Function at 0x409cd0
Capabilities:
Terminate process

Disassembly:
sub esp, 0x50
mov dword [esp + 0x10], 0xf9fdbe06
lea eax, [esp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
sub ecx, 0x88762471
je 0x409f58
jmp 0x409cf7
mov ecx, eax
sub ecx, 0x88ad09b9
je 0x409fc6
jmp 0x409d07
mov ecx, eax
sub ecx, 0x89f3694d
je 0x409fa3
jmp 0x409d17
mov ecx, eax
sub ecx, 0x8c1e6287
je 0x409e82
jmp 0x409d27
mov ecx, eax
sub ecx, 0xa4ab332d
je 0x409f67
jmp 0x409d37
mov ecx, eax
sub ecx, 0xae536a76
je 0x409f76
jmp 0x409d47
mov ecx, eax
sub ecx, 0xc219f9c0
je 0x409ead
jmp 0x409d57
mov ecx, eax
sub ecx, 0xd4a33f52
je 0x409ff5
jmp 0x409d67
mov ecx, eax
sub ecx, 0xdc2181d2
je 0x409f85
jmp 0x409d77
mov ecx, eax
sub ecx, 0xf9fdbe06
je 0x409e59
jmp 0x409d87
mov ecx, eax
sub ecx, 0x20821e2
je 0x409fe1
jmp 0x409d97
mov ecx, eax
sub ecx, 0xbd093d5
je 0x409ebc
jmp 0x409da7
mov ecx, eax
sub ecx, 0x12137aee
je 0x409f30
jmp 0x409db7
mov ecx, eax
sub ecx, 0x16aaf3a4
je 0x409e91
jmp 0x409dc7
mov ecx, eax
sub ecx, 0x300741f8
je 0x409e73
jmp 0x409dd7
mov ecx, eax
sub ecx, 0x34d640d8
je 0x409fb7
jmp 0x409de7
mov ecx, eax
sub ecx, 0x53541375
je 0x40a010
jmp 0x409df7
mov ecx, eax
sub ecx, 0x571bc3a0
je 0x40a02e
jmp 0x409e07
mov ecx, eax
sub ecx, 0x58feb1b2
je 0x409f3f
jmp 0x409e17
mov ecx, eax
sub ecx, 0x5e90bf8e
je 0x409ef8
jmp 0x409e27
mov ecx, eax
sub ecx, 0x65b050bc
je 0x409edc
jmp 0x409e37
mov ecx, eax
sub ecx, 0x77ce70f9
je 0x409f94
jmp 0x409e47
sub eax, 0x7d1ab458
je 0x40a042
jmp 0x409e54
jmp 0x40a051
call fcn.00433a40
and al, 1
mov byte [esp + 0xf], al
mov eax, dword [esp + 8]
mov dword [eax], 0x300741f8
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0x8c1e6287
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0x16aaf3a4
jmp 0x40a051
mov eax, 0xc219f9c0
test byte [esp + 0xf], 1
jne 0x409ea2
mov eax, 0x88ad09b9
mov ecx, dword [esp + 8]
mov dword [ecx], eax
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0xbd093d5
jmp 0x40a051
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call fcn.0042a570
and al, 1
mov byte [esp + 0xe], al
mov eax, dword [esp + 8]
mov dword [eax], 0x65b050bc
jmp 0x40a051
mov eax, 0x5e90bf8e
test byte [esp + 0xe], 1
jne 0x409eed
mov eax, 0x77ce70f9
mov ecx, dword [esp + 8]
mov dword [ecx], eax
jmp 0x40a051
xor eax, eax
lea eax, [esp + 0x14]
mov dword [esp], 0
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
sub esp, 8
call fcn.0040ae60
mov ecx, 0x12137aee
test al, 1
jne 0x409f25
mov ecx, 0xa4ab332d
mov eax, dword [esp + 8]
mov dword [eax], ecx
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0x58feb1b2
jmp 0x40a051
call fcn.0040d4d0
call fcn.0040c1e0
mov eax, dword [esp + 8]
mov dword [eax], 0x88762471
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0xa4ab332d
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0xae536a76
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0xdc2181d2
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0x77ce70f9
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0x89f3694d
jmp 0x40a051
call fcn.004343a0
mov eax, dword [esp + 8]
mov dword [eax], 0x34d640d8
jmp 0x40a051
mov eax, dword [esp + 8]
mov dword [eax], 0x88ad09b9
jmp 0x40a051
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
add esp, 0x48
ret
sub eax, 0xd7e479d5
add eax, 0x448b089f
and al, 8
mov dword [eax], 0x8c1e6287
jmp 0x40a051
ja 0x40a002
call [edi - 1]
adc eax, sym.imp.KERNEL32.dll_GetCurrentProcess
call fcn.0042a570
add al, byte [eax]
mov eax, dword [esp + 8]
mov dword [eax], 0xbd093d5
jmp 0x40a051
or dword [ecx + 0x50ec2ff2], ebx
push ebp
retf
mov ebx, 0xc573dd5d
add eax, edi
pop edi
mov eax, dword [esp + 8]
mov dword [eax], 0xae536a76
jmp 0x40a051
call fcn.004343a0
mov eax, dword [esp + 8]
mov dword [eax], 0x89f3694d
jmp 0x409ce3