Function at 0x426ba0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xf0
mov dword [esp + 6], 0x90de9ef8
mov dword [esp + 0xa], 0x94239221
mov dword [esp + 0xe], 0xe83696d1
mov dword [esp + 0x12], 0xec4aea5d
mov dword [esp + 0x16], 0xe0efee88
xor eax, eax
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 6]
mov esi, eax
and esi, 0x2a
mov edi, ecx
xor edi, 0xf3cd7035
add edi, esi
xor edi, edx
lea edx, [edi + 0x57]
not edi
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
mov byte [esp + ecx + 6], dl
inc ecx
add eax, 2
cmp ecx, 0x14
jne 0x426b10
lea ebp, [esp + 0xc6]
lea eax, [esp + 6]
mov ecx, 5
mov edi, ebp
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xda]
lea eax, [esp + 0x1a]
xor ebx, ebx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
lea esi, [esp + 0x50]
push esi
push 0
push 0
push 9
push ebp
push 0
call dword [0x44857c]
mov dword [esp + 6], 0xe221204c
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
add cl, 0x97
xor cl, byte [esp + ebx + 6]
add cl, 0x48
mov byte [esp + ebx + 6], cl
inc ebx
cmp ebx, 4
jne case.default.0x426bb1
xor ecx, ecx
cmp eax, dword [esp + 6]
setne cl
xor eax, eax
jmp dword [ecx*4 + 0x443a70]
mov edi, dword [esp + 0x50]
test edi, edi
jns 0x426bc7
mov eax, 0xffffffff
jmp 0x426bca
lea eax, [edi + edi]
push eax
call fcn.00407fc0
add esp, 4
push esi
mov esi, eax
push edi
push eax
push 9
push ebp
push 0
call dword [0x44857c]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x443a78]
xor eax, eax
jmp dword [0x443a80]
push esi
call fcn.00407fd0
add esp, 4
xor eax, eax
jmp case.0x426bb1.0
mov dword [esp + 0x60], esi
mov dword [esp + 6], 0xcd25cb0e
mov dword [esp + 0xa], 0xf113cf5d
mov dword [esp + 0xe], 0xf566f31d
mov dword [esp + 0x12], 0xf9f8f712
mov eax, 0x1a
mov ecx, 0xe5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x14]
mov edx, ecx
xor edx, eax
and edx, esi
xor edx, eax
add dl, 0x30
mov byte [esp + eax - 0x14], dl
inc eax
dec ecx
cmp eax, 0x2a
jne 0x426c40
lea edi, [esp + 0x9a]
lea eax, [esp + 6]
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xaa]
lea eax, [esp + 0x16]
xor edx, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 6], 0x973f95d0
mov dword [esp + 0xa], 0x9b39992b
mov dword [esp + 0xe], 0x9f2c9d33
mov dword [esp + 0x12], 0xe3a1e144
mov dword [esp + 0x16], 0xe748e545
mov dword [esp + 0x1a], 0xeb58e949
mov dword [esp + 0x1e], 0xefeeed55
nop
nop
nop
nop
nop
movzx eax, byte [esp + edx + 6]
lea ecx, [edx - 0x7e60e6cc]
and ecx, eax
lea esi, [edx + eax]
add esi, 0x819f1934
add ecx, ecx
sub esi, ecx
mov ecx, 0x7e60e6cb
sub ecx, edx
or ecx, esi
lea ecx, [edx + ecx*2]
add cl, al
add cl, 0x96
mov byte [esp + edx + 6], cl
mov eax, 0xe
sub eax, edx
add edx, 0x71
and eax, 0x70
and edx, 0x8f
sub edx, eax
cmp edx, 0x1c
jb 0x426cc0
lea edi, [esp + 0xaa]
lea eax, [esp + 6]
mov ecx, 7
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xc6]
lea eax, [esp + 0x22]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 6], 0x2c522a6d
mov dword [esp + 0xa], 0x204c2e5e
mov dword [esp + 0xe], 0x2451225e
mov dword [esp + 0x12], 0x38772641
mov dword [esp + 0x16], 0x3c793a6d
lea esi, [esp + 0x1a]
mov word [esp + 0x1a], 0x3e3d
mov ecx, 0x67137621
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + ecx - 0x6713761b]
mov ebp, ecx
and ebp, eax
mov edi, ebp
mov ebx, ebp
mov edx, ebp
xor eax, ecx
lea eax, [eax + ebp*2]
and ebp, 2
or edi, 0xfffffffd
inc edi
and ebx, 0x7d
imul ebx, edi
or edx, 2
imul edx, ebp
sub ebx, edx
add eax, ebx
add eax, 0xc7644ef7
mov edx, eax
and edx, 1
xor eax, 1
lea eax, [eax + edx*2]
mov byte [esp + ecx - 0x6713761b], al
inc ecx
cmp ecx, 0x67137637
jne 0x426d70
lea ebx, [esp + 0xda]
lea eax, [esp + 6]
mov ecx, 5
mov edi, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xee]
mov ecx, 1
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
lea eax, [esp + 0x9a]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0xaa]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ebx
mov esi, dword [esp + 0x60]
mov ebp, esi
add ebp, 2
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x5c], 0
cmp ecx, 0xc
setne al
xor ecx, ecx
mov dword [esp + 0x44], ebp
jmp dword [eax*4 + 0x443a88]
add esp, 0xf0
pop esi
pop edi
pop ebx
pop ebp
ret