Function at 0x10179e8
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x418
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x1c]
xor ebx, ebx
push dword [ebp + 0x18]
mov dword [esi], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
call fcn.0100fa69
test al, al
je 0x1017ca1
mov ecx, dword [ebp + 0xc]
push 0x1004b4c
push 0x104
lea edx, [ebp - 0x210]
call fcn.0101a1c0
test eax, eax
je 0x1017c96
lea eax, [ebp - 0x210]
push 0x5c
push eax
call fcn.01018aad
pop ecx
pop ecx
test eax, eax
je 0x1017c96
lea eax, [ebp - 0x210]
push eax
call fcn.01013b1b
push eax
lea ecx, [ebp + 8]
call fcn.01019f50
cmp dword [ebp + 8], ebx
jne 0x1017a92
lea eax, [ebp - 0x210]
push eax
push 0x100c9c0
push 7
call fcn.01017562
add esp, 0xc
lea ecx, [ebp + 8]
call fcn.01019f70
jmp 0x1017ca4
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetProcessId]
push eax
mov dword [ebp + 0x1c], eax
lea eax, [ebp - 0x210]
push eax
push 0x100c980
push 7
call fcn.01017562
push dword [ebp + 0x10]
lea eax, [ebp - 0x418]
push 0x100c95c
push eax
call fcn.010103dd
add esp, 0x1c
push eax
call fcn.010188f0
push dword [ebp - 8]
push dword [ebp - 4]
push dword [ebp + 0x14]
call fcn.010179b7
push dword [ebp + 0x1c]
push 0x100c910
push 6
call fcn.01017562
add esp, 0xc
mov edi, 0x1388
push edi
push dword [ebp + 8]
mov dword [ebp + 0xc], ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, ebx
je 0x1017bd8
mov ebx, 0x3a98
cmp eax, 0x102
jne 0x1017c09
add dword [ebp + 0xc], edi
cmp dword [ebp + 0xc], ebx
lea ecx, [ebp - 0x210]
sbb eax, eax
push ecx
push dword [ebp + 0x10]
and eax, 0x100
cmp dword [ebp + 0xc], ebx
push 0x100c7b8
sbb ecx, ecx
neg ecx
push 6
add ecx, 6
push ecx
or eax, 0x33
push eax
push 0
call fcn.01011f41
add esp, 0x1c
cmp eax, 2
je 0x1017c31
cmp eax, 7
je 0x1017bc6
push dword [ebp + 0x1c]
push 0x100c784
push 8
call fcn.01017562
mov ecx, dword [ebp + 8]
add esp, 0xc
xor eax, eax
push eax
push eax
mov dword [ebp + 0x18], eax
push 1
lea eax, [ebp + 0x18]
push eax
mov dword [ebp + 0x14], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
push dword [ebp + 0x14]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x1017c41
push 0x270f
push dword [ebp + 0x18]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x1017c5e
push dword [ebp + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [ebp + 0x18], 0
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1017b0f
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 8]
mov dword [ebp + 0x10], 0x1e61
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp + 0x10]
push dword [ebp + 0x10]
push dword [ebp + 0x1c]
push 0x100c730
push 7
call fcn.01017562
add esp, 0x14
jmp 0x1017c8d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x410]
call fcn.0100e252
push eax
push dword [ebp + 0x1c]
push 0x100c6d8
call fcn.01011f22
add esp, 0xc
or dword [esi], 1
jmp 0x1017c8d
push 0x100c6b0
push 8
call fcn.01017562
pop ecx
pop ecx
jmp 0x1017c2c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x410]
call fcn.0100e252
push eax
push dword [ebp + 0x1c]
push 0x100c648
jmp 0x1017c24
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x410]
call fcn.0100e252
push eax
push dword [ebp + 0x1c]
push 0x100c600
call fcn.01011f22
or dword [esi], 1
add esp, 0xc
push dword [ebp + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esi], 0
pop edi
jmp 0x1017a85
push 0x100c5c4
call fcn.01011f22
pop ecx
or dword [esi], 1
mov eax, esi
pop esi
pop ebx
leave
ret 0x18