Function at 0x404f30
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], ecx
mov dword [ebp - 0x18], str.slPj0nPxSRzdykR96hjV5IWywe5a4Gjfa5fwl0iCmIe05KY0qEoRva2222pcrmXNqMS0KnAnwMgKt3W1G75IS3mUqmtCh0VtR170zEk83Rl6P2QQYyFnrLO2C6Angsk8yuEsnYbFxsWPW4j2Q7OkALoztSTAL4Nt2hxXUxS8BPnRj1wYkerIUs67NaouWJC9hD9J9vh2YuXRCWcYCKr3cF14JBt8UivSMrvgXyk0mPztpUFxu9ou1REtxUEOE3Q5Eef4g6RGLFDJrrTRchffyNtPLdTbnycaxfs2iTwR28g6cMFM2FTMIMxb6HQcgAGPmQlXpxsg946y1I2n02kIK6CplmConmM7EA5IlvDph1gFcoi6GgsHn0kerPRSFwaoAgSgbhIGFfpCRt3Jp84e2A1McF76xls61HXdifiDxfBBvOlyk9hRi1s5CvYhHGGBQEXl4QB4x8ey1EBHTpcw8ol2Vqnq29bb4S8G4eGApuv7AAlTzS2cNV4iXrIM8CXXMQ4a9qacrz2dabBnD0iac2XDWxjsILCH2tCXMIEUizcANDXQiBI6SitVtD7kJVfFF5WE5yNU2D7MIVxGE4kV2wY6QMaAreQAMAMaR2T8jOtiGc4oj3GW34m8isYfc7fDKRA3owJI9niRtDm3q2d3LdmH39JjPmNbFyvBvtRwmymcKSc1hJycSibW7DNhq5rMTdyMxsnKt0h82hCywiJsTOKt8VuMomUTT3icGrB0HzCxc5wIWxjrgLjikcbwzcELg0KW6Ra7Sj2quAssu1lkfzlGCRgfcyUshqhVRQFomvtdcHlaAVXn59Q94QMjAkmHfLGD5d2bRecP5lLQs6BoSr72jUcwxL6IcTi6wkfkqHDLYOzREeAHsyGr9YAhbY0YFpzn2ePiPYnMWiNyaat5V76TB1rIEsTABRGpzGQbPyhUE7BioGC7BsnwBvrjITEJlNEVg6PB3mpzsO5z7y7dTC7YVozRLd9GBFbymBQOMJ4r5McC3JVs4OgrMQzdKQOBaUqO20HI24N4KbdY0iPKBGzdDweR8XgJGGqBFMCYsojbyFg37JEucLOR9vSwlMpqQDBAitFAW4AtjncT9Mmf0JJ2OjkWLVPeNqvcl42nadIloWJ48rwKcmtiWduGgDVaVYg1fzkavOWSGDvxm7l0WrzcAnqTdF2FWAESr8uHbGFTyg1JfdvRT5RCGi17aIV6wmCEiGbd6QjJ2so1pQHY2dcD81W6IhusS6cRr8H4P11S74KCFvBCUl0YPkJrxUM22YEFDI2796DMuzppnhuzgwzrLyLtfSUFYsRRCLq4quSyybbPGml7pJD9fDDxrOUWy2qKNpDRqcIjJtO6B8P4fQqpUa82SJMfrpC84IOMaRiayp4dX6nJfCzSKwim70nQnwtm3PQoHieuXn9GbVWft7J2c8OoIcmrg5A2fChO4wOlGEPLdMfWf4hTW1CHWH1HwnKaLR22whWuwWK5QLD6B451FWvFxEU35mJVikQ9CBIJsAanCTW2fMkCfIm4e0x2xwSnX4MX7yiksAbvKEx1g9uxLa91Eo6leT4snmiSUeVOnKJub4nbekpfy6R6qhIOd0JMVi3R06y19Jw3rNhVvdwi7RPbtAqkzVIj0el7oNHnldc4i6Ml0Nh6l7QeGlpw98T9jmKDfXP7700cpKHDNTmM8eFhOaPQ59pLuNiBH899wt1MNKfEkqLdgXkosTs4LRYPeMr7EI0aeveCJneoYmTefR1iK30tRt1cdB2eMWRujEvULg84eNwBpl1skBYKkvzU7ChWJ8RmxRpjJYpRM5FW58r8kM4Bn5ghnsr4LH3f59I1wfRRhkRxpm3i9G69XjG6v5jqu1ET0p38UrNAcKw1vQx7iqc2f7FHP4qffhyS7WDfHVHPpdH8UTqt9eD10I5YCYBdmqqVRwjN7im33yy0dC3sLWhMqzbqjtOo7dJTttrcRoWknCi9SRydYQzScrvey95hI7PNOA3F
mov dword [ebp - 0x1c], str.aBqoPXk6pgowiyigbSvlDKLGYQvC0XQwX86FwtP3SxWUyN93NMYWbVgNahwEtkL8DQINfErRkaNUnAoHD4CtI4k9KD4lwGL3v9FBrHsc5HeJbVFpYRsTwqNSK1LO8YMKfn7KKwKambJT37Fqqhg2203G8SzxXkIOWRWGSHHxj69hHB552kBvOwXRFeEij2yO6STJKycEUmw5v3ALe0MOymVi6rrb6AetyBn1n5Eo6pcPrkW0NfTd8ERo1pEERKJzAfCuU0YhD3Jn9vSkXWMQucedTsitRr4WOSBWGHCkfA3SUS9okX5GNvUk8lzIVLeykC5Y8kwdsLeTGUvVQ59sjNqVYi1Py5gnvuy4OGa8LOFdYhKJV59Oq0ILC0pzQTdwdrjswivSwn221SGF
push 0x10
push 0
push 0x455720
call fcn.0040ab40
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
call fcn.004039e0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x404f74
xor al, al
jmp 0x40507a
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x404f99
xor al, al
jmp 0x40507a
mov ecx, dword [ebp - 4]
call fcn.004038a0
test eax, eax
jne 0x404fb3
xor al, al
jmp 0x40507a
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x24], str.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
cmp dword [ebp - 0xc], 0
jne 0x404fed
push 0
mov ecx, dword [0x455720]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x40507a
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 4]
call fcn.00405540
mov ecx, dword [ebp - 8]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00406650
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x405025
push 0
mov edx, dword [0x455720]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x40507a
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x34]
call edx
movzx eax, al
test eax, eax
jne 0x405051
xor al, al
jmp 0x40507a
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.00405990
movzx edx, al
test edx, edx
jne 0x405078
push 0
mov eax, dword [0x455720]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor al, al
jmp 0x40507a
mov al, 1
mov esp, ebp
pop ebp
ret 4