Function at 0x40d93f
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebx
push ebp
push esi
push edi
mov esi, 0x40b34c
push esi
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push esi
push 1
call dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov ecx, dword [0x42e190]
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, ecx
not eax
mov edi, 0x177
and eax, edi
neg eax
sbb eax, eax
mov ebp, 0x80000000
and eax, ebp
add eax, ebp
shr ecx, 1
or ecx, eax
mov eax, dword [0x42e194]
xor ebx, ebx
mov dword [0x42e190], ecx
test eax, eax
jne 0x40d9d4
push 0x56
mov eax, 0x42531c
push eax
push eax
push ebx
call esi
mov eax, dword [0x42e194]
test eax, eax
jne 0x40d9d4
push 0x3a2
mov eax, 0x425320
push eax
push eax
push ebx
call esi
mov eax, dword [0x42e194]
test eax, eax
jne 0x40d9d4
push 0x204
mov eax, 0x425324
push eax
push eax
push ebx
call esi
mov eax, dword [0x42e194]
or eax, 0x282
mov dword [0x42e194], eax
jne 0x40d9ef
push 0x1d0
mov eax, 0x425328
push eax
push eax
push ebx
call esi
mov eax, dword [0x42e190]
mov ecx, eax
lea edx, [eax + eax]
not ecx
and ecx, edi
neg ecx
sbb ecx, ecx
neg ecx
or edx, ecx
mov eax, edx
not eax
and eax, edi
neg eax
sbb eax, eax
neg eax
add edx, edx
or edx, eax
mov eax, edx
not eax
and eax, edi
neg eax
sbb eax, eax
neg eax
add edx, edx
or edx, eax
mov eax, edx
not eax
and eax, edi
neg eax
sbb eax, eax
and eax, ebp
add eax, ebp
shr edx, 1
or edx, eax
mov ecx, edx
not ecx
and ecx, edi
neg ecx
sbb ecx, ecx
neg ecx
lea eax, [edx + edx]
or eax, ecx
mov dword [0x42e190], eax
mov dword [0x42e194], 0x722001
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004153ed
push 1
push 0xffffffffffffffff
push dword [esp + 0x20]
call fcn.00406ac1
mov edx, dword [0x42e194]
mov ecx, dword [0x42e190]
add esp, 0x10
inc edx
mov eax, 0x87
cmove edx, eax
mov eax, ecx
not eax
and eax, edi
neg eax
sbb eax, eax
and eax, ebp
add eax, ebp
mov ebp, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
shr ecx, 1
or ecx, eax
or edx, 0x1a2
mov eax, 0xc3
cmp edx, eax
cmove edx, eax
or edx, 8
mov dword [0x42e190], ecx
mov dword [0x42e194], edx
jne 0x40dadb
push 0x89
mov eax, 0x42532c
push eax
push eax
push ebx
call esi
cmp dword [0x42e194], ebx
jne 0x40dadb
push ebx
call ebp
push ebx
push 0x2000007
call fcn.0040d26a
pop ecx
pop ecx
cmp dword [0x430e24], ebx
jne 0x40dafa
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
ret 0x10
push 0xa
push str.Microsoft
push dword [0x42f67c]
call fcn.004154c7
add esp, 0xc
test eax, eax
je 0x40db18
push 0xfffffffffffffffe
pop eax
jmp 0x40daf3
mov edi, dword [esp + 0x1c]
push str.ptr
push edi
call fcn.004170c0
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x40dc32
push edi
mov dword [0x42f674], 1
call fcn.00417323
mov edx, dword [0x42e194]
pop ecx
mov ecx, dword [eax]
mov dword [0x42f680], ecx
mov eax, dword [eax + 4]
mov dword [0x431724], eax
test edx, edx
jne 0x40db73
push 0x121
mov eax, 0x425344
push eax
push eax
push edx
call esi
mov edx, dword [0x42e194]
mov ecx, dword [0x42e190]
mov eax, ecx
not eax
and eax, 0x177
neg eax
sbb eax, eax
mov edi, 0x80000000
and eax, edi
add eax, edi
shr ecx, 1
or ecx, eax
mov eax, ecx
not eax
and eax, 0x177
neg eax
sbb eax, eax
and eax, edi
add eax, edi
shr ecx, 1
or ecx, eax
mov dword [0x42e190], ecx
test edx, edx
jne 0x40dbda
push 0xfa
mov eax, 0x425348
push eax
push eax
push edx
call esi
mov edx, dword [0x42e194]
test edx, edx
jne 0x40dbd4
push edx
call ebp
mov edx, dword [0x42e194]
mov ecx, dword [0x42e190]
mov eax, ecx
not eax
mov ebp, 0x177
and eax, ebp
neg eax
sbb eax, eax
neg eax
add ecx, ecx
or ecx, eax
mov eax, ecx
not eax
and eax, ebp
neg eax
sbb eax, eax
neg eax
add ecx, ecx
or ecx, eax
mov eax, ecx
not eax
and eax, ebp
neg eax
sbb eax, eax
and eax, edi
add eax, edi
shl edx, 0x1e
shr ecx, 1
or ecx, eax
or edx, 0x1cb
inc edx
mov eax, 0x83
cmove edx, eax
mov dword [0x42e190], ecx
mov dword [0x42e194], edx
lea edi, [ebx + 5]
push edi
call fcn.0040d2ae
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]