Function at 0x47087e
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, dword [ebx]
mov ecx, dword [ecx + 4]
call fcn.0048cc5d
xor edi, edi
test eax, eax
jne 0x470926
mov esi, dword [ebp + 0x10]
xor edx, edx
push edi
push edi
lea ecx, [esi + 0x14]
call fcn.00484ef6
mov ecx, dword [ebx]
mov edx, esi
push esi
push dword [ebp + 0xc]
mov dword [esp + 0x1c], eax
mov ecx, dword [ecx + 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 0xc], ecx
lea ecx, [eax + 0x14]
mov dword [eax + 8], ebx
mov dword [eax + 0x10], esi
call section..text
mov ecx, dword [ebx]
add esp, 0x10
mov ecx, dword [ecx]
call fcn.00484e2f
test eax, eax
je 0x470902
mov eax, dword [ebx]
mov ecx, dword [eax]
cmp dword [ecx - 0xc], edi
jbe 0x4708fc
mov eax, dword [ecx - 0x10]
add eax, 0x10
add eax, ecx
jmp 0x4708fe
mov eax, edi
mov edx, dword [eax]
jmp 0x470904
mov edx, edi
mov ecx, dword [esp + 0xc]
mov eax, dword [ebx]
mov edx, dword [edx]
push ecx
mov ecx, dword [ecx]
push edi
push 0x470838
push dword [eax]
call fcn.0045ab98
add esp, 0x10
xor eax, eax
jmp 0x470abb
mov esi, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [esi + 0x10]
sub eax, dword [esi]
mov ecx, dword [esi + 4]
sub eax, ecx
cmp eax, edx
jge 0x4709e0
test ecx, ecx
jle 0x470994
mov ebx, dword [esi]
mov eax, dword [esi + 0xc]
add ebx, eax
mov dword [esp + 0xc], ebx
mov ebx, dword [ebp + 8]
test ecx, ecx
je 0x470992
test eax, eax
jne 0x47096a
call fcn.005ea380
mov dword [eax], 0x16
call fcn.005e8030
jmp 0x47098f
mov edx, dword [esp + 0xc]
test edx, edx
je 0x470958
cmp dword [esi + 0x10], ecx
jae 0x470984
call fcn.005ea380
mov dword [eax], 0x22
jmp 0x470963
push ecx
push edx
push eax
call fcn.005ba5d0
add esp, 0xc
mov edx, dword [ebp + 0x10]
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov eax, ecx
sub eax, dword [esi + 4]
mov dword [esp + 0xc], ecx
cmp eax, edx
jge 0x4709e0
mov eax, ecx
sub eax, dword [esi + 4]
cmp eax, edx
jge 0x4709c0
add eax, 0x1000
add ecx, 0x1000
cmp eax, edx
jl 0x4709ad
mov dword [esp + 0xc], ecx
push ecx
push dword [esi + 0xc]
call fcn.00602480
mov dword [esi + 0xc], eax
pop ecx
pop ecx
test eax, eax
je 0x470ac2
mov eax, dword [esp + 0xc]
mov edx, dword [ebp + 0x10]
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
push edx
mov edx, dword [esi + 0x10]
sub edx, dword [esi]
push dword [ebp + 0xc]
sub edx, ecx
add ecx, dword [esi]
add ecx, dword [esi + 0xc]
call section..text
mov eax, dword [ebp + 0x10]
add dword [esi + 4], eax
pop ecx
pop ecx
mov dword [esp + 0xc], edi
mov ecx, dword [ebx]
mov edx, dword [ebx + 0x10]
mov ecx, dword [ecx]
call fcn.0041bc07
mov ecx, dword [ebx]
or edx, 0xffffffff
push 0x6e9790
mov ecx, dword [ecx]
call fcn.004181f4
pop ecx
mov ecx, dword [ebx]
push 0xffffffffffffffff
push 0xfffffffffffffffe
pop edx
mov ecx, dword [ecx]
call fcn.004190e2
pop ecx
mov ecx, dword [ebx]
mov edx, 0x6e9798
mov ecx, dword [ecx]
call fcn.0041b0d2
mov eax, dword [ebx]
xor edx, edx
push edi
inc edx
mov ecx, dword [eax]
call fcn.0041702b
pop ecx
test eax, eax
je 0x470a61
mov eax, dword [ebx]
push str.DynamicBuffer.WriteSink___readable__:
push dword [eax]
call fcn.0045b932
pop ecx
pop ecx
mov ecx, dword [ebx]
mov ecx, dword [ecx]
call fcn.0041bef7
mov ecx, ebx
call fcn.00484e2f
test eax, eax
je 0x470a89
mov eax, dword [esi + 0xc]
xor edx, edx
push dword [esi + 4]
add eax, dword [esi]
mov ecx, dword [ebx]
push eax
call fcn.0047587a
pop ecx
pop ecx
mov ecx, dword [esi + 8]
test ecx, ecx
jne 0x470a9b
mov eax, dword [esp + 0xc]
mov dword [esi + 4], edi
mov dword [esi], edi
jmp 0x470ab0
mov eax, dword [esi + 4]
sub eax, ecx
mov dword [esp + 0xc], eax
test eax, eax
jle 0x470ab2
add dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], edi
test eax, eax
jne 0x470a04
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edi, 0xfe
mov esi, 0x599
push edi
push esi
mov edx, 0x6e971c
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push esi
push 0x6e9744
push 0x6e976c
call fcn.00401109
add esp, 0xc
push edi
call fcn.005c8390
int3