Function at 0x4066d0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [0x4745f4]
test eax, eax
jne 0x407096
movzx eax, word [0x47031e]
mov ecx, eax
and ecx, 0x6799
or eax, 0x6799
lea edx, [eax + eax]
not edx
add edx, eax
or edx, ecx
not edx
mov word [0x47032e], dx
movzx eax, word [0x470320]
xor eax, 0x9458
mov word [0x470330], ax
movzx eax, word [0x470322]
xor eax, 0x864a
mov word [0x470332], ax
movzx eax, word [0x470324]
xor eax, 0x818c
mov word [0x470334], ax
movzx eax, word [0x470326]
mov ecx, eax
not ecx
and ecx, 0xffffb0e6
mov edx, eax
xor edx, 0xffffb0e6
or eax, 0x4f19
and eax, edx
or eax, ecx
xor eax, 0x9e8f
mov word [0x470336], ax
movzx eax, word [0x470328]
lea ecx, [eax + eax]
and ecx, 0x679c
neg ecx
add eax, ecx
add eax, 0x33ce
mov word [0x470338], ax
movzx eax, word [0x47032a]
xor eax, 0xa227
mov word [0x47033a], ax
movzx eax, word [0x47032c]
xor eax, 0x733d
mov word [0x47033c], ax
movzx eax, byte [0x4701b0]
xor al, 0x6e
mov byte [0x4701d0], al
movzx eax, byte [0x4701b1]
xor al, 0xbb
mov byte [0x4701d1], al
movzx eax, byte [0x4701b2]
xor al, 0x47
mov byte [0x4701d2], al
movzx eax, byte [0x4701b3]
mov ecx, eax
add cl, al
and cl, 0x5a
sub al, cl
add al, 0x2d
mov byte [0x4701d3], al
movzx eax, byte [0x4701b4]
mov ecx, eax
not cl
or al, 0x7c
or cl, 0x83
and cl, al
not cl
mov byte [0x4701d4], cl
mov ah, byte [0x4701b5]
mov al, ah
not al
mov edx, eax
or dl, 0xd2
add dl, ah
inc dl
mov ecx, eax
and cl, dl
and ah, 0x2c
and al, 1
or al, ah
or al, 0x80
xor al, dl
xor al, 0xac
and cl, 0x2d
or cl, al
mov byte [0x4701d5], cl
movzx eax, byte [0x4701b6]
xor al, 0x44
mov byte [0x4701d6], al
movzx eax, byte [0x4701b7]
xor al, 0x9e
mov byte [0x4701d7], al
movzx eax, byte [0x4701b8]
xor al, 0x5a
mov byte [0x4701d8], al
movzx eax, byte [0x4701b9]
mov ecx, eax
add cl, al
and cl, 0xd0
sub al, cl
add al, 0xe8
mov byte [0x4701d9], al
movzx eax, byte [0x4701ba]
xor al, 0x8a
mov byte [0x4701da], al
movzx eax, byte [0x4701bb]
xor al, 0x26
mov byte [0x4701db], al
movzx eax, byte [0x4701bc]
xor al, 0xd8
mov byte [0x4701dc], al
movzx eax, byte [0x4701bd]
mov ecx, eax
add cl, al
and cl, 4
sub al, cl
add al, 0x82
mov byte [0x4701dd], al
movzx eax, byte [0x4701be]
xor al, 0xc4
mov byte [0x4701de], al
movzx eax, byte [0x4701bf]
xor al, 0x65
mov byte [0x4701df], al
movzx eax, byte [0x4701c0]
xor al, 0x24
mov byte [0x4701e0], al
mov eax, 0x92bd
xor eax, dword [0x4701f0]
mov word [0x470280], ax
movzx eax, word [0x4701f2]
lea ecx, [eax + eax]
and ecx, 0x68fc
neg ecx
add eax, ecx
add eax, 0xffffb47e
mov ecx, 0xa1d7
xor ecx, dword [0x4701f4]
mov word [0x470282], ax
mov word [0x470284], cx
movzx eax, word [0x4701f6]
xor eax, 0x1957
mov word [0x470286], ax
mov eax, dword [0x4701f8]
lea ecx, [eax + eax]
and ecx, 0xffffbcd2
neg ecx
add eax, ecx
add eax, 0x5e69
mov word [0x470288], ax
movzx eax, word [0x4701fa]
xor eax, 0x5768
mov word [0x47028a], ax
mov eax, dword [0x4701fc]
lea ecx, [eax + eax]
not ecx
add ecx, eax
and ecx, 0x3b9a
and eax, 0xffffc465
or eax, ecx
mov word [0x47028c], ax
movzx eax, word [0x4701fe]
xor eax, 0x426c
mov word [0x47028e], ax
mov eax, dword [0x470200]
lea ecx, [eax + eax]
and ecx, 0x548a
neg ecx
add eax, ecx
add eax, 0x2a45
mov word [0x470290], ax
movzx eax, word [0x470202]
mov ecx, eax
and ecx, 0x6389
mov esi, eax
and esi, 2
mov edx, eax
or edx, 0xfffffffd
inc edx
mov edi, 0xfffffffe
sub edi, ecx
imul edi, esi
imul edx, ecx
add edx, edi
add eax, edx
add eax, 0x638b
mov ecx, 0xaaf0
xor ecx, dword [0x470204]
mov word [0x470292], ax
mov word [0x470294], cx
movzx eax, word [0x470206]
mov ecx, eax
not ecx
or eax, 0xffffbd00
or ecx, 0x42ff
xor ecx, eax
mov word [0x470296], cx
mov eax, dword [0x470208]
lea ecx, [eax + eax]
and ecx, 0xffff9726
neg ecx
add eax, ecx
add eax, 0xffffcb93
mov word [0x470298], ax
movzx eax, word [0x47020a]
xor eax, 0x80c8
mov ecx, 0xbc2f
xor ecx, dword [0x47020c]
mov word [0x47029a], ax
mov word [0x47029c], cx
movzx eax, word [str._Om]
xor eax, 0x3f59
mov word [0x47029e], ax
mov eax, 0x3d3a
xor eax, dword [0x470210]
mov word [0x4702a0], ax
movzx eax, word [0x470212]
xor eax, 0x8fb4
mov word [0x4702a2], ax
mov eax, dword [0x470214]
lea ecx, [eax + eax]
and ecx, 0x2c9a
neg ecx
add eax, ecx
add eax, 0xffff964d
mov word [0x4702a4], ax
movzx eax, word [0x470216]
xor eax, 0xcd7e
mov word [0x4702a6], ax
mov eax, dword [0x470218]
mov ecx, eax
not ecx
lea edx, [eax + eax]
not edx
add edx, eax
or edx, ecx
lea ecx, [edx + edx]
not ecx
add ecx, edx
and ecx, 0x3f53
and eax, 0xffffc0ac
or eax, ecx
xor eax, 0x3f53
mov word [0x4702a8], ax
movzx eax, word [0x47021a]
mov ecx, eax
or ecx, 0x449c
lea edx, [ecx + ecx]
not edx
add edx, ecx
and eax, 0x449c
or eax, edx
mov word [0x4702aa], ax
mov eax, 0x4cb8
xor eax, dword [0x47021c]
mov word [0x4702ac], ax
movzx eax, word [0x47021e]
lea ecx, [eax + eax]
and ecx, 0xffffe224
neg ecx
add eax, ecx
add eax, 0xfffff112
mov word [str.wPn_r], ax
mov eax, dword [0x470220]
lea ecx, [eax + eax]
and ecx, 0xffff8532
neg ecx
add eax, ecx
add eax, 0xffffc299
mov word [0x4702b0], ax
movzx eax, word [0x470222]
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x2ff8
or ecx, 0xffffd007
add eax, ecx
inc eax
or eax, edx
lea ecx, [eax + eax]
and ecx, 0xffffac0e
neg ecx
add eax, ecx
add eax, 0xffffd607
mov ecx, 0x1940
xor ecx, dword [0x470224]
mov word [0x4702b2], ax
mov word [0x4702b4], cx
movzx eax, word [0x470226]
xor eax, 0xc799
mov word [0x4702b6], ax
mov eax, 0x1faa
xor eax, dword [0x470228]
mov word [0x4702b8], ax
movzx eax, word [0x47022a]
lea ecx, [eax + eax]
and ecx, 0xffffe02c
neg ecx
add eax, ecx
add eax, 0x7016
mov word [0x4702ba], ax
mov eax, 0xcc86
xor eax, dword [0x47022c]
mov word [0x4702bc], ax
movzx eax, word [0x47022e]
lea ecx, [eax + eax]
and ecx, 0x6322
neg ecx
add eax, ecx
add eax, 0x3191
mov word [0x4702be], ax
mov eax, dword [0x470230]
lea ecx, [eax + eax]
and ecx, 0xffffe028
neg ecx
add eax, ecx
add eax, 0x7014
mov word [0x4702c0], ax
movzx eax, word [0x470232]
not eax
mov ecx, eax
and ecx, 0xffffcf90
lea edx, [ecx + ecx]
not edx
add edx, ecx
or eax, 0xffffcf90
and eax, edx
mov word [0x4702c2], ax
mov eax, dword [0x470234]
lea ecx, [eax + eax]
and ecx, 0xffff90d0
neg ecx
add eax, ecx
add eax, 0x4868
mov word [0x4702c4], ax
movzx eax, word [0x470236]
xor eax, 0xab3c
mov ecx, 0xcecb
xor ecx, dword [0x470238]
mov word [0x4702c6], ax
mov word [0x4702c8], cx
movzx eax, word [0x47023a]
mov ecx, eax
and ecx, 0x18b7
add ecx, ecx
sub ecx, eax
lea edx, [ecx + ecx]
add edx, 0x4e90
and edx, 0xffffb16e
xor edx, 0xffffd8b7
lea ecx, [ecx*4 + 0x9d20]
and ecx, 0x4290
sub eax, ecx
add eax, edx
mov word [0x4702ca], ax
mov eax, 0xda5e
xor eax, dword [0x47023c]
mov word [0x4702cc], ax
movzx eax, word [0x47023e]
mov ecx, eax
not ecx
mov edx, ecx
or edx, 0x1d60
sub ecx, edx
lea eax, [eax + ecx*2]
add eax, 0xffff9d60
mov word [0x4702ce], ax
mov eax, 0x92f0
xor eax, dword [0x470240]
mov word [0x4702d0], ax
movzx eax, word [0x470242]
xor eax, 0xc0c3
mov word [0x4702d2], ax
mov eax, dword [0x470244]
mov ecx, eax
not ecx
or ecx, 0x369c
mov edx, eax
xor edx, 0xffffc963
or eax, 0xffffc963
and eax, ecx
or eax, edx
mov word [0x4702d4], ax
movzx eax, word [0x470246]
lea ecx, [eax + eax]
and ecx, 0xfffff35e
neg ecx
add eax, ecx
add eax, 0xfffff9af
mov word [0x4702d6], ax
mov eax, dword [0x470248]
lea ecx, [eax + eax]
and ecx, 0x3bf8
neg ecx
add eax, ecx
add eax, 0x1dfc
mov word [str.y2Y_], ax
movzx eax, word [0x47024a]
xor eax, 0xc7a3
mov word [0x4702da], ax
mov eax, 0xf2ba
xor eax, dword [0x47024c]
mov word [0x4702dc], ax
movzx eax, word [0x47024e]
xor eax, 0x4269
mov word [0x4702de], ax
mov eax, dword [0x470250]
lea ecx, [eax + eax]
and ecx, 0x1c68
neg ecx
add eax, ecx
add eax, 0xe34
mov word [0x4702e0], ax
movzx eax, word [0x470252]
xor eax, 0xba3c
mov word [0x4702e2], ax
mov eax, dword [0x470254]
lea ecx, [eax + eax]
and ecx, 0xffff8e9a
neg ecx
add eax, ecx
add eax, 0xffffc74d
mov word [0x4702e4], ax
movzx eax, word [0x470256]
xor eax, 0xa14c
mov word [0x4702e6], ax
mov eax, dword [str.7OX_]
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x3732
or ecx, 0xffffc8cd
add eax, ecx
inc eax
or eax, edx
mov word [0x4702e8], ax
movzx eax, word [0x47025a]
xor eax, 0x582a
mov word [0x4702ea], ax
mov eax, 0xb104
xor eax, dword [0x47025c]
mov word [0x4702ec], ax
movzx eax, word [0x47025e]
xor eax, 0x72de
mov word [0x4702ee], ax
mov eax, 0xd312
xor eax, dword [0x470260]
mov word [0x4702f0], ax
movzx eax, word [0x470262]
xor eax, 0xffffca09
lea ecx, [eax + eax]
not ecx
add ecx, eax
mov word [0x4702f2], cx
mov eax, 0x358f
xor eax, dword [0x470264]
mov word [0x4702f4], ax
movzx eax, word [0x470266]
lea ecx, [eax + eax]
and ecx, 0xffffe698
neg ecx
add eax, ecx
add eax, 0xfffff34c
mov word [0x4702f6], ax
movzx ecx, word [0x470268]
lea eax, [ecx + ecx]
not eax
add eax, ecx
and ecx, 0x6b84
and eax, 0xffff947b
or eax, ecx
not eax
mov word [0x4702f8], ax
movzx eax, word [0x47026a]
xor eax, 0x7d75
mov word [0x4702fa], ax
mov eax, dword [0x47026c]
lea ecx, [eax + eax]
not ecx
add ecx, eax
not eax
or eax, 0x3cff
lea edx, [eax + eax]
not edx
add edx, eax
and ecx, 0x3cff
or ecx, edx
not ecx
mov word [0x4702fc], cx
movzx eax, word [0x47026e]
xor eax, 0xe40
mov word [0x4702fe], ax
mov eax, 0x79f6
xor eax, dword [0x470270]
lea ecx, [eax + eax]
not ecx
add ecx, eax
mov word [0x470300], cx
movzx eax, word [0x470272]
xor eax, 0x31ad
mov word [0x470302], ax
mov eax, dword [0x470274]
lea ecx, [eax + eax]
and ecx, 0x111c
neg ecx
add eax, ecx
add eax, 0x88e
mov word [0x470304], ax
movzx eax, word [0x470276]
xor eax, 0x46a8
mov word [0x470306], ax
mov eax, 0xc02a
xor eax, dword [0x470278]
mov word [0x470308], ax
movzx eax, byte [0x47030a]
mov ecx, eax
add cl, al
not cl
add cl, al
and cl, 0xd4
and al, 0x2b
or al, cl
mov ecx, eax
add cl, al
and cl, 0x2e
sub al, cl
add al, 0x97
mov byte [0x470314], al
movzx eax, byte [0x47030b]
xor al, 0xaa
mov byte [0x470315], al
movzx eax, byte [0x47030c]
xor al, 0x39
mov byte [str.BFav], al
movzx eax, byte [0x47030d]
xor al, 0xc2
mov byte [0x470317], al
movzx eax, byte [0x47030e]
mov ecx, eax
add cl, al
not cl
add cl, al
and cl, 0xd8
and al, 0x27
or al, cl
xor al, 0x65
mov byte [0x470318], al
movzx eax, byte [0x47030f]
xor al, 0xf4
mov byte [0x470319], al
movzx eax, byte [0x470310]
mov ecx, eax
add cl, al
and cl, 0x38
sub al, cl
add al, 0x9c
mov byte [0x47031a], al
movzx eax, byte [0x470311]
mov ecx, eax
not cl
mov edx, eax
or dl, 0x47
xor al, 0x47
add al, cl
and cl, 0x47
sub al, cl
and al, dl
not al
mov byte [0x47031b], al
movzx eax, byte [0x470312]
xor al, 0x62
mov byte [0x47031c], al
movzx eax, byte [0x470313]
mov ecx, eax
add cl, al
and cl, 0x38
sub al, cl
add al, 0x1c
mov byte [0x47031d], al
mov dword [0x4745f4], 1
push eax
sub esp, 8
mov eax, esp
sub esp, 0x14
mov ebx, esp
push eax
mov dword [ebp - 0x20], esp
sub esp, 0x8c
mov dword [ebp - 0x14], esp
sub esp, 0x10
mov edi, esp
sub esp, 8
mov dword [ebp - 0x1c], esp
sub esp, 8
mov dword [ebp - 0x18], esp
sub esp, 0xc
mov esi, esp
movzx ecx, word [0x47031c]
mov word [eax + 8], cx
mov ecx, dword [0x470318]
mov dword [eax + 4], ecx
mov ecx, dword [0x470314]
mov dword [eax], ecx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [0x4701d0]
mov dword [ebx], ecx
mov ecx, dword [0x4701d4]
mov dword [ebx + 4], ecx
mov ecx, dword [0x4701d8]
mov dword [ebx + 8], ecx
mov ecx, dword [0x4701dc]
mov dword [ebx + 0xc], ecx
movzx ecx, byte [0x4701e0]
mov byte [ebx + 0x10], cl
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x10], eax
push 0x8a
push 0x470280
mov ebx, dword [ebp - 0x14]
push ebx
call fcn.0044dcd0
add esp, 0xc
mov eax, dword [0x47032e]
mov dword [edi], eax
mov eax, dword [0x470332]
mov dword [edi + 4], eax
mov eax, dword [0x470336]
mov dword [edi + 8], eax
mov eax, dword [0x47033a]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x880088
mov dword [eax + 4], ebx
mov ecx, dword [ebp - 0x18]
mov dword [ecx], 0xe000e
mov dword [ecx + 4], edi
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], 0x34
mov edi, dword [ebp - 0x20]
push edi
push 0
push esi
push 3
push 3
push 0x50000018
call dword [ebp - 0x10]
cmp dword [edi], 8
jne 0x4071a2
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]