Function at 0x42af20
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x9d8
push 0x1000
call fcn.00408c90
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x728], 0x8d5c5670
mov dword [esp + 0x72c], 0xbb88eb9f
mov word [esp + 0x730], 0x6342
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 1
xor edx, 0xc7f3d4f1
mov ecx, eax
and ecx, 0xe
sub ecx, edx
mov esi, 0x15250de4
sub esi, ecx
add ecx, 0x1b
mov edx, esi
and edx, 0xd9182266
mov edi, ecx
and edi, 0x19
or edi, edx
movzx edx, byte [esp + eax + 0x728]
xor edi, 0x400c099
and edi, esi
lea esi, [edi + edi]
not esi
add esi, edi
mov edi, edx
not edi
or edi, esi
or ecx, edx
add edi, edx
mov edx, 0xfe
sub edx, edi
and edx, ecx
add dl, 0xb0
mov byte [esp + eax + 0x728], dl
inc eax
cmp eax, 0xa
jne 0x42af70
mov eax, dword [0x442014]
mov dword [esp + 0x41c], 0x6a484a2c
mov dword [esp + 0x420], 0x848a8585
mov dword [esp + 0x424], 0xb082ba89
mov dword [esp + 0x428], 0xbbbbba86
mov word [esp + 0x42c], 0x774c
mov byte [esp + 0x42e], 0x18
xor ecx, ecx
nop
nop
nop
nop
nop
nop
mov edx, ecx
xor edx, 0x69
mov esi, ecx
or esi, 0x96
and edx, esi
add edx, esi
xor dl, byte [esp + ecx + 0x41c]
add dl, 0x50
mov byte [esp + ecx + 0x41c], dl
inc ecx
cmp ecx, 0x13
jne 0x42b020
mov ecx, dword [0x442010]
mov dword [esp + 0xa8], 0x80563331
mov dword [esp + 0xac], 0x7676378f
mov dword [esp + 0xb0], 0x693c418d
mov dword [esp + 0xb4], 0x6d403f59
mov dword [esp + 0xb8], 0x64696e97
mov dword [esp + 0xbc], 0x669f6868
mov dword [esp + 0xc0], 0x2e066098
mov dword [esp + 0xc4], 0xa8a54d2e
mov dword [esp + 0xc8], 0x59514014
mov dword [esp + 0xcc], 0x5654175a
mov dword [esp + 0xd0], 0x1d66a85d
mov dword [esp + 0xd4], 0x4cb5537e
mov dword [esp + 0xd8], 0x4449424f
mov dword [esp + 0xdc], 0xbd4d4cb4
mov dword [esp + 0xe0], 0x4e4d47ba
mov dword [esp + 0xe4], 0x3e32504b
mov dword [esp + 0xe8], 0x757959c6
mov dword [esp + 0xec], 0x3435c21a
mov dword [esp + 0xf0], 0x7d0e183b
mov dword [esp + 0xf4], 0x2d29ca1c
mov dword [esp + 0xf8], 0x1641926
mov dword [esp + 0xfc], 0x69682423
mov dword [esp + 0x100], 0x1d1e6b12
mov dword [esp + 0x104], 0x5c7a1b1c
mov dword [esp + 0x108], 0x313d3f52
mov word [esp + 0x10c], 0x572c
mov byte [esp + 0x10e], pe_nt_image_headers32
mov edx, 2
mov esi, 0xfd
nop
nop
nop
movzx edi, byte [esp + edx + 0xa6]
mov ebx, esi
xor ebx, edx
and ebx, edi
xor ebx, edx
add bl, 0xf0
mov byte [esp + edx + 0xa6], bl
inc edx
dec esi
cmp edx, 0x69
jne 0x42b180
movzx edx, byte [esp + 0xa8]
mov esi, dword [esp + 0x18]
test dl, dl
je 0x42b1cb
lea edi, [esp + 0xa9]
mov esi, dword [esp + 0x18]
nop
nop
nop
nop
mov byte [esi], dl
inc esi
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42b1c0
mov byte [esi], 0
movzx edx, byte [ecx]
test dl, dl
je 0x42b1eb
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], dl
inc esi
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x42b1e0
mov byte [esi], 0
movzx ecx, byte [esp + 0x41c]
test cl, cl
je 0x42b21b
lea edx, [esp + 0x41d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], cl
inc esi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42b210
mov byte [esi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42b23b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], cl
inc esi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42b230
mov byte [esi], 0
movzx eax, byte [esp + 0x728]
test al, al
je 0x42b26b
lea ecx, [esp + 0x729]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], al
inc esi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42b260
mov dword [esp + 4], esi
mov byte [esi], 0
push 0
call fcn.0043d200
add esp, 4
mov edi, eax
xor eax, eax
test edi, edi
setne al
mov eax, dword [eax*4 + 0x4453b4]
mov ecx, 0x35467333
xor ecx, dword [0x4453bc]
add eax, ecx
inc eax
jmp eax