Function at 0x454030
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b2424
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
push ebx
push esi
push edi
mov eax, dword [0x4e96d0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x20], ebx
call fcn.0046c0e0
mov esi, eax
mov ecx, esi
call fcn.0046e8e0
cmp byte [0x4f3bdc], 0
jne 0x4540cb
push 0xf0
call fcn.0046e4f0
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4540bd
push 0x4f3bdc
sub esp, 8
xorps xmm0, xmm0
mov ecx, eax
movsd qword [esp], xmm0
push 0x4cea7a
push 0
push 0
push 0x3b
push 0x4d4098
push 0x48
call fcn.0046bf00
jmp 0x4540bf
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x4f3bcc], eax
mov ecx, esi
call fcn.0046e8f0
mov ecx, dword [0x4f3bcc]
lea ecx, [ecx + 0xd0]
call fcn.0046e8e0
mov edi, dword [ebx]
call fcn.0040d990
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x454101
push 0x80004005
call fcn.0040abe0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 1
test edi, edi
je 0x45413f
test edi, 0xffff0000
jne 0x45413f
movzx edi, di
push 0
push edi
call fcn.0040ad60
add esp, 8
test eax, eax
je 0x45414b
push edi
push eax
lea ecx, [ebp - 0x18]
call fcn.0041adc0
jmp 0x454148
push edi
lea ecx, [ebp - 0x18]
call fcn.00418c30
mov esi, dword [ebp - 0x18]
mov dword [ebp - 4], 2
mov eax, dword [0x4f3bcc]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push esi
mov edi, dword [eax]
call ebx
push eax
push 0x4d4074
push dword [0x4f3bcc]
call dword [edi + 0x48]
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
add esp, 0x10
or eax, 0xffffffff
lea ecx, [esi + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x454195
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [0x4f3bcc]
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov ecx, dword [0x4f3bcc]
lea ecx, [ecx + 0xd0]
call fcn.0046e8f0
movss xmm3, dword [0x4d5de8]
lea ecx, [ebp - 0x7c]
movss xmm2, dword [0x4d5dec]
sub esp, 0xc
mov dword [ebp - 0x88], 0
mov byte [ebp - 0x84], 0
mov dword [esp + 4], 0x40100000
call fcn.0041b660
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
call fcn.00453ab0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 4
call fcn.00453ab0
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 3
call fcn.0041b210
push ecx
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x88]
call fcn.00453de0
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 9
call fcn.00452b60
mov edi, eax
test edi, edi
jns 0x454356
call fcn.0046c0e0
mov esi, eax
mov ecx, esi
call fcn.0046e8e0
cmp byte [0x4f3b95], 0
jne 0x4542bd
push 0xf0
call fcn.0046e4f0
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x4542b2
push 0x4f3b95
sub esp, 8
xorps xmm0, xmm0
mov ecx, eax
movsd qword [esp], xmm0
push 0x4cea7a
push 0
push 0
push 0x4f
push 0x4d4098
push 0x20
call fcn.0046bf00
jmp 0x4542b4
xor eax, eax
mov byte [ebp - 4], 9
mov dword [0x4f3bc4], eax
mov ecx, esi
call fcn.0046e8f0
mov ecx, dword [0x4f3bc4]
lea ecx, [ecx + 0xd0]
call fcn.0046e8e0
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x28]
push dword [eax]
call fcn.00418b90
mov byte [ebp - 4], 0xb
mov ecx, dword [0x4f3bc4]
push edi
push dword [eax]
mov esi, dword [ecx]
call ebx
push eax
push 0x4d416c
push dword [0x4f3bc4]
call dword [esi + 0x48]
mov byte [ebp - 4], 9
add esp, 0x14
mov edx, dword [ebp - 0x28]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x454326
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [0x4f3bc4]
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov ecx, dword [0x4f3bc4]
lea ecx, [ecx + 0xd0]
call fcn.0046e8f0
push edi
push 0x4d4144
call fcn.00479917
add esp, 8
push edi
call fcn.0040abe0
call fcn.0040d990
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x454372
push 0x80004005
call fcn.0040abe0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc
mov ebx, dword [ebp - 0x24]
mov edx, dword [ebx + 0xc]
test edx, edx
jne 0x454391
xor ecx, ecx
jmp 0x4543a5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x454396
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x14]
call fcn.00419800
mov esi, dword [ebp - 0x14]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
cmp word [eax], 0
jne 0x4543c4
or eax, 0xffffffff
jmp 0x4543c8
sub eax, esi
sar eax, 1
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042f100
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd
call fcn.0041a2e0
mov byte [ebp - 4], 0xc
or ecx, 0xffffffff
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x454403
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x14]
xor esi, esi
mov dword [ebp - 0x28], esi
jmp 0x454410
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x20]
call fcn.00452e90
mov edx, dword [ebp - 0x38]
xor eax, eax
add esp, 0x1c
mov dword [ebp - 0x1c], eax
test edx, edx
je 0x4544d4
xor ecx, ecx
mov dword [ebp - 0x18], ecx
cmp eax, edx
jae 0x454561
mov edx, dword [ebp - 0x3c]
xor eax, eax
test edi, edi
setne al
test eax, eax
je 0x4540f7
push edi
push dword [edx + ecx + 4]
call fcn.004713e3
add esp, 8
test eax, eax
jne 0x4544b6
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x38]
jae 0x454561
mov esi, dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0x18]
cmp dword [esi + ecx], eax
je 0x4544b9
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x38]
jae 0x454561
mov eax, dword [ebp - 0x3c]
push dword [eax + ecx]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test esi, esi
je 0x4544b6
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
add ecx, 0x2c
mov edx, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
cmp eax, edx
jb 0x454444
mov esi, dword [ebp - 0x28]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x64
jb 0x454410
add edi, 0xfffffff0
mov byte [ebp - 4], 9
or ecx, 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x454507
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push ebx
call fcn.00471dfc
add esp, 4
lea ecx, [ebp - 0x3c]
call fcn.0045dfc0
mov dword [ebp - 4], 0xe
cmp byte [ebp - 0x84], 0
je 0x454547
cmp dword [ebp - 0x48], 0
je 0x454540
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.pdh.dll_PdhCloseQuery]
lea ecx, [ebp - 0x7c]
call fcn.0045de70
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x7c]
call fcn.0045def0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.0040abe0
call fcn.0046c0e0
mov esi, eax
mov ecx, esi
call fcn.0046e8e0
cmp byte [0x4f3c1b], 0
jne 0x4545d0
push 0xf0
call fcn.0046e4f0
add esp, 4
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x4545c5
push 0x4f3c1b
sub esp, 8
xorps xmm0, xmm0
mov ecx, eax
movsd qword [esp], xmm0
push 0x4cea7a
push 0
push 0
push 0x43
push 0x4d4098
push 0x20
call fcn.0046bf00
jmp 0x4545c7
xor eax, eax
mov byte [ebp - 4], 5
mov dword [0x4f3c20], eax
mov ecx, esi
call fcn.0046e8f0
mov ecx, dword [0x4f3c20]
lea ecx, [ecx + 0xd0]
call fcn.0046e8e0
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x28]
push dword [eax]
call fcn.00418b90
mov byte [ebp - 4], 7
mov ecx, dword [0x4f3c20]
mov esi, dword [ebp - 0x2c]
push esi
push dword [eax]
mov edi, dword [ecx]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x4d410c
push dword [0x4f3c20]
call dword [edi + 0x48]
add esp, 0x14
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0040fdf0
mov ecx, dword [0x4f3c20]
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov ecx, dword [0x4f3c20]
lea ecx, [ecx + 0xd0]
call fcn.0046e8f0
push esi
push 0x4d40dc
call fcn.00479917
add esp, 8
push esi
call fcn.0040abe0
int3