Function at 0x407670
Capabilities:
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc7c
mov eax, dword [0x63fbf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, edx
push edi
mov edi, ecx
cmp esi, 1
jl 0x408314
cmp byte [0x64d8d3], 0
je 0x4076e5
mov ecx, dword [0x64d934]
call fcn.0043efa0
movzx ebx, byte [eax + 5]
movzx ecx, byte [eax + 4]
movzx edx, byte [eax + 3]
movzx eax, byte [eax + 2]
shl ebx, 8
or ebx, ecx
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, eax
xor ebx, dword [edi]
lea ecx, [ebp - 0xc58]
push ecx
rol ebx, 3
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0xc58]
push eax
jmp 0x407732
mov cl, byte [edi + 3]
xor cl, byte [edi + 2]
movzx ebx, byte [edi + 0xa]
xor cl, byte [edi + 1]
movzx edx, byte [edi + 9]
xor cl, byte [edi + 4]
movzx eax, byte [edi + 8]
xor cl, byte [edi]
shl ebx, 8
or ebx, edx
shl ebx, 8
or ebx, eax
mov byte [edi + 4], cl
movzx ecx, byte [edi + 7]
shl ebx, 8
or ebx, ecx
xor ebx, dword [edi]
lea edx, [ebp - 0xc58]
push edx
rol ebx, 3
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0xc58]
push ecx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
push 0
add eax, 0x2ac18000
push 0x989680
adc ecx, 0xfe624e21
push ecx
push eax
call fcn.00555b70
sub eax, ebx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x1f4
jle 0x40777b
call fcn.00409000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
mov al, byte [edi + 4]
add edi, 4
sub esi, 4
inc edi
cmp al, 0xda
jne 0x4077f9
cmp byte [0x64d8d3], 0
jne 0x408314
push 0xc
call fcn.00445142
add esp, 4
mov esi, eax
mov dword [0x64d934], eax
call fcn.0043f040
push 8
call fcn.0044517c
mov ebx, eax
mov edx, edi
add esp, 4
mov ecx, 8
mov edi, ebx
call fcn.0043afb0
mov esi, dword [0x64d934]
push ebx
call fcn.0043efc0
add esp, 4
call fcn.004071b0
call fcn.00407430
mov edx, dword [ebx + 4]
xor edx, dword [ebx]
push 0
rol edx, 3
xor edx, 0xb
mov byte [0x64d8d3], 1
push edx
jmp 0x407bd9
cmp al, 0xad
jne 0x407854
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov esi, dword [eax + 4]
xor esi, dword [eax]
push 9
rol esi, 3
call fcn.00445142
mov ecx, dword [edi]
mov dword [eax], ecx
mov edx, dword [edi + 4]
mov dword [eax + 4], edx
mov cl, byte [edi + 8]
add esp, 4
mov byte [eax + 8], cl
mov edx, dword [0x64d920]
xor eax, esi
push eax
xor esi, 0xc
push esi
push 0x720
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x46
jne 0x407893
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov esi, dword [eax + 4]
xor esi, dword [eax]
push 0x80
rol esi, 3
call fcn.0044517c
mov ebx, eax
mov edx, edi
add esp, 4
mov ecx, 0x80
mov edi, ebx
call fcn.0043afb0
xor ebx, esi
push ebx
xor esi, 0x12
jmp 0x407bd8
cmp al, 0x10
jne 0x4078d3
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
mov edx, dword [0x64d920]
push 0
rol ecx, 3
xor ecx, 0x13
push ecx
push 0x720
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x26
jne 0x407915
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov esi, dword [eax + 4]
xor esi, dword [eax]
push 0x10
rol esi, 3
call fcn.00445142
mov ecx, dword [edi]
mov dword [eax], ecx
mov edx, dword [edi + 4]
mov dword [eax + 4], edx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov edx, dword [edi + 0xc]
add esp, 4
mov dword [eax + 0xc], edx
xor eax, esi
push eax
xor esi, 0x14
jmp 0x407bd8
cmp al, 0x4f
jne 0x4079b3
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov esi, dword [eax + 4]
xor esi, dword [eax]
lea ecx, [ebp - 0xc68]
push ecx
lea edx, [ebp - 0xc60]
push edx
lea eax, [ebp - 0xc5c]
push eax
or ebx, 0xffffffff
push edi
rol esi, 3
mov dword [ebp - 0xc60], ebx
mov dword [ebp - 0xc68], ebx
mov word [ebp - 0xc5c], 0x6464
mov byte [ebp - 0xc5a], 0
call fcn.004074e0
add esp, 0x10
cmp dword [ebp - 0xc60], 0x1ed8e4e
jne 0x408314
mov ecx, dword [ebp - 0xc68]
mov edx, dword [0x64d920]
add ecx, 0x1ed8e4e
xor ecx, esi
push ecx
xor esi, 0x15
push esi
push 0x720
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x2b
jne 0x407a49
push 8
call fcn.00445142
mov ebx, eax
add esp, 4
push ebx
lea eax, [ebp - 0xc68]
push eax
mov dword [ebx], 0xffffffff
mov dword [ebx + 4], 0
push edi
mov word [ebp - 0xc68], 0x64
call fcn.004074e0
sub esi, 5
add esp, 0xc
mov dword [ebp - 0xc64], eax
test esi, esi
jle 0x407a28
lea ecx, [esi + 4]
push ecx
call fcn.0044517c
mov edx, dword [ebp - 0xc64]
add esp, 4
lea edi, [eax + 4]
mov ecx, esi
mov dword [ebp - 0xc6c], eax
call fcn.0043afb0
mov eax, dword [ebp - 0xc6c]
mov dword [eax], esi
mov dword [ebx + 4], eax
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
rol ecx, 3
mov edx, ecx
xor edx, ebx
push edx
xor ecx, 0xd
push ecx
jmp 0x407bd9
cmp al, 0x43
jne 0x407b1e
xor eax, eax
lea ecx, [ebp - 0xc60]
push ecx
lea edx, [ebp - 0xc68]
mov dword [ebp - 0xc68], eax
mov dword [ebp - 0xc60], eax
mov byte [ebp - 0xc5a], al
push edx
lea eax, [ebp - 0xc5c]
push eax
push edi
mov word [ebp - 0xc5c], 0x6464
call fcn.004074e0
mov ecx, dword [0x64d934]
add esp, 0x10
mov dword [ebp - 0xc64], eax
call fcn.0043efa0
mov ebx, dword [eax + 4]
xor ebx, dword [eax]
sub esi, 9
rol ebx, 3
xor edi, edi
cmp esi, 0x18
jne 0x407aef
push esi
call fcn.00445142
mov edx, dword [ebp - 0xc64]
add esp, 4
mov ecx, esi
mov edi, eax
mov dword [ebp - 0xc6c], eax
call fcn.0043afb0
push 0xc
call fcn.00445142
mov edi, eax
add esp, 4
mov esi, edi
call fcn.0043f040
mov ecx, dword [ebp - 0xc6c]
push ecx
call fcn.0043efc0
add esp, 4
mov edx, dword [ebp - 0xc60]
mov eax, dword [ebp - 0xc68]
mov ecx, dword [0x64d920]
xor edi, ebx
push edi
push edx
push eax
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x36
jne 0x407bfb
push 0x10
call fcn.00445142
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x408314
mov ecx, dword [0x64d934]
call fcn.0043efa0
mov esi, dword [eax + 4]
xor esi, dword [eax]
lea eax, [ebx + 4]
push eax
push ebx
lea edx, [ebp - 0xc5c]
push edx
push edi
rol esi, 3
mov dword [ebx], 0
mov dword [eax], 0
mov dword [ebx + 8], 0
mov word [ebp - 0xc5c], 0x6463
mov byte [ebp - 0xc5a], 0
call fcn.004074e0
add esp, 0x10
cmp dword [ebx + 4], 4
jge 0x407bd0
lea edi, [ebx + 8]
push edi
lea ecx, [ebp - 0xc68]
push ecx
push eax
mov word [ebp - 0xc68], 0x64
call fcn.004074e0
mov dword [ebp - 0xc64], eax
mov eax, dword [edi]
add esp, 0xc
test eax, eax
je 0x407bd0
push eax
call fcn.0044517c
mov ecx, dword [ebx + 8]
mov edx, dword [ebp - 0xc64]
add esp, 4
mov edi, eax
call fcn.0043afb0
mov dword [ebx + 0xc], edi
mov edx, esi
xor edx, ebx
push edx
xor esi, 0x16
push esi
mov eax, dword [0x64d920]
push 0x720
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x97
jne 0x407d29
xor eax, eax
lea ecx, [ebp - 0xc5c]
push ecx
lea edx, [ebp - 0xc74]
push edx
mov dword [ebp - 0xc70], eax
mov dword [ebp - 0xc74], eax
mov dword [ebp - 0xc5c], eax
lea eax, [ebp - 0xc70]
push eax
lea ecx, [ebp - 0xc60]
push ecx
push edi
mov dword [ebp - 0xc60], 0x646464
call fcn.004074e0
mov ecx, dword [0x64d934]
add esp, 0x14
mov dword [ebp - 0xc64], eax
sub esi, 0xd
call fcn.0043efa0
mov ebx, dword [eax + 4]
xor ebx, dword [eax]
xor edi, edi
rol ebx, 3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, ebx
xor eax, dword [ebp - 0xc5c]
jbe 0x407cee
lea edx, [esi + 4]
push edx
call fcn.0044517c
mov edx, dword [ebp - 0xc64]
add esp, 4
lea edi, [eax + 4]
mov ecx, esi
mov dword [ebp - 0xc68], eax
call fcn.0043afb0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0xc68]
xor eax, esi
xor eax, ebx
push 0x18
mov dword [ecx], eax
call fcn.0044517c
mov edi, eax
add esp, 4
mov esi, edi
call fcn.0043f040
lea esi, [edi + 0xc]
call fcn.0043f040
mov edx, dword [ebp - 0xc5c]
push edx
mov esi, edi
call fcn.0043efc0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, dword [ebp - 0xc68]
lea esi, [edi + 0xc]
xor eax, ebx
push eax
call fcn.0043efc0
add esp, 4
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call esi
xor eax, edi
xor eax, ebx
push eax
call esi
xor eax, dword [ebp - 0xc74]
mov ecx, dword [0x64d920]
push eax
mov eax, dword [ebp - 0xc70]
push eax
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0xa3
jne 0x407ee9
xor eax, eax
mov dword [ebp - 0xc64], eax
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 0xc70], eax
mov dword [ebp - 0xc74], eax
lea edx, [ebp - 0xc74]
push edx
lea eax, [ebp - 0xc65]
push eax
lea ecx, [ebp - 0xc70]
push ecx
lea edx, [ebp - 0xc6c]
push edx
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0xc]
push ecx
push edi
mov byte [ebp - 0xc65], 0xff
mov dword [ebp - 0xc], 0x63646464
mov word [ebp - 8], 0x63
call fcn.004074e0
mov ecx, dword [0x64d934]
add esp, 0x1c
mov dword [ebp - 0xc60], eax
call fcn.0043efa0
mov ecx, dword [eax + 4]
xor ecx, dword [eax]
push 0xbc
rol ecx, 3
mov dword [ebp - 0xc78], ecx
call fcn.00445142
movsx edx, byte [ebp - 0xc65]
mov ebx, eax
mov dword [ebx], edx
mov eax, dword [ebp - 0xc70]
mov edx, dword [ebp - 0xc60]
mov dword [ebx + 4], eax
mov ecx, dword [ebp - 0xc74]
mov dword [ebx + 8], ecx
add esp, 4
lea edi, [ebx + 0xc]
mov ecx, 0x20
call fcn.0043afb0
mov ecx, dword [ebp - 0xc60]
lea edx, [ebx + 0x2c]
push edx
lea eax, [ebp - 0xc5c]
push eax
add ecx, 0x20
push ecx
mov word [ebp - 0xc5c], 0x64
call fcn.004074e0
add esp, 0xc
lea edi, [ebx + 0x30]
mov ecx, 0x80
mov edx, eax
mov dword [ebp - 0xc60], eax
call fcn.0043afb0
sub dword [ebp - 0xc60], 0xffffff80
lea eax, [esi - 0xff]
push eax
mov dword [ebp - 0xc7c], eax
call fcn.0044517c
mov ecx, dword [ebp - 0xc7c]
mov edx, dword [ebp - 0xc60]
add esp, 4
mov edi, eax
call fcn.0043afb0
mov edx, dword [ebp - 0xc7c]
push 0x4c
mov dword [ebx + 0xb0], edx
mov dword [ebx + 0xb4], edi
call fcn.0044517c
mov edi, eax
mov eax, dword [ebp - 0xc60]
add esp, 4
lea edx, [esi + eax - 0xff]
mov ecx, 0x4c
call fcn.0043afb0
mov dword [ebx + 0xb8], edi
push 0xc
call fcn.00445142
add esp, 4
mov esi, eax
call fcn.0043f040
push ebx
call fcn.0043efc0
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add esp, 4
call edi
xor eax, esi
xor eax, dword [ebp - 0xc78]
push eax
call edi
xor eax, dword [ebp - 0xc6c]
mov ecx, dword [ebp - 0xc64]
mov edx, dword [0x64d920]
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x9b
jne 0x407f5c
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0xc5c]
push ecx
push edi
mov byte [0x64dbb6], 1
mov dword [ebp - 0xc64], 0xffffffff
mov word [ebp - 0xc5c], 0x64
call fcn.004074e0
mov eax, dword [ebp - 0xc64]
add esp, 0xc
cmp eax, 2
jne 0x407f3e
call fcn.00404720
push 0
push 0
push 0
push 0x407640
jmp 0x407fdf
cmp eax, 3
jne 0x4083ac
call fcn.00404850
push 0
push 0
push 0
push 0x407640
jmp 0x407fdf
cmp al, 0x20
jne 0x408001
push 0x600
call fcn.00445142
mov esi, eax
add esp, 4
test esi, esi
je 0x408314
push 0x600
push 0
push esi
call fcn.0054b8b0
add esp, 0xc
push esi
lea edx, [ebp - 0xc78]
push edx
lea eax, [esi + 0x400]
push eax
lea ecx, [ebp - 0xc64]
push ecx
lea edx, [ebp - 0xc5c]
push edx
push edi
mov dword [ebp - 0xc64], 0x200
mov dword [ebp - 0xc78], 0x400
mov word [ebp - 0xc5c], 0x5353
mov byte [ebp - 0xc5a], 0
call fcn.004074e0
add esp, 0x18
push 0
push 0
push esi
push 0x401040
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x6b
jne 0x4080b2
lea eax, [ebp - 0xc60]
push eax
lea ecx, [ebp - 0xc64]
push ecx
lea edx, [ebp - 0xc5c]
push edx
or ebx, 0xffffffff
push edi
mov word [ebp - 0xc5c], 0x6464
mov byte [ebp - 0xc5a], 0
mov dword [ebp - 0xc64], ebx
mov dword [ebp - 0xc60], 0
call fcn.004074e0
mov edi, dword [ebp - 0xc64]
add esp, 0x10
cmp edi, ebx
jne 0x40807c
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edi, eax
call fcn.004047a0
add esp, 4
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
call fcn.00403d40
mov edi, eax
test edi, edi
je 0x408314
mov ecx, dword [ebp - 0xc60]
push ecx
call fcn.004047a0
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp al, 0x58
jne 0x4083a8
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x226]
push eax
mov word [ebp - 0x228], dx
call fcn.0054b8b0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x42e]
push edx
mov word [ebp - 0x430], cx
call fcn.0054b8b0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x636]
push ecx
mov word [ebp - 0x638], ax
call fcn.0054b8b0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc46]
push eax
mov word [ebp - 0xc48], dx
call fcn.0054b8b0
add esp, 0xc
lea ecx, [ebp - 0xc48]
push ecx
lea edx, [ebp - 0xc60]
push edx
mov ecx, edx
lea eax, [ebp - 0x638]
push eax
push ecx
mov eax, ecx
lea edx, [ebp - 0x430]
push edx
push eax
lea ecx, [ebp - 0x228]
push ecx
mov edx, eax
push edx
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0xc]
push ecx
push edi
mov dword [ebp - 0xc64], 0
mov dword [ebp - 0xc60], 0x208
mov dword [ebp - 0xc], 0x53535364
mov word [ebp - 8], 0x53
call fcn.004074e0
lea eax, [ebp - 0x228]
add esp, 0x2c
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4081a0
sub eax, edx
sar eax, 1
je 0x408314
lea ecx, [ebp - 0xc54]
push ecx
lea edx, [ebp - 0x228]
xor eax, eax
push edx
mov dword [ebp - 0xc54], 0x63002a
mov dword [ebp - 0xc50], 0x670066
mov word [ebp - 0xc4c], ax
call fcn.00545f39
add esp, 8
test eax, eax
je 0x4082b4
push 0x104
lea eax, [ebp - 0x228]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor ecx, ecx
push 0x1fe
push ecx
lea edx, [ebp - 0xa3e]
push edx
mov word [ebp - 0xa40], cx
call fcn.0054b8b0
add esp, 0xc
push 0
push 0
push 0x100
lea eax, [ebp - 0xa40]
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x228]
push 0
push ecx
call fcn.005470f9
add esp, 0x24
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x83e]
push eax
mov word [ebp - 0x840], dx
call fcn.0054b8b0
add esp, 0xc
lea ecx, [ebp - 0xa40]
push ecx
lea edx, [ebp - 0x20]
xor eax, eax
push edx
lea edx, [ebp - 0x840]
mov dword [ebp - 0x20], 0x5c002e
mov dword [ebp - 0x1c], 0x730025
mov dword [ebp - 0x18], 0x63002e
mov dword [ebp - 0x14], 0x670066
mov word [ebp - 0x10], ax
call fcn.004098c0
lea eax, [ebp - 0x840]
push eax
lea edx, [ebp - 0x228]
call fcn.004098c0
add esp, 0xc
mov eax, dword [ebp - 0xc64]
test eax, eax
jne 0x408325
lea eax, [ebp - 0x430]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4082c7
sub eax, edx
sar eax, 1
je 0x408314
lea eax, [ebp - 0x638]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4082e1
sub eax, edx
sar eax, 1
je 0x408314
lea ecx, [ebp - 0x228]
push ecx
lea edx, [ebp - 0xc48]
push edx
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x430]
push ecx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00544a28
mov esp, ebp
pop ebp
ret
cmp eax, 1
jne 0x40836c
lea eax, [ebp - 0x430]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x408333
sub eax, edx
sar eax, 1
je 0x408314
lea eax, [ebp - 0x638]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x408350
sub eax, edx
sar eax, 1
je 0x408314
lea edx, [ebp - 0x228]
push edx
push 0
jmp 0x408300
cmp eax, 2
jne 0x408314
lea eax, [ebp - 0x430]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x408380
sub eax, edx
sar eax, 1
je 0x408314
lea edx, [ebp - 0x228]
push edx
push 0
push 0
lea eax, [ebp - 0x430]
push eax
jmp 0x40830e
cmp al, 0xc
jne 0x4083c7
call fcn.00409000
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00547091
cmp al, 0x33
jne 0x4083e6
call fcn.00409000
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00547091
cmp al, 0x1d
jne 0x408405
call fcn.00409000
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00547091
cmp al, 0xc9
jne 0x408424
call fcn.00409000
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00547091
cmp al, 0x4d
jne 0x408443
call fcn.00409000
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00547091
cmp al, 0x23
jne 0x4083ac
call fcn.00409000
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call fcn.00547091
int3