Function at 0x4284b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x38
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xf00f0e0d
mov word [esp + 0x1c], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 5
ja 0x42852e
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x18]
mov edx, eax
xor edx, 0x277d557d
and eax, 0x277d557d
lea edx, [edx + eax*2]
mov eax, edx
and eax, ecx
xor edx, ecx
lea ecx, [edx + eax*2]
mov edx, ecx
not edx
and edx, eax
add edx, eax
not eax
and eax, ecx
sub eax, edx
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0x8f
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 6
jb 0x4284e0
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4505bc]
test ecx, ecx
je 0x428584
xor edx, edx
mov esi, dword [0x4505c0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xcecd21fd
je 0x428560
inc edx
cmp ecx, edx
jne 0x428550
jmp 0x428584
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x428584
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 5
push 4
push dword [0x4505c4]
push ecx
call fcn.004403a0
add esp, 0x1c
cmp eax, 0xc0000004
jne 0x428640
push dword [esp + 0x14]
call fcn.0043d560
add esp, 4
mov ebp, eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18], 0xf00f0e0d
mov word [esp + 0x1c], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 5
ja 0x42860e
nop
mov eax, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x18]
mov esi, eax
xor esi, 0x277d557d
and eax, 0x277d557d
lea esi, [esi + eax*2]
mov eax, esi
and eax, edx
xor esi, edx
lea edx, [esi + eax*2]
mov esi, edx
not esi
and esi, eax
add esi, eax
not eax
and eax, edx
sub eax, esi
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0x8f
mov edx, dword [esp]
mov byte [esp + edx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 6
jb 0x4285c0
mov eax, dword [esp + 0x18]
mov edx, dword [0x4505bc]
test edx, edx
je 0x428666
xor esi, esi
mov edi, dword [0x4505c0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xcecd21fd
je 0x428647
inc esi
cmp edx, esi
jne 0x428630
jmp 0x428666
xor ebx, ebx
jmp 0x428950
mov edx, dword [edi + esi*8 + 4]
cmp edx, eax
je 0x428666
push 0
push ecx
push ebp
push 5
push 4
push dword [0x4505c4]
push edx
call fcn.004403a0
add esp, 0x1c
xor ebx, ebx
test eax, eax
js 0x428947
mov edi, dword [ebp]
mov eax, edi
mov ecx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea edx, [ecx + eax]
mov eax, dword [ecx + eax]
dec ebx
mov ecx, edx
test eax, eax
jne 0x428680
lea eax, [ebx - 1]
and eax, 0x104
neg ebx
mov ecx, ebx
and ecx, 0xfffffefb
imul ecx, eax
mov eax, ebx
and eax, 0x104
or ebx, 0x104
imul ebx, eax
add ebx, ecx
mov dword [esp + 0x10], ebp
jns 0x4286c1
mov ebx, 0xffffffff
jmp 0x4286c3
add ebx, ebx
push ebx
call fcn.0040c640
add esp, 4
mov ebp, eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x10]
jmp 0x4286f2
mov esi, ebp
add eax, edi
lea ebp, [esi + 2]
mov word [esi], 0xa
mov edi, dword [eax]
test edi, edi
je 0x428723
mov ecx, dword [eax + edi + 0x3c]
movzx edx, word [ecx]
test dx, dx
je 0x4286e0
add ecx, 2
mov esi, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], dx
add esi, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x428710
jmp 0x4286e2
xor ebx, ebx
mov eax, dword [esp + 4]
cmp ebp, eax
je 0x42893a
mov word [ebp], 0
movzx ecx, word [eax]
test cx, cx
je 0x428784
xor ebx, ebx
mov eax, dword [esp + 4]
jmp 0x42875e
add ebx, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
je 0x428784
cmp eax, ebp
jae 0x428784
movzx edi, cx
cmp edi, 0x800
mov ecx, 3
sbb ecx, 0
mov edx, 1
cmp edi, 0x80
jb 0x428750
mov edx, ecx
jmp 0x428750
lea eax, [ebx + 1]
mov dword [esp + 0x2c], eax
push eax
call fcn.0040c640
add esp, 4
mov edx, eax
mov dword [esp + 0xc], eax
test ebx, ebx
jle 0x428885
mov edx, dword [esp + 0xc]
cmp dword [esp + 4], ebp
jae 0x428885
mov edx, dword [esp + 0xc]
lea eax, [edx + ebx]
mov dword [esp + 0x34], eax
add dword [esp + 0x2c], edx
mov ebp, dword [esp + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [ebp]
test cx, cx
je 0x428885
cmp cx, 0x7f
ja 0x4287f0
mov byte [edx], cl
mov edi, 1
jmp 0x428870
mov eax, edx
not eax
add eax, dword [esp + 0x2c]
movzx edi, cx
cmp eax, 2
jb 0x428830
cmp edi, 0x7ff
ja 0x428830
mov eax, ecx
shr eax, 6
add al, 0xc0
mov byte [edx], al
and cl, 0x3f
or cl, 0x80
mov byte [edx + 1], cl
mov edi, 2
jmp 0x428870
mov dword [esp + 0x30], edi
xor edi, edi
cmp eax, 3
jb 0x428870
mov edi, dword [esp + 0x30]
mov eax, edi
shr eax, 0xc
or al, 0xe0
mov byte [edx], al
mov eax, edi
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [edx + 1], al
and cl, 0x3f
or cl, 0x80
mov byte [edx + 2], cl
mov edi, 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add edx, edi
cmp edx, dword [esp + 0x34]
jae 0x428885
lea eax, [ebp + 2]
cmp ebp, esi
mov ebp, eax
jb 0x4287d0
mov byte [edx], 0
mov dword [esp + 0x18], 0x50454360
mov dword [esp + 0x1c], 0x524d4e51
mov dword [esp + 0x20], 0x43460f4b
mov word [esp + 0x24], 0x4538
mov dword [esp + 0x26], 0
mov byte [esp + 0x2a], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x12
ja 0x428911
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x18]
mov edx, eax
xor edx, 0xdb3bf1b4
and eax, 0xdb3bf1b4
lea eax, [edx + eax*2]
mov edx, eax
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0x7c
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x13
jb 0x4288d0
lea eax, [esp + 0x18]
mov ecx, dword [esp + 0x4c]
push ebx
mov esi, dword [esp + 0x10]
push esi
push eax
call fcn.0040d160
mov ebx, eax
push esi
call fcn.0040c650
add esp, 4
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 4]
jmp 0x42893e
mov ebp, dword [esp + 0x10]
push eax
call fcn.0040c650
add esp, 4
push ebp
call fcn.0043d5f0
add esp, 4
mov eax, ebx
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret