Function at 0x403db0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x77c
mov eax, dword [0x63fbf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x750], edi
call fcn.00402da0
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x52e]
push ecx
mov dword [ebp - 0x754], 0
mov word [ebp - 0x530], ax
call fcn.0054b8b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x736]
push eax
mov word [ebp - 0x738], dx
call fcn.0054b8b0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x326]
push edx
mov word [ebp - 0x328], cx
call fcn.0054b8b0
add esp, 0xc
push 0x103
lea eax, [ebp - 0x11f]
push 0
push eax
mov byte [ebp - 0x120], 0
call fcn.0054b8b0
add esp, 0xc
lea ecx, [ebp - 0x754]
push ecx
push 0
push 0
push 5
mov dword [ebp - 0x18], 0x74737953
mov dword [ebp - 0x14], 0x49206d65
mov dword [ebp - 0x10], 0x20656c64
mov dword [ebp - 0xc], 0x636f7250
mov dword [ebp - 8], 0x737365
mov dword [edi], 0
call dword [0x64ee8c]
cmp eax, 0xc0000004
jne 0x40460e
cmp dword [0x64d8dc], 0
jne 0x403eb8
push 0x208
call fcn.00544f4c
add esp, 4
mov dword [0x64d8dc], eax
mov edi, dword [ebp - 0x754]
push edi
call fcn.00544f4c
add esp, 4
push 0
mov ebx, eax
push edi
push ebx
push 5
mov dword [ebp - 0x75c], ebx
call dword [0x64ee8c]
test eax, eax
jne 0x40460e
mov dword [ebp - 0x744], ebx
mov edx, dword [ebp - 0x744]
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, dword [edx + 0x44]
call fcn.00402da0
mov eax, dword [0x64eea4]
xor ecx, ecx
mov dword [ebp - 0x74c], ecx
mov dword [ebp - 0x764], edi
mov dword [ebp - 0x760], ecx
mov dword [ebp - 0x77c], 0x18
mov dword [ebp - 0x778], ecx
mov dword [ebp - 0x774], ecx
mov dword [ebp - 0x770], ecx
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x768], ecx
cmp eax, ecx
je 0x403f68
lea ecx, [ebp - 0x764]
push ecx
lea edx, [ebp - 0x77c]
push edx
push 0x1fffff
lea ecx, [ebp - 0x74c]
push ecx
call eax
mov eax, dword [ebp - 0x74c]
test eax, eax
jne 0x403f7c
push edi
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x74c], eax
mov edi, eax
mov dword [ebp - 0x758], edi
test eax, eax
jne 0x404410
mov edx, dword [ebp - 0x744]
add edx, 0x38
lea ecx, [ebp - 0x530]
call fcn.00403860
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
lea edx, [ebp - 0x530]
push edx
push edi
push edi
call ebx
push edi
push edi
push eax
lea eax, [ebp - 0x120]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x530]
push ecx
push edi
push edi
call ebx
mov eax, dword [esi + 4]
lea edx, [ebp - 0x739]
mov byte [ebp - 0x739], 0
cmp edx, eax
jae 0x40400a
mov ecx, dword [esi]
cmp ecx, edx
ja 0x40400a
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x403ff2
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x404000
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
mov ebx, 1
add dword [esi + 4], ebx
jmp 0x404028
cmp eax, dword [esi + 8]
jne 0x404016
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x404020
mov byte [eax], 0
inc dword [esi + 4]
mov ebx, 1
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x739]
mov byte [ebp - 0x739], 2
cmp ecx, eax
jae 0x404068
mov ecx, dword [esi]
lea edx, [ebp - 0x739]
cmp ecx, edx
ja 0x404068
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x404058
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x40407e
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
jmp 0x40407e
cmp eax, dword [esi + 8]
jne 0x404074
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x40407e
mov byte [eax], 2
add dword [esi + 4], ebx
mov ecx, dword [ebp - 0x744]
mov eax, dword [esi + 4]
mov bl, byte [ecx + 0x44]
lea edx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp edx, eax
jae 0x4040c3
mov ecx, dword [esi]
cmp ecx, edx
ja 0x4040c3
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x4040b3
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x4040d8
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
jmp 0x4040d8
cmp eax, dword [esi + 8]
jne 0x4040cf
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x4040d8
mov byte [eax], bl
inc dword [esi + 4]
mov ecx, dword [ebp - 0x744]
mov ebx, dword [ecx + 0x44]
mov eax, dword [esi + 4]
shr ebx, 8
lea edx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp edx, eax
jae 0x404120
mov ecx, dword [esi]
cmp ecx, edx
ja 0x404120
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x404110
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x404135
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
jmp 0x404135
cmp eax, dword [esi + 8]
jne 0x40412c
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x404135
mov byte [eax], bl
inc dword [esi + 4]
mov ecx, dword [ebp - 0x744]
mov eax, dword [esi + 4]
mov bl, byte [ecx + 0x46]
lea edx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp edx, eax
jae 0x40417a
mov ecx, dword [esi]
cmp ecx, edx
ja 0x40417a
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x40416a
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x40418f
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
jmp 0x40418f
cmp eax, dword [esi + 8]
jne 0x404186
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x40418f
mov byte [eax], bl
inc dword [esi + 4]
mov ecx, dword [ebp - 0x744]
mov eax, dword [esi + 4]
mov bl, byte [ecx + 0x47]
lea edx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp edx, eax
jae 0x4041d4
mov ecx, dword [esi]
cmp ecx, edx
ja 0x4041d4
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x4041c4
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x4041e9
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
jmp 0x4041e9
cmp eax, dword [esi + 8]
jne 0x4041e0
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x4041e9
mov byte [eax], bl
inc dword [esi + 4]
mov ecx, dword [ebp - 0x744]
cmp dword [ecx + 0x44], 0
mov eax, dword [esi + 4]
jne 0x404302
lea ecx, [ebp - 0x18]
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x404205
sub ecx, edi
inc ecx
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x748], ecx
test ecx, ecx
jle 0x404403
mov edx, dword [ebp - 0x740]
mov bl, byte [ebp + edx - 0x18]
lea ecx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp ecx, eax
jae 0x404293
mov edx, dword [esi]
cmp edx, ecx
ja 0x404293
mov edi, ecx
mov ecx, dword [esi + 8]
sub edi, edx
cmp eax, ecx
jne 0x404283
sub eax, edx
cmp eax, 0xfffffffe
ja 0x4045f5
inc eax
sub ecx, edx
cmp eax, ecx
jbe 0x404283
mov edx, ecx
shr edx, 1
or ebx, 0xffffffff
sub ebx, edx
cmp ebx, ecx
jae 0x404275
xor ecx, ecx
jmp 0x404277
add ecx, edx
cmp ecx, eax
jae 0x40427d
mov ecx, eax
push ecx
call fcn.00404980
mov eax, dword [esi + 4]
test eax, eax
je 0x4042d6
mov edx, dword [esi]
mov cl, byte [edi + edx]
mov byte [eax], cl
jmp 0x4042d6
mov ecx, dword [esi + 8]
cmp eax, ecx
jne 0x4042cd
mov edx, dword [esi]
sub eax, edx
cmp eax, 0xfffffffe
ja 0x4045f5
inc eax
sub ecx, edx
cmp eax, ecx
jbe 0x4042cd
mov edx, ecx
shr edx, 1
or edi, 0xffffffff
sub edi, edx
cmp edi, ecx
jae 0x4042bf
xor ecx, ecx
jmp 0x4042c1
add ecx, edx
cmp ecx, eax
jae 0x4042c7
mov ecx, eax
push ecx
call fcn.00404980
mov eax, dword [esi + 4]
test eax, eax
je 0x4042d6
mov byte [eax], bl
mov ecx, dword [ebp - 0x740]
inc dword [esi + 4]
mov eax, dword [esi + 4]
inc ecx
mov dword [ebp - 0x740], ecx
cmp ecx, dword [ebp - 0x748]
jl 0x404227
mov eax, dword [ebp - 0x750]
inc dword [eax]
jmp 0x4045de
lea ecx, [ebp - 0x120]
lea edi, [ecx + 1]
jmp 0x404310
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x404310
sub ecx, edi
inc ecx
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x748], ecx
test ecx, ecx
jle 0x404403
mov edx, dword [ebp - 0x740]
mov bl, byte [ebp + edx - 0x120]
lea ecx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp ecx, eax
jae 0x4043a1
mov edx, dword [esi]
cmp edx, ecx
ja 0x4043a1
mov edi, ecx
mov ecx, dword [esi + 8]
sub edi, edx
cmp eax, ecx
jne 0x404391
sub eax, edx
cmp eax, 0xfffffffe
ja 0x4045f5
inc eax
sub ecx, edx
cmp eax, ecx
jbe 0x404391
mov edx, ecx
shr edx, 1
or ebx, 0xffffffff
sub ebx, edx
cmp ebx, ecx
jae 0x404383
xor ecx, ecx
jmp 0x404385
add ecx, edx
cmp ecx, eax
jae 0x40438b
mov ecx, eax
push ecx
call fcn.00404980
mov eax, dword [esi + 4]
test eax, eax
je 0x4043e4
mov edx, dword [esi]
mov cl, byte [edi + edx]
mov byte [eax], cl
jmp 0x4043e4
mov ecx, dword [esi + 8]
cmp eax, ecx
jne 0x4043db
mov edx, dword [esi]
sub eax, edx
cmp eax, 0xfffffffe
ja 0x4045f5
inc eax
sub ecx, edx
cmp eax, ecx
jbe 0x4043db
mov edx, ecx
shr edx, 1
or edi, 0xffffffff
sub edi, edx
cmp edi, ecx
jae 0x4043cd
xor ecx, ecx
jmp 0x4043cf
add ecx, edx
cmp ecx, eax
jae 0x4043d5
mov ecx, eax
push ecx
call fcn.00404980
mov eax, dword [esi + 4]
test eax, eax
je 0x4043e4
mov byte [eax], bl
mov ecx, dword [ebp - 0x740]
inc dword [esi + 4]
mov eax, dword [esi + 4]
inc ecx
mov dword [ebp - 0x740], ecx
cmp ecx, dword [ebp - 0x748]
jl 0x404332
mov eax, dword [ebp - 0x750]
inc dword [eax]
jmp 0x4045de
mov edx, dword [0x64d8dc]
push 0
push 0x104
push edx
push 0x1b
push eax
call dword [0x64ee80]
test eax, eax
js 0x4045d7
mov edx, dword [0x64d8dc]
lea ecx, [ebp - 0x738]
call fcn.00403860
test eax, eax
je 0x4045d7
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x328]
call fcn.00403ac0
add esp, 4
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x328]
push ecx
push 0
push 0
call ebx
push 0
push 0
push eax
lea edx, [ebp - 0x120]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x328]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x739]
mov byte [ebp - 0x739], 1
call fcn.004048e0
push edi
call fcn.00402f10
add esp, 4
test eax, eax
lea eax, [ebp - 0x739]
mov byte [ebp - 0x739], 1
jne 0x4044c2
mov byte [ebp - 0x739], 0
call fcn.004048e0
mov edi, dword [ebp - 0x744]
movzx ecx, byte [edi + 0x44]
lea eax, [ebp - 0x739]
mov byte [ebp - 0x739], cl
call fcn.004048e0
mov edx, dword [edi + 0x44]
shr edx, 8
lea eax, [ebp - 0x739]
mov byte [ebp - 0x739], dl
call fcn.004048e0
mov al, byte [edi + 0x46]
mov byte [ebp - 0x739], al
lea eax, [ebp - 0x739]
call fcn.004048e0
movzx ecx, byte [edi + 0x47]
lea eax, [ebp - 0x739]
mov byte [ebp - 0x739], cl
call fcn.004048e0
lea eax, [ebp - 0x120]
lea edx, [eax + 1]
jmp 0x404530
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404530
sub eax, edx
inc eax
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x748], eax
test eax, eax
jle 0x4045c9
mov edi, edi
mov edx, dword [ebp - 0x740]
mov eax, dword [esi + 4]
mov bl, byte [ebp + edx - 0x120]
lea ecx, [ebp - 0x739]
mov byte [ebp - 0x739], bl
cmp ecx, eax
jae 0x40459c
mov ecx, dword [esi]
lea edx, [ebp - 0x739]
cmp ecx, edx
ja 0x40459c
mov edi, edx
sub edi, ecx
cmp eax, dword [esi + 8]
jne 0x40458c
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x4045b1
mov ecx, dword [esi]
mov dl, byte [edi + ecx]
mov byte [eax], dl
jmp 0x4045b1
cmp eax, dword [esi + 8]
jne 0x4045a8
mov eax, esi
call fcn.00404930
mov eax, dword [esi + 4]
test eax, eax
je 0x4045b1
mov byte [eax], bl
mov eax, dword [ebp - 0x740]
inc dword [esi + 4]
inc eax
mov dword [ebp - 0x740], eax
cmp eax, dword [ebp - 0x748]
jl 0x404550
mov eax, dword [ebp - 0x750]
inc dword [eax]
mov edi, dword [ebp - 0x758]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x744]
mov eax, dword [eax]
test eax, eax
je 0x4045ff
add dword [ebp - 0x744], eax
jmp 0x403ee9
push str.vector_T__too_long
call fcn.00560c88
mov ecx, dword [ebp - 0x75c]
push ecx
call fcn.00544ec1
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00544a28
mov esp, ebp
pop ebp
ret