Function at 0x42f243
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov dword [ebp - 8], 0
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.004354d8
add esp, 0xc
xor eax, 0x6660
xor eax, 0x6660
jmp 0x42f26f
cmc
jge 0x42f27b
xchg edi, eax
xchg edi, eax
xchg edx, edi
xchg edx, edi
jl 0x42f27b
add eax, 0x44dc45c6
mov byte [ebp - 0x24], 0x44
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x69
mov byte [ebp - 0x15], 0x33
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x1e], 0x55
mov byte [ebp - 0x19], 0x66
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x69
mov byte [ebp - 0x22], 0x66
mov byte [ebp - 0x1d], 0x70
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xe], 0x70
shr esi, 0
ror eax, 0x17
ror eax, 9
lea eax, [eax + 0x368a]
lea eax, [eax - 0x368a]
not edi
not edi
jbe 0x42f2ec
pushf
and ebx, ebx
add eax, 0x3295
sub eax, 0x3295
ror ecx, 0
popf
jle 0x42f2e7
jno 0x42f2e9
ja 0x42f2ec
add eax, 0x62df45c6
mov byte [ebp - 0x21], 0x62
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x20], 0x75
mov byte [ebp - 0x1b], 0x6d
mov byte [ebp - 0x16], 0x34
mov byte [ebp - 0x11], 0x71
mov byte [ebp - 0xc], 0
mov cl, byte [ebp - 0x24]
sub cl, 1
mov byte [ebp - 0x24], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x23]
sub al, 1
mov byte [ebp - 0x23], al
mov cl, byte [ebp - 0x1e]
sub cl, 1
mov byte [ebp - 0x1e], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x22]
sub dl, 1
mov byte [ebp - 0x22], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
add ebx, 0xefb
sub ebx, 0xefb
shr eax, 0
js 0x42f3c0
pushf
lea edx, [edx + 0x2fd0]
sub edx, 0x2fd0
popf
jge 0x42f3b9
lea edx, [edx]
xchg edi, edi
jns 0x42f3c0
mov esi, 0x80df4d8a
jmp 0xdf907bca
mov cl, byte [ebp - 0x21]
sub cl, 1
mov byte [ebp - 0x21], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
rol edx, 0x12
rol edx, 0xe
js 0x42f429
pushf
rol edi, 0
cmp eax, dword [esp + 0xc]
ror esp, 0
popf
lea edi, [edi]
jns 0x42f429
ljmp 0x8900:0x126f4e8
call fcn.00441b22
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x42f43f
or eax, 0xffffffff
jmp 0x42f4ee
lea ecx, [ecx]
test dword [esp], esi
jp 0x42f446
xchg edx, ebx
xchg edx, ebx
jno 0x42f45b
pushf
jns 0x42f450
test esi, edi
jo 0x42f454
popf
ja 0x42f458
jo 0x42f45b
mov ecx, 0x51dc4d8d
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00450a8a
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x42f476
or eax, 0xffffffff
jmp 0x42f4ee
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.004354d8
add esp, 0xc
add eax, 0x4fbc
sub eax, 0x4fbc
test dword [esp + 0xc], ecx
jp 0x42f4b3
pushf
clc
jmp 0x42f49b
test eax, 0x5abf
popf
lea edi, [edi + 0x6734]
lea edi, [edi - 0x6734]
jl 0x42f4b0
jnp 0x42f4b3
ljmp 0xe1e8:0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0044359d
add esp, 4
test esi, 0x48da
or esi, 0
clc
js 0x42f4e3
pushf
not ebx
not ebx
jne 0x42f4d3
shr esp, 0
rol ecx, 0x12
rol ecx, 0xe
popf
ja 0x42f4e0
jns 0x42f4e3
or dword [ebx - 0x74adf3ab], 0xff500845
push ebp
cld
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8