Function at 0x427e5f
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x450
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x50], 0x63f661f3
mov dword [esp + 0x54], 0x67c765c1
mov dword [esp + 0x58], 0x5b8459c5
mov dword [esp + 0x5c], 0x5fd65df9
mov dword [esp + 0x60], 0x535251f5
mov byte [esp + 0x64], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x50]
lea esi, [eax + 0x18]
and esi, edx
add esi, esi
sub esi, eax
lea edi, [esi + 0xe8]
xor edi, edx
mov ecx, 0x17
sub ecx, esi
and ecx, edx
add ecx, ecx
sub ecx, edi
add cl, 0x88
mov byte [esp + eax + 0x50], cl
mov ecx, eax
and ecx, 1
and eax, 0x1e
mov edx, eax
xor edx, 0xfffffffe
xor eax, 0x1e
or eax, edx
not eax
add eax, ecx
cmp eax, 0x15
jb case.default.0x427e58
lea eax, [esp + 0x50]
lea ecx, [esp + 0x30]
push eax
call fcn.0043a960
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x446ea4]
lea ecx, [esp + 0x30]
push 0x410
call fcn.0043abe0
not eax
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x446eac]
mov dword [esp + 0x50], 0x7aa36845
mov dword [esp + 0x54], 0x707a5d40
mov dword [esp + 0x58], 0x7c454361
mov dword [esp + 0x5c], 0x774e4665
mov dword [esp + 0x60], 0x406b9266
mov dword [esp + 0x64], 0x4f6c966d
mov dword [esp + 0x68], 0x52698e6a
mov dword [esp + 0x6c], 0x568f5473
mov dword [esp + 0x70], 0x86707672
mov dword [esp + 0x74], 0x5e839571
mov dword [esp + 0x78], 0x3b6a8181
mov byte [esp + 0x7c], 0
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ebx
add al, 0x58
xor al, byte [esp + ebx + 0x50]
add al, 0x48
mov byte [esp + ebx + 0x50], al
mov eax, ebx
and eax, 1
xor ebx, 1
lea ebx, [ebx + eax*2]
cmp ebx, 0x2d
jb case.default.0x427f24
lea eax, [esp + 0x44]
lea ecx, [esp + 0x30]
push 0
push 0x2b
lea edx, [esp + 0x58]
push edx
push eax
call fcn.0043b130
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x48]
xor eax, eax
cmp esi, edi
sete al
jmp dword [eax*4 + 0x446eb4]
mov eax, edi
sub eax, esi
sar eax, 2
imul eax, eax, 0x421
push eax
call fcn.004082d0
add esp, 4
jmp dword [0x446ec8]
mov dword [esp + 0x14], 0
lea ecx, [esp + 0x51]
mov dword [esp + 0x40], ecx
xor ecx, ecx
mov dword [esp + 0x24], edi
cmp esi, edi
setne cl
mov dword [esp + 0x20], eax
mov dword [esp + 0xc], eax
jmp dword [ecx*4 + 0x446ecc]
mov esi, dword [esp + 0x28]
add esi, 4
xor eax, eax
cmp esi, dword [esp + 0x24]
setne al
jmp dword [eax*4 + 0x446ecc]
mov dword [esp + 0x28], esi
mov esi, dword [esi]
push 0x400
push 0
lea edi, [esp + 0x58]
push edi
call fcn.00408360
add esp, 0xc
lea eax, [esp + 0x10]
lea ecx, [esp + 0x30]
push eax
push 0x400
push edi
push esi
call fcn.0043b070
cmp eax, 0xc0000000
setae al
cmp dword [esp + 0x10], 0
sete cl
or cl, al
movzx eax, cl
jmp dword [eax*4 + 0x446edc]
mov eax, 1
jmp dword [eax*4 + 0x446ee4]
xor eax, eax
jmp dword [eax*4 + 0x446ee4]
mov byte [esp + 0x44f], 0
movzx eax, byte [esp + 0x50]
xor edi, edi
test al, al
je 0x428021
lea ecx, [esp + 0x50]
cmp al, 0x2e
je 0x42801f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x428010
jmp 0x428021
mov edi, ecx
xor eax, eax
test edi, edi
setne al
jmp dword [eax*4 + 0x446eec]
movzx eax, byte [edi + 1]
inc edi
xor esi, esi
test al, al
je 0x428051
mov ecx, edi
nop
nop
nop
nop
cmp al, 0x2e
je 0x42804f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x428040
jmp 0x428051
mov esi, ecx
xor eax, eax
test esi, esi
setne al
mov dword [esp + 0x18], edi
mov dword [esp + 0x2c], esi
jmp dword [eax*4 + 0x446ef4]
jmp dword [0x446f00]
mov ecx, esi
or ecx, edi
lea edx, [ecx + ecx*2]
shr edx, 2
movzx eax, byte [edi + ecx - 1]
cmp eax, 0x3d
je 0x428086
cmp eax, 0x2e
jne 0x428087
dec edx
movzx eax, byte [edi + ecx - 2]
cmp eax, 0x3d
mov dword [esp + 4], ecx
je 0x42809a
cmp eax, 0x2e
jne 0x42809b
dec edx
mov dword [esp], 0
mov ebp, 2
mov dword [esp + 0x1c], edx
push edx
call fcn.004082d0
add esp, 4
mov dword [esp + 8], eax
mov esi, dword [esp + 4]
jmp 0x4280d9
mov edi, edx
mov dword [esp], edi
lea eax, [ebp + 4]
add ebp, 2
cmp ebp, esi
mov ebp, eax
mov edi, dword [esp + 0x18]
jae 0x4281a1
movzx eax, byte [edi + ebp - 2]
push eax
call fcn.0041efc0
add esp, 4
mov bh, al
movzx eax, byte [edi + ebp - 1]
push eax
call fcn.0041efc0
add esp, 4
shl bh, 2
mov ah, al
shr ah, 4
and ah, 3
or ah, bh
mov ebx, dword [esp]
mov ecx, ebx
and ecx, 1
mov edx, ebx
xor edx, 1
lea edx, [edx + ecx*2]
mov ecx, dword [esp + 8]
mov byte [ecx + ebx], ah
cmp ebp, esi
jae 0x4280c0
mov ebx, eax
mov dword [esp], edx
movzx eax, byte [edi + ebp]
push eax
call fcn.0041efc0
add esp, 4
cmp al, 0x40
jne 0x428140
mov edi, dword [esp]
mov esi, dword [esp + 4]
jmp 0x4280c2
shl bl, 4
mov ecx, eax
shr cl, 2
and cl, 0xf
or cl, bl
mov esi, dword [esp]
lea edi, [esi + 1]
mov edx, dword [esp + 8]
mov byte [edx + esi], cl
lea ecx, [ebp + 1]
mov esi, dword [esp + 4]
cmp ecx, esi
jae 0x4280c2
mov ebx, eax
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + ebp + 1]
push eax
call fcn.0041efc0
mov esi, dword [esp + 8]
add esp, 4
cmp al, 0x40
je 0x4280c2
shl bl, 6
add al, bl
mov ecx, dword [esp + 8]
mov edi, dword [esp]
mov byte [ecx + edi + 1], al
add edi, 2
jmp 0x4280c2
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 8]
mov byte [ecx + eax], 0
push ecx
call fcn.00401000
add esp, 4
mov esi, dword [esp + 0x2c]
jmp case.0x428060.3
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 8]
mov byte [ebx + eax], 0
push ebx
call fcn.00401000
add esp, 4
mov esi, dword [esp + 0x2c]
jmp dword [0x446f04]
mov ecx, esi
sub ecx, edi
lea edx, [ecx + ecx*2]
shr edx, 2
movzx eax, byte [esi - 1]
cmp eax, 0x3d
je 0x4281f7
cmp eax, 0x2e
jne 0x4281f8
dec edx
movzx eax, byte [edi + ecx - 2]
cmp eax, 0x3d
mov dword [esp + 4], ecx
je 0x42820b
cmp eax, 0x2e
jne 0x42820c
dec edx
mov dword [esp + 0x1c], edx
lea eax, [edx + 1]
push eax
call fcn.004082d0
add esp, 4
mov dword [esp + 8], eax
cmp esi, edi
mov ebp, dword [esp + 4]
je 0x4281c0
mov dword [esp], 0
mov esi, 2
jmp 0x428259
mov edi, edx
mov dword [esp], edi
lea eax, [esi + 4]
add esi, 2
cmp esi, ebp
mov esi, eax
mov edi, dword [esp + 0x18]
jae 0x4281c0
movzx eax, byte [edi + esi - 2]
push eax
call fcn.0041efc0
add esp, 4
mov bh, al
movzx eax, byte [edi + esi - 1]
push eax
call fcn.0041efc0
add esp, 4
shl bh, 2
mov ah, al
shr ah, 4
and ah, 3
or ah, bh
mov ebx, dword [esp]
mov ecx, ebx
and ecx, 1
mov edx, ebx
xor edx, 1
lea edx, [edx + ecx*2]
mov ecx, dword [esp + 8]
mov byte [ecx + ebx], ah
cmp esi, ebp
jae 0x428240
mov ebx, eax
mov dword [esp], edx
movzx eax, byte [edi + esi]
push eax
call fcn.0041efc0
add esp, 4
cmp al, 0x40
jne 0x4282c0
mov edi, dword [esp]
mov ebp, dword [esp + 4]
jmp 0x428242
shl bl, 4
mov ecx, eax
shr cl, 2
and cl, 0xf
or cl, bl
mov ebx, dword [esp]
lea edi, [ebx + 1]
mov edx, dword [esp + 8]
mov byte [edx + ebx], cl
lea ecx, [esi + 1]
mov ebp, dword [esp + 4]
cmp ecx, ebp
jae 0x428242
mov ebx, eax
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + esi + 1]
push eax
call fcn.0041efc0
mov ebp, dword [esp + 8]
add esp, 4
cmp al, 0x40
je 0x428242
shl bl, 6
add al, bl
mov ecx, dword [esp + 8]
mov edi, dword [esp]
mov byte [ecx + edi + 1], al
add edi, 2
jmp 0x428242
jmp dword [0x446f0c]
push ebx
mov esi, eax
call fcn.004082e0
mov eax, esi
add esp, 4
mov esi, eax
push eax
call fcn.00401970
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x446f14]
mov ecx, esi
jmp 0x428409
mov dword [esp + 0x10], 0x97081417
xor ecx, ecx
nop
nop
mov edx, ecx
add dl, 0xa6
xor dl, byte [esp + ecx + 0x10]
add dl, 0xc2
mov byte [esp + ecx + 0x10], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 4
jb case.default.0x428395
lea ecx, [esp + 0x10]
push ecx
push eax
call fcn.004018c0
add esp, 8
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x446f1c]
mov ecx, esi
mov esi, dword [esp + 0xc]
jmp 0x4283d9
movzx edx, byte [eax]
test dl, dl
mov ecx, esi
je 0x4283cd
inc eax
mov esi, dword [esp + 0xc]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], dl
inc esi
movzx edx, byte [eax]
inc eax
test dl, dl
jne 0x4283c0
jmp 0x4283d1
mov esi, dword [esp + 0xc]
mov word [esi], 0x203a
add esi, 2
movzx eax, byte [esp + 0x50]
test al, al
je 0x4283fb
mov edx, dword [esp + 0x40]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], al
inc esi
movzx eax, byte [edx]
inc edx
test al, al
jne 0x4283f0
mov byte [esi], 0xa
inc esi
mov dword [esp + 0xc], esi
mov al, 1
mov dword [esp + 0x14], eax
push ecx
call fcn.00401be0
add esp, 4
mov esi, dword [esp + 0x28]
add esi, 4
xor eax, eax
cmp esi, dword [esp + 0x24]
setne al
jmp dword [eax*4 + 0x446ecc]
mov eax, dword [esp + 0x14]
and al, 1
movzx eax, al
jmp dword [eax*4 + 0x446ed4]
mov esi, dword [esp + 0x20]
jmp dword [0x446f24]
xor ebx, ebx
test esi, esi
jne 0x42851c
jmp case.0x427e58.1
mov eax, dword [esp + 0xc]
mov byte [eax], 0
mov dword [esp + 0x50], 0x6f727141
mov dword [esp + 0x54], 0x7367666d
mov dword [esp + 0x58], 0x78646661
mov dword [esp + 0x5c], 0x6a7a5e23
mov dword [esp + 0x60], 0x473d7c71
mov dword [esp + 0x64], 0x79737e7b
mov dword [esp + 0x68], 0x636e376b
mov dword [esp + 0x6c], 0x1d68
mov byte [esp + 0x70], 0
xor eax, eax
movzx edx, byte [esp + eax + 0x50]
mov esi, eax
and esi, edx
mov ecx, eax
xor ecx, 0x80
add ecx, edx
add esi, esi
sub ecx, esi
add cl, 0x80
mov byte [esp + eax + 0x50], cl
inc eax
cmp eax, 0x21
jne 0x4284a0
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0xc]
sub edx, esi
lea eax, [esp + 0x50]
mov ecx, dword [esp + 0x464]
push edx
push esi
push eax
call fcn.00409070
mov dword [esp + 0x14], eax
jmp dword [0x446f24]
jmp dword [0x446f30]
push esi
call fcn.004082e0
add esp, 4
push esi
call fcn.004082e0
add esp, 4
jmp dword [0x446f34]
mov ebx, dword [esp + 0x14]
and bl, 1
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x48]
test esi, esi
je case.0x427e58.1
cmp esi, edi
je case.0x427e58.1
push esi
call fcn.004082e0
add esp, 4
lea ecx, [esp + 0x30]
call fcn.0043ad10
mov eax, ebx
add esp, 0x450
pop esi
pop edi
pop ebx
pop ebp
ret