Function at 0x472b7d
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov ecx, dword [ebx]
mov ecx, dword [ecx + 4]
call fcn.0048fb51
xor edi, edi
test eax, eax
jne 0x472c25
mov esi, dword [ebp + 0x10]
xor edx, edx
push edi
push edi
lea ecx, [esi + 0x14]
call fcn.004878dc
mov ecx, dword [ebx]
mov edx, esi
push esi
push dword [ebp + 0xc]
mov dword [esp + 0x1c], eax
mov ecx, dword [ecx + 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 0xc], ecx
lea ecx, [eax + 0x14]
mov dword [eax + 8], ebx
mov dword [eax + 0x10], esi
call section..text
mov ecx, dword [ebx]
add esp, 0x10
mov ecx, dword [ecx]
call fcn.00487815
test eax, eax
je 0x472c01
mov eax, dword [ebx]
mov ecx, dword [eax]
cmp dword [ecx - 0xc], edi
jbe 0x472bfb
mov eax, dword [ecx - 0x10]
add eax, 0x10
add eax, ecx
jmp 0x472bfd
mov eax, edi
mov edx, dword [eax]
jmp 0x472c03
mov edx, edi
mov ecx, dword [esp + 0xc]
mov eax, dword [ebx]
mov edx, dword [edx]
push ecx
mov ecx, dword [ecx]
push edi
push 0x472b37
push dword [eax]
call fcn.0045c31f
add esp, 0x10
xor eax, eax
jmp 0x472dba
mov esi, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [esi + 0x10]
sub eax, dword [esi]
mov ecx, dword [esi + 4]
sub eax, ecx
cmp eax, edx
jge 0x472cdf
test ecx, ecx
jle 0x472c93
mov ebx, dword [esi]
mov eax, dword [esi + 0xc]
add ebx, eax
mov dword [esp + 0xc], ebx
mov ebx, dword [ebp + 8]
test ecx, ecx
je 0x472c91
test eax, eax
jne 0x472c69
call fcn.005f2820
mov dword [eax], 0x16
call fcn.005f0510
jmp 0x472c8e
mov edx, dword [esp + 0xc]
test edx, edx
je 0x472c57
cmp dword [esi + 0x10], ecx
jae 0x472c83
call fcn.005f2820
mov dword [eax], 0x22
jmp 0x472c62
push ecx
push edx
push eax
call fcn.005c2aa0
add esp, 0xc
mov edx, dword [ebp + 0x10]
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov eax, ecx
sub eax, dword [esi + 4]
mov dword [esp + 0xc], ecx
cmp eax, edx
jge 0x472cdf
mov eax, ecx
sub eax, dword [esi + 4]
cmp eax, edx
jge 0x472cbf
add eax, 0x1000
add ecx, 0x1000
cmp eax, edx
jl 0x472cac
mov dword [esp + 0xc], ecx
push ecx
push dword [esi + 0xc]
call fcn.0060a920
mov dword [esi + 0xc], eax
pop ecx
pop ecx
test eax, eax
je 0x472dc1
mov eax, dword [esp + 0xc]
mov edx, dword [ebp + 0x10]
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
push edx
mov edx, dword [esi + 0x10]
sub edx, dword [esi]
push dword [ebp + 0xc]
sub edx, ecx
add ecx, dword [esi]
add ecx, dword [esi + 0xc]
call section..text
mov eax, dword [ebp + 0x10]
add dword [esi + 4], eax
pop ecx
pop ecx
mov dword [esp + 0xc], edi
mov ecx, dword [ebx]
mov edx, dword [ebx + 0x10]
mov ecx, dword [ecx]
call fcn.0041ca72
mov ecx, dword [ebx]
or edx, 0xffffffff
push 0x6f3af8
mov ecx, dword [ecx]
call fcn.00419063
pop ecx
mov ecx, dword [ebx]
push 0xffffffffffffffff
push 0xfffffffffffffffe
pop edx
mov ecx, dword [ecx]
call fcn.00419f51
pop ecx
mov ecx, dword [ebx]
mov edx, 0x6f3b00
mov ecx, dword [ecx]
call fcn.0041bf3d
mov eax, dword [ebx]
xor edx, edx
push edi
inc edx
mov ecx, dword [eax]
call fcn.00417e9a
pop ecx
test eax, eax
je 0x472d60
mov eax, dword [ebx]
push str.DynamicBuffer.WriteSink___readable__:
push dword [eax]
call fcn.0045d114
pop ecx
pop ecx
mov ecx, dword [ebx]
mov ecx, dword [ecx]
call fcn.0041cd62
mov ecx, ebx
call fcn.00487815
test eax, eax
je 0x472d88
mov eax, dword [esi + 0xc]
xor edx, edx
push dword [esi + 4]
add eax, dword [esi]
mov ecx, dword [ebx]
push eax
call fcn.00477dcd
pop ecx
pop ecx
mov ecx, dword [esi + 8]
test ecx, ecx
jne 0x472d9a
mov eax, dword [esp + 0xc]
mov dword [esi + 4], edi
mov dword [esi], edi
jmp 0x472daf
mov eax, dword [esi + 4]
sub eax, ecx
mov dword [esp + 0xc], eax
test eax, eax
jle 0x472db1
add dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], edi
test eax, eax
jne 0x472d03
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edi, 0xfe
mov esi, 0x634
push edi
push esi
mov edx, 0x6f3a84
xor ecx, ecx
call fcn.0048f95e
add esp, 0xc
push esi
push 0x6f3aac
push 0x6f3ad4
call fcn.00401109
add esp, 0xc
push edi
call fcn.005d08b0
int3