Function at 0x408f70
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
call fcn.0043a2f0
test al, al
je 0x4092a0
call fcn.00433290
test al, al
je 0x40929b
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, eax
mov esi, 0x35574f1b
shr esi, cl
mov eax, 0x35574f1b
xor edi, edi
mov edx, 0
test cl, 0x20
jne 0x408fb3
mov edx, esi
mov dword [esp + 0xc], edx
mov edx, 0xffb6a3f4
shrd edx, eax, cl
test cl, 0x20
jne 0x408fc6
mov esi, edx
mov edx, 0xe5545872
mov eax, 0xe5545872
sar eax, cl
test cl, 0x20
mov dword [esp], esi
jne 0x408fde
mov ebx, eax
jmp 0x408fe6
mov ebx, 0xe5545872
sar ebx, 0x1f
mov esi, 0x24ae05
shrd esi, edx, cl
test cl, 0x20
jne 0x408ff5
mov eax, esi
mov edx, 0x1aaba78d
mov ebp, 0x1aaba78d
shr ebp, cl
test cl, 0x20
jne 0x409008
mov edi, ebp
mov dword [esp + 4], edi
mov edi, 0xffdb51fa
shrd edi, edx, cl
test cl, 0x20
jne 0x40901b
mov ebp, edi
mov edi, eax
not edi
mov esi, ebx
not ebx
and edi, 0xffdb51fa
and ebx, 0x1aaba78d
mov edx, eax
and edx, 2
or eax, 0x24ae05
or esi, 0xe5545872
or eax, 2
add eax, 1
adc esi, 0
imul esi, edx
mul edx
mov dword [esp + 8], eax
mov dword [esp + 0x10], edx
mov ecx, edi
and ecx, 2
or edi, 2
mov eax, edi
mul ecx
mov dword [esp + 0x14], eax
add esi, dword [esp + 0x10]
imul ecx, ebx
or ecx, edx
mov edx, dword [esp]
and edx, 0xffb6a3f4
mov edi, dword [esp + 0xc]
and edi, 0x35574f1b
mov eax, ebp
xor eax, 0xffdb51fa
mov ebx, dword [esp + 4]
xor ebx, 0x1aaba78d
mov ebp, dword [esp + 8]
sub ebp, dword [esp + 0x14]
sbb esi, ecx
add eax, edx
adc ebx, edi
add eax, ebp
adc ebx, esi
add eax, 0x75d18b6f
adc ebx, 0x59179a12
mov ecx, eax
add ecx, 1
mov edx, ebx
adc edx, 0
add eax, 0x8a2e7491
adc ebx, 0xa6e865ed
mov ebp, 0x75d18b6f
sub ebp, ecx
mov ecx, 0x59179a12
sbb ecx, edx
and ecx, 0xfd7f5d1a
and ebp, 0xf58cced5
mov esi, eax
mov eax, ebx
and eax, 0x280a2e5
mov dword [esp + 4], eax
mov edi, esi
and edi, 0xa73312a
mov eax, edi
imul edi, ecx
mul ebp
mov ecx, eax
mov eax, dword [esp + 4]
imul eax, ebp
add eax, edx
add eax, edi
mov ebp, eax
mov edx, ebx
and edx, 0xfd7f5d1a
mov edi, esi
and edi, 0xf58cced5
or ebx, 0xfd7f5d1a
or esi, 0xf58cced5
mov eax, esi
imul esi, edx
mul edi
add esi, edx
imul ebx, edi
add ebx, esi
add eax, ecx
adc ebx, ebp
mov esi, ebx
shr esi, 0x15
mov ebp, ebx
shld ebp, eax, 0xb
mov edi, ebx
xor edi, 0xeaeccc83
mov ecx, eax
xor ecx, 0x8f0e21db
mov edx, ebp
xor edx, 0x8f0e21db
or edx, ecx
mov ecx, esi
xor ecx, 0xeaeccc83
or ecx, edi
xor eax, 0x70f1de24
xor ebp, 0x70f1de24
or ebp, eax
and ebp, edx
xor ebx, 0x1513337c
xor esi, 0x1513337c
or esi, ebx
and esi, ecx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x409277
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esp + 4], eax
mov eax, ebp
and eax, 0x1673ae5c
mov ecx, eax
mov dword [esp + 0xc], eax
mov edi, ebp
not edi
mov ebx, esi
not ebx
and ebx, 0xe4becc5f
and edi, 0xe98c51a3
mov eax, edi
mul ecx
mov dword [esp], eax
imul ebx, ecx
add ebx, edx
mov eax, esi
and eax, 0x1b4133a0
imul edi, eax
add ebx, edi
mov edx, esi
xor edx, 0x1b4133a0
mov ecx, esi
or ecx, 0xe4becc5f
and ecx, edx
mov edx, ebp
xor edx, 0x1673ae5c
mov edi, ebp
or edi, 0xe98c51a3
and edi, edx
mov dword [esp + 8], edi
mov edx, ebp
mov ebp, esi
xor ebp, 0xe4becc5f
mov edi, edx
xor edi, 0xe98c51a3
add edi, edx
adc ebp, esi
sub edi, dword [esp + 0xc]
sbb ebp, eax
mov eax, edi
mov esi, dword [esp + 8]
mul esi
imul ecx, edi
add edx, ecx
imul ebp, esi
add ebp, edx
add eax, dword [esp]
adc ebp, ebx
mov edx, eax
mov ecx, dword [esp + 4]
shrd edx, ebp, cl
mov edi, edx
mov edx, ebp
mov esi, ebp
mov ebx, ecx
shr esi, cl
test bl, 0x20
jne 0x40924d
mov ebp, edi
jmp 0x409251
mov ebp, esi
xor esi, esi
mov ecx, edx
mov dword [esp], edx
not ecx
mov edx, eax
not edx
mov edi, esi
or edi, ecx
mov ebx, ebp
or ebx, edx
sub edx, ebx
sbb ecx, edi
shld ecx, edx, 1
add edx, edx
add ebp, eax
adc esi, dword [esp]
add ebp, edx
adc esi, ecx
or esi, 0x1010101
or ebp, 0x1010101
push esi
push ebp
call fcn.0040a3f0
add esp, 8
test al, al
je 0x40929b
call fcn.0040d460
call fcn.0040c170
call fcn.0043bf60
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]