Function at 0x449300
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f772e
mov eax, dword fs:[0]
push eax
sub esp, 0x1f0
mov eax, dword [0x53c160]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 8
push dword [ebp + 0x18]
cmovae eax, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x28], 0
mov word [ebp - 0x28], cx
lea ecx, [ebp - 0x28]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
call fcn.00406c30
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00442c50
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
mov byte [ebp - 0x8d], al
cmp edx, 8
jb 0x4493c5
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4493b5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449781
push edx
push ecx
call fcn.004c3baf
mov al, byte [ebp - 0x8d]
add esp, 8
test al, al
je 0x4493d9
lea eax, [ebp + 8]
mov ecx, ebx
push eax
call fcn.00448e60
jmp 0x44972d
push 0xb0
lea eax, [ebp - 0x1fc]
push 0
push eax
call fcn.004c6130
add esp, 0xc
lea ecx, [ebp - 0x1fc]
call fcn.00402480
mov edi, eax
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 2
call fcn.00483100
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x44941a
mov eax, dword [eax]
push ecx
mov edx, eax
lea ecx, [edi + 0x10]
call fcn.0042e000
add esp, 4
lea ecx, [edi + 0x10]
mov edx, str.debugviewpluginsHttpMonitor.exe
call fcn.0042aa40
lea eax, [ebp - 0x40]
lea ecx, [edi + 0x18]
push eax
call fcn.00403e80
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
cmp edx, 8
jb 0x449482
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449478
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449786
push edx
push ecx
call fcn.004c3baf
add esp, 8
xor eax, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 6
call fcn.004025a0
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
xor ecx, ecx
mov dword [ebp - 0x28], 0
mov word [ebp - 0x28], cx
lea ecx, [ebp - 0x28]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
call fcn.00406c30
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.00442bf0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x14]
mov byte [ebp - 0x8d], al
cmp edx, 8
jb 0x449530
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449520
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44978b
push edx
push ecx
call fcn.004c3baf
mov al, byte [ebp - 0x8d]
add esp, 8
test al, al
je 0x449682
mov eax, dword [ebx + 0xb04]
add ebx, 0xb04
test eax, eax
je 0x449551
push 0
push eax
call dword [sym.imp.KERNEL32.DLL_TerminateProcess]
xor eax, eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x74]
call fcn.00483290
mov esi, dword [sym.imp.KERNEL32.DLL_GetCurrentProcess]
call esi
mov edi, eax
call esi
push 2
push 0
push 0
lea ecx, [ebp - 0x94]
push ecx
push edi
mov edi, dword [ebp - 0x50]
push edi
push eax
call dword [sym.imp.KERNEL32.DLL_DuplicateHandle]
mov esi, dword [sym.imp.KERNEL32.DLL_CloseHandle]
lea eax, [ebp - 0x9c]
cmp ebx, eax
mov eax, dword [ebp - 0x94]
je 0x4495da
mov ecx, dword [ebx]
mov dword [ebx], eax
test ecx, ecx
je 0x4495e6
cmp ecx, 0xffffffff
je 0x4495e6
push ecx
jmp 0x4495e4
test eax, eax
je 0x4495e6
cmp eax, 0xffffffff
je 0x4495e6
push eax
call esi
mov eax, dword [ebp - 0x98]
push dword [ebx]
push dword [eax + 0xb00]
call dword [sym.imp.KERNEL32.DLL_AssignProcessToJobObject]
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x449609
cmp eax, 0xffffffff
je 0x449609
push eax
call esi
test edi, edi
je 0x449615
cmp edi, 0xffffffff
je 0x449615
push edi
call esi
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x449624
cmp eax, 0xffffffff
je 0x449624
push eax
call esi
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x449633
cmp eax, 0xffffffff
je 0x449633
push eax
call esi
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x449642
cmp eax, 0xffffffff
je 0x449642
push eax
call esi
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x4496f7
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449676
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449790
push edx
push ecx
call fcn.004c3baf
add esp, 8
jmp 0x4496f7
push 0xb0
lea eax, [ebp - 0x14c]
push 0
push eax
call fcn.004c6130
add esp, 8
lea ecx, [ebp - 0x14c]
call fcn.00453740
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x14c]
call fcn.00443210
mov esi, eax
mov edx, str._missing__dropped_url_ignored_n
lea ecx, [esi + 0x10]
call fcn.00469f00
lea eax, [ebp - 0x28]
lea ecx, [esi + 0x18]
push eax
call fcn.00441d20
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebx + 0x850]
call fcn.004930d0
lea ecx, [ebp - 0x28]
call fcn.00408e60
lea ecx, [ebp - 0x14c]
call fcn.004430c0
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x44972d
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449723
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449790
push edx
push ecx
call fcn.004c3baf
add esp, 8
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb 0x449763
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x449759
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449795
push edx
push ecx
call fcn.004c3baf
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c3ba1
mov esp, ebp
pop ebp
ret 0x18
call fcn.004cecff
call fcn.004cecff
call fcn.004cecff
call fcn.004cecff
call fcn.004cecff
int3