Function at 0x402031
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d08
push edi
lea edi, [ebp - 0x3d08]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4021c3
push eax
push edi
call fcn.00403fe4
cmp eax, 1
jne 0x40207a
mov dword [edi], 0x4043e5
jmp 0x4020ab
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x4021c1
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea edx, [ecx + 4]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
add esp, 0x18
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4021c1
lea edx, [ebp - 0x3aa8]
push edx
lea edx, [ebp - 0x3af8]
push edx
lea edx, [ebp - 0x3b48]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4021c1
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3b48]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
add esp, 0x1c
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
lea edx, [ebp - 0x3af8]
push edx
lea edx, [esp + 4]
push edx
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
add esp, 0x18
jmp 0x402203
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x403c84
mov dword [ebp - 0x385c], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea edx, [ecx + 2]
push edx
push eax
lea edx, [ebp - 0x3a58]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x374c], 0
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
mov byte [esi + 0x6c], 0
cmp dword [esi + 0x270], 0x73696e24
jne 0x4022ce
cmp dword [esi + 0x274], 0x386e6173
jne 0x4022ce
cmp dword [esi + 0x278], 0x24315f30
jne 0x4022ce
cmp dword [esi + 0x27c], 0x61746948
jne 0x4022ce
cmp dword [esi + 0x280], 0x20696863
jne 0x4022ce
cmp dword [esi + 0x284], 0x35384852
jne 0x4022ce
cmp dword [esi + 0x288], 0x30345b30
jne 0x4022ce
cmp dword [esi + 0x28c], 0x5d6b3639
jne 0x4022ce
cmp dword [esi + 0x290], 0x4e414320
jne 0x4022ce
cmp byte [esi + 0x294], 0
je 0x40248c
cmp dword [esi + 0x270], 0x73696e24
jne 0x402362
cmp dword [esi + 0x274], 0x386e6173
jne 0x402362
cmp dword [esi + 0x278], 0x24315f30
jne 0x402362
cmp dword [esi + 0x27c], 0x53455428
jne 0x402362
cmp dword [esi + 0x280], 0x69482954
jne 0x402362
cmp dword [esi + 0x284], 0x68636174
jne 0x402362
cmp dword [esi + 0x288], 0x48522069
jne 0x402362
cmp dword [esi + 0x28c], 0x5b303538
jne 0x402362
cmp dword [esi + 0x290], 0x36393034
jne 0x402362
cmp dword [esi + 0x294], 0x43205d6b
jne 0x402362
cmp word [esi + 0x298], 0x4e41
jne 0x402362
cmp byte [esi + 0x29a], 0
je 0x40248c
cmp dword [esi + 0x270], 0x73696e24
jne 0x4023dc
cmp dword [esi + 0x274], 0x386e6173
jne 0x4023dc
cmp dword [esi + 0x278], 0x24325f30
jne 0x4023dc
cmp dword [esi + 0x27c], 0x63736f42
jne 0x4023dc
cmp dword [esi + 0x280], 0x44452068
jne 0x4023dc
cmp dword [esi + 0x284], 0x43373143
jne 0x4023dc
cmp dword [esi + 0x288], 0x325b3438
jne 0x4023dc
cmp dword [esi + 0x28c], 0x6b303635
jne 0x4023dc
cmp dword [esi + 0x290], 0x4143205d
jne 0x4023dc
cmp word [esi + 0x294], 0x4e
je 0x40248c
cmp dword [esi + 0x270], 0x73696e24
jne 0x403c7c
cmp dword [esi + 0x274], 0x386e6173
jne 0x403c7c
cmp dword [esi + 0x278], 0x24325f30
jne 0x403c7c
cmp dword [esi + 0x27c], 0x53455428
jne 0x403c7c
cmp dword [esi + 0x280], 0x6f422954
jne 0x403c7c
cmp dword [esi + 0x284], 0x20686373
jne 0x403c7c
cmp dword [esi + 0x288], 0x31434445
jne 0x403c7c
cmp dword [esi + 0x28c], 0x34384337
jne 0x403c7c
cmp dword [esi + 0x290], 0x3635325b
jne 0x403c7c
cmp dword [esi + 0x294], 0x205d6b30
jne 0x403c7c
cmp dword [esi + 0x298], 0x4e4143
jne 0x403c7c
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4024b4
cmp eax, 0xa
je 0x4024b4
cmp eax, 0xb
je 0x4024b4
cmp eax, 0x17
je 0x4024b4
cmp eax, 0x18
je 0x4024b4
cmp eax, 0x2f
jne 0x403c7c
push 0
push 0
push 0x402
push dword [ebx + 0x8ec]
call dword [sym.imp.USER32.DLL_SendMessageA]
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x4024f7
mov dword [ebp - 0x374c], 1
jmp 0x403c7c
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402524
mov dword [ebp - 0x374c], 1
jmp 0x403c7c
push 0xe0070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xe8070000
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov eax, esp
push 0
push eax
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x40257a
mov dword [ebp - 0x374c], 1
jmp 0x403c7c
mov byte [ebp - 0x1b96], 0
mov byte [ebp - 0x1b56], 0
mov byte [ebp - 0x1b16], 0
mov byte [ebp - 0x1ad6], 0
mov byte [ebp - 0x1a96], 0
mov byte [ebp - 0x1a56], 0
mov byte [ebp - 0x1956], 0
mov byte [ebp - 0x1856], 0
mov byte [ebp - 0x1816], 0
mov byte [ebp - 0x17d6], 0
mov byte [ebp - 0x1796], 0
mov dword [ebp - 0x1756], 0
mov dword [ebp - 0x1752], 0
mov dword [ebp - 0x174e], 0
mov dword [ebp - 0x174a], 0
mov byte [ebp - 0x1746], 0
mov byte [ebp - 0x1706], 0
mov byte [ebp - 0x16c6], 0
mov byte [ebp - 0x1686], 0
push 0x240
push 0
lea edx, [ebp - 0x300]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [esi + 0x6c], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x40263a
cmp eax, 0xb
jne 0x402c23
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
jne 0x40289c
cmp dword [esi + 0x270], 0x73696e24
jne 0x4026c2
cmp dword [esi + 0x274], 0x386e6173
jne 0x4026c2
cmp dword [esi + 0x278], 0x24315f30
jne 0x4026c2
cmp dword [esi + 0x27c], 0x61746948
jne 0x4026c2
cmp dword [esi + 0x280], 0x20696863
jne 0x4026c2
cmp dword [esi + 0x284], 0x35384852
jne 0x4026c2
cmp dword [esi + 0x288], 0x30345b30
jne 0x4026c2
cmp dword [esi + 0x28c], 0x5d6b3639
jne 0x4026c2
cmp dword [esi + 0x290], 0x4e414320
jne 0x4026c2
cmp byte [esi + 0x294], 0
je 0x40275a
cmp dword [esi + 0x270], 0x73696e24
jne 0x402778
cmp dword [esi + 0x274], 0x386e6173
jne 0x402778
cmp dword [esi + 0x278], 0x24315f30
jne 0x402778
cmp dword [esi + 0x27c], 0x53455428
jne 0x402778
cmp dword [esi + 0x280], 0x69482954
jne 0x402778
cmp dword [esi + 0x284], 0x68636174
jne 0x402778
cmp dword [esi + 0x288], 0x48522069
jne 0x402778
cmp dword [esi + 0x28c], 0x5b303538
jne 0x402778
cmp dword [esi + 0x290], 0x36393034
jne 0x402778
cmp dword [esi + 0x294], 0x43205d6b
jne 0x402778
cmp word [esi + 0x298], 0x4e41
jne 0x402778
cmp byte [esi + 0x29a], 0
jne 0x402778
mov dword [ebp - 0x1ca0], section..code
mov dword [ebp - 0x1c9c], 0
mov dword [ebp - 0x1c98], 0x50
cmp dword [esi + 0x270], 0x73696e24
jne 0x4027f2
cmp dword [esi + 0x274], 0x386e6173
jne 0x4027f2
cmp dword [esi + 0x278], 0x24325f30
jne 0x4027f2
cmp dword [esi + 0x27c], 0x63736f42
jne 0x4027f2
cmp dword [esi + 0x280], 0x44452068
jne 0x4027f2
cmp dword [esi + 0x284], 0x43373143
jne 0x4027f2
cmp dword [esi + 0x288], 0x325b3438
jne 0x4027f2
cmp dword [esi + 0x28c], 0x6b303635
jne 0x4027f2
cmp dword [esi + 0x290], 0x4143205d
jne 0x4027f2
cmp word [esi + 0x294], 0x4e
je 0x40287e
cmp dword [esi + 0x270], 0x73696e24
jne 0x40289c
cmp dword [esi + 0x274], 0x386e6173
jne 0x40289c
cmp dword [esi + 0x278], 0x24325f30
jne 0x40289c
cmp dword [esi + 0x27c], 0x53455428
jne 0x40289c
cmp dword [esi + 0x280], 0x6f422954
jne 0x40289c
cmp dword [esi + 0x284], 0x20686373
jne 0x40289c
cmp dword [esi + 0x288], 0x31434445
jne 0x40289c
cmp dword [esi + 0x28c], 0x34384337
jne 0x40289c
cmp dword [esi + 0x290], 0x3635325b
jne 0x40289c
cmp dword [esi + 0x294], 0x205d6b30
jne 0x40289c
cmp dword [esi + 0x298], 0x4e4143
jne 0x40289c
mov dword [ebp - 0x1ca0], 0x4010a0
mov dword [ebp - 0x1c9c], 0xa0
mov dword [ebp - 0x1c98], 0x50
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xb
jne 0x402afe
cmp dword [esi + 0x270], 0x73696e24
jne 0x402924
cmp dword [esi + 0x274], 0x386e6173
jne 0x402924
cmp dword [esi + 0x278], 0x24315f30
jne 0x402924
cmp dword [esi + 0x27c], 0x61746948
jne 0x402924
cmp dword [esi + 0x280], 0x20696863
jne 0x402924
cmp dword [esi + 0x284], 0x35384852
jne 0x402924
cmp dword [esi + 0x288], 0x30345b30
jne 0x402924
cmp dword [esi + 0x28c], 0x5d6b3639
jne 0x402924
cmp dword [esi + 0x290], 0x4e414320
jne 0x402924
cmp byte [esi + 0x294], 0
je 0x4029bc
cmp dword [esi + 0x270], 0x73696e24
jne 0x4029da
cmp dword [esi + 0x274], 0x386e6173
jne 0x4029da
cmp dword [esi + 0x278], 0x24315f30
jne 0x4029da
cmp dword [esi + 0x27c], 0x53455428
jne 0x4029da
cmp dword [esi + 0x280], 0x69482954
jne 0x4029da
cmp dword [esi + 0x284], 0x68636174
jne 0x4029da
cmp dword [esi + 0x288], 0x48522069
jne 0x4029da
cmp dword [esi + 0x28c], 0x5b303538
jne 0x4029da
cmp dword [esi + 0x290], 0x36393034
jne 0x4029da
cmp dword [esi + 0x294], 0x43205d6b
jne 0x4029da
cmp word [esi + 0x298], 0x4e41
jne 0x4029da
cmp byte [esi + 0x29a], 0
jne 0x4029da
mov dword [ebp - 0x1ca0], 0x401050
mov dword [ebp - 0x1c9c], 0x50
mov dword [ebp - 0x1c98], 0x50
cmp dword [esi + 0x270], 0x73696e24
jne 0x402a54
cmp dword [esi + 0x274], 0x386e6173
jne 0x402a54
cmp dword [esi + 0x278], 0x24325f30
jne 0x402a54
cmp dword [esi + 0x27c], 0x63736f42
jne 0x402a54
cmp dword [esi + 0x280], 0x44452068
jne 0x402a54
cmp dword [esi + 0x284], 0x43373143
jne 0x402a54
cmp dword [esi + 0x288], 0x325b3438
jne 0x402a54
cmp dword [esi + 0x28c], 0x6b303635
jne 0x402a54
cmp dword [esi + 0x290], 0x4143205d
jne 0x402a54
cmp word [esi + 0x294], 0x4e
je 0x402ae0
cmp dword [esi + 0x270], 0x73696e24
jne 0x402afe
cmp dword [esi + 0x274], 0x386e6173
jne 0x402afe
cmp dword [esi + 0x278], 0x24325f30
jne 0x402afe
cmp dword [esi + 0x27c], 0x53455428
jne 0x402afe
cmp dword [esi + 0x280], 0x6f422954
jne 0x402afe
cmp dword [esi + 0x284], 0x20686373
jne 0x402afe
cmp dword [esi + 0x288], 0x31434445
jne 0x402afe
cmp dword [esi + 0x28c], 0x34384337
jne 0x402afe
cmp dword [esi + 0x290], 0x3635325b
jne 0x402afe
cmp dword [esi + 0x294], 0x205d6b30
jne 0x402afe
cmp dword [esi + 0x298], 0x4e4143
jne 0x402afe
mov dword [ebp - 0x1ca0], 0x4010f0
mov dword [ebp - 0x1c9c], 0xf0
mov dword [ebp - 0x1c98], 0x50
push 0x200
push 0
lea edx, [ebp - 0x1646]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov byte [ebp - 0x1c8c], 0x21
mov dword [ebp - 0x1c94], 0
mov ecx, dword [ebp - 0x1c94]
cmp ecx, dword [ebp - 0x1c98]
jae 0x402c23
mov eax, dword [ebp - 0x1c9c]
lea eax, [eax + ecx]
mov dword [ebp - 0x1c8a], eax
mov edx, dword [ebp - 0x1c98]
sub edx, ecx
xor ecx, ecx
cmp ecx, edx
jae 0x402b76
cmp ecx, 0xf0
jae 0x402b76
mov eax, dword [ebp - 0x1ca0]
add eax, dword [ebp - 0x1c94]
mov al, byte [eax + ecx]
mov byte [ebp + ecx - 0x1c86], al
inc ecx
jmp 0x402b51
mov dword [ebp - 0x1c90], ecx
add ecx, 4
mov byte [ebp - 0x1c8b], cl
push 0xfa
lea edx, [ebp - 0x395e]
push edx
push 0xf6
lea edx, [ebp - 0x1c8c]
push edx
call dword [ebx + 0x40]
test eax, eax
jne 0x402bf3
push 0xa0d32
push 0x203a2445
push 0x444f435f
push 0x524f5252
push 0x45242024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x30
mov dword [ebp - 0x374c], 1
jmp 0x402c23
mov eax, dword [ebp - 0x1c90]
mov ecx, dword [ebp - 0x1c94]
add dword [ebp - 0x1c94], eax
push eax
lea edx, [ebp - 0x395e]
push edx
lea edx, [ebp + ecx - 0x1646]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
jmp 0x402b26
mov dword [ebp - 0x304], 0
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402c46
cmp eax, 0xa
je 0x402c46
cmp eax, 0xb
jne 0x403acb
push 0x80f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
push 0x310
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x402ca1
cmp eax, 0xffffffff
jne 0x402cad
mov dword [ebp - 0x374c], 1
jmp 0x402d26
cmp byte [ebp - 0x3744], 0x50
je 0x402d26
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x3748]
mov edx, esp
cmp eax, 0xffffffff
jne 0x402d08
xor eax, eax
jmp 0x402d12
cmp eax, 0x20
jbe 0x402d12
mov eax, 0x20
push ecx
push eax
push edx
push 0
call fcn.00403e8b
mov dword [ebp - 0x374c], 1
cmp dword [ebp - 0x374c], 0
jne 0x402e09
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x91f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x402d6d
cmp eax, 0xffffffff
jne 0x402d7c
mov dword [ebp - 0x374c], 1
jmp 0x402e09
cmp byte [ebp - 0x3744], 0x62
jne 0x402e09
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402db7
cmp ecx, eax
jae 0x402db7
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x402db7
cmp dl, 0xff
je 0x402db7
cmp dl, 0x2d
je 0x402db7
mov byte [ebp + ecx - 0x1b96], dl
inc ecx
jmp 0x402d8e
mov byte [ebp + ecx - 0x1b96], 0
cmp byte [ebp - 0x1b96], 0
je 0x402e09
lea eax, [ebp - 0x1b96]
push 0
push 0xa0d7325
push 0x203a244e
push 0x505f5748
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402e1d
cmp eax, 0xa
jne 0x402fd8
cmp dword [ebp - 0x374c], 0
jne 0x402efe
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x87f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x402e64
cmp eax, 0xffffffff
jne 0x402e73
mov dword [ebp - 0x374c], 1
jmp 0x402efe
cmp byte [ebp - 0x3744], 0x62
jne 0x402efe
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402eae
cmp ecx, eax
jae 0x402eae
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x402eae
cmp dl, 0xff
je 0x402eae
cmp dl, 0x2d
je 0x402eae
mov byte [ebp + ecx - 0x1b56], dl
inc ecx
jmp 0x402e85
mov byte [ebp + ecx - 0x1b56], 0
cmp byte [ebp - 0x1b56], 0
je 0x402efe
lea eax, [ebp - 0x1b56]
push 0xa0d
push 0x7325203a
push 0x24544143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x402fd8
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x96f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x402f45
cmp eax, 0xffffffff
jne 0x402f54
mov dword [ebp - 0x374c], 1
jmp 0x402fd8
cmp byte [ebp - 0x3744], 0x62
jne 0x402fd8
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x402f8b
cmp ecx, eax
jae 0x402f8b
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x402f8b
cmp dl, 0xff
je 0x402f8b
cmp dl, 0x2d
je 0x402f8b
mov byte [ebp + ecx - 0x1b16], dl
inc ecx
jmp 0x402f62
mov byte [ebp + ecx - 0x1b16], 0
cmp byte [ebp - 0x1b16], 0
je 0x402fd8
lea eax, [ebp - 0x1b16]
push 0xa
push 0xd732520
push 0x3a245753
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x402ff1
cmp eax, 0xa
je 0x402ff1
cmp eax, 0xb
jne 0x4030f0
cmp dword [ebp - 0x374c], 0
jne 0x4030f0
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x88f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x403038
cmp eax, 0xffffffff
jne 0x403047
mov dword [ebp - 0x374c], 1
jmp 0x4030f0
cmp byte [ebp - 0x3744], 0x62
jne 0x4030f0
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x403082
cmp ecx, eax
jae 0x403082
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x403082
cmp dl, 0xff
je 0x403082
cmp dl, 0x2d
je 0x403082
mov byte [ebp + ecx - 0x1ad6], dl
inc ecx
jmp 0x403059
mov byte [ebp + ecx - 0x1ad6], 0
cmp byte [ebp - 0x1ad6], 0
je 0x4030f0
lea eax, [ebp - 0x1ad6]
push 0xa
push 0xd732520
push 0x3a244e4f
push 0x49535245
push 0x565f5753
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp byte [esi + 0x6c], 0
je 0x4030df
lea edx, [ebp - 0x1ad6]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x403104
cmp eax, 0xa
jne 0x403acb
cmp dword [ebp - 0x374c], 0
jne 0x4031d0
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x90f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x40314b
cmp eax, 0xffffffff
jne 0x403157
mov dword [ebp - 0x374c], 1
jmp 0x4031d0
cmp byte [ebp - 0x3744], 0x62
jne 0x4031d0
sub eax, 7
xor ecx, ecx
cmp ecx, 0x3f
jae 0x403189
cmp ecx, eax
jae 0x403189
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x403189
cmp dl, 0xff
je 0x403189
mov byte [ebp + ecx - 0x1a96], dl
inc ecx
jmp 0x403165
mov byte [ebp + ecx - 0x1a96], 0
lea eax, [ebp - 0x1a96]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x4033b1
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x609
push 0xe0070000
push esp
push 6
push 0x12c
push 0x40
push 6
push 0
call fcn.00403cde
cmp eax, 0xffffffff
jne 0x403216
mov dword [ebp - 0x374c], 1
jmp 0x4033b1
mov dword [ebp - 0x3854], 3
lea edx, [ebp - 0x3748]
push edx
push 0x7d0
push 6
push 0
call fcn.00403e3a
cmp eax, 0xffffffff
jne 0x403249
mov dword [ebp - 0x374c], 1
jmp 0x4033b1
test eax, eax
jne 0x40325a
dec dword [ebp - 0x3854]
jne 0x403220
jmp 0x4033b1
cmp byte [ebp - 0x3744], 0x7f
jne 0x40327d
cmp byte [ebp - 0x3742], 0x78
jne 0x40327d
mov dword [ebp - 0x3854], 3
jmp 0x403220
cmp byte [ebp - 0x3744], 0x49
jne 0x4032ce
mov eax, dword [ebp - 0x3741]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
jmp 0x4033b1
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0xa01022
push 0xe0070000
push esp
push 7
push 0x12c
push 0x40
push 6
push 0
call fcn.00403cde
cmp eax, 0xffffffff
jne 0x403307
mov dword [ebp - 0x374c], 1
jmp 0x4033b1
mov dword [ebp - 0x3854], 3
lea edx, [ebp - 0x3748]
push edx
push 0x7d0
push 6
push 0
call fcn.00403e3a
cmp eax, 0xffffffff
jne 0x403337
mov dword [ebp - 0x374c], 1
jmp 0x4033b1
test eax, eax
jne 0x403345
dec dword [ebp - 0x3854]
jne 0x403311
jmp 0x4033b1
cmp byte [ebp - 0x3744], 0x7f
jne 0x403365
cmp byte [ebp - 0x3742], 0x78
jne 0x403365
mov dword [ebp - 0x3854], 3
jmp 0x403311
cmp byte [ebp - 0x3744], 0x62
jne 0x4033b1
mov eax, dword [ebp - 0x3741]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x403452
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0xa0f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x4033f8
cmp eax, 0xffffffff
jne 0x403404
mov dword [ebp - 0x374c], 1
jmp 0x403452
cmp byte [ebp - 0x3744], 0x62
jne 0x403452
movzx eax, byte [ebp - 0x3741]
push 0xa0d
push 0x78322e25
push 0x203a4449
push 0x20676169
push 0x44202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x403533
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x8af122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x403499
cmp eax, 0xffffffff
jne 0x4034a8
mov dword [ebp - 0x374c], 1
jmp 0x403533
cmp byte [ebp - 0x3744], 0x62
jne 0x403533
sub eax, 7
xor ecx, ecx
cmp ecx, 0xff
jae 0x4034e1
cmp ecx, eax
jae 0x4034e1
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x4034e1
cmp dl, 0xff
je 0x4034e1
mov byte [ebp + ecx - 0x1746], dl
inc ecx
jmp 0x4034ba
mov byte [ebp + ecx - 0x1746], 0
cmp byte [ebp - 0x1746], 0
je 0x403533
lea eax, [ebp - 0x1746]
push 0xa
push 0xd732520
push 0x3a726569
push 0x6c707075
push 0x53202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x403617
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x94f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x40357a
cmp eax, 0xffffffff
jne 0x403589
mov dword [ebp - 0x374c], 1
jmp 0x403617
cmp byte [ebp - 0x3744], 0x62
jne 0x403617
sub eax, 7
xor ecx, ecx
cmp ecx, 0xff
jae 0x4035c2
cmp ecx, eax
jae 0x4035c2
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x4035c2
cmp dl, 0xff
je 0x4035c2
mov byte [ebp + ecx - 0x1706], dl
inc ecx
jmp 0x40359b
mov byte [ebp + ecx - 0x1706], 0
cmp byte [ebp - 0x1706], 0
je 0x403617
lea eax, [ebp - 0x1706]
push 0xa0d
push 0x7325203a
push 0x31206e6f
push 0x69746964
push 0x45202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x4036fb
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x95f122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x40365e
cmp eax, 0xffffffff
jne 0x40366d
mov dword [ebp - 0x374c], 1
jmp 0x4036fb
cmp byte [ebp - 0x3744], 0x62
jne 0x4036fb
sub eax, 7
xor ecx, ecx
cmp ecx, 0xff
jae 0x4036a6
cmp ecx, eax
jae 0x4036a6
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x4036a6
cmp dl, 0xff
je 0x4036a6
mov byte [ebp + ecx - 0x16c6], dl
inc ecx
jmp 0x40367f
mov byte [ebp + ecx - 0x16c6], 0
cmp byte [ebp - 0x16c6], 0
je 0x4036fb
lea eax, [ebp - 0x16c6]
push 0xa0d
push 0x7325203a
push 0x32206e6f
push 0x69746964
push 0x45202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x4037da
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x8cf122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x403742
cmp eax, 0xffffffff
jne 0x403751
mov dword [ebp - 0x374c], 1
jmp 0x4037da
cmp byte [ebp - 0x3744], 0x62
jne 0x4037da
sub eax, 7
xor ecx, ecx
cmp ecx, 0xff
jae 0x40378a
cmp ecx, eax
jae 0x40378a
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x40378a
cmp dl, 0xff
je 0x40378a
mov byte [ebp + ecx - 0x1686], dl
inc ecx
jmp 0x403763
mov byte [ebp + ecx - 0x1686], 0
cmp byte [ebp - 0x1686], 0
je 0x4037da
lea eax, [ebp - 0x1686]
push 0xa0d
push 0x7325203a
push 0x244c4143
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [esi + 0x270], 0x73696e24
jne 0x403854
cmp dword [esi + 0x274], 0x386e6173
jne 0x403854
cmp dword [esi + 0x278], 0x24325f30
jne 0x403854
cmp dword [esi + 0x27c], 0x63736f42
jne 0x403854
cmp dword [esi + 0x280], 0x44452068
jne 0x403854
cmp dword [esi + 0x284], 0x43373143
jne 0x403854
cmp dword [esi + 0x288], 0x325b3438
jne 0x403854
cmp dword [esi + 0x28c], 0x6b303635
jne 0x403854
cmp dword [esi + 0x290], 0x4143205d
jne 0x403854
cmp word [esi + 0x294], 0x4e
je 0x403904
cmp dword [esi + 0x270], 0x73696e24
jne 0x403acb
cmp dword [esi + 0x274], 0x386e6173
jne 0x403acb
cmp dword [esi + 0x278], 0x24325f30
jne 0x403acb
cmp dword [esi + 0x27c], 0x53455428
jne 0x403acb
cmp dword [esi + 0x280], 0x6f422954
jne 0x403acb
cmp dword [esi + 0x284], 0x20686373
jne 0x403acb
cmp dword [esi + 0x288], 0x31434445
jne 0x403acb
cmp dword [esi + 0x28c], 0x34384337
jne 0x403acb
cmp dword [esi + 0x290], 0x3635325b
jne 0x403acb
cmp dword [esi + 0x294], 0x205d6b30
jne 0x403acb
cmp dword [esi + 0x298], 0x4e4143
jne 0x403acb
cmp dword [ebp - 0x374c], 0
jne 0x4039ea
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x8af122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x40394b
cmp eax, 0xffffffff
jne 0x40395a
mov dword [ebp - 0x374c], 1
jmp 0x4039ea
cmp byte [ebp - 0x3744], 0x62
jne 0x4039ea
sub eax, 7
xor ecx, ecx
cmp ecx, 0xff
jae 0x403993
cmp ecx, eax
jae 0x403993
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x403993
cmp dl, 0xff
je 0x403993
mov byte [ebp + ecx - 0x1a56], dl
inc ecx
jmp 0x40396c
mov byte [ebp + ecx - 0x1a56], 0
cmp byte [ebp - 0x1a56], 0
je 0x4039ea
lea eax, [ebp - 0x1a56]
push 0xa
push 0xd732520
push 0x3a726572
push 0x75746361
push 0x66756e61
push 0x4d202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x374c], 0
jne 0x4039f3
cmp dword [ebp - 0x374c], 0
jne 0x403acb
push 5
call dword [sym.imp.KERNEL32.DLL_Sleep]
push 0x8cf122
push 0xe0070000
lea eax, [ebp - 0x3748]
push esp
push 7
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00403caa
test eax, eax
je 0x403a3a
cmp eax, 0xffffffff
jne 0x403a49
mov dword [ebp - 0x374c], 1
jmp 0x403acb
cmp byte [ebp - 0x3744], 0x62
jne 0x403acb
sub eax, 7
xor ecx, ecx
cmp ecx, 0xff
jae 0x403a7e
cmp ecx, eax
jae 0x403a7e
mov dl, byte [ebp + ecx - 0x3741]
cmp dl, 0
je 0x403a7e
cmp dl, 0xff
je 0x403a7e
mov byte [ebp + ecx - 0x1956], dl
inc ecx
jmp 0x403a57
mov byte [ebp + ecx - 0x1956], 0
cmp byte [ebp - 0x1956], 0
je 0x403acb
lea eax, [ebp - 0x1956]
push 0xa
push 0xd732520
push 0x3a244e53
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x3c4c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x3c4c]
push edx
call dword [ebx + 0x30]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x403c7c
cmp dword [ebp - 0x374c], 0
jne 0x403c7c
mov dword [ebp - 0xc0], 0x3038
mov dword [ebp - 0x80], 0x7373694e
mov dword [ebp - 0x7c], 0x6e61
cmp dword [esi + 0x270], 0x73696e24
jne 0x403ba6
cmp dword [esi + 0x274], 0x386e6173
jne 0x403ba6
cmp dword [esi + 0x278], 0x24315f30
jne 0x403ba6
cmp dword [esi + 0x27c], 0x61746948
jne 0x403ba6
cmp dword [esi + 0x280], 0x20696863
jne 0x403ba6
cmp dword [esi + 0x284], 0x35384852
jne 0x403ba6
cmp dword [esi + 0x288], 0x30345b30
jne 0x403ba6
cmp dword [esi + 0x28c], 0x5d6b3639
jne 0x403ba6
cmp dword [esi + 0x290], 0x4e414320
jne 0x403ba6
cmp byte [esi + 0x294], 0
jne 0x403ba6
mov dword [ebp - 0x40], 0x61746968
mov dword [ebp - 0x3c], 0x5f696863
mov dword [ebp - 0x38], 0x35386872
mov dword [ebp - 0x34], 0x30345f30
mov dword [ebp - 0x30], 0x5f6b3639
mov dword [ebp - 0x2c], 0x6e6163
cmp dword [esi + 0x270], 0x73696e24
jne 0x403c59
cmp dword [esi + 0x274], 0x386e6173
jne 0x403c59
cmp dword [esi + 0x278], 0x24325f30
jne 0x403c59
cmp dword [esi + 0x27c], 0x63736f42
jne 0x403c59
cmp dword [esi + 0x280], 0x44452068
jne 0x403c59
cmp dword [esi + 0x284], 0x43373143
jne 0x403c59
cmp dword [esi + 0x288], 0x325b3438
jne 0x403c59
cmp dword [esi + 0x28c], 0x6b303635
jne 0x403c59
cmp dword [esi + 0x290], 0x4143205d
jne 0x403c59
cmp word [esi + 0x294], 0x4e
jne 0x403c59
mov dword [ebp - 0x40], 0x63736f62
mov dword [ebp - 0x3c], 0x64655f68
mov dword [ebp - 0x38], 0x63373163
mov dword [ebp - 0x34], 0x325f3438
mov dword [ebp - 0x30], 0x6b303635
mov dword [ebp - 0x2c], 0x6e61635f
mov dword [ebp - 0x28], 0
push 1
push 0
push 0
lea edx, [esi + 0x6c]
push edx
lea edx, [ebp - 0x40]
push edx
lea edx, [ebp - 0x80]
push edx
lea edx, [ebp - 0xc0]
push edx
lea edx, [ebp - 0x1b16]
push edx
call dword [ebx + 0x70]
push 0
push 0
push 3
call dword [edi]
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8