Function at 0x4997ff
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push ebp
push esi
mov ebx, edx
mov esi, ecx
push edi
push 4
pop ebp
mov ecx, dword [esi + ebx*4 + 0x178]
test ecx, ecx
jne 0x49983e
lea eax, [esp + 0x10]
push eax
push ecx
push 0x2c
pop edx
mov ecx, 0x120
call fcn.00484ef6
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov dword [esi + ebx*4 + 0x178], eax
mov dword [eax + 0x48], ecx
mov dword [ecx + 0x1c], ebp
jmp 0x4998b5
call fcn.004935f7
push 0x120
push 0
push dword [esi + ebx*4 + 0x178]
call fcn.005bb370
mov edx, dword [esi + ebx*4 + 0x178]
add esp, 0xc
mov ecx, edx
neg ecx
sbb ecx, ecx
lea eax, [edx + 0x124]
and ecx, eax
xor eax, eax
mov dword [edx + 0x48], ecx
mov edi, dword [esi + ebx*4 + 0x178]
push 7
pop ecx
mov edi, dword [edi + 0x48]
rep stosd dword es:[edi], eax
mov eax, dword [esi + ebx*4 + 0x178]
mov ecx, dword [eax + 0x48]
mov edx, ecx
neg edx
sbb edx, edx
lea eax, [ecx + 0x20]
and edx, eax
jne 0x49989d
xor eax, eax
jmp 0x4998a0
mov eax, dword [edx - 4]
push eax
lea eax, [ecx + 0x20]
neg ecx
push 0
sbb ecx, ecx
and ecx, eax
push ecx
call fcn.005bb370
add esp, 0xc
mov edx, dword [esp + 0x18]
push 0x10
mov eax, dword [esi + edx*4 + 0x150]
mov dword [eax + 0x74], ebx
lea eax, [ebx + 1]
mov dword [esi + 0x1a0], eax
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x30], 0x50
mov ecx, dword [esi + ebx*4 + 0x178]
mov eax, dword [esi + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [esi + ebx*4 + 0x178]
pop ecx
push 0x1c
mov dword [eax + 0x20], 0x4997cd
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x24], fcn.00496eea
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x28], fcn.004939f2
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x44], edx
mov eax, dword [esi + ebx*4 + 0x178]
pop edx
mov dword [eax + 0x78], ebp
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x40], ebx
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x7c], 0
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x34], esi
mov eax, dword [esp + 0x1c]
cmp word [eax], 0x17
cmove ecx, edx
push ecx
mov ecx, dword [esi + ebx*4 + 0x178]
push eax
mov ecx, dword [ecx + 0x48]
call section..text
mov eax, dword [esi + ebx*4 + 0x178]
mov ecx, 0x15e0
mov dword [eax + 0x5c], ecx
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0x60], ecx
push dword [esi + 0x148]
call fcn.00582cd0
mov ecx, dword [esi + ebx*4 + 0x178]
add esp, 0xc
mov dword [ecx + 0x38], eax
mov eax, dword [esi + ebx*4 + 0x178]
push esi
push dword [0x74367c]
push dword [eax + 0x38]
call fcn.00583b50
add esp, 0xc
mov edi, 0x1622
push edi
push 0x743080
push 1
push 0x1000
call fcn.005ed7c0
mov ecx, dword [esi + ebx*4 + 0x178]
add esp, 0x10
mov dword [ecx + 0xec], eax
test eax, eax
je 0x499a15
mov eax, dword [esi + ebx*4 + 0x178]
mov dword [eax + 0xf4], 0x1000
mov ecx, dword [esi + ebx*4 + 0x178]
call fcn.0049363e
mov ecx, ebp
call fcn.0048b083
mov ecx, dword [esi + ebx*4 + 0x178]
pop edi
pop esi
pop ebp
mov dword [ecx + 0xe0], eax
pop ebx
pop ecx
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edx, 0x74309c
push esi
push edi
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x7430b8
push 0x7430d4
call fcn.00401109
add esp, 0xc
push esi
call fcn.005c8390
int3