Function at 0x56d57a
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x30c
mov eax, 0x79e06b
call fcn.00700ca1
mov ebx, ecx
mov dword [ebp - 0x300], ebx
xor eax, eax
mov dword [ebp - 0x2e4], eax
mov edi, dword [ebx + 0xc]
mov dword [ebp - 0x2f4], eax
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x2f8]
push eax
mov ecx, esi
call dword [0x7f07dc]
mov ecx, edi
call esi
mov edi, dword [ebx + 0xc]
and dword [ebp - 4], 0
mov eax, dword [edi]
mov esi, dword [eax + 0x2c]
lea eax, [ebp - 0x310]
push eax
mov ecx, esi
call dword [0x7f07dc]
mov ecx, edi
call esi
xor eax, eax
inc eax
cmp dword [ebp - 0x2f8], 0
mov byte [ebp - 4], al
je 0x56f32b
mov edi, dword [ebp - 0x310]
test edi, edi
je 0x56f32b
mov eax, dword [edi]
xor bl, bl
mov dword [ebp - 0x2e8], ebx
mov byte [ebp - 0x2ec], bl
mov esi, dword [eax]
mov ecx, esi
call dword [0x7f07dc]
mov ecx, edi
call esi
mov esi, dword [ebp - 0x2f8]
push 0
push 0x812b54
mov dword [ebp - 0x2e4], eax
mov ecx, dword [esi]
mov edi, dword [ecx + 0x34]
mov ecx, edi
call dword [0x7f07dc]
mov ecx, esi
call edi
push eax
lea ecx, [ebp - 0x2e0]
call fcn.004c01bc
mov esi, dword [ebp - 0x2e4]
mov byte [ebp - 4], 2
lea eax, [esi - 4]
cmp eax, 5
ja 0x56d681
push 0x805654
lea ecx, [ebp - 0x2e0]
call fcn.004d2b1c
test al, al
movzx ebx, bl
push 1
pop eax
cmove ebx, eax
mov dword [ebp - 0x2e8], ebx
mov byte [ebp - 0x2ec], bl
push 3
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
push 0x8129ac
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
call fcn.006210e3
mov dword [esp], str.enableProcessDocShowParameter
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x2e4], bl
push dword [ebp - 0x2e4]
mov dword [ebp - 0x2fc], eax
push 0x1d
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], bl
call fcn.0043a610
lea eax, [ebp - 0x2e0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0062113d
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
push ecx
push eax
lea ecx, [ebp - 0x208]
call fcn.0061c551
mov ebx, eax
and dword [ebp - 0xc0], 0
lea ecx, [ebp - 0xd0]
push 0xb
push str.browserType
mov byte [ebp - 4], 6
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.00439710
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push esi
push eax
call fcn.00621152
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 8
push ecx
push eax
lea ecx, [ebp - 0x238]
call fcn.0061c551
mov edi, eax
xor eax, eax
mov byte [ebp - 4], 9
push str.continueProcessBase64
mov byte [ebp - 0x2e4], al
lea ecx, [ebp - 0xe8]
push dword [ebp - 0x2e4]
mov dword [ebp - 0xd8], eax
push 0x15
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], al
call fcn.0043a610
mov byte [ebp - 4], 0xa
push dword [ebp - 0x2ec]
lea eax, [ebp - 0x58]
push eax
call fcn.00621414
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea ecx, [ebp - 0x268]
call fcn.0061c551
mov esi, eax
xor eax, eax
mov byte [ebp - 4], 0xc
push eax
push 0x858903
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], 0xf
mov byte [ebp - 0x100], al
call fcn.00439710
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
push str.preJME::CJMEEntrypointImpl::ProcessBase64FromDocShow
push eax
call fcn.006212a1
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xe
push ecx
push eax
lea ecx, [ebp - 0x130]
call fcn.0061c551
mov ecx, dword [ebp - 0x2fc]
push ebx
push edi
push esi
push eax
mov byte [ebp - 4], 0xf
call fcn.00621579
lea ecx, [ebp - 0x118]
call fcn.00438e20
lea ecx, [ebp - 0x130]
call fcn.00438e20
lea ecx, [ebp - 0xb8]
call fcn.00438e20
mov eax, dword [ebp - 0xec]
mov edi, 0x1000
cmp eax, 0x10
jb 0x56d8bd
mov ecx, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, edi
jb 0x56d8b4
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2ec]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0xec], 0xf
lea ecx, [ebp - 0x250]
mov dword [ebp - 0xf0], ebx
mov byte [ebp - 0x100], bl
call fcn.00438e20
lea ecx, [ebp - 0x268]
call fcn.00438e20
lea ecx, [ebp - 0x58]
call fcn.00438e20
mov eax, dword [ebp - 0xd4]
push 0x10
pop esi
cmp eax, esi
jb 0x56d941
mov ecx, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, edi
jb 0x56d938
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2ec]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x220]
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], bl
call fcn.00438e20
lea ecx, [ebp - 0x238]
call fcn.00438e20
lea ecx, [ebp - 0x40]
call fcn.00438e20
mov eax, dword [ebp - 0xbc]
cmp eax, esi
jb 0x56d9c0
mov ecx, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, edi
jb 0x56d9b7
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2ec]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], bl
call fcn.00438e20
lea ecx, [ebp - 0x208]
call fcn.00438e20
lea ecx, [ebp - 0x70]
call fcn.00438e20
mov eax, dword [ebp - 0x8c]
cmp eax, esi
jb 0x56da3f
mov ecx, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, edi
jb 0x56da36
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2ec]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], bl
mov byte [ebp - 4], 2
cmp eax, esi
jb 0x56da9e
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, edi
jb 0x56da95
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2ec]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
cmp byte [ebp - 0x2e8], bl
je 0x56f31e
mov esi, dword [ebp - 0x300]
mov ecx, esi
call fcn.0056fd80
test al, al
jne 0x56db46
xor eax, eax
mov dword [ebp - 0x18], ebx
push str.Parse_docShow_failed
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.004c097f
push ebx
push 0x520
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
push 0x8ed268
mov ecx, esi
call fcn.0057b205
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x56db46
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2ec], ecx
cmp eax, edi
jb 0x56db3d
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2ec]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea eax, [ebp - 0x308]
mov dword [ebp - 0x308], ebx
push eax
mov dword [ebp - 0x304], ebx
call fcn.004bfd28
pop ecx
mov dword [ebp - 0x308], eax
mov esi, dword [ebp - 0x2f8]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2ec], ebx
mov eax, dword [esi]
mov edi, dword [eax + 0x24]
mov ecx, edi
call dword [0x7f07dc]
mov ecx, esi
call edi
test eax, eax
je 0x56f288
mov esi, dword [ebp - 0x2f8]
push ebx
mov eax, dword [esi]
mov edi, dword [eax + 0x28]
mov ecx, edi
call dword [0x7f07dc]
mov ecx, esi
call edi
push eax
lea ecx, [ebp - 0xe8]
call fcn.004c01bc
mov esi, dword [ebp - 0x2f8]
push ebx
mov byte [ebp - 4], 0x12
mov eax, dword [esi]
mov edi, dword [eax + 0x2c]
mov ecx, edi
call dword [0x7f07dc]
mov ecx, esi
call edi
push eax
lea ecx, [ebp - 0x100]
call fcn.004c01bc
cmp dword [ebp - 0xf0], 0
mov byte [ebp - 4], 0x13
je 0x56f248
and dword [ebp - 0xc0], 0
lea eax, [ebp - 0xe8]
and dword [ebp - 0xbc], 0
lea ecx, [ebp - 0xd0]
push eax
call fcn.004c0690
and dword [ebp - 0x90], 0
lea eax, [ebp - 0xa0]
and dword [ebp - 0x8c], 0
mov ecx, eax
push eax
mov byte [ebp - 4], 0x14
call fcn.004c0690
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0057fd5d
add esp, 0x10
test al, al
jne 0x56dd39
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x56dcb0
mov ecx, dword [ebp - 0xa0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2ec], ecx
cmp eax, 0x1000
jb 0x56dca7
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2ec]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x90], 0
xor eax, eax
push 7
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0xbc]
pop esi
mov dword [ebp - 0x8c], esi
cmp eax, 8
jb 0x56dd1e
mov ecx, dword [ebp - 0xd0]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2ec], ecx
cmp eax, 0x1000
jb 0x56dd15
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2ec]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0xc0], 0
xor eax, eax
mov dword [ebp - 0xbc], esi
mov word [ebp - 0xd0], ax
jmp 0x56f248
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56e952
cmp dword [ebp - 0x90], eax
jne 0x56dd70
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xa0]
call fcn.004c3996
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x308]
call fcn.00569779
mov ecx, dword [eax]
lea eax, [ebp - 0xa0]
add ecx, 0x28
cmp ecx, eax
je 0x56ddb2
cmp dword [ebp - 0x8c], 8
push dword [ebp - 0x90]
cmovae eax, dword [ebp - 0xa0]
push eax
call fcn.004c09a6
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x14], edi
push 0x8134bc
mov word [ebp - 0x28], ax
call fcn.004c097f
mov ebx, dword [ebp - 0x2f4]
xor eax, eax
inc eax
mov byte [ebp - 4], 0x16
or ebx, eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x2f4], ebx
push eax
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56dedf
and dword [ebp - 0x30], eax
lea ecx, [ebp - 0x40]
mov esi, 0x8134d0
mov dword [ebp - 0x2c], edi
push esi
mov word [ebp - 0x40], ax
call fcn.004c097f
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x17
push eax
lea eax, [ebp - 0xe8]
or ebx, 2
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56dedf
and dword [ebp - 0x60], eax
lea ecx, [ebp - 0x70]
push 0x8134bc
mov dword [ebp - 0x5c], edi
mov word [ebp - 0x70], ax
call fcn.004c097f
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x18
push eax
lea eax, [ebp - 0xd0]
or ebx, 4
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56dedf
and dword [ebp - 0x78], eax
lea ecx, [ebp - 0x88]
push esi
mov dword [ebp - 0x74], edi
mov word [ebp - 0x88], ax
call fcn.004c097f
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 0x19
push eax
lea eax, [ebp - 0xd0]
or ebx, 8
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56dedf
mov byte [ebp - 0x2ed], al
jmp 0x56dee8
xor eax, eax
inc eax
mov byte [ebp - 0x2ed], al
mov esi, 0x1000
test bl, 8
je 0x56df5a
mov eax, dword [ebp - 0x74]
and ebx, 0xfffffff7
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56df4a
mov ecx, dword [ebp - 0x88]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56df41
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x78], 0
xor eax, eax
mov dword [ebp - 0x74], edi
mov word [ebp - 0x88], ax
test bl, 4
je 0x56dfc1
mov eax, dword [ebp - 0x5c]
and ebx, 0xfffffffb
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56dfb4
mov ecx, dword [ebp - 0x70]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56dfab
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x60], 0
xor eax, eax
mov dword [ebp - 0x5c], edi
mov word [ebp - 0x70], ax
test bl, 2
je 0x56e028
mov eax, dword [ebp - 0x2c]
and ebx, 0xfffffffd
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56e01b
mov ecx, dword [ebp - 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e012
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x40], ax
mov dword [ebp - 4], 0x15
test bl, 1
je 0x56e089
mov eax, dword [ebp - 0x14]
and ebx, 0xfffffffe
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56e089
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e080
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
push 3
xor ebx, ebx
mov dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], ebx
push 0x8129ac
mov byte [ebp - 0xb8], bl
call fcn.00439710
cmp byte [ebp - 0x2ed], bl
je 0x56e52c
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x1a
push eax
call fcn.006210e3
pop ecx
push ebx
mov edi, 0x858903
mov dword [ebp - 0x2fc], eax
push edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00439710
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.0062113d
pop ecx
pop ecx
xor esi, esi
mov byte [ebp - 4], 0x1c
inc esi
lea ecx, [ebp - 0x28]
push esi
push ecx
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0061c551
mov dword [ebp - 0x300], eax
push 9
push str.strSrcKey
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00439710
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0062113d
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1f
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0061c551
mov ebx, eax
xor eax, eax
mov byte [ebp - 4], 0x20
push eax
push edi
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], al
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.0062113d
pop ecx
pop ecx
push esi
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x22
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.0061c551
mov edi, eax
and dword [ebp - 0x60], 0
lea ecx, [ebp - 0x70]
push 0xa
push str.strDestKey
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.00439710
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.0062113d
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
push ecx
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0061c551
mov esi, eax
xor eax, eax
mov byte [ebp - 4], 0x26
push eax
push 0x858903
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], al
call fcn.00439710
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x27
push str.preJME__entrypoint__ProcessBase64FromDocShow_new_key__existing
push eax
call fcn.006212a1
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x28
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.0061c551
push dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
push ebx
push edi
push esi
push eax
mov byte [ebp - 4], 0x29
call fcn.0062155c
lea ecx, [ebp - 0x280]
call fcn.00438e20
lea ecx, [ebp - 0x298]
call fcn.00438e20
lea ecx, [ebp - 0x148]
call fcn.00438e20
mov eax, dword [ebp - 0x2c]
mov esi, 0x1000
push 0x10
pop edi
cmp eax, edi
jb 0x56e2f7
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e2ee
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0x2c], 0xf
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x40], bl
call fcn.00438e20
lea ecx, [ebp - 0x2c8]
call fcn.00438e20
lea ecx, [ebp - 0x1f0]
call fcn.00438e20
mov eax, dword [ebp - 0x5c]
cmp eax, edi
jb 0x56e36c
mov ecx, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e363
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], bl
call fcn.00438e20
lea ecx, [ebp - 0x178]
call fcn.00438e20
lea ecx, [ebp - 0x220]
call fcn.00438e20
mov eax, dword [ebp - 0x74]
cmp eax, edi
jb 0x56e3e2
mov ecx, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e3d9
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], bl
call fcn.00438e20
lea ecx, [ebp - 0x1a8]
call fcn.00438e20
lea ecx, [ebp - 0x250]
call fcn.00438e20
mov eax, dword [ebp - 0x44]
cmp eax, edi
jb 0x56e458
mov ecx, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e44f
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00438e20
lea ecx, [ebp - 0x1d8]
call fcn.00438e20
lea ecx, [ebp - 0x118]
call fcn.00438e20
mov eax, dword [ebp - 0x14]
cmp eax, edi
jb 0x56e4cb
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56e4c2
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
mov eax, dword [ebp - 0xa4]
cmp eax, edi
jb 0x56f22c
mov ecx, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
cmp eax, esi
jb 0x56e51e
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
jmp 0x56f22c
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x2a
push eax
call fcn.006210e3
pop ecx
push 0xb
push str.strSrcValue
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], bl
call fcn.00439710
push ebx
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.00620ff2
add esp, 0xc
push ebx
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x2c
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.0061c551
mov dword [ebp - 0x300], eax
push 9
push str.strSrcKey
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], bl
call fcn.00439710
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x2e
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.0062113d
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2f
push ecx
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0061c551
mov ebx, eax
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push 0xc
push str.strDestValue
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00439710
push 0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00620ff2
add esp, 0xc
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x40]
push 0
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.0061c551
mov edi, eax
and dword [ebp - 0x48], 0
lea ecx, [ebp - 0x58]
push 0xa
push str.strDestKey
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00439710
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0062113d
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x35
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0061c551
mov esi, eax
xor eax, eax
mov byte [ebp - 4], 0x36
push eax
push 0x858903
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.00439710
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x37
push str.preJME__entrypoint__ProcessBase64FromDocShow_new_key__existing
push eax
call fcn.006212a1
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x38
push ecx
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0061c551
push dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov byte [ebp - 4], 0x39
push ebx
push edi
push esi
push eax
call fcn.0062155c
lea ecx, [ebp - 0x1c0]
call fcn.00438e20
lea ecx, [ebp - 0x1d8]
call fcn.00438e20
lea ecx, [ebp - 0x118]
call fcn.00438e20
mov eax, dword [ebp - 0x14]
mov esi, 0x1000
push 0x10
pop edi
cmp eax, edi
jb 0x56e76c
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
cmp eax, esi
jb 0x56e763
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.00438e20
lea ecx, [ebp - 0x1a8]
call fcn.00438e20
lea ecx, [ebp - 0x250]
call fcn.00438e20
mov eax, dword [ebp - 0x44]
cmp eax, edi
jb 0x56e7e1
mov ecx, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
cmp eax, esi
jb 0x56e7d8
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00438e20
lea ecx, [ebp - 0x178]
call fcn.00438e20
lea ecx, [ebp - 0x220]
call fcn.00438e20
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jb 0x56e854
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
cmp eax, esi
jb 0x56e84b
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.00438e20
lea ecx, [ebp - 0x2c8]
call fcn.00438e20
lea ecx, [ebp - 0x1f0]
call fcn.00438e20
mov eax, dword [ebp - 0x5c]
cmp eax, edi
jb 0x56e8c7
mov ecx, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
cmp eax, esi
jb 0x56e8be
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], bl
call fcn.00438e20
lea ecx, [ebp - 0x298]
call fcn.00438e20
lea ecx, [ebp - 0x148]
call fcn.00438e20
mov eax, dword [ebp - 0x74]
cmp eax, edi
jb 0x56e93d
mov ecx, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
cmp eax, esi
jb 0x56e934
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], bl
jmp 0x56e4d8
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56f232
mov esi, dword [ebp - 0x2f8]
lea ecx, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 8
cmovae ecx, dword [ebp - 0xa0]
mov eax, dword [esi]
cmp dword [ebp - 0xd4], 8
push ecx
mov edi, dword [eax + 0x30]
lea eax, [ebp - 0xe8]
cmovae eax, dword [ebp - 0xe8]
mov ecx, edi
push eax
call dword [0x7f07dc]
mov ecx, esi
call edi
and dword [ebp - 0xa8], 0
lea ecx, [ebp - 0xb8]
push 7
pop edi
xor eax, eax
mov dword [ebp - 0xa4], edi
push 0x8134bc
mov word [ebp - 0xb8], ax
call fcn.004c097f
mov ebx, dword [ebp - 0x2f4]
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x3a
or ebx, 0x10
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56eae4
and dword [ebp - 0x30], eax
lea ecx, [ebp - 0x40]
mov esi, 0x8134d0
mov dword [ebp - 0x2c], edi
push esi
mov word [ebp - 0x40], ax
call fcn.004c097f
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0xe8]
or ebx, 0x20
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56eae4
and dword [ebp - 0x48], eax
lea ecx, [ebp - 0x58]
push 0x8134bc
mov dword [ebp - 0x44], edi
mov word [ebp - 0x58], ax
call fcn.004c097f
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0xd0]
or ebx, 0x40
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56eae4
and dword [ebp - 0x18], eax
lea ecx, [ebp - 0x28]
push esi
mov dword [ebp - 0x14], edi
mov word [ebp - 0x28], ax
call fcn.004c097f
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0xd0]
or ebx, 0x80
push eax
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2e4], ebx
call fcn.004fc011
pop ecx
pop ecx
test eax, eax
jne 0x56eae4
mov byte [ebp - 0x2ed], al
jmp 0x56eaed
xor eax, eax
inc eax
mov byte [ebp - 0x2ed], al
mov esi, 0x1000
test bl, bl
jns 0x56eb5b
mov eax, dword [ebp - 0x14]
and ebx, 0xffffff7f
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56eb4e
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56eb45
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], edi
mov word [ebp - 0x28], ax
test bl, 0x40
je 0x56ebc2
mov eax, dword [ebp - 0x44]
and ebx, 0xffffffbf
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56ebb5
mov ecx, dword [ebp - 0x58]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56ebac
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x48], 0
xor eax, eax
mov dword [ebp - 0x44], edi
mov word [ebp - 0x58], ax
test bl, 0x20
je 0x56ec29
mov eax, dword [ebp - 0x2c]
and ebx, 0xffffffdf
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56ec1c
mov ecx, dword [ebp - 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56ec13
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
and dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x40], ax
mov dword [ebp - 4], 0x15
test bl, 0x10
je 0x56ec90
mov eax, dword [ebp - 0xa4]
and ebx, 0xffffffef
mov dword [ebp - 0x2f4], ebx
cmp eax, 8
jb 0x56ec90
mov ecx, dword [ebp - 0xb8]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56ec87
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor ebx, ebx
push 3
push 0x8129ac
cmp byte [ebp - 0x2ed], bl
je 0x56ee8c
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], bl
call fcn.00439710
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3e
push eax
call fcn.006210e3
pop ecx
push ebx
mov edi, 0x858903
mov dword [ebp - 0x2fc], eax
push edi
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], bl
call fcn.00439710
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.0062113d
pop ecx
pop ecx
xor esi, esi
mov byte [ebp - 4], 0x40
inc esi
lea ecx, [ebp - 0x88]
push esi
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.0061c551
mov dword [ebp - 0x300], eax
push 0xa
push str.strDestKey
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], bl
call fcn.00439710
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.0062113d
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x43
push ecx
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0061c551
mov ebx, eax
xor eax, eax
mov byte [ebp - 4], 0x44
push eax
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], al
call fcn.00439710
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.0062113d
pop ecx
pop ecx
push esi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x46
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.0061c551
mov edi, eax
and dword [ebp - 0x48], 0
lea ecx, [ebp - 0x58]
push 9
push str.strSrcKey
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00439710
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0062113d
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x49
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0061c551
mov esi, eax
xor eax, eax
mov byte [ebp - 4], 0x4a
push eax
push 0x858903
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.00439710
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x4b
push str.preJME__entrypoint_value_modified
push eax
call fcn.006212a1
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4c
push ecx
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0061c551
push dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov byte [ebp - 4], 0x4d
jmp 0x56e6f5
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], bl
call fcn.00439710
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x4e
push eax
call fcn.006210e3
pop ecx
push 0xc
push str.strDestValue
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], bl
call fcn.00439710
push ebx
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x4f
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.00620ff2
add esp, 0xc
push ebx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x50
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.0061c551
mov dword [ebp - 0x300], eax
push 0xa
push str.strDestKey
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x51
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], bl
call fcn.00439710
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.0062113d
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x53
push ecx
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0061c551
mov ebx, eax
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
push 0xb
push str.strSrcValue
mov byte [ebp - 4], 0x54
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00439710
push 0
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00620ff2
add esp, 0xc
push 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x56
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.0061c551
mov edi, eax
and dword [ebp - 0x48], 0
lea ecx, [ebp - 0x58]
push 9
push str.strSrcKey
mov byte [ebp - 4], 0x57
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00439710
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x58
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0062113d
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x59
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0061c551
mov esi, eax
xor eax, eax
mov byte [ebp - 4], 0x5a
push eax
push 0x858903
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.00439710
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x5b
push str.preJME__entrypoint_value_modified
push eax
call fcn.006212a1
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x5c
push ecx
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0061c551
push dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
push ebx
push edi
push esi
push eax
mov byte [ebp - 4], 0x5d
call fcn.0062155c
lea ecx, [ebp - 0x1c0]
call fcn.00438e20
lea ecx, [ebp - 0x1d8]
call fcn.00438e20
lea ecx, [ebp - 0x118]
call fcn.00438e20
mov eax, dword [ebp - 0x14]
push 0x10
pop edi
mov esi, 0x1000
cmp eax, edi
jb 0x56f0ed
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56f0e4
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.00438e20
lea ecx, [ebp - 0x1a8]
call fcn.00438e20
lea ecx, [ebp - 0x250]
call fcn.00438e20
mov eax, dword [ebp - 0x44]
cmp eax, edi
jb 0x56f162
mov ecx, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56f159
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
call fcn.00438e20
lea ecx, [ebp - 0x178]
call fcn.00438e20
lea ecx, [ebp - 0x220]
call fcn.00438e20
mov eax, dword [ebp - 0x2c]
cmp eax, edi
jb 0x56f1d5
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
cmp eax, esi
jb 0x56f1cc
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.004343f0
mov eax, dword [ebp - 0x2e8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e4]
push eax
push ecx
call fcn.007009b8
pop ecx
pop ecx
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
call fcn.004c37b0
lea ecx, [ebp - 0x1f0]
call fcn.00438e20
lea ecx, [ebp - 0xb8]
call fcn.00438e20
lea ecx, [ebp - 0x298]
call fcn.004c37b0
lea ecx, [ebp - 0x148]
call fcn.00438e20
lea ecx, [ebp - 0x70]
call fcn.00438e20
lea ecx, [ebp - 0x88]
call fcn.00438e20
mov ebx, dword [ebp - 0x2ec]
lea ecx, [ebp - 0xa0]
call fcn.004c0931
lea ecx, [ebp - 0xd0]
call fcn.004c0931
lea ecx, [ebp - 0x100]
call fcn.004c0931
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x11
call fcn.004c0931
mov esi, dword [ebp - 0x2f8]
inc ebx
mov dword [ebp - 0x2ec], ebx
mov eax, dword [esi]
mov edi, dword [eax + 0x24]
mov ecx, edi
call dword [0x7f07dc]
mov ecx, esi
call edi
cmp ebx, eax
jb 0x56db8e
mov ebx, dword [ebp - 0x308]
mov eax, dword [ebx]
mov dword [ebp - 0x2e8], eax
jmp 0x56f30c
add eax, 0x10
lea ecx, [ebp - 0x130]
push eax
call fcn.004c021d
mov esi, dword [ebp - 0x2f8]
lea ecx, [ebp - 0x118]
cmp dword [ebp - 0x104], 8
mov byte [ebp - 4], 0x5e
cmovae ecx, dword [ebp - 0x118]
mov eax, dword [esi]
cmp dword [ebp - 0x11c], 8
push ecx
mov edi, dword [eax + 0x30]
lea eax, [ebp - 0x130]
cmovae eax, dword [ebp - 0x130]
mov ecx, edi
push eax
call dword [0x7f07dc]
mov ecx, esi
call edi
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x11
call fcn.004c0320
lea ecx, [ebp - 0x2e8]
call fcn.004c03a3
mov eax, dword [ebp - 0x2e8]
cmp eax, ebx
jne 0x56f298
lea eax, [ebp - 0x308]
push eax
mov ecx, eax
call fcn.004bfdcc
lea ecx, [ebp - 0x2e0]
call fcn.004c0931
jmp 0x56f33c
push str.null_container_or_browserAgent
push 0x806a84
call fcn.00507351
pop ecx
pop ecx
mov ecx, dword [ebp - 0x30c]
test ecx, ecx
je 0x56f34b
call fcn.004c06f9
lea ecx, [ebp - 0x2f8]
call fcn.004c32c1
call fcn.00700c4b
ret