Function at 0x42ccb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x432e07
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x44d1d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x200], ecx
push 0
lea ecx, [ebp - 0x3c]
call fcn.004256e0
mov dword [ebp - 4], 0
push str.com.baidu.antivirus
lea ecx, [ebp - 0x164]
call fcn.00424e70
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x208], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x208]
push ecx
push str.name
lea ecx, [ebp - 0x3c]
call fcn.004259c0
mov ecx, eax
call fcn.00425800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x164]
call fcn.00425410
push str.Chrome_Native_Messaging_API_Baidu_AntiVirus_Host
lea ecx, [ebp - 0x174]
call fcn.00424e70
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x20c]
mov dword [ebp - 0x210], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x210]
push eax
push str.description
lea ecx, [ebp - 0x3c]
call fcn.004259c0
mov ecx, eax
call fcn.00425800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x174]
call fcn.00425410
push 0x442c88
mov ecx, dword [ebp - 0x200]
add ecx, 0x58
push ecx
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x218], eax
mov byte [ebp - 4], 3
push str.ChromeNativeExt.exe
mov ecx, dword [ebp - 0x218]
push ecx
lea edx, [ebp - 0x1ac]
push edx
call dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x220]
push ecx
lea edx, [ebp - 0xcc]
push edx
call fcn.00407bf0
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1ac]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x190]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00424df0
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x228], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x228]
push edx
push str.path
lea ecx, [ebp - 0x3c]
call fcn.004259c0
mov ecx, eax
call fcn.00425800
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1bc]
call fcn.00425410
push str.stdio
lea ecx, [ebp - 0x1cc]
call fcn.00424e70
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x230]
push ecx
push str.type
lea ecx, [ebp - 0x3c]
call fcn.004259c0
mov ecx, eax
call fcn.00425800
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1cc]
call fcn.00425410
push 0x442ca4
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const__]
mov byte [ebp - 4], 0xa
push 0x442cb8
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
push 0x442cdc
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
lea edx, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0x1dc]
call fcn.00424df0
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x1dc]
push eax
push str.allowed_origins
lea ecx, [ebp - 0x3c]
call fcn.004259c0
mov ecx, eax
call fcn.00425b50
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1dc]
call fcn.00425410
lea ecx, [ebp - 0x94]
call fcn.00422fe0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x94]
call fcn.00423910
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x1f8]
push eax
mov ecx, dword [ebp - 0x200]
call fcn.0042ab70
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x238], ecx
mov byte [ebp - 4], 0xe
push 1
push 0x40
push 2
mov ecx, dword [ebp - 0x238]
call dword [sym.imp.MSVCP80.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::constructor_wchar_t_const___int__int_]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVCP80.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::operator___char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_ostream_char__struct_std::char_traits_char_____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
add esp, 8
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::close_void_]
mov byte [ebp - 0x1f9], 1
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_ofstream_char__struct_std::char_traits_char__::vbase_dtor_void_]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x94]
call fcn.00407b20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.00425410
mov al, byte [ebp - 0x1f9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00415da2
mov esp, ebp
pop ebp
ret