Function at 0x4130ae
Capabilities:
Terminate process

Disassembly:
sub esp, 0x1c
mov eax, dword [esp + 0x28]
mov dword [0x4bcb24], eax
mov dword [esp + 0x28], 0x19d7
push ebx
mov dword [esp + 4], 0x1872
push ebp
push esi
xor esi, esi
mov ebp, 0x4bc9f0
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], 0x1bb8
mov dword [esp + 0x24], 0x1b30
mov dword [esp + 0x14], 0x153c
mov dword [esp + 0x20], 0x15ed
mov dword [esp + 0x1c], 0x1c14
mov eax, dword [esp + 0x34]
add eax, 0xfffffbcc
push edi
cmp dword [esp + 0x1c], eax
jg 0x413267
mov eax, dword [0x4a67bc]
xor edx, edx
push 4
pop ecx
mov dword [0x4bc9fc], ecx
inc edx
mov dword [0x4bc9f8], 0x14
mov dword [0x4bca0c], 0x12
mov dword [eax + 0x20], esi
mov eax, dword [0x4a67bc]
mov dword [0x4bca24], edx
mov dword [0x4bca38], edx
mov dword [0x4bca34], 3
mov dword [eax + 0x5c], esi
mov eax, dword [0x4a67bc]
mov dword [0x4bca58], ecx
mov dword [0x4bca60], edx
mov dword [0x4bca68], esi
mov dword [0x4bca6c], edx
mov dword [eax + 0x90], edx
mov eax, dword [0x4a67bc]
mov dword [0x4bca90], esi
mov dword [0x4bca88], 0x3c
mov dword [eax + 0xac], 0x48
mov eax, dword [0x4a67bc]
mov dword [0x4bcab4], esi
mov dword [0x4bcac8], edx
mov dword [eax + 0xdc], 0x37
mov eax, dword [0x4a67bc]
mov dword [eax + 0xe0], esi
mov eax, dword [0x4a67bc]
mov dword [0x4bcad8], esi
mov dword [0x4bcae4], edx
mov dword [0x4bcaec], esi
mov dword [0x4bcafc], esi
mov dword [0x4bcaf8], 0x18
mov dword [eax + 0x110], 0x30
mov eax, dword [0x4a67bc]
mov dword [eax + 0x114], 0x1d
mov dword [0x4bcb08], edx
mov dword [0x4bcb10], esi
mov dword [0x4bcb14], edx
add dword [esp + 0x18], 0x41c
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
sub edi, 0x4dd
mov edx, dword [esp + 0x28]
sub esi, 0x600
mov ecx, dword [esp + 0x18]
xor edx, 0xbe
mov eax, dword [esp + 0x38]
xor ecx, 0x1b2
xor eax, 0x2af
push eax
push ecx
push edx
push esi
push ebp
push edi
call fcn.00412dbb
add esp, 0x18
mov dword [esp + 0x1c], eax
add dword [esp + 0x14], 0xfffffa35
mov eax, dword [esp + 0x20]
add eax, 0xfffff928
cmp dword [esp + 0x38], eax
je 0x4132d2
add dword [esp + 0x24], 0x190
mov eax, dword [0x4bcab4]
xor eax, dword [0x4bcac8]
add eax, 5
imul eax, dword [0x4bcac4]
mov dword [0x4bcac4], eax
add dword [esp + 0x38], 0x1b7
add dword [esp + 0x24], 0x3fb
add dword [esp + 0x1c], 0x15
add dword [esp + 0x1c], 0xffffff6c
add dword [esp + 0x14], 0x36b
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
add dword [esp + 0x28], 0xfffffabd
jmp 0x413471
mov ecx, dword [0x4bca5c]
imul ecx, dword [0x4bcb04]
mov eax, dword [esp + 0x14]
imul eax, ecx
cmp dword [esp + 0x38], eax
jbe 0x413471
imul eax, dword [esp + 0x28], 0x2541b70
or dword [0x4bca04], eax
mov eax, dword [esp + 0x38]
or eax, dword [0x4bcaec]
or eax, dword [0x4bcb10]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov eax, dword [0x4bcb14]
or eax, dword [0x4bca48]
mov ecx, dword [0x4a67bc]
and eax, dword [0x4bcad4]
sub dword [ecx + 0x98], eax
mov eax, dword [esp + 0x38]
add eax, 0x18ea
cmp dword [esp + 0x38], eax
jle 0x413471
mov ecx, dword [esp + 0x14]
mov eax, dword [0x4a67bc]
sub ecx, dword [eax + 0x48]
mov eax, dword [esp + 0x10]
sub ecx, eax
mov edi, dword [esp + 0x38]
mov eax, dword [0x4a67bc]
sub edi, 0x1b78
or dword [0x4bcacc], ecx
mov esi, dword [esp + 0x38]
mov ecx, dword [esp + 0x20]
mov eax, dword [eax + 0xe4]
add eax, dword [0x4bca90]
imul ecx, dword [0x4bca98]
mov edx, dword [0x4bcafc]
imul esi, eax
add edx, 0x18ea
mov eax, dword [esp + 0x18]
add eax, dword [0x4bca38]
push eax
push ebp
push ecx
push edx
push esi
push edi
call fcn.00414af0
mov dword [esp + 0x3c], eax
add esp, 0x18
mov eax, dword [esp + 0x14]
mov ecx, dword [0x4bcadc]
sub ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov ebx, dword [esp + 0x18]
mov eax, dword [0x4bcae8]
or eax, dword [0x4bcaec]
mov esi, dword [esp + 0x10]
or ebx, dword [0x4bca34]
imul edi, eax, 0x15ed
sub ebx, 0x1bb8
mov eax, dword [0x4bc9fc]
add eax, 0x153c
or esi, eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
sub eax, dword [0x4bcac8]
mov ecx, dword [0x4a67bc]
and edx, eax
mov eax, dword [esp + 0x18]
and eax, dword [0x4bcb04]
push eax
push ecx
push edx
push esi
push edi
push ebx
call fcn.00413b8f
mov dword [esp + 0x34], eax
mov edi, dword [esp + 0x38]
and edi, dword [esp + 0x50]
mov esi, dword [esp + 0x3c]
mov eax, dword [0x4a67bc]
mov edx, dword [esp + 0x40]
or edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x38]
and esi, dword [eax + 0x10c]
mov eax, dword [0x4a67bc]
imul edi, dword [0x4bcac8]
sub esi, dword [0x4bcaf8]
sub ecx, dword [eax + 0x12c]
push ecx
push ebp
push edx
push esi
push edi
call fcn.00413f5b
add esp, 0x2c
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffac7
cmp dword [esp + 0x14], eax
jle 0x413616
mov eax, dword [esp + 0x20]
mov esi, 0xe0c
xor eax, 0xa2b
cmp dword [esp + 0x10], eax
je 0x413564
mov eax, dword [esp + 0x10]
xor eax, 0xe4d
cmp dword [esp + 0x38], eax
jl 0x413518
add dword [esp + 0x10], 0xfffffd7b
add dword [esp + 0x10], 0xffffff4f
xor dword [esp + 0x1c], 0xcf3
mov eax, dword [0x4bcac4]
mov dword [0x4bca94], eax
xor dword [esp + 0x10], esi
mov eax, dword [esp + 0x20]
mov dword [esp + 0x20], eax
add dword [esp + 0x14], 0xfffffbe4
xor dword [esp + 0x24], 0x25e
add dword [esp + 0x14], 0x67
xor dword [esp + 0x18], 0xf67
add dword [esp + 0x38], 0xfffff996
mov eax, dword [0x4bcac8]
cmp eax, dword [0x4bca90]
je 0x413564
mov eax, dword [0x4bc9f0]
sub dword [0x4bca94], eax
jmp 0x413564
mov eax, dword [0x4bca98]
imul eax, eax
xor eax, dword [0x4bcb00]
cmp dword [0x4bcae8], eax
jbe 0x413564
mov eax, dword [esp + 0x18]
sub eax, dword [0x4bc9f8]
or dword [0x4bcad8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, dword [0x4a67bc]
mov eax, dword [esp + 0x10]
and eax, dword [ecx + 0x20]
sub dword [0x4bcaf8], eax
mov eax, dword [esp + 0x14]
xor eax, 0x1b78
mov dword [esp + 0x28], eax
xor dword [esp + 0x20], 0x9ac
xor dword [esp + 0x10], esi
add dword [esp + 0x10], 0x652
xor dword [esp + 0x18], 0xd87
mov ebx, dword [esp + 0x20]
mov edi, dword [esp + 0x1c]
add ebx, 0x5c0
mov esi, dword [esp + 0x1c]
add edi, 0x1e1
mov edx, dword [esp + 0x38]
add esi, 0x1a1
mov ecx, dword [esp + 0x18]
xor edx, 0xdce
mov eax, dword [esp + 0x24]
sub ecx, 0x43b
sub eax, 0x2e7
push eax
push ebp
push ecx
push edx
push esi
push edi
push ebx
call fcn.00405b32
mov dword [esp + 0x38], eax
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
sub edi, 0x2a
mov edx, dword [esp + 0x34]
sub esi, 0x411
mov eax, dword [esp + 0x40]
xor edx, 0x7ac
mov ecx, dword [0x4a67bc]
xor eax, 0xc1a
push eax
push ecx
push edx
push esi
push edi
call fcn.00413f5b
mov dword [esp + 0x44], eax
add esp, 0x30
add dword [esp + 0x38], 0x6f0
add dword [esp + 0x10], 0x86
push dword [0x4bcae0]
call dword [sym.imp.KERNEL32.dll_ExitProcess]