Function at 0x432a00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x56f2e4
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x5d480c]
xor eax, esp
mov dword [esp + 0x254], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5d480c]
xor eax, esp
push eax
lea eax, [esp + 0x26c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x280]
mov edi, dword [esp + 0x284]
mov esi, ecx
xor ebx, ebx
lea ecx, [esp + 0x70]
mov dword [esp + 0x18], esi
mov dword [esp + 0x40], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x64], ebx
call fcn.0046909a
mov dword [esp + 0x274], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x3c], ebx
call fcn.0045e1b2
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x432a93
push 0x80004005
call fcn.004017e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0x274], 1
call fcn.0045e1b2
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x432ac5
push 0x80004005
call fcn.004017e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x84], eax
mov byte [esp + 0x274], 2
call fcn.0045e1b2
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x432afa
push 0x80004005
call fcn.004017e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0x274], 3
call fcn.0045e1b2
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x432b2f
push 0x80004005
call fcn.004017e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x27c]
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x27c], 4
mov dword [esp + 0x7c], 0xffffffff
call fcn.00426760
add esp, 8
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x278], 5
call fcn.0041a0d0
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov byte [esp + 0x274], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432b9e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esi + 0x33b0]
push ebx
push 0x8020
push eax
lea ecx, [esp + 0x7c]
call fcn.00469688
cmp eax, ebx
jne 0x432bf0
cmp dword [esi + 0x3248], ebx
je 0x43358c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 0x33b0]
mov edx, dword [esp + 0x14]
push eax
mov eax, dword [esi + 0x3248]
push ecx
push edx
push str.Layer__s__ERROR:DownloadDemoImage___open__s_failed_err_d
push eax
call fcn.004d2ee0
add esp, 0x14
jmp 0x43358c
push 0x100
lea ecx, [esp + 0xa4]
push ecx
lea ecx, [esp + 0x78]
call fcn.00468d8e
cmp eax, 0x100
je 0x432c45
cmp dword [esi + 0x3248], ebx
je 0x43358c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi + 0x33b0]
mov ecx, dword [esi + 0x3248]
push eax
mov eax, dword [esp + 0x18]
push edx
push eax
push str.Layer__s__ERROR:DownloadDemoImage___read__s_failed_err_d
push ecx
call fcn.004d2ee0
add esp, 0x14
jmp 0x43358c
lea edx, [esp + 0xa5]
push str.user
push edx
call fcn.004c049f
add esp, 8
test eax, eax
jne 0x432c66
mov dword [esp + 0x64], 1
mov ecx, ebp
call fcn.004da840
test eax, eax
jne 0x432c87
mov ecx, ebp
call fcn.004da830
test eax, eax
je 0x432c87
add dword [esp + 0x288], 0x2000
mov eax, dword [esi + 0x3248]
cmp eax, ebx
je 0x432cbc
mov ecx, dword [esp + 0xcd]
mov edx, dword [esp + 0xc9]
push ecx
mov ecx, dword [esp + 0x28c]
push edx
mov edx, dword [esp + 0x1c]
push ecx
push edx
push str.Layer__s__INFO:Start_to_download_demo_offset0x_x_size_I64u
push eax
call fcn.004d2ee0
add esp, 0x18
lea eax, [esp + 0x44]
push eax
mov ecx, ebp
call fcn.004dc210
mov eax, dword [eax]
mov edx, dword [edi]
mov edx, dword [edx + 0x3c]
push ebx
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x94]
push ecx
push eax
mov ecx, edi
mov byte [esp + 0x284], 6
call edx
mov edi, eax
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov byte [esp + 0x274], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432d17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp edi, ebx
je 0x432d42
mov esi, dword [esi + 0x3248]
cmp esi, ebx
je 0x43358c
mov ecx, dword [esp + 0x14]
push edi
push ecx
push str.Layer__s__ERROR:DownloadDemoImage___RKU_TestDeviceReady_failed_err_d
push esi
call fcn.004d2ee0
add esp, 0x10
jmp 0x43358c
mov ecx, dword [esp + 0x80]
mov ebx, 1
shl ebx, cl
shl ebx, 4
mov dword [esp + 0x68], ebx
shl ebx, 9
push ebx
mov dword [esp + 0x48], ebx
call fcn.00450c61
push ebx
mov dword [esp + 0x28], eax
call fcn.00450c61
mov ecx, dword [esp + 0xd1]
mov edx, dword [esp + 0x290]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0xd5]
xor ebp, ebp
add esp, 8
mov edi, eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x60], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x30], edx
mov dword [esp + 0x50], ebp
test eax, eax
jb 0x432fb7
ja 0x432db8
test ecx, ecx
jbe 0x432fb7
mov eax, dword [esp + 0x20]
push ebx
push 0
push eax
call fcn.00493420
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
add esp, 0xc
mov ecx, edi
sub ecx, ebp
sbb eax, dword [esp + 0x60]
xor edx, edx
cmp eax, edx
jb 0x432dec
ja 0x432de4
cmp ecx, ebx
jb 0x432dec
mov esi, dword [esp + 0x68]
mov edi, ebx
jmp 0x432dfc
sub edi, ebp
mov esi, edi
shr esi, 9
test edi, 0x1ff
je 0x432dfc
inc esi
mov ecx, dword [esp + 0x20]
push edi
push ecx
lea ecx, [esp + 0x78]
call fcn.00468d8e
cmp eax, edi
jne 0x43307e
mov edx, ebp
or edx, dword [esp + 0x60]
jne 0x432ed5
cmp dword [esp + 0x64], edx
je 0x432ed5
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0x48]
push eax
call fcn.004dc210
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
mov eax, dword [eax]
mov edx, dword [edx + 0x3c]
push 0xf9
push 0
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x40]
push eax
mov byte [esp + 0x284], 7
call edx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x274], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432e89
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x58], 0
jne 0x4330b6
mov eax, dword [esp + 0x54]
test eax, eax
je 0x433129
cmp eax, 0xffffffff
je 0x433129
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jbe 0x4330e5
sub eax, ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x54], eax
cmp dword [ecx + 0x20], eax
jb 0x433107
mov dword [ecx + 0x20], eax
mov edx, dword [esp + 0x54]
mov dword [ecx + 0xc20], edx
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0x38]
push eax
call fcn.004dc210
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x20]
mov eax, dword [eax]
mov edx, dword [edx + 0x44]
push 1
push ecx
mov ecx, dword [esp + 0x38]
push esi
push ecx
mov ecx, dword [esp + 0x44]
push eax
mov byte [esp + 0x288], 8
call edx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x274], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432f36
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x58], 0
jne 0x433154
mov eax, dword [esp + 0x24]
add ebp, edi
adc dword [esp + 0x60], 0
add dword [esp + 0x30], esi
add eax, edi
mov dword [esp + 0x24], eax
cmp eax, 0x100000
jb 0x432f95
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x284]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x2c]
push 9
push edx
call fcn.00426a20
sub dword [esp + 0x24], 0x100000
mov dword [esp + 0x50], 1
mov eax, dword [esp + 0x60]
cmp eax, dword [esp + 0x2c]
jb 0x432db8
ja 0x432faf
cmp ebp, dword [esp + 0x28]
jb 0x432db8
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x27c]
push 2
push eax
push ebp
push edi
push ecx
push 9
push ebx
mov ecx, esi
call fcn.00426a20
cmp dword [esp + 0xc5], 0
je 0x433322
cmp dword [esi + 0x3218], 0
jne 0x433322
mov edx, dword [esp + 0x288]
xor ebx, ebx
push ebx
push ebx
push 0x100
lea ecx, [esp + 0x7c]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x5c], ebx
call fcn.00468e1d
cmp edi, ebx
jb 0x4332fc
ja 0x433030
cmp dword [esp + 0x28], ebx
jbe 0x4332fc
mov edi, edi
mov esi, dword [esp + 0x44]
mov ebp, dword [esp + 0x20]
push esi
push 0
push ebp
call fcn.00493420
mov eax, dword [esp + 0x48]
push esi
push 0
push eax
call fcn.00493420
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
add esp, 0x18
mov ecx, edi
sub ecx, ebx
sbb eax, dword [esp + 0x4c]
xor edx, edx
cmp eax, edx
jb 0x433189
ja 0x433075
cmp ecx, esi
jb 0x433189
mov edi, dword [esp + 0x68]
jmp 0x43319b
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x3248], 0
je 0x43358c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x3248]
push eax
push ecx
push str.Layer__s__ERROR:DownloadDemoImage___Read_data_from_file_failed_in_write_file_err_d_read_d_ret_d
push edx
call fcn.004d2ee0
add esp, 0x18
jmp 0x43358c
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x3248]
test eax, eax
je 0x43358c
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x14]
push ecx
push edx
push str._LAYER__s__ERROR:DownloadDemoImage___Get_user_sectors_failed_RetCode__d_
push eax
call fcn.004d2ee0
add esp, 0x10
jmp 0x43358c
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x3248]
test eax, eax
je 0x43358c
mov ecx, dword [esp + 0x14]
push ecx
push str._LAYER__s__ERROR:RKA_File_Download___Availabe_total_is_smaller_than_user_offset
push eax
jmp 0x433584
mov edx, dword [esp + 0x18]
mov eax, dword [edx + 0x3248]
test eax, eax
je 0x43358c
mov ecx, dword [esp + 0x14]
push ecx
push str._LAYER__s__ERROR:RKA_File_Download___Original_size_is_smaller_than_current_user_size
push eax
jmp 0x433584
mov edx, dword [esp + 0x18]
mov ecx, dword [edx + 0x3248]
test ecx, ecx
je 0x43358c
push eax
mov eax, dword [esp + 0x18]
push eax
push str._LAYER__s__ERROR:RKA_File_Download___User_size_is_wrong_value0x_x
push ecx
call fcn.004d2ee0
add esp, 0x10
jmp 0x43358c
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x3248]
test eax, eax
je 0x43358c
mov edx, dword [esp + 0x58]
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x18]
push ecx
push ebp
push edx
push str.Layer__s__ERROR:DownloadDemoImage___RKU_WriteLBA_failed_Written__d__RetCode__d_
push eax
call fcn.004d2ee0
add esp, 0x18
jmp 0x43358c
mov esi, edi
sub esi, ebx
mov edi, esi
shr edi, 9
test esi, 0x1ff
je 0x43319b
inc edi
push esi
push ebp
lea ecx, [esp + 0x78]
call fcn.00468d8e
cmp eax, esi
jne 0x43336f
mov ecx, ebx
or ecx, dword [esp + 0x4c]
jne 0x4331cd
cmp dword [esp + 0x64], ecx
je 0x4331cd
mov edx, dword [esp + 0x54]
mov dword [ebp + 0x20], edx
mov eax, dword [esp + 0x54]
mov dword [ebp + 0xc20], eax
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [esp + 0x44]
call fcn.004dc210
mov ebp, dword [esp + 0x3c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
push 1
push ebp
mov ebp, dword [esp + 0x38]
push edi
push ebp
push eax
mov eax, dword [edx + 0x1c]
mov byte [esp + 0x288], 9
call eax
lea ecx, [esp + 0x38]
mov ebp, eax
mov byte [esp + 0x274], 4
call fcn.00403e00
test ebp, ebp
jne 0x43350e
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x20]
add ebx, esi
adc dword [esp + 0x4c], ebp
add dword [esp + 0x30], edi
mov edi, esi
cmp esi, 4
jb 0x433246
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x43324a
sub edi, 4
add ecx, 4
add edx, 4
cmp edi, 4
jae 0x433232
test edi, edi
je 0x433291
movzx eax, byte [edx]
movzx ebp, byte [ecx]
sub eax, ebp
jne 0x433285
cmp edi, 1
jbe 0x433291
movzx eax, byte [edx + 1]
movzx ebp, byte [ecx + 1]
sub eax, ebp
jne 0x433285
cmp edi, 2
jbe 0x433291
movzx eax, byte [edx + 2]
movzx ebp, byte [ecx + 2]
sub eax, ebp
jne 0x433285
cmp edi, 3
jbe 0x433291
movzx eax, byte [edx + 3]
movzx ecx, byte [ecx + 3]
sub eax, ecx
sar eax, 0x1f
or eax, 1
jne 0x4333a7
mov eax, dword [esp + 0x24]
add eax, esi
mov dword [esp + 0x24], eax
cmp eax, 0x100000
jb 0x4332da
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x284]
push ebx
push ecx
mov ecx, dword [esp + 0x28]
push edx
push 0xa
push eax
call fcn.00426a20
sub dword [esp + 0x24], 0x100000
mov dword [esp + 0x50], 1
mov ecx, dword [esp + 0x4c]
cmp ecx, dword [esp + 0x2c]
jb 0x433030
ja 0x4332f4
cmp ebx, dword [esp + 0x28]
jb 0x433030
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x27c]
push 2
push edx
push ebx
push edi
push eax
push 0xa
push ecx
mov ecx, esi
call fcn.00426a20
mov ebx, dword [esp + 0x27c]
cmp byte [esp + 0xa4], 1
jne 0x433538
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0xa5]
push edx
push eax
push ecx
push ebx
mov ecx, esi
call fcn.004321d0
test eax, eax
jne 0x4336c4
mov esi, dword [esi + 0x3248]
test esi, esi
je 0x43358c
mov edx, dword [esp + 0x14]
push edx
push str.Layer__s__ERROR:DownloadDemoImage___HandleDemoMiscExt4_failed
jmp 0x433583
mov edi, dword [esp + 0x18]
cmp dword [edi + 0x3248], 0
je 0x43358c
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [edi + 0x3248]
push edx
push str.Layer__s__ERROR:DownloadDemoImage___Read_data_from_file_failed_in_check_file_err_d_read_d_ret_d
push eax
call fcn.004d2ee0
add esp, 0x18
jmp 0x43358c
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x3248]
test ecx, ecx
je 0x4333d5
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x14]
shrd ebx, eax, 0xa
shr eax, 0xa
push eax
push ebx
push edx
push str.Layer__s__ERROR:DownloadDemoImage___memcmp_failed_Checked__dK_
push ecx
call fcn.004d2ee0
add esp, 0x14
cmp dword [esi + 0x3248], 0
je 0x43358c
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [esp + 0x9c]
movzx edx, word [esp + 0x9a]
movzx eax, word [esp + 0x98]
push ecx
push edx
push eax
lea ecx, [esp + 0x1ac]
push str._02d__02d__02d
push ecx
call fcn.00495368
mov ecx, dword [esi + 0x3248]
add esp, 0x14
lea edx, [esp + 0x38]
push edx
call fcn.004d28c0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x278], 0xa
call fcn.0041a0d0
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 4
call fcn.00403e00
lea eax, [esp + 0x1a0]
push eax
lea ecx, [esp + 0x20]
call fcn.0041f1f0
push str.file.bin
lea ecx, [esp + 0x20]
call fcn.0041f1f0
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x20]
push edi
push ecx
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.004071f0
mov ecx, dword [esi + 0x3248]
call fcn.004d2780
mov ecx, dword [esi + 0x3248]
lea eax, [esp + 0x38]
push eax
call fcn.004d28c0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x278], 0xb
call fcn.0041a0d0
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 4
call fcn.00403e00
lea ecx, [esp + 0x1a0]
push ecx
lea ecx, [esp + 0x20]
call fcn.0041f1f0
push str.flash.bin
lea ecx, [esp + 0x20]
call fcn.0041f1f0
mov edx, dword [esp + 0x3c]
push edi
push edx
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.004071f0
mov ecx, dword [esi + 0x3248]
call fcn.004d2780
jmp 0x43358c
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x3248]
test eax, eax
je 0x43358c
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
push ebp
push edx
push ebx
push ecx
push str.Layer__s__ERROR:DownloadDemoImage___RKU_ReadLBA_failed_Read__d__RetCode__d_
push eax
call fcn.004d2ee0
add esp, 0x18
jmp 0x43358c
lea eax, [esp + 0xa5]
push str.user
push eax
call fcn.004c049f
add esp, 8
test eax, eax
jne 0x4336a0
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x40]
push ecx
push edx
push ebx
mov ecx, esi
call fcn.00431400
test eax, eax
jne 0x4336c4
mov esi, dword [esi + 0x3248]
test esi, esi
je 0x43358c
mov eax, dword [esp + 0x14]
push eax
push str.Layer__s__ERROR:DownloadDemoImage___HandleDemoMiscUser_failed
push esi
call fcn.004d2ee0
add esp, 0xc
or esi, 0xffffffff
cmp dword [esp + 0x74], esi
je 0x43359e
lea ecx, [esp + 0x70]
call fcn.00469034
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4335af
push eax
call fcn.00450c6c
add esp, 4
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4335c0
push eax
call fcn.00450c6c
add esp, 4
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x274], 3
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4335e7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
mov byte [esp + 0x274], 2
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433611
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
mov byte [esp + 0x274], 1
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43363b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x274], 0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433662
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x274], esi
call fcn.0046928f
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x26c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x254]
xor ecx, esp
call fcn.00493eee
add esp, 0x264
ret 0x10
push 8
lea ecx, [esp + 0xa9]
push str.userdata
push ecx
call fcn.0049559a
add esp, 0xc
test eax, eax
jne 0x43356f
jmp 0x433330
mov dword [esp + 0x6c], 1
jmp 0x43358c