Function at 0x10041560
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc
mov eax, dword [0x1015fc40]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x10198ec4], 0
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xc8], eax
jne 0x100415c0
test edx, edx
je 0x100415c0
push eax
push edx
push dword [ebp - 0xcc]
mov dword [0x10198ec4], edx
push esi
jmp 0x10041e71
call fcn.10074740
cmp byte [0x10198b3c], 0
jne 0x10041989
push str.KERNELBASE.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, eax
test edx, edx
jne 0x100415f8
push str.KERNELBASE.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edx, eax
test edx, edx
je 0x100416b2
mov cl, 0xe
mov dword [ebp - 0x14], 0x7676760e
mov dword [ebp - 0x10], 0x76767676
xor eax, eax
mov dword [ebp - 0xc], 0x76767676
mov word [ebp - 8], 0x76
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 0xc
jae 0x10041626
mov cl, byte [ebp - 0x14]
jmp 0x10041617
mov byte [ebp - 7], 0
mov cl, 0x28
mov dword [ebp - 0x34], 0xf389228
xor eax, eax
mov dword [ebp - 0x30], 0xcadf2828
mov dword [ebp - 0x2c], 0x29a1f0df
mov word [ebp - 0x28], 0xa3
nop dword [eax]
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xc
jae 0x1004165f
mov cl, byte [ebp - 0x34]
jmp 0x10041650
lea eax, [ebp - 0x13]
mov byte [ebp - 0x27], 0
push eax
lea eax, [ebp - 0x33]
push eax
push edx
call fcn.10079e90
mov esi, eax
mov byte [ebp - 0xa], 0
mov ah, 0x19
mov byte [ebp - 0xa], 0
mov al, ah
mov byte [ebp - 0x10], ah
mov ch, ah
mov dh, ah
xor al, ah
mov cl, 0xa3
mov dl, 0x18
mov byte [ebp - 0xb], al
xor cl, ah
xor dl, ah
xor ch, ah
mov byte [ebp - 0xf], cl
xor dh, ah
mov byte [ebp - 0xe], dl
push 5
lea eax, [ebp - 0xf]
mov byte [ebp - 0xd], ch
push eax
push esi
mov byte [ebp - 0xc], dh
call fcn.1007a0e0
add esp, 0x18
cmp byte [0x1019905d], 0
je 0x100416c5
call fcn.10075db0
call fcn.10075d20
mov ecx, dword [0x10198ae4]
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xc0], 0x10
sub esp, 0xc
mov dword [ebp - 0xc], ecx
sub eax, edx
mov edi, esp
mov dword [ebp - 0xd4], eax
sar eax, 2
mov dword [ebp - 0xd0], eax
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
test eax, eax
je 0x10041741
push eax
mov ecx, edi
call fcn.10042da0
push dword [ebp - 0xd4]
mov esi, dword [edi]
lea eax, [ebp - 0xc0]
push eax
push esi
call fcn.100f13f0
mov eax, dword [ebp - 0xd0]
add esp, 0xc
mov ecx, dword [ebp - 0xc]
lea eax, [esi + eax*4]
mov dword [edi + 4], eax
push ecx
call fcn.10079f10
mov ecx, dword [0x1015f644]
add esp, 0x10
mov dword [ebp - 0x14], 0x6a6d5a08
mov dword [ebp - 0x10], 0x607c7a61
mov dword [eax], ecx
mov cl, 8
mov dword [ebp - 0xc], 0x676b6126
xor eax, eax
mov byte [ebp - 8], 0
nop
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 0xb
jae 0x1004177f
mov cl, byte [ebp - 0x14]
jmp 0x10041770
push 0x50
push 0
push 0
push 1
lea eax, [ebp - 0x13]
mov byte [ebp - 8], 0
push eax
push 0
call dword [sym.imp.USER32.dll_LoadImageA]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov edi, eax
push edi
push 1
push 0x80
push dword [0x10198ec4]
call esi
push edi
push 0
push 0x80
push dword [0x10198ec4]
call esi
push edi
push 2
push 0x80
push dword [0x10198ec4]
call esi
mov byte [ebp - 0x10], 0x68
mov al, 0x3a
xor al, byte [ebp - 0x10]
mov cl, 0xd
mov byte [ebp - 0xf], al
mov dl, 0xa
mov al, byte [ebp - 0x10]
mov ah, 1
xor cl, al
mov byte [ebp - 0xc1], 0
xor dl, al
mov byte [ebp - 8], 0
xor ah, al
mov byte [ebp - 0xe], cl
mov ch, 0x1a
mov byte [ebp - 0xc], ah
xor ch, al
mov byte [ebp - 0xd], dl
mov dh, 0x1c
mov byte [ebp - 0xb], ch
xor dh, al
mov byte [ebp - 8], 0
mov al, byte [ebp - 0xc1]
xor al, byte [ebp - 0x10]
mov byte [ebp - 9], al
lea eax, [ebp - 0xf]
push eax
push dword [0x10198ec4]
mov byte [ebp - 0xa], dh
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x10042c80
push 0xfffffffffffffffc
push dword [0x10198ec4]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0
mov dword [0x10198b38], eax
call fcn.10010600
add esp, 4
call fcn.10012e30
mov esi, eax
call fcn.10032830
lea ecx, [ebp - 0xbc]
call fcn.100230b0
movaps xmm0, xmmword [0x1012ef90]
xor ecx, ecx
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x30], 0x1e4d1c11
mov dword [ebp - 0x2c], 0x184b491d
mov word [ebp - 0x28], 0x1049
mov byte [ebp - 0x26], 0
nop word [eax + eax]
mov al, byte [ebp - 0x40]
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0x19
jb 0x10041890
push 0
lea eax, [ebp - 0xbc]
mov byte [ebp - 0x26], 0
push eax
push ecx
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x3f]
mov dword [esp], 0x41f00000
push eax
call fcn.10023c30
mov eax, dword [esi + 0x24]
mov ecx, dword [eax + 0x3c]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x30], eax
call fcn.10013390
movaps xmm0, xmmword [0x1012ef80]
mov esi, eax
mov dword [esi + 0x78], 0
movups xmmword [esi + 0x1c4], xmm0
movaps xmm0, xmmword [0x1012ef50]
movups xmmword [esi + 0x1d4], xmm0
movaps xmm0, xmmword [0x1012ef60]
movups xmmword [esi + 0x1e4], xmm0
movaps xmm0, xmmword [0x1012ef70]
movups xmmword [esi + 0x1f4], xmm0
xorps xmm0, xmm0
movups xmmword [esi + 0x264], xmm0
movups xmmword [esi + 0x274], xmm0
movups xmmword [esi + 0x284], xmm0
movups xmmword [esi + 0x384], xmm0
movups xmmword [esi + 0x234], xmm0
movups xmmword [esi + 0x244], xmm0
movups xmmword [esi + 0x254], xmm0
push dword [0x10198ec4]
call fcn.10032940
mov edi, dword [ebp - 0x1c]
push dword [edi + 4]
call fcn.10031dc0
add esp, 8
call fcn.10031b60
mov dword [esi + 0x5c], 0
mov dword [esi + 0x60], 0
mov dword [esi + 0x4c], 0
mov dword [esi + 0x50], 0
mov byte [0x10198b3c], 1
mov eax, dword [edi + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
test eax, eax
jne 0x10041e59
call fcn.10031e90
call fcn.10032aa0
call fcn.10012e30
mov esi, eax
call fcn.100198f0
cmp dword [0x10198ed4], 3
jl 0x10041a4e
cmp byte [0x10198e00], 0
jne 0x10041a4e
mov cl, 0x25
mov byte [ebp - 0x24], 0x57
mov dl, cl
mov byte [ebp - 0xc1], 0x74
mov ch, cl
mov byte [ebp - 0xc2], 0x67
xor cl, byte [ebp - 0x24]
mov al, 0x12
xor al, byte [ebp - 0x24]
mov ah, 0x38
mov byte [ebp - 0x23], al
mov dh, 0x77
mov al, byte [ebp - 0xc1]
mov byte [ebp - 0x22], cl
mov cl, byte [ebp - 0x24]
xor al, cl
mov byte [ebp - 0xc3], 0x66
mov byte [ebp - 0x1d], al
xor ah, cl
mov al, byte [ebp - 0xc2]
xor dl, cl
xor al, cl
mov byte [ebp - 0x20], ah
mov byte [ebp - 0x1c], al
xor ch, cl
mov al, byte [ebp - 0xc3]
xor dh, cl
xor al, cl
mov byte [ebp - 0x1a], 0
mov byte [ebp - 0x1b], al
lea eax, [ebp - 0x23]
push eax
mov byte [ebp - 0x21], dl
mov byte [ebp - 0x1f], ch
mov byte [ebp - 0x1e], dh
mov byte [ebp - 0x1a], 0
call fcn.100595e0
push 0xf
call fcn.10074540
add esp, 8
push 0x246
call fcn.10014f20
add esp, 4
test al, al
je 0x10041c88
cmp byte [0x101991d8], 0
sete al
mov byte [0x101991d8], al
test al, al
je 0x10041b6a
cmp dword [0x10198ed4], 6
jl 0x10041af9
mov eax, dword [0x10198b0c]
mov cl, 0x5d
push 1
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xc0], cl
mov dword [eax], 0
mov al, 0xb6
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push eax
push dword [0x10198b10]
call fcn.1007a0e0
mov cl, 0x63
mov byte [ebp - 0xbe], 0
mov al, 0xa0
mov byte [ebp - 0xc0], cl
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b18]
call fcn.1007a0e0
add esp, 0x18
mov cl, 0x1c
mov byte [ebp - 0xbe], 0
mov al, 0xdf
mov byte [ebp - 0xc0], cl
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b1c]
call fcn.1007a0e0
mov cl, 0x58
mov byte [ebp - 0xbe], 0
mov al, 0x9b
mov byte [ebp - 0xc0], cl
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b20]
call fcn.1007a0e0
mov cl, 0x63
mov al, 0xa0
jmp 0x10041c55
cmp dword [0x10198ed4], 6
jl 0x10041be9
mov eax, dword [0x10198b0c]
mov cl, 7
push 1
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xc0], cl
mov dword [eax], 0x40c00000
mov al, 0x73
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push eax
push dword [0x10198b10]
call fcn.1007a0e0
mov cl, 0x7a
mov byte [ebp - 0xbe], 0
mov al, 0x2f
mov byte [ebp - 0xc0], cl
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b18]
call fcn.1007a0e0
add esp, 0x18
mov cl, 0x1b
mov byte [ebp - 0xbe], 0
mov al, 0x4e
mov byte [ebp - 0xc0], cl
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b1c]
call fcn.1007a0e0
mov cl, 0x5a
mov byte [ebp - 0xbe], 0
mov al, 0xf
mov byte [ebp - 0xc0], cl
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b20]
call fcn.1007a0e0
mov cl, 0x4a
mov al, 0x1f
xor al, cl
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push 1
push eax
push dword [0x10198b14]
mov byte [ebp - 0xc0], cl
mov byte [ebp - 0xbe], 0
call fcn.1007a0e0
add esp, 0x24
cmp dword [0x10198ed4], 3
jl 0x10041d40
cmp byte [0x101991d8], 0
je 0x10041d40
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x1c], 0
push 0
push eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
call fcn.1001e140
movss xmm0, dword [esi + 8]
lea eax, [ebp - 0x20]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [esi + 0xc]
push 1
push eax
movss dword [ebp - 0x1c], xmm0
call fcn.1001e190
add esp, 0x14
mov dword [ebp - 0x24], 0x2a290745
mov cl, 0x45
mov dword [ebp - 0x20], 0x2c122e26
mov dword [ebp - 0x1c], 0x322a212b
xor eax, eax
mov byte [ebp - 0x18], 0
nop dword [eax]
xor byte [ebp + eax - 0x23], cl
inc eax
cmp eax, 0xb
jae 0x10041d1f
mov cl, byte [ebp - 0x24]
jmp 0x10041d10
push 0x318b
lea eax, [ebp - 0x23]
mov byte [ebp - 0x18], 0
push 0
push eax
call fcn.1000c4c0
add esp, 0xc
call fcn.100110d0
call fcn.10072b80
call fcn.10012e30
cmp byte [eax + 0xe16], 0
je 0x10041d5f
push 0x20d
call fcn.10014f20
add esp, 4
test al, al
jne 0x10041d68
cmp byte [0x10199051], 0
je 0x10041da1
cmp dword [0x10198ecc], 0x11
jne 0x10041da1
cmp byte [0x1019905d], 0
mov byte [0x10199051], 0
sete al
mov byte [0x1019905d], al
test al, al
jne 0x10041d92
mov byte [0x10199052], 1
call fcn.10063510
call fcn.10075db0
call fcn.10075d20
cmp byte [0x10199050], 0
je 0x10041e34
mov eax, dword [0x1019904c]
mov byte [0x10199050], 0
cmp eax, 1
jne 0x10041dd2
mov dword [edi + 0x20], 4
mov dword [ebp - 0xc0], 4
jmp 0x10041e13
cmp eax, 2
jne 0x10041dea
mov dword [edi + 0x20], 8
mov dword [ebp - 0xc0], 8
jmp 0x10041e13
cmp eax, 3
jne 0x10041e02
mov dword [edi + 0x20], 0x10
mov dword [ebp - 0xc0], 0x10
jmp 0x10041e13
mov dword [edi + 0x20], 0
mov dword [ebp - 0xc0], 0
mov esi, dword [edi + 0x24]
mov byte [edi + 0x1c], 1
call fcn.1003da20
push esi
push dword [ebp - 0xc0]
push eax
call fcn.1003dc20
add esp, 0xc
call fcn.10075d20
call fcn.100115f0
call fcn.1001b1b0
call fcn.10012c40
mov esi, eax
lea ecx, [esi + 0x2c]
push ecx
mov ecx, esi
call fcn.10029600
push esi
call fcn.10031ed0
add esp, 4
push dword [ebp - 0xc8]
push dword [ebp - 0xd8]
push dword [ebp - 0xcc]
push dword [ebp - 0xdc]
mov ecx, dword [edi + 4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100d4eee
mov esp, ebp
pop ebp
ret 0x14