Function at 0x402490
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
cmp byte [0x4386b3], 1
jne 0x402d1a
movaps xmm0, xmmword [0x435c60]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov dword [ebp - 4], 0x100263a
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x12
jb 0x4024b7
lea ecx, [ebp - 0x14]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435c70]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov dword [ebp - 4], 0x100263a
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x12
jb 0x4024f0
lea ecx, [ebp - 0x14]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435dd0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x213b27
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x13
jb 0x402530
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435ca0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x3c266c36
mov word [ebp - 4], 0x20
mov byte [ebp - 2], 1
nop
lea eax, [ecx + 0x31]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x15
jb 0x402570
lea ecx, [ebp - 0x18]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435d10]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], 0x27
mov byte [ebp - 2], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x11
jb 0x4025a8
lea ecx, [ebp - 0x14]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x565b4142
xor ecx, ecx
mov dword [ebp - 0xc], 0x1756585b
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x4025e4
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x4455575b
xor ecx, ecx
mov dword [ebp - 8], 0x5c405218
mov word [ebp - 4], pe_nt_image_headers32
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 8
jb 0x402620
lea ecx, [ebp - 0xc]
mov byte [ebp - 3], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x1b55575b
xor ecx, ecx
mov dword [ebp - 8], 0x5d4f53
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 7
jb 0x402655
lea ecx, [ebp - 0xc]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x4455575b
xor ecx, ecx
mov dword [ebp - 8], 0x5c160300
mov dword [ebp - 4], 0x1005e42
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 0xa
jb 0x402690
lea ecx, [ebp - 0xc]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x50465a65
xor ecx, ecx
mov dword [ebp - 0xc], 0x4b595f45
mov dword [ebp - 8], 0x45591551
mov word [ebp - 4], 0x5b
mov byte [ebp - 2], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xd
jb 0x4026d2
lea ecx, [ebp - 0x10]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x51505a74
xor ecx, ecx
mov dword [ebp - 0xc], 0x174a525a
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
nop
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402710
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x5a5a566a
xor ecx, ecx
mov dword [ebp - 0xc], 0x170c0145
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402750
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435c50]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x10
jb 0x402784
lea ecx, [ebp - 0x14]
mov byte [ebp - 3], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435cb0]
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0xc], 0x3c367360
movaps xmm0, xmmword [0x435dc0]
movups xmmword [ebp - 0x1c], xmm0
mov dword [ebp - 8], 0x3c767e22
mov dword [ebp - 4], 0x1003e22
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x2c], al
inc ecx
cmp ecx, 0x2a
jb 0x4027d2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x40704079
xor ecx, ecx
mov dword [ebp - 0xc], 0x4b5d475b
mov dword [ebp - 8], 0x58445e14
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xc
jb 0x402810
lea ecx, [ebp - 0x10]
mov byte [ebp - 3], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x5100054a
xor ecx, ecx
mov dword [ebp - 8], 0x5c165054
mov dword [ebp - 4], 0x1005e42
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 0xa
jb 0x402848
lea ecx, [ebp - 0xc]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x5100054a
xor ecx, ecx
mov dword [ebp - 8], 0x5c165054
mov dword [ebp - 4], 0x1005e42
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 0xa
jb 0x402880
lea ecx, [ebp - 0xc]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x5106004a
xor ecx, ecx
mov dword [ebp - 8], 0x5c165054
mov dword [ebp - 4], 0x1005e42
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 0xa
jb 0x4028b8
lea ecx, [ebp - 0xc]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435c40]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x206a2630
mov dword [ebp - 4], 0x100223e
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x16
jb 0x4028f4
lea ecx, [ebp - 0x18]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x1b515a56
xor ecx, ecx
mov dword [ebp - 8], 0x5d4f53
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 7
jb 0x402930
lea ecx, [ebp - 0xc]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x47514577
xor ecx, ecx
mov dword [ebp - 0xc], 0x5050434f
mov dword [ebp - 8], 0x58125c54
mov dword [ebp - 4], 0x1005a46
nop
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xe
jb 0x402970
lea ecx, [ebp - 0x10]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x6c787f7d
xor ecx, ecx
mov dword [ebp - 0xc], 0x177f7572
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x4029b0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x3704b7a
xor ecx, ecx
mov dword [ebp - 8], 0x415d1902
mov word [ebp - 4], 0x5f
mov byte [ebp - 2], 1
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 9
jb 0x4029f0
lea ecx, [ebp - 0xc]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x6704b7a
xor ecx, ecx
mov dword [ebp - 8], 0x415d1904
mov word [ebp - 4], 0x5f
mov byte [ebp - 2], 1
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 9
jb 0x402a30
lea ecx, [ebp - 0xc]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x425b5d41
xor ecx, ecx
mov dword [ebp - 0xc], 0x1756565b
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402a70
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x5e475246
xor ecx, ecx
mov dword [ebp - 0xc], 0x174a505b
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402ab0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x40595643
xor ecx, ecx
mov dword [ebp - 0xc], 0x1759501b
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402af0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [str.DQ_MERJOSXY]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0xf
jb 0x402b22
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x5c514b57
xor ecx, ecx
mov dword [ebp - 0xc], 0x49575158
mov dword [ebp - 8], 0x4559155f
mov word [ebp - 4], 0x5b
mov byte [ebp - 2], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xd
jb 0x402b64
lea ecx, [ebp - 0x10]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x57197662
xor ecx, ecx
mov dword [ebp - 0xc], 0x174a5653
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402ba0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x45675d56
xor ecx, ecx
mov dword [ebp - 8], 0x415d194f
mov word [ebp - 4], 0x5f
mov byte [ebp - 2], 1
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 9
jb 0x402be0
lea ecx, [ebp - 0xc]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [0x435d20]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], 0x27
mov byte [ebp - 2], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x11
jb 0x402c18
lea ecx, [ebp - 0x14]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0x10], 0x5a607662
xor ecx, ecx
mov dword [ebp - 0xc], 0x174b5b59
mov dword [ebp - 8], 0x59435f
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402c54
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x41404651
xor ecx, ecx
mov dword [ebp - 8], 0x5c164553
mov dword [ebp - 4], 0x1005e42
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 0xa
jb 0x402c90
lea ecx, [ebp - 0xc]
mov byte [ebp - 1], 0
call fcn.00402340
test eax, eax
jne 0x402d12
mov dword [ebp - 0xc], 0x5c4e5a40
xor ecx, ecx
mov dword [ebp - 8], 0x415d1958
mov word [ebp - 4], 0x5f
mov byte [ebp - 2], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 9
jb 0x402cc7
lea ecx, [ebp - 0xc]
mov byte [ebp - 2], 0
call fcn.00402340
test eax, eax
jne 0x402d12
movaps xmm0, xmmword [str.PZZTDNVPTQ_]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0xf
jb 0x402cf5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00402340
test eax, eax
je 0x402d1a
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov esp, ebp
pop ebp
ret