Function at 0x4027b3
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ef4
push edi
lea edi, [ebp - 0x2ef4]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x40294b
push eax
push edi
call fcn.0040384f
cmp eax, 1
jne 0x4027fc
mov dword [edi], 0x403c50
jmp 0x40282d
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x402949
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x402949
lea edx, [ebp - 0x2c94]
push edx
lea edx, [ebp - 0x2ce4]
push edx
lea edx, [ebp - 0x2d34]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x402949
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2d34]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
mov dword [ebp - 0x1c18], esp
lea edx, [ebp - 0x2ce4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x40298b
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x4034d9
mov dword [ebp - 0x1a18], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x1c14]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [esi + 0x270], 0x74696d24
jne 0x403043
cmp dword [esi + 0x274], 0x68737573
jne 0x403043
cmp dword [esi + 0x278], 0x35353037
jne 0x403043
cmp dword [esi + 0x27c], 0x74694d24
jne 0x403043
cmp dword [esi + 0x280], 0x53207573
jne 0x403043
cmp dword [esi + 0x284], 0x35303748
jne 0x403043
cmp dword [esi + 0x288], 0x31355b35
jne 0x403043
cmp dword [esi + 0x28c], 0x205d6b32
jne 0x403043
cmp dword [esi + 0x290], 0x4e4143
jne 0x403043
mov dword [ebp - 0x2c44], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402a7c
cmp eax, 0xf
je 0x402a7c
cmp eax, 0xa
je 0x402a7c
cmp eax, 0xb
je 0x402a7c
cmp eax, 0x17
je 0x402a7c
cmp eax, 0x18
jne 0x40303e
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x402aaa
mov dword [ebp - 0x2c44], 1
jmp 0x40303e
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402ad7
mov dword [ebp - 0x2c44], 1
jmp 0x403028
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x402b2d
mov dword [ebp - 0x2c44], 1
jmp 0x403028
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402b41
cmp eax, 0xa
jne 0x403018
push 0x409
push 0xe0070000
lea eax, [ebp - 0x2c38]
push esp
push 6
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.00403505
test eax, eax
je 0x402b73
cmp eax, 0xffffffff
jne 0x402b82
mov dword [ebp - 0x2c44], 1
jmp 0x402c78
cmp byte [ebp - 0x2c34], 0x49
je 0x402bfd
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c38]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402bdd
xor eax, eax
jmp 0x402be7
cmp eax, 0x20
jbe 0x402be7
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004036f3
mov dword [ebp - 0x2c44], 1
jmp 0x402c78
lea edx, [eax - 7]
xor ecx, ecx
cmp ecx, edx
jae 0x402c20
cmp ecx, 0x3f
jae 0x402c20
mov al, byte [ebp + ecx - 0x2c31]
cmp al, 0
je 0x402c20
mov byte [ebp + ecx - 0x1910], al
inc ecx
jmp 0x402c02
mov byte [ebp + ecx - 0x1910], 0
lea eax, [ebp - 0x1910]
push 0xa0d
push 0x7325203a
push 0x244c4143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0x1910]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
cmp dword [ebp - 0x2c44], 0
jne 0x402db0
push 0x11e622
push 0xe0070000
lea eax, [ebp - 0x2c38]
push esp
push 7
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.00403505
test eax, eax
je 0x402cb7
cmp eax, 0xffffffff
jne 0x402cc6
mov dword [ebp - 0x2c44], 1
jmp 0x402db0
cmp byte [ebp - 0x2c34], 0x62
je 0x402d41
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c38]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402d21
xor eax, eax
jmp 0x402d2b
cmp eax, 0x20
jbe 0x402d2b
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004036f3
mov dword [ebp - 0x2c44], 1
jmp 0x402db0
lea edx, [eax - 7]
xor ecx, ecx
cmp ecx, edx
jae 0x402d64
cmp ecx, 0x3f
jae 0x402d64
mov al, byte [ebp + ecx - 0x2c31]
cmp al, 0
je 0x402d64
mov byte [ebp + ecx - 0x18d0], al
inc ecx
jmp 0x402d46
mov byte [ebp + ecx - 0x18d0], 0
lea eax, [ebp - 0x18d0]
push 0xa0d73
push 0x25203a24
push 0x454c4946
push 0x5f4c4143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c44], 0
jne 0x402ec1
push 0x609
push 0xe0070000
lea eax, [ebp - 0x2c38]
push esp
push 6
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.00403505
test eax, eax
je 0x402def
cmp eax, 0xffffffff
jne 0x402dfe
mov dword [ebp - 0x2c44], 1
jmp 0x402ec1
cmp byte [ebp - 0x2c34], 0x49
jne 0x402e0c
cmp eax, 0xb
je 0x402e7e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c38]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402e5e
xor eax, eax
jmp 0x402e68
cmp eax, 0x20
jbe 0x402e68
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004036f3
mov dword [ebp - 0x2c44], 1
jmp 0x402ec1
mov eax, dword [ebp - 0x2c31]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x2c44], 0
jne 0x403018
push 0x209
push 0xe0070000
lea eax, [ebp - 0x2c38]
push esp
push 6
push eax
push 0x1f4
push 0x6d6
push 0x40
push 6
push 0
call fcn.00403505
test eax, eax
je 0x402f00
cmp eax, 0xffffffff
jne 0x402f0f
mov dword [ebp - 0x2c44], 1
jmp 0x403018
cmp byte [ebp - 0x2c34], 0x49
je 0x402f8d
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2c38]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402f6a
xor eax, eax
jmp 0x402f74
cmp eax, 0x20
jbe 0x402f74
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004036f3
mov dword [ebp - 0x2c44], 1
jmp 0x403018
lea edx, [eax - 7]
xor ecx, ecx
cmp ecx, edx
jae 0x402fb0
cmp ecx, 0x3f
jae 0x402fb0
mov al, byte [ebp + ecx - 0x2c31]
cmp al, 0
je 0x402fb0
mov byte [ebp + ecx - 0x1890], al
inc ecx
jmp 0x402f92
mov byte [ebp + ecx - 0x1890], 0
lea eax, [ebp - 0x1890]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2e38]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2e38]
push edx
call dword [ebx + 0x30]
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
lea edx, [ebp - 0x1890]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
jmp 0x4034d1
lea eax, [ebp - 0x1b1a]
movzx ecx, byte [ebp - 0x1c13]
lea ecx, [ecx + 2]
lea edx, [ebp - 0x1c14]
push 0xfa
push eax
push ecx
push edx
call dword [ebx + 0x40]
mov dword [ebp - 0x1a20], eax
mov dword [ebp - 0x1a1c], 0
cmp dword [ebp - 0x1a18], 0xffffffff
je 0x4034d1
mov eax, dword [ebp - 0x1a1c]
cmp eax, dword [ebp - 0x1a20]
jae 0x4034cc
push 0xc
mov dword [ebp - 0x17d0], esp
push 2
push dword [ebp - 0x17d0]
lea edx, [ebp - 0x1c14]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
add esp, 4
mov eax, dword [ebp - 0x1a1c]
cmp byte [ebp + eax - 0x1b1a], 1
jne 0x4030df
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 1
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 2
jne 0x403102
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 2
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 3
jne 0x40311f
push 0
push 0
push 3
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 4
jne 0x403142
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 4
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 5
jne 0x403165
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 5
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 6
jne 0x403188
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 6
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 7
jne 0x4031ab
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 7
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 8
jne 0x4031ce
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 8
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 9
jne 0x4031f1
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 9
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xa
jne 0x403214
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 0xa
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xb
jne 0x403237
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 0xb
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xc
jne 0x40325a
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 0xc
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xd
jne 0x40328d
lea edx, [ebp - 0x1c12]
push edx
lea edx, [ebp + eax - 0x1b18]
push edx
push 0xd
call dword [edi]
mov dword [ebp - 0x1a18], eax
cmp eax, 0xffffffff
je 0x403288
mov byte [ebp - 0x1c13], al
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xe
jne 0x4032b0
push 0
lea edx, [ebp + eax - 0x1b18]
push edx
push 0xe
call dword [edi]
mov dword [ebp - 0x1a18], eax
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xf
jne 0x4032e3
lea edx, [ebp - 0x1c12]
push edx
lea edx, [ebp + eax - 0x1b18]
push edx
push 0xf
call dword [edi]
mov dword [ebp - 0x1a18], eax
cmp eax, 0xffffffff
je 0x4032de
mov byte [ebp - 0x1c13], al
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x10
jne 0x4032fc
mov dword [ebp - 0x1a18], 0xffffffff
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x11
jne 0x40331a
movzx eax, word [ebp + eax - 0x1b18]
push eax
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x12
jne 0x403365
push eax
push 0x202445
push 0x4d495424
push esp
lea edx, [ebp - 0x1a14]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 8
pop eax
lea edx, [ebp + eax - 0x1b18]
push edx
lea edx, [ebp - 0x1a14]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
lea edx, [ebp - 0x1a14]
push edx
call dword [ebx + 0x30]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x13
jne 0x403393
movzx eax, word [ebp + eax - 0x1b18]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x14
jne 0x4033be
movzx eax, word [ebp + eax - 0x1b18]
push 0
push eax
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x15
jne 0x4033e9
movzx eax, word [ebp + eax - 0x1b18]
push 0
push eax
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x16
jne 0x40340d
push 0
push 0
push 0x405
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x17
jne 0x40342e
lea edx, [ebp + eax - 0x1b18]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x35
jne 0x40343a
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x34
jne 0x403446
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0xcd
jne 0x403452
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x33
jne 0x40345e
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x32
jne 0x40346a
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x95
jne 0x403476
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x1b
jne 0x403482
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x18
jne 0x40348e
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x19
jne 0x40349a
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x40
jne 0x4034a6
jmp 0x4034b0
cmp byte [ebp + eax - 0x1b1a], 0x3f
jne 0x4034b0
mov eax, dword [ebp - 0x1a1c]
movzx eax, byte [ebp + eax - 0x1b19]
add eax, 2
add dword [ebp - 0x1a1c], eax
jmp 0x403074
jmp 0x403043
push 0
push 0
push 3
call dword [edi]
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
mov eax, dword [ebp - 0x2c44]
leave
ret 8