Function at 0x10065b36
Capabilities:
Terminate process

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011e0e5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa48
mov eax, dword [0x101a0414]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x6c0], edx
mov edi, ecx
mov dword [ebp - 0x6f4], edi
mov eax, dword [ebx + 8]
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x6f0], eax
lea eax, [ebp - 0x6bc]
push eax
push ecx
push 0x32
mov ecx, 0x1e89519c
mov dword [ebp - 0x6c4], esi
mov dword [ebp - 0x6bc], str.Secure_Crash_Handling
call fcn.1003a42b
lea ecx, [ebp - 0x6cc]
call fcn.1003a42b
xor eax, eax
cmp byte [ebp - 0x6c8], al
je 0x10065be8
mov dl, byte [ebx + 0x18]
mov ecx, dword [ebp - 0x6c0]
call fcn.1006d871
test al, al
je 0x10065be6
mov byte [ebp - 0x6bc], 1
xor eax, eax
jmp 0x10065bee
xor eax, eax
mov byte [ebp - 0x6bc], al
cmp byte [0x101af01a], 0
jne 0x10065dbe
cmp byte [esi + 4], 0
mov dword [ebp - 0x6ec], edi
mov word [ebp - 0x6e8], 0x100
mov byte [ebp - 0x6e0], al
mov byte [ebp - 0x6dc], al
je 0x10065c33
mov ecx, dword [esi]
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6d8]
push eax
call fcn.1003a42b
jmp 0x10065c45
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], eax
mov dword [ebp - 0x6d0], eax
lea edx, [ebp - 0x6d8]
lea ecx, [ebp - 0xa58]
call fcn.1003a42b
cmp byte [ebp - 0x710], 0
je 0x10065d78
mov edi, dword [ebx + 0x14]
lea ecx, [ebp - 0x368]
mov esi, dword [ebx + 0x18]
call fcn.1003a42b
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0x360]
call fcn.1003a42b
push dword [ebp - 0x6c8]
lea edx, [ebp - 0x368]
push dword [ebp - 0x6cc]
lea ecx, [ebp - 0x6b8]
push esi
push edi
push dword [ebx + 0xc]
push dword [ebp - 0x6f0]
push dword [ebp - 0x6bc]
push dword [ebp - 0x6c0]
call fcn.1003a42b
lea ecx, [ebp - 0x360]
call fcn.10065f11
mov ecx, dword [ebp - 0x364]
test ecx, ecx
je 0x10065cd4
call fcn.1000fc6b
lea edx, [ebp - 0x6b0]
lea ecx, [ebp - 0x6e4]
call fcn.1003a42b
mov eax, dword [ebp - 0x6e4]
cmp eax, dword [ebp - 0x6e0]
je 0x10065d3f
call fcn.10071394
test al, al
je 0x10065d3f
mov eax, dword [ebp - 0x6f4]
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x708], eax
xor eax, eax
mov word [ebp - 0x704], 0x100
mov byte [ebp - 0x6fc], al
mov byte [ebp - 0x6f8], al
cmp byte [ecx + 4], al
je 0x10065d3f
mov ecx, dword [ecx]
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x708]
push eax
call fcn.1003a42b
lea ecx, [ebp - 0x6e4]
call fcn.10011911
lea ecx, [ebp - 0x6b0]
call fcn.10065f11
mov ecx, dword [ebp - 0x6b4]
test ecx, ecx
je 0x10065d64
call fcn.1000fc6b
cmp byte [ebp - 0x710], 0
je 0x10065d78
lea ecx, [ebp - 0xa58]
call fcn.10065f11
mov ecx, dword [ebp - 0x6d8]
test ecx, ecx
je 0x10065dbe
mov eax, dword [ebp - 0x6d0]
sub eax, ecx
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6c4], eax
cmp eax, 0x1000
jb 0x10065db6
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x6c0]
push eax
call fcn.1003a42b
mov ecx, dword [ebp - 0x6c0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
cmp byte [ebp - 0x6bc], 0
je 0x10065dfe
cmp byte [ebp - 0x6c8], 0
je 0x10065e1e
cmp byte [0x101af01c], 0
je 0x10065def
push dword [ebp - 0x6cc]
call fcn.1003a42b
mov ecx, dword [ebp - 0x6cc]
call fcn.1003a42b
push 0
call dword [sym.imp.kernel32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.kernel32.dll_TerminateProcess]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10003ca6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14
call fcn.1003a42b
int3