Function at 0x401000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffe0
sub esp, 0x58
mov dword [esp + 8], 0x41b58ab3
lea eax, [esp + 8]
shr eax, 3
mov dword [esp + 0xc], str.1_16_22_22_sAdjustTokenPrivileges
mov dword [esp + 0x10], fcn.00401000
push esi
mov dword [eax + 0x30000000], 0xf8f8f1f1
push edi
mov dword [eax + 0x30000004], 0xf3f3f306
xor edi, edi
mov byte [eax + 0x30000008], 0xf3
call fcn.0040ce90
mov ecx, eax
call fcn.0040c480
mov dword [esp + 0x5c], eax
test eax, eax
je 0x4011c4
lea esi, [esp + 0x20]
shr esi, 3
add esi, 0x30000000
push 2
push esi
call sym.Uninstaller.exe___asan_set_shadow_00
lea eax, [esp + 0x2e]
mov byte [esi + 2], 6
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x36]
mov word [esp + 0x32], 0x6f54
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x37]
mov word [esp + 0x39], 0x6e65
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x3d]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x44]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x49]
mov dword [esp + 0x48], 0x69766972
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x4e]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x58]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x48]
mov dword [esp + 0x59], 0x73656765
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x57]
mov dword [esp + 0x4c], 0x756a6441
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x63]
mov byte [esp + 0x5b], 0x50
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x55]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x5d]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x71]
mov word [esp + 0x60], 0x7473
push eax
call sym.Uninstaller.exe___asan_store1
add esp, 0x40
mov byte [esp + 0x35], 0
lea eax, [esp + 0x22]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x35]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x37]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x3e]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x34]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x37]
push eax
call sym.Uninstaller.exe___asan_store1
lea eax, [esp + 0x40]
push eax
call sym.Uninstaller.exe___asan_store1
mov byte [esp + 0x44], 0x6b
lea eax, [esp + 0x4c]
push eax
call sym.Uninstaller.exe___asan_store1
add esp, 0x20
mov byte [esp + 0x30], 0x6c
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x60]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4011c4
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call eax
mov edi, eax
lea esi, [esp + 0x20]
shr esi, 3
add esi, 0x30000000
push 2
push esi
call sym.Uninstaller.exe___asan_set_shadow_f8
lea eax, [esp + 0x18]
mov byte [esi + 2], 0xf8
shr eax, 3
add eax, 0x30000000
mov dword [esp + 0x18], 0x45e0360e
push 9
push eax
call sym.Uninstaller.exe___asan_set_shadow_00
add esp, 0x10
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret