Function at 0x4016c0
Capabilities:
Contain obfuscated stackstrings
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x240
push ebx
push esi
push edi
lea edi, [ebp - 0x240]
mov ecx, 0x90
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x140], 0x20
mov byte [ebp - 0x13f], 0x20
mov byte [ebp - 0x13e], 0x20
mov byte [ebp - 0x13d], 0x20
mov byte [ebp - 0x13c], 0x20
mov byte [ebp - 0x13b], 0x20
mov byte [ebp - 0x13a], 0x20
mov byte [ebp - 0x139], 0x20
mov byte [ebp - 0x138], 0x20
mov byte [ebp - 0x137], 0x20
mov byte [ebp - 0x136], 0x5a
mov byte [ebp - 0x135], 0x20
mov byte [ebp - 0x134], 0x46
mov byte [ebp - 0x133], 0x35
mov byte [ebp - 0x132], 0x31
mov byte [ebp - 0x131], 0x4d
mov byte [ebp - 0x130], 0x35
mov byte [ebp - 0x12f], 0x32
mov byte [ebp - 0x12e], 0x54
mov byte [ebp - 0x12d], 0x31
mov esi, esp
push 0x104
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp esi, esp
call fcn.00402fe0
push str.Drivers_
lea eax, [ebp - 0x124]
push eax
call fcn.004035f0
add esp, 8
push str.HdHook.sys
lea eax, [ebp - 0x124]
push eax
call fcn.004035f0
add esp, 8
lea eax, [ebp - 0x124]
push eax
push 0x64
push 0x8a
call fcn.00402490
add esp, 0xc
push 0x455040
lea eax, [ebp - 0x124]
push eax
push str.HDHOOK
call fcn.00402b80
add esp, 0xc
test eax, eax
jne 0x40181a
mov esi, esp
push 0x10
push 0x4462d0
push str.Open_Device_Driver_Error_
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00402fe0
mov esi, esp
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, esp
push 0
lea eax, [ebp - 0xc]
push eax
push 4
lea ecx, [ebp - 0x18]
push ecx
push 0
push 0
push 0x83050008
mov edx, dword [0x455040]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp esi, esp
call fcn.00402fe0
test eax, eax
je 0x401852
cmp dword [ebp - 0x18], 0x168
je 0x401882
mov esi, esp
push 0x10
push 0x4462d0
push str.Driver_has_a_Wrong_Version_for_This_Program
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp esi, esp
call fcn.00402fe0
mov esi, esp
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp + 8]
push eax
call fcn.00401580
add esp, 4
lea eax, [ebp - 0x124]
push eax
call fcn.00402610
add esp, 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x124]
push ecx
call fcn.00401310
add esp, 8
mov esi, esp
lea eax, [ebp - 0x17c]
push eax
push str.Current
push str.HDHOOK
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
cmp esi, esp
call fcn.00402fe0
mov esi, esp
push 0
lea eax, [ebp - 0xc]
push eax
push 0
push 0
push 0x14
lea ecx, [ebp - 0x124]
push ecx
push 0x8305000c
mov edx, dword [0x455040]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp esi, esp
call fcn.00402fe0
mov esi, esp
push 0x104
lea eax, [ebp - 0x124]
push eax
push 0x4462fc
push 0x4462f8
push str.HDHOOK
call dword [sym.imp.KERNEL32.dll_GetProfileStringA]
cmp esi, esp
call fcn.00402fe0
lea eax, [ebp - 0x124]
push eax
call fcn.00403550
add esp, 4
cmp eax, 0x28
jne 0x401959
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x124]
push ecx
call fcn.00401390
add esp, 8
test eax, eax
jne 0x401989
mov esi, esp
push 0
lea eax, [ebp - 0xc]
push eax
push 0
push 0
push 0x14
lea ecx, [ebp - 0x140]
push ecx
push 0x83050010
mov edx, dword [0x455040]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp esi, esp
call fcn.00402fe0
jmp 0x4019b7
mov esi, esp
push 0
lea eax, [ebp - 0xc]
push eax
push 0
push 0
push 0x14
lea ecx, [ebp - 0x17c]
push ecx
push 0x83050010
mov edx, dword [0x455040]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp esi, esp
call fcn.00402fe0
mov eax, dword [ebp + 8]
push eax
call fcn.004014d0
add esp, 4
push edx
mov ecx, ebp
push eax
lea edx, [0x4019f4]
call fcn.00403010
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004036e0
add esp, 0x240
cmp ebp, esp
call fcn.00402fe0
mov esp, ebp
pop ebp
ret