Function at 0x40b7d0
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f0e09
mov eax, dword fs:[0]
push eax
sub esp, 0x6dc
push ebx
push esi
push edi
lea edi, [ebp - 0x4a8]
mov ecx, 0x127
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x527040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x52b0f5
call fcn.00450d00
push 0x4067f0
push 0x4f77e8
push 0x4067f0
push 0x4f76a4
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
call fcn.004019c0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x40b89f
call fcn.00401a50
mov dword [ebp - 0x24], eax
push 0x4067f0
mov eax, dword [ebp - 0x24]
push eax
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0x24]
push eax
call fcn.00401a70
add esp, 4
jmp 0x40b8d6
push 0x4067f0
mov eax, dword [ebp - 0x18]
push eax
push 0x4f77f4
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0x18]
push eax
call fcn.00401a70
add esp, 4
push 0x4067f0
push 0x4f7800
push 0x4067f0
push 0x4f76a4
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push str.LZ8EA70312F71E96D28758C8CC48A84214
lea ecx, [ebp - 0x48]
call fcn.00407430
mov dword [ebp - 4], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0xa8]
call fcn.00407990
mov byte [ebp - 4], 1
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x48]
call fcn.0040fad0
push eax
call fcn.00401ac0
add esp, 0x18
movzx edx, al
test edx, edx
jne 0x40b9c5
call fcn.00401a50
mov dword [ebp - 0xb4], eax
push 0x4067f0
mov eax, dword [ebp - 0xb4]
push eax
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0xb4]
push eax
call fcn.00401a70
add esp, 4
jmp 0x40bfc5
push 0x4f7830
mov eax, dword [ebp - 0x54]
push eax
call fcn.00401bd0
add esp, 4
push eax
lea ecx, [ebp - 0x3c0]
call fcn.00407430
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x69c], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x69c]
push edx
call fcn.00403a10
add esp, 8
mov byte [ebp - 0x399], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c0]
call fcn.00408c50
movzx eax, byte [ebp - 0x399]
test eax, eax
je 0x40bdf6
call fcn.00401a80
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xcc], 0
lea ecx, [ebp - 0xf0]
call fcn.00407990
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00401c10
add esp, 8
movzx edx, al
test edx, edx
je 0x40bafd
mov eax, dword [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
call fcn.00401c20
add esp, 8
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x3e4]
call fcn.00407430
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x69c], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x69c]
push edx
push 0x4f7838
lea eax, [ebp - 0x408]
push eax
call fcn.00403c20
add esp, 0xc
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x6a0]
push ecx
lea ecx, [ebp - 0xf0]
call fcn.00409670
lea ecx, [ebp - 0x408]
call fcn.00408c50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3e4]
call fcn.00408c50
jmp 0x40bb0c
mov eax, dword [ebp - 0x6c]
push eax
lea ecx, [ebp - 0xf0]
call fcn.00409710
mov eax, dword [ebp - 0x84]
push eax
call fcn.00401be0
add esp, 4
push eax
lea ecx, [ebp - 0x42c]
call fcn.00407430
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x69c], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x69c]
push edx
mov eax, dword [ebp - 0x78]
push eax
lea ecx, [ebp - 0x450]
push ecx
call fcn.004127d0
add esp, 8
mov dword [ebp - 0x6a0], eax
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x6a4]
push eax
push 0x4f7840
mov ecx, dword [ebp - 0x60]
push ecx
push 0x4f784c
lea edx, [ebp - 0xf0]
push edx
push 0x4f7858
mov eax, dword [ebp - 0x54]
push eax
call fcn.00401bd0
add esp, 4
push eax
lea ecx, [ebp - 0x474]
call fcn.00407430
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6ac], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x6ac]
push edx
push 0x4f7864
lea eax, [ebp - 0x498]
push eax
call fcn.00403c20
add esp, 0xc
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6b4], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x6b4]
push edx
lea eax, [ebp - 0x4bc]
push eax
call fcn.00403bb0
add esp, 0xc
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x6b8]
mov dword [ebp - 0x6bc], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x6bc]
push edx
lea eax, [ebp - 0x4e0]
push eax
call fcn.00403b40
add esp, 0xc
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c4], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x6c4]
push edx
lea eax, [ebp - 0x504]
push eax
call fcn.00403bb0
add esp, 0xc
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp - 0x6cc], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x6cc]
push edx
lea eax, [ebp - 0x528]
push eax
call fcn.00403bb0
add esp, 0xc
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x6d0]
mov dword [ebp - 0x6d4], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x6d4]
push edx
lea eax, [ebp - 0x54c]
push eax
call fcn.00403bb0
add esp, 0xc
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x6d8]
mov dword [ebp - 0x6dc], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x6dc]
push edx
lea eax, [ebp - 0x570]
push eax
call fcn.00403a60
add esp, 0xc
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x6e0]
mov dword [ebp - 0x6e4], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x6e4]
push edx
lea eax, [ebp - 0x594]
push eax
call fcn.00403a60
add esp, 0xc
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.00409670
lea ecx, [ebp - 0x594]
call fcn.00408c50
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x570]
call fcn.00408c50
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x54c]
call fcn.00408c50
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x528]
call fcn.00408c50
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x504]
call fcn.00408c50
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4e0]
call fcn.00408c50
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4bc]
call fcn.00408c50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x498]
call fcn.00408c50
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x474]
call fcn.00408c50
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x450]
call fcn.00408c50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x42c]
call fcn.00408c50
mov eax, dword [ebp - 0xc0]
push eax
call fcn.00401a70
add esp, 4
mov eax, dword [ebp - 0xcc]
push eax
call fcn.00401a70
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf0]
call fcn.00408c50
jmp 0x40bfad
mov eax, dword [ebp - 0x84]
push eax
call fcn.00401be0
add esp, 4
push eax
lea ecx, [ebp - 0x5b8]
call fcn.00407430
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x698]
mov dword [ebp - 0x69c], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x69c]
push edx
mov eax, dword [ebp - 0x78]
push eax
lea ecx, [ebp - 0x5dc]
push ecx
call fcn.004127d0
add esp, 8
mov dword [ebp - 0x6a0], eax
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x6a4]
push eax
push 0x4f7840
mov ecx, dword [ebp - 0x54]
push ecx
call fcn.00401bd0
add esp, 4
push eax
lea ecx, [ebp - 0x600]
call fcn.00407430
mov dword [ebp - 0x6a8], eax
mov edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x6ac], edx
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x6ac]
push eax
push 0x4f7864
lea ecx, [ebp - 0x624]
push ecx
call fcn.00403c20
add esp, 0xc
mov dword [ebp - 0x6b0], eax
mov edx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6b4], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x6b4]
push eax
lea ecx, [ebp - 0x648]
push ecx
call fcn.00403bb0
add esp, 0xc
mov dword [ebp - 0x6b8], eax
mov edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x6bc], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x6bc]
push eax
lea ecx, [ebp - 0x66c]
push ecx
call fcn.00403a60
add esp, 0xc
mov dword [ebp - 0x6c0], eax
mov edx, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c4], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x6c4]
push eax
lea ecx, [ebp - 0x690]
push ecx
call fcn.00403a60
add esp, 0xc
mov dword [ebp - 0x6c8], eax
mov edx, dword [ebp - 0x6c8]
push edx
lea ecx, [ebp - 0xa8]
call fcn.00409670
lea ecx, [ebp - 0x690]
call fcn.00408c50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x66c]
call fcn.00408c50
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x648]
call fcn.00408c50
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x624]
call fcn.00408c50
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x600]
call fcn.00408c50
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x5dc]
call fcn.00408c50
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5b8]
call fcn.00408c50
mov eax, dword [ebp - 0x60]
push eax
call fcn.00401a70
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
call fcn.00401a70
add esp, 4
push 0x4067f0
lea eax, [ebp - 0xa8]
push eax
push 0x4067f0
lea ecx, [ebp - 0x48]
push ecx
push 0x4f7888
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403620
add esp, 8
mov ecx, eax
call fcn.00409a20
push eax
call fcn.00403620
add esp, 8
mov ecx, eax
call fcn.00409a20
push 0x4067f0
push 0x4f7898
push 0x4067f0
push 0x4f76a4
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x114], 0
mov byte [ebp - 0x11d], 0
mov byte [ebp - 0x129], 0
lea eax, [ebp - 0x129]
push eax
lea ecx, [ebp - 0x11d]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0xfc]
push ecx
call fcn.004019d0
add esp, 0x14
movzx edx, al
test edx, edx
jne 0x40c0e1
call fcn.00401a50
mov dword [ebp - 0x138], eax
push 0x4067f0
mov eax, dword [ebp - 0x138]
push eax
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0x138]
push eax
call fcn.00401a70
add esp, 4
jmp 0x40c1f2
push 0x4067f0
mov eax, dword [ebp - 0xfc]
push eax
push 0x4f78a4
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push 0x4067f0
mov eax, dword [ebp - 0x108]
push eax
push 0x4f78b0
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push 0x4067f0
mov eax, dword [ebp - 0x114]
push eax
push 0x4f78bc
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push 0x4067f0
movzx eax, byte [ebp - 0x11d]
push eax
push 0x4f78c8
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a80
mov ecx, eax
call fcn.00409a20
push 0x4067f0
movzx eax, byte [ebp - 0x129]
push eax
push 0x4f78d4
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a80
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0xfc]
push eax
call fcn.00401a70
add esp, 4
mov eax, dword [ebp - 0x108]
push eax
call fcn.00401a70
add esp, 4
mov eax, dword [ebp - 0x114]
push eax
call fcn.00401a70
add esp, 4
push 0x4067f0
push 0x4f78e0
push 0x4067f0
push 0x4f76a4
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push 0x4067f0
lea eax, [ebp - 0x48]
push eax
push 0x4f78ec
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403620
add esp, 8
mov ecx, eax
call fcn.00409a20
lea ecx, [ebp - 0x48]
call fcn.0040fad0
push eax
call fcn.004019f0
add esp, 4
movzx eax, al
test eax, eax
jne 0x40c2ca
call fcn.00401a50
mov dword [ebp - 0x144], eax
push 0x4067f0
mov eax, dword [ebp - 0x144]
push eax
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0x144]
push eax
call fcn.00401a70
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa8]
call fcn.00408c50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00408c50
jmp 0x40c393
push 0x4067f0
push 0x4f78f8
push 0x528b28
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
push 3
call fcn.004019e0
add esp, 4
push eax
call fcn.00401a20
add esp, 4
cvtsi2sd xmm0, eax
sub esp, 8
movsd qword [esp], xmm0
call fcn.00401bf0
add esp, 8
mov dword [ebp - 0x150], eax
push 0x4067f0
mov eax, dword [ebp - 0x150]
push eax
push 0x4f7904
push 0x528b28
call fcn.00403680
add esp, 8
push eax
call fcn.00403680
add esp, 8
mov ecx, eax
call fcn.00409a20
mov eax, dword [ebp - 0x150]
push eax
call fcn.00401a70
add esp, 4
mov esi, esp
push 0
push 0
push 0
push 0x40ab10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp esi, esp
call fcn.00450cd0
call fcn.0040ac70
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa8]
call fcn.00408c50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00408c50
push edx
mov ecx, ebp
push eax
lea edx, [0x40c3d0]
call fcn.00450c70
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00450d40
add esp, 0x6e8
cmp ebp, esp
call fcn.00450cd0
mov esp, ebp
pop ebp
ret