Function at 0x40ece0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Log keystrokes via application hook

Disassembly:
push 0xffffffffffffffff
push 0x5e143b
mov eax, dword fs:[0]
push eax
mov eax, 0x106c
call fcn.004a0d90
mov eax, dword [0x658aa8]
xor eax, esp
mov dword [esp + 0x1068], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x658aa8]
xor eax, esp
push eax
lea eax, [esp + 0x1080]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x1090]
mov edi, ecx
mov dword [esp + 0x1c], edi
test edi, edi
je 0x410231
cmp dword [esp + 0x1094], 0x20
jne 0x410231
cmp dword [edi], 0xa
mov al, 0x35
mov cl, 0x47
mov byte [esp + 0xe15], al
mov byte [esp + 0xe16], al
mov al, 0x33
mov bl, 0xb5
mov byte [esp + 0xe04], 0x67
mov byte [esp + 0xe05], 0x61
mov byte [esp + 0xe06], 0x6d
mov byte [esp + 0xe07], 0x65
mov byte [esp + 0xe08], 0
mov byte [esp + 0xe24], 0x61
mov byte [esp + 0xe25], 0x6e
mov byte [esp + 0xe26], 0x73
mov byte [esp + 0xe27], 0x77
mov byte [esp + 0xe28], 0x65
mov byte [esp + 0xe29], 0x72
mov byte [esp + 0xe2a], 0
mov byte [esp + 0xe1c], bl
mov byte [esp + 0xe1d], 0xc7
mov byte [esp + 0xe1e], 0xba
mov byte [esp + 0xe1f], 0xc5
mov byte [esp + 0xe20], 0xc6
mov byte [esp + 0xe21], 0xf7
mov byte [esp + 0xe22], 0
mov byte [esp + 0xe14], cl
mov byte [esp + 0xe17], 0x36
mov byte [esp + 0xe18], 0x39
mov byte [esp + 0xe19], 0
mov byte [esp + 0xe0c], cl
mov byte [esp + 0xe0d], al
mov byte [esp + 0xe0e], 0x32
mov byte [esp + 0xe0f], 0x31
mov byte [esp + 0xe10], al
mov byte [esp + 0xe11], 0
jne 0x40ef17
cmp dword [edi + 0x18], 0
je 0x40ef17
lea eax, [edi + 4]
push eax
lea ecx, [esp + 0x24]
call fcn.00413a80
push 4
mov dword [esp + 0x108c], 0
call fcn.0048fcc0
add esp, 4
test eax, eax
je 0x40ee7e
mov dword [eax], 0
mov esi, eax
jmp 0x40ee80
xor esi, esi
cmp dword [esp + 0x38], 0x10
mov eax, dword [esp + 0x24]
jae 0x40ee8f
lea eax, [esp + 0x24]
push eax
call fcn.0041ca00
test al, al
je 0x40ef03
lea ecx, [esp + 0xe04]
push ecx
xor ecx, ecx
mov eax, esi
call fcn.0041cab0
push eax
lea ecx, [esp + 0xdbc]
call fcn.00413e80
lea edx, [esp + 0xe0c]
push edx
lea ecx, [esp + 0xdbc]
mov byte [esp + 0x108c], 1
call fcn.004129b0
test eax, eax
je 0x40f537
lea eax, [esp + 0xe14]
push eax
lea ecx, [esp + 0xdbc]
call fcn.004129b0
test eax, eax
je 0x40f537
lea ecx, [esp + 0xdb8]
call fcn.00404080
lea ecx, [esp + 0x20]
mov dword [esp + 0x1088], 0xffffffff
call fcn.00413f50
mov esi, ebp
call fcn.0040d9d0
cmp dword [edi], 0
jne 0x40f677
mov al, 0xc9
mov cl, 0xfa
mov byte [esp + 0xdc7], cl
mov byte [esp + 0xde5], cl
mov cl, 0x51
mov dl, 0xbe
mov byte [esp + 0xdc6], al
mov byte [esp + 0xdba], al
mov byte [esp + 0xde4], al
mov byte [esp + 0xdf3], al
lea eax, [esp + 0xdd8]
mov byte [esp + 0xdf0], cl
mov byte [esp + 0xdf1], cl
mov byte [esp + 0xdd8], 0xd3
mov byte [esp + 0xdd9], 0xa2
mov byte [esp + 0xdda], 0xd0
mov byte [esp + 0xddb], 0xdb
mov byte [esp + 0xddc], 0xc1
mov byte [esp + 0xddd], 0xaa
mov byte [esp + 0xdde], 0xc3
mov byte [esp + 0xddf], 0xcb
mov byte [esp + 0xde0], 0
mov byte [esp + 0xdf8], 0xb4
mov byte [esp + 0xdf9], 0xa9
mov byte [esp + 0xdfa], 0xd4
mov byte [esp + 0xdfb], 0xbd
mov byte [esp + 0xdfc], 0xbb
mov byte [esp + 0xdfd], 0xf0
mov byte [esp + 0xdfe], 0xcf
mov byte [esp + 0xdff], 0xdf
mov byte [esp + 0xe00], 0
mov byte [esp + 0xdb0], 0xc4
mov byte [esp + 0xdb1], 0xe6
mov byte [esp + 0xdb2], 0xd5
mov byte [esp + 0xdb3], 0xbd
mov byte [esp + 0xdb4], 0
mov byte [esp + 0xdc0], dl
mov byte [esp + 0xdc1], 0xf8
mov byte [esp + 0xdc2], bl
mov byte [esp + 0xdc3], 0xd8
mov byte [esp + 0xdc4], 0xc7
mov byte [esp + 0xdc5], 0xf3
mov byte [esp + 0xdc8], 0
mov byte [esp + 0xdb8], 0xc7
mov byte [esp + 0xdb9], 0xb9
mov byte [esp + 0xdbb], 0xf1
mov byte [esp + 0xdbc], 0xbc
mov byte [esp + 0xdbd], 0xcd
mov byte [esp + 0xdbe], 0
mov byte [esp + 0xde6], 0xcb
mov byte [esp + 0xde7], 0xc0
mov byte [esp + 0xde8], dl
mov byte [esp + 0xde9], 0xd1
mov byte [esp + 0xdea], 0xbb
mov byte [esp + 0xdeb], 0xf7
mov byte [esp + 0xdec], 0
mov byte [esp + 0xdcc], 0x4e
mov byte [esp + 0xdcd], 0x42
mov byte [esp + 0xdce], 0x41
mov byte [esp + 0xdcf], 0x32
mov byte [esp + 0xdd0], 0x4b
mov byte [esp + 0xdd1], 0x4f
mov byte [esp + 0xdd2], 0x4c
mov byte [esp + 0xdd3], 0x32
mov byte [esp + 0xdd4], 0
mov byte [esp + 0xdf2], 0xb7
mov byte [esp + 0xdf4], 0xb3
mov byte [esp + 0xdf5], bl
mov byte [esp + 0xdf6], 0
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40f130
mov ebp, dword [0x664a40]
sub eax, ecx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f149
mov eax, esi
mov edi, dword [0x664a44]
mov ebx, dword [0x664a30]
mov edx, ebx
cmp edi, 0x10
jae 0x40f161
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xddc]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f186
cmp ebp, esi
jb 0x40f186
cmp ebp, esi
setne al
test eax, eax
je 0x40f360
lea eax, [esp + 0xdf8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f190
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f1a3
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f1af
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdfc]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f1d4
cmp ebp, esi
jb 0x40f1d4
cmp ebp, esi
setne al
test eax, eax
je 0x40f360
lea eax, [esp + 0xdb0]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f1e0
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f1f3
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f1ff
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdb4]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f224
cmp ebp, esi
jb 0x40f224
cmp ebp, esi
setne al
test eax, eax
je 0x40f360
lea eax, [esp + 0xdb8]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f230
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f243
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f24f
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdbc]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f274
cmp ebp, esi
jb 0x40f274
cmp ebp, esi
setne al
test eax, eax
je 0x40f360
lea eax, [esp + 0xde4]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f280
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f293
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f29f
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xde8]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f2c4
cmp ebp, esi
jb 0x40f2c4
cmp ebp, esi
setne al
test eax, eax
je 0x40f360
lea eax, [esp + 0xdcc]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f2d0
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f2e3
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f2ef
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdd0]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f310
cmp ebp, esi
jb 0x40f310
cmp ebp, esi
setne al
test eax, eax
je 0x40f360
lea eax, [esp + 0xdf0]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f320
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f333
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f33f
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdf4]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f3a9
cmp ebp, esi
jb 0x40f3a9
cmp ebp, esi
setne al
test eax, eax
jne 0x40f3a9
mov eax, dword [0x66bd98]
test eax, eax
je 0x40f37a
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov dword [0x66bd98], 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 0x404a80
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov edi, dword [0x664a44]
mov ebp, dword [0x664a40]
mov ebx, dword [0x664a30]
mov dword [0x66bd98], eax
lea eax, [esp + 0xdd8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f3b3
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f3c6
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f3d2
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xddc]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f3f7
cmp ebp, esi
jb 0x40f3f7
cmp ebp, esi
setne al
test eax, eax
je 0x40f4ec
lea eax, [esp + 0xdb0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f401
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f414
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f420
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdb4]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f445
cmp ebp, esi
jb 0x40f445
cmp ebp, esi
setne al
test eax, eax
je 0x40f4ec
lea eax, [esp + 0xdb8]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f450
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f463
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f46f
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdbc]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f490
cmp ebp, esi
jb 0x40f490
cmp ebp, esi
setne al
test eax, eax
je 0x40f4ec
lea eax, [esp + 0xde4]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f4a0
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f4b3
mov eax, esi
mov edx, ebx
cmp edi, 0x10
jae 0x40f4bf
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xde8]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f5de
cmp ebp, esi
jb 0x40f5de
cmp ebp, esi
setne al
test eax, eax
jne 0x40f5de
mov eax, dword [0x66bd9c]
test eax, eax
je 0x40f506
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov dword [0x66bd9c], 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 0x404b00
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov edi, dword [0x664a44]
mov ebp, dword [0x664a40]
mov ebx, eax
mov dword [0x66bd9c], ebx
jmp 0x40f5e4
lea ecx, [esp + 0xe24]
push ecx
xor ecx, ecx
mov eax, esi
call fcn.0041cab0
push eax
lea ecx, [esp + 0x20]
call fcn.00413e80
push ecx
mov bl, 2
mov byte [esp + 0x108c], bl
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0xdb4], esp
push edx
call fcn.00403ed0
lea eax, [esp + 0x40]
push eax
call fcn.004167c0
sub esp, 0x44
mov byte [esp + 0x10cc], 3
mov eax, esp
mov dword [esp + 0xdf4], esp
push 0xffffffffffffffff
lea ecx, [esp + 0xe64]
call fcn.00428cc0
mov ecx, dword [ebp + 4]
push ecx
lea ecx, [esp + 0x84]
call fcn.00416910
lea esi, [esp + 0x3c]
mov byte [esp + 0x1088], bl
call fcn.004168b0
lea ecx, [esp + 0x1c]
call fcn.00404080
lea ecx, [esp + 0xdb8]
call fcn.00404080
lea ecx, [esp + 0x20]
call fcn.00413f50
jmp 0x410231
mov ebx, dword [0x66bd9c]
lea eax, [esp + 0xdc0]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40f5f0
sub eax, edx
mov esi, eax
mov eax, ebp
cmp ebp, esi
jb 0x40f603
mov eax, esi
mov edx, dword [0x664a30]
cmp edi, 0x10
jae 0x40f613
mov edx, 0x664a30
push eax
lea ecx, [esp + 0xdc4]
call fcn.00413900
add esp, 4
test eax, eax
jne 0x410200
cmp ebp, esi
jb 0x410200
cmp ebp, esi
setne al
test eax, eax
jne 0x410200
test ebx, ebx
je 0x40f655
push ebx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov dword [0x66bd9c], 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push 0x404b00
push 0xe
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov dword [0x66bd9c], eax
jmp 0x410200
test byte [0x66c370], 1
mov edi, 1
jne 0x40f6bd
or dword [0x66c370], edi
push 0x637908
mov ecx, 0x66c280
mov dword [esp + 0x108c], 4
call fcn.00414510
push 0x5e3db0
call fcn.0049a10d
add esp, 4
mov dword [esp + 0x1088], 0xffffffff
add dword [0x66bf84], edi
cmp dword [0x66bf80], 0
je 0x40fa3b
cmp dword [0x66c298], 0x10
mov edx, dword [0x66c284]
jae 0x40f6e4
mov edx, 0x66c284
push 0
mov ecx, 0x637908
call fcn.00413900
add esp, 4
test eax, eax
jne 0x40f708
cmp dword [0x66c294], eax
setne al
test eax, eax
je 0x40fa3b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
sub esi, dword [0x66bf80]
call fcn.00413690
test eax, eax
jne 0x40fa25
cmp esi, 0xdbba0
jae 0x40fa25
mov esi, 5
cmp dword [0x66bf84], esi
jne 0x40fa25
mov cl, 0xc4
mov al, 0xd1
mov byte [esp + 0xe48], cl
mov byte [esp + 0xe50], cl
mov cl, 0xa5
lea edi, [esp + 0x6f4]
mov byte [esp + 0xe40], 0xd2
mov byte [esp + 0xe41], al
mov byte [esp + 0xe42], 0xbc
mov byte [esp + 0xe43], 0xec
mov byte [esp + 0xe44], 0xb2
mov byte [esp + 0xe45], 0xe2
mov byte [esp + 0xe46], bl
mov byte [esp + 0xe47], 0xbd
mov byte [esp + 0xe49], 0xfa
mov byte [esp + 0xe4a], 0xb6
mov byte [esp + 0xe4b], 0xe0
mov byte [esp + 0xe4c], 0xb4
mov byte [esp + 0xe4d], 0xce
mov byte [esp + 0xe4e], 0xce
mov byte [esp + 0xe4f], 0xb4
mov byte [esp + 0xe51], 0xdc
mov byte [esp + 0xe52], 0xb3
mov byte [esp + 0xe53], 0xc9
mov byte [esp + 0xe54], 0xb9
mov byte [esp + 0xe55], 0xa6
mov byte [esp + 0xe56], bl
mov byte [esp + 0xe57], 0xc7
mov byte [esp + 0xe58], 0xc2
mov byte [esp + 0xe59], 0xbc
mov byte [esp + 0xe5a], 0xa3
mov byte [esp + 0xe5b], 0xac
mov byte [esp + 0xe5c], 0xc7
mov byte [esp + 0xe5d], 0xeb
mov byte [esp + 0xe5e], 0xc3
mov byte [esp + 0xe5f], 0xe8
mov byte [esp + 0xe60], 0xca
mov byte [esp + 0xe61], 0xf6
mov byte [esp + 0xe62], bl
mov byte [esp + 0xe63], 0xc7
mov byte [esp + 0xe64], 0xba
mov byte [esp + 0xe65], 0xc5
mov byte [esp + 0xe66], 0xce
mov byte [esp + 0xe67], 0xca
mov byte [esp + 0xe68], 0xcc
mov byte [esp + 0xe69], 0xe2
mov byte [esp + 0xe6a], 0xa3
mov byte [esp + 0xe6b], 0xac
mov byte [esp + 0xe6c], 0xb3
mov byte [esp + 0xe6d], 0xb7
mov byte [esp + 0xe6e], bl
mov byte [esp + 0xe6f], cl
mov byte [esp + 0xe70], 0xd6
mov byte [esp + 0xe71], 0xd8
mov byte [esp + 0xe72], 0xd0
mov byte [esp + 0xe73], 0xc2
mov byte [esp + 0xe74], 0xcf
mov byte [esp + 0xe75], 0xc2
mov byte [esp + 0xe76], bl
mov byte [esp + 0xe77], cl
mov byte [esp + 0xe78], 0xa1
mov byte [esp + 0xe79], 0xa3
mov byte [esp + 0xe7a], 0
mov byte [esp + 0xdc0], 0xd3
mov byte [esp + 0xdc1], al
mov byte [esp + 0xdc2], 0xc7
mov byte [esp + 0xdc3], 0xe9
mov byte [esp + 0xdc4], 0xcc
mov byte [esp + 0xdc5], 0xe1
mov byte [esp + 0xdc6], 0xd0
mov byte [esp + 0xdc7], al
mov byte [esp + 0xdc8], 0
call fcn.004040a0
push 0
sub esp, 0x44
mov dword [esp + 0x10d0], esi
mov eax, esp
mov dword [esp + 0xdf8], esp
push 0xffffffffffffffff
mov ecx, 0x634b08
call fcn.00428cc0
sub esp, 0x44
mov eax, esp
mov dword [esp + 0xe3c], esp
push 0xffffffffffffffff
lea ecx, [esp + 0xed0]
call fcn.00428cc0
sub esp, 0x44
mov eax, esp
mov dword [esp + 0xe80], esp
push 0xffffffffffffffff
lea ecx, [esp + 0xe94]
call fcn.00428cc0
mov edx, dword [0x66bdcc]
push edx
mov ecx, edi
call fcn.004046f0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0xdcc], esp
push 0x664a10
call fcn.00413a80
sub esp, 0x1c
mov byte [esp + 0x10c0], 6
mov ecx, esp
mov dword [esp + 0xdf0], esp
push 0x635340
call fcn.00414510
mov edi, ebp
mov byte [esp + 0x10c0], 5
call fcn.0040d850
lea esi, [esp + 0x6f4]
mov dword [esp + 0x1088], 0xffffffff
call fcn.004041b0
jmp 0x40fa3b
call fcn.00413690
test eax, eax
je 0x40fa3b
mov byte [0x66bf7d], 0
mov dword [0x66bf84], edi
push 0xffffffffffffffff
push 0
push 0x664a10
mov ecx, 0x66c280
call fcn.00414010
cmp byte [0x66bf7d], 0
jne 0x40fa62
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x66bf80], eax
lea edi, [esp + 0x3c]
call fcn.004040a0
mov dword [esp + 0x1088], 7
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x18], 0
jne 0x40fb2b
lea ecx, [esp + 0xe2c]
push ecx
lea ecx, [eax + 4]
mov byte [esp + 0xe30], bl
mov byte [esp + 0xe31], 0xc7
mov byte [esp + 0xe32], 0xc2
mov byte [esp + 0xe33], 0xbc
mov byte [esp + 0xe34], 0xca
mov byte [esp + 0xe35], 0xa7
mov byte [esp + 0xe36], 0xb0
mov byte [esp + 0xe37], 0xdc
mov byte [esp + 0xe38], 0xa3
mov byte [esp + 0xe39], 0xac
mov byte [esp + 0xe3a], 0xc7
mov byte [esp + 0xe3b], 0xeb
mov byte [esp + 0xe3c], 0xd6
mov byte [esp + 0xe3d], 0xd8
mov byte [esp + 0xe3e], 0xca
mov byte [esp + 0xe3f], 0xd4
mov byte [esp + 0xe40], 0xa3
mov byte [esp + 0xe41], 0xa1
mov byte [esp + 0xe42], 0
call fcn.004144e0
xor eax, eax
push 0x32
push eax
lea edx, [esp + 0xed2]
push edx
mov byte [esp + 0xe88], bl
mov byte [esp + 0xe89], 0xc7
mov byte [esp + 0xe8a], 0xba
mov byte [esp + 0xe8b], 0xc5
mov byte [esp + 0xe8c], 0xc6
mov byte [esp + 0xe8d], 0xf7
mov byte [esp + 0xe8e], bl
mov byte [esp + 0xe8f], 0xc7
mov byte [esp + 0xe90], 0xc2
mov byte [esp + 0xe91], 0xbc
mov byte [esp + 0xe92], 0xb9
mov byte [esp + 0xe93], 0xfd
mov byte [esp + 0xe94], 0xb3
mov byte [esp + 0xe95], 0xcc
mov byte [esp + 0xe96], 0xd6
mov byte [esp + 0xe97], 0xd0
mov byte [esp + 0xe98], 0xb3
mov byte [esp + 0xe99], 0xf6
mov byte [esp + 0xe9a], 0xc1
mov byte [esp + 0xe9b], 0xcb
mov byte [esp + 0xe9c], bl
mov byte [esp + 0xe9d], 0xe3
mov byte [esp + 0xe9e], 0xd0
mov byte [esp + 0xe9f], 0xa1
mov byte [esp + 0xea0], 0xce
mov byte [esp + 0xea1], 0xca
mov byte [esp + 0xea2], 0xcc
mov byte [esp + 0xea3], 0xe2
mov byte [esp + 0xea4], 0x28
mov byte [esp + 0xea5], 0x75
mov byte [esp + 0xea6], 0x2f
mov byte [esp + 0xea7], 0x70
mov byte [esp + 0xea8], 0
mov dword [esp + 0xea9], eax
mov dword [esp + 0xead], eax
mov dword [esp + 0xeb1], eax
mov dword [esp + 0xeb5], eax
mov dword [esp + 0xeb9], eax
mov dword [esp + 0xebd], eax
mov dword [esp + 0xec1], eax
mov word [esp + 0xec5], ax
mov byte [esp + 0xec7], al
mov byte [esp + 0xec8], 0x73
mov byte [esp + 0xec9], 0x74
mov byte [esp + 0xeca], 0x65
mov byte [esp + 0xecb], 0x61
mov byte [esp + 0xecc], 0x6d
mov byte [esp + 0xecd], bl
mov byte [esp + 0xece], 0xc7
mov byte [esp + 0xecf], 0xc2
mov byte [esp + 0xed0], 0xbc
mov byte [esp + 0xed1], 0xca
mov byte [esp + 0xed2], 0xa7
mov byte [esp + 0xed3], 0xb0
mov byte [esp + 0xed4], 0xdc
mov byte [esp + 0xed5], al
call fcn.004a0660
add esp, 0xc
mov byte [esp + 0xefc], bl
mov byte [esp + 0xefd], 0xc7
mov byte [esp + 0xefe], 0xba
mov byte [esp + 0xeff], 0xc5
mov byte [esp + 0xf00], 0xc6
mov byte [esp + 0xf01], 0xf7
mov byte [esp + 0xf02], 0xd5
mov byte [esp + 0xf03], 0xd2
mov byte [esp + 0xf04], 0xb2
mov byte [esp + 0xf05], 0xbb
mov byte [esp + 0xf06], bl
mov byte [esp + 0xf07], 0xbd
mov byte [esp + 0xf08], 0xd3
mov byte [esp + 0xf09], 0xce
mov byte [esp + 0xf0a], 0xcf
mov byte [esp + 0xf0b], 0xb7
mov byte [esp + 0xf0c], 0
push 0x2f
lea eax, [esp + 0xf11]
push 0
push eax
call fcn.004a0660
add esp, 0xc
push 0x2c
lea ecx, [esp + 0xf54]
push 0
push ecx
mov byte [esp + 0xf48], bl
mov byte [esp + 0xf49], 0xc7
mov byte [esp + 0xf4a], 0xba
mov byte [esp + 0xf4b], 0xc5
mov byte [esp + 0xf4c], 0xc6
mov byte [esp + 0xf4d], 0xf7
mov byte [esp + 0xf4e], 0xc6
mov byte [esp + 0xf4f], 0xf4
mov byte [esp + 0xf50], 0xb6
mov byte [esp + 0xf51], 0xaf
mov byte [esp + 0xf52], 0x53
mov byte [esp + 0xf53], 0x54
mov byte [esp + 0xf54], 0x45
mov byte [esp + 0xf55], 0x41
mov byte [esp + 0xf56], 0x4d
mov byte [esp + 0xf57], 0xca
mov byte [esp + 0xf58], 0xa7
mov byte [esp + 0xf59], 0xb0
mov byte [esp + 0xf5a], 0xdc
mov byte [esp + 0xf5b], 0
call fcn.004a0660
add esp, 0xc
push 0x2d
lea edx, [esp + 0xf93]
push 0
push edx
mov byte [esp + 0xf88], bl
mov byte [esp + 0xf89], 0xc7
mov byte [esp + 0xf8a], 0xba
mov byte [esp + 0xf8b], 0xc5
mov byte [esp + 0xf8c], 0xc6
mov byte [esp + 0xf8d], 0xf7
mov byte [esp + 0xf8e], 0xb4
mov byte [esp + 0xf8f], 0xf2
mov byte [esp + 0xf90], 0xbf
mov byte [esp + 0xf91], 0xaa
mov byte [esp + 0xf92], 0xd3
mov byte [esp + 0xf93], 0xce
mov byte [esp + 0xf94], 0xcf
mov byte [esp + 0xf95], 0xb7
mov byte [esp + 0xf96], 0xca
mov byte [esp + 0xf97], 0xa7
mov byte [esp + 0xf98], 0xb0
mov byte [esp + 0xf99], 0xdc
mov byte [esp + 0xf9a], 0
call fcn.004a0660
add esp, 0xc
push 0x31
lea eax, [esp + 0xfcf]
push 0
push eax
mov byte [esp + 0xfc8], 0xd5
mov byte [esp + 0xfc9], 0xd2
mov byte [esp + 0xfca], 0xb2
mov byte [esp + 0xfcb], 0xbb
mov byte [esp + 0xfcc], bl
mov byte [esp + 0xfcd], 0xbd
mov byte [esp + 0xfce], 0xd3
mov byte [esp + 0xfcf], 0xce
mov byte [esp + 0xfd0], 0xcf
mov byte [esp + 0xfd1], 0xb7
mov byte [esp + 0xfd2], 0xc2
mov byte [esp + 0xfd3], 0xb7
mov byte [esp + 0xfd4], 0xbe
mov byte [esp + 0xfd5], 0xb6
mov byte [esp + 0xfd6], 0
call fcn.004a0660
add esp, 0xc
mov byte [esp + 0xffc], bl
mov byte [esp + 0xffd], 0xc7
mov byte [esp + 0xffe], 0xba
mov byte [esp + 0xfff], 0xc5
push 0x2c
lea ecx, [esp + 0x1014]
push 0
push ecx
mov byte [esp + 0x100c], 0xc6
mov byte [esp + 0x100d], 0xf7
mov byte [esp + 0x100e], bl
mov byte [esp + 0x100f], 0xc7
mov byte [esp + 0x1010], 0xc2
mov byte [esp + 0x1011], 0xbc
mov byte [esp + 0x1012], 0x53
mov byte [esp + 0x1013], 0x54
mov byte [esp + 0x1014], 0x45
mov byte [esp + 0x1015], 0x41
mov byte [esp + 0x1016], 0x4d
mov byte [esp + 0x1017], 0xb3
mov byte [esp + 0x1018], 0xac
mov byte [esp + 0x1019], 0xca
mov byte [esp + 0x101a], 0xb1
mov byte [esp + 0x101b], 0
call fcn.004a0660
add esp, 0xc
push 0x2d
lea edx, [esp + 0x1053]
push 0
push edx
mov byte [esp + 0x1048], 0xd3
mov byte [esp + 0x1049], 0xce
mov byte [esp + 0x104a], 0xcf
mov byte [esp + 0x104b], 0xb7
mov byte [esp + 0x104c], 0xbf
mov byte [esp + 0x104d], 0xcd
mov byte [esp + 0x104e], 0xbb
mov byte [esp + 0x104f], 0xa7
mov byte [esp + 0x1050], 0xb6
mov byte [esp + 0x1051], 0xcb
mov byte [esp + 0x1052], 0xc6
mov byte [esp + 0x1053], 0xf4
mov byte [esp + 0x1054], 0xb6
mov byte [esp + 0x1055], 0xaf
mov byte [esp + 0x1056], 0xb3
mov byte [esp + 0x1057], 0xac
mov byte [esp + 0x1058], 0xca
mov byte [esp + 0x1059], 0xb1
mov byte [esp + 0x105a], 0
call fcn.004a0660
mov edi, dword [esp + 0x28]
add esp, 0xc
xor ebp, ebp
mov byte [esp + 0x1b], 0
add edi, 4
lea esi, [esp + 0xe7c]
lea esp, [esp]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4100f5
sub eax, edx
push eax
push esi
push edi
call fcn.00412cc0
cmp eax, 0xffffffff
jne 0x41011a
inc ebp
add esi, 0x40
cmp ebp, 8
jl 0x4100f0
mov al, byte [esp + 0x1b]
jmp 0x41011c
mov al, 1
push 0
sub esp, 0x44
mov esi, esp
mov byte [esp + 0x71e], al
mov dword [esp + 0xdf8], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
mov byte [esp + 0xe18], bl
mov byte [esp + 0xe19], 0xc7
mov byte [esp + 0xe1a], 0xc2
mov byte [esp + 0xe1b], 0xbc
mov byte [esp + 0xe1c], 0xca
mov byte [esp + 0xe1d], 0xa7
mov byte [esp + 0xe1e], 0xb0
mov byte [esp + 0xe1f], 0xdc
mov byte [esp + 0xe20], 0
push 0x634b08
mov dword [esi], eax
mov byte [eax], 0
call fcn.00428e20
cmp dword [edi + 0x18], 0x10
jb 0x410197
mov edi, dword [edi + 4]
jmp 0x41019a
add edi, 4
sub esp, 0x44
mov esi, esp
mov dword [esp + 0xe3c], esp
lea eax, [esi + 4]
push 0xffffffffffffffff
push edi
mov dword [esi], eax
mov byte [eax], 0
call fcn.00428e20
sub esp, 0x44
mov esi, esp
lea eax, [esi + 4]
mov dword [esp + 0xe80], esp
mov dword [esi], eax
mov byte [eax], 0
push 0xffffffffffffffff
lea eax, [esp + 0xea0]
push eax
call fcn.00428e20
mov ecx, dword [0x66bdcc]
push ecx
lea ecx, [esp + 0x110]
call fcn.004046f0
lea esi, [esp + 0x3c]
mov dword [esp + 0x1088], 0xffffffff
call fcn.004041b0
mov esi, dword [esp + 0x1c]
cmp dword [esi + 0x1c], 0x10
jb 0x410216
mov edx, dword [esi + 8]
push edx
call fcn.0048fcfa
add esp, 4
mov dword [esi + 0x1c], 0xf
mov dword [esi + 0x18], 0
push esi
mov byte [esi + 8], 0
call fcn.0048fcfa
add esp, 4
mov ecx, dword [esp + 0x1080]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1068]
xor ecx, esp
call fcn.00499a1c
add esp, 0x1078
ret 8