Function at 0x416671
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
call 0x416671
add byte [edi + 0x4b], cl
dec esp
dec edx
inc edi
xor eax, 0x83363833
les eax, [ebx + ebx*2]
mov byte [ebp - 0x598], 0x56
mov byte [ebp - 0x597], 0x69
mov byte [ebp - 0x596], 0x72
mov byte [ebp - 0x595], 0x74
mov byte [ebp - 0x594], 0x75
mov byte [ebp - 0x593], 0x61
mov byte [ebp - 0x592], 0x6c
mov byte [ebp - 0x591], 0x50
mov byte [ebp - 0x590], 0x72
mov byte [ebp - 0x58f], 0x6f
mov byte [ebp - 0x58e], 0x74
mov byte [ebp - 0x58d], 0x65
mov byte [ebp - 0x58c], 0x63
mov byte [ebp - 0x58b], 0x74
mov byte [ebp - 0x58a], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0xe68], ecx
mov edx, dword [ebp - 0xe68]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe6c], eax
mov ecx, dword [ebp - 0xe6c]
mov dword [ebp - 0xb90], ecx
push esi
push esi
add esp, 4
add esi, 0x113cb
call 0x41671e
add byte [edi], dh
push eax
dec esp
inc edx
xor eax, 0xc4835048
add al, 0x5e
push esi
xor esi, 0x8cb9
and esi, 0xec89
pop esi
push ecx
or ecx, 0x1630e
pop ecx
cmp dword [ebp - 0xb90], 0
jne 0x416750
mov dword [ebp - 0x18c], 0
jmp 0x4169f7
mov edx, dword [ebp - 0xb90]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6dc], ecx
push edi
push ecx
add esp, 4
or edi, 0xabfa
or edi, 0xf20b
xor edi, 0x85b2
sub edi, 0xb364
pop edi
push edi
xor edi, 0x7f7d
pop edi
push edx
push edi
add esp, 4
jmp 0x416793
pop edx
cmp dword [ebp - 0x6dc], 0
jne 0x4167ac
mov dword [ebp - 0x18c], 0
jmp 0x4169f7
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x24c], edx
push eax
push esi
add esp, 4
or eax, 0x13d0b
and eax, 0x5601
sub eax, 0x8dfa
pop eax
push esi
push edi
add esp, 4
or esi, 0xa251
or esi, 0xffc1
pop esi
push ecx
xor ecx, 0xee67
pop ecx
lea eax, [ebp - 0xc50]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x6d4], edx
xor eax, eax
mov word [ebp - 0x120], ax
xor ecx, ecx
mov word [ebp - 0x34], cx
push edx
and edx, 0xf80d
jmp 0x416821
add edx, 0x15104
pop edx
push ebx
push ebx
add esp, 4
or ebx, 0x12580
pop ebx
push edx
push edi
add esp, 4
add edx, 0x4f5d
xor edx, 0x8e1f
pop edx
mov edx, dword [ebp - 0x6d4]
mov ax, word [edx]
mov word [ebp - 0x88e], ax
mov ecx, dword [ebp - 0x6d4]
add ecx, 2
mov dword [ebp - 0x6d4], ecx
mov dx, word [ebp - 0x88e]
mov word [ebp - 0x120], dx
mov eax, dword [ebp - 0x6d8]
mov cx, word [eax]
mov word [ebp - 0x890], cx
mov edx, dword [ebp - 0x6d8]
add edx, 2
mov dword [ebp - 0x6d8], edx
mov ax, word [ebp - 0x890]
mov word [ebp - 0x34], ax
push esi
push ecx
add esp, 4
call 0x4168b2
add byte [ebx], dh
inc esi
xor al, 0x35
push eax
inc edx
dec esi
dec ecx
inc edx
dec ebp
add esp, 4
and esi, 0x10dfa
jmp 0x4168c0
pop esi
push esi
sub esi, 0x1727b
and esi, 0xbd5f
pop esi
movzx ecx, word [ebp - 0x34]
test ecx, ecx
jne 0x4168ec
movzx edx, word [ebp - 0x120]
movzx eax, word [ebp - 0x34]
sub edx, eax
mov dword [ebp - 0xb98], edx
jmp 0x416946
movzx ecx, word [ebp - 0x120]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
je 0x416814
movzx eax, word [ebp - 0x120]
xor eax, 0x20
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x416814
movzx edx, word [ebp - 0x120]
movzx eax, word [ebp - 0x34]
cmp edx, eax
jge 0x416930
mov dword [ebp - 0xb94], 0xffffffff
jmp 0x41693a
mov dword [ebp - 0xb94], 1
mov ecx, dword [ebp - 0xb94]
mov dword [ebp - 0xb98], ecx
cmp dword [ebp - 0xb98], 0
jne 0x41698f
push ebx
push ecx
add esp, 4
add ebx, 0x76f1
or ebx, 0xde2b
jmp 0x416968
xor ebx, 0x1da5
pop ebx
push ecx
push ebx
add esp, 4
xor ecx, 0x5de8
sub ecx, 0x5128
pop ecx
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x18c], edx
jmp 0x4169f7
push edx
push ebx
add esp, 4
sub edx, 0x7a92
or edx, 0xbdb0
add edx, 0xbef2
pop edx
push esi
xor esi, 0x39be
jmp 0x4169b4
add esi, 0x17bbe
jmp 0x4169c0
pop esi
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax]
mov dword [ebp - 0x24c], ecx
mov edx, dword [ebp - 0x24c]
cmp edx, dword [ebp - 0x6dc]
je 0x4169ed
mov eax, dword [ebp - 0x24c]
cmp dword [eax + 0x30], 0
jne 0x4167b8
mov dword [ebp - 0x18c], 0
push esi
add esi, 0x11d3e
xor esi, 0x12d4c
and esi, 0x13576
or esi, 0x49cd
pop esi
push edi
push edi
add esp, 4
or edi, 0x5d5a
xor edi, 0x171d7
and edi, 0x17b85
pop edi
cmp dword [ebp - 0x18c], 0
jne 0x4172fc
mov ecx, 0x6b
mov word [ebp - 0xcc4], cx
mov edx, 0x65
mov word [ebp - 0xcc2], dx
mov eax, 0x72
mov word [ebp - 0xcc0], ax
mov ecx, 0x6e
mov word [ebp - 0xcbe], cx
mov edx, 0x65
mov word [ebp - 0xcbc], dx
mov eax, 0x6c
mov word [ebp - 0xcba], ax
mov ecx, 0x33
mov word [ebp - 0xcb8], cx
mov edx, 0x32
mov word [ebp - 0xcb6], dx
mov eax, 0x2e
mov word [ebp - 0xcb4], ax
mov ecx, 0x64
mov word [ebp - 0xcb2], cx
mov edx, 0x6c
mov word [ebp - 0xcb0], dx
mov eax, 0x6c
mov word [ebp - 0xcae], ax
xor ecx, ecx
mov word [ebp - 0xcac], cx
push eax
push esi
add esp, 4
and eax, 0xdcd8
call 0x416ae9
add byte [esi + esi], bh
inc edx
dec esi
dec ebp
cmp byte [0xc4834944], bh
add al, 0x58
push edx
push ebx
add esp, 4
xor edx, 0x141cf
jmp 0x416b00
pop edx
mov byte [ebp - 0x4d0], 0x4c
mov byte [ebp - 0x4cf], 0x6f
mov byte [ebp - 0x4ce], 0x61
mov byte [ebp - 0x4cd], 0x64
mov byte [ebp - 0x4cc], 0x4c
mov byte [ebp - 0x4cb], 0x69
mov byte [ebp - 0x4ca], 0x62
mov byte [ebp - 0x4c9], 0x72
mov byte [ebp - 0x4c8], 0x61
mov byte [ebp - 0x4c7], 0x72
mov byte [ebp - 0x4c6], 0x79
mov byte [ebp - 0x4c5], 0x57
mov byte [ebp - 0x4c4], 0
mov edx, dword fs:[0x18]
mov dword [ebp - 0xe70], edx
mov eax, dword [ebp - 0xe70]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xe74], ecx
mov edx, dword [ebp - 0xe74]
mov dword [ebp - 0xb9c], edx
push ebx
or ebx, 0x12d28
xor ebx, 0x8f45
xor ebx, 0x12537
add ebx, 0x1147d
pop ebx
push eax
or eax, 0xee0f
call 0x416bb2
add byte [esi], bh
inc ebp
inc ecx
dec edx
xor al, byte [edx + 0x3c]
add esp, 4
pop eax
cmp dword [ebp - 0xb9c], 0
jne 0x416bce
mov dword [ebp - 0x3f0], 0
jmp 0x416e75
mov eax, dword [ebp - 0xb9c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x6e8], edx
push ebx
push edi
add esp, 4
call 0x416bf3
add byte [edx], bh
inc esp
xor eax, 0x3b394c42
cmp dword [ebx + 0x505b04c4], eax
call 0x416c08
add byte [eax], bh
cmp edi, dword [edi]
inc esp
dec ebp
inc ecx
inc ebp
inc ecx
aas
dec eax
add esp, 4
sub eax, 0x11a27
pop eax
cmp dword [ebp - 0x6e8], 0
jne 0x416c2a
mov dword [ebp - 0x3f0], 0
jmp 0x416e75
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x248], eax