Function at 0x43d4eb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x168
mov eax, 0x490892
call fcn.0045a95a
mov esi, dword [ebp + 8]
xor eax, eax
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x160], 0x3478334d
mov dword [ebp - 0x15c], 0x474d5766
mov dword [ebp - 0x158], 0x784a5846
mov dword [ebp - 0x154], 0x36783362
mov dword [ebp - 0x150], 0x72463363
mov dword [ebp - 0x14c], 0x39564764
mov dword [ebp - 0x148], 0x456b3264
mov dword [ebp - 0x144], 0x6d425765
mov dword [ebp - 0x140], 0x6a4e3265
mov dword [ebp - 0x13c], 0x686c3365
mov dword [ebp - 0x138], 0x34784865
mov dword [ebp - 0x134], 0x32465766
mov dword [ebp - 0x130], 0x7839545a
mov dword [ebp - 0x12c], 0x37495143
mov dword [ebp - 0x128], 0x564d544f
mov dword [ebp - 0x124], 0x345a4150
mov dword [ebp - 0x120], 0x71345350
mov dword [ebp - 0x11c], 0x7a6b4749
mov dword [ebp - 0x118], 0x68645750
mov dword [ebp - 0x114], 0x3267534d
mov dword [ebp - 0x110], 0x396b6948
mov dword [ebp - 0x10c], 0x7159684b
mov dword [ebp - 0x108], 0x3270684b
mov dword [ebp - 0x104], 0x366f6e4e
mov dword [ebp - 0x100], 0x5a675164
mov dword [ebp - 0xfc], 0x31316842
mov dword [ebp - 0xf8], 0x775a3343
mov dword [ebp - 0xf4], 0x44456947
mov dword [ebp - 0xf0], 0x57634741
mov dword [ebp - 0xec], 0x6f6b334c
mov dword [ebp - 0xe8], 0x4259444c
mov dword [ebp - 0xe4], 0x76737849
mov dword [ebp - 0xe0], 0x6d596a4d
mov dword [ebp - 0xdc], 0x4f385243
mov dword [ebp - 0xd8], 0x4d634249
mov dword [ebp - 0xd4], 0x6534524d
mov dword [ebp - 0xd0], 0x33593350
mov dword [ebp - 0xcc], 0x626b4243
mov dword [ebp - 0xc8], 0x6e647950
mov dword [ebp - 0xc4], 0x664d6843
mov dword [ebp - 0xc0], 0x38747865
mov dword [ebp - 0xbc], 0x56596741
mov dword [ebp - 0xb8], 0x4b496841
mov dword [ebp - 0xb4], 0x4d77334a
mov dword [ebp - 0xb0], 0x7a77324b
mov dword [ebp - 0xac], 0x4830684a
mov dword [ebp - 0xa8], 0x7830684d
mov dword [ebp - 0xa4], 0x33307843
mov dword [ebp - 0xa0], 0x6d6c6a44
mov dword [ebp - 0x9c], 0x3734514c
mov dword [ebp - 0x98], 0x61307766
mov dword [ebp - 0x94], 0x59633244
mov dword [ebp - 0x90], 0x784d5143
mov dword [ebp - 0x8c], 0x6a4d7764
mov dword [ebp - 0x88], 0x2f647843
mov dword [ebp - 0x84], 0x754d7a47
mov dword [ebp - 0x80], 0x7a785345
mov dword [ebp - 0x7c], 0x4f736844
mov dword [ebp - 0x78], 0x6b4a784d
mov dword [ebp - 0x74], 0x66417749
mov dword [ebp - 0x70], 0x67305842
mov dword [ebp - 0x6c], 0x6d413250
mov dword [ebp - 0x68], 0x42455442
mov dword [ebp - 0x64], 0x4e6b6e4c
mov dword [ebp - 0x60], 0x57736946
mov dword [ebp - 0x5c], 0x36455764
mov dword [ebp - 0x58], 0x69455244
mov dword [ebp - 0x54], 0x76746a46
mov dword [ebp - 0x50], 0x5977514d
mov dword [ebp - 0x4c], 0x7a454349
mov dword [ebp - 0x48], 0x4d736743
mov dword [ebp - 0x44], 0x5645434a
mov dword [ebp - 0x40], 0x656b4349
mov dword [ebp - 0x3c], 0x7359444d
push eax
sub esp, 0xc
mov dword [ebp - 0x38], 0x774d5263
mov ecx, esp
mov dword [ebp - 0x34], 0x41414141
lea eax, [ebp - 0x161]
mov word [ebp - 0x30], 0x7775
lea edx, [ebp - 0x2e]
push eax
push edx
lea ebx, [ebp - 0x160]
push ebx
call fcn.0040a169
lea eax, [ebp - 0x174]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004103eb
push eax
lea ecx, [ebp - 0x2c]
call fcn.00409dd5
lea ecx, [ebp - 0x174]
call fcn.00455078
mov byte [ebp - 4], 4
test esi, esi
je 0x43d89c
mov eax, dword [esi]
lea ecx, [ebp - 0x18]
push ecx
push 0x494fe0
push esi
call dword [eax]
test eax, eax
js 0x43d89c
mov eax, dword [ebp - 0x2c]
cmp dword [eax - 4], 1
jle 0x43d849
push dword [eax - 0xc]
lea ecx, [ebp - 0x2c]
call fcn.0040b854
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
push 0xffffffffffffffff
lea ecx, [ebp - 0x2c]
call fcn.00444354
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
push edi
push 0x495040
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
test eax, eax
js 0x43d8a2
call fcn.0040bc6b
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x43d891
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
xor eax, eax
inc eax
jmp 0x43d8ba
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x43d8b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
call fcn.0045a8ac
ret 8