Function at 0x47906c
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd8c
push ebx
push esi
xor eax, eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0x4793fb
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004774a0
test al, al
je 0x479235
mov ebx, 0x400
mov eax, ebx
call fcn.0040274c
mov dword [ebp - 4], eax
xor edx, edx
push ebp
push 0x47922e
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0xc]
push eax
push ebx
mov eax, dword [ebp - 4]
push eax
call fcn.004770dc
test eax, eax
jne 0x4790d7
call fcn.0040df28
cmp ebx, dword [ebp - 0xc]
ja 0x4790f6
add ebx, 0x400
mov eax, dword [ebp - 4]
call fcn.0040276c
mov eax, ebx
call fcn.0040274c
mov dword [ebp - 4], eax
jmp 0x4790c0
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
shr eax, 2
test eax, eax
jle 0x479218
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
add dword [ebp - 8], 4
call sub.kernel32.dll_GetCurrentProcessId
cmp ebx, eax
je 0x47920f
push ebx
push 0
push 0x410
call sub.kernel32.dll_OpenProcess
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x47920f
xor edx, edx
push ebp
push 0x479208
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.004770fc
test eax, eax
jne 0x47916c
call fcn.00404048
jmp 0x47920f
mov eax, 0x104
push eax
lea eax, [ebp - 0x125]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.0047711c
lea eax, [ebp - 0x270]
lea edx, [ebp - 0x125]
mov ecx, 0x105
call fcn.004048a0
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x18]
call fcn.004095d8
mov edx, dword [ebp - 0x18]
mov eax, 0x479410
call fcn.0040891c
test al, al
jne 0x4791dd
mov edx, dword [ebp - 0x18]
mov eax, 0x479424
call fcn.0040891c
test al, al
jne 0x4791dd
mov edx, dword [ebp - 0x18]
mov eax, 0x47943c
call fcn.0040891c
test al, al
je 0x4791f1
push ebx
push 0
push 1
call sub.kernel32.dll_OpenProcess
mov esi, eax
push 0
push esi
call sub.kernel32.dll_TerminateProcess
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47920f
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
dec dword [ebp - 0x20]
jne 0x47910d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4793d5
mov eax, dword [ebp - 4]
call fcn.0040276c
ret
push 0
push 6
call fcn.004774f4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x47924c
call fcn.0040df28
xor edx, edx
push ebp
push 0x4793ce
push dword fs:[edx]
mov dword fs:[edx], esp
mov bl, 1
mov dword [ebp - 0x250], 0x128
test bl, bl
je 0x479284
lea eax, [ebp - 0x250]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00477514
cmp eax, 1
sbb eax, eax
inc eax
xor ebx, ebx
jmp 0x47929a
lea eax, [ebp - 0x250]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00477534
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x4792b7
call sub.kernel32.dll_GetLastError_1
cmp eax, 0x12
jne 0x4792b2
call fcn.00404048
jmp 0x4793d5
call fcn.0040df28
call sub.kernel32.dll_GetCurrentProcessId
cmp eax, dword [ebp - 0x248]
je 0x47925c
lea eax, [ebp - 0x274]
lea edx, [ebp - 0x22c]
mov ecx, 0x104
call fcn.004048a0
mov eax, dword [ebp - 0x274]
lea edx, [ebp - 0x18]
call fcn.004095d8
mov eax, 0x479410
mov edx, dword [ebp - 0x18]
call fcn.0040891c
test al, al
jne 0x47931f
mov eax, 0x479424
mov edx, dword [ebp - 0x18]
call fcn.0040891c
test al, al
jne 0x47931f
mov eax, 0x47943c
mov edx, dword [ebp - 0x18]
call fcn.0040891c
test al, al
je 0x47925c
mov eax, dword [ebp - 0x248]
push eax
push 0
push 0x100001
call sub.kernel32.dll_OpenProcess
mov esi, eax
mov dword [ebp - 0x26c], 0x1c
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00477554
cmp eax, 1
sbb eax, eax
inc eax
jmp 0x47938c
mov eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x248]
jne 0x479376
push 0
push 0
push 0x10
mov eax, dword [ebp - 0x264]
push eax
call sub.user32.dll_PostThreadMessageA
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00477574
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x479356
push 0x1388
push esi
call sub.kernel32.dll_WaitForSingleObject
test eax, eax
jne 0x4793aa
push esi
call sub.kernel32.dll_CloseHandle_1
jmp 0x47925c
push 0xffffffffffffffff
push esi
call sub.kernel32.dll_TerminateProcess
jmp 0x47925c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x479402
lea eax, [ebp - 0x274]
mov edx, 2
call fcn.00404644
lea eax, [ebp - 0x18]
call fcn.00404620
ret