Function at 0x40ed67
Capabilities:
Terminate process

Disassembly:
mov eax, 0x416032
call fcn.00414110
sub esp, 0x10
push ebx
push esi
xor ebx, ebx
cmp byte [0x422dec], bl
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x40eda7
push 1
push 0x40ed16
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
jne 0x40eda7
call edi
push eax
push str.Could_not_install_console_handler:_SetConsoleCtrlHandler_failed__error__d__n
call fcn.004110c4
pop ecx
pop ecx
call fcn.00413d14
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call esi
push eax
push ebx
push 0x510
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, ebx
mov dword [0x422dc0], eax
jne 0x40ede1
call edi
mov edi, eax
call esi
push edi
push eax
push str.Could_not_open_process__d:_error__d_n
call fcn.00411378
add esp, 0xc
jmp 0x40ee2f
cmp dword [0x422cec], ebx
mov dword [ebp - 0x10], ebx
jne 0x40ee0a
push 0xd9
push 0x41b0a4
push 0x41b0cc
call fcn.00411378
push 1
call fcn.0040aff2
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push 0x28
push dword [0x422dc0]
call dword [0x422cec]
test eax, eax
jne 0x40ee37
call edi
push eax
push str.Could_not_open_process_token:_error__d_n
call fcn.00411378
pop ecx
pop ecx
push 1
call dword [sym.imp.MSVCR71.dll_exit]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], ebx
call fcn.0040b197
push 0x41b110
push dword [ebp - 0x10]
mov dword [0x422db8], eax
call fcn.0040ea50
cmp al, bl
pop ecx
pop ecx
mov byte [0x422dbc], al
jne 0x40ee77
call edi
push eax
push str.SeLockMemoryPrivilege
push 0x41b140
call fcn.004110c4
add esp, 0xc
push 0x41b168
push dword [ebp - 0x10]
call fcn.0040ea50
cmp al, bl
pop ecx
pop ecx
mov byte [0x422dbd], al
jne 0x40eead
call edi
push eax
push str.SeIncreaseBasePriorityPrivilege
push str.Could_not_get__s_privilege:_error__d_n
call fcn.004110c4
mov al, byte [0x422dbd]
add esp, 0xc
cmp al, bl
je 0x40eec4
cmp dword [0x422cdc], ebx
je 0x40eec4
cmp dword [0x422ce0], ebx
mov byte [0x422da8], 1
jne 0x40eeca
mov byte [0x422da8], bl
cmp byte [0x422dbc], bl
je 0x40eedf
cmp al, bl
je 0x40eedf
mov byte [0x422da9], 1
jmp 0x40eef0
push str.Lock_memory_requests_will_be_ignored:_Insufficient_privileges_n
mov byte [0x422da9], bl
call fcn.004110c4
pop ecx
cmp dword [0x422cd0], ebx
setne al
cmp dword [0x422cc4], ebx
mov byte [0x422dab], al
setne al
cmp dword [0x422d18], ebx
mov byte [0x422dac], al
je 0x40ef23
cmp dword [0x422cfc], ebx
mov byte [0x422dad], 1
jne 0x40ef29
mov byte [0x422dad], bl
mov al, byte [0x422dec]
cmp al, bl
je 0x40ef51
cmp dword [0x422d0c], ebx
je 0x40ef51
cmp dword [0x422d10], ebx
je 0x40ef51
cmp dword [0x422d14], ebx
mov byte [0x422dae], 1
jne 0x40ef57
mov byte [0x422dae], bl
cmp al, bl
je 0x40ef79
mov eax, dword [0x422c34]
cmp eax, 5
ja 0x40ef70
jne 0x40ef79
cmp dword [0x422c38], 1
jb 0x40ef79
mov byte [0x422daf], 1
jmp 0x40ef7f
mov byte [0x422daf], bl
cmp byte [0x422da8], bl
je 0x40efb8
lea eax, [ebp - 0x1c]
push eax
call fcn.0040b062
lea eax, [ebp - 0x1c]
push eax
push str.Initial
call fcn.0040afd5
mov eax, dword [ebp - 0x18]
push 0x422d70
mov dword [0x422d74], eax
mov dword [0x422d70], eax
call fcn.0040b0ce
add esp, 0x10
push 0x40
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
test eax, eax
jne 0x40efda
call edi
push eax
push str.Could_not_enter_IDLE_priority_class:_SetPriorityClass_failed__error__d__n
call fcn.004110c4
pop ecx
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
push ebx
push ebx
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push ebx
mov dword [0x422d7c], eax
call esi
mov dword [0x422d80], eax
call fcn.00401e72
test al, al
pop edi
pop esi
pop ebx
jne 0x40f015
push str.Unable_to_start_JQS_API_Server_thread_n
call fcn.00411378
push 1
call fcn.0040aff2
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0040ae02
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret