Function at 0x401ba0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x40dec0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x38
mov ecx, dword [0x42587c]
mov eax, dword [0x425878]
mov edx, dword [0x425880]
mov dword [esp + 0x1c], ecx
mov cl, byte [esp + 3]
push ebx
mov dword [esp + 0x1c], eax
mov eax, dword [0x425884]
xor ebx, ebx
push edi
mov byte [esp + 0x10], cl
push ebx
lea ecx, [esp + 0x14]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
call fcn.00404df0
mov edi, 0x4250a4
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x48], ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x4250a4
lea ecx, [esp + 0x18]
call fcn.004053d0
lea edx, [esp + 0x10]
push 0x4248d0
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 1
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4240fc
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 2
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x423928
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 3
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x423154
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 4
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x422980
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 5
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4221ac
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 6
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4219d8
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 7
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
push 0x421204
lea edx, [esp + 0x14]
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 8
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x420a30
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 9
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x42025c
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0xa
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41fa88
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0xb
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41f2b4
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0xc
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41eae0
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0xd
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41e30c
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0xe
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41db38
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0xf
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41d364
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x10
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41cb90
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x11
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41c3bc
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x12
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41bbe8
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x13
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41b414
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x14
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
mov byte [esp + 0x48], bl
push 1
lea ecx, [esp + 0x34]
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41ac40
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x15
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41a46c
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x16
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x419c98
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x17
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4194c4
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x18
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
push 0x418cf0
lea edx, [esp + 0x14]
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x19
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41851c
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x1a
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x417d48
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x1b
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x417574
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x1c
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x416da0
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x1d
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4165cc
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x1e
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x415df8
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x1f
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x415624
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x20
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x414e50
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x21
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41467c
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x22
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x413ea8
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x23
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4136d4
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x24
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x412f00
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x25
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
mov byte [esp + 0x48], bl
push 1
lea ecx, [esp + 0x34]
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x41272c
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x26
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x411f58
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x27
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x411784
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x28
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
lea edx, [esp + 0x10]
push 0x4110c8
lea eax, [esp + 0x34]
push edx
push eax
call fcn.004057a0
add esp, 0xc
mov ecx, dword [0x40f258]
mov byte [esp + 0x48], 0x29
push ecx
push ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.00404bf0
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x4c], bl
call fcn.00404df0
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc], ebx
pop edi
cmp eax, ebx
pop ebx
jne 0x4025ee
mov eax, 0x40f254
mov ecx, dword [esp + 0x10]
lea edx, [esp + 4]
push edx
push ecx
push eax
call fcn.004018f0
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
push edx
push ecx
push eax
call fcn.00401a40
add esp, 0x18
call eax
push 1
lea ecx, [esp + 0xc]
mov dword [esp + 0x44], 0xffffffff
call fcn.00404df0
mov ecx, dword [esp + 0x38]
xor eax, eax
mov dword fs:[0], ecx
add esp, 0x44
ret