Function at 0x4bb0c0
Capabilities:
Check if file exists
Delete file
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5a38b8
mov eax, dword fs:[0]
push eax
sub esp, 0x74
push ebx
push ebp
push esi
push edi
mov eax, dword [0x61e69c]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x9c]
mov esi, dword [esp + 0x98]
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4bb862
mov eax, dword [0x6285c4]
mov edx, dword [eax + 0xc]
mov ecx, 0x6285c4
call edx
add eax, 0x10
mov dword [esp + 0x1c], eax
mov dword [esp + 0x90], 0
mov eax, dword [esi + 0xf0]
mov ecx, dword [esi + 0xec]
push eax
push ecx
push str.os_dbit_did
lea edi, [esp + 0x28]
call fcn.00407710
mov eax, dword [ebx + 0x18]
mov edi, dword [eax]
mov ebp, dword [ebx]
add esp, 0xc
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], ebp
mov esi, dword [ebx + 0x18]
mov eax, dword [ebx]
test ebp, ebp
je 0x4bb15f
cmp ebp, eax
je 0x4bb164
call fcn.004f825e
cmp edi, esi
je 0x4bb5e5
test ebp, ebp
jne 0x4bb271
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb185
call fcn.004f825e
cmp dword [edi + 0x14], 1
je 0x4bb1e8
test ebp, ebp
jne 0x4bb279
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb1a4
call fcn.004f825e
cmp dword [edi + 0x14], 3
je 0x4bb1e8
test ebp, ebp
jne 0x4bb281
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb1c3
call fcn.004f825e
cmp dword [edi + 0x14], 4
je 0x4bb1e8
test ebp, ebp
jne 0x4bb289
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb1e2
call fcn.004f825e
cmp dword [edi + 0x14], 5
jne 0x4bb229
test ebp, ebp
jne 0x4bb291
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb201
call fcn.004f825e
mov eax, dword [edi + 0x14]
mov edx, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
mov ecx, dword [esp + 0x98]
push eax
push edx
push esi
call fcn.004bbe60
test eax, eax
jne 0x4bb46e
test ebp, ebp
jne 0x4bb299
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb23e
call fcn.004f825e
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0xc]
sub eax, 0x10
call fcn.004073f0
lea ebx, [eax + 0x10]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x90], 1
mov eax, dword [ebx - 0xc]
cmp eax, 0x11
jl 0x4bb42d
test eax, eax
jge 0x4bb29e
or edi, 0xffffffff
jmp 0x4bb2bb
mov eax, dword [ebp]
jmp 0x4bb17b
mov eax, dword [ebp]
jmp 0x4bb19a
mov eax, dword [ebp]
jmp 0x4bb1b9
mov eax, dword [ebp]
jmp 0x4bb1d8
mov eax, dword [ebp]
jmp 0x4bb1f7
mov eax, dword [ebp]
jmp 0x4bb234
push str.VID_
push ebx
call fcn.004f7373
add esp, 8
test eax, eax
jne 0x4bb2b5
or edi, 0xffffffff
jmp 0x4bb2bb
sub eax, ebx
sar eax, 1
mov edi, eax
cmp dword [ebx - 0xc], 0
jge 0x4bb2c6
or esi, 0xffffffff
jmp 0x4bb2e3
push str.PID_
push ebx
call fcn.004f7373
add esp, 8
test eax, eax
jne 0x4bb2dd
or esi, 0xffffffff
jmp 0x4bb2e3
sub eax, ebx
sar eax, 1
mov esi, eax
cmp edi, 0xffffffff
je 0x4bb42d
cmp esi, 0xffffffff
je 0x4bb42d
lea edx, [esp + 0x20]
push edx
lea ecx, [edi + 4]
mov eax, 4
lea edx, [esp + 0x1c]
call fcn.0040d440
push 1
push 0x5da2bc
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x9c], 2
call fcn.00409a20
lea edx, [esp + 0x20]
push edx
lea ecx, [esi + 4]
mov eax, 4
lea edx, [esp + 0x40]
call fcn.0040d440
mov byte [esp + 0x90], 3
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00409a20
mov byte [esp + 0x90], 2
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb37b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x18]
push esi
push 0x5f95bc
call fcn.0049d036
add esp, 8
test ebp, ebp
jne 0x4bb3da
call fcn.004f825e
xor eax, eax
mov edi, dword [esp + 0x4c]
cmp edi, dword [eax + 0x18]
jne 0x4bb3a6
call fcn.004f825e
cmp dword [edi + 0x14], 0
jne 0x4bb3df
push str.FFFF_FFFF
push esi
call fcn.004f69f9
add esp, 8
test eax, eax
jne 0x4bb3df
lea ecx, [esp + 0x18]
call fcn.00406760
lea ecx, [esp + 0x20]
mov byte [esp + 0x90], 0
call fcn.00406760
jmp 0x4bb451
mov eax, dword [ebp]
jmp 0x4bb398
lea edi, [esp + 0x18]
call fcn.00418bf0
mov esi, dword [esp + 0x18]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x24]
push ecx
call fcn.00409a20
mov edx, 0x5d9424
lea edi, [esp + 0x1c]
call fcn.00409860
lea eax, [esi - 0x10]
mov byte [esp + 0x90], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4bb42d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebx - 0x10]
mov byte [esp + 0x90], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb451
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [esp + 0x48]
call fcn.004c2f50
mov ebp, dword [esp + 0x48]
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x9c]
jmp 0x4bb152
test ebp, ebp
jne 0x4bb500
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb487
call fcn.004f825e
mov eax, dword [edi + 0xc]
lea ebx, [edi + 0xc]
push 0x1f
push eax
push esi
call fcn.004f8077
add esp, 0xc
test ebp, ebp
jne 0x4bb508
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb4ae
call fcn.004f825e
mov eax, dword [edi + 0x10]
push 0x1ff
push eax
lea ecx, [esi + 0x40]
push ecx
call fcn.004f8077
add esp, 0xc
push 0
call fcn.004f8fbf
add esp, 4
mov dword [esi + 0x3910], eax
mov dword [esi + 0x3914], edx
test ebp, ebp
jne 0x4bb50d
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb4ee
call fcn.004f825e
mov eax, 3
cmp dword [edi + 0x14], eax
jne 0x4bb512
mov dword [esi + 0x3918], eax
jmp 0x4bb56d
mov eax, dword [ebp]
jmp 0x4bb47d
mov eax, dword [ebp]
jmp 0x4bb4a4
mov eax, dword [ebp]
jmp 0x4bb4e4
test ebp, ebp
jne 0x4bb539
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb527
call fcn.004f825e
mov eax, 4
cmp dword [edi + 0x14], eax
jne 0x4bb53e
mov dword [esi + 0x3918], eax
jmp 0x4bb56d
mov eax, dword [ebp]
jmp 0x4bb51d
test ebp, ebp
jne 0x4bb5d8
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb557
call fcn.004f825e
xor edx, edx
cmp dword [edi + 0x14], 5
sete dl
lea edx, [edx*4 + 1]
mov dword [esi + 0x3918], edx
test ebp, ebp
jne 0x4bb5e0
call fcn.004f825e
xor eax, eax
cmp edi, dword [eax + 0x18]
jne 0x4bb582
call fcn.004f825e
push 0x3fc8
mov eax, esi
push eax
push ebx
mov ebx, dword [esp + 0xa4]
add ebx, 0x40
call fcn.004c0840
push eax
call fcn.00500790
mov dword [esp + 0x9c], 0xffffffff
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb5ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x4bbe40
mov eax, dword [ebp]
jmp 0x4bb54d
mov eax, dword [ebp]
jmp 0x4bb578
push 0xa
push str.is_lite1
lea ecx, [esp + 0x24]
push ecx
call fcn.00409a20
push ecx
mov edx, esp
mov dword [esp + 0x48], esp
push edx
mov ecx, 0x5f9608
call fcn.004066b0
push ecx
mov byte [esp + 0x98], 4
mov eax, esp
mov dword [esp + 0x48], esp
push eax
mov ecx, 0x5f9608
call fcn.004066b0
mov byte [esp + 0x98], 5
mov eax, dword [esp + 0x24]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x48], esp
mov esi, esp
mov dword [esp + 0x48], eax
call fcn.004073f0
add eax, 0x10
mov dword [esi], eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x9c], 0
call fcn.004c36e0
add esp, 0xc
mov byte [esp + 0x90], 6
mov edx, dword [0x6285c4]
mov eax, dword [edx + 0xc]
mov ecx, 0x6285c4
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x90], 7
mov ecx, dword [esp + 0x24]
push ecx
push str.http:__intf.zsall.mobilem.360.cn_intf_checkMobile_para_s
lea edi, [esp + 0x3c]
call fcn.00407710
mov edx, dword [0x6285c4]
mov eax, dword [edx + 0xc]
add esp, 8
mov ecx, 0x6285c4
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
mov byte [esp + 0x90], 8
call fcn.0041a070
push eax
push str._scache_
lea edi, [esp + 0x34]
call fcn.00407710
push 0
call fcn.004f8fbf
mov edi, edx
mov edx, dword [0x6285c4]
mov esi, eax
mov eax, dword [edx + 0xc]
add esp, 0xc
mov ecx, 0x6285c4
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
push edi
mov byte [esp + 0x94], 9
mov ebx, dword [esp + 0x30]
push esi
push ebx
push str._s_d.tmp
lea edi, [esp + 0x40]
call fcn.00407710
mov esi, dword [esp + 0x40]
add esp, 0x10
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4bb725
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [esp + 0xa4]
push ecx
push 0xea60
push ecx
lea ebp, [esi - 0x10]
mov eax, ebp
mov dword [esp + 0x34], esp
mov edi, esp
mov dword [esp + 0x50], ebp
call fcn.004073f0
add eax, 0x10
mov dword [edi], eax
push ecx
add ebx, 0xfffffff0
mov byte [esp + 0xa0], 0xa
mov eax, ebx
mov dword [esp + 0x30], esp
mov edi, esp
mov dword [esp + 0x50], ebx
call fcn.004073f0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xa0], 0xb
mov eax, dword [esp + 0x44]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x4c], esp
mov edi, esp
mov dword [esp + 0x4c], eax
call fcn.004073f0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xa4], 9
call fcn.004a075a
add esp, 0x14
test eax, eax
jne 0x4bb869
mov byte [esp + 0x90], 8
lea edx, [ebp + 0xc]
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
test eax, eax
jg 0x4bb7cc
mov ecx, dword [ebp]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebp
call eax
mov byte [esp + 0x90], 7
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb7ed
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov eax, dword [esp + 0x38]
mov byte [esp + 0x90], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb812
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x90], 0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb83a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x90], 0xffffffff
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bb862
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x4bbe40
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, 0x5f9608
call fcn.004066b0
push ecx
mov byte [esp + 0x98], 0xc
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov ecx, 0x5f9608
call fcn.004066b0
push ecx
mov byte [esp + 0x9c], 0xd
mov eax, ebp
mov dword [esp + 0x24], esp
mov edi, esp
call fcn.004073f0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0x9c], 9
call fcn.004c3fe0
add esp, 8
mov eax, ebp
mov dword [esp + 0x2c], esp
mov edi, esp
call fcn.004073f0
add eax, 0x10
mov dword [edi], eax
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push eax
lea ecx, [esp + 0x78]
call fcn.0048f5b0
add esp, 8
mov dword [esp + 0x28], 0
mov dword [esp + 0x60], vtable.CIniLoader.0
mov dword [esp + 0x64], esi
mov ecx, dword [esp + 0x9c]
mov byte [esp + 0x90], 0xf
mov eax, dword [ecx + 0x18]
mov esi, dword [eax]
mov edi, dword [ecx]
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], edi
mov edx, dword [ecx + 0x18]
mov ecx, dword [ecx]
mov dword [esp + 0x6c], edx
test edi, edi
je 0x4bb927
cmp edi, ecx
je 0x4bb92c
call fcn.004f825e
cmp esi, dword [esp + 0x6c]
je 0x4bbd4f
test edi, edi
jne 0x4bba3e
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bb94f
call fcn.004f825e
mov eax, dword [esi + 0xc]
lea ebx, [esi + 0xc]
sub eax, 0x10
mov dword [esp + 0x20], ebx
call fcn.004073f0
add eax, 0x10
mov dword [esp + 0x18], eax
push 0x5d74e0
push str.VID_
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x9c], 0x10
call fcn.00406840
push 0x5d74e0
push str.PID_
lea ecx, [esp + 0x20]
push ecx
call fcn.00406840
push 0x5da2bc
push 0x5da2c0
lea edx, [esp + 0x20]
push edx
call fcn.00406840
mov ebp, dword [esp + 0xa0]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x60]
push eax
mov edx, ebp
call fcn.0040ff50
test eax, eax
je 0x4bba4d
test edi, edi
jne 0x4bba45
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bb9e0
call fcn.004f825e
mov eax, dword [ebx]
push 0x1f
push eax
push ebp
call fcn.004f8077
add esp, 0xc
test edi, edi
jne 0x4bba49
call fcn.004f825e
cmp esi, dword [edi + 0x18]
jne 0x4bba01
call fcn.004f825e
mov eax, dword [esi + 0x10]
push 0x1ff
mov esi, ebp
push eax
lea ecx, [esi + 0x40]
push ecx
call fcn.004f8077
add esp, 0xc
push 0
call fcn.004f8fbf
add esp, 4
push 0x3fc8
mov dword [esi + 0x3914], edx
push esi
lea edx, [esp + 0x20]
mov dword [esi + 0x3910], eax
push edx
jmp 0x4bbcc6
mov eax, dword [edi]
jmp 0x4bb945
mov eax, dword [edi]
jmp 0x4bb9d6
mov edi, dword [edi]
jmp 0x4bb9f7
test edi, edi
jne 0x4bbba1
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bba66
call fcn.004f825e
cmp dword [esi + 0x14], 1
je 0x4bbc01
test edi, edi
jne 0x4bbba8
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bba89
call fcn.004f825e
cmp dword [esi + 0x14], 3
je 0x4bbc01
test edi, edi
jne 0x4bbbaf
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bbaac
call fcn.004f825e
cmp dword [esi + 0x14], 4
je 0x4bbc01
test edi, edi
jne 0x4bbbb6
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bbacf
call fcn.004f825e
cmp dword [esi + 0x14], 5
je 0x4bbc01
mov ecx, dword [esp + 0x98]
mov eax, dword [ecx + 0x114]
mov ebp, dword [eax]
mov esi, dword [ecx + 0xfc]
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x58], esi
jmp 0x4bbb00
mov ebx, dword [ecx + 0x114]
mov eax, dword [ecx + 0xfc]
test esi, esi
je 0x4bbb14
cmp esi, eax
je 0x4bbb19
call fcn.004f825e
cmp ebp, ebx
je 0x4bbbc8
test esi, esi
jne 0x4bbbbd
call fcn.004f825e
cmp ebp, dword [esi + 0x18]
jne 0x4bbb38
call fcn.004f825e
mov esi, dword [ebp + 0xc]
test edi, edi
jne 0x4bbbc4
call fcn.004f825e
xor eax, eax
mov ecx, dword [esp + 0x54]
cmp ecx, dword [eax + 0x18]
jne 0x4bbb58
call fcn.004f825e
test esi, esi
je 0x4bbb84
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
cmp dword [eax - 0xc], 0
jl 0x4bbb84
push esi
push eax
call fcn.004f7373
add esp, 8
test eax, eax
je 0x4bbb84
mov ecx, dword [esp + 0x20]
sub eax, dword [ecx]
sar eax, 1
jns 0x4bbce6
lea esi, [esp + 0x58]
call fcn.00462d80
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
mov ecx, dword [esp + 0x98]
jmp 0x4bbb00
mov eax, dword [edi]
jmp 0x4bba5c
mov eax, dword [edi]
jmp 0x4bba7f
mov eax, dword [edi]
jmp 0x4bbaa2
mov eax, dword [edi]
jmp 0x4bbac5
mov esi, dword [esi]
jmp 0x4bbb2e
mov eax, dword [edi]
jmp 0x4bbb4a
test edi, edi
jne 0x4bbbfd
call fcn.004f825e
mov edx, dword [esp + 0x54]
cmp edx, dword [edi + 0x18]
jne 0x4bbbdf
call fcn.004f825e
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x98]
push eax
push ecx
lea ebx, [esp + 0x84]
call fcn.0042ce60
jmp 0x4bbce6
mov edi, dword [edi]
jmp 0x4bbbd1
test edi, edi
jne 0x4bbd33
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bbc1a
call fcn.004f825e
mov eax, dword [ebx + 8]
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
push eax
push edx
push ebp
call fcn.004bbe60
test eax, eax
je 0x4bbce6
test edi, edi
jne 0x4bbd3a
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bbc54
call fcn.004f825e
mov eax, dword [ebx]
push 0x1f
push eax
push ebp
call fcn.004f8077
add esp, 0xc
test edi, edi
jne 0x4bbd41
call fcn.004f825e
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4bbc7b
call fcn.004f825e
mov eax, dword [esi + 0x10]
push 0x1ff
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.004f8077
add esp, 0xc
push 0
call fcn.004f8fbf
add esp, 4
mov dword [ebp + 0x3910], eax
mov dword [ebp + 0x3914], edx
test edi, edi
jne 0x4bbd48
call fcn.004f825e
cmp esi, dword [edi + 0x18]
jne 0x4bbcbd
call fcn.004f825e
push 0x3fc8
mov ecx, ebp
push ecx
push ebx
mov ebx, dword [esp + 0xa4]
add ebx, 0x40
call fcn.004c0840
push eax
call fcn.00500790
mov dword [esp + 0x34], 1
add esp, 0xc
mov byte [esp + 0x90], 0xf
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4bbd0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [esp + 0x50]
call fcn.004c2f50
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x44]
mov ecx, dword [esp + 0x9c]
jmp 0x4bb916
mov eax, dword [edi]
jmp 0x4bbc10
mov eax, dword [edi]
jmp 0x4bbc4a
mov eax, dword [edi]
jmp 0x4bbc71
mov edi, dword [edi]
jmp 0x4bbcb3
lea ecx, [esp + 0x70]
push ecx
mov byte [esp + 0x94], 9
call fcn.0048f6c0
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
add esp, 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4bbd84
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x90], 8
lea ecx, [ebp + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bbda6
mov ecx, dword [ebp]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebp
call edx
mov byte [esp + 0x90], 7
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4bbdc7
mov ecx, dword [ebx]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebx
call eax
mov eax, dword [esp + 0x38]
mov byte [esp + 0x90], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bbdec
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x90], 0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bbe14
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x90], 0xffffffff
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4bbe3c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x80
ret 0x10