Function at 0x41eb24
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x60
mov eax, 0x453aa5
call fcn.004534f4
sub esp, 0x6c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
movaps xmm0, xmmword [0x407c70]
movups xmmword [ebp - 0x63], xmm0
mov word [ebp - 0x53], 0x5c5d
mov byte [ebp - 0x51], bl
mov ecx, ebx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x11
jae 0x41eb6c
mov al, byte [ebp + ecx - 0x62]
xor al, byte [ebp - 0x63]
mov byte [ebp + ecx - 0x62], al
inc ecx
jmp 0x41eb56
mov byte [ebp - 0x51], bl
lea esi, [ebp - 0x62]
mov al, 0x2a
mov dword [ebp + 0x58], 0x777e552a
mov dword [ebp + 0x5c], 0x383c3d61
mov dword [ebp + 0x60], 0x76766e
mov edx, ebx
mov dword [ebp - 0x30], edx
cmp edx, 0xa
jae 0x41ebb6
movsx ecx, al
and ecx, 0x8000000f
jns 0x41eba3
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx + 0x59]
sub al, cl
mov byte [ebp + edx + 0x59], al
inc edx
mov dword [ebp - 0x30], edx
mov al, byte [ebp + 0x58]
jmp 0x41eb8e
mov byte [ebp + 0x63], bl
mov edx, esi
lea ecx, [ebp + 0x59]
call fcn.0040c457
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
call eax
mov edi, eax
cmp edi, 0xffffffff
je 0x41ee40
mov esi, dword [ebp + 0x6c]
push esi
call fcn.0040ce55
movaps xmm0, xmmword [0x408550]
movups xmmword [ebp], xmm0
mov dword [ebp + 0x10], 0x6e7d6c6a
mov word [ebp + 0x14], 0x4a6d
mov byte [ebp + 0x16], bl
mov edx, ebx
mov dword [ebp - 0x34], edx
cmp edx, 0x15
jae 0x41ec24
movsx ecx, byte [ebp]
and ecx, 0x8000000f
jns 0x41ec17
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx + 1]
sub al, cl
mov byte [ebp + edx + 1], al
inc edx
jmp 0x41ebfe
mov byte [ebp + 0x16], bl
mov al, 4
mov dword [ebp + 0x25], 0x76694f04
mov dword [ebp + 0x29], 0x37706972
mov word [ebp + 0x2d], 0x3236
push 0x68
pop ebx
mov byte [ebp + 0x2f], bl
mov word [ebp + 0x30], 0x7070
mov byte [ebp + 0x32], 0
xor edx, edx
mov dword [ebp - 0x38], edx
cmp edx, 0xc
jae 0x41ec7a
movsx ecx, al
and ecx, 0x8000000f
jns 0x41ec67
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx + 0x26]
sub al, cl
mov byte [ebp + edx + 0x26], al
inc edx
mov dword [ebp - 0x38], edx
mov al, byte [ebp + 0x25]
jmp 0x41ec52
mov byte [ebp + 0x32], 0
lea edx, [ebp + 1]
lea ecx, [ebp + 0x26]
call fcn.0040c457
mov ecx, esi
cmp dword [esi + 0x14], 0x10
jb 0x41ec93
mov ecx, dword [esi]
push edi
push ecx
call eax
test eax, eax
je 0x41ed17
movaps xmm0, xmmword [0x407e90]
movups xmmword [ebp - 0x76], xmm0
mov word [ebp - 0x66], 0x6061
mov byte [ebp - 0x64], 0
xor ecx, ecx
mov dword [ebp - 0x3c], ecx
cmp ecx, 0x11
jae 0x41ecc8
mov al, byte [ebp + ecx - 0x75]
xor al, byte [ebp - 0x76]
mov byte [ebp + ecx - 0x75], al
inc ecx
jmp 0x41ecb2
mov byte [ebp - 0x64], 0
lea esi, [ebp - 0x75]
mov dl, 0x18
mov dword [ebp + 0x4c], 0x756c5318
mov dword [ebp + 0x50], 0x362a2b4f
mov dword [ebp + 0x54], 0x74747c
xor ecx, ecx
mov dword [ebp - 0x40], ecx
cmp ecx, 0xa
jae 0x41ed03
mov al, byte [ebp + ecx + 0x4d]
xor al, dl
mov byte [ebp + ecx + 0x4d], al
inc ecx
mov dword [ebp - 0x40], ecx
mov dl, byte [ebp + 0x4c]
jmp 0x41eceb
mov byte [ebp + 0x57], 0
mov edx, esi
lea ecx, [ebp + 0x4d]
call fcn.0040c457
push edi
jmp 0x41ee3e
movaps xmm0, xmmword [0x407d80]
movups xmmword [ebp - 0x25], xmm0
mov dword [ebp - 0x15], 0x6e6f6974
mov byte [ebp - 0x11], 0
xor edx, edx
mov dword [ebp - 0x44], edx
cmp edx, 0x13
jae 0x41ed55
movsx ecx, byte [ebp - 0x25]
and ecx, 0x8000000f
jns 0x41ed48
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x24]
sub al, cl
mov byte [ebp + edx - 0x24], al
inc edx
jmp 0x41ed2f
mov byte [ebp - 0x11], 0
mov dl, 8
mov dword [ebp + 0x40], 0x657c4308
mov dword [ebp + 0x44], 0x263a3b5f
mov dword [ebp + 0x48], 0x64646c
xor ecx, ecx
mov dword [ebp - 0x48], ecx
cmp ecx, 0xa
jae 0x41ed8d
mov al, byte [ebp + ecx + 0x41]
xor al, dl
mov byte [ebp + ecx + 0x41], al
inc ecx
mov dword [ebp - 0x48], ecx
mov dl, byte [ebp + 0x40]
jmp 0x41ed75
mov byte [ebp + 0x4b], 0
lea edx, [ebp - 0x24]
lea ecx, [ebp + 0x41]
call fcn.0040c457
push edi
call eax
mov dl, 6
mov dword [ebp + 0x33], 0x6a634206
mov dword [ebp + 0x37], 0x40637263
mov dword [ebp + 0x3b], 0x47636a6f
mov byte [ebp + 0x3f], 0
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
cmp ecx, 0xb
jae 0x41edd7
mov al, byte [ebp + ecx + 0x34]
xor al, dl
mov byte [ebp + ecx + 0x34], al
inc ecx
mov dword [ebp - 0x4c], ecx
mov dl, byte [ebp + 0x33]
jmp 0x41edbf
mov byte [ebp + 0x3f], 0
lea edi, [ebp + 0x34]
mov byte [ebp + 0x17], bl
mov dword [ebp + 0x18], 0x767a6d53
mov dword [ebp + 0x1c], 0x3a3b746d
mov dword [ebp + 0x20], 0x74746c36
mov byte [ebp + 0x24], 0
xor edx, edx
mov dword [ebp - 0x50], edx
cmp edx, 0xc
jae 0x41ee27
movsx ecx, bl
and ecx, 0x8000000f
jns 0x41ee14
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx + 0x18]
sub al, cl
mov byte [ebp + edx + 0x18], al
inc edx
mov dword [ebp - 0x50], edx
mov bl, byte [ebp + 0x17]
jmp 0x41edff
mov byte [ebp + 0x24], 0
mov edx, edi
lea ecx, [ebp + 0x18]
call fcn.0040c457
cmp dword [esi + 0x14], 0x10
jb 0x41ee3d
mov esi, dword [esi]
push esi
call eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add ebp, 0x64
leave
ret 4