Function at 0x4d6540
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ed28b
mov eax, dword fs:[0]
push eax
sub esp, 0x1a0
mov eax, dword [0x65d4e4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x180], ecx
lea eax, [ebp - 0x2c]
push eax
call fcn.00404970
mov ecx, eax
call fcn.0040d4a0
mov dword [ebp - 4], 0
push 1
push 2
lea ecx, [ebp - 0xac]
call fcn.0040b040
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 8]
call fcn.0040be10
push eax
push 0x60fc58
lea ecx, [ebp - 0x2c]
call fcn.0040be10
push eax
push 0x60fc5c
lea ecx, [ebp - 0xac]
push ecx
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea edx, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0xac]
call fcn.004094f0
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x188]
call fcn.0040be10
push eax
mov ecx, dword [ebp - 0x180]
call fcn.004d6990
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11c]
call fcn.0040bf30
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x180]
call fcn.004d7290
test eax, eax
jne 0x4d6675
mov dword [ebp - 0x120], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.00409dd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0040bf30
mov eax, dword [ebp - 0x120]
jmp 0x4d6971
mov ecx, dword [ebp + 8]
call fcn.0040be10
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040be10
push eax
call fcn.005b24e5
add esp, 8
test eax, eax
je 0x4d6933
mov ecx, dword [ebp - 0x180]
add ecx, 0x3c
call fcn.0040be10
push eax
lea ecx, [ebp - 0xe4]
call fcn.0051c900
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.0040be10
push eax
push 0x60fc6c
push 0x60fc78
lea ecx, [ebp - 0xe4]
call fcn.0051c820
mov ecx, dword [ebp + 8]
call fcn.0040be10
push eax
push 0x60fc80
push 0x60fc8c
lea ecx, [ebp - 0xe4]
call fcn.0051c820
lea edx, [ebp - 0xac]
push edx
call fcn.004d8200
add esp, 4
push 0x60fc94
lea eax, [ebp - 0xac]
push eax
call fcn.00409b60
add esp, 8
lea ecx, [ebp - 0x13c]
push ecx
lea ecx, [ebp - 0xac]
call fcn.004094f0
mov dword [ebp - 0x18c], eax
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x190], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x190]
call fcn.0040be10
push eax
mov ecx, dword [ebp - 0x180]
call fcn.004d6990
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x13c]
call fcn.0040bf30
call fcn.00404880
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x194]
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x158]
push ecx
call fcn.00404970
mov ecx, eax
call fcn.004abb00
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], edx
mov byte [ebp - 4], 5
push 0x60fcb4
mov eax, dword [ebp - 0x19c]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call fcn.00404a60
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.0040bf30
lea ecx, [ebp - 0xc8]
call fcn.0040be10
push eax
call fcn.00504080
add esp, 4
test eax, eax
jne 0x4d6856
lea edx, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0x100]
call fcn.0040bf50
mov byte [ebp - 4], 8
push 0x60fcc0
lea ecx, [ebp - 0x100]
call fcn.004024c0
push 0
lea ecx, [ebp - 0x100]
call fcn.0040be10
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040be10
push eax
call fcn.004ff170
add esp, 0xc
lea ecx, [ebp - 0x100]
call fcn.0040be10
push eax
call fcn.00504080
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x100]
call fcn.0040bf30
call fcn.004d7a10
mov ecx, eax
call fcn.004e6d10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x15c], esp
mov eax, dword [ebp + 8]
push eax
call fcn.0040bf50
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], ecx
mov byte [ebp - 4], 9
call fcn.00404970
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.0040d530
lea edx, [ebp - 0xac]
push edx
call fcn.004d8200
add esp, 4
push 0x60fcc8
lea eax, [ebp - 0xac]
push eax
call fcn.00409b60
add esp, 8
lea ecx, [ebp - 0x178]
push ecx
lea ecx, [ebp - 0xac]
call fcn.004094f0
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ac], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1ac]
call fcn.0040be10
push eax
mov ecx, dword [ebp - 0x180]
call fcn.004d6990
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x178]
call fcn.0040bf30
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0
push 0
call fcn.00453a00
mov ecx, eax
call fcn.00438fa0
mov dword [ebp - 0x17c], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call fcn.00409dd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0040bf30
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b1988
mov esp, ebp
pop ebp
ret 4