Function at 0x10074d95
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd0c
mov eax, dword [0x10110164]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0xd0c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.10076253
pop ecx
pop ecx
test eax, eax
js 0x1007536e
push esi
push 0x104
lea eax, [ebp - 0x61c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [0x10201ab4]
lea edx, [ebp - 0x824]
mov esi, 0x208
push esi
push edx
mov eax, dword [eax + 0x84]
push dword [ebp - 0xd0c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
js 0x1007536d
mov eax, dword [0x10201ab4]
lea edx, [ebp - 0x61c]
push ebx
push edi
push edx
mov eax, dword [eax + 0xc]
lea edx, [ebp - 0xc34]
push esi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [0x10201ab4]
lea edx, [ebp - 0x824]
push edx
push esi
lea edx, [ebp - 0xa2c]
mov eax, dword [eax + 0xc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [0x10201ab4]
lea edx, [ebp - 0x61c]
push edx
push esi
lea edx, [ebp - 0x414]
mov eax, dword [eax + 0xc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [0x10201ab4]
lea edx, [ebp - 0x824]
push edx
push esi
lea edx, [ebp - 0x20c]
mov eax, dword [eax + 0xc]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [0x10201ab4]
mov ebx, 0xa51a
mov eax, dword [eax + 0x10]
lea ecx, [ebx - 1]
lea esi, [ebx + 0x3c]
lea edx, [ebx - 0x15]
mov edi, dword [eax + 4]
mov eax, 0xa50e
mov dword [ebp - 0xc70], 0xa576
add edi, 4
mov word [ebp - 0xc6c], ax
add eax, 7
mov word [ebp - 0xc6a], ax
lea eax, [ebx + 5]
mov word [ebp - 0xc68], bx
mov word [ebp - 0xc66], ax
add eax, 0x2d
mov word [ebp - 0xc64], cx
mov word [ebp - 0xc62], ax
mov word [ebp - 0xc60], ax
lea eax, [ebx + 0x1b]
mov word [ebp - 0xc5e], si
mov word [ebp - 0xc5c], ax
add eax, 0xfffffff1
mov word [ebp - 0xc5a], bx
mov word [ebp - 0xc58], cx
add ecx, 0xfffffffa
mov word [ebp - 0xc56], dx
mov word [ebp - 0xc54], cx
mov word [ebp - 0xc52], ax
lea eax, [ebx - 3]
mov word [ebp - 0xc50], ax
add eax, 0xffffffed
mov word [ebp - 0xc4e], ax
lea eax, [ebx - 2]
mov word [ebp - 0xc4c], cx
mov word [ebp - 0xc4a], ax
add eax, 0xffffffea
mov word [ebp - 0xc48], ax
mov word [ebp - 0xc46], si
lea eax, [ebx + 0x39]
mov word [ebp - 0xc44], ax
lea ecx, [ebp - 0xc70]
mov word [ebp - 0xc42], bx
mov word [ebp - 0xc40], dx
mov word [ebp - 0xc3e], si
mov word [ebp - 0xc3c], ax
xor eax, eax
mov word [ebp - 0xc3a], bx
mov word [ebp - 0xc36], ax
mov word [ebp - 0xc38], dx
mov ax, word [ebp - 0xc6c]
mov esi, dword [edi]
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xc34]
push eax
call fcn.10002cb3
push eax
push edi
call dword [esi + 8]
mov eax, dword [0x10201ab4]
mov ebx, 0xc195
add esp, 0x10
mov eax, dword [eax + 0x10]
lea ecx, [ebx + 1]
lea esi, [ebx + 0x44]
lea edx, [ebx - 0xb]
mov edi, dword [eax + 4]
mov eax, 0xc181
mov dword [ebp - 0xcac], 0xc1f9
add edi, 4
mov word [ebp - 0xca8], ax
add eax, 0x19
mov word [ebp - 0xca6], ax
lea eax, [ebx - 5]
mov word [ebp - 0xca4], bx
mov word [ebp - 0xca2], ax
add eax, 0x33
mov word [ebp - 0xca0], cx
mov word [ebp - 0xc9e], ax
mov word [ebp - 0xc9c], ax
lea eax, [ebx + 0x25]
mov word [ebp - 0xc9a], si
mov word [ebp - 0xc98], ax
add eax, 0xffffffef
mov word [ebp - 0xc96], bx
mov word [ebp - 0xc94], cx
add ecx, 6
mov word [ebp - 0xc92], dx
mov word [ebp - 0xc90], cx
mov word [ebp - 0xc8e], ax
lea eax, [ebx + 3]
mov word [ebp - 0xc8c], ax
add eax, 0xfffffff3
mov word [ebp - 0xc8a], ax
lea eax, [ebx + 2]
mov word [ebp - 0xc88], cx
lea ecx, [ebp - 0xcac]
mov word [ebp - 0xc86], ax
add eax, 0xfffffff6
mov word [ebp - 0xc84], ax
lea eax, [ebx + 0x47]
mov word [ebp - 0xc82], si
mov word [ebp - 0xc80], ax
mov word [ebp - 0xc7e], bx
mov word [ebp - 0xc7c], dx
mov word [ebp - 0xc7a], si
mov word [ebp - 0xc78], ax
xor eax, eax
mov word [ebp - 0xc76], bx
mov word [ebp - 0xc72], ax
mov word [ebp - 0xc74], dx
mov ax, word [ebp - 0xca8]
mov esi, dword [edi]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.10002cb3
push eax
push edi
call dword [esi + 8]
lea eax, [ebp - 0x414]
push eax
call fcn.100ddd9c
mov esi, eax
lea eax, [ebp - 0x20c]
push eax
call fcn.100ddd9c
add esp, 0x18
cmp esi, eax
jbe 0x10075121
lea eax, [ebp - 0x20c]
push eax
call fcn.100ddd9c
pop ecx
mov esi, eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xc34]
push eax
call fcn.100de1d0
pop ecx
pop ecx
test eax, eax
je 0x10075159
push esi
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.100e04cf
add esp, 0xc
test eax, eax
jne 0x1007536b
push dword [ebp - 0xd0c]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x1007536b
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
mov eax, dword [0x10201ab4]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 4]
je 0x10075274
mov dword [ebp - 0xcd8], 0x5c6b
mov eax, 0x5c13
mov word [ebp - 0xcd4], ax
mov ecx, 0x5c4b
add eax, 0xfffffff5
add edi, 4
mov word [ebp - 0xcd2], ax
mov eax, 0x5c07
mov word [ebp - 0xcd0], ax
add eax, 0xfffffffb
mov word [ebp - 0xcce], ax
mov eax, 0x5c04
mov word [ebp - 0xccc], ax
add eax, 0x4d
mov word [ebp - 0xcca], ax
mov word [ebp - 0xcc8], ax
lea eax, [ecx - 0xc]
mov word [ebp - 0xcc6], cx
mov word [ebp - 0xcc4], ax
add eax, 0xffffffcf
mov word [ebp - 0xcc2], ax
lea eax, [ecx - 0x32]
mov word [ebp - 0xcc0], ax
add eax, 0xffffffed
mov word [ebp - 0xcbe], ax
lea eax, [ecx - 1]
mov word [ebp - 0xcbc], ax
mov word [ebp - 0xcba], ax
mov word [ebp - 0xcb8], ax
add eax, 4
mov word [ebp - 0xcb6], cx
mov word [ebp - 0xcb4], ax
lea eax, [ecx - 0x3c]
mov word [ebp - 0xcb2], ax
lea ecx, [ebp - 0xcd8]
xor eax, eax
mov word [ebp - 0xcb0], ax
mov ax, word [ebp - 0xcd4]
push dword [ebp - 0xd0c]
mov esi, dword [edi]
call fcn.100023d4
jmp 0x1007535c
mov dword [ebp - 0xd08], 0x1ee2
mov edx, 0x1e9a
mov word [ebp - 0xd04], dx
add edi, 4
lea eax, [edx - 0x19]
mov word [ebp - 0xd02], ax
lea ecx, [edx + 0x28]
add eax, 0xd
mov word [ebp - 0xd00], ax
lea eax, [edx - 0xf]
mov word [ebp - 0xcfe], ax
add eax, 2
mov word [ebp - 0xcfc], ax
lea eax, [edx + 0x3e]
mov word [ebp - 0xcfa], ax
mov word [ebp - 0xcf8], ax
add eax, 0xffffffde
mov word [ebp - 0xcf6], cx
mov word [ebp - 0xcf4], ax
lea eax, [edx - 0x13]
mov word [ebp - 0xcf2], ax
add eax, 9
mov word [ebp - 0xcf0], ax
lea eax, [edx - 0xb]
mov word [ebp - 0xcee], ax
add eax, 0x34
mov word [ebp - 0xcec], ax
mov word [ebp - 0xcea], ax
mov word [ebp - 0xce8], ax
lea eax, [edx + 0x2d]
mov word [ebp - 0xce6], cx
mov word [ebp - 0xce4], dx
mov word [ebp - 0xce2], cx
lea ecx, [ebp - 0xd08]
mov word [ebp - 0xce0], ax
add eax, 0xffffffbf
mov word [ebp - 0xcde], ax
xor eax, eax
mov word [ebp - 0xcdc], ax
mov ax, word [ebp - 0xd04]
push dword [ebp - 0xd0c]
mov esi, dword [edi]
call fcn.1000b841
push eax
push edi
call dword [esi + 8]
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100cc9b8
leave
ret