Function at 0x55c350
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff940
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x6c0], edx
mov dword [ebp - 0x6bc], edx
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405148
lea eax, [ebp - 0x58c]
mov edx, dword [0x408ba8]
call fcn.0040595c
xor eax, eax
push ebp
push 0x55c68d
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x55c644
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x55c69c
call sub.kernel32.dll_GetModuleHandleA_2
mov ebx, eax
test ebx, ebx
jne 0x55c3c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55c64e
push 0x55c6a8
push ebx
call sub.kernel32.dll_GetProcAddress_1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x55c3e9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55c64e
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.0040ef34
xor edx, edx
mov eax, 0xf
call fcn.0055b560
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x6b4], 0x128
lea eax, [ebp - 0x6b8]
mov ecx, 0x55c6c8
mov edx, dword [ebp - 0x18]
call fcn.00404fa4
mov eax, dword [ebp - 0x6b8]
lea ecx, [ebp - 0x58c]
mov edx, 0x10
call fcn.0040a960
test eax, eax
jne 0x55c63a
xor edx, edx
push ebp
push 0x55c633
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x580]
mov edx, 0x55c6d4
call fcn.004050a4
je 0x55c607
mov eax, dword [ebp - 0x580]
mov edx, 0x55c6e0
call fcn.004050a4
je 0x55c607
mov eax, dword [0x727134]
cmp byte [eax + 0x369], 0
je 0x55c498
call fcn.0040470c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55c64e
push 0
push 0
push 3
push 0
push 1
push 0
lea eax, [ebp - 0x6bc]
mov ecx, dword [ebp - 0x580]
mov edx, dword [ebp - 0x18]
call fcn.00404fa4
mov eax, dword [ebp - 0x6bc]
call fcn.00405158
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
je 0x55c5e0
xor edx, edx
push ebp
push 0x55c5d9
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x430]
xor ecx, ecx
mov edx, 0x414
call fcn.00403734
xor eax, eax
mov dword [ebp - 0x434], eax
push 0x2f
push 0x831
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 8]
push eax
call dword [ebp - 0xc]
test eax, eax
jne 0x55c5c2
cmp dword [ebp - 0x434], 0
jbe 0x55c5c2
xor eax, eax
push ebp
push 0x55c5bb
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x6b4]
mov eax, dword [ebp - 0x1c]
call fcn.0055b580
test eax, eax
je 0x55c5a4
jmp 0x55c592
mov esi, 0x105
lea ebx, [ebp - 0x430]
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x6ac]
jne 0x55c58c
mov eax, dword [ebp - 0x6ac]
push eax
push 0xffffffffffffffff
push 1
call sub.kernel32.dll_OpenProcess
mov edi, eax
test edi, edi
je 0x55c58c
mov eax, dword [ebp - 0x6ac]
push eax
push edi
call sub.kernel32.dll_TerminateProcess
push edi
call sub.kernel32.dll_CloseHandle_1
add ebx, 4
dec esi
jne 0x55c559
lea edx, [ebp - 0x6b4]
mov eax, dword [ebp - 0x1c]
call fcn.0055b5a0
test eax, eax
jne 0x55c54e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55c5c2
mov eax, dword [ebp - 0x1c]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55c5e0
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
mov eax, dword [ebp - 4]
call fcn.00546690
lea eax, [ebp - 0x6c0]
mov ecx, dword [ebp - 0x580]
mov edx, dword [ebp - 0x18]
call fcn.00404fa4
mov eax, dword [ebp - 0x6c0]
call fcn.0055c350
lea eax, [ebp - 0x58c]
call fcn.0040a9b0
test eax, eax
je 0x55c44c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55c63a
lea eax, [ebp - 0x58c]
call fcn.0040a9d4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x55c64e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x55c694
lea eax, [ebp - 0x6c0]
mov edx, 3
call fcn.00404cac
lea eax, [ebp - 0x58c]
mov edx, dword [0x408ba8]
call fcn.00405a2c
lea eax, [ebp - 0x18]
call fcn.00404c88
lea eax, [ebp - 4]
call fcn.00404c88
ret