Function at 0x477820
Capabilities:
Print debug messages
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x591bb3
push eax
mov eax, 0x13a0
mov dword fs:[0], esp
call fcn.0056b420
mov eax, dword fs:[0x2c]
mov ecx, dword [0x6abd38]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x65ffec]
cmp eax, dword [ecx + 4]
jg 0x477a6c
push esi
mov dword [ebp - 0x10], 0x65ffcc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
cmp esi, dword [0x65ffcc]
je 0x477895
mov edx, esi
mov ecx, 0x65ffcc
xor eax, eax
lock cmpxchg dword [ecx], edx
test eax, eax
je 0x477895
pause
push esi
call fcn.004813b0
jmp 0x47789c
lock inc dword [0x65ffd0]
push ebx
push edi
mov dword [ebp - 4], 2
xor edi, edi
mov ebx, dword [ebp + 8]
cmp ebx, 2
jne 0x477929
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x477929
mov cl, byte [edx]
mov eax, edx
test cl, cl
je 0x4778f6
mov edi, edi
cmp cl, 0x2f
je 0x4778ca
cmp cl, 0x5c
jne 0x4778e9
cmp byte [eax + 1], 0x73
jne 0x4778e9
cmp byte [eax + 2], 0x72
jne 0x4778e9
cmp byte [eax + 3], 0x63
jne 0x4778e9
mov cl, byte [eax + 4]
cmp cl, 0x2f
je 0x4778f3
cmp cl, 0x5c
je 0x4778f3
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4778c0
jmp 0x4778f6
lea edx, [eax + 1]
push dword [ebp + 0x10]
lea eax, [ebp - 0x13ac]
push edx
push str._s___d__:
push 0x139b
push eax
call fcn.00477ae0
mov edi, eax
add esp, 0x14
cmp edi, 0x139a
jbe 0x477924
mov edi, 0x139a
jmp 0x477929
cmp edi, 0xffffffff
je 0x47796a
push dword [ebp + 0x18]
mov esi, 0x139b
lea eax, [ebp - 0x13ac]
push 0
push dword [ebp + 0x14]
sub esi, edi
add eax, edi
push esi
push eax
call fcn.00459ee0
mov ecx, dword [eax]
push dword [eax + 4]
or ecx, 2
push ecx
call fcn.005790fe
or ecx, 0xffffffff
add esp, 0x1c
test eax, eax
cmovs eax, ecx
dec esi
cmp eax, esi
cmovle esi, eax
cmp esi, ecx
jne 0x477974
mov esi, 2
jmp 0x477a3d
add edi, esi
cmp ebx, 2
je 0x477980
cmp ebx, 3
jne 0x4779eb
push 1
call fcn.005797c1
push eax
call fcn.0057ca64
push 2
call fcn.005797c1
push eax
push edi
lea eax, [ebp - 0x13ac]
push 1
push eax
call fcn.0057b766
push 2
call fcn.005797c1
push eax
push 0xa
call fcn.0057cae2
push 2
call fcn.005797c1
push eax
call fcn.0057ca64
add esp, 0x30
cmp ebx, 2
jne 0x4779eb
lea eax, [ebp - 0x13ac]
add eax, edi
push 0x59370c
push eax
call fcn.0046a4f0
add esp, 8
lea eax, [ebp - 0x13ac]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea eax, [ebp - 0x13ac]
push eax
push ebx
call dword [0x628520]
add esp, 8
mov esi, eax
sub eax, 0
je 0x477a2d
sub eax, 2
jne 0x477a3d
push str.Exiting_on_SPEW_ABORT_n
push 1
push str.console
call fcn.004777d0
add esp, 0xc
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x477a3d
cmp ebx, 2
je 0x477a3d
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x477a3d
int3
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
add ecx, 4
lock dec dword [ecx]
cmp dword [ecx], 0
pop edi
pop ebx
jne 0x477a5b
mov ecx, dword [ebp - 0x10]
xor edx, edx
xchg dword [ecx], edx
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push 0x65ffec
call fcn.0056b7dd
add esp, 4
cmp dword [0x65ffec], 0xffffffff
jne 0x477862
mov dword [ebp - 4], 0
mov ecx, 0x65ffd4
mov dword [0x65ffcc], 0
mov dword [0x65ffd0], 0
call fcn.00480fa0
mov byte [ebp - 4], 0
push 0x592a60
call fcn.0056b695
mov dword [ebp - 4], 0xffffffff
push 0x65ffec
call fcn.0056b793
add esp, 8
jmp 0x477862