Function at 0x40bf63
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x6c
mov dword [ebp - 0x10], 0xd84d8ba6
mov esi, dword [ebp - 0x3c]
mov edi, 3
mov eax, dword [ebp - 0x10]
cmp eax, 0xaa4805
jg 0x40bfd5
cmp eax, 0xbe5659ca
jle 0x40c098
cmp eax, 0xcb21ae9b
jle 0x40c0fb
cmp eax, 0xee355f58
jle 0x40c21c
cmp eax, 0xfc5c6eb6
jg 0x40c42d
cmp eax, 0xee355f59
je 0x40c4cc
cmp eax, 0xf3075e53
jne 0x40bf7b
imul esi, esi, 0xc50
add esi, 0x17
mov dword [ebp - 0x10], 0xc049a164
jmp 0x40bf7b
cmp eax, 0x27e595f8
jg 0x40c02c
cmp eax, 0x1185242c
jle 0x40c140
cmp eax, 0x198ecc9e
jg 0x40c262
cmp eax, 0x15aeb713
jle 0x40c466
cmp eax, 0x15aeb714
je 0x40c50a
cmp eax, 0x17b292b1
jne 0x40bf7b
mov eax, dword [ebp - 0x34]
mov ecx, 0x88
add eax, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xb4122fa0
jmp 0x40bf7b
cmp eax, 0x4ad13175
jle 0x40c181
cmp eax, 0x6b470ec2
jle 0x40c2a0
cmp eax, 0x7983cfab
jg 0x40c4ad
cmp eax, 0x6b470ec3
je 0x40c575
cmp eax, 0x76530f7b
jne 0x40bf7b
mov eax, dword [ebp - 0x14]
shr eax, 4
add eax, 0xffffffe3
mov ecx, eax
imul ecx, eax
shr eax, 0xf
imul edx, ecx, 0x5fe1
dec edx
add eax, 0xffffffea
mov dword [ebp - 0x14], eax
mov eax, 0x89a0c743
cmp ecx, edx
je 0x40c910
mov eax, 0x17b292b1
jmp 0x40c910
cmp eax, 0x9e8b0306
jg 0x40c1b9
cmp eax, 0x8b644bae
jg 0x40c2fb
cmp eax, 0x802ad5a3
je 0x40c586
cmp eax, 0x82a9b641
je 0x40c592
cmp eax, 0x89a0c743
jne 0x40bf7b
imul esi, esi, 0xe300
shr esi, 8
and esi, 0xfffffffe
add esi, 0xffffff9a
call fcn.0040bf63
mov eax, 0xbd25ec15
cmp esi, 0x76
jae 0x40c910
mov eax, 0x15aeb714
jmp 0x40c910
cmp eax, 0xc477d7be
jg 0x40c349
cmp eax, 0xbe5659cb
je 0x40c5a1
cmp eax, 0xc049a164
je 0x40c5bc
cmp eax, 0xc3a9cb58
jne 0x40bf7b
shl esi, 4
or esi, 0xa
mov eax, 0x27e595f9
cmp esi, 0x1c
jae 0x40c824
jmp 0x40c910
cmp eax, 0xeffc43d
jg 0x40c37f
cmp eax, 0xaa4806
je 0x40c5f8
cmp eax, 0x21397d3
je 0x40c611
cmp eax, 0x7e19442
jne 0x40bf7b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0x5d07fa1d
jmp 0x40bf7b
cmp eax, 0x3c1bbca0
jg 0x40c3b8
cmp eax, 0x27e595f9
je 0x40c640
cmp eax, 0x2a390ed0
je 0x40c69f
cmp eax, 0x2a72de9c
jne 0x40bf7b
mov dword [ebp - 0x10], 0x27e595f9
jmp 0x40bf7b
cmp eax, 0xb4122f9f
jg 0x40c3f3
cmp eax, 0x9e8b0307
je 0x40c6b4
cmp eax, 0xa26bf1ca
je 0x40c6e8
cmp eax, 0xa80953d8
jne 0x40bf7b
mov eax, dword [ebp - 0x14]
add eax, 0x6c
mov ecx, eax
shr ecx, 3
imul ecx, ecx
shr eax, 4
imul edx, ecx, 0x23c9
dec edx
add eax, 0xeb
mov dword [ebp - 0x14], eax
mov eax, 0x17b292b1
cmp ecx, edx
je 0x40c910
mov eax, 0x198ecc9f
jmp 0x40c910
cmp eax, 0xcb21ae9c
je 0x40c70c
cmp eax, 0xce3864f7
je 0x40c749
cmp eax, 0xd84d8ba6
jne 0x40bf7b
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x8c
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0x99b67fbc
jmp 0x40bf7b
cmp eax, 0x198ecc9f
je 0x40c75d
cmp eax, 0x20f1a2f2
je 0x40c771
cmp eax, 0x244fd0dd
jne 0x40bf7b
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
add eax, 8
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x2a390ed0
jmp 0x40bf7b
cmp eax, 0x4ad13176
je 0x40c78d
cmp eax, 0x5ac41d5c
je 0x40c7bc
cmp eax, 0x5d07fa1d
jne 0x40bf7b
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff3e
add eax, ecx
shr eax, 9
imul ecx, eax, 0xe80
imul eax, eax
imul edx, eax, 0x3607
dec edx
shr ecx, 9
mov dword [ebp - 0x14], ecx
mov ecx, 0xf3075e53
cmp eax, edx
je 0x40c8b5
mov ecx, 0xce3864f7
jmp 0x40c8b5
cmp eax, 0x8b644baf
je 0x40c7d1
cmp eax, 0x915d7d23
je 0x40c810
cmp eax, 0x99b67fbc
jne 0x40bf7b
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0xf3]
imul ecx, ecx
imul edx, ecx, 0x2a2d
dec edx
add eax, 0x142
mov dword [ebp - 0x14], eax
mov eax, 0xd84d8ba6
cmp edx, ecx
jne 0x40c90b
jmp 0x40c910
cmp eax, 0xc477d7bf
je 0x40c82e
cmp eax, 0xca5ed588
je 0x40c84c
cmp eax, 0xcb0f2970
jne 0x40bf7b
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xbe5659cb
jmp 0x40bf7b
cmp eax, 0xeffc43e
je 0x40c85b
cmp eax, 0x107f597c
je 0x40c86a
cmp eax, 0x10c0eff8
jne 0x40bf7b
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x76530f7b
jmp 0x40bf7b
cmp eax, 0x3c1bbca1
je 0x40c882
cmp eax, 0x3e942282
je 0x40c8bd
cmp eax, 0x46bb92a1
jne 0x40bf7b
mov eax, dword [ebp - 0x14]
shl eax, 4
and eax, 0xffffe000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xeffc43e
jmp 0x40bf7b
cmp eax, 0xb4122fa0
je 0x40c8cc
cmp eax, 0xbd25ec15
je 0x40c8f5
cmp eax, 0xbdef6eaf
jne 0x40bf7b
mov eax, dword [ebp - 0x14]
lea eax, [eax*4 + 0x1d]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x7e19442
jmp 0x40bf7b
cmp eax, 0xfc5c6eb7
je 0x40c918
cmp eax, 0xfceca297
jne 0x40bf7b
push eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x2a72de9c
jmp 0x40bf7b
cmp eax, 0x14912e0f
jne 0x40c93b
imul eax, dword [ebp - 0x14], 0x8f43
add eax, 0x5e
imul ecx, eax, 0xbd
imul eax, eax
shr ecx, 1
imul edx, eax, 0x571d
dec edx
add ecx, 0xffffffe6
shr ecx, 0xc
mov dword [ebp - 0x14], ecx
mov ecx, 0xee355f59
cmp edx, eax
je 0x40c8b5
mov ecx, 0x244fd0dd
jmp 0x40c8b5
cmp eax, 0x7983cfac
jne 0x40c947
mov eax, dword [ebp - 0x18]
mov word [eax], 0x88
mov dword [ebp - 0x10], 0x5ac41d5c
jmp 0x40bf7b
push 4
push 0x471688
push 0x44
push dword [ebp - 0x34]
call fcn.0040cab0
add esp, 0x10
push 0x8a
push dword [ebp - 0x34]
push dword [ebp - 0x28]
call fcn.0044cd70
add esp, 0xc
mov eax, dword [ebp - 0x2c]
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xcb21ae9c
jmp 0x40bf7b
mov eax, dword [ebp - 0x30]
mov byte [eax + 0x10], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x47ec1d]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x47ec19]
mov dword [eax + 8], ecx
mov ecx, dword [0x47ec15]
mov dword [eax + 4], ecx
mov ecx, dword [0x47ec11]
mov dword [eax], ecx
push 7
push 0x47ec21
push 0x10
push dword [ebp - 0x30]
call fcn.0040c980
add esp, 0x10
push 0x11
push dword [ebp - 0x30]
lea ebx, [ebp - 0x75]
push ebx
call fcn.0044cd70
add esp, 0xc
push ebx
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x3c1bbca1
jmp 0x40bf7b
mov dword [ebp - 0x10], 0xb4122fa0
mov esi, 0xffffb7e6
jmp 0x40bf7b
mov dword [ebp - 0x10], 0xcb0f2970
jmp 0x40bf7b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x7983cfac
jmp 0x40bf7b
imul eax, dword [ebp - 0x14], 0x6e000
add eax, 0xffffff6e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x15aeb714
jmp 0x40bf7b
imul esi, esi, 0x13c
and esi, 0xfffffff0
push esi
push 0x2f0b
push 0x4388
push 0x904
call fcn.0040c980
add esp, 0x10
mov eax, 0x27e595f9
cmp esi, 0xc2
jae 0x40c910
mov eax, 0x20f1a2f2
jmp 0x40c910
mov eax, dword [ebp - 0x14]
add eax, eax
and eax, 0xffffc000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x1185242d
jmp 0x40bf7b
mov eax, dword [ebp - 0x14]
mov ecx, eax
shr ecx, 5
imul ecx, ecx
imul edx, ecx, 0x19a1
shr eax, 6
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xb4122fa0
cmp edx, ecx
je 0x40c910
mov eax, 0xc477d7bf
jmp 0x40c910
push eax
sub esp, 8
mov ebx, esp
mov byte [ebx + 9], 0
mov al, byte [0x47ec09]
mov byte [ebx + 8], al
mov eax, dword [0x47ec05]
mov dword [ebx + 4], eax
mov eax, dword [0x47ec01]
mov dword [ebx], eax
push 7
push 0x47ec0a
push 9
push ebx
call fcn.0040c980
add esp, 0x10
movzx eax, word [ebx + 8]
mov word [ebp - 0x5c], ax
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x802ad5a3
jmp 0x40bf7b
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x34
mov dword [ebp - 0x10], 0x4ad13176
jmp 0x40bf7b
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff30
add ecx, eax
imul eax, ecx, 0x69b8
imul ecx, ecx
imul edx, ecx, 0x6be7
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x915d7d23
cmp ecx, edx
je 0x40c910
mov eax, 0x82a9b641
jmp 0x40c910
imul esi, esi, 0xb424
add esi, 0xf3b5b0
call fcn.0040b720
mov eax, 0xfceca297
cmp esi, 0x1d
jb 0x40c824
jmp 0x40c910
mov eax, dword [ebp - 0x38]
mov word [eax + 0xe], 0
mov eax, dword [ebp - 0x38]
movzx ecx, word [0x47169c]
mov word [eax + 0xc], cx
mov ecx, dword [0x471698]
mov dword [eax + 8], ecx
mov ecx, dword [0x471694]
mov dword [eax + 4], ecx
mov ecx, dword [0x471690]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x8b644baf
jmp 0x40bf7b
mov eax, dword [ebp - 0x1c]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0x21397d3
jmp 0x40bf7b
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0x46bb92a1
jmp 0x40bf7b
add esi, 0xfffffec5
shr esi, 0x17
mov eax, 0xcb21ae9c
cmp esi, 0x60
jne 0x40c90b
jmp 0x40c910
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x24]
push 0
push dword [ebp - 0x20]
push edi
push edi
push 0x50000018
call eax
mov eax, dword [ebp - 0x24]
cmp dword [eax], 8
mov eax, 0xaa4806
je 0x40c910
mov eax, 0x7fc78f69
jmp 0x40c910
mov eax, dword [ebp - 0x18]
mov word [eax + 2], 0x88
mov dword [ebp - 0x10], 0xbdef6eaf
jmp 0x40bf7b
push 4
push 0x47169e
push 7
push dword [ebp - 0x38]
call fcn.0040cab0
add esp, 0x10
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], 0x9e8b0307
jmp 0x40bf7b
shr esi, 0xc
add esi, 0x65
mov eax, 0xfceca297
cmp esi, 0x6e
je 0x40c910
mov eax, 0xd84d8ba6
jmp 0x40c910
mov eax, dword [ebp - 0x1c]
mov word [eax + 2], 0xe
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xa80953d8
jmp 0x40bf7b
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x10c0eff8
jmp 0x40bf7b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xfc5c6eb7
jmp 0x40bf7b
and esi, 0xfffffff0
shl esi, 4
add esi, 0x15c
mov dword [ebp - 0x10], 0xb4122fa0
jmp 0x40bf7b
mov ecx, dword [ebp - 0x14]
shr ecx, 2
imul eax, ecx, 0x63
add eax, 0x3b
imul eax, eax
imul edx, eax, 0x53a3
dec edx
imul ecx, ecx, 0x17fa0000
add ecx, 0xdbac0000
mov dword [ebp - 0x14], ecx
mov ecx, 0x15aeb714
cmp eax, edx
je 0x40c8b5
mov ecx, 0x3e942282
mov dword [ebp - 0x10], ecx
jmp 0x40bf7b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xca5ed588
jmp 0x40bf7b
mov eax, dword [ebp - 0x48]
mov word [eax], 0
push 0x88
push 0x471600
push dword [ebp - 0x34]
call fcn.0044cd70
add esp, 0xc
mov dword [ebp - 0x10], 0xee355f59
jmp 0x40bf7b
shr esi, 0xd
add esi, 0xffffff73
mov eax, 0xa26bf1ca
cmp esi, 0xfa
jae 0x40c910
mov eax, 0xfceca297
mov dword [ebp - 0x10], eax
jmp 0x40bf7b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x14912e0f
jmp 0x40bf7b
cmp eax, 0x1185242d
je 0x40c95d
jmp 0x40bf7b
cmp eax, 0x7fc78f69
jne 0x40bf7b
mov dword [ebp - 0x3c], esi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret