Function at 0x417e9e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
and edx, 0x14e37
pop edx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x41782f
push ebx
add ebx, 0x1332d
and ebx, 0x13094
add ebx, 0xa40
or ebx, 0x16928
pop ebx
push edx
push ebx
add esp, 4
jmp 0x41781d
add edx, 0x5e50
add edx, 0x1300
pop edx
jmp 0x417a5d
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push ebx
push esi
add esp, 4
sub ebx, 0x4b90
xor ebx, 0x5813
call 0x417864
add byte [ecx], bh
cmp byte [esi + 0x3f], cl
cmp eax, 0x83325043
les eax, [ebx + ebx*2]
push ebx
push edi
add esp, 4
jmp 0x417876
pop ebx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x4178de
push ecx
xor ecx, 0x163a
xor ecx, 0xd94a
call 0x4178b4
add byte [edi + 0x4a], cl
dec eax
xor ecx, dword [edx + 0x40]
add esp, 4
jmp 0x4178c0
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x17b67
pop edi
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x417a0f
cmp dword [ebp - 0xc80], 0
jle 0x417a03
push edx
push edi
add esp, 4
push edx
push eax
add esp, 4
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebx], dh
inc ebx
inc ebx
inc edx
inc esp
aas
xor eax, 0x5a04c483
les eax, [edx + ebx*2]
push edx
and edx, 0xd3c5
add edx, 0xc1aa
xor edx, 0x287b
pop edx
push eax
and eax, 0x1208
pop eax
mov dword [ebp - 0x3e8], 0
push edx
call 0x417aa8
add byte [esi + 0x36], al
cmp byte [eax + 0x45], dl
xor eax, dword [eax + 0x4a]
add esp, 4
and edx, 0x1492a
call 0x417ac1
add byte [eax + 0x45], al
xor ecx, dword [esi + 0x4f]
xor ecx, dword [ebp + 0x39]
dec esp
add esp, 4
and edx, 0x15f8f
pop edx
push edi
add edi, 0x41c2
add byte [eax], al
jmp 0x417adb
xor edi, 0x59eb
add edi, 0x14f32
pop edi
push edx
push eax
add esp, 4
jmp 0x417af6
and edx, 0xbea5
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
call dword [edi + 0x52]
add esp, 4
sub edi, 0xe493
call 0x417b2a
add byte [ebp + 0x4c], al
aas
dec ebx
cmp al, 0x50
add esp, 4
pop edi
push ecx
add ecx, 0xe3eb
and ecx, 0x2bbb
pop ecx
push ebx
jmp 0x417b43
pop ebx
mov dword [ebp - 0x20a4], 0xffffffff
push edi
and edi, 0x55d4
call 0x417b64
add byte [edi + 0x46], al
inc eax
cmp dh, byte [edi]
inc edi
inc edx
cmp eax, dword [ebx + 0x535f04c4]
push ebx
add esp, 4
sub ebx, 0x1fd2
sub ebx, 0x4edc
xor ebx, 0x4d46
pop ebx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x417b9d
push ebx
push esi
add esp, 4
and ebx, 0xe3b1
call 0x417bb6
add byte [eax + 0x49], al
cmp al, 0x4f
aaa
dec ebx
add esp, 4
sub ebx, 0x45fd
pop ebx
push edx
jmp 0x417bc6
pop edx
push eax
add eax, 0x1410a
pop eax
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x417c17
push esi
push esi
add esp, 4
xor esi, 0x13cfc
pop esi
push edx
push edx
add esp, 4
add edx, 0xa966
pop edx
push esi
and esi, 0x7e0c
sub esi, 0xce60
add esi, 0x2fbd
xor esi, 0xd169
add byte [esi - 0x17], bl
add al, byte cs:[eax]
invalid
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edx
xor edx, 0x12793
pop edx
push ebx
or ebx, 0x1188
sub ebx, 0x1e37
add byte [eax], al
pop ebx
push eax
and eax, 0x14775
and eax, 0x5dfe
push ecx
and ecx, 0xefb2
jmp 0x417e53
pop ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x6869
jmp 0x417e68
pop ebx
push ecx
or ecx, 0xccc4
and ecx, 0xfa22
pop ecx
mov dword [ebp - 0xab8], 0
push ebx
push ebx
add esp, 4
sub ebx, 0x16f16
add ebx, 0x74a4
call 0x417e9e
add byte [edi + 0x4a], al
cmp al, 0x3c
dec edx
add esp, 4
pop ebx
push ebx
push ecx
add esp, 4
jmp 0x417eac
sub ebx, 0xcdfe
pop ebx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push ebx
sub ebx, 0x106e0
pop ebx
push edx
add edx, 0x17f16
jmp 0x417f1e
pop edx
push ebx
push eax
add esp, 4
sub ebx, 0x16a3
or ebx, 0xacd4
pop ebx
push edi
sub edi, 0x136b5
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push edx
push ecx
add esp, 4
add edx, 0xa7cf
and edx, 0xcb89
or edx, 0x2ac6
and edx, 0x13a89
pop edx
push edi
add edi, 0xc0ca
xor edi, 0x4b8f
sub edi, 0x13a55
pop edi
push esi
push edx
add esp, 4
or esi, 0xe5e7
pop esi
push eax
push eax
add esp, 4
call 0x418024
add byte [esi + 0x33], cl
push eax
aaa
xor al, 0x4a
dec esp
aaa
add esp, 4
jmp 0x41802f
and eax, 0x2e14
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push ebx
push ecx
add esp, 4
and ebx, 0xdb8a
sub ebx, 0x3680
sub ebx, 0xa3a4
xor ebx, 0x2666
pop ebx
push ebx
add ebx, 0x118b6
sub ebx, 0x3149
and ebx, 0x1870
pop ebx
cmp dword [ebp - 0x15d8], 0
jne 0x4180a8
mov dword [ebp - 0x31c], 0
jmp 0x418364
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push edx
push edx
add esp, 4
jmp 0x4180c6
jmp 0x4180cc
sub edx, 0x26ad
pop edx
push edx
sub edx, 0xf542
call 0x4180e8
add byte [ecx + 0x3c], al
dec ecx
dec esp
xor al, 0x44
aas
add esp, 4
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x418104
mov dword [ebp - 0x31c], 0
jmp 0x418364
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push edx
and edx, 0x38bc
add edx, 0xdad1
and edx, 0x1e3e
pop edx
push ecx
push esi
add esp, 4
or ecx, 0xc22a
or ecx, 0x27d2
add ecx, 0x927a
or ecx, 0xbef6
pop ecx
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push eax
or eax, 0x41b
or eax, 0xb782
xor eax, 0x176a
pop eax
push edi
push edi
add esp, 4
call 0x418197
add byte [ecx], bh
inc edx
inc edx
inc ebx
dec edx
dec ecx
inc ecx
dec eax
add esp, 4
and edi, 0x1ba8
pop edi
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push esi
or esi, 0x85b1
add esi, 0x1e95
sub esi, 0x73a2
pop esi
push ecx
push ebx
add esp, 4
and ecx, 0x12923
call 0x418229
add byte [eax], bh
xor al, 0x49
aaa
dec ebx
aas
xor ecx, dword [ebp - 0x7d]
les eax, [ecx + ebx*2]
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x418250
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x4182b3
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x41816f
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x41816f
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x41829d
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x4182a7
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x4182fc
push ecx
push esi
add esp, 4
xor ecx, 0x10bbc
and ecx, 0xfc9c
and ecx, 0x15bac
pop ecx
push edi
and edi, 0xc88c
or edi, 0xbff7
add edi, 0xcc04
and edi, 0x146ce
pop edi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x418364
push eax
push eax
add esp, 4
add eax, 0x11255
xor eax, 0x155f3
pop eax
push esi
push edx
add esp, 4
sub esi, 0xfe21
pop esi
push edx
push eax
add esp, 4
sub edx, 0x7953
pop edx
push edx
or edx, 0x8c72
pop edx
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x41835a
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0x31c], 0
push edx
push edx
add esp, 4
call 0x418378
add byte [edi + 0x4d], cl
dec ecx
cmp eax, 0x473d393d
dec edi
add esp, 4
jmp 0x418380
call 0x41838c
add byte [edi], dh
inc edi
xor eax, 0x833f3f39
les eax, [ecx + eax*4]