Function at 0x4ad960
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
xor eax, eax
mov ebx, ecx
cmp dword [ebp + 0x18], 3
mov ecx, 4
push esi
push edi
cmove eax, ecx
mov ecx, ebx
push 9
mov dword [ebp - 0x10], eax
call fcn.004b0dc0
mov esi, dword [ebp + 8]
mov ecx, ebx
mov edi, dword [ebp + 0xc]
mov dword [esi], eax
xor eax, eax
cmp edi, 1
sete al
lea eax, [eax*2 + 3]
push eax
call fcn.004b0e40
mov dword [esi + 4], eax
test edi, edi
jle 0x4ad9d3
add esi, 0x70
nop
push 4
mov ecx, ebx
mov dword [esi - 0x68], 0xffffffff
call fcn.004b0e40
mov dword [esi], eax
lea esi, [esi + 0xd0]
sub edi, 1
jne 0x4ad9b0
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov eax, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea edx, [esi + 0x4c]
xor ecx, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
nop word [eax + eax]
mov dword [ebp + 0x18], 0
test edi, edi
jle 0x4adb97
mov esi, edx
mov dword [ebp + 8], edx
push 0xc
mov ecx, ebx
call fcn.004b0dc0
push 9
mov ecx, ebx
mov dword [esi - 0x40], eax
call fcn.004b0e40
mov dword [esi - 0x3c], eax
cmp eax, 0x120
jbe 0x4ada32
push 0x4d2c58
call dword [ebp - 0xc]
mov dword [esi - 0x3c], 0x120
push 8
mov ecx, ebx
call fcn.004b0e40
mov ecx, dword [ebp - 0x10]
sub ecx, eax
cmp dword [ebp + 0x10], 0
lea eax, [ebx + 0xed18]
lea eax, [eax + ecx*4]
mov dword [esi + 0x20], eax
je 0x4ada58
add eax, 8
mov dword [esi + 0x20], eax
push 4
mov ecx, ebx
call fcn.004b0e40
mov ecx, ebx
mov dword [esi - 0x38], eax
lea edi, [esi - 0x2c]
call fcn.004b0d80
test eax, eax
je 0x4adae5
push 2
mov ecx, ebx
call fcn.004b0e40
mov ecx, ebx
mov dword [esi - 0x34], eax
call fcn.004b0d80
push 5
mov ecx, ebx
mov dword [esi - 0x30], eax
call fcn.004b0e40
push 5
mov ecx, ebx
mov dword [edi], eax
call fcn.004b0e40
mov dword [esi - 0x28], eax
add edi, 0x40
mov dword [esi - 0x24], 0
mov dword [ebp + 8], 3
push 3
mov ecx, ebx
call fcn.004b0e40
mov ecx, dword [esi + 0x20]
lea edi, [edi + 4]
shl eax, 3
sub dword [ebp + 8], 1
lea eax, [ecx + eax*4]
mov dword [edi - 4], eax
jne 0x4adab0
cmp dword [esi - 0x34], 0
je 0x4adbb3
mov dword [esi], 0x12
mov eax, 0x120
jmp 0x4adb54
mov esi, 3
nop word [eax + eax]
push 5
mov ecx, ebx
call fcn.004b0e40
mov dword [edi], eax
lea edi, [edi + 4]
sub esi, 1
jne 0x4adaf0
push 4
mov ecx, ebx
call fcn.004b0e40
push 3
mov ecx, ebx
mov edi, eax
call fcn.004b0e40
mov ecx, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
lea edx, [ecx + ecx*8]
shl edx, 3
add eax, edx
add eax, edi
lea ecx, [edx + edi]
mov cx, word [ecx*2 + 0x4eba92]
sar cx, 1
movsx ecx, cx
mov dword [esi], ecx
movzx eax, word [eax*2 + 0x4eba94]
sar ax, 1
mov dword [esi - 0x34], 0
mov dword [esi - 0x30], 0
cwde
mov ecx, ebx
mov dword [esi + 4], eax
call fcn.004b0d80
mov ecx, ebx
mov dword [esi + 8], eax
call fcn.004b0d80
mov ecx, ebx
mov dword [esi + 0xc], eax
call fcn.004b0d80
mov edi, dword [ebp + 0x18]
inc edi
mov dword [esi + 0x10], eax
add esi, 0xd0
mov dword [ebp + 0x18], edi
mov dword [ebp + 8], esi
cmp edi, dword [ebp + 0xc]
jl 0x4ada04
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
inc ecx
add edx, 0x68
mov dword [ebp - 4], ecx
mov dword [ebp - 8], edx
cmp ecx, 2
jl 0x4ad9f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
push str.Blocktype__0_and_window_switching__1_not_allowed._n
call dword [ebp - 0xc]
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3