Function at 0x42ab00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5fdf33
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x12c
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x138], 0
mov dword [esp + 0x74], edi
call fcn.00404ef0
mov dword [esp + 0x144], 0
mov dword [esp + 0x138], 1
call fcn.0043d340
test eax, eax
jne 0x42af87
lea ecx, [esp + 0x14]
call fcn.00404ef0
mov dword [esp + 0x144], 1
lea ecx, [esp + 0x1c]
mov ebx, 0x5c
mov dword [esp + 0x134], 1
mov edx, 0x74
mov dword [esp + 0x10], 0x104
mov dword [esp + 0x9e], 0x570054
mov dword [esp + 0x11a], 0x5c0070
lea eax, [ebx + 9]
mov dword [esp + 0x106], 0x740061
mov word [esp + 0xd2], ax
lea esi, [ebx + 0x13]
mov word [esp + 0x122], ax
lea ebp, [ebx + 0x10]
mov eax, 0x66
mov dword [esp + 0x102], 0x690063
mov word [esp + 0xb8], ax
lea edi, [ebx + 7]
mov eax, 0x53
mov dword [esp + 0xba], 0x5c0074
mov word [esp + 0x98], ax
lea eax, [esp + 0x98]
push eax
mov dword [esp + 0xaa], 0x5c0045
mov dword [esp + 0x128], 0x430072
mov dword [esp + 0xce], 0x5c0073
mov dword [esp + 0xd2], 0x680073
mov dword [esp + 0xc6], 0x64006e
mov dword [esp + 0x130], 0x630069
mov dword [esp + 0x10e], 0x6f0069
mov dword [esp + 0xee], 0x6f0069
mov dword [esp + 0x118], 0x740068
mov dword [esp + 0xa6], 0x520041
mov dword [esp + 0xfe], 0x730041
mov dword [esp + 0xf8], 0x720055
mov dword [esp + 0xc2], 0x690057
mov word [esp + 0x116], bx
mov dword [esp + 0xae], 0x69004d
mov dword [esp + 0x102], 0x6f0073
mov dword [esp + 0xd8], 0x6c006c
mov dword [esp + 0xea], 0x740061
mov dword [esp + 0x122], 0x730055
mov dword [esp + 0x9e], 0x46004f
mov dword [esp + 0x134], 0x65
mov dword [esp + 0x12c], 0x6f0068
mov dword [esp + 0xb8], 0x6f0073
mov dword [esp + 0xf2], 0x73006e
mov word [esp + 0xf6], bx
mov dword [esp + 0xb4], 0x6f0072
mov dword [esp + 0xe6], 0x690063
mov word [esp + 0x11c], dx
mov dword [esp + 0xe0], 0x730073
mov dword [esp + 0xca], 0x77006f
mov dword [esp + 0xdc], 0x41005c
mov dword [esp + 0x112], 0x73006e
mov word [esp + 0xe4], si
mov word [esp + 0xb2], di
mov word [esp + 0xfc], bp
call fcn.00404720
mov byte [esp + 0x144], 2
lea ecx, [esp + 0x14]
mov eax, 0x50
mov dword [esp + 0x82], 0x64
mov word [esp + 0x78], ax
mov dword [esp + 0x94], eax
lea eax, [esp + 0x10]
push eax
push 0x104
mov dword [esp + 0x82], 0x6f0072
mov dword [esp + 0x86], 0x690067
mov dword [esp + 0x90], 0x450049
mov dword [esp + 0x98], 0x540054
mov dword [esp + 0x94], 0x48002e
call fcn.00404c30
push eax
lea eax, [esp + 0x13c]
push eax
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x2c]
call fcn.00404880
mov edx, eax
mov ecx, SysReAllocString
call fcn.0048a800
add esp, 0x10
lea ecx, [esp + 0x14]
mov esi, eax
push 0xffffffffffffffff
call fcn.00409390
mov edi, dword [esp + 0x74]
test esi, esi
je 0x42ae33
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x18]
call fcn.00404df0
push dword [esp + 0x14]
mov eax, 0x65
mov dword [esp + 0x52], 0x650068
mov ecx, 0x73
mov word [esp + 0x60], ax
mov edx, 0x41
mov word [esp + 0x50], cx
mov word [esp + 0x32], dx
mov esi, 0x46
lea ecx, [eax + 8]
mov dword [esp + 0x4c], 0x5c0073
xor edx, edx
mov dword [esp + 0x46], 0x5c0073
lea eax, [esp + 0x28]
mov word [esp + 0x74], dx
push eax
lea eax, [esp + 0x24]
mov dword [esp + 0x3c], 0x43005c
mov edx, 0x25
mov dword [esp + 0x42], 0x730061
push eax
mov dword [esp + 0x6e], 0x6f0063
mov dword [esp + 0x36], 0x570054
mov dword [esp + 0x3c], 0x450052
mov dword [esp + 0x6a], 0x5c006e
mov dword [esp + 0x5e], 0x6c006c
mov dword [esp + 0x78], 0x64006e
mov word [esp + 0x44], bp
mov dword [esp + 0x30], 0x4f0053
mov dword [esp + 0x74], 0x61006d
mov dword [esp + 0x4a], 0x650073
mov dword [esp + 0x64], 0x70006f
mov word [esp + 0x34], si
mov word [esp + 0x62], bx
mov word [esp + 0x52], dx
mov word [esp + 0x72], cx
call fcn.00404860
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push 0x101
push ecx
lea ecx, [esp + 0x28]
call fcn.00404880
mov edx, eax
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.0048a380
add esp, 0xc
test eax, eax
jne 0x42af75
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x104
push eax
push 0x104
mov ecx, edi
mov dword [esp + 0x28], 1
call fcn.00404c30
push eax
lea eax, [esp + 0x28]
mov edx, 0x651e48
push eax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.0048af90
add esp, 0x10
mov ecx, edi
push 0xffffffffffffffff
call fcn.00409390
lea ecx, [esp + 0x1c]
call fcn.00404e10
lea ecx, [esp + 0x14]
jmp 0x42b068
mov eax, 0x65
mov dword [esp + 0x20], 1
mov ecx, 0x70
mov word [esp + 0x32], ax
lea eax, [esp + 0x24]
mov word [esp + 0x3c], cx
mov ebx, 0x5c
mov dword [esp + 0x18], 0x104
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x3c], 0x6f005c
mov dword [esp + 0x50], 0x6e0061
mov dword [esp + 0x28], 0x740068
mov dword [esp + 0x4c], 0x6d006d
mov dword [esp + 0x54], 0x64
mov dword [esp + 0x38], 0x6c006c
mov dword [esp + 0x32], 0x680073
mov dword [esp + 0x2c], 0x700074
mov dword [esp + 0x48], 0x6f0063
mov dword [esp + 0x42], 0x6e0065
mov word [esp + 0x30], bx
mov word [esp + 0x46], bx
call fcn.00404720
lea eax, [esp + 0x18]
mov dword [esp + 0x144], 3
mov edi, dword [esp + 0x74]
mov ecx, edi
push eax
push 0x104
call fcn.00404c30
push eax
lea eax, [esp + 0x28]
push eax
push 0x651e48
lea ecx, [esp + 0x20]
call fcn.00404880
mov edx, eax
mov ecx, SysReAllocString
call fcn.0048a800
add esp, 0x10
mov ecx, edi
push 0xffffffffffffffff
call fcn.00409390
lea ecx, [esp + 0x10]
mov byte [esp + 0x144], 0
call fcn.00404e10
mov ecx, edi
call fcn.004076d0
test al, al
jne 0x42b0fd
push str..exe
lea ecx, [esp + 0x14]
call fcn.00404720
push 0
lea ecx, [esp + 0x14]
mov dword [esp + 0x148], 4
call fcn.00404880
push eax
mov ecx, edi
call fcn.0040aca0
mov esi, eax
test esi, esi
jle 0x42b0f4
lea ecx, [esp + 0x10]
call fcn.00404a70
add esi, eax
mov ecx, edi
push esi
call fcn.00409240
cmp ax, 0x22
jne 0x42b0cc
inc esi
push esi
push 0
lea eax, [esp + 0x20]
mov ecx, edi
push eax
call fcn.0041a110
push eax
mov ecx, edi
mov byte [esp + 0x148], 5
call fcn.00409ad0
lea ecx, [esp + 0x18]
call fcn.00404e10
lea ecx, [esp + 0x10]
call fcn.00404e10
mov ecx, dword [esp + 0x13c]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x138
ret