Function at 0x474080
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
mov ebx, dword [0x5a3530]
xor ecx, ecx
push esi
push edi
mov byte [ebp - 2], cl
mov byte [ebp - 1], 1
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x18], ebx
cmp dword [0x5a3538], ecx
jbe 0x4743b4
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov edx, dword [ebx + 4]
xor ecx, ecx
call fcn.0045c251
mov esi, eax
mov ecx, 0x4032cc
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, dword [esi]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4743b9
test dx, dx
je 0x4740f2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4743b9
add eax, 4
add ecx, 4
test dx, dx
jne 0x4740c8
xor eax, eax
test eax, eax
je 0x4c53dc
push 0x4032c4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4a58
push 0x4032a4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4b46
push 0x403290
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4b57
push 0x40327c
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4b68
push 0x403264
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4b79
push 0x40324c
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4b8a
push 0x40323c
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4b9b
push 0x403224
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4c19
push 0x403214
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4cdc
push 0x403208
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4ced
push 0x403200
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4cfe
push 0x4031f0
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4d0f
push 0x4031e0
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4d20
push 0x4031c8
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4d53
push 0x4031ac
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4d64
push 0x403194
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4dfc
push 0x403188
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e0d
push 0x403180
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e1a
push 0x403160
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e2b
push 0x403150
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e50
push 0x403144
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e5c
push 0x403138
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e6d
push 0x40312c
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e7e
push 0x403108
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4e8f
push 0x403100
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4ea0
push 0x4030f4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4ec0
push 0x4030e4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4ed1
push 0x4030d4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4f29
push 0x4030c8
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c4f75
push 0x4030b8
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c5027
push 0x4030a0
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c526b
push 0x403088
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
je 0x4c52d4
push 0x403078
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c52e5
cmp dword [esi + 4], eax
je 0x4c53bc
mov esi, dword [ebx + 4]
add esi, 0x10
mov ecx, esi
call fcn.004562c9
push eax
push esi
mov edx, 0x5a3080
xor ecx, ecx
call fcn.004743cb
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov ebx, dword [ebx + 0xc]
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], ebx
cmp eax, dword [0x5a3538]
jb 0x4740b0
cmp byte [ebp - 2], 0
jne 0x4743c3
pop edi
pop esi
pop ebx
leave
ret
sbb eax, eax
or eax, 1
jmp 0x4740f4
mov byte [0], cl
jmp 0x4743b4
mov eax, dword [0x5a3590]
mov cl, byte [ebp - 1]
push 0x3f
mov byte [eax + 0x1f4], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f5], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f9], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fb], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fc], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fd], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fe], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x1ff], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x200], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x201], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x207], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x208], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x20b], cl
mov eax, dword [0x5a3590]
pop ecx
mov byte [eax + 0x20c], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x20d], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x20e], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x20f], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x210], 1
mov eax, dword [0x5a3590]
mov word [eax + 0x212], cx
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f4], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f5], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f6], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f8], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1f9], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fa], 1
xor eax, eax
cmp dword [esi + 4], eax
jbe 0x474393
xor ecx, ecx
cmp dword [esi + eax*8 + 8], ecx
jne 0x4c53af
mov ebx, dword [esi + eax*8 + 0xc]
push 0x41d75c
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c4be1
mov eax, dword [0x5a3590]
mov dword [eax + 0x1f0], 2
jmp 0x4c4c02
push 0x41d768
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c53af
mov eax, dword [0x5a3590]
mov dword [eax + 0x1f0], 1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
movzx eax, ax
cmp eax, dword [esi + 4]
jb 0x4c4bb2
mov ebx, dword [ebp - 0x18]
jmp 0x474393
xor eax, eax
cmp dword [esi + 4], eax
jbe 0x474393
xor ecx, ecx
cmp dword [esi + eax*8 + 8], ecx
jne 0x4c53af
mov ebx, dword [esi + eax*8 + 0xc]
push 0x41ce6c
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c4c49
mov dword [0x5a1db8], eax
jmp 0x4c4cc4
push 0x41ce78
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c4c63
mov dword [0x5a1db8], 1
jmp 0x4c4cc4
push 0x41ce88
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c4c7d
mov dword [0x5a1db8], 2
jmp 0x4c4cc4
push 0x41ce94
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c4c97
mov dword [0x5a1db8], 3
jmp 0x4c4cc4
push 0x404fa4
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c4cab
mov byte [ebp - 2], 1
jmp 0x4c4cc4
push 0x41cea0
push ebx
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c53af
mov byte [0x5a5122], 1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
movzx eax, ax
cmp eax, dword [esi + 4]
jb 0x4c4c24
jmp 0x4c4c11
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fb], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fc], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fd], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x1fe], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
xor ecx, ecx
mov byte [eax + 0x1ff], 1
cmp dword [esi + 4], ecx
je 0x4c537d
mov ecx, dword [ebx + 4]
add ecx, 0x10
call fcn.00456888
mov ecx, dword [0x5a3590]
mov dword [ecx + 0x220], eax
jmp 0x474393
mov eax, dword [0x5a3590]
mov byte [eax + 0x200], 1
jmp 0x4c537b
xor ecx, ecx
cmp dword [esi + 4], ecx
jbe 0x4c4de8
mov ecx, dword [esi + 0xc]
movzx eax, word [ecx]
mov edx, eax
test ax, ax
je 0x4c4de6
xor eax, eax
cmp dword [esi + 8], eax
jne 0x4c53b2
push 0x30
pop eax
cmp dx, ax
jne 0x4c4da5
push 0x78
pop eax
cmp word [ecx + 2], ax
jne 0x4c4da5
push 1
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x41b000
jmp 0x4c4db4
push 1
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x40433c
push ecx
call fcn.004782dc
add esp, 0x14
cmp eax, 1
jne 0x4c5017
mov ecx, dword [0x5a3590]
mov ax, word [ebp - 0x1c]
or word [ecx + 0x212], ax
xor eax, eax
inc eax
jmp 0x4c4ddf
push 2
pop eax
xor ecx, ecx
jmp 0x4c5380
xor ecx, ecx
mov eax, dword [0x5a3590]
push 0x3f
pop edx
or word [eax + 0x212], dx
jmp 0x4c537d
mov eax, dword [0x5a3590]
mov byte [eax + 0x201], 1
jmp 0x4c537b
xor ecx, ecx
mov byte [0x5a2fac], cl
jmp 0x4c537d
mov eax, dword [0x5a3590]
mov byte [eax + 0x202], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
xor ecx, ecx
mov byte [0x5a2fac], 1
mov byte [eax + 0x203], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x20d], cl
jmp 0x4c537d
mov byte [0x5a2fac], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x204], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x205], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x206], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x207], 1
jmp 0x4c537b
xor eax, eax
cmp dword [esi + 4], eax
je 0x4c53bc
mov eax, dword [ebx + 4]
add eax, 8
mov dword [0x5a50d4], eax
call fcn.0052d80f
jmp 0x474393
mov eax, dword [0x5a3590]
mov byte [eax + 0x208], 1
jmp 0x4c537b
mov eax, dword [0x5a3590]
mov byte [eax + 0x209], 1
xor eax, eax
cmp dword [esi + 4], eax
jbe 0x4c537b
xor ecx, ecx
cmp dword [esi + eax*8 + 8], ecx
jne 0x4c53b2
push 0x405124
push dword [esi + eax*8 + 0xc]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c53b2
mov eax, dword [0x5a3590]
mov byte [eax + 0x20a], 1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
movzx eax, ax
cmp eax, dword [esi + 4]
jb 0x4c4ee8
jmp 0x4c537b
xor eax, eax
mov byte [0x5a4f23], al
cmp dword [esi + 4], eax
jbe 0x4c537b
xor ecx, ecx
cmp dword [esi + eax*8 + 8], ecx
jne 0x4c53b2
push 0x41ce28
push dword [esi + eax*8 + 0xc]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c53b2
mov eax, dword [ebp - 0x14]
inc eax
mov byte [0x5a4f23], 1
mov dword [ebp - 0x14], eax
movzx eax, ax
cmp eax, dword [esi + 4]
jb 0x4c4f39
jmp 0x4c537b
mov eax, dword [esi + 4]
test eax, eax
je 0x4c53bc
mov ecx, dword [esi + 0xc]
xor edx, edx
cmp word [ecx], dx
je 0x4c53bc
sub eax, 1
je 0x4c4ffe
sub eax, 1
jne 0x4c53b2
mov edx, dword [0x5a3590]
lea edx, [edx + 0x228]
call fcn.00478283
test al, al
je 0x4c5017
mov edx, dword [0x5a3590]
mov ecx, dword [esi + 0x14]
lea edx, [edx + 0x230]
call fcn.00478283
test al, al
je 0x4c5017
mov ecx, dword [0x5a3590]
mov eax, dword [ecx + 0x234]
cmp eax, dword [ecx + 0x22c]
jb 0x4c53b2
ja 0x4c4ddc
mov eax, dword [ecx + 0x230]
cmp eax, dword [ecx + 0x228]
jb 0x4c53b2
jmp 0x4c4ddc
mov edx, dword [0x5a3590]
lea edx, [edx + 0x228]
call fcn.00478283
test al, al
jne 0x4c4dd7
push dword [ebx + 4]
push 0x47b
xor eax, eax
push eax
call fcn.0047dc0b
mov eax, dword [0x5a3590]
push 0x3a
pop ecx
mov byte [eax + 0x20b], 1
mov eax, dword [ebx + 4]
cmp word [eax + 0xe], cx
jne 0x474393
mov eax, dword [esi + 0xc]
push 0x30
pop ecx
cmp word [eax], cx
jne 0x4c5068
push 0x78
pop ecx
cmp word [eax + 2], cx
jne 0x4c5068
push 1
lea ecx, [ebp - 0xc]
push ecx
lea ecx, [ebp - 0x20]
push ecx
push 0x41b000
jmp 0x4c5077
push 1
lea ecx, [ebp - 0xc]
push ecx
lea ecx, [ebp - 0x20]
push ecx
push 0x40433c
push eax
call fcn.004782dc
add esp, 0x14
cmp eax, 1
jne 0x4c50db
mov eax, dword [ebp - 0x20]
push 8
pop esi
sub eax, 1
je 0x4c50cc
sub eax, 1
je 0x4c50b6
push 2
pop ecx
sub eax, ecx
je 0x4c50ce
sub eax, 4
jne 0x4c51e6
mov eax, dword [0x5a3590]
mov dword [eax + 0x218], 3
jmp 0x4c50c5
mov eax, dword [0x5a3590]
mov dword [eax + 0x218], 1
push 9
jmp 0x4c51e5
xor ecx, ecx
mov eax, dword [0x5a3590]
mov dword [eax + 0x218], ecx
jmp 0x4c50c5
mov eax, dword [ebx + 4]
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add eax, 0x10
push 5
push 0x41d75c
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x4c511d
mov eax, dword [0x5a3590]
xor ecx, ecx
mov dword [eax + 0x218], ecx
jmp 0x4c5116
mov eax, dword [0x5a3590]
mov dword [eax + 0x218], 2
push 0xd
jmp 0x4c51e5
mov eax, dword [ebx + 4]
push 6
add eax, 0x10
push 0x41d778
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x4c514a
mov eax, dword [0x5a3590]
push 0xe
mov dword [eax + 0x218], 1
jmp 0x4c51e5
mov eax, dword [ebx + 4]
push 5
add eax, 0x10
push 0x41d788
push eax
call esi
add esp, 0xc
test eax, eax
je 0x4c5107
mov eax, dword [ebx + 4]
push 5
add eax, 0x10
push 0x41d794
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x4c518b
mov eax, dword [0x5a3590]
push 0xb
mov dword [eax + 0x218], 4
jmp 0x4c51e5
mov eax, dword [ebx + 4]
push 5
add eax, 0x10
push 0x41d79c
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x4c51b5
mov eax, dword [0x5a3590]
push 0xa
mov dword [eax + 0x218], 5
jmp 0x4c51e5
mov eax, dword [ebx + 4]
push 8
pop esi
push 4
add eax, 0x10
push 0x41ce6c
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x4c51e6
mov eax, dword [0x5a3590]
xor ecx, ecx
mov byte [ebp - 1], cl
push 0xc
mov byte [eax + 0x20b], cl
pop esi
mov ecx, dword [ebx + 4]
movzx eax, word [ecx + esi*2]
cmp eax, 0x2c
jne 0x4c525c
mov edx, dword [0x5a3590]
mov eax, dword [edx + 0x218]
sub eax, 4
je 0x4c5265
sub eax, 1
je 0x4c5265
xor eax, eax
mov word [edx + 0x214], ax
mov eax, dword [0x5a3590]
add eax, 0x214
push eax
mov eax, dword [ebx + 4]
push 0x41d7a4
lea eax, [eax + esi*2]
add eax, 2
push eax
call fcn.004782dc
add esp, 0xc
cmp eax, 1
jne 0x4c53cc
mov eax, dword [0x5a3590]
xor ecx, ecx
cmp word [eax + 0x214], cx
jne 0x474395
mov byte [0x5a4f8c], 1
jmp 0x474395
test ax, ax
je 0x474393
push ecx
jmp 0x4c53d2
mov eax, dword [ebx + 4]
push 0x3a
pop ecx
cmp word [eax + 0x16], cx
jne 0x4c53d1
mov eax, dword [esi + 0xc]
push 0x30
pop ecx
cmp word [eax], cx
jne 0x4c52a0
push 0x78
pop ecx
cmp word [eax + 2], cx
jne 0x4c52a0
push 1
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x24]
push ecx
push 0x41b000
jmp 0x4c52af
push 1
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x24]
push ecx
push 0x40433c
push eax
call fcn.004782dc
add esp, 0x14
cmp eax, 1
jne 0x474393
mov eax, dword [0x5a3590]
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x21c], ecx
jmp 0x474393
mov eax, dword [0x5a3590]
mov byte [eax + 0x20c], 1
jmp 0x4c537b
push 0x41d7ac
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c5302
mov eax, dword [0x5a3590]
mov byte [eax + 0x20d], 1
jmp 0x4c537b
push 0x41d7bc
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c531f
mov eax, dword [0x5a3590]
mov byte [eax + 0x20e], 1
jmp 0x4c537b
push 0x41d7cc
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c533c
mov eax, dword [0x5a3590]
mov byte [eax + 0x20f], 1
jmp 0x4c537b
push 0x41d7d4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c5365
mov eax, dword [0x5a3590]
mov byte [eax + 0x208], 1
mov eax, dword [0x5a3590]
mov byte [eax + 0x210], 1
jmp 0x4c537b
push 0x41cfb4
push dword [esi]
call edi
pop ecx
pop ecx
test eax, eax
jne 0x4c5397
mov byte [0x5a5120], 1
xor ecx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, ax
cmp dword [esi + 4], eax
jbe 0x474393
push dword [ebx + 4]
push 0xfd8
push ecx
jmp 0x4c53a2
push dword [ebx + 4]
xor eax, eax
push 0xfcc
push eax
call fcn.004fd88b
add esp, 0xc
jmp 0x474393
mov ebx, dword [ebp - 0x18]
push dword [ebx + 4]
push 0x45d
jmp 0x4c53c4
push dword [ebx + 4]
push 0x47a
xor ebx, ebx
push ebx
jmp 0x4c5022
push dword [ebx + 4]
jmp 0x4c53d2
push eax
push 0x45d
jmp 0x4c501f
mov edx, 0x25aa
lea ecx, [edx - 0x2a]
call fcn.0053551f
push 0x44c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3