Function at 0x4037c0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
sub esp, 0x214
mov eax, dword [0x446588]
xor eax, esp
mov dword [esp + 0x210], eax
mov eax, dword [esp + 0x228]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x230]
xor ebx, ebx
push edi
mov edi, dword [esp + 0x230]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ebx
xor ecx, ecx
lea esp, [esp]
mov eax, ecx
cdq
idiv esi
mov byte [esp + ecx + 0x20], cl
add ecx, 1
cmp ecx, 0x100
mov dl, byte [edx + edi]
mov byte [esp + ecx + 0x11f], dl
jl 0x403800
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [esp + 0x14], ebx
jmp 0x403840
mov eax, dword [esp + 0x14]
mov bl, byte [esp + eax + 0x20]
movzx eax, byte [esp + eax + 0x120]
add eax, dword [esp + 0x10]
movzx ecx, bl
add ecx, eax
and ecx, 0x800000ff
jns 0x403869
dec ecx
or ecx, 0xffffff00
inc ecx
push 0
push 0
push 0x2fd
push 0
mov dword [esp + 0x20], ecx
call edi
call ebp
test eax, eax
je 0x403899
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x4038c2
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4038c2
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4038ee
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403917
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403917
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403943
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x40396c
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40396c
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403998
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x4039c1
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4039c1
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4039ed
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403a16
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403a16
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
mov edx, dword [esp + 0x10]
mov al, byte [esp + edx + 0x20]
push 0
push 0
push 0x2fd
push 0
mov byte [esp + 0x2b], al
call edi
call ebp
test eax, eax
je 0x403a4e
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403a77
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403a77
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403aa3
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403acc
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403acc
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403af8
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403b21
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403b21
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403b4d
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403b76
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403b76
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403ba2
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403bcb
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403bcb
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403bf7
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403c20
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403c20
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403c4c
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403c75
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403c75
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403ca1
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403cca
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403cca
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403cf6
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403d1f
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403d1f
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403d4b
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403d74
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403d74
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403da0
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403dc9
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403dc9
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403df5
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403e1e
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403e1e
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403e4a
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403e73
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403e73
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403e9f
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403ec8
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403ec8
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403ef4
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403f1d
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403f1d
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403f49
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403f72
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403f72
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403f9e
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x403fc7
push 0
push 0
push 0x312
push 0
call edi
jmp 0x403fc7
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x403ff3
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x40401c
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40401c
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404048
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x404071
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404071
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40409d
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x4040c6
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4040c6
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4040f2
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x40411b
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40411b
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404147
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x404170
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404170
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40419c
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x4041c5
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4041c5
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4041f1
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x40421a
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40421a
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404246
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x40426f
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40426f
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40429b
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x4042c4
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4042c4
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4042f0
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x404319
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404319
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404345
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x40436e
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40436e
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40439a
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x4043c3
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4043c3
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4043ef
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x404418
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404418
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
mov ecx, dword [esp + 0x10]
push 0
push 0
push 0x2fd
push 0
mov byte [esp + ecx + 0x30], bl
call edi
call ebp
test eax, eax
je 0x40444e
mov ebx, dword [sym.imp.USER32.dll_InSendMessage]
call ebx
test eax, eax
je 0x40447d
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40447d
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
mov ebx, dword [sym.imp.USER32.dll_InSendMessage]
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4044a5
call ebx
test eax, eax
je 0x4044ce
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4044ce
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4044f6
call ebx
test eax, eax
je 0x40451f
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40451f
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404547
call ebx
test eax, eax
je 0x404570
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404570
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404598
call ebx
test eax, eax
je 0x4045c1
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4045c1
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4045e9
call ebx
test eax, eax
je 0x404612
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404612
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40463a
call ebx
test eax, eax
je 0x404663
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404663
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40468b
call ebx
test eax, eax
je 0x4046b4
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4046b4
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4046dc
call ebx
test eax, eax
je 0x404705
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404705
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40472d
call ebx
test eax, eax
je 0x404756
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404756
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x40477e
call ebx
test eax, eax
je 0x4047a7
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4047a7
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4047cf
call ebx
test eax, eax
je 0x4047f8
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4047f8
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404820
call ebx
test eax, eax
je 0x404849
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404849
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404871
call ebx
test eax, eax
je 0x40489a
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40489a
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4048c2
call ebx
test eax, eax
je 0x4048eb
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4048eb
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404913
call ebx
test eax, eax
je 0x40493c
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40493c
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404964
call ebx
test eax, eax
je 0x40498d
push 0
push 0
push 0x312
push 0
call edi
jmp 0x40498d
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x4049b5
call ebx
test eax, eax
je 0x4049de
push 0
push 0
push 0x312
push 0
call edi
jmp 0x4049de
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404a06
call ebx
test eax, eax
je 0x404a2f
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404a2f
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
push 0
push 0
push 0x2fd
push 0
call edi
call ebp
test eax, eax
je 0x404a57
call ebx
test eax, eax
je 0x404a80
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404a80
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
mov eax, dword [esp + 0x14]
mov dl, byte [esp + 0x1b]
mov byte [esp + eax + 0x20], dl
add eax, 1
cmp eax, 0x100
mov dword [esp + 0x14], eax
jl 0x403840
mov ecx, dword [esp + 0x22c]
xor ebp, ebp
test ecx, ecx
jle 0x404b98
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x228]
sub eax, ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x14]
add eax, 1
and eax, 0x800000ff
jns 0x404ad9
dec eax
or eax, 0xffffff00
inc eax
movzx ecx, byte [esp + eax + 0x20]
add ebp, ecx
and ebp, 0x800000ff
mov dword [esp + 0x14], eax
jns 0x404af4
dec ebp
or ebp, 0xffffff00
inc ebp
push 0
push 0
push 0x2fd
push 0
call edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x404b24
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x404b4d
push 0
push 0
push 0x312
push 0
call edi
jmp 0x404b4d
push 0
push 0
push 0
push 0
push 0x43
push 0xcd
push 0x2fd
push 0x41
push 0x800000
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push str.dSIhr4oEqS4M9lEdmo1puOPhqnDBR6L
push 0
call esi
mov edx, dword [esp + 0x14]
mov cl, byte [esp + edx + 0x20]
mov al, byte [esp + ebp + 0x20]
mov byte [esp + ebp + 0x20], cl
mov byte [esp + edx + 0x20], al
movzx ecx, byte [esp + ebp + 0x20]
movzx edx, al
add ecx, edx
and ecx, 0x800000ff
jns 0x404b7b
dec ecx
or ecx, 0xffffff00
inc ecx
movzx eax, byte [esp + ecx + 0x20]
mov ecx, dword [esp + 0x1c]
xor al, byte [ecx + ebx]
add ebx, 1
sub dword [esp + 0x10], 1
mov byte [ebx - 1], al
jne 0x404ac4
mov ecx, dword [esp + 0x220]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00421566
add esp, 0x214
ret