Function at 0x404744
Capabilities:
Terminate process

Disassembly:
cmp ecx, dword [0x412008]
jne 0x4033ee
repz ret
jmp 0x404744
mov edi, edi
push ebp
mov dword [0x413b48], eax
mov dword [0x413b44], ecx
mov dword [0x413b40], edx
mov dword [0x413b3c], ebx
mov ebp, esp
mov dword [0x413b38], esi
sub esp, 0x328
mov dword [0x413b34], edi
mov word [0x413b60], ss
mov word [0x413b54], cs
mov word [0x413b30], ds
mov word [0x413b2c], es
mov word [0x413b28], fs
mov word [0x413b24], gs
pushfd
pop dword [0x413b58]
mov eax, dword [ebp]
mov dword [0x413b4c], eax
mov eax, dword [ebp + 4]
mov dword [0x413b50], eax
lea eax, [ebp + 8]
mov dword [0x413b5c], eax
mov ebx, dword [ebp - 0x320]
mov dword [0x413a98], 0x10001
mov eax, dword [0x413b50]
mov dword [0x413a4c], eax
mov dword [0x413a40], 0xc0000409
mov dword [0x413a44], 1
mov eax, dword [0x412008]
mov dword [ebp - 0x328], eax
mov eax, dword [0x41200c]
mov dword [ebp - 0x324], eax
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [0x413a90], eax
push 1
call fcn.00409fa7
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0x40f254
call dword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
cmp dword [0x413a90], 0
jne 0x404836
push 1
call fcn.00409fa7
pop ecx
push 0xc0000409
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
leave
ret

Function at 0x405682
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov eax, dword [0x412008]
mov ebp, esp
sub esp, 0x328
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x324]
and dword [ebp - 0x328], 0
push ebx
push 0x4c
push 0
push eax
call fcn.00406b00
lea eax, [ebp - 0x328]
mov dword [ebp - 0x2d8], eax
add esp, 0xc
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x228], edx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], edi
mov word [ebp - 0x208], ss
mov word [ebp - 0x214], cs
lea ecx, [ebp + 4]
mov word [ebp - 0x238], ds
mov word [ebp - 0x23c], es
mov word [ebp - 0x240], fs
mov word [ebp - 0x244], gs
pushfd
pop dword [ebp - 0x210]
mov eax, dword [ebp + 4]
mov dword [ebp - 0x2d0], 0x10001
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x20c], ecx
mov ecx, dword [ecx - 4]
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x328], 0xc0000417
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x31c], eax
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
push 0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
lea eax, [ebp - 0x2d8]
push eax
call dword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
test eax, eax
jne 0x40578b
test ebx, ebx
jne 0x40578b
push 2
call fcn.00409fa7
pop ecx
push 0xc0000417
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004033e4
leave
ret

Function at 0x4057aa
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push dword [0x413d64]
call fcn.004058d6
pop ecx
or eax, eax
je 0x4057c2
pop edx
jmp eax
push 2
call fcn.00409fa7
pop ecx
pop ebp
jmp fcn.00405682