Function at 0x428410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x5c0
mov dword [esp + 0x56c], 0x441014
mov dword [esp + 0x14c], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.ole32.dll_CoInitializeEx]
call eax
sub esp, 8
not eax
shr eax, 0x1f
mov dword [esp + 0x568], eax
mov eax, dword [esp + 0x56c]
mov ecx, dword [esp + 0x568]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x44101c]
xor ecx, 0x8d109e64
sub eax, ecx
mov dword [esp + 0x564], 0x441020
mov dword [esp + 0x55c], 0x44102c
mov dword [esp + 0x554], 0x441038
mov dword [esp + 0x54c], 0x440050
mov edi, dword [0x441044]
mov dword [esp + 0x548], 0x44104c
mov dword [esp + 0x540], 0x441058
mov dword [esp + 0x538], 0x440050
mov ecx, dword [0x441064]
mov dword [esp + 0x1d8], ecx
mov dword [esp + 0x534], 0x44106c
mov dword [esp + 0x52c], 0x440050
mov ecx, dword [0x441078]
mov dword [esp + 0x1e0], ecx
mov dword [esp + 0x528], 0x441080
mov dword [esp + 0x520], 0x44108c
mov dword [esp + 0x518], 0x440050
mov ecx, dword [0x441098]
mov dword [esp + 0x1e8], ecx
mov dword [esp + 0x514], 0x4410a0
mov dword [esp + 0x50c], 0x4410ac
mov dword [esp + 0x504], 0x440050
mov ecx, dword [0x4410b8]
mov dword [esp + 0x1ec], ecx
mov dword [esp + 0x500], 0x440050
mov ecx, dword [0x4410c0]
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x4fc], 0x440050
mov ecx, dword [0x4410c8]
mov dword [esp + 0x1f4], ecx
mov dword [esp + 0x4f8], 0x4410d0
mov dword [esp + 0x4f0], 0x440050
mov ecx, dword [0x4410dc]
mov dword [esp + 0x1f8], ecx
mov dword [esp + 0x4ec], 0x440050
mov ecx, dword [0x4410e4]
mov dword [esp + 0x294], ecx
mov dword [esp + 0x4e8], 0x440050
mov ecx, dword [0x4410ec]
mov dword [esp + 0x28c], ecx
mov dword [esp + 0x4e4], 0x4410f4
mov dword [esp + 0x4dc], 0x441100
mov dword [esp + 0x4d4], 0x440050
mov ecx, dword [0x44110c]
mov dword [esp + 0x284], ecx
mov dword [esp + 0x4d0], 0x440050
mov ecx, dword [0x441114]
mov dword [esp + 0x280], ecx
mov dword [esp + 0x4cc], 0x440050
mov ecx, dword [0x44111c]
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x4c8], 0x441124
mov dword [esp + 0x4c0], 0x441130
mov dword [esp + 0x4b8], 0x44113c
mov dword [esp + 0x4b0], 0x441148
mov dword [esp + 0x4a8], 0x441154
mov dword [esp + 0x4a0], 0x440050
mov ecx, dword [0x441160]
mov dword [esp + 0x278], ecx
mov dword [esp + 0x49c], 0x440050
mov ecx, dword [0x441168]
mov dword [esp + 0x274], ecx
mov dword [esp + 0x498], 0x440050
mov ecx, dword [0x441170]
mov dword [esp + 0x270], ecx
mov dword [esp + 0x494], 0x440050
mov ecx, dword [0x441178]
mov dword [esp + 0x26c], ecx
mov dword [esp + 0x490], 0x441180
mov dword [esp + 0x488], 0x44118c
mov dword [esp + 0x480], 0x440050
mov ecx, dword [0x441198]
mov dword [esp + 0x268], ecx
mov dword [esp + 0x47c], 0x440050
mov ecx, dword [0x4411a0]
mov dword [esp + 0x264], ecx
mov dword [esp + 0x478], 0x440050
mov ecx, dword [0x4411a8]
mov dword [esp + 0x260], ecx
mov dword [esp + 0x474], 0x4411b0
mov dword [esp + 0x46c], 0x440050
mov ecx, dword [0x4411bc]
mov dword [esp + 0x25c], ecx
mov dword [esp + 0x468], 0x440050
mov ecx, dword [0x4411c4]
mov dword [esp + 0x258], ecx
mov dword [esp + 0x464], 0x440050
mov ecx, dword [0x4411cc]
mov dword [esp + 0x254], ecx
mov dword [esp + 0x460], 0x440050
mov ecx, dword [0x4411d4]
mov dword [esp + 0x250], ecx
mov dword [esp + 0x45c], 0x4411dc
mov dword [esp + 0x454], 0x4411e8
mov dword [esp + 0x44c], 0x440050
mov ecx, dword [0x4411f4]
mov dword [esp + 0x24c], ecx
mov dword [esp + 0x448], 0x4411fc
mov dword [esp + 0x440], 0x441208
mov dword [esp + 0x438], 0x441214
mov dword [esp + 0x430], 0x440050
mov ecx, dword [0x441220]
mov dword [esp + 0x248], ecx
mov dword [esp + 0x42c], 0x441228
mov dword [esp + 0x424], 0x441234
mov dword [esp + 0x41c], 0x441240
mov dword [esp + 0x414], 0x440050
mov ecx, dword [0x44124c]
mov dword [esp + 0x244], ecx
mov dword [esp + 0x410], 0x441254
mov dword [esp + 0x408], 0x440050
mov ecx, dword [0x441260]
mov dword [esp + 0x240], ecx
mov dword [esp + 0x404], 0x441268
mov dword [esp + 0x3fc], 0x441274
mov dword [esp + 0x3f4], 0x441280
mov dword [esp + 0x3ec], 0x440050
mov ecx, dword [0x44128c]
mov dword [esp + 0x23c], ecx
mov dword [esp + 0x3e8], 0x441294
mov dword [esp + 0x3e0], 0x4412a0
mov dword [esp + 0x3d8], 0x440050
mov ecx, dword [0x4412ac]
mov dword [esp + 0x234], ecx
mov dword [esp + 0x3d4], 0x440050
mov ecx, dword [0x4412b4]
mov dword [esp + 0x230], ecx
mov dword [esp + 0x3d0], 0x440050
mov ecx, dword [0x4412bc]
mov dword [esp + 0x22c], ecx
mov dword [esp + 0x3cc], 0x440050
mov ecx, dword [0x4412c4]
mov dword [esp + 0x228], ecx
mov dword [esp + 0x3c8], 0x440050
mov ecx, dword [0x4412cc]
mov dword [esp + 0x224], ecx
mov dword [esp + 0x3c4], 0x4412d4
mov dword [esp + 0x3bc], 0x440050
mov ecx, dword [0x4412e0]
mov dword [esp + 0x220], ecx
mov dword [esp + 0x3b8], 0x440050
mov ecx, dword [0x4412e8]
mov dword [esp + 0x238], ecx
mov dword [esp + 0x3b4], 0x4412f0
mov dword [esp + 0x3ac], 0x4412fc
mov dword [esp + 0x3a4], 0x440050
mov ecx, dword [0x441308]
mov dword [esp + 0x288], ecx
mov dword [esp + 0x3a0], 0x440050
mov ecx, dword [0x441310]
mov dword [esp + 0x298], ecx
mov dword [esp + 0x39c], 0x440050
mov ecx, dword [0x441318]
mov dword [esp + 0x29c], ecx
mov dword [esp + 0x398], 0x440050
mov ecx, dword [0x441320]
mov dword [esp + 0x2a0], ecx
mov dword [esp + 0x394], 0x441328
mov dword [esp + 0x38c], 0x441334
mov dword [esp + 0x384], 0x440050
mov ecx, dword [0x441340]
mov dword [esp + 0x2a4], ecx
mov dword [esp + 0x380], 0x441348
mov dword [esp + 0x378], 0x441354
mov dword [esp + 0x370], 0x440050
mov ecx, dword [0x441360]
mov dword [esp + 0x2ac], ecx
mov dword [esp + 0x36c], 0x440050
mov ecx, dword [0x441368]
mov dword [esp + 0x2b0], ecx
mov dword [esp + 0x368], 0x440050
mov ecx, dword [0x441370]
mov dword [esp + 0x2b4], ecx
mov dword [esp + 0x364], 0x440050
mov ecx, dword [str.ZT51]
mov dword [esp + 0x2b8], ecx
mov dword [esp + 0x360], 0x440050
mov ecx, dword [0x441380]
mov dword [esp + 0x2bc], ecx
mov dword [esp + 0x35c], 0x441388
mov dword [esp + 0x354], 0x441394
mov dword [esp + 0x34c], 0x440050
mov ecx, dword [0x4413a0]
mov dword [esp + 0x2c4], ecx
mov dword [esp + 0x348], 0x440050
mov ecx, dword [0x4413a8]
mov dword [esp + 0x2cc], ecx
mov dword [esp + 0x344], 0x4413b0
mov dword [esp + 0x33c], 0x4413bc
mov dword [esp + 0x334], 0x440050
mov edx, dword [0x4413c8]
mov dword [esp + 0x330], 0x4413d0
mov dword [esp + 0x328], 0x4413dc
mov dword [esp + 0x320], 0x440050
mov ebx, dword [0x4413e8]
mov dword [esp + 0x31c], 0x440050
mov esi, dword [0x4413f0]
mov dword [esp + 0x318], 0x440050
mov ecx, dword [0x4413f8]
mov dword [esp + 0x1dc], ecx
mov dword [esp + 0x314], 0x440050
mov ecx, dword [0x441400]
mov dword [esp + 0x1e4], ecx
mov dword [esp + 0x310], 0x440050
mov ecx, dword [0x441408]
mov dword [esp + 0x218], ecx
mov dword [esp + 0x30c], 0x440050
mov ecx, dword [0x441410]
mov dword [esp + 0x214], ecx
mov dword [esp + 0x308], 0x440050
mov ecx, dword [0x441418]
mov dword [esp + 0x210], ecx
mov dword [esp + 0x304], 0x440050
mov ecx, dword [0x441420]
mov dword [esp + 0x20c], ecx
mov dword [esp + 0x300], 0x440050
mov ecx, dword [0x441428]
mov dword [esp + 0x208], ecx
mov dword [esp + 0x2fc], 0x440050
mov ecx, dword [0x441430]
mov dword [esp + 0x204], ecx
mov dword [esp + 0x2f8], 0x440050
mov ecx, dword [0x441438]
mov dword [esp + 0x200], ecx
mov dword [esp + 0x2f4], 0x440050
mov ecx, dword [0x441440]
mov dword [esp + 0x1fc], ecx
mov dword [esp + 0x2f0], 0x440050
mov ecx, dword [0x441448]
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x2ec], 0x440050
mov ecx, dword [0x441450]
mov dword [esp + 0x290], ecx
mov dword [esp + 0x2e8], 0x440050
mov ecx, dword [0x441458]
mov dword [esp + 0x2a8], ecx
mov dword [esp + 0x2e4], 0x440050
mov ecx, dword [0x441460]
mov dword [esp + 0x2c0], ecx
mov dword [esp + 0x2e0], 0x440050
mov ecx, dword [0x441468]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x2dc], 0x440050
mov ecx, dword [0x441470]
mov dword [esp + 0x2d4], ecx
jmp eax