Function at 0x405aa0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 4], ecx
push 0x10
push 0
push 0x47a4b4
call fcn.00409d20
add esp, 0xc
mov dword [ebp - 0x18], str.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
mov dword [ebp - 0x1c], str.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
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.00404920
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x405ae4
xor al, al
jmp 0x405be0
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x405b09
xor al, al
jmp 0x405be0
mov ecx, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.004047e0
test eax, eax
jne 0x405b20
xor al, al
jmp 0x405be0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x30]
call edx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x405b4b
push 0
mov eax, dword [0x47a4b4]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x405be0
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov ecx, dword [ebp - 4]
call fcn.00406070
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.004072c0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x405b8a
push 0
mov ecx, dword [0x47a4b4]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x405be0
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x34]
call eax
movzx ecx, al
test ecx, ecx
jne 0x405bb6
xor al, al
jmp 0x405be0
mov edx, dword [ebp - 0xc]
push edx
mov ecx, dword [ebp - 4]
call fcn.00406440
movzx eax, al
test eax, eax
jne 0x405bde
push 0
mov ecx, dword [0x47a4b4]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x405be0
mov al, 1
mov esp, ebp
pop ebp
ret 8