Function at 0x42ee20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x554110
mov eax, dword fs:[0]
push eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5b2ae0]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
push eax
push 0x66
mov ecx, edi
call fcn.004f742a
xor ebp, ebp
mov dword [esp + 0x1c], ebp
mov dword [edi], 0x577fb4
call fcn.004eff6d
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42ee7c
push 0x80004005
call fcn.00401f30
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi + 0x78], eax
lea esi, [edi + 0x80]
mov ebx, 1
push esi
mov byte [esp + 0x20], bl
call fcn.00448460
mov dword [esi + 0x18], ebp
mov dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], ebp
lea ecx, [edi + 0xa8]
mov byte [esp + 0x1c], 2
call fcn.004fc350
lea esi, [edi + 0xb0]
xor eax, eax
call fcn.004dd140
lea esi, [edi + 0x104]
mov byte [esp + 0x1c], 4
call fcn.004db580
lea ecx, [edi + 0x390]
mov byte [esp + 0x1c], 5
call fcn.004fe2f6
lea esi, [edi + 0x400]
mov byte [esp + 0x1c], 6
call fcn.004db580
lea ecx, [edi + 0x68c]
mov byte [esp + 0x1c], 7
call fcn.004fe2f6
lea esi, [edi + 0x6fc]
mov byte [esp + 0x1c], 8
call fcn.004db580
lea ecx, [edi + 0x988]
mov byte [esp + 0x1c], 9
call fcn.004fe2f6
lea esi, [edi + 0x9f8]
mov byte [esp + 0x1c], 0xa
call fcn.004db580
lea esi, [edi + 0xc84]
mov byte [esp + 0x1c], 0xb
call fcn.004db580
lea ecx, [edi + 0xf10]
mov byte [esp + 0x1c], 0xc
call fcn.004fe2f6
lea esi, [edi + 0xf80]
mov byte [esp + 0x1c], 0xd
call fcn.004db580
lea ecx, [edi + 0x120c]
mov byte [esp + 0x1c], 0xe
call fcn.004fe2f6
lea esi, [edi + 0x127c]
mov byte [esp + 0x1c], 0xf
call fcn.004db580
lea ecx, [edi + 0x1508]
mov byte [esp + 0x1c], 0x10
call fcn.004fe2f6
lea esi, [edi + 0x1578]
mov byte [esp + 0x1c], 0x11
call fcn.004db580
lea esi, [edi + 0x1804]
mov byte [esp + 0x1c], 0x12
call fcn.004db580
lea ecx, [edi + 0x1a90]
mov byte [esp + 0x1c], 0x13
call fcn.004fe2f6
lea esi, [edi + 0x1b00]
mov byte [esp + 0x1c], 0x14
call fcn.004db580
lea ecx, [edi + 0x1d8c]
mov byte [esp + 0x1c], 0x15
call fcn.004fe2f6
lea esi, [edi + 0x1dfc]
mov byte [esp + 0x1c], 0x16
call fcn.004db580
lea ecx, [edi + 0x2088]
mov byte [esp + 0x1c], 0x17
call fcn.004fe2f6
lea esi, [edi + 0x20f8]
mov byte [esp + 0x1c], 0x18
call fcn.004db580
lea esi, [edi + 0x2384]
mov byte [esp + 0x1c], 0x19
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x2610]
mov byte [esp + 0x1c], 0x1a
call fcn.004fe2f6
lea esi, [edi + 0x2680]
mov byte [esp + 0x1c], 0x1b
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x290c]
mov byte [esp + 0x1c], 0x1c
call fcn.004fe2f6
lea esi, [edi + 0x297c]
mov byte [esp + 0x1c], 0x1d
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x2c08]
mov byte [esp + 0x1c], 0x1e
call fcn.004fe2f6
lea esi, [edi + 0x2c78]
mov byte [esp + 0x1c], 0x1f
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x2f04]
mov byte [esp + 0x1c], 0x20
call fcn.004fe2f6
lea esi, [edi + 0x2f74]
mov byte [esp + 0x1c], 0x21
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x3200]
mov byte [esp + 0x1c], 0x22
call fcn.004fe2f6
lea esi, [edi + 0x3270]
mov byte [esp + 0x1c], 0x23
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x34fc]
mov byte [esp + 0x1c], 0x24
call fcn.004fe2f6
lea esi, [edi + 0x356c]
mov byte [esp + 0x1c], 0x25
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x37f8]
mov byte [esp + 0x1c], 0x26
call fcn.004fe2f6
lea esi, [edi + 0x3868]
mov byte [esp + 0x1c], 0x27
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x3af4]
mov byte [esp + 0x1c], 0x28
call fcn.004fe2f6
lea esi, [edi + 0x3b64]
mov byte [esp + 0x1c], 0x29
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x3df0]
mov byte [esp + 0x1c], 0x2a
call fcn.004fe2f6
lea esi, [edi + 0x3e60]
mov byte [esp + 0x1c], 0x2b
call fcn.004db580
lea ecx, [edi + 0x40ec]
mov byte [esp + 0x1c], 0x2c
call fcn.004fe2f6
lea esi, [edi + 0x415c]
mov byte [esp + 0x1c], 0x2d
call fcn.004db580
mov dword [esi], 0x57fa2c
lea ecx, [edi + 0x43e8]
mov byte [esp + 0x1c], 0x2e
call fcn.004fe2f6
lea ecx, [edi + 0x4458]
push ecx
mov byte [esp + 0x20], 0x2f
call fcn.0046c2a0
lea edx, [edi + 0x46d0]
push edx
mov byte [esp + 0x20], 0x30
call fcn.0047ceb0
lea eax, [edi + 0x4cbc]
push eax
mov byte [esp + 0x20], 0x31
call fcn.004965c0
lea ecx, [edi + 0x4dc4]
push ecx
mov byte [esp + 0x20], 0x32
call fcn.004dadb0
mov byte [esp + 0x1c], 0x33
mov dword [0x5bf8ac], edi
cmp dword [0x5ba820], ebp
jne 0x42f228
push 0x574548
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba81c
call fcn.004f8e4a
cmp dword [0x5ba828], ebp
jne 0x42f248
push 0x574550
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba824
call fcn.004f8e4a
cmp dword [0x5ba830], ebp
jne 0x42f268
push 0x574558
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba82c
call fcn.004f8e4a
cmp dword [0x5ba838], ebp
jne 0x42f288
push 0x574564
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba834
call fcn.004f8e4a
cmp dword [0x5ba840], ebp
jne 0x42f2a8
push 0x574574
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba83c
call fcn.004f8e4a
cmp dword [0x5ba848], ebp
jne 0x42f2c8
push 0x574584
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba844
call fcn.004f8e4a
cmp dword [0x5ba850], ebp
jne 0x42f2e8
push 0x574598
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba84c
call fcn.004f8e4a
cmp dword [0x5ba858], ebp
jne 0x42f308
push 0x5745a8
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba854
call fcn.004f8e4a
cmp dword [0x5ba860], ebp
jne 0x42f328
push 0x5745bc
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba85c
call fcn.004f8e4a
cmp dword [0x5ba868], ebp
jne 0x42f348
push 0x5745d0
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba864
call fcn.004f8e4a
cmp dword [0x5ba870], ebp
jne 0x42f368
push 0x5745e4
call fcn.004071c0
add esp, 4
push eax
mov ecx, 0x5ba86c
call fcn.004f8e4a
cmp dword [0x5bf884], ebp
jne 0x42f382
push 0x5745fc
call fcn.00407100
add esp, 4
mov dword [0x5bf884], eax
cmp dword [0x5bf880], ebp
jne 0x42f39c
push 0x574608
call fcn.00407100
add esp, 4
mov dword [0x5bf880], eax
cmp dword [0x5bf87c], ebp
jne 0x42f3b6
push 0x574614
call fcn.00407100
add esp, 4
mov dword [0x5bf87c], eax
cmp dword [0x5bf878], ebp
jne 0x42f3d0
push 0x57461c
call fcn.00407100
add esp, 4
mov dword [0x5bf878], eax
cmp dword [0x5bf874], ebp
jne 0x42f3ea
push 0x574628
call fcn.00407100
add esp, 4
mov dword [0x5bf874], eax
cmp dword [0x5bf870], ebp
jne 0x42f404
push 0x574634
call fcn.00407100
add esp, 4
mov dword [0x5bf870], eax
cmp dword [0x5bf86c], ebp
jne 0x42f41e
push 0x574644
call fcn.00407100
add esp, 4
mov dword [0x5bf86c], eax
cmp dword [0x5bf868], ebp
jne 0x42f438
push 0x574650
call fcn.00407100
add esp, 4
mov dword [0x5bf868], eax
cmp dword [0x5bf864], ebp
jne 0x42f452
push 0x57465c
call fcn.00407100
add esp, 4
mov dword [0x5bf864], eax
cmp dword [0x5bf860], ebp
jne 0x42f46c
push 0x574668
call fcn.00407100
add esp, 4
mov dword [0x5bf860], eax
push ebp
push ebp
push ebp
push 0x42ecb0
push ebp
push ebp
call dword [0x56036c]
cmp eax, ebp
je 0x42f487
push eax
call dword [0x5603f4]
cmp dword [0x5bf85c], ebp
jne 0x42f4a1
push 0x574674
call fcn.00407100
add esp, 4
mov dword [0x5bf85c], eax
cmp dword [0x5bf858], ebp
jne 0x42f4bb
push 0x574684
call fcn.00407100
add esp, 4
mov dword [0x5bf858], eax
cmp dword [0x5bf854], ebp
jne 0x42f4d5
push 0x574694
call fcn.00407100
add esp, 4
mov dword [0x5bf854], eax
cmp dword [0x5bf850], ebp
jne 0x42f4ef
push 0x5746a8
call fcn.00407100
add esp, 4
mov dword [0x5bf850], eax
cmp dword [0x5bf84c], ebp
jne 0x42f509
push 0x5746b8
call fcn.00407100
add esp, 4
mov dword [0x5bf84c], eax
cmp dword [0x5bf848], ebp
jne 0x42f523
push 0x5746c8
call fcn.00407100
add esp, 4
mov dword [0x5bf848], eax
cmp dword [0x5bf844], ebp
jne 0x42f53d
push 0x5746d8
call fcn.00407100
add esp, 4
mov dword [0x5bf844], eax
cmp dword [0x5bf840], ebp
jne 0x42f557
push 0x5746e0
call fcn.00407100
add esp, 4
mov dword [0x5bf840], eax
cmp dword [0x5bf83c], ebp
jne 0x42f571
push 0x5746ec
call fcn.00407100
add esp, 4
mov dword [0x5bf83c], eax
cmp dword [0x5bf838], ebp
jne 0x42f58b
push 0x5746f8
call fcn.00407100
add esp, 4
mov dword [0x5bf838], eax
cmp dword [0x5bf834], ebp
jne 0x42f5a5
push 0x574704
call fcn.00407100
add esp, 4
mov dword [0x5bf834], eax
cmp dword [0x5bf830], ebp
jne 0x42f5bf
push 0x574710
call fcn.00407100
add esp, 4
mov dword [0x5bf830], eax
cmp dword [0x5bf82c], ebp
jne 0x42f5d9
push 0x574718
call fcn.00407100
add esp, 4
mov dword [0x5bf82c], eax
cmp dword [0x5bf828], ebp
jne 0x42f5f3
push 0x574720
call fcn.00407100
add esp, 4
mov dword [0x5bf828], eax
cmp dword [0x5bf824], ebp
jne 0x42f60d
push 0x57472c
call fcn.00407100
add esp, 4
mov dword [0x5bf824], eax
cmp dword [0x5bf820], ebp
jne 0x42f627
push 0x574738
call fcn.00407100
add esp, 4
mov dword [0x5bf820], eax
cmp dword [0x5bf81c], ebp
jne 0x42f641
push 0x574744
call fcn.00407100
add esp, 4
mov dword [0x5bf81c], eax
cmp dword [0x5bf818], ebp
jne 0x42f65b
push 0x574750
call fcn.00407100
add esp, 4
mov dword [0x5bf818], eax
cmp dword [0x5bf810], ebp
jne 0x42f675
push 0x574760
call fcn.00407100
add esp, 4
mov dword [0x5bf810], eax
cmp dword [0x5bf814], ebp
jne 0x42f68f
push 0x57476c
call fcn.00407100
add esp, 4
mov dword [0x5bf814], eax
call fcn.004fd265
call fcn.004fd265
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [0x5606a4]
mov dword [edi + 0x7c], eax
mov dword [edi + 0x74], ebp
mov dword [edi + 0x4dc0], ebp
mov dword [edi + 0x46c4], ebp
mov dword [edi + 0x46c8], ebp
mov dword [edi + 0x46cc], ebp
mov dword [edi + 0x23e0], ebx
mov dword [edi + 0x26dc], ebx
mov dword [edi + 0x29d8], ebx
mov dword [edi + 0x41b8], ebx
mov dword [edi + 0x2cd4], ebx
mov dword [edi + 0x35c8], ebx
mov dword [edi + 0x2fd0], ebx
mov dword [edi + 0x32cc], ebx
mov dword [edi + 0x38c4], ebx
mov dword [edi + 0x3bc0], ebx
mov eax, edi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8