Function at 0x409150
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451768
mov eax, dword fs:[0]
push eax
sub esp, 0xc
mov eax, dword [0x46e560]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push ecx
push 0
push 0x43a
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
jne 0x409229
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call fcn.00414dfd
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4091b7
push 0x80004005
call fcn.00402a40
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
push esi
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 0
push 0x461590
push eax
call fcn.00402960
mov esi, dword [ebp - 0x14]
add esp, 0xc
push 0x34
push 0x4615e0
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x409530
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x409229
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00439904
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.53_56_8B_71_64_52_8B_C8
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409279
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0x16
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474ab0], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.53_56_8B_71_64_52_8B_C8
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4092c3
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474aac], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_11_83_F8_01_0F_94_C0_50_8B_46_50_50_8B_46_48_50
push ecx
push 0x600000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x40930d
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474aa8], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_03_8B_16_8B_CE_89_45_D8_FF_52_60
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409357
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474aa4], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.03_C1_8B_4F_38_83_3C_88_00
push ecx
push 0x600000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x40938b
add eax, 0x12
mov dword [0x474aa0], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.FF_40_14_6A_05
push ecx
push 0x600000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4093d5
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x1f
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a9c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_11_FF_52_3C_8B_00_53_50
push ecx
push 0x600000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x40941f
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a98], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_56_08_8B_01_52_FF_90_80_00_00_00
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409469
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a94], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_16_8B_CE_FF_52_64_83_F8_02
push ecx
push 0x600000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4094b3
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xe
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a90], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C7_45_E8_00_00_00_00_C7_45_EC_00_00_00_00_8B_06_8B_CE
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4094fd
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x42
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a8c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C7_45_E8_00_00_00_00_C7_45_EC_00_00_00_00_8B_06_8B_CE
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
jne 0x40955a
mov eax, dword [ebp - 0x14]
jmp 0x40957b
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x409e33
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x409e33
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push 0
push 4
push eax
add esi, 0x4f
mov dword [ebp - 0x18], 0
push esi
push edi
call ebx
mov eax, dword [ebp - 0x18]
add eax, 4
add eax, esi
mov dword [0x474a88], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C7_45_E8_00_00_00_00_C7_45_EC_00_00_00_00_8B_06_8B_CE
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4095c5
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a84], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C7_46_2C_00_00_80_BF
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x40960f
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0x27
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a80], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.88_45_F0_C7_45_E8_FF_FF_FF_FF_C7_45_EC_FF_FF_FF_FF
push ecx
push 0x500000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409659
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a7c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_41_30_8D_4D_98_89_46_60_66_C7_46_08_FF_FF_C6_45_FC_00
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4096a3
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x16
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a78], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.89_5D_D0_C7_45_D4_FF_FF_FF_FF_88_5D_C8_89_5D_CC_C7_45_D8_01_00_00_00
push ecx
push 0x550000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4096ed
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a74], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.88_5E_10_89_5E_14_88_5E_18
push ecx
push 0x700000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409737
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0xb
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a70], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.89_45_08_DB_45_08_8B_16_83_EC_08_DD_1C_24_52
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
jne 0x40976a
mov eax, dword [ebp - 0x14]
jmp 0x40978b
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push 0
push 4
push eax
sub esi, 0x2d
mov dword [ebp - 0x18], 0
push esi
push edi
call ebx
mov eax, dword [ebp - 0x18]
add eax, 4
add eax, esi
mov dword [0x474a6c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.83_C3_26_48
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4097d5
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x44
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a68], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_D8_85_DB_89_5D_B0
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
jne 0x409808
mov eax, dword [ebp - 0x14]
jmp 0x409829
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push 0
push 4
push eax
sub esi, 4
mov dword [ebp - 0x18], 0
push esi
push edi
call ebx
mov eax, dword [ebp - 0x18]
add eax, 4
add eax, esi
mov dword [0x474a64], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_D8_85_DB_89_5D_B0
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
jne 0x40985c
mov eax, dword [ebp - 0x14]
jmp 0x40987d
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push 0
push 4
push eax
add esi, 0x5b
mov dword [ebp - 0x18], 0
push esi
push edi
call ebx
mov eax, dword [ebp - 0x18]
add eax, 4
add eax, esi
mov dword [0x474a60], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.83_C4_0C_B8_01_00_00_00_5E_8B_E5_5D_C3
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4098c7
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0x31
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a5c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.89_45_F0_8B_16_8B_CE_89_45_FC_FF_52_40
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409911
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 4
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a58], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.56_8B_30_6A_00_81_C1_BC_00_00_00
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x40995b
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 8
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a54], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C6_45_FC_BB_C7_05_________B6_01_00_00
push ecx
push 0x800000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4099a5
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a50], eax
test eax, eax
jne 0x4099f4
mov dword [ebp - 0x14], eax
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C6_45_FC_BC_C7_05_________B6_01_00_00
push ecx
push 0x800000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x4099ef
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a50], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.88_5D_FC_C7_05_________FB_01_00_00
push ecx
push 0x800000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409a39
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a4c], eax
test eax, eax
jne 0x409a88
mov dword [ebp - 0x14], eax
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C6_45_FC_02_C7_05_________FB_01_00_00
push ecx
push 0x800000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409a83
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a4c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C6_45_FC_A6_C7_05_________9F_01_00_00
push ecx
push 0x800000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409acd
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a44], eax
test eax, eax
jne 0x409b1c
mov dword [ebp - 0x14], eax
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C6_45_FC_A7_C7_05_________9F_01_00_00
push ecx
push 0x800000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409b17
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a44], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C6_45_FC_02_C7_05_________05_00_00_00
push ecx
push 0x600000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409b61
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xf
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a48], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.C2_04_00_8B_5B_04_8D_55_08_52_8D_45_F0_50_8D_8B
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409bab
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x1e
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a40], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.85_C0_____8B_8E_________8B_01_FF_50_30
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409bf5
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 6
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a3c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.55_8B_EC_8B_45_08_85_C0_7C_17_83_F8_0A
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409c3f
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x11
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a38], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.55_8B_EC_8B_45_08_85_C0_7C_17_83_F8_0A
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409c89
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 0x17
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a34], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.83_F8_64_____8B_89_________8D_04_81_8B_00_5D
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409cd3
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
add eax, 7
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a30], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.FF_53_40_8B_4D_FC_8B_81_________03_C7_C7_00_00_00_00_00_83_C7_04_83_FF_28
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409d1d
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0x1e
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a2c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.03_C6_C7_00_00_00_00_00_83_C6_04_81_FE_80_01_00_00
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409d67
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0x44
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x474a28], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.8B_4F_04_DB_04_01_83_C4_08
push ecx
push 0x700000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409d9b
add eax, 3
mov dword [0x474a24], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.46_83_FE_02_C7_05_________00_00_00_00
push ecx
push 0x400000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409de5
push 0
push 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push ecx
sub eax, 0xb
push eax
push edi
call ebx
mov eax, dword [ebp - 0x18]
mov dword [0x47491c], eax
mov dword [ebp - 0x14], 0
call fcn.00439904
lea eax, [ebp - 0x14]
push eax
push str.81_7D_08_85_00_00_00_C6_45_FC_01
push ecx
push 0x700000
mov ecx, edi
call fcn.00408b80
add esp, 0x10
test al, al
mov eax, dword [ebp - 0x14]
je 0x409e19
add eax, 0xd
mov dword [0x474814], eax
test edi, edi
je 0x409e29
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x474ab4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004387e7
mov esp, ebp
pop ebp
ret