Function at 0x4133fb
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
xor edx, edx
mov al, byte [esp + edx + 0x60]
xor al, 0x85
movzx eax, al
mov word [esp + edx*2 + 0x110], ax
inc edx
cmp edx, 3
jl 0x4133c6
xor eax, eax
mov word [esp + 0x116], ax
lea eax, [esp + 0x110]
push ecx
push eax
call 0x42df29
mov ebp, eax
pop ecx
pop ecx
test ebp, ebp
je 0x41377d
mov dword [esp + 0xc0], 0x4e50412e
xor ecx, ecx
mov dword [esp + 0xc4], 0x41524145
mov dword [esp + 0xc8], 0x48514efc
mov dword [esp + 0xcc], 0x4522fc41
mov dword [esp + 0xd0], 0x234f4148
mov dword [esp + 0xd4], 0x3e3e3d4e
mov dword [esp + 0xd8], 0xfc084e41
mov dword [esp + 0xdc], 0x524e414f
mov dword [esp + 0xe0], 0x4ffc4e41
mov dword [esp + 0xe4], 0xfc414045
mov dword [esp + 0xe8], 0x44503d4c
mov dword [esp + 0xec], 0x4801fc16
mov word [esp + 0xf0], 0xe64f
mov al, byte [esp + ecx + 0xc0]
add al, 0x24
mov byte [esp + ecx + 0x134], al
inc ecx
cmp ecx, 0x32
jl 0x413491
lea eax, [esp + 0x134]
mov byte [esp + 0x166], 0
push ebp
push eax
call 0x424eac
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x50]
push eax
push eax
push 0
call fcn.004180a5
add esp, 0x14
adc al, 0x33
leave
mov edx, 0x5060ff33
inc ecx
push 0x800
or byte [eax], al
add byte [ebx + 0x50], dl
call 0x425587
call eax
rol byte [ebp + 0xa840fc0], 1
add dword [eax], eax
invalid
mov dword [esp + 0xf4], 0x819098a5
xor ecx, ecx
mov dword [esp + 0xf8], 0x90c0848e
mov dword [esp + 0xfc], 0xda889481
mov dword [esp + 0x100], 0x938cc5c0
add byte [eax], al
rol ch, 0x8c
xchg ebx, eax
mov byte [esp + 0x104], 0xea
mov al, byte [esp + ecx + 0xf4]
xor al, 0xe0
mov byte [esp + ecx + 0x14], al
inc ecx
cmp ecx, 0x11
jl 0x413525
in eax, dx
mov byte [esp + 0x25], 0
xor ecx, ecx
mov word [esp + 0x64], 0x4d04
and al, 0x64
add al, 0x4d
mov byte [esp + 0x66], 0x52
mov al, byte [esp + ecx + 0x64]
xor al, 0x21
and dword [edi], ecx
mov dh, 0xc0
invalid
mov word [esp + ecx*2 + 0x118], ax
inc ecx
cmp ecx, 3
stc
invalid
jl 0x41354b
xor eax, eax
push ebx
mov word [esp + 0x122], ax
and al, 0x22
add dword [eax], eax
add al, ch
sbb dword [eax + eax], ecx
pop ecx
movzx ecx, word [ebx + eax*2 - 2]
cmp ecx, 0x5c
je 0x413582
cmp cx, si
jne 0x413589
xor ecx, ecx
mov word [ebx + eax*2 - 2], cx
lea eax, [esp + 0x14]
push ebx
push eax
call 0x424f83
lea eax, [esp + 0x50]
and al, 0x50
push eax
lea eax, [esp + 0x50]
push eax
push 0
call fcn.0041817c
add esp, 0x14
push eax
lea eax, [esp + 0x11c]
push eax
call 0x42e0ea
add dword [eax], eax
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x413773
xor edx, edx
mov dword [esp + 0x14], 0x1902d4d4
mov dword [esp + 0x18], 0x12070b1a
mov ecx, edx
mov dword [esp + 0x1c], 0xc02180b
mov dword [esp + 0x20], 0x190b120f
inc esp
and al, 0x20
movlps xmm1, qword [ebx]
sbb edi, eax
inc esp
and al, 0x24
or eax, 0xc7080718
sbb byte [edi], al
or bh, al
inc esp
and al, 0x28
or byte [ebx], cl
sbb ah, dl
mov word [esp + 0x2c], 0x1609
mov byte [esp + 0x2e], 0x16
mov al, byte [esp + ecx + 0x14]
add al, 0x5a
mov byte [esp + ecx + 0xf4], al
inc ecx
cmp ecx, 0x1b
jl 0x413639
mov byte [esp + 0x10f], dl
mov ecx, edx
mov dword [esp + 0x38], 0xadacbd92
mov dword [esp + 0x3c], 0xb0b7b491
mov byte [esp + 0x40], 0xbe
mov al, byte [esp + ecx + 0x38]
sub al, 0x4b
mov byte [esp + ecx + 0x4c], al
inc ecx
cmp ecx, 9
jl 0x41366a
push 0x2f
pop eax
mov byte [esp + 0x9b], al
mov byte [esp + 0xb9], al
mov eax, edx
mov byte [esp + 0x55], dl
mov dword [esp + 0x90], 0x21303805
mov dword [esp + 0x94], 0x2e05242e
mov word [esp + 0x98], 0x2936
mov byte [esp + 0x9a], 0x32
mov dword [esp + 0x9c], 0x2e252d2e
mov dword [esp + 0xa0], 0x32341334
mov dword [esp + 0xa4], 0x33272e29
mov dword [esp + 0xa8], 0x2126e017
add byte [edi], dl
loopne 0x41370a
and edi, eax
test byte [esp + ebp*4], ah
add byte [eax], al
add byte [ecx], ch
sub al, 0x33
sti
mov dword [esp + 0xb0], 0x33212ce0
mov dword [esp + 0xb4], 0x3225e034
mov byte [esp + 0xb8], 0x32
mov dword [esp + 0xba], 0xe5e0fa32
mov word [esp + 0xbe], 0xca38
movups xmm0, xmmword [esp + eax + 0x90]
paddb xmm0, xmmword [0x420fb0]
movups xmmword [esp + eax + 0xc0], xmm0
add byte [eax], al
invalid
push ebp
call fcn.00418264
pop ecx
push 0x2f
pop esi
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x48]
push eax
push 0
call fcn.00418365
mov ecx, eax
add esp, 0xc
test ecx, ecx
jne 0x4133c4
push ebx
call fcn.0041828c
pop ecx
push edi
call fcn.00418293
pop ecx
jmp 0x4138d0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x15c
ret