Function at 0x427910
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x94
mov dword [esp], 0x33e6311d
mov dword [esp + 4], 0x3fdd3dcb
mov dword [esp + 8], 0x3bce39d9
mov dword [esp + 0xc], 0xc736c505
mov dword [esp + 0x10], 0xc30ec130
mov dword [esp + 0x14], 0xcf32cd2d
mov dword [esp + 0x18], 0xcbe7c929
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xd5d4
mov ecx, 0xb9502974
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x46afd68c]
xor edx, ecx
add edx, 0x616f30bb
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
mov byte [esp + ecx + 0x46afd68c], dl
inc ecx
cmp ecx, 0xb9502994
jne 0x427970
lea ebx, [esp + 0x76]
mov edx, esp
mov edi, ebx
mov ecx, 7
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x92]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
lea ebp, [esp + 0x50]
push ebp
push 0
push 0
push 0xe
push ebx
push 0
call dword [0x450648]
mov esi, dword [esp + 0x50]
mov edi, 0xffffffff
test esi, esi
jns 0x4279e7
mov eax, 0xffffffff
jmp 0x4279ea
lea eax, [esi + esi]
push eax
call fcn.0040c8d0
add esp, 4
push ebp
mov ebp, eax
push esi
push eax
push 0xe
push ebx
push 0
call dword [0x450648]
mov eax, dword [esp + 0x50]
mov ecx, eax
add ecx, 9
js 0x427a15
lea edi, [eax*2 + 0x12]
push edi
call fcn.0040c8d0
add esp, 4
mov edi, eax
mov dword [esp], 0x23d221cc
mov dword [esp + 4], 0x27c525c5
mov dword [esp + 8], 0xdb3bd943
mov dword [esp + 0xc], 0xdf3bdd3b
mov dword [esp + 0x10], 0xd3d2d143
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xf8
xor cl, byte [esp + eax]
add cl, 0x28
mov byte [esp + eax], cl
inc eax
cmp eax, 0x14
jne 0x427a50
movzx ecx, word [ebp]
mov eax, edi
test cx, cx
je 0x427a91
lea edx, [ebp + 2]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x427a80
mov word [eax], 0
jmp dword [0x44bfec]

Function at 0x4282e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x21e4
call fcn.0040c830
mov dword [esp + 0x11e4], 0x316c3f50
mov dword [esp + 0x11e8], 0x356b3377
mov dword [esp + 0x11ec], 0x4963376f
mov dword [esp + 0x11f0], 0x4d184b1c
mov dword [esp + 0x11f4], 0x41224f27
mov dword [esp + 0x11f8], 0x45174317
mov dword [esp + 0x11fc], 0x59144703
mov word [esp + 0x1200], 0x5b58
mov dword [esp + 0x1202], 0
mov edx, 0x4d9b8d34
xor eax, eax
mov ecx, 0x4d9b8d36
nop
nop
nop
nop
movzx edi, byte [esp + edx - 0x4d9b7b50]
lea esi, [edx + 1]
mov ebx, esi
and ebx, edi
add ebx, ebx
sub ebx, edi
add ebx, eax
add ebx, 0xb26472ca
lea ebp, [eax + 0x326472ca]
or ebp, ebx
add ebp, ecx
lea ebx, [eax + ebp*2]
add ebx, 0xb26472cb
mov dword [esp], ebx
add ebp, ebp
mov ebx, edx
sub ebx, ebp
and ebx, edi
not edi
and edi, dword [esp]
sub ebx, edi
add bl, 0xf7
mov byte [esp + edx - 0x4d9b7b50], bl
dec eax
inc ecx
mov edx, esi
cmp esi, 0x4d9b8d56
jne 0x428360
lea eax, [esp + 0x30]
lea ebp, [esp + 0x11e4]
push 0
push 0
push 0x20019
push eax
push ebp
call fcn.00445220
add esp, 0x14
shr eax, 0x1f
xor ecx, ecx
jmp dword [eax*4 + 0x44c05c]