Function at 0x48b950
Capabilities:
Create thread
Download url
Move file
Receive data
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ff346
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x650
mov eax, dword [0x6c9294]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov byte [ebp - 0x17f], al
xor ecx, ecx
mov byte [ebp - 0x121], cl
xor edx, edx
mov byte [ebp - 0x122], dl
movzx eax, byte [ebp - 0x17f]
push eax
movzx ecx, byte [ebp - 0x121]
push ecx
movzx edx, byte [ebp - 0x122]
push edx
lea eax, [ebp - 0x470]
push eax
call fcn.00484ce0
add esp, 0x10
mov ecx, eax
call fcn.0049e1e0
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
xor ecx, ecx
mov byte [ebp - 0x123], cl
xor edx, edx
mov byte [ebp - 0x124], dl
xor eax, eax
mov byte [ebp - 0x125], al
movzx ecx, byte [ebp - 0x123]
push ecx
movzx edx, byte [ebp - 0x124]
push edx
movzx eax, byte [ebp - 0x125]
push eax
lea ecx, [ebp - 0x3f0]
push ecx
call fcn.00484b80
add esp, 0x10
mov ecx, eax
call fcn.0049e200
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
push 0x104
lea edx, [ebp - 0x120]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor eax, eax
mov byte [ebp - 0x126], al
xor ecx, ecx
mov byte [ebp - 0x127], cl
xor edx, edx
mov byte [ebp - 0x128], dl
movzx eax, byte [ebp - 0x126]
push eax
movzx ecx, byte [ebp - 0x127]
push ecx
movzx edx, byte [ebp - 0x128]
push edx
lea eax, [ebp - 0x390]
push eax
call fcn.00484a50
add esp, 0x10
mov ecx, eax
call fcn.0049d960
mov dword [ebp - 0x194], eax
push 0xa
call fcn.0049f680
add esp, 4
push eax
lea ecx, [ebp - 0x294]
call fcn.0040bb70
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x190], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x198], edx
mov eax, dword [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x198]
push ecx
lea edx, [ebp - 0x27c]
push edx
call fcn.004104c0
add esp, 0xc
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x19c]
call fcn.00403040
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004e3f34
add esp, 8
lea ecx, [ebp - 0x27c]
call fcn.00403080
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x294]
call fcn.00403080
xor ecx, ecx
mov byte [ebp - 0x129], cl
xor edx, edx
mov byte [ebp - 0x12a], dl
xor eax, eax
mov byte [ebp - 0x12b], al
call fcn.004848d0
mov dword [ebp - 0x1a4], eax
movzx ecx, byte [ebp - 0x129]
push ecx
movzx edx, byte [ebp - 0x12a]
push edx
movzx eax, byte [ebp - 0x12b]
push eax
lea ecx, [ebp - 0x4e0]
push ecx
call fcn.00484b40
add esp, 0x10
mov ecx, eax
call fcn.0049e380
mov dword [ebp - 0x1a0], eax
mov edx, dword [ebp - 0x1a0]
push edx
push 0
push 0x1f0001
call dword [ebp - 0x1a4]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jne 0x48bc09
xor eax, eax
mov byte [ebp - 0x12c], al
xor ecx, ecx
mov byte [ebp - 0x12d], cl
xor edx, edx
mov byte [ebp - 0x12e], dl
call fcn.00484980
mov dword [ebp - 0x1ac], eax
movzx eax, byte [ebp - 0x12c]
push eax
movzx ecx, byte [ebp - 0x12d]
push ecx
movzx edx, byte [ebp - 0x12e]
push edx
lea eax, [ebp - 0x510]
push eax
call fcn.00484b40
add esp, 0x10
mov ecx, eax
call fcn.0049e380
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x1a8]
push ecx
push 0
push 0
call dword [ebp - 0x1ac]
mov dword [ebp - 0x188], eax
jmp 0x48bc18
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor edx, edx
mov byte [ebp - 0x12f], dl
xor eax, eax
mov byte [ebp - 0x130], al
xor ecx, ecx
mov byte [ebp - 0x131], cl
call fcn.00484820
mov dword [ebp - 0x1b4], eax
movzx edx, byte [ebp - 0x12f]
push edx
movzx eax, byte [ebp - 0x130]
push eax
movzx ecx, byte [ebp - 0x131]
push ecx
lea edx, [ebp - 0x3a0]
push edx
call fcn.00484e90
add esp, 0x10
mov ecx, eax
call fcn.0049e400
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
push eax
call dword [ebp - 0x1b4]
xor ecx, ecx
mov byte [ebp - 0x132], cl
xor edx, edx
mov byte [ebp - 0x133], dl
xor eax, eax
mov byte [ebp - 0x134], al
call fcn.00484820
mov dword [ebp - 0x1bc], eax
movzx ecx, byte [ebp - 0x132]
push ecx
movzx edx, byte [ebp - 0x133]
push edx
movzx eax, byte [ebp - 0x134]
push eax
lea ecx, [ebp - 0x3b0]
push ecx
call fcn.00484af0
add esp, 0x10
mov ecx, eax
call fcn.0049e420
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x1b8]
push edx
call dword [ebp - 0x1bc]
xor eax, eax
mov byte [ebp - 0x135], al
xor ecx, ecx
mov byte [ebp - 0x136], cl
xor edx, edx
mov byte [ebp - 0x137], dl
call fcn.00484820
mov dword [ebp - 0x1c4], eax
movzx eax, byte [ebp - 0x135]
push eax
movzx ecx, byte [ebp - 0x136]
push ecx
movzx edx, byte [ebp - 0x137]
push edx
lea eax, [ebp - 0x3c0]
push eax
call fcn.00484fb0
add esp, 0x10
mov ecx, eax
call fcn.0049e0a0
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x1c0]
push ecx
call dword [ebp - 0x1c4]
call fcn.004b2dd0
movzx edx, al
test edx, edx
jne 0x48be1e
xor eax, eax
mov byte [ebp - 0x138], al
xor ecx, ecx
mov byte [ebp - 0x139], cl
xor edx, edx
mov byte [ebp - 0x13a], dl
xor eax, eax
mov byte [ebp - 0x13b], al
xor ecx, ecx
mov byte [ebp - 0x13c], cl
xor edx, edx
mov byte [ebp - 0x13d], dl
call fcn.00484770
mov dword [ebp - 0x1d0], eax
movzx eax, byte [ebp - 0x138]
push eax
movzx ecx, byte [ebp - 0x139]
push ecx
movzx edx, byte [ebp - 0x13a]
push edx
lea eax, [ebp - 0x2e0]
push eax
call fcn.00484a40
add esp, 0x10
mov ecx, eax
call fcn.0049de80
mov dword [ebp - 0x1c8], eax
movzx ecx, byte [ebp - 0x13b]
push ecx
movzx edx, byte [ebp - 0x13c]
push edx
movzx eax, byte [ebp - 0x13d]
push eax
lea ecx, [ebp - 0x540]
push ecx
call fcn.00484c20
add esp, 0x10
mov ecx, eax
call fcn.0049df60
mov dword [ebp - 0x1cc], eax
push 0x10
mov edx, dword [ebp - 0x1c8]
push edx
mov eax, dword [ebp - 0x1cc]
push eax
push 0
call dword [ebp - 0x1d0]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor ecx, ecx
mov byte [ebp - 0x13e], cl
xor edx, edx
mov byte [ebp - 0x13f], dl
xor eax, eax
mov byte [ebp - 0x140], al
movzx ecx, byte [ebp - 0x13e]
push ecx
movzx edx, byte [ebp - 0x13f]
push edx
movzx eax, byte [ebp - 0x140]
push eax
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.00484fa0
add esp, 0x10
mov ecx, eax
call fcn.0049e360
mov dword [ebp - 0x1dc], eax
lea edx, [ebp - 0x264]
push edx
call fcn.0047b430
add esp, 4
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp - 0x1e0], ecx
mov edx, dword [ebp - 0x1dc]
push edx
mov eax, dword [ebp - 0x1e0]
push eax
call fcn.00483e90
add esp, 8
mov byte [ebp - 0x141], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.00403080
movzx ecx, byte [ebp - 0x141]
test ecx, ecx
je 0x48bfaa
call fcn.004a19f0
xor edx, edx
mov byte [ebp - 0x142], dl
xor eax, eax
mov byte [ebp - 0x143], al
xor ecx, ecx
mov byte [ebp - 0x144], cl
xor edx, edx
mov byte [ebp - 0x145], dl
xor eax, eax
mov byte [ebp - 0x146], al
xor ecx, ecx
mov byte [ebp - 0x147], cl
call fcn.00484770
mov dword [ebp - 0x1ec], eax
movzx edx, byte [ebp - 0x142]
push edx
movzx eax, byte [ebp - 0x143]
push eax
movzx ecx, byte [ebp - 0x144]
push ecx
lea edx, [ebp - 0x300]
push edx
call fcn.00484a40
add esp, 0x10
mov ecx, eax
call fcn.0049de80
mov dword [ebp - 0x1e4], eax
movzx eax, byte [ebp - 0x145]
push eax
movzx ecx, byte [ebp - 0x146]
push ecx
movzx edx, byte [ebp - 0x147]
push edx
lea eax, [ebp - 0x570]
push eax
call fcn.00484bd0
add esp, 0x10
mov ecx, eax
call fcn.0049db40
mov dword [ebp - 0x1e8], eax
push 0x10
mov ecx, dword [ebp - 0x1e4]
push ecx
mov edx, dword [ebp - 0x1e8]
push edx
push 0
call dword [ebp - 0x1ec]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea eax, [ebp - 0x2ac]
push eax
call fcn.0047caf0
add esp, 4
lea ecx, [ebp - 0x2ac]
call fcn.00403080
push 0x6cdbb0
push 0x6cdb38
call fcn.0040bbc0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x48c181
xor edx, edx
mov byte [ebp - 0x148], dl
xor eax, eax
mov byte [ebp - 0x149], al
xor ecx, ecx
mov byte [ebp - 0x14a], cl
movzx edx, byte [ebp - 0x148]
push edx
movzx eax, byte [ebp - 0x149]
push eax
movzx ecx, byte [ebp - 0x14a]
push ecx
lea edx, [ebp - 0x310]
push edx
call fcn.00484e80
add esp, 0x10
mov ecx, eax
call fcn.0049dc60
push eax
push 0x6cdb50
call fcn.00483e70
add esp, 8
movzx eax, al
test eax, eax
je 0x48c181
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call fcn.00497ed0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x48c11b
xor edx, edx
mov byte [ebp - 0x14b], dl
xor eax, eax
mov byte [ebp - 0x14c], al
xor ecx, ecx
mov byte [ebp - 0x14d], cl
xor edx, edx
mov byte [ebp - 0x14e], dl
xor eax, eax
mov byte [ebp - 0x14f], al
xor ecx, ecx
mov byte [ebp - 0x150], cl
movzx edx, byte [ebp - 0x14b]
push edx
movzx eax, byte [ebp - 0x14c]
push eax
movzx ecx, byte [ebp - 0x14d]
push ecx
lea edx, [ebp - 0x410]
push edx
call fcn.00484b10
add esp, 0x10
mov ecx, eax
call fcn.0049e0c0
mov dword [ebp - 0x1f0], eax
movzx eax, byte [ebp - 0x14e]
push eax
movzx ecx, byte [ebp - 0x14f]
push ecx
movzx edx, byte [ebp - 0x150]
push edx
lea eax, [ebp - 0x5a0]
push eax
call fcn.00484f50
add esp, 0x10
mov ecx, eax
call fcn.0049ddc0
mov dword [ebp - 0x1f4], eax
push 0x10
mov ecx, dword [ebp - 0x1f0]
push ecx
mov edx, dword [ebp - 0x1f4]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.00496e20
push 0
push 0
push 0
push 0x49eb60
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x1f8], 0x100
push 0
mov eax, dword [ebp - 0x1f8]
push eax
mov ecx, 0x6cdbc8
call fcn.0049f730
mov ecx, 0x6cdbc8
call fcn.0040bbb0
push eax
push 0
mov ecx, 0x6cdbc8
call fcn.0047c960
push eax
call fcn.004cebf0
add esp, 0xc
call fcn.00402c10
call fcn.00402dc0
jmp 0x48c7f8
xor ecx, ecx
mov byte [ebp - 0x151], cl
xor edx, edx
mov byte [ebp - 0x152], dl
xor eax, eax
mov byte [ebp - 0x153], al
movzx ecx, byte [ebp - 0x151]
push ecx
movzx edx, byte [ebp - 0x152]
push edx
movzx eax, byte [ebp - 0x153]
push eax
lea ecx, [ebp - 0x430]
push ecx
call fcn.00484b90
add esp, 0x10
mov ecx, eax
call fcn.0049e280
push eax
lea ecx, [ebp - 0x24c]
call fcn.0040bb70
mov dword [ebp - 4], 2
push 0x6cdb98
push 0x6cdb80
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x2c4]
push eax
call fcn.00482ec0
add esp, 0x10
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1fc]
push ecx
push 0x6cdb38
call fcn.0040bbc0
add esp, 8
mov byte [ebp - 0x154], al
lea ecx, [ebp - 0x2c4]
call fcn.00403080
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.00403080
movzx edx, byte [ebp - 0x154]
test edx, edx
je 0x48c498
xor eax, eax
mov byte [ebp - 0x155], al
xor ecx, ecx
mov byte [ebp - 0x156], cl
xor edx, edx
mov byte [ebp - 0x157], dl
movzx eax, byte [ebp - 0x155]
push eax
movzx ecx, byte [ebp - 0x156]
push ecx
movzx edx, byte [ebp - 0x157]
push edx
lea eax, [ebp - 0x5d0]
push eax
call fcn.00484bb0
add esp, 0x10
mov ecx, eax
call fcn.0049e220
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
push ecx
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
xor edx, edx
mov byte [ebp - 0x158], dl
xor eax, eax
mov byte [ebp - 0x159], al
xor ecx, ecx
mov byte [ebp - 0x15a], cl
xor edx, edx
mov byte [ebp - 0x15b], dl
xor eax, eax
mov byte [ebp - 0x15c], al
xor ecx, ecx
mov byte [ebp - 0x15d], cl
call fcn.00484770
mov dword [ebp - 0x208], eax
movzx edx, byte [ebp - 0x158]
push edx
movzx eax, byte [ebp - 0x159]
push eax
movzx ecx, byte [ebp - 0x15a]
push ecx
lea edx, [ebp - 0x320]
push edx
call fcn.00484bc0
add esp, 0x10
mov ecx, eax
call fcn.0049e000
mov dword [ebp - 0x200], eax
movzx eax, byte [ebp - 0x15b]
push eax
movzx ecx, byte [ebp - 0x15c]
push ecx
movzx edx, byte [ebp - 0x15d]
push edx
lea eax, [ebp - 0x450]
push eax
call fcn.00484cc0
add esp, 0x10
mov ecx, eax
call fcn.0049dc40
mov dword [ebp - 0x204], eax
push 0x24
mov ecx, dword [ebp - 0x200]
push ecx
mov edx, dword [ebp - 0x204]
push edx
push 0
call dword [ebp - 0x208]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 6
jne 0x48c477
xor eax, eax
mov byte [ebp - 0x15e], al
xor ecx, ecx
mov byte [ebp - 0x15f], cl
xor edx, edx
mov byte [ebp - 0x160], dl
push 0
push 0
movzx eax, byte [ebp - 0x15e]
push eax
movzx ecx, byte [ebp - 0x15f]
push ecx
movzx edx, byte [ebp - 0x160]
push edx
lea eax, [ebp - 0x330]
push eax
call fcn.00484f20
add esp, 0x10
mov ecx, eax
call fcn.0049e020
push eax
mov ecx, dword [ebp - 0x184]
push ecx
push 0
call sub.urlmon.dll_URLDownloadToFileA
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x48c477
xor edx, edx
mov byte [ebp - 0x161], dl
xor eax, eax
mov byte [ebp - 0x162], al
xor ecx, ecx
mov byte [ebp - 0x163], cl
movzx edx, byte [ebp - 0x161]
push edx
movzx eax, byte [ebp - 0x162]
push eax
movzx ecx, byte [ebp - 0x163]
push ecx
lea edx, [ebp - 0x340]
push edx
call fcn.00484b60
add esp, 0x10
mov ecx, eax
call fcn.0049e3a0
push eax
call fcn.004e3a2c
add esp, 4
xor eax, eax
mov byte [ebp - 0x164], al
xor ecx, ecx
mov byte [ebp - 0x165], cl
xor edx, edx
mov byte [ebp - 0x166], dl
movzx eax, byte [ebp - 0x164]
push eax
movzx ecx, byte [ebp - 0x165]
push ecx
movzx edx, byte [ebp - 0x166]
push edx
lea eax, [ebp - 0x4b0]
push eax
call fcn.00484db0
add esp, 0x10
mov ecx, eax
call fcn.0049e340
push eax
call fcn.004e3a2c
add esp, 4
mov ecx, dword [ebp - 0x184]
push ecx
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x48c7f8
push 0x6cdbb0
push 0x6cdb38
call fcn.0040bbc0
add esp, 8
movzx edx, al
test edx, edx
je 0x48c5e3
xor eax, eax
mov byte [ebp - 0x167], al
xor ecx, ecx
mov byte [ebp - 0x168], cl
xor edx, edx
mov byte [ebp - 0x169], dl
movzx eax, byte [ebp - 0x167]
push eax
movzx ecx, byte [ebp - 0x168]
push ecx
movzx edx, byte [ebp - 0x169]
push edx
lea eax, [ebp - 0x350]
push eax
call fcn.00484d20
add esp, 0x10
mov ecx, eax
call fcn.0049dfa0
push eax
push 0x6cdb50
call fcn.00483e70
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x48c5e3
xor edx, edx
mov byte [ebp - 0x16a], dl
xor eax, eax
mov byte [ebp - 0x16b], al
xor ecx, ecx
mov byte [ebp - 0x16c], cl
xor edx, edx
mov byte [ebp - 0x16d], dl
xor eax, eax
mov byte [ebp - 0x16e], al
xor ecx, ecx
mov byte [ebp - 0x16f], cl
call fcn.00484770
mov dword [ebp - 0x234], eax
movzx edx, byte [ebp - 0x16a]
push edx
movzx eax, byte [ebp - 0x16b]
push eax
movzx ecx, byte [ebp - 0x16c]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.00484a40
add esp, 0x10
mov ecx, eax
call fcn.0049de80
mov dword [ebp - 0x214], eax
movzx eax, byte [ebp - 0x16d]
push eax
movzx ecx, byte [ebp - 0x16e]
push ecx
movzx edx, byte [ebp - 0x16f]
push edx
lea eax, [ebp - 0x660]
push eax
call fcn.00484bf0
add esp, 0x10
mov ecx, eax
call fcn.0049dec0
mov dword [ebp - 0x218], eax
push 0x10
mov ecx, dword [ebp - 0x214]
push ecx
mov edx, dword [ebp - 0x218]
push edx
push 0
call dword [ebp - 0x234]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x48c7f8
push 0x6cdbb0
push 0x6cdb38
call fcn.0040bbc0
add esp, 8
movzx eax, al
test eax, eax
je 0x48c72e
xor ecx, ecx
mov byte [ebp - 0x170], cl
xor edx, edx
mov byte [ebp - 0x171], dl
xor eax, eax
mov byte [ebp - 0x172], al
movzx ecx, byte [ebp - 0x170]
push ecx
movzx edx, byte [ebp - 0x171]
push edx
movzx eax, byte [ebp - 0x172]
push eax
lea ecx, [ebp - 0x370]
push ecx
call fcn.00484e30
add esp, 0x10
mov ecx, eax
call fcn.0049dc20
push eax
push 0x6cdb50
call fcn.00483e70
add esp, 8
movzx edx, al
test edx, edx
je 0x48c72e
xor eax, eax
mov byte [ebp - 0x173], al
xor ecx, ecx
mov byte [ebp - 0x174], cl
xor edx, edx
mov byte [ebp - 0x175], dl
xor eax, eax
mov byte [ebp - 0x176], al
xor ecx, ecx
mov byte [ebp - 0x177], cl
xor edx, edx
mov byte [ebp - 0x178], dl
call fcn.00484770
mov dword [ebp - 0x224], eax
movzx eax, byte [ebp - 0x173]
push eax
movzx ecx, byte [ebp - 0x174]
push ecx
movzx edx, byte [ebp - 0x175]
push edx
lea eax, [ebp - 0x380]
push eax
call fcn.00484a40
add esp, 0x10
mov ecx, eax
call fcn.0049de80
mov dword [ebp - 0x21c], eax
movzx ecx, byte [ebp - 0x176]
push ecx
movzx edx, byte [ebp - 0x177]
push edx
movzx eax, byte [ebp - 0x178]
push eax
lea ecx, [ebp - 0x610]
push ecx
call fcn.00484a30
add esp, 0x10
mov ecx, eax
call fcn.0049dea0
mov dword [ebp - 0x220], eax
push 0x10
mov edx, dword [ebp - 0x21c]
push edx
mov eax, dword [ebp - 0x220]
push eax
push 0
call dword [ebp - 0x224]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x48c7f8
xor ecx, ecx
mov byte [ebp - 0x179], cl
xor edx, edx
mov byte [ebp - 0x17a], dl
xor eax, eax
mov byte [ebp - 0x17b], al
xor ecx, ecx
mov byte [ebp - 0x17c], cl
xor edx, edx
mov byte [ebp - 0x17d], dl
xor eax, eax
mov byte [ebp - 0x17e], al
call fcn.00484770
mov dword [ebp - 0x230], eax
movzx ecx, byte [ebp - 0x179]
push ecx
movzx edx, byte [ebp - 0x17a]
push edx
movzx eax, byte [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x3d0]
push ecx
call fcn.00484a40
add esp, 0x10
mov ecx, eax
call fcn.0049de80
mov dword [ebp - 0x228], eax
movzx edx, byte [ebp - 0x17c]
push edx
movzx eax, byte [ebp - 0x17d]
push eax
movzx ecx, byte [ebp - 0x17e]
push ecx
lea edx, [ebp - 0x490]
push edx
call fcn.00484e20
add esp, 0x10
mov ecx, eax
call fcn.0049dfe0
mov dword [ebp - 0x22c], eax
push 0x10
mov eax, dword [ebp - 0x228]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
push 0
call dword [ebp - 0x230]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004b4fea
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret