Function at 0x484480
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x584ab8
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x615000]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x63a87c], 0
je 0x4844b3
jmp 0x4847b3
mov dword [ebp - 0x10], 0
jmp 0x4844c5
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x20
jge 0x4844db
mov ecx, dword [ebp - 0x10]
mov dword [ecx*4 + 0x639960], 0xffffffff
jmp 0x4844bc
call fcn.00483c20
push 0x59ab0c
lea ecx, [ebp - 0x14]
call fcn.00405d60
mov dword [ebp - 4], 0
lea edx, [ebp - 0x14]
push edx
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0042e5a0
push 0x59ab30
lea ecx, [ebp - 0x18]
call fcn.00405d60
mov dword [ebp - 4], 1
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.0042e5a0
push 0x59ab4c
lea ecx, [ebp - 0x1c]
call fcn.00405d60
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.0042e5a0
push 0x59ab68
lea ecx, [ebp - 0x20]
call fcn.00405d60
mov dword [ebp - 4], 3
lea edx, [ebp - 0x20]
push edx
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0042e5a0
push 0x59ab84
lea ecx, [ebp - 0x24]
call fcn.00405d60
mov dword [ebp - 4], 4
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.0042e5a0
push 0x59aba4
lea ecx, [ebp - 0x28]
call fcn.00405d60
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x28]
push ecx
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0042e5a0
push 0x59abc0
lea ecx, [ebp - 0x2c]
call fcn.00405d60
mov dword [ebp - 4], 6
lea edx, [ebp - 0x2c]
push edx
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0042e5a0
push str.proc_prct.txt
lea ecx, [ebp - 0x30]
call fcn.00405d60
mov dword [ebp - 4], 7
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.0042e5a0
push 0x59abf8
lea ecx, [ebp - 0x34]
call fcn.00405d60
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x34]
push ecx
mov ecx, 0x63b1e0
call fcn.00419450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.0042e5a0
push str.ZwCreateFile
push 0x59ac24
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x63a880], eax
push str.ZwOpenFile
push 0x59ac3c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x63a884], eax
push str.ZwReadFile
push 0x59ac54
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x63a888], eax
push str.ZwWriteFile
push 0x59ac6c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x63a88c], eax
push str.ZwClose
push 0x59ac80
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x63a890], eax
call fcn.0048e9e0
call fcn.0048c8f0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.0048cec0
push 0x483fa0
push 0x63b1fc
call fcn.0048cf80
push 0x484060
push 0x63b1dc
call fcn.0048cf80
push 0x4840c0
push 0x63a880
call fcn.0048cf80
push 0x4841d0
push 0x63a884
call fcn.0048cf80
push 0x4842c0
push 0x63a888
call fcn.0048cf80
push 0x484370
push 0x63a88c
call fcn.0048cf80
push 0x484410
push 0x63a890
call fcn.0048cf80
call fcn.0048ca70
mov dword [0x63a87c], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret