Function at 0x426004
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffaf4
mov eax, 0x69d2ab
xor edx, edx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x24], 0x6b2910
mov dword [ebp - 0x20], esp
mov dword [ebp - 0x28], eax
mov word [ebp - 0x1c], 0
mov dword [ebp - 0x10], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0x2c], ecx
lea eax, [ebp - 0x2c]
mov dword fs:[0], eax
lea edx, [ebx + 0x8e28]
mov eax, dword [ebx + 0x856c]
mov ecx, dword [eax]
test ecx, ecx
je 0x42606c
mov eax, dword [eax + 4]
add eax, 0x68
push eax
push edx
call fcn.0069a464
add esp, 8
push ebx
call fcn.0043bcd0
pop ecx
push 0x6b1ace
push ebx
call fcn.0043b8ac
add esp, 8
mov edx, dword [ebx + 0x8228]
test edx, edx
jne 0x4260d6
mov ecx, dword [ebx + 0x8e40]
push ecx
push 0xffffffffffffffff
push 0x47f
lea eax, [ebx + 0x8544]
push eax
call fcn.00415004
add esp, 0xc
push eax
lea edx, [ebp - 0x850]
push edx
call fcn.006a0ad0
add esp, 0xc
lea ecx, [ebp - 0x850]
push ecx
push ebx
call fcn.004365c8
add esp, 8
mov eax, dword [ebp - 0x2c]
mov dword fs:[0], eax
jmp 0x4264aa
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
lea edx, [ebp - 0x880]
push edx
mov ecx, dword [ebx + 0x8e30]
push ecx
call fcn.006a0d9c
add esp, 8
test eax, eax
jne 0x426110
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x42611e
cmp dword [ebp - 0x34], 0
ja 0x42612e
jmp 0x426120
jg 0x42612e
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov edx, dword [ebp - 0x34]
mov dword [ebx + 0x8210], edx
mov edx, dword [ebp - 0x30]
mov dword [ebx + 0x8214], edx
mov ecx, dword [ebx + 0x8f18]
test ecx, ecx
jne 0x42631c
mov eax, dword [ebx + 0x8f14]
test eax, eax
je 0x426167
mov esi, 0x6b1ad0
lea edi, [ebp - 0x40]
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x426175
mov esi, 0x6b1ad6
lea edi, [ebp - 0x40]
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push dword [ebp - 0x30]
push dword [ebp - 0x34]
mov ecx, dword [ebx + 0x8e40]
push ecx
push ebx
call fcn.0043bcf4
add esp, 8
push eax
lea eax, [ebp - 0x40]
push eax
push 0xffffffffffffffff
push 0x407
lea edx, [ebx + 0x8544]
push edx
call fcn.00415004
add esp, 0xc
push eax
lea ecx, [ebp - 0x850]
push ecx
call fcn.006a0ad0
add esp, 0x18
lea eax, [ebp - 0x850]
push eax
push ebx
call fcn.004365c8
add esp, 8
lea esi, [ebx + 0x30]
mov edi, dword [esi]
test edi, edi
je 0x426210
mov eax, dword [edi + 4]
lea edx, [ebp - 0x44]
mov dword [ebp - 0x44], eax
push edx
push 0x6b35f0
call fcn.0041edfc
add esp, 8
mov ecx, dword [esi]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
test eax, eax
je 0x42620c
mov word [ebp - 0x1c], 0x14
push 3
mov edx, dword [ebp - 4]
push edx
call fcn.005899b4
mov word [ebp - 0x1c], 8
add esp, 8
xor ecx, ecx
mov dword [esi], ecx
lea esi, [ebx + 0x30]
push 0x190
call fcn.0067ac68
pop ecx
mov dword [ebp - 8], eax
test eax, eax
je 0x42625b
mov word [ebp - 0x1c], 0x2c
mov edx, dword [ebx + 0x8240]
mov ecx, dword [0x6b35ec]
push edx
push 7
push 0x409
push ecx
mov eax, dword [ebx + 0x44]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00588fa8
add esp, 0x18
mov word [ebp - 0x1c], 0x20
mov ecx, dword [ebp - 8]
jmp 0x42625e
mov ecx, dword [ebp - 8]
mov dword [esi], ecx
xor edx, edx
mov eax, dword [esi]
lea ecx, [ebp - 0x898]
mov edi, dword [eax + 4]
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x50], edi
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
push edx
push 0x6b35f0
push ecx
call fcn.0041e764
add esp, 0xc
mov eax, dword [ebp - 0x890]
add eax, 0x10
add eax, 4
mov dword [eax], ebx
mov edx, dword [ebx + 0x8d80]
push edx
mov ecx, dword [ebx + 0x30]
push ecx
call fcn.00591858
add esp, 8
lea eax, [ebx + 0x8525]
push eax
lea eax, [ebx + 0x8f20]
mov dx, word [ebx + 0x8f1e]
push edx
mov cx, word [ebx + 0x8f1c]
push ecx
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.0058d034
add esp, 0x14
test al, al
je 0x42631c
cmp al, 0xa
jne 0x4262e5
mov esi, 0x408
jmp 0x4262ea
mov esi, 0x409
push 0xffffffffffffffff
push esi
lea eax, [ebx + 0x8544]
push eax
call fcn.00415004
add esp, 0xc
push eax
push ebx
call fcn.004365c8
add esp, 8
push ebx
call fcn.0043bcd0
pop ecx
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
jmp 0x4264aa
mov ecx, dword [ebx + 0x8dd4]
test ecx, ecx
je 0x4263ae
mov eax, dword [ebx + 0x8e30]
lea esi, [ebp - 0x1098]
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x1098]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.006a4124
pop ecx
lea edx, [ebp - 0x1098]
push edx
mov ecx, dword [ebx + 0x823c]
push ecx
push 0xffffffffffffffff
push 0x7de
lea eax, [ebx + 0x8544]
push eax
call fcn.00415004
add esp, 0xc
push eax
lea edx, [ebp - 0x850]
push edx
call fcn.006a0ad0
add esp, 0x10
mov ecx, dword [ebx + 0x8240]
push ecx
lea eax, [ebp - 0x850]
push eax
push 9
call fcn.005fb108
add esp, 0xc
mov byte [ebx + 0x8de4], 8
mov dword [ebx + 0x8230], 0x8000
call sub.WINMM.DLL_timeGetTime
mov dword [ebx + 0x853c], eax
inc dword [0x6b3664]
mov edx, dword [ebx + 0x8f18]
test edx, edx
je 0x4263e5
push 0
push ebx
call fcn.0043a4f4
add esp, 8
lea edi, [ebx + 0x8e28]
mov esi, dword [ebx + 0x856c]
mov eax, dword [esi]
test eax, eax
je 0x426419
push pe_nt_image_headers32
mov edx, dword [edi + 8]
push edx
mov ecx, dword [esi + 4]
add ecx, 0x68
push ecx
call fcn.0069d020
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [eax + 0x267], 0
mov ebx, dword [ebx + 0x856c]
mov edx, dword [ebx]
test edx, edx
je 0x4264a1
mov esi, dword [ebx + 4]
mov dword [esi], 0xb
xor eax, eax
mov dword [esi + 4], eax
push 0x474
push esi
lea edx, [ebp - 0x150c]
push edx
call fcn.0069cc60
add esp, 0xc
lea ecx, [ebp - 0x150c]
push ecx
mov eax, dword [0x6b07c0]
push eax
call fcn.0040d1b4
add esp, 8
mov edx, dword [ebp - 0x14a8]
mov dword [ebx + 8], edx
lea ecx, [ebp - 0x14a4]
push pe_nt_image_headers32
push ecx
mov edi, eax
mov eax, dword [ebx + 4]
add eax, 0x68
push eax
call fcn.0069cc60
add esp, 0xc
lea edx, [ebp - 0x12a4]
push pe_nt_image_headers32
push edx
mov ecx, dword [ebx + 4]
add ecx, 0x268
push ecx
call fcn.0069cc60
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword fs:[0], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret