Function at 0x422f60
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x88
mov edi, dword [esp + 0xa8]
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa0]
mov ecx, dword [eax + 4]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x422f90
mov ecx, eax
and ecx, 0x42
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + edx + 2], 0
lea edx, [edx + 2]
jne 0x422fb0
sar eax, 1
xor eax, 0x21
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0x1e
test eax, eax
jns 0x422fd5
mov eax, 0xffffffff
jmp 0x422fde
add ecx, edx
lea eax, [ecx*2 + 0x3c]
push eax
call fcn.00408ac0
add esp, 4
mov esi, eax
mov dword [esp + 0x48], 0xf7b096a
mov dword [esp + 0x4c], 0x3670d7b
mov dword [esp + 0x50], 0x7410176
mov dword [esp + 0x54], 0x1b680577
mov dword [esp + 0x58], 0x1f7b196c
mov dword [esp + 0x5c], 0x13661d94
mov dword [esp + 0x60], 0x17721149
mov dword [esp + 0x64], 0x2b1e1559
mov dword [esp + 0x68], 0x2f67291e
mov dword [esp + 0x6c], 0x236b2d18
mov dword [esp + 0x70], 0x276d216a
mov dword [esp + 0x74], 0x3b732512
mov dword [esp + 0x78], 0x3f52390d
mov dword [esp + 0x7c], 0x33563d45
mov dword [esp + 0x80], 0x37363156
mov word [esp + 0x84], 0
mov byte [esp + 0x86], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x82
xor cl, byte [esp + eax + 0x48]
add cl, 0x76
mov byte [esp + eax + 0x48], cl
inc eax
cmp eax, 0x3f
jne 0x423080
mov dword [esp], 0x299f2bf8
mov dword [esp + 4], 0x2d9f2f9c
mov dword [esp + 8], 0x3195339a
mov dword [esp + 0xc], 0x359d3799
mov dword [esp + 0x10], 0x399e3be8
mov dword [esp + 0x14], 0x3d943f93
mov dword [esp + 0x18], 0x1b9039b
mov dword [esp + 0x1c], 0x5b207ac
mov dword [esp + 0x20], 0x9b90bd8
mov dword [esp + 0x24], 0xdb00fb9
mov dword [esp + 0x28], 0x11b913ff
mov dword [esp + 0x2c], 0x15a217a8
mov dword [esp + 0x30], 0x19a81bbf
mov dword [esp + 0x34], 0x1db11fad
mov dword [esp + 0x38], 0xe150e3ad
mov dword [esp + 0x3c], 0xe50be70d
mov dword [esp + 0x40], 0xe9eaeb09
mov word [esp + 0x44], 0
mov eax, 0xc7
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0xc7]
lea ecx, [eax - 0x3979ad00]
or ecx, edx
and edx, eax
sub ecx, edx
mov edx, 0xe3
sub edx, ecx
and ecx, 1
or edx, 1
sub ecx, edx
mov byte [esp + eax - 0xc7], cl
inc eax
cmp eax, 0x10d
jne 0x423130
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax + 4]
movzx edx, word [ecx]
mov eax, esi
test dx, dx
je 0x423191
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x423180
mov word [eax], 0
movzx ecx, word [esp]
test cx, cx
je 0x4231c1
lea edx, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4231b0
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x4231f1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x4231e0
mov word [eax], 0
movzx ecx, word [esp + 0x48]
test cx, cx
je 0x423221
lea edx, [esp + 0x4a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423210
mov word [eax], 0
mov ebp, dword [edi]
mov eax, 0xfffffffe
nop
nop
nop
cmp word [ebp + eax + 2], 0
lea eax, [eax + 2]
jne 0x423230
mov ecx, dword [esp + 0xa4]
mov edx, dword [ecx]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x423250
mov edx, dword [esp + 0xa4]
mov edi, dword [edx + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x423270
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xb
test eax, eax
jns 0x423294
mov eax, 0xffffffff
jmp 0x42329d
add ecx, edx
lea eax, [ecx*2 + 0x16]
push eax
call fcn.00408ac0
add esp, 4
mov edi, eax
mov dword [esp], 0x37d739d3
mov dword [esp + 4], 0x33c635c0
mov dword [esp + 8], 0xcf4231cd
mov dword [esp + 0xc], 0xcbf9cd43
mov word [esp + 0x10], 0xc9c8
mov dword [esp + 0x12], 0
mov word [esp + 0x16], 0
mov eax, esp
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
and bl, 0xe0
add bl, cl
xor bl, 0xd0
add bl, 0x26
xor bl, byte [eax]
add bl, 0x32
mov byte [eax], bl
inc eax
add edx, 2
inc cl
cmp edx, 0x30
jne 0x4232f0
movzx ecx, word [esp]
mov eax, edi
test cx, cx
je 0x423331
lea edx, [esp + 2]
mov eax, edi
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423320
mov word [eax], 0
movzx ecx, word [ebp]
test cx, cx
je 0x423362
add ebp, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebp]
add ebp, 2
test cx, cx
jne 0x423350
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx]
movzx edx, word [ecx]
test dx, dx
je 0x423391
add ecx, 2
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x423380
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [esp + 0xa4]
mov ecx, dword [ecx + 8]
movzx edx, word [ecx]
test dx, dx
je 0x4233c1
add ecx, 2
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4233b0
mov word [eax], 0
mov dword [esp], 0x2322215a
mov byte [esp + 4], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x88
xor cl, byte [esp + eax]
add cl, 0x58
mov byte [esp + eax], cl
inc eax
cmp eax, 5
jne 0x4233e0
mov eax, esp
push 0
push 1
push 0
push eax
push esi
push edi
push dword [esp + 0xb4]
call fcn.004237f0
add esp, 0x1c
mov ebx, eax
jmp dword [0x44803c]