Function at 0x435c10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5afd60
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x629960]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
sub esp, 0x18
xor eax, eax
mov ecx, esp
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x60c8e8
mov word [ecx], ax
call fcn.00438260
call fcn.00447b50
add esp, 0x18
test al, al
jne 0x435c73
mov al, 1
jmp 0x435e54
xor eax, eax
mov dword [ebp - 0x2c], 7
push eax
push 0x60c8e8
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.00438260
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
xor eax, eax
push 2
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x60c558
mov word [ecx], ax
call fcn.00438260
call fcn.00448720
add esp, 0x18
test al, al
jne 0x435e3f
sub esp, 0x18
mov ecx, esp
push 0x60c560
call fcn.00438360
call fcn.00448720
add esp, 0x18
test al, al
je 0x435cee
mov byte [edi], 1
sub esp, 0x18
mov ecx, esp
push 0x60c568
call fcn.00438360
call fcn.00448720
add esp, 0x18
test al, al
je 0x435d0d
mov byte [edi + 1], 1
sub esp, 0x18
mov ecx, esp
push 0x60c570
call fcn.00438360
call fcn.00448720
add esp, 0x18
test al, al
je 0x435e8e
sub esp, 0x18
mov ecx, esp
push 0x60c570
call fcn.00438360
lea ecx, [ebp - 0x28]
call fcn.004485b0
add esp, 0x18
lea ecx, [ebp - 0x40]
push eax
call fcn.00436c20
cmp dword [ebp - 0x14], 8
jb 0x435d60
push dword [ebp - 0x28]
call fcn.0048c32c
add esp, 4
cmp dword [ebp - 0x30], 0
je 0x435dde
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
mov cx, word [eax]
call fcn.00446c30
test al, al
je 0x435dde
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
push eax
call fcn.00437d00
lea ecx, [ebp - 0x28]
call fcn.00445010
add esp, 0x18
lea esi, [edi + 4]
mov ecx, esi
push eax
call fcn.00436c20
lea ecx, [ebp - 0x28]
call fcn.00437d30
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x4c]
mov ecx, esi
push eax
call fcn.00436e10
sub esp, 0x18
mov ecx, esp
push esi
call fcn.00437d00
lea ecx, [ebp - 0x28]
call fcn.00445010
add esp, 0x18
mov ecx, esi
push eax
call fcn.00436c20
lea ecx, [ebp - 0x28]
call fcn.00437d30
sub esp, 0x18
lea esi, [edi + 4]
mov ecx, esp
xor eax, eax
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push esi
mov word [ecx], ax
call fcn.00437e60
call fcn.00443ef0
add esp, 0x18
test al, al
jne 0x435e70
mov edx, 0x60c580
push esi
lea ecx, [ebp - 0x28]
call fcn.00437030
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x435e27
mov eax, dword [eax]
push 0x10
push 0x60c578
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x28]
call fcn.00437d30
xor bl, bl
cmp dword [ebp - 0x2c], 8
jb 0x435e52
push dword [ebp - 0x40]
call fcn.0048c32c
add esp, 4
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a16e5
mov esp, ebp
pop ebp
ret
sub esp, 0x18
mov ecx, esp
push esi
call fcn.00437d00
call fcn.00448ad0
add esp, 0x18
test al, al
je 0x435e8e
mov edx, 0x60c598
jmp 0x435e13
sub esp, 0x18
mov ecx, esp
push str.defwlp
call fcn.00438360
call fcn.00448720
add esp, 0x18
test al, al
je 0x435f1a
sub esp, 0x18
mov ecx, esp
push str.defwlp
call fcn.00438360
lea ecx, [ebp - 0x28]
call fcn.004485b0
mov dword [ebp - 0x44], vtable.CDefender.0
mov dword [ebp - 0x4c], vtable.CDefenderExc.0
add esp, 0x10
mov byte [ebp - 4], 3
call fcn.00448e80
test al, al
je 0x435efa
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00437d00
push 0x1f4
push 3
push 0
call fcn.0044a530
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [ebp - 0x14], 8
jb 0x435f1a
push dword [ebp - 0x28]
call fcn.0048c32c
add esp, 4
mov bl, 1
jmp 0x435e41