Function at 0x406ae0
Capabilities:
Terminate process

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
push edi
push 6
push str.select
mov ecx, 0x43b034
call fcn.00402cd0
mov ecx, dword [esp + 0x1c]
xor edx, edx
mov ebp, dword [esp + 0x20]
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edi
lea esi, [edx + 1]
cmp ecx, esi
jle 0x406e38
nop dword [eax]
mov eax, dword [ebp + esi*4]
cmp byte [eax], 0x2d
jne case.0x406b44.103
movsx eax, byte [eax + 1]
add eax, 0xffffff9a
cmp eax, 0x10
ja case.0x406b44.103
movzx eax, byte [eax + 0x406f04]
jmp dword [eax*4 + 0x406eec]
mov edx, dword [ebp + esi*4 + 4]
test edx, edx
jne 0x406b64
lea ebx, [edx + 1]
mov edx, dword [esp + 0x14]
inc edx
mov dword [esp + 0x14], edx
jmp 0x406ce5
cmp byte [edx], 0x2d
jne 0x406b99
push str.It_is_likely_that_you_have_forgotten_to_give_the_filename_after_the__d_option_
push 0x45c048
call fcn.00401100
push eax
call fcn.00401580
mov edx, dword [ebp + esi*4 + 4]
add esp, 0xc
mov ecx, edx
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406b90
jmp 0x406ba7
mov ecx, edx
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406ba0
sub ecx, edi
push ecx
push edx
mov ecx, 0x43b004
call fcn.00402cd0
mov edx, dword [esp + 0x14]
inc esi
mov edi, dword [esp + 0x10]
inc edx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x14], edx
jmp 0x406ce5
mov edx, dword [ebp + esi*4 + 4]
test edx, edx
jne 0x406be6
lea ebx, [edx + 1]
mov dword [section..data], edx
mov edx, dword [esp + 0x14]
jmp 0x406ce5
cmp byte [edx], 0x2d
jne 0x406c19
push str.It_is_likely_that_you_have_forgotten_to_give_the_filename_after_the__f_option_
push 0x45c048
call fcn.00401100
push eax
call fcn.00401580
mov edx, dword [ebp + esi*4 + 4]
add esp, 0xc
mov ecx, edx
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406c10
jmp 0x406c27
mov ecx, edx
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406c20
sub ecx, edi
push ecx
push edx
mov ecx, 0x43b01c
call fcn.00402cd0
mov edi, dword [esp + 0x10]
inc esi
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [section..data], 0
jmp 0x406ce5
inc edi
mov dword [esp + 0x10], edi
jmp 0x406ce5
mov edx, dword [ebp + esi*4 + 4]
test edx, edx
jne 0x406c72
lea ebx, [edx + 1]
mov edx, dword [esp + 0x14]
mov dword [0x45bf10], ebx
jmp 0x406ce5
cmp byte [edx], 0x2d
jne 0x406ca1
push str.It_is_likely_that_you_have_forgotten_to_give_the_filename_after_the__o_option_
push 0x45c048
call fcn.00401100
push eax
call fcn.00401580
mov edx, dword [ebp + esi*4 + 4]
add esp, 0xc
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406c98
jmp 0x406cad
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406ca6
sub ecx, edi
push ecx
push edx
mov ecx, 0x43b034
call fcn.00402cd0
mov edi, dword [esp + 0x10]
inc esi
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [0x45bf10], 1
jmp 0x406ce5
mov dword [0x45bf0c], 1
jmp 0x406ce5
mov ebx, 1
inc esi
cmp esi, ecx
jl 0x406b20
test edx, edx
je 0x406e38
test ebx, ebx
jne 0x406e50
cmp dword [0x43b018], 0x10
mov eax, 0x43b004
push 0x42c890
cmovae eax, dword [0x43b004]
push eax
call fcn.0040e4f9
add esp, 8
mov dword [0x43bef0], eax
test eax, eax
jne 0x406d46
mov ecx, 0x43b004
call fcn.00402dc0
push eax
push str.Error:_Could_not_open__s
call fcn.00406f20
add esp, 8
push ebx
call fcn.004145b4
call fcn.004044c0
cmp byte [0x43bef8], 0x74
je 0x406d62
call fcn.00404480
cmp byte [0x43bef8], 0x74
jne 0x406d54
call fcn.00402ff0
test edi, edi
je 0x406d70
call fcn.00404820
push dword [0x43bef0]
call fcn.0040e269
add esp, 4
call fcn.004027b0
call fcn.00406690
mov edx, dword [0x43bef4]
xor esi, esi
test edx, edx
jle 0x406db2
mov eax, dword [0x45bf1c]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x406dad
push 1
call fcn.004022f0
mov edx, dword [0x43bef4]
inc esi
cmp esi, edx
jl 0x406d94
push dword [0x45bf1c]
call fcn.004092b7
xor esi, esi
add esp, 4
cmp dword [0x43bef4], esi
jle 0x406deb
nop word [eax + eax]
mov eax, dword [0x45bf24]
push 4
push dword [eax + esi*4]
call fcn.004092a0
inc esi
add esp, 8
cmp esi, dword [0x43bef4]
jl 0x406dd0
push dword [0x45bf24]
call fcn.004092b7
mov edx, dword [0x45bf04]
add esp, 4
xor esi, esi
test edx, edx
jle 0x406e23
mov eax, dword [0x45bf20]
mov ecx, dword [eax + esi*4]
test ecx, ecx
je 0x406e1e
push 1
call fcn.00402180
mov edx, dword [0x45bf04]
inc esi
cmp esi, edx
jl 0x406e05
push dword [0x45bf20]
call fcn.004092b7
add esp, 4
push 0
call fcn.004145b4
push str.You_must_enter_a_filename_that_specifies_a_pprof_dump_file_n_n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 8
push dword [ebp]
push str.usage:__s__f_filename___n____r_filename____o_filename____v__n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 0xc
push str.__f_filename_:_specify_filename_of_pprof_dump_file_n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 8
push str.__p_:_print_out_all_functions_with_their_attributes_n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 8
push str.__o_filename_:_specify_filename_for_select_file_output__default:_print_to_screen_n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 8
push str.__r_filename_:_specify_filename_for_rule_file_n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 8
push str.__v_:_verbose_mode__for_each_rule__print_out_rule_and_all_functions_that_it_excludes__n
push 2
call fcn.0040e128
add esp, 4
push eax
call fcn.00406ab0
add esp, 8
push 1
call fcn.004145b4
nop
dec ebx
imul eax, dword [eax], 91
insb byte es:[edi], dx
inc eax
add byte [ecx + 0x6c], dl
inc eax
add ah, cl
imul eax, dword [eax], 0xffffffd4
insb byte es:[edi], dx
inc eax
add al, ah
insb byte es:[edi], dx
inc eax
add byte [eax], al
add eax, 0x5050505
add eax, 33621253
add eax, 84215043
add al, 204
int3