Function at 0x432910
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dfee2
mov eax, dword fs:[0]
push eax
push ebx
push esi
push edi
mov eax, dword [0x53d9f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword fs:[0x2c]
mov ebx, 0x804
mov edx, dword [0x5421c0]
mov esi, dword [eax + edx*4]
mov eax, dword [0x5417b8]
cmp eax, dword [esi + 4]
jg 0x432a0a
mov eax, dword [0x541978]
cmp eax, dword [esi + 4]
jg 0x4334a1
push 0x541278
mov ecx, edi
call fcn.00423a80
mov ecx, edi
call fcn.004325d0
movzx esi, ax
xor ecx, ecx
xor eax, eax
cmp si, word [eax + 0x541278]
je 0x43299d
add eax, 0x60
inc ecx
cmp eax, 0x540
jb 0x432987
jmp 0x4329b0
lea eax, [ecx + ecx*2]
mov ecx, edi
shl eax, 5
add eax, 0x541278
push eax
call fcn.00423a80
push 0x5417c0
lea ecx, [edi + 0x60]
call fcn.004239f0
xor ecx, ecx
xor eax, eax
cmp si, word [eax + 0x5417c0]
je 0x4329e7
add eax, 0x58
inc ecx
cmp eax, 0x1b8
jb 0x4329c1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
imul eax, ecx, 0x58
lea ecx, [edi + 0x60]
add eax, 0x5417c0
push eax
call fcn.004239f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x5417b8
call fcn.004bf206
add esp, 4
cmp dword [0x5417b8], 0xffffffff
jne 0x43295c
mov eax, 0x409
mov dword [0x54127c], 0x1bc
mov word [0x541278], ax
mov ecx, 0x541284
push 0xf
xor eax, eax
mov dword [0x541280], 0x64
push str.Microsoft_YaHei
mov dword [0x541294], 0
mov dword [0x541298], 7
mov word [0x541284], ax
call fcn.004033b0
push 0xf
xor eax, eax
mov dword [ebp - 4], 0
push str.Microsoft_YaHei
mov ecx, 0x5412a0
mov dword [0x54129c], 0x14
mov dword [0x5412b0], 0
mov dword [0x5412b4], 7
mov word [0x5412a0], ax
call fcn.004033b0
push 0xf
xor eax, eax
mov byte [ebp - 4], 1
push str.Microsoft_YaHei
mov ecx, 0x5412bc
mov dword [0x5412b8], 0xc
mov dword [0x5412cc], 0
mov dword [0x5412d0], 7
mov word [0x5412bc], ax
call fcn.004033b0
mov dword [0x5412d4], 0xf
push 4
xor eax, eax
mov dword [ebp - 4], 2
push 0x4f50c4
mov ecx, 0x5412e4
mov word [0x5412d8], bx
mov dword [0x5412dc], 0x162
mov dword [0x5412e0], 0x1e
mov dword [0x5412f4], 0
mov dword [0x5412f8], 7
mov word [0x5412e4], ax
call fcn.004033b0
push 4
xor eax, eax
mov byte [ebp - 4], 3
push 0x4f50c4
mov ecx, 0x541300
mov dword [0x5412fc], 0x16
mov dword [0x541310], 0
mov dword [0x541314], 7
mov word [0x541300], ax
call fcn.004033b0
push 4
xor eax, eax
mov byte [ebp - 4], 4
push 0x4f50c4
mov ecx, 0x54131c
mov dword [0x541318], 0xe
mov dword [0x54132c], 0
mov dword [0x541330], 7
mov word [0x54131c], ax
call fcn.004033b0
mov dword [0x541334], 0xf
mov eax, 0x404
mov byte [ebp - 4], 5
mov word [0x541338], ax
xor eax, eax
mov dword [0x54133c], 0x1d0
mov dword [0x541340], 0x10e
mov dword [0x541354], 0
mov dword [0x541358], 7
mov word [0x541344], ax
push 0x12
push str.Microsoft_YaHei_UI
mov ecx, 0x541344
call fcn.004033b0
push 0x12
xor eax, eax
mov byte [ebp - 4], 6
push str.Microsoft_YaHei_UI
mov ecx, 0x541360
mov dword [0x54135c], 0x16
mov dword [0x541370], 0
mov dword [0x541374], 7
mov word [0x541360], ax
call fcn.004033b0
push 0x12
xor eax, eax
mov byte [ebp - 4], 7
push str.Microsoft_YaHei_UI
mov ecx, 0x54137c
mov dword [0x541378], 0xe
mov dword [0x54138c], 0
mov dword [0x541390], 7
mov word [0x54137c], ax
call fcn.004033b0
mov dword [0x541394], 0xf
mov eax, 0x411
mov byte [ebp - 4], 8
mov word [0x541398], ax
mov ecx, 0x5413a4
push 0xf
xor eax, eax
mov dword [0x54139c], 0x158
push str.Microsoft_YaHei
mov dword [0x5413a0], 0xaa
mov dword [0x5413b4], 0
mov dword [0x5413b8], 7
mov word [0x5413a4], ax
call fcn.004033b0
push 0xf
xor eax, eax
mov byte [ebp - 4], 9
push str.Microsoft_YaHei
mov ecx, 0x5413c0
mov dword [0x5413bc], 0x14
mov dword [0x5413d0], 0
mov dword [0x5413d4], 7
mov word [0x5413c0], ax
call fcn.004033b0
push 0xf
xor eax, eax
mov byte [ebp - 4], 0xa
push str.Microsoft_YaHei
mov ecx, 0x5413dc
mov dword [0x5413d8], 0xd
mov dword [0x5413ec], 0
mov dword [0x5413f0], 7
mov word [0x5413dc], ax
call fcn.004033b0
mov dword [0x5413f4], 0xd
mov eax, 0x407
mov byte [ebp - 4], 0xb
mov word [0x5413f8], ax
mov ecx, 0x541404
push 6
xor eax, eax
mov dword [0x5413fc], 0x1e4
push str.Tahoma
mov dword [0x541400], 0x2bc
mov dword [0x541414], 0
mov dword [0x541418], 7
mov word [0x541404], ax
call fcn.004033b0
mov byte [ebp - 4], 0xc
mov dword [0x54141c], 0xa
push 6
xor eax, eax
mov dword [0x541430], 0
push str.Tahoma
mov ecx, 0x541420
mov dword [0x541434], 7
mov word [0x541420], ax
call fcn.004033b0
xor eax, eax
mov dword [0x541438], 9
mov dword [0x54144c], 0
mov dword [0x541450], 7
mov word [0x54143c], ax
mov dword [0x541454], eax
mov ecx, 0x541464
mov eax, 0xc0a
mov byte [ebp - 4], 0xd
mov word [0x541458], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x54145c], 0x1da
mov dword [0x541460], 0x258
mov dword [0x541474], 0
mov dword [0x541478], 7
mov word [0x541464], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0xe
push str.Tahoma
mov ecx, 0x541480
mov dword [0x54147c], 0xa
mov dword [0x541490], 0
mov dword [0x541494], 7
mov word [0x541480], ax
call fcn.004033b0
xor eax, eax
mov dword [0x541498], 0xa
mov dword [0x5414ac], 0
mov dword [0x5414b0], 7
mov word [0x54149c], ax
mov dword [0x5414b4], eax
mov ecx, 0x5414c4
mov eax, 0x80a
mov byte [ebp - 4], 0xf
mov word [0x5414b8], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x5414bc], 0x1da
mov dword [0x5414c0], 0x258
mov dword [0x5414d4], 0
mov dword [0x5414d8], 7
mov word [0x5414c4], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x10
push str.Tahoma
mov ecx, 0x5414e0
mov dword [0x5414dc], 0xa
mov dword [0x5414f0], 0
mov dword [0x5414f4], 7
mov word [0x5414e0], ax
call fcn.004033b0
xor eax, eax
mov dword [0x5414f8], 0xa
mov dword [0x54150c], 0
mov dword [0x541510], 7
mov word [0x5414fc], ax
mov dword [0x541514], eax
mov eax, 0x40c
mov byte [ebp - 4], 0x11
mov word [0x541518], ax
mov dword [0x54151c], 0x1ee
push 6
xor eax, eax
mov dword [0x541520], 0x320
push str.Tahoma
mov ecx, 0x541524
mov dword [0x541534], 0
mov dword [0x541538], 7
mov word [0x541524], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x12
push str.Tahoma
mov ecx, 0x541540
mov dword [0x54153c], 0xa
mov dword [0x541550], 0
mov dword [0x541554], 7
mov word [0x541540], ax
call fcn.004033b0
xor eax, eax
mov dword [0x541558], 0xa
mov dword [0x54156c], 0
mov dword [0x541570], 7
mov word [0x54155c], ax
mov dword [0x541574], eax
mov ecx, 0x541584
mov eax, 0xc0c
mov byte [ebp - 4], 0x13
mov word [0x541578], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x54157c], 0x1ee
mov dword [0x541580], 0x320
mov dword [0x541594], 0
mov dword [0x541598], 7
mov word [0x541584], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x14
push str.Tahoma
mov ecx, 0x5415a0
mov dword [0x54159c], 0xa
mov dword [0x5415b0], 0
mov dword [0x5415b4], 7
mov word [0x5415a0], ax
call fcn.004033b0
xor eax, eax
mov dword [0x5415b8], 0xa
mov dword [0x5415cc], 0
mov dword [0x5415d0], 7
mov word [0x5415bc], ax
mov dword [0x5415d4], eax
mov ecx, 0x5415e4
mov eax, 0x416
mov byte [ebp - 4], 0x15
mov word [0x5415d8], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x5415dc], 0x1f8
mov dword [0x5415e0], 0x384
mov dword [0x5415f4], 0
mov dword [0x5415f8], 7
mov word [0x5415e4], ax
call fcn.004033b0
xor eax, eax
mov byte [ebp - 4], 0x16
push 6
mov dword [0x5415fc], 0xa
mov ecx, 0x541600
mov dword [0x541610], 0
mov dword [0x541614], 7
mov word [0x541600], ax
push str.Tahoma
call fcn.004033b0
xor eax, eax
mov dword [0x541618], 0xa
mov dword [0x54162c], 0
mov dword [0x541630], 7
mov word [0x54161c], ax
mov dword [0x541634], eax
mov ecx, 0x541644
mov eax, 0x816
mov byte [ebp - 4], 0x17
mov word [0x541638], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x54163c], 0x202
mov dword [0x541640], 0x514
mov dword [0x541654], 0
mov dword [0x541658], 7
mov word [0x541644], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x18
push str.Tahoma
mov ecx, 0x541660
mov dword [0x54165c], 0xa
mov dword [0x541670], 0
mov dword [0x541674], 7
mov word [0x541660], ax
call fcn.004033b0
xor eax, eax
mov dword [0x541678], 0xa
mov dword [0x54168c], 0
mov dword [0x541690], 7
mov word [0x54167c], ax
mov dword [0x541694], eax
mov ecx, 0x5416a4
mov eax, 0x419
mov byte [ebp - 4], 0x19
mov word [0x541698], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x54169c], 0x20c
mov dword [0x5416a0], 0x44c
mov dword [0x5416b4], 0
mov dword [0x5416b8], 7
mov word [0x5416a4], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x1a
push str.Tahoma
mov ecx, 0x5416c0
mov dword [0x5416bc], 0xa
mov dword [0x5416d0], 0
mov dword [0x5416d4], 7
mov word [0x5416c0], ax
call fcn.004033b0
xor eax, eax
mov dword [0x5416d8], 9
mov dword [0x5416ec], 0
mov dword [0x5416f0], 7
mov word [0x5416dc], ax
mov dword [0x5416f4], eax
mov eax, 0x421
mov word [0x5416f8], ax
xor eax, eax
push 6
mov byte [ebp - 4], 0x1b
mov dword [0x5416fc], 0x216
mov dword [0x541700], 0x4b0
mov dword [0x541714], 0
mov dword [0x541718], 7
mov word [0x541704], ax
push str.Tahoma
mov ecx, 0x541704
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x1c
push str.Tahoma
mov ecx, 0x541720
mov dword [0x54171c], 0xa
mov dword [0x541730], 0
mov dword [0x541734], 7
mov word [0x541720], ax
call fcn.004033b0
xor eax, eax
mov dword [0x541738], 9
mov dword [0x54174c], 0
mov dword [0x541750], 7
mov word [0x54173c], ax
mov dword [0x541754], eax
mov ecx, 0x541764
mov eax, 0x415
mov byte [ebp - 4], 0x1d
mov word [0x541758], ax
xor eax, eax
push 6
push str.Tahoma
mov dword [0x54175c], 0x220
mov dword [0x541760], 0x578
mov dword [0x541774], 0
mov dword [0x541778], 7
mov word [0x541764], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x1e
push str.Tahoma
mov ecx, 0x541780
mov dword [0x54177c], 0xa
mov dword [0x541790], 0
mov dword [0x541794], 7
mov word [0x541780], ax
call fcn.004033b0
xor eax, eax
mov dword [0x541798], 9
push 0x4ec0d0
mov dword [0x5417ac], 0
mov dword [0x5417b0], 7
mov word [0x54179c], ax
mov dword [0x5417b4], eax
mov dword [ebp - 4], 0xffffffff
call fcn.004bf0be
push 0x5417b8
call fcn.004bf1bc
add esp, 8
jmp 0x43295c
push 0x541978
call fcn.004bf206
add esp, 4
cmp dword [0x541978], 0xffffffff
jne 0x43296d
xor eax, eax
mov dword [0x5417d8], 7
push eax
push 0x4f0da4
mov ecx, 0x5417c4
mov word [0x5417c0], ax
mov dword [0x5417d4], eax
mov word [0x5417c4], ax
call fcn.004033b0
xor eax, eax
mov dword [ebp - 4], 0x1f
push eax
push 0x4f0da4
mov ecx, 0x5417e0
mov dword [0x5417dc], 0
mov dword [0x5417f0], 0
mov dword [0x5417f4], 7
mov word [0x5417e0], ax
call fcn.004033b0
xor eax, eax
mov byte [ebp - 4], 0x20
push eax
push 0x4f0da4
mov ecx, 0x5417fc
mov dword [0x5417f8], 0
mov dword [0x54180c], 0
mov dword [0x541810], 7
mov word [0x5417fc], ax
call fcn.004033b0
mov dword [0x541814], 0
push 2
xor eax, eax
mov dword [ebp - 4], 0x21
push 0x4f5108
mov ecx, 0x54181c
mov word [0x541818], bx
mov dword [0x54182c], 0
mov dword [0x541830], 7
mov word [0x54181c], ax
call fcn.004033b0
push 2
xor eax, eax
mov byte [ebp - 4], 0x22
push 0x4f5108
mov ecx, 0x541838
mov dword [0x541834], 0x11
mov dword [0x541848], 0
mov dword [0x54184c], 7
mov word [0x541838], ax
call fcn.004033b0
push 2
xor eax, eax
mov byte [ebp - 4], 0x23
push 0x4f5108
mov ecx, 0x541854
mov dword [0x541850], 0xa
mov dword [0x541864], 0
mov dword [0x541868], 7
mov word [0x541854], ax
call fcn.004033b0
mov dword [0x54186c], 0xc
mov eax, 0x404
mov byte [ebp - 4], 0x24
mov word [0x541870], ax
mov ecx, 0x541874
push 4
xor eax, eax
mov dword [0x541884], 0
push 0x4f5110
mov dword [0x541888], 7
mov word [0x541874], ax
call fcn.004033b0
mov byte [ebp - 4], 0x25
mov dword [0x54188c], 0x11
push 4
xor eax, eax
mov dword [0x5418a0], 0
push 0x4f5110
mov ecx, 0x541890
mov dword [0x5418a4], 7
mov word [0x541890], ax
call fcn.004033b0
push 4
xor eax, eax
mov byte [ebp - 4], 0x26
push 0x4f5110
mov ecx, 0x5418ac
mov dword [0x5418a8], 9
mov dword [0x5418bc], 0
mov dword [0x5418c0], 7
mov word [0x5418ac], ax
call fcn.004033b0
mov dword [0x5418c4], 0xb
mov eax, 0x409
mov byte [ebp - 4], 0x27
mov word [0x5418c8], ax
mov ecx, 0x5418cc
push 6
xor eax, eax
mov dword [0x5418dc], 0
push str.Tahoma
mov dword [0x5418e0], 7
mov word [0x5418cc], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x28
push str.Tahoma
mov ecx, 0x5418e8
mov dword [0x5418e4], 0x14
mov dword [0x5418f8], 0
mov dword [0x5418fc], 7
mov word [0x5418e8], ax
call fcn.004033b0
push 6
xor eax, eax
mov byte [ebp - 4], 0x29
push str.Tahoma
mov ecx, 0x541904
mov dword [0x541900], 0xc
mov dword [0x541914], 0
mov dword [0x541918], 7
mov word [0x541904], ax
call fcn.004033b0
mov dword [0x54191c], 0xf
mov eax, 0x411
mov byte [ebp - 4], 0x2a
mov word [0x541920], ax
mov ecx, 0x541924
push 0xa
xor eax, eax
mov dword [0x541934], 0
push str.MS_PGothic
mov dword [0x541938], 7
mov word [0x541924], ax
call fcn.004033b0
push 0xa
xor eax, eax
mov byte [ebp - 4], 0x2b
push str.MS_PGothic
mov ecx, 0x541940
mov dword [0x54193c], 0xf
mov dword [0x541950], 0
mov dword [0x541954], 7
mov word [0x541940], ax
call fcn.004033b0
mov byte [ebp - 4], 0x2c
mov dword [0x541958], 9
push 0xc
xor eax, eax
mov dword [0x54196c], 0
push str.MS_UI_Gothic
mov ecx, 0x54195c
mov dword [0x541970], 7
mov word [0x54195c], ax
call fcn.004033b0
push 0x4ec0b0
mov dword [0x541974], 9
mov dword [ebp - 4], 0xffffffff
call fcn.004bf0be
push 0x541978
call fcn.004bf1bc
add esp, 8
jmp 0x43296d