Function at 0x4378d5
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.004378d5
xor esi, esi
xor edi, edi
mov ecx, 0x11
push esi
dec ecx
jne 0x4378f1
push 1
call fcn.00408b61
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xa4], 0
jmp 0x437c1d
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xa0]
mov dword [ebx], edi
push ebx
fild dword [0x4875fc]
fimul dword [ebp - 0xa4]
mov eax, dword [0x47c7d0]
call fcn.004779cb
faddp st(1)
fistp qword [ebp - 0x6c]
push dword [ebp - 0x6c]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
mov edi, dword [ebp - 0xa0]
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xbc]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
lea ebx, [ebp - 0xa8]
push ebx
push dword [ebp - 0xa4]
call fcn.0040d7df
mov edx, dword [ebp - 0xbc]
call fcn.00478805
mov edx, 0x48256c
call fcn.0047881c
call fcn.00477d52
jne 0x437c17
mov ebx, 0x1f4
xor eax, eax
call fcn.00473932
lea ebx, [ebp - 0xc0]
call fcn.004779f9
mov eax, edi
push eax
push dword [0x47c734]
call sym..exe_JIHUOWP
mov eax, 0x64
call fcn.00473a9b
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0x9c]
mov dword [ebx], esi
push ebx
mov eax, 0x48
mov ecx, edi
add eax, ecx
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
mov esi, dword [ebp - 0x9c]
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 0x1f4
lea ebx, [ebp - 0xc0]
call fcn.00478911
push ebx
mov eax, esi
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xc0]
call fcn.00478805
xor eax, eax
call fcn.00473aa3
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004643df
call fcn.00478833
lea ebx, [ebp - 0xc0]
call fcn.004779f9
xor eax, eax
mov edx, dword [ebp - 0xc0]
call fcn.00478805
mov ecx, 1
mov ebx, dword [ebp + 8]
mov edx, dword [ebx]
call fcn.00478805
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jne 0x437bcf
push 0
push 0x3b
mov edx, 0x48255c
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040e6de
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x437ae8
mov edx, 0x482e60
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 1
call fcn.00408a13
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xa4], 0
jmp 0x437bb8
lea ebx, [ebp - 0xbc]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
lea ebx, [ebp - 0xa8]
push ebx
push dword [ebp - 0xa4]
call fcn.0040d4e8
mov edx, dword [ebp - 0xbc]
call fcn.00478805
mov edx, 0x48255c
call fcn.0047881c
call fcn.00477d52
jne 0x437bb2
push 0
mov edx, 0x482e78
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa4]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
jmp 0x437c2f
inc dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xc8]
jle 0x437b10
jmp 0x437c17
mov edx, 0x482e8c
call fcn.0047881c
mov edx, dword [0x47c824]
call fcn.00478805
call fcn.00477cbd
mov edx, 0x482ea0
call fcn.0047881c
call fcn.00477cbd
mov eax, 0x12000
mov edx, 0x480578
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
inc dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xc8]
jle 0x437920
call fcn.004786f6
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 4