Function at 0x4155c4
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff88
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], eax
mov eax, 0x7cf71c
call fcn.007b7c14
mov edx, dword [ebp - 0x60]
cmp byte [edx + 0x452], 0
jne 0x4156bd
mov ecx, dword [0x7d2640]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x3e0]
call fcn.00415464
mov eax, dword [ebp - 0x60]
call fcn.00411b24
mov edx, dword [ebp - 0x60]
mov ecx, dword [edx + 0x3e8]
add ecx, 0x3a4
mov dword [ebp - 0x68], ecx
mov word [ebp - 0x4c], 0xc
mov eax, dword [0x7d2640]
add eax, 0xc
mov dword [ebp - 0x6c], eax
xor edx, edx
mov dword [ebp - 4], edx
lea eax, [ebp - 4]
mov edx, dword [ebp - 0x6c]
call fcn.0044987c
lea ecx, [ebp - 4]
inc dword [ebp - 0x40]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x3e8]
mov ecx, dword [eax]
call dword [ecx + 0xf0]
dec dword [ebp - 0x40]
lea eax, [ebp - 4]
mov edx, 2
call fcn.007c633c
mov word [ebp - 0x4c], 0x18
mov ecx, dword [0x7d2640]
add ecx, 4
mov dword [ebp - 0x70], ecx
xor eax, eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x70]
call fcn.0044987c
lea ecx, [ebp - 8]
inc dword [ebp - 0x40]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x3e4]
call fcn.006103f4
dec dword [ebp - 0x40]
lea eax, [ebp - 8]
mov edx, 2
call fcn.007c633c
jmp 0x415745
xor edx, edx
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x3ec]
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov dl, 1
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x418]
call fcn.00546598
mov edx, dword [0x7e8f34]
mov eax, dword [edx]
call fcn.00526980
mov edx, eax
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0x418]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4156ff
adc edx, 0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0x418]
call fcn.00545c50
mov edx, dword [0x7e8f34]
mov eax, dword [edx]
call fcn.00526978
mov edx, eax
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0x418]
sub edx, dword [eax + 0x4c]
sar edx, 1
jns 0x41572f
adc edx, 0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0x418]
call fcn.00545c84
mov eax, dword [ebp - 0x60]
call fcn.0040f58c
mov eax, dword [ebp - 0x60]
call fcn.004133c0
mov edx, dword [ebp - 0x60]
mov byte [edx + 0x450], al
mov ecx, dword [ebp - 0x60]
cmp byte [ecx + 0x450], 0
jne 0x41581b
mov edx, 0x7cd362
lea eax, [ebp - 0x10]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x40]
lea eax, [ebp - 0x10]
inc dword [ebp - 0x40]
push dword [eax]
mov word [ebp - 0x4c], 0x24
mov edx, 0x7cdc07
lea eax, [ebp - 0xc]
xor ecx, ecx
call fcn.007c5314
inc dword [ebp - 0x40]
lea edx, [ebp - 0xc]
inc dword [ebp - 0x40]
push dword [edx]
push 0x7e982c
call fcn.00406958
pop ecx
pop edx
pop ecx
call fcn.0040cc88
sub dword [ebp - 0x40], 2
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00402554
sub dword [ebp - 0x40], 2
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00402554
mov eax, dword [ebp - 0x60]
inc dword [eax + 0x428]
mov ecx, dword [ebp - 0x60]
cmp dword [ecx + 0x428], 2
jle 0x4158c4
mov eax, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [eax]
call fcn.0054f634
push eax
call sub.USER32.DLL_DestroyWindow
call fcn.00406ad4
call sub.KERNEL32.DLL_GetCurrentProcess
mov dword [ebp - 0x74], eax
push 0
push dword [ebp - 0x74]
call sub.KERNEL32.DLL_TerminateProcess
jmp 0x4158c4
mov word [ebp - 0x4c], 0x30
mov edx, dword [0x7d2640]
cmp dword [edx], 0
jne 0x415833
mov ecx, 0x7cdc2a
jmp 0x41583a
mov eax, dword [0x7d2640]
mov ecx, dword [eax]
mov dword [ebp - 0x78], ecx
add esp, 0xfffffff8
push esp
call fcn.00404764
pop ecx
lea edx, [ebp - 0x38]
push edx
call fcn.00404788
add esp, 0xc
push 0
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.00404640
add esp, 0xc
push dword [ebp - 0x78]
lea edx, [ebp - 0x38]
push edx
call fcn.004047bc
add esp, 8
inc dword [ebp - 0x40]
mov word [ebp - 0x4c], 0x3c
mov eax, dword [ebp - 0x60]
call fcn.0040f95c
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x60]
call fcn.00412b58
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0x3f4]
mov edx, dword [eax]
call dword [edx + 0x14c]
test al, al
je 0x4158ab
mov eax, dword [ebp - 0x60]
call fcn.00524c20
dec dword [ebp - 0x40]
push 0
push 1
lea edx, [ebp - 0x38]
push edx
call fcn.00404640
add esp, 0xc
mov word [ebp - 0x4c], 0
xor edx, edx
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x418]
call fcn.00546598
mov dl, 1
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + 0x3ec]
mov ecx, dword [eax]
call dword [ecx + 0x74]
push 0
push 0x2711
push 0x400
mov edx, dword [sym.KDEMR.exe__F_PtMain]
mov eax, dword [edx]
call fcn.0054f634
push eax
call sub.USER32.DLL_SendMessageA
mov edx, dword [ebp - 0x5c]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret