Function at 0x42bbba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x3f8
mov eax, 0x48f418
call fcn.0045a95a
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3e4], ebx
mov dword [ebp - 0x3dc], eax
xor esi, esi
mov dword [ebp - 4], esi
mov byte [ebp - 4], 1
mov dword [ebp - 0x3e0], esi
mov dword [ebp - 0x234], esi
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x234]
call fcn.00409d6c
mov byte [ebp - 4], 2
mov dword [ebp - 0x228], esi
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x228]
call fcn.00409d6c
mov byte [ebp - 4], 3
mov dword [ebp - 0x22c], esi
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x22c]
call fcn.00409d6c
mov byte [ebp - 4], 4
mov dword [ebp - 0x220], esi
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x220]
call fcn.00409d6c
push 0x104
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 5
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x21c]
push eax
call fcn.0040be23
pop ecx
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x220]
call fcn.0040bd90
push esi
mov esi, dword [ebp - 0x220]
lea ecx, [ebp + 8]
push esi
call fcn.0042b5eb
test eax, eax
jne 0x42bcdd
mov eax, dword [ebp + 8]
lea ecx, [ebp + 8]
mov eax, dword [eax - 0xc]
sub eax, dword [esi - 0xc]
push eax
push dword [esi - 0xc]
lea eax, [ebp - 0x3d8]
push eax
call fcn.00442c75
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.00423f23
mov ecx, dword [ebp - 0x3d8]
jmp 0x42c21f
mov dword [ebp - 0x2c0], 0x6b346e61
mov dword [ebp - 0x2bc], 0x4f4d6d42
mov dword [ebp - 0x2b8], 0x7855484e
mov dword [ebp - 0x2b4], 0x45675263
mov dword [ebp - 0x2b0], 0x45307943
mov dword [ebp - 0x2ac], 0x63675248
mov dword [ebp - 0x2a8], 0x44494844
mov dword [ebp - 0x2a4], 0x2f636842
mov dword [ebp - 0x2a0], 0x33515347
mov dword [ebp - 0x29c], 0x58675341
mov dword [ebp - 0x298], 0x5373414f
mov dword [ebp - 0x294], 0x5430544e
mov dword [ebp - 0x290], 0x4f4d7842
mov dword [ebp - 0x28c], 0x48777a45
mov dword [ebp - 0x288], 0x4949584e
mov dword [ebp - 0x284], 0x464d684b
mov dword [ebp - 0x280], 0x65346a63
mov dword [ebp - 0x27c], 0x63415749
mov dword [ebp - 0x278], 0x46597941
mov dword [ebp - 0x274], 0x5a676a43
mov dword [ebp - 0x270], 0x35454341
mov dword [ebp - 0x26c], 0x33556a4c
mov dword [ebp - 0x268], 0x54517a4e
mov dword [ebp - 0x264], 0x4a675341
mov dword [ebp - 0x260], 0x2b595849
mov dword [ebp - 0x25c], 0x41777842
mov dword [ebp - 0x258], 0x2b346964
mov dword [ebp - 0x254], 0x38636a48
mov dword [ebp - 0x250], 0x69515447
mov dword [ebp - 0x24c], 0x5951434a
mov dword [ebp - 0x248], 0x71736e4b
mov dword [ebp - 0x244], 0x59515464
mov dword [ebp - 0x240], 0x746f694a
mov dword [ebp - 0x23c], 0x41417741
mov word [ebp - 0x238], 0x4741
mov byte [ebp - 0x236], 0x4d
mov dword [ebp - 0x3d4], 0x44596a61
mov dword [ebp - 0x3d0], 0x4e51474a
mov dword [ebp - 0x3cc], 0x32496e4d
mov dword [ebp - 0x3c8], 0x45386843
mov dword [ebp - 0x3c4], 0x7477534a
mov dword [ebp - 0x3c0], 0x4a675263
mov dword [ebp - 0x3bc], 0x6d457944
mov dword [ebp - 0x3b8], 0x376b7966
mov dword [ebp - 0x3b4], 0x426b695a
mov dword [ebp - 0x3b0], 0x72344265
mov dword [ebp - 0x3ac], 0x6a344148
mov dword [ebp - 0x3a8], 0x78747a43
mov dword [ebp - 0x3a4], 0x47636e49
mov dword [ebp - 0x3a0], 0x34517843
mov dword [ebp - 0x39c], 0x44414149
mov dword [ebp - 0x398], 0x66556950
mov dword [ebp - 0x394], 0x65457a48
mov dword [ebp - 0x390], 0x62597a49
mov dword [ebp - 0x38c], 0x38346e4c
mov dword [ebp - 0x388], 0x61775250
mov dword [ebp - 0x384], 0x36556748
mov dword [ebp - 0x380], 0x3342694c
mov dword [ebp - 0x37c], 0x39386748
mov dword [ebp - 0x378], 0x5655784b
mov dword [ebp - 0x374], 0x70497a46
mov dword [ebp - 0x370], 0x72553245
mov dword [ebp - 0x36c], 0x70455144
mov dword [ebp - 0x368], 0x764d7745
mov dword [ebp - 0x364], 0x79387a45
mov dword [ebp - 0x360], 0x39387947
mov dword [ebp - 0x35c], 0x78744447
mov dword [ebp - 0x358], 0x75555450
mov dword [ebp - 0x354], 0x324d514b
mov dword [ebp - 0x350], 0x4a677745
mov dword [ebp - 0x34c], 0x554d4148
mov dword [ebp - 0x348], 0x4d6f4263
mov dword [ebp - 0x344], 0x2f457841
mov dword [ebp - 0x340], 0x58555266
mov dword [ebp - 0x33c], 0x38595347
mov dword [ebp - 0x338], 0x6a6f6950
mov dword [ebp - 0x334], 0x4e737a65
mov dword [ebp - 0x330], 0x42417848
mov dword [ebp - 0x32c], 0x50637a43
mov dword [ebp - 0x328], 0x6e386843
mov dword [ebp - 0x324], 0x2b55444d
push 0
sub esp, 0xc
mov dword [ebp - 0x320], 0x394e5345
mov ecx, esp
mov dword [ebp - 0x31c], 0x66676944
lea eax, [ebp - 0x22d]
mov dword [ebp - 0x318], 0x7663784a
lea edx, [ebp - 0x235]
mov dword [ebp - 0x314], 0x686b544d
push eax
push edx
lea esi, [ebp - 0x2c0]
mov dword [ebp - 0x310], 0x6638544d
push esi
mov dword [ebp - 0x30c], 0x436f7965
mov dword [ebp - 0x308], 0x77556942
mov dword [ebp - 0x304], 0x656f5159
mov dword [ebp - 0x300], 0x65594146
mov dword [ebp - 0x2fc], 0x6e4d5144
mov dword [ebp - 0x2f8], 0x68636743
mov dword [ebp - 0x2f4], 0x5655514a
mov dword [ebp - 0x2f0], 0x2b553248
mov dword [ebp - 0x2ec], 0x45387a62
mov dword [ebp - 0x2e8], 0x42305842
mov dword [ebp - 0x2e4], 0x6e516949
mov dword [ebp - 0x2e0], 0x6b6b6844
mov dword [ebp - 0x2dc], 0x76633342
mov dword [ebp - 0x2d8], 0x6849674b
mov dword [ebp - 0x2d4], 0x315a334e
mov dword [ebp - 0x2d0], 0x4759524d
mov dword [ebp - 0x2cc], 0x4545794e
mov dword [ebp - 0x2c8], 0x4149474d
mov dword [ebp - 0x2c4], 0x4b444141
call fcn.0040a169
lea eax, [ebp - 0x3f8]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.004103eb
push eax
lea eax, [ebp - 0x220]
push eax
push 0
sub esp, 0xc
lea eax, [ebp - 0x22d]
mov ecx, esp
lea edx, [ebp - 0x2c0]
lea esi, [ebp - 0x3d4]
push eax
push edx
push esi
call fcn.0040a169
lea eax, [ebp - 0x404]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004103eb
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.004249ea
add esp, 0xc
push eax
lea eax, [ebp - 0x3d8]
mov byte [ebp - 4], 9
push eax
call fcn.00424992
add esp, 0xc
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xa
call fcn.00423f23
mov ecx, dword [ebp - 0x3d8]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
lea ecx, [ebp - 0x404]
call fcn.00455078
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 5
call fcn.00455078
mov esi, dword [ebp - 0x220]
lea ecx, [ebp + 8]
push 0
push esi
call fcn.0042b5eb
test eax, eax
jne 0x42c22b
mov eax, dword [ebp + 8]
lea ecx, [ebp + 8]
mov eax, dword [eax - 0xc]
sub eax, dword [esi - 0xc]
push eax
push dword [esi - 0xc]
lea eax, [ebp - 0x224]
push eax
call fcn.00442c75
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call fcn.00423f23
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
mov byte [ebp - 4], 5
call fcn.0040bc6b
push ebx
call fcn.0040be23
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x22c]
call fcn.00426586
push edi
call fcn.0040be23
pop ecx
push eax
push edi
lea ecx, [ebp - 0x22c]
call fcn.00426586
lea eax, [ebp - 0x3e0]
push eax
push dword [ebp - 0x3dc]
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp + 8]
call fcn.0045002c
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0xc
call fcn.00423f23
mov ecx, dword [ebp - 0x224]
mov byte [ebp - 4], 5
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
mov edi, dword [ebp - 0x228]
mov ebx, dword [ebp - 0x234]
cmp dword [ebx - 0xc], 0
je 0x42c344
lea eax, [ebp - 0x3e0]
push eax
push dword [ebp - 0x3dc]
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp + 8]
call fcn.0045002c
push eax
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xd
call fcn.00423f23
mov ecx, dword [ebp - 0x224]
mov byte [ebp - 4], 5
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x234]
call fcn.00429365
mov edi, dword [ebp - 0x228]
test eax, eax
jne 0x42c32d
cmp dword [edi - 0xc], eax
je 0x42c344
push eax
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x228]
call fcn.0042b5eb
test eax, eax
je 0x42c344
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x228]
push eax
call fcn.00423f23
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x234]
call fcn.00423f23
jmp 0x42c297
lea ecx, [esi - 0x10]
call fcn.0040bc6b
mov ecx, dword [ebp - 0x22c]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
lea ecx, [edi - 0x10]
call fcn.0040bc6b
lea ecx, [ebx - 0x10]
call fcn.0040bc6b
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
call fcn.0045a8ac
ret