Function at 0x4247ec
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf0
mov cl, 1
test cl, 1
mov dword [ebp - 0x88], eax
jne 0x42480b
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x55], 0
call sub.KERNEL32.DLL_GetCurrentProcess
mov ecx, 0x28
lea edx, [ebp - 0x54]
mov esi, esp
lea edi, [ebp - 0x54]
mov dword [esi + 8], edi
mov dword [esi], eax
mov dword [esi + 4], 0x28
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x90], ecx
call sub.ADVAPI32.DLL_OpenProcessToken
sub esp, 0xc
lea ecx, [ebp - 0x44]
lea edx, [0x780834]
mov dword [ebp - 0x28], edx
mov edx, 0x794eb0
mov dword [ebp - 0x24], edx
mov edx, ebp
mov dword [ebp - 0x20], edx
mov edx, esp
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], 0x424d11
mov dword [ebp - 0x94], eax
mov eax, ecx
call fcn.007811a9
mov eax, dword [ebp - 0x94]
cmp eax, 0
jne 0x424905
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x3c], 0xffffffff
mov eax, esp
lea ecx, [ebp - 0x5c]
mov dword [eax], ecx
mov dword [eax + 4], str.OpenProcessToken_with_TOKEN_ADJUST_PRIVILEGES_failed_
call fcn.00413968
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], 1
xor edx, edx
call fcn.0040ec20
jmp 0x4248c9
lea eax, [ebp - 0x5c]
mov dword [esp], eax
call fcn.0040f954
mov byte [ebp - 0x45], 0
jmp 0x424cd4
mov eax, 1
xor ecx, ecx
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], 0xffffffff
mov esi, esp
mov dword [esi + 8], edx
mov dword [esi + 4], 0
mov dword [esi], 1
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa4], ecx
call sub.KERNEL32.DLL_OpenProcess
sub esp, 0xc
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x424c3a
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0xffffffff
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
call sub.KERNEL32.DLL_TerminateProcess
sub esp, 8
test eax, eax
setne byte [ebp - 0x55]
mov dword [ebp - 0x3c], 0xffffffff
mov eax, esp
mov dword [eax], 0x32
call sub.KERNEL32.DLL_Sleep
sub esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x3c], 0xffffffff
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x78]
mov dword [ecx], eax
call fcn.0040f8a0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x3c], 2
mov eax, esp
lea ecx, [ebp - 0x74]
mov dword [eax], ecx
call fcn.00404c44
jmp 0x4249bf
mov dword [ebp - 0x3c], 3
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x74]
mov dword [eax], ecx
mov dword [eax + 4], str.TerminateProcess_for_pid:
call fcn.007867b8
jmp 0x4249e1
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x3c], 4
mov eax, esp
lea ecx, [ebp - 0x7c]
mov dword [eax], ecx
mov dword [eax + 4], str._finished_with_Result:
call fcn.00785588
jmp 0x424a04
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x3c], 5
mov eax, esp
lea ecx, [ebp - 0x70]
mov dword [eax], ecx
call fcn.00404c44
jmp 0x424a20
mov dword [ebp - 0x3c], 6
mov eax, esp
lea ecx, [ebp - 0x7c]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x74]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x70]
mov dword [eax], ecx
call fcn.00785ebc
jmp 0x424a41
movzx eax, byte [ebp - 0x55]
and eax, 1
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x3c], 7
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x80]
mov dword [ecx], eax
call fcn.00404c5c
jmp 0x424a67
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x3c], 8
mov eax, esp
lea ecx, [ebp - 0x6c]
mov dword [eax], ecx
call fcn.00404c44
jmp 0x424a83
mov dword [ebp - 0x3c], 9
mov eax, esp
lea ecx, [ebp - 0x80]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x70]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x6c]
mov dword [eax], ecx
call fcn.00785ebc
jmp 0x424aa4
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x3c], 0xa
mov eax, esp
lea ecx, [ebp - 0x6c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x68]
mov dword [eax], ecx
call fcn.0040f8e0
jmp 0x424ac6
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3c], 0xb
xor edx, edx
call fcn.0040ec20
jmp 0x424ad9
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0040f954
lea eax, [ebp - 0x6c]
mov dword [esp], eax
call fcn.0078556c
lea eax, [ebp - 0x80]
mov dword [esp], eax
call fcn.0078556c
lea eax, [ebp - 0x70]
mov dword [esp], eax
call fcn.0078556c
lea eax, [ebp - 0x7c]
mov dword [esp], eax
call fcn.0078556c
lea eax, [ebp - 0x74]
mov dword [esp], eax
call fcn.0078556c
lea eax, [ebp - 0x78]
mov dword [esp], eax
call fcn.0078556c
jmp 0x424caf
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x3c], 0xffffffff
mov eax, esp
lea ecx, [ebp - 0x84]
mov dword [eax], ecx
mov dword [eax + 4], str.OpenProcess_with_PROCESS_TERMINATE_failed_
call fcn.00413968
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x3c], 0xc
xor edx, edx
call fcn.0040ec20
jmp 0x424c77
lea eax, [ebp - 0x84]
mov dword [esp], eax
call fcn.0040f954
jmp 0x424caf
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], 0xffffffff
mov ecx, esp
mov dword [ecx], eax
call sub.KERNEL32.DLL_CloseHandle
sub esp, 4
mov dl, byte [ebp - 0x55]
and dl, 1
mov byte [ebp - 0x45], dl
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x44]
mov cl, byte [ebp - 0x45]
mov dword [esp], eax
mov byte [ebp - 0xe9], cl
call fcn.007811ca
mov cl, byte [ebp - 0xe9]
and cl, 1
movzx eax, cl
add esp, 0xf0
pop esi
pop edi
pop ebx
pop ebp
ret