Function at 0x427a0b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0043280d
add esp, 0xc
shr ecx, 0
jne 0x427a32
xchg ebx, ecx
xchg ebx, ecx
je 0x427a2f
je 0x427a32
add eax, 0x48e045c6
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x42
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
ror eax, 0
rol ebx, 1
rol ebx, 0x1f
jo 0x427aa3
pushf
and eax, 0xffffffff
shl eax, 0
popf
jbe 0x427a94
lea edi, [edi + 0xfb9]
lea edi, [edi - 0xfb9]
jno 0x427aa3
add eax, 0x80e04d8a
jmp 0xe09002ad
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x1e]
sub al, 1
mov byte [ebp - 0x1e], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x1d]
sub cl, 1
mov byte [ebp - 0x1d], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
cld
je 0x427b5f
pushf
mov edx, edx
lea edi, [edi + 0x4bb0]
lea edi, [edi - 0x4bb0]
jnp 0x427b54
popf
jbe 0x427b58
jnp 0x427b5a
jno 0x427b5c
jne 0x427b5f
mov eax, 0x16d9ae8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 7], dh
call fcn.0043e8fe
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x427b74
xor eax, eax
jmp 0x427de1
jae 0x427b76
jnp 0x427b82
xchg esp, esp
jb 0x427b7c
xchg ecx, ecx
jp 0x427b82
sub eax, 0xe04d8d5b
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00438b78
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0043280d
add esp, 0xc
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
or esp, 0
or edi, 0
and eax, 0xffffffff
jno 0x427bba
xchg edx, edx
jo 0x427bba
mov edi, 0xfc7d83
cmp dword [ebp - 4], 0
jne 0x427bc7
xor eax, eax
jmp 0x427de1
dec ecx
inc ecx
js 0x427bd4
xchg esp, esp
jae 0x427bcf
lea ebx, [ebx]
jns 0x427bd4
call 0x523ec963
mov ecx, dword [ebp - 4]
push ecx
call fcn.0041b3b3
add esp, 4
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.0043280d
add esp, 0xc
mov esp, esp
and ebx, ebx
jns 0x427c0c
xchg esi, edi
xchg esi, edi
ja 0x427bfc
lea ebx, [ebx + 0x41aa]
lea ebx, [ebx - 0x41aa]
js 0x427c0c
ljmp 0xc648:0xe045c642
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x58
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
xchg edi, edi
jb 0x427c65
mov esi, esi
jge 0x427c60
jbe 0x427c62
jae 0x427c65
xor eax, 0x2ce0458a
add dword [eax + 0x4d8ae045], ecx
in eax, 0x80
jmp 0xe5900477
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1f]
sub cl, 1
mov byte [ebp - 0x1f], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0x1c]
sub al, 1
mov byte [ebp - 0x1c], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
add esp, 0
jns 0x427d06
jg 0x427d18
pushf
mov edi, edi
sub esi, 0
popf
je 0x427d13
je 0x427d15
jle 0x427d18
add dword [ebx + 0x4111903d], 0x3b740000
cmp dword [0x411190], 0
je 0x427d5c
mov edi, edi
and ecx, ecx
add eax, dword [esp]
sub eax, dword [esp]
jp 0x427d2d
jge 0x427d49
pushf
sub esp, 0
not ebx
not ebx
je 0x427d3a
not ecx
not ecx
popf
ja 0x427d42
jne 0x427d44
jo 0x427d46
jl 0x427d49
add eax, 0x50e0458d
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x411190]
push ecx
call fcn.00438b78
mov dword [ebp - 0xc], eax
cmp edx, dword [esp]
jbe 0x427d61
clc
ja 0x427d69
jo 0x427d66
jbe 0x427d69
mov edx, 0x6a136a
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.0043280d
add esp, 0xc
jmp 0x427d7b
sub edx, 0
and ebx, ebx
je 0x427d91
pushf
jmp 0x427d86
jno 0x427d88
popf
js 0x427d8c
mov ebx, ebx
jne 0x427d91
add dword [ebx + 0x7400f47d], 0xe98328
cmp dword [ebp - 0xc], 0
je 0x427dbf
sub ecx, 0
ja 0x427db3
pushf
lea eax, [eax]
jl 0x427da2
ja 0x427da4
call fcn.00427da9