Function at 0x424330
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x84
mov eax, dword [esp + 0xa0]
mov ebx, dword [esp + 0x9c]
mov ecx, dword [eax + 4]
mov eax, 0xfffffffe
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424350
sar eax, 1
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424370
sar ecx, 1
add eax, ecx
add eax, 0x21
mov ecx, eax
and ecx, 0x1e
xor eax, 0x1e
lea eax, [eax + ecx*2]
test eax, eax
jns 0x424398
mov eax, 0xffffffff
jmp 0x42439a
add eax, eax
push eax
call fcn.0040c720
add esp, 4
mov esi, eax
mov dword [esp + 0x48], 0x179b197a
mov dword [esp + 0x4c], 0x138f159b
mov dword [esp + 0x50], 0xf71119e
mov dword [esp + 0x54], 0xb980d9f
mov dword [esp + 0x58], 0x79b0984
mov dword [esp + 0x5c], 0x38e058c
mov dword [esp + 0x60], 0x3fa20179
mov dword [esp + 0x64], 0x3b763d79
mov dword [esp + 0x68], 0x377f3976
mov dword [esp + 0x6c], 0x337b3578
mov dword [esp + 0x70], 0x2f65317a
mov dword [esp + 0x74], 0x2b632d62
mov dword [esp + 0x78], 0x27422965
mov dword [esp + 0x7c], 0x23be25bd
mov dword [esp + 0x80], 0x5f5e21be
mov eax, 0x207f9286
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x207f923e]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x62
mov byte [esp + eax - 0x207f923e], cl
inc eax
cmp eax, 0x207f92c2
jne 0x424430
mov dword [esp], 0x8f398924
mov dword [esp + 4], 0x83318d38
mov dword [esp + 8], 0x87278136
mov dword [esp + 0xc], 0x9b3f853f
mov dword [esp + 0x10], 0x9f3a9934
mov dword [esp + 0x14], 0x93289d39
mov dword [esp + 0x18], 0x97239131
mov dword [esp + 0x1c], 0xeb5e9528
mov dword [esp + 0x20], 0xef53e944
mov dword [esp + 0x24], 0xe36ced5f
mov dword [esp + 0x28], 0xe743e19d
mov dword [esp + 0x2c], 0xfb4ee56c
mov dword [esp + 0x30], 0xff4cf95d
mov dword [esp + 0x34], 0xf34bfd4b
mov dword [esp + 0x38], 0xf744f143
mov dword [esp + 0x3c], 0xcbb5f58b
mov dword [esp + 0x40], 0xcfcec9b7
mov word [esp + 0x44], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax]
mov edx, eax
and edx, 0x20
mov ebp, eax
and ebp, 2
mov edi, ebp
xor edi, 2
imul edi, edx
or edx, 2
imul edx, ebp
add edx, edi
mov edi, eax
xor edi, 0x58792a22
mov ebp, edx
and ebp, edi
xor edi, edx
lea edx, [edi + ebp*2]
mov edi, edx
and edi, ecx
add edx, ecx
add edi, edi
sub edx, edi
add dl, 0x56
mov byte [esp + eax], dl
inc eax
cmp eax, 0x46
jne 0x4244f0
mov edi, dword [esp + 0xa0]
mov ecx, dword [edi + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x424561
add ecx, 2
mov eax, esi
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424550
mov word [eax], 0
movzx ecx, word [esp]
test cx, cx
je 0x424591
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424580
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x4245c1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x4245b0
mov word [eax], 0
movzx ecx, word [esp + 0x48]
test cx, cx
je 0x4245f1
lea edx, [esp + 0x4a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4245e0
mov word [eax], 0
mov eax, dword [esp + 0xa4]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424610
mov edx, dword [edi]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424630
mov edi, dword [edi + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x424650
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xb
test eax, eax
jns 0x424674
mov eax, 0xffffffff
jmp 0x42467d
add ecx, edx
lea eax, [ecx*2 + 0x16]
push eax
call fcn.0040c720
add esp, 4
mov edi, eax
mov dword [esp], 0x59bd5bad
mov dword [esp + 4], 0x5da25fa4
mov dword [esp + 8], 0x51a653a7
mov dword [esp + 0xc], 0x556757a5
mov dword [esp + 0x10], 0x6b54
mov eax, 0x659e0d8f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x659e0d8f]
lea edx, [eax - 0x80000000]
and edx, eax
mov ebp, eax
and ebp, 0x259e0c84
and edx, 0x4000013b
or edx, ebp
mov ebp, edx
xor ebp, 0xa79e7e84
xor edx, ecx
xor ecx, 0x84
not edx
and edx, ebp
add ecx, ebp
add edx, edx
sub ecx, edx
add cl, 0x35
mov byte [esp + eax - 0x659e0d8f], cl
inc eax
cmp eax, 0x659e0da3
jne 0x4246c0
movzx ecx, word [esp]
mov eax, edi
test cx, cx
je 0x424731
lea edx, [esp + 2]
mov eax, edi
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424720
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
mov ebp, dword [esp + 0xa0]
je 0x424761
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x424750
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp]
movzx edx, word [ecx]
test dx, dx
je 0x424791
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424780
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
test dx, dx
je 0x4247c1
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4247b0
mov word [eax], 0
mov dword [esp], 0x616667be
mov word [esp + 4], 0
mov byte [esp + 6], 0
mov eax, 0x9f767e99
nop
nop
movzx ecx, byte [esp + eax + 0x60898167]
xor ecx, eax
lea edx, [ecx - 0x1d5078fe]
mov ebx, ecx
and ebx, 1
mov ebp, edx
and ebp, 0xfe
xor edx, 1
add ecx, ebx
add ecx, 0xe2af8702
add ecx, edx
sub ecx, ebp
mov byte [esp + eax + 0x60898167], cl
inc eax
cmp eax, 0x9f767ea0
jne 0x4247e0
mov eax, esp
push 0
push 1
push 0
push eax
push esi
push edi
push dword [esp + 0xb0]
call fcn.00424ac0
add esp, 0x1c
mov ebx, eax
jmp dword [0x44a76c]