Function at 0x448f20
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x280
mov ebx, dword [0x45f36c]
mov ebp, dword [0x45f368]
mov eax, ebp
or eax, ebx
jne 0x448fee
mov dword [esp + 0x50], 0x334e3146
mov dword [esp + 0x54], 0x3f4a3d50
mov dword [esp + 0x58], 0x3b0c394c
mov dword [esp + 0x5c], 0x47324528
mov dword [esp + 0x60], 0x43424134
mov word [esp + 0x64], 0
mov dword [esp + 0x150], 0
mov eax, dword [esp + 0x150]
cmp eax, 0x15
ja 0x448fca
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x150]
movzx eax, byte [esp + eax + 0x50]
push dword [esp + 0x150]
push eax
call fcn.004499a0
add esp, 8
mov ecx, dword [esp + 0x150]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 0x150]
mov eax, dword [esp + 0x150]
cmp eax, 0x16
jb 0x448f90
lea eax, [esp + 0x50]
push eax
call fcn.00448b80
add esp, 4
mov ebp, eax
mov dword [0x45f36c], edx
mov dword [0x45f368], eax
or eax, edx
je 0x4490c8
mov ebx, edx
lea eax, [esp + 0x240]
push 0x40
push eax
push ebx
push ebp
call fcn.004489a0
add esp, 0x10
test eax, eax
js 0x4490c8
mov eax, dword [esp + 0x27c]
mov ecx, eax
sar ecx, 0x1f
add eax, ebp
adc ecx, ebx
add eax, 0x18
adc ecx, 0
lea edx, [esp + 0x150]
push 0xf0
push edx
push ecx
push eax
call fcn.004489a0
add esp, 0x10
xor edi, edi
test eax, eax
js 0x4490ca
cmp dword [esp + 0x1c4], 0
je 0x4490ca
mov eax, dword [esp + 0x1c0]
mov esi, 0
test eax, eax
je 0x4490cc
add eax, ebp
mov ecx, ebx
adc ecx, 0
lea edx, [esp + 0x28]
push 0x28
push edx
push ecx
push eax
call fcn.004489a0
add esp, 0x10
test eax, eax
js 0x4490c8
mov ecx, dword [esp + 0x3c]
lea esi, [ecx*4]
mov eax, 0xffffffff
cmp ecx, 0x40000000
jae 0x449091
mov eax, esi
push eax
call fcn.0040c500
add esp, 4
mov edx, dword [esp + 0x44]
add edx, ebp
mov ecx, ebx
adc ecx, 0
push esi
mov dword [esp + 0x10], eax
push eax
push ecx
push edx
call fcn.004489a0
add esp, 0x10
test eax, eax
js 0x4490db
mov eax, dword [esp + 0x3c]
test eax, eax
jns 0x4490e4
mov eax, 0xffffffff
jmp 0x4490e6
xor edi, edi
xor esi, esi
mov eax, edi
mov edx, esi
add esp, 0x280
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
xor esi, esi
jmp 0x4492f7
add eax, eax
push eax
call fcn.0040c500
add esp, 4
mov esi, dword [esp + 0x40]
mov ecx, esi
and ecx, 2
mov edx, esi
or esi, 2
imul esi, ecx
xor ecx, 2
and edx, 0xfffffffd
imul edx, ecx
add esi, edx
mov ecx, dword [esp + 0x4c]
add ecx, ebp
mov edx, ebx
adc edx, 0
push esi
mov dword [esp + 0xc], eax
push eax
push edx
push ecx
call fcn.004489a0
add esp, 0x10
test eax, eax
js 0x4492e7
mov ecx, dword [esp + 0x40]
lea esi, [ecx*4]
mov eax, 0xffffffff
cmp ecx, 0x40000000
jae 0x449148
mov eax, esi
push eax
call fcn.0040c500
add esp, 4
mov edi, eax
mov eax, dword [esp + 0x48]
add eax, ebp
mov ecx, ebx
adc ecx, 0
push esi
push edi
push ecx
push eax
call fcn.004489a0
add esp, 0x10
test eax, eax
mov dword [esp + 4], edi
js 0x4492d5
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp esi, eax
jb 0x449184
mov esi, eax
test esi, esi
je 0x4492d5
xor eax, eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], esi
jmp 0x4491c7
mov esi, 0xb14a5e2
cmp esi, dword [esp + 0x294]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
je 0x449308
mov eax, dword [esp + 0x10]
inc eax
cmp eax, esi
je 0x4492d5
mov dword [esp + 0x10], eax
mov eax, dword [edi + eax*4]
add eax, ebp
mov ecx, ebx
adc ecx, 0
push 0x100
lea edx, [esp + 0x54]
push edx
push ecx
push eax
call fcn.004489a0
add esp, 0x10
test eax, eax
jns 0x4491f4
cmp eax, 0x8000000d
jne 0x4491ba
mov ebx, 0xffffffff
xor eax, eax
nop
nop
nop
nop
nop
mov ebp, eax
cmp byte [esp + ebx + 0x51], 0
lea ebx, [ebx + 1]
lea eax, [eax + 1]
jne 0x449200
mov dword [esp + 0x14], 0x92929003
mov dword [esp + 0x18], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0x449256
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0x14]
push dword [esp]
push eax
call fcn.00449a20
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0x14], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0x449230
test ebx, ebx
je 0x44919c
mov eax, dword [esp + 0x14]
mov edx, 0xb14a5e2
lea ecx, [esp + 0x50]
cmp ebx, 4
jb 0x4492af
mov esi, ebp
and esi, 0xfffffffc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movsx edi, byte [ecx]
xor edi, edx
imul edi, eax
movsx edx, byte [ecx + 1]
xor edx, edi
imul edx, eax
movsx edi, byte [ecx + 2]
xor edi, edx
imul edi, eax
movsx edx, byte [ecx + 3]
add ecx, 4
xor edx, edi
imul edx, eax
add esi, 0xfffffffc
jne 0x449280
mov edi, dword [esp + 4]
mov esi, edx
test bl, 3
je 0x4491a1
and ebp, 3
xor ebx, ebx
nop
movsx esi, byte [ecx + ebx]
xor esi, edx
imul esi, eax
inc ebx
mov edx, esi
cmp ebp, ebx
jne 0x4492c0
jmp 0x4491a1
xor edi, edi
xor esi, esi
push dword [esp + 4]
call fcn.0040c510
add esp, 4
jmp 0x4492eb
xor edi, edi
xor esi, esi
push dword [esp + 8]
call fcn.0040c510
add esp, 4
push dword [esp + 0xc]
call fcn.0040c510
add esp, 4
jmp 0x4490cc
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + ecx*2]
mov ecx, dword [esp + 0xc]
add ebp, dword [ecx + eax*4]
adc ebx, 0
mov edi, ebp
mov esi, ebx
jmp 0x4492d9