Function at 0x42d104
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x3c]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x3b], 0xd62bb71c
push edi
lea ecx, [ebp - 0x14]
mov byte [eax], bl
mov dword [ebp - 0x10], ebx
mov word [ebp - 0x28], 0xfe3f
mov dword [ebp - 0x35], 0xed5f7fe8
mov word [ebp - 0x2b], 0x24e0
mov byte [ebp - 0x3c], 0x71
mov byte [ebp - 0x29], 0x77
mov dword [ebp - 0x26], 0xd8391131
mov word [ebp - 0x37], 0x5c7c
mov word [ebp - 0x31], 0x1174
mov word [ebp - 0x2e], 0xcd35
mov word [ebp - 0x21], 0xf5e5
mov byte [ebp - 0x2c], 0x48
mov byte [ebp - 0x22], 0x69
mov byte [ebp - 0x2f], 0xb4
call fcn.0041ee84
push eax
lea ecx, [ebp - 0x10]
call fcn.00413c02
lea ecx, [ebp - 0x14]
call fcn.00401dc6
push 0x46
mov dword [ebp - 0xc], ebx
lea eax, [ebp - 8]
pop ebx
push eax
mov dword [ebp - 0x33], 0x3588097b
lea esi, [ebp - 0x3c]
mov word [ebp - 0x3c], 0x3855
mov word [ebp - 0x28], 0xc729
mov dword [ebp - 0x39], 0x7890ea4f
mov dword [ebp - 0x2f], 0x6ce151d0
mov byte [ebp - 0x3a], 0xd3
mov dword [ebp - 0x21], 0xa8ef1daf
mov word [ebp - 0x35], 0x830c
mov dword [ebp - 0x25], 0xff1f7eee
mov byte [ebp - 0x26], 0x53
mov word [ebp - 0x2b], 0xc01c
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x1d], 0x36
call dword [sym.imp.system.dll_public:_static_class_Ref_class_String____cdecl_String::create_void_]
pop ecx
mov byte [ebp - 1], 0x13
mov byte [ebp - 0x14], bl
mov ecx, dword [ebp - 8]
lea edx, [ebp - 0x18]
push dword [ebp - 0x14]
push edx
mov eax, dword [ecx]
call dword [eax + 0x2c]
push eax
lea ecx, [ebp - 8]
call fcn.00413c02
lea ecx, [ebp - 0x18]
call fcn.00401dc6
mov cl, byte [ebp - 1]
add cl, bl
inc esi
mov byte [ebp - 1], cl
mov bl, byte [esi]
xor bl, cl
mov byte [ebp - 0x14], bl
jne 0x42d1e5
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0xc]
call fcn.00413c02
lea ecx, [ebp - 8]
call fcn.00401dc6
push 0x34
pop ecx
mov esi, 0x44f580
mov edi, 0x46d0a0
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov esi, 0x46c330
mov edi, 0x46d030
xor ecx, ecx
mov eax, dword [esi + ecx*4]
mov ebx, 0x44ee88
cmp eax, dword [ebx + ecx*4]
mov ebx, 0x46c330
jne 0x42d262
inc ecx
cmp ecx, 0x1a
jne 0x42d248
jmp 0x42d28c
add esi, 0x68
inc edx
cmp esi, edi
jl 0x42d246
xor edx, edx
mov eax, ebx
cmp dword [eax], 0
je 0x42d27d
add eax, 0x68
inc edx
cmp eax, edi
jl 0x42d26e
jmp 0x42d294
imul edi, edx, 0x68
mov esi, 0x44ee88
push 0x1a
pop ecx
add edi, ebx
rep movsd dword es:[edi], dword [esi]
test edx, edx
jns 0x42d345
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x42d41a
push dword [0x46d074]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x42d41a
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 8]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x46d074]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call dword [edi + 4]
mov ecx, dword [eax]
push ecx
mov eax, dword [ecx + 4]
mov esi, dword [eax + 8]
lea eax, [ebp - 0x10]
add esi, ecx
mov ecx, esp
push eax
call fcn.00401dde
lea eax, [ebp - 0x18]
push eax
mov eax, dword [esi + 4]
lea ecx, [esi + 4]
call dword [eax + 0x1c]
lea edx, [ebp + 8]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp + 8]
call fcn.00401dc6
lea ecx, [ebp - 0x18]
call fcn.00401dc6
lea ecx, [ebp - 0x14]
call fcn.00401dc6
lea ecx, [ebp - 8]
call fcn.00401dc6
lea ecx, [ebp - 0x1c]
call fcn.00401dc6
jmp 0x42d41a
call fcn.0042fcf6
test eax, eax
jns 0x42d414
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::level_void_]
cmp eax, 4
ja 0x42d40d
push dword [0x46d074]
call dword [sym.imp.lib.syslog.dll_public:_static_bool___cdecl_SysLogFilter::state_unsigned_int_]
pop ecx
test al, al
je 0x42d40d
lea eax, [ebp - 8]
push eax
call dword [sym.imp.lib.syslog.dll_public:_static_class_Ref_class_SysLogStream____cdecl_SysLogStream::stdOutPrinter_void_]
pop ecx
push 4
lea edx, [ebp - 0x14]
mov ecx, dword [eax]
push edx
mov eax, dword [ecx]
call dword [eax]
push dword [0x46d074]
mov esi, dword [eax]
mov edi, dword [esi]
call dword [sym.imp.lib.syslog.dll_public:_static_unsigned_int___cdecl_SysLogFilter::id_unsigned_int_]
pop ecx
push eax
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call dword [edi + 4]
push ecx
mov ecx, esp
mov esi, dword [eax]
mov eax, dword [ebp - 0xc]
mov dword [ecx], eax
test eax, eax
je 0x42d3c6
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 4]
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [eax + 8]
add ecx, 4
add ecx, esi
mov eax, dword [ecx]
call dword [eax + 0x1c]
lea edx, [ebp + 8]
push edx
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 0x6c]
lea ecx, [ebp + 8]
call fcn.00401dc6
lea ecx, [ebp - 0x1c]
call fcn.00401dc6
lea ecx, [ebp - 0x18]
call fcn.00401dc6
lea ecx, [ebp - 0x14]
call fcn.00401dc6
lea ecx, [ebp - 8]
call fcn.00401dc6
call fcn.0042fd56
jmp 0x42d41a
mov eax, dword [ebp + 8]
mov byte [eax], 1
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x42d431
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x42d448
mov ecx, dword [eax + 4]
add eax, 4
mov ecx, dword [ecx + 4]
add ecx, eax
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
pop esi
pop ebx
leave
ret 4