Function at 0x418c00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa8
mov ebx, dword [ebp + 0xc]
mov dword [esp + 0x10], 0x43144122
mov dword [esp + 0x14], 0x5f215d33
mov dword [esp + 0x18], 0x5b2c593d
mov dword [esp + 0x1c], 0x570b557a
mov dword [esp + 0x20], 0x53dc51de
mov dword [esp + 0x24], 0x6f1a6d2d
mov dword [esp + 0x28], 0x6b1369e3
mov dword [esp + 0x2c], 0x6712651b
mov dword [esp + 0x30], 0x630d6146
mov dword [esp + 0x34], 0x7ff07d1d
mov dword [esp + 0x38], 0x7b0379f2
mov dword [esp + 0x3c], 0x770d750c
mov dword [esp + 0x40], 0x731471fb
lea eax, [esp + 0x44]
mov word [esp + 0x44], 0x8d72
mov dword [esp + 0x46], 0
mov word [esp + 0x4a], 0
mov dword [esp + 0x50], 0
mov ecx, dword [esp + 0x50]
cmp ecx, 0x3b
ja 0x418cee
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x50]
movzx edx, byte [esp + edx + 0x10]
lea esi, [ecx + 0x3af43c4b]
add ecx, 0x4b
or ecx, esi
and ecx, edx
or esi, edx
sub esi, ecx
mov dword [esp + 0x6c], esi
mov ecx, dword [esp + 0x6c]
add cl, 0xf3
mov edx, dword [esp + 0x50]
mov byte [esp + edx + 0x10], cl
inc dword [esp + 0x50]
mov ecx, dword [esp + 0x50]
cmp ecx, 0x3c
jb 0x418cb0
lea edi, [esp + 0x6c]
lea edx, [esp + 0x10]
mov ecx, 0xd
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0xa0]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov esi, dword [ebx + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x418d20
mov ecx, dword [ebp + 0x10]
mov edi, dword [ecx + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x418d40
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x1b
test edx, edx
jns 0x418d60
mov eax, 0xffffffff
jmp 0x418d67
add eax, ecx
add eax, eax
add eax, 0x36
push eax
call fcn.00408de0
add esp, 4
movzx ecx, word [esi]
mov dword [esp + 0xc], eax
test cx, cx
je 0x418da1
add esi, 2
mov eax, dword [esp + 0xc]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x418d90
mov word [eax], 0
movzx ecx, word [esp + 0x6c]
test cx, cx
je 0x418dd1
lea edx, [esp + 0x6e]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x418dc0
mov word [eax], 0
movzx ecx, word [edi]
test cx, cx
je 0x418e01
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x418df0
mov word [eax], 0
mov dword [esp + 0x10], 0x33f731cf
mov dword [esp + 0x14], 0x378235bc
mov dword [esp + 0x18], 0xbb409ad
mov dword [esp + 0x1c], 0xfb70dbf
mov dword [esp + 0x20], 0x3bc01bf
mov dword [esp + 0x24], 0x7f905b7
lea eax, [esp + 0x28]
mov word [esp + 0x28], 0x1918
mov dword [esp + 0x2a], 0
mov dword [esp + 0x2e], 0
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0x27
ja 0x418ede
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx edi, byte [esp + ecx + 0x10]
lea ecx, [esi - 0x5f81dca8]
lea edx, [esi + edi]
add edx, 0xa07e2358
add esi, 0x58
and esi, edi
and ecx, edi
add ecx, esi
mov esi, ecx
xor esi, edx
not ecx
and ecx, edx
add ecx, ecx
sub ecx, esi
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x50]
mov edx, ecx
xor edx, 0x97
and ecx, 0x17
lea ecx, [edx + ecx*2]
inc cl
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x10], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0x28
jb 0x418e80
lea edi, [esp + 0x50]
lea edx, [esp + 0x10]
mov ecx, 6
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x68]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov edi, dword [ebx]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x418f10
mov esi, dword [ebx + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x418f30
mov edx, dword [ebp + 0x10]
mov ebx, dword [edx]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + edx + 2], 0
lea edx, [edx + 2]
jne 0x418f50
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xe
test eax, eax
jns 0x418f74
mov eax, 0xffffffff
jmp 0x418f7c
add ecx, edx
lea eax, [ecx + ecx]
add eax, 0x1c
push eax
call fcn.00408de0
add esp, 4
movzx ecx, word [edi]
mov edx, eax
test cx, cx
je 0x418fb1
add edi, 2
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x418fa0
mov word [eax], 0x2f
add eax, 2
movzx ecx, word [esi]
test cx, cx
je 0x418fe3
add esi, 2
mov edi, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x418fd0
jmp 0x418fe5
mov edi, edx
mov word [eax], 0
movzx ecx, word [esp + 0x50]
test cx, cx
je 0x419013
lea edx, [esp + 0x52]
mov esi, dword [esp + 0xc]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x419000
jmp 0x419017
mov esi, dword [esp + 0xc]
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x419041
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x419030
mov word [eax], 0
mov dword [esp + 0x10], 0xb0a0d3a
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1b], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0xe
ja 0x4190cc
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x10]
lea edx, [eax + 0x234cba02]
add eax, 2
or eax, edx
and eax, ecx
or edx, ecx
sub edx, eax
mov dword [esp + 4], edx
mov eax, dword [esp + 4]
mov ecx, eax
or ecx, 0xf1
and eax, 0xf1
add eax, ecx
inc al
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0xf
jb 0x419080
push 0
push 0
push 0
push 0xc00000
lea eax, [esp + 0x20]
push eax
push esi
push edi
push dword [ebp + 8]
call fcn.0041bc50
add esp, 0x20
mov ebx, eax
jmp dword [0x442440]