Function at 0x424c00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x8c
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [eax + 4]
mov eax, 0xfffffffe
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424c20
mov ecx, 0xfffffffe
cmp word [ebx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424c30
sar eax, 1
sar ecx, 1
lea edx, [eax + ecx]
add edx, 0x3f
test edx, edx
jns 0x424c50
mov eax, 0xffffffff
jmp 0x424c59
add eax, ecx
lea eax, [eax*2 + 0x7e]
push eax
call fcn.0040cc60
add esp, 4
mov dword [esp], eax
mov dword [esp + 0x4c], 0x59d15ba6
mov dword [esp + 0x50], 0x5da55fad
mov dword [esp + 0x54], 0x519753aa
mov dword [esp + 0x58], 0x55a457a1
mov dword [esp + 0x5c], 0x69916ba0
mov dword [esp + 0x60], 0x6d9a6fe0
mov dword [esp + 0x64], 0x618663b3
mov dword [esp + 0x68], 0x655267a3
mov dword [esp + 0x6c], 0x79b57b52
mov dword [esp + 0x70], 0x7db17f4c
mov dword [esp + 0x74], 0x71bb73b6
mov dword [esp + 0x78], 0x75b97746
mov dword [esp + 0x7c], 0x9e60bbf
mov dword [esp + 0x80], 0xdea0ff7
mov dword [esp + 0x84], 0x10203ea
mov word [esp + 0x88], 0
mov byte [esp + 0x8a], 0
mov eax, 0xf
mov ecx, 0xf0
nop
mov edi, ecx
and edi, 0x9b
mov edx, eax
and edx, 0x64
or edx, edi
xor dl, byte [esp + eax + 0x3d]
xor dl, 0x9b
add dl, 0xb5
mov byte [esp + eax + 0x3d], dl
inc eax
dec ecx
cmp eax, 0x4e
jne 0x424d00
mov dword [esp + 4], 0xc947cba8
mov dword [esp + 8], 0xc557c744
mov dword [esp + 0xc], 0xc15dc34a
mov dword [esp + 0x10], 0xfd65ff59
mov dword [esp + 0x14], 0xf966fb98
mov dword [esp + 0x18], 0xf56cf763
mov dword [esp + 0x1c], 0xf179f36b
mov dword [esp + 0x20], 0xed62ef64
mov dword [esp + 0x24], 0xe979eb88
mov dword [esp + 0x28], 0xe560e779
mov dword [esp + 0x2c], 0xe179e3b7
mov dword [esp + 0x30], 0x1d921f68
mov dword [esp + 0x34], 0x19881b87
mov dword [esp + 0x38], 0x15811795
mov dword [esp + 0x3c], 0x11801385
mov dword [esp + 0x40], 0xd5b0f45
mov dword [esp + 0x44], 0x90a0b59
mov byte [esp + 0x48], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + eax + 4]
lea ebp, [eax + 0x4dedce53]
mov edx, 0x321231ac
sub edx, eax
mov esi, edx
and esi, 0x320011c2
mov ecx, ebp
and ecx, 0xc5863d
or ecx, esi
xor ecx, 0x80d7a63d
or ecx, edi
and ebp, 0xf7
and edx, 8
or edx, ebp
xor edx, 0xf7
and edx, edi
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0xcb
and ecx, 0x34
sub ecx, edx
add cl, 0x2c
mov byte [esp + eax + 4], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 0x45
jb 0x424dc0
mov ebp, dword [esp + 0xa8]
mov ecx, dword [ebp + 4]
movzx edx, word [ecx]
mov esi, dword [esp]
mov eax, esi
test dx, dx
je 0x424e61
add ecx, 2
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x424e50
mov word [eax], 0
movzx ecx, word [esp + 4]
test cx, cx
je 0x424e91
lea edx, [esp + 6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424e80
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x424ec1
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x424eb0
mov word [eax], 0
movzx ecx, word [esp + 0x4c]
test cx, cx
je 0x424ef1
lea edx, [esp + 0x4e]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424ee0
mov word [eax], 0
mov eax, dword [esp + 0xac]
mov ebx, dword [eax]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [ebx + eax + 2], 0
lea eax, [eax + 2]
jne 0x424f10
mov edx, dword [ebp]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x424f30
mov edi, dword [ebp + 8]
mov edx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edi + edx + 2], 0
lea edx, [edx + 2]
jne 0x424f50
sar eax, 1
sar ecx, 1
sar edx, 1
add ecx, eax
lea eax, [edx + ecx]
add eax, 0xb
test eax, eax
jns 0x424f74
mov eax, 0xffffffff
jmp 0x424f7d
add ecx, edx
lea eax, [ecx*2 + 0x16]
push eax
call fcn.0040cc60
add esp, 4
mov edi, eax
mov dword [esp + 4], 0x315d3f55
mov dword [esp + 8], 0x354e334c
mov dword [esp + 0xc], 0x49423753
mov dword [esp + 0x10], 0x4d7b4b3d
mov word [esp + 0x14], 0x4f4c
mov dword [esp + 0x16], 0
mov word [esp + 0x1a], 0
mov eax, 0xb5
mov ecx, 0x4a
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0xb1]
mov edx, ecx
xor edx, eax
and edx, esi
xor edx, eax
add dl, 0x77
mov byte [esp + eax - 0xb1], dl
inc eax
dec ecx
cmp eax, 0xcd
jne 0x424fd0
movzx ecx, word [esp + 4]
mov eax, edi
test cx, cx
je 0x425021
lea edx, [esp + 6]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x425010
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x425051
add ebx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [ebx]
add ebx, 2
test cx, cx
jne 0x425040
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp]
movzx edx, word [ecx]
test dx, dx
je 0x425081
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x425070
mov word [eax], 0x5f
add eax, 2
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
test dx, dx
je 0x4250b1
add ecx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], dx
add eax, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4250a0
mov word [eax], 0
mov dword [esp + 4], 0x131211ea
mov word [esp + 8], 0
mov eax, 0x288615fc
mov ebp, 3
nop
movzx ecx, byte [esp + eax - 0x288615f8]
mov edx, ebp
xor edx, eax
and edx, ecx
xor edx, eax
mov ebx, edx
not ebx
and ebx, 1
mov esi, 0xca9e6dec
sub esi, edx
add edx, 0x13
mov ecx, esi
not ecx
and esi, 0xa3
and edx, 0x5c
or edx, esi
and ecx, 1
or ecx, edx
xor ecx, 0xa2
add ecx, ebx
mov byte [esp + eax - 0x288615f8], cl
inc eax
dec ebp
cmp eax, 0x28861602
jne 0x4250d0
lea eax, [esp + 4]
push 0
push 1
push 0
push eax
mov esi, dword [esp + 0x10]
push esi
push edi
push dword [esp + 0xb8]
call fcn.00425430
add esp, 0x1c
mov ebx, eax
jmp dword [0x44ca40]