Function at 0x43d280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x482ba8
mov eax, dword fs:[0]
push eax
sub esp, 0x8e8
mov eax, dword [0x49f750]
xor eax, esp
mov dword [esp + 0x8e0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49f750]
xor eax, esp
push eax
lea eax, [esp + 0x8fc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x90c]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
xor eax, eax
mov dword [esp + 0x580], 0
mov dword [esp + 0x584], 0
mov dword [esp + 0x584], 7
mov dword [esp + 0x580], 0
mov word [esp + 0x570], ax
mov dword [esp + 0x904], 1
mov dword [esp + 0x6b0], 0x330032
mov dword [esp + 0x6b4], 0x350034
mov dword [esp + 0x6b8], 0x610053
mov dword [esp + 0x6bc], 0x650066
mov dword [esp + 0x6c0], 0x720054
mov dword [esp + 0x6c4], 0x790061
mov dword [esp + 0x6c8], 0x65002e
mov dword [esp + 0x6cc], 0x650078
mov word [esp + 0x6d0], ax
mov dword [esp + 0x6d4], 0x330032
mov dword [esp + 0x6d8], 0x350034
mov dword [esp + 0x6dc], 0x540052
mov dword [esp + 0x6e0], 0x720050
mov dword [esp + 0x6e4], 0x74006f
mov dword [esp + 0x6e8], 0x630065
mov dword [esp + 0x6ec], 0x2e0074
mov dword [esp + 0x6f0], 0x780065
mov dword [esp + 0x6f4], 0x65
mov dword [esp + 0x60c], 0x510051
mov dword [esp + 0x610], 0x430050
mov dword [esp + 0x614], 0x540052
mov dword [esp + 0x618], 0x2e0050
mov dword [esp + 0x61c], 0x780065
mov dword [esp + 0x620], 0x65
mov dword [esp + 0x658], 0x510051
mov dword [esp + 0x65c], 0x430050
mov dword [esp + 0x660], 0x720054
mov dword [esp + 0x664], 0x790061
mov dword [esp + 0x668], 0x65002e
mov dword [esp + 0x66c], 0x650078
mov word [esp + 0x670], ax
mov dword [esp + 0x59c], 0x360033
mov dword [esp + 0x5a0], 0x730030
mov dword [esp + 0x5a4], 0x2e0064
mov dword [esp + 0x5a8], 0x780065
mov dword [esp + 0x5ac], 0x65
mov dword [esp + 0x588], 0x360033
mov dword [esp + 0x58c], 0x720030
mov dword [esp + 0x590], 0x2e0070
mov dword [esp + 0x594], 0x780065
mov dword [esp + 0x598], 0x65
mov dword [esp + 0x624], 0x360033
mov dword [esp + 0x628], 0x740030
mov dword [esp + 0x62c], 0x610072
mov dword [esp + 0x630], 0x2e0079
mov dword [esp + 0x634], 0x780065
mov dword [esp + 0x638], 0x65
mov dword [esp + 0x5dc], 0x610042
mov dword [esp + 0x5e0], 0x640069
mov dword [esp + 0x5e4], 0x410075
mov dword [esp + 0x5e8], 0x2e006e
mov dword [esp + 0x5ec], 0x780065
mov dword [esp + 0x5f0], 0x65
mov dword [esp + 0x690], 0x610042
mov dword [esp + 0x694], 0x640069
mov dword [esp + 0x698], 0x410075
mov dword [esp + 0x69c], 0x53006e
mov dword [esp + 0x6a0], 0x630076
mov dword [esp + 0x6a4], 0x65002e
mov dword [esp + 0x6a8], 0x650078
mov word [esp + 0x6ac], ax
mov dword [esp + 0x5f4], 0x610042
mov dword [esp + 0x5f8], 0x640069
mov dword [esp + 0x5fc], 0x530075
mov dword [esp + 0x600], 0x2e0064
mov dword [esp + 0x604], 0x780065
mov dword [esp + 0x608], 0x65
mov dword [esp + 0x7c4], 0x610042
mov dword [esp + 0x7c8], 0x640069
mov dword [esp + 0x7cc], 0x530075
mov dword [esp + 0x7d0], 0x540064
mov dword [esp + 0x7d4], 0x610072
mov dword [esp + 0x7d8], 0x2e0079
mov dword [esp + 0x7dc], 0x780065
mov dword [esp + 0x7e0], 0x65
mov dword [esp + 0x63c], 0x78006b
mov dword [esp + 0x640], 0x730065
mov dword [esp + 0x644], 0x6f0063
mov dword [esp + 0x648], 0x650072
mov dword [esp + 0x64c], 0x65002e
mov dword [esp + 0x650], 0x650078
mov word [esp + 0x654], ax
mov dword [esp + 0x5c4], 0x78006b
mov dword [esp + 0x5c8], 0x740065
mov dword [esp + 0x5cc], 0x610072
mov dword [esp + 0x5d0], 0x2e0079
mov dword [esp + 0x5d4], 0x780065
mov dword [esp + 0x5d8], 0x65
mov dword [esp + 0x5b0], 0x53004b
mov dword [esp + 0x5b4], 0x660061
mov dword [esp + 0x5b8], 0x2e0065
mov dword [esp + 0x5bc], 0x780065
mov dword [esp + 0x5c0], 0x65
mov dword [esp + 0x674], 0x53004b
mov dword [esp + 0x678], 0x660061
mov dword [esp + 0x67c], 0x540065
mov dword [esp + 0x680], 0x610072
mov dword [esp + 0x684], 0x2e0079
mov dword [esp + 0x688], 0x780065
mov dword [esp + 0x68c], 0x65
mov dword [esp + 0x750], 0x690048
mov dword [esp + 0x754], 0x730070
mov dword [esp + 0x758], 0x720054
mov dword [esp + 0x75c], 0x790061
mov dword [esp + 0x760], 0x65002e
mov dword [esp + 0x764], 0x650078
mov word [esp + 0x768], ax
mov dword [esp + 0x76c], 0x510051
mov dword [esp + 0x770], 0x720042
mov dword [esp + 0x774], 0x77006f
mov dword [esp + 0x778], 0x650073
mov dword [esp + 0x77c], 0x2e0072
mov dword [esp + 0x780], 0x780065
mov dword [esp + 0x784], 0x65
mov dword [esp + 0x788], 0x730054
mov dword [esp + 0x78c], 0x650053
mov dword [esp + 0x790], 0x760072
mov dword [esp + 0x794], 0x630069
mov dword [esp + 0x798], 0x2e0065
mov dword [esp + 0x79c], 0x780065
mov dword [esp + 0x7a0], 0x65
mov dword [esp + 0x824], 0x330032
mov dword [esp + 0x828], 0x350034
mov dword [esp + 0x82c], 0x780045
mov dword [esp + 0x830], 0x6c0070
mov dword [esp + 0x834], 0x72006f
mov dword [esp + 0x838], 0x720065
mov dword [esp + 0x83c], 0x65002e
mov dword [esp + 0x840], 0x650078
mov word [esp + 0x844], ax
mov dword [esp + 0x708], 0x360033
mov dword [esp + 0x70c], 0x730030
mov dword [esp + 0x710], 0x2e0065
mov dword [esp + 0x714], 0x780065
mov dword [esp + 0x718], 0x65
mov dword [esp + 0x848], 0x6f0053
mov dword [esp + 0x84c], 0x6f0067
mov dword [esp + 0x850], 0x450075
mov dword [esp + 0x854], 0x700078
mov dword [esp + 0x858], 0x6f006c
mov dword [esp + 0x85c], 0x650072
mov dword [esp + 0x860], 0x2e0072
mov dword [esp + 0x864], 0x780065
mov dword [esp + 0x868], 0x65
mov dword [esp + 0x71c], 0x680063
mov dword [esp + 0x720], 0x6f0072
mov dword [esp + 0x724], 0x65006d
mov dword [esp + 0x728], 0x65002e
mov dword [esp + 0x72c], 0x650078
mov word [esp + 0x730], ax
xorps xmm0, xmm0
mov dword [esp + 0x558], eax
movq qword [esp + 0x550], xmm0
mov dword [esp + 0x8c0], 0x720050
mov dword [esp + 0x8c4], 0x74006f
mov dword [esp + 0x8c8], 0x630065
mov dword [esp + 0x8cc], 0x5f0074
mov dword [esp + 0x8d0], 0x330032
mov dword [esp + 0x8d4], 0x350034
mov dword [esp + 0x8d8], 0x780045
mov dword [esp + 0x8dc], 0x6c0070
mov dword [esp + 0x8e0], 0x72006f
mov dword [esp + 0x8e4], 0x720065
mov dword [esp + 0x8e8], 0x65002e
mov dword [esp + 0x8ec], 0x650078
mov word [esp + 0x8f0], ax
mov dword [esp + 0x890], 0x680053
mov dword [esp + 0x894], 0x650069
mov dword [esp + 0x898], 0x64006c
mov dword [esp + 0x89c], 0x32005f
mov dword [esp + 0x8a0], 0x340033
mov dword [esp + 0x8a4], 0x450035
mov dword [esp + 0x8a8], 0x700078
mov dword [esp + 0x8ac], 0x6f006c
mov dword [esp + 0x8b0], 0x650072
mov dword [esp + 0x8b4], 0x2e0072
mov dword [esp + 0x8b8], 0x780065
mov dword [esp + 0x8bc], 0x65
mov dword [esp + 0x7e4], 0x330032
mov dword [esp + 0x7e8], 0x350034
mov dword [esp + 0x7ec], 0x610053
mov dword [esp + 0x7f0], 0x650066
mov dword [esp + 0x7f4], 0x760053
mov dword [esp + 0x7f8], 0x2e0063
mov dword [esp + 0x7fc], 0x780065
mov dword [esp + 0x800], 0x65
mov dword [esp + 0x804], 0x330032
mov dword [esp + 0x808], 0x350034
mov dword [esp + 0x80c], 0x6f0053
mov dword [esp + 0x810], 0x740066
mov dword [esp + 0x814], 0x760053
mov dword [esp + 0x818], 0x2e0063
mov dword [esp + 0x81c], 0x780065
mov dword [esp + 0x820], 0x65
mov dword [esp + 0x86c], 0x330032
mov dword [esp + 0x870], 0x350034
mov dword [esp + 0x874], 0x690050
mov dword [esp + 0x878], 0x79006e
mov dword [esp + 0x87c], 0x6e0069
mov dword [esp + 0x880], 0x760053
mov dword [esp + 0x884], 0x2e0063
mov dword [esp + 0x888], 0x780065
mov dword [esp + 0x88c], 0x65
mov dword [esp + 0x7a4], 0x6f0053
mov dword [esp + 0x7a8], 0x6f0067
mov dword [esp + 0x7ac], 0x430075
mov dword [esp + 0x7b0], 0x6f006c
mov dword [esp + 0x7b4], 0x640075
mov dword [esp + 0x7b8], 0x65002e
mov dword [esp + 0x7bc], 0x650078
mov word [esp + 0x7c0], ax
mov dword [esp + 0x734], 0x6f0053
mov dword [esp + 0x738], 0x6f0067
mov dword [esp + 0x73c], 0x530075
mov dword [esp + 0x740], 0x630076
mov dword [esp + 0x744], 0x65002e
mov dword [esp + 0x748], 0x650078
mov word [esp + 0x74c], ax
mov dword [esp + 0x6f8], 0x710071
mov dword [esp + 0x6fc], 0x65002e
mov dword [esp + 0x700], 0x650078
mov word [esp + 0x704], ax
mov dword [esp + 0x550], eax
mov dword [esp + 0x554], eax
mov dword [esp + 0x558], eax
mov byte [esp + 0x904], 2
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x6b0], ax
jne 0x43dcc0
xor ecx, ecx
jmp 0x43dcdf
lea ecx, [esp + 0x6b0]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43dcd0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x6b4]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 3
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x6d4], ax
jne 0x43dd2e
xor ecx, ecx
jmp 0x43dd4f
lea ecx, [esp + 0x6d4]
lea edx, [ecx + 2]
jmp 0x43dd40
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43dd40
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x6d8]
push eax
lea ecx, [esp + 0x38]
call fcn.00403a40
mov byte [esp + 0x904], 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 5
cmp dword [esp + 0x44], 8
jb 0x43dd95
push dword [esp + 0x30]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43ddc7
push dword [esp + 0x18]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 2
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x60c], ax
jne 0x43de0d
xor ecx, ecx
jmp 0x43de26
lea ecx, [esp + 0x60c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43de17
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x610]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 7
xor eax, eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp word [esp + 0x658], ax
jne 0x43de75
xor ecx, ecx
jmp 0x43de8f
lea ecx, [esp + 0x658]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43de80
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x65c]
push eax
lea ecx, [esp + 0x6c]
call fcn.00403a40
mov byte [esp + 0x904], 8
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 9
cmp dword [esp + 0x78], 8
jb 0x43ded5
push dword [esp + 0x64]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x60], 8
jb 0x43df07
push dword [esp + 0x4c]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0x14], 3
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x624], ax
jne 0x43df4d
xor ecx, ecx
jmp 0x43df66
lea ecx, [esp + 0x624]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43df57
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x628]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 0xb
xor eax, eax
push eax
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 0
push 0x48da78
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
call fcn.00403a40
mov byte [esp + 0x904], 0xc
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 0xd
cmp dword [esp + 0x44], 8
jb 0x43dfea
push dword [esp + 0x30]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43e01c
push dword [esp + 0x18]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 4
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x59c], ax
jne 0x43e062
xor ecx, ecx
jmp 0x43e07f
lea ecx, [esp + 0x59c]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e070
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5a0]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 0xf
xor eax, eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp word [esp + 0x588], ax
jne 0x43e0ce
xor ecx, ecx
jmp 0x43e0ef
lea ecx, [esp + 0x588]
lea edx, [ecx + 2]
jmp 0x43e0e0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e0e0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x58c]
push eax
lea ecx, [esp + 0x6c]
call fcn.00403a40
mov byte [esp + 0x904], 0x10
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 0x11
cmp dword [esp + 0x78], 8
jb 0x43e135
push dword [esp + 0x64]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x60], 8
jb 0x43e167
push dword [esp + 0x4c]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0x14], 5
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x63c], ax
jne 0x43e1ad
xor ecx, ecx
jmp 0x43e1c6
lea ecx, [esp + 0x63c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e1b7
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x640]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 0x13
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x5c4], ax
jne 0x43e215
xor ecx, ecx
jmp 0x43e22f
lea ecx, [esp + 0x5c4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e220
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5c8]
push eax
lea ecx, [esp + 0x38]
call fcn.00403a40
mov byte [esp + 0x904], 0x14
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 0x15
cmp dword [esp + 0x44], 8
jb 0x43e275
push dword [esp + 0x30]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43e2a7
push dword [esp + 0x18]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 6
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x5b0], ax
jne 0x43e2ed
xor ecx, ecx
jmp 0x43e306
lea ecx, [esp + 0x5b0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e2f7
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5b4]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 0x17
xor eax, eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp word [esp + 0x674], ax
jne 0x43e355
xor ecx, ecx
jmp 0x43e36f
lea ecx, [esp + 0x674]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e360
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x678]
push eax
lea ecx, [esp + 0x6c]
call fcn.00403a40
mov byte [esp + 0x904], 0x18
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 0x19
cmp dword [esp + 0x78], 8
jb 0x43e3b5
push dword [esp + 0x64]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x60], 8
jb 0x43e3e7
push dword [esp + 0x4c]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0x14], 7
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x5dc], ax
jne 0x43e42d
xor ecx, ecx
jmp 0x43e446
lea ecx, [esp + 0x5dc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e437
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5e0]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 0x1b
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x690], ax
jne 0x43e495
xor ecx, ecx
jmp 0x43e4af
lea ecx, [esp + 0x690]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e4a0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x694]
push eax
lea ecx, [esp + 0x38]
call fcn.00403a40
mov byte [esp + 0x904], 0x1c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 0x1d
cmp dword [esp + 0x44], 8
jb 0x43e4f5
push dword [esp + 0x30]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43e527
push dword [esp + 0x18]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 8
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x5f4], ax
jne 0x43e56d
xor ecx, ecx
jmp 0x43e586
lea ecx, [esp + 0x5f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43e577
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5f8]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 0x1f
lea eax, [esp + 0x7c4]
push eax
lea ecx, [esp + 0x68]
call fcn.004031e0
mov byte [esp + 0x904], 0x20
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x48]
call fcn.0043cff0
lea eax, [esp + 0x750]
mov dword [esp + 0x14], 9
push eax
lea ecx, [esp + 0x1c]
call fcn.004031e0
mov byte [esp + 0x904], 0x21
lea ecx, [esp + 0x30]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x22
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x14]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0x488]
mov dword [esp + 0x484], 0xa
call fcn.004031e0
mov byte [esp + 0x904], 0x23
lea ecx, [esp + 0x49c]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x24
lea eax, [esp + 0x480]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x480]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0xe0]
mov dword [esp + 0xdc], 0xb
call fcn.004031e0
mov byte [esp + 0x904], 0x25
lea ecx, [esp + 0xf4]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x26
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0xd8]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0x114]
mov dword [esp + 0x110], 0xc
call fcn.004031e0
mov byte [esp + 0x904], 0x27
push 0x48da78
lea ecx, [esp + 0x12c]
call fcn.004031e0
mov byte [esp + 0x904], 0x28
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x10c]
call fcn.0043cff0
lea eax, [esp + 0x8c0]
mov dword [esp + 0x2e0], 0xd
push eax
lea ecx, [esp + 0x2e8]
call fcn.004031e0
mov byte [esp + 0x904], 0x29
lea ecx, [esp + 0x2fc]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x2a
lea eax, [esp + 0x2e0]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x2e0]
call fcn.0043cff0
lea eax, [esp + 0x7e4]
mov dword [esp + 0x418], 0xe
push eax
lea ecx, [esp + 0x420]
call fcn.004031e0
mov byte [esp + 0x904], 0x2b
lea ecx, [esp + 0x434]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x2c
lea eax, [esp + 0x418]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x418]
call fcn.0043cff0
lea eax, [esp + 0x804]
mov dword [esp + 0x348], 0xf
push eax
lea ecx, [esp + 0x350]
call fcn.004031e0
mov byte [esp + 0x904], 0x2d
lea ecx, [esp + 0x364]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x2e
lea eax, [esp + 0x348]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x348]
call fcn.0043cff0
lea eax, [esp + 0x86c]
mov dword [esp + 0x140], 0x10
push eax
lea ecx, [esp + 0x148]
call fcn.004031e0
mov byte [esp + 0x904], 0x2f
lea ecx, [esp + 0x15c]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x30
lea eax, [esp + 0x140]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x140]
call fcn.0043cff0
lea eax, [esp + 0x7a4]
mov dword [esp + 0x174], 0x11
push eax
lea ecx, [esp + 0x17c]
call fcn.004031e0
mov byte [esp + 0x904], 0x31
lea ecx, [esp + 0x190]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x32
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x174]
call fcn.0043cff0
lea eax, [esp + 0x734]
mov dword [esp + 0x210], 0x12
push eax
lea ecx, [esp + 0x218]
call fcn.004031e0
mov byte [esp + 0x904], 0x33
lea ecx, [esp + 0x22c]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x34
lea eax, [esp + 0x210]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x210]
call fcn.0043cff0
lea eax, [esp + 0x890]
mov dword [esp + 0x2ac], 0x13
push eax
lea ecx, [esp + 0x2b4]
call fcn.004031e0
mov byte [esp + 0x904], 0x35
lea ecx, [esp + 0x2c8]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x36
lea eax, [esp + 0x2ac]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x2ac]
call fcn.0043cff0
lea eax, [esp + 0x6f8]
mov dword [esp + 0x314], 0x14
push eax
lea ecx, [esp + 0x31c]
call fcn.004031e0
mov byte [esp + 0x904], 0x37
lea ecx, [esp + 0x330]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x38
lea eax, [esp + 0x314]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x314]
call fcn.0043cff0
lea eax, [esp + 0x824]
mov dword [esp + 0x37c], 0x15
push eax
lea ecx, [esp + 0x384]
call fcn.004031e0
mov byte [esp + 0x904], 0x39
lea ecx, [esp + 0x398]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x3a
lea eax, [esp + 0x37c]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x37c]
call fcn.0043cff0
lea eax, [esp + 0x76c]
mov dword [esp + 0x3e4], 0x16
push eax
lea ecx, [esp + 0x3ec]
call fcn.004031e0
mov byte [esp + 0x904], 0x3b
lea ecx, [esp + 0x400]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x3c
lea eax, [esp + 0x3e4]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x3e4]
call fcn.0043cff0
lea eax, [esp + 0x848]
mov dword [esp + 0x44c], 0x17
push eax
lea ecx, [esp + 0x454]
call fcn.004031e0
mov byte [esp + 0x904], 0x3d
lea ecx, [esp + 0x468]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x3e
lea eax, [esp + 0x44c]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x44c]
call fcn.0043cff0
lea eax, [esp + 0x71c]
mov dword [esp + 0x4b4], 0x18
push eax
lea ecx, [esp + 0x4bc]
call fcn.004031e0
mov byte [esp + 0x904], 0x3f
lea ecx, [esp + 0x4d0]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x40
lea eax, [esp + 0x4b4]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4b4]
call fcn.0043cff0
lea eax, [esp + 0x708]
mov dword [esp + 0x51c], 0x19
push eax
lea ecx, [esp + 0x524]
call fcn.004031e0
mov byte [esp + 0x904], 0x41
lea ecx, [esp + 0x538]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x42
lea eax, [esp + 0x51c]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x51c]
call fcn.0043cff0
lea eax, [esp + 0x788]
mov dword [esp + 0x278], 0x1a
push eax
lea ecx, [esp + 0x280]
call fcn.004031e0
mov byte [esp + 0x904], 0x43
lea ecx, [esp + 0x294]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x44
lea eax, [esp + 0x278]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x278]
call fcn.0043cff0
push str.iexplore.exe
lea ecx, [esp + 0x24c]
mov dword [esp + 0x248], 0x1b
call fcn.004031e0
mov byte [esp + 0x904], 0x45
lea ecx, [esp + 0x260]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x46
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x244]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0x1e4]
mov dword [esp + 0x1e0], 0x1c
call fcn.004031e0
mov byte [esp + 0x904], 0x47
lea ecx, [esp + 0x1f8]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x48
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x1dc]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0x4f0]
mov dword [esp + 0x4ec], 0x1d
call fcn.004031e0
mov byte [esp + 0x904], 0x49
lea ecx, [esp + 0x504]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x4a
lea eax, [esp + 0x4e8]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4e8]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x1ac], 0x1e
call fcn.004031e0
mov byte [esp + 0x904], 0x4b
lea ecx, [esp + 0x1c4]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x4c
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x1a8]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0xac]
mov dword [esp + 0xa8], 0x1f
call fcn.004031e0
mov byte [esp + 0x904], 0x4d
lea ecx, [esp + 0xc0]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x4e
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0xa4]
call fcn.0043cff0
push 0x48da78
lea ecx, [esp + 0x3b8]
mov dword [esp + 0x3b4], 0x20
call fcn.004031e0
mov byte [esp + 0x904], 0x4f
lea ecx, [esp + 0x3cc]
push 0x48da78
call fcn.004031e0
mov byte [esp + 0x904], 0x50
lea eax, [esp + 0x3b0]
push eax
lea ecx, [esp + 0x554]
call fcn.0043fc40
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x3b0]
call fcn.0043cff0
xorps xmm0, xmm0
mov dword [esp + 0x56c], 0
movq qword [esp + 0x564], xmm0
mov dword [esp + 0x564], 0
mov dword [esp + 0x568], 0
mov dword [esp + 0x56c], 0
mov byte [esp + 0x904], 0x51
lea ecx, [esp + 0x564]
call fcn.004150b0
xorps xmm0, xmm0
movq qword [esp + 0x55c], xmm0
mov dword [esp + 0x55c], 0
mov dword [esp + 0x560], 0
call fcn.004402e0
mov dword [esp + 0x55c], eax
mov byte [esp + 0x904], 0x56
mov ebx, dword [esp + 0x568]
mov edi, ebx
mov eax, dword [esp + 0x564]
sub edi, eax
sar edi, 5
test edi, edi
je 0x43f03b
mov esi, eax
mov edi, edi
mov ecx, esi
call fcn.00411430
movzx eax, byte [0x4a25cd]
push eax
push esi
push ecx
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x56c]
call fcn.004403f0
add esi, 0x20
dec edi
jne 0x43f010
mov ecx, dword [esp + 0x554]
mov eax, 0x4ec4ec4f
mov esi, dword [esp + 0x550]
xor edi, edi
sub ecx, esi
imul ecx
sar edx, 4
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov dword [esp + 0x8c], ebp
je 0x43f097
add esi, 0x1c
lea ebx, [ebx]
lea ecx, [esi - 0x18]
call fcn.00411430
mov ecx, esi
call fcn.00411430
inc edi
cmp dword [esi - 0x1c], edi
jne 0x43f166
add esi, 0x34
cmp edi, ebp
jb 0x43f070
mov esi, dword [esp + 0x550]
mov eax, dword [esp + 0x580]
cmp eax, 0x20
jae 0x43f0cf
jmp 0x43f0b0
push 1
push 0x48dac4
lea ecx, [esp + 0x578]
call fcn.00406760
mov eax, dword [esp + 0x580]
cmp eax, 0x20
jb 0x43f0b0
cmp ebp, eax
je 0x43f1f5
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x570]
push eax
mov ecx, ebp
call fcn.00403240
mov dword [esp + 0x7c], 1
mov byte [esp + 0x904], 0x5c
lea ecx, [esp + 0x55c]
mov eax, dword [esp + 0x55c]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.0043ff00
mov byte [esp + 0x904], 0x51
push dword [esp + 0x55c]
call fcn.00461b75
add esp, 4
mov byte [esp + 0x904], 2
mov edi, dword [esp + 0x564]
test edi, edi
je 0x43f438
mov esi, edi
cmp edi, ebx
je 0x43f40e
mov ecx, esi
call fcn.004032f0
add esi, 0x20
cmp esi, ebx
jne 0x43f153
jmp 0x43f40e
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x570]
push eax
mov ecx, ebp
call fcn.00403240
mov dword [esp + 0x7c], 1
mov byte [esp + 0x904], 0x58
lea ecx, [esp + 0x55c]
mov eax, dword [esp + 0x55c]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.0043ff00
mov byte [esp + 0x904], 0x51
push dword [esp + 0x55c]
call fcn.00461b75
add esp, 4
mov byte [esp + 0x904], 2
mov edi, dword [esp + 0x564]
test edi, edi
je 0x43f438
mov esi, edi
cmp edi, ebx
je 0x43f40e
mov ecx, esi
call fcn.004032f0
add esi, 0x20
cmp esi, ebx
jne 0x43f1e2
jmp 0x43f40e
xor ebp, ebp
cmp dword [esp + 0x8c], ebp
jbe 0x43f34c
lea ebx, [esi + 0x2c]
jmp 0x43f210
cmp dword [esp + 0x584], 8
lea eax, [esp + 0x570]
cmovae eax, dword [esp + 0x570]
cmp dword [ebx - 0x18], 0
lea eax, [eax + ebp*2]
mov dword [esp + 0x80], eax
je 0x43f2a9
mov edi, dword [esp + 0x55c]
lea eax, [ebx - 0x28]
push eax
lea ecx, [esp + 0x560]
call fcn.00425d70
mov esi, eax
cmp esi, dword [esp + 0x55c]
je 0x43f289
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x43f267
mov eax, dword [eax]
push ecx
push eax
push dword [ebx - 0x18]
push ecx
lea ecx, [ebx - 0x28]
call fcn.00408bd0
test eax, eax
js 0x43f289
mov dword [esp + 0x9c], esi
lea eax, [esp + 0x9c]
jmp 0x43f29e
mov eax, dword [esp + 0x55c]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x98]
cmp dword [eax], edi
mov eax, dword [esp + 0x80]
jne 0x43f325
cmp word [eax], 0x31
je 0x43f32d
cmp dword [ebx], 0
je 0x43f32d
mov edi, dword [esp + 0x55c]
lea eax, [ebx - 0x10]
push eax
lea ecx, [esp + 0x560]
call fcn.00425d70
mov esi, eax
cmp esi, dword [esp + 0x55c]
je 0x43f305
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x43f2e4
mov eax, dword [eax]
push ecx
push eax
push dword [ebx]
push ecx
lea ecx, [ebx - 0x10]
call fcn.00408bd0
test eax, eax
js 0x43f305
mov dword [esp + 0xa0], esi
lea eax, [esp + 0xa0]
jmp 0x43f31a
mov eax, dword [esp + 0x55c]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x90]
cmp dword [eax], edi
je 0x43f32d
mov eax, dword [esp + 0x80]
mov ecx, 0x31
mov word [eax], cx
inc ebp
add ebx, 0x34
cmp ebp, dword [esp + 0x8c]
jb 0x43f210
mov eax, dword [esp + 0x580]
mov ebx, dword [esp + 0x568]
cmp eax, 1
jbe 0x43f386
cmp dword [esp + 0x584], 8
lea esi, [esp + 0x570]
cmovae esi, dword [esp + 0x570]
cmp word [esi + 2], 0x31
jne 0x43f386
call fcn.0043fa70
test al, al
mov eax, 0x32
jne 0x43f382
mov eax, 0x33
mov word [esi + 2], ax
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x570]
push eax
mov ecx, ebp
call fcn.00403240
mov dword [esp + 0x7c], 1
mov byte [esp + 0x904], 0x60
lea ecx, [esp + 0x55c]
mov eax, dword [esp + 0x55c]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.0043ff00
mov byte [esp + 0x904], 0x51
push dword [esp + 0x55c]
call fcn.00461b75
add esp, 4
mov byte [esp + 0x904], 2
mov edi, dword [esp + 0x564]
test edi, edi
je 0x43f438
mov esi, edi
cmp edi, ebx
je 0x43f40e
lea ebx, [ebx]
mov ecx, esi
call fcn.004032f0
add esi, 0x20
cmp esi, ebx
jne 0x43f400
push edi
call fcn.00461b75
add esp, 4
mov dword [esp + 0x564], 0
mov dword [esp + 0x568], 0
mov dword [esp + 0x56c], 0
mov byte [esp + 0x904], 1
mov ebx, dword [esp + 0x550]
test ebx, ebx
je 0x43f48b
push dword [esp + 0x88]
mov edx, dword [esp + 0x558]
push ecx
mov ecx, ebx
call fcn.00440730
push ebx
call fcn.00461b75
add esp, 0xc
mov dword [esp + 0x550], 0
mov dword [esp + 0x554], 0
mov dword [esp + 0x558], 0
mov byte [esp + 0x904], 0
cmp dword [esp + 0x584], 8
jb 0x43f4ac
push dword [esp + 0x570]
call fcn.00461b75
add esp, 4
xor eax, eax
mov dword [esp + 0x584], 7
mov dword [esp + 0x580], eax
mov word [esp + 0x570], ax
mov eax, ebp
mov ecx, dword [esp + 0x8fc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8e0]
xor ecx, esp
call fcn.00461397
add esp, 0x8f4
ret 4