Function at 0x100049fe
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, 0x10016356
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004a2b
push ebx
call fcn.1000a5d1
add esp, 4
mov dword [ebp - 0xc], esp
push dword [ebp - 8]
push 0
xor eax, eax
call dword [sym.imp.USER32.dll_FindWindowA]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x10004a5c
push 0x34
push 0x4011753
push 6
call fcn.1000a5d7
add esp, 0xc
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004a6f
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 0x10]
mov dword [0x100168b0], eax
cmp dword [0x100168b0], 0
je 0x10004a94
push dword [0x100168b0]
call fcn.100051a6
mov dword [0x100168b4], eax
cmp dword [0x100168b4], 0
jle 0x100051a2
mov eax, 0x1001637c
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004ac5
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0x100168b8]
test ebx, ebx
je 0x10004adc
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168b8], eax
mov eax, 0x10016390
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004b06
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0x100168bc]
test ebx, ebx
je 0x10004b1d
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168bc], eax
mov eax, 0x100163a4
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004b47
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, 0x100163c3
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
call fcn.10002ca5
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10004b6b
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, 0x100163d7
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.10002ca5
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10004b8f
push ebx
call fcn.1000a5d1
add esp, 4
push 0
push 0
push 0
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x10004ba8
mov eax, 0x10016242
push eax
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x10004bbc
mov eax, 0x10016242
push eax
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x10004bd0
mov eax, 0x10016242
push eax
push 4
mov ebx, 0x8c8
call fcn.1000afb0
add esp, 0x34
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004bf6
push ebx
call fcn.1000a5d1
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10004c06
push ebx
call fcn.1000a5d1
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10004c16
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [0x100168c0]
test ebx, ebx
je 0x10004c2d
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168c0], eax
mov eax, 0x100163eb
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004c57
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 8]
push eax
push dword [0x100168c0]
call fcn.10004959
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004c87
push ebx
call fcn.1000a5d1
add esp, 4
cmp dword [ebp - 0xc], 0
je 0x10004c96
call fcn.10005212
mov eax, 0x100163fa
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004cba
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0x100168c4]
test ebx, ebx
je 0x10004cd1
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168c4], eax
call fcn.10005b80
mov eax, 0x10016412
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004d00
push ebx
call fcn.1000a5d1
add esp, 4
mov ebx, 6
call fcn.100049f6
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x10004d1d
mov eax, 0x10016242
push eax
push 3
mov ebx, 0xa0
mov eax, 0x1000d360
call fcn.1000ab00
add esp, 0x28
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004d48
push ebx
call fcn.1000a5d1
add esp, 4
push htons
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10004d5b
mov eax, 0x1001621a
push eax
push 1
mov ebx, 0x168
call fcn.1000b0c0
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10004d81
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [0x100168c8]
test ebx, ebx
je 0x10004d98
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168c8], eax
mov eax, 0x1001642a
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004dc2
push ebx
call fcn.1000a5d1
add esp, 4
mov ebx, 6
call fcn.100049f6
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x10004ddf
mov eax, 0x10016242
push eax
push 3
mov ebx, 0xa0
mov eax, 0x1000d360
call fcn.1000ab00
add esp, 0x28
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004e0a
push ebx
call fcn.1000a5d1
add esp, 4
push htons
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10004e1d
mov eax, 0x1001621a
push eax
push 1
mov ebx, 0x168
call fcn.1000b0c0
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10004e43
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [0x100168cc]
test ebx, ebx
je 0x10004e5a
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168cc], eax
mov eax, 0x10016442
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004e84
push ebx
call fcn.1000a5d1
add esp, 4
mov ebx, 6
call fcn.100049f6
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x10004ea1
mov eax, 0x10016242
push eax
push 3
mov ebx, 0xa0
mov eax, 0x1000d360
call fcn.1000ab00
add esp, 0x28
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004ecc
push ebx
call fcn.1000a5d1
add esp, 4
push htons
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10004edf
mov eax, 0x1001621a
push eax
push 1
mov ebx, 0x168
call fcn.1000b0c0
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10004f05
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [0x100168d0]
test ebx, ebx
je 0x10004f1c
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168d0], eax
mov eax, 0x1001645a
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
push eax
call fcn.10002ca5
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004f46
push ebx
call fcn.1000a5d1
add esp, 4
mov ebx, 6
call fcn.100049f6
push reloc.WSOCK32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x10004f63
mov eax, 0x10016242
push eax
push 3
mov ebx, 0xa0
mov eax, 0x1000d360
call fcn.1000ab00
add esp, 0x28
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004f8e
push ebx
call fcn.1000a5d1
add esp, 4
push htons
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10004fa1
mov eax, 0x1001621a
push eax
push 1
mov ebx, 0x168
call fcn.1000b0c0
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10004fc7
push ebx
call fcn.1000a5d1
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [0x100168d4]
test ebx, ebx
je 0x10004fde
push ebx
call fcn.1000a5d1
add esp, 4
pop eax
mov dword [0x100168d4], eax
push 1
push 0x320
push 1
push 0x2bc
call fcn.10005b9c
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 0xc]
push 1
push dword [ebp - 4]
call fcn.1000591b
push 0x100168c8
call fcn.10005be7
push edx
push eax
call fcn.10005d36
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x18], 0
jne 0x1000503b
cmp dword [ebp - 0x14], 0
jne 0x10005079
push 1
push 0x320
push 1
push 0x2bc
call fcn.10005b9c
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
push dword [ebp - 0xc]
push 1
push dword [ebp - 4]
call fcn.1000591b
jmp 0x1000501a
mov ebx, dword [0x100168d8]
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 4]
mov dword [ebx], 0x3ff30300
mov dword [ebx + 4], 1
mov ebx, dword [0x100168d8]
add ebx, 8
mov dword [ebp - 4], ebx
mov ebx, dword [0x100168d8]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 8]
fild qword [ebx]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fadd qword [0x10016472]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
call fcn.10002c27
mov ebx, dword [ebp - 4]
mov dword [ebx], eax
mov dword [ebx + 4], edx
push 0x100168d0
call fcn.10005be7
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
mov eax, 0x1001647a
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
call fcn.10005d5f
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10005102
push ebx
call fcn.1000a5d1
add esp, 4
push 0x100168d4
call fcn.10005be7
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
mov eax, 0x1001647a
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 4]
push dword [ebp - 8]
call fcn.10005d5f
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10005139
push ebx
call fcn.1000a5d1
add esp, 4
push 0x100168c4
call fcn.10005d97
push 0x80000501
push 0
push eax
push 1
mov ebx, 0x9e4
call fcn.1000b370
add esp, 0x10
mov dword [ebp - 8], eax
push 1
push dword [ebp - 8]
push 1
call fcn.10005ea1
mov dword [ebp - 4], esp
push 0
push 0xffffffff
xor eax, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
nop
cmp dword [ebp - 4], esp
je 0x100051a2
push 0x10fc
push 0x4011753
push 6
call fcn.1000a5d7
add esp, 0xc
mov esp, ebp
pop ebp
ret