Function at 0x41bcd0
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push esi
push edi
xor ebx, ebx
mov eax, dword [0x623464]
jmp 0x41bce0
mov ecx, dword [0x6235c9]
cmp ecx, ebx
je 0x41bd13
cmp ecx, 1
jne 0x41bdcf
cmp byte [0x6235bc], bl
jne 0x41bd89
mov edx, dword [eax + 0x128]
mov esi, dword [str.public]
cmp edx, dword [esi + 0x71c]
je 0x41bd89
mov eax, dword [0x6235ac]
push ecx
push 3
push eax
push 0x36bf
push 0xf3e
call fcn.00406f10
mov eax, dword [0x623464]
add esp, 0x14
cmp eax, ebx
je 0x41bdd6
mov dword [eax + 0xd4], 4
mov ecx, dword [0x623464]
mov eax, dword [ecx + 0xd4]
cmp eax, ebx
jle 0x41bd71
call fcn.004198d0
push eax
push 0x36be
push 0xa
call fcn.00406f10
add esp, 0xc
call fcn.00401670
jmp 0x41bdd6
jge 0x41bdd6
push 0x36be
push 2
call fcn.00406f10
add esp, 8
call fcn.00401670
jmp 0x41bdd6
mov dword [eax + 0x128], ebx
mov edx, dword [0x623464]
add edx, 0x11b
push edx
call fcn.0056b890
add esp, 4
cmp eax, ebx
je 0x41bdc9
mov eax, dword [0x6235ac]
push 3
push eax
push 0x36bf
push 0x72b
call fcn.00406f10
add esp, 0x10
call fcn.00401670
jmp 0x41bdd6
mov ecx, dword [0x6235c9]
dec ecx
mov dword [0x6235c9], ecx
mov eax, dword [0x67f908]
cmp byte [esp + 0x14], bl
jne 0x41bde6
mov eax, dword [0x67f90c]
push 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, ebx
je 0x41bf7c
cmp eax, 0x102
jne 0x41bfb9
push 1
push ebx
push 3
call fcn.0041a270
mov eax, dword [0x623464]
mov ecx, dword [eax + 0x145]
add esp, 0xc
cmp ecx, 1
ja 0x41be2c
jne 0x41be5b
cmp dword [eax + 0x14d], ebx
jbe 0x41be5b
push str.ctlck0
push 0x36b3
push 0x1b
call fcn.00406f10
push ebx
push 1
push ebx
push 3
call fcn.00419e90
push ebx
call fcn.0056bf10
add esp, 0x20
call fcn.00401670
mov eax, dword [0x623464]
cmp dword [eax + 0x145], 1
mov dword [eax + 0x14d], ebx
mov ecx, dword [0x623464]
mov dword [ecx + 0x149], ebx
mov edx, dword [0x623464]
mov dword [edx + 0x145], ebx
mov eax, dword [0x623464]
mov dword [eax + 0x141], ebx
mov eax, dword [0x623464]
mov edi, dword [eax + 0x265]
sete byte [esp + 0xf]
sub edi, 1
js 0x41bf3b
mov esi, edi
imul esi, esi, 0x134
lea esp, [esp]
mov ecx, dword [esi + eax + 0x269]
cmp ecx, 0xffffffff
je 0x41bf2c
mov edx, dword [0x6235b8]
push edx
push ecx
call fcn.0056c300
add esp, 8
test eax, eax
je 0x41bedb
call dword [sym.imp.MSVCR90.dll__errno]
cmp dword [eax], 3
je 0x41bf27
mov eax, dword [0x623464]
movzx ecx, byte [esi + eax + 0x29d]
add dword [eax + 0x141], ecx
mov eax, dword [0x623464]
movzx edx, byte [esi + eax + 0x29e]
add dword [eax + 0x145], edx
mov eax, dword [0x623464]
movzx ecx, byte [esi + eax + 0x29f]
add dword [eax + 0x149], ecx
mov eax, dword [0x623464]
movzx edx, byte [esi + eax + 0x2a0]
add dword [eax + 0x14d], edx
mov eax, dword [0x623464]
dec edi
sub esi, 0x134
cmp edi, ebx
jge 0x41beb0
cmp dword [eax + 0x145], ebx
jne 0x41bce0
cmp byte [esp + 0xf], bl
je 0x41bfa0
push str.ctlck2
push 0x36b3
push 0x1b
call fcn.00406f10
push ebx
push 1
push ebx
push 3
call fcn.00419e90
push ebx
call fcn.0056bf10
add esp, 0x20
call fcn.00401670
jmp 0x41bcd6
push 1
push ebx
push 3
call fcn.0041a270
mov eax, dword [0x623464]
add esp, 0xc
cmp byte [esp + 0x14], bl
je 0x41bfb1
cmp dword [eax + 0x145], ebx
jne 0x41bce0
cmp dword [eax + 0x14d], ebx
jne 0x41bce0
pop edi
pop esi
pop ebx
pop ecx
ret
cmp dword [eax + 0x145], ebx
jmp 0x41bfa6
push str.ctlck3
push 0x36b3
push 0x1b
call fcn.00406f10
push ebx
push 1
push ebx
push 3
call fcn.00419e90
push ebx
call fcn.0056bf10
add esp, 0x20
pop edi
pop esi
pop ebx
add esp, 4
jmp fcn.00401670