Function at 0x42ef30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.0042ee6e
add esp, 0xc
mov ebx, ebx
js 0x42ef5d
pushf
clc
js 0x42ef52
inc eax
dec eax
jmp 0x42ef56
popf
je 0x42ef5a
jns 0x42ef5d
sub eax, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x13], 0x54
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x65
mov byte [ebp - 0x17], 0x6d
mov byte [ebp - 0x12], 0x66
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0x16], 0x70
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0xc], 0x49
mov byte [ebp - 7], 0x66
mov byte [ebp - 0x15], 0x74
mov byte [ebp - 0x10], 0x77
mov byte [ebp - 0xb], 0x62
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x6f
lea esp, [esp]
jge 0x42efc2
pushf
xor ebx, dword [esp + 0xc]
xor ebx, dword [esp + 0xc]
xor esp, 0
popf
mov edi, edi
jl 0x42efc2
lcall 0x1e9, 0x80e84d8a
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
sub esp, 0
stc
or ebx, 0
js 0x42f080
pushf
lea edi, [edi + 0x2b1e]
lea edi, [edi - 0x2b1e]
popf
jb 0x42f079
lea ecx, [ecx]
jb 0x42f07d
jns 0x42f080
add eax, 0xff94f0e8
dec dword [ecx + 0x7d83fc45]
cld
add byte [ebp + 7], dh
call 0x428575
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x42f095
xor eax, eax
jmp 0x42f11c
js 0x42f097
std
cld
jne 0x42f0b9
pushf
ror esp, 0
xchg esp, esp
popf
lea edi, [edi + 0x698]
lea edi, [edi - 0x698]
lea esi, [esi]
xchg esi, ecx
xchg esi, ecx
je 0x42f0b9
mov ebp, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.0043505f
mov dword [ebp - 0x1c], eax
push 0x13
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.0042ee6e
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jne 0x42f0e3
xor eax, eax
jmp 0x42f11c
std
cld
ror edi, 5
ror edi, 0x1b
jge 0x42f0f9
lea esp, [esp]
jo 0x42f0f2
jbe 0x42f0f4
jle 0x42f0f6
jl 0x42f0f9
ljmp 0x4ae8:0x51e44d8b
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0042d94c
add esp, 4
shl esi, 0
shr esp, 0
jge 0x42f115
je 0x42f10f
xchg edi, eax
xchg edi, eax
jl 0x42f115
mov edi, 0x8558ba5
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4