Function at 0x4d9810
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x217c
call fcn.004639ba
mov eax, dword [0x566024]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 0x1c], 0
jne 0x4d9839
mov eax, 1
jmp 0x4d9d09
mov dword [ebp - 0x2118], 0
lea eax, [ebp - 0x2118]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 6
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
test eax, eax
jne 0x4d9864
mov dword [ebp - 0x2118], 0
push 0x105
push 0
lea edx, [ebp - 0x10c]
push edx
call fcn.004647e3
add esp, 0xc
mov dword [ebp - 0x2160], 0x105
lea eax, [ebp - 0x2160]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x2118]
push edx
call fcn.004630c3
add esp, 0xc
test eax, eax
jne 0x4d98fb
push 0
call fcn.004db280
add esp, 4
mov dword [ebp - 0x2164], eax
mov dword [ebp - 0x2168], 0x105
push 0
push 0x160
push 0x54df60
push str.common_message_window
push str.traits::tcscpy_s_program_name___sizeof___countof_helper_program_name____0___get_program_name_unknown_text_Character____
lea eax, [ebp - 0x2164]
push eax
lea ecx, [ebp - 0x2168]
push ecx
lea edx, [ebp - 0x10c]
push edx
call fcn.004650c1
add esp, 0xc
push eax
call fcn.00463e3d
add esp, 0x18
lea eax, [ebp - 0x10c]
push eax
call fcn.00463cdf
add esp, 4
mov dword [ebp - 0x2120], eax
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x2110], ecx
cmp dword [ebp - 0x2120], 0x40
jbe 0x4d9970
mov edx, dword [ebp - 0x2120]
mov eax, dword [ebp - 0x2110]
lea ecx, [eax + edx - 0x40]
mov dword [ebp - 0x2110], ecx
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 0x2110]
mov byte [ecx + eax], 0x2e
mov edx, 1
shl edx, 0
mov eax, dword [ebp - 0x2110]
mov byte [eax + edx], 0x2e
mov ecx, 1
shl ecx, 1
mov edx, dword [ebp - 0x2110]
mov byte [edx + ecx], 0x2e
cmp dword [ebp + 0x18], 0
je 0x4d998a
lea eax, [ebp + 0x18]
push eax
call fcn.0046528d
add esp, 4
mov dword [ebp - 0x2124], eax
jmp 0x4d9994
mov dword [ebp - 0x2124], 0
mov ecx, dword [ebp - 0x2124]
mov dword [ebp - 0x2128], ecx
mov dword [ebp - 0x2114], 0
cmp dword [ebp + 0x18], 0
je 0x4d99cc
cmp dword [ebp - 0x2128], 0x40
jbe 0x4d99cc
mov edx, dword [ebp - 0x2128]
mov eax, dword [ebp + 0x18]
lea ecx, [eax + edx - 0x3d]
mov dword [ebp - 0x2114], ecx
cmp dword [ebp + 8], 2
jne 0x4d99e0
mov edx, dword [0x54db9c]
mov dword [ebp - 0x2130], edx
jmp 0x4d99ea
mov dword [ebp - 0x2130], 0x537464
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp + 0x1c]
movsx eax, byte [edx + ecx]
test eax, eax
je 0x4d9a08
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x2134], ecx
jmp 0x4d9a12
mov dword [ebp - 0x2134], 0x54e100
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp + 0x1c]
movsx edx, byte [ecx + eax]
test edx, edx
je 0x4d9a37
cmp dword [ebp + 8], 2
jne 0x4d9a37
mov dword [ebp - 0x2138], str.Expression:
jmp 0x4d9a41
mov dword [ebp - 0x2138], 0x537464
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp + 0x1c]
movsx eax, byte [edx + ecx]
test eax, eax
je 0x4d9a60
mov dword [ebp - 0x213c], 0x54e27c
jmp 0x4d9a6a
mov dword [ebp - 0x213c], 0x537464
cmp dword [ebp + 0x14], 0
je 0x4d9a7b
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x2140], ecx
jmp 0x4d9a85
mov dword [ebp - 0x2140], 0x54e100
cmp dword [ebp + 0x14], 0
je 0x4d9a97
mov dword [ebp - 0x2144], str._nLine:
jmp 0x4d9aa1
mov dword [ebp - 0x2144], 0x537464
cmp dword [ebp + 0x10], 0
je 0x4d9ab2
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x2148], edx
jmp 0x4d9abc
mov dword [ebp - 0x2148], 0x54e100
cmp dword [ebp + 0x10], 0
je 0x4d9ace
mov dword [ebp - 0x214c], str._nFile:
jmp 0x4d9ad8
mov dword [ebp - 0x214c], 0x537464
cmp dword [ebp - 0x2114], 0
je 0x4d9aef
mov eax, dword [ebp - 0x2114]
mov dword [ebp - 0x2150], eax
jmp 0x4d9b16
cmp dword [ebp + 0x18], 0
je 0x4d9b00
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x212c], ecx
jmp 0x4d9b0a
mov dword [ebp - 0x212c], 0x54e100
mov edx, dword [ebp - 0x212c]
mov dword [ebp - 0x2150], edx
cmp dword [ebp - 0x2114], 0
je 0x4d9b2b
mov dword [ebp - 0x2154], 0x54e2ac
jmp 0x4d9b35
mov dword [ebp - 0x2154], 0x537464
cmp dword [ebp + 0x18], 0
je 0x4d9b47
mov dword [ebp - 0x2158], str._nModule:
jmp 0x4d9b51
mov dword [ebp - 0x2158], 0x537464
mov eax, dword [ebp + 8]
mov ecx, dword [eax*4 + 0x54db40]
mov dword [ebp - 0x216c], ecx
push 0
call fcn.004db260
add esp, 4
mov dword [ebp - 0x2170], eax
mov edx, dword [ebp - 0x2130]
push edx
mov eax, dword [ebp - 0x2134]
push eax
mov ecx, dword [ebp - 0x2138]
push ecx
mov edx, dword [ebp - 0x213c]
push edx
mov eax, dword [ebp - 0x2140]
push eax
mov ecx, dword [ebp - 0x2144]
push ecx
mov edx, dword [ebp - 0x2148]
push edx
mov eax, dword [ebp - 0x214c]
push eax
mov ecx, dword [ebp - 0x2150]
push ecx
mov edx, dword [ebp - 0x2154]
push edx
mov eax, dword [ebp - 0x2158]
push eax
mov ecx, dword [ebp - 0x2110]
push ecx
mov edx, dword [ebp - 0x216c]
push edx
mov eax, dword [ebp - 0x2170]
push eax
push 0xfff
push 0x1000
lea ecx, [ebp - 0x210c]
push ecx
call fcn.00464c07
add esp, 0x44
mov dword [ebp - 0x215c], eax
call fcn.00464df6
mov edx, dword [eax]
mov dword [ebp - 0x2174], edx
call fcn.00464df6
mov dword [eax], 0
cmp dword [ebp - 0x215c], 0
jge 0x4d9c3d
push 0
push 0x192
push 0x54df60
push str.common_message_window
push str.__errno___
push 0x22
push 0x16
call fcn.00464df6
mov eax, dword [eax]
push eax
call fcn.0046410d
add esp, 0x20
call fcn.00464df6
mov ecx, dword [ebp - 0x2174]
mov dword [eax], ecx
cmp dword [ebp - 0x215c], 0
jge 0x4d9c8b
push 0
push 0x196
push 0x54df60
push str.common_message_window
push str.wcscpy_s_message_buffer__4096__L__CrtDbgReport:_String_too_long_or_IO_Error__
push 0x54e3b0
push 0x1000
lea edx, [ebp - 0x210c]
push edx
call fcn.00464d74
add esp, 0xc
push eax
call fcn.00463e3d
add esp, 0x18
push 0x12012
push str.Microsoft_Visual_C_Runtime_Library
lea eax, [ebp - 0x210c]
push eax
call fcn.00463726
add esp, 0xc
mov dword [ebp - 0x2178], eax
mov ecx, dword [ebp - 0x2178]
mov dword [ebp - 0x211c], ecx
cmp dword [ebp - 0x211c], 3
je 0x4d9cd3
cmp dword [ebp - 0x211c], 4
je 0x4d9d00
cmp dword [ebp - 0x211c], 5
je 0x4d9d07
jmp 0x4d9d07
call fcn.004662a0
mov dword [ebp - 0x217c], eax
cmp dword [ebp - 0x217c], 0
je 0x4d9cf1
push 0x16
call fcn.0046651b
add esp, 4
push 3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, 1
jmp 0x4d9d09
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00464748
mov esp, ebp
pop ebp
ret