Function at 0x422da0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x594
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x488], 0
call fcn.00422120
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x49c], 0xab093588
mov eax, dword [ebp - 0x49c]
mov ecx, eax
sub ecx, 0xa455f095
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x4a4], ecx
jg 0x422e10
jmp 0x422df4
mov eax, dword [ebp - 0x4a0]
sub eax, 0x9773061d
mov dword [ebp - 0x4a8], eax
je 0x42338f
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xab093587
mov dword [ebp - 0x4ac], eax
jg 0x422e48
jmp 0x422e2c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xa455f096
mov dword [ebp - 0x4b0], eax
je 0x423739
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb8d82a6d
mov dword [ebp - 0x4b4], eax
jg 0x422e80
jmp 0x422e64
mov eax, dword [ebp - 0x4a0]
sub eax, 0xab093588
mov dword [ebp - 0x4b8], eax
je 0x4231b1
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xca248bf9
mov dword [ebp - 0x4bc], eax
jg 0x422eb8
jmp 0x422e9c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb8d82a6e
mov dword [ebp - 0x4c0], eax
je 0x423717
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0xfcce7e6b
mov dword [ebp - 0x4c4], eax
jg 0x422ef0
jmp 0x422ed4
mov eax, dword [ebp - 0x4a0]
sub eax, 0xca248bfa
mov dword [ebp - 0x4c8], eax
je 0x423770
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x1009225
mov dword [ebp - 0x4cc], eax
jg 0x422f28
jmp 0x422f0c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xfcce7e6c
mov dword [ebp - 0x4d0], eax
je 0x423748
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x1fff7176
mov dword [ebp - 0x4d4], eax
jg 0x422f60
jmp 0x422f44
mov eax, dword [ebp - 0x4a0]
sub eax, 0x1009226
mov dword [ebp - 0x4d8], eax
je 0x4236d3
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x28691382
mov dword [ebp - 0x4dc], eax
jg 0x422f98
jmp 0x422f7c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x1fff7177
mov dword [ebp - 0x4e0], eax
je 0x423306
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x36958a20
mov dword [ebp - 0x4e4], eax
jg 0x422fd0
jmp 0x422fb4
mov eax, dword [ebp - 0x4a0]
sub eax, 0x28691383
mov dword [ebp - 0x4e8], eax
je 0x423576
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x597487a4
mov dword [ebp - 0x4ec], eax
jg 0x423190
jmp 0x422fec
mov eax, dword [ebp - 0x4a0]
sub eax, 0x567d6594
mov dword [ebp - 0x4f0], eax
jg 0x423174
jmp 0x423008
mov eax, dword [ebp - 0x4a0]
sub eax, 0x390228eb
mov dword [ebp - 0x4f4], eax
jg 0x423040
jmp 0x423024
mov eax, dword [ebp - 0x4a0]
sub eax, 0x36958a21
mov dword [ebp - 0x4f8], eax
je 0x4231e1
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x3d2dad80
mov dword [ebp - 0x4fc], eax
jg 0x423078
jmp 0x42305c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x390228ec
mov dword [ebp - 0x500], eax
je 0x423364
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x400c525e
mov dword [ebp - 0x504], eax
jg 0x4230b0
jmp 0x423094
mov eax, dword [ebp - 0x4a0]
sub eax, 0x3d2dad81
mov dword [ebp - 0x508], eax
je 0x42359c
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x45a02fbf
mov dword [ebp - 0x50c], eax
jg 0x4230e8
jmp 0x4230cc
mov eax, dword [ebp - 0x4a0]
sub eax, 0x400c525f
mov dword [ebp - 0x510], eax
je 0x423430
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4e66cfa1
mov dword [ebp - 0x514], eax
jg 0x423120
jmp 0x423104
mov eax, dword [ebp - 0x4a0]
sub eax, 0x45a02fc0
mov dword [ebp - 0x518], eax
je 0x423701
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4e66cfa2
mov dword [ebp - 0x51c], eax
je 0x42375e
jmp 0x42313c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x512a3fc4
mov dword [ebp - 0x520], eax
je 0x4231d2
jmp 0x423158
mov eax, dword [ebp - 0x4a0]
sub eax, 0x51928d19
mov dword [ebp - 0x524], eax
je 0x423454
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x567d6595
mov dword [ebp - 0x528], eax
je 0x4235e6
jmp 0x4231ac
mov eax, dword [ebp - 0x4a0]
sub eax, 0x597487a5
mov dword [ebp - 0x52c], eax
je 0x42352c
jmp 0x4231ac
jmp 0x42377e
mov eax, 0x36958a21
mov ecx, 0x512a3fc4
mov edx, dword [ebp - 0x10]
cmp edx, 0
cmovl eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x42377e
mov dword [ebp - 0x49c], 0x4e66cfa2
jmp 0x42377e
call fcn.00420720
mov eax, 0x104
lea ecx, [ebp - 0x272]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x530], eax
call fcn.00406b90
mov dword [ebp - 0x480], eax
mov eax, dword [0x474908]
call eax
mov ecx, 0
mov edx, 0x28
lea esi, [ebp - 0x40]
mov dword [0x4733cc], eax
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x538], ecx
call fcn.00406a80
lea ecx, [ebp - 0x40]
mov edx, 0
mov esi, dword [0x454d88]
movzx esi, word [esi]
mov dword [ebp - 0x48c], esi
mov esi, dword [ebp - 0x48c]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x454d88]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x490], edx
mov edx, dword [ebp - 0x490]
mov esi, dword [0x454d88]
mov edi, dword [ebp - 0x48c]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x454d88]
add edi, 2
mov ebx, dword [ebp - 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x53c], eax
call fcn.00405fa0
lea eax, [ebp - 0x40]
mov ecx, dword [0x4733cc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00408760
mov ecx, 0x390228ec
mov edx, 0x1fff7177
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42377e
lea eax, [ebp - 0x272]
mov ecx, dword [0x4748fc]
mov edx, esp
mov dword [edx + 8], 0x4733d0
mov dword [edx], eax
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
call ecx
sub esp, 0x10
mov ecx, 1
mov dword [esp], 1
mov dword [esp + 4], 1
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x544], ecx
call fcn.0040fa70
mov dword [ebp - 0x49c], 0x390228ec
jmp 0x42377e
lea eax, [ebp - 0x488]
mov dword [esp], eax
call fcn.00421210
mov ecx, 0xb8d82a6e
mov edx, 0x9773061d
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42377e
lea eax, [0x474980]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x548], ecx
call fcn.00407000
mov ecx, 0
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
sub ecx, 4
add eax, ecx
mov word [eax*2 + 0x474980], 0
mov eax, dword [0x474904]
mov ecx, esp
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0x474980
mov dword [ecx + 4], 0
mov dword [ecx], 0
call eax
sub esp, 0x10
mov ecx, 0x3d2dad81
mov edx, 0x400c525f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42377e
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x597487a5
mov edx, 0x51928d19
cmp eax, 0xb7
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42377e
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x47c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x550], ecx
call fcn.00406a80
lea ecx, [0x474980]
mov dword [esp], ecx
mov dword [ebp - 0x554], eax
call fcn.00407320
mov ecx, 0x104
lea edx, [0x474980]
mov esi, 0xc2
lea edi, [ebp - 0x47c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xc2
mov dword [ebp - 0x558], esi
mov dword [ebp - 0x55c], ecx
call fcn.00408450
mov eax, 0
lea ecx, [ebp - 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x560], eax
call fcn.00422520
mov ecx, dword [0x474910]
mov edx, dword [ebp - 0x18]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0x564], eax
call ecx
sub esp, 4
mov dword [ebp - 0x49c], 0x28691383
mov dword [ebp - 0x568], eax
jmp 0x42377e
lea eax, [0x4733d0]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x56c], ecx
call fcn.00406db0
mov dword [ebp - 0x49c], 0x28691383
mov dword [ebp - 0x570], eax
jmp 0x42377e
mov eax, dword [0x47491c]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x49c], 0x567d6595
mov dword [ebp - 0x574], eax
jmp 0x42377e
lea eax, [0x4733d0]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x578], ecx
call fcn.00406db0
mov dword [ebp - 0x49c], 0x567d6595
mov dword [ebp - 0x57c], eax
jmp 0x42377e
mov eax, 0
mov ecx, 0x28
lea edx, [ebp - 0x68]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x584], ecx
call fcn.00406a80
lea ecx, [ebp - 0x68]
mov edx, 0
mov esi, dword [0x454d8c]
movzx esi, word [esi]
mov dword [ebp - 0x494], esi
mov esi, dword [ebp - 0x494]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x454d8c]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x498], edx
mov edx, dword [ebp - 0x498]
mov esi, dword [0x454d8c]
mov edi, dword [ebp - 0x494]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x454d8c]
add edi, 2
mov ebx, dword [ebp - 0x494]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x588], eax
call fcn.00405fa0
lea eax, [ebp - 0x68]
mov ecx, dword [0x4733cc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004096c0
mov ecx, 0x45a02fc0
mov edx, 0x1009226
cmp eax, 0
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x42377e
mov eax, 0
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x58c], eax
call fcn.0040fa70
mov dword [ebp - 0x49c], 0x45a02fc0
jmp 0x42377e
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x49c], 0xca248bfa
jmp 0x42377e
mov eax, 0xfcce7e6c
mov ecx, 0xa455f096
cmp dword [ebp - 0x488], 6
cmovb eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x42377e
mov dword [ebp - 0x49c], 0x4e66cfa2
jmp 0x42377e
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x49c], 0xca248bfa
jmp 0x42377e
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, dword [ebp - 0x14]
add esp, 0x594
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x422dcf