Function at 0x41ef10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x55c
mov eax, dword [0x6de5c0]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x6e32c4], 0
je 0x41ef4e
cmp dword [ebp + 8], 0x1800
jne 0x41ef4e
cmp dword [ebp + 0xc], 0xc0
jne 0x41ef4e
cmp dword [ebp + 0x10], 0x400
jne 0x41ef4e
xor eax, eax
jmp 0x41f59c
push 0
push str.errpath
push 0x6e35e4
call fcn.0044c600
add esp, 0xc
cmp dword [0x6e03e8], eax
jbe 0x41ef71
xor eax, eax
jmp 0x41f59c
mov word [ebp - 0x3f8], 0
mov ax, word [ebp - 0x3f8]
mov word [ebp - 0x200], ax
mov word [ebp - 0x3f8], 0
mov word [ebp - 0x434], 0xd
mov word [ebp - 0x432], 0xa
mov word [ebp - 0x430], 0x20
mov word [ebp - 0x42e], 0x20
mov word [ebp - 0x42c], 0x20
mov word [ebp - 0x42a], 0x20
mov word [ebp - 0x428], 0x25
mov word [ebp - 0x426], 0x78
mov word [ebp - 0x424], 0x3a
mov word [ebp - 0x422], 0x25
mov word [ebp - 0x420], 0x78
mov word [ebp - 0x41e], 0x3a
mov word [ebp - 0x41c], 0x25
mov word [ebp - 0x41a], 0x78
mov word [ebp - 0x418], 0
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x434]
push ecx
lea edx, [ebp - 0x540]
push edx
call dword [0x6e01b8]
add esp, 0x14
mov eax, dword [ebp + 8]
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 0x1600
ja 0x41f08d
cmp dword [ebp - 0x544], 0x1600
je 0x41f245
cmp dword [ebp - 0x544], 0x1000
je 0x41f0b2
cmp dword [ebp - 0x544], 0x1300
je 0x41f0e7
cmp dword [ebp - 0x544], 0x1500
je 0x41f29a
jmp case.0x41f2cf.2
cmp dword [ebp - 0x544], 0x1800
je 0x41f268
cmp dword [ebp - 0x544], 0x1a00
je 0x41f19e
jmp case.0x41f2cf.2
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x548], ecx
cmp dword [ebp - 0x548], 0xa903
je 0x41f0c9
jmp 0x41f0e2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d11
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0x1841
ja 0x41f148
cmp dword [ebp - 0x54c], 0x1840
jae case.0x41f170.0
cmp dword [ebp - 0x54c], 0x1822
ja 0x41f12e
cmp dword [ebp - 0x54c], 0x1822
je case.0x41f170.0
cmp dword [ebp - 0x54c], 0x1034
je 0x41f177
jmp case.0x41f170.1
cmp dword [ebp - 0x54c], 0x182a
jb case.0x41f170.1
cmp dword [ebp - 0x54c], 0x182b
jbe case.0x41f170.0
jmp case.0x41f170.1
mov ecx, dword [ebp - 0x54c]
sub ecx, 0x1843
mov dword [ebp - 0x54c], ecx
cmp dword [ebp - 0x54c], 8
ja case.0x41f170.1
mov edx, dword [ebp - 0x54c]
movzx eax, byte [edx + 0x41f5b4]
jmp dword [eax*4 + 0x41f5ac]
xor eax, eax
jmp 0x41f59c
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1bd0
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x550], edx
cmp dword [ebp - 0x550], 0x2c1
ja 0x41f1f0
cmp dword [ebp - 0x550], 0x2c1
je case.0x41f1e9.236
mov eax, dword [ebp - 0x550]
sub eax, 0x155
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0xec
ja case.0x41f1e9.1
mov ecx, dword [ebp - 0x550]
movzx edx, byte [ecx + 0x41f5d0]
jmp dword [edx*4 + 0x41f5c0]
jmp case.0x41f1e9.1
mov eax, dword [0x6e03e8]
sub eax, 1
mov dword [0x6e03e8], eax
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1d14
call fcn.00433690
add esp, 0xc
jmp case.0x41f1e9.1
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d13
call fcn.00433690
add esp, 0xc
mov eax, dword [0x6e03e8]
sub eax, 1
mov dword [0x6e03e8], eax
jmp case.0x41f2cf.2
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x554], ecx
cmp dword [ebp - 0x554], 0x50a
je 0x41f25c
jmp 0x41f263
xor eax, eax
jmp 0x41f59c
jmp case.0x41f2cf.2
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x558], edx
cmp dword [ebp - 0x558], 0xd
je 0x41f285
cmp dword [ebp - 0x558], 0x63
je 0x41f28e
jmp 0x41f295
xor eax, eax
jmp 0x41f59c
xor eax, eax
jmp 0x41f59c
jmp case.0x41f2cf.2
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
sub ecx, 0x20
mov dword [ebp - 0x55c], ecx
cmp dword [ebp - 0x55c], 0x85
ja case.0x41f2cf.2
mov edx, dword [ebp - 0x55c]
movzx eax, byte [edx + 0x41f718]
jmp dword [eax*4 + 0x41f6c0]
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1d01
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d02
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea eax, [ebp - 0x200]
push eax
push 0x1d03
call fcn.00433690
add esp, 0xc
mov ecx, dword [0x6e03e8]
sub ecx, 1
mov dword [0x6e03e8], ecx
jmp case.0x41f2cf.2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d04
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea eax, [ebp - 0x200]
push eax
push 0x1441
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1442
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1443
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea eax, [ebp - 0x200]
push eax
push 0x1444
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1445
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d09
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea eax, [ebp - 0x200]
push eax
push 0x1d0a
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1d0b
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d0c
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea eax, [ebp - 0x200]
push eax
push 0x1d0d
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1d0f
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea edx, [ebp - 0x200]
push edx
push 0x1d10
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
push 0x84
lea eax, [ebp - 0x200]
push eax
push 0x1d11
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
cmp dword [ebp + 0xc], 0x10
jne 0x41f4e7
xor eax, eax
jmp 0x41f59c
jmp case.0x41f2cf.2
cmp dword [ebp + 0xc], 0xa
jne 0x41f4f6
xor eax, eax
jmp 0x41f59c
jmp case.0x41f2cf.2
push 0x84
lea ecx, [ebp - 0x200]
push ecx
push 0x1be9
call fcn.00433690
add esp, 0xc
jmp case.0x41f2cf.2
xor eax, eax
jmp 0x41f59c
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x3f8]
push ecx
call dword [0x6e01b8]
add esp, 0xc
movzx edx, word [ebp - 0x3f8]
test edx, edx
jne 0x41f55b
push 0x84
lea eax, [ebp - 0x3f8]
push eax
push 0x1d00
call fcn.00433690
add esp, 0xc
jmp 0x41f56a
mov ecx, dword [0x6e03e8]
add ecx, 1
mov dword [0x6e03e8], ecx
lea edx, [ebp - 0x540]
push edx
lea eax, [ebp - 0x3f8]
push eax
call fcn.00523000
add esp, 8
push 0x30
push 0
lea ecx, [ebp - 0x3f8]
push ecx
call dword [0x59b750]
push eax
call fcn.00434860
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00523400
mov esp, ebp
pop ebp
ret