Function at 0x447280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4936ef
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x4c72d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x120], 0x4f55d0
call fcn.00464280
mov dword [ebp - 4], 0
mov ecx, 0x4f57e8
mov dword [0x4f55d0], 0x4b0108
call fcn.004617b0
push str.TaskbarButtonCreated
mov dword [0x4f57e8], 0x4aef64
mov byte [0x4f589c], 0
call dword [0x4962b0]
mov dword [0x4f58a0], eax
mov ecx, 0x4f58a4
mov byte [ebp - 4], 1
call fcn.0045f9a0
mov ecx, 0x4f58c0
call fcn.00455d30
push fcn.00454290
push fcn.004541f0
push 7
push 0x254
push 0x4f5938
mov byte [ebp - 4], 3
call fcn.004674b2
push fcn.0044ecc0
push fcn.0044ebc0
push 0x46
push 0x2a0
push 0x4f6984
mov byte [ebp - 4], 4
call fcn.004674b2
push 0x455120
push 0x455100
push 6
push 0xc
push 0x502144
mov byte [ebp - 4], 5
call fcn.004674b2
mov ecx, 0x50218c
mov byte [ebp - 4], 6
call fcn.0043f240
mov ecx, 0x502468
call fcn.00457ac0
mov ecx, 0x502888
call fcn.0045a4f0
mov dword [0x503c3c], 0x4af61c
mov dword [0x503c40], 0
mov dword [0x503c44], 0
mov dword [0x503c48], 0
mov dword [0x503c4c], 0x4af61c
mov dword [0x503c50], 0
mov dword [0x503c54], 0
mov dword [0x503c58], 0
mov dword [0x503c5c], 0x4af61c
mov dword [0x503c60], 0
mov dword [0x503c64], 0
mov dword [0x503c68], 0
mov ecx, 0x503c6c
call fcn.0045bf00
mov dword [0x503c94], 0x4af61c
mov dword [0x503c98], 0
mov dword [0x503c9c], 0
mov dword [0x503ca0], 0
mov ecx, 0x503ca4
call fcn.00458cb0
mov ecx, 0x503ce4
call fcn.00458e30
mov ecx, 0x503e20
mov byte [ebp - 4], 0x10
call fcn.00459100
mov ecx, 0x503ea8
call fcn.00453630
mov ecx, 0x504078
call fcn.00447920
mov ecx, 0x5042a8
mov byte [ebp - 4], 0x11
call fcn.0040e5e0
push 0
mov byte [ebp - 4], 0x12
push 0
mov dword [0x5042f4], 0
mov dword [0x5042f8], 0
call fcn.0040bf00
mov ecx, 0x5042f4
mov dword [0x5042f4], eax
mov dword [0x5042fc], 0
call fcn.0040bea0
mov dword [0x504304], 0x64
mov dword [0x504300], 0xffffffff
mov ecx, 0x504308
mov byte [ebp - 4], 0x13
call fcn.0044b5b0
push fcn.00457be0
push fcn.00457ac0
push 3
push 0x410
push 0x507ca8
mov byte [ebp - 4], 0x14
call fcn.004674b2
mov dword [0x508928], 0
mov dword [0x50892c], 0
mov dword [0x508930], 0
mov dword [0x508934], 0
mov dword [0x508938], 0
mov dword [0x50893c], 0
mov dword [0x508940], 0
mov dword [0x508944], 0
mov dword [0x508948], 0
mov ecx, 0x508a00
mov byte [ebp - 4], 0x18
call fcn.0045f9a0
push 0x40c130
push 0x40c110
push 0x190
push 0xcc
push 0x508a18
mov byte [ebp - 4], 0x19
call fcn.004674b2
mov ecx, 0x51c98c
mov byte [ebp - 4], 0x1a
call fcn.0045f9a0
push 0x40c130
push 0x40c110
push 0x190
push 0xcc
push 0x51c9a4
mov byte [ebp - 4], 0x1b
call fcn.004674b2
mov ecx, 0x530918
mov byte [ebp - 4], 0x1c
call fcn.0045f9a0
mov byte [ebp - 4], 0x1d
mov ecx, 0x530a64
call fcn.00447920
mov dword [0x530bb4], 0
mov dword [0x530bb8], 0
mov dword [0x530bbc], 0
push 0
mov byte [ebp - 4], 0x1f
push 0
mov dword [0x531c60], 0
mov dword [0x531c64], 0
call fcn.0041a850
mov dword [0x531c60], eax
push 0
mov byte [ebp - 4], 0x20
push 0
mov dword [0x531c68], 0
mov dword [0x531c6c], 0
call fcn.0041a850
mov dword [0x531c68], eax
mov ecx, 0x531c70
mov byte [ebp - 4], 0x21
call fcn.00439dc0
mov dword [0x531d20], 0
mov dword [0x531d24], 0
mov dword [0x531d28], 0
mov ecx, 0x532dcc
mov byte [ebp - 4], 0x23
call fcn.00447a30
push 0x41a8e0
push 0x447c10
push 0x12c
push 0x20
push 0x55e048
mov byte [ebp - 4], 0x24
call fcn.004674b2
push 0x41a8e0
push 0x447c10
push 0x1f40
push 0x20
push 0x5605c8
mov byte [ebp - 4], 0x25
call fcn.004674b2
push 0x41a8e0
push 0x447c10
push 0x28
push 0x20
push 0x59edc8
mov byte [ebp - 4], 0x26
call fcn.004674b2
push 0x41a8e0
push 0x447c10
push 0x190
push 0x20
push 0x59f2c8
mov byte [ebp - 4], 0x27
call fcn.004674b2
push 0x41a8e0
push 0x447c10
push 0x14
push 0x20
push 0x5a24c8
mov byte [ebp - 4], 0x28
call fcn.004674b2
push fcn.00411ed0
push 0x43ef60
push 0x64
push 8
mov byte [ebp - 4], 0x29
push 0x5a2748
call fcn.004674b2
push 0
mov byte [ebp - 4], 0x2a
push 0
mov dword [0x5a2a68], 0
mov dword [0x5a2a6c], 0
call fcn.004249b0
mov dword [0x5a2a68], eax
push ecx
mov ecx, 0x5a2a70
mov byte [ebp - 4], 0x2b
call fcn.00437600
mov ecx, 0x5a2aac
mov byte [ebp - 4], 0x2c
call fcn.00447c20
push fcn.0045fb00
push fcn.0045f9a0
push 5
push 0x18
push 0x5a2f00
mov byte [ebp - 4], 0x2d
call fcn.004674b2
push str.INTERHEARTADV
push 0x100
push 0x4f55dc
mov byte [ebp - 4], 0x2e
call fcn.00467644
push str.INTERADV
push 0x100
push 0x4f56dc
call fcn.00467644
mov ecx, esp
push str.Mon_Apr_11_09:48:12_2016
call fcn.0045fa20
mov ecx, 0x4f58a4
call fcn.0045fd70
push 0x104
lea eax, [ebp - 0x114]
push eax
push 0
call dword [0x49607c]
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [0x496398]
mov esi, eax
push esi
call fcn.00466953
add esp, 4
mov edi, eax
lea eax, [ebp - 0x114]
push edi
push esi
push dword [ebp - 0x11c]
push eax
call dword [0x496390]
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x118]
push eax
push 0x4afb68
push edi
call dword [0x496394]
mov edx, dword [ebp - 0x118]
movzx eax, byte [edx + 0x14]
shl ax, 8
movzx ecx, ax
movzx eax, byte [edx + 0x16]
or ecx, eax
movzx eax, byte [edx + 0x10]
shl ax, 8
movzx eax, ax
shl ecx, 0x10
or ecx, eax
movzx eax, byte [edx + 0x12]
or ecx, eax
push edi
mov dword [0x4f58bc], ecx
call fcn.00467a5a
add esp, 4
push 0
push 0
push 0
push 0
call dword [0x496244]
mov dword [0x50428c], eax
mov eax, 0x4f55d0
mov dword [0x504290], 0
mov byte [0x5a2f94], 0
mov word [0x5a2f95], 0
mov dword [0x502884], 0
mov dword [0x502878], 0
mov dword [0x50287c], 0
mov dword [0x502880], 0
mov dword [0x5a2eac], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00466a0a
mov esp, ebp
pop ebp
ret