Function at 0x411540
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push esi
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ebx
push edi
add esp, 4
xor ebx, 0x56d6
add ebx, 0xf094
and ebx, 0x7b7f
pop ebx
push edi
add edi, 0x9a0e
pop edi
push ebx
push ecx
add esp, 4
or ebx, 0xf13
add ebx, 0x16e84
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push ebx
push ebx
add esp, 4
or ebx, 0x14fa9
pop ebx
push edx
add edx, 0x41f7
pop edx
push eax
push edx
add esp, 4
or eax, 0xa7eb
and eax, 0x6b36
add eax, 0x8f1
jmp 0x41162d
pop eax
cmp dword [ebp - 0x1614], 0
jne 0x411646
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push esi
push eax
add esp, 4
sub esi, 0xc970
jmp 0x411668
xor esi, 0xe242
pop esi
push edi
add edi, 0x169c7
call 0x411686
add byte [ebp + 0x44], cl
xor bh, byte [ecx]
dec ecx
inc esi
inc ebx
dec ebx
cmp byte [edx - 0x7d], cl
les eax, [edi + ebx*2]
cmp dword [ebp - 0xcc4], 0
jne 0x4116a2
mov dword [ebp - 0x2fc], 0
jmp 0x4118ed
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edi
call 0x4116bb
add byte [ebx], dh
dec esi
xor eax, 0x83453348
les eax, [edi + ebx*2]
push edx
push eax
add esp, 4
and edx, 0x7d22
or edx, 0xd3c3
call 0x4116dc
add byte [edi + 0x42], cl
dec edx
inc edx
inc ecx
inc eax
add esp, 4
pop edx
push esi
push ecx
add esp, 4
or esi, 0x122e3
pop esi
push eax
or eax, 0xf125
sub eax, 0x6663
add byte [eax], al
add eax, 0x1616a
pop eax
push edi
push ecx
add esp, 4
xor edi, 0x15aef
and edi, 0x7c29
pop edi
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push edi
call 0x4117a1
add byte [ebx], dh
xor eax, 0x34453a4f
push eax
add esp, 4
add edi, 0x1486a
or edi, 0x28ac
add edi, 0x172e7
pop edi
push esi
or esi, 0x56ec
sub esi, 0x2378
pop esi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4117e2
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x41183c
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x41170a
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x41170a
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x411826
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x411830
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x411885
push ecx
and ecx, 0x11ac
add ecx, 0x102b7
call 0x411861
add byte [edi + 0x36], cl
xor eax, 0x49423b48
cmp dword [eax - 0x7d], edx
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [edx + 0x4b], al
dec ebp
aaa
dec ebx
dec esi
inc edx
inc esi
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x4118ed
push edi
call 0x411896
add byte [esi + esi], bh
xor eax, 0x4f454f50
aaa
xor bh, byte [0x5f04c483]
push esi
push ebx
add esp, 4
add esi, 0xbfec
add esi, 0xd004
sub esi, 0x11dca
jmp 0x4118b6
pop esi
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x4118e3
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x4116ae
mov dword [ebp - 0x2fc], 0
push edx
push ecx
add esp, 4
call 0x411901
add byte [esi + 0x39], al
xor al, 0x3c
cmp edi, dword [esi]
dec edx
dec esp
dec ecx
add esp, 4
pop edx
push eax
sub eax, 0x15e45
xor eax, 0xa192
or eax, 0x17983
jmp 0x41191e
pop eax
cmp dword [ebp - 0x2fc], 0
jne 0x412224
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push esi
sub esi, 0x3b0
call 0x4119d9
add byte [eax + 0x45], al
inc ecx
dec ebp
dec esi
cmp byte [ebx + eax*4 - 0x3c], al
add al, 0x81
out 0xc7, al
ret
push ebx
push esi
add esp, 4
sub ebx, 0x14615
sub ebx, 0x5ddf
pop ebx
push eax
push eax
add esp, 4
sub eax, 0x1364e
and eax, 0x4b76
pop eax
push edi
or edi, 0xe396
add edi, 0x154d7
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x19bc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov dword [ebp - 0x167c], ecx
push edi
push edx
add esp, 4
or edi, 0x4f1e
and edi, 0x2821
pop edi
push esi
and esi, 0x4c08
sub esi, 0x178fe
xor esi, 0x13a59
pop esi
push eax
push edi
add esp, 4
or eax, 0x17cfc
pop eax
cmp dword [ebp - 0x167c], 0
jne 0x4122c8
mov dword [ebp - 0x2fc], 0
jmp 0x41256f
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push eax
and eax, 0x101f2
or eax, 0xb237
add eax, 0xccc1
sub eax, 0x15f97
pop eax
push ecx
push edx
add esp, 4
or ecx, 0xc5ff
or ecx, 0xd5f7
or ecx, 0x6f96
pop ecx
cmp dword [ebp - 0xce0], 0
jne 0x412324
mov dword [ebp - 0x2fc], 0
jmp 0x41256f
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx