Function at 0x121e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5418a
mov eax, dword fs:[0]
push eax
mov eax, 0x1024
call fcn.0002de70
mov eax, dword [0x63170]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00016960
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x1024], 0xe174fc8f
mov edi, dword [ecx]
mov dword [ebp - 0x1028], edi
mov eax, dword [edi + 0x210]
test al, 1
jne 0x12279
or eax, 1
mov dword [edi + 0x210], eax
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x1024]
mov word [edi + 0x260], 0x1af
push 0x54800
mov dword [edi + 0x25c], eax
call fcn.0002dbad
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x261], 0
lea ebx, [eax + 0x25c]
je 0x122d2
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
mov ecx, esi
mov eax, 0x851d8be7
and ecx, 7
mov edx, 0x9bd595af
shl ecx, 3
call fcn.00053dd0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x122c8
cmp esi, 5
jb 0x122a1
mov edi, dword [ebp - 0x1028]
mov byte [ebx + 5], 0
push dword [0x6593c]
push ebx
push dword [ebp - 0x102c]
call fcn.00016790
mov eax, dword [edi + 0x128]
mov dword [ebp - 0x1024], 0xd7fa321e
test al, 1
jne 0x12331
or eax, 1
mov dword [edi + 0x128], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x1024]
mov word [edi + 0x148], 0x19b
push 0x547e0
mov dword [edi + 0x144], eax
call fcn.0002dbad
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x149], 0
lea ebx, [eax + 0x144]
je 0x12391
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
nop dword [eax]
mov ecx, esi
mov eax, 0xbb935373
and ecx, 7
mov edx, 0x39e3c19b
shl ecx, 3
call fcn.00053dd0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x12387
cmp esi, 5
jb 0x12360
mov edi, dword [ebp - 0x1028]
mov byte [ebx + 5], 0
push dword [0x65510]
push ebx
push dword [ebp - 0x102c]
call fcn.00016790
mov eax, dword [edi + 0x1b4]
mov dword [ebp - 0x101c], 0xd0d8241
test al, 1
jne 0x123ee
or eax, 1
mov dword [edi + 0x1b4], eax
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x101c]
mov byte [edi + 0x234], 1
push 0x547c0
mov dword [edi + 0x230], eax
call fcn.0002dbad
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x234], 0
lea ebx, [eax + 0x230]
je 0x12447
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
mov ecx, esi
mov eax, 0xd7fe737
and ecx, 7
mov edx, 0x971941d9
shl ecx, 3
call fcn.00053dd0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x1243d
cmp esi, 4
jb 0x12416
mov edi, dword [ebp - 0x1028]
mov byte [ebx + 4], 0
movsd xmm0, qword [0x60b88]
sub esp, 8
movsd qword [esp], xmm0
push ebx
mov ebx, dword [ebp - 0x102c]
push ebx
call fcn.000166d0
push ebx
call fcn.00016bc0
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebx
mov esi, eax
call fcn.00016bc0
mov edx, esi
mov ecx, eax
call fcn.00011130
push eax
mov dword [ebp - 0x101c], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x100
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [ebp - 0x1018], 0x2aa5c8cd
mov eax, dword [edi + 0xec]
mov dword [ebp - 0x1024], esi
mov dword [ebp - 0x1014], 0x6f58ec48
test al, 1
jne 0x12506
or eax, 1
mov dword [edi + 0xec], eax
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x1018]
mov ecx, dword [ebp - 0x1014]
mov byte [edi + 0x204], 1
mov dword [edi + 0x1fc], eax
push 0x547a0
mov dword [edi + 0x200], ecx
call fcn.0002dbad
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x204], 0
lea ebx, [eax + 0x1fc]
je 0x12567
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
nop
mov ecx, esi
mov eax, 0x4bd1a9a9
and ecx, 7
mov edx, 0x6f2bc975
shl ecx, 3
call fcn.00053dd0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x12557
cmp esi, 8
jb 0x12530
mov edi, dword [ebp - 0x1028]
mov esi, dword [ebp - 0x1024]
mov byte [ebx + 8], 0
push dword [ebp - 0x101c]
push ebx
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0x1000
push 0
push eax
call fcn.0002f670
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0x1000
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, eax
mov ecx, esi
call fcn.00011440
add esp, 8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [ebp - 0x101c]
call esi
push dword [ebp - 0x102c]
call fcn.00016990
mov eax, dword [edi + 0x20c]
mov word [ebp - 0x101c], 0xd724
test al, 1
jne 0x1260e
or eax, 1
mov dword [edi + 0x20c], eax
mov dword [ebp - 4], 4
mov ax, word [ebp - 0x101c]
mov byte [edi + 0x19e], 1
push 0x54780
mov word [edi + 0x19c], ax
call fcn.0002dbad
add esp, 4
cmp byte [edi + 0x19e], 0
lea edi, [edi + 0x19c]
je 0x1265f
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov ebx, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
mov ecx, esi
mov eax, 0x59bd715
and ecx, 7
mov edx, 0x213fa5c5
shl ecx, 3
call fcn.00053dd0
xor byte [esi + edi], al
add esi, 1
adc ebx, 0
jne 0x1265b
cmp esi, 2
jb 0x12634
mov byte [edi + 2], 0
push edi
lea eax, [ebp - 0x1010]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x12678
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0002d829
mov esp, ebp
pop ebp
ret