Function at 0x4044e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
push 0x1010
call fcn.004019b0
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x404504
jmp 0x404729
lea eax, [ebp - 8]
push eax
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.00401860
add esp, 0xc
mov eax, dword [ebp - 8]
add eax, 0x10
mov dword [ebp - 0xc], eax
push 0
push 4
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x40453e
jmp 0x404729
mov eax, dword [ebp - 0xc]
add eax, 0x40
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, 0x80
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
add eax, 0x88
mov dword [ebp - 0x18], eax
push 0
push 8
call fcn.004014c0
mov eax, dword [eax + 0x10]
add eax, 0x40
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x404584
jmp 0x404729
push 0
push 8
call fcn.004014c0
mov eax, dword [eax + 0x10]
add eax, 0x80
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x4045ad
jmp 0x404729
push 0
push 8
call fcn.004014c0
mov eax, dword [eax + 0x10]
add eax, 0x88
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x4045d6
jmp 0x404729
call fcn.004014c0
mov eax, dword [eax + 0x10]
movzx ecx, word [eax + 0x40]
push ecx
call fcn.00404740
add esp, 4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4045f9
jmp 0x404729
call fcn.004014c0
mov eax, dword [eax + 0x10]
movzx ecx, word [eax + 0x80]
push ecx
call fcn.00404740
add esp, 4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x40461f
jmp 0x404729
call fcn.004014c0
mov eax, dword [eax + 0x10]
movzx ecx, word [eax + 0x88]
push ecx
call fcn.00404740
add esp, 4
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x404645
jmp 0x404729
push 0
call fcn.004014c0
mov eax, dword [eax + 0x10]
movzx ecx, word [eax + 0x40]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.004014c0
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x404677
jmp 0x404729
push 0
call fcn.004014c0
mov eax, dword [eax + 0x10]
movzx ecx, word [eax + 0x80]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call fcn.004014c0
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x84]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x4046ac
jmp 0x404729
push 0
call fcn.004014c0
mov eax, dword [eax + 0x10]
movzx ecx, word [eax + 0x88]
push ecx
mov edx, dword [ebp - 0x24]
push edx
call fcn.004014c0
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x8c]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x4046e1
jmp 0x404729
call fcn.004014c0
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x44], ecx
call fcn.004014c0
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 0x84], ecx
call fcn.004014c0
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x8c], ecx
push 0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ntdll.dll_NtTerminateProcess]
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ntdll.dll_NtClose]
jmp 0x404739
call fcn.00404c60
push eax
push str.Failed_to_retrieve_parameters_from_parent_process:__s
call fcn.00404d20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret