Function at 0x4099c5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f8
push ebx
push esi
push edi
push 0x697a6afe
push 1
call fcn.004010bb
pop ecx
pop ecx
push 4
push 0x3000
push 0x400
xor ebx, ebx
push ebx
call eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x38], 0x90bb1c9
mov dword [ebp - 0x34], 0xe0eb488
mov dword [ebp - 0x30], 0x75761a8c
mov dword [ecx], eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x2c], 0x88b1dc42
mov dword [ebp - 0x28], 0xe1d02d17
mov dword [ebp - 0x24], 0xe1d02d07
mov dword [ebp - 0x20], 0x54b64c2a
mov dword [ebp - 0x1c], 0xe8d65b72
mov dword [ebp - 0x18], 0x9837ded3
mov dword [ebp - 0x14], 0xc3ba4727
call fcn.00407713
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xb4]
push eax
mov dword [ebp - 0xb4], 0x21950496
mov dword [ebp - 0xb0], 0xd895e8d4
mov dword [ebp - 0xac], 0x87644894
mov dword [ebp - 0xa8], 0x19acadf8
mov dword [ebp - 0xa4], 0x54edba8c
mov dword [ebp - 0xa0], 0x54edba9e
mov dword [ebp - 0x9c], 0x56a2c862
mov dword [ebp - 0x98], 0x7be2a21f
mov dword [ebp - 0x94], 0xd909b3f7
mov dword [ebp - 0x90], 0x5cc2b2b9
mov word [ebp - 0x8c], 0x745c
call fcn.00407713
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0xe0], 0x22d71067
mov dword [ebp - 0xdc], 0xee915292
mov dword [ebp - 0xd8], 0xf6c81c0d
mov dword [ebp - 0xd4], 0x4b48f050
mov dword [ebp - 0xd0], 0x277e175b
mov dword [ebp - 0xcc], 0x277e174f
mov dword [ebp - 0xc8], 0xcbc22855
mov dword [ebp - 0xc4], 0x2a29b788
mov dword [ebp - 0xc0], 0x2eddcd3
mov dword [ebp - 0xbc], 0x11687c4e
mov dword [ebp - 0xb8], 0x32622e5c
call fcn.00407713
mov dword [ebp - 8], eax
lea eax, [ebp - 0x170]
push eax
mov dword [ebp - 0x170], 0x3c26eb05
mov dword [ebp - 0x16c], 0x524da051
mov dword [ebp - 0x168], 0x935c99a2
mov dword [ebp - 0x164], 0xd08d6cee
mov dword [ebp - 0x160], 0x43c0d58e
mov dword [ebp - 0x15c], 0x43c0d596
mov dword [ebp - 0x158], 0xd5cb1c64
mov dword [ebp - 0x154], 0x6f4706c1
mov dword [ebp - 0x150], 0x4cde7e26
mov dword [ebp - 0x14c], 0x631f7946
mov dword [ebp - 0x148], 0xf007880e
mov dword [ebp - 0x144], 0xda5fae23
call fcn.00407713
mov dword [ebp - 4], eax
mov dword [ebp - 0x2ac], 0xe42e99c9
mov dword [ebp - 0x2a8], 0xcc241604
mov dword [ebp - 0x2a4], 0xef6ccfe7
mov dword [ebp - 0x2a0], 0xfc129ada
mov dword [ebp - 0x29c], 0xf7e77ebe
lea eax, [ebp - 0x2ac]
mov dword [ebp - 0x298], 0xf7e77e9a
push eax
mov dword [ebp - 0x294], 0x77379a1d
mov dword [ebp - 0x290], 0x215fc7c6
mov dword [ebp - 0x28c], 0x14dc1b4f
mov dword [ebp - 0x288], 0xeeef69e8
mov dword [ebp - 0x284], 0xc51a7849
mov dword [ebp - 0x280], 0xc76cd979
mov dword [ebp - 0x27c], 0x6454f749
mov dword [ebp - 0x278], 0x57b79021
mov dword [ebp - 0x274], 0x6d9604a
call fcn.00407713
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0x1d4]
push eax
mov dword [ebp - 0x1d4], 0xf80d21c5
mov dword [ebp - 0x1d0], 0xf35502c4
mov dword [ebp - 0x1cc], 0x12aaaa67
mov dword [ebp - 0x1c8], 0x510ed401
mov dword [ebp - 0x1c4], 0x55e9be7d
mov dword [ebp - 0x1c0], 0x55e9be67
mov dword [ebp - 0x1bc], 0xddee70f4
mov dword [ebp - 0x1b8], 0x55706b42
mov dword [ebp - 0x1b4], 0x62ad5364
mov dword [ebp - 0x1b0], 0xb4d90ac2
mov dword [ebp - 0x1ac], 0xcce13f8
mov dword [ebp - 0x1a8], 0x901a571f
mov word [ebp - 0x1a4], 0x10e0
call fcn.00407713
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x208]
push eax
mov dword [ebp - 0x208], 0xea11b3e9
mov dword [ebp - 0x204], 0x45095657
mov dword [ebp - 0x200], 0xe53bdcfe
mov dword [ebp - 0x1fc], 0xd05882c1
mov dword [ebp - 0x1f8], 0x2a863dbc
mov dword [ebp - 0x1f4], 0x2a863da6
mov dword [ebp - 0x1f0], 0x7bd36ccc
mov dword [ebp - 0x1ec], 0x69945c7d
mov dword [ebp - 0x1e8], 0x179b5c31
mov dword [ebp - 0x1e4], 0xdb606515
mov dword [ebp - 0x1e0], 0xa5adb31b
mov dword [ebp - 0x1dc], 0x7a3630b4
mov word [ebp - 0x1d8], 0xea0c
call fcn.00407713
mov dword [ebp - 0x2bc], eax
lea eax, [ebp - 0x23c]
push eax
mov dword [ebp - 0x23c], 0x5e04e976
mov dword [ebp - 0x238], 0xed121a3e
mov dword [ebp - 0x234], 0xef4ed6f
mov dword [ebp - 0x230], 0x3f8eb7d5
mov dword [ebp - 0x22c], 0xe0e8432e
mov dword [ebp - 0x228], 0xe0e84334
mov dword [ebp - 0x224], 0x9237bb19
mov dword [ebp - 0x220], 0xb21ba25d
mov dword [ebp - 0x21c], 0xd0af4928
mov dword [ebp - 0x218], 0x8c6c97b6
mov dword [ebp - 0x214], 0x4645232c
mov dword [ebp - 0x210], 0xdb1de8f1
mov word [ebp - 0x20c], 0x1533
call fcn.00407713
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x60], 0xbf4b62fd
mov dword [ebp - 0x5c], 0x4749d76c
mov dword [ebp - 0x58], 0xd6105db4
mov dword [ebp - 0x54], 0x9d268062
mov dword [ebp - 0x50], 0x75ad21d8
mov dword [ebp - 0x4c], 0x75ad21c8
mov dword [ebp - 0x48], 0xded3991
mov dword [ebp - 0x44], 0xf395cec2
mov dword [ebp - 0x40], 0x982ab4e1
mov dword [ebp - 0x3c], 0x90d7b95a
call fcn.00407713
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x110], 0xf4b68c3a
mov dword [ebp - 0x10c], 0xcbdcc55c
lea eax, [ebp - 0x110]
mov dword [ebp - 0x108], 0xefe313b7
push eax
mov dword [ebp - 0x104], 0x2d6700b0
mov dword [ebp - 0x100], 0x5082eac4
mov dword [ebp - 0xfc], 0x5082ead2
mov dword [ebp - 0xf8], 0xce383451
mov dword [ebp - 0xf4], 0xab28094f
mov dword [ebp - 0xf0], 0x8ad8660e
mov dword [ebp - 0xec], 0xa8c4a9fa
mov dword [ebp - 0xe8], 0x9090ede0
mov word [ebp - 0xe4], 0x4e6c
call fcn.00407713
mov ebx, eax
mov dword [ebp - 0x140], 0xed55b36d
lea eax, [ebp - 0x140]
mov dword [ebp - 0x13c], 0x9872e8e4
push eax
mov dword [ebp - 0x138], 0x244db1c7
mov dword [ebp - 0x134], 0xf59e84b4
mov dword [ebp - 0x130], 0x27e0e432
mov dword [ebp - 0x12c], 0x27e0e424
mov dword [ebp - 0x128], 0x2eac3572
mov dword [ebp - 0x124], 0x70207f35
mov dword [ebp - 0x120], 0x71a38142
mov dword [ebp - 0x11c], 0x64f9c469
mov dword [ebp - 0x118], 0xbc753444
mov word [ebp - 0x114], 0xa2d8
call fcn.00407713
mov edi, eax
mov dword [ebp - 0x270], 0x2eafe3e3
lea eax, [ebp - 0x270]
mov dword [ebp - 0x26c], 0x400b0143
push eax
mov dword [ebp - 0x268], 0x69b77306
mov dword [ebp - 0x264], 0x2ee9cc28
mov dword [ebp - 0x260], 0x7523ee90
mov dword [ebp - 0x25c], 0x7523ee8a
mov dword [ebp - 0x258], 0xc708b128
mov dword [ebp - 0x254], 0x5057753b
mov dword [ebp - 0x250], 0xde4d3377
mov dword [ebp - 0x24c], 0x79ffebf3
mov dword [ebp - 0x248], 0xf31de731
mov dword [ebp - 0x244], 0x7e1624f7
mov word [ebp - 0x240], 0x128c
call fcn.00407713
mov esi, eax
mov dword [ebp - 0x88], 0x9d96c4af
lea eax, [ebp - 0x88]
mov dword [ebp - 0x84], 0x28684d57
push eax
mov dword [ebp - 0x80], 0x15026896
mov dword [ebp - 0x7c], 0xfce56f06
mov dword [ebp - 0x78], 0xf3697d7
mov dword [ebp - 0x74], 0xf3697c7
mov dword [ebp - 0x70], 0xebaf5aee
mov dword [ebp - 0x6c], 0x104677ac
mov dword [ebp - 0x68], 0xeff451e8
mov dword [ebp - 0x64], 0xde9fdfec
call fcn.00407713
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2f8], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x2f4], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x2f0], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x2ec], ecx
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x1a0], 0xf53e1e2e
mov dword [ebp - 0x19c], 0x78a053a9
mov dword [ebp - 0x198], 0xab3dc06e
mov dword [ebp - 0x194], 0xc8baa519
mov dword [ebp - 0x190], 0x29fa0aee
mov dword [ebp - 0x18c], 0x29fa0af6
mov dword [ebp - 0x188], 0x52f3358b
mov dword [ebp - 0x184], 0xa82bebfe
mov dword [ebp - 0x180], 0x37dd9268
mov dword [ebp - 0x17c], 0x863a17bd
mov dword [ebp - 0x178], 0xbb1c7fee
mov dword [ebp - 0x174], 0x9bbbc594
mov dword [ebp - 0x2e8], ecx
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2e4], ecx
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2e0], ecx
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x2dc], ecx
mov ecx, dword [ebp - 0x2b0]
push eax
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x2d4], ebx
mov dword [ebp - 0x2d0], edi
mov dword [ebp - 0x2cc], esi
call fcn.00407713
push 0x697a6afe
push 1
mov dword [ebp - 0x2c4], eax
call fcn.004010bb
add esp, 0x40
xor ebx, ebx
push 4
push 0x3000
push 4
push ebx
call eax
mov edi, eax
test edi, edi
jne 0x40a19a
xor eax, eax
jmp 0x40a314
push 0x5bc1d14f
push 1
mov dword [edi], 0x22c
call fcn.004010bb
pop ecx
pop ecx
push ebx
push 2
call eax
mov esi, eax
mov dword [ebp - 0x2b0], esi
cmp esi, 0xffffffff
jne 0x40a1d9
push 0x3a35705f
push 1
call fcn.004010bb
pop ecx
pop ecx
push 0x8000
push ebx
push edi
call eax
jmp 0x40a193
xor eax, eax
mov dword [ebp - 0xc], ebx
push edi
push esi
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], eax
call fcn.004094f3
pop ecx
pop ecx
test eax, eax
je 0x40a2d0
cmp dword [ebp - 0x10], 0
jne 0x40a2a2
xor eax, eax
lea ebx, [edi + 0x24]
mov esi, eax
push ebx
push dword [ebp + esi*4 - 0x2f8]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x40a223
inc esi
cmp esi, 0xe
jb 0x40a209
jmp 0x40a280
cmp dword [ebp - 8], 0
push ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], 1
push dword [ebx]
jne 0x40a23d
call fcn.00401859
jmp 0x40a242
call fcn.0040183e
mov esi, dword [ebx]
push 0x2ca1b5f0
push 1
call fcn.004010bb
add esp, 0x10
push 0x411ab0
push esi
call eax
inc dword [ebp - 8]
lea eax, [edi + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0xc], ecx
cmp ecx, 0x3c0
jbe 0x40a280
mov dword [ebp - 0x10], 1
mov esi, dword [ebp - 0x2b0]
push edi
push esi
call fcn.0040953b
pop ecx
pop ecx
test eax, eax
je 0x40a2a2
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x40a1f8
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40a2c8
mov ebx, dword [ebp + 8]
xor ecx, ecx
mov eax, dword [ebx]
cmp word [eax], cx
je 0x40a2c5
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebx]
xor edx, edx
mov word [ecx + eax*2 - 2], dx
mov ebx, dword [ebp - 4]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0xc]
mov dword [eax], ecx
push 0x3a35705f
push 1
call fcn.004010bb
pop ecx
pop ecx
push 0x8000
xor ecx, ecx
push ecx
push edi
call eax
push esi
call fcn.004013d8
pop ecx
test ebx, ebx
jne 0x40a312
mov eax, dword [ebp + 8]
push 0x3a35705f
push 1
mov esi, dword [eax]
call fcn.004010bb
pop ecx
pop ecx
push 0x8000
xor ecx, ecx
push ecx
push esi
call eax
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8