Function at 0x422eb5
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
push ebx
push esi
push edi
push 6
mov dword [ebp - 0x30], 0xa5a5
mov word [ebp - 0x14], 0xa
xor esi, esi
pop ebx
mov eax, esi
xor ecx, ecx
sub eax, ecx
je 0x422f09
dec eax
je 0x422f03
dec eax
je 0x422efd
dec eax
je 0x422ef6
dec eax
je 0x422ef0
dec eax
jne 0x422f1c
inc word [ebp - 0x20]
jmp 0x422f1c
mov word [ebp - 0x10], cx
jmp 0x422f1c
or word [ebp - 0x16], 0xffff
jmp 0x422f1c
mov word [ebp - 0x26], cx
jmp 0x422f1c
mov word [ebp - 0xe], cx
jmp 0x422f1c
push 3
lea ecx, [ebp - 0x2c]
pop edx
xor eax, eax
mov edi, ecx
stosd dword es:[edi], eax
add ecx, 8
dec edx
stosw word es:[edi], ax
jne 0x422f0f
inc esi
dec ebx
jne 0x422ed3
mov esi, dword [ebp + 0xc]
xor edi, edi
cmp di, 3
jae case.0x42322a.0
movzx ecx, di
mov eax, ecx
imul eax, ecx
imul eax, ecx
imul eax, ecx
add eax, 7
sub eax, 7
je 0x422f8d
dec eax
je 0x422f4f
sub eax, 0xf
je 0x422f94
jmp 0x422f91
movzx ecx, word [ebp - 0xe]
mov eax, ecx
push 5
cdq
pop ebx
idiv ebx
xor ebx, ebx
mov eax, ecx
push 3
pop ecx
cmp edx, 2
cdq
setne bl
idiv ecx
dec edx
neg edx
sbb edx, edx
neg edx
or ebx, edx
je 0x422f86
mov ax, word [ebp - 0x10]
mov word [ebp - 0x12], 1
mov word [ebp - 0x16], ax
jmp 0x422f91
and word [ebp - 0x12], 0
jmp 0x422f91
inc word [ebp - 0xe]
inc edi
jmp 0x422f25
mov ebx, dword [ebp - 0x38]
xor ecx, ecx
cmp cx, 8
jae case.0x4232a0.0
movzx eax, cx
lea edx, [eax + 1]
imul edx, eax
lea eax, [edx + 1]
cmp eax, 0x15
jg 0x42303b
je 0x423020
dec eax
je 0x42300a
dec eax
dec eax
je 0x422ffa
sub eax, 4
je 0x422feb
sub eax, 6
jne 0x42307b
cmp dword [ebp - 0x3c], 0
je 0x42307b
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x3c]
and eax, 0xffff
add ebx, eax
mov dword [ebp - 0x38], ebx
jmp 0x42307b
mov ebx, dword [ebp - 0x34]
imul ebx, dword [ebp - 0x58]
and ebx, 0xffff
jmp 0x422fe3
mov dword [ebp - 0x58], 0x15a
mov dword [ebp - 0x54], 0x4e35
jmp 0x42307b
mov eax, dword [ebp - 0x30]
shr eax, 0x10
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
and eax, 0xffff
mov dword [ebp - 0x34], eax
jmp 0x42307b
mov eax, dword [ebp - 0x54]
mov edx, ebx
imul eax, dword [ebp - 0x34]
and edx, 0xffff
shl edx, 0x10
lea eax, [edx + eax + 1]
mov dword [ebp + 0xc], eax
jmp 0x42307b
cmp eax, 0x1f
je 0x423071
cmp eax, 0x2b
je 0x423062
cmp eax, 0x39
jne 0x42307b
movzx eax, word [ebp - 0x12]
push 2
cdq
pop edi
idiv edi
sub edx, 0
je 0x423081
dec edx
je 0x423254
jmp 0x42307b
and dword [ebp + 0xc], 0x7fff
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], eax
jmp 0x42307b
mov eax, dword [ebp + 0xc]
shr dword [ebp + 0xc], 0x10
mov dword [ebp - 0x30], eax
inc ecx
jmp 0x422f99
movzx ecx, word [ebp - 4]
mov eax, ecx
push 0xb
cdq
pop edi
idiv edi
mov eax, ecx
push 7
pop ecx
mov edi, edx
sub edi, 5
neg edi
cdq
sbb edi, edi
idiv ecx
inc edi
dec edx
dec edx
neg edx
sbb edx, edx
inc edx
or edi, edx
je 0x4230bd
mov ax, word [ebp - 0x10]
mov word [ebp - 0x12], 1
mov word [ebp - 0x16], ax
jmp 0x422f97
movzx eax, word [ebp - 0x26]
cmp eax, 9
ja case.0x4230ca.3
jmp dword [eax*4 + 0x423447]
cmp byte [ebp + 0x10], 1
jne case.0x4230ca.8
and byte [ebp - 0x43], 0
mov byte [ebp - 0x50], 0x47
mov byte [ebp - 0x4f], 0x65
mov byte [ebp - 0x4e], 0x74
mov byte [ebp - 0x4d], 0x53
mov byte [ebp - 0x4c], 0x79
mov byte [ebp - 0x4b], 0x73
mov byte [ebp - 0x4a], 0x74
mov byte [ebp - 0x49], 0x65
mov byte [ebp - 0x48], 0x6d
mov byte [ebp - 0x47], 0x54
mov byte [ebp - 0x46], 0x69
mov byte [ebp - 0x45], 0x6d
mov byte [ebp - 0x44], 0x65
call fcn.0041f84d
lea ecx, [ebp - 0x50]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x78]
push ecx
call eax
mov al, byte [esi + 0x29]
xor al, byte [ebp - 0x78]
mov byte [esi + 0x28], al
mov al, byte [esi + 0x2b]
xor al, byte [ebp - 0x76]
mov byte [esi + 0x2a], al
jmp case.0x4230ca.8
mov eax, dword [esi + 0x14]
xor dword [esi], eax
xor dword [esi + 4], eax
xor dword [esi + 8], eax
xor dword [esi + 0xc], eax
xor dword [esi + 0x10], eax
jmp case.0x4230ca.8
call fcn.0041f75e
mov dword [esi + 4], eax
call fcn.0041f75e
mov dword [esi + 0xc], eax
jmp case.0x4230ca.8
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 5]
movzx eax, byte [eax]
mov dword [esi], ecx
mov dword [esi + 8], eax
jmp case.0x4230ca.8
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 1]
mov dword [esi + 0x10], ecx
mov ecx, dword [eax + 9]
test ecx, ecx
je case.0x4230ca.8
mov al, byte [eax]
cmp al, 1
je case.0x4230ca.8
cmp al, 7
je case.0x4230ca.8
push 0x10
lea eax, [esi + 0x18]
push ecx
push eax
call fcn.0042036e
add esp, 0xc
jmp case.0x4230ca.8
mov eax, dword [esi + 0x28]
xor dword [esi], eax
xor dword [esi + 4], eax
xor dword [esi + 8], eax
xor dword [esi + 0xc], eax
xor dword [esi + 0x10], eax
xor dword [esi + 0x14], eax
xor ecx, ecx
mov eax, ecx
push 4
cdq
pop edi
idiv edi
mov al, byte [esi + edx + 0x28]
xor byte [ecx + esi + 0x18], al
inc ecx
cmp ecx, 0x10
jl 0x4231bd
jmp case.0x4230ca.8
call fcn.0041f75e
mov dword [esi + 0x14], eax
call fcn.0041f75e
mov dword [esi + 0x28], eax
xor edi, edi
movzx ecx, di
lea eax, [ecx + 3]
imul eax, ecx
inc eax
dec eax
je 0x423231
sub eax, 4
je 0x423211
sub eax, 6
je 0x423209
sub eax, 8
je 0x422f97
jmp case.default.0x42322a
mov word [ebp - 0x12], 1
jmp case.default.0x42322a
mov ax, word [ebp - 0x26]
cmp ax, word [ebp - 0x14]
jne case.default.0x42322a
movzx eax, word [ebp - 0xe]
push 9
cdq
pop ecx
idiv ecx
cmp edx, 8
ja case.default.0x42322a
jmp dword [edx*4 + 0x42346f]
inc word [ebp - 0x26]
inc edi
cmp di, 4
jb 0x4231e7
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 4]
mov edx, eax
xor edx, ecx
xor dword [esi], edx
mov edx, eax
xor edx, ecx
xor dword [esi + 8], eax
mov dword [esi + 4], edx
jmp case.0x4230ca.8
xor edi, edi
movzx ecx, di
mov eax, ecx
imul eax, ecx
imul eax, ecx
inc eax
dec eax
je 0x423340
dec eax
je 0x423331
sub eax, 7
je case.default.0x4232a0
sub eax, 0x13
je 0x4232dc
sub eax, 0x25
je 0x4232be
sub eax, 0x3d
je 0x4232a7
sub eax, 0x5b
jne 0x423359
movzx eax, word [ebp - 4]
push 9
cdq
pop ecx
idiv ecx
cmp edx, 8
ja case.default.0x4232a0
jmp dword [edx*4 + 0x423493]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
lea ecx, [ecx + eax*2]
add eax, ecx
mov dword [ebp - 4], eax
mov word [ebp - 0x10], ax
jmp 0x423359
movzx eax, word [ebp - 8]
movzx ecx, word [ebp - 0xc]
lea eax, [ecx + eax*4]
inc word [ebp + eax*2 - 0x2c]
lea eax, [ebp + eax*2 - 0x2c]
mov ax, word [ebp - 0x10]
mov word [ebp - 0x16], ax
jmp 0x423359
movzx eax, word [ebp - 8]
xor edx, edx
shl eax, 2
lea ecx, [ebp + eax*2 - 0x2c]
movzx ebx, word [ebp - 0xc]
add ebx, eax
mov bx, word [ebp + ebx*2 - 0x2c]
cmp bx, word [ecx]
jbe 0x4232fc
mov dword [ebp - 0xc], edx
inc edx
inc ecx
inc ecx
cmp dx, 3
jb 0x4232e9
jmp 0x423359
movzx eax, word [ebp - 0xc]
xor edx, edx
lea ecx, [ebp + eax*2 - 0x2c]
movzx ebx, word [ebp - 8]
lea ebx, [eax + ebx*4]
mov bx, word [ebp + ebx*2 - 0x2c]
cmp bx, word [ecx]
jbe 0x423325
mov dword [ebp - 8], edx
inc edx
add ecx, 8
cmp dx, 3
jb 0x423311
jmp 0x423359
movzx eax, word [ebp - 4]
push 3
cdq
pop ecx
idiv ecx
mov dword [ebp - 0xc], edx
jmp 0x423359
movzx eax, word [ebp - 4]
push 9
cdq
pop ecx
idiv ecx
push 3
pop ecx
movzx eax, dx
mov dword [ebp - 4], edx
cdq
idiv ecx
mov dword [ebp - 8], eax
inc edi
cmp di, 7
jb 0x423256
jmp case.0x4232a0.0
xor edi, edi
push 0x10
lea eax, [ebp - 0x68]
push edi
push eax
call fcn.0041f81e
lea eax, [ebp - 0x68]
push eax
call fcn.00421677
lea eax, [ebp - 0x1b8]
push eax
push edi
lea eax, [ebp - 0x68]
push edi
push eax
push edi
push edi
call fcn.00420774
add esp, 0x28
cmp byte [ebp + 0x10], 1
jne 0x4233ec
push 0x28
lea eax, [ebp - 0xa4]
push esi
push eax
call fcn.0042036e
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0xa4]
push eax
push pe_nt_image_headers32
push esi
call fcn.00420852
lea eax, [ebp - 0xa4]
push 0x28
push eax
push esi
call fcn.0042036e
lea eax, [ebp - 0x1b8]
add esi, 0x18
push eax
push esi
push 0x80
lea eax, [ebp - 0x8c]
jmp 0x423439
push 0x2c
lea eax, [ebp - 0xa4]
push esi
push eax
call fcn.0042036e
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0xa4]
push eax
push pe_nt_image_headers32
push esi
call fcn.00420852
lea eax, [ebp - 0xa4]
push 0x2c
push eax
push esi
call fcn.0042036e
lea eax, [ebp - 0x1b8]
add esi, 0x1c
push eax
push esi
push 0x80
lea eax, [ebp - 0x88]
push eax
call fcn.00420852
add esp, 0x38
pop edi
pop esi
pop ebx
leave
ret