Function at 0x417d90
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x144]
mov ecx, 0x51
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x485010]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x10]
mov cl, byte [ecx + eax]
mov byte [ebp - 0x39], cl
cmp dword [ebp + 0xc], 0
je 0x417ddf
mov eax, dword [ebp + 0xc]
mov cl, byte [ebp - 0x39]
mov byte [eax], cl
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x10]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
sub ecx, 7
mov edx, dword [ebp + 8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
sub ecx, 7
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0x186a0
jbe 0x417e15
mov dword [ebp - 0x24], 0x186a0
mov byte [ebp - 0x68], 0x4c
mov byte [ebp - 0x67], 0x41
mov byte [ebp - 0x66], 0x4c
mov byte [ebp - 0x65], 0x4f
mov byte [ebp - 0x64], 0x52
mov byte [ebp - 0x63], 0x41
mov byte [ebp - 0x62], 0x4d
mov byte [ebp - 0x61], 0x4f
mov byte [ebp - 0x60], 0x53
mov byte [ebp - 0x5f], 0x2d
mov byte [ebp - 0x5e], 0x5a
mov byte [ebp - 0x5d], 0x45
mov byte [ebp - 0x5c], 0x52
mov byte [ebp - 0x5b], 0x4f
mov byte [ebp - 0x5a], 0x45
mov byte [ebp - 0x59], 0x4f
mov byte [ebp - 0x58], 0x59
mov byte [ebp - 0x57], 0x50
mov byte [ebp - 0x56], 0x4e
mov byte [ebp - 0x55], 0x4b
mov byte [ebp - 0x54], 0x2d
mov byte [ebp - 0x53], 0x4c
mov byte [ebp - 0x52], 0x5a
mov byte [ebp - 0x51], 0x57
mov byte [ebp - 0x50], 0x4f
mov byte [ebp - 0x4f], 0x52
mov byte [ebp - 0x4e], 0x4c
mov byte [ebp - 0x4d], 0x44
mov byte [ebp - 0x4c], 0x2d
mov byte [ebp - 0x4b], 0x32
mov byte [ebp - 0x4a], 0x30
mov byte [ebp - 0x49], 0x31
mov byte [ebp - 0x48], 0x36
xor eax, eax
mov word [ebp - 0x47], ax
mov dword [ebp - 0x74], 0
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x30], 0
jmp 0x417ebc
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x24]
jae 0x417f52
cmp dword [ebp - 0x74], 0x20
jne 0x417ed2
mov byte [ebp - 0x7d], 1
cmp dword [ebp - 0x74], 0
jne 0x417edc
mov byte [ebp - 0x7d], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ecx + edx + 7]
mov ecx, dword [ebp - 0x74]
movsx edx, byte [ebp + ecx - 0x68]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x30]
xor edx, ecx
xor eax, edx
mov edx, dword [ebp - 0xc]
mov ecx, dword [edx + 0x10]
mov edx, dword [ebp - 0x30]
mov byte [ecx + edx + 7], al
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp - 0x74]
movsx eax, byte [ebp + edx - 0x68]
xor eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
movsx ecx, byte [ecx + edx + 7]
sub ecx, eax
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x10]
mov edx, dword [ebp - 0x30]
mov byte [eax + edx + 7], cl
movzx eax, byte [ebp - 0x7d]
test eax, eax
jne 0x417f44
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
jmp 0x417f4d
mov eax, dword [ebp - 0x74]
sub eax, 1
mov dword [ebp - 0x74], eax
jmp 0x417eb3
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
add eax, 7
push edx
mov ecx, ebp
push eax
lea edx, [0x417f80]
call fcn.00418a20
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00419b10
mov esp, ebp
pop ebp
ret 8