Function at 0x425fc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x1e8
mov eax, dword [0x457664]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x90], 0xbd4ee3e4
mov dword [ebp - 0x8c], 0xdf46efee
mov dword [ebp - 0x88], 0xdf46f874
mov dword [ebp - 0x84], 0xa3469278
mov dword [ebp - 0x80], 0xcc46b76c
mov dword [ebp - 0x7c], 0x97462561
mov dword [ebp - 0x78], 0xd1414f52
mov dword [ebp - 0x140], 0xe4dce451
mov dword [ebp - 0x13c], 0x7d46efee
mov dword [ebp - 0x138], 0xd6463074
mov dword [ebp - 0x134], 0xe464e78
mov dword [ebp - 0x130], 0x3f464b6c
mov dword [ebp - 0x12c], 0x7464461
mov dword [ebp - 0x128], 0x78412a52
mov dword [ebp - 0x124], 0x2341ba46
mov dword [ebp - 0x120], 0x4b41503b
mov dword [ebp - 0x11c], 0x541042f
mov dword [ebp - 0x118], 0x541df33
mov dword [ebp - 0x114], 0x54419427
mov dword [ebp - 0x110], 0x417a18
mov dword [ebp - 0x10c], 0xc341fa0c
mov dword [ebp - 0x108], 0xa941f901
mov dword [ebp - 0x104], 0x354182f5
mov dword [ebp - 0x100], 0xd141edee
mov dword [ebp - 0xfc], 0x541f3e2
mov dword [ebp - 0xf8], 0xdb418dd7
mov dword [ebp - 0xf4], 0xd34156cb
mov dword [ebp - 0xf0], 0x2341e1bc
mov dword [ebp - 0xec], 0xe841f9b0
mov dword [ebp - 0xe8], 0xdf412ca5
mov dword [ebp - 0xe4], 0x23412896
mov dword [ebp - 0xe0], 0x6441ae8a
mov dword [ebp - 0xdc], 0xd141f57f
mov dword [ebp - 0xd8], 0x541c082
mov dword [ebp - 0xd4], 0x414977
mov dword [ebp - 0xd0], 0x41e16b
mov dword [ebp - 0xcc], 0x7d41e55c
mov dword [ebp - 0xc8], 0x1a41a250
mov dword [ebp - 0xc4], 0xba417d45
mov dword [ebp - 0xc0], 0xe8413839
mov dword [ebp - 0xbc], 0xdb412832
mov dword [ebp - 0xb8], 0x3b41d426
mov word [ebp - 0xb4], 0xb71b
mov dword [ebp - 0x40], 0x8242f7e4
mov dword [ebp - 0x3c], 0xe846efee
mov dword [ebp - 0x38], 0xc346ce74
mov dword [ebp - 0x34], 0xe8464c78
mov dword [ebp - 0x30], 0xbe46946c
mov dword [ebp - 0x2c], 0x835ba461
mov dword [ebp - 0xac], 0xbd4ee3e4
mov dword [ebp - 0xa8], 0xe546efee
mov dword [ebp - 0xa4], 0xdb46a574
mov dword [ebp - 0xa0], 0xa7463178
mov dword [ebp - 0x9c], 0x546456c
mov dword [ebp - 0x98], 0x7c463c61
mov dword [ebp - 0x94], 0x6d41cb52
mov dword [ebp - 0x74], 0xe440e48a
mov dword [ebp - 0x70], 0xc346efee
mov dword [ebp - 0x6c], 0xdb46f374
mov dword [ebp - 0x68], 0xbe4698c3
mov dword [ebp - 0x64], 0x8310ad6c
mov dword [ebp - 0x60], 0x8346ff61
mov word [ebp - 0x5c], 0x2a2f
mov dword [ebp - 0x28], 0x9646c4e4
mov dword [ebp - 0x24], 0x2146efee
mov dword [ebp - 0x20], 0x8e46f374
mov dword [ebp - 0x1c], 0xbe46ef73
mov dword [ebp - 0x18], 0xff373a6c
mov dword [ebp - 0x14], 0xe45ce3f7
mov dword [ebp - 0x10], 0x2046efee
mov dword [ebp - 0xc], 0x946f374
mov word [ebp - 8], 0x2bc3
mov dword [ebp - 0x58], 0x8242f7e4
mov dword [ebp - 0x54], 0x2146efee
mov dword [ebp - 0x50], 0x2c466c74
mov dword [ebp - 0x4c], 0x20466978
mov dword [ebp - 0x48], 0xbe46646c
mov dword [ebp - 0x44], 0xff07f461
call fcn.0041bf00
mov dword [ebp - 0x14c], eax
call fcn.00435d50
cmp eax, 1
jne 0x4266e9
push 0
push 0
push 0
lea eax, [ebp - 0x90]
push eax
call fcn.004201b0
push 0
push 0
mov edi, eax
lea eax, [ebp - 0x140]
push 0
push eax
call fcn.004201b0
mov esi, eax
push esi
push edi
push 0
call fcn.00435de0
push edi
mov dword [ebp - 0x15c], eax
call fcn.0041fc30
push esi
call fcn.0041fc30
mov edi, dword [ebp - 0x15c]
test edi, edi
je 0x4266e4
mov eax, dword [edi]
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x144]
push ecx
mov eax, dword [eax + 0x10]
push 1
push 0xffffffffffffffff
push edi
call eax
push 0
push 0
mov esi, eax
lea eax, [ebp - 0x40]
push 0
push eax
call fcn.004201b0
push 0
push 0
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.004201b0
push 0
push 0
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.004201b0
push 0
push 0
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x28]
push 0
push eax
call fcn.004201b0
push 0
push 0
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.004201b0
push 0
push 0
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x58]
push 0
push eax
call fcn.004201b0
mov dword [ebp - 0x174], eax
test esi, esi
jne 0x426688
nop word [eax + eax]
push dword [ebp - 0x160]
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x158], 0
push dword [ebp - 0x144]
push eax
call fcn.004351c0
push dword [ebp - 0x164]
push dword [ebp - 0x144]
movups xmm0, xmmword [eax]
lea eax, [ebp - 0x1d0]
push eax
movups xmmword [ebp - 0x190], xmm0
call fcn.004351c0
push dword [ebp - 0x170]
push dword [ebp - 0x144]
movups xmm0, xmmword [eax]
lea eax, [ebp - 0x1e0]
push eax
movups xmmword [ebp - 0x1b0], xmm0
call fcn.004351c0
cmp word [ebp - 0x1b0], 1
mov esi, dword [ebp - 0x188]
mov dword [ebp - 0x150], esi
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1a0], xmm0
je 0x426460
movzx eax, word [ebp - 0x1a8]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x1b0]
push eax
call dword [ebp - 0x14c]
cmp word [ebp - 0x1a0], 1
je 0x4264ad
mov esi, dword [ebp - 0x198]
push esi
call fcn.00404da0
test eax, eax
jne 0x4265db
push esi
call fcn.00404330
test eax, eax
jne 0x4265db
push esi
call fcn.004270d0
test eax, eax
je 0x4265db
lea eax, [ebp - 0x1a0]
push eax
call dword [ebp - 0x14c]
mov esi, dword [ebp - 0x150]
cmp word [ebp - 0x190], 1
je 0x42664d
test esi, esi
je 0x426640
lea eax, [ebp - 0x148]
push eax
push esi
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
test eax, eax
jne 0x42667b
mov eax, dword [ebp - 0x150]
xor edi, edi
xor esi, esi
mov eax, dword [eax + 0x10]
test eax, eax
je 0x42662e
nop
cmp eax, 1
jbe 0x426517
mov eax, dword [ebp - 0x148]
push 0x443388
push dword [eax + esi*4]
call sub.VCRUNTIME140.dll_wcsstr
add esp, 8
test eax, eax
je 0x426517
test edi, edi
jne 0x42660d
mov eax, dword [ebp - 0x148]
push dword [eax + esi*4]
push dword [ebp - 0x168]
call fcn.0041ea70
cmp eax, 1
je 0x42660d
mov eax, dword [ebp - 0x148]
push dword [eax + esi*4]
push dword [ebp - 0x16c]
call fcn.0041ea70
cmp eax, 1
je 0x42660d
mov eax, dword [ebp - 0x148]
push dword [eax + esi*4]
push dword [ebp - 0x174]
call fcn.0041ea70
cmp eax, 1
je 0x42660d
mov eax, dword [ebp - 0x148]
push dword [eax + esi*4]
movzx eax, word [0x52223c]
imul eax, eax, 0x202
push 0x100
add eax, 0x521a30
push eax
call fcn.0041ec50
cmp eax, 1
jne 0x42660d
movzx eax, word [0x52223c]
imul eax, eax, 0x202
add eax, 0x521a30
push eax
call fcn.00421270
cmp eax, 1
je 0x426601
cmp word [ebp - 0x158], 0
jne 0x426601
mov ax, word [0x52223c]
mov edi, 1
inc ax
mov dword [0x522240], edi
mov word [0x52223c], ax
jmp 0x426607
cmp word [ebp - 0x190], 1
je 0x4265f2
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x1a0]
push eax
call dword [ebp - 0x14c]
jmp 0x426657
mov ax, word [0x52223c]
cmp ax, 4
jae 0x426621
mov eax, dword [ebp - 0x150]
inc esi
mov eax, dword [eax + 0x10]
cmp esi, eax
jb 0x4264f0
jmp 0x42662e
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x150]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
mov edi, dword [ebp - 0x15c]
lea eax, [ebp - 0x190]
push eax
call dword [ebp - 0x14c]
cmp word [0x52223c], 4
jae 0x426688
mov eax, dword [edi]
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x144]
push ecx
mov eax, dword [eax + 0x10]
push 1
push 0xffffffffffffffff
push edi
call eax
test eax, eax
je 0x4263c0
jmp 0x426688
lea eax, [ebp - 0x190]
push eax
call dword [ebp - 0x14c]
push dword [ebp - 0x160]
call fcn.0041fc30
push dword [ebp - 0x164]
call fcn.0041fc30
push dword [ebp - 0x168]
call fcn.0041fc30
push dword [ebp - 0x16c]
call fcn.0041fc30
push dword [ebp - 0x170]
call fcn.0041fc30
push dword [ebp - 0x174]
call fcn.0041fc30
mov ecx, dword [ebp - 0x144]
test ecx, ecx
je 0x4266dc
mov eax, dword [ecx]
push ecx
mov eax, dword [eax + 8]
call eax
mov eax, dword [edi]
push edi
mov eax, dword [eax + 8]
call eax
call fcn.00435ed0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00441849
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret