Function at 0x438cf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f1384
mov eax, dword fs:[0]
push eax
sub esp, 0x5ec
mov eax, dword [0x53fbb0]
xor eax, ebp
mov dword [ebp - 0x58], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x420], ecx
mov dword [ebp - 0x41c], 0
mov eax, dword [ebp + 8]
push eax
call fcn.00435940
add esp, 4
mov ecx, dword [ebp - 0x420]
mov dword [ecx + 0x11c], eax
mov dword [ebp - 0x28], 0
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x24]
push eax
call fcn.00435dc0
add esp, 8
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0
jmp 0x438d73
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x24]
call fcn.0043ace0
cmp dword [ebp - 0x2c], eax
jae 0x439e4f
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x24]
call fcn.0043ad00
push eax
lea ecx, [ebp - 0x50]
call fcn.0043de10
mov byte [ebp - 4], 1
push 0x4fb368
lea ecx, [ebp - 0xb0]
call fcn.004016c0
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x41c]
or eax, 1
mov dword [ebp - 0x41c], eax
lea ecx, [ebp - 0xc0]
push ecx
lea ecx, [ebp - 0x50]
call fcn.0040d910
push eax
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x50]
call fcn.004295d0
mov ecx, eax
call fcn.0043ec00
movzx ecx, al
test ecx, ecx
jne 0x438e5a
push 0x4fb370
lea ecx, [ebp - 0xdc]
call fcn.004016c0
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0x41c]
or edx, 2
mov dword [ebp - 0x41c], edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x50]
call fcn.0040d910
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea ecx, [ebp - 0x50]
call fcn.004295d0
mov ecx, eax
call fcn.0043ec00
movzx eax, al
test eax, eax
jne 0x438e5a
mov dword [ebp - 0x424], 0
jmp 0x438e64
mov dword [ebp - 0x424], 1
mov cl, byte [ebp - 0x424]
mov byte [ebp - 0x91], cl
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x41c]
and edx, 2
je 0x438e94
and dword [ebp - 0x41c], 0xfffffffd
lea ecx, [ebp - 0xdc]
call fcn.00401740
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x41c]
and eax, 1
je 0x438eb8
and dword [ebp - 0x41c], 0xfffffffe
lea ecx, [ebp - 0xb0]
call fcn.00401740
movzx ecx, byte [ebp - 0x91]
test ecx, ecx
je 0x438ed4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.0043d320
jmp 0x438d6a
push 0x250
call fcn.00495ed4
add esp, 4
mov dword [ebp - 0xf4], eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0xf4], 0
je 0x438f07
mov ecx, dword [ebp - 0xf4]
call fcn.0043cd30
mov dword [ebp - 0x428], eax
jmp 0x438f11
mov dword [ebp - 0x428], 0
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0xf0], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x11c], 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xf8], esp
push 0x4fb380
call fcn.004016c0
mov dword [ebp - 0x42c], eax
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], edx
mov byte [ebp - 4], 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xfc], esp
push str.display
call fcn.004016c0
mov dword [ebp - 0x434], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x118]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x438], eax
mov edx, dword [ebp - 0x438]
mov dword [ebp - 0x43c], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0xc4
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x118]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x11c], esp
push 0x4fb394
call fcn.004016c0
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x440]
mov dword [ebp - 0x444], ecx
mov byte [ebp - 4], 7
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x120], esp
push str.filename
call fcn.004016c0
mov dword [ebp - 0x448], eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x13c]
push eax
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x44c], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x450], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x450]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x8c
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x140], esp
push 0x4fb3ac
call fcn.004016c0
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
mov byte [ebp - 4], 9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x144], esp
push 0x4fb3b0
call fcn.004016c0
mov dword [ebp - 0x45c], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x160]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x464], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x464]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x144
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x160]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x164], esp
push 0x4fb3b8
call fcn.004016c0
mov dword [ebp - 0x468], eax
mov edx, dword [ebp - 0x468]
mov dword [ebp - 0x46c], edx
mov byte [ebp - 4], 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x168], esp
push str.reg2
call fcn.004016c0
mov dword [ebp - 0x470], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x184]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x474], eax
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x478], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x478]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x160
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x184]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x188], esp
push 0x4fb3c8
call fcn.004016c0
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x480], ecx
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18c], esp
push str.blockedprocesslist
call fcn.004016c0
mov dword [ebp - 0x484], eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x48c], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x48c]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x17c
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push 0x4fb3f4
call fcn.004016c0
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x494], eax
mov byte [ebp - 4], 0xf
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1b0], esp
push str.showprocesslist
call fcn.004016c0
mov dword [ebp - 0x498], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x1cc]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1b4
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1cc]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push 0x4fb418
call fcn.004016c0
mov dword [ebp - 0x4a4], eax
mov edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], edx
mov byte [ebp - 4], 0x11
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1d4], esp
push str.injectblockedprocesslist
call fcn.004016c0
mov dword [ebp - 0x4ac], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x1f0]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x4b0], eax
mov edx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4b4], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x4b4]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x198
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f0]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1f4], esp
push 0x4fb450
call fcn.004016c0
mov dword [ebp - 0x4b8], eax
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x4bc], ecx
mov byte [ebp - 4], 0x13
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1f8], esp
push str.desktopfile
call fcn.004016c0
mov dword [ebp - 0x4c0], eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x214]
push eax
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x4c4], eax
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c8], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x4c8]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1d0
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x214]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x218], esp
push 0x4fb46c
call fcn.004016c0
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 4], 0x15
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.appdatafile
call fcn.004016c0
mov dword [ebp - 0x4d4], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x238]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x4dc], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4dc]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1ec
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x238]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x23c], esp
push 0x4fb488
call fcn.004016c0
mov dword [ebp - 0x4e0], eax
mov edx, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], edx
mov byte [ebp - 4], 0x17
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.localappdatafile
call fcn.004016c0
mov dword [ebp - 0x4e8], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x25c]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x4ec], eax
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x4f0], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x4f0]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x208
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x25c]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x260], esp
push 0x4fb4b0
call fcn.004016c0
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], ecx
mov byte [ebp - 4], 0x19
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x264], esp
push str.desktopnofilelist
call fcn.004016c0
mov dword [ebp - 0x4fc], eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x280]
push eax
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x500], eax
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0x504], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x504]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x230
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x280]
call fcn.00401740
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x284], esp
push str.installinterval
call fcn.004016c0
mov dword [ebp - 0x508], eax
lea eax, [ebp - 0x50]
push eax
call fcn.0043a7a0
add esp, 0x24
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x50c]
mov dword [ecx + 0x24c], edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x288], esp
push 0x4fb4f8
call fcn.004016c0
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x514], eax
mov byte [ebp - 4], 0x1b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28c], esp
push str.command
call fcn.004016c0
mov dword [ebp - 0x518], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x2a8]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x520], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x520]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x120
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2a8]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0x4fb50c
call fcn.004016c0
mov dword [ebp - 0x524], eax
mov edx, dword [ebp - 0x524]
mov dword [ebp - 0x528], edx
mov byte [ebp - 4], 0x1d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2b0], esp
push 0x4fb510
call fcn.004016c0
mov dword [ebp - 0x52c], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x2cc]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x534], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0x30]
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2cc]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2d0], esp
push 0x4fb518
call fcn.004016c0
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], ecx
mov byte [ebp - 4], 0x1f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2d4], esp
push str.url2
call fcn.004016c0
mov dword [ebp - 0x540], eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x2f0]
push eax
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x544], eax
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x548], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x548]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1c
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2f0]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2f4], esp
push 0x4fb528
call fcn.004016c0
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x550], eax
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2f8], esp
push 0x4fb52c
call fcn.004016c0
mov dword [ebp - 0x554], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x314]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x55c], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x55c]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x38
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x314]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x318], esp
push 0x4fb534
call fcn.004016c0
mov dword [ebp - 0x560], eax
mov edx, dword [ebp - 0x560]
mov dword [ebp - 0x564], edx
mov byte [ebp - 4], 0x23
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x31c], esp
push str.rand
call fcn.004016c0
mov dword [ebp - 0x568], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x338]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x56c], eax
mov edx, dword [ebp - 0x56c]
mov dword [ebp - 0x570], edx
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x570]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x54
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x338]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x33c], esp
push 0x4fb544
call fcn.004016c0
mov dword [ebp - 0x574], eax
mov ecx, dword [ebp - 0x574]
mov dword [ebp - 0x578], ecx
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x340], esp
push str.randignore
call fcn.004016c0
mov dword [ebp - 0x57c], eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x35c]
push eax
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x580], eax
mov ecx, dword [ebp - 0x580]
mov dword [ebp - 0x584], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x584]
push edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x70
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x35c]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x360], esp
push 0x4fb560
call fcn.004016c0
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 0x27
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x364], esp
push 0x4fb564
call fcn.004016c0
mov dword [ebp - 0x590], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x380]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x598], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x598]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xe0
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x380]
call fcn.00401740
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x384], esp
push 0x4fb570
call fcn.004016c0
mov dword [ebp - 0x59c], eax
mov edx, dword [ebp - 0x59c]
mov dword [ebp - 0x5a0], edx
mov byte [ebp - 4], 0x29
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x388], esp
push str.privateparam
call fcn.004016c0
mov dword [ebp - 0x5a4], eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x3a4]
push ecx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x5a8], eax
mov edx, dword [ebp - 0x5a8]
mov dword [ebp - 0x5ac], edx
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x5ac]
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0xfc
call fcn.00401760
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3a4]
call fcn.00401740
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a8], esp
push 0x4fb590
call fcn.004016c0
mov dword [ebp - 0x5b0], eax
lea ecx, [ebp - 0x50]
push ecx
call fcn.0043a7a0
add esp, 0x24
mov dword [ebp - 0x5b4], eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x5b4]
mov dword [edx + 0x118], eax
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push 0x4fb598
call fcn.004016c0
mov dword [ebp - 0x5b8], eax
lea ecx, [ebp - 0x50]
push ecx
call fcn.0043a7a0
add esp, 0x24
mov dword [ebp - 0x5bc], eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x5bc]
mov dword [edx + 0x224], eax
mov ecx, dword [ebp - 0x30]
xor edx, edx
cmp edx, dword [ecx + 0x224]
sbb eax, eax
neg eax
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 0x13c], eax
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3b0], esp
push str.type
call fcn.004016c0
mov dword [ebp - 0x5c0], eax
lea edx, [ebp - 0x50]
push edx
call fcn.0043a7a0
add esp, 0x24
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x5c4]
mov dword [eax + 0x140], ecx
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3b4], esp
push str.show
call fcn.004016c0
mov dword [ebp - 0x5c8], eax
lea edx, [ebp - 0x50]
push edx
call fcn.0043a7a0
add esp, 0x24
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x5cc]
mov dword [eax + 0x228], ecx
mov edx, dword [ebp - 0x420]
mov eax, dword [ebp - 0x28]
cmp eax, dword [edx + 0x11c]
jb 0x439bbe
jmp 0x439e29
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00436870
add esp, 4
test eax, eax
je 0x439bd3
jmp 0x439e29
mov edx, dword [ebp - 0x30]
push edx
call fcn.00436fa0
add esp, 4
test eax, eax
je 0x439bf8
mov eax, dword [ebp - 0x30]
push eax
call fcn.00437200
add esp, 4
test eax, eax
je 0x439bf8
jmp 0x439e29
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00437460
add esp, 4
test eax, eax
je 0x439c0d
jmp 0x439e29
mov edx, dword [ebp - 0x30]
push edx
call fcn.00437470
add esp, 4
test eax, eax
jne 0x439c22
jmp 0x439e29
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x22c], 1
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3b8], esp
push str.maxshowcount
call fcn.004016c0
mov dword [ebp - 0x5d0], eax
lea ecx, [ebp - 0x50]
push ecx
call fcn.0043a7a0
add esp, 0x24
mov dword [ebp - 0x5d4], eax
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0
jle 0x439e19
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3bc], esp
push 0x4fb5e0
call fcn.004016c0
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x5dc], eax
mov byte [ebp - 4], 0x2b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c0], esp
push str.showcounturl
call fcn.004016c0
mov dword [ebp - 0x5e0], eax
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x3dc]
push edx
mov byte [ebp - 4], 1
call fcn.0043a6a0
add esp, 0x40
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x5e8], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x5e8]
call fcn.00401780
push eax
lea ecx, [ebp - 0x74]
push ecx
call fcn.004eb550
add esp, 8
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3dc]
call fcn.00401740
lea ecx, [ebp - 0x90]
call fcn.00403bd0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x74]
call fcn.004017c0
cmp eax, 0xa
jae 0x439dba
mov ecx, dword [ebp - 0x30]
add ecx, 0xe0
call fcn.00401780
push eax
lea edx, [ebp - 0x3f8]
push edx
call fcn.004eb550
add esp, 8
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x5f0], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x5f0]
push ecx
push str.http:__api.kpzip.com_showcount.php_name
lea edx, [ebp - 0x414]
push edx
call fcn.00403380
add esp, 0xc
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x5f8], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x5f8]
push ecx
lea ecx, [ebp - 0x74]
call fcn.004013e0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x414]
call fcn.00403c40
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x3f8]
call fcn.00403c40
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004e6a90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x439df4
lea edx, [ebp - 0x90]
push edx
call fcn.004eabe0
add esp, 4
cmp dword [ebp - 0x54], eax
jge 0x439df2
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x22c], 0
jmp 0x439dfe
mov ecx, dword [ebp - 0x30]
mov byte [ecx + 0x22c], 0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x90]
call fcn.00403c40
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.00403c40
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x22c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x420]
add ecx, 0x104
call fcn.0044ed60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.0043d320
jmp 0x438d6a
mov byte [0x5436f3], 1
mov dword [ebp - 0x418], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0043ac80
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x58]
xor ecx, ebp
call fcn.0049115e
mov esp, ebp
pop ebp
ret 4