Function at 0x4f5902
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60bdf2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
call fcn.004f5880
mov dword [0x81fe68], eax
mov dword [0x81fe6c], edx
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
call fcn.004e5fd2
add esp, 4
mov byte [ebp - 0x1c], al
push 0
push 0
push 0x7ee
call fcn.004e5fa0
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x24]
jne 0x4f5962
cmp dword [ebp - 0x18], 0
jne 0x4f59c0
mov dword [0x81fe64], 0
mov byte [ebp - 0x1c], 0
mov edx, 1
test edx, edx
je 0x4f59c0
push 0xfffffffffffffffd
push 0x4a
push 0x7a2280
push 0x4a
push 0x7a22bc
call fcn.004ff360
add esp, 0x14
push 0xfffffffffffffffd
push 0x4a
push 0x7a22f8
call fcn.004f6ce3
add esp, 0xc
push 0xfffffffffffffffd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.005e843a
xor eax, eax
mov al, byte [0x81fe55]
and eax, 1
test eax, eax
jne 0x4f59f4
mov cl, byte [0x81fe55]
or cl, 1
mov byte [0x81fe55], cl
mov ecx, 0x81fe3c
call fcn.005013a0
push 0x4f5ec0
call fcn.005e61b8
add esp, 4
mov dword [ebp - 0x20], 0
mov ecx, 0x81fe3c
call fcn.004e03b0
and eax, 0xff
test eax, eax
je 0x4f5a1e
push 0x81fe3c
call fcn.004f70b0
add esp, 4
mov dword [ebp - 0x20], eax
push 0x7a2334
push 5
lea edx, [ebp - 0x4c]
push edx
mov ecx, 0x81fe3c
call fcn.00500890
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x54]
call fcn.004e5aa0
mov byte [ebp - 0x48], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.004e0030
mov ecx, dword [ebp - 0x48]
and ecx, 0xff
test ecx, ecx
je 0x4f5b98
push 0xffffffffffffffff
push 0x5c
mov ecx, 0x81fe3c
call fcn.005007f0
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x30]
add edx, 1
push edx
mov ecx, 0x81fe3c
call fcn.004e1270
push eax
lea ecx, [ebp - 0x28]
call fcn.004dffa0
mov dword [ebp - 4], 1
push str.libietb.fne
lea ecx, [ebp - 0x28]
call fcn.00500730
lea ecx, [ebp - 0x28]
call fcn.004e1270
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x4f5b89
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
push 0x7a234c
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4f5b7f
call dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x78]
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0
je 0x4f5b7f
mov dword [0x81fe50], 0
lea eax, [ebp - 0x3c]
push eax
push 0x36eefd
push 0x36eefd
call dword [ebp - 0x44]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0xff
test ecx, ecx
je 0x4f5b72
cmp dword [0x81fe50], 1
jne 0x4f5b72
mov edx, dword [ebp - 0x38]
cmp edx, dword [0x81d810]
jne 0x4f5b72
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jne 0x4f5b72
push 0
call fcn.004e5fd2
add esp, 4
and eax, 0xff
test eax, eax
je 0x4f5b72
mov dword [ebp - 0x58], 1
jmp 0x4f5b79
mov dword [ebp - 0x58], 0
mov cl, byte [ebp - 0x58]
mov byte [ebp - 0x1c], cl
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004e0030
mov dword [ebp - 0x10], 0x81fe64
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov cl, byte [eax + 2]
and ecx, 0x20
test ecx, ecx
je 0x4f5bbc
mov edx, dword [ebp - 0x10]
mov al, byte [edx + 2]
and al, 0xdf
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 2], al
mov edx, dword [ebp - 0x1c]
and edx, 0xff
test edx, edx
je 0x4f5bd8
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 2]
or cl, 0x20
mov edx, dword [ebp - 0x10]
mov byte [edx + 2], cl
mov dword [ebp - 0x14], 0
push 0xfffffffffffffffd
push 0x88
push 0x7a2358
push 0
mov eax, dword [0x81fe64]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.004fced0
add esp, 0x18
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4f5c58
push 0xfffffffffffffffd
push 0x8a
push 0x7a2394
push 0x8a
push 0x7a23d0
call fcn.004ff360
add esp, 0x14
push 0xfffffffffffffffd
push 0x8a
push 0x7a240c
call fcn.004f6ce3
add esp, 0xc
push 0xfffffffffffffffd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.005e843a
cmp dword [0x81fe34], 0
jne 0x4f5c79
mov dword [0x81fe34], 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.004f6ce3
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10