Function at 0x482f2b
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8c
mov eax, dword [0x4d4770]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
push esi
push edi
mov ebx, edx
mov dword [esp + 0x18], ecx
call fcn.00489e1e
test eax, eax
jne 0x482fb2
mov eax, dword [0x4d6258]
xor edx, edx
cmp dword [eax + 0x70], edx
je 0x483adf
cmp dword [eax + 0x50], 3
je 0x482f75
cmp dword [eax + 0x50], 2
jne 0x482f9d
mov ecx, dword [ebx + 0x134]
xor eax, eax
inc eax
cmp dword [ecx + 0x400], eax
jbe 0x482f90
cmp dword [ecx + 4], edx
je 0x482f90
mov dword [0x4d76c8], eax
cmp dword [ebx + 0xc8], edx
je 0x482f9d
mov dword [0x4d76c4], eax
mov ecx, dword [esp + 0x94]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004cc790
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x1c]
call fcn.004b7fae
mov eax, dword [ebx + 0xbc]
mov edi, dword [ebx + 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x28], eax
mov eax, dword [eax]
mov esi, dword [eax + 0x38]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x28]
call esi
mov esi, dword [esp + 0x28]
mov ecx, esi
push ebx
mov dword [esp + 0x30], eax
call fcn.0048f291
test eax, eax
je 0x4831ee
mov ecx, edi
call fcn.004cbf9f
push 0x42d578
mov ecx, edi
call fcn.004cbb8f
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
push 0x5f
mov ecx, edi
call fcn.00463bf0
push 0x42d59c
mov ecx, edi
call fcn.004cbb8f
push 0x42b994
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x7b
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
jmp 0x4831be
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x48308b
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x10]
call esi
cmp eax, 7
jne 0x4831be
mov eax, dword [esp + 0x14]
cmp eax, 1
jne 0x4830b0
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x10]
call esi
cmp eax, 8
jne 0x4831be
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov esi, dword [eax + 0x11c]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x10]
call esi
test eax, eax
je 0x483198
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x38]
mov ecx, esi
push eax
push ebx
call fcn.0049dd88
mov ecx, dword [esp + 0x24]
xor eax, eax
push 0x42d5b0
mov dword [esp + 0x20], eax
mov byte [ecx], al
lea ecx, [esp + 0x20]
call fcn.004b7fde
push dword [esp + 0x34]
lea ecx, [esp + 0x20]
call fcn.004b80f8
push 0x42b6f0
lea ecx, [esp + 0x20]
call fcn.004b7fde
push dword [esp + 0x30]
lea ecx, [esp + 0x20]
call fcn.004b80f8
push 0x42d5b4
lea ecx, [esp + 0x20]
call fcn.004b7fde
cmp dword [esi + 8], 0
mov eax, 0x42651c
jne 0x483148
mov eax, 0x42b5c0
push eax
lea ecx, [esp + 0x20]
call fcn.004b7fde
mov eax, dword [0x4d6258]
test byte [eax + 0x1a], 4
mov eax, 0x42d5b8
je 0x483167
mov eax, 0x42d5d0
push eax
lea ecx, [esp + 0x20]
call fcn.004b7fde
push dword [esi + 0x34]
lea ecx, [esp + 0x20]
call fcn.004b7fde
push 0x42bae8
lea ecx, [esp + 0x20]
call fcn.004b7fde
push dword [esp + 0x24]
mov ecx, edi
call fcn.004cbb8f
jmp 0x4831b7
push 0x42d5e8
mov ecx, edi
call fcn.004cbb8f
mov eax, dword [esp + 0x10]
cmp dword [eax + 8], 0
je 0x4831b7
push 0x2c
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x3c]
call fcn.0047140b
test eax, eax
je 0x48305f
push 0x42bd04
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov ecx, edi
call fcn.004cbf9f
cmp dword [esp + 0x14], 0
jne 0x48335d
mov eax, dword [esp + 0x18]
test eax, eax
je 0x48335d
mov eax, dword [eax]
mov esi, dword [eax + 0x134]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x18]
call esi
test eax, eax
je 0x48335d
mov ecx, edi
call fcn.004cbf9f
push 0x42d5f4
mov ecx, edi
call fcn.004cbb8f
push 0x20
mov ecx, edi
call fcn.00463bf0
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
push 0x5f
mov ecx, edi
call fcn.00463bf0
push 0x42d610
mov ecx, edi
call fcn.004cbb8f
push 0x42b994
mov ecx, edi
call fcn.004cbb8f
mov ax, word [edi + 0x22]
mov ecx, edi
add word [edi + 0x20], ax
call fcn.004cbf9f
push 0x7b
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
push 0x26
mov ecx, edi
call fcn.00463bf0
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x64]
call fcn.004438f2
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x2c
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
push 4
push 0x42d624
lea eax, [esp + 0x48]
push 0x50
push eax
call fcn.00442802
add esp, 0x10
test eax, eax
jne 0x48343c
lea eax, [esp + 0x40]
mov ecx, edi
push eax
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x42d63c
mov ecx, edi
call fcn.004cbb8f
mov ecx, dword [esi + 0x60]
call fcn.004438f2
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x42d658
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x42d660
mov ecx, edi
call fcn.004cbb8f
mov ecx, dword [esi + 0x60]
call fcn.004438f2
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x42d67c
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x42bd04
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.00463c3f
call fcn.004cbf9f
mov ecx, edi
call fcn.004cbf9f
push 0x42d684
mov ecx, edi
call fcn.004cbb8f
push 0x20
mov ecx, edi
call fcn.00463bf0
mov eax, dword [ebx + 0x1c]
mov ecx, edi
push dword [eax + 0x98]
call fcn.004cbb8f
push 0x42b994
mov ecx, edi
call fcn.004cbb8f
mov ax, word [edi + 0x22]
mov ecx, edi
add word [edi + 0x20], ax
call fcn.004cbf9f
push 0x7b
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
xor esi, esi
mov eax, 0x42d6a0
inc esi
mov dword [esp + 0x10], eax
cmp dword [esp + 0x2c], esi
je 0x4833ec
push 0x42d6a4
mov ecx, edi
call fcn.004cbb8f
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
mov eax, 0x42d6b0
cmp dword [esp + 0x14], esi
je 0x4833ec
mov eax, 0x42d6c8
push eax
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov ecx, ebx
call fcn.00482cf7
cmp dword [esp + 0x14], 0
jne 0x4834da
cmp dword [esp + 0x2c], esi
je 0x4834da
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x48344b
push 0x26
mov ecx, edi
call fcn.00463bf0
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
mov eax, 0x42d6e0
jmp 0x4834c1
push 0x42d628
mov edx, 0x287
jmp 0x483ae9
mov eax, dword [eax]
mov esi, dword [eax + 0x130]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x18]
call esi
test eax, eax
je 0x48347c
push 0x26
mov ecx, edi
call fcn.00463bf0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x64]
call fcn.004438f2
jmp 0x4834be
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov esi, dword [eax + 0x134]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x18]
call esi
test eax, eax
je 0x4834cb
push 0x42d71c
mov ecx, edi
call fcn.004cbb8f
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
push 0x5f
mov ecx, edi
call fcn.00463bf0
mov eax, 0x42d610
xor esi, esi
inc esi
push eax
mov ecx, edi
call fcn.004cbb8f
jmp 0x4834e3
push 0x42d6f8
mov edx, 0x2d4
jmp 0x483ae9
push 0x30
mov ecx, edi
call fcn.00463bf0
push 0x2c
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
cmp dword [esp + 0x14], esi
jne 0x48351b
test byte [ebx + 0x18], 2
je 0x48351b
mov eax, dword [ebx + 0x130]
cmp dword [eax + 0x400], esi
je 0x48351b
push 0x42d72c
mov ecx, edi
call fcn.004cbb8f
jmp 0x483524
push 0x30
mov ecx, edi
call fcn.00463bf0
push 0x2c
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
cmp dword [esp + 0x14], 0
jne 0x483552
test dword [ebx + 0xc], 0x40000
je 0x483552
push 0x42d73c
mov ecx, edi
call fcn.004cbb8f
jmp 0x48355b
push 0x30
mov ecx, edi
call fcn.00463bf0
push 0x2c
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
mov eax, dword [ebx + 0x134]
cmp dword [eax + 0x400], esi
jbe 0x48357f
cmp dword [eax + 4], 0
jne 0x48358d
cmp dword [0x4d76c8], 0
mov eax, 0x42d6a0
je 0x483592
mov eax, 0x42d74c
push eax
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov eax, dword [ebx + 0x144]
xor ecx, ecx
cmp word [eax + 0x24], cx
mov eax, 0x42d760
jne 0x4835b9
mov eax, 0x42d6a0
push eax
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov ecx, dword [0x4d6258]
xor eax, eax
push eax
push 0x4d7250
push eax
mov ecx, dword [ecx + 0xbc]
push eax
call fcn.004ca426
push 0x104
mov edx, 0x4d7040
mov ecx, 0x4d7250
call fcn.0048be18
call fcn.00489e05
cmp eax, esi
jne 0x483613
push 0x4d7040
mov ecx, edi
call fcn.004cbb8f
mov eax, 0x42d774
jmp 0x483618
mov eax, 0x4200dc
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x2c
mov ecx, edi
call fcn.00463bf0
mov ecx, edi
call fcn.004cbf9f
test dword [ebx + 0xc], 0x8000
mov eax, 0x42b990
jne 0x483643
mov eax, 0x4200dc
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x2c
mov ecx, edi
call fcn.00463bf0
push 0x42d794
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov ecx, dword [0x4d6258]
mov edx, 0x10001
add ecx, 0x30
mov eax, dword [ecx + 0xc]
cmp eax, 0x64
mov dword [esp + 0x34], eax
mov eax, dword [0x4d6258]
jge 0x483744
test byte [ecx + 8], 4
jne 0x483744
cmp dword [eax + 0x3c], 0x3e
jl 0x4836a4
mov edx, 0x60003
jmp 0x483749
cmp dword [eax + 0x3c], 0x3d
jl 0x4836b4
mov edx, 0x60002
jmp 0x483749
call fcn.0044fd46
test eax, eax
je 0x4836c7
mov edx, 0x60001
jmp 0x483749
mov eax, dword [ecx + 4]
mov dword [esp + 0x30], eax
test eax, 0x6c0000
jne 0x48373d
cmp dword [ecx + 0xc], 0x33
jge 0x48373d
call fcn.0046c3ce
test eax, eax
mov eax, dword [0x4d6258]
je 0x48371f
mov edx, dword [eax + 0x34]
test edx, 0x10000
je 0x4836fb
mov edx, 0x50004
jmp 0x483749
test edx, 0x800
je 0x48370a
mov edx, 0x50003
jmp 0x483749
and edx, 0xf000
neg edx
sbb edx, edx
and edx, 2
add edx, 0x50000
jmp 0x483749
test byte [eax + 0x44], 0x80
jne 0x483736
test dword [esp + 0x30], 0x17c
jne 0x483736
cmp dword [esp + 0x34], 0x28
jl 0x483749
mov edx, 0x20000
jmp 0x483749
mov edx, 0x60000
jmp 0x483749
mov edx, 0xa0000
push edx
push 0x42d7b4
push 0x50
push dword [esp + 0x30]
call fcn.00442802
add esp, 0x10
test eax, eax
jne 0x483ad3
push dword [esp + 0x24]
mov ecx, edi
call fcn.004cbb8f
push 0x2c
mov ecx, edi
call fcn.00463bf0
push 0x42d7bc
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
cmp dword [esp + 0x2c], 0
je 0x4837f1
mov eax, dword [0x4d6258]
test byte [eax + 0x34], 8
je 0x4837f1
mov al, byte [eax + 0x44]
and al, 0x82
cmp al, 2
jne 0x4837f1
push 2
mov ecx, edi
call fcn.004cbfea
push 0x42d7d8
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x42d824
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x4200db
mov esi, 0x925
xor edx, edx
push esi
xor ecx, ecx
call fcn.004cb5e7
push esi
call dword [sym.imp.msvcrt.dll_exit]
mov eax, dword [ebx + 0x1c]
mov ecx, 0x600
test byte [eax + 0x68], 4
jne 0x483804
test dword [ebx + 0xc], ecx
jne 0x483815
mov eax, dword [esp + 0x14]
test eax, eax
je 0x48381c
cmp eax, esi
jne 0x483815
test dword [ebx + 0xc], ecx
jne 0x48381c
mov eax, 0x42d6a0
jmp 0x483834
push 0x42d84c
push 0x42d860
push edi
call fcn.004cbce0
add esp, 0xc
mov eax, 0x42d868
push eax
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x26e
push esi
push 8
push 0x801026e
push 0x42d87c
push 0x50
push dword [esp + 0x3c]
call fcn.00442802
add esp, 0x1c
test eax, eax
jne 0x483ac7
push dword [esp + 0x24]
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov ecx, dword [esp + 0x28]
push ebx
call fcn.0048f291
test eax, eax
je 0x4838a5
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
push 0x5f
mov ecx, edi
call fcn.00463bf0
mov eax, 0x42d8a0
jmp 0x4838aa
mov eax, 0x42d6a0
push eax
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov eax, dword [ebx + 0x148]
xor ecx, ecx
cmp word [eax + 0x24], cx
je 0x4838de
call fcn.00489e05
cmp eax, esi
jne 0x4838d7
mov eax, 0x42d8b4
jmp 0x4838e3
mov eax, 0x42d8c8
jmp 0x4838e3
mov eax, 0x4200dc
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x42651c
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
cmp dword [esp + 0x14], esi
jne 0x483917
mov eax, dword [0x4d6258]
test dword [eax + 0x34], 0x4000
mov eax, 0x42d8e4
jne 0x48391c
mov eax, 0x4200dc
push eax
mov ecx, edi
call fcn.004cbb8f
push 0x42d8f8
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x68]
not ecx
and ecx, 0x20
shr ecx, 5
test byte [eax + 0x68], 0x40
jne 0x483952
test byte [eax + 0x68], 0x80
je 0x483958
or ecx, 0x10000000
mov eax, dword [0x4d6258]
cmp dword [eax + 0x50], 3
je 0x483969
cmp dword [eax + 0x50], 2
jne 0x48396f
or ecx, 0x2000000
push ecx
push 0x42d924
push 0x50
push dword [esp + 0x30]
call fcn.00442802
add esp, 0x10
test eax, eax
jne 0x483abb
push dword [esp + 0x24]
mov ecx, edi
call fcn.004cbb8f
cmp dword [ebx + 0x14c], 0
mov ecx, edi
je 0x4839c6
call fcn.004cbf9f
push 0x26
mov ecx, edi
call fcn.00463bf0
push 0x42d93c
mov ecx, edi
call fcn.004cbb8f
push 0x2c
mov ecx, edi
call fcn.00463bf0
jmp 0x4839d7
call fcn.004cbf9f
push 0x42d94c
mov ecx, edi
call fcn.004cbb8f
cmp dword [esp + 0x2c], 0
jne 0x483a24
mov eax, dword [0x4d6258]
cmp dword [eax + 0x50], 3
je 0x4839ef
cmp dword [eax + 0x50], 2
jne 0x483a24
mov dword [esp + 0x10], 0x42d964
cmp dword [esp + 0x14], esi
je 0x483a05
mov dword [esp + 0x10], 0x42d974
mov ecx, edi
call fcn.004cbf9f
push 0x42d6a4
mov ecx, edi
call fcn.004cbb8f
push dword [ebx + 0x2c]
mov ecx, edi
call fcn.004cbb8f
jmp 0x483a2b
mov ecx, edi
call fcn.004cbf9f
push dword [esp + 0x10]
mov ecx, edi
call fcn.004cbb8f
push 0x42d980
mov ecx, edi
call fcn.004cbb8f
cmp dword [ebx + 0xc8], 0
jne 0x483a62
cmp dword [0x4d76c4], 0
jne 0x483a62
mov ecx, edi
call fcn.004cbf9f
mov eax, 0x4200dc
jmp 0x483a86
mov ecx, edi
call fcn.004cbf9f
push 0x4268bc
mov ecx, edi
call fcn.004cbb8f
push 0x4d7040
mov ecx, edi
call fcn.004cbb8f
mov eax, 0x42d99c
push eax
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.004cbf9f
push 0x42bd04
mov ecx, edi
call fcn.004cbb8f
mov ecx, edi
call fcn.00463c3f
call fcn.004cbf9f
lea ecx, [esp + 0x1c]
call fcn.004b7fcd
jmp 0x482f9d
push 0x42d628
mov edx, 0x3e3
jmp 0x483ae9
push 0x42d628
mov edx, 0x39e
jmp 0x483ae9
push 0x42d628
mov edx, 0x36d
jmp 0x483ae9
push 0x42d560
mov edx, 0x20b
mov ecx, 0x42d408
call fcn.004ca0da
int3