Function at 0x422db0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x594
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x488], 0
call fcn.00422120
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x49c], 0x123c4243
mov eax, dword [ebp - 0x49c]
mov ecx, eax
sub ecx, 0x7fb67b21
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x4a4], ecx
jg 0x4231a0
jmp 0x422e04
mov eax, dword [ebp - 0x4a0]
sub eax, 0x88338b6a
mov dword [ebp - 0x4a8], eax
jg 0x422e3c
jmp 0x422e20
mov eax, dword [ebp - 0x4a0]
sub eax, 0x861faa92
mov dword [ebp - 0x4ac], eax
je 0x423740
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7bd298f4
mov dword [ebp - 0x4b0], eax
jg 0x423184
jmp 0x422e58
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7a366e2c
mov dword [ebp - 0x4b4], eax
jg 0x423168
jmp 0x422e74
mov eax, dword [ebp - 0x4a0]
sub eax, 0x688da0e1
mov dword [ebp - 0x4b8], eax
jg 0x42314c
jmp 0x422e90
mov eax, dword [ebp - 0x4a0]
sub eax, 0x6641cf9b
mov dword [ebp - 0x4bc], eax
jg 0x423130
jmp 0x422eac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x5c3e5546
mov dword [ebp - 0x4c0], eax
jg 0x423114
jmp 0x422ec8
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4fb93f25
mov dword [ebp - 0x4c4], eax
jg 0x4230f8
jmp 0x422ee4
mov eax, dword [ebp - 0x4a0]
sub eax, 0x123c4242
mov dword [ebp - 0x4c8], eax
jg 0x4230dc
jmp 0x422f00
mov eax, dword [ebp - 0x4a0]
sub eax, 0x74e9ba3
mov dword [ebp - 0x4cc], eax
jg 0x4230c0
jmp 0x422f1c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xceb04886
mov dword [ebp - 0x4d0], eax
jg 0x4230a4
jmp 0x422f38
mov eax, dword [ebp - 0x4a0]
sub eax, 0xc6ebdd19
mov dword [ebp - 0x4d4], eax
jg 0x423088
jmp 0x422f54
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb98c3e14
mov dword [ebp - 0x4d8], eax
jg 0x42306c
jmp 0x422f70
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb7515e1b
mov dword [ebp - 0x4dc], eax
jg 0x423050
jmp 0x422f8c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x9f9fd939
mov dword [ebp - 0x4e0], eax
jg 0x423034
jmp 0x422fa8
mov eax, dword [ebp - 0x4a0]
sub eax, 0x9132c0b9
mov dword [ebp - 0x4e4], eax
jg 0x423018
jmp 0x422fc4
mov eax, dword [ebp - 0x4a0]
sub eax, 0x88338b6b
mov dword [ebp - 0x4e8], eax
je 0x423371
jmp 0x422fe0
mov eax, dword [ebp - 0x4a0]
sub eax, 0x892c3613
mov dword [ebp - 0x4ec], eax
je 0x42339c
jmp 0x422ffc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x8bcf9ff4
mov dword [ebp - 0x4f0], eax
je 0x423765
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x9132c0ba
mov dword [ebp - 0x4f4], eax
je 0x42374f
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x9f9fd93a
mov dword [ebp - 0x4f8], eax
je 0x423580
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb7515e1c
mov dword [ebp - 0x4fc], eax
je 0x4236da
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb98c3e15
mov dword [ebp - 0x500], eax
je 0x4231f1
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0xc6ebdd1a
mov dword [ebp - 0x504], eax
je 0x423536
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0xceb04887
mov dword [ebp - 0x508], eax
je 0x4235a6
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x74e9ba4
mov dword [ebp - 0x50c], eax
je 0x42345e
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x123c4243
mov dword [ebp - 0x510], eax
je 0x4231c1
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4fb93f26
mov dword [ebp - 0x514], eax
je 0x42343a
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x5c3e5547
mov dword [ebp - 0x518], eax
je 0x42371e
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x6641cf9c
mov dword [ebp - 0x51c], eax
je 0x423313
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x688da0e2
mov dword [ebp - 0x520], eax
je 0x423708
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7a366e2d
mov dword [ebp - 0x524], eax
je 0x4235f0
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7bd298f5
mov dword [ebp - 0x528], eax
je 0x4231e2
jmp 0x4231bc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x7fb67b22
mov dword [ebp - 0x52c], eax
je 0x423777
jmp 0x4231bc
jmp 0x423785
mov eax, 0xb98c3e15
mov ecx, 0x7bd298f5
mov edx, dword [ebp - 0x10]
cmp edx, 0
cmovl eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x423785
mov dword [ebp - 0x49c], 0x8bcf9ff4
jmp 0x423785
call fcn.00420730
mov eax, 0x104
lea ecx, [ebp - 0x272]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x530], eax
call fcn.00406c00
mov dword [ebp - 0x480], eax
mov eax, dword [0x4718e4]
call eax
mov ecx, 0
mov edx, 0x28
lea esi, [ebp - 0x40]
mov dword [0x4703ac], eax
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x538], ecx
call fcn.00406af0
lea ecx, [ebp - 0x40]
mov edx, dword [0x451c4c]
movzx edx, word [edx]
mov dword [ebp - 0x48c], edx
mov edx, dword [ebp - 0x48c]
add edx, 0xdcd36b97
add edx, 1
sub edx, 0xdcd36b97
mov esi, dword [0x451c4c]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x490], edx
mov edx, dword [ebp - 0x490]
mov esi, dword [0x451c4c]
mov edi, dword [ebp - 0x48c]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x451c4c]
add edi, 2
mov ebx, dword [ebp - 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x53c], eax
call fcn.00406000
lea eax, [ebp - 0x40]
mov ecx, dword [0x4703ac]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004087b0
mov ecx, 0x88338b6b
mov edx, 0x6641cf9c
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x423785
lea eax, [ebp - 0x272]
mov ecx, dword [0x4718d8]
mov edx, esp
mov dword [edx + 8], 0x4703b0
mov dword [edx], eax
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
call ecx
sub esp, 0x10
mov ecx, 1
mov dword [esp], 1
mov dword [esp + 4], 1
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x544], ecx
call fcn.0040fa80
mov dword [ebp - 0x49c], 0x88338b6b
jmp 0x423785
lea eax, [ebp - 0x488]
mov dword [esp], eax
call fcn.00421210
mov ecx, 0x5c3e5547
mov edx, 0x892c3613
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x423785
lea eax, [0x471960]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x548], ecx
call fcn.00407070
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
sub eax, 0xe34e1198
sub eax, 4
mov word [eax*2 - 0x391cc370], 0
mov eax, dword [0x4718e0]
mov ecx, esp
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0x471960
mov dword [ecx + 4], 0
mov dword [ecx], 0
call eax
sub esp, 0x10
mov ecx, 0xceb04887
mov edx, 0x4fb93f26
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x423785
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0xc6ebdd1a
mov edx, 0x74e9ba4
cmp eax, 0xb7
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x423785
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x47c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x550], ecx
call fcn.00406af0
lea ecx, [0x471960]
mov dword [esp], ecx
mov dword [ebp - 0x554], eax
call fcn.00407390
mov ecx, 0x104
lea edx, [0x471960]
mov esi, 0xc2
lea edi, [ebp - 0x47c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xc2
mov dword [ebp - 0x558], esi
mov dword [ebp - 0x55c], ecx
call fcn.004084d0
mov eax, 0
lea ecx, [ebp - 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x560], eax
call fcn.00422520
mov ecx, dword [0x4718ec]
mov edx, dword [ebp - 0x18]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0x564], eax
call ecx
sub esp, 4
mov dword [ebp - 0x49c], 0x9f9fd93a
mov dword [ebp - 0x568], eax
jmp 0x423785
lea eax, [0x4703b0]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x56c], ecx
call fcn.00406e20
mov dword [ebp - 0x49c], 0x9f9fd93a
mov dword [ebp - 0x570], eax
jmp 0x423785
mov eax, dword [0x4718f8]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x49c], 0x7a366e2d
mov dword [ebp - 0x574], eax
jmp 0x423785
lea eax, [0x4703b0]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x578], ecx
call fcn.00406e20
mov dword [ebp - 0x49c], 0x7a366e2d
mov dword [ebp - 0x57c], eax
jmp 0x423785
mov eax, 0
mov ecx, 0x28
lea edx, [ebp - 0x68]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x584], ecx
call fcn.00406af0
lea ecx, [ebp - 0x68]
mov edx, dword [0x451c50]
movzx edx, word [edx]
mov dword [ebp - 0x494], edx
mov edx, dword [ebp - 0x494]
add edx, 0xcac95c08
add edx, 1
sub edx, 0xcac95c08
mov esi, dword [0x451c50]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x498], edx
mov edx, dword [ebp - 0x498]
mov esi, dword [0x451c50]
mov edi, dword [ebp - 0x494]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x451c50]
add edi, 2
mov ebx, dword [ebp - 0x494]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x588], eax
call fcn.00406000
lea eax, [ebp - 0x68]
mov ecx, dword [0x4703ac]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409710
mov ecx, 0x688da0e2
mov edx, 0xb7515e1c
cmp eax, 0
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x423785
mov eax, 0
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x58c], eax
call fcn.0040fa80
mov dword [ebp - 0x49c], 0x688da0e2
jmp 0x423785
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x49c], 0x7fb67b22
jmp 0x423785
mov eax, 0x9132c0ba
mov ecx, 0x861faa92
cmp dword [ebp - 0x488], 6
cmovb eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x423785
mov dword [ebp - 0x49c], 0x8bcf9ff4
jmp 0x423785
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x49c], 0x7fb67b22
jmp 0x423785
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, dword [ebp - 0x14]
add esp, 0x594
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x422ddf