Function at 0x47ae98
Capabilities:
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x2b
push 0
push 0
dec ecx
jne 0x47aea1
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, dword [ebp + 0x14]
lea edi, [ebp - 0x21]
push ecx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop ecx
movsb byte es:[edi], byte [esi]
mov ebx, ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x21]
mov edx, dword [0x458e48]
call fcn.004052a8
xor eax, eax
push ebp
push 0x47c2aa
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0045f8a8
test al, al
je 0x47af19
cmp byte [0x4958c8], 0
je 0x47af19
cmp dword [0x4958c0], 0
jne 0x47af19
mov eax, dword [0x491664]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
jne 0x47af19
mov byte [ebp - 0xb9], 1
jmp 0x47c21b
mov byte [ebp - 0xb9], 0
call fcn.0040aeac
fstp qword [0x49597c]
wait
mov eax, dword [ebp - 0x2c]
mov dword [0x491238], eax
mov dword [0x495984], 1
xor edx, edx
push ebp
push 0x47c1f6
push dword fs:[edx]
mov dword fs:[edx], esp
call fcn.004069fc
mov byte [eax + 0x17d], 1
mov ecx, dword [0x495838]
mov dl, 1
mov eax, dword [0x458d80]
call fcn.0047e858
mov dword [ebp - 0x6c], eax
xor edx, edx
push ebp
push 0x47c1e5
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 0x28], 0
je 0x47af89
mov eax, dword [ebp - 0x28]
mov dword [0x4958f8], eax
test bl, bl
je 0x47af9c
cmp dword [ebp - 0x28], 0
je 0x47af9c
mov eax, dword [ebp - 0x28]
sub eax, 5
mov dword [ebp - 0x28], eax
call fcn.0047aab8
cmp esi, dword [0x492668]
je 0x47afb1
mov ebx, dword [0x492668]
jmp 0x47afb9
mov ebx, dword [0x491430]
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x28]
mov dword [0x495b1c], eax
mov eax, dword [ebp - 0x2c]
mov dword [0x495b18], eax
mov eax, dword [ebp - 0xc]
mov dword [0x495b20], eax
cmp byte [0x490ce8], 0
je 0x47b049
call fcn.004740d8
call fcn.0045da98
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x47b164
mov eax, dword [ebp - 0xd0]
mov edx, dword [eax + 0x23]
mov eax, dword [0x495848]
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [ebp - 0xe8]
call fcn.0047408c
mov edx, dword [ebp - 0xe8]
mov eax, dword [0x495848]
call fcn.00432580
mov eax, dword [0x495848]
mov eax, dword [eax + 0x5c]
call fcn.00404ba0
push eax
call sub.kernel32.dll_GetModuleHandleA_1
mov edx, eax
mov eax, dword [0x495848]
call fcn.0043259c
jmp 0x47b164
xor eax, eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0x28], 0
je 0x47b06f
mov dword [0x495984], 0x65
mov eax, dword [ebp - 0x28]
call fcn.0045dba4
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x47b084
mov eax, dword [ebp - 0xd0]
cmp dword [eax + 0x27], 0
jne 0x47b0cb
mov dword [0x495984], 0x66
mov eax, esi
call fcn.0045da98
mov dword [ebp - 0xd0], eax
mov dword [0x495984], 0x67
cmp dword [ebp - 0xd0], 0
je 0x47b0be
mov eax, dword [ebp - 0xd0]
cmp dword [eax + 0x27], 0
jne 0x47b0cb
test ebx, ebx
je 0x47b0cb
mov eax, ebx
call fcn.0045da98
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov edx, dword [eax + 0x23]
mov eax, dword [0x495848]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [0x495848]
test byte [eax + 0x331], 8
je 0x47b13f
test ebx, ebx
je 0x47b13f
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], eax
mov eax, ebx
call fcn.0045da98
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x47b11e
mov eax, dword [ebp - 0xd0]
cmp dword [eax + 0x27], 0
jne 0x47b12c
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xd0], eax
jmp 0x47b13f
mov eax, dword [ebp - 0xd0]
mov edx, dword [eax + 0x23]
mov eax, dword [0x495848]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0xd0]
mov edx, dword [eax + 4]
mov eax, dword [0x495848]
call fcn.00432580
mov eax, dword [ebp - 0xd0]
mov edx, dword [eax]
mov eax, dword [0x495848]
call fcn.0043259c
xor edx, edx
mov eax, dword [0x495848]
call fcn.00432750
lea ecx, [ebp - 0xec]
mov dl, 0x9a
mov eax, dword [0x495848]
call fcn.00430a50
mov edx, dword [ebp - 0xec]
mov eax, 0x49124c
call fcn.00404718
lea ecx, [ebp - 0xf0]
mov dl, 0x9b
mov eax, dword [0x495848]
call fcn.00430a50
mov edx, dword [ebp - 0xf0]
mov eax, 0x491250
call fcn.00404718
mov dword [0x495984], 0x68
call fcn.0042fea0
test al, al
je 0x47b208
mov eax, dword [0x495848]
mov dx, word [0x47c2c4]
not edx
and dx, word [eax + 0x314]
mov eax, dword [0x495848]
call fcn.00432920
mov ecx, 0x47c2d0
mov dl, 0x1a
mov eax, dword [0x495848]
call fcn.004324f0
mov ecx, 0x47c2fc
mov dl, 0x1b
mov eax, dword [0x495848]
call fcn.004324f0
mov dword [0x495984], 2
xor eax, eax
call fcn.00465d08
push ebp
call fcn.0047acbc
pop ecx
mov byte [ebp - 0xc1], 2
mov byte [ebp - 0xc2], 0
mov eax, dword [0x495848]
mov al, byte [eax + 0x6a]
mov byte [0x495ad4], al
mov byte [0x495ad5], 0
cmp byte [ebp + 8], 2
je 0x47b382
mov eax, dword [0x495848]
cmp byte [eax + 0x2ed], 0
je 0x47b382
push ebp
mov eax, dword [ebp - 0x2c]
call fcn.00477360
pop ecx
mov dword [ebp - 0xc0], eax
mov dword [0x495984], 0xc9
cmp dword [ebp - 0xc0], 0xffffffff
je 0x47b382
mov eax, dword [0x495848]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xc0]
call fcn.00430584
mov al, byte [eax + 0xc]
mov byte [ebp - 0xc2], al
mov eax, dword [0x495848]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xc0]
call fcn.00430584
mov al, byte [eax + 0xb]
mov byte [ebp - 0xc1], al
mov eax, dword [0x495848]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xc0]
call fcn.00430584
movzx eax, byte [eax + 0xa]
cmp eax, 4
ja case.default.0x47b2d9
jmp dword [eax*4 + 0x47b2e0]
mov byte [0x495ad4], 0
jmp case.default.0x47b2d9
mov eax, dword [0x495848]
mov al, byte [eax + 0x6a]
mov byte [0x495ad4], al
jmp case.default.0x47b2d9
mov byte [0x495ad4], 1
jmp case.default.0x47b2d9
mov byte [0x495ad4], 2
jmp case.default.0x47b2d9
mov byte [0x495ad4], 3
mov byte [0x495ad5], 1
mov eax, dword [0x495848]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xc0]
call fcn.00430584
mov eax, dword [eax + 5]
lea edx, [ebp - 0xf4]
call fcn.0042ecf0
cmp dword [ebp - 0xf4], 0
je 0x47b382
mov eax, dword [0x495848]
mov eax, dword [eax + 0x6c]
mov edx, dword [ebp - 0xc0]
call fcn.00430584
mov eax, dword [eax + 5]
lea edx, [ebp - 0xf8]
call fcn.0042ecf0
mov eax, dword [ebp - 0xf8]
call fcn.00465d08
call fcn.0047aa20
mov byte [ebp - 0xba], al
mov dword [0x495984], 3
cmp byte [ebp - 0xc1], 2
jne 0x47c187
cmp dword [ebp - 0x14], 0
jne 0x47b3b2
call fcn.0045b7f0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x10], 0
jne 0x47b3c6
call fcn.004069fc
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x20], 0
jne 0x47b3e8
call fcn.004069fc
cmp dword [eax + 0x60], 0
je 0x47b3e8
call fcn.004069fc
lea eax, [eax + 0x60]
mov dword [ebp - 0x20], eax
mov edx, 0xcc
mov eax, dword [ebp - 0x20]
call fcn.0042f740
test al, al
jne 0x47b3fe
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
jne 0x47b412
call fcn.004069fc
lea eax, [eax + 0x12c]
mov dword [ebp - 0x1c], eax
mov edx, 0x50
mov eax, dword [ebp - 0x1c]
call fcn.0042f740
test al, al
jne 0x47b428
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov dword [0x4958fc], eax
mov dword [0x495984], 4
cmp dword [0x495930], 0
je 0x47b45b
mov edx, dword [ebp - 0x28]
add edx, 5
mov eax, dword [0x495930]
call fcn.00463e8c
test al, al
jne 0x47b8ff
cmp dword [0x491224], 0
je 0x47b46e
mov eax, dword [0x491224]
call fcn.004037c0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x47b49c
mov eax, dword [ebp - 0xc]
push eax
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov al, byte [0x47c30c]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
call fcn.00465ae4
mov dword [0x491224], eax
jmp 0x47b4a1
mov dword [0x491224], eax
lea eax, [ebp - 0xfc]
call fcn.00475190
push dword [ebp - 0xfc]
push ebp
lea eax, [ebp - 0x100]
call fcn.00474b64
pop ecx
push dword [ebp - 0x100]
push ebp
lea eax, [ebp - 0x104]
call fcn.00474ccc
pop ecx
push dword [ebp - 0x104]
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00404a60
mov eax, dword [0x491224]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47b610
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x491224]
call fcn.0047e460
cmp byte [eax], 4
jne 0x47b5fe
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x491224]
call fcn.0047e460
mov ebx, dword [eax + 5]
xor edx, edx
mov eax, dword [0x491224]
call fcn.0047e460
cmp ebx, dword [eax + 5]
jne 0x47b5fe
push dword [ebp - 0xcc]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x491224]
call fcn.0047e460
lea edx, [eax + 0x59]
lea eax, [ebp - 0x108]
call fcn.00404928
push dword [ebp - 0x108]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x491224]
call fcn.0047e460
lea edx, [eax + 0x159]
lea eax, [ebp - 0x10c]
call fcn.00404928
push dword [ebp - 0x10c]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x491224]
call fcn.0047e460
lea edx, [eax + 0x259]
lea eax, [ebp - 0x110]
call fcn.00404928
push dword [ebp - 0x110]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x491224]
call fcn.0047e460
mov eax, dword [eax + 0x35d]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x114]
call fcn.004089f4
push dword [ebp - 0x114]
lea eax, [ebp - 0xcc]
mov edx, 5
call fcn.00404a60
inc dword [ebp - 0xc0]
dec dword [ebp - 0xe4]
jne 0x47b50a
mov eax, dword [ebp - 0xcc]
call fcn.00442680
movzx eax, ax
lea ecx, [ebp - 0x118]
mov edx, 4
call fcn.00408a1c
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 0xcc]
call fcn.0040475c
mov eax, 0x495ad0
mov edx, dword [ebp - 0xcc]
call fcn.00404718
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x6c]
call fcn.0047eb90
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xffffffff
je 0x47b67c
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
call fcn.0047ab90
mov eax, dword [ebp - 0x6c]
call fcn.0047ec7c
xor eax, eax
push ebp
push 0x47b8f8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47b701
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x47b6f3
push ebp
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
call fcn.0047ac04
pop ecx
test al, al
je 0x47b6f3
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_SuspendThread
inc dword [ebp - 0xc0]
dec dword [ebp - 0xe4]
jne 0x47b6ae
xor eax, eax
push ebp
push 0x47b8db
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47b85e
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x47b84c
push ebp
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
call fcn.0047ac04
pop ecx
test al, al
je 0x47b84c
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov dword [ebp - 0xc8], eax
lea ecx, [ebp - 0xe0]
mov edx, 0x10
mov eax, 0xcc
call fcn.00458ca0
mov dword [ebp - 0xdc], eax
xor eax, eax
push ebp
push 0x47b845
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xdc]
mov dword [eax], 0x10003
mov eax, dword [ebp - 0xdc]
push eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_GetThreadContext
test eax, eax
je 0x47b82c
mov eax, dword [ebp - 0xdc]
cmp dword [eax + 0xb8], 0
je 0x47b82c
mov eax, dword [ebp - 0xdc]
cmp dword [eax + 0xc4], 0
je 0x47b82c
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
push eax
push 1
push 1
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov al, byte [0x47c30c]
push eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax + 0xc4]
xor edx, edx
mov eax, dword [0x491224]
call fcn.004657c0
mov eax, dword [ebp - 0xc8]
call fcn.0047ab90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47b84c
mov eax, dword [ebp - 0xe0]
call fcn.00402718
ret
inc dword [ebp - 0xc0]
dec dword [ebp - 0xe4]
jne 0x47b72f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47b8e2
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47b8da
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x47b8cc
push ebp
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
call fcn.0047ac04
pop ecx
test al, al
je 0x47b8cc
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_ResumeThread
inc dword [ebp - 0xc0]
dec dword [ebp - 0xe4]
jne 0x47b887
ret
mov dword [0x495984], 5
cmp byte [ebp + 8], 2
je 0x47c170
mov eax, dword [ebp - 0x6c]
call fcn.0047ec7c
xor edx, edx
push ebp
push 0x47c108
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47b9af
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov ebx, dword [eax]
call sub.kernel32.dll_GetCurrentThreadId_1
cmp ebx, eax
je 0x47b9a1
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x47b9a1
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
call fcn.0047ac64
test al, al
je 0x47b9a1
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_SuspendThread
inc dword [ebp - 0xc0]
dec dword [ebp - 0xe4]
jne 0x47b945
xor edx, edx
push ebp
push 0x47c0e8
push dword fs:[edx]
mov dword fs:[edx], esp
mov dword [0x495984], 6
mov byte [0x495af1], 1
mov eax, dword [0x495848]
test byte [eax + 0x2f0], 0x10
je 0x47b9e6
call fcn.0045e85c
call fcn.0045f1cc
mov dword [0x495984], 7
mov eax, dword [0x491224]
mov dword [0x495b34], eax
mov eax, dword [0x495848]
mov dword [0x495b38], eax
mov eax, dword [ebp - 0x1c]
mov dword [0x495b24], eax
mov eax, dword [ebp - 0x20]
mov dword [0x495b28], eax
mov dword [0x495984], 0x2be
push ebp
call fcn.004784cc
pop ecx
cmp byte [0x490cec], 0
je 0x47ba64
mov eax, 0x495914
mov ecx, dword [0x495914]
mov edx, dword [ebp - 0x38]
call fcn.004049ec
mov byte [0x490cec], 0
call fcn.004040a4
call fcn.004040a4
call fcn.004040a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47c21b
mov eax, 0x495b2c
mov edx, dword [0x495914]
call fcn.00404718
mov dword [0x495984], 0x2bf
mov eax, dword [0x49121c]
mov dword [0x495b30], eax
mov dword [0x495984], 0x2c0
mov dword [0x495910], 0x495b18
mov al, 1
call fcn.004621c0
mov dword [0x495984], 0x2c1
call fcn.0045d2c0
mov dword [0x495984], 0x2c2
push ebp
call fcn.0047acbc
pop ecx
call fcn.0045f670
test al, al
je 0x47baf8
lea eax, [ebp - 0x120]
call fcn.00462650
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x11c]
call fcn.0046296c
mov edx, dword [ebp - 0x11c]
mov eax, 0x4958b0
call fcn.00404718
mov eax, 0x4961f0
mov edx, dword [0x4958b0]
call fcn.00404718
push ebp
call fcn.0047aa60
pop ecx
test al, al
je 0x47bb1d
mov eax, 0x465b94
call fcn.00463dd8
cmp byte [ebp - 0x21], 0
jne 0x47bb2f
mov eax, 0x462c80
call fcn.00463dd8
jmp 0x47bb39
mov eax, 0x462d50
call fcn.00463dd8
mov dword [0x495984], 8
cmp byte [0x495af1], 0
je 0x47c04d
call fcn.0046f25c
mov eax, dword [0x495848]
cmp byte [eax + 0x324], 0
je 0x47bbae
call fcn.0040aeac
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x124]
call fcn.0042ea98
mov edx, dword [ebp - 0x124]
mov eax, dword [0x495978]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x495978]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [0x495848]
cmp eax, dword [edx + 0x328]
jle 0x47bbae
xor edx, edx
mov eax, dword [0x495978]
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov eax, dword [0x495b54]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, 0x463178
call fcn.00463dd8
mov eax, dword [0x495b54]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x47bc03
mov eax, dword [0x495848]
test byte [eax + 0x69], 0x80
je 0x47bc03
lea ecx, [ebp - 0x128]
mov dl, 0x5b
mov eax, dword [0x495848]
call fcn.00430a50
mov edx, dword [ebp - 0x128]
mov ecx, dword [0x495b54]
mov eax, 7
call fcn.004667b4
mov dword [0x495984], 9
inc dword [0x495854]
mov dword [0x495984], 0xa
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x2c]
call fcn.0047457c
mov eax, dword [ebp - 0x130]
lea edx, [ebp - 0x12c]
call fcn.004741e8
mov edx, dword [ebp - 0x12c]
mov eax, 0x495908
call fcn.00404718
mov byte [ebp - 0xbb], 0
mov dword [0x495984], 0xb
cmp byte [0x495ad5], 0
jne 0x47bc73
mov eax, dword [0x495848]
mov al, byte [eax + 0x6a]
mov byte [0x495ad4], al
lea eax, [ebp - 0x140]
call fcn.00467ba8
lea esi, [ebp - 0x140]
mov edi, 0x495dc0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [0x495ad4], 0
je 0x47be5c
mov dword [0x495984], 0xc
mov byte [0x495af0], 1
call fcn.0045d2c0
mov eax, 0x4773bc
call fcn.00463dd8
mov eax, dword [0x495848]
cmp byte [eax + 0x30c], 0
jne 0x47bcda
mov eax, dword [0x495848]
cmp byte [eax + 0x30d], 0
jne 0x47bcda
xor eax, eax
jmp 0x47bcdc
mov al, 1
mov byte [0x495920], al
mov eax, dword [0x495848]
test byte [eax + 0x2f1], 0x10
setne al
mov byte [0x495922], al
mov byte [0x495921], 0
cmp byte [0x495af0], 0
je 0x47beb8
mov dword [0x495984], 0xd
mov al, byte [ebp + 0x10]
call fcn.0047ab4c
sub al, 1
jb 0x47bdcb
je 0x47bd5c
dec al
jne 0x47be46
call fcn.0045f8a8
test al, al
je 0x47bd3f
cmp dword [0x4958c0], 0
je 0x47bd50
push ebp
mov eax, dword [0x495914]
call fcn.0047a880
pop ecx
jmp 0x47be46
mov byte [ebp - 0xb9], 1
jmp 0x47be46
xor eax, eax
push ebp
push 0x47bdac
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x144]
mov ecx, dword [0x495914]
mov edx, dword [ebp - 0x38]
call fcn.004049ec
mov edx, dword [ebp - 0x144]
mov eax, dword [0x491414]
call fcn.00404d90
call fcn.004032ac
call fcn.004028b0
mov byte [0x495af0], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47be46
xor edx, edx
push ebp
push 0x47be29
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [0x495ad4], 3
sete byte [ebp - 0xbb]
mov byte [0x495dad], 0
cmp byte [0x495ad4], 0
setne al
call fcn.0046e230
xor eax, eax
cmp byte [0x495ad4], 0
je 0x47be0f
mov byte [0x495dad], 1
cmp byte [0x495ad4], 0
jne 0x47bdf8
mov byte [0x495af0], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47be46
mov dword [0x495984], 0xe
mov eax, 0x4773e0
call fcn.00463dd8
jmp 0x47beb8
mov eax, dword [0x495848]
cmp byte [eax + 0x30c], 0
jne 0x47be7c
mov eax, dword [0x495848]
cmp byte [eax + 0x30d], 0
jne 0x47be7c
xor eax, eax
jmp 0x47be7e
mov al, 1
mov byte [0x495920], al
mov eax, dword [0x495848]
test byte [eax + 0x2f1], 0x10
setne al
mov byte [0x495922], al
call fcn.0045f8b4
test al, al
je 0x47beb8
push ebp
lea eax, [ebp - 0x148]
call fcn.00465d1c
mov eax, dword [ebp - 0x148]
call fcn.0047a880
pop ecx
cmp byte [ebp - 0xbb], 0
je 0x47bec6
call fcn.00466fe8
mov eax, dword [0x495848]
test byte [eax + 0x2f0], 2
je 0x47bf01
lea ecx, [ebp - 0x14c]
mov dl, 0x7b
mov eax, dword [0x495848]
call fcn.00430a50
mov edx, dword [ebp - 0x14c]
mov eax, dword [0x495848]
mov ecx, dword [eax + 0x344]
mov eax, 7
call fcn.00466658
call fcn.0047aa20
test al, al
je 0x47bf20
lea eax, [ebp - 0x150]
call fcn.00462428
mov eax, dword [ebp - 0x150]
call fcn.0046f940
call fcn.0046f9d0
mov dword [0x495984], 0xf
mov eax, dword [0x495848]
test byte [eax + 0x2f0], 4
je 0x47bfe6
call fcn.004620d8
xor eax, eax
push ebp
push 0x47bf8a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [0x495b64]
call fcn.0044ccfc
mov ecx, eax
dec ecx
mov edx, 0x47c334
mov eax, dword [0x495b64]
call fcn.0044ca88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47bf91
call fcn.004621a4
ret
call fcn.0047aa20
mov byte [ebp - 0xba], al
mov eax, dword [0x495848]
cmp byte [eax + 0x2ef], 0
je 0x47c004
call fcn.004770ac
cmp byte [0x495923], 0
je 0x47c017
mov eax, dword [0x495914]
call fcn.0045d824
mov dword [0x495984], 0x10
cmp byte [ebp - 0xba], 0
je 0x47c02f
call fcn.0047339c
cmp byte [ebp - 0xba], 0
je 0x47c046
mov eax, dword [0x495848]
test byte [eax + 0x2f1], 0x80
jne 0x47c054
call fcn.004733f0
jmp 0x47c054
mov byte [ebp - 0xb9], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47c0f2
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x47c0e7
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov ebx, dword [eax]
call sub.kernel32.dll_GetCurrentThreadId_1
cmp ebx, eax
je 0x47c0d9
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc]
je 0x47c0d9
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
call fcn.0047ac64
test al, al
je 0x47c0d9
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x6c]
call fcn.0047ec08
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_ResumeThread
inc dword [ebp - 0xc0]
dec dword [ebp - 0xe4]
jne 0x47c07d
ret
mov eax, dword [0x495848]
test byte [eax + 0x331], 0x80
je 0x47c197
mov byte [ebp - 0xb9], 1
jmp 0x47c197
cmp byte [ebp - 0xc1], 1
jne 0x47c197
mov byte [ebp - 0xb9], 1
mov dword [0x495984], 0x12
cmp byte [ebp + 8], 2
je 0x47c1c3
cmp byte [ebp - 0xba], 0
je 0x47c1be
mov eax, dword [0x495848]
test byte [eax + 0x2f1], 0x80
jne 0x47c1c3
call fcn.00473500
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47c1ec
mov eax, dword [ebp - 0x6c]
call fcn.004037c0
call fcn.004069fc
mov byte [eax + 0x17d], 0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47c2b4
lea eax, [ebp - 0x160]
mov edx, 8
call fcn.004046e8
lea eax, [ebp - 0x130]
mov edx, 0x13
call fcn.004046e8
lea eax, [ebp - 0xd8]
call fcn.004046c4
lea eax, [ebp - 0xcc]
call fcn.004046c4
lea eax, [ebp - 0xb8]
call fcn.004046c4
lea eax, [ebp - 0x78]
call fcn.004046c4
lea eax, [ebp - 0x68]
call fcn.004046c4
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.004046e8
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.004046e8
lea eax, [ebp - 0x30]
call fcn.004046c4
lea eax, [ebp - 0x21]
mov edx, dword [0x458e48]
call fcn.00405164
ret