Function at 0x443a70
Capabilities:
Contain obfuscated stackstrings
Identify system language via api
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4731b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x39c
mov eax, dword [0x49c1c8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x360], ecx
lea ecx, [ebp - 0x24]
call fcn.004608e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.004608e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.004608e0
mov byte [ebp - 4], 2
push str._tr__n
lea ecx, [ebp - 0x10]
call fcn.00445240
mov byte [ebp - 4], 3
push str.__tr__n
lea ecx, [ebp - 0x5c]
call fcn.00445240
mov byte [ebp - 4], 4
call fcn.004039d0
mov dword [ebp - 0x68], eax
push str._style_type_text_css___n
lea ecx, [ebp - 0x280]
call fcn.00445240
mov byte [ebp - 4], 5
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x280]
call fcn.004011d0
push str.BODY_font_family:_Arial__sans_serif_font_size:_10pt_n
lea ecx, [ebp - 0x284]
call fcn.00445240
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x284]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x284]
call fcn.004011d0
push str.DIV.info_font_size:_9pt__color:_black__background:_white_n
lea ecx, [ebp - 0x288]
call fcn.00445240
mov byte [ebp - 4], 7
lea edx, [ebp - 0x288]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x288]
call fcn.004011d0
push str.SPAN.info_font_size:_9pt__color:_aaaaaa__background:_white_n
lea ecx, [ebp - 0x28c]
call fcn.00445240
mov byte [ebp - 4], 8
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28c]
call fcn.004011d0
push str.DIV.error_font_size:_9pt__color:_white__background:_003399__margin_left:_0px__margin_top:_6px__margin_right:_0px__margin_bottom:_6px__padding_left:_1em__padding_top:_6px__padding_bottom:_6px__n
lea ecx, [ebp - 0x290]
call fcn.00445240
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x290]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x290]
call fcn.004011d0
push str.DIV.messageClass_font_size:_10pt__margin:_3px_auto_3px_2em_n
lea ecx, [ebp - 0x294]
call fcn.00445240
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x294]
call fcn.004011d0
push str.DIV.warning_font_size:_9pt__color:_white__background:_909090__margin_left:_0px__margin_top:_6px__margin_right:_0px__margin_bottom:_6px__padding_left:_1em__padding_top:_6px__padding_bottom:_6px__n
lea ecx, [ebp - 0x298]
call fcn.00445240
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x298]
call fcn.004011d0
push str.DIV.fatality_font_size:_9pt__color:_white__background:_ee1111__margin_left:_0px__margin_top:_6px__margin_right:_0px__margin_bottom:_6px__padding_left:_1em__padding_top:_6px__padding_bottom:_6px__n
lea ecx, [ebp - 0x29c]
call fcn.00445240
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x29c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x29c]
call fcn.004011d0
push str.TABLE.systemConfig_TABLE_LAYOUT:_auto__BORDER_TOP:_white_double__BORDER_RIGHT_STYLE:_double__BORDER_LEFT_STYLE:_double__BORDER_COLLAPSE:_collapse__BORDER_BOTTOM_STYLE:_double__font_size:_9pt_n
lea ecx, [ebp - 0x2a0]
call fcn.00445240
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x2a0]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a0]
call fcn.004011d0
push str.TABLE.errorItem_TABLE_LAYOUT:_auto__BORDER:_white__color:_white__margin_bottom:_6px_n
lea ecx, [ebp - 0x2a4]
call fcn.00445240
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a4]
call fcn.004011d0
push str.TD.title_COLOR:_white__TEXT_ALIGN:_center__font_size:_12pt__font_weight:_bold_n
lea ecx, [ebp - 0x2a8]
call fcn.00445240
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a8]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.004011d0
push str.TR.title_background:_003399_n
lea ecx, [ebp - 0x2ac]
call fcn.00445240
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x2ac]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ac]
call fcn.004011d0
push str..errorCol1_font_size:_10pt__margin:_auto_6px_auto_6px__n
lea ecx, [ebp - 0x2b0]
call fcn.00445240
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.004011d0
push str..errorCol2_font_size:_10pt__margin:_auto_6px_auto_6px__n
lea ecx, [ebp - 0x2b4]
call fcn.00445240
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2b4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b4]
call fcn.004011d0
push str.__style__n
lea ecx, [ebp - 0x2b8]
call fcn.00445240
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x2b8]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b8]
call fcn.004011d0
push str._b_Config_Data:___b_
lea ecx, [ebp - 0x2bc]
call fcn.00445240
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2bc]
call fcn.004011d0
push str._TABLE_class_systemConfig__id_Table1__cellSpacing_1__cellPadding_3__border_1__width_100____n
lea ecx, [ebp - 0x2c0]
call fcn.00445240
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2c0]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c0]
call fcn.004011d0
push str._TR_class_title___n
lea ecx, [ebp - 0x2c4]
call fcn.00445240
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x2c4]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c4]
call fcn.004011d0
push str._TD_class_title__Parameter__TD__n
lea ecx, [ebp - 0x2c8]
call fcn.00445240
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c8]
call fcn.004011d0
push str._TD_class_title__Value__TD__n
lea ecx, [ebp - 0x2cc]
call fcn.00445240
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2cc]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2cc]
call fcn.004011d0
push str.__TR__n
lea ecx, [ebp - 0x2d0]
call fcn.00445240
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x2d0]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d0]
call fcn.004011d0
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_Configuration_timestamp__TD_
lea ecx, [ebp - 0x2d4]
call fcn.00445240
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2d4]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d4]
call fcn.004011d0
push 0x482e58
lea ecx, [ebp - 0x2d8]
call fcn.00445240
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x2d8]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d8]
call fcn.004011d0
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
push str._s_at__s_n
lea edx, [ebp - 0x27c]
push edx
call dword [sym.imp.MSVCR71.dll_swprintf]
add esp, 0x10
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.00405260
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x368], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x368]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.004011d0
push 0x482e74
lea ecx, [ebp - 0x2e0]
call fcn.00445240
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e0]
call fcn.004011d0
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_App_Version:__TD__TD_
lea ecx, [ebp - 0x2e4]
call fcn.00445240
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e4]
call fcn.004011d0
lea ecx, [ebp - 0x2e8]
push ecx
call fcn.00441130
add esp, 4
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x370]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.004011d0
push 0x482e98
lea ecx, [ebp - 0x2ec]
call fcn.00445240
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2ec]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ec]
call fcn.004011d0
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_App_configuration:__TD__TD_nbsp_
lea ecx, [ebp - 0x2f0]
call fcn.00445240
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2f0]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f0]
call fcn.004011d0
push str.RELEASE
lea ecx, [ebp - 0x6c]
call fcn.00412080
push 0x482ed8
lea ecx, [ebp - 0x2f4]
call fcn.00445240
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x2f4]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f4]
call fcn.004011d0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_MS_Layer_for_Unicode_version:__TD__TD_nbsp_
lea ecx, [ebp - 0x2f8]
call fcn.00445240
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x2f8]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f8]
call fcn.004011d0
push 0x482f14
lea eax, [ebp - 0x2fc]
push eax
call fcn.00441000
add esp, 8
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
mov dword [ebp - 0x378], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x378]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2fc]
call fcn.004011d0
push 0x482f2c
lea ecx, [ebp - 0x300]
call fcn.00445240
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x300]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x300]
call fcn.004011d0
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_Expat_parser_xmltok:__TD__TD_nbsp_
lea ecx, [ebp - 0x304]
call fcn.00445240
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x304]
call fcn.004011d0
push str.xmltok.dll
lea ecx, [ebp - 0x308]
push ecx
call fcn.00441000
add esp, 8
mov dword [ebp - 0x37c], eax
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x380], edx
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x380]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x308]
call fcn.004011d0
push 0x482f74
lea ecx, [ebp - 0x30c]
call fcn.00445240
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x30c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30c]
call fcn.004011d0
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_Expat_parser_xmlparse:__TD__TD_nbsp_
lea ecx, [ebp - 0x310]
call fcn.00445240
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x310]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x310]
call fcn.004011d0
push 0x482fa8
lea edx, [ebp - 0x314]
push edx
call fcn.00441000
add esp, 8
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x388]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x314]
call fcn.004011d0
push 0x482fc4
lea ecx, [ebp - 0x318]
call fcn.00445240
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0x318]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x318]
call fcn.004011d0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_Minidump__optional___TD__TD_nbsp_
lea ecx, [ebp - 0x31c]
call fcn.00445240
mov byte [ebp - 4], 0x2c
lea edx, [ebp - 0x31c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x31c]
call fcn.004011d0
push str.dbghelp.dll
lea eax, [ebp - 0x320]
push eax
call fcn.00441000
add esp, 8
mov dword [ebp - 0x38c], eax
mov ecx, dword [ebp - 0x38c]
mov dword [ebp - 0x390], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x390]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x320]
call fcn.004011d0
push 0x48300c
lea ecx, [ebp - 0x324]
call fcn.00445240
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x324]
call fcn.004011d0
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_GDI_Plus:__TD__TD_nbsp_
lea ecx, [ebp - 0x328]
call fcn.00445240
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.004011d0
push 0x483034
lea ecx, [ebp - 0x32c]
push ecx
call fcn.00441000
add esp, 8
mov dword [ebp - 0x394], eax
mov edx, dword [ebp - 0x394]
mov dword [ebp - 0x398], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x398]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x32c]
call fcn.004011d0
push str.__TD_
lea ecx, [ebp - 0x330]
call fcn.00445240
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x330]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x330]
call fcn.004011d0
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_nbsp_Operating_system:__TD_
lea ecx, [ebp - 0x334]
call fcn.00445240
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x334]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x334]
call fcn.004011d0
push 0x483078
lea ecx, [ebp - 0x338]
call fcn.00445240
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x338]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x338]
call fcn.004011d0
lea eax, [ebp - 0x33c]
push eax
mov ecx, dword [ebp - 0x360]
call fcn.004435d0
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x3a0]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x33c]
call fcn.004011d0
push 0x483080
lea ecx, [ebp - 0x340]
call fcn.00445240
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x340]
call fcn.004011d0
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str._TD_Default_User_Language:__TD_
lea ecx, [ebp - 0x344]
call fcn.00445240
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x344]
call fcn.004011d0
push str._TD_
lea ecx, [ebp - 0x348]
call fcn.00445240
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x348]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x348]
call fcn.004011d0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov word [ebp - 0x60], ax
movzx edx, word [ebp - 0x60]
push edx
push 0x4830b0
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVCR71.dll_swprintf]
add esp, 0xc
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x34c]
call fcn.00405260
mov dword [ebp - 0x3a4], eax
mov edx, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a8], edx
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34c]
call fcn.004011d0
push str.__TD__n
lea ecx, [ebp - 0x350]
call fcn.00445240
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x350]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x350]
call fcn.004011d0
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
push str.__TABLE__n
lea ecx, [ebp - 0x354]
call fcn.00445240
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x354]
call fcn.004011d0
push str._br__b_Log_Data:___b_
lea ecx, [ebp - 0x358]
call fcn.00445240
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x358]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.004451a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x358]
call fcn.004011d0
lea ecx, [ebp - 0x6c]
call fcn.00405020
push eax
call fcn.0040a450
add esp, 4
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
push edx
call dword [0x49c2c0]
shl eax, 1
mov dword [ebp - 0x18], eax
mov word [ebp - 0x64], 0xfeff
push 0
lea eax, [ebp - 0x14]
push eax
push 2
lea ecx, [ebp - 0x64]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x444855
push str.CHtmlLogger::CreateFileHeader___Cannot_write_BOMB_to_file.
lea ecx, [ebp - 0x24]
call fcn.0040a6a0
push 0
lea ecx, [ebp - 0x24]
call fcn.00405020
push eax
mov ecx, dword [ebp - 0x360]
call fcn.00443990
mov byte [ebp - 0x359], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004011d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.004011d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.004011d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.004011d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004011d0
mov al, byte [ebp - 0x359]
jmp 0x4449b0
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x4448e5
push str.CHtmlLogger::CreateFileHeader___Cannot_write_header_to_file.
lea ecx, [ebp - 0x24]
call fcn.0040a6a0
push 0
lea ecx, [ebp - 0x24]
call fcn.00405020
push eax
mov ecx, dword [ebp - 0x360]
call fcn.00443990
mov byte [ebp - 0x35a], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004011d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.004011d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.004011d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.004011d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004011d0
mov al, byte [ebp - 0x35a]
jmp 0x4449b0
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne 0x444964
push str.CHtmlLogger::CreateFileHeader___FlushFileBuffers___call_failed.
lea ecx, [ebp - 0x24]
call fcn.0040a6a0
push 0
lea ecx, [ebp - 0x24]
call fcn.00405020
push eax
mov ecx, dword [ebp - 0x360]
call fcn.00443990
mov byte [ebp - 0x35b], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004011d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.004011d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.004011d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.004011d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004011d0
mov al, byte [ebp - 0x35b]
jmp 0x4449b0
mov byte [ebp - 0x35c], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004011d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.004011d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.004011d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.004011d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004011d0
mov al, byte [ebp - 0x35c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x2c]
call fcn.0046faad
mov esp, ebp
pop ebp
ret 0x18