Function at 0x4e299f
Capabilities:
Terminate process

Disassembly:
mov edx, esi
mov eax, ebx
bswap ax
mov eax, ebx
call fcn.00425936
jmp case.0x50d043.0
mov edx, dword [esi]
mov eax, ebx
jmp fcn.005363e2
mov edx, esi
lahf
cmovg ax, si
mov eax, ebx
jmp fcn.0051cbed
mov edx, dword [esi]
movzx ax, bh
bswap eax
mov eax, ebx
jmp fcn.00492324
call fcn.004a5f5e
jmp case.0x50d043.0
lea edx, [eax + 4]
push dword [edx + 4]
push dword [edx]
jmp 0x48d8f5
mov byte [0x451735], 1
mov edi, esi
setns al
mov eax, dword [edi]
jmp 0x4c8529
mov eax, esi
cdq
mov ecx, dword [eax + 4]
movzx edx, sp
cdq
jmp 0x4989b6
call fcn.004ff210
jmp case.0x50d043.0
mov eax, ebx
call fcn.0055d362
mov dword [ebp - 8], eax
stc
cmc
xor eax, eax
jmp loc.0041f24d
mov edx, dword [esi]
not ax
mov eax, ebx
jmp 0x4f6f12
cmp byte [edx + 0xe8], 0
jmp 0x483786
mov edx, esi
nop
cwde
mov al, 0x48
mov eax, ebx
jmp 0x48c06a
call fcn.004ff89a
jmp case.0x50d043.0
jl case.0x50d043.0
push 1
mov al, 0x99
mov ecx, dword [edi + 4]
cbw
mov edx, dword [edi]
movsx eax, di
mov eax, ebx
setnp ah
mov eax, ebx
jmp 0x54658f
mov eax, esi
cdq
mov edx, dword [eax + 8]
movzx ecx, ax
mov cx, sp
push edx
jmp 0x4bdd11
je 0x50d037
cmp al, 2
jmp 0x4917af
mov eax, esi
movsx cx, dh
not cl
bswap cx
mov edx, dword [eax + 8]
jmp 0x564dfe
mov eax, esi
mov edx, dword [eax + 8]
push edx
mov ecx, dword [eax + 4]
movsx edx, bp
xchg edx, edx
setg dl
mov edx, dword [eax]
lahf
bswap eax
mov eax, ebx
jmp loc.00414b66
call fcn.00419f35
mov dword [ebp - 4], eax
mov ecx, 0x40205e72
movsx ax, dl
push 4
movsx ecx, bp
lea ecx, [ebp - 4]
mov eax, dword [0x42e9c8]
mov eax, dword [eax]
not dl
mov dl, 0xf
jmp 0x4f71ed
call sub.kernel32.dll_TerminateProcess
jmp case.0x50d043.0
call fcn.00519776
jmp case.0x50d043.0
push 0
jmp 0x4ccabb
mov ebx, dword [ebp + 8]
rcl dh, 0x81
mov edx, dword [ebx + 4]
stc
jmp 0x47f3f1
mov edx, dword [eax]
mov eax, ebx
jmp 0x4e2c74
je 0x50d037
cmp al, 3
jmp loc.00428dd7
mov edx, dword [eax + 0xc]
setae cl
jmp 0x538810
push dword [edx + 4]
jmp 0x4f0ee0
call fcn.0046f144
jmp case.0x50d043.0
mov edx, dword [eax]
cmovae eax, edi
mov eax, ebx
jmp 0x4f67d4
call fcn.00420323
jmp case.0x50d043.0
mov edx, dword [esi]
mov eax, ebx
jmp 0x47fc56
mov edi, esi
movsx eax, dx
mov eax, dword [edi + 8]
push eax
bswap ecx
mov ecx, dword [edi + 4]
mov edx, 0x73184650
mov edx, dword [edi]
mov eax, ebx
jmp 0x4871fa
mov edx, dword [eax + 0x10]
movsx ecx, bx
xchg cx, cx
push edx
not dl
mov ecx, dword [eax + 4]
seta dl
mov dl, 0x5d
mov edx, dword [eax]
movsx eax, di
mov eax, ebx
jmp 0x5279f3
mov edi, esi
mov eax, dword [edi + 4]
movzx edx, ax
xchg dl, cl
not cl
push eax
mov cx, sp
movzx dx, al
mov eax, dword [edi + 8]
movsx cx, dh
cmovge dx, dx
xchg edx, edx
push eax
mov ax, 0xee4
lahf
mov ecx, dword [edi]
movzx ax, cl
lahf
cmovle ax, cx
mov eax, dword [0x42e9c8]
bswap dx
mov eax, dword [eax]
movsx edx, ax
mov edx, dword [eax + 0x30]
movsx eax, bx
movsx ax, ch
mov eax, ebx
jmp 0x5082bb
call fcn.0042b6fc
mov eax, esi
mov dh, 0xbb
cdq
mov edx, dword [eax + 8]
push edx
jmp 0x491e74
mov edx, esi
mov eax, ebx
jmp 0x4bf898
mov eax, esi
bswap edx
movzx dx, bh
not cl
mov edx, dword [eax + 8]
mov cl, 0x22
mov cx, sp
movzx ecx, bp
push edx
seta dl
bswap ecx
mov dl, ah
mov edx, dword [eax + 0xc]
mov cx, cx
push edx
jmp 0x49e276
mov edx, esi
bswap eax
movsx eax, si
mov eax, ebx
jmp 0x45e8fa
push eax
jmp 0x50b4f5
mov edx, dword [esi]
nop
cbw
mov eax, ebx
call fcn.00547549
jmp case.0x50d043.0
mov eax, ebx
call fcn.00421c70
jmp case.0x50d043.0
mov eax, ebx
jmp 0x4b6e23
call fcn.0050a81b
jmp case.0x50d043.0
mov eax, esi
movsx edx, di
cmovl edx, edx
lea edx, [eax + 4]
jmp 0x4bc39c
mov eax, esi
movsx dx, dh
lea edx, [eax + 4]
jmp 0x4947f1
mov edx, esi
cmovb eax, edi
mov eax, ebx
call fcn.004bf488
jmp case.0x50d043.0
call fcn.004dbd3f
jmp case.0x50d043.0
mov edx, dword [esi]
setb al
bswap eax
mov eax, ebx
jmp 0x528229
mov eax, esi
cwd
mov edx, dword [eax + 8]
jmp 0x5475c8
mov eax, esi
lea edx, [eax + 4]
push dword [edx + 4]
movzx ecx, di
push dword [edx]
cdq
setle dh
mov ecx, dword [eax + 0xc]
bswap edx
xchg dh, dh
movzx edx, ax
mov edx, dword [eax]
mov eax, ebx
jmp 0x520378
mov eax, dword [eax]
jmp 0x4ae02a
push dword [edx + 4]
push dword [edx]
mov dx, di
movsx edx, sp
movsx dx, bl
mov edx, dword [eax]
cmova eax, ebp
setno ah
cwde
mov eax, ebx
call fcn.004ca900
jmp case.0x50d043.0
mov edx, dword [eax + 0xc]
jmp 0x4f875f
push eax
mov ecx, dword [edi + 4]
rdtsc
jmp 0x4eab36
call fcn.0052fee4
jmp case.0x50d043.0
mov dword [0x45173c], eax
jmp 0x50e866
call sub.kernel32.dll_GetCurrentProcess
push eax
jmp 0x489c1e
mov edx, dword [esi]
mov eax, ebx
jmp 0x4fa728
mov eax, esi
jmp 0x4d7ced
call fcn.004d5d81
jmp case.0x50d043.0
mov edx, dword [eax + 8]
xchg ecx, ecx
push edx
setp cl
mov edx, dword [eax + 0xc]
push edx
bswap cx
not cl
mov ecx, dword [eax + 4]
cmove dx, si
mov edx, dword [eax]
setns al
bswap ax
movsx eax, bx
mov eax, ebx
jmp 0x53420b
mov edx, dword [esi]
seto al
movsx eax, si
cbw
mov eax, ebx
jmp loc.0041b284
call fcn.00483127
jmp case.0x50d043.0
push ebp
mov ebp, esp
xadd edx, eax
lea esp, [esp - 0xc]
adc al, 0x1a
cbw
push ebx
bt ebx, 0xb2
sal ebx, 0x71
bt dx, bp
push esi
push edi
btc ebx, ebp
mov esi, dword [ebp + 0x10]
xchg bh, dh
mov eax, dword [ebp + 0xc]
jmp 0x48c8c8
call fcn.004629a1
jmp case.0x50d043.0
call fcn.004db4ff
jmp case.0x50d043.0
mov edx, esi
mov eax, ebx
call fcn.004d2921
jmp case.0x50d043.0
mov eax, esi
bswap edx
mov edx, dword [eax + 8]
cmovs ecx, edx
bswap cx
not cx
push edx
mov cx, si
xchg dx, dx
mov ecx, dword [eax + 4]
movsx dx, dh
cmovne dx, sp
mov edx, dword [eax]
mov eax, ebx
call fcn.004ec1b7
jmp case.0x50d043.0
mov eax, esi
mov ecx, dword [eax]
mov dx, 0x5031
mov dl, ch
movsx edx, bx
lea edx, [eax + 4]
setns al
cmovbe ax, bp
mov eax, ebx
call fcn.00530ff0
jmp case.0x50d043.0
mov eax, esi
movzx edx, cx
mov edx, dword [eax + 8]
setp cl
push edx
cmovbe dx, di
movzx edx, di
mov edx, dword [eax + 0xc]
movzx cx, dh
push edx
mov ecx, dword [eax + 4]
mov edx, dword [eax]
bswap ax
mov eax, ebx
jmp 0x4e40c7
mov edx, dword [edi]
jmp 0x478e57
push dword [edx]
mov edx, dword [eax]
mov eax, ebx
jmp 0x4f433b
call fcn.00517c72
jmp case.0x50d043.0
call fcn.005564da
jmp case.0x50d043.0
call fcn.005250da
jmp case.0x50d043.0
call fcn.00554845
jmp case.0x50d043.0
push edx
movzx dx, cl
lea edx, [eax + 0x10]
setge cl
not ecx
xchg ecx, ecx
push dword [edx + 4]
cmovle ecx, edx
movsx ecx, si
mov ecx, edx
push dword [edx]
mov ecx, dword [eax + 4]
cmovns edx, ebp
mov edx, dword [eax]
mov eax, ebx
jmp 0x50cd9f
call fcn.0041d1c2
jmp case.0x50d043.0
call fcn.00535b55
jmp case.0x50d043.0
call fcn.00524d4b
jmp case.0x50d043.0
mov eax, ebx
jmp 0x4f8fdd
mov eax, esi
mov dh, 0xc
jmp 0x465f22
mov edx, dword [esi]
mov eax, ebx
jmp 0x497c0e
call fcn.0050a81b
mov dword [ebp - 4], eax
lahf
setbe al
push 4
lea ecx, [ebp - 4]
xchg dl, dl
mov eax, dword [0x42e9c8]
mov eax, dword [eax]
xchg dl, dl
mov dl, 0xc
jmp 0x54b0ee
push edx
jmp 0x4b8fd9
push ebx
jmp 0x4a1370
call fcn.0055d115
jmp case.0x50d043.0
and eax, 0x7f
cmp eax, 0x3c
ja case.0x50d043.0
jmp dword [eax*4 + 0x4e518c]
push 8
jmp loc.004143f5
mov edx, dword [esi]
jmp 0x51dd26
call fcn.00461120
jmp case.0x50d043.0
mov eax, ebx
call fcn.0056ae09
jmp case.0x50d043.0
call fcn.004ec97d
jmp case.0x50d043.0
call fcn.0051ca4d
jmp case.0x50d043.0
call fcn.004a1eec
jmp case.0x50d043.0
call fcn.0051a52c
jmp case.0x50d043.0
call fcn.004d4314
jmp case.0x50d043.0
push edx
cmovle edx, ebp
movzx dx, dh
movsx cx, bl
mov edx, dword [eax + 0x10]
movzx ecx, dx
push edx
movsx dx, dh
mov ecx, dword [eax + 4]
mov dx, 0x3b86
cdq
bswap dx
mov edx, dword [eax]
mov eax, ebx
jmp 0x46ad43
mov eax, ebx
jmp 0x52a253
mov eax, esi
not cx
cwd
lea edx, [eax + 8]
push dword [edx + 4]
xchg cx, cx
movsx ecx, dx
mov cl, 0x9b
push dword [edx]
bswap cx
setg ch
cdq
mov ecx, dword [eax + 4]
movzx edx, si
cwd
mov edx, dword [eax]
lahf
movzx eax, cx
mov eax, 0x9121852
mov eax, ebx
jmp 0x511e42
mov eax, ebx
jmp 0x49989e
mov eax, ebx
call fcn.00502e62
jmp case.0x50d043.0
call fcn.0048365a
jmp case.0x50d043.0
push edx
movsx dx, ah
mov edx, dword [eax + 4]
jmp 0x5093da
mov eax, esi
cwd
movzx dx, cl
mov edx, dword [eax + 8]
mov ecx, edx
push edx
cmovs dx, ax
mov edx, dword [eax + 0xc]
push edx
mov edx, dword [eax + 0x10]
push edx
cdq
bswap cx
mov edx, dword [eax + 0x14]
jmp loc.00417ca5
call fcn.00554845
jmp case.0x50d043.0
mov edx, esi
cmove eax, edx
mov eax, ebx
jmp 0x4d7b6a
mov edx, esi
movzx eax, dx
not ax
movzx ax, cl
mov eax, ebx
jmp loc.0041d3b4
push 0
mov edi, esi
mov al, 0xcd
mov ecx, dword [edi + 4]
cdq
mov edx, dword [edi]
cwde
movsx ax, bh
mov eax, ebx
call fcn.0048365a
cmp dword [ebx + 8], 0x274
jmp 0x482f39
mov eax, esi
movzx dx, ch
not dx
sets dh
mov edx, dword [eax + 4]
bswap cx
push edx
mov edx, dword [eax + 8]
movzx ecx, cx
movsx ecx, cx
cmovp ecx, edi
push edx
movzx ecx, si
movsx dx, ah
xchg cl, dl
mov ecx, dword [eax]
mov eax, dword [0x42e9c8]
movzx edx, bp
movsx edx, cx
mov eax, dword [eax]
xchg edx, edx
not edx
mov edx, dword [eax + 0x30]
movzx eax, bp
mov eax, ebx
jmp 0x4b1c0d
push edx
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov eax, ebx
jmp 0x4f87c1
mov edi, esi
mov eax, dword [edi + 8]
cmovns dx, bp
not edx
jmp 0x4be8bf
mov edx, esi
mov eax, ebx
jmp 0x4de2e3