Function at 0x407b1a
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x3c
mov dword [ebp - 0x10], 0x479c2f19
mov ebx, dword [ebp - 0x38]
mov si, 0x88
mov di, 0xe
mov eax, dword [ebp - 0x10]
cmp eax, 0xff54a668
jle 0x407b90
cmp eax, 0x4a65686b
jle 0x407bf0
cmp eax, 0x7329b514
jg 0x407c97
cmp eax, 0x68e30b67
jg 0x407d92
cmp eax, 0x4a65686c
je 0x407ed7
cmp eax, 0x5e2bb1ef
jne 0x408196
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0x9a4cbdfb
jmp 0x407b35
cmp eax, 0xb6414969
jle 0x407c3a
cmp eax, 0xe89a26c2
jg 0x407cf3
cmp eax, 0xd5a3cfe8
jg 0x407db4
cmp eax, 0xb641496a
je 0x407ef4
cmp eax, 0xc093ec90
jne 0x407b35
add ebx, 0xf2
call fcn.00407b1a
call fcn.00407b1a
mov eax, 0x78dde1e2
cmp ebx, 0x120
jb 0x407be9
mov eax, 0xd5a3cfe9
shr ebx, 1
jmp 0x408181
cmp eax, 0x1f92b7a0
jle 0x407d20
cmp eax, 0x4222e7de
jg 0x407dd6
cmp eax, 0x1f92b7a1
je 0x407f2f
cmp eax, 0x2fe8a95f
jne 0x407b35
shr ebx, 0x15
movzx eax, bl
imul ebx, eax, 0xb1
add ebx, 0xae3c
mov dword [ebp - 0x10], 0x78dde1e2
jmp 0x407b35
cmp eax, 0x9a4cbdfa
jle 0x407d65
cmp eax, 0xae855735
jg 0x407e0f
cmp eax, 0x9a4cbdfb
je 0x407f62
cmp eax, 0xa7806c70
jne 0x407b35
imul ecx, dword [ebp - 0x14], 0x61
add ecx, 0x4c
imul eax, ecx, 0x6a28
imul ecx, ecx
imul edx, ecx, 0x494b
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x2fe8a95f
cmp edx, ecx
je 0x408181
mov eax, 0xd5ebcc3b
jmp 0x408181
cmp eax, 0x7bb9a473
jg 0x407e34
cmp eax, 0x7329b515
je 0x407f9a
cmp eax, 0x78dde1e2
jne 0x407b35
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x18], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xa7806c70
jmp 0x407b35
cmp eax, 0xef7afdaf
jg 0x407e65
cmp eax, 0xe89a26c3
je 0x407fc0
cmp eax, 0xea07774e
jne 0x407b35
mov dword [ebp - 0x10], 0x83cb686d
jmp 0x407b35
cmp eax, 0x15dcb523
jg 0x407eae
cmp eax, 0xff54a669
je 0x407fdc
cmp eax, 0xd1edb13
jne 0x407b35
shl ebx, 0xc
add ebx, 0x19000
mov eax, 0x8b41b76d
cmp ebx, 0xf4
jge 0x408181
mov eax, 0xff54a669
jmp 0x408181
cmp eax, 0x83cb686d
je 0x407fee
cmp eax, 0x8b41b76d
je 0x40803e
cmp eax, 0x946f13c8
jne 0x407b35
mov dword [ebp - 0x10], 0x7ef4b7ec
jmp 0x407b35
cmp eax, 0x68e30b68
je 0x40806c
cmp eax, 0x712f0c57
jne 0x407b35
mov dword [ebp - 0x10], 0xb641496a
jmp 0x407b35
cmp eax, 0xd5a3cfe9
je 0x4080a7
cmp eax, 0xd5ebcc3b
jne 0x407b35
mov dword [ebp - 0x10], 0x8b41b76d
jmp 0x407b35
cmp eax, 0x4222e7df
je 0x4080c8
cmp eax, 0x479c2f19
jne 0x407b35
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0x78dde1e2
jmp 0x407b35
cmp eax, 0xae855736
je 0x4080e8
cmp eax, 0xb17f3e1d
jne 0x407b35
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xfaab98b7
jmp 0x407b35
cmp eax, 0x7bb9a474
je 0x40811f
cmp eax, 0x7ef4b7ec
jne 0x407b35
mov ecx, dword [ebp - 0x48]
mov eax, 0x15dcb524
cmp ecx, 8
je 0x408181
mov eax, 0xef7afdb0
jmp 0x408181
cmp eax, 0xef7afdb0
je 0x40814a
cmp eax, 0xfaab98b7
jne 0x407b35
push 0x11
push str.ZwRaiseHardError
push dword [ebp - 0x28]
call fcn.004321d0
add esp, 0xc
push dword [ebp - 0x28]
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0xea07774e
jmp 0x407b35
cmp eax, 0x1c6fec69
jne 0x408189
imul eax, dword [ebp - 0x14], 0x2f70
shr eax, 5
add eax, 0xffffff21
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xff54a669
jmp 0x407b35
mov eax, dword [ebp - 0x14]
shl eax, 0xd
add eax, 0xffffff30
shr eax, 9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x712f0c57
jmp 0x407b35
mov eax, dword [ebp - 0x18]
mov word [eax], si
mov eax, dword [ebp - 0x18]
mov word [eax + 2], si
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
mov word [eax], di
mov eax, dword [ebp - 0x1c]
mov word [eax + 2], di
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1c6fec69
jmp 0x407b35
mov eax, dword [ebp - 0x14]
add eax, 0xffffffe6
imul ecx, eax, 0xe1
imul eax, eax
imul edx, eax, 0x7663
dec edx
add ecx, 0xffffffe3
mov dword [ebp - 0x14], ecx
mov ecx, 0x8b41b76d
cmp edx, eax
je 0x40809f
mov ecx, 0xb17f3e1d
jmp 0x40809f
mov eax, dword [ebp - 0x14]
add eax, 0xffffffb9
mov ecx, eax
imul ecx, eax
shr eax, 0xa
and eax, 0xfffffffe
imul edx, ecx, 0x32a3
dec edx
imul eax, eax, 0x3ea
mov dword [ebp - 0x14], eax
mov eax, 0x78dde1e2
cmp edx, ecx
je 0x408181
mov eax, 0xae855736
jmp 0x408181
shr ebx, 9
and ebx, 0xffffffc0
call fcn.0040725c
mov eax, 0x7bb9a474
cmp ebx, 0xf7
jae 0x408181
mov eax, 0x4222e7df
jmp 0x408181
imul ebx, ebx, 0x1a0fe0
call fcn.0040725c
call fcn.00407b1a
mov dword [ebp - 0x10], 0x78dde1e2
jmp 0x407b35
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x5e2bb1ef
jmp 0x407b35
push 0x8a
push str.Do_you_want_to_run_a_malware___n_Crypt_build_to_disable_this_message_
push dword [ebp - 0x30]
call fcn.004321d0
add esp, 0xc
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x45275e]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x45275a]
mov dword [eax + 8], ecx
mov ecx, dword [0x452756]
mov dword [eax + 4], ecx
mov ecx, dword [str.Warning]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x4a65686c
jmp 0x407b35
mov eax, dword [ebp - 0x24]
mov word [eax + 8], 0x6c
mov dword [eax + 4], 0x6c642e6c
mov dword [eax], 0x6c64746e
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x1f92b7a1
jmp 0x407b35
mov eax, dword [ebp - 0x14]
mov ecx, 0x3fffff09
add eax, ecx
and eax, 0x3fffffff
imul ecx, eax, 0x65
imul eax, eax
imul edx, eax, 0x5df5
add ecx, 0xffffefd3
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xd1edb13
cmp eax, edx
je 0x40809f
mov ecx, 0x946f13c8
mov dword [ebp - 0x10], ecx
jmp 0x407b35
add ebx, 0xfffffe45
shr ebx, 8
imul ebx, ebx, 0xec
add ebx, 0x3cd8
mov dword [ebp - 0x10], 0x78dde1e2
jmp 0x407b35
add ebx, 0xfffffff6
call fcn.00407b1a
mov eax, 0x8b41b76d
cmp ebx, 0x45
jge 0x408181
mov eax, 0x83cb686d
jmp 0x408181
mov eax, dword [ebp - 0x20]
mov dword [eax + 8], 0x34
mov eax, dword [ebp - 0x40]
push dword [ebp - 0x2c]
push 0
push dword [ebp - 0x20]
mov ecx, 3
push ecx
push ecx
push 0x50000018
call eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x68e30b68
jmp 0x407b35
shr ebx, 9
add ebx, 0x81
shr ebx, 0xf
imul ebx, ebx, 0x167a
call fcn.0040725c
mov eax, 0xe89a26c3
cmp ebx, 0xc5
jae 0x408181
mov eax, 0xfaab98b7
jmp 0x408181
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff11
add eax, ecx
shr eax, 0xe
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x8667
dec edx
shl eax, 0xb
add eax, 0x43800
and eax, 0x3ffff000
mov dword [ebp - 0x14], eax
mov eax, 0xb641496a
cmp edx, ecx
je 0x408181
mov eax, 0x5d69b17c
mov dword [ebp - 0x10], eax
jmp 0x407b35
cmp eax, 0x15dcb524
jne 0x407b35
jmp 0x4081ac
cmp eax, 0x5d69b17c
jne 0x407b35
mov dword [ebp - 0x38], ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret