Function at 0x4026e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x444b2a
mov eax, dword fs:[0]
push eax
mov eax, 0x1024
call fcn.0041e4f0
mov eax, dword [0x455170]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00407050
mov ecx, dword fs:[0x2c]
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x1024], 0xe75e5491
mov edi, dword [ecx]
mov dword [ebp - 0x1028], edi
mov eax, dword [edi + 0x360]
test al, 1
jne 0x402779
or eax, 1
mov dword [edi + 0x360], eax
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x1024]
mov word [edi + 0x9c], 0x1d9
push 0x445200
mov dword [edi + 0x98], eax
call fcn.0041e22d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x9d], 0
lea ebx, [eax + 0x98]
je 0x4027d2
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
mov ecx, esi
mov eax, 0x833723f9
and ecx, 7
mov edx, 0x47bbadd9
shl ecx, 3
call fcn.004446d0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x4027c8
cmp esi, 5
jb 0x4027a1
mov edi, dword [ebp - 0x1028]
mov byte [ebx + 5], 0
push dword [0x45792c]
push ebx
push dword [ebp - 0x102c]
call fcn.00406e80
mov eax, dword [edi + 0x130]
mov dword [ebp - 0x1024], 0xc7d4b602
test al, 1
jne 0x402831
or eax, 1
mov dword [edi + 0x130], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x1024]
mov word [edi + 0x140], 0x1e9
push 0x4451e0
mov dword [edi + 0x13c], eax
call fcn.0041e22d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x141], 0
lea ebx, [eax + 0x13c]
je 0x402891
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
nop dword [eax]
mov ecx, esi
mov eax, 0xabbdd76f
and ecx, 7
mov edx, 0x91834de9
shl ecx, 3
call fcn.004446d0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x402887
cmp esi, 5
jb 0x402860
mov edi, dword [ebp - 0x1028]
mov byte [ebx + 5], 0
push dword [0x457500]
push ebx
push dword [ebp - 0x102c]
call fcn.00406e80
mov eax, dword [edi + 0xd0]
mov dword [ebp - 0x101c], 0x213366bd
test al, 1
jne 0x4028ee
or eax, 1
mov dword [edi + 0xd0], eax
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x101c]
mov byte [edi + 0x1bc], 1
push 0x4451c0
mov dword [edi + 0x1b8], eax
call fcn.0041e22d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x1bc], 0
lea ebx, [eax + 0x1b8]
je 0x402947
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
mov ecx, esi
mov eax, 0x214103cb
and ecx, 7
mov edx, 0x95fbd1d1
shl ecx, 3
call fcn.004446d0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x40293d
cmp esi, 4
jb 0x402916
mov edi, dword [ebp - 0x1028]
mov byte [ebx + 4], 0
movsd xmm0, qword [0x451bd8]
sub esp, 8
movsd qword [esp], xmm0
push ebx
mov ebx, dword [ebp - 0x102c]
push ebx
call fcn.00406dc0
push ebx
call fcn.004072b0
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebx
mov esi, eax
call fcn.004072b0
mov edx, esi
mov ecx, eax
call fcn.00401130
push eax
mov dword [ebp - 0x101c], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 0x100
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [ebp - 0x1018], 0x26f32487
mov eax, dword [edi + 0x26c]
mov dword [ebp - 0x1024], esi
mov dword [ebp - 0x1014], 0x7b629428
test al, 1
jne 0x402a06
or eax, 1
mov dword [edi + 0x26c], eax
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x1018]
mov ecx, dword [ebp - 0x1014]
mov byte [edi + 0x34c], 1
mov dword [edi + 0x344], eax
push 0x4451a0
mov dword [edi + 0x348], ecx
call fcn.0041e22d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, edi
cmp byte [eax + 0x34c], 0
lea ebx, [eax + 0x344]
je 0x402a67
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov edi, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
nop
mov ecx, esi
mov eax, 0x478745e3
and ecx, 7
mov edx, 0x7b11b115
shl ecx, 3
call fcn.004446d0
xor byte [esi + ebx], al
add esi, 1
adc edi, 0
jne 0x402a57
cmp esi, 8
jb 0x402a30
mov edi, dword [ebp - 0x1028]
mov esi, dword [ebp - 0x1024]
mov byte [ebx + 8], 0
push dword [ebp - 0x101c]
push ebx
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0x1000
push 0
push eax
call fcn.0041fcf0
add esp, 0xc
lea eax, [ebp - 0x1010]
push 0x1000
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, eax
mov ecx, esi
call fcn.00401440
add esp, 8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [ebp - 0x101c]
call esi
push dword [ebp - 0x102c]
call fcn.00407080
mov eax, dword [edi + 0x354]
mov word [ebp - 0x101c], 0x513a
test al, 1
jne 0x402b0e
or eax, 1
mov dword [edi + 0x354], eax
mov dword [ebp - 4], 4
mov ax, word [ebp - 0x101c]
mov byte [edi + 0x23e], 1
push 0x445180
mov word [edi + 0x23c], ax
call fcn.0041e22d
add esp, 4
cmp byte [edi + 0x23e], 0
lea edi, [edi + 0x23c]
je 0x402b5f
xorps xmm0, xmm0
movlpd qword [ebp - 0x1018], xmm0
mov ebx, dword [ebp - 0x1014]
mov esi, dword [ebp - 0x1018]
mov ecx, esi
mov eax, 0xe731510b
and ecx, 7
mov edx, 0xf9bda7eb
shl ecx, 3
call fcn.004446d0
xor byte [esi + edi], al
add esi, 1
adc ebx, 0
jne 0x402b5b
cmp esi, 2
jb 0x402b34
mov byte [edi + 2], 0
push edi
lea eax, [ebp - 0x1010]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x402b78
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041dea9
mov esp, ebp
pop ebp
ret