Function at 0x40e0b0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x588d86
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push esi
push edi
mov eax, dword [0x5f3004]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x10], 0
mov ecx, 0x5fcaf0
call fcn.00412590
test eax, eax
jne 0x40e100
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00416c80
ucomisd xmm0, qword [0x5d0508]
lahf
test ah, 0x44
jnp 0x40e37b
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call edi
cmp eax, 1
je 0x40e27a
call edi
push eax
push 0
push IsAccelerator
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], 0xffffffff
je 0x40e250
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00405090
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], 0
test eax, eax
je 0x40e188
push eax
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x5c]
call dword [eax + 0xc]
push str.6B570000C46DE5EBD5BBB7EC8CF60401632598811A3F1C5352D92768077BA8F3162D3BB9D45CADDAF9C8975B3746935E33DE77F8075A630E9C057EAD782CA6BA16E51F81B7260825F118C6AE8C56FF67
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
call fcn.00413f70
push ecx
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x30]
call fcn.0040d610
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00404500
mov edx, 0xa
lea ecx, [ebp - 0x30]
call fcn.004022d0
mov ecx, 1
mov esi, eax
mov dword [ebp - 0x10], ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00405000
cmp esi, 1
jne 0x40e309
push 0x5cca7c
lea ecx, [ebp - 0x6c]
call fcn.004040f0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
push eax
call fcn.00413580
mov edx, eax
mov byte [ebp - 4], 3
call fcn.00403b80
mov ecx, eax
call fcn.00408390
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.00405000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00403e00
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call edi
test eax, eax
jne 0x40e258
call edi
push eax
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40e309
lea ecx, [ebp - 0x40]
call fcn.00405090
mov dword [ebp - 4], 4
mov dword [ebp - 0x40], vtable.CWConstString.0
mov dword [ebp - 0x34], 0x5cea74
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00405090
mov byte [ebp - 4], 6
mov dword [ebp - 0x6c], vtable.CWConstString.0
mov dword [ebp - 0x60], str.system_error
mov byte [ebp - 4], 7
mov ecx, 0x5cca7c
mov edx, dword [ebp - 0x34]
test edx, edx
jne 0x40e2d2
cmp dword [ebp - 0x1c], 0
mov edx, ecx
cmovne edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x40e2e2
cmp dword [ebp - 0x48], eax
cmovne ecx, dword [ebp - 0x50]
mov eax, ecx
push 0
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00404500
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00404500
lea ecx, [ebp - 0x6c]
call fcn.00405090
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x6c], vtable.CWConstString.0
mov dword [ebp - 0x60], 0x5cca7c
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x30]
call fcn.00413580
mov byte [ebp - 4], 0xe
mov edx, eax
mov ecx, dword [0x5fcb10]
call fcn.00408390
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x30]
call fcn.00405000
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00404500
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x5cea74
lea ecx, [ebp - 0x40]
call fcn.004040f0
mov esi, eax
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x6c]
push str.error_system_time
call fcn.004040f0
mov edx, eax
mov byte [ebp - 4], 0xb
mov ecx, esi
push 0
call fcn.00403b60
push eax
mov ecx, edx
call fcn.00403b60
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6c]
call fcn.00403e00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.00403e00
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]