Function at 0x41b811
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
push ebx
push esi
lea eax, [ebp - 0x14]
push edi
push eax
lea eax, [ebp - 0x150]
mov esi, 0x104
mov dword [ebp - 8], ecx
push eax
mov dword [ebp - 0x14], esi
call dword [0x42c04c]
lea eax, [ebp - 0x150]
mov edi, 0x482638
push eax
mov ecx, edi
call fcn.0041fcd8
xor ebx, ebx
cmp dword [0x48261c], ebx
je 0x41b8aa
push 0x430de4
call dword [0x42c248]
cmp eax, ebx
mov dword [ebp - 4], eax
je 0x41b8aa
push 0x430dd4
push eax
call dword [0x42c24c]
cmp eax, ebx
je 0x41b8a1
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], esi
push ecx
lea ecx, [ebp - 0x150]
push ecx
push 3
call eax
test al, al
je 0x41b8a1
cmp dword [ebp - 0x14], ebx
jbe 0x41b8a1
lea eax, [ebp - 0x150]
mov ecx, edi
push eax
call fcn.0041fcd8
push dword [ebp - 4]
call dword [0x42c200]
cmp dword [0x48261c], ebx
push 1
pop esi
mov eax, 0x430da4
mov dword [ebp - 4], esi
jne 0x41b8c2
mov eax, 0x4309d8
lea ecx, [ebp - 0x4c]
push ecx
push str._a_a_b_b_t_t_n_n_v_v_f_f_r_r
push eax
push 0x80000002
call fcn.004219d8
add esp, 0x10
test eax, eax
jle 0x41b8f3
push dword [ebp - 0x4c]
mov ecx, 0x482644
call fcn.0041fcd8
push dword [ebp - 0x4c]
call fcn.004297ce
pop ecx
mov ecx, dword [ebp - 8]
call fcn.0041dd29
cmp eax, ebx
jl 0x41bc22
push ebx
mov ecx, 0x4827b8
call fcn.0041fda9
mov byte [ebp - 0xc], al
lea eax, [ebp - 0xc]
push esi
push eax
mov byte [ebp - 0xb], 0x3a
mov byte [ebp - 0xa], 0x5c
mov byte [ebp - 9], bl
call fcn.0040fd79
cmp byte [0x48375c], bl
pop ecx
pop ecx
mov dword [0x482b08], eax
mov dword [0x482b0c], edx
mov dword [ebp - 0x10], ebx
jne 0x41b9a4
cmp dword [0x482acc], ebx
jne 0x41b9a4
cmp dword [0x482ad0], ebx
jne 0x41b9a4
push ebx
push 0x40581a
push ebx
push 0x12
push dword [0x4825fc]
call dword [0x42c328]
push 0x430d70
mov dword [ebp - 0x10], eax
call fcn.00421378
cmp eax, ebx
je 0x41b98b
push eax
push 0x422
push dword [ebp - 0x10]
call dword [0x42c3ac]
push eax
call fcn.0042292d
pop ecx
pop ecx
push 0x430d4c
call fcn.00421378
cmp eax, ebx
je 0x41b9a4
push eax
push dword [ebp - 0x10]
call fcn.0042292d
pop ecx
pop ecx
mov ecx, dword [ebp - 8]
call fcn.0041bc27
cmp eax, ebx
jl 0x41bc22
cmp byte [0x48375c], bl
mov edi, 0x4836e8
jne 0x41b9f9
mov ecx, dword [ebp - 8]
call fcn.00419066
cmp byte [0x48375c], bl
jne 0x41b9f9
mov ecx, edi
call fcn.0041234b
test eax, eax
jge 0x41b9f9
push 0x30
mov ecx, 0x482d40
call fcn.00420b07
push eax
push 0x430d0c
push ebx
mov ecx, 0x482408
call fcn.0041ee17
mov eax, dword [0x482600]
mov byte [ebp - 0x48], 0x55
mov dword [0x48279c], eax
mov byte [ebp - 0x47], 0xd7
mov byte [ebp - 0x46], 0x50
mov byte [ebp - 0x45], 0x85
mov byte [ebp - 0x44], 0x6b
mov byte [ebp - 0x43], 0x19
mov byte [ebp - 0x42], 0x32
mov byte [ebp - 0x41], 0xcc
mov byte [ebp - 0x40], 0x45
mov byte [ebp - 0x3f], 0xf
mov byte [ebp - 0x3e], 8
mov byte [ebp - 0x3d], 0x1e
mov byte [ebp - 0x3c], 0xb6
mov byte [ebp - 0x3b], 0xa5
mov byte [ebp - 0x3a], 0x6a
mov byte [ebp - 0x39], 0xe4
mov byte [ebp - 0x38], 0xa1
mov byte [ebp - 0x37], 0xc7
mov byte [ebp - 0x36], 0xc4
mov byte [ebp - 0x35], 0x76
mov byte [ebp - 0x34], 0x33
mov byte [ebp - 0x33], 0x59
mov byte [ebp - 0x32], 0x71
mov byte [ebp - 0x31], 0x34
mov byte [ebp - 0x30], 0x59
mov byte [ebp - 0x2f], 0x23
mov byte [ebp - 0x2e], 0x8d
mov byte [ebp - 0x2d], 0x82
mov byte [ebp - 0x2c], 0x8b
mov byte [ebp - 0x2b], 0xa5
mov byte [ebp - 0x2a], 0x59
mov byte [ebp - 0x29], 0xb6
mov byte [ebp - 0x28], 0xc5
mov byte [ebp - 0x27], 0x50
mov byte [ebp - 0x26], 0xe8
mov byte [ebp - 0x25], 0x9a
mov byte [ebp - 0x24], 0xf4
mov byte [ebp - 0x23], 0xf4
mov byte [ebp - 0x22], 0xd
mov byte [ebp - 0x21], 0xfd
mov byte [ebp - 0x20], 0x21
mov byte [ebp - 0x1f], 0x12
mov byte [ebp - 0x1e], 0x7a
mov byte [ebp - 0x1d], 0x32
mov byte [ebp - 0x1c], 0x91
mov byte [ebp - 0x1b], 0x35
mov byte [ebp - 0x1a], 0xd3
mov byte [ebp - 0x19], 0xb0
mov byte [ebp - 0x18], 0x73
mov byte [ebp - 0x17], 0x97
call fcn.004280c4
call fcn.00428119
test eax, eax
jle 0x41bae0
xor eax, eax
jmp 0x41bc22
cmp byte [0x482594], bl
mov esi, 0x4823b8
je 0x41bafa
lea eax, [ebp - 0x48]
push 0x32
push eax
mov ecx, esi
call fcn.0041fe0d
mov ecx, esi
call fcn.004200a6
push 0x4823b8
call fcn.00421bc7
pop ecx
mov ecx, esi
call fcn.004200a6
cmp byte [0x482594], bl
je 0x41bb2a
cmp byte [0x48375c], bl
jne 0x41bb56
mov ecx, edi
call fcn.0041130a
cmp byte [0x48375c], bl
jne 0x41bb56
test byte [0x482d3c], 2
jne 0x41bb3f
push 1
jmp 0x41bb41
push 3
push dword [0x4825f8]
call dword [0x42c414]
push dword [ebp - 0x10]
call dword [0x42c3b8]
cmp byte [0x482594], bl
jne 0x41bb6a
push 4
call fcn.004297d9
pop ecx
mov esi, eax
jmp 0x41bb6d
mov esi, dword [ebp - 4]
push 0x74
mov ecx, 0x482770
call fcn.004206c3
test eax, eax
je 0x41bbda
cmp byte [0x48375c], bl
jne 0x41bbda
push ebx
call dword [0x482bfc]
test al, al
pop ecx
je 0x41bbda
push 1
push ebx
mov byte [0x48376d], 1
call dword [0x482c14]
push ebx
push ebx
push ebx
call dword [0x482c0c]
add esp, 0x14
test al, al
je 0x41bbda
mov ecx, 0x482c28
call fcn.00420b07
push eax
push ebx
call dword [0x482c00]
pop ecx
test al, al
pop ecx
je 0x41bbda
push 0x482c24
push ebx
push ebx
push ebx
call dword [0x482c08]
add esp, 0x10
cmp byte [0x482594], bl
je 0x41bc0d
cmp dword [0x482acc], ebx
jne 0x41bc1f
mov ecx, dword [ebp - 8]
push 0x30
push 0x430cf8
push 0x430c0c
push dword [ecx]
call fcn.0041ee17
push 4
call fcn.004297d9
pop ecx
mov dword [ebp - 4], eax
mov esi, eax
cmp dword [0x482acc], ebx
jne 0x41bc1f
add dword [esi], 0xc
push esi
call fcn.004297ce
pop ecx
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret