Function at 0x495525
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push ebp
push esi
mov ebx, edx
mov esi, ecx
push edi
push 4
pop ebp
mov ecx, dword [esi + ebx*4 + 0x178]
test ecx, ecx
jne 0x495564
lea eax, [esp + 0x10]
push eax
push ecx
push 0x24
pop edx
mov ecx, 0x120
call fcn.004814a9
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov dword [esi + ebx*4 + 0x178], eax
mov dword [eax + 0x48], ecx
mov dword [ecx + 0x1c], ebp
jmp 0x4955db
call fcn.0048f3c4
push 0x120
push 0
push dword [esi + ebx*4 + 0x178]
call fcn.005b5fd0
mov edx, dword [esi + ebx*4 + 0x178]
add esp, 0xc
mov ecx, edx
neg ecx
sbb ecx, ecx
lea eax, [edx + 0x124]
and ecx, eax
xor eax, eax
mov dword [edx + 0x48], ecx
mov edi, dword [esi + ebx*4 + 0x178]
push 7
pop ecx
mov edi, dword [edi + 0x48]
rep stosd dword es:[edi], eax
mov eax, dword [esi + ebx*4 + 0x178]
mov ecx, dword [eax + 0x48]
mov edx, ecx
neg edx
sbb edx, edx
lea eax, [ecx + 0x20]
and edx, eax
jne 0x4955c3
xor eax, eax
jmp 0x4955c6
mov eax, dword [edx - 4]
push eax
lea eax, [ecx + 0x20]
neg ecx
push 0
sbb ecx, ecx
and ecx, eax
push ecx
call fcn.005b5fd0
add esp, 0xc
mov edx, dword [esp + 0x18]
push 0x10
mov eax, dword [esi + edx*4 + 0x150]
mov dword [eax + 0x74], ebx
lea eax, [ebx + 1]
mov dword [esi + 0x1a0], eax
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x30], 0x50
mov ecx, dword [esi + ebx*4 + 0x178]
mov eax, dword [esi + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + ebx*4 + 0x178]
pop ecx
push 0x1c
mov dword [eax + 0x20], 0x4954f3
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x24], fcn.00492c64
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x28], fcn.0048f7bd
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x44], edx
mov eax, dword [esi + ebx*4 + 0x178]
pop edx
mov dword [eax + 0x78], ebp
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x40], ebx
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x7c], 0
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x34], esi
mov eax, dword [esp + 0x1c]
cmp word [eax], 0x17
cmove ecx, edx
push ecx
mov ecx, dword [esi + ebx*4 + 0x178]
push eax
mov ecx, dword [ecx + 0x48]
call section..text
mov eax, dword [esi + ebx*4 + 0x178]
mov ecx, 0x15e0
mov dword [eax + 0x5c], ecx
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x60], ecx
push dword [esi + 0x148]
call fcn.0057da90
mov ecx, dword [esi + ebx*4 + 0x178]
push esi
push dword [0x724e88]
mov dword [ecx + 0x38], eax
mov eax, dword [esi + ebx*4 + 0x178]
push dword [eax + 0x38]
call fcn.0057e910
mov edi, 0x161d
push edi
push 0x72488c
push 1
push 0x1000
call fcn.005e7f10
mov ecx, dword [esi + ebx*4 + 0x178]
add esp, 0x28
mov dword [ecx + 0xec], eax
test eax, eax
je 0x495735
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0xf4], 0x1000
mov ecx, dword [esi + ebx*4 + 0x178]
call fcn.0048f40b
mov ecx, ebp
call fcn.0048708c
mov ecx, dword [esi + ebx*4 + 0x178]
pop edi
pop esi
pop ebp
mov dword [ecx + 0xe0], eax
pop ebx
pop ecx
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edx, 0x7248a8
push esi
push edi
xor ecx, ecx
call fcn.00488a50
push edi
push 0x7248c4
push 0x7248e0
call fcn.00401109
add esp, 0x18
push esi
call fcn.005c3000
int3