Function at 0x429629
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0x478e32
call fcn.00456a59
mov edi, ecx
mov dword [ebp - 0x18], edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov al, byte [ebp + 0xc]
push 0x398
mov byte [edi + 0x14f], 0
mov byte [edi + 0xe8], al
call fcn.004323f4
pop ecx
mov dword [ebp + 0xc], eax
mov dword [ebp - 4], esi
cmp eax, esi
je 0x42966e
push esi
mov ecx, eax
call fcn.0042d6e4
jmp 0x429670
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [edi + 0x124], eax
push dword [0x4a69bc]
mov ecx, eax
call fcn.0042c9a2
cmp byte [ebp + 8], 0
mov dword [edi + 0xec], esi
mov dword [ebp - 4], 1
je 0x429703
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push esi
call fcn.004040f9
push ecx
mov ebx, esp
mov dword [ebp - 0x3c], esp
push 4
pop esi
push esi
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.IA0zMCYpGS4nEg0NPRIBLiYAHQArEzNdJltaHy9bXiUhPhkwPB1XVw
mov byte [ebp - 4], 2
call fcn.004023b3
push ebx
call fcn.00403d07
add esp, 0x28
push ecx
mov dword [ebp - 0x34], esp
mov ebx, esp
push esi
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x34], esp
push str.IAYZDykQGV8gEwEYOg0_LiEdMwAgAysfLjk7HyE7WjM6LBkgPB1XVw
mov byte [ebp - 4], 3
call fcn.004023b3
push ebx
call fcn.00403d07
add esp, 0x28
mov byte [ebp - 4], 1
call fcn.0041f483
add esp, 0xc
mov ecx, edi
call fcn.00426e6c
push 0x47df8a
lea ecx, [ebp - 0x1c]
call fcn.004040f9
mov byte [ebp - 4], 4
xor edi, edi
cmp edi, dword [0x4a6c60]
jge 0x429845
mov eax, edi
imul eax, eax, 0xb58
cmp byte [eax + 0x4a72e8], 0
je 0x42990f
lea eax, [eax + 0x4a7088]
push eax
lea ecx, [ebp - 0x24]
call fcn.004036d2
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Ljk_JSg4Wi8oDT8mLg0JJigrGSQuEg1X
mov byte [ebp - 4], 5
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
mov esi, dword [ebp - 0x24]
or dword [ebp - 0x14], 1
push esi
mov byte [ebp - 4], 6
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x4297c4
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.JQBeMC0pJz4tO14TKxJaLiA4KzAiAy8fLT4rDSU7WiUmPgY5LQMjUig8HQclPF8sIysnJCAuBQ4_BglX
call fcn.004023b3
lea eax, [ebp - 0x2c]
push eax
call fcn.00403d07
or dword [ebp - 0x14], 2
add esp, 0x28
push dword [eax]
push esi
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x4297c4
xor bl, bl
jmp 0x4297c6
mov bl, 1
test byte [ebp - 0x14], 2
je 0x4297db
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x14], 0xfffffffd
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp - 0x14], 1
mov dword [ebp - 4], 5
je 0x4297f7
mov ecx, dword [ebp - 0x30]
and dword [ebp - 0x14], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x429903
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.JwBbMzgsBVc
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.0040398a
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401264
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 4
call fcn.00401264
push 0x47df8a
lea ecx, [ebp - 0x1c]
call fcn.0040335d
test eax, eax
jne 0x429996
xor edi, edi
cmp edi, dword [0x4a6c60]
jge 0x429996
mov eax, edi
imul eax, eax, 0xb58
cmp byte [eax + 0x4a72e8], 0
je 0x429a74
lea eax, [eax + 0x4a7088]
push eax
lea ecx, [ebp - 0x30]
call fcn.004036d2
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Ix0gCCkTLxonHT8FJTwFCyYdJyArKTNfLjs7Hy9bXiU6LBkgPB1XVw
mov byte [ebp - 4], 8
call fcn.004023b3
lea eax, [ebp - 0x24]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
mov esi, dword [ebp - 0x30]
or dword [ebp - 0x14], 4
push esi
mov byte [ebp - 4], 9
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x429915
push 5
push 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.IytaBCcuUi4pOAUHIjxeKSYSJyAuEydeIS4BDSUJCgjDSsoLjlSDj0dUgcrKy8zJjkGDzIDGV4iOwkYISxfDCUDAggnAB0OPFsJVw
call fcn.004023b3
lea eax, [ebp - 0x2c]
push eax
call fcn.00403d07
or dword [ebp - 0x14], 8
add esp, 0x28
push dword [eax]
push esi
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x429915
xor bl, bl
jmp 0x429917
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 4
call fcn.00401264
inc edi
jmp 0x42971d
mov bl, 1
test byte [ebp - 0x14], 8
je 0x42992c
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x14], 0xfffffff7
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp - 0x14], 4
mov dword [ebp - 4], 8
je 0x429948
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x14], 0xfffffffb
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x429a68
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.IDsnDiApXhorOAEDK1sgPiMAHSUnDVdX
call fcn.004023b3
lea eax, [ebp - 0x2c]
push eax
call fcn.00403d07
add esp, 0x28
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
call fcn.0040398a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00401264
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 4
call fcn.00401264
lea eax, [ebp - 0x20]
push eax
call fcn.00422e80
pop ecx
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.IA0jBC8pIysjEgEYK1sgPiYAHSUnDVdX
mov byte [ebp - 4], 0xb
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.0040335d
mov ecx, dword [ebp - 0x30]
test eax, eax
sete bl
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.00401264
test bl, bl
je 0x429c09
push 3
pop edi
push edi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Jw0jKDgWiglKxlX
call fcn.004023b3
lea eax, [ebp - 0x2c]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
or dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd
call fcn.0040335d
test eax, eax
je 0x429a7a
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.KSgSCDgsGVc
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
or dword [ebp - 0x14], 0x20
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xe
call fcn.0040335d
test eax, eax
je 0x429a7a
xor bl, bl
jmp 0x429a7c
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 4
call fcn.00401264
inc edi
jmp 0x42985c
mov bl, 1
test byte [ebp - 0x14], 0x20
je 0x429a91
mov ecx, dword [ebp - 0x30]
and dword [ebp - 0x14], 0xffffffdf
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp - 0x14], 0x10
mov dword [ebp - 4], 0xb
je 0x429aad
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x14], 0xffffffef
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x429f2a
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, 0x47df8a
push ebx
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 0xf
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push ebx
mov byte [ebp - 4], 0x10
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x30], esp
push edi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.JQ1aHDIQDRolEh1cKzgFECUpHSw8HVdX
mov byte [ebp - 4], 0x11
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x2c], esp
push 4
pop edi
push edi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.IywZMC4AUj4nEAETKykJLiMAHQ0nDVdX
mov byte [ebp - 4], 0x12
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push ebx
mov byte [ebp - 4], 0x13
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push ebx
mov byte [ebp - 4], 0x14
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x44], esp
push 2
pop ebx
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.L1tSJSg4Xi8uEl5X
mov byte [ebp - 4], 0x15
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x48], esp
push edi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.IABfOSIpWl89Ah1cIjtbLCM4IA8rAz8fLTlaBi8rLzMjKCQ5IgM_GTINCQIhWwUOIxBeJDI5CRomW14GISxeKw
mov byte [ebp - 4], 0x16
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x4c], esp
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.PVsnJSg4Xi8uEl4nLwE7Oi8NUlc
mov byte [ebp - 4], 0x17
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov dword [ebp - 0x50], esp
mov esi, esp
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
mov byte [ebp - 4], 0x18
push str.KwYZKSICXgs_LzwsLg0_DigrMywpHV8vKB0nIC0rPzAoOx0POCsBLChaPyUoOFovKA0_Ji4BPAw4PBIsMj88DDIsWw4yWyMmPT8ODjJbJzo4W18OPTtTIikrEjkuLw4MPSweDDIGXzA_BlMJMh0eLC4NPw8oK1IPLiggLy4SIzo
call fcn.004023b3
push esi
call fcn.00403d07
mov edi, dword [ebp - 0x18]
add esp, 0x28
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.00427238
jmp 0x429f2d
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IxABKCIpCTsjEgEDK1sgPiMAHSUnDVdX
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x19
call fcn.0040335d
mov ecx, dword [ebp - 0x30]
test eax, eax
sete bl
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.00401264
test bl, bl
je 0x429f2a
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.PRISCzgsBVc
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.0040335d
mov ecx, dword [ebp - 0x30]
test eax, eax
sete bl
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb
call fcn.00401264
test bl, bl
je 0x429f47
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
mov edi, 0x47df8a
push edi
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push edi
mov byte [ebp - 4], 0x1b
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push edi
mov byte [ebp - 4], 0x1c
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x44], esp
push 5
push 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x40], esp
push str.IytbCCkpAT4pPl5cLw08CSMHQAgKSdBIjtaAiEUw4gEls5KBNSGSg5P1wmKAENOihbMjwdV1c
mov byte [ebp - 4], 0x1d
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x40], esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.IywZMC4AUj4nEAETKykJLiMAHQ0nDVdX
push ebx
mov byte [ebp - 4], 0x1e
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push edi
mov byte [ebp - 4], 0x1f
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push edi
mov byte [ebp - 4], 0x20
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x34], esp
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.L1tSJSg4Xi8uEl5X
mov byte [ebp - 4], 0x21
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x30], esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.IABfOSIpWl89Ah1cIjtbLCM4IA8rAz8fLTlaBi8rLzMjKCQ5IgM_GTINCQIhWwUOIxBeJDI5CRomW14GISxeKw
mov byte [ebp - 4], 0x22
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x2c], esp
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.PVsnJSg4Xi8uEl4nLwE7Oi8NUlc
mov byte [ebp - 4], 0x23
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov dword [ebp - 0x24], esp
mov esi, esp
push 5
push 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.IxJaBCE5P189AgUCPVsFCyAGRwmAy8OJytSDSsrP0E6HTMAKBMvUjINLwYrBhk6IS4BHCUTKzkrOyMGJigBBCMrIwQgKV4uIRBeAi8GXikmEx0ALgMnXzIAKx8rW15dJgANJC0pP149Ax1cJRMNXyErJxwiExkkLTsJHCI8BSggOyMELykjPi0_L0UuOwEtIA0jKCUDKy4rOQ1eOg0_QSASIywrEz87IB1eBigCAR0jPgEgJRMnOSI4UhghEx0ZIzkeCyspKz46EgEDLjhaDCYSWhkuAAU5IB0rXjoGBSUlBhkOMi4FLSMdWgAvAzs6Jj4BBCITKAggHT8fJTwnICMoWhglOV4aKz4ZUytbBQkhEiALLikzKzIQAQYrE1ILIw0rKCITUwgyAx0ALx0zXyMCJDkmAygIIjwJVw
mov byte [ebp - 4], 0x24
call fcn.004023b3
push esi
call fcn.00403d07
mov ecx, dword [ebp - 0x18]
add esp, 0x28
mov byte [ebp - 4], 0xb
call fcn.00427238
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push edi
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push edi
mov byte [ebp - 4], 0x25
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push edi
mov byte [ebp - 4], 0x26
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x44], esp
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x40], esp
push str.IBNSRS4DRolEh1cKzgFIyUpHQ8jOT9BLQ0NVw
mov byte [ebp - 4], 0x27
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x40], esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push ebx
mov byte [ebp - 4], 0x28
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push edi
mov byte [ebp - 4], 0x29
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push edi
mov byte [ebp - 4], 0x2a
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x34], esp
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Kx0jJSg4Xi8uEl5bLTgaCA
mov byte [ebp - 4], 0x2b
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x48915c
mov byte [ebp - 4], 0x2c
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x2c], esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.IA0jGCU5CT4_AF4GLwYjLSErIA8iLgVeIxMNGi8sGSYhPhkAKwMzGiETKwQrKCMnIT5fCyEpAV4gWj8FKwMnCSANIwArKT8kPFsJVw
mov byte [ebp - 4], 0x2d
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov dword [ebp - 0x24], esp
mov esi, esp
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.JgMSDyspGSkyDVIeKAMNGSUuHg8mKSNdJRNaBSUSAQYlKRkgJgMBXi45HR4lEFIEIw0vXSMpDV0uAx0fLj5SJSEpGRAmKQEOMhMdRSsUgAlLhIMJi5SJCsNUhoiPF4GJg0zDSMDXwggKx0TOh1eOiYNWzkgAA0OLjk_GiYpKwMhPhIPJQBaLSg5Mx8mLCMAOlseDyMQDV8lElIGKAJeHDo4IygpEFsLKTsjAiYpKyAnABIMKT5aKCk4J0UoAiMcJgIjACUNV1c
mov byte [ebp - 4], 0x2e
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0xb
call fcn.00427238
mov edi, dword [ebp - 0x18]
xor esi, esi
inc esi
cmp esi, dword [0x4a6c60]
mov ecx, edi
jge 0x42a078
push esi
call fcn.0042625c
inc esi
jmp 0x429f30
call fcn.004231a1
test al, al
je 0x429f2a
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
mov ebx, 0x47df8a
push ebx
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0x2f
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push ebx
mov byte [ebp - 4], 0x30
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x44], esp
push 3
pop edi
push edi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x40], esp
push str.IBNSRS4DRolEh1cKzgFIyUpHQ8jOT9BLQ0NVw
mov byte [ebp - 4], 0x31
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x40], esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.IywZMC4AUj4nEAETKykJLiMAHQ0nDVdX
mov byte [ebp - 4], 0x32
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push ebx
mov byte [ebp - 4], 0x33
call fcn.004040f9
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 0x34
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x34], esp
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Kx0jJSg4Xi8uEl5bLTgaCA
mov byte [ebp - 4], 0x35
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x48915c
mov byte [ebp - 4], 0x36
call fcn.004040f9
push ecx
mov esi, esp
mov dword [ebp - 0x2c], esp
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.IA0jGCU5CT4_AF4GLwYjLSErIA8iLgVeIxMNGi8sGSYhPhkAKwMzGiETKwQrKCMnIT5fCyEpAV4gWj8FKwMnCSANIwArKT8kPFsJVw
mov byte [ebp - 4], 0x37
call fcn.004023b3
push esi
call fcn.00403d07
add esp, 0x28
push ecx
mov dword [ebp - 0x24], esp
mov esi, esp
push edi
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x24], esp
mov byte [ebp - 4], 0x38
push str.JgMSDyspGSkyDVIeKAMNGSUuHg8mKSNdJRNaBSUSAQYlKRkgJgMBXi45HR4lEFIEIw0vXSMpDV0uAx0fLj5SJSEpGRAmKQEOMhMdRSsUgAlLhIMJi5SJCsNUhoiPF4GJg0zDSMDXwggKx0TOh1eOiYNWzkgAA0OLjk_GiYpKwMhPhIPJQBaLSg5Mx8mLCMAOlseDyMQDV8lElIGKAJeHDo4IygpEFsLKTsjAiYpKyAnABIMKT5aKCk4J0UoAiMcJgIjACUNV1c
jmp 0x429be8
xor ebx, ebx
push ebx
call fcn.0042625c
lea eax, [ebp - 0x28]
push 0x94
push eax
call fcn.0041cdd2
pop ecx
pop ecx
lea esi, [edi + 0x13c]
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
mov byte [ebp - 4], 0x39
jle 0x42a0a8
mov ecx, edi
call fcn.00425226
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.0043c1eb
mov ecx, dword [edi + 0x124]
mov edx, dword [ecx]
push eax
push 0x67
call dword [edx + 0x13c]
push ecx
lea eax, [edi + 0x12c]
mov dword [ebp - 0x50], esp
mov ecx, esp
push eax
call fcn.004036d2
mov ecx, dword [edi + 0x124]
call fcn.0042d5ce
mov ecx, dword [edi + 0x124]
push 5
call fcn.00434aa2
lea eax, [edi + 0x140]
mov ecx, dword [eax]
cmp dword [ecx - 0xc], ebx
jle 0x42a105
push ecx
mov dword [ebp - 0x50], esp
mov ecx, esp
push eax
jmp 0x42a174
push ebx
push 5
push 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IxNeKC4DGRo6E14aJTxeCyAGSgnEzMOPR0ZEyEJx8mPlJFKAM8CC4AI1c
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
or dword [ebp - 0x14], 0x40
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x28]
call fcn.00403616
cmp eax, 0xffffffff
jg 0x42a152
push ebx
push str.chrome
lea ecx, [ebp - 0x28]
call fcn.00403616
cmp eax, 0xffffffff
jg 0x42a152
xor bl, bl
jmp 0x42a154
mov bl, 1
test byte [ebp - 0x14], 0x40
je 0x42a169
mov ecx, dword [ebp - 0x30]
and dword [ebp - 0x14], 0xffffffbf
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x42a180
push ecx
mov dword [ebp - 0x50], esp
mov ecx, esp
push esi
call fcn.004036d2
mov ecx, edi
call fcn.00425581
push 2
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_KillTimer]
lea eax, [ebp + 8]
push 0x9c
push eax
call fcn.0041cdd2
pop ecx
pop ecx
lea eax, [ebp + 0xc]
push 0x97
push eax
mov byte [ebp - 4], 0x3a
call fcn.0041cdd2
pop ecx
pop ecx
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3b
call fcn.004036d2
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3c
call fcn.0040381c
mov esi, dword [ebp - 0x24]
cmp dword [esi - 0xc], 0
jle 0x42a4e2
cmp byte [0x4a67c6], 0
je 0x42a224
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IAAZGCEpLzsoPz8DJT5TPiM4Ww8vEAVePRAjUiI8DjI
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
add esp, 0x28
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x3d
call fcn.0040388a
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3c
call fcn.00401264
push 3
pop ebx
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.JQMNKSkpAQUuOR0DJSsvXCY5DSgmAw0YIjkdVw
call fcn.004023b3
lea eax, [ebp - 0x3c]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
or dword [ebp - 0x14], 0x80
push dword [ebp + 8]
mov byte [ebp - 4], 0x3e
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x42a364
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IBIjDicpXiQ6HV4FIRAnGSE4Ww8mAw0YIjkdVw
call fcn.004023b3
lea eax, [ebp - 0x38]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
or dword [ebp - 0x14], 0x100
push dword [ebp + 8]
mov dword [ebp - 4], 0x3f
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x42a364
push 2
pop ebx
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IisNJSg4Wi8oDT8mLgIBDy4SDVc
call fcn.004023b3
lea eax, [ebp - 0x34]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
or dword [ebp - 0x14], 0x200
push dword [ebp + 8]
mov dword [ebp - 4], 0x40
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x42a364
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IytbCygpWl8gEzsTKxJaLiA4KzAiAy8fLT4rDSU8IzMlAiQ5IhMjUi4AI1c
call fcn.004023b3
lea eax, [ebp - 0x2c]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
or dword [ebp - 0x14], 0x400
push dword [ebp + 8]
mov dword [ebp - 4], 0x41
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x42a364
push ebx
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Ii4FOi8rXiwiOzstKDsZJQ
call fcn.004023b3
lea eax, [ebp - 0x30]
push eax
call fcn.00403d07
or dword [ebp - 0x14], 0x800
add esp, 0x28
push dword [eax]
push dword [ebp + 8]
call fcn.004587f2
pop ecx
pop ecx
test eax, eax
je 0x42a364
xor bl, bl
jmp 0x42a366
mov bl, 1
test dword [ebp - 0x14], 0x800
je 0x42a381
mov ecx, dword [ebp - 0x30]
and dword [ebp - 0x14], 0xfffff7ff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp - 0x14], 0x400
je 0x42a39c
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x14], 0xfffffbff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp - 0x14], 0x200
je 0x42a3b7
mov ecx, dword [ebp - 0x34]
and dword [ebp - 0x14], 0xfffffdff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp - 0x14], 0x100
je 0x42a3d2
mov ecx, dword [ebp - 0x38]
and dword [ebp - 0x14], 0xfffffeff
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp - 0x14], 0x80
mov dword [ebp - 4], 0x3c
je 0x42a3ea
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x42a446
cmp byte [edi + 0x151], 0
je 0x42a43a
push 3
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.JQIoCyAXgUtOx0aIj4nHyYDGQQlA14kPFsJVw
call fcn.004023b3
lea eax, [ebp - 0x3c]
push eax
call fcn.00403d07
add esp, 0x28
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x42
call fcn.0040388a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3c
call fcn.00401264
mov byte [edi + 0x150], 1
jmp 0x42a4cd
push 0
push 4
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IAInMCI5CR8uPFpFKxAnDyM4KwQ7OTNdPQE_GiI8DjI
call fcn.004023b3
lea eax, [ebp - 0x3c]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x24]
call fcn.00403616
mov ecx, dword [ebp - 0x3c]
cmp eax, 0xffffffff
setg bl
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x42a4e2
push str.earlypoptrue
push 2
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.IygFOikSDS0vEgUsLQ1XVw
call fcn.004023b3
lea eax, [ebp - 0x3c]
push eax
call fcn.00403d07
add esp, 0x28
push dword [eax]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x43
call fcn.0040764b
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3c
call fcn.00401264
push ecx
lea eax, [ebp + 0xc]
mov dword [ebp - 0x50], esp
mov ecx, esp
push eax
call fcn.004036d2
call fcn.0041eed9
pop ecx
push 0
push 0x3e8
push 1
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [esi - 0x10]
call fcn.00401264
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401264
call fcn.00456afe
ret 8