Function at 0x409cb8
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
mov eax, dword [0x4444f0]
mov edx, dword [0x4444f0]
add edx, eax
mov dword [ebp - 0xa4], edx
push ebx
lea edx, [edx + edx + 0x3f]
mov dword [ebp - 0x94], edx
push esi
mov ebx, dword [0x4444f0]
mov dword [ebp - 0x158], edx
lea esi, [eax*4 + 0xce]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xc4], esi
push edi
xor eax, eax
mov esi, edx
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x184], ebx
sub eax, esi
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x74], ebx
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.DLL_GetStartupInfoA]
mov dword [ebp - 0xb8], ebx
mov edx, dword [0x444534]
cmp eax, 0xffffffeb
jne 0x409d81
mov ebx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
sub ecx, ebx
cmp ecx, 0xffffff82
jne 0x409d81
mov edi, 0x12
sub ecx, esi
mov dword [ebp - 0x238], edi
mov ebx, dword [0x4444dc]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x224], ebx
cmp eax, esi
jne 0x409d81
mov esi, edi
lea eax, [eax - 0x52]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x60], esi
mov ebx, dword [0x4444f0]
mov dword [ebp - 0x14c], ebx
mov edx, 0xc5
mov edi, dword [ebp - 0x74]
add edi, edi
cmp edi, ebx
jne 0x409dc5
test edi, 0xcbe5
jne 0x409dc5
mov dword [ebp - 0x174], edi
dec edx
mov edi, 0x6c
sub edi, eax
mov eax, edx
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x134], eax
lea eax, [edx - 0x75]
mov edx, 0xba
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0xc8], eax
cmp edi, ebx
jne 0x409de2
mov eax, esi
mov dword [ebp - 0xf0], eax
lea ebx, [ebp - 0x80]
push ebx
call fcn.0040aaf1
xor eax, eax
sub esi, ebx
lea ecx, [eax + 0x40]
cmp esi, 0x6b
je 0x409e45
xor ebx, ebx
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x154], ebx
cmp eax, dword [0x4444dc]
je 0x409e45
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x154]
and edx, edi
xor ecx, ecx
cmp edx, 0x79
je 0x409e45
mov ebx, dword [0x4444dc]
lea eax, [esi + edi*2 + 0x53]
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x100], edx
dec ecx
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0x80]
mov edi, dword [0x4444f0]
cmp esi, 0xeda2
jne 0x409e92
mov eax, dword [ebp - 0x158]
cmp edx, edi
je 0x409e92
mov esi, dword [ebp - 0x34]
and esi, edx
mov ecx, dword [0x444534]
and esi, eax
cmp esi, 0x8655
jne 0x409e92
mov dword [ebp - 0x264], ebx
inc edi
mov edi, 0xac
mov ebx, ecx
sub edi, edx
sub esi, edi
mov dword [ebp - 0x64], ebx
cmp eax, 0xffffff84
jne 0x409e92
mov dword [ebp - 8], esi
shr edx, 0x10
mov ebx, dword [0x444510]
mov ecx, dword [0x444564]
sub ebx, edx
cmp ebx, 0xffffffcc
je 0x409fda
cmp ebx, 0x47
jne 0x409fda
lea esi, [eax*4 + 0x7d]
mov eax, dword [0x444564]
or ecx, ebx
add eax, ecx
cmp edx, 0xffffffe5
je 0x409fda
mov ecx, dword [0x444564]
or ecx, ebx
mov ebx, dword [ebp - 0xf8]
mov dword [ebp - 0x118], esi
cmp ecx, 0x69
je 0x409fda
mov dword [ebp - 0x18], edx
mov esi, dword [ebp - 0x184]
test ebx, 0xdc
jne 0x409fda
lea edi, [esi + edx + 0x7e]
mov esi, dword [0x444524]
mov dword [ebp - 0x168], edi
cmp ebx, edx
je 0x409fda
mov esi, eax
mov edi, ebx
cmp esi, 0xd131
jne 0x409fda
cmp esi, 0x3ead
jne 0x409fda
cmp ecx, esi
jne 0x409fda
xor ebx, ebx
mov eax, 0xe13d
mov dword [ebp - 0x38], ecx
cmp esi, dword [ebp - 0xf0]
je 0x409fda
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x10], ebx
mov ecx, dword [0x444564]
mov edi, dword [ebp - 0x18]
cmp edi, dword [ebp - 0xb8]
je 0x409fd0
mov dword [ebp - 0x15c], esi
mov esi, dword [0x444534]
mov dword [ebp - 0x190], ecx
lea ecx, [edx*2 + 0x4f]
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x140], esi
cmp edi, esi
jne 0x409fd0
lea ebx, [edx*2 + 0x66]
cmp edi, 0x1b
je 0x409fd0
mov esi, dword [0x444510]
and edi, esi
mov ecx, dword [0x444550]
mov dword [ebp - 0x1ac], edi
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0x1c8], ebx
cmp edi, 0x18101213
jne 0x409fd0
mov dword [ebp - 0x90], ecx
sub eax, edx
sub eax, edi
mov dword [ebp - 0x180], eax
cmp edx, 0x63c
jne 0x40a317
cmp eax, ebx
je 0x409ffa
mov ecx, 0xb694
xor edx, edx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x44], edx
mov edi, 0x67d7045
mov esi, eax
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x58], ecx
cmp esi, 0x207c
jne 0x40a068
lea edx, [edi*2 + 0x17]
mov eax, 0xe8
test ecx, 0xc0
je 0x40a068
test esi, 0x59
je 0x40a068
mov dword [ebp - 0x234], eax
xor eax, eax
inc eax
test esi, 0xb
je 0x40a068
mov ebx, dword [0x4444d8]
mov dword [ebp - 0xac], eax
mov ecx, eax
sub edx, ebx
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x164], esi
mov dword [ebp - 0x1c], edx
sub edi, dword [ebp - 0x80]
mov edx, dword [ebp - 0xc8]
cmp edx, dword [ebp - 0x90]
je 0x40a12c
and edx, edi
cmp edx, dword [ebp - 0x158]
jne 0x40a12c
mov esi, dword [ebp - 0x180]
cmp edx, 0x20141024
je 0x40a12c
mov ebx, dword [0x444530]
mov dword [ebp - 0xfc], esi
mov esi, 0xcc83
cmp edx, 0x77
je 0x40a12c
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x230], esi
sub edx, ebx
lea esi, [esi + 0x3f]
mov ebx, dword [0x4444f4]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x21c], edx
sub esi, ecx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x1a4], ebx
sub edx, edi
cmp edx, ecx
je 0x40a12c
lea ecx, [edi + 0x31d7]
mov dword [ebp - 0x178], ecx
mov ebx, edx
cmp ebx, ecx
je 0x40a12c
cmp ecx, dword [0x4444dc]
jne 0x40a12c
mov dword [ebp - 0xd4], esi
mov edx, dword [ebp - 0x260]
lea esi, [eax + esi + 0x2a]
mov dword [ebp - 0x228], esi
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0x3c], ebx
call edi
xor ebx, ebx
mov edi, dword [ebp - 0x21c]
mov dword [ebp - 0x1bc], edi
cmp eax, 0x4e84085
jne 0x40a179
mov edi, dword [0x444530]
mov dword [ebp - 0xbc], esi
and edi, esi
or ebx, eax
mov esi, dword [0x444524]
and edi, ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x50], eax
dec esi
cmp eax, 0x53
je 0x40a179
dec esi
mov dword [ebp - 0x30], eax
sub esi, ebx
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x220], eax
or edi, esi
mov ecx, dword [0x444564]
mov ebx, edi
cmp ebx, dword [ebp - 0x23c]
jne 0x40a1b9
mov esi, ecx
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0x160], edx
or ecx, esi
inc ecx
and ecx, eax
mov dword [ebp - 0x12c], ecx
push dword [ebp - 0x80]
push 0x157f6
push dword [ebp - 0x220]
call fcn.00409960
sub esi, edi
xor ebx, ebx
mov dword [ebp - 0x258], esi
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0x1c4], ebx
mov dword [ebp - 0xc0], edx
add dword [ebp - 0x220], 0x15
xor ebx, ebx
cmp eax, 0xffffffff
je 0x40a286
mov eax, dword [0x444534]
cmp edi, 0xa381
jne 0x40a286
mov edx, dword [ebp - 0x100]
xor edi, edi
mov dword [ebp - 0x54], edi
cmp edx, dword [0x4444f4]
je 0x40a286
lea edi, [edi + edi*2 + 0x7e]
mov ecx, edi
mov dword [ebp - 0x1cc], edx
sub ecx, edx
cmp ecx, dword [ebp - 0x24]
je 0x40a286
xor edi, edi
mov eax, dword [0x4444d8]
cmp ecx, 0xf17f
jne 0x40a286
lea esi, [edx*2 + 0x7c]
lea ebx, [edx + 0xb]
add eax, edx
add esi, edi
and eax, edi
and ecx, eax
mov dword [ebp - 4], ebx
or esi, edi
mov dword [ebp - 0x124], esi
test ecx, 0x51
je 0x40a286
mov edi, ebx
lea eax, [ebx + 0x73]
and eax, ecx
and edi, ecx
and edi, esi
sub eax, esi
test edi, 0x3f
jne 0x40a286
lea ebx, [eax + edi*4 - 0x77]
mov esi, edx
sub esi, ebx
mov dword [ebp - 0x78], esi
call dword [ebp - 0x220]
mov ebx, dword [0x444564]
mov edx, dword [0x4444d8]
mov dword [ebp - 0x244], edx
mov dword [ebp - 0xa0], ebx
lea edx, [esi - 0x1a]
xor ecx, ecx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1b8], ebx
mov dword [ebp - 0x24c], ecx
xor ebx, ebx
mov edi, 0xca
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x17c], edi
lea esi, [edi + 0xa15]
xor ecx, ecx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x254], esi
and ecx, edx
test ecx, 0xe7
jne 0x40a317
mov edx, dword [ebp - 0x25c]
xor ebx, ebx
mov dword [ebp - 0x144], ecx
cmp edx, dword [0x444550]
jne 0x40a311
mov dword [ebp - 0x1b4], edx
mov dword [ebp - 0x13c], ebx
lea eax, [esi + 0x4714]
sub eax, esi
sub eax, edi
xor edi, edi
mov dword [ebp - 0x194], eax
add edi, edi
or ebx, eax
mov dword [ebp - 0x10c], edi
sub ebx, ecx
mov dword [ebp - 0x170], ecx
cmp edx, dword [ebp - 0x58]
je 0x40a367
mov edx, dword [0x444510]
xor esi, esi
mov dword [ebp - 0x18c], edx
add edx, ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x68], ecx
and edx, eax
mov dword [ebp - 0x138], edx
mov dword [ebp - 0xb0], esi
push 0x2d
call dword [sym.imp.KERNEL32.DLL_ExitProcess]