Function at 0xe21c15
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
mov eax, dword [0x493260]
xor eax, esp
mov dword [esp + 0xac], eax
push ebp
mov ebp, dword [esp + 0xbc]
push esi
mov esi, dword [esp + 0xbc]
mov dword [esp + 8], ebp
test esi, esi
je 0xe221d7
test ebp, ebp
je 0xe221d7
mov al, byte [esi + 0x130]
push ebx
push edi
cmp al, 8
jae 0xe21cca
movzx ebx, al
mov edi, 8
sub edi, ebx
push edi
lea eax, [ebx + ebp + 0x20]
push eax
push esi
mov dword [esi + 0x278], 0x11
call fcn.00e29d95
push edi
add ebp, 0x20
push ebx
push ebp
mov byte [esi + 0x130], 8
call fcn.00e29085
add esp, 0x18
test eax, eax
je 0xe21cbe
cmp ebx, 4
jae 0xe21cb0
add edi, 0xfffffffc
push edi
push ebx
push ebp
call fcn.00e29085
add esp, 0xc
test eax, eax
je 0xe21cb0
push 0x479914
jmp 0xe21cb5
push 0x4798ec
push esi
call fcn.00e28f25
add esp, 8
cmp ebx, 3
jae 0xe21cca
or dword [esi + 0x6c], 0x1000
mov bl, 0x54
jmp 0xe21cd5
mov byte [esp + 0x2c], 0x49
mov byte [esp + 0x2d], 0x48
mov byte [esp + 0x2e], 0x44
mov byte [esp + 0x2f], 0x52
mov byte [esp + 0x8c], 0x49
mov byte [esp + 0x8d], 0x44
mov byte [esp + 0x8e], 0x41
mov byte [esp + 0x8f], bl
mov byte [esp + 0xac], 0x49
mov byte [esp + 0xad], 0x45
mov byte [esp + 0xae], 0x4e
mov byte [esp + 0xaf], 0x44
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], 0x4c
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], 0x45
mov byte [esp + 0x3c], 0x62
mov byte [esp + 0x3d], 0x4b
mov byte [esp + 0x3e], 0x47
mov byte [esp + 0x3f], 0x44
mov byte [esp + 0x7c], 0x63
mov byte [esp + 0x7d], 0x48
mov byte [esp + 0x7e], 0x52
mov byte [esp + 0x7f], 0x4d
mov byte [esp + 0x4c], 0x67
mov byte [esp + 0x4d], 0x41
mov byte [esp + 0x4e], 0x4d
mov byte [esp + 0x4f], 0x41
mov byte [esp + 0x9c], 0x68
mov byte [esp + 0x9d], 0x49
mov byte [esp + 0x9e], 0x53
mov byte [esp + 0x9f], bl
mov byte [esp + 0x54], 0x69
mov byte [esp + 0x55], 0x43
mov byte [esp + 0x56], 0x43
mov byte [esp + 0x57], 0x50
mov byte [esp + 0xb4], 0x69
mov byte [esp + 0xb5], bl
mov byte [esp + 0xb6], 0x58
mov byte [esp + 0xb7], 0x74
mov byte [esp + 0x5c], 0x6f
mov byte [esp + 0x5d], 0x46
mov byte [esp + 0x5e], 0x46
mov byte [esp + 0x5f], 0x73
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0x43
mov byte [esp + 0x1e], 0x41
mov byte [esp + 0x1f], 0x4c
mov byte [esp + 0x24], 0x70
mov byte [esp + 0x25], 0x48
mov byte [esp + 0x26], 0x59
mov byte [esp + 0x27], 0x73
mov byte [esp + 0x34], 0x73
mov byte [esp + 0x35], 0x42
mov byte [esp + 0x36], 0x49
mov byte [esp + 0x37], bl
mov byte [esp + 0x6c], 0x73
mov byte [esp + 0x6d], 0x43
mov byte [esp + 0x6e], 0x41
mov byte [esp + 0x6f], 0x4c
mov byte [esp + 0x64], 0x73
mov byte [esp + 0x65], 0x50
mov byte [esp + 0x66], 0x4c
mov byte [esp + 0x67], bl
mov byte [esp + 0x44], 0x73
mov byte [esp + 0x45], 0x52
mov byte [esp + 0x46], 0x47
mov byte [esp + 0x47], 0x42
mov byte [esp + 0x74], 0x74
mov byte [esp + 0x75], 0x45
mov byte [esp + 0x76], 0x58
mov byte [esp + 0x77], 0x74
mov byte [esp + 0x84], 0x74
mov byte [esp + 0x85], 0x49
mov byte [esp + 0x86], 0x4d
mov byte [esp + 0x87], 0x45
mov byte [esp + 0x94], 0x74
mov byte [esp + 0x95], 0x52
mov byte [esp + 0x96], 0x4e
mov byte [esp + 0x97], 0x53
mov byte [esp + 0xa4], 0x7a
push esi
mov byte [esp + 0xa9], bl
mov byte [esp + 0xaa], 0x58
mov byte [esp + 0xab], 0x74
call fcn.00e2ce95
mov ebp, dword [esp + 0x90]
lea ecx, [esi + 0x120]
add esp, 4
mov edi, eax
cmp dword [ecx], ebp
jne 0xe21ef1
mov eax, dword [esi + 0x6c]
test al, 8
je 0xe21ef1
or eax, 0x2000
mov dword [esi + 0x6c], eax
mov eax, dword [ecx]
cmp eax, dword [esp + 0x2c]
jne 0xe21f0d
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.00e2cfc5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0xac]
jne 0xe21f2a
mov edx, dword [esp + 0x10]
push edi
push edx
push esi
call fcn.00e2d2d5
add esp, 0xc
jmp 0xe21cd5
push ecx
push esi
call fcn.00e29815
add esp, 8
test eax, eax
je 0xe21f8e
cmp dword [esi + 0x120], ebp
jne 0xe21f44
or dword [esi + 0x6c], 4
mov eax, dword [esp + 0x10]
push edi
push eax
push esi
call fcn.00e2f785
mov eax, dword [esi + 0x120]
add esp, 0xc
cmp eax, dword [esp + 0x14]
jne 0xe21f68
or dword [esi + 0x6c], 2
jmp 0xe21cd5
cmp eax, ebp
jne 0xe21cd5
mov eax, dword [esi + 0x6c]
test al, 1
jne 0xe22185
push 0x4798d0
push esi
call fcn.00e28f25
add esp, 8
jmp 0xe221d5
mov eax, dword [esi + 0x120]
cmp eax, dword [esp + 0x14]
jne 0xe21fae
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.00e2d145
add esp, 0xc
jmp 0xe21cd5
cmp eax, ebp
je 0xe221a2
push edi
cmp eax, dword [esp + 0x40]
jne 0xe21fd0
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00e2e3f5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x80]
jne 0xe21fec
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00e2d615
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x50]
jne 0xe22005
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00e2d325
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0xa0]
jne 0xe22021
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00e2e665
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x60]
jne 0xe2203a
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00e2e965
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x20]
jne 0xe22053
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00e2eab5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x70]
jne 0xe2206c
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00e2edc5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x28]
jne 0xe22085
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00e2e815
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x38]
jne 0xe2209e
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00e2d4a5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x48]
jne 0xe220b7
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00e2da75
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x58]
jne 0xe220d0
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00e2dc75
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x68]
jne 0xe220e9
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00e2de65
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x78]
jne 0xe22102
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00e2f105
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x88]
jne 0xe2211e
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00e2efd5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0x98]
jne 0xe2213a
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00e2e155
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0xa8]
jne 0xe22156
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00e2f2b5
add esp, 0xc
jmp 0xe21cd5
cmp eax, dword [esp + 0xb8]
jne 0xe22172
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00e2f4c5
add esp, 0xc
jmp 0xe21cd5
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00e2f785
add esp, 0xc
jmp 0xe21cd5
cmp byte [esi + 0x12a], 3
jne 0xe221d5
test al, 2
jne 0xe221d5
push 0x4798b4
push esi
call fcn.00e28f25
add esp, 8
jmp 0xe221d5
mov eax, dword [esi + 0x6c]
test al, 1
jne 0xe221b0
push 0x4798d0
jmp 0xe221c2
cmp byte [esi + 0x12a], 3
jne 0xe221cb
test al, 2
jne 0xe221cb
push 0x4798b4
push esi
call fcn.00e28f25
add esp, 8
or dword [esi + 0x6c], 4
mov dword [esi + 0x110], edi
pop edi
pop ebx
mov ecx, dword [esp + 0xb4]
pop esi
pop ebp
xor ecx, esp
call fcn.00e32481
add esp, 0xb0
ret