Function at 0x42e087
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd0
mov r13, rdx
mov rbx, r8
mov ebp, dword [rcx + 0x30]
mov r8d, dword [rcx + 0x2c]
mov r10d, dword [rcx + 0xc]
mov r11d, dword [rcx + 8]
mov eax, dword [rcx + 0x20]
mov r9d, dword [rcx + 0x1c]
mov dword [rcx + 0x114], 1
test eax, eax
je 0x42e4a1
cmp eax, 0x7f
jne 0x42e613
mov esi, 3
cmp r13, 0xffffffffffffffff
je 0x42e4b0
movsxd r12, r10d
imul r12, r13
movsxd r14, r9d
imul r12, r14
mov eax, 0xff000000
xor edi, edi
cmp r12, rax
setle dil
setg dl
movzx r14d, dl
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 0
mov qword [rsp + 0xc0], 0
mov word [rsp + 0xa0], si
mov word [rsp + 0xa2], r9w
mov dword [rsp + 0xa4], r8d
imul r8d, r9d
imul r8d, r10d
mov dword [rsp + 0xa8], r8d
mov r8d, r10d
imul r8d, r9d
mov word [rsp + 0xac], r8w
mov word [rsp + 0xae], r11w
cmp r9d, 2
jle 0x42e5f3
mov word [rsp + 0xb0], 0x16
mov word [rsp + 0xb2], r11w
mov word [rsp + 0xb8], si
mov dword [rsp + 0xb4], ebp
mov word [rsp + 0xa0], 0xfffe
lea r11d, [r10*8]
mov word [rsp + 0xae], r11w
mov byte [rsp + 0xbe], 0x10
mov byte [rsp + 0xc0], pe_nt_image_headers64
mov byte [rsp + 0xc3], 0xaa
mov byte [rsp + 0xc5], 0x38
mov word [rsp + 0xc6], 0x719b
mov ebp, 0x28
mov r10d, 0x28
mov ecx, dword [rcx + 0x10c]
test r14d, r14d
jne 0x42e4c7
mov dword [rsp + 0x4c], 0x45564157
lea rsi, [r12 + rcx + 0x14]
add rsi, rbp
mov r9d, 0x46464952
mov dword [rsp + 0x44], r9d
test edi, edi
je 0x42e4ea
add rsi, 0x24
mov dword [rsp + 0x3c], 0x20746d66
mov dword [rsp + 0x34], 0x61746164
mov dword [rsp + 0x40], r10d
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 0
mov dword [rsp + 0x90], 0
mov dword [rsp + 0x70], 0x6b6e756a
mov dword [rsp + 0x74], 0x1c
lea rdx, [0x00464360]
call fcn.00420ab5
test r14d, r14d
jne 0x42e508
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x38], r12d
lea rcx, [rsp + 0x44]
lea rdx, [0x00464360]
call fcn.00420ab5
lea rcx, [rsp + 0x3c]
lea rdx, [0x00464360]
call fcn.00420ab5
lea rsi, [rsp + 0xa0]
lea rdx, str.SSLLSSSSLS
mov rcx, rsi
call fcn.00420ab5
lea rcx, [rsp + 0x34]
lea rdx, [0x00464360]
call fcn.00420ab5
mov r13, qword [rsp + 0x44]
mov qword [rbx], r13
mov r12d, dword [rsp + 0x4c]
mov dword [rbx + 8], r12d
lea rdx, [rbx + 0xc]
test edi, edi
je 0x42e327
mov rdi, qword [rsp + 0x70]
mov qword [rdx], rdi
mov r12, qword [rsp + 0x78]
mov qword [rdx + 8], r12
mov r14, qword [rsp + 0x80]
mov qword [rdx + 0x10], r14
mov r8, qword [rsp + 0x88]
mov qword [rdx + 0x18], r8
mov eax, dword [rsp + 0x90]
mov dword [rdx + 0x20], eax
add rdx, 0x24
mov r10, qword [rsp + 0x3c]
mov qword [rdx], r10
lea rcx, [rdx + 8]
mov r9d, ebp
mov rdi, rcx
test cl, 4
jne 0x42e6b3
mov r11d, r9d
and r11d, 0xfffffff8
lea edx, [r11 - 1]
shr edx, 3
and edx, 7
xor r13d, r13d
mov r12, qword [rsi + r13]
mov qword [rdi + r13], r12
mov eax, 8
cmp eax, r11d
jae 0x42e460
test edx, edx
je 0x42e3fc
cmp edx, 1
je 0x42e3e9
cmp edx, 2
je 0x42e3db
cmp edx, 3
je 0x42e3ce
cmp edx, 4
je 0x42e3c0
cmp edx, 5
je 0x42e3b2
cmp edx, 6
je 0x42e3a5
mov r14d, 8
mov r8, qword [rsi + r14]
mov qword [rdi + r14], r8
mov eax, 0x10
mov edx, eax
mov r10, qword [rsi + rdx]
mov qword [rdi + rdx], r10
add eax, 8
mov r13d, eax
mov r12, qword [rsi + r13]
mov qword [rdi + r13], r12
add eax, 8
mov r14d, eax
mov r8, qword [rsi + r14]
mov qword [rdi + r14], r8
add eax, 8
mov edx, eax
mov r10, qword [rsi + rdx]
mov qword [rdi + rdx], r10
add eax, 8
mov r13d, eax
mov r12, qword [rsi + r13]
mov qword [rdi + r13], r12
add eax, 8
mov r14d, eax
mov r8, qword [rsi + r14]
mov qword [rdi + r14], r8
add eax, 8
cmp eax, r11d
jae 0x42e460
mov edx, eax
mov r10, qword [rsi + rdx]
mov qword [rdi + rdx], r10
lea r13d, [rax + 8]
mov r12, qword [rsi + r13]
mov qword [rdi + r13], r12
lea r14d, [rax + 0x10]
mov r8, qword [rsi + r14]
mov qword [rdi + r14], r8
lea edx, [rax + 0x18]
mov r10, qword [rsi + rdx]
mov qword [rdi + rdx], r10
lea r13d, [rax + 0x20]
mov r12, qword [rsi + r13]
mov qword [rdi + r13], r12
lea r14d, [rax + 0x28]
mov r8, qword [rsi + r14]
mov qword [rdi + r14], r8
lea edx, [rax + 0x30]
mov r10, qword [rsi + rdx]
mov qword [rdi + rdx], r10
lea r13d, [rax + 0x38]
mov r12, qword [rsi + r13]
mov qword [rdi + r13], r12
add eax, 0x40
cmp eax, r11d
jb 0x42e3fc
lea rdi, [rdi + rax]
add rsi, rax
test r9b, 4
je 0x42e46e
movsd dword [rdi], dword [rsi]
test r9b, 2
je 0x42e476
movsw word [rdi], word [rsi]
and r9d, 1
je 0x42e47d
movsb byte [rdi], byte [rsi]
add rbp, rcx
mov r11, qword [rsp + 0x34]
mov qword [rbp], r11
lea rax, [rbp + 8]
sub eax, ebx
add rsp, 0xd0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov esi, 1
cmp r13, 0xffffffffffffffff
jne 0x42e0de
mov edi, r10d
imul edi, r9d
mov eax, 0x7ffff000
cdq
idiv edi
movsxd r13, eax
jmp 0x42e0de
mov dword [rsp + 0x4c], 0x45564157
lea rsi, [r12 + rcx + 0x38]
add rsi, rbp
mov r9d, 0x34364652
mov dword [rsp + 0x44], r9d
test edi, edi
jne 0x42e215
mov dword [rsp + 0x3c], 0x20746d66
mov dword [rsp + 0x34], 0x61746164
mov dword [rsp + 0x40], r10d
test r14d, r14d
je 0x42e284
mov dword [rsp + 0x2c], 0x34367364
mov dword [rsp + 0x30], 0x1c
lea r14, [rsp + 0x50]
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x38], 0xffffffff
lea rcx, [rsp + 0x2c]
lea rdx, [0x00464360]
call fcn.00420ab5
lea rdx, str.DDDL
mov rcx, r14
call fcn.00420ab5
lea rcx, [rsp + 0x44]
lea rdx, [0x00464360]
call fcn.00420ab5
lea rcx, [rsp + 0x3c]
lea rdx, [0x00464360]
call fcn.00420ab5
lea rsi, [rsp + 0xa0]
lea rdx, str.SSLLSSSSLS
mov rcx, rsi
call fcn.00420ab5
lea rcx, [rsp + 0x34]
lea rdx, [0x00464360]
call fcn.00420ab5
mov r8, qword [rsp + 0x44]
mov qword [rbx], r8
mov eax, dword [rsp + 0x4c]
mov dword [rbx + 8], eax
mov r10, qword [rsp + 0x2c]
mov qword [rbx + 0xc], r10
mov r11, qword [rsp + 0x50]
mov qword [rbx + 0x14], r11
mov rcx, qword [rsp + 0x58]
mov qword [rbx + 0x1c], rcx
mov r9, qword [rsp + 0x60]
mov qword [rbx + 0x24], r9
mov r13d, dword [rsp + 0x68]
mov dword [rbx + 0x2c], r13d
lea rdx, [rbx + 0x30]
jmp 0x42e2ec
mov eax, 5
sub eax, r9d
cmp eax, ebp
jne 0x42e171
mov ebp, 0x10
mov r10d, 0x10
jmp 0x42e1e3
movabs rbx, 0x72632074276e6163
mov qword [rcx + 0x228], rbx
movabs rbp, 0x6c61762065746165
mov qword [rcx + 0x230], rbp
movabs rax, 0x2046464952206469
mov qword [rcx + 0x238], rax
movabs rsi, 0x6461656820766177
mov qword [rcx + 0x240], rsi
movabs r9, 0x6e20726f66207265
mov qword [rcx + 0x248], r9
movabs r14, 0x616d726f6e2d6e6f
mov qword [rcx + 0x250], r14
movabs r8, 0x6c662064657a696c
mov qword [rcx + 0x258], r8
movabs rdx, 0x6420676e6974616f
mov qword [rcx + 0x260], rdx
mov dword [rcx + 0x268], 0x21617461
mov byte [rcx + 0x26c], 0
xor eax, eax
jmp 0x42e48f
mov esi, dword [rsp + 0xa0]
mov dword [rdx + 8], esi
lea rdi, [rdx + 0xc]
lea rsi, [rsp + 0xa4]
lea r9d, [rbp - 4]
jmp 0x42e342