Function at 0x611f60
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffa38
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x15c4], edx
mov dword [ebp - 0x15c8], edx
mov dword [ebp - 0x15c0], edx
mov dword [ebp - 0x15b8], edx
mov dword [ebp - 0x15bc], edx
mov dword [ebp - 0x15b4], edx
mov dword [ebp - 0x15b0], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0040afa0
xor eax, eax
push ebp
push 0x612240
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
lea edx, [ebp - 0x15b0]
mov eax, dword [ebp - 4]
call fcn.00430138
mov eax, dword [ebp - 0x15b0]
mov edx, dword [ebp - 4]
call fcn.0040be08
jne 0x611fde
xor edi, edi
jmp 0x611fe1
or edi, 0xffffffff
mov dword [ebp - 0x128], 0x114
lea eax, [ebp - 0x128]
push eax
call sub.kernel32.dll_GetVersionExW
mov eax, dword [ebp - 0x118]
cmp eax, 1
jne 0x6120f3
xor edx, edx
mov eax, 2
call fcn.0060bd94
mov esi, eax
mov dword [ebp - 0x354], 0x22c
lea edx, [ebp - 0x354]
mov eax, esi
call fcn.0060bdb4
mov ebx, eax
jmp 0x6120e0
test edi, edi
je 0x61207c
lea eax, [ebp - 0x15b4]
lea edx, [ebp - 0x330]
mov ecx, 0x104
call fcn.0040bac0
mov eax, dword [ebp - 0x15b4]
mov edx, dword [ebp - 4]
call fcn.0042eadc
test eax, eax
jne 0x6120d1
push 0
mov eax, dword [ebp - 0x34c]
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
mov byte [ebp - 5], 1
jmp 0x6120d1
lea eax, [ebp - 0x15bc]
lea edx, [ebp - 0x330]
mov ecx, 0x104
call fcn.0040bac0
mov eax, dword [ebp - 0x15bc]
lea edx, [ebp - 0x15b8]
call fcn.00430138
mov eax, dword [ebp - 0x15b8]
mov edx, dword [ebp - 4]
call fcn.0042eadc
test eax, eax
jne 0x6120d1
push 0
mov eax, dword [ebp - 0x34c]
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
mov byte [ebp - 5], 1
lea edx, [ebp - 0x354]
mov eax, esi
call fcn.0060bdd4
mov ebx, eax
test ebx, ebx
jne 0x612032
push esi
call sub.kernel32.dll_CloseHandle
jmp 0x612218
cmp eax, 2
jne 0x612218
lea eax, [ebp - 0xc]
push eax
push 0x1000
lea eax, [ebp - 0x1354]
push eax
call fcn.00420af4
mov eax, dword [ebp - 0xc]
shr eax, 2
dec eax
test eax, eax
jl 0x612218
inc eax
mov dword [ebp - 0x14], eax
lea ebx, [ebp - 0x1354]
mov eax, dword [ebx]
push eax
push 0
push 0x410
call sub.kernel32.dll_OpenProcess
mov esi, eax
test esi, esi
je 0x61220c
lea eax, [ebp - 0xc]
push eax
push 4
lea eax, [ebp - 0x10]
push eax
push esi
call fcn.00420b10
push 0x258
lea eax, [ebp - 0x15ac]
push eax
mov eax, dword [ebp - 0x10]
push eax
push esi
call fcn.00420b50
test edi, edi
je 0x6121b2
lea eax, [ebp - 0x15c0]
lea edx, [ebp - 0x15ac]
mov ecx, 0x12c
call fcn.0040bac0
mov eax, dword [ebp - 0x15c0]
mov edx, dword [ebp - 4]
call fcn.0042eadc
test eax, eax
jne 0x612206
push 0
mov eax, dword [ebx]
push eax
push 0
push 0x401
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
mov byte [ebp - 5], 1
jmp 0x612206
lea eax, [ebp - 0x15c8]
lea edx, [ebp - 0x15ac]
mov ecx, 0x12c
call fcn.0040bac0
mov eax, dword [ebp - 0x15c8]
lea edx, [ebp - 0x15c4]
call fcn.00430138
mov eax, dword [ebp - 0x15c4]
mov edx, dword [ebp - 4]
call fcn.0042eadc
test eax, eax
jne 0x612206
push 0
mov eax, dword [ebx]
push eax
push 0
push 0x401
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
mov byte [ebp - 5], 1
push esi
call sub.kernel32.dll_CloseHandle
add ebx, 4
dec dword [ebp - 0x14]
jne 0x61212a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x612247
lea eax, [ebp - 0x15c8]
mov edx, 7
call fcn.0040af0c
lea eax, [ebp - 4]
call fcn.0040aeac
pop eax
jmp eax