Function at 0x402d20
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
cmp byte [0x4386b1], 1
push esi
jne 0x4033b8
movaps xmm0, xmmword [0x435ce0]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x10
jb 0x402d47
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x14]
push eax
push 0
mov byte [ebp - 3], 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x14], 0x5a59567f
xor ecx, ecx
mov dword [ebp - 0x10], 0x6f184e44
mov dword [ebp - 0xc], 0x584b5e53
mov word [ebp - 8], 0x4c
mov byte [ebp - 6], 1
nop
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0xd
jb 0x402d90
lea eax, [ebp - 0x14]
mov byte [ebp - 6], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x54515b71
xor ecx, ecx
mov dword [ebp - 0xc], 0x577d1742
mov dword [ebp - 8], 0x5852525d
mov word [ebp - 4], pe_nt_image_headers32
nop
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xc
jb 0x402dd0
lea eax, [ebp - 0x10]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435e20]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x10
jb 0x402e04
lea eax, [ebp - 0x14]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435e00]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x10
jb 0x402e38
lea eax, [ebp - 0x14]
mov byte [ebp - 3], 0
push eax
push 0
call esi
movaps xmm0, xmmword [0x435e10]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0x10
jb 0x402e64
lea eax, [ebp - 0x14]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x565b4162
xor ecx, ecx
mov dword [ebp - 0xc], 0x194b4453
mov dword [ebp - 8], 0x494f5276
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xc
jb 0x402ea2
lea eax, [ebp - 0x10]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x7106004a
xor ecx, ecx
mov dword [ebp - 8], 0x1007074
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 6
jb 0x402ed3
lea eax, [ebp - 0xc]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x7100054a
xor ecx, ecx
mov dword [ebp - 8], 0x1007074
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 6
jb 0x402f04
lea eax, [ebp - 0xc]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x40704079
xor ecx, ecx
mov dword [ebp - 8], 0x4b5d475b
mov word [ebp - 4], pe_nt_image_headers32
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 8
jb 0x402f40
lea eax, [ebp - 0xc]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435c40]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x1002630
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x12
jb 0x402f75
lea eax, [ebp - 0x18]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435bd0]
xor ecx, ecx
movups xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 0xf
jb 0x402fa7
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x51505a74
xor ecx, ecx
mov dword [ebp - 0xc], 0x194a525a
mov dword [ebp - 8], 0x515a70
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x402fe3
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x51505a74
xor ecx, ecx
mov dword [ebp - 0xc], 0x7a4a525a
mov dword [ebp - 8], 0x1004b5b
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xa
jb 0x403020
lea eax, [ebp - 0x10]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x51505a74
xor ecx, ecx
mov dword [ebp - 0xc], 0x7a4a525a
mov dword [ebp - 8], 0x594955
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xb
jb 0x403060
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435de0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov word [ebp - 8], 0x7a
mov byte [ebp - 6], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x11
jb 0x403098
lea eax, [ebp - 0x18]
mov byte [ebp - 6], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435df0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov word [ebp - 8], 0x7a
mov byte [ebp - 6], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x11
jb 0x4030d0
lea eax, [ebp - 0x18]
mov byte [ebp - 6], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435de0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x1002277
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x12
jb 0x403105
lea eax, [ebp - 0x18]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435df0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x1002277
nop word [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x12
jb 0x403140
lea eax, [ebp - 0x18]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435de0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov word [ebp - 8], 0x77
mov byte [ebp - 6], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x11
jb 0x403178
lea eax, [ebp - 0x18]
mov byte [ebp - 6], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435df0]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov word [ebp - 8], 0x77
mov byte [ebp - 6], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x11
jb 0x4031b0
lea eax, [ebp - 0x18]
mov byte [ebp - 6], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
movaps xmm0, xmmword [0x435d00]
xor ecx, ecx
movups xmmword [ebp - 0x18], xmm0
mov dword [ebp - 8], 0x74746d71
mov word [ebp - 4], pe_nt_image_headers32
nop dword [eax + eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 0x14
jb 0x4031f0
lea eax, [ebp - 0x18]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x47514577
xor ecx, ecx
mov dword [ebp - 0xc], 0x5050434f
mov dword [ebp - 8], 0x1005c54
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xa
jb 0x403228
lea eax, [ebp - 0x10]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x4c585f7d
xor ecx, ecx
mov dword [ebp - 8], 0x5f5572
mov byte [ebp - 4], 1
nop dword [eax]
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 7
jb 0x403260
lea eax, [ebp - 0xc]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x4c585f7d
xor ecx, ecx
mov dword [ebp - 8], 0x5f5572
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 7
jb 0x403295
lea eax, [ebp - 0xc]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 8], 0x704b7a
xor ecx, ecx
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 8], al
inc ecx
cmp ecx, 3
jb 0x4032c3
lea eax, [ebp - 8]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x425b5d61
xor ecx, ecx
mov dword [ebp - 8], 0x56565b
mov byte [ebp - 4], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 7
jb 0x4032f8
lea eax, [ebp - 0xc]
mov byte [ebp - 4], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0x10], 0x5e475266
xor ecx, ecx
mov dword [ebp - 0xc], 0x57597a16
mov dword [ebp - 8], 0x4f595c5b
mov word [ebp - 4], pe_nt_image_headers32
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0x10], al
inc ecx
cmp ecx, 0xc
jb 0x403336
lea eax, [ebp - 0x10]
mov byte [ebp - 3], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x515d5b55
xor ecx, ecx
mov dword [ebp - 8], 0x1005644
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 6
jb 0x403363
lea eax, [ebp - 0xc]
mov byte [ebp - 5], 0
push eax
push 0
call esi
test eax, eax
jne 0x4033b0
mov dword [ebp - 0xc], 0x45677f7b
xor ecx, ecx
mov word [ebp - 8], 0x4f
mov byte [ebp - 6], 1
lea eax, [ecx + 0x32]
xor byte [ebp + ecx - 0xc], al
inc ecx
cmp ecx, 5
jb 0x403393
lea eax, [ebp - 0xc]
mov byte [ebp - 6], 0
push eax
push 0
call esi
test eax, eax
je 0x4033b8
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
pop esi
mov esp, ebp
pop ebp
ret