Function at 0x42e3f0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
mov eax, dword [0x48dd78]
xor eax, esp
mov dword [esp + 0xac], eax
push ebp
mov ebp, dword [esp + 0xbc]
push esi
mov esi, dword [esp + 0xbc]
mov dword [esp + 8], ebp
test esi, esi
je 0x42e9b2
test ebp, ebp
je 0x42e9b2
mov al, byte [esi + 0x130]
push ebx
push edi
cmp al, 8
jae 0x42e4a5
movzx ebx, al
mov edi, 8
sub edi, ebx
push edi
lea eax, [ebx + ebp + 0x20]
push eax
push esi
mov dword [esi + 0x278], 0x11
call fcn.004354a0
push edi
add ebp, 0x20
push ebx
push ebp
mov byte [esi + 0x130], 8
call fcn.0042d3a0
add esp, 0x18
test eax, eax
je 0x42e499
cmp ebx, 4
jae 0x42e48b
add edi, 0xfffffffc
push edi
push ebx
push ebp
call fcn.0042d3a0
add esp, 0xc
test eax, eax
je 0x42e48b
push 0x47be3c
jmp 0x42e490
push 0x47be14
push esi
call fcn.0042faf0
add esp, 8
cmp ebx, 3
jae 0x42e4a5
or dword [esi + 0x6c], 0x1000
mov bl, 0x54
jmp 0x42e4b0
mov byte [esp + 0x2c], 0x49
mov byte [esp + 0x2d], 0x48
mov byte [esp + 0x2e], 0x44
mov byte [esp + 0x2f], 0x52
mov byte [esp + 0x8c], 0x49
mov byte [esp + 0x8d], 0x44
mov byte [esp + 0x8e], 0x41
mov byte [esp + 0x8f], bl
mov byte [esp + 0xac], 0x49
mov byte [esp + 0xad], 0x45
mov byte [esp + 0xae], 0x4e
mov byte [esp + 0xaf], 0x44
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], 0x4c
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], 0x45
mov byte [esp + 0x3c], 0x62
mov byte [esp + 0x3d], 0x4b
mov byte [esp + 0x3e], 0x47
mov byte [esp + 0x3f], 0x44
mov byte [esp + 0x7c], 0x63
mov byte [esp + 0x7d], 0x48
mov byte [esp + 0x7e], 0x52
mov byte [esp + 0x7f], 0x4d
mov byte [esp + 0x4c], 0x67
mov byte [esp + 0x4d], 0x41
mov byte [esp + 0x4e], 0x4d
mov byte [esp + 0x4f], 0x41
mov byte [esp + 0x9c], 0x68
mov byte [esp + 0x9d], 0x49
mov byte [esp + 0x9e], 0x53
mov byte [esp + 0x9f], bl
mov byte [esp + 0x54], 0x69
mov byte [esp + 0x55], 0x43
mov byte [esp + 0x56], 0x43
mov byte [esp + 0x57], 0x50
mov byte [esp + 0xb4], 0x69
mov byte [esp + 0xb5], bl
mov byte [esp + 0xb6], 0x58
mov byte [esp + 0xb7], 0x74
mov byte [esp + 0x5c], 0x6f
mov byte [esp + 0x5d], 0x46
mov byte [esp + 0x5e], 0x46
mov byte [esp + 0x5f], 0x73
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0x43
mov byte [esp + 0x1e], 0x41
mov byte [esp + 0x1f], 0x4c
mov byte [esp + 0x24], 0x70
mov byte [esp + 0x25], 0x48
mov byte [esp + 0x26], 0x59
mov byte [esp + 0x27], 0x73
mov byte [esp + 0x34], 0x73
mov byte [esp + 0x35], 0x42
mov byte [esp + 0x36], 0x49
mov byte [esp + 0x37], bl
mov byte [esp + 0x6c], 0x73
mov byte [esp + 0x6d], 0x43
mov byte [esp + 0x6e], 0x41
mov byte [esp + 0x6f], 0x4c
mov byte [esp + 0x64], 0x73
mov byte [esp + 0x65], 0x50
mov byte [esp + 0x66], 0x4c
mov byte [esp + 0x67], bl
mov byte [esp + 0x44], 0x73
mov byte [esp + 0x45], 0x52
mov byte [esp + 0x46], 0x47
mov byte [esp + 0x47], 0x42
mov byte [esp + 0x74], 0x74
mov byte [esp + 0x75], 0x45
mov byte [esp + 0x76], 0x58
mov byte [esp + 0x77], 0x74
mov byte [esp + 0x84], 0x74
mov byte [esp + 0x85], 0x49
mov byte [esp + 0x86], 0x4d
mov byte [esp + 0x87], 0x45
mov byte [esp + 0x94], 0x74
mov byte [esp + 0x95], 0x52
mov byte [esp + 0x96], 0x4e
mov byte [esp + 0x97], 0x53
mov byte [esp + 0xa4], 0x7a
push esi
mov byte [esp + 0xa9], bl
mov byte [esp + 0xaa], 0x58
mov byte [esp + 0xab], 0x74
call fcn.00438d10
mov ebp, dword [esp + 0x90]
lea ecx, [esi + 0x120]
add esp, 4
mov edi, eax
cmp dword [ecx], ebp
jne 0x42e6cc
mov eax, dword [esi + 0x6c]
test al, 8
je 0x42e6cc
or eax, 0x2000
mov dword [esi + 0x6c], eax
mov eax, dword [ecx]
cmp eax, dword [esp + 0x2c]
jne 0x42e6e8
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.00438e40
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0xac]
jne 0x42e705
mov edx, dword [esp + 0x10]
push edi
push edx
push esi
call fcn.00439150
add esp, 0xc
jmp 0x42e4b0
push ecx
push esi
call fcn.0042db30
add esp, 8
test eax, eax
je 0x42e769
cmp dword [esi + 0x120], ebp
jne 0x42e71f
or dword [esi + 0x6c], 4
mov eax, dword [esp + 0x10]
push edi
push eax
push esi
call fcn.0043b600
mov eax, dword [esi + 0x120]
add esp, 0xc
cmp eax, dword [esp + 0x14]
jne 0x42e743
or dword [esi + 0x6c], 2
jmp 0x42e4b0
cmp eax, ebp
jne 0x42e4b0
mov eax, dword [esi + 0x6c]
test al, 1
jne 0x42e960
push 0x47bdf8
push esi
call fcn.0042faf0
add esp, 8
jmp 0x42e9b0
mov eax, dword [esi + 0x120]
cmp eax, dword [esp + 0x14]
jne 0x42e789
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.00438fc0
add esp, 0xc
jmp 0x42e4b0
cmp eax, ebp
je 0x42e97d
push edi
cmp eax, dword [esp + 0x40]
jne 0x42e7ab
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0043a270
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x80]
jne 0x42e7c7
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00439490
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x50]
jne 0x42e7e0
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.004391a0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0xa0]
jne 0x42e7fc
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0043a4e0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x60]
jne 0x42e815
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0043a7e0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x20]
jne 0x42e82e
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0043a930
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x70]
jne 0x42e847
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0043ac40
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x28]
jne 0x42e860
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0043a690
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x38]
jne 0x42e879
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00439320
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x48]
jne 0x42e892
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.004398f0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x58]
jne 0x42e8ab
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00439af0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x68]
jne 0x42e8c4
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00439ce0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x78]
jne 0x42e8dd
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0043af80
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x88]
jne 0x42e8f9
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0043ae50
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0x98]
jne 0x42e915
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00439fd0
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0xa8]
jne 0x42e931
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.0043b130
add esp, 0xc
jmp 0x42e4b0
cmp eax, dword [esp + 0xb8]
jne 0x42e94d
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.0043b340
add esp, 0xc
jmp 0x42e4b0
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.0043b600
add esp, 0xc
jmp 0x42e4b0
cmp byte [esi + 0x12a], 3
jne 0x42e9b0
test al, 2
jne 0x42e9b0
push 0x47bddc
push esi
call fcn.0042faf0
add esp, 8
jmp 0x42e9b0
mov eax, dword [esi + 0x6c]
test al, 1
jne 0x42e98b
push 0x47bdf8
jmp 0x42e99d
cmp byte [esi + 0x12a], 3
jne 0x42e9a6
test al, 2
jne 0x42e9a6
push 0x47bddc
push esi
call fcn.0042faf0
add esp, 8
or dword [esi + 0x6c], 4
mov dword [esi + 0x110], edi
pop edi
pop ebx
mov ecx, dword [esp + 0xb4]
pop esi
pop ebp
xor ecx, esp
call fcn.0043e9e1
add esp, 0xb0
ret