Function at 0x424c42
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xor cl, 0x34
push ebp
mov ebp, esp
mov dh, 0x66
sub esp, 0x90
push esi
push edi
push ebx
xor ch, 0xfa
pushfd
mov dh, 0x33
mov esi, dword [ebp + 8]
add esi, 0xc
add ch, 0xe5
cmp dword [esi], 0
jne 0x424c69
jmp 0x424c6e
jmp 0x425043
mov dword [ebp - 0x36], 0
push ebp
sub esp, 4
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
sub dl, 0x3e
sub dl, 0xbc
call dword [0x10015164]
pop ebp
mov dword [ebp - 0x4e], eax
mov eax, dword [ebp - 0x4e]
mov dword [ebp - 0x3e], eax
sub ch, 0x1a
push ebp
or dh, 0xb3
sub esp, 0x10
mov eax, dword [ebp - 0x3e]
mov dword [esp], eax
sub cl, 0xbd
xor ch, 0xfe
and dl, 0xa2
mov dword [esp + 4], 0
and dh, 0x9d
mov dh, 0x15
lea edi, [ebp - 0x36]
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x100000
add dl, 0xd7
mov ch, 0x1f
call dword [0x10015138]
pop ebp
mov dword [ebp - 0x3a], eax
push ebp
sub esp, 4
mov eax, dword [ebp - 0x3e]
mov dword [esp], eax
add dl, 0xf4
call fcn.004266b0
pop ebp
and cl, 0x17
mov dword [ebp - 0x82], eax
mov eax, dword [ebp - 0x82]
mov dword [ebp - 0x42], eax
xor ch, 0xa0
cmp dword [ebp - 0x42], 0
jge 0x424d0c
jmp 0x425027
push ebp
sub esp, 4
mov eax, dword [ebp - 0x42]
mov dword [esp], eax
call fcn.00428223
pop ebp
or dh, 0xa0
mov dword [ebp - 0x32], eax
mov eax, dword [ebp - 0x32]
mov dword [ebp - 0x8a], eax
or cl, 0x93
or dl, 0x54
cmp dword [ebp - 0x8a], 0
jne 0x424d3c
jmp 0x424d47
mov esi, dword [ebp - 0x8a]
cmp dword [esi], 0
jne 0x424d49
jmp 0x424d5a
mov esi, dword [ebp - 0x8a]
add esi, 4
and dh, 0xe
cmp dword [esi], 0
jne 0x424d5f
jmp 0x424f75
push ebp
sub esp, 4
and cl, 0x8d
mov edi, dword [ebp - 0x8a]
add edi, 4
mov eax, dword [edi]
mov dword [esp], eax
call fcn.0041a45b
pop ebp
or cl, 0x44
mov dword [ebp - 0x2a], eax
mov eax, dword [ebp - 0x2a]
mov dword [ebp - 0x52], eax
add cl, 0x39
add dword [ebp - 0x52], 0x20
push ebp
sub dh, 0xc7
sub esp, 8
or dh, 0x7e
mov dword [esp], 0
and cl, 0xaa
mov eax, dword [ebp - 0x52]
mov dword [esp + 4], eax
add dl, 0xd
and cl, 0x83
call dword [0x10015160]
pop ebp
and dh, 0xe6
mov dword [ebp - 0x46], eax
mov eax, dword [ebp - 0x46]
mov dword [ebp - 0x2e], eax
or dh, 0xf4
mov word [ebp - 0x64], 0
mov word [ebp - 0x70], 0x65
mov word [ebp - 0x6a], 0x72
add dl, 0xda
mov word [ebp - 0x66], 0x20
sub dl, 0x57
mov word [ebp - 0x6c], 0x65
xor cl, 0x20
xor dl, 0x21
mov word [ebp - 0x72], 0x66
xor dl, 0xac
or ch, 0x34
mov word [ebp - 0x76], 0x52
sub ch, 0x53
mov word [ebp - 0x68], 0x3a
or ch, 0xee
or cl, 0x45
mov word [ebp - 0x6e], 0x72
mov dh, 0x98
mov ch, 0x9d
mov word [ebp - 0x74], 0x65
mov dl, 0x4b
push ebp
and dh, 0xeb
sub esp, 8
sub ch, 0x44
mov eax, dword [ebp - 0x2e]
mov dword [esp], eax
or dl, 0x3a
or dh, 0x71
lea edi, [ebp - 0x76]
mov dword [esp + 4], edi
and dl, 0xc3
call dword [0x10015144]
pop ebp
mov ch, 0x45
mov dword [ebp - 0x1c], eax
push ebp
add dh, 0xfc
sub esp, 8
mov eax, dword [ebp - 0x2e]
mov dword [esp], eax
sub ch, 0x1c
add ch, 0x82
add dh, 0x36
mov edi, dword [ebp - 0x8a]
add edi, 4
xor dh, 0xd2
mov eax, dword [edi]
mov dword [esp + 4], eax
add dl, 0x27
call dword [0x10015140]
pop ebp
mov dword [ebp - 0x7a], eax
mov word [ebp - 0x24], 0xa
or ch, 0xb1
or dl, 0xd6
mov word [ebp - 0x26], 0xd
xor cl, 0xf4
mov word [ebp - 0x22], 0
xor dl, 0x16
push ebp
sub esp, 8
mov eax, dword [ebp - 0x2e]
mov dword [esp], eax
mov dl, 0x34
lea edi, [ebp - 0x26]
mov dword [esp + 4], edi
or cl, 0x79
call dword [0x10015140]
pop ebp
mov dword [ebp - 0x18], eax
mov esi, dword [ebp + 8]
add esi, 0xc
mov dword [esi], 1
mov esi, dword [ebp + 8]
add esi, 0x14
xor cl, 0x5a
mov dword [esi], 1
add dh, 0x71
push ebp
sub esp, 4
or dl, 0x1c
mov edi, dword [ebp - 0x8a]
mov eax, dword [edi]
mov dword [esp], eax
call dword [0x10015164]
pop ebp
mov dword [ebp - 0x62], eax
mov esi, dword [ebp + 8]
add esi, 0x18
mov eax, dword [ebp - 0x62]
mov dword [esi], eax
push ebp
sub cl, 0xb3
sub esp, 4
sub ch, 0xcb
mov eax, dword [ebp - 0x2e]
mov dword [esp], eax
call dword [0x10015164]
pop ebp
and ch, 0xa9
mov dword [ebp - 0x86], eax
mov esi, dword [ebp + 8]
add esi, 0x1c
add cl, 0x9f
mov eax, dword [ebp - 0x86]
mov dword [esi], eax
push ebp
sub esp, 4
mov eax, dword [ebp - 0x2e]
mov dword [esp], eax
call dword [0x10015168]
pop ebp
mov dword [ebp - 0x8e], eax
push ebp
sub esp, 4
mov edi, dword [ebp + 8]
mov eax, dword [edi]
mov dword [esp], eax
and dh, 0xb3
xor cl, 0x9d
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov eax, dword [eax]
add eax, 0x38
or ch, 0x45
call dword [eax]
pop ebp
add cl, 0x53
mov dword [ebp - 0x4a], eax
cmp dword [ebp - 0x8a], 0
jne 0x424f83
jmp 0x425027
xor dh, 0x1e
mov esi, dword [ebp - 0x8a]
cmp dword [esi], 0
jne 0x424f93
jmp 0x424fb1
push ebp
sub esp, 4
mov edi, dword [ebp - 0x8a]
mov eax, dword [edi]
mov dword [esp], eax
mov ch, 0x54
xor dh, 0x17
call dword [0x10015168]
pop ebp
mov dword [ebp - 0x5a], eax
xor cl, 0x12
mov esi, dword [ebp - 0x8a]
add esi, 4
add ch, 0x91
cmp dword [esi], 0
jne 0x424fc7
jmp 0x424fe6
push ebp
sub esp, 4
mov edi, dword [ebp - 0x8a]
add edi, 4
mov eax, dword [edi]
mov dword [esp], eax
or dh, 0x6f
call dword [0x10015168]
pop ebp
mov dword [ebp - 0x20], eax
call dword [0x1001515c]
mov dword [ebp - 0x56], eax
push ebp
or ch, 0xed
sub esp, 0xc
mov eax, dword [ebp - 0x56]
mov dword [esp], eax
mov dword [esp + 4], 0
sub dh, 0xe4
xor ch, 0xe6
xor ch, 0x3a
mov eax, dword [ebp - 0x8a]
mov dword [esp + 8], eax
sub cl, 0xd0
or dl, 0x99
call dword [0x10015158]
pop ebp
mov dword [ebp - 0x7e], eax
push ebp
sub esp, 4
mov dl, 0x9f
mov eax, dword [ebp - 0x3e]
mov dword [esp], eax
sub ch, 0x6d
call dword [0x10015168]
pop ebp
sub dh, 0xe6
mov dword [ebp - 0x5e], eax
popfd
or dl, 0xc6
pop ebx
pop edi
pop esi
xor dl, 0x2a
leave
ret 8