Function at 0x42f2a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47956e
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x4947a0]
xor eax, esp
mov dword [esp + 0x128], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4947a0]
xor eax, esp
push eax
lea eax, [esp + 0x144]
mov dword fs:[0], eax
sub esp, 0x1c
mov ecx, esp
xor ebp, ebp
mov dword [esp + 0x168], ebp
mov dword [esp + 0x34], esp
push 1
mov ebx, 0xf
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], ebp
push 0x483354
mov byte [ecx + 4], 0
call fcn.00401bf0
mov ecx, dword [esp + 0x174]
mov esi, 0x10
cmp dword [esp + 0x188], esi
jae 0x42f324
lea ecx, [esp + 0x174]
push str.TKD:
lea edi, [esp + 0xc8]
call fcn.0040f860
add esp, 4
mov byte [esp + 0x168], 1
mov ecx, esp
mov dword [esp + 0x34], esp
push 1
mov dword [ecx + 0x18], ebx
mov dword [ecx + 0x14], ebp
push 0x483354
mov byte [ecx + 4], 0
call fcn.00401bf0
mov ecx, dword [esp + 0x174]
cmp dword [esp + 0x188], esi
jae 0x42f373
lea ecx, [esp + 0x174]
push str.HTP:
lea edi, [esp + 0x100]
call fcn.0040f860
add esp, 0x20
mov bl, 2
mov byte [esp + 0x14c], bl
mov ecx, dword [0x4b1314]
sub ecx, dword [0x4b1310]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edi, [esp + 0x38]
je 0x42f3f6
lea ecx, [esp + 0xa8]
push ecx
mov ecx, 0x484834
call fcn.0040db00
add esp, 4
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [esp + 0xb4]
mov byte [esp + 0x158], 3
call fcn.00401910
mov byte [esp + 0x14c], bl
cmp dword [esp + 0x50], esi
jb 0x42f43d
mov edx, dword [esp + 0x3c]
push edx
jmp 0x42f435
lea eax, [esp + 0xa8]
push eax
mov ecx, str.tkd
call fcn.0040db00
add esp, 4
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [esp + 0xb4]
mov byte [esp + 0x158], 4
call fcn.00401910
mov byte [esp + 0x14c], bl
cmp dword [esp + 0x50], esi
jb 0x42f43d
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004396bc
add esp, 4
push 4
push str.ret
lea ecx, [esp + 0x5c]
mov dword [esp + 0x74], 0xf
mov dword [esp + 0x70], ebp
mov byte [esp + 0x60], 0
call fcn.00401bf0
mov byte [esp + 0x14c], 5
mov esi, dword [0x4b1310]
cmp esi, dword [0x4b1314]
jbe 0x42f479
call fcn.0045e79a
mov ebx, dword [0x4b1304]
mov edi, dword [0x4b1314]
cmp dword [0x4b1310], edi
jbe 0x42f492
call fcn.0045e79a
cmp ebx, ebp
je 0x42f49e
cmp ebx, dword [0x4b1304]
je 0x42f4a3
call fcn.0045e79a
cmp esi, edi
je 0x42f57d
cmp ebx, ebp
jne 0x42f572
call fcn.0045e79a
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x42f4c4
call fcn.0045e79a
push 0xffffffffffffffff
push ebp
push esi
lea ecx, [esp + 0x7c]
mov dword [esp + 0x94], 0xf
mov dword [esp + 0x90], ebp
mov byte [esp + 0x80], 0
call fcn.00401910
lea edx, [esp + 0x70]
push edx
lea eax, [esp + 0x58]
push eax
lea edi, [esp + 0x40]
mov byte [esp + 0x154], 6
call fcn.0040d8e0
add esp, 8
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x158], 7
call fcn.00401910
cmp dword [esp + 0x50], 0x10
jb 0x42f532
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.004396bc
add esp, 4
cmp ebx, ebp
jne 0x42f579
call fcn.0045e79a
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x42f547
call fcn.0045e79a
add esi, 0x1c
mov byte [esp + 0x14c], 5
cmp dword [esp + 0x88], 0x10
jb 0x42f47f
mov edx, dword [esp + 0x74]
push edx
call fcn.004396bc
add esp, 4
jmp 0x42f47f
mov eax, dword [ebx]
jmp 0x42f4ba
mov eax, dword [ebx]
jmp 0x42f53d
mov ebx, dword [0x4b1314]
cmp dword [0x4b1310], ebx
jbe 0x42f590
call fcn.0045e79a
mov edi, dword [0x4b1310]
mov esi, dword [0x4b1304]
cmp edi, dword [0x4b1314]
jbe 0x42f5a9
call fcn.0045e79a
mov eax, dword [0x4b1304]
push ebx
push esi
push edi
push eax
lea ebx, [esp + 0x10c]
mov esi, 0x4b1304
call fcn.00437030
lea ecx, [esp + 0xa8]
push ecx
lea edx, [esp + 0x58]
push edx
lea edi, [esp + 0x40]
call fcn.0040d8e0
add esp, 8
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x158], 8
call fcn.00401910
mov ebp, 0x10
mov byte [esp + 0x14c], 5
cmp dword [esp + 0x50], ebp
jb 0x42f613
mov eax, dword [esp + 0x3c]
push eax
call fcn.004396bc
add esp, 4
lea ecx, [esp + 0x54]
push ecx
mov edi, str.mc
lea esi, [esp + 0x3c]
call fcn.0040da50
add esp, 4
push 0x4ae44c
push eax
lea edi, [esp + 0x94]
mov byte [esp + 0x154], 9
call fcn.0040d8e0
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x158], 0xa
call fcn.00401910
cmp dword [esp + 0xa4], ebp
jb 0x42f674
mov edx, dword [esp + 0x90]
push edx
call fcn.004396bc
add esp, 4
mov byte [esp + 0x14c], 5
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
cmp dword [esp + 0x50], ebp
jb 0x42f6a8
mov eax, dword [esp + 0x3c]
push eax
call fcn.004396bc
add esp, 4
mov ecx, dword [0x4b12fc]
sub ecx, dword [0x4b12f8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0x42f9b0
push ebx
push 0x483234
lea ecx, [esp + 0x78]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
call fcn.00401bf0
mov byte [esp + 0x14c], 0xb
mov esi, dword [0x4b12f8]
cmp esi, dword [0x4b12fc]
jbe 0x42f711
call fcn.0045e79a
mov ebp, dword [0x4b12ec]
mov edi, dword [0x4b12fc]
cmp dword [0x4b12f8], edi
jbe 0x42f72a
call fcn.0045e79a
cmp ebp, ebx
je 0x42f736
cmp ebp, dword [0x4b12ec]
je 0x42f73b
call fcn.0045e79a
cmp esi, edi
je 0x42f8fc
mov eax, dword [esp + 0x18]
inc eax
push eax
push str.url_d
lea edx, [esp + 0x110]
push 0x32
push edx
mov dword [esp + 0x28], eax
call fcn.0045e827
lea eax, [esp + 0x118]
add esp, 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x42f787
sub eax, edx
push eax
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x94]
call fcn.00401bf0
mov byte [esp + 0x14c], 0xc
cmp ebp, ebx
jne 0x42f8ef
call fcn.0045e79a
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x42f7c6
call fcn.0045e79a
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [esp + 0xd0]
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
call fcn.00401910
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x74]
push edx
lea edi, [esp + 0x24]
mov byte [esp + 0x154], 0xd
call fcn.0040d8e0
lea ecx, [esp + 0xcc]
push ecx
push eax
lea edi, [esp + 0x48]
mov byte [esp + 0x15c], 0xe
call fcn.0040d8e0
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x158], 0xf
call fcn.00401910
cmp dword [esp + 0x50], 0x10
jb 0x42f853
mov edx, dword [esp + 0x3c]
push edx
call fcn.004396bc
add esp, 4
mov edi, 0x10
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x34], edi
jb 0x42f87b
mov eax, dword [esp + 0x20]
push eax
call fcn.004396bc
add esp, 4
cmp ebp, ebx
jne 0x42f8f7
call fcn.0045e79a
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x42f890
call fcn.0045e79a
add esi, 0x1c
cmp dword [esp + 0xdc], edi
jb 0x42f8ac
mov ecx, dword [esp + 0xc8]
push ecx
call fcn.004396bc
add esp, 4
mov byte [esp + 0x14c], 0xb
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
cmp dword [esp + 0xa4], edi
jb 0x42f717
mov edx, dword [esp + 0x90]
push edx
call fcn.004396bc
add esp, 4
jmp 0x42f717
mov eax, dword [ebp]
jmp 0x42f7bc
mov eax, dword [ebp]
jmp 0x42f886
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x58]
push ecx
lea edi, [esp + 0x24]
call fcn.0040d8e0
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x158], 0x10
call fcn.00401910
mov byte [esp + 0x14c], 0xb
cmp dword [esp + 0x34], 0x10
jb 0x42f943
mov edx, dword [esp + 0x20]
push edx
call fcn.004396bc
add esp, 4
mov ecx, dword [0x4b12fc]
mov eax, dword [0x4b12f8]
mov ebx, ecx
cmp eax, ecx
jbe 0x42f964
call fcn.0045e79a
mov ecx, dword [0x4b12fc]
mov eax, dword [0x4b12f8]
mov esi, dword [0x4b12ec]
mov edi, eax
cmp eax, ecx
jbe 0x42f975
call fcn.0045e79a
mov eax, dword [0x4b12ec]
push ebx
push esi
push edi
push eax
lea ebx, [esp + 0x10c]
mov esi, 0x4b12ec
call fcn.00437030
mov byte [esp + 0x14c], 5
cmp dword [esp + 0x88], 0x10
jb 0x42f9ae
mov ecx, dword [esp + 0x74]
push ecx
call fcn.004396bc
add esp, 4
xor ebx, ebx
mov esi, dword [0x4ae538]
mov eax, esi
cmp esi, 2
jb 0x42f9c2
mov eax, 2
cmp dword [0x4ae53c], 0x10
mov edx, dword [0x4ae528]
jae 0x42f9d6
mov edx, 0x4ae528
mov ecx, 0x484310
call fcn.00401d10
cmp eax, ebx
jne 0x42fb14
cmp esi, 2
jb 0x42fb14
xor eax, eax
cmp esi, 2
setne al
cmp eax, ebx
jne 0x42fb14
mov byte [esp + 0xfd], 0x2e
mov byte [esp + 0xfe], 0x29
mov byte [esp + 0xff], 0x35
mov byte [esp + 0x100], 0x27
mov byte [esp + 0x101], 0x32
mov byte [esp + 0x102], 0x72
mov byte [esp + 0x103], 0x70
mov byte [esp + 0x104], 0x42
lea eax, [esp + 0xfc]
mov byte [esp + 0xfc], 0x61
inc eax
xor byte [eax], 0x42
jne 0x42fa50
mov edx, dword [esp + 0x68]
push ebx
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x80]
mov ebp, 0xf
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push eax
lea esi, [esp + 0x12c]
mov byte [ecx + 4], bl
call fcn.00401910
lea ecx, [esp + 0x5c]
push ecx
mov ecx, esi
call fcn.00419120
lea edx, [esp + 0x60]
push edx
mov ecx, str.dat
lea edi, [esp + 0x48]
mov byte [esp + 0x178], 0x11
call fcn.0040db00
add esp, 0x2c
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x158], 0x12
call fcn.00401910
mov byte [esp + 0x14c], 0x11
cmp dword [esp + 0x34], 0x10
jb 0x42fae5
mov eax, dword [esp + 0x20]
push eax
call fcn.004396bc
add esp, 4
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x60]
call fcn.00401910
mov byte [esp + 0x14c], 5
cmp dword [esp + 0x50], 0x10
jb 0x42fb19
mov edx, dword [esp + 0x3c]
push edx
call fcn.004396bc
add esp, 4
jmp 0x42fb19
mov ebp, 0xf
call fcn.00414060
sub esp, 0x1c
cmp dword [esp + 0x110], ebx
mov ecx, esp
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
mov byte [ecx + 4], bl
ja 0x42fb58
mov dword [esp + 0x34], esp
push ebx
push 0x483234
call fcn.00401bf0
sub esp, 0x1c
mov byte [esp + 0x184], 0x13
mov dword [esp + 0x134], esp
jmp 0x42fb7e
mov dword [esp + 0x118], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x104]
push edx
call fcn.00401910
sub esp, 0x1c
mov byte [esp + 0x184], 0x14
mov dword [esp + 0x50], esp
mov ecx, esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x94]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00401910
mov byte [esp + 0x184], 5
call fcn.0042efc0
mov esi, dword [0x4b1280]
add esp, 0x38
cmp esi, dword [0x4b1284]
jbe 0x42fbbc
call fcn.0045e79a
mov eax, dword [0x4b1274]
cmp eax, ebx
jne 0x42fcb7
call fcn.0045e79a
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x42fbda
call fcn.0045e79a
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push ebx
push ebx
push 0x46c
push eax
mov dword [esp + 0x110], ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov esi, 0x10
cmp dword [esp + 0x6c], esi
jb 0x42fc0c
mov edx, dword [esp + 0x58]
push edx
call fcn.004396bc
add esp, 4
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
cmp dword [esp + 0xf8], esi
jb 0x42fc31
mov eax, dword [esp + 0xe4]
push eax
call fcn.004396bc
add esp, 4
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
cmp dword [esp + 0xc0], esi
jb 0x42fc5f
mov ecx, dword [esp + 0xac]
push ecx
call fcn.004396bc
add esp, 4
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
cmp dword [esp + 0x16c], esi
jb 0x42fc8d
mov edx, dword [esp + 0x158]
push edx
call fcn.004396bc
add esp, 4
mov ecx, dword [esp + 0x144]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.0045e1a6
add esp, 0x13c
ret 0x1c
mov eax, dword [eax]
jmp 0x42fbd0