Function at 0x446d68
Capabilities:
Enumerate gui resources
Get number of processors
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4739d1
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x49b7f8]
xor eax, esp
mov dword [esp + 0x240], eax
push ebx
push esi
push edi
mov eax, dword [0x49b7f8]
xor eax, esp
push eax
lea eax, [esp + 0x258]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
push ebx
push 0
push 0x100001
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [esp + 0x30], esi
and dword [esp + 0x260], 0
test esi, esi
je 0x446fc4
lea eax, [esp + 0x44]
push eax
push 0x446d0b
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x50], 0
call dword [sym.imp.USER32.dll_EnumWindows]
xor bl, bl
cmp byte [esp + 0x48], bl
je 0x446f9a
xor eax, eax
inc eax
mov byte [edi + 0x58], al
mov eax, dword [edi + 8]
imul eax, eax, 0xa
and dword [esp + 0x1c], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
test eax, eax
jle 0x446e60
push 0x64
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [edi + 0x10]
cmp eax, 0x102
movzx ebx, bl
push 1
pop eax
cmovne ebx, eax
mov eax, dword [esp + 0x1c]
dec dword [esp + 0x18]
inc eax
mov dword [esp + 0x1c], eax
test ecx, ecx
je 0x446ed4
push dword [esp + 0x10]
and ecx, 0xfffffffe
push eax
lea eax, [edi + 0x18]
push eax
call dword [ecx + 4]
add esp, 0xc
test al, al
je 0x446e9f
mov eax, dword [esp + 0x18]
test bl, bl
je 0x446e0f
test bl, bl
jne 0x446fbd
mov ecx, dword [edi + 0x38]
test ecx, ecx
jne 0x446f05
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x18], str.call_to_empty_boost::function
call fcn.0044f8e7
mov dword [esp + 0x20], vtable.boost::bad_function_call.0
mov byte [esp + 0x260], 2
lea ecx, [esp + 0x20]
jmp 0x446f00
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x14], str.InstallerError
call fcn.0044f8e7
mov dword [esp + 0x20], vtable.installer_error_exception.0
mov dword [esp + 0x2c], 7
push 0x48ee34
lea eax, [esp + 0x24]
push eax
call fcn.00454ac3
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x18], str.call_to_empty_boost::function
call fcn.0044f8e7
mov dword [esp + 0x20], vtable.boost::bad_function_call.0
xor eax, eax
inc eax
mov byte [esp + 0x260], al
lea ecx, [esp + 0x20]
call fcn.00438589
lea eax, [edi + 0x40]
and ecx, 0xfffffffe
push eax
call dword [ecx + 4]
push 8
mov edi, eax
call fcn.004501aa
pop ecx
pop ecx
mov dword [esp + 0x10], eax
mov byte [esp + 0x260], 3
test eax, eax
je 0x446f3c
lea ecx, [esp + 0x4a]
push ecx
push edi
push ecx
mov ecx, eax
call fcn.004480bc
mov edi, eax
jmp 0x446f3e
xor edi, edi
mov dword [esp + 0x18], edi
mov byte [esp + 0x260], 4
test edi, edi
je 0x446f80
mov eax, dword [edi]
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
call dword [eax + 4]
test al, al
jne 0x446fea
push 0x3e8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
movzx ebx, bl
push 1
pop eax
cmovne ebx, eax
test bl, bl
je 0x446f4e
xor ecx, ecx
inc ecx
mov byte [esp + 0x260], 0
test edi, edi
je 0x446f96
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax]
test bl, bl
jne 0x446fbd
lea eax, [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x446fb4
cmp dword [esp + 0x14], 0x103
jne 0x446fbd
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x258]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x240]
xor ecx, esp
call fcn.0044f834
mov esp, ebp
pop ebp
ret 4
xor ecx, ecx
inc ecx
cmp dword [esp + 0x10], ecx
je 0x446f83
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x20], str.Cancelled
call fcn.0044f8e7
xor eax, eax
inc eax
mov byte [esp + 0x40], al
mov dword [esp + 0x34], vtable.cancel_exception.0
push 0x48eea4
lea eax, [esp + 0x38]
jmp 0x446ece