Function at 0x4b3000
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fc135
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x68da90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x268]
mov dword [ebp - 4], 2
call fcn.0048ed50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0
call fcn.004058d0
mov dword [ebp - 0x244], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x228]
push 7
push str.product
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 5
call fcn.004911d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x230]
mov edx, dword [eax]
call fcn.004ab400
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x244]
mov esi, dword [eax]
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004180f0
cmp byte [esi], 0
mov edi, dword [ebp - 0x23c]
jne 0x4b30ee
xor ecx, ecx
jmp 0x4b30fc
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b30f3
sub ecx, edx
push ecx
push esi
lea ecx, [edi + 0x28]
call fcn.004052c0
mov byte [ebp - 4], 6
or ebx, 0xffffffff
mov edx, dword [ebp - 0x230]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b312a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov eax, ebx
mov edx, dword [ebp - 0x22c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b314b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b316d
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push ecx
mov edx, 0x663f78
lea ecx, [ebp - 0x230]
call fcn.0049d470
add esp, 4
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edx, dword [ebp - 0x230]
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4b31a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 2
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
push 0x663f90
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
test esi, esi
je 0x4b31ff
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x244]
call fcn.004180f0
push 2
push 0x663f8c
jmp 0x4b3223
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x244]
call fcn.004180f0
push 2
push 0x663f98
mov ecx, dword [ebp - 0x23c]
add ecx, 0x28
call fcn.004052c0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b3253
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push 3
push 0x663f94
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x230]
mov edx, dword [ebp + 8]
call fcn.004ab400
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x244]
mov esi, dword [eax]
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004180f0
cmp byte [esi], 0
mov edi, dword [ebp - 0x23c]
jne 0x4b32c0
xor ecx, ecx
jmp 0x4b32ce
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b32c5
sub ecx, edx
push ecx
push esi
lea ecx, [edi + 0x28]
call fcn.004052c0
mov byte [ebp - 4], 0xa
mov eax, ebx
mov edx, dword [ebp - 0x230]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b32f9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b331b
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push 2
push 0x661ba4
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x244]
call fcn.004180f0
mov ecx, dword [ebp - 0x23c]
push 7
push str.windows
add ecx, 0x28
call fcn.004052c0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b339c
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0
call fcn.0042ac80
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x228]
push 4
push str.time
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x254]
call fcn.004b7130
mov esi, dword [ebp - 0x23c]
xor ecx, ecx
call fcn.00491fe0
mov dword [esi + 0x28], eax
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b343b
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push 4
push str.lang
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x244]
call fcn.004180f0
mov ecx, dword [ebp - 0x23c]
push 2
push 0x663fb4
add ecx, 0x28
call fcn.004052c0
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b34bc
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push 5
push str.event
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x244]
call fcn.004180f0
mov ecx, dword [ebp - 0x23c]
push 9
push str.uninstall
add ecx, 0x28
call fcn.004052c0
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b353d
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push 0x200
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.005c1b40
add esp, 0xc
lea ecx, [ebp - 0x210]
call fcn.00492e50
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00404020
mov byte [ebp - 4], 0x11
mov ecx, 0x658bf4
mov eax, dword [ebp - 0x25c]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b35a6
test dx, dx
je 0x4b35a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b35a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3580
xor eax, eax
jmp 0x4b35ab
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x4b35f9
mov eax, dword [0x6ad390]
test eax, eax
jne 0x4b35e4
call fcn.004a4d40
mov esi, dword [0x6ac8ec]
call fcn.004a4d40
xor ecx, ecx
lea eax, [esi + esi*4]
cmp dword [0x6ac8e8], ecx
setne cl
inc ecx
lea eax, [ecx + eax*2]
mov dword [0x6ad390], eax
push eax
lea eax, [ebp - 0x25c]
push 0x6592d4
push eax
call fcn.00409f70
add esp, 0xc
push 7
push str.edition
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
lea edx, [ebp - 0x210]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x230]
call fcn.004ab400
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x244]
mov esi, dword [eax]
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004180f0
cmp byte [esi], 0
mov edi, dword [ebp - 0x23c]
jne 0x4b3669
xor ecx, ecx
jmp 0x4b3679
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b3670
sub ecx, edx
push ecx
push esi
lea ecx, [edi + 0x28]
call fcn.004052c0
mov byte [ebp - 4], 0x12
mov eax, ebx
mov edx, dword [ebp - 0x230]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b36a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b36c6
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
push 7
push str.message
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], 0xf
mov dword [ebp - 0x218], 0
mov byte [ebp - 0x228], 0
call fcn.004052c0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x230]
mov edx, dword [ebp + 0x10]
call fcn.004ab400
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x244]
mov esi, dword [eax]
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004180f0
cmp byte [esi], 0
mov edi, dword [ebp - 0x23c]
jne 0x4b3733
xor ecx, ecx
jmp 0x4b3741
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b3738
sub ecx, edx
push ecx
push esi
lea ecx, [edi + 0x28]
call fcn.004052c0
mov byte [ebp - 4], 0x14
mov eax, ebx
mov edx, dword [ebp - 0x230]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b376c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x214]
cmp eax, 0x10
jb 0x4b378e
inc eax
lea ecx, [ebp - 0x228]
push eax
push dword [ebp - 0x228]
call fcn.00405210
call fcn.004039e0
mov ecx, eax
test ecx, ecx
jne 0x4b37a3
push 0x80004005
call fcn.00404200
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x248], eax
push ecx
mov edx, 0x663f78
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x230]
call fcn.0049d470
add esp, 4
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edx, dword [ebp - 0x230]
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4b37f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea eax, [ebp - 0x248]
push eax
push 1
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
test esi, esi
je 0x4b383c
cmp dword [ecx + 0x14], 0x10
jb 0x4b3831
mov eax, dword [ecx]
push 0x20
push str.QDT5upehX3RZRTh3MB6uWDsaHX5AGCw7
jmp 0x4b384f
push 0x20
mov eax, ecx
push str.QDT5upehX3RZRTh3MB6uWDsaHX5AGCw7
jmp 0x4b384f
cmp dword [ecx + 0x14], 0x10
jb 0x4b3846
mov eax, dword [ecx]
jmp 0x4b3848
mov eax, ecx
push 0x20
push str.WSj2GyeFFsTTZeRKy_A4TX61_rM
mov byte [eax], 0
call fcn.004052c0
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x244]
call fcn.00492640
add esp, 0x24
lea ecx, [ebp - 0x230]
push 0x659d9c
call fcn.00404020
mov byte [ebp - 4], 0x17
call fcn.004039e0
mov ecx, eax
test ecx, ecx
jne 0x4b3894
push 0x80004005
call fcn.00404200
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 0x18
call fcn.004039e0
mov ecx, eax
test ecx, ecx
jne 0x4b38bb
push 0x80004005
call fcn.00404200
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0x19
call fcn.0040b8a0
lea ecx, [ebp - 0x22c]
push ecx
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x230]
push ecx
lea edx, [eax + 0x2f8]
lea ecx, [ebp - 0x264]
call fcn.0040b490
add esp, 0xc
mov byte [ebp - 4], 0x1b
mov eax, ebx
mov edx, dword [ebp - 0x234]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b391c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov eax, ebx
mov edx, dword [ebp - 0x22c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b393d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov eax, ebx
mov edx, dword [ebp - 0x230]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b395e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 0xc]
mov ecx, 0x658bf4
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b398c
test dx, dx
je 0x4b3988
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b398c
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3966
xor eax, eax
jmp 0x4b3991
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x4b3a4e
call fcn.004039e0
mov ecx, eax
test ecx, ecx
jne 0x4b39b3
push 0x80004005
call fcn.00404200
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x234]
push dword [ebp + 0xc]
push str.sessionid_s
push eax
call fcn.00409f70
add esp, 0xc
lea ecx, [ebp - 0x22c]
push str.Cookie
call fcn.00404020
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x234]
mov ecx, dword [ebp - 0x264]
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ecx + 0x28]
call fcn.0049fb10
mov byte [ebp - 4], 0x1e
mov eax, ebx
mov edx, dword [ebp - 0x22c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3a2d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov eax, ebx
mov edx, dword [ebp - 0x234]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3a4e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.application_json
lea ecx, [ebp - 0x234]
call fcn.00404020
push str.Content_Type
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x20
call fcn.00404020
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x234]
mov ecx, dword [ebp - 0x264]
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ecx + 0x28]
call fcn.0049fb10
mov byte [ebp - 4], 0x20
mov eax, ebx
mov edx, dword [ebp - 0x22c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3ab3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov eax, ebx
mov edx, dword [ebp - 0x234]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3ad4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x248]
cmp dword [esi - 4], 1
mov eax, dword [esi - 0xc]
mov dword [ebp - 0x22c], eax
jle 0x4b3afb
push eax
lea ecx, [ebp - 0x248]
call fcn.0042aef0
mov esi, dword [ebp - 0x248]
mov edi, dword [ebp - 0x264]
push dword [ebp - 0x22c]
lea ecx, [edi + 0x30]
call fcn.004a0b70
push dword [ebp - 0x22c]
push esi
push dword [edi + 0x30]
call fcn.005c20e0
add esp, 4
mov ecx, esp
mov dword [ebp - 0x238], esp
mov dword [ebp - 0x22c], ecx
mov byte [ebp - 4], 0x22
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov edi, dword [ebp - 0x260]
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x234], edi
mov dword [ebp - 0x24c], eax
test edi, edi
je 0x4b3b60
lock inc dword [edi + 4]
mov edi, dword [ecx + 4]
test edi, edi
je 0x4b3b8c
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x4b3b8c
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x4b3b86
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x234]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x24c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x258]
mov byte [ebp - 4], 0x23
mov edi, dword [eax + 0x4c]
mov eax, dword [0x6ac8f0]
test eax, eax
jne 0x4b3bd7
push 0x7c
call fcn.005a8f62
add esp, 4
mov dword [ebp - 0x24c], eax
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.004a5340
mov byte [ebp - 4], 0x23
mov dword [0x6ac8f0], eax
push 0
push dword [ebp - 0x258]
mov ecx, eax
mov byte [ebp - 4], 0x1d
push edi
call fcn.004a5660
mov ecx, dword [ebp - 0x258]
mov dword [ecx + 0x58], eax
mov byte [ebp - 4], 0x25
mov edi, dword [ebp - 0x260]
test edi, edi
je 0x4b3c21
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x4b3c21
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, ebx
lock xadd dword [edi + 8], eax
jne 0x4b3c21
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 0x11
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4b3c3c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xd
mov eax, ebx
mov edx, dword [ebp - 0x25c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3c5d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x254]
push eax
push dword [eax]
lea eax, [ebp - 0x238]
push eax
call fcn.004b5840
push dword [ebp - 0x254]
call fcn.005a8a50
mov eax, dword [ebp - 0x244]
lea ecx, [ebp - 0x244]
add esp, 4
push eax
push dword [eax]
lea eax, [ebp - 0x238]
push eax
call fcn.00417000
push 1
push dword [ebp - 0x244]
lea ecx, [ebp - 0x244]
call fcn.00417b80
mov byte [ebp - 4], 2
mov eax, ebx
mov edx, dword [ebp - 0x268]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3cd5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3cf3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov eax, ebx
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b3d11
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4b3d30
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005a8a55
mov esp, ebp
pop ebp
ret 0xc