Function at 0x461630
Capabilities:
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc7c
mov eax, dword [0x66f040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, edx
push edi
mov edi, ecx
cmp ebx, 1
jl 0x4622f3
cmp byte [0x6802ee], 0
je 0x4616f8
mov ecx, dword [0x680384]
call fcn.004940f0
movzx esi, byte [eax + 5]
movzx ecx, byte [eax + 4]
shl esi, 8
or esi, ecx
movzx ecx, byte [eax + 3]
movzx eax, byte [eax + 2]
shl esi, 8
or esi, ecx
shl esi, 8
or esi, eax
lea eax, [ebp - 0xc58]
xor esi, dword [edi]
push eax
rol esi, 3
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xc58]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
add ecx, 0x2ac18000
push 0
push 0x989680
adc eax, 0xfe624e21
push eax
push ecx
call fcn.005d3040
sub eax, esi
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x1f4
jle 0x4616f0
call fcn.00463020
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
add edi, 4
jmp 0x461789
mov al, byte [edi + 3]
lea ecx, [edi + 4]
xor al, byte [edi + 2]
xor al, byte [edi + 1]
xor al, byte [ecx]
xor al, byte [edi]
movzx esi, byte [edi + 0xa]
mov byte [ecx], al
movzx eax, byte [edi + 9]
shl esi, 8
or esi, eax
mov dword [ebp - 0xc64], ecx
movzx eax, byte [edi + 8]
shl esi, 8
or esi, eax
movzx eax, byte [edi + 7]
shl esi, 8
or esi, eax
lea eax, [ebp - 0xc58]
xor esi, dword [edi]
push eax
rol esi, 3
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xc58]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
add ecx, 0x2ac18000
push 0
push 0x989680
adc eax, 0xfe624e21
push eax
push ecx
call fcn.005d3040
sub eax, esi
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x1f4
jg 0x4616da
mov edi, dword [ebp - 0xc64]
mov al, byte [edi]
sub ebx, 4
inc edi
mov dword [ebp - 0xc5c], ebx
cmp al, 0xda
jne 0x461807
cmp byte [0x6802ee], 0
jne 0x4622f3
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x680384], eax
mov ecx, eax
call fcn.00494190
push 8
call fcn.0049a32d
add esp, 4
mov esi, eax
mov edx, edi
mov ecx, esi
push 8
call fcn.0048ffc0
mov ecx, dword [0x680384]
add esp, 4
mov edx, esi
call fcn.00494110
call fcn.004611b0
call fcn.00461390
mov eax, dword [esi + 4]
xor eax, dword [esi]
rol eax, 3
push 0
xor eax, 0xb
mov byte [0x6802ee], 1
push eax
jmp 0x461ba8
cmp al, 0xad
jne 0x461842
mov ecx, dword [0x680384]
call fcn.004940f0
push 9
mov esi, dword [eax + 4]
xor esi, dword [eax]
rol esi, 3
call fcn.0049a300
movq xmm0, qword [edi]
add esp, 4
movq qword [eax], xmm0
mov cl, byte [edi + 8]
mov byte [eax + 8], cl
xor eax, esi
push eax
xor esi, 0xc
push esi
jmp 0x461ba8
cmp al, 0x46
jne 0x461883
mov ecx, dword [0x680384]
call fcn.004940f0
push 0x80
mov esi, dword [eax + 4]
xor esi, dword [eax]
rol esi, 3
call fcn.0049a32d
add esp, 4
mov ecx, eax
mov edx, edi
push 0x80
call fcn.0048ffc0
add esp, 4
xor ecx, esi
xor esi, 0x12
push ecx
push esi
jmp 0x461ba8
cmp al, 0x10
jne 0x4618a5
mov ecx, dword [0x680384]
call fcn.004940f0
push 0
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
rol ecx, 3
xor ecx, 0x13
push ecx
jmp 0x461ba8
cmp al, 0x26
jne 0x4618da
mov ecx, dword [0x680384]
call fcn.004940f0
push 0x10
mov esi, dword [eax + 4]
xor esi, dword [eax]
rol esi, 3
call fcn.0049a300
movdqu xmm0, xmmword [edi]
add esp, 4
movdqu xmmword [eax], xmm0
xor eax, esi
xor esi, 0x14
push eax
push esi
jmp 0x461ba8
cmp al, 0x4f
jne 0x46195a
mov ecx, dword [0x680384]
call fcn.004940f0
mov esi, dword [eax + 4]
xor esi, dword [eax]
lea eax, [ebp - 0xc68]
push eax
lea eax, [ebp - 0xc5c]
rol esi, 3
push eax
lea eax, [ebp - 0xc60]
mov dword [ebp - 0xc5c], 0xffffffff
push eax
push edi
mov dword [ebp - 0xc68], 0xffffffff
mov word [ebp - 0xc60], 0x6464
mov byte [ebp - 0xc5e], 0
call fcn.00461450
add esp, 0x10
cmp dword [ebp - 0xc5c], 0x1ed8e4e
jne 0x4622f3
mov eax, dword [ebp - 0xc68]
add eax, 0x1ed8e4e
xor eax, esi
xor esi, 0x15
push eax
push esi
jmp 0x461ba8
cmp al, 0x2b
jne 0x4619f2
push 8
call fcn.0049a300
add esp, 4
mov dword [ebp - 0xc5c], eax
mov dword [eax], 0xffffffff
push eax
mov dword [eax + 4], 0
lea eax, [ebp - 0xc68]
push eax
push edi
mov word [ebp - 0xc68], 0x64
call fcn.00461450
sub ebx, 5
add esp, 0xc
mov edi, eax
test ebx, ebx
jle 0x4619cb
lea ecx, [ebx + 4]
push ecx
call fcn.0049a32d
mov esi, eax
add esp, 4
mov edx, edi
push ebx
lea ecx, [esi + 4]
call fcn.0048ffc0
mov edi, dword [ebp - 0xc5c]
add esp, 4
mov dword [esi], ebx
mov dword [edi + 4], esi
jmp 0x4619d1
mov edi, dword [ebp - 0xc5c]
mov ecx, dword [0x680384]
call fcn.004940f0
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
rol ecx, 3
mov eax, ecx
xor eax, edi
xor ecx, 0xd
push eax
push ecx
jmp 0x461ba8
cmp al, 0x43
jne 0x461acf
lea eax, [ebp - 0xc5c]
mov dword [ebp - 0xc68], 0
push eax
lea eax, [ebp - 0xc68]
mov dword [ebp - 0xc5c], 0
push eax
lea eax, [ebp - 0xc60]
mov word [ebp - 0xc60], 0x6464
push eax
push edi
mov byte [ebp - 0xc5e], 0
call fcn.00461450
mov ecx, dword [0x680384]
add esp, 0x10
mov dword [ebp - 0xc64], eax
call fcn.004940f0
sub ebx, 9
xor edi, edi
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
rol ecx, 3
mov dword [ebp - 0xc74], ecx
cmp ebx, 0x18
jne 0x461aa3
push ebx
call fcn.0049a300
mov edx, dword [ebp - 0xc64]
add esp, 4
mov esi, eax
mov ecx, esi
push ebx
call fcn.0048ffc0
add esp, 4
push 0xc
call fcn.0049a300
add esp, 4
mov edi, eax
mov ecx, edi
call fcn.00494190
mov edx, esi
mov ecx, edi
call fcn.00494110
mov ecx, dword [ebp - 0xc74]
xor edi, ecx
push edi
push dword [ebp - 0xc5c]
push dword [ebp - 0xc68]
push dword [0x680390]
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp al, 0x36
jne 0x461bca
push 0x10
call fcn.0049a300
mov esi, eax
add esp, 4
mov dword [ebp - 0xc5c], esi
test esi, esi
je 0x4622f3
mov ecx, dword [0x680384]
call fcn.004940f0
mov ebx, dword [eax + 4]
xor ebx, dword [eax]
mov eax, dword [ebp - 0xc5c]
mov dword [esi], 0
lea ecx, [eax + 8]
add esi, 4
rol ebx, 3
push esi
push eax
lea eax, [ebp - 0xc60]
mov dword [ebp - 0xc64], ecx
push eax
push edi
mov dword [esi], 0
mov dword [ecx], 0
mov word [ebp - 0xc60], 0x6463
mov byte [ebp - 0xc5e], 0
call fcn.00461450
add esp, 0x10
cmp dword [esi], 4
jge 0x461b99
mov esi, dword [ebp - 0xc64]
lea ecx, [ebp - 0xc68]
push esi
push ecx
push eax
mov word [ebp - 0xc68], 0x64
call fcn.00461450
mov ecx, dword [esi]
add esp, 0xc
mov edi, eax
test ecx, ecx
je 0x461b99
push ecx
call fcn.0049a32d
add esp, 4
mov ecx, eax
mov edx, edi
push dword [esi]
call fcn.0048ffc0
mov edx, dword [ebp - 0xc5c]
add esp, 4
mov dword [edx + 0xc], ecx
jmp 0x461b9f
mov edx, dword [ebp - 0xc5c]
mov eax, ebx
xor eax, edx
xor ebx, 0x16
push eax
push ebx
push 0x720
push dword [0x680390]
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp al, 0x97
jne 0x461cf8
lea eax, [ebp - 0xc60]
mov dword [ebp - 0xc70], 0
push eax
lea eax, [ebp - 0xc6c]
mov dword [ebp - 0xc6c], 0
push eax
lea eax, [ebp - 0xc70]
mov dword [ebp - 0xc60], 0
push eax
lea eax, [ebp - 0xc5c]
mov dword [ebp - 0xc5c], 0x646464
push eax
push edi
call fcn.00461450
mov ecx, dword [0x680384]
add esp, 0x14
mov dword [ebp - 0xc64], eax
sub ebx, 0xd
call fcn.004940f0
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, dword [eax + 4]
xor esi, dword [eax]
rol esi, 3
mov dword [ebp - 0xc68], esi
call edi
xor eax, esi
xor eax, dword [ebp - 0xc60]
jbe 0x461cc3
lea eax, [ebx + 4]
push eax
call fcn.0049a32d
mov edx, dword [ebp - 0xc64]
mov edi, eax
add esp, 4
lea ecx, [edi + 4]
push ebx
call fcn.0048ffc0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, ebx
xor eax, esi
push 0x18
mov dword [edi], eax
call fcn.0049a32d
add esp, 4
mov ebx, eax
mov ecx, ebx
call fcn.00494190
lea ecx, [ebx + 0xc]
call fcn.00494190
mov edx, dword [ebp - 0xc60]
mov ecx, ebx
call fcn.00494110
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, edi
lea ecx, [ebx + 0xc]
xor eax, esi
mov edx, eax
call fcn.00494110
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
jmp 0x461cc5
xor ebx, ebx
call edi
xor eax, ebx
xor eax, esi
push eax
call edi
xor eax, dword [ebp - 0xc6c]
push eax
push dword [ebp - 0xc70]
push dword [0x680390]
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp al, 0xa3
jne 0x461ead
lea eax, [ebp - 0xc6c]
mov dword [ebp - 0xc64], 0
push eax
lea eax, [ebp - 0xc65]
mov dword [ebp - 0xc74], 0
push eax
lea eax, [ebp - 0xc70]
mov dword [ebp - 0xc70], 0
push eax
lea eax, [ebp - 0xc74]
mov dword [ebp - 0xc6c], 0
push eax
lea eax, [ebp - 0xc64]
mov byte [ebp - 0xc65], 0xff
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0x63646464
push eax
push edi
mov word [ebp - 8], 0x63
call fcn.00461450
mov ecx, dword [0x680384]
add esp, 0x1c
mov esi, eax
call fcn.004940f0
push 0xbc
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
rol ecx, 3
mov dword [ebp - 0xc78], ecx
call fcn.0049a300
movsx ecx, byte [ebp - 0xc65]
mov ebx, eax
add esp, 4
mov edx, esi
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xc70]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0xc6c]
mov dword [ebx + 8], ecx
lea ecx, [ebx + 0xc]
push 0x20
call fcn.0048ffc0
add esp, 4
mov word [ebp - 0xc60], 0x64
lea eax, [ebx + 0x2c]
push eax
lea eax, [ebp - 0xc60]
push eax
lea eax, [esi + 0x20]
push eax
call fcn.00461450
add esp, 0xc
lea ecx, [ebx + 0x30]
mov edi, eax
mov edx, edi
push 0x80
call fcn.0048ffc0
mov eax, dword [ebp - 0xc5c]
add esp, 4
sub eax, 0xb3
sub edi, 0xffffff80
mov dword [ebp - 0xc5c], eax
lea esi, [eax - 0x4c]
push esi
call fcn.0049a32d
add esp, 4
mov ecx, eax
mov edx, edi
push esi
call fcn.0048ffc0
add esp, 4
mov dword [ebx + 0xb0], esi
mov dword [ebx + 0xb4], ecx
push 0x4c
call fcn.0049a32d
mov edx, dword [ebp - 0xc5c]
add esp, 4
mov ecx, eax
add edx, 0xffffffb4
push 0x4c
add edx, edi
call fcn.0048ffc0
add esp, 4
mov dword [ebx + 0xb8], ecx
push 0xc
call fcn.0049a300
add esp, 4
mov edi, eax
mov ecx, edi
call fcn.00494190
mov edx, ebx
mov ecx, edi
call fcn.00494110
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call esi
xor eax, edi
xor eax, dword [ebp - 0xc78]
push eax
call esi
xor eax, dword [ebp - 0xc74]
push eax
push dword [ebp - 0xc64]
push dword [0x680390]
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp al, 0x9b
jne 0x461f20
lea eax, [ebp - 0xc64]
mov byte [0x6803ac], 1
push eax
lea eax, [ebp - 0xc60]
mov dword [ebp - 0xc64], 0xffffffff
push eax
push edi
mov word [ebp - 0xc60], 0x64
call fcn.00461450
mov eax, dword [ebp - 0xc64]
add esp, 0xc
cmp eax, 2
jne 0x461f02
call fcn.0045e090
push 0
push 0
push 0
push 0x461600
jmp 0x461fa3
cmp eax, 3
jne 0x46239d
call fcn.0045e1c0
push 0
push 0
push 0
push 0x461600
jmp 0x461fa3
cmp al, 0x20
jne 0x461fc5
push 0x600
call fcn.0049a300
mov esi, eax
add esp, 4
test esi, esi
je 0x4622f3
push 0x600
push 0
push esi
call fcn.005c7c50
add esp, 0xc
mov dword [ebp - 0xc64], 0x200
lea eax, [ebp - 0xc78]
mov dword [ebp - 0xc78], 0x400
mov word [ebp - 0xc60], 0x5353
mov byte [ebp - 0xc5e], 0
push esi
push eax
lea eax, [esi + 0x400]
push eax
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0xc60]
push eax
push edi
call fcn.00461450
add esp, 0x18
push 0
push 0
push esi
push 0x45ad30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp al, 0x6b
jne 0x462072
lea eax, [ebp - 0xc5c]
mov word [ebp - 0xc60], 0x6464
push eax
lea eax, [ebp - 0xc64]
mov byte [ebp - 0xc5e], 0
push eax
lea eax, [ebp - 0xc60]
mov dword [ebp - 0xc64], 0xffffffff
push eax
push edi
mov dword [ebp - 0xc5c], 0
call fcn.00461450
mov edx, dword [ebp - 0xc64]
add esp, 0x10
cmp edx, 0xffffffff
jne 0x46203e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, dword [ebp - 0xc5c]
mov ecx, eax
call fcn.0045e110
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
call fcn.0045d790
mov esi, eax
test esi, esi
je 0x4622f3
mov edx, dword [ebp - 0xc5c]
mov ecx, esi
call fcn.0045e110
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp al, 0x58
jne 0x462381
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x226]
push eax
call fcn.005c7c50
add esp, 0xc
xor eax, eax
mov word [ebp - 0x430], ax
push 0x206
push eax
lea eax, [ebp - 0x42e]
push eax
call fcn.005c7c50
add esp, 0xc
xor eax, eax
mov word [ebp - 0x638], ax
push 0x206
push eax
lea eax, [ebp - 0x636]
push eax
call fcn.005c7c50
add esp, 0xc
xor eax, eax
mov word [ebp - 0x840], ax
push 0x206
push eax
lea eax, [ebp - 0x83e]
push eax
call fcn.005c7c50
add esp, 0xc
mov dword [ebp - 0xc64], 0
lea eax, [ebp - 0x840]
mov dword [ebp - 0xc5c], 0x208
mov dword [ebp - 0xc], 0x53535364
mov word [ebp - 8], 0x53
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0xc]
push eax
push edi
call fcn.00461450
lea ecx, [ebp - 0x228]
add esp, 0x2c
lea edx, [ecx + 2]
jmp 0x462170
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x462170
sub ecx, edx
sar ecx, 1
je 0x4622f3
xor eax, eax
mov dword [ebp - 0xc54], 0x63002a
mov word [ebp - 0xc4c], ax
lea eax, [ebp - 0xc54]
push eax
lea eax, [ebp - 0x228]
mov dword [ebp - 0xc50], 0x670066
push eax
call fcn.005c1fb8
add esp, 8
test eax, eax
je 0x462289
push 0x104
lea eax, [ebp - 0x228]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0xa40], ax
lea eax, [ebp - 0xa3e]
push eax
call fcn.005c7c50
add esp, 0xc
lea eax, [ebp - 0xa40]
push 0
push 0
push 0x100
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x228]
push 0
push eax
call fcn.005c35be
add esp, 0x24
xor eax, eax
mov word [ebp - 0xc48], ax
push 0x206
push eax
lea eax, [ebp - 0xc46]
push eax
call fcn.005c7c50
xor eax, eax
mov dword [ebp - 0x20], 0x5c002e
add esp, 0xc
mov word [ebp - 0x10], ax
lea eax, [ebp - 0xa40]
mov dword [ebp - 0x1c], 0x730025
mov dword [ebp - 0x18], 0x63002e
mov dword [ebp - 0x14], 0x670066
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xc48]
push eax
call fcn.00463930
add esp, 0xc
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.00463930
add esp, 8
mov eax, dword [ebp - 0xc64]
test eax, eax
jne 0x462304
lea ecx, [ebp - 0x430]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4622a0
sub ecx, edx
sar ecx, 1
je 0x4622f3
lea ecx, [ebp - 0x638]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4622c0
sub ecx, edx
sar ecx, 1
je 0x4622f3
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005c02df
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x46234c
lea ecx, [ebp - 0x430]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x462312
sub ecx, edx
sar ecx, 1
je 0x4622f3
lea ecx, [ebp - 0x638]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x462330
sub ecx, edx
sar ecx, 1
je 0x4622f3
lea eax, [ebp - 0x228]
push eax
push 0
jmp 0x4622df
cmp eax, 2
jne 0x4622f3
lea ecx, [ebp - 0x430]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x462360
sub ecx, edx
sar ecx, 1
je 0x4622f3
lea eax, [ebp - 0x228]
push eax
push 0
push 0
jmp 0x4622e6
cmp al, 0xc
je 0x46239d
cmp al, 0x33
je 0x4623b8
cmp al, 0x1d
je 0x4623d3
cmp al, 0xc9
je 0x4623ee
cmp al, 0x4d
je 0x462409
cmp al, 0x23
je 0x462424
call fcn.00463020
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.005c35aa
call fcn.00463020
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.005c35aa
call fcn.00463020
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.005c35aa
call fcn.00463020
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.005c35aa
call fcn.00463020
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.005c35aa
call fcn.00463020
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.005c35aa
int3