Function at 0x447228
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], ecx
mov edi, edx
mov esi, eax
xor eax, eax
push ebp
push 0x44753b
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x5737dc], 0
je 0x447387
cmp dword [0x67feec], 0
jne 0x447387
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
mov eax, 0x447554
call fcn.004471c4
mov eax, esi
call fcn.004471c4
mov eax, edi
call fcn.004471c4
call fcn.00403168
xor edx, edx
push edx
push eax
lea edx, [ebp - 4]
mov eax, 8
call fcn.004287c0
mov eax, dword [ebp - 4]
call fcn.004471c4
mov eax, dword [0x57b2cc]
mov eax, dword [eax]
xor edx, edx
push edx
push eax
lea edx, [ebp - 8]
mov eax, 8
call fcn.004287c0
mov eax, dword [ebp - 8]
call fcn.004471c4
lea edx, [ebp - 0xc]
mov eax, ebx
call fcn.004471f8
mov eax, dword [ebp - 0xc]
call fcn.004471c4
call fcn.00403148
mov edx, dword [0x426ea4]
call fcn.00404198
test al, al
je 0x447340
call fcn.00403148
mov eax, dword [eax]
lea edx, [ebp - 0x110]
call fcn.00403eec
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x10]
call fcn.00405290
mov eax, dword [ebp - 0x10]
call fcn.004471c4
call fcn.00403148
mov eax, dword [eax + 4]
call fcn.004471c4
jmp 0x44734e
xor eax, eax
call fcn.004471c4
xor eax, eax
call fcn.004471c4
call fcn.00407794
xor edx, edx
mov dword [eax + 0x1c], edx
call fcn.00407794
xor edx, edx
mov dword [eax + 0x20], edx
call fcn.00407794
xor edx, edx
mov dword [eax + 0x24], edx
call fcn.00407794
xor edx, edx
mov dword [eax + 0x28], edx
jmp 0x447510
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
call fcn.0040ede8
test al, al
je 0x44739c
call fcn.0040f1ac
call fcn.00448134
mov eax, 0x447554
call fcn.004471c4
mov eax, esi
call fcn.004471c4
mov eax, edi
call fcn.004471c4
call fcn.00403168
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x114]
mov eax, 8
call fcn.004287c0
mov eax, dword [ebp - 0x114]
call fcn.004471c4
mov eax, dword [0x57b2cc]
mov eax, dword [eax]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x118]
mov eax, 8
call fcn.004287c0
mov eax, dword [ebp - 0x118]
call fcn.004471c4
lea edx, [ebp - 0x11c]
mov eax, ebx
call fcn.004471f8
mov eax, dword [ebp - 0x11c]
call fcn.004471c4
call fcn.00403148
mov edx, dword [0x426ea4]
call fcn.00404198
test al, al
je 0x44746c
call fcn.00403148
mov eax, dword [eax]
lea edx, [ebp - 0x110]
call fcn.00403eec
lea edx, [ebp - 0x110]
lea eax, [ebp - 0x120]
call fcn.00405290
mov eax, dword [ebp - 0x120]
call fcn.004471c4
call fcn.00403148
mov eax, dword [eax + 4]
call fcn.004471c4
jmp 0x44747a
xor eax, eax
call fcn.004471c4
xor eax, eax
call fcn.004471c4
xor eax, eax
call fcn.00447148
cmp dword [0x67feec], 0
je 0x4474c6
call fcn.00407794
mov eax, dword [eax + 0x1c]
push eax
call fcn.00407794
mov eax, dword [eax + 0x20]
push eax
call fcn.00407794
mov eax, dword [eax + 0x24]
push eax
call fcn.00407794
mov eax, dword [eax + 0x28]
push eax
mov ecx, ebx
mov edx, edi
mov eax, esi
call dword [0x67feec]
call fcn.00407794
xor edx, edx
mov dword [eax + 0x1c], edx
call fcn.00407794
xor edx, edx
mov dword [eax + 0x20], edx
call fcn.00407794
xor edx, edx
mov dword [eax + 0x24], edx
call fcn.00407794
xor edx, edx
mov dword [eax + 0x28], edx
mov eax, 0x1f
call fcn.00408810
push eax
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x447542
lea eax, [ebp - 0x120]
mov edx, 4
call fcn.00405050
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00405050
ret