Function at 0xaf126a
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
xor edx, edx
mov ecx, edi
mov ebx, dword [edi + 0x3c]
add ebx, edi
sub eax, dword [0xaf101c]
mov dword [ebp - 0xc], eax
sbb edx, edx
neg eax
mov dword [ebp - 8], edx
movzx esi, word [ebx + 0x14]
adc edx, 0
neg edx
mov dword [ebp - 0x10], esi
push edx
mov edx, dword [ebx + 0xa0]
push eax
mov eax, dword [esi + ebx + 0x24]
add eax, dword [0xaf1028]
push eax
push dword [ebx + 0xa4]
call fcn.00af1048
mov edx, dword [esi + ebx + 0x28]
add esp, 0x10
mov eax, dword [0xaf1028]
sub edx, eax
cmp edx, 1
jbe 0xaf12e0
mov ecx, dword [esi + ebx + 0x24]
add ecx, eax
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x40
add esi, ebx
cmp eax, 1
jbe 0xaf1315
mov edx, dword [esi + 0x10]
sub edx, dword [0xaf102c]
cmp edx, 1
jbe 0xaf1312
mov ecx, dword [esi + 0xc]
add ecx, dword [0xaf102c]
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x28
cmp eax, 2
jbe 0xaf1340
mov edx, dword [esi + 0x10]
sub edx, dword [0xaf1030]
cmp edx, 1
jbe 0xaf133d
mov ecx, dword [esi + 0xc]
add ecx, dword [0xaf1030]
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x28
cmp eax, 3
jbe 0xaf136b
mov edx, dword [esi + 0x10]
sub edx, dword [0xaf1034]
cmp edx, 1
jbe 0xaf1368
mov ecx, dword [esi + 0xc]
add ecx, dword [0xaf1034]
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x28
cmp eax, 4
jbe 0xaf1396
mov edx, dword [esi + 0x10]
sub edx, dword [0xaf1038]
cmp edx, 1
jbe 0xaf1393
mov ecx, dword [esi + 0xc]
add ecx, dword [0xaf1038]
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x28
cmp eax, 5
jbe 0xaf13c1
mov edx, dword [esi + 0x10]
sub edx, dword [0xaf103c]
cmp edx, 1
jbe 0xaf13be
mov ecx, dword [esi + 0xc]
add ecx, dword [0xaf103c]
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x28
cmp eax, 6
jbe 0xaf13ec
mov edx, dword [esi + 0x10]
sub edx, dword [0xaf1040]
cmp edx, 1
jbe 0xaf13e9
mov ecx, dword [esi + 0xc]
add ecx, dword [0xaf1040]
add ecx, edi
call fcn.00af11d2
mov eax, dword [0xaf1020]
add esi, 0x28
cmp eax, 7
jbe 0xaf140c
mov edx, dword [esi + 0x10]
mov eax, dword [0xaf1044]
sub edx, eax
cmp edx, 1
jbe 0xaf140c
mov ecx, dword [esi + 0xc]
add ecx, eax
add ecx, edi
call fcn.00af11d2
cmp dword [0xaf1014], 0
je 0xaf1455
lea eax, [ebx + 0x88]
cmp dword [eax], 0
je 0xaf1455
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 4]
push ecx
push 4
push 8
push eax
call esi
mov eax, dword [0xaf1014]
lea ecx, [ebx + 0x88]
mov dword [ecx], eax
mov eax, dword [0xaf1018]
mov dword [ebx + 0x8c], eax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 8
push ecx
call esi
mov eax, dword [ebp - 0x10]
mov ecx, edi
push dword [ebp - 8]
mov edx, dword [ebx + 0xa0]
push dword [ebp - 0xc]
mov eax, dword [eax + ebx + 0x24]
add eax, dword [0xaf1028]
push eax
push dword [ebx + 0xa4]
call fcn.00af1048
mov edx, dword [0xaf1004]
add esp, 0x10
push dword [0xaf1010]
push dword [0xaf100c]
push ecx
mov ecx, edi
call fcn.00af110c
mov eax, dword [section..text]
add esp, 0xc
add eax, edi
call eax
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]