Function at 0x40de70
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x588336
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push esi
push edi
mov eax, dword [0x5f2000]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x10], 0
mov ecx, 0x5fbaf0
call fcn.00411fe0
test eax, eax
jne 0x40dec0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.004165e0
ucomisd xmm0, qword [0x5cfb38]
lahf
test ah, 0x44
jnp 0x40e03a
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call edi
cmp eax, 4
je 0x40e0c9
call edi
push eax
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x14], 0xffffffff
je 0x40e010
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.00404e80
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], 0
test eax, eax
je 0x40df48
push eax
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x5c]
call dword [eax + 0xc]
push str.6698FFFF8F1A8CF2F9D58103490A1C4A2EAAF2CAC28662F3FE0E3FCE05539A71494932A64F7D6A96F4CCF0F11AABE9586423E90FC093E07BE5CAD8C26762CE704038DC6C2309A8837A696388BB1D71368AC16B63C2917C7CF2774AD5E67B2D0044880439AE0DEC1AD586E0BC1073FE4487B2D9531431721FBFBEB2BCFE45E4DC32DCE16AEFEDB279
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
call fcn.004138a0
push ecx
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x30]
call fcn.0040d3c0
mov dword [ebp - 0x10], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c]
call fcn.004042d0
mov edx, 0x14
lea ecx, [ebp - 0x30]
call fcn.004022a0
mov ecx, 1
mov esi, eax
mov dword [ebp - 0x10], ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x10], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00404df0
cmp esi, 1
jne 0x40e0c9
push 0x5cc02c
lea ecx, [ebp - 0x6c]
call fcn.00403ec0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x30]
push eax
call fcn.00412fb0
mov edx, eax
mov byte [ebp - 4], 3
call fcn.00403940
mov ecx, eax
call fcn.00408160
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.00404df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.00403bc0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call edi
test eax, eax
jne 0x40e018
call edi
push eax
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40e0c9
lea ecx, [ebp - 0x40]
call fcn.00404e80
mov dword [ebp - 4], 4
mov dword [ebp - 0x40], vtable.CWConstString.0
mov dword [ebp - 0x34], 0x5ce008
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.00404e80
mov byte [ebp - 4], 6
mov dword [ebp - 0x6c], vtable.CWConstString.0
mov dword [ebp - 0x60], str.error_system_time
mov byte [ebp - 4], 7
mov ecx, 0x5cc02c
mov edx, dword [ebp - 0x34]
test edx, edx
jne 0x40e092
cmp dword [ebp - 0x1c], 0
mov edx, ecx
cmovne edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x40e0a2
cmp dword [ebp - 0x48], eax
cmovne ecx, dword [ebp - 0x50]
mov eax, ecx
push 0
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c]
call fcn.004042d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004042d0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret