Function at 0x41507a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov dword [ebp - 0x754], eax
jne 0x414559
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x4147cb
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x4145b3
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x4147bf
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x414623
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x4146d5
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x4146d5
push eax
push edx
add esp, 4
jmp 0x41465a
jmp 0x414661
or eax, 0x45a8
or eax, 0x12c07
pop eax
push edx
xor edx, 0x113aa
or edx, 0x17a1e
add edx, 0x12c48
pop edx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x4146c7
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x4146ce
jmp 0x414614
jmp 0x4146d5
push ecx
push edx
add esp, 4
sub ecx, 0x323
sub ecx, 0xbc3e
xor ecx, 0xb313
pop ecx
push edx
or edx, 0x76b1
and edx, 0x3133
or edx, 0x546f
and edx, 0x86c5
pop edx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x414734
mov dword [ebp - 0xca8], 0
jmp 0x4147a3
push edi
add edi, 0x15487
or edi, 0x4af9
add edi, 0xb431
or edi, 0x1225e
pop edi
push edi
push edi
add esp, 4
add edi, 0x89b9
sub edi, 0x177bf
and edi, 0x9988
pop edi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x414799
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x4147a3
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x4147ba
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x4147cb
jmp 0x4145a4
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0
je 0x4148a6
push edx
call 0x4147e8
add byte [esi], bh
dec ebp
inc edi
inc esp
dec ebp
dec ecx
dec ebx
cmp dword [edi - 0x7d], eax
les eax, [ecx + eax*4]
retf 0x28b9
push edi
sub edi, 0x8a69
call 0x4148bc
add byte [ebp + 0x50], cl
xor dh, byte [esi]
inc eax
dec esp
xor ecx, dword [edx + 0x44]
add esp, 4
xor edi, 0x174dc
or edi, 0xa439
pop edi
push edi
push ebx
add esp, 4
and edi, 0xda84
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push edx
or edx, 0x1447e
pop edx
push eax
push esi
add esp, 4
xor eax, 0x1280e
pop eax
push eax
xor eax, 0xc14a
pop eax
push esi
xor esi, 0x173b2
pop esi
push esi
or esi, 0x19ad
add esi, 0xb85b
pop esi
cmp dword [ebp - 0x15fc], 0
jne 0x414949
mov dword [ebp - 0x31c], 0
jmp 0x414bf0
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push edi
push ecx
add esp, 4
add edi, 0x7385
pop edi
push ebx
and ebx, 0xfc9d
pop ebx
push eax
push edi
add esp, 4
sub eax, 0x14fb9
or eax, 0xe4b5
or eax, 0x3543
jmp 0x41498c
pop eax
cmp dword [ebp - 0xcb4], 0
jne 0x4149a5
mov dword [ebp - 0x31c], 0
jmp 0x414bf0
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push ecx
sub ecx, 0x123cc
sub ecx, 0xb158
add ecx, 0x6efb
pop ecx
push esi
push edi
add esp, 4
add esi, 0x160
sub esi, 0xc804
add esi, 0x170f4
add esi, 0xdcae
add byte [eax], al
pop esi
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ecx
push eax
add esp, 4
or ecx, 0xbc5c
or ecx, 0x6d6e
pop ecx
push eax
push edx
add esp, 4
jmp 0x414a2c
and eax, 0x16f57
sub eax, 0x14d43
and eax, 0x63a9
pop eax
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x34], dx
push ebx
call 0x414aa7
add byte [ebx], bh
inc edi
aas
dec eax
inc ecx
inc esi
inc edx
xor eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
fidivr word [edi]
add byte [eax], al
xor ebx, 0x14324
or ebx, 0x134ae
pop ebx
push esi
jmp 0x414ac7
pop esi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x414ae5
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x1604], ecx
jmp 0x414b3f
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x414a0d
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x414a0d
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x414b29
mov dword [ebp - 0x1600], 0xffffffff
jmp 0x414b33
mov dword [ebp - 0x1600], 1
mov eax, dword [ebp - 0x1600]
mov dword [ebp - 0x1604], eax
cmp dword [ebp - 0x1604], 0
jne 0x414b88
push ebx
add ebx, 0x13a57
add ebx, 0x25
add ebx, 0x5f2f
sub ebx, 0xc546
pop ebx
push esi
push esi
add esp, 4
and esi, 0xf144
or esi, 0xcc1d
xor esi, 0xdf82
pop esi
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x414bf0
push ecx
jmp 0x414b91
pop ecx
push esi
push ecx
add esp, 4
add esi, 0x409b
xor esi, 0xab52
pop esi
push eax
add eax, 0x1462b
pop eax
push eax
sub eax, 0xbc29
xor eax, 0x12d08
pop eax
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x414be6
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x4149b1
mov dword [ebp - 0x31c], 0
push ebx
push ecx
add esp, 4
call 0x414c04
add byte [esi + 0x4f], cl
dec ebx
dec ebx
dec eax
cmp byte [ebp + 0x4c], al
add esp, 4
sub ebx, 0x921f
pop ebx
push eax
sub eax, 0xa530
add eax, 0xcdd9
xor eax, 0x12264
pop eax
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push edx
add edx, 0x11c5d
xor edx, 0x10543
xor edx, 0x9685
and edx, 0x4da4
pop edx
push esi
push ebx
add esp, 4
or esi, 0x6199
xor esi, 0x4e19
and esi, 0x1510e
pop esi
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x414c93
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x414f84
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x414cbb
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x414f84
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x414ced
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x414f84
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x414d12
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x414f84
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x414d6c
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x414f78
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x414ddc
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x414e8e
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x414e8e
push esi
push esi
add esp, 4
or esi, 0x2558
add esi, 0x5c03
or esi, 0x164ba
xor esi, 0x12278
pop esi
push esi
push edi
add esp, 4
sub esi, 0x16fd2
pop esi
push esi
jmp 0x414e3a
pop esi
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x414e80
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x414e87
jmp 0x414dcd
jmp 0x414e8e
push ebx
add ebx, 0x3a0
pop ebx
push ecx
push ecx
add esp, 4
sub ecx, 0xf07b
add ecx, 0xaf36
add ecx, 0x3b12
pop ecx
push eax
push ebx
add esp, 4
add eax, 0xfc22
sub eax, 0x1aa9
pop eax
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x414eed
mov dword [ebp - 0xcb8], 0
jmp 0x414f5c
push edi
push ecx
add esp, 4
xor edi, 0x11a1
xor edi, 0x128c8
sub edi, 0x1862a
pop edi
push edx
xor edx, 0x4a8d
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0x11b9c
add ebx, 0xc421
pop ebx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x414f52
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x414f5c
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x414f73
mov ecx, dword [ebp - 0x198c]
mov dword [ebp - 0x510], ecx
jmp 0x414f84
jmp 0x414d5d
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edx
push eax
add esp, 4
or edx, 0x90c
jmp 0x414fa4
add edx, 0x45a3
pop edx
push eax
call 0x414fb8
add byte [esi + eax*2], bh
inc ebx
push eax
dec ecx
inc ebp
add esp, 4
xor eax, 0x5893
pop eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push edx
xor edx, 0x3fe2
pop edx
push edx
call 0x414fe7
add byte [eax + 0x45], dl
inc edx
aaa
aas
inc edi
add esp, 4
call 0x414ff9
add byte [ebp + 0x46], al
inc ebp
aas
cmp eax, 0x423d4c40
add esp, 4
xor edx, 0x3f5c
pop edx
cmp dword [ebp - 0x3e8], 0
je 0x415015
cmp dword [ebp - 0xab8], 0
jne 0x41505b
push edi
push eax
add esp, 4
and edi, 0x12dd7
pop edi
push edx
call 0x41502e
add byte [edx], dh
aaa
cmp al, 0x45
dec ebx
xor eax, 0x8104c483
retf 0xd428
mov dword [ebp - 0x20a8], 0xa
push ecx
push ecx
add esp, 4
call 0x41507a
add byte [eax], bh
dec ecx
cmp eax, 0x413f503a
dec esi
inc eax
inc ebp
add esp, 4
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x101b4
sub edi, 0x4ac2
jmp 0x415096
pop edi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ecx
push ecx
add esp, 4
xor ecx, 0x17d68
add ecx, 0x1436b
pop ecx
push edi
xor edi, 0x14cc6
and edi, 0x96ca
add edi, 0x91b4
pop edi
push ecx
push edx
add esp, 4
sub ecx, 0xa1a4
pop ecx
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ebx
or ebx, 0x183e8
jmp 0x41516c
pop ebx
push edx
sub edx, 0x753a
pop edx
push esi
push ebx
add esp, 4
or esi, 0x392b
add esi, 0x7c99
pop esi
push edx
and edx, 0x125f1
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push edi
add edi, 0x857a
and edi, 0x10218
add edi, 0xaa2d
or edi, 0x12107
pop edi
push ecx
sub ecx, 0xdefe
call 0x4151e4
add byte [edx], dh
xor eax, dword [ebp + 0x4f]
cmp eax, 0xc483393f
add al, 0x59
cmp dword [ebp - 0x1614], 0
jne 0x415200
mov dword [ebp - 0x2fc], 0
jmp 0x4154a7
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push esi
and esi, 0x17aa
or esi, 0xa382
and esi, 0x10095
call 0x415234
add byte [ecx + 0x4c], cl
dec edi
dec edi
dec esp
aaa
inc ebp
add esp, 4
pop esi
push edx
push eax
add esp, 4
add edx, 0x16923
pop edx
cmp dword [ebp - 0xcc4], 0
jne 0x41525c
mov dword [ebp - 0x2fc], 0
jmp 0x4154a7
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push eax
push edi
add esp, 4
sub eax, 0xe9a9
add eax, 0xac53
or eax, 0x941
and eax, 0x1378b
pop eax
push eax
add eax, 0xcd64
xor eax, 0x6a3c
and eax, 0x593
pop eax
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
push edi
add esp, 4
add eax, 0x1517a
call 0x4152dc
add byte [ebx], dh
dec eax
aas
dec edx
cmp al, 0x43
xor al, 0x83
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ecx + 0x44], cl
cmp al, byte ss:[edi + 0x44]
aaa
add esp, 4
sub eax, 0xe22d
pop eax
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
invalid
invalid
invalid
invalid