Function at 0x40ef8c
Capabilities:
Terminate process

Disassembly:
mov eax, 0x485c06
call fcn.004847e4
sub esp, 0x6d8
mov eax, 0x497990
push ebx
push esi
push edi
mov edi, 0x3b8c765b
mov ebx, ecx
sub eax, edi
lea ecx, [ebp - 0x25]
push eax
call fcn.00412503
mov esi, eax
lea eax, [esi + 1]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x40efbb
sub esi, eax
lea ecx, [ebp - 0x3d]
mov eax, 0x4979a4
sub eax, edi
push eax
call fcn.00412503
lea ecx, [esi + 1]
push ecx
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0046df67
add esp, 0xc
lea ecx, [ebp - 0x73]
mov eax, 0x4979b8
mov edi, 0x1d155ad
sub eax, edi
push eax
call fcn.0041257d
mov esi, eax
lea eax, [esi + 1]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x40f002
sub esi, eax
lea ecx, [ebp - 0xcc]
mov eax, 0x4979e8
sub eax, edi
push eax
call fcn.0041257d
lea ecx, [esi + 1]
push ecx
push eax
lea eax, [ebp - 0x4dc]
push eax
call fcn.0046df67
add esp, 0xc
lea ecx, [ebp - 0x71]
push 0x554e642d
call fcn.0041253f
mov esi, eax
lea eax, [esi + 1]
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x40f044
push 0x554e6459
lea ecx, [ebp - 0xca]
sub esi, eax
call fcn.0041253f
lea ecx, [esi + 1]
push ecx
push eax
lea eax, [ebp - 0x6e4]
push eax
call fcn.0046df67
add esp, 0xc
lea ecx, [ebp - 0x61]
push 0x599fc8ca
call fcn.004125b9
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea esi, [ebx + 0x240]
push esi
push 0xf003f
push 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f0f9
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
and dword [ebp - 4], 0
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 1
push dword [ebx + 4]
xor ebx, ebx
lea edx, [ebp - 0x2c]
push ebx
lea ecx, [ebp - 0x44]
call fcn.0040490e
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.00402c21
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402c21
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0xc0
xor edx, edx
mov al, byte [edx + 0x497a8c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x69], al
and ecx, 0x800000ff
jns 0x40f11d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x23
jl 0x40f100
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x69]
mov byte [ebp - 0x46], 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f170
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 3
jmp 0x40f0c8
mov ecx, 0xe4
xor edx, edx
mov al, byte [edx + 0x497ab0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x69], al
and ecx, 0x800000ff
jns 0x40f194
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x23
jl 0x40f177
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x69]
mov byte [ebp - 0x46], 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f1e7
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 4
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 5
jmp 0x40f0c8
push 0x6a
pop ecx
xor edx, edx
mov al, byte [edx + 0x497ad4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x72], al
and ecx, 0x800000ff
jns 0x40f209
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x2c
jl 0x40f1ec
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x72]
mov byte [ebp - 0x46], 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f25c
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 7
jmp 0x40f0c8
mov ecx, 0xc4
xor edx, edx
mov al, byte [edx + 0x497b04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x78], al
and ecx, 0x800000ff
jns 0x40f280
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x32
jl 0x40f263
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 0x46], 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f2d3
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 8
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 9
jmp 0x40f0c8
push 0x599fc992
lea ecx, [ebp - 0x61]
call fcn.004125b9
push esi
push 0xf003f
push 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f326
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 0xb
jmp 0x40f0c8
mov ecx, 0xe6
xor edx, edx
mov al, byte [edx + 0x497b58]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x9c], al
and ecx, 0x800000ff
jns 0x40f34d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x56
jl 0x40f32d
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x9c]
mov byte [ebp - 0x46], 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f3a3
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x44]
call fcn.00406124
mov byte [ebp - 4], 0xd
jmp 0x40f0c8
mov ecx, 0xf2
xor edx, edx
mov al, byte [edx + 0x497bb0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x82], al
and ecx, 0x800000ff
jns 0x40f3ca
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x3c
jl 0x40f3aa
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x82]
mov byte [ebp - 0x46], 0
push eax
push closesocket
call edi
neg eax
sbb al, al
add al, 1
je 0x40f44d
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x60]
call fcn.00406124
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0xb8]
call fcn.00406124
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x60]
push dword [ebx + 4]
xor ebx, ebx
lea ecx, [ebp - 0xb8]
push ebx
call fcn.0040490e
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb8]
call fcn.00402c21
push ebx
push 1
lea ecx, [ebp - 0x60]
jmp 0x40f0ec
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret