Function at 0x4e23a0
Capabilities:
Contain obfuscated stackstrings
Read file on windows
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50c151
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x531304]
xor eax, ebp
mov dword [ebp - 0x38], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp + 0x14]
push eax
call fcn.004f4d70
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x64
jbe 0x4e38cb
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x24]
push eax
call fcn.00415fc0
add esp, 0xc
push 0x51dc28
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.0041625a
add esp, 8
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x10]
push eax
push 1
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.0041651a
add esp, 0x10
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00416bf5
add esp, 4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
push str.QBCI
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.004f4de0
add esp, 8
test eax, eax
je 0x4e38bf
mov dword [ebp - 0x30], 0
mov edx, dword [ebp - 0x24]
add edx, 0xe
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
push eax
call fcn.00415e20
add esp, 4
shr eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x30]
push eax
call fcn.00415fc0
add esp, 0xc
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.00415e20
add esp, 4
push eax
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x24]
push eax
call fcn.004f4e80
add esp, 0xc
mov byte [ebp - 0x58], 0x23
mov byte [ebp - 0x57], 0xa1
mov byte [ebp - 0x56], 0x87
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0x4f
mov byte [ebp - 0x53], 0x9b
mov byte [ebp - 0x52], 0x45
mov byte [ebp - 0x51], 0xf1
mov byte [ebp - 0x50], 0x43
mov byte [ebp - 0x4f], 0x64
mov byte [ebp - 0x4e], 0x39
mov byte [ebp - 0x4d], 0x20
mov byte [ebp - 0x4c], 0xf3
mov byte [ebp - 0x4b], 0x14
mov byte [ebp - 0x4a], 0x42
mov byte [ebp - 0x49], 0xd4
mov byte [ebp - 0x78], 0x19
mov byte [ebp - 0x77], 0x1c
mov byte [ebp - 0x76], 0x86
mov byte [ebp - 0x75], 0x7b
mov byte [ebp - 0x74], 0xaf
mov byte [ebp - 0x73], 0xa8
mov byte [ebp - 0x72], 0xb5
mov byte [ebp - 0x71], 0xbb
mov byte [ebp - 0x70], 0x5c
mov byte [ebp - 0x6f], 0
mov byte [ebp - 0x6e], 0x1b
mov byte [ebp - 0x6d], 0x91
mov byte [ebp - 0x6c], 0xab
mov byte [ebp - 0x6b], 0x63
mov byte [ebp - 0x6a], 0x45
mov byte [ebp - 0x69], 0x4c
mov byte [ebp - 0x48], 0
xor ecx, ecx
mov dword [ebp - 0x47], ecx
mov dword [ebp - 0x43], ecx
mov dword [ebp - 0x3f], ecx
mov word [ebp - 0x3b], cx
mov byte [ebp - 0x39], cl
cmp dword [ebp + 0x18], 1
jne 0x4e2578
push 0x10
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x48]
push eax
call fcn.00415910
add esp, 0xc
jmp 0x4e2590
cmp dword [ebp + 0x18], 2
jne 0x4e2590
push 0x10
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x48]
push edx
call fcn.00415910
add esp, 0xc
mov byte [ebp - 0x114], 0x43
mov byte [ebp - 0x113], 0x64
mov byte [ebp - 0x112], 0x39
mov byte [ebp - 0x111], 0x20
mov byte [ebp - 0x110], 0xf3
mov byte [ebp - 0x10f], 0x14
mov byte [ebp - 0x10e], 0x42
mov byte [ebp - 0x10d], 0xd4
mov dword [ebp - 0x10c], 0
push 0x88
push 0
lea eax, [ebp - 0x108]
push eax
call fcn.00415fc0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x120]
push eax
call fcn.00415fc0
add esp, 0xc
push 0x8c
push 0
lea ecx, [ebp - 0x10c]
push ecx
call fcn.00415fc0
add esp, 0xc
push 0xc
lea edx, [ebp - 0x48]
push edx
push 0x10
lea eax, [ebp - 0x10c]
push eax
call fcn.004df580
add esp, 0x10
push 0
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x10c]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call fcn.004e0640
add esp, 0x18
mov byte [ebp - 0x68], 0
xor eax, eax
mov dword [ebp - 0x67], eax
mov dword [ebp - 0x63], eax
mov dword [ebp - 0x5f], eax
mov word [ebp - 0x5b], ax
mov byte [ebp - 0x59], al
mov byte [ebp - 0x11c], 0
xor ecx, ecx
mov dword [ebp - 0x11b], ecx
mov word [ebp - 0x117], cx
mov byte [ebp - 0x115], cl
mov edx, dword [ebp - 0x10]
sub edx, 0x10
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00415fc0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
push 0
mov edx, dword [ebp - 0x28]
push edx
call fcn.00415fc0
add esp, 0xc
push 0x10
mov eax, dword [ebp - 0x120]
push eax
lea ecx, [ebp - 0x68]
push ecx
call fcn.00415910
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x120]
add eax, 0x10
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00415910
add esp, 0xc
push 0x8c
push 0
lea edx, [ebp - 0x10c]
push edx
call fcn.00415fc0
add esp, 0xc
push 0xc
lea eax, [ebp - 0x68]
push eax
push 0x10
lea ecx, [ebp - 0x10c]
push ecx
call fcn.004df580
add esp, 0x10
push 8
push 0
lea edx, [ebp - 0x11c]
push edx
call fcn.00415fc0
add esp, 0xc
push 0
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10c]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004df9f0
add esp, 0x18
mov edx, dword [ebp - 0x28]
push edx
call fcn.004f51c0
add esp, 4
mov dword [ebp - 0x34], eax
push 0x51dc34
mov eax, dword [ebp - 0x34]
push eax
call fcn.004f4de0
add esp, 8
test eax, eax
je 0x4e3880
push 0x51dc38
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.004f4de0
add esp, 8
test eax, eax
je 0x4e3880
push 0x7c
call fcn.00418aea
add esp, 4
mov dword [ebp - 0x318], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x318], 0
je 0x4e27f7
lea edx, [ebp - 0x31c]
push edx
call fcn.004eee80
add esp, 4
push eax
mov ecx, dword [ebp - 0x318]
call fcn.004ef190
mov dword [ebp - 0x3cc], eax
jmp 0x4e2801
mov dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x314], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x160], ecx
push 0
lea ecx, [ebp - 0x15c]
call fcn.004ebad0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.004e7500
mov byte [ebp - 4], 2
push 0x51dc3c
mov edx, dword [ebp - 0x34]
push edx
call fcn.00401000
add esp, 8
push eax
lea ecx, [ebp - 0x33c]
call fcn.00401e20
mov byte [ebp - 4], 3
push 1
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x33c]
push ecx
mov ecx, dword [ebp - 0x160]
call fcn.004f3df0
mov byte [ebp - 0x31d], al
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x33c]
call fcn.00401260
movzx edx, byte [ebp - 0x31d]
test edx, edx
je 0x4e381f
cmp dword [ebp + 0xc], 0
je 0x4e332a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x340], esp
push 3
call fcn.004eac00
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 4
push 0x51dc48
push 0x51dc40
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004eb520
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
push 4
call fcn.004eac00
mov dword [ebp - 0x3d8], eax
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp - 0x3dc], ecx
mov byte [ebp - 4], 5
push 0x51dc60
push 0x51dc58
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004eb520
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x348], esp
mov edx, dword [ebp + 8]
push edx
call fcn.004edc90
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], eax
mov byte [ebp - 4], 6
push 0x51dc78
push 0x51dc70
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004eb520
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34c], esp
mov edx, dword [0x55bc34]
push edx
call fcn.004ed9d0
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 7
push 0x51dc8c
push 0x51dc84
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004eb520
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x364]
call fcn.004edc90
mov byte [ebp - 4], 8
lea edx, [ebp - 0x364]
push edx
push 0x51dca0
push 0x51dc98
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ee2a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x364]
call fcn.004eb3f0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x368], esp
push 3
call fcn.004eac00
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], eax
mov byte [ebp - 4], 9
push 0x51dcb4
push 0x51dcac
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004eb520
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x36c], esp
mov edx, dword [ebp + 8]
push edx
call fcn.004edc90
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], eax
mov byte [ebp - 4], 0xa
push str.NewTabCustomURL
push 0x51dcc8
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.004eb520
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x17c]
push edx
lea ecx, [ebp - 0x144]
call fcn.004ea3e0
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x180], 0
call fcn.004f4bd0
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
je 0x4e3316
mov dword [ebp - 0x1a8], 0x51dce0
lea ecx, [ebp - 0x17c]
call fcn.004012e0
push eax
call fcn.004f5130
add esp, 4
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x180]
push eax
call fcn.00415fa8
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0x1a8]
push ecx
call fcn.00415fa8
add esp, 4
add esi, eax
mov edx, dword [ebp - 0x2d0]
push edx
call fcn.00415fa8
add esp, 4
add esi, eax
lea eax, [esi + esi + 2]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x2e4], eax
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x2e4]
push eax
call fcn.00415fc0
add esp, 0xc
mov ecx, dword [ebp - 0x180]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
call fcn.0041916c
add esp, 8
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x2e4]
push ecx
call fcn.00419142
add esp, 8
mov edx, dword [ebp - 0x2d0]
push edx
mov eax, dword [ebp - 0x2e4]
push eax
call fcn.00419142
add esp, 8
push 0x10
push 0
lea ecx, [ebp - 0x68]
push ecx
call fcn.00415fc0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2e0], eax
mov edx, dword [ebp - 0x2e4]
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x184]
mov cx, word [eax]
mov word [ebp - 0x2fc], cx
mov edx, dword [ebp - 0x184]
add edx, 4
mov dword [ebp - 0x184], edx
movsx eax, word [ebp - 0x2fc]
test eax, eax
jne 0x4e2c14
mov ecx, dword [ebp - 0x184]
sub ecx, dword [ebp - 0x2e4]
sar ecx, 1
sar ecx, 1
sub ecx, 1
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2e4]
mov al, byte [edx]
mov byte [ebp - 0x67], al
mov eax, dword [ebp - 0x2e0]
xor edx, edx
mov ecx, 0x64
div ecx
mov byte [ebp - 0x66], al
mov dl, byte [ebp - 0x2e8]
mov byte [ebp - 0x68], dl
mov byte [ebp - 0x62], 0x80
mov eax, dword [ebp - 0x2e0]
xor edx, edx
mov ecx, 0x3e8
div ecx
add eax, 6
mov byte [ebp - 0x65], al
mov dl, byte [ebp - 0x2e0]
mov byte [ebp - 0x63], dl
mov eax, dword [ebp - 0x2e0]
xor edx, edx
mov ecx, 0x2710
div ecx
mov byte [ebp - 0x64], al
movzx edx, byte [ebp - 0x67]
movzx eax, byte [ebp - 0x64]
lea ecx, [edx + eax + 2]
mov byte [ebp - 0x61], cl
mov eax, dword [ebp - 0x2e8]
cdq
sub eax, edx
sar eax, 1
shl eax, 1
mov edx, dword [ebp - 0x2e4]
movzx eax, word [edx + eax*2]
add eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x2e8]
imul ecx, ecx, 0x2710
add eax, ecx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x2e0]
xor edx, edx
mov ecx, 0xc20
div ecx
mov edx, dword [ebp - 0x2e8]
imul edx, edx, 0x64
lea eax, [eax + edx + 1]
mov dword [ebp - 0x5c], eax
push 0x8c
push 0
lea ecx, [ebp - 0x10c]
push ecx
call fcn.00415fc0
add esp, 0xc
push 0xc
lea edx, [ebp - 0x68]
push edx
push 0x10
lea eax, [ebp - 0x10c]
push eax
call fcn.004df580
add esp, 0x10
mov ecx, dword [ebp - 0x2e4]
push ecx
call fcn.00415fa8
add esp, 4
lea edx, [eax + eax + 2]
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x1a0]
and eax, 0x80000007
jns 0x4e2d65
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
je 0x4e2d84
mov eax, dword [ebp - 0x1a0]
cdq
and edx, 7
add eax, edx
sar eax, 3
lea ecx, [eax*8 + 8]
mov dword [ebp - 0x10], ecx
jmp 0x4e2d8d
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x1a0]
push edx
mov eax, dword [ebp - 0x1c0]
push eax
call fcn.00415fc0
add esp, 0xc
mov ecx, dword [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
mov eax, dword [ebp - 0x1c0]
push eax
call fcn.00415910
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x194], eax
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x194]
push eax
call fcn.00415fc0
add esp, 0xc
push 8
push 0
lea ecx, [ebp - 0x11c]
push ecx
call fcn.00415fc0
add esp, 0xc
push 1
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x194]
push edx
mov eax, dword [ebp - 0x1c0]
push eax
call fcn.004df9f0
add esp, 0x18
mov byte [ebp - 0x1bc], 0
xor ecx, ecx
mov dword [ebp - 0x1bb], ecx
mov dword [ebp - 0x1b7], ecx
mov dword [ebp - 0x1b3], ecx
mov word [ebp - 0x1af], cx
mov byte [ebp - 0x1ad], cl
cmp dword [ebp + 0x18], 1
jne 0x4e2e7f
push 0x10
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x1bc]
push eax
call fcn.00415910
add esp, 0xc
jmp 0x4e2e9a
cmp dword [ebp + 0x18], 2
jne 0x4e2e9a
push 0x10
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x1bc]
push edx
call fcn.00415910
add esp, 0xc
push 0x8c
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.00415fc0
add esp, 0xc
push 0xc
lea ecx, [ebp - 0x1bc]
push ecx
push 0x10
lea edx, [ebp - 0x10c]
push edx
call fcn.004df580
add esp, 0x10
mov byte [ebp - 0x2dc], 0x43
mov byte [ebp - 0x2db], 0x64
mov byte [ebp - 0x2da], 0x39
mov byte [ebp - 0x2d9], 0x20
mov byte [ebp - 0x2d8], 0xf3
mov byte [ebp - 0x2d7], 0x14
mov byte [ebp - 0x2d6], 0x42
mov byte [ebp - 0x2d5], 0xd4
mov eax, dword [ebp - 0x10]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x1ac], eax
mov edx, dword [ebp - 0x10]
push edx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x10]
push eax
push 0
mov ecx, dword [ebp - 0x19c]
push ecx
call fcn.00415fc0
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 0x1ac]
push eax
call fcn.00415fc0
add esp, 0xc
push 0x10
lea ecx, [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x1ac]
push edx
call fcn.00415910
add esp, 0xc
mov eax, dword [ebp - 0x10]
sub eax, 0x10
push eax
mov ecx, dword [ebp - 0x194]
push ecx
mov edx, dword [ebp - 0x1ac]
add edx, 0x10
push edx
call fcn.00415910
add esp, 0xc
push 1
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x10c]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x19c]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
call fcn.004e0640
add esp, 0x18
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x19c]
push eax
call fcn.004f4ce0
add esp, 8
mov dword [ebp - 0x2f8], eax
mov ecx, dword [ebp - 0x2f8]
push ecx
call fcn.004f5130
add esp, 4
mov dword [ebp - 0x300], eax
mov byte [ebp - 0x190], 0
xor edx, edx
mov dword [ebp - 0x18f], edx
mov dword [ebp - 0x18b], edx
mov byte [ebp - 0x2f4], 0
xor eax, eax
mov dword [ebp - 0x2f3], eax
mov dword [ebp - 0x2ef], eax
mov ecx, dword [ebp - 0x300]
push ecx
call fcn.00415fa8
add esp, 4
shl eax, 1
push eax
mov edx, dword [ebp - 0x300]
push edx
call fcn.004e3980
add esp, 8
push eax
push 0x51dce8
lea eax, [ebp - 0x190]
push eax
call fcn.0041603a
add esp, 0xc
mov cl, byte [ebp - 0x18a]
mov byte [ebp - 0x2f4], cl
mov dl, byte [ebp - 0x189]
mov byte [ebp - 0x2f3], dl
mov al, byte [ebp - 0x18c]
mov byte [ebp - 0x2f2], al
mov cl, byte [ebp - 0x18b]
mov byte [ebp - 0x2f1], cl
mov dl, byte [ebp - 0x18e]
mov byte [ebp - 0x2f0], dl
mov al, byte [ebp - 0x18d]
mov byte [ebp - 0x2ef], al
mov cl, byte [ebp - 0x190]
mov byte [ebp - 0x2ee], cl
mov dl, byte [ebp - 0x18f]
mov byte [ebp - 0x2ed], dl
mov dword [ebp - 0x2d4], 0x51dcf0
mov dword [ebp - 0x198], str.QBCIzq
mov byte [ebp - 0x2cc], 0
push 0x103
push 0
lea eax, [ebp - 0x2cb]
push eax
call fcn.00415fc0
add esp, 0xc
cmp dword [ebp + 0x18], 1
jne 0x4e3105
mov ecx, dword [ebp - 0x2d4]
push ecx
call fcn.00415e20
add esp, 4
push eax
mov edx, dword [ebp - 0x2d4]
push edx
lea eax, [ebp - 0x2cc]
push eax
call fcn.00415910
add esp, 0xc
jmp 0x4e3131
cmp dword [ebp + 0x18], 2
jne 0x4e3131
mov ecx, dword [ebp - 0x198]
push ecx
call fcn.00415e20
add esp, 4
push eax
mov edx, dword [ebp - 0x198]
push edx
lea eax, [ebp - 0x2cc]
push eax
call fcn.00415910
add esp, 0xc
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.00415e20
add esp, 4
mov esi, eax
lea edx, [ebp - 0x2f4]
push edx
call fcn.00415e20
add esp, 4
add esi, eax
mov eax, dword [ebp - 0x2f8]
push eax
call fcn.00415e20
add esp, 4
lea ecx, [esi + eax + 1]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
push edx
call fcn.00415d52
add esp, 4
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x10]
push eax
push 0
mov ecx, dword [ebp - 0x1a4]
push ecx
call fcn.00415fc0
add esp, 0xc
lea edx, [ebp - 0x2cc]
push edx
call fcn.00415e20
add esp, 4
push eax
lea eax, [ebp - 0x2cc]
push eax
mov ecx, dword [ebp - 0x1a4]
push ecx
call fcn.00415910
add esp, 0xc
lea edx, [ebp - 0x2f4]
push edx
call fcn.00415e20
add esp, 4
push eax
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.00415e20
add esp, 4
add eax, dword [ebp - 0x1a4]
push eax
call fcn.00415910
add esp, 0xc
mov edx, dword [ebp - 0x2f8]
push edx
call fcn.00415e20
add esp, 4
push eax
mov eax, dword [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.00415e20
add esp, 4
mov esi, eax
add esi, dword [ebp - 0x1a4]
lea edx, [ebp - 0x2f4]
push edx
call fcn.00415e20
add esp, 4
add esi, eax
push esi
call fcn.00415910
add esp, 0xc
push 0x80
mov eax, dword [ebp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x51dd00
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.0041625a
add esp, 8
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
push edx
push 1
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x1a4]
push ecx
call fcn.004167ae
add esp, 0x10
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00416bf5
add esp, 4
mov eax, dword [ebp - 0x1a4]
push eax
call fcn.00415c75
add esp, 4
mov ecx, dword [ebp - 0x300]
push ecx
call fcn.00415c75
add esp, 4
mov edx, dword [ebp - 0x2f8]
push edx
call fcn.00415c75
add esp, 4
mov eax, dword [ebp - 0x19c]
push eax
call fcn.00415c75
add esp, 4
mov ecx, dword [ebp - 0x1ac]
push ecx
call fcn.00415c75
add esp, 4
mov edx, dword [ebp - 0x194]
push edx
call fcn.00415c75
add esp, 4
mov eax, dword [ebp - 0x1c0]
push eax
call fcn.00415c75
add esp, 4
mov ecx, dword [ebp - 0x2e4]
push ecx
call fcn.00415c75
add esp, 4
mov edx, dword [ebp - 0x2d0]
push edx
call fcn.00415c75
add esp, 4
mov eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x14], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.00401260
jmp 0x4e381f
push 0x51dd0c
push 0x51dd04
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eaa50
test eax, eax
je 0x4e3693
push 0x51dd24
push 0x51dd1c
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ece20
mov dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x400], ecx
mov edx, dword [ebp - 0x400]
sub edx, 1
mov dword [ebp - 0x400], edx
cmp dword [ebp - 0x400], 4
ja case.default.0x4e33ac
mov eax, dword [ebp - 0x400]
jmp dword [eax*4 + 0x4e38e8]
push 0x51dd3c
push 0x51dd34
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eaa50
test eax, eax
je 0x4e3527
push 0x51dd54
push 0x51dd4c
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ece20
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jne 0x4e3426
push 0x51dd64
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
jmp 0x4e3525
cmp dword [ebp - 0x308], 2
jne 0x4e3445
push 0x51dd88
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415eb0
add esp, 8
jmp 0x4e3525
cmp dword [ebp - 0x308], 4
jne 0x4e3464
push 0x51dd9c
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
jmp 0x4e3525
cmp dword [ebp - 0x308], 3
jne 0x4e3514
push 0x51ddb0
push 0x51dda8
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eaa50
test eax, eax
je 0x4e3501
lea ecx, [ebp - 0x388]
push ecx
push 0x51ddc4
push 0x51ddbc
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ed160
mov dword [ebp - 0x404], eax
mov edx, dword [ebp - 0x404]
mov dword [ebp - 0x408], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x408]
call fcn.004012e0
push eax
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x388]
call fcn.00401260
jmp 0x4e3512
push 0x51ddd0
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
jmp 0x4e3525
push 0x51ddf4
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415eb0
add esp, 8
jmp 0x4e3538
push 0x51de18
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
jmp 0x4e368e
push 0x51de3c
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
jmp 0x4e368e
push 0x51de50
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415eb0
add esp, 8
jmp 0x4e368e
push str.qqbrowser:__last_
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
jmp 0x4e368e
push 0x51de78
push 0x51de70
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eaa50
test eax, eax
je 0x4e366a
push 0x51de8c
push 0x51de84
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eb2d0
cmp eax, 1
jb 0x4e3657
mov dword [ebp - 0x30c], 0
lea ecx, [ebp - 0x3a4]
push ecx
mov edx, dword [ebp - 0x30c]
push edx
push str.StartupUrls
push 0x51de98
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ee390
mov ecx, eax
call fcn.004ed160
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x410], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x410]
call fcn.004012e0
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3a4]
call fcn.00401260
jmp 0x4e3668
push 0x51deac
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415eb0
add esp, 8
jmp 0x4e367b
push 0x51ded0
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
jmp 0x4e368e
push 0x51def4
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
jmp 0x4e3818
push 0x51df20
push 0x51df18
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eaa50
test eax, eax
je 0x4e3807
push 0x51df38
push 0x51df30
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ece20
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jne 0x4e3706
push 0x51df48
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415eb0
add esp, 8
jmp 0x4e3805
cmp dword [ebp - 0x310], 2
jne 0x4e3725
push str.qqbrowser:__newtab
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
jmp 0x4e3805
cmp dword [ebp - 0x310], 4
jne 0x4e3744
push 0x51df80
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
jmp 0x4e3805
cmp dword [ebp - 0x310], 3
jne 0x4e37f4
push 0x51df94
push 0x51df8c
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004eaa50
test eax, eax
je 0x4e37e1
lea edx, [ebp - 0x3c0]
push edx
push 0x51dfa8
push 0x51dfa0
lea ecx, [ebp - 0x15c]
call fcn.004ee360
mov ecx, eax
call fcn.004ee360
mov ecx, eax
call fcn.004ed160
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x418]
call fcn.004012e0
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c0]
call fcn.00401260
jmp 0x4e37f2
push 0x51dfb4
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415eb0
add esp, 8
jmp 0x4e3805
push 0x51dfd8
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415eb0
add esp, 8
jmp 0x4e3818
push str.http:__daohang.qq.com__frhmpage
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415eb0
add esp, 8
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x3c8], edx
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
je 0x4e3855
push 1
mov ecx, dword [ebp - 0x3c4]
call fcn.00413240
mov dword [ebp - 0x41c], eax
jmp 0x4e385f
mov dword [ebp - 0x41c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.00410630
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.004eb3f0
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.00415c75
add esp, 4
mov edx, dword [ebp - 0x120]
push edx
call fcn.00415c75
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00415c75
add esp, 4
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.00415c75
add esp, 4
mov edx, dword [ebp - 0x30]
push edx
call fcn.00415c75
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
call fcn.00415c75
add esp, 4
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x38]
xor ecx, ebp
call fcn.004158f4
mov esp, ebp
pop ebp
ret