Function at 0x5968ab
Capabilities:
Terminate process

Disassembly:
push ebp
sub esp, 0x48
mov eax, 0x6e274d
call fcn.006899cc
sub esp, 0x1c8
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov esi, dword [edi + 0x11c]
nop
test esi, esi
je 0x596c08
cmp esi, 7
je 0x596c08
cmp dword [edi + 0x9c], ebx
je 0x596c08
call fcn.0059223e
cmp dword [ebp + 0x54], ebx
jne 0x596a97
push str.posting_CLOSE_FRAME
mov byte [ebp + 0x54], bl
lea ecx, [ebp + 0x18]
push dword [ebp + 0x54]
mov dword [ebp + 0x18], ebx
push 0x13
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x2c], 0xf
mov byte [ebp + 0x18], bl
call fcn.00416cb0
lea eax, [ebp + 0x18]
mov dword [ebp - 4], ebx
push eax
mov ecx, edi
call fcn.00594406
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x2c]
cmp eax, 0x10
jb 0x596964
mov ecx, dword [ebp + 0x18]
inc eax
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x48], ecx
cmp eax, 0x1000
jb 0x59695b
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x48]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x54]
mov ecx, dword [ebp + 0x48]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
mov eax, dword [ebp + 0x58]
lea ecx, [edi + 0x11c]
xchg dword [ecx], eax
lea eax, [ebp + 0x58]
push eax
call fcn.0059099b
mov ecx, dword [eax]
mov dword [ebp + 0x54], ecx
mov dword [eax], ebx
mov ecx, dword [ebp + 0x58]
xor edx, edx
inc edx
mov dword [ebp - 4], edx
test ecx, ecx
je 0x596991
mov eax, dword [ecx]
push edx
call dword [eax]
push ecx
mov ecx, dword [ebp + 0x54]
mov eax, esp
mov dword [ebp + 0x48], ebx
mov dword [eax], ecx
mov ecx, edi
call fcn.00592cbc
xor ebx, ebx
test eax, eax
setne bl
inc ebx
test eax, eax
je 0x596a16
push 1
lea ecx, [ebp - 0xa4]
call fcn.0045c4aa
push esi
push str.Reverting_remote_frame_status_on_shutdown_failure_to
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 2
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004236c0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0xa0]
call fcn.004145c0
lea eax, [ebp]
mov byte [ebp - 4], 3
push eax
mov ecx, edi
call fcn.00594406
lea ecx, [ebp]
call fcn.0040fad0
lea eax, [edi + 0x11c]
xchg dword [eax], esi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 1
call fcn.0045c68b
push 1
lea ecx, [ebp - 0x13c]
call fcn.0045c4aa
mov byte [ebp - 4], 4
mov eax, str.success
cmp ebx, 1
je 0x596a36
mov eax, 0x73ce08
push eax
push 0x77aa34
push dword [edi + 0xa4]
lea eax, [ebp - 0x13c]
push str.CLOSE_FRAME_post_to_process_ID
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004636ae
push eax
call fcn.004634b5
push eax
call fcn.004634b5
lea eax, [ebp + 0x30]
push eax
lea ecx, [ebp - 0x138]
call fcn.004145c0
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 5
push eax
mov ecx, edi
call fcn.00594406
lea ecx, [ebp + 0x30]
call fcn.0040fad0
lea ecx, [ebp - 0x13c]
jmp 0x596c80
push 7
pop eax
lea ebx, [edi + 0x11c]
xchg dword [ebx], eax
push 1
lea ecx, [ebp - 0x13c]
call fcn.0045c4aa
push dword [ebp + 0x54]
lea eax, [ebp - 0x13c]
mov dword [ebp - 4], 6
push str._with_code
push dword [edi + 0x9c]
push str._handle
push dword [edi + 0xa4]
push str.terminating_remote_process_ID
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004636ae
push eax
call fcn.004634b5
mov ecx, eax
call fcn.00413070
push eax
call fcn.004634b5
mov ecx, eax
call fcn.0041baa0
lea eax, [ebp + 0x30]
push eax
lea ecx, [ebp - 0x138]
call fcn.004145c0
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 7
push eax
mov ecx, edi
call fcn.00594406
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 6
call fcn.0040fad0
push dword [ebp + 0x54]
push dword [edi + 0x9c]
call dword [sym.imp.KERNEL32.DLL_TerminateProcess]
push 1
lea ecx, [ebp - 0xa4]
mov esi, eax
call fcn.0045c4aa
mov byte [ebp - 4], 8
test esi, esi
jne 0x596b98
push 0x77b308
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push 0x73cbd8
push dword [edi + 0xa4]
lea eax, [ebp - 0xa4]
push str.cant_terminate_remote_frame_process
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004636ae
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004636ae
push eax
call fcn.004634b5
push 2
pop ebx
jmp 0x596bd2
push dword [ebp + 0x54]
lea eax, [ebp - 0xa4]
push str._with_code
push dword [edi + 0xa4]
push str.terminated_remote_frame_process
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004636ae
push eax
call fcn.004634b5
mov ecx, eax
call fcn.0041baa0
xor eax, eax
xchg dword [ebx], eax
xor ebx, ebx
inc ebx
lea eax, [ebp]
push eax
lea ecx, [ebp - 0xa0]
call fcn.004145c0
lea eax, [ebp]
mov byte [ebp - 4], 9
push eax
mov ecx, edi
call fcn.00594406
lea ecx, [ebp]
call fcn.0040fad0
lea ecx, [ebp - 0xa4]
call fcn.0045c68b
jmp 0x596a8c
push 1
lea ecx, [ebp - 0x1d4]
call fcn.0045c4aa
mov eax, dword [edi + 0x11c]
mov dword [ebp - 4], 0xa
nop
push dword [edi + 0x9c]
push str._process_handle
push eax
push str.Not_quitting_remote_frame:__status
lea eax, [ebp - 0x1d4]
push eax
call fcn.004634b5
mov ecx, eax
call fcn.004236c0
push eax
call fcn.004634b5
mov ecx, eax
call fcn.00413070
lea eax, [ebp + 0x30]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.004145c0
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0xb
push eax
mov ecx, edi
call fcn.00594406
lea ecx, [ebp + 0x30]
call fcn.0040fad0
lea ecx, [ebp - 0x1d4]
call fcn.0045c68b
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x4c
leave
ret 8