Function at 0x420b10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x58
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov esi, dword [eax + 4]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, edx
cmp word [esi + edx + 2], 0
lea edx, [edx + 2]
jne 0x420b30
mov dword [esp + 8], esi
sar edx, 1
mov esi, dword [ecx + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x420b50
sar eax, 1
lea ecx, [edx + eax]
mov dword [esp + 0x4c], eax
add eax, edx
add eax, 0x1b
test eax, eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x48], ecx
jns 0x420b7c
mov eax, 0xffffffff
jmp 0x420b83
lea eax, [ecx*2 + 0x36]
mov dword [esp + 4], esi
push eax
call fcn.0040c730
add esp, 4
mov dword [esp], eax
mov dword [esp + 0xc], 0x95e0b68
mov dword [esp + 0x10], 0x57b0779
mov dword [esp + 0x14], 0x176037b
mov dword [esp + 0x18], 0x1d451f20
mov dword [esp + 0x1c], 0x19961b94
mov dword [esp + 0x20], 0x15641763
mov dword [esp + 0x24], 0x11651399
mov dword [esp + 0x28], 0x2d5c2f61
mov dword [esp + 0x2c], 0x29472b0c
mov dword [esp + 0x30], 0x25aa2753
mov dword [esp + 0x34], 0x215523a8
mov dword [esp + 0x38], 0x3d473f52
mov dword [esp + 0x3c], 0x395e3bb1
mov dword [esp + 0x40], 0x3738
mov ebp, 0x7d316383
mov ecx, 0x82ce9c7c
nop
nop
nop
movzx esi, byte [esp + ebp - 0x7d316377]
mov eax, ebp
and eax, esi
mov edx, eax
or edx, 0xfffffffd
inc edx
mov ebx, eax
and ebx, 0xfffffffd
imul ebx, edx
mov edx, eax
and edx, 2
or eax, 2
imul eax, edx
mov edx, eax
sub edx, ebx
lea edi, [ebx + esi]
sub edx, esi
mov ebx, edi
sub ebx, eax
add ebx, ebp
add edx, ecx
or edx, 0x70
or ebx, 0x70
add ebx, edx
add ebx, edi
sub ebx, eax
add ebx, ebp
add bl, 2
mov byte [esp + ebp - 0x7d316377], bl
inc ebp
dec ecx
cmp ebp, 0x7d3163bb
jne 0x420c10
mov esi, dword [esp + 8]
movzx ecx, word [esi]
mov edx, dword [esp]
mov eax, edx
test cx, cx
je 0x420c91
add esi, 2
mov eax, edx
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x420c80
mov word [eax], 0
movzx ecx, word [esp + 0xc]
test cx, cx
mov esi, dword [esp + 4]
je 0x420cc1
lea edx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x420cb0
mov word [eax], 0
movzx ecx, word [esi]
test cx, cx
je 0x420cf1
add esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x420ce0
mov word [eax], 0
mov eax, dword [esp + 0x70]
mov esi, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x420d10
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + 8]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x420d30
mov dword [esp + 0x54], edx
sar eax, 1
add eax, 0xd
mov edx, dword [esp + 0x74]
mov edi, dword [edx]
mov edx, 0xfffffffe
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x420d50
sar ecx, 1
add eax, ecx
sar edx, 1
mov ecx, edx
and ecx, eax
xor edx, eax
lea eax, [edx + ecx*2]
add eax, 6
test eax, eax
jns 0x420d78
mov eax, 0xffffffff
jmp 0x420d82
lea eax, [edx + ecx*2]
lea eax, [eax*2 + 0xc]
mov dword [esp + 0x44], edi
push eax
call fcn.0040c730
add esp, 4
movzx ecx, word [esi]
mov edx, eax
test cx, cx
je 0x420db1
add esi, 2
mov edx, eax
nop
nop
mov word [edx], cx
add edx, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x420da0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov word [edx], 0x2f
mov dword [esp + 0xc], 0x21f927d5
mov dword [esp + 0x10], 0x3dae23a8
mov dword [esp + 0x14], 0x39883f83
mov dword [esp + 0x18], 0x35813bb5
mov dword [esp + 0x1c], 0x31803785
mov dword [esp + 0x20], 0xdc333bd
mov dword [esp + 0x24], 0xf0c
mov eax, 0x22075f49
mov ecx, 0xddf8a0b8
movzx esi, byte [esp + eax - 0x22075f3d]
lea edx, [eax - 0x22075f00]
and edx, esi
mov ebx, edx
and ebx, 2
mov ebp, edx
or ebp, 0xfffffffd
inc ebp
mov edi, edx
and edi, 0x7d
imul edi, ebp
or edx, 2
imul edx, ebx
sub edx, edi
lea ebx, [eax + esi]
and ebx, 1
sub edx, esi
lea esi, [ecx + edx]
and esi, 1
add edx, ecx
add edx, 0x6c
and edx, 0xfe
or edx, esi
xor edx, 0xfe
lea edx, [edx + ebx*2]
mov byte [esp + eax - 0x22075f3d], dl
inc eax
dec ecx
cmp eax, 0x22075f65
jne 0x420e00
mov ebp, dword [esp + 4]
add ebp, 2
mov ecx, dword [esp + 0x54]
movzx eax, word [ecx]
test ax, ax
je 0x420e94
add ecx, 2
mov esi, dword [esp + 0x74]
mov ebx, dword [esp]
nop
nop
nop
nop
mov word [ebp], ax
add ebp, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x420e80
jmp 0x420e9b
mov esi, dword [esp + 0x74]
mov ebx, dword [esp]
mov word [ebp], 0
movzx eax, word [esp + 0xc]
test ax, ax
je 0x420ed4
lea ecx, [esp + 0xe]
mov edi, dword [esp + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebp], ax
add ebp, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x420ec0
jmp 0x420ed8
mov edi, dword [esp + 8]
mov word [ebp], 0
mov ecx, dword [esp + 0x44]
movzx eax, word [ecx]
test ax, ax
je 0x420f02
add ecx, 2
nop
nop
nop
mov word [ebp], ax
add ebp, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x420ef0
mov word [ebp], 0
mov dword [esp + 0xc], 0x131211ea
mov dword [esp + 0x10], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xfc
xor cl, byte [esp + eax + 0xc]
add cl, 0x14
mov byte [esp + eax + 0xc], cl
inc eax
cmp eax, 8
jne 0x420f20
lea eax, [esp + 0xc]
push 0
push 0
push 0xc00000
push eax
push ebx
push edi
push dword [esp + 0x84]
call fcn.00424170
add esp, 0x1c
mov byte [esp], al
jmp dword [0x44abf0]