Function at 0x414f70
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x5d8
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x4ac], 0
call fcn.004141e0
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x4b0], 0x7ac63b87
mov eax, dword [ebp - 0x4b0]
mov ecx, eax
sub ecx, 0x7ac63b86
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4b8], ecx
jg 0x4153d5
jmp 0x414fc3
mov eax, dword [ebp - 0x4b4]
sub eax, 0x6fcfb243
mov dword [ebp - 0x4bc], eax
jg 0x4153b8
jmp 0x414fdf
mov eax, dword [ebp - 0x4b4]
sub eax, 0x4e54ab82
mov dword [ebp - 0x4c0], eax
jg 0x41539c
jmp 0x414ffb
mov eax, dword [ebp - 0x4b4]
sub eax, 0x96585b76
mov dword [ebp - 0x4c4], eax
jg 0x415033
jmp 0x415017
mov eax, dword [ebp - 0x4b4]
sub eax, 0x8fcc920d
mov dword [ebp - 0x4c8], eax
je 0x4155e5
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0xb1d024cd
mov dword [ebp - 0x4cc], eax
jg 0x41506b
jmp 0x41504f
mov eax, dword [ebp - 0x4b4]
sub eax, 0x96585b77
mov dword [ebp - 0x4d0], eax
je 0x4159ed
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0xbd3e6575
mov dword [ebp - 0x4d4], eax
jg 0x4150a3
jmp 0x415087
mov eax, dword [ebp - 0x4b4]
sub eax, 0xb1d024ce
mov dword [ebp - 0x4d8], eax
je 0x415521
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x451d1326
mov dword [ebp - 0x4dc], eax
jg 0x415380
jmp 0x4150bf
mov eax, dword [ebp - 0x4b4]
add eax, 0xc0058e5d
mov dword [ebp - 0x4e0], eax
jg 0x415364
jmp 0x4150dc
mov eax, dword [ebp - 0x4b4]
sub eax, 0x3cacc36b
mov dword [ebp - 0x4e4], eax
jg 0x415348
jmp 0x4150f8
mov eax, dword [ebp - 0x4b4]
sub eax, 0x327c72f5
mov dword [ebp - 0x4e8], eax
jg 0x41532c
jmp 0x415114
mov eax, dword [ebp - 0x4b4]
add eax, 0xcef09861
mov dword [ebp - 0x4ec], eax
jg 0x415310
jmp 0x415131
mov eax, dword [ebp - 0x4b4]
add eax, 0xd776a9ff
mov dword [ebp - 0x4f0], eax
jg 0x4152f4
jmp 0x41514e
mov eax, dword [ebp - 0x4b4]
sub eax, 0x2178bead
mov dword [ebp - 0x4f4], eax
jg 0x4152d8
jmp 0x41516a
mov eax, dword [ebp - 0x4b4]
add eax, 0xe5e3bba5
mov dword [ebp - 0x4f8], eax
jg 0x4152bc
jmp 0x415187
mov eax, dword [ebp - 0x4b4]
sub eax, 0x14b65709
mov dword [ebp - 0x4fc], eax
jg 0x4152a0
jmp 0x4151a3
mov eax, dword [ebp - 0x4b4]
sub eax, 0xd43660aa
mov dword [ebp - 0x500], eax
jg 0x415284
jmp 0x4151bf
mov eax, dword [ebp - 0x4b4]
sub eax, 0xcae844c7
mov dword [ebp - 0x504], eax
jg 0x415268
jmp 0x4151db
mov eax, dword [ebp - 0x4b4]
sub eax, 0xc58c4cde
mov dword [ebp - 0x508], eax
jg 0x41524c
jmp 0x4151f7
mov eax, dword [ebp - 0x4b4]
sub eax, 0xbd3e6576
mov dword [ebp - 0x50c], eax
je 0x41566e
jmp 0x415213
mov eax, dword [ebp - 0x4b4]
sub eax, 0xbdbd8e15
mov dword [ebp - 0x510], eax
je 0x415418
jmp 0x41522f
mov eax, dword [ebp - 0x4b4]
add eax, 0x4122c321
mov dword [ebp - 0x514], eax
je 0x415992
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0xc58c4cdf
mov dword [ebp - 0x518], eax
je 0x415427
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0xcae844c8
mov dword [ebp - 0x51c], eax
je 0x41580d
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0xd43660ab
mov dword [ebp - 0x520], eax
je 0x41594e
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x14b6570a
mov dword [ebp - 0x524], eax
je 0x41597c
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x1a1c445c
mov dword [ebp - 0x528], eax
je 0x4158c7
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x2178beae
mov dword [ebp - 0x52c], eax
je 0x4159c3
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x28895602
mov dword [ebp - 0x530], eax
je 0x415735
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x310f67a0
mov dword [ebp - 0x534], eax
je 0x4159d9
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x327c72f6
mov dword [ebp - 0x538], eax
je 0x415857
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x3cacc36c
mov dword [ebp - 0x53c], eax
je 0x415567
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x3ffa71a4
mov dword [ebp - 0x540], eax
je 0x415711
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x451d1327
mov dword [ebp - 0x544], eax
je 0x415643
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
sub eax, 0x4e54ab83
mov dword [ebp - 0x548], eax
je 0x41587d
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
add eax, 0x90304dbc
mov dword [ebp - 0x54c], eax
je 0x4159b4
jmp 0x4153f2
mov eax, dword [ebp - 0x4b4]
add eax, 0x8539c479
mov dword [ebp - 0x550], eax
je 0x4153f7
jmp 0x4153f2
jmp 0x4159fa
mov eax, 0xc58c4cdf
mov ecx, 0xbdbd8e15
mov edx, dword [ebp - 0xc]
cmp edx, 0
cmovl eax, ecx
mov dword [ebp - 0x4b0], eax
jmp 0x4159fa
mov dword [ebp - 0x4b0], 0x310f67a0
jmp 0x4159fa
call fcn.00412a60
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x296]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x558], ecx
call fcn.00405ff0
mov ecx, 0x104
lea edx, [ebp - 0x296]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x560], ecx
call fcn.00406100
mov dword [ebp - 0x4a4], eax
mov eax, dword [0x453588]
call eax
mov ecx, 0
mov edx, 0x28
lea esi, [ebp - 0x64]
mov dword [0x45204c], eax
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x564], edx
mov dword [ebp - 0x568], ecx
call fcn.00405ff0
lea ecx, [ebp - 0x64]
mov edx, dword [0x43d9f0]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [ebp - 0x56c], eax
call fcn.00405660
lea eax, [ebp - 0x64]
mov ecx, dword [0x45204c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00407e40
mov ecx, 0xb7b27e2e
pushfd
sub ecx, 0x7b05bac2
popfd
mov edx, 0x43c4e0
mov edx, dword [edx]
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x4b0], ecx
jmp 0x4159fa
lea eax, [ebp - 0x296]
mov ecx, dword [0x45357c]
mov edx, esp
mov dword [edx], eax
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
mov dword [edx + 8], 0x452050
call ecx
sub esp, 0x10
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x4b0], 0x96585b77
mov dword [ebp - 0x570], eax
jmp 0x4159fa
mov eax, 0
mov ecx, 0x28
lea edx, [ebp - 0x3c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x578], ecx
call fcn.00405ff0
lea ecx, [ebp - 0x3c]
mov edx, dword [0x43d9f4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [ebp - 0x57c], eax
call fcn.00405660
lea eax, [ebp - 0x3c]
mov ecx, dword [0x45204c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00407e40
mov ecx, 0x451d1327
mov edx, 0x8fcc920d
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x4b0], ecx
jmp 0x4159fa
lea eax, [ebp - 0x296]
mov ecx, dword [0x45357c]
mov edx, esp
mov dword [edx], eax
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
mov dword [edx + 8], 0x452050
call ecx
sub esp, 0x10
mov ecx, 1
mov dword [esp], 1
mov dword [esp + 4], 1
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x584], ecx
call fcn.004105e0
mov dword [ebp - 0x4b0], 0x451d1327
jmp 0x4159fa
lea eax, [ebp - 0x4ac]
mov dword [esp], eax
call fcn.00413560
mov ecx, 0xbedd3cdf
mov edx, 0xbd3e6576
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x4b0], ecx
jmp 0x4159fa
lea eax, [0x453600]
mov ecx, 0x104
lea edx, [ebp - 0x296]
mov esi, dword [ebp - 0x4a4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x588], ecx
call fcn.00406580
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
add eax, 0x384d7a97
sub eax, 4
sub eax, 0x384d7a97
mov word [eax*2 + 0x453600], 0
mov eax, esp
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0x453600
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateEventW]
call eax
sub esp, 0x10
mov ecx, 0x4e54ab83
mov edx, 0x3ffa71a4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
cmovne ecx, edx
mov dword [ebp - 0x4b0], ecx
jmp 0x4159fa
mov eax, dword [0x4535b0]
call eax
mov ecx, 0xcae844c8
mov edx, 0x28895602
cmp eax, 0xb7
cmove ecx, edx
mov dword [ebp - 0x4b0], ecx
jmp 0x4159fa
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x4a0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x590], ecx
call fcn.00405ff0
lea ecx, [0x453600]
mov dword [esp], ecx
mov dword [ebp - 0x594], eax
call fcn.004068b0
mov ecx, 0x104
lea edx, [0x453600]
mov esi, 0xc2
lea edi, [ebp - 0x4a0]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xc2
mov dword [ebp - 0x598], esi
mov dword [ebp - 0x59c], ecx
call fcn.00407b50
mov eax, 0
lea ecx, [ebp - 0x4a0]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x5a0], eax
call fcn.004146d0
mov ecx, dword [0x453590]
mov edx, dword [ebp - 0x14]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0x5a4], eax
call ecx
sub esp, 4
mov dword [ebp - 0x4b0], 0x327c72f6
mov dword [ebp - 0x5a8], eax
jmp 0x4159fa
lea eax, [0x452050]
mov ecx, 0x104
lea edx, [ebp - 0x296]
mov esi, dword [ebp - 0x4a4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x5ac], ecx
call fcn.00406330
mov dword [ebp - 0x4b0], 0x327c72f6
mov dword [ebp - 0x5b0], eax
jmp 0x4159fa
mov eax, dword [0x45359c]
mov ecx, dword [ebp - 0x14]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x4b0], 0x1a1c445c
mov dword [ebp - 0x5b4], eax
jmp 0x4159fa
lea eax, [0x452050]
mov ecx, 0x104
lea edx, [ebp - 0x296]
mov esi, dword [ebp - 0x4a4]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x5b8], ecx
call fcn.00406330
mov dword [ebp - 0x4b0], 0x1a1c445c
mov dword [ebp - 0x5bc], eax
jmp 0x4159fa
mov eax, 0
mov ecx, 0x28
lea edx, [ebp - 0x8c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5c4], ecx
call fcn.00405ff0
lea ecx, [ebp - 0x8c]
mov edx, dword [0x43d9f8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [ebp - 0x5c8], eax
call fcn.00405660
lea eax, [ebp - 0x8c]
mov ecx, dword [0x45204c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408db0
mov ecx, 0x14b6570a
mov edx, 0xd43660ab
cmp eax, 0
cmove ecx, edx
mov dword [ebp - 0x4b0], ecx
jmp 0x4159fa
mov eax, 0
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x5cc], eax
call fcn.004105e0
mov dword [ebp - 0x4b0], 0x14b6570a
jmp 0x4159fa
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x4b0], 0x96585b77
jmp 0x4159fa
mov eax, 0x2178beae
mov ecx, 0x6fcfb244
cmp dword [ebp - 0x4ac], 6
cmovb eax, ecx
mov dword [ebp - 0x4b0], eax
jmp 0x4159fa
mov dword [ebp - 0x4b0], 0x310f67a0
jmp 0x4159fa
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x4b0], 0x96585b77
jmp 0x4159fa
mov eax, esi
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, dword [ebp - 0x10]
add esp, 0x5d8
pop esi
pop edi
pop ebp
ret
jmp 0x414f9e