Function at 0x403f60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47b75d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x158
mov eax, dword [0x49b180]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x121], cl
xorps xmm0, xmm0
mov dword [ebp - 0x128], 0
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
mov byte [ebp - 0x28], 0
and dword [ebp - 0x28], 0xfffffeff
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 5
mov ecx, 0x4a0988
mov edx, dword [0x4a0998]
mov byte [ebp - 0x118], 4
or dword [ebp - 0x118], 0x100
cmp dword [0x4a099c], 0xf
mov dword [ebp - 0x114], 0
cmova ecx, dword [0x4a0988]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
call fcn.00435d20
mov dword [ebp - 0x120], eax
push 0x48a367
push str.Edition
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 8
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov eax, dword [0x49bca8]
cdq
mov byte [ebp - 0x118], 1
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], edx
push 0x48a371
push str.SleepTime
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xb
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov eax, dword [0x49bcac]
cdq
mov byte [ebp - 0x118], 1
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], edx
push 0x48a378
push 0x48a374
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xe
call fcn.004378c0
push 0x48a380
push 0x48a37c
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 4
call fcn.00436510
mov edx, 0x49bcb0
lea ecx, [ebp - 0x144]
call fcn.0042e270
mov byte [ebp - 4], 0x10
mov edx, dword [eax + 0x10]
mov byte [ebp - 0x118], 4
or dword [ebp - 0x118], 0x100
cmp dword [eax + 0x14], 0xf
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
jbe 0x4041a3
mov eax, dword [eax]
mov ecx, eax
call fcn.00435d20
mov dword [ebp - 0x120], eax
push 0x48a388
push 0x48a384
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x13
call fcn.004378c0
push 0x48a394
push str.HostPath
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x40422c
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404222
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b7a
push ecx
push edx
call fcn.0045350b
add esp, 8
mov al, byte [0x49bcc9]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a39c
push str.Mode
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x16
call fcn.004378c0
push 0x48a3ab
push str.RestartHost
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bcca]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a3b5
push 0x48a3ac
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x19
call fcn.004378c0
push 0x48a3d0
push str.SeewoWhiteboard3Floating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bccb]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a3dd
push 0x48a3d4
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1c
call fcn.004378c0
push 0x48a3f8
push str.SeewoWhiteboard5Floating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bccc]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a405
push 0x48a3fc
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.004378c0
push 0x48a421
push str.SeewoWhiteboard5CFloating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bccd]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a42d
push 0x48a424
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x22
call fcn.004378c0
push 0x48a442
push str.SeewoPincoFloating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bccf]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a44d
push 0x48a444
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x25
call fcn.004378c0
push 0x48a460
push str.SeewoPPTFloating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bcd0]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a46d
push 0x48a464
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x28
call fcn.004378c0
push 0x48a47f
push str.AiClassFloating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [0x49bcd1]
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a489
push str.Intercept
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2b
call fcn.004378c0
push 0x48a4a2
push str.HiteAnnotationFloating
mov ecx, eax
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], 0
push 0x48a4b8
push str.ConfigurationChange
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2e
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
mov al, byte [ebp - 0x121]
xor al, 1
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], al
push 0x48a4c5
push str.KeepOpen
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x31
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
call fcn.00436510
xorps xmm0, xmm0
movups xmmword [ebp - 0x50], xmm0
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x50], vtable.Json::StreamWriterBuilder.0
mov byte [ebp - 0x40], 0
and dword [ebp - 0x40], 0xfffffeff
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x37
call fcn.0043be40
mov byte [ebp - 0x118], 5
and dword [ebp - 0x118], 0xfffffeff
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x120], 1
push 0x48a4d0
push 0x48a4c8
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.004378c0
push eax
lea ecx, [ebp - 0x120]
call fcn.004365e0
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x38
call fcn.00436510
lea ecx, [ebp - 0x50]
call fcn.0043b570
mov esi, eax
mov dword [ebp - 0x54], esi
push 0xb0
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.00455810
add esp, 0xc
mov dword [ebp - 0x108], 0x48d42c
lea ecx, [ebp - 0xa0]
call fcn.00406ed0
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x128], 1
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x108], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x10c], eax
lea ecx, [ebp - 0x108]
mov eax, dword [ebp - 0x108]
add ecx, dword [eax + 4]
lea eax, [ebp - 0x104]
push ecx
push eax
call fcn.00407270
mov dword [ebp - 4], 0x3f
mov eax, dword [ebp - 0x108]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x108], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x10c], eax
lea ecx, [ebp - 0x104]
call fcn.00406e20
mov byte [ebp - 4], 0x40
lea edi, [ebp - 0x108]
mov eax, dword [ebp - 0x108]
push ecx
push str.zh_CN.UTF8
lea ecx, [ebp - 0x14c]
add edi, dword [eax + 4]
call fcn.00401ed0
push eax
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x41
push eax
mov ecx, edi
call fcn.00405cc0
mov ecx, dword [ebp - 0x128]
test ecx, ecx
je 0x404876
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x404876
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x148]
test ecx, ecx
je 0x404899
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x404899
mov ecx, dword [eax]
push 1
mov edx, dword [ecx]
mov ecx, eax
call edx
mov edx, 0x49bd5c
lea ecx, [ebp - 0x164]
call fcn.0042e0a0
push 0x1e
push 0x48a4e0
mov ecx, eax
mov byte [ebp - 4], 0x42
call fcn.00405fa0
mov dword [ebp - 0x110], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x10c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x120], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x110], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea edx, [ebp - 0x120]
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x144]
call fcn.0042e270
mov byte [ebp - 4], 0x44
cmp dword [eax + 0x14], 0xf
jbe 0x404924
mov eax, dword [eax]
push ecx
push 2
push eax
lea ecx, [ebp - 0x104]
call fcn.00406cf0
test eax, eax
lea ecx, [ebp - 0x108]
mov eax, dword [ebp - 0x108]
push 0
je 0x404957
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x40496c
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00402410
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x4049b0
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4049a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b7f
push ecx
push edx
call fcn.0045350b
add esp, 8
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp ecx, 7
jbe 0x404a0f
mov edx, dword [ebp - 0x120]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404a05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b7f
push ecx
push edx
call fcn.0045350b
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 7
mov word [ebp - 0x120], ax
cmp ecx, 7
jbe 0x404a70
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404a66
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404b7f
push ecx
push edx
call fcn.0045350b
add esp, 8
mov eax, dword [esi]
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, esi
call dword [eax + 4]
lea ecx, [ebp - 0x104]
call fcn.00406c10
test eax, eax
jne 0x404aba
mov eax, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00402410
mov eax, dword [ebp - 0x108]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x108], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x10c], eax
lea ecx, [ebp - 0x104]
call fcn.00405820
mov eax, dword [ebp - 0x108]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x108], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x10c], eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x45
push eax
mov dword [ebp - 0xa0], vtable.std::ios_base.0
call fcn.0043d240
add esp, 4
test esi, esi
je 0x404b3c
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x50], vtable.Json::StreamWriterBuilder.0
call fcn.00436510
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x50], vtable.Json::StreamWriter::Factory.0
call fcn.00436510
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00453277
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0045a09f
call fcn.0045a09f
int3