Function at 0x401000
Capabilities:
Terminate process

Disassembly:
sub esp, 0x208
mov eax, dword [esp + 0x210]
push ebx
xor ebx, ebx
push ebp
mov dword [esp + 0x18], ebx
mov ecx, dword [eax]
push esi
push edi
xor edi, edi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
mov byte [esp + 0x13], bl
mov dword [0x43950c], ecx
call fcn.00402ae0
lea edx, [esp + 0x28]
push edx
call fcn.00403e80
lea eax, [esp + 0x220]
push eax
lea ecx, [esp + 0x220]
push ecx
push 0x42222c
push 0x422464
call fcn.00402e90
push 0x4221d8
call fcn.004071d0
mov eax, dword [esp + 0x234]
mov ecx, dword [esp + 0x230]
lea edx, [esp + 0x34]
push edx
push 0x422098
push 0x422440
push eax
push ecx
call fcn.00407520
or ebp, 0xffffffff
add esp, 0x28
cmp eax, ebp
je 0x401285
nop
lea esp, [esp]
add eax, 0xffffffdd
cmp eax, 0xdd
ja case.0x4010b6.54
xor edx, edx
mov dl, byte [eax + 0x4014c8]
jmp dword [edx*4 + 0x401478]
mov byte [0x43949f], 1
jmp case.0x4010b6.35
mov eax, dword [0x4394e4]
mov dword [esp + 0x1c], eax
jmp case.0x4010b6.35
inc byte [0x43949c]
jmp case.0x4010b6.35
mov eax, dword [0x4394e4]
cmp eax, ebx
je 0x401139
mov ecx, dword [esp + 0x14]
push ecx
mov esi, eax
call fcn.004074c0
mov edx, dword [0x4394e4]
push 8
push edx
call fcn.004074e0
mov dword [esp + 0x20], eax
mov eax, dword [0x4394e4]
mov cl, byte [eax]
add esp, 0xc
cmp cl, bl
je 0x401129
mov byte [eax], 0x78
mov eax, dword [0x4394e4]
inc eax
mov dword [0x4394e4], eax
cmp byte [eax], bl
jne 0x401117
cmp byte [esi], bl
je case.0x4010b6.35
mov byte [esi + 1], bl
jmp case.0x4010b6.35
mov byte [esp + 0x13], 1
jmp case.0x4010b6.35
mov eax, dword [0x4394e4]
push ebx
push eax
call fcn.004074e0
add esp, 8
mov dword [esp + 0x18], eax
jmp case.0x4010b6.35
mov ecx, dword [0x4394e4]
push ecx
call fcn.004128da
add esp, 4
mov dword [0x439498], eax
jmp case.0x4010b6.35
mov edx, dword [0x4394e4]
push edx
call fcn.004128da
add esp, 4
mov dword [0x4394a4], eax
jmp case.0x4010b6.35
mov byte [0x4394a0], 1
jmp case.0x4010b6.35
mov byte [0x4394a2], 1
jmp case.0x4010b6.35
mov eax, dword [0x4394e4]
push 0x4221d8
push eax
call fcn.00407200
add esp, 8
test al, al
je case.0x4010b6.35
call fcn.004021a0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x208
ret
inc dword [0x4394ac]
jmp case.0x4010b6.35
mov ecx, dword [0x4394e4]
mov dword [0x4394b0], ecx
jmp case.0x4010b6.35
mov dword [0x4394b0], 0x422438
jmp case.0x4010b6.35
mov byte [0x4394a1], 1
jmp case.0x4010b6.35
mov eax, dword [0x4394e4]
cmp eax, ebx
je 0x401227
push eax
call fcn.004128da
add esp, 4
cmp eax, ebx
mov dword [0x4394a8], eax
ja case.0x4010b6.35
mov dword [0x4394a8], 1
jmp case.0x4010b6.35
mov dword [0x4394a8], ebp
jmp case.0x4010b6.35
mov edx, dword [0x4394e4]
mov dword [0x439500], edx
jmp case.0x4010b6.35
mov eax, dword [0x423ca4]
push eax
push 0x422418
push 0x4357c0
call fcn.004126b3
add esp, 0xc
inc edi
mov edx, dword [esp + 0x220]
mov eax, dword [esp + 0x21c]
lea ecx, [esp + 0x20]
push ecx
push 0x422098
push 0x422440
push edx
push eax
call fcn.00407520
add esp, 0x14
cmp eax, ebp
jne 0x4010a0
mov eax, dword [0x423ca0]
mov ecx, dword [esp + 0x21c]
sub ecx, eax
cmp edi, ebx
mov dword [esp + 0x21c], ecx
mov ecx, dword [esp + 0x220]
lea ebp, [ecx + eax*4]
jne 0x401469
cmp dword [esp + 0x21c], ebx
je 0x401469
cmp byte [esp + 0x13], bl
je 0x4012cc
push ebx
call fcn.00405e20
add esp, 4
mov dword [esp + 0x14], eax
push 0x4015b0
push 2
call fcn.00412492
push 0x4015b0
push 0xf
call fcn.00412492
mov al, byte [0x43949f]
add esp, 0x10
cmp al, bl
je 0x4012fd
push ebx
push 1
lea edx, [esp + 0x30]
push edx
call fcn.00405c60
mov eax, dword [0x439384]
cmp eax, ebx
je 0x40131a
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
push ebx
lea ecx, [esp + 0x30]
push ecx
call fcn.00405c60
mov edx, dword [0x4394a8]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x20]
push eax
push ecx
push edx
lea eax, [esp + 0x38]
push eax
call fcn.004015c0
add esp, 0x14
test al, al
je 0x401356
mov esi, 1
jmp 0x401432
call fcn.00402170
push ebx
call fcn.0041239f
mov al, byte [0x43949d]
xor esi, esi
cmp al, bl
jne 0x401428
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
nop
lea esp, [esp]
mov ecx, dword [esp + 0x21c]
push ebp
push ecx
lea edx, [esp + 0x30]
push edx
mov byte [0x43949e], bl
call fcn.004017d0
mov esi, eax
add esp, 0xc
cmp esi, ebx
je 0x4013ec
jg 0x401428
cmp byte [0x43949c], bl
jne 0x4013ec
cmp dword [0x4394a8], ebx
je 0x401423
cmp byte [0x43949d], bl
jne 0x401423
lea eax, [esp + 0x28]
push eax
call fcn.00404d90
mov ecx, dword [0x4394a8]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
lea edx, [esp + 0x38]
push edx
call fcn.004015c0
add esp, 0x14
test al, al
jne 0x401421
push 0x3e8
call edi
xor ebx, ebx
jmp 0x401413
mov eax, dword [0x439498]
cmp eax, ebx
je 0x401428
imul eax, eax, 0x3e8
push eax
call edi
cmp byte [0x43949e], bl
je 0x401413
push 0x4394b8
call fcn.004122fa
add esp, 4
cmp byte [0x43949d], bl
je 0x401370
jmp 0x401428
xor ebx, ebx
mov esi, 1
lea eax, [esp + 0x28]
push eax
call fcn.00404d90
mov ecx, dword [esp + 0x14]
push ecx
call fcn.004074c0
mov edx, dword [esp + 0x1c]
push edx
call fcn.004074c0
mov eax, dword [esp + 0x228]
push eax
call fcn.00403260
push ebx
call fcn.00402bf0
xor ecx, ecx
add esp, 0x10
cmp esi, ebx
setne cl
push ecx
call fcn.0041239f
call fcn.004021a0
push 1
call fcn.0041239f
lea ecx, [ecx]
push esi
adc al, byte [eax]
push ebp
adc al, byte [eax]
mov ebp, 0x99004010
adc dword [eax], eax
movsd dword es:[edi], dword [esi]
adc dword [eax], eax
je 0x40149f
inc eax
add ch, bl
adc dword [eax], eax
dec ebx
adc eax, dword [eax]
jmp 0x4014ab
add cl, cl
adc byte [eax], al
pop ebx
adc dword [eax], eax
loop 0x4014ba
inc eax
add byte [ebp - 0x2affbfef], cl
adc dword [eax], eax
inc ebx
adc dword [eax], eax
not dword [ecx]
inc eax
add byte [eax], al
adc al, byte [eax]
das
adc al, byte [eax]
cmp eax, 0x4012
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc eax, dword [ecx]
adc edx, dword [ebx]
adc eax, dword [edx]
adc eax, dword [ebx]
adc edx, dword [ebx]
adc eax, dword [ecx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc eax, dword [eax + 0x13061313]
adc eax, dword [edi]
or byte [ebx], dl
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc ecx, dword [ecx]
adc ecx, dword [edx]
or edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc ecx, dword [ecx + ecx]
or eax, 0x100f130e
adc dword [ebx], edx
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [edx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [0x43949d], 1
ret