Function at 0x40526c
Capabilities:
Terminate process

Disassembly:
push ebx
push esi
push edi
xor edi, edi
mov dword [0x40a840], edi
jmp case.0x40528f.68
lea eax, [ebx - 0x41]
cmp eax, 0x37
ja case.0x40528f.70
movzx eax, byte [eax + 0x4056a8]
jmp dword [eax*4 + 0x405624]
mov cl, 0x1d
call fcn.00404fc8
mov eax, dword [0x40aa04]
mov dword [0x40a8b4], eax
jmp case.0x40528f.68
mov cl, 0x1c
call fcn.00404fc8
mov eax, dword [0x40aa04]
mov dword [0x40a87c], eax
mov byte [0x40a877], 1
jmp case.0x40528f.68
mov cl, 0x1e
call fcn.00404fc8
push 1
xor edx, edx
mov cl, bl
call fcn.00401cf2
pop ecx
mov byte [0x40a875], al
jmp case.0x40528f.68
mov cl, 0xe
call fcn.00404fc8
mov cl, 3
call fcn.00404fc8
jmp case.0x40528f.68
xor edx, edx
mov cl, bl
push closesocket
inc edx
call fcn.00401cf2
pop ecx
mov dword [0x40a768], eax
mov cl, 4
jmp 0x4052ef
xor edx, edx
mov cl, bl
push 0x258
inc edx
call fcn.00401cf2
pop ecx
mov dword [0x40a764], eax
mov cl, 5
jmp 0x4052ef
mov eax, dword [0x40aa04]
mov cl, 6
mov dword [0x40a8a4], eax
jmp 0x4052ef
mov ecx, dword [0x40aa04]
mov dword [0x40a8b0], ecx
cmp byte [ecx], 0x2d
jne case.0x40528f.68
movzx eax, byte [ecx + 1]
test al, al
jne case.0x40528f.68
mov dword [0x40a8b0], edi
jmp case.0x40528f.68
mov edx, dword [0x40aa04]
mov ecx, 0x40a76d
call fcn.00401e6c
test eax, eax
je case.0x40528f.70
mov cl, 0x13
jmp 0x4052ef
mov eax, dword [0x40aa04]
mov cl, 7
mov dword [0x40a89c], eax
jmp 0x4052ef
cmp ebx, 0x76
mov cl, 8
sete byte [0x40a886]
jmp 0x4052ef
mov cl, 0x12
call fcn.00404fc8
push 3
xor edx, edx
mov cl, bl
call fcn.00401cf2
pop ecx
mov dword [0x40a894], eax
jmp case.0x40528f.68
inc byte [0x40a8ac]
jmp 0x4052ed
mov eax, dword [0x40aa04]
mov dword [0x40a8a8], eax
jmp case.0x40528f.68
mov eax, dword [0x40aa04]
mov dword [0x40a774], eax
jmp case.0x40528f.68
cmp byte [0x40a876], 0
jne case.0x40528f.70
cmp byte [0x40a76c], 0
jne case.0x40528f.68
mov byte [0x40a8ad], 1
jmp case.0x40528f.68
cmp byte [0x40a76c], 0
jne case.0x40528f.68
mov byte [0x40a8ad], 2
jmp case.0x40528f.68
push 3
xor edx, edx
mov cl, bl
call fcn.00401cf2
pop ecx
movsx eax, al
mov cl, 0x18
mov dword [0x40a888], eax
jmp 0x4052ef
mov edx, dword [0x40aa04]
mov ecx, 0x40a884
call fcn.00401e6c
test eax, eax
je case.0x40528f.70
mov cl, 0x19
jmp 0x4052ef
mov edx, dword [0x40aa04]
mov ecx, 0x40a88e
call fcn.00401e6c
test eax, eax
je case.0x40528f.70
mov cl, 0x1b
jmp 0x4052ef
mov edx, dword [0x40aa04]
mov ecx, 0x40a887
call fcn.00401e6c
test eax, eax
je case.0x40528f.70
mov cl, 0x1a
jmp 0x4052ef
mov byte [0x40a892], 1
jmp case.0x40528f.68
push 2
xor edx, edx
mov cl, bl
call fcn.00401cf2
pop ecx
mov byte [0x40a742], al
mov cl, 1
jmp 0x4052ef
push 0x7fff
xor edx, edx
mov cl, bl
call fcn.00401cf2
pop ecx
mov word [0x40a890], ax
mov cl, 2
jmp 0x4052ef
push 0xffff
xor edx, edx
mov cl, bl
call fcn.00401cf2
pop ecx
mov word [0x40a88c], ax
mov cl, 0x14
jmp 0x4052ef
mov dl, bl
call fcn.00404979
mov dword [0x40a75c], eax
mov cl, 0xa
jmp 0x4052ef
mov dl, bl
call fcn.00404979
mov dword [0x40a760], eax
mov cl, 9
jmp 0x4052ef
cmp ebx, 0x64
mov cl, 0xb
sete byte [0x40a893]
jmp 0x4052ef
mov edx, dword [0x40aa04]
mov ecx, 0x40a743
call fcn.00401e6c
test eax, eax
je case.0x40528f.70
mov byte [0x40a885], 1
mov cl, 0xf
jmp 0x4052ef
mov edx, dword [0x40aa04]
mov ecx, 0x40a76e
call fcn.00401e6c
test eax, eax
je case.0x40528f.70
mov cl, 0x10
jmp 0x4052ef
cmp byte [0x40a76c], 0
je 0x4055c1
push ecx
call fcn.00405df0
mov ebx, eax
pop ecx
test ebx, ebx
jg 0x40527c
mov eax, dword [0x40a778]
cmp eax, dword [0x40aa3c]
jne case.0x40528f.70
cmp dword [0x40a8a8], edi
jne 0x4055b4
mov eax, dword [0x40a774]
cmp byte [eax], 0
je 0x4055bd
cmp byte [0x40a8ad], 1
jne case.0x40528f.70
pop edi
pop esi
pop ebx
ret
mov esi, dword [sym.imp.msvcrt.dll_printf]
push 0x20
push str.1113__built_2020_03_28_17:29:45_UTC
push str.vlmcsd__s__i_bit_n
call esi
add esp, 0xc
push 0x9eb5
push edi
push 0x12
push str.Compiler:_VC__02i._02i_build__i_n
call esi
push str.little_endian
push str._Intel_x86_Windows32
push str.Intended_platform:_s__s_n
call esi
add esp, 0x1c
push str.__CRYPTO_WINDOWS
push str.Common_flags:_s_n
call esi
push str._NO_SIGHUP_THREADS1_SUPPORT_WINE_NO_FREEBIND
push str.vlmcsd_flags:_s_n
call esi
add esp, 0x10
push edi
call dword [sym.imp.msvcrt.dll_exit]
call fcn.0040492f
mov edi, edi
adc dl, byte [ebp + 0x40]
add byte [ebp + edx*2 + 64], bl
add bh, al
push esp
inc eax
add byte [ebp + edx*2 + 0x54650040], al
inc eax
add bl, ah
push esp
inc eax
add byte [ebx], ch
push esp
inc eax
add bl, al
push ebx
inc eax
add byte [esp + edx*2 + 0x55360040], al
inc eax
add byte [esi - 0x19ffbfae], dl
push edx
inc eax
add bh, bh
push esp
inc eax
add byte [edx], dl
push esp
inc eax
add byte [ebp + 0x53], ah
inc eax
add dh, cl
push ebx
inc eax
add byte [ebx + 0x55], bh
inc eax
add ch, bl
push ebx
inc eax
add byte [esi + 0x54], al
inc eax
add byte [0xa3004055], ah
push esp
inc eax
add byte [ecx], bh
push ebx
inc eax
add byte [edx + edx*2 + 0x53840040], ch
inc eax
add cl, bh
push edx
inc eax
add byte [esi + 0x2b004053], ah
push ebx
inc eax
add byte [ebp - 0x50ffbfad], dl
push esp
inc eax
add ah, ch
push ebx
inc eax
add byte [edx], dl
push ebx
inc eax
add cl, cl
push edx
inc eax
add byte [0x4056], bl
add dword [edx], eax
add eax, dword [eax]
and byte [117841952], al
or byte [ecx], cl
or cl, byte [ebx]
and byte [ecx + 286265102], cl
and byte [eax], ah
and byte [eax], ah
and byte [eax], ah
and byte [eax], ah
and byte [ebx], al
and byte [edx], dl
adc edx, dword [eax]
and byte [eax], ah
adc eax, 404165398
and byte [ecx], bl
sbb bl, byte [ebx]
sbb al, 29
push ds
and byte [ebx], bl
and byte [edi], bl