Function at 0x4068b9
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov ecx, 0x86
add ecx, 0x13d5
and eax, 0x2a58
add dword [ebp - 0x5c], 0x265
or ecx, eax
and ecx, 0x16b2
cmp ecx, 0x1a
je 0x4068f5
mov eax, dword [ebp - 0x30]
xor eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jae 0x4068f5
sbb eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x6c]
sub eax, edx
sub eax, edx
dec dword [ebp - 0x68]
add dword [ebp - 0x8c], eax
add eax, 0x3851
cmp eax, 0
jb 0x406948
mov edx, 0x7e3
sub dword [ebp - 0x34], 0x2935
mov dword [ebp - 0x6c], edx
add edx, 0xecb
sbb edx, dword [ebp - 0x8c]
sbb edx, dword [ebp - 0x24]
test eax, eax
jne 0x40694b
xor dword [ebp - 0x88], 0x8e4
mov dword [ebp - 0x1c], edx
adc dword [ebp - 0x24], edx
and eax, dword [ebp - 0x6c]
or edx, 0x6a5
or edx, eax
mov edx, dword [ebp - 0x8c]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov esi, dword [ebp - 0x2c]
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x50], eax
xor ecx, ecx
add ecx, 0x160
add dword [ebp - 0x60], 0xf4f
add dword [ebp - 0x68], ecx
or ecx, 0x6ca
sub ecx, 0x56b3
sub dword [ebp - 0x28], 0x890
add dword [ebp - 0x60], ecx
or dword [ebp - 0x44], 0x2526
cmp dword [ebp - 0x20], ecx
jb 0x4069b8
sub eax, eax
xor eax, dword [ebp - 0x88]
add dword [ebp - 0x30], ecx
sbb dword [ebp - 0x6c], ecx
sbb ecx, dword [ebp - 0x40]
dec dword [ebp - 0x48]
sub edx, edx
adc edx, dword [ebp - 0x7c]
inc edx
add edx, 0x794
adc dword [ebp - 0x70], edx
cmp dword [ebp - 0x90], edx
jb 0x406a04
mov eax, 0xd9
and dword [ebp - 0x6c], eax
xor eax, 0x2b27
xor eax, edx
add eax, 0xa99
add dword [ebp - 0x9c], 0x58f
xor dword [ebp - 0xa4], 0x763
cmp eax, 0
jne 0x406a04
and edx, dword [ebp - 0x60]
push 0
mov edx, dword [ebp - 0xa0]
sub edx, eax
or edx, 0x3a98
and edx, 0x5eb5
add dword [ebp - 0x88], edx
and dword [ebp - 0x3c], edx
sub dword [ebp - 0x14], 0xbe2
xor edx, eax
cmp edx, 0
jae 0x406a51
sub eax, eax
or eax, edx
xor eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x6c]
cmp edx, 0
jne 0x406a51
sub eax, 0x284
or eax, edx
xor eax, 0xf1c
xor dword [ebp - 0x5c], edx
inc dword [ebp - 0x40]
add dword [ebp - 0x34], 0x56ac
or dword [ebp - 0x7c], edx
push 0x19
call dword [sym.imp.MSVCRT.dll_sqrt]
push ecx
sub ecx, ecx
and ecx, 0x3766
and ecx, eax
test ecx, ecx
jae 0x406a9f
mov eax, 0x69
or dword [ebp - 0x3c], 0xb43
and dword [ebp - 0x14], eax
sub dword [ebp - 0x70], 0x57e6
xor eax, 0x530
or eax, dword [ebp - 0x54]
and eax, dword [ebp - 0x28]
cmp eax, 0x500
ja 0x406aa2
adc eax, dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
xor ecx, ecx
adc ecx, dword [ebp - 0x40]
or ecx, dword [ebp - 0x68]
xor dword [ebp - 0x20], ecx
and ecx, 0xc7d
add edx, dword [ebp - 0x78]
cmp dword [ebp - 0x6c], ecx
jb 0x406b04
and ecx, 0x7131
and ecx, edx
mov edx, 0x45d
sbb dword [ebp - 0x7c], edx
sub dword [ebp - 0x80], edx
and dword [ebp - 0x48], 0x33
sbb dword [ebp - 0x7c], edx
and edx, ecx
sub edx, 0x38f
and edx, 0x2fcd
sub edx, ecx
sub dword [ebp - 0x24], ecx
or dword [ebp - 0x38], ecx
or dword [ebp - 0x90], 0x16a1
or edx, dword [ebp - 0x14]
xor edx, dword [ebp - 0x74]
add ecx, 0x290
dec ecx
sub ecx, edx
sbb dword [ebp - 0x20], edx
dec dword [ebp - 0x60]
cmp eax, 4
jne 0x407253
mov edi, dword [ebp - 0x2c]
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
xor ecx, ecx
xor ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x6c]
add ecx, edx
dec dword [ebp - 0x1c]
adc dword [ebp - 0x78], ecx
adc dword [ebp - 0x98], ecx
and dword [ebp - 0x84], 0x7f4
cmp ecx, 0x65
jbe 0x406b6b
xor edx, dword [ebp - 0x80]
xor edx, edx
xor dword [ebp - 0x50], edx
or dword [ebp - 0xa8], 0xf0d
and edx, ecx
add edx, 0xc9e
or edx, dword [ebp - 0x18]
call fcn.00405917
sub eax, eax
or eax, dword [ebp - 0x24]
or eax, 0xa1b
add edx, dword [ebp - 0x44]
xor dword [ebp - 0x50], eax
sub dword [ebp - 0x14], 0x92f
add dword [ebp - 0x20], eax
xor eax, edx
and eax, 0x471
test eax, eax
je 0x406bb8
mov edx, 0x30
sbb dword [ebp - 0x74], edx
add edx, eax
or edx, 0xd49
cmp dword [ebp - 0x88], eax
jbe 0x406bb8
adc eax, dword [ebp - 0x6c]
xor eax, dword [ebp - 0x8c]
add dword [ebp - 0x28], edx
xor dword [ebp - 0x3c], 0xca8
and dword [ebp - 0x14], 0x5296
push 3
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x54], eax
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x9c], eax
sub eax, eax
add eax, dword [ebp - 0x78]
and eax, dword [ebp - 0x30]
or eax, edx
sub edx, dword [ebp - 0x28]
adc edx, dword [ebp - 0x5c]
or dword [ebp - 0xa8], eax
cmp dword [ebp - 0x1c], eax
ja 0x406c26
mov edx, 0x469
add edx, 0x1abf
sbb edx, dword [ebp - 0x58]
cmp dword [ebp - 0x18], edx
je 0x406c26
add eax, edx
inc eax
inc dword [ebp - 0x14]
sbb dword [ebp - 0x14], edx
sbb dword [ebp - 0x38], edx
add dword [ebp - 0x20], 0x6144
add dword [ebp - 0x64], edx
call fcn.00407cc3
mov ecx, 0xe9a
dec edx
xor edx, 0xda9
adc ecx, dword [ebp - 0x60]
inc dword [ebp - 0x84]
or dword [ebp - 0x40], ecx
and ecx, edx
cmp dword [ebp - 0x78], ecx
jb 0x406c6d
dec edx
xor edx, edx
xor dword [ebp - 0x2c], 0xfcf
sbb edx, dword [ebp - 0x4c]
or edx, dword [ebp - 0x98]
or dword [ebp - 0x74], ecx
add edx, dword [ebp - 0x38]
inc edx
inc edx
dec ecx
and ecx, edx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.USER32.dll_GetActiveWindow]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
call fcn.004057c5
sub edx, edx
or dword [ebp - 0x78], 0x589b
dec dword [ebp - 0x7c]
or dword [ebp - 0xa4], 0x5dcc
adc edx, dword [ebp - 0x38]
xor edx, dword [ebp - 0x84]
and edx, ecx
sbb dword [ebp - 0x8c], edx
add edx, 0x1974
xor edx, 0x5190
dec edx
cmp edx, 0
ja 0x406d1e
and edx, dword [ebp - 0x64]
sub ecx, dword [ebp - 0x2c]
adc ecx, dword [ebp - 0x3c]
sub ecx, ecx
or dword [ebp - 0xa4], ecx
or dword [ebp - 0x38], 0x587
add dword [ebp - 0x24], ecx
adc dword [ebp - 0x1c], ecx
sub ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x48]
xor edx, 0x2820
xor dword [ebp - 0x18], 0x4ac
sbb dword [ebp - 0x6c], edx
sbb edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x98]
or edx, 0xf83
add edx, 0xd4f
and dword [ebp - 0x80], 0xfe2
sub dword [ebp - 0x14], 0xd91
mov dword [ebp - 0x20], edx
and dword [ebp - 0x60], edx
mov esi, dword [ebp - 0x48]
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x88], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x5c], eax
sub eax, eax
adc eax, dword [ebp - 0x18]
sub eax, 0x2a39
cmp eax, dword [ebp - 0x20]
jne 0x406d81
mov ecx, 0xe94
and dword [ebp - 0x18], ecx
and dword [ebp - 0x48], ecx
dec dword [ebp - 0x90]
dec ecx
and ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x80]
cmp ecx, dword [ebp - 0x4c]
je 0x406d87
adc eax, dword [ebp - 0x2c]
and dword [ebp - 0x84], eax
add dword [ebp - 0xa0], eax
sub dword [ebp - 0x40], 0x509f
call fcn.00405917
sub edx, edx
adc edx, dword [ebp - 0x88]
sub edx, dword [ebp - 0x50]
sub dword [ebp - 0x84], eax
dec dword [ebp - 0x34]
sub dword [ebp - 0x7c], edx
cmp edx, dword [ebp - 0x60]
jbe 0x406dc7
mov eax, 0xe4
xor eax, edx
cmp eax, dword [ebp - 0x78]
jae 0x406dc7
or edx, dword [ebp - 0x60]
xor dword [ebp - 0x20], eax
add edx, dword [ebp - 0x64]
inc eax
dec eax
push 3
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xaa
and eax, ecx
sub ecx, dword [ebp - 0x14]
xor ecx, dword [ebp - 0x30]
xor ecx, 0x5004
inc ecx
xor ecx, 0x4cf
sbb dword [ebp - 0x74], ecx
xor ecx, eax
and ecx, 0x2970
or ecx, eax
or ecx, eax
sub ecx, 0x374f
cmp dword [ebp - 0x94], ecx
jb 0x406e31
and dword [ebp - 0x44], eax
xor dword [ebp - 0x78], eax
sub eax, eax
sbb dword [ebp - 0x38], eax
add eax, ecx
sbb eax, dword [ebp - 0x90]
adc dword [ebp - 0x44], ecx
xor dword [ebp - 0x14], 0x514
add ecx, dword [ebp - 0x9c]
call fcn.00405917
mov ecx, 0xd7
adc edx, dword [ebp - 0x98]
adc ecx, dword [ebp - 0x1c]
sub ecx, edx
or ecx, 0x3e3
sbb dword [ebp - 0x3c], ecx
add ecx, 0x75bb
or ecx, 0x4f9
add ecx, 0xb8a
test ecx, ecx
je 0x406ea1
xor dword [ebp - 0x78], ecx
sub dword [ebp - 0x74], ecx
sub dword [ebp - 0x3c], ecx
and dword [ebp - 0x90], edx
and dword [ebp - 0x40], edx
mov edx, 0x69
inc dword [ebp - 0x50]
dec dword [ebp - 0x70]
add dword [ebp - 0x8c], edx
xor ecx, edx
xor edx, ecx
adc dword [ebp - 0x4c], edx
add dword [ebp - 0x90], edx
and dword [ebp - 0x88], edx
add ecx, 0x3ed
and dword [ebp - 0x9c], 0x789
xor dword [ebp - 0xa4], ecx
or dword [ebp - 0x60], 0x69a1
mov dword [ebp - 0x38], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x98], eax
call fcn.00404110
xor edx, edx
xor dword [ebp - 0x84], 0xe5b
adc dword [ebp - 0x9c], eax
and edx, dword [ebp - 0x34]
or edx, 0x6118
and edx, eax
sbb dword [ebp - 0x74], edx
adc dword [ebp - 0x48], edx
inc edx
test edx, edx
je 0x406f3a
sbb edx, dword [ebp - 0x78]
and edx, dword [ebp - 0x88]
adc edx, dword [ebp - 0x44]
adc edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x80]
sbb dword [ebp - 0x64], eax
inc dword [ebp - 0x78]
dec eax
xor eax, dword [ebp - 0x30]
or eax, dword [ebp - 0x5c]
xor edx, eax
dec edx
or dword [ebp - 0x4c], edx
or dword [ebp - 0x18], 0x7eef
xor dword [ebp - 0x50], 0x426f
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov dword [ebp - 0x30], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov edi, dword [ebp - 0x80]
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
call fcn.00404938
sub edx, edx
inc ecx
xor edx, ecx
sub edx, 0x69e
add dword [ebp - 0x8c], edx
or edx, ecx
and edx, 0x5fe
mov dword [ebp - 0x9c], ecx
cmp dword [ebp - 0x6c], edx
jb 0x406fcb
inc edx
dec dword [ebp - 0x9c]
and dword [ebp - 0x3c], ecx
xor ecx, ecx
xor dword [ebp - 0x20], ecx
xor dword [ebp - 0x50], 0x7429
or dword [ebp - 0x38], 0x31ff
sub ecx, dword [ebp - 0x98]
and dword [ebp - 0x9c], 0x949
and dword [ebp - 0x50], edx
or dword [ebp - 0xa4], edx
dec ecx
adc ecx, dword [ebp - 0x38]
and dword [ebp - 0x38], ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp - 0x5c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x5c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 0x78]
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edx, dword [ebp - 0x34]
inc edx
sub edx, eax
sub eax, edx
or eax, 0x61e
inc eax
xor edx, 0x482d
add edx, eax
add edx, eax
cmp dword [ebp - 0x50], edx
ja 0x407049
mov eax, 0x1c
sub dword [ebp - 0x90], 0x7ee
dec dword [ebp - 0x60]
or dword [ebp - 0x58], 0x54ef
add eax, 0xc6d
sub eax, edx
add eax, dword [ebp - 0xa8]
or eax, edx
cmp eax, dword [ebp - 0x40]
jae 0x407049
sub dword [ebp - 0x44], 0xea7
call fcn.00404938
mov ecx, 0xb5
sbb ecx, dword [ebp - 0x80]
sub ecx, dword [ebp - 0x9c]
dec ecx
sub ecx, eax
and ecx, 0x797
xor ecx, 0x56d
inc ecx
dec dword [ebp - 0x48]
or dword [ebp - 0xa8], 0xcc1
sub dword [ebp - 0x44], 0x598
and ecx, 0x306
add ecx, 0x1e6
cmp dword [ebp - 0x58], ecx
ja 0x4070c3
mov eax, 0xa0f
or dword [ebp - 0x84], 0x141b
dec dword [ebp - 0x80]
mov dword [ebp - 0x98], eax
and eax, ecx
sub eax, ecx
or eax, dword [ebp - 0x44]
cmp eax, 0
jae 0x4070c3
xor ecx, eax
add ecx, 0x80f
or eax, 0xd51
sub eax, ecx
xor ecx, 0xc28
sub ecx, 0x5e25
mov esi, dword [ebp - 0x3c]
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x68], eax
push 3
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x44], eax
call fcn.00405917
sub edx, edx
sub edx, dword [ebp - 0x38]
xor edx, dword [ebp - 0x60]
add edx, 0x28f9
add edx, ecx
sub ecx, edx
or edx, dword [ebp - 0x74]
cmp edx, 0
ja 0x40712e
xor ecx, ecx
xor dword [ebp - 0x9c], ecx
dec dword [ebp - 0x50]
dec ecx
add edx, ecx
mov dword [ebp - 0x44], edx
sub dword [ebp - 0xa0], edx
inc ecx
sub ecx, edx
adc edx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
call section..CODE
xor ecx, ecx
xor ecx, eax
and ecx, 0x58c
sbb dword [ebp - 0xa0], ecx
dec ecx
test ecx, ecx
jb 0x40717e
xor eax, eax
or dword [ebp - 0x80], 0x5d30
mov dword [ebp - 0x70], eax
xor eax, dword [ebp - 0x80]
sbb eax, dword [ebp - 0x5c]
sbb dword [ebp - 0x7c], ecx
cmp eax, 0
jbe 0x40717e
and eax, ecx
sub eax, ecx
and eax, 0x7508
add eax, ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x50]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x48], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x2c], eax
sub ecx, ecx
sbb ecx, dword [ebp - 0x58]
or ecx, dword [ebp - 0x90]
sbb dword [ebp - 0x94], ecx
sub dword [ebp - 0x4c], 0x58
inc ecx
dec ecx
cmp ecx, 0
je 0x4071da
and eax, 0x348
mov eax, dword [ebp - 0xa4]
dec eax
add eax, ecx
inc eax
sub ecx, eax
adc ecx, dword [ebp - 0x7c]
sbb eax, dword [ebp - 0x64]
xor dword [ebp - 0x24], 0x376c
call fcn.00404938
mov edx, dword [ebp - 0x34]
and dword [ebp - 0x14], 0xa5
sub edx, dword [ebp - 0x90]
and dword [ebp - 0x40], edx
add dword [ebp - 0x50], 0x45c5
or dword [ebp - 0x30], edx
and edx, 0x18a0
xor edx, eax
cmp edx, dword [ebp - 0x74]
jae 0x407227
mov eax, 0xe1
add dword [ebp - 0xa8], 0xa86
xor dword [ebp - 0x64], eax
sub eax, edx
sub dword [ebp - 0x2c], edx
or edx, eax
xor edx, 0x794a
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [ebp - 0x1c]
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x88], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x30], eax
xor eax, eax
xor dword [ebp - 0x70], 0xeb9
sub dword [ebp - 0x5c], eax
inc dword [ebp - 0x7c]
inc dword [ebp - 0x80]
add dword [ebp - 0x60], 0x73b2
inc eax
cmp eax, dword [ebp - 0x18]
je 0x4072a3
and eax, 0xd4d
or eax, ecx
dec dword [ebp - 0x90]
xor dword [ebp - 0x14], ecx
mov ecx, 0x3d
or dword [ebp - 0x70], ecx
adc dword [ebp - 0x5c], ecx
or dword [ebp - 0x48], ecx
sbb dword [ebp - 0x14], ecx
dec ecx
and ecx, eax
and ecx, dword [ebp - 0x24]
sub dword [ebp - 0x64], eax
inc dword [ebp - 0x38]
xor eax, dword [ebp - 0x54]
add dword [ebp - 0x74], eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]