Function at 0x40b1fd
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x54
mov dword [ebp - 0x10], 0x6077240
mov bx, 0x88
mov esi, 3
mov eax, dword [ebp - 0x10]
cmp eax, 0xfd6da9c3
jle 0x40b26f
cmp eax, 0x43168860
jg 0x40b2d1
cmp eax, 0x1407fa63
jle 0x40b3bb
cmp eax, 0x335a7ea8
jle 0x40b4ce
cmp eax, 0x39d9b856
jg 0x40b6ef
cmp eax, 0x335a7ea9
je 0x40b866
cmp eax, 0x384e92a9
jne 0x40b216
mov eax, dword [ebp - 0x20]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0xcaa4148a
jmp 0x40b216
cmp eax, 0xcaa41489
jg 0x40b322
cmp eax, 0xb3437b7b
jle 0x40b403
cmp eax, 0xbcdb6d0d
jle 0x40b51d
cmp eax, 0xbf7c7109
jg 0x40b74c
cmp eax, 0xbcdb6d0e
je 0x40b895
cmp eax, 0xbe087747
jne 0x40b216
mov eax, dword [ebp - 0x18]
shr eax, 3
imul eax, eax, 0x2b90
add eax, 0xffffa0e1
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcf88fb80
jmp 0x40b216
cmp eax, 0x626ecbad
jle 0x40b465
cmp eax, 0x790dee28
jle 0x40b556
cmp eax, 0x7b72d525
jg 0x40b79f
cmp eax, 0x790dee29
je 0x40b8e2
cmp eax, 0x79e197de
jne 0x40b216
mov eax, dword [ebp - 0x14]
shl eax, 0x11
add eax, 0xff78d7c5
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x7e5641a6
jmp 0x40b216
cmp eax, 0xdafe6372
jg 0x40b370
cmp eax, 0xd015d6eb
jle 0x40b5ab
cmp eax, 0xd53ceb74
jle 0x40b80a
cmp eax, 0xd53ceb75
je 0x40b94e
cmp eax, 0xd9530635
jne 0x40b216
mov eax, dword [ebp - 0x14]
shr eax, 3
imul eax, eax, 0x8bc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x626ecbae
jmp 0x40b216
cmp eax, 0xe3393dea
jg 0x40b5d8
cmp eax, 0xdca52b5f
jle 0x40b847
cmp eax, 0xdca52b60
je 0x40b975
cmp eax, 0xe0f38596
jne 0x40b216
mov ecx, dword [ebp - 0x14]
shl ecx, 5
add ecx, 0x56
mov dword [ebp - 0x14], ecx
mov eax, 0xd53ceb75
cmp ecx, 0x7c
jge 0x40b83d
jmp 0x40bdb5
cmp eax, 0x286f53c
jg 0x40b629
cmp eax, 0xfd6da9c4
je 0x40b98e
cmp eax, 0xfdedf101
je 0x40b9d9
cmp eax, 0xfe8c71cd
jne 0x40b216
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x7e5641a6
jmp 0x40b216
cmp eax, 0xa4de8011
jg 0x40b680
cmp eax, 0x8142317f
je 0x40b9f3
cmp eax, 0x84cdc938
je 0x40b9ff
cmp eax, 0x9bdc7603
jne 0x40b216
imul eax, dword [ebp - 0x18], 0xdd
lea ecx, [eax + 0x7c5]
imul ecx, ecx
imul edx, ecx, 0x2b8f
dec edx
add eax, 0x6bc
mov dword [ebp - 0x18], eax
mov eax, 0x511e79a0
cmp ecx, edx
je 0x40bdb5
mov eax, 0xd388b761
jmp 0x40bdb5
cmp eax, 0x511e799f
jg 0x40b6ad
cmp eax, 0x43168861
je 0x40ba2f
cmp eax, 0x49afe2d4
je 0x40ba4d
cmp eax, 0x50499cd6
jne 0x40b216
mov edi, dword [ebp - 0x14]
shl edi, 8
add edi, 0xffffff38
mov dword [ebp - 0x14], edi
push 0x5351
push edi
push 0x6069
push 0x6002
call fcn.0040bf30
add esp, 0x10
mov eax, 0xcaa4148a
cmp edi, 0xd1
jb 0x40bb43
jmp 0x40bdb5
cmp eax, 0x1407fa64
je 0x40ba98
cmp eax, 0x27568899
je 0x40bacf
cmp eax, 0x2adbcb0e
jne 0x40b216
imul ecx, dword [ebp - 0x14], 0x5850
add ecx, 0xffff9239
shr ecx, 0xc
mov eax, 0x511e79a0
and ecx, 0xffc00
mov dword [ebp - 0x14], ecx
je 0x40bdb5
mov eax, 0xd9530635
jmp 0x40bdb5
cmp eax, 0xb3437b7c
je 0x40baed
cmp eax, 0xba98cedd
je 0x40bb1a
cmp eax, 0xbaec7ba3
jne 0x40b216
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xbe087747
jmp 0x40b216
cmp eax, 0x626ecbae
je 0x40bb4d
cmp eax, 0x6492dbe2
je 0x40bb83
cmp eax, 0x75900692
jne 0x40b216
imul eax, dword [ebp - 0x14], 0x1c8
shr eax, 0xf
imul ecx, eax, 0xaa
add ecx, 0xffffff12
mov dword [ebp - 0x14], ecx
mov eax, 0x50499cd6
cmp ecx, 0xf0
jb 0x40bdb5
mov eax, 0xe0f38596
jmp 0x40bdb5
cmp eax, 0xcaa4148a
je 0x40bb9d
cmp eax, 0xce747415
je 0x40bbb2
cmp eax, 0xcf88fb80
jne 0x40b216
mov dword [ebp - 0x10], 0xd53ceb75
jmp 0x40b216
cmp eax, 0xe3393deb
je 0x40bbe3
cmp eax, 0xf22cb5b3
je 0x40bc08
cmp eax, 0xf67daab0
jne 0x40b216
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xb]
imul ecx, ecx
imul edx, ecx, 0x58f1
lea eax, [eax + eax*2]
add eax, 0xfffffdbd
dec edx
shr eax, 0xf
mov dword [ebp - 0x18], eax
mov eax, 0x6077240
cmp ecx, edx
jne 0x40b795
jmp 0x40bdb5
cmp eax, 0x286f53d
je 0x40bc1d
cmp eax, 0x53a6ead
je 0x40bc50
cmp eax, 0x6077240
jne 0x40b216
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x8c
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xf67daab0
jmp 0x40b216
cmp eax, 0xa4de8012
je 0x40bc5f
cmp eax, 0xb1d9934d
je 0x40bc91
cmp eax, 0xb295b934
jne 0x40b216
mov dword [ebp - 0x10], 0x335a7ea9
jmp 0x40b216
cmp eax, 0x511e79a0
je 0x40bcbf
cmp eax, 0x572b8419
je 0x40bce8
cmp eax, 0x5acd085b
jne 0x40b216
push dword [ebp - 0x28]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x7b72d526
jmp 0x40b216
cmp eax, 0x39d9b857
je 0x40bcf7
cmp eax, 0x3ceefc31
jne 0x40b216
push 5
push 0x465608
push 0x44
push dword [ebp - 0x3c]
call fcn.0040bf30
add esp, 0x10
push 0x8a
push dword [ebp - 0x3c]
push dword [ebp - 0x30]
call fcn.00443950
add esp, 0xc
mov eax, dword [ebp - 0x34]
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
add eax, 0xe
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x790dee29
jmp 0x40b216
cmp eax, 0xbf7c710a
je 0x40bd3e
cmp eax, 0xc0197dfa
jne 0x40b216
mov edi, dword [ebp - 0x14]
mov eax, 0x87
add edi, eax
mov dword [ebp - 0x14], edi
push 0x3f52
push 0x2fc3
push 0x2267
push edi
call fcn.0040be00
add esp, 0x10
mov eax, 0xfe8c71cd
cmp edi, 0x15
jge 0x40bdb5
mov eax, 0x39d9b857
jmp 0x40bdb5
cmp eax, 0x7b72d526
je 0x40bd8b
cmp eax, 0x7e5641a6
jne 0x40b216
push eax
sub esp, 0x10
mov edi, esp
mov byte [edi + 0x10], 0
mov eax, dword [0x471233]
mov dword [edi + 0xc], eax
mov eax, dword [0x47122f]
mov dword [edi + 8], eax
mov eax, dword [0x47122b]
mov dword [edi + 4], eax
mov eax, dword [0x471227]
mov dword [edi], eax
push 4
push 0x471237
push 0x10
push edi
call fcn.0040be00
add esp, 0x10
push 0x11
push edi
push dword [ebp - 0x28]
call fcn.00443950
add esp, 0xc
mov dword [ebp - 0x10], 0x6492dbe2
jmp 0x40b216
cmp eax, 0xd015d6ec
jne 0x40bdbd
mov eax, dword [ebp - 0x14]
shl eax, 6
add eax, 0x1800
and eax, 0xfffffe00
imul edi, eax, 0x65
mov dword [ebp - 0x14], edi
call fcn.0040b1fd
mov eax, 0x5acd085b
test edi, edi
je 0x40bdb5
mov eax, 0x511e79a0
jmp 0x40bdb5
cmp eax, 0xdafe6373
jne 0x40bdc9
mov eax, dword [ebp - 0x54]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0xbaec7ba3
jmp 0x40b216
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x2c]
push 0
push dword [ebp - 0x24]
push esi
push esi
push 0x50000018
call eax
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 8
mov eax, 0x9bdc7603
je 0x40bdb5
mov eax, 0x286f53d
jmp 0x40bdb5
imul edi, dword [ebp - 0x14], 0x24ca8
add edi, 0xa7f58
mov eax, edi
shr eax, 0xe
mov dword [ebp - 0x14], eax
push 0x288c
push eax
push 0x18ce
push 0xbaf
call fcn.0040be00
add esp, 0x10
call fcn.0040b1fd
mov eax, 0x75900692
cmp edi, 0x1c000
jb 0x40bdb5
mov eax, 0x6077240
jmp 0x40bdb5
mov eax, dword [ebp - 0x50]
mov word [eax], 0
mov eax, dword [ebp - 0x40]
movzx ecx, word [0x46561e]
mov word [eax + 0xc], cx
mov ecx, dword [0x46561a]
mov dword [eax + 8], ecx
mov ecx, dword [0x465616]
mov dword [eax + 4], ecx
mov ecx, dword [0x465612]
mov dword [eax], ecx
push 4
push 0x465620
push 7
push dword [ebp - 0x40]
call fcn.0040bf30
add esp, 0x10
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov dword [ebp - 0x10], 0xa4de8012
jmp 0x40b216
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov dword [eax + 8], 0x34
mov dword [ebp - 0x10], 0xfdedf101
jmp 0x40b216
mov eax, dword [ebp - 0x1c]
mov word [eax], bx
mov eax, dword [ebp - 0x1c]
mov word [eax + 2], bx
mov dword [ebp - 0x10], 0x1407fa64
jmp 0x40b216
mov edi, dword [ebp - 0x14]
shl edi, 4
add edi, 0xfffffedf
mov dword [ebp - 0x14], edi
push 0xd8e
push 0x5bfc
push 0x528d
push edi
call fcn.0040bf30
add esp, 0x10
push edi
push 0x2d28
push 0x3589
push 0x1ef1
call fcn.0040bf30
add esp, 0x10
mov dword [ebp - 0x10], 0x3ceefc31
jmp 0x40b216
mov eax, dword [ebp - 0x18]
shl eax, 0x17
or eax, 0x350000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb295b934
jmp 0x40b216
mov dword [ebp - 0x10], 0xe3393deb
jmp 0x40b216
imul ecx, dword [ebp - 0x18], 0xed
mov eax, ecx
shr eax, 0xc
imul ecx, ecx
imul edx, ecx, 0x69a3
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x626ecbae
cmp edx, ecx
je 0x40bdb5
mov eax, 0x384e92a9
jmp 0x40bdb5
imul eax, dword [ebp - 0x18], 0x74000
add eax, 0xfd737fe1
shr eax, 5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x3ceefc31
jmp 0x40b216
mov eax, dword [ebp - 0x14]
mov ecx, 0x13d
add eax, ecx
shr eax, 0x15
imul edi, eax, 0x67
mov dword [ebp - 0x14], edi
call fcn.0040a998
push 0x498b
push 0x5b72
push edi
push 0x4644
call fcn.0040be00
add esp, 0x10
mov eax, 0xfd6da9c4
cmp edi, 0xb3
jb 0x40bdb5
mov eax, 0x2adbcb0e
jmp 0x40bdb5
mov eax, dword [ebp - 0x18]
mov ecx, 0xf9
add eax, ecx
mov ecx, eax
shr ecx, 1
and ecx, 0xfffffff8
imul eax, eax
lea ecx, [ecx + ecx*4]
imul edx, eax, 0x67c1
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x49afe2d4
cmp eax, edx
je 0x40bac7
mov ecx, 0xf22cb5b3
mov dword [ebp - 0x10], ecx
jmp 0x40b216
mov eax, dword [ebp - 0x14]
shl eax, 0x10
mov dword [ebp - 0x14], eax
mov eax, 0x3ceefc31
je 0x40bdb5
mov eax, 0x626ecbae
jmp 0x40bdb5
mov edi, dword [ebp - 0x14]
mov eax, 0x14a
add edi, eax
mov dword [ebp - 0x14], edi
call fcn.0040b1fd
mov eax, 0x6077240
cmp edi, 0xb5
jb 0x40bdb5
mov eax, 0xfe8c71cd
jmp 0x40bdb5
mov ecx, dword [ebp - 0x18]
mov eax, 0xe1
add ecx, eax
mov eax, ecx
shl eax, 0x1c
imul ecx, ecx
imul edx, ecx, 0x4b17
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x790dee29
cmp edx, ecx
je 0x40bdb5
mov eax, 0xdafe6373
jmp 0x40bdb5
push 5
push 0x471222
push 9
push dword [ebp - 0x38]
call fcn.0040be00
add esp, 0x10
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
movzx eax, word [eax + 8]
mov word [ebp - 0x58], ax
mov dword [ebp - 0x10], 0xfe8c71cd
jmp 0x40b216
mov eax, dword [ebp - 0x18]
shl eax, 7
and eax, 0xffff80
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5acd085b
jmp 0x40b216
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xba98cedd
jmp 0x40b216
mov eax, 0xc0000000
mov dword [ebp - 0x14], eax
push 0x5e4
push 0xfde
push 0x4df8
push eax
call fcn.0040be00
add esp, 0x10
call fcn.0040a998
mov dword [ebp - 0x10], 0x6077240
jmp 0x40b216
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, 0x88
add eax, ecx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x511e79a0
jmp 0x40b216
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0x84cdc938
jmp 0x40b216
mov eax, dword [ebp - 0x18]
mov ecx, 0x123
add eax, ecx
mov ecx, eax
imul ecx, eax
shr eax, 3
imul edx, ecx, 0x2c0d
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xbcdb6d0e
cmp edx, ecx
je 0x40bdb5
mov eax, 0xdb94eb49
jmp 0x40bdb5
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xdca52b60
jmp 0x40b216
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x98]
imul ecx, ecx
imul edx, ecx, 0x3ebd
add eax, 0xffffff45
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x27568899
cmp edx, ecx
je 0x40bdb5
mov eax, 0x572b8419
jmp 0x40bdb5
mov eax, dword [ebp - 0x14]
add eax, eax
and eax, 0xfffffff0
lea ecx, [eax + eax*4]
mov eax, ecx
shr eax, 0xc
mov dword [ebp - 0x14], eax
mov eax, 0x3ceefc31
cmp ecx, 0x9b000
jae 0x40bdb5
mov eax, 0xdca52b60
jmp 0x40bdb5
mov eax, dword [ebp - 0x4c]
mov word [eax], 0
push 0x88
push 0x465580
push dword [ebp - 0x3c]
call fcn.00443950
add esp, 0xc
mov dword [ebp - 0x10], 0x43168861
jmp 0x40b216
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x53a6ead
jmp 0x40b216
push eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov byte [eax + 9], 0
mov eax, dword [ebp - 0x38]
mov cl, byte [0x471221]
mov byte [eax + 8], cl
mov ecx, dword [0x47121d]
mov dword [eax + 4], ecx
mov ecx, dword [0x471219]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x626ecbae
jmp 0x40b216
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff54
add eax, ecx
shr eax, 5
imul edi, eax, 0xb6
add edi, 0x114fa
mov dword [ebp - 0x14], edi
push 0x54cc
push 0x6118
push edi
push 0x2802
call fcn.0040bf30
add esp, 0x10
call fcn.0040a998
mov eax, 0xb3437b7c
cmp edi, 0xab
jl 0x40bdb5
mov eax, 0xc0197dfa
jmp 0x40bdb5
mov eax, dword [ebp - 0x18]
mov ecx, 0xa8
add eax, ecx
mov ecx, eax
imul ecx, eax
shl eax, 0xa
imul edx, ecx, 0x7eb
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xfe8c71cd
cmp ecx, edx
je 0x40bdb5
mov eax, 0x8142317f
mov dword [ebp - 0x10], eax
jmp 0x40b216
cmp eax, 0xd388b761
je 0x40bddc
jmp 0x40b216
cmp eax, 0xdb94eb49
jne 0x40b216
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret