Function at 0x40b7a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x70
mov dword [ebp - 0x10], 0x6077240
mov ebx, 3
lea esi, [ebp - 0x79]
mov eax, dword [ebp - 0x10]
cmp eax, 0xfe8c71cc
jg 0x40b81b
cmp eax, 0xcaa41489
jle 0x40b887
cmp eax, 0xdb94eb48
jle 0x40b941
cmp eax, 0xf22cb5b2
jg 0x40bab2
cmp eax, 0xdb94eb49
je 0x40bc8e
cmp eax, 0xdca52b60
je 0x40bde4
cmp eax, 0xe3393deb
jne 0x40b7b8
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x511e79a0
jmp 0x40b7b8
cmp eax, 0x43168860
jle 0x40b8f5
cmp eax, 0x626ecbad
jle 0x40b98e
cmp eax, 0x79e197dd
jg 0x40baee
cmp eax, 0x626ecbae
je 0x40bcc1
cmp eax, 0x6492dbe2
je 0x40bcd6
cmp eax, 0x790dee29
jne 0x40b7b8
push 0x11
push dword [ebp - 0x34]
push esi
call fcn.00443560
add esp, 0xc
push esi
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x572b8419
jmp 0x40b7b8
cmp eax, 0xba98cedc
jg 0x40b9e9
cmp eax, 0xa4de8011
jg 0x40bb24
cmp eax, 0x8142317f
je 0x40bd19
cmp eax, 0x84cdc938
je 0x40bd4c
cmp eax, 0x9bdc7603
jne 0x40b7b8
mov edi, dword [ebp - 0x14]
mov eax, 0xffffff42
add edi, eax
mov eax, edi
shr eax, 0xb
mov dword [ebp - 0x14], eax
call fcn.0040b7a0
call fcn.0040ae6c
mov eax, 0xce747415
cmp edi, 0x47000
jb 0x40c10a
mov eax, 0xbf7c710a
jmp 0x40c10a
cmp eax, 0x27568898
jg 0x40ba54
cmp eax, 0x53a6eac
jle 0x40bba7
cmp eax, 0x53a6ead
je 0x40bd7a
cmp eax, 0x6077240
je 0x40bd94
cmp eax, 0x1407fa64
jne 0x40b7b8
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x84cdc938
jmp 0x40b7b8
cmp eax, 0xd388b760
jg 0x40bb61
cmp eax, 0xcaa4148a
je 0x40bdac
cmp eax, 0xce747415
je 0x40bdca
cmp eax, 0xcf88fb80
jne 0x40b7b8
mov eax, dword [ebp - 0x18]
shl eax, 9
or eax, 0x64
imul eax, eax, 0x14c
shr eax, 3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xbaec7ba3
jmp 0x40b7b8
cmp eax, 0x511e799f
jle 0x40bbe0
cmp eax, 0x511e79a0
je 0x40bdf0
cmp eax, 0x572b8419
je 0x40be02
cmp eax, 0x5acd085b
jne 0x40b7b8
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov eax, dword [ebp - 0x30]
mov cl, byte [0x472ca1]
mov byte [eax + 8], cl
mov ecx, dword [0x472c9d]
mov dword [eax + 4], ecx
mov ecx, dword [0x472c99]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x8142317f
jmp 0x40b7b8
cmp eax, 0xbe087746
jle 0x40bc21
cmp eax, 0xbe087747
je 0x40be3c
cmp eax, 0xbf7c710a
je 0x40be73
cmp eax, 0xc0197dfa
jne 0x40b7b8
mov eax, dword [ebp - 0x14]
shr eax, 2
imul edi, eax, 0x6d
mov dword [ebp - 0x14], edi
push 0x3535
push edi
push 0x2a19
push 0x1bbb
call fcn.0040c150
add esp, 0x10
mov eax, 0x572b8419
cmp edi, 0xa4
jb 0x40c10a
mov eax, 0x79e197de
jmp 0x40c10a
cmp eax, 0x384e92a8
jle 0x40bc54
cmp eax, 0x384e92a9
je 0x40bec2
cmp eax, 0x39d9b857
je 0x40bef5
cmp eax, 0x3ceefc31
jne 0x40b7b8
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x472cb5]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x472cb1]
mov dword [eax + 8], ecx
mov ecx, dword [0x472cad]
mov dword [eax + 4], ecx
mov ecx, dword [0x472ca9]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x43168861
jmp 0x40b7b8
cmp eax, 0xf22cb5b3
je 0x40bf22
cmp eax, 0xf67daab0
je 0x40bf36
cmp eax, 0xfdedf101
jne 0x40b7b8
imul eax, dword [ebp - 0x18], 0xa40
add eax, 0xffffff18
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb295b934
jmp 0x40b7b8
cmp eax, 0x79e197de
je 0x40bf54
cmp eax, 0x7b72d526
je 0x40bf80
cmp eax, 0x7e5641a6
jne 0x40b7b8
mov eax, dword [ebp - 0x30]
add eax, 9
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x5acd085b
jmp 0x40b7b8
cmp eax, 0xa4de8012
je 0x40bf8c
cmp eax, 0xb3437b7c
jne 0x40c112
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 7
lea eax, [ecx + eax*8]
shr eax, 0x12
add eax, 0xffffff15
mov dword [ebp - 0x14], eax
call fcn.0040ae6c
mov dword [ebp - 0x10], 0x84cdc938
jmp 0x40b7b8
cmp eax, 0xd388b761
je 0x40c020
cmp eax, 0xdafe6373
jne 0x40c11f
mov eax, dword [ebp - 0x18]
imul ecx, eax, 0x4d
imul ecx, ecx
imul edx, ecx, 0x47
imul eax, eax, 0x1340
dec edx
shr eax, 8
mov dword [ebp - 0x18], eax
mov eax, 0xb3437b7c
cmp edx, ecx
je 0x40c10a
mov eax, 0xcaa4148a
jmp 0x40c10a
cmp eax, 0xfe8c71cd
je 0x40c055
cmp eax, 0x286f53d
jne 0x40b7b8
mov eax, dword [ebp - 0x14]
shr eax, 1
and eax, 0x7ffff000
add eax, 0xb80fd
mov dword [ebp - 0x14], eax
call fcn.0040b7a0
mov dword [ebp - 0x10], 0x39d9b857
jmp 0x40b7b8
cmp eax, 0x43168861
je 0x40c08d
cmp eax, 0x49afe2d4
jne 0x40b7b8
imul ecx, dword [ebp - 0x14], 0x618000
add ecx, 0x5aa5000e
mov dword [ebp - 0x14], ecx
mov eax, 0xe3393deb
cmp ecx, 0xfc
jae 0x40c10a
mov eax, 0xbaec7ba3
jmp 0x40c10a
cmp eax, 0xba98cedd
je 0x40c0ad
cmp eax, 0xbaec7ba3
jne 0x40b7b8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
add eax, 8
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xbe087747
jmp 0x40b7b8
cmp eax, 0x27568899
je 0x40c0ca
cmp eax, 0x335a7ea9
jne 0x40b7b8
mov ecx, dword [ebp - 0x14]
shl ecx, 0x10
or ecx, 0x37
mov dword [ebp - 0x14], ecx
mov eax, 0x5acd085b
cmp ecx, 0x2e
jl 0x40c10a
mov eax, 0xdb94eb49
jmp 0x40c10a
imul eax, dword [ebp - 0x14], 0x3d8000
add eax, 0xdf540000
mov dword [ebp - 0x14], eax
push eax
push 0x5fe
push 0x2074
push 0x2422
call fcn.0040c150
add esp, 0x10
mov dword [ebp - 0x10], 0x286f53d
jmp 0x40b7b8
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x7e5641a6
jmp 0x40b7b8
push 7
push 0x472ca2
push 9
push dword [ebp - 0x30]
call fcn.0040c150
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], edx
movzx eax, word [eax + 8]
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x7b72d526
jmp 0x40b7b8
mov eax, dword [ebp - 0x18]
mov ecx, 0xdf
add eax, ecx
mov ecx, eax
imul ecx, eax
shr eax, 8
imul edx, ecx, 0x169d
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x335a7ea9
cmp ecx, edx
je 0x40c10a
mov eax, 0x6492dbe2
jmp 0x40c10a
mov eax, dword [ebp - 0x50]
mov word [eax], 0x88
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov cx, 0xe
mov word [eax], cx
mov eax, dword [ebp - 0x20]
mov word [eax + 2], cx
mov dword [ebp - 0x10], 0xdafe6373
jmp 0x40b7b8
mov eax, dword [ebp - 0x18]
shl eax, 0x18
add eax, 0xfffaf800
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa4de8012
jmp 0x40b7b8
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xf67daab0
jmp 0x40b7b8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xba98cedd
jmp 0x40b7b8
imul eax, dword [ebp - 0x14], 0x9d
shr eax, 0xf
imul eax, eax, 0x4b
add eax, 0x2328
mov dword [ebp - 0x14], eax
call fcn.0040ae6c
mov dword [ebp - 0x10], 0xf22cb5b3
jmp 0x40b7b8
mov eax, dword [ebp - 0x48]
mov byte [eax], 0
mov dword [ebp - 0x10], 0x3ceefc31
jmp 0x40b7b8
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov word [eax + 0x88], 0
mov eax, 0x88
push eax
push 0x4665c0
push dword [ebp - 0x38]
call fcn.00443560
add esp, 0xc
mov dword [ebp - 0x10], 0x53a6ead
jmp 0x40b7b8
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0x34
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x3c]
push ecx
push 0
push dword [ebp - 0x24]
push ebx
push ebx
push 0x50000018
call eax
cmp dword [ebp - 0x3c], 8
mov eax, 0xfdedf101
je 0x40c10a
mov eax, 0xd53ceb75
jmp 0x40c10a
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax]
add edi, 0xfffffdd4
mov eax, edi
shr eax, 0xa
add eax, 0x79
mov dword [ebp - 0x14], eax
push 0x159f
push 0x5cab
push eax
push 0x54c6
call fcn.0040c150
add esp, 0x10
call fcn.0040ae6c
mov eax, 0x7e5641a6
cmp edi, 0xec00
jae 0x40c10a
mov eax, 0x39d9b857
jmp 0x40c10a
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x9f]
imul ecx, ecx
imul edx, ecx, 0x3ee1
dec edx
add eax, 0x14
shr eax, 6
mov dword [ebp - 0x18], eax
mov eax, 0xd388b761
cmp ecx, edx
je 0x40c10a
mov eax, 0x1407fa64
jmp 0x40c10a
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xfe8c71cd
jmp 0x40b7b8
mov eax, dword [ebp - 0x1c]
mov word [eax], 0x88
mov dword [ebp - 0x10], 0x384e92a9
jmp 0x40b7b8
mov eax, dword [ebp - 0x18]
shl eax, 7
add eax, 0xffffffbc
shr eax, 6
and eax, 0xfffffffc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x39d9b857
jmp 0x40b7b8
mov eax, dword [ebp - 0x14]
shl eax, 0x16
or eax, 0x150000
lea ecx, [eax + eax*2]
mov dword [ebp - 0x14], ecx
mov eax, 0x27568899
cmp ecx, 0xa2
jge 0x40c10a
mov eax, 0x49afe2d4
jmp 0x40c10a
mov dword [ebp - 0x10], 0xe3393deb
jmp 0x40b7b8
push 8
push 0x466648
push 0x44
push dword [ebp - 0x38]
call fcn.0040c270
add esp, 0x10
push 0x8a
push dword [ebp - 0x38]
push dword [ebp - 0x28]
call fcn.00443560
add esp, 0xc
mov eax, dword [ebp - 0x2c]
sub esp, 0x10
mov edi, esp
mov word [edi + 0xe], 0
movzx eax, word [0x466664]
mov word [edi + 0xc], ax
mov eax, dword [0x466660]
mov dword [edi + 8], eax
mov eax, dword [0x46665c]
mov dword [edi + 4], eax
mov eax, dword [0x466658]
mov dword [edi], eax
push 4
push str.:s
push 7
push edi
call fcn.0040c270
add esp, 0x10
mov eax, dword [ebp - 0x2c]
mov ecx, dword [edi + 0xc]
mov dword [eax + 0xc], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov ecx, dword [edi]
mov edx, dword [edi + 4]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xdca52b60
jmp 0x40b7b8
mov eax, dword [ebp - 0x14]
shl eax, 0x12
add eax, 0xff91ffb1
shr eax, 4
mov dword [ebp - 0x14], eax
push eax
push 0x1662
push 0x722
push 0x4985
call fcn.0040c270
add esp, 0x10
mov dword [ebp - 0x10], 0x39d9b857
jmp 0x40b7b8
mov eax, dword [ebp - 0x18]
shr eax, 9
lea ecx, [eax - 0x11e]
imul ecx, ecx
imul edx, ecx, 0x21fd
imul eax, eax, 0x8c
dec edx
add eax, 0xffff2792
mov dword [ebp - 0x18], eax
mov eax, 0x6077240
cmp edx, ecx
je 0x40c10a
mov eax, 0x626ecbae
jmp 0x40c10a
push 5
push 0x472cb9
push 0x10
push dword [ebp - 0x34]
call fcn.0040c150
add esp, 0x10
mov dword [ebp - 0x10], 0x790dee29
jmp 0x40b7b8
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
add eax, 4
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xcf88fb80
jmp 0x40b7b8
mov edi, dword [ebp - 0x14]
shr edi, 0x12
add edi, 0xffffffa7
mov eax, edi
shr eax, 8
mov dword [ebp - 0x14], eax
push 0x3cec
push eax
push 0x5549
push 0x3016
call fcn.0040c150
add esp, 0x10
call fcn.0040b7a0
mov eax, 0xbe087747
cmp edi, 0x2300
jb 0x40c10a
mov eax, 0xe3393deb
mov dword [ebp - 0x10], eax
jmp 0x40b7b8
cmp eax, 0xb295b934
jne 0x40b7b8
jmp 0x40c132
cmp eax, 0xd53ceb75
jne 0x40b7b8
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret