
mov byte [ebp - 4], 0x1f
call fcn.00470c62
lea ecx, [esi + 0x2294]
mov byte [ebp - 4], 0x20
call fcn.00494142
lea ecx, [esi + 0x23f4]
mov byte [ebp - 4], 0x21
call fcn.00494142
lea ecx, [esi + 0x2554]
mov byte [ebp - 4], 0x22
call fcn.00494142
lea ecx, [esi + 0x26b4]
mov byte [ebp - 4], 0x23
call fcn.00494142
lea ecx, [esi + 0x2814]
mov byte [ebp - 4], 0x24
call fcn.00494142
lea ecx, [esi + 0x2974]
mov byte [ebp - 4], 0x25
call fcn.00494142
lea ecx, [esi + 0x2ad4]
mov byte [ebp - 4], 0x26
call fcn.00494142
lea ecx, [esi + 0x2c34]
mov byte [ebp - 4], 0x27
call fcn.00494142
lea ecx, [esi + 0x2d94]
mov byte [ebp - 4], 0x28
call fcn.00494142
lea ecx, [esi + 0x2ef4]
mov byte [ebp - 4], 0x29
call fcn.00494142
lea ecx, [esi + 0x3054]
mov byte [ebp - 4], 0x2a
call fcn.00494142
lea ecx, [esi + 0x31b4]
mov byte [ebp - 4], 0x2b
call fcn.00494142
lea ecx, [esi + 0x3314]
mov byte [ebp - 4], 0x2c
call fcn.00494142
lea ecx, [esi + 0x3474]
mov byte [ebp - 4], 0x2d
call fcn.00494142
lea ecx, [esi + 0x35d4]
mov byte [ebp - 4], 0x2e
call fcn.00494142
lea ecx, [esi + 0x3734]
mov byte [ebp - 4], 0x2f
call fcn.00494142
lea ecx, [esi + 0x3894]
mov byte [ebp - 4], 0x30
call fcn.00494142
lea ecx, [esi + 0x39f4]
mov byte [ebp - 4], 0x31
call fcn.00494142
lea ecx, [esi + 0x3b54]
mov byte [ebp - 4], 0x32
call fcn.00494142
lea ecx, [esi + 0x3cb4]
mov byte [ebp - 4], 0x33
call fcn.00494142
lea ecx, [esi + 0x3e14]
mov byte [ebp - 4], 0x34
call fcn.00494142
lea ecx, [esi + 0x3f74]
mov byte [ebp - 4], 0x35
call fcn.00494142
lea ecx, [esi + 0x40d4]
mov byte [ebp - 4], 0x36
call fcn.00494142
lea ecx, [esi + 0x4234]
mov byte [ebp - 4], 0x37
call fcn.00494142
lea ecx, [esi + 0x4394]
mov byte [ebp - 4], 0x38
call fcn.00494142
lea ecx, [esi + 0x44f4]
mov byte [ebp - 4], 0x39
call fcn.00494142
lea ecx, [esi + 0x4654]
mov byte [ebp - 4], 0x3a
call fcn.00494142
lea ecx, [esi + 0x47b4]
mov byte [ebp - 4], 0x3b
call fcn.00494142
lea ecx, [esi + 0x4914]
mov byte [ebp - 4], 0x3c
call fcn.00494142
lea ecx, [esi + 0x4a74]
mov byte [ebp - 4], 0x3d
call fcn.00494142
lea ecx, [esi + 0x4bd4]
mov byte [ebp - 4], 0x3e
call fcn.00477d75
lea ecx, [esi + 0x4cf8]
mov byte [ebp - 4], 0x3f
call fcn.00477d75
lea ecx, [esi + 0x4e1c]
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.00477d75
lea ecx, [esi + 0x4f40]
mov byte [ebp - 4], 0x41
call fcn.00477d75
lea ecx, [esi + 0x5064]
mov byte [ebp - 4], 0x42
call fcn.00477d75
lea ecx, [esi + 0x5188]
mov byte [ebp - 4], 0x43
call fcn.00477d75
lea ecx, [esi + 0x52ac]
mov byte [ebp - 4], 0x44
call fcn.00477d75
lea ecx, [esi + 0x53d0]
mov byte [ebp - 4], 0x45
call fcn.00477d75
lea ecx, [esi + 0x54f4]
mov byte [ebp - 4], 0x46
call fcn.00477d75
lea ecx, [esi + 0x5618]
mov byte [ebp - 4], 0x47
call fcn.00477d75
push 0x2132b
mov dword [esi], 0x545d78
call dword [0x542068]
mov dword [esi + 0x574c], eax
xor eax, eax
mov dword [esi + 0x5750], eax
mov dword [esi + 0x5754], ebx
mov byte [esi + 0x5748], bl
mov dword [esi + 0x583c], ebx
mov dword [esi + 0x573c], ebx
mov dword [esi + 0x5740], ebx
mov dword [esi + 0x5758], ebx
mov dword [esi + 0x575c], ebx
lea eax, [esi + 0x3e14]
mov dword [esi + 0x5744], ebx
mov dword [esi + 0x5810], eax
lea eax, [esi + 0x3f74]
mov dword [esi + 0x5814], eax
lea eax, [esi + 0x40d4]
mov dword [esi + 0x5818], eax
lea eax, [esi + 0x4234]
mov dword [esi + 0x581c], eax
lea eax, [esi + 0x4394]
mov dword [esi + 0x5820], eax
lea eax, [esi + 0x44f4]
mov dword [esi + 0x5824], eax
lea eax, [esi + 0x4654]
mov dword [esi + 0x57e0], edi
mov dword [esi + 0x5828], eax
lea eax, [esi + 0x47b4]
mov dword [esi + 0x582c], eax
lea eax, [esi + 0x4914]
mov dword [esi + 0x5830], eax
lea eax, [esi + 0x4a74]
mov dword [esi + 0x5834], eax
lea eax, [esi + 0x2e4]
mov dword [esi + 0x5838], eax
lea eax, [esi + 0x168c]
mov dword [esi + 0x5760], eax
lea eax, [esi + 0x1444]
mov dword [esi + 0x5764], eax
lea eax, [esi + 0x1320]
mov dword [esi + 0x5768], eax
lea eax, [esi + 0x11fc]
mov dword [esi + 0x576c], eax
lea eax, [esi + 0x10d8]
mov dword [esi + 0x5770], eax
lea eax, [esi + 0xfb4]
mov dword [esi + 0x5774], eax
lea eax, [esi + 0xd6c]
mov dword [esi + 0x5778], eax
lea eax, [esi + 0xe90]
mov dword [esi + 0x577c], eax
lea eax, [esi + 0xc48]
mov dword [esi + 0x5780], eax
lea eax, [esi + 0x1568]
mov dword [esi + 0x5784], eax
lea eax, [esi + 0x704]
mov dword [esi + 0x5788], eax
lea eax, [esi + 0x4bd4]
mov dword [esi + 0x57b8], eax
lea eax, [esi + 0x4cf8]
mov dword [esi + 0x57bc], eax
lea eax, [esi + 0x4e1c]
mov dword [esi + 0x57c0], eax
lea eax, [esi + 0x4f40]
mov dword [esi + 0x57c4], eax
lea eax, [esi + 0x5064]
mov dword [esi + 0x57c8], eax
lea eax, [esi + 0x5188]
mov dword [esi + 0x57cc], eax
lea eax, [esi + 0x52ac]
mov dword [esi + 0x57d0], eax
lea eax, [esi + 0x53d0]
mov dword [esi + 0x57d4], eax
lea eax, [esi + 0x54f4]
mov dword [esi + 0x57d8], eax
lea eax, [esi + 0x5618]
mov dword [esi + 0x57dc], eax
lea eax, [esi + 0x2294]
mov dword [esi + 0x578c], eax
lea eax, [esi + 0x23f4]
mov dword [esi + 0x5790], eax
lea eax, [esi + 0x2554]
mov dword [esi + 0x5794], eax
lea eax, [esi + 0x26b4]
mov dword [esi + 0x5798], eax
lea eax, [esi + 0x2814]
mov dword [esi + 0x579c], eax
lea eax, [esi + 0x2974]
mov dword [esi + 0x57a0], eax
lea eax, [esi + 0x2ad4]
mov dword [esi + 0x57a4], eax
lea eax, [esi + 0x2c34]
mov dword [esi + 0x57a8], eax
lea eax, [esi + 0x2d94]
mov dword [esi + 0x57ac], eax
lea eax, [esi + 0x2ef4]
mov dword [esi + 0x57b0], eax
lea eax, [esi + 0x444]
mov dword [esi + 0x57b4], eax
lea eax, [esi + 0x3054]
mov dword [esi + 0x57e4], eax
lea eax, [esi + 0x31b4]
mov dword [esi + 0x57e8], eax
lea eax, [esi + 0x3314]
mov dword [esi + 0x57ec], eax
lea eax, [esi + 0x3474]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x57f0], eax
lea eax, [esi + 0x35d4]
mov dword [esi + 0x57f4], eax
lea eax, [esi + 0x3734]
mov dword [esi + 0x57f8], eax
lea eax, [esi + 0x3894]
mov dword [esi + 0x57fc], eax
lea eax, [esi + 0x39f4]
mov dword [esi + 0x5800], eax
lea eax, [esi + 0x3b54]
mov dword [esi + 0x5804], eax
lea eax, [esi + 0x3cb4]
mov dword [esi + 0x5808], eax
lea eax, [esi + 0x5a4]
mov dword [esi + 0x580c], eax
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4