Function at 0x4326e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10c
mov ebx, edx
mov dword [ebp - 0x118], ecx
mov esi, dword [ebp + 8]
mov eax, dword [0x4a0088]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x88], 0x6e
mov dword [ebp - 0x8c], 0x776f6873
mov dword [ebp - 0x90], 0x2d746f6e
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xfc], eax
cmp eax, 9
jne 0x432763
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x432734
mov eax, dword [esi]
lea ecx, [ebp - 0x90]
push 9
push ecx
push eax
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
xor edi, edi
test eax, eax
jne 0x432763
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044f7d0
mov eax, edi
add esp, 0x10c
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [ebx + 0x10]
cmp dword [ebx + 0x14], 0x10
jb 0x43276e
mov ebx, dword [ebx]
cmp edx, 0xf
mov dword [ebp - 0xf8], edx
ja 0x43278a
movups xmm0, xmmword [ebx]
movups xmmword [ebp - 0xf0], xmm0
mov edi, 0xf
jmp 0x4327f7
mov ecx, edx
or ecx, 0xf
mov eax, SysReAllocString
cmp ecx, eax
cmovae ecx, eax
cmp ecx, 0xfff
mov dword [ebp - 0x108], ecx
jb 0x4327c0
lea eax, [ecx + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4327cc
lea eax, [ecx + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0xf0], eax
mov edi, dword [ebp - 0xf8]
lea ecx, [edi + 1]
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, edi
add esp, 0xc
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xfc], eax
mov edi, dword [ebp - 0x108]
mov dword [ebp - 0x108], edi
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], edi
cmp dword [esi + 0x14], 0x10
jb 0x432811
mov esi, dword [esi]
mov ebx, dword [ebp - 0xfc]
lea eax, [ebp - 0xd8]
cmp ebx, 0xf
ja 0x43282f
movups xmm0, xmmword [esi]
movups xmmword [eax], xmm0
mov edi, 0xf
jmp 0x43288b
or ebx, 0xf
mov eax, SysReAllocString
cmp ebx, eax
cmovae ebx, eax
mov edi, ebx
cmp ebx, 0xfff
jb 0x43285f
lea eax, [ebx + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x43286b
lea eax, [ebx + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0xd8], eax
mov ebx, dword [ebp - 0xfc]
lea ecx, [ebx + 1]
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], edi
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x110], edi
jb 0x4328ab
mov ecx, dword [ecx]
mov esi, dword [ebp + 0x10]
lea eax, [ebp - 0xc0]
cmp ebx, 0xf
ja 0x4328c6
movups xmm0, xmmword [ecx]
movups xmmword [eax], xmm0
mov ecx, 0xf
jmp 0x43292b
mov dword [ebp - 0x100], ecx
mov ecx, ebx
or ecx, 0xf
mov eax, SysReAllocString
cmp ecx, eax
cmovae ecx, eax
mov edi, ecx
cmp ecx, 0xfff
jb 0x4328fe
lea eax, [ecx + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x43290a
lea eax, [ecx + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0xc0], eax
lea ecx, [ebx + 1]
push ecx
push dword [ebp - 0x100]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, edi
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ecx
mov ebx, dword [esi + 0x10]
cmp dword [esi + 0x14], 0x10
jb 0x432948
mov esi, dword [esi]
lea eax, [ebp - 0xa8]
cmp ebx, 0xf
mov dword [ebp - 0x100], ecx
ja 0x432966
movups xmm0, xmmword [esi]
movups xmmword [eax], xmm0
mov esi, 0xf
jmp 0x4329c6
mov ecx, ebx
or ecx, 0xf
mov eax, SysReAllocString
cmp ecx, eax
cmovae ecx, eax
mov edi, ecx
cmp ecx, 0xfff
jb 0x432998
lea eax, [ecx + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x4329a4
lea eax, [ecx + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0xa8], eax
lea ecx, [ebx + 1]
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0xf8]
mov esi, edi
lea edi, [ebp - 0xf0]
mov eax, dword [edi]
mov dword [edi + 0x58], ebx
cmp dword [ebp - 0x108], 0x10
mov dword [ebp - 0x114], esi
mov dword [edi + 0x5c], esi
mov dword [ebp - 0x10c], eax
cmovae edi, eax
mov dword [ebp - 0x78], 2
cmp edx, 0xf
ja 0x432a06
lea eax, [ebp - 0x74]
movups xmm0, xmmword [edi]
movups xmmword [eax], xmm0
mov esi, 0xf
jmp 0x432a61
mov esi, edx
or esi, 0xf
mov eax, SysReAllocString
cmp esi, eax
cmovae esi, eax
cmp esi, 0xfff
jb 0x432a36
lea eax, [esi + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x432a42
lea eax, [esi + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0xf8]
lea ecx, [ebx + 1]
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, ebx
add esp, 0xc
mov ecx, dword [ebp - 0x100]
mov ebx, dword [ebp - 0x104]
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x110], 0x10
mov dword [ebp - 0x60], esi
mov eax, dword [ebp - 0xd8]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0xf8], eax
cmovae edx, eax
mov edi, dword [ebp - 0xfc]
cmp edi, 0xf
ja 0x432aa4
lea eax, [ebp - 0x5c]
movups xmm0, xmmword [edx]
movups xmmword [eax], xmm0
mov esi, 0xf
jmp 0x432b02
mov dword [ebp - 0x104], edx
mov esi, edi
or esi, 0xf
mov eax, SysReAllocString
cmp esi, eax
cmovae esi, eax
cmp esi, 0xfff
jb 0x432ada
lea eax, [esi + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x432ae6
lea eax, [esi + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0x5c], eax
lea ecx, [edi + 1]
push ecx
push dword [ebp - 0x104]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x4c], edi
cmp ecx, 0x10
mov dword [ebp - 0x48], esi
mov esi, dword [ebp - 0xc0]
lea ecx, [ebp - 0xc0]
cmovae ecx, esi
cmp ebx, 0xf
ja 0x432b2f
lea eax, [ebp - 0x44]
movups xmm0, xmmword [ecx]
movups xmmword [eax], xmm0
mov edi, 0xf
jmp 0x432b87
mov dword [ebp - 0xfc], ecx
mov edi, ebx
or edi, 0xf
mov eax, SysReAllocString
cmp edi, eax
cmovae edi, eax
cmp edi, 0xfff
jb 0x432b65
lea eax, [edi + 0x24]
push eax
call fcn.0044f125
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x432b71
lea eax, [edi + 1]
push eax
call fcn.0044f125
add esp, 4
mov dword [ebp - 0x44], eax
lea ecx, [ebx + 1]
push ecx
push dword [ebp - 0xfc]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, ebx
lea ebx, [ebp - 0x2c]
mov dword [ebx - 8], eax
mov dword [ebx - 4], edi
mov ecx, ebx
lea edx, [ebp - 0xa8]
call fcn.004539e0
mov byte [ebx + 0x18], 1
lea edi, [ebp - 0x78]
lea ebx, [ebp - 0xf4]
mov ecx, dword [ebp - 0x118]
mov edx, ebx
push edi
call fcn.0042aa10
add esp, 4
mov ecx, edi
call fcn.0042ad50
mov edi, dword [ebx]
mov edx, dword [ebp - 0x114]
cmp edx, 0x10
mov ebx, dword [ebp - 0x108]
jb 0x432c08
mov eax, dword [ebp - 0xa8]
cmp edx, 0xfff
jb 0x432bfd
mov ecx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, ecx
cmp eax, 0x20
jae 0x432cb9
add edx, 0x24
mov eax, ecx
jmp 0x432bfe
inc edx
push edx
push eax
call fcn.0044f155
add esp, 8
mov ecx, dword [ebp - 0x100]
cmp ecx, 0x10
jb 0x432c3e
cmp ecx, 0xfff
jb 0x432c33
mov eax, dword [esi - 4]
add esi, 0xfffffffc
sub esi, eax
cmp esi, 0x20
jae 0x432cb9
add ecx, 0x24
mov esi, eax
jmp 0x432c34
inc ecx
push ecx
push esi
call fcn.0044f155
add esp, 8
mov ecx, dword [ebp - 0x110]
cmp ecx, 0x10
jb 0x432c7a
cmp ecx, 0xfff
jb 0x432c69
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x432cb9
add ecx, 0x24
jmp 0x432c70
inc ecx
mov eax, dword [ebp - 0xf8]
push ecx
push eax
call fcn.0044f155
add esp, 8
cmp ebx, 0x10
jb 0x43274c
cmp ebx, 0xfff
jb 0x432ca3
mov ecx, dword [ebp - 0x10c]
mov eax, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, eax
cmp ecx, 0x20
jae 0x432cb9
add ebx, 0x24
jmp 0x432caa
inc ebx
mov eax, dword [ebp - 0x10c]
push ebx
push eax
call fcn.0044f155
add esp, 8
jmp 0x43274c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3