Function at 0x490a73
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
and dword [esp + 0xc], 0
push ebx
mov ebx, edx
mov dword [esp + 0xc], ecx
push esi
push edi
test ebx, ebx
je 0x491017
mov ecx, dword [ebx + 0x360]
test ecx, ecx
je 0x490aa4
add ecx, 0x44
call fcn.0044cfd4
mov ecx, dword [ebx + 0x3c4]
call fcn.004883f7
mov edi, eax
mov eax, dword [ebx + 0x360]
mov dword [esp + 0x10], edi
test eax, eax
je 0x490ac6
mov dword [eax + 0x44], 0
cmp dword [ebx + 0x380], 0
mov edx, 0xffff
jne 0x490b6b
push 0x393
push 0x741c00
push 1
push 0x20
call fcn.005ed7c0
mov edi, eax
add esp, 0x10
mov dword [ebx + 0x380], edi
test edi, edi
je 0x49101e
push 8
pop ecx
xor eax, eax
rep stosd dword es:[edi], eax
mov edi, 0x396
push edi
push 0x741c84
push 1
push 0xffff
call fcn.005ed7c0
mov ecx, dword [ebx + 0x380]
add esp, 0x10
mov dword [ecx + 4], eax
test eax, eax
jne 0x490b59
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edx, 0x741ca4
push esi
push edi
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x741cc4
push 0x741ce4
jmp 0x49104b
mov eax, dword [ebx + 0x380]
mov edx, 0xffff
mov edi, dword [esp + 0x10]
mov dword [eax + 0xc], edx
mov ecx, dword [ebx + 0x380]
mov eax, dword [ecx]
sub eax, 0
je 0x490f94
sub eax, 1
je 0x490f75
sub eax, 1
je 0x490c86
sub eax, 1
jne 0x491017
push 2
pop edi
cmp dword [ebp + 0x10], edi
jl 0x491017
mov eax, dword [ebp + 8]
mov esi, edi
cmp byte [eax + esi - 2], 0xd
jne 0x490bb6
cmp byte [esi + eax - 1], 0xa
je 0x490bc1
inc esi
cmp esi, dword [ebp + 0x10]
jle 0x490ba8
jmp 0x491017
cmp esi, edi
jne 0x490c7c
mov edx, dword [esp + 0x10]
xor edi, edi
inc edi
mov dword [ecx + 0x1c], edi
test edx, edx
je 0x490c1b
cmp dword [edx + 0x54], 0
je 0x490c1b
cmp dword [ebx + 0x378], 0
jne 0x490c24
mov ecx, dword [ebx + 0x380]
mov eax, dword [ecx + 0x10]
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x3e8]
push eax
push dword [edx + 0x38]
lea eax, [esp + 0x14]
push dword [edx + 0x34]
push edi
push dword [ecx + 0x14]
push eax
push dword [ecx + 4]
push dword [ebx + 0x3a0]
push 0
push ebx
call dword [edx + 0x54]
add esp, 0x28
cmp dword [ebx + 0x378], 0
je 0x490c32
and dword [ebx + 0x378], 0
mov ecx, ebx
call fcn.004907ec
mov eax, dword [esp + 0x14]
test eax, eax
je 0x490c45
mov ecx, eax
call fcn.00482681
test eax, eax
jne 0x490c7c
mov eax, dword [ebx + 0x380]
test eax, eax
je 0x490c75
cmp dword [eax + 4], 0
je 0x490c60
push edi
push dword [eax + 4]
call fcn.005ed680
pop ecx
pop ecx
push edi
push dword [ebx + 0x380]
call fcn.005ed680
and dword [ebx + 0x380], 0
pop ecx
pop ecx
mov edx, ebx
call fcn.0049086b
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
jmp 0x491017
mov eax, dword [ebp + 0x10]
mov esi, eax
cmp eax, dword [ecx + 0x18]
mov eax, dword [ecx + 0x10]
cmovge esi, dword [ecx + 0x18]
cmp eax, dword [ecx + 0x14]
je 0x490d71
mov eax, dword [ecx + 0xc]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x10]
add eax, dword [ecx + 8]
cmp eax, dword [ecx + 0xc]
jle 0x490d44
mov eax, dword [ecx + 8]
mov edi, edx
sub eax, dword [esp + 0x14]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x10]
add eax, dword [esp + 0x14]
cmp eax, edx
push 0x3de
cmovg edi, eax
mov eax, dword [ecx + 0xc]
push 0x741d0c
push 1
add eax, edi
mov dword [esp + 0x20], edi
push eax
push dword [ecx + 4]
call fcn.005ed970
mov edi, dword [esp + 0x24]
mov ecx, eax
add esp, 0x14
test ecx, ecx
jne 0x490d2e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x3df
push esi
push edi
mov edx, 0x741d2c
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x741d4c
push 0x741d6c
jmp 0x49104b
mov eax, dword [ebx + 0x380]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x380]
mov ecx, dword [esp + 0x14]
add dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x380]
push esi
push dword [ebp + 8]
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
sub edx, eax
add ecx, eax
call section..text
mov eax, dword [ebx + 0x380]
pop ecx
pop ecx
add dword [eax + 8], esi
mov eax, dword [esp + 0x18]
jmp 0x490d74
xor eax, eax
inc eax
xor edx, edx
mov dword [esp + 0xc], edx
test edi, edi
je 0x490f45
cmp dword [edi + 0x54], edx
je 0x490f45
cmp dword [ebx + 0x378], edx
jne 0x490f45
test eax, eax
mov dword [esp + 0xc], edx
lea eax, [ebx + 0x3e8]
push eax
push dword [edi + 0x38]
push dword [edi + 0x34]
push edx
je 0x490ed7
push esi
lea eax, [esp + 0x20]
push eax
push dword [ebp + 8]
push dword [ebx + 0x3a0]
push edx
push ebx
call dword [edi + 0x54]
mov ecx, dword [esp + 0x34]
add esp, 0x28
mov eax, dword [ebx + 0x380]
test ecx, ecx
jne 0x490ea9
and dword [eax + 0x10], ecx
mov eax, dword [ebx + 0x380]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x14], esi
mov eax, dword [ebx + 0x380]
mov edx, dword [eax + 8]
mov edi, dword [eax + 0xc]
mov dword [esp + 0x18], edi
lea eax, [edx + ecx]
cmp eax, edi
jle 0x490e7d
sub edx, edi
mov edi, 0xffff
push 0x420
push 0x741d90
push 1
lea eax, [edx + ecx]
cmp eax, edi
cmovg edi, eax
mov eax, dword [esp + 0x24]
add eax, edi
push eax
mov eax, dword [ebx + 0x380]
push dword [eax + 4]
call fcn.005ed970
mov ecx, eax
add esp, 0x14
test ecx, ecx
jne 0x490e6b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x421
push esi
push edi
mov edx, 0x741db0
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x741dd0
push 0x741df0
jmp 0x49104b
mov eax, dword [ebx + 0x380]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x380]
add dword [eax + 0xc], edi
mov ecx, dword [ebx + 0x380]
push esi
push dword [ebp + 8]
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ecx + 4]
sub edx, eax
add ecx, eax
call section..text
mov eax, dword [ebx + 0x380]
pop ecx
pop ecx
add dword [eax + 8], esi
jmp 0x490f3f
xor edx, edx
cmp ecx, esi
je 0x490ec0
mov dword [eax + 0x10], ecx
mov eax, dword [ebx + 0x380]
mov dword [eax + 0x14], esi
jmp 0x490f45
mov dword [eax + 0x10], edx
mov eax, dword [ebx + 0x380]
mov dword [eax + 0x14], edx
mov eax, dword [ebx + 0x380]
mov dword [eax + 8], edx
jmp 0x490f45
mov ecx, dword [ebx + 0x380]
mov eax, dword [ecx + 8]
sub eax, dword [ecx + 0x10]
push eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [ecx + 4]
add eax, dword [ecx + 0x10]
push eax
push dword [ebx + 0x3a0]
push edx
push ebx
call dword [edi + 0x54]
mov ecx, dword [ebx + 0x380]
add esp, 0x28
mov edi, dword [esp + 0xc]
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp edi, eax
jne 0x490f2d
xor edx, edx
mov dword [ecx + 0x10], edx
mov eax, dword [ebx + 0x380]
mov dword [eax + 0x14], edx
mov eax, dword [ebx + 0x380]
mov dword [eax + 8], edx
jmp 0x490f41
lea eax, [edx + edi]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebx + 0x380]
mov eax, dword [ecx + 8]
mov dword [ecx + 0x14], eax
xor edx, edx
mov dword [esp + 0xc], esi
mov ecx, dword [ebx + 0x380]
mov eax, dword [esp + 0xc]
sub dword [ecx + 0x18], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [esp + 0xc]
mov dword [ecx], eax
mov eax, dword [ebx + 0x380]
cmp dword [eax + 0x18], edx
jne 0x491017
mov dword [eax], 1
jmp 0x491017
push 2
pop edi
cmp dword [ebp + 0x10], edi
jl 0x491017
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
mov eax, dword [ebx + 0x380]
and dword [eax], 0
jmp 0x491017
cmp dword [ebp + 0x10], 3
jl 0x491017
push 2
pop edi
cmp dword [ebp + 0x10], edi
jle 0x491017
mov ecx, dword [ebp + 8]
cmp byte [ecx + edi - 2], 0xd
jne 0x490fb3
cmp byte [edi + ecx - 1], 0xa
je 0x490fbb
inc edi
cmp edi, dword [ebp + 0x10]
jl 0x490fa5
jmp 0x491017
push 1
lea eax, [edi - 2]
xor edx, edx
push 0x741d08
push eax
call fcn.00488caf
mov esi, eax
add esp, 0xc
lea eax, [esp + 0x1c]
mov ecx, dword [esi]
push 0x10
push eax
mov edx, dword [ecx + 4]
mov ecx, dword [ecx]
mov byte [edx + ecx], 0
mov ecx, dword [esi]
push dword [ecx]
call fcn.006064d0
mov ecx, dword [ebx + 0x380]
add esp, 0xc
mov dword [ecx + 0x18], eax
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
mov ecx, dword [ebx + 0x380]
mov eax, dword [ecx + 0x18]
neg eax
sbb eax, eax
add eax, 3
mov dword [ecx], eax
mov ecx, esi
call fcn.00488e73
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x393
push esi
push edi
mov edx, 0x741c20
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x741c40
push 0x741c60
call fcn.00401109
add esp, 0xc
push esi
call fcn.005c8390
int3