Function at 0x48bcbe
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
push 0x190e
push 0x758144
push 1
push 0x88
mov edi, edx
mov dword [esp + 0x28], ecx
xor esi, esi
call fcn.005f5ba0
mov ebx, eax
add esp, 0x10
test ebx, ebx
je 0x48c220
push 0x88
push esi
push ebx
call fcn.005c37d0
add esp, 0xc
xor ecx, ecx
call fcn.0048b447
mov ecx, dword [esp + 0x18]
mov edx, edi
push 2
push 0x7581bc
push dword [ebp + 8]
mov dword [ebx + 0x84], eax
call fcn.0048ba0a
add esp, 0xc
mov dword [esp + 0x18], eax
xor edx, edx
mov edi, dword [eax]
push 1
push 0x7581c0
mov dword [esp + 0x24], edi
push dword [edi + 4]
mov ecx, dword [edi]
call fcn.0048ba0a
mov edi, dword [edi + 8]
mov ecx, eax
add esp, 0xc
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edi
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [esp + 0x10], eax
mov eax, dword [eax]
cmp eax, dword [0x7581c4]
jne 0x48bebd
cmp dword [edx + 8], esi
je 0x48bebd
mov ecx, dword [esp + 0x10]
push 1
push 0x7581cc
push dword [edx + 4]
xor edx, edx
call fcn.0048ba0a
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x10], ecx
mov eax, dword [ecx + 4]
push 4
push 0x7581d0
mov eax, dword [eax]
mov dword [ebx + 0x24], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ebx + 0x24]
mov edx, dword [eax + 4]
mov dword [ebx + 0x28], edx
call fcn.0048ebee
pop ecx
pop ecx
test eax, eax
je 0x48bdc1
add dword [ebx + 0x24], 4
add dword [ebx + 0x28], 0xfffffffc
mov ecx, dword [ebx + 0x28]
mov eax, dword [ebx + 0x24]
mov byte [ecx + eax], 0
mov ecx, dword [esp + 0x10]
call fcn.0048bbce
mov eax, dword [esp + 0xc]
push 0x1931
push 0x7581d8
push 1
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
inc eax
push eax
call fcn.005f5ba0
mov ecx, eax
add esp, 0x10
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x48be32
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1931
push esi
push edi
mov edx, 0x7581f4
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push edi
push 0x758210
push 0x75822c
jmp 0x48c24d
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [eax + 4]
push edx
push dword [eax]
inc edx
call section..text
mov eax, dword [esp + 0x14]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov byte [ecx + eax], 0
call fcn.00487795
test edx, edx
ja 0x48be7a
jb 0x48be6f
cmp eax, 0x7fffffff
ja 0x48be7a
mov ecx, dword [esp + 0x10]
call fcn.004877c2
jmp 0x48be7c
xor eax, eax
push 1
push dword [esp + 0x14]
mov dword [ebx + 0x18], eax
call fcn.005f5a60
mov eax, dword [esp + 0x14]
pop ecx
pop ecx
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x48bea0
mov ecx, dword [ecx]
jmp 0x48bea2
xor ecx, ecx
mov dword [ebx + 0x1c], ecx
test ecx, ecx
je 0x48beb6
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 4]
sub eax, ecx
add eax, dword [edx]
jmp 0x48beb8
xor eax, eax
mov dword [ebx + 0x20], eax
jmp 0x48bf39
mov eax, dword [esp + 0x10]
mov dword [ebx], eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov dword [ebx + 4], eax
mov eax, dword [ecx]
mov eax, dword [eax + 8]
test eax, eax
je 0x48c1fe
mov eax, dword [eax]
xor edx, edx
mov dword [ebx + 8], eax
mov eax, dword [ecx]
push 1
push 0x758250
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
or dword [ebx + 0x18], 0xffffffff
mov dword [ebx + 0x14], eax
mov ecx, dword [ecx + 4]
push dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.0048ba0a
mov edx, eax
add esp, 0xc
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov dword [ebx + 0x24], eax
mov eax, dword [edx + 4]
mov ecx, dword [eax + 4]
mov eax, dword [ebx + 0x24]
mov dword [ebx + 0x28], ecx
mov byte [ecx + eax], 0
mov ecx, edx
call fcn.0048bbce
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov byte [ecx + eax], 0
mov ecx, dword [ebx + 0x14]
mov eax, dword [ebx + 8]
mov byte [ecx + eax], 0
test edi, edi
je 0x48c123
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x48c123
mov eax, dword [edi]
test eax, eax
je 0x48c123
test esi, esi
je 0x48c043
mov al, byte [eax]
cmp al, 0x20
je 0x48bf6c
cmp al, 9
jne 0x48c043
cmp dword [esi + 0x10], 0
jne 0x48bff7
mov eax, dword [esi + 8]
push 0x1978
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0xc]
push 0x758254
add eax, ecx
push 1
push eax
call fcn.005f5ba0
add esp, 0x10
mov dword [esi + 8], eax
test eax, eax
je 0x48c16e
push dword [esi + 0xc]
mov edx, dword [edi + 4]
mov ecx, eax
push dword [esp + 0x20]
add edx, dword [esi + 0xc]
call section..text
mov eax, dword [esi]
push 0x197c
mov dword [esp + 0x28], eax
mov eax, dword [esi + 4]
push 0x7582cc
inc eax
push 1
push eax
call fcn.005f5ba0
add esp, 0x18
mov dword [esi], eax
test eax, eax
je 0x48c13c
mov edx, dword [esi + 4]
mov ecx, eax
push edx
push dword [esp + 0x20]
inc edx
call section..text
or dword [esi + 0x10], 0xffffffff
pop ecx
pop ecx
jmp 0x48c01f
mov eax, dword [esi + 0xc]
push 0x1983
push 0x758344
push 1
add eax, ecx
push eax
push dword [esi + 8]
call fcn.005f5d50
add esp, 0x14
test eax, eax
je 0x48c1a0
mov dword [esi + 8], eax
mov edx, dword [edi + 4]
mov ecx, dword [esi + 8]
add ecx, dword [esi + 0xc]
lea eax, [edx - 1]
push eax
mov eax, dword [edi]
inc eax
push eax
call section..text
mov eax, dword [edi + 4]
pop ecx
dec eax
add dword [esi + 0xc], eax
pop ecx
jmp 0x48c112
push 0x198e
push 0x7583bc
push 1
push 0x18
call fcn.005f5ba0
mov esi, eax
add esp, 0x10
test esi, esi
je 0x48c1cf
push 6
xor eax, eax
mov edi, esi
pop ecx
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x14]
xor ecx, ecx
cmp dword [edi + 4], eax
jbe 0x48c09d
mov eax, dword [edi]
cmp byte [eax + ecx], 0x3a
je 0x48c087
inc ecx
cmp ecx, dword [edi + 4]
jb 0x48c079
jmp 0x48c09d
mov dword [esi], eax
mov dword [esi + 4], ecx
mov eax, dword [edi]
inc eax
add eax, ecx
mov dword [esi + 8], eax
mov eax, dword [edi + 4]
sub eax, ecx
dec eax
mov dword [esi + 0xc], eax
cmp dword [esi], 0
jne 0x48c0b0
push 1
push esi
call fcn.005f5a60
pop ecx
pop ecx
xor esi, esi
jmp 0x48c112
mov edx, dword [esi + 0xc]
lea ecx, [esi + 8]
call fcn.0048b9d4
mov ecx, dword [esi]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 4]
mov byte [ecx + eax], 0
mov ecx, dword [esi + 8]
mov eax, dword [esi + 0xc]
mov byte [ecx + eax], 0
and dword [esi + 0x10], 0
and dword [esi + 0x14], 0
cmp dword [ebx + 0x40], 0
jne 0x48c0e7
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], esi
jmp 0x48c0ed
mov eax, dword [ebx + 0x44]
mov dword [eax + 0x14], esi
mov dword [ebx + 0x44], esi
cmp dword [esi + 0xc], 0x7fffffff
ja 0x48c112
push dword [esi + 0xc]
mov edx, dword [esi]
push dword [esi + 8]
mov ecx, dword [ebx + 0x84]
push dword [esi + 4]
call fcn.0048b708
add esp, 0xc
mov eax, dword [edi + 8]
mov edi, eax
mov dword [esp + 0x14], edi
test eax, eax
jne 0x48bf41
mov ecx, dword [esp + 0x18]
call fcn.0048bbce
mov ecx, dword [esp + 0xc]
call fcn.0048bbce
mov eax, ebx
jmp 0x48c219
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov ebx, 0x197c
push esi
push ebx
mov edx, 0x7582e8
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push ebx
push 0x758304
push 0x758320
jmp 0x48c24d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1978
push esi
push edi
mov edx, 0x758270
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push edi
push 0x75828c
push 0x7582a8
jmp 0x48c24d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1983
push esi
push edi
mov edx, 0x758360
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push edi
push 0x75837c
push 0x758398
jmp 0x48c24d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x198e
push esi
push edi
mov edx, 0x7583d8
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push edi
push 0x7583f4
push 0x758410
jmp 0x48c24d
mov ecx, dword [esp + 0x18]
call fcn.0048bbce
mov ecx, dword [esp + 0xc]
call fcn.0048bbce
mov ecx, ebx
call fcn.0048bbf8
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x190e
push esi
push edi
mov edx, 0x758160
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push edi
push 0x75817c
push 0x758198
call fcn.00401109
add esp, 0xc
push esi
call fcn.005d0820
int3