Function at 0x48ed70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x7fec5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x300
mov al, byte [esp + 0x310]
push ebx
push ebp
push esi
push edi
mov edi, ecx
xor esi, esi
mov dword [esp + 0x14], edi
test al, al
mov dword [esp + 0x18], esi
je 0x48f08e
mov eax, dword [edi + 0x3c]
lea ecx, [esp + 0x60]
push ecx
mov ecx, edi
mov byte [eax + 0x44], 0
call fcn.00490690
mov eax, dword [esp + 0x64]
mov dword [esp + 0x318], esi
cmp eax, esi
je 0x48f075
mov ebp, dword [esp + 0x68]
sub ebp, eax
sar ebp, 2
je 0x48f075
jmp 0x48ede5
mov eax, dword [esp + 0x64]
mov esi, dword [eax + ebp*4 - 4]
dec ebp
lea edx, [esp + 0xac]
push edx
call fcn.00463b20
add esp, 4
test eax, eax
mov byte [esp + 0x318], 1
je 0x48ee0b
lea edi, [eax + 4]
jmp 0x48ee0d
xor edi, edi
mov eax, dword [esi]
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call dword [eax]
test eax, eax
mov byte [esp + 0x318], 2
je 0x48ee29
lea ecx, [eax + 4]
jmp 0x48ee2b
xor ecx, ecx
push edi
call fcn.00482f80
test eax, eax
push 1
lea ecx, [esp + 0x28]
sete bl
mov byte [esp + 0x31c], 1
call fcn.00404c40
push 1
lea ecx, [esp + 0xb4]
mov byte [esp + 0x31c], 0
call fcn.00404c40
test bl, bl
je 0x48ee89
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x3c]
mov cl, byte [eax + 0x44]
cmp cl, 2
je 0x48ee80
cmp cl, 5
je 0x48ee80
mov byte [eax + 0x44], 1
jmp 0x48f06d
mov byte [eax + 0x44], 5
jmp 0x48f06d
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0xe8]
push ecx
mov esi, dword [eax + ebp*4]
call fcn.0048f8a0
add esp, 4
test eax, eax
mov byte [esp + 0x318], 3
je 0x48eeb1
lea edi, [eax + 4]
jmp 0x48eeb3
xor edi, edi
mov edx, dword [esi]
lea eax, [esp + 0x98]
push eax
mov ecx, esi
call dword [edx]
test eax, eax
mov byte [esp + 0x318], 4
je 0x48eed2
lea ecx, [eax + 4]
jmp 0x48eed4
xor ecx, ecx
push edi
call fcn.00482f80
test eax, eax
push 1
lea ecx, [esp + 0xa0]
sete bl
mov byte [esp + 0x31c], 3
call fcn.00404c40
push 1
lea ecx, [esp + 0xf0]
mov byte [esp + 0x31c], 0
call fcn.00404c40
test bl, bl
je 0x48ef45
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x3c]
mov cl, byte [eax + 0x44]
cmp cl, 1
je 0x48ef29
cmp cl, 5
je 0x48ef29
mov byte [eax + 0x44], 2
jmp 0x48ef2d
mov byte [eax + 0x44], 5
mov ecx, dword [esp + 0x64]
mov edx, dword [edx + 0x3c]
mov eax, dword [ecx + ebp*4]
mov eax, dword [eax + 0xd8]
mov dword [edx + 0x58], eax
jmp 0x48f06d
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0xd4]
push edx
mov esi, dword [ecx + ebp*4]
call fcn.0048f950
add esp, 4
test eax, eax
mov byte [esp + 0x318], 5
je 0x48ef6d
lea edi, [eax + 4]
jmp 0x48ef6f
xor edi, edi
mov eax, dword [esi]
lea ecx, [esp + 0xc0]
push ecx
mov ecx, esi
call dword [eax]
test eax, eax
mov byte [esp + 0x318], 6
je 0x48ef8e
lea ecx, [eax + 4]
jmp 0x48ef90
xor ecx, ecx
push edi
call fcn.00482f80
test eax, eax
push 1
lea ecx, [esp + 0xc8]
sete bl
mov byte [esp + 0x31c], 5
call fcn.00404c40
push 1
lea ecx, [esp + 0xdc]
mov byte [esp + 0x31c], 0
call fcn.00404c40
test bl, bl
je 0x48efdb
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x3c]
mov byte [eax + 0x44], 3
jmp 0x48f06d
mov ecx, dword [esp + 0x64]
lea edx, [esp + 0x70]
push edx
mov esi, dword [ecx + ebp*4]
call fcn.0048f7f0
add esp, 4
test eax, eax
mov byte [esp + 0x318], 7
je 0x48f000
lea edi, [eax + 4]
jmp 0x48f002
xor edi, edi
mov eax, dword [esi]
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call dword [eax]
test eax, eax
mov byte [esp + 0x318], 8
je 0x48f01e
lea ecx, [eax + 4]
jmp 0x48f020
xor ecx, ecx
push edi
call fcn.00482f80
test eax, eax
push 1
lea ecx, [esp + 0x3c]
sete bl
mov byte [esp + 0x31c], 7
call fcn.00404c40
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], 0
call fcn.00404c40
test bl, bl
je 0x48f062
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x3c]
mov byte [eax + 0x44], 4
jmp 0x48f06d
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x3c]
mov byte [edx + 0x44], 0
test ebp, ebp
jne 0x48ede1
lea ecx, [esp + 0x60]
mov dword [esp + 0x318], 0xffffffff
call fcn.0040e470
jmp 0x48f7cc
mov ecx, edi
call fcn.00490c40
lea ecx, [esp + 0x20]
call fcn.004034c0
mov dword [esp + 0x20], vtable.ascstring.0
mov ecx, dword [edi + 0x3c]
mov dword [esp + 0x318], 9
mov al, byte [ecx + 0x44]
cmp al, 1
jne 0x48f1d5
mov dword [esp + 0x1a8], 0x85bca8
mov dword [esp + method.IRefCountable.virtual_0], vtable.IRefCountable.0
mov dword [esp + 0x18], 1
push esi
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x31c], 0xa
call fcn.0048fa00
push 1
lea ecx, [esp + 0x1bc]
mov dword [esp + 0x31c], 0xb
mov byte [esp + 0x1b8], 0
call fcn.0048fd30
push 1
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x31c], 0xc
call fcn.0048fe50
push 1
lea ecx, [esp + 0x284]
mov byte [esp + 0x31c], 0xd
call fcn.0048fe50
mov eax, dword [esp + 0x1a8]
mov dword [esp + method.ClientLib::PwdAuth.1.virtual_0], vtable.ClientLib::PwdAuth.1.0
mov ecx, dword [eax + 4]
mov dword [esp + ecx + method.ClientLib::PwdAuth.virtual_0], vtable.ClientLib::PwdAuth.0
mov edx, dword [esp + 0x1a8]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x164]
mov dword [esp + eax + 0x1a4], ecx
mov eax, dword [esp + 0x1a4]
lea edx, [esp + 0x70]
mov bl, 0xe
push edx
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x31c], bl
call dword [eax + 4]
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x324], 0xf
call fcn.00428c90
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], bl
call fcn.00404c40
lea ecx, [esp + 0x30c]
mov byte [esp + 0x318], 9
call fcn.00490090
jmp 0x48f69c
cmp al, 2
je 0x48f4cf
cmp al, 5
je 0x48f4cf
cmp al, 3
jne 0x48f318
mov dword [esp + 0x100], 0x85bc80
mov dword [esp + method.IRefCountable.virtual_0], vtable.IRefCountable.0
mov dword [esp + 0x18], 4
push esi
lea ecx, [esp + 0x100]
mov byte [esp + 0x31c], 0x18
call fcn.0048fa00
push 0xffffffffffffffff
push str.bsdauth_pam
lea ecx, [esp + 0x118]
mov dword [esp + 0x320], 0x19
mov byte [esp + 0x114], 0
call fcn.0041d580
push 1
lea ecx, [esp + 0x128]
mov byte [esp + 0x31c], 0x1a
call fcn.00490250
lea ecx, [esp + 0x1f]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esp + 0x194]
mov byte [esp + 0x320], 0x1b
mov byte [esp + 0x190], 0
call fcn.00496ad0
mov eax, dword [esp + 0x100]
mov dword [esp + 0xfc], vtable.ClientLib::KbdiAuth.1.0
mov ecx, dword [eax + 4]
mov dword [esp + ecx + method.ClientLib::KbdiAuth.virtual_0], vtable.ClientLib::KbdiAuth.0
mov edx, dword [esp + 0x100]
mov eax, dword [edx + 4]
lea ecx, [eax - 0xa0]
mov dword [esp + eax + 0xfc], ecx
mov eax, dword [esp + 0xfc]
lea edx, [esp + 0x70]
mov bl, 0x1c
push edx
lea ecx, [esp + 0x100]
mov byte [esp + 0x31c], bl
call dword [eax + 4]
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x324], 0x1d
call fcn.00428c90
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], bl
call fcn.00404c40
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x318], 9
call fcn.00490500
jmp 0x48f69c
cmp al, 4
jne 0x48f427
mov dword [esp + 0x38], 0x85bc58
mov dword [esp + 0x5c], vtable.IRefCountable.0
mov dword [esp + 0x18], 8
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x31c], 0x1e
call fcn.0048fa00
lea ecx, [esp + 0x13]
mov dword [esp + 0x318], 0x1f
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], esi
mov byte [esp + 0x4c], 0
call fcn.004969b0
mov edx, dword [esp + 0x38]
mov dword [esp + 0x34], vtable.ClientLib::GmicAuth.1.0
mov byte [esp + 0x318], 0x20
mov eax, dword [edx + 4]
mov dword [esp + eax + 0x38], vtable.ClientLib::GmicAuth.0
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx + 4]
lea edx, [eax - 0x24]
mov dword [esp + eax + 0x34], edx
call fcn.00583bb0
mov al, byte [0x951a35]
test al, al
je 0x48f3b5
push 0x951af0
lea ecx, [esp + 0x50]
call fcn.00496a40
call fcn.00583bb0
mov al, byte [0x951a36]
test al, al
je 0x48f3d1
push 0x951b00
lea ecx, [esp + 0x50]
call fcn.00496a40
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x70]
mov bl, 0x21
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x31c], bl
call dword [edx + 4]
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x324], 0x22
call fcn.00428c90
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], bl
call fcn.00404c40
lea ecx, [esp + 0x5c]
mov byte [esp + 0x318], 9
call fcn.0048fc40
jmp 0x48f69c
mov dword [esp + 0x38], 0x85bc30
mov dword [esp + 0x48], vtable.IRefCountable.0
mov dword [esp + 0x18], 0x10
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x31c], 0x23
call fcn.0048fa00
mov eax, dword [esp + 0x38]
mov dword [esp + 0x34], vtable.ClientLib::NoneAuth.1.0
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x38], vtable.ClientLib::NoneAuth.0
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 4]
lea ecx, [eax - 0x10]
mov dword [esp + eax + 0x34], ecx
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x70]
mov ebx, 0x24
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x31c], ebx
call dword [eax + 4]
push 0xffffffffffffffff
push esi
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x324], 0x25
call fcn.00428c90
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], bl
call fcn.00404c40
lea ecx, [esp + 0x48]
mov byte [esp + 0x318], 9
call fcn.0048fab0
jmp 0x48f69c
cmp dword [edi + 0x68], esi
jne 0x48f4f6
mov ecx, dword [ecx + 0x58]
lea edx, [esp + 0x70]
push ecx
push edx
call fcn.0048fcf0
add esp, 8
cmp eax, esi
mov byte [esp + 0x318], 0x10
je 0x48f52d
add eax, 4
jmp 0x48f52f
mov eax, dword [ecx + 0x58]
lea edx, [edi + 0x6c]
push eax
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.004966d0
lea eax, [esp + 0x88]
push eax
call fcn.0075e100
add esp, 0x1c
cmp eax, esi
mov byte [esp + 0x318], 0x11
je 0x48f52d
add eax, 4
jmp 0x48f52f
xor eax, eax
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x2c]
push eax
call fcn.00402e90
lea ecx, [esp + 0x74]
push 1
mov byte [esp + 0x31c], 9
call fcn.00404c40
mov ecx, dword [edi + 0x3c]
cmp byte [ecx + 0x44], 5
jne 0x48f69c
mov edi, 0x905f44
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x905f44
lea ecx, [esp + 0x2c]
call fcn.00476620
mov dword [esp + 0x1a8], 0x85bca8
mov dword [esp + method.IRefCountable.virtual_0], vtable.IRefCountable.0
mov dword [esp + 0x18], 2
push 0
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x31c], 0x12
call fcn.0048fa00
push 1
lea ecx, [esp + 0x1bc]
mov dword [esp + 0x31c], 0x13
mov byte [esp + 0x1b8], 0
call fcn.0048fd30
push 1
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x31c], 0x14
call fcn.0048fe50
push 1
lea ecx, [esp + 0x284]
mov byte [esp + 0x31c], 0x15
call fcn.0048fe50
mov edx, dword [esp + 0x1a8]
mov dword [esp + method.ClientLib::PwdAuth.1.virtual_0], vtable.ClientLib::PwdAuth.1.0
mov eax, dword [edx + 4]
mov dword [esp + eax + method.ClientLib::PwdAuth.virtual_0], vtable.ClientLib::PwdAuth.0
mov ecx, dword [esp + 0x1a8]
mov eax, dword [ecx + 4]
lea edx, [eax - 0x164]
mov dword [esp + eax + 0x1a4], edx
mov edx, dword [esp + 0x1a4]
lea eax, [esp + 0x70]
mov bl, 0x16
push eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x31c], bl
call dword [edx + 4]
test eax, eax
mov byte [esp + 0x318], 0x17
je 0x48f662
add eax, 4
jmp 0x48f664
xor eax, eax
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x30]
call fcn.00476540
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], bl
call fcn.00404c40
lea ecx, [esp + 0x30c]
mov byte [esp + 0x318], 9
call fcn.00490090
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x20]
push 0x4b0
lea ecx, [esp + 0x74]
push eax
push ecx
call fcn.00403bf0
add esp, 0xc
mov edx, dword [eax]
mov ecx, eax
mov byte [esp + 0x318], 0x26
call dword [edx + 0x24]
push eax
mov ecx, edi
call fcn.00491960
test al, al
push 1
lea ecx, [esp + 0x78]
sete bl
mov byte [esp + 0x31c], 9
call fcn.00404f20
test bl, bl
je 0x48f7b6
lea eax, [esp + 0x24]
lea ecx, [esp + 0xac]
push eax
push 0x905f3c
push ecx
call fcn.0044e080
push str._authentication_is_not_available._Switching_to_none.
lea edx, [esp + 0xa8]
push eax
push edx
mov byte [esp + 0x330], 0x27
call fcn.0044de30
add esp, 0x18
mov esi, eax
mov bl, 0x28
mov byte [esp + 0x318], bl
call dword [sym.imp.KERNEL32.dll_GetACP]
push eax
push 0xffffffffffffffff
push 0
push esi
lea ecx, [esp + 0x80]
call fcn.0041def0
push 0
lea eax, [esp + 0x74]
push 4
push eax
mov byte [esp + 0x324], 0x29
call fcn.0048e9a0
add esp, 0xc
push 1
lea ecx, [esp + 0x8c]
mov byte [esp + 0x31c], 0x2a
call fcn.00404c40
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x31c], bl
call fcn.00404c40
push 1
lea ecx, [esp + 0x9c]
mov byte [esp + 0x31c], 0x27
call fcn.00404c40
push 1
lea ecx, [esp + 0xb0]
mov byte [esp + 0x31c], 9
call fcn.00404c40
mov ecx, edi
call fcn.004919b0
push 1
lea ecx, [esp + 0x28]
mov dword [esp + 0x31c], 0xffffffff
call fcn.00404c40
mov ecx, dword [esp + 0x310]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x30c
ret 4