Function at 0x4254e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffb2c
mov eax, 0x69d2ab
xor edx, edx
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x24], 0x6b2864
mov dword [ebp - 0x20], esp
mov dword [ebp - 0x28], eax
mov word [ebp - 0x1c], 0
mov dword [ebp - 0x10], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0x2c], ecx
lea eax, [ebp - 0x2c]
mov dword fs:[0], eax
lea edx, [ebx + 0x8e28]
mov eax, dword [ebx + 0x856c]
mov ecx, dword [eax]
test ecx, ecx
je 0x42554b
mov eax, dword [eax + 4]
add eax, 0x68
push eax
push edx
call fcn.0069a464
add esp, 8
push ebx
call fcn.0043bcd0
pop ecx
cmp esi, 2
jne 0x42557d
push 0
push 0
mov edx, dword [ebx + 0x8568]
push edx
call fcn.0042c3a4
add esp, 0xc
push 0x6b1abb
push ebx
call fcn.0043b8ac
add esp, 8
jmp 0x42560d
cmp esi, 1
jne 0x425594
cmp dword [ebx + 0x8f0c], 0
jne 0x425592
cmp dword [ebx + 0x8f08], 0
je 0x425599
cmp esi, 3
jne 0x4255c2
lea eax, [ebx + 0x8e28]
mov edx, dword [eax + 8]
push edx
mov ecx, dword [ebx + 0x8568]
push ecx
call fcn.0042c67c
add esp, 8
push 0x6b1abd
push ebx
call fcn.0043b8ac
add esp, 8
jmp 0x42560d
lea eax, [ebx + 0x8e28]
mov edx, dword [eax + 8]
push edx
mov ecx, dword [ebx + 0x8568]
push ecx
call fcn.0042c67c
add esp, 8
mov eax, dword [ebx + 0x8f08]
mov edx, dword [ebx + 0x8f0c]
neg eax
adc edx, 0
neg edx
push edx
push eax
mov eax, dword [ebx + 0x8568]
push eax
call fcn.0042c3a4
add esp, 0xc
push 0x6b1abf
push ebx
call fcn.0043b8ac
add esp, 8
mov edx, dword [ebx + 0x8228]
test edx, edx
jne 0x42567c
mov ecx, dword [ebx + 0x8568]
push ecx
call fcn.0042c638
pop ecx
mov eax, dword [ebx + 0x8e40]
push eax
push ebx
call fcn.0043bcf4
add esp, 8
push eax
push 0xffffffffffffffff
push 0x41e
lea edx, [ebx + 0x8544]
push edx
call fcn.00415004
add esp, 0xc
push eax
lea ecx, [ebp - 0x848]
push ecx
call fcn.006a0ad0
add esp, 0xc
lea eax, [ebp - 0x848]
push eax
push ebx
call fcn.004365c8
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
mov eax, edx
jmp 0x4259f3
mov ecx, dword [ebx + 0x8f18]
test ecx, ecx
jne 0x42585f
mov eax, dword [ebx + 0x8f14]
test eax, eax
je 0x4256a3
mov esi, 0x6b1ac1
lea edi, [ebp - 0x38]
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
jmp 0x4256b1
mov esi, 0x6b1ac7
lea edi, [ebp - 0x38]
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edx, dword [ebx + 0x8e40]
push edx
push ebx
call fcn.0043bcf4
add esp, 8
push eax
lea ecx, [ebp - 0x38]
push ecx
push 0xffffffffffffffff
push 0x41f
lea eax, [ebx + 0x8544]
push eax
call fcn.00415004
add esp, 0xc
push eax
lea edx, [ebp - 0x848]
push edx
call fcn.006a0ad0
add esp, 0x10
lea ecx, [ebp - 0x848]
push ecx
push ebx
call fcn.004365c8
add esp, 8
lea esi, [ebx + 0x30]
mov edi, dword [esi]
test edi, edi
je 0x425746
mov eax, dword [edi + 4]
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
push edx
push 0x6b35f0
call fcn.0041edfc
add esp, 8
mov ecx, dword [esi]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
test eax, eax
je 0x425742
mov word [ebp - 0x1c], 0x14
push 3
mov edx, dword [ebp - 4]
push edx
call fcn.005899b4
mov word [ebp - 0x1c], 8
add esp, 8
xor ecx, ecx
mov dword [esi], ecx
lea esi, [ebx + 0x30]
push 0x190
call fcn.0067ac68
pop ecx
mov dword [ebp - 8], eax
test eax, eax
je 0x425791
mov word [ebp - 0x1c], 0x2c
mov edx, dword [ebx + 0x8240]
mov ecx, dword [0x6b35ec]
push edx
push 7
push 0x409
push ecx
mov eax, dword [ebx + 0x44]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00588fa8
add esp, 0x18
mov word [ebp - 0x1c], 0x20
mov ecx, dword [ebp - 8]
jmp 0x425794
mov ecx, dword [ebp - 8]
mov dword [esi], ecx
xor edx, edx
mov eax, dword [esi]
lea ecx, [ebp - 0x860]
mov edi, dword [eax + 4]
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x48], edi
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
push edx
push 0x6b35f0
push ecx
call fcn.0041e764
add esp, 0xc
mov eax, dword [ebp - 0x858]
add eax, 0x10
add eax, 4
mov dword [eax], ebx
mov edx, dword [ebx + 0x8d7c]
push edx
mov ecx, dword [ebx + 0x30]
push ecx
call fcn.00591858
add esp, 8
lea eax, [ebx + 0x8525]
push eax
lea eax, [ebx + 0x8f20]
mov dx, word [ebx + 0x8f1e]
push edx
mov cx, word [ebx + 0x8f1c]
push ecx
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.0058d034
add esp, 0x14
test al, al
je 0x42585f
cmp al, 0xa
jne 0x42581b
mov esi, 0x420
jmp 0x425820
mov esi, 0x421
push 0xffffffffffffffff
push esi
lea eax, [ebx + 0x8544]
push eax
call fcn.00415004
add esp, 0xc
push eax
push ebx
call fcn.004365c8
add esp, 8
push ebx
call fcn.0043bcd0
pop ecx
mov edx, dword [ebx + 0x8e30]
push edx
call fcn.0069e948
pop ecx
mov ecx, dword [ebp - 0x2c]
mov dword fs:[0], ecx
jmp 0x4259f3
mov eax, dword [ebx + 0x8dd4]
test eax, eax
je 0x4258f1
mov edx, dword [ebx + 0x8e30]
xor eax, eax
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea esi, [ebp - 0x1060]
xchg edi, esi
mov edx, ecx
mov eax, edi
shr ecx, 2
lea eax, [ebp - 0x1060]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.006a4124
pop ecx
lea edx, [ebp - 0x1060]
push edx
mov ecx, dword [ebx + 0x823c]
push ecx
push 0xffffffffffffffff
push 0x7dd
lea eax, [ebx + 0x8544]
push eax
call fcn.00415004
add esp, 0xc
push eax
lea edx, [ebp - 0x848]
push edx
call fcn.006a0ad0
add esp, 0x10
mov ecx, dword [ebx + 0x8240]
push ecx
lea eax, [ebp - 0x848]
push eax
push 7
call fcn.005fb108
add esp, 0xc
mov byte [ebx + 0x8de4], 9
mov dword [ebx + 0x8230], 0x8000
call sub.WINMM.DLL_timeGetTime
mov dword [ebx + 0x853c], eax
inc dword [0x6b3660]
inc dword [ebx + 0x8234]
mov edx, dword [ebx + 0x8f18]
test edx, edx
je 0x42592e
push 0
push ebx
call fcn.0043a4f4
add esp, 8
lea edi, [ebx + 0x8e28]
mov esi, dword [ebx + 0x856c]
mov eax, dword [esi]
test eax, eax
je 0x425962
push pe_nt_image_headers32
mov edx, dword [edi + 8]
push edx
mov ecx, dword [esi + 4]
add ecx, 0x68
push ecx
call fcn.0069d020
add esp, 0xc
mov eax, dword [esi + 4]
mov byte [eax + 0x267], 0
mov ebx, dword [ebx + 0x856c]
mov edx, dword [ebx]
test edx, edx
je 0x4259ea
mov esi, dword [ebx + 4]
mov dword [esi], 9
xor eax, eax
mov dword [esi + 4], eax
push 0x474
push esi
lea edx, [ebp - 0x14d4]
push edx
call fcn.0069cc60
add esp, 0xc
lea ecx, [ebp - 0x14d4]
push ecx
mov eax, dword [0x6b07c0]
push eax
call fcn.0040d1b4
add esp, 8
mov edx, dword [ebp - 0x1470]
mov dword [ebx + 8], edx
lea ecx, [ebp - 0x146c]
push pe_nt_image_headers32
push ecx
mov edi, eax
mov eax, dword [ebx + 4]
add eax, 0x68
push eax
call fcn.0069cc60
add esp, 0xc
lea edx, [ebp - 0x126c]
push pe_nt_image_headers32
push edx
mov ecx, dword [ebx + 4]
add ecx, 0x268
push ecx
call fcn.0069cc60
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword fs:[0], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret