Function at 0x43c6c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x2b8
mov eax, 0x4907bb
call fcn.0045a95a
mov eax, dword [ebp + 0xc]
lea edx, [ebp - 0x15d]
mov ebx, dword [ebp + 8]
lea esi, [ebp - 0x1c8]
push 0
sub esp, 0xc
mov dword [ebp - 0x2a0], eax
mov ecx, esp
mov dword [ebp - 0x1c8], 0x4e417742
lea eax, [ebp - 0x29]
mov dword [ebp - 0x1c4], 0x42494244
mov dword [ebp - 0x1c0], 0x49595166
push eax
push edx
push esi
mov dword [ebp - 0x1bc], 0x4f456944
mov dword [ebp - 0x1b8], 0x65497764
mov dword [ebp - 0x1b4], 0x42495349
mov dword [ebp - 0x1b0], 0x55594441
mov dword [ebp - 0x1ac], 0x5534425a
mov dword [ebp - 0x1a8], 0x6651795a
mov dword [ebp - 0x1a4], 0x6f4d4446
mov dword [ebp - 0x1a0], 0x614d6950
mov dword [ebp - 0x19c], 0x33777a65
mov dword [ebp - 0x198], 0x784d4149
mov dword [ebp - 0x194], 0x47676e44
mov dword [ebp - 0x190], 0x7867414e
mov dword [ebp - 0x18c], 0x58305364
mov dword [ebp - 0x188], 0x3146514e
mov dword [ebp - 0x184], 0x756b6a42
mov dword [ebp - 0x180], 0x69524359
mov dword [ebp - 0x17c], 0x64594350
mov dword [ebp - 0x178], 0x38315445
mov dword [ebp - 0x174], 0x31496844
mov dword [ebp - 0x170], 0x325a334a
mov dword [ebp - 0x16c], 0x35675343
mov dword [ebp - 0x168], 0x73633346
mov dword [ebp - 0x164], 0x41415166
mov word [ebp - 0x160], 0x4541
mov byte [ebp - 0x15e], 0x49
call fcn.0040a169
lea eax, [ebp - 0x2b8]
push eax
call fcn.0042a1df
add esp, 0x10
xor esi, esi
mov ecx, eax
mov dword [ebp - 4], esi
call fcn.004103eb
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
mov edi, eax
call fcn.00455078
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x298], 0x3670334d
mov dword [ebp - 0x294], 0x68637a65
mov dword [ebp - 0x290], 0x30426e5a
mov dword [ebp - 0x28c], 0x2b317962
mov dword [ebp - 0x288], 0x72526963
mov dword [ebp - 0x284], 0x75515764
mov dword [ebp - 0x280], 0x6d6b5749
mov dword [ebp - 0x27c], 0x6e4e6d66
mov dword [ebp - 0x278], 0x6a4e3265
mov dword [ebp - 0x274], 0x796b6e4b
mov dword [ebp - 0x270], 0x77785863
mov dword [ebp - 0x26c], 0x78643266
mov dword [ebp - 0x268], 0x6a38445a
mov dword [ebp - 0x264], 0x5a345146
mov dword [ebp - 0x260], 0x2b6b4464
mov dword [ebp - 0x25c], 0x4c414441
mov dword [ebp - 0x258], 0x43635364
mov dword [ebp - 0x254], 0x6c644465
mov dword [ebp - 0x250], 0x6741534d
mov dword [ebp - 0x24c], 0x3559514f
mov dword [ebp - 0x248], 0x79595448
mov dword [ebp - 0x244], 0x4934524f
mov dword [ebp - 0x240], 0x7a5a4248
push esi
sub esp, 0xc
mov dword [ebp - 0x23c], 0x446f484e
mov ecx, esp
mov dword [ebp - 0x238], 0x7a4a694b
lea eax, [ebp - 0x29]
mov dword [ebp - 0x234], 0x67416d45
lea edx, [ebp - 0x1c9]
mov dword [ebp - 0x230], 0x664d5245
push eax
push edx
lea esi, [ebp - 0x298]
mov dword [ebp - 0x22c], 0x65494147
push esi
mov dword [ebp - 0x228], 0x32497841
mov dword [ebp - 0x224], 0x556f7a4a
mov dword [ebp - 0x220], 0x46384163
mov dword [ebp - 0x21c], 0x316b794e
mov dword [ebp - 0x218], 0x76734259
mov dword [ebp - 0x214], 0x3538674d
mov dword [ebp - 0x210], 0x79745149
mov dword [ebp - 0x20c], 0x65454443
mov dword [ebp - 0x208], 0x56415846
mov dword [ebp - 0x204], 0x4367474f
mov dword [ebp - 0x200], 0x41634250
mov dword [ebp - 0x1fc], 0x4f456847
mov dword [ebp - 0x1f8], 0x345a4241
mov dword [ebp - 0x1f4], 0x62675346
mov dword [ebp - 0x1f0], 0x7945524f
mov dword [ebp - 0x1ec], 0x4a383344
mov dword [ebp - 0x1e8], 0x78744348
mov dword [ebp - 0x1e4], 0x4b73784a
mov dword [ebp - 0x1e0], 0x39635345
mov dword [ebp - 0x1dc], 0x6d785244
mov dword [ebp - 0x1d8], 0x685a7962
mov dword [ebp - 0x1d4], 0x45384865
mov dword [ebp - 0x1d0], 0x4141514b
mov word [ebp - 0x1cc], 0x4841
mov byte [ebp - 0x1ca], 0x45
call fcn.0040a169
lea eax, [ebp - 0x2c4]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.004103eb
push eax
lea ecx, [ebp - 0x30]
call fcn.00409dd5
lea ecx, [ebp - 0x2c4]
call fcn.00455078
mov byte [ebp - 4], 4
test edi, edi
je 0x43cf72
push 0
sub esp, 0xc
mov dword [ebp - 0xcc], 0x58457748
mov ecx, esp
mov dword [ebp - 0xc8], 0x50555142
lea eax, [ebp - 0x29]
mov dword [ebp - 0xc4], 0x44307848
lea edx, [ebp - 0x32]
mov dword [ebp - 0xc0], 0x46677842
push eax
push edx
lea esi, [ebp - 0xcc]
mov dword [ebp - 0xbc], 0x44735141
push esi
mov dword [ebp - 0xb8], 0x2b457742
mov dword [ebp - 0xb4], 0x31775242
mov dword [ebp - 0xb0], 0x3363774c
mov dword [ebp - 0xac], 0x376f7742
mov dword [ebp - 0xa8], 0x6a346e4a
mov dword [ebp - 0xa4], 0x764d7941
mov dword [ebp - 0xa0], 0x58557a4b
mov dword [ebp - 0x9c], 0x6249684f
mov dword [ebp - 0x98], 0x6b67774c
mov dword [ebp - 0x94], 0x314d514c
mov dword [ebp - 0x90], 0x48497744
mov dword [ebp - 0x8c], 0x33303363
mov dword [ebp - 0x88], 0x2b6b5445
mov dword [ebp - 0x84], 0x65415449
mov dword [ebp - 0x80], 0x56496944
mov dword [ebp - 0x7c], 0x35304142
mov dword [ebp - 0x78], 0x766b5743
mov dword [ebp - 0x74], 0x3330784e
mov dword [ebp - 0x70], 0x544d6863
mov dword [ebp - 0x6c], 0x78735242
mov dword [ebp - 0x68], 0x6c515243
mov dword [ebp - 0x64], 0x6551424e
mov dword [ebp - 0x60], 0x36307845
mov dword [ebp - 0x5c], 0x6b747948
mov dword [ebp - 0x58], 0x5759424f
mov dword [ebp - 0x54], 0x67494141
mov dword [ebp - 0x50], 0x7659774c
mov dword [ebp - 0x4c], 0x656f484a
mov dword [ebp - 0x48], 0x4f674163
mov dword [ebp - 0x44], 0x726c5341
mov dword [ebp - 0x40], 0x386f4441
mov dword [ebp - 0x3c], 0x7a636741
mov dword [ebp - 0x38], 0x41414141
mov word [ebp - 0x34], 0x6758
call fcn.0040a169
lea eax, [ebp - 0x2ac]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004103eb
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 4
mov esi, eax
call fcn.00455078
lea eax, [ebp - 0x18]
push eax
push 0x3e8
push 2
push 0
push 0
push esi
push ebx
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
test eax, eax
je 0x43cf72
push 0
sub esp, 0xc
mov dword [ebp - 0x15c], 0x69347942
mov dword [ebp - 0x158], 0x3249444b
lea esi, [ebp - 0x15c]
mov dword [ebp - 0x154], 0x72415446
lea edx, [ebp - 0x30]
mov dword [ebp - 0x150], 0x3441774c
lea eax, [ebp - 0x29]
mov dword [ebp - 0x14c], 0x7a496a4a
mov ecx, esp
mov dword [ebp - 0x148], 0x3546434b
mov dword [ebp - 0x144], 0x6c594446
mov dword [ebp - 0x140], 0x77675366
mov dword [ebp - 0x13c], 0x39514444
mov dword [ebp - 0x138], 0x68786747
mov dword [ebp - 0x134], 0x4b345345
mov dword [ebp - 0x130], 0x52496842
mov dword [ebp - 0x12c], 0x30515450
mov dword [ebp - 0x128], 0x64594146
mov dword [ebp - 0x124], 0x4a6b4864
mov dword [ebp - 0x120], 0x315a6d48
mov dword [ebp - 0x11c], 0x6d49424a
mov dword [ebp - 0x118], 0x675a6750
mov dword [ebp - 0x114], 0x796f7950
mov dword [ebp - 0x110], 0x5a6f4142
mov dword [ebp - 0x10c], 0x42675163
mov dword [ebp - 0x108], 0x31635464
mov dword [ebp - 0x104], 0x39515147
mov dword [ebp - 0x100], 0x464d414f
mov dword [ebp - 0xfc], 0x7a597843
mov dword [ebp - 0xf8], 0x66454463
mov dword [ebp - 0xf4], 0x4b635143
mov dword [ebp - 0xf0], 0x52514765
mov dword [ebp - 0xec], 0x336b4349
mov dword [ebp - 0xe8], 0x446f6950
mov dword [ebp - 0xe4], 0x68555844
mov dword [ebp - 0xe0], 0x57347849
mov dword [ebp - 0xdc], 0x6d415249
mov dword [ebp - 0xd8], 0x74344446
mov dword [ebp - 0xd4], 0x66385164
mov dword [ebp - 0xd0], 0x35496d4e
mov dword [ebp - 0xcc], 0x41456744
mov dword [ebp - 0xc8], 0x386b7a49
mov dword [ebp - 0xc4], 0x66493249
mov dword [ebp - 0xc0], 0x68776748
mov dword [ebp - 0xbc], 0x42494149
mov dword [ebp - 0xb8], 0x6b416a41
mov dword [ebp - 0xb4], 0x726b674e
mov dword [ebp - 0xb0], 0x5430444c
mov dword [ebp - 0xac], 0x5a49544f
mov dword [ebp - 0xa8], 0x65307a64
mov dword [ebp - 0xa4], 0x77427864
mov dword [ebp - 0xa0], 0x695a514d
mov dword [ebp - 0x9c], 0x64737846
mov dword [ebp - 0x98], 0x4c385144
mov dword [ebp - 0x94], 0x37786a4b
mov dword [ebp - 0x90], 0x30734241
mov dword [ebp - 0x8c], 0x30704244
mov dword [ebp - 0x88], 0x6c4d6943
mov dword [ebp - 0x84], 0x7834514c
mov dword [ebp - 0x80], 0x584d5445
mov dword [ebp - 0x7c], 0x4b494241
mov dword [ebp - 0x78], 0x6838784f
mov dword [ebp - 0x74], 0x566b6a50
mov dword [ebp - 0x70], 0x7a517742
mov dword [ebp - 0x6c], 0x79774241
mov dword [ebp - 0x68], 0x44635749
mov dword [ebp - 0x64], 0x2b67674b
mov dword [ebp - 0x60], 0x2f303347
mov dword [ebp - 0x5c], 0x5773444c
mov dword [ebp - 0x58], 0x39597941
mov dword [ebp - 0x54], 0x4c4d5344
mov dword [ebp - 0x50], 0x6c45414a
mov dword [ebp - 0x4c], 0x686c5150
mov dword [ebp - 0x48], 0x6d515350
mov dword [ebp - 0x44], 0x44385248
mov dword [ebp - 0x40], 0x78564359
mov dword [ebp - 0x3c], 0x72516a41
mov dword [ebp - 0x38], 0x4138544c
mov dword [ebp - 0x34], 0x4d444141
push eax
push edx
push esi
call fcn.0040a169
lea eax, [ebp - 0x2ac]
push eax
call fcn.0042a0a8
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004103c8
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 4
mov esi, eax
call fcn.00455078
test esi, esi
jne 0x43cf87
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
xor eax, eax
call fcn.0045a8ac
ret 8
mov eax, dword [ebp - 0x30]
cmp dword [eax - 4], 1
jle 0x43cf9e
push dword [eax - 0xc]
lea ecx, [ebp - 0x30]
call fcn.0040b854
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
push 0xffffffffffffffff
lea ecx, [ebp - 0x30]
mov ebx, eax
call fcn.00444354
test ebx, ebx
js 0x43cf6b
mov ebx, dword [ebp - 0x2a0]
push ebx
push 0
push 0x495020
push dword [ebp - 0x18]
call esi
push edi
test eax, eax
js 0x43cf6c
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
xor eax, eax
test ebx, ebx
setne al
jmp 0x43cf7f