Function at 0x409760
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x18
mov esi, esp
call fcn.004099c0
sub esp, 0x30
mov edi, esp
and edi, 0xfffffff8
mov esp, edi
push eax
mov ebx, esp
sub esp, 0x100
mov dword [esi + 8], esp
call fcn.00433880
test al, 1
jne 0x409797
jmp 0x409984
mov al, byte [ebx]
mov byte [esi + 4], al
mov byte [edi], 0xfa
mov byte [edi + 1], 0x11
mov byte [edi + 2], 0xe1
mov byte [edi + 3], 0x13
mov byte [edi + 4], 0xe4
mov byte [edi + 5], 0x1d
mov byte [edi + 6], 0xe3
mov byte [edi + 7], 0x1f
mov byte [edi + 8], 0xe2
mov byte [edi + 9], 0x19
mov byte [edi + 0xa], 0xf6
mov byte [edi + 0xb], 0x1b
mov byte [edi + 0xc], 0xf9
mov byte [edi + 0xd], 0x25
mov byte [edi + 0xe], 0xd8
mov byte [edi + 0xf], 0x27
mov byte [edi + 0x10], 0xdb
mov byte [edi + 0x11], 0x21
mov byte [edi + 0x12], 0xc8
mov byte [edi + 0x13], 0x23
mov byte [edi + 0x14], 0xc9
mov byte [edi + 0x15], 0x2d
mov byte [edi + 0x16], 0xd0
mov byte [edi + 0x17], 0x2f
mov byte [edi + 0x18], 0xda
mov byte [edi + 0x19], 0x29
mov byte [edi + 0x1a], 0xcb
mov byte [edi + 0x1b], 0x2b
mov byte [edi + 0x1c], 0xd6
mov byte [edi + 0x1d], 0x35
mov byte [edi + 0x1e], 0xc8
mov byte [edi + 0x1f], 0x37
mov byte [edi + 0x20], 0xd9
mov byte [edi + 0x21], 0x31
mov byte [edi + 0x22], 0x30
mov byte [edi + 0x23], 0x33
mov eax, 0x24
mov byte [edi + eax], 0
add eax, 1
cmp eax, 0x2a
jne 0x409830
mov dword [esi], 0
mov eax, dword [esi]
cmp eax, 0x2a
jae 0x40987a
mov eax, dword [esi]
mov ecx, dword [esi]
movzx ecx, byte [edi + ecx]
mov edx, eax
add edx, 0xccbbf453
mov ebx, 0xac
sub ebx, eax
xor ebx, edx
and ebx, ecx
xor ebx, edx
mov dword [esi + 0xc], ebx
mov eax, dword [esi + 0xc]
add al, 0xbb
mov ecx, dword [esi]
mov byte [edi + ecx], al
mov eax, dword [esi]
inc eax
mov dword [esi], eax
jmp 0x409842
xor eax, eax
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], 1
mov dword [esp + 8], edi
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call fcn.0042c6f0
test al, 1
jne 0x4098a8
jmp 0x409961
xor eax, eax
sub esp, 8
mov dword [esp], 0
mov dword [esp + 4], 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, 0
jl 0x409961
xor eax, eax
sub esp, 0x24
mov dword [esp], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
cmp eax, 0
setge al
test al, 1
jne 0x409929
jmp 0x40995b
call fcn.0040a990
test al, 1
jne 0x409934
jmp 0x40995b
lea eax, str.system_or_character_via_spellings_glyphs_a_is_uses_that_in_their_modified_other_on_often_reflection_or_resemblance_on_it_leetspeak__used_similarity_internet._play_eleet_the_of_the_replacements_of_primarily_ways
sub esp, 8
mov ecx, dword [esi + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004099a0
add esp, 8
call fcn.0040d310
call fcn.0040be70
jmp 0x40995b
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 0
setne al
jmp 0x409969
test al, 1
jne 0x40996f
jmp 0x40997d
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40997d
call fcn.00433d50
jmp 0x409984
xor eax, eax
sub esp, 4
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]