Function at 0x41a8f0
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x60043b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push ebp
push esi
lea eax, [esp + 0x18]
push edi
xor ebx, ebx
push eax
mov dword [esp + 0x18], ecx
mov byte [ecx + 8], 0
mov dword [ecx + 0xc], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x80]
mov edx, dword [esp + 0x1c]
push ebx
mov edi, dword [esi + 0x28]
mov ebp, dword [esi + 0x2c]
push 0xa
push ecx
push edx
call fcn.00510160
push ebx
push 0x3e8
push edx
push eax
call fcn.00510160
sub eax, edi
mov ecx, esi
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
push 0x41afb0
sbb edx, ebp
push str.DURATION
mov dword [esp + 0x34], edx
call fcn.004de130
mov ecx, dword [0x6abf00]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
push ebx
push 0x3e8
push edx
push eax
mov dword [esp + 0x88], ebx
call fcn.00510160
push eax
lea ecx, [esp + 0x84]
push 0x697068
push ecx
call fcn.004f59f0
mov eax, dword [eax]
add esp, 0xc
mov ecx, esi
push ebx
push eax
push str.DURATIONSEC
call fcn.004de040
lea ecx, [esp + 0x80]
mov dword [esp + 0x78], 0xffffffff
call fcn.005dd1b0
lea ecx, [esp + 0x5c]
call fcn.0041c020
mov dword [esp + 0x5c], 0x62ae40
lea ebp, [esi + 4]
lea ecx, [esp + 0x5c]
push ebp
mov dword [esp + 0x7c], 1
mov dword [esp + 0x5c], 0x62ae3c
call fcn.0041c040
lea edx, [esp + 0x58]
mov dword [esp + 0x78], 2
push edx
call fcn.0044ed60
mov edi, dword [0x6bb5cc]
add esp, 4
cmp edi, ebx
je 0x41aa56
mov eax, edi
mov edi, dword [edi]
lea ebx, [eax + 8]
mov ecx, ebx
call fcn.0043ff00
test al, al
je 0x41aa50
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x41aa50
push 0
push 0
push 1
mov ecx, ebx
call fcn.0043fe70
test edi, edi
jne 0x41aa2a
xor ebx, ebx
cmp dword [esi + 0x4c], ebx
je 0x41ad57
lea ecx, [esp + 0x44]
call fcn.0041c020
mov dword [esp + 0x44], 0x62ae40
push ebp
lea ecx, [esp + 0x48]
mov byte [esp + 0x7c], 3
mov dword [esp + 0x44], 0x62ae3c
call fcn.0041c040
lea eax, [esp + 0x40]
mov byte [esp + 0x78], 4
push eax
call fcn.0044ed60
add esp, 4
mov ecx, 0x6b3dfc
push ebx
push str.MIRCAwayMsgEnable
push str.Settings
call fcn.00405180
test eax, eax
je 0x41aabf
push str._away
lea ecx, [esi + 0x48]
call fcn.0044e760
push ebx
push str.MIRCReturnMsgEnable
push str.Settings
mov ecx, 0x6b3dfc
call fcn.00405180
test eax, eax
je 0x41abcc
push ebx
push str.MIRCChannelType
push str.Settings
mov ecx, 0x6b3dfc
call fcn.00405180
lea ecx, [esp + 0x2c]
mov edi, eax
call fcn.004046f0
mov dword [esp + 0x2c], 0x628d34
push 0
lea ecx, [esp + 0x84]
push 1
mov bl, 5
push ecx
mov ecx, 0x6b3dfc
mov byte [esp + 0x84], bl
call fcn.0040fea0
push ecx
mov byte [esp + 0x84], 6
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.005dcf25
lea ecx, [esp + 0x38]
call fcn.004f5c50
lea ecx, [esp + 0x80]
mov byte [esp + 0x78], bl
call fcn.005dd1b0
xor edx, edx
cmp edi, 2
sete dl
xor eax, eax
cmp edi, 1
setl al
dec eax
lea ecx, [esp + 0x2c]
and eax, ecx
push edx
push eax
lea edx, [esp + 0x88]
push 1
push edx
mov ecx, 0x6b3dfc
call fcn.0040fd60
push ecx
mov byte [esp + 0x88], 7
mov edi, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.005dcf25
push edi
lea ecx, [esp + 0x58]
call fcn.004ddb80
lea ecx, [esi + 0x48]
call fcn.0044e800
lea ecx, [esp + 0x80]
mov byte [esp + 0x78], bl
call fcn.005dd1b0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x78], 4
call fcn.00404a20
xor ebx, ebx
push ebx
push str.MIRCNickEnable
push str.Settings
mov ecx, 0x6b3dfc
call fcn.00405180
test eax, eax
je 0x41ac44
mov ecx, dword [esi + 0x44]
lea eax, [esi + 0x44]
cmp dword [ecx - 8], ebx
je 0x41ac44
push eax
lea ecx, [esp + 0x14]
call fcn.005dcf25
push eax
lea edx, [esp + 0x84]
push str._tnick
push edx
mov byte [esp + 0x84], 8
call fcn.005dd46d
mov eax, dword [eax]
lea ecx, [esi + 0x48]
push eax
mov byte [esp + 0x7c], 9
call fcn.0044e760
lea ecx, [esp + 0x80]
mov byte [esp + 0x78], 8
call fcn.005dd1b0
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 4
call fcn.005dd1b0
push ebx
push str.MIRCExtraReturnEnable
push str.Settings
mov ecx, 0x6b3dfc
call fcn.00405180
test eax, eax
je 0x41ad49
lea ecx, [esp + 0x2c]
call fcn.00405bc0
mov dword [esp + 0x2c], 0x62ae30
lea eax, [esp + 0x80]
mov ecx, 0x6b3dfc
push eax
mov byte [esp + 0x7c], 0xa
call fcn.0040ffd0
push ecx
mov byte [esp + 0x7c], 0xb
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.005dcf25
lea ecx, [esp + 0x30]
call fcn.004f6690
lea ecx, [esp + 0x80]
mov byte [esp + 0x78], 0xa
call fcn.005dd1b0
mov eax, dword [esp + 0x34]
xor edi, edi
cmp eax, ebx
jle 0x41ad13
lea ebp, [esi + 0x48]
push edi
lea ecx, [esp + 0x30]
call fcn.0041be90
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.005dcf25
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x48]
call fcn.004ddb80
mov eax, dword [eax]
mov ecx, ebp
push eax
mov byte [esp + 0x7c], 0xc
call fcn.0044e760
lea ecx, [esp + 0x80]
mov byte [esp + 0x78], 0xa
call fcn.005dd1b0
mov eax, dword [esp + 0x34]
inc edi
cmp edi, eax
jl 0x41acc2
mov dword [esp + 0x2c], method.CGopherLocator.virtual_0
mov edi, dword [esp + 0x30]
mov byte [esp + 0x78], 0xd
cmp edi, ebx
je 0x41ad49
cmp eax, ebx
je 0x41ad40
lea ebp, [eax]
push ebx
mov ecx, edi
call fcn.004927d0
add edi, 4
dec ebp
jne 0x41ad2e
mov edi, dword [esp + 0x30]
push edi
call fcn.005dd7a4
add esp, 4
lea ecx, [esp + 0x40]
mov byte [esp + 0x78], 2
call fcn.004ddaf0
mov dword [esp + 0x30], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x2c], 0x62975c
lea edx, [esp + 0x2c]
mov ecx, 0x6b3dfc
push edx
mov byte [esp + 0x7c], 0xe
call fcn.004057e0
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], ebx
cmp eax, ebx
jle 0x41ae6c
mov dword [esp + 0x80], ebx
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x80]
lea edi, [eax + ecx]
mov edx, dword [edi + 8]
lea ecx, [edi + 8]
cmp dword [edx - 8], ebx
je 0x41add5
push ebx
call fcn.00404600
sub esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00405b90
lea ecx, [esi + 0x18]
call fcn.004dba60
cmp eax, 0xffffffff
je 0x41ae46
test byte [edi + 0xc], 2
je 0x41ae46
push ecx
lea eax, [edi + 4]
mov ebp, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.005dcf25
push ebp
mov ecx, esi
call fcn.004ddb80
push ecx
mov byte [esp + 0x80], 0xf
mov ecx, esp
mov dword [esp + 0x24], esp
push edi
call fcn.005dcf25
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
call fcn.0041a0a0
push ecx
lea edx, [edi + 0x10]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
mov byte [esp + 0x8c], 0xe
call fcn.0041a0e0
mov al, byte [edi + 0xc]
mov ecx, 0x6bb390
shr al, 2
and al, 1
push eax
call fcn.0043d170
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x34]
inc eax
add edx, 0x14
cmp eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x80], edx
jl 0x41ad9a
mov eax, dword [esi + 0x38]
xor edi, edi
cmp eax, ebx
jle 0x41ae8d
mov ebp, dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [esi + 0x34]
push ebx
mov edx, dword [ecx + edi*4]
push edx
call ebp
mov eax, dword [esi + 0x38]
inc edi
cmp edi, eax
jl 0x41ae7b
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x30]
call fcn.005277f0
mov dword [esp + 0x2c], 0x629768
mov esi, dword [esp + 0x30]
cmp esi, ebx
je 0x41aefa
mov edi, dword [esp + 0x34]
mov dword [esp + 0x80], esi
cmp edi, ebx
je 0x41aef1
mov bl, 0x10
lea ecx, [esi + 8]
mov byte [esp + 0x78], 0x12
call fcn.005dd1b0
lea ecx, [esi + 4]
mov byte [esp + 0x78], 0x11
call fcn.005dd1b0
mov ecx, esi
mov byte [esp + 0x78], bl
call fcn.005dd1b0
add esi, 0x14
dec edi
mov dword [esp + 0x80], esi
jne 0x41aeb9
mov esi, dword [esp + 0x30]
xor ebx, ebx
push esi
call fcn.005dd7a4
add esp, 4
push ebx
lea eax, [esp + 0x1c]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x84], 2
call fcn.004f5090
mov esi, eax
mov bl, 0x13
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], bl
call fcn.0041a0a0
mov ecx, dword [esi]
mov byte [esp + 0x78], 0x14
push ecx
push str.Return:__s
push eax
call fcn.004f59f0
add esp, 8
mov ecx, esp
mov dword [esp + 0x84], esp
push eax
call fcn.005dcf25
mov ecx, dword [esp + 0x18]
call fcn.0041bca0
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], bl
call fcn.005dd1b0
lea ecx, [esp + 0x18]
mov byte [esp + 0x78], 2
call fcn.005dd1b0
call fcn.005ddc59
test eax, eax
je 0x41af7f
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x41af81
xor eax, eax
mov ecx, eax
call fcn.00457480
lea ecx, [esp + 0x58]
mov dword [esp + 0x78], 0xffffffff
call fcn.004ddaf0
mov ecx, dword [esp + 0x70]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x6c
ret 4