Function at 0x420e30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x50
mov dword [esp + 0xc], 0
mov dword [esp + 0x1f], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0xfcfdfeff
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x12
ja 0x420ec2
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov eax, dword [esp]
movzx edx, byte [esp + eax + 0x10]
lea eax, [ecx + edx]
add ecx, 0xc0
and ecx, edx
add ecx, ecx
sub eax, ecx
add eax, 0xeafb54c0
mov ecx, eax
or ecx, 0xbf
and eax, 0xbf
add eax, ecx
inc al
mov ecx, dword [esp]
mov byte [esp + ecx + 0x10], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x13
jb 0x420e80
mov eax, dword [esp + 0x10]
mov ecx, dword [0x44b4d8]
test ecx, ecx
je 0x420f0e
xor edx, edx
mov esi, dword [0x44b4dc]
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0x18dc7455
je 0x420ef0
inc edx
cmp ecx, edx
jne 0x420ee0
jmp 0x420f0e
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x420f0e
lea eax, [esp + 0xc]
push eax
push 0
push 0
push 5
push 4
push ecx
call fcn.00436750
add esp, 0x18
cmp eax, 0xc0000004
jne 0x420fe2
push dword [esp + 0xc]
call fcn.004365a0
add esp, 4
mov edi, eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1f], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0xfcfdfeff
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x12
ja 0x420fb2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov eax, dword [esp]
movzx esi, byte [esp + eax + 0x10]
lea eax, [edx + esi]
add edx, 0xc0
and edx, esi
add edx, edx
sub eax, edx
add eax, 0xeafb54c0
mov edx, eax
or edx, 0xbf
and eax, 0xbf
add eax, edx
inc al
mov edx, dword [esp]
mov byte [esp + edx + 0x10], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x13
jb 0x420f70
mov eax, dword [esp + 0x10]
mov edx, dword [0x44b4d8]
test edx, edx
je 0x421004
mov ebx, edi
xor esi, esi
mov edi, dword [0x44b4dc]
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x18dc7455
je 0x420fe9
inc esi
cmp edx, esi
jne 0x420fd0
mov edi, ebx
jmp 0x421004
xor ebx, ebx
jmp 0x4212bc
mov edx, dword [edi + esi*8 + 4]
cmp edx, eax
mov edi, ebx
je 0x421004
push 0
push ecx
push edi
push 5
push 4
push edx
call fcn.00436750
add esp, 0x18
xor ebx, ebx
test eax, eax
js 0x4212b3
mov ecx, dword [edi]
xor eax, eax
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea esi, [edx + ecx]
mov ecx, dword [edx + ecx]
add eax, 0x208
add ebx, 0x104
mov edx, esi
test ecx, ecx
jne 0x421020
test ebx, ebx
jns 0x421040
mov eax, 0xffffffff
push eax
call fcn.00408810
add esp, 4
mov ecx, eax
mov edx, dword [edi]
mov eax, edi
mov dword [esp + 4], ecx
mov edi, ecx
mov dword [esp + 0x48], eax
jmp 0x42106e
mov word [edi], 0xa
add edi, 2
mov edx, dword [eax]
test edx, edx
je 0x421093
mov ecx, dword [eax + edx + 0x3c]
add eax, edx
movzx edx, word [ecx]
test dx, dx
je 0x421060
add ecx, 2
nop
mov word [edi], dx
add edi, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x421080
jmp 0x421060
mov eax, dword [esp + 4]
cmp edi, eax
je 0x4211e5
mov word [edi], 0
movzx ecx, word [eax]
test cx, cx
je 0x4211ec
xor esi, esi
jmp 0x4210d0
add edx, esi
mov esi, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
je 0x421101
cmp eax, edi
jae 0x421101
mov edx, esi
movzx ebx, cx
xor ecx, ecx
cmp ebx, 0x800
setb byte [esp + 8]
mov esi, 1
cmp ebx, 0x80
jb 0x4210c0
movzx ebx, byte [esp + 8]
mov cl, bl
xor ecx, 3
mov esi, ecx
jmp 0x4210c0
lea eax, [esi + 1]
mov dword [esp + 0x44], eax
push eax
call fcn.00408810
add esp, 4
test esi, esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], eax
jle 0x421206
lea ecx, [eax + esi]
mov dword [esp + 8], ecx
add dword [esp + 0x44], eax
mov esi, eax
mov edx, dword [esp + 4]
jmp 0x421156
mov byte [esi], cl
mov eax, 1
add edx, 2
add esi, eax
cmp esi, dword [esp + 8]
jae 0x421208
cmp edx, edi
jae 0x421208
movzx ecx, word [edx]
test cx, cx
je 0x421208
cmp cx, 0x7f
jbe 0x421140
mov eax, esi
not eax
add eax, dword [esp + 0x44]
cmp eax, 2
jb 0x4211b0
movzx ebx, cx
cmp ebx, 0x7ff
ja 0x4211b0
mov eax, ecx
shr eax, 6
add al, 0xc0
mov byte [esi], al
and cl, 0x3f
or cl, 0x80
mov byte [esi + 1], cl
mov eax, 2
jmp 0x421147
cmp eax, 3
mov eax, 0
jb 0x421147
movzx ebx, cx
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov byte [esi], al
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [esi + 1], bl
and cl, 0x3f
or cl, 0x80
mov byte [esi + 2], cl
mov eax, 3
jmp 0x421147
xor ebx, ebx
jmp 0x4212a6
mov dword [esp + 0x40], 0
push 1
call fcn.00408810
add esp, 4
mov esi, eax
mov dword [esp + 0x3c], eax
jmp 0x421208
mov esi, eax
mov byte [esi], 0
mov dword [esp + 0x10], 0x2439335c
mov dword [esp + 0x14], 0x3a293625
mov dword [esp + 0x18], 0x2b2e672b
mov dword [esp + 0x1c], 0x912c
mov byte [esp + 0x20], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x10
ja 0x421281
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x10]
lea edx, [eax + 0x1a9693ea]
lea esi, [eax + 0xea]
mov edi, edx
and edi, esi
and edi, ecx
xor edx, esi
and edx, ecx
add eax, ecx
add eax, 0x1a9693ea
lea ecx, [edx + edi*2]
sub eax, ecx
add al, 0x9a
mov ecx, dword [esp]
mov byte [esp + ecx + 0x10], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x11
jb 0x421240
lea eax, [esp + 0x10]
mov ecx, dword [ebp + 8]
push dword [esp + 0x40]
mov esi, dword [esp + 0x40]
push esi
push eax
call fcn.00409180
mov ebx, eax
push esi
call fcn.00408820
add esp, 4
mov eax, dword [esp + 4]
push eax
call fcn.00408820
add esp, 4
mov edi, dword [esp + 0x48]
push edi
call fcn.00436680
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret