Function at 0x48ce20
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d8a2b
push eax
mov dword fs:[0], esp
sub esp, 0x228
push ebx
mov ebx, ecx
test ebx, ebx
je 0x48d14f
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x48d14e
movzx eax, word [edi]
test ax, ax
je 0x48d14e
push esi
cmp ax, 0x23
jne 0x48cebf
cmp word [edi + 2], 0
lea eax, [edi + 2]
je 0x48d14d
push 0
push eax
call fcn.0044c570
push 0
mov esi, eax
push ebx
push esi
call fcn.004477c0
add esp, 0x14
mov edi, eax
test esi, esi
je 0x48ce9b
push esi
call fcn.0044c4f0
add esp, 4
test edi, edi
je 0x48d14d
push edi
call fcn.0044c4f0
add esp, 4
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x46c8]
test ecx, ecx
je 0x48d14d
mov eax, dword [ebx + 0x4924]
test al, 4
je 0x48d14d
test al, 0x10
jne 0x48d14d
mov eax, dword [ebx + 0x6b94]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x48d14d
cmp eax, ecx
jne 0x48d14d
mov ecx, ebx
call fcn.004898a0
test eax, eax
je 0x48d14d
lea ecx, [eax + 8]
call fcn.00486aa0
test al, al
je 0x48cfa2
mov ecx, dword [0x52fe30]
push 1
call fcn.0044ec50
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push eax
push edi
call esi
mov ecx, dword [0x52fe30]
test eax, eax
jne 0x48cf45
push 2
call fcn.0044ec50
jmp 0x48cf9d
push 1
call fcn.0044ec70
push eax
push edi
call esi
mov ecx, dword [0x52fe30]
test eax, eax
jne 0x48cf63
push 2
call fcn.0044ec70
jmp 0x48cf9d
push 1
call fcn.0044ec90
push eax
push edi
call esi
mov ecx, dword [0x52fe30]
test eax, eax
jne 0x48cf81
push 2
call fcn.0044ec90
jmp 0x48cf9d
push 1
call fcn.0044ecb0
push eax
push edi
call esi
test eax, eax
jne 0x48cfa2
mov ecx, dword [0x52fe30]
push 2
call fcn.0044ecb0
mov edi, eax
mov dword [ebp + 8], eax
xor esi, esi
cmp dword [ebp + 0xc], esi
je 0x48d08f
cmp dword [ebx + 0x4958], esi
je 0x48cfc6
push esi
push esi
push esi
push esi
push str.PostMacro__creating_thread
call fcn.004349b0
add esp, 0x14
mov eax, dword [ebx + 0x728]
cmp eax, esi
je 0x48d00d
push esi
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x48cff1
mov eax, dword [ebx + 0x728]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx + 0x728], esi
jmp 0x48d00d
mov ecx, dword [ebx + 0x728]
push 0x64
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
mov edx, dword [ebx + 0x728]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x48d012
sub eax, edx
sar eax, 1
mov edi, eax
lea eax, [edi + edi + 0x14]
push eax
push 1
call fcn.0044c490
mov ecx, dword [ebp + 8]
add esp, 8
mov esi, eax
push ecx
inc edi
push edi
lea edx, [esi + 0x10]
push edx
mov dword [esi], ebx
mov dword [esi + 4], 0
call fcn.00401730
lea eax, [ebx + 0x72c]
push eax
push 0
push esi
push 0x4896d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0x728], eax
test eax, eax
jne 0x48d14d
push esi
call fcn.0044c4f0
add esp, 4
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 0x4958], esi
je 0x48d0a8
push esi
push esi
push esi
push esi
push str.PostMacro__calling_pipe
call fcn.004349b0
add esp, 0x14
mov ecx, dword [ebp - 0x10]
push 0x2710
push ecx
lea ecx, [ebp - 0x234]
call fcn.0042e4f0
push 1
push str.CRealConsole::PostMacro
lea ecx, [ebp - 0x234]
mov dword [ebp - 4], esi
call fcn.0042e5b0
test eax, eax
je 0x48d122
mov ecx, dword [0x52fe2c]
push esi
push str.Macro:_Waiting_for_result__10_sec_
call fcn.0041a5b0
mov eax, edi
lea edx, [eax + 2]
jmp 0x48d0f0
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x48d0f0
sub eax, edx
sar eax, 1
lea edx, [eax + eax + 2]
push edx
push edi
push 0xcc
lea ecx, [ebp - 0x234]
call fcn.0042e620
mov ecx, dword [0x52fe2c]
push esi
push esi
call fcn.0041a5b0
cmp dword [ebx + 0x4958], esi
je 0x48d13b
push esi
push esi
push esi
push esi
push str.PostMacro__done
call fcn.004349b0
add esp, 0x14
lea ecx, [ebp - 0x234]
mov dword [ebp - 4], 0xffffffff
call fcn.0042e9c0
pop esi
pop edi
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8