Function at 0x10004260
Capabilities:
Terminate process

Disassembly:
sub esp, 0x20
push ebx
push esi
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
lea eax, [esp + 8]
push eax
lea edx, [esi + 0x29000]
push edi
lea ecx, [ebx + 0x20]
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], bl
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], pe_nt_image_headers32
mov byte [esp + 0x15], 0xae
mov byte [esp + 0x16], 0xb2
mov byte [esp + 0x17], 0x4b
mov byte [esp + 0x18], 0x49
mov byte [esp + 0x19], 0x43
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], bl
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], 3
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], 3
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 0x28
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], 0x80
mov byte [esp + 0x28], 0xe
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 0x58
mov byte [esp + 0x2d], 1
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], 0x80
call fcn.10002710
cmp eax, 1
je 0x10004701
mov cl, 0x92
mov byte [esp + 0x14], cl
mov byte [esp + 0x18], cl
lea ecx, [esp + 8]
push ecx
mov al, 0xf6
lea edx, [esi + 0x12000]
push edi
lea ecx, [ebx + 0x20]
mov byte [esp + 0x10], 1
mov byte [esp + 0x11], bl
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], bl
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], bl
mov byte [esp + 0x19], 4
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1d], al
mov byte [esp + 0x1e], 0x40
mov byte [esp + 0x1f], bl
mov byte [esp + 0x21], al
mov byte [esp + 0x22], 0x40
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 0x90
mov byte [esp + 0x25], 0xf8
mov byte [esp + 0x26], 0x40
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 6
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], bl
call fcn.10002710
cmp eax, 1
je 0x10004701
mov al, 0x30
mov cl, 0x96
lea edx, [esp + 8]
push edx
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0x36
mov byte [esp + 0x16], cl
mov byte [esp + 0x20], cl
lea edx, [esi + 0x46000]
push edi
lea ecx, [ebx + 0x20]
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], 0x70
mov byte [esp + 0x12], 2
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], 0x18
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], 0x81
mov byte [esp + 0x1c], 0x3e
mov byte [esp + 0x1d], al
mov byte [esp + 0x1e], 0x42
mov byte [esp + 0x1f], al
mov byte [esp + 0x20], 0x46
mov byte [esp + 0x21], al
mov byte [esp + 0x22], 0x4a
mov byte [esp + 0x23], al
mov byte [esp + 0x25], 0x38
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], 0x80
mov byte [esp + 0x2a], 2
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 0xc
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], bl
call fcn.10002710
cmp eax, 1
je 0x10004701
lea eax, [esp + 8]
push eax
lea edx, [esi + 0x24000]
push edi
lea ecx, [ebx + 0x20]
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], bl
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], 0x8d
mov byte [esp + 0x15], 0x5b
mov byte [esp + 0x16], 0xc8
mov byte [esp + 0x17], 0x4b
mov byte [esp + 0x18], 0x49
mov byte [esp + 0x19], 0x43
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], 1
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], 4
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], 0x68
mov byte [esp + 0x21], 2
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], 0x80
mov byte [esp + 0x24], 0x38
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], 0x80
mov byte [esp + 0x28], 3
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 0xd8
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], 0x80
call fcn.10002710
cmp eax, 1
je 0x10004701
lea ecx, [esp + 8]
push ecx
mov al, 8
lea edx, [esi + 0xf7000]
push edi
lea ecx, [ebx + 0x20]
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], bl
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], bl
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], 4
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], 1
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], 0xa
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0xe
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], 0x80
mov byte [esp + 0x24], 0x68
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], 0x80
mov byte [esp + 0x28], 1
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], al
mov byte [esp + 0x2d], 1
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], 0x80
call fcn.10002710
cmp eax, 1
je 0x10004701
mov al, 0x8b
mov cl, 0xf3
lea edx, [esp + 8]
push edx
mov byte [esp + 0x1c], cl
mov byte [esp + 0x23], cl
lea edx, [esi + 0x1000]
push edi
lea ecx, [ebx + 0x1c]
mov byte [esp + 0x10], 0x56
mov byte [esp + 0x11], al
mov byte [esp + 0x12], 0xf1
mov byte [esp + 0x13], al
mov byte [esp + 0x14], 0x4e
mov byte [esp + 0x15], 4
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0xd1
mov byte [esp + 0x18], 0x57
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], 0x3e
mov byte [esp + 0x1b], 0xc1
mov byte [esp + 0x1c], 0xe9
mov byte [esp + 0x1d], 2
mov byte [esp + 0x1e], 0x33
mov byte [esp + 0x1f], 0xc0
mov byte [esp + 0x21], 0xab
mov byte [esp + 0x22], al
mov byte [esp + 0x23], 0xca
mov byte [esp + 0x24], 0x83
mov byte [esp + 0x25], 0xe1
mov byte [esp + 0x26], 3
mov byte [esp + 0x28], 0xaa
mov byte [esp + 0x29], al
mov byte [esp + 0x2a], 6
mov byte [esp + 0x2b], 0x50
call fcn.10002710
cmp eax, 1
je 0x10004701
mov al, 0x13
mov byte [esp + 0xd], al
mov byte [esp + 0x15], al
lea eax, [esp + 8]
push eax
lea edx, [esi + 0x81000]
push edi
lea ecx, [ebx + 0x10]
mov byte [esp + 0x10], 0x11
mov byte [esp + 0x11], 1
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], 0xf0
mov byte [esp + 0x16], 0x40
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], 0x10
mov byte [esp + 0x19], 1
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], 0xe0
mov byte [esp + 0x1e], 0x40
mov byte [esp + 0x1f], bl
call fcn.10002710
cmp eax, 1
je 0x10004701
lea ecx, [esp + 8]
push ecx
push edi
lea ecx, [ebx + 0x10]
mov edx, 0x485000
call fcn.10002710
cmp eax, 1
je 0x10004701
lea edx, [esp + 8]
push edx
push edi
lea ecx, [ebx + 0x10]
mov edx, 0x476000
call fcn.10002710
cmp eax, 1
jne 0x10004709
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop esi
pop ebx
add esp, 0x20
ret