Function at 0x401102
Capabilities:
Terminate process

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push ecx
sub esp, 0x94
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0
lea eax, [ebp - 0x7c]
mov dword [esp], eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov eax, dword [0x40a1bc]
test eax, eax
je 0x401158
lea eax, [ebp - 0x7c]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
call eax
sub esp, 4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], 0x18
mov eax, dword [ebp - 0x20]
mov eax, dword fs:[eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
jmp 0x4011a3
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jne 0x401192
mov dword [ebp - 0x14], 1
jmp 0x4011cd
mov dword [esp], 0x3e8
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], 0x40a21c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
lock cmpxchg dword [edx], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x401181
mov eax, dword [0x40a220]
cmp eax, 1
jne 0x4011e5
mov dword [esp], 0x1f
call fcn.00403e10
jmp 0x401218
mov eax, dword [0x40a220]
test eax, eax
jne 0x40120e
mov dword [0x40a220], 1
mov dword [esp + 4], 0x40c014
mov dword [esp], 0x40c00c
call sub.api_ms_win_crt_runtime_l1_1_0.dll__initterm
jmp 0x401218
mov dword [0x40a01c], 1
mov eax, dword [0x40a220]
cmp eax, 1
jne 0x401240
mov dword [esp + 4], 0x40c008
mov dword [esp], section..CRT
call sub.api_ms_win_crt_runtime_l1_1_0.dll__initterm
mov dword [0x40a220], 2
cmp dword [ebp - 0x14], 0
jne 0x40125d
mov dword [ebp - 0x34], 0x40a21c
mov dword [ebp - 0x38], 0
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
xchg dword [eax], edx
nop
mov eax, dword [entry1]
test eax, eax
je 0x401287
mov eax, dword [entry1]
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], 0
call eax
sub esp, 0xc
call fcn.00403257
mov dword [esp], 0x403374
mov eax, dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call eax
sub esp, 4
mov dword [0x40a1d4], eax
mov dword [esp], section..text
call sub.api_ms_win_crt_runtime_l1_1_0.dll__set_invalid_parameter_handler
call fcn.00402bf8
mov dword [0x40a218], 0x400000
call sub.api_ms_win_crt_runtime_l1_1_0.dll___p__acmdln
mov eax, dword [eax]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x401326
jmp 0x4012ea
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
cmp al, 0x22
jne 0x4012e6
cmp dword [ebp - 0x10], 0
sete al
movzx eax, al
mov dword [ebp - 0x10], eax
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
cmp al, 0x20
jg 0x4012cf
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x40130a
cmp dword [ebp - 0x10], 0
jne 0x4012cf
jmp 0x40130a
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x40131e
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
cmp al, 0x20
jle 0x401306
mov eax, dword [ebp - 0xc]
mov dword [0x40a214], eax
mov eax, dword [0x40a1bc]
test eax, eax
je 0x40134c
mov eax, dword [ebp - 0x50]
and eax, 1
test eax, eax
je 0x401342
movzx eax, word [ebp - 0x4c]
movzx eax, ax
jmp 0x401347
mov eax, 0xa
mov dword [section..data], eax
mov eax, dword [0x40a004]
mov dword [esp + 4], 0x40a008
mov dword [esp], eax
call fcn.004014a7
call fcn.00402a34
mov eax, dword [0x4061a8]
mov edx, dword [0x40a00c]
mov dword [eax], edx
mov ecx, dword [0x40a00c]
mov edx, dword [0x40a008]
mov eax, dword [0x40a004]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0040295c
mov dword [0x40a014], eax
mov eax, dword [0x40a018]
test eax, eax
jne 0x4013af
mov eax, dword [0x40a014]
mov dword [esp], eax
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
mov eax, dword [0x40a01c]
test eax, eax
jne 0x4013bd
call sub.api_ms_win_crt_runtime_l1_1_0.dll__cexit
mov eax, dword [0x40a014]
mov ecx, dword [ebp - 4]
leave
lea esp, [ecx - 4]
ret