Function at 0x41bd20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x462994
mov eax, dword fs:[0]
push eax
sub esp, 0x350
mov eax, dword [0x482738]
xor eax, esp
mov dword [esp + 0x348], eax
push ebx
push esi
push edi
mov eax, dword [0x482738]
xor eax, esp
push eax
lea eax, [esp + 0x360]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [edi + 0x58], 0
jne 0x41c50e
push 0x14
push 0x40
call fcn.00445848
mov esi, eax
test esi, esi
jne 0x41bf79
sub esp, 8
lea ecx, [esp + 0x2c]
call fcn.00407249
mov dword [esp + 0x368], esi
mov edx, 0x470498
push 0x69
push 0xc
lea ecx, [esp + 0x254]
call fcn.00421550
mov dword [esp + 0x1c], eax
mov byte [esp + 0x370], 1
mov edx, str.5Z9X4u
push 0x79
push 0x12
lea ecx, [esp + 0x244]
call fcn.00421550
mov dword [esp + 0x20], eax
mov byte [esp + 0x378], 2
mov edx, 0x4704e8
push 0x7d
push 1
lea ecx, [esp + 0x27c]
call fcn.00421550
mov ebx, eax
mov byte [esp + 0x380], 3
mov edx, 0x4704ec
push 0x7e
push 1
lea ecx, [esp + 0x29c]
call fcn.00421550
add esp, 0x20
mov edi, eax
mov byte [esp + 0x368], 4
call fcn.004444cd
mov esi, eax
call fcn.004440c6
push esi
push ecx
push eax
push ecx
mov edx, edi
lea ecx, [esp + 0x44]
call fcn.0040a053
add esp, 4
mov ecx, eax
call fcn.00406a26
mov edx, ebx
mov ecx, eax
call fcn.0040a053
mov edx, dword [esp + 0x18]
mov ecx, eax
call fcn.0040a053
mov edx, dword [esp + 0x1c]
mov ecx, eax
call fcn.0040a053
add esp, 4
mov ecx, eax
call fcn.00406a26
mov byte [esp + 0x368], 3
lea ecx, [esp + 0x27c]
call fcn.004068a1
mov byte [esp + 0x368], 2
lea ecx, [esp + 0x264]
call fcn.004068a1
mov byte [esp + 0x368], 1
lea ecx, [esp + 0x234]
call fcn.004068a1
mov byte [esp + 0x368], 0
lea ecx, [esp + 0x24c]
call fcn.004068a1
push 0xe6
push 7
lea eax, [esp + 0x26c]
push 0x471104
push eax
call fcn.00421400
mov edi, eax
mov byte [esp + 0x378], 5
lea eax, [esp + 0x244]
push 0xfa
push 5
push 0x4704f0
push eax
call fcn.00421400
add esp, 0x20
mov esi, eax
mov byte [esp + 0x368], 6
lea eax, [esp + 0x24c]
push eax
lea ecx, [esp + 0x28]
call fcn.00407305
mov byte [esp + 0x368], 7
mov edx, esi
push edi
mov ecx, eax
call fcn.00416610
add esp, 4
mov byte [esp + 0x368], 6
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov byte [esp + 0x368], 5
lea ecx, [esp + 0x234]
call fcn.004063e2
mov byte [esp + 0x368], 0
lea ecx, [esp + 0x264]
call fcn.004063e2
mov dword [esp + 0x368], 0xffffffff
lea ecx, [esp + 0x24]
call fcn.00402997
xor al, al
jmp 0x41c516
push 1
push esi
call fcn.00445255
test eax, eax
jne 0x41c196
sub esp, 8
lea ecx, [esp + 0x18c]
call fcn.00407249
mov dword [esp + 0x368], 8
mov edx, 0x470498
push 0x69
push 0xc
lea ecx, [esp + 0x284]
call fcn.00421550
mov dword [esp + 0x18], eax
mov byte [esp + 0x370], 9
mov edx, 0x4721a8
push 0xf2
push 0x24
lea ecx, [esp + 0x274]
call fcn.00421550
mov dword [esp + 0x24], eax
mov byte [esp + 0x378], 0xa
mov edx, 0x4704e8
push 0x7d
push 1
lea ecx, [esp + 0x24c]
call fcn.00421550
mov ebx, eax
mov byte [esp + 0x380], 0xb
mov edx, 0x4704ec
push 0x7e
push 1
lea ecx, [esp + 0x26c]
call fcn.00421550
add esp, 0x20
mov edi, eax
mov byte [esp + 0x368], 0xc
call fcn.004444cd
mov esi, eax
call fcn.004440c6
push esi
push ecx
push eax
push ecx
mov edx, edi
lea ecx, [esp + 0x1a4]
call fcn.0040a053
add esp, 4
mov ecx, eax
call fcn.00406a26
mov edx, ebx
mov ecx, eax
call fcn.0040a053
mov edx, dword [esp + 0x1c]
mov ecx, eax
call fcn.0040a053
mov edx, dword [esp + 0x18]
mov ecx, eax
call fcn.0040a053
add esp, 4
mov ecx, eax
call fcn.00406a26
mov byte [esp + 0x368], 0xb
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov byte [esp + 0x368], 0xa
lea ecx, [esp + 0x234]
call fcn.004068a1
mov byte [esp + 0x368], 9
lea ecx, [esp + 0x264]
call fcn.004068a1
mov byte [esp + 0x368], 8
lea ecx, [esp + 0x27c]
call fcn.004068a1
push 0xe6
push 7
lea eax, [esp + 0x26c]
push 0x471104
push eax
call fcn.00421400
mov edi, eax
mov byte [esp + 0x378], 0xd
lea eax, [esp + 0x244]
push 0xfa
push 5
push 0x4704f0
push eax
call fcn.00421400
add esp, 0x20
mov esi, eax
mov byte [esp + 0x368], 0xe
lea eax, [esp + 0x24c]
push eax
lea ecx, [esp + 0x188]
call fcn.00407305
mov byte [esp + 0x368], 0xf
mov edx, esi
push edi
mov ecx, eax
call fcn.00416610
add esp, 4
mov byte [esp + 0x368], 0xe
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov byte [esp + 0x368], 0xd
lea ecx, [esp + 0x234]
call fcn.004063e2
mov byte [esp + 0x368], 8
lea ecx, [esp + 0x264]
call fcn.004063e2
mov dword [esp + 0x368], 0xffffffff
lea ecx, [esp + 0x184]
call fcn.00402997
xor al, al
jmp 0x41c516
push 0
push 0
push 1
push esi
call fcn.004469d0
test eax, eax
jne 0x41c3b7
sub esp, 8
lea ecx, [esp + 0xdc]
call fcn.00407249
mov dword [esp + 0x368], 0x10
mov edx, 0x470498
push 0x69
push 0xc
lea ecx, [esp + 0x284]
call fcn.00421550
mov dword [esp + 0x18], eax
mov byte [esp + 0x370], 0x11
mov edx, 0x4721f8
push 0xb2
push 0x21
lea ecx, [esp + 0x274]
call fcn.00421550
mov dword [esp + 0x24], eax
mov byte [esp + 0x378], 0x12
mov edx, 0x4704e8
push 0x7d
push 1
lea ecx, [esp + 0x24c]
call fcn.00421550
mov ebx, eax
mov byte [esp + 0x380], 0x13
mov edx, 0x4704ec
push 0x7e
push 1
lea ecx, [esp + 0x26c]
call fcn.00421550
add esp, 0x20
mov edi, eax
mov byte [esp + 0x368], 0x14
call fcn.004444cd
mov esi, eax
call fcn.004440c6
push esi
push ecx
push eax
push ecx
mov edx, edi
lea ecx, [esp + 0xf4]
call fcn.0040a053
add esp, 4
mov ecx, eax
call fcn.00406a26
mov edx, ebx
mov ecx, eax
call fcn.0040a053
mov edx, dword [esp + 0x1c]
mov ecx, eax
call fcn.0040a053
mov edx, dword [esp + 0x18]
mov ecx, eax
call fcn.0040a053
add esp, 4
mov ecx, eax
call fcn.00406a26
mov byte [esp + 0x368], 0x13
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov byte [esp + 0x368], 0x12
lea ecx, [esp + 0x234]
call fcn.004068a1
mov byte [esp + 0x368], 0x11
lea ecx, [esp + 0x264]
call fcn.004068a1
mov byte [esp + 0x368], 0x10
lea ecx, [esp + 0x27c]
call fcn.004068a1
push 0xe6
push 7
lea eax, [esp + 0x26c]
push 0x471104
push eax
call fcn.00421400
mov edi, eax
mov byte [esp + 0x378], 0x15
lea eax, [esp + 0x244]
push 0xfa
push 5
push 0x4704f0
push eax
call fcn.00421400
add esp, 0x20
mov esi, eax
mov byte [esp + 0x368], 0x16
lea eax, [esp + 0x24c]
push eax
lea ecx, [esp + 0xd8]
call fcn.00407305
mov byte [esp + 0x368], 0x17
mov edx, esi
push edi
mov ecx, eax
call fcn.00416610
add esp, 4
mov byte [esp + 0x368], 0x16
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov byte [esp + 0x368], 0x15
lea ecx, [esp + 0x234]
call fcn.004063e2
mov byte [esp + 0x368], 0x10
lea ecx, [esp + 0x264]
call fcn.004063e2
mov dword [esp + 0x368], 0xffffffff
lea ecx, [esp + 0xd4]
call fcn.00402997
xor al, al
jmp 0x41c516
push 0
push 0x2000
push 0
push 4
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 0xc
push eax
push 0xffffffffffffffff
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0
call fcn.00442cde
mov dword [edi + 0x58], eax
test eax, eax
je 0x41c50e
call fcn.004440c6
push eax
push 0x471f1c
lea eax, [esp + 0x29c]
push 0x20
push eax
call fcn.0041ce80
push dword [edi + 0x58]
lea eax, [esp + 0x2e8]
push 0x471f1c
push 0x40
push eax
call fcn.0041cea0
add esp, 0x20
lea eax, [esp + 0x294]
lea ecx, [esp + 0x234]
push eax
call fcn.0040682c
mov esi, eax
mov dword [esp + 0x368], 0x18
mov edx, 0x47223c
push 0x99
push 9
lea ecx, [esp + 0x254]
call fcn.00421550
mov byte [esp + 0x370], 0x19
mov edx, esi
mov ecx, eax
call fcn.00420ff0
add esp, 8
mov byte [esp + 0x368], 0x18
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov dword [esp + 0x368], 0xffffffff
lea ecx, [esp + 0x234]
call fcn.004068a1
lea eax, [esp + 0x2d4]
push eax
lea ecx, [esp + 0x238]
call fcn.0040682c
mov esi, eax
mov dword [esp + 0x368], 0x1a
mov edx, str.F5A_V
push 0x6a
push 0xc
lea ecx, [esp + 0x254]
call fcn.00421550
mov byte [esp + 0x370], 0x1b
mov edx, esi
mov ecx, eax
call fcn.00420ff0
add esp, 8
mov byte [esp + 0x368], 0x1a
lea ecx, [esp + 0x24c]
call fcn.004068a1
mov dword [esp + 0x368], 0xffffffff
lea ecx, [esp + 0x234]
call fcn.004068a1
xor eax, eax
cmp dword [edi + 0x58], eax
setne al
mov ecx, dword [esp + 0x360]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x348]
xor ecx, esp
call fcn.00448892
mov esp, ebp
pop ebp
ret