Function at 0x45c190
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51b2a3
mov eax, dword fs:[0]
push eax
mov eax, 0x107c
call fcn.004d9200
mov eax, dword [0x577014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1018], edi
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push 0
push 0x2710
push dword [ebp + 0x20]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp + 0x18]
push dword [ebp + 0x1c]
mov dword [ebp - 0x1034], ebx
mov dword [ebp - 0x1040], ebx
mov dword [ebp - 0x101c], eax
call fcn.004d8de0
mov esi, dword [edi + 4]
mov dword [ebp - 0x1024], eax
mov dword [ebp - 0x103c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0
sub eax, esi
push 0x1000
mov dword [ebp - 0x1040], eax
lea eax, [ebp - 0x1010]
push eax
push 3
push dword [ebp - 0x1020]
call dword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
test eax, eax
jne 0x45c296
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
push 0xe88
cmovle ecx, eax
mov eax, 0x80004005
test ecx, ecx
cmovs eax, ecx
push eax
push ecx
mov ecx, esp
call fcn.0040687a
lea ecx, [ebp - 0x1054]
call fcn.00406620
and dword [ebp - 4], 0
lea eax, [ebp - 0x1054]
push eax
mov ecx, ebx
call fcn.0040121b
mov ecx, dword [ebp - 0x104c]
add ecx, 0xfffffff0
call fcn.00407189
jmp 0x45c8bf
lea esi, [edi + 8]
push dword [esi]
push ecx
push dword [ebp - 0x103c]
mov ecx, esi
push dword [ebp - 0x1024]
call fcn.004b91b8
mov ecx, dword [esi]
test ecx, ecx
je 0x45c2ba
mov dword [ecx + 4], eax
jmp 0x45c2bd
mov dword [esi + 4], eax
cmp byte [ebp + 0x10], 0
mov dword [esi], eax
mov eax, 0x168
push 0x3c
pop ecx
cmove eax, ecx
mov dword [ebp - 0x1024], eax
cmp dword [edi + 0x10], eax
jbe 0x45c2e0
mov ecx, esi
call fcn.004b31fd
mov eax, dword [0x57d3ec]
mov ecx, 0x1b7740
cmp byte [eax + 1], 0
je 0x45c2ff
call fcn.0044e842
test al, al
mov edx, 0x1d4c0
cmovne ecx, edx
cmp byte [ebp + 0x14], 0
je 0x45c308
imul ecx, ecx, 3
mov eax, dword [ebp - 0x1040]
cmp eax, ecx
jbe 0x45c35b
push dword [ebp - 0x101c]
lea eax, [ebp - 0x1060]
push dword [ebp - 0x1020]
push eax
call fcn.0045c096
mov ecx, dword [ebp - 0x1058]
add ecx, 0xfffffff0
call fcn.00407189
push 0xea8
push 0x80004005
push ecx
mov ecx, esp
push str.Timeout
call fcn.00406fea
mov ecx, ebx
call fcn.00406620
jmp 0x45c8bf
cmp eax, 0xea60
jbe 0x45c3ae
mov eax, dword [edi + 0x2c]
add eax, eax
push 0x3c
pop ecx
cmp eax, ecx
cmovb eax, ecx
cmp dword [edi + 0x24], eax
jbe 0x45c3ae
push dword [ebp - 0x101c]
lea eax, [ebp - 0x1060]
push dword [ebp - 0x1020]
push eax
call fcn.0045c096
mov ecx, dword [ebp - 0x1058]
add ecx, 0xfffffff0
call fcn.00407189
push 0xeb2
push 0x80004005
push ecx
mov ecx, esp
push str.Timeout__2_
jmp 0x45c34a
and dword [ebp - 0x1030], 0
and dword [ebp - 0x102c], 0
push 0x18
call fcn.004d8429
mov dword [eax], eax
mov dword [eax + 4], eax
and dword [ebp - 0x1028], 0
mov dword [ebp - 0x1030], eax
mov edx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1030]
push eax
lea ecx, [ebp - 0x1054]
mov dword [ebp - 4], 1
call fcn.00403c1d
pop ecx
pop ecx
mov byte [ebp - 4], 2
lea esi, [edi + 0x38]
mov eax, dword [ebp - 0x102c]
cmp eax, dword [esi + 4]
jne 0x45c433
mov eax, dword [esi]
push dword [eax]
mov eax, dword [ebp - 0x1030]
push eax
push dword [eax]
call fcn.004b9a1c
add esp, 0xc
test al, al
je 0x45c433
mov eax, dword [ebp - 0x1028]
mov byte [ebp - 0x1011], 0
cmp eax, dword [esi + 8]
je 0x45c43a
mov byte [ebp - 0x1011], 1
lea eax, [ebp - 0x1030]
cmp esi, eax
je 0x45c454
mov eax, dword [ebp - 0x1030]
mov ecx, esi
push eax
push dword [eax]
call fcn.004bf50b
cmp byte [ebp - 0x1011], 0
mov eax, dword [ebp - 0x1028]
mov dword [esi + 8], eax
je 0x45c46e
lea ecx, [edi + 8]
call fcn.004b3248
mov edx, dword [ebp - 0x1030]
and dword [ebp - 0x103c], 0
mov esi, dword [edx]
cmp esi, edx
je 0x45c4d2
mov ebx, dword [ebp - 0x103c]
mov eax, dword [esi + 8]
mov edi, dword [eax]
cmp edi, eax
je 0x45c4b8
push str.ConsoleWindowClass
push dword [edi + 0xc]
call fcn.004e3849
pop ecx
test eax, eax
mov eax, dword [edi]
pop ecx
lea ecx, [ebx + 1]
mov edi, eax
cmove ecx, ebx
mov ebx, ecx
cmp eax, dword [esi + 8]
jne 0x45c490
mov edx, dword [ebp - 0x1030]
mov eax, dword [esi]
mov esi, eax
cmp eax, edx
jne 0x45c487
mov edi, dword [ebp - 0x1018]
mov dword [ebp - 0x103c], ebx
mov ebx, dword [ebp - 0x1034]
mov eax, dword [ebp - 0x1024]
cmp dword [edi + 0x10], eax
jne 0x45c57f
mov esi, dword [edi + 8]
xor ecx, ecx
and dword [ebp - 0x1024], ecx
test esi, esi
je 0x45c514
mov ebx, dword [ebp - 0x1024]
lea eax, [esi]
mov esi, dword [esi]
add ecx, dword [eax + 8]
adc ebx, dword [eax + 0xc]
test esi, esi
jne 0x45c4f6
mov dword [ebp - 0x1024], ebx
or ecx, ebx
mov ebx, dword [ebp - 0x1034]
jne 0x45c57f
cmp dword [ebp - 0x103c], 0
jbe 0x45c57f
push dword [ebp - 0x101c]
lea eax, [ebp - 0x1060]
push dword [ebp - 0x1020]
push eax
call fcn.0045c096
mov ecx, dword [ebp - 0x1058]
add ecx, 0xfffffff0
call fcn.00407189
push 0xede
push 0x80004005
push ecx
mov ecx, esp
push str.Timeout__inactivity_
call fcn.00406fea
mov ecx, ebx
call fcn.00406620
mov ecx, dword [ebp - 0x104c]
lea ecx, [ecx - 0x10]
call fcn.00407189
lea ecx, [ebp - 0x1030]
call fcn.004ad97d
jmp 0x45c8bf
cmp dword [ebp - 0x102c], 1
jne 0x45c617
mov eax, dword [edx]
push str.ctfmon.exe
push dword [eax + 0x10]
mov esi, dword [eax + 0x14]
call fcn.004e3849
pop ecx
pop ecx
test eax, eax
jne 0x45c5d7
push esi
mov ecx, 0x1fffff
call fcn.00401338
mov esi, eax
pop ecx
test esi, esi
je 0x45c5d7
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
and dword [ebx], 0
lea ecx, [ebx + 8]
and dword [ebx + 4], 0
call fcn.0040687a
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x45c561
cmp dword [ebp - 0x102c], 1
jne 0x45c617
mov eax, dword [ebp - 0x1030]
push str.GoogleUpdate.exe
mov eax, dword [eax]
push dword [eax + 0x10]
mov esi, dword [eax + 0x14]
call fcn.004e3849
pop ecx
pop ecx
test eax, eax
jne 0x45c617
inc dword [edi]
cmp dword [edi], 0x1e
jbe 0x45c617
push esi
mov ecx, 0x1fffff
call fcn.00401338
mov esi, eax
pop ecx
test esi, esi
jne 0x45c5b6
and dword [ebp - 0x1038], 0
and dword [ebp - 0x1034], 0
push 0x28
call fcn.004d8429
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x1038], eax
lea esi, [edi + 0x20]
mov byte [ebp - 4], 3
push dword [esi]
lea eax, [ebp - 0x1038]
mov dword [ebp - 0x1040], esi
push eax
lea edi, [esi + 8]
push edi
lea edx, [ebp - 0x1030]
lea ecx, [ebp - 0x107c]
call fcn.00403313
mov ecx, dword [ebp - 0x1074]
add esp, 0x10
lea ecx, [ecx - 0x10]
call fcn.00407189
cmp dword [ebp - 0x1034], 0
je 0x45c87d
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1030]
push eax
lea ecx, [ebp - 0x1060]
call fcn.00403c1d
mov byte [ebp - 4], 4
and dword [ebp - 0x1048], 0
and dword [ebp - 0x1044], 0
push 0x28
call fcn.004d8429
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x1048], eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1048]
push dword [esi]
lea edx, [ebp - 0x1030]
push eax
push edi
lea ecx, [ebp - 0x1088]
call fcn.00403313
mov ecx, dword [ebp - 0x1080]
add esp, 0x14
lea ecx, [ecx - 0x10]
call fcn.00407189
mov eax, dword [ebp - 0x1034]
cmp eax, dword [ebp - 0x1044]
jne 0x45c855
mov eax, dword [ebp - 0x1038]
mov edi, dword [ebp - 0x1048]
mov dword [ebp - 0x1018], eax
mov esi, dword [eax]
cmp esi, eax
jmp 0x45c762
mov eax, dword [esi + 8]
cmp eax, dword [edi + 8]
jne 0x45c855
mov eax, dword [esi + 0xc]
cmp eax, dword [edi + 0xc]
jne 0x45c855
mov eax, dword [esi + 0x10]
cmp eax, dword [edi + 0x10]
jne 0x45c855
lea edx, [edi + 0x14]
lea ecx, [esi + 0x14]
call fcn.00405d14
test al, al
je 0x45c855
mov eax, dword [esi]
mov esi, eax
cmp eax, dword [ebp - 0x1018]
mov edi, dword [edi]
jne 0x45c721
lea ecx, [ebp - 0x101c]
call fcn.0040687a
mov ecx, dword [ebp - 0x1040]
lea eax, [ebp - 0x101c]
push eax
lea eax, [ebp - 0x1038]
mov byte [ebp - 4], 6
push eax
push dword [ebp - 0x1020]
lea eax, [ebp - 0x1070]
push eax
call fcn.004321f9
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x101c]
add ecx, 0xfffffff0
cmp dword [ecx + 4], 0
je 0x45c839
push 0xf11
push 0x80004005
push ecx
mov esi, esp
mov dword [ebp - 0x1018], esi
call fcn.004070e7
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00406620
mov ecx, dword [ebp - 0x1068]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp - 0x101c]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov edx, dword [ebp - 0x1048]
call fcn.00404e0e
push 0x28
push dword [ebp - 0x1048]
call fcn.004d840d
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1058]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov edx, dword [ebp - 0x1038]
call fcn.00404e0e
push 0x28
push dword [ebp - 0x1038]
call fcn.004d840d
pop ecx
pop ecx
jmp 0x45c561
mov ecx, dword [ebp - 0x1068]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp - 0x101c]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov edx, dword [ebp - 0x1048]
call fcn.00404e0e
push 0x28
push dword [ebp - 0x1048]
call fcn.004d840d
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1058]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov edx, dword [ebp - 0x1038]
call fcn.00404e0e
push 0x28
push dword [ebp - 0x1038]
call fcn.004d840d
pop ecx
pop ecx
mov ecx, dword [ebp - 0x104c]
lea ecx, [ecx - 0x10]
call fcn.00407189
lea ecx, [ebp - 0x1030]
call fcn.004ad97d
and dword [ebx], 0
lea ecx, [ebx + 8]
and dword [ebx + 4], 0
call fcn.0040687a
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d818b
leave
ret 0x24