Function at 0x4312be
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 8], 0x4c9950
and dword [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
push eax
push 0
call fcn.0043122c
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
push 0
mov eax, dword [ebp - 8]
push dword [eax + 0x34]
call fcn.0043122c
pop ecx
pop ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0
je 0x431378
push dword [ebp - 0x30]
call fcn.00431050
pop ecx
mov byte [ebp - 1], al
movzx eax, byte [ebp - 1]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ecx]
cmp eax, ecx
je 0x431339
movzx eax, byte [ebp - 1]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ecx + 1]
cmp eax, ecx
je 0x431339
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [ebp - 0x30]
call fcn.004311ac
pop ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
cmp edx, dword [ecx + eax]
je 0x431378
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
cmp edx, dword [ecx + eax]
je 0x431378
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
and dword [ebp - 0x20], 0
and dword [ebp - 0x38], 0
mov dword [ebp - 0xc], 4
and dword [ebp - 0x10], 0
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 8]
push dword [eax + 0x1c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x18], eax
and dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
and dword [ebp - 0x24], 0
and dword [ebp - 0xc], 0
jmp 0x4313c0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x10]
cmp dword [ebp - 0xc], eax
jae 0x4313e4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x20]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + ecx]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0xc]
mov dword [ecx], eax
jmp 0x4313b4
push dword [ebp - 0x20]
push dword [ebp - 0x3c]
call fcn.004310bd
pop ecx
pop ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x431404
jmp 0x4314b7
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
mov eax, dword [ebp - 8]
push dword [eax + 8]
push dword [ebp - 0x10]
call dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x24]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], 8
jmp 0x43144d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
cmp dword [ebp - 0xc], eax
jae 0x43146d
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xc]
mov eax, dword [eax]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0xc]
mov dword [ecx], eax
jmp 0x431441
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x2c]
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 8], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
mov eax, dword [ebp - 8]
push dword [eax + 8]
push dword [ebp - 0x10]
call dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
push dword [ebp - 0x10]
call dword [ebp - 0x44]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]