Function at 0x41c1e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
push ebx
mov cl, 0x65
mov bl, 0x72
mov dl, 0x69
mov al, 0x20
mov byte [esp + 4], 0x47
mov byte [esp + 5], cl
mov byte [esp + 6], 0x6e
mov byte [esp + 7], cl
mov byte [esp + 8], bl
mov byte [esp + 9], dl
mov byte [esp + 0xa], 0x63
mov byte [esp + 0xb], al
mov byte [esp + 0xc], 0x55
mov byte [esp + 0xd], 0x53
mov byte [esp + 0xe], 0x42
mov byte [esp + 0xf], al
mov byte [esp + 0x10], 0x46
mov byte [esp + 0x11], 0x6c
mov byte [esp + 0x12], 0x61
mov byte [esp + 0x13], 0x73
mov byte [esp + 0x14], 0x68
mov byte [esp + 0x15], al
mov byte [esp + 0x16], 0x44
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], dl
mov byte [esp + 0x19], 0x76
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1b], al
mov byte [esp + 0x1c], 0x25
mov byte [esp + 0x1d], 0x7a
mov byte [esp + 0x1e], 0x21
mov byte [esp + 0x1f], 0x59
call fcn.004162b0
test al, al
jne 0x41c27b
pop ebx
add esp, 0x1c
ret
mov cx, word [0x7e0e4c]
mov al, byte [0x7e0d18]
mov dx, word [0x7e0e4e]
mov word [0x44e3f6], cx
mov cl, byte [0x7e0e34]
mov byte [0x44e3f4], al
mov al, byte [0x7e0e4b]
mov word [0x44e3f8], dx
mov dx, word [0x7e0f20]
mov byte [0x44e400], cl
mov cx, word [0x7e0e36]
mov byte [0x44e3fa], al
mov al, byte [0x7e0e51]
mov word [0x44e406], dx
mov dx, word [0x7e0e38]
mov word [0x7e185a], cx
mov cx, word [0x7e0e3a]
mov byte [0x44e3fb], al
test al, 4
mov word [0x44e402], dx
mov word [0x44e404], cx
jne 0x41c31b
mov edx, dword [0x7e0e64]
and edx, 0xff
push edx
push 0x7e0bb6
call fcn.00419f00
add esp, 8
test al, al
jne 0x41c33e
push 0x7e0bb6
call fcn.00419e50
mov cl, byte [0x44e3fb]
add esp, 4
and cl, 0xfb
mov byte [0x7e0e64], al
mov byte [0x44e3fb], cl
jmp 0x41c343
mov al, byte [0x7e0e64]
mov cl, byte [0x7e0e5c]
push esi
test cl, cl
push edi
mov dl, 0x12
je 0x41c37d
mov byte [0x7e185d], cl
mov ecx, dword [0x7e0e5c]
and ecx, 0xff
mov esi, 0x7e0b32
mov ebx, ecx
mov edi, 0x44e444
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x41c3c1
mov ecx, dword [0x44e63c]
mov byte [0x7e185d], dl
mov dword [0x44e444], ecx
mov ecx, dword [0x44e640]
mov dword [0x44e448], ecx
mov ecx, dword [0x44e644]
mov dword [0x44e44c], ecx
mov ecx, dword [0x44e648]
mov dword [0x44e450], ecx
mov cx, word [0x44e64c]
mov word [0x44e454], cx
mov cl, byte [0x7e0e60]
test cl, cl
je 0x41c3f7
mov byte [0x7e185e], cl
mov ecx, dword [0x7e0e60]
and ecx, 0xff
mov esi, 0x7e0b74
mov edx, ecx
mov edi, 0x44e488
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x41c43b
mov ecx, dword [0x44e680]
mov byte [0x7e185e], dl
mov edx, dword [0x44e684]
mov dword [0x44e488], ecx
mov ecx, dword [0x44e688]
mov dword [0x44e48c], edx
mov edx, dword [0x44e68c]
mov dword [0x44e490], ecx
mov cx, word [0x44e690]
mov dword [0x44e494], edx
mov word [0x44e498], cx
test al, al
je 0x41c46a
mov ecx, dword [0x7e0e64]
mov esi, 0x7e0bb6
and ecx, 0xff
mov edi, 0x44e4cc
mov edx, ecx
mov byte [0x7e185f], al
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x41c484
mov ecx, 6
mov esi, 0x44e6c4
mov edi, 0x44e4cc
mov byte [0x7e185f], 0x1a
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [0x7e0eb4]
mov eax, dword [0x7e0eb0]
mov edx, dword [0x7e0eb8]
mov dword [0x5c720c], ecx
mov cl, byte [0x7e0841]
mov dword [0x5c7208], eax
mov eax, dword [0x7e0ebc]
or cl, 0xfe
cmp cl, 0xfe
mov dword [0x5c7200], edx
mov dword [0x5c7204], eax
mov ecx, 7
mov esi, 0x7e0850
je 0x41c4cc
lea esi, [esp + 0xc]
mov edi, str.Generic_USB_Flash_Drive__z_Y
mov al, 1
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
add esp, 0x1c
ret