Function at 0x42b040
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xe8
mov eax, dword [0x451450]
mov dword [esp + 0x20], 0x37773905
mov dword [esp + 0x24], 0x33423544
mov dword [esp + 0x28], 0x4f2f316c
mov dword [esp + 0x2c], 0x4b2b4dc0
mov dword [esp + 0x30], 0x47464975
mov byte [esp + 0x34], 0
mov dword [esp + 0x64], 0
mov ecx, dword [esp + 0x64]
cmp ecx, 0x14
ja 0x42b0ef
nop
nop
nop
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x64]
movzx esi, byte [esp + edx + 0x20]
mov edx, ecx
xor edx, 0x1f6bdfb6
and ecx, 0x1f6bdfb6
lea edx, [edx + ecx*2]
lea ecx, [edx + esi]
and edx, esi
mov esi, ecx
not esi
and esi, edx
mov edi, edx
not edi
and ecx, edi
sub ecx, esi
xor edx, ecx
and ecx, edi
add ecx, ecx
sub ecx, edx
mov dword [esp + 0xbc], ecx
mov ecx, dword [esp + 0xbc]
add cl, 0x72
mov edx, dword [esp + 0x64]
mov byte [esp + edx + 0x20], cl
inc dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
cmp ecx, 0x15
jb 0x42b090
lea edi, [esp + 0x9c]
lea esi, [esp + 0x20]
push edi
push 0
push 0
push 9
push esi
push 0
call eax
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jns 0x42b118
mov eax, 0xffffffff
jmp 0x42b11b
lea eax, [ebx + ebx]
push eax
call fcn.0040c630
add esp, 4
mov ebp, eax
mov eax, dword [0x451450]
mov dword [esp + 0x20], 0x69ad6b8f
mov dword [esp + 0x24], 0x6dfe6ff8
mov dword [esp + 0x28], 0x51f553a8
mov dword [esp + 0x2c], 0x55f157c4
mov dword [esp + 0x30], 0x595a5bbf
mov dword [esp + 0x34], 0
mov dword [esp + 0x64], 0
mov ecx, dword [esp + 0x64]
cmp ecx, 0x17
ja 0x42b1b7
nop
nop
nop
nop
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x64]
movzx edx, byte [esp + edx + 0x20]
add ecx, 0x74b36597
xor ecx, edx
mov dword [esp + 0xbc], ecx
mov ecx, dword [esp + 0xbc]
mov edx, ecx
not edx
and edx, 0xf3
and ecx, 0xc
sub ecx, edx
mov edx, dword [esp + 0x64]
mov byte [esp + edx + 0x20], cl
inc dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
cmp ecx, 0x18
jb 0x42b170
push edi
push ebx
push ebp
push 9
push esi
push 0
call eax
mov dword [esp + 0x20], 0x933b91dc
mov dword [esp + 0x24], 0x9f3d9d0f
mov dword [esp + 0x28], 0x9b08990f
mov dword [esp + 0x2c], 0x87868528
lea edx, [esp + 0x30]
mov word [esp + 0x30], 0
mov dword [esp + 0x64], 0
mov eax, dword [esp + 0x64]
cmp eax, 0x11
ja 0x42b251
nop
nop
nop
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
movzx ecx, byte [esp + ecx + 0x20]
mov esi, eax
xor esi, 0x2e743624
and eax, 0x2e743624
lea eax, [esi + eax*2]
xor eax, ecx
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0xbc]
mov ecx, eax
not ecx
and ecx, 0xb4
and eax, 0x4b
sub eax, ecx
mov ecx, dword [esp + 0x64]
mov byte [esp + ecx + 0x20], al
inc dword [esp + 0x64]
mov eax, dword [esp + 0x64]
cmp eax, 0x12
jb 0x42b200
lea edi, [esp + 0xd8]
lea esi, [esp + 0x20]
mov ecx, 4
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [esp + 0xe8]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov dword [esp + 0x20], 0x73db71bc
mov dword [esp + 0x24], 0x7fdd7dcf
mov dword [esp + 0x28], 0x7bc879cf
mov dword [esp + 0x2c], 0x478545e8
mov dword [esp + 0x30], 0x43f441e1
mov dword [esp + 0x34], 0x4ffc4ded
mov dword [esp + 0x38], 0x4b4a49f1
lea esi, [esp + 0x3c]
mov word [esp + 0x3c], 0
mov byte [esp + 0x3e], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0x7c]
cmp ecx, 0x1e
ja 0x42b310
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x7c]
movzx edx, byte [esp + edx + 0x20]
mov edi, ecx
xor edi, 0x4dcd8014
and ecx, 0xcdcd8014
lea ecx, [edi + ecx*2]
xor ecx, edx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x64]
add cl, 0x9c
mov edx, dword [esp + 0x7c]
mov byte [esp + edx + 0x20], cl
inc dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
cmp ecx, 0x1f
jb 0x42b2d0
mov dword [esp + 0xa4], ebp
lea edx, [esp + 0xbc]
lea ebx, [esp + 0x20]
mov edi, edx
mov ecx, 7
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea edi, [esp + 0xd8]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp + 0x20], 0x77df0944
mov dword [esp + 0x24], 0x73dd75eb
mov dword [esp + 0x28], 0x7fe071e3
mov dword [esp + 0x2c], 0x7bca7dd0
mov dword [esp + 0x30], 0x672879c4
lea ebx, [esp + 0x34]
mov word [esp + 0x34], 0x6564
mov dword [esp + 0x36], 0
mov word [esp + 0x3a], 0
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1b
ja 0x42b3fb
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
movzx edi, byte [esp + esi + 0x20]
mov esi, ecx
xor esi, 0x90c8003e
and ecx, 0x10c8003e
lea esi, [esi + ecx*2]
lea ecx, [esi + edi]
and esi, edi
mov edi, ecx
not edi
and edi, esi
mov ebp, esi
not ebp
and ecx, ebp
sub ecx, edi
mov edi, ecx
not edi
and edi, esi
and ecx, ebp
sub ecx, edi
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0x7c]
add cl, 0xca
mov esi, dword [esp + 0x14]
mov byte [esp + esi + 0x20], cl
inc dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1c
jb 0x42b3a0
lea esi, [esp + 0x64]
lea eax, [esp + 0x20]
mov ebp, eax
mov edi, esi
mov ecx, 5
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
lea edi, [esp + 0x78]
mov ecx, 1
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov edi, eax
lea eax, [esp + 0xd8]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], esi
mov ebp, dword [esp + 0xa4]
mov eax, ebp
add eax, 2
mov dword [esp + 0xa8], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x90], 0
cmp ecx, 0xc
setne al
xor ecx, ecx
jmp dword [eax*4 + 0x44d564]
mov ah, 0x42