Function at 0x42bdd8
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cad45
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xc4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x4c], 0x513d
mov dword [ebp - 0x58], 0x1137
cmp dword [ebp - 0x58], 0x16e6
jle 0x42bea9
rcl dh, cl
add al, 0x7c
int3
mov dword [ebp - 0xa0], str.gqrs_siwhqcqrf_ocdgbil_uivio_pxdrh_vcjapcr_aall_ynt_otnchdtj_sia_iqn
mov dword [ebp - 0xa4], 0x47e
cmp dword [ebp - 0xa4], 0x1bed
jle 0x42bfcc
sbb eax, dword ds:[ebx]
sar dword [ebx*4 + 0x253733ca], cl
mov edx, 0x620659fc
mov esi, 0x3e4914c6
and eax, 0x9b069576
ret
cmp dword [ebp - 0x4c], 0x5369
jle 0x42c152
and dword [ebp - 0x2c], 0
jmp 0x42bfe6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x6f6a
jge 0x42c152
and dword [ebp - 0x34], 0
jmp 0x42c000
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x6086
jge 0x42c14d
mov dword [ebp - 0x64], 0xe89
cmp dword [ebp - 0x64], 0x2194
jle 0x42c107
xor byte [ebx - 0x1a631db], bl
push ecx
push esp
call 0x7d080333
test ch, dh
cmp dword [ebx + 0x37], eax
mov cl, 0x4a
scasd eax, dword es:[edi]
or dword [esi - 0x4d], ebp
in eax, 0x50
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
shl eax, cl
cdq
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], edx
push dword [ebp - 0x80]
push dword [ebp - 0x84]
lea ecx, [ebp - 0xbc]
call fcn.00405444
pop ecx
pop ecx
mov ecx, eax
call fcn.00402ed6
push eax
call fcn.004b505d
pop ecx
lea ecx, [ebp - 0xbc]
call fcn.00402cc3
jmp 0x42bff9
jmp 0x42bfdf
cmp dword [ebp + 8], 0
je 0x42c164
cmp dword [ebp + 0xc], 0
je 0x42c164
cmp dword [ebp + 0x10], 0
jne 0x42c16c
mov eax, dword [ebp + 8]
jmp 0x42c9f1
and dword [ebp - 4], 0
mov dword [ebp - 0x88], 0x505
cmp dword [ebp - 0x88], 0x26f2
jle 0x42c1c2
dec edi
and eax, 0x8a1ec778
mov eax, dword [0x1e96eec]
pushal
add byte [eax], al
cmp dword [ebp - 0x4c], 0x4ede
jge 0x42c246
mov dword [ebp - 0x6c], 0xfac
cmp dword [ebp - 0x6c], 0x16bd
jle 0x42c23a
xchg ebx, eax
jp 0x42c15e
nop dword [esi - 0x44]
pop ss
shl dh, cl
push dword [ebp - 0xa0]
call fcn.004b505d
pop ecx
jmp 0x42c346
or dword [ebp - 4], 0xffffffff
jmp 0x42c350
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x94], 0xef5
cmp dword [ebp - 0x94], 0x18db
jle 0x42c3d0
sub al, 0x62
or ch, bh
sbb byte [ebx], al
cmp ebx, dword [ecx + 0x3c]
jge 0x42c3dc
ljmp 0x1df1:0x79835279
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x10]
shr eax, 2
mov dword [ebp - 0x48], eax
and dword [ebp - 0x40], 0
jmp 0x42c3ec
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x48]
jae 0x42c71a
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov dword [ebp - 0x50], 0x6659
mov dword [ebp - 0x60], str.xizq_dkxenuw_smrxwiace_sujtygur_llxzvu_qdq_zgxrp_aqc
cmp dword [ebp - 0x50], 0x6862
jle 0x42c5bc
and dword [ebp - 0x30], 0
jmp 0x42c42a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x14cc
jge 0x42c5bc
and dword [ebp - 0x28], 0
jmp 0x42c444
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x9c3
jge 0x42c5b7
and dword [ebp - 0x3c], 0
jmp 0x42c45e
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x2e77
jge 0x42c5b2
mov eax, dword [ebp - 0x28]
cdq
idiv dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x7c], 0xd0b
cmp dword [ebp - 0x7c], 0x1843
jle 0x42c57b
pop ebx
cli
wait
pop esp
mov bl, 0xd2
in al, 0xc1
test dword [edx - 0x35], ebp
out 0x98, eax
neg dword [ebx - 0x3c7c0cef]
imul ecx, dword [ecx + 0x39ddbeaf], 0x63
and al, 0x12
push ds
push es
cmp al, 0x8b
les esp, [ecx - 0x465ad09c]
mov byte [esi - 0x2d162d6e], dh
push es
add byte [eax], al
push dword [ebp - 0x8c]
push dword [ebp - 0x90]
lea ecx, [ebp - 0xd4]
call fcn.00405444
pop ecx
pop ecx
mov ecx, eax
call fcn.00402ed6
push eax
call fcn.004b505d
pop ecx
lea ecx, [ebp - 0xd4]
call fcn.00402cc3
jmp 0x42c457
jmp 0x42c43d
jmp 0x42c423
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x50], 0x63bd
jge 0x42c6e6
mov dword [ebp - 0x5c], 0x10f1
cmp dword [ebp - 0x5c], 0x2388
jle 0x42c6dd
lodsb al, byte [esi]
cwde
adc dh, 0xc4
in eax, dx
add ch, ah
xchg ecx, eax
xchg esi, eax
sub ecx, edx
xor ebx, ebp
add eax, 0x3b72e461
aad 0xbe
push ecx
and dword [esi + 0x56c5fcfd], edx
mov ah, byte [eax]
mov edx, dword [edi]
dec ebx
invalid
push dword [ebp - 0x60]
call fcn.004b505d
pop ecx
jmp 0x42c702
or dword [ebp - 4], 0xffffffff
jmp 0x42c70c
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x18], eax
jmp 0x42c3e5
mov eax, dword [ebp + 0x10]
xor edx, edx
push 4
pop ecx
div ecx
mov dword [ebp - 0x48], edx
and dword [ebp - 0x44], 0
jmp 0x42c734
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x48]
jae 0x42c9ee
mov dword [ebp - 0x54], 0x5e49
pop esi
add byte [eax], al
mov dword [ebp - 0x78], str.rdhe_dgsz_rcjfdanr_eetvzo_jvtctm_gly_locc_nstgrns_ohp_ljxh
mov dword [ebp - 0x68], 0x1238
inc ebp
mov byte [eax - 0x38ff53f0], dl
inc ebp
cwde
cmp byte [edx], dl
add byte [eax], al
cmp dword [ebp - 0x68], 0x1cd3
jle 0x42c7e4
and al, 0xe7
rol byte [eax], cl
cmp bh, ch
pushal
and bh, byte [edx - 0x2d7a042e]
loopne 0x42c748
xchg cl, al
jle 0x42c744
movsd dword es:[edi], dword [esi]
pop edi
mov esp, 0xd77c1cb8
insb byte es:[edi], dx
mov cs, eax
wait
fnstcw word [ecx + 0xd]
push 0x34
mov edi, 0x5168501c
pop ds
add byte [eax], al
cmp dword [ebp - 0x54], 0x5f6b
jle 0x42c98e
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
and dword [ebp - 0x38], 0
jmp 0x42c806
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x6ea0
jge 0x42c98e
and dword [ebp - 0x1c], 0
jmp 0x42c820
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x4e04
jge 0x42c989
and dword [ebp - 0x20], 0
jmp 0x42c83a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x3d4a
jge 0x42c984
mov dword [ebp - 0x70], 0xa51
cmp dword [ebp - 0x70], 0x22ee
jle 0x42c932
and dword [ebp - 0x24], 0
jmp 0x42c93f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x7255
jge 0x42c97f
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c]
sar eax, cl
mov ecx, dword [ebp - 0x20]
shl eax, cl
mov ecx, dword [ebp - 0x24]
sar eax, cl
cdq
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
mov ecx, 0xac6f98
call fcn.0042d438
jmp 0x42c938
jmp 0x42c833
jmp 0x42c819
jmp 0x42c7ff
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov cl, byte [ecx]
mov byte [eax], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x54], 0x5cb5
jge 0x42c9c3
mov edx, dword [ebp - 0x78]
mov ecx, 0xac6f98
call fcn.0042ec78
jmp 0x42c9df
or dword [ebp - 4], 0xffffffff
jmp 0x42c9e9
jmp 0x42c72d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret