Function at 0x413df0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push esi
push edi
mov edi, dword [ebp + 0x10]
add ecx, eax
mov eax, edi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], 0x800
add byte [ecx + 0x508df47d], cl
invalid
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x413dbb
mov esi, dword [ebp + 8]
sub eax, edx
sar eax, 1
lea edx, [eax + eax + 2]
xor eax, eax
mov dword [ebp - 0x10], edx
xor edx, edx
mov word [ebp - 0x2c], dx
mov edx, dword [esi + 0xa04]
xor ecx, ecx
push 0x400
add byte [edx - 0x39], dl
inc ebp
ror byte [0x89000a00], 1
invalid
mov dword [ebp - 0x2a], eax
mov dword [ebp - 0x26], eax
mov dword [ebp - 0x22], eax
inc ebp
fimul word [ecx - 0x76991dbb]
inc ebp
invalid
mov dword [ebp - 0x78], 0x720055
mov dword [ebp - 0x74], 0x3a006c
mov dword [ebp - 0x70], 9
mov dword [ebp - 0x6c], eax
xchg esp, eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x48], 0x730055
mov dword [ebp - 0x44], 0x720065
mov dword [ebp - 0x40], 0x9003a
mov word [ebp - 0x3c], ax
mov dword [ebp - 0x3a], eax
mov dword [ebp - 0x36], eax
mov word [ebp - 0x32], ax
mov dword [ebp - 0x60], 0x610050
mov dword [ebp - 0x5c], 0x730073
mov dword [ebp - 0x58], 0x9003a
mov word [ebp - 0x54], cx
mov dword [ebp - 0x52], eax
mov dword [ebp - 0x4e], eax
mov word [ebp - 0x4a], ax
mov dword [esi + 0xa08], 4
call fcn.0041c8e6
mov ecx, dword [esi + 0xa04]
push 6
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.0041c8b6
mov eax, dword [esi + 0xa04]
push 0
lea edx, [ebp - 0x78]
push edx
push eax
call fcn.0041cd16
lea ecx, [ebp - 0x78]
push ecx
call fcn.0041cba6
mov edx, dword [esi + 0xa04]
push 0
add eax, eax
add dword [esi + 0xa08], eax
push edi
push edx
call fcn.0041cd16
push edi
call fcn.0041cba6
mov ecx, dword [esi + 0xa04]
add eax, eax
add dword [esi + 0xa08], eax
push 0
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.0041cd16
lea edx, [ebp - 0x30]
add esp, 0x40
push edx
call fcn.0041cba6
add eax, eax
add esp, 4
add dword [esi + 0xa08], eax
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp + 0x14]
push 0
push 0
push 0
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [eax + 0x18]
push 0
lea edx, [ebp - 0x18]
push edx
call ecx
test eax, eax
je 0x41406c
mov ecx, dword [ebp - 4]
mov edi, dword [ecx]
mov edx, dword [ecx + 8]
mov eax, dword [ecx + 4]
add edx, edi
add edx, eax
cmp dword [ebp - 8], edx
jb 0x414054
mov edx, dword [ecx + 0x14]
add eax, edi
shr edx, 1
add eax, ecx
push ebx
lea ebx, [ecx + 0x24]
mov dword [ebp + 0xc], eax
test edx, edx
jle 0x414053
mov dword [ebp + 0x10], edx
jmp 0x413f4b
mov eax, dword [ebp + 0xc]
mov edi, dword [ebx]
mov ecx, dword [esi + 0xa04]
add edi, eax
push 0
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.0041cd16
lea edx, [ebp - 0x48]
push edx
call fcn.0041cba6
add eax, eax
add dword [esi + 0xa08], eax
mov eax, dword [esi + 0xa04]
push 0
push edi
push eax
call fcn.0041cd16
push edi
call fcn.0041cba6
mov edx, dword [esi + 0xa04]
push 0
lea ecx, [ebp - 0x30]
push ecx
add eax, eax
add dword [esi + 0xa08], eax
push edx
call fcn.0041cd16
lea eax, [ebp - 0x30]
push eax
call fcn.0041cba6
mov edx, dword [esi + 0xa04]
add eax, eax
add dword [esi + 0xa08], eax
mov edi, dword [ebx + 0x10]
add edi, dword [ebp + 0xc]
push 0
lea ecx, [ebp - 0x60]
push ecx
push edx
call fcn.0041cd16
lea eax, [ebp - 0x60]
push eax
call fcn.0041cba6
mov ecx, dword [esi + 0xa04]
add esp, 0x40
push 0
add eax, eax
add dword [esi + 0xa08], eax
push edi
push ecx
call fcn.0041cd16
push edi
call fcn.0041cba6
add eax, eax
add dword [esi + 0xa08], eax
mov eax, dword [esi + 0xa04]
push 0
lea edx, [ebp - 0x30]
push edx
push eax
call fcn.0041cd16
lea ecx, [ebp - 0x30]
push ecx
call fcn.0041cba6
add eax, eax
add dword [esi + 0xa08], eax
mov eax, dword [esi + 0xa04]
push 0
lea edx, [ebp - 0x30]
push edx
push eax
add ebx, 0x20
call fcn.0041cd16
lea ecx, [ebp - 0x30]
push ecx
call fcn.0041cba6
add eax, eax
add dword [esi + 0xa08], eax
add esp, 0x30
dec dword [ebp + 0x10]
jne 0x413f48
mov ecx, dword [ebp - 4]
pop ebx
push ecx
push esi
call fcn.0041c896
mov edx, dword [ebp + 0x18]
push 0
push 0x14
push edx
push esi
call fcn.00416446
add esp, 0x18
pop edi
pop esi
mov esp, ebp
pop ebp
ret