Function at 0x42ec30
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x160
push ebx
push ebp
push esi
mov ebp, 0x4b4d
mov dword [esp + 0xc], 0x65412905
push edi
mov dword [esp + 0x14], 0x4b1f3f00
mov ebp, 0xc3e0
mov dword [esp + 0x18], 0x939ad90a
mov dword [esp + 0x1c], 0x8ac3c3
mov dword [esp + 0x20], 0x65792971
mov dword [esp + 0x24], 0x4b1f3f28
mov dword [esp + 0x28], 0x93b0d91f
mov dword [esp + 0x2c], 0xa6c3fe
mov dword [esp + 0x30], 0x65092923
mov dword [esp + 0x34], 0x4b4c3f0c
mov dword [esp + 0x38], 0x93a9d96b
mov dword [esp + 0x3c], 0xa6c3e1
mov dword [esp + 0x40], 0x654c2922
mov dword [esp + 0x44], 0x4b4b3f0b
mov dword [esp + 0x48], 0x93b6d96b
mov dword [esp + 0x4c], 0xe3c3fd
mov dword [esp + 0x50], 0x65462928
mov dword [esp + 0x54], 0x4b4d3f10
mov dword [esp + 0x58], 0x93aad96b
mov dword [esp + 0x5c], 0xb0c3ea
mov dword [esp + 0x60], 0x654c2925
mov dword [esp + 0x64], 0x4b1f3f08
mov dword [esp + 0x68], 0x93acd929
mov dword [esp + 0x6c], 0xe3c3e7
mov dword [esp + 0x70], 0x655a2938
mov dword [esp + 0x74], 0x4b5a3f45
mov dword [esp + 0x78], 0x93add922
mov dword [esp + 0x7c], 0xa6c3fb
mov dword [esp + 0x80], 0x65092923
mov dword [esp + 0x84], 0x4b503f0b
mov dword [esp + 0x88], 0x93f9d93f
mov dword [esp + 0x8c], 0xb6c3f5
mov dword [esp + 0x90], 0x6545293d
mov dword [esp + 0x94], 0x4b1f3f1c
mov dword [esp + 0x98], 0x93acd92d
mov dword [esp + 0x9c], 0xa0c3fd
mov dword [esp + 0xa0], 0x65402925
mov dword [esp + 0xa4], 0x4b513f0a
mov dword [esp + 0xa8], 0x93b5d92a
mov dword [esp + 0xac], 0xacc3b3
mov dword [esp + 0xb0], 0x65092923
mov dword [esp + 0xb4], 0x4b4d3f15
mov dword [esp + 0xb8], 0x93bdd924
mov dword [esp + 0xbc], 0xa0c3e6
mov dword [esp + 0xc0], 0x655a2934
mov dword [esp + 0xc4], 0x4b593f45
mov dword [esp + 0xc8], 0x93acd92a
mov dword [esp + 0xcc], 0xb7c3ff
mov dword [esp + 0xd0], 0x65092928
mov dword [esp + 0xd4], 0x4b563f11
mov dword [esp + 0xd8], 0x93bcd926
mov dword [esp + 0xdc], 0xb7c3e0
mov dword [esp + 0xe0], 0x65442930
mov dword [esp + 0xe4], 0x4b4c3f15
mov dword [esp + 0xe8], 0x93d4d965
mov dword [esp + 0xec], 0xcec399
mov dword [esp + 0xf0], 0x6570295b
mov dword [esp + 0xf4], 0x4b4a3f0a
mov dword [esp + 0xf8], 0x93bad96b
mov dword [esp + 0xfc], 0xadc3f2
mov dword [esp + 0x100], 0x654f2971
mov dword [esp + 0x104], 0x4b533f0c
mov dword [esp + 0x108], 0x93f9d92e
mov dword [esp + 0x10c], 0xe3c3f2
mov dword [esp + 0x110], 0x655c2933
mov dword [esp + 0x114], 0x4b1f3f02
mov dword [esp + 0x118], 0x93bcd939
mov dword [esp + 0x11c], 0xacc3e3
mov dword [esp + 0x120], 0x655d2923
mov dword [esp + 0x124], 0x4b4b3f45
mov dword [esp + 0x128], 0x93f9d924
mov dword [esp + 0x12c], 0xa6c3ff
mov dword [esp + 0x130], 0x65092925
mov dword [esp + 0x134], 0x4b4c3f10
mov dword [esp + 0x138], 0x93b2d96b
mov eax, dword fs:[0x2c]
mov dword [esp + 0x13c], 0xacc3fd
mov dword [esp + 0x140], 0x65092926
mov dword [esp + 0x144], 0x4b5d3f04
mov ecx, dword [eax]
mov eax, dword [0x4970ec]
mov dword [esp + 0x148], 0x93acd924
mov dword [esp + 0x14c], 0xe3c3e7
mov dword [esp + 0x150], 0x65412925
mov dword [esp + 0x154], 0x4b4c3f0c
mov dword [esp + 0x158], 0x93b0d96b
mov dword [esp + 0x15c], 0xb0c3e0
mov dword [esp + 0x160], 0x654c2924
mov dword [esp + 0x164], 0x4b3f3f4b
cmp eax, dword [ecx + 4]
jle 0x42f038
push 0x4970ec
call fcn.00452992
add esp, 4
cmp dword [0x4970ec], 0xffffffff
jne 0x42f038
xorps xmm0, xmm0
mov byte [0x4988f8], 1
movlpd qword [esp + 0x168], xmm0
mov edx, dword [esp + 0x16c]
mov eax, dword [esp + 0x168]
nop dword [eax]
nop dword [eax + eax]
mov cx, word [esp + eax*2 + 0x10]
mov word [eax*2 + 0x4987a0], cx
add eax, 1
adc edx, 0
test edx, edx
jne 0x42f01e
cmp eax, 0xac
jb 0x42f000
push 0x47bc50
call fcn.00452c62
add esp, 4
push 0x4970ec
call fcn.00452941
add esp, 4
pop edi
mov eax, 0x4987a0
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret