Function at 0x48ae10
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58af68
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x61b000]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x6408d8], 0
je 0x48ae43
jmp 0x48b143
mov dword [ebp - 0x10], 0
jmp 0x48ae55
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x20
jge 0x48ae6b
mov ecx, dword [ebp - 0x10]
mov dword [ecx*4 + 0x63f980], 0xffffffff
jmp 0x48ae4c
call fcn.0048a5b0
push 0x5a0b0c
lea ecx, [ebp - 0x14]
call fcn.00405ec0
mov dword [ebp - 4], 0
lea edx, [ebp - 0x14]
push edx
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0042ecc0
push 0x5a0b30
lea ecx, [ebp - 0x18]
call fcn.00405ec0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0042ecc0
push 0x5a0b4c
lea ecx, [ebp - 0x1c]
call fcn.00405ec0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.0042ecc0
push 0x5a0b68
lea ecx, [ebp - 0x20]
call fcn.00405ec0
mov dword [ebp - 4], 3
lea edx, [ebp - 0x20]
push edx
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0042ecc0
push 0x5a0b84
lea ecx, [ebp - 0x24]
call fcn.00405ec0
mov dword [ebp - 4], 4
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0042ecc0
push 0x5a0ba4
lea ecx, [ebp - 0x28]
call fcn.00405ec0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x28]
push ecx
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0042ecc0
push 0x5a0bc0
lea ecx, [ebp - 0x2c]
call fcn.00405ec0
mov dword [ebp - 4], 6
lea edx, [ebp - 0x2c]
push edx
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0042ecc0
push 0x5a0bdc
lea ecx, [ebp - 0x30]
call fcn.00405ec0
mov dword [ebp - 4], 7
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.0042ecc0
push 0x5a0bf8
lea ecx, [ebp - 0x34]
call fcn.00405ec0
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x34]
push ecx
mov ecx, 0x641290
call fcn.00418db0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.0042ecc0
push str.ZwCreateFile
push 0x5a0c24
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6408dc], eax
push str.ZwOpenFile
push 0x5a0c3c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6408e0], eax
push str.ZwReadFile
push 0x5a0c54
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6408e4], eax
push str.ZwWriteFile
push 0x5a0c6c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6408e8], eax
push str.ZwClose
push 0x5a0c80
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x6408ec], eax
call fcn.004952d0
call fcn.004931e0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.004937b0
push 0x48a930
push 0x6412ac
call fcn.00493870
push 0x48a9f0
push 0x64128c
call fcn.00493870
push 0x48aa50
push 0x6408dc
call fcn.00493870
push 0x48ab60
push 0x6408e0
call fcn.00493870
push 0x48ac50
push 0x6408e4
call fcn.00493870
push 0x48ad00
push 0x6408e8
call fcn.00493870
push 0x48ada0
push 0x6408ec
call fcn.00493870
call fcn.00493360
mov dword [0x6408d8], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret