Function at 0x4148a9
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1a0
push ebx
mov bl, byte [0x42b964]
mov bh, byte [0x42b999]
mov al, bl
push ebp
push esi
or al, 0x7f
mov dword [esp + 0x64], edx
push edi
mov byte [0x42b988], al
mov esi, ecx
push ecx
lea eax, [esp + 0x70]
mov dword [esp + 0x58], esi
push eax
or bh, 0x3c
push ecx
mov byte [0x42b999], bh
call fcn.00415057
mov ebp, eax
add esp, 0xc
mov dword [esp + 0x24], ebp
test ebp, ebp
je 0x414f37
mov edi, dword [ebp + 0x20]
or bl, 0x2c
sub bl, 0x31
movzx ecx, bh
mov eax, 0x27e0
movzx edx, bh
or cx, ax
mov byte [0x42b9a8], bl
mov al, bl
mov word [0x42b938], cx
xor al, 0xd
mov ecx, 0xa8d
mov byte [0x42b988], al
add edi, esi
movzx eax, bl
or edx, 0x5d96fa9c
add ax, cx
mov dword [esp + 0x58], edi
xor ecx, ecx
mov dword [str.fGj], edx
mov word [0x42b964], ax
mov dword [esp + 0x5c], ecx
cmp dword [ebp + 0x18], ecx
jbe 0x414f3d
movzx eax, byte [0x42b95c]
push dword [esp + 0x68]
imul eax, eax, 0x8e
mov byte [0x42b988], al
lea eax, [edx + 0x5b0b385f]
xor eax, 0x3093d785
mov dword [str.fGj], eax
mov eax, dword [edi + ecx*4]
add eax, esi
push eax
call fcn.00405c00
pop ecx
pop ecx
test eax, eax
jne 0x414e99
mov bl, byte [0x42b988]
mov edi, dword [esp + 0x5c]
mov ecx, dword [ebp + 0x1c]
movzx eax, bl
add ecx, esi
imul edx, eax, 0xce
xor bl, 0x93
mov byte [esp + 0x14], bl
xor dl, 0xf6
movzx ebx, dl
or ebx, 0xa78f5178
add ebx, 0xd791efc7
lea eax, [edx + 0x55]
mov dword [0x42b95c], ebx
mov byte [esp + 0x13], al
mov eax, dword [ebp + 0x24]
lea eax, [eax + edi*2]
movzx eax, word [eax + esi]
mov edi, dword [ecx + eax*4]
mov eax, dword [esp + 0x24]
lea ebp, [edi + esi]
mov dword [esp + 0x64], ebp
cmp ebp, eax
jb 0x414ee0
add eax, dword [esp + 0x6c]
cmp ebp, eax
jae 0x414ee0
mov dword [esp + 0x28], 0x9a86919f
xor ecx, ecx
mov dword [esp + 0x2c], 0xc6c79891
mov dword [esp + 0x30], 0x989890da
mov al, byte [esp + ecx + 0x28]
xor al, 0xf4
movzx eax, al
mov word [esp + ecx*2 + 0x94], ax
inc ecx
cmp ecx, 0xc
jl 0x414a16
movzx ecx, byte [esp + 0x13]
xor eax, eax
mov word [esp + 0xac], ax
xor bl, 0x1a
mov eax, 0x13a4
mov dword [esp + 0x18], ebx
sub cx, ax
mov edi, 0xd46d
movzx eax, cx
add cl, 0x77
mov word [esp + 0x52], cx
mov cl, bl
and cl, 0xf8
mov dword [esp + 0x1c], eax
sub cl, 0x71
movzx eax, ax
movzx edx, cl
and dx, di
xor edi, edi
cmp byte [ebp], 0
mov word [esp + 0x14], dx
mov word [0x42b964], dx
movzx edx, dx
mov dword [esp + 0x20], edx
je 0x414b81
mov eax, dword [esp + 0x1c]
mov edx, ebp
movzx esi, ax
mov ch, cl
movzx eax, ax
mov dword [esp + 0x1c], eax
movzx eax, word [esp + 0x14]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xb0]
sub eax, ebp
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x60], eax
movzx eax, si
mov cl, ch
mov dword [esp + 0x18], eax
movzx eax, bp
mov ebp, dword [esp + 0x14]
movzx ebp, bp
mov dword [esp + 0x20], ebp
cmp edi, 0x7c
jae 0x414b75
mov cl, byte [esp + 0x18]
mov esi, 0x809
mov ebp, dword [esp + 0x60]
xor cl, 0x20
mov al, byte [edx]
and cl, 0x70
mov bl, cl
and cl, 0x51
mov byte [esp + 0x13], cl
mov byte [edx + ebp], al
mov eax, 0xffb
movzx ebp, cl
add bp, ax
movzx eax, bp
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x52]
mov word [esp + 0x14], bp
movzx eax, al
add ax, si
movzx ebp, bp
cmp byte [edx], 0x2e
mov dword [esp + 0x18], ebp
movzx ebp, ax
mov word [0x42b964], ax
mov dword [esp + 0x20], ebp
je 0x414b71
mov ecx, dword [esp + 0x1c]
inc edi
movzx esi, word [esp + 0x14]
inc edx
movzx ebp, cx
movzx ecx, cx
mov dword [esp + 0x1c], ebp
cmp byte [edx], 0
movzx ebp, ax
mov dword [esp + 0x18], ecx
mov ch, byte [esp + 0x13]
movzx eax, ax
mov cl, ch
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
jne 0x414abb
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x54]
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x18], ebx
movzx eax, ax
lea edx, [edi + 1]
mov dword [esp + 0x64], eax
add edx, ebp
movzx eax, cl
imul ecx, eax, 0xb1
mov eax, dword [esp + 0x20]
mov dword [esp + edi + 0xb1], 0x6c6c64
xor edi, edi
movzx eax, ax
add eax, 0xa98762d
mov byte [0x42b9a8], cl
or cl, 0x56
cmp byte [edx], 0
mov dword [esp + 0x60], eax
mov byte [0x42b988], cl
je 0x414c16
mov eax, dword [esp + 0x64]
lea ebp, [esp + 0x130]
mov ebx, dword [esp + 0x60]
sub ebp, edx
and al, 0x29
mov byte [esp + 0x13], cl
cmp edi, 0x7f
jae 0x414c12
movzx eax, al
imul eax, eax, 0x82
mov byte [0x42b9a8], al
movzx eax, bl
imul ecx, eax, 0xdf
inc edi
mov al, byte [edx]
mov byte [edx + ebp], al
inc edx
mov al, byte [esp + 0x13]
sub al, 0x32
mov byte [0x42b988], cl
cmp byte [edx], 0
jne 0x414bda
mov ebx, dword [esp + 0x18]
movzx eax, bl
imul eax, eax, 0xac1af48f
mov byte [esp + edi + 0x130], 0
mov dword [str.fGj], eax
lea ecx, [eax - 0x189db961]
lea eax, [ecx - 0x1f]
mov dword [0x42b95c], ecx
mov byte [0x42b999], al
lea eax, [ecx + 0xab3]
lea ecx, [esp + 0x94]
mov word [0x42b938], ax
call fcn.00414f5f
mov ch, byte [0x42b999]
mov ebp, eax
mov edx, dword [str.fGj]
mov bl, ch
movzx eax, word [0x42b938]
mov cl, dl
and bl, 0x32
sub cl, 0x13
xor eax, 0xc77f905e
mov byte [0x42b988], bl
mov byte [0x42b9a8], cl
mov dword [0x42b95c], eax
test ebp, ebp
je 0x414e7a
movaps xmm1, xmmword [0x428fb0]
lea eax, [edx - 0x75ad]
mov dword [esp + 0x40], 0x774e5f7d
lea edx, [esp + 0x80]
mov dword [esp + 0x44], 0x564f5e55
xor bl, 0x5d
mov dword [esp + 0x48], 0x545b725f
mov dword [esp + 0x4c], 0x7b5f565e
movups xmm0, xmmword [esp + 0x40]
mov word [0x42b938], ax
mov al, ch
add ch, 0xcd
mov byte [esp + 0x90], 0
pxor xmm1, xmm0
mov byte [0x42b999], ch
or al, 0xda
mov byte [0x42b988], bl
push 0
mov ecx, ebp
mov byte [0x42b9a8], al
movups xmmword [esp + 0x84], xmm1
call fcn.004148a9
mov ebx, dword [0x42b95c]
mov edi, eax
imul edx, ebx, 0xc1e928ed
pop ecx
mov cl, bl
xor cl, 0x96
mov byte [0x42b999], cl
mov dword [str.fGj], edx
test edi, edi
je 0x414e7a
lea eax, [edx - 0x64]
and edx, 0xa3cb7082
mov byte [0x42b9a8], al
movzx eax, bl
imul eax, eax, 0x4e
mov dword [str.fGj], edx
mov byte [0x42b999], al
mov eax, 0xffc8
or word [0x42b964], ax
lea eax, [esp + 0xb0]
push eax
call edi
mov esi, eax
mov eax, dword [0x42b95c]
add eax, 0xffffb576
mov dword [esp + 0x54], esi
mov word [0x42b938], ax
test esi, esi
jne 0x414e4e
mov dword [esp + 0x34], 0x26232d0e
xor ecx, ecx
mov dword [esp + 0x38], 0x30202b0e
mov dword [esp + 0x3c], 0x33b3023
mov al, byte [esp + ecx + 0x34]
xor al, 0x42
mov byte [esp + ecx + 0x70], al
inc ecx
cmp ecx, 0xc
jl 0x414da1
movzx eax, byte [0x42b999]
lea edx, [esp + 0x70]
mov ecx, 0x5e54
mov byte [esp + 0x7c], 0
or ax, cx
mov ecx, ebp
mov word [0x42b938], ax
sub al, 0x48
mov byte [0x42b9a8], al
movzx eax, al
add eax, 0x1f32ddcb
mov dword [0x42b95c], eax
xor al, 0xb8
push 0
mov byte [0x42b999], al
call fcn.004148a9
pop ecx
movzx ecx, byte [0x42b999]
mov edi, eax
mov eax, 0x72ae
add cx, ax
movzx edx, cx
mov word [0x42b964], cx
test edi, edi
je 0x414e4e
mov al, byte [0x42b95c]
add dl, 0x78
xor al, 0x62
mov byte [0x42b988], dl
mov byte [0x42b999], al
xor al, 0x4d
mov byte [0x42b9a8], al
mov eax, dword [str.fGj]
add eax, 0xbf7f8f4b
mov dword [0x42b95c], eax
lea eax, [esp + 0xb0]
push eax
call edi
mov esi, eax
mov dword [esp + 0x54], eax
movzx ecx, byte [0x42b999]
mov eax, 0xf288
and cx, ax
mov al, byte [0x42b9a8]
xor al, 0xae
mov word [0x42b964], cx
mov byte [0x42b988], al
test esi, esi
jne 0x414ea1
mov edx, dword [str.fGj]
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
inc ecx
mov dword [esp + 0x5c], ecx
cmp ecx, dword [ebp + 0x18]
jb 0x414957
jmp 0x414f3d
mov edx, dword [str.fGj]
jmp 0x414e82
movzx eax, word [0x42b938]
lea edx, [esp + 0x130]
push dword [esp + 0x1b4]
and eax, 0xb200bae2
mov dword [str.fGj], eax
mov al, cl
xor al, 0xbd
mov byte [0x42b9a8], al
movzx eax, cx
mov ecx, esi
xor eax, 0xf6566829
mov dword [0x42b95c], eax
call fcn.004148a9
pop ecx
jmp 0x414f54
movzx ecx, byte [esp + 0x14]
mov eax, 0x956f
imul ecx, eax
or bl, 0x78
mov byte [0x42b9a8], bl
mov word [0x42b938], cx
or cl, 0x2c
mov byte [0x42b988], cl
mov ecx, dword [str.fGj]
xor ecx, 0x6fda
mov word [0x42b964], cx
movzx ecx, cl
imul ecx, ecx, 0x94
cmp byte [esp + 0x1b4], 0
cmove edi, ebp
mov eax, edi
mov byte [0x42b999], cl
jmp 0x414f54
mov edx, dword [str.fGj]
lea eax, [edx + 0x2b]
or edx, 0x9ae4
mov byte [0x42b9a8], al
xor eax, eax
mov word [0x42b964], dx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a0
ret