Function at 0x4f4e30
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov al, byte [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004b8220
add esp, 0x14
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4f4e81
mov edx, dword [ebp + 8]
and edx, 0x200000
test edx, edx
je 0x4f4e79
mov eax, 1
jmp 0x4f5109
or eax, 0xffffffff
jmp 0x4f5109
mov dword [ebp - 0x20], 0
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0xf1002000
xor eax, eax
cmp dword [ebp - 0x14], 0
sete al
push eax
call fcn.004b7fc0
add esp, 0x14
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4f4f13
mov ecx, dword [ebp + 8]
and ecx, 0x200000
test ecx, ecx
jne 0x4f4f13
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x2e4
push 0x6aeb8c
call fcn.004b8320
add esp, 0x14
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.004afca3
add esp, 0xc
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.00578c4a
cmp dword [ebp - 0x20], 0
je 0x4f4f21
or eax, 0xffffffff
jmp 0x4f5109
cmp dword [ebp - 0x14], 0
jne 0x4f4f2e
xor eax, eax
jmp 0x4f5109
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov cl, byte [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004f21ac
add esp, 0x10
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
and eax, 0xff
test eax, eax
je 0x4f4f65
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x24], edx
jmp 0x4f4f6e
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
push eax
push 0xf1002001
cmp dword [ebp - 4], 0x64
sbb ecx, ecx
neg ecx
push ecx
call fcn.004b7fc0
add esp, 0x14
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4f500e
mov edx, dword [ebp + 8]
and edx, 0x200000
test edx, edx
jne 0x4f500e
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0x2ea
push 0x6aeb8c
call fcn.004b8320
add esp, 0x14
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.004afca3
add esp, 0xc
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.00578c4a
cmp dword [ebp - 0x20], 0
je 0x4f501c
or eax, 0xffffffff
jmp 0x4f5109
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x18]
push eax
call fcn.00526498
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x10], 0
jle 0x4f504f
cmp dword [ebp - 4], 0x64
jb 0x4f504f
mov dword [ebp - 0x28], 0
jmp 0x4f5056
mov dword [ebp - 0x28], 1
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
push eax
push 0xf1002002
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.004b7fc0
add esp, 0x14
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4f50db
mov edx, dword [ebp + 8]
and edx, 0x200000
test edx, edx
jne 0x4f50db
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0x2ee
push 0x6aeb8c
call fcn.004b8320
add esp, 0x14
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.004afca3
add esp, 0xc
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.00578c4a
cmp dword [ebp - 0x20], 0
je 0x4f50e6
or eax, 0xffffffff
jmp 0x4f5109
cmp dword [ebp - 0x10], 0
jg 0x4f50f3
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
and al, 0xfe
add eax, 1
mov esp, ebp
pop ebp
ret