Function at 0x4106e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x542a2a
mov eax, dword fs:[0]
push eax
sub esp, 0x1ac
mov eax, dword [0x593dc0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
xor esi, esi
push esi
push 0x68
mov edi, ecx
push 0x66
mov ecx, ebx
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x1ac], eax
call fcn.00424a03
mov dword [ebp - 4], esi
lea ecx, [ebx + 0x15c]
mov dword [ebx], vtable.CWebBrowserDlg.0
mov dword [ebx + 0x94], vtable.CWebBrowserDlg.1.0
push ecx
mov dword [ebx + method.JSCallHandler.virtual_0], vtable.JSCallHandler.0
call fcn.00404ab0
lea eax, [ebx + 0x180]
push eax
mov byte [ebp - 4], 1
call fcn.0040bb50
lea edi, [ebx + 0x190]
mov dword [edi], vtable.ClickEvents.0
mov dword [edi + 4], esi
lea esi, [ebx + 0x198]
push esi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1ac]
mov eax, dword [edx]
sub eax, 0x10
push eax
call fcn.00407ab0
add eax, 0x10
add esp, 4
mov dword [ebx + 0x1a8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov byte [ebp - 4], 5
mov dword [ebx + 0x1ac], eax
mov dword [ebx + 0x1b0], ecx
call fcn.00427e30
call fcn.00427e30
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov edx, 9
mov dword [ebx + 0x154], eax
mov word [esi], dx
mov dword [ebx + 0x1a0], edi
mov dword [ebp - 0x40], 0x3e003c
mov dword [ebp - 0x3c], 0x14002f
mov dword [ebp - 0x38], 0x3d003d
mov dword [ebp - 0x34], 0x29003e
mov dword [ebp - 0x30], 0x170028
mov dword [ebp - 0x2c], 0x280032
mov dword [ebp - 0x28], 0x2f
xor eax, eax
jmp 0x410820
xor word [ebp + eax*2 - 0x40], 0x5b
inc eax
cmp eax, 0xd
jb 0x410820
mov dword [ebp - 0x148], 0x350014
mov dword [ebp - 0x144], 0x3d0014
mov dword [ebp - 0x140], 0x3e003d
mov dword [ebp - 0x13c], 0x80029
mov dword [ebp - 0x138], 0x37003e
mov dword [ebp - 0x134], 0x38003e
mov dword [ebp - 0x130], 0x8002f
mov dword [ebp - 0x12c], 0x3a002f
mov dword [ebp - 0x128], 0x3e002f
mov dword [ebp - 0x124], 0x330018
mov dword [ebp - 0x120], 0x35003a
mov dword [ebp - 0x11c], 0x3e003c
mov dword [ebp - 0x118], 0x3f
xor eax, eax
xor word [ebp + eax*2 - 0x148], 0x5b
inc eax
cmp eax, 0x19
jb 0x4108b0
xor eax, eax
mov dword [ebp - 0x180], 0x340018
mov dword [ebp - 0x17c], 0x390036
mov dword [ebp - 0x178], 0x190034
mov dword [ebp - 0x174], 0x230034
mov dword [ebp - 0x170], 0x2e0018
mov dword [ebp - 0x16c], 0x290029
mov dword [ebp - 0x168], 0x35003e
mov dword [ebp - 0x164], 0x12002f
mov dword [ebp - 0x160], 0x3e002f
mov dword [ebp - 0x15c], 0x180036
mov dword [ebp - 0x158], 0x3a0033
mov dword [ebp - 0x154], 0x3c0035
mov dword [ebp - 0x150], 0x3f003e
mov word [ebp - 0x14c], ax
lea ebx, [ebx]
xor word [ebp + eax*2 - 0x180], 0x5b
inc eax
cmp eax, 0x1a
jb 0x410950
xor edx, edx
mov dword [ebp - 0xac], 0x34000b
mov dword [ebp - 0xa8], 0x2f0028
mov dword [ebp - 0xa4], 0x34002b
mov dword [ebp - 0xa0], 0x3e0035
mov dword [ebp - 0x9c], 0x12003f
mov dword [ebp - 0x98], 0x280035
mov dword [ebp - 0x94], 0x3a002f
mov dword [ebp - 0x90], 0x370037
mov word [ebp - 0x8c], dx
xor eax, eax
lea ebx, [ebx]
xor word [ebp + eax*2 - 0xac], 0x5b
inc eax
cmp eax, 0x10
jb 0x4109c0
mov dword [ebp - 0xf8], 0x350014
mov dword [ebp - 0xf4], 0x350012
mov dword [ebp - 0xf0], 0x2f0028
mov dword [ebp - 0xec], 0x37003a
mov dword [ebp - 0xe8], 0x3a0037
mov dword [ebp - 0xe4], 0x32002f
mov dword [ebp - 0xe0], 0x350034
mov dword [ebp - 0xdc], 0x2f0008
mov dword [ebp - 0xd8], 0x29003a
mov dword [ebp - 0xd4], 0x2f
xor eax, eax
jmp 0x410a40
xor word [ebp + eax*2 - 0xf8], 0x5b
inc eax
cmp eax, 0x13
jb 0x410a40
mov dword [ebp - 0xd0], 0x350014
mov dword [ebp - 0xcc], 0x34001f
mov dword [ebp - 0xc8], 0x3e0035
mov dword [ebp - 0xc4], 0x2e0019
mov dword [ebp - 0xc0], 0x2f002f
mov dword [ebp - 0xbc], 0x350034
mov dword [ebp - 0xb8], 0x370018
mov dword [ebp - 0xb4], 0x380032
mov dword [ebp - 0xb0], 0x30
xor eax, eax
jmp 0x410ab0
xor word [ebp + eax*2 - 0xd0], 0x5b
inc eax
cmp eax, 0x11
jb 0x410ab0
xor eax, eax
mov dword [ebp - 0x64], 0x3e003c
mov dword [ebp - 0x60], 0xc002f
mov dword [ebp - 0x5c], 0x350032
mov dword [ebp - 0x58], 0x34003f
mov dword [ebp - 0x54], 0x18002c
mov dword [ebp - 0x50], 0x2b003a
mov dword [ebp - 0x4c], 0x32002f
mov dword [ebp - 0x48], 0x350034
mov word [ebp - 0x44], ax
lea ecx, [ecx]
xor word [ebp + eax*2 - 0x64], 0x5b
inc eax
cmp eax, 0x10
jb 0x410b00
xor edx, edx
mov dword [ebp - 0x88], 0x340038
mov dword [ebp - 0x84], 0x3d0035
mov dword [ebp - 0x80], 0x290032
mov dword [ebp - 0x7c], 0xe0036
mov dword [ebp - 0x78], 0x320035
mov dword [ebp - 0x74], 0x280035
mov dword [ebp - 0x70], 0x3a002f
mov dword [ebp - 0x6c], 0x370037
mov word [ebp - 0x68], dx
xor eax, eax
xor word [ebp + eax*2 - 0x88], 0x5b
inc eax
cmp eax, 0x10
jb 0x410b52
xor eax, eax
mov ecx, 0x64
xor edx, edx
mov word [ebp - 0x16], ax
mov dword [ebp - 0x24], 0x650067
mov dword [ebp - 0x20], 0x470074
mov dword [ebp - 0x1c], 0x690075
mov word [ebp - 0x18], cx
mov dword [ebp - 0x114], 0x3e003c
mov dword [ebp - 0x110], 0x18002f
mov dword [ebp - 0x10c], 0x3a0033
mov dword [ebp - 0x108], 0x350035
mov dword [ebp - 0x104], 0x37003e
mov dword [ebp - 0x100], 0x3f0012
mov word [ebp - 0xfc], dx
lea ebx, [ebx]
xor word [ebp + eax*2 - 0x114], 0x5b
inc eax
cmp eax, 0xc
jb 0x410bd0
mov dword [ebp - 0x1a0], 0x3e0028
mov dword [ebp - 0x19c], 0x3f0035
mov dword [ebp - 0x198], 0x34000b
mov dword [ebp - 0x194], 0x2f0028
mov dword [ebp - 0x190], 0x3e0009
mov dword [ebp - 0x18c], 0x2e002a
mov dword [ebp - 0x188], 0x28003e
mov dword [ebp - 0x184], 0x2f
xor eax, eax
xor word [ebp + eax*2 - 0x1a0], 0x5b
inc eax
cmp eax, 0xf
jb 0x410c31
mov edi, 0x4125d0
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x410c5f
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
test ecx, 0xffff0000
jne 0x410c9e
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x410cc3
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x410cc3
lea eax, [ebp - 0x40]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410ca4
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 7
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x410d17
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__XZ_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1a4], eax
jmp 0x410d21
mov dword [ebp - 0x1a4], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1ac], ecx
jne 0x410d5c
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x410d4c
mov eax, dword [eax + 8]
jmp 0x410d50
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x410d42
mov dword [ebp - 0x1ac], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x410d6e
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x410da9
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1ac]
push ecx
lea edi, [ebp - 0x1ac]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1a4]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410dd8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x4125f0
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x410df7
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 8
test ecx, 0xffff0000
jne 0x410e39
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x410e64
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x410e64
lea eax, [ebp - 0x148]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410e42
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 9
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x410eb8
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__ABV23__N_Z_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x410ec2
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x410efd
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x410eed
mov eax, dword [eax + 8]
jmp 0x410ef1
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x410ee3
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x410f0f
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x410f4a
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410f79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412650
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x410f98
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0xa
test ecx, 0xffff0000
jne 0x410fda
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x411005
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x411005
lea eax, [ebp - 0x180]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410fe3
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0xb
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x411059
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__ABV23__Z_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x411063
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x41109e
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x41108e
mov eax, dword [eax + 8]
jmp 0x411092
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x411084
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x4110b0
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x4110eb
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41111a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412680
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411139
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xc
test ecx, 0xffff0000
jne 0x41117b
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x4111a6
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x4111a6
lea eax, [ebp - 0xac]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x411184
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0xd
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x4111fa
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__ABV23__Z_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x411204
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x41123f
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x41122f
mov eax, dword [eax + 8]
jmp 0x411233
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x411225
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x411251
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x41128c
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4112bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412c00
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4112da
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xe
test ecx, 0xffff0000
jne 0x41131c
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x411347
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x411347
lea eax, [ebp - 0xf8]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x411325
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0xf
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x41139b
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__XZ_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x4113a5
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x4113e0
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x4113d0
mov eax, dword [eax + 8]
jmp 0x4113d4
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x4113c6
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x4113f2
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x41142d
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41145c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412cc0
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41147b
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x10
test ecx, 0xffff0000
jne 0x4114bd
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x4114e8
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x4114e8
lea eax, [ebp - 0xd0]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4114c6
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0x11
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x41153c
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__XZ_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x411546
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x411581
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x411571
mov eax, dword [eax + 8]
jmp 0x411575
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x411567
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x411593
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x4115ce
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4115fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412d00
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41161c
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
test ecx, 0xffff0000
jne 0x41165b
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x411680
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x411680
lea eax, [ebp - 0x64]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x411661
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0x13
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x4116d4
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__XZ_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x4116de
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x41171a
mov edx, dword [ebx + 0x15c]
nop
cmp dword [eax + 0xc], edx
jge 0x41170a
mov eax, dword [eax + 8]
jmp 0x41170e
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x411700
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x41172c
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x411767
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x411796
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412d30
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4117b5
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x14
test ecx, 0xffff0000
jne 0x4117f7
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x411822
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x411822
lea eax, [ebp - 0x88]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x411800
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0x15
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x411876
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__H_Z_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x411880
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x4118bb
mov edx, dword [ebx + 0x15c]
cmp dword [eax + 0xc], edx
jge 0x4118ab
mov eax, dword [eax + 8]
jmp 0x4118af
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x4118a1
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x4118cd
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x411908
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x411937
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, 0x412da0
call fcn.00415eb7
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411956
push 0x80004005
call fcn.00402460
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x16
test ecx, 0xffff0000
jne 0x411995
mov edx, ecx
movzx esi, dx
push esi
call fcn.00415dad
test eax, eax
je 0x4119bf
push esi
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004020d0
jmp 0x4119bf
lea eax, [ebp - 0x24]
lea edx, [eax + 2]
jmp 0x4119a0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4119a0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.004024b0
lea ecx, [ebx + 0x160]
mov byte [ebp - 4], 0x17
inc dword [ebx + 0x15c]
mov esi, dword [ebx + 0x15c]
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.00413300
mov dword [eax], esi
mov esi, dword [ebx + 0x15c]
push 0x18
call fcn.00415244
add esp, 4
test eax, eax
je 0x411a13
xor ecx, ecx
mov dword [eax], vtable.._AU__JSFunction_VCWebBrowserDlg__P81_AE_AV__CStringT__WV__StrTraitMFC__WV__ChTraitsCRT__W_ATL_____ATL__XZ_js__.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov dword [ebp - 0x1ac], eax
jmp 0x411a1d
mov dword [ebp - 0x1ac], 0
mov ecx, dword [ebx + 0x174]
mov eax, dword [ecx + 4]
cmp byte [eax + 0x15], 0
lea esi, [ebx + 0x170]
mov dword [ebp - 0x1a4], ecx
jne 0x411a5a
mov edx, dword [ebx + 0x15c]
mov edi, edi
cmp dword [eax + 0xc], edx
jge 0x411a4a
mov eax, dword [eax + 8]
jmp 0x411a4e
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x411a40
mov dword [ebp - 0x1a4], ecx
mov eax, ecx
cmp ecx, dword [esi + 4]
je 0x411a6c
mov edx, dword [ebx + 0x15c]
cmp edx, dword [ecx + 0xc]
jge 0x411aa7
mov eax, dword [ebx + 0x15c]
lea edi, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 0
call fcn.00413fc0
mov ecx, dword [ebp - 0x1a4]
push ecx
lea edi, [ebp - 0x1a4]
mov ecx, esi
call fcn.00413610
mov eax, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x10], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x411ad6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x1a4]
mov esi, 0x412dd0
xor edi, edi
call fcn.004025a0
push edi
push esi
push ebx
lea ecx, [ebp - 0x1a4]
lea eax, [ebx + 0x158]
mov byte [ebp - 4], 0x18
call fcn.00413170
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x411b2d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x1a4]
mov esi, 0x412fc0
xor edi, edi
call fcn.004025a0
push edi
push esi
push ebx
lea ecx, [ebp - 0x1a4]
lea eax, [ebx + 0x158]
mov byte [ebp - 4], 0x19
call fcn.004131f0
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1a4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x411b84
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0051d79f
mov esp, ebp
pop ebp
ret 0xc