Function at 0x41ab10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x631edd
mov eax, dword fs:[0]
push eax
sub esp, 0x5f0
mov eax, dword [0x6dc14c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x5c8], 0
call fcn.00409f80
test al, al
jne 0x41b333
lea eax, [ebp - 0x5e8]
push 0x65f720
push eax
call fcn.00414f00
add esp, 8
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 4], 0
push ecx
mov ecx, eax
call fcn.004a3130
push eax
push SysReAllocString
call fcn.0042bac0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e8]
mov esi, eax
call fcn.004a2fc0
test esi, esi
je 0x41abf9
lea eax, [ebp - 0x5e8]
push 0x65f720
push eax
call fcn.00414f00
add esp, 8
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 4], 1
push ecx
mov ecx, eax
call fcn.004a3130
push eax
push SysReAllocString
call fcn.0042b400
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e8]
call fcn.004a2fc0
lea eax, [ebp - 0x5cc]
push 0x65f744
push eax
call fcn.00414f00
add esp, 8
mov ebx, 1
mov dword [ebp - 4], 2
mov ecx, eax
mov dword [ebp - 0x5c8], ebx
call fcn.004a3130
push eax
push edi
call fcn.0042fca0
add esp, 8
test eax, eax
je 0x41ac76
lea eax, [ebp - 0x5e8]
push 0x65f74c
push eax
call fcn.00414f00
add esp, 8
mov ebx, 3
mov dword [ebp - 4], 3
mov ecx, eax
mov dword [ebp - 0x5c8], ebx
call fcn.004a3130
push eax
push edi
call fcn.0042fca0
add esp, 8
mov byte [ebp - 0x5ed], 0
test eax, eax
jne 0x41ac7d
mov byte [ebp - 0x5ed], 1
test bl, 2
je 0x41ac8d
lea ecx, [ebp - 0x5e8]
call fcn.004a2fc0
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 4], 0xffffffff
call fcn.004a2fc0
cmp byte [ebp - 0x5ed], 0
je 0x41ad10
lea eax, [ebp - 0x5cc]
mov dword [ebp - 0x5c8], 0
push eax
lea eax, [ebp - 0x5c8]
mov dword [ebp - 0x5cc], 4
push eax
push 0
push 0
push edi
push dword [ebp - 0x5ec]
call fcn.0042bc30
add esp, 0x18
cmp dword [ebp - 0x5c8], 0
jne 0x41b325
push 4
lea eax, [ebp - 0x5c8]
mov dword [ebp - 0x5c8], 1
push eax
push 4
push 0
push edi
push dword [ebp - 0x5ec]
call fcn.0042be40
add esp, 0x18
push dword [ebp - 0x5ec]
call fcn.0042b1e0
add esp, 4
lea ecx, [ebp - 0x5d0]
push 4
call fcn.004a3690
lea eax, [ebp - 0x5d0]
push eax
call fcn.0041a2e0
lea eax, [ebp - 0x5e4]
mov dword [ebp - 4], 4
push eax
call fcn.00426df0
push 0xc8
lea eax, [ebp - 0x1c4]
push 0
push eax
call fcn.006103d0
lea eax, [ebp - 0x5cc]
push 0x65f758
push eax
call fcn.00414f00
movzx ecx, word [ebp - 0x5d8]
add esp, 0x1c
push ecx
movzx ecx, word [ebp - 0x5da]
push ecx
movzx ecx, word [ebp - 0x5dc]
push ecx
movzx ecx, word [ebp - 0x5de]
push ecx
mov ecx, eax
call fcn.004a3130
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x1c4]
push 0x64
push eax
call fcn.004ae940
add esp, 0x20
lea ecx, [ebp - 0x5cc]
call fcn.004a2fc0
push 4
lea ecx, [ebp - 0x5f8]
call fcn.004a3690
push edi
lea ecx, [ebp - 0x5f8]
call fcn.004a3ae0
push 4
lea ecx, [ebp - 0x5fc]
mov byte [ebp - 4], 5
call fcn.004a3690
mov esi, dword [ebp - 0x5f4]
lea ecx, [ebp - 0x5fc]
push esi
call fcn.004a3ae0
lea ecx, [ebp - 0x5fc]
call fcn.004a4150
test al, al
jne 0x41aeb0
push 4
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x5e8], 0x800
call fcn.004a3690
lea ecx, [ebp - 0x5c8]
call fcn.004a2f20
push 0x2000
lea eax, [ebp - 0x5e8]
mov byte [ebp - 4], 7
push eax
push dword [ebp - 0x5e8]
lea ecx, [ebp - 0x5c8]
call fcn.004a3440
push eax
push esi
call fcn.0042f590
add esp, 0x10
lea ecx, [ebp - 0x5c8]
push 0xffffffffffffffff
call fcn.004a5110
lea ecx, [ebp - 0x5c8]
call fcn.004a4150
test al, al
jne 0x41aea5
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x5f4]
push 0x65f76c
push eax
call fcn.004a9600
add esp, 0xc
push eax
lea ecx, [ebp - 0x5f8]
mov byte [ebp - 4], 8
call fcn.004a7e80
lea ecx, [ebp - 0x5f4]
call fcn.004a2fc0
lea ecx, [ebp - 0x5c8]
call fcn.004a2fc0
mov eax, 0x7a
mov dword [ebp - 0xb8], 0x53004f
mov word [ebp - 0xf8], ax
mov ecx, 0x31
mov eax, 0x56
mov word [ebp - 0x1e], cx
mov word [ebp - 0x4c], ax
mov ecx, 0x2e
mov eax, 0x65
mov word [ebp - 0x36], cx
mov word [ebp - 0x94], ax
mov esi, 0x69
mov eax, 0x20
mov word [ebp - 0xdc], si
mov word [ebp - 0x76], ax
mov edx, 0x39
mov eax, 0x65
mov word [ebp - 0x3c], dx
mov word [ebp - 0x58], ax
mov ebx, 0x69
mov eax, 0x2c
mov dword [ebp - 0xec], 0x2e0035
mov word [ebp - 0x68], ax
mov edi, 0x4d
mov eax, 0x73
mov dword [ebp - 0xc8], 0x650074
mov word [ebp - 0x46], ax
mov ecx, 0x6f
mov eax, ebx
mov word [ebp - 0xd6], cx
mov esi, 0x6c
mov word [ebp - 0xf6], ax
mov word [ebp - 0xc4], si
mov ecx, 0x28
mov eax, 0x36
mov dword [ebp - 0x28], 0x690072
lea esi, [edx - 9]
mov dword [ebp - 0xc0], 0x61004d
mov word [ebp - 0xe2], di
lea edx, [edi + 0x18]
mov dword [ebp - 0xcc], 0x6e0049
mov dword [ebp - 0xac], 0x5f0030
mov dword [ebp - 0x9c], 0x700041
mov dword [ebp - 0xf4], 0x6c006c
mov dword [ebp - 0x2c], 0x610066
mov dword [ebp - 0xd4], 0x680073
mov dword [ebp - 0xbc], 0x200063
mov dword [ebp - 0xda], 0x74006e
mov dword [ebp - 0x54], 0x6f006b
mov dword [ebp - 0xf0], 0x2f0061
mov word [ebp - 0x8a], bx
mov dword [ebp - 0x34], 0x200032
mov dword [ebp - 0xb0], 0x310020
mov dword [ebp - 0x18], 0x39002e
mov dword [ebp - 0x82], 0x310030
mov dword [ebp - 0xd0], 0x20003b
mov dword [ebp - 0x44], 0x6f0069
mov dword [ebp - 0x7a], 0x39002e
mov dword [ebp - 0x24], 0x36002f
mov dword [ebp - 0x50], 0x200029
mov dword [ebp - 0x1c], 0x33002e
mov dword [ebp - 0xa4], 0x32005f
mov dword [ebp - 0xa8], 0x310031
mov dword [ebp - 0x6c], 0x4c004d
mov dword [ebp - 0xb4], 0x580020
mov dword [ebp - 0xe6], 0x280020
mov dword [ebp - 0x72], 0x48004b
mov dword [ebp - 0xfc], 0x6f004d
mov dword [ebp - 0x30], 0x610053
mov dword [ebp - 0x88], 0x2f0074
mov dword [ebp - 0x66], 0x6c0020
mov dword [ebp - 0x40], 0x2f006e
mov dword [ebp - 0x98], 0x6c0070
mov dword [ebp - 0x7e], 0x33002e
mov dword [ebp - 0x3a], 0x30002e
mov dword [ebp - 0x4a], 0x720065
mov dword [ebp - 0x8e], 0x4b0062
mov word [ebp - 0x74], cx
mov dword [ebp - 0x92], 0x650057
mov dword [ebp - 0x62], 0x6b0069
mov word [ebp - 0x84], ax
mov ecx, 0x20
mov dword [ebp - 0xe0], 0x630061
mov word [ebp - 0xc2], cx
xor eax, eax
lea ecx, [edi + 0x16]
mov word [ebp - 0x14], ax
mov eax, 0x54
mov word [ebp - 0x56], cx
push 4
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x5c], 0x470020
mov dword [ebp - 0xa0], 0x200029
mov word [ebp - 0x20], si
mov word [ebp - 0x6e], ax
mov word [ebp - 0x5e], dx
mov word [ebp - 0xe8], si
call fcn.004a3690
lea ecx, [ebp - 0x5c8]
call fcn.004a2f20
lea eax, [ebp - 0x5f4]
mov byte [ebp - 4], 9
push 0x65f770
push eax
call fcn.00414f00
add esp, 8
mov esi, eax
push dword [0x6e11b8]
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0xa
push dword [0x6db01c]
lea ecx, [ebp - 0x5d0]
push eax
call fcn.004a3130
push eax
push dword [ebp + 0x10]
mov ecx, esi
push dword [ebp - 0x5f8]
call fcn.004a3130
push eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.004a3360
add esp, 0x20
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5f4]
call fcn.004a2fc0
push 0
push 0
push 0
lea eax, [ebp - 0xfc]
push 0
push eax
call fcn.004290d0
mov esi, eax
add esp, 0x14
mov dword [ebp - 0x5e8], esi
test esi, esi
je 0x41b2d9
xor ebx, ebx
nop
lea eax, [ebp - 0x5cc]
push 0x65f7f0
push eax
call fcn.00414f00
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea eax, [ebp - 0x5f4]
push eax
call fcn.004a3cb0
add esp, 0x14
push 0
push 0x4000000
push 0
push 0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004a3130
push eax
push esi
call fcn.00429020
add esp, 0x18
lea ecx, [ebp - 0x5f4]
mov esi, eax
call fcn.004a2fc0
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 4], 9
call fcn.004a2fc0
test esi, esi
je 0x41b2ae
push 0x400
lea eax, [ebp - 0x5c4]
push 0
push eax
call fcn.006103d0
lea eax, [ebp - 0x5d4]
mov dword [ebp - 0x5d4], 0x400
push eax
push 0x3ff
lea eax, [ebp - 0x5c4]
push eax
push esi
call fcn.00429230
push esi
mov edi, eax
call fcn.00428ed0
add esp, 0x20
test edi, edi
je 0x41b2ae
lea eax, [ebp - 0x5c4]
push 0x65f804
push eax
call fcn.004a7c80
add esp, 8
test eax, eax
je 0x41b2ae
cmp byte [eax], 0x31
je 0x41b2cb
push 0x3e8
inc ebx
call fcn.0042e9b0
mov esi, dword [ebp - 0x5e8]
add esp, 4
cmp ebx, 3
jl 0x41b1e0
push dword [ebp - 0x5e8]
call fcn.00428ed0
add esp, 4
lea ecx, [ebp - 0x5c8]
call fcn.004a2fc0
lea ecx, [ebp - 0x5fc]
call fcn.004a2fc0
lea ecx, [ebp - 0x5f8]
call fcn.004a2fc0
lea ecx, [ebp - 0x5d0]
call fcn.004a2fc0
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0060e1e1
mov esp, ebp
pop ebp
ret 0xc
push dword [ebp - 0x5ec]
call fcn.0042b1e0
add esp, 4
xor al, al
jmp 0x41b307