Function at 0x40ddc0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x589b16
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push esi
push edi
mov eax, dword [0x5f4000]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x10], 0
mov ecx, 0x5fdb00
call fcn.00411f30
test eax, eax
jne 0x40de10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00416570
ucomisd xmm0, qword [0x5d15b8]
lahf
test ah, 0x44
jnp 0x40df8a
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call edi
cmp eax, 4
je 0x40e019
call edi
push eax
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], 0xffffffff
je 0x40df60
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00404dd0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], 0
test eax, eax
je 0x40de98
push eax
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x5c]
call dword [eax + 0xc]
push str.6698FFFF8F1A8CF2F9D58103490A1C4A2EAAF2CAC28662F3FE0E3FCE05539A71494932A64F7D6A96F4CCF0F11AABE9586423E90FC093E07BE5CAD8C26762CE704038DC6C2309A8837A696388BB1D71368AC16B63C2917C7CF2774AD5E67B2D0044880439AE0DEC1AD586E0BC1073FE4487B2D9531431721FBFBEB2BCFE45E4DC32DCE16AEFEDB279
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
call fcn.00413830
push ecx
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x30]
call fcn.0040d310
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00404220
mov edx, 0x14
lea ecx, [ebp - 0x30]
call fcn.004022a0
mov ecx, 1
mov esi, eax
mov dword [ebp - 0x10], ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00404d40
cmp esi, 1
jne 0x40e019
push 0x5cdabc
lea ecx, [ebp - 0x6c]
call fcn.00403e00
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
push eax
call fcn.00412f40
mov edx, eax
mov byte [ebp - 4], 3
call fcn.00403880
mov ecx, eax
call fcn.004080a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.00404d40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00403b00
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call edi
test eax, eax
jne 0x40df68
call edi
push eax
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40e019
lea ecx, [ebp - 0x40]
call fcn.00404dd0
mov dword [ebp - 4], 4
mov dword [ebp - 0x40], vtable.CWConstString.0
mov dword [ebp - 0x34], 0x5cfa90
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00404dd0
mov byte [ebp - 4], 6
mov dword [ebp - 0x6c], vtable.CWConstString.0
mov dword [ebp - 0x60], str.error_system_time
mov byte [ebp - 4], 7
mov ecx, 0x5cdabc
mov edx, dword [ebp - 0x34]
test edx, edx
jne 0x40dfe2
cmp dword [ebp - 0x1c], 0
mov edx, ecx
cmovne edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x40dff2
cmp dword [ebp - 0x48], eax
cmovne ecx, dword [ebp - 0x50]
mov eax, ecx
push 0
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00404220
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00404220
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret