Function at 0x41b6e0
Capabilities:
Contain obfuscated stackstrings
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x509466
mov eax, dword fs:[0]
push eax
sub esp, 0x2ec
mov eax, dword [0x53b0f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x288], ecx
mov dword [ebp - 0x258], 0
mov dword [ebp - 4], 3
cmp dword [0x53d3f4], 0
jne 0x41b736
movzx eax, byte [0x53d3f8]
test eax, eax
jne 0x41b77b
mov byte [ebp - 0x249], 0
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x14]
call fcn.00422090
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x30]
call fcn.00422090
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x4c]
call fcn.0040b260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x64]
call fcn.00422090
mov al, byte [ebp - 0x249]
jmp 0x41c235
mov byte [ebp - 0x241], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0x63
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x248], 0
call fcn.00450ce0
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x41b7cd
jmp 0x41c18a
push 0x11
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [ebp + 0x14]
call fcn.004220e0
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
call fcn.00411e10
push eax
push 4
push str.filename
push 1
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x254]
push eax
call fcn.00450830
add esp, 0x1c
lea ecx, [ebp - 0x150]
call fcn.0040b260
lea ecx, [ebp + 0x34]
call fcn.00412f30
movzx ecx, al
test ecx, ecx
jne 0x41b876
push 0x11
lea edx, [ebp - 0x138]
push edx
lea ecx, [ebp + 0x30]
call fcn.004220e0
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0x298]
call fcn.00411e10
push eax
push 4
push str.filepath
push 1
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x254]
push ecx
call fcn.00450830
add esp, 0x1c
lea ecx, [ebp - 0x138]
call fcn.0040b260
push 0x11
lea edx, [ebp - 0xd8]
push edx
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00423890
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x290], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x290]
call fcn.004220e0
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x28c]
call fcn.00411e10
push eax
push 0xa
push 0x510e38
push 1
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x254]
push eax
call fcn.00450830
add esp, 0x1c
lea ecx, [ebp - 0xd8]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1f8]
call fcn.00422090
push 1
push 0x40
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
push 1
push 0x51
mov edx, dword [ebp - 0x240]
push edx
call fcn.00455fd0
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.00422060
mov byte [ebp - 4], 5
mov eax, dword [ebp + 0xc]
push eax
push 0x510e40
push 1
lea ecx, [ebp - 0x44]
push ecx
call fcn.00422d20
add esp, 0x10
lea edx, [ebp - 0x120]
push edx
lea ecx, [ebp - 0x44]
call fcn.004220e0
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x2d8]
call fcn.00411e10
push eax
mov eax, dword [ebp - 0x248]
push eax
call fcn.00451680
add esp, 8
mov dword [ebp - 0x248], eax
lea ecx, [ebp - 0x120]
call fcn.0040b260
push str.Content_MD5:
lea ecx, [ebp - 0x28]
call fcn.00409530
mov byte [ebp - 4], 6
lea ecx, [ebp + 0x4c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040c8f0
lea ecx, [ebp - 0x28]
call fcn.00411e10
push eax
mov edx, dword [ebp - 0x248]
push edx
call fcn.00451680
add esp, 8
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
push eax
push 0x2727
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
cmp dword [ebp + 0x88], 0
jle 0x41ba3a
push 1
push 0x63
mov edx, dword [ebp - 0x240]
push edx
call fcn.00455fd0
add esp, 0xc
mov eax, dword [ebp + 0x88]
push eax
push 0x4e
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x41ba3a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
cmp dword [ebp + 0x84], 0
jle 0x41ba9a
push 1
push 0x63
mov edx, dword [ebp - 0x240]
push edx
call fcn.00455fd0
add esp, 0xc
mov eax, dword [ebp + 0x84]
push eax
push 0xd
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x41ba9a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
lea edx, [ebp - 0x108]
push edx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.00423890
mov dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x2d0], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2d0]
call fcn.004220e0
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp - 0x2cc]
call fcn.00411e10
push eax
push 0x2712
mov edx, dword [ebp - 0x240]
push edx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
lea ecx, [ebp - 0x108]
call fcn.0040b260
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1dc]
call fcn.00422090
cmp dword [ebp - 0x23c], 0
je 0x41bb3d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
mov eax, dword [ebp - 0x254]
push eax
push 0x2728
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x41bb84
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
lea ecx, [ebp + 0x68]
call fcn.00412f30
movzx edx, al
test edx, edx
jne 0x41bbff
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp + 0x64]
call fcn.004220e0
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c4]
call fcn.00411e10
push eax
push 0x2726
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
lea ecx, [ebp - 0xf0]
call fcn.0040b260
cmp dword [ebp - 0x23c], 0
je 0x41bbff
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
mov dword [ebp - 0x238], 0
push 0x510a9f
lea ecx, [ebp - 0x234]
call fcn.00409530
mov byte [ebp - 4], 8
push 0x510aa2
lea ecx, [ebp - 0x21c]
call fcn.00423820
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0
mov byte [ebp - 4], 9
push 0x41cc70
push 0x4e2b
mov edx, dword [ebp - 0x240]
push edx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x41bc99
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x238]
call fcn.0040b680
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
lea eax, [ebp - 0x238]
push eax
push 0x2711
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00455fd0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x41bcef
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x238]
call fcn.0040b680
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
mov edx, dword [ebp - 0x240]
push edx
call fcn.00450f30
add esp, 4
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x41bea8
push 0x510e84
mov eax, dword [ebp - 0x23c]
push eax
call fcn.00451ef0
add esp, 4
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00423820
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2bc], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x2bc]
add edx, 4
push edx
push 0x510e88
lea ecx, [ebp - 0x1c0]
call fcn.00423820
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x2b4], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2b4]
add ecx, 4
push ecx
push str.CWebService::CloudUploadFile
lea edx, [ebp - 0x90]
push edx
call fcn.0041e8e0
add esp, 0xc
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x2ac], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x2ac]
push ecx
lea edx, [ebp - 0xa8]
push edx
call fcn.0041e7d0
add esp, 0xc
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2a4], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x2a4]
push ecx
lea edx, [ebp - 0xc0]
push edx
call fcn.0041e810
add esp, 0xc
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2a0]
push ecx
lea ecx, [ebp - 0x60]
call fcn.00423a50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xc0]
call fcn.00417b10
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa8]
call fcn.00417b10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x90]
call fcn.00417b10
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c0]
call fcn.00422090
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a4]
call fcn.00422090
lea ecx, [ebp - 0x5c]
call fcn.00411e30
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x60]
call fcn.00422090
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x238]
call fcn.0040b680
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
lea edx, [ebp - 0x234]
push edx
mov ecx, dword [ebp + 0x80]
call fcn.0040ba80
lea eax, [ebp - 0x2c8]
push eax
push 0x200002
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00450cc0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x41c154
mov eax, dword [ebp - 0x2c8]
cdq
mov ecx, 0x64
idiv ecx
cmp eax, 3
jne 0x41c154
lea edx, [ebp - 0x260]
push edx
push 0x10001f
mov eax, dword [ebp - 0x240]
push eax
call fcn.00450cc0
add esp, 0xc
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x41bf8c
cmp dword [ebp - 0x260], 0
je 0x41bf8c
push 0
push 0x510ed4
mov ecx, dword [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x188]
call fcn.00423820
mov dword [ebp - 0x270], eax
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0x274], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x258]
or eax, 1
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x274]
call fcn.00422950
cmp eax, 0xffffffff
je 0x41bf8c
mov dword [ebp - 0x264], 1
jmp 0x41bf96
mov dword [ebp - 0x264], 0
mov cl, byte [ebp - 0x264]
mov byte [ebp - 0x24a], cl
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x258]
and edx, 1
je 0x41bfc6
and dword [ebp - 0x258], 0xfffffffe
lea ecx, [ebp - 0x188]
call fcn.00422090
movzx eax, byte [ebp - 0x24a]
test eax, eax
je 0x41c154
mov ecx, dword [ebp + 0x88]
push ecx
mov edx, dword [ebp + 0x84]
push edx
mov eax, dword [ebp + 0x80]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2dc], esp
lea edx, [ebp + 0x64]
push edx
call fcn.00423970
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2e4], esp
lea eax, [ebp + 0x4c]
push eax
call fcn.00409320
mov dword [ebp - 0x2e8], eax
mov byte [ebp - 4], 0x11
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2f0], esp
lea edx, [ebp + 0x30]
push edx
call fcn.00423970
mov dword [ebp - 0x2ec], eax
mov byte [ebp - 4], 0x12
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2f4], esp
lea eax, [ebp + 0x14]
push eax
call fcn.00423970
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x78]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x16c]
call fcn.00421aa0
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x27c], edx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x27c]
call fcn.00420460
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x284], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x284]
call fcn.00411e30
push eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x288]
call fcn.0041b6e0
mov byte [ebp - 0x24b], al
movzx ecx, byte [ebp - 0x24b]
test ecx, ecx
jne 0x41c0ef
mov dword [ebp - 0x268], 1
jmp 0x41c0f9
mov dword [ebp - 0x268], 0
mov dl, byte [ebp - 0x268]
mov byte [ebp - 0x24c], dl
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x78]
call fcn.00417b10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x16c]
call fcn.00420270
movzx eax, byte [ebp - 0x24c]
test eax, eax
je 0x41c154
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x238]
call fcn.0040b680
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
jmp 0x41c18a
mov byte [ebp - 0x241], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x238]
call fcn.0040b680
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040b260
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x44]
call fcn.00422090
xor ecx, ecx
jne 0x41b7b4
cmp dword [ebp - 0x254], 0
je 0x41c1ac
mov edx, dword [ebp - 0x254]
push edx
call fcn.00450850
add esp, 4
mov dword [ebp - 0x254], 0
cmp dword [ebp - 0x248], 0
je 0x41c1ce
mov eax, dword [ebp - 0x248]
push eax
call fcn.004516c0
add esp, 4
mov dword [ebp - 0x248], 0
cmp dword [ebp - 0x240], 0
je 0x41c1f0
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.00450a60
add esp, 4
mov dword [ebp - 0x240], 0
mov dl, byte [ebp - 0x241]
mov byte [ebp - 0x24d], dl
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x14]
call fcn.00422090
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x30]
call fcn.00422090
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x4c]
call fcn.0040b260
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x64]
call fcn.00422090
mov al, byte [ebp - 0x24d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00434475
mov esp, ebp
pop ebp
ret 0x84