Function at 0x42b120
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov dword [esp + 0x10], 0
mov dword [esp], 0xd8dbdac5
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov eax, 0x50
mov ecx, 0xb0
nop
nop
nop
nop
mov esi, ecx
and esi, 0x8a
mov edx, ecx
or edx, 0x75
add edx, eax
or edx, esi
xor dl, byte [esp + eax - 0x50]
xor dl, 0x8a
add dl, 0x75
mov byte [esp + eax - 0x50], dl
inc eax
dec ecx
cmp eax, 0x57
jne 0x42b150
mov eax, dword [esp]
mov ecx, dword [0x450710]
test ecx, ecx
je 0x42b1c4
xor edx, edx
mov esi, dword [0x450714]
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x9abdb589
je 0x42b1a0
inc edx
cmp ecx, edx
jne 0x42b190
jmp 0x42b1c4
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x42b1c4
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 5
push 4
push dword [0x450718]
push ecx
call fcn.00441310
add esp, 0x1c
mov dword [esp], 0xa3e2e1e4
mov dword [esp + 4], 0
mov ecx, 0x54b5e4a8
mov edx, 0xab4a1b58
nop
nop
nop
movzx esi, byte [esp + ecx - 0x54b5e4a8]
mov ebx, ecx
and ebx, esi
mov edi, ebx
and edi, 2
mov ebp, ebx
or ebx, 2
imul ebx, edi
xor edi, 2
and ebp, 0xffffffad
imul ebp, edi
add ebx, ebp
sub ebx, esi
add ebx, edx
mov esi, ebx
and esi, 0x49
add esi, esi
xor ebx, 0xb6
sub ebx, esi
add bl, 2
mov byte [esp + ecx - 0x54b5e4a8], bl
inc ecx
dec edx
cmp ecx, 0x54b5e4b0
jne 0x42b1e0
cmp eax, dword [esp]
jne 0x42b2c0
push dword [esp + 0x10]
call fcn.0043e320
add esp, 4
mov edi, eax
mov ecx, dword [esp + 0x10]
mov dword [esp], 0xd8dbdac5
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov eax, 0x50
mov edx, 0xb0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 0x8a
mov ebx, edx
or ebx, 0x75
add ebx, eax
or ebx, esi
xor bl, byte [esp + eax - 0x50]
xor bl, 0x8a
add bl, 0x75
mov byte [esp + eax - 0x50], bl
inc eax
dec edx
cmp eax, 0x57
jne 0x42b270
mov eax, dword [esp]
mov edx, dword [0x450710]
test edx, edx
je 0x42b2e6
xor esi, esi
mov ebx, dword [0x450714]
nop
nop
nop
nop
nop
cmp dword [ebx + esi*8], 0x9abdb589
je 0x42b2c7
inc esi
cmp edx, esi
jne 0x42b2b0
jmp 0x42b2e6
xor ebx, ebx
jmp 0x42b487
mov edx, dword [ebx + esi*8 + 4]
cmp edx, eax
je 0x42b2e6
push 0
push ecx
push edi
push 5
push 4
push dword [0x450718]
push edx
call fcn.00441310
add esp, 0x1c
xor ebx, ebx
test eax, eax
js 0x42b47e
mov esi, dword [edi]
mov eax, esi
mov ecx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [ecx + eax]
mov eax, dword [ecx + eax]
dec ebx
mov ecx, edx
test eax, eax
jne 0x42b300
lea eax, [ebx - 1]
and eax, 0x104
neg ebx
mov ecx, ebx
and ecx, 0xfffffefb
imul ecx, eax
mov eax, ebx
and eax, 0x104
or ebx, 0x104
imul ebx, eax
add ebx, ecx
jns 0x42b33d
mov ebx, 0xffffffff
jmp 0x42b33f
add ebx, ebx
push ebx
call fcn.0040cd40
add esp, 4
mov ebp, eax
mov ecx, edi
jmp 0x42b360
add ecx, esi
mov word [eax], 0xa
add eax, 2
mov esi, dword [ecx]
test esi, esi
je 0x42b383
mov edx, dword [ecx + esi + 0x3c]
movzx ebx, word [edx]
test bx, bx
je 0x42b350
add edx, 2
nop
mov word [eax], bx
add eax, 2
movzx ebx, word [edx]
add edx, 2
test bx, bx
jne 0x42b370
jmp 0x42b350
xor ebx, ebx
cmp eax, ebp
je 0x42b475
mov word [eax], 0
movzx ecx, word [ebp]
test cx, cx
je 0x42b3eb
mov eax, ebp
add eax, 2
xor ebx, ebx
jmp 0x42b3bc
inc ebx
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x42b3eb
cmp cx, 0x7f
jbe 0x42b3b0
movzx edx, cx
cmp edx, 0x7ff
ja 0x42b3e0
add ebx, 2
jmp 0x42b3b1
cmp cx, 0xffff
je 0x42b3b1
add ebx, 3
jmp 0x42b3b1
mov dword [esp + 0x14], edi
mov eax, ebx
and eax, 1
mov ecx, ebx
xor ecx, 1
lea edi, [ecx + eax*2]
push edi
call fcn.0040cd40
add esp, 4
mov esi, eax
push ebp
push edi
push eax
call fcn.0042afb0
add esp, 0xc
mov dword [esp], 0x5c2b2d74
mov dword [esp + 4], 0x262b2a23
mov dword [esp + 8], 0x39266129
mov dword [esp + 0xc], 0xb724
xor eax, eax
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
xor dl, 0x5f
add dl, al
xor dl, byte [esp + ecx]
add dl, 0x25
mov byte [esp + ecx], dl
inc ecx
add al, 2
cmp ecx, 0x10
jne 0x42b440
mov eax, esp
mov ecx, dword [esp + 0x2c]
push ebx
push esi
push eax
call fcn.0040da00
mov ebx, eax
push esi
call fcn.0040cd50
add esp, 4
mov edi, dword [esp + 0x14]
push ebp
call fcn.0040cd50
add esp, 4
push edi
call fcn.0043e380
add esp, 4
mov eax, ebx
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret