Function at 0x42a54a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1e0
mov eax, 0x48f246
call fcn.0045a8ee
mov ebx, ecx
lea esi, [ebx + 0xb8]
xor edi, edi
mov eax, dword [esi]
mov dword [ebp - 4], edi
cmp dword [eax - 0xc], edi
je 0x42a587
push dword [ebp + 8]
mov ecx, esi
call fcn.00429365
test eax, eax
jne 0x42a587
mov ecx, esi
call fcn.0040b7b5
jmp 0x42b0bd
mov ecx, esi
call fcn.0040b7b5
lea ecx, [ebx + 0x24]
call fcn.00440b69
test al, al
je 0x42b0bd
push dword [ebp + 8]
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x170], edi
call fcn.00409dd5
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], edi
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x18]
call fcn.00409d6c
push dword [ebp - 0x170]
lea edi, [ebx + 0xb0]
mov byte [ebp - 4], 2
mov ecx, edi
call fcn.00429365
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x170]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x16c], esp
mov esi, esp
push eax
call fcn.0042921f
add eax, 0x10
mov dword [esi], eax
mov eax, dword [edi]
mov esi, esp
sub eax, 0x10
mov byte [ebp - 4], 3
push eax
call fcn.0042921f
pop ecx
add eax, 0x10
lea ecx, [ebx + 4]
mov dword [esi], eax
mov byte [ebp - 4], 2
call fcn.00426c7c
test al, al
je 0x42b08a
mov eax, dword [ebp - 0x18]
xor edi, edi
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x14], edi
mov esi, esp
push eax
call fcn.0042921f
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebx + 0x24]
lea eax, [ebp - 0x14]
push eax
call fcn.0043aa35
cmp byte [ebx + 0xd], 0
mov byte [ebp - 4], 4
je 0x42aa43
mov dword [ebp - 0x1d4], 0x366b694b
mov dword [ebp - 0x1d0], 0x32354444
mov dword [ebp - 0x1cc], 0x5841434f
mov dword [ebp - 0x1c8], 0x385a7a64
mov dword [ebp - 0x1c4], 0x71307944
mov dword [ebp - 0x1c0], 0x36426d64
mov dword [ebp - 0x1bc], 0x43305843
mov dword [ebp - 0x1b8], 0x6855674b
mov dword [ebp - 0x1b4], 0x5851695a
mov dword [ebp - 0x1b0], 0x51453366
mov dword [ebp - 0x1ac], 0x62386949
mov dword [ebp - 0x1a8], 0x55676948
mov dword [ebp - 0x1a4], 0x3167414a
mov dword [ebp - 0x1a0], 0x70384243
mov dword [ebp - 0x19c], 0x31524446
mov dword [ebp - 0x198], 0x61556d4e
mov dword [ebp - 0x194], 0x76455248
mov dword [ebp - 0x190], 0x37425749
mov dword [ebp - 0x18c], 0x4630784d
mov dword [ebp - 0x188], 0x6d6b6a4d
mov dword [ebp - 0x184], 0x64595366
mov dword [ebp - 0x180], 0x6d51514b
mov dword [ebp - 0x17c], 0x394d4441
mov dword [ebp - 0x178], 0x41417744
mov word [ebp - 0x174], 0x4541
mov byte [ebp - 0x172], 0x4d
mov dword [ebp - 0x164], 0x6e346962
mov dword [ebp - 0x160], 0x6e78324f
mov dword [ebp - 0x15c], 0x75494449
mov dword [ebp - 0x158], 0x46516e42
mov dword [ebp - 0x154], 0x66496a4f
mov dword [ebp - 0x150], 0x6a4d7843
mov dword [ebp - 0x14c], 0x77637945
mov dword [ebp - 0x148], 0x754e324f
mov dword [ebp - 0x144], 0x46553247
mov dword [ebp - 0x140], 0x6f6b4447
mov dword [ebp - 0x13c], 0x36595444
mov dword [ebp - 0x138], 0x4f414141
mov dword [ebp - 0x134], 0x43595845
mov dword [ebp - 0x130], 0x47597865
mov dword [ebp - 0x12c], 0x7a636942
mov dword [ebp - 0x128], 0x47673346
mov dword [ebp - 0x124], 0x57416a42
mov dword [ebp - 0x120], 0x776f6947
mov dword [ebp - 0x11c], 0x596b5242
mov dword [ebp - 0x118], 0x36346e45
mov dword [ebp - 0x114], 0x5173534a
mov dword [ebp - 0x110], 0x32783342
mov dword [ebp - 0x10c], 0x416f514a
mov dword [ebp - 0x108], 0x2f6c794c
mov dword [ebp - 0x104], 0x7a51424d
mov dword [ebp - 0x100], 0x6b634148
mov dword [ebp - 0xfc], 0x53304442
mov dword [ebp - 0xf8], 0x37466d48
mov dword [ebp - 0xf4], 0x556b684a
mov dword [ebp - 0xf0], 0x69554366
mov dword [ebp - 0xec], 0x2f6f4265
mov dword [ebp - 0xe8], 0x45595366
mov dword [ebp - 0xe4], 0x38556a46
mov dword [ebp - 0xe0], 0x79777a4a
mov dword [ebp - 0xdc], 0x336f5343
mov dword [ebp - 0xd8], 0x38516d63
mov dword [ebp - 0xd4], 0x794d7941
mov dword [ebp - 0xd0], 0x37307a65
mov dword [ebp - 0xcc], 0x67424748
mov dword [ebp - 0xc8], 0x2f73684b
mov dword [ebp - 0xc4], 0x76345244
mov dword [ebp - 0xc0], 0x7759324f
mov dword [ebp - 0xbc], 0x3863585a
mov dword [ebp - 0xb8], 0x51346864
mov dword [ebp - 0xb4], 0x736b6e4e
mov dword [ebp - 0xb0], 0x6d49434d
mov dword [ebp - 0xac], 0x4f45784b
mov dword [ebp - 0xa8], 0x35736849
mov dword [ebp - 0xa4], 0x71495341
mov dword [ebp - 0xa0], 0x37384349
mov dword [ebp - 0x9c], 0x4e514366
mov dword [ebp - 0x98], 0x325a6a47
mov dword [ebp - 0x94], 0x77525847
mov dword [ebp - 0x90], 0x48494143
mov dword [ebp - 0x8c], 0x4d455841
push edi
sub esp, 0xc
mov dword [ebp - 0x88], 0x35306764
mov ecx, esp
mov dword [ebp - 0x84], 0x694d534e
lea eax, [ebp - 0x71]
mov dword [ebp - 0x80], 0x56494365
lea edx, [ebp - 0x171]
mov dword [ebp - 0x7c], 0x41417744
push eax
push edx
lea esi, [ebp - 0x1d4]
mov word [ebp - 0x78], 0x4b41
push esi
mov byte [ebp - 0x76], 0x67
call fcn.0040a169
lea eax, [ebp - 0x1e0]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004103eb
push eax
push edi
sub esp, 0xc
lea eax, [ebp - 0x71]
mov ecx, esp
lea edx, [ebp - 0x75]
lea esi, [ebp - 0x164]
push eax
push edx
push esi
call fcn.0040a169
lea eax, [ebp - 0x1ec]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004103eb
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00426614
add esp, 0xc
lea ecx, [ebp - 0x1ec]
call fcn.00455078
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 4
call fcn.00455078
push dword [ebp - 0x14]
xor eax, eax
lea ecx, [ebp - 0x38]
mov word [ebp - 0x38], ax
call fcn.004243f1
xor eax, eax
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebx]
lea edx, [ebp - 0x28]
push edx
push edx
push edx
mov ecx, dword [eax]
push edx
lea edx, [ebp - 0x38]
mov byte [ebp - 4], 8
push edx
push eax
call dword [ecx + 0xd0]
mov eax, dword [ebp - 0x18]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.0042921f
add eax, 0x10
pop ecx
mov dword [esi], eax
lea ecx, [ebx + 0x24]
lea eax, [ebp - 0x16c]
push eax
call fcn.0043aa35
mov esi, dword [eax]
push esi
mov byte [ebp - 4], 9
call fcn.0040be23
pop ecx
push eax
push esi
lea ecx, [ebx + 0xb0]
call fcn.0040bd90
mov ecx, dword [ebp - 0x16c]
mov byte [ebp - 4], 8
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
push dword [ebp - 0x170]
call fcn.0040be23
pop ecx
push eax
push dword [ebp - 0x170]
lea ecx, [ebx + 0xb8]
call fcn.0040bd90
push 0x38
xor ebx, ebx
lea eax, [ebp - 0x70]
push ebx
push eax
call fcn.0045d120
add esp, 0xc
lea ecx, [ebp - 0x70]
call fcn.0042021a
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x158], 0x706b7947
mov dword [ebp - 0x154], 0x71497a50
mov dword [ebp - 0x150], 0x70557942
mov dword [ebp - 0x14c], 0x45676a44
mov dword [ebp - 0x148], 0x43516941
mov dword [ebp - 0x144], 0x44557964
mov dword [ebp - 0x140], 0x70776e50
mov dword [ebp - 0x13c], 0x5359444b
push ebx
sub esp, 0xc
mov dword [ebp - 0x138], 0x59387a4f
mov ecx, esp
mov dword [ebp - 0x134], 0x37384849
lea eax, [ebp - 0x71]
mov dword [ebp - 0x130], 0x36676a4b
lea edx, [ebp - 0x76]
mov dword [ebp - 0x12c], 0x4a737a66
push eax
push edx
lea esi, [ebp - 0x158]
mov dword [ebp - 0x128], 0x41595843
push esi
mov dword [ebp - 0x124], 0x6b73774d
mov dword [ebp - 0x120], 0x65495147
mov dword [ebp - 0x11c], 0x384a414e
mov dword [ebp - 0x118], 0x53634247
mov dword [ebp - 0x114], 0x33777a42
mov dword [ebp - 0x110], 0x46456d4c
mov dword [ebp - 0x10c], 0x6931424c
mov dword [ebp - 0x108], 0x67594147
mov dword [ebp - 0x104], 0x524d434e
mov dword [ebp - 0x100], 0x2b4d5146
mov dword [ebp - 0xfc], 0x4f6f7a4d
mov dword [ebp - 0xf8], 0x7849434b
mov dword [ebp - 0xf4], 0x6e517747
mov dword [ebp - 0xf0], 0x775a3343
mov dword [ebp - 0xec], 0x63734247
mov dword [ebp - 0xe8], 0x6764414c
mov dword [ebp - 0xe4], 0x70747744
mov dword [ebp - 0xe0], 0x36396949
mov dword [ebp - 0xdc], 0x4d4d5265
mov dword [ebp - 0xd8], 0x72675243
mov dword [ebp - 0xd4], 0x79557763
mov dword [ebp - 0xd0], 0x704d674b
mov dword [ebp - 0xcc], 0x5967684a
mov dword [ebp - 0xc8], 0x4e6f6944
mov dword [ebp - 0xc4], 0x64556844
mov dword [ebp - 0xc0], 0x56676a4d
mov dword [ebp - 0xbc], 0x66736750
mov dword [ebp - 0xb8], 0x46776a4f
mov dword [ebp - 0xb4], 0x77414346
mov dword [ebp - 0xb0], 0x70647a4b
mov dword [ebp - 0xac], 0x6b6b694c
mov dword [ebp - 0xa8], 0x57494241
mov dword [ebp - 0xa4], 0x5a415148
mov dword [ebp - 0xa0], 0x74305343
mov dword [ebp - 0x9c], 0x53494147
mov dword [ebp - 0x98], 0x78415446
mov dword [ebp - 0x94], 0x55417945
mov dword [ebp - 0x90], 0x624d5247
mov dword [ebp - 0x8c], 0x6e635347
mov dword [ebp - 0x88], 0x4a634344
mov dword [ebp - 0x84], 0x37675142
mov dword [ebp - 0x80], 0x4b6b5341
mov dword [ebp - 0x7c], 0x41414141
mov word [ebp - 0x78], 0x776e
call fcn.0040a169
lea eax, [ebp - 0x1e0]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.004103eb
mov esi, eax
push esi
call fcn.0040be23
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.0040bd90
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0xa
call fcn.00455078
mov dword [ebp - 0x168], 0x6841694b
mov dword [ebp - 0x164], 0x7155474b
mov dword [ebp - 0x160], 0x3846584d
push ebx
sub esp, 0xc
mov dword [ebp - 0x15c], 0x4e514343
mov ecx, esp
mov dword [ebp - 0x158], 0x2f6b6a47
lea eax, [ebp - 0x71]
mov dword [ebp - 0x154], 0x55637a41
lea edx, [ebp - 0x75]
mov dword [ebp - 0x150], 0x44454149
push eax
push edx
lea esi, [ebp - 0x168]
mov dword [ebp - 0x14c], 0x6968414c
push esi
mov dword [ebp - 0x148], 0x4c55414f
mov dword [ebp - 0x144], 0x38676a63
mov dword [ebp - 0x140], 0x77457966
mov dword [ebp - 0x13c], 0x7934414e
mov dword [ebp - 0x138], 0x70745445
mov dword [ebp - 0x134], 0x79634347
mov dword [ebp - 0x130], 0x6351484c
mov dword [ebp - 0x12c], 0x4d495241
mov dword [ebp - 0x128], 0x646b534a
mov dword [ebp - 0x124], 0x73635763
mov dword [ebp - 0x120], 0x4149415a
mov dword [ebp - 0x11c], 0x2b6f4866
mov dword [ebp - 0x118], 0x3967694b
mov dword [ebp - 0x114], 0x3042444b
mov dword [ebp - 0x110], 0x534d684f
mov dword [ebp - 0x10c], 0x6f304349
mov dword [ebp - 0x108], 0x38596942
mov dword [ebp - 0x104], 0x49777a42
mov dword [ebp - 0x100], 0x56593349
mov dword [ebp - 0xfc], 0x454d4465
mov dword [ebp - 0xf8], 0x3541434f
mov dword [ebp - 0xf4], 0x4a676e4d
mov dword [ebp - 0xf0], 0x3845794c
mov dword [ebp - 0xec], 0x7159444c
mov dword [ebp - 0xe8], 0x6a6f6848
mov dword [ebp - 0xe4], 0x64557a45
mov dword [ebp - 0xe0], 0x70736a46
mov dword [ebp - 0xdc], 0x50305450
mov dword [ebp - 0xd8], 0x79636943
mov dword [ebp - 0xd4], 0x6c34784d
mov dword [ebp - 0xd0], 0x6c426759
mov dword [ebp - 0xcc], 0x536f7a4d
mov dword [ebp - 0xc8], 0x37464741
mov dword [ebp - 0xc4], 0x45774850
mov dword [ebp - 0xc0], 0x6a416e49
mov dword [ebp - 0xbc], 0x4c737964
mov dword [ebp - 0xb8], 0x4949484c
mov dword [ebp - 0xb4], 0x6f6b7846
mov dword [ebp - 0xb0], 0x6b305864
mov dword [ebp - 0xac], 0x79386841
mov dword [ebp - 0xa8], 0x344d6d5a
mov dword [ebp - 0xa4], 0x6263414a
mov dword [ebp - 0xa0], 0x36746765
mov dword [ebp - 0x9c], 0x486b6845
mov dword [ebp - 0x98], 0x63416e5a
mov dword [ebp - 0x94], 0x72636965
mov dword [ebp - 0x90], 0x4c4d5245
mov dword [ebp - 0x8c], 0x30385350
mov dword [ebp - 0x88], 0x58636e4d
mov dword [ebp - 0x84], 0x6d6c7750
mov dword [ebp - 0x80], 0x694a6850
mov dword [ebp - 0x7c], 0x41415147
mov word [ebp - 0x78], 0x4b41
mov byte [ebp - 0x76], 0x34
call fcn.0040a169
lea eax, [ebp - 0x1e0]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004103eb
mov esi, eax
push esi
call fcn.0040be23
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44]
call fcn.0040bd90
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0xa
call fcn.00455078
push dword [ebp + 8]
call fcn.0040be23
pop ecx
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x3c]
call fcn.0040bd90
lea eax, [ebp - 0x70]
push eax
call fcn.00444856
pop ecx
lea ecx, [ebp - 0x70]
call fcn.004236fc
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x28]
push eax
call esi
lea eax, [ebp - 0x38]
push eax
call esi
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
jmp 0x42b0a4
push dword [ebp - 0x170]
call fcn.0040be23
pop ecx
push eax
push dword [ebp - 0x170]
mov ecx, edi
call fcn.0040bd90
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
mov ecx, dword [ebp - 0x170]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call fcn.0045a89d
ret 4