Function at 0x41bc50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00418252
add esp, 0xc
jl 0x41bc6b
test dword [esp + 4], edx
add esi, dword [esp]
sub esi, dword [esp]
jo 0x41bc7f
mov ebx, ebx
jge 0x41bc7b
jno 0x41bc7f
mov edx, 0xe845c6d3
inc esp
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x13], 0x54
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x65
mov byte [ebp - 0x17], 0x6d
mov byte [ebp - 0x12], 0x66
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0x16], 0x70
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0xc], 0x49
mov byte [ebp - 7], 0x66
mov byte [ebp - 0x15], 0x74
mov byte [ebp - 0x10], 0x77
mov byte [ebp - 0xb], 0x62
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x6f
neg esi
neg esi
jb 0x41bce1
pushf
lea esp, [esp]
popf
js 0x41bcda
xchg esp, esp
js 0x41bcde
jae 0x41bce1
add eax, 0x80e84d8a
jmp 0xe88f44eb
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
ror edi, 0
rol eax, 1
rol eax, 0x1f
jge 0x41bd97
lea esi, [esi + 0x47e5]
lea esi, [esi - 0x47e5]
jl 0x41bd97
mov eax, 0xbeace856
invalid
call 0x417c48
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x41bdac
xor eax, eax
jmp 0x41be49
xchg edx, edx
push ebx
pop ebx
lea ecx, [ecx + 0x1898]
lea ecx, [ecx - 0x1898]
rol esi, 0
js 0x41bdd6
jne 0x41bdc3
jae 0x41bdc5
lea eax, [eax + 0x79d1]
lea eax, [eax - 0x79d1]
jns 0x41bdd6
sub esp, 0xe84d8d4d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.00430b8f
mov dword [ebp - 0x1c], eax
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00418252
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jne 0x41be00
xor eax, eax
jmp 0x41be49
cmp edi, dword [esp]
test ecx, edx
sub esp, 0
jo 0x41be17
jge 0x41be0c
jne 0x41be0e
xchg edi, edi
lea ebx, [ebx]
jno 0x41be17
mov esp, 0x4d8b4ed7
in al, 0x51
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00427d04
add esp, 4
je 0x41be25
xchg edx, edi
xchg edx, edi
xor esi, 0x8e0
xor esi, 0x8e0
jne 0x41be42
jo 0x41be39
xchg edi, edi
xchg edx, esi
xchg edx, esi
je 0x41be42
sub eax, 0x5208558b
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4