Function at 0x4235f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
cmp byte [esp + 0x64], 0
je 0x423640
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 0x60]
mov ebp, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
cmp word [ebp + eax + 2], 0
lea eax, [eax + 2]
jne 0x423610
mov ecx, 0xfffffffe
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x423620
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x1f
test edx, edx
jns 0x423647
mov eax, 0xffffffff
jmp 0x423650
xor ebx, ebx
jmp 0x4238d7
add eax, ecx
lea eax, [eax*2 + 0x3e]
push eax
call fcn.00408000
add esp, 4
movzx ecx, word [ebp]
mov edx, eax
test cx, cx
je 0x423682
add ebp, 2
mov edx, eax
nop
nop
nop
nop
nop
nop
nop
mov word [edx], cx
add edx, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x423670
mov dword [esp + 0x3c], eax
mov eax, edx
mov word [edx], 0x5c
mov dword [esp], 0x27b927a8
mov dword [esp + 4], 0x26542659
mov dword [esp + 8], 0x26552659
mov dword [esp + 0xc], 0x264f27a9
mov dword [esp + 0x10], 0x2649265d
mov dword [esp + 0x14], 0x27a3265b
mov dword [esp + 0x18], 0x266f2789
mov dword [esp + 0x1c], 0x26662666
mov dword [esp + 0x20], 0x2660267c
mov dword [esp + 0x24], 0x279b2662
mov dword [esp + 0x28], 0x26602784
mov dword [esp + 0x2c], 0x266e267c
mov dword [esp + 0x30], 0x2662278f
mov dword [esp + 0x34], 0x26622663
mov dword [esp + 0x38], 0x27d1278c
xor edi, edi
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebp, word [esp + esi*2]
mov ecx, edi
and ecx, 0x28
mov edx, esi
xor edx, ecx
and ecx, esi
xor edx, 0x354d4d54
lea ecx, [edx + ecx*2]
xor ecx, ebp
lea ebp, [ecx + 0x5595955f]
lea edx, [ecx*2 - 0x54d4d542]
and edx, 2
and ecx, 1
mov ebx, edx
and ebx, ebp
and ebp, 0xfffe
or ebp, ecx
or ebp, edx
add ebp, ebx
mov word [esp + esi*2], bp
inc esi
add edi, 2
cmp esi, 0x1e
jne 0x423710
mov esi, eax
add esi, 2
mov eax, dword [esp + 0x60]
movzx ecx, word [eax]
test cx, cx
je 0x423781
add eax, 2
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x423770
mov word [esi], 0
movzx ecx, word [esp]
test cx, cx
je 0x4237b1
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4237a0
mov word [esi], 0
mov dword [esp + 0x40], 0x86c186c4
mov dword [esp + 0x44], 0x86bc86b5
mov dword [esp + 0x48], 0x871386be
lea eax, [esp + 0x40]
mov ecx, 0x59253621
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [eax]
mov esi, ecx
or esi, edx
lea edi, [ecx - 0x59250000]
and edi, edx
not esi
or esi, edi
mov edx, esi
and edx, 0x310f
xor esi, 0xb10f
lea edx, [esi + edx*2]
inc edx
mov word [eax], dx
add eax, 2
dec ecx
cmp ecx, 0x5925361b
jne 0x4237e0
mov dword [esp], 0x4fec4f81
mov dword [esp + 4], 0x4fe34fe7
mov dword [esp + 8], 0x4fbe4fe3
mov dword [esp + 0xc], 0x4ffa4f85
mov dword [esp + 0x10], 0x4ff14ffa
mov dword [esp + 0x14], 0x4fe04ff9
mov dword [esp + 0x18], 0x4fb94feb
mov dword [esp + 0x1c], 0x4ffa4f97
mov dword [esp + 0x20], 0x4ff14ff5
mov word [esp + 0x24], 0x4f5e
xor eax, eax
mov ecx, 0x573841d3
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [esp + eax*2]
mov ebx, ecx
or ebx, esi
lea edx, [eax - 0x573841d4]
mov edi, edx
or edi, esi
xor edx, esi
add edx, esi
sub edx, edi
mov esi, edx
or esi, ebx
xor edx, ebx
add edx, ebx
not edx
add edx, esi
add edx, 0xea0
mov word [esp + eax*2], dx
inc eax
dec ecx
cmp eax, 0x13
jne 0x423870
lea eax, [esp + 0x40]
mov ecx, esp
push 0
push 4
push 0xc00000
push eax
mov esi, dword [esp + 0x4c]
push esi
push ecx
mov eax, dword [esp + 0x84]
push dword [eax]
call fcn.0041f650
add esp, 0x1c
mov ebx, eax
push esi
call fcn.00408010
add esp, 4
mov eax, ebx
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10