Function at 0x438f50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5591d9
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x5b7780]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0xe0], 0x591468
push 1
push 0x5914c8
mov eax, dword [ebp - 0xe0]
push eax
push 0
call fcn.0043bc60
add esp, 0x10
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x40]
push edx
call fcn.0046c510
add esp, 8
mov byte [ebp - 4], 1
push 0x5914bc
lea ecx, [ebp - 0x148]
call fcn.00404180
mov byte [ebp - 4], 2
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.0046c510
add esp, 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x148]
call fcn.004041c0
push 0x5914d4
lea ecx, [ebp - 0x178]
call fcn.00404180
mov byte [ebp - 4], 5
lea edx, [ebp - 0x178]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.0046c510
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x178]
call fcn.004041c0
lea ecx, [ebp - 0x298]
push ecx
call fcn.0045e190
add esp, 4
mov dword [ebp - 0x108], eax
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0x110], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x110]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.0045e320
add esp, 8
mov dword [ebp - 0x118], eax
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0x120], edx
mov byte [ebp - 4], 9
push 0x5914d0
mov eax, dword [ebp - 0x120]
push eax
lea ecx, [ebp - 0x238]
push ecx
call fcn.00414850
add esp, 0xc
mov dword [ebp - 0x128], eax
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0xf4], edx
mov byte [ebp - 4], 0xa
call fcn.0046bd10
mov ecx, eax
call fcn.0046c060
push eax
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x268]
push ecx
call fcn.00414850
add esp, 0xc
mov dword [ebp - 0xc4], eax
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x100], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0046c510
add esp, 8
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x268]
call fcn.004041c0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x238]
call fcn.004041c0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1d8]
call fcn.004041c0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x298]
call fcn.004041c0
call fcn.0046cbd0
push eax
lea ecx, [ebp - 0x160]
call fcn.00404180
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x160]
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.0046c510
add esp, 8
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.004041c0
push str.https:__yzf.qq.com_xv_web_static_chat_index.html_sign37ef9b97d77c04c5244c9de81bb4b260da3bb0476941ac0875ab0125ea7fec3ab7ba6d5493d20c790db5c10dcd5469da534b2249
lea ecx, [ebp - 0x70]
call fcn.00404180
mov byte [ebp - 4], 0x14
push 0x591644
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x2b0]
push edx
call fcn.00430560
add esp, 0xc
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
lea eax, [ebp - 0x280]
push eax
call fcn.004307b0
add esp, 0xc
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xd4], ecx
mov byte [ebp - 4], 0x16
push 0x591650
mov edx, dword [ebp - 0xd4]
push edx
lea eax, [ebp - 0x250]
push eax
call fcn.00414850
add esp, 0xc
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0xdc], ecx
mov byte [ebp - 4], 0x17
lea edx, [ebp - 0xb8]
push edx
mov eax, dword [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x220]
push ecx
call fcn.004307b0
add esp, 0xc
mov dword [ebp - 0x124], eax
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0xe4], edx
mov byte [ebp - 4], 0x18
push 0x5914ec
mov eax, dword [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x1f0]
push ecx
call fcn.00414850
add esp, 0xc
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp - 0x10c]
mov dword [ebp - 0xec], edx
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0xec]
push ecx
lea edx, [ebp - 0x1c0]
push edx
call fcn.004307b0
add esp, 0xc
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 0x1a
push 0x591638
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x1a8]
push edx
call fcn.00414850
add esp, 0xc
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
lea eax, [ebp - 0x190]
push eax
call fcn.004307b0
add esp, 0xc
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], ecx
mov byte [ebp - 4], 0x1c
push 0x5914e0
mov edx, dword [ebp - 0xd0]
push edx
lea eax, [ebp - 0x208]
push eax
call fcn.00414850
add esp, 0xc
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xbc], ecx
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004307b0
add esp, 0xc
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x208]
call fcn.004041c0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x190]
call fcn.004041c0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1a8]
call fcn.004041c0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1c0]
call fcn.004041c0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1f0]
call fcn.004041c0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x220]
call fcn.004041c0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x250]
call fcn.004041c0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x280]
call fcn.004041c0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x2b0]
call fcn.004041c0
push 1
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x12c], esp
call fcn.00404210
mov dword [ebp - 0x130], eax
lea edx, [ebp - 0xa0]
push edx
call fcn.0045e3d0
add esp, 0x14
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x20
jae 0x43941f
push 0
push 0x5916d4
push 0x591680
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xa0]
call fcn.004041c0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x70]
call fcn.004041c0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
call fcn.004041c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
call fcn.004041c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88]
call fcn.004041c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.004041c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.004041c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004041c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00516529
mov esp, ebp
pop ebp
ret