Function at 0x42b750
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xf0
mov dword [esp], 0x23e321c5
mov dword [esp + 4], 0x27962594
mov dword [esp + 8], 0x3b9b39fc
mov dword [esp + 0xc], 0x3f9f3d88
mov dword [esp + 0x10], 0x333231d5
lea eax, [esp + 0x14]
mov word [esp + 0x14], 0
mov ecx, 0xc5
mov edx, 0x3a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 0x3d
mov ebx, ecx
and ebx, 0x82
sub ebx, esi
xor bl, byte [esp + ecx - 0xc5]
add bl, 0x98
mov byte [esp + ecx - 0xc5], bl
inc ecx
dec edx
cmp ecx, 0xdb
jne 0x42b7a0
lea esi, [esp + 0xc6]
mov edx, esp
mov edi, esi
mov ecx, 5
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0xda]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
lea edi, [esp + 0x60]
push edi
push 0
push 0
push 9
push esi
push 0
call dword [0x44f6f8]
mov ebx, dword [esp + 0x60]
test ebx, ebx
jns 0x42b811
mov eax, 0xffffffff
jmp 0x42b814
lea eax, [ebx + ebx]
push eax
call fcn.0040c6f0
add esp, 4
push edi
push ebx
mov dword [esp + 0x50], eax
push eax
push 9
push esi
push 0
call dword [0x44f6f8]
mov dword [esp], 0xf36bf10c
mov dword [esp + 4], 0xef0ded7f
mov dword [esp + 8], 0xeb78e97f
mov dword [esp + 0xc], 0xe7e6e578
mov eax, 0x369fb1ac
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x369fb1ac]
mov ecx, eax
and ecx, edx
add ecx, ecx
add edx, eax
mov esi, ecx
xor esi, edx
not ecx
and ecx, edx
add ecx, ecx
sub ecx, esi
add cl, 0xa4
mov byte [esp + eax - 0x369fb1ac], cl
inc eax
cmp eax, 0x369fb1bc
jne 0x42b860
lea edi, [esp + 0x9a]
mov eax, esp
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xaa]
lea eax, [esp + 0x10]
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp], 0x1ed07c8
mov dword [esp + 4], 0xdef03fd
mov dword [esp + 8], 0x9fc0ffd
mov dword [esp + 0xc], 0x15c70be4
mov dword [esp + 0x10], 0x11e017f7
mov dword [esp + 0x14], 0x1de013f3
mov dword [esp + 0x18], 0x191e1fe7
lea esi, [esp + 0x1c]
mov word [esp + 0x1c], 0
mov ecx, 0xc1
mov edx, 0x3e
nop
nop
mov edi, ecx
and edi, 0x9d
mov eax, edx
and eax, 0x22
or eax, edi
xor al, byte [esp + ecx - 0xc1]
xor al, 0x62
add al, 0x3b
mov byte [esp + ecx - 0xc1], al
inc ecx
dec edx
cmp ecx, 0xdf
jne 0x42b900
lea edi, [esp + 0xaa]
mov eax, esp
mov ecx, 7
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xc6]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp], 0x996d9b50
mov dword [esp + 4], 0xa54ba765
mov dword [esp + 8], 0xa15ca355
mov dword [esp + 0xc], 0xad7eaf4c
mov dword [esp + 0x10], 0xa964ab70
lea ebx, [esp + 0x14]
mov word [esp + 0x14], 0xb7a8
mov dword [esp + 0x16], 0
mov word [esp + 0x1a], 0
mov ecx, 0xc2a0fa5b
mov esi, 0x3d5f05a4
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + ecx + 0x3d5f05a5]
mov edx, ecx
and edx, eax
add edx, edx
sub edx, eax
add edx, esi
and edx, ecx
add edx, edx
lea ebp, [esi - 0x3d5f0580]
and ebp, edx
xor edx, ecx
add ebp, ebp
sub edx, ebp
add dl, al
add dl, 0x39
mov byte [esp + ecx + 0x3d5f05a5], dl
inc ecx
dec esi
cmp ecx, 0xc2a0fa77
jne 0x42b9a0
lea esi, [esp + 0xda]
mov eax, esp
mov edi, esi
mov ecx, 5
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xee]
mov ecx, 1
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
lea eax, [esp + 0x9a]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0xaa]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
mov eax, dword [esp + 0x48]
add eax, 2
mov dword [esp + 0x68], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x4c], 0
cmp ecx, 0xc
setne al
xor ecx, ecx
jmp dword [eax*4 + 0x44b7bc]