Function at 0x401650
Capabilities:
Terminate process

Disassembly:
sub esp, 0x8a4
mov eax, dword [0x411008]
xor eax, esp
mov dword [esp + 0x89c], eax
cmp byte [0x412bb0], 0x34
push ebx
push ebp
push esi
push edi
jne 0x401969
cmp byte [0x412bb6], 0x39
jne 0x401969
cmp byte [0x412bb7], 0x38
jne 0x401969
mov eax, dword [0x412a64]
xor esi, esi
cmp eax, esi
je 0x401969
cmp dword [0x412bac], esi
je 0x401969
push eax
push esi
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
cmp ebx, esi
je 0x401969
push 0x400
lea eax, [esp + 0x42c]
push esi
push eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], esi
call fcn.00405e50
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
push 4
lea edx, [esp + 0x20]
push edx
push 0x438500
push ebx
call esi
mov eax, dword [esp + 0x18]
mov ecx, dword [0x412db8]
mov edi, 1
cmp eax, ecx
je 0x4018f3
lea edx, [esp + 0x20]
push edx
sub eax, ecx
push eax
lea eax, [esp + 0x430]
push eax
add ecx, 0x438504
push ecx
push ebx
call esi
mov eax, dword [esp + 0x18]
mov ecx, dword [0x412db8]
mov ebp, eax
sub ebp, ecx
shr ebp, 2
cmp eax, ecx
jbe 0x401744
mov dword [0x412db8], eax
mov dword [esp + 0x10], 0
test ebp, ebp
jle 0x4018f3
test ebp, ebp
je 0x4018e8
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + ecx*4 + 0x428]
lea eax, [esp + 0x1c]
call fcn.004014c0
test eax, eax
je 0x401984
mov esi, dword [esp + 0x1c]
cmp esi, 0xe
ja case.0x40178c.2
movzx edx, byte [esi + 0x401bcc]
jmp dword [edx*4 + 0x401bb0]
lea eax, [esp + 0x828]
push 0x40f490
push eax
call fcn.00402cb3
add esp, 8
jmp 0x4018a6
lea ecx, [esp + 0x828]
push 0x40f498
push ecx
call fcn.00402cb3
add esp, 8
jmp 0x4018a6
lea edx, [esp + 0x828]
push 0x40f4a0
push edx
call fcn.00402cb3
add esp, 8
jmp 0x4018a6
lea eax, [esp + 0x828]
push 0x40f4a4
push eax
call fcn.00402cb3
add esp, 8
jmp 0x4018a6
lea ecx, [esp + 0x828]
push 0x40f4a8
push ecx
call fcn.00402cb3
add esp, 8
jmp 0x40188a
lea edx, [esp + 0x828]
push 0x40f4ac
push edx
call fcn.00402cb3
add esp, 8
jmp 0x401867
push esi
lea eax, [esp + 0x82c]
push 0x40f4b0
push eax
call fcn.00402cb3
add esp, 0xc
cmp esi, 2
jne 0x401862
cmp dword [0x513820], 0xffffffff
je 0x4018a6
mov eax, 1
cmp dword [0x513824], eax
jne 0x4018a6
sub dword [0x513820], eax
jmp 0x4018a6
cmp esi, 0xe
jne 0x401885
cmp dword [0x412dc4], 0xffffffff
je 0x4018a6
mov eax, 1
cmp dword [0x513824], eax
jne 0x4018a6
sub dword [0x412dc4], eax
jmp 0x4018a6
cmp esi, 0xd
jne 0x4018a6
cmp dword [0x412ba8], 0xffffffff
je 0x4018a6
mov eax, 1
cmp dword [0x513824], eax
jne 0x4018a6
sub dword [0x412ba8], eax
lea eax, [esp + 0x828]
mov ecx, eax
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4018b0
mov edi, 0x4135c8
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4018c1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x10]
inc eax
and ecx, 3
cmp eax, ebp
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x10], eax
jl 0x401754
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, 1
xor eax, eax
push 0x400
push eax
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], eax
call fcn.00405e50
add esp, 0xc
lea eax, [esp + 0x24]
push eax
push 4
lea ecx, [esp + 0x1c]
push ecx
push 0x438600
push ebx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x513828]
cmp eax, ecx
je 0x401969
lea edx, [esp + 0x24]
push edx
sub eax, ecx
push eax
lea eax, [esp + 0x30]
push eax
add ecx, 0x438604
push ecx
push ebx
call esi
mov eax, dword [esp + 0x14]
mov ecx, dword [0x513828]
mov ebp, eax
sub ebp, ecx
shr ebp, 2
cmp eax, ecx
jbe 0x401963
mov dword [0x513828], eax
xor ebx, ebx
test ebp, ebp
jg 0x4019e5
mov ecx, dword [esp + 0x8ac]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.00402ca4
add esp, 0x8a4
ret
push 0
push 0x40f4e4
push 0x40f518
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x412a64]
test eax, eax
jne 0x4019b9
mov edi, 0x412a64
call fcn.00401db0
cmp eax, 1
jne 0x4019d4
mov ecx, dword [0x412a64]
push ecx
jmp 0x4019ba
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x4019d4
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00403959
jmp 0x4019e0
mov edi, 1
test ebp, ebp
je 0x401969
mov ecx, dword [esp + ebx*4 + 0x28]
lea eax, [esp + 0x1c]
call fcn.004014c0
test eax, eax
je 0x401b5b
mov esi, dword [esp + 0x1c]
cmp esi, 0xe
ja case.0x401a12.2
movzx ecx, byte [esi + 0x401bf8]
jmp dword [ecx*4 + 0x401bdc]
lea edx, [esp + 0x828]
push 0x40f490
push edx
call fcn.00402cb3
add esp, 8
jmp 0x401b1d
lea eax, [esp + 0x828]
push 0x40f498
push eax
call fcn.00402cb3
add esp, 8
jmp 0x401b1d
lea ecx, [esp + 0x828]
push 0x40f4a0
push ecx
call fcn.00402cb3
add esp, 8
jmp 0x401b1d
lea edx, [esp + 0x828]
push 0x40f4a4
push edx
call fcn.00402cb3
add esp, 8
jmp 0x401b1d
lea eax, [esp + 0x828]
push 0x40f4a8
push eax
call fcn.00402cb3
add esp, 8
jmp 0x401b06
lea ecx, [esp + 0x828]
push 0x40f4ac
push ecx
call fcn.00402cb3
add esp, 8
jmp 0x401ae8
push esi
lea edx, [esp + 0x82c]
push 0x40f4b0
push edx
call fcn.00402cb3
add esp, 0xc
cmp esi, 2
jne 0x401ae3
cmp dword [0x513820], 0xffffffff
je 0x401b1d
cmp dword [0x513824], edi
jne 0x401b1d
sub dword [0x513820], edi
jmp 0x401b1d
cmp esi, 0xe
jne 0x401b01
cmp dword [0x412dc4], 0xffffffff
je 0x401b1d
cmp dword [0x513824], edi
jne 0x401b1d
sub dword [0x412dc4], edi
jmp 0x401b1d
cmp esi, 0xd
jne 0x401b1d
cmp dword [0x412ba8], 0xffffffff
je 0x401b1d
cmp dword [0x513824], edi
jne 0x401b1d
sub dword [0x412ba8], edi
lea eax, [esp + 0x828]
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x401b26
mov edi, 0x412aa8
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x401b37
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
inc ebx
cmp ebx, ebp
rep movsb byte es:[edi], byte [esi]
jl 0x4019e0
jmp 0x401969
push 0
push 0x40f4e4
push 0x40f518
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [0x412a64]
test eax, eax
jne 0x401b8c
mov edi, 0x412a64
call fcn.00401db0
cmp eax, 1
jne 0x401ba7
mov eax, dword [0x412a64]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x401ba7
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00403959
mov edi, edi
xchg ebx, eax
pop ss
inc eax
add byte [ebp - 0x38ffbfe9], ch
pop ss
inc eax
add cl, ah
pop ss
inc eax
add bl, bh
pop ss
inc eax
add byte [edx], dl
sbb byte [eax], al
sub dword [eax], ebx
inc eax
add byte [eax], al
add dword [esi], eax
push es
push es
push es
push es
push es
push es
push es
push es
add al, byte [ebx]
add al, 5
nop
sbb dword [edx], ebx
inc eax
add byte [ebx], dh
sbb al, byte [eax]
dec ebp
sbb al, byte [eax]
sbb al, byte [bx + si]
sbb dword [edx], 446169152
inc eax
add byte [edi + 0x401a], ch
add dword [esi], eax
push es
push es
push es
push es
push es
push es
push es
push es
add al, byte [ebx]
add al, 5
int3