Function at 0x422fbf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x74
mov eax, 0x4c83d6
call fcn.0044d75c
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp + 8]
mov ecx, esi
call fcn.0041cc81
xor ebx, ebx
push ebx
push 0x4d2344
push eax
mov ecx, esi
call fcn.0042147d
mov edi, eax
push 0x4d2340
push edi
lea eax, [ebp - 0x18]
push eax
mov ecx, esi
call fcn.0041eeab
push 0x4d233c
push edi
lea eax, [ebp - 0x14]
push eax
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.0041eeab
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov byte [ebp - 4], 2
mov ebx, str.dname
test edi, edi
je 0x42311c
mov ecx, edi
call fcn.0043b6ed
mov edi, eax
jmp 0x423114
lea ecx, [ebp - 0x4c]
call fcn.00410b22
push 0x4d2328
push edi
lea eax, [ebp - 0x20]
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 4
call fcn.004115eb
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.0040f083
push str.name
push edi
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.004115eb
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.0040f083
push str.durl
push edi
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 6
call fcn.004115eb
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.0040f083
push ebx
push edi
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 7
call fcn.004115eb
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 3
call fcn.0040f083
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00422dd9
mov ecx, edi
call fcn.0043b711
lea ecx, [ebp - 0x4c]
mov edi, eax
mov byte [ebp - 4], 2
call fcn.00410af3
test edi, edi
jne 0x423037
mov ecx, esi
call fcn.0041cc81
push 0
push str.KBSofts
push eax
mov ecx, esi
call fcn.0042147d
mov edi, eax
push 0x4d2340
push edi
lea eax, [ebp - 0x10]
push eax
mov ecx, esi
call fcn.0041eeab
push 0x4d233c
push edi
lea eax, [ebp + 8]
push eax
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.0041eeab
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0xa
cmp edi, eax
je 0x423318
mov ecx, edi
call fcn.0043b6ed
mov edi, eax
jmp 0x423310
lea ecx, [ebp - 0x80]
call fcn.0041ebe8
push 0x4d2328
push edi
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xb
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.004115eb
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push str.name
push edi
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xd
call fcn.004115eb
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push str.checkbox
push edi
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xe
call fcn.004115eb
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push str.durl
push edi
lea eax, [ebp - 0x20]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xf
call fcn.004115eb
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push ebx
push edi
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x10
call fcn.004115eb
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push str.inst
push edi
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x11
call fcn.004115eb
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push str.instregpath
push edi
lea eax, [ebp - 0x38]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.004115eb
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
push str.instregname
push edi
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.0041eeab
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x13
call fcn.004115eb
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.0040f083
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00422e52
mov ecx, edi
call fcn.0043b711
lea ecx, [ebp - 0x80]
mov edi, eax
mov byte [ebp - 4], 0xa
call fcn.00410b51
test edi, edi
jne 0x42317f
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
mov esi, dword [ebp - 0x1c]
je 0x42332f
lea eax, [ebp - 0x18]
push eax
mov ecx, esi
call fcn.004115eb
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x423344
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
call fcn.004115eb
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x5c]
sar eax, 4
test eax, eax
je 0x42335d
lea eax, [ebp - 0x5c]
push eax
lea ecx, [esi + 8]
call fcn.00422ebf
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], 0
je 0x423372
lea eax, [ebp - 0x10]
push eax
lea ecx, [esi + 0x18]
call fcn.004115eb
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
je 0x423387
lea eax, [ebp + 8]
push eax
lea ecx, [esi + 0x1c]
call fcn.004115eb
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
push 0x24
cdq
pop ecx
idiv ecx
test eax, eax
je 0x4233a3
lea eax, [ebp - 0x4c]
push eax
lea ecx, [esi + 0x20]
call fcn.00414668
lea ecx, [ebp - 0x4c]
call fcn.00414126
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040f083
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0040f083
lea ecx, [ebp - 0x5c]
call fcn.004140d5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0040f083
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040f083
xor al, al
call fcn.0044d834
ret 4