Function at 0x4690a4
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x3f
push 0
push 0
dec ecx
jne 0x4690ad
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, dword [ebp + 0x14]
lea edi, [ebp - 0x1d]
push ecx
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
pop ecx
movsb byte es:[edi], byte [esi]
mov ebx, ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], eax
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x1d]
mov edx, dword [0x449ca8]
call fcn.004057e8
xor eax, eax
push ebp
push 0x46a2a7
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0044f3c0
test al, al
je 0x469125
cmp byte [0x4ae718], 0
je 0x469125
cmp dword [0x4ae710], 0
jne 0x469125
mov eax, dword [0x4aa1f4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
jne 0x469125
mov byte [ebp - 0xb5], 1
jmp 0x46a228
mov byte [ebp - 0xb5], 0
call fcn.0040d040
fstp qword [0x4ae7d0]
wait
mov eax, dword [ebp - 0x28]
mov dword [0x4a945c], eax
mov eax, 0x4ae790
call fcn.00404bec
mov dword [0x4ae7d8], 1
xor edx, edx
push ebp
push 0x46a203
push dword fs:[edx]
mov dword fs:[edx], esp
call fcn.00406e9c
mov byte [eax + 0xe9], 1
mov ecx, dword [0x4ae688]
mov dl, 1
mov eax, dword [0x449be0]
call fcn.0046c2c0
mov dword [ebp - 0x68], eax
xor edx, edx
push ebp
push 0x46a1f2
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 0x24], 0
je 0x46919f
mov eax, dword [ebp - 0x24]
mov dword [0x4ae748], eax
test bl, bl
je 0x4691b2
cmp dword [ebp - 0x24], 0
je 0x4691b2
mov eax, dword [ebp - 0x24]
sub eax, 5
mov dword [ebp - 0x24], eax
call fcn.00468d20
cmp esi, dword [0x4ab668]
je 0x4691c7
mov ebx, dword [0x4ab668]
jmp 0x4691cf
mov ebx, dword [0x4a9f04]
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x24]
mov dword [0x4ae96c], eax
mov eax, dword [ebp - 0x28]
mov dword [0x4ae968], eax
mov eax, dword [ebp - 0xc]
mov dword [0x4ae970], eax
mov cl, 1
mov edx, eax
mov eax, dword [0x4ae688]
call fcn.0046c6fc
xor eax, eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0x24], 0
je 0x46921b
mov dword [0x4ae7d8], 0x65
mov eax, dword [ebp - 0x24]
call fcn.0044de24
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x469230
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 0x27], 0
jne 0x469277
mov dword [0x4ae7d8], 0x66
mov eax, esi
call fcn.0044dd6c
mov dword [ebp - 0xcc], eax
mov dword [0x4ae7d8], 0x67
cmp dword [ebp - 0xcc], 0
je 0x46926a
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 0x27], 0
jne 0x469277
test ebx, ebx
je 0x469277
mov eax, ebx
call fcn.0044dd6c
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax + 0x23]
mov eax, dword [0x4ae698]
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov eax, dword [0x4ae698]
test byte [eax + 0x331], 8
je 0x4692eb
test ebx, ebx
je 0x4692eb
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd0], eax
mov eax, ebx
call fcn.0044dd6c
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x4692ca
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 0x27], 0
jne 0x4692d8
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xcc], eax
jmp 0x4692eb
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax + 0x23]
mov eax, dword [0x4ae698]
mov ecx, dword [eax]
call dword [ecx + 0xc]
lea ecx, [ebp - 0x1a8]
mov dl, 0x9a
mov eax, dword [0x4ae698]
call fcn.00423270
mov edx, dword [ebp - 0x1a8]
mov eax, 0x4a9464
call fcn.00404c40
lea ecx, [ebp - 0x1ac]
mov dl, 0x9b
mov eax, dword [0x4ae698]
call fcn.00423270
mov edx, dword [ebp - 0x1ac]
mov eax, 0x4a9468
call fcn.00404c40
mov dword [0x4ae7d8], 0x68
call fcn.0042244c
test al, al
je 0x469383
mov eax, dword [0x4ae698]
mov dx, word [0x46a2c0]
not edx
and dx, word [eax + 0x314]
mov eax, dword [0x4ae698]
call fcn.004250e0
mov ecx, 0x46a2cc
mov dl, 0x1a
mov eax, dword [0x4ae698]
call fcn.00424cf0
mov ecx, 0x46a2f8
mov dl, 0x1b
mov eax, dword [0x4ae698]
call fcn.00424cf0
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax + 4]
mov eax, dword [0x4ae698]
call fcn.00424d80
mov dword [0x4ae7d8], 2
xor eax, eax
call fcn.00455108
mov bl, 2
mov byte [ebp - 0xbd], 0
mov eax, dword [0x4ae698]
mov al, byte [eax + 0x6a]
mov byte [0x4ae928], al
mov byte [0x4ae929], 0
cmp byte [ebp + 8], 2
je 0x4694fb
mov eax, dword [0x4ae698]
cmp byte [eax + 0x2ed], 0
je 0x4694fb
push ebp
call fcn.004654c8
pop ecx
mov dword [ebp - 0xbc], eax
mov dword [0x4ae7d8], 0xc9
cmp dword [ebp - 0xbc], 0xffffffff
je 0x4694fb
mov eax, dword [0x4ae698]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xbc]
call fcn.00422dd0
mov al, byte [eax + 0xc]
mov byte [ebp - 0xbd], al
mov eax, dword [0x4ae698]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xbc]
call fcn.00422dd0
mov bl, byte [eax + 0xb]
mov eax, dword [0x4ae698]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xbc]
call fcn.00422dd0
movzx eax, byte [eax + 0xa]
cmp eax, 4
ja case.default.0x469452
jmp dword [eax*4 + 0x469459]
mov byte [0x4ae928], 0
jmp case.default.0x469452
mov eax, dword [0x4ae698]
mov al, byte [eax + 0x6a]
mov byte [0x4ae928], al
jmp case.default.0x469452
mov byte [0x4ae928], 1
jmp case.default.0x469452
mov byte [0x4ae928], 2
jmp case.default.0x469452
mov byte [0x4ae928], 3
mov byte [0x4ae929], 1
mov eax, dword [0x4ae698]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xbc]
call fcn.00422dd0
mov eax, dword [eax + 5]
lea edx, [ebp - 0x1b0]
call fcn.004219a8
cmp dword [ebp - 0x1b0], 0
je 0x4694fb
mov eax, dword [0x4ae698]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xbc]
call fcn.00422dd0
mov eax, dword [eax + 5]
lea edx, [ebp - 0x1b4]
call fcn.004219a8
mov eax, dword [ebp - 0x1b4]
call fcn.00455108
call fcn.00468c88
mov byte [ebp - 0xb6], al
mov dword [0x4ae7d8], 3
cmp bl, 2
jne 0x46a198
cmp dword [ebp - 0x14], 0
jne 0x469527
call fcn.0044c0ec
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x10], 0
jne 0x46953b
call fcn.00406e9c
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x1c], 0
jne 0x46955d
call fcn.00406e9c
cmp dword [eax + 0x1c], 0
je 0x46955d
call fcn.00406e9c
lea eax, [eax + 0x1c]
mov dword [ebp - 0x1c], eax
mov edx, 0xcc
mov eax, dword [ebp - 0x1c]
call fcn.00421cec
test al, al
jne 0x469573
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov dword [0x4ae74c], eax
mov dword [0x4ae7d8], 4
cmp dword [0x4ae77c], 0
je 0x4695a6
mov edx, dword [ebp - 0x24]
add edx, 5
mov eax, dword [0x4ae77c]
call fcn.004536c8
test al, al
jne 0x4699ec
cmp dword [0x4a9448], 0
je 0x4695b9
mov eax, dword [0x4a9448]
call fcn.00403d10
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4695e7
mov eax, dword [ebp - 0xc]
push eax
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov al, byte [0x46a308]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
call fcn.00454fcc
mov dword [0x4a9448], eax
jmp 0x4695ec
mov dword [0x4a9448], eax
push ebp
lea eax, [ebp - 0x1b8]
call fcn.00462e80
pop ecx
mov edx, dword [ebp - 0x1b8]
lea eax, [ebp - 0xc8]
call fcn.00404c84
mov eax, dword [0x4a9448]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x469732
inc eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4a9448]
call fcn.0046c120
cmp byte [eax], 4
jne 0x469720
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4a9448]
call fcn.0046c120
mov ebx, dword [eax + 5]
xor edx, edx
mov eax, dword [0x4a9448]
call fcn.0046c120
cmp ebx, dword [eax + 5]
jne 0x469720
push dword [ebp - 0xc8]
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4a9448]
call fcn.0046c120
lea edx, [eax + 0x59]
lea eax, [ebp - 0x1bc]
call fcn.00404e50
push dword [ebp - 0x1bc]
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4a9448]
call fcn.0046c120
lea edx, [eax + 0x9a]
lea eax, [ebp - 0x1c0]
call fcn.00404e50
push dword [ebp - 0x1c0]
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4a9448]
call fcn.0046c120
lea edx, [eax + 0xdb]
lea eax, [ebp - 0x1c4]
call fcn.00404e50
push dword [ebp - 0x1c4]
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4a9448]
call fcn.0046c120
mov eax, dword [eax + 0x120]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x1c8]
call fcn.0040ad94
push dword [ebp - 0x1c8]
lea eax, [ebp - 0xc8]
mov edx, 5
call fcn.00404f88
inc dword [ebp - 0xbc]
dec dword [ebp - 0xd8]
jne 0x46962c
mov eax, dword [ebp - 0xc8]
call fcn.00434630
movzx eax, ax
lea ecx, [ebp - 0x1cc]
mov edx, 4
call fcn.0040adbc
mov edx, dword [ebp - 0x1cc]
lea eax, [ebp - 0xc8]
call fcn.00404c84
mov eax, 0x4ae924
mov edx, dword [ebp - 0xc8]
call fcn.00404c40
push ebp
call fcn.00468cc8
pop ecx
test al, al
je 0x469781
call fcn.0045507c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x68]
call fcn.0046c51c
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffff
je 0x4697ae
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
call fcn.00468dc0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x46985a
inc eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x469848
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
call fcn.00468e34
test al, al
je 0x469848
mov eax, dword [0x4ae688]
call fcn.0046c580
xor eax, eax
push ebp
push 0x469841
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_SuspendThread
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x469848
mov eax, dword [0x4ae688]
call fcn.0046c58c
ret
inc dword [ebp - 0xbc]
dec dword [ebp - 0xd8]
jne 0x4697ce
xor eax, eax
push ebp
push 0x4699e5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x46996a
inc eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x469958
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
call fcn.00468e34
test al, al
je 0x469958
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0x1a4]
xor ecx, ecx
mov edx, 0xcc
call fcn.004035a4
mov dword [ebp - 0x1a4], 0x10007
lea eax, [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_GetThreadContext
test eax, eax
je 0x469958
cmp dword [ebp - 0xec], 0
je 0x469958
cmp dword [ebp - 0xe0], 0
je 0x469958
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
push eax
push 1
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov al, byte [0x46a308]
push eax
mov ecx, dword [ebp - 0xe0]
xor edx, edx
mov eax, dword [0x4a9448]
call fcn.00454cc0
mov eax, dword [ebp - 0xc4]
call fcn.00468dc0
inc dword [ebp - 0xbc]
dec dword [ebp - 0xd8]
jne 0x469888
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4699ec
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x4699e4
inc eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x4699d6
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
call fcn.00468e34
test al, al
je 0x4699d6
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax + 4]
push eax
call fcn.004073d8
inc dword [ebp - 0xbc]
dec dword [ebp - 0xd8]
jne 0x469993
ret
mov dword [0x4ae7d8], 5
cmp byte [ebp + 8], 2
je 0x46a181
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x469ac5
inc eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov ebx, dword [eax]
call sub.kernel32.dll_GetCurrentThreadId_1
cmp ebx, eax
je 0x469ab3
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x469ab3
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
call fcn.00468e74
test al, al
je 0x469ab3
mov eax, dword [0x4ae688]
call fcn.0046c580
xor eax, eax
push ebp
push 0x469aac
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_SuspendThread
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x469ab3
mov eax, dword [0x4ae688]
call fcn.0046c58c
ret
inc dword [ebp - 0xbc]
dec dword [ebp - 0xd8]
jne 0x469a20
xor edx, edx
push ebp
push 0x46a11f
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [0x4ae7d8], 6
mov byte [0x4ae949], 1
mov eax, dword [0x4ae698]
test byte [eax + 0x2f0], 0x10
je 0x469afc
call fcn.0044ea74
call fcn.0044ef9c
mov dword [0x4ae7d8], 7
mov eax, dword [0x4a9448]
mov dword [0x4ae97c], eax
mov eax, dword [0x4ae698]
mov dword [0x4ae980], eax
mov dword [0x4ae7d8], 0x2be
push ebp
call fcn.004667fc
pop ecx
mov eax, 0x4ae974
mov edx, dword [0x4ae764]
call fcn.00404c40
mov dword [0x4ae7d8], 0x2bf
mov eax, dword [0x4a9440]
mov dword [0x4ae978], eax
mov dword [0x4ae7d8], 0x2c0
mov dword [0x4ae760], 0x4ae968
mov al, 1
call fcn.00451990
mov dword [0x4ae7d8], 0x2c1
call fcn.0044d834
mov dword [0x4ae7d8], 0x2c2
push ebp
call fcn.00468ecc
pop ecx
call fcn.0044f184
test al, al
je 0x469bbf
lea eax, [ebp - 0x1d4]
call fcn.00451f44
mov eax, dword [ebp - 0x1d4]
lea edx, [ebp - 0x1d0]
call fcn.00452260
mov edx, dword [ebp - 0x1d0]
mov eax, 0x4ae700
call fcn.00404c40
mov eax, 0x4af020
mov edx, dword [0x4ae700]
call fcn.00404c40
cmp byte [ebp - 0x1d], 0
jne 0x469be1
mov eax, 0x452500
call fcn.0045361c
jmp 0x469beb
mov eax, 0x4525e0
call fcn.0045361c
call fcn.0045dea4
mov dword [0x4ae7d8], 8
cmp byte [0x4ae949], 0
je 0x46a084
mov eax, dword [0x4ae698]
cmp byte [eax + 0x324], 0
je 0x469c60
call fcn.0040d040
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x1d8]
call fcn.0040dca4
mov edx, dword [ebp - 0x1d8]
mov eax, dword [0x4ae7cc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4ae7cc]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [0x4ae698]
cmp eax, dword [edx + 0x328]
jle 0x469c60
xor edx, edx
mov eax, dword [0x4ae7cc]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [0x4ae99c]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, 0x452a34
call fcn.0045361c
mov eax, dword [0x4ae99c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x469cb5
mov eax, dword [0x4ae698]
test byte [eax + 0x69], 0x80
je 0x469cb5
lea ecx, [ebp - 0x1dc]
mov dl, 0x5b
mov eax, dword [0x4ae698]
call fcn.00423270
mov edx, dword [ebp - 0x1dc]
mov ecx, dword [0x4ae99c]
mov eax, 7
call fcn.00455b44
mov dword [0x4ae7d8], 9
inc dword [0x4ae6a4]
mov dword [0x4ae7d8], 0xa
push ebp
lea eax, [ebp - 0x1e4]
call fcn.004631c8
pop ecx
mov eax, dword [ebp - 0x1e4]
lea edx, [ebp - 0x1e0]
call fcn.00462814
mov edx, dword [ebp - 0x1e0]
mov eax, 0x4ae758
call fcn.00404c40
mov byte [ebp - 0xb7], 0
mov dword [0x4ae7d8], 0xb
cmp byte [0x4ae929], 0
jne 0x469d24
mov eax, dword [0x4ae698]
mov al, byte [eax + 0x6a]
mov byte [0x4ae928], al
cmp byte [0x4ae928], 0
je 0x469ece
mov dword [0x4ae7d8], 0xc
mov byte [0x4ae948], 1
call fcn.0044d834
mov eax, 0x46551c
call fcn.0045361c
mov eax, dword [0x4ae698]
cmp byte [eax + 0x30c], 0
jne 0x469d71
mov eax, dword [0x4ae698]
cmp byte [eax + 0x30d], 0
jne 0x469d71
xor eax, eax
jmp 0x469d73
mov al, 1
mov byte [0x4ae770], al
mov eax, dword [0x4ae698]
test byte [eax + 0x2f1], 0x10
setne al
mov byte [0x4ae771], al
cmp byte [0x4ae948], 0
je 0x469f2a
mov dword [0x4ae7d8], 0xd
mov al, byte [ebp + 0x10]
call fcn.00468d78
sub al, 1
jb 0x469e3d
je 0x469dce
dec al
jne 0x469eb8
push ebp
mov eax, dword [0x4ae764]
call fcn.00468ae8
pop ecx
jmp 0x469eb8
xor eax, eax
push ebp
push 0x469e1e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1e8]
mov ecx, dword [0x4ae764]
mov edx, dword [ebp - 0x34]
call fcn.00404f14
mov edx, dword [ebp - 0x1e8]
mov eax, dword [0x4a9edc]
call fcn.004052b8
call fcn.004037c8
call fcn.00402c4c
mov byte [0x4ae948], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x469eb8
xor edx, edx
push ebp
push 0x469e9b
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [0x4ae928], 3
sete byte [ebp - 0xb7]
mov byte [0x4aebf5], 0
cmp byte [0x4ae928], 0
setne al
call fcn.0045cde8
xor eax, eax
cmp byte [0x4ae928], 0
je 0x469e81
mov byte [0x4aebf5], 1
cmp byte [0x4ae928], 0
jne 0x469e6a
mov byte [0x4ae948], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x469eb8
mov dword [0x4ae7d8], 0xe
mov eax, 0x465540
call fcn.0045361c
jmp 0x469f2a
mov eax, dword [0x4ae698]
cmp byte [eax + 0x30c], 0
jne 0x469eee
mov eax, dword [0x4ae698]
cmp byte [eax + 0x30d], 0
jne 0x469eee
xor eax, eax
jmp 0x469ef0
mov al, 1
mov byte [0x4ae770], al
mov eax, dword [0x4ae698]
test byte [eax + 0x2f1], 0x10
setne al
mov byte [0x4ae771], al
call fcn.0044f3cc
test al, al
je 0x469f2a
push ebp
lea eax, [ebp - 0x1ec]
call fcn.0045511c
mov eax, dword [ebp - 0x1ec]
call fcn.00468ae8
pop ecx
cmp byte [ebp - 0xb7], 0
je 0x469f38
call fcn.004562b8
call fcn.00468c88
test al, al
je 0x469f57
lea eax, [ebp - 0x1f0]
call fcn.00451d1c
mov eax, dword [ebp - 0x1f0]
call fcn.0045e5b8
call fcn.0045e648
mov dword [0x4ae7d8], 0xf
mov eax, dword [0x4ae698]
test byte [eax + 0x2f0], 4
je 0x46a01d
call fcn.004518a8
xor eax, eax
push ebp
push 0x469fc1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xd4]
push eax
mov eax, dword [0x4ae9ac]
call fcn.0043dd00
mov ecx, eax
dec ecx
mov edx, 0x46a330
mov eax, dword [0x4ae9ac]
call fcn.0043da98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x469fc8
call fcn.00451974
ret
call fcn.00468c88
mov byte [ebp - 0xb6], al
mov eax, dword [0x4ae698]
cmp byte [eax + 0x2ef], 0
je 0x46a03b
call fcn.004652c8
cmp byte [0x4ae772], 0
je 0x46a04e
mov eax, dword [0x4ae764]
call fcn.0044db74
mov dword [0x4ae7d8], 0x10
cmp byte [ebp - 0xb6], 0
je 0x46a066
call fcn.00461b60
cmp byte [ebp - 0xb6], 0
je 0x46a07d
mov eax, dword [0x4ae698]
test byte [eax + 0x2f1], 0x80
jne 0x46a08b
call fcn.00461bb4
jmp 0x46a08b
mov byte [ebp - 0xb5], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46a129
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x46a11e
inc eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov ebx, dword [eax]
call sub.kernel32.dll_GetCurrentThreadId_1
cmp ebx, eax
je 0x46a110
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x46a110
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
call fcn.00468e74
test al, al
je 0x46a110
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x68]
call fcn.0046c54c
mov eax, dword [eax + 4]
push eax
call fcn.004073d8
inc dword [ebp - 0xbc]
dec dword [ebp - 0xd8]
jne 0x46a0b4
ret
mov eax, dword [0x4ae698]
test byte [eax + 0x331], 0x80
je 0x46a1a4
mov byte [ebp - 0xb5], 1
jmp 0x46a1a4
cmp bl, 1
jne 0x46a1a4
mov byte [ebp - 0xb5], 1
mov dword [0x4ae7d8], 0x12
cmp byte [ebp + 8], 2
je 0x46a1d0
cmp byte [ebp - 0xb6], 0
je 0x46a1cb
mov eax, dword [0x4ae698]
test byte [eax + 0x2f1], 0x80
jne 0x46a1d0
call fcn.00461cc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46a1f9
mov eax, dword [ebp - 0x68]
call fcn.00403d10
call fcn.00406e9c
mov byte [eax + 0xe9], 0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46a2ae
lea eax, [ebp - 0x200]
mov edx, 0x17
call fcn.00404c10
lea eax, [ebp - 0xd4]
call fcn.00404bec
lea eax, [ebp - 0xc8]
call fcn.00404bec
lea eax, [ebp - 0xb4]
call fcn.00404bec
lea eax, [ebp - 0x74]
call fcn.00404bec
lea eax, [ebp - 0x64]
call fcn.00404bec
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.00404c10
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404c10
lea eax, [ebp - 0x2c]
call fcn.00404bec
lea eax, [ebp - 0x1d]
mov edx, dword [0x449ca8]
call fcn.004056a4
ret