Function at 0x4a9681
Capabilities:
Terminate process

Disassembly:
mov eax, 0x40fb19
call fcn.004ab800
sub esp, 0x1d8
mov al, byte [ebp + 0x13]
push ebx
push esi
xor ebx, ebx
push edi
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x44], al
call fcn.004a3320
mov al, byte [ebp + 0x13]
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], ebx
mov byte [ebp - 0x30], al
call fcn.004a3320
mov al, byte [ebp + 0x13]
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
mov byte [ebp - 0x64], al
call fcn.004a3320
mov al, byte [ebp + 0x13]
push ebx
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 2
mov byte [ebp - 0x84], al
call fcn.004a3320
mov al, byte [ebp + 0x13]
push ebx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
mov byte [ebp - 0x54], al
call fcn.004a3320
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x1e3]
mov byte [ebp - 0x1e4], bl
push 6
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
cmp dword [ebp + 0x10], ebx
lea edi, [ebp - 0xdc]
mov dword [ebp - 0xe0], ebx
mov byte [ebp - 4], 4
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x34], ebx
mov esi, 0x4101f0
je 0x4a99c2
mov edi, dword [ebp + 0xc]
mov esi, 0x413234
push esi
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
je 0x4a9856
mov esi, 0x4143b0
push esi
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
jne 0x4a97c4
push 0x4143a8
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
jne 0x4a97c4
push 0x4143a0
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
jne 0x4a97c4
push 0x414398
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
jne 0x4a97c4
push 0x41438c
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
jne 0x4a97c4
push 0x10
push 0x41321c
push 0x4142f8
push ebx
call dword [0x4101cc]
push 0xfffffffffffffffb
call fcn.004aaf40
push esi
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
je 0x4a97d9
mov dword [0x413070], ebx
jmp 0x4a984b
push 0x4143a8
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
je 0x4a97f6
mov dword [0x413070], 1
jmp 0x4a984b
push 0x4143a0
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
je 0x4a9813
mov dword [0x413070], 2
jmp 0x4a984b
push 0x414398
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
je 0x4a9830
mov dword [0x413070], 3
jmp 0x4a984b
push 0x41438c
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
je 0x4a984b
mov dword [0x413070], 4
mov dword [0x413074], ebx
jmp 0x4a9922
push esi
push edi
call fcn.004ab020
pop ecx
test eax, eax
pop ecx
jne 0x4a986d
mov dword [0x413074], 1
cmp dword [0x413074], ebx
je 0x4a9922
mov al, byte [ebp + 0x13]
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call fcn.004a3320
mov edi, 0x4151bc
mov byte [ebp - 4], 5
push edi
call fcn.004ab240
pop ecx
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.004a6bb7
mov eax, dword [0x415b98]
cmp eax, 0x68
je 0x4a98b6
cmp eax, 0x67
je 0x4a98b6
cmp eax, 0x66
jne 0x4a98ed
lea eax, [ebp - 0x20]
push 0x415170
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004a6dc5
add esp, 0xc
push dword [0x4101f4]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
push ebx
push eax
call fcn.004a6974
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 5
call fcn.004a3320
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jne 0x4a98f9
mov eax, 0x4101f0
push 0x24
push 0x41321c
push eax
push ebx
call dword [0x4101cc]
cmp eax, 7
jne 0x4a9914
push 0xfffffffffffffffe
call fcn.004aaf40
push 1
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.004a3320
mov eax, dword [0x415b98]
cmp eax, 0x68
je 0x4a9936
cmp eax, 0x67
je 0x4a9936
cmp eax, 0x66
jne 0x4a9961
call fcn.004a7487
test eax, eax
jne 0x4a9961
cmp dword [0x413074], ebx
je 0x4a995a
push 0x10
push 0x41321c
push 0x41512c
push ebx
call dword [0x4101cc]
push 0xfffffffffffffffa
call fcn.004aaf40
cmp dword [0x413074], ebx
mov edi, dword [0x4101c4]
je 0x4a998f
push ebx
push 0x40138f
call edi
push eax
push 0x67
push dword [ebp + 8]
call dword [0x4101c8]
cmp eax, 0xffffffff
jne 0x4a998f
push 0xfffffffffffffffe
call fcn.004aaf40
push ebx
push 0x4012ac
call edi
push eax
push 0x66
push dword [ebp + 8]
call dword [0x410198]
mov ecx, dword [0x413074]
mov dword [0x415ba4], eax
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
push eax
call dword [0x41019c]
mov esi, 0x4101f0
call fcn.004a7738
cmp dword [ebp + 0x10], ebx
je 0x4a99e5
mov eax, dword [0x415c80]
push 0xffffffffffffffff
push eax
push 0x62b
push dword [0x415ba4]
call dword [0x4101b4]
mov eax, dword [0x415c7c]
mov ecx, dword [eax]
cmp ecx, eax
je 0x4a9e1d
mov edi, 0x414100
mov eax, dword [eax + 4]
mov ecx, 0x415c30
add eax, 8
push eax
call fcn.004a9fcd
mov eax, dword [0x415c7c]
mov ecx, 0x415c78
push dword [eax + 4]
lea eax, [ebp + 0xc]
push eax
call fcn.004aa660
lea eax, [ebp - 0x1e4]
push 0x104
push eax
call dword [0x410088]
lea eax, [ebp - 0x1e4]
push 0x5c
push eax
call fcn.004aba20
pop ecx
mov byte [eax], bl
pop ecx
mov eax, 0x100
mov ecx, dword [0x415c70]
and ecx, eax
cmp ecx, eax
jne 0x4a9b04
mov eax, dword [0x415c34]
cmp eax, ebx
jne 0x4a9a64
mov eax, esi
push eax
movsx eax, byte [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e4]
push 0x414104
push eax
call fcn.004ab13e
lea eax, [ebp - 0x1e4]
push eax
call fcn.004ab240
add esp, 0x14
lea ecx, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.004a6bb7
push edi
call fcn.004ab240
pop ecx
push eax
push edi
lea ecx, [ebp - 0x44]
call fcn.004a6b60
lea eax, [ebp - 0x44]
push 0x415c40
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004a6e4e
add esp, 0xc
push dword [0x4101f4]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 7
push ebx
push eax
call fcn.004a6974
push 1
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 4
call fcn.004a3320
push dword [0x4101f4]
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x64]
push ebx
push eax
call fcn.004a6974
and byte [0x415c71], 0xfe
jmp 0x4a9ba3
lea eax, [ebp - 0x1e4]
push edi
push eax
call fcn.004ab940
push edi
call fcn.004ab240
add esp, 0xc
mov ecx, 0x415c30
push eax
push edi
call fcn.004a6b60
lea eax, [ebp - 0x1e4]
push 0x415c30
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.004a6ed4
add esp, 0xc
push dword [0x4101f4]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 8
push ebx
push eax
call fcn.004a6974
push 1
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 4
call fcn.004a3320
lea eax, [ebp - 0x44]
push 0x415c40
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.004a6e4e
add esp, 0xc
push dword [0x4101f4]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 9
push ebx
push eax
call fcn.004a6974
push 1
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 4
call fcn.004a3320
cmp byte [0x415c74], bl
je 0x4a9bbd
lea eax, [ebp - 0x30]
push eax
call fcn.004aa474
test al, al
pop ecx
je 0x4a9e0d
cmp dword [ebp + 0x10], ebx
je 0x4a9bf5
push ebx
push ebx
push 0x62c
push dword [0x415ba4]
call dword [0x4101b4]
mov eax, dword [0x415c64]
cmp eax, ebx
jne 0x4a9be0
mov eax, esi
push dword [ebp - 0x10]
push eax
push 0x62d
push dword [0x415ba4]
call dword [0x4101b4]
cmp dword [0x413074], ebx
je 0x4a9c08
push 0x96
call dword [0x410060]
mov eax, dword [0x415c70]
cmp eax, 8
je 0x4a9dfd
cmp eax, 0x10
je 0x4a9dfd
cmp eax, 0x20
je 0x4a9d3e
cmp eax, 0x40
je 0x4a9dfd
cmp eax, 0x200
je 0x4a9dfd
cmp eax, 0x1000
jne 0x4a9e0d
push 1
call fcn.004a7283
mov eax, dword [ebp - 0x2c]
pop ecx
cmp eax, ebx
jne 0x4a9c58
mov eax, esi
push eax
call fcn.004a7450
test eax, eax
pop ecx
je 0x4a9e0d
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x4a9c70
mov eax, esi
push eax
call dword [0x410068]
test eax, eax
jne 0x4a9e0d
push 0xa
call dword [0x410060]
call dword [0x410098]
push eax
lea eax, [ebp - 0x1c]
push 0x4140d0
push eax
call fcn.004ab13e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.004a6dc5
mov eax, dword [eax + 4]
add esp, 0x18
cmp eax, ebx
jne 0x4a9cbc
mov eax, esi
mov ecx, dword [ebp - 0x2c]
cmp ecx, ebx
jne 0x4a9cc5
mov ecx, esi
push 8
push eax
push ecx
call dword [0x4100d8]
push 1
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.004a3320
cmp esi, ebx
je 0x4a9d26
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004a6dc5
mov eax, dword [eax + 4]
add esp, 0xc
cmp eax, ebx
jne 0x4a9d05
mov eax, 0x4101f0
push 4
push ebx
push eax
call dword [0x4100d8]
push 1
lea ecx, [ebp - 0xa4]
call fcn.004a3320
mov esi, 0x4101f0
jmp 0x4a9e0d
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x4a9d32
mov eax, 0x4101f0
push 4
push ebx
push eax
call dword [0x4100d8]
jmp 0x4a9d1c
push 0xf003f
push ebx
push ebx
call dword [0x410040]
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x4a9e81
mov eax, dword [0x415c54]
cmp eax, ebx
jne 0x4a9d61
mov eax, esi
push 0x10024
push eax
push dword [ebp + 8]
call dword [0x410048]
mov esi, eax
cmp esi, ebx
je 0x4a9dd5
push 0x414ab8
push 0x415c50
call fcn.004aa754
pop ecx
test al, al
pop ecx
jne 0x4a9dce
push 0x414a9c
push 0x415c50
call fcn.004aa754
pop ecx
test al, al
pop ecx
jne 0x4a9dce
push 0x414a80
push 0x415c50
call fcn.004aa754
pop ecx
test al, al
pop ecx
jne 0x4a9dce
lea eax, [ebp - 0xe0]
push eax
push 1
push esi
call dword [0x410010]
push esi
call dword [0x410014]
jmp 0x4a9dd5
mov dword [ebp - 0x34], 1
push esi
call dword [0x41004c]
push dword [ebp + 8]
call dword [0x41004c]
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x4a9df1
mov eax, 0x4101f0
push eax
call dword [0x410068]
jmp 0x4a9d1c
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
jne 0x4a9e06
mov eax, esi
push eax
call dword [0x410068]
mov eax, dword [0x415c7c]
inc dword [ebp - 0x10]
cmp dword [eax], eax
jne 0x4a99f9
cmp dword [ebp + 0x10], ebx
je 0x4a9e3a
mov eax, dword [0x415c90]
push ebx
push eax
push 0x62b
push dword [0x415ba4]
call dword [0x4101b4]
mov eax, dword [0x415c8c]
cmp dword [eax], eax
je 0x4a9ea3
mov eax, dword [eax + 4]
push dword [0x4101f4]
add eax, 8
lea ecx, [ebp - 0x54]
push ebx
push eax
call fcn.004a6974
mov eax, dword [0x415c8c]
mov ecx, 0x415c88
push dword [eax + 4]
lea eax, [ebp + 8]
push eax
call fcn.004aa6f6
lea eax, [ebp - 0x54]
push eax
push 0x80000002
call fcn.004aa379
pop ecx
pop ecx
jmp 0x4a9e3a
cmp dword [0x413074], ebx
je 0x4a9e9c
push 0x10
push 0x41321c
push 0x413cec
push ebx
call dword [0x4101cc]
push 0xfffffffffffffffa
call fcn.004aaf40
cmp dword [ebp + 0x10], ebx
je 0x4a9eb4
push dword [0x415ba4]
call dword [0x4101a4]
cmp dword [0x413070], 3
jne 0x4a9ec2
call fcn.004aa109
cmp dword [0x413070], 4
jne 0x4a9ed0
call fcn.004aa241
cmp dword [ebp + 0x10], ebx
je 0x4a9f78
cmp dword [0x413074], ebx
je 0x4a9f72
mov al, byte [ebp + 0x13]
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call fcn.004a3320
mov edi, 0x4150e8
push edi
call fcn.004ab240
pop ecx
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.004a6bb7
cmp dword [ebp - 0x34], ebx
mov byte [ebp - 4], 0xa
jne 0x4a9f36
mov eax, dword [0x415b98]
cmp eax, 0x68
je 0x4a9f27
cmp eax, 0x67
je 0x4a9f27
cmp eax, 0x66
jne 0x4a9f36
mov eax, dword [0x413070]
cmp eax, 3
je 0x4a9f36
cmp eax, 4
jne 0x4a9f4c
mov edi, 0x4150a8
push edi
call fcn.004ab240
pop ecx
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.004a6b60
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jne 0x4a9f55
mov eax, esi
push 0x40
push 0x41321c
push eax
push ebx
call dword [0x4101cc]
push 1
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.004a3320
push ebx
call fcn.004aaf40
push 1
lea ecx, [ebp - 0x54]
pop esi
mov byte [ebp - 4], 3
push esi
call fcn.004a3320
push esi
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 2
call fcn.004a3320
push esi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.004a3320
push esi
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], bl
call fcn.004a3320
or dword [ebp - 4], 0xffffffff
push esi
lea ecx, [ebp - 0x44]
call fcn.004a3320
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret