Function at 0x41de17
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x160
mov eax, 0x4afb33
call fcn.0048f423
mov edi, ecx
mov dword [ebp - 0x168], edi
mov eax, dword [ebp + 8]
and dword [ebp - 0x164], 0
push 0x505ab0
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x16c], eax
call fcn.00408fd9
and dword [ebp - 4], 0
call fcn.004214e3
test al, al
jne 0x41de78
push 4
call fcn.0048e498
mov esi, eax
call fcn.0048f9e0
mov dword [esi], eax
push esi
mov dword [0x507340], eax
call fcn.0048e469
pop ecx
pop ecx
lea eax, [edi + 0x1c]
push eax
lea eax, [ebp - 0x160]
push 0x4c3e2c
push eax
call fcn.00409288
add esp, 0xc
mov eax, dword [eax]
xor ebx, ebx
push dword [eax - 0xc]
inc ebx
push eax
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], bl
call fcn.00409334
mov ecx, dword [ebp - 0x160]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_b
lea ecx, [ebp - 0x14c]
call fcn.00401b1e
push 0x4c3e44
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 2
call fcn.00409229
lea esi, [edi + 0x24]
push esi
push eax
lea eax, [ebp - 0x160]
push eax
mov byte [ebp - 4], 3
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 4
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x160]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x14c]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_ib
lea ecx, [ebp - 0x160]
call fcn.00401b1e
push 0x4c3e44
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 5
call fcn.00409229
push esi
push eax
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 6
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 7
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x160]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [edi + 0x28]
push eax
lea eax, [ebp - 0x14c]
push str.AND_verifier
push eax
call fcn.00409288
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 8
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [0x507340]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0x13
cdq
pop ecx
idiv ecx
cmp edx, 0xa
jne 0x41e076
xor edi, edi
lea ebx, [ebp - 0x148]
xor eax, eax
mov dword [ebp - 0x160], eax
lea esi, [eax + 1]
mov eax, dword [0x507340]
cdq
lea ecx, [edi + 1]
idiv ecx
mov eax, dword [0x507340]
sub eax, edi
mov ecx, edx
imul ecx, eax
mov eax, dword [0x507340]
cdq
idiv esi
add ecx, eax
sub ecx, dword [ebp - 0x160]
push ecx
push 0x4c26c4
call fcn.0049172d
mov eax, esi
pop ecx
add ebx, 4
pop ecx
mov dword [ebp - 0x160], esi
cmp eax, 0xd
jl 0x41e020
inc edi
cmp edi, 6
jl 0x41e018
mov edi, dword [ebp - 0x168]
xor ebx, ebx
inc ebx
lea eax, [edi + 0x40]
push eax
lea eax, [ebp - 0x14c]
push str.AND_ver
push eax
call fcn.00409288
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 9
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_insta
lea ecx, [ebp - 0x160]
call fcn.00401b1e
push str.lltime
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0xa
call fcn.00409229
mov ecx, eax
lea eax, [edi + 0x48]
push eax
push ecx
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0xb
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0xc
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x160]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x15c]
push eax
call fcn.0042b82c
push eax
lea eax, [ebp - 0x14c]
push str.AND_os
push eax
mov byte [ebp - 4], 0xd
call fcn.00409288
add esp, 0x10
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0xe
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_bro
lea ecx, [ebp - 0x160]
call fcn.00401b1e
push str.wser
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0xf
call fcn.00409229
mov esi, 0x507fb0
push esi
push eax
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0x10
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x11
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x160]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
push 0x4c3f04
mov ecx, esi
call fcn.004093fe
test eax, eax
jne 0x41e23a
lea eax, [ebp - 0x158]
push eax
call fcn.0042aff0
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x12
jmp 0x41e253
lea eax, [ebp - 0x150]
push eax
call fcn.00429e48
pop ecx
mov esi, eax
push 2
mov dword [ebp - 4], 0x13
pop ebx
push str.AND_brow
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x164], ebx
call fcn.00401b1e
push 0x4c3f0c
push eax
lea eax, [ebp - 0x15c]
push eax
mov dword [ebp - 4], 0x14
call fcn.00409229
push esi
push eax
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0x15
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
push 0x16
pop ecx
push dword [eax - 0xc]
mov byte [ebp - 4], cl
push eax
lea ecx, [ebp - 0x154]
call fcn.00409334
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x160]
lea ecx, [ecx - 0x10]
call fcn.00407864
test bl, 2
je 0x41e2f4
mov ecx, dword [ebp - 0x150]
and ebx, 0xfffffffd
lea ecx, [ecx - 0x10]
mov dword [ebp - 0x164], ebx
call fcn.00407864
and dword [ebp - 4], 0
test bl, 1
je 0x41e314
mov ecx, dword [ebp - 0x158]
and ebx, 0xfffffffe
lea ecx, [ecx - 0x10]
mov dword [ebp - 0x164], ebx
call fcn.00407864
mov eax, dword [0x507340]
imul eax, eax
push 0x16
cdq
pop ecx
idiv ecx
cmp edx, 8
jne 0x41e32d
inc dword [0x507a24]
lea eax, [ebp - 0x150]
push eax
call fcn.0042a816
push eax
lea eax, [ebp - 0x158]
push str.AND_ffver
push eax
mov byte [ebp - 4], 0x17
call fcn.00409288
add esp, 0x10
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x18
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00407864
push 0x4c3f04
mov ecx, 0x507fb0
call fcn.004093fe
test eax, eax
jne 0x41e3d4
lea eax, [ebp - 0x15c]
push eax
call fcn.00429e48
push eax
lea eax, [ebp - 0x14c]
push str.AND_chromever
or ebx, 4
push eax
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x164], ebx
call fcn.00409288
add esp, 0x10
mov dword [ebp - 4], 0x1a
or ebx, 8
jmp 0x41e40f
lea eax, [ebp - 0x150]
push eax
call fcn.0042aff0
push eax
lea eax, [ebp - 0x158]
push str.AND_iever
or ebx, 0x10
push eax
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x164], ebx
call fcn.00409288
add esp, 0x10
mov dword [ebp - 4], 0x1c
or ebx, 0x20
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov dword [ebp - 0x164], ebx
push eax
call fcn.00409334
test bl, 0x20
je 0x41e43c
mov ecx, dword [ebp - 0x158]
and ebx, 0xffffffdf
lea ecx, [ecx - 0x10]
call fcn.00407864
test bl, 0x10
je 0x41e452
mov ecx, dword [ebp - 0x150]
and ebx, 0xffffffef
lea ecx, [ecx - 0x10]
call fcn.00407864
test bl, 8
je 0x41e468
mov ecx, dword [ebp - 0x14c]
and ebx, 0xfffffff7
lea ecx, [ecx - 0x10]
call fcn.00407864
and dword [ebp - 4], 0
test bl, 4
je 0x41e47f
mov ecx, dword [ebp - 0x15c]
lea ecx, [ecx - 0x10]
call fcn.00407864
add edi, 0x4c
lea eax, [ebp - 0x15c]
push edi
push eax
call fcn.00438e97
pop ecx
pop ecx
mov esi, eax
push str.AND_src
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x1d
call fcn.00401b1e
push 0x4c3f90
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00409229
push esi
push eax
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x1f
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x20
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
xor ebx, ebx
lea ecx, [ecx - 0x10]
mov byte [ebp - 4], bl
call fcn.00407864
lea eax, [ebp - 0x15c]
push edi
push eax
call fcn.00438e97
pop ecx
pop ecx
mov esi, eax
push str.AND_cam
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x21
call fcn.00401b1e
push str.paign
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x22
call fcn.00409229
push esi
push eax
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x23
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
mov byte [ebp - 4], 0x24
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x154]
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_subiddefau
lea ecx, [ebp - 0x150]
call fcn.00401b1e
push str.lt_subid
push eax
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x25
call fcn.00409229
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x26
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_zdatade
lea ecx, [ebp - 0x14c]
call fcn.00401b1e
push str.fault_z
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x27
call fcn.00409229
push 0x4c4008
push eax
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x28
call fcn.00409229
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x29
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x14c]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
mov eax, dword [0x507340]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x8000000f
jns 0x41e6bc
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 6
jne 0x41e6d8
push 0xe2
push 0xe1
push str._d__d_n
call fcn.0049172d
add esp, 0xc
push str.AND_iep
lea ecx, [ebp - 0x15c]
call fcn.00401b1e
push 0x4c4054
push eax
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00409229
push str.files
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00409229
mov esi, eax
mov byte [ebp - 4], 0x2c
call fcn.0042203b
push eax
lea eax, [ebp - 0x158]
push esi
push eax
call fcn.0042c273
add esp, 0x24
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x2d
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x14c]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x15c]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_chprofiles
lea ecx, [ebp - 0x150]
call fcn.00416f4a
mov esi, eax
mov byte [ebp - 4], 0x2e
call fcn.00421fc1
push eax
lea eax, [ebp - 0x158]
push esi
push eax
call fcn.0042c273
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x2f
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
push str.AND_ffprofiles
lea ecx, [ebp - 0x150]
call fcn.00416f4a
mov esi, eax
mov byte [ebp - 4], 0x30
call fcn.00421ffe
push eax
lea eax, [ebp - 0x158]
push esi
push eax
call fcn.0042c273
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x31
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
push 0x4c409c
lea ecx, [ebp - 0x14c]
call fcn.00401b1e
push 0x4c4098
push eax
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 4], 0x32
call fcn.00409229
mov ecx, eax
mov eax, dword [ebp - 0x168]
add eax, 0x70
push eax
push ecx
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0x33
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x34
push eax
call fcn.00409334
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x150]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0x14c]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
mov esi, dword [ebp - 0x16c]
lea eax, [ebp - 0x154]
push eax
push esi
call fcn.00438b5d
pop ecx
pop ecx
mov ecx, dword [ebp - 0x154]
add ecx, 0xfffffff0
call fcn.00407864
mov eax, esi
call fcn.0048f3d2
ret 4