Function at 0x1afa80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x43c
mov eax, dword [0x1f0858]
mov dword [esp + 0x3c], 0x19ab1b4f
mov dword [esp + 0x40], 0x65d1679e
mov dword [esp + 0x44], 0x61d663d0
mov dword [esp + 0x48], 0x6d1f6fcf
mov dword [esp + 0x4c], 0x69186b17
mov dword [esp + 0x50], 0x75167718
mov dword [esp + 0x54], 0x712b731c
mov dword [esp + 0x58], 0x7dcc7fc7
mov dword [esp + 0x5c], 0x79cb7bd0
mov dword [esp + 0x60], 0x45fb47c1
mov dword [esp + 0x64], 0x41104324
mov dword [esp + 0x68], 0x4d2e4f1c
mov dword [esp + 0x6c], 0x493a4b33
mov dword [esp + 0x70], 0x5526573a
mov dword [esp + 0x74], 0x51325311
mov dword [esp + 0x78], 0x5de95f09
mov dword [esp + 0x7c], 0x59205bee
mov dword [esp + 0x80], 0xa5e3a724
mov dword [esp + 0x84], 0xa11aa3c4
mov dword [esp + 0x88], 0xadd2afda
mov dword [esp + 0x8c], 0xa9caabdb
mov dword [esp + 0x90], 0xb506b7e7
mov dword [esp + 0x94], 0xb106b304
mov dword [esp + 0x98], 0xbde7bf1b
mov dword [esp + 0x9c], 0xb914bb17
mov dword [esp + 0xa0], 0x853187ed
mov dword [esp + 0xa4], 0x81f38338
mov dword [esp + 0xa8], 0x8df38ffb
mov dword [esp + 0xac], 0x89f88bf5
mov dword [esp + 0xb0], 0x95ec97f5
mov dword [esp + 0xb4], 0x91fa93f4
mov dword [esp + 0xb8], 0x9dd69fc5
mov dword [esp + 0xbc], 0x99c99bc0
mov dword [esp + 0xc0], 0xe592e7cc
mov dword [esp + 0xc4], 0xe156e384
mov dword [esp + 0xc8], 0xed5bef57
mov dword [esp + 0xcc], 0xe98aeb47
mov dword [esp + 0xd0], 0xf55df7a1
mov dword [esp + 0xd4], 0xf147f359
mov dword [esp + 0xd8], 0xfd89ff41
mov dword [esp + 0xdc], 0xf9b7fb9c
mov dword [esp + 0xe0], 0xc578c750
mov dword [esp + 0xe4], 0xc171c375
mov dword [esp + 0xe8], 0xcdbfcf6b
mov dword [esp + 0xec], 0xc9b5cbb3
mov dword [esp + 0xf0], 0xd5a4d78f
mov dword [esp + 0xf4], 0xd1a0d3a4
mov dword [esp + 0xf8], 0xddacdfa0
mov dword [esp + 0xfc], 0xd9badbac
mov dword [esp + 0x100], 0x25892785
mov dword [esp + 0x104], 0x218d238e
mov dword [esp + 0x108], 0x2d992f9e
mov dword [esp + 0x10c], 0x29512b5d
mov dword [esp + 0x110], 0x354f3755
mov dword [esp + 0x114], 0x314f3346
mov dword [esp + 0x118], 0x3d3e3f4a
mov word [esp + 0x11c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0xe1
ja 0x1afd25
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x3c]
mov esi, ecx
xor esi, 0xed71613b
and ecx, 0xed71613b
lea ecx, [esi + ecx*2]
lea esi, [ecx + edx]
and ecx, edx
add ecx, ecx
sub esi, ecx
mov dword [esp + 8], esi
mov ecx, dword [esp + 8]
add cl, 0xd9
mov edx, dword [esp]
mov byte [esp + edx + 0x3c], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe2
jb case.default.0x1afd4d
mov ebx, dword [esp + 0x468]
mov ebp, dword [esp + 0x464]
lea ecx, [esp + 0x3c]
push 0
push 0
push 0
push 0
push ecx
call eax
xor ecx, ecx
mov dword [esp + 0x34], eax
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eae98]
xor edi, edi
xor eax, eax
test ebp, ebp
setne al
xor esi, esi
jmp dword [eax*4 + 0x1eaf68]
mov dword [ebp], edi
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x1eaf78]
mov dword [ebx], esi
test edi, edi
setne al
add esp, 0x43c
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 0x450]
mov eax, dword [0x1f085c]
mov dword [esp], 0x999a94d9
mov dword [esp + 8], 0
mov edx, dword [esp + 8]
cmp edx, 3
ja 0x1afdee
nop
nop
nop
mov edx, dword [esp + 8]
mov esi, dword [esp + 8]
movzx esi, byte [esp + esi]
mov edi, edx
xor edi, 0x6d1b915b
and edx, 0xed1b915b
lea edx, [edi + edx*2]
xor edx, esi
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x3c]
add dl, 0x39
mov esi, dword [esp + 8]
mov byte [esp + esi], dl
inc dword [esp + 8]
mov edx, dword [esp + 8]
cmp edx, 4
jb 0x1afdb0
movzx edx, word [esp]
push 0
push edx
push ecx
mov ebp, dword [esp + 0x40]
push ebp
call eax
xor ecx, ecx
mov dword [esp + 0x38], eax
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eaea0]
xor esi, esi
xor edi, edi
jmp 0x1b0350
mov eax, dword [0x1f0860]
mov dword [esp + 8], 0x33b23130
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 7
ja 0x1afe7b
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
mov esi, ecx
xor esi, 0x296121b4
and ecx, 0x296121b4
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
add cl, 0x7c
mov edx, dword [esp]
mov byte [esp + edx + 8], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 8
jb 0x1afe40
mov ecx, dword [esp + 0x454]
mov edx, dword [esp + 8]
mov dword [esp + 0x3c], 0xff0df908
mov dword [esp + 0x40], 0xe316fd0b
mov word [esp + 0x44], 0xe1e0
mov dword [esp + 0x46], 0
mov dword [esp + 4], 0
mov esi, dword [esp + 4]
cmp esi, 0xd
ja 0x1aff0f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 4]
mov edi, dword [esp + 4]
movzx edi, byte [esp + edi + 0x3c]
mov ebx, esi
xor ebx, 0xcedab9aa
and esi, 0xcedab9aa
lea esi, [ebx + esi*2]
lea ebx, [esi + edi]
and esi, edi
mov edi, ebx
not edi
and edi, esi
add edi, esi
not esi
and esi, ebx
sub esi, edi
mov dword [esp], esi
mov ebx, dword [esp]
add bl, 0xae
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x3c], bl
inc dword [esp + 4]
mov esi, dword [esp + 4]
cmp esi, 0xe
jb 0x1afec0
push edx
push 0
push 0
push 0
push ecx
lea ecx, [esp + 0x50]
push ecx
push dword [esp + 0x50]
call eax
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
xor esi, esi
xor edi, edi
jmp dword [eax*4 + 0x1eaea8]
mov esi, dword [esp + 0x460]
mov edx, dword [esp + 0x45c]
mov ecx, dword [esp + 0x458]
movzx eax, byte [0x1f0990]
jmp dword [eax*4 + 0x1eaeb0]
mov edi, ecx
mov eax, dword [case.0x1aff2f.6]
jmp eax
lea esi, [esp + 0x3c]
jmp dword [0x1eaec8]
xor eax, eax
test edi, edi
setne al
jmp dword [eax*4 + 0x1eaf50]
mov ebp, dword [esp + 0x34]
jmp dword [0x1eaf5c]
mov byte [edi + esi], 0
mov ebp, dword [esp + 0x34]
jmp dword [0x1eaf5c]
mov dword [esp + 8], 0
mov ecx, eax
add ecx, esi
lea edx, [esp + 8]
push edx
push dword [esp + 0x40]
push ecx
push ebx
mov edi, eax
call dword [0x1f087c]
add esi, dword [esp + 8]
xor eax, eax
jmp dword [eax*4 + 0x1eaf48]
jmp dword [0x1eaf18]
mov ebp, dword [esp + 0x3c]
test eax, eax
setne al
test ebp, ebp
setne cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x1eaf28]
jmp dword [0x1eaf34]
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x1eaf40]
mov eax, 1
jmp dword [eax*4 + 0x1eaf48]
lea eax, [esp + 0x3c]
push eax
push ebx
call dword [0x1f0878]
lea eax, [esp + 0x3c]
push eax
push ebx
call dword [0x1f0878]
jmp dword [0x1eaf24]
lea eax, [esi + ebp]
inc eax
push eax
push edi
call fcn.001e1b70
add esp, 8
lea eax, [esi + ebp]
inc eax
push eax
push edi
call fcn.001e1b70
add esp, 8
jmp dword [0x1eaf3c]
mov dword [esp + 8], 0x118f1fd9
mov dword [esp + 0xc], 0x158f1381
mov dword [esp + 0x10], 0x9f1178f
mov dword [esp + 0x14], 0xd2a0bc2
mov dword [esp + 0x18], 0x1ef0fed
mov dword [esp + 0x1c], 0x5e403e5
mov dword [esp + 0x20], 0x399907e5
mov dword [esp + 0x24], 0x3ddb3bb1
mov dword [esp + 0x28], 0x31b53fde
mov dword [esp + 0x2c], 0x35fd33a0
mov dword [esp + 0x30], 0x3734
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2b
ja 0x1b010c
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
xor edx, 0x93636ac5
and eax, 0x13636ac5
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
add al, 0x27
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x2c
jb 0x1b00d0
movzx ecx, word [esp + 8]
mov eax, esi
test cx, cx
je 0x1b0131
lea eax, [esp + 0x3c]
lea edx, [esp + 0xa]
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x1b0120
mov word [eax], 0
movzx ecx, word [0x1f0992]
test cx, cx
je 0x1b0165
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x1f0994]
add edx, 2
test cx, cx
jne 0x1b0150
add eax, edx
mov word [eax], 0
lea eax, [esp + 0x3c]
push 0x20000000
push 0xffffffffffffffff
push eax
push ebx
call dword [0x1f086c]
mov dword [esp + 8], 0x118f1fd9
mov dword [esp + 0xc], 0x158f1381
mov dword [esp + 0x10], 0x9f1178f
mov dword [esp + 0x14], 0xd2a0bc2
mov dword [esp + 0x18], 0x1ef0fed
mov dword [esp + 0x1c], 0x5e403e5
mov dword [esp + 0x20], 0x399907e5
mov dword [esp + 0x24], 0x3ddb3bb1
mov dword [esp + 0x28], 0x31b53fde
mov dword [esp + 0x2c], 0x35fd33a0
mov dword [esp + 0x30], 0x3734
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x2b
ja 0x1b022c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
xor edx, 0x93636ac5
and eax, 0x13636ac5
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp], eax
mov eax, dword [esp]
add al, 0x27
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x2c
jb 0x1b01f0
movzx ecx, word [esp + 8]
lea eax, [esp + 0x3c]
test cx, cx
je 0x1b0251
lea edx, [esp + 0xa]
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x1b0240
mov word [eax], 0
movzx ecx, word [0x1f0992]
test cx, cx
je 0x1b0285
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x1f0994]
add edx, 2
test cx, cx
jne 0x1b0270
add eax, edx
mov word [eax], 0
lea eax, [esp + 0x3c]
push 0x20000000
push 0xffffffffffffffff
push eax
push ebx
call dword [0x1f086c]
jmp dword [0x1eaed4]
mov eax, dword [case.0x1aff2f.2]
mov ecx, edi
mov edx, dword [esp + 0x45c]
mov esi, dword [esp + 0x460]
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor edi, edi
mov eax, ecx
neg eax
mov eax, 0
sbb eax, eax
push 0
push esi
push esi
push edx
push eax
push ecx
push ebx
call dword [0x1f0870]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eaee8]
jmp dword [0x1eaef4]
push 0
push ebx
call dword [0x1f0874]
nop
nop
nop
nop
nop
nop
push 0
push ebx
call dword [0x1f0874]
jmp dword [0x1eaef8]
xor ecx, ecx
test eax, eax
setne cl
xor edi, edi
jmp dword [ecx*4 + 0x1eaf00]
mov esi, edi
jmp dword [0x1eaf5c]
mov dword [esp + 0x3c], 0
mov eax, dword [case.0x1afd4d.30]
xor esi, esi
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x1eaf78]
push ebp
call dword [0x1f0884]
xor eax, eax
mov ebp, dword [esp + 0x464]
test ebp, ebp
setne al
jmp dword [eax*4 + 0x1eaf68]
xor eax, eax
test edi, edi
setne al
jmp dword [eax*4 + 0x1eaf70]
push edi
call fcn.001de970
add esp, 4
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x1eaf78]
push dword [esp + 0x38]
call dword [0x1f0884]
mov ebx, dword [esp + 0x468]
jmp 0x1b0350
push ebx
call dword [0x1f0884]
push ebx
call dword [0x1f0884]
jmp dword [0x1eaf64]
std
sbb al, byte [eax]
mov ebp, edi
sbb al, byte [eax]
paddd mm3, qword [edx]
add byte [eax], bl
invalid