Function at 0x473894
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x42
push 0
push 0
dec ecx
jne 0x47389d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, dword [ebp + 0x14]
lea edi, [ebp - 0x21]
push ecx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop ecx
movsb byte es:[edi], byte [esi]
mov ebx, ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x21]
mov edx, dword [0x4529b8]
call fcn.004060d4
xor eax, eax
push ebp
push 0x474b29
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00458ab8
test al, al
je 0x473914
cmp byte [0x55b860], 0
je 0x473914
cmp dword [0x55b858], 0
jne 0x473914
mov eax, dword [0x553a08]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
jne 0x473914
mov byte [ebp - 0xc5], 1
jmp 0x474ab0
mov byte [ebp - 0xc5], 0
call fcn.0040c2ac
fstp qword [0x55b918]
wait
mov eax, dword [ebp - 0x2c]
mov dword [0x54fc98], eax
mov eax, 0x55b8d8
call fcn.004053dc
mov dword [0x55b920], 1
xor edx, edx
push ebp
push 0x474a8b
push dword fs:[edx]
mov dword fs:[edx], esp
call fcn.004075cc
mov byte [eax + 0x139], 1
mov ecx, dword [0x55b7d0]
mov dl, 1
mov eax, dword [0x4528f0]
call fcn.00476be0
mov dword [ebp - 0x6c], eax
xor edx, edx
push ebp
push 0x474a7a
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 0x28], 0
je 0x47398e
mov eax, dword [ebp - 0x28]
mov dword [0x55b890], eax
test bl, bl
je 0x4739a1
cmp dword [ebp - 0x28], 0
je 0x4739a1
mov eax, dword [ebp - 0x28]
sub eax, 5
mov dword [ebp - 0x28], eax
call fcn.00473520
cmp edi, dword [0x5567fc]
je 0x4739b6
mov esi, dword [0x5567fc]
jmp 0x4739be
mov esi, dword [0x553354]
mov esi, dword [esi]
mov eax, dword [ebp - 0x28]
mov dword [0x55babc], eax
mov eax, dword [ebp - 0x2c]
mov dword [0x55bab8], eax
mov eax, dword [ebp - 0xc]
mov dword [0x55bac0], eax
mov cl, 1
mov edx, eax
mov eax, dword [0x55b7d0]
call fcn.00477004
cmp byte [0x54fca0], 0
je 0x473a4f
mov eax, dword [0x5567fc]
call fcn.00457088
mov ebx, eax
test ebx, ebx
je 0x473b07
mov edx, dword [ebx + 0x23]
mov eax, dword [0x55b7e0]
mov ecx, dword [eax]
call dword [ecx + 8]
lea edx, [ebp - 0x1b0]
xor eax, eax
call fcn.0045317c
mov edx, dword [ebp - 0x1b0]
mov eax, dword [0x55b7e0]
call fcn.004300d4
mov eax, dword [0x55b7e0]
mov eax, dword [eax + 0x5c]
call fcn.00405888
push eax
call sub.kernel32.dll_GetModuleHandleA_2
mov edx, eax
mov eax, dword [0x55b7e0]
call fcn.004300f0
jmp 0x473b07
xor ebx, ebx
cmp dword [ebp - 0x28], 0
je 0x473a6b
mov dword [0x55b920], 0x65
mov eax, dword [ebp - 0x28]
call fcn.00457144
mov ebx, eax
test ebx, ebx
je 0x473a75
cmp dword [ebx + 0x27], 0
jne 0x473aa9
mov dword [0x55b920], 0x66
mov eax, edi
call fcn.00457088
mov ebx, eax
mov dword [0x55b920], 0x67
test ebx, ebx
je 0x473aa0
cmp dword [ebx + 0x27], 0
jne 0x473aa9
test esi, esi
je 0x473aa9
mov eax, esi
call fcn.00457088
mov ebx, eax
mov edx, dword [ebx + 0x23]
mov eax, dword [0x55b7e0]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [0x55b7e0]
test byte [eax + 0x331], 8
je 0x473aee
test esi, esi
je 0x473aee
mov edi, ebx
mov eax, esi
call fcn.00457088
mov ebx, eax
test ebx, ebx
je 0x473add
cmp dword [ebx + 0x27], 0
jne 0x473ae1
mov ebx, edi
jmp 0x473aee
mov edx, dword [ebx + 0x23]
mov eax, dword [0x55b7e0]
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, dword [ebx + 4]
mov eax, dword [0x55b7e0]
call fcn.004300d4
mov edx, dword [ebx]
mov eax, dword [0x55b7e0]
call fcn.004300f0
lea ecx, [ebp - 0x1b4]
mov dl, 0x9a
mov eax, dword [0x55b7e0]
call fcn.0042e5b8
mov edx, dword [ebp - 0x1b4]
mov eax, 0x54fca4
call fcn.00405430
lea ecx, [ebp - 0x1b8]
mov dl, 0x9b
mov eax, dword [0x55b7e0]
call fcn.0042e5b8
mov edx, dword [ebp - 0x1b8]
mov eax, 0x54fca8
call fcn.00405430
mov dword [0x55b920], 0x68
call fcn.0042dc0c
test al, al
je 0x473b9f
mov eax, dword [0x55b7e0]
movzx edx, word [0x474b40]
not edx
and dx, word [eax + 0x314]
mov eax, dword [0x55b7e0]
call fcn.00430444
mov ecx, 0x474b4c
mov dl, 0x1a
mov eax, dword [0x55b7e0]
call fcn.00430044
mov ecx, 0x474b78
mov dl, 0x1b
mov eax, dword [0x55b7e0]
call fcn.00430044
mov dword [0x55b920], 2
xor eax, eax
call fcn.0045e764
mov bl, 2
mov byte [ebp - 0xcd], 0
mov eax, dword [0x55b7e0]
movzx eax, byte [eax + 0x6a]
mov byte [0x55ba70], al
mov byte [0x55ba71], 0
cmp byte [ebp + 8], 2
je 0x473d08
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x2ed], 0
je 0x473d08
push ebp
call fcn.0046f650
pop ecx
mov dword [ebp - 0xcc], eax
mov dword [0x55b920], 0xc9
cmp dword [ebp - 0xcc], 0xffffffff
je 0x473d08
mov eax, dword [0x55b7e0]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xcc]
call fcn.0042e104
movzx eax, byte [eax + 0xc]
mov byte [ebp - 0xcd], al
mov eax, dword [0x55b7e0]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xcc]
call fcn.0042e104
movzx ebx, byte [eax + 0xb]
mov eax, dword [0x55b7e0]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xcc]
call fcn.0042e104
movzx eax, byte [eax + 0xa]
cmp eax, 4
ja case.default.0x473c5e
jmp dword [eax*4 + 0x473c65]
mov byte [0x55ba70], 0
jmp case.default.0x473c5e
mov eax, dword [0x55b7e0]
movzx eax, byte [eax + 0x6a]
mov byte [0x55ba70], al
jmp case.default.0x473c5e
mov byte [0x55ba70], 1
jmp case.default.0x473c5e
mov byte [0x55ba70], 2
jmp case.default.0x473c5e
mov byte [0x55ba70], 3
mov byte [0x55ba71], 1
mov eax, dword [0x55b7e0]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xcc]
call fcn.0042e104
mov eax, dword [eax + 5]
lea edx, [ebp - 0x1bc]
call fcn.0042ce9c
cmp dword [ebp - 0x1bc], 0
je 0x473d08
mov eax, dword [0x55b7e0]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xcc]
call fcn.0042e104
mov eax, dword [eax + 5]
lea edx, [ebp - 0x1c0]
call fcn.0042ce9c
mov eax, dword [ebp - 0x1c0]
call fcn.0045e764
call fcn.00473488
mov byte [ebp - 0xc6], al
mov dword [0x55b920], 3
cmp bl, 2
jne 0x474a20
cmp dword [ebp - 0x14], 0
jne 0x473d34
call fcn.00454dd0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x10], 0
jne 0x473d48
call fcn.004075cc
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x20], 0
jne 0x473d6a
call fcn.004075cc
cmp dword [eax + 0x1c], 0
je 0x473d6a
call fcn.004075cc
lea eax, [eax + 0x1c]
mov dword [ebp - 0x20], eax
mov edx, 0xcc
mov eax, dword [ebp - 0x20]
call fcn.0042d3ec
test al, al
jne 0x473d80
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jne 0x473d94
call fcn.004075cc
lea eax, [eax + 0xe8]
mov dword [ebp - 0x1c], eax
mov edx, 0x50
mov eax, dword [ebp - 0x1c]
call fcn.0042d3ec
test al, al
jne 0x473daa
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov dword [0x55b894], eax
mov dword [0x55b920], 4
cmp dword [0x55b8c4], 0
je 0x473ddd
mov edx, dword [ebp - 0x28]
add edx, 5
mov eax, dword [0x55b8c4]
call fcn.0045ccf0
test al, al
jne 0x474226
cmp dword [0x54fc84], 0
je 0x473df0
mov eax, dword [0x54fc84]
call fcn.004043d8
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x473e20
mov eax, dword [ebp - 0xc]
push eax
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx eax, byte [0x474b88]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
call fcn.0045e53c
mov dword [0x54fc84], eax
jmp 0x473e25
mov dword [0x54fc84], eax
lea eax, [ebp - 0x1c4]
call fcn.0046d5f0
push dword [ebp - 0x1c4]
push ebp
lea eax, [ebp - 0x1c8]
call fcn.0046cd00
pop ecx
push dword [ebp - 0x1c8]
push ebp
lea eax, [ebp - 0x1cc]
call fcn.0046ce34
pop ecx
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.0040578c
mov eax, dword [0x54fc84]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x473f94
inc eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x54fc84]
call fcn.00476a88
cmp byte [eax], 4
jne 0x473f82
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x54fc84]
call fcn.00476a88
mov ebx, dword [eax + 5]
xor edx, edx
mov eax, dword [0x54fc84]
call fcn.00476a88
cmp ebx, dword [eax + 5]
jne 0x473f82
push dword [ebp - 0xbc]
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x54fc84]
call fcn.00476a88
lea edx, [eax + 0x59]
lea eax, [ebp - 0x1d0]
call fcn.00405640
push dword [ebp - 0x1d0]
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x54fc84]
call fcn.00476a88
lea edx, [eax + 0x159]
lea eax, [ebp - 0x1d4]
call fcn.00405640
push dword [ebp - 0x1d4]
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x54fc84]
call fcn.00476a88
lea edx, [eax + 0x259]
lea eax, [ebp - 0x1d8]
call fcn.00405640
push dword [ebp - 0x1d8]
mov edx, dword [ebp - 0xcc]
mov eax, dword [0x54fc84]
call fcn.00476a88
mov eax, dword [eax + 0x35d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1dc]
call fcn.00409db0
push dword [ebp - 0x1dc]
lea eax, [ebp - 0xbc]
mov edx, 5
call fcn.0040578c
inc dword [ebp - 0xcc]
dec dword [ebp - 0xd4]
jne 0x473e8e
mov eax, dword [ebp - 0xbc]
call fcn.00439c94
movzx eax, ax
lea ecx, [ebp - 0x1e0]
mov edx, 4
call fcn.00409dd8
mov edx, dword [ebp - 0x1e0]
lea eax, [ebp - 0xbc]
call fcn.00405474
mov eax, 0x55ba6c
mov edx, dword [ebp - 0xbc]
call fcn.00405430
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e28
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffff
je 0x474000
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
call fcn.004735c0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x4740ac
inc eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x47409a
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
call fcn.00473638
test al, al
je 0x47409a
mov eax, dword [0x55b7d0]
call fcn.00476e84
xor eax, eax
push ebp
push 0x474093
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_SuspendThread
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47409a
mov eax, dword [0x55b7d0]
call fcn.00476e90
ret
inc dword [ebp - 0xcc]
dec dword [ebp - 0xd4]
jne 0x474020
xor eax, eax
push ebp
push 0x47421f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x4741a4
inc eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x474192
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
call fcn.00473638
test al, al
je 0x474192
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov ebx, eax
lea eax, [ebp - 0x1ac]
xor ecx, ecx
mov edx, 0xcc
call fcn.00403b4c
mov dword [ebp - 0x1ac], 0x10003
lea eax, [ebp - 0x1ac]
push eax
mov eax, dword [ebx + 4]
push eax
call sub.kernel32.dll_GetThreadContext
test eax, eax
je 0x474192
cmp dword [ebp - 0xf4], 0
je 0x474192
cmp dword [ebp - 0xe8], 0
je 0x474192
mov eax, dword [ebx + 0x14]
push eax
mov eax, dword [ebx]
push eax
push 1
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
movzx eax, byte [0x474b88]
push eax
mov ecx, dword [ebp - 0xe8]
xor edx, edx
mov eax, dword [0x54fc84]
call fcn.0045e270
mov eax, ebx
call fcn.004735c0
inc dword [ebp - 0xcc]
dec dword [ebp - 0xd4]
jne 0x4740da
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x474226
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47421e
inc eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x474210
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
call fcn.00473638
test al, al
je 0x474210
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_ResumeThread
inc dword [ebp - 0xcc]
dec dword [ebp - 0xd4]
jne 0x4741cd
ret
mov dword [0x55b920], 5
cmp byte [ebp + 8], 2
je 0x474a09
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x4742ff
inc eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov ebx, dword [eax]
call sub.kernel32.dll_GetCurrentThreadId_1
cmp ebx, eax
je 0x4742ed
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x4742ed
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
call fcn.00473678
test al, al
je 0x4742ed
mov eax, dword [0x55b7d0]
call fcn.00476e84
xor eax, eax
push ebp
push 0x4742e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_SuspendThread
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4742ed
mov eax, dword [0x55b7d0]
call fcn.00476e90
ret
inc dword [ebp - 0xcc]
dec dword [ebp - 0xd4]
jne 0x47425a
xor edx, edx
push ebp
push 0x4749a6
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [0x55b920], 6
mov byte [0x55ba91], 1
mov eax, dword [0x55b7e0]
test byte [eax + 0x2f0], 0x10
je 0x474336
call fcn.00457d8c
call fcn.00458690
mov dword [0x55b920], 7
mov eax, dword [0x54fc84]
mov dword [0x55bad4], eax
mov eax, dword [0x55b7e0]
mov dword [0x55bad8], eax
mov eax, dword [ebp - 0x1c]
mov dword [0x55bac4], eax
mov eax, dword [ebp - 0x20]
mov dword [0x55bac8], eax
mov dword [0x55b920], 0x2be
push ebp
call fcn.004709a4
pop ecx
mov eax, 0x55bacc
mov edx, dword [0x55b8ac]
call fcn.00405430
mov dword [0x55b920], 0x2bf
mov eax, dword [0x54fc7c]
mov dword [0x55bad0], eax
mov dword [0x55b920], 0x2c0
mov dword [0x55b8a8], 0x55bab8
mov al, 1
call fcn.0045af44
mov dword [0x55b920], 0x2c1
call fcn.00456a30
mov dword [0x55b920], 0x2c2
push ebp
call fcn.004736d0
pop ecx
call fcn.00458878
test al, al
je 0x474409
lea eax, [ebp - 0x1e8]
call fcn.0045b51c
mov eax, dword [ebp - 0x1e8]
lea edx, [ebp - 0x1e4]
call fcn.0045b838
mov edx, dword [ebp - 0x1e4]
mov eax, 0x55b848
call fcn.00405430
mov eax, 0x55c18c
mov edx, dword [0x55b848]
call fcn.00405430
push ebp
call fcn.004734c8
pop ecx
test al, al
je 0x47442e
mov eax, 0x45e5f0
call fcn.0045cc3c
cmp byte [ebp - 0x21], 0
jne 0x474440
mov eax, 0x45bb04
call fcn.0045cc3c
jmp 0x47444a
mov eax, 0x45bbd4
call fcn.0045cc3c
call fcn.00467a98
mov dword [0x55b920], 8
cmp byte [0x55ba91], 0
je 0x47490b
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x324], 0
je 0x4744cd
call fcn.0040c2ac
fstp qword [ebp - 0xe0]
wait
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
lea eax, [ebp - 0xc4]
xor edx, edx
call fcn.0040ceac
mov edx, dword [ebp - 0xc4]
mov eax, dword [0x55b914]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x55b914]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [0x55b7e0]
cmp eax, dword [edx + 0x328]
jle 0x4744cd
xor edx, edx
mov eax, dword [0x55b914]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [0x55baf4]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, 0x45bffc
call fcn.0045cc3c
mov eax, dword [0x55baf4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x474522
mov eax, dword [0x55b7e0]
test byte [eax + 0x69], 0x80
je 0x474522
lea ecx, [ebp - 0x1ec]
mov dl, 0x5b
mov eax, dword [0x55b7e0]
call fcn.0042e5b8
mov edx, dword [ebp - 0x1ec]
mov ecx, dword [0x55baf4]
mov eax, 7
call fcn.0045f278
mov dword [0x55b920], 9
inc dword [0x55b7ec]
mov dword [0x55b920], 0xa
push ebp
lea eax, [ebp - 0x1f4]
call fcn.0046d1a4
pop ecx
mov eax, dword [ebp - 0x1f4]
lea edx, [ebp - 0x1f0]
call fcn.0046c7d4
mov edx, dword [ebp - 0x1f0]
mov eax, 0x55b8a0
call fcn.00405430
mov byte [ebp - 0xc7], 0
mov dword [0x55b920], 0xb
cmp byte [0x55ba71], 0
jne 0x474592
mov eax, dword [0x55b7e0]
movzx eax, byte [eax + 0x6a]
mov byte [0x55ba70], al
cmp byte [0x55ba70], 0
je 0x47473d
mov dword [0x55b920], 0xc
mov byte [0x55ba90], 1
call fcn.00456a30
mov eax, 0x46f6a4
call fcn.0045cc3c
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x30c], 0
jne 0x4745df
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x30d], 0
jne 0x4745df
xor eax, eax
jmp 0x4745e1
mov al, 1
mov byte [0x55b8b8], al
mov eax, dword [0x55b7e0]
test byte [eax + 0x2f1], 0x10
setne al
mov byte [0x55b8b9], al
cmp byte [0x55ba90], 0
je 0x474799
mov dword [0x55b920], 0xd
movzx eax, byte [ebp + 0x10]
call fcn.00473578
sub al, 1
jb 0x4746ac
je 0x47463d
dec al
jne 0x474727
push ebp
mov eax, dword [0x55b8ac]
call fcn.004732e8
pop ecx
jmp 0x474727
xor eax, eax
push ebp
push 0x47468d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1f8]
mov ecx, dword [0x55b8ac]
mov edx, dword [ebp - 0x38]
call fcn.00405710
mov edx, dword [ebp - 0x1f8]
mov eax, dword [0x553304]
call fcn.00405ba8
call fcn.00403dd0
call fcn.004030e4
mov byte [0x55ba90], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x474727
xor edx, edx
push ebp
push 0x47470a
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [0x55ba70], 3
sete byte [ebp - 0xc7]
mov byte [0x55bd4d], 0
cmp byte [0x55ba70], 0
setne al
call fcn.00466afc
xor eax, eax
cmp byte [0x55ba70], 0
je 0x4746f0
mov byte [0x55bd4d], 1
cmp byte [0x55ba70], 0
jne 0x4746d9
mov byte [0x55ba90], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x474727
mov dword [0x55b920], 0xe
mov eax, 0x46f6c8
call fcn.0045cc3c
jmp 0x474799
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x30c], 0
jne 0x47475d
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x30d], 0
jne 0x47475d
xor eax, eax
jmp 0x47475f
mov al, 1
mov byte [0x55b8b8], al
mov eax, dword [0x55b7e0]
test byte [eax + 0x2f1], 0x10
setne al
mov byte [0x55b8b9], al
call fcn.00458ac4
test al, al
je 0x474799
push ebp
lea eax, [ebp - 0x1fc]
call fcn.0045e778
mov eax, dword [ebp - 0x1fc]
call fcn.004732e8
pop ecx
cmp byte [ebp - 0xc7], 0
je 0x4747a7
call fcn.0045fa58
call fcn.00473488
test al, al
je 0x4747c6
lea eax, [ebp - 0x200]
call fcn.0045b2f4
mov eax, dword [ebp - 0x200]
call fcn.004681b8
call fcn.00468248
mov dword [0x55b920], 0xf
mov eax, dword [0x55b7e0]
test byte [eax + 0x2f0], 4
je 0x4748a4
call fcn.0045ae5c
xor eax, eax
push ebp
push 0x474830
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xc0]
push eax
mov eax, dword [0x55bb04]
call fcn.0043d588
mov ecx, eax
dec ecx
mov edx, 0x474bb0
mov eax, dword [0x55bb04]
call fcn.0043d300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x474837
call fcn.0045af28
ret
call fcn.00473488
mov byte [ebp - 0xc6], al
mov eax, dword [0x55b7e0]
cmp byte [eax + 0x2ef], 0
je 0x4748c2
call fcn.0046f450
cmp byte [0x55b8ba], 0
je 0x4748d5
mov eax, dword [0x55b8ac]
call fcn.00456e8c
mov dword [0x55b920], 0x10
cmp byte [ebp - 0xc6], 0
je 0x4748ed
call fcn.0046bab0
cmp byte [ebp - 0xc6], 0
je 0x474904
mov eax, dword [0x55b7e0]
test byte [eax + 0x2f1], 0x80
jne 0x474912
call fcn.0046bb04
jmp 0x474912
mov byte [ebp - 0xc5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4749b0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x4749a5
inc eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov ebx, dword [eax]
call sub.kernel32.dll_GetCurrentThreadId_1
cmp ebx, eax
je 0x474997
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x474997
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
call fcn.00473678
test al, al
je 0x474997
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x6c]
call fcn.00476e58
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_ResumeThread
inc dword [ebp - 0xcc]
dec dword [ebp - 0xd4]
jne 0x47493b
ret
mov eax, dword [0x55b7e0]
test byte [eax + 0x331], 0x80
je 0x474a2c
mov byte [ebp - 0xc5], 1
jmp 0x474a2c
cmp bl, 1
jne 0x474a2c
mov byte [ebp - 0xc5], 1
mov dword [0x55b920], 0x12
cmp byte [ebp + 8], 2
je 0x474a58
cmp byte [ebp - 0xc6], 0
je 0x474a53
mov eax, dword [0x55b7e0]
test byte [eax + 0x2f1], 0x80
jne 0x474a58
call fcn.0046bc34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x474a81
mov eax, dword [ebp - 0x6c]
call fcn.004043d8
call fcn.004075cc
mov byte [eax + 0x139], 0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x474b30
lea eax, [ebp - 0x214]
call fcn.004053dc
lea eax, [ebp - 0x20c]
mov edx, 0x18
call fcn.00405400
lea eax, [ebp - 0xc4]
mov edx, 4
call fcn.00405400
lea eax, [ebp - 0x78]
call fcn.004053dc
lea eax, [ebp - 0x68]
call fcn.004053dc
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.00405400
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00405400
lea eax, [ebp - 0x30]
call fcn.004053dc
lea eax, [ebp - 0x21]
mov edx, dword [0x4529b8]
call fcn.00405f90
ret