Function at 0x406d90
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xec
push ebx
push esi
mov eax, ecx
push edi
push 0xffffffffffffffff
mov dword [esp + 0x48], eax
mov esi, dword [eax]
push dword [eax + 0x1c]
mov dword [esp + 0xa8], esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x407f25
mov dword [esp + 0xf0], 1
nop dword [eax]
cmp dword [esi + 0x24], 0
jne 0x407f23
mov ebx, dword [esi + 0x34]
mov eax, ebx
mov edx, dword [esi + 0x30]
mov ecx, edx
push ebx
push edx
push 0
add ecx, 1
mov dword [esp + 0x9c], edx
push 0
push 0
adc eax, 0
mov dword [esi + 0x30], ecx
push 0
lea edx, [esp + 0x80]
mov dword [esp + 0xac], ebx
mov ecx, esi
mov dword [esi + 0x34], eax
call fcn.00406c30
mov edx, dword [esp + 0x68]
xor ecx, ecx
mov edi, eax
mov dword [esp + 0x40], ecx
mov eax, dword [esi + 0x70]
xorps xmm0, xmm0
xor ebx, ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x28], ecx
movlpd qword [esp + 0x80], xmm0
mov dword [esp + 0x34], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x20], edx
test edi, edi
jne 0x407447
mov dword [esp + 0x34], ecx
mov dword [esp + 0x2c], ecx
test edx, edx
jne 0x407447
mov eax, dword [esp + 0x44]
mov ebx, dword [esi + 0x64]
sub ebx, dword [esi + 0x60]
mov dword [esp + 0x24], ecx
mov eax, dword [eax + 8]
movlpd qword [esp + 0x60], xmm0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x74], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x70], eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x30], ebx
test eax, eax
jne 0x406eeb
mov ecx, dword [esi + 0x14]
mov eax, dword [esi]
add eax, 0x10
push eax
mov eax, dword [ecx]
push ecx
call eax
mov dword [esp + 0x70], eax
test eax, eax
je 0x407289
mov edx, dword [esp + 0x24]
mov dword [eax], 0
test edx, edx
je 0x406ee4
mov dword [edx], eax
jmp 0x406eeb
mov ecx, dword [esp + 0x44]
mov dword [ecx + 8], eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
test ebx, ebx
je 0x406f1c
mov eax, dword [esi + 0x60]
add eax, 0x10
mov dword [esp + 0x14], ebx
add eax, dword [esi + 0x5c]
mov dword [esp + 0x18], 0
mov dword [esp + 0x28], ebx
mov dword [esp + 0x3c], eax
jmp 0x407035
mov edi, dword [esi]
mov edx, eax
mov eax, dword [esi + 0xc]
xor ebx, ebx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x80], eax
test edi, edi
je 0x406f72
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], edi
push ecx
push edx
push eax
mov eax, dword [eax]
call eax
mov edx, dword [esp + 0x5c]
mov ecx, eax
mov eax, dword [esp + 0x1c]
add ebx, eax
add edx, eax
mov dword [esp + 0x60], ecx
sub edi, eax
mov dword [esp + 0x5c], edx
test ecx, ecx
jne 0x4070df
test eax, eax
je 0x406f72
mov eax, dword [esp + 0x80]
test edi, edi
jne 0x406f34
xor edi, edi
add dword [esp + 0x14], ebx
mov eax, ebx
mov edx, dword [esp + 0x18]
adc edx, 0
cmp dword [esp + 0x24], 0
mov dword [esp + 0x18], edx
cmovne eax, dword [esp + 0x28]
add dword [esi + 0x68], ebx
mov dword [esp + 0x28], eax
adc dword [esi + 0x6c], 0
xor ecx, ecx
cmp ebx, dword [esi]
setne cl
mov dword [esp + 0x10], ecx
je 0x406fae
mov dword [esi + 0x70], 1
test edi, edi
je 0x406fc6
mov dword [esi + 0x48], edi
xor edi, edi
mov dword [esi + 0x70], 1
mov dword [esp + 0x10], 1
mov ecx, dword [esp + 0x14]
mov eax, edx
sub ecx, dword [esp + 0x78]
sbb eax, dword [esp + 0x74]
mov dword [esp + 0x84], eax
jne 0x406fe2
cmp ecx, 1
jb 0x407035
push dword [esp + 0x94]
lea edx, [esp + 0x6c]
mov ecx, esi
push dword [esp + 0x94]
push 0
push 0
push 0
push 0
call fcn.00406c30
mov edx, dword [esp + 0x68]
mov edi, eax
mov dword [esp + 0x20], edx
test edi, edi
jne 0x407319
test edx, edx
jne 0x407319
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0xd8], ebx
cmp dword [esp + 0x24], eax
lea ecx, [esp + 0xd0]
push ecx
mov ecx, dword [esp + 0x48]
sete al
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x14]
push dword [ecx + 4]
mov dword [esp + 0xe4], eax
mov eax, dword [esi + 0x18]
push dword [esi + 0x1c]
mov dword [esp + 0xf0], 1
mov eax, dword [eax]
call eax
mov edx, dword [esp + 0xe0]
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x58], 1
mov dword [esp + 0x2c], eax
cmp edx, 1
je 0x4072e8
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4070e8
push dword [esp + 0xd8]
push dword [esp + 0x40]
push dword [esp + 0x40]
call fcn.00441fd0
mov ecx, dword [esp + 0xe4]
add esp, 0xc
add dword [esi + 0x60], ecx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0xe0]
jmp 0x4070ef
mov edi, dword [esp + 0x60]
jmp 0x406f74
mov ecx, dword [esp + 0xd8]
test edx, edx
jne 0x407155
cmp dword [esp + 0x10], edx
jne 0x407174
cmp ecx, ebx
jne 0x407124
mov eax, dword [esp + 0x70]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x24], eax
mov eax, dword [eax]
mov dword [esp + 0x70], eax
test ebx, ebx
je 0x406eb4
xor ebx, ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
jmp 0x406eb0
xor ebx, ebx
mov dword [esp + 0x34], 0
mov edi, 0xb
mov dword [esp + 0x3c], ebx
mov eax, 1
mov dword [esp + 0x54], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], 0
jmp 0x40757b
mov edx, dword [esp + 0x10]
cmp dword [esp + 0xe0], 3
cmove edx, dword [esp + 0xf0]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x40], 1
cmp ecx, ebx
jne 0x4071eb
mov dword [esi + 0x60], 0
mov dword [esi + 0x64], 0
xor ebx, ebx
mov dword [esp + 0x34], ebx
mov edx, dword [esp + 0x20]
test edi, edi
jne 0x407351
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0x88], edi
je 0x407330
mov eax, dword [esp + 0x94]
cmp eax, dword [esi + 0x94]
jb 0x407330
ja 0x4071e1
mov eax, dword [esp + 0x90]
cmp eax, dword [esi + 0x90]
jbe 0x407330
mov eax, 1
jmp 0x407332
cmp edx, 3
jne 0x40724d
mov dword [esi + 0x60], 0
mov dword [esi + 0x64], 0
test eax, eax
je 0x407224
mov eax, ebx
sub eax, ecx
push eax
mov eax, dword [esp + 0x40]
add eax, ecx
push eax
mov eax, dword [esp + 0x40]
add eax, ecx
push eax
call fcn.00441fd0
mov ecx, dword [esp + 0xe4]
add esp, 0xc
mov eax, dword [esp + 0x3c]
sub ebx, ecx
add eax, ecx
sub dword [esp + 0x14], ebx
mov dword [esp + 0x34], eax
sbb dword [esp + 0x18], 0
cmp dword [esp + 0x24], 0
jne 0x407194
mov dword [esp + 0x28], ecx
jmp 0x407194
test eax, eax
je 0x40725f
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0
jmp 0x4072cb
mov eax, dword [esi + 0x5c]
test eax, eax
jne 0x407282
mov ecx, dword [esi + 0x14]
mov eax, dword [esi]
add eax, 0x10
push eax
mov eax, dword [ecx]
push ecx
call eax
test eax, eax
je 0x407289
mov ecx, dword [esp + 0xd8]
mov dword [esi + 0x5c], eax
lea edx, [eax + 0x10]
test edx, edx
jne 0x40729e
mov dword [esp + 0x10], 1
mov dword [esp + 0x4c], 1
jmp 0x40718e
mov eax, dword [esp + 0x3c]
sub ebx, ecx
sub dword [esp + 0x14], ebx
push ebx
sbb dword [esp + 0x1c], 0
add eax, ecx
push eax
push edx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x60], 0
call fcn.00441fd0
mov ecx, dword [esp + 0xe4]
add esp, 0xc
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
cmove edx, ecx
mov dword [esp + 0x28], edx
jmp 0x40718e
cmp dword [esp + 0x30], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0x6c], 1
je 0x407180
push ebx
push dword [esp + 0x40]
push dword [esp + 0x40]
call fcn.00441fd0
add esp, 0xc
jmp 0x407180
mov ecx, dword [esp + 0x28]
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x28], ecx
jmp 0x407198
xor eax, eax
mov edi, dword [esi + 0x9c]
mov dword [esp + 0x20], eax
mov dword [esp + 0x68], eax
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x3c], 0
test edi, edi
jne 0x407137
test ecx, ecx
je 0x407462
test edx, edx
jne 0x407137
mov ecx, dword [esp + 0x44]
mov eax, dword [esi + 0x18]
push dword [ecx + 4]
mov eax, dword [eax + 4]
push dword [esi + 0x1c]
call eax
mov ecx, eax
mov dword [esp + 0x3c], ecx
test ecx, ecx
je 0x40746a
xorps xmm0, xmm0
mov dword [esp + 0x40], edi
mov dword [esp + 0x10], 1
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], edi
movlpd qword [esp + 0x88], xmm0
movlpd qword [esp + 0xb0], xmm0
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x98], xmm0
mov eax, dword [esp + 0x64]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x44]
push 0xffffffffffffffff
push dword [eax + 0x20]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x407f25
cmp dword [esi + 0x24], 0
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x80], 1
mov dword [esp + 0x2c], eax
jne 0x407f23
cmp dword [esi + 0x50], 0
je 0x407b9e
mov eax, 1
mov dword [esp + 0x20], eax
mov dword [esp + 0x68], eax
jmp 0x407c14
mov eax, dword [esp + 0x84]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x14], eax
jmp 0x407355
test edx, edx
jne 0x407137
mov eax, dword [esp + 0x10]
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
test eax, eax
jne 0x40757b
mov ecx, dword [esi + 0x58]
mov eax, ecx
cmp ecx, dword [esi + 0x54]
jae 0x407531
cmp dword [esp + 0x2c], 0
je 0x407531
add ecx, 5
lea eax, [ecx + ecx*4]
lea eax, [esi + eax*8]
mov ecx, eax
mov dword [esp + 0x1c], eax
call fcn.00406970
mov ecx, eax
test ecx, ecx
jne 0x4074fd
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x18], ecx
jne 0x40750c
lea ecx, [esp + 0xf4]
push ecx
push 0
push eax
push fcn.00407fc0
push 0
push 0
call fcn.004428b5
mov ecx, dword [esp + 0x34]
add esp, 0x18
mov dword [ecx + 0x18], eax
test eax, eax
jne 0x40750c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
mov ecx, 1
cmovne ecx, eax
test ecx, ecx
je 0x40750c
jle 0x407508
movzx ecx, cx
or ecx, 0x80070000
test ecx, ecx
jne 0x407514
inc dword [esi + 0x58]
mov eax, dword [esi + 0x58]
jmp 0x407531
mov eax, dword [esi + 0x58]
cmp eax, 1
jne 0x40752e
mov dword [esp + 0x10], eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x50], ecx
jmp 0x40757b
mov dword [esi + 0x54], eax
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx + 4]
inc ecx
cmp ecx, eax
sbb eax, eax
and eax, ecx
add eax, 5
lea eax, [eax + eax*4]
push dword [esi + eax*8 + 0x1c]
lea eax, [esi + eax*8]
mov dword [esp + 0x58], eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x407577
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
mov ecx, 1
cmovne ecx, eax
test ecx, ecx
je 0x407577
mov eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x6c]
xorps xmm0, xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], esi
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x80], edx
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0x34]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], eax
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x98], xmm0
movlpd qword [esp + 0x88], xmm0
movlpd qword [esp + 0xb0], xmm0
test edi, edi
jne 0x4073cd
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x40], edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x14], eax
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x98], xmm0
test edx, edx
je 0x4073cd
cmp dword [esp + 0x80], 0
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0xa8]
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0x78]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0x24]
mov dword [esp + 0x34], ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x6c], esi
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x40], edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x18], eax
movlpd qword [esp + 0x60], xmm0
movlpd qword [esp + 0x98], xmm0
jne 0x4073cd
mov eax, dword [esp + 0x44]
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x30]
mov eax, dword [eax + 8]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0x48]
movlpd qword [esp + 0x60], xmm0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x74]
movlpd qword [esp + 0x98], xmm0
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x78]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x88]
nop dword [eax]
nop dword [eax + eax]
add edx, dword [esp + 0x70]
mov dword [esp + 0x88], edx
adc ecx, 0
mov dword [esp + 0x7c], 1
mov dword [esp + 0x8c], ecx
cmp edx, dword [esp + 0x14]
jne 0x4077f0
cmp ecx, dword [esp + 0x18]
jne 0x4077f0
mov edx, 1
jmp 0x4077f2
xor edx, edx
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xa4], eax
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0xb4]
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x58]
push eax
lea eax, [esp + 0x90]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x48]
push eax
mov eax, dword [esp + 0x38]
push edx
push dword [esp + 0x80]
add eax, 0x10
mov dword [esp + 0xac], ecx
mov ecx, dword [esi + 0x18]
push eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xd8], ebx
push dword [eax + 4]
mov eax, dword [ecx + 8]
push dword [esi + 0x1c]
call eax
mov dword [esp + 0x3c], eax
test eax, eax
jne 0x407b32
cmp dword [esp + 0x7c], eax
jne 0x4073f3
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
cmp edx, dword [esp + 0x14]
jne 0x4078d0
cmp ecx, dword [esp + 0x18]
je 0x4073f3
mov eax, edx
mov esi, ecx
sub eax, dword [esp + 0x30]
sbb esi, dword [esp + 0x24]
mov dword [esp + 0x74], esi
mov esi, dword [esp + 0xb0]
sub esi, dword [esp + 0x48]
mov dword [esp + 0x78], esi
mov esi, dword [esp + 0xb4]
sbb esi, dword [esp + 0x38]
cmp dword [esp + 0x74], 0
mov dword [esp + 0xa8], esi
mov esi, dword [esp + 0xa0]
ja 0x407927
jb 0x407916
cmp eax, 1
jae 0x407927
cmp dword [esp + 0xa8], 0
ja 0x407927
cmp dword [esp + 0x78], 1
jb 0x40799f
push dword [esp + 0x94]
lea edx, [esp + 0x6c]
mov ecx, esi
push dword [esp + 0x94]
push dword [esp + 0xb0]
push dword [esp + 0x84]
push dword [esp + 0x84]
push eax
call fcn.00406c30
mov edi, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x20], eax
test edi, edi
jne 0x4073f3
test eax, eax
jne 0x4073f3
mov esi, dword [esp + 0xb0]
mov ecx, dword [esp + 0x8c]
mov eax, ecx
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x38], esi
mov esi, dword [esp + 0xa0]
jmp 0x4079a7
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x30], ebx
mov ebx, dword [esi]
mov esi, dword [esp + 0xa4]
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0xcc]
mov dword [esp + 0x58], esi
mov esi, dword [esp + 0xbc]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0xc4]
mov dword [esp + 0x6c], esi
mov esi, dword [esp + 0xc8]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x14], esi
mov eax, dword [eax]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0xac]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0x98]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x88]
sub eax, edx
mov dword [esp + 0x40], esi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x54], esi
sbb eax, ecx
mov esi, dword [esp + 0x80]
mov dword [esp + 0x50], esi
xor esi, esi
cmp esi, eax
mov dword [esp + 0x70], ebx
mov ebx, dword [esp + 0xc0]
mov esi, dword [esp + 0xa0]
mov eax, dword [esp + 0x10]
jb 0x4077c0
ja 0x407a86
mov eax, dword [esp + 0x7c]
cmp dword [esp + 0x70], eax
mov eax, dword [esp + 0x10]
jbe 0x4077c0
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x98]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x80]
mov dword [esp + 0x10], eax
mov dword [esp + 0x50], edx
jmp 0x4077ad
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0x88], 0
je 0x407b68
mov eax, dword [esp + 0x94]
cmp eax, dword [esi + 0x94]
ja 0x407b8c
jb 0x407b68
mov eax, dword [esp + 0x90]
cmp eax, dword [esi + 0x90]
jae 0x407b8c
mov eax, dword [esp + 0x90]
mov dword [esi + 0x90], eax
mov eax, dword [esp + 0x94]
mov dword [esi + 0x94], eax
mov dword [esi + 0x88], 1
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4073f3
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x4c]
test eax, eax
je 0x407bbf
cmp eax, 2
mov dword [esi + 0x4c], eax
mov eax, 1
mov dword [esi + 0x50], 1
cmove ecx, eax
mov eax, dword [esp + 0x50]
test eax, eax
je 0x407bd9
mov dword [esi + 0x50], 1
mov dword [esi + 0x40], eax
mov dword [esp + 0x2c], 0
test ecx, ecx
je 0x407bf3
mov dword [esi + 0x50], 1
mov dword [esi + 0x38], 1
mov dword [esp + 0x2c], 0
cmp dword [esp + 0x6c], 0
mov eax, dword [esp + 0x20]
je 0x407c14
mov dword [esi + 0x50], 1
mov dword [esi + 0x3c], 1
mov dword [esp + 0x2c], 0
cmp dword [esp + 0x40], 0
je 0x407d09
test eax, eax
je 0x407c38
xorps xmm0, xmm0
movlpd qword [esp + 0x88], xmm0
movlpd qword [esp + 0xb0], xmm0
mov edi, dword [esp + 0x88]
sub edi, dword [esp + 0x30]
mov eax, dword [esp + 0x8c]
sbb eax, dword [esp + 0x24]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xb0]
sub eax, dword [esp + 0x48]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xb4]
sbb eax, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add edi, dword [esi + 0xa0]
mov ecx, dword [esp + 0x98]
adc ecx, dword [esi + 0xa4]
mov edx, dword [esp + 0xac]
add edx, dword [esi + 0xa8]
mov eax, dword [esp + 0x1c]
adc eax, dword [esi + 0xac]
cmp dword [esi + 0x9c], 0
mov dword [esi + 0xa0], edi
mov dword [esi + 0xa4], ecx
mov dword [esp + 0x1c], eax
mov dword [esi + 0xa8], edx
mov dword [esi + 0xac], eax
jne 0x407cf6
mov eax, dword [esi + 0x98]
test eax, eax
je 0x407cf6
push dword [esp + 0x1c]
push edx
push ecx
push edi
push eax
mov eax, dword [eax]
call eax
test eax, eax
je 0x407cf6
mov dword [esi + 0x9c], 0xa
mov edi, dword [esi + 0x9c]
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x10]
xor eax, eax
test ecx, ecx
sete al
cmp dword [esp + 0x58], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 0xb8], eax
je 0x407e07
test edi, edi
jne 0x407d3f
cmp dword [esp + 0x2c], edi
je 0x407d3f
cmp dword [esp + 0x20], edi
jne 0x407d3f
lea ecx, [edi + 1]
jmp 0x407d41
xor ecx, ecx
mov eax, dword [esi + 0x18]
lea edx, [esp + 0x80]
push edx
lea edx, [esp + 0xbc]
push edx
mov eax, dword [eax + 0xc]
push ebx
push dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x58]
push dword [ecx + 4]
push dword [esi + 0x1c]
call eax
mov edi, eax
test edi, edi
je 0x407d80
mov dword [esp + 0x60], 1
mov dword [esi + 0x50], 1
jmp 0x407d97
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x407e07
test ecx, ecx
jne 0x407e07
lea ebx, [esi + 0xb0]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0x88], 0
je 0x407dcd
mov eax, dword [esp + 0x94]
cmp eax, dword [esi + 0x94]
ja 0x407df1
jb 0x407dcd
mov eax, dword [esp + 0x90]
cmp eax, dword [esi + 0x90]
jae 0x407df1
mov eax, dword [esp + 0x90]
mov dword [esi + 0x90], eax
mov eax, dword [esp + 0x94]
mov dword [esi + 0x94], eax
mov dword [esi + 0x88], 1
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x80], 0
je 0x407e7e
cmp dword [esp + 0x40], 0
je 0x407e3b
test edi, edi
jne 0x407e3b
cmp dword [esi + 0x50], edi
jne 0x407e3b
cmp dword [esp + 0x3c], edi
jne 0x407e3b
cmp dword [esp + 0x20], edi
jne 0x407e3b
cmp dword [esi + 0x84], edi
jne 0x407e53
cmp dword [esp + 0x60], edi
je 0x407e7e
cmp dword [esi + 0x84], 0
jne 0x407e53
mov edi, dword [esp + 0x44]
mov eax, dword [edi + 4]
mov dword [esi + 0x80], eax
jmp 0x407e57
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x14]
mov eax, ebx
mov edx, dword [esp + 0x18]
or eax, edx
jne 0x407e69
test ecx, ecx
jne 0x407e9f
mov eax, dword [esp + 0x28]
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], edx
inc dword [esi + 0x84]
jmp 0x407e82
mov edi, dword [esp + 0x44]
test ecx, ecx
jne 0x407e9f
mov eax, dword [esp + 0x54]
push dword [eax + 0x20]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x407f09
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x407ef5
cmp dword [esp + 0x1c], 0
je 0x407ed2
push dword [esi + 0xe8]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x407ee5
call ebx
test eax, eax
mov ecx, 1
cmovne ecx, eax
test ecx, ecx
jne 0x40756e
jmp 0x407ee5
cmp dword [edi + 4], 0
je 0x407f23
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x24], 1
push dword [esi + 0xe4]
call dword [sym.imp.KERNEL32.dll_SetEvent]
test eax, eax
jne 0x407f09
call ebx
test eax, eax
mov ecx, 1
cmovne ecx, eax
test ecx, ecx
jne 0x40756e
push 0xffffffffffffffff
push dword [edi + 0x1c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x406dd0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret