Function at 0x40b6a6
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x68
mov dword [ebp - 0x10], 0xd84d8ba6
lea esi, [ebp - 0x71]
mov edi, 3
mov eax, dword [ebp - 0x10]
cmp eax, 0xaa4805
jle 0x40b744
cmp eax, 0x2a390ecf
jg 0x40b7ab
cmp eax, 0x14912e0e
jg 0x40b868
cmp eax, 0xeffc43d
jle 0x40b996
cmp eax, 0x10c0eff7
jg 0x40bc03
cmp eax, 0xeffc43e
je 0x40bce8
cmp eax, 0x107f597c
jne 0x40b6be
mov eax, dword [ebp - 0x14]
shr eax, 0xd
imul ebx, eax, 0xee
add ebx, 0x637a
mov dword [ebp - 0x14], ebx
call fcn.0040ab5c
push 0x3d16
push 0x3488
push 0x1404
push ebx
call fcn.0040c340
add esp, 0x10
mov dword [ebp - 0x10], 0x7983cfac
jmp 0x40b6be
cmp eax, 0xbe5659ca
jle 0x40b7ee
cmp eax, 0xcb21ae9b
jle 0x40b8a0
cmp eax, 0xee355f58
jle 0x40b9d7
cmp eax, 0xfc5c6eb6
jg 0x40bc52
cmp eax, 0xee355f59
je 0x40bd10
cmp eax, 0xf3075e53
jne 0x40b6be
imul eax, dword [ebp - 0x14], 0x34000
add eax, 0x30f1d
mov dword [ebp - 0x14], eax
call fcn.0040ab5c
call fcn.0040ab5c
mov dword [ebp - 0x10], 0x17b292b1
jmp 0x40b6be
cmp eax, 0x5d07fa1c
jg 0x40b90b
cmp eax, 0x3e942281
jle 0x40ba0a
cmp eax, 0x4ad13175
jg 0x40bca8
cmp eax, 0x3e942282
je 0x40bd2e
cmp eax, 0x46bb92a1
jne 0x40b6be
mov dword [ebp - 0x10], 0x244fd0dd
jmp 0x40b6be
cmp eax, 0x9e8b0306
jg 0x40b943
cmp eax, 0x8b644bae
jg 0x40ba3a
cmp eax, 0x802ad5a3
je 0x40bd60
cmp eax, 0x82a9b641
je 0x40bd97
cmp eax, 0x89a0c743
jne 0x40b6be
imul ebx, dword [ebp - 0x14], 0x5fe0000
add ebx, 0x6c770000
mov eax, ebx
shr eax, 0xb
mov dword [ebp - 0x14], eax
push 0x3f3c
push 0x369b
push 0xdca
push eax
call fcn.0040c220
add esp, 0x10
mov eax, 0x99b67fbc
cmp ebx, 0x7f000
jae 0x40be88
jmp 0x40c1a9
cmp eax, 0x20f1a2f1
jg 0x40bab5
cmp eax, 0x17b292b0
jle 0x40bcc2
cmp eax, 0x17b292b1
je 0x40bda3
cmp eax, 0x198ecc9f
jne 0x40b6be
mov dword [ebp - 0x10], 0xa80953d8
jmp 0x40b6be
cmp eax, 0xc477d7be
jg 0x40baf7
cmp eax, 0xbe5659cb
je 0x40bdbb
cmp eax, 0xc049a164
je 0x40bdd4
cmp eax, 0xc3a9cb58
jne 0x40b6be
imul ebx, dword [ebp - 0x14], 0x6e16
mov dword [ebp - 0x14], ebx
push 0x3217
push 0x44e7
push 0x549a
push ebx
call fcn.0040c340
add esp, 0x10
call fcn.0040b6a6
mov eax, 0xfceca297
cmp ebx, 0x2a
jge 0x40c1a9
mov eax, 0x99b67fbc
jmp 0x40c1a9
cmp eax, 0x7983cfab
jg 0x40bb73
cmp eax, 0x5d07fa1d
je 0x40be1e
cmp eax, 0x6b470ec3
je 0x40be5b
cmp eax, 0x76530f7b
jne 0x40b6be
mov dword [ebp - 0x10], 0xee355f59
jmp 0x40b6be
cmp eax, 0xb4122f9f
jg 0x40bbc5
cmp eax, 0x9e8b0307
je 0x40be92
cmp eax, 0xa26bf1ca
je 0x40bed8
cmp eax, 0xa80953d8
jne 0x40b6be
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x24]
mov dword [eax + 8], 0x34
mov dword [ebp - 0x10], 0xeffc43e
jmp 0x40b6be
cmp eax, 0xaa4806
je 0x40bef0
cmp eax, 0x21397d3
je 0x40bf1f
cmp eax, 0x7e19442
jne 0x40b6be
mov eax, dword [ebp - 0x18]
shl eax, 8
add eax, 0xffff4300
shr eax, 6
and eax, 0xfffffff8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5ac41d5c
jmp 0x40b6be
cmp eax, 0xcb21ae9c
je 0x40bf2e
cmp eax, 0xce3864f7
je 0x40bf79
cmp eax, 0xd84d8ba6
jne 0x40b6be
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xfceca297
jmp 0x40b6be
cmp eax, 0x2a390ed0
je 0x40bfa7
cmp eax, 0x2a72de9c
je 0x40bfe2
cmp eax, 0x3c1bbca1
jne 0x40b6be
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0x10c0eff8
jmp 0x40b6be
cmp eax, 0x8b644baf
je 0x40bffb
cmp eax, 0x915d7d23
je 0x40c035
cmp eax, 0x99b67fbc
jne 0x40b6be
mov eax, dword [ebp - 0x34]
mov byte [eax + 9], 0
mov eax, dword [ebp - 0x34]
mov cl, byte [0x47cc19]
mov byte [eax + 8], cl
mov ecx, dword [0x47cc15]
mov dword [eax + 4], ecx
mov ecx, dword [0x47cc11]
mov dword [eax], ecx
push 6
push 0x47cc1a
push 9
push dword [ebp - 0x34]
call fcn.0040c220
add esp, 0x10
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
movzx eax, word [eax + 8]
mov word [ebp - 0x58], ax
mov dword [ebp - 0x10], 0x802ad5a3
jmp 0x40b6be
cmp eax, 0x20f1a2f2
je 0x40c069
cmp eax, 0x244fd0dd
je 0x40c09b
cmp eax, 0x27e595f9
jne 0x40b6be
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x44], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x15aeb714
jmp 0x40b6be
cmp eax, 0xc477d7bf
je 0x40c0b6
cmp eax, 0xca5ed588
je 0x40c0d3
cmp eax, 0xcb0f2970
jne 0x40b6be
mov eax, dword [ebp - 0x38]
mov byte [eax + 0x10], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x47cc2c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x47cc28]
mov dword [eax + 8], ecx
mov ecx, dword [0x47cc24]
mov dword [eax + 4], ecx
mov ecx, dword [0x47cc20]
mov dword [eax], ecx
push 4
push 0x47cc30
push 0x10
push dword [ebp - 0x38]
call fcn.0040c220
add esp, 0x10
push 0x11
push dword [ebp - 0x38]
push esi
call fcn.0044a890
add esp, 0xc
mov dword [ebp - 0x10], 0x3e942282
jmp 0x40b6be
cmp eax, 0x7983cfac
je 0x40c109
cmp eax, 0x79ab7240
je 0x40c148
cmp eax, 0x7fc78f69
jne 0x40b6be
mov eax, dword [ebp - 0x14]
mov ecx, 0xbb
add eax, ecx
mov dword [ebp - 0x14], eax
push 0x214f
push 0x350f
push eax
push 0x5337
call fcn.0040c340
add esp, 0x10
mov dword [ebp - 0x10], 0xd84d8ba6
jmp 0x40b6be
cmp eax, 0xb4122fa0
je 0x40c16c
cmp eax, 0xbd25ec15
je 0x40c184
cmp eax, 0xbdef6eaf
jne 0x40b6be
mov eax, dword [ebp - 0x1c]
mov word [eax], 0x88
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x5d07fa1d
jmp 0x40b6be
cmp eax, 0x10c0eff8
je 0x40c1b1
cmp eax, 0x1185242d
jne 0x40b6be
imul ebx, dword [ebp - 0x14], 0x20c0000
add ebx, 0x16a7fe1d
mov dword [ebp - 0x14], ebx
call fcn.0040ab5c
push 0x400d
push ebx
push 0x831
push 0x46db
call fcn.0040c340
add esp, 0x10
mov dword [ebp - 0x10], 0x99b67fbc
jmp 0x40b6be
cmp eax, 0xfc5c6eb7
je 0x40c1c0
cmp eax, 0xfceca297
jne 0x40b6be
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x2a72de9c
jmp 0x40b6be
cmp eax, 0x5ac41d5c
jne 0x40c1da
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xbdef6eaf
jmp 0x40b6be
cmp eax, 0x15aeb714
jne 0x40c1e6
imul eax, dword [ebp - 0x18], 0x1c00
add eax, 0x1f771
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcb0f2970
jmp 0x40b6be
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x28]
push 0
push dword [ebp - 0x24]
push edi
push edi
push 0x50000018
call eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xfc5c6eb7
jmp 0x40b6be
imul eax, dword [ebp - 0x18], 0x54de
add eax, 0x9f204
shr eax, 5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb4122fa0
jmp 0x40b6be
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
shr eax, 0x12
lea ecx, [eax*8 - 0x340]
imul eax, eax
imul edx, eax, 0x2857
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xcb0f2970
cmp eax, edx
je 0x40bd8f
mov ecx, 0xbe5659cb
jmp 0x40bd8f
imul ecx, dword [ebp - 0x18], 0x87
mov eax, ecx
imul eax, ecx
imul edx, eax, 0x2075
add ecx, 0x74
dec edx
shr ecx, 1
add ecx, 0xffffff2a
mov dword [ebp - 0x18], ecx
mov ecx, 0x1185242d
cmp eax, edx
je 0x40bd8f
mov ecx, 0x27e595f9
mov dword [ebp - 0x10], ecx
jmp 0x40b6be
mov dword [ebp - 0x10], 0x9e8b0307
jmp 0x40b6be
push eax
sub esp, 0x88
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x76530f7b
jmp 0x40b6be
push esi
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xca5ed588
jmp 0x40b6be
imul ebx, dword [ebp - 0x14], 0x32
add ebx, 0x1170
mov eax, ebx
shr eax, 0xb
mov dword [ebp - 0x14], eax
push eax
push 0x3c9c
push 0x342e
push 0x1adb
call fcn.0040c220
add esp, 0x10
call fcn.0040ab5c
mov eax, 0x17b292b1
cmp ebx, 0x45000
jae 0x40c1a9
mov eax, 0x20f1a2f2
jmp 0x40c1a9
mov eax, dword [ebp - 0x18]
mov ecx, 0xde
add eax, ecx
shr eax, 3
imul ecx, eax, 0xe9
imul ecx, ecx
imul edx, ecx, 0x6be3
imul eax, eax, 0x1d2000
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x79ab7240
cmp edx, ecx
je 0x40c1a9
mov eax, 0xce3864f7
jmp 0x40c1a9
mov eax, dword [ebp - 0x14]
shl eax, 4
add eax, 0xfe0
shr eax, 0xf
imul ebx, eax, 0xb6
mov dword [ebp - 0x14], ebx
call fcn.0040b6a6
mov eax, 0xb4122fa0
cmp ebx, 0xc8
jae 0x40c1a9
mov eax, 0xfceca297
jmp 0x40c1a9
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov word [eax + 0xe], 0
mov eax, dword [ebp - 0x40]
movzx ecx, word [0x46f6b4]
mov word [eax + 0xc], cx
mov ecx, dword [0x46f6b0]
mov dword [eax + 8], ecx
mov ecx, dword [0x46f6ac]
mov dword [eax + 4], ecx
mov ecx, dword [0x46f6a8]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x7983cfac
jmp 0x40b6be
mov eax, dword [ebp - 0x14]
shr eax, 8
add eax, 0xffffffd6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xfceca297
jmp 0x40b6be
mov ebx, dword [ebp - 0x14]
add ebx, 0xffffff90
shr ebx, 9
add ebx, 0xffffffda
mov dword [ebp - 0x14], ebx
call fcn.0040b6a6
mov eax, 0xc3a9cb58
cmp ebx, 0x99
jae 0x40c1a9
mov eax, 0x89a0c743
jmp 0x40c1a9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x198ecc9f
jmp 0x40b6be
push 0x88
push 0x46f610
push dword [ebp - 0x3c]
call fcn.0044a890
add esp, 0xc
push 8
push 0x46f698
push 0x44
push dword [ebp - 0x3c]
call fcn.0040c340
add esp, 0x10
push 0x8a
push dword [ebp - 0x3c]
push dword [ebp - 0x2c]
call fcn.0044a890
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x82a9b641
jmp 0x40b6be
mov eax, dword [ebp - 0x4c]
mov word [eax], 0x88
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
mov word [eax], 0xe
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xc477d7bf
jmp 0x40b6be
mov eax, dword [ebp - 0x18]
shr eax, 9
lea ecx, [eax + 0xab]
add eax, 0xbd
imul ecx, ecx
imul edx, ecx, 0x4c75
dec edx
shr eax, 0xa
and eax, 0xfffffff8
mov dword [ebp - 0x18], eax
mov eax, 0xce3864f7
cmp edx, ecx
je 0x40c1a9
mov eax, 0x14912e0f
jmp 0x40c1a9
imul eax, dword [ebp - 0x18], 0xdb6000
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x99b67fbc
jmp 0x40b6be
imul eax, dword [ebp - 0x18], 0x47
add eax, 0xfffffc65
shr eax, 8
mov ecx, eax
imul ecx, eax
shl eax, 0x10
imul edx, ecx, 0x6a6b
dec edx
add eax, 0xb80000
mov dword [ebp - 0x18], eax
mov eax, 0xf3075e53
cmp ecx, edx
je 0x40c1a9
mov eax, 0xcb21ae9c
jmp 0x40c1a9
mov ebx, dword [ebp - 0x14]
shr ebx, 1
and ebx, 0x7fffc000
add ebx, 0x364000
mov dword [ebp - 0x14], ebx
call fcn.0040b6a6
mov eax, 0xcb0f2970
cmp ebx, 0x98
jge 0x40c1a9
mov eax, 0x76530f7b
jmp 0x40c1a9
mov ebx, dword [ebp - 0x14]
mov eax, 0xb8
add ebx, eax
mov eax, ebx
shr eax, 8
mov dword [ebp - 0x14], eax
call fcn.0040ab5c
mov eax, 0x6b470ec3
cmp ebx, 0x6300
jb 0x40c1a9
mov eax, 0x107f597c
jmp 0x40c1a9
mov ecx, dword [ebp - 0x54]
mov eax, 0x4ad13176
cmp ecx, 8
je 0x40c1a9
mov eax, 0x2a390ed0
jmp 0x40c1a9
mov eax, dword [ebp - 0x50]
mov word [eax], 0xe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0x21397d3
jmp 0x40b6be
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff26
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x79ef
shr eax, 5
dec edx
add eax, 0xffffffc7
mov dword [ebp - 0x18], eax
mov eax, 0xa26bf1ca
cmp ecx, edx
je 0x40c1a9
mov eax, 0x3c1bbca1
jmp 0x40c1a9
push 4
push 0x46f6b6
push 7
push dword [ebp - 0x40]
call fcn.0040c340
add esp, 0x10
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [eax + 4], ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x7e19442
jmp 0x40b6be
mov ebx, dword [ebp - 0x14]
shr ebx, 0x17
mov dword [ebp - 0x14], ebx
call fcn.0040ab5c
call fcn.0040ab5c
mov eax, 0xcb0f2970
cmp ebx, 0x7b
je 0x40c1a9
mov eax, 0x7983cfac
jmp 0x40c1a9
mov eax, dword [ebp - 0x3c]
mov word [eax + 0x88], 0
mov dword [ebp - 0x10], 0x8b644baf
jmp 0x40b6be
imul eax, dword [ebp - 0x14], 0x1a68
shr eax, 9
imul ecx, eax, 0xa9
mov dword [ebp - 0x14], ecx
mov eax, 0x99b67fbc
cmp ecx, 0x83
jb 0x40c1a9
mov eax, 0x27e595f9
mov dword [ebp - 0x10], eax
jmp 0x40b6be
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x17b292b1
jmp 0x40b6be
mov eax, dword [ebp - 0x18]
shl eax, 0x19
add eax, 0x85920000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x46bb92a1
jmp 0x40b6be
cmp eax, 0x4ad13176
je 0x40c1f9
jmp 0x40b6be
cmp eax, 0x14912e0f
jne 0x40b6be
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret