Function at 0x440300
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x497d64
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x4c6008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x120], 0x4f5160
call fcn.0045f0e0
mov dword [ebp - 4], 0
mov ecx, 0x4f5378
mov dword [0x4f5160], 0x4b43fc
call fcn.0045bc40
push str.TaskbarButtonCreated
mov dword [0x4f5378], 0x4b3200
mov byte [0x4f542c], 0
call dword [0x49a2b8]
mov dword [0x4f5430], eax
mov ecx, 0x4f5434
mov byte [ebp - 4], 1
call fcn.0045a000
mov ecx, 0x4f5450
call fcn.004502e0
push fcn.0044df30
push fcn.0044de90
push 7
push 0x254
push 0x4f54c8
mov byte [ebp - 4], 3
call fcn.00461f83
push fcn.004480c0
push fcn.00447fc0
push 0x46
push 0x2a0
push 0x4f6514
mov byte [ebp - 4], 4
call fcn.00461f83
push 0x44eee0
push 0x44eec0
push 6
push 0xc
push 0x501cd4
mov byte [ebp - 4], 5
call fcn.00461f83
mov ecx, 0x501d1c
mov byte [ebp - 4], 6
call fcn.0044f190
mov ecx, 0x5022ec
mov byte [ebp - 4], 7
call fcn.00437b10
mov ecx, 0x5025c8
call fcn.00452070
mov ecx, 0x5029e8
call fcn.00453c90
mov dword [0x503d9c], 0x4b3914
mov dword [0x503da0], 0
mov dword [0x503da4], 0
mov dword [0x503da8], 0
mov dword [0x503dac], 0x4b3914
mov dword [0x503db0], 0
mov dword [0x503db4], 0
mov dword [0x503db8], 0
mov dword [0x503dbc], 0x4b3914
mov dword [0x503dc0], 0
mov dword [0x503dc4], 0
mov dword [0x503dc8], 0
mov ecx, 0x503dcc
call fcn.00456580
mov dword [0x503df4], 0x4b3914
mov dword [0x503df8], 0
mov dword [0x503dfc], 0
mov dword [0x503e00], 0
mov ecx, 0x503e04
call fcn.00453270
mov ecx, 0x503e44
call fcn.004533f0
mov ecx, 0x503f80
mov byte [ebp - 4], 0x11
call fcn.004536f0
mov ecx, 0x504008
call fcn.0044d290
push fcn.0045a160
push fcn.0045a000
push 4
push 0x18
push 0x504278
mov dword [ebp - 0x118], 0x50422c
call fcn.00461f83
push 0
mov byte [ebp - 4], 0x12
push 0
mov dword [0x504300], 0
mov dword [0x504304], 0
call fcn.00412130
mov dword [0x504300], eax
mov ecx, 0x50431c
mov byte [ebp - 4], 0x13
call fcn.0045a000
mov ecx, 0x50445c
mov byte [ebp - 4], 0x14
call fcn.00405b40
push 0
mov byte [ebp - 4], 0x15
push 0
mov dword [0x5044a8], 0
mov dword [0x5044ac], 0
call fcn.00402990
mov ecx, 0x5044a8
mov dword [0x5044a8], eax
mov dword [0x5044b0], 0
call fcn.00402900
mov dword [0x5044b8], 0x64
mov dword [0x5044b4], 0xffffffff
mov ecx, 0x5044bc
mov byte [ebp - 4], 0x16
call fcn.00444920
push fcn.00452190
push fcn.00452070
push 3
push 0x410
push 0x507e58
mov byte [ebp - 4], 0x17
call fcn.00461f83
mov dword [0x508ad8], 0
mov dword [0x508adc], 0
mov dword [0x508ae0], 0
mov dword [0x508ae4], 0
mov dword [0x508ae8], 0
mov dword [0x508aec], 0
mov dword [0x508af0], 0
mov dword [0x508af4], 0
mov dword [0x508af8], 0
mov ecx, 0x508bb0
mov byte [ebp - 4], 0x1b
call fcn.0045a000
push 0x402b60
push 0x402b40
mov byte [ebp - 4], 0x1c
push 0x190
push 0xcc
push 0x508bc8
call fcn.00461f83
mov ecx, 0x51cb3c
mov byte [ebp - 4], 0x1d
call fcn.0045a000
push 0x402b60
push 0x402b40
push 0x190
push 0xcc
push 0x51cb54
mov byte [ebp - 4], 0x1e
call fcn.00461f83
mov ecx, 0x530ac8
mov byte [ebp - 4], 0x1f
call fcn.0045a000
push fcn.0045a160
push fcn.0045a000
push 4
push 0x18
mov byte [ebp - 4], 0x20
push 0x530cb4
mov dword [ebp - 0x118], 0x530c68
call fcn.00461f83
push 0
mov byte [ebp - 4], 0x21
push 0
mov dword [0x530d3c], 0
mov dword [0x530d40], 0
call fcn.00412130
mov dword [0x530d3c], eax
mov ecx, 0x530d58
mov byte [ebp - 4], 0x22
call fcn.0045a000
mov dword [0x530db8], 0
mov dword [0x530dbc], 0
mov dword [0x530dc0], 0
push 0
mov byte [ebp - 4], 0x24
push 0
mov dword [0x531e68], 0
mov dword [0x531e6c], 0
call fcn.00412090
mov dword [0x531e68], eax
push 0
mov byte [ebp - 4], 0x25
push 0
mov dword [0x531e70], 0
mov dword [0x531e74], 0
call fcn.00412090
mov dword [0x531e70], eax
mov ecx, 0x531e78
mov byte [ebp - 4], 0x26
call fcn.00432190
mov dword [0x531f28], 0
mov dword [0x531f2c], 0
mov dword [0x531f30], 0
mov ecx, 0x532fd8
mov byte [ebp - 4], 0x28
call fcn.00440aa0
push 0x412120
push 0x440c60
push 0x12c
push 0x20
push 0x55e254
mov byte [ebp - 4], 0x29
call fcn.00461f83
push 0x412120
push 0x440c60
push 0x1f40
push 0x20
push 0x5607d4
mov byte [ebp - 4], 0x2a
call fcn.00461f83
push 0x412120
push 0x440c60
push 0x28
push 0x20
push 0x59efd4
mov byte [ebp - 4], 0x2b
call fcn.00461f83
push 0x412120
push 0x440c60
push 0x1f4
push 0x20
push 0x59f4d4
mov byte [ebp - 4], 0x2c
call fcn.00461f83
push 0x412120
push 0x440c60
push 0x14
push 0x20
push 0x5a3354
mov byte [ebp - 4], 0x2d
call fcn.00461f83
push fcn.004091d0
push 0x437820
push 0x64
push 8
push 0x5a35d4
mov byte [ebp - 4], 0x2e
call fcn.00461f83
push 0
mov byte [ebp - 4], 0x2f
push 0
mov dword [0x5a38f4], 0
mov dword [0x5a38f8], 0
call fcn.0041c660
mov dword [0x5a38f4], eax
push ecx
mov ecx, 0x5a38fc
mov byte [ebp - 4], 0x30
call fcn.0042f4f0
mov ecx, 0x5a3938
mov byte [ebp - 4], 0x31
call fcn.00440c80
push fcn.0045a160
push fcn.0045a000
push 5
push 0x18
push 0x5a3d90
mov byte [ebp - 4], 0x32
call fcn.00461f83
push str.INTERHEARTADV
push 0x100
push 0x4f516c
mov byte [ebp - 4], 0x33
call fcn.004653a4
push str.INTERADV
push 0x100
push 0x4f526c
call fcn.004653a4
mov ecx, esp
push str.Thu_Aug_23_14:22:47_2018
call fcn.0045a080
mov ecx, 0x4f5434
call fcn.0045a3a0
push 0x104
lea eax, [ebp - 0x114]
push eax
push 0
call dword [0x49a130]
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [0x49a3a4]
mov esi, eax
push esi
call fcn.00462014
add esp, 4
mov edi, eax
lea eax, [ebp - 0x114]
push edi
push esi
push dword [ebp - 0x11c]
push eax
call dword [0x49a39c]
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x118]
push eax
push 0x4b3ef4
push edi
call dword [0x49a3a0]
mov ecx, dword [ebp - 0x118]
push edi
movzx edx, byte [ecx + 0x14]
movzx eax, byte [ecx + 0x16]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x10]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x12]
shl edx, 8
or edx, eax
mov dword [0x4f544c], edx
call fcn.0046200f
add esp, 4
push 0
push 0
push 0
push 0
call dword [0x49a084]
mov dword [0x504440], eax
mov eax, 0x4f5160
mov dword [0x504444], 0
mov byte [0x5a3e24], 0
mov word [0x5a3e25], 0
mov dword [0x5029e4], 0
mov dword [0x5029d8], 0
mov dword [0x5029dc], 0
mov dword [0x5029e0], 0
mov dword [0x5a3d3c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00461b73
mov esp, ebp
pop ebp
ret