Function at 0x40b528
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov dword [ebp - 0x10], 0x6077240
mov ebx, 3
mov eax, dword [ebp - 0x10]
cmp eax, 0xfd6da9c3
jg 0x40b59c
cmp eax, 0xcaa41489
jg 0x40b5f1
cmp eax, 0xb3437b7b
jle 0x40b6b6
cmp eax, 0xbcdb6d0d
jle 0x40b860
cmp eax, 0xbf7c7109
jg 0x40ba8b
cmp eax, 0xbcdb6d0e
je 0x40bacd
cmp eax, 0xbe087747
jne 0x40b540
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xb295b934
jmp 0x40b540
cmp eax, 0x3ceefc30
jg 0x40b653
cmp eax, 0x1407fa63
jg 0x40b6fd
cmp eax, 0x286f53c
jg 0x40b896
cmp eax, 0xfd6da9c4
je 0x40bb05
cmp eax, 0xfdedf101
je 0x40bb3e
cmp eax, 0xfe8c71cd
jne 0x40b540
mov dword [ebp - 0x18], 0xb27b0000
mov dword [ebp - 0x10], 0x626ecbae
jmp 0x40b540
cmp eax, 0xdafe6372
jg 0x40b78f
cmp eax, 0xd388b760
jg 0x40b8ca
cmp eax, 0xcf88fb7f
jle 0x40baae
cmp eax, 0xcf88fb80
je 0x40bb65
cmp eax, 0xd015d6ec
jne 0x40b540
imul ecx, dword [ebp - 0x14], 0x10c00
add ecx, 0xe400
mov dword [ebp - 0x14], ecx
mov eax, 0xbe087747
cmp ecx, 0xc8
jge 0x40bcce
mov eax, 0xbcdb6d0e
jmp 0x40bcce
cmp eax, 0x626ecbad
jg 0x40b7ca
cmp eax, 0x511e799f
jg 0x40b933
cmp eax, 0x3ceefc31
je 0x40bb9a
cmp eax, 0x43168861
je 0x40bbd0
cmp eax, 0x49afe2d4
jne 0x40b540
mov esi, dword [ebp - 0x14]
mov eax, esi
shr eax, 7
add eax, 4
shr eax, 0xf
mov dword [ebp - 0x14], eax
call fcn.0040a878
mov eax, 0x7b72d526
cmp esi, 0x47ffe00
jb 0x40bcc9
jmp 0x40bcce
cmp eax, 0xa4de8011
jg 0x40b983
cmp eax, 0x8142317f
je 0x40bbe8
cmp eax, 0x84cdc938
je 0x40bc03
cmp eax, 0x9bdc7603
jne 0x40b540
mov ecx, dword [ebp - 0x50]
mov eax, 0xbf7c710a
cmp ecx, 8
je 0x40bcce
mov eax, 0xce747415
jmp 0x40bcce
cmp eax, 0x335a7ea8
jg 0x40b9b6
cmp eax, 0x1407fa64
je 0x40bc1a
cmp eax, 0x27568899
je 0x40bc2d
cmp eax, 0x2adbcb0e
jne 0x40b540
imul edi, dword [ebp - 0x14], 0xc939
add edi, 0xffffffe9
shr edi, 6
add edi, 0xffffff64
mov esi, edi
shr esi, 8
mov dword [ebp - 0x14], esi
push 0x4f33
push 0x466f
push esi
push 0x2d22
call fcn.0040c000
add esp, 0x10
push 0x2040
push 0x1d1e
push 0x2311
push esi
call fcn.0040c000
add esp, 0x10
mov eax, 0x5acd085b
cmp edi, 0x7d00
jae 0x40bcce
mov eax, 0xd9530635
jmp 0x40bcce
cmp eax, 0xe3393dea
jg 0x40b9ec
cmp eax, 0xdafe6373
je 0x40bc4f
cmp eax, 0xdb94eb49
je 0x40bc6a
cmp eax, 0xdca52b60
jne 0x40b540
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x1407fa64
jmp 0x40b540
cmp eax, 0x79e197dd
jg 0x40ba1d
cmp eax, 0x626ecbae
je 0x40bc76
cmp eax, 0x6492dbe2
je 0x40bc82
cmp eax, 0x790dee29
jne 0x40b540
mov eax, dword [ebp - 0x2c]
mov word [eax + 0x88], 0
mov eax, 0x88
push eax
push 0x463590
push dword [ebp - 0x2c]
call fcn.004409a0
add esp, 0xc
push 8
push 0x463618
push 0x44
push dword [ebp - 0x2c]
call fcn.0040c000
add esp, 0x10
push 0x8a
push dword [ebp - 0x2c]
lea eax, [ebp - 0x110]
push eax
call fcn.004409a0
add esp, 0xc
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
add eax, 0xe
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x572b8419
jmp 0x40b540
cmp eax, 0xb3437b7c
je 0x40bc8e
cmp eax, 0xba98cedd
je 0x40bcd6
cmp eax, 0xbaec7ba3
jne 0x40b540
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xd53ceb75
jmp 0x40b540
cmp eax, 0x286f53d
je 0x40bceb
cmp eax, 0x53a6ead
je 0x40bd12
cmp eax, 0x6077240
jne 0x40b540
push eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xf67daab0
jmp 0x40b540
cmp eax, 0xd388b761
je 0x40bd30
cmp eax, 0xd53ceb75
je 0x40bd3c
cmp eax, 0xd9530635
jne 0x40b540
mov eax, dword [ebp - 0x14]
add eax, 0x1d
shr eax, 8
imul esi, eax, 0x9e
add esi, 0x68
mov dword [ebp - 0x14], esi
push 0x4c6
push esi
push 0x3d00
push 0x1baa
call fcn.0040c000
add esp, 0x10
mov eax, 0x5acd085b
cmp esi, 0x83
jae 0x40bcce
mov eax, 0xa4de8012
jmp 0x40bcce
cmp eax, 0x511e79a0
je 0x40bd57
cmp eax, 0x572b8419
je 0x40bd63
cmp eax, 0x5acd085b
jne 0x40b540
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], edx
movzx eax, word [eax + 8]
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x8142317f
jmp 0x40b540
cmp eax, 0xa4de8012
je 0x40bdb3
cmp eax, 0xb1d9934d
je 0x40bdd9
cmp eax, 0xb295b934
jne 0x40b540
lea eax, [ebp - 0x64]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x335a7ea9
jmp 0x40b540
cmp eax, 0x335a7ea9
je 0x40be14
cmp eax, 0x384e92a9
je 0x40be3e
cmp eax, 0x39d9b857
jne 0x40b540
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xfe8c71cd
jmp 0x40b540
cmp eax, 0xe3393deb
je 0x40be50
cmp eax, 0xf22cb5b3
je 0x40bebe
cmp eax, 0xf67daab0
jne 0x40b540
shl dword [ebp - 0x18], 0xb
mov dword [ebp - 0x10], 0x39d9b857
jmp 0x40b540
cmp eax, 0x79e197de
je 0x40bef3
cmp eax, 0x7b72d526
je 0x40bf1a
cmp eax, 0x7e5641a6
jne 0x40b540
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov byte [eax + 9], 0
mov eax, dword [ebp - 0x24]
mov cl, byte [0x46f201]
mov byte [eax + 8], cl
mov ecx, dword [0x46f1fd]
mov dword [eax + 4], ecx
mov ecx, dword [0x46f1f9]
mov dword [eax], ecx
push 4
push 0x46f202
push 9
push dword [ebp - 0x24]
call fcn.0040bf60
add esp, 0x10
mov dword [ebp - 0x10], 0x5acd085b
jmp 0x40b540
cmp eax, 0xc0197dfa
jne 0x40bf2f
mov dword [ebp - 0x14], 0
call fcn.0040a878
mov dword [ebp - 0x10], 0x6077240
jmp 0x40b540
cmp eax, 0xcaa4148a
jne 0x40bf3b
mov eax, dword [ebp - 0x1c]
mov word [eax], 0xe
mov dword [ebp - 0x10], 0xba98cedd
jmp 0x40b540
mov edi, dword [ebp - 0x14]
shl edi, 5
add edi, 0xfff9f000
and edi, 0xfffff000
or edi, 0x2f
mov dword [ebp - 0x14], edi
call fcn.0040a878
mov eax, 0xbaec7ba3
cmp edi, 0x9f
jb 0x40bcce
mov eax, 0x1407fa64
jmp 0x40bcce
imul ecx, dword [ebp - 0x14], 0x6840
add ecx, 0xffcd8100
shr ecx, 0xd
add ecx, 0xffffff1c
mov eax, ecx
shr eax, 8
mov dword [ebp - 0x14], eax
mov eax, 0xe3393deb
cmp ecx, 0x2300
jae 0x40bcce
mov eax, 0x7b72d526
jmp 0x40bcce
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov dword [eax + 8], 0x34
mov dword [ebp - 0x10], 0xdb94eb49
jmp 0x40b540
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xda]
imul ecx, ecx
imul edx, ecx, 0x6a69
dec edx
imul eax, eax, 0x5c
add eax, 0xffffec3c
mov dword [ebp - 0x18], eax
mov eax, 0x7e5641a6
cmp ecx, edx
je 0x40bcce
mov eax, 0xbaec7ba3
jmp 0x40bcce
mov eax, dword [ebp - 0x18]
shr eax, 0xb
imul ecx, eax, 0x7e00
imul eax, eax
imul edx, eax, 0x8765
dec edx
add ecx, 0xff4bdc00
mov dword [ebp - 0x18], ecx
mov ecx, 0x49afe2d4
cmp eax, edx
je 0x40beeb
mov ecx, 0x511e79a0
jmp 0x40beeb
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0x790dee29
jmp 0x40b540
imul eax, dword [ebp - 0x18], 0x5c49000
add eax, 0xffffff70
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6492dbe2
jmp 0x40b540
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x110]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xdafe6373
jmp 0x40b540
mov dword [ebp - 0x64], 0x880088
mov dword [ebp - 0x10], 0x384e92a9
jmp 0x40b540
mov ecx, dword [ebp - 0x14]
mov eax, 0xfffffe34
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0x5acd085b
cmp ecx, 0x21
jge 0x40bcce
mov eax, 0x7e5641a6
jmp 0x40bcce
imul eax, dword [ebp - 0x18], 0x1f000000
add eax, 0xafc00000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcaa4148a
jmp 0x40b540
mov dword [ebp - 0x10], 0x286f53d
jmp 0x40b540
mov dword [ebp - 0x10], 0x7e5641a6
jmp 0x40b540
mov dword [ebp - 0x10], 0x7b72d526
jmp 0x40b540
mov edi, dword [ebp - 0x14]
mov eax, 0xffffff55
add edi, eax
shr edi, 3
add edi, 0xffffff79
mov dword [ebp - 0x14], edi
push 0x4e3b
push edi
push 0x1bbf
push 0x4ef4
call fcn.0040bf60
add esp, 0x10
mov eax, 0xc0197dfa
cmp edi, 0xdf
jb 0x40bcce
mov eax, 0x6077240
mov dword [ebp - 0x10], eax
jmp 0x40b540
mov eax, dword [ebp - 0x1c]
mov word [eax + 2], 0xe
mov dword [ebp - 0x10], 0xcf88fb80
jmp 0x40b540
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x34]
push ecx
push 0
push dword [ebp - 0x20]
push ebx
push ebx
push 0x50000018
call eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xd388b761
jmp 0x40b540
mov eax, dword [ebp - 0x18]
shr eax, 0xd
imul eax, eax, 0xe2
shr eax, 7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa4de8012
jmp 0x40b540
mov dword [ebp - 0x10], 0x9bdc7603
jmp 0x40b540
imul eax, dword [ebp - 0x18], 0x27310000
add eax, 0xffde0de8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xbe087747
jmp 0x40b540
mov dword [ebp - 0x10], 0x43168861
jmp 0x40b540
mov eax, dword [ebp - 0x40]
mov word [eax], 0
mov eax, dword [ebp - 0x30]
movzx ecx, word [0x463634]
mov word [eax + 0xc], cx
mov ecx, dword [0x463630]
mov dword [eax + 8], ecx
mov ecx, dword [0x46362c]
mov dword [eax + 4], ecx
mov ecx, dword [0x463628]
mov dword [eax], ecx
push 4
push 0x463636
push 7
push dword [ebp - 0x30]
call fcn.0040c000
add esp, 0x10
mov dword [ebp - 0x10], 0x53a6ead
jmp 0x40b540
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x70], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x6c], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xf22cb5b3
jmp 0x40b540
mov eax, dword [ebp - 0x14]
shr eax, 5
imul eax, eax, 0xe0
add eax, 0xffffffc7
mov dword [ebp - 0x14], eax
push 0x1f7c
push eax
push 0x875
push 0x43c5
call fcn.0040bf60
add esp, 0x10
call fcn.0040b528
mov dword [ebp - 0x10], 0x2adbcb0e
jmp 0x40b540
mov ecx, dword [ebp - 0x18]
mov eax, ecx
shl eax, 5
sub eax, ecx
sub eax, ecx
shr eax, 4
and eax, 0xffffffc0
add eax, 0xffffff91
shr eax, 2
add eax, 0xffffffcf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xfdedf101
jmp 0x40b540
lea eax, [ebp - 0x60]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x84cdc938
jmp 0x40b540
mov eax, dword [ebp - 0x28]
mov byte [eax + 0x10], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x46f212]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x46f20e]
mov dword [eax + 8], ecx
mov ecx, dword [0x46f20a]
mov dword [eax + 4], ecx
mov ecx, dword [0x46f206]
mov dword [eax], ecx
push 7
push 0x46f216
push 0x10
push dword [ebp - 0x28]
call fcn.0040bf60
add esp, 0x10
push 0x11
push dword [ebp - 0x28]
lea esi, [ebp - 0x85]
push esi
call fcn.004409a0
add esp, 0xc
push esi
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x3ceefc31
jmp 0x40b540
mov eax, dword [ebp - 0x18]
shr eax, 0xd
imul ecx, eax, 0xca000
imul eax, eax
imul edx, eax, 0x1f91
add ecx, 0xf4000
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xb1d9934d
cmp eax, edx
je 0x40beeb
mov ecx, 0xdca52b60
mov dword [ebp - 0x10], ecx
jmp 0x40b540
imul eax, dword [ebp - 0x14], 0x65
shr eax, 1
mov esi, 0x39d9b857
and eax, 0x7ffff000
mov dword [ebp - 0x14], eax
je 0x40bf0d
mov esi, 0x27568899
call fcn.0040a878
mov dword [ebp - 0x10], esi
jmp 0x40b540
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xe3393deb
jmp 0x40b540
cmp eax, 0xbf7c710a
je 0x40bf4e
jmp 0x40b540
cmp eax, 0xce747415
jne 0x40b540
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret