Function at 0x422d10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x594
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x488], 0
call fcn.00421f90
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x49c], 0x39e6e897
mov eax, dword [ebp - 0x49c]
mov ecx, eax
sub ecx, 0x6b352daf
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x4a4], ecx
jg 0x423100
jmp 0x422d64
mov eax, dword [ebp - 0x4a0]
sub eax, 0xa0a681cc
mov dword [ebp - 0x4a8], eax
jg 0x422d9c
jmp 0x422d80
mov eax, dword [ebp - 0x4a0]
sub eax, 0x9d09e3fe
mov dword [ebp - 0x4ac], eax
je 0x4233be
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xaffa9554
mov dword [ebp - 0x4b0], eax
jg 0x422dd4
jmp 0x422db8
mov eax, dword [ebp - 0x4a0]
sub eax, 0xa0a681cd
mov dword [ebp - 0x4b4], eax
je 0x4236b3
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x623976e6
mov dword [ebp - 0x4b8], eax
jg 0x4230e4
jmp 0x422df0
mov eax, dword [ebp - 0x4a0]
sub eax, 0x618a1278
mov dword [ebp - 0x4bc], eax
jg 0x4230c8
jmp 0x422e0c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x50741b05
mov dword [ebp - 0x4c0], eax
jg 0x4230ac
jmp 0x422e28
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4e116184
mov dword [ebp - 0x4c4], eax
jg 0x423090
jmp 0x422e44
mov eax, dword [ebp - 0x4a0]
sub eax, 0x492395c2
mov dword [ebp - 0x4c8], eax
jg 0x423074
jmp 0x422e60
mov eax, dword [ebp - 0x4a0]
sub eax, 0x39e6e896
mov dword [ebp - 0x4cc], eax
jg 0x423058
jmp 0x422e7c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x3104e767
mov dword [ebp - 0x4d0], eax
jg 0x42303c
jmp 0x422e98
mov eax, dword [ebp - 0x4a0]
sub eax, 0x27334ca9
mov dword [ebp - 0x4d4], eax
jg 0x423020
jmp 0x422eb4
mov eax, dword [ebp - 0x4a0]
sub eax, 0x5a78701
mov dword [ebp - 0x4d8], eax
jg 0x423004
jmp 0x422ed0
mov eax, dword [ebp - 0x4a0]
sub eax, 0x23b820b
mov dword [ebp - 0x4dc], eax
jg 0x422fe8
jmp 0x422eec
mov eax, dword [ebp - 0x4a0]
sub eax, 0xf2af9f84
mov dword [ebp - 0x4e0], eax
jg 0x422fcc
jmp 0x422f08
mov eax, dword [ebp - 0x4a0]
sub eax, 0xdf700b9f
mov dword [ebp - 0x4e4], eax
jg 0x422fb0
jmp 0x422f24
mov eax, dword [ebp - 0x4a0]
sub eax, 0xdce75d7e
mov dword [ebp - 0x4e8], eax
jg 0x422f94
jmp 0x422f40
mov eax, dword [ebp - 0x4a0]
sub eax, 0xaffa9555
mov dword [ebp - 0x4ec], eax
je 0x423506
jmp 0x422f5c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xb045da30
mov dword [ebp - 0x4f0], eax
je 0x42366c
jmp 0x422f78
mov eax, dword [ebp - 0x4a0]
sub eax, 0xcda12412
mov dword [ebp - 0x4f4], eax
je 0x42339a
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xdce75d7f
mov dword [ebp - 0x4f8], eax
je 0x423682
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xdf700ba0
mov dword [ebp - 0x4fc], eax
je 0x4232f7
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0xf2af9f85
mov dword [ebp - 0x500], eax
je 0x423151
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x23b820c
mov dword [ebp - 0x504], eax
je 0x4234e0
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x5a78702
mov dword [ebp - 0x508], eax
je 0x4236c9
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x27334caa
mov dword [ebp - 0x50c], eax
je 0x423496
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x3104e768
mov dword [ebp - 0x510], eax
je 0x42363e
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x39e6e897
mov dword [ebp - 0x514], eax
je 0x423121
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x492395c3
mov dword [ebp - 0x518], eax
je 0x4236db
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x4e116185
mov dword [ebp - 0x51c], eax
je 0x423142
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x50741b06
mov dword [ebp - 0x520], eax
je 0x4236a4
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x618a1279
mov dword [ebp - 0x524], eax
je 0x4232cc
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x623976e7
mov dword [ebp - 0x528], eax
je 0x423550
jmp 0x42311c
mov eax, dword [ebp - 0x4a0]
sub eax, 0x6b352db0
mov dword [ebp - 0x52c], eax
je 0x42326e
jmp 0x42311c
jmp 0x4236e9
mov eax, 0xf2af9f85
mov ecx, 0x4e116185
mov edx, dword [ebp - 0x10]
cmp edx, 0
cmovl eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x4236e9
mov dword [ebp - 0x49c], 0x5a78702
jmp 0x4236e9
call fcn.00420580
mov eax, 0x104
lea ecx, [ebp - 0x272]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x530], eax
call fcn.00406a00
mov dword [ebp - 0x480], eax
mov eax, dword [0x46d8c8]
call eax
mov ecx, 0
mov edx, 0x28
lea esi, [ebp - 0x40]
mov dword [0x46c38c], eax
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x538], ecx
call fcn.004068f0
lea ecx, [ebp - 0x40]
mov edx, 0
mov esi, dword [0x44dd90]
movzx esi, word [esi]
mov dword [ebp - 0x48c], esi
mov esi, dword [ebp - 0x48c]
sub edx, 1
sub esi, edx
mov edx, dword [0x44dd90]
movzx edx, word [edx + esi*2]
mov dword [ebp - 0x490], edx
mov edx, dword [ebp - 0x490]
mov esi, dword [0x44dd90]
mov edi, dword [ebp - 0x48c]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x44dd90]
add edi, 2
mov ebx, dword [ebp - 0x48c]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x53c], eax
call fcn.00405e10
lea eax, [ebp - 0x40]
mov ecx, dword [0x46c38c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004085e0
mov ecx, 0x618a1279
mov edx, 0x6b352db0
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x4236e9
lea eax, [ebp - 0x272]
mov ecx, dword [0x46d8bc]
mov edx, esp
mov dword [edx + 8], 0x46c390
mov dword [edx], eax
mov dword [edx + 0xc], 0
mov dword [edx + 4], 0x104
call ecx
sub esp, 0x10
mov ecx, 1
mov dword [esp], 1
mov dword [esp + 4], 1
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x544], ecx
call fcn.0040f8f0
mov dword [ebp - 0x49c], 0x618a1279
jmp 0x4236e9
lea eax, [ebp - 0x488]
mov dword [esp], eax
call fcn.00421080
mov ecx, 0xdce75d7f
mov edx, 0xdf700ba0
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x4236e9
lea eax, [0x46d940]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x548], ecx
call fcn.00406e60
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
add eax, 0x505edc0
sub eax, 4
sub eax, 0x505edc0
mov word [eax*2 + 0x46d940], 0
mov eax, dword [0x46d8c4]
mov ecx, esp
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0x46d940
mov dword [ecx + 4], 0
mov dword [ecx], 0
call eax
sub esp, 0x10
mov ecx, 0xaffa9555
mov edx, 0xcda12412
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
cmovne ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x4236e9
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x27334caa
mov edx, 0x9d09e3fe
cmp eax, 0xb7
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x4236e9
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x47c]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x550], ecx
call fcn.004068f0
lea ecx, [0x46d940]
mov dword [esp], ecx
mov dword [ebp - 0x554], eax
call fcn.00407180
mov ecx, 0x104
lea edx, [0x46d940]
mov esi, 0xc2
lea edi, [ebp - 0x47c]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0xc2
mov dword [ebp - 0x558], esi
mov dword [ebp - 0x55c], ecx
call fcn.004082c0
mov eax, 0
lea ecx, [ebp - 0x47c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x560], eax
call fcn.00422480
mov ecx, dword [0x46d8d0]
mov edx, dword [ebp - 0x18]
mov esi, esp
mov dword [esi], edx
mov dword [ebp - 0x564], eax
call ecx
sub esp, 4
mov dword [ebp - 0x49c], 0x23b820c
mov dword [ebp - 0x568], eax
jmp 0x4236e9
lea eax, [0x46c390]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x56c], ecx
call fcn.00406c20
mov dword [ebp - 0x49c], 0x23b820c
mov dword [ebp - 0x570], eax
jmp 0x4236e9
mov eax, dword [0x46d8dc]
mov ecx, dword [ebp - 0x18]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x49c], 0x623976e7
mov dword [ebp - 0x574], eax
jmp 0x4236e9
lea eax, [0x46c390]
mov ecx, 0x104
lea edx, [ebp - 0x272]
mov esi, dword [ebp - 0x480]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x578], ecx
call fcn.00406c20
mov dword [ebp - 0x49c], 0x623976e7
mov dword [ebp - 0x57c], eax
jmp 0x4236e9
mov eax, 0
mov ecx, 0x28
lea edx, [ebp - 0x68]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x584], ecx
call fcn.004068f0
lea ecx, [ebp - 0x68]
mov edx, dword [str._r4__]
movzx edx, word [edx]
mov dword [ebp - 0x494], edx
mov edx, dword [ebp - 0x494]
sub edx, 0xb9dc7f20
add edx, 1
add edx, 0xb9dc7f20
mov esi, dword [str._r4__]
shl edx, 1
add esi, edx
movzx edx, word [esi]
mov dword [ebp - 0x498], edx
mov edx, dword [ebp - 0x498]
mov esi, dword [str._r4__]
mov edi, dword [ebp - 0x494]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [str._r4__]
add edi, 2
mov ebx, dword [ebp - 0x494]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x588], eax
call fcn.00405e10
lea eax, [ebp - 0x68]
mov ecx, dword [0x46c38c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00409540
mov ecx, 0xb045da30
mov edx, 0x3104e768
cmp eax, 0
cmove ecx, edx
mov dword [ebp - 0x49c], ecx
jmp 0x4236e9
mov eax, 0
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [ebp - 0x58c], eax
call fcn.0040f8f0
mov dword [ebp - 0x49c], 0xb045da30
jmp 0x4236e9
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x49c], 0x492395c3
jmp 0x4236e9
mov eax, 0xa0a681cd
mov ecx, 0x50741b06
cmp dword [ebp - 0x488], 6
cmovb eax, ecx
mov dword [ebp - 0x49c], eax
jmp 0x4236e9
mov dword [ebp - 0x49c], 0x5a78702
jmp 0x4236e9
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x49c], 0x492395c3
jmp 0x4236e9
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, dword [ebp - 0x14]
add esp, 0x594
pop esi
pop edi
pop ebx
pop ebp
ret
jmp 0x422d3f