Function at 0x45d2c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e153
mov eax, dword fs:[0]
push eax
sub esp, 0x6fc
mov eax, dword [0x4d33a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
lea eax, [ebp - 0x5e4]
push eax
call fcn.0045f9b0
add esp, 4
call fcn.0045e600
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0
jne 0x45d31d
xor eax, eax
jmp 0x45ded9
mov ecx, 1
mov edx, 0x4d5da0
xor eax, eax
lock cmpxchg dword [edx], ecx
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x5e8]
movzx ecx, byte [eax + 0x120]
test ecx, ecx
jne 0x45d354
cmp dword [ebp - 0x184], 0
je 0x45d354
xor eax, eax
jmp 0x45ded9
cmp dword [ebp - 0x184], 0
je 0x45d36f
push 0xbaad0101
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x67c], 0
xor edx, edx
mov word [ebp - 0x5b4], dx
push 0x410
push 0
lea eax, [ebp - 0x5b2]
push eax
call fcn.0047e3a0
add esp, 0xc
lea ecx, [ebp - 0x69c]
call fcn.0043f217
mov dword [ebp - 4], 0
xor ecx, ecx
mov word [ebp - 0x654], cx
xor edx, edx
mov dword [ebp - 0x652], edx
mov dword [ebp - 0x64e], edx
mov dword [ebp - 0x64a], edx
mov dword [ebp - 0x646], edx
mov dword [ebp - 0x642], edx
mov dword [ebp - 0x63e], edx
mov dword [ebp - 0x63a], edx
mov word [ebp - 0x636], dx
xor eax, eax
mov word [ebp - 0x678], ax
xor ecx, ecx
mov dword [ebp - 0x676], ecx
mov dword [ebp - 0x672], ecx
mov dword [ebp - 0x66e], ecx
mov dword [ebp - 0x66a], ecx
mov dword [ebp - 0x666], ecx
mov dword [ebp - 0x662], ecx
mov dword [ebp - 0x65e], ecx
mov word [ebp - 0x65a], cx
xor edx, edx
mov word [ebp - 0x180], dx
xor eax, eax
mov dword [ebp - 0x17e], eax
mov dword [ebp - 0x17a], eax
mov dword [ebp - 0x176], eax
mov dword [ebp - 0x172], eax
mov dword [ebp - 0x16e], eax
mov dword [ebp - 0x16a], eax
mov dword [ebp - 0x166], eax
mov word [ebp - 0x162], ax
xor ecx, ecx
mov word [ebp - 0x5d4], cx
xor edx, edx
mov dword [ebp - 0x5d2], edx
mov dword [ebp - 0x5ce], edx
mov dword [ebp - 0x5ca], edx
mov dword [ebp - 0x5c6], edx
mov dword [ebp - 0x5c2], edx
mov dword [ebp - 0x5be], edx
mov dword [ebp - 0x5ba], edx
mov word [ebp - 0x5b6], dx
mov dword [ebp - 0x634], 0
push 0x40
push 0
lea eax, [ebp - 0x630]
push eax
call fcn.0047e3a0
add esp, 0xc
mov dword [ebp - 0x194], 0
xor ecx, ecx
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x188], ecx
push 1
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x3c
call fcn.0042ab8b
push eax
call fcn.004601a0
add esp, 8
push 0x4b3440
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x3c
call fcn.0042ab8b
push eax
call fcn.0047f5d2
add esp, 8
test eax, eax
jne 0x45d53c
push 0x4b3460
call fcn.00460460
add esp, 4
cmp eax, 2
jb 0x45d53c
push 0xbaad0103
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edx, dword [ebp - 0x5e8]
mov eax, dword [edx + 4]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5e8], 0
jne 0x45d559
jmp 0x45de2a
xor ecx, ecx
jne 0x45d54b
push 0x1780
push 0
mov edx, dword [ebp - 0x5dc]
push edx
call fcn.0047e3a0
add esp, 0xc
mov eax, dword [ebp - 0x5dc]
mov dword [eax], 0xc
mov ecx, dword [ebp - 0x5dc]
mov dword [ecx + 8], 0x1780
mov edx, dword [ebp - 0x5dc]
mov dword [edx + 4], 0x90909090
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx + 0x124]
mov dword [eax + 0x1700], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [ebp - 0x5dc]
mov dword [ecx + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, dword [ebp - 0x5dc]
mov dword [edx + 0x18], eax
mov dword [ebp - 0x5d8], 0
push eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x5d8], eax
pop eax
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [ebp - 0x5d8]
mov dword [eax + 0x28], ecx
mov dword [ebp - 0x6a4], 0
push eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x6a4], eax
pop eax
mov edx, dword [ebp - 0x5dc]
mov eax, dword [ebp - 0x6a4]
mov dword [edx + 0x30], eax
mov ecx, dword [ebp - 0x5dc]
cmp dword [ecx + 0x28], 0
je 0x45d653
mov edx, dword [ebp - 0x5dc]
mov eax, dword [edx + 0x28]
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [eax + 8]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [eax + 0x28]
mov edx, dword [ebp - 0x5dc]
mov eax, dword [ecx + 4]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
cmp dword [edx], 0x88888888
jne 0x45d66f
mov eax, dword [ebp - 0x5dc]
mov byte [eax + 0x16f9], 0
jmp 0x45d687
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ebp - 0x5e8]
mov al, byte [edx + 0x11f]
mov byte [ecx + 0x16f9], al
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ebp - 0x5e8]
mov al, byte [edx + 0x11c]
mov byte [ecx + 0x16fb], al
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ebp - 0x5e8]
mov al, byte [edx + 0x11d]
mov byte [ecx + 0x16fa], al
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ebp - 0x5e8]
mov al, byte [edx + 0x120]
mov byte [ecx + 0x16f8], al
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ebp + 8]
mov dword [ecx + 0x354], edx
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x3c
call fcn.0042ab8b
push eax
push 0x105
mov eax, dword [ebp - 0x5dc]
add eax, 0x7e6
push eax
call fcn.0047f306
add esp, 0x10
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x74
call fcn.0042ab8b
push eax
push 0x105
mov ecx, dword [ebp - 0x5dc]
add ecx, 0xe04
push ecx
call fcn.0047f306
add esp, 0x10
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x90
call fcn.0042ab8b
push eax
push 0x105
mov edx, dword [ebp - 0x5dc]
add edx, 0x9f0
push edx
call fcn.0047f306
add esp, 0x10
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0xac
call fcn.0042ab8b
push eax
push 0x105
mov eax, dword [ebp - 0x5dc]
add eax, 0xbfa
push eax
call fcn.0047f306
add esp, 0x10
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x58
call fcn.0042ab8b
push eax
push 0x105
mov ecx, dword [ebp - 0x5dc]
add ecx, 0x100e
push ecx
call fcn.0047f306
add esp, 0x10
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0xe4
call fcn.0042ab8b
push eax
push 0x105
mov edx, dword [ebp - 0x5dc]
add edx, 0x1256
push edx
call fcn.0047f306
add esp, 0x10
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x100
call fcn.0042ab8b
push eax
push 0x105
mov eax, dword [ebp - 0x5dc]
add eax, 0x1460
push eax
call fcn.0047f306
add esp, 0x10
push 0x1e
mov ecx, dword [ebp - 0x5e8]
add ecx, 0xc8
call fcn.0042ab8b
push eax
push 0x1f
mov ecx, dword [ebp - 0x5dc]
add ecx, 0x1218
push ecx
call fcn.0047f306
add esp, 0x10
push 0x1e
push 0x4d5cd0
push 0x1f
mov edx, dword [ebp - 0x5dc]
add edx, 0x166a
push edx
call fcn.0047f306
add esp, 0x10
push 0x1e
push 0x4d5c90
push 0x1f
mov eax, dword [ebp - 0x5dc]
add eax, 0x16a8
push eax
call fcn.0047f306
add esp, 0x10
push 0x1e
push 0x4d5d50
push 0x1f
mov ecx, dword [ebp - 0x5dc]
add ecx, 0x1704
push ecx
call fcn.0047f306
add esp, 0x10
push 0x1e
push 0x4d5d10
push 0x1f
mov edx, dword [ebp - 0x5dc]
add edx, 0x1742
push edx
call fcn.0047f306
add esp, 0x10
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [0x4d5c84]
mov dword [eax + 0x16f4], ecx
mov edx, dword [ebp - 0x5dc]
mov eax, dword [0x4d5d90]
mov dword [edx + 0x16f0], eax
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [0x4d5d94]
mov dword [ecx + 0x16e8], edx
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [0x4d5d98]
mov dword [eax + 0x16ec], ecx
push 0x104
mov ecx, dword [ebp - 0x5e8]
add ecx, 0x20
call fcn.0042ab8b
push eax
push 0x105
mov edx, dword [ebp - 0x5dc]
add edx, 0x5dc
push edx
call fcn.0047f306
add esp, 0x10
mov eax, dword [ebp + 8]
mov esi, dword [eax + 4]
mov edi, dword [ebp - 0x5dc]
add edi, 0x88
mov ecx, 0xb3
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 8]
mov esi, dword [ecx]
mov edi, dword [ebp - 0x5dc]
add edi, 0x38
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x198], 0x208
lea edx, [ebp - 0x198]
push edx
lea eax, [ebp - 0x5b4]
push eax
call fcn.0045f4a0
add esp, 8
test eax, eax
je 0x45d9a4
push str.CrashReport.exe
lea ecx, [ebp - 0x5b4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
movzx edx, word [ebp - 0x5b4]
test edx, edx
jne 0x45d9b4
jmp 0x45de2a
xor eax, eax
jne 0x45d9a4
push 0x10
push 0x10
lea ecx, [ebp - 0x654]
push ecx
mov edx, dword [ebp - 0x5dc]
push edx
call fcn.004851b0
add esp, 0x10
push 0xa
push 0x10
lea eax, [ebp - 0x678]
push eax
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx + 0x128]
push edx
call fcn.004851b0
add esp, 0x10
push 0xa
push 0x10
lea eax, [ebp - 0x180]
push eax
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ecx + 0x18]
push edx
call fcn.004851b0
add esp, 0x10
push 0xa
push 0x10
lea eax, [ebp - 0x5d4]
push eax
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ecx + 0x1c]
push edx
call fcn.004851b0
add esp, 0x10
push 0x4b34a0
lea eax, [ebp - 0x678]
push eax
push 0x4b34a4
lea ecx, [ebp - 0x5d4]
push ecx
push 0x4b34a8
lea edx, [ebp - 0x180]
push edx
push 0x4b34ac
lea eax, [ebp - 0x654]
push eax
push 0x4b34b0
push 0x4b34c4
lea ecx, [ebp - 0x5b4]
push ecx
push 0x4b34cc
lea edx, [ebp - 0x69c]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.0044bd45
add esp, 0xc
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x6b0]
push edx
lea eax, [ebp - 0x48]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x6b8]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x6c0]
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c8], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x6c8]
push edx
lea eax, [ebp - 0x9c]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6cc], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x6d0]
push edx
lea eax, [ebp - 0xb8]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x6d8]
push edx
lea eax, [ebp - 0xd4]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x6e0]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e8], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x6e8]
push edx
lea eax, [ebp - 0x10c]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x6f0]
push edx
lea eax, [ebp - 0x128]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6f4], eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp - 0x6f8], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x6f8]
push edx
lea eax, [ebp - 0x144]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x700], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x700]
push edx
lea eax, [ebp - 0x160]
push eax
call fcn.00444393
add esp, 0xc
mov dword [ebp - 0x704], eax
mov ecx, dword [ebp - 0x704]
mov dword [ebp - 0x708], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x708]
push edx
lea ecx, [ebp - 0x69c]
call fcn.00444099
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x160]
call fcn.0042aec4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x144]
call fcn.0042aec4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x128]
call fcn.0042aec4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x10c]
call fcn.0042aec4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf0]
call fcn.0042aec4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd4]
call fcn.0042aec4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb8]
call fcn.0042aec4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9c]
call fcn.0042aec4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x80]
call fcn.0042aec4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x64]
call fcn.0042aec4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.0042aec4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.0042aec4
lea ecx, [ebp - 0x69c]
call fcn.00438d2e
cmp eax, 0x208
jb 0x45dd47
jmp 0x45de2a
xor eax, eax
jne 0x45dd30
push 0x207
lea ecx, [ebp - 0x69c]
call fcn.0042ab8b
push eax
push 0x208
lea ecx, [ebp - 0x5b4]
push ecx
call fcn.0047f306
add esp, 0x10
mov dword [ebp - 0x680], 0
lea edx, [ebp - 0x680]
push edx
call fcn.0045d220
add esp, 4
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 0
jne 0x45ddab
mov eax, dword [ebp - 0x5e8]
movzx ecx, byte [eax + 0x11d]
mov dword [ebp - 0x680], ecx
cmp dword [ebp - 0x680], 0
je 0x45ddcd
push 0
lea edx, [ebp - 0x5b4]
push edx
call fcn.0045df00
add esp, 8
mov dword [ebp - 0x67c], eax
jmp 0x45de06
mov dword [ebp - 0x634], 0x44
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x634]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x5b4]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0
jne 0x45de11
jmp 0x45de2a
xor eax, eax
jne 0x45de06
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ecx + 0x128]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [ebp - 0x194], 0
je 0x45de40
mov eax, dword [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x190], 0
je 0x45de56
mov ecx, dword [ebp - 0x190]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x67c], 0
je 0x45deb7
mov edx, dword [ebp - 0x5e8]
movzx eax, byte [edx + 0x11e]
test eax, eax
je 0x45deb7
mov ecx, dword [ebp - 0x5e8]
movzx edx, byte [ecx + 0x120]
test edx, edx
je 0x45deb7
mov dword [ebp - 0x6a0], 1
push 0xbaad0102
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0xbaad0102
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
mov ecx, dword [ebp - 0x5e8]
call fcn.0045d150
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x69c]
call fcn.0042aec4
mov eax, dword [ebp - 0x6a8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048638c
mov esp, ebp
pop ebp
ret 4