Function at 0x410b10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x23c
mov esi, dword [0x45285c]
mov dword [esp + 0x3c], 0x13851165
mov dword [esp + 0x40], 0x1f771d86
mov dword [esp + 0x44], 0x1b8e198c
mov dword [esp + 0x48], 0x7510565
mov dword [esp + 0x4c], 0x354015d
mov dword [esp + 0x50], 0xf2e0d5c
mov dword [esp + 0x54], 0xb750920
mov dword [esp + 0x58], 0x37a0355d
mov dword [esp + 0x5c], 0x33a5315c
mov dword [esp + 0x60], 0x3fad3da3
mov dword [esp + 0x64], 0x3b4c3918
mov dword [esp + 0x68], 0x27062558
mov dword [esp + 0x6c], 0x23722171
mov dword [esp + 0x70], 0x2f7e2d7a
mov dword [esp + 0x74], 0x2b0a2973
mov dword [esp + 0x78], 0x573f552b
mov dword [esp + 0x7c], 0x530c51c6
mov dword [esp + 0x80], 0x5f055d00
mov dword [esp + 0x84], 0x5bc25978
mov dword [esp + 0x88], 0x471a451a
mov dword [esp + 0x8c], 0x43624169
mov dword [esp + 0x90], 0x4fde4d0d
mov dword [esp + 0x94], 0x4bde49d8
mov dword [esp + 0x98], 0x77097519
mov dword [esp + 0x9c], 0x7310711d
mov dword [esp + 0xa0], 0x7f177d37
mov dword [esp + 0xa4], 0x7b2d79e4
mov dword [esp + 0xa8], 0x67356539
mov dword [esp + 0xac], 0x6334613f
mov dword [esp + 0xb0], 0x6f306d3f
mov dword [esp + 0xb4], 0x6b426948
mov dword [esp + 0xb8], 0x97de95df
mov dword [esp + 0xbc], 0x93e791ec
mov dword [esp + 0xc0], 0x9fca9de8
mov dword [esp + 0xc4], 0x9b0e99b8
mov dword [esp + 0xc8], 0x87ed85ed
mov dword [esp + 0xcc], 0x83a281ed
mov dword [esp + 0xd0], 0x8fe38dc3
mov dword [esp + 0xd4], 0x8be189eb
mov dword [esp + 0xd8], 0xb79fb523
mov dword [esp + 0xdc], 0xb3f1b190
mov dword [esp + 0xe0], 0xbf2cbdd4
mov dword [esp + 0xe4], 0xbb2fb92f
mov dword [esp + 0xe8], 0xa7f1a5c9
mov dword [esp + 0xec], 0xa3f3a1f1
mov dword [esp + 0xf0], 0xaff8adf5
mov dword [esp + 0xf4], 0xabfca9f8
mov dword [esp + 0xf8], 0xd780d584
mov dword [esp + 0xfc], 0xd3f2d180
mov dword [esp + 0x100], 0xdfbfddaf
mov dword [esp + 0x104], 0xdbbbd9b6
mov dword [esp + 0x108], 0xc7afc556
mov dword [esp + 0x10c], 0xc39fc197
mov dword [esp + 0x110], 0xcf91cd9f
mov dword [esp + 0x114], 0xcb99c99e
mov dword [esp + 0x118], 0xf7f6f5aa
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0xdf
ja 0x410d9d
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x3c]
push dword [esp + 4]
push eax
call fcn.00411d70
add esp, 8
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x3c], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0xe0
jb 0x410d70
lea ebp, [esp + 0x3c]
push 0
push 0
push 0
push 0
push ebp
call esi
mov edi, eax
xor eax, eax
test edi, edi
setne al
jmp dword [eax*4 + 0x44dd38]
xor ebx, ebx
jmp 0x410f74
mov esi, dword [0x452860]
mov dword [esp + 4], 0x1312105b
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x3c]
cmp eax, 3
ja 0x410e1b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x3c]
movzx eax, byte [esp + eax + 4]
push dword [esp + 0x3c]
push eax
call fcn.00411df0
add esp, 8
mov ecx, dword [esp + 0x3c]
mov byte [esp + ecx + 4], al
inc dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
cmp eax, 4
jb 0x410df0
movzx eax, word [esp + 4]
push 0
push eax
push 0x452890
push edi
call esi
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44dd40]
xor ebx, ebx
jmp 0x410f6d
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], edi
mov ebx, dword [0x452864]
mov dword [esp + 4], 0x29aa2b24
mov word [esp + 8], 0
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x3c]
cmp eax, 5
ja 0x410e9b
nop
nop
mov eax, dword [esp + 0x3c]
movzx eax, byte [esp + eax + 4]
push dword [esp + 0x3c]
push eax
call fcn.00411f00
add esp, 8
mov ecx, dword [esp + 0x3c]
mov byte [esp + ecx + 4], al
inc dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
cmp eax, 6
jb 0x410e70
mov esi, dword [esp + 0x250]
mov edi, dword [esp + 4]
mov dword [esp + 0x3c], 0xf7a5f9a8
mov dword [esp + 0x40], 0xf35ef55b
mov word [esp + 0x44], 0xf1f0
mov dword [esp + 0x46], 0
mov byte [esp + 0x4a], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xe
ja 0x410f06
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x3c]
push dword [esp]
push eax
call fcn.00411e60
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x3c], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xf
jb 0x410ee0
push edi
push 0
push 0
push 0
push esi
push ebp
mov esi, dword [esp + 0x50]
push esi
call ebx
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x44dd48]
xor ebx, ebx
mov edi, dword [esp + 0x34]
jmp 0x411360
mov esi, dword [esp + 0x268]
xor eax, eax
test esi, esi
setg al
jmp dword [eax*4 + 0x44dd50]
jmp dword [0x44dd58]
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x30], 0
jmp dword [ecx*4 + 0x44ddb0]
mov al, 1
mov dword [esp + 0x30], eax
jmp case.0x410db5.24
push edi
call dword [0x452888]
mov eax, ebx
add esp, 0x23c
pop esi
pop edi
pop ebx
pop ebp
ret
push esi
push esi
push esi
push esi
push ebx
call dword [0x45286c]
push esi
push esi
push esi
push esi
push ebx
call dword [0x45286c]
jmp dword [0x44dd64]
movzx eax, byte [0x452994]
jmp dword [eax*4 + 0x44dd68]
mov edx, dword [esp + 0x264]
mov esi, dword [esp + 0x258]
mov ebp, dword [esp + 0x254]
mov edi, edx
jmp dword [0x44dd84]
xor eax, eax
mov ecx, ebp
neg ecx
sbb eax, eax
push 0
push edx
push dword [esp + 0x264]
push esi
push eax
push ebp
push ebx
call dword [0x452874]
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor eax, eax
mov ecx, ebp
neg ecx
sbb eax, eax
push 0
push edx
push dword [esp + 0x264]
push esi
push eax
push ebp
push ebx
call dword [0x452874]
mov edx, edi
jmp dword [0x44dd88]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44dd90]
mov dword [esp + 0x30], 0
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
jmp case.0x410db5.24
jmp dword [0x44dd70]
mov dword [esp + 4], 0xc3adc183
mov dword [esp + 8], 0xc7adc5ab
mov dword [esp + 0xc], 0xcbafc9a1
mov dword [esp + 0x10], 0xcfeecd96
mov dword [esp + 0x14], 0xf38df18f
mov dword [esp + 0x18], 0xf790f597
mov dword [esp + 0x1c], 0xfb97f987
mov dword [esp + 0x20], 0xff81fd6b
mov dword [esp + 0x24], 0xe37be182
mov dword [esp + 0x28], 0xe7bbe574
mov dword [esp + 0x2c], 0xe9e8
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2b
ja 0x4110d6
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 4]
push dword [esp]
push eax
call fcn.00411f80
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 4], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2c
jb 0x4110b0
movzx eax, word [esp + 4]
test ax, ax
je 0x411102
lea ebp, [esp + 0x3c]
lea ecx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], ax
add ebp, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4110f0
mov word [ebp], 0
movzx eax, word [0x452996]
test ax, ax
je 0x411136
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp + ecx], ax
movzx eax, word [ecx + 0x452998]
add ecx, 2
test ax, ax
jne 0x411120
add ebp, ecx
mov word [ebp], 0
mov esi, dword [0x452870]
mov dword [esp + 4], 0x37161918
mov word [esp + 8], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 5
ja 0x411186
mov eax, dword [esp]
movzx eax, byte [esp + eax + 4]
push dword [esp]
push eax
call fcn.00411ff0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 4], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 6
jb 0x411160
lea eax, [esp + 0x3c]
push dword [esp + 4]
push 0xffffffffffffffff
push eax
push ebx
call esi
jmp case.0x410f1f.10
lea eax, [esp + 0x3c]
push dword [esp + 4]
push 0xffffffffffffffff
push eax
push ebx
call esi
jmp dword [0x44dd7c]
mov dword [esp + 4], 0xc3adc183
mov dword [esp + 8], 0xc7adc5ab
mov dword [esp + 0xc], 0xcbafc9a1
mov dword [esp + 0x10], 0xcfeecd96
mov dword [esp + 0x14], 0xf38df18f
mov dword [esp + 0x18], 0xf790f597
mov dword [esp + 0x1c], 0xfb97f987
mov dword [esp + 0x20], 0xff81fd6b
mov dword [esp + 0x24], 0xe37be182
mov dword [esp + 0x28], 0xe7bbe574
mov dword [esp + 0x2c], 0xe9e8
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2b
ja 0x411246
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 4]
push dword [esp]
push eax
call fcn.00411f80
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 4], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2c
jb 0x411220
movzx ecx, word [esp + 4]
test cx, cx
je 0x411280
lea edx, [esp + 6]
lea eax, [esp + 0x3c]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x411260
jmp 0x411284
lea eax, [esp + 0x3c]
mov word [eax], 0
movzx ecx, word [0x452996]
test cx, cx
je 0x4112b5
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x452998]
add edx, 2
test cx, cx
jne 0x4112a0
add eax, edx
mov word [eax], 0
mov esi, dword [0x452870]
mov dword [esp + 4], 0x37161918
mov word [esp + 8], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 5
ja 0x4111a0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 4]
push dword [esp]
push eax
call fcn.00411ff0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 4], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 6
jb 0x4112f0
jmp 0x4111a0
mov dword [esp + 0x3c], 0
lea eax, [esp + 0x3c]
push eax
push edx
push dword [esp + 0x268]
push ebx
call dword [0x452884]
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x30], 0
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
jmp dword [ecx*4 + 0x44dd98]
push ebx
call dword [0x452888]
mov ebx, dword [esp + 0x30]
push esi
call dword [0x452888]
jmp 0x410f6d
jmp dword [0x44dda0]
push 0
push ebx
call dword [0x452878]
push 0
push ebx
call dword [0x452878]
jmp dword [0x44dda8]
or eax, 0xdc30041
inc ecx
add byte [ecx], bh
push cs
inc ecx
add byte [eax + 0xe], al
inc ecx
add byte [esi], ah
cmovno eax, dword [eax]
xor dword [edi], ecx
inc ecx
add byte [ebp + 0x4600410f], bl
cmovno eax, dword [eax]
mov word [edi], cs
inc ecx
add byte [ecx - 0x7effbef1], al
cmovno eax, dword [eax]
popfd
cmovno eax, dword [eax]
stosd dword es:[edi], eax
cmovno eax, dword [eax]
aaa
adc byte [ecx], al
mov ah, 0x11
inc ecx
add byte [0xb4004110], bh
adc dword [ecx], eax
stosd dword es:[edi], eax
cmovno eax, dword [eax]
enter 0x410f, 0
invalid