Function at 0x409c40
Capabilities:
Terminate process

Disassembly:
sub esp, 0x50
mov dword [esp + 0x10], 0x95e596fa
lea eax, [esp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x10]
mov ecx, eax
sub ecx, 0x8ca28433
je 0x409fe5
jmp 0x409c67
mov ecx, eax
sub ecx, 0x94126809
je 0x409ef7
jmp 0x409c77
mov ecx, eax
sub ecx, 0x95e596fa
je 0x409e65
jmp 0x409c87
mov ecx, eax
sub ecx, 0x9fc78d56
je 0x409f9f
jmp 0x409c97
mov ecx, eax
sub ecx, 0xa1eef8fd
je 0x409eb9
jmp 0x409ca7
mov ecx, eax
sub ecx, 0xa26e5cf2
je 0x40a044
jmp 0x409cb7
mov ecx, eax
sub ecx, 0xae3a24a5
je 0x40a085
jmp 0x409cc7
mov ecx, eax
sub ecx, 0xafaefa0f
je 0x409fc7
jmp 0x409cd7
mov ecx, eax
sub ecx, 0xb92d071d
je 0x40a0e4
jmp 0x409ce7
mov ecx, eax
sub ecx, 0xd1f45b7e
je 0x409f65
jmp 0x409cf7
mov ecx, eax
sub ecx, 0xdd05ef33
je 0x409f4b
jmp 0x409d07
mov ecx, eax
sub ecx, 0xde00fde2
je 0x409ff4
jmp 0x409d17
mov ecx, eax
sub ecx, 0xf4f27dc5
je 0x409ece
jmp 0x409d27
mov ecx, eax
sub ecx, 0xf5d31f65
je 0x40a0bf
jmp 0x409d37
mov ecx, eax
sub ecx, 0xf9d63680
je 0x40a06d
jmp 0x409d47
mov ecx, eax
sub ecx, 0xff2b6ae3
je 0x409e74
jmp 0x409d57
mov ecx, eax
sub ecx, 0x867e26b
je 0x40a091
jmp 0x409d67
mov ecx, eax
sub ecx, 0xdca4400
je 0x409e9d
jmp 0x409d77
mov ecx, eax
sub ecx, 0x11618a2f
je 0x409f06
jmp 0x409d87
mov ecx, eax
sub ecx, 0x121a7b80
je 0x40a071
jmp 0x409d97
mov ecx, eax
sub ecx, 0x15ebb332
je 0x40a012
jmp 0x409da7
mov ecx, eax
sub ecx, 0x1c80f76b
je 0x40a035
jmp 0x409db7
mov ecx, eax
sub ecx, 0x2c686fd1
je 0x409f22
jmp 0x409dc7
mov ecx, eax
sub ecx, 0x2fb002b4
je 0x40a026
jmp 0x409dd7
mov ecx, eax
sub ecx, 0x36ce41df
je 0x409fd6
jmp 0x409de7
mov ecx, eax
sub ecx, 0x38898816
je 0x409f74
jmp 0x409df7
mov ecx, eax
sub ecx, 0x424dae99
je 0x40a003
jmp 0x409e07
mov ecx, eax
sub ecx, 0x5293da72
je 0x409ee8
jmp 0x409e17
mov ecx, eax
sub ecx, 0x60610489
je 0x409f83
jmp 0x409e27
mov ecx, eax
sub ecx, 0x6acda7b9
je 0x40a0a5
jmp 0x409e37
mov ecx, eax
sub ecx, 0x6e09f7e3
je 0x409e8e
jmp 0x409e43
mov ecx, eax
sub ecx, 0x706cf675
je 0x409fae
jmp 0x409e53
sub eax, 0x7a966a29
je 0x40a0cb
jmp 0x409e60
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0xff2b6ae3
jmp 0x40a110
call fcn.004350c0
and al, 1
mov byte [esp + 0xf], al
mov eax, dword [esp + 8]
mov dword [eax], 0x6e09f7e3
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0xdca4400
jmp 0x40a110
mov eax, 0xa1eef8fd
test byte [esp + 0xf], 1
jne 0x409eae
mov eax, 0x1c80f76b
mov ecx, dword [esp + 8]
mov dword [ecx], eax
jmp 0x40a110
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [esp + 8]
mov dword [eax], 0xf4f27dc5
jmp 0x40a110
call fcn.0042bce0
and al, 1
mov byte [esp + 0xe], al
mov eax, dword [esp + 8]
mov dword [eax], 0x5293da72
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x94126809
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x11618a2f
jmp 0x40a110
mov eax, 0x2c686fd1
test byte [esp + 0xe], 1
jne 0x409f17
mov eax, 0x424dae99
mov ecx, dword [esp + 8]
mov dword [ecx], eax
jmp 0x40a110
xor eax, eax
lea eax, [esp + 0x14]
mov dword [esp], 0
mov dword [esp + 4], eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
sub esp, 8
mov eax, dword [esp + 8]
mov dword [eax], 0xdd05ef33
jmp 0x40a110
call fcn.0040b010
and al, 1
mov byte [esp + 0xd], al
mov eax, dword [esp + 8]
mov dword [eax], 0xd1f45b7e
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x38898816
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x60610489
jmp 0x40a110
mov eax, 0x9fc78d56
test byte [esp + 0xd], 1
jne 0x409f94
mov eax, 0x36ce41df
mov ecx, dword [esp + 8]
mov dword [ecx], eax
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x706cf675
jmp 0x40a110
call fcn.0040d4b0
call fcn.0040c3f0
mov eax, dword [esp + 8]
mov dword [eax], 0xafaefa0f
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x36ce41df
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x8ca28433
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0xde00fde2
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x424dae99
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x15ebb332
jmp 0x40a110
call fcn.004359f0
mov eax, dword [esp + 8]
mov dword [eax], 0x2fb002b4
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0x1c80f76b
jmp 0x40a110
mov eax, dword [esp + 8]
mov dword [eax], 0xa26e5cf2
jmp 0x40a110
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
sub esp, 8
mov eax, dword [esp + 8]
mov dword [eax], 0xf9d63680
jmp 0x40a110
add esp, 0x50
ret
call fcn.004350c0
mov eax, dword [esp + 8]
mov dword [eax], 0xff2b6ae3
jmp 0x40a110
add byte [ebx - 0x38f7dbbc], cl
add bl, ah
push 0x2b
invalid
mov eax, dword [esp + 8]
mov dword [eax], 0x94126809
jmp 0x40a110
pop ecx
in al, dx
fistp word [edi + 0x7c]
jmp 0x40a075
and byte [edi], ch
stosb byte es:[edi], al
jmp 0x74a395
mov eax, dword [esp + 8]
mov dword [eax], 0x8ca28433
jmp 0x40a110
pop ss
fnstcw word [edi]
inc esi
nop
dec eax
enter 0xffffffffffffe8c6, 0x18
mov ecx, 0x448b0002
and al, 8
mov dword [eax], 0x15ebb332
jmp 0x40a110
sbb ah, byte [edi - 0x4aae6fa8]
out dx, al
mov edx, 0x4c7c031
and al, 0
add byte [eax], al
add bh, al
inc esp
and al, 4
add byte [eax], al
add byte [eax], al
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
sub esp, 8
mov eax, dword [esp + 8]
mov dword [eax], 0xa26e5cf2
jmp 0x409c53