Function at 0x441ebe
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x63c00c]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x74], eax
mov esi, edx
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x50], esi
mov ebx, dword [edi + 0xc]
mov eax, dword [edi]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], ebx
test ebx, ebx
je 0x4426b7
mov ecx, ebx
call fcn.004289f0
mov ecx, ebx
mov dword [ebp - 0x60], eax
call fcn.004289f0
mov dword [ebp - 0x6c], eax
mov edx, esi
mov al, byte [esi + 4]
mov ecx, edi
mov byte [ebp - 0x29], al
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x64], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x34], eax
call fcn.004412e9
test eax, eax
je 0x441f32
xor eax, eax
inc eax
jmp 0x4426ba
cmp byte [ebp - 0x29], 0x6b
mov edx, dword [ebp - 0x34]
mov ecx, dword [edx]
mov dword [ebp - 0x5c], ecx
je 0x441fe6
mov dword [ebp - 0x30], 1
jmp 0x441fd9
mov eax, dword [esi]
mov esi, dword [ebp - 0x30]
cmp esi, dword [eax]
mov esi, dword [ebp - 0x50]
jg 0x441fe6
xor eax, eax
test ecx, ecx
jle 0x441f8c
mov edi, dword [edx + 0xc]
mov ebx, eax
mov esi, dword [ebp - 0x30]
mov eax, dword [edi]
cmp dword [eax + 0x24], esi
je 0x441f7d
inc ebx
add edi, 0xc
cmp ebx, ecx
jl 0x441f6e
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x44]
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
jne 0x441fd6
xor eax, eax
mov ecx, edi
push eax
push eax
push eax
push 0x7c
pop edx
call fcn.0042fca8
mov ecx, eax
add esp, 0xc
test ecx, ecx
je 0x4426b7
mov edx, dword [ebp - 0x34]
mov eax, 0x800
or word [ecx + 2], ax
mov eax, dword [ebp - 0x30]
push 0
mov dword [ecx + 0x24], eax
push ecx
mov ecx, edi
call fcn.004303ff
pop ecx
pop ecx
mov ecx, dword [ebp - 0x5c]
mov edx, eax
inc ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x5c], ecx
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x1e], 0
je 0x441f50
mov eax, ecx
mov ecx, dword [ebp - 0x4c]
shl eax, 2
mov edx, eax
mov dword [ebp - 0x40], eax
call fcn.0041a270
mov dword [ebp - 0x70], eax
test eax, eax
je 0x44210a
and dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
jle 0x442036
mov edx, dword [ebp - 0x34]
xor esi, esi
mov ebx, dword [ebp - 0x38]
mov edi, eax
mov eax, dword [edx + 0xc]
mov eax, dword [eax + esi]
lea esi, [esi + 0xc]
mov eax, dword [eax + 0x24]
dec eax
mov dword [edi + ebx*4], eax
inc ebx
cmp ebx, ecx
jl 0x442018
mov ebx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x44]
lea eax, [ecx + 4]
mov ecx, dword [ebp - 0x4c]
imul edx, eax, 5
call fcn.0041a270
mov dword [ebp - 0x68], eax
test eax, eax
je 0x44210e
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x5c]
add ecx, 0x10
and dword [ebp - 0x30], 0
add ecx, eax
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 0x14]
mov al, byte [ecx + 0x59]
mov ecx, dword [ebp - 0x68]
mov byte [ecx + 4], al
test edx, edx
jle 0x44210e
and dword [ebp - 0x3c], 0
lea eax, [ecx + 0x10]
mov ebx, dword [ebp - 0x34]
lfence
mov dword [ebp - 0x40], eax
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebx + 0xc]
mov eax, dword [edi + eax]
mov edi, 0x100
mov dword [ebp - 0x38], eax
test word [eax + 2], di
mov edi, dword [ebp - 0x44]
je 0x4420ad
mov eax, dword [eax + 4]
jmp 0x4420d5
mov eax, dword [ebp - 0x30]
mov edx, esi
mov ecx, dword [ebp - 0x70]
push dword [ecx + eax*4]
mov ecx, edi
call fcn.004415e5
pop ecx
mov ecx, dword [ebp - 0x38]
mov edx, 0x100
or word [ecx + 2], dx
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x68]
mov edi, dword [ebp - 0x40]
add dword [ebp - 0x40], 4
mov dword [edi], eax
mov eax, dword [ebx + 0xc]
mov edi, dword [ebp - 0x3c]
mov ecx, dword [ecx + 0xc]
add dword [ebp - 0x3c], 0xc
mov al, byte [eax + edi + 8]
mov edi, dword [ebp - 0x30]
mov byte [edi + ecx], al
mov eax, edi
mov edi, dword [ebp - 0x44]
inc eax
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x30], eax
cmp eax, edx
jl 0x44208e
mov ebx, dword [ebp - 0x48]
jmp 0x44210e
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x34]
mov edx, eax
mov dword [esi + 0x1c], eax
mov ecx, dword [edi]
call fcn.004300bc
cmp byte [ebp - 0x29], 0x6b
mov ecx, dword [ebp - 0x64]
mov dword [ecx + 0x1c], eax
jne 0x442138
mov eax, dword [ebp - 0x78]
and dword [ebp - 0x40], 0
mov dword [ebp - 0x54], eax
jmp 0x4421d9
mov eax, dword [esi]
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea edx, [eax + 1]
call fcn.004331a0
push eax
push 0
push 0x30
pop edx
mov ecx, ebx
mov dword [ebp - 0x40], eax
call fcn.004289ac
pop ecx
pop ecx
mov ecx, dword [ebp - 0x30]
add ecx, 4
imul edx, ecx, 5
mov ecx, dword [ebp - 0x4c]
call fcn.0041a250
mov edx, eax
mov dword [ebp - 0x54], edx
test edx, edx
je 0x4421d9
mov eax, dword [ebp - 0x30]
mov dword [edx + 8], eax
lea ecx, [eax + 4]
mov eax, dword [ebp - 0x4c]
lea ecx, [edx + ecx*4]
mov dword [edx + 0xc], ecx
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + 0x14]
mov al, byte [ecx + 0x59]
mov ecx, dword [ebp - 0x30]
mov byte [edx + 4], al
xor eax, eax
mov dword [ebp - 0x34], eax
test ecx, ecx
jle 0x4421d9
mov ebx, dword [ebp - 0x54]
add edx, 0x10
lfence
mov dword [ebp - 0x38], edx
push eax
mov edx, esi
mov ecx, edi
call fcn.004415e5
mov edx, dword [ebp - 0x38]
pop ecx
mov ecx, dword [ebp - 0x34]
mov dword [edx], eax
add edx, 4
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x38], edx
mov byte [ecx + eax], 0
mov eax, ecx
inc eax
mov dword [ebp - 0x34], eax
cmp eax, dword [ebp - 0x30]
jl 0x4421ab
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x64]
mov edx, esi
and dword [esi + 0x20], 0
mov ecx, edi
and dword [eax + 0x28], 0
lea eax, [ebp - 0x55]
push eax
push 1
push dword [esi + 0x1c]
call fcn.0044118d
mov eax, dword [ebp - 0x64]
add esp, 0xc
cmp dword [eax + 0x20], 0
jne 0x442217
lea ecx, [ebp - 0x55]
mov edx, eax
push ecx
push 1
push dword [eax + 0x1c]
mov ecx, edi
call fcn.0044118d
add esp, 0xc
push dword [ebp - 0x60]
mov edx, esi
mov ecx, edi
call fcn.004414c6
xor eax, eax
pop ecx
cmp dword [esi + 0x34], eax
je 0x44226f
cmp byte [ebp - 0x29], 0x6b
jne 0x44226f
mov eax, dword [edi + 0x48]
inc eax
mov dword [ebp - 0x48], eax
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
mov dword [edi + 0x48], ecx
mov ecx, dword [esi + 0x38]
test ecx, ecx
je 0x44224b
inc ecx
jmp 0x44224e
mov ecx, dword [esi + 0x34]
push eax
push ecx
push 0x14
pop edx
mov ecx, ebx
call fcn.004289ac
push dword [ebp - 0x38]
mov ecx, ebx
push dword [ebp - 0x48]
push 0x14
pop edx
call fcn.004289ac
add esp, 0x10
jmp 0x442275
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], eax
mov edx, dword [esi + 0x2c]
mov ecx, dword [ebp - 0x4c]
call fcn.0042ff61
mov edx, dword [esi + 0x30]
mov ecx, dword [ebp - 0x4c]
and dword [esi + 0x2c], 0
call fcn.0042ff61
and dword [esi + 0x30], 0
mov ecx, dword [edi + 0x48]
inc ecx
push ecx
push 0xa
mov dword [ebp - 0x3c], ecx
lea eax, [ecx + 2]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x28]
add eax, 2
mov dword [ebp - 0x30], eax
inc eax
pop edx
mov dword [edi + 0x48], eax
call fcn.0043f75c
add esp, 4
lea ecx, [ebp - 0x18]
push dword [ebp - 0x34]
call fcn.0043f75c
add esp, 4
mov ecx, ebx
push 0x5e
pop edx
call fcn.0042898a
mov ecx, ebx
mov dword [ebp - 0x7c], eax
call fcn.00428b64
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x64]
mov edx, eax
mov dword [eax + 0x34], ecx
xor ecx, ecx
push ecx
push ecx
push ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, edi
call fcn.00443278
mov edi, dword [ebp - 0x3c]
mov ecx, ebx
lea eax, [edi + 1]
push eax
push 1
push 0x30
pop edx
call fcn.004289ac
push edi
push 0x3a
pop edx
mov ecx, ebx
call fcn.00428998
add esp, 0x1c
mov ecx, ebx
call fcn.00428b64
mov edi, dword [esi + 0x34]
mov ecx, dword [ebp - 0x38]
mov esi, dword [esi + 0x38]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x50]
mov edx, eax
mov dword [eax + 0x34], ecx
xor ecx, ecx
push ecx
push ecx
push ecx
mov dword [eax + 0x38], ecx
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x44]
call fcn.00443278
mov eax, dword [ebp - 0x50]
mov dword [eax + 0x34], edi
mov edi, eax
mov ecx, ebx
mov dword [edi + 0x38], esi
mov esi, dword [ebp - 0x34]
lea eax, [esi + 1]
push eax
push 1
push 0x30
pop edx
call fcn.004289ac
push esi
push 0x3a
pop edx
mov ecx, ebx
call fcn.00428998
mov esi, dword [ebp - 0x44]
lea eax, [ebp - 0x28]
add esp, 0x1c
mov edx, edi
mov ecx, esi
push dword [ebp - 0x60]
push 0xfffffffffffffff0
push dword [ebp - 0x54]
push dword [ebp - 0x40]
push dword [ebp - 0x30]
push dword [ebp - 0x74]
push eax
call fcn.00441c43
mov dword [ebp - 0x38], eax
add esp, 0x1c
mov al, byte [ebp - 0x29]
cmp al, 0x6b
je 0x4423aa
cmp al, 0x6a
jne 0x4423d3
push dword [ebp - 0x60]
mov eax, dword [ebp - 0x30]
mov edx, edi
push 0xffffffffffffffef
push dword [ebp - 0x54]
inc eax
mov ecx, esi
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x74]
lea eax, [ebp - 0x18]
push eax
call fcn.00441c43
mov dword [ebp - 0x50], eax
add esp, 0x1c
mov al, byte [ebp - 0x29]
cmp al, 0x6c
je 0x4424c8
cmp al, 0x6d
je 0x4424c8
push dword [ebp - 0x60]
mov eax, dword [ebp - 0x34]
mov ecx, ebx
inc eax
push eax
push 0xa
pop edx
call fcn.004289ac
push dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
mov ecx, ebx
mov eax, dword [ebp - 0x30]
inc eax
push eax
push 0x2f
pop edx
call fcn.004289ac
push dword [ebp - 0x34]
mov ecx, ebx
push 0x3a
pop edx
call fcn.00428998
add esp, 0x14
mov ecx, ebx
push dword [ebp - 0x44]
push 0
push 0x5e
pop edx
call fcn.004289ac
pop ecx
pop ecx
push dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
mov ecx, ebx
inc eax
push eax
push 0xa
pop edx
call fcn.004289ac
push dword [ebp - 0x38]
mov ecx, ebx
mov dword [ebp - 0x54], eax
push dword [ebp - 0x30]
push 0x2f
pop edx
call fcn.004289ac
push dword [ebp - 0x3c]
mov ecx, ebx
push 0x3a
pop edx
call fcn.00428998
add esp, 0x14
mov ecx, ebx
push dword [ebp - 0x54]
push 0
push 0x5e
pop edx
call fcn.004289ac
pop ecx
pop ecx
push dword [ebp - 0x38]
mov ecx, ebx
push dword [ebp - 0x30]
push 0x2f
pop edx
call fcn.004289ac
push dword [ebp - 0x3c]
mov ecx, ebx
mov dword [ebp - 0x48], eax
push 0x3a
pop edx
call fcn.00428998
mov eax, dword [ebp - 0x3c]
add esp, 0xc
inc eax
mov ecx, ebx
push dword [ebp - 0x44]
push eax
push 0xa
pop edx
call fcn.004289ac
push dword [ebp - 0x6c]
mov ecx, ebx
push 0
push 0x5e
pop edx
call fcn.004289ac
mov dl, byte [ebp - 0x29]
add esp, 0x10
cmp dl, 0x6b
jne 0x4424ee
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
jmp 0x442537
push dword [ebp - 0x60]
mov ecx, ebx
push 0
push 0x5e
pop edx
call fcn.004289ac
cmp byte [ebp - 0x29], 0x6d
pop ecx
pop ecx
mov dword [ebp - 0x44], eax
jne 0x44242b
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x44], eax
jmp 0x442471
cmp dl, 0x6d
jne 0x4424ff
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
inc eax
mov dword [ebp - 0x48], eax
jmp 0x442537
push dword [ebp - 0x3c]
mov ecx, ebx
push 0x3a
pop edx
call fcn.00428998
pop ecx
push dword [ebp - 0x44]
mov dword [ebp - 0x38], eax
mov ecx, ebx
mov eax, dword [ebp - 0x3c]
inc eax
push eax
push 0xa
pop edx
call fcn.004289ac
push dword [ebp - 0x6c]
mov ecx, ebx
push 0
push 0x5e
pop edx
call fcn.004289ac
mov dl, byte [ebp - 0x29]
add esp, 0x10
mov ecx, ebx
call fcn.00428b64
mov dword [ebp - 0x78], eax
cmp dl, 0x6b
je 0x44254b
cmp dl, 0x6a
jne 0x44255f
push dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
mov ecx, ebx
inc eax
push eax
push 0x2f
pop edx
call fcn.004289ac
pop ecx
pop ecx
push dword [ebp - 0x34]
mov ecx, ebx
push 0x3a
pop edx
call fcn.00428998
mov eax, dword [ebp - 0x34]
pop ecx
push dword [ebp - 0x54]
inc eax
mov ecx, ebx
push eax
push 0xa
pop edx
call fcn.004289ac
push dword [ebp - 0x6c]
mov ecx, ebx
push 0
push 0x5e
pop edx
call fcn.004289ac
mov edx, dword [ebp - 0x7c]
mov ecx, ebx
call fcn.00428cbe
mov eax, dword [ebp - 0x3c]
mov ecx, ebx
inc eax
push eax
push 0
push 0x30
pop edx
call fcn.004289ac
mov eax, dword [ebp - 0x34]
mov ecx, ebx
inc eax
push eax
push 0
push 0x30
pop edx
call fcn.004289ac
push dword [ebp - 0x80]
mov ecx, ebx
push dword [ebp - 0x3c]
push 0x2f
pop edx
call fcn.004289ac
push dword [ebp - 0x84]
mov ecx, ebx
push dword [ebp - 0x34]
push 0x2f
pop edx
call fcn.004289ac
push dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov ecx, ebx
inc eax
push eax
push 0xa
pop edx
call fcn.004289ac
push dword [ebp - 0x54]
mov eax, dword [ebp - 0x34]
mov ecx, ebx
inc eax
push eax
push 0xa
pop edx
call fcn.004289ac
mov edx, dword [ebp - 0x6c]
add esp, 0x40
mov ecx, ebx
call fcn.00428a32
push 0xfffffffffffffff1
push dword [ebp - 0x70]
xor eax, eax
mov edx, 0x82
push eax
push eax
push eax
call fcn.004289c1
add esp, 0x14
push 0xfffffffffffffff0
push dword [ebp - 0x68]
mov ecx, ebx
push dword [ebp - 0x5c]
push dword [ebp - 0x10]
push dword [ebp - 0x20]
push 0x5d
pop edx
call fcn.004289c1
add esp, 0x14
mov edx, 0x81
mov ecx, ebx
push dword [ebp - 0x78]
push dword [ebp - 0x38]
push dword [ebp - 0x48]
call fcn.00428924
mov ecx, dword [ebp - 0x40]
add esp, 0xc
test ecx, ecx
je 0x442670
mov eax, dword [ebp - 0x5c]
mov edx, ecx
inc eax
mov ecx, esi
push eax
call fcn.004331d9
add esp, 4
mov edx, dword [ebp - 0x60]
mov ecx, ebx
call fcn.00428a32
mov eax, dword [ebp - 0x74]
mov ebx, dword [ebp - 0x64]
cmp byte [eax], 5
jne 0x4426a1
mov eax, dword [ebx + 0x20]
mov ecx, ebx
jmp 0x442691
mov ecx, eax
mov eax, dword [ecx + 0x20]
test eax, eax
jne 0x44268c
push dword [ecx]
xor edx, edx
mov ecx, esi
call fcn.00440774
pop ecx
mov edx, dword [edi + 0x20]
test edx, edx
je 0x4426b0
mov ecx, dword [ebp - 0x4c]
call fcn.0043f83e
mov dword [edi + 0x20], ebx
xor eax, eax
jmp 0x4426ba
push 7
pop eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044daed
leave
ret