Function at 0x7face0
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x2c
mov eax, dword [0xbd33e0]
mov edi, ecx
mov ebp, edx
xor eax, esp
mov dword [esp + 0x28], eax
xor eax, eax
mov esi, dword [ecx + 8]
mov ecx, dword [edx + 4]
mov ebx, dword [edx + 0x14]
test cl, 0x20
mov dword [esp], ebx
jne 0x7faef1
test ecx, 0x2000000
je 0x7faebc
mov edx, fcn.007ea360
movzx ecx, byte [0xbb7cb7]
not edx
and edx, 1
mov eax, edx
add eax, fcn.007ea360
sete al
or al, 6
movzx eax, al
bt ecx, eax
jb 0x7fae8c
mov al, byte [0xbb7cb7]
mov ecx, edx
mov ah, 1
add ecx, fcn.007ea360
sete cl
or cl, 6
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7cb7], ah
jne 0x7fad47
mov ecx, fcn.007ea360
movzx eax, al
not ecx
and ecx, 1
mov edx, ecx
add edx, fcn.007ea360
sete dl
or dl, 6
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x7fadae
mov eax, ecx
movzx edx, byte [0xbb7cb7]
add eax, fcn.007ea360
sete al
or al, 6
movzx eax, al
bt edx, eax
jae 0x7fad8e
jmp 0x7fae8c
add ecx, fcn.007ea360
movzx ecx, byte [0xbb7cb7]
sete al
or al, 6
movzx eax, al
bt ecx, eax
jb 0x7fae6a
mov eax, fcn.007ea360
xor ecx, ecx
not eax
and eax, 1
add eax, fcn.007ea360
mov eax, dword [0xbb7ca0]
sete cl
or ecx, 0x11e1e9e
add ecx, 0x240
xor eax, ecx
mov dword [0xbb7ca0], eax
not eax
mov edx, dword [0xbb7ca4]
imul eax, ecx
and cl, 7
lea ebx, [eax + eax]
xor edx, eax
shr eax, 0x1e
mov dword [0xbb7ca4], edx
or eax, ebx
not edx
imul edx, eax
mov eax, dword [0xbb7ca8]
lea ebx, [edx*4]
xor eax, edx
shr edx, 0x1d
mov dword [0xbb7ca8], eax
or edx, ebx
not eax
imul eax, edx
mov edx, dword [0xbb7cac]
lea ebx, [eax*8]
xor edx, eax
shr eax, 0x1c
mov dword [0xbb7cac], edx
or eax, ebx
not edx
mov ebx, dword [esp]
imul edx, eax
xor dword [0xbb7cb0], edx
mov dl, 1
shl dl, cl
or byte [0xbb7cb7], dl
mov eax, fcn.007ea360
not eax
and eax, 1
add eax, fcn.007ea360
mov al, 0xfe
sete cl
or cl, 6
xor cl, 7
rol al, cl
and byte [0xbb7cb7], al
push dword [ebx + 0x10]
push 0xbb7ca0
push 0
push edi
call fcn.007fdcc0
add esp, 0x10
mov ecx, esi
mov edx, 0xc
push dword [ebp + 0x2c]
push dword [ebp + 0x30]
call fcn.007d10d0
add esp, 8
mov ebx, dword [ebp + 0x1c]
jmp 0x7fb5f1
or ecx, 0x2000000
mov edx, 0x45
mov dword [ebp + 4], ecx
mov ecx, esi
mov eax, dword [edi + 0x2c]
inc eax
mov dword [edi + 0x2c], eax
mov dword [ebp + 0x30], eax
push eax
push 0
call fcn.007d10d0
add esp, 8
inc eax
mov ecx, esi
mov edx, 0x11
mov dword [ebp + 0x2c], eax
call fcn.007f75b0
mov edx, fcn.00781190
mov ebx, fcn.00781190
mov dword [esp + 0xc], eax
or edx, 2
xor ebx, 2
movzx ecx, byte [0xbb7cd3]
mov eax, edx
add eax, ebx
sete al
xor al, 5
add al, 0x14
and al, 7
movzx eax, al
bt ecx, eax
jb 0x7fb06b
mov al, byte [0xbb7cd3]
mov ecx, edx
mov ah, 1
add ecx, ebx
sete cl
xor cl, 5
add cl, 0x14
and cl, 7
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7cd3], ah
jne 0x7faf2a
mov ecx, fcn.00781190
mov edx, fcn.00781190
or ecx, 2
xor edx, 2
mov ebx, ecx
add ebx, edx
sete ah
xor ah, 5
add ah, 0x14
and ah, 7
xor ah, 7
movzx ebx, ah
movzx eax, al
bt eax, ebx
jae 0x7faf9c
mov eax, ecx
movzx ebx, byte [0xbb7cd3]
add eax, edx
sete al
xor al, 5
add al, 0x14
and al, 7
movzx eax, al
bt ebx, eax
jae 0x7faf7b
jmp 0x7fb06b
add ecx, edx
movzx ecx, byte [0xbb7cd3]
sete al
xor al, 5
add al, 0x14
and al, 7
movzx eax, al
bt ecx, eax
jb 0x7fb040
mov eax, fcn.00781190
mov edx, fcn.00781190
xor ecx, ecx
xor edx, 2
or eax, 2
add eax, edx
mov eax, dword [0xbb7cc0]
sete cl
xor ecx, 0x874dfc05
add ecx, 0x214
mov edx, ecx
xor eax, ecx
shr edx, 0x1f
mov dword [0xbb7cc0], eax
not eax
or edx, ecx
and cl, 7
imul edx, eax
mov eax, dword [0xbb7cc4]
lea ebx, [edx + edx]
xor eax, edx
shr edx, 0x1e
mov dword [0xbb7cc4], eax
or ebx, edx
not eax
mov edx, dword [0xbb7cc8]
imul eax, ebx
lea ebx, [eax*4]
xor edx, eax
shr eax, 0x1d
mov dword [0xbb7cc8], edx
or ebx, eax
not edx
mov al, 1
imul edx, ebx
shl al, cl
xor dword [0xbb7ccc], edx
or byte [0xbb7cd3], al
mov eax, fcn.00781190
mov ecx, fcn.00781190
xor ecx, 2
or eax, 2
add eax, ecx
mov al, 0xfe
sete cl
xor cl, 5
add cl, 0x14
and cl, 7
xor cl, 7
rol al, cl
and byte [0xbb7cd3], al
mov edx, fcn.007ad450
mov eax, fcn.007ad450
movzx ecx, byte [0xbb7cfb]
mov ebx, dword [esp]
and edx, 1
xor edx, eax
cmp edx, 0xffffffff
sete al
not al
and al, 5
movzx eax, al
bt ecx, eax
jb 0x7fb203
mov al, byte [0xbb7cfb]
cmp edx, 0xffffffff
mov ah, 1
sete cl
not cl
and cl, 5
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7cfb], ah
jne 0x7fb09f
mov ecx, fcn.007ad450
mov edx, fcn.007ad450
movzx eax, al
and ecx, 1
xor ecx, edx
cmp ecx, 0xffffffff
sete dl
not dl
and dl, 5
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x7fb103
cmp ecx, 0xffffffff
movzx edx, byte [0xbb7cfb]
sete al
not al
and al, 5
movzx eax, al
bt edx, eax
jae 0x7fb0e5
jmp 0x7fb203
cmp ecx, 0xffffffff
movzx ecx, byte [0xbb7cfb]
sete al
not al
and al, 5
movzx eax, al
bt ecx, eax
jb 0x7fb1dc
mov edx, fcn.007ad450
mov eax, fcn.007ad450
xor ecx, ecx
and edx, 1
xor edx, eax
mov eax, dword [0xbb7ce0]
cmp edx, 0xffffffff
sete cl
xor ecx, 0x38ecf235
or ecx, 0x880
xor eax, ecx
mov dword [0xbb7ce0], eax
not eax
mov edx, dword [0xbb7ce4]
imul eax, ecx
and cl, 5
lea ebx, [eax + eax]
xor edx, eax
shr eax, 0x1e
mov dword [0xbb7ce4], edx
or ebx, eax
not edx
mov eax, dword [0xbb7ce8]
imul edx, ebx
lea ebx, [edx*4]
xor eax, edx
shr edx, 0x1d
mov dword [0xbb7ce8], eax
or ebx, edx
not eax
mov edx, dword [0xbb7cec]
imul eax, ebx
lea ebx, [eax*8]
xor edx, eax
shr eax, 0x1c
mov dword [0xbb7cec], edx
or ebx, eax
not edx
mov eax, dword [0xbb7cf0]
imul edx, ebx
mov ebx, edx
shl ebx, 4
xor eax, edx
shr edx, 0x1b
mov dword [0xbb7cf0], eax
or edx, ebx
not eax
mov ebx, dword [esp]
imul eax, edx
mov dl, 1
xor dword [0xbb7cf4], eax
shl dl, cl
or byte [0xbb7cfb], dl
mov ecx, fcn.007ad450
mov eax, fcn.007ad450
and ecx, 1
xor ecx, eax
mov al, 0xfe
cmp ecx, 0xffffffff
sete cl
not cl
and cl, 5
xor cl, 7
rol al, cl
and byte [0xbb7cfb], al
cmp dword [esp + 0xc], 0
mov eax, 0xc26bb2
mov ecx, 0xbb7cc0
cmovne ecx, eax
push dword [ebx + 0x10]
push ecx
push 0xbb7ce0
push 1
push edi
call fcn.007fdcc0
add esp, 0x14
cmp byte [ebp], 0x88
mov ebx, 1
jne 0x7fb23c
mov eax, dword [esp]
mov eax, dword [eax + 0x1c]
mov ebx, dword [eax]
mov eax, dword [edi + 0x2c]
lea ecx, [esp + 0x10]
xor edx, edx
inc eax
push eax
call fcn.007fdd40
add esp, 4
add dword [edi + 0x2c], ebx
mov dword [esp + 8], esi
cmp byte [ebp], 0x88
jne 0x7fb286
mov byte [esp + 0x10], 0xa
mov ecx, esi
mov edx, 0x48
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ebx
lea ebx, [ebx + eax - 1]
push ebx
push eax
push 0
call fcn.007d10f0
add esp, 0xc
jmp 0x7fb2a0
mov byte [esp + 0x10], 3
mov ecx, esi
mov edx, 0x45
push dword [esp + 0x14]
push 0
call fcn.007d10d0
add esp, 8
mov ebx, dword [esp]
mov esi, dword [edi]
cmp dword [ebx + 0x3c], 0
je 0x7fb424
mov edx, 0x799500
mov dword [esp + 4], edi
mov edi, esi
imul edx, edx
movzx ecx, byte [0xbb7d03]
and edx, 3
cmp edx, 2
sete al
not al
and al, 3
movzx eax, al
bt ecx, eax
jb 0x7fb3ad
mov al, byte [0xbb7d03]
cmp edx, 2
mov ah, 1
sete cl
not cl
and cl, 3
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7d03], ah
jne 0x7fb2e2
mov ecx, 0x799500
movzx eax, al
imul ecx, ecx
and ecx, 3
cmp ecx, 2
sete dl
not dl
and dl, 3
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x7fb33f
cmp ecx, 2
movzx edx, byte [0xbb7d03]
sete al
not al
and al, 3
movzx eax, al
bt edx, eax
jae 0x7fb324
jmp 0x7fb3ad
cmp ecx, 2
movzx ecx, byte [0xbb7d03]
sete al
not al
and al, 3
movzx eax, al
bt ecx, eax
jb 0x7fb38a
mov eax, 0x799500
xor ecx, ecx
imul eax, eax
and eax, 3
cmp eax, 2
mov al, 1
sete cl
xor ecx, 0xaf8af1b
add ecx, 0xc8
xor dword [0xbb7cfc], ecx
and cl, 7
shl al, cl
or byte [0xbb7d03], al
mov eax, 0x799500
imul eax, eax
and eax, 3
cmp eax, 2
mov al, 0xfe
sete cl
not cl
and cl, 3
xor cl, 7
rol al, cl
and byte [0xbb7d03], al
mov esi, ebp
mov ecx, edi
mov edx, 0x98
push 0xbb7cfc
call fcn.007e44c0
add esp, 4
test eax, eax
jne 0x7fb3ce
mov ebx, dword [esp]
xor ebp, ebp
jmp 0x7fb3fe
mov ebx, dword [esp]
mov byte [eax + 1], 0x43
mov ebp, eax
mov ecx, edi
mov eax, dword [ebx + 0x3c]
mov edx, dword [eax + 0xc]
push 0
call fcn.007fc000
add esp, 4
mov ecx, dword [esp + 4]
mov edx, 0x34
push ebp
push eax
call fcn.007db7a0
add esp, 8
mov ebp, eax
mov eax, dword [ebx + 0x3c]
mov ecx, edi
mov edx, dword [eax + 0xc]
call fcn.007cb9e0
mov eax, dword [ebx + 0x3c]
mov edi, dword [esp + 4]
mov dword [eax + 0xc], ebp
mov ebp, esi
mov esi, dword [esp + 8]
lea eax, [esp + 0x10]
jmp 0x7fb591
mov edx, fcn.007882e0
xor eax, eax
imul edx, edx
and edx, 3
cmp edx, 1
seta al
mov ecx, eax
xor ecx, 1
lea eax, [eax + ecx*2 + 6]
movzx ecx, byte [0xbb7d0b]
and al, 7
movzx eax, al
bt ecx, eax
jb 0x7fb560
mov al, byte [0xbb7d0b]
xor ebx, ebx
cmp edx, 1
mov ah, 1
seta bl
mov ecx, ebx
xor ecx, 1
lea ecx, [ebx + ecx*2 + 6]
and cl, 7
xor cl, 7
shl ah, cl
or ah, al
lock cmpxchg byte [0xbb7d0b], ah
jne 0x7fb45a
mov ecx, fcn.007882e0
xor edx, edx
movzx eax, al
imul ecx, ecx
and ecx, 3
cmp ecx, 1
seta dl
mov ebx, edx
xor ebx, 1
lea edx, [edx + ebx*2 + 6]
and dl, 7
xor dl, 7
movzx edx, dl
bt eax, edx
jae 0x7fb4d8
mov ebx, dword [esp]
xor eax, eax
cmp ecx, 1
seta al
mov edx, eax
xor edx, 1
lea eax, [eax + edx*2 + 6]
movzx edx, byte [0xbb7d0b]
and al, 7
movzx eax, al
bt edx, eax
jae 0x7fb4b1
jmp 0x7fb560
xor eax, eax
cmp ecx, 1
movzx edx, byte [0xbb7d0b]
seta al
mov ecx, eax
xor ecx, 1
lea eax, [eax + ecx*2 + 6]
and al, 7
movzx eax, al
bt edx, eax
jb 0x7fb531
mov ecx, fcn.007882e0
xor eax, eax
imul ecx, ecx
and ecx, 3
cmp ecx, 1
seta al
mov ecx, eax
not ecx
and ecx, 0x811
lea ecx, [eax + ecx*2 - 0x392f3d12]
mov al, 1
xor dword [0xbb7d04], ecx
and cl, 7
shl al, cl
or byte [0xbb7d0b], al
mov eax, fcn.007882e0
xor ecx, ecx
imul eax, eax
and eax, 3
cmp eax, 1
seta cl
mov eax, ecx
xor eax, 1
lea ecx, [ecx + eax*2 + 6]
mov al, 0xfe
and cl, 7
xor cl, 7
rol al, cl
and byte [0xbb7d0b], al
mov ebx, dword [esp]
mov ecx, esi
mov edx, 0x98
push 0xbb7d04
call fcn.007e44c0
add esp, 4
mov ecx, edi
mov edx, 0x92
push 0
push eax
call fcn.007db7a0
add esp, 8
mov esi, dword [esp + 8]
mov dword [ebx + 0x3c], eax
lea eax, [esp + 0x10]
mov dword [ebx + 8], 0
mov ecx, edi
mov edx, ebx
push eax
call fcn.007e17a0
add esp, 4
xor ebx, ebx
test eax, eax
jne 0x7fb5f1
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
test edx, edx
mov dword [ebp + 0x1c], ebx
je 0x7fb5f1
mov ecx, esi
call fcn.007f75c0
mov ecx, esi
mov edx, 0x41
push dword [ebp + 0x30]
call fcn.007f9600
add esp, 4
mov ecx, esi
call fcn.007fdcb0
mov edx, dword [ebp + 0x2c]
dec eax
mov ecx, esi
dec edx
push eax
call fcn.007fdd60
add esp, 4
mov ecx, edi
call fcn.007fdd70
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.00989fe9
mov eax, ebx
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret