Function at 0x42b0b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x458
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x54], 0xc15ac759
mov dword [esp + 0x58], 0xcda1c3af
mov dword [esp + 0x5c], 0xc998cf5b
mov dword [esp + 0x60], 0xf552cba7
mov dword [esp + 0x64], 0xf1f6f79b
mov byte [esp + 0x68], 0
xor eax, eax
xor ecx, ecx
mov esi, eax
and esi, 0x22
mov edx, ecx
xor edx, 0x51
add edx, esi
xor dl, byte [esp + ecx + 0x54]
add dl, 0x6b
mov byte [esp + ecx + 0x54], dl
inc ecx
add eax, 2
cmp ecx, 0x15
jne case.default.0x42b143
lea esi, [esp + 0x54]
lea ecx, [esp + 0x34]
push esi
call fcn.0043f3a0
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x44dad4]
lea ecx, [esp + 0x34]
push 0x410
call fcn.0043f5a0
not eax
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x44dadc]
jmp dword [0x44dae4]
add edi, 8
xor eax, eax
mov esi, dword [esp + 0x18]
cmp edi, esi
setne al
jmp dword [eax*4 + 0x44db0c]
mov dword [esp + 8], ebx
mov esi, dword [edi]
mov dword [esp + 0xc], edi
mov edi, dword [edi + 4]
push 0x400
push 0
lea ebx, [esp + 0x5c]
push ebx
call fcn.0040ca90
add esp, 0xc
lea eax, [esp + 0x20]
lea ecx, [esp + 0x34]
push eax
push 0
push 0x400
push ebx
push edi
push esi
call fcn.0043ffa0
cmp eax, 0xc0000000
setae al
mov ecx, dword [esp + 0x20]
or ecx, dword [esp + 0x24]
sete cl
or cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44db1c]
mov eax, 1
mov edi, dword [esp + 0xc]
mov ebx, dword [esp + 8]
jmp dword [eax*4 + 0x44db24]
xor eax, eax
mov edi, dword [esp + 0xc]
mov ebx, dword [esp + 8]
jmp dword [eax*4 + 0x44db24]
mov byte [esp + 0x453], 0
movzx eax, byte [esp + 0x54]
xor edx, edx
test al, al
je 0x42b241
lea ecx, [esp + 0x54]
nop
nop
nop
nop
nop
nop
nop
nop
cmp al, 0x2e
je 0x42b23f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x42b230
jmp 0x42b241
mov edx, ecx
xor eax, eax
test edx, edx
setne al
jmp dword [eax*4 + 0x44db2c]
movzx eax, byte [edx + 1]
inc edx
xor esi, esi
test al, al
mov dword [esp + 0x10], edx
je 0x42b271
mov ecx, edx
cmp al, 0x2e
je 0x42b26f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x42b260
jmp 0x42b271
mov esi, ecx
xor eax, eax
test esi, esi
setne al
mov ecx, dword [esp + 0x10]
jmp dword [eax*4 + 0x44db34]
mov edx, esi
sub edx, ecx
lea ecx, [edx + edx*2]
shr ecx, 2
movzx eax, byte [esi - 1]
cmp eax, 0x3d
je 0x42b29b
cmp eax, 0x2e
jne 0x42b29c
dec ecx
mov eax, dword [esp + 0x10]
movzx eax, byte [eax + edx - 2]
cmp eax, 0x3d
mov dword [esp + 0x2c], edx
je 0x42b2b3
cmp eax, 0x2e
jne 0x42b2be
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
dec ecx
jmp 0x42b2c6
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x44], ecx
lea eax, [ecx + 1]
push eax
call fcn.0040ca00
add esp, 4
mov dword [esp + 0x1c], eax
cmp esi, dword [esp + 0x10]
je 0x42b3d8
xor ebx, ebx
mov esi, 2
jmp 0x42b300
lea eax, [esi + 4]
add esi, 2
cmp esi, edx
mov esi, eax
jae 0x42b3d8
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10]
movzx eax, byte [edi + esi - 2]
push eax
call fcn.00422510
add esp, 4
mov ebx, eax
movzx eax, byte [edi + esi - 1]
push eax
call fcn.00422510
add esp, 4
shl bl, 2
mov ecx, eax
shr cl, 4
and cl, 3
or cl, bl
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov byte [edx + ebx], cl
mov ecx, dword [esp + 0x14]
lea ebx, [ecx + 1]
mov edx, dword [esp + 0x2c]
cmp esi, edx
jae 0x42b2f0
mov byte [esp + 7], al
mov eax, dword [esp + 0x10]
movzx eax, byte [eax + esi]
push eax
call fcn.00422510
mov edx, dword [esp + 0x30]
add esp, 4
cmp al, 0x40
je 0x42b2f0
mov ch, al
movzx eax, byte [esp + 7]
shl al, 4
mov cl, ch
shr cl, 2
and cl, 0xf
or cl, al
mov edi, dword [esp + 0x14]
lea ebx, [edi + 2]
mov eax, dword [esp + 0x1c]
mov byte [eax + edi + 1], cl
lea eax, [esi + 1]
cmp eax, edx
jae 0x42b2f0
mov eax, dword [esp + 0x10]
movzx eax, byte [eax + esi + 1]
push eax
mov byte [esp + 0xb], ch
call fcn.00422510
movzx ecx, byte [esp + 0xb]
mov edx, dword [esp + 0x30]
add esp, 4
cmp al, 0x40
je 0x42b2f0
shl cl, 6
add al, cl
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov byte [ecx + ebx + 2], al
add ebx, 3
jmp 0x42b2f0
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x1c]
jmp dword [0x44db3c]
mov byte [edi + esi], 0
push edi
call fcn.00403b50
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi + esi], 0
push edi
call fcn.00403b50
add esp, 4
jmp dword [0x44db48]
mov esi, dword [esp + 0x18]
jmp dword [0x44db4c]
push edi
mov edi, eax
call fcn.0040ca10
mov eax, edi
add esp, 4
mov dword [esp + 0x14], eax
push eax
call fcn.00404610
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44db54]
mov edi, dword [esp + 0xc]
mov ebx, dword [esp + 8]
jmp 0x42b55b
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], 0x17889497
mov dword [esp + 0x24], 0
mov ecx, 0xc6
mov edi, 0x39
movzx eax, byte [esp + ecx - 0xa6]
lea esi, [edi - 0x30]
and esi, 8
mov ebx, ecx
and ebx, 0xc7
or ebx, esi
xor ebx, 0xf7
and ebx, edi
not eax
or ebx, eax
lea esi, [ebx + ebx]
not esi
add esi, ebx
lea edx, [edi - 0x78175d00]
and edx, eax
lea eax, [esi + esi]
not eax
add eax, esi
lea ebx, [edx + edx]
not ebx
add ebx, edx
and ebx, eax
add bl, 0x22
mov byte [esp + ecx - 0xa6], bl
inc ecx
dec edi
cmp ecx, 0xce
jne case.default.0x42b4df
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x14]
call fcn.004043d0
add esp, 8
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44db5c]
mov edi, dword [esp + 0xc]
jmp 0x42b521
movzx ecx, byte [eax]
test cl, cl
je 0x42b50d
inc eax
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 8]
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42b500
jmp 0x42b515
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov word [edx], 0x203a
add edx, 2
mov dword [esp + 8], edx
mov esi, dword [esp + 0x18]
movzx eax, byte [esp + 0x54]
test al, al
je 0x42b54d
lea ecx, [esp + 0x55]
mov ebx, dword [esp + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42b540
jmp 0x42b551
mov ebx, dword [esp + 8]
mov byte [ebx], 0xa
inc ebx
mov al, 1
mov dword [esp + 0x28], eax
push dword [esp + 0x14]
call fcn.00404bc0
add esp, 4
add edi, 8
xor eax, eax
cmp edi, esi
setne al
jmp dword [eax*4 + 0x44db0c]
mov dword [esp + 0x54], 0x6a53186d
mov dword [esp + 0x58], 0x205a7550
mov dword [esp + 0x5c], 0x545d5371
mov dword [esp + 0x60], 0x4f565e7d
mov dword [esp + 0x64], 0x507b624e
mov dword [esp + 0x68], 0x47647e65
mov dword [esp + 0x6c], 0x4259665a
mov dword [esp + 0x70], 0x4e774c63
mov dword [esp + 0x74], 0x6e605e62
mov dword [esp + 0x78], 0xb6937da1
mov dword [esp + 0x7c], 0x4b7a9191
mov dword [esp + 0x80], 0
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0xdc
xor cl, byte [esp + eax + 0x54]
add cl, 0xb4
mov byte [esp + eax + 0x54], cl
inc eax
cmp eax, 0x30
jne 0x42b5e0
lea eax, [esp + 0x48]
lea ecx, [esp + 0x34]
push 0
push 0x2b
push esi
push eax
call fcn.00440120
mov dword [esp + 0x54], 0x6a53186d
mov dword [esp + 0x58], 0x205a7550
mov dword [esp + 0x5c], 0x545d5371
mov dword [esp + 0x60], 0x4f565e7d
mov dword [esp + 0x64], 0x507b624e
mov dword [esp + 0x68], 0x47647e65
mov dword [esp + 0x6c], 0x4259665a
mov dword [esp + 0x70], 0x4e774c63
mov dword [esp + 0x74], 0x6e605e62
mov dword [esp + 0x78], 0xb6937da1
mov dword [esp + 0x7c], 0x4b7a9191
mov dword [esp + 0x80], 0
xor eax, eax
nop
nop
mov ecx, eax
add cl, 0xdc
xor cl, byte [esp + eax + 0x54]
add cl, 0xb4
mov byte [esp + eax + 0x54], cl
inc eax
cmp eax, 0x30
jne 0x42b670
lea eax, [esp + 0x48]
lea ecx, [esp + 0x34]
push 0
push 0x2b
push esi
push eax
call fcn.00440120
jmp dword [0x44daf0]
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x4c]
xor eax, eax
cmp edi, esi
sete al
jmp dword [eax*4 + 0x44daf4]
mov eax, esi
sub eax, edi
sar eax, 3
imul eax, eax, 0x421
push eax
call fcn.0040ca00
add esp, 4
mov dword [esp + 0x28], 0
xor ecx, ecx
cmp edi, esi
setne cl
mov dword [esp + 0x30], eax
mov ebx, eax
mov dword [esp + 0x18], esi
jmp dword [ecx*4 + 0x44db0c]
mov eax, dword [esp + 0x28]
and al, 1
movzx eax, al
jmp dword [eax*4 + 0x44db14]
mov ebx, dword [esp + 0x28]
jmp dword [0x44db64]
mov eax, dword [case.0x42b143.11]
nop
nop
nop
nop
nop
nop
jmp eax
xor ebx, ebx
test edi, edi
jne 0x42b7be
jmp case.0x42b143.0
mov byte [ebx], 0
mov dword [esp + 0x54], 0x3d3a3b53
mov dword [esp + 0x58], 0x9393a3f
mov dword [esp + 0x5c], 0xc303233
mov dword [esp + 0x60], 0x26123271
mov dword [esp + 0x64], 0x356b2823
mov dword [esp + 0x68], 0x272d2229
mov dword [esp + 0x6c], 0x191e6119
mov word [esp + 0x70], 0x6f1c
mov dword [esp + 0x72], 0
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0x63
xor cl, byte [esp + eax + 0x54]
add cl, 0x11
mov byte [esp + eax + 0x54], cl
inc eax
cmp eax, 0x22
jne 0x42b770
mov edx, dword [esp + 0x30]
sub ebx, edx
lea eax, [esp + 0x54]
mov ecx, dword [ebp + 8]
push ebx
push edx
push eax
call fcn.0040d810
mov ebx, eax
jmp dword [0x44db64]
push dword [esp + 0x30]
call fcn.0040ca10
add esp, 4
and bl, 1
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x4c]
test edi, edi
je case.0x42b143.0
cmp edi, esi
je case.0x42b143.0
push edi
call fcn.0040ca10
add esp, 4
lea ecx, [esp + 0x34]
call fcn.0043f720
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ah, 0x42
add ah, ch
mov ah, 0x42
add byte [ebx - 0x50ffbd49], ah
mov bh, 0x42
add byte [ecx + edi*4 + 0x42], ah
mov ecx, 0xb9890042
inc edx
add byte [edx + edi*4 - 0x4549ffbe], bl