Function at 0x43f760
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x497514
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x4c5008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x120], 0x4f3820
call fcn.0045e750
mov dword [ebp - 4], 0
mov ecx, 0x4f3a38
mov dword [0x4f3820], 0x4b338c
call fcn.0045b2a0
push str.TaskbarButtonCreated
mov dword [0x4f3a38], 0x4b21a0
mov byte [0x4f3aec], 0
call dword [0x4992b0]
mov dword [0x4f3af0], eax
mov ecx, 0x4f3af4
mov byte [ebp - 4], 1
call fcn.00459660
mov ecx, 0x4f3b10
call fcn.0044f7d0
push fcn.0044d3e0
push fcn.0044d340
push 7
push 0x254
push 0x4f3b88
mov byte [ebp - 4], 3
call fcn.00461621
push fcn.00447570
push fcn.00447470
push 0x46
push 0x2a0
push 0x4f4bd4
mov byte [ebp - 4], 4
call fcn.00461621
push 0x44e390
push 0x44e370
push 6
push 0xc
push 0x500394
mov byte [ebp - 4], 5
call fcn.00461621
mov ecx, 0x5003dc
mov byte [ebp - 4], 6
call fcn.0044e640
mov ecx, 0x5009ac
mov byte [ebp - 4], 7
call fcn.00437050
mov ecx, 0x500c88
call fcn.00451560
mov ecx, 0x5010a8
call fcn.00453200
mov dword [0x50245c], 0x4b28a8
mov dword [0x502460], 0
mov dword [0x502464], 0
mov dword [0x502468], 0
mov dword [0x50246c], 0x4b28a8
mov dword [0x502470], 0
mov dword [0x502474], 0
mov dword [0x502478], 0
mov dword [0x50247c], 0x4b28a8
mov dword [0x502480], 0
mov dword [0x502484], 0
mov dword [0x502488], 0
mov ecx, 0x50248c
call fcn.00455b50
mov dword [0x5024b4], 0x4b28a8
mov dword [0x5024b8], 0
mov dword [0x5024bc], 0
mov dword [0x5024c0], 0
mov ecx, 0x5024c4
call fcn.004527e0
mov ecx, 0x502504
call fcn.00452960
mov ecx, 0x502640
mov byte [ebp - 4], 0x11
call fcn.00452c60
mov ecx, 0x5026c8
call fcn.0044c740
push fcn.004597c0
push fcn.00459660
push 4
push 0x18
push 0x502938
mov dword [ebp - 0x118], 0x5028ec
call fcn.00461621
push 0
mov byte [ebp - 4], 0x12
push 0
mov dword [0x5029c0], 0
mov dword [0x5029c4], 0
call fcn.004120e0
mov dword [0x5029c0], eax
mov ecx, 0x5029dc
mov byte [ebp - 4], 0x13
call fcn.00459660
mov ecx, 0x502b1c
mov byte [ebp - 4], 0x14
call fcn.00405920
push 0
mov byte [ebp - 4], 0x15
push 0
mov dword [0x502b68], 0
mov dword [0x502b6c], 0
call fcn.004029c0
mov ecx, 0x502b68
mov dword [0x502b68], eax
mov dword [0x502b70], 0
call fcn.00402930
mov dword [0x502b78], 0x64
mov dword [0x502b74], 0xffffffff
mov ecx, 0x502b7c
mov byte [ebp - 4], 0x16
call fcn.00443e20
push fcn.00451680
push fcn.00451560
push 3
push 0x410
push 0x506518
mov byte [ebp - 4], 0x17
call fcn.00461621
mov dword [0x507198], 0
mov dword [0x50719c], 0
mov dword [0x5071a0], 0
mov dword [0x5071a4], 0
mov dword [0x5071a8], 0
mov dword [0x5071ac], 0
mov dword [0x5071b0], 0
mov dword [0x5071b4], 0
mov dword [0x5071b8], 0
mov ecx, 0x507270
mov byte [ebp - 4], 0x1b
call fcn.00459660
push 0x402b90
push 0x402b70
mov byte [ebp - 4], 0x1c
push 0x190
push 0xcc
push 0x507288
call fcn.00461621
mov ecx, 0x51b1fc
mov byte [ebp - 4], 0x1d
call fcn.00459660
push 0x402b90
push 0x402b70
push 0x190
push 0xcc
push 0x51b214
mov byte [ebp - 4], 0x1e
call fcn.00461621
mov ecx, 0x52f188
mov byte [ebp - 4], 0x1f
call fcn.00459660
push fcn.004597c0
push fcn.00459660
push 4
push 0x18
mov byte [ebp - 4], 0x20
push 0x52f374
mov dword [ebp - 0x118], 0x52f328
call fcn.00461621
push 0
mov byte [ebp - 4], 0x21
push 0
mov dword [0x52f3fc], 0
mov dword [0x52f400], 0
call fcn.004120e0
mov dword [0x52f3fc], eax
mov ecx, 0x52f418
mov byte [ebp - 4], 0x22
call fcn.00459660
mov dword [0x52f478], 0
mov dword [0x52f47c], 0
mov dword [0x52f480], 0
push 0
mov byte [ebp - 4], 0x24
push 0
mov dword [0x530528], 0
mov dword [0x53052c], 0
call fcn.00412040
mov dword [0x530528], eax
push 0
mov byte [ebp - 4], 0x25
push 0
mov dword [0x530530], 0
mov dword [0x530534], 0
call fcn.00412040
mov dword [0x530530], eax
mov ecx, 0x530538
mov byte [ebp - 4], 0x26
call fcn.00431960
mov dword [0x5305e8], 0
mov dword [0x5305ec], 0
mov dword [0x5305f0], 0
mov ecx, 0x531698
mov byte [ebp - 4], 0x28
call fcn.0043ff00
push 0x4120d0
push 0x4400c0
push 0x12c
push 0x20
push 0x55c914
mov byte [ebp - 4], 0x29
call fcn.00461621
push 0x4120d0
push 0x4400c0
push 0x1f40
push 0x20
push 0x55ee94
mov byte [ebp - 4], 0x2a
call fcn.00461621
push 0x4120d0
push 0x4400c0
push 0x28
push 0x20
push 0x59d694
mov byte [ebp - 4], 0x2b
call fcn.00461621
push 0x4120d0
push 0x4400c0
push 0x190
push 0x20
push 0x59db94
mov byte [ebp - 4], 0x2c
call fcn.00461621
push 0x4120d0
push 0x4400c0
push 0x14
push 0x20
push 0x5a0d94
mov byte [ebp - 4], 0x2d
call fcn.00461621
push fcn.00408fb0
push 0x436dc0
push 0x64
push 8
push 0x5a1014
mov byte [ebp - 4], 0x2e
call fcn.00461621
push 0
mov byte [ebp - 4], 0x2f
push 0
mov dword [0x5a1334], 0
mov dword [0x5a1338], 0
call fcn.0041c410
mov dword [0x5a1334], eax
push ecx
mov ecx, 0x5a133c
mov byte [ebp - 4], 0x30
call fcn.0042efe0
mov ecx, 0x5a1378
mov byte [ebp - 4], 0x31
call fcn.004400e0
push fcn.004597c0
push fcn.00459660
push 5
push 0x18
push 0x5a17cc
mov byte [ebp - 4], 0x32
call fcn.00461621
push str.INTERHEARTADV
push 0x100
push 0x4f382c
mov byte [ebp - 4], 0x33
call fcn.00464a54
push str.INTERADV
push 0x100
push 0x4f392c
call fcn.00464a54
mov ecx, esp
push str.Mon_Oct_23_13:24:52_2017
call fcn.004596e0
mov ecx, 0x4f3af4
call fcn.00459a00
push 0x104
lea eax, [ebp - 0x114]
push eax
push 0
call dword [0x4991a4]
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [0x499398]
mov esi, eax
push esi
call fcn.004616b2
add esp, 4
mov edi, eax
lea eax, [ebp - 0x114]
push edi
push esi
push dword [ebp - 0x11c]
push eax
call dword [0x499394]
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x118]
push eax
push 0x4b2e28
push edi
call dword [0x49939c]
mov ecx, dword [ebp - 0x118]
push edi
movzx edx, byte [ecx + 0x14]
movzx eax, byte [ecx + 0x16]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x10]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x12]
shl edx, 8
or edx, eax
mov dword [0x4f3b0c], edx
call fcn.004616ad
add esp, 4
push 0
push 0
push 0
push 0
call dword [0x49907c]
mov dword [0x502b00], eax
mov eax, 0x4f3820
mov dword [0x502b04], 0
mov byte [0x5a1860], 0
mov word [0x5a1861], 0
mov dword [0x5010a4], 0
mov dword [0x501098], 0
mov dword [0x50109c], 0
mov dword [0x5010a0], 0
mov dword [0x5a1778], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00461211
mov esp, ebp
pop ebp
ret