Function at 0x402f00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x43b710
push eax
mov eax, 0x1b90
mov dword fs:[0], esp
call fcn.0043b2b0
push ebx
push esi
push edi
mov dword [ebp - 0x26], 0xc4d0c4f
xor ecx, ecx
mov dword [ebp - 0x22], 0xc5a0c4e
mov dword [ebp - 0x1e], 0xc470c40
mov dword [ebp - 0x1a], 0xc090c41
mov dword [ebp - 0x16], 0xc510c4d
mov dword [ebp - 0x12], 0xc4f
mov byte [ebp - 0xe], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x26], ax
inc ecx
cmp ecx, 0xb
jb 0x402f60
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x398]
call fcn.00407ad0
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x80], 0xc530c70
mov dword [ebp - 0x7c], 0xc400c4d
mov dword [ebp - 0x78], 0xc560c41
mov dword [ebp - 0x74], 0xc6f0c55
mov dword [ebp - 0x70], 0xc4a0c49
mov dword [ebp - 0x6c], 0xc4e0c41
mov dword [ebp - 0x68], 0xc030c5e
mov dword [ebp - 0x64], 0xc570c4b
mov dword [ebp - 0x60], 0xc55
mov byte [ebp - 0x5c], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x80], ax
inc ecx
cmp ecx, 0x11
jb 0x402fe0
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x380]
call fcn.00407ad0
mov byte [ebp - 4], 1
xor ecx, ecx
mov dword [ebp - 0x26], 0xc420c54
mov dword [ebp - 0x22], 0xc550c52
mov dword [ebp - 0x1e], 0xc400c4d
mov dword [ebp - 0x1a], 0xc090c51
mov dword [ebp - 0x16], 0xc510c4d
mov dword [ebp - 0x12], 0xc4f
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x26], ax
inc ecx
cmp ecx, 0xb
jb 0x403040
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x368]
call fcn.00407ad0
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x4a], 0xc540c41
xor ecx, ecx
mov dword [ebp - 0x46], 0xc4c0c56
mov dword [ebp - 0x42], 0xc500c56
mov dword [ebp - 0x3e], 0xc540c48
mov dword [ebp - 0x3a], 0xc4c0c06
mov dword [ebp - 0x36], 0xc4e0c52
mov word [ebp - 0x32], ax
mov byte [ebp - 0x30], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x4a], ax
inc ecx
cmp ecx, 0xc
jb 0x4030a3
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x4a]
push eax
lea ecx, [ebp - 0x350]
call fcn.00407ad0
mov byte [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x78], 0xc540c41
mov dword [ebp - 0x74], 0xc4c0c56
mov dword [ebp - 0x70], 0xc500c56
mov dword [ebp - 0x6c], 0xc540c48
mov dword [ebp - 0x68], 0xc070c4b
mov dword [ebp - 0x64], 0xc530c4f
mov dword [ebp - 0x60], 0xc49
mov byte [ebp - 0x5c], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x78], ax
inc ecx
cmp ecx, 0xd
jb 0x403110
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x338]
call fcn.00407ad0
mov byte [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x26], 0xc480c46
mov dword [ebp - 0x22], 0xc460c4e
mov dword [ebp - 0x1e], 0xc4a0c49
mov dword [ebp - 0x1a], 0xc090c48
mov dword [ebp - 0x16], 0xc510c4d
mov dword [ebp - 0x12], 0xc4f
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x26], ax
inc ecx
cmp ecx, 0xb
jb 0x403170
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x320]
call fcn.00407ad0
mov byte [ebp - 4], 5
xor ecx, ecx
mov dword [ebp - 0x48], 0xc530c50
mov dword [ebp - 0x44], 0xc400c4d
mov dword [ebp - 0x40], 0xc4a0c49
mov dword [ebp - 0x3c], 0xc090c48
mov dword [ebp - 0x38], 0xc510c4d
mov dword [ebp - 0x34], 0xc4f
mov byte [ebp - 0x30], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x48], ax
inc ecx
cmp ecx, 0xb
jb 0x4031d0
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x308]
call fcn.00407ad0
mov byte [ebp - 4], 6
xor eax, eax
mov dword [ebp - 0x24], 0xc440c52
xor ecx, ecx
mov dword [ebp - 0x20], 0xc4e0c45
mov dword [ebp - 0x1c], 0xc4b0c4b
mov dword [ebp - 0x18], 0xc420c08
mov dword [ebp - 0x14], 0xc4c0c50
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xa
jb 0x403230
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00407ad0
mov byte [ebp - 4], 7
xor ecx, ecx
mov dword [ebp - 0x48], 0xc530c50
mov dword [ebp - 0x44], 0xc400c4d
mov dword [ebp - 0x40], 0xc5d0c41
mov dword [ebp - 0x3c], 0xc090c56
mov dword [ebp - 0x38], 0xc510c4d
mov dword [ebp - 0x34], 0xc4f
mov byte [ebp - 0x30], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x48], ax
inc ecx
cmp ecx, 0xb
jb 0x403290
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00407ad0
mov byte [ebp - 4], 8
xor eax, eax
mov dword [ebp - 0x20], 0xc450c49
xor ecx, ecx
mov dword [ebp - 0x1c], 0xc520c43
mov dword [ebp - 0x18], 0xc400c0a
mov dword [ebp - 0x14], 0xc420c5e
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x20], ax
inc ecx
cmp ecx, 8
jb 0x4032f0
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00407ad0
mov byte [ebp - 4], 9
xor ecx, ecx
mov dword [ebp - 0x40], 0xc450c49
mov dword [ebp - 0x3c], 0xc0d0c43
mov dword [ebp - 0x38], 0xc5d0c41
mov dword [ebp - 0x34], 0xc43
mov byte [ebp - 0x30], 1
nop
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x40], ax
inc ecx
cmp ecx, 7
jb 0x403340
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00407ad0
mov byte [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x24], 0xc450c49
xor ecx, ecx
mov dword [ebp - 0x20], 0xc520c43
mov dword [ebp - 0x1c], 0xc110c12
mov dword [ebp - 0x18], 0xc420c08
mov dword [ebp - 0x14], 0xc4c0c50
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xa
jb 0x4033a0
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x290]
call fcn.00407ad0
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x5a], 0xc4c0c69
xor ecx, ecx
mov dword [ebp - 0x56], 0xc560c4f
mov dword [ebp - 0x52], 0xc4c0c4a
mov dword [ebp - 0x4e], 0xc5e0c52
mov dword [ebp - 0x4a], 0xc4c0c6c
mov dword [ebp - 0x46], 0xc5e0c48
mov dword [ebp - 0x42], 0xc4a0c4b
mov dword [ebp - 0x3e], 0xc5d0c4b
mov dword [ebp - 0x3a], 0xc540c1e
mov dword [ebp - 0x36], 0xc560c4a
mov word [ebp - 0x32], ax
mov byte [ebp - 0x30], 1
nop
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x5a], ax
inc ecx
cmp ecx, 0x14
jb 0x403420
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x5a]
push eax
lea ecx, [ebp - 0x278]
call fcn.00407ad0
mov byte [ebp - 4], 0xc
xor ecx, ecx
mov dword [ebp - 0x78], 0xc480c77
mov dword [ebp - 0x74], 0xc460c50
mov dword [ebp - 0x70], 0xc4d0c57
mov dword [ebp - 0x6c], 0xc550c47
mov dword [ebp - 0x68], 0xc070c43
mov dword [ebp - 0x64], 0xc530c4f
mov dword [ebp - 0x60], 0xc49
mov byte [ebp - 0x5c], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x78], ax
inc ecx
cmp ecx, 0xd
jb 0x403484
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x260]
call fcn.00407ad0
mov byte [ebp - 4], 0xd
xor ecx, ecx
mov dword [ebp - 0x26], 0xc540c44
mov dword [ebp - 0x22], 0xc530c4f
mov dword [ebp - 0x1e], 0xc440c47
mov dword [ebp - 0x1a], 0xc090c56
mov dword [ebp - 0x16], 0xc510c4d
mov dword [ebp - 0x12], 0xc4f
mov byte [ebp - 0xe], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x26], ax
inc ecx
cmp ecx, 0xb
jb 0x4034e1
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x248]
call fcn.00407ad0
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x52], 0xc4e0c68
xor ecx, ecx
mov dword [ebp - 0x4e], 0xc480c4d
mov dword [ebp - 0x4a], 0xc5d0c61
mov dword [ebp - 0x46], 0xc4b0c56
mov dword [ebp - 0x42], 0xc5b0c47
mov dword [ebp - 0x3e], 0xc590c4f
mov dword [ebp - 0x3a], 0xc480c02
mov dword [ebp - 0x36], 0xc4a0c56
mov word [ebp - 0x32], ax
mov byte [ebp - 0x30], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x52], ax
inc ecx
cmp ecx, 0x10
jb 0x403552
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x52]
push eax
lea ecx, [ebp - 0x230]
call fcn.00407ad0
mov byte [ebp - 4], 0xf
xor ecx, ecx
mov dword [ebp - 0x78], 0xc4c0c69
mov dword [ebp - 0x74], 0xc4c0c52
mov dword [ebp - 0x70], 0xc510c56
mov dword [ebp - 0x6c], 0xc620c74
mov dword [ebp - 0x68], 0xc070c6b
mov dword [ebp - 0x64], 0xc530c4f
mov dword [ebp - 0x60], 0xc49
mov byte [ebp - 0x5c], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x78], ax
inc ecx
cmp ecx, 0xd
jb 0x4035c0
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x218]
call fcn.00407ad0
mov byte [ebp - 4], 0x10
xor ecx, ecx
mov dword [ebp - 0x48], 0xc640c70
mov dword [ebp - 0x44], 0xc4c0c76
mov dword [ebp - 0x40], 0xc490c4b
mov dword [ebp - 0x3c], 0xc090c55
mov dword [ebp - 0x38], 0xc510c4d
mov dword [ebp - 0x34], 0xc4f
mov byte [ebp - 0x30], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x48], ax
inc ecx
cmp ecx, 0xb
jb 0x403620
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x200]
call fcn.00407ad0
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x24], 0xc4e0c6c
xor ecx, ecx
mov dword [ebp - 0x20], 0xc470c50
mov dword [ebp - 0x1c], 0xc600c74
mov dword [ebp - 0x18], 0xc420c08
mov dword [ebp - 0x14], 0xc4c0c50
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xa
jb 0x403680
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00407ad0
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov dword [ebp - 0x48], 0xc540c44
mov dword [ebp - 0x44], 0xc530c4f
mov dword [ebp - 0x40], 0xc440c47
mov dword [ebp - 0x3c], 0xc090c56
mov dword [ebp - 0x38], 0xc510c4d
mov dword [ebp - 0x34], 0xc4f
mov byte [ebp - 0x30], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x48], ax
inc ecx
cmp ecx, 0xb
jb 0x4036e0
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00407ad0
mov byte [ebp - 4], 0x13
xor eax, eax
mov ebx, 0xc73
mov dword [ebp - 0x7e], 0xc580c73
mov dword [ebp - 0x7a], 0xc6a0c51
xor ecx, ecx
mov dword [ebp - 0x76], 0xc560c4a
mov dword [ebp - 0x72], 0xc420c56
mov dword [ebp - 0x6e], 0xc5d0c4b
mov dword [ebp - 0x6a], 0xc590c45
mov dword [ebp - 0x66], 0xc480c02
mov dword [ebp - 0x62], 0xc4a0c56
mov word [ebp - 0x5e], ax
mov byte [ebp - 0x5c], 1
nop word [eax + eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x7e], ax
inc ecx
cmp ecx, 0x10
jb 0x403760
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x7e]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00407ad0
mov byte [ebp - 4], 0x14
xor ecx, ecx
mov dword [ebp - 0x54], 0xc530c50
mov dword [ebp - 0x50], 0xc400c4d
mov dword [ebp - 0x4c], 0xc440c7b
mov dword [ebp - 0x48], 0xc460c48
mov dword [ebp - 0x44], 0xc500c44
mov dword [ebp - 0x40], 0xc4e0c50
mov dword [ebp - 0x3c], 0xc030c5e
mov dword [ebp - 0x38], 0xc570c4b
mov dword [ebp - 0x34], 0xc55
mov byte [ebp - 0x30], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x54], ax
inc ecx
cmp ecx, 0x11
jb 0x4037d2
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00407ad0
mov byte [ebp - 4], 0x15
xor ecx, ecx
mov dword [ebp - 0x2e], 0xc580c53
mov dword [ebp - 0x2a], 0xc620c51
mov dword [ebp - 0x26], 0xc440c4a
mov dword [ebp - 0x22], 0xc5e0c4a
mov dword [ebp - 0x1e], 0xc4c0c52
mov dword [ebp - 0x1a], 0xc050c58
mov dword [ebp - 0x16], 0xc550c49
mov dword [ebp - 0x12], 0xc4b
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x2e], ax
inc ecx
cmp ecx, 0xf
jb 0x403840
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x2e]
push eax
lea ecx, [ebp - 0x188]
call fcn.00407ad0
mov byte [ebp - 4], 0x16
xor ecx, ecx
mov dword [ebp - 0x78], 0xc4f0c53
mov dword [ebp - 0x74], 0xc450c4b
mov dword [ebp - 0x70], 0xc7a0c42
mov dword [ebp - 0x6c], 0xc4e0c4e
mov dword [ebp - 0x68], 0xc070c5c
mov dword [ebp - 0x64], 0xc530c4f
mov dword [ebp - 0x60], 0xc49
mov byte [ebp - 0x5c], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x78], ax
inc ecx
cmp ecx, 0xd
jb 0x4038a4
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x170]
call fcn.00407ad0
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x24], 0xc480c57
xor ecx, ecx
mov dword [ebp - 0x20], 0xc470c4c
mov dword [ebp - 0x1c], 0xc420c46
mov dword [ebp - 0x18], 0xc420c08
mov dword [ebp - 0x14], 0xc4c0c50
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xa
jb 0x403900
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x158]
call fcn.00407ad0
mov byte [ebp - 4], 0x18
xor ecx, ecx
mov dword [ebp - 0x54], 0xc4e0c4a
mov dword [ebp - 0x50], 0xc410c47
mov dword [ebp - 0x4c], 0xc5d0c4b
mov dword [ebp - 0x48], 0xc480c45
mov dword [ebp - 0x44], 0xc5d0c46
mov dword [ebp - 0x40], 0xc440c58
mov dword [ebp - 0x3c], 0xc030c40
mov dword [ebp - 0x38], 0xc570c4b
mov dword [ebp - 0x34], 0xc55
mov byte [ebp - 0x30], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x54], ax
inc ecx
cmp ecx, 0x11
jb 0x403972
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x140]
call fcn.00407ad0
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x7e], 0xc4e0c4a
xor ecx, ecx
mov dword [ebp - 0x7a], 0xc410c47
mov dword [ebp - 0x76], 0xc5d0c4b
mov dword [ebp - 0x72], 0xc420c55
mov dword [ebp - 0x6e], 0xc5f0c5a
mov dword [ebp - 0x6a], 0xc590c4f
mov dword [ebp - 0x66], 0xc480c02
mov dword [ebp - 0x62], 0xc4a0c56
mov word [ebp - 0x5e], ax
mov byte [ebp - 0x5c], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x7e], ax
inc ecx
cmp ecx, 0x10
jb 0x4039e3
push ecx
lea eax, [ebp - 0x5e]
mov byte [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x7e]
push eax
lea ecx, [ebp - 0x128]
call fcn.00407ad0
mov byte [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x24], 0xc120c58
xor ecx, ecx
mov dword [ebp - 0x20], 0xc470c10
mov dword [ebp - 0x1c], 0xc420c46
mov dword [ebp - 0x18], 0xc420c08
mov dword [ebp - 0x14], 0xc4c0c50
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
nop
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xa
jb 0x403a40
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x110]
call fcn.00407ad0
mov byte [ebp - 4], 0x1b
xor eax, eax
mov dword [ebp - 0x46], 0xc170c58
xor ecx, ecx
mov dword [ebp - 0x42], 0xc470c16
mov dword [ebp - 0x3e], 0xc420c46
mov dword [ebp - 0x3a], 0xc420c08
mov dword [ebp - 0x36], 0xc4c0c50
mov word [ebp - 0x32], ax
mov byte [ebp - 0x30], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x46], ax
inc ecx
cmp ecx, 0xa
jb 0x403aa0
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x46]
push eax
lea ecx, [ebp - 0xf8]
call fcn.00407ad0
mov byte [ebp - 4], 0x1c
xor eax, eax
mov dword [ebp - 0x24], 0xc180c58
xor ecx, ecx
mov dword [ebp - 0x20], 0xc470c14
mov dword [ebp - 0x1c], 0xc420c46
mov dword [ebp - 0x18], 0xc420c08
mov dword [ebp - 0x14], 0xc4c0c50
mov word [ebp - 0x10], ax
mov byte [ebp - 0xe], 1
nop dword [eax]
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x24], ax
inc ecx
cmp ecx, 0xa
jb 0x403b00
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0xe0]
call fcn.00407ad0
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x4a], 0xc4c0c43
xor ecx, ecx
mov dword [ebp - 0x46], 0xc550c46
mov dword [ebp - 0x42], 0xc570c4d
mov dword [ebp - 0x3e], 0xc4f0c52
mov dword [ebp - 0x3a], 0xc4c0c06
mov dword [ebp - 0x36], 0xc4e0c52
mov word [ebp - 0x32], ax
mov byte [ebp - 0x30], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x4a], ax
inc ecx
cmp ecx, 0xc
jb 0x403b63
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x4a]
push eax
lea ecx, [ebp - 0xc8]
call fcn.00407ad0
mov byte [ebp - 4], 0x1e
xor ecx, ecx
mov dword [ebp - 0x26], 0xc430c73
mov dword [ebp - 0x22], 0xc460c4b
mov dword [ebp - 0x1e], 0xc530c77
mov dword [ebp - 0x1a], 0xc090c45
mov dword [ebp - 0x16], 0xc510c4d
mov dword [ebp - 0x12], 0xc4f
mov byte [ebp - 0xe], 1
lea eax, [ecx + 0xc20]
xor word [ebp + ecx*2 - 0x26], ax
inc ecx
cmp ecx, 0xb
jb 0x403bc0
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 0xe], 0
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00407ad0
xor edi, edi
lea esi, [ebp - 0x398]
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x403bfb
mov ecx, dword [esi]
call fcn.00416f90
test eax, eax
jne 0x403d23
inc edi
add esi, 0x18
cmp edi, 0x20
jl 0x403bf1
push 0x1000
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x403d23
lea eax, [ebp - 0x84]
push eax
push 0x1000
lea eax, [ebp - 0x1b98]
push eax
call dword [sym.imp.KERNEL32.dll_K32EnumDeviceDrivers]
test eax, eax
je 0x403d1f
mov edi, dword [ebp - 0x84]
cmp edi, 0x1000
jae 0x403d1f
shr edi, 2
xor esi, esi
test edi, edi
je 0x403d1f
mov ebx, dword [sym.imp.KERNEL32.dll_K32GetDeviceDriverBaseNameW]
nop word [eax + eax]
push 0x400
lea eax, [ebp - 0xb98]
push eax
push dword [ebp + esi*4 - 0x1b98]
call ebx
test eax, eax
je 0x403d16
mov dword [ebp - 0x96], 0xc510c4e
xor eax, eax
mov dword [ebp - 0x92], 0xc0d0c44
mov dword [ebp - 0x8e], 0xc5c0c57
mov dword [ebp - 0x8a], 0xc55
mov byte [ebp - 0x86], 1
nop
lea ecx, [eax + 0xc20]
xor word [ebp + eax*2 - 0x96], cx
inc eax
cmp eax, 7
jb 0x403cc0
mov byte [ebp - 0x86], 0
lea ecx, [ebp - 0x96]
lea eax, [ebp - 0xb98]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x403d0d
test dx, dx
je 0x403d09
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x403d0d
add eax, 4
add ecx, 4
test dx, dx
jne 0x403ce7
xor eax, eax
jmp 0x403d12
sbb eax, eax
or eax, 1
test eax, eax
je 0x403d23
inc esi
cmp esi, edi
jl 0x403c70
xor bl, bl
jmp 0x403d25
mov bl, 1
push 0x407040
push 0x20
push 0x18
lea eax, [ebp - 0x398]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.0043a171
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret