Function at 0x4ae8c2
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x598722
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
call fcn.004ae840
mov dword [0x6e3e80], eax
mov dword [0x6e3e84], edx
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
call fcn.0049ef72
add esp, 4
mov byte [ebp - 0x1c], al
push 0
push 0
push 0x7ee
call fcn.0049ef40
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x24]
jne 0x4ae922
cmp dword [ebp - 0x18], 0
jne 0x4ae980
mov dword [0x6e3e7c], 0
mov byte [ebp - 0x1c], 0
mov edx, 1
test edx, edx
je 0x4ae980
push 0xfffffffffffffffd
push 0x4a
push 0x688d30
push 0x4a
push 0x688d6c
call fcn.004b8320
add esp, 0x14
push 0xfffffffffffffffd
push 0x4a
push 0x688da8
call fcn.004afca3
add esp, 0xc
push 0xfffffffffffffffd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.00578c4a
xor eax, eax
mov al, byte [0x6e3e6d]
and eax, 1
test eax, eax
jne 0x4ae9b4
mov cl, byte [0x6e3e6d]
or cl, 1
mov byte [0x6e3e6d], cl
mov ecx, 0x6e3e54
call fcn.00540f00
push 0x4aee80
call fcn.00576b2b
add esp, 4
mov dword [ebp - 0x20], 0
mov ecx, 0x6e3e54
call fcn.00499260
and eax, 0xff
test eax, eax
je 0x4ae9de
push 0x6e3e54
call fcn.004b0070
add esp, 4
mov dword [ebp - 0x20], eax
push 0x688de4
push 5
lea edx, [ebp - 0x4c]
push edx
mov ecx, 0x6e3e54
call fcn.004b98a0
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x54]
call fcn.0049ea50
mov byte [ebp - 0x48], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.004995e0
mov ecx, dword [ebp - 0x48]
and ecx, 0xff
test ecx, ecx
je 0x4aeb58
push 0xffffffffffffffff
push 0x5c
mov ecx, 0x6e3e54
call fcn.004b9800
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x30]
add edx, 1
push edx
mov ecx, 0x6e3e54
call fcn.0049eca0
push eax
lea ecx, [ebp - 0x28]
call fcn.00498e70
mov dword [ebp - 4], 1
push str.libietb.fne
lea ecx, [ebp - 0x28]
call fcn.004b9740
lea ecx, [ebp - 0x28]
call fcn.0049eca0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x4aeb49
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
push 0x688dfc
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4aeb3f
call dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x78]
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0
je 0x4aeb3f
mov dword [0x6e3e68], 0
lea eax, [ebp - 0x3c]
push eax
push 0x36eefd
push 0x36eefd
call dword [ebp - 0x44]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0xff
test ecx, ecx
je 0x4aeb32
cmp dword [0x6e3e68], 1
jne 0x4aeb32
mov edx, dword [ebp - 0x38]
cmp edx, dword [0x6e1828]
jne 0x4aeb32
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jne 0x4aeb32
push 0
call fcn.0049ef72
add esp, 4
and eax, 0xff
test eax, eax
je 0x4aeb32
mov dword [ebp - 0x58], 1
jmp 0x4aeb39
mov dword [ebp - 0x58], 0
mov cl, byte [ebp - 0x58]
mov byte [ebp - 0x1c], cl
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.004995e0
mov dword [ebp - 0x10], 0x6e3e7c
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov cl, byte [eax + 2]
and ecx, 0x20
test ecx, ecx
je 0x4aeb7c
mov edx, dword [ebp - 0x10]
mov al, byte [edx + 2]
and al, 0xdf
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 2], al
mov edx, dword [ebp - 0x1c]
and edx, 0xff
test edx, edx
je 0x4aeb98
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 2]
or cl, 0x20
mov edx, dword [ebp - 0x10]
mov byte [edx + 2], cl
mov dword [ebp - 0x14], 0
push 0xfffffffffffffffd
push 0x88
push 0x688e08
push 0
mov eax, dword [0x6e3e7c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.004b5e90
add esp, 0x18
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4aec18
push 0xfffffffffffffffd
push 0x8a
push 0x688e44
push 0x8a
push 0x688e80
call fcn.004b8320
add esp, 0x14
push 0xfffffffffffffffd
push 0x8a
push 0x688ebc
call fcn.004afca3
add esp, 0xc
push 0xfffffffffffffffd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0
call fcn.00578c4a
cmp dword [0x6e3e4c], 0
jne 0x4aec39
mov dword [0x6e3e4c], 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.004afca3
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10