Function at 0x407ea0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
xor eax, eax
mov ebp, esp
push edi
xor edi, edi
push esi
push ebx
lea ebx, [ebp - 0xc8]
sub esp, 0xe0
mov word [ebp - 0x10], ax
xor eax, eax
mov word [ebp - 0x64], di
lea edi, [ebp - 0x80]
mov dword [ebp - 0x80], 0x660061
mov dword [ebp - 0x7c], 0x6c0069
mov dword [ebp - 0x78], 0x230065
mov dword [ebp - 0x74], 0x6e0061
mov dword [ebp - 0x70], 0x6e0061
mov dword [ebp - 0x6c], 0x680063
mov dword [ebp - 0x68], 0x72006f
mov dword [ebp - 0x3c], 0x660061
mov dword [ebp - 0x38], 0x6c0069
mov dword [ebp - 0x34], 0x230065
mov dword [ebp - 0x30], 0x6e0061
mov dword [ebp - 0x2c], 0x6e0061
mov dword [ebp - 0x28], 0x680063
mov dword [ebp - 0x24], 0x72006f
mov dword [ebp - 0x20], 0x610023
mov dword [ebp - 0x1c], 0x6f006e
mov dword [ebp - 0x18], 0x680074
mov dword [ebp - 0x14], 0x720065
mov dword [ebp - 0x94], 0x610023
mov dword [ebp - 0x90], 0x61006e
mov dword [ebp - 0x8c], 0x63006e
mov dword [ebp - 0x88], 0x6f0068
mov dword [ebp - 0x84], 0x72
mov dword [ebp - 0xc4], 0x660061
mov dword [ebp - 0xc0], 0x6c0069
mov dword [ebp - 0xbc], 0x65
mov word [ebp - 0x98], ax
xor eax, eax
mov dword [ebp - 0xa8], 0x6e0061
mov dword [ebp - 0xa4], 0x6e0061
mov dword [ebp - 0xa0], 0x680063
mov dword [ebp - 0x9c], 0x72006f
mov dword [ebp - 0x60], 0x6e0061
mov dword [ebp - 0x5c], 0x6e0061
mov dword [ebp - 0x58], 0x680063
mov dword [ebp - 0x54], 0x72006f
mov dword [ebp - 0x50], 0x610023
mov dword [ebp - 0x4c], 0x6f006e
mov dword [ebp - 0x48], 0x680074
mov dword [ebp - 0x44], 0x720065
mov word [ebp - 0x40], ax
mov dword [ebp - 0xb8], 0x650074
mov dword [ebp - 0xb4], 0x740073
mov dword [ebp - 0xb0], 0x6f006c
mov dword [ebp - 0xac], 0x63
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 0x414980
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], edi
call sub.hlink.dll_HlinkCreateFromString
sub esp, 0x20
mov esi, eax
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6cb
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], str.HlinkCreateFromString_failed:_0x_08lx_n
call fcn.00402bf0
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6cc
xor eax, eax
mov dword [esp + 4], str.Didnt_get_an_hlink_n
mov edx, dword [ebp - 0xc8]
test edx, edx
setne al
mov dword [esp], eax
call fcn.00402bf0
mov edx, dword [ebp - 0xc8]
test edx, edx
je 0x4081c8
lea esi, [ebp - 0xa8]
lea ecx, [ebp - 0xc4]
mov eax, 0x6cf
mov dword [esp], esi
call fcn.00407ce0
mov dword [esp], esi
mov ecx, 0xffffffff
mov eax, 0x6d0
mov dword [esp + 4], 2
mov edx, dword [ebp - 0xc8]
call fcn.00407b70
mov dword [ebp - 0xcc], eax
mov eax, 0x6d1
call fcn.004026e0
mov dword [esp + 4], str.Found_moniker_should_not_be_NULL_n
xor eax, eax
mov edx, dword [ebp - 0xcc]
test edx, edx
setne al
mov dword [esp], eax
call fcn.00402bf0
mov edx, dword [ebp - 0xcc]
test edx, edx
je 0x40814c
mov eax, dword [edx]
mov dword [esp], edx
call dword [eax + 8]
sub esp, 4
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov dword [esp + 0xc], 0
mov dword [esp + 8], edi
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [edx + 0x1c]
sub esp, 0x10
mov dword [ebp - 0xcc], eax
mov eax, 0x6d5
call fcn.004026e0
mov edx, dword [ebp - 0xcc]
xor eax, eax
mov dword [esp + 4], str.IHlink_SetStringReference_failed:_0x_08lx_n
test edx, edx
mov dword [esp + 8], edx
sete al
mov dword [esp], eax
call fcn.00402bf0
mov dword [esp], esi
mov edx, dword [ebp - 0xc8]
mov ecx, edi
mov eax, 0x6d6
call fcn.00407ce0
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
lea eax, [ebp - 0x3c]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 0x414980
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.hlink.dll_HlinkCreateFromString
sub esp, 0x20
mov esi, eax
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6dd
xor eax, eax
test esi, esi
sete al
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], str.HlinkCreateFromString_failed:_0x_08lx_n
call fcn.00402bf0
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6de
xor eax, eax
mov dword [esp + 4], str.Didnt_get_an_hlink_n
mov esi, dword [ebp - 0xc8]
test esi, esi
setne al
mov dword [esp], eax
call fcn.00402bf0
mov edx, dword [ebp - 0xc8]
test edx, edx
je 0x4082eb
lea esi, [ebp - 0x60]
lea ecx, [ebp - 0xc4]
mov eax, 0x6e1
mov dword [esp], esi
call fcn.00407ce0
mov dword [esp], esi
mov ecx, 0xffffffff
mov eax, 0x6e2
mov dword [esp + 4], 2
mov edx, dword [ebp - 0xc8]
call fcn.00407b70
mov esi, eax
mov eax, 0x6e3
call fcn.004026e0
xor eax, eax
test esi, esi
mov dword [esp + 4], str.Found_moniker_should_not_be_NULL_n
setne al
mov dword [esp], eax
call fcn.00402bf0
test esi, esi
je 0x4082da
mov eax, dword [esi]
mov dword [esp], esi
call dword [eax + 8]
sub esp, 4
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
lea esi, [ebp - 0xb8]
mov dword [esp], edi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 0x414980
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], esi
call sub.hlink.dll_HlinkCreateFromString
sub esp, 0x20
mov edi, eax
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6ec
xor eax, eax
test edi, edi
sete al
mov dword [esp + 8], edi
mov dword [esp], eax
mov dword [esp + 4], str.HlinkCreateFromString_failed:_0x_08lx_n
call fcn.00402bf0
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6ed
xor eax, eax
mov dword [esp + 4], str.Didnt_get_an_hlink_n
mov ecx, dword [ebp - 0xc8]
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.00402bf0
mov edx, dword [ebp - 0xc8]
test edx, edx
je 0x40840a
mov dword [esp], esi
lea ecx, [ebp - 0xc4]
mov eax, 0x6f0
call fcn.00407ce0
mov dword [esp], esi
mov ecx, 0xffffffff
mov eax, 0x6f1
mov dword [esp + 4], 2
mov edx, dword [ebp - 0xc8]
call fcn.00407b70
mov esi, eax
mov eax, 0x6f2
call fcn.004026e0
xor eax, eax
test esi, esi
mov dword [esp + 4], str.Found_moniker_should_not_be_NULL_n
setne al
mov dword [esp], eax
call fcn.00402bf0
test esi, esi
je 0x4083f9
mov eax, dword [esi]
mov dword [esp], esi
call dword [eax + 8]
sub esp, 4
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
lea eax, [ebp - 0x94]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 0x414980
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.hlink.dll_HlinkCreateFromString
sub esp, 0x20
mov ebx, eax
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6fb
xor eax, eax
test ebx, ebx
sete al
mov dword [esp + 8], ebx
mov dword [esp], eax
mov dword [esp + 4], str.HlinkCreateFromString_failed:_0x_08lx_n
call fcn.00402bf0
call fcn.0040dad0
mov dword [eax], 0x4124df
mov dword [eax + 4], 0x6fc
xor eax, eax
mov dword [esp + 4], str.Didnt_get_an_hlink_n
mov edx, dword [ebp - 0xc8]
test edx, edx
setne al
mov dword [esp], eax
call fcn.00402bf0
mov edx, dword [ebp - 0xc8]
test edx, edx
je 0x40852f
lea ebx, [ebp - 0xa8]
xor ecx, ecx
mov eax, 0x6ff
mov dword [esp], ebx
call fcn.00407ce0
mov dword [esp], ebx
mov ecx, 0xffffffff
mov eax, 0x700
mov dword [esp + 4], 2
mov edx, dword [ebp - 0xc8]
call fcn.00407b70
mov ebx, eax
mov eax, 0x701
call fcn.004026e0
xor eax, eax
test ebx, ebx
mov dword [esp + 4], str.Found_moniker_should_be_NULL_n
sete al
mov dword [esp], eax
call fcn.00402bf0
test ebx, ebx
je 0x40851e
mov eax, dword [ebx]
mov dword [esp], ebx
call dword [eax + 8]
sub esp, 4
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret