Function at 0x4382f7
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2e4
test byte [0x4c279c], 1
push ebx
push esi
push edi
mov ebx, ecx
jne 0x43832a
mov eax, dword [0x4af550]
or byte [0x4c279c], 1
push 0x43a28b
mov dword [0x4c2798], eax
call fcn.0049ce21
pop ecx
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 0xc]
xor esi, esi
cmp edi, 0xb39a
mov dword [eax], esi
mov dword [ebp - 4], esi
jb 0x43835b
cmp edi, 0xb3a9
ja 0x43835b
push edi
mov ecx, ebx
call fcn.0043815b
mov dword [ebp - 4], 2
jmp 0x43845e
cmp edi, 0xbd7b
jne 0x4383ea
xor eax, eax
cmp dword [0x4b29c0], esi
sete al
push eax
push str.disable_dark_theme
mov dword [0x4b29c0], eax
call fcn.0048ef40
pop ecx
lea eax, [ebp + 0x10]
pop ecx
push str._start2.qdr
push eax
call fcn.00432fd0
pop ecx
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0040a956
lea ecx, [ebp + 0x10]
call fcn.004038fb
push esi
push esi
push esi
push 1
push 1
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, ebx
call fcn.00441965
push ecx
lea eax, [ebp + 0x14]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, ebx
call fcn.00437451
push 0xaff
call dword [sym.imp.USER32.dll_PostQuitMessage]
lea ecx, [ebp + 0x14]
call fcn.004038fb
jmp 0x43a147
cmp edi, 0xb408
jne 0x43841c
xor eax, eax
cmp dword [0x4c2ef0], esi
push esi
sete al
push eax
push 0x4c2ef8
push dword [0x4c55c4]
mov dword [0x4c2ef0], eax
call fcn.0044a990
add esp, 0x10
jmp 0x43a140
cmp edi, 0x85b1
jne 0x438446
mov ecx, ebx
call fcn.0043f01c
test eax, eax
je 0x43a147
mov ecx, ebx
call fcn.0043f01c
mov ecx, eax
call fcn.00478f88
jmp 0x43a147
cmp edi, 0xb380
jne 0x43845e
mov eax, dword [ebp + 0x14]
mov ecx, ebx
mov dword [eax], 1
call fcn.00440b2c
cmp edi, 0xb37f
jne 0x4384a3
mov eax, dword [ebp + 0x14]
cmp dword [ebp + 0x10], 0x3e8
mov dword [eax], 1
jne 0x43a09c
push 1
mov ecx, ebx
call fcn.0043bc54
push 1
push esi
push ecx
mov ecx, esp
push 0x4bc518
call fcn.0040a529
mov ecx, ebx
call fcn.0043bddf
mov ecx, ebx
call fcn.004422f6
cmp edi, 0xb3f5
jne 0x4384c6
mov ecx, ebx
call fcn.0043f01c
cmp eax, esi
je 0x43a09c
mov ecx, eax
call fcn.0046e154
jmp 0x43a09c
cmp edi, 0xb3f6
jne 0x4384f2
mov ecx, ebx
call fcn.0043f01c
mov edi, eax
cmp edi, esi
je 0x43a09c
mov ecx, edi
call fcn.00472c07
mov ecx, edi
call fcn.0046e253
jmp 0x43a09c
cmp edi, 0x8012
jne 0x43850f
mov eax, dword [ebp + 0x14]
mov ecx, ebx
mov dword [eax], 1
call fcn.004380e6
jmp 0x43a09c
cmp edi, 0x8503
jne 0x438534
mov eax, ebx
lea ecx, [ebx + 0x30]
neg eax
sbb eax, eax
and eax, ecx
mov dword [0x4cb14c], eax
push dword [ebx + 4]
call fcn.00495659
jmp 0x4396b1
cmp edi, 0xb325
jne 0x43856d
mov ecx, ebx
call fcn.0043f01c
cmp eax, esi
je 0x43a09c
push ecx
lea ecx, [ebp - 0x14]
push esp
push ecx
mov ecx, eax
call fcn.0046dc79
mov ecx, eax
call fcn.00489a02
call fcn.00482b98
pop ecx
lea ecx, [ebp - 0x14]
jmp 0x4397bb
cmp edi, 0xb335
jne 0x438587
mov ecx, ebx
call fcn.0043f01c
cmp eax, esi
je 0x43a09c
push esi
jmp 0x4385a0
cmp edi, 0xbd78
jne 0x4385ad
mov ecx, ebx
call fcn.0043f01c
cmp eax, esi
je 0x43a09c
push 1
push esi
mov ecx, eax
call fcn.00478a9c
jmp 0x43a09c
cmp edi, 0xb409
jne 0x4385bc
mov ecx, ebx
call fcn.00444651
cmp edi, 0xb360
jne 0x4385d0
push esi
push esi
call fcn.0040b80d
jmp 0x4396b0
cmp edi, 0xb358
jne 0x438604
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], esi
push eax
push 0x4ab568
push 0x15
push esi
push 0x4ab558
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4385ff
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp + 0x14]
jmp 0x438636
cmp edi, 0xb359
jne 0x438649
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], esi
push eax
push 0x4ab568
push 0x15
push esi
push 0x4ab558
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x438633
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, dword [ebp + 0x14]
cmp eax, esi
je 0x43a09c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43a09c
cmp edi, 0xb336
jne 0x438682
lea eax, [ebx + 0x88]
xor ecx, ecx
cmp dword [eax], esi
sete cl
push ecx
push ecx
mov dword [eax], ecx
mov ecx, esp
push str.adress_sw_driver
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
lea ecx, [ebx + 0x5c]
call fcn.0041092e
jmp 0x43a09c
mov eax, 0xb327
cmp edi, eax
jb 0x4386e4
mov ecx, 0xb329
cmp edi, ecx
ja 0x4386e4
cmp edi, eax
jne 0x43869e
mov dword [0x4c6858], esi
cmp edi, 0xb328
jne 0x4386b0
mov dword [0x4c6858], 1
cmp edi, ecx
jne 0x4386be
mov dword [0x4c6858], 2
push dword [0x4c6858]
push ecx
mov ecx, esp
push str.show_ext_in_type
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
mov dword [ebp - 4], 1
jmp 0x4388c8
cmp edi, 0xb339
jne 0x43870a
xor eax, eax
cmp dword [0x4c31a8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c31a8], eax
push str.refresh_keep_sel
jmp 0x439e10
cmp edi, 0xb33a
jne 0x438730
xor eax, eax
cmp dword [0x4c31b0], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c31b0], eax
push str.refresh_keep_scroll
jmp 0x439e10
cmp edi, 0xe124
jne 0x438753
mov ecx, ebx
call fcn.0043f01c
cmp eax, esi
je 0x43a09c
mov ecx, eax
call fcn.00476d6f
jmp 0x43a09c
cmp edi, 0x8552
jne 0x438779
xor eax, eax
cmp dword [0x4c6864], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6864], eax
push str.only_label_or_icon_clk
jmp 0x439e10
cmp edi, 0x8553
jne 0x43879f
xor eax, eax
cmp dword [0x4c6868], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6868], eax
push str.no_keep_grouping
jmp 0x439e10
cmp edi, 0x851b
jne 0x43888f
lea eax, [ebp + 0x14]
push 0xf4241
push eax
call fcn.004606c8
pop ecx
pop ecx
push 0x4bc550
lea ecx, [ebp + 0x10]
call fcn.00403927
mov edi, str.http:__
push esi
push edi
lea ecx, [ebp + 0x14]
call fcn.00403d34
test eax, eax
lea eax, [ebp + 0x14]
push eax
jne 0x4387e9
lea ecx, [ebp + 0x10]
call fcn.00403a8c
jmp 0x438804
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.0040a9a2
push eax
lea ecx, [ebp + 0x10]
call fcn.00403a8c
lea ecx, [ebp + 0xc]
call fcn.004038fb
push esi
push 0x4b011c
lea ecx, [ebp + 0x14]
call fcn.00403d34
test eax, eax
jge 0x43886a
push str._nNo_homepage___
lea ecx, [ebp + 0xc]
call fcn.00403927
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 8]
push 0xf4242
push eax
call fcn.004606c8
pop ecx
pop ecx
push eax
lea eax, [ebp + 8]
push eax
call fcn.00403b20
push esi
push 0x4bc518
push dword [eax]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp + 0xc]
call fcn.004038fb
push 5
push esi
push esi
push dword [ebp + 0x10]
push str.open
push dword [ebx + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0x10]
call fcn.004038fb
lea ecx, [ebp + 0x14]
jmp 0x43a097
cmp edi, 0xab7c
jb 0x4388c8
cmp edi, 0xaba8
ja 0x4388c8
mov eax, dword [ebx + 0x30]
lea ecx, [ebx + 0x30]
lea edx, [edi - 0xab7c]
push edx
call dword [eax]
push dword [0x4b312c]
push ecx
mov ecx, esp
push str.m_lang_id
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
mov eax, 0xb24f
cmp edi, eax
jne 0x4388e7
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.00437ccf
jmp 0x43a149
cmp edi, 0x84d0
jne 0x438919
xor eax, eax
cmp dword [0x4b8438], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b8438], eax
push str.tree_auto_chk_subdir
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
jmp 0x439096
cmp edi, 0xb337
jne 0x43893c
xor eax, eax
cmp dword [0x4c6bc8], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6bc8], eax
push str.tree_no_expando
jmp 0x438908
cmp edi, 0xb357
jne 0x438969
xor eax, eax
cmp dword [0x4c3230], esi
sete al
push eax
push ecx
mov ecx, esp
push str.tree_auto_expand_from_list
mov dword [0x4c3230], eax
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
cmp edi, 0xb31e
jne 0x43898f
xor eax, eax
cmp dword [0x4b3134], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b3134], eax
push str.tree_auto_sel
jmp 0x439e10
cmp edi, 0x84de
jne 0x4389a0
mov dword [0x4b8440], esi
push esi
jmp 0x4389b1
cmp edi, 0x84df
jne 0x4389be
push 1
pop eax
mov dword [0x4b8440], eax
push eax
push ecx
mov ecx, esp
push str.tree_all_browsable
jmp 0x438908
cmp edi, 0x84e6
jne 0x4389d1
lea edi, [ebx + 0x12c]
push esi
mov dword [edi], esi
jmp 0x4389e5
cmp edi, 0x84e7
jne 0x438a18
push 1
lea edi, [ebx + 0x12c]
pop eax
mov dword [edi], eax
push eax
push ecx
mov ecx, esp
push str.adresbar_style
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
push dword [edi]
lea ecx, [ebx + 0x5c]
call fcn.00410d46
push 0x105
push esi
push esi
push dword [ebx + 0x60]
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x43a09c
cmp edi, 0x84e9
jne 0x438a4f
mov dword [ebx + 0x130], esi
push esi
push ecx
mov ecx, esp
push str.adresbar_styleB
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
lea eax, [ebx + 0x5c]
push eax
push dword [ebx + 0x130]
call fcn.00410c61
jmp 0x4396b0
cmp edi, 0x84ea
jne 0x438a63
push 1
pop eax
mov dword [ebx + 0x130], eax
push eax
jmp 0x438a27
cmp edi, 0x84e8
jne 0x438a95
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push esi
push dword [ebx + 0x314]
call edi
xor eax, eax
cmp dword [0x4b08dc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b08dc], eax
push str.adresbar_use_highlighted
jmp 0x438ac5
cmp edi, 0x8555
jne 0x438ae0
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push esi
push dword [ebx + 0x314]
call edi
xor eax, eax
cmp dword [0x4b7238], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b7238], eax
push str.status_use_highlighted
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
push 5
push dword [ebx + 0x314]
call edi
jmp 0x43a09c
cmp edi, 0x858b
jne 0x438b06
xor eax, eax
cmp dword [0x4c6bd4], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6bd4], eax
push str.tree_line_at_root
jmp 0x438908
cmp edi, 0x84d4
jne 0x438b2c
xor eax, eax
cmp dword [0x4c6bd0], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6bd0], eax
push str.tree_disable_line
jmp 0x438908
cmp edi, 0xb250
jne 0x438bea
xor eax, eax
cmp dword [0x4c6bd8], esi
sete al
cmp dword [0x4c6bd0], esi
mov dword [0x4c6bd8], eax
jne 0x438bd7
cmp eax, esi
je 0x438bd7
push 0x4b4190
lea ecx, [ebp + 0xc]
call fcn.00403927
lea eax, [ebp - 0xc]
push 0x16b52
push eax
call fcn.00461337
pop ecx
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push 0x16b4f
push eax
call fcn.00461337
pop ecx
pop ecx
push eax
lea eax, [ebp - 8]
push eax
call fcn.00403b20
push eax
lea eax, [ebp + 8]
push eax
call fcn.00403b20
push esi
push 0x4bc518
push dword [eax]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 8]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
lea ecx, [ebp - 0xc]
call fcn.004038fb
lea ecx, [ebp + 0xc]
call fcn.004038fb
push dword [0x4c6bd8]
push ecx
mov ecx, esp
push str.tree_fullrowselect
jmp 0x438908
cmp edi, 0xb251
jne 0x438c10
xor eax, eax
cmp dword [0x4c6bdc], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6bdc], eax
push str.tree_expand_when_select
jmp 0x439e10
cmp edi, 0xb252
jne 0x438c36
xor eax, eax
cmp dword [0x4c6be0], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c6be0], eax
push str.tree_single_expand
jmp 0x438908
cmp edi, 0xb35c
jne 0x438c6f
xor eax, eax
cmp dword [0x4c31cc], esi
sete al
push eax
push ecx
mov ecx, esp
push str.Disable_Win7_Tree
mov dword [0x4c31cc], eax
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
mov ecx, ebx
call fcn.00438051
jmp 0x43a09c
cmp edi, 0x852e
jb 0x438cc3
cmp edi, 0x853f
ja 0x438cc3
lea ecx, [ebx + 0x310]
lea eax, [ebx + 0x314]
neg ecx
sbb ecx, ecx
and ecx, eax
push dword [ecx]
push edi
call fcn.004774b8
pop ecx
test eax, eax
pop ecx
je 0x438dec
push esi
push dword [ebx + 0x314]
call dword [sym.imp.USER32.dll_ShowWindow]
push 5
push dword [ebx + 0x314]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x438dec
cmp edi, 0xb36e
jne 0x438cdf
mov dword [0x4c3184], esi
push esi
push ecx
mov ecx, esp
push str.autocomplete
jmp 0x438fb7
cmp edi, 0xb36f
jne 0x438cf2
push 1
pop eax
mov dword [0x4c3184], eax
push eax
jmp 0x438cd2
cmp edi, 0xb370
jne 0x438d18
xor eax, eax
cmp dword [0x4b3108], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4b3108], eax
push str.autocomplete_url
jmp 0x438fb7
cmp edi, 0xb375
jne 0x438d36
push 1
pop eax
mov dword [0x4b310c], eax
push eax
push ecx
mov ecx, esp
push str.address_ico
jmp 0x439540
cmp edi, 0xb376
jne 0x438d47
mov dword [0x4b310c], esi
push esi
jmp 0x438d29
cmp edi, 0xb377
jne 0x438d75
push 2
pop edi
push edi
push ecx
mov ecx, esp
push str.address_ico
mov dword [0x4b310c], edi
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
mov dword [ebp - 4], edi
jmp 0x43a0a5
cmp edi, 0x8562
jne 0x438d91
mov dword [0x4c31dc], esi
push esi
push ecx
mov ecx, esp
push str.media_preview_by
jmp 0x439e10
cmp edi, 0x8563
jne 0x438da4
push 1
pop eax
mov dword [0x4c31dc], eax
push eax
jmp 0x438d84
cmp edi, 0x8557
jne 0x438dc2
push 1
pop eax
mov dword [0x4b3124], eax
push eax
push ecx
mov ecx, esp
push str.show_tabs
jmp 0x43924d
cmp edi, 0x8558
jne 0x438dec
push 2
pop eax
push eax
push ecx
mov ecx, esp
push str.show_tabs
mov dword [0x4b3124], eax
call fcn.0040a529
mov ecx, ebx
call fcn.0043519f
call fcn.0041837c
cmp edi, 0xb36c
je 0x4390cd
cmp edi, 0x8559
jne 0x438e09
mov dword [0x4b3124], esi
push esi
jmp 0x438db5
cmp edi, 0xb31d
jne 0x438e2f
xor eax, eax
cmp dword [0x4c31d0], esi
sete al
push eax
push ecx
mov ecx, esp
mov dword [0x4c31d0], eax
push str.close_ask
jmp 0x439e10
cmp edi, 0x8568
jne 0x438e4b
mov dword [0x4b720c], esi
push esi
push ecx
mov ecx, esp
push str.copy_cut_paste_mode
jmp 0x439e10
cmp edi, 0x8569
jne 0x438e5e
or byte [ebx - 0x2674efb3], cl
invalid
invalid
invalid
pop ebp
call 0xe9a11aa3
mov byte [ebp - 0x16], 0x40
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], 0xe9
mov byte [ebp - 0x13], 0xd6
mov byte [ebp - 0x12], 0xcd
mov byte [ebp - 0x11], 0xcb
mov byte [ebp - 0x10], 0xca
mov byte [ebp - 0xf], 0xde
mov byte [ebp - 0xe], 0xd3
mov byte [ebp - 0xd], 0xf9
mov byte [ebp - 0xc], 0xcd
mov byte [ebp - 0xb], 0xda
mov byte [ebp - 0xa], 0xda
mov byte [ebp - 9], 0xbf
call fcn.00438ef2
push eax
push esi
push dword [ebp + 8]
call fcn.00438ea7
mov dword [ebp - 8], eax
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 0x6c], bl
mov byte [ebp - 0x6b], bl
mov byte [ebp - 0x6a], 0xbe
mov byte [ebp - 0x69], bl
mov byte [ebp - 0x68], 0x17
mov byte [ebp - 0x67], 0x28
mov byte [ebp - 0x66], 0x33
mov byte [ebp - 0x65], 0x35
mov byte [ebp - 0x64], 0x34
mov byte [ebp - 0x63], 0x20
mov byte [ebp - 0x62], 0x2d
mov byte [ebp - 0x61], 0x11
mov byte [ebp - 0x60], 0x33
mov byte [ebp - 0x5f], 0x2e
mov byte [ebp - 0x5e], 0x35
mov byte [ebp - 0x5d], 0x24
mov byte [ebp - 0x5c], 0x22
mov byte [ebp - 0x5b], 0x35
mov byte [ebp - 0x5a], 0x41
call fcn.00438ef2
push eax
push esi
push dword [ebp + 8]
call fcn.00438ea7
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x2c], bl
push eax
mov byte [ebp - 0x2b], bl
mov byte [ebp - 0x2a], 0xd4
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x28], 0x67
mov byte [ebp - 0x27], 0x44
mov byte [ebp - 0x26], 0x4a
mov byte [ebp - 0x25], 0x4f
mov byte [ebp - 0x24], 0x67
mov byte [ebp - 0x23], 0x42
mov byte [ebp - 0x22], 0x49
mov byte [ebp - 0x21], 0x59
mov byte [ebp - 0x20], 0x4a
mov byte [ebp - 0x1f], 0x59
mov byte [ebp - 0x1e], 0x52
mov byte [ebp - 0x1d], 0x6a
mov byte [ebp - 0x1c], 0x2b
call fcn.00438ef2
push eax
push esi
push dword [ebp + 8]
call fcn.00438ea7
add esp, 0x30
mov dword [ebp - 0xb8], eax
call fcn.00438ee2
invalid
cmp dword [eax], ebx
je 0x439596
sbb byte [ebx + edx*2 - 0x75], dh
push eax
add al, 0x8d
dec eax
or byte [ebx], al
ror byte [ecx - 0x35c4f7b3], 1
mov edx, dword [eax + 4]
lea ecx, [eax + 8]
add edx, eax
mov dword [ebp + 8], ecx
cmp ecx, edx
jae 0x439591
mov ecx, dword [ebp + 8]
movzx ecx, word [ecx]
mov edx, ecx
and edx, 0xf000
cmp edx, 0x3000
jne 0x43957b
and ecx, 0xfff
mov edx, esi
sub edx, dword [edi + 0x34]
add ecx, esi
add ecx, dword [eax]
add dword [ecx], edx
jmp 0x439583
cmp edx, ebx
jne 0x4396d1
mov ecx, dword [eax + 4]
add dword [ebp + 8], 2
add ecx, eax
cmp dword [ebp + 8], ecx
jb 0x439552
add eax, dword [eax + 4]
jmp 0x43953f
mov dword [ebp + 0xc], ebx
jmp 0x4395a1
mov edi, dword [ebp - 0x88]
mov eax, dword [ebp + 0xc]
cmp ax, word [edi + 6]
jne 0x4395b9
mov edx, dword [ebp - 0xb4]
xor ecx, ecx
mov edi, 0x60000000
jmp 0x4395d7
movzx eax, ax
lea eax, [eax + eax*4]
mov ecx, dword [edi + eax*8 + 0x104]
mov edx, dword [edi + eax*8 + 0x108]
lea eax, [edi + eax*8 + 0xf8]
mov edi, dword [eax + 0x24]
lea eax, [edx + ecx - 1]
xor edx, edx
div dword [ebp - 0xac]
xor edx, edx
mov dword [ebp - 0x44], eax
mov eax, ecx
div dword [ebp - 0xac]
cmp eax, dword [ebp - 0x44]
ja 0x439635
mov edx, edi
mov dword [ebp + 8], edi
and dword [ebp + 8], 0x40000000
mov dword [ebp + 0x10], edi
and edx, 0x20000000
and dword [ebp + 0x10], 0x80000000
mov ecx, dword [ebp + 0x18]
cmp edx, ebx
je 0x43961c
or byte [eax + ecx], 1
cmp dword [ebp + 8], ebx
je 0x439625
or byte [eax + ecx], 2
cmp dword [ebp + 0x10], ebx
je 0x43962f
add ecx, eax
or byte [ecx], 4
inc eax
cmp eax, dword [ebp - 0x44]
jbe 0x439611
inc dword [ebp + 0xc]
mov eax, dword [ebp - 0x88]
mov cx, word [ebp + 0xc]
cmp cx, word [eax + 6]
jbe 0x43959b
mov dword [ebp + 8], esi
xor edi, edi
mov eax, dword [ebp + 0x18]
push 2
pop ecx
movzx eax, byte [edi + eax]
sub eax, ecx
je 0x439682
dec eax
je 0x439679
sub eax, 3
je 0x439670
mov dword [ebp - 4], 0x40
jmp 0x43969f
mov dword [ebp - 4], 4
jmp 0x439685
mov dword [ebp - 4], 0x20
jmp 0x439685
mov dword [ebp - 4], ecx
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push dword [ebp - 0xac]
push dword [ebp + 8]
call dword [ebp - 0xbc]
test eax, eax
je 0x4396d1
mov eax, dword [ebp - 0xac]
add dword [ebp + 8], eax
inc edi
cmp edi, dword [ebp - 0x8c]
jbe 0x439651
mov al, byte [0xff78858b]
invalid
mov eax, dword [ebp - 0x88]
mov edi, dword [eax + 0x28]
add edi, esi
call fcn.00438ee2
xchg byte [edx + 0x56], dl
pop edi
push dword [ebp + 0x14]
push 1
push esi
call edi
mov eax, esi
jmp 0x4396dd
push 0x8000
push ebx
push esi
call dword [ebp - 8]
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
pop ecx
xor eax, eax
lea edi, [ebp - 0x333]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x670], 4
and byte [ebp - 0x3c4], 0
and byte [ebp - 0x3c3], 0
mov byte [ebp - 0x3c2], 0x99
and byte [ebp - 0x3c1], 0
mov byte [ebp - 0x3c0], 0x21
mov byte [ebp - 0x3bf], 3
mov byte [ebp - 0x3be], 0x12
mov byte [ebp - 0x3bd], 0x2b
mov byte [ebp - 0x3bc], 9
mov byte [ebp - 0x3bb], 2
mov byte [ebp - 0x3ba], 0x13
mov byte [ebp - 0x3b9], 0xa
mov byte [ebp - 0x3b8], 3
mov byte [ebp - 0x3b7], 0x20
mov byte [ebp - 0x3b6], 0xf
mov byte [ebp - 0x3b5], 0xa
mov byte [ebp - 0x3b4], 3
mov byte [ebp - 0x3b3], 0x28
mov byte [ebp - 0x3b2], 7
mov byte [ebp - 0x3b1], 0xb
mov byte [ebp - 0x3b0], 3
mov byte [ebp - 0x3af], 0x27
mov byte [ebp - 0x3ae], 0x66
lea eax, [ebp - 0x3c4]
push eax
call fcn.00438ef2
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.00438ea7
add esp, 0xc
mov dword [ebp - 0x538], eax
and byte [ebp - 0x3ec], 0
and byte [ebp - 0x3eb], 0
mov byte [ebp - 0x3ea], 0x11
and byte [ebp - 0x3e9], 0
mov byte [ebp - 0x3e8], 0xa9
mov byte [ebp - 0x3e7], 0x8b
mov byte [ebp - 0x3e6], 0x9a
mov byte [ebp - 0x3e5], 0xa3
mov byte [ebp - 0x3e4], 0x81
mov byte [ebp - 0x3e3], 0x8a
mov byte [ebp - 0x3e2], 0x9b
mov byte [ebp - 0x3e1], 0x82
mov byte [ebp - 0x3e0], 0x8b
mov byte [ebp - 0x3df], 0xa6
mov byte [ebp - 0x3de], 0x8f
mov byte [ebp - 0x3dd], 0x80
mov byte [ebp - 0x3dc], 0x8a
mov byte [ebp - 0x3db], 0x82
mov byte [ebp - 0x3da], 0x8b
mov byte [ebp - 0x3d9], 0xaf
mov byte [ebp - 0x3d8], 0xee
lea eax, [ebp - 0x3ec]
push eax
call fcn.00438ef2
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.00438ea7
add esp, 0xc
mov dword [ebp - 0x340], eax
call fcn.00438ee2
js 0x439935
xor ch, byte [eax + eax*4 - 0x5335b]
inc dword [eax]
and byte [ebp - 0x533], 0
mov byte [ebp - 0x532], 0x68
and byte [ebp - 0x531], 0
mov byte [ebp - 0x530], 0xd4
mov byte [ebp - 0x52f], 0xfb
mov byte [ebp - 0x52e], 0xf8
mov byte [ebp - 0x52d], 0xe4
mov byte [ebp - 0x52c], 0xf2
mov byte [ebp - 0x52b], 0xdf
mov byte [ebp - 0x52a], 0xf6
mov byte [ebp - 0x529], 0xf9
mov byte [ebp - 0x528], 0xf3
mov byte [ebp - 0x527], 0xfb
mov byte [ebp - 0x526], 0xf2
mov byte [ebp - 0x525], 0x97
lea eax, [ebp - 0x534]
push eax
call fcn.00438ef2
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.00438ea7
add esp, 0xc
mov dword [ebp - 0x680], eax
call fcn.00438ee2
add byte [ebx - 0x5a7f40ba], ch
pushfd
stc
invalid
inc dword [eax]
and byte [ebp - 0x36b], 0
mov byte [ebp - 0x36a], 0xaa
and byte [ebp - 0x369], 0
mov byte [ebp - 0x368], 0x12
mov byte [ebp - 0x367], 0x30
mov byte [ebp - 0x366], 0x21
mov byte [ebp - 0x365], 6
mov byte [ebp - 0x364], 0x2c
mov byte [ebp - 0x363], 0x26
mov byte [ebp - 0x362], 0x21
mov byte [ebp - 0x361], 0x30
mov byte [ebp - 0x360], 0x38
mov byte [ebp - 0x35f], 0x11
mov byte [ebp - 0x35e], 0x3c
mov byte [ebp - 0x35d], 0x27
mov byte [ebp - 0x35c], 0x30
mov byte [ebp - 0x35b], 0x36
mov byte [ebp - 0x35a], 0x21
mov byte [ebp - 0x359], 0x3a
mov byte [ebp - 0x358], 0x27
mov byte [ebp - 0x357], 0x2c
mov byte [ebp - 0x356], 0x14
mov byte [ebp - 0x355], 0x55
lea eax, [ebp - 0x36c]
push eax
call fcn.00438ef2
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.00438ea7
add esp, 0xc
mov dword [ebp - 0x3d4], eax
call fcn.00438ee2
loope 0x439ef1
div byte [ebp + 0x68]
add al, 1
add byte [eax], al
lea eax, [ebp - 0x12c]
push eax
call dword [ebp - 0x3d4]
mov dword [ebp - 0x28], eax
call fcn.00438ee2
cdq
out 0x33, eax
dec ecx
and byte [ebp - 0x20], 0
and byte [ebp - 0x1f], 0
mov byte [ebp - 0x1e], 0x1d
and byte [ebp - 0x1d], 0
mov byte [ebp - 0x1c], 0xa5
mov byte [ebp - 0x1b], 0x87
mov byte [ebp - 0x1a], 0x96
mov byte [ebp - 0x19], 0xb6
mov byte [ebp - 0x18], 0x87
mov byte [ebp - 0x17], 0x8f
mov byte [ebp - 0x16], 0x92
mov byte [ebp - 0x15], 0xb2
mov byte [ebp - 0x14], 0x83
mov byte [ebp - 0x13], 0x96
mov byte [ebp - 0x12], 0x8a
mov byte [ebp - 0x11], 0xa3
mov byte [ebp - 0x10], 0xe2
lea eax, [ebp - 0x20]
push eax
call fcn.00438ef2
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.00438ea7
add esp, 0xc
mov dword [ebp - 0x370], eax
lea eax, [ebp - 0x654]
push eax
push 0x104
call dword [ebp - 0x370]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x28]
movsx eax, byte [ebp + eax - 0x12d]
cmp eax, 0x5c
jne 0x439f8e
inc ebp
fsubr st(0)
ljmp 0x33e7
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x550]
movsx eax, byte [ebp + eax - 0x655]
cmp eax, 0x5c
jne 0x439fae
mov eax, dword [ebp - 0x550]
dec eax
mov dword [ebp - 0x550], eax
and dword [ebp - 0x338], 0
and dword [ebp - 0x3d0], 0
jmp 0x439fcb
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x104
jge 0x43a032
mov eax, dword [ebp - 0x3d0]
movsx eax, byte [ebp + eax - 0x334]
and eax, 0x80
test eax, eax
je 0x439ffd
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
jmp 0x43a030
mov eax, dword [ebp - 0x3d0]
movsx eax, byte [ebp + eax - 0x334]
cmp eax, 0x5c
jne 0x43a01c
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x3d0]
movsx eax, byte [ebp + eax - 0x334]
test eax, eax
jne 0x43a030
jmp 0x43a032
jmp 0x439fbe
mov eax, dword [ebp - 0x670]
add eax, dword [ebp - 0x384]
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
push dword [ebp - 0x338]
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00438e53
add esp, 0xc
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
and dword [ebp - 4], 0
and dword [ebp - 0x3a0], 0
and dword [ebp - 0x37c], 0
inc dword [eax]
and dword [ebp - 0x388], 0
and dword [ebp - 0x374], 0
cld
invalid
inc dword [eax]
mov al, byte [ebp - 8]
add al, byte [ebp - 0x670]
mov byte [ebp - 8], al
mov eax, dword [ebp + 8]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
mov ecx, dword [ebp - 0x548]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x53c], ecx
mov eax, dword [ebp - 0x53c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x3a8], ecx
mov al, byte [ebp - 0x24]
sub al, byte [ebp - 0x670]
mov byte [ebp - 0x24], al
call fcn.00438ec0
mov edx, 0x4a580a9
cld
invalid
invalid
invalid
cwde
mov byte [ebp - 0x3f0], 0x9d
mov byte [ebp - 0x3ef], 0x94
mov byte [ebp - 0x3ee], 0xb0
mov byte [ebp - 0x3ed], 0xf1
call fcn.00438ee2
adc eax, 0x8d338864
test dword [esp + edi*8], eax
invalid