Function at 0x442e81
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4e4
push ebx
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, ecx
cmp dword [edi + 0x14], 0
je 0x442ea5
mov eax, 0x40000
jmp 0x4435b5
cmp byte [edi + 0x2c], 0
je 0x442eb5
mov eax, 0x50000
jmp 0x4435b5
xor eax, eax
push 0xc
mov dword [esp + 0x58], eax
pop ecx
cmp dword [edi], eax
je 0x442ecc
cmp esi, 4
cmovne eax, ecx
mov dword [esp + 0x54], eax
push dword [ebp + 8]
lea eax, [esp + 0x3ec]
push eax
call fcn.004486c0
mov al, byte [esp + 0x3f0]
pop ecx
pop ecx
test al, al
je 0x4435b0
lea ecx, [esp + 0x3e8]
cmp al, 0x5c
jne 0x442efb
mov byte [ecx], 0x2f
inc ecx
mov al, byte [ecx]
test al, al
jne 0x442ef4
push 8
pop ebx
cmp esi, 4
jne 0x442f29
lea eax, [esp + 0x3e8]
push eax
call fcn.004496c0
pop ecx
cmp byte [esp + eax + 0x3e7], 0x2f
je 0x442f29
mov byte [esp + 0xf], 1
jmp 0x442f4c
mov dword [esp + 0x4c], ebx
mov byte [esp + 0xf], 0
cmp esi, 4
je 0x442f4c
lea ecx, [esp + 0x3e8]
mov byte [esp + 0xf], 0
call fcn.0044126a
test al, al
je 0x442f52
xor ebx, ebx
mov dword [esp + 0x4c], ebx
cmp esi, 2
jne 0x442f63
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00442370
jmp 0x442f9b
cmp esi, 1
jne 0x442f77
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
call fcn.0044250c
jmp 0x442f9b
cmp esi, 3
jne 0x442f8b
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
call fcn.004427fe
jmp 0x442f9b
cmp esi, 4
jne 0x4435b0
mov ecx, edi
call fcn.004429c3
test eax, eax
jne 0x4435b5
and dword [esp + 0x3e4], eax
lea eax, [esp + 0xc0]
push 0x406fc4
push eax
call fcn.004486c0
lea eax, [esp + 0x3f0]
push eax
lea eax, [esp + 0x1dc]
push eax
call fcn.004486c0
lea eax, [esp + 0x1e0]
push eax
call fcn.004496c0
add esp, 0x14
mov dword [esp + 0xa0], eax
cmp byte [esp + 0xf], 0
je 0x44300a
lea eax, [esp + 0x1d0]
push 0x407018
push eax
call fcn.004486d0
inc dword [esp + 0xa8]
pop ecx
pop ecx
lea eax, [esp + 0x2d4]
push 0x406fc4
push eax
call fcn.004486c0
xor eax, eax
mov dword [esp + 0x3e0], 1
pop ecx
pop ecx
mov word [esp + 0xb2], ax
xor edx, edx
mov eax, 0xb17
mov dword [esp + 0x1cc], edx
push 0x14
mov word [esp + 0x8c], ax
pop eax
mov word [esp + 0x8a], ax
mov eax, dword [edi + 0x68]
push 8
mov dword [esp + 0x94], eax
pop eax
mov dword [esp + 0xac], edx
mov dword [esp + 0x3e0], edx
mov dword [esp + 0x94], edx
mov word [esp + 0x8c], ax
cmp dword [edi], edx
je 0x443092
cmp esi, 4
je 0x443092
push 9
pop eax
mov word [esp + 0x8c], ax
mov word [esp + 0xb4], ax
movzx eax, bx
mov dword [esp + 0x58], eax
mov word [esp + 0x8e], ax
test ebx, ebx
jne 0x4430c3
mov ecx, dword [edi + 0x70]
test ecx, ecx
js 0x4430c3
mov eax, dword [esp + 0x54]
add eax, ecx
mov dword [esp + 0x98], eax
jmp 0x4430cd
mov ecx, dword [edi + 0x70]
mov dword [esp + 0x98], edx
xor eax, eax
mov ebx, dword [edi + 0x58]
mov word [esp + 0xb0], ax
mov eax, dword [edi + 0x4c]
mov dword [esp + 0xb8], eax
mov eax, dword [edi + 0x18]
add eax, dword [edi + 0x10]
mov edx, dword [edi + 0x5c]
mov dword [esp + 0xbc], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x1c4], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x1c8], eax
mov al, byte [edi + 0x58]
mov byte [esp + 0x3d], al
mov eax, edx
mov dword [esp + 0x9c], ecx
mov ecx, ebx
shrd ecx, eax, 8
mov eax, edx
mov dword [esp + 0xa4], 0x11
mov byte [esp + 0x3e], cl
mov ecx, ebx
shrd ecx, eax, 0x10
mov al, byte [edi + 0x50]
shrd ebx, edx, 0x18
mov edx, dword [edi + 0x54]
mov byte [esp + 0x41], al
mov eax, edx
mov byte [esp + 0x3f], cl
mov byte [esp + 0x40], bl
mov ebx, dword [edi + 0x50]
mov ecx, ebx
shrd ecx, eax, 8
mov eax, edx
mov dword [esp + 0xa8], 9
mov byte [esp + 0x42], cl
mov ecx, ebx
shrd ecx, eax, 0x10
mov al, byte [edi + 0x60]
shrd ebx, edx, 0x18
mov edx, dword [edi + 0x64]
mov byte [esp + 0x45], al
mov eax, edx
mov byte [esp + 0x43], cl
mov byte [esp + 0x44], bl
mov ebx, dword [edi + 0x60]
mov ecx, ebx
shrd ecx, eax, 8
mov eax, edx
mov dword [esp + 0x38], 0xd5455
mov byte [esp + 0x46], cl
mov ecx, ebx
shrd ecx, eax, 0x10
push 9
lea eax, [esp + 0x3c]
mov byte [esp + 0x40], 7
push eax
shrd ebx, edx, 0x18
lea eax, [esp + 0x84]
mov byte [esp + 0x4f], cl
push eax
mov byte [esp + 0x54], bl
call fcn.004454d0
mov eax, dword [esp + 0x1d4]
lea ecx, [esp + 0x94]
add esp, 0xc
mov byte [eax + 2], 5
push edi
call fcn.00440891
test eax, eax
je 0x4431f9
mov ecx, edi
call fcn.00442c59
mov eax, 0x400
jmp 0x4435b5
mov eax, dword [esp + 0xa0]
xor edx, edx
add eax, 0x1e
add eax, dword [esp + 0xa4]
add dword [edi + 0x18], eax
cmp dword [edi + 0x14], edx
je 0x443223
mov ecx, edi
call fcn.00442c59
mov eax, dword [edi + 0x14]
jmp 0x4435b5
mov dword [edi + 0x30], 0x12345678
mov dword [edi + 0x34], 0x23456789
mov dword [edi + 0x38], 0x34567890
mov ebx, dword [edi]
test ebx, ebx
je 0x443253
mov dl, byte [ebx]
test dl, dl
je 0x443251
lea ecx, [edi + 0x30]
call fcn.00441206
add ebx, 1
jne 0x44323e
xor edx, edx
cmp byte [0x45b616], 0
jne 0x44336a
mov cl, 0x22
mov dword [esp + 0x1c], 0x56476522
mov dword [esp + 0x20], 0x49414b76
mov eax, edx
mov dword [esp + 0x24], 0x4c574d61
mov word [esp + 0x28], 0x56
xor byte [esp + eax + 0x1d], cl
inc eax
cmp eax, 0xc
jae 0x443293
mov cl, byte [esp + 0x1c]
jmp 0x443283
mov byte [esp + 0x29], dl
mov cl, 0x7b
mov dword [esp + 0x2a], 0x91e307b
mov eax, edx
mov dword [esp + 0x2e], 0x48171e15
mov dword [esp + 0x32], 0x171f5549
mov word [esp + 0x36], 0x17
xor byte [esp + eax + 0x2b], cl
inc eax
cmp eax, 0xc
jae 0x4432ca
mov cl, byte [esp + 0x2a]
jmp 0x4432ba
movaps xmm0, xmmword [0x4082f0]
mov ecx, edx
mov byte [esp + 0x37], dl
movups xmmword [esp + 0x5e], xmm0
mov word [esp + 0x6e], 0x7f
movsx eax, byte [esp + 0x5e]
and eax, 0x8000000f
jns 0x4432f4
dec eax
or eax, 0xfffffff0
inc eax
sub byte [esp + ecx + 0x5f], al
inc ecx
cmp ecx, 0x10
jb 0x4432e3
mov byte [esp + 0x6f], dl
mov al, 4
mov dword [esp + 0x10], 0x69775904
mov ecx, edx
mov dword [esp + 0x14], 0x32363776
mov dword [esp + 0x18], 0x707068
movsx eax, al
and eax, 0x8000000f
jns 0x44332d
dec eax
or eax, 0xfffffff0
inc eax
sub byte [esp + ecx + 0x11], al
inc ecx
cmp ecx, 0xa
jae 0x44333d
mov al, byte [esp + 0x10]
jmp 0x44331e
mov byte [esp + 0x1b], dl
lea ecx, [esp + 0x11]
lea edx, [esp + 0x5f]
call fcn.0040c457
call eax
lea edx, [esp + 0x1d]
mov esi, eax
lea ecx, [esp + 0x2b]
call fcn.0040c457
call eax
xor esi, eax
push esi
call fcn.004486a5
pop ecx
xor ebx, ebx
call fcn.00448684
sar eax, 7
mov byte [esp + ebx + 0x70], al
inc ebx
cmp ebx, 0xc
jl 0x44336c
mov eax, dword [esp + 0x90]
shr eax, 8
xor ebx, ebx
mov byte [esp + 0x7b], al
mov dl, byte [esp + ebx + 0x70]
lea ecx, [edi + 0x30]
call fcn.00441249
mov byte [esp + ebx + 0x70], al
inc ebx
cmp ebx, 0xc
jl 0x44338e
mov eax, dword [edi]
mov esi, dword [ebp + 0x14]
test eax, eax
je 0x4433c6
cmp esi, 4
je 0x4433c6
push 0xc
lea eax, [esp + 0x74]
mov ecx, edi
push eax
call fcn.00441f93
add dword [edi + 0x18], 0xc
mov eax, dword [edi]
and dword [esp + 0x50], 0
test eax, eax
je 0x4433d9
cmp esi, 4
je 0x4433d9
xor eax, eax
inc eax
jmp 0x4433db
xor al, al
mov ebx, dword [esp + 0x4c]
mov byte [edi + 0x2d], al
cmp esi, 4
je 0x443410
push 8
pop eax
cmp ebx, eax
jne 0x4433ff
lea eax, [esp + 0x88]
mov ecx, edi
push eax
call fcn.00442d2e
jmp 0x44340a
test ebx, ebx
jne 0x443417
mov ecx, edi
call fcn.00442e36
mov dword [esp + 0x50], eax
jmp 0x443417
and dword [edi + 0x90], 0
mov ecx, edi
mov byte [edi + 0x2d], 0
call fcn.00442c59
mov ecx, dword [edi + 0x90]
add dword [edi + 0x18], ecx
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x4435b5
cmp dword [esp + 0x50], eax
jne 0x4431ef
add ecx, dword [esp + 0x54]
cmp dword [esp + 0x98], ecx
mov eax, dword [edi + 0x78]
sete dl
mov dword [esp + 0x94], eax
cmp byte [edi + 0x1c], 0
mov eax, dword [edi + 0x70]
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], eax
je 0x4434ec
cmp dword [edi], 0
je 0x443479
cmp esi, 4
jne 0x4434ec
mov eax, dword [esp + 0x58]
mov word [esp + 0x8e], ax
mov ax, word [esp + 0x8c]
test al, 1
jne 0x4434a1
mov ecx, 0xfff7
and ax, cx
mov word [esp + 0x8c], ax
mov word [esp + 0xb4], ax
mov ecx, edi
mov eax, dword [esp + 0xbc]
sub eax, dword [edi + 0x10]
push eax
call fcn.004420e8
test al, al
je 0x4434e2
push edi
lea ecx, [esp + 0x8c]
call fcn.00440891
test eax, eax
jne 0x4431ef
push dword [edi + 0x18]
mov ecx, edi
call fcn.004420e8
test al, al
jne 0x443533
mov eax, 0x2000000
jmp 0x4435b5
mov eax, dword [esp + 0x58]
cmp word [esp + 0x8e], ax
jne 0x4435a9
test ebx, ebx
jne 0x44350a
test dl, dl
je 0x4435a9
push edi
lea ecx, [esp + 0x8c]
call fcn.00440ae6
test eax, eax
jne 0x4431ef
mov ax, word [esp + 0xb4]
add dword [edi + 0x18], 0x10
mov word [esp + 0x8c], ax
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x4435b5
push dword [esp + 0xa8]
call fcn.004448c3
pop ecx
push dword [esp + 0xa8]
mov esi, eax
push dword [esp + 0x1cc]
push esi
call fcn.004454d0
add esp, 0xc
mov dword [esp + 0x1c8], esi
mov ebx, 0x360
push ebx
call fcn.0044485d
pop ecx
mov esi, eax
lea eax, [esp + 0x88]
push ebx
push eax
push esi
call fcn.004454d0
mov ecx, dword [edi + 0x44]
add esp, 0xc
test ecx, ecx
jne 0x443595
mov dword [edi + 0x44], esi
jmp 0x4435a5
mov ecx, eax
mov eax, dword [ecx + 0x35c]
test eax, eax
jne 0x443593
mov dword [ecx + 0x35c], esi
xor eax, eax
jmp 0x4435b5
mov eax, 0x4000000
jmp 0x4435b5
mov eax, 0x10000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10