Function at 0x428f20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44390c
mov eax, dword fs:[0]
push eax
sub esp, 0x1ec
mov eax, dword [0x4511b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push str.XLD____begin.
call fcn.00404f90
add esp, 4
call fcn.00428e20
test eax, eax
je 0x428f84
push str.XLD____exist_another_instance
call fcn.00404f90
add esp, 4
jmp 0x429430
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.004051a0
add esp, 4
call fcn.004232e0
mov ecx, eax
call fcn.004287e0
push str.begin
push str.start
push 0x4466be
push 0x448df0
push 0
call fcn.004232e0
mov ecx, eax
call fcn.004289e0
mov byte [ebp - 0x11c], 0
push 0x103
push 0
lea eax, [ebp - 0x11b]
push eax
call fcn.0042a550
add esp, 0xc
push 0x104
lea eax, [ebp - 0x11c]
push eax
push 0x77
call fcn.00405b30
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x11c]
push eax
call fcn.00405b70
add esp, 4
test eax, eax
je 0x42903f
push str.XLD____empty_main_config_url.
call fcn.00404f90
add esp, 4
push str.empty_main_config_url
push 0x4466be
push 0x4466be
push 0x448de8
push 0
call fcn.004232e0
mov ecx, eax
call fcn.004289e0
jmp 0x429430
push 0x4466be
lea ecx, [ebp - 0x138]
call fcn.00405ff0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call fcn.00405bd0
add esp, 8
test eax, eax
jne 0x4290b6
push str.XLD____get_main_config_failed.
call fcn.00404f90
add esp, 4
push str.get_main_config_failed
push 0x4466be
push 0x4466be
push 0x448de8
push 0
call fcn.004232e0
mov ecx, eax
call fcn.004289e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00406130
jmp 0x429430
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x140], 0
mov byte [ebp - 0x154], 0x2a
mov byte [ebp - 0x153], 0x4e
mov byte [ebp - 0x152], 0x59
mov byte [ebp - 0x151], 0x4b
mov byte [ebp - 0x150], 0x37
mov byte [ebp - 0x14f], 0x43
mov byte [ebp - 0x14e], 0x58
mov byte [ebp - 0x14d], 0x43
mov byte [ebp - 0x14c], 0x4b
mov byte [ebp - 0x14b], 0x4d
mov byte [ebp - 0x14a], 0x33
mov byte [ebp - 0x149], 0x69
mov byte [ebp - 0x148], 0x53
mov byte [ebp - 0x147], 0x63
mov byte [ebp - 0x146], 0x78
mov byte [ebp - 0x145], 0x21
mov byte [ebp - 0x144], 0
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0x13c]
push edx
lea ecx, [ebp - 0x138]
call fcn.00407b20
push eax
lea ecx, [ebp - 0x138]
call fcn.004063b0
push eax
call fcn.00404ac0
add esp, 0x14
cmp dword [ebp - 0x13c], 0
je 0x429188
cmp dword [ebp - 0x140], 0
jne 0x4291ce
push str.XLD____invalid_main_config
call fcn.00404f90
add esp, 4
push str.invalid_main_config
push 0x4466be
push 0x4466be
push 0x448de8
push 0
call fcn.004232e0
mov ecx, eax
call fcn.004289e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00406130
jmp 0x429430
push 0x4466be
lea ecx, [ebp - 0x170]
call fcn.00405ff0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0x13c]
push ecx
call fcn.0041bec0
add esp, 8
movzx edx, al
test edx, edx
je 0x429273
mov eax, dword [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00405ff0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1f0]
push ecx
lea edx, [ebp - 0x1d4]
push edx
call fcn.0041be00
add esp, 8
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x1f8]
push ecx
lea ecx, [ebp - 0x170]
call fcn.00406100
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1d4]
call fcn.00406130
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f0]
call fcn.00406130
jmp 0x429285
mov eax, dword [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x170]
call fcn.004061c0
cmp dword [ebp - 0x13c], 0
je 0x42929d
mov eax, dword [ebp - 0x13c]
push eax
call fcn.0042a511
add esp, 4
mov dword [ebp - 0x13c], 0
lea ecx, [ebp - 0x170]
call fcn.004063b0
push eax
call sym.XLoader.exe__cJSON_Parse_4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4292d2
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0xc]
and ecx, 0xff
cmp ecx, 0x40
je 0x429327
push str.XLD____Invalid_main_config.
call fcn.00404f90
add esp, 4
push str.Invalid_main_config
push 0x4466be
push 0x4466be
push 0x448de8
push 0
call fcn.004232e0
mov ecx, eax
call fcn.004289e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x170]
call fcn.00406130
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00406130
jmp 0x429430
push str.get_main_config_success
push 0x4466be
push 0x4466be
push 0x448dec
push 0
call fcn.004232e0
mov ecx, eax
call fcn.004289e0
mov eax, dword [ebp - 0x18]
push eax
call fcn.00429810
mov ecx, eax
call fcn.00425dd0
test eax, eax
jne 0x429390
push str.XLD____init_failed.
call fcn.00404f90
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x170]
call fcn.00406130
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00406130
jmp 0x429430
push str.XLD____init_ok.
call fcn.00404f90
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
push eax
call fcn.00429810
mov ecx, eax
call fcn.004273e0
test eax, eax
jne 0x4293db
push str.XLD____business_done.
call fcn.00404f90
add esp, 4
jmp 0x4293fb
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x178], eax
mov eax, 1
test eax, eax
jne 0x4293b5
call fcn.00429810
mov ecx, eax
call fcn.00426240
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x170]
call fcn.00406130
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00406130
xor eax, eax
jne 0x428f69
cmp dword [ebp - 0x18], 0
je 0x42943f
mov eax, dword [ebp - 0x18]
push eax
call sym.XLoader.exe__cJSON_Delete_4
push str.XLD____exit.
call fcn.00404f90
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042a65e
mov esp, ebp
pop ebp
ret 4