Function at 0x4092d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x28
mov esi, esp
call fcn.00409540
push eax
mov dword [esi + 0x18], esp
sub esp, 0x10
mov ebx, esp
and ebx, 0xfffffff8
mov esp, ebx
push eax
mov edi, esp
sub esp, 0x100
mov dword [esi + 0x14], esp
call fcn.0043dd00
test al, 1
jne 0x40930b
jmp 0x409502
mov al, byte [edi]
mov byte [esi + 8], al
mov byte [ebx], 0x16
mov byte [ebx + 1], 0xb1
mov byte [ebx + 2], 0x27
mov byte [ebx + 3], 0xb3
mov byte [ebx + 4], 0x17
mov byte [ebx + 5], 0xb5
mov byte [ebx + 6], 0x2d
mov byte [ebx + 7], 0xb7
mov byte [ebx + 8], 0x37
mov byte [ebx + 9], 0xa9
mov byte [ebx + 0xa], 0xc
mov byte [ebx + 0xb], 0xab
mov byte [ebx + 0xc], 0xa
mov byte [ebx + 0xd], 0xad
mov byte [ebx + 0xe], 0xae
mov byte [ebx + 0xf], 0xaf
xor edi, edi
cmp edi, 0x10
jae 0x4093eb
call fcn.00409540
call fcn.00409540
movzx eax, byte [ebx + edi]
mov dword [esi + 0x10], eax
mov eax, edi
not eax
or eax, 0x7865248
mov ecx, edi
add ecx, eax
mov dword [esi + 0xc], ecx
lea ecx, [edi + eax + 1]
mov dword [esi + 4], edi
mov edi, ecx
and edi, 0xfffffffd
mov eax, ecx
and eax, 2
mov edx, eax
xor edx, 2
imul edx, edi
or ecx, 2
imul ecx, eax
mov eax, dword [esi + 4]
and eax, 0x7865248
mov edi, dword [esi + 4]
xor edi, 0x7865248
lea edi, [edi + eax*2]
mov eax, dword [esi + 0xc]
lea eax, [eax + eax + 2]
sub edi, eax
add edi, ecx
add edi, edx
mov eax, edi
mov ecx, dword [esi + 0x10]
and eax, ecx
add eax, eax
add edi, ecx
sub edi, eax
mov dword [esi + 0x1c], edi
mov edi, dword [esi + 4]
mov eax, dword [esi + 0x1c]
mov ecx, eax
xor ecx, 0xf8
shl eax, 1
and eax, 0xe
sub eax, ecx
mov byte [ebx + edi], al
add edi, 1
jmp 0x409351
xor eax, eax
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], 1
mov dword [esp + 8], ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, dword [esi + 0x18]
mov dword [edi], eax
call fcn.00435480
test al, 1
jne 0x40941c
jmp 0x4094df
xor eax, eax
sub esp, 8
mov dword [esp], 0
mov dword [esp + 4], 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
cmp eax, 0
setge al
test al, 1
jne 0x409445
jmp 0x4094dd
xor eax, eax
sub esp, 0x24
mov dword [esp], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
cmp eax, 0
setge al
test al, 1
jne 0x4094a3
jmp 0x4094d7
call fcn.0040ac10
test al, 1
jne 0x4094ae
jmp 0x4094d5
lea eax, str.system_or_character_via_spellings_glyphs_a_is_uses_that_in_their_modified_other_on_often_reflection_or_resemblance_on_it_leetspeak__used_similarity_internet._play_eleet_the_of_the_replacements_of_primarily_ways
sub esp, 8
mov ecx, dword [esi + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409520
add esp, 8
call fcn.0040df00
call fcn.0040c790
jmp 0x4094d5
jmp 0x4094d7
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x4094df
cmp dword [edi], 0
setne al
test al, 1
jne 0x4094eb
jmp 0x4094fb
mov eax, dword [edi]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4094fb
call fcn.0043e170
jmp 0x409502
xor eax, eax
sub esp, 4
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]