Function at 0x432240
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x511628
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfc
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x28], edi
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov eax, dword [ebp + 0xc]
mov dword [edi], 0x51fbd8
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [ebp - 4], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
call dword [0x519374]
mov dword [edi + 0x44], eax
mov dword [edi + 0x48], 0
mov byte [edi + 0x50], 0
mov dword [edi + 0x52], 0
mov dword [edi + 0x56], 0
mov dword [edi + 0x5a], 0x1000100
mov dword [edi + 0x5e], 0
mov word [edi + 0x62], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
lea esi, [edi + 0x8c]
mov byte [ebp - 4], 5
mov dword [ebp + 0xc], esi
mov ecx, esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0043d070
mov dword [esi], eax
lea esi, [edi + 0x94]
mov byte [ebp - 4], 6
mov dword [ebp + 0xc], esi
mov ecx, esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0043d070
mov dword [esi], eax
lea esi, [edi + 0xa4]
mov byte [edi + 0xa0], 0
mov dword [ebp + 0xc], esi
mov dword [esi], 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 8
call dword [0x5193d4]
mov dword [esi], eax
test eax, eax
je 0x43306a
mov word [edi + 0xa8], 0x100
mov dword [edi + 0xbc], 0
mov dword [edi + 0xc0], 0xf
mov byte [edi + 0xac], 0
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd8], 0xf
mov byte [edi + 0xc4], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0xf0], 0xf
mov byte [edi + 0xdc], 0
mov dword [edi + 0x104], 0
mov dword [edi + 0x108], 0xf
mov byte [edi + 0xf4], 0
mov dword [edi + 0x11c], 0
mov dword [edi + 0x120], 0xf
mov byte [edi + 0x10c], 0
mov dword [edi + 0x134], 0
mov dword [edi + 0x138], 0xf
mov byte [edi + 0x124], 0
mov dword [edi + 0x14c], 0
mov dword [edi + 0x150], 0xf
mov byte [edi + 0x13c], 0
mov dword [edi + 0x164], 0
mov dword [edi + 0x168], 0xf
mov byte [edi + 0x154], 0
mov dword [edi + 0x17c], 0
mov dword [edi + 0x180], 0xf
mov byte [edi + 0x16c], 0
lea esi, [edi + 0x18c]
mov dword [edi + 0x188], 0
push 0
mov dword [ebp + 0xc], esi
mov ecx, esi
push 0
mov byte [ebp - 4], 0x12
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0043d090
mov dword [esi], eax
mov dword [ebp - 0x6c], 0
mov dword [edi + 0x194], 0
mov dword [ebp - 0x70], 0
mov dword [edi + 0x198], 0
mov dword [ebp - 0x74], 0
mov dword [edi + 0x19c], 0
add edi, 0x1a0
mov byte [ebp - 4], 0x16
lea esi, [edi + 4]
mov dword [ebp + 0xc], edi
mov ecx, esi
mov dword [ebp - 0x24], esi
mov dword [edi], 0x51fbbc
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.0043d050
mov dword [esi], eax
mov byte [edi + 0xc], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0xf
mov byte [edi + 0x10], 0
mov dword [edi], 0x51fbc8
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0xf
mov byte [edi + 0x28], 0
mov byte [ebp - 4], 0x18
mov ecx, edi
mov dword [0x5cfbd0], edi
call fcn.0046f230
mov edi, dword [ebp - 0x28]
xor eax, eax
mov esi, dword [ebp + 8]
lea ecx, [edi + 0x1f8]
push eax
push 0x519da8
mov dword [edi + 0x1e8], 0
mov dword [edi + 0x1ec], esi
mov dword [edi + 0x1f0], 0
mov dword [edi + 0x1f4], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov byte [ebp - 4], 0x19
mov word [ecx], ax
call fcn.004104d0
push esi
mov byte [ebp - 4], 0x1a
call fcn.0045f0d0
add esp, 4
mov dword [ebp - 0x78], eax
mov dword [edi + 0x210], eax
mov dword [edi + 0x214], 0
mov dword [edi + 0x218], 0
mov dword [edi + 0x21c], 0
mov dword [edi + 0x220], 0
mov dword [edi + 0x224], 0
mov dword [edi + 0x228], 0
xor eax, eax
mov dword [edi + 0x23c], 0
lea ecx, [edi + 0x22c]
mov byte [ebp - 4], 0x1e
mov dword [ecx + 0x14], 7
push eax
push 0x519da8
mov word [ecx], ax
call fcn.004104d0
mov word [edi + 0x244], 0
mov dword [edi + 0x248], 0
mov dword [edi + 0x24c], 0
mov dword [edi + 0x250], 0
xor eax, eax
mov dword [edi + 0x264], 0
mov dword [edi + 0x268], 7
mov word [edi + 0x254], ax
lea ecx, [edi + 0x270]
mov byte [ebp - 4], 0x21
mov word [edi + 0x26c], 0x101
call fcn.00425e50
lea ecx, [edi + 0x2c4]
mov byte [ebp - 4], 0x22
call fcn.00425e50
mov byte [edi + 0x318], 0
xor eax, eax
mov dword [edi + 0x32c], 0
mov dword [edi + 0x330], 7
mov word [edi + 0x31c], ax
mov dword [edi + 0x344], eax
mov dword [edi + 0x348], 7
mov word [edi + 0x334], ax
mov dword [edi + 0x35c], eax
mov dword [edi + 0x360], 7
mov word [edi + 0x34c], ax
mov dword [edi + 0x374], eax
mov dword [edi + 0x378], 7
mov word [edi + 0x364], ax
mov dword [edi + 0x38c], eax
mov dword [edi + 0x390], 7
mov word [edi + 0x37c], ax
mov dword [edi + 0x3a4], eax
mov dword [edi + 0x3a8], 7
mov word [edi + 0x394], ax
mov dword [edi + 0x3bc], eax
mov dword [edi + 0x3c0], 7
mov word [edi + 0x3ac], ax
mov dword [edi + 0x3d4], eax
mov dword [edi + 0x3d8], 0xf
mov byte [edi + 0x3c4], al
mov byte [ebp - 4], 0x2b
cmp byte [0x5650ad], al
je 0x4327ae
mov dword [ebp - 0x10], 0xc020d8
mov eax, dword [ebp - 0x10]
sub eax, 0x6e1e50
push 0
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c760
add esp, 0xc
mov esi, dword [0x51911c]
call esi
mov dword [edi + 0x78], eax
cmp byte [0x5650ad], 0
je 0x432810
mov dword [ebp - 0x10], 0xc0f896
mov eax, dword [ebp - 0x10]
sub eax, 0x6ef60e
push 0
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c760
add esp, 0xc
cmp byte [0x5650ad], 0
je 0x432810
mov dword [ebp - 0x10], 0xc140ac
mov eax, dword [ebp - 0x10]
push dword [edi + 0x44]
sub eax, 0x6f3df8
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c8f0
add esp, 0xc
lea eax, [ebp - 0x38]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x38], xmm0
call dword [0x519114]
mov byte [ebp - 4], 0x2c
call fcn.00415c20
mov ecx, eax
test ecx, ecx
je 0x43306f
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
movzx eax, word [ebp - 0x2c]
push eax
movzx eax, word [ebp - 0x2e]
push eax
movzx eax, word [ebp - 0x30]
push eax
movzx eax, word [ebp - 0x38]
push eax
movzx eax, word [ebp - 0x32]
push eax
movzx eax, word [ebp - 0x36]
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x2d
push 0x5202d4
push eax
call fcn.004209b0
add esp, 0x20
cmp byte [0x5650ad], 0
je 0x4328a0
mov dword [ebp - 0x10], 0xc3c83e
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x1c]
sub eax, 0x71c532
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c8f0
add esp, 0xc
call esi
push eax
call fcn.004f0c91
add esp, 4
call fcn.004f0c70
mov dword [edi + 0x9c], eax
mov byte [ebp - 4], 0x2e
call fcn.00415c20
mov ecx, eax
test ecx, ecx
je 0x433079
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0xc], eax
push 0x409
push 0x68
push dword [ebp + 8]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2f
call fcn.00439d30
mov esi, dword [ebp + 0xc]
cmp dword [esi - 0xc], 0
jne 0x432932
cmp byte [0x5650ad], 0
je 0x432920
mov dword [ebp - 0x10], 0xc6df6c
mov eax, dword [ebp - 0x10]
sub eax, 0x74dc40
push 0
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c760
add esp, 0xc
push 0x10
push 0x52036c
lea ecx, [ebp + 0xc]
call fcn.00415fd0
mov esi, dword [ebp + 0xc]
mov ecx, esi
mov dword [ebp - 0x40], 0
xor eax, eax
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432950
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x50]
call fcn.004104d0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.00417070
lea ecx, [edi + 0xc4]
mov dword [ebp - 0x10], eax
add esp, 8
cmp ecx, eax
je 0x4329bd
call fcn.00407130
mov ecx, dword [ebp - 0x10]
movups xmm0, xmmword [ecx]
movups xmmword [edi + 0xc4], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [edi + 0xd4], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov edx, dword [ebp - 0x7c]
cmp edx, 0x10
jb 0x4329f4
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4329ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433083
push edx
push ecx
call fcn.004cd104
add esp, 8
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
mov byte [ebp - 4], 0x2f
cmp edx, 8
jb 0x432a47
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x432a3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433088
push edx
push ecx
call fcn.004cd104
add esp, 8
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
cmp byte [0x5650ad], al
je 0x432a96
mov dword [ebp - 0x10], 0xc7ff78
lea eax, [edi + 0xc4]
mov ecx, dword [ebp - 0x10]
sub ecx, 0x75fbe8
cmp dword [eax + 0x14], 0x10
jb 0x432a81
mov eax, dword [eax]
push eax
movzx eax, byte [0x5650ad]
push ecx
push eax
call fcn.0041c8f0
mov esi, dword [ebp + 0xc]
add esp, 0xc
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x432aae
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x31
call fcn.00415c20
mov ecx, eax
test ecx, ecx
je 0x43308d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
push 0x409
push 0x69
push dword [ebp + 8]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00439d30
mov esi, dword [ebp - 0x14]
cmp dword [esi - 0xc], 0
jne 0x432b2a
cmp byte [0x5650ad], 0
je 0x432b18
mov dword [ebp - 0x10], 0xc9f6fe
mov eax, dword [ebp - 0x10]
sub eax, 0x77f34e
push 0
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c760
add esp, 0xc
push 0xe
push 0x5203ec
lea ecx, [ebp - 0x14]
call fcn.00415fd0
mov esi, dword [ebp - 0x14]
mov ecx, esi
mov dword [ebp - 0x58], 0
xor eax, eax
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432b43
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x68]
call fcn.004104d0
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00417070
lea ecx, [edi + 0xac]
mov dword [ebp - 0x10], eax
add esp, 8
cmp ecx, eax
je 0x432bb0
call fcn.00407130
mov ecx, dword [ebp - 0x10]
movups xmm0, xmmword [ecx]
movups xmmword [edi + 0xac], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [edi + 0xbc], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov edx, dword [ebp - 0x94]
cmp edx, 0x10
jb 0x432bea
mov ecx, dword [ebp - 0xa8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x432be0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433097
push edx
push ecx
call fcn.004cd104
add esp, 8
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
mov byte [ebp - 4], 0x32
cmp edx, 8
jb 0x432c43
mov ecx, dword [ebp - 0x68]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x432c39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43309c
push edx
push ecx
call fcn.004cd104
add esp, 8
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
cmp byte [0x5650ad], al
je 0x432c92
mov dword [ebp - 0x10], 0xcb1702
lea eax, [edi + 0xac]
mov ecx, dword [ebp - 0x10]
sub ecx, 0x7912f6
cmp dword [eax + 0x14], 0x10
jb 0x432c7d
mov eax, dword [eax]
push eax
movzx eax, byte [0x5650ad]
push ecx
push eax
call fcn.0041c8f0
mov esi, dword [ebp - 0x14]
add esp, 0xc
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432cac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x34
call fcn.00415c20
mov ecx, eax
test ecx, ecx
je 0x4330a1
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x409
push 0xaf
push dword [ebp + 8]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x35
call fcn.00439d30
mov eax, dword [ebp - 0x20]
cmp dword [eax - 0xc], 0
lea ecx, [eax - 0x10]
mov dword [ebp - 0x24], ecx
je 0x432e30
mov edx, eax
mov dword [ebp - 0xc8], 0
xor ecx, ecx
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], cx
lea ecx, [edx + 2]
mov dword [ebp - 0x10], ecx
nop dword [eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x432d20
sub edx, dword [ebp - 0x10]
lea ecx, [ebp - 0xd8]
sar edx, 1
push edx
push eax
call fcn.004104d0
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00417070
lea ecx, [edi + 0xdc]
mov dword [ebp - 0x10], eax
add esp, 8
cmp ecx, eax
je 0x432d94
call fcn.00407130
mov ecx, dword [ebp - 0x10]
movups xmm0, xmmword [ecx]
movups xmmword [edi + 0xdc], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [edi + 0xec], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov edx, dword [ebp - 0xac]
cmp edx, 0x10
jb 0x432dce
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x432dc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4330ab
push edx
push ecx
call fcn.004cd104
add esp, 8
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 0x35
call fcn.00407180
cmp byte [0x5650ad], 0
je 0x432e5b
mov dword [ebp - 0x10], 0xcd42e6
lea eax, [edi + 0xdc]
mov ecx, dword [ebp - 0x10]
sub ecx, 0x7b5246
cmp dword [eax + 0x14], 0x10
jb 0x432e1f
mov eax, dword [eax]
push eax
movzx eax, byte [0x5650ad]
push ecx
push eax
call fcn.0041c8f0
jmp 0x432e58
cmp byte [0x5650ad], 0
je 0x432e5b
mov dword [ebp - 0x10], 0xce6246
mov eax, dword [ebp - 0x10]
sub eax, 0x7c71ee
push 0
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c760
add esp, 0xc
mov edx, dword [ebp - 0x24]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x432e72
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x37
call fcn.00415c20
mov ecx, eax
test ecx, ecx
je 0x4330b0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 0x409
push 0xb1
push dword [ebp + 8]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x38
call fcn.00439d30
test eax, eax
je 0x43303d
lea ecx, [ebp - 0x18]
call fcn.0043c5a0
mov edx, dword [eax]
mov ecx, edx
xor eax, eax
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432ee0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x108]
call fcn.004104d0
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.00417070
lea esi, [edi + 0xf4]
mov dword [ebp + 8], eax
add esp, 8
cmp esi, eax
je 0x432f4e
mov ecx, esi
call fcn.00407130
mov eax, dword [ebp + 8]
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x432f88
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x432f7e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4330ba
push edx
push ecx
call fcn.004cd104
add esp, 8
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
mov byte [ebp - 4], 0x38
call fcn.00407180
cmp byte [0x5650ad], 0
je 0x432ff4
mov dword [ebp + 8], 0xd0b566
mov eax, dword [ebp + 8]
sub eax, 0x7eb13e
cmp dword [edi + 0x104], 0
jne 0x432fda
mov esi, 0x520454
jmp 0x432fe2
cmp dword [esi + 0x14], 0x10
jb 0x432fe2
mov esi, dword [esi]
push esi
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c8f0
add esp, 0xc
or esi, 0xffffffff
mov edx, dword [ebp - 0x18]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x433011
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x433029
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
cmp byte [0x5650ad], 0
je 0x432ff7
mov dword [ebp + 8], 0xd1d546
mov eax, dword [ebp + 8]
sub eax, 0x7fd0e6
push 0
push eax
movzx eax, byte [0x5650ad]
push eax
call fcn.0041c760
add esp, 0xc
jmp 0x432ff7
call fcn.00409200
push 0x80004005
call fcn.004091e0
push 0x80004005
call fcn.004091e0
call fcn.004e8a78
call fcn.004e8a78
push 0x80004005
call fcn.004091e0
call fcn.004e8a78
call fcn.004e8a78
push 0x80004005
call fcn.004091e0
call fcn.004e8a78
push 0x80004005
call fcn.004091e0
call fcn.004e8a78
int3