Function at 0x402330
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41d470
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x424084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 4], ebx
xor eax, eax
mov word [ebp - 0x2c], ax
push 0x10
mov eax, str.xyringstones.exe
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
call fcn.00401890
mov ecx, esi
lea edi, [ebp - 0x68]
mov byte [ebp - 4], 1
call fcn.00403d00
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x4023ab
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0040ecdf
add esp, 4
xor edx, edx
push 0x19
mov eax, str.xyringstonesbugreport.exe
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], dx
call fcn.00401890
mov ecx, esi
lea edi, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.00403d00
mov byte [ebp - 4], bl
cmp dword [ebp - 0x18], 8
jb 0x4023ed
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0040ecdf
add esp, 4
xor ecx, ecx
push 0x1a
mov eax, str.xyringstonesautoupdate.exe
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], cx
call fcn.00401890
mov ecx, esi
lea edi, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00403d00
cmp dword [ebp - 0x18], 8
jb 0x40242c
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0040ecdf
add esp, 4
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
lea ebx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.00402090
mov ebx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x68]
mov ecx, ebx
sub ecx, edi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x70], esi
je 0x4025e3
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
lea eax, [edi + 0x10]
sar ecx, 2
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x58], eax
test ecx, ecx
je 0x4025d0
cmp ecx, eax
jbe 0x402655
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x6c], eax
test eax, eax
je 0x4025b8
sub esp, 0x1c
mov esi, esp
add eax, 0x24
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], cx
mov ecx, eax
mov dword [ebp - 0x74], esp
lea edi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4024d0
sub ecx, edi
sar ecx, 1
push ecx
call fcn.00401890
lea ecx, [ebp - 0x48]
call fcn.004022a0
add esp, 0x1c
mov edi, dword [eax + 0x10]
mov ebx, 8
cmp dword [eax + 0x14], ebx
jb 0x4024ff
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov esi, dword [ecx]
mov ecx, esi
cmp ecx, esi
jae 0x40250a
mov edx, esi
cmp esi, edi
jb 0x402512
mov edx, edi
mov ecx, dword [ebp - 0x4c]
cmp dword [ecx + 4], ebx
jb 0x40251f
mov ecx, dword [ecx - 0x10]
jmp 0x402522
add ecx, 0xfffffff0
test edx, edx
je 0x402547
mov bx, word [ecx]
cmp bx, word [eax]
jne 0x402539
add ecx, 2
add eax, 2
dec edx
jne 0x402526
jmp 0x402547
mov dx, word [ecx]
cmp dx, word [eax]
sbb eax, eax
and eax, 0xfffffffe
inc eax
jne 0x402557
cmp esi, edi
jae 0x402550
or eax, 0xffffffff
jmp 0x402557
xor eax, eax
cmp esi, edi
setne al
test eax, eax
sete bl
mov byte [ebp - 4], 4
cmp dword [ebp - 0x34], 8
jb 0x402572
mov eax, dword [ebp - 0x48]
push eax
call fcn.0040ecdf
add esp, 4
test bl, bl
je 0x4025b5
xor esi, esi
mov edi, dword [ebp - 0x6c]
mov ecx, dword [edi + 8]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenProcess]
push ecx
push 0
push 1
inc esi
call ebx
test eax, eax
jne 0x4025ac
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [edi + 8]
push edx
push 0
push 1
call ebx
cmp esi, 5
jl 0x402578
jmp 0x4025b5
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp ecx, eax
ja 0x402495
mov esi, dword [ebp - 0x70]
mov ebx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x54]
add dword [ebp - 0x4c], 0x1c
inc eax
mov dword [ebp - 0x54], eax
cmp eax, esi
jb 0x402480
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x4025f3
push eax
call fcn.0040ecdf
add esp, 4
test edi, edi
je 0x402634
mov esi, edi
cmp edi, ebx
je 0x40262b
lea ecx, [ecx]
cmp dword [esi + 0x14], 8
jb 0x402611
mov eax, dword [esi]
push eax
call fcn.0040ecdf
add esp, 4
xor ecx, ecx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], cx
add esi, 0x1c
cmp esi, ebx
jne 0x402600
push edi
call fcn.0040ecdf
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040ecd0
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0040ec57
int3