Function at 0x53aeb8
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1b
push 0
push 0
dec ecx
jne 0x53aec0
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x53b6d1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov byte [eax + 0xc], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0xe], 0
lea eax, [ebp - 0x18]
call fcn.005511f8
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
add eax, 0x10
mov ecx, 0x53b6ec
call fcn.00407c64
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.00404620
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00415290
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x561afc]
call fcn.004077a8
push 0x64
push 0x6400000
push 0x1f400000
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x24]
mov ecx, 0x53b714
call fcn.00407c64
mov ecx, dword [ebp - 0x24]
mov dl, 1
mov eax, dword [0x4fda28]
call fcn.004fe508
mov edx, dword [0x561c9c]
mov dword [edx], eax
xor eax, eax
push ebp
push 0x53afbc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5620ec]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x28]
mov ecx, 0x53b740
call fcn.00407c64
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x2c]
mov ecx, 0x53b758
call fcn.00407c64
mov ecx, dword [ebp - 0x2c]
mov dl, 1
mov eax, dword [0x549f18]
call fcn.0054a214
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x53afdd
xor eax, eax
push ebp
push 0x53b031
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x1a74
call fcn.0040424c
mov edx, dword [0x561b80]
mov dword [edx], eax
mov ecx, 0x53b758
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x30]
call fcn.00407c64
mov eax, dword [ebp - 0x30]
call fcn.00414c80
test al, al
jne 0x53b027
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14]
call fcn.0054d2dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x53b052
push 0
call sub.ole32.dll_CoInitialize
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x34]
mov ecx, 0x53b808
call fcn.00407c64
mov eax, dword [ebp - 0x34]
call fcn.00414c80
test al, al
jne 0x53b0c9
lea edx, [ebp - 0x3c]
xor eax, eax
call fcn.00404620
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
call fcn.00415290
lea eax, [ebp - 0x38]
mov edx, 0x53b82c
call fcn.00407ba4
mov edx, dword [ebp - 0x38]
lea ecx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.0053bf98
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53b0c9
push 0xbb8
push ebx
call sub.kernel32.dll_WaitForSingleObject
sub eax, 0x102
jne 0x53b0c9
push 0
push ebx
call sub.kernel32.dll_TerminateProcess
mov eax, dword [ebp - 4]
mov byte [eax + 0xd], 0
xor eax, eax
mov dword [0x5e9e64], eax
mov dl, 1
mov eax, dword [0x4484ec]
call fcn.00448770
mov dword [0x5e9e3c], eax
mov dl, 1
mov eax, dword [0x53e8a8]
call fcn.0053f174
mov dword [0x5e9e68], eax
mov eax, dword [0x5e9e68]
call fcn.0053f304
mov dl, 1
mov eax, dword [0x502140]
call fcn.00502458
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1c], ebx
lea eax, [ebp - 0x44]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x491
call fcn.00407af4
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.00415564
mov edx, dword [ebp - 0x40]
mov eax, ebx
call fcn.00502300
lea eax, [ebp - 0x4c]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x188
call fcn.00407af4
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x48]
call fcn.00415564
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x54]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x28d
call fcn.00407af4
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.00415564
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x5c]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x59a
call fcn.00407af4
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
call fcn.00415564
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x64]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x699
call fcn.00407af4
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x60]
call fcn.00415564
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x6c]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x992
call fcn.00407af4
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
call fcn.00415564
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x74]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0xb8f
call fcn.00407af4
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.00415564
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x7c]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0xc8d
call fcn.00407af4
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x78]
call fcn.00415564
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x84]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0xd8b
call fcn.00407af4
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x80]
call fcn.00415564
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x8c]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0xe90
call fcn.00407af4
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0x88]
call fcn.00415564
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0x98]
mov edx, dword [0x561b80]
mov edx, dword [edx]
mov ecx, 0
call fcn.00406c3c
lea eax, [ebp - 0x98]
mov edx, 0x53b860
call fcn.00406cf0
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 0x94]
call fcn.004079ac
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.00415564
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xa0]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0xf8d
call fcn.00407af4
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.00415564
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xa8]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x1089
call fcn.00407af4
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.00415564
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xb0]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x1187
call fcn.00407af4
mov eax, dword [ebp - 0xb0]
lea edx, [ebp - 0xac]
call fcn.00415564
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xb8]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x138d
call fcn.00407af4
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0xb4]
call fcn.00415564
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xc0]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x177d
call fcn.00407af4
mov eax, dword [ebp - 0xc0]
lea edx, [ebp - 0xbc]
call fcn.00415564
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xc8]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x1878
call fcn.00407af4
mov eax, dword [ebp - 0xc8]
lea edx, [ebp - 0xc4]
call fcn.00415564
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xd0]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0x1680
call fcn.00407af4
mov eax, dword [ebp - 0xd0]
lea edx, [ebp - 0xcc]
call fcn.00415564
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
lea eax, [ebp - 0xd8]
mov edx, dword [0x561b80]
mov edx, dword [edx]
add edx, 0xa8f
call fcn.00407af4
mov eax, dword [ebp - 0xd8]
lea edx, [ebp - 0xd4]
call fcn.00415564
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
call fcn.00502300
mov ecx, 0xba2a
mov dl, 1
mov eax, dword [0x5431dc]
call fcn.00543648
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 8], ebx
mov eax, dword [ebp - 4]
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x10], 0x53ac88
mov eax, dword [ebp - 4]
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x18], 0x53babc
mov eax, dword [ebp - 4]
mov dword [ebx + 0x24], eax
mov dword [ebx + 0x20], 0x53bbfc
mov eax, dword [ebp - 4]
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x28], 0x53bab0
mov eax, dword [ebp - 4]
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x30], fcn.0053ae70
mov eax, dword [ebp - 4]
mov dword [ebx + 0xc], eax
mov dword [ebx + 8], 0x53ba38
mov dl, 1
mov eax, dword [0x535254]
call fcn.00535dec
mov dword [0x5e9e4c], eax
mov eax, dword [0x5e9e4c]
mov byte [eax + 0xf], 1
mov eax, dword [0x5e9e4c]
mov edx, dword [ebp - 4]
mov dword [eax + 0x44], edx
mov dword [eax + 0x40], 0x53ac88
mov eax, dword [0x5e9e4c]
call fcn.004457e8
mov eax, dword [ebp - 4]
call fcn.0053aa74
mov eax, dword [0x561b80]
mov eax, dword [eax]
cmp byte [eax + 0x177b], 0
jne 0x53b5f3
mov eax, dword [0x561b80]
mov eax, dword [eax]
cmp byte [eax + 0x177c], 0
je 0x53b604
mov dl, 1
mov eax, dword [0x53898c]
call fcn.00538fd4
mov dword [0x5e9e74], eax
xor ecx, ecx
mov dl, 1
mov eax, dword [0x53c198]
call fcn.00444bb0
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 4], ebx
mov byte [ebx + 0xf], 1
mov byte [0x5e9e48], 5
xor ecx, ecx
mov dl, 1
mov eax, dword [0x53c594]
call fcn.00444bb0
mov edx, dword [ebp - 4]
mov dword [edx + 0x18], eax
mov eax, dword [0x561b80]
mov eax, dword [eax]
cmp byte [eax + 0x698], 0
je 0x53b64e
call fcn.0053c8d8
mov eax, dword [0x5619e0]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_ResetEvent
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0xdc]
mov ecx, 0x53b878
call fcn.00407c64
mov ecx, dword [ebp - 0xdc]
mov dl, 1
mov eax, dword [0x53da48]
call fcn.0053df0c
mov dword [0x5e9e70], eax
mov eax, dword [ebp - 4]
call fcn.0053a4c0
mov eax, dword [ebp - 4]
call fcn.0053bc3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x53b6d8
lea eax, [ebp - 0xdc]
mov edx, 0x11
call fcn.004077a0
lea eax, [ebp - 0x98]
call fcn.004068e4
lea eax, [ebp - 0x94]
mov edx, 0x20
call fcn.004077a0
ret