Function at 0x42567d
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
add dh, 0xfd
mov ebp, esp
sub esp, 0x1a4
push esi
sub ch, 0x50
push edi
mov ch, 0x77
push ebx
pushfd
and ch, 0x3c
mov dword [ebp - 0xe4], 0xffffffff
and dh, 0xf7
xor dh, 0x90
mov dword [ebp - 0x162], 0
mov dword [ebp - 0x184], 0
xor ch, 0x94
xor cl, 0x34
cmp dword [ebp + 0xc], 0
je 0x4256d0
and ch, 0xb7
cmp dword [ebp + 0x10], 0
je 0x4256d0
jmp 0x4256d5
jmp 0x42627e
push ebp
sub esp, 8
sub dl, 0x48
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
sub dh, 0x66
sub dh, 0x7c
call fcn.00424c42
pop ebp
add dl, 0xbd
mov dword [ebp - 0x15e], eax
mov esi, dword [ebp + 8]
add esi, 0x10
xor ch, 0x86
mov dword [esi], 0
sub dh, 0x9e
add dl, 0x88
push ebp
and cl, 0xd9
sub esp, 4
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
and dh, 0x37
call dword [0x10015164]
pop ebp
add cl, 0x3b
mov dword [ebp - 0x19e], eax
mov eax, dword [ebp - 0x19e]
mov dword [ebp - 0x17c], eax
or ch, 0x9b
or dl, 0xd9
mov dword [ebp - 0x174], 0
add dl, 0x36
mov word [ebp - 0xfc], 0x6c
mov cl, 0xdf
sub cl, 1
mov word [ebp - 0xf8], 0x2e
mov word [ebp - 0xf6], 0
mov word [ebp - 0x100], 0x6f
and ch, 0xbe
mov word [ebp - 0xfe], 0x67
mov word [ebp - 0xfa], 0x65
mov word [ebp - 0x104], 0x67
mov dh, 0xf3
mov word [ebp - 0x102], 0x6f
and cl, 0x2a
push ebp
xor ch, 0x24
sub esp, 8
or cl, 0xf0
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
or dl, 0x46
or ch, 0x9d
lea edi, [ebp - 0x104]
mov dword [esp + 4], edi
and cl, 8
or dl, 0xe6
call dword [0x10015148]
pop ebp
sub ch, 0x32
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x162], eax
xor dh, 0x16
or ch, 0x94
add cl, 0xa
cmp dword [ebp - 0x162], 0
jne 0x425803
jmp 0x425914
mov word [ebp - 0x190], 0x63
or dl, 0xa8
mov word [ebp - 0x18e], 0x68
mov word [ebp - 0x194], 0x61
mov word [ebp - 0x19a], 0x2f
mov word [ebp - 0x18a], 0
mov dh, 0x9f
mov dl, 0x5c
mov word [ebp - 0x196], 0x65
mov dh, 0xb6
mov ch, 0xf4
mov word [ebp - 0x18c], 0x3f
mov cl, 0x4c
add dh, 0x7e
mov word [ebp - 0x198], 0x73
sub dl, 0xa8
sub cl, 0xd4
mov word [ebp - 0x192], 0x72
add ch, 0x92
add dh, 0xb8
push ebp
sub esp, 8
sub dh, 0x2c
mov eax, dword [ebp - 0x162]
mov dword [esp], eax
or cl, 0x28
and dl, 0x2f
lea edi, [ebp - 0x19a]
mov dword [esp + 4], edi
call dword [0x10015148]
pop ebp
mov dword [ebp - 0x108], eax
mov dl, 0xe7
cmp dword [ebp - 0x108], 0
jne 0x4258aa
jmp 0x42590f
mov word [ebp - 0x5a], 0
sub ch, 0x64
mov word [ebp - 0x5e], 0x71
or dh, 0xc4
mov ch, 0x33
mov word [ebp - 0x5c], 0x3d
push ebp
sub esp, 8
mov eax, dword [ebp - 0x162]
mov dword [esp], eax
sub cl, 0x47
and cl, 0x21
lea edi, [ebp - 0x5e]
mov dword [esp + 4], edi
sub cl, 0xb4
xor dh, 0x68
call dword [0x10015148]
pop ebp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x184], eax
xor ch, 0x8a
xor dl, 0x54
cmp dword [ebp - 0x184], 0
jne 0x425908
jmp 0x42590f
add dword [ebp - 0x184], 4
jmp 0x425cea
mov word [ebp - 0x58], 0x79
or dl, 0xc8
and dl, 0x7b
mov word [ebp - 0x4c], 0
mov word [ebp - 0x50], 0x6f
mov cl, 0x75
mov word [ebp - 0x4e], 0x2e
mov word [ebp - 0x52], 0x6f
sub cl, 0xf6
mov word [ebp - 0x56], 0x61
add cl, 0xf8
sub cl, 0xd2
mov word [ebp - 0x54], 0x68
or ch, 0xa2
push ebp
mov ch, 0x5d
sub esp, 8
sub dh, 0x7c
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
or cl, 0x60
add dh, 0x7f
lea edi, [ebp - 0x58]
mov dword [esp + 4], edi
mov ch, 2
call dword [0x10015148]
pop ebp
mov ch, 0x52
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x162], eax
mov dl, 0x91
cmp dword [ebp - 0x162], 0
jne 0x425998
jmp 0x425aff
mov word [ebp - 0x46], 0x2f
xor ch, 0x72
mov word [ebp - 0x36], 0
or cl, 0x67
mov word [ebp - 0x44], 0x73
mov word [ebp - 0x38], 0x3f
mov word [ebp - 0x40], 0x61
and cl, 0xf7
mov cl, 0xdd
mov word [ebp - 0x42], 0x65
sub ch, 0xdd
mov word [ebp - 0x3a], 0x68
mov word [ebp - 0x3c], 0x63
mov word [ebp - 0x3e], 0x72
sub dh, 0x8e
push ebp
sub cl, 0xe3
sub esp, 8
mov dh, 0xa6
mov eax, dword [ebp - 0x162]
mov dword [esp], eax
xor dh, 0xc6
lea edi, [ebp - 0x46]
mov dword [esp + 4], edi
sub dh, 0x7c
call dword [0x10015148]
pop ebp
sub dh, 0x75
mov dword [ebp - 0x62], eax
cmp dword [ebp - 0x62], 0
jne 0x425a16
jmp 0x425afa
mov word [ebp - 0xce], 0x70
mov word [ebp - 0xd0], 0x26
add dh, 0xdf
mov word [ebp - 0xca], 0
mov word [ebp - 0xcc], 0x3d
push ebp
add dh, 0x6b
sub esp, 8
xor cl, 0x9f
mov eax, dword [ebp - 0x162]
mov dword [esp], eax
sub dl, 0xee
or cl, 0x7f
and ch, 0x15
lea edi, [ebp - 0xd0]
mov dword [esp + 4], edi
or cl, 0xc8
call dword [0x10015148]
pop ebp
xor cl, 0x73
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x184], eax
sub cl, 0x6f
cmp dword [ebp - 0x184], 0
je 0x425a90
jmp 0x425ae6
mov word [ebp - 0x1c], 0x3f
mov dl, 0x5b
mov word [ebp - 0x16], 0
sub dh, 0x3e
mov word [ebp - 0x1a], 0x70
mov word [ebp - 0x18], 0x3d
push ebp
sub esp, 8
mov eax, dword [ebp - 0x162]
mov dword [esp], eax
sub ch, 0x7d
and dh, 0x1f
and cl, 0x7e
lea edi, [ebp - 0x1c]
mov dword [esp + 4], edi
call dword [0x10015148]
pop ebp
mov dword [ebp - 0x156], eax
mov eax, dword [ebp - 0x156]
mov dword [ebp - 0x184], eax
add dl, 0xcc
mov dh, 0xa0
cmp dword [ebp - 0x184], 0
jne 0x425af3
jmp 0x425afa
add dword [ebp - 0x184], 6
jmp 0x425cea
mov word [ebp - 0x110], 0x73
xor cl, 0x3c
sub cl, 0x67
mov word [ebp - 0x11e], 0x2f
mov cl, 0xb9
xor dh, 0x3f
mov word [ebp - 0x126], 0x2e
sub dh, 0xbf
sub cl, 0x74
mov word [ebp - 0x11a], 0x65
mov dl, 0xdf
mov word [ebp - 0x12a], 0x73
mov word [ebp - 0x128], 0x6e
and dl, 0x16
and dl, 9
mov word [ebp - 0x136], 0x61
sub cl, 0x19
add ch, 0xc9
mov word [ebp - 0x12c], 0x6d
sub dl, 0xb1
mov word [ebp - 0x120], 0x6d
or ch, 0xdd
mov cl, 0xa3
mov word [ebp - 0x10e], 0
mov word [ebp - 0x130], 0x68
and ch, 0xc9
xor dl, 0x1f
mov word [ebp - 0x118], 0x73
sub dh, 0x45
mov word [ebp - 0x114], 0x6c
and dh, 0x33
xor ch, 0xeb
mov word [ebp - 0x134], 0x72
xor cl, 0x7a
mov word [ebp - 0x11c], 0x72
mov dh, 0x1b
and dl, 0x24
mov word [ebp - 0x112], 0x74
xor cl, 0xd6
mov word [ebp - 0x12e], 0x2e
mov word [ebp - 0x116], 0x75
mov ch, 0x64
mov word [ebp - 0x132], 0x63
and dh, 0xc2
sub ch, 0xf9
mov word [ebp - 0x138], 0x65
mov ch, 0xb
mov word [ebp - 0x122], 0x6f
mov word [ebp - 0x13a], 0x73
mov word [ebp - 0x124], 0x63
xor ch, 0x42
push ebp
add cl, 0x46
sub esp, 8
add dh, 2
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
add dl, 0x21
lea edi, [ebp - 0x13a]
mov dword [esp + 4], edi
mov ch, 0
or dl, 0x4a
call dword [0x10015148]
pop ebp
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x162], eax
mov ch, 0xc1
cmp dword [ebp - 0x162], 0
jne 0x425c6a
jmp 0x425cea
mov word [ebp - 0x166], 0x3d
and dh, 0x5a
or dh, 0x83
mov word [ebp - 0x164], 0
sub dl, 0xbf
mov word [ebp - 0x168], 0x71
or ch, 0xfb
sub ch, 0x1f
push ebp
xor dh, 0x92
sub esp, 8
mov eax, dword [ebp - 0x162]
mov dword [esp], eax
xor dh, 0xd8
sub dh, 0xb6
and dl, 0xa7
lea edi, [ebp - 0x168]
mov dword [esp + 4], edi
sub dh, 0x3e
mov ch, 0x83
call dword [0x10015148]
pop ebp
or dh, 1
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jne 0x425ce3
jmp 0x425cea
add dword [ebp - 0x184], 4
or cl, 0x15
cmp dword [ebp - 0x184], 0
jne 0x425cfb
jmp 0x42625b
mov dword [ebp - 0xf0], 0
add dl, 0xe2
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x146], eax
add dh, 0x79
shl dword [ebp - 0x146], 1
mov esi, dword [ebp - 0x184]
add esi, dword [ebp - 0x146]
cmp word [esi], 0
jne 0x425d31
jmp 0x425d5d
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x152], eax
add dh, 0x6d
mov ch, 8
shl dword [ebp - 0x152], 1
xor dh, 0xf8
mov esi, dword [ebp - 0x184]
add esi, dword [ebp - 0x152]
cmp word [esi], 0x26
jne 0x425d5f
jmp 0x425d86
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x10c], eax
add cl, 0xf9
shl dword [ebp - 0x10c], 1
mov esi, dword [ebp - 0x184]
add esi, dword [ebp - 0x10c]
cmp word [esi], 0x3b
jne 0x425d8b
or dh, 0xe
jmp 0x425da6
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x30], eax
add dword [ebp - 0xf0], 1
sub dl, 0xf0
add cl, 0x93
jmp 0x425d08
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xe8], eax
and dh, 0xd3
shl dword [ebp - 0xe8], 1
mov esi, dword [ebp - 0x184]
add esi, dword [ebp - 0xe8]
mov word [esi], 0
mov dh, 0x13
xor ch, 0xd5
push ebp
sub esp, 4
mov eax, dword [ebp - 0x184]
mov dword [esp], eax
add ch, 0x8f
call dword [0x10015164]
pop ebp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x174], eax
add dl, 0x6a
or cl, 0x91
push ebp
xor dl, 0x3e
sub esp, 4
and cl, 0x34
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
call fcn.0041a360
pop ebp
xor dl, 0xa6
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
je 0x425e2a
jmp 0x42623c
push ebp
and dh, 0xa2
sub esp, 4
sub ch, 0xd4
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
and ch, 0xf2
call dword [0x10015164]
pop ebp
sub cl, 0xfd
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x66], eax
xor cl, 0xbf
mov dl, 0xe7
cmp dword [ebp - 0x66], 0
jne 0x425e66
jmp 0x425eb5
push ebp
sub esp, 4
mov eax, dword [ebp - 0x66]
mov dword [esp], eax
add ch, 0x4c
call fcn.00428343
pop ebp
xor dl, 0x19
mov dword [ebp - 0x14a], eax
mov eax, dword [ebp - 0x14a]
mov dword [ebp - 0xd4], eax
xor dh, 0xc7
xor cl, 1
push ebp
sub esp, 4
xor ch, 0x16
mov eax, dword [ebp - 0x66]
mov dword [esp], eax
or dh, 0xd9
mov dh, 0x7f
call dword [0x10015168]
pop ebp
mov dword [ebp - 0x1a2], eax
jmp 0x425ec1
mov dword [ebp - 0xd4], 0
mov dh, 0x99
cmp dword [ebp - 0xd4], 0
jne 0x425ecf
jmp 0x42623c
push ebp
sub esp, 4
mov cl, 0x6e
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
xor ch, 0x47
sub dl, 0x94
call fcn.0041a45b
pop ebp
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x2c], eax
sub dh, 0xd9
add dh, 0x4b
add dword [ebp - 0x2c], 0x80
push ebp
and cl, 0x14
sub esp, 8
mov dword [esp], 0
mov eax, dword [ebp - 0x2c]
mov dword [esp + 4], eax
call dword [0x10015160]
pop ebp
add dl, 0x11
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x188], eax
and dl, 0x4f
or dl, 0x8b
mov word [ebp - 0xba], 0x2f
mov word [ebp - 0x98], 0x63
and ch, 0xc8
mov word [ebp - 0xaa], 0x63
xor cl, 0x5e
mov word [ebp - 0x7e], 0x61
add dh, 0x2f
sub ch, 0x5e
mov word [ebp - 0xb4], 0x73
mov word [ebp - 0x6c], 0x71
and cl, 0x3f
mov word [ebp - 0x9a], 0x2e
mov cl, 0x7e
mov word [ebp - 0x78], 0x32
mov word [ebp - 0x74], 0x62
mov word [ebp - 0x84], 0x3d
mov word [ebp - 0x76], 0x36
and cl, 0xa7
xor dl, 0xdf
mov word [ebp - 0x80], 0x67
and cl, 0xe9
xor cl, 0x1f
mov word [ebp - 0xac], 0x69
and dh, 0x16
mov word [ebp - 0x94], 0x6d
mov word [ebp - 0x9e], 0x63
and dl, 0xf2
mov word [ebp - 0x72], 0x59
sub cl, 0x34
sub dh, 0xa0
mov word [ebp - 0xa8], 0x6b
and dl, 0x36
add cl, 0x94
mov word [ebp - 0x6e], 0x26
mov word [ebp - 0xa0], 0x72
add ch, 0x32
mov word [ebp - 0x90], 0x63
and ch, 0x7c
xor cl, 0x22
mov word [ebp - 0x9c], 0x68
mov word [ebp - 0xbe], 0x70
mov cl, 0xd
mov word [ebp - 0x8a], 0x61
or dl, 0x84
mov word [ebp - 0xa4], 0x65
mov word [ebp - 0x92], 0x2f
mov word [ebp - 0x8e], 0x73
sub ch, 0xce
mov word [ebp - 0xc2], 0x74
add dh, 0x23
sub cl, 0xf8
mov word [ebp - 0x86], 0x66
sub ch, 0x6f
xor dh, 0x3b
mov word [ebp - 0xc4], 0x68
or dh, 0xd7
mov cl, 0xb2
mov word [ebp - 0x96], 0x6f
mov dl, 0x3b
mov word [ebp - 0xb6], 0x6d
add ch, 0x29
mov word [ebp - 0x6a], 0x3d
xor ch, 0x34
mov word [ebp - 0xb2], 0x6e
mov cl, 0xf
mov word [ebp - 0xb0], 0x71
mov word [ebp - 0xa2], 0x61
mov ch, 0xc
mov word [ebp - 0xa6], 0x73
mov word [ebp - 0x82], 0x51
mov word [ebp - 0x88], 0x66
and dh, 0xac
mov word [ebp - 0xb8], 0x2f
mov word [ebp - 0xbc], 0x3a
mov word [ebp - 0xc0], 0x74
mov word [ebp - 0x7c], 0x48
mov word [ebp - 0x68], 0
mov dh, 0x67
sub dh, 0x69
mov word [ebp - 0x70], 0x47
xor dh, 9
mov word [ebp - 0xae], 0x75
mov word [ebp - 0x8c], 0x3f
mov word [ebp - 0x7a], 0x6f
push ebp
mov cl, 0xaa
sub esp, 8
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
sub cl, 8
lea edi, [ebp - 0xc4]
mov dword [esp + 4], edi
call dword [0x10015144]
pop ebp
and dh, 0x47
mov dword [ebp - 0x14e], eax
push ebp
xor dl, 5
sub esp, 8
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
xor dl, 0xfa
mov eax, dword [ebp - 0xd4]
mov dword [esp + 4], eax
and dh, 0x18
call dword [0x10015140]
pop ebp
xor dh, 0
mov dword [ebp - 0xe0], eax
push ebp
or ch, 0xbf
sub esp, 8
sub dl, 0xfc
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
mov cl, 0xcf
or cl, 0x8f
xor ch, 0x72
mov eax, dword [ebp - 0x174]
mov dword [esp + 4], eax
mov ch, 0xa4
call fcn.004218e3
pop ebp
and cl, 0x37
mov dword [ebp - 0x142], eax
mov esi, dword [ebp + 8]
add esi, 0x10
mov eax, dword [ebp - 0x142]
mov dword [esi], eax
push ebp
mov dh, 0x54
sub esp, 4
mov edi, dword [ebp + 8]
add edi, 0x10
mov eax, dword [edi]
mov dword [esp], eax
call fcn.00425521
pop ebp
and ch, 0x47
mov dword [ebp - 0x16c], eax
mov esi, dword [ebp + 8]
add esi, 4
mov eax, dword [ebp - 0x16c]
mov dword [esi], eax
push ebp
add dl, 0x4d
sub esp, 4
add ch, 0xc8
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
and ch, 0xbb
call dword [0x10015168]
pop ebp
or dh, 0x6b
mov dword [ebp - 0x28], eax
push ebp
sub esp, 4
xor ch, 0xa7
mov eax, dword [ebp - 0xd4]
mov dword [esp], eax
add dh, 0xb8
add ch, 0xfb
call dword [0x10015168]
pop ebp
or dl, 0x93
mov dword [ebp - 0x15a], eax
push ebp
sub esp, 4
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
mov dh, 0xf7
xor dh, 0x9d
call dword [0x10015168]
pop ebp
add cl, 0x71
mov dword [ebp - 0x4a], eax
push ebp
or cl, 0x66
sub esp, 4
add dl, 0xc
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
xor dl, 0x26
call dword [0x10015168]
pop ebp
mov dword [ebp - 0x13e], eax
popfd
and ch, 0x6a
pop ebx
sub dl, 0x32
pop edi
pop esi
leave
ret 0xc