Function at 0x401d56
Capabilities:
Contain obfuscated stackstrings
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44e8
push edi
lea edi, [ebp - 0x44e8]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x401edf
push eax
push edi
call fcn.0040338b
cmp eax, 1
jne 0x401d9f
mov dword [edi], 0x40378c
jmp 0x401dd0
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x401edd
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea ecx, [ecx + 4]
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x401edd
lea edx, [ebp - 0x4288]
push edx
lea edx, [ebp - 0x42d8]
push edx
lea edx, [ebp - 0x4328]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x401edd
lea ecx, [ebp - 0x4328]
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0x42d8]
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
jmp 0x401f1f
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x403028
mov dword [ebp - 0x3024], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea ecx, [ecx + 2]
push ecx
push eax
lea edx, [ebp - 0x4238]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x3020], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
cmp dword [esi + 0x270], 0x61746948
jne 0x402013
cmp dword [esi + 0x274], 0x20696863
jne 0x402013
cmp dword [esi + 0x278], 0x316e6547
jne 0x402013
cmp dword [esi + 0x27c], 0x53203226
jne 0x402013
cmp dword [esi + 0x280], 0x35323748
jne 0x402013
cmp dword [esi + 0x284], 0x342f3333
jne 0x402013
cmp dword [esi + 0x288], 0x30325b33
jne 0x402013
cmp dword [esi + 0x28c], 0x5d6b3834
jne 0x402013
cmp dword [esi + 0x290], 0x6c756628
jne 0x402013
cmp dword [esi + 0x294], 0x65652c6c
jne 0x402013
cmp dword [esi + 0x298], 0x6d6f7270
jne 0x402013
cmp dword [esi + 0x29c], 0x41432029
jne 0x402013
cmp word [esi + 0x2a0], 0x4e
je 0x402013
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402031
cmp eax, 0xb
je 0x402031
cmp eax, 0x14
je 0x402031
cmp eax, 0x15
jne 0x402240
mov dword [ebp - 0x8fa], 0
cmp dword [ebp - 0x3020], 0
jne 0x402240
push 0xa
push 1
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
jne 0x4020ad
push 0
push 0xa0d3323
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x3020], 1
jmp 0x402240
mov dword [ebp - 0x90a], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x906], eax
push dword [ebp - 0x90a]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
jne 0x40212a
push 0
push 0xa0d3423
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x3020], 1
jmp 0x402240
mov dword [ebp - 0x902], eax
cmp byte [eax + 3], 8
je 0x40218a
push 0
push 0xa0d3523
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x3020], 1
jmp 0x402234
mov ecx, dword [ebp - 0x906]
mov eax, dword [ecx + eax - 4]
mov dword [ebp - 0x8fe], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x8fa], eax
push dword [ebp - 0x8fe]
push eax
push dword [ebp - 0x906]
push dword [ebp - 0x902]
call dword [ebx + 0x4c]
test eax, eax
jne 0x402214
push 0
push 0xa0d3623
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x3020], 1
jmp 0x402234
mov eax, dword [ebp - 0x8fe]
mov dword [ebp - 0x8f2], 0
mov dword [ebp - 0x8ee], eax
mov dword [ebp - 0x8ea], 0xfff90000
push dword [ebp - 0x902]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402254
cmp eax, 0xb
jne 0x402388
cmp dword [ebp - 0x3020], 0
jne 0x402388
push 0x320
push 0
lea edx, [ebp - 0x3004]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0x2ce4], 0x21
mov dword [ebp - 0x300c], 0
mov ecx, dword [ebp - 0x300c]
cmp ecx, dword [ebp - 0x3010]
jae 0x402388
mov eax, dword [ebp - 0x3014]
lea eax, [eax + ecx]
mov dword [ebp - 0x2ce2], eax
mov edx, dword [ebp - 0x3010]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x4022d9
cmp ecx, 0xf0
jae 0x4022d9
mov eax, dword [ebp - 0x3018]
add eax, dword [ebp - 0x300c]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0x2cde], al
inc ecx
jmp 0x4022b4
mov dword [ebp - 0x3008], ecx
add ecx, 4
mov byte [ebp - 0x2ce3], cl
push 0xfa
lea edx, [ebp - 0x413e]
push edx
push 0xf6
lea edx, [ebp - 0x2ce4]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x402358
push 0
push 0xa0d3723
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x3020], 1
jmp 0x402388
mov eax, dword [ebp - 0x3008]
mov ecx, dword [ebp - 0x300c]
add dword [ebp - 0x300c], eax
push eax
lea edx, [ebp - 0x413e]
push edx
lea edx, [ebp + ecx - 0x3004]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x402289
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4023b5
cmp eax, 0xa
je 0x4023b5
cmp eax, 0xb
je 0x4023b5
cmp eax, 0x17
je 0x4023b5
cmp eax, 0x18
je 0x4023b5
cmp eax, 0x14
je 0x4023b5
cmp eax, 0x15
jne 0x403015
cmp dword [ebp - 0x3020], 0
jne 0x403015
mov byte [esi + 0x6c], 0
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4023f4
mov dword [ebp - 0x3020], 1
jmp 0x403015
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402421
mov dword [ebp - 0x3020], 1
jmp 0x402fff
mov dword [ebp - 0x2bea], 0xe0070000
mov dword [ebp - 0x2be6], 0xe8070000
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 6], esp
mov eax, dword [ebp - 0x2be6]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x2bea]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 6]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40249c
mov dword [ebp - 0x3020], 1
jmp 0x402fff
mov dword [ebp - 0xc6], 0x3334
cmp dword [esi + 0x270], 0x61746948
jne 0x402548
cmp dword [esi + 0x274], 0x20696863
jne 0x402548
cmp dword [esi + 0x278], 0x316e6547
jne 0x402548
cmp dword [esi + 0x27c], 0x53203226
jne 0x402548
cmp dword [esi + 0x280], 0x35323748
jne 0x402548
cmp dword [esi + 0x284], 0x342f3333
jne 0x402548
cmp dword [esi + 0x288], 0x30325b33
jne 0x402548
cmp dword [esi + 0x28c], 0x5d6b3834
jne 0x402548
cmp dword [esi + 0x290], 0x6c756628
jne 0x402548
cmp dword [esi + 0x294], 0x65652c6c
jne 0x402548
cmp dword [esi + 0x298], 0x6d6f7270
jne 0x402548
cmp dword [esi + 0x29c], 0x41432029
jne 0x402548
cmp word [esi + 0x2a0], 0x4e
je 0x402548
mov dword [ebp - 0x86], 0x7373694e
mov dword [ebp - 0x82], 0x6e61
cmp dword [esi + 0x270], 0x61746948
jne 0x4025fe
cmp dword [esi + 0x274], 0x20696863
jne 0x4025fe
cmp dword [esi + 0x278], 0x316e6547
jne 0x4025fe
cmp dword [esi + 0x27c], 0x53203226
jne 0x4025fe
cmp dword [esi + 0x280], 0x35323748
jne 0x4025fe
cmp dword [esi + 0x284], 0x342f3333
jne 0x4025fe
cmp dword [esi + 0x288], 0x30325b33
jne 0x4025fe
cmp dword [esi + 0x28c], 0x5d6b3834
jne 0x4025fe
cmp dword [esi + 0x290], 0x6c756628
jne 0x4025fe
cmp dword [esi + 0x294], 0x65652c6c
jne 0x4025fe
cmp dword [esi + 0x298], 0x6d6f7270
jne 0x4025fe
cmp dword [esi + 0x29c], 0x41432029
jne 0x4025fe
cmp word [esi + 0x2a0], 0x4e
je 0x4025fe
mov dword [ebp - 0x46], 0x61746948
mov dword [ebp - 0x42], 0x5f696863
mov dword [ebp - 0x3e], 0x326e6547
mov dword [ebp - 0x3a], 0x3748535f
mov dword [ebp - 0x36], 0x33333532
mov dword [ebp - 0x32], 0x33345f
mov byte [ebp - 0xb8c], 0
mov byte [ebp - 0xb4c], 0
mov byte [ebp - 0xb0c], 0
mov byte [ebp - 0xacc], 0
mov byte [ebp - 0xa8c], 0
mov byte [ebp - 0xa4c], 0
mov dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x2bea]
mov dword [ebp - 0x2be2], eax
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402690
cmp eax, 0xb
je 0x402690
cmp eax, 0xe
je 0x402690
cmp eax, 0x1a
je 0x402690
cmp eax, 0x14
je 0x402690
cmp eax, 0x15
jne 0x40275c
cmp dword [ebp - 0x3020], 0
jne 0x40275c
mov dword [ebp - 0x2bde], 0xc010
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x4026d5
cmp eax, 0xffffffff
jne 0x4026e1
mov dword [ebp - 0x3020], 1
jmp 0x40275c
cmp byte [ebp - 0x1bd8], 0x50
je 0x40275c
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x1bdc]
cmp eax, 0xffffffff
jne 0x40273a
xor eax, eax
jmp 0x402744
cmp eax, 0x20
jbe 0x402744
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.0040322f
mov dword [ebp - 0x3020], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40277a
cmp eax, 0xb
je 0x40277a
cmp eax, 0x14
je 0x40277a
cmp eax, 0x15
jne 0x4028c3
cmp dword [ebp - 0x3020], 0
jne 0x4027e5
mov dword [ebp - 0x2bde], 0xf121
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x4027bb
cmp eax, 0xffffffff
jne 0x4027c7
mov dword [ebp - 0x3020], 1
jmp 0x4027e5
cmp byte [ebp - 0x1bd8], 0x61
jne 0x4027e5
movzx ecx, byte [ebp + eax - 0x1bdd]
mov ch, byte [ebp + eax - 0x1bde]
mov dword [ebp - 0xa08], ecx
cmp dword [ebp - 0x3020], 0
jne 0x402854
mov dword [ebp - 0x2bde], 0xfe21
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402826
cmp eax, 0xffffffff
jne 0x402832
mov dword [ebp - 0x3020], 1
jmp 0x402854
cmp byte [ebp - 0x1bd8], 0x61
jne 0x402854
push 0x18
lea edx, [ebp - 0x1bd6]
push edx
lea edx, [ebp - 0xbbc]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [ebp - 0x3020], 0
jne 0x4028c3
mov dword [ebp - 0x2bde], 0xff21
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402895
cmp eax, 0xffffffff
jne 0x4028a1
mov dword [ebp - 0x3020], 1
jmp 0x4028c3
cmp byte [ebp - 0x1bd8], 0x61
jne 0x4028c3
push 0x18
lea edx, [ebp - 0x1bd6]
push edx
lea edx, [ebp - 0xba4]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4028dc
cmp eax, 0xa
je 0x4028dc
cmp eax, 0x1a
jne 0x402a85
cmp dword [ebp - 0x3020], 0
jne 0x40297b
mov dword [ebp - 0x2bde], 0x1021
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402921
cmp eax, 0xffffffff
jne 0x40292d
mov dword [ebp - 0x3020], 1
jmp 0x40297b
cmp byte [ebp - 0x1bd8], 0x61
jne 0x40297b
sub eax, 6
xor ecx, ecx
cmp ecx, 6
jae 0x402973
cmp ecx, eax
jae 0x402973
cmp byte [ebp + ecx - 0x1bd6], 0
je 0x402973
cmp byte [ebp + ecx - 0x1bd6], 0x20
je 0x402973
cmp byte [ebp + ecx - 0x1bd6], 0xff
je 0x402973
mov dl, byte [ebp + ecx - 0x1bd6]
mov byte [ebp + ecx - 0xb8c], dl
inc ecx
jmp 0x40293b
mov byte [ebp + ecx - 0xb8c], 0
cmp dword [ebp - 0x3020], 0
jne 0x402a85
cmp byte [ebp - 0xb8c], 0
je 0x402a85
cmp byte [ebp - 0xb8c], 0x31
jne 0x402a33
lea ecx, [ebp - 0xb8c]
push 0xa
push 0xd732520
push 0x3a657261
push 0x7774666f
push 0x53202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0xb8b]
push 0xa0d
push 0x73252d30
push 0x31373332
push 0x203a7265
push 0x626d756e
push 0x20747261
push 0x50202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
jmp 0x402a74
lea ecx, [ebp - 0xb8c]
push 0xa
push 0xd732520
push 0x3a657261
push 0x7774666f
push 0x53202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0xb8c]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402aa8
cmp eax, 0xa
je 0x402aa8
cmp eax, 0xb
je 0x402aa8
cmp eax, 0x14
je 0x402aa8
cmp eax, 0x15
jne 0x402bf4
cmp dword [ebp - 0x3020], 0
jne 0x402b8d
mov dword [ebp - 0x2bde], 0xf021
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402aed
cmp eax, 0xffffffff
jne 0x402afc
mov dword [ebp - 0x3020], 1
jmp 0x402b8d
cmp byte [ebp - 0x1bd8], 0x61
jne 0x402b8d
sub eax, 6
mov dword [ebp - 0xa04], eax
xor ecx, ecx
xor edx, edx
cmp ecx, 0x18
jae 0x402b85
cmp ecx, dword [ebp - 0xa04]
jae 0x402b85
cmp byte [ebp + ecx - 0x1bd6], 0
je 0x402b85
cmp byte [ebp + ecx - 0x1bd6], 0x20
je 0x402b85
cmp byte [ebp + ecx - 0x1bd6], 0xff
je 0x402b85
mov al, byte [ebp + ecx - 0x1bd6]
cmp al, 0x2f
jbe 0x402b50
cmp al, 0x3a
jb 0x402b60
cmp al, 0x60
jbe 0x402b58
cmp al, 0x7b
jb 0x402b60
cmp al, 0x40
jbe 0x402b6a
cmp al, 0x5b
jae 0x402b6a
mov byte [ebp + edx - 0xb4c], al
inc edx
jmp 0x402b82
cmp edx, 0
je 0x402b82
cmp byte [ebp + edx - 0xb4d], 0x20
je 0x402b82
mov byte [ebp + edx - 0xb4c], 0x20
inc edx
inc ecx
jmp 0x402b16
mov byte [ebp + edx - 0xb4c], 0
cmp dword [ebp - 0x3020], 0
jne 0x402bf4
cmp byte [ebp - 0xb4c], 0
je 0x402bf4
push 5
lea edx, [ebp - 0xb4c]
push edx
lea edx, [ebp - 0xa4c]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov byte [ebp - 0xa47], 0
lea edx, [ebp - 0xb44]
push edx
lea edx, [ebp - 0xa8c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
lea edx, [ebp - 0xa8c]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402c08
cmp eax, 0xa
jne 0x402fb5
cmp dword [ebp - 0x3020], 0
jne 0x402c63
cmp byte [ebp - 0xa4c], 0
je 0x402c63
lea ecx, [ebp - 0xa4c]
push 0xa0d
push 0x7325203a
push 0x65726177
push 0x74666f73
push 0x20657361
push 0x42202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x3020], 0
jne 0x402cbe
cmp byte [ebp - 0xa8c], 0
je 0x402cbe
lea ecx, [ebp - 0xa8c]
push 0xa0d
push 0x7325203a
push 0x65726177
push 0x64726168
push 0x20657361
push 0x42202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x3020], 0
jne 0x402e09
push 0x8321
push 0xe0070000
lea eax, [ebp - 0x1bdc]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402cfd
cmp eax, 0xffffffff
jne 0x402d0c
mov dword [ebp - 0x3020], 1
jmp 0x402e09
cmp byte [ebp - 0x1bd8], 0x61
jne 0x402e09
movzx ecx, byte [ebp - 0x1bd1]
push 0xa0d
push 0x58322e25
push 0x203a4449
push 0x20676169
push 0x44202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
movzx eax, byte [ebp - 0x1bd0]
mov dword [ebp - 0xacc], eax
lea ecx, [ebp - 0xacc]
movzx eax, byte [ebp - 0x1bce]
mov ah, byte [ebp - 0x1bcf]
push 0xa
push 0xd58342e
push 0x25732520
push 0x3a726569
push 0x6c707075
push 0x53202445
push 0x4d495424
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
movzx eax, byte [ebp - 0x1bbf]
push 0xa0d58
push 0x322e2520
push 0x3a726572
push 0x75746361
push 0x66756e61
push 0x4d202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x3020], 0
jne 0x402ea0
push 0xa021
push 0xe0070000
lea eax, [ebp - 0x1bdc]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402e48
cmp eax, 0xffffffff
jne 0x402e54
mov dword [ebp - 0x3020], 1
jmp 0x402ea0
cmp byte [ebp - 0x1bd8], 0x61
jne 0x402ea0
mov eax, dword [ebp - 0x1bd6]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x3020], 0
jne 0x402f35
mov dword [ebp - 0x2bde], 0x8121
lea edx, [ebp - 0x2be2]
push edx
push 6
lea edx, [ebp - 0x1bdc]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.0040304e
test eax, eax
je 0x402ee5
cmp eax, 0xffffffff
jne 0x402ef1
mov dword [ebp - 0x3020], 1
jmp 0x402f35
cmp byte [ebp - 0x1bd8], 0x61
jne 0x402f35
sub eax, 6
xor ecx, ecx
cmp ecx, 0x11
jae 0x402f2d
cmp ecx, eax
jae 0x402f2d
cmp byte [ebp + ecx - 0x1bd6], 0
je 0x402f2d
cmp byte [ebp + ecx - 0x1bd6], 0xff
je 0x402f2d
mov dl, byte [ebp + ecx - 0x1bd6]
mov byte [ebp + ecx - 0xb0c], dl
inc ecx
jmp 0x402eff
mov byte [ebp + ecx - 0xb0c], 0
cmp dword [ebp - 0x3020], 0
jne 0x402fb5
cmp byte [ebp - 0xb0c], 0
je 0x402fb5
lea ecx, [ebp - 0xb0c]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x442c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x442c]
push edx
call dword [ebx + 0x30]
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
test eax, eax
je 0x402fa4
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
lea edx, [ebp - 0xb0c]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x402fef
cmp dword [ebp - 0x3020], 0
jne 0x402fef
push 1
push 0
push 0
lea edx, [esi + 0x6c]
push edx
lea edx, [ebp - 0x46]
push edx
lea edx, [ebp - 0x86]
push edx
lea edx, [ebp - 0xc6]
push edx
lea edx, [ebp - 0xb8c]
push edx
call dword [ebx + 0x70]
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x403020
push 0
push 0
push 3
call dword [edi]
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8