Function at 0x49b3f4
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, dword [0x6d9d44]
xor eax, esp
mov dword [esp + 0x40], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, ecx
mov dword [esp + 0x18], edx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 0x2c], ecx
xor ecx, ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ecx
test edx, edx
je 0x49b756
test eax, eax
je 0x49b756
mov eax, dword [edi + 0x10]
test eax, eax
je 0x49b45a
mov eax, dword [eax + 8]
jmp 0x49b45c
mov eax, ecx
push str.Setting_Ice_Offer:
push 2
pop ecx
push ecx
push ecx
push eax
call fcn.004920d4
add esp, 0x10
test esi, esi
je 0x49b4ac
test ebx, ebx
jle 0x49b4ac
mov al, byte [ebx + esi]
xor ecx, ecx
mov byte [esp + 0x17], al
mov byte [ebx + esi], cl
mov eax, dword [edi + 0x10]
test eax, eax
je 0x49b48f
mov eax, dword [eax + 8]
jmp 0x49b491
mov eax, ecx
push esi
push str....username:__s
push 2
pop ecx
push ecx
push ecx
push eax
call fcn.004920d4
mov al, byte [esp + 0x2b]
add esp, 0x14
mov byte [ebx + esi], al
mov ebx, 0xb2b
push ebx
push 0x75dff8
push 1
push 0x120
call fcn.005f5ba0
mov esi, eax
add esp, 0x10
mov dword [esp + 0x10], esi
test esi, esi
je 0x49b91f
push 0x120
push 0
push esi
call fcn.005c37d0
add esp, 0xc
lea eax, [esi + 0x4b]
push 8
push eax
call fcn.004c7660
mov ebx, dword [esp + 0x20]
mov eax, dword [edi + 0x20c]
mov dword [esi + 0x88], eax
mov edi, dword [esp + 0x24]
movsx edx, byte [ebx + 6]
push 0xb33
push 0x75e070
push 1
movsx ecx, byte [edx + ebx + 7]
lea eax, [ecx + edx]
movsx eax, byte [eax + ebx + 8]
add eax, ecx
add eax, edx
movsx eax, byte [eax + ebx + 9]
mov dword [esp + 0x44], eax
inc eax
add eax, edi
push eax
mov dword [esp + 0x30], eax
call fcn.005f5ba0
add esp, 0x18
mov dword [esi + 0x14], eax
test eax, eax
jne 0x49b576
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0xb33
push esi
push edi
mov edx, 0x75e08c
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push edi
push 0x75e0a8
push 0x75e0c4
jmp 0x49b947
mov edx, dword [esp + 0x18]
mov ecx, eax
push edi
push ebx
call section..text
mov eax, dword [esp + 0x38]
inc eax
push eax
mov eax, dword [esi + 0x14]
add eax, edi
push 0
push eax
call fcn.005c37d0
mov eax, dword [esi + 0x14]
add esp, 0x14
movzx eax, word [eax]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
mov word [esi + 0x18], ax
mov eax, dword [esi + 0x14]
push dword [eax + 2]
call dword [sym.imp.WS2_32.dll_ntohl]
mov edi, dword [esi + 0x14]
mov ebx, eax
mov dword [esi + 0x1c], ebx
shr ebx, 1
movsx ecx, byte [edi + 6]
mov dword [esi + 8], ecx
lea ecx, [edi + 7]
mov dword [esi], ecx
mov esi, dword [esi + 8]
mov ecx, dword [esp + 0x10]
movsx eax, byte [esi + edi + 7]
mov dword [ecx + 0xc], eax
lea eax, [edi + 8]
mov edx, dword [ecx + 0xc]
add eax, esi
mov dword [ecx + 4], eax
lea ecx, [edx + esi]
movsx eax, byte [ecx + edi + 8]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x58], eax
lea eax, [edx + 9]
add eax, esi
add edx, esi
mov esi, ecx
add eax, edi
mov dword [ecx + 0x54], eax
add edx, edi
mov ecx, dword [esi + 0x58]
movsx eax, byte [edx + ecx + 9]
or dword [esi + 0x74], 0xffffffff
mov dword [esi + 0x64], eax
lea eax, [ecx + 0xa]
add eax, edx
mov dword [esi + 0x5c], eax
mov eax, dword [esp + 0x1c]
add eax, edi
xor edi, edi
mov dword [esi + 0x60], eax
mov eax, ebx
not eax
mov dword [esi + 0x68], edi
and ebx, 1
and eax, 1
mov dword [esi + 0x70], ebx
mov ebx, dword [esp + 0x34]
mov dword [esi + 0x6c], eax
mov dword [esi + 0x78], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [esi + 0x80], eax
mov dword [esi + 0x84], edx
mov ecx, dword [ebx + 0x10]
test ecx, ecx
je 0x49b65f
mov ecx, dword [ecx + 8]
jmp 0x49b661
mov ecx, edi
cmp dword [esi + 0x6c], edi
mov edx, str.Receiver
mov eax, str.Initiator
cmove eax, edx
push eax
push dword [esi + 0x1c]
push str....Remote_is:___d___s
push 2
pop eax
push eax
push eax
push ecx
call fcn.004920d4
mov edi, dword [ebx + 0x10]
add esp, 0x18
test edi, edi
je 0x49b694
mov edi, dword [edi + 8]
jmp 0x49b696
xor edi, edi
mov edx, dword [esi + 0x58]
mov ecx, dword [esi + 0x54]
call fcn.0049200c
push eax
push str....Certificate:__s
push 2
pop eax
push eax
push eax
push edi
call fcn.004920d4
mov edx, dword [esp + 0x4c]
add esp, 0x14
test edx, edx
je 0x49b702
mov edi, dword [esp + 0x28]
test edi, edi
je 0x49b702
mov eax, dword [ebp + 0x18]
mov ecx, dword [esp + 0x20]
add eax, ecx
cmp eax, 0x28
jne 0x49b702
push ecx
push edx
mov byte [esi + 0x20], cl
lea ecx, [esi + 0x21]
push 0x2a
pop edx
call section..text
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 0x18]
push ecx
push edi
mov byte [eax + esi + 0x21], cl
lea ecx, [eax + 0x22]
push 0x29
pop edx
sub edx, eax
add ecx, esi
call section..text
add esp, 0x10
lea eax, [esp + 0x24]
mov edx, esi
push 1
push eax
mov ecx, ebx
call fcn.004982c7
mov dword [esp + 0x20], eax
pop ecx
pop ecx
test eax, eax
jns 0x49b76a
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x49b728
mov eax, dword [eax + 8]
jmp 0x49b72a
xor eax, eax
push str....Unable_to_update_add_offer
push 2
pop ecx
push ecx
push ecx
push eax
call fcn.004920d4
push 1
push dword [esi + 0x14]
call fcn.005f5a60
push 1
push esi
call fcn.005f5a60
mov edx, dword [esp + 0x4c]
add esp, 0x20
and dword [edx], 0
xor eax, eax
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005c0db0
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 0x10]
test ecx, ecx
je 0x49b776
mov ecx, dword [ecx + 8]
jmp 0x49b778
xor ecx, ecx
push eax
push str....Offer_Added_Updated_into_Ice_Slot:__d
push 2
pop eax
push eax
push eax
push ecx
call fcn.004920d4
mov edi, dword [esp + 0x38]
add esp, 0x14
test edi, edi
je 0x49b8ec
xor ecx, ecx
cmp dword [edi + 0x64], ecx
jne 0x49b8b5
cmp dword [edi + 0x5c], ecx
jne 0x49b8b5
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x49b7b8
mov eax, dword [eax + 8]
jmp 0x49b7ba
mov eax, ecx
push str.......No_previous_offer_was_set__this_must_be_the_peers_answer_to_our_original_offer
push 2
pop ecx
push ecx
push ecx
push eax
call fcn.004920d4
add esp, 0x10
xor ecx, ecx
mov edx, ecx
mov dword [esp + 0x1c], ecx
mov eax, dword [edi + 0x14]
add eax, edx
mov dword [esp + 0x28], eax
cmp word [eax], cx
je 0x49b8a2
cmp dword [esi + 0x64], 0
mov dword [esp + 0x10], ecx
jle 0x49b8a0
mov ecx, dword [esi + 0x5c]
mov dword [esp + 0x20], ecx
xor eax, eax
lea edi, [esp + 0x3c]
stosd dword es:[edi], eax
push 2
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [esp + 0x2c]
pop eax
mov word [esp + 0x3c], ax
mov ax, word [ecx + 4]
mov word [esp + 0x3e], ax
mov eax, dword [ecx]
mov dword [esp + 0x40], eax
xor eax, eax
mov ecx, eax
lea eax, [esp + 0x3c]
mov eax, dword [eax + ecx*4]
cmp eax, dword [edi + ecx*4]
jne 0x49b843
inc ecx
cmp ecx, 4
jne 0x49b825
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x49b85e
mov edi, dword [eax + 8]
jmp 0x49b862
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
inc eax
add ecx, 6
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], ecx
cmp eax, dword [esi + 0x64]
jl 0x49b7fc
jmp 0x49b89c
xor eax, eax
mov edi, eax
push dword [esp + 0x3e]
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
lea ecx, [esp + 0x3c]
push eax
call fcn.00491cd5
push eax
push str.......Candidate:__s:_u_was_already_unlocked
push 2
pop eax
push eax
push eax
push edi
call fcn.004920d4
mov eax, dword [esi + 0x60]
add esp, 0x18
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov byte [ecx + eax], 1
mov edi, dword [esp + 0x24]
xor ecx, ecx
add edx, 0x1c
mov dword [esp + 0x1c], edx
cmp edx, 0xe0
jl 0x49b7d5
push 0x2b
pop edx
push edx
lea eax, [edi + 0x20]
push eax
lea ecx, [esi + 0x20]
call section..text
mov eax, dword [edi + 0x8c]
mov dword [esi + 0x8c], eax
push 1
push dword [edi + 0x14]
call fcn.005f5a60
push 1
push edi
call fcn.005f5a60
mov edi, dword [esp + 0x30]
add esp, 0x18
jmp 0x49b902
mov edi, dword [esp + 0x18]
lea eax, [esi + 0x20]
push eax
lea edx, [ebx + 0x110]
mov ecx, edi
call fcn.00498667
pop ecx
mov edx, dword [esp + 0x2c]
mov ecx, esi
call fcn.00498856
mov edx, edi
mov ecx, ebx
mov esi, eax
call fcn.0049b2fe
mov eax, esi
jmp 0x49b758
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edx, 0x75e014
push esi
push ebx
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push ebx
push 0x75e030
push 0x75e04c
call fcn.00401109
add esp, 0xc
push esi
call fcn.005d0820
int3