Function at 0x41862e
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
sub esp, 0x24c
xor edx, edx
push ebx
push ebp
push esi
mov esi, ecx
push edi
push 0xf
pop ecx
lea eax, [esi + 0xa0]
mov dword [esi + 0x14], edx
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], edx
mov dword [eax + 0x28], edx
mov dword [eax + 0x2c], ecx
lea eax, [esi + 0xd0]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
lea eax, [esi + 0xe8]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], edx
mov dword [eax + 0x28], edx
mov dword [eax + 0x2c], ecx
lea eax, [esi + 0x118]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], edx
mov dword [eax + 0x28], edx
mov dword [eax + 0x2c], ecx
lea eax, [esi + 0x148]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], edx
mov dword [eax + 0x28], edx
mov dword [eax + 0x2c], ecx
lea eax, [esi + 0x178]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], edx
mov dword [eax + 0x28], edx
mov dword [eax + 0x2c], ecx
lea eax, [esi + 0x1a8]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], edx
mov dword [eax + 0x28], edx
mov dword [eax + 0x2c], ecx
lea eax, [esi + 0x1e4]
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], ecx
lea eax, [esi + 0x1fc]
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], edx
mov dword [esi + 0x24], edx
mov dword [esi + 0x34], edx
mov dword [esi + 0x38], ecx
mov dword [esi + 0x40], edx
mov dword [esi + 0x50], edx
mov dword [esi + 0x54], ecx
mov dword [esi + 0x58], edx
mov dword [esi + 0x68], edx
mov dword [esi + 0x6c], ecx
mov dword [esi + 0x70], edx
mov dword [esi + 0x80], edx
mov dword [esi + 0x84], ecx
mov dword [esi + 0x88], edx
mov dword [esi + 0x98], edx
mov dword [esi + 0x9c], ecx
mov dword [esi + 0x1d8], edx
mov dword [esi + 0x1dc], edx
mov dword [esi + 0x1e0], edx
mov dword [eax], edx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], edx
lea eax, [esi + 0x214]
mov dword [eax + 0x14], ecx
mov dword [eax], edx
mov dword [eax + 0x10], edx
lea eax, [esi + 0x22c]
mov dword [eax + 0x14], ecx
mov dword [eax], edx
mov dword [eax + 0x10], edx
mov al, 0x61
mov dword [esi + 0x258], ecx
mov dword [esi + 0x270], ecx
mov dword [esi + 0x2b0], ecx
mov dword [esi + 0x2c8], ecx
mov dword [esi + 0x2e0], ecx
mov dword [esi + 0x2f8], ecx
mov dword [esi + 0x310], ecx
mov dword [esi + 0x328], ecx
mov dword [esi + 0x3ac], ecx
mov ecx, edx
mov dword [esi + 0x244], edx
mov dword [esi + 0x254], edx
mov dword [esi + 0x25c], edx
mov dword [esi + 0x26c], edx
mov dword [esi + 0x274], edx
mov dword [esi + 0x278], edx
mov dword [esi + 0x27c], edx
mov dword [esi + 0x280], edx
mov dword [esi + 0x284], edx
mov dword [esi + 0x288], edx
mov byte [esi + 0x28c], dl
mov dword [esi + 0x290], edx
mov dword [esi + 0x294], edx
mov dword [esi + 0x298], edx
mov dword [esi + 0x29c], edx
mov dword [esi + 0x2ac], edx
mov dword [esi + 0x2b4], edx
mov dword [esi + 0x2c4], edx
mov dword [esi + 0x2cc], edx
mov dword [esi + 0x2dc], edx
mov dword [esi + 0x2e4], edx
mov dword [esi + 0x2f4], edx
mov dword [esi + 0x2fc], edx
mov dword [esi + 0x30c], edx
mov dword [esi + 0x314], edx
mov dword [esi + 0x324], edx
mov byte [esi + 0x32c], dl
mov dword [esi + 0x330], edx
mov dword [esi + 0x334], edx
mov dword [esi + 0x338], edx
mov dword [esi + 0x340], edx
mov dword [esi + 0x344], edx
mov dword [esi + 0x380], edx
mov dword [esi + 0x384], edx
mov dword [esi + 0x388], edx
mov dword [esi + 0x38c], edx
mov dword [esi + 0x390], edx
mov dword [esi + 0x394], edx
mov dword [esi + 0x398], edx
mov dword [esi + 0x3a8], edx
mov dword [esp + 0x20], 0x6a7b2f61
mov word [esp + 0x24], 0x71
movsx eax, al
and eax, 0x8000000f
jns 0x4188ae
dec eax
or eax, 0xfffffff0
inc eax
sub byte [esp + ecx + 0x21], al
inc ecx
cmp ecx, 4
jae 0x4188be
mov al, byte [esp + 0x20]
jmp 0x41889f
mov dword [esp + 0x14], 0x3ce
mov eax, dword [esp + 0x14]
xor eax, 0x3c2
mov byte [esp + 0x25], dl
push eax
lea eax, [esp + 0x184]
push eax
call fcn.004257c9
xor edx, edx
mov dword [esp + 0x1a], 0x7f674408
mov edi, eax
mov word [esp + 0x1e], 0x54
mov cl, 8
mov eax, edx
xor byte [esp + eax + 0x1b], cl
inc eax
cmp eax, 4
jae 0x418908
mov cl, byte [esp + 0x1a]
jmp 0x4188f8
mov byte [esp + 0x1f], dl
mov cl, 0x3f
mov dword [esp + 0x2c], 0x5c50533f
mov eax, edx
mov dword [esp + 0x30], 0x4f5e535e
mov dword [esp + 0x34], 0x4b5e5b4f
mov word [esp + 0x38], 0x5e
xor byte [esp + eax + 0x2d], cl
inc eax
cmp eax, 0xc
jae 0x41893f
mov cl, byte [esp + 0x2c]
jmp 0x41892f
lea eax, [esp + 0x2d]
mov byte [esp + 0x39], dl
push eax
call fcn.004494dd
pop ecx
push eax
lea ecx, [esp + 0x16c]
call fcn.0040bc98
lea ecx, [esp + 0x1b]
mov edx, eax
push ecx
lea ecx, [esp + 0x154]
call fcn.00417bac
push edi
push eax
push dword [esp + 0x1c]
lea ecx, [esp + 0x114]
call fcn.0041c09c
lea eax, [esp + 0x21]
push eax
lea edx, [esp + 0x10c]
lea ecx, [esp + 0x13c]
call fcn.00417bac
push eax
lea ecx, [esi + 0x3b0]
call fcn.0044377f
lea ecx, [esp + 0x138]
call fcn.0040bc59
lea ecx, [esp + 0x108]
call fcn.0040bc59
lea ecx, [esp + 0x150]
call fcn.0040bc59
lea ecx, [esp + 0x168]
call fcn.0040bc59
lea ecx, [esp + 0x180]
call fcn.0040bc59
push dword [esp + 0x260]
xor eax, eax
lea ecx, [esi + 0x40]
mov dword [esi + 0x3d0], eax
mov dword [esi + 0x3d4], eax
mov dword [esi + 0x3d8], eax
mov dword [esi + 0x3dc], eax
mov dword [esi + 0x3e0], eax
mov byte [esi + 0x3e4], al
call fcn.0040caa4
push dword [esp + 0x264]
lea ecx, [esi + 0xd0]
call fcn.0040caa4
push dword [esp + 0x268]
lea ecx, [esi + 0x70]
call fcn.0040caa4
push dword [esp + 0x26c]
lea ecx, [esi + 0xa0]
call fcn.0040caa4
xor ebx, ebx
lea ecx, [esi + 0x58]
push ebx
mov edi, 0x406fc4
push edi
call fcn.0040bd17
push ebx
push edi
lea ecx, [esi + 0x88]
call fcn.0040bd17
push ebx
push edi
lea ecx, [esi + 0xb8]
call fcn.0040bd17
mov dword [esp + 0x14], 0x74b
mov eax, dword [esp + 0x14]
xor eax, 0x748
push eax
lea eax, [esp + 0x1e4]
push eax
call fcn.004257c9
mov dword [esp + 0x14], 0x468
mov edi, eax
mov ecx, dword [esp + 0x14]
xor ecx, 0x464
push ecx
lea eax, [esp + 0x1cc]
push eax
call fcn.004257c9
mov ebx, eax
mov dword [esp + 0x26], 0x857d5a3e
mov dl, 0x3e
mov word [esp + 0x2a], 0x6a
xor ecx, ecx
movsx eax, dl
and eax, 0x8000000f
jns 0x418ad8
dec eax
or eax, 0xfffffff0
inc eax
sub byte [esp + ecx + 0x27], al
inc ecx
cmp ecx, 4
jae 0x418ae8
mov dl, byte [esp + 0x26]
jmp 0x418ac9
xor edx, edx
mov dword [esp + 0x3a], 0x565a5935
mov byte [esp + 0x2b], dl
mov cl, 0x35
mov dword [esp + 0x3e], 0x45545954
mov eax, edx
mov dword [esp + 0x42], 0x41545145
mov word [esp + 0x46], 0x54
xor byte [esp + eax + 0x3b], cl
inc eax
cmp eax, 0xc
jae 0x418b21
mov cl, byte [esp + 0x3a]
jmp 0x418b11
lea eax, [esp + 0x3b]
mov byte [esp + 0x47], dl
push eax
call fcn.004494dd
pop ecx
push eax
lea ecx, [esp + 0x1b4]
call fcn.0040bc98
lea ecx, [esp + 0x27]
mov edx, eax
push ecx
lea ecx, [esp + 0x19c]
call fcn.00417bac
push ebx
push eax
push dword [esp + 0x1c]
lea ecx, [esp + 0xfc]
call fcn.0041c09c
push 0x2e
lea ecx, [esp + 0xf4]
call fcn.0040bcdc
xor ebx, ebx
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
call fcn.0040bd60
push edi
lea eax, [esp + 0x7c]
push eax
push dword [esp + 0x1c]
lea ecx, [esp + 0x12c]
call fcn.0041c09c
lea eax, [esp + 0x120]
push eax
lea ecx, [esi + 0x1e4]
call fcn.0040cac9
lea ecx, [esp + 0x120]
call fcn.0040bc59
mov edx, dword [esp + 0x8c]
cmp edx, 0x10
jb 0x418c02
mov ecx, dword [esp + 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x418bf9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x418ee2
push edx
push ecx
call fcn.0044488d
pop ecx
pop ecx
lea ecx, [esp + 0xf0]
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], 0xf
mov byte [esp + 0x78], bl
call fcn.0040bc59
lea ecx, [esp + 0x198]
call fcn.0040bc59
lea ecx, [esp + 0x1b0]
call fcn.0040bc59
lea ecx, [esp + 0x1c8]
call fcn.0040bc59
lea ecx, [esp + 0x1e0]
call fcn.0040bc59
push dword [esp + 0x270]
lea ecx, [esi + 0x118]
call fcn.0040caa4
push dword [esp + 0x274]
lea ecx, [esi + 0x214]
call fcn.0040caa4
mov ax, word [esp + 0x28c]
mov ecx, ebx
movaps xmm0, xmmword [0x407900]
mov word [esi + 0x33c], ax
movups xmmword [esp + 0x64], xmm0
mov dword [esp + 0x74], 0x3b3833
movsx eax, byte [esp + 0x64]
and eax, 0x8000000f
jns 0x418cae
dec eax
or eax, 0xfffffff0
inc eax
sub byte [esp + ecx + 0x65], al
inc ecx
cmp ecx, 0x12
jb 0x418c9d
mov byte [esp + 0x77], bl
mov cl, 0xb
mov dword [esp + 0x48], 0x7f6e4c0b
mov eax, ebx
mov dword [esp + 0x4c], 0x6068625f
mov dword [esp + 0x50], 0x657e6448
mov word [esp + 0x54], 0x7f
xor byte [esp + eax + 0x49], cl
inc eax
cmp eax, 0xc
jae 0x418cef
mov cl, byte [esp + 0x48]
jmp 0x418cdf
mov byte [esp + 0x55], bl
mov al, 0x42
mov dword [esp + 0x56], 0x74674d42
mov ecx, ebx
mov dword [esp + 0x5a], 0x356e6770
mov dword [esp + 0x5e], 0x6e663034
mov word [esp + 0x62], 0x6e
movsx eax, al
and eax, 0x8000000f
jns 0x418d25
dec eax
or eax, 0xfffffff0
inc eax
sub byte [esp + ecx + 0x57], al
inc ecx
cmp ecx, 0xc
jae 0x418d35
mov al, byte [esp + 0x56]
jmp 0x418d16
lea edx, [esp + 0x49]
mov byte [esp + 0x63], bl
lea ecx, [esp + 0x57]
call fcn.0040c457
call eax
mov edx, eax
lea ecx, [esp + 0x240]
call fcn.004182b2
mov dword [esp + 0x14], 0x4e7
mov ecx, dword [esp + 0x14]
xor ecx, 0x4e3
push 0xffffffffffffffff
push ecx
lea ecx, [esp + 0x230]
push ecx
mov ecx, eax
call fcn.0040c0be
movaps xmm0, xmmword [0x407860]
mov edx, eax
movups xmmword [esp + 0x91], xmm0
mov ecx, ebx
mov dword [esp + 0xe1], 0x361d7e77
movaps xmm0, xmmword [0x4073f0]
movups xmmword [esp + 0xa1], xmm0
mov dword [esp + 0xe5], 0x3b33312c
movaps xmm0, xmmword [0x4078e0]
movups xmmword [esp + 0xb1], xmm0
mov dword [esp + 0xe9], 0x706c6971
movaps xmm0, xmmword [0x4074f0]
movups xmmword [esp + 0xc1], xmm0
mov word [esp + 0xed], 0x706e
movaps xmm0, xmmword [0x4077a0]
movups xmmword [esp + 0xd1], xmm0
mov byte [esp + 0xef], bl
mov al, byte [esp + 0x91]
xor byte [esp + ecx + 0x92], al
inc ecx
cmp ecx, 0x5d
jb 0x418dfb
push edx
lea edx, [esp + 0x96]
mov byte [esp + 0xf3], bl
lea ecx, [esp + 0x214]
call fcn.00417b28
lea ecx, [esp + 0x65]
mov edx, eax
push ecx
lea ecx, [esp + 0x1fc]
call fcn.00417bac
push eax
lea ecx, [esi + 0x22c]
call fcn.0040cac9
lea ecx, [esp + 0x1f8]
call fcn.0040bc59
lea ecx, [esp + 0x210]
call fcn.0040bc59
lea ecx, [esp + 0x228]
call fcn.0040bc59
lea ecx, [esp + 0x240]
call fcn.0040bc59
push dword [esp + 0x278]
lea ecx, [esi + 0x1a8]
call fcn.0040caa4
push dword [esp + 0x27c]
lea ecx, [esi + 0x1fc]
call fcn.0040caa4
push dword [esp + 0x280]
lea ecx, [esi + 0x148]
call fcn.0040caa4
push dword [esp + 0x284]
lea ecx, [esi + 0xe8]
call fcn.0040caa4
push dword [esp + 0x288]
lea ecx, [esi + 0x178]
call fcn.0040caa4
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x24c
ret 0x30
call fcn.00448974
int3