Function at 0x441000
Capabilities:
Terminate process

Disassembly:
call fcn.004625f2
call fcn.0046280a
call fcn.00461d6f
call fcn.0045b675
mov ecx, 0x1e
mov edx, 0xd6
call fcn.00462889
mov dword [ebp + 0x1c], 0x44102f
jmp 0x452d24
mov ecx, dword [ebp]
cmp ecx, 0x40000000
jl 0x44a8f3
cmp byte [ebx + ecx*4 - 1], 0x82
je 0x44a8fd
mov ecx, 0xbaa
call fcn.00462a14
mov edi, dword [ebp - 4]
cmp edi, 0x40000000
jne 0x44a918
lea eax, [ebp - 4]
xor edx, edx
push 0x44a918
push eax
jmp fcn.0045fdca
mov eax, dword [ebp - 8]
cmp eax, 0x40000000
jne 0x44a92b
mov dword [ebp - 8], 1
jmp 0x44a937
jl 0x44a937
mov ecx, 0xbac
call fcn.00462a14
lea eax, [ebp - 0xc]
mov edx, 0
push 0x44a94d
push eax
mov edi, dword [ebp - 0xc]
jmp fcn.0045fdca
mov esi, dword [0x402ce0]
test esi, esi
jne 0x452eb6
xor ecx, ecx
call fcn.00463805
mov ecx, 7
mov edx, 0x9e
call fcn.00462889
mov edi, dword [0x402364]
mov dword [ebp], edi
add dword [ebx + edi*4 - 8], 1
mov dword [ebp + 0x1c], 0x452d62
jmp 0x458058
mov ecx, 5
mov edx, pe_nt_image_headers32
call fcn.00462889
mov edi, dword [0x402d00]
mov dword [ebp], edi
add dword [ebx + edi*4 - 8], 1
mov dword [ebp + 0x1c], 0x452edf
jmp 0x4599d1
mov esi, dword [ebp]
cmp esi, 0x40000000
jl 0x45806a
test byte [ebx + esi*4 - 1], 0x80
jne 0x458074
mov ecx, 0x759
call fcn.00462a14
mov edi, dword [ebp - 4]
cmp edi, 0x40000000
jne 0x458088
mov dword [ebp - 4], 1
jmp 0x458094
jl 0x458094
mov ecx, 0x75a
call fcn.00462a14
mov dword [ebp - 8], ebx
cmp byte [ebx + esi*4 - 1], 0x82
jne 0x4580f6
mov ecx, 5
mov edx, 0x752
call fcn.00462889
mov edi, dword [ebp + 0x14]
mov eax, dword [edi]
xor ebx, ebx
cmp eax, 0x40000000
jl 0x4580c5
add dword [ebx + eax*4 - 8], 1
cmp eax, 0x759
mov dword [ebp], eax
mov dword [ebp + 0x1c], 0x4580d4
jmp 0x458236
mov edi, dword [ebx + esi*4 - 0xc]
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], 1
cmp edi, 1
jl 0x4581b0
mov edi, dword [ebp - 0x10]
lea ecx, [ebp - 0x14]
mov esi, dword [ebp]
mov edx, 0x759
mov al, 0
call fcn.00460c6c
mov eax, dword [ebp - 0x14]
cmp eax, 0x40000000
jl 0x458136
cmp byte [ebx + eax*4 - 1], 0x82
je 0x458140
mov ecx, 0x75e
call fcn.00462a14
mov ecx, 5
mov edx, 0x752
call fcn.00462889
mov edi, dword [ebp + 0x14]
mov eax, dword [edi - 0x14]
xor ebx, ebx
cmp eax, 0x40000000
jl 0x458168
add dword [ebx + eax*4 - 8], 1
cmp eax, 0x75e
mov dword [ebp], eax
mov dword [ebp + 0x1c], 0x458177
jmp 0x458236
mov ecx, dword [ebp - 8]
cmp ecx, 0
jne 0x45822b
mov edi, dword [ebp - 4]
test edi, edi
je 0x45822b
mov edi, dword [0x4022f4]
mov eax, dword [ebp]
mov esi, 0x2a8
mov edx, 0x759
call fcn.0045f5a6
je 0x45822b
lea edx, [ebp - 0x18]
mov edi, 0x402b90
mov ecx, ebp
call fcn.0045f9ec
mov ecx, 4
mov edx, 0x189
call fcn.00462889
mov edi, dword [ebp + 0x14]
mov eax, dword [edi - 0x18]
mov dword [edi - 0x18], 0x40000000
cmp eax, 0x40000000
jne 0x458215
mov esi, 0x760
call fcn.004623cb
mov dword [ebp], eax
mov dword [ebp - 8], 2
mov dword [ebp + 0x1c], 0x45822b
jmp 0x44a8e1
mov eax, dword [ebp - 8]
mov dword [ebp - 8], ebx
jmp fcn.00462916
mov eax, dword [ebp]
push ebx
shl eax, 2
push eax
call dword [sym.imp.kernel32.dll_LoadLibraryA]
push eax
lea edi, [ebp - 4]
fild qword [esp]
add esp, 8
call fcn.00463511
lea edi, [ebp - 8]
call fcn.00463468
mov eax, dword [ebp - 8]
mov edx, 0x755
call fcn.0045f5d3
jne 0x45848f
lea eax, [ebp - 0xc]
mov edx, 1
push 0x45829d
push eax
mov esi, dword [0x402b8c]
cmp esi, 0x40000000
jl 0x458294
add dword [ebx + esi*4 - 8], 1
cmp eax, 0x756
push esi
mov edi, dword [ebp - 0xc]
jmp fcn.0045fdca
mov esi, dword [ebp - 4]
cmp esi, 0x40000000
jne 0x4584a4
mov esi, 0x754
call fcn.004623cb
mov eax, esi
mov dword [ebp - 4], ebx
jmp fcn.00462916
mov esi, dword [ebp]
cmp esi, 0x40000000
jl 0x4599e3
test byte [ebx + esi*4 - 1], 0x80
jne 0x4599ed
mov ecx, 0x867
call fcn.00462a14
mov edi, dword [ebp - 4]
cmp edi, 0x40000000
jne 0x4599fd
mov dword [ebp - 4], ebx
jmp 0x459a09
jl 0x459a09
mov ecx, 0x868
call fcn.00462a14
mov ecx, dword [ebx + esi*4 - 0xc]
mov dword [ebp - 0xc], ecx
lea edi, [ebp - 0x10]
mov eax, dword [0x40201c]
call fcn.0045eee8
mov ecx, 3
mov edx, 0x7c
call fcn.00462889
mov edi, dword [ebp + 0x14]
mov eax, dword [edi - 0x10]
mov dword [ebp], eax
mov edi, dword [ebp + 0x14]
mov eax, dword [edi - 4]
mov dword [ebp - 4], eax
mov dword [ebp + 0x1c], 0x459a4a
jmp 0x459af8
mov edi, dword [ebp]
cmp edi, 0x40000000
jl 0x459b0d
mov ecx, 0x85e
call fcn.00462a14
mov esi, dword [ebp - 4]
cmp esi, 0x40000000
jne 0x459b1d
mov dword [ebp - 4], ebx
jmp 0x459b29
jl 0x459b29
mov ecx, 0x85f
call fcn.00462a14
cmp edi, 0
jge 0x459b3a
mov ecx, 1
mov al, 0x25
jmp 0x463ade
mov ecx, dword [ebp]
lea edi, [ebp - 8]
mov edx, dword [ebp + 0xc]
call fcn.00463761
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x459b87
xor edi, edi
mov eax, dword [ebp - 8]
mov esi, 0x19
mov edx, 0x860
call fcn.0045f5a6
je 0x459b87
mov esi, dword [ebp - 8]
cmp esi, 0x40000000
jne 0x459b7a
mov esi, 0x860
call fcn.004623cb
lea edi, [ebp - 8]
mov eax, dword [0x402c38]
call fcn.00462bf5
mov edi, dword [ebp - 8]
cmp edi, 0x40000000
jne 0x459b9c
mov esi, 0x860
call fcn.004623cb
mov eax, edi
mov dword [ebp - 8], ebx
jmp fcn.00462916
mov edx, dword [ebp + 0xc]
mov ebp, dword [ebp + 0x14]
sub ecx, 1
jg 0x463ade
sub edx, 1
mov ecx, esi