Function at 0x48e430
Capabilities:
Delete registry key
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5d0a4b
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x694114]
xor eax, esp
mov dword [esp + 0x28c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x694114]
xor eax, esp
push eax
lea eax, [esp + 0x2a4]
mov dword fs:[0], eax
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], esi
cmp dword [0x695aa8], ebx
je 0x48e497
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x48e497
push ebx
call fcn.004443c0
add esp, 4
jmp 0x48e4a2
mov al, byte [0x68a580]
mov byte [0x68a580], bl
mov byte [esp + 0x18], al
mov byte [esp + 0x17], al
push 1
mov ecx, esi
mov dword [esp + 0x2b0], ebx
call fcn.00488800
mov dword [esp + 0x2ac], 0xffffffff
test al, al
jne 0x48e503
cmp dword [0x695aa8], ebx
je 0x48e4f2
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x48e4f2
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004443c0
add esp, 4
mov al, 1
jmp 0x48e913
mov dl, byte [esp + 0x18]
mov byte [0x68a580], dl
mov al, 1
jmp 0x48e913
cmp dword [0x695aa8], ebx
je 0x48e527
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x48e527
mov eax, dword [esp + 0x18]
push eax
call fcn.004443c0
add esp, 4
jmp 0x48e531
mov cl, byte [esp + 0x18]
mov byte [0x68a580], cl
cmp dword [esi + 0x18], ebx
je 0x48eee5
mov edx, dword [esi + 4]
cmp edx, dword [0x68bf68]
je 0x48e55d
mov eax, 0x5c
push ebx
push eax
lea ecx, [esi + 8]
call fcn.004208b0
cmp eax, 0xffffffff
je 0x48eee5
push ebx
lea ecx, [esp + 0x40]
call fcn.0041df80
xor eax, eax
mov dword [esp + 0x2ac], 0xc
mov dword [esp + 0xf4], 7
mov dword [esp + 0xf0], ebx
mov word [esp + 0xe0], ax
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x100], ebx
push ebx
mov ecx, esi
mov byte [esp + 0x2b0], 0xd
call fcn.00488800
test al, al
je 0x48e5fb
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xe4]
push edx
mov ecx, esi
mov dword [esp + 0x20], ebx
call fcn.00488110
cmp al, bl
je 0x48e5fb
lea esp, [esp]
push 1
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x44]
call fcn.0041ef80
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xe4]
push edx
mov ecx, esi
call fcn.00488110
cmp al, bl
jne 0x48e5d0
mov eax, dword [esp + 0x44]
xor edi, edi
mov ebp, eax
cmp eax, ebx
jbe 0x48e69a
xor esi, esi
lea ecx, [ecx]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x24]
add eax, esi
push eax
push ecx
lea ecx, [esp + 0x130]
call fcn.00486de0
lea ecx, [esp + 0x128]
mov byte [esp + 0x2ac], 0xe
call fcn.0048e430
test al, al
je 0x48e85d
lea ecx, [esp + 0x128]
mov byte [esp + 0x2ac], 0x10
call fcn.004876c0
mov edx, dword [esp + 0x14c]
push edx
mov byte [esp + 0x2b0], 0xd
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x144], 8
jb 0x48e68a
mov eax, dword [esp + 0x130]
push eax
call fcn.00584768
add esp, 4
inc edi
add esi, 0x24
cmp edi, ebp
jb 0x48e610
mov esi, dword [esp + 0x24]
mov ecx, esi
call fcn.004876c0
xor ecx, ecx
push 8
mov word [esp + 0x108], cx
push str.advapi32
lea ecx, [esp + 0x10c]
mov dword [esp + 0x120], 7
mov dword [esp + 0x11c], ebx
call fcn.00402710
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
push 2
lea edx, [esp + 0x108]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x2b4], 0x11
mov dword [esp + 0x28], ebx
call fcn.0046f170
mov eax, dword [esp + 0x120]
push eax
mov byte [esp + 0x2b0], 0x13
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x118], 8
jb 0x48e72f
mov ecx, dword [esp + 0x104]
push ecx
call fcn.00584768
add esp, 4
xor edx, edx
mov ebp, 7
push str.RegDeleteKeyEx
lea ecx, [esp + 0x164]
mov dword [esp + 0x11c], ebp
mov dword [esp + 0x118], ebx
mov word [esp + 0x108], dx
call fcn.00402bb0
mov esi, dword [esp + 0x20]
push 0x57
lea eax, [esp + 0x164]
push eax
lea ecx, [esp + 0x18c]
push ecx
mov byte [esp + 0x2b8], 0x14
call fcn.00426400
push eax
push esi
mov byte [esp + 0x2c0], 0x15
call fcn.0046f490
mov edx, dword [esp + 0x1b4]
push edx
mov edi, eax
call fcn.005844d1
mov esi, 8
add esp, 0x18
cmp dword [esp + 0x198], esi
jb 0x48e7bf
mov eax, dword [esp + 0x184]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x17c]
xor ecx, ecx
push edx
mov dword [esp + 0x19c], ebp
mov dword [esp + 0x198], ebx
mov word [esp + 0x188], cx
mov byte [esp + 0x2b0], 0x13
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x174], esi
jb 0x48e808
mov eax, dword [esp + 0x160]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov dword [esp + 0x174], ebp
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x170], ebx
mov word [esp + 0x160], cx
cmp edi, ebx
je 0x48e93b
mov eax, dword [ebp + 0x2c]
xor esi, esi
sub eax, 2
jne 0x48e844
call fcn.00432a90
test al, al
je 0x48e844
mov esi, 0x100
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
jb 0x48e84f
mov eax, dword [eax]
mov edx, dword [ebp + 4]
push ebx
push esi
push eax
push edx
call edi
jmp 0x48e950
lea ecx, [esp + 0x128]
mov byte [esp + 0x2ac], 0xf
call fcn.004876c0
mov ecx, dword [esp + 0x14c]
push ecx
call fcn.005844d1
mov edi, 8
add esp, 4
cmp dword [esp + 0x144], edi
jb 0x48e89f
mov edx, dword [esp + 0x130]
push edx
call fcn.00584768
add esp, 4
mov ecx, dword [esp + 0xfc]
xor eax, eax
mov esi, 7
push ecx
mov dword [esp + 0x148], esi
mov dword [esp + 0x144], ebx
mov word [esp + 0x134], ax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xf4], edi
jb 0x48e8e5
mov edx, dword [esp + 0xe0]
push edx
call fcn.00584768
add esp, 4
xor eax, eax
mov dword [esp + 0xf4], esi
mov word [esp + 0xe0], ax
lea ecx, [esp + 0x3c]
mov dword [esp + 0xf0], ebx
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0041e1d0
xor al, al
mov ecx, dword [esp + 0x2a4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x28c]
xor ecx, esp
call fcn.00585b7b
add esp, 0x29c
ret
cmp dword [ebp + 0x1c], esi
lea eax, [ebp + 8]
jb 0x48e945
mov eax, dword [eax]
push eax
mov eax, dword [ebp + 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov dword [ebp + 0x34], eax
cmp eax, ebx
je 0x48ee67
cmp eax, 2
je 0x48ee67
xor al, al
mov edi, 7
jmp 0x48e970
cmp al, bl
jne 0x48e9d0
lea ecx, [esp + 0x128]
push 0x5fcf00
push ecx
call fcn.00423280
add esp, 8
mov esi, eax
or dword [esp + 0x1c], 2
mov byte [esp + 0x2ac], 0x16
cmp dword [0x695aa8], ebx
je 0x48e9b4
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x48e9b4
call fcn.004443b0
jmp 0x48e9b9
mov al, byte [0x68a580]
cmp al, bl
je 0x48e9d0
push esi
call fcn.00445fa0
add esp, 4
mov byte [esp + 0x17], 1
cmp eax, 1
jae 0x48e9d4
mov byte [esp + 0x17], bl
test byte [esp + 0x1c], 2
mov dword [esp + 0x2ac], 0x13
je 0x48ea15
mov edx, dword [esp + 0x144]
and dword [esp + 0x1c], 0xfffffffd
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x13c], 8
jb 0x48ea15
mov eax, dword [esp + 0x128]
push eax
call fcn.00584768
add esp, 4
cmp byte [esp + 0x17], bl
je 0x48ee0a
push str.Cant_delete_key__s
lea ecx, [esp + 0x164]
call fcn.00402bb0
xor ecx, ecx
mov dword [esp + 0xd0], edi
mov dword [esp + 0xcc], ebx
mov word [esp + 0xbc], cx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
xor edx, edx
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov word [esp + 0x50], dx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov byte [esp + 0x2ac], 0x19
call fcn.00425e70
cmp eax, ebx
je 0x48ea9e
lea ecx, [esp + 0xbc]
push ecx
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x168]
push ecx
mov ecx, eax
call fcn.00429320
cmp eax, ebx
jne 0x48eaae
lea edx, [esp + 0x160]
push edx
call fcn.004292f0
add esp, 4
mov esi, eax
call fcn.00420510
mov dword [esp + 0x28], eax
mov byte [esp + 0x2ac], 0x1a
call fcn.00420510
mov dword [esp + 0x2c], eax
mov byte [esp + 0x2ac], 0x1b
call fcn.00420510
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], ebx
push str.wx.sys_error
lea ecx, [esp + 0x25c]
mov byte [esp + 0x2b0], 0x1c
call fcn.00402bb0
push 1
lea eax, [esp + 0x280]
push eax
mov ecx, ebp
mov byte [esp + 0x2b4], 0x1d
call fcn.00486ed0
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x30], esp
push ecx
mov ecx, eax
call fcn.00406280
mov byte [esp + 0x2b8], 0x1f
mov dword [esp + 0x1b4], 1
mov dword [esp + 0x1bc], str....._srcmsw_registry.cpp
mov dword [esp + 0x1c4], str.wxRegKey::DeleteSelf
mov dword [esp + 0x1c0], 0x300
mov dword [esp + 0x1c8], 0x5fcf00
mov dword [esp + 0x1cc], ebx
mov dword [esp + 0x1d0], ebx
mov dword [esp + 0x1d4], ebx
mov dword [esp + 0x1d8], ebx
call sub.KERNEL32.dll_GetCurrentThreadId
xor edx, edx
mov dword [esp + 0x1dc], eax
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x1f8], edi
mov dword [esp + 0x1f4], ebx
mov word [esp + 0x1e4], dx
mov dword [esp + 0x200], ebx
mov dword [esp + 0x204], ebx
mov byte [esp + 0x2b8], 0x20
call sub.KERNEL32.dll_GetLastError
push 0xffffffffffffffff
mov esi, eax
push ebx
lea eax, [esp + 0x26c]
push eax
lea ecx, [esp + 0x1f0]
call fcn.00402610
mov ecx, dword [esp + 0x1e0]
cmp ecx, ebx
jne 0x48ec21
push 0x20
call fcn.00584773
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0x2b8], 0x21
cmp eax, ebx
je 0x48ec0e
mov ecx, eax
call fcn.004287b0
jmp 0x48ec10
xor eax, eax
mov ecx, eax
mov byte [esp + 0x2b8], 0x20
mov dword [esp + 0x1e0], ecx
lea edx, [esp + 0x264]
push edx
call fcn.004775a0
mov dword [eax], esi
mov ecx, dword [ebp + 0x34]
lea eax, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x2c0], 0x22
call fcn.004651d0
mov edx, dword [esp + 0x1f4]
push edx
mov byte [esp + 0x2b0], 0x1e
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x1ec], 8
jb 0x48ec7f
mov eax, dword [esp + 0x1d8]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov word [esp + 0x1d8], cx
mov ecx, dword [esp + 0x1d4]
mov dword [esp + 0x1ec], edi
mov dword [esp + 0x1e8], ebx
mov esi, ecx
cmp ecx, ebx
je 0x48ecb2
call fcn.0040c030
push esi
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x298]
push edx
call fcn.005844d1
mov esi, 8
add esp, 4
cmp dword [esp + 0x290], esi
jb 0x48ece0
mov eax, dword [esp + 0x27c]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x274]
xor ecx, ecx
push edx
mov dword [esp + 0x294], edi
mov dword [esp + 0x290], ebx
mov word [esp + 0x280], cx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x26c], esi
jb 0x48ed21
mov eax, dword [esp + 0x258]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov word [esp + 0x258], cx
lea ecx, [esp + 0x28]
mov dword [esp + 0x26c], edi
mov dword [esp + 0x268], ebx
mov byte [esp + 0x2ac], 0x19
call fcn.004020c0
mov edx, dword [esp + 0x6c]
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x64], esi
jb 0x48ed6a
mov eax, dword [esp + 0x50]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0xd8]
xor ecx, ecx
push edx
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], cx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xd0], esi
jb 0x48eda2
mov eax, dword [esp + 0xbc]
push eax
call fcn.00584768
add esp, 4
mov edx, dword [esp + 0x17c]
xor ecx, ecx
push edx
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd0], ebx
mov word [esp + 0xc0], cx
mov byte [esp + 0x2b0], 0x13
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x174], esi
jb 0x48edeb
mov eax, dword [esp + 0x160]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov dword [esp + 0x174], edi
mov dword [esp + 0x170], ebx
mov word [esp + 0x160], cx
mov al, 1
jmp 0x48e970
mov eax, dword [esp + 0x20]
mov byte [esp + 0x2ac], 0xd
cmp eax, ebx
je 0x48ee27
push eax
call fcn.0046f450
add esp, 4
mov dword [esp + 0x20], ebx
mov edx, dword [esp + 0xfc]
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xf4], 8
jb 0x48ee51
mov eax, dword [esp + 0xe0]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov dword [esp + 0xf4], edi
mov word [esp + 0xe0], cx
jmp 0x48e8f6
mov eax, dword [esp + 0x20]
mov byte [esp + 0x2ac], 0xd
cmp eax, ebx
je 0x48ee84
push eax
call fcn.0046f450
add esp, 4
mov dword [esp + 0x20], ebx
mov edx, dword [esp + 0xfc]
push edx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xf4], 8
jb 0x48eeae
mov eax, dword [esp + 0xe0]
push eax
call fcn.00584768
add esp, 4
xor ecx, ecx
mov word [esp + 0xe0], cx
lea ecx, [esp + 0x3c]
mov dword [esp + 0xf4], 7
mov dword [esp + 0xf0], ebx
mov dword [esp + 0x2ac], 0xffffffff
call fcn.0041e1d0
mov al, 1
jmp 0x48e913
mov edi, 7
xor al, al
lea ebp, [edi + 1]
nop
cmp al, bl
jne 0x48ef53
lea edx, [esp + 0x128]
push 0x5fcf00
push edx
call fcn.00423280
add esp, 8
mov esi, eax
mov eax, 1
or dword [esp + 0x1c], eax
mov dword [esp + 0x2ac], eax
cmp dword [0x695aa8], ebx
je 0x48ef37
call sub.KERNEL32.dll_GetCurrentThreadId
cmp eax, dword [0x695aa8]
je 0x48ef37
call fcn.004443b0
jmp 0x48ef3c
mov al, byte [0x68a580]
cmp al, bl
je 0x48ef53
push esi
call fcn.00445fa0
add esp, 4
mov byte [esp + 0x17], 1
cmp eax, 1
jae 0x48ef57
mov byte [esp + 0x17], bl
test byte [esp + 0x1c], 1
mov dword [esp + 0x2ac], 0xffffffff
je 0x48ef97
mov eax, dword [esp + 0x144]
and dword [esp + 0x1c], 0xfffffffe
push eax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x13c], ebp
jb 0x48ef97
mov ecx, dword [esp + 0x128]
push ecx
call fcn.00584768
add esp, 4
cmp byte [esp + 0x17], bl
je 0x48e911
push str.Registry_key__s_is_needed_for_normal_system_operation__ndeleting_it_will_leave_your_system_in_unusable_state:_noperation_aborted.
lea ecx, [esp + 0x12c]
call fcn.00402bb0
xor edx, edx
mov dword [esp + 0x2ac], 2
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov word [esp + 0x74], dx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
xor eax, eax
mov dword [esp + 0xac], edi
mov dword [esp + 0xa8], ebx
mov word [esp + 0x98], ax
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov byte [esp + 0x2ac], 4
call fcn.00425e70
cmp eax, ebx
je 0x48f037
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x9c]
push edx
lea ecx, [esp + 0x130]
push ecx
mov ecx, eax
call fcn.00429320
cmp eax, ebx
jne 0x48f047
lea edx, [esp + 0x128]
push edx
call fcn.004292f0
add esp, 4
mov esi, eax
call fcn.00420510
mov dword [esp + 0x104], eax
mov byte [esp + 0x2ac], 5
call fcn.00420510
mov dword [esp + 0x108], eax
mov byte [esp + 0x2ac], 6
call fcn.00420510
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], esi
mov dword [esp + 0x114], ebx
mov ecx, dword [esp + 0x24]
lea esi, [esp + 0x184]
mov byte [esp + 0x2ac], 7
call fcn.00487060
mov byte [esp + 0x2ac], 8
mov dword [esp + 0x200], 1
mov dword [esp + 0x208], str....._srcmsw_registry.cpp
mov dword [esp + 0x210], str.wxRegKey::DeleteSelf
mov dword [esp + 0x20c], 0x2cf
mov dword [esp + 0x214], 0x5fcf00
mov dword [esp + 0x218], ebx
mov dword [esp + 0x21c], ebx
mov dword [esp + 0x220], ebx
mov dword [esp + 0x224], ebx
call sub.KERNEL32.dll_GetCurrentThreadId
mov dword [esp + 0x228], eax
xor eax, eax
mov dword [esp + 0x22c], ebx
mov dword [esp + 0x244], edi
mov dword [esp + 0x240], ebx
mov word [esp + 0x230], ax
mov dword [esp + 0x24c], ebx
mov dword [esp + 0x250], ebx
mov ecx, esi
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x104]
mov byte [esp + 0x2ac], 0xb
call fcn.0041de00
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.0041d2a0
push eax
lea edx, [esp + 0x204]
push esi
push edx
call fcn.0040b680
mov eax, dword [esp + 0x1ac]
push eax
call fcn.005844d1
add esp, 0x10
cmp dword [esp + 0x198], ebp
jb 0x48f194
mov ecx, dword [esp + 0x184]
push ecx
call fcn.00584768
add esp, 4
mov eax, dword [esp + 0x24c]
xor edx, edx
push eax
mov dword [esp + 0x19c], edi
mov dword [esp + 0x198], ebx
mov word [esp + 0x188], dx
mov byte [esp + 0x2b0], 7
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x244], ebp
jb 0x48f1dd
mov ecx, dword [esp + 0x230]
push ecx
call fcn.00584768
add esp, 4
mov ecx, dword [esp + 0x22c]
xor edx, edx
mov dword [esp + 0x244], edi
mov dword [esp + 0x240], ebx
mov word [esp + 0x230], dx
mov esi, ecx
cmp ecx, ebx
je 0x48f210
call fcn.0040c030
push esi
call fcn.00584768
add esp, 4
lea ecx, [esp + 0x104]
mov byte [esp + 0x2ac], 4
call fcn.004020c0
mov eax, dword [esp + 0xb4]
push eax
call fcn.005844d1
add esp, 4
cmp dword [esp + 0xac], ebp
jb 0x48f24d
mov ecx, dword [esp + 0x98]
push ecx
call fcn.00584768
add esp, 4
mov eax, dword [esp + 0x90]
xor edx, edx
push eax
mov dword [esp + 0xb0], edi
mov dword [esp + 0xac], ebx
mov word [esp + 0x9c], dx
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x88], ebp
jb 0x48f28b
mov ecx, dword [esp + 0x74]
push ecx
call fcn.00584768
add esp, 4
mov eax, dword [esp + 0x144]
xor edx, edx
push eax
mov dword [esp + 0x8c], edi
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], dx
mov dword [esp + 0x2b0], 0xffffffff
call fcn.005844d1
add esp, 4
cmp dword [esp + 0x13c], ebp
jb 0x48f2d4
mov ecx, dword [esp + 0x128]
push ecx
call fcn.00584768
add esp, 4
mov al, 1
jmp 0x48eef0