Function at 0x40acb8
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43848f
mov eax, dword fs:[0]
push eax
sub esp, 0x8a8
mov eax, dword [0x4444c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x7f0], ecx
mov ecx, dword [ebp - 0x7f0]
call fcn.0040f180
push str.DoInstall.cpp
lea ecx, [ebp - 0x48]
call fcn.00408211
and dword [ebp - 4], 0
push str.start_Install_Drivers
lea eax, [ebp - 0x2c]
push eax
call fcn.00419558
pop ecx
pop ecx
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f8], eax
mov byte [ebp - 4], 1
push 1
push dword [ebp - 0x7f8]
push 3
push 0x137
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402ad2
mov byte [ebp - 4], 0
mov dword [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00402ad2
or dword [ebp - 4], 0xffffffff
push 0
push 0x25
lea eax, [ebp - 0x298]
push eax
call fcn.0041aee6
add esp, 0xc
mov dword [ebp - 4], 4
mov dword [ebp - 0x7fc], str._sc.exe
mov eax, dword [ebp - 0x7fc]
add eax, 2
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x7fc]
mov ax, word [eax]
mov word [ebp - 0x802], ax
add dword [ebp - 0x7fc], 2
cmp word [ebp - 0x802], 0
jne 0x40ada6
mov eax, dword [ebp - 0x7fc]
sub eax, dword [ebp - 0x800]
sar eax, 1
mov dword [ebp - 0x808], eax
push dword [ebp - 0x808]
push str._sc.exe
lea ecx, [ebp - 0x298]
call fcn.004073b3
push 0
push 0
push str.start_COMSysApp
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
push 0
push str.start_RpcSs
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
push 0
push str.start_EventSystem
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
push 0x26
lea eax, [ebp - 0x27c]
push eax
call fcn.0041aee6
add esp, 0xc
mov byte [ebp - 4], 5
push 0x43b782
lea ecx, [ebp - 0x2d0]
call fcn.00408211
mov byte [ebp - 4], 6
push 0x43b782
lea ecx, [ebp - 0x224]
call fcn.00408211
mov byte [ebp - 4], 7
push 0x43bb1c
lea ecx, [ebp - 0x208]
call fcn.00408e1f
mov byte [ebp - 4], 8
push 0x43bb20
lea ecx, [ebp - 0x1ec]
call fcn.00408e1f
mov byte [ebp - 4], 9
push 0x43bb1c
lea ecx, [ebp - 0x260]
call fcn.00408e1f
mov byte [ebp - 4], 0xa
push 0x43bb20
lea ecx, [ebp - 0x240]
call fcn.00408e1f
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00416670
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00408632
pop ecx
pop ecx
mov dword [ebp - 0x80c], 0x43bb18
mov eax, dword [ebp - 0x80c]
inc eax
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x80c]
mov al, byte [eax]
mov byte [ebp - 0x811], al
inc dword [ebp - 0x80c]
cmp byte [ebp - 0x811], 0
jne 0x40af28
mov eax, dword [ebp - 0x80c]
sub eax, dword [ebp - 0x810]
mov dword [ebp - 0x818], eax
push dword [ebp - 0x818]
push 0x43bb18
push 2
push 1
lea ecx, [ebp - 0x2d0]
call fcn.00416775
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00408591
pop ecx
pop ecx
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00407683
mov dword [ebp - 0x81c], 0x43bb20
mov eax, dword [ebp - 0x81c]
add eax, 2
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x81c]
mov ax, word [eax]
mov word [ebp - 0x822], ax
add dword [ebp - 0x81c], 2
cmp word [ebp - 0x822], 0
jne 0x40afb9
mov eax, dword [ebp - 0x81c]
sub eax, dword [ebp - 0x820]
sar eax, 1
mov dword [ebp - 0x828], eax
push dword [ebp - 0x828]
push 0x43bb20
lea ecx, [ebp - 0x1ec]
call fcn.004073b3
mov dword [ebp - 0x82c], str.BignoxBigNoxVMRT_
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x82c]
mov al, byte [eax]
mov byte [ebp - 0x831], al
inc dword [ebp - 0x82c]
cmp byte [ebp - 0x831], 0
jne 0x40b01b
mov eax, dword [ebp - 0x82c]
sub eax, dword [ebp - 0x830]
mov dword [ebp - 0x838], eax
push dword [ebp - 0x838]
push str.BignoxBigNoxVMRT_
lea ecx, [ebp - 0x2d0]
call fcn.004072b5
mov dword [ebp - 0x83c], str.NOXSERVICE.exe
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x83c]
mov al, byte [eax]
mov byte [ebp - 0x841], al
inc dword [ebp - 0x83c]
cmp byte [ebp - 0x841], 0
jne 0x40b077
mov eax, dword [ebp - 0x83c]
sub eax, dword [ebp - 0x840]
mov dword [ebp - 0x848], eax
push dword [ebp - 0x848]
push str.NOXSERVICE.exe
lea ecx, [ebp - 0x2d0]
call fcn.004072b5
push str.DoInstall.cpp
lea ecx, [ebp - 0x80]
call fcn.00408211
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2d0]
call fcn.004169b1
mov dword [ebp - 0x768], eax
push dword [ebp - 0x768]
push str.DPInst.exe_path952:_s
lea eax, [ebp - 0x64]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x850], eax
mov byte [ebp - 4], 0xe
push 1
push dword [ebp - 0x850]
push 3
push 0x14d
lea eax, [ebp - 0x80]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0xf
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00402ad2
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00402ad2
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00408591
pop ecx
pop ecx
mov ecx, dword [ebp - 0x7f0]
call fcn.00411e6d
mov ecx, dword [ebp - 0x7f0]
call fcn.0040f7ec
push 0xffffffffffffffff
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6f0], esp
lea eax, [ebp - 0x208]
push eax
call fcn.00416670
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x7f0]
call fcn.0040d183
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x778], eax
mov byte [ebp - 4], 0x11
push dword [ebp - 0x778]
lea ecx, [ebp - 0x224]
call fcn.00406f0c
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00402ad2
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x7f0]
movzx eax, byte [eax + 8]
test eax, eax
je 0x40b930
lea eax, [ebp - 0x781]
mov dword [ebp - 0x780], eax
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x858], eax
mov byte [ebp - 4], 0x13
push 0
push 0
lea ecx, [ebp - 0x2ec]
call fcn.004050af
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x2ec]
push eax
push str.DefaultInstall
push 0x43b7a8
push 0x80000001
call fcn.0041b45e
add esp, 0x10
lea ecx, [ebp - 0x2ec]
call fcn.00416ddb
mov dword [ebp - 0x788], eax
push 0x43bd10
push dword [ebp - 0x788]
call fcn.0041d8b3
pop ecx
pop ecx
test eax, eax
je 0x40b33a
push str.DoInstall.cpp
lea ecx, [ebp - 0xd4]
call fcn.00408211
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2ec]
call fcn.00416ddb
mov dword [ebp - 0x798], eax
push dword [ebp - 0x798]
push str.InfDefaultInstallDriver_:_S
lea eax, [ebp - 0xb8]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x860], eax
mov byte [ebp - 4], 0x16
push 1
push dword [ebp - 0x860]
push 3
push 0x15c
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x17
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00402ad2
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x18
push 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.00402ad2
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7f0]
call fcn.004136ba
push 0
push str.DefaultInstall
push 0x43b7a8
push 0x80000001
call fcn.0041b3d2
add esp, 0x10
jmp 0x40b644
mov ecx, dword [ebp - 0x7f0]
call fcn.0041382a
mov dword [ebp - 0x244], eax
push str.DoInstall.cpp
lea ecx, [ebp - 0x10c]
call fcn.00408211
mov byte [ebp - 4], 0x19
push dword [ebp - 0x244]
push str.install_sup_result:_d
lea eax, [ebp - 0xf0]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x868], eax
mov byte [ebp - 4], 0x1a
push 1
push dword [ebp - 0x868]
push 3
push 0x163
lea eax, [ebp - 0x10c]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x1b
push 0
push 1
lea ecx, [ebp - 0xf0]
call fcn.00402ad2
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x1c
push 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.00402ad2
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x244], 2
jne 0x40b3f5
mov dword [0x446288], 2
jmp 0x40b644
cmp dword [ebp - 0x244], 0xffffffff
jne 0x40b486
xor eax, eax
mov word [ebp - 0x3ec], ax
push 0xfe
push 0
lea eax, [ebp - 0x3ea]
push eax
call fcn.0041d130
add esp, 0xc
push str.delete
push 0x80
lea eax, [ebp - 0x3ec]
push eax
call fcn.0041d850
add esp, 0xc
push str.YSDrv
push 0x80
lea eax, [ebp - 0x3ec]
push eax
call fcn.0041d7db
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [0x446288], 2
jmp 0x40b644
cmp dword [ebp - 0x244], 0
je 0x40b5cf
push str.DoInstall.cpp
lea ecx, [ebp - 0x144]
call fcn.00408211
mov byte [ebp - 4], 0x1d
push str.start_DPInst_setup
lea eax, [ebp - 0x128]
push eax
call fcn.00419558
pop ecx
pop ecx
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x870], eax
mov byte [ebp - 4], 0x1e
push 1
push dword [ebp - 0x870]
push 3
push 0x172
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x1f
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.00402ad2
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x20
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.00402ad2
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7f0]
call fcn.00413860
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jne 0x40b542
mov dword [0x446288], 2
mov ecx, dword [ebp - 0x7f0]
call fcn.0040dba3
mov ecx, dword [ebp - 0x7f0]
call fcn.004136ba
xor eax, eax
mov word [ebp - 0x4ec], ax
push 0xfe
push 0
lea eax, [ebp - 0x4ea]
push eax
call fcn.0041d130
add esp, 0xc
push str.start
push 0x80
lea eax, [ebp - 0x4ec]
push eax
call fcn.0041d850
add esp, 0xc
push str.YSDrv
push 0x80
lea eax, [ebp - 0x4ec]
push eax
call fcn.0041d7db
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40b644
xor eax, eax
mov word [ebp - 0x5ec], ax
push 0xfe
push 0
lea eax, [ebp - 0x5ea]
push eax
call fcn.0041d130
add esp, 0xc
push str.start
push 0x80
lea eax, [ebp - 0x5ec]
push eax
call fcn.0041d850
add esp, 0xc
push str.YSDrv
push 0x80
lea eax, [ebp - 0x5ec]
push eax
call fcn.0041d7db
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x874], str._stop
mov eax, dword [ebp - 0x874]
add eax, 2
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x874]
mov ax, word [eax]
mov word [ebp - 0x87a], ax
add dword [ebp - 0x874], 2
cmp word [ebp - 0x87a], 0
jne 0x40b65d
mov eax, dword [ebp - 0x874]
sub eax, dword [ebp - 0x878]
sar eax, 1
mov dword [ebp - 0x880], eax
push dword [ebp - 0x880]
push str._stop
lea ecx, [ebp - 0x2b4]
call fcn.004073b3
mov dword [ebp - 0x884], str.YSDrv
mov eax, dword [ebp - 0x884]
add eax, 2
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x884]
mov ax, word [eax]
mov word [ebp - 0x88a], ax
add dword [ebp - 0x884], 2
cmp word [ebp - 0x88a], 0
jne 0x40b6c1
mov eax, dword [ebp - 0x884]
sub eax, dword [ebp - 0x888]
sar eax, 1
mov dword [ebp - 0x890], eax
push dword [ebp - 0x890]
push str.YSDrv
lea ecx, [ebp - 0x2b4]
call fcn.004073b3
push 0xffffffffffffffff
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6f4], esp
lea eax, [ebp - 0x2b4]
push eax
call fcn.00416670
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x7f0]
call fcn.0040d183
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x7c0], eax
mov byte [ebp - 4], 0x21
push dword [ebp - 0x7c0]
lea ecx, [ebp - 0x224]
call fcn.00406f0c
mov byte [ebp - 4], 0x22
push 0
push 1
lea ecx, [ebp - 0x160]
call fcn.00402ad2
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x898], str.STOPPED
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x898]
mov al, byte [eax]
mov byte [ebp - 0x89d], al
inc dword [ebp - 0x898]
cmp byte [ebp - 0x89d], 0
jne 0x40b78c
mov eax, dword [ebp - 0x898]
sub eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8a4], eax
push dword [ebp - 0x8a4]
push 0
push str.STOPPED
lea ecx, [ebp - 0x224]
call fcn.00408f4c
mov dword [ebp - 0x7c4], eax
mov eax, dword [0x43b6a8]
cmp eax, dword [ebp - 0x7c4]
jne 0x40b8a4
push str.DoInstall.cpp
lea ecx, [ebp - 0x198]
call fcn.00408211
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x224]
call fcn.004169b1
mov dword [ebp - 0x7d4], eax
push dword [ebp - 0x7d4]
push str.do_replace_driver_:_s
lea eax, [ebp - 0x17c]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x8ac], eax
mov byte [ebp - 4], 0x24
push 1
push dword [ebp - 0x8ac]
push 3
push 0x18f
lea eax, [ebp - 0x198]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x25
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.00402ad2
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x26
push 0
push 1
lea ecx, [ebp - 0x198]
call fcn.00402ad2
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7f0]
call fcn.00415e1a
mov dword [0x446288], 2
jmp 0x40b919
xor eax, eax
mov word [ebp - 0x6ec], ax
push 0xfe
push 0
lea eax, [ebp - 0x6ea]
push eax
call fcn.0041d130
add esp, 0xc
push str.start
push 0x80
lea eax, [ebp - 0x6ec]
push eax
call fcn.0041d850
add esp, 0xc
push str.YSDrv
push 0x80
lea eax, [ebp - 0x6ec]
push eax
call fcn.0041d7db
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x6ec]
push eax
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0x27
push 0
push 1
lea ecx, [ebp - 0x2ec]
call fcn.004050af
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x7f0]
call fcn.0040d5c3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6f8], esp
push 0x445d44
call fcn.00416670
call fcn.0041b128
add esp, 0x1c
mov ecx, dword [ebp - 0x7f0]
call fcn.0040bb25
mov byte [0x446284], 1
push 0xffffffffffffffff
push dword [0x446244]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x446244]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x7f0]
call fcn.00409781
push str.DoInstall.cpp
lea ecx, [ebp - 0x1d0]
call fcn.00408211
mov byte [ebp - 4], 0x28
push str.Install_Complete_________________________n_n
lea eax, [ebp - 0x1b4]
push eax
call fcn.00419558
pop ecx
pop ecx
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], eax
mov byte [ebp - 4], 0x29
push 1
push dword [ebp - 0x8b4]
push 3
push 0x1a4
lea eax, [ebp - 0x1d0]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x2a
push 0
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00402ad2
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x2b
push 0
push 1
lea ecx, [ebp - 0x1d0]
call fcn.00402ad2
mov byte [ebp - 4], 0xc
push 0
push 0
push str.start_iphlpsvc
lea ecx, [ebp - 0x298]
call fcn.00416ddb
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0x2c
push 0
push 1
lea ecx, [ebp - 0x2b4]
call fcn.004050af
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0x2d
push 0
push 1
lea ecx, [ebp - 0x240]
call fcn.004050af
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0x2e
push 0
push 1
lea ecx, [ebp - 0x260]
call fcn.004050af
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0x2f
push 0
push 1
lea ecx, [ebp - 0x1ec]
call fcn.004050af
mov byte [ebp - 4], 8
mov byte [ebp - 4], 0x30
push 0
push 1
lea ecx, [ebp - 0x208]
call fcn.004050af
mov byte [ebp - 4], 7
mov byte [ebp - 4], 0x31
push 0
push 1
lea ecx, [ebp - 0x224]
call fcn.00402ad2
mov byte [ebp - 4], 6
mov byte [ebp - 4], 0x32
push 0
push 1
lea ecx, [ebp - 0x2d0]
call fcn.00402ad2
mov byte [ebp - 4], 5
mov byte [ebp - 4], 0x33
push 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.004050af
mov byte [ebp - 4], 4
mov dword [ebp - 4], 0x34
push 0
push 1
lea ecx, [ebp - 0x298]
call fcn.004050af
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c438
leave
ret