Function at 0x40f490
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffcdc
mov eax, 0x69d2ab
xor edx, edx
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0xac], 0x6b0da4
mov dword [ebp - 0xa8], esp
mov dword [ebp - 0xb0], eax
mov word [ebp - 0xa4], 0
mov dword [ebp - 0x98], edx
mov ecx, dword fs:[0]
mov dword [ebp - 0xb4], ecx
lea eax, [ebp - 0xb4]
mov dword fs:[0], eax
mov word [ebp - 0xa4], 0x14
lea edx, [ebp - 0xbc]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
lea eax, [ebp - 0x30]
push eax
call fcn.0069a6ec
add esp, 0xc
inc dword [ebp - 0x98]
lea edx, [ebp - 0x30]
push edx
mov ecx, dword [edi + 0x70]
push ecx
lea eax, [ebp - 0x20]
push eax
call fcn.00410380
add dword [ebp - 0x98], 3
dec dword [ebp - 0x98]
add esp, 0xc
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x40f5ca
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x40f57c
mov esi, dword [ebp - 0x28]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x40f573
cmp esi, 0x6ff36c
je 0x40f56c
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x40f578
mov eax, 1
jmp 0x40f578
mov eax, 1
test eax, eax
jne 0x40f5ca
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff4
mov dword [ebp - 0xc0], edx
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff4
mov dword [ebp - 0xc4], ecx
mov eax, dword [ebp - 0xc4]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xc8], edx
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0xcc], eax
mov edx, dword [ebp - 0xcc]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x21c], ecx
mov word [ebp - 0xa4], 8
lea eax, [ebp - 0x20]
push eax
call fcn.00401484
pop ecx
test al, al
jne 0x40f5f3
lea edx, [ebp - 0x20]
push edx
call fcn.00401498
pop ecx
test al, al
je 0x40f7a4
push ebx
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.006a0d9c
add esp, 8
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
test eax, eax
jne 0x40f64e
mov edx, dword [ebp - 0x18]
push edx
call sub.KERNEL32.DLL_GetFileAttributesA
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xd4]
cmp ecx, 0xffffffff
je 0x40f64e
or word [ebx + 4], 0x180
test byte [ebp - 0xd4], 1
je 0x40f63f
and word [ebx + 4], 0xff7f
test byte [ebp - 0xd4], 2
je 0x40f64e
and word [ebx + 4], 0xfe7f
mov eax, dword [ebp - 0xd0]
push eax
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov edx, dword [ebp - 8]
test edx, edx
je 0x40f6f6
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x40f6a8
mov ebx, dword [ebp - 8]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x40f69f
cmp ebx, 0x6ff36c
je 0x40f698
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x40f6a4
mov eax, 1
jmp 0x40f6a4
mov eax, 1
test eax, eax
jne 0x40f6f6
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0xd8], edx
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
mov dword [ebp - 0xdc], ecx
mov eax, dword [ebp - 0xdc]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xe0], edx
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 8], ecx
mov dword [ebp - 0xe4], eax
mov edx, dword [ebp - 0xe4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x22c], ecx
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40f791
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x40f743
mov esi, dword [ebp - 0x18]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x40f73a
cmp esi, 0x6ff36c
je 0x40f733
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x40f73f
mov eax, 1
jmp 0x40f73f
mov eax, 1
test eax, eax
jne 0x40f791
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff4
mov dword [ebp - 0xe8], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff4
mov dword [ebp - 0xec], ecx
mov eax, dword [ebp - 0xec]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0xf0], edx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0xf4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x23c], ecx
pop eax
mov edx, dword [ebp - 0xb4]
mov dword fs:[0], edx
jmp 0x410376
push 0x800
mov ecx, dword [ebp - 0x18]
push ecx
lea eax, [ebp - 0xa44]
push eax
call fcn.0069d020
add esp, 0xc
mov byte [ebp - 0x245], 0
push 0x5c
lea edx, [ebp - 0xa44]
push edx
call fcn.0069cf25
add esp, 8
mov esi, eax
test esi, esi
jne 0x40f931
or eax, 0xffffffff
push eax
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov edx, dword [ebp - 8]
test edx, edx
je 0x40f883
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x40f835
mov ebx, dword [ebp - 8]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x40f82c
cmp ebx, 0x6ff36c
je 0x40f825
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x40f831
mov eax, 1
jmp 0x40f831
mov eax, 1
test eax, eax
jne 0x40f883
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0xf8], edx
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
mov dword [ebp - 0xfc], ecx
mov eax, dword [ebp - 0xfc]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x100], edx
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x104]
mov ecx, dword [edx + 8]
mov dword [ebp - 0xa4c], ecx
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x40f91e
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x40f8d0
mov esi, dword [ebp - 0x18]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x40f8c7
cmp esi, 0x6ff36c
je 0x40f8c0
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x40f8cc
mov eax, 1
jmp 0x40f8cc
mov eax, 1
test eax, eax
jne 0x40f91e
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff4
mov dword [ebp - 0x108], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff4
mov dword [ebp - 0x10c], ecx
mov eax, dword [ebp - 0x10c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x110], edx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x114]
mov ecx, dword [edx + 8]
mov dword [ebp - 0xa5c], ecx
pop eax
mov edx, dword [ebp - 0xb4]
mov dword fs:[0], edx
jmp 0x410376
mov byte [esi], 0
inc esi
mov eax, esi
lea ecx, [ebp - 0xa44]
sub eax, ecx
mov edx, 0x800
sub edx, eax
lea ecx, [ebp - 0xa44]
dec edx
push edx
push esi
push ecx
mov eax, dword [edi + 0x70]
add eax, 0x48
push eax
call fcn.004b266c
add esp, 0x10
test al, al
je 0x410228
mov edx, dword [ebp + 0x14]
test edx, edx
je 0x41009c
lea ecx, [ebp - 0x20]
push ecx
call fcn.00442aa4
pop ecx
lea eax, [ebp - 0x20]
push eax
call fcn.00442db0
pop ecx
push esi
push edi
xor eax, eax
mov edi, esi
or ecx, 0xffffffff
lea esi, [ebp - 0x1264]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x1264]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push eax
mov edx, dword [edi + 0x70]
push edx
call fcn.00442034
add esp, 8
test al, al
je 0x40fc8f
mov word [ebp - 0xa4], 0x5c
push 0
lea ecx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x120]
push eax
lea edx, [ebp - 0x1264]
push edx
lea ecx, [ebp - 0x40]
push ecx
call fcn.0069a6ec
add esp, 0xc
inc dword [ebp - 0x98]
lea eax, [ebp - 0x40]
push eax
mov edx, dword [edi + 0x70]
push edx
lea ecx, [ebp - 0x60]
push ecx
call fcn.0043fed8
add esp, 0x14
lea eax, [ebp - 0x60]
add dword [ebp - 0x98], 3
mov dword [ebp - 0x118], eax
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x20]
push ecx
call fcn.0069a2e0
add esp, 8
mov eax, dword [ebp - 0x118]
add eax, 0x10
push eax
lea edx, [ebp - 0x10]
push edx
call fcn.0069a2e0
add esp, 8
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x40fb07
mov eax, dword [ebp - 0x48]
mov edx, dword [eax - 0xc]
inc edx
test edx, edx
je 0x40fab9
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff4
mov dword [ebp - 0x124], ecx
mov eax, 0x6ff36c
mov edx, dword [ebp - 0x124]
cmp eax, edx
je 0x40fab0
mov ecx, 0x6ff36c
mov eax, dword [ebp - 0x124]
cmp ecx, eax
je 0x40faa9
mov edx, dword [ebp - 0x124]
push edx
call sub.KERNEL32.DLL_InterlockedDecrement
mov ecx, dword [ebp - 0x124]
mov eax, dword [ecx]
inc eax
jmp 0x40fab5
mov eax, 1
jmp 0x40fab5
mov eax, 1
test eax, eax
jne 0x40fb07
mov edx, dword [ebp - 0x48]
add edx, 0xfffffff4
mov dword [ebp - 0x128], edx
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff4
mov dword [ebp - 0x12c], ecx
mov eax, dword [ebp - 0x12c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x130], edx
lea eax, [ebp - 0x50]
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x134], eax
mov edx, dword [ebp - 0x134]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x126c], ecx
mov word [ebp - 0xa4], 8
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x40fbcb
mov edx, dword [ebp - 0x58]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x40fb7d
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff4
mov dword [ebp - 0x138], eax
mov edx, 0x6ff36c
mov ecx, dword [ebp - 0x138]
cmp edx, ecx
je 0x40fb74
mov eax, 0x6ff36c
mov edx, dword [ebp - 0x138]
cmp eax, edx
je 0x40fb6d
mov ecx, dword [ebp - 0x138]
push ecx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebp - 0x138]
mov edx, dword [eax]
inc edx
jmp 0x40fb79
mov edx, 1
jmp 0x40fb79
mov edx, 1
test edx, edx
jne 0x40fbcb
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff4
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff4
mov dword [ebp - 0x140], ecx
mov eax, dword [ebp - 0x140]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x144], edx
lea eax, [ebp - 0x60]
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x148], eax
mov edx, dword [ebp - 0x148]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x127c], ecx
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x40fef4
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x40fc3c
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff4
mov dword [ebp - 0x14c], eax
mov edx, 0x6ff36c
mov ecx, dword [ebp - 0x14c]
cmp edx, ecx
je 0x40fc2f
mov eax, 0x6ff36c
mov edx, dword [ebp - 0x14c]
cmp eax, edx
je 0x40fc28
mov ecx, dword [ebp - 0x14c]
push ecx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebp - 0x14c]
mov edx, dword [eax]
inc edx
jmp 0x40fc34
mov edx, 1
jmp 0x40fc34
mov edx, 1
test edx, edx
jne 0x40fef4
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff4
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff4
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x154]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x158], edx
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x15c], eax
mov edx, dword [ebp - 0x15c]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x128c], ecx
jmp 0x40fef4
mov word [ebp - 0xa4], 0x8c
push 1
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x164]
push edx
lea ecx, [ebp - 0x1264]
push ecx
lea eax, [ebp - 0x70]
push eax
call fcn.0069a6ec
add esp, 0xc
inc dword [ebp - 0x98]
lea edx, [ebp - 0x70]
push edx
mov ecx, dword [edi + 0x70]
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.0043fed8
add esp, 0x14
lea esi, [ebp - 0x90]
add dword [ebp - 0x98], 3
push esi
lea eax, [ebp - 0x20]
push eax
call fcn.0069a2e0
add esp, 8
add esi, 0x10
push esi
lea eax, [ebp - 0x10]
push eax
call fcn.0069a2e0
add esp, 8
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov edx, dword [ebp - 0x78]
test edx, edx
je 0x40fda0
mov ecx, dword [ebp - 0x78]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x40fd52
mov esi, dword [ebp - 0x78]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x40fd49
cmp esi, 0x6ff36c
je 0x40fd42
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x40fd4e
mov eax, 1
jmp 0x40fd4e
mov eax, 1
test eax, eax
jne 0x40fda0
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff4
mov dword [ebp - 0x168], edx
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff4
mov dword [ebp - 0x16c], ecx
mov eax, dword [ebp - 0x16c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x170], edx
lea eax, [ebp - 0x80]
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x174], eax
mov edx, dword [ebp - 0x174]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x129c], ecx
mov word [ebp - 0xa4], 8
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x40fe59
mov edx, dword [ebp - 0x88]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x40fdff
mov esi, dword [ebp - 0x88]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x40fdf6
cmp esi, 0x6ff36c
je 0x40fdef
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x40fdfb
mov eax, 1
jmp 0x40fdfb
mov eax, 1
test eax, eax
jne 0x40fe59
mov edx, dword [ebp - 0x88]
add edx, 0xfffffff4
mov dword [ebp - 0x178], edx
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff4
mov dword [ebp - 0x17c], ecx
mov eax, dword [ebp - 0x17c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x180], edx
lea eax, [ebp - 0x90]
mov ecx, dword [ebp - 0x180]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x184], eax
mov edx, dword [ebp - 0x184]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x12ac], ecx
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x40fef4
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x40fea6
mov esi, dword [ebp - 0x68]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x40fe9d
cmp esi, 0x6ff36c
je 0x40fe96
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x40fea2
mov eax, 1
jmp 0x40fea2
mov eax, 1
test eax, eax
jne 0x40fef4
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff4
mov dword [ebp - 0x188], edx
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff4
mov dword [ebp - 0x18c], ecx
mov eax, dword [ebp - 0x18c]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x190], edx
lea eax, [ebp - 0x70]
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x194], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x12bc], ecx
push ebx
mov eax, dword [ebp - 0x18]
push eax
call fcn.006a0d9c
add esp, 8
mov edi, eax
test edi, edi
jne 0x40ff45
mov eax, dword [ebp - 0x18]
push eax
call sub.KERNEL32.DLL_GetFileAttributesA
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
cmp edx, 0xffffffff
je 0x40ff45
or word [ebx + 4], 0x180
test byte [ebp - 0x198], 1
je 0x40ff36
and word [ebx + 4], 0xff7f
test byte [ebp - 0x198], 2
je 0x40ff45
and word [ebx + 4], 0xfe7f
mov eax, edi
push eax
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov edx, dword [ebp - 8]
test edx, edx
je 0x40ffe9
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x40ff9b
mov ebx, dword [ebp - 8]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x40ff92
cmp ebx, 0x6ff36c
je 0x40ff8b
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x40ff97
mov eax, 1
jmp 0x40ff97
mov eax, 1
test eax, eax
jne 0x40ffe9
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0x19c], edx
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
mov dword [ebp - 0x1a0], ecx
mov eax, dword [ebp - 0x1a0]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1a4], edx
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x12cc], ecx
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x410084
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x410036
mov esi, dword [ebp - 0x18]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x41002d
cmp esi, 0x6ff36c
je 0x410026
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x410032
mov eax, 1
jmp 0x410032
mov eax, 1
test eax, eax
jne 0x410084
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff4
mov dword [ebp - 0x1ac], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff4
mov dword [ebp - 0x1b0], ecx
mov eax, dword [ebp - 0x1b0]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1b4], edx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x1b8]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x12dc], ecx
pop eax
mov edx, dword [ebp - 0xb4]
mov dword fs:[0], edx
jmp 0x410376
mov word [ebx + 4], 0x1000
mov word [ebx], 2
xor ecx, ecx
mov word [ebx + 2], 0
xor eax, eax
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
xor eax, eax
mov word [ebx + 0x10], 2
mov word [ebx + 6], 1
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0x12cf9510
mov dword [ebx + 0x24], 0x12cf9510
mov dword [ebx + 0x28], 0x12cf9510
push eax
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov edx, dword [ebp - 8]
test edx, edx
je 0x41017a
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x410138
mov ebx, dword [ebp - 8]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x41012f
cmp ebx, 0x6ff36c
je 0x410128
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x410134
mov eax, 1
jmp 0x410134
mov eax, 1
test eax, eax
jne 0x41017a
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0x1bc], edx
mov edi, dword [ebp - 8]
add edi, 0xfffffff4
push edi
call fcn.0067ac7c
pop ecx
xor eax, eax
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 8], edx
mov dword [ebp - 0x1c4], ecx
mov eax, dword [ebp - 0x1c4]
mov edx, dword [eax + 8]
mov dword [ebp - 0x12ec], edx
dec dword [ebp - 0x98]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x410215
mov eax, dword [ebp - 0x18]
mov edx, dword [eax - 0xc]
inc edx
test edx, edx
je 0x4101c7
mov esi, dword [ebp - 0x18]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x4101be
cmp esi, 0x6ff36c
je 0x4101b7
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x4101c3
mov eax, 1
jmp 0x4101c3
mov eax, 1
test eax, eax
jne 0x410215
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff4
mov dword [ebp - 0x1c8], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff4
mov dword [ebp - 0x1cc], ecx
mov eax, dword [ebp - 0x1cc]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1d0], edx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x1d4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x12fc], ecx
pop eax
mov edx, dword [ebp - 0xb4]
mov dword fs:[0], edx
jmp 0x410376
or eax, 0xffffffff
push eax
dec dword [ebp - 0x98]
dec dword [ebp - 0x98]
mov edx, dword [ebp - 8]
test edx, edx
je 0x4102cd
mov ecx, dword [ebp - 8]
mov eax, dword [ecx - 0xc]
inc eax
test eax, eax
je 0x41027f
mov ebx, dword [ebp - 8]
add ebx, 0xfffffff4
cmp ebx, 0x6ff36c
je 0x410276
cmp ebx, 0x6ff36c
je 0x41026f
push ebx
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [ebx]
inc eax
jmp 0x41027b
mov eax, 1
jmp 0x41027b
mov eax, 1
test eax, eax
jne 0x4102cd
mov edx, dword [ebp - 8]
add edx, 0xfffffff4
mov dword [ebp - 0x1d8], edx
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
mov dword [ebp - 0x1dc], ecx
mov eax, dword [ebp - 0x1dc]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1e0], edx
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x1e4], eax
mov edx, dword [ebp - 0x1e4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x130c], ecx
dec dword [ebp - 0x98]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x410368
mov edx, dword [ebp - 0x18]
mov ecx, dword [edx - 0xc]
inc ecx
test ecx, ecx
je 0x41031a
mov esi, dword [ebp - 0x18]
add esi, 0xfffffff4
cmp esi, 0x6ff36c
je 0x410311
cmp esi, 0x6ff36c
je 0x41030a
push esi
call sub.KERNEL32.DLL_InterlockedDecrement
mov eax, dword [esi]
inc eax
jmp 0x410316
mov eax, 1
jmp 0x410316
mov eax, 1
test eax, eax
jne 0x410368
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff4
mov dword [ebp - 0x1e8], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff4
mov dword [ebp - 0x1ec], ecx
mov eax, dword [ebp - 0x1ec]
push eax
call fcn.0067ac7c
pop ecx
xor edx, edx
mov dword [ebp - 0x1f0], edx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1f4], eax
mov edx, dword [ebp - 0x1f4]
mov ecx, dword [edx + 8]
mov dword [ebp - 0x131c], ecx
pop eax
mov edx, dword [ebp - 0xb4]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret