Function at 0x4019d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4276f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
mov eax, dword [0x434794]
push ebp
push esi
push edi
mov dword [esp + 0x18], eax
xor ecx, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], ecx
mov eax, 0x2c
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [0x438d94], eax
mov dword [0x438d90], eax
mov eax, 1
mov edx, 0x78
mov dword [0x439474], eax
mov dword [0x438e44], eax
mov eax, dword [0x439ae0]
push ecx
mov dword [0x438d88], 0xb44
mov dword [0x439478], 0x4b
mov dword [0x43947c], edx
mov dword [0x439490], 3
mov dword [0x438e40], 4
mov dword [0x438d8c], 0x3d0d0210
mov dword [0x4395b0], 0x6f
mov dword [0x439480], 0xa
mov dword [0x439484], edx
mov dword [0x4398c4], ecx
mov dword [0x4398c8], 5
mov dword [0x43948c], 2
push ecx
mov ecx, dword [eax + 0xb4]
push 0xf0
push ecx
call ebp
dec eax
mov edi, 0x4343b0
neg eax
sbb eax, eax
or ecx, 0xffffffff
and al, 0xfe
mov dword [0x439488], 0xffffffff
add eax, 4
mov dword [0x4395ac], eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x439154
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.WAN
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x439165
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x434794]
mov dword [esp + 0xc], ecx
mov edx, dword [0x439ae0]
push 0
push 0
push 0x147
mov eax, dword [edx + 0x78]
mov byte [esp + 0x30], 2
push eax
call ebp
mov esi, eax
cmp esi, 0xffffffff
jle 0x401b76
push esi
lea ecx, [esp + 0x10]
push 0x434398
push ecx
call fcn.00419c70
add esp, 0xc
lea edx, [esp + 0x10]
mov ecx, 0x4398d0
push esi
push edx
call fcn.004028d0
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 3
call fcn.0041ec16
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 2
call fcn.0041eadd
jmp 0x401b89
mov ecx, dword [0x439ae0]
lea eax, [esp + 0xc]
push eax
add ecx, 0x5c
call fcn.0041cb1c
mov edi, dword [esp + 0xc]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x438da3
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x439ae8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0x438b68], 0x21c
mov eax, ecx
mov esi, edi
mov edi, 0x438b70
mov dword [0x438b6c], 0xb
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
mov edi, 0x439ae8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov edx, ecx
mov esi, edi
mov edi, 0x438c71
mov eax, dword [0x438d88]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push eax
and ecx, 3
push 0x438d88
push str.PPTP
push str.C:WINDOWSPPTP.ini
rep movsb byte es:[edi], byte [esi]
call sub.RASAPI32.dll_RasSetEntryPropertiesA
not eax
pop edi
pop esi
test eax, eax
pop ebp
je 0x401c5c
mov ecx, dword [0x439ae0]
push 0x43436c
push 0x3ef
call fcn.0041eefb
mov ecx, dword [0x439ae0]
push 1
push 0x3ed
call fcn.0041eea3
mov ecx, eax
call fcn.0041f0d4
push 0
push 0x438b68
push str.PPTP
push str.C:WINDOWSPPTP.ini
call sub.RASAPI32.dll_RasSetCredentialsA
lea ecx, [esp]
mov byte [esp + 0x18], 1
call fcn.0041eadd
lea ecx, [esp + 8]
mov byte [esp + 0x18], 0
call fcn.0041eadd
lea ecx, [esp + 0xc]
mov dword [esp + 0x18], 0xffffffff
call fcn.0041eadd
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
add esp, 0x1c
ret