Function at 0x407970
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x41b8da
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov eax, dword [0xdb8624]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x407e6c
add dword [esi + 0x24], eax
mov ecx, dword [esi + 0x70]
mov edi, dword [0x41fb90]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
add dword [esi + 0x2c], eax
mov eax, dword [esi + 0x54]
mov ecx, dword [ecx + 0x34]
push eax
push ebx
call edi
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x70]
mov ecx, dword [eax + 0x34]
mov ebp, dword [0x41fb94]
push edx
call ebp
mov ecx, dword [esi + 0x28]
mov edx, dword [esi + 0x70]
push ecx
mov ecx, dword [edx + 0x30]
push ebx
call edi
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x70]
mov ecx, dword [ecx + 0x30]
push eax
call ebp
mov eax, dword [esi + 0x60]
mov edi, dword [eax + 0xc]
sub edi, dword [eax + 8]
lea ecx, [esp + 0x40]
inc edi
call dword [0x41f408]
mov ecx, dword [esi + 0x60]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 8]
push 0xa
push eax
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x44], ebx
call dword [0x41f4f8]
mov ebp, eax
push 0xffffffffffffffff
lea eax, [esp + 0x30]
push 0x420d2c
push eax
mov byte [esp + 0x50], 1
call dword [0x41f424]
push ebp
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x5c], 2
call fcn.00401000
mov ebx, dword [0x41f154]
add esp, 0x24
push eax
lea ecx, [esp + 0x44]
call ebx
lea ecx, [esp + 0x1c]
call dword [0x41f508]
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 1
call dword [0x41f508]
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0
call dword [0x41f508]
cmp edi, 1
jle 0x407ab5
push 0xffffffffffffffff
lea edx, [esp + 0x28]
push 0x420d24
push edx
call dword [0x41f424]
add esp, 0xc
mov byte [esp + 0x38], 3
mov dword [esp + 0x14], 1
jmp 0x407add
push 6
push 0x420d1c
call dword [0x41f438]
add esp, 8
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x38], 4
mov dword [esp + 0x14], 2
mov ebp, dword [0x41f500]
push eax
lea ecx, [esp + 0x44]
call ebp
test byte [esp + 0x14], 2
mov dword [esp + 0x38], 3
je 0x407b08
and dword [esp + 0x14], 0xfffffffd
lea ecx, [esp + 0x1c]
call dword [0x41f508]
test byte [esp + 0x14], 1
mov dword [esp + 0x38], 0
je 0x407b21
lea ecx, [esp + 0x24]
call dword [0x41f508]
lea ecx, [esp + 0x18]
call dword [0x41f408]
push 0xffffffffffffffff
lea eax, [esp + 0x2c]
push 0x420d04
push eax
mov byte [esp + 0x44], 5
call dword [0x41f424]
push 0x420d00
push eax
lea ecx, [esp + 0x28]
push ecx
mov byte [esp + 0x50], 6
call fcn.00401070
lea edx, [esi + 0x50]
push edx
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x5c], 7
call fcn.00401000
push 0x420cfc
push eax
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x68], 8
call fcn.00401070
push 0x420cf8
push eax
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x74], 9
call fcn.00401070
add esp, 0x3c
push eax
lea ecx, [esp + 0x1c]
call ebx
lea ecx, [esp + 0x24]
call dword [0x41f508]
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 8
call dword [0x41f508]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], 7
call dword [0x41f508]
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 6
call dword [0x41f508]
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], 5
call dword [0x41f508]
fild dword [esi + 0x54]
mov edi, dword [0x41f28c]
push 2
fmul qword [0x420cf0]
push 0xa
sub esp, 8
lea eax, [esp + 0x3c]
fstp qword [esp]
push eax
call edi
add esp, 0x14
mov ebx, eax
fild dword [esi + 0x24]
push 2
push 0xa
fmul qword [0x420cf0]
sub esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], 0xa
fstp qword [esp]
push ecx
call edi
mov byte [esp + 0x4c], 0xb
push eax
lea edx, [esp + 0x34]
push 0x420ce8
push edx
call fcn.00401750
push 0x41feb0
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x64], 0xc
call fcn.00401070
push ebx
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0x70], 0xd
call fcn.00401000
push 0x420ce0
push eax
lea edx, [esp + 0x68]
mov bl, 0xe
push edx
mov byte [esp + 0x7c], bl
call fcn.00401070
add esp, 0x44
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3c], 0xf
call ebp
lea ecx, [esp + 0x28]
mov byte [esp + 0x38], bl
call dword [0x41f508]
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0xd
call dword [0x41f508]
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 0xc
call dword [0x41f508]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], 0xb
call dword [0x41f508]
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 0xa
call dword [0x41f508]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x38], 5
call dword [0x41f508]
fld dword [0x420cdc]
fld dword [esp + 0x44]
push 2
fcom st(1)
push 0xa
sub esp, 8
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x407d85
fmul qword [0x41ff78]
lea eax, [esp + 0x34]
fstp qword [esp]
push eax
call edi
mov edi, eax
push 0xffffffffffffffff
lea ecx, [esp + 0x40]
push 0x420cc8
push ecx
mov byte [esp + 0x58], 0x10
call dword [0x41f424]
push edi
push eax
lea edx, [esp + 0x54]
push edx
mov byte [esp + 0x64], 0x11
call fcn.00401000
push 0x420cc0
push eax
lea eax, [esp + 0x78]
mov bl, 0x12
push eax
mov byte [esp + 0x70], bl
call fcn.00401070
add esp, 0x38
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c], 0x13
call ebp
lea ecx, [esp + 0x44]
mov byte [esp + 0x38], bl
call dword [0x41f508]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x38], 0x11
call dword [0x41f508]
mov byte [esp + 0x38], 0x10
jmp 0x407e00
lea ecx, [esp + 0x34]
fstp qword [esp]
push ecx
call edi
mov edi, eax
push 0xffffffffffffffff
lea edx, [esp + 0x40]
push 0x420cc8
push edx
mov byte [esp + 0x58], 0x14
call dword [0x41f424]
push edi
push eax
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x64], 0x15
call fcn.00401000
push 0x420cb8
push eax
lea ecx, [esp + 0x78]
mov bl, 0x16
push ecx
mov byte [esp + 0x70], bl
call fcn.00401070
add esp, 0x38
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x3c], 0x17
call ebp
lea ecx, [esp + 0x44]
mov byte [esp + 0x38], bl
call dword [0x41f508]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x38], 0x15
call dword [0x41f508]
mov byte [esp + 0x38], 0x14
lea ecx, [esp + 0x28]
call dword [0x41f508]
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 5
call dword [0x41f508]
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call dword [0x41f4fc]
mov ecx, esi
call fcn.00406600
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call dword [0x41f4fc]
mov ecx, esi
call fcn.00406400
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 0
call dword [0x41f508]
lea ecx, [esp + 0x40]
mov dword [esp + 0x38], 0xffffffff
call dword [0x41f508]
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 8