Function at 0x42daa0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xf0
mov dword [esp + 8], 0x79357b57
mov dword [esp + 0xc], 0x65f667e8
mov dword [esp + 0x10], 0x610d6328
mov dword [esp + 0x14], 0x6d016ffc
mov dword [esp + 0x18], 0x696a6b47
lea eax, [esp + 0x1c]
mov byte [esp + 0x1c], 0
xor ecx, ecx
nop
nop
nop
mov edx, ecx
add dl, 0x6b
xor dl, byte [esp + ecx + 8]
add dl, 0xe9
mov byte [esp + ecx + 8], dl
inc ecx
cmp ecx, 0x15
jne 0x42dae0
lea esi, [esp + 0xaa]
lea edx, [esp + 8]
mov edi, esi
mov ecx, 5
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0xbe]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
lea edi, [esp + 0x54]
push edi
push 0
push 0
push 9
push esi
push 0
call dword [0x451fb8]
mov ebx, dword [esp + 0x54]
test ebx, ebx
jns 0x42db3f
mov eax, 0xffffffff
jmp 0x42db42
lea eax, [ebx + ebx]
push eax
call fcn.0040cd60
add esp, 4
push edi
push ebx
mov dword [esp + 0xc], eax
push eax
push 9
push esi
push 0
call dword [0x451fb8]
mov dword [esp + 8], 0xd165cf08
mov dword [esp + 0xc], 0xd577d365
mov dword [esp + 0x10], 0xd964d765
mov dword [esp + 0x14], 0xdddadb7c
lea esi, [esp + 0x18]
mov word [esp + 0x18], 0
mov byte [esp + 0x1a], 0
mov eax, 0x52
mov ecx, 0xad
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + ecx - 0xa5]
mov edx, eax
xor edx, ecx
and edx, edi
xor edx, ecx
add dl, 0x9f
mov byte [esp + ecx - 0xa5], dl
dec eax
inc ecx
cmp eax, 0x3f
jne 0x42dba0
lea edi, [esp + 0x9a]
lea eax, [esp + 8]
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xaa]
xor edx, edx
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp + 8], 0x77cf79a4
mov dword [esp + 0xc], 0x73cd75fb
mov dword [esp + 0x10], 0x4fc071c3
mov dword [esp + 0x14], 0x4b954df0
mov dword [esp + 0x18], 0x47f449e9
mov dword [esp + 0x1c], 0x43cc45e5
mov dword [esp + 0x20], 0x5f5e41c9
lea eax, [esp + 0x24]
mov dword [esp + 0x3c], eax
mov word [esp + 0x24], 0
mov byte [esp + 0x26], 0
mov ecx, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + edx + 8]
mov esi, edx
and esi, 0x16
mov ebp, edx
and ebp, 9
mov eax, edx
xor eax, 0x97164196
mov ebx, ebp
sub ebx, eax
sub ebx, esi
add ebx, ecx
or ebx, edi
add eax, esi
add eax, ebx
sub eax, ebp
sub eax, edi
add eax, edx
and eax, ebx
mov bl, 0x11
sub bl, al
mov byte [esp + edx + 8], bl
inc edx
dec ecx
cmp edx, 0x1f
jne 0x42dc40
lea edx, [esp + 0xd4]
lea eax, [esp + 8]
mov edi, edx
mov ecx, 7
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xf0]
xor eax, eax
xor ecx, ecx
mov esi, dword [esp + 0x3c]
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp + 8], 0xe17de758
mov dword [esp + 0xc], 0xdd7fe36d
mov dword [esp + 0x10], 0xd94cdf4d
mov dword [esp + 0x14], 0xd56adb44
mov dword [esp + 0x18], 0xd194d778
lea ebx, [esp + 0x1c]
mov dword [esp + 0x1c], 0xd3d0
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0xd9
xor cl, byte [esp + eax + 8]
add cl, 0xc3
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 0x18
jne case.default.0x42dd5c
lea esi, [esp + 0xbe]
lea eax, [esp + 8]
mov ecx, 5
mov edi, esi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xd2]
mov ecx, 1
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
lea eax, [esp + 0x9a]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], esi
mov ebp, dword [esp + 4]
mov eax, ebp
add eax, 2
mov dword [esp + 0x4c], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x60], 0
cmp ecx, 0xc
setne al
xor ecx, ecx
jmp dword [eax*4 + 0x44e180]
jmp dword [0x44e188]
push ebp
call fcn.0040cd70
add esp, 4
jmp dword [0x44e2c0]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + ecx + 0x8c]
mov eax, 0xfffffffe
nop
nop
nop
nop
cmp word [edx + eax + 2], 0
lea eax, [eax + 2]
jne 0x42ddb0
mov dword [esp + 0x68], eax
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x54]
lea ecx, [esi + eax]
mov dword [esp + 0x64], esi
add eax, esi
add eax, 0xd
lea edi, [ecx*2 + 0x1a]
mov ecx, dword [case.0x42dd5c.6]
jmp ecx
mov dword [esp + 0x3c], edx
test eax, eax
jns 0x42ddef
mov edi, 0xffffffff
jmp dword [0x44e1a4]
push edi
call fcn.0040cd60
add esp, 4
movzx ecx, word [ebp]
test cx, cx
je 0x42de21
mov edx, dword [esp + 0x4c]
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x42de10
mov word [eax], 0
jmp case.0x42dd5c.8
mov word [ecx], 0
jmp dword [0x44e1ac]
push edi
call fcn.0040cd60
add esp, 4
movzx edx, word [ebp]
mov ecx, eax
test dx, dx
je 0x42de30
mov esi, dword [esp + 0x4c]
mov ecx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [esi]
add esi, 2
test dx, dx
jne 0x42de60
jmp 0x42de30
mov word [ecx], 0x5c
mov dword [esp + 8], 0x3ff23984
mov dword [esp + 0xc], 0x23853daf
mov dword [esp + 0x10], 0x278a2181
mov dword [esp + 0x14], 0x2b9d25c4
mov dword [esp + 0x18], 0x2f8f29bc
mov dword [esp + 0x1c], 0x13b72db8
mov dword [esp + 0x20], 0x1110
mov edx, 0x59b3da4a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + edx - 0x59b3da42]
lea edi, [edx - 0x59b3da00]
and edi, esi
or esi, edx
lea ebp, [esi + esi]
not ebp
add ebp, esi
or ebp, edi
lea ebx, [ebp*2]
not ebx
add ebx, ebp
add bl, 0x8e
mov byte [esp + edx - 0x59b3da42], bl
inc edx
cmp edx, 0x59b3da66
jne 0x42ded0
add ecx, 2
mov esi, dword [esp + 0x3c]
movzx edx, word [esi]
test dx, dx
je 0x42df31
add esi, 2
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [esi]
add esi, 2
test dx, dx
jne 0x42df20
mov word [ecx], 0
movzx edx, word [esp + 8]
test dx, dx
je 0x42df70
lea esi, [esp + 0xa]
mov ebp, dword [esp + 4]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [esi]
add esi, 2
test dx, dx
jne 0x42df50
jmp 0x42df74
mov ebp, dword [esp + 4]
mov word [ecx], 0
lea ecx, [esp + 0x44]
push 0x60
push 3
push 0x120089
push ecx
mov dword [esp + 0x8c], eax
push eax
call fcn.00445550
add esp, 0x14
not eax
shr eax, 0x1f
mov dword [esp], 0
jmp dword [eax*4 + 0x44e1b0]
jmp dword [0x44e260]
jmp dword [0x44e1b8]
mov eax, dword [0x44e230]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
not eax
shr eax, 0x1f
mov dword [esp], 0
jmp dword [eax*4 + 0x44e1c8]
jmp dword [0x44e244]
mov edi, dword [case.0x42dd5c.22]
mov esi, dword [esp + 0x50]
lea ebx, [esi + 1]
nop
nop
nop
push ebx
call fcn.0040cd60
add esp, 4
jmp edi
push 0
push esi
mov dword [esp + 0x64], eax
push eax
push dword [esp + 0x50]
call fcn.00445960
add esp, 0x10
not eax
shr eax, 0x1f
mov dword [esp], 0
jmp dword [eax*4 + 0x44e1e0]
lea eax, [esp + 0x50]
push 0
push eax
push dword [esp + 0x4c]
call fcn.00445890
add esp, 0xc
lea eax, [esp + 0x50]
push 0
push eax
push dword [esp + 0x4c]
call fcn.00445890
add esp, 0xc
jmp dword [0x44e1c4]
jmp dword [0x44e2c0]