Function at 0x48e5f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x541d23
mov eax, dword fs:[0]
push eax
sub esp, 0x594
mov eax, dword [0x588e74]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [sym.ixptestoope.exe_Ordinal_1]
mov eax, ecx
mov edi, dword [ebp + 0xc]
shr eax, 8
mov dword [ebp - 0x594], edi
and al, 1
je 0x48e652
cmp dword [0x58c6e8], 0
je 0x48e652
test cl, 1
jne 0x48f2fa
cmp byte [ebp + 0x10], 0
je 0x48f32c
test cl, 1
jne 0x48f2fa
xorps xmm0, xmm0
mov dword [0x58c6e4], 0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x434], 0
mov eax, dword [0x58c6cc]
shr eax, 0x1f
mov dword [ebp - 4], 0
test al, al
je 0x48e6d8
call dword [0x582260]
mov dword [ebp - 0x438], eax
call dword [0x58221c]
mov dword [ebp - 0x434], eax
lea ecx, [ebp - 0x440]
mov eax, dword [0x58c6cc]
and eax, 0x3fffffff
push eax
call fcn.004a9a40
push 0x9c
push 0
call dword [0x582268]
push eax
call dword [0x58226c]
mov esi, eax
mov dword [ebp - 0x59c], esi
test esi, esi
jne 0x48e707
push 0x12
call dword [0x582260]
push eax
call dword [0x582220]
push esi
mov dword [esi], 0x9c
call dword [0x582210]
test eax, eax
jne 0x48e739
push esi
push eax
call dword [0x582268]
push eax
call dword [0x582224]
push 0xff
call dword [0x582260]
push eax
call dword [0x582220]
push edi
push 1
push 0
call fcn.00516b1d
call fcn.0046a930
mov ecx, 0x27
mov dword [ebp - 0x5a0], eax
lea edi, [eax + 0x2c]
rep movsd dword es:[edi], dword [esi]
mov esi, eax
mov ecx, esi
call fcn.00479020
mov ecx, esi
call fcn.00478ff0
push dword [ebp - 0x59c]
push 0
call dword [0x582268]
push eax
call dword [0x582224]
call fcn.0046a820
mov ecx, dword [0x582200]
mov edi, eax
push 0
mov dword [ebp - 0x59c], edi
mov dword [0x598ebc], ecx
mov dword [edi + 0x1c0], ecx
call dword [0x582200]
mov dword [esi + 0x28], eax
mov eax, 0x601
cmp word [esi + 6], ax
push 0x400
setae al
mov byte [edi + 0x2dd], al
mov eax, 0x602
cmp word [esi + 6], ax
mov esi, 0x58c6b8
push 0
setae al
mov byte [edi + 0x2de], al
lea eax, [ebp - 0x410]
sub esi, dword [0x58c6d8]
push eax
call fcn.0052ee50
add esp, 0xc
lea eax, [ebp - 0x410]
push 0x400
push eax
push esi
call dword [0x582204]
mov eax, dword [ebp - 0x5a0]
lea ecx, [ebp - 0x410]
push ecx
lea ecx, [eax + 8]
mov dword [eax + 0x24], esi
call fcn.004bd600
push 0x128
lea eax, [ebp - 0x568]
mov byte [ebp - 0x56c], 0
push 0
push eax
call fcn.0052ee50
xor eax, eax
cmp byte [ebp - 0x56c], al
setne al
push eax
lea eax, [ebp - 0x568]
push eax
call fcn.004c6f10
lea eax, [ebp - 0x540]
mov byte [ebp - 4], 1
push eax
xor eax, eax
mov dword [ebp - 0x424], 0x74e3a5d6
cmp byte [ebp - 0x56c], al
mov dword [ebp - 0x420], 0x18e3f236
setne al
mov dword [ebp - 0x41c], 0xa4ccaba6
push eax
mov dword [ebp - 0x418], 0x73699576
push 0x10
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x568]
push eax
call fcn.004c7440
lea eax, [ebp - 0x56c]
xorps xmm0, xmm0
push 0x58c6b8
push eax
movups xmmword [ebp - 0x540], xmm0
call fcn.00473d40
mov ecx, dword [sym.ixptestoope.exe_Ordinal_1]
add esp, 0x30
mov eax, ecx
shr eax, 1
test al, 1
jne 0x48e8dc
xor dword [0x598849], 0xd6a5e374
or ecx, 2
mov dword [sym.ixptestoope.exe_Ordinal_1], ecx
lea eax, [ebp - 0x568]
mov byte [ebp - 4], 2
push eax
call fcn.004c71e0
mov dword [ebp - 0x414], 0
mov eax, dword [0x598818]
push 0x24
mov byte [ebp - 4], 3
lea esi, [eax + 0x58c6b8]
call fcn.00516384
mov ecx, eax
add esp, 8
mov dword [ebp - 0x590], ecx
mov byte [ebp - 4], 4
test ecx, ecx
je 0x48e93f
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
movups xmmword [ecx + 0x10], xmm0
mov dword [ecx + 0x20], 0
mov eax, dword [0x598814]
add eax, esi
push eax
call fcn.004bc890
jmp 0x48e941
xor eax, eax
mov esi, dword [ebp - 0x414]
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 3
cmp eax, esi
je 0x48e971
test esi, esi
je 0x48e971
mov ecx, esi
call fcn.00466020
push 0x24
push esi
call fcn.005163b4
mov eax, dword [ebp - 0x58c]
add esp, 8
push eax
mov ecx, edi
mov dword [ebp - 0x414], eax
call fcn.00475ac0
test al, al
jne 0x48e995
push 0xff
call dword [0x582260]
push eax
call dword [0x582220]
mov eax, dword [sym.ixptestoope.exe_Ordinal_1]
shr eax, 0xa
test al, 1
je 0x48ea0c
cmp dword [edi + 0x45c], 0
je 0x48ea0c
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x430]
call fcn.004be380
lea eax, [ebp - 0x588]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x430]
call fcn.004be650
add eax, 4
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 0x10
jb 0x48e9e1
mov eax, dword [eax]
mov esi, dword [edi + 0x45c]
mov ecx, esi
push eax
call dword [0x5822ec]
call esi
lea ecx, [ebp - 0x588]
call fcn.00465fb0
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 3
call fcn.00465fb0
call fcn.0046a8b0
mov edi, eax
mov al, byte [ebp + 0x10]
xor al, 1
mov dword [ebp - 0x598], edi
push edi
mov byte [edi + 0x4a8], al
call fcn.00486200
mov eax, dword [0x5987cc]
add esp, 4
test eax, 0x800000
jne 0x48ea91
mov eax, dword [0x598cd8]
add eax, 0xf8
mov ecx, eax
mov dword [ebp - 0x58c], eax
call fcn.00477120
int3
mov ecx, dword [ebp - 0x5a0]
call fcn.00478f50
lea eax, [ebp - 0x414]
mov ecx, edi
push eax
push 0x58c6b8
call fcn.00472ef0
test dword [0x5987cc], 0x800000
jne 0x48eae5
mov eax, dword [0x598cd8]
add eax, 0xf8
mov ecx, eax
mov dword [ebp - 0x58c], eax
call fcn.00477120
invalid
push 0x58c6b8
mov ecx, edi
call fcn.004866d0
test al, al
jne 0x48ebe6
mov eax, dword [sym.ixptestoope.exe_Ordinal_1]
or eax, 1
mov dword [sym.ixptestoope.exe_Ordinal_1], eax
shr eax, 8
test al, 1
je 0x48eb20
push dword [ebp - 0x594]
call fcn.0048f6a0
add esp, 4
jmp 0x48ebbd
mov edi, dword [0x598e98]
test edi, edi
je 0x48eb46
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x5822ec]
mov ecx, edi
call esi
mov dword [0x598e98], 0
mov edi, dword [0x598ea4]
test edi, edi
je 0x48eb6c
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x5822ec]
mov ecx, edi
call esi
mov dword [0x598ea4], 0
mov edi, dword [0x598eb4]
test edi, edi
je 0x48eb92
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x5822ec]
mov ecx, edi
call esi
mov dword [0x598eb4], 0
mov edi, dword [0x598e90]
test edi, edi
je 0x48ebb8
mov eax, dword [edi]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x5822ec]
mov ecx, edi
call esi
mov dword [0x598e90], 0
call fcn.0048c630
mov esi, dword [ebp - 0x414]
mov edi, dword [0x58c6dc]
test esi, esi
je 0x48ebdf
mov ecx, esi
call fcn.00466020
push 0x24
push esi
call fcn.005163b4
add esp, 8
mov eax, edi
jmp 0x48f2dc
mov eax, dword [edi + 0xe4]
shr eax, 8
test al, 1
jne 0x48ec3e
mov eax, dword [edi + 0xe0]
shr eax, 0x17
test al, 1
jne 0x48ec3e
mov eax, dword [ebp - 0x59c]
cmp dword [eax + 0x2f4], 0
je 0x48ec3e
mov esi, dword [eax + 0x2fc]
mov ecx, esi
push 0
call dword [0x5822ec]
call esi
mov esi, dword [ebp - 0x59c]
push 0x48f520
push 1
mov esi, dword [esi + 0x2f4]
mov ecx, esi
call dword [0x5822ec]
call esi
test dword [0x5987cc], 0x800000
jne 0x48ec74
mov eax, dword [0x598cd8]
add eax, 0xf8
mov ecx, eax
mov dword [ebp - 0x594], eax
call fcn.00477120
invalid
push 0x58c6b8
mov ecx, edi
call fcn.00487e10
call fcn.004a8290
test dword [0x5987cc], 0x800000
jne 0x48ecb4
mov esi, dword [0x598cd8]
lea ecx, [esi + 0xf8]
call fcn.00477120
lea ecx, [esi + 0xf8]
mov byte [5], 5
call fcn.004771b0
mov eax, dword [edi + 0xe0]
mov esi, dword [0x598e8c]
shr eax, 0x11
and eax, 0xffffff01
mov dword [ebp - 0x594], eax
test esi, esi
jne 0x48eda2
push 0x24
call fcn.00516384
mov esi, eax
add esp, 4
mov dword [ebp - 0x58c], esi
mov byte [ebp - 4], 7
test esi, esi
je 0x48ed96
xorps xmm0, xmm0
movups xmmword [esi], xmm0
movups xmmword [esi + 0x10], xmm0
mov dword [esi + 0x20], 0
call fcn.0046a9b0
mov dword [esi], 0x444748
mov dword [esi + 0x10], eax
add esi, 0x14
mov dword [ebp - 0x590], esi
push 0x7c
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00516384
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x58c]
add esi, 0x1c
mov byte [ebp - 4], 8
mov dword [ebp - 0x590], esi
push 0x18
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00516384
add esp, 8
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x58c]
mov dword [esi + 4], 0xffffffff
mov dword [esi + 8], 0
mov word [esi + 0xc], 1
jmp 0x48ed98
xor esi, esi
mov byte [ebp - 4], 3
mov dword [0x598e8c], esi
push dword [0x598bed]
mov ecx, edi
push dword [0x598bf1]
call fcn.00472bd0
push eax
mov eax, dword [ebp - 0x594]
mov ecx, esi
xor al, 1
movzx eax, al
push eax
push dword [0x598bf5]
call fcn.00477fb0
mov ecx, edi
mov dword [0x598bf5], 0
mov dword [0x598bed], 0
call fcn.004712c0
push 0
push 1
mov ecx, edi
call fcn.00472be0
mov eax, dword [edi + 0xe0]
shr eax, 2
test al, 1
je 0x48efa1
mov esi, dword [0x598ec4]
test esi, esi
jne 0x48ef62
push 0x50
call fcn.00516384
mov esi, eax
add esp, 4
mov dword [ebp - 0x58c], esi
mov byte [ebp - 4], 9
test esi, esi
je 0x48ef56
push 0x50
push 0
push esi
call fcn.0052ee50
add esp, 0xc
mov dword [esi], 0x444758
lea ecx, [esi + 4]
mov word [ecx + 0x18], 0
call fcn.00477150
add esi, 0x20
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x590], esi
push 0x278
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00516384
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x58c]
add esi, 0x28
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x590], esi
push 0x278
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00516384
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov eax, dword [ebp - 0x58c]
mov dword [eax + 0x34], 0
mov dword [eax + 0x38], 0
mov dword [eax + 0x3c], 0
lea esi, [eax + 0x40]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x590], esi
push 0x30
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00516384
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x58c]
add esi, 0x48
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x590], esi
push 0x30
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00516384
add esp, 0x10
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov esi, dword [ebp - 0x58c]
mov dword [esi + 0x30], 0
jmp 0x48ef58
xor esi, esi
mov byte [ebp - 4], 3
mov dword [0x598ec4], esi
push dword [0x598c25]
mov ecx, edi
push dword [0x598c29]
call fcn.00472bd0
push eax
push dword [0x5987f4]
mov ecx, esi
call fcn.004941b0
mov dword [0x5987f4], 0
mov dword [0x598c25], 0
mov dword [0x598c29], 0
mov ecx, dword [edi + 0xe0]
mov eax, ecx
shr eax, 3
test al, 1
je 0x48f00c
mov eax, dword [0x598eb8]
shr ecx, 0x12
and ecx, 0xffffff01
mov dword [ebp - 0x594], ecx
test eax, eax
jne 0x48f009
push 0x50
call fcn.00516384
mov esi, eax
add esp, 4
mov dword [ebp - 0x590], esi
mov byte [ebp - 4], 0xf
test esi, esi
je 0x48eff8
push 0x50
push 0
push esi
call fcn.0052ee50
add esp, 0xc
mov ecx, esi
call fcn.0048bbb0
jmp 0x48effa
xor eax, eax
mov ecx, dword [ebp - 0x594]
mov byte [ebp - 4], 3
mov dword [0x598eb8], eax
mov byte [eax + 5], cl
test dword [0x5987cc], 0x800000
jne 0x48f03d
mov eax, dword [0x598cd8]
add eax, 0xf8
mov ecx, eax
mov dword [ebp - 0x594], eax
call fcn.00477120
in ax, 0x64
mov ecx, dword [ebp - 0x594]
call fcn.004771b0
mov edi, dword [0x598eac]
test edi, edi
jne 0x48f0a8
push 0x2c
call fcn.00516384
mov edi, eax
add esp, 4
mov dword [ebp - 0x590], edi
test edi, edi
je 0x48f0a0
push 0x2c
push 0
push edi
call fcn.0052ee50
mov dword [edi + 0x14], 0
add esp, 0xc
mov dword [edi + 0x18], 0xf
mov byte [edi + 4], 0
mov dword [edi], 0x444750
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
jmp 0x48f0a2
xor edi, edi
mov dword [0x598eac], edi
mov eax, dword [0x598c35]
mov ecx, dword [ebp - 0x598]
mov dword [ebp - 0x590], eax
mov eax, dword [0x598c31]
mov dword [ebp - 0x58c], eax
mov eax, dword [0x598c2d]
mov ecx, dword [ecx + 0x110]
mov dword [ebp - 0x594], eax
movzx eax, word [0x598849]
push eax
call fcn.004bc860
mov ecx, edi
mov esi, eax
call fcn.004bfaa0
push esi
lea ecx, [ebp - 0x430]
call fcn.004be380
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0x10
push eax
mov ecx, edi
call fcn.004be520
mov ecx, dword [edi + 0x14]
test ecx, ecx
je 0x48f123
cmp dword [edi + 0x18], 0x10
lea eax, [edi + 4]
jb 0x48f11b
mov eax, dword [eax]
push ecx
push eax
call dword [0x5822d4]
mov eax, dword [ebp - 0x594]
mov dword [edi + 0x20], eax
mov eax, dword [ebp - 0x58c]
mov dword [edi + 0x24], eax
mov eax, dword [ebp - 0x590]
mov dword [edi + 0x28], eax
mov dword [ebp - 0x430], 0x443ee8
mov eax, dword [ebp - 0x418]
mov byte [ebp - 4], 0x11
cmp eax, 0x10
jb 0x48f16a
inc eax
lea ecx, [ebp - 0x42c]
push eax
push dword [ebp - 0x42c]
call fcn.0046dc60
mov edx, dword [0x598c39]
mov eax, edx
shr eax, 0x1c
mov byte [ebp - 4], 3
test al, 1
je 0x48f192
mov ecx, dword [0x59a448]
mov eax, dword fs:[0x2c]
mov eax, dword [eax + ecx*4]
inc dword [eax + 0x25808]
test dword [0x5987cc], 0x800000
mov dword [0x598c31], 0
mov dword [0x598c35], 0
jne 0x48f1db
mov esi, dword [0x598cd8]
lea ecx, [esi + 0xf8]
call fcn.00477120
lea ecx, [esi + 0xf8]
mov byte [6], 6
call fcn.004771b0
mov edx, dword [0x598c39]
and dl, 0x30
cmp dl, 0x20
jne 0x48f22e
mov eax, dword [ebp - 0x598]
mov eax, dword [eax + 0xe0]
shr eax, 0x13
test al, 1
jne 0x48f22e
mov eax, dword [ebp - 0x5a0]
mov ecx, 0x600
cmp word [eax + 6], cx
jae 0x48f22e
call fcn.0046a930
add eax, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x48f217
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x59c]
mov esi, dword [eax + 0x1c8]
mov ecx, esi
call dword [0x5822ec]
call esi
call fcn.0046a930
mov eax, dword [eax + 0x24]
add eax, dword [0x598c3d]
test dword [0x5987cc], 0x800000
mov dword [0x58c6dc], eax
jne 0x48f272
mov eax, dword [0x598cd8]
add eax, 0xf8
mov ecx, eax
mov dword [ebp - 0x590], eax
call fcn.00477120
in ax, 0x64
mov ecx, dword [ebp - 0x590]
call fcn.004771b0
mov eax, dword [0x58c6cc]
and eax, 0xc0000000
cmp eax, 0x80000000
jne 0x48f2a7
push dword [ebp - 0x43c]
push dword [ebp - 0x434]
call dword [0x582218]
push dword [ebp - 0x440]
push dword [ebp - 0x438]
call dword [0x582214]
mov eax, dword [ebp - 0x598]
mov byte [eax + 0x4a8], 0
or dword [sym.ixptestoope.exe_Ordinal_1], 1
mov esi, dword [ebp - 0x414]
test esi, esi
je 0x48f2d7
mov ecx, esi
call fcn.00466020
push 0x24
push esi
call fcn.005163b4
add esp, 8
mov eax, dword [0x58c6dc]
xor edx, edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005168d0
mov esp, ebp
pop ebp
ret
test al, al
je 0x48f3a6
mov edx, dword [0x58c6bc]
mov eax, edx
shr eax, 4
test al, 1
je 0x48f334
add edx, edx
mov dword [0x58c6dc], 0x48f700
or ecx, 5
mov dword [0x58c6bc], edx
mov dword [sym.ixptestoope.exe_Ordinal_1], ecx
mov eax, 0x48f700
cdq
jmp 0x48f2de
cmp dword [ebp + 8], 0
jne 0x48f2d7
shr edx, 5
test dl, 1
jne 0x48f2d7
mov eax, ecx
and eax, 0x804
cmp eax, 0x804
je 0x48f2d7
test byte [0x5987cc], 0x80
je 0x48f367
push edi
call fcn.0048f6a0
add esp, 4
jmp 0x48f2d7
push 0x1c
lea eax, [ebp - 0x588]
or ecx, 4
push eax
push 0x58c6b8
mov dword [sym.ixptestoope.exe_Ordinal_1], ecx
call dword [0x582208]
mov esi, dword [0x58c6dc]
mov ecx, esi
push edi
push 0
push dword [ebp - 0x584]
call dword [0x5822ec]
call esi
push edi
call fcn.0048f6a0
add esp, 4
xor eax, eax
jmp 0x48f2dc