Function at 0x40b360
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2070
call fcn.0041ea80
mov eax, dword [0x433fbc]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
cmp dword [esi + 0x2c], 0
je 0x40b621
cmp dword [esi + 0x38], 0
je 0x40b621
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x34333241
mov dword [ebp - 0x206c], eax
mov eax, dword [esi + 0x60]
mov dword [ebp - 0x10], 0x38373635
mov dword [ebp - 0xc], 0x35343342
mov dword [ebp - 8], 0x39383736
cmp eax, 0x85
jne 0x40b605
mov eax, dword [esi + 0xf8]
lea ecx, [ebp - 0x205c]
mov dword [ebp - 0x2068], eax
lea eax, [esi + 0xac]
push ebx
mov dword [eax], 0x15
xor bl, bl
mov dword [ebp - 0x2024], eax
mov al, byte [0x4342c8]
mov dword [ebp - 0x205c], 4
mov dword [ebp - 0x2070], 0x80000170
mov dword [ebp - 0x2058], 1
mov dword [ebp - 0x2054], 0x4342ca
mov dword [ebp - 0x2050], 1
mov dword [ebp - 0x204c], 0x104
mov dword [ebp - 0x2048], 0x4328c1
mov dword [ebp - 0x2044], 1
mov dword [ebp - 0x2040], 0x105
mov dword [ebp - 0x203c], 0x4328c1
mov dword [ebp - 0x2038], 1
mov dword [ebp - 0x2034], 0
mov dword [ebp - 0x2030], ecx
mov dword [ebp - 0x202c], 4
mov dword [ebp - 0x2028], pe_nt_image_headers32
mov dword [ebp - 0x2020], 4
mov dword [ebp - 0x2060], 0x2008
mov dword [ebp - 0x2064], 0
push edi
mov edi, dword [ebp - 0x205c]
test al, al
jne 0x40b5f1
nop dword [eax]
cmp byte [esi + 0xb1], 0
jne 0x40b4e2
nop dword [eax]
push 1
call fcn.00401170
add esp, 4
cmp byte [0x4342c8], 0
jne 0x40b5f1
cmp byte [esi + 0xb1], 0
je 0x40b4c0
jmp 0x40b4ea
test al, al
jne 0x40b5f1
cmp byte [esi + 0x70], 0
jne 0x40b4f4
test bl, bl
jne 0x40b524
lea eax, [ebp - 0x2060]
push eax
lea eax, [ebp - 0x201c]
push eax
push dword [esi + 0x38]
lea eax, [ebp - 0x2070]
push dword [esi + 0x2c]
push eax
push dword [esi + 0x64]
call sub.cryptoki.dll_C_WrapKey
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x40b5cd
cmp byte [esi + 0x71], 0
mov bl, 1
je 0x40b57d
lea eax, [ebp - 0x2064]
push eax
push 5
lea eax, [ebp - 0x2058]
push eax
push dword [ebp - 0x2060]
lea eax, [ebp - 0x201c]
push eax
push dword [esi + 0x2c]
lea eax, [ebp - 0x2070]
push eax
push dword [esi + 0x64]
call sub.cryptoki.dll_C_UnwrapKey
mov edi, eax
add esp, 0x20
test edi, edi
jne 0x40b5bb
cmp byte [0x4328c0], al
je 0x40b57d
push dword [ebp - 0x2064]
push dword [esi + 0x64]
call sub.cryptoki.dll_C_DestroyObject
add esp, 8
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0x3f800000
push dword [esi + 0x54]
call fcn.00415cd0
mov al, byte [0x4342c8]
add esp, 0xc
test al, al
je 0x40b4b0
mov dword [esi + 0x24], edi
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041e5b5
mov esp, ebp
pop ebp
ret
push edi
call fcn.0041e470
add esp, 4
push eax
push edi
push str._nError__08lx___s__Unwrapping_the_wrapped_key_n
jmp 0x40b5dd
push edi
call fcn.0041e470
add esp, 4
push eax
push edi
push str._nError__08lx___s__Wrapping_the_key_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.004148f0
add esp, 0x10
mov dword [esi + 0x24], edi
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041e5b5
mov esp, ebp
pop ebp
ret
push eax
push str._nInvalid_test_mode___d__in_runAesWrapTests___n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.004148f0
add esp, 0xc
jmp 0x40b63a
push str._nNeither_wrapping_key_nor_key_to_be_wrapped_is_available_in_runAesWrapTests___n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.004148f0
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [esi + 0x24], 1
xor ecx, ebp
pop esi
call fcn.0041e5b5
mov esp, ebp
pop ebp
ret