Function at 0x40e13d
Capabilities:
Get common file path
Terminate process

Disassembly:
push 0x250
mov eax, 0x4b2b8c
call fcn.0048cd14
mov eax, dword [ebp + 8]
mov dword [ebp - 0x258], eax
xor eax, eax
xor ebx, ebx
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
mov byte [ebp - 0x219], bl
call fcn.0048ad80
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push ebx
push ebx
push 0x24
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push ebx
push 1
call fcn.00413009
pop ecx
pop ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x254], eax
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x40e1b4
lea ecx, [ebp - 0x238]
mov dword [eax], ecx
jmp 0x40e1b6
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x238], eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x238]
call fcn.0040df6d
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x22c]
mov ecx, 0x22c
cdq
idiv ecx
xor edi, edi
test eax, eax
jbe 0x40e3c0
push edi
lea esi, [ebp - 0x238]
call fcn.00410fb4
lea esi, [eax + 8]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esi], eax
je 0x40e3a3
push ebx
push 1
call fcn.00413009
pop ecx
pop ecx
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x25c], eax
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x40e24e
lea ecx, [ebp - 0x250]
mov dword [eax], ecx
jmp 0x40e250
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x23c], ebx
mov byte [ebp - 4], 7
push edi
lea esi, [ebp - 0x238]
call fcn.00410fb4
push dword [eax + 8]
lea esi, [ebp - 0x250]
call fcn.0040e06d
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x244]
pop ecx
cdq
mov ecx, 0x428
idiv ecx
cmp eax, ebx
je 0x40e369
ja 0x40e2b2
call fcn.004891d9
mov eax, dword [ebp - 0x244]
add eax, 0x220
push eax
lea ecx, [ebp - 0x220]
call fcn.00403c8f
mov byte [ebp - 4], 8
lea eax, [ebp - 0x218]
push eax
push str.SystemRoot
lea eax, [ebp - 0x220]
push eax
call fcn.0040ff2c
push 0x4c5c28
push 0x4c6874
lea eax, [ebp - 0x220]
push eax
call fcn.0040ff2c
lea ecx, [ebp - 0x220]
call fcn.00403d53
push dword [ebp - 0x258]
lea ecx, [ebp - 0x220]
call fcn.0040b130
test eax, eax
jne 0x40e35a
push edi
lea esi, [ebp - 0x238]
call fcn.00410fb4
push dword [eax + 8]
push ebx
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x40e35a
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x219], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x220]
call fcn.0040392e
mov byte [ebp - 4], 9
cmp dword [ebp - 0x244], ebx
je 0x40e381
push dword [ebp - 0x244]
call fcn.0048867e
pop ecx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x23c], ebx
mov byte [ebp - 4], 3
lea eax, [ebp - 0x250]
push eax
call fcn.00408d67
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x22c]
mov ecx, 0x22c
cdq
idiv ecx
inc edi
cmp edi, eax
jb 0x40e209
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x22c], ebx
je 0x40e3db
push dword [ebp - 0x22c]
call fcn.0048867e
pop ecx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x238]
push eax
call fcn.00408d67
mov al, byte [ebp - 0x219]
call fcn.0048cd97
ret