Function at 0x402825
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24d8
push edi
lea edi, [ebp - 0x24d8]
push 1
call dword [ebx + 0x44]
mov dword [edi], 0
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea eax, [ecx + 0x108]
mov ecx, dword [ecx]
cmp ecx, 3
jne 0x4029ae
push eax
push edi
call fcn.004046b6
cmp eax, 1
jne 0x40286e
mov dword [edi], 0x404ab7
jmp 0x40289f
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x5a494c41
push 0x4954494e
push 0x495f4f54
push 0x5f44454c
push 0x49414624
push esp
call dword [ebx + 0x30]
add esp, 0x24
cmp dword [edi], 0
je 0x4029ac
mov ecx, dword [ebx + 0x15c]
add ecx, dword [ebx + 0x74]
lea ecx, [ecx + 4]
push 0xa
push 0xd732520
push 0x5d24454d
push 0x414e5f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
lea edx, [edi + 0x38]
push edx
push 0
call dword [edi + 4]
cmp eax, 0
jne 0x4029ac
lea edx, [ebp - 0x2278]
push edx
lea edx, [ebp - 0x22c8]
push edx
lea edx, [ebp - 0x2318]
push edx
push dword [edi + 0x38]
call dword [edi + 0x30]
cmp eax, 0
jne 0x4029ac
lea ecx, [ebp - 0x2318]
push 0xa
push 0xd732520
push 0x5d244552
push 0x41574d52
push 0x49465f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0x22c8]
push 0
push 0xa0d7325
push 0x205d244c
push 0x4c445f52
push 0x45545041
push 0x4441245b
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
jmp 0x4029ee
push 0
push 0xa0d2452
push 0x45545041
push 0x44415f45
push 0x48545f59
push 0x425f4445
push 0x54524f50
push 0x5055535f
push 0x544f4e5f
push 0x53495f4c
push 0x4f434f54
push 0x4f525024
push esp
call dword [ebx + 0x30]
add esp, 0x30
cmp dword [edi], 0
je 0x403f7b
mov dword [ebp - 0x1014], 0
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax + 1]
lea ecx, [ecx + 2]
push ecx
push eax
lea edx, [ebp - 0x2228]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov dword [ebp - 0x1010], 0
cmp dword [esi + 0x270], 0x73696e24
jne 0x402acd
cmp dword [esi + 0x274], 0x315f3267
jne 0x402acd
cmp dword [esi + 0x278], 0x74694824
jne 0x402acd
cmp dword [esi + 0x27c], 0x69686361
jne 0x402acd
cmp dword [esi + 0x280], 0x6e654720
jne 0x402acd
cmp dword [esi + 0x284], 0x48532032
jne 0x402acd
cmp dword [esi + 0x288], 0x33353237
jne 0x402acd
cmp dword [esi + 0x28c], 0x33342f33
jne 0x402acd
cmp dword [esi + 0x290], 0x3430325b
jne 0x402acd
cmp dword [esi + 0x294], 0x285d6b38
jne 0x402acd
cmp dword [esi + 0x298], 0x61746164
jne 0x402acd
cmp dword [esi + 0x29c], 0x41432029
jne 0x402acd
cmp word [esi + 0x2a0], 0x4e
je 0x402d23
cmp dword [esi + 0x270], 0x73696e24
jne 0x402b91
cmp dword [esi + 0x274], 0x325f3267
jne 0x402b91
cmp dword [esi + 0x278], 0x74694824
jne 0x402b91
cmp dword [esi + 0x27c], 0x69686361
jne 0x402b91
cmp dword [esi + 0x280], 0x6e654720
jne 0x402b91
cmp dword [esi + 0x284], 0x48532032
jne 0x402b91
cmp dword [esi + 0x288], 0x33353237
jne 0x402b91
cmp dword [esi + 0x28c], 0x33342f33
jne 0x402b91
cmp dword [esi + 0x290], 0x3430325b
jne 0x402b91
cmp dword [esi + 0x294], 0x285d6b38
jne 0x402b91
cmp dword [esi + 0x298], 0x65646f63
jne 0x402b91
cmp dword [esi + 0x29c], 0x7461642b
jne 0x402b91
cmp dword [esi + 0x2a0], 0x43202961
jne 0x402b91
cmp word [esi + 0x2a4], 0x4e41
jne 0x402b91
cmp byte [esi + 0x2a6], 0
je 0x402d23
cmp dword [esi + 0x270], 0x73696e24
jne 0x402c37
cmp dword [esi + 0x274], 0x335f3267
jne 0x402c37
cmp dword [esi + 0x278], 0x74694824
jne 0x402c37
cmp dword [esi + 0x27c], 0x69686361
jne 0x402c37
cmp dword [esi + 0x280], 0x6e654720
jne 0x402c37
cmp dword [esi + 0x284], 0x48532032
jne 0x402c37
cmp dword [esi + 0x288], 0x33353237
jne 0x402c37
cmp dword [esi + 0x28c], 0x33342f33
jne 0x402c37
cmp dword [esi + 0x290], 0x3430325b
jne 0x402c37
cmp dword [esi + 0x294], 0x285d6b38
jne 0x402c37
cmp dword [esi + 0x298], 0x61746164
jne 0x402c37
cmp dword [esi + 0x29c], 0x41432029
jne 0x402c37
cmp word [esi + 0x2a0], 0x4e
je 0x402d23
cmp dword [esi + 0x270], 0x73696e24
jne 0x403c92
cmp dword [esi + 0x274], 0x335f3267
jne 0x403c92
cmp dword [esi + 0x278], 0x74694824
jne 0x403c92
cmp dword [esi + 0x27c], 0x69686361
jne 0x403c92
cmp dword [esi + 0x280], 0x6e654720
jne 0x403c92
cmp dword [esi + 0x284], 0x48532032
jne 0x403c92
cmp dword [esi + 0x288], 0x33353237
jne 0x403c92
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403c92
cmp dword [esi + 0x290], 0x3430325b
jne 0x403c92
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403c92
cmp dword [esi + 0x298], 0x65646f63
jne 0x403c92
cmp dword [esi + 0x29c], 0x7461642b
jne 0x403c92
cmp dword [esi + 0x2a0], 0x43202961
jne 0x403c92
cmp word [esi + 0x2a4], 0x4e41
jne 0x403c92
cmp byte [esi + 0x2a6], 0
jne 0x403c92
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x38
jne 0x402e50
push 0x28
push 0
lea edx, [ebp - 0x5e]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
push 0x30
push 0
lea edx, [ebp - 0x36]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
push 0
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_EnableWindow]
push 0x4e
push 0x490056
push 0x450047
push 0x4e0041
push 0x480043
mov dword [ebp - 0x36], ebx
mov dword [ebp - 0x5a], 0x403fa1
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov dword [ebp - 0x4e], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.DLL_LoadIconA]
mov dword [ebp - 0x4a], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.DLL_LoadCursorA]
mov dword [ebp - 0x46], eax
mov dword [ebp - 0x42], 0x10
mov dword [ebp - 0x3a], esp
lea edx, [ebp - 0x5e]
push edx
call dword [sym.imp.USER32.DLL_RegisterClassW]
lea edx, [ebp - 0x36]
push edx
push dword [ebp - 0x4e]
push 0
push dword [ebx + 0x8ac]
push 0
push 0
push 0
push 0
push 0x100c0000
push 0
lea edx, [esp + 0x28]
push edx
push pe_nt_image_headers32
call dword [sym.imp.USER32.DLL_CreateWindowExW]
add esp, 0x14
test eax, eax
je 0x402e2c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [esp + 0xc]
push edx
call dword [sym.imp.USER32.DLL_GetMessageW]
test eax, eax
je 0x402e29
push esp
call dword [sym.imp.USER32.DLL_TranslateMessage]
push esp
call dword [sym.imp.USER32.DLL_DispatchMessageW]
jmp 0x402e04
add esp, 0x1c
push 1
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_EnableWindow]
push dword [ebx + 0x8ac]
call dword [sym.imp.USER32.DLL_SetForegroundWindow]
cmp byte [ebp - 0x26], 0
je 0x403f73
push 0x200
push 0
lea edx, [ebp - 0xece]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402e94
cmp eax, 0xb
je 0x402e94
cmp eax, 0xe
je 0x402e94
cmp eax, 0x17
je 0x402e94
cmp eax, 0x18
je 0x402e94
cmp eax, 0x1a
je 0x402e94
cmp eax, 0x38
jne 0x403c92
cmp dword [ebp - 0x1010], 0
jne 0x403c8d
mov byte [esi + 0x6c], 0
push 0x7a120
push 0x800
push 6
push 0
mov eax, esp
push 0
push eax
push 1
call dword [edi]
add esp, 0x10
cmp eax, 0xffffffff
jne 0x402ed3
mov dword [ebp - 0x1010], 1
jmp 0x403c8d
push 1
push 0x8000
push 0
push 1
push 0
mov eax, esp
push 0
push eax
push 8
call dword [edi]
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402f00
mov dword [ebp - 0x1010], 1
jmp 0x403c77
mov dword [ebp - 0x1008], 0xe0070000
mov dword [ebp - 0x1004], 0xe8070000
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0
push 0
push 4
push 0
push 0x40
push 0
push 6
push 0xffffffffffffffff
push 0
push 4
push 0
push 0x40
push 0
push 6
push 3
push 0
push 0
mov dword [ebp - 6], esp
mov eax, dword [ebp - 0x1004]
mov dword [esp + 0x40], eax
mov eax, dword [ebp - 0x1008]
mov dword [esp + 0x5c], eax
push 0
push dword [ebp - 6]
push 4
call dword [edi]
add esp, 0x60
cmp eax, 0xffffffff
jne 0x402f7b
mov dword [ebp - 0x1010], 1
jmp 0x403c77
mov byte [ebp - 0xc0e], 0
mov byte [ebp - 0xbce], 0
mov byte [ebp - 0xb8e], 0
mov byte [ebp - 0xb4e], 0
mov byte [ebp - 0xb0e], 0
mov byte [ebp - 0xace], 0
mov eax, dword [ebp - 0x1008]
mov dword [ebp - 0xcca], eax
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x402fcf
cmp eax, 0xb
je 0x402fcf
cmp eax, 0xe
je 0x402fcf
cmp eax, 0x1a
jne 0x40309b
cmp dword [ebp - 0x1010], 0
jne 0x40309b
mov dword [ebp - 0xcc6], 0xc010
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x403014
cmp eax, 0xffffffff
jne 0x403020
mov dword [ebp - 0x1010], 1
jmp 0x40309b
cmp byte [ebp - 0x2030], 0x50
je 0x40309b
push 0x203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x202c2452
push 0x4f525245
push 0x5f4e4f49
push 0x54414349
push 0x4e554d4d
push 0x4f435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
lea ecx, [ebp - 0x2034]
cmp eax, 0xffffffff
jne 0x403079
xor eax, eax
jmp 0x403083
cmp eax, 0x20
jbe 0x403083
mov eax, 0x20
push ecx
push eax
lea edx, [esp + 8]
push edx
push 0
call fcn.0040455a
mov dword [ebp - 0x1010], 1
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xa
je 0x4030af
cmp eax, 0xb
jne 0x4031f8
cmp dword [ebp - 0x1010], 0
jne 0x40311a
mov dword [ebp - 0xcc6], 0xf121
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x4030f0
cmp eax, 0xffffffff
jne 0x4030fc
mov dword [ebp - 0x1010], 1
jmp 0x40311a
cmp byte [ebp - 0x2030], 0x61
jne 0x40311a
movzx ecx, byte [ebp + eax - 0x2035]
mov ch, byte [ebp + eax - 0x2036]
mov dword [ebp - 0x1000], ecx
cmp dword [ebp - 0x1010], 0
jne 0x403189
mov dword [ebp - 0xcc6], 0xfe21
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x40315b
cmp eax, 0xffffffff
jne 0x403167
mov dword [ebp - 0x1010], 1
jmp 0x403189
cmp byte [ebp - 0x2030], 0x61
jne 0x403189
push 0x18
lea edx, [ebp - 0x202e]
push edx
lea edx, [ebp - 0xc3e]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
cmp dword [ebp - 0x1010], 0
jne 0x4031f8
mov dword [ebp - 0xcc6], 0xff21
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x4031ca
cmp eax, 0xffffffff
jne 0x4031d6
mov dword [ebp - 0x1010], 1
jmp 0x4031f8
cmp byte [ebp - 0x2030], 0x61
jne 0x4031f8
push 0x18
lea edx, [ebp - 0x202e]
push edx
lea edx, [ebp - 0xc26]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x403211
cmp eax, 0xa
je 0x403211
cmp eax, 0x1a
jne 0x4033ba
cmp dword [ebp - 0x1010], 0
jne 0x4032b0
mov dword [ebp - 0xcc6], 0x1021
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x403256
cmp eax, 0xffffffff
jne 0x403262
mov dword [ebp - 0x1010], 1
jmp 0x4032b0
cmp byte [ebp - 0x2030], 0x61
jne 0x4032b0
sub eax, 6
xor ecx, ecx
cmp ecx, 6
jae 0x4032a8
cmp ecx, eax
jae 0x4032a8
cmp byte [ebp + ecx - 0x202e], 0
je 0x4032a8
cmp byte [ebp + ecx - 0x202e], 0x20
je 0x4032a8
cmp byte [ebp + ecx - 0x202e], 0xff
je 0x4032a8
mov dl, byte [ebp + ecx - 0x202e]
mov byte [ebp + ecx - 0xc0e], dl
inc ecx
jmp 0x403270
mov byte [ebp + ecx - 0xc0e], 0
cmp dword [ebp - 0x1010], 0
jne 0x4033ba
cmp byte [ebp - 0xc0e], 0
je 0x4033ba
cmp byte [ebp - 0xc0e], 0x31
jne 0x403368
lea ecx, [ebp - 0xc0e]
push 0xa
push 0xd732520
push 0x3a657261
push 0x7774666f
push 0x53202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
lea ecx, [ebp - 0xc0d]
push 0xa0d
push 0x73252d30
push 0x31373332
push 0x203a7265
push 0x626d756e
push 0x20747261
push 0x50202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
jmp 0x4033a9
lea ecx, [ebp - 0xc0e]
push 0xa
push 0xd732520
push 0x3a657261
push 0x7774666f
push 0x53202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
lea edx, [ebp - 0xc0e]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x4033d3
cmp eax, 0xa
je 0x4033d3
cmp eax, 0xb
jne 0x40351f
cmp dword [ebp - 0x1010], 0
jne 0x4034b8
mov dword [ebp - 0xcc6], 0xf021
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x403418
cmp eax, 0xffffffff
jne 0x403427
mov dword [ebp - 0x1010], 1
jmp 0x4034b8
cmp byte [ebp - 0x2030], 0x61
jne 0x4034b8
sub eax, 6
mov dword [ebp - 0xfe0], eax
xor ecx, ecx
xor edx, edx
cmp ecx, 0x18
jae 0x4034b0
cmp ecx, dword [ebp - 0xfe0]
jae 0x4034b0
cmp byte [ebp + ecx - 0x202e], 0
je 0x4034b0
cmp byte [ebp + ecx - 0x202e], 0x20
je 0x4034b0
cmp byte [ebp + ecx - 0x202e], 0xff
je 0x4034b0
mov al, byte [ebp + ecx - 0x202e]
cmp al, 0x2f
jbe 0x40347b
cmp al, 0x3a
jb 0x40348b
cmp al, 0x60
jbe 0x403483
cmp al, 0x7b
jb 0x40348b
cmp al, 0x40
jbe 0x403495
cmp al, 0x5b
jae 0x403495
mov byte [ebp + edx - 0xbce], al
inc edx
jmp 0x4034ad
cmp edx, 0
je 0x4034ad
cmp byte [ebp + edx - 0xbcf], 0x20
je 0x4034ad
mov byte [ebp + edx - 0xbce], 0x20
inc edx
inc ecx
jmp 0x403441
mov byte [ebp + edx - 0xbce], 0
cmp dword [ebp - 0x1010], 0
jne 0x40351f
cmp byte [ebp - 0xbce], 0
je 0x40351f
push 5
lea edx, [ebp - 0xbce]
push edx
lea edx, [ebp - 0xace]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
mov byte [ebp - 0xac9], 0
lea edx, [ebp - 0xbc6]
push edx
lea edx, [ebp - 0xb0e]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
lea edx, [ebp - 0xb0e]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
je 0x403533
cmp eax, 0xa
jne 0x4038e0
cmp dword [ebp - 0x1010], 0
jne 0x40358e
cmp byte [ebp - 0xace], 0
je 0x40358e
lea ecx, [ebp - 0xace]
push 0xa0d
push 0x7325203a
push 0x65726177
push 0x74666f73
push 0x20657361
push 0x42202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x1010], 0
jne 0x4035e9
cmp byte [ebp - 0xb0e], 0
je 0x4035e9
lea ecx, [ebp - 0xb0e]
push 0xa0d
push 0x7325203a
push 0x65726177
push 0x64726168
push 0x20657361
push 0x42202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x1010], 0
jne 0x403734
push 0x8321
push 0xe0070000
lea eax, [ebp - 0x2034]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x403628
cmp eax, 0xffffffff
jne 0x403637
mov dword [ebp - 0x1010], 1
jmp 0x403734
cmp byte [ebp - 0x2030], 0x61
jne 0x403734
movzx ecx, byte [ebp - 0x2029]
push 0xa0d
push 0x58322e25
push 0x203a4449
push 0x20676169
push 0x44202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
movzx eax, byte [ebp - 0x2028]
mov dword [ebp - 0xb4e], eax
lea ecx, [ebp - 0xb4e]
movzx eax, byte [ebp - 0x2026]
mov ah, byte [ebp - 0x2027]
push 0xa
push 0xd58342e
push 0x25732520
push 0x3a726569
push 0x6c707075
push 0x53202445
push 0x4d495424
push eax
push ecx
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x2c
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
movzx eax, byte [ebp - 0x2017]
push 0xa0d58
push 0x322e2520
push 0x3a726572
push 0x75746361
push 0x66756e61
push 0x4d202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x28
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x1010], 0
jne 0x4037cb
push 0xa021
push 0xe0070000
lea eax, [ebp - 0x2034]
push esp
push 6
push eax
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x403773
cmp eax, 0xffffffff
jne 0x40377f
mov dword [ebp - 0x1010], 1
jmp 0x4037cb
cmp byte [ebp - 0x2030], 0x61
jne 0x4037cb
mov eax, dword [ebp - 0x202e]
bswap eax
push 0
push 0xa0d5838
push 0x2e25203a
push 0x244e5643
push 0x24202445
push 0x4d495424
push eax
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x24
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
cmp dword [ebp - 0x1010], 0
jne 0x403860
mov dword [ebp - 0xcc6], 0x8121
lea edx, [ebp - 0xcca]
push edx
push 6
lea edx, [ebp - 0x2034]
push edx
push 0x1f4
push 0x12c
push 0x40
push 6
push 0
call fcn.00404379
test eax, eax
je 0x403810
cmp eax, 0xffffffff
jne 0x40381c
mov dword [ebp - 0x1010], 1
jmp 0x403860
cmp byte [ebp - 0x2030], 0x61
jne 0x403860
sub eax, 6
xor ecx, ecx
cmp ecx, 0x11
jae 0x403858
cmp ecx, eax
jae 0x403858
cmp byte [ebp + ecx - 0x202e], 0
je 0x403858
cmp byte [ebp + ecx - 0x202e], 0xff
je 0x403858
mov dl, byte [ebp + ecx - 0x202e]
mov byte [ebp + ecx - 0xb8e], dl
inc ecx
jmp 0x40382a
mov byte [ebp + ecx - 0xb8e], 0
cmp dword [ebp - 0x1010], 0
jne 0x4038e0
cmp byte [ebp - 0xb8e], 0
je 0x4038e0
lea ecx, [ebp - 0xb8e]
push 0xa0d
push 0x7325203a
push 0x244e4956
push 0x24202445
push 0x4d495424
push ecx
lea eax, [esp + 4]
push eax
lea edx, [ebp - 0x241c]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x20
lea edx, [ebp - 0x241c]
push edx
call dword [ebx + 0x30]
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
test eax, eax
je 0x4038cf
push 0x5f
push esp
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 4
lea edx, [ebp - 0xb8e]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xe
jne 0x403c67
cmp dword [ebp - 0x1010], 0
jne 0x403c67
mov dword [ebp - 0x11e], 0x3334
cmp dword [esi + 0x270], 0x73696e24
jne 0x4039ac
cmp dword [esi + 0x274], 0x315f3267
jne 0x4039ac
cmp dword [esi + 0x278], 0x74694824
jne 0x4039ac
cmp dword [esi + 0x27c], 0x69686361
jne 0x4039ac
cmp dword [esi + 0x280], 0x6e654720
jne 0x4039ac
cmp dword [esi + 0x284], 0x48532032
jne 0x4039ac
cmp dword [esi + 0x288], 0x33353237
jne 0x4039ac
cmp dword [esi + 0x28c], 0x33342f33
jne 0x4039ac
cmp dword [esi + 0x290], 0x3430325b
jne 0x4039ac
cmp dword [esi + 0x294], 0x285d6b38
jne 0x4039ac
cmp dword [esi + 0x298], 0x61746164
jne 0x4039ac
cmp dword [esi + 0x29c], 0x41432029
jne 0x4039ac
cmp word [esi + 0x2a0], 0x4e
je 0x403a70
cmp dword [esi + 0x270], 0x73696e24
jne 0x403a84
cmp dword [esi + 0x274], 0x325f3267
jne 0x403a84
cmp dword [esi + 0x278], 0x74694824
jne 0x403a84
cmp dword [esi + 0x27c], 0x69686361
jne 0x403a84
cmp dword [esi + 0x280], 0x6e654720
jne 0x403a84
cmp dword [esi + 0x284], 0x48532032
jne 0x403a84
cmp dword [esi + 0x288], 0x33353237
jne 0x403a84
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403a84
cmp dword [esi + 0x290], 0x3430325b
jne 0x403a84
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403a84
cmp dword [esi + 0x298], 0x65646f63
jne 0x403a84
cmp dword [esi + 0x29c], 0x7461642b
jne 0x403a84
cmp dword [esi + 0x2a0], 0x43202961
jne 0x403a84
cmp word [esi + 0x2a4], 0x4e41
jne 0x403a84
cmp byte [esi + 0x2a6], 0
jne 0x403a84
mov dword [ebp - 0xde], 0x7373694e
mov dword [ebp - 0xda], 0x6e61
cmp dword [esi + 0x270], 0x73696e24
jne 0x403b2a
cmp dword [esi + 0x274], 0x335f3267
jne 0x403b2a
cmp dword [esi + 0x278], 0x74694824
jne 0x403b2a
cmp dword [esi + 0x27c], 0x69686361
jne 0x403b2a
cmp dword [esi + 0x280], 0x6e654720
jne 0x403b2a
cmp dword [esi + 0x284], 0x48532032
jne 0x403b2a
cmp dword [esi + 0x288], 0x33353237
jne 0x403b2a
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403b2a
cmp dword [esi + 0x290], 0x3430325b
jne 0x403b2a
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403b2a
cmp dword [esi + 0x298], 0x61746164
jne 0x403b2a
cmp dword [esi + 0x29c], 0x41432029
jne 0x403b2a
cmp word [esi + 0x2a0], 0x4e
je 0x403bee
cmp dword [esi + 0x270], 0x73696e24
jne 0x403c02
cmp dword [esi + 0x274], 0x335f3267
jne 0x403c02
cmp dword [esi + 0x278], 0x74694824
jne 0x403c02
cmp dword [esi + 0x27c], 0x69686361
jne 0x403c02
cmp dword [esi + 0x280], 0x6e654720
jne 0x403c02
cmp dword [esi + 0x284], 0x48532032
jne 0x403c02
cmp dword [esi + 0x288], 0x33353237
jne 0x403c02
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403c02
cmp dword [esi + 0x290], 0x3430325b
jne 0x403c02
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403c02
cmp dword [esi + 0x298], 0x65646f63
jne 0x403c02
cmp dword [esi + 0x29c], 0x7461642b
jne 0x403c02
cmp dword [esi + 0x2a0], 0x43202961
jne 0x403c02
cmp word [esi + 0x2a4], 0x4e41
jne 0x403c02
cmp byte [esi + 0x2a6], 0
jne 0x403c02
mov dword [ebp - 0xde], 0x616e6552
mov dword [ebp - 0xda], 0x746c75
mov dword [ebp - 0x9e], 0x61746948
mov dword [ebp - 0x9a], 0x5f696863
mov dword [ebp - 0x96], 0x326e6547
mov dword [ebp - 0x92], 0x3748535f
mov dword [ebp - 0x8e], 0x33333532
mov dword [ebp - 0x8a], 0x33345f
push 1
push 0
push 0
lea edx, [esi + 0x6c]
push edx
lea edx, [ebp - 0x9e]
push edx
lea edx, [ebp - 0xde]
push edx
lea edx, [ebp - 0x11e]
push edx
lea edx, [ebp - 0xc0e]
push edx
call dword [ebx + 0x70]
push 0
push 0
mov eax, esp
push 0
push eax
push 5
call dword [edi]
add esp, 8
push 0
mov eax, esp
push 0
push eax
push 2
call dword [edi]
add esp, 4
push 0
push 0
push 3
call dword [edi]
jmp 0x403f73
cmp dword [esi + 0x270], 0x73696e24
jne 0x403d38
cmp dword [esi + 0x274], 0x315f3267
jne 0x403d38
cmp dword [esi + 0x278], 0x74694824
jne 0x403d38
cmp dword [esi + 0x27c], 0x69686361
jne 0x403d38
cmp dword [esi + 0x280], 0x6e654720
jne 0x403d38
cmp dword [esi + 0x284], 0x48532032
jne 0x403d38
cmp dword [esi + 0x288], 0x33353237
jne 0x403d38
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403d38
cmp dword [esi + 0x290], 0x3430325b
jne 0x403d38
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403d38
cmp dword [esi + 0x298], 0x61746164
jne 0x403d38
cmp dword [esi + 0x29c], 0x41432029
jne 0x403d38
cmp word [esi + 0x2a0], 0x4e
je 0x403f66
cmp dword [esi + 0x270], 0x73696e24
jne 0x403dfc
cmp dword [esi + 0x274], 0x325f3267
jne 0x403dfc
cmp dword [esi + 0x278], 0x74694824
jne 0x403dfc
cmp dword [esi + 0x27c], 0x69686361
jne 0x403dfc
cmp dword [esi + 0x280], 0x6e654720
jne 0x403dfc
cmp dword [esi + 0x284], 0x48532032
jne 0x403dfc
cmp dword [esi + 0x288], 0x33353237
jne 0x403dfc
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403dfc
cmp dword [esi + 0x290], 0x3430325b
jne 0x403dfc
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403dfc
cmp dword [esi + 0x298], 0x65646f63
jne 0x403dfc
cmp dword [esi + 0x29c], 0x7461642b
jne 0x403dfc
cmp dword [esi + 0x2a0], 0x43202961
jne 0x403dfc
cmp word [esi + 0x2a4], 0x4e41
jne 0x403dfc
cmp byte [esi + 0x2a6], 0
je 0x403f66
cmp dword [esi + 0x270], 0x73696e24
jne 0x403ea2
cmp dword [esi + 0x274], 0x335f3267
jne 0x403ea2
cmp dword [esi + 0x278], 0x74694824
jne 0x403ea2
cmp dword [esi + 0x27c], 0x69686361
jne 0x403ea2
cmp dword [esi + 0x280], 0x6e654720
jne 0x403ea2
cmp dword [esi + 0x284], 0x48532032
jne 0x403ea2
cmp dword [esi + 0x288], 0x33353237
jne 0x403ea2
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403ea2
cmp dword [esi + 0x290], 0x3430325b
jne 0x403ea2
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403ea2
cmp dword [esi + 0x298], 0x61746164
jne 0x403ea2
cmp dword [esi + 0x29c], 0x41432029
jne 0x403ea2
cmp word [esi + 0x2a0], 0x4e
je 0x403f66
cmp dword [esi + 0x270], 0x73696e24
jne 0x403f73
cmp dword [esi + 0x274], 0x335f3267
jne 0x403f73
cmp dword [esi + 0x278], 0x74694824
jne 0x403f73
cmp dword [esi + 0x27c], 0x69686361
jne 0x403f73
cmp dword [esi + 0x280], 0x6e654720
jne 0x403f73
cmp dword [esi + 0x284], 0x48532032
jne 0x403f73
cmp dword [esi + 0x288], 0x33353237
jne 0x403f73
cmp dword [esi + 0x28c], 0x33342f33
jne 0x403f73
cmp dword [esi + 0x290], 0x3430325b
jne 0x403f73
cmp dword [esi + 0x294], 0x285d6b38
jne 0x403f73
cmp dword [esi + 0x298], 0x65646f63
jne 0x403f73
cmp dword [esi + 0x29c], 0x7461642b
jne 0x403f73
cmp dword [esi + 0x2a0], 0x43202961
jne 0x403f73
cmp word [esi + 0x2a4], 0x4e41
jne 0x403f73
cmp byte [esi + 0x2a6], 0
jne 0x403f73
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0xd
jne 0x403f73
jmp 0x403f73
push 0
push 0
push 3
call dword [edi]
push 0
push esp
push 0x1000001
push 0x40b
push dword [ebx + 0x8e8]
call dword [sym.imp.USER32.DLL_SendMessageW]
add esp, 4
push 0
call dword [ebx + 0x44]
pop edi
leave
ret 8