Function at 0x1810aeb5
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x181d700c]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x28], ecx
movzx ecx, byte [0x181dd05a]
push edi
push 7
neg ecx
mov dword [ebp - 0xc], edx
pop eax
sbb ecx, ecx
push 1
pop ebx
and ecx, 0x181dcf50
je 0x1810af14
push ebx
push eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ebx
call fcn.18008b5d
push dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push str._Waiting_for_other_instances_to_exit___i_msecs_
push eax
call fcn.18007230
mov edx, dword [ebp - 0xc]
add esp, 0xc
mov ecx, dword [edx]
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], eax
mov edi, ebx
mov dword [ebp - 0x14], eax
mov esi, ebx
mov eax, dword [edx + 4]
sub eax, ecx
mov dword [ebp - 0x1c], esi
sar eax, 2
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], edi
test eax, eax
je 0x1810af9d
mov edx, ebx
push dword [ecx + edx*4]
push ebx
push 0x100401
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x1810af58
call fcn.1801bab5
jmp 0x1810af7c
mov dword [ebp - 0x2c], eax
cmp edi, esi
je 0x1810af69
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x18], edi
jmp 0x1810af7c
lea eax, [ebp - 0x2c]
push eax
push edi
lea ecx, [ebp - 0x1c]
call fcn.1801031b
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
inc edx
mov dword [ebp - 0x24], edx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 2
cmp edx, eax
jb 0x1810af3e
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x30], edi
cmp esi, edi
je 0x1810b1e6
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0x10]
mov edx, esi
mov ecx, dword [ebp - 0xc]
push dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
mov eax, edi
sub eax, esi
mov dword [ebp - 0x14], ecx
sar eax, 2
mov ecx, eax
mov dword [ebp - 0x24], eax
call fcn.1800ee9a
pop ecx
lea ecx, [ebp - 0x18]
mov dword [ebp - 0xc], eax
call fcn.18087e2d
push edx
push eax
mov ecx, 0x181dd7a0
call fcn.180264c9
mov eax, dword [ebp - 0xc]
cmp eax, 0xffffffff
jne 0x1810b010
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1810b005
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x1810b1e6
jmp 0x1810b106
test eax, eax
je 0x1810b1e6
movzx ecx, byte [0x181dd05a]
neg ecx
sbb ecx, ecx
and ecx, 0x181dcf50
je 0x1810b059
push 7
pop edx
push 0xfffffffffffffffe
pop eax
push eax
push edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], eax
call fcn.18008b5d
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
push eax
lea eax, [ebp - 0x20]
push str._Other_Omaha_Update_instances_failed_to_shutdown_in_time___u_
push eax
call fcn.18007230
add esp, 0xc
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x10], ebx
cmp dword [ebp - 0x24], ebx
jbe 0x1810b0fc
mov edi, ebx
push ebx
push dword [esi + edi*4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1810b0ef
mov ecx, dword [esi + edi*4]
call fcn.1801843e
test eax, eax
je 0x1810b0ef
lea edx, [ebp - 0xc]
mov dword [ebp - 0xc], ebx
mov ecx, eax
call fcn.18109e34
test eax, eax
mov eax, dword [ebp - 0xc]
js 0x1810b0a1
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 0x10], eax
cmp eax, 0x1f
ja case.0x1810b0ad.1
movzx eax, byte [eax + 0x1810b291]
jmp dword [eax*4 + 0x1810b26d]
mov ecx, 0x181d9788
jmp 0x1810b0ea
mov ecx, 0x181d9848
jmp 0x1810b0ea
mov ecx, 0x181d97c8
jmp 0x1810b0ea
mov ecx, 0x181d9c68
jmp 0x1810b0ea
mov ecx, 0x181d9aa8
jmp 0x1810b0ea
mov ecx, 0x181d9988
jmp 0x1810b0ea
mov ecx, 0x181d97a8
jmp 0x1810b0ea
mov ecx, 0x181d9828
call fcn.18026d51
inc edi
cmp edi, dword [ebp - 0x24]
jb 0x1810b06a
mov edi, dword [ebp - 0x30]
mov ecx, 0x181d9928
call fcn.18026d51
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x1810b1cd
mov edi, eax
mov ecx, dword [esi + ebx*4]
call fcn.1801843e
push 0xa0430729
push dword [esi + ebx*4]
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x1810b17d
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, byte [0x181dd05a]
neg ecx
mov dword [ebp - 0xc], eax
sbb ecx, ecx
and ecx, 0x181dcf50
je 0x1810b1bc
or dword [ebp - 0x18], 0xffffffff
push 7
pop eax
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
call fcn.18008b5d
push dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push dword [ebp - 0x28]
push str._::TerminateProcess_failed___u___u_
push eax
call fcn.18007230
add esp, 0x10
jmp 0x1810b1bc
movzx ecx, byte [0x181dd05a]
neg ecx
sbb ecx, ecx
and ecx, 0x181dcf50
je 0x1810b1bc
or dword [ebp - 0x38], 0xffffffff
push 7
pop eax
push 0xffffffffffffffff
push eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], eax
call fcn.18008b5d
push dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x40]
push str._::TerminateProcess_succeeded___u_
push eax
call fcn.18007230
add esp, 0xc
inc ebx
cmp ebx, edi
jb 0x1810b113
mov edi, dword [ebp - 0x30]
xor ebx, ebx
mov eax, dword [ebp - 0x24]
push 0x1f4
mov edx, esi
mov ecx, eax
call fcn.1800ee9a
pop ecx
test eax, eax
je 0x1810b1e6
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub edi, esi
sar edi, 2
test edi, edi
je 0x1810b206
push dword [esi + ebx*4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1810b201
call fcn.1801bab5
inc ebx
cmp ebx, edi
jb 0x1810b1ef
movzx ecx, byte [0x181dd05a]
neg ecx
sbb ecx, ecx
and ecx, 0x181dcf50
je 0x1810b242
push 7
pop eax
xor edx, edx
mov dword [ebp - 0x40], ecx
inc edx
mov dword [ebp - 0x3c], eax
push edx
push eax
mov dword [ebp - 0x38], edx
call fcn.18008b5d
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x40]
push str._Done_waiting_for_other_instances_to_exit_
push eax
call fcn.18007230
pop ecx
pop ecx
test esi, esi
je 0x1810b257
mov eax, dword [ebp - 0x2c]
sub eax, esi
and eax, 0xfffffffc
push eax
push esi
call fcn.1800a1ed
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.181224f8
leave
ret 8