Function at 0x480fa0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x480fa8
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404c20
xor eax, eax
push ebp
push 0x481345
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
cmp dword [ebp - 4], 0
je 0x481308
lea eax, [ebp - 4]
push eax
push 0x481360
push 1
lea eax, [ebp - 0x30]
push eax
call fcn.0047a1b0
mov eax, dword [ebp - 0x30]
mov edx, 0x48136c
call fcn.00404b7c
jne 0x481308
xor eax, eax
push ebp
push 0x481036
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
push eax
push 0x481360
push 1
lea eax, [ebp - 0x34]
push eax
call fcn.0047a1b0
mov eax, dword [ebp - 0x34]
call fcn.00408e64
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48107f
lea eax, [ebp - 4]
push eax
push 0x481360
push 1
lea eax, [ebp - 0xc]
push eax
call fcn.0047a1b0
lea eax, [ebp - 4]
push eax
push 0x481360
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.0047a1b0
lea eax, [ebp - 4]
push eax
push 0x481360
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.0047a1b0
cmp dword [ebp - 0xc], 0
je 0x481308
push ebx
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov ebx, eax
test ebx, ebx
je 0x48112d
push 0
push ebx
call sub.kernel32.dll_TerminateProcess
test eax, eax
jne 0x4810fd
mov eax, dword [0x484b34]
mov eax, dword [eax]
mov edx, dword [eax + 0x30]
mov eax, 0x4813a8
call fcn.0047a830
jmp 0x481308
push 0x1d4c0
push ebx
call sub.kernel32.dll_WaitForSingleObject
cmp eax, 0xffffffff
je 0x481114
cmp eax, 0x102
jne 0x48112d
mov eax, dword [0x484b34]
mov eax, dword [eax]
mov edx, dword [eax + 0x30]
mov eax, 0x4813a8
call fcn.0047a830
jmp 0x481308
mov byte [ebp - 0x29], 0
lea eax, [ebp - 0x24]
call fcn.00480e88
mov ecx, dword [0x484b34]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x480bb4]
call fcn.00452504
mov dword [0x485f6c], eax
mov dl, 1
mov eax, dword [0x416968]
call fcn.0040396c
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0x481301
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0xc]
call fcn.00404808
jmp 0x4811ac
lea eax, [ebp - 0x20]
push eax
push 0x4813d8
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.0047a1b0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
call fcn.00404b7c
jne 0x4811ac
mov byte [ebp - 0x29], 1
cmp dword [ebp - 0x20], 0
jne 0x48117c
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [0x485f6c]
mov dword [edx + 0x330], eax
mov eax, dword [0x485f6c]
add eax, 0x334
mov edx, dword [ebp - 0x10]
call fcn.004047c4
mov eax, dword [0x485f6c]
call fcn.004813dc
mov eax, dword [0x485f6c]
call fcn.0045685c
mov eax, dword [0x484b34]
mov eax, dword [eax]
call fcn.00459c48
mov byte [ebp - 0x19], 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x48129a
inc ebx
xor esi, esi
mov eax, dword [0x485f6c]
xor edx, edx
mov dword [eax + 0x328], edx
mov eax, dword [0x485f6c]
inc dword [eax + 0x32c]
mov eax, dword [0x485f6c]
call fcn.00481cdc
mov byte [ebp - 0x1a], 0
lea ecx, [ebp - 0x3c]
mov edx, esi
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c]
lea ecx, [ebp - 0x1a]
mov eax, dword [0x485f6c]
call fcn.00481580
test al, al
jne 0x481286
cmp byte [ebp - 0x29], 0
je 0x481286
mov eax, dword [0x485f6c]
call fcn.00481eb4
call fcn.00479de0
test al, al
je 0x48127c
mov eax, dword [0x485f6c]
call fcn.00482308
call fcn.004041d4
jmp 0x481308
cmp byte [ebp - 0x1a], 0
je 0x481292
mov al, byte [ebp - 0x1a]
mov byte [ebp - 0x19], al
inc esi
dec ebx
jne 0x481212
mov eax, dword [0x485f6c]
call fcn.00482028
call fcn.00479de0
test al, al
je 0x4812b7
mov eax, dword [0x485f6c]
call fcn.00482308
mov eax, dword [0x485f6c]
call fcn.004566b4
cmp byte [ebp - 0x19], 0
jne 0x4812dd
lea eax, [ebp - 0x40]
call fcn.0047a8bc
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.0047a0dc
mov byte [ebp - 5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x481308
lea eax, [ebp - 0x18]
call fcn.0040e3f4
mov eax, 0x485f6c
call fcn.0040e3f4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48134c
lea eax, [ebp - 0x40]
mov edx, 5
call fcn.00404794
lea eax, [ebp - 0x28]
mov edx, 3
call fcn.00404794
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404794
lea eax, [ebp - 4]
call fcn.00404770
ret