Function at 0x422ca0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x594
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x488], 0
call fcn.00421f20
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x49c], 0x94d03df6
mov eax, dword [ebp - 0x49c]
mov ecx, eax
sub ecx, 0x8bc0f7e7
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x4a4], ecx
jg 0x422d10
jmp 0x422cf4
mov eax, dword [ebp - 0x4a0]
sub eax, 0x8193acb1
mov dword [ebp - 0x4a8], eax
je 0x4230d2
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x61431fbb
mov dword [ebp - 0x4ac], eax
jg 0x423090
jmp 0x422d2c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x5c5cecf7
mov dword [ebp - 0x4b0], eax
jg 0x423074
jmp 0x422d48
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4e220ec5
mov dword [ebp - 0x4b4], eax
jg 0x423058
jmp 0x422d64
mov eax, dword [ebp - 0x4a0]
sub eax, 0x1f6d5183
mov dword [ebp - 0x4b8], eax
jg 0x42303c
jmp 0x422d80
mov eax, dword [ebp - 0x4a0]
sub eax, 0xec30412
mov dword [ebp - 0x4bc], eax
jg 0x423020
jmp 0x422d9c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7e54adf
mov dword [ebp - 0x4c0], eax
jg 0x423004
jmp 0x422db8
mov eax, dword [ebp - 0x4a0]
sub eax, 0x3cc1c94
mov dword [ebp - 0x4c4], eax
jg 0x422fe8
jmp 0x422dd4
mov eax, dword [ebp - 0x4a0]
sub eax, 0xec257d5b
mov dword [ebp - 0x4c8], eax
jg 0x422fcc
jmp 0x422df0
mov eax, dword [ebp - 0x4a0]
sub eax, 0xdca3998f
mov dword [ebp - 0x4cc], eax
jg 0x422fb0
jmp 0x422e0c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xd1d16d74
mov dword [ebp - 0x4d0], eax
jg 0x422f94
jmp 0x422e28
mov eax, dword [ebp - 0x4a0]
sub eax, 0xbf659e6b
mov dword [ebp - 0x4d4], eax
jg 0x422f78
jmp 0x422e44
mov eax, dword [ebp - 0x4a0]
sub eax, 0xad282b67
mov dword [ebp - 0x4d8], eax
jg 0x422f5c
jmp 0x422e60
mov eax, dword [ebp - 0x4a0]
sub eax, 0xa4cc5b11
mov dword [ebp - 0x4dc], eax
jg 0x422f40
jmp 0x422e7c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x8ef304f2
mov dword [ebp - 0x4e0], eax
jg 0x422eb4
jmp 0x422e98
mov eax, dword [ebp - 0x4a0]
sub eax, 0x8bc0f7e8
mov dword [ebp - 0x4e4], eax
je 0x423473
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x94d03df5
mov dword [ebp - 0x4e8], eax
jg 0x422eec
jmp 0x422ed0
mov eax, dword [ebp - 0x4a0]
sub eax, 0x8ef304f3
mov dword [ebp - 0x4ec], eax
je 0x423637
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x94d03df6
mov dword [ebp - 0x4f0], eax
je 0x4230b1
jmp 0x422f08
mov eax, dword [ebp - 0x4a0]
sub eax, 0x98cf4faa
mov dword [ebp - 0x4f4], eax
je 0x423203
jmp 0x422f24
mov eax, dword [ebp - 0x4a0]
sub eax, 0x99b3921f
mov dword [ebp - 0x4f8], eax
je 0x4235ff
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xa4cc5b12
mov dword [ebp - 0x4fc], eax
je 0x4234e3
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xad282b68
mov dword [ebp - 0x500], eax
je 0x423261
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xbf659e6c
mov dword [ebp - 0x504], eax
je 0x423429
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xd1d16d75
mov dword [ebp - 0x508], eax
je 0x42365c
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xdca39990
mov dword [ebp - 0x50c], eax
je 0x4230e1
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xec257d5c
mov dword [ebp - 0x510], eax
je 0x4235d1
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x3cc1c95
mov dword [ebp - 0x514], eax
je 0x423646
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7e54ae0
mov dword [ebp - 0x518], eax
je 0x42332d
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xec30413
mov dword [ebp - 0x51c], eax
je 0x42328c
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x1f6d5184
mov dword [ebp - 0x520], eax
je 0x42366e
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4e220ec6
mov dword [ebp - 0x524], eax
je 0x423499
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x5c5cecf8
mov dword [ebp - 0x528], eax
je 0x423615
jmp 0x4230ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x61431fbc
mov dword [ebp - 0x52c], eax
je 0x423351
jmp 0x4230ac
jmp 0x42367c
mov eax, 0xdca39990
mov ecx, 0x8193acb1
mov edx, dword [ebp - 0x10]
cmp edx, 0
cmovl eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x42367c
mov dword [ebp - 0x49c], 0xd1d16d75
jmp 0x42367c
call fcn.00420540
mov eax, 0x104
lea ecx, [ebp - 0x272]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x530], eax
call fcn.004069f0
mov dword [ebp - 0x480], eax
mov eax, dword [0x46d908]
call eax
mov ecx, 0
mov edx, 0x28
lea esi, [ebp - 0x40]
mov dword [0x46c3cc], eax
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x538], ecx
call fcn.004068e0
lea ecx, [ebp - 0x40]
mov edx, dword [0x44dd90]
movzx edx, word [edx]
mov dword [ebp - 0x48c], edx
mov edx, dword [ebp - 0x48c]
add edx, 0x6261256a
add edx, 1
sub edx, 0x6261256a
mov esi, dword [0x44dd90]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x490], edx
mov edx, dword [ebp - 0x490]
mov esi, dword [0x44dd90]
mov edi, dword [ebp - 0x48c]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44dd90]
add edi, 2
mov ebx, dword [ebp - 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x53c], eax
call fcn.00405e00
lea eax, [ebp - 0x40]
mov ecx, dword [0x46c3cc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004085c0
mov ecx, 0xad282b68
mov edx, 0x98cf4faa
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42367c
lea eax, [ebp - 0x272]
mov ecx, dword [0x46d8fc]
mov edx, esp
mov dword [edx + 8], 0x46c3d0
mov dword [edx], eax
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
call ecx
sub esp, 0x10
mov ecx, 1
mov dword [esp], 1
mov dword [esp + 4], 1
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x544], ecx
call fcn.0040f8c0
mov dword [ebp - 0x49c], 0xad282b68
jmp 0x42367c
lea eax, [ebp - 0x488]
mov dword [esp], eax
call fcn.00421020
mov ecx, 0x5c5cecf8
mov edx, 0xec30413
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42367c
lea eax, [0x46d980]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x548], ecx
call fcn.00406e60
mov ecx, 0
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
sub ecx, 4
add eax, ecx
mov word [eax*2 + 0x46d980], 0
mov eax, dword [0x46d904]
mov ecx, esp
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0x46d980
mov dword [ecx + 4], 0
mov dword [ecx], 0
call eax
sub esp, 0x10
mov ecx, 0x4e220ec6
mov edx, 0x7e54ae0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42367c
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0xbf659e6c
mov edx, 0x61431fbc
cmp eax, 0xb7
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42367c
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x47c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x550], ecx
call fcn.004068e0
lea ecx, [0x46d980]
mov dword [esp], ecx
mov dword [ebp - 0x554], eax
call fcn.00407180
mov ecx, 0x104
lea edx, [0x46d980]
mov esi, 0xc2
lea edi, [ebp - 0x47c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xc2
mov dword [ebp - 0x558], esi
mov dword [ebp - 0x55c], ecx
call fcn.004082b0
mov eax, 0
lea ecx, [ebp - 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x560], eax
call fcn.00422410
mov ecx, dword [0x46d910]
mov edx, dword [ebp - 0x18]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0x564], eax
call ecx
sub esp, 4
mov dword [ebp - 0x49c], 0x8bc0f7e8
mov dword [ebp - 0x568], eax
jmp 0x42367c
lea eax, [0x46c3d0]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x56c], ecx
call fcn.00406c10
mov dword [ebp - 0x49c], 0x8bc0f7e8
mov dword [ebp - 0x570], eax
jmp 0x42367c
mov eax, dword [0x46d91c]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x49c], 0xa4cc5b12
mov dword [ebp - 0x574], eax
jmp 0x42367c
lea eax, [0x46c3d0]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x578], ecx
call fcn.00406c10
mov dword [ebp - 0x49c], 0xa4cc5b12
mov dword [ebp - 0x57c], eax
jmp 0x42367c
mov eax, 0
mov ecx, 0x28
lea edx, [ebp - 0x68]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x584], ecx
call fcn.004068e0
lea ecx, [ebp - 0x68]
mov edx, dword [0x44dd94]
movzx edx, word [edx]
mov dword [ebp - 0x494], edx
mov edx, dword [ebp - 0x494]
sub edx, 0x58728152
add edx, 1
add edx, 0x58728152
mov esi, dword [0x44dd94]
shl edx, 1
add esi, edx
movzx edx, word [esi]
mov dword [ebp - 0x498], edx
mov edx, dword [ebp - 0x498]
mov esi, dword [0x44dd94]
mov edi, dword [ebp - 0x494]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44dd94]
add edi, 2
mov ebx, dword [ebp - 0x494]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x588], eax
call fcn.00405e00
lea eax, [ebp - 0x68]
mov ecx, dword [0x46c3cc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409520
mov ecx, 0x99b3921f
mov edx, 0xec257d5c
cmp eax, 0
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42367c
mov eax, 0
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x58c], eax
call fcn.0040f8c0
mov dword [ebp - 0x49c], 0x99b3921f
jmp 0x42367c
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x49c], 0x1f6d5184
jmp 0x42367c
mov eax, 0x3cc1c95
mov ecx, 0x8ef304f3
cmp dword [ebp - 0x488], 6
cmovb eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x42367c
mov dword [ebp - 0x49c], 0xd1d16d75
jmp 0x42367c
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x49c], 0x1f6d5184
jmp 0x42367c
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, dword [ebp - 0x14]
add esp, 0x594
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x422ccf