Function at 0x48faf0
Capabilities:
Capture webcam image
Hide graphical window

Disassembly:
mov eax, dword [esp + 0x10]
sub esp, 0x3c
push ebx
push ebp
push esi
mov esi, ecx
xor ebp, ebp
push edi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [eax], ebp
mov ecx, dword [esi + 4]
push 0x3ea
push ecx
call edi
mov edx, dword [esi + 4]
push 0x3ec
push edx
mov dword [esi + 0x26c], eax
call edi
mov dword [esi + 0x270], eax
mov eax, dword [esi + 4]
push 0x3ed
push eax
call edi
mov ecx, 0x4de490
mov dword [esi + 0x274], eax
test ecx, ecx
lea edi, [esi + 0x230]
je 0x48fb54
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, eax
jmp 0x48fb56
xor ebx, ebx
push ebx
mov ecx, edi
call fcn.00401420
test eax, eax
je 0x48fb7d
mov edx, dword [edi]
inc ebx
push ebx
push 0x4de490
push edx
call fcn.004011c0
add esp, 0xc
mov ecx, edi
push 0xffffffffffffffff
call fcn.00401970
push 0x28
call fcn.004c58a5
mov edi, eax
add esp, 4
cmp edi, ebp
je 0x48fbd1
mov dword [edi + 8], ebp
mov eax, dword [0x4d9540]
lea ebx, [edi + 0x1c]
mov ecx, str.Last_File_Filter
test ecx, ecx
mov dword [ebx], eax
mov dword [edi], 0x4d4a4c
jne 0x48fbad
xor eax, eax
jmp 0x48fbb8
push str.Last_File_Filter
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.Last_File_Filter
push eax
mov ecx, ebx
call fcn.00401630
mov ecx, edi
call fcn.00490be0
mov dword [edi + 0x20], ebp
jmp 0x48fbd3
xor edi, edi
push 0x28
mov dword [esi + 0x18c], edi
call fcn.004c58a5
mov edi, eax
add esp, 4
cmp edi, ebp
je 0x48fc2a
mov dword [edi + 8], ebp
mov edx, dword [0x4d9540]
lea ebx, [edi + 0x1c]
mov eax, str.Last_File_Filter
test eax, eax
mov dword [ebx], edx
mov dword [edi], 0x4d4a4c
je 0x48fc11
push str.Last_File_Filter
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.Last_File_Filter
push eax
mov ecx, ebx
call fcn.00401630
mov ecx, edi
call fcn.00490be0
mov dword [edi + 0x20], ebp
jmp 0x48fc2c
xor edi, edi
mov eax, dword [esi + 0x18c]
mov dword [esi + 0x224], edi
cmp eax, ebp
je 0x48fded
mov ecx, str.include_ac
lea edi, [eax + 0x1c]
test ecx, ecx
jne 0x48fc50
xor eax, eax
jmp 0x48fc5b
push str.include_ac
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.include_ac
push eax
mov ecx, edi
call fcn.00401630
mov edx, dword [esi + 0x18c]
push ecx
mov ecx, esp
mov dword [edx + 0x20], 0x4ed1d0
mov eax, dword [esi + 0x18c]
mov dword [eax + 0x24], 0x4ed1e0
mov edi, dword [esi + 0x18c]
lea edx, [edi + 0x1c]
push edx
call fcn.00401200
lea eax, [esp + 0x14]
push eax
call fcn.004819f0
add esp, 8
lea ecx, [esp + 0x18]
call fcn.004650f0
push 0x4e3a28
push 0x4db08c
lea ecx, [esp + 0x18]
call fcn.0040fcd0
lea ecx, [esp + 0x10]
push 0xa
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.004895b0
mov ecx, dword [edi + 0x20]
mov ebx, dword [esp + 0x2c]
add esp, 0xc
call fcn.004925f0
mov ecx, dword [edi + 0x24]
call fcn.00492570
test ebx, ebx
jle 0x48fd64
mov eax, dword [esp + 0x18]
lea ecx, [eax + ebp*4]
push ecx
lea ecx, [esp + 0x60]
call fcn.00401200
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
lea eax, [edx + ebp*4]
push eax
call fcn.00401200
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [edi + 0x24]
call fcn.004b2c40
cmp eax, 0xffffffff
jne 0x48fd4d
mov edx, dword [esp + 0x14]
push edx
call fcn.004c553e
add esp, 4
push eax
push ecx
lea eax, [esp + 0x64]
mov ecx, esp
push eax
call fcn.00401200
mov ecx, dword [edi + 0x24]
call fcn.00492320
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [edi + 0x20]
call fcn.0045b570
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x5c]
call fcn.004014c0
inc ebp
cmp ebp, ebx
jl 0x48fce9
lea ecx, [esp + 0x18]
call fcn.00401110
lea ecx, [esp + 0x10]
call fcn.004014c0
mov ebx, dword [esi + 0x18c]
mov ebp, dword [esi + 0x26c]
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x48fded
mov eax, dword [ebx + 8]
lea edi, [ebx + 8]
test eax, eax
jne 0x48fded
push 0x17
push 0
push 0x4d4e58
mov ecx, edi
call fcn.00492660
test eax, eax
jl 0x48fded
mov edx, dword [edi]
lea ecx, [esp + 0x5c]
push edx
call fcn.00492680
mov eax, dword [esp + 0x5c]
push 0x21
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
lea ecx, [esp + 0x5c]
call fcn.00415190
lea ecx, [esp + 0x5c]
call fcn.004a7410
mov edi, dword [edi]
push str.www._s.com
push 0
push ebx
mov edx, dword [edi]
push ebp
push edi
call dword [edx + 0xc]
test eax, eax
jl 0x48fded
mov dword [ebx + 0x14], 1
mov eax, dword [esi + 0x224]
test eax, eax
je 0x48ffa6
lea edi, [eax + 0x1c]
mov eax, str.exclude_ac
test eax, eax
je 0x48fe12
push str.exclude_ac
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.exclude_ac
push eax
mov ecx, edi
call fcn.00401630
mov ecx, dword [esi + 0x224]
push ecx
mov dword [ecx + 0x20], 0x4ed1b0
mov edx, dword [esi + 0x224]
mov ecx, esp
mov dword [edx + 0x24], 0x4ed1c0
mov edi, dword [esi + 0x224]
lea eax, [edi + 0x1c]
push eax
call fcn.00401200
lea ecx, [esp + 0x14]
push ecx
call fcn.004819f0
add esp, 8
lea ecx, [esp + 0x18]
call fcn.004650f0
push 0x4e3a28
push 0x4db08c
lea ecx, [esp + 0x18]
call fcn.0040fcd0
lea edx, [esp + 0x10]
push 0xa
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.004895b0
mov ecx, dword [edi + 0x20]
mov ebx, dword [esp + 0x2c]
add esp, 0xc
call fcn.004925f0
mov ecx, dword [edi + 0x24]
call fcn.00492570
xor ebp, ebp
test ebx, ebx
jle 0x48ff1d
mov ecx, dword [esp + 0x18]
lea edx, [ecx + ebp*4]
lea ecx, [esp + 0x5c]
push edx
call fcn.00401200
mov eax, dword [esp + 0x1c]
lea ecx, [eax + ebp*4]
push ecx
lea ecx, [esp + 0x18]
call fcn.00401200
mov ecx, dword [edi + 0x24]
lea edx, [esp + 0x5c]
push edx
call fcn.004b2c40
cmp eax, 0xffffffff
jne 0x48ff06
mov eax, dword [esp + 0x14]
push eax
call fcn.004c553e
add esp, 4
lea edx, [esp + 0x5c]
push eax
push ecx
mov ecx, esp
push edx
call fcn.00401200
mov ecx, dword [edi + 0x24]
call fcn.00492320
mov ecx, dword [edi + 0x20]
lea eax, [esp + 0x5c]
push eax
call fcn.0045b570
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x5c]
call fcn.004014c0
inc ebp
cmp ebp, ebx
jl 0x48fea2
lea ecx, [esp + 0x18]
call fcn.00401110
lea ecx, [esp + 0x10]
call fcn.004014c0
mov ebx, dword [esi + 0x224]
mov ebp, dword [esi + 0x270]
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x48ffa6
mov eax, dword [ebx + 8]
lea edi, [ebx + 8]
test eax, eax
jne 0x48ffa6
push 0x17
push 0
push 0x4d4e58
mov ecx, edi
call fcn.00492660
test eax, eax
jl 0x48ffa6
mov ecx, dword [edi]
push ecx
lea ecx, [esp + 0x60]
call fcn.00492680
mov eax, dword [esp + 0x5c]
push 0x21
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
lea ecx, [esp + 0x5c]
call fcn.00415190
lea ecx, [esp + 0x5c]
call fcn.004a7410
mov edi, dword [edi]
push str.www._s.com
push 0
push ebx
mov eax, dword [edi]
push ebp
push edi
call dword [eax + 0xc]
test eax, eax
jl 0x48ffa6
mov dword [ebx + 0x14], 1
push 0x28
call fcn.004c58a5
mov edi, eax
xor ebx, ebx
add esp, 4
cmp edi, ebx
je 0x48ffe2
mov dword [edi + 8], ebx
mov edx, dword [0x4d9540]
lea ecx, [edi + 0x1c]
push str.Last_File_Filter
mov dword [ecx], edx
mov dword [edi], 0x4d4a4c
call fcn.004016e0
mov ecx, edi
call fcn.00490be0
mov dword [edi + 0x20], ebx
jmp 0x48ffe4
xor edi, edi
cmp edi, ebx
mov dword [esi + 0x228], edi
je 0x490185
mov eax, str.exclude_folder_ac
lea ebp, [edi + 0x1c]
test eax, eax
je 0x490009
push str.exclude_folder_ac
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str.exclude_folder_ac
push eax
mov ecx, ebp
call fcn.00401630
push ecx
mov dword [edi + 0x20], 0x4ed190
mov ecx, esp
push ebp
mov dword [edi + 0x24], 0x4ed1a0
call fcn.00401200
lea ecx, [esp + 0x14]
push ecx
call fcn.004819f0
add esp, 8
lea ecx, [esp + 0x18]
call fcn.004650f0
push 0x4e3a28
push 0x4db08c
lea ecx, [esp + 0x18]
call fcn.0040fcd0
lea edx, [esp + 0x10]
push 0xa
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.004895b0
mov ecx, dword [edi + 0x20]
mov ebx, dword [esp + 0x2c]
add esp, 0xc
call fcn.004925f0
mov ecx, dword [edi + 0x24]
call fcn.00492570
xor ebp, ebp
test ebx, ebx
jle 0x4900ff
mov ecx, dword [esp + 0x18]
lea edx, [ecx + ebp*4]
lea ecx, [esp + 0x5c]
push edx
call fcn.00401200
mov eax, dword [esp + 0x1c]
lea ecx, [eax + ebp*4]
push ecx
lea ecx, [esp + 0x18]
call fcn.00401200
mov ecx, dword [edi + 0x24]
lea edx, [esp + 0x5c]
push edx
call fcn.004b2c40
cmp eax, 0xffffffff
jne 0x4900e8
mov eax, dword [esp + 0x14]
push eax
call fcn.004c553e
add esp, 4
lea edx, [esp + 0x5c]
push eax
push ecx
mov ecx, esp
push edx
call fcn.00401200
mov ecx, dword [edi + 0x24]
call fcn.00492320
mov ecx, dword [edi + 0x20]
lea eax, [esp + 0x5c]
push eax
call fcn.0045b570
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x5c]
call fcn.004014c0
inc ebp
cmp ebp, ebx
jl 0x490084
lea ecx, [esp + 0x18]
call fcn.00401110
lea ecx, [esp + 0x10]
call fcn.004014c0
mov eax, dword [edi + 0x14]
mov ebx, dword [esi + 0x274]
test eax, eax
jne 0x490185
mov eax, dword [edi + 8]
lea ebp, [edi + 8]
test eax, eax
jne 0x490185
push 0x17
push 0
push 0x4d4e58
mov ecx, ebp
call fcn.00492660
test eax, eax
jl 0x490185
mov ecx, dword [ebp]
push ecx
lea ecx, [esp + 0x60]
call fcn.00492680
mov eax, dword [esp + 0x5c]
push 0x21
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
lea ecx, [esp + 0x5c]
call fcn.00415190
lea ecx, [esp + 0x5c]
call fcn.004a7410
mov ebp, dword [ebp]
push str.www._s.com
push 0
push edi
mov eax, dword [ebp]
push ebx
push ebp
call dword [eax + 0xc]
test eax, eax
jl 0x490185
mov dword [edi + 0x14], 1
lea ebx, [esi + 0x230]
push ebx
push ecx
mov ecx, esp
push str.include
call fcn.004014f0
push ecx
mov ecx, esp
push str.FindFile
call fcn.004014f0
call fcn.00455510
add esp, 0xc
lea ebp, [esi + 0x234]
push ebp
push ecx
mov ecx, esp
push str.exclude
call fcn.004014f0
push ecx
mov ecx, esp
push str.FindFile
call fcn.004014f0
call fcn.00455510
add esp, 0xc
lea eax, [esi + 0x238]
push eax
push ecx
mov ecx, esp
push str.exclude_folder
call fcn.004014f0
push ecx
mov ecx, esp
push str.FindFile
call fcn.004014f0
call fcn.00455510
mov eax, dword [ebx]
lea ecx, [esp + 0x68]
push eax
push str.Filter
push str.Search
push ecx
call fcn.00480fb0
mov ecx, dword [ebx]
mov edi, eax
add esp, 0x1c
mov eax, dword [edi]
cmp ecx, eax
je 0x49025f
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x490235
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x49023c
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x49024a
mov edx, dword [eax - 8]
push eax
push edx
mov ecx, ebx
call fcn.00401630
jmp 0x49025f
mov ecx, ebx
call fcn.0040e950
mov edi, dword [edi]
mov dword [ebx], edi
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov eax, dword [esp + 0x5c]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49028e
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x49028e
mov edx, dword [esp + 0x5c]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [ebp]
push eax
push str.NFilter
lea eax, [esp + 0x64]
push str.Search
push eax
call fcn.00480fb0
mov ecx, dword [ebp]
mov edi, eax
add esp, 0x10
mov eax, dword [edi]
cmp ecx, eax
je 0x4902f3
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4902c8
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4902cf
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4902dd
mov ecx, dword [eax - 8]
push eax
push ecx
mov ecx, ebp
call fcn.00401630
jmp 0x4902f3
mov ecx, ebp
call fcn.0040e950
mov edi, dword [edi]
mov dword [ebp], edi
add edi, 0xfffffff4
push edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov eax, dword [esp + 0x5c]
mov ecx, dword [0x4d9544]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x490322
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x490322
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff4
push eax
call fcn.004c5432
add esp, 4
mov ecx, dword [0x4de55c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
push str.exclude_hardlinks_and_softlinks
push str.Search
call fcn.00480e80
mov dword [0x4de55c], eax
mov edx, dword [esi + 0x1d8]
push 0xffffffffffffffff
push 0xffffffffffffffff
push edx
push 0x4de560
push str.Search
call fcn.00480e80
add esp, 0x28
mov dword [esi + 0x1d8], eax
mov eax, dword [esi + 4]
push 0x138d
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [0x4de55c]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push ecx
push 0xf1
push eax
call edi
mov edx, dword [ebx]
mov eax, dword [esi + 0x26c]
mov ebx, dword [sym.imp.USER32.dll_SetWindowTextW]
push edx
push eax
call ebx
mov ecx, dword [ebp]
mov edx, dword [esi + 0x270]
push ecx
push edx
call ebx
mov eax, dword [esi + 0x238]
mov ecx, dword [esi + 0x274]
push eax
push ecx
call ebx
mov eax, dword [esi + 4]
push 0xe800
push 0x5600094c
push 0
push 0xf3
push eax
call fcn.0040d730
push 0xe800
mov dword [esi + 0x23c], eax
mov eax, dword [esi + 4]
push 0x5600094c
push 0
push pe_nt_image_headers32
push eax
call fcn.0040d730
add esp, 0x28
mov dword [esi + 0x240], eax
mov edx, dword [esi + 0x25c]
push edx
call dword [sym.imp.USER32.dll_GetParent]
push 0x1d97
push 0x5601094c
push 0
push 0xf0
push eax
call fcn.0040d730
add esp, 0x14
mov dword [esi + 0x244], eax
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x244]
push eax
push ecx
call dword [sym.imp.USER32.dll_SetParent]
mov edx, dword [esi + 0x244]
push edx
call fcn.0043aa50
mov eax, dword [esi + 0x23c]
push eax
call fcn.0043aa50
mov ecx, dword [esi + 0x244]
add esp, 8
push 1
push 0xbd80
push 0x403
push ecx
call edi
push ecx
mov edx, esp
push 0xbb8
push edx
call fcn.0048eb30
mov eax, dword [esi + 0x244]
add esp, 8
push 0xb3b6
push eax
call fcn.004b4cb0
add esp, 8
mov ecx, esp
push 0xbb9
push ecx
call fcn.0048eb30
mov edx, dword [esi + 0x244]
add esp, 8
push 0xb3b8
push edx
call fcn.004b4cb0
add esp, 8
mov eax, esp
push 0xbba
push eax
call fcn.0048eb30
mov ecx, dword [esi + 0x244]
add esp, 8
push 0xb3b7
push ecx
call fcn.004b4cb0
add esp, 8
mov edx, esp
push 0xbbb
push edx
call fcn.0048eb30
mov eax, dword [esi + 0x244]
add esp, 8
push 0xbd80
push eax
call fcn.004b4cb0
mov ecx, dword [esi + 0x244]
add esp, 0xc
push 0
push 0xb3b8
push 0x419
push ecx
call edi
mov edx, dword [esi + 0x244]
push 0
push eax
push 0x416
push edx
call edi
mov eax, dword [esi + 0x244]
push 0
push 0xb3b6
push 0x419
push eax
call edi
mov ecx, dword [esi + 0x244]
push 0
push eax
push 0x416
push ecx
call edi
mov edx, dword [esi + 0x244]
push 0
push 0xb3b7
push 0x419
push edx
call edi
push 0
push eax
mov eax, dword [esi + 0x244]
push 0x416
push eax
call edi
mov ecx, dword [esi + 0x244]
push 0
push 0xbd80
push 0x419
push ecx
call edi
mov edx, dword [esi + 0x244]
push 0
push eax
push 0x416
push edx
call edi
mov eax, dword [esi + 0x23c]
push 0
push 0
push 0x439
push eax
call edi
mov ecx, dword [esi + 0x240]
or ah, 0x10
push eax
push 0
push 0x438
push ecx
call edi
mov edx, dword [esi + 4]
push 0x3f2
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [esp + 0x18]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esi + 4]
mov ebx, dword [sym.imp.USER32.dll_ScreenToClient]
lea edx, [esp + 0x18]
push edx
push eax
call ebx
test eax, eax
je 0x4905f4
mov edx, dword [esi + 4]
lea ecx, [esp + 0x20]
push ecx
push edx
call ebx
push ecx
mov eax, esp
push 0x3ea
push eax
call fcn.0048eb30
mov ecx, dword [esi + 0x240]
add esp, 8
push 0x3f2
push ecx
call fcn.004b4cb0
mov ecx, dword [esi + 0x240]
lea edx, [esp + 0x68]
lea eax, [esp + 0x20]
push edx
push eax
push ecx
call fcn.004b4c50
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x74]
add esp, 0x18
mov ebp, dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [ecx + edx]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], eax
sub eax, ecx
push 0
push eax
mov eax, dword [esp + 0x20]
sub edx, eax
push edx
push ecx
push eax
mov eax, dword [esi + 0x240]
push 0
push eax
call ebp
mov ecx, dword [esi + 0x240]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esi + 0x23c]
push 0
push 0
push 0x439
push edx
call edi
or ah, 0x10
push eax
mov eax, dword [esi + 0x23c]
push 0
push 0x438
push eax
call edi
xor ecx, ecx
mov edx, dword [esi + 0x23c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ecx
push ecx
push 0xb321
push 0x419
push edx
mov dword [esp + 0x58], ecx
call edi
mov ecx, dword [esi + 0x23c]
mov ebx, eax
lea eax, [esp + 0x38]
push eax
push ebx
push 0x417
push ecx
call edi
mov dl, byte [esp + 0x41]
or dl, 9
inc ebx
mov byte [esp + 0x41], dl
lea edx, [esp + 0x38]
push edx
push ebx
push 0x443
mov eax, dword [esi + 0x23c]
push eax
call edi
mov ecx, dword [esi + 0x23c]
push 0
push ebx
push 0x416
push ecx
call edi
mov edx, dword [esi + 0x23c]
push 0
push 0
push 0x421
push edx
call edi
mov ecx, dword [esi + 4]
lea eax, [esp + 0x28]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x34]
mov edx, dword [esi + 0x23c]
sub eax, 6
push 0
mov dword [esp + 0x38], eax
push 0
add eax, 0xffffffe8
push 0x439
push edx
mov dword [esp + 0x3c], eax
call edi
or ah, 0x10
push eax
mov eax, dword [esi + 0x244]
push 0
push 0x438
push eax
call edi
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
sub edx, ecx
push 0
add eax, 0x3e8
push edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0x38], eax
sub eax, edx
push eax
mov eax, dword [esi + 0x244]
push ecx
push edx
push 0
push eax
call ebp
mov eax, dword [esp + 0x30]
mov ecx, esi
sub eax, 0x3e8
mov dword [esp + 0x30], eax
call fcn.00490c60
mov ecx, esi
call fcn.00491cd0
mov ebx, 0x80ba
mov ecx, dword [esi + 0x244]
push 0
push ebx
push 0x401
push ecx
call edi
inc ebx
cmp ebx, 0x80c4
jl 0x4907b2
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3c
ret 0x10