Function at 0x40e690
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x420cab
mov eax, dword fs:[0]
push eax
sub esp, 0x114
mov eax, dword [0x433fbc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x64], 1
lea eax, [esi + 0x7c]
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0x54], eax
lea eax, [esi + 0x88]
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0x60], 0x4342ca
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x58], pe_nt_image_headers32
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x4c], 0x161
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x18], 0x34333231
mov dword [ebp - 0x14], 0x38373635
mov dword [ebp - 0x104], edi
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xfc], edi
mov eax, dword [esi + 0x60]
mov ecx, 0x4342d0
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 4], edi
call fcn.004025d0
xorps xmm0, xmm0
mov byte [ebp - 0xd9], 0x35
mov ecx, dword [eax + 0x48]
mov eax, dword [esi + 0xc0]
test eax, eax
mov word [ebp - 0x30], 0xffff
cmovne ecx, eax
mov byte [ebp - 0x2e], 0xff
lea eax, [ebp - 0xd9]
mov dword [ebp - 0xe0], ecx
push eax
push ecx
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x1d], edi
movups xmmword [ebp - 0x2d], xmm0
mov byte [ebp - 0x19], 0
call fcn.004038e0
mov edx, dword [esi + 0x8c]
mov eax, edx
mov ecx, dword [ebp - 0x104]
mov dword [esi + 0x90], edx
mov dword [ebp - 0xf8], ecx
cmp eax, 0x566
ja 0x40e814
je 0x40e8cc
sub eax, 0x360
cmp eax, 0x36
ja case.0x40e7cc.865
movzx eax, byte [eax + 0x40ec0c]
jmp dword [eax*4 + 0x40ebfc]
lea eax, [ebp - 0x30]
mov dword [ebp - 0xe8], 0x18
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xec]
mov dword [esi + 0x98], 8
jmp 0x40eacd
mov dword [esi + 0x94], 0
mov dword [esi + 0x98], 0
jmp case.0x40e7cc.865
cmp eax, 0x1104
ja 0x40e8f9
je 0x40e8cc
cmp eax, 0x1100
ja 0x40e878
je 0x40e8cc
cmp eax, 0x567
jne case.0x40e7cc.865
movaps xmm0, xmmword [0x427140]
lea eax, [ebp - 0xc0]
mov dword [esi + 0x94], eax
mov eax, dword [ebp - 0xe0]
movups xmmword [ebp - 0xc0], xmm0
mov dword [esi + 0x98], 0x18
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], eax
jmp case.0x40e7cc.865
sub eax, 0x1101
je 0x40e88d
sub eax, 1
je 0x40e8cc
sub eax, 1
jne case.0x40e7cc.865
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa8]
mov dword [esi + 0x94], eax
mov eax, dword [ebp - 0xe0]
mov dword [esi + 0x98], 0x10
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], eax
jmp case.0x40e7cc.865
lea eax, [ebp - 0xec]
mov dword [esi + 0x98], 8
mov dword [esi + 0x94], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xe8], eax
jmp case.0x40e7cc.865
cmp eax, 0x80000511
ja 0x40ea2e
je 0x40e9ee
cmp eax, 0x1105
je 0x40e9b3
cmp eax, 0x80000364
jne case.0x40e7cc.865
cmp edx, 0x365
jne 0x40e93d
lea eax, [ebp - 0xf0]
mov dword [esi + 0x98], 4
jmp 0x40eacd
cmp edx, 0x360
jne 0x40e995
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x18], 0x54545454
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x54545454
push eax
mov ecx, esi
call fcn.00402930
mov edi, eax
test edi, edi
je 0x40e980
push edi
call fcn.0041e470
add esp, 4
push eax
push edi
push str._nError__lx___s__on_CreateSecretKey_n
jmp 0x40eb8b
lea eax, [ebp - 0xf4]
mov dword [esi + 0x98], 4
jmp 0x40eacd
cmp edx, 0x80000364
jne case.0x40e7cc.865
lea eax, [esi + 0x2c]
mov dword [esi + 0x98], 4
jmp 0x40eacd
movaps xmm0, xmmword [0x427140]
lea eax, [ebp - 0xd8]
mov dword [esi + 0x94], eax
mov eax, dword [ebp - 0xe0]
movups xmmword [ebp - 0xd8], xmm0
mov dword [esi + 0x98], 0x18
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xc4], eax
jmp case.0x40e7cc.865
mov eax, dword [esi + 0x38]
movaps xmm0, xmmword [0x427140]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x98], 0x30
movups xmmword [ebp - 0x90], xmm0
mov dword [esi + 0x90], 0x80000511
mov dword [esi + 0x98], 0x18
jmp 0x40eacd
cmp eax, 0x80000514
je 0x40ea97
add eax, 0x7ffff5fe
cmp eax, 1
ja case.0x40e7cc.865
lea eax, [ebp - 0x38]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x114], eax
mov eax, dword [esi + 0x9c]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x118], 8
mov dword [ebp - 0x110], 8
mov dword [ebp - 0x10c], 1
mov dword [esi + 0x90], edx
jmp 0x40eac3
mov eax, dword [esi + 0x38]
movaps xmm0, xmmword [0x427140]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x30
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x68], 0x1101010
mov dword [esi + 0x90], 0x80000514
mov dword [esi + 0x98], 0x1c
mov dword [esi + 0x94], eax
mov al, byte [0x4342c8]
test al, al
jne 0x40eb9f
cmp byte [esi + 0xb1], 0
jne 0x40eb12
nop dword [eax]
push 1
call fcn.00401170
add esp, 4
cmp byte [0x4342c8], 0
jne 0x40eb9f
cmp byte [esi + 0xb1], 0
je 0x40eaf0
jmp 0x40eb1a
test al, al
jne 0x40eb9f
lea eax, [ebp - 0xe4]
push eax
push 3
lea eax, [ebp - 0x64]
push eax
push dword [esi + 0x2c]
lea eax, [esi + 0x90]
push eax
push dword [esi + 0x64]
call sub.cryptoki.dll_C_DeriveKey
mov edi, eax
add esp, 0x18
test edi, edi
jne 0x40eb7b
push dword [ebp - 0xe4]
push dword [esi + 0x64]
call sub.cryptoki.dll_C_DestroyObject
mov dword [esp + 4], edi
mov dword [esp], 0x3f800000
push dword [esi + 0x54]
mov dword [ebp - 0xe4], edi
call fcn.00415cd0
mov al, byte [0x4342c8]
add esp, 0xc
test al, al
je 0x40eae0
jmp 0x40eb9f
push edi
call fcn.0041e470
add esp, 4
push eax
push edi
push str._nError__08lx___s__on_C_DeriveKey_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.004148f0
add esp, 0x10
mov edx, dword [ebp - 0xf8]
mov dword [esi + 0x24], edi
test edx, edx
je 0x40ebde
mov ecx, dword [ebp - 0xfc]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x40ebd4
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40ebd4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041e5a7
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e5b5
mov esp, ebp
pop ebp
ret