Function at 0x1000d93b
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
push 0xc
call fcn.1007e295
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
jmp 0x1000d9a6
call 0x1000e564
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push dword [ebp - 0x20]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000d9d6
push ebx
call fcn.1007e29b
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000d9ea
push ebx
call fcn.1007e29b
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
xor ecx, ecx
push eax
lea eax, [ebp - 8]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x1000dc6b
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 4]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000da4d
push ebx
call fcn.1007e29b
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000da60
mov eax, 0x100aa45a
push eax
push 1
mov ebx, 0x198
call fcn.1007f3a0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000da86
push ebx
call fcn.1007e29b
add esp, 4
lea eax, [ebp - 0x28]
push eax
call fcn.1000e633
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000daa2
push ebx
call fcn.1007e29b
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
push 1
push 0x1f0001
xor eax, eax
call dword [0x100afd5e]
nop
nop
cmp dword [ebp - 0x34], esp
je 0x1000daf7
push 0x10c
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000db0a
push ebx
call fcn.1007e29b
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000db4b
mov dword [ebp - 0x20], esp
push dword [ebp - 0xc]
xor eax, eax
call dword [0x100afd62]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000db46
push 0x162
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
jmp 0x1000dc63
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 4]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000db90
push ebx
call fcn.1007e29b
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000dba3
mov eax, 0x100aa45a
push eax
push 1
mov ebx, 0x198
call fcn.1007f3a0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000dbc9
push ebx
call fcn.1007e29b
add esp, 4
lea eax, [ebp - 0x28]
push eax
call fcn.1000e633
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000dbe5
push ebx
call fcn.1007e29b
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
push 1
push dword [ebp - 0x14]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
nop
nop
cmp dword [ebp - 0x34], esp
je 0x1000dc38
push 0x215
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000dc4b
push ebx
call fcn.1007e29b
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
jmp 0x1000dc6b
pop eax
pop ebx
pop ecx
jmp 0x1000d9fa
add esp, 0xc
cmp dword [ebp - 0x18], 0
je 0x1000e37d
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 4]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000dcbd
push ebx
call fcn.1007e29b
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000dcd0
mov eax, 0x100aa45a
push eax
push 1
mov ebx, 0x198
call fcn.1007f3a0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000dcf6
push ebx
call fcn.1007e29b
add esp, 4
lea eax, [ebp - 0x28]
push eax
call fcn.1000e6f5
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000dd12
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x30], esp
push dword [ebp - 0x2c]
push 1
push 0xf001f
xor eax, eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000dd48
push 0x333
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000dd5b
push ebx
call fcn.1007e29b
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000df0e
cmp dword [ebp + 0x14], 2
jge 0x1000df04
cmp dword [ebp + 0x14], 0
jne 0x1000de66
mov eax, 0x100aaa21
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1000e946
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000dd9d
push ebx
call fcn.1007e29b
add esp, 4
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, 0x100aaa49
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1000e946
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000dde0
push ebx
call fcn.1007e29b
add esp, 4
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
mov ecx, 3
call fcn.1000422e
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000de09
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000de19
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000de29
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 1
push 0x10
lea eax, [ebp - 0x34]
push eax
call fcn.1000ec3f
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000de56
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000de66
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x20], esp
push 0
push 0xffffffff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000de99
push 0x582
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x20], esp
push 0
xor eax, eax
call dword [0x100afd66]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000dec7
push 0x5a7
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
call fcn.10007062
mov dword [ebp - 0x20], esp
push 0xfffffffe
xor eax, eax
call dword [0x100afd6a]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000defa
push 0x5d6
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov eax, 1
cmp eax, 2
jne 0x1000defa
mov eax, 0
jmp 0x1000e540
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 4]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000df53
push ebx
call fcn.1007e29b
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000df66
mov eax, 0x100aa45a
push eax
push 1
mov ebx, 0x198
call fcn.1007f3a0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000df8c
push ebx
call fcn.1007e29b
add esp, 4
lea eax, [ebp - 0x28]
push eax
call fcn.1000e6f5
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000dfa8
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x30], esp
push dword [ebp - 0x2c]
push 0x64
push 0
push 4
push 0
push 0xffffffff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000dfed
push 0x6a0
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000dffd
push ebx
call fcn.1007e29b
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 4]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000e042
push ebx
call fcn.1007e29b
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000e055
mov eax, 0x100aa45a
push eax
push 1
mov ebx, 0x198
call fcn.1007f3a0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000e07b
push ebx
call fcn.1007e29b
add esp, 4
lea eax, [ebp - 0x28]
push eax
call fcn.1000f5ef
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000e097
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x30], esp
push dword [ebp - 0x2c]
push 0
push 0x1f0003
xor eax, eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000e0cd
push 0x73d
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000e0e0
push ebx
call fcn.1007e29b
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000e293
cmp dword [ebp + 0x14], 2
jge 0x1000e289
cmp dword [ebp + 0x14], 0
jne 0x1000e1eb
mov eax, 0x100aaa55
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1000e946
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000e122
push ebx
call fcn.1007e29b
add esp, 4
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, 0x100aaa7d
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1000e946
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000e165
push ebx
call fcn.1007e29b
add esp, 4
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
mov ecx, 3
call fcn.1000422e
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000e18e
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000e19e
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000e1ae
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 1
push 0x10
lea eax, [ebp - 0x34]
push eax
call fcn.1000ec3f
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000e1db
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000e1eb
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x20], esp
push 0
push 0xffffffff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000e21e
push 0x98c
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x20], esp
push 0
xor eax, eax
call dword [0x100afd66]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000e24c
push 0x9b1
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
call fcn.10007062
mov dword [ebp - 0x20], esp
push 0xfffffffe
xor eax, eax
call dword [0x100afd6a]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000e27f
push 0x9e0
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov eax, 1
cmp eax, 2
jne 0x1000e27f
mov eax, 0
jmp 0x1000e540
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 4]
mov ecx, 2
call fcn.1000422e
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000e2d8
push ebx
call fcn.1007e29b
add esp, 4
push OleUIBusyA
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x1000e2eb
mov eax, 0x100aa45a
push eax
push 1
mov ebx, 0x198
call fcn.1007f3a0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000e311
push ebx
call fcn.1007e29b
add esp, 4
lea eax, [ebp - 0x28]
push eax
call fcn.1000f5ef
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000e32d
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x30], esp
push dword [ebp - 0x2c]
push 0
push 0
push 0
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000e368
push 0xa8c
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000e378
push ebx
call fcn.1007e29b
add esp, 4
jmp 0x1000e526
cmp dword [ebp + 0x14], 2
jge 0x1000e51c
cmp dword [ebp + 0x14], 0
jne 0x1000e47e
mov eax, 0x100aaa89
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1000e946
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000e3b5
push ebx
call fcn.1007e29b
add esp, 4
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x168
call fcn.1007ebe0
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, 0x100aaab1
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1000e946
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x1000e3f8
push ebx
call fcn.1007e29b
add esp, 4
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
mov ecx, 3
call fcn.1000422e
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000e421
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000e431
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000e441
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 1
push 0x10
lea eax, [ebp - 0x34]
push eax
call fcn.1000ec3f
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000e46e
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000e47e
push ebx
call fcn.1007e29b
add esp, 4
mov dword [ebp - 0x20], esp
push 0
push 0xffffffff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000e4b1
push 0xcd1
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov dword [ebp - 0x20], esp
push 0
xor eax, eax
call dword [0x100afd66]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000e4df
push 0xcf6
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
call fcn.10007062
mov dword [ebp - 0x20], esp
push 0xfffffffe
xor eax, eax
call dword [0x100afd6a]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x1000e512
push 0xd25
push 0x4027b3e
push 6
call fcn.1007e2a1
add esp, 0xc
mov eax, 1
cmp eax, 2
jne 0x1000e512
mov eax, 0
jmp 0x1000e540
mov eax, 1
jmp 0x1000e540
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000e551
push ebx
call fcn.1007e29b
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
call fcn.1007e29b
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x14