Function at 0x43f4bd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1cc
mov eax, 0x490a7e
call fcn.0045a95a
mov dword [ebp - 0x1bc], ecx
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x1cc], edi
mov dword [ebp - 0xf4], ebx
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409d6c
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
push 0x3c
mov byte [ebp - 4], 4
call fcn.0045977c
mov esi, eax
pop ecx
mov dword [ebp - 0xec], esi
mov byte [ebp - 4], 5
test esi, esi
je 0x43f53c
push 0x3c
push ebx
push esi
call fcn.0045d120
add esp, 0xc
mov ecx, esi
call fcn.004201d6
mov esi, eax
mov dword [ebp - 0xec], esi
jmp 0x43f544
mov esi, ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xf0], ebx
push ebx
sub esp, 0xc
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x38], ebx
lea eax, [ebp - 0x31]
mov dword [ebp - 0x1b4], 0x776b4350
lea edx, [ebp - 0xf4]
mov dword [ebp - 0x1b0], 0x6f34584f
push eax
push edx
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x1ac], 0x6c516a4d
push eax
mov dword [ebp - 0x1a8], 0x3438534d
mov dword [ebp - 0x1a4], 0x79456a4b
mov dword [ebp - 0x1a0], 0x72595250
mov dword [ebp - 0x19c], 0x794e534b
mov dword [ebp - 0x198], 0x55634743
mov dword [ebp - 0x194], 0x30514248
mov dword [ebp - 0x190], 0x6a637948
mov dword [ebp - 0x18c], 0x2b355866
mov dword [ebp - 0x188], 0x41636741
mov dword [ebp - 0x184], 0x4f6f5842
mov dword [ebp - 0x180], 0x44516e46
mov dword [ebp - 0x17c], 0x2b747a47
mov dword [ebp - 0x178], 0x35595463
mov dword [ebp - 0x174], 0x56306864
mov dword [ebp - 0x170], 0x62385149
mov dword [ebp - 0x16c], 0x7251575a
mov dword [ebp - 0x168], 0x65344144
mov dword [ebp - 0x164], 0x6e387944
mov dword [ebp - 0x160], 0x36565346
mov dword [ebp - 0x15c], 0x3245675a
mov dword [ebp - 0x158], 0x74677964
mov dword [ebp - 0x154], 0x734d4843
mov dword [ebp - 0x150], 0x31426d4d
mov dword [ebp - 0x14c], 0x65306a43
mov dword [ebp - 0x148], 0x55457842
mov dword [ebp - 0x144], 0x5a776750
mov dword [ebp - 0x140], 0x7a456849
mov dword [ebp - 0x13c], 0x52344466
mov dword [ebp - 0x138], 0x564d3265
mov dword [ebp - 0x134], 0x686b795a
mov dword [ebp - 0x130], 0x476f6e65
mov dword [ebp - 0x12c], 0x2b397743
mov dword [ebp - 0x128], 0x304d534c
mov dword [ebp - 0x124], 0x756f6949
mov dword [ebp - 0x120], 0x4663425a
mov dword [ebp - 0x11c], 0x4d635145
mov dword [ebp - 0x118], 0x37774843
mov dword [ebp - 0x114], 0x4a49674f
mov dword [ebp - 0x110], 0x77684148
mov dword [ebp - 0x10c], 0x33703341
mov dword [ebp - 0x108], 0x2b394849
mov dword [ebp - 0x104], 0x73636947
mov dword [ebp - 0x100], 0x53777763
mov dword [ebp - 0xfc], 0x414d7741
mov dword [ebp - 0xf8], 0x39424141
call fcn.0040a169
lea eax, [ebp - 0x1d8]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.004103eb
push eax
lea ecx, [ebp - 0x38]
call fcn.00420321
lea ecx, [ebp - 0x1d8]
call fcn.00455078
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 4], 0xd
test edi, edi
jne 0x43f7c6
push dword [ebp - 0x38]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push ebx
call esi
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 3
test eax, eax
je 0x43f7ac
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
test eax, eax
je 0x43f7bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 1
jmp 0x43f8a2
mov ecx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x18]
push eax
call fcn.0043aed6
test eax, eax
je 0x43f8b9
mov eax, dword [0x4ad1c8]
mov edx, eax
lea edi, [edx + 2]
mov cx, word [edx]
add edx, 2
cmp cx, bx
jne 0x43f7e7
sub edx, edi
sar edx, 1
push edx
push eax
push dword [ebp - 0x18]
call fcn.0045e135
add esp, 0xc
test eax, eax
je 0x43f8b9
mov eax, dword [0x4ad1c4]
mov edx, eax
lea edi, [edx + 2]
mov cx, word [edx]
add edx, 2
cmp cx, bx
jne 0x43f815
sub edx, edi
sar edx, 1
push edx
push eax
push dword [ebp - 0x18]
call fcn.0045e135
add esp, 0xc
test eax, eax
je 0x43f8b9
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x43f84a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x43f85b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
test eax, eax
je 0x43f86c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x38]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push ebx
call esi
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 3
test eax, eax
je 0x43f88b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
test eax, eax
je 0x43f89c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor ebx, ebx
inc ebx
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x43f8af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x18]
call esi
jmp 0x440124
cmp dword [ebp - 0x18], 0
jne 0x43f8fb
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x43f8d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x43f8e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
test eax, eax
je 0x43f78d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x43f78d
push ebx
sub esp, 0xc
mov dword [ebp - 0xd8], 0x396c5141
mov ecx, esp
mov dword [ebp - 0xd4], 0x5855424c
lea eax, [ebp - 0x31]
mov dword [ebp - 0xd0], 0x70706e4d
lea edx, [ebp - 0x38]
mov dword [ebp - 0xcc], 0x2b68534b
push eax
push edx
lea edi, [ebp - 0xd8]
mov dword [ebp - 0xc8], 0x57306946
push edi
mov dword [ebp - 0xc4], 0x49776849
mov dword [ebp - 0xc0], 0x6a34684b
mov dword [ebp - 0xbc], 0x4d556847
mov dword [ebp - 0xb8], 0x52415743
mov dword [ebp - 0xb4], 0x6b415447
mov dword [ebp - 0xb0], 0x6663434a
mov dword [ebp - 0xac], 0x77517866
mov dword [ebp - 0xa8], 0x4d513359
mov dword [ebp - 0xa4], 0x7a516e4f
mov dword [ebp - 0xa0], 0x32515143
mov dword [ebp - 0x9c], 0x706b4443
mov dword [ebp - 0x98], 0x73635844
mov dword [ebp - 0x94], 0x44595248
mov dword [ebp - 0x90], 0x6d644150
mov dword [ebp - 0x8c], 0x62556748
mov dword [ebp - 0x88], 0x59674147
mov dword [ebp - 0x84], 0x374d4249
mov dword [ebp - 0x80], 0x794a7a49
mov dword [ebp - 0x7c], 0x4d45534c
mov dword [ebp - 0x78], 0x6e455442
mov dword [ebp - 0x74], 0x6b595744
mov dword [ebp - 0x70], 0x4c384142
mov dword [ebp - 0x6c], 0x756c6d42
mov dword [ebp - 0x68], 0x36597a62
mov dword [ebp - 0x64], 0x67313350
mov dword [ebp - 0x60], 0x61675843
mov dword [ebp - 0x5c], 0x5545514b
mov dword [ebp - 0x58], 0x7a387950
mov dword [ebp - 0x54], 0x7573434d
mov dword [ebp - 0x50], 0x2b675241
mov dword [ebp - 0x4c], 0x6c416d4b
mov dword [ebp - 0x48], 0x45555164
mov dword [ebp - 0x44], 0x44555441
mov dword [ebp - 0x40], 0x41344846
mov dword [ebp - 0x3c], 0x79424141
call fcn.0040a169
lea eax, [ebp - 0x1c8]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004103eb
mov edi, eax
push edi
call fcn.0040be23
pop ecx
push eax
push edi
lea ecx, [esi + 0x34]
call fcn.0040bd90
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0xd
call fcn.00455078
mov esi, dword [ebp - 0xec]
mov eax, dword [ebp - 0x1bc]
add eax, 0x30
push eax
lea ecx, [esi + 0x30]
call fcn.00423f23
mov eax, dword [0x4ad1c8]
mov edx, eax
lea edi, [edx + 2]
mov cx, word [edx]
add edx, 2
cmp cx, bx
jne 0x43facd
sub edx, edi
sar edx, 1
push edx
push eax
push dword [ebp - 0x18]
call fcn.0045e135
add esp, 0xc
mov dword [ebp - 0xe8], 0x42416743
neg eax
mov dword [ebp - 0xe4], 0x51494743
lea edx, [ebp - 0x38]
mov dword [ebp - 0xe0], 0x324d4147
sbb al, al
mov dword [ebp - 0xdc], 0x63514346
push ebx
sub esp, 0xc
mov dword [ebp - 0xd8], 0x66555146
inc al
mov dword [ebp - 0xd4], 0x31524349
mov byte [esi + 0x38], al
lea edi, [ebp - 0xe8]
mov ecx, esp
mov dword [ebp - 0xd0], 0x7a5a794b
lea eax, [ebp - 0x31]
mov dword [ebp - 0xcc], 0x5141434b
push eax
push edx
push edi
mov dword [ebp - 0xc8], 0x52635341
mov dword [ebp - 0xc4], 0x34675242
mov dword [ebp - 0xc0], 0x4445514f
mov dword [ebp - 0xbc], 0x37785465
mov dword [ebp - 0xb8], 0x6445485a
mov dword [ebp - 0xb4], 0x61517846
mov dword [ebp - 0xb0], 0x4a73424d
mov dword [ebp - 0xac], 0x2b4d6949
mov dword [ebp - 0xa8], 0x57496848
mov dword [ebp - 0xa4], 0x6a55684a
mov dword [ebp - 0xa0], 0x4573794a
mov dword [ebp - 0x9c], 0x6d496943
mov dword [ebp - 0x98], 0x69343350
mov dword [ebp - 0x94], 0x71597946
mov dword [ebp - 0x90], 0x77594446
mov dword [ebp - 0x8c], 0x394a5143
mov dword [ebp - 0x88], 0x4c635343
mov dword [ebp - 0x84], 0x4d515364
mov dword [ebp - 0x80], 0x6634444e
mov dword [ebp - 0x7c], 0x6c677750
mov dword [ebp - 0x78], 0x6e785141
mov dword [ebp - 0x74], 0x4f456e47
mov dword [ebp - 0x70], 0x2b397850
mov dword [ebp - 0x6c], 0x41734142
mov dword [ebp - 0x68], 0x62347946
mov dword [ebp - 0x64], 0x43306e4d
mov dword [ebp - 0x60], 0x774a4142
mov dword [ebp - 0x5c], 0x38774346
mov dword [ebp - 0x58], 0x4a517863
mov dword [ebp - 0x54], 0x694e7850
mov dword [ebp - 0x50], 0x46636a4d
mov dword [ebp - 0x4c], 0x35736e4b
mov dword [ebp - 0x48], 0x41676a44
mov dword [ebp - 0x44], 0x31457747
mov dword [ebp - 0x40], 0x41556a43
mov dword [ebp - 0x3c], 0x38424141
call fcn.0040a169
lea eax, [ebp - 0x1c8]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.004103eb
mov edi, eax
push edi
call fcn.0040be23
pop ecx
push eax
push edi
lea ecx, [esi + 0x2c]
call fcn.0040bd90
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0xd
call fcn.00455078
push 0xc
call fcn.0045977c
mov esi, eax
pop ecx
test esi, esi
je 0x43fcf3
mov edi, esi
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0xec]
mov dword [esi + 4], ebx
mov dword [esi], 0x494d7c
mov dword [esi + 8], eax
jmp 0x43fcf5
mov esi, ebx
call fcn.0044013c
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov esi, dword [ebp - 0x1cc]
lea ecx, [ebp - 0x1c]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x24]
test eax, eax
js 0x43f8bf
cmp dword [ebp - 0x1c], 0
je 0x43f8bf
mov eax, dword [ebp - 0x1bc]
lea ecx, [ebp - 0xf4]
mov eax, dword [eax + 0x24]
push dword [eax - 0xc]
push eax
call fcn.00426586
push dword [ebp - 0xf4]
lea ecx, [ebp - 0xf0]
call fcn.004243b2
lea eax, [ebp - 0x24]
mov dword [ebp - 0xcc], 0x61387747
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xc8], 0x57454142
mov ecx, esp
mov dword [ebp - 0xc4], 0x7a636e46
lea eax, [ebp - 0x31]
mov dword [ebp - 0xc0], 0x2b55484d
lea edx, [ebp - 0x3a]
mov dword [ebp - 0xbc], 0x7a5a7942
push eax
push edx
lea edi, [ebp - 0xcc]
mov dword [ebp - 0xb8], 0x76736841
push edi
mov dword [ebp - 0xb4], 0x5177584c
mov dword [ebp - 0xb0], 0x6e31334a
mov dword [ebp - 0xac], 0x42496948
mov dword [ebp - 0xa8], 0x6f4a4343
mov dword [ebp - 0xa4], 0x686f5343
mov dword [ebp - 0xa0], 0x58387a48
mov dword [ebp - 0x9c], 0x726b4148
mov dword [ebp - 0x98], 0x656f5345
mov dword [ebp - 0x94], 0x416b4164
mov dword [ebp - 0x90], 0x2f425444
mov dword [ebp - 0x8c], 0x574d7741
mov dword [ebp - 0x88], 0x6e38784c
mov dword [ebp - 0x84], 0x694a6844
mov dword [ebp - 0x80], 0x30734165
mov dword [ebp - 0x7c], 0x4a4d5349
mov dword [ebp - 0x78], 0x616f7846
mov dword [ebp - 0x74], 0x68516761
mov dword [ebp - 0x70], 0x69414164
mov dword [ebp - 0x6c], 0x2b776946
mov dword [ebp - 0x68], 0x5a77434d
mov dword [ebp - 0x64], 0x716b434b
mov dword [ebp - 0x60], 0x76306e44
mov dword [ebp - 0x5c], 0x6b49794a
mov dword [ebp - 0x58], 0x30737763
mov dword [ebp - 0x54], 0x7030444a
mov dword [ebp - 0x50], 0x72676d4c
mov dword [ebp - 0x4c], 0x4b55414d
mov dword [ebp - 0x48], 0x4e494142
mov dword [ebp - 0x44], 0x786c684b
mov dword [ebp - 0x40], 0x41414141
mov word [ebp - 0x3c], 0x7759
call fcn.0040a169
lea eax, [ebp - 0x1c8]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.004103eb
push eax
lea ecx, [ebp - 0xec]
call fcn.00420321
mov ecx, eax
push dword [ecx]
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 0x11
call dword [eax + 0x120]
push dword [ebp - 0xec]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
test eax, eax
sets bl
call edi
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0xd
call fcn.00455078
test bl, bl
je 0x43ff7f
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x43ff13
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x43ff24
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
test eax, eax
je 0x43ff35
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x38]
call edi
push dword [ebp - 0xf0]
call edi
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 3
test eax, eax
je 0x43ff53
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
test eax, eax
je 0x43ff64
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 1
test eax, eax
je 0x43ff75
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x18]
call edi
jmp 0x440122
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
push edx
push 0x494c58
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
js 0x43ff02
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0xf0]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
test eax, eax
jns 0x43ffea
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x43ffbd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x43ffce
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
test eax, eax
je 0x43ffdf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x38]
call edi
push esi
jmp 0x43ff40
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x2c]
push edx
mov ebx, 0x495010
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx]
test eax, eax
js 0x43ffac
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x28]
push edx
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx]
test eax, eax
js 0x43ffac
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x30]
push edx
push dword [ebp - 0x28]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x4c]
mov eax, dword [ebp - 0x30]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x440032
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x440043
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
test eax, eax
je 0x440054
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x38]
call edi
push esi
call edi
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 3
test eax, eax
je 0x44006d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
test eax, eax
je 0x44007e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
xor ebx, ebx
inc ebx
mov byte [ebp - 4], bl
test eax, eax
je 0x440091
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x18]
call edi
jmp 0x440124
xor ebx, ebx
mov ecx, dword [ebp - 0xf4]
add ecx, 0xfffffff0
call fcn.0040bc6b
mov eax, ebx
call fcn.0045a8ac
ret 4