Function at 0x42bc30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6077a1
mov eax, dword fs:[0]
push eax
sub esp, 0x228
mov eax, dword [0x69f000]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x21c]
xorps xmm0, xmm0
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x228], 0x6a96f8
mov byte [0x6a96f8], 0
movups xmmword [0x6a96fc], xmm0
mov dword [0x6a970c], 0
mov dword [ebp - 4], 0
mov dword [0x6a9710], 0
mov dword [0x6a9714], 0
mov dword [0x6a9718], 0
mov byte [ebp - 4], 1
mov dword [0x6a971c], 0
mov dword [0x6a9720], 0
mov dword [0x6a9724], 0
mov byte [ebp - 4], 2
mov ecx, 0x6a9728
push 0
push 0x65fe6c
movups xmmword [0x6a9728], xmm0
mov dword [0x6a9738], 0
mov dword [0x6a973c], 0
call fcn.0040c3f0
mov byte [ebp - 4], 3
xorps xmm0, xmm0
xor eax, eax
mov byte [0x6a9740], 0
movups xmmword [0x6a9748], xmm0
mov dword [0x6a9744], 0xffffffff
mov dword [0x6a9758], 0
mov dword [0x6a975c], 7
mov word [0x6a9748], ax
mov byte [ebp - 4], 4
movups xmmword [0x6a9764], xmm0
mov word [0x6a9761], 0x100
mov dword [ebp - 0x220], 0x6a9764
mov dword [0x6a9774], eax
mov dword [0x6a9778], 7
mov word [0x6a9764], ax
mov byte [ebp - 4], 5
movups xmmword [0x6a977c], xmm0
mov dword [0x6a978c], eax
mov dword [0x6a9790], 7
mov word [0x6a977c], ax
mov byte [ebp - 4], 7
movups xmmword [0x6a9798], xmm0
mov dword [ebp - 0x22c], 0x6a9798
mov dword [0x6a97a8], eax
mov dword [0x6a97ac], 7
mov word [0x6a9798], ax
mov byte [ebp - 4], 8
movups xmmword [0x6a97b0], xmm0
mov dword [0x6a97c0], eax
mov dword [0x6a97c4], 7
mov word [0x6a97b0], ax
mov byte [ebp - 4], 9
movups xmmword [0x6a97c8], xmm0
mov dword [0x6a97d8], eax
mov dword [0x6a97dc], 7
mov word [0x6a97c8], ax
mov byte [ebp - 4], 0xb
push ecx
mov ecx, 0x6a97ec
mov byte [0x6a97e0], al
call fcn.0046e880
mov byte [ebp - 4], 0xc
sub esp, 0x18
mov dword [ebp - 0x230], esp
mov ecx, esp
xorps xmm0, xmm0
push 0xd
push str.packageListCS
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xc
mov ecx, 0x6a986c
call fcn.0046e060
mov byte [ebp - 4], 0xe
push 8
mov dword [0x6a989c], 0
mov dword [0x6a98a0], 0
mov dword [0x6a98a4], 0
mov dword [0x6a98a8], 0
mov dword [0x6a98ac], 0
mov dword [0x6a98b0], 0
call fcn.00486cd6
add esp, 4
mov dword [eax + 4], 0
mov dword [0x6a98a0], eax
mov dword [eax], 0x6a98a0
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
push 0
push 0x65fe6c
mov ecx, 0x6a98b8
mov byte [0x6a98b4], 0
movups xmmword [0x6a98b8], xmm0
mov dword [0x6a98c8], 0
mov dword [0x6a98cc], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0x10
xorps xmm0, xmm0
push 2
push 0x6666c4
mov ecx, 0x6a98d4
mov byte [0x6a98d0], 0
movups xmmword [0x6a98d4], xmm0
mov dword [0x6a98e4], 0
mov dword [0x6a98e8], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
push 2
push 0x6666c4
mov ecx, 0x6a98ec
mov dword [0x6a98fc], 0
movups xmmword [0x6a98ec], xmm0
mov dword [0x6a9900], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0x12
xorps xmm0, xmm0
push 0
push 0x65fe6c
mov ecx, 0x6a9904
mov dword [0x6a9914], 0
movups xmmword [0x6a9904], xmm0
mov dword [0x6a9918], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0x13
xorps xmm0, xmm0
xor eax, eax
mov dword [0x6a992c], 0
movups xmmword [0x6a991c], xmm0
mov dword [0x6a9930], 7
mov word [0x6a991c], ax
mov byte [ebp - 4], 0x14
movups xmmword [0x6a9934], xmm0
mov dword [0x6a9944], eax
mov dword [0x6a9948], 7
mov word [0x6a9934], ax
mov byte [ebp - 4], 0x15
movups xmmword [0x6a994c], xmm0
mov dword [0x6a995c], eax
mov dword [0x6a9960], 7
mov word [0x6a994c], ax
mov byte [ebp - 4], 0x16
movups xmmword [0x6a9964], xmm0
mov dword [0x6a9974], eax
mov dword [0x6a9978], 7
mov word [0x6a9964], ax
mov byte [ebp - 4], 0x17
movups xmmword [0x6a997c], xmm0
mov dword [0x6a998c], eax
mov dword [0x6a9990], 7
mov word [0x6a997c], ax
mov byte [ebp - 4], 0x18
movups xmmword [0x6a9994], xmm0
mov dword [0x6a99a4], eax
mov dword [0x6a99a8], 7
mov word [0x6a9994], ax
mov byte [ebp - 4], 0x19
movups xmmword [0x6a99ac], xmm0
mov dword [0x6a99bc], eax
mov dword [0x6a99c0], 7
mov word [0x6a99ac], ax
mov byte [ebp - 4], 0x1a
movups xmmword [0x6a99c4], xmm0
mov dword [0x6a99d4], eax
mov dword [0x6a99d8], 7
mov word [0x6a99c4], ax
mov byte [ebp - 4], 0x1b
movups xmmword [0x6a99dc], xmm0
mov dword [0x6a99ec], eax
mov dword [0x6a99f0], 7
mov word [0x6a99dc], ax
mov byte [ebp - 4], 0x1c
movups xmmword [0x6a99f4], xmm0
mov dword [0x6a9a04], eax
mov dword [0x6a9a08], 7
mov word [0x6a99f4], ax
mov byte [ebp - 4], 0x1d
movups xmmword [0x6a9a0c], xmm0
mov dword [0x6a9a1c], eax
mov dword [0x6a9a20], 7
mov word [0x6a9a0c], ax
mov byte [ebp - 4], 0x1e
mov byte [0x6a9a25], al
mov dword [0x6a9a28], eax
mov dword [0x6a9a2c], eax
mov dword [0x6a9a30], eax
mov byte [ebp - 4], 0x1f
movups xmmword [0x6a9a38], xmm0
mov byte [0x6a9a34], 1
mov dword [0x6a9a48], eax
mov dword [0x6a9a4c], 7
mov word [0x6a9a38], ax
mov byte [ebp - 4], 0x20
movups xmmword [0x6a9a50], xmm0
mov dword [0x6a9a60], eax
mov dword [0x6a9a64], 7
mov word [0x6a9a50], ax
mov byte [ebp - 4], 0x21
movups xmmword [0x6a9a68], xmm0
mov dword [0x6a9a78], eax
mov dword [0x6a9a7c], 7
mov word [0x6a9a68], ax
mov byte [ebp - 4], 0x22
mov ecx, 0x6a9a80
push eax
push 0x65fe6c
movups xmmword [0x6a9a80], xmm0
mov dword [0x6a9a90], eax
mov dword [0x6a9a94], eax
call fcn.0040c3f0
mov byte [ebp - 4], 0x23
xorps xmm0, xmm0
xor eax, eax
mov dword [0x6a9ab8], 0
movups xmmword [0x6a9aa8], xmm0
mov dword [0x6a9abc], 7
mov word [0x6a9aa8], ax
mov byte [ebp - 4], 0x24
movups xmmword [0x6a9ac0], xmm0
mov dword [0x6a9ad0], eax
mov dword [0x6a9ad4], 7
mov word [0x6a9ac0], ax
mov byte [ebp - 4], 0x25
movups xmmword [0x6a9ad8], xmm0
mov dword [0x6a9ae8], eax
mov dword [0x6a9aec], 7
mov word [0x6a9ad8], ax
mov byte [ebp - 4], 0x26
mov dword [0x6a9af0], eax
mov dword [0x6a9af4], eax
mov dword [0x6a9af8], eax
mov byte [ebp - 4], 0x27
movups xmmword [0x6a9afc], xmm0
mov byte [ebp - 4], 0x28
push 0x40
mov dword [ebp - 0x234], 0x6a9b0c
mov dword [0x6a9b0c], eax
mov dword [0x6a9b10], eax
call fcn.00486cd6
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x6a9b0c], eax
mov byte [ebp - 4], 0x2a
xorps xmm0, xmm0
push 0
push 0x65fe6c
mov ecx, 0x6a9b18
mov word [0x6a9b14], 0
movups xmmword [0x6a9b18], xmm0
mov dword [0x6a9b28], 0
mov dword [0x6a9b2c], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0x2b
xorps xmm0, xmm0
xor eax, eax
mov byte [0x6a9b34], 0
movups xmmword [0x6a9b3c], xmm0
mov dword [0x6a9b38], 0xffffffff
mov dword [0x6a9b4c], 0
mov dword [0x6a9b50], 7
mov word [0x6a9b3c], ax
mov byte [ebp - 4], 0x2c
mov ecx, 0x6a9b54
push eax
push 0x65fe6c
movups xmmword [0x6a9b54], xmm0
mov dword [0x6a9b64], eax
mov dword [0x6a9b68], eax
call fcn.0040c3f0
mov byte [ebp - 4], 0x2d
xorps xmm0, xmm0
push 0
push 0x65fe6c
mov ecx, 0x6a9b6c
mov dword [0x6a9b7c], 0
movups xmmword [0x6a9b6c], xmm0
mov dword [0x6a9b80], 0
call fcn.0040c3f0
mov byte [ebp - 4], 0x2e
xorps xmm0, xmm0
xor eax, eax
mov dword [0x6a9b94], 0
movups xmmword [0x6a9b84], xmm0
mov dword [0x6a9b98], 7
mov word [0x6a9b84], ax
mov byte [ebp - 4], 0x2f
mov dword [0x6a9b9c], eax
mov dword [0x6a9ba0], eax
mov dword [0x6a9ba4], eax
mov byte [ebp - 4], 0x30
movups xmmword [0x6a9ba8], xmm0
mov dword [0x6a9bb8], eax
mov dword [0x6a9bbc], 7
mov word [0x6a9ba8], ax
mov byte [ebp - 4], 0x31
movups xmmword [0x6a9bc0], xmm0
mov dword [0x6a9bd0], eax
mov dword [0x6a9bd4], 7
mov word [0x6a9bc0], ax
mov byte [ebp - 4], 0x32
movups xmmword [0x6a9bd8], xmm0
mov dword [0x6a9be8], eax
mov dword [0x6a9bec], 7
mov word [0x6a9bd8], ax
mov byte [ebp - 4], 0x33
movups xmmword [0x6a9bf0], xmm0
mov dword [0x6a9c00], eax
mov dword [0x6a9c04], 7
mov word [0x6a9bf0], ax
mov byte [ebp - 4], 0x34
movups xmmword [0x6a9c08], xmm0
mov dword [0x6a9c18], eax
mov dword [0x6a9c1c], 7
mov word [0x6a9c08], ax
mov byte [ebp - 4], 0x35
movups xmmword [0x6a9c20], xmm0
mov dword [0x6a9c30], eax
mov dword [0x6a9c34], 7
mov word [0x6a9c20], ax
mov byte [ebp - 4], 0x36
movups xmmword [0x6a9c38], xmm0
mov dword [0x6a9c48], eax
mov dword [0x6a9c4c], 7
mov word [0x6a9c38], ax
mov byte [ebp - 4], 0x37
mov ecx, 0x6a9c50
push 2
push 0x6666c4
movups xmmword [0x6a9c50], xmm0
mov dword [0x6a9c60], eax
mov dword [0x6a9c64], eax
call fcn.0040c3f0
mov byte [ebp - 4], 0x38
mov ecx, 0x6a9c68
call fcn.0046da50
mov byte [ebp - 4], 0x39
push 3
push 0x662800
mov ecx, 0x6a980c
call fcn.0040be20
push 0x12
push str.ApplicationContext
mov ecx, 0x6a983c
call fcn.0040be20
push 0x138
call fcn.00486cd6
mov esi, eax
add esp, 4
mov dword [ebp - 0x224], esi
mov byte [ebp - 4], 0x3a
test esi, esi
je 0x42c4cf
push 0x138
push 0
push esi
call fcn.005d5480
add esp, 0xc
mov ecx, esi
call fcn.00450670
jmp 0x42c4d1
xor eax, eax
mov byte [ebp - 4], 0x39
push 0x118
mov dword [0x6a9c78], eax
call fcn.00486cd6
mov esi, eax
add esp, 4
mov dword [ebp - 0x224], esi
mov byte [ebp - 4], 0x3b
test esi, esi
je 0x42c510
push 0x118
push 0
push esi
call fcn.005d5480
add esp, 0xc
mov ecx, esi
call fcn.00432fd0
jmp 0x42c512
xor eax, eax
mov byte [ebp - 4], 0x39
push 0xb4
mov dword [0x6a9c74], eax
mov dword [0x6a97e4], 0
call fcn.00486cd6
mov edi, eax
add esp, 4
mov dword [ebp - 0x21c], edi
mov byte [ebp - 4], 0x3c
test edi, edi
je 0x42c65e
push 0xb4
push 0
push edi
call fcn.005d5480
add esp, 0xc
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov byte [ebp - 4], 0x3d
lea eax, [edi + 0x10]
xorps xmm0, xmm0
mov dword [ebp - 0x220], eax
movups xmmword [eax], xmm0
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x3e
lea ecx, [edi + 0x2c]
call fcn.004625c0
mov byte [ebp - 4], 0x3f
lea esi, [edi + 0xa8]
mov dword [edi + 0xa4], 0
mov dword [ebp - 0x224], esi
push 0x30
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00486cd6
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 0x41
push 0x10
mov word [edi + 0xb1], 0
mov byte [edi + 0xb3], 1
call fcn.00486cd6
add esp, 8
mov edi, eax
push edi
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 0x104
lea eax, [ebp - 0x218]
push eax
push edi
call dword [sym.imp.ole32.dll_StringFromGUID2]
push 0x10
push edi
mov esi, eax
call fcn.005d0cf8
add esp, 8
test esi, esi
js 0x42c652
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x42c630
mov ecx, dword [ebp - 0x220]
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0040be20
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x21c]
jmp 0x42c660
xor eax, eax
mov byte [ebp - 4], 0x39
mov ecx, 0x6a99f4
push 2
push 0x65fc9c
mov dword [0x6a9c7c], eax
mov byte [0x6a9760], 0
call fcn.0040be20
push 0
push 0x65fe6c
mov ecx, 0x6a9a0c
call fcn.0040be20
push 0
push 0x65fe6c
mov ecx, 0x6a9764
mov dword [0x6a9794], 0
call fcn.0040be20
push 0
push 0x65fe6c
mov ecx, 0x6a977c
call fcn.0040be20
mov dword [ebp - 4], 0xffffffff
mov eax, 0x6a96f8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005d077b
mov esp, ebp
pop ebp
ret