Function at 0x165f410
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xa8
mov eax, dword [0x1854370]
xor eax, esp
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xb0]
push ebp
push esi
xor esi, esi
mov ebp, ecx
mov dword [esp + 0x54], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x7c], eax
cmp dword [ebp + 0x14], esi
je 0x165f509
call fcn.01659590
cmp dword [ebp + 0x28], esi
je 0x165f4d5
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax]
push esi
push esi
push esi
lea edx, [esp + 0x84]
push edx
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x24]
call eax
mov edx, dword [esp + 0x78]
lea ecx, [esp + 0x74]
push ecx
push 0xffffffffffffffff
push edx
lea eax, [esp + 0x78]
push eax
call fcn.01276260
add esp, 0xc
mov ecx, eax
call fcn.01274d20
mov edx, dword [eax]
mov ecx, dword [ebp + 0x2c]
mov dword [ebp + 0x2c], edx
mov dword [eax], ecx
mov eax, dword [esp + 0x74]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f4b0
mov edx, dword [esp + 0x74]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x6c]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f4ca
mov edx, dword [esp + 0x6c]
push edx
call fcn.01273020
add esp, 4
mov eax, dword [esp + 0x78]
push eax
call dword [fcn.016d5388]
mov ecx, dword [ebp + 0x18]
test byte [ecx + 8], 0x20
je 0x165f4f4
mov ecx, ebp
call fcn.0165a920
test eax, eax
je 0x165f4f4
mov edx, dword [ebp + 0x18]
mov eax, dword [edx + 0x1c]
jmp 0x16602ba
mov ecx, ebp
call fcn.0165edc0
mov ecx, ebp
call fcn.0165bbb0
mov ecx, ebp
call fcn.01658270
mov eax, 0x184c178
mov ecx, 1
lock xadd dword [eax], ecx
mov eax, dword [ebp + 0x2c]
mov dword [ebp + 0x2c], 0x184c178
mov edx, eax
or ecx, 0xffffffff
lock xadd dword [edx], ecx
jne 0x165f535
push eax
call fcn.01285a10
add esp, 4
mov eax, dword [ebp + 0x3c]
cmp dword [eax + 8], esi
je 0x165f556
mov edx, dword [ebp + 0x18]
test byte [edx + 8], 4
je 0x165f556
mov eax, dword [eax + 0xc]
push eax
push 0x17ff930
mov ecx, ebp
call fcn.01655740
push 0x2c
call fcn.01666532
add esp, 4
cmp eax, esi
je 0x165f571
mov ecx, eax
call fcn.0165af20
mov dword [esp + 0x14], eax
jmp 0x165f575
mov dword [esp + 0x14], esi
lea eax, [ebp + 8]
mov dword [esp + 0x50], eax
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
push ebx
mov ebx, dword [ebp]
mov ebx, dword [ebx + 0x3c]
lea ecx, [ebp + 4]
mov dword [esp + 0x60], ecx
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
push edi
mov edi, dword [ebp + 0x10]
mov edi, dword [edi + 0x3c]
lea edx, [ebp + 0xc]
lea eax, [eax + eax*4]
lea edi, [ebx + edi*2]
lea ecx, [eax + edi*2]
mov dword [esp + 0x14], edx
mov edx, dword [edx]
mov eax, dword [edx + 0x3c]
lea eax, [eax + eax*2]
lea ebx, [ecx + eax + 0xb]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x34]
cmp ecx, 1
je 0x165f5ca
lea ecx, [ebp + 0x10]
call fcn.01658a90
mov eax, dword [ebp + 0x10]
mov edi, dword [eax + 4]
mov edx, dword [eax + 0x34]
cmp edx, 1
je 0x165f5e0
lea ecx, [ebp + 0x10]
call fcn.01658a90
mov eax, dword [ebp + 0x10]
cmp edi, eax
je 0x165f5f8
mov ecx, dword [edi - 4]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 8]
mov edi, dword [edi + 4]
lea ebx, [ebx + edx*2]
jmp 0x165f5d0
xor ecx, ecx
mov eax, ebx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0166459c
mov edi, eax
mov dword [edi], 1
xor edx, edx
mov dword [edi + 4], edx
mov eax, dword [ebp]
mov ecx, dword [eax + 0x3c]
mov eax, dword [esp + 0x5c]
mov dword [edi + 8], ecx
mov dword [edi + 0xc], 0xa
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x3c]
mov eax, dword [esp + 0x68]
mov eax, dword [eax]
add ecx, dword [eax + 0x3c]
mov eax, dword [edi + 8]
mov dword [edi + 0x10], ecx
mov ecx, dword [esp + 0x18]
lea eax, [eax + eax + 0xa]
mov dword [edi + 0x14], eax
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x3c]
mov dword [edi + 0x18], ecx
mov ecx, dword [edi + 0x10]
lea eax, [eax + ecx*4]
add eax, ecx
mov dword [edi + 0x1c], eax
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx + 0x3c]
mov dword [edi + 0x20], ecx
mov ecx, dword [edi + 0x18]
lea eax, [eax + ecx*2]
add eax, ecx
mov dword [edi + 0x24], eax
add esp, 4
mov dword [edi + ebx*4 - 4], edx
cmp dword [ebp + 0x14], edx
je 0x165f6a0
mov ecx, dword [ebp + 0x14]
lea ebx, [edx + 1]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
push eax
lea ecx, [esp + 0x60]
call fcn.0128e840
mov ecx, dword [esp + 0x78]
jmp 0x165f6c1
mov ecx, dword [esp + 0x84]
mov ecx, dword [ecx]
mov ebx, 2
mov dword [esp + 0x78], ecx
mov edx, ecx
mov eax, 1
lock xadd dword [edx], eax
lea eax, [esp + 0x78]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
mov edx, 1
lock xadd dword [eax], edx
test bl, 2
je 0x165f6ec
and ebx, 0xfffffffd
mov eax, ecx
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x165f6ec
push ecx
call fcn.01285a10
add esp, 4
test bl, 1
je 0x165f70b
mov eax, dword [esp + 0x5c]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f70b
mov edx, dword [esp + 0x5c]
push edx
call fcn.01285a10
add esp, 4
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
cmp ecx, 1
jne 0x165f72e
mov edx, dword [esp + 0x10]
cmp dword [edx + 4], 0x2000
jge 0x165f73c
push 0x2000
lea ecx, [esp + 0x14]
call fcn.0128ea10
mov eax, dword [ebp]
mov eax, dword [eax + 0x34]
mov esi, dword [edi + 0xc]
cmp eax, 1
je 0x165f751
mov ecx, ebp
call fcn.01653fd0
mov ecx, dword [ebp]
mov ebx, dword [ecx + 4]
mov eax, dword [ebp]
mov edx, dword [eax + 0x34]
cmp edx, 1
je 0x165f769
mov ecx, ebp
call fcn.01653fd0
cmp ebx, dword [ebp]
je 0x165f818
mov eax, dword [ebx - 8]
mov dword [esp + 0x70], eax
mov ecx, 1
lock xadd dword [eax], ecx
mov eax, dword [ebx - 4]
mov dword [esp + 0x44], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x70]
mov dword [edi + esi*4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov dword [edi + esi*4 + 4], ecx
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x14]
add esi, 2
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x44]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f7f6
mov edx, dword [esp + 0x44]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x70]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f810
mov edx, dword [esp + 0x70]
push edx
call fcn.01285a10
add esp, 4
mov ebx, dword [ebx + 4]
jmp 0x165f757
mov ebx, dword [esp + 0x64]
mov eax, dword [ebx]
mov eax, dword [eax + 0x34]
cmp eax, 1
je 0x165f82d
mov ecx, ebx
call fcn.01654170
mov ecx, dword [ebx]
mov ebp, dword [ecx + 4]
mov eax, dword [ebx]
mov edx, dword [eax + 0x34]
cmp edx, 1
je 0x165f843
mov ecx, ebx
call fcn.01654170
cmp ebp, dword [ebx]
je 0x165f9c8
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
push ecx
lea edx, [esp + 0x2c]
push edx
call fcn.01288ed0
mov eax, dword [ebp - 0x10]
add esp, 8
mov dword [esp + 0x54], eax
mov ecx, 1
lock xadd dword [eax], ecx
mov eax, dword [ebp - 0xc]
mov dword [esp + 0x6c], eax
mov edx, 1
lock xadd dword [eax], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 8], 0
lea eax, [ebp - 4]
je 0x165f8a5
mov ecx, dword [esp + 0x1c]
push eax
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x98]
push eax
add ecx, 0x24
call fcn.01654c00
mov dword [esp + 0x4c], 0x184c178
mov ecx, 0x184c178
mov edx, 1
lock xadd dword [ecx], edx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov ebx, dword [ebp - 8]
lea edx, [esp + 0x28]
mov dword [edi + esi*4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x6c]
mov dword [edi + esi*4 + 4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x54]
mov dword [edi + esi*4 + 8], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x4c]
mov dword [edi + esi*4 + 0xc], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x4c]
mov dword [edi + esi*4 + 0x10], ebx
add esi, 5
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f96e
mov edx, dword [esp + 0x4c]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x6c]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f988
mov edx, dword [esp + 0x6c]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x54]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f9a2
mov edx, dword [esp + 0x54]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x28]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165f9bc
mov edx, dword [esp + 0x28]
push edx
call fcn.01285a10
add esp, 4
mov ebp, dword [ebp + 4]
mov ebx, dword [esp + 0x64]
jmp 0x165f832
mov ebx, dword [esp + 0x58]
mov eax, dword [ebx]
mov eax, dword [eax + 0x34]
cmp eax, 1
je 0x165f9dd
mov ecx, ebx
call fcn.01654170
mov ecx, dword [ebx]
mov ebp, dword [ecx + 4]
mov eax, dword [ebx]
mov edx, dword [eax + 0x34]
cmp edx, 1
je 0x165f9f3
mov ecx, ebx
call fcn.01654170
cmp ebp, dword [ebx]
je 0x165fb78
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
push ecx
lea edx, [esp + 0x34]
push edx
call fcn.01288ed0
mov eax, dword [ebp - 0x10]
add esp, 8
mov dword [esp + 0x50], eax
mov ecx, 1
lock xadd dword [eax], ecx
mov eax, dword [ebp - 0xc]
mov dword [esp + 0x48], eax
mov edx, 1
lock xadd dword [eax], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 8], 0
lea eax, [ebp - 4]
je 0x165fa55
mov ecx, dword [esp + 0x1c]
push eax
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x90]
push eax
add ecx, 0x24
call fcn.01654c00
mov dword [esp + 0x40], 0x184c178
mov ecx, 0x184c178
mov edx, 1
lock xadd dword [ecx], edx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov ebx, dword [ebp - 8]
lea edx, [esp + 0x30]
mov dword [edi + esi*4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x48]
mov dword [edi + esi*4 + 4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x50]
mov dword [edi + esi*4 + 8], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x40]
mov dword [edi + esi*4 + 0xc], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x40]
mov dword [edi + esi*4 + 0x10], ebx
add esi, 5
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165fb1e
mov edx, dword [esp + 0x40]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x48]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165fb38
mov edx, dword [esp + 0x48]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x50]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165fb52
mov edx, dword [esp + 0x50]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x30]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165fb6c
mov edx, dword [esp + 0x30]
push edx
call fcn.01285a10
add esp, 4
mov ebp, dword [ebp + 4]
mov ebx, dword [esp + 0x58]
jmp 0x165f9e2
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
cmp eax, 1
je 0x165fb8b
call fcn.016542a0
mov ebp, dword [esp + 0x14]
mov ecx, dword [ebp]
mov ebx, dword [ecx + 4]
mov eax, dword [ebp]
mov edx, dword [eax + 0x34]
cmp edx, 1
je 0x165fba7
mov ecx, ebp
call fcn.016542a0
cmp ebx, dword [ebp]
je 0x165fd03
mov eax, dword [ebx - 0x10]
mov dword [esp + 0x38], eax
mov ecx, 1
lock xadd dword [eax], ecx
mov eax, dword [ebx - 0xc]
mov dword [esp + 0x20], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [ebx - 4]
mov dword [esp + 0x24], eax
mov ecx, 1
lock xadd dword [eax], ecx
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 8]
test eax, eax
je 0x165fc58
mov ecx, dword [esp + 0x20]
cmp eax, dword [ecx + 8]
jne 0x165fc3a
mov ecx, dword [ecx + 0xc]
mov ebp, dword [edx + 0xc]
cmp eax, 4
jb 0x165fc15
nop
mov edx, dword [ebp]
cmp edx, dword [ecx]
jne 0x165fc3a
sub eax, 4
add ecx, 4
add ebp, 4
cmp eax, 4
jae 0x165fc00
test eax, eax
je 0x165fc58
mov dl, byte [ecx]
cmp dl, byte [ebp]
jne 0x165fc3a
cmp eax, 1
jbe 0x165fc58
mov dl, byte [ecx + 1]
cmp dl, byte [ebp + 1]
jne 0x165fc3a
cmp eax, 2
jbe 0x165fc58
mov al, byte [ecx + 2]
cmp al, byte [ebp + 2]
je 0x165fc58
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0xa8]
push eax
add ecx, 0x24
call fcn.01654c00
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 8]
mov ebp, dword [ebx - 8]
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x14]
mov dword [edi + esi*4], edx
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 8]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x14]
mov dword [edi + esi*4 + 4], edx
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov ecx, dword [esp + 0x24]
mov dword [edi + esi*4 + 8], ebp
add esi, 3
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x165fcc3
mov eax, dword [esp + 0x24]
push eax
call fcn.01285a10
add esp, 4
mov ecx, dword [esp + 0x20]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x165fcdd
mov eax, dword [esp + 0x20]
push eax
call fcn.01285a10
add esp, 4
mov ecx, dword [esp + 0x38]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x165fcf7
mov eax, dword [esp + 0x38]
push eax
call fcn.01285a10
add esp, 4
mov ebx, dword [ebx + 4]
mov ebp, dword [esp + 0x14]
jmp 0x165fb95
mov ebp, dword [esp + 0x18]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0x34]
mov edx, dword [ecx + 0x3c]
lea ebx, [esi + edx*4]
cmp eax, 1
je 0x165fd20
lea ecx, [ebp + 0x10]
call fcn.01658a90
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
mov dword [esp + 0x14], edx
lea ebx, [ebx]
mov ebp, dword [esp + 0x18]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x34]
cmp eax, 1
je 0x165fd47
lea ecx, [ebp + 0x10]
call fcn.01658a90
mov ecx, dword [esp + 0x14]
cmp ecx, dword [ebp + 0x10]
je 0x165fdd0
mov eax, dword [ecx - 8]
mov dword [esp + 0x60], eax
mov edx, 1
lock xadd dword [eax], edx
mov eax, dword [ecx - 4]
mov ebp, dword [eax + 0xc]
sub ebp, dword [eax + 8]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x60]
mov dword [edi + esi*4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x60]
mov dword [edi + esi*4 + 4], 0
mov dword [edi + esi*4 + 8], ebp
mov dword [edi + esi*4 + 0xc], ebx
add esi, 4
lea ebx, [ebx + ebp*2]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165fdc0
mov edx, dword [esp + 0x60]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 4]
mov dword [esp + 0x14], ecx
jmp 0x165fd30
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 0x34]
cmp edx, 1
je 0x165fde3
lea ecx, [ebp + 0x10]
call fcn.01658a90
mov eax, dword [ebp + 0x10]
mov ebp, dword [eax + 4]
mov dword [esp + 0x14], ebp
lea ecx, [ecx]
mov ebx, dword [esp + 0x18]
mov eax, dword [ebx + 0x10]
mov ecx, dword [eax + 0x34]
cmp ecx, 1
je 0x165fe07
lea ecx, [ebx + 0x10]
call fcn.01658a90
cmp ebp, dword [ebx + 0x10]
je 0x165fea8
mov eax, dword [ebp - 4]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0xc]
lea ebp, [eax + edx*4 + 0x14]
lea edx, [eax + ecx*4 + 0x14]
cmp ebp, edx
je 0x165fe96
mov eax, dword [ebp]
mov eax, dword [eax]
mov dword [esp + 0x68], eax
mov ecx, 1
lock xadd dword [eax], ecx
mov edx, dword [ebp]
mov eax, dword [esp + 0x10]
mov ebx, dword [edx + 4]
mov ecx, dword [eax + 8]
lea edx, [esp + 0x68]
mov dword [edi + esi*4], ecx
push edx
lea ecx, [esp + 0x14]
call fcn.0128ebe0
push 0
lea ecx, [esp + 0x14]
call fcn.0128edb0
mov eax, dword [esp + 0x68]
mov dword [edi + esi*4 + 4], ebx
add esi, 2
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165fe81
mov edx, dword [esp + 0x68]
push edx
call fcn.01285a10
add esp, 4
mov eax, dword [esp + 0x14]
mov eax, dword [eax - 4]
mov ecx, dword [eax + 0xc]
add ebp, 4
lea edx, [eax + ecx*4 + 0x14]
cmp ebp, edx
jne 0x165fe25
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 4]
mov dword [esp + 0x14], ecx
mov ebp, ecx
jmp 0x165fdf0
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 8]
push eax
call fcn.0166459c
mov esi, eax
mov dword [esi], 0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
push ecx
push edx
push esi
call fcn.016665c0
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0xcc]
mov ebp, dword [esp + 0x28]
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], 0
mov dword [ebx + 4], esi
mov dword [ebx], eax
mov eax, dword [ebp + 0x18]
add esp, 0x10
test eax, eax
je 0x165fefa
mov dword [eax + 0x1c], ebx
mov ecx, dword [ebp + 0x38]
cmp dword [ecx + 8], 0
lea eax, [ebp + 0x38]
je 0x166029c
mov edx, dword [ebp + 0x18]
add edx, 0x1c
push edx
push eax
lea eax, [esp + 0xa0]
push eax
mov ecx, 0x1853efc
call 0x12c74f0
mov eax, dword [ebp + 0x18]
or dword [eax + 8], 8
mov esi, dword [ebp + 0x18]
mov eax, dword [esi + 4]
mov ecx, dword [eax + 8]
cmp ecx, 1
je 0x165ff70
mov ecx, dword [esi + 4]
push 4
push 0x1c
push loc.015b2d80
push 0x1653a70
call fcn.0128b690
mov edi, eax
mov eax, dword [esi + 4]
add eax, 8
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x165ff6d
mov ecx, dword [esi + 4]
push loc.015b2d80
call fcn.0128b360
mov dword [esi + 4], edi
mov esi, dword [esi + 4]
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 4]
test eax, eax
je 0x165ff90
lea ecx, [ecx]
dec eax
cmp dword [ecx], esi
jne 0x1660083
add ecx, 4
test eax, eax
jne 0x165ff80
mov ecx, esi
mov dword [esp + 0x18], ecx
mov esi, dword [ebp + 0x18]
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
cmp eax, 1
je 0x165ffdb
mov ecx, dword [esi + 4]
push 4
push 0x1c
push loc.015b2d80
push 0x1653a70
call fcn.0128b690
mov edi, eax
mov eax, dword [esi + 4]
add eax, 8
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x165ffd8
mov ecx, dword [esi + 4]
push loc.015b2d80
call fcn.0128b360
mov dword [esi + 4], edi
mov edx, dword [esp + 0x18]
cmp edx, dword [esi + 4]
je 0x166029c
mov eax, edx
mov ebx, dword [eax + 0x18]
test ebx, ebx
je 0x1660282
mov ecx, dword [ebx + 0xc]
mov dx, word [ebx + 0x10]
mov ax, word [ebx + 0x12]
mov dword [esp + 0xa4], ecx
mov ecx, dword [ebx + 0x14]
mov word [esp + 0xa8], dx
mov edx, dword [ebx + 0x18]
mov word [esp + 0xaa], ax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], edx
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx + 0x10]
mov edx, dword [eax]
add ecx, 0x10
cmp edx, 1
je 0x166008a
push 1
push 0x7fffffff
call fcn.01654350
push 0x10
mov esi, eax
call fcn.01666532
add esp, 4
test eax, eax
je 0x16600c8
mov ecx, dword [esp + 0xa4]
mov dword [eax], ecx
mov edx, dword [esp + 0xa8]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0xac]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0xb0]
mov dword [eax + 0xc], edx
jmp 0x16600ca
mov ecx, dword [ecx]
jmp 0x165ff92
call fcn.012a8e60
push 0x10
mov esi, eax
call fcn.01666532
add esp, 4
test eax, eax
je 0x16600c8
mov ecx, dword [esp + 0xa4]
mov dword [eax], ecx
mov edx, dword [esp + 0xa8]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0xac]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0xb0]
mov dword [eax + 0xc], edx
jmp 0x16600ca
xor eax, eax
mov dword [esi], eax
mov edi, dword [ebx + 0x20]
mov dword [esp + 0x2c], edi
lea ecx, [edi + 0x34]
mov edx, 1
lock xadd dword [ecx], edx
test byte [edi + 0x44], 2
jne 0x16600fa
mov eax, dword [edi + 0x34]
cmp eax, 1
je 0x16600f6
lea ecx, [esp + 0x2c]
call fcn.016540b0
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, dword [ebp + 0x18]
mov ecx, dword [ecx + 0x1c]
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x94]
push eax
add ecx, 0x14
call fcn.0165c4a0
test edi, edi
je 0x166015e
lea eax, [edi + 0x34]
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x166015e
mov esi, dword [edi + 4]
cmp esi, edi
je 0x1660155
mov eax, esi
mov esi, dword [esi + 4]
mov ecx, dword [eax - 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x1660151
mov eax, dword [eax - 4]
push eax
call fcn.01285a10
add esp, 4
cmp esi, edi
jne 0x1660134
push 8
mov ecx, edi
call fcn.0128ae40
mov edi, dword [ebx + 0x28]
mov dword [esp + 0x34], edi
lea ecx, [edi + 0x34]
mov edx, 1
lock xadd dword [ecx], edx
test byte [edi + 0x44], 2
jne 0x166018c
mov eax, dword [edi + 0x34]
cmp eax, 1
je 0x1660188
lea ecx, [esp + 0x34]
call fcn.016540b0
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [ebp + 0x18]
mov ecx, dword [ecx + 0x1c]
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x9c]
push eax
add ecx, 0x1c
call fcn.0165c4a0
test edi, edi
je 0x16601f0
lea eax, [edi + 0x34]
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x16601f0
mov esi, dword [edi + 4]
cmp esi, edi
je 0x16601e7
mov eax, esi
mov esi, dword [esi + 4]
mov ecx, dword [eax - 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x16601e3
mov eax, dword [eax - 4]
push eax
call fcn.01285a10
add esp, 4
cmp esi, edi
jne 0x16601c6
push 8
mov ecx, edi
call fcn.0128ae40
mov edi, dword [ebx + 0x24]
mov dword [esp + 0x3c], edi
lea ecx, [edi + 0x34]
mov edx, 1
lock xadd dword [ecx], edx
test byte [edi + 0x44], 2
jne 0x166021e
mov eax, dword [edi + 0x34]
cmp eax, 1
je 0x166021a
lea ecx, [esp + 0x3c]
call fcn.016540b0
mov edi, dword [esp + 0x3c]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, dword [ebp + 0x18]
mov ecx, dword [ecx + 0x1c]
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0xa4]
push eax
add ecx, 0x18
call fcn.0165c4a0
test edi, edi
je 0x1660282
lea eax, [edi + 0x34]
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x1660282
mov esi, dword [edi + 4]
cmp esi, edi
je 0x1660279
mov eax, esi
mov esi, dword [esi + 4]
mov ecx, dword [eax - 4]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x1660275
mov eax, dword [eax - 4]
push eax
call fcn.01285a10
add esp, 4
cmp esi, edi
jne 0x1660258
push 8
mov ecx, edi
call fcn.0128ae40
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0128b3d0
mov ebx, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x18], eax
jmp 0x165ff96
mov edx, dword [esp + 0x10]
or eax, 0xffffffff
lock xadd dword [edx], eax
jne 0x16602b6
mov ecx, dword [esp + 0x10]
push ecx
call fcn.01285a10
add esp, 4
pop edi
mov eax, ebx
pop ebx
mov ecx, dword [esp + 0xac]
pop esi
pop ebp
xor ecx, esp
call fcn.016664c7
add esp, 0xa8
ret 8