Function at 0x4e28d0
Capabilities:
Terminate process

Disassembly:
sub esp, 0x30c
mov eax, dword [0x561be8]
push esi
mov esi, ecx
mov dword [esp + 0x30c], eax
mov eax, dword [esi + 0x200260]
test eax, eax
je 0x4e29b1
lea eax, [esp + 4]
push eax
call fcn.00507359
lea ecx, [esp + 0x88]
push ecx
call fcn.005072f2
mov cl, byte [esp + 0xc]
add esp, 8
test cl, cl
lea eax, [esp + 4]
je 0x4e2930
lea esp, [esp]
cmp byte [eax], 0x2f
jne 0x4e2928
mov byte [eax], 0x2d
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4e2920
mov al, byte [esp + 4]
mov dl, byte [esp + 0xa]
mov cl, byte [esp + 5]
mov byte [esp + 4], dl
mov dl, byte [esp + 0xb]
mov byte [esp + 5], dl
mov dl, byte [esp + 7]
mov byte [esp + 7], al
mov al, byte [esp + 8]
mov byte [esp + 8], cl
mov cl, byte [esp + 0x84]
test cl, cl
mov byte [esp + 0xb], al
mov byte [esp + 0xa], dl
lea eax, [esp + 0x84]
je 0x4e2982
cmp byte [eax], 0x3a
jne 0x4e297a
mov byte [eax], 0x2e
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4e2972
mov eax, dword [esi + 0x24]
push eax
lea ecx, [esi + 0x130]
push ecx
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x114]
push str.__s__s__s_d.log
push ecx
call fcn.004a3198
add esp, 0x18
jmp 0x4e29d1
mov edx, dword [esi + 0x24]
push edx
lea eax, [esi + 0x130]
push eax
lea ecx, [esp + 0x10c]
push str._s_d.log
push ecx
call fcn.004a3198
add esp, 0x10
lea edx, [esp + 0x104]
push edx
lea eax, [esi + 0x2c]
push eax
lea ecx, [esp + 0x210]
push 0x52bf84
push ecx
call fcn.004a3198
mov eax, dword [esi + 0x24]
add esp, 0x10
test eax, eax
jle 0x4e2a88
mov eax, dword [esi + 0x20]
lea edx, [esp + 0x104]
push edx
push 0x54a080
push eax
call fcn.004a5439
mov ecx, dword [esi + 0x20]
push ecx
call fcn.004a4236
lea edx, [esp + 0x218]
push 0x52c680
push edx
call fcn.004a490f
add esp, 0x18
test eax, eax
mov dword [esi + 0x20], eax
jne 0x4e2a55
push eax
mov eax, dword [esi + 0x1c]
push 0x54a074
push 0x54a054
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [esp + 0x104]
push ecx
push 0x54a030
push eax
call fcn.004a5439
add esp, 0xc
mov eax, dword [esi + 0x24]
lea ecx, [eax + 1]
mov dword [esi + 0x24], ecx
pop esi
mov ecx, dword [esp + 0x308]
call fcn.004a2d97
add esp, 0x30c
ret
jne 0x4e2a6b
lea edx, [esp + 0x208]
push 0x52c680
push edx
call fcn.004a490f
add esp, 8
test eax, eax
mov dword [esi + 0x20], eax
jne 0x4e2ad2
push eax
mov eax, dword [esi + 0x1c]
push 0x54a074
push 0x54a054
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
or eax, 0xffffffff
pop esi
mov ecx, dword [esp + 0x308]
call fcn.004a2d97
add esp, 0x30c
ret
mov eax, dword [esi + 0x200264]
test eax, eax
je 0x4e2a6b
call dword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
jne 0x4e2b12
mov ecx, dword [esi + 0x1c]
push eax
push 0x54a028
push 0x54a010
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
or eax, 0xffffffff
pop esi
mov ecx, dword [esp + 0x308]
call fcn.004a2d97
add esp, 0x30c
ret
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp eax, 0xffffffff
mov dword [esi + 0x18], eax
jne 0x4e2a6b
mov edx, dword [esi + 0x1c]
push 0
push 0x54a028
push 0x549ff8
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x30c]
or eax, 0xffffffff
pop esi
call fcn.004a2d97
add esp, 0x30c
ret