Function at 0x440630
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x561700
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x5b7de4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x4c]
call fcn.0043a220
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0
call fcn.0043db50
push 0x5c87c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [0x5c87d8]
mov byte [ebp - 4], 1
test edi, edi
jne 0x440757
push 0x24
call fcn.005189be
mov edi, eax
add esp, 4
mov dword [ebp - 0x40], edi
test edi, edi
je 0x44074f
mov dword [edi], vtable.Utilities::CPermissionManager.0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
lea esi, [edi + 0x10]
mov byte [ebp - 4], 4
mov dword [ebp - 0x38], esi
mov ecx, esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00441300
mov dword [esi], eax
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push ecx
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x64
push eax
mov ecx, esi
call fcn.0043ac70
mov ecx, eax
call fcn.0043ab30
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 1
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x38], 0x1a2c
push ecx
lea eax, [ebp - 0x38]
mov ecx, esi
push eax
call fcn.0043ac70
mov ecx, eax
call fcn.0043ab30
jmp 0x440751
xor edi, edi
mov dword [0x5c87d8], edi
inc dword [0x5c87dc]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x5c87c0
call ebx
mov dword [ebp - 0x40], edi
mov ecx, edi
mov byte [ebp - 4], 7
call fcn.0043bdd0
test eax, eax
je 0x4409c7
call fcn.0043d580
mov esi, eax
mov dword [ebp - 0x38], esi
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x2c], 0
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.Interface
mov byte [ecx], 0
call fcn.0040a4a0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
push eax
sub esp, 0x18
mov ecx, esp
push 0x14
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WaitActionWindowType
mov byte [ecx], 0
call fcn.0040a4a0
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00414860
mov eax, dword [ebp - 0x2c]
sub esp, 0x18
mov ecx, esp
mov dword [0x5c8764], eax
mov eax, dword [0x5b77e0]
mov dword [ebp - 0x34], esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x5707b4
mov dword [ebp - 0x2c], eax
mov byte [ecx], 0
call fcn.0040a4a0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
push eax
sub esp, 0x18
mov ecx, esp
push 0xe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.DataStreamType
mov byte [ecx], 0
call fcn.0040a4a0
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00414860
mov eax, dword [ebp - 0x2c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
mov dword [0x5b77e0], eax
mov dword [ebp - 0x2c], 0
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.Main
mov byte [ecx], 0
call fcn.0040a4a0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
push eax
sub esp, 0x18
mov ecx, esp
push 0x12
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
push str.UseSingleProcessor
call fcn.0040a4a0
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00414860
cmp dword [ebp - 0x2c], 0
je 0x4408d7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 1
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov ecx, dword [ebp - 0x3c]
push 0
push 0
push 0x272f
movzx eax, word [ecx + 8]
push eax
movzx eax, word [ecx + 4]
lea ecx, [ebp - 0x68]
push eax
push 0
push 0x8d
call fcn.004d6600
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x68]
or dword [ebp - 0x54], 1
push eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x58], 0xffffffff
call fcn.00467bc0
lea ecx, [ebp - 0x68]
call fcn.004d6690
test esi, esi
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
je 0x440964
push 0x5c8648
call esi
mov eax, dword [0x5c8664]
test eax, eax
je 0x44095d
sub eax, 1
mov dword [0x5c8664], eax
jne 0x44095d
mov ecx, dword [0x5c8660]
test ecx, ecx
je 0x44095d
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x5c8660], 0
push 0x5c8648
call ebx
test edi, edi
je 0x4409a3
push 0x5c87c0
call esi
mov eax, dword [0x5c87dc]
test eax, eax
je 0x44099c
sub eax, 1
mov dword [0x5c87dc], eax
jne 0x44099c
mov ecx, dword [0x5c87d8]
test ecx, ecx
je 0x44099c
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x5c87d8], 0
push 0x5c87c0
call ebx
lea ecx, [ebp - 0x4c]
call fcn.0040bed0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005189ad
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x28]
push str...update_remoteupdate.client.exe__update__app_.._serviceapp_serviceapp.exe
push eax
call fcn.00413d10
sub esp, 0x10
mov byte [ebp - 4], 8
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.0040b5a0
call fcn.00440a70
add esp, 0x18
call fcn.0043d6a0
neg eax
sbb eax, eax
and eax, 0xfffc0000
add eax, 0x40030
push eax
push 0x5737a4
push 0x5737b0
call fcn.0043e630
mov eax, dword [eax]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.0054699b
int3