Function at 0x413290
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x45117b
push eax
mov dword fs:[0], esp
sub esp, 0xb04
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call fcn.00411b20
test al, al
je 0x4132c1
xor al, al
jmp 0x413bb6
mov ecx, ebp
call fcn.004101f0
lea ecx, [ebp + 0x10]
call fcn.0040f270
mov esi, dword [esp + 0xb24]
push 1
push esi
lea ecx, [esp + 0x4fc]
call fcn.00404870
xor ebx, ebx
lea ecx, [esp + 0x4f4]
mov dword [esp + 0xb1c], ebx
call fcn.004048e0
test al, al
jne 0x41331d
lea ecx, [esp + 0x4f4]
mov dword [esp + 0xb1c], 0xffffffff
call fcn.004041e0
xor al, al
jmp 0x413bb6
push ebx
lea ecx, [esp + 0x20]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ebx
call fcn.00403a00
mov ecx, 0x11f
xor eax, eax
lea edi, [esp + 0x78]
mov dword [esp + 0x74], ebx
rep stosd dword es:[edi], eax
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x500]
mov byte [esp + 0x23], bl
call fcn.004049e0
test al, al
je 0x413b7f
sub esp, 0x1c
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ebp, eax
mov esi, 0x4623b6
mov eax, dword [esi + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x78]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov eax, dword [esi + 0x78]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
mov dword [esp], ebx
mov eax, dword [esi + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
mov eax, dword [esi + 0x20]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x2c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0xc], eax
xor edx, edx
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x10]
push edx
push edx
push edx
push 1
mov eax, dword [esi + 0x3c]
push eax
call ecx
mov ecx, eax
test ecx, ecx
jne 0x413411
push 0x10
mov eax, dword [esi + 0x5c]
mov esi, dword [esi]
push esi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov edi, dword [esp + 0x14]
push eax
mov edx, dword [esi + 0x74]
mov esi, dword [esi + 0x24]
push esi
push eax
push eax
push edx
push ecx
mov esi, 0x4623b6
call edi
mov dword [esp + 8], eax
cmp dword [esp + 8], 0
je 0x4133f8
mov ecx, dword [esp + 0xc]
lea eax, [esp + 4]
push eax
mov edx, dword [esi + 0x78]
push edx
push ebx
push dword [esp + 0x14]
call ecx
jmp 0x41346e
mov edx, dword [esp + 4]
test edx, edx
jbe 0x413472
mov eax, dword [esp]
add eax, edx
lea edx, [esp + 4]
mov edi, dword [edx + 8]
mov dword [esp], eax
push edx
mov ecx, dword [esi + 0x78]
push ecx
push eax
push dword [esp + 0x14]
call edi
test eax, eax
jne 0x41344b
cmp ebx, dword [esp]
je 0x4133f8
mov eax, dword [ebx]
xor edx, edx
mov ecx, dword [esi + 0x34]
mov edi, dword [esp]
mov ebx, dword [ecx + edx]
add ebx, eax
mov dword [edx + edi], ebx
add edx, 4
cmp edx, 0x20
jl 0x41347b
push dword [esp]
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, eax
test ecx, ecx
je 0x4133f8
mov edx, dword [esi + 0x78]
mov eax, dword [esi + 8]
push eax
push 0x1000
push edx
push 0
call ecx
mov edx, dword [esi + 0x48]
push 8
pop ecx
add ebp, edx
mov ebx, dword [ebp + 4]
mov edx, dword [ecx + ebp]
add edx, ebx
mov dword [ecx + eax], edx
add ecx, 4
cmp ecx, 0x8000
jl 0x4134c4
mov edx, dword [esi + 0x28]
mov dword [eax + 8], edx
mov ebp, dword [eax + 0xc]
add ebp, eax
mov ecx, dword [esi + 0x1c]
add ebp, ecx
mov ebx, dword [esi + 0x1c]
add eax, ebx
push eax
call ebp
pop eax
jmp 0x4133f8
lea ecx, [esp + 0x4f4]
call fcn.004048f0
mov eax, dword [esp + 0xb28]
mov ecx, ebp
push eax
push esi
call fcn.00412850
lea ecx, [esp + 0x4f4]
mov bl, al
mov dword [esp + 0xb1c], 0xffffffff
call fcn.004041e0
mov al, bl
mov ecx, dword [esp + 0xb14]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xb10
ret 8