Function at 0x43e0b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x488728
mov eax, dword fs:[0]
push eax
sub esp, 0x8e8
mov eax, dword [0x4a9750]
xor eax, esp
mov dword [esp + 0x8e0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a9750]
xor eax, esp
push eax
lea eax, [esp + 0x8fc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x90c]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
xor eax, eax
mov dword [esp + 0x580], 0
mov dword [esp + 0x584], 0
mov dword [esp + 0x584], 7
mov dword [esp + 0x580], 0
mov word [esp + 0x570], ax
mov dword [esp + 0x904], 1
mov dword [esp + 0x6b0], 0x330032
mov dword [esp + 0x6b4], 0x350034
mov dword [esp + 0x6b8], 0x610053
mov dword [esp + 0x6bc], 0x650066
mov dword [esp + 0x6c0], 0x720054
mov dword [esp + 0x6c4], 0x790061
mov dword [esp + 0x6c8], 0x65002e
mov dword [esp + 0x6cc], 0x650078
mov word [esp + 0x6d0], ax
mov dword [esp + 0x6d4], 0x330032
mov dword [esp + 0x6d8], 0x350034
mov dword [esp + 0x6dc], 0x540052
mov dword [esp + 0x6e0], 0x720050
mov dword [esp + 0x6e4], 0x74006f
mov dword [esp + 0x6e8], 0x630065
mov dword [esp + 0x6ec], 0x2e0074
mov dword [esp + 0x6f0], 0x780065
mov dword [esp + 0x6f4], 0x65
mov dword [esp + 0x60c], 0x510051
mov dword [esp + 0x610], 0x430050
mov dword [esp + 0x614], 0x540052
mov dword [esp + 0x618], 0x2e0050
mov dword [esp + 0x61c], 0x780065
mov dword [esp + 0x620], 0x65
mov dword [esp + 0x658], 0x510051
mov dword [esp + 0x65c], 0x430050
mov dword [esp + 0x660], 0x720054
mov dword [esp + 0x664], 0x790061
mov dword [esp + 0x668], 0x65002e
mov dword [esp + 0x66c], 0x650078
mov word [esp + 0x670], ax
mov dword [esp + 0x59c], 0x360033
mov dword [esp + 0x5a0], 0x730030
mov dword [esp + 0x5a4], 0x2e0064
mov dword [esp + 0x5a8], 0x780065
mov dword [esp + 0x5ac], 0x65
mov dword [esp + 0x588], 0x360033
mov dword [esp + 0x58c], 0x720030
mov dword [esp + 0x590], 0x2e0070
mov dword [esp + 0x594], 0x780065
mov dword [esp + 0x598], 0x65
mov dword [esp + 0x624], 0x360033
mov dword [esp + 0x628], 0x740030
mov dword [esp + 0x62c], 0x610072
mov dword [esp + 0x630], 0x2e0079
mov dword [esp + 0x634], 0x780065
mov dword [esp + 0x638], 0x65
mov dword [esp + 0x5dc], 0x610042
mov dword [esp + 0x5e0], 0x640069
mov dword [esp + 0x5e4], 0x410075
mov dword [esp + 0x5e8], 0x2e006e
mov dword [esp + 0x5ec], 0x780065
mov dword [esp + 0x5f0], 0x65
mov dword [esp + 0x690], 0x610042
mov dword [esp + 0x694], 0x640069
mov dword [esp + 0x698], 0x410075
mov dword [esp + 0x69c], 0x53006e
mov dword [esp + 0x6a0], 0x630076
mov dword [esp + 0x6a4], 0x65002e
mov dword [esp + 0x6a8], 0x650078
mov word [esp + 0x6ac], ax
mov dword [esp + 0x5f4], 0x610042
mov dword [esp + 0x5f8], 0x640069
mov dword [esp + 0x5fc], 0x530075
mov dword [esp + 0x600], 0x2e0064
mov dword [esp + 0x604], 0x780065
mov dword [esp + 0x608], 0x65
mov dword [esp + 0x7c4], 0x610042
mov dword [esp + 0x7c8], 0x640069
mov dword [esp + 0x7cc], 0x530075
mov dword [esp + 0x7d0], 0x540064
mov dword [esp + 0x7d4], 0x610072
mov dword [esp + 0x7d8], 0x2e0079
mov dword [esp + 0x7dc], 0x780065
mov dword [esp + 0x7e0], 0x65
mov dword [esp + 0x63c], 0x78006b
mov dword [esp + 0x640], 0x730065
mov dword [esp + 0x644], 0x6f0063
mov dword [esp + 0x648], 0x650072
mov dword [esp + 0x64c], 0x65002e
mov dword [esp + 0x650], 0x650078
mov word [esp + 0x654], ax
mov dword [esp + 0x5c4], 0x78006b
mov dword [esp + 0x5c8], 0x740065
mov dword [esp + 0x5cc], 0x610072
mov dword [esp + 0x5d0], 0x2e0079
mov dword [esp + 0x5d4], 0x780065
mov dword [esp + 0x5d8], 0x65
mov dword [esp + 0x5b0], 0x53004b
mov dword [esp + 0x5b4], 0x660061
mov dword [esp + 0x5b8], 0x2e0065
mov dword [esp + 0x5bc], 0x780065
mov dword [esp + 0x5c0], 0x65
mov dword [esp + 0x674], 0x53004b
mov dword [esp + 0x678], 0x660061
mov dword [esp + 0x67c], 0x540065
mov dword [esp + 0x680], 0x610072
mov dword [esp + 0x684], 0x2e0079
mov dword [esp + 0x688], 0x780065
mov dword [esp + 0x68c], 0x65
mov dword [esp + 0x750], 0x690048
mov dword [esp + 0x754], 0x730070
mov dword [esp + 0x758], 0x720054
mov dword [esp + 0x75c], 0x790061
mov dword [esp + 0x760], 0x65002e
mov dword [esp + 0x764], 0x650078
mov word [esp + 0x768], ax
mov dword [esp + 0x76c], 0x510051
mov dword [esp + 0x770], 0x720042
mov dword [esp + 0x774], 0x77006f
mov dword [esp + 0x778], 0x650073
mov dword [esp + 0x77c], 0x2e0072
mov dword [esp + 0x780], 0x780065
mov dword [esp + 0x784], 0x65
mov dword [esp + 0x788], 0x730054
mov dword [esp + 0x78c], 0x650053
mov dword [esp + 0x790], 0x760072
mov dword [esp + 0x794], 0x630069
mov dword [esp + 0x798], 0x2e0065
mov dword [esp + 0x79c], 0x780065
mov dword [esp + 0x7a0], 0x65
mov dword [esp + 0x824], 0x330032
mov dword [esp + 0x828], 0x350034
mov dword [esp + 0x82c], 0x780045
mov dword [esp + 0x830], 0x6c0070
mov dword [esp + 0x834], 0x72006f
mov dword [esp + 0x838], 0x720065
mov dword [esp + 0x83c], 0x65002e
mov dword [esp + 0x840], 0x650078
mov word [esp + 0x844], ax
mov dword [esp + 0x708], 0x360033
mov dword [esp + 0x70c], 0x730030
mov dword [esp + 0x710], 0x2e0065
mov dword [esp + 0x714], 0x780065
mov dword [esp + 0x718], 0x65
mov dword [esp + 0x848], 0x6f0053
mov dword [esp + 0x84c], 0x6f0067
mov dword [esp + 0x850], 0x450075
mov dword [esp + 0x854], 0x700078
mov dword [esp + 0x858], 0x6f006c
mov dword [esp + 0x85c], 0x650072
mov dword [esp + 0x860], 0x2e0072
mov dword [esp + 0x864], 0x780065
mov dword [esp + 0x868], 0x65
mov dword [esp + 0x71c], 0x680063
mov dword [esp + 0x720], 0x6f0072
mov dword [esp + 0x724], 0x65006d
mov dword [esp + 0x728], 0x65002e
mov dword [esp + 0x72c], 0x650078
mov word [esp + 0x730], ax
xorps xmm0, xmm0
mov dword [esp + 0x558], eax
movq qword [esp + 0x550], xmm0
mov dword [esp + 0x8c0], 0x720050
mov dword [esp + 0x8c4], 0x74006f
mov dword [esp + 0x8c8], 0x630065
mov dword [esp + 0x8cc], 0x5f0074
mov dword [esp + 0x8d0], 0x330032
mov dword [esp + 0x8d4], 0x350034
mov dword [esp + 0x8d8], 0x780045
mov dword [esp + 0x8dc], 0x6c0070
mov dword [esp + 0x8e0], 0x72006f
mov dword [esp + 0x8e4], 0x720065
mov dword [esp + 0x8e8], 0x65002e
mov dword [esp + 0x8ec], 0x650078
mov word [esp + 0x8f0], ax
mov dword [esp + 0x890], 0x680053
mov dword [esp + 0x894], 0x650069
mov dword [esp + 0x898], 0x64006c
mov dword [esp + 0x89c], 0x32005f
mov dword [esp + 0x8a0], 0x340033
mov dword [esp + 0x8a4], 0x450035
mov dword [esp + 0x8a8], 0x700078
mov dword [esp + 0x8ac], 0x6f006c
mov dword [esp + 0x8b0], 0x650072
mov dword [esp + 0x8b4], 0x2e0072
mov dword [esp + 0x8b8], 0x780065
mov dword [esp + 0x8bc], 0x65
mov dword [esp + 0x7e4], 0x330032
mov dword [esp + 0x7e8], 0x350034
mov dword [esp + 0x7ec], 0x610053
mov dword [esp + 0x7f0], 0x650066
mov dword [esp + 0x7f4], 0x760053
mov dword [esp + 0x7f8], 0x2e0063
mov dword [esp + 0x7fc], 0x780065
mov dword [esp + 0x800], 0x65
mov dword [esp + 0x804], 0x330032
mov dword [esp + 0x808], 0x350034
mov dword [esp + 0x80c], 0x6f0053
mov dword [esp + 0x810], 0x740066
mov dword [esp + 0x814], 0x760053
mov dword [esp + 0x818], 0x2e0063
mov dword [esp + 0x81c], 0x780065
mov dword [esp + 0x820], 0x65
mov dword [esp + 0x86c], 0x330032
mov dword [esp + 0x870], 0x350034
mov dword [esp + 0x874], 0x690050
mov dword [esp + 0x878], 0x79006e
mov dword [esp + 0x87c], 0x6e0069
mov dword [esp + 0x880], 0x760053
mov dword [esp + 0x884], 0x2e0063
mov dword [esp + 0x888], 0x780065
mov dword [esp + 0x88c], 0x65
mov dword [esp + 0x7a4], 0x6f0053
mov dword [esp + 0x7a8], 0x6f0067
mov dword [esp + 0x7ac], 0x430075
mov dword [esp + 0x7b0], 0x6f006c
mov dword [esp + 0x7b4], 0x640075
mov dword [esp + 0x7b8], 0x65002e
mov dword [esp + 0x7bc], 0x650078
mov word [esp + 0x7c0], ax
mov dword [esp + 0x734], 0x6f0053
mov dword [esp + 0x738], 0x6f0067
mov dword [esp + 0x73c], 0x530075
mov dword [esp + 0x740], 0x630076
mov dword [esp + 0x744], 0x65002e
mov dword [esp + 0x748], 0x650078
mov word [esp + 0x74c], ax
mov dword [esp + 0x6f8], 0x710071
mov dword [esp + 0x6fc], 0x65002e
mov dword [esp + 0x700], 0x650078
mov word [esp + 0x704], ax
mov dword [esp + 0x550], eax
mov dword [esp + 0x554], eax
mov dword [esp + 0x558], eax
mov byte [esp + 0x904], 2
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x6b0], ax
jne 0x43eaf0
xor ecx, ecx
jmp 0x43eb0f
lea ecx, [esp + 0x6b0]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43eb00
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x6b4]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 3
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x6d4], ax
jne 0x43eb5e
xor ecx, ecx
jmp 0x43eb7f
lea ecx, [esp + 0x6d4]
lea edx, [ecx + 2]
jmp 0x43eb70
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43eb70
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x6d8]
push eax
lea ecx, [esp + 0x38]
call fcn.00403a40
mov byte [esp + 0x904], 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 5
cmp dword [esp + 0x44], 8
jb 0x43ebc5
push dword [esp + 0x30]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43ebf7
push dword [esp + 0x18]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 2
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x60c], ax
jne 0x43ec3d
xor ecx, ecx
jmp 0x43ec56
lea ecx, [esp + 0x60c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43ec47
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x610]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 7
xor eax, eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp word [esp + 0x658], ax
jne 0x43eca5
xor ecx, ecx
jmp 0x43ecbf
lea ecx, [esp + 0x658]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43ecb0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x65c]
push eax
lea ecx, [esp + 0x6c]
call fcn.00403a40
mov byte [esp + 0x904], 8
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 9
cmp dword [esp + 0x78], 8
jb 0x43ed05
push dword [esp + 0x64]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x60], 8
jb 0x43ed37
push dword [esp + 0x4c]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0x14], 3
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x624], ax
jne 0x43ed7d
xor ecx, ecx
jmp 0x43ed96
lea ecx, [esp + 0x624]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43ed87
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x628]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 0xb
xor eax, eax
push eax
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 0
push 0x493a78
mov dword [esp + 0x4c], 7
mov dword [esp + 0x48], 0
mov word [esp + 0x38], ax
call fcn.00403a40
mov byte [esp + 0x904], 0xc
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 0xd
cmp dword [esp + 0x44], 8
jb 0x43ee1a
push dword [esp + 0x30]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43ee4c
push dword [esp + 0x18]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 4
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x59c], ax
jne 0x43ee92
xor ecx, ecx
jmp 0x43eeaf
lea ecx, [esp + 0x59c]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43eea0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5a0]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 0xf
xor eax, eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp word [esp + 0x588], ax
jne 0x43eefe
xor ecx, ecx
jmp 0x43ef1f
lea ecx, [esp + 0x588]
lea edx, [ecx + 2]
jmp 0x43ef10
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43ef10
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x58c]
push eax
lea ecx, [esp + 0x6c]
call fcn.00403a40
mov byte [esp + 0x904], 0x10
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 0x11
cmp dword [esp + 0x78], 8
jb 0x43ef65
push dword [esp + 0x64]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x60], 8
jb 0x43ef97
push dword [esp + 0x4c]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0x14], 5
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x63c], ax
jne 0x43efdd
xor ecx, ecx
jmp 0x43eff6
lea ecx, [esp + 0x63c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43efe7
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x640]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 0x13
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x5c4], ax
jne 0x43f045
xor ecx, ecx
jmp 0x43f05f
lea ecx, [esp + 0x5c4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f050
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5c8]
push eax
lea ecx, [esp + 0x38]
call fcn.00403a40
mov byte [esp + 0x904], 0x14
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 0x15
cmp dword [esp + 0x44], 8
jb 0x43f0a5
push dword [esp + 0x30]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43f0d7
push dword [esp + 0x18]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 6
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x5b0], ax
jne 0x43f11d
xor ecx, ecx
jmp 0x43f136
lea ecx, [esp + 0x5b0]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f127
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5b4]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 0x17
xor eax, eax
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
cmp word [esp + 0x674], ax
jne 0x43f185
xor ecx, ecx
jmp 0x43f19f
lea ecx, [esp + 0x674]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f190
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x678]
push eax
lea ecx, [esp + 0x6c]
call fcn.00403a40
mov byte [esp + 0x904], 0x18
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 0x19
cmp dword [esp + 0x78], 8
jb 0x43f1e5
push dword [esp + 0x64]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], 0
mov word [esp + 0x64], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x60], 8
jb 0x43f217
push dword [esp + 0x4c]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
mov dword [esp + 0x14], 7
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], eax
mov word [esp + 0x18], ax
cmp word [esp + 0x5dc], ax
jne 0x43f25d
xor ecx, ecx
jmp 0x43f276
lea ecx, [esp + 0x5dc]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f267
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5e0]
push eax
lea ecx, [esp + 0x20]
call fcn.00403a40
mov byte [esp + 0x904], 0x1b
xor eax, eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
cmp word [esp + 0x690], ax
jne 0x43f2c5
xor ecx, ecx
jmp 0x43f2df
lea ecx, [esp + 0x690]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f2d0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x694]
push eax
lea ecx, [esp + 0x38]
call fcn.00403a40
mov byte [esp + 0x904], 0x1c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 0x1d
cmp dword [esp + 0x44], 8
jb 0x43f325
push dword [esp + 0x30]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], 0
mov word [esp + 0x30], ax
mov byte [esp + 0x904], 2
cmp dword [esp + 0x2c], 8
jb 0x43f357
push dword [esp + 0x18]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], 0
mov word [esp + 0x18], ax
mov dword [esp + 0x48], 8
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], eax
mov word [esp + 0x4c], ax
cmp word [esp + 0x5f4], ax
jne 0x43f39d
xor ecx, ecx
jmp 0x43f3b6
lea ecx, [esp + 0x5f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f3a7
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x5f8]
push eax
lea ecx, [esp + 0x54]
call fcn.00403a40
mov byte [esp + 0x904], 0x1f
lea eax, [esp + 0x7c4]
push eax
lea ecx, [esp + 0x68]
call fcn.004031e0
mov byte [esp + 0x904], 0x20
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x48]
call fcn.0043de20
lea eax, [esp + 0x750]
mov dword [esp + 0x14], 9
push eax
lea ecx, [esp + 0x1c]
call fcn.004031e0
mov byte [esp + 0x904], 0x21
lea ecx, [esp + 0x30]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x22
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x14]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0x488]
mov dword [esp + 0x484], 0xa
call fcn.004031e0
mov byte [esp + 0x904], 0x23
lea ecx, [esp + 0x49c]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x24
lea eax, [esp + 0x480]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x480]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0xe0]
mov dword [esp + 0xdc], 0xb
call fcn.004031e0
mov byte [esp + 0x904], 0x25
lea ecx, [esp + 0xf4]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x26
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0xd8]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0x114]
mov dword [esp + 0x110], 0xc
call fcn.004031e0
mov byte [esp + 0x904], 0x27
push 0x493a78
lea ecx, [esp + 0x12c]
call fcn.004031e0
mov byte [esp + 0x904], 0x28
lea eax, [esp + 0x10c]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x10c]
call fcn.0043de20
lea eax, [esp + 0x8c0]
mov dword [esp + 0x2e0], 0xd
push eax
lea ecx, [esp + 0x2e8]
call fcn.004031e0
mov byte [esp + 0x904], 0x29
lea ecx, [esp + 0x2fc]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x2a
lea eax, [esp + 0x2e0]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x2e0]
call fcn.0043de20
lea eax, [esp + 0x7e4]
mov dword [esp + 0x418], 0xe
push eax
lea ecx, [esp + 0x420]
call fcn.004031e0
mov byte [esp + 0x904], 0x2b
lea ecx, [esp + 0x434]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x2c
lea eax, [esp + 0x418]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x418]
call fcn.0043de20
lea eax, [esp + 0x804]
mov dword [esp + 0x348], 0xf
push eax
lea ecx, [esp + 0x350]
call fcn.004031e0
mov byte [esp + 0x904], 0x2d
lea ecx, [esp + 0x364]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x2e
lea eax, [esp + 0x348]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x348]
call fcn.0043de20
lea eax, [esp + 0x86c]
mov dword [esp + 0x140], 0x10
push eax
lea ecx, [esp + 0x148]
call fcn.004031e0
mov byte [esp + 0x904], 0x2f
lea ecx, [esp + 0x15c]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x30
lea eax, [esp + 0x140]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x140]
call fcn.0043de20
lea eax, [esp + 0x7a4]
mov dword [esp + 0x174], 0x11
push eax
lea ecx, [esp + 0x17c]
call fcn.004031e0
mov byte [esp + 0x904], 0x31
lea ecx, [esp + 0x190]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x32
lea eax, [esp + 0x174]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x174]
call fcn.0043de20
lea eax, [esp + 0x734]
mov dword [esp + 0x210], 0x12
push eax
lea ecx, [esp + 0x218]
call fcn.004031e0
mov byte [esp + 0x904], 0x33
lea ecx, [esp + 0x22c]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x34
lea eax, [esp + 0x210]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x210]
call fcn.0043de20
lea eax, [esp + 0x890]
mov dword [esp + 0x2ac], 0x13
push eax
lea ecx, [esp + 0x2b4]
call fcn.004031e0
mov byte [esp + 0x904], 0x35
lea ecx, [esp + 0x2c8]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x36
lea eax, [esp + 0x2ac]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x2ac]
call fcn.0043de20
lea eax, [esp + 0x6f8]
mov dword [esp + 0x314], 0x14
push eax
lea ecx, [esp + 0x31c]
call fcn.004031e0
mov byte [esp + 0x904], 0x37
lea ecx, [esp + 0x330]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x38
lea eax, [esp + 0x314]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x314]
call fcn.0043de20
lea eax, [esp + 0x824]
mov dword [esp + 0x37c], 0x15
push eax
lea ecx, [esp + 0x384]
call fcn.004031e0
mov byte [esp + 0x904], 0x39
lea ecx, [esp + 0x398]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x3a
lea eax, [esp + 0x37c]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x37c]
call fcn.0043de20
lea eax, [esp + 0x76c]
mov dword [esp + 0x3e4], 0x16
push eax
lea ecx, [esp + 0x3ec]
call fcn.004031e0
mov byte [esp + 0x904], 0x3b
lea ecx, [esp + 0x400]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x3c
lea eax, [esp + 0x3e4]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x3e4]
call fcn.0043de20
lea eax, [esp + 0x848]
mov dword [esp + 0x44c], 0x17
push eax
lea ecx, [esp + 0x454]
call fcn.004031e0
mov byte [esp + 0x904], 0x3d
lea ecx, [esp + 0x468]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x3e
lea eax, [esp + 0x44c]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x44c]
call fcn.0043de20
lea eax, [esp + 0x71c]
mov dword [esp + 0x4b4], 0x18
push eax
lea ecx, [esp + 0x4bc]
call fcn.004031e0
mov byte [esp + 0x904], 0x3f
lea ecx, [esp + 0x4d0]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x40
lea eax, [esp + 0x4b4]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4b4]
call fcn.0043de20
lea eax, [esp + 0x708]
mov dword [esp + 0x51c], 0x19
push eax
lea ecx, [esp + 0x524]
call fcn.004031e0
mov byte [esp + 0x904], 0x41
lea ecx, [esp + 0x538]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x42
lea eax, [esp + 0x51c]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x51c]
call fcn.0043de20
lea eax, [esp + 0x788]
mov dword [esp + 0x278], 0x1a
push eax
lea ecx, [esp + 0x280]
call fcn.004031e0
mov byte [esp + 0x904], 0x43
lea ecx, [esp + 0x294]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x44
lea eax, [esp + 0x278]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x278]
call fcn.0043de20
push str.iexplore.exe
lea ecx, [esp + 0x24c]
mov dword [esp + 0x248], 0x1b
call fcn.004031e0
mov byte [esp + 0x904], 0x45
lea ecx, [esp + 0x260]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x46
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x244]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0x1e4]
mov dword [esp + 0x1e0], 0x1c
call fcn.004031e0
mov byte [esp + 0x904], 0x47
lea ecx, [esp + 0x1f8]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x48
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x1dc]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0x4f0]
mov dword [esp + 0x4ec], 0x1d
call fcn.004031e0
mov byte [esp + 0x904], 0x49
lea ecx, [esp + 0x504]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x4a
lea eax, [esp + 0x4e8]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x4e8]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x1ac], 0x1e
call fcn.004031e0
mov byte [esp + 0x904], 0x4b
lea ecx, [esp + 0x1c4]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x4c
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x1a8]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0xac]
mov dword [esp + 0xa8], 0x1f
call fcn.004031e0
mov byte [esp + 0x904], 0x4d
lea ecx, [esp + 0xc0]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x4e
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0xa4]
call fcn.0043de20
push 0x493a78
lea ecx, [esp + 0x3b8]
mov dword [esp + 0x3b4], 0x20
call fcn.004031e0
mov byte [esp + 0x904], 0x4f
lea ecx, [esp + 0x3cc]
push 0x493a78
call fcn.004031e0
mov byte [esp + 0x904], 0x50
lea eax, [esp + 0x3b0]
push eax
lea ecx, [esp + 0x554]
call fcn.00440a70
mov byte [esp + 0x904], 2
lea ecx, [esp + 0x3b0]
call fcn.0043de20
xorps xmm0, xmm0
mov dword [esp + 0x56c], 0
movq qword [esp + 0x564], xmm0
mov dword [esp + 0x564], 0
mov dword [esp + 0x568], 0
mov dword [esp + 0x56c], 0
mov byte [esp + 0x904], 0x51
lea ecx, [esp + 0x564]
call fcn.004138a0
xorps xmm0, xmm0
movq qword [esp + 0x55c], xmm0
mov dword [esp + 0x55c], 0
mov dword [esp + 0x560], 0
call fcn.00441110
mov dword [esp + 0x55c], eax
mov byte [esp + 0x904], 0x56
mov ebx, dword [esp + 0x568]
mov edi, ebx
mov eax, dword [esp + 0x564]
sub edi, eax
sar edi, 5
test edi, edi
je 0x43fe6b
mov esi, eax
mov edi, edi
mov ecx, esi
call fcn.0040fbd0
movzx eax, byte [0x4ac611]
push eax
push esi
push ecx
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x56c]
call fcn.00441220
add esi, 0x20
dec edi
jne 0x43fe40
mov ecx, dword [esp + 0x554]
mov eax, 0x4ec4ec4f
mov esi, dword [esp + 0x550]
xor edi, edi
sub ecx, esi
imul ecx
sar edx, 4
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov dword [esp + 0x8c], ebp
je 0x43fec7
add esi, 0x1c
lea ebx, [ebx]
lea ecx, [esi - 0x18]
call fcn.0040fbd0
mov ecx, esi
call fcn.0040fbd0
inc edi
cmp dword [esi - 0x1c], edi
jne 0x43ff96
add esi, 0x34
cmp edi, ebp
jb 0x43fea0
mov esi, dword [esp + 0x550]
mov eax, dword [esp + 0x580]
cmp eax, 0x20
jae 0x43feff
jmp 0x43fee0
push 1
push 0x493a94
lea ecx, [esp + 0x578]
call fcn.00404e80
mov eax, dword [esp + 0x580]
cmp eax, 0x20
jb 0x43fee0
cmp ebp, eax
je 0x440025
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x570]
push eax
mov ecx, ebp
call fcn.00403240
mov dword [esp + 0x7c], 1
mov byte [esp + 0x904], 0x5c
lea ecx, [esp + 0x55c]
mov eax, dword [esp + 0x55c]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.00440d30
mov byte [esp + 0x904], 0x51
push dword [esp + 0x55c]
call fcn.00467305
add esp, 4
mov byte [esp + 0x904], 2
mov edi, dword [esp + 0x564]
test edi, edi
je 0x440268
mov esi, edi
cmp edi, ebx
je 0x44023e
mov ecx, esi
call fcn.004032f0
add esi, 0x20
cmp esi, ebx
jne 0x43ff83
jmp 0x44023e
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x570]
push eax
mov ecx, ebp
call fcn.00403240
mov dword [esp + 0x7c], 1
mov byte [esp + 0x904], 0x58
lea ecx, [esp + 0x55c]
mov eax, dword [esp + 0x55c]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.00440d30
mov byte [esp + 0x904], 0x51
push dword [esp + 0x55c]
call fcn.00467305
add esp, 4
mov byte [esp + 0x904], 2
mov edi, dword [esp + 0x564]
test edi, edi
je 0x440268
mov esi, edi
cmp edi, ebx
je 0x44023e
mov ecx, esi
call fcn.004032f0
add esi, 0x20
cmp esi, ebx
jne 0x440012
jmp 0x44023e
xor ebp, ebp
cmp dword [esp + 0x8c], ebp
jbe 0x44017c
lea ebx, [esi + 0x2c]
jmp 0x440040
cmp dword [esp + 0x584], 8
lea eax, [esp + 0x570]
cmovae eax, dword [esp + 0x570]
cmp dword [ebx - 0x18], 0
lea eax, [eax + ebp*2]
mov dword [esp + 0x80], eax
je 0x4400d9
mov edi, dword [esp + 0x55c]
lea eax, [ebx - 0x28]
push eax
lea ecx, [esp + 0x560]
call fcn.00424570
mov esi, eax
cmp esi, dword [esp + 0x55c]
je 0x4400b9
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x440097
mov eax, dword [eax]
push ecx
push eax
push dword [ebx - 0x18]
push ecx
lea ecx, [ebx - 0x28]
call fcn.00407370
test eax, eax
js 0x4400b9
mov dword [esp + 0x9c], esi
lea eax, [esp + 0x9c]
jmp 0x4400ce
mov eax, dword [esp + 0x55c]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x98]
cmp dword [eax], edi
mov eax, dword [esp + 0x80]
jne 0x440155
cmp word [eax], 0x31
je 0x44015d
cmp dword [ebx], 0
je 0x44015d
mov edi, dword [esp + 0x55c]
lea eax, [ebx - 0x10]
push eax
lea ecx, [esp + 0x560]
call fcn.00424570
mov esi, eax
cmp esi, dword [esp + 0x55c]
je 0x440135
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
jb 0x440114
mov eax, dword [eax]
push ecx
push eax
push dword [ebx]
push ecx
lea ecx, [ebx - 0x10]
call fcn.00407370
test eax, eax
js 0x440135
mov dword [esp + 0xa0], esi
lea eax, [esp + 0xa0]
jmp 0x44014a
mov eax, dword [esp + 0x55c]
mov dword [esp + 0x90], eax
lea eax, [esp + 0x90]
cmp dword [eax], edi
je 0x44015d
mov eax, dword [esp + 0x80]
mov ecx, 0x31
mov word [eax], cx
inc ebp
add ebx, 0x34
cmp ebp, dword [esp + 0x8c]
jb 0x440040
mov eax, dword [esp + 0x580]
mov ebx, dword [esp + 0x568]
cmp eax, 1
jbe 0x4401b6
cmp dword [esp + 0x584], 8
lea esi, [esp + 0x570]
cmovae esi, dword [esp + 0x570]
cmp word [esi + 2], 0x31
jne 0x4401b6
call fcn.004408a0
test al, al
mov eax, 0x32
jne 0x4401b2
mov eax, 0x33
mov word [esi + 2], ax
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x570]
push eax
mov ecx, ebp
call fcn.00403240
mov dword [esp + 0x7c], 1
mov byte [esp + 0x904], 0x60
lea ecx, [esp + 0x55c]
mov eax, dword [esp + 0x55c]
push eax
push dword [eax]
lea eax, [esp + 0x98]
push eax
call fcn.00440d30
mov byte [esp + 0x904], 0x51
push dword [esp + 0x55c]
call fcn.00467305
add esp, 4
mov byte [esp + 0x904], 2
mov edi, dword [esp + 0x564]
test edi, edi
je 0x440268
mov esi, edi
cmp edi, ebx
je 0x44023e
lea ebx, [ebx]
mov ecx, esi
call fcn.004032f0
add esi, 0x20
cmp esi, ebx
jne 0x440230
push edi
call fcn.00467305
add esp, 4
mov dword [esp + 0x564], 0
mov dword [esp + 0x568], 0
mov dword [esp + 0x56c], 0
mov byte [esp + 0x904], 1
mov ebx, dword [esp + 0x550]
test ebx, ebx
je 0x4402bb
push dword [esp + 0x88]
mov edx, dword [esp + 0x558]
push ecx
mov ecx, ebx
call fcn.00441560
push ebx
call fcn.00467305
add esp, 0xc
mov dword [esp + 0x550], 0
mov dword [esp + 0x554], 0
mov dword [esp + 0x558], 0
mov byte [esp + 0x904], 0
cmp dword [esp + 0x584], 8
jb 0x4402dc
push dword [esp + 0x570]
call fcn.00467305
add esp, 4
xor eax, eax
mov dword [esp + 0x584], 7
mov dword [esp + 0x580], eax
mov word [esp + 0x570], ax
mov eax, ebp
mov ecx, dword [esp + 0x8fc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8e0]
xor ecx, esp
call fcn.00466b29
add esp, 0x8f4
ret 4