Function at 0x418090
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov ecx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x68]
mov edi, dword [ebx + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + eax + 2], 0
lea eax, [eax + 2]
jne 0x4180b0
mov esi, dword [ecx + 4]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, edx
cmp word [esi + edx + 2], 0
lea edx, [edx + 2]
jne 0x4180d0
mov ecx, eax
sar ecx, 1
sar edx, 1
and eax, 0x36
mov dword [esp + 8], ecx
xor ecx, 0x1b
add ecx, eax
add ecx, edx
mov dword [esp + 0xc], edx
jns 0x4180fe
mov ecx, 0xffffffff
jmp 0x418100
add ecx, ecx
push ecx
call fcn.00408160
add esp, 4
mov dword [esp + 0x10], 0x633e610c
mov dword [esp + 0x14], 0x6705651b
mov dword [esp + 0x18], 0x7b067919
mov dword [esp + 0x1c], 0x7f3b7d5c
mov dword [esp + 0x20], 0x730671f8
mov dword [esp + 0x24], 0x77087511
mov dword [esp + 0x28], 0x8bf389fb
mov dword [esp + 0x2c], 0x8ff08df3
mov dword [esp + 0x30], 0x83d181a0
mov dword [esp + 0x34], 0x87f285e1
mov dword [esp + 0x38], 0x9be399ec
mov dword [esp + 0x3c], 0x9ff99de2
mov dword [esp + 0x40], 0x93fe91e3
mov word [esp + 0x44], 0x9594
mov dword [esp + 0x46], 0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, edx
add cl, 0x68
xor cl, byte [esp + edx + 0x10]
add cl, 0xf8
mov byte [esp + edx + 0x10], cl
inc edx
cmp edx, 0x3a
jne 0x418190
movzx ecx, word [edi]
mov ebp, eax
test cx, cx
je 0x4181d2
add edi, 2
mov ebp, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], cx
add ebp, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x4181c0
mov word [ebp], 0
movzx ecx, word [esp + 0x10]
test cx, cx
je 0x418202
lea edx, [esp + 0x12]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], cx
add ebp, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4181f0
mov word [ebp], 0
movzx ecx, word [esi]
test cx, cx
mov dword [esp + 4], eax
je 0x418232
add esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], cx
add ebp, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x418220
mov word [ebp], 0
mov ebp, dword [ebx]
mov eax, 0xfffffffe
nop
cmp word [ebp + eax + 2], 0
lea eax, [eax + 2]
jne 0x418240
mov esi, dword [ebx + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x418260
mov edx, dword [esp + 0x6c]
mov edi, dword [edx]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x418280
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0x13
test eax, eax
jns 0x4182a4
mov eax, 0xffffffff
jmp 0x4182ad
add ecx, edx
lea eax, [ecx*2 + 0x26]
push eax
call fcn.00408160
add esp, 4
mov edx, eax
movzx eax, word [ebp]
mov ebx, edx
test ax, ax
je 0x4182e2
add ebp, 2
mov edx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [ebp]
add ebp, 2
test ax, ax
jne 0x4182d0
mov word [edx], 0x2f
mov dword [esp + 0x10], 0x337f3107
mov dword [esp + 0x14], 0x3f423d44
mov dword [esp + 0x18], 0x3b4c3955
mov dword [esp + 0x1c], 0x472f4537
mov dword [esp + 0x20], 0x43344137
mov dword [esp + 0x24], 0x4f794d3f
mov dword [esp + 0x28], 0x4948
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xb4
xor cl, byte [esp + eax + 0x10]
add cl, 0x7c
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 0x1c
jne 0x418330
add edx, 2
movzx eax, word [esi]
test ax, ax
mov ebp, dword [esp + 4]
je 0x418371
add esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [esi]
add esi, 2
test ax, ax
jne 0x418360
mov word [edx], 0
movzx eax, word [esp + 0x10]
test ax, ax
je 0x4183a1
lea ecx, [esp + 0x12]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x418390
mov word [edx], 0
movzx eax, word [edi]
test ax, ax
je 0x4183d1
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [edi]
add edi, 2
test ax, ax
jne 0x4183c0
mov dword [esp + 0x4c], edx
mov word [edx], 0
mov dword [esp + 0x10], 0x514e4f26
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x10]
mov esi, eax
xor esi, 0xcc2f7992
mov edx, eax
or edx, 1
and edx, esi
mov esi, edx
and esi, 2
or edx, 2
imul edx, esi
xor esi, 2
mov edi, eax
and edi, 1
neg edi
and edi, esi
mov esi, eax
xor esi, 0x33d0866d
add esi, edi
add esi, edx
not ecx
mov edx, esi
and edx, ecx
lea edi, [edx + edx]
not edi
add edi, edx
or ecx, esi
and ecx, edi
mov edx, 0xfced5fdd
sub edx, ecx
not ecx
or ecx, edx
and ecx, 1
xor edx, 1
lea ecx, [edx + ecx*2]
mov byte [esp + eax + 0x10], cl
inc eax
cmp eax, 4
jne 0x4183f0
lea eax, [esp + 0x10]
push 0
push 0
push 0xc00000
push eax
push ebp
push ebx
push dword [esp + 0x7c]
call fcn.0041c200
add esp, 0x1c
mov byte [esp + 3], al
jmp dword [0x441e60]