Function at 0x4d5200
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f4f06
mov eax, dword fs:[0]
push eax
sub esp, 0x108
mov eax, dword [0x5392a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x108], ecx
call fcn.004856c0
movzx eax, al
test eax, eax
jne 0x4d5247
mov eax, 1
jmp 0x4d562f
lea ecx, [ebp - 0xad]
call fcn.0040b800
push eax
lea ecx, [ebp - 0x64]
call fcn.004148f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x64]
push ecx
mov ecx, 0x595e28
call fcn.004e04c0
push 0x514e48
lea ecx, [ebp - 0x60]
call fcn.00410d00
mov dword [ebp - 0x38], 0
mov edx, dword [ebp - 0x108]
add edx, 0x1c
je 0x4d52a0
mov eax, dword [ebp - 0x108]
add eax, 0x20
mov dword [ebp - 0x10c], eax
jmp 0x4d52aa
mov dword [ebp - 0x10c], 0
push 0x514e70
mov ecx, dword [ebp - 0x10c]
push ecx
lea edx, [ebp - 0xcc]
push edx
call fcn.00407a80
add esp, 0xc
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x30]
call fcn.00417720
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcc]
call fcn.00414bf0
lea ecx, [ebp - 0x2c]
call fcn.00413e50
push eax
lea ecx, [ebp - 0x60]
call fcn.00413e50
push eax
call fcn.004b3a30
add esp, 8
mov byte [ebp - 0x41], al
movzx edx, byte [ebp - 0x41]
test edx, edx
jne 0x4d534e
mov dword [ebp - 0xd0], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00414a10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00414a10
mov eax, dword [ebp - 0xd0]
jmp 0x4d562f
push str.UpdateBabHelper64___newer_helper64...
push 0xc0b70001
call fcn.00418990
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x40], 1
lea eax, [ebp - 0x34]
push eax
push 0x514ee4
call fcn.0048d270
add esp, 8
mov byte [ebp - 0x39], al
movzx ecx, byte [ebp - 0x39]
test ecx, ecx
je 0x4d556b
push 0x514f10
push 0xc0b70004
call fcn.00418990
add esp, 8
mov edx, dword [ebp - 0x34]
push edx
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x4d53c8
push 0
mov eax, dword [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x4d540a
push str.UpdateBabHelper64___failed_to_open_helper64_for_terminating...
push 0xc0b70004
call fcn.00418990
add esp, 8
mov dword [ebp - 0xd4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00414a10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00414a10
mov eax, dword [ebp - 0xd4]
jmp 0x4d562f
push 5
lea ecx, [ebp - 0x60]
call fcn.00413e50
push eax
call fcn.004857a0
add esp, 8
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x4d556b
lea ecx, [ebp - 0xf5]
call fcn.0040b800
push eax
lea ecx, [ebp - 0x60]
call fcn.00413e50
push eax
lea ecx, [ebp - 0xf4]
call fcn.00414c40
mov byte [ebp - 4], 4
push 0
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.0048fd80
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf4]
call fcn.00414a10
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.0048dd80
add esp, 8
movzx edx, al
test edx, edx
jne 0x4d555c
push str.UpdateBabHelper64___failed_to_rename_helper64...
push 0xc0b70004
call fcn.00418990
add esp, 8
lea ecx, [ebp - 0xf6]
call fcn.0040b800
push eax
lea ecx, [ebp - 0xac]
call fcn.004148f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x60]
call fcn.00413e50
push eax
push str.Cannot_replace_file__s__nyou_can_skip_this_stage_or_exit_setup_and_run_it_again._nDo_you_want_to_skip_and_continue_
lea eax, [ebp - 0xac]
push eax
call fcn.00413900
add esp, 0xc
push 0x24
push 0
push 0x37
lea ecx, [ebp - 0xa8]
call fcn.00413e50
push eax
call fcn.0041d260
mov ecx, dword [eax + 4]
push ecx
call fcn.004be3e0
add esp, 0x14
mov dword [ebp - 0x8c], eax
xor edx, edx
cmp dword [ebp - 0x8c], 6
sete dl
mov dword [ebp - 0xfc], edx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xac]
call fcn.00414a10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00414a10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00414a10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00414a10
mov eax, dword [ebp - 0xfc]
jmp 0x4d562f
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.00414a10
push str.UpdateBabHelper64___going_to_unregister_helper64_and_copy_file...
push 0xc0b70001
call fcn.00418990
add esp, 8
push 0
lea ecx, [ebp - 0x60]
call fcn.00413e50
push eax
call fcn.004b3660
add esp, 8
push 1
push 0
push 0
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.0048df40
add esp, 0x14
movzx edx, al
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
jne 0x4d55f1
push str.UpdateBabHelper64___failed_to_replace_helper64_file...
push 0xc0b70004
call fcn.00418990
add esp, 8
mov dword [ebp - 0x100], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00414a10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00414a10
mov eax, dword [ebp - 0x100]
jmp 0x4d562f
push 1
lea ecx, [ebp - 0x60]
call fcn.00413e50
push eax
call fcn.004b3660
add esp, 8
mov dword [ebp - 0x104], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00414a10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00414a10
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004489b2
mov esp, ebp
pop ebp
ret