Function at 0x412ab2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
call 0x412a50
add byte [edx], dh
inc ebx
xor al, 0x42
cmp ecx, dword [ecx + 0x43]
add esp, 4
pop eax
push ebx
push eax
add esp, 4
or ebx, 0x3ef3
add ebx, 0x32d6
pop ebx
push ecx
jmp 0x412a6f
pop ecx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
jmp 0x412aa2
call 0x412ab2
add byte [edi], bh
dec ecx
xor cl, byte [esi + 0x4d]
inc esp
aas
xor al, 0x40
add esp, 4
jmp 0x412aba
xor ebx, 0x13fce
pop ebx
push edi
push ebx
add esp, 4
jmp 0x412acc
pop edi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push esi
push ebx
add esp, 4
xor esi, 0x10b82
pop esi
push esi
add esi, 0x4d8c
sub esi, 0x2880
add esi, 0x79a0
and esi, 0x1217d
pop esi
push edi
push edi
add esp, 4
add edi, 0xf340
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
push edx
add esp, 4
or esi, 0x177b6
pop esi
push eax
jmp 0x412ba2
pop eax
push edi
jmp 0x412bac
pop edi
push ebx
xor ebx, 0x183ea
or ebx, 0xf48d
sub ebx, 0x2f80
pop ebx
cmp dword [ebp - 0x1614], 0
jne 0x412bd9
mov dword [ebp - 0x2fc], 0
jmp 0x412e80
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push edi
and edi, 0x3715
pop edi
push ecx
push ecx
add esp, 4
and ecx, 0x12579
or ecx, 0x101dc
or ecx, 0xbc1f
call 0x412c19
add byte [eax + 0x38], al
push eax
cmp byte [edx], dh
cmp dword [ebx + 0x3b], ecx
cmp eax, dword [ebx - 0x7ca6fb3c]
mov ebp, 0xfffff33c
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2fc], 0
jmp 0x412e80
push ecx
call 0x412e90
add byte [esi], bh
xor esi, dword [0x3e394842]
dec eax
xor al, 0x83
les eax, [ebx + ebp*8]
add al, 0x3e
dec ecx
dec ecx
inc ebx
xor ecx, 0x6d4b
sub ecx, 0xb104
pop ecx
push esi
push edi
add esp, 4
xor esi, 0x60fe
pop esi
cmp dword [ebp - 0x2fc], 0
jne 0x4137b7
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push ecx
push esi
add esp, 4
add ecx, 0xb3b3
sub ecx, 0xbc44
jmp 0x412f72
pop ecx
push eax
push ebx
add esp, 4
jmp 0x412f7d
xor eax, 0x2f9c
xor eax, 0xd
pop eax
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push ebx
push edx
add esp, 4
xor ebx, 0xfa70
jmp 0x41301e
pop ebx
push ebx
sub ebx, 0x81be
pop ebx
push ecx
push esi
add esp, 4
jmp 0x413032
add ecx, 0x13f0c
or ecx, 0xc3c2
pop ecx
cmp dword [ebp - 0x1620], 0
jne 0x413057
mov dword [ebp - 0x774], 0
jmp 0x4132fe
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push eax
call 0x41307a
add byte [ecx*2 + 0x4b494747], bh
cmp eax, 0xc4835039
add al, 0xeb
add edi, dword [edi]
dec ecx
push eax
pop eax
push esi
push edi
add esp, 4
or esi, 0x75cf
sub esi, 0x12cb7
or esi, 0xd5c1
pop esi
cmp dword [ebp - 0xcd0], 0
jne 0x4130b3
mov dword [ebp - 0x774], 0
jmp 0x4132fe
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push edx
or edx, 0xd82a
pop edx
push esi
push edx
add esp, 4
sub esi, 0x5ec3
xor esi, 0xec64
xor esi, 0xad64
call 0x4130ed
add byte [ebx], bh
aaa
dec esi
dec edi
xor dh, byte [esi]
dec ebp
cmp al, byte [ebx - 0x72a1fb3c]
test dword [eax - 0x18], esi
invalid
push eax
push esi
add esp, 4
call 0x413310
add byte [ebx + 0x48], cl
cmp eax, 0x37483944
add esp, 4
pop eax
push edx
add edx, 0x57e0
xor edx, 0x168c5
pop edx
push edx
and edx, 0x55a1
or edx, 0x1a66
pop edx
cmp dword [ebp - 0x774], 0
jne 0x41337a
push edx
xor edx, 0x10fdc
and edx, 0x1106a
pop edx
push edi
xor edi, 0x7e41
pop edi
push esi
push edi
add esp, 4
jmp 0x413359
pop esi
push esi
jmp 0x413364
sub esi, 0x894
pop esi
mov dword [ebp - 0xab4], 0
inc dword [eax]
add byte [eax], al
add cl, ch
sub byte [ebx], cl
add byte [eax], al
push edx
sub edx, 0x5beb
pop edx
push esi
jmp 0x41338b
or esi, 0x120fe
or esi, 0x22b8
pop esi
push esi
sub esi, 0x14e6f
and esi, 0x16f6c
xor esi, 0xdd
pop esi
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
inc dword [ebx - 0x166b43]
inc dword [eax]
jne 0x4133eb
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x4136dc
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x413413
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x4136dc
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x413445
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x4136dc
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x41346a
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x4136dc
mov eax, dword [ebp - 0x778]