Function at 0x402410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b04
push edi
lea edi, [ebp - 0x1b04]
push 1
call dword [ebx + 0x44]
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
mov dword [ebp - 0x56], esp
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
mov dword [ebp - 0x52], esp
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4025f0
push eax
push edi
call fcn.0040418c
cmp eax, 1
jne 0x4024c2
mov dword [edi], 0x40458d
jmp 0x4024c8
push dword [ebp - 0x52]
call dword [ebx + 0x30]
cmp dword [edi], 0
je 0x4025ee
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov dword [ebp - 0x4e], esp
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 4]
lea ecx, [ebp - 0x1a48]
push eax
push dword [ebp - 0x4e]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1a48]
push eax
call dword [ebx + 0x30]
add esp, 0x18
lea eax, [edi + 0x38]
push eax
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4025ee
lea eax, [ebp - 0x1638]
lea ecx, [ebp - 0x15e8]
lea edx, [ebp - 0x1598]
push edx
push ecx
push eax
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4025e1
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
mov dword [ebp - 0x4a], esp
lea eax, [ebp - 0x1638]
lea ecx, [ebp - 0x1a48]
push eax
push dword [ebp - 0x4a]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1a48]
push eax
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
mov dword [ebp - 0x46], esp
lea eax, [ebp - 0x15e8]
lea ecx, [ebp - 0x1a48]
push eax
push dword [ebp - 0x46]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1a48]
push eax
call dword [ebx + 0x30]
add esp, 0x18
push dword [edi + 0x38]
call dword [edi + 0x34]
mov dword [edi + 0x38], 0xffffffff
jmp 0x4025f6
push dword [ebp - 0x56]
call dword [ebx + 0x30]
add esp, 0x24
add esp, 0x30
cmp dword [edi], 0
je 0x403d91
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
mov dword [ebp - 0x42], esp
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
mov dword [ebp - 0x3e], esp
mov dword [ebp - 0x1548], 0
cmp dword [esi + 0x270], 0x736f6224
jne 0x402712
cmp dword [esi + 0x274], 0x64656863
jne 0x402712
cmp dword [esi + 0x278], 0x5f373163
jne 0x402712
cmp dword [esi + 0x27c], 0x6f422433
jne 0x402712
cmp dword [esi + 0x280], 0x20686373
jne 0x402712
cmp dword [esi + 0x284], 0x31434445
jne 0x402712
cmp dword [esi + 0x288], 0x31504337
jne 0x402712
cmp dword [esi + 0x28c], 0x30325b34
jne 0x402712
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x402712
cmp dword [esi + 0x294], 0x4e414320
jne 0x402712
cmp byte [esi + 0x298], 0
je 0x4028f2
cmp dword [esi + 0x270], 0x736f6224
jne 0x4027aa
cmp dword [esi + 0x274], 0x64656863
jne 0x4027aa
cmp dword [esi + 0x278], 0x5f373163
jne 0x4027aa
cmp dword [esi + 0x27c], 0x6f422434
jne 0x4027aa
cmp dword [esi + 0x280], 0x20686373
jne 0x4027aa
cmp dword [esi + 0x284], 0x31434445
jne 0x4027aa
cmp dword [esi + 0x288], 0x31504337
jne 0x4027aa
cmp dword [esi + 0x28c], 0x30325b34
jne 0x4027aa
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x4027aa
cmp dword [esi + 0x294], 0x6f747328
jne 0x4027aa
cmp dword [esi + 0x298], 0x20296b63
jne 0x4027aa
cmp dword [esi + 0x29c], 0x4e4143
je 0x4028f2
cmp dword [esi + 0x270], 0x736f6224
jne 0x402826
cmp dword [esi + 0x274], 0x64656863
jne 0x402826
cmp dword [esi + 0x278], 0x5f373163
jne 0x402826
cmp dword [esi + 0x27c], 0x6f422431
jne 0x402826
cmp dword [esi + 0x280], 0x20686373
jne 0x402826
cmp dword [esi + 0x284], 0x31434445
jne 0x402826
cmp dword [esi + 0x288], 0x38304337
jne 0x402826
cmp dword [esi + 0x28c], 0x3035315b
jne 0x402826
cmp dword [esi + 0x290], 0x205d6b34
jne 0x402826
cmp dword [esi + 0x294], 0x4e4143
je 0x4028f2
cmp dword [esi + 0x270], 0x736f6224
jne 0x403d8b
cmp dword [esi + 0x274], 0x64656863
jne 0x403d8b
cmp dword [esi + 0x278], 0x5f373163
jne 0x403d8b
cmp dword [esi + 0x27c], 0x6f422432
jne 0x403d8b
cmp dword [esi + 0x280], 0x20686373
jne 0x403d8b
cmp dword [esi + 0x284], 0x31434445
jne 0x403d8b
cmp dword [esi + 0x288], 0x38304337
jne 0x403d8b
cmp dword [esi + 0x28c], 0x3035315b
jne 0x403d8b
cmp dword [esi + 0x290], 0x285d6b34
jne 0x403d8b
cmp dword [esi + 0x294], 0x636f7473
jne 0x403d8b
cmp dword [esi + 0x298], 0x4320296b
jne 0x403d8b
cmp word [esi + 0x29c], 0x4e41
jne 0x403d8b
cmp byte [esi + 0x29e], 0
jne 0x403d8b
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
je 0x402915
cmp eax, 0xe
je 0x402915
cmp eax, 0x17
je 0x402915
cmp eax, 0x18
je 0x402915
cmp eax, 0x1a
jne 0x4031a6
push 0
push 0
push 0
push 0
push 0
push 6
push 1
push 0x1f4
push 0
mov dword [ebp - 0x3a], esp
push 0x7a120
push 0
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x402958
mov dword [ebp - 0x1548], 1
jmp 0x4031a3
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402985
mov dword [ebp - 0x1548], 1
jmp 0x40318d
push 0xe0070000
push 0
push 4
push 0
push 0
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x4029db
mov dword [ebp - 0x1548], 1
jmp 0x40318d
push 0x8110
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x402a15
mov dword [ebp - 0x1548], 1
jmp 0x402a8e
cmp byte [ebp - 0x1538], 0x50
je 0x402a8e
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402a70
xor eax, eax
jmp 0x402a7a
cmp eax, 0x20
jbe 0x402a7a
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
mov dword [ebp - 0x1548], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402aa2
cmp eax, 0xe
jne 0x402b4b
cmp dword [ebp - 0x1548], 0
jne 0x402b4b
push 0x8c1a
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x402ae9
mov dword [ebp - 0x1548], 1
jmp 0x402b4b
cmp byte [ebp - 0x1538], 0x5a
jne 0x402b4b
sub eax, 6
lea ecx, [ebp - 0x1536]
push eax
push ecx
call fcn.00403f97
lea ecx, [ebp - 0x1536]
push 0xa0d
push 0x7325203a
push 0x24545241
push 0x505f454e
push 0x49474e45
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x1a48]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x1a48]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402b64
cmp eax, 0xe
je 0x402b64
cmp eax, 0x1a
jne 0x402d7a
cmp dword [ebp - 0x1548], 0
jne 0x402c14
push 0x931a
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x402bab
mov dword [ebp - 0x1548], 1
jmp 0x402c14
cmp byte [ebp - 0x1538], 0x5a
jne 0x402c14
sub eax, 6
lea ecx, [ebp - 0x1536]
push eax
push ecx
call fcn.00403f97
lea eax, [ebp - 0x1536]
lea ecx, [ebp - 0x422]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea ecx, [ebp - 0x1536]
push 0xa
push 0xd732520
push 0x3a245753
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x1a48]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x1a48]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x1548], 0
jne 0x402cc7
push 0x911a
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x402c5b
mov dword [ebp - 0x1548], 1
jmp 0x402cc7
cmp byte [ebp - 0x1538], 0x5a
jne 0x402cc7
sub eax, 6
lea ecx, [ebp - 0x1536]
push eax
push ecx
call fcn.00403f97
lea eax, [ebp - 0x1536]
lea ecx, [ebp - 0x31e]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea ecx, [ebp - 0x1536]
push 0xa0d
push 0x7325203a
push 0x24544143
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x1a48]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x1a48]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x1548], 0
jne 0x402d7a
push 0x8e1a
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x402d0e
mov dword [ebp - 0x1548], 1
jmp 0x402d7a
cmp byte [ebp - 0x1538], 0x5a
jne 0x402d7a
sub eax, 6
lea ecx, [ebp - 0x1536]
push eax
push ecx
call fcn.00403f97
lea eax, [ebp - 0x1536]
lea ecx, [ebp - 0x21a]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea ecx, [ebp - 0x1536]
push 0xa0d
push 0x7325203a
push 0x244c4143
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x1a48]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x1a48]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402d8e
cmp eax, 0xe
jne 0x40317d
cmp dword [ebp - 0x1548], 0
jne 0x402e32
push 0x8f1a
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x402dd5
mov dword [ebp - 0x1548], 1
jmp 0x402e32
cmp byte [ebp - 0x1538], 0x5a
jne 0x402e32
sub eax, 6
lea ecx, [ebp - 0x1536]
push eax
push ecx
call fcn.00403f97
lea ecx, [ebp - 0x1536]
push 0xa0d73
push 0x25203a24
push 0x454c4946
push 0x5f4c4143
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x1a48]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x1a48]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x40313c
cmp dword [ebp - 0x1548], 0
jne 0x40313c
mov dword [ebp - 0x116], 0x3032
mov dword [ebp - 0xd6], 0x4861694b
mov dword [ebp - 0xd2], 0x646e7579
mov dword [ebp - 0xce], 0x6961
cmp dword [esi + 0x270], 0x736f6224
jne 0x402efb
cmp dword [esi + 0x274], 0x64656863
jne 0x402efb
cmp dword [esi + 0x278], 0x5f373163
jne 0x402efb
cmp dword [esi + 0x27c], 0x6f422433
jne 0x402efb
cmp dword [esi + 0x280], 0x20686373
jne 0x402efb
cmp dword [esi + 0x284], 0x31434445
jne 0x402efb
cmp dword [esi + 0x288], 0x31504337
jne 0x402efb
cmp dword [esi + 0x28c], 0x30325b34
jne 0x402efb
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x402efb
cmp dword [esi + 0x294], 0x4e414320
jne 0x402efb
cmp byte [esi + 0x298], 0
je 0x402f9b
cmp dword [esi + 0x270], 0x736f6224
jne 0x402fc3
cmp dword [esi + 0x274], 0x64656863
jne 0x402fc3
cmp dword [esi + 0x278], 0x5f373163
jne 0x402fc3
cmp dword [esi + 0x27c], 0x6f422434
jne 0x402fc3
cmp dword [esi + 0x280], 0x20686373
jne 0x402fc3
cmp dword [esi + 0x284], 0x31434445
jne 0x402fc3
cmp dword [esi + 0x288], 0x31504337
jne 0x402fc3
cmp dword [esi + 0x28c], 0x30325b34
jne 0x402fc3
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x402fc3
cmp dword [esi + 0x294], 0x6f747328
jne 0x402fc3
cmp dword [esi + 0x298], 0x20296b63
jne 0x402fc3
cmp dword [esi + 0x29c], 0x4e4143
jne 0x402fc3
mov dword [ebp - 0x96], 0x63736f62
mov dword [ebp - 0x92], 0x64655f68
mov dword [ebp - 0x8e], 0x63373163
mov dword [ebp - 0x8a], 0x343170
cmp dword [esi + 0x270], 0x736f6224
jne 0x40303f
cmp dword [esi + 0x274], 0x64656863
jne 0x40303f
cmp dword [esi + 0x278], 0x5f373163
jne 0x40303f
cmp dword [esi + 0x27c], 0x6f422431
jne 0x40303f
cmp dword [esi + 0x280], 0x20686373
jne 0x40303f
cmp dword [esi + 0x284], 0x31434445
jne 0x40303f
cmp dword [esi + 0x288], 0x38304337
jne 0x40303f
cmp dword [esi + 0x28c], 0x3035315b
jne 0x40303f
cmp dword [esi + 0x290], 0x205d6b34
jne 0x40303f
cmp dword [esi + 0x294], 0x4e4143
je 0x4030eb
cmp dword [esi + 0x270], 0x736f6224
jne 0x403113
cmp dword [esi + 0x274], 0x64656863
jne 0x403113
cmp dword [esi + 0x278], 0x5f373163
jne 0x403113
cmp dword [esi + 0x27c], 0x6f422432
jne 0x403113
cmp dword [esi + 0x280], 0x20686373
jne 0x403113
cmp dword [esi + 0x284], 0x31434445
jne 0x403113
cmp dword [esi + 0x288], 0x38304337
jne 0x403113
cmp dword [esi + 0x28c], 0x3035315b
jne 0x403113
cmp dword [esi + 0x290], 0x285d6b34
jne 0x403113
cmp dword [esi + 0x294], 0x636f7473
jne 0x403113
cmp dword [esi + 0x298], 0x4320296b
jne 0x403113
cmp word [esi + 0x29c], 0x4e41
jne 0x403113
cmp byte [esi + 0x29e], 0
jne 0x403113
mov dword [ebp - 0x96], 0x63736f62
mov dword [ebp - 0x92], 0x64655f68
mov dword [ebp - 0x8e], 0x63373163
mov dword [ebp - 0x8a], 0x3830
push 1
push 0
push 0
lea edx, [esi + 0x6c]
push edx
lea edx, [ebp - 0x96]
push edx
lea edx, [ebp - 0xd6]
push edx
lea edx, [ebp - 0x116]
push edx
lea edx, [ebp - 0x422]
push edx
call dword [ebx + 0x70]
cmp dword [ebp - 0x1548], 0
jne 0x40317d
push 0x801a
push 0xe0070000
lea eax, [ebp - 0x153c]
push esp
push 6
push eax
push 0x1f4
push 0x1f4
push 0x40
push 6
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x40317d
mov dword [ebp - 0x1548], 1
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
add esp, 0x24
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x403d8b
mov eax, dword [esi + 0x14]
mov dword [esi + 0x2c], eax
mov dword [esi + 0x28], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [esi + 0x24], eax
push 0x7a120
push 0
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4031f5
mov dword [ebp - 0x1548], 1
jmp 0x403ce1
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x403222
mov dword [ebp - 0x1548], 1
jmp 0x403ccb
push 0
push 0
push 0
push 0
push 0
push 5
push 0xa1060000
push 0
push 4
push 0
push 0
push 0
push 5
push 0xffffffffffffffff
push 0
push 4
push 0
push 0
push 0
push 5
push 1
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x5c
cmp eax, 0xffffffff
jne 0x403273
mov dword [ebp - 0x1548], 1
jmp 0x403ccb
push 0xad010001
push 0xa0060000
lea eax, [ebp - 0x153c]
push esp
push 8
push eax
push 0x1f4
push 0x1f4
push 0
push 5
push 0
call fcn.00403dba
cmp eax, 0xffffffff
jne 0x403313
mov dword [ebp - 0x1548], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x4032fd
xor eax, eax
jmp 0x403307
cmp eax, 0x20
jbe 0x403307
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
jmp 0x40338c
cmp byte [ebp - 0x1538], 0xff
je 0x40338c
mov dword [ebp - 0x1548], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403378
xor eax, eax
jmp 0x403382
cmp eax, 0x20
jbe 0x403382
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
cmp dword [ebp - 0x1548], 0
jne 0x403cbb
push 0xa0d
push 0x244d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x18
push 0
push 0
push 0
push 0x80000000
push esp
push 0
mov dword [ebp - 0x1a], esp
push 0
push 0
push 0
push 0x80000000
push 0x200000
push 0
mov dword [ebp - 0x16], esp
mov dword [ebp - 0x36], 0
mov dword [ebp - 0x32], 0
cmp dword [esi + 0x270], 0x736f6224
jne 0x40347b
cmp dword [esi + 0x274], 0x64656863
jne 0x40347b
cmp dword [esi + 0x278], 0x5f373163
jne 0x40347b
cmp dword [esi + 0x27c], 0x6f422433
jne 0x40347b
cmp dword [esi + 0x280], 0x20686373
jne 0x40347b
cmp dword [esi + 0x284], 0x31434445
jne 0x40347b
cmp dword [esi + 0x288], 0x31504337
jne 0x40347b
cmp dword [esi + 0x28c], 0x30325b34
jne 0x40347b
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x40347b
cmp dword [esi + 0x294], 0x4e414320
jne 0x40347b
cmp byte [esi + 0x298], 0
je 0x40351b
cmp dword [esi + 0x270], 0x736f6224
jne 0x403542
cmp dword [esi + 0x274], 0x64656863
jne 0x403542
cmp dword [esi + 0x278], 0x5f373163
jne 0x403542
cmp dword [esi + 0x27c], 0x6f422434
jne 0x403542
cmp dword [esi + 0x280], 0x20686373
jne 0x403542
cmp dword [esi + 0x284], 0x31434445
jne 0x403542
cmp dword [esi + 0x288], 0x31504337
jne 0x403542
cmp dword [esi + 0x28c], 0x30325b34
jne 0x403542
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x403542
cmp dword [esi + 0x294], 0x6f747328
jne 0x403542
cmp dword [esi + 0x298], 0x20296b63
jne 0x403542
cmp dword [esi + 0x29c], 0x4e4143
jne 0x403542
imul ecx, dword [ebp - 0x36], 0xc
add ecx, dword [ebp - 0x16]
mov eax, dword [ecx + 4]
cmp eax, 0
je 0x403542
test eax, 0x3ff
jne 0x403536
shr eax, 0xa
jmp 0x40353a
shr eax, 0xa
inc eax
add dword [ebp - 0x32], eax
inc dword [ebp - 0x36]
jmp 0x40351b
cmp dword [esi + 0x270], 0x736f6224
jne 0x4035be
cmp dword [esi + 0x274], 0x64656863
jne 0x4035be
cmp dword [esi + 0x278], 0x5f373163
jne 0x4035be
cmp dword [esi + 0x27c], 0x6f422431
jne 0x4035be
cmp dword [esi + 0x280], 0x20686373
jne 0x4035be
cmp dword [esi + 0x284], 0x31434445
jne 0x4035be
cmp dword [esi + 0x288], 0x38304337
jne 0x4035be
cmp dword [esi + 0x28c], 0x3035315b
jne 0x4035be
cmp dword [esi + 0x290], 0x205d6b34
jne 0x4035be
cmp dword [esi + 0x294], 0x4e4143
je 0x40366a
cmp dword [esi + 0x270], 0x736f6224
jne 0x403691
cmp dword [esi + 0x274], 0x64656863
jne 0x403691
cmp dword [esi + 0x278], 0x5f373163
jne 0x403691
cmp dword [esi + 0x27c], 0x6f422432
jne 0x403691
cmp dword [esi + 0x280], 0x20686373
jne 0x403691
cmp dword [esi + 0x284], 0x31434445
jne 0x403691
cmp dword [esi + 0x288], 0x38304337
jne 0x403691
cmp dword [esi + 0x28c], 0x3035315b
jne 0x403691
cmp dword [esi + 0x290], 0x285d6b34
jne 0x403691
cmp dword [esi + 0x294], 0x636f7473
jne 0x403691
cmp dword [esi + 0x298], 0x4320296b
jne 0x403691
cmp word [esi + 0x29c], 0x4e41
jne 0x403691
cmp byte [esi + 0x29e], 0
jne 0x403691
imul ecx, dword [ebp - 0x36], 0xc
add ecx, dword [ebp - 0x1a]
mov eax, dword [ecx + 4]
cmp eax, 0
je 0x403691
test eax, 0x3ff
jne 0x403685
shr eax, 0xa
jmp 0x403689
shr eax, 0xa
inc eax
add dword [ebp - 0x32], eax
inc dword [ebp - 0x36]
jmp 0x40366a
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 1
push 0x404
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov eax, dword [ebp - 0x32]
shl eax, 0x10
push eax
push 0
push 0x401
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0
push 2
push 0xa0060000
mov dword [ebp - 0x12], esp
push 0
push 0x1020e
push 0xa0060000
mov dword [ebp - 0xe], esp
mov dword [ebp - 0x36], 0
mov dword [ebp - 0x1e], 1
mov dword [ebp - 0x22], 0
imul ecx, dword [ebp - 0x36], 0x10
cmp dword [esi + 0x270], 0x736f6224
jne 0x40378e
cmp dword [esi + 0x274], 0x64656863
jne 0x40378e
cmp dword [esi + 0x278], 0x5f373163
jne 0x40378e
cmp dword [esi + 0x27c], 0x6f422433
jne 0x40378e
cmp dword [esi + 0x280], 0x20686373
jne 0x40378e
cmp dword [esi + 0x284], 0x31434445
jne 0x40378e
cmp dword [esi + 0x288], 0x31504337
jne 0x40378e
cmp dword [esi + 0x28c], 0x30325b34
jne 0x40378e
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x40378e
cmp dword [esi + 0x294], 0x4e414320
jne 0x40378e
cmp byte [esi + 0x298], 0
je 0x403822
cmp dword [esi + 0x270], 0x736f6224
jne 0x403825
cmp dword [esi + 0x274], 0x64656863
jne 0x403825
cmp dword [esi + 0x278], 0x5f373163
jne 0x403825
cmp dword [esi + 0x27c], 0x6f422434
jne 0x403825
cmp dword [esi + 0x280], 0x20686373
jne 0x403825
cmp dword [esi + 0x284], 0x31434445
jne 0x403825
cmp dword [esi + 0x288], 0x31504337
jne 0x403825
cmp dword [esi + 0x28c], 0x30325b34
jne 0x403825
cmp dword [esi + 0x290], 0x5d6b3834
jne 0x403825
cmp dword [esi + 0x294], 0x6f747328
jne 0x403825
cmp dword [esi + 0x298], 0x20296b63
jne 0x403825
cmp dword [esi + 0x29c], 0x4e4143
jne 0x403825
add ecx, dword [ebp - 0x16]
cmp dword [esi + 0x270], 0x736f6224
jne 0x4038a1
cmp dword [esi + 0x274], 0x64656863
jne 0x4038a1
cmp dword [esi + 0x278], 0x5f373163
jne 0x4038a1
cmp dword [esi + 0x27c], 0x6f422431
jne 0x4038a1
cmp dword [esi + 0x280], 0x20686373
jne 0x4038a1
cmp dword [esi + 0x284], 0x31434445
jne 0x4038a1
cmp dword [esi + 0x288], 0x38304337
jne 0x4038a1
cmp dword [esi + 0x28c], 0x3035315b
jne 0x4038a1
cmp dword [esi + 0x290], 0x205d6b34
jne 0x4038a1
cmp dword [esi + 0x294], 0x4e4143
je 0x403941
cmp dword [esi + 0x270], 0x736f6224
jne 0x403944
cmp dword [esi + 0x274], 0x64656863
jne 0x403944
cmp dword [esi + 0x278], 0x5f373163
jne 0x403944
cmp dword [esi + 0x27c], 0x6f422432
jne 0x403944
cmp dword [esi + 0x280], 0x20686373
jne 0x403944
cmp dword [esi + 0x284], 0x31434445
jne 0x403944
cmp dword [esi + 0x288], 0x38304337
jne 0x403944
cmp dword [esi + 0x28c], 0x3035315b
jne 0x403944
cmp dword [esi + 0x290], 0x285d6b34
jne 0x403944
cmp dword [esi + 0x294], 0x636f7473
jne 0x403944
cmp dword [esi + 0x298], 0x4320296b
jne 0x403944
cmp word [esi + 0x29c], 0x4e41
jne 0x403944
cmp byte [esi + 0x29e], 0
jne 0x403944
add ecx, dword [ebp - 0x1a]
mov eax, dword [ecx + 4]
cmp eax, 0
je 0x403caf
mov dword [ebp - 0x2a], eax
mov eax, dword [ecx]
mov dword [ebp - 0x2e], eax
add dword [ebp - 0x2a], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x26], eax
mov eax, dword [ebp - 0x2e]
cmp eax, dword [ebp - 0x2a]
jae 0x403c89
add eax, dword [ebp - 0x26]
mov edx, dword [ebp - 0x12]
mov byte [edx + 8], al
mov byte [edx + 9], ah
shr eax, 0x10
mov byte [edx + 0xa], al
mov byte [edx + 0xb], ah
mov eax, dword [ebp - 0x1e]
mov byte [edx + 5], al
mov dword [ebp - 0x1540], 0
push edx
push 0xc
push 0x1f4
push 0
push 5
push 0
call fcn.00403dee
cmp eax, 0xffffffff
jne 0x4039b9
mov dword [ebp - 0x1548], 1
jmp 0x403ad9
lea eax, [ebp - 0x153c]
push eax
push 0x1f4
push 5
push 0
call fcn.00403f46
cmp eax, 0xffffffff
jne 0x4039e2
mov dword [ebp - 0x1548], 1
jmp 0x403ad9
cmp eax, 0
jne 0x403a60
cmp dword [ebp - 0x1540], 3
jae 0x4039f8
inc dword [ebp - 0x1540]
jmp 0x403992
mov dword [ebp - 0x1548], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403a4a
xor eax, eax
jmp 0x403a54
cmp eax, 0x20
jbe 0x403a54
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
jmp 0x403ad9
cmp byte [ebp - 0x1538], 0xff
je 0x403ad9
mov dword [ebp - 0x1548], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403ac5
xor eax, eax
jmp 0x403acf
cmp eax, 0x20
jbe 0x403acf
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
cmp dword [ebp - 0x1548], 0
jne 0x403c3c
inc dword [ebp - 0x1e]
mov edx, dword [ebp - 0xe]
mov eax, dword [ebp - 0x1e]
mov byte [edx + 5], al
inc dword [ebp - 0x1e]
push edx
push 0xc
push 0x1f4
push 0
push 5
push 0
call fcn.00403dee
cmp eax, 0xffffffff
jne 0x403b1c
mov dword [ebp - 0x1548], 1
jmp 0x403c3c
lea eax, [ebp - 0x153c]
push eax
push 0x1f4
push 5
push 0
call fcn.00403f46
cmp eax, 0xffffffff
jne 0x403b45
mov dword [ebp - 0x1548], 1
jmp 0x403c3c
cmp eax, 0
jne 0x403bc3
cmp dword [ebp - 0x1540], 3
jae 0x403b5b
inc dword [ebp - 0x1540]
jmp 0x403af5
mov dword [ebp - 0x1548], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2445
push 0x534e4f50
push 0x5345525f
push 0x4f4e5f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403bad
xor eax, eax
jmp 0x403bb7
cmp eax, 0x20
jbe 0x403bb7
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
jmp 0x403c3c
cmp byte [ebp - 0x1538], 0xff
je 0x403c3c
mov dword [ebp - 0x1548], 1
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x153c]
mov edx, esp
cmp eax, 0xffffffff
jne 0x403c28
xor eax, eax
jmp 0x403c32
cmp eax, 0x20
jbe 0x403c32
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00404030
cmp dword [ebp - 0x1548], 0
jne 0x403c87
lea ecx, [ebp - 0x1534]
mov edx, dword [ebp - 0x2e]
add edx, dword [esi + 0x24]
push 1
push ecx
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
inc dword [ebp - 0x2e]
inc dword [ebp - 0x22]
test dword [ebp - 0x22], 0x3ff
jne 0x403c82
push 0
push 0
push 0x405
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
jmp 0x403961
jmp 0x403caf
test dword [ebp - 0x22], 0x3ff
je 0x403ca7
push 0
push 0
push 0x405
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
inc dword [ebp - 0x36]
jmp 0x4036fe
add esp, 0xc
add esp, 0xc
add esp, 0x18
add esp, 0x18
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
cmp dword [ebp - 0x1548], 0
jne 0x403d6d
push 0xa
push 0xd244b4f
push 0x5f4d4f52
push 0x5f474e49
push 0x44414552
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x1c
pushal
mov edi, dword [esi + 0x24]
lea eax, [edi + 0x4000]
lea ecx, [edi + 0x14000]
push 0xc000
push eax
push ecx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push 0x316948
push 0x7a497441
push 0x73536150
mov dword [ebp - 0xa], esp
mov ecx, 0x14000
xor edx, edx
cmp ecx, 0x20000
jae 0x403d67
mov al, byte [esp + edx]
ror al, cl
xor byte [edi + ecx], al
inc ecx
inc edx
cmp edx, 0xb
je 0x403d4c
jmp 0x403d4e
add esp, 0xc
popal
jmp 0x403d8b
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov dword [esi + 0x2c], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x24], 0
add esp, 0x34
add esp, 0x2c
push 0
mov dword [ebp - 6], esp
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8