Function at 0x413a6b
Capabilities:
Terminate process

Disassembly:
push 0x10
mov eax, 0x569f24
call fcn.005110bc
mov ebx, ecx
mov esi, dword [ebp + 8]
cmp esi, 0x511
jne 0x413ab8
mov eax, dword [ebx + 0xc4]
test eax, eax
je 0x413aac
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x413aac
mov eax, dword [ebx + 0xc4]
push 0
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov byte [ebx + 0x9c], 0
jmp 0x413d80
cmp esi, 0x500
je 0x413d6c
cmp esi, 0x501
je 0x413d6c
cmp esi, 0x502
je 0x413d6c
cmp esi, 0x503
je 0x413d6c
mov eax, 0x505
cmp esi, eax
je 0x413d6c
cmp esi, 0x504
je 0x413d6c
cmp esi, 0x509
jne 0x413b1d
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x413d7a
cmp esi, 0x50a
jne 0x413c71
cmp dword [ebx + 0x17c], 0
jne 0x413d80
call fcn.004165e2
mov eax, dword [ebx + 4]
push eax
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x1c], eax
and dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ecx], eax
mov ecx, ebx
call fcn.00413384
mov ecx, ebx
call fcn.00415a5b
mov eax, dword [0x5dd2c4]
cmp dword [eax - 0xc], 0
je 0x413bc5
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [0x5dd2c4]
mov dword [ebp - 0x14], eax
cmp dword [edi - 4], 1
jle 0x413b9b
push dword [edi - 0xc]
mov ecx, 0x5dd2c4
call fcn.00409175
mov edi, dword [0x5dd2c4]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, ebx
call fcn.004159ab
mov edx, eax
mov ecx, edi
call fcn.0040d58f
pop ecx
push 0xffffffffffffffff
mov ecx, 0x5dd2c4
call fcn.00419a76
push dword [ebp - 0x14]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [ebx + 0x180], 6
jne 0x413c3b
cmp dword [ebx + 0x188], 0
je 0x413c3b
cmp dword [ebx + 0x184], 0
je 0x413c3b
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
mov ecx, ebx
push edi
call fcn.004159ab
lea ecx, [ebx + 0x188]
mov esi, eax
call fcn.00407ddb
mov edx, esi
mov ecx, eax
call fcn.0040d58f
pop ecx
push 0xffffffffffffffff
lea ecx, [ebx + 0x188]
call fcn.00419a76
push 0
push 1
push 0x2421
push dword [ebx + 0x184]
call dword [sym.imp.USER32.dll_PostMessageW]
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [ebp + 8]
jmp 0x413c5d
mov eax, dword [0x5cbd88]
test eax, eax
jne 0x413c4d
call fcn.0041290c
test eax, eax
je 0x413c5d
push 0
push 1
push 0x7936
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x413d35
cmp esi, 0x506
jne 0x413cfe
cmp dword [ebx + 0x18c], eax
jne 0x413ca8
push dword [ebx + 0xd0]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x413ca8
push 0
push dword [ebx + 0xd0]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x413d80
lea edi, [ebx + 0xb0]
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 2
test eax, eax
je 0x413d7a
mov ecx, dword [edi + 4]
sub ecx, dword [edi]
mov eax, dword [edi]
sar ecx, 2
dec ecx
mov dword [ebp + 8], ecx
mov edx, dword [eax + ecx*4]
test edx, edx
je 0x413cde
mov eax, dword [edx]
mov ecx, edx
push 1
call dword [eax]
mov ecx, dword [ebp + 8]
mov eax, dword [edi]
lea eax, [eax + ecx*4]
mov ecx, edi
push eax
lea eax, [ebp + 8]
push eax
call fcn.004170eb
push 1
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x413d7a
cmp esi, 0x508
jne 0x413d3f
call fcn.004165e2
mov eax, dword [ebx + 4]
push eax
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x1c], eax
push ecx
mov ecx, esp
mov dword [ebp - 4], 1
mov dword [ecx], eax
mov ecx, ebx
call fcn.00413384
mov ecx, ebx
call fcn.00415184
lea ecx, [ebp - 0x1c]
call fcn.0040e394
jmp 0x413d7a
cmp esi, 0x510
je 0x413d57
cmp esi, 0x50e
je 0x413d57
cmp esi, 0x50f
jne 0x413d7a
mov dword [ebx + 0x18c], esi
call fcn.00414582
push esi
mov ecx, ebx
call fcn.004168d9
jmp 0x413d7a
call fcn.004165e2
push ecx
push esi
mov ecx, ebx
call fcn.00415d3d
mov dword [ebx + 0x18c], esi
call fcn.00511085
ret 4