Function at 0x41ee1e
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x134
push ebx
push ebp
push esi
xor esi, esi
mov dword [esp + 0x28], 0x7e787470
push edi
mov dword [esp + 0x30], 0x6973367c
mov ecx, esi
mov word [esp + 0x34], 0x7e7c
mov al, byte [esp + ecx + 0x2c]
xor al, 0x19
movzx eax, al
mov word [esp + ecx*2 + 0xb0], ax
inc ecx
cmp ecx, 0xa
jl 0x41ee43
xor eax, eax
mov dword [esp + 0x50], 0x46
mov word [esp + 0xc4], ax
mov edx, 0xe7ea7d5c
mov eax, dword [0x42bbb4]
xor eax, 0xfd46c8b8
mov dword [esp + 0x14], esi
imul eax, eax, 0xff25e2bf
push esi
mov dword [esp + 0x7c], 1
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], esi
or eax, 0xf98136ec
mov dword [esp + 0x88], esi
xor eax, 0xfa557dff
imul ecx, eax, 0x75a1d3b
or ecx, 0xe1cd3ffa
sub ecx, 0x1c6b7388
and ecx, 0x2ef893c4
lea eax, [ecx - 0x376f7261]
mov dword [0x42bbb0], eax
lea eax, [ecx + 0x10e5744e]
mov dword [0x42bbb4], eax
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x90]
push eax
push 6
pop ecx
call fcn.004155a6
call eax
test eax, eax
jne 0x41f81d
mov dword [esp + 0x24], 0xd3d0cac7
mov ecx, esi
mov word [esp + 0x28], 0xc2cf
mov byte [esp + 0x2a], 0xda
mov al, byte [esp + ecx + 0x24]
xor al, 0x83
movzx eax, al
mov word [esp + ecx*2 + 0x8c], ax
inc ecx
cmp ecx, 7
jl 0x41ef10
mov ecx, dword [0x42bbb4]
xor eax, eax
push esi
mov word [esp + 0x9e], ax
mov edx, 0xf09d96e3
push esi
lea eax, [ecx - 0x2879318e]
and ecx, 0x94a90555
mov dword [0x42bbb0], eax
xor ecx, 0x85ec3071
push esi
lea eax, [esp + 0x98]
mov dword [0x42bbb4], ecx
push eax
push 7
pop ecx
call fcn.004155a6
call eax
mov ecx, dword [0x42bbb0]
mov ebx, eax
or ecx, 0xfb7d20bb
mov dword [esp + 0x24], ebx
test ebx, ebx
je 0x41f823
mov ecx, dword [0x42bbb4]
mov edx, 0x271b5d23
add ecx, 0x245615fd
and ecx, 0x9203a4b1
add ecx, 0x75e6d531
mov dword [0x42bbb0], ecx
xor ecx, 0x74286e0
push ebx
mov dword [0x42bbb4], ecx
push 7
pop ecx
call fcn.004155a6
call eax
mov ebp, eax
mov eax, dword [0x42bbb4]
add eax, 0xfe7b30e2
mov dword [esp + 0x48], ebp
mov dword [0x42bbb0], eax
test ebp, ebp
je 0x41f803
push 0x8040
push esi
push esi
and eax, 0xfbf676f7
mov edx, 0x19e8f7ab
push 2
xor eax, 0x2001d506
push 0x7f00
or eax, 0x9b942230
push esi
mov dword [0x42bbb4], eax
add eax, 0x81a94ab0
push 5
pop ecx
mov dword [0x42bbb0], eax
call fcn.004155a6
call eax
imul ecx, dword [0x42bbb4], 0x864b7ff7
mov edi, eax
mov dword [0x42bbb4], ecx
test edi, edi
je 0x41f04d
lea eax, [esp + 0x9c]
mov edx, 0x6b592b67
push eax
push edi
push 5
pop ecx
call fcn.004155a6
call eax
test eax, eax
je 0x41f065
lea eax, [esp + 0x2c]
mov edx, 0xfc7a7777
push eax
push 5
pop ecx
call fcn.004155a6
call eax
test eax, eax
jne 0x41f07e
mov eax, dword [0x42bbb0]
mov edi, esi
xor eax, 0xfdfde7b7
or eax, 0x14656597
imul ecx, eax, 0x30ca507d
jmp 0x41f089
mov ecx, dword [0x42bbb0]
mov eax, dword [0x42bbb4]
push 8
and ecx, 0xd833017b
add eax, 0x3151feb7
sub ecx, 0x18a7332d
and eax, 0x5f9a12da
push ebx
mov dword [0x42bbb0], ecx
mov edx, 0x1be3efe3
push 7
pop ecx
mov dword [0x42bbb4], eax
call fcn.004155a6
call eax
imul ecx, dword [0x42bbb0], 0xc1bd47bc
mov edx, 0x1be3efe3
push 0xa
push ebx
push 7
mov dword [esp + 0x28], eax
mov dword [0x42bbb0], ecx
imul ecx, ecx, 0x22837ccc
mov dword [0x42bbb4], ecx
pop ecx
call fcn.004155a6
call eax
and dword [0x42bbb4], 0x17c8e839
mov edx, 0x8e1e617c
push eax
push dword [esp + 0x20]
mov dword [esp + 0x28], eax
push ebx
push 7
pop ecx
call fcn.004155a6
call eax
mov edx, dword [0x42bbb4]
and edx, 0x6c06e50b
mov dword [esp + 0x4c], eax
mov ecx, edx
or ecx, 0x334b8b71
mov dword [0x42bbb4], ecx
test eax, eax
je 0x41f7e3
push dword [esp + 0x4c]
or edx, 0xafd4825a
imul eax, edx, 0x86f163a7
mov edx, 0x93f47bf0
push ebp
push 7
pop ecx
or eax, 0x8977658
sub eax, 0x4ca24a3b
mov dword [0x42bbb0], eax
call fcn.004155a6
call eax
mov ecx, dword [0x42bbb0]
add ecx, 0x42e77aa7
mov dword [esp + 0x54], eax
mov edx, ecx
or edx, 0xeb27d704
test eax, eax
je 0x41f7b3
push 0x40cc0020
push esi
push esi
push ebx
push dword [esp + 0x30]
and ecx, 0xaffef8ff
mov edx, 0x14b1f8c4
push dword [esp + 0x30]
or ecx, 0x3d6c85d
xor ecx, 0x4e3cdddd
imul eax, ecx, 0x17d80eff
push esi
push esi
push ebp
push 7
mov dword [0x42bbb0], eax
imul eax, eax, 0xb9c15aa8
pop ecx
mov dword [0x42bbb4], eax
call fcn.004155a6
call eax
test eax, eax
je 0x41f780
mov ecx, dword [0x42bbb0]
lea eax, [ecx - 0x1929e575]
or ecx, 0xe6b1c7ef
and eax, 0x3d926b53
test edi, edi
je 0x41f285
mov edx, dword [esp + 0x2c]
or ecx, 0xd8cdeb12
sub edx, dword [esp + 0xa0]
jns 0x41f224
add ecx, 0xe9179fff
mov edx, esi
or ecx, 0x870b6e3e
xor ecx, 0x1bfe74d
add ecx, 0x66eac3a5
mov ebx, dword [esp + 0x30]
or ecx, 0xf6866f9d
sub ebx, dword [esp + 0xa4]
lea eax, [ecx + 0x74ce8306]
mov dword [0x42bbb4], eax
jns 0x41f25c
imul ecx, ecx, 0x2ad55ce0
mov ebx, esi
mov eax, ecx
or eax, 0xeb3d916c
and ecx, 0xad55a24d
mov dword [0x42bbb4], eax
push edi
push ebx
push edx
push ebp
lea eax, [ecx + 0x4ce725d5]
mov edx, 0x7de53dfa
push 5
pop ecx
mov dword [0x42bbb0], eax
call fcn.004155a6
call eax
mov ecx, dword [0x42bbb0]
mov eax, dword [0x42bbb4]
xor eax, 0x818818ba
mov dword [esp + 0x1c], esi
mov dword [0x42bbb4], eax
and ecx, 0x110b1014
lea eax, [esp + 0x1c]
mov dword [0x42bbb0], ecx
push eax
push esi
push dword [esp + 0x54]
mov edx, 0x883893dc
push 6
pop ecx
call fcn.004155a6
call eax
test eax, eax
jne 0x41f780
cmp dword [esp + 0x1c], esi
je 0x41f780
mov ecx, dword [0x42bbb0]
mov edx, 0x5ba82cd
mov eax, ecx
mov dword [esp + 0x18], esi
or eax, 0xddbf07e0
mov dword [esp + 0x20], esi
sub eax, 0x11ed8de8
or ecx, 0xaefe5bb8
and eax, 0x9de7df33
sub ecx, 0x41af2fe7
mov dword [0x42bbb4], eax
xor ecx, 0xa3bedfe
lea eax, [esp + 0x20]
mov dword [0x42bbb0], ecx
push eax
lea eax, [esp + 0x1c]
push eax
push 6
pop ecx
call fcn.004155a6
call eax
test eax, eax
jne 0x41f754
cmp dword [esp + 0x20], esi
je 0x41f754
cmp dword [esp + 0x18], esi
je 0x41f754
push dword [esp + 0x20]
call fcn.0040570b
mov ebx, eax
pop ecx
test ebx, ebx
je 0x41f754
mov ecx, dword [0x42bbb0]
mov edx, 0x55220f7b
push ebx
push dword [esp + 0x24]
xor ecx, 0xb74cb09c
push dword [esp + 0x20]
mov dword [0x42bbb4], ecx
push 6
pop ecx
call fcn.004155a6
call eax
test eax, eax
jne 0x41f59a
mov edx, dword [0x42bbb4]
mov ebp, esi
and edx, 0xf3e581ff
xor edx, 0x7642f6ea
cmp dword [esp + 0x18], esi
jbe 0x41f3f2
mov edi, ebx
push dword [edi + 0x30]
mov eax, edx
mov ecx, 0xcfef3b50
and eax, 0xeff9fbf7
sub edx, 0x7168f5fb
or eax, 0x8bf9cbd3
mov dword [0x42bbb0], edx
imul eax, eax, 0x56d378d5
sub ecx, eax
lea eax, [esp + 0xb4]
push eax
mov dword [0x42bbb4], ecx
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x41f564
mov edx, dword [0x42bbb0]
inc ebp
add edi, 0x4c
cmp ebp, dword [esp + 0x18]
jb 0x41f39d
mov ebp, dword [esp + 0x48]
sub edx, 0xded166d
mov dword [0x42bbb0], edx
and edx, 0x2af37116
push ebx
mov dword [0x42bbb4], edx
call fcn.004056f0
mov eax, dword [0x42bbb0]
and eax, 0x862559b2
pop ecx
mov dword [0x42bbb4], eax
cmp dword [esp + 0x18], esi
jne 0x41f754
lea eax, [esp + 0x14]
xor ebx, ebx
push eax
inc ebx
mov edx, 0xb91d33f0
push ebx
push esi
push 8
pop ecx
call fcn.004155a6
call eax
test eax, eax
jne 0x41f754
mov edi, dword [esp + 0x14]
test edi, edi
je 0x41f754
mov ecx, dword [0x42bbb4]
add ecx, 0xc031443e
mov dword [esp + 0x58], esi
xor ecx, 0x883924e9
lea edx, [ecx + 0x78e1f13e]
cmp dword [esp + 0x50], esi
jbe 0x41f50a
and ecx, 0x97f30afd
push 0x10
push 0x428f28
mov dword [0x42bbb0], ecx
lea eax, [ecx + 0x4fbe61bf]
mov dword [0x42bbb4], eax
lea eax, [esp + 0x64]
push eax
call fcn.00401d70
imul eax, dword [esp + 0x64], 0x1c
lea ecx, [esp + 0x5c]
mov edx, dword [0x42bbb4]
add esp, 0xc
mov edi, dword [esp + 0x14]
add edx, 0xc5b2225c
or edx, 0xabec68b7
mov dword [esp + eax + 0x70], 4
imul eax, dword [esp + 0x58], 0x1c
mov dword [esp + eax + 0x6c], ebx
imul eax, dword [esp + 0x58], 0x1c
mov dword [esp + eax + 0x74], ecx
mov eax, dword [0x42bbb0]
inc dword [esp + 0x58]
and eax, 0xe5bbc82c
imul eax, eax, 0xfff2fa9c
xor eax, 0x5c656f6a
imul ecx, eax, 0x868e28f7
add edx, 0x5a867bb0
imul eax, ecx, 0x674660e1
and edx, 0x511af495
mov dword [0x42bbb4], edx
mov edx, 0x3a256861
mov dword [0x42bbb0], eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0xcc]
push eax
push edi
push dword [esp + 0x28]
push 6
pop ecx
call fcn.004155a6
call eax
test eax, eax
je 0x41f5a5
imul eax, dword [0x42bbb0], 0xe29c381a
or eax, 0xccdc3a9a
xor dword [0x42bbb4], 0x877037fa
jmp 0x41f745
xor dword [0x42bbb0], 0x53a954d5
lea eax, [esp + 0xc8]
or dword [0x42bbb4], 0xe6fbbbcb
push 0x10
push edi
push eax
call fcn.00401d70
mov edx, dword [0x42bbb0]
add esp, 0xc
mov dword [esp + 0x18], esi
jmp 0x41f3f2
mov edx, dword [0x42bbb0]
jmp 0x41f3f6
mov eax, dword [0x42bbb4]
add eax, 0x6299801a
xor eax, 0x40e7128f
mov dword [0x42bbb0], eax
add eax, 0x36d69
and eax, 0x1008000
or eax, 0xa80801a5
push esi
mov dword [0x42bbb4], eax
mov eax, dword [esp + 0x18]
push esi
push esi
push esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x42bbb4]
lea edx, [esp + 0xf8]
add eax, 0x787a8cb
or eax, 0x5716752a
mov dword [0x42bbb0], eax
mov eax, dword [esp + 0x14]
push ebx
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
jne 0x41f729
cmp dword [esp + 0x104], esi
jne 0x41f729
mov ecx, dword [0x42bbb4]
push dword [esp + 0x100]
lea eax, [ecx - 0x1811aedd]
and ecx, 0x14a28d16
mov dword [0x42bbb0], eax
mov dword [0x42bbb4], ecx
call fcn.0040570b
mov edi, eax
imul eax, dword [0x42bbb4], 0x64455344
pop ecx
imul ecx, eax, 0x6e0ba0e4
test edi, edi
je 0x41f72f
or eax, 0xd33be946
lea edx, [esp + 0x100]
imul ecx, eax, 0xad6d60dc
add eax, 0x1ecd54f
mov dword [0x42bbb4], eax
mov eax, dword [esp + 0x14]
push edx
push dword [esp + 0x104]
mov dword [0x42bbb0], ecx
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x41f718
mov dword [esp + 0x38], 0xdec9d8e8
mov dword [esp + 0x3c], 0xd3c8d5de
mov dword [esp + 0x40], 0xd195cfd4
mov word [esp + 0x44], 0xdecb
mov byte [esp + 0x46], 0xdc
mov al, byte [esp + esi + 0x38]
xor al, 0xbb
movzx eax, al
mov word [esp + esi*2 + 0xd8], ax
inc esi
cmp esi, 0xf
jl 0x41f6bc
mov ecx, dword [0x42bbb4]
xor eax, eax
mov edx, dword [esp + 0x100]
or ecx, 0xee670777
mov word [esp + 0xf6], ax
mov eax, ecx
xor eax, 0xf922e83
and ecx, 0x60466497
mov dword [0x42bbb0], eax
lea eax, [esp + 0xd8]
mov dword [0x42bbb4], ecx
mov ecx, edi
push eax
call fcn.0041eb29
pop ecx
sub dword [0x42bbb4], 0x618f7395
push edi
call fcn.004056f0
pop ecx
mov ecx, dword [0x42bbb0]
lea eax, [ecx - 0x20221215]
imul eax, eax, 0xc0af813
mov dword [0x42bbb4], eax
or eax, 0x9a28ab59
mov dword [0x42bbb0], eax
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [0x42bbb0]
mov edx, 0xe32ee8f1
push dword [esp + 0x1c]
xor eax, 0xd8bdc3cb
mov dword [0x42bbb0], eax
and eax, 0xc4324dde
push 6
pop ecx
mov dword [0x42bbb4], eax
call fcn.004155a6
call eax
push dword [esp + 0x54]
mov eax, dword [0x42bbb4]
mov edx, 0x93f47bf0
push ebp
add eax, 0x561ea1a1
push 7
pop ecx
mov dword [0x42bbb0], eax
call fcn.004155a6
call eax
mov ecx, dword [0x42bbb0]
mov edx, dword [0x42bbb4]
mov ebx, dword [esp + 0x24]
push dword [esp + 0x4c]
imul eax, ecx, 0xc1f90475
or edx, 0x43f5b671
mov dword [0x42bbb4], edx
mov edx, 0xf93dcbf0
push 7
pop ecx
mov dword [0x42bbb0], eax
call fcn.004155a6
call eax
mov ecx, dword [0x42bbb4]
imul eax, ecx, 0x304768a8
mov edx, 0x63cab623
push ebp
push 7
pop ecx
mov dword [0x42bbb0], eax
call fcn.004155a6
call eax
mov eax, dword [0x42bbb0]
push ebx
add eax, 0x83d48d91
mov edx, 0x63cab623
push 7
pop ecx
mov dword [0x42bbb4], eax
call fcn.004155a6
call eax
mov ecx, dword [0x42bbb0]
imul eax, ecx, 0x3dd828fe
pop edi
pop esi
pop ebp
pop ebx
mov dword [0x42bbb0], eax
add eax, 0x8c2d7f35
mov dword [0x42bbb4], eax
add esp, 0x134
ret