Function at 0x499e0b
Capabilities:
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x24], esi
cmp dword [esi + 0x70], 0xffffffff
jne 0x49a0ea
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 0xc0]
mov ecx, ebx
mov eax, dword [ebx + 0xc]
mov dword [esi + 0x70], eax
movzx eax, word [esi + 0x24]
push eax
call fcn.00489b63
mov ecx, esi
call fcn.0049a451
movzx ecx, ax
mov al, byte [esi + 0x80]
and al, 3
mov dword [esp + 0x10], ecx
cmp al, 3
jne 0x499e71
mov ax, word [esi + 0x20]
dec ax
shl ax, 0xc
or word [esp + 0x10], ax
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, ebx
call fcn.00489b63
mov ecx, esi
call fcn.0049a451
movzx edi, ax
mov dword [esp + 0x10], edi
jmp 0x499ea1
add edi, 0xffff
mov dword [esp + 0x14], edi
call fcn.00495c56
push 0
mov ecx, ebx
call fcn.00495e65
cmp word [esp + 0x10], 0
mov ecx, ebx
push 0
ja 0x499e89
call fcn.00495e65
push dword [ebp + 8]
mov ecx, esi
call fcn.00499d8b
mov eax, dword [esi + 4]
lea ecx, [esp + 0x28]
mov edi, dword [esi + 0x70]
and dword [esp + 0x10], 0
add edi, 4
and dword [esp + 0x20], 0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x14]
push eax
call fcn.0047140b
test eax, eax
jne 0x49a0e0
lea eax, [edi + 3]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x14]
call esi
cmp eax, 0x25
mov eax, dword [esp + 0x14]
jne 0x499f35
mov eax, dword [eax + 4]
test eax, eax
je 0x499f24
mov eax, dword [eax + 4]
mov dword [esp + 0x10], eax
jmp 0x499f29
and dword [esp + 0x10], 0
xor esi, esi
inc esi
mov dword [esp + 0x20], esi
jmp 0x49a030
mov eax, dword [eax + 0x64]
mov dword [esp + 0x18], eax
test eax, eax
je 0x49a0c0
mov eax, dword [eax]
mov esi, dword [eax + 0x4c]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x18]
call esi
mov ecx, ebx
mov dword [esp + 0x18], eax
call fcn.00495d4e
mov esi, dword [esp + 0x1c]
cmp esi, dword [ebx + 8]
jge 0x49a0f3
mov ecx, dword [ebx + 4]
mov byte [edi + ecx], 4
mov ecx, dword [ebx + 4]
mov byte [edi + ecx + 1], 2
mov eax, dword [ebx + 4]
mov ecx, dword [esp + 0x18]
mov byte [edi + eax + 2], 2
mov eax, dword [ebx + 4]
mov byte [edi + eax + 3], 2
mov eax, dword [ebx]
mov dword [edi + eax], ecx
add edi, 4
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
test eax, eax
je 0x49a022
mov eax, dword [eax + 4]
mov dword [esp + 0x18], eax
test eax, eax
je 0x49a022
mov eax, dword [eax]
mov esi, dword [eax + 0xc4]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x18]
call esi
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx]
test eax, eax
je 0x499ff9
mov esi, dword [esi + 0x130]
mov ecx, esi
push 0
call dword [0x4d8248]
mov ecx, dword [esp + 0x1c]
call esi
or eax, 0xffff8000
mov ecx, ebx
movzx eax, ax
push edi
push eax
call fcn.0049a406
jmp 0x49a018
mov esi, dword [esi + 0xe0]
mov ecx, esi
push edi
call dword [0x4d8248]
mov ecx, dword [esp + 0x1c]
call esi
sub eax, edi
mov ecx, ebx
push eax
call fcn.00495ead
add edi, 2
add dword [esp + 0x1c], 6
jmp 0x49a02c
add edi, 2
add esi, 6
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x20]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
call fcn.0047140b
test eax, eax
je 0x499ef4
test esi, esi
je 0x49a0e0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x49a05d
push edi
push eax
jmp 0x49a0e3
mov eax, dword [eax]
mov esi, dword [eax + 0xc4]
mov ecx, esi
call dword [0x4d8248]
mov ecx, dword [esp + 0x10]
call esi
mov ecx, dword [esp + 0x10]
mov esi, dword [ecx]
test eax, eax
je 0x49a0a6
mov esi, dword [esi + 0x130]
mov ecx, esi
push 0
call dword [0x4d8248]
mov ecx, dword [esp + 0x14]
call esi
or eax, 0xffff8000
mov ecx, ebx
movzx eax, ax
push edi
push eax
call fcn.0049a406
jmp 0x49a0ea
mov esi, dword [esi + 0xe0]
mov ecx, esi
push edi
call dword [0x4d8248]
mov ecx, dword [esp + 0x14]
call esi
sub eax, edi
push eax
jmp 0x49a0e3
mov ecx, dword [esp + 0x24]
call fcn.00444280
push eax
mov esi, 0x924
xor edx, edx
push esi
xor ecx, ecx
call fcn.004cb5e7
push esi
call dword [sym.imp.msvcrt.dll_exit]
push edi
push 0xffffffffffffffff
mov ecx, ebx
call fcn.00495ead
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x4325e8
mov edx, 0x2e4
mov ecx, 0x432258
call fcn.004ca0da
int3