Function at 0x422260
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x54
mov ebx, dword [esp + 0x6c]
mov eax, dword [ebx + 4]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [eax + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x422280
mov eax, dword [esp + 0x70]
mov edi, dword [eax + 4]
mov esi, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + esi + 2], 0
lea esi, [esi + 2]
jne 0x4222a0
sar ecx, 1
sar esi, 1
lea ebp, [ecx + esi]
lea eax, [ecx + esi]
add eax, 0x1b
test eax, eax
mov dword [esp + 0x50], ecx
jns 0x4222c7
mov eax, 0xffffffff
jmp 0x4222ce
lea eax, [ebp*2 + 0x36]
push eax
call fcn.0040cb00
add esp, 4
mov dword [esp + 0x48], eax
mov dword [esp + 0xc], 0x3762395c
mov dword [esp + 0x10], 0x334d3547
mov dword [esp + 0x14], 0x4f3a3151
mov dword [esp + 0x18], 0x4b174d6c
mov dword [esp + 0x1c], 0x47ca49c0
mov dword [esp + 0x20], 0x43304539
mov dword [esp + 0x24], 0x5f2741cf
mov dword [esp + 0x28], 0x5b285d2f
mov dword [esp + 0x2c], 0x57395978
mov dword [esp + 0x30], 0x53de5529
mov dword [esp + 0x34], 0x6f1751dc
mov dword [esp + 0x38], 0x6b116d1e
mov dword [esp + 0x3c], 0x670269e7
mov word [esp + 0x40], 0x6564
mov dword [esp + 0x42], 0
mov byte [esp + 0x46], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x3a
ja 0x422396
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0xc]
push dword [esp]
push eax
call fcn.004241a0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x3b
jb 0x422370
mov ecx, dword [ebx + 4]
movzx edx, word [ecx]
mov eax, dword [esp + 0x48]
test dx, dx
je 0x4223c1
add ecx, 2
mov eax, dword [esp + 0x48]
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4223b0
mov word [eax], 0
movzx ecx, word [esp + 0xc]
test cx, cx
je 0x4223f1
lea edx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4223e0
mov word [eax], 0
movzx ecx, word [edi]
test cx, cx
mov dword [esp + 0x4c], ebp
je 0x422421
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edi]
add edi, 2
test cx, cx
jne 0x422410
mov word [eax], 0
mov ebp, dword [ebx]
mov ecx, 0xfffffffe
nop
nop
nop
cmp word [ebp + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x422430
sar ecx, 1
mov edx, dword [ebx + 8]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + eax + 2], 0
lea eax, [eax + 2]
jne 0x422450
inc ecx
sar eax, 1
mov edx, eax
and edx, ecx
xor eax, ecx
add eax, 0xc
mov ecx, dword [esp + 0x70]
mov edi, dword [ecx]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x422480
lea edx, [eax + edx*2]
sar ecx, 1
mov eax, ecx
and eax, edx
xor ecx, edx
lea edx, [ecx + eax*2]
add edx, 6
test edx, edx
jns 0x4224a7
mov eax, 0xffffffff
jmp 0x4224b1
lea eax, [ecx + eax*2]
lea eax, [eax*2 + 0xc]
push eax
call fcn.0040cb00
add esp, 4
mov ebx, eax
movzx eax, word [ebp]
mov dword [esp + 8], ebx
test ax, ax
je 0x4224e2
add ebp, 2
mov ebx, dword [esp + 8]
mov word [ebx], ax
add ebx, 2
movzx eax, word [ebp]
add ebp, 2
test ax, ax
jne 0x4224d0
mov word [ebx], 0x2f
mov dword [esp + 0xc], 0x63a761bf
mov dword [esp + 0x10], 0x67f265ec
mov dword [esp + 0x14], 0x5bc459fd
mov dword [esp + 0x18], 0x5fc75dcf
mov dword [esp + 0x1c], 0x53cc51cf
mov dword [esp + 0x20], 0x578955c7
mov word [esp + 0x24], 0x4948
mov dword [esp + 0x26], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x1d
ja 0x422566
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0xc]
push dword [esp]
push eax
call fcn.00424210
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x1e
jb 0x422540
add ebx, 2
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + 8]
movzx ecx, word [eax]
test cx, cx
mov ebp, dword [esp + 0x68]
je 0x422591
add eax, 2
nop
mov word [ebx], cx
add ebx, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x422580
mov word [ebx], 0
movzx eax, word [esp + 0xc]
test ax, ax
je 0x4225c1
lea ecx, [esp + 0xe]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], ax
add ebx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4225b0
mov word [ebx], 0
movzx eax, word [edi]
test ax, ax
je 0x4225f1
add edi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ebx], ax
add ebx, 2
movzx eax, word [edi]
add edi, 2
test ax, ax
jne 0x4225e0
mov word [ebx], 0
mov dword [esp + 0xc], 0xb9babbda
mov byte [esp + 0x10], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 4
ja 0x422646
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 0xc]
push dword [esp]
push eax
call fcn.00424290
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 0xc], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 5
jb 0x422620
lea eax, [esp + 0xc]
push 0
push 0
push 0
push 0xc00000
push eax
mov edi, dword [esp + 0x5c]
push edi
push dword [esp + 0x20]
push ebp
call fcn.00425f70
add esp, 0x20
mov byte [esp + 7], al
jmp dword [0x4512a0]