Function at 0x415b20
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4786d1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x410
mov eax, dword [0x486090]
xor eax, dword [esp + 0x41c]
push ebx
mov ebx, dword [0x47a0f8]
push ebp
push esi
mov dword [esp + 0x418], eax
push 0x47a3a0
lea eax, [esp + 0x34]
push eax
mov esi, ecx
mov byte [esp + 0x41f], 0
call ebx
mov ebp, dword [esp + 0x42c]
test ebp, ebp
jne 0x415c0d
mov edx, dword [esi + 4]
lea ecx, [esi + 4]
push 0x3e8
lea eax, [esp + 0x34]
push eax
call dword [edx + 0x78]
mov al, byte [esp + 0x417]
test al, al
lea ebp, [esp + 0x30]
je 0x415c0d
lea ecx, [esp + 0x10]
mov byte [esp + 0x4e], 0
call fcn.0043a6c0
push 0x47aabc
lea ecx, [esp + 0x14]
mov dword [esp + 0x428], 0
call fcn.0043aa40
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x14]
call fcn.0043aae0
push 0x47aa48
lea ecx, [esp + 0x14]
call fcn.0043aae0
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x415bf6
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], 1
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push 1
push eax
call dword [edx + 0x40]
push 0
call fcn.00434ab8
cmp dword [esp + 0x434], 1
push edi
jne 0x415c52
mov ecx, dword [esi + 0x6164]
xor eax, eax
test ecx, ecx
mov dword [esp + 0x10], eax
jle 0x415c52
mov edi, dword [0x47a0d4]
mov edi, edi
mov ecx, dword [esi + eax*4 + 0x6168]
push ebp
push ecx
call edi
test eax, eax
je 0x415ca7
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x6164]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x415c30
push ebp
call dword [0x47a0fc]
inc eax
push eax
call fcn.0043484f
mov ecx, dword [esi + 0x6164]
lea edi, [esi + 0x6164]
mov dword [esi + ecx*4 + 0x6168], eax
mov edx, dword [edi]
mov eax, dword [esi + edx*4 + 0x6168]
add esp, 4
test eax, eax
jne 0x415cc1
mov eax, dword [0x49e8c0]
push 0x30
mov ecx, 0x49e8c0
call dword [eax + 0xc]
push eax
push 0x47a4c0
push 0
call dword [0x47a18c]
push 0
call fcn.00434ab8
mov edx, dword [esi + 0x30]
lea ecx, [esi + 0x30]
push 4
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x60]
mov eax, 1
jmp 0x415df4
push ebp
push eax
call ebx
mov edx, dword [esi + 0x30]
lea ecx, [esi + 0x30]
push 4
push edi
call dword [edx + 0x60]
mov eax, dword [esp + 0x434]
mov ebx, 1
cmp eax, ebx
mov ebp, 2
jne 0x415da6
cmp dword [esi + 0x6ba50], ebp
jl 0x415d91
mov eax, dword [edi]
mov ecx, dword [esi + eax*4 + 0x6168]
push ecx
mov ecx, 0x49e860
call fcn.00401200
test eax, eax
jne 0x415d91
lea ecx, [esp + 0x14]
call fcn.0043a6c0
push 0x47a40c
lea ecx, [esp + 0x18]
mov dword [esp + 0x42c], ebx
call fcn.0043aa40
mov edx, dword [edi]
mov eax, dword [esi + edx*4 + 0x6168]
push eax
lea ecx, [esp + 0x18]
call fcn.0043aae0
push 0x47aa34
lea ecx, [esp + 0x18]
call fcn.0043aae0
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.004158d0
mov eax, dword [esi + 0x70]
test eax, eax
jne 0x415d6e
mov ecx, esi
call fcn.00415820
mov dword [esi + 0x70], ebx
mov eax, dword [esp + 0x18]
mov edx, dword [esi + 0x54]
lea ecx, [esi + 0x54]
push ebx
push eax
call dword [edx + 0x40]
lea ecx, [esp + 0x14]
mov dword [esp + 0x428], 0xffffffff
call fcn.0043a700
mov ecx, dword [esi + 0x3ad0c]
mov edx, dword [edi]
mov dword [esi + ecx*4 + 0x3ad10], edx
inc dword [esi + 0x3ad0c]
mov ecx, dword [edi]
inc ecx
mov eax, ecx
cmp eax, 0xc350
mov dword [edi], ecx
jne 0x415df2
lea ecx, [esp + 0x24]
call fcn.0043a6c0
push 0x47a9c0
lea ecx, [esp + 0x28]
mov dword [esp + 0x42c], ebp
call fcn.0043aa40
mov eax, dword [esp + 0x28]
mov ecx, dword [0x49e870]
push 0
push 0x47a710
push eax
push ecx
call dword [0x47a18c]
push 0
call fcn.00434ab8
mov eax, ebx
mov ecx, dword [esp + 0x420]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x418]
xor ecx, dword [esp + 0x428]
pop esi
pop ebp
pop ebx
call fcn.0043488e
add esp, 0x41c
ret 0xc