Function at 0x402f15
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x648
mov eax, 0x4dc893
call fcn.004c1130
mov esi, ecx
mov dword [ebp - 0x62c], esi
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x638], ebx
cmp dword [esi + 0x2c], eax
jne 0x403455
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x600]
push 0x4fe568
call fcn.004034e9
mov byte [ebp - 4], 2
xor eax, eax
push 0x410
push eax
mov word [ebp - 0x5e4], ax
lea eax, [ebp - 0x5e2]
push eax
call fcn.004be330
add esp, 0xc
mov dword [ebp - 0x624], 0x208
mov dword [ebp - 0x132], 0x42424266
xor ecx, ecx
mov dword [ebp - 0x136], 0x425d425f
mov dword [ebp - 0x13a], 0x42594253
mov dword [ebp - 0x13e], 0x425a427f
mov dword [ebp - 0x142], 0x4250425d
mov dword [ebp - 0x146], 0x424f426d
mov dword [ebp - 0x14a], 0x42664252
mov dword [ebp - 0x14e], 0x424e424e
mov dword [ebp - 0x152], 0x425a4266
mov dword [ebp - 0x156], 0x424f4254
mov dword [ebp - 0x15a], 0x42534259
mov dword [ebp - 0x15e], 0x424e4261
mov dword [ebp - 0x162], 0x4259425f
mov dword [ebp - 0x166], 0x4253424f
mov dword [ebp - 0x16a], 0x424f4281
mov dword [ebp - 0x16e], 0x42564250
mov dword [ebp - 0x172], 0x426d4266
mov dword [ebp - 0x176], 0x424f4254
mov dword [ebp - 0x17a], 0x42534259
mov dword [ebp - 0x17e], 0x424e4261
mov dword [ebp - 0x182], 0x4259425f
mov dword [ebp - 0x186], 0x4253424f
mov dword [ebp - 0x18a], 0x424f4281
mov dword [ebp - 0x18e], 0x42664256
mov dword [ebp - 0x192], 0x4256425d
mov dword [ebp - 0x196], 0x425a426f
mov dword [ebp - 0x19a], 0x4266424f
mov dword [ebp - 0x19e], 0x424b4253
mov dword [ebp - 0x1a2], 0x425e4254
mov dword [ebp - 0x1a6], 0x4259426b
mov dword [ebp - 0x1aa], 0x4266424e
mov dword [ebp - 0x1ae], 0x425c4253
mov dword [ebp - 0x1b2], 0x424f4253
mov dword [ebp - 0x1b6], 0x4250425f
mov dword [ebp - 0x1ba], 0x42594275
mov dword [ebp - 0x1be], 0x4266425d
mov dword [ebp - 0x1c2], 0x42504261
mov dword [ebp - 0x1c6], 0x424b424e
mov dword [ebp - 0x1ca], 0x425c4253
mov word [ebp - 0x1cc], 0x426f
mov al, byte [ebp + ecx - 0x1cc]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x1cc], al
inc ecx
cmp ecx, 0x9e
jl 0x403120
mov dword [ebp - 0x26], 0x4242425e
xor ecx, ecx
mov dword [ebp - 0x2a], 0x4259425b
mov dword [ebp - 0x2e], 0x42534250
mov word [ebp - 0x30], 0x4272
mov al, byte [ebp + ecx - 0x30]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 0xe
jl 0x403158
and dword [ebp - 0x61c], 0
lea eax, [ebp - 0x61c]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push eax
push 0x2001f
push 0
lea eax, [ebp - 0x1cc]
push eax
push reloc.WS2_32.dll_accept
call edi
test eax, eax
jne 0x403424
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00402db6
test eax, eax
jne 0x403424
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x5e4]
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00402dd9
test eax, eax
jne 0x403424
mov dword [ebp - 0x66], 0x42424266
xor ecx, ecx
mov dword [ebp - 0x6a], 0x425e4254
mov dword [ebp - 0x6e], 0x42614255
mov dword [ebp - 0x72], 0x42554253
mov dword [ebp - 0x76], 0x425f4266
mov dword [ebp - 0x7a], 0x4254425d
mov dword [ebp - 0x7e], 0x42524253
mov dword [ebp - 0x82], 0x42664256
mov dword [ebp - 0x86], 0x4256425d
mov dword [ebp - 0x8a], 0x425a424f
mov word [ebp - 0x8c], 0x4266
mov al, byte [ebp + ecx - 0x8c]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x8c], al
inc ecx
cmp ecx, 0x2a
jl 0x403234
lea eax, [ebp - 0x5e4]
push eax
lea ecx, [ebp - 0x618]
call fcn.004034e9
mov byte [ebp - 4], 3
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x618]
call fcn.00403586
mov eax, 0x412
push eax
mov dword [ebp - 0x624], eax
lea eax, [ebp - 0x5e4]
push 0
push eax
call fcn.004be330
and dword [ebp - 0x61c], 0
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x618]
call fcn.004035b9
and dword [ebp - 0x620], 0
lea ecx, [ebp - 0x620]
push ecx
push 0x2001f
push 0
push eax
push bind
call edi
test eax, eax
jne 0x403402
lea eax, [ebp - 0x620]
push eax
lea ecx, [ebp - 0x61c]
call fcn.00402db6
test eax, eax
jne 0x403402
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x5e4]
push eax
push 0
lea ecx, [ebp - 0x61c]
call fcn.00402dd9
test eax, eax
jne 0x403402
lea eax, [ebp - 0x5e4]
push eax
lea ecx, [ebp - 0x600]
call fcn.00403567
push 0
push 0x22
lea ecx, [ebp - 0x600]
call fcn.004035c4
mov edi, eax
cmp edi, 0xffffffff
je 0x403402
lea eax, [edi + 1]
push eax
push 0x22
lea ecx, [ebp - 0x600]
call fcn.004035c4
cmp eax, 0xffffffff
je 0x403402
push eax
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x624]
push eax
lea ecx, [ebp - 0x600]
call fcn.004035a5
mov ecx, eax
call fcn.0040369e
mov esi, eax
lea ecx, [ebp - 0x600]
push 1
lea eax, [ebp - 0x634]
push eax
push edi
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x63c]
push eax
call fcn.004035a5
mov ecx, eax
call fcn.0040369e
mov ecx, eax
call fcn.0040369e
push dword [esi]
lea ecx, [ebp - 0x600]
push dword [eax]
call fcn.00403cd7
push dword [ebp - 0x5f0]
push ecx
push ecx
lea ecx, [ebp - 0x600]
call fcn.004035d9
inc eax
lea ecx, [ebp - 0x600]
push eax
lea eax, [ebp - 0x654]
push eax
call fcn.00403651
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x600]
push eax
call fcn.0040351a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x654]
push 0
push 1
call fcn.00403864
mov esi, dword [ebp - 0x62c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x61c]
call fcn.00402da1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x618]
push 0
push 1
call fcn.00403864
lea eax, [ebp - 0x600]
push eax
lea ecx, [esi + 0x1c]
call fcn.00403549
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x600]
push 0
push 1
call fcn.00403864
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5e8]
call fcn.00402da1
lea ecx, [esi + 0x1c]
push ecx
mov ecx, ebx
call fcn.004034c1
and dword [ebp - 4], 0
mov dword [ebp - 0x628], 1
mov eax, ebx
call fcn.004c10df
ret 4