Function at 0x40dcf0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], ecx
push 0x10
push 0
push 0x48fca8
call fcn.0041eef0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.0040d2e0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x40dd26
xor al, al
jmp 0x40de3a
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x40dd4b
xor al, al
jmp 0x40de3a
mov ecx, dword [ebp - 4]
call fcn.0040caa0
test eax, eax
jne 0x40dd65
mov dword [ebp - 0x18], str.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
xor al, al
jmp 0x40de3a
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x40dd91
push 0
mov ecx, dword [0x48fca8]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x40de3a
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0040e340
mov ecx, dword [ebp - 8]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00411480
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], str.vyKUSYV67IfeNnYKtn72YSqTWPmN2JIDYW1MfIITSQSv9YYxC0L77PyoEBis29h3Xdj6WPMlWJS2UOVWxOGeOcQrklf4gOzqHqpuy29lbDH2IVub
mov dword [ebp - 0x20], str.COA4MJnkJ4Rc8R8CpnFKxbEjmxFj2YlynkDYRjevPLV10ccMxR6t4Nmaovqt0dryqPJu8agovI1eXzfgxRjyjP4QkMzVgWddOBz5stLo8DVY6hbgXRa9t57NJ2PfYSix2PD5OaAsWFOJ9NS6IijeR0j23odiXQmCVJdCnM2a8p3isRe97A6
cmp dword [ebp - 0x14], 0
jne 0x40ddd7
push 0
mov edx, dword [0x48fca8]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x40de3a
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x1c]
call edx
movzx eax, al
test eax, eax
jne 0x40de0a
mov dword [ebp - 0x24], str.6oS08r0NND4YwLLd0V8SrVHHXdvi3qJgbcAUssyT7loULJcHMNzSJbRbevGknKipGhPMjt9zE0Cs2fQdJUknOXQQjUueEBUpXQLBLm5VP6bW8Ry8HSsYEtgiQ30JmzsQQtQ6a3Ot3ThXBIGKYDlXoPQqtk6HBJldCTSyYrQ5CtY9JpdeliGdohnBIUx7gKxR1dWYWvK2PBbls4EEYlvfdXIy7KP6RKE5eGwX0ac2VQAuql9YzqbgD8Qo7xoWHoQ1SUnLdqT76zLG0pm4exo5D0LC9Jq5GPOG6KBgVfHJuP4a
xor al, al
jmp 0x40de3a
mov dword [ebp - 0x28], str.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
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0040e690
movzx edx, al
test edx, edx
jne 0x40de38
push 0
mov eax, dword [0x48fca8]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x40de3a
mov al, 1
mov esp, ebp
pop ebp
ret 4