Function at 0x425c60
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
xor ebx, ebx
cmp byte [esp + 0x68], 0
je 0x425faf
mov eax, dword [esp + 0x70]
mov esi, dword [esp + 0x64]
mov edi, dword [eax + 4]
nop
cmp word [edi + ebx], 0
lea ebx, [ebx + 2]
jne 0x425c80
lea ecx, [edi + ebx]
add ecx, 0xfffffffe
mov eax, edi
not eax
and eax, ecx
xor ecx, edi
add eax, eax
sub eax, ecx
xor ecx, ecx
nop
nop
cmp word [esi + ecx], 0
lea ecx, [ecx + 2]
jne 0x425ca0
sar eax, 1
lea edx, [esi + ecx]
add edx, 0xfffffffe
mov ecx, esi
not ecx
and ecx, edx
xor edx, esi
add ecx, ecx
sub ecx, edx
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x1f
test edx, edx
jns 0x425cd1
mov eax, 0xffffffff
jmp 0x425cda
add eax, ecx
lea eax, [eax*2 + 0x3e]
push eax
call fcn.00408bd0
add esp, 4
movzx ecx, word [edi]
mov edx, eax
test cx, cx
je 0x425d11
add edi, 2
mov edx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], cx
add edx, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x425d00
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], eax
mov word [esp], 0x29f4
xor edi, edi
mov dl, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + edi]
mov ebp, edi
or ebp, 0xe3b6af68
lea esi, [ebx + ebx]
not esi
add esi, ebx
mov ecx, edi
xor ecx, 0x97
and ecx, ebx
not ebx
or esi, ebx
and esi, ebp
add ecx, esi
add ecx, 0xe24a84bf
mov ebx, ecx
xor ebx, 0xfe
or ecx, 1
and ebx, ecx
add ebx, ecx
mov byte [esp + edi], bl
mov edi, 1
xor ebx, ebx
test dl, 1
mov edx, 0
jne 0x425d30
movzx ecx, word [esp]
mov esi, dword [esp + 0x3c]
mov word [esi], cx
mov dword [esp], 0x1c471a75
mov dword [esp + 4], 0x107c1e62
mov dword [esp + 8], 0x146f1270
mov dword [esp + 0xc], 0x28631646
mov dword [esp + 0x10], 0x2c5f2a48
mov dword [esp + 0x14], 0x20432e48
mov dword [esp + 0x18], 0x245d2278
mov dword [esp + 0x1c], 0x38422641
mov dword [esp + 0x20], 0x3c5e3ab1
mov dword [esp + 0x24], 0x30533e59
mov dword [esp + 0x28], 0x344a326d
mov dword [esp + 0x2c], 0x48523643
mov dword [esp + 0x30], 0x4c344a0a
mov dword [esp + 0x34], 0x40324e30
mov dword [esp + 0x38], 0x4443422d
mov ecx, ebx
add cl, 0x91
xor cl, byte [esp + ebx]
add cl, 0x78
mov byte [esp + ebx], cl
inc ebx
cmp ebx, 0x3c
jne 0x425e00
add esi, 2
mov eax, dword [esp + 0x64]
movzx ecx, word [eax]
test cx, cx
je 0x425e41
add eax, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x425e30
mov word [esi], 0
movzx ecx, word [esp]
test cx, cx
je 0x425e71
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x425e60
mov word [esi], 0
mov dword [esp + 0x44], 0x76ab74a9
mov dword [esp + 0x48], 0x6af46892
mov dword [esp + 0x4c], 0x6e6d6cf7
mov eax, 0x461afa2b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x461af9e7]
xor edx, eax
lea ecx, [edx - 0x30d7d159]
mov esi, ecx
xor esi, 0x7e
or ecx, 1
and ecx, esi
mov esi, 0x58
sub esi, edx
and edx, 1
and esi, 0xfe
or esi, edx
xor esi, 0xfe
lea ecx, [esi + ecx*2]
mov byte [esp + eax - 0x461af9e7], cl
inc eax
cmp eax, 0x461afa37
jne 0x425ea0
mov dword [esp], 0xc06ece90
mov dword [esp + 4], 0xc47fc278
mov dword [esp + 8], 0xd8b8c676
mov dword [esp + 0xc], 0xdc62da8e
mov dword [esp + 0x10], 0xd07bde63
mov dword [esp + 0x14], 0xd464d26e
mov dword [esp + 0x18], 0x28b7d666
mov dword [esp + 0x1c], 0x2c8a2a74
mov dword [esp + 0x20], 0x20932e94
mov word [esp + 0x24], 0x2221
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax]
lea edx, [eax - 0x628d0e1b]
and edx, ecx
add ecx, eax
add ecx, 0x9d72f1e5
mov esi, ecx
not esi
add edx, edx
sub ecx, edx
add ecx, 0xd7
and esi, 1
or ecx, 1
add ecx, esi
mov byte [esp + eax], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x26
jb 0x425f40
lea eax, [esp + 0x44]
mov ecx, esp
push 0
push 4
push 0xc00000
push eax
mov esi, dword [esp + 0x50]
push esi
push ecx
mov eax, dword [esp + 0x88]
push dword [eax]
call fcn.00421440
add esp, 0x1c
mov ebx, eax
push esi
call fcn.00408be0
add esp, 4
mov eax, ebx
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret 0x10