Function at 0x4b74f0
Capabilities:
Contain obfuscated stackstrings
Delete file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x52c8da
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x164
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [esp + 0x44], ecx
lea edi, [esi + 0xc]
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b754d
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b754d
cmp eax, 0x10002
mov dword [esp + 0x10], 0
jne 0x4b7555
mov dword [esp + 0x10], 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4b8b37
mov eax, dword [0x569c90]
mov dword [esp + 0x14], eax
mov ecx, esi
mov dword [esp + 0x174], 0
call fcn.004d3910
test eax, eax
jle 0x4b7598
mov ecx, dword [esp + 0x44]
push esi
call fcn.004b5000
mov esi, eax
jmp 0x4b8f26
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [esi + 0x3a4]
xor eax, eax
and edx, 0x20
mov ecx, edi
cmp dl, 0x20
mov edx, dword [edi]
sete al
mov dword [esp + 0xc], eax
call dword [edx + 0x14]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4b75d7
mov ecx, dword [esp + 0x44]
push esi
call fcn.004b5640
mov esi, eax
jmp 0x4b8f26
lea eax, [esp + 0xc]
mov ecx, esi
push eax
call fcn.004a01d0
mov eax, dword [eax]
mov byte [esp + 0x174], 1
push eax
call fcn.00423110
add esp, 4
lea ecx, [esp + 0xc]
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov byte [esp + 0x174], 0
call fcn.00507d3a
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
and ecx, edx
cmp ecx, 0xffffffff
mov ecx, esi
jne 0x4b766d
lea edx, [esp + 0xc]
push edx
call fcn.004a01d0
mov eax, dword [eax]
lea ecx, [esp + 0x14]
push eax
push 0x1456
push ecx
mov byte [esp + 0x180], 2
call fcn.005054ef
add esp, 0xc
lea ecx, [esp + 0xc]
mov byte [esp + 0x174], 0
call fcn.00507d3a
mov edx, dword [esp + 0x14]
push 1
push 2
push edx
mov ecx, esi
call fcn.004d2190
jmp 0x4b7a6b
lea eax, [esp + 0x18]
push eax
call fcn.004a01d0
mov ecx, esi
mov byte [esp + 0x174], 3
mov dword [esp + 0x68], 0
call fcn.004d46e0
test eax, eax
je 0x4b798d
mov eax, edi
mov dword [esp + 0xc], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esi + 0x30]
mov byte [esp + 0x174], 4
call fcn.00405370
mov ecx, edi
mov dword [esp + 0x10], eax
mov byte [esp + 0x174], 3
mov edx, dword [ecx]
call dword [edx + 0x14]
cmp dword [esp + 0x10], 3
jne 0x4b798d
mov eax, dword [esp + 0x18]
push eax
call fcn.00423930
add esp, 4
test eax, eax
jne 0x4b798d
push 1
push 1
push 0xcd
mov ecx, esi
call fcn.004d2030
mov ecx, dword [esp + 0x44]
lea eax, [ecx + 0x13c]
mov dword [esp + 0x38], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x570e4c]
mov byte [esp + 0x174], 5
test eax, eax
mov ecx, esi
push 1
je 0x4b7a3d
push 1
push str.PGP_ID:
call fcn.004d2190
mov eax, dword [esi + 0x1dc]
push 1
push 1
push eax
mov ecx, esi
call fcn.004d2190
lea edx, [esp + 0x20]
push str.gsPgp_
push edx
call fcn.00423ce0
add esp, 8
mov eax, dword [esp + 0x20]
mov byte [esp + 0x174], 6
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 1
push 1
push 0xcf
mov ecx, esi
call fcn.004d2030
lea ecx, [esp + 0xb4]
call fcn.00506564
mov ecx, dword [esp + 0xbc]
lea eax, [esi + 0x1dc]
push eax
push ecx
lea ecx, [esp + 0xbc]
mov byte [esp + 0x17c], 7
call fcn.005067be
mov ecx, dword [0x570e4c]
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
mov edx, dword [ecx]
push eax
lea eax, [esp + 0xbc]
push eax
call dword [edx + 0x18]
test eax, eax
push 1
je 0x4b783a
push eax
lea ecx, [esp + 0x14]
call fcn.00504ab0
mov eax, dword [eax]
push 1
push 2
push eax
mov ecx, esi
mov byte [esp + 0x180], 8
call fcn.004d2190
lea ecx, [esp + 0xc]
mov byte [esp + 0x174], 7
call fcn.00507d3a
push 1
push 2
push 0xac
mov ecx, esi
call fcn.004d2030
lea ecx, [esp + 0xb4]
mov byte [esp + 0x174], 6
call fcn.00506597
lea ecx, [esp + 0x20]
mov byte [esp + 0x174], 5
call fcn.00507d3a
jmp 0x4b7a49
push 1
push 0x14a
mov ecx, esi
call fcn.004d2030
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.004d4730
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
call fcn.004a5480
push eax
mov ecx, esi
mov byte [esp + 0x178], 9
call fcn.004d4740
lea ecx, [esp + 0xc]
mov byte [esp + 0x174], 7
call fcn.00507d3a
lea edx, [esp + 0x20]
mov ecx, esi
push edx
call fcn.004d46f0
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0xc]
mov byte [esp + 0x174], 0xa
push ecx
lea ecx, [esi + 0x20c]
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 7
mov edx, dword [ecx]
call dword [edx + 0x14]
lea eax, [esp + 0x68]
mov ecx, esi
push eax
call fcn.004a5480
push str..pgp
lea ecx, [esp + 0x58]
push eax
push ecx
mov byte [esp + 0x180], 0xb
call fcn.00507fcf
mov edx, dword [eax]
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
mov dword [esp + 0x10], edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0xc]
lea ecx, [esi + 0x210]
push eax
mov byte [esp + 0x178], 0xd
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0xc
mov edx, dword [ecx]
call dword [edx + 0x14]
lea ecx, [esp + 0x54]
mov byte [esp + 0x174], 0xb
call fcn.00507d3a
lea ecx, [esp + 0x68]
mov byte [esp + 0x174], 7
call fcn.00507d3a
lea ecx, [esp + 0xb4]
mov dword [esp + 0x68], 1
mov byte [esp + 0x174], 6
call fcn.00506597
mov byte [esp + 0x174], 5
lea ecx, [esp + 0x20]
call fcn.00507d3a
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x174], 3
mov eax, dword [ecx]
call dword [eax + 0x14]
lea eax, [esp + 0xc]
mov ecx, esi
push eax
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
call fcn.004a01d0
mov eax, dword [eax]
lea ecx, [esp + 0x6c]
push ecx
push eax
mov byte [esp + 0x17c], 0xe
call fcn.004228f0
add esp, 8
lea ecx, [esp + 0xc]
mov byte [esp + 0x174], 3
call fcn.00507d3a
lea edx, [edi + 8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x1d0]
mov edx, dword [edi]
mov ecx, edi
mov dword [esp + 0xc], eax
call dword [edx + 0x14]
cmp dword [esp + 0xc], 3
jne 0x4b7ada
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004a5480
mov ecx, dword [esp + 0x48]
push esi
call fcn.004c4530
test eax, eax
je 0x4b7a9a
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esi + 0x1d0], 4
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
jmp 0x4b7ada
push 2
push 0xaa
call fcn.004d2030
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x174], 3
mov edx, dword [ecx]
call dword [edx + 0x14]
lea ecx, [esp + 0x18]
mov byte [esp + 0x174], 0
call fcn.00507d3a
lea ecx, [esp + 0x14]
mov dword [esp + 0x174], 0xffffffff
call fcn.00507d3a
mov eax, 0x30003
mov ecx, dword [esp + 0x16c]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x174], 0
call fcn.00507d3a
lea ecx, [esp + 0x14]
mov dword [esp + 0x174], 0xffffffff
call fcn.00507d3a
mov eax, 0x20001
mov ecx, dword [esp + 0x16c]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esp + 0x44]
push 1
lea eax, [esp + 0x24]
push 1
push eax
push esi
mov dword [esp + 0x30], 0
call fcn.004ae770
mov dword [esp + 0x1c], eax
and eax, 0xffff0000
cmp eax, 0x10000
jne 0x4b8c16
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b7b39
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b7b39
cmp eax, 0x10002
mov dword [esp + 0x10], 0
jne 0x4b7b41
mov dword [esp + 0x10], 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4b8b12
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x208]
mov eax, dword [edi]
and ecx, 4
xor edx, edx
cmp cl, 4
mov ecx, edi
sete dl
mov dword [esp + 0xc], edx
call dword [eax + 0x14]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4b7c47
mov ecx, dword [0x569c90]
mov dword [esp + 0x3c], ecx
lea edx, [esp + 0x3c]
mov byte [esp + 0x174], 0xf
push edx
push ecx
mov eax, esp
mov dword [esp + 0x30], esp
push eax
mov ecx, esi
call fcn.004a5480
mov ecx, 0x571fb8
call fcn.00481f80
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
call fcn.004a5480
mov edx, dword [esp + 0x3c]
mov eax, dword [eax]
push edx
push eax
call fcn.004f27d5
add esp, 8
lea ecx, [esp + 0xc]
test eax, eax
setne byte [esp + 0x43]
call fcn.00507d3a
mov al, byte [esp + 0x43]
test al, al
je 0x4b7c36
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0xc]
mov byte [esp + 0x174], 0x10
push ecx
lea ecx, [esi + 0x210]
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0xf
mov edx, dword [ecx]
call dword [edx + 0x14]
push 0
push 0
push 4
mov ecx, esi
call fcn.004d1c70
lea ecx, [esp + 0x3c]
mov byte [esp + 0x174], 3
call fcn.00507d3a
mov eax, dword [0x569c90]
mov dword [esp + 0x24], eax
mov dword [esp + 0x34], eax
lea eax, [esp + 0x24]
lea ecx, [esp + 0x34]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x17c], 0x12
call fcn.004ae740
push eax
push ecx
mov edx, esp
mov dword [esp + 0x38], esp
push edx
mov ecx, esi
call fcn.004a5480
call fcn.0040e680
add esp, 0x10
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x1b8]
mov edx, dword [edi]
mov dword [esp + 0x10], ecx
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
cmp eax, 1
je 0x4b8249
cmp eax, 2
jne 0x4b7dc0
lea ecx, [esp + 0x24]
call fcn.0050825c
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0xb8]
mov edx, dword [edi]
mov dword [esp + 0xc], ecx
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xc]
push eax
push ecx
lea ecx, [esp + 0x68]
call fcn.0040dc00
push 0
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x180], 0x13
call fcn.00507aaf
lea eax, [esp + 0x40]
lea ecx, [esp + 0x68]
push eax
call fcn.0040dde0
lea ecx, [esp + 0xc]
mov byte [esp + 0x174], 0x14
push ecx
mov ecx, esi
call fcn.004a5480
mov edx, dword [esp + 0x38]
mov eax, dword [eax]
push edx
push eax
call fcn.004f27d5
add esp, 8
lea ecx, [esp + 0xc]
test eax, eax
setne byte [esp + 0x43]
call fcn.00507d3a
mov al, byte [esp + 0x43]
test al, al
je 0x4b7d9e
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0xc]
mov byte [esp + 0x174], 0x15
push ecx
lea ecx, [esi + 0x210]
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0x14
mov edx, dword [ecx]
call dword [edx + 0x14]
push 0
push 0
push 4
mov ecx, esi
call fcn.004d1c70
lea ecx, [esp + 0x38]
mov byte [esp + 0x174], 0x13
call fcn.00507d3a
lea ecx, [esp + 0x60]
mov byte [esp + 0x174], 0x12
call fcn.00507d3a
mov ecx, dword [esp + 0x44]
push esi
call fcn.004b0470
mov dword [esp + 0x1c], eax
and eax, 0xffff0000
cmp eax, 0x10000
jne 0x4b8bf4
xor eax, eax
push ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
mov ecx, esi
call fcn.004a01d0
push 0xffffffffffffffff
mov ecx, esi
mov byte [esp + 0x17c], 0x12
call fcn.004b8f60
push eax
call fcn.0049a2d0
add esp, 0xc
mov dword [esp + 0x38], eax
lea ecx, [esp + 0x84]
mov dword [esp + 0x3c], 0
call fcn.0040d100
mov ecx, dword [esp + 0x20]
push 1
mov byte [esp + 0x178], 0x17
call fcn.004e2c20
push 1
lea ecx, [esp + 0x88]
push 1
push ecx
mov ecx, dword [esp + 0x50]
push esi
call fcn.004b9f30
mov ecx, dword [esp + 0x20]
push 2
mov dword [esp + 0x20], eax
call fcn.004e2c20
lea edx, [edi + 8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b7e91
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b7e91
cmp eax, 0x10002
mov dword [esp + 0x10], 0
jne 0x4b7e99
mov dword [esp + 0x10], 1
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4b8257
mov eax, dword [esp + 0x9c]
cmp eax, 0xffffffff
je 0x4b8270
cmp eax, 3
jne 0x4b7fb0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x88]
push ecx
push edx
call fcn.004f27d5
add esp, 8
test eax, eax
je 0x4b7fb0
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0xb8]
mov edx, dword [edi]
mov dword [esp + 0xc], ecx
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xc]
push eax
push ecx
lea ecx, [esp + 0x80]
call fcn.0040dc00
push 0
push ecx
lea edx, [esp + 0x90]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
mov byte [esp + 0x180], 0x18
call fcn.00507aaf
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x80]
push eax
call fcn.0040dde0
mov ecx, dword [esp + 0x54]
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
mov dword [esp + 0x10], ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [esp + 0xc]
lea ecx, [esi + 0x210]
push edx
mov byte [esp + 0x178], 0x1a
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0x19
mov eax, dword [ecx]
call dword [eax + 0x14]
push 0
push 0
push 4
mov ecx, esi
call fcn.004d1c70
lea ecx, [esp + 0x54]
mov byte [esp + 0x174], 0x18
call fcn.00507d3a
lea ecx, [esp + 0x78]
mov byte [esp + 0x174], 0x17
call fcn.00507d3a
mov eax, dword [esp + 0x1c]
cmp eax, 0x30007
je 0x4b81e0
and eax, 0xffff0000
lea ecx, [esp + 0x84]
cmp eax, 0x10000
jne 0x4b83e7
call fcn.0040d760
cmp eax, 1
jne 0x4b8023
push 0
lea ecx, [esp + 0x70]
call fcn.004e9cc5
push eax
lea ecx, [esp + 0x74]
call fcn.004e9c63
push eax
lea ecx, [esp + 0x78]
call fcn.004e9c39
push eax
lea ecx, [esp + 0x7c]
call fcn.004e9c0f
push eax
lea ecx, [esp + 0x80]
call fcn.004e9be5
push eax
lea ecx, [esp + 0x84]
call fcn.004ea00e
cmp dword [esp + 0x68], 1
jne 0x4b80b7
lea ecx, [esp + 0x60]
push ecx
mov ecx, esi
call fcn.004070f0
push str..pgp
lea edx, [esp + 0x84]
push eax
push edx
mov byte [esp + 0x180], 0x1b
call fcn.00507fcf
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0xc]
mov byte [esp + 0x174], 0x1d
push ecx
lea ecx, [esi + 0x20c]
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0x1c
mov edx, dword [ecx]
call dword [edx + 0x14]
lea ecx, [esp + 0x80]
mov byte [esp + 0x174], 0x1b
call fcn.00507d3a
lea ecx, [esp + 0x60]
mov byte [esp + 0x174], 0x17
call fcn.00507d3a
lea eax, [esp + 0x3c]
lea edx, [esp + 0x6c]
push eax
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00417da0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x6c]
push ecx
push edx
push eax
push ecx
lea edx, [esp + 0x58]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.00507aaf
mov ecx, dword [esp + 0x44]
lea eax, [esp + 0xa8]
push eax
push ecx
mov ecx, dword [esp + 0x70]
push esi
call fcn.004b6070
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x68]
cmp eax, 1
jne 0x4b8172
lea edx, [esp + 0x28]
mov ecx, esi
push edx
call fcn.004d4700
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, edi
mov dword [esp + 0x10], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0xc]
mov byte [esp + 0x174], 0x1f
push ecx
lea ecx, [esi + 0x20c]
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0x1e
mov edx, dword [ecx]
call dword [edx + 0x14]
lea ecx, [esp + 0x28]
mov byte [esp + 0x174], 0x17
call fcn.00507d3a
mov eax, dword [esp + 0x1c]
and eax, 0xffff0000
cmp eax, 0x10000
jne 0x4b83f9
cmp dword [esp + 0x3c], 0xffffffff
je 0x4b83f9
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b81c1
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b81c1
cmp eax, 0x10002
mov dword [esp + 0x10], 0
jne 0x4b81c9
mov dword [esp + 0x10], 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4b8257
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x4b8227
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b8210
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b8210
cmp eax, 0x10002
mov dword [esp + 0x10], 0
jne 0x4b8218
mov dword [esp + 0x10], 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4b8257
lea ecx, [esp + 0x84]
mov byte [esp + 0x174], 0x12
call fcn.0040d280
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x4b7e15
jmp 0x4b8284
lea ecx, [esp + 0x24]
call fcn.0050826e
jmp 0x4b7cbf
lea ecx, [esp + 0x84]
mov byte [esp + 0x174], 0x12
call fcn.0040d280
jmp 0x4b8af0
lea ecx, [esp + 0x84]
mov byte [esp + 0x174], 0x12
call fcn.0040d280
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x1d0]
mov edx, dword [edi]
mov dword [esp + 0x28], ecx
mov ecx, edi
call dword [edx + 0x14]
cmp dword [esp + 0x28], 6
jne 0x4b82c1
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esi + 0x1d0], 4
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esi + 0x250], ecx
mov dword [esi + 0x254], edx
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
push 0
push ecx
push edx
mov ecx, esi
call fcn.004a0840
push 0
push 0
push 2
mov ecx, esi
call fcn.004d1c70
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b8336
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b8336
cmp eax, 0x10002
mov dword [esp + 0x10], 0
jne 0x4b833e
mov dword [esp + 0x10], 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x4b8af0
mov ecx, esi
call fcn.004d4480
cmp eax, 8
mov dword [esp + 0x3c], eax
jle 0x4b8369
mov dword [esp + 0x3c], 8
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
sub eax, ecx
mov ecx, dword [esp + 0x4c]
sbb ecx, edx
mov dword [esp + 0x7c], ecx
js 0x4b83a5
jg 0x4b838a
cmp eax, 0x64
jb 0x4b83a5
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x20]
push edx
call fcn.004dfce0
cmp eax, 1
mov dword [esp + 0x10], 1
je 0x4b83ad
mov dword [esp + 0x10], 0
mov eax, edi
mov dword [esp + 0x54], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x208]
mov byte [esp + 0x174], 0x20
and eax, 0x400
cmp eax, 0x400
jne 0x4b8412
mov ecx, 0x571fb8
call fcn.00482de0
mov dword [esp + 0x28], eax
jmp 0x4b841c
mov byte [esp + 0x174], 0x12
call fcn.0040d280
jmp 0x4b8bf4
lea ecx, [esp + 0x84]
mov byte [esp + 0x174], 0x12
call fcn.0040d280
jmp 0x4b8bf4
mov ecx, dword [esi + 0xc4]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x54]
mov byte [esp + 0x174], 0x12
mov edx, dword [ecx]
call dword [edx + 0x14]
mov eax, dword [esp + 0x28]
mov ecx, 0x571fb8
mov dword [esp + 0x1c], eax
call fcn.00481d10
test eax, eax
jne 0x4b84d9
mov ecx, dword [0x569c90]
mov dword [esp + 0x54], ecx
mov eax, edi
mov dword [esp + 0x28], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea edx, [esi + 0x34]
lea ecx, [esp + 0x54]
push edx
mov byte [esp + 0x178], 0x22
call fcn.004d1040
mov ecx, edi
mov byte [esp + 0x174], 0x21
mov eax, dword [ecx]
call dword [eax + 0x14]
xor eax, eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
mov dword [esp + 0xc], eax
push ecx
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x10]
lea eax, [esp + 0x58]
push edx
push eax
add ecx, 0x15c
call fcn.004d13e0
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0xc]
sub eax, edx
cmp eax, 1
mov dword [esp + 0x1c], eax
jge 0x4b84c8
mov dword [esp + 0x1c], 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x174], 0x12
call fcn.00507d3a
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
cmp edx, eax
jge 0x4b8500
mov eax, edx
mov ecx, esi
push eax
mov dword [esp + 0x40], eax
call fcn.004d44b0
push 0
push 0
push 4
mov ecx, esi
call fcn.004d1c70
cmp dword [esp + 0x3c], 1
jle 0x4b85c6
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b85c1
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
call dword [eax + 0x54]
mov dword [esp + 0x1c], eax
and eax, 0xffff0000
cmp eax, 0x10000
jne 0x4b8bf4
mov ecx, dword [esp + 0x20]
call fcn.004dfea0
mov dword [esp + 0x28], eax
mov eax, edi
mov dword [esp + 0x60], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x174], 0x23
push ecx
lea ecx, [esi + 0x34]
call fcn.00461400
mov ecx, edi
mov byte [esp + 0x174], 0x12
mov edx, dword [ecx]
call dword [edx + 0x14]
push 0
push 0
push 4
mov ecx, esi
call fcn.004d1c70
mov ecx, dword [esp + 0x20]
call fcn.004dfea0
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x10], eax
je 0x4b85c1
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x58]
push esi
call fcn.004b6ea0
mov esi, eax
jmp 0x4b8ef3
cmp dword [esp + 0x3c], 1
je 0x4b85de
push 1
mov ecx, esi
call fcn.004d44b0
push 0
push 0
push 4
mov ecx, esi
call fcn.004d1c70
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x4b85f1
mov ecx, dword [esp + 0x20]
push 0
call fcn.004e2bc0
mov ecx, dword [esp + 0x44]
push 0x14
call fcn.004c83a0
push 1
push 2
push 0x20005
mov ecx, esi
call fcn.004d1ed0
test eax, eax
je 0x4b8af0
mov ecx, dword [esp + 0x44]
push 0
push 1
push 0
push esi
call fcn.004b8f90
lea edx, [edi + 8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0xb0]
mov edx, dword [edi]
mov ecx, edi
mov dword [esp + 0xc], eax
call dword [edx + 0x14]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4b8656
cmp eax, 1
je 0x4b8656
cmp eax, 2
je 0x4b8656
cmp eax, 8
jne 0x4b869c
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x4c]
mov edx, dword [edi]
mov dword [esp + 0x28], ecx
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4b8695
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x4c]
mov edx, dword [edi]
mov dword [esp + 0x28], ecx
mov ecx, edi
call dword [edx + 0x14]
cmp dword [esp + 0x28], 1
jne 0x4b869c
mov eax, 1
jmp 0x4b869e
xor eax, eax
test eax, eax
mov dword [esp + 0xc], 1
je 0x4b8732
mov eax, dword [0x5724c4]
test eax, eax
mov dword [esp + 0x10], eax
jle 0x4b8732
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
test edx, edx
jl 0x4b873a
jg 0x4b86cd
test ecx, ecx
jbe 0x4b873a
cdq
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x5c]
cmp edx, eax
jl 0x4b86e6
jg 0x4b86e2
cmp dword [esp + 0x78], ecx
jbe 0x4b86e6
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x10]
push edx
push eax
push ecx
lea eax, [esp + 0x20]
push 0x1475
push eax
call fcn.005054ef
mov ecx, dword [esp + 0x28]
add esp, 0x14
push 1
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004de7c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x58]
cdq
sub ecx, eax
mov eax, dword [esp + 0x5c]
sbb eax, edx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0xc], 0
jmp 0x4b8736
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x4c]
test eax, eax
jl 0x4b8811
jg 0x4b8753
cmp dword [esp + 0x48], 0
jbe 0x4b8811
cmp edx, eax
jl 0x4b8811
jg 0x4b8767
cmp ecx, dword [esp + 0x48]
jb 0x4b8811
push 1
push 1
push 0xf4c0
mov ecx, esi
call fcn.004d2030
lea edx, [edi + 8]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov dword [esi + 0x250], eax
mov dword [esi + 0x254], ecx
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
push 0
push eax
push ecx
mov ecx, esi
call fcn.004a0840
lea ecx, [esp + 0x34]
mov byte [esp + 0x174], 0x11
call fcn.00507d3a
lea ecx, [esp + 0x24]
mov byte [esp + 0x174], 3
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x174], 0
call fcn.00507d3a
lea ecx, [esp + 0x14]
mov dword [esp + 0x174], 0xffffffff
call fcn.00507d3a
mov eax, 0x10001
mov ecx, dword [esp + 0x16c]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esp + 0xc]
push eax
mov eax, dword [esp + 0x3c]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push edx
push ecx
push edx
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push ecx
mov ecx, esi
call fcn.004a01d0
push ecx
mov ecx, esi
mov edx, esp
mov dword [esp + 0x88], esp
push edx
mov byte [esp + 0x1a0], 0x24
call fcn.004a5480
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x19c], 0x12
mov eax, dword [ecx]
call dword [eax + 0x24]
mov dword [esp + 0x1c], eax
sar eax, 0x10
cmp eax, 1
mov dword [esp + 0x10], eax
je 0x4b8888
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esi + 0x1d0], 2
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov ecx, dword [esp + 0x20]
call fcn.004dfc80
mov dword [esp + 0x28], eax
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x28]
mov dword [esi + 0xac], ecx
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
cmp dword [esp + 0x10], 1
jne 0x4b89bb
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x258]
mov edx, dword [esi + 0x25c]
mov eax, dword [edi]
mov dword [esp + 0x48], ecx
mov ecx, edi
mov dword [esp + 0x4c], edx
call dword [eax + 0x14]
lea ecx, [edi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [esi + 0x250]
mov eax, dword [esi + 0x254]
mov dword [esp + 0x28], edx
mov edx, dword [edi]
mov ecx, edi
mov dword [esp + 0x2c], eax
call dword [edx + 0x14]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x28]
cmp ecx, eax
jne 0x4b8921
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x2c]
cmp eax, ecx
je 0x4b89bb
lea edx, [esp + 0x38]
mov ecx, esi
push edx
call fcn.004a01d0
push 0x5c
lea ecx, [esp + 0x3c]
mov byte [esp + 0x178], 0x25
call fcn.00505134
test eax, eax
jl 0x4b8951
inc eax
lea ecx, [esp + 0x38]
push eax
push 0
call fcn.00504bda
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x14]
push eax
push 0x13f3
push ecx
call fcn.005054ef
mov edx, dword [esp + 0x20]
add esp, 0xc
mov ecx, esi
push 1
push 1
push edx
call fcn.004d2190
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [esi + 0x250], ecx
mov dword [esi + 0x254], edx
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
push 0
push 0
push 2
mov ecx, esi
call fcn.004d1c70
lea ecx, [esp + 0x38]
mov byte [esp + 0x174], 0x12
call fcn.00507d3a
lea ecx, [esp + 0xc8]
call fcn.004608a0
mov eax, edi
mov dword [esp + 0x28], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esi + 0x34]
mov byte [esp + 0x174], 0x27
push ecx
lea ecx, [esp + 0xcc]
call fcn.00461150
mov ecx, edi
mov byte [esp + 0x174], 0x26
mov edx, dword [ecx]
call dword [edx + 0x14]
mov ecx, dword [esp + 0x44]
push 1
push 1
push 0
push esi
call fcn.004b8f90
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b8a3e
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b8a3e
cmp eax, 0x10002
mov dword [esp + 0xc], 0
jne 0x4b8a46
mov dword [esp + 0xc], 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4b8b52
lea eax, [esp + 0x12c]
mov dword [esp + 0x60], eax
lea ecx, [esp + 0x138]
mov byte [esp + 0x174], 0x2d
call fcn.00507d3a
lea ecx, [esp + 0x12c]
mov byte [esp + 0x174], 0x2c
call fcn.00507d3a
lea ecx, [esp + 0x128]
mov byte [esp + 0x174], 0x2b
call fcn.00507d3a
lea ecx, [esp + 0x124]
mov byte [esp + 0x174], 0x2a
call fcn.00507d3a
lea ecx, [esp + 0x120]
mov byte [esp + 0x174], 0x29
call fcn.00507d3a
lea ecx, [esp + 0x104]
mov byte [esp + 0x174], 0x28
call fcn.00404e10
lea ecx, [esp + 0xcc]
mov byte [esp + 0x174], 0x12
call fcn.00404d90
lea ecx, [esp + 0x34]
mov byte [esp + 0x174], 0x11
call fcn.00507d3a
lea ecx, [esp + 0x24]
mov byte [esp + 0x174], 3
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x174], 0
call fcn.00507d3a
lea ecx, [esp + 0x14]
mov dword [esp + 0x174], 0xffffffff
call fcn.00507d3a
mov eax, 0x30004
mov ecx, dword [esp + 0x16c]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
cmp dword [esp + 0x10], 1
je 0x4b8c55
lea ecx, [esp + 0x12c]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x138]
mov byte [esp + 0x174], 0x33
call fcn.00507d3a
lea ecx, [esp + 0x12c]
mov byte [esp + 0x174], 0x32
call fcn.00507d3a
lea ecx, [esp + 0x128]
mov byte [esp + 0x174], 0x31
call fcn.00507d3a
lea ecx, [esp + 0x124]
mov byte [esp + 0x174], 0x30
call fcn.00507d3a
lea ecx, [esp + 0x120]
mov byte [esp + 0x174], 0x2f
call fcn.00507d3a
lea ecx, [esp + 0x104]
mov byte [esp + 0x174], 0x2e
call fcn.00404e10
lea ecx, [esp + 0xcc]
mov byte [esp + 0x174], 0x12
call fcn.00404d90
lea ecx, [esp + 0x34]
mov byte [esp + 0x174], 0x11
call fcn.00507d3a
lea ecx, [esp + 0x24]
mov byte [esp + 0x174], 3
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x174], 0
call fcn.00507d3a
lea ecx, [esp + 0x14]
mov dword [esp + 0x174], 0xffffffff
call fcn.00507d3a
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x16c]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x572508]
test eax, eax
je 0x4b8c68
mov ecx, dword [esp + 0x44]
push esi
call fcn.004ca5d0
mov ecx, esi
call fcn.004d46e0
test eax, eax
je 0x4b8cd8
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4b8cd8
lea edx, [esp + 0x28]
mov ecx, esi
push edx
call fcn.004a01d0
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [esp + 0x28]
call fcn.00507d3a
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
mov eax, edi
mov dword [esp + 0x60], eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x174], 0x3a
push ecx
lea ecx, [esi + 0x20c]
call fcn.00507ec3
mov ecx, edi
mov byte [esp + 0x174], 0x26
mov edx, dword [ecx]
call dword [edx + 0x14]
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [esi + 0x208]
mov eax, dword [edi]
and ecx, 0x10
xor edx, edx
cmp cl, 0x10
mov ecx, edi
sete dl
mov dword [esp + 0x28], edx
call dword [eax + 0x14]
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4b8dca
mov ecx, esi
call fcn.004d3840
test eax, eax
jne 0x4b8dca
lea ecx, [esp + 0x28]
push ecx
mov ecx, esi
call fcn.004a01d0
mov eax, dword [eax]
mov byte [esp + 0x174], 0x3b
push eax
call fcn.00422fd0
add esp, 4
lea ecx, [esp + 0x28]
mov edi, eax
mov byte [esp + 0x174], 0x26
call fcn.00507d3a
test edi, edi
je 0x4b8d56
mov esi, 0x10001
jmp 0x4b8dce
mov edx, dword [0x569c90]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x28]
mov ecx, esi
push eax
mov byte [esp + 0x178], 0x3c
call fcn.004a01d0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
push 0xe1b3
push edx
mov byte [esp + 0x180], 0x3d
call fcn.005054ef
add esp, 0xc
lea ecx, [esp + 0x28]
mov byte [esp + 0x174], 0x3c
call fcn.00507d3a
mov eax, dword [esp + 0x10]
push 1
push 2
push eax
mov ecx, esi
call fcn.004d2190
lea ecx, [esp + 0x10]
mov esi, 0x30003
mov byte [esp + 0x174], 0x26
call fcn.00507d3a
jmp 0x4b8dce
mov esi, dword [esp + 0x1c]
lea ecx, [esp + 0x12c]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x138]
mov byte [esp + 0x174], 0x43
call fcn.00507d3a
lea ecx, [esp + 0x12c]
mov byte [esp + 0x174], 0x42
call fcn.00507d3a
lea ecx, [esp + 0x128]
mov byte [esp + 0x174], 0x41
call fcn.00507d3a
lea ecx, [esp + 0x124]
mov byte [esp + 0x174], 0x40
call fcn.00507d3a
lea ecx, [esp + 0x120]
mov byte [esp + 0x174], 0x3f
call fcn.00507d3a
lea edx, [esp + 0x104]
mov dword [esp + 0x60], edx
lea ecx, [esp + 0x110]
mov byte [esp + 0x174], 0x45
call fcn.00507d3a
lea ecx, [esp + 0x10c]
mov byte [esp + 0x174], 0x44
call fcn.00507d3a
lea ecx, [esp + 0x108]
mov byte [esp + 0x174], 0x3e
call fcn.00507d3a
lea eax, [esp + 0xcc]
mov dword [esp + 0x60], eax
lea ecx, [esp + 0xf0]
mov byte [esp + 0x174], 0x49
call fcn.00506597
lea ecx, [esp + 0xec]
mov byte [esp + 0x174], 0x48
call fcn.00507d3a
lea ecx, [esp + 0xdc]
mov byte [esp + 0x174], 0x47
call fcn.00507d3a
lea ecx, [esp + 0xd8]
mov byte [esp + 0x174], 0x46
call fcn.00507d3a
lea ecx, [esp + 0xd4]
mov byte [esp + 0x174], 0x12
call fcn.00507d3a
lea ecx, [esp + 0x34]
mov byte [esp + 0x174], 0x11
call fcn.00507d3a
lea ecx, [esp + 0x24]
mov byte [esp + 0x174], 3
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x174], 0
call fcn.00507d3a
lea ecx, [esp + 0x14]
mov dword [esp + 0x174], 0xffffffff
call fcn.00507d3a
mov ecx, dword [esp + 0x16c]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 4