Function at 0x4ca426
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5865e2
mov eax, dword fs:[0]
push eax
mov eax, 0x475c
call fcn.004fc580
mov eax, dword [0x602c60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
mov dword [ebp - 0x4708], ecx
mov dword [ebp - 0x4714], esi
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x4748]
call fcn.00432a3a
mov byte [ebp - 4], 1
cmp dword [ebp + 0x3c], esi
je 0x4ca487
mov dword [ebp - 0x4744], 0x100
push 0x602968
lea ecx, [ebp - 0x4724]
call fcn.00431ef7
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x4700], esp
mov ebx, str.SoftwareMicrosoftInternet_ExplorerSearchScopes
push ebx
call fcn.0043479c
mov byte [ebp - 4], 4
push dword [ebp + 0x38]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4748]
call fcn.0043d31e
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4700], esp
push ebx
call fcn.0043479c
mov byte [ebp - 4], 5
push dword [ebp + 0x38]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4748]
call fcn.00434682
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0x4700], esp
push ebx
call fcn.0043479c
mov byte [ebp - 4], 6
push dword [ebp + 0x38]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4748]
call fcn.00434682
cmp eax, esi
je 0x4cb1d9
mov dword [ebp - 0x4730], esi
mov dword [ebp - 0x472c], esi
mov dword [ebp - 0x4728], esi
mov byte [ebp - 4], 7
lea eax, [ebp - 0x4730]
push eax
lea ecx, [ebp - 0x4748]
call fcn.0043aa5d
xor edi, edi
cmp dword [ebp - 0x472c], esi
jg 0x4ca561
mov eax, dword [ebp - 0x4708]
mov esi, dword [eax + 0x150]
mov edi, eax
jmp 0x4cada4
xor esi, esi
push 0x602968
lea ecx, [ebp - 0x4704]
call fcn.00431ef7
mov byte [ebp - 4], 9
cmp dword [ebp + 0x38], 0x80000001
jne 0x4ca5cc
cmp edi, esi
jl 0x4ca8a4
cmp edi, dword [ebp - 0x472c]
jge 0x4ca8a4
mov eax, dword [ebp - 0x4730]
lea eax, [eax + edi*4]
push eax
lea eax, [ebp - 0x471c]
push str.CURRENT_USERSoftwareMicrosoftInternet_ExplorerSearchScopes_
push eax
call fcn.004b01ac
add esp, 0xc
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x4704]
call fcn.00433c20
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x471c]
jmp 0x4ca621
cmp dword [ebp + 0x38], reloc.OLEAUT32.dll_SysReAllocString
jne 0x4ca629
cmp edi, esi
jl 0x4ca8a4
cmp edi, dword [ebp - 0x472c]
jge 0x4ca8a4
mov eax, dword [ebp - 0x4730]
lea eax, [eax + edi*4]
push eax
lea eax, [ebp - 0x474c]
push str.MACHINESoftwareMicrosoftInternet_ExplorerSearchScopes_
push eax
call fcn.004b01ac
add esp, 0xc
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x4704]
call fcn.00433c20
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x474c]
add ecx, 0xfffffff0
call fcn.004310e3
mov esi, dword [ebp - 0x4704]
cmp dword [esi - 4], 1
jle 0x4ca649
push dword [esi - 0xc]
lea ecx, [ebp - 0x4704]
call fcn.00431f53
mov esi, dword [ebp - 0x4704]
push esi
lea ecx, [ebp - 0x4748]
call fcn.0043bbb8
push 1
test edi, edi
js 0x4ca8b3
cmp edi, dword [ebp - 0x472c]
jge 0x4ca8b3
mov eax, dword [ebp - 0x4730]
push ecx
mov ecx, esp
lea eax, [eax + edi*4]
mov dword [ebp - 0x4700], esp
push eax
push str.SoftwareMicrosoftInternet_ExplorerSearchScopes_
push ecx
call fcn.004b01ac
add esp, 0xc
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4748]
call fcn.00434154
test eax, eax
je 0x4ca886
push ecx
mov ecx, esp
mov dword [ebp - 0x4700], esp
push 0x59a2c0
call fcn.0043479c
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x4720], esp
push 0x59b0cc
call fcn.0043479c
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x4750]
push eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4748]
call fcn.00434b9b
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.00433966
push eax
lea ecx, [ebp - 0x4718]
call fcn.004324a9
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x4750]
add ecx, 0xfffffff0
call fcn.004310e3
mov eax, dword [ebp - 0x4708]
mov esi, dword [eax + 0x150]
jmp 0x4ca862
mov eax, dword [esi + 0x10]
push 0
push eax
lea ecx, [ebp - 0x4718]
call fcn.00432533
test eax, eax
js 0x4ca859
push ecx
lea eax, [esi + 8]
mov ecx, esp
mov dword [ebp - 0x4700], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x15
push ecx
mov ecx, esp
mov dword [ebp - 0x4720], esp
push str.Codepage
call fcn.0043479c
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
push ecx
lea eax, [esi + 0xc]
mov ecx, esp
mov dword [ebp - 0x4700], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x17
push ecx
mov ecx, esp
mov dword [ebp - 0x4720], esp
push 0x59b0cc
call fcn.0043479c
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
push ecx
mov ecx, esp
mov dword [ebp - 0x4700], esp
push str.Deleted
call fcn.0043479c
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x4748]
call fcn.004a7a17
test eax, eax
je 0x4ca806
push ecx
mov ecx, esp
mov dword [ebp - 0x4700], esp
push str.Deleted
call fcn.0043479c
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x4748]
call fcn.004a7999
xor eax, eax
inc eax
mov dword [esi + 0x28], eax
cmp edi, dword [ebp - 0x472c]
jge 0x4ca8b9
mov eax, dword [ebp - 0x4730]
lea eax, [eax + edi*4]
push eax
lea ecx, [esi + 0x18]
call fcn.00433c20
mov eax, dword [esi + 0x10]
push 0
push eax
lea ecx, [ebp + 0x14]
call fcn.00432533
test eax, eax
js 0x4ca859
cmp edi, dword [ebp - 0x472c]
jge 0x4ca8b3
mov eax, dword [ebp - 0x4730]
lea eax, [eax + edi*4]
push eax
lea ecx, [ebp - 0x4724]
call fcn.00433c20
mov eax, dword [ebp - 0x4708]
add esi, 0x30
cmp esi, dword [eax + 0x154]
jne 0x4ca725
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x4718]
add ecx, 0xfffffff0
call fcn.004310e3
mov esi, dword [ebp - 0x4704]
mov byte [ebp - 4], 7
lea ecx, [esi - 0x10]
call fcn.004310e3
inc edi
cmp edi, dword [ebp - 0x472c]
jl 0x4ca55f
jmp 0x4ca54c
push esi
push esi
push 1
push 0xc000008c
call dword [sym.imp.KERNEL32.dll_RaiseException]
push 0
push 0
jmp 0x4ca8a6
push 0
push 0
push eax
jmp 0x4ca8a8
cmp dword [esi + 0x28], 0
jne 0x4cad1b
cmp dword [esi + 0x2c], 0
je 0x4cad1b
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push ebx
call fcn.0043479c
mov byte [ebp - 4], 0x1d
push dword [ebp + 0x38]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.00434682
test eax, eax
je 0x4cad1b
lea eax, [ebp - 0x474c]
push eax
lea ecx, [ebp - 0x4748]
call fcn.004a7967
mov byte [ebp - 4], 0x1e
push 0x59a764
push eax
lea eax, [ebp - 0x4750]
push eax
call fcn.0043a8de
mov byte [ebp - 4], 0x1f
add esp, 8
mov ecx, esp
mov dword [ebp - 0x4710], esp
lea edi, [esi + 0x18]
push edi
push eax
push ecx
call fcn.0043a887
add esp, 0xc
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x4748]
call fcn.004b36ec
mov ebx, eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x4750]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x474c]
add ecx, 0xfffffff0
call fcn.004310e3
test ebx, ebx
je 0x4cad16
push ecx
lea eax, [esi + 8]
mov ecx, esp
mov dword [ebp - 0x4710], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x23
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push str.Codepage
call fcn.0043479c
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
push ecx
lea eax, [esi + 0xc]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push 0x59b0cc
call fcn.0043479c
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
push ecx
lea eax, [esi + 4]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x27
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push str.DisplayName
call fcn.0043479c
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x29
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push str.FaviconURL
call fcn.0043479c
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push str.SuggestionsURLFallback
call fcn.0043479c
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
xor ebx, ebx
inc ebx
push str.baidu.com
lea ecx, [esi + 0x10]
mov dword [esi + 0x28], ebx
call fcn.00431ed3
test eax, eax
jne 0x4caca2
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push str.SortIndex
call fcn.0043479c
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.004a7b31
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push str.ShowSearchSuggestions
call fcn.0043479c
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.004a7b31
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push str.http:__suggestion.baidu.com_su_wdsearchTermsactionopensearchieinputEncodingfromie8
call fcn.0043479c
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push str.SuggestionsURL_JSON
call fcn.0043479c
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
mov ecx, dword [ebp - 0x4708]
call fcn.004c3598
cmp eax, 9
jne 0x4caca2
lea ecx, [ebp - 0x4768]
call fcn.00432a3a
mov byte [ebp - 4], 0x32
push str..ico
lea ecx, [ebp - 0x4704]
call fcn.00433e48
mov byte [ebp - 4], 0x33
push str.LocalLowMicrosoftInternet_ExplorerServices_search_
lea ecx, [ebp - 0x4718]
call fcn.00433e48
mov byte [ebp - 4], 0x34
push edi
lea eax, [ebp - 0x4718]
push eax
lea eax, [ebp - 0x4720]
push eax
call fcn.0043a887
mov byte [ebp - 4], 0x35
add esp, 8
mov ecx, esp
mov dword [ebp - 0x470c], esp
lea edx, [ebp - 0x4704]
push edx
push eax
push ecx
call fcn.0043a887
mov byte [ebp - 4], 0x36
add esp, 8
mov eax, esp
mov dword [ebp - 0x4710], esp
push eax
lea ecx, [ebp - 0x4768]
call fcn.004bac41
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x471c]
push eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x4768]
call fcn.0049be74
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x4720]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x4718]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x4704]
add ecx, 0xfffffff0
call fcn.004310e3
push ecx
lea eax, [ebp - 0x471c]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x3f
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push str.FaviconPath
call fcn.0043479c
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x471c]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4768]
call fcn.00432a92
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
mov ebx, str.Deleted
push ebx
call fcn.0043479c
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.004a7a17
test eax, eax
je 0x4cacef
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push ebx
call fcn.0043479c
mov byte [ebp - 4], 0x44
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.004a7999
push edi
lea eax, [ebp - 0x4700]
push str.CURRENT_USERSoftwareMicrosoftInternet_ExplorerSearchScopes_
push eax
call fcn.004b01ac
add esp, 0xc
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4700]
add ecx, 0xfffffff0
call fcn.004310e3
mov ebx, str.SoftwareMicrosoftInternet_ExplorerSearchScopes
push dword [ebp + 8]
mov ecx, esi
call fcn.00431ed3
test eax, eax
jne 0x4cad9b
mov ecx, dword [ebp - 0x4708]
call fcn.004c3343
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push ebx
call fcn.0043479c
mov byte [ebp - 4], 0x46
push dword [ebp + 0x38]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.00434682
test eax, eax
je 0x4cad9b
push ecx
lea eax, [esi + 0x18]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x47
push ecx
mov ecx, esp
mov dword [ebp - 0x4710], esp
push str.DefaultScope
call fcn.0043479c
mov byte [ebp - 4], 0x48
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4748]
call fcn.0043c86d
mov edi, dword [ebp - 0x4708]
add esi, 0x30
cmp esi, dword [edi + 0x154]
jne 0x4ca8c0
cmp dword [ebp + 0x38], 0x80000001
jne 0x4caded
mov ecx, dword [0x606438]
lea eax, [ebp - 0x4700]
push eax
call fcn.004a9459
mov byte [ebp - 4], 0x49
push 0x59ac08
mov ecx, eax
mov dword [ebp - 0x4714], 1
call fcn.00431ed3
test eax, eax
jne 0x4caded
mov bl, 1
jmp 0x4cadef
xor bl, bl
push 7
pop esi
mov dword [ebp - 4], esi
test byte [ebp - 0x4714], 1
je 0x4cae17
and dword [ebp - 0x4714], 0xfffffffe
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4700]
add ecx, 0xfffffff0
call fcn.004310e3
test bl, bl
je 0x4cb0bf
lea eax, [ebp - 0x4704]
push eax
mov ecx, edi
call fcn.004c342f
mov byte [ebp - 4], 0x4b
push ecx
mov ecx, esp
mov dword [ebp - 0x470c], esp
push str.11.0.9600.17239
call fcn.00433e48
mov byte [ebp - 4], 0x4c
push ecx
lea eax, [ebp - 0x4704]
mov ecx, esp
mov dword [ebp - 0x4710], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x4b
call fcn.004bbcd7
pop ecx
pop ecx
test eax, eax
js 0x4cb0ad
mov edi, 0x800
push edi
call fcn.004f8908
pop ecx
mov dword [ebp - 0x4708], eax
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x4724]
cmp dword [eax - 0xc], 0
lea ecx, [ebp - 0x4700]
jne 0x4caec2
push dword [ebp + 0x20]
call fcn.004b40f5
mov byte [ebp - 4], 0x50
mov ebx, dword [ebp - 0x4708]
mov ecx, eax
call fcn.004a6aeb
push eax
push edi
push ebx
call fcn.005043a1
add esp, 0xc
jmp 0x4caee4
push eax
call fcn.004b40f5
mov byte [ebp - 4], 0x52
mov ebx, dword [ebp - 0x4708]
mov ecx, eax
call fcn.004a6aeb
push eax
push edi
push ebx
call fcn.005043a1
add esp, 0xc
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x4700]
add ecx, 0xfffffff0
call fcn.004310e3
push dword [ebp - 0x4708]
call fcn.004fba80
lea ebx, [eax + 1]
mov eax, ebx
and eax, esi
pop ecx
je 0x4caf12
push 8
pop ecx
sub ecx, eax
add ebx, ecx
mov esi, 0xfff
push esi
lea eax, [ebp - 0x100f]
push 0
push eax
mov byte [ebp - 0x1010], 0
call fcn.004fc1f0
push esi
xor esi, esi
lea eax, [ebp - 0x200f]
push esi
push eax
mov byte [ebp - 0x2010], 0
call fcn.004fc1f0
add esp, 0x18
push esi
push str._hd1qa_
lea ecx, [ebp - 0x46fc]
call fcn.004a3f83
push esi
push ebx
push dword [ebp - 0x4708]
lea ecx, [ebp - 0x46fc]
call fcn.004a7e7d
shl ebx, 3
push ebx
lea eax, [ebp - 0x1010]
push eax
lea eax, [ebp - 0x4011]
push eax
lea ecx, [ebp - 0x46fc]
call fcn.004a064a
push ebx
lea eax, [ebp - 0x1010]
push eax
lea eax, [ebp - 0x2010]
push eax
lea ecx, [ebp - 0x46fc]
call fcn.004a06e2
lea eax, [ebp - 0x2010]
push eax
push edi
push dword [ebp - 0x4708]
call fcn.005043a1
add esp, 0xc
lea ecx, [ebp - 0x4768]
call fcn.00432a3a
mov byte [ebp - 4], 0x55
push dword [ebp - 0x4708]
lea ecx, [ebp - 0x471c]
call fcn.00433e48
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x4720]
push eax
lea ecx, [ebp - 0x4768]
call fcn.004bb0a8
mov byte [ebp - 4], 0x57
push str.__sse
push eax
lea eax, [ebp - 0x4700]
push eax
call fcn.0043a8de
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x471c]
push ecx
push eax
lea eax, [ebp - 0x4718]
push eax
call fcn.0043a887
add esp, 0x18
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x4700]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x4720]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x471c]
add ecx, 0xfffffff0
call fcn.004310e3
push esi
push ecx
lea eax, [ebp - 0x4718]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x60
mov byte [ebp - 4], 0x5e
call fcn.004a8179
pop ecx
pop ecx
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x4718]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x4768]
call fcn.00432a92
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4708]
call fcn.004a5233
push 7
pop esi
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4704]
add ecx, 0xfffffff0
call fcn.004310e3
cmp dword [ebp + 0x38], 0x80000001
jne 0x4cb0f9
mov ecx, dword [0x606438]
lea eax, [ebp - 0x4700]
push eax
call fcn.004a94b6
mov byte [ebp - 4], 0x64
or dword [ebp - 0x4714], 2
push 0x59ac08
mov ecx, eax
call fcn.00431ed3
test eax, eax
jne 0x4cb0f9
mov bl, 1
jmp 0x4cb0fb
xor bl, bl
mov dword [ebp - 4], esi
test byte [ebp - 0x4714], 2
je 0x4cb120
and dword [ebp - 0x4714], 0xfffffffd
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4700]
add ecx, 0xfffffff0
call fcn.004310e3
test bl, bl
je 0x4cb198
call fcn.0049d8d4
cmp eax, 0x1f
jl 0x4cb198
push 0x602968
lea ecx, [ebp - 0x4704]
call fcn.00431ef7
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x4724]
cmp dword [eax - 0xc], 0
lea ecx, [ebp - 0x4704]
lea eax, [ebp + 0x20]
je 0x4cb15d
lea eax, [ebp - 0x4724]
push eax
call fcn.00433c20
push ecx
lea eax, [ebp - 0x4704]
mov ecx, esp
mov dword [ebp - 0x470c], esp
push eax
call fcn.004324a9
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x67
call fcn.0043b996
pop ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4704]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4730]
call fcn.00433510
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4724]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4748]
call fcn.00432a92
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004aa3b0
xor eax, eax
inc eax
jmp 0x4cb208
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4724]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4748]
call fcn.00432a92
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004aa3b0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004fb958
leave
ret 0x38