Function at 0x476640
Capabilities:
Check http status code
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x618c05
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x7161c0]
xor eax, esp
mov dword [esp + 0x134], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x7161c0]
xor eax, esp
push eax
lea eax, [esp + 0x14c]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x24], ebx
xor esi, esi
mov dword [esp + 0x154], esi
cmp dword [ebx + 0x25c], esi
je 0x476697
call fcn.0046d230
mov dword [ebx + 0x19b0], esi
call fcn.005bc35c
mov ebp, dword [esp + 0x15c]
mov edi, dword [eax + 4]
push esi
push 0x6e2d68
push 0x6e1204
push esi
push ebp
call fcn.005da3f0
add esp, 0x14
cmp eax, esi
mov dword [esp + 0x18], eax
je 0x4768c5
mov ecx, dword [0x71dc0c]
cmp ecx, esi
je 0x4766df
mov eax, dword [ecx]
mov edx, dword [eax]
push 1
call edx
push 0x38
call fcn.005b4633
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x154], 1
cmp eax, esi
je 0x476702
mov ecx, eax
call fcn.00438430
jmp 0x476704
xor eax, eax
mov byte [esp + 0x154], 0
lea ecx, [esp + 0x14]
mov dword [0x71dc0c], eax
call fcn.004019e0
mov byte [esp + 0x154], 2
mov esi, dword [ebx + 0x2b4]
mov eax, dword [esi + 0x14]
add esi, 0x14
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
or eax, ecx
jge 0x476749
push 0
mov ecx, esi
call fcn.00401990
mov esi, dword [esi]
push str.session
push esi
call fcn.005d9e00
add esp, 8
test eax, eax
mov eax, dword [ebx + 0x2b4]
jne 0x476789
mov ecx, dword [ebx + 0x2cc]
mov edx, dword [eax + 0x14]
push ecx
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax]
push ecx
push edx
lea eax, [esp + 0x24]
push str.lms:___s:_d__s_s
push eax
call fcn.004030a0
add esp, 0x18
jmp 0x4767a6
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
lea ecx, [esp + 0x20]
push str.lms:___s:_d__s
push ecx
call fcn.004030a0
add esp, 0x14
mov eax, dword [edi + 0x8b8]
mov ecx, dword [edi + 0x8b4]
mov edx, dword [edi + 0x8bc]
push eax
mov eax, dword [edi + 0x8c0]
push ecx
movzx ecx, byte [edi + 0x8ac]
push eax
push edx
mov edx, dword [esp + 0x24]
push ecx
mov ecx, dword [0x71dc0c]
push edx
call fcn.004388b0
mov eax, dword [0x71dc0c]
mov ecx, dword [eax + 4]
call fcn.0042c710
cmp eax, 0x190
jle 0x4767f5
cmp eax, 0x1f4
jl 0x47686c
xor esi, esi
cmp eax, esi
je 0x47686e
mov eax, dword [0x71dc0c]
cmp eax, esi
je 0x47688c
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [eax + 4]
call fcn.0042d120
mov byte [esp + 0x154], 3
mov esi, dword [esp + 0x18]
add esi, 0x38
push eax
mov ecx, esi
call fcn.00403020
mov byte [esp + 0x154], 2
lea ecx, [esp + 0x24]
call fcn.00401a50
push str..mpg
push esi
call fcn.0041d5a0
add esp, 8
test al, al
je 0x476856
mov byte [edi + 0x8c8], 1
mov byte [esp + 0x154], 0
lea ecx, [esp + 0x14]
call fcn.00401a50
jmp 0x477135
xor esi, esi
mov ecx, dword [ebx + 0x20]
push eax
push esi
push 0x8008
push ecx
mov dword [ebx + 0x25c], esi
mov byte [ebx + 0x1fd], 0
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esp + 0x154], 0
lea ecx, [esp + 0x14]
call fcn.00401a50
mov dword [esp + 0x154], 0xffffffff
cmp ebp, esi
je 0x4768b7
mov edx, dword [ebp]
mov eax, dword [edx]
push 1
mov ecx, ebp
call eax
mov dword [esp + 0x15c], esi
xor eax, eax
jmp 0x477176
push 0
push 0x6e1220
push 0x6e1204
push 0
push ebp
call fcn.005da3f0
mov esi, eax
add esp, 0x14
test esi, esi
je 0x476b0e
mov ecx, dword [0x71dc0c]
test ecx, ecx
je 0x4768f8
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x38
call fcn.005b4633
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x154], 4
test eax, eax
je 0x47691b
mov ecx, eax
call fcn.00438430
jmp 0x47691d
xor eax, eax
mov byte [esp + 0x154], 0
mov dword [0x71dc0c], eax
cmp byte [edi + 0x8ac], 0
je 0x4769e8
mov ecx, dword [eax + 4]
push 1
call fcn.0042c6f0
push ecx
lea edx, [edi + 0x8bc]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00402bc0
mov byte [esp + 0x158], 5
mov byte [esp + 0x158], 0
mov eax, dword [0x71dc0c]
mov ecx, dword [eax + 4]
call fcn.0042cc90
mov ecx, dword [edi + 0x8c0]
mov edx, dword [0x71dc0c]
push ecx
mov ecx, dword [edx + 4]
call fcn.0042c700
push ecx
lea eax, [edi + 0x8b4]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00402bc0
mov byte [esp + 0x158], 6
mov byte [esp + 0x158], 0
mov ecx, dword [0x71dc0c]
mov ecx, dword [ecx + 4]
call fcn.0042cbd0
push ecx
add edi, 0x8b8
mov ecx, esp
mov dword [esp + 0x24], esp
push edi
call fcn.00402bc0
mov byte [esp + 0x158], 7
mov byte [esp + 0x158], 0
mov edx, dword [0x71dc0c]
mov ecx, dword [edx + 4]
call fcn.0042cc30
add esi, 0x20
push esi
lea ecx, [esp + 0x18]
call fcn.00402bc0
mov byte [esp + 0x154], 8
mov eax, dword [esp + 0x14]
push 0x2f
push eax
call fcn.005d940c
xor edi, edi
add esp, 8
cmp eax, edi
jne 0x476a17
or eax, 0xffffffff
jmp 0x476a1b
sub eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x1c]
call fcn.004048d0
mov byte [esp + 0x154], 9
push str._ad.xml
push eax
lea edx, [esp + 0x20]
push edx
call fcn.00403170
add esp, 0xc
mov byte [esp + 0x154], 0xa
push eax
lea ecx, [esp + 0x18]
call fcn.00403020
mov byte [esp + 0x154], 9
lea ecx, [esp + 0x18]
call fcn.00401a50
mov byte [esp + 0x154], 8
lea ecx, [esp + 0x24]
call fcn.00401a50
mov eax, dword [esp + 0x14]
push eax
mov ecx, ebx
call fcn.004757e0
mov eax, dword [esi]
mov ecx, dword [0x71dc0c]
push eax
call fcn.004382e0
mov ecx, dword [0x71dc0c]
mov ecx, dword [ecx + 4]
call fcn.0042c710
cmp eax, 0x190
jle 0x476aaf
cmp eax, 0x1f4
jl 0x476ab7
cmp eax, edi
jne 0x476856
mov edx, dword [ebx + 0x20]
push eax
push edi
push 0x8008
push edx
mov dword [ebx + 0x25c], edi
mov byte [ebx + 0x1fd], 0
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esp + 0x154], 0
lea ecx, [esp + 0x14]
call fcn.00401a50
mov dword [esp + 0x154], 0xffffffff
cmp ebp, edi
je 0x476b00
mov eax, dword [ebp]
mov edx, dword [eax]
push 1
mov ecx, ebp
call edx
mov dword [esp + 0x15c], edi
xor eax, eax
jmp 0x477176
push 0
push 0x6e2da0
push 0x6e1204
push 0
push ebp
call fcn.005da3f0
mov esi, eax
add esp, 0x14
test esi, esi
je 0x477135
xor ebp, ebp
push ebp
push str.PowerPxP_Main_Window
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call fcn.005b76ca
test eax, eax
jne 0x476b7c
jmp 0x476b50
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, ebp
add ebp, 1
cmp eax, 0x14
jg 0x476bb1
push 0
push str.PowerPxP_Main_Window
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call fcn.005b76ca
test eax, eax
je 0x476b50
mov ecx, dword [0x71dc10]
test ecx, ecx
je 0x476b8e
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
push 0x38
call fcn.005b4633
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x154], 0xb
test eax, eax
je 0x476c01
mov ecx, eax
call fcn.004386f0
jmp 0x476c03
mov ecx, dword [ebx + 0x20]
push 0x29a
xor esi, esi
push esi
push 0x8008
push ecx
mov dword [ebx + 0x25c], esi
mov byte [ebx + 0x1fd], 0
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [esp + 0x154], 0xffffffff
mov ecx, dword [esp + 0x15c]
cmp ecx, esi
je 0x476bf3
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esp + 0x15c], esi
xor eax, eax
jmp 0x477176
xor eax, eax
mov byte [esp + 0x154], 0
lea ecx, [esi + 0x2c]
push ecx
lea ecx, [esp + 0x18]
mov dword [0x71dc10], eax
call fcn.00402bc0
mov byte [esp + 0x154], 0xc
push 0x631518
lea ecx, [esp + 0x18]
call fcn.00404770
push 0x630bfc
lea ecx, [esp + 0x18]
call fcn.00404770
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0
jl 0x476c78
push 0x636284
push eax
call fcn.005d9339
add esp, 8
test eax, eax
je 0x476c78
sub eax, dword [esp + 0x14]
test eax, eax
jle 0x476c78
push str.msdrive
push 0x636284
lea ecx, [esp + 0x1c]
call fcn.004166e0
lea ecx, [esp + 0x2c]
call fcn.004019e0
mov byte [esp + 0x154], 0xd
lea ecx, [esp + 0x3c]
call fcn.004019e0
mov byte [esp + 0x154], 0xe
lea ecx, [esp + 0x38]
call fcn.004019e0
mov byte [esp + 0x154], 0xf
lea ecx, [esp + 0x28]
call fcn.004019e0
mov byte [esp + 0x154], 0x10
lea ecx, [esp + 0x30]
call fcn.004019e0
mov byte [esp + 0x154], 0x11
lea ebp, [esi + 0x40]
push ebp
lea edx, [esp + 0x1c]
push edx
mov ecx, ebx
call fcn.00468b90
mov byte [esp + 0x154], 0x12
push eax
lea ecx, [esp + 0x40]
call fcn.00403020
mov byte [esp + 0x154], 0x11
lea ecx, [esp + 0x18]
call fcn.00401a50
lea eax, [esi + 0x44]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
call fcn.00468b90
mov byte [esp + 0x154], 0x13
push eax
lea ecx, [esp + 0x3c]
call fcn.00403020
mov byte [esp + 0x154], 0x11
lea ecx, [esp + 0x18]
call fcn.00401a50
lea edx, [esi + 0x28]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebx
call fcn.00468b90
mov byte [esp + 0x154], 0x14
push eax
lea ecx, [esp + 0x2c]
call fcn.00403020
mov byte [esp + 0x154], 0x11
lea ecx, [esp + 0x18]
call fcn.00401a50
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebx
call fcn.00468b90
mov byte [esp + 0x154], 0x15
push eax
lea ecx, [esp + 0x34]
call fcn.00403020
mov byte [esp + 0x154], 0x11
lea ecx, [esp + 0x18]
call fcn.00401a50
mov eax, dword [ebp]
cmp dword [eax - 0xc], 0
jne 0x476dd5
mov ecx, dword [esi + 0x38]
mov edx, dword [esi + 0x34]
mov eax, dword [esi + 0x30]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esi + 0x24]
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esi + 0x20]
push edx
push eax
push ecx
lea edx, [esp + 0x48]
push str.http:___s__s_authanonymous:anonymousprogid_sdown0name_sst_sbalance_skey_s
push edx
call fcn.004030a0
add esp, 0x24
jmp 0x476e0f
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x34]
mov edx, dword [esi + 0x30]
push eax
mov eax, dword [esp + 0x2c]
push ecx
mov ecx, dword [esi + 0x24]
push edx
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esi + 0x20]
push eax
push ecx
push edx
lea eax, [esp + 0x50]
push str.http:___s__s_auth_s:_sprogid_sdown0name_sst_sbalance_skey_s
push eax
call fcn.004030a0
add esp, 0x2c
lea ecx, [esp + 0x34]
call fcn.004019e0
mov byte [esp + 0x154], 0x16
lea ecx, [esp + 0x1c]
call fcn.004019e0
mov byte [esp + 0x154], 0x17
lea ecx, [esp + 0x40]
call fcn.004019e0
mov byte [esp + 0x154], 0x18
call fcn.005bc35c
mov ebp, dword [eax + 8]
push 0x104
push 0x104
lea ecx, [esp + 0x24]
call fcn.00401ab0
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, dword [esp + 0x1c]
test ecx, ecx
jne 0x476e71
xor eax, eax
jmp 0x476e87
mov eax, ecx
lea ebx, [eax + 1]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x476e76
sub eax, ebx
js 0x477359
cmp eax, dword [ecx - 8]
jg 0x477359
mov dword [ecx - 0xc], eax
mov ecx, dword [esp + 0x1c]
mov byte [eax + ecx], 0
push 0x5c
lea ecx, [esp + 0x20]
call fcn.00402710
add eax, 1
push eax
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x24]
call fcn.004048d0
mov bl, 0x19
mov byte [esp + 0x154], bl
push str.powerpxp.ini
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00403170
add esp, 0xc
mov byte [esp + 0x154], 0x1a
push eax
lea ecx, [esp + 0x20]
call fcn.00403020
mov byte [esp + 0x154], bl
lea ecx, [esp + 0x18]
call fcn.00401a50
mov byte [esp + 0x154], 0x18
lea ecx, [esp + 0x20]
call fcn.00401a50
mov ecx, dword [esp + 0x1c]
push ecx
push 0x104
lea edx, [esp + 0x4c]
push edx
push str.8888
push str.PORT
push str.CONFIG
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x44]
call fcn.00401e30
mov ecx, dword [esp + 0x40]
push ecx
lea edx, [esp + 0x38]
push str.http:__127.0.0.1:_s
push edx
call fcn.004030a0
add esp, 0xc
mov dword [esp + 0x18], 0
jmp 0x476f60
mov eax, dword [edi + 0x8b8]
mov ecx, dword [edi + 0x8b4]
mov edx, dword [edi + 0x8bc]
mov ebp, dword [esi + 0x4c]
mov ebx, dword [esi + 0x48]
push eax
mov eax, dword [edi + 0x8c0]
push ecx
movzx ecx, byte [edi + 0x8ac]
push eax
mov eax, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x3c]
push ecx
mov ecx, dword [0x71dc10]
push ebp
push ebx
push edx
push eax
call fcn.004389c0
mov ecx, dword [0x71dc10]
mov ecx, dword [ecx + 4]
call fcn.0042c710
cmp eax, 0x190
jle 0x476fc1
cmp eax, 0x1f4
jl 0x4771a0
test eax, eax
je 0x4771a4
mov byte [esp + 0x154], 0x17
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x476ff1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0x16
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477019
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0x11
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477041
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0x10
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477069
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xf
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477091
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xe
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4770b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xd
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4770e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xc
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477109
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477131
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [esp + 0x24]
mov ecx, dword [ebx + 0x20]
push 0
push 1
push 0x8008
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [esp + 0x154], 0xffffffff
mov ecx, dword [esp + 0x15c]
test ecx, ecx
je 0x477166
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esp + 0x15c], 0
mov eax, 1
mov ecx, dword [esp + 0x14c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.005d8d34
add esp, 0x144
ret 4
test eax, eax
jne 0x4771c4
mov ecx, dword [esp + 0x18]
add ecx, 1
cmp ecx, 3
mov dword [esp + 0x18], ecx
jle 0x4771c4
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x476f60
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x20]
push eax
xor esi, esi
push esi
push 0x8008
push edx
mov dword [ecx + 0x25c], esi
mov byte [ecx + 0x1fd], 0
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esp + 0x154], 0x17
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477210
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0x16
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477238
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0x11
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477260
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0x10
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477288
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xf
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4772b0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xe
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4772d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xd
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477300
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0xc
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x477328
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x154], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x476bd5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x476bd5
push 0x80070057
call fcn.00401470
int3