Function at 0x42c7b7
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
mov eax, ecx
mov esi, edx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], eax
push edi
test eax, eax
je 0x42ce2d
test esi, esi
je 0x42ce2d
push 0x46
pop eax
xor ebx, ebx
mov dword [ebp - 0x54], 0x129eff49
lea edx, [ebp - 0x78]
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x44]
mov word [ebp - 0x65], 0xcae0
mov word [ebp - 0x75], 0xa90c
mov word [ebp - 0x50], 0x4bab
mov word [ebp - 0x6c], 0x8ce6
mov dword [ebp - 0x6a], 0xcb5ab405
mov word [ebp - 0x5a], 0x3d95
mov word [ebp - 0x78], 0xf716
mov dword [ebp - 0x62], 0xbc28a61f
mov word [ebp - 0x5d], 0x60cc
mov dword [ebp - 0x58], 0xab3a16c4
mov word [ebp - 0x72], 0xc1b5
mov word [ebp - 0x6f], 0xd1b8
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x70], al
mov byte [ebp - 0x73], 0x55
mov byte [ebp - 0x5b], 0xe5
mov byte [ebp - 0x6d], 0x4f
mov byte [ebp - 0x5e], 0x53
mov byte [ebp - 0x66], 0x71
mov byte [ebp - 0x63], 0x69
mov byte [ebp - 0x76], 0x9e
call fcn.0041f005
push eax
lea ecx, [ebp - 0x30]
call fcn.00413c02
lea ecx, [ebp - 0x44]
call fcn.00401dc6
lea edx, [ebp - 0x68]
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x44]
mov word [ebp - 0x68], 0xf617
mov dword [ebp - 0x5e], 0x9def70dc
mov dword [ebp - 0x5a], 0x9e3eaa18
mov dword [ebp - 0x52], 0x4303d315
mov word [ebp - 0x62], 0xc2b6
mov word [ebp - 0x55], 0xc32c
mov word [ebp - 0x65], 0xa80d
mov word [ebp - 0x60], 0xb945
mov byte [ebp - 0x66], 0x91
mov byte [ebp - 0x56], 0xbc
mov byte [ebp - 0x63], 0x56
mov byte [ebp - 0x53], 0x78
call fcn.0042056e
push eax
lea ecx, [ebp - 0x2c]
call fcn.00413c02
lea ecx, [ebp - 0x44]
call fcn.00401dc6
lea eax, [ebp - 8]
mov dword [ebp - 0x28], ebx
push eax
mov word [ebp - 0x69], 0x499
lea edi, [ebp - 0x6c]
mov dword [ebp - 0x62], 0xa27adc3d
mov dword [ebp - 0x55], 0xc1815d97
mov word [ebp - 0x6c], 0x4aa3
mov word [ebp - 0x5e], 0x67c6
mov dword [ebp - 0x67], 0xd13e0aa2
mov dword [ebp - 0x5b], 0xd23e1cba
mov word [ebp - 0x57], 0xfa45
mov byte [ebp - 0x5c], 0x13
mov byte [ebp - 0x6a], 0xe5
mov byte [ebp - 0x63], 0xd
call dword [sym.imp.system.dll_public:_static_class_Ref_class_String____cdecl_String::create_void_]
pop ecx
mov byte [ebp - 1], 0xe5
mov byte [ebp - 0x20], 0x46
mov ecx, dword [ebp - 8]
lea edx, [ebp - 0x44]
push dword [ebp - 0x20]
push edx
mov eax, dword [ecx]
call dword [eax + 0x2c]
push eax
lea ecx, [ebp - 8]
call fcn.00413c02
lea ecx, [ebp - 0x44]
call fcn.00401dc6
mov cl, byte [ebp - 1]
add cl, byte [ebp - 0x24]
inc edi
mov byte [ebp - 1], cl
mov al, byte [edi]
xor al, cl
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], al
jne 0x42c92d
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x28]
call fcn.00413c02
lea ecx, [ebp - 8]
call fcn.00401dc6
call fcn.0042d0be
test al, al
jne 0x42ca37
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x42ca30
push dword [0x46d070]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x42ca30
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 0x34]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x46d070]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call dword [edi + 4]
mov ecx, dword [eax]
push ecx
mov eax, dword [ecx + 4]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x30]
add esi, ecx
mov ecx, esp
push eax
call fcn.00401dde
lea eax, [ebp - 0x40]
push eax
mov eax, dword [esi + 4]
lea ecx, [esi + 4]
call dword [eax + 0x1c]
lea edx, [ebp - 0x44]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp - 0x44]
call fcn.00401dc6
lea ecx, [ebp - 0x40]
call fcn.00401dc6
lea ecx, [ebp - 0x3c]
call fcn.00401dc6
lea ecx, [ebp - 0x34]
call fcn.00401dc6
lea ecx, [ebp - 0x24]
call fcn.00401dc6
push 0x8445
jmp 0x42ca63
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], ebx
call fcn.0042d555
mov dword [ebp - 0x48], eax
test eax, eax
js 0x42ca5e
cmp dword [ebp - 0xc], ebx
je 0x42ca5e
xor ecx, ecx
call fcn.0042d555
mov edi, eax
mov dword [ebp - 0x44], edi
test edi, edi
jns 0x42ca6f
push 0x7d3
call dword [sym.imp.system.dll_public:_static_void___cdecl_Error::set_unsigned_int_]
pop ecx
jmp 0x42ce11
push 0x44f0
call fcn.00418dab
mov ebx, eax
pop ecx
test ebx, ebx
je 0x42ca92
push 0x44f0
push 0
push ebx
call fcn.0043ee16
add esp, 0xc
jmp 0x42ca94
xor ebx, ebx
mov edx, edi
mov ecx, ebx
call fcn.0042d791
test al, al
jne 0x42cac1
push 0x44f0
push ebx
call fcn.00418de2
push 0x7d4
call dword [sym.imp.system.dll_public:_static_void___cdecl_Error::set_unsigned_int_]
add esp, 0xc
xor ebx, ebx
jmp 0x42ce11
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
call dword [0x46d0d4]
cdq
and edx, 7
pop ecx
lea edi, [edx + eax]
mov eax, dword [ebp - 0xc]
sar edi, 3
xor edx, edx
mov ecx, dword [eax + 8]
mov eax, esi
lea ecx, [ecx*2 + 2]
sub edi, ecx
div edi
mov ecx, eax
mov dword [ebp - 8], eax
imul ecx, edi
cmp ecx, esi
jae 0x42cafd
inc eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
call dword [0x46d0d4]
mov dword [ebp - 0x4c], eax
cdq
and edx, 7
lea esi, [edx + eax]
mov eax, dword [ebp + 0xc]
sar esi, 3
mov ecx, esi
mov dword [ebp - 0x10], esi
imul ecx, dword [ebp - 8]
push ecx
mov dword [eax], ecx
call fcn.00418df8
mov ecx, dword [ebp + 8]
push esi
mov dword [ecx], eax
call fcn.00418df8
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x3c]
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x40]
add esp, 0xc
mov dword [ebp - 0x39], 0xdc1a83ed
mov word [ebp - 0x3c], 0xc93a
mov byte [ebp - 0x3a], 0x4c
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
xor eax, eax
mov byte [ebp - 1], al
mov dword [ebp - 0x24], eax
call fcn.0041f0ec
push eax
lea ecx, [ebp - 0x24]
call fcn.00413c02
lea ecx, [ebp - 0x40]
call fcn.00401dc6
mov esi, dword [ebp - 0x24]
mov ecx, esi
push 0
mov eax, dword [esi]
call dword [eax + 0xd4]
and dword [ebp - 0x40], 0
cmp dword [ebp - 8], 0
mov dword [ebp - 0xc], eax
jle 0x42cdc4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x34], eax
cmp eax, edi
jb 0x42cbab
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
push dword [ebp - 0x20]
mov eax, dword [esi]
push dword [ebp - 0x48]
push dword [ebp - 0x44]
push ebx
push dword [ebp - 0x4c]
call dword [eax + 0x60]
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
push eax
push dword [ebp - 0xc]
call fcn.0042e5cd
add esp, 0x20
mov dword [ebp - 0x34], eax
test eax, eax
jne 0x42ccec
mov eax, dword [ebp + 0x10]
push eax
push dword [eax]
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x10]
push dword [ebp - 0x20]
call fcn.0042df89
add esp, 0x18
mov dword [ebp - 0x3c], eax
test eax, eax
jne 0x42cc2b
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x40]
add dword [ebp - 0x18], edi
inc edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
sub eax, edi
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x1c], eax
cmp edx, dword [ebp - 8]
jl 0x42cb9b
jmp 0x42cdc1
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x42cdbd
push dword [0x46d070]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x42cdbd
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 0x1c]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x46d070]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call dword [edi + 4]
push dword [ebp - 0x3c]
push ecx
mov esi, dword [eax]
mov ecx, esp
mov eax, dword [ebp - 0x2c]
mov dword [ecx], eax
test eax, eax
je 0x42cca2
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 4]
lea edx, [ebp - 0x40]
push edx
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.00403d2f
pop ecx
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp - 0x4c]
call fcn.00401dc6
lea ecx, [ebp - 0x48]
call fcn.00401dc6
lea ecx, [ebp - 0x40]
call fcn.00401dc6
lea ecx, [ebp - 0x34]
jmp 0x42cda8
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x42cdbd
push dword [0x46d070]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x42cdbd
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 0x1c]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x46d070]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x3c]
mov ecx, esi
push eax
call dword [edi + 4]
push dword [ebp - 0x34]
push ecx
mov esi, dword [eax]
mov ecx, esp
mov eax, dword [ebp - 0x28]
mov dword [ecx], eax
test eax, eax
je 0x42cd63
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 4]
lea edx, [ebp - 0x40]
push edx
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
mov eax, dword [ecx]
call dword [eax + 0x1c]
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.00403d2f
pop ecx
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp - 0x4c]
call fcn.00401dc6
lea ecx, [ebp - 0x48]
call fcn.00401dc6
lea ecx, [ebp - 0x40]
call fcn.00401dc6
lea ecx, [ebp - 0x3c]
call fcn.00401dc6
lea ecx, [ebp - 0x1c]
call fcn.00401dc6
lea ecx, [ebp - 0x18]
call fcn.00401dc6
mov byte [ebp - 1], 1
mov eax, dword [ebp - 0xc]
push eax
call fcn.00418e2f
cmp byte [ebp - 1], 0
pop ecx
je 0x42cde2
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00418e2f
mov eax, dword [ebp + 0xc]
pop ecx
and dword [eax], 0
push dword [ebp - 0x20]
call fcn.00418e2f
mov edx, dword [ebp - 0x44]
mov ecx, ebx
call fcn.0042daf0
mov dword [esp], 0x44f0
push ebx
call fcn.00418de2
mov bl, byte [ebp - 1]
pop ecx
pop ecx
lea ecx, [ebp - 0x24]
xor bl, 1
call fcn.00401dc6
lea ecx, [ebp - 0x28]
call fcn.00401dc6
lea ecx, [ebp - 0x2c]
call fcn.00401dc6
lea ecx, [ebp - 0x30]
call fcn.00401dc6
mov al, bl
jmp 0x42ce3b
push 0x8445
call dword [sym.imp.system.dll_public:_static_void___cdecl_Error::set_unsigned_int_]
pop ecx
xor al, al
pop edi
pop esi
pop ebx
leave
ret