Function at 0x423330
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5fd146
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x118
push ebx
push esi
push edi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], 0
mov byte [esp + 0x18], 0
call fcn.004215a0
lea ecx, [esp + 0xfc]
mov dword [esp + 0x12c], 0
call fcn.0049d880
lea ecx, [esp + 0x10]
call fcn.00404ef0
mov ecx, dword [ebp + 8]
mov byte [esp + 0x12c], 2
call fcn.00419240
mov dword [esp + 0x14], eax
test eax, eax
je 0x423406
mov edi, 0x651e48
jmp 0x4233b0
lea eax, [esp + 0x14]
push eax
call fcn.00419250
lea ecx, [esp + 0x1c]
push ecx
mov ecx, eax
call fcn.00419830
mov byte [esp + 0x12c], 3
mov ecx, 0x658a40
mov esi, dword [esp + 0x14]
test esi, esi
cmove ecx, edi
push ecx
push dword [eax]
lea eax, [esp + 0x18]
push 0x652538
push eax
call fcn.00409980
add esp, 0x10
mov byte [esp + 0x12c], 2
lea ecx, [esp + 0x1c]
call fcn.00404e10
test esi, esi
jne 0x4233b0
lea ecx, [esp + 0x20]
call fcn.00404ef0
push ecx
push 0x100000
lea ecx, [esp + 0x28]
mov byte [esp + 0x134], 4
call fcn.00404c30
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00404880
mov edx, esi
mov ecx, eax
call fcn.00421c30
add esp, 4
lea ecx, [esp + 0x20]
push 0xffffffffffffffff
call fcn.00409390
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x14]
call fcn.00409ad0
push 0x6591a0
push 0x6591a4
lea ecx, [esp + 0x18]
call fcn.004095d0
push 0x6591c4
push ecx
lea ecx, [esp + 0x18]
call fcn.00424130
lea ecx, [esp + 0x2c]
call fcn.00404880
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00424130
push str.uid
push ecx
lea ecx, [esp + 0x18]
call fcn.00424130
xor eax, eax
mov dword [esp + 0x72], 0x76006f
mov ebx, 0x63
mov dword [esp + 0x64], 0x6f0073
mov edi, 0x72
mov dword [esp + 0x68], 0x740066
lea ecx, [esp + 0xe4]
mov dword [esp + 0x80], 0x630061
mov dword [esp + 0x84], 0x650063
mov dword [esp + 0x7a], 0x70002e
mov dword [esp + 0x8e], 0x6d006f
mov dword [esp + 0x6e], 0x6d0065
mov word [esp + 0x6c], di
mov dword [esp + 0x76], 0x6c0061
mov word [esp + 0x92], ax
mov dword [esp + 0x88], 0x2e006c
mov word [esp + 0x7e], bx
mov word [esp + 0x8c], bx
mov dword [esp + 0x58], 0x730065
mov dword [esp + 0x48], 0x70002f
mov dword [esp + 0x5c], 0x66006f
mov dword [esp + 0x60], 0x74
mov dword [esp + 0x4c], 0x720075
mov dword [esp + 0x54], 0x730061
mov dword [esp + 0x50], 0x680063
call fcn.00408180
lea ecx, [esp + 0x14]
call fcn.00404ef0
mov byte [esp + 0x12c], 6
xor eax, eax
mov edx, 0x73
mov word [esp + 0x46], ax
mov dword [esp + 0x42], 0x730025
lea eax, [esp + 0x48]
mov dword [esp + 0x34], 0x700074
mov dword [esp + 0x3c], 0x25002f
mov dword [esp + 0x38], 0x2f003a
mov word [esp + 0x40], dx
mov dword [esp + 0x30], 0x740068
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00404860
add esp, 0x10
lea ecx, [esp + 0x10]
call fcn.00404880
push eax
lea ecx, [esp + 0xb8]
call fcn.00407630
lea ecx, [esp + 0x14]
mov byte [esp + 0x12c], 7
call fcn.00404880
push eax
lea ecx, [esp + 0x98]
call fcn.00407630
lea eax, [esp + 0xe4]
mov byte [esp + 0x12c], 8
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x108]
call fcn.0049db70
lea ecx, [esp + 0x94]
mov bl, al
call fcn.00406f10
lea ecx, [esp + 0xb4]
mov byte [esp + 0x12c], 6
call fcn.00406f10
test bl, bl
je 0x42383b
lea ecx, [esp + 0xe4]
call fcn.004108f0
mov ecx, eax
call fcn.0042e440
mov esi, eax
test esi, esi
je 0x423824
lea ecx, [esp + 0x24]
call fcn.004242d0
mov ecx, esi
call fcn.0042f8c0
test al, al
je 0x423809
lea ecx, [esp + 0x94]
call fcn.00408180
mov ecx, esi
mov byte [esp + 0x12c], 0xa
call fcn.0042f8f0
push eax
lea ecx, [esp + 0x28]
call fcn.004242e0
push str.status
lea ecx, [esp + 0xd0]
call fcn.00407630
lea eax, [esp + 0xb0]
mov byte [esp + 0x12c], 0xb
mov ebx, 1
lea ecx, [esp + 0x24]
push eax
mov dword [esp + 0x20], ebx
call fcn.0041d230
push eax
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x30]
call fcn.0041d250
mov ecx, eax
call fcn.0041d510
test al, al
je 0x423749
push str.status
lea ecx, [esp + 0xb8]
call fcn.00407630
lea eax, [esp + 0xb4]
mov dword [esp + 0x12c], 0xc
mov ebx, 3
lea ecx, [esp + 0x24]
push eax
mov dword [esp + 0x20], ebx
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8a0
mov byte [esp + 0xf], 1
test al, al
jne 0x42374e
mov byte [esp + 0xf], 0
test bl, 2
je 0x423762
lea ecx, [esp + 0xb4]
and ebx, 0xfffffffd
call fcn.00406f10
mov dword [esp + 0x12c], 0xa
test bl, 1
je 0x42377e
lea ecx, [esp + 0xcc]
call fcn.00406f10
cmp byte [esp + 0xf], 0
je 0x4237d7
push str.status
lea ecx, [esp + 0xd0]
call fcn.00407630
lea eax, [esp + 0xcc]
mov byte [esp + 0x12c], 0xd
push eax
lea ecx, [esp + 0x28]
call fcn.0041d190
mov ecx, dword [eax]
call fcn.0042f8d0
push eax
lea ecx, [esp + 0x98]
call fcn.00407ec0
lea ecx, [esp + 0xcc]
mov byte [esp + 0x12c], 0xa
call fcn.00406f10
mov edx, str.success
lea ecx, [esp + 0x94]
call fcn.0040fda0
mov ecx, dword [esp + 0x18]
test al, al
movzx ecx, cl
mov edx, 1
cmovne ecx, edx
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x94]
call fcn.00406f10
lea ecx, [esp + 0x24]
mov byte [esp + 0x12c], 6
call fcn.0041cea0
mov ebx, dword [esp + 0x18]
test bl, bl
jne 0x423850
jmp 0x423828
mov ebx, dword [esp + 0x18]
push 0
push 0x651e48
push str.pppdf
call fcn.00421710
jmp 0x423850
push 0
push 0x651e48
push str.pppdf
call fcn.00421710
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x14]
call fcn.00404e10
lea ecx, [esp + 0xe4]
call fcn.00406f10
lea ecx, [esp + 0x20]
call fcn.00404e10
lea ecx, [esp + 0x10]
call fcn.00404e10
lea ecx, [esp + 0xfc]
mov byte [esp + 0x12c], 0
call fcn.0049d950
lea ecx, [esp + 0x2c]
call fcn.00404e10
mov ecx, dword [esp + 0x124]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4