Function at 0x40205f
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ba4
push edi
lea edi, [ebp - 0x2ba4]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4021f1
push eax
push edi
call fcn.00403b1f
cmp eax, 1
jne 0x4020a8
mov dword [edi], 0x403f20
jmp 0x4020d9
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x4021ef
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4021ef
lea edx, [ebp - 0x2944]
push edx
lea edx, [ebp - 0x2994]
push edx
lea edx, [ebp - 0x29e4]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4021ef
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x29e4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x2994]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x402231
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x4037bf
mov dword [ebp - 0x26f8], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x28f4]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x25e8], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
mov dword [ebp - 0x25e8], 0
cmp dword [esi + 0x270], 0x74696d24
jne 0x4022f1
cmp dword [esi + 0x274], 0x30387573
jne 0x4022f1
cmp dword [esi + 0x278], 0x4524315f
jne 0x4022f1
cmp dword [esi + 0x27c], 0x37314344
jne 0x4022f1
cmp dword [esi + 0x280], 0x32355043
jne 0x4022f1
cmp dword [esi + 0x284], 0x3930345b
jne 0x4022f1
cmp dword [esi + 0x288], 0x205d6b36
jne 0x4022f1
cmp dword [esi + 0x28c], 0x4e4143
je 0x40238f
cmp dword [esi + 0x270], 0x74696d24
jne 0x402e88
cmp dword [esi + 0x274], 0x30387573
jne 0x402e88
cmp dword [esi + 0x278], 0x2824315f
jne 0x402e88
cmp dword [esi + 0x27c], 0x54534554
jne 0x402e88
cmp dword [esi + 0x280], 0x43444529
jne 0x402e88
cmp dword [esi + 0x284], 0x50433731
jne 0x402e88
cmp dword [esi + 0x288], 0x345b3235
jne 0x402e88
cmp dword [esi + 0x28c], 0x6b363930
jne 0x402e88
cmp dword [esi + 0x290], 0x4143205d
jne 0x402e88
cmp word [esi + 0x294], 0x4e
jne 0x402e88
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4023b2
cmp eax, 0xa
je 0x4023b2
cmp eax, 0xb
je 0x4023b2
cmp eax, 0x17
je 0x4023b2
cmp eax, 0x18
jne 0x402e88
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4023e0
mov dword [ebp - 0x25e8], 1
jmp 0x402e88
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40240d
mov dword [ebp - 0x25e8], 1
jmp 0x402e72
mov dword [ebp - 0x25e4], 0
mov dword [ebp - 0x25e0], 0
mov dword [ebp - 0x25dc], 3
mov dword [ebp - 0x25d8], 6
mov dword [ebp - 0x25d4], 0
mov dword [ebp - 0x25d0], 0x40
mov dword [ebp - 0x25cc], 0
mov dword [ebp - 0x25c8], 4
mov dword [ebp - 0x25c4], 0
mov dword [ebp - 0x25c0], 0xffffffff
mov dword [ebp - 0x25bc], 6
mov dword [ebp - 0x25b8], 0
mov dword [ebp - 0x25b4], 0x40
mov dword [ebp - 0x25b0], 0
mov dword [ebp - 0x25ac], 4
mov dword [ebp - 0x25a8], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x25a4], eax
mov dword [ebp - 0x25a0], 6
mov dword [ebp - 0x259c], 0
mov dword [ebp - 0x2598], 0x40
mov dword [ebp - 0x2594], 0
mov dword [ebp - 0x2590], 4
mov dword [ebp - 0x258c], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x2588], eax
test dword [ebp - 0x5b0], 0xf8ffff
je 0x40252b
or dword [ebp - 0x25d0], 0x100
or dword [ebp - 0x25b4], 0x100
or dword [ebp - 0x2598], 0x100
push 0
lea edx, [ebp - 0x25e4]
push edx
push 4
call dword [edi]
cmp eax, 0xffffffff
jne 0x40254c
mov dword [ebp - 0x25e8], 1
jmp 0x402e72
mov byte [ebp - 0x266], 0
mov byte [ebp - 0x226], 0
mov byte [ebp - 0x1e6], 0
mov byte [ebp - 0x1a6], 0
mov byte [ebp - 0x166], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402588
cmp eax, 0xa
je 0x402588
cmp eax, 0xb
jne 0x4027af
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x15c4], eax
mov dword [ebp - 0x15c0], 0x310
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x4025d1
lea edx, [ebp - 0x15c4]
push edx
push 6
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x4025f9
lea edx, [ebp - 0x15c4]
push edx
push 6
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
test eax, eax
je 0x402602
cmp eax, 0xffffffff
jne 0x40260e
mov dword [ebp - 0x25e8], 1
jmp 0x402687
cmp byte [ebp - 0x25e0], 0x50
je 0x402687
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x25e4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402669
xor eax, eax
jmp 0x402673
cmp eax, 0x20
jbe 0x402673
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004039c6
mov dword [ebp - 0x25e8], 1
cmp dword [ebp - 0x25e8], 0
jne 0x4027af
push 0xb
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x28f122
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x4026d9
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402701
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402708
cmp eax, 0xffffffff
jne 0x402717
mov dword [ebp - 0x25e8], 1
jmp 0x4027af
cmp byte [ebp - 0x25e0], 0x62
jne 0x4027af
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402752
cmp ecx, eax
jae 0x402752
mov dl, byte [ebp + ecx - 0x25dd]
cmp dl, 0
je 0x402752
cmp dl, 0xff
je 0x402752
cmp dl, 0x2d
je 0x402752
mov byte [ebp + ecx - 0x266], dl
inc ecx
jmp 0x402729
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402762
cmp eax, 0xa
jne 0x4027af
mov byte [ebp + ecx - 0x266], 0
cmp byte [ebp - 0x266], 0
je 0x4027af
lea eax, [ebp - 0x266]
push 0xa
push 0xd732520
push 0x3a245753
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4027c3
cmp eax, 0xa
jne 0x402e62
cmp dword [ebp - 0x25e8], 0
jne 0x4028de
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x92f122
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402815
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x40283d
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402844
cmp eax, 0xffffffff
jne 0x402853
mov dword [ebp - 0x25e8], 1
jmp 0x4028de
cmp byte [ebp - 0x25e0], 0x62
jne 0x4028de
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x40288e
cmp ecx, eax
jae 0x40288e
mov dl, byte [ebp + ecx - 0x25dd]
cmp dl, 0
je 0x40288e
cmp dl, 0xff
je 0x40288e
cmp dl, 0x2d
je 0x40288e
mov byte [ebp + ecx - 0x226], dl
inc ecx
jmp 0x402865
mov byte [ebp + ecx - 0x226], 0
cmp byte [ebp - 0x226], 0
je 0x4028de
lea eax, [ebp - 0x226]
push 0xa0d
push 0x7325203a
push 0x24544143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x25e8], 0
jne 0x402a19
push 0xb
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x18f122
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402930
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402958
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x40295f
cmp eax, 0xffffffff
jne 0x40296e
mov dword [ebp - 0x25e8], 1
jmp 0x402a19
cmp byte [ebp - 0x25e0], 0x62
jne 0x402a19
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x4029ae
cmp ecx, eax
jae 0x4029ae
mov dl, byte [ebp + ecx - 0x25dd]
cmp dl, 0
je 0x4029ae
cmp dl, 0xff
je 0x4029ae
cmp dl, 0x2d
je 0x4029ae
cmp dl, 0x20
je 0x4029ae
mov byte [ebp + ecx - 0x1e6], dl
inc ecx
jmp 0x402980
mov byte [ebp + ecx - 0x1e6], 0
cmp byte [ebp - 0x1e6], 0
je 0x402a19
lea eax, [ebp - 0x1e6]
push 0xa0d
push 0x7325203a
push 0x24545241
push 0x505f454e
push 0x49474e45
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0x1e6]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
cmp dword [ebp - 0x25e8], 0
jne 0x402b5b
push 0x10
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x690122
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402a6b
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402a93
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402a9a
cmp eax, 0xffffffff
jne 0x402aa9
mov dword [ebp - 0x25e8], 1
jmp 0x402b5b
cmp byte [ebp - 0x25e0], 0x62
jne 0x402b5b
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402adf
cmp ecx, eax
jae 0x402adf
mov dl, byte [ebp + ecx - 0x25dd]
cmp dl, 0
je 0x402adf
cmp dl, 0xff
je 0x402adf
mov byte [ebp + ecx - 0x1a6], dl
inc ecx
jmp 0x402abb
mov byte [ebp + ecx - 0x1a6], 0
cmp byte [ebp - 0x1a6], 0
je 0x402b5b
lea eax, [ebp - 0x1a6]
push 0xa0d73
push 0x25203a24
push 0x454c4946
push 0x5f4c4143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
cmp byte [esi + 0x6c], 0
je 0x402b4a
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
lea edx, [ebp - 0x1a6]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
cmp dword [ebp - 0x25e8], 0
jne 0x402c39
push 0x17
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x6f822
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402bad
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402bd5
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402bdc
cmp eax, 0xffffffff
jne 0x402be8
mov dword [ebp - 0x25e8], 1
jmp 0x402c39
cmp byte [ebp - 0x25e0], 0x62
jne 0x402c39
cmp eax, 0xb
jne 0x402c39
mov eax, dword [ebp - 0x25dd]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x25e8], 0
jne 0x402cc0
push 4
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x8a1a
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402c87
lea edx, [ebp - 0x15c4]
push edx
push 6
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402caf
lea edx, [ebp - 0x15c4]
push edx
push 6
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402cb6
cmp eax, 0xffffffff
jne 0x402cc0
mov dword [ebp - 0x25e8], 1
cmp dword [ebp - 0x25e8], 0
jne 0x402d47
push 0x11
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x502022
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402d0e
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402d36
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402d3d
cmp eax, 0xffffffff
jne 0x402d47
mov dword [ebp - 0x25e8], 1
cmp dword [ebp - 0x25e8], 0
jne 0x402e62
push 8
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov dword [ebp - 0x15c0], 0x90f122
test dword [ebp - 0x5b0], 0xf8ffff
jne 0x402d99
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x40
push 6
push 0
call fcn.004037e5
jmp 0x402dc1
lea edx, [ebp - 0x15c4]
push edx
push 7
lea edx, [ebp - 0x25e4]
push edx
push 0x1f4
push 0x6d7
push 0x140
push 6
push 0
call fcn.004037e5
je 0x402dc8
cmp eax, 0xffffffff
jne 0x402dd7
mov dword [ebp - 0x25e8], 1
jmp 0x402e62
cmp byte [ebp - 0x25e0], 0x62
jne 0x402e62
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402e12
cmp ecx, eax
jae 0x402e12
mov dl, byte [ebp + ecx - 0x25dd]
cmp dl, 0
je 0x402e12
cmp dl, 0xff
je 0x402e12
cmp dl, 0x2d
je 0x402e12
mov byte [ebp + ecx - 0x166], dl
inc ecx
jmp 0x402de9
mov byte [ebp + ecx - 0x166], 0
cmp byte [ebp - 0x166], 0
je 0x402e62
lea eax, [ebp - 0x166]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [esi + 0x270], 0x74696d24
jne 0x402eec
cmp dword [esi + 0x274], 0x30387573
jne 0x402eec
cmp dword [esi + 0x278], 0x4524325f
jne 0x402eec
cmp dword [esi + 0x27c], 0x43374344
jne 0x402eec
cmp dword [esi + 0x280], 0x34315b34
jne 0x402eec
cmp dword [esi + 0x284], 0x5d6b3237
jne 0x402eec
cmp dword [esi + 0x288], 0x6c2d4b20
jne 0x402eec
cmp dword [esi + 0x28c], 0x656e69
je 0x402f8a
cmp dword [esi + 0x270], 0x74696d24
jne 0x4037b7
cmp dword [esi + 0x274], 0x30387573
jne 0x4037b7
cmp dword [esi + 0x278], 0x2824325f
jne 0x4037b7
cmp dword [esi + 0x27c], 0x54534554
jne 0x4037b7
cmp dword [esi + 0x280], 0x43444529
jne 0x4037b7
cmp dword [esi + 0x284], 0x5b344337
jne 0x4037b7
cmp dword [esi + 0x288], 0x32373431
jne 0x4037b7
cmp dword [esi + 0x28c], 0x4b205d6b
jne 0x4037b7
cmp dword [esi + 0x290], 0x6e696c2d
jne 0x4037b7
cmp word [esi + 0x294], 0x65
jne 0x4037b7
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402f9e
cmp eax, 0xb
jne 0x403207
cmp dword [esi + 0x270], 0x74696d24
jne 0x403002
cmp dword [esi + 0x274], 0x30387573
jne 0x403002
cmp dword [esi + 0x278], 0x4524325f
jne 0x403002
cmp dword [esi + 0x27c], 0x43374344
jne 0x403002
cmp dword [esi + 0x280], 0x34315b34
jne 0x403002
cmp dword [esi + 0x284], 0x5d6b3237
jne 0x403002
cmp dword [esi + 0x288], 0x6c2d4b20
jne 0x403002
cmp dword [esi + 0x28c], 0x656e69
je 0x403090
cmp dword [esi + 0x270], 0x74696d24
jne 0x4030e2
cmp dword [esi + 0x274], 0x30387573
jne 0x4030e2
cmp dword [esi + 0x278], 0x2824325f
jne 0x4030e2
cmp dword [esi + 0x27c], 0x54534554
jne 0x4030e2
cmp dword [esi + 0x280], 0x43444529
jne 0x4030e2
cmp dword [esi + 0x284], 0x5b344337
jne 0x4030e2
cmp dword [esi + 0x288], 0x32373431
jne 0x4030e2
cmp dword [esi + 0x28c], 0x4b205d6b
jne 0x4030e2
cmp dword [esi + 0x290], 0x6e696c2d
jne 0x4030e2
cmp word [esi + 0x294], 0x65
jne 0x4030e2
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x4030b9
mov dword [ebp - 0x5a8], 0x4010a0
mov dword [ebp - 0x5a4], 0xa0
mov dword [ebp - 0x5a0], 0x50
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x4030e2
mov dword [ebp - 0x5a8], 0x4010f0
mov dword [ebp - 0x5a4], 0xf0
mov dword [ebp - 0x5a0], 0x50
push 0x200
push 0
lea edx, [ebp - 0x49e]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0x594], 0x21
mov dword [ebp - 0x59c], 0
mov ecx, dword [ebp - 0x59c]
cmp ecx, dword [ebp - 0x5a0]
jae 0x403207
mov eax, dword [ebp - 0x5a4]
lea eax, [eax + ecx]
mov dword [ebp - 0x592], eax
mov edx, dword [ebp - 0x5a0]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x40315a
cmp ecx, 0xf0
jae 0x40315a
mov eax, dword [ebp - 0x5a8]
add eax, dword [ebp - 0x59c]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0x58e], al
inc ecx
jmp 0x403135
mov dword [ebp - 0x598], ecx
add ecx, 4
mov byte [ebp - 0x593], cl
push 0xfa
lea edx, [ebp - 0x27fa]
push edx
push 0xf6
lea edx, [ebp - 0x594]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x4031d7
push 0xa0d35
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x25e8], 1
jmp 0x403207
mov eax, dword [ebp - 0x598]
mov ecx, dword [ebp - 0x59c]
add dword [ebp - 0x59c], eax
push eax
lea edx, [ebp - 0x27fa]
push edx
lea edx, [ebp + ecx - 0x49e]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x40310a
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x40322a
cmp eax, 0xa
je 0x40322a
cmp eax, 0xb
je 0x40322a
cmp eax, 0x17
je 0x40322a
cmp eax, 0x18
jne 0x4037b7
cmp dword [ebp - 0x25e8], 0
jne 0x4037b7
push 0x28a0
push 0x1000
push 4
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x403265
mov dword [ebp - 0x25e8], 1
jmp 0x4037b7
push 0
push 3
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x40328f
mov dword [ebp - 0x25e8], 1
jmp 0x4037a1
push 0
push 0
push 0
push 0
push 0
push 4
push 0
push 0
push 0x20000
push 0
push 0
push 0
push 0x40000
push 0
push 2
push 0
push 0
push 0
push 4
push 1
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x58
cmp eax, 0xffffffff
jne 0x4032e1
mov dword [ebp - 0x25e8], 1
jmp 0x4037a1
push 0x81f11081
push 0
push 4
push 0
push 0
push 0
push 4
push 0
lea edx, [ebp - 0x25e4]
push edx
lea edx, [esp + 4]
push edx
push 0xd
call dword [edi]
add esp, 0x20
mov byte [ebp - 0x1e6], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x403322
cmp eax, 0xa
jne 0x403791
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0xca]
mov dword [ebp - 0x26f4], eax
lea edx, [ebp - 0x25e4]
push edx
push 0x14
push 4
push 0
call fcn.00403975
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x26f4]
jl 0x403334
push 0x9a2102
lea eax, [ebp - 0x25e4]
push esp
push 3
push eax
push 0x1f4
push 0xdac
push 0
push 4
push 0
call fcn.004037e5
test eax, eax
je 0x403381
cmp eax, 0xffffffff
jne 0x403390
mov dword [ebp - 0x25e8], 1
jmp 0x403484
cmp byte [ebp - 0x25e4], 0
jne 0x4033ab
cmp byte [ebp - 0x25e3], 0x3f
jb 0x4033ab
cmp byte [ebp - 0x25e2], 0x61
je 0x4033c5
cmp byte [ebp - 0x25e4], 0x3f
jae 0x403484
cmp byte [ebp - 0x25e3], 0x61
jne 0x403484
pushal
cmp byte [ebp - 0x25e4], 0
jne 0x4033e1
movzx eax, byte [ebp - 0x25e3]
lea edx, [ebp - 0x25e0]
lea eax, [eax - 4]
jmp 0x4033f1
movzx eax, byte [ebp - 0x25e4]
lea edx, [ebp - 0x25e1]
lea eax, [eax - 3]
mov dword [ebp - 4], eax
xor ecx, ecx
xor ebx, ebx
cmp ecx, 0x3f
jae 0x403418
cmp ecx, dword [ebp - 4]
jae 0x403418
mov al, byte [edx + ecx]
test al, al
je 0x403418
cmp al, 0x20
je 0x403415
mov byte [ebp + ebx - 0x1e6], al
inc ebx
inc ecx
jmp 0x4033f8
mov byte [ebp + ebx - 0x1e6], 0
popal
cmp byte [ebp - 0x1e6], 0
je 0x403484
lea eax, [ebp - 0x1e6]
push 0xa0d
push 0x7325203a
push 0x24545241
push 0x505f454e
push 0x49474e45
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0x1e6]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
cmp dword [ebp - 0x25e8], 0
jne 0x403597
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x35]
mov dword [ebp - 0x26f4], eax
lea edx, [ebp - 0x25e4]
push edx
push 0x14
push 4
push 0
call fcn.00403975
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x26f4]
jl 0x4034a0
push 0x31002
lea eax, [ebp - 0x25e4]
push esp
push 3
push eax
push 0x1f4
push 0xdac
push 0
push 4
push 0
call fcn.004037e5
test eax, eax
je 0x4034ed
cmp eax, 0xffffffff
jne 0x4034fc
mov dword [ebp - 0x25e8], 1
jmp 0x403597
cmp byte [ebp - 0x25e4], 0
jne 0x403517
cmp byte [ebp - 0x25e3], 0x3f
jb 0x403517
cmp byte [ebp - 0x25e2], 0x50
jne 0x403529
cmp byte [ebp - 0x25e4], 0x3f
jae 0x403597
cmp byte [ebp - 0x25e3], 0x50
je 0x403597
push 0x37
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x37]
mov dword [ebp - 0x26f4], eax
lea edx, [ebp - 0x25e4]
push edx
push 0x14
push 4
push 0
call fcn.00403975
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x26f4]
jl 0x403540
push 0x861002
lea eax, [ebp - 0x25e4]
push esp
push 3
push eax
push 0x1f4
push 0xdac
push 0
push 4
push 0
call fcn.004037e5
test eax, eax
je 0x40358d
cmp eax, 0xffffffff
jne 0x403597
mov dword [ebp - 0x25e8], 1
cmp dword [ebp - 0x25e8], 0
jne 0x403791
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
lea eax, [eax + 0x48]
mov dword [ebp - 0x26f4], eax
lea edx, [ebp - 0x25e4]
push edx
push 0x14
push 4
push 0
call fcn.00403975
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
cmp eax, dword [ebp - 0x26f4]
jl 0x4035b3
push 0x1210
push 0x22305
lea eax, [ebp - 0x25e4]
push esp
push 6
push eax
push 0x1f4
push 0xdac
push 0
push 4
push 0
call fcn.004037e5
test eax, eax
je 0x403605
cmp eax, 0xffffffff
jne 0x403614
mov dword [ebp - 0x25e8], 1
jmp 0x403791
cmp byte [ebp - 0x25e4], 0
jne 0x4036c6
cmp byte [ebp - 0x25e3], 0x3f
jb 0x4036c6
cmp byte [ebp - 0x25e2], 0x63
je 0x4036c6
cmp byte [ebp - 0x25e4], 0x3f
jae 0x4036c6
cmp byte [ebp - 0x25e3], 0x3f
je 0x4036c6
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x25e4]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4036a3
xor eax, eax
jmp 0x4036ad
cmp eax, 0x20
jbe 0x4036ad
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.004039c6
mov dword [ebp - 0x25e8], 1
jmp 0x403791
pushal
cmp byte [ebp - 0x25e4], 0
jne 0x4036df
movzx eax, byte [ebp - 0x25e3]
lea edx, [ebp - 0x25e1]
jmp 0x4036ec
movzx eax, byte [ebp - 0x25e4]
lea edx, [ebp - 0x25e2]
dec eax
mov dword [ebp - 4], eax
xor ecx, ecx
xor ebx, ebx
cmp ecx, 0x3f
jae 0x403714
cmp ecx, dword [ebp - 4]
jae 0x403714
mov al, byte [edx + ecx]
test al, al
je 0x403714
cmp al, 0x20
je 0x403711
mov byte [ebp + ebx - 0x1a6], al
inc ebx
inc ecx
jmp 0x4036f4
mov byte [ebp + ebx - 0x1a6], 0
popal
cmp byte [ebp - 0x1a6], 0
je 0x403791
lea eax, [ebp - 0x1a6]
push 0xa0d73
push 0x25203a24
push 0x454c4946
push 0x5f4c4143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x2ae8]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x2ae8]
push edx
call dword [ebx + 0x30]
cmp byte [esi + 0x6c], 0
je 0x403780
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
lea edx, [ebp - 0x1a6]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
push 0
push 0
push 3
call dword [edi]
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8