Function at 0x4ed873
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
add eax, 0x177be
add byte [ecx + 0xaefec0], al
add byte [ecx + 0x142a5e8], al
add byte [eax + 0x51], bl
and ecx, 0x610f
call 0x4ed58a
add byte [eax + 0x3b], cl
aaa
xor al, 0x46
cmp byte [ebx], dh
inc edx
inc esi
add esp, 4
pop ecx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push ebx
and ebx, 0x6487
add ebx, 0x64e6
add byte fs:[eax], al
pop ebx
push ecx
and ecx, 0x5560
add byte [ecx + 0x3c14e1], al
add byte [ecx + 0x52], bl
jmp 0x4ed5c2
sub edx, 0x147f9
or edx, 0x51d7
pop edx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x4ed5ff
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4ed8f0
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x4ed627
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4ed8f0
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x4ed659
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x4ed8f0
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x4ed67e
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x4ed8f0
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4ed6d8
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4ed8e4
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x4ed748
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x4ed7fa
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x4ed7fa
push eax
add eax, 0xc18d
add eax, 0x17e25
and eax, 0x1db6
add eax, 0x14131
pop eax
push esi
push ebx
add esp, 4
jmp 0x4ed79a
add esi, 0x4e80
xor esi, 0x17651
pop esi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x4ed7ec
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x4ed7f3
jmp 0x4ed739
jmp 0x4ed7fa
push ecx
push edi
add esp, 4
add ecx, 0xd1c
pop ecx
push edi
push edx
add esp, 4
sub edi, 0x15cd8
jmp 0x4ed819
and edi, 0x1831d
pop edi
push eax
push ebx
add esp, 4
sub eax, 0x22eb
pop eax
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x4ed859
mov dword [ebp - 0xc40], 0
jmp 0x4ed8c8
push esi
jmp 0x4ed85f
pop esi
push esi
push edi
add esp, 4
call 0x4ed873
add byte [esi + 0x3a], cl
inc edx
cmp al, 0x4a
cmp dword [edx + ecx*2 - 0x7d], eax
les eax, [ecx + eax*4]
into
and eax, dword [eax + eax]
or esi, 0x5bca
pop esi
push ecx
xor ecx, 0x16f69
pop ecx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4ed8be
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4ed8c8
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4ed8df
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x4ed8f0
jmp 0x4ed6c9
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edi
xor edi, 0x1347d
sub edi, 0x7a03
and edi, 0xcc3d
jmp 0x4ed917
pop edi
push eax
push eax
add esp, 4
xor eax, 0xd1ff
pop eax
push edx
jmp 0x4ed92d
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push ecx
and ecx, 0x101a9
pop ecx
push ebx
push edx
add esp, 4
and ebx, 0x1310b
jmp 0x4ed955
and ebx, 0xbc5b
add ebx, 0x6f7e
pop ebx
push edi
add edi, 0x7ea5
jmp 0x4ed96e
pop edi
cmp dword [ebp - 0x3cc], 0
je 0x4ed981
cmp dword [ebp - 0xa5c], 0
jne 0x4ed9c7
push ecx
push eax
add esp, 4
or ecx, 0xb448
pop ecx
push edi
sub edi, 0x14561
add edi, 0x107e
xor edi, 0x159b1
jmp 0x4ed9a6
pop edi
push ebx
push eax
add esp, 4
or ebx, 0x1045a
pop ebx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edi
or edi, 0x12c1e
pop edi
push ebx
push ecx
add esp, 4
sub ebx, 0xcb9e
jmp 0x4ed9ec
pop ebx
push edi
push esi
add esp, 4
jmp 0x4ed9fa
pop edi
push edi
xor edi, 0x3b91
pop edi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push eax
add eax, 0x135ed
or eax, 0xcd77
sub eax, 0x2426
pop eax
push eax
push eax
add esp, 4
xor eax, 0x5be2
sub eax, 0x1df7
pop eax
push esi
push ebx
add esp, 4
and esi, 0x12ab5
pop esi
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push ecx
and ecx, 0xe5d
jmp 0x4edad7
xor ecx, 0x1e8d
pop ecx
push ecx
call 0x4edaeb
add byte [ecx + 0x42], al
inc ecx
inc edx
xor eax, 0x83363f3f
les eax, [ecx + eax*4]
loope 0x4edb2d
add byte [bx + si], al
or ecx, 0x8bca
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ebx
push eax
add esp, 4
jmp 0x4edb2f
dec eax
inc edi
sub ebx, 0x4437
or ebx, 0xebc7
or ebx, 0x6833
pop ebx
push ebx
call 0x4edb50
add byte [esi], bh
xor eax, 0x4b334e36
inc ebp
add esp, 4
pop ebx
cmp dword [ebp - 0x150c], 0
jne 0x4edb6c
mov dword [ebp - 0x2a8], 0
jmp 0x4ede13
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
or ecx, 0x2d4c
sub ecx, 0x1e2f
sub ecx, 0xdecc
pop ecx
push ecx
push edx
add esp, 4
and ecx, 0x9305
and ecx, 0x11a5a
add ecx, 0x1f9e
xor ecx, 0x1535f
pop ecx
cmp dword [ebp - 0xc4c], 0
jne 0x4edbc8
mov dword [ebp - 0x2a8], 0
jmp 0x4ede13
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push esi
push esi
add esp, 4
sub esi, 0x5206
pop esi
push ebx
xor ebx, 0x3bb6
or ebx, 0x11dfa
pop ebx
push edi
push edx
add esp, 4
xor edi, 0x1812b
xor edi, 0xd436
xor edi, 0x9c2a
pop edi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
push ecx
add esp, 4
add eax, 0x120d4
and eax, 0xaa3b
sub eax, 0x96bc
pop eax
push eax
jmp 0x4edc4f
or eax, 0x16c6a
jmp 0x4edc5b
or eax, 0x44a5
pop eax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edx
push edx
add esp, 4
add edx, 0x10c42
pop edx
push ecx
push ebx
add esp, 4
or ecx, 0x82da
or ecx, 0x100c1
and ecx, 0x8720
pop ecx
push ecx
jmp 0x4edce4
or ecx, 0x5821
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4edd08
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x4edd62
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x4edc30
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x4edc30
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x4edd4c
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x4edd56
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x4eddab
push eax
push edx
add esp, 4
call 0x4edd7f
add byte [edi], dh
cmp dword [ebp + 0x39], ecx
dec eax
cmp al, byte [eax + 0x37]
inc esp
add esp, 4
jmp 0x4edd8b
pop eax
push edi
call 0x4edd99
add byte [eax + 0x3f], al
xor al, 0x50
xor eax, 0x4c48332
pop edi
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x4ede13
push edx
push ecx
add esp, 4
or edx, 0x125ca
pop edx
push ecx
or ecx, 0x12668
xor ecx, 0x10409
and ecx, 0x173a9
call 0x4eddd9
add byte [edi + 0x32], al
push eax
dec esi
xor edi, dword [ecx]
inc edi
dec edx
add esp, 4
pop ecx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x4ede09
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x4edbd4
mov dword [ebp - 0x2a8], 0
push esi
sub esi, 0x13c80
pop esi
push esi
jmp 0x4ede24
xor esi, 0xc33
pop esi
push edi
or edi, 0xdbf0
and edi, 0xcf7b
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0xb620
pop ebx
cmp dword [ebp - 0x2a8], 0
jne 0x4ee74a
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ebx
push esi
add esp, 4
sub ebx, 0x5ecc
sub ebx, 0x148cb
sub ebx, 0xcad2
pop ebx
push edx
add edx, 0x11596
and edx, 0x599b
jmp 0x4edf16
xor edx, 0x2c81
pop edx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push esi
and esi, 0x181a8
call 0x4edfb6
add byte [eax + 0x3f], al
dec esi
cmp eax, 0x3f3c4934
inc esp
add esp, 4
add esi, 0x79c0
pop esi
push ebx
push ecx
add esp, 4
add ebx, 0xa1f
or ebx, 0x1399c
pop ebx
cmp dword [ebp - 0x1518], 0
jne 0x4edfea
mov dword [ebp - 0x710], 0
jmp 0x4ee291
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push eax
push esi
add esp, 4
sub eax, 0xbb11
xor eax, 0x18206
xor eax, 0x1ab3
sub eax, 0xe107
pop eax
push edi
push eax
add esp, 4
add edi, 0x6c6d
pop edi
push ebx
sub ebx, 0x15d46
pop ebx
cmp dword [ebp - 0xc58], 0
jne 0x4ee046
mov dword [ebp - 0x710], 0
jmp 0x4ee291
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push eax
push edx
add esp, 4
xor eax, 0xd8a6
or eax, 0x872e
add eax, 0x6f9e
xor eax, 0xaa4b
pop eax
push edx
and edx, 0x456f
add edx, 0x133da
add edx, 0x12b3
pop edx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
or eax, 0x132ca
or eax, 0xe9cb
and eax, 0xe3b4
and eax, 0x301e
pop eax
push eax
push esi
add esp, 4
xor eax, 0x12b58
and eax, 0xe1ac
xor eax, 0xa56a
pop eax
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ebx
push ecx
add esp, 4
call 0x4ee148
add byte [eax + 0x50], dl
xor eax, 0x834f4248
les eax, [ecx + eax*4]
ret
push edi
push edi
add esp, 4
and edi, 0x5fe7
or edi, 0xf54d
or edi, 0xd963
pop edi
push ecx
xor ecx, 0x53f5
and ecx, 0x124c8
jmp 0x4ee2bc
or ecx, 0x17d47
pop ecx
cmp dword [ebp - 0x710], 0
jne 0x4ee30d
push eax
push ebx
add esp, 4
and eax, 0xaab3
xor eax, 0x353b
add eax, 0x2116
pop eax
push ecx
add ecx, 0x4f1a
sub ecx, 0x2fd5
pop ecx
push edi
push edx
invalid