Function at 0x40d879
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov dword [ebp - 0x10], 0xd84d8ba6
mov esi, 3
mov bx, 0x88
mov eax, dword [ebp - 0x10]
cmp eax, 0xaa4805
jg 0x40d902
cmp eax, 0xbe5659ca
jle 0x40d9e3
cmp eax, 0xcb21ae9b
jle 0x40da3f
cmp eax, 0xee355f58
jle 0x40db86
cmp eax, 0xfc5c6eb6
jg 0x40dda5
cmp eax, 0xee355f59
je 0x40de43
cmp eax, 0xf3075e53
jne 0x40d892
mov ecx, dword [ebp - 0x14]
mov eax, 0x134
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0xcb0f2970
cmp ecx, 0xc7
je 0x40e30c
mov eax, 0x76530f7b
jmp 0x40e30c
cmp eax, 0x27e595f8
jle 0x40d990
cmp eax, 0x4ad13175
jle 0x40da9c
cmp eax, 0x76530f7a
jg 0x40dbdd
cmp eax, 0x5d07fa1c
jle 0x40ddce
cmp eax, 0x5d07fa1d
je 0x40de66
cmp eax, 0x6b470ec3
jne 0x40d892
mov eax, dword [ebp - 0x14]
add eax, 0xffffff89
shr eax, 1
imul edi, eax, 0x94
add edi, 0xffffa18c
mov dword [ebp - 0x14], edi
push 0xeb9
push 0x56e2
push 0x797
push edi
call fcn.0040e360
add esp, 0x10
call fcn.0040d879
mov eax, 0xcb0f2970
cmp edi, 0x60
je 0x40e30c
mov eax, 0x107f597c
jmp 0x40e30c
cmp eax, 0x1185242c
jle 0x40dad4
cmp eax, 0x198ecc9e
jg 0x40dc2f
cmp eax, 0x15aeb713
jle 0x40de0d
cmp eax, 0x15aeb714
je 0x40de88
cmp eax, 0x17b292b1
jne 0x40d892
push eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x10], 0
mov dword [ebp - 0x10], 0x76530f7b
jmp 0x40d892
cmp eax, 0x9e8b0306
jg 0x40db3f
cmp eax, 0x8b644bae
jg 0x40dc7f
cmp eax, 0x802ad5a3
je 0x40de9b
cmp eax, 0x82a9b641
je 0x40deb0
cmp eax, 0x89a0c743
jne 0x40d892
mov eax, dword [ebp - 0x14]
shl eax, 0xd
add eax, 0xffffff1e
shr eax, 2
and eax, 0xffffff80
add eax, 0xffffdf00
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x99b67fbc
jmp 0x40d892
cmp eax, 0xc477d7be
jg 0x40dcbe
cmp eax, 0xbe5659cb
je 0x40dece
cmp eax, 0xc049a164
je 0x40df07
cmp eax, 0xc3a9cb58
jne 0x40d892
imul ecx, dword [ebp - 0x14], 0xfa
add ecx, 0xffffff96
shr ecx, 0xb
add ecx, 0xffffff51
mov dword [ebp - 0x14], ecx
mov eax, 0x89a0c743
cmp ecx, 0xc4
je 0x40e30c
mov eax, 0x15aeb714
jmp 0x40e30c
cmp eax, 0x3c1bbca0
jg 0x40dceb
cmp eax, 0x27e595f9
je 0x40df4b
cmp eax, 0x2a390ed0
je 0x40df7f
cmp eax, 0x2a72de9c
jne 0x40d892
mov dword [ebp - 0x10], 0x802ad5a3
jmp 0x40d892
cmp eax, 0xeffc43d
jg 0x40dd22
cmp eax, 0xaa4806
je 0x40df9d
cmp eax, 0x21397d3
je 0x40dfcb
cmp eax, 0x7e19442
jne 0x40d892
push 4
push 0x472702
push 7
push dword [ebp - 0x48]
call fcn.0040e4a0
add esp, 0x10
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xce3864f7
jmp 0x40d892
cmp eax, 0xb4122f9f
jg 0x40dd4f
cmp eax, 0x9e8b0307
je 0x40dfeb
cmp eax, 0xa26bf1ca
je 0x40e009
cmp eax, 0xa80953d8
jne 0x40d892
imul eax, dword [ebp - 0x18], 0x3a000000
add eax, 0x41000000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x198ecc9f
jmp 0x40d892
cmp eax, 0xcb21ae9c
je 0x40e04b
cmp eax, 0xce3864f7
je 0x40e063
cmp eax, 0xd84d8ba6
jne 0x40d892
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x8c
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xfceca297
jmp 0x40d892
cmp eax, 0x76530f7b
je 0x40e072
cmp eax, 0x7983cfac
je 0x40e0da
cmp eax, 0x7fc78f69
jne 0x40d892
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x41]
imul ecx, ecx
imul edx, ecx, 0x4bdd
lea eax, [eax*8 - 0x13f]
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x20f1a2f2
cmp edx, ecx
je 0x40e30c
mov eax, 0x4ad13176
jmp 0x40e30c
cmp eax, 0x198ecc9f
je 0x40e10c
cmp eax, 0x20f1a2f2
je 0x40e118
cmp eax, 0x244fd0dd
jne 0x40d892
mov eax, dword [ebp - 0x50]
push dword [ebp - 0x30]
push 0
push dword [ebp - 0x24]
push esi
push esi
push 0x50000018
call eax
mov eax, dword [ebp - 0x30]
cmp dword [eax], 8
mov eax, 0x7fc78f69
je 0x40e30c
mov eax, 0x2a390ed0
jmp 0x40e30c
cmp eax, 0x8b644baf
je 0x40e149
cmp eax, 0x915d7d23
je 0x40e1a1
cmp eax, 0x99b67fbc
jne 0x40d892
push eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x27e595f9
jmp 0x40d892
cmp eax, 0xc477d7bf
je 0x40e1d6
cmp eax, 0xca5ed588
je 0x40e1f3
cmp eax, 0xcb0f2970
jne 0x40d892
mov dword [ebp - 0x10], 0xbe5659cb
jmp 0x40d892
cmp eax, 0x3c1bbca1
je 0x40e20e
cmp eax, 0x3e942282
je 0x40e21d
cmp eax, 0x46bb92a1
jne 0x40d892
mov eax, dword [ebp - 0x24]
mov dword [eax + 8], 0x34
mov dword [ebp - 0x10], 0xfc5c6eb7
jmp 0x40d892
cmp eax, 0xeffc43e
je 0x40e27e
cmp eax, 0x107f597c
je 0x40e29b
cmp eax, 0x10c0eff8
jne 0x40d892
mov dword [ebp - 0x10], 0x17b292b1
jmp 0x40d892
cmp eax, 0xb4122fa0
je 0x40e2d5
cmp eax, 0xbd25ec15
je 0x40e2e4
cmp eax, 0xbdef6eaf
jne 0x40d892
mov eax, dword [ebp - 0x18]
shr eax, 2
add eax, 0xffffff2f
imul ecx, eax, 0x9d02
imul eax, eax
imul edx, eax, 0x4c79
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xbd25ec15
cmp edx, eax
je 0x40e104
mov ecx, 0x7e19442
jmp 0x40e104
cmp eax, 0xfc5c6eb7
je 0x40e314
cmp eax, 0xfceca297
jne 0x40d892
push eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x99b67fbc
jmp 0x40d892
cmp eax, 0x5ac41d5c
jne 0x40e320
mov eax, dword [ebp - 0x48]
movzx ecx, word [0x472700]
mov word [eax + 0xc], cx
mov ecx, dword [0x4726fc]
mov dword [eax + 8], ecx
mov ecx, dword [0x4726f8]
mov dword [eax + 4], ecx
mov ecx, dword [0x4726f4]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xbdef6eaf
jmp 0x40d892
cmp eax, 0x1185242d
jne 0x40e32c
imul ecx, dword [ebp - 0x14], 0x7c8000
add ecx, 0x52ad00dd
mov dword [ebp - 0x14], ecx
mov eax, 0xfceca297
cmp ecx, 0xc3
jge 0x40e30c
mov eax, 0x99b67fbc
jmp 0x40e30c
mov eax, dword [ebp - 0x18]
shl eax, 4
add eax, 0x290
shr eax, 3
and eax, 0xfffffff0
add eax, 0xfffffffa
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb4122fa0
jmp 0x40d892
mov eax, dword [ebp - 0x1c]
mov word [eax], bx
mov eax, dword [ebp - 0x1c]
mov word [eax + 2], bx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0xc477d7bf
jmp 0x40d892
mov eax, dword [ebp - 0x3c]
mov byte [eax + 9], 0
mov dword [ebp - 0x10], 0x3e942282
jmp 0x40d892
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xcb0f2970
jmp 0x40d892
imul eax, dword [ebp - 0x18], 0x1600000
add eax, 0xfffcc400
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x8b644baf
jmp 0x40d892
mov ecx, dword [ebp - 0x18]
lea eax, [ecx - 0xb4]
add ecx, 0xffffff15
imul eax, eax
shr ecx, 4
imul edx, eax, 0x3dcf
dec edx
add ecx, 0x14
mov dword [ebp - 0x18], ecx
mov ecx, 0xcb0f2970
cmp edx, eax
je 0x40e104
mov ecx, 0x15aeb714
jmp 0x40e104
mov edi, dword [ebp - 0x14]
shl edi, 0x13
add edi, 0x67ffac
mov dword [ebp - 0x14], edi
push 0xce1
push 0x6da
push 0x41b4
push edi
call fcn.0040e4a0
add esp, 0x10
call fcn.0040d879
mov eax, 0xfceca297
cmp edi, 0x63
jl 0x40e30c
mov eax, 0x802ad5a3
jmp 0x40e30c
mov eax, dword [ebp - 0x18]
shr eax, 0xb
mov ecx, eax
imul ecx, eax
add eax, 0xffffff28
imul edx, ecx, 0x23b5
dec edx
shr eax, 2
mov dword [ebp - 0x18], eax
mov eax, 0xfceca297
cmp edx, ecx
je 0x40e30c
mov eax, 0x2a72de9c
jmp 0x40e30c
imul eax, dword [ebp - 0x18], 0x47c40c
add eax, 0x30c73fe2
shr eax, 8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x14912e0f
jmp 0x40d892
imul ecx, dword [ebp - 0x14], 0x2e
shr ecx, 7
add ecx, 0xffffffdd
shr ecx, 2
add ecx, 0xffffff4c
mov dword [ebp - 0x14], ecx
mov eax, 0x15aeb714
cmp ecx, 0xa
jae 0x40e30c
mov eax, 0xc3a9cb58
jmp 0x40e30c
mov eax, dword [ebp - 0x54]
mov word [eax], 0xe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xa80953d8
jmp 0x40d892
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov word [eax + 0xe], 0
mov dword [ebp - 0x10], 0x5ac41d5c
jmp 0x40d892
imul edi, dword [ebp - 0x14], 0x7a
shr edi, 5
mov dword [ebp - 0x14], edi
call fcn.0040cf38
push 0x614b
push 0x380e
push edi
push 0x22ca
call fcn.0040e4a0
add esp, 0x10
mov eax, 0xfceca297
cmp edi, 0x8a
je 0x40e30c
mov eax, 0x915d7d23
jmp 0x40e30c
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x82a9b641
jmp 0x40d892
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x5d07fa1d
jmp 0x40d892
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x47fc7f]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x47fc7b]
mov dword [eax + 8], ecx
mov ecx, dword [0x47fc77]
mov dword [eax + 4], ecx
mov ecx, dword [0x47fc73]
mov dword [eax], ecx
push 4
push 0x47fc83
push 0x10
push dword [ebp - 0x40]
call fcn.0040e360
add esp, 0x10
push 0x11
push dword [ebp - 0x40]
push dword [ebp - 0x2c]
call fcn.0044dac0
add esp, 0xc
push dword [ebp - 0x2c]
push dword [ebp - 0x4c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0xee355f59
jmp 0x40d892
mov eax, dword [ebp - 0x18]
add eax, 0xffffff95
imul ecx, eax, 0x198000
imul eax, eax
imul edx, eax, 0x54e3
dec edx
or ecx, 0x3f
mov dword [ebp - 0x18], ecx
mov ecx, 0x8b644baf
cmp edx, eax
je 0x40e104
mov ecx, 0x9e8b0307
mov dword [ebp - 0x10], ecx
jmp 0x40d892
mov dword [ebp - 0x10], 0xeffc43e
jmp 0x40d892
mov edi, dword [ebp - 0x14]
shl edi, 0xd
add edi, 0xffffff3f
mov dword [ebp - 0x14], edi
call fcn.0040d879
call fcn.0040cf38
mov eax, 0x3e942282
cmp edi, 0x2e
jl 0x40e30c
mov eax, 0x6b470ec3
jmp 0x40e30c
mov eax, dword [ebp - 0x44]
mov word [eax + 0x88], 0
mov eax, 0x88
push eax
push 0x472660
push dword [ebp - 0x44]
call fcn.0044dac0
add esp, 0xc
push 6
push 0x4726e8
push 0x44
push dword [ebp - 0x44]
call fcn.0040e4a0
add esp, 0x10
push 0x8a
push dword [ebp - 0x44]
push dword [ebp - 0x34]
call fcn.0044dac0
add esp, 0xc
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x7983cfac
jmp 0x40d892
mov eax, dword [ebp - 0x14]
shl eax, 0x10
add eax, 0xffffff58
shr eax, 0xf
mov dword [ebp - 0x14], eax
push 0x583d
push eax
push 0x1cad
push 0x23db
call fcn.0040e360
add esp, 0x10
mov dword [ebp - 0x10], 0xcb21ae9c
jmp 0x40d892
mov eax, dword [ebp - 0x20]
mov word [eax], 0xe
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x21397d3
jmp 0x40d892
imul eax, dword [ebp - 0x18], 0x30eb8
add eax, 0xb2
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x3c1bbca1
jmp 0x40d892
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x10c0eff8
jmp 0x40d892
mov eax, dword [ebp - 0x3c]
mov cl, byte [0x47fc6d]
mov byte [eax + 8], cl
mov ecx, dword [0x47fc69]
mov dword [eax + 4], ecx
mov ecx, dword [0x47fc65]
mov dword [eax], ecx
push 5
push 0x47fc6e
push 9
push dword [ebp - 0x3c]
call fcn.0040e360
add esp, 0x10
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
movzx edx, word [ecx + 8]
mov word [eax + 8], dx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xca5ed588
jmp 0x40d892
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0x46bb92a1
jmp 0x40d892
mov edi, dword [ebp - 0x14]
add edi, 0x48
mov dword [ebp - 0x14], edi
push 0x2af4
push 0x6122
push 0x11d6
push edi
call fcn.0040e360
add esp, 0x10
call fcn.0040cf38
mov eax, 0x9e8b0307
cmp edi, 0xfb
jae 0x40e30c
mov eax, 0x8b644baf
jmp 0x40e30c
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xcb21ae9c
jmp 0x40d892
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff13
add ecx, eax
shr ecx, 0xb
add ecx, 0xffffffeb
shr ecx, 6
mov dword [ebp - 0x14], ecx
mov eax, 0xf3075e53
cmp ecx, 0xd4
je 0x40e30c
mov eax, 0xa26bf1ca
mov dword [ebp - 0x10], eax
jmp 0x40d892
mov dword [ebp - 0x10], 0x244fd0dd
jmp 0x40d892
cmp eax, 0x4ad13176
je 0x40e33f
jmp 0x40d892
cmp eax, 0x14912e0f
jne 0x40d892
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret