Function at 0x417b20
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x138
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x138]
mov ecx, 0x4e
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x485010]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [eax + 0x18]
jbe 0x417b62
mov eax, 0xffffff7c
jmp 0x417d3e
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax + 0xc]
cmp ecx, 2
je 0x417b78
mov eax, 0xffffff87
jmp 0x417d3e
mov eax, dword [ebp - 0xc]
movsx ecx, byte [eax + 0xc]
test ecx, ecx
jne 0x417b8d
mov eax, 0xffffff7d
jmp 0x417d3e
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x14]
mov dl, byte [ebp + 0x10]
mov byte [ecx + eax], dl
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x14]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp + 0xc]
add eax, 7
mov ecx, dword [ebp - 0x18]
mov word [ecx], ax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x14]
add eax, 7
push eax
call fcn.00418220
add esp, 0xc
mov byte [ebp - 0x5c], 0x4c
mov byte [ebp - 0x5b], 0x41
mov byte [ebp - 0x5a], 0x4c
mov byte [ebp - 0x59], 0x4f
mov byte [ebp - 0x58], 0x52
mov byte [ebp - 0x57], 0x41
mov byte [ebp - 0x56], 0x4d
mov byte [ebp - 0x55], 0x4f
mov byte [ebp - 0x54], 0x53
mov byte [ebp - 0x53], 0x2d
mov byte [ebp - 0x52], 0x5a
mov byte [ebp - 0x51], 0x45
mov byte [ebp - 0x50], 0x52
mov byte [ebp - 0x4f], 0x4f
mov byte [ebp - 0x4e], 0x45
mov byte [ebp - 0x4d], 0x4f
mov byte [ebp - 0x4c], 0x59
mov byte [ebp - 0x4b], 0x50
mov byte [ebp - 0x4a], 0x4e
mov byte [ebp - 0x49], 0x4b
mov byte [ebp - 0x48], 0x2d
mov byte [ebp - 0x47], 0x4c
mov byte [ebp - 0x46], 0x5a
mov byte [ebp - 0x45], 0x57
mov byte [ebp - 0x44], 0x4f
mov byte [ebp - 0x43], 0x52
mov byte [ebp - 0x42], 0x4c
mov byte [ebp - 0x41], 0x44
mov byte [ebp - 0x40], 0x2d
mov byte [ebp - 0x3f], 0x32
mov byte [ebp - 0x3e], 0x30
mov byte [ebp - 0x3d], 0x31
mov byte [ebp - 0x3c], 0x36
xor eax, eax
mov word [ebp - 0x3b], ax
mov dword [ebp - 0x68], 0
mov byte [ebp - 0x71], 0
mov dword [ebp - 0x24], 0
jmp 0x417c7a
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp + 0xc]
jae 0x417d10
cmp dword [ebp - 0x68], 0x20
jne 0x417c90
mov byte [ebp - 0x71], 1
cmp dword [ebp - 0x68], 0
jne 0x417c9a
mov byte [ebp - 0x71], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0x68]
movsx eax, byte [ebp + edx - 0x5c]
xor eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
movsx ecx, byte [ecx + edx + 7]
add ecx, eax
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x14]
mov edx, dword [ebp - 0x24]
mov byte [eax + edx + 7], cl
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0x24]
movsx eax, byte [ecx + edx + 7]
mov ecx, dword [ebp - 0x68]
movsx edx, byte [ebp + ecx - 0x5c]
mov ecx, dword [ebp + 0xc]
sub ecx, dword [ebp - 0x24]
xor edx, ecx
xor eax, edx
mov edx, dword [ebp - 0xc]
mov ecx, dword [edx + 0x14]
mov edx, dword [ebp - 0x24]
mov byte [ecx + edx + 7], al
movzx eax, byte [ebp - 0x71]
test eax, eax
jne 0x417d02
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
jmp 0x417d0b
mov eax, dword [ebp - 0x68]
sub eax, 1
mov dword [ebp - 0x68], eax
jmp 0x417c71
push 1
mov eax, dword [ebp + 0xc]
add eax, 7
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + 0x14]
push edx
mov ecx, dword [ebp - 0xc]
call fcn.00416ec0
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jge 0x417d38
mov eax, dword [ebp - 0x30]
jmp 0x417d3e
mov eax, dword [ebp - 0x30]
sub eax, 7
push edx
mov ecx, ebp
push eax
lea edx, [0x417d70]
call fcn.00418a20
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00419b10
add esp, 0x138
cmp ebp, esp
call fcn.00418a80
mov esp, ebp
pop ebp
ret 0xc