Function at 0x429b0d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x138
push ebx
push esi
push edi
mov byte [ebp - 0x1c], 0xd4
mov byte [ebp - 0x1b], 0x31
mov byte [ebp - 0x1a], 0x22
mov byte [ebp - 0x19], 0xf0
mov byte [ebp - 0x18], 0xbb
mov byte [ebp - 0x17], 0x19
mov byte [ebp - 0x16], 0xe9
mov byte [ebp - 0x15], 0x45
mov byte [ebp - 0x14], 0x35
mov byte [ebp - 0x13], 0x68
mov byte [ebp - 0x12], 0x24
mov byte [ebp - 0x11], 0xc2
mov byte [ebp - 0x10], 0x9e
mov byte [ebp - 0xf], 0x71
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0xd], 0x68
mov dword [ebp - 0x100], 0xa5a5
mov word [ebp - 0x34], 0xa
jmp 0x42a14f
jmp 0x42a33b
jmp 0x42a497
jmp 0x429b7b
jmp 0x42a4a3
jmp 0x42a4a3
mov word [ebp - 0x2c], 0
jmp 0x429b99
mov ax, word [ebp - 0x2c]
add ax, 1
mov word [ebp - 0x2c], ax
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
cmp ecx, 3
jge 0x429c6f
mov edx, dword [ebp - 0x2c]
and edx, 0xffff
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
imul edx, eax
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
imul edx, ecx
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
imul edx, eax
add edx, 7
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 7
je 0x429bfc
cmp dword [ebp - 0x118], 8
je 0x429c16
cmp dword [ebp - 0x118], 0x17
je 0x429c0f
jmp 0x429c6a
mov cx, word [ebp - 0x2e]
add cx, 1
mov word [ebp - 0x2e], cx
jo 0x429c0d
jno 0x429c0d
add ebx, ebp
pop ebx
jmp 0x429c6a
jb 0x429c14
jae 0x429c14
add ch, bl
insd dword es:[edi], dx
jmp 0x429c83
mov eax, dword [ebp - 0x2e]
and eax, 0xffff
cdq
mov ecx, 3
idiv ecx
mov ecx, edx
sub ecx, 1
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x2e]
and eax, 0xffff
cdq
mov esi, 5
idiv esi
xor eax, eax
cmp edx, 2
setne al
or ecx, eax
test ecx, ecx
je 0x429c64
mov cx, word [ebp - 0x30]
mov word [ebp - 0x36], cx
mov word [ebp - 0x32], 1
jne 0x429c62
je 0x429c62
add ebp, ebx
push es
jmp 0x429c6a
mov word [ebp - 0x32], 0
jmp 0x429b8d
jmp 0x42a4a3
jmp 0x429b85
jmp 0x42a4a3
jmp 0x42a33b
mov word [ebp - 0x2c], 0
jmp 0x429c97
mov dx, word [ebp - 0x2c]
add dx, 1
mov word [ebp - 0x2c], dx
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
cmp eax, 8
jge 0x429e0a
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
mov edx, dword [ebp - 0x2c]
and edx, 0xffff
imul ecx, edx
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
lea ecx, [ecx + eax + 1]
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x11c]
sub edx, 1
mov dword [ebp - 0x11c], edx
cmp dword [ebp - 0x11c], 0x38
ja case.0x429cf9.8
mov ecx, dword [ebp - 0x11c]
xor eax, eax
mov al, byte [ecx + 0x42a4d6]
jmp dword [eax*4 + 0x42a4b2]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x100], edx
jbe 0x429d0e
ja 0x429d0e
add al, 0x8b
inc ebp
fadd st(1), st(0)
call 0xdc882627
mov eax, dword [ebp - 0x24]
shr eax, 0x10
mov dword [ebp - 0x24], eax
jns 0x429d1c
js 0x429d1c
add eax, 0xe4e9
jmp case.0x429cf9.8
add byte [ebx - 0x50f007b3], cl
dec ebp
cld
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 4]
and ecx, 0xffff
mov dword [ebp - 0xc], ecx
jp 0x429d36
jnp 0x429d36
push es
jmp case.0x429cf9.8
mov edx, dword [ebp - 0x100]
shr edx, 0x10
mov dword [ebp - 0x20], edx
jl 0x429d4c
jge 0x429d4c
pop es
mov eax, dword [ebp - 0x100]
and eax, 0xffff
mov dword [ebp - 4], eax
jmp case.0x429cf9.8
cmp dword [ebp - 0x20], 0
je 0x429d7a
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x28]
and ecx, 0xffff
mov edx, dword [ebp - 0xc]
add edx, ecx
mov dword [ebp - 0xc], edx
jmp case.0x429cf9.8
mov dword [ebp - 8], 0x15a
jle 0x429d8b
jg 0x429d8b
or bh, al
inc ebp
fdiv dword [0xeb00004e]
jno 0x429d20
invalid
mov dword [ebp - 0x28], 0x4e35
jmp case.0x429cf9.8
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 4]
inc ebp
fmul dword [edi]
scasd eax, dword es:[edi]
inc ebp
cld
mov ecx, dword [ebp - 0xc]
shl ecx, 0x10
and ecx, 0xffff0000
lea edx, [eax + ecx + 1]
mov dword [ebp - 0x24], edx
jmp case.0x429cf9.8
mov eax, dword [ebp - 0x32]
and eax, 0xffff
and eax, 0x80000001
jns 0x429dc4
dec eax
or eax, 0xfffffffe
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x429dde
cmp dword [ebp - 0x120], 1
je 0x429de3
jmp 0x429de5
jmp 0x42a276
jmp 0x429e23
jmp case.0x429cf9.8
mov ecx, dword [ebp - 0x24]
and ecx, 0x7fff
mov dword [ebp - 0x24], ecx
push ecx
xor ecx, ecx
jecxz 0x429df9
or dword [ecx + 0x66], ebx
mov edx, dword [ebp - 0x24]
pop ecx
mov dx, word [ebp - 0x24]
mov word [ebp - 0x10c], dx
jmp 0x429c8b
jmp 0x429e0d
jmp 0x429b85
jmp 0x429b85
jmp 0x429e12
jmp 0x42a4a3
jmp 0x429b85
mov word [ebp - 0x2c], 0
jmp 0x429e37
mov ax, word [ebp - 0x2c]
add ax, 1
mov word [ebp - 0x2c], ax
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
cmp ecx, 7
jge 0x42a113
mov edx, dword [ebp - 0x2c]
and edx, 0xffff
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
imul edx, eax
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
imul edx, ecx
add edx, 1
mov dword [ebp - 0x124], edx
mov edx, dword [ebp - 0x124]
sub edx, 1
mov dword [ebp - 0x124], edx
cmp dword [ebp - 0x124], 0xd8
ja case.0x429e9f.7
mov ecx, dword [ebp - 0x124]
xor eax, eax
mov al, byte [ecx + 0x42a52f]
jmp dword [eax*4 + 0x42a50f]
mov edx, dword [ebp - 0x114]
and edx, 0xffff
mov eax, dword [ebp - 0x110]
and eax, 0xffff
lea ecx, [ebp + eax*8 - 0x4c]
mov dx, word [ecx + edx*2]
add dx, 1
mov eax, dword [ebp - 0x114]
and eax, 0xffff
mov ecx, dword [ebp - 0x110]
and ecx, 0xffff
lea ecx, [ebp + ecx*8 - 0x4c]
mov word [ecx + eax*2], dx
jo 0x429eed
jno 0x429eed
adc dword [esi - 0x75], esp
push ebp
shl byte [esi - 0x77], 1
push ebp
retf 0x14e9
mov dx, word [ebp - 0x30]
mov word [ebp - 0x36], dx
jmp case.0x429e9f.7
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
cdq
mov ecx, 3
idiv ecx
mov word [ebp - 0x114], dx
jb 0x429f19
jae 0x429f19
adc ch, cl
lock add dword [eax], eax
add byte [esi - 0x39], ah
invalid
invalid
test eax, edi
invalid
jmp case.0x429e9f.7
mov word [ebp - 0x108], 0
jmp 0x429f3b
mov dx, word [ebp - 0x108]
add dx, 1
mov word [ebp - 0x108], dx
mov eax, dword [ebp - 0x108]
and eax, 0xffff
cmp eax, 3
jge 0x429fa7
jne 0x429f50
je 0x429f50
adc ecx, dword [ebx - 0x10f73]
inc dword [ecx + 0xffffe1]
add byte [ebp - 0x744b32ac], cl
test esp, ebp
invalid
mov ecx, dword [ebp - 0x110]
and ecx, 0xffff
lea edx, [ebp + ecx*8 - 0x4c]
mov eax, dword [ebp - 0x114]
and eax, 0xffff
xor ecx, ecx
mov cx, word [edx + eax*2]
mov edx, dword [ebp - 0x110]
and edx, 0xffff
lea eax, [ebp + edx*8 - 0x4c]
mov edx, dword [ebp - 0x108]
and edx, 0xffff
xor esi, esi
mov si, word [eax + edx*2]
cmp ecx, esi
jle 0x429fa5
mov ax, word [ebp - 0x108]
mov word [ebp - 0x114], ax
jmp 0x429f29
jmp case.0x429e9f.7
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
cdq
mov ecx, 9
idiv ecx
mov word [ebp - 0x10c], dx
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
cdq
mov ecx, 3
idiv ecx
mov word [ebp - 0x110], ax
jbe 0x429fe5
ja 0x429fe5
adc al, 0xe9
and al, 1
add byte [eax], al
jmp case.0x429e9f.7
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
cdq
mov ecx, 9
idiv ecx
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 8
ja case.default.0x42a012
mov edx, dword [ebp - 0x128]
jmp dword [edx*4 + 0x42a608]
jmp 0x429e17
jmp 0x42a489
jns 0x42a028
js 0x42a028
adc eax, 0x23fe9
add cl, ch
jmp 0x42a492
jmp 0x42a32c
jp 0x42a03c
jmp 0x42a26c
jmp 0x42a492
jmp 0x42a32c
jp 0x42a03c
jnp 0x42a03c
push ss
jmp 0x42a47f
jmp 0x42a113
jmp 0x42a336
jmp 0x429b73
mov word [ebp - 0x104], 0
jmp 0x42a06d
mov ax, word [ebp - 0x104]
add ax, 1
mov word [ebp - 0x104], ax
mov ecx, dword [ebp - 0x104]
and ecx, 0xffff
cmp ecx, 3
jge 0x42a0d9
jl 0x42a083
jge 0x42a083
pop ss
mov edx, dword [ebp - 0x110]
and edx, 0xffff
lea eax, [ebp + edx*8 - 0x4c]
mov ecx, dword [ebp - 0x114]
and ecx, 0xffff
xor edx, edx
mov dx, word [eax + ecx*2]
mov eax, dword [ebp - 0x104]
and eax, 0xffff
lea ecx, [ebp + eax*8 - 0x4c]
mov eax, dword [ebp - 0x114]
and eax, 0xffff
xor esi, esi
mov si, word [ecx + eax*2]
cmp edx, esi
jle 0x42a0d7
mov cx, word [ebp - 0x104]
mov word [ebp - 0x110], cx
jmp 0x42a05b
jmp case.0x429e9f.7
mov edx, dword [ebp - 0x110]
and edx, 0xffff
imul edx, edx, 3
mov eax, dword [ebp - 0x114]
and eax, 0xffff
add edx, eax
mov word [ebp - 0x10c], dx
jle 0x42a103
jg 0x42a103
sbb byte [esi - 0x75], ah
invalid
mov cx, word [ebp - 0x10c]
mov word [ebp - 0x30], cx
jmp 0x429e2b
jmp 0x429b85
push ecx
xor ecx, ecx
jecxz 0x42a11e
sbb dword [ecx - 0x15], ebx
add dword [eax], esp
pop ecx
jmp 0x42a122
jo 0x42a127
jno 0x42a127
and dword [ebx - 0x74adf7ab], ecx
inc ebp
or al, 0x50
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00443560
add esp, 8
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0xfc]
push edx
call fcn.0042f2a0
add esp, 8
jmp 0x42a33b
mov word [ebp - 0x2c], 0
jmp 0x42a163
mov ax, word [ebp - 0x2c]
add ax, 1
mov word [ebp - 0x2c], ax
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
cmp ecx, 6
jge 0x42a262
mov edx, dword [ebp - 0x2c]
and edx, 0xffff
mov dword [ebp - 0x12c], edx
cmp dword [ebp - 0x12c], 5
ja case.default.0x42a197
mov eax, dword [ebp - 0x12c]
jmp dword [eax*4 + 0x42a62c]
mov word [ebp - 0x104], 0
jmp 0x42a1bb
mov cx, word [ebp - 0x104]
add cx, 1
mov word [ebp - 0x104], cx
mov edx, dword [ebp - 0x104]
and edx, 0xffff
cmp edx, 3
jge 0x42a220
mov word [ebp - 0x108], 0
jmp 0x42a1e9
mov ax, word [ebp - 0x108]
add ax, 1
mov word [ebp - 0x108], ax
mov ecx, dword [ebp - 0x108]
and ecx, 0xffff
cmp ecx, 3
jge 0x42a21e
mov edx, dword [ebp - 0x104]
and edx, 0xffff
lea eax, [ebp + edx*8 - 0x4c]
mov ecx, dword [ebp - 0x108]
and ecx, 0xffff
mov word [eax + ecx*2], 0
jmp 0x42a1d7
jmp 0x42a1a9
jmp case.default.0x42a197
mov word [ebp - 0x46], 0
jb 0x42a22d
jae 0x42a22d
and ch, bl
mov dx, word cs:[ebp - 0x40]
mov dx, word [ebp - 0x40]
jmp case.default.0x42a197
mov dx, word [ebp - 0x40]
add dx, 1
mov word [ebp - 0x40], dx
jne 0x42a240
je 0x42a240
and ebp, ebx
sbb esp, dword [esi - 0x39]
mov word [ebp - 0x36], 0xffff
jmp case.default.0x42a197
mov word [ebp - 0x36], 0xffff
jmp case.default.0x42a197
mov word [ebp - 0x2e], 0
jbe 0x42a255
ja 0x42a255
and al, 0xeb
push es
jmp case.default.0x42a197
mov word [ebp - 0x30], 0
jmp 0x42a157
jmp 0x429b85
jmp 0x42a33b
jmp 0x42a331
jmp 0x429b85
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
cdq
mov ecx, 7
idiv ecx
xor ecx, ecx
cmp edx, 2
sete cl
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
cdq
mov esi, 0xb
idiv esi
xor eax, eax
cmp edx, 5
sete al
or ecx, eax
test ecx, ecx
je 0x42a2c5
mov cx, word [ebp - 0x30]
mov word [ebp - 0x36], cx
mov word [ebp - 0x32], 1
jmp 0x429c83
mov edx, dword [ebp - 0x46]
and edx, 0xffff
mov dword [ebp - 0x130], edx
cmp dword [ebp - 0x130], 9
ja case.default.0x42a2e3
mov eax, dword [ebp - 0x130]
jmp dword [eax*4 + 0x42a644]
jmp 0x42a319
jmp 0x42a325
jns 0x42a2f3
js 0x42a2f3
and eax, 0x74e946eb
clc
invalid
jmp 0x42a33b
jmp 0x429b6e
jmp 0x42a118
jmp 0x42a33b
jp 0x42a306
jnp 0x42a306
jmp case.default.0x42a2e3
jmp case.default.0x42a2e3
jmp 0x42a267
jmp 0x42a458
jmp 0x429c7e
jmp 0x42a33b
jmp 0x42a33b
jl 0x42a320
jge 0x42a320
daa
jmp 0x42a4a3
jmp 0x42a33b
jmp 0x42a4a3
jmp 0x42a271
jmp 0x429b85
jmp 0x429c74
mov word [ebp - 0x2c], 0
jmp 0x42a34f
mov cx, word [ebp - 0x2c]
add cx, 1
mov word [ebp - 0x2c], cx
mov edx, dword [ebp - 0x2c]
and edx, 0xffff
cmp edx, 4
jge 0x42a458
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ecx, dword [ebp - 0x2c]
and ecx, 0xffff
imul eax, ecx
mov edx, dword [ebp - 0x2c]
and edx, 0xffff
imul edx, edx, 3
lea eax, [eax + edx + 1]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
sub ecx, 1
mov dword [ebp - 0x134], ecx
cmp dword [ebp - 0x134], 0x12
ja case.0x42a3b5.4
mov eax, dword [ebp - 0x134]
xor edx, edx
mov dl, byte [eax + 0x42a680]
jmp dword [edx*4 + 0x42a66c]
mov cx, word [ebp - 0x46]
add cx, 1
mov word [ebp - 0x46], cx
jle 0x42a3cd
jg 0x42a3cd
sub cl, ch
add dword [eax], 0x558b0000
mov edx, dword [ebp - 0x46]
and edx, 0xffff
jmp case.0x42a3b5.4
mov edx, dword [ebp - 0x46]
and edx, 0xffff
mov eax, dword [ebp - 0x34]
and eax, 0xffff
cmp edx, eax
jne case.default.0x42a40c
mov eax, dword [ebp - 0x2e]
and eax, 0xffff
cdq
mov ecx, 9
idiv ecx
mov dword [ebp - 0x138], edx
cmp dword [ebp - 0x138], 8
ja case.default.0x42a40c
mov edx, dword [ebp - 0x138]
jmp dword [edx*4 + 0x42a693]
jmp 0x429b80
jmp 0x42a327
jmp 0x429b78
push ecx
xor ecx, ecx
jecxz 0x42a428
sub dword [ecx - 0x17], ebx
inc ecx
clc
invalid
pop ecx
jmp 0x429c6f
jmp 0x42a48b
jmp 0x42a49c
jmp 0x42a31b
jmp 0x429e19
jmp 0x429c79
jmp case.0x42a3b5.4
mov word [ebp - 0x32], 1
jmp 0x42a44c
jmp case.0x42a3b5.4
jmp 0x429c83
jmp 0x42a343
jo 0x42a45d
jno 0x42a45d
xor dword [edx + 3], esi
jb 0x42a462
jae 0x42a462
xor dh, byte [ebp + 3]
jne 0x42a467
je 0x42a467
xor ecx, dword [ebx - 0x72aff3bb]
lea eax, [edi + edi*8]
invalid
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xfc]
push ecx
call fcn.0042f3bf
add esp, 8
jmp 0x42a33b
jbe 0x42a484
ja 0x42a484
xor al, 0xe9
cmp ecx, 0x13ebffff
jmp 0x429e0a
jmp 0x42a49e
jns 0x42a490
js 0x42a490
xor eax, 0x87e911eb
stc
invalid
jmp 0x42a4a3
jmp 0x429e1e
jmp 0x429b85
jmp 0x42a4a3
jmp 0x429b85
jp 0x42a4a8
jnp 0x42a4a8
mov eax, dword ss:[ebp + 0xc]
mov eax, dword [ebp + 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret