Function at 0x403bd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4408cb
push eax
mov dword fs:[0], esp
sub esp, 0x930
push ebx
mov dword [esp + 0x18], 0x24c5b5a6
mov dword [esp + 0x1c], 0x3e237ecf
mov dword [esp + 0x14], 0x5e7ef4b0
mov dword [esp + 0xc8], 0x3642ed9b
mov dword [esp + 0x70], 0x91eaacd
mov dword [esp + 0xa4], 0x2980406d
mov dword [esp + 0xd0], 0x6c7315ce
mov dword [esp + 0x6c], 0x3ed00cd1
mov dword [esp + 0x48], 0x65f149a6
mov dword [esp + 0xc0], 0x4d57fb55
mov dword [esp + 0x94], 0x621ae19e
mov dword [esp + 0xc4], 0x10ced9ed
mov dword [esp + 0x64], 0x3e0a7210
mov dword [esp + 0xb0], 0x47a23e49
mov dword [esp + 0x30], 0x66a01c00
mov dword [esp + 0x5c], 0x4a633869
mov dword [esp + 0x10], 0x3ad9e1c
mov dword [esp + 0x90], 0xa0f0c6b
mov dword [esp + 0xa8], 0x759272f5
mov dword [esp + 0x8c], 0x32116240
mov dword [esp + 0x68], 0x1602dea0
mov dword [esp + 0x84], 0x4477d9f1
mov dword [esp + 0x7c], 0xf00c1c4
mov dword [esp + 0x24], 0x5804cd5f
mov dword [esp + 0x88], 0x58ed8400
mov dword [esp + 0x50], 0x118c44bc
mov dword [esp + 0x28], 0x55b1a1e
mov dword [esp + 0x60], 0x6e6ca6e7
mov dword [esp + 0x54], 0x844aad8
mov dword [esp + 0xd4], 0x5bbfcdcc
mov dword [esp + 0xbc], 0x2c1073de
mov dword [esp + 0x40], 0x6d5a0b3b
mov dword [esp + 0x3c], 0x264c448d
mov dword [esp + 0xb8], 0xcb5637c
mov dword [esp + 0x38], 0x20a87340
mov dword [esp + 0x98], 0x6b788cc4
mov dword [esp + 0x34], 0x755c16aa
mov dword [esp + 0x78], 0x2e0acca8
mov dword [esp + 0xcc], 0x53e5b043
mov dword [esp + 0x4c], 0x5234dc02
mov dword [esp + 0xb4], 0x68745c17
mov dword [esp + 0x20], 0x24fe4923
mov dword [esp + 0x44], 0x462e2177
mov dword [esp + 0xac], 0x3a7a9b21
mov dword [esp + 0x80], 0x4d019069
mov dword [esp + 0x74], 0x1ee3e124
mov dword [esp + 0xa0], 0x5971f6f8
mov dword [esp + 0x58], 0x19984c59
mov dword [esp + 0x9c], 0x37a2c360
mov dword [esp + 0x2c], 0x648b1b8e
mov eax, 0x1508a69e
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
sub dword [esp + 0x18], 0x257471e6
mov eax, 0x618dd548
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
add dword [esp + 0x18], 0x76182177
sub dword [esp + 0x18], 0x7b091108
sub dword [esp + 0x18], 0x724ee300
add dword [esp + 0x1c], 0x268cfa73
add dword [esp + 0x1c], 0x40589c7d
mov eax, 0x27dada6b
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, 0x3f28273
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
sub dword [esp + 0x1c], 0x7df3e6c1
add dword [esp + 0x1c], 0x58c6d889
sub dword [esp + 0x1c], 0x5e431482
add dword [esp + 0x18], 0x213e8d33
add dword [esp + 0x18], 0x57a6cdb9
add dword [esp + 0xa4], 0x12224475
mov eax, 0x65d32bde
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, 0x52538137
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x55a2ddc4
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, 0x4bfadf86
mul dword [esp + 0xc0]
mov eax, dword [esp + 0xc0]
mov eax, 0x4488830d
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
add dword [esp + 0xd0], 0x160486d6
mov eax, 0x25ed0d0e
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
sub dword [esp + 0xc0], 0x5e2565d3
mov eax, 0x366cc006
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0x48], 0x5a39010c
add dword [esp + 0xc4], 0x1d4fc412
mov eax, 0x139e5788
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
sub dword [esp + 0x30], 0x2c520b05
mov eax, 0x46b90891
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0xb0], 0x423af187
add dword [esp + 0x48], 0x7a833914
mov eax, 0x4a60883e
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
mov eax, 0x56afa921
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
mov eax, 0x24188883
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x3fb47a25
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
sub dword [esp + 0xb0], 0x2260fd04
sub dword [esp + 0x6c], 0x1f355e52
add dword [esp + 0x18], 0x7c2bb955
add dword [esp + 0xc4], 0x6f898d
mov eax, 0x2d5f896a
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
sub dword [esp + 0x48], 0x757b98fa
sub dword [esp + 0x90], 0x74fcd5ee
mov eax, 0x7cd0cc61
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, 0x7b16be66
mul dword [esp + 0x94]
mov eax, dword [esp + 0x94]
add dword [esp + 0x1c], 0xba6a457
mov eax, 0x62daab1c
mul dword [esp + 0xa4]
mov eax, dword [esp + 0xa4]
mov eax, 0x231ddf72
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
sub dword [esp + 0xb0], 0x256f6600
mov eax, 0x38c17345
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, 0x1f6f3a3d
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
mov eax, 0x702037a3
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
sub dword [esp + 0x50], 0x2c55d523
add dword [esp + 0x70], 0x7876727
add dword [esp + 0x8c], 0x1c868abd
sub dword [esp + 0x88], 0x33312804
mov eax, 0x6eedf6ff
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
sub dword [esp + 0x7c], 0x28d331e2
add dword [esp + 0xd0], 0x4e2f0270
sub dword [esp + 0x6c], 0x2f8325d6
add dword [esp + 0x54], 0x191d80cc
sub dword [esp + 0xd0], 0x9767750
mov eax, 0x17712294
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
sub dword [esp + 0x24], 0x142322a8
mov eax, 0x7bc77b58
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x84], 0x3f526139
sub dword [esp + 0xd4], 0x45bde670
sub dword [esp + 0x14], 0x5de02159
sub dword [esp + 0x3c], 0x3719c55f
mov eax, 0x3336d3b0
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
sub dword [esp + 0x34], 0x1f8d68b
add dword [esp + 0x88], 0x221c927e
mov eax, 0x317b2f99
mul dword [esp + 0xc0]
mov eax, dword [esp + 0xc0]
sub dword [esp + 0xc8], 0x1887706a
mov eax, 0x5703a73
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, 0x665e84f8
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
sub dword [esp + 0x78], 0x2fd6b2fb
sub dword [esp + 0x64], 0x28013605
add dword [esp + 0xa4], 0x71839ac0
sub dword [esp + 0x70], 0x78934cdb
add dword [esp + 0xcc], 0x57caf171
add dword [esp + 0x7c], 0x79bff771
sub dword [esp + 0xbc], 0x29a1dafc
sub dword [esp + 0xcc], 0x5f5fcf67
sub dword [esp + 0xa8], 0x41b9f210
sub dword [esp + 0x44], 0x47bd5fa1
sub dword [esp + 0x64], 0x2d2c13ed
sub dword [esp + 0xd0], 0x5e0cc7a2
add dword [esp + 0x6c], 0xd0a367d
sub dword [esp + 0xc4], 0x5f9e6dde
add dword [esp + 0x54], 0x5dc8c1ff
mov eax, 0x571cedfb
mul dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
mov eax, 0x124201c3
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
add dword [esp + 0x84], 0x414ca792
mov eax, 0x1fd06c5f
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, 0x178898f0
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
add dword [esp + 0xb0], 0xdbe93c2
add dword [esp + 0x44], 0x17c2ccc1
mov eax, 0x719b9c05
mul dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
sub dword [esp + 0x18], 0x3ee3e719
cmp dword [0x7032e4], 0x84
jne 0x40433e
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0xdc]
push ecx
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
call dword [sym.imp.KERNEL32.dll_InterlockedPushEntrySList]
push 0x402f40
call dword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
push ebx
push ebx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [esp + 0xf8], 0xf
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
mov dword [esp + 0x93c], ebx
fldz
sub esp, 0x10
fst qword [esp + 8]
fstp qword [esp]
call fcn.004043a0
push 0x7fc
fstp st(0)
lea edx, [esp + 0x118]
push ebx
push edx
mov dword [esp + 0x11c], 0x30
call fcn.00406d60
add esp, 0x1c
lea eax, [esp + 0x900]
push eax
push ebx
lea ecx, [esp + 0x108]
push ecx
push 0x99c
push 0x7032e8
call fcn.00404683
add esp, 0x14
mov dword [esp + 0x93c], 0xffffffff
cmp dword [esp + 0xf8], 0x10
jb 0x404325
mov edx, dword [esp + 0xe4]
push edx
call fcn.004046ad
add esp, 4
mov dword [esp + 0xf8], 0xf
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
mov eax, dword [0x444814]
mov ecx, dword [0x4447e8]
mov dword [0x7032e4], eax
mov dword [0x703c84], ecx
call fcn.00403620
mov ecx, dword [esp + 0x934]
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10