Function at 0x46f850
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fb834
mov eax, dword fs:[0]
push eax
sub esp, 0x394
mov eax, dword [0x53b008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2f4], esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x30c], eax
lea eax, [esi + 0x1c]
mov dword [ebp - 0x2fc], 0
mov edi, eax
mov dword [ebp - 0x2f0], 0
mov dword [esi + 0x18], 0
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x2f0], edi
test edi, edi
je 0x46f8ef
mov eax, dword [edi]
test eax, eax
je 0x46f8ef
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 4], 0
mov eax, dword [esi + 4]
mov dword [ebp - 0x2ec], eax
test eax, eax
je 0x4706f5
test edi, edi
je 0x46f920
mov eax, dword [edi]
test eax, eax
je 0x46f918
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edi, edi
mov dword [ebp - 0x2f0], edi
add esi, 0x20
mov dword [ebp - 0x318], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 1
sub esp, 0x14
push dword [ebp - 0x314]
push ecx
push dword [ebp - 0x2ec]
call fcn.00497470
mov ecx, eax
call fcn.00497540
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [ebp - 0x31c], 0
jne 0x46f999
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x470717
mov eax, dword [edi]
test eax, eax
je 0x47070d
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call eax
jmp 0x47070d
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x310], eax
test eax, eax
je 0x46f9c6
mov ecx, dword [eax]
test ecx, ecx
je 0x46f9c6
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x308]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x31c]
mov dword [ecx + 8], edx
test eax, eax
je 0x46f9f9
mov eax, dword [eax]
test eax, eax
je 0x46f9eb
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call eax
xor eax, eax
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x310], eax
push 0x3e
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea ecx, [ebp - 0x248]
push 0x514460
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.0040b290
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x30c]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
je 0x46fb86
push 2
push 0x514310
lea ecx, [ebp - 0x248]
call fcn.0040e8a0
push 8
push str.Cookie:
lea ecx, [ebp - 0x248]
call fcn.0040e8a0
xor ecx, ecx
mov dword [ebp - 0x2ec], ecx
mov ecx, dword [ebp - 0x30c]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x314], eax
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x46fb86
mov edi, dword [ebp - 0x314]
xor esi, esi
nop
mov edx, dword [esi + edi + 0x10]
lea eax, [esi + edi]
mov dword [ebp - 0x314], edx
lea ecx, [eax + 0x18]
cmp dword [ebp - 0x314], 0
mov edx, edi
mov dword [ebp - 0x328], ecx
je 0x46fb47
add ecx, 0x10
mov dword [ebp - 0x2f8], ecx
cmp dword [ecx], 0
je 0x46fb47
cmp dword [eax + 0x14], 8
jb 0x46fae7
mov eax, dword [eax]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x248]
push eax
call fcn.0040e8a0
push 1
push 0x50abb4
lea ecx, [ebp - 0x248]
call fcn.0040e8a0
mov eax, dword [ebp - 0x328]
cmp dword [eax + 0x14], 8
jb 0x46fb19
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2f8]
push dword [ecx]
lea ecx, [ebp - 0x248]
push eax
call fcn.0040e8a0
push 1
push 0x5118a0
lea ecx, [ebp - 0x248]
call fcn.0040e8a0
mov edi, dword [ebp - 0x30c]
mov edx, dword [edi]
mov eax, dword [ebp - 0x30c]
mov edi, edx
inc dword [ebp - 0x2ec]
add esi, 0x30
mov ecx, dword [eax + 4]
mov eax, 0x2aaaaaab
sub ecx, edx
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x2ec], eax
jb 0x46fab0
mov esi, dword [ebp - 0x318]
mov edi, dword [ebp - 0x2f0]
push 4
push str._r_n_r_n
lea ecx, [ebp - 0x248]
call fcn.0040e8a0
mov eax, dword [ebp - 0x324]
add eax, 0x10
mov dword [ebp - 0x2f8], eax
cmp dword [eax], 0
je 0x46fc4e
push 0x12
xor eax, eax
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
lea ecx, [ebp - 0x228]
push str.Content_Encoding:
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 7
mov word [ebp - 0x228], ax
call fcn.0040b290
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x324]
cmp dword [ecx + 0x14], 8
jb 0x46fc05
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x2f8]
push dword [eax]
push ecx
lea ecx, [ebp - 0x228]
call fcn.0040e8a0
cmp dword [ebp - 0x214], 8
lea eax, [ebp - 0x228]
push dword [ebp - 0x218]
cmovae eax, dword [ebp - 0x228]
lea ecx, [ebp - 0x248]
push eax
call fcn.0040e8a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x228]
call fcn.0040b220
mov ecx, dword [ebp - 0x2f4]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ecx + 0x10]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2f8], ecx
cmp eax, ecx
je 0x46fede
mov esi, dword [ebp - 0x2fc]
lea edi, [eax + 0x28]
nop word [eax + eax]
mov byte [ebp - 4], 5
xor eax, eax
mov word [ebp - 0x340], ax
lea ecx, [ebp - 0x340]
or esi, 1
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x2fc], esi
mov eax, dword [edi - 0x18]
add eax, 2
mov dword [ebp - 0x32c], 0
push eax
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x32c], 7
call fcn.0040eb60
push 2
push 0x514310
lea ecx, [ebp - 0x340]
call fcn.0040e8a0
cmp dword [edi - 0x14], 8
mov eax, dword [ebp - 0x2ec]
mov ecx, eax
jb 0x46fcf2
mov ecx, dword [eax]
push dword [edi - 0x18]
push ecx
lea ecx, [ebp - 0x340]
call fcn.0040e8a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x340]
push 2
push 0x5143ac
call fcn.0040e8a0
mov dword [ebp - 0x360], 0
xor ecx, ecx
mov dword [ebp - 0x35c], 0
or esi, 2
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x370], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x360], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x2fc], esi
mov byte [ebp - 4], 7
lea eax, [edi - 0x10]
cmp dword [edi + 4], 8
jb 0x46fd6d
mov eax, dword [eax]
push dword [edi]
lea ecx, [ebp - 0x370]
push eax
call fcn.0040e8a0
mov dword [ebp - 0x348], 0
xor ecx, ecx
mov dword [ebp - 0x344], 0
or esi, 4
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x358], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x348], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x2fc], esi
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x358]
push 2
push 0x514310
call fcn.0040e8a0
or esi, 8
mov dword [ebp - 0x280], 0
xor ecx, ecx
mov dword [ebp - 0x27c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x290], xmm0
movups xmmword [ebp - 0x220], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [ebp - 0x2fc], esi
and esi, 0xfffffffb
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
movq qword [ebp - 0x280], xmm0
mov word [eax], cx
mov dword [ebp - 0x2fc], esi
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x358]
call fcn.0040b220
and esi, 0xfffffffd
mov dword [ebp - 0x2fc], esi
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x370]
call fcn.0040b220
and esi, 0xfffffffe
mov dword [ebp - 0x2fc], esi
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x340]
call fcn.0040b220
cmp dword [ebp - 0x27c], 8
lea ecx, [ebp - 0x290]
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x290], eax
cmovae ecx, eax
push dword [ebp - 0x280]
push ecx
lea ecx, [ebp - 0x248]
call fcn.0040e8a0
and esi, 0xfffffff7
mov dword [ebp - 0x2fc], esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x290]
call fcn.0040b220
mov eax, dword [ebp - 0x2ec]
add edi, 0x30
add eax, 0x30
mov dword [ebp - 0x2ec], eax
cmp eax, dword [ebp - 0x2f8]
jne 0x46fc80
mov esi, dword [ebp - 0x318]
mov edi, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f8], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x248]
push dword [ebp + 0x10]
cmp dword [ebp - 0x234], 8
push dword [ebp - 0x300]
cmovae eax, dword [ebp - 0x248]
push dword [ebp - 0x238]
push eax
push dword [ebp - 0x31c]
call fcn.00497470
mov ecx, eax
call fcn.00497690
test eax, eax
je 0x4706a5
mov byte [ebp - 4], 3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov eax, dword [ebp - 0x320]
mov ecx, eax
cmp dword [eax + 0x14], 0x10
mov dword [eax + 0x10], 0
jb 0x46ff58
mov ecx, dword [eax]
mov byte [ecx], 0
nop dword [eax + eax]
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x328], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x22c]
push eax
push ecx
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x31c]
call fcn.00497470
mov ecx, eax
call fcn.00497ad0
test eax, eax
je 0x4706a5
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0x200
jae 0x4706b4
test ecx, ecx
je 0x47005f
mov edx, dword [ebp - 0x320]
mov byte [ebp + ecx - 0x210], 0
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x2ec], eax
mov eax, dword [edx + 0x14]
sub eax, dword [ebp - 0x2ec]
cmp ecx, eax
ja 0x470042
mov eax, dword [ebp - 0x2ec]
add eax, ecx
mov dword [ebp - 0x318], edx
cmp dword [edx + 0x14], 0x10
mov dword [ebp - 0x300], eax
mov dword [edx + 0x10], eax
mov eax, edx
jb 0x470019
mov eax, dword [edx]
mov dword [ebp - 0x318], eax
add eax, dword [ebp - 0x2ec]
push ecx
lea ecx, [ebp - 0x210]
push ecx
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x318]
add esp, 0xc
mov ecx, dword [ebp - 0x300]
mov byte [eax + ecx], 0
jmp 0x47005f
push ecx
lea eax, [ebp - 0x210]
mov byte [ebp - 0x2f8], 0
push eax
push dword [ebp - 0x2f8]
push ecx
mov ecx, edx
call fcn.0045c600
mov byte [ebp - 4], 3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [ebp - 0x22c], 0
ja 0x46ff60
mov edi, dword [ebp - 0x30c]
push ecx
mov edx, dword [edi + 4]
mov ecx, dword [edi]
call fcn.00432e40
mov eax, dword [edi]
mov dword [edi + 4], eax
mov eax, 0x200
push 0x402
mov dword [ebp - 0x2f4], eax
call fcn.004e9cca
mov edi, eax
mov dword [ebp - 0x230], 0
mov ecx, 0x200
add esp, 8
nop dword [eax + eax]
xor eax, eax
mov word [edi], ax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x328], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2ac]
push eax
push edi
push ecx
push dword [ebp - 0x31c]
call fcn.00497470
mov ecx, eax
call fcn.004975f0
test eax, eax
mov dword [ebp - 0x300], eax
setne byte [ebp - 0x301]
mov byte [ebp - 4], 3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [ebp - 0x300], 0
jne 0x47019a
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x2f4]
cmp eax, ecx
jbe 0x4701a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x47019a
mov eax, dword [ebp - 0x2ac]
inc eax
push edi
mov dword [ebp - 0x2f4], eax
call fcn.004e9cc5
mov eax, dword [ebp - 0x2f4]
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004e9cca
mov ecx, dword [ebp - 0x2f4]
mov edi, eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x230], eax
jmp 0x4700b5
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x2f4]
cmp byte [ebp - 0x301], 0
je 0x470637
cmp eax, ecx
ja 0x4700c0
xor ecx, ecx
mov word [edi + eax*2], cx
xor eax, eax
mov word [ebp - 0x278], ax
mov eax, edi
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x264], 7
lea edx, [eax + 2]
nop dword [eax + eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4701f0
sub eax, edx
lea ecx, [ebp - 0x278]
sar eax, 1
push eax
push edi
call fcn.0040b290
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x268], 0
je 0x47061d
xor eax, eax
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 7
mov word [ebp - 0x228], ax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x278]
push eax
push 0x3d
call fcn.0046efe0
mov dword [ebp - 0x300], eax
cmp eax, 0xffffffff
je 0x470309
push eax
push 0
lea eax, [ebp - 0x370]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040a420
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x228]
push eax
call fcn.0040a680
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x370]
call fcn.0040b220
mov eax, dword [ebp - 0x300]
inc eax
cmp eax, dword [ebp - 0x268]
jae 0x470309
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040a420
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x278]
push eax
call fcn.0040a680
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x358]
call fcn.0040b220
push 0
push 0x3b
lea ecx, [ebp - 0x278]
call fcn.0046efe0
cmp eax, 0xffffffff
je 0x470353
push eax
push 0
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040a420
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x260]
push eax
call fcn.0040a680
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x340]
call fcn.0040b220
jmp 0x470379
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
push dword [ebp - 0x268]
cmovae eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x260]
push eax
call fcn.0040b290
mov edx, str.__r_t_n
lea ecx, [ebp - 0x228]
call fcn.004a78e0
mov edx, str.__r_t_n
lea ecx, [ebp - 0x228]
call fcn.004a7970
mov edx, str.__r_t_n
lea ecx, [ebp - 0x260]
call fcn.004a78e0
mov edx, str.__r_t_n
lea ecx, [ebp - 0x260]
call fcn.004a7970
cmp dword [ebp - 0x218], 0
je 0x4705ff
cmp dword [ebp - 0x250], 0
je 0x4705ff
push str.http:__www.2345.com_
lea ecx, [ebp - 0x290]
call fcn.0040a730
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x290]
push dword [ebp - 0x250]
cmovae eax, dword [ebp - 0x260]
push eax
call fcn.0040e8a0
mov eax, dword [ebp - 0x280]
xor ecx, ecx
add eax, 0x20
mov dword [ebp - 0x2e8], 0x3c
mov dword [ebp - 0x320], eax
mov edx, 2
mul edx
xorps xmm0, xmm0
movlpd qword [ebp - 0x2e4], xmm0
movlpd qword [ebp - 0x2dc], xmm0
movlpd qword [ebp - 0x2d4], xmm0
movlpd qword [ebp - 0x2cc], xmm0
movlpd qword [ebp - 0x2c4], xmm0
seto cl
movlpd qword [ebp - 0x2bc], xmm0
neg ecx
movlpd qword [ebp - 0x2b4], xmm0
or ecx, eax
push ecx
call fcn.004e9cca
mov ecx, dword [ebp - 0x320]
add ecx, ecx
mov dword [ebp - 0x2b4], eax
push ecx
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x320]
add esp, 0x10
dec eax
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x2b0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2e8]
cmp dword [ebp - 0x27c], 8
lea eax, [ebp - 0x290]
push ecx
cmovae eax, dword [ebp - 0x290]
push ecx
push dword [ebp - 0x280]
push eax
call fcn.00497470
mov ecx, eax
call fcn.00497850
mov dword [ebp - 0x300], eax
mov byte [ebp - 4], 0x18
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
cmp dword [ebp - 0x300], 0
je 0x470595
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x2a8]
call fcn.0040a730
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x298], 0
je 0x470586
cmp dword [ebp - 0x294], 8
lea eax, [ebp - 0x2a8]
lea ecx, [ebp - 0x2a8]
cmovae eax, dword [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x324]
push eax
call fcn.004511c0
movups xmm0, xmmword [ebp - 0x2a8]
movups xmm1, xmmword [ebp - 0x260]
movq xmm2, qword [ebp - 0x250]
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [ebp - 0x298]
movq qword [ebp - 0x250], xmm0
movups xmmword [ebp - 0x2a8], xmm1
movq qword [ebp - 0x298], xmm2
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2a8]
call fcn.0040b220
push dword [ebp - 0x2b4]
call fcn.004e9cc5
add esp, 4
lea eax, [ebp - 0x228]
lea ecx, [ebp - 0x3a0]
push eax
call fcn.0040be30
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x388]
call fcn.0040be30
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x3a0]
mov ecx, dword [ebp - 0x30c]
push eax
call fcn.0043b3c0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3a0]
call fcn.00429090
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x290]
call fcn.0040b220
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x260]
call fcn.0040b220
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x228]
call fcn.0040b220
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x278]
call fcn.0040b220
mov ecx, dword [ebp - 0x2f4]
jmp 0x4700c0
xor eax, eax
push edi
mov word [edi], ax
call fcn.004e9cc5
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x248]
call fcn.0040b220
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x308]
mov edi, dword [ebp - 0x2f0]
test eax, eax
je 0x47067f
mov eax, dword [eax]
test eax, eax
je 0x470675
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x310], 0
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x4706a1
mov eax, dword [edi]
test eax, eax
je 0x470697
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x2f0], 0
mov al, 1
jmp 0x470719
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x2f4]
mov dword [ecx + 0x18], eax
mov byte [ebp - 4], 3
push 0
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x248]
call fcn.0040b220
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x308]
test eax, eax
je 0x4706f5
mov eax, dword [eax]
test eax, eax
je 0x4706eb
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x310], 0
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x470717
mov eax, dword [edi]
test eax, eax
je 0x47070d
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x2f0], 0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e9681
mov esp, ebp
pop ebp
ret 0x20