Function at 0x487f20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x54f676
mov eax, dword fs:[0]
push eax
mov eax, 0x16c4
call fcn.0051e030
mov eax, dword [0x57f7c4]
xor eax, esp
mov dword [esp + 0x16c0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x57f7c4]
xor eax, esp
push eax
lea eax, [esp + 0x16d8]
mov dword fs:[0], eax
mov esi, edx
movzx eax, word [esi]
add eax, 0xffffd9fe
mov edi, ecx
mov dword [esp + 0x50], edi
cmp eax, 5
ja case.0x487f78.9732
jmp dword [eax*4 + 0x488d88]
mov eax, 0x2602
mov word [esp + 0x16c], ax
mov eax, dword [0x58798c]
xor ebx, ebx
mov byte [esi + 0x16], bl
cmp eax, 1
jne 0x487fb8
push 3
lea ecx, [esp + 0x170]
push ecx
mov ecx, edi
mov byte [esp + 0x176], al
call fcn.004ed0e0
jmp 0x488d5f
cmp eax, 2
je 0x488d5f
cmp dword [0x58799c], ebx
jmp 0x487fe5
lea eax, [esi + 2]
mov dword [esp + 0x1c], eax
call fcn.0047a5f0
mov ebp, eax
mov dword [esp + 0x40], ebp
cmp ebp, ebx
jne 0x488019
push 3
lea eax, [esp + 0x170]
push eax
mov ecx, edi
mov byte [esp + 0x176], 1
call fcn.004ed0e0
jmp 0x488d5f
mov ecx, dword [ebp + 0x90]
cmp ecx, dword [edi + 0x5ac0]
jbe 0x488045
push 3
lea edx, [esp + 0x170]
push edx
mov ecx, edi
mov byte [esp + 0x176], 2
call fcn.004ed0e0
jmp 0x488d5f
lea eax, [esp + 0x60]
push eax
call fcn.00488de0
mov dword [esp + 0x16e0], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
add ebp, 0x18
cmp dword [ebp], 0
je 0x4880d6
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x40]
mov bl, byte [ecx + edx + 0x78]
test bl, bl
je 0x4880d6
mov eax, dword [ebp]
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, 1
jl 0x4880d6
mov ecx, edx
call fcn.004059b0
mov esi, eax
test esi, esi
je 0x4880d6
mov cl, byte [esi + 0x4b]
test cl, cl
je 0x4880d6
cmp bl, cl
ja 0x4880a5
inc dword [esp + 0x18]
jmp 0x4880be
movzx eax, bl
movzx ecx, cl
cdq
idiv ecx
cmp edx, 1
jle 0x4880b8
mov edx, 1
add eax, edx
add dword [esp + 0x18], eax
movzx edx, bl
lea ecx, [esp + 0x34]
lea ebx, [esp + 0x60]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], edx
call fcn.00488e90
mov eax, dword [esp + 0x14]
inc eax
add ebp, 4
cmp eax, 0x18
mov dword [esp + 0x14], eax
jl 0x488061
lea esi, [esp + 0x8c]
call fcn.00488f00
mov ebp, 1
mov byte [esp + 0x16e0], 1
cmp dword [edi + 0x130c], ebp
mov dword [esp + 0x14], 0
jl 0x488169
lea eax, [edi + 0x220]
mov dword [esp + 0x30], eax
mov edi, edi
mov ebx, dword [esp + 0x30]
xor esi, esi
cmp dword [ebx], 0
jne 0x488152
inc dword [esp + 0x14]
lea ecx, [esp + 0x34]
push ecx
lea eax, [esp + 0x90]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], esi
call fcn.00489270
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x14], edx
jge 0x488169
inc esi
add ebx, 4
cmp esi, 0x18
jl 0x488126
add dword [esp + 0x30], 0x60
inc ebp
cmp ebp, dword [edi + 0x130c]
jle 0x488120
mov eax, dword [esp + 0x18]
test eax, eax
je 0x488774
cmp eax, dword [esp + 0x14]
jg 0x488774
push 0
push 1
lea eax, [edi + 0x5ac4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
je 0x4881c7
push 3
lea ecx, [esp + 0x170]
push ecx
mov ecx, edi
mov byte [esp + 0x176], 4
call fcn.004ed0e0
lea eax, [esp + 0x8c]
call fcn.00488da0
lea eax, [esp + 0x60]
call fcn.00488e50
jmp 0x488d5f
push 0x5879b0
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov dword [esp + 0x2c], eax
call fcn.004e1a50
mov edx, 0xe02
mov dword [esp + 0x3c], eax
mov word [esp + 0x2b4], dx
mov ecx, 0x17
lea eax, [esp + 0x819]
jmp 0x488200
mov byte [eax], 0
add eax, 0xa3
sub ecx, 1
jns 0x488200
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x60]
mov esi, dword [eax]
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x34], ecx
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x74]
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x38], esi
mov dword [esp + 0x58], edx
test eax, eax
je 0x48823f
cmp eax, dword [esp + 0x60]
je 0x488244
call fcn.0051b1ad
cmp esi, dword [esp + 0x58]
je 0x488584
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x488320
call fcn.0051b1ad
xor eax, eax
cmp esi, dword [eax + 0x14]
jne 0x48826b
call fcn.0051b1ad
mov eax, dword [esp + 0x34]
mov ebx, dword [esi + 8]
mov dword [esp + 0x20], ebx
test eax, eax
jne 0x488327
call fcn.0051b1ad
xor eax, eax
cmp esi, dword [eax + 0x14]
jne 0x48828f
call fcn.0051b1ad
mov eax, dword [esi + 0xc]
mov dword [esp + 0x18], eax
test eax, eax
je 0x488558
mov eax, dword [esp + 0x14]
mov ecx, eax
imul ecx, ecx, 0xa3
mov edx, eax
imul edx, edx, 0x32
lea edi, [esp + ecx + 0x7eb]
lea ecx, [esp + eax + 0x192]
lea ebp, [esp + edx + 0x2e1]
lea edx, [ecx + eax*4]
mov dword [esp + 0x4c], edx
jmp 0x4882d0
mov eax, dword [0x587964]
lea esi, [eax + 0x84]
mov dword [esp + 0x28], eax
call fcn.004122a0
mov esi, eax
test esi, esi
je 0x488549
cmp dword [esi + 0x14], 0
jne 0x488305
mov eax, dword [esp + 0x28]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov dword [esi + 0x14], eax
mov eax, esi
call fcn.004d2160
movzx eax, byte [ebx + 0x4b]
cmp dword [esp + 0x18], eax
jge 0x48832e
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], ecx
jmp 0x488332
mov eax, dword [eax]
jmp 0x488261
mov eax, dword [eax]
jmp 0x488285
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
add edx, eax
mov dword [esp + 0x28], eax
cmp eax, edx
jbe 0x48834f
call fcn.0051b1ad
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x80], ecx
call fcn.004899c0
mov edx, dword [eax]
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
add ecx, eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x28], eax
cmp eax, ecx
jbe 0x488391
call fcn.0051b1ad
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x84]
mov dword [esp + 0x84], edx
call fcn.004899c0
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
push 0x58
push edx
mov dword [esi + 0x30], ebx
movzx edx, byte [ebx + 0x24]
mov dword [esp + 0x30], ecx
movzx ecx, byte [ebx + 0x25]
push eax
push ecx
push edx
mov eax, esi
call fcn.004d21c0
mov eax, 0x5828d4
call fcn.004e2040
mov ecx, eax
movzx eax, byte [0x5827c8]
mov ebx, edx
cdq
add ecx, eax
adc ebx, edx
mov eax, esi
mov dword [esi + 0x38], ecx
mov dword [esi + 0x3c], ebx
call fcn.004d2470
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x50]
mov dword [esi + 0x9c], edx
cmp dword [esp + 0xa8], 0
mov edx, dword [esp + 0x28]
lea eax, [ecx + ecx*2]
lea eax, [edx + eax*8]
mov dword [ebx + eax*4 + 0x1c0], esi
je 0x48846d
mov eax, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa0]
inc eax
add ebx, ebx
mov dword [esp + 0xa4], eax
cmp ebx, eax
ja 0x488458
mov dword [esp + 0xa4], 0
sub dword [esp + 0xa8], 1
jne 0x48846d
mov dword [esp + 0xa4], 0
mov ebx, dword [esp + 0x4c]
mov eax, dword [esp + 0x30]
mov byte [ebx - 1], cl
mov byte [ebx], dl
movzx edx, byte [esi + 0x40]
mov byte [ebx + 1], dl
movzx edx, byte [esi + 0x41]
mov byte [ebx + 2], dl
mov byte [ebx + 3], al
mov edx, dword [esi + 0x38]
sub dword [esp + 0x18], eax
mov dword [ebp - 8], edx
mov edx, dword [esi + 0x3c]
mov dword [ebp - 4], edx
mov edx, dword [esi + 0x30]
mov edx, dword [edx]
mov byte [ebp + 4], cl
movzx ecx, byte [esp + 0x28]
mov dword [ebp], edx
mov byte [ebp + 5], cl
movzx edx, byte [esi + 0x40]
mov byte [ebp + 6], dl
movzx ecx, byte [esi + 0x41]
mov byte [ebp + 8], al
mov byte [ebp + 7], cl
mov dx, word [esi + 0x44]
mov word [ebp + 9], dx
mov eax, dword [esi + 0x46]
mov dword [ebp + 0xb], eax
movzx ecx, word [esi + 0x4a]
push 0x15
lea edx, [esi + 0x4c]
push edx
lea eax, [ebp + 0x11]
push eax
mov word [ebp + 0xf], cx
call fcn.0051b2d0
mov ecx, dword [esp + 0x38]
mov dword [ebp + 0x26], ecx
mov edx, dword [esi + 0x38]
mov dword [edi - 8], edx
mov eax, dword [esi + 0x3c]
mov dword [edi - 4], eax
mov ecx, dword [esi + 0x30]
mov edx, dword [ecx]
add esp, 0xc
mov dword [edi], edx
mov eax, dword [esi + 0x30]
push 0x20
add eax, 4
push eax
lea ecx, [edi + 4]
push ecx
call fcn.0051b2d0
movzx edx, byte [esi + 0x42]
inc dword [esp + 0x20]
mov byte [edi + 0x43], dl
mov eax, dword [esi + 0x46]
mov dword [edi + 0x24], eax
movzx ecx, word [esi + 0x4a]
mov word [edi + 0x28], cx
mov edx, dword [esi + 0x64]
add ebx, 5
add esp, 0xc
mov dword [edi + 0x2a], edx
mov dword [esp + 0x4c], ebx
mov ebx, dword [esp + 0x20]
add ebp, 0x32
add edi, 0xa3
cmp dword [esp + 0x18], 0
jne 0x4882d0
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x488580
call fcn.0051b1ad
xor eax, eax
cmp esi, dword [eax + 0x14]
jne 0x488571
call fcn.0051b1ad
mov esi, dword [esi]
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x14]
jmp 0x488221
mov eax, dword [eax]
jmp 0x488567
lea esi, [esp + 0x60]
call fcn.00488ec0
mov eax, dword [ebp + 0x90]
neg eax
push eax
lea eax, [edi + 0x5ac0]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
mov edx, dword [edi + 0x582c]
mov eax, dword [edi + 0x128]
mov ecx, 0x1b02
mov dword [esp + 0x106], edx
mov word [esp + 0x104], cx
mov ecx, dword [edi + 0x70]
lea edx, [esp + 0x112]
mov dword [esp + 0x10a], eax
mov dword [esp + 0x10e], ecx
mov eax, ebp
sub edx, ebp
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x4885e0
lea eax, [ebp + 0x94]
lea edx, [esp + 0x127]
sub edx, eax
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x488600
mov edx, dword [ebp + 0x90]
xor eax, eax
push 0x66
lea ecx, [esp + 0x108]
mov dword [esp + 0x162], eax
mov dword [esp + 0x166], eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [0x587968]
mov dword [esp + 0x162], edx
mov dword [esp + 0x16e], eax
call fcn.004ed2d0
mov eax, dword [esp + 0x1c]
mov edx, dword [edi + 0x582c]
push 0x15
push eax
lea ecx, [esp + 0x2c2]
push ecx
mov dword [esp + 0x2c2], edx
call fcn.0051b2d0
mov edx, dword [ebp + 0x90]
mov esi, dword [esp + 0x48]
mov eax, ebx
imul eax, eax, 0x32
add esp, 0xc
add eax, 0x25
push eax
lea ecx, [esp + 0x2b8]
push ecx
mov ecx, dword [0x58796c]
mov dword [esp + 0x2d7], edx
mov dword [esp + 0x2db], esi
mov byte [esp + 0x2df], 0x58
mov byte [esp + 0x2e0], bl
call fcn.004ed2d0
mov eax, dword [esp + 0x1c]
mov edx, dword [edi + 0x5ac0]
push 0x15
push eax
lea ecx, [esp + 0x17b]
push ecx
mov byte [esp + 0x17a], 0
mov dword [esp + 0x17b], edx
call fcn.0051b2d0
mov edx, dword [ebp + 0x90]
add esp, 0xc
lea eax, [ebx + ebx*4 + 0x25]
push eax
lea ecx, [esp + 0x170]
push ecx
mov ecx, edi
mov dword [esp + 0x194], edx
mov dword [esp + 0x190], esi
mov byte [esp + 0x198], bl
call fcn.004ed0e0
test ebx, ebx
jle 0x48873d
lea esi, [esp + 0x78c]
call fcn.00467f60
mov ecx, dword [0x587974]
push 0xa3
mov edx, 0x410
push esi
mov word [esi], dx
call fcn.004ed210
add esi, 0xa3
sub ebx, 1
jne 0x488714
lea esi, [esp + 0x8c]
call fcn.004892f0
mov eax, dword [esp + 0x8c]
push eax
call fcn.0051b1c8
add esp, 4
lea esi, [esp + 0x60]
call fcn.00489120
mov ecx, dword [esp + 0x60]
push ecx
call fcn.0051b1c8
add esp, 4
jmp 0x488d5f
push 3
lea edx, [esp + 0x170]
push edx
mov ecx, edi
mov byte [esp + 0x176], 3
call fcn.004ed0e0
lea esi, [esp + 0x8c]
call fcn.004892f0
mov eax, dword [esp + 0x8c]
push eax
call fcn.0051b1c8
add esp, 4
lea esi, [esp + 0x60]
call fcn.00489120
mov ecx, dword [esp + 0x60]
push ecx
call fcn.0051b1c8
add esp, 4
jmp 0x488d5f
cmp dword [0x58799c], 0
je 0x488d5f
push 0
push 0
lea edx, [edi + 0x5ac4]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
jne 0x488d5f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [edi + 0x5ac8], eax
jae 0x488835
mov ecx, dword [edi + 0x582c]
mov edx, dword [edi + 0x70]
add eax, 0x9c40
mov dword [edi + 0x5ac8], eax
mov eax, 0x1b01
mov word [esp + 0x54], ax
push 0xa
lea eax, [esp + 0x58]
mov dword [esp + 0x5a], ecx
mov ecx, dword [0x587968]
push eax
mov dword [esp + 0x62], edx
call fcn.004ed2d0
jmp 0x488d5f
mov edx, dword [edi + 0x5ac0]
mov ecx, 0x2605
push 6
lea eax, [esp + 0x48]
mov word [esp + 0x48], cx
push eax
mov ecx, edi
mov dword [esp + 0x4e], edx
call fcn.004ed0e0
jmp 0x488d5f
lea ebp, [esi + 0x17]
push 0x15
lea edx, [esp + 0x93]
xor ebx, ebx
mov ecx, 0x2603
push ebp
push edx
mov byte [esi + 0x16], bl
mov byte [esi + 0x2b], bl
mov word [esp + 0x98], cx
mov dword [esp + 0x2c], ebp
call fcn.0051b2d0
mov eax, dword [edi + 0x5ac0]
mov dword [esp + 0xb0], eax
mov eax, dword [0x58798c]
add esp, 0xc
cmp eax, 1
jne 0x4888c0
push 0x39
lea ecx, [esp + 0x90]
push ecx
mov ecx, edi
mov byte [esp + 0x96], 6
call fcn.004ed0e0
jmp 0x488d5f
cmp eax, 2
je 0x488d5f
cmp eax, 3
je 0x488d5f
cmp dword [0x58799c], ebx
je 0x488d5f
lea eax, [esi + 2]
mov dword [esp + 0x1c], eax
call fcn.0047a5f0
mov dword [esp + 0x2c], eax
cmp eax, ebx
jne 0x488910
push 0x39
lea edx, [esp + 0x90]
push edx
mov ecx, edi
mov byte [esp + 0x96], 6
call fcn.004ed0e0
jmp 0x488d5f
mov eax, dword [eax + 0x90]
cmp eax, dword [edi + 0x5ac0]
jbe 0x48893c
push 0x39
lea ecx, [esp + 0x90]
push ecx
mov ecx, edi
mov byte [esp + 0x96], 0xa
call fcn.004ed0e0
jmp 0x488d5f
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x488941
sub eax, edx
jne 0x48896a
push 0x39
lea edx, [esp + 0x90]
push edx
mov ecx, edi
mov byte [esp + 0x96], 1
call fcn.004ed0e0
jmp 0x488d5f
push ebx
push 1
lea eax, [edi + 0x5ac4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
je 0x48899c
push 0x39
lea ecx, [esp + 0x90]
push ecx
mov ecx, edi
mov byte [esp + 0x96], 9
call fcn.004ed0e0
jmp 0x488d5f
mov esi, dword [esp + 0x2c]
xor ebp, ebp
add esi, 0x18
cmp dword [esi], ebx
je 0x4889de
mov edx, dword [esp + 0x2c]
cmp byte [edx + ebp + 0x78], bl
je 0x4889de
mov eax, dword [esi]
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, 1
jl 0x4888f2
mov ecx, edx
call fcn.004059b0
cmp eax, ebx
je 0x4888f2
cmp byte [eax + 0x4b], bl
je 0x4888f2
inc ebp
add esi, 4
cmp ebp, 0x18
jl 0x4889a5
mov edx, dword [edi + 0x582c]
mov ecx, dword [edi + 0x70]
mov eax, 0x1b03
mov dword [esp + 0x106], edx
mov word [esp + 0x104], ax
lea eax, [edi + 0x5834]
lea edx, [esp + 0x10a]
mov dword [esp + 0x158], ecx
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x488a20
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x12a]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x488a37
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x13f]
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
cmp cl, bl
jne 0x488a50
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x90]
push 0x58
lea edx, [esp + 0x108]
mov dword [esp + 0x158], ecx
mov ecx, dword [0x587968]
push edx
call fcn.004ed2d0
jmp 0x488d5f
mov eax, 0x2607
mov word [esp + 0x20], ax
mov al, byte [esi + 2]
mov byte [esp + 0x22], al
cmp al, 0xf0
jae 0x488b2b
lea ebx, [edi + 0x624c]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movzx ecx, byte [esi + 2]
cmp byte [edi + ecx*8 + 0x5ace], 0
lea ecx, [edi + ecx*8]
jne 0x488abf
push ebx
jmp 0x488b25
movzx eax, byte [ecx + 0x5acc]
cmp eax, 1
jl 0x488abc
movzx ecx, byte [ecx + 0x5acd]
call fcn.004059b0
mov dword [esp + 0x3c], eax
test eax, eax
je 0x488abc
mov ecx, 1
cmp dword [edi + 0x130c], ecx
mov dword [esp + 0x1c], ecx
jl 0x488b1e
lea edx, [edi + 0x220]
xor ebx, ebx
mov eax, edx
lea ebx, [ebx]
cmp dword [eax], 0
je 0x488b48
inc ebx
add eax, 4
cmp ebx, 0x18
jl 0x488b00
inc ecx
add edx, 0x60
cmp ecx, dword [edi + 0x130c]
mov dword [esp + 0x1c], ecx
jle 0x488af6
lea eax, [edi + 0x624c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 5
lea edx, [esp + 0x24]
push edx
mov ecx, edi
mov byte [esp + 0x2b], 0
mov byte [esp + 0x2c], 0
call fcn.004ed0e0
jmp 0x488d5f
call fcn.004116d0
mov ebp, eax
test ebp, ebp
je 0x488b1e
mov edx, dword [esp + 0x3c]
push 0x58
push ecx
mov dword [ebp + 0x30], edx
call fcn.004e1a50
add esp, 4
push eax
movzx eax, byte [esi + 2]
movzx ecx, byte [edi + eax*8 + 0x5ace]
mov eax, dword [esp + 0x44]
movzx edx, byte [eax + 0x25]
movzx eax, byte [eax + 0x24]
push ecx
push edx
push eax
mov eax, ebp
call fcn.004d21c0
call fcn.00464840
mov dword [ebp + 0x38], eax
mov eax, dword [esp + 0x1c]
lea ecx, [eax + eax*2]
mov dword [ebp + 0x3c], edx
lea edx, [ebx + ecx*8]
mov eax, ebp
mov dword [edi + edx*4 + 0x1c0], ebp
call fcn.004d2470
movzx eax, byte [esi + 2]
mov byte [edi + eax*8 + 0x5ace], 0
lea eax, [edi + 0x624c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movzx eax, byte [esi + 2]
mov edx, dword [edi + 0x582c]
mov dword [esp + 0xca], edx
mov byte [esp + 0xce], al
mov byte [esp + 0xd0], bl
mov ecx, 0xe05
mov word [esp + 0xc8], cx
movzx ecx, byte [esp + 0x1c]
mov byte [esp + 0xcf], cl
mov edx, dword [ebp + 0x30]
mov eax, dword [edx]
mov dword [esp + 0xd9], eax
mov ecx, dword [ebp + 0x38]
mov dword [esp + 0xd1], ecx
mov edx, dword [ebp + 0x3c]
mov dword [esp + 0xd5], edx
movzx eax, byte [ebp + 0x40]
mov byte [esp + 0xdd], al
movzx ecx, byte [ebp + 0x41]
mov byte [esp + 0xde], cl
movzx edx, byte [ebp + 0x42]
mov byte [esp + 0xdf], dl
mov ax, word [ebp + 0x44]
mov word [esp + 0xe0], ax
mov ecx, dword [ebp + 0x64]
mov dword [esp + 0xfd], ecx
movzx edx, byte [ebp + 0x68]
mov byte [esp + 0x101], dl
mov eax, dword [ebp + 0x46]
mov dword [esp + 0xe2], eax
mov cx, word [ebp + 0x4a]
push 0x15
lea edx, [ebp + 0x4c]
push edx
lea eax, [esp + 0xf0]
push eax
mov word [esp + 0xf2], cx
call fcn.0051b2d0
add esp, 0xc
push 0x3a
lea ecx, [esp + 0xcc]
push ecx
mov ecx, dword [0x58796c]
call fcn.004ed2d0
movzx edx, byte [esp + 0x1c]
push 5
lea eax, [esp + 0x24]
mov byte [esp + 0x27], dl
mov byte [esp + 0x28], bl
push eax
mov ecx, edi
call fcn.004ed0e0
lea esi, [esp + 0x20c]
mov byte [esp + 0x299], 0
call fcn.00467f60
mov ecx, 0x411
mov word [esp + 0x20c], cx
mov edx, dword [ebp + 0x38]
mov dword [esp + 0x263], edx
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0x267], eax
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
mov dword [esp + 0x26b], edx
mov eax, dword [ebp + 0x30]
add eax, 4
lea ecx, [esp + 0x26f]
mov dl, byte [eax]
mov byte [ecx], dl
inc eax
inc ecx
test dl, dl
jne 0x488d08
mov al, byte [ebp + 0x42]
mov byte [esp + 0x2ae], al
mov ecx, dword [ebp + 0x46]
mov dword [esp + 0x28f], ecx
mov dx, word [ebp + 0x4a]
push 0xa3
lea ecx, [esp + 0x210]
mov word [esp + 0x297], dx
mov eax, dword [ebp + 0x64]
push ecx
mov ecx, dword [0x587974]
mov dword [esp + 0x29d], eax
call fcn.004ed210
jmp 0x488d5f
push 0
push 9
call fcn.004ec760
mov ecx, dword [esp + 0x16d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x16c0]
xor ecx, esp
call fcn.0051a8be
add esp, 0x16d0
ret