Function at 0x488f62
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
push 0x1907
push 0x73f944
push 1
push 0x88
mov edi, edx
mov dword [esp + 0x28], ecx
xor esi, esi
call fcn.005ed7c0
mov ebx, eax
add esp, 0x10
test ebx, ebx
je 0x4894cf
push 0x88
push esi
push ebx
call fcn.005bb370
add esp, 0xc
xor ecx, ecx
call fcn.004885ba
test eax, eax
je 0x488fba
mov dword [eax + 4], 1
mov ecx, dword [esp + 0x18]
mov edx, edi
push 2
push 0x73f9bc
push dword [ebp + 8]
mov dword [ebx + 0x84], eax
call fcn.00488caf
add esp, 0xc
mov dword [esp + 0x18], eax
xor edx, edx
mov edi, dword [eax]
push 1
push 0x73f9c0
mov dword [esp + 0x24], edi
push dword [edi + 4]
mov ecx, dword [edi]
call fcn.00488caf
mov edi, dword [edi + 8]
mov ecx, eax
add esp, 0xc
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], edi
mov edx, dword [ecx]
mov eax, dword [edx]
mov dword [esp + 0x10], eax
mov eax, dword [eax]
cmp eax, dword [0x73f9c4]
jne 0x48916c
cmp dword [edx + 8], esi
je 0x48916c
mov ecx, dword [esp + 0x10]
push 1
push 0x73f9cc
push dword [edx + 4]
xor edx, edx
call fcn.00488caf
mov ecx, eax
add esp, 0xc
mov dword [esp + 0x10], ecx
mov eax, dword [ecx + 4]
push 4
push 0x73f9d0
mov eax, dword [eax]
mov dword [ebx + 0x24], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ebx + 0x24]
mov edx, dword [eax + 4]
mov dword [ebx + 0x28], edx
call fcn.0048bd53
pop ecx
pop ecx
test eax, eax
je 0x489070
add dword [ebx + 0x24], 4
add dword [ebx + 0x28], 0xfffffffc
mov ecx, dword [ebx + 0x24]
mov eax, dword [ebx + 0x28]
mov byte [ecx + eax], 0
mov ecx, dword [esp + 0x10]
call fcn.00488e73
mov eax, dword [esp + 0xc]
push 0x192a
push 0x73f9d8
push 1
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
inc eax
push eax
call fcn.005ed7c0
mov ecx, eax
add esp, 0x10
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x4890e1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x192a
push esi
push edi
mov edx, 0x73f9f4
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x73fa10
push 0x73fa2c
jmp 0x4894fc
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [eax + 4]
push edx
push dword [eax]
inc edx
call section..text
mov eax, dword [esp + 0x14]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
mov byte [ecx + eax], 0
call fcn.00484daf
test edx, edx
ja 0x489129
jb 0x48911e
cmp eax, 0x7fffffff
ja 0x489129
mov ecx, dword [esp + 0x10]
call fcn.00484ddc
jmp 0x48912b
xor eax, eax
push 1
push dword [esp + 0x14]
mov dword [ebx + 0x18], eax
call fcn.005ed680
mov eax, dword [esp + 0x14]
pop ecx
pop ecx
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x48914f
mov ecx, dword [ecx]
jmp 0x489151
xor ecx, ecx
mov dword [ebx + 0x1c], ecx
test ecx, ecx
je 0x489165
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
sub eax, ecx
add eax, dword [edx + 4]
jmp 0x489167
xor eax, eax
mov dword [ebx + 0x20], eax
jmp 0x4891e8
mov eax, dword [esp + 0x10]
mov dword [ebx], eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov dword [ebx + 4], eax
mov eax, dword [ecx]
mov eax, dword [eax + 8]
test eax, eax
je 0x4894ad
mov eax, dword [eax]
xor edx, edx
mov dword [ebx + 8], eax
mov eax, dword [ecx]
push 1
push 0x73fa50
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
or dword [ebx + 0x18], 0xffffffff
mov dword [ebx + 0x14], eax
mov ecx, dword [ecx + 4]
push dword [ecx + 4]
mov ecx, dword [ecx]
call fcn.00488caf
mov edx, eax
add esp, 0xc
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov dword [ebx + 0x24], eax
mov eax, dword [edx + 4]
mov ecx, dword [eax + 4]
mov eax, dword [ebx + 0x24]
mov dword [ebx + 0x28], ecx
mov byte [ecx + eax], 0
mov ecx, edx
call fcn.00488e73
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov byte [ecx + eax], 0
mov ecx, dword [ebx + 0x14]
mov eax, dword [ebx + 8]
mov byte [ecx + eax], 0
test edi, edi
je 0x4893d2
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x4893d2
mov eax, dword [edi]
test eax, eax
je 0x4893d2
test esi, esi
je 0x4892f2
mov al, byte [eax]
cmp al, 0x20
je 0x48921b
cmp al, 9
jne 0x4892f2
cmp dword [esi + 0x10], 0
jne 0x4892a6
mov eax, dword [esi + 8]
push 0x1971
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0xc]
push 0x73fa54
add eax, ecx
push 1
push eax
call fcn.005ed7c0
add esp, 0x10
mov dword [esi + 8], eax
test eax, eax
je 0x48941d
push dword [esi + 0xc]
mov edx, dword [edi + 4]
mov ecx, eax
push dword [esp + 0x20]
add edx, dword [esi + 0xc]
call section..text
mov eax, dword [esi]
push 0x1975
mov dword [esp + 0x28], eax
mov eax, dword [esi + 4]
push 0x73facc
inc eax
push 1
push eax
call fcn.005ed7c0
add esp, 0x18
mov dword [esi], eax
test eax, eax
je 0x4893eb
mov edx, dword [esi + 4]
mov ecx, eax
push edx
push dword [esp + 0x20]
inc edx
call section..text
or dword [esi + 0x10], 0xffffffff
pop ecx
pop ecx
jmp 0x4892ce
mov eax, dword [esi + 0xc]
push 0x197c
push 0x73fb44
push 1
add eax, ecx
push eax
push dword [esi + 8]
call fcn.005ed970
add esp, 0x14
test eax, eax
je 0x48944f
mov dword [esi + 8], eax
mov edx, dword [edi + 4]
mov ecx, dword [esi + 8]
add ecx, dword [esi + 0xc]
lea eax, [edx - 1]
push eax
mov eax, dword [edi]
inc eax
push eax
call section..text
mov eax, dword [edi + 4]
pop ecx
dec eax
add dword [esi + 0xc], eax
pop ecx
jmp 0x4893c1
push 0x1987
push 0x73fbbc
push 1
push 0x18
call fcn.005ed7c0
mov esi, eax
add esp, 0x10
test esi, esi
je 0x48947e
push 6
xor eax, eax
mov edi, esi
pop ecx
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x14]
xor ecx, ecx
cmp dword [edi + 4], eax
jbe 0x48934c
mov eax, dword [edi]
cmp byte [eax + ecx], 0x3a
je 0x489336
inc ecx
cmp ecx, dword [edi + 4]
jb 0x489328
jmp 0x48934c
mov dword [esi], eax
mov dword [esi + 4], ecx
mov eax, dword [edi]
inc eax
add eax, ecx
mov dword [esi + 8], eax
mov eax, dword [edi + 4]
sub eax, ecx
dec eax
mov dword [esi + 0xc], eax
cmp dword [esi], 0
jne 0x48935f
push 1
push esi
call fcn.005ed680
pop ecx
pop ecx
xor esi, esi
jmp 0x4893c1
mov edx, dword [esi + 0xc]
lea ecx, [esi + 8]
call fcn.00488c79
mov ecx, dword [esi]
mov dword [esi + 0xc], eax
mov eax, dword [esi + 4]
mov byte [ecx + eax], 0
mov ecx, dword [esi + 8]
mov eax, dword [esi + 0xc]
mov byte [ecx + eax], 0
and dword [esi + 0x10], 0
and dword [esi + 0x14], 0
cmp dword [ebx + 0x40], 0
jne 0x489396
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], esi
jmp 0x48939c
mov eax, dword [ebx + 0x44]
mov dword [eax + 0x14], esi
mov dword [ebx + 0x44], esi
cmp dword [esi + 0xc], 0x7fffffff
ja 0x4893c1
push dword [esi + 0xc]
mov edx, dword [esi]
push dword [esi + 8]
mov ecx, dword [ebx + 0x84]
push dword [esi + 4]
call fcn.004889b7
add esp, 0xc
mov eax, dword [edi + 8]
mov edi, eax
mov dword [esp + 0x14], edi
test eax, eax
jne 0x4891f0
mov ecx, dword [esp + 0x18]
call fcn.00488e73
mov ecx, dword [esp + 0xc]
call fcn.00488e73
mov eax, ebx
jmp 0x4894c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov ebx, 0x1975
push esi
push ebx
mov edx, 0x73fae8
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push ebx
push 0x73fb04
push 0x73fb20
jmp 0x4894fc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1971
push esi
push edi
mov edx, 0x73fa70
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x73fa8c
push 0x73faa8
jmp 0x4894fc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x197c
push esi
push edi
mov edx, 0x73fb60
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x73fb7c
push 0x73fb98
jmp 0x4894fc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1987
push esi
push edi
mov edx, 0x73fbd8
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x73fbf4
push 0x73fc10
jmp 0x4894fc
mov ecx, dword [esp + 0x18]
call fcn.00488e73
mov ecx, dword [esp + 0xc]
call fcn.00488e73
mov ecx, ebx
call fcn.00488e9d
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1907
push esi
push edi
mov edx, 0x73f960
xor ecx, ecx
call fcn.0048cac3
add esp, 0xc
push edi
push 0x73f97c
push 0x73f998
call fcn.00401109
add esp, 0xc
push esi
call fcn.005c8390
int3