Function at 0x42a4f9
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x268
push ebx
push esi
push edi
cmp dword [ebp + 0x10], 0
je 0x42a520
push str.Jan_11_2000_11:44:51
mov eax, dword [ebp + 0x10]
push eax
call fcn.0042a7d0
add esp, 8
test eax, eax
je 0x42a597
mov ecx, dword [ebp + 8]
push ecx
call fcn.00429f20
add esp, 4
cmp dword [ebp + 0x10], 0
je 0x42a556
mov edx, dword [ebp + 0x10]
push edx
push str.Jan_11_2000_11:44:51
push 0x4585a0
push str._s:_mismatch_during_fork:_an_executable_with_build_date___s_ran__instead_of_an_executable_with_build_date___s
lea eax, [ebp - 0x268]
push eax
call fcn.0042d370
add esp, 0x14
jmp 0x42a574
push str.Jan_11_2000_11:44:51
push 0x4585a0
push str._s:_mismatch_during_fork:_an_executable_with_build_date___s_ran__instead_of_an_old_executable
lea ecx, [ebp - 0x268]
push ecx
call fcn.0042d370
add esp, 0x10
push 0x10030
push str.Fork_Mismatch_Error
lea edx, [ebp - 0x268]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
call fcn.0042c380
add esp, 4
mov eax, dword [ebp + 0xc]
push eax
call fcn.004343d0
add esp, 4
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x42a5c8
push str.Bad_map_file_handle_n
push 0x4498f0
call fcn.0042a920
add esp, 8
push 1
call fcn.0042c380
add esp, 4
push 0
push 0
push 0
push 0
push 0xf001f
mov ecx, dword [ebp - 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFileEx]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x42a604
push str.Error_mapping_file_n
push 0x4498f0
call fcn.0042a920
add esp, 8
push 1
call fcn.0042c380
add esp, 4
push 0x1000
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 8], eax
call fcn.004362d5
mov esi, eax
add esi, 0xc
call fcn.004362d0
sub esi, eax
mov dword [ebp - 0x30], esi
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 8]
push ecx
call fcn.0042a7a1
add esp, 4
call fcn.004362d0
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x1000
sub ecx, dword [ebp - 0x30]
push ecx
call fcn.00431110
add esp, 0xc
mov edx, dword [ebp - 8]
add edx, 0xff4
push edx
mov eax, dword [ebp - 8]
add eax, 0x1000
sub eax, dword [ebp - 0x30]
push eax
call fcn.004362d8
add esp, 8
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x18
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
cmp ecx, dword [0x4582dc]
je 0x42a6c6
mov edx, dword [0x4582dc]
push edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push ecx
push str.Forked_child_base_mismatch:__x__x__n
push 0x4498f0
call fcn.0042a920
add esp, 0x10
push 0x1234
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x28], 0
jmp 0x42a6d8
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 3
jge 0x42a769
cmp dword [ebp - 0x28], 0
jne 0x42a733
push 0x1c
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x38]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
push 0x4000
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 4
push 0x1000
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + eax*8 + 4]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + eax*8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + eax*8 + 4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x38]
mov eax, dword [edx + ecx*8]
push eax
call fcn.00431110
add esp, 0xc
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
add eax, dword [edx + ecx*8 + 4]
mov dword [ebp - 4], eax
jmp 0x42a6cf
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, dword [ebp - 0x34]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x4583e4], 0
mov word [0x44f9ee], fs
push 1
push 0x44f9c8
call fcn.00429bd9
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret