Function at 0x486450
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d21db
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2e8
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0xb4]
call fcn.0046ceb0
xor ebx, ebx
lea ecx, [esp + 0x10c]
mov dword [esp + 0x300], ebx
call fcn.0046ceb0
lea ecx, [esp + 0xe0]
mov byte [esp + 0x300], 1
call fcn.0046ceb0
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x68]
mov byte [esp + 0x304], 2
mov byte [esp + 0x68], al
call fcn.00406ad6
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov ecx, dword [edi + 4]
mov byte [esp + 0x300], 3
mov eax, dword [ecx + 8]
cmp eax, 4
jne 0x4864f3
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x304], 2
call fcn.00406ad6
jmp 0x487178
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xbc]
test eax, eax
jne 0x486588
push str.ERROR:_CNetCfgInterfaceComponentWinNT4::TeamUpdateParameters____Parent_is_not_a_team._n
push 0x503ff0
call fcn.00423100
mov eax, dword [esp + 0x7c]
add esp, 8
cmp eax, ebx
mov byte [esp + 0x300], 2
je 0x486534
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x74], ebx
push 1
lea ecx, [esp + 0x68]
call fcn.00406ad6
lea ecx, [esp + 0xe0]
mov byte [esp + 0x300], 1
call fcn.0046cf30
lea ecx, [esp + 0x10c]
mov byte [esp + 0x300], 0
call fcn.0046cf30
lea ecx, [esp + 0xb4]
mov dword [esp + 0x300], 0xffffffff
call fcn.0046cf30
mov eax, 0x80004005
jmp 0x4871b9
mov ebp, dword [edi + 4]
push 1
mov ecx, ebp
call fcn.00432ab0
test eax, eax
ja 0x486ae5
lea eax, [esp + 0x4c]
mov ecx, ebp
push eax
call fcn.004491a0
mov eax, dword [eax + 4]
mov byte [esp + 0x300], 4
cmp eax, ebx
jne 0x4865bc
mov eax, 0x4d68e8
push eax
lea ecx, [esp + 0x68]
push 0xce4
push ecx
call fcn.0041c3cf
mov eax, dword [esp + 0x68]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x300], 3
je 0x4865ec
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x5c], ebx
push 1
lea ecx, [esp + 0x50]
call fcn.00406ad6
lea edx, [esp + 0x64]
push 1
push edx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0xc0]
call fcn.0046d070
test eax, eax
je 0x486ae5
mov eax, dword [ebp]
mov ecx, ebp
mov esi, 1
call dword [eax + 0x14]
test eax, eax
je 0x48662d
mov esi, 3
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0x1c49
lea ecx, [esp + 0xc0]
call fcn.0046dab0
push esi
push 0x1c49
lea ecx, [esp + 0xbc]
call fcn.0046e640
mov eax, dword [ebp + 0xb8]
lea ecx, [esp + 0xb4]
push eax
push 0x1c4c
call fcn.0046e640
lea edx, [esp + 0xb0]
push ebx
push edx
push 0x14b5
lea ecx, [esp + 0xc0]
call fcn.0046dab0
mov ecx, ebp
call fcn.00435aa0
push eax
push 0x14b5
lea ecx, [esp + 0xbc]
call fcn.0046e640
mov ecx, ebp
call fcn.00435aa0
cmp dword [esp + 0xb0], eax
je 0x4867e0
mov al, byte [esp + 0x13]
xor esi, esi
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x38], al
call fcn.00406ad6
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov edx, dword [ebp]
lea eax, [esp + 0x80]
push eax
mov ecx, ebp
mov byte [esp + 0x304], 5
call dword [edx + 0x9c]
mov eax, dword [eax + 4]
mov bl, 6
cmp eax, esi
mov byte [esp + 0x300], bl
mov esi, 0x4d68e8
je 0x486703
mov esi, eax
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebp
call fcn.00428170
mov eax, dword [eax + 4]
mov byte [esp + 0x300], 7
test eax, eax
jne 0x486723
mov eax, 0x4d68e8
push esi
push eax
lea edx, [esp + 0x3c]
push str.__s___s
push edx
call fcn.00430ae0
mov eax, dword [esp + 0x6c]
add esp, 0x10
test eax, eax
mov byte [esp + 0x300], bl
je 0x486757
push eax
call fcn.004be17b
add esp, 4
xor esi, esi
mov dword [esp + 0x5c], esi
jmp 0x486759
xor esi, esi
push 1
lea ecx, [esp + 0x50]
call fcn.00406ad6
mov eax, dword [esp + 0x90]
mov byte [esp + 0x300], 5
cmp eax, esi
je 0x486787
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x90], esi
push 1
lea ecx, [esp + 0x84]
call fcn.00406ad6
push esi
lea eax, [esp + 0x38]
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.0040907d
push 0x1398
lea ecx, [edi + 0x60]
call fcn.0046e800
mov eax, dword [esp + 0x44]
mov byte [esp + 0x300], 3
cmp eax, esi
je 0x4867d3
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x44], esi
push 1
lea ecx, [esp + 0x38]
call fcn.00406ad6
xor ebx, ebx
lea ecx, [esp + 0x7c]
push ebx
push ecx
push 0x1c55
lea ecx, [esp + 0xc0]
call fcn.0046dab0
mov ecx, dword [ebp + 0x1a0]
cmp ecx, ebx
jne 0x486805
xor eax, eax
jmp 0x486810
mov eax, dword [ebp + 0x1a4]
sub eax, ecx
sar eax, 2
push eax
push 0x1c55
lea ecx, [esp + 0xbc]
call fcn.0046e640
mov eax, dword [ebp + 0x1ac]
lea ecx, [esp + 0xb4]
push eax
push 0x48
call fcn.0046e640
mov eax, dword [ebp + 0x1a0]
cmp eax, ebx
je 0x486851
mov edx, dword [ebp + 0x1a4]
sub edx, eax
test edx, 0xfffffffc
jne 0x486864
push 0xbeb
lea ecx, [esp + 0xb8]
call fcn.0046f4f0
jmp 0x486887
push ebx
mov ecx, ebp
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00437390
push 0xbeb
lea ecx, [esp + 0xd4]
call fcn.0046e800
lea ecx, [esp + 0x1c]
call fcn.0044fe80
push 1
mov byte [esp + 0x304], 8
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push 1
push 0xffffffffffffffff
call fcn.00428ea0
lea ecx, [esp + 0x188]
call fcn.0046fae0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x300], 9
push ecx
lea ecx, [esp + 0x170]
call fcn.00470410
test byte [esp + 0x18], 2
jne 0x486904
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x14]
test eax, eax
je 0x4868fd
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ebx
push ecx
mov ecx, edi
call dword [eax + 0x38]
mov eax, dword [esp + 0x24]
cmp eax, ebx
jne 0x486950
xor esi, esi
jmp 0x486959
test byte [esp + 0x18], 2
je 0x4868f1
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x14]
test eax, eax
jne 0x4868f1
xor esi, esi
mov eax, dword [esp + 0x24]
cmp eax, ebx
jne 0x48691e
xor ecx, ecx
jmp 0x486927
mov ecx, dword [esp + 0x28]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jge 0x4868f5
sub esp, 0x18
lea ecx, [esp + 0x34]
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
push esi
call fcn.0049cec0
mov ecx, eax
call fcn.00454da0
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x2c]
inc esi
jmp 0x486912
mov esi, dword [esp + 0x28]
sub esi, eax
sar esi, 2
dec esi
cmp esi, ebx
jl 0x4869d5
test esi, esi
jl 0x486992
test eax, eax
je 0x486992
mov ecx, dword [esp + 0x28]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jae 0x486992
lea ecx, [esp + 0x20]
call fcn.00456230
cmp eax, esi
ja 0x486989
lea ecx, [esp + 0x20]
call fcn.00437b80
mov eax, dword [esp + 0x24]
mov edi, dword [eax + esi*4]
jmp 0x486998
mov edi, dword [pe_dos_header]
test esi, esi
jl 0x4869c2
test eax, eax
je 0x4869c2
mov edx, dword [esp + 0x28]
sub edx, eax
sar edx, 2
cmp esi, edx
jae 0x4869c2
test esi, esi
je 0x4869b4
lea eax, [eax + esi*4]
push eax
lea ecx, [esp + 0x24]
call fcn.0042bbd0
mov eax, dword [esp + 0x24]
test edi, edi
je 0x4869d2
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
mov eax, dword [esp + 0x24]
dec esi
jns 0x48695e
mov eax, dword [esp + 0x7c]
test eax, eax
jne 0x486abe
mov eax, dword [ebp + 0x1a0]
test eax, eax
je 0x486abe
mov ecx, dword [ebp + 0x1a4]
sub ecx, eax
sar ecx, 2
je 0x486abe
lea ecx, [esp + 0x138]
call fcn.004b3280
lea edx, [esp + 0x4c]
mov ecx, ebp
push edx
mov byte [esp + 0x304], 0xa
call fcn.004090fe
mov esi, eax
lea eax, [esp + 0x80]
mov bl, 0xb
push eax
mov ecx, ebp
mov byte [esp + 0x304], bl
call fcn.004491a0
push esi
push eax
lea ecx, [esp + 0x140]
mov byte [esp + 0x308], 0xc
call fcn.004b6290
mov eax, dword [esp + 0x90]
xor esi, esi
cmp eax, esi
mov byte [esp + 0x300], bl
je 0x486a74
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x90], esi
push 1
lea ecx, [esp + 0x84]
call fcn.00406ad6
mov eax, dword [esp + 0x5c]
mov byte [esp + 0x300], 0xa
cmp eax, esi
je 0x486a9f
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x5c], esi
push 1
lea ecx, [esp + 0x50]
call fcn.00406ad6
lea ecx, [esp + 0x138]
mov byte [esp + 0x300], 9
call fcn.004b32d0
lea ecx, [esp + 0x16c]
mov byte [esp + 0x300], 8
call fcn.0046fbd0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x300], 3
call fcn.0044fec0
xor ebx, ebx
lea ecx, [esp + 0x80]
push ecx
mov ecx, ebp
call fcn.00428170
mov eax, dword [eax + 4]
mov byte [esp + 0x300], 0xd
cmp eax, ebx
jne 0x486b08
mov eax, 0x4d68e8
push eax
call fcn.004c05bf
add esp, 4
lea edx, [esp + 0x64]
push eax
push 0x62
push edx
call fcn.0041c3cf
mov eax, dword [esp + 0x9c]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x300], 3
je 0x486b44
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x90], ebx
push 1
lea ecx, [esp + 0x84]
call fcn.00406ad6
lea eax, [esp + 0x64]
push 1
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0xc0]
call fcn.0046d070
test eax, eax
je 0x486c39
mov cl, byte [esp + 0x13]
xor esi, esi
mov byte [esp + 0x34], cl
push esi
lea ecx, [esp + 0x38]
call fcn.00406ad6
mov edi, str.Description
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x304], 0xe
mov ebx, ecx
lea ecx, [esp + 0x38]
push ebx
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
call fcn.00406a51
test al, al
je 0x486bdc
mov edi, dword [esp + 0x38]
mov ecx, ebx
mov edx, ecx
mov esi, str.Description
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x38]
call fcn.0042bb00
xor esi, esi
push esi
mov ecx, ebp
mov byte [esp + 0x304], 0xf
call fcn.00435aa0
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
push ecx
mov ecx, ebp
call fcn.00437590
lea edx, [esp + 0x50]
lea ecx, [esp + 0xd0]
push edx
call fcn.0046e6e0
mov eax, dword [esp + 0x44]
mov byte [esp + 0x300], 3
cmp eax, esi
je 0x486c2c
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x44], esi
push 1
lea ecx, [esp + 0x38]
call fcn.00406ad6
xor ebx, ebx
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x9c]
mov byte [esp + 0x9c], al
call fcn.00406ad6
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
xor esi, esi
mov byte [esp + 0x300], 0x10
mov dword [esp + 0x18], esi
mov eax, dword [ebp + 0x1a0]
cmp eax, ebx
je 0x4870de
mov ecx, dword [ebp + 0x1a4]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jae 0x4870de
cmp esi, ebx
jl 0x486cb8
mov eax, dword [ebp + 0x1a0]
lea ecx, [ebp + 0x19c]
cmp eax, ebx
je 0x486cb8
mov edx, dword [ecx + 8]
sub edx, eax
sar edx, 2
cmp esi, edx
jae 0x486cb8
push esi
call fcn.00410c04
mov edi, dword [eax]
jmp 0x486cbe
mov edi, dword [pe_dos_header]
lea eax, [esp + 0x80]
mov ecx, edi
push eax
call fcn.004491a0
mov eax, dword [eax + 4]
xor ebx, ebx
cmp eax, ebx
mov byte [esp + 0x300], 0x11
jne 0x486ce3
mov eax, 0x4d68e8
push eax
lea ecx, [esp + 0x9c]
push 0xce4
push ecx
call fcn.0041c3cf
mov eax, dword [esp + 0x9c]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x300], 0x10
je 0x486d1c
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x90], ebx
push 1
lea ecx, [esp + 0x84]
call fcn.00406ad6
lea edx, [esp + 0x98]
push 1
push edx
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [esp + 0x118]
call fcn.0046d070
test eax, eax
je 0x4870d2
mov ecx, ebp
call fcn.00437290
test al, al
je 0x486d99
push edi
mov ecx, ebp
call fcn.00434be0
test eax, eax
je 0x486d71
push ebx
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x30], esp
push eax
jmp 0x486da4
push str.CNetCfgInterfaceComponentWinNT4::TeamUpdateParameters__:_For_the_RLB_Team_preserve_the_member_adapter__non_primary_s_Network_Address_Setting.
push 0x503ff0
call fcn.00423100
add esp, 8
push ebx
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x503a34
call fcn.00405d20
jmp 0x486dab
push ebx
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x30], esp
push ecx
mov ecx, ebp
call fcn.00437390
push 0xbeb
lea ecx, [esp + 0x12c]
call fcn.0046e800
push ebx
push 1
push 0x6a
lea ecx, [esp + 0x118]
call fcn.004a8f80
push eax
lea ecx, [esp + 0xf0]
call fcn.0046d810
test eax, eax
je 0x4870d2
mov ecx, ebp
call fcn.00435aa0
push eax
push 0x14b5
lea ecx, [esp + 0xe8]
call fcn.0046e640
mov eax, dword [ebp + 0xb8]
lea ecx, [esp + 0xe0]
push eax
push 0x1c4c
call fcn.0046e640
mov ecx, dword [ebp + 0x1a0]
cmp ecx, ebx
jne 0x486e21
xor eax, eax
jmp 0x486e2c
mov eax, dword [ebp + 0x1a4]
sub eax, ecx
sar eax, 2
push eax
push 0x1c55
lea ecx, [esp + 0xe8]
call fcn.0046e640
push edi
mov ecx, ebp
xor esi, esi
call fcn.00434be0
test eax, eax
je 0x486e53
mov esi, 1
jmp 0x486e64
push edi
mov ecx, ebp
call fcn.00434c00
test eax, eax
je 0x486e64
mov esi, 2
push esi
push 0x49
lea ecx, [esp + 0xe8]
call fcn.0046e640
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x10]
push eax
push 0x1c56
lea ecx, [esp + 0xe8]
call fcn.0046e640
mov ecx, dword [esp + 0x18]
push ebx
sub esp, 0x18
mov eax, esp
mov dword [esp + 0x30], esp
push eax
push ecx
mov ecx, ebp
call fcn.00422c47
mov ecx, eax
call fcn.00409062
push 0x1c86
lea ecx, [esp + 0x100]
call fcn.0046e800
push 1
mov ecx, ebp
call fcn.00432ab0
test eax, eax
ja 0x4870b8
mov dl, byte [esp + 0x13]
mov dword [esp + 0x24], ebx
mov byte [esp + 0x20], dl
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], vtable.ISOArray_class_ISOString_.0
mov al, byte [esp + 0x13]
push ebx
lea ecx, [esp + 0x38]
mov byte [esp + 0x304], 0x12
mov byte [esp + 0x38], al
call fcn.00406ad6
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x300], 0x13
push ecx
mov ecx, ebp
call fcn.004491a0
mov edx, dword [0x4d68ec]
lea ecx, [esp + 0x34]
push edx
push ebx
push eax
mov byte [esp + 0x30c], 0x14
call fcn.0040b3b2
mov eax, dword [esp + 0x5c]
mov byte [esp + 0x300], 0x13
cmp eax, ebx
je 0x486f55
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x5c], ebx
mov ecx, dword [esp + 0x50]
cmp ecx, ebx
je 0x486f78
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x486f6f
cmp al, 0xff
je 0x486f6f
dec al
mov byte [ecx], al
jmp 0x486f78
push ecx
call fcn.004be17b
add esp, 4
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x34]
push eax
push 1
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call fcn.00437c60
lea edx, [esp + 0x1c]
lea ecx, [esp + 0xe0]
push edx
push 0xcd
call fcn.0046ec20
mov eax, dword [esp + 0x24]
cmp eax, ebx
jne 0x486fbb
xor edx, edx
jmp 0x486fd2
mov ecx, dword [esp + 0x28]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
push 0xce
lea ecx, [esp + 0xe8]
call fcn.0046e640
push 0x1be8
lea ecx, [esp + 0xe4]
call fcn.0046f4f0
mov eax, dword [esp + 0x44]
cmp eax, ebx
je 0x48700a
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x44], ebx
mov ecx, dword [esp + 0x38]
cmp ecx, ebx
je 0x48702d
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x487024
cmp al, 0xff
je 0x487024
dec al
mov byte [ecx], al
jmp 0x48702d
push ecx
call fcn.004be17b
add esp, 4
xor eax, eax
mov dword [esp + 0x1c], vtable.ISOArray_class_ISOString_.0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
cmp esi, eax
mov byte [esp + 0x300], 0x15
mov ebx, esi
mov edi, eax
je 0x48706b
push 0
mov ecx, esi
call fcn.004472e0
add esi, 0x18
cmp esi, edi
jne 0x48705b
lea esi, [esp + 0x1c]
lea ecx, [esp + 0x20]
neg esi
sbb esi, esi
mov dword [esp + 0x28], ebx
and esi, ecx
mov byte [esp + 0x300], 0x10
mov dword [esp + 0x7c], esi
mov ebx, dword [esi + 8]
mov edi, dword [esi + 4]
cmp edi, ebx
je 0x4870a1
mov ecx, edi
call fcn.00405d6e
add edi, 0x18
cmp edi, ebx
jne 0x487093
mov edx, dword [esi + 4]
push edx
call fcn.004be17b
add esp, 4
xor eax, eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
push 0xc350
push 0x1ccc
lea ecx, [esp + 0xe8]
call fcn.0046e640
mov esi, dword [esp + 0x18]
inc esi
xor ebx, ebx
mov dword [esp + 0x18], esi
jmp 0x486c6d
mov eax, dword [esp + 0xa8]
cmp eax, ebx
je 0x4870f9
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0xa8], ebx
mov ecx, dword [esp + 0x9c]
cmp ecx, ebx
je 0x48711f
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x487116
cmp al, 0xff
je 0x487116
dec al
mov byte [ecx], al
jmp 0x48711f
push ecx
call fcn.004be17b
add esp, 4
mov eax, dword [esp + 0x74]
mov dword [esp + 0x9c], ebx
cmp eax, ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
je 0x487149
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x74], ebx
mov ecx, dword [esp + 0x68]
cmp ecx, ebx
je 0x48716c
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x487163
cmp al, 0xff
je 0x487163
dec al
mov byte [ecx], al
jmp 0x48716c
push ecx
call fcn.004be17b
add esp, 4
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
lea ecx, [esp + 0xe0]
mov byte [esp + 0x300], 1
call fcn.0046cf30
lea ecx, [esp + 0x10c]
mov byte [esp + 0x300], 0
call fcn.0046cf30
lea ecx, [esp + 0xb4]
mov dword [esp + 0x300], 0xffffffff
call fcn.0046cf30
xor eax, eax
mov ecx, dword [esp + 0x2f8]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2f4
ret