Function at 0x40b1f1
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x6c
mov dword [ebp - 0x10], 0x6077240
mov ebx, 0xffffff89
mov esi, 3
mov eax, dword [ebp - 0x10]
cmp eax, 0xfd6da9c3
jg 0x40b25c
cmp eax, 0xcaa41489
jg 0x40b2b9
cmp eax, 0xba98cedc
jle 0x40b373
cmp eax, 0xbe087746
jg 0x40b4aa
cmp eax, 0xbbebcdc9
jg 0x40b796
cmp eax, 0xba98cedd
je 0x40b97f
cmp eax, 0xbaec7ba3
jne 0x40b20b
mov dword [ebp - 0x10], 0xcf88fb80
jmp 0x40b20b
cmp eax, 0x3ceefc30
jle 0x40b320
cmp eax, 0x5acd085a
jle 0x40b3ba
cmp eax, 0x790dee28
jg 0x40b4e2
cmp eax, 0x6492dbe1
jg 0x40b7bc
cmp eax, 0x5acd085b
je 0x40b9b7
cmp eax, 0x626ecbae
jne 0x40b20b
push eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x7e5641a6
jmp 0x40b20b
cmp eax, 0xdb94eb48
jg 0x40b40f
cmp eax, 0xd388b760
jg 0x40b50f
cmp eax, 0xcf88fb7f
jg 0x40b805
cmp eax, 0xcaa4148a
je 0x40b9e7
cmp eax, 0xce747415
jne 0x40b20b
mov ecx, dword [ebp - 0x14]
shr ecx, 0x16
imul eax, ecx, 0xce
imul ecx, ecx
imul edx, ecx, 0xcf9
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x7e5641a6
cmp ecx, edx
je 0x40ba1b
mov eax, 0x9bdc7603
jmp 0x40ba1b
cmp eax, 0x1407fa63
jle 0x40b461
cmp eax, 0x2e9e506c
jle 0x40b54b
cmp eax, 0x384e92a8
jg 0x40b864
cmp eax, 0x2e9e506d
je 0x40b9f7
cmp eax, 0x335a7ea9
jne 0x40b20b
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0x286f53d
jmp 0x40b20b
cmp eax, 0xa4de8011
jle 0x40b595
cmp eax, 0xb295b933
jg 0x40b88f
cmp eax, 0xa4de8012
je 0x40ba23
cmp eax, 0xb1d9934d
jne 0x40b20b
mov ecx, dword [ebp - 0x58]
mov eax, 0xd9530635
cmp ecx, 8
je 0x40ba1b
mov eax, 0x2adbcb0e
jmp 0x40ba1b
cmp eax, 0x49afe2d3
jle 0x40b5cb
cmp eax, 0x511e799f
jg 0x40b6b3
cmp eax, 0x49afe2d4
je 0x40ba35
cmp eax, 0x50499cd6
jne 0x40b20b
mov eax, dword [ebp - 0x18]
shl eax, 0x10
add eax, 0xf40000
and eax, 0xffc00000
or eax, 0x4580
mov dword [ebp - 0x18], eax
call fcn.0040a95c
mov dword [ebp - 0x10], 0x2e9e506d
jmp 0x40b20b
cmp eax, 0xe3393dea
jle 0x40b617
cmp eax, 0xf22cb5b2
jg 0x40b706
cmp eax, 0xe3393deb
je 0x40ba5d
cmp eax, 0xf10c8c1e
jne 0x40b20b
imul edi, dword [ebp - 0x18], 0x86000000
mov dword [ebp - 0x18], edi
call fcn.0040b1f1
call fcn.0040b1f1
mov eax, 0x43168861
test edi, edi
jne 0x40ba16
jmp 0x40ba1b
cmp eax, 0x286f53c
jle 0x40b674
cmp eax, 0x607723f
jg 0x40b75e
cmp eax, 0x286f53d
je 0x40ba7b
cmp eax, 0x53a6ead
jne 0x40b20b
mov eax, dword [ebp - 0x14]
shl eax, 0xf
add eax, 0xffffff31
shr eax, 0xd
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa4de8012
jmp 0x40b20b
cmp eax, 0xc0197df9
jg 0x40b8b1
cmp eax, 0xbe087747
je 0x40ba94
cmp eax, 0xbf7c710a
jne 0x40b20b
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xb3437b7c
jmp 0x40b20b
cmp eax, 0x7b72d525
jg 0x40b8f8
cmp eax, 0x790dee29
je 0x40baa8
cmp eax, 0x79e197de
jne 0x40b20b
mov dword [ebp - 0x10], 0x49afe2d4
jmp 0x40b20b
cmp eax, 0xd9530634
jg 0x40b92b
cmp eax, 0xd388b761
je 0x40bac4
cmp eax, 0xd53ceb75
jne 0x40b20b
imul eax, dword [ebp - 0x14], 0x990
add eax, 0x70f5
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xbe087747
jmp 0x40b20b
cmp eax, 0x27568898
jg 0x40b948
cmp eax, 0x1407fa64
je 0x40bad8
cmp eax, 0x1b91c386
jne 0x40b20b
mov edi, dword [ebp - 0x18]
shl edi, 4
add edi, 0x22
mov dword [ebp - 0x18], edi
call fcn.0040a95c
mov eax, 0x7e5641a6
cmp edi, 0x42
je 0x40ba1b
mov eax, 0x43168861
jmp 0x40ba1b
cmp eax, 0x8142317f
je 0x40bae7
cmp eax, 0x84cdc938
je 0x40bafd
cmp eax, 0x9bdc7603
jne 0x40b20b
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xbf7c710a
jmp 0x40b20b
cmp eax, 0x3ceefc31
je 0x40bb6a
cmp eax, 0x43168861
je 0x40bb76
cmp eax, 0x43ba46bc
jne 0x40b20b
mov eax, dword [ebp - 0x18]
shl eax, 6
and eax, 0x7fffc0
imul ecx, eax, 0x7ac4
mov dword [ebp - 0x18], ecx
mov eax, 0x6492dbe2
test ecx, ecx
je 0x40ba1b
mov eax, 0x1b91c386
jmp 0x40ba1b
cmp eax, 0xdb94eb49
je 0x40bbd4
cmp eax, 0xdca52b60
je 0x40b8ec
cmp eax, 0xe0f38596
jne 0x40b20b
mov dword [ebp - 0x18], ebx
push ebx
push 0x5be
push 0x5e93
push 0xae5
call fcn.0040bde0
add esp, 0x10
push ebx
push 0x1ae0
push 0x90c
push 0x4c
call fcn.0040bde0
add esp, 0x10
mov dword [ebp - 0x10], 0x39d9b857
jmp 0x40b20b
cmp eax, 0xfd6da9c4
je 0x40bbe9
cmp eax, 0xfdedf101
je 0x40bbf5
cmp eax, 0xfe8c71cd
jne 0x40b20b
imul eax, dword [ebp - 0x14], 0x5c0000
add eax, 0xffffe940
shr eax, 2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x626ecbae
jmp 0x40b20b
cmp eax, 0x511e79a0
je 0x40bc0b
cmp eax, 0x572b8419
jne 0x40b20b
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff41
add eax, ecx
shr eax, 6
imul ecx, eax, 0x9d80000
imul eax, eax
imul edx, eax, 0x130d
dec edx
add ecx, 0xfffff678
mov dword [ebp - 0x14], ecx
mov ecx, 0x43168861
cmp eax, edx
je 0x40b9af
mov ecx, 0x790dee29
jmp 0x40b9af
cmp eax, 0xf22cb5b3
je 0x40bc20
cmp eax, 0xf67daab0
jne 0x40b20b
mov eax, dword [ebp - 0x14]
shr eax, 1
add eax, 0xffffff4d
mov ecx, eax
shr ecx, 3
imul eax, eax
mov edx, ecx
shl edx, 4
sub edx, ecx
sub edx, ecx
imul edi, eax, 0x2c65
dec edi
add edx, 0xffffff4b
mov dword [ebp - 0x14], edx
mov ecx, 0x6077240
cmp edi, eax
je 0x40b9af
mov ecx, 0x39d9b857
jmp 0x40b9af
cmp eax, 0x6077240
je 0x40bc74
cmp eax, 0xee81527
jne 0x40b20b
mov eax, dword [ebp - 0x18]
shl eax, 0x16
add eax, 0xdc400000
shr eax, 4
or eax, 0x87
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf10c8c1e
jmp 0x40b20b
cmp eax, 0xbbebcdca
je 0x40bc91
cmp eax, 0xbcdb6d0e
jne 0x40b20b
shl dword [ebp - 0x18], 0xd
mov dword [ebp - 0x10], 0x39d9b857
jmp 0x40b20b
cmp eax, 0x6492dbe2
je 0x40bcdc
cmp eax, 0x75900692
jne 0x40b20b
mov eax, dword [ebp - 0x18]
add eax, 0xffffffc2
shr eax, 0xc
imul edi, eax, 0x3200
mov dword [ebp - 0x18], edi
call fcn.0040b1f1
call fcn.0040b1f1
mov eax, 0x626ecbae
test edi, edi
je 0x40ba1b
mov eax, 0x50499cd6
jmp 0x40ba1b
cmp eax, 0xcf88fb80
je 0x40bd1f
cmp eax, 0xd015d6ec
jne 0x40b20b
mov edi, dword [ebp - 0x18]
mov eax, 0xffffff29
add edi, eax
mov dword [ebp - 0x18], edi
push 0x37b0
push edi
push 0x4332
push 0x20a7
call fcn.0040bf00
add esp, 0x10
push 0x4f4d
push edi
push 0x5a20
push 0x4e3
call fcn.0040bf00
add esp, 0x10
mov dword [ebp - 0x10], 0x6077240
jmp 0x40b20b
cmp eax, 0x384e92a9
je 0x40bd3c
cmp eax, 0x39d9b857
jne 0x40b20b
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xfe8c71cd
jmp 0x40b20b
cmp eax, 0xb295b934
je 0x40bd51
cmp eax, 0xb3437b7c
jne 0x40b20b
mov dword [ebp - 0x10], 0xc0197dfa
jmp 0x40b20b
cmp eax, 0xc0197dfa
je 0x40bd66
cmp eax, 0xc997d75a
jne 0x40b20b
mov edi, 0xffff1400
mov dword [ebp - 0x18], edi
call fcn.0040b1f1
push edi
push 0x2097
push 0x11b7
push 0x4ed
call fcn.0040bde0
add esp, 0x10
mov dword [ebp - 0x10], 0xf22cb5b3
jmp 0x40b20b
cmp eax, 0x7b72d526
je 0x40bd8d
cmp eax, 0x7e5641a6
jne 0x40b20b
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x5acd085b
jmp 0x40b20b
cmp eax, 0xdafe6373
jne 0x40bd99
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xbaec7ba3
jmp 0x40b20b
cmp eax, 0x27568899
jne 0x40bda5
mov eax, dword [ebp - 0x14]
shr eax, 0xd
mov dword [ebp - 0x14], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x298b
dec edx
mov eax, 0xcf88fb80
cmp ecx, edx
je 0x40ba1b
mov eax, 0x79e197de
jmp 0x40ba1b
mov ecx, dword [ebp - 0x14]
lea eax, [ecx - 0x16]
imul eax, eax
imul edx, eax, 0x8247
dec edx
imul ecx, ecx, 0xb8
add ecx, 0x29b0
shr ecx, 7
mov dword [ebp - 0x14], ecx
mov ecx, 0x6492dbe2
cmp eax, edx
je 0x40b9af
mov ecx, 0xdafe6373
mov dword [ebp - 0x10], ecx
jmp 0x40b20b
mov eax, dword [ebp - 0x34]
mov byte [eax + 9], 0
mov eax, dword [ebp - 0x34]
mov cl, byte [0x472c91]
mov byte [eax + 8], cl
mov ecx, dword [0x472c8d]
mov dword [eax + 4], ecx
mov ecx, dword [0x472c89]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x8142317f
jmp 0x40b20b
shl dword [ebp - 0x14], 4
mov dword [ebp - 0x10], 0x84cdc938
jmp 0x40b20b
imul ecx, dword [ebp - 0x18], 0x79
add ecx, 0xffff9db0
mov eax, ecx
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov eax, 0x39d9b857
cmp ecx, 0x2f000
jb 0x40ba1b
mov eax, 0x6077240
mov dword [ebp - 0x10], eax
jmp 0x40b20b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0xdca52b60
jmp 0x40b20b
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x28]
push 0
push dword [ebp - 0x24]
push esi
push esi
push 0x50000018
call eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xfd6da9c4
jmp 0x40b20b
imul eax, dword [ebp - 0x14], 0x28e8
shr eax, 0xe
add eax, 0xffffff2c
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x7b72d526
jmp 0x40b20b
imul eax, dword [ebp - 0x14], 0x1700
shr eax, 9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdb94eb49
jmp 0x40b20b
mov eax, dword [ebp - 0x48]
mov word [eax], 0x88
mov dword [ebp - 0x10], 0xfdedf101
jmp 0x40b20b
lea eax, [ebp - 0x75]
push eax
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x53a6ead
jmp 0x40b20b
mov eax, dword [ebp - 0x50]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0xce747415
jmp 0x40b20b
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x384e92a9
jmp 0x40b20b
imul eax, dword [ebp - 0x14], 0x170
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6492dbe2
jmp 0x40b20b
mov eax, dword [ebp - 0x3c]
mov word [eax + 0xe], 0
mov eax, dword [ebp - 0x3c]
movzx ecx, word [0x466614]
mov word [eax + 0xc], cx
mov ecx, dword [0x466610]
mov dword [eax + 8], ecx
mov ecx, dword [0x46660c]
mov dword [eax + 4], ecx
mov ecx, dword [0x466608]
mov dword [eax], ecx
push 4
push 0x466616
push 7
push dword [ebp - 0x3c]
call fcn.0040bf00
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov dword [ebp - 0x10], 0xba98cedd
jmp 0x40b20b
mov dword [ebp - 0x10], 0x43168861
jmp 0x40b20b
mov eax, dword [ebp - 0x38]
mov byte [eax + 0x10], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x472ca3]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x472c9f]
mov dword [eax + 8], ecx
mov ecx, dword [0x472c9b]
mov dword [eax + 4], ecx
mov ecx, dword [0x472c97]
mov dword [eax], ecx
push 6
push 0x472ca7
push 0x10
push dword [ebp - 0x38]
call fcn.0040bde0
add esp, 0x10
push 0x11
push dword [ebp - 0x38]
lea eax, [ebp - 0x75]
push eax
call fcn.004441d0
add esp, 0xc
mov dword [ebp - 0x10], 0x572b8419
jmp 0x40b20b
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xd388b761
jmp 0x40b20b
mov dword [ebp - 0x10], 0xb1d9934d
jmp 0x40b20b
imul eax, dword [ebp - 0x14], 0x6c000000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb295b934
jmp 0x40b20b
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x3ceefc31
jmp 0x40b20b
push eax
sub esp, 0x88
mov edi, esp
mov word [edi + 0x88], 0
push 0x88
push 0x466570
push edi
call fcn.004441d0
add esp, 0xc
push 8
push 0x4665f8
push 0x44
push edi
call fcn.0040bf00
add esp, 0x10
push 0x8a
push edi
push dword [ebp - 0x2c]
call fcn.004441d0
add esp, 0xc
mov dword [ebp - 0x10], 0x1407fa64
jmp 0x40b20b
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x8c
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xf67daab0
jmp 0x40b20b
mov edi, dword [ebp - 0x18]
shr edi, 7
add edi, 0x81
mov dword [ebp - 0x18], edi
push edi
push 0x774
push 0x943
push 0x3258
call fcn.0040bde0
add esp, 0x10
push 0xdca
push 0x1b9d
push edi
push 0xc0d
call fcn.0040bde0
add esp, 0x10
mov dword [ebp - 0x10], 0x43ba46bc
jmp 0x40b20b
push 5
push 0x472c92
push 9
push dword [ebp - 0x34]
call fcn.0040bde0
add esp, 0x10
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], edx
movzx eax, word [eax + 8]
mov word [ebp - 0x5c], ax
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0xe3393deb
jmp 0x40b20b
mov eax, dword [ebp - 0x1c]
mov word [eax], 0x88
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xd53ceb75
jmp 0x40b20b
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xcaa4148a
jmp 0x40b20b
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x335a7ea9
jmp 0x40b20b
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov dword [eax + 8], 0x34
mov dword [ebp - 0x10], 0x27568899
jmp 0x40b20b
mov dword [ebp - 0x10], 0x511e79a0
jmp 0x40b20b
cmp eax, 0xd9530635
je 0x40bdb8
jmp 0x40b20b
cmp eax, 0x2adbcb0e
jne 0x40b20b
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret