Function at 0x433030
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xe74
mov eax, dword [0x4e2204]
xor eax, esp
mov dword [esp + 0xe70], eax
push ebx
push esi
mov esi, ecx
push edi
push esi
mov dword [esp + 0x3c], esi
call fcn.00432780
lea eax, [esp + 0x10]
push eax
push str.Preferences
lea ecx, [esp + 0x84]
push ecx
xor ebx, ebx
mov ecx, str.DisableUpdate
mov dword [esp + 0x1c], ebx
call fcn.0041e8c0
lea eax, [esp + 0x7c]
mov dword [esp + 0x98], ebx
mov byte [esp + 0x9c], 1
call fcn.00402890
test eax, eax
je 0x4330a9
cmp byte [esp + 0x9c], bl
je 0x4330a9
lea eax, [esp + 0x7c]
call fcn.004029a0
mov edx, dword [esp + 0x88]
mov al, dl
lea edi, [esp + 0x7c]
mov dword [esp + 0x94], edx
mov byte [esp + 0x17], al
call fcn.00402a90
mov eax, dword [esi + 0x28]
add esi, 0x28
cmp eax, ebx
je 0x433ccb
add eax, 4
cmp eax, ebx
je 0x433ccb
cmp byte [eax], bl
je 0x433ccb
lea ecx, [esp + 0x10]
push ecx
push str.update
lea edx, [esp + 0xa8]
push edx
mov ecx, str.lastmod
mov dword [esp + 0x1c], ebx
call fcn.0041e6a0
lea eax, [esp + 0x10]
push eax
push str.update
lea ecx, [esp + 0x6c]
push ecx
mov ecx, str.lastwebmod
mov dword [esp + 0x1c], ebx
call fcn.0041e6a0
lea edx, [esp + 0x10]
push edx
push str.update
lea eax, [esp + 0x84]
push eax
mov ecx, str.lastreadme
mov dword [esp + 0x1c], ebx
call fcn.0041e6a0
lea ecx, [esp + 0x10]
push ecx
push str.update
lea edx, [esp + 0xd8]
push edx
mov ecx, str.lastreadme2
mov dword [esp + 0x1c], ebx
call fcn.0041e6a0
lea eax, [esp + 0x10]
push eax
push str.update
lea ecx, [esp + 0xc0]
push ecx
mov ecx, str.lastnews
mov dword [esp + 0x1c], ebx
call fcn.0041e6a0
lea edx, [esp + 0x10]
push edx
push str.update
lea eax, [esp + 0xf0]
push eax
mov ecx, str.lastnews2
mov dword [esp + 0x1c], ebx
call fcn.0041e6a0
mov eax, dword [esi]
cmp eax, ebx
jne 0x4331ae
xor ecx, ecx
jmp 0x4331c1
movzx ecx, byte [eax]
cmp ecx, 1
jbe 0x4331bc
push esi
call fcn.0043c230
mov ecx, dword [esi]
add ecx, 4
mov dword [esp + 0x1c], ebx
cmp ecx, ebx
je 0x4331e5
mov eax, ecx
lea esi, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4331d0
sub eax, esi
push eax
push ecx
lea edx, [esp + 0x24]
push edx
call fcn.0043c500
lea eax, [esp + 0x10]
push eax
push str.Preferences
lea ecx, [esp + 0x48]
push ecx
mov ecx, str.updatect
mov dword [esp + 0x1c], ebx
call fcn.0041e8c0
lea eax, [esp + 0x40]
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x60], 1
call fcn.00402890
test eax, eax
je 0x433227
cmp byte [esp + 0x60], bl
je 0x433227
lea eax, [esp + 0x40]
call fcn.004029a0
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x58], eax
inc eax
lea edx, [esp + 0x10]
mov dword [esp + 0x10], eax
push edx
lea eax, [esp + 0x44]
call fcn.004027a0
lea eax, [esp + 0x40]
call fcn.00402890
test eax, eax
je 0x43325e
cmp byte [esp + 0x60], bl
je 0x43325e
lea eax, [esp + 0x40]
call fcn.004029a0
mov ecx, dword [esp + 0x4c]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
mov dword [esp + 0x58], ecx
sub ecx, eax
cmp ecx, 4
sete cl
movzx edx, cl
mov ecx, dword [esp + 0x38]
push edx
push ebx
lea eax, [esp + 0x38]
push eax
push ecx
call fcn.00431d10
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x43329e
add eax, 4
jmp 0x4332a0
xor eax, eax
push eax
lea eax, [esp + 0x20]
call fcn.0043c300
lea edx, [esp + 0x1c]
push edx
call fcn.004326d0
mov dword [esp + 0x30], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x14], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add esp, 4
mov eax, dword [esp + 0x1c]
xor esi, esi
cmp eax, esi
je 0x4332e0
add eax, 4
jmp 0x4332e2
xor eax, eax
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x20]
call fcn.00461240
mov eax, dword [esp + 0x554]
add esp, 4
xor eax, eax
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x554]
push edx
lea edi, [esp + 0x54c]
mov dword [esp + 0x544], esi
mov dword [esp + 0x54c], esi
mov dword [esp + 0x550], esi
mov dword [esp + 0x554], eax
mov dword [esp + 0x958], esi
mov byte [esp + 0x558], al
mov dword [esp + 0x95c], ecx
call fcn.00401250
mov eax, dword [esp + 0x548]
cmp eax, esi
je 0x43335c
add eax, 4
jmp 0x43335e
xor eax, eax
mov dword [esp + 0x544], eax
cmp eax, esi
je 0x433376
lea eax, [esp + 0x540]
push eax
call fcn.0046ecb0
lea ecx, [esp + 0x24]
push ecx
push ecx
push str.version
lea edx, [esp + 0x54c]
push edx
lea esi, [esp + 0x134]
call fcn.00403f90
add esp, 4
mov ecx, eax
call fcn.00403f20
lea eax, [esp + 0x24]
push eax
lea edi, [esp + 0x1c]
call fcn.00401250
mov esi, dword [esp + 0x24]
test esi, esi
je 0x4333de
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4333cd
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4333d6
test eax, eax
jne 0x4333d6
call fcn.0045f5a0
mov dword [esp + 0x24], 0
lea ecx, [esp + 0x124]
push ecx
call fcn.00404120
lea edx, [esp + 0x3c]
push edx
push ecx
push str.message
lea eax, [esp + 0x54c]
push eax
lea esi, [esp + 0x134]
call fcn.00403f90
add esp, 4
mov ecx, eax
call fcn.00403f20
lea ecx, [esp + 0x3c]
push ecx
lea edi, [esp + 0x2c]
call fcn.00401250
mov esi, dword [esp + 0x3c]
test esi, esi
je 0x433453
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433442
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x43344b
test eax, eax
jne 0x43344b
call fcn.0045f5a0
mov dword [esp + 0x3c], 0
lea edx, [esp + 0x124]
push edx
call fcn.00404120
lea eax, [esp + 0x34]
push eax
push ecx
push str.update
lea ecx, [esp + 0x54c]
push ecx
lea esi, [esp + 0x134]
call fcn.00403f90
add esp, 4
mov ecx, eax
call fcn.00403f20
lea edx, [esp + 0x34]
push edx
lea edi, [esp + 0x24]
call fcn.00401250
mov esi, dword [esp + 0x34]
test esi, esi
je 0x4334c8
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4334b7
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4334c0
test eax, eax
jne 0x4334c0
call fcn.0045f5a0
mov dword [esp + 0x34], 0
lea eax, [esp + 0x124]
push eax
call fcn.00404120
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4334ed
lea eax, [esi + 4]
test eax, eax
je 0x4334ed
cmp byte [eax], 0
jne 0x433601
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
mov ecx, dword [esp + 0x38]
cmp byte [ecx + 4], 0
jne 0x433621
push 0x3e8
call edi
inc esi
cmp esi, 0x3c
jb 0x4334f5
mov eax, dword [esp + 0x954]
xor edi, edi
cmp eax, edi
je 0x43354e
push eax
mov esi, eax
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433537
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433547
cmp eax, edi
jne 0x433547
mov esi, dword [esp + 0x954]
call fcn.0045f5a0
mov dword [esp + 0x954], edi
mov esi, dword [esp + 0x54c]
cmp esi, edi
je 0x43355e
call fcn.0045f5a0
mov eax, dword [esp + 0x548]
and dword [esp + 0x550], 1
mov dword [esp + 0x54c], edi
cmp eax, edi
je 0x4335a2
push eax
mov esi, eax
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433592
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4335a2
cmp eax, edi
jne 0x4335a2
mov esi, dword [esp + 0x548]
call fcn.0045f5a0
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 5
mov dword [esp + 0x10], eax
jl 0x4332d1
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x18]
test esi, esi
je 0x4335d0
lea ebx, [edi + 4]
test ebx, ebx
je 0x4335d0
cmp byte [ebx], 0
jne 0x433870
mov esi, dword [esp + 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test esi, esi
je 0x43373e
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433735
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x43373e
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x544]
call fcn.00432df0
lea eax, [esp + 0x540]
push eax
call fcn.00404120
jmp 0x4335b8
lea ecx, [esp + 0x540]
push ecx
call fcn.00404120
mov esi, dword [esp + 0x28]
test esi, esi
je 0x433659
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433650
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push esi
call edi
jmp 0x43365f
test eax, eax
jne 0x433659
call fcn.0045f5a0
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov esi, dword [esp + 0x20]
test esi, esi
je 0x433684
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x43367b
push esi
call edi
jmp 0x433684
test eax, eax
jne 0x433684
call fcn.0045f5a0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4336a9
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4336a0
push esi
call edi
jmp 0x4336a9
test eax, eax
jne 0x4336a9
call fcn.0045f5a0
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x4336ce
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4336c5
push esi
call edi
jmp 0x4336ce
test eax, eax
jne 0x4336ce
call fcn.0045f5a0
mov esi, dword [esp + 0x30]
test esi, esi
je 0x4336f3
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4336ea
push esi
call edi
jmp 0x4336f3
test eax, eax
jne 0x4336f3
call fcn.0045f5a0
lea edi, [esp + 0x40]
call fcn.00402a90
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x433c89
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433723
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433c89
test eax, eax
jne 0x433c89
call fcn.0045f5a0
jmp 0x433c89
test eax, eax
jne 0x43373e
call fcn.0045f5a0
mov esi, dword [esp + 0x20]
test esi, esi
je 0x433767
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x43375e
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433767
test eax, eax
jne 0x433767
call fcn.0045f5a0
test edi, edi
je 0x43378e
push edi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433783
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x43378e
test eax, eax
jne 0x43378e
mov esi, edi
call fcn.0045f5a0
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x4337b7
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4337ae
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4337b7
test eax, eax
jne 0x4337b7
call fcn.0045f5a0
mov esi, dword [esp + 0x30]
test esi, esi
je 0x4337e0
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4337d7
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4337e0
test eax, eax
jne 0x4337e0
call fcn.0045f5a0
lea edi, [esp + 0x40]
call fcn.00402a90
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x433816
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x43380d
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433816
test eax, eax
jne 0x433816
call fcn.0045f5a0
lea edi, [esp + 0xe8]
call fcn.004026d0
lea edi, [esp + 0xb8]
call fcn.004026d0
lea edi, [esp + 0xd0]
call fcn.004026d0
lea edi, [esp + 0x7c]
call fcn.004026d0
lea edi, [esp + 0x64]
call fcn.004026d0
lea edi, [esp + 0xa0]
call fcn.004026d0
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xe70]
xor ecx, esp
call fcn.0049ceb0
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x20]
test edi, edi
je 0x433888
lea eax, [edi + 4]
test eax, eax
je 0x433888
cmp byte [eax], 0
jne 0x433982
mov esi, dword [esp + 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test esi, esi
je 0x4338b7
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4338ae
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4338b7
test eax, eax
jne 0x4338b7
call fcn.0045f5a0
test edi, edi
je 0x4338de
push edi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4338d3
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4338de
test eax, eax
jne 0x4338de
mov esi, edi
call fcn.0045f5a0
mov esi, dword [esp + 0x18]
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x4338fa
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433903
test eax, eax
jne 0x433903
call fcn.0045f5a0
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x43392c
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x433923
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x43392c
test eax, eax
jne 0x43392c
call fcn.0045f5a0
mov esi, dword [esp + 0x30]
test esi, esi
je 0x433955
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jl 0x43394c
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433955
test eax, eax
jne 0x433955
call fcn.0045f5a0
lea edi, [esp + 0x40]
call fcn.00402a90
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x433816
push esi
call ebx
and eax, 0xff
cmp eax, 0x80
jge 0x433804
jmp 0x43380d
lea edx, [esp + 0x10]
lea ecx, [esp + 0xa0]
call fcn.004024a0
mov esi, dword [esp + 0x10]
mov dword [esp + 0x24], esi
test esi, esi
je 0x4339e7
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push esi
call edi
and eax, 0xff
cmp eax, 0x80
jl 0x4339ba
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x80
jl 0x4339d2
push esi
call edi
jmp 0x4339db
test eax, eax
jne 0x4339db
call fcn.0045f5a0
lea eax, [esi + 4]
test eax, eax
je 0x4339e7
cmp byte [eax], 0
jne 0x433a11
lea edx, [esp + 0x10]
lea ecx, [esp + 0x64]
call fcn.004024a0
lea edx, [esp + 0x10]
push edx
lea edi, [esp + 0x28]
call fcn.00401250
lea ecx, [esp + 0x10]
call fcn.00401420
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
lea eax, [esp + 0x18]
lea esi, [esp + 0xa0]
call fcn.004023f0
mov esi, dword [esp + 0x38]
add esi, 0x30
mov eax, esi
lea ecx, [esp + 0x18]
call fcn.00401360
test al, al
jne 0x433c41
call fcn.00448e20
test al, al
jne 0x433c41
mov eax, dword [esi]
test eax, eax
je 0x433a53
add eax, 4
jmp 0x433a55
xor eax, eax
mov ecx, ebx
call fcn.00431530
test eax, eax
jl 0x433c41
lea edx, [esp + 0x34]
lea ecx, [esp + 0x64]
call fcn.004024a0
mov esi, dword [esp + 0x34]
mov dword [esp + 0x10], esi
test esi, esi
je 0x433a93
push esi
call edi
and eax, 0xff
cmp eax, 0x80
jl 0x433a93
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
call fcn.00401360
lea ecx, [esp + 0x10]
mov bl, al
call fcn.00401420
lea ecx, [esp + 0x34]
call fcn.00401420
test bl, bl
jne 0x433c41
cmp byte [esp + 0x17], bl
je 0x433b24
mov eax, dword [esp + 0x28]
test eax, eax
je 0x433acf
lea edi, [eax + 4]
jmp 0x433ad1
xor edi, edi
lea esi, [esp + 0x100]
call fcn.00431620
push 0
mov ecx, esi
call fcn.0046f160
cmp byte [esp + 0x121], 0
je 0x433b0e
lea eax, [esp + 0x18]
lea esi, [esp + 0x64]
call fcn.004023f0
lea edi, [esp + 0x100]
call fcn.00431720
jmp 0x433c41
cmp byte [esp + 0x120], 0
lea edi, [esp + 0x100]
je 0x433b04
call fcn.00431720
lea eax, [esp + 0xd6e]
push eax
lea ecx, [esp + 0xc71]
push ecx
lea edx, [esp + 0xb74]
push edx
lea eax, [esp + 0xb74]
push eax
push str.update_setup.exe
mov dword [esp + 0xe84], 0
mov byte [esp + 0x974], 0
mov byte [esp + 0xb7c], 0
mov byte [esp + 0xb80], 0
mov byte [esp + 0xc81], 0
mov byte [esp + 0xd82], 0
call fcn.004a055c
add esp, 0x14
lea ecx, [esp + 0x960]
push 0
push ecx
call fcn.00447920
add esp, 8
lea ecx, [esp + 0x960]
call fcn.0045fdc0
lea esi, [esp + 0x960]
call fcn.0045fa90
push eax
call fcn.0049fc6f
add esp, 4
lea eax, [esp + 0x20]
call fcn.00461160
lea edx, [esp + 0x20]
push edx
call fcn.00461110
add esp, 4
test eax, eax
jne 0x433c35
mov byte [esp + 0x17], al
lea eax, [esp + 0x17]
push eax
mov dword [esp + 0x14], str.F.lux_Software_LLC
call fcn.0045fa90
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.004794e0
cmp byte [esp + 0x17], 0
jne 0x433ce2
lea edx, [esp + 0x17]
push edx
mov dword [esp + 0x14], str.Michael_Herf
call fcn.0045fa90
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.004794e0
cmp byte [esp + 0x17], 0
jne 0x433ce2
call fcn.0045fa90
push eax
call fcn.0049fc6f
add esp, 4
lea ecx, [esp + 0x960]
call fcn.00403870
lea ecx, [esp + 0x24]
call fcn.00401420
lea ecx, [esp + 0x28]
call fcn.00401420
lea ecx, [esp + 0x20]
call fcn.00401420
lea ecx, [esp + 0x18]
call fcn.00401420
lea ecx, [esp + 0x2c]
call fcn.00401420
lea ecx, [esp + 0x30]
call fcn.00401420
lea edi, [esp + 0x40]
call fcn.00402a90
lea ecx, [esp + 0x1c]
call fcn.00401420
lea edi, [esp + 0xe8]
call fcn.004026d0
lea edi, [esp + 0xb8]
call fcn.004026d0
lea edi, [esp + 0xd0]
call fcn.004026d0
lea edi, [esp + 0x7c]
call fcn.004026d0
lea edi, [esp + 0x64]
call fcn.004026d0
lea edi, [esp + 0xa0]
call fcn.004026d0
mov ecx, dword [esp + 0xe7c]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.0049ceb0
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x18]
lea esi, [esp + 0x64]
call fcn.004023f0
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x48]
test eax, eax
je 0x433d01
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea esi, [esp + 0x960]
call fcn.0045fa90
push 5
push 0
push 0x4cf868
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]