Function at 0x4238b0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5fd2cb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a4
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x18], 0
xor bh, bh
mov dword [esp + 0x1bc], 0
lea ecx, [esp + 0xd0]
mov byte [esp + 0x1f], bh
call fcn.004215a0
lea ecx, [esp + 0x18c]
mov byte [esp + 0x1bc], 1
call fcn.0049d880
mov ecx, 0x6c
mov dword [esp + 0x5e], 0x66006f
mov eax, 0x74
mov word [esp + 0x80], cx
mov esi, 0x6f
mov dword [esp + 0x70], 0x2e006c
mov ebp, 0x73
mov dword [esp + 0x82], 0x63002e
lea ecx, [esp + 0x30]
mov dword [esp + 0x64], 0x650072
mov dword [esp + 0x6c], 0x610076
mov dword [esp + 0x68], 0x6f006d
mov dword [esp + 0x88], 0x6d
mov dword [esp + 0x78], 0x630061
mov dword [esp + 0x7c], 0x650063
mov word [esp + 0x62], ax
mov dword [esp + 0x74], 0x630070
mov word [esp + 0x5c], bp
mov word [esp + 0x86], si
call fcn.00404ef0
mov byte [esp + 0x1bc], 3
lea ecx, [esi - 6]
push dword [esp + 0x1c4]
mov eax, 0x3f
mov dword [esp + 0xa8], 0x680063
mov word [esp + 0xb2], ax
mov eax, 0x6e
mov word [esp + 0x9a], ax
mov eax, 0x5f
mov word [esp + 0xc2], ax
mov eax, 0x65
mov word [esp + 0xbc], ax
mov word [esp + 0xac], ax
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0x38]
mov dword [esp + 0xc2], 0x740073
push eax
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xa4], 0x73006f
mov dword [esp + 0x98], 0x64002f
mov dword [esp + 0xd0], 0x25003d
mov dword [esp + 0xc0], 0x750071
mov dword [esp + 0xbc], 0x650072
mov dword [esp + 0xa8], 0x690074
mov dword [esp + 0x9e], 0x670061
mov dword [esp + 0xac], 0x2f0063
mov dword [esp + 0xb6], 0x6b0063
mov dword [esp + 0xcc], 0x640069
mov word [esp + 0x9c], cx
call fcn.00404860
add esp, 0xc
lea ecx, [esp + 0x15c]
call fcn.00408180
lea ecx, [esp + 0x34]
call fcn.00404ef0
mov byte [esp + 0x1bc], 5
mov eax, 0x68
mov dword [esp + 0x46], 0x740074
mov dword [esp + 0x4a], 0x3a0070
mov dword [esp + 0x56], 0x730025
push dword [esp + 0x30]
mov word [esp + 0x48], ax
mov eax, 0x2f
mov word [esp + 0x52], ax
xor eax, eax
mov word [esp + 0x5e], ax
mov eax, ebp
mov word [esp + 0x58], ax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x58], 0x25002f
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00404860
add esp, 0x10
lea ecx, [esp + 0x34]
call fcn.00404880
push eax
lea ecx, [esp + 0x108]
call fcn.00407630
lea eax, [esp + 0x15c]
mov byte [esp + 0x1bc], 6
push eax
lea eax, [esp + 0x108]
push eax
lea ecx, [esp + 0x194]
call fcn.0049db00
lea ecx, [esp + 0x104]
mov byte [esp + 0x1bc], 5
mov bl, al
call fcn.00406f10
test bl, bl
je 0x4240a8
lea ecx, [esp + 0x15c]
call fcn.004108f0
mov ecx, eax
call fcn.0042e440
mov esi, eax
test esi, esi
je 0x4240a8
mov ecx, esi
call fcn.0042f8c0
test al, al
je 0x4240a8
lea ecx, [esp + 0x104]
call fcn.00408180
mov ecx, esi
mov byte [esp + 0x1bc], 7
call fcn.0042f8f0
push eax
lea ecx, [esp + 0x2c]
call fcn.0041d170
push str.status
lea ecx, [esp + 0xf0]
mov byte [esp + 0x1c0], 8
call fcn.00407630
lea eax, [esp + 0x38]
mov byte [esp + 0x1bc], 9
mov ebx, 1
lea ecx, [esp + 0x28]
push eax
mov dword [esp + 0x1c], ebx
call fcn.0041d230
push eax
lea eax, [esp + 0xf0]
push eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x34]
call fcn.0041d250
mov ecx, eax
call fcn.0041d510
test al, al
je 0x423c50
push str.status
lea ecx, [esp + 0xd8]
call fcn.00407630
lea eax, [esp + 0xd4]
mov dword [esp + 0x1bc], 0xa
mov ebx, 3
lea ecx, [esp + 0x28]
push eax
mov dword [esp + 0x1c], ebx
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8a0
mov byte [esp + 0x17], 1
test al, al
jne 0x423c55
mov byte [esp + 0x17], 0
test bl, 2
je 0x423c69
lea ecx, [esp + 0xd4]
and ebx, 0xfffffffd
call fcn.00406f10
mov dword [esp + 0x1bc], 8
test bl, 1
je 0x423c88
lea ecx, [esp + 0xec]
and ebx, 0xfffffffe
call fcn.00406f10
cmp byte [esp + 0x17], 0
je 0x423ce1
push str.status
lea ecx, [esp + 0xd8]
call fcn.00407630
lea eax, [esp + 0xd4]
mov byte [esp + 0x1bc], 0xb
push eax
lea ecx, [esp + 0x2c]
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8d0
push eax
lea ecx, [esp + 0x108]
call fcn.00407ec0
lea ecx, [esp + 0xd4]
mov byte [esp + 0x1bc], 8
call fcn.00406f10
mov edx, str.success
lea ecx, [esp + 0x104]
call fcn.0040fda0
test al, al
je 0x42408f
push str.data
lea ecx, [esp + 0xf0]
call fcn.00407630
lea eax, [esp + 0x38]
mov byte [esp + 0x1bc], 0xc
or ebx, 4
lea ecx, [esp + 0x28]
push eax
mov dword [esp + 0x1c], ebx
call fcn.0041d230
push eax
lea eax, [esp + 0xf0]
push eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x34]
call fcn.0041d250
mov ecx, eax
call fcn.0041d510
test al, al
je 0x423d8e
push str.data
lea ecx, [esp + 0xd8]
call fcn.00407630
lea eax, [esp + 0xd4]
mov dword [esp + 0x1bc], 0xd
or ebx, 8
lea ecx, [esp + 0x28]
push eax
mov dword [esp + 0x1c], ebx
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8b0
mov byte [esp + 0x17], 1
test al, al
jne 0x423d93
mov byte [esp + 0x17], 0
test bl, 8
je 0x423da7
lea ecx, [esp + 0xd4]
and ebx, 0xfffffff7
call fcn.00406f10
mov dword [esp + 0x1bc], 8
test bl, 4
je 0x423dc6
lea ecx, [esp + 0xec]
and ebx, 0xfffffffb
call fcn.00406f10
cmp byte [esp + 0x17], 0
je 0x42408b
push str.data
lea ecx, [esp + 0x178]
call fcn.00407630
lea eax, [esp + 0x174]
mov byte [esp + 0x1bc], 0xe
push eax
lea ecx, [esp + 0x2c]
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8e0
push eax
lea ecx, [esp + 0xf0]
call fcn.0041d0c0
lea ecx, [esp + 0x174]
mov byte [esp + 0x1bc], 0x10
call fcn.00406f10
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xf0]
call fcn.0041d130
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0xf0]
call fcn.0041d150
push eax
lea ecx, [esp + 0x28]
call fcn.0041d4f0
test al, al
je 0x42407f
lea ecx, [esp + 0x24]
call fcn.0041d4c0
mov ecx, dword [eax]
call fcn.0042f8c0
test al, al
je 0x42404a
call fcn.0042f8f0
push eax
lea ecx, [esp + 0x40]
call fcn.0041d170
push 0x659248
lea ecx, [esp + 0x13c]
mov byte [esp + 0x1c0], 0x11
call fcn.00407630
lea eax, [esp + 0x150]
mov byte [esp + 0x1bc], 0x12
or ebx, 0x10
lea ecx, [esp + 0x3c]
push eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x1c], ebx
call fcn.0041d230
push eax
lea eax, [esp + 0x13c]
push eax
lea eax, [esp + 0x160]
push eax
lea ecx, [esp + 0x48]
call fcn.0041d250
mov ecx, eax
call fcn.0041d510
test al, al
je 0x423f27
push 0x659248
lea ecx, [esp + 0x124]
call fcn.00407630
lea eax, [esp + 0x120]
mov dword [esp + 0x1bc], 0x13
or ebx, 0x20
lea ecx, [esp + 0x3c]
push eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x1c], ebx
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8a0
test al, al
je 0x423f27
mov bl, 1
jmp 0x423f29
xor bl, bl
mov eax, dword [esp + 0x20]
test al, 0x20
je 0x423f48
and eax, 0xffffffdf
lea ecx, [esp + 0x120]
mov dword [esp + 0x20], eax
call fcn.00406f10
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1bc], 0x11
test al, 0x10
je 0x423f6a
and eax, 0xffffffef
lea ecx, [esp + 0x138]
mov dword [esp + 0x20], eax
call fcn.00406f10
test bl, bl
je 0x424035
push 0x659248
lea ecx, [esp + 0x13c]
call fcn.00407630
lea eax, [esp + 0x138]
mov byte [esp + 0x1bc], 0x14
push eax
lea ecx, [esp + 0x40]
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8d0
push eax
lea ecx, [esp + 0x124]
call fcn.00406ec0
lea ecx, [esp + 0x138]
mov byte [esp + 0x1bc], 0x16
call fcn.00406f10
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x651e48
call fcn.00404720
lea ecx, [esp + 0x124]
mov byte [esp + 0x1c0], 0x17
call fcn.004108f0
push ecx
mov ecx, esp
push eax
call fcn.00404720
lea ecx, [esp + 0xdc]
mov byte [esp + 0x1c4], 0x16
call fcn.00419590
lea eax, [esp + 0xd4]
mov byte [esp + 0x1bc], 0x18
push eax
mov ecx, edi
call fcn.00419200
lea ecx, [esp + 0xd4]
call fcn.00419850
lea ecx, [esp + 0x120]
call fcn.00406f10
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1bc], 0x10
call fcn.0041cea0
mov ebx, dword [esp + 0x20]
push ecx
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x2c]
call fcn.0041d4d0
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0xf0]
call fcn.0041d150
push eax
lea ecx, [esp + 0x28]
call fcn.0041d4f0
test al, al
jne 0x423e57
lea ecx, [esp + 0xec]
call fcn.0041d120
mov bh, 1
jmp 0x424093
mov bh, byte [esp + 0x1f]
lea ecx, [esp + 0x28]
call fcn.0041cea0
lea ecx, [esp + 0x104]
call fcn.00406f10
lea ecx, [esp + 0x34]
call fcn.00404e10
lea ecx, [esp + 0x15c]
call fcn.00406f10
lea ecx, [esp + 0x30]
call fcn.00404e10
lea ecx, [esp + 0x18c]
mov byte [esp + 0x1bc], 1
call fcn.0049d950
lea ecx, [esp + 0xd0]
call fcn.00404e10
lea ecx, [esp + 0x1c4]
call fcn.00404e10
mov ecx, dword [esp + 0x1b4]
mov al, bh
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1b0
ret