Function at 0x421129
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
xchg edi, edi
jno 0x421136
jle 0x421155
pushf
js 0x42113c
lea edi, [edi + 0x7de9]
lea edi, [edi - 0x7de9]
xor edi, dword [esp]
xor edi, dword [esp]
popf
jno 0x421152
jg 0x421155
mov ecx, 0x3cc03d83
inc ecx
add byte [ecx], al
cmp dword [0x413cc0], 1
jne 0x4212c0
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00418252
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
lea eax, [eax + 0x1b30]
lea eax, [eax - 0x1b30]
jno 0x4211b0
cmp edi, dword [esp + 8]
shr esi, 0
js 0x4211cf
pushf
lea esp, [esp]
or esp, 0
lea ecx, [ecx]
or esp, 0
popf
lea esi, [esi]
jl 0x4211cc
jns 0x4211cf
jmp 0x81325f5d
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
not esi
not esi
jl 0x421235
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
stc
jl 0x421260
pushf
shr edi, 0
add eax, dword [esp]
sub eax, dword [esp]
popf
jle 0x42124f
jge 0x421251
lea eax, [eax + 0x4a6d]
lea eax, [eax - 0x4a6d]
jge 0x421260
mov esi, 0x3a783d83
inc ecx
add byte [eax], al
cmp dword [0x413a78], 0
jne 0x421271
or eax, 0xffffffff
jmp 0x4214ca
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x413a78]
push ecx
call fcn.00430b8f
mov dword [ebp - 4], eax
sub edi, 0
jbe 0x421289
jl 0x421296
pushf
jnp 0x42128f
popf
xchg ebx, ebx
jge 0x421296
mov ebx, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.00418252
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x4212b6
mov eax, dword [ebp - 4]
mov dword [0x413cc0], eax
jmp 0x4212be
or eax, 0xffffffff
jmp 0x4214ca
jmp 0x4212c9
mov ecx, dword [0x413cc0]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
and esp, 0xffffffff
js 0x4212e3
pushf
xchg ecx, ebx
xchg ecx, ebx
popf
js 0x4212de
jae 0x4212e0
jns 0x4212e3
lcall 0x18e8, 0x50ec458b
push 0
add byte [ebx + 0xc6a04c4], al
mov eax, dword [ebp - 0x14]
push eax
call fcn.00427d04
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.00418252
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
nop
xor esp, 0
je 0x421335
ja 0x421337
jne 0x421354
pushf
test esp, 0x7f36
test ebx, 0x103f
lea edx, [edx]
popf
ja 0x42134d
jl 0x42134f
jae 0x421351
je 0x421354
jmp 0x813268e2
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
shr edx, 0
std
cld
xchg esp, esp
jl 0x4213cd
pushf
shl esp, 0
or esp, 0
jmp 0x4213c6
popf
mov eax, eax
jge 0x4213cd
mov edi, 0x3a783d83
inc ecx
add byte [eax], al
cmp dword [0x413a78], 0
je 0x4213fc
rol edx, 0x1a
rol edx, 6
jno 0x4213e9
je 0x4213e0
jmp 0x4213e2
je 0x4213e4
xchg esp, esp
jo 0x4213e9
xor eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x413a78]
push edx
call fcn.00430b8f
mov dword [ebp - 4], eax
test esp, 0x17e8
or edx, edx
js 0x421425
pushf
rol edx, 0xe
ror edx, 0xe
and esp, 0xffffffff
shr esp, 0
popf
lea ecx, [ecx + 0x2d71]
lea ecx, [ecx - 0x2d71]
jns 0x421425
call 0xac2093
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00418252
add esp, 0xc
je 0x421437
or esi, esi
xor ecx, dword [esp + 0xc]
xor ecx, dword [esp + 0xc]
shr ebx, 0
jnp 0x42144f
je 0x421448
jmp 0x42144a
xchg esp, esp
jp 0x42144f
add dword [ebx + 0x7400fc7d], 0x297ff938
cmp dword [ebp - 4], 0
je 0x42148d
stc
jg 0x421481
pushf
cmp esi, ebx
call 0x421461
add esp, 4
popf
lea edx, [edx + 0x4d21]
lea edx, [edx - 0x4d21]
lea edx, [edx + 0x7eb4]
lea edx, [edx - 0x7eb4]
jle 0x421481
add eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.00427d04
add esp, 4
test esi, eax
xor ebx, dword [esp]
xor ebx, dword [esp]
shl esi, 0
je 0x4214ab
pushf
add esi, dword [esp]
sub esi, dword [esp]
popf
mov esp, esp
mov esp, esp
jne 0x4214ab
mov edx, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c