Function at 0x423800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x5ed284]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor eax, eax
push esi
xor ecx, ecx
push edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov byte [ebp - 8], al
xchg ebx, ebx
jae 0x423841
pushf
xor eax, dword [esp + 8]
xor eax, dword [esp + 8]
neg edx
neg edx
popf
jo 0x42383c
jne 0x42383e
jb 0x423841
xor eax, 0x45c675b0
in al, dx
dec eax
mov al, 0x75
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xf], 0x64
mov byte [ebp - 0xa], 0x6f
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xe], 0x6c
mov byte [ebp - 9], al
mov byte [ebp - 0x12], al
mov byte [ebp - 0xd], 0x44
mov byte [ebp - 8], cl
mov byte [ebp - 0x11], 0x55
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0xb], 0x76
shr esp, 0
mov esp, esp
mov ecx, ecx
jge 0x423886
jae 0x42387f
jno 0x423881
xchg ebx, ebx
jl 0x423886
call 0x45433796
in al, dx
or al, 0xff
add byte [ebp - 0x14], al
add byte [ebp - 0xf], al
add byte [ebp - 0xa], al
add byte [ebp - 0x13], al
add byte [ebp - 0xe], al
add byte [ebp - 9], al
add byte [ebp - 0x12], al
add byte [ebp - 0xd], al
add byte [ebp - 0x11], al
add byte [ebp - 0xc], al
add byte [ebp - 0x10], al
add byte [ebp - 0xb], al
add ebx, 0x639e
sub ebx, 0x639e
jp 0x4238ba
sub esp, 0
call 0x4238c2
add esp, 4
jns 0x4238d7
lea ecx, [ecx + 0x4a]
lea ecx, [ecx - 0x4a]
jns 0x4238cf
jbe 0x4238d1
jb 0x4238d3
js 0x4238d7
mov edi, 0xf234e8f4
invalid
call fcn.00422b10
test eax, eax
jne 0x4238f3
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052bfb9
mov esp, ebp
pop ebp
ret
add ecx, dword [esp]
sub ecx, dword [esp]
clc
jl 0x42390c
lea edi, [edi + 0x5c54]
lea edi, [edi - 0x5c54]
jge 0x42390c
lcall 0x5051, 0xec4d8db7
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.00423540
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x4238e0
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov byte [ebp - 8], al
and esp, 0xffffffff
not esi
not esi
xor edx, 0x2f30
xor edx, 0x2f30
jg 0x42394f
js 0x423942
jp 0x423944
xchg esi, ebx
xchg esi, ebx
mov ecx, ecx
jle 0x42394f
mov esp, 0xe8500433
push edx
wait
adc byte [eax], al
push eax
call sub.api_ms_win_crt_time_l1_1_0.dll__time64
push eax
call sub.api_ms_win_crt_utility_l1_1_0.dll_srand
add esp, 8
rol edi, 0
jl 0x42396b
lea esp, [esp]
js 0x423968
jge 0x42396b
mov edi, 0x1368d8e8
add byte [ecx + 0x5b9], bl
add bh, dh
stc
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
cdq
mov ecx, 5
idiv ecx
mov esi, edx
test esi, esi
jle 0x423998
mov edi, esi
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
cdq
mov ecx, 0x6f5
idiv ecx
mov dword [ebp - 0x18], edx
push dword [ebp - 0x18]
sub edi, 1
jne 0x423980
call dword [ebp - 0x1c]
test esi, esi
jle 0x4239a8
nop
pop dword [ebp - 0x18]
sub esi, 1
jne 0x4239a0
neg edi
neg edi
jne 0x4239ae
and edi, edi
jl 0x4239c2
pushf
jne 0x4239b6
lea esi, [esi]
cmc
popf
jne 0x4239bd
jns 0x4239bf
jge 0x4239c2
add eax, 0xc4c10074
add bh, dh
salc
je 0x4239c4
rol esp, 0
not esi
not esi
je 0x4239de
lea ecx, [ecx + 0x65f2]
lea ecx, [ecx - 0x65f2]
xchg esi, esi
jne 0x4239de
mov ecx, 0x7c5b53
push ebx
pop ebx
jl 0x4239e2
jl 0x4239ef
jnp 0x4239e6
jnp 0x4239e8
lea ecx, [ecx]
jb 0x4239ec
jge 0x4239ef
lcall 0x81, 0x49640d8b
mov ecx, dword [0x814964]
jnp 0x4239f7
xchg edx, esi
xchg edx, esi
add edi, dword [esp]
sub edi, dword [esp]
js 0x423a0a
lea edi, [edi]
jo 0x423a07
jns 0x423a0a
mov edi, 0x7cf800eb
sbb ah, byte [esi - 0x64]
jmp 0x423a0c
clc
jl 0x423a29
pushf
jne 0x423a13
xor esp, 0
popf
lea edx, [edx + 0x5e03]
lea edx, [edx - 0x5e03]
jns 0x423a26
jge 0x423a29
mov esp, 0x4192c181
add al, byte [ecx]
add ecx, 0x1024192
lea edx, [eax + 0x1024192]
xor ecx, edx
je 0x423a8a
xor ebx, dword [esp]
xor ebx, dword [esp]
ror esp, 0
and esp, 0xffffffff
jnp 0x423a4c
jmp 0x423a49
jp 0x423a4c
mov ebp, 0x54e8006a
lcall 0x67f5, 0xe8500010
adc eax, dword [eax]
push 0
call sub.api_ms_win_crt_time_l1_1_0.dll__time64
push eax
call sub.api_ms_win_crt_utility_l1_1_0.dll_srand
add esp, 8
nop
mov esp, esp
je 0x423a74
pushf
xor edx, edi
xor edx, edi
popf
xchg edi, esi
xchg edi, esi
lea edi, [edi]
jae 0x423a71
jne 0x423a74
mov ebp, 0x1367cfe8
add byte [edi + 0x5e], bl
call sub.api_ms_win_crt_utility_l1_1_0.dll_rand
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052bfb9
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov dword [0x814964], eax
pop ebx
call fcn.0052bfb9
mov esp, ebp
pop ebp
ret