Function at 0x412baa
Capabilities:
Terminate process

Disassembly:
mov esi, 0x415558
mov dword [ebp - 0x14], esi
mov eax, dword [0x418ecc]
push eax
push 0
push 0x41
mov al, 3
call sub.KERNEL32.dll_OpenProcess
test edx, 0x1e7c
mov dword [0x41bb20], eax
mov esi, 0x415518
mov dword [ebp - 0x14], esi
push 0
push 0
push 0x1f0fff
push 0x41bb18
mov eax, dword [0x41bb1c]
push eax
mov eax, dword [0x418ec8]
push eax
mov eax, dword [0x41bb20]
push eax
mov al, 7
call sub.KERNEL32.dll_DuplicateHandle
test edx, 0x1e42
bswap eax
mov dword [0x423ce0], eax
mov eax, 9
mov dword [0x41bb10], eax
mov esi, 0x415778
mov dword [ebp - 0x14], esi
mov eax, dword [0x41bb10]
push eax
mov eax, dword [0x41bb20]
push eax
mov al, 2
call sub.KERNEL32.dll_TerminateProcess
test edx, 0x1e10
bswap eax
mov dword [0x423ce0], eax
mov esi, 0x415758
mov dword [ebp - 0x14], esi
push 0
push 1
mov eax, dword [0x41bb18]
push eax
mov al, 3
call sub.KERNEL32.dll_ReleaseSemaphore
test edx, 0x1dea
bswap eax
mov dword [0x423ce0], eax
mov esi, 0x4154e8
mov dword [ebp - 0x14], esi
mov eax, dword [0x41bb18]
push eax
mov al, 1
call sub.KERNEL32.dll_CloseHandle
test edx, 0x1dc8
bswap eax
mov dword [0x423ce0], eax
sub ecx, ecx
mov dword [0x41bb18], ecx
mov esi, 0x4154e8
mov dword [ebp - 0x14], esi
mov eax, dword [0x41bb20]
push eax
mov al, 1
call sub.KERNEL32.dll_CloseHandle
test edx, 0x1d9e
bswap eax
mov dword [0x423ce0], eax
sub ecx, ecx
mov dword [0x41bb20], ecx
cmp dword [esp + 4], 0xffffffb2
jne 0x412cc0
ret 4
mov ebx, dword [0x418f17]
mov dword [ebp - 0x1cc], ebx
mov edi, ebx
cmp byte [edi + 0x73], 1
je 0x412ce0
cmp byte [edi + 0x2f], 8
je 0x412d03
cmp byte [edi + 0x2f], 0x14
je 0x412d03
cmp byte [edi + 0x73], 2
jne 0x412cef
push 0xffffffffffffffb4
call 0x412eb9
jmp 0x412cf6
push 0xffffffffffffffb2
call fcn.00412baa
mov edi, dword [ebp - 0x1cc]
mov al, 2
mov byte [edi + 0x73], al
jmp 0x412d38
mov eax, 2
mov dword [edi + 0x90], eax
mov al, 1
mov dword [edi + 0x90], eax
sub ecx, ecx
mov dword [edi + 0x90], ecx
push 0xffffffffffffffb3
call 0x412d44
mov edi, dword [ebp - 0x1cc]
cmp byte [edi + 0x73], 1
je 0x412d38
push 0xffffffffffffffb2
call fcn.00412baa
mov ebx, dword [0x418d68]
mov dword [ebp - 0x1cc], ebx
mov esi, dword [ebp - 0x1cc]
mov edx, dword [esi + 0x30]
mov edi, 0x41bc55
mov esi, 0x4157b1
mov ecx, 0x1010009
call fcn.004242d0
mov ax, 1
mov word [0x418a7e], ax
mov word [0x418a82], ax
movsx edi, word [0x418a7e]
cmp byte [edi + 0x41bc4b], 0x20
je 0x412daf
movsx esi, word [0x418a7e]
movzx edi, word [0x418a82]
mov al, byte [esi + 0x41bc4b]
mov byte [edi + 0x41bc71], al
inc word [0x418a82]
cmp word [0x418a82], 0xa
ja 0x412dd4
cmp word [0x418a7e], 9
jl 0x412dcb
movzx edi, word [0x418a82]
mov al, 0
mov byte [edi + 0x41bc71], al
jmp 0x412dd4
inc word [0x418a7e]
jmp 0x412d71
mov esi, 0x415790
mov dword [ebp - 0x14], esi
push 0x41bc55
push 0
push 0x1f0003
mov al, 3
call sub.KERNEL32.dll_OpenEventA
test edx, 0x1c50
mov dword [0x41bc48], eax
cmp dword [0x41bc48], 0
je 0x412e64
mov esi, 0x4154e8
mov dword [ebp - 0x14], esi
mov eax, dword [0x41bc48]
push eax
mov al, 1
call sub.KERNEL32.dll_SetEvent
test edx, 0x1c27
bswap eax
mov dword [0x423ce0], eax
cmp dword [0x423ce0], 0x1000000
je 0x412e42
mov edi, dword [ebp - 0x1cc]
mov eax, 0x40000000
mov dword [edi + 0x90], eax
mov esi, 0x4154e8
mov dword [ebp - 0x14], esi
mov eax, dword [0x41bc48]
push eax
mov al, 1
call sub.KERNEL32.dll_CloseHandle
test edx, 0x1be8
bswap eax
mov dword [0x423ce0], eax
mov eax, 0x20000000
mov dword [0x423dbc], eax
mov esi, dword [ebp - 0x1cc]
mov edx, dword [esi + 0x90]
and dword [0x423dbc], edx
cmp dword [0x423dbc], eax
je 0x412eaf
mov eax, 0x40000000
mov dword [0x423dc4], eax
mov edx, dword [esi + 0x90]
and dword [0x423dc4], edx
mov edx, dword [0x423dc4]
cmp edx, eax
je 0x412eaf
mov edi, esi
mov al, 1
mov byte [edi + 0x73], al
cmp dword [esp + 4], 0xffffffb3
jne 0x412eb9
ret 4
push 0xffffffffffffffb2
call fcn.00412baa
cmp dword [esp + 4], 0xffffffb4
jne fcn.00412eca
ret 4