Function at 0x40de60
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5889c6
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push esi
push edi
mov eax, dword [0x5f3004]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x10], 0
mov ecx, 0x5fcaf0
call fcn.00412280
test eax, eax
jne 0x40deb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00416950
ucomisd xmm0, qword [0x5d05b8]
lahf
test ah, 0x44
jnp 0x40e02a
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call edi
cmp eax, 4
je 0x40e0b9
call edi
push eax
push 0
push OleCreateMenuDescriptor
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], 0xffffffff
je 0x40e000
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00404e80
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], 0
test eax, eax
je 0x40df38
push eax
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x5c]
call dword [eax + 0xc]
push str.6698FFFF8F1A8CF2F9D58103490A1C4A2EAAF2CAC28662F3FE0E3FCE05539A71494932A64F7D6A96F4CCF0F11AABE9586423E90FC093E07BE5CAD8C26762CE704038DC6C2309A8837A696388BB1D71368AC16B63C2917C7CF2774AD5E67B2D0044880439AE0DEC1AD586E0BC1073FE4487B2D9531431721FBFBEB2BCFE45E4DC32DCE16AEFEDB279
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
call fcn.00413c20
push ecx
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x30]
call fcn.0040d3c0
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004042f0
mov edx, 0x14
lea ecx, [ebp - 0x30]
call fcn.004022d0
mov ecx, 1
mov esi, eax
mov dword [ebp - 0x10], ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00404df0
cmp esi, 1
jne 0x40e0b9
push 0x5cca7c
lea ecx, [ebp - 0x6c]
call fcn.00403ee0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
push eax
call fcn.00413230
mov edx, eax
mov byte [ebp - 4], 3
call fcn.00403970
mov ecx, eax
call fcn.00408150
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.00404df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00403bf0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call edi
test eax, eax
jne 0x40e008
call edi
push eax
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40e0b9
lea ecx, [ebp - 0x40]
call fcn.00404e80
mov dword [ebp - 4], 4
mov dword [ebp - 0x40], vtable.CWConstString.0
mov dword [ebp - 0x34], 0x5cea58
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00404e80
mov byte [ebp - 4], 6
mov dword [ebp - 0x6c], vtable.CWConstString.0
mov dword [ebp - 0x60], str.error_system_time
mov byte [ebp - 4], 7
mov ecx, 0x5cca7c
mov edx, dword [ebp - 0x34]
test edx, edx
jne 0x40e082
cmp dword [ebp - 0x1c], 0
mov edx, ecx
cmovne edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x40e092
cmp dword [ebp - 0x48], eax
cmovne ecx, dword [ebp - 0x50]
mov eax, ecx
push 0
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.004042f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004042f0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret