Function at 0x471d50
Capabilities:
Access peb ldr_data
Check os version
Create shortcut via ishelllink

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5114a1
mov eax, dword fs:[0]
push eax
sub esp, 0x310
mov eax, dword [0x573be0]
xor eax, esp
mov dword [esp + 0x308], eax
push ebx
push esi
push edi
mov eax, dword [0x573be0]
xor eax, esp
push eax
lea eax, [esp + 0x320]
mov dword fs:[0], eax
mov dword [esp + 0x48], ecx
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [esp + 0x50], eax
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x34], eax
mov dword [esp + 0x328], 0
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
mov byte [esp + 0x2f], 1
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x44], ebx
mov byte [esp + 0x328], 1
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x30], edi
push str.iconPath
mov ecx, esi
mov byte [esp + 0x32c], 2
call fcn.00439d60
cmp eax, 0x57b240
je 0x4733d0
push str.iconPath
mov ecx, esi
call fcn.00439d60
cmp byte [eax + 8], 4
jne 0x4733d0
push str.iconPath
mov ecx, esi
call fcn.00439d60
mov ebx, eax
cmp byte [ebx + 8], 4
je 0x471e52
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004ed740
add esp, 0xc
push dword [ebx]
lea ecx, [esp + 0x48]
call fcn.00420650
lea edx, [esp + 0x44]
mov ecx, edx
call fcn.0042c120
push str.shortcutName
mov ecx, esi
call fcn.00439d60
cmp eax, 0x57b240
je 0x47326e
push str.shortcutName
mov ecx, esi
call fcn.00439d60
cmp byte [eax + 8], 4
jne 0x47326e
push str.shortcutName
mov ecx, esi
call fcn.00439d60
mov esi, eax
cmp byte [esi + 8], 4
je 0x471ec0
push 0x2a9
push str...WebInstallerUtilsjson_value.cpp
push str.type___stringValue
call fcn.004ed740
add esp, 0xc
push dword [esi]
lea ecx, [esp + 0x34]
call fcn.00420650
lea edx, [esp + 0x30]
mov ecx, edx
call fcn.0042c120
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0x328], 0xb
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
setbe al
test al, al
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
jne 0x471f8a
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
push ecx
mov byte [esp + 0x32c], 0xc
mov eax, dword [0x574ba4]
mov esi, esp
mov ecx, 0x574ba4
lea ebx, [esp + 0x18]
mov dword [esp + 0x1c], esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [esi], eax
mov eax, str.PUBLIC
mov byte [esp + 0x32c], 0xd
test eax, 0xffff0000
jne 0x471f72
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x471f80
push edi
push eax
mov ecx, esi
call fcn.00420bb0
mov byte [esp + 0x32c], 0xc
jmp 0x471ffc
push 6
push str.PUBLIC
mov ecx, esi
call fcn.00420c80
mov byte [esp + 0x32c], 0xc
jmp 0x471ffc
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
push ecx
mov byte [esp + 0x32c], 0xe
mov eax, dword [0x574ba4]
mov esi, esp
mov ecx, 0x574ba4
lea ebx, [esp + 0x18]
mov dword [esp + 0x1c], esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [esi], eax
mov eax, str.ALLUSERSPROFILE
mov byte [esp + 0x32c], 0xf
test eax, 0xffff0000
jne 0x471fe6
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x471ff4
push edi
push eax
mov ecx, esi
call fcn.00420bb0
jmp 0x471ff4
push 0xf
push str.ALLUSERSPROFILE
mov ecx, esi
call fcn.00420c80
mov byte [esp + 0x32c], 0xe
mov ecx, ebx
call fcn.0042b0e0
mov esi, dword [esp + 0x18]
add esp, 4
lea eax, [esp + 0x40]
push esi
push str._sDesktop_
push eax
call fcn.00421610
add esi, 0xfffffff0
or ebx, 0xffffffff
mov eax, ebx
lea ecx, [esi + 0xc]
mov byte [esp + 0x334], 0xb
add esp, 0xc
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x472041
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str..lnk
lea edx, [esp + 0x34]
lea ecx, [esp + 0x18]
call fcn.00424740
add esp, 4
mov byte [esp + 0x328], 0x10
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push dword [eax - 0xc]
push eax
call fcn.00428940
mov byte [esp + 0x328], 0xb
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472092
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esp + 0x40]
sub esp, 0xc
lea ecx, [esp + 0x60]
push esi
call fcn.004275a0
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
cmp dword [esp + eax + 0x60], 0
mov dword [esp + eax + 0x54], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x54]
sete byte [esp + 0x27]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [esp + ecx + 0x50], eax
cmp dword [esp + 0xb4], 0
mov dword [esp + 0x64], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x47210f
mov edx, dword [esp + 0x70]
lea eax, [esp + 0xa8]
cmp dword [edx], eax
jne 0x47210f
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov dword [edx], eax
mov eax, dword [esp + 0x80]
mov dword [eax], ecx
mov eax, dword [esp + 0x90]
sub ecx, ecx
mov dword [eax], ecx
cmp byte [esp + 0xb0], 0
je 0x472122
lea ecx, [esp + 0x64]
call fcn.00428330
mov edi, dword [esp + 0x98]
mov dword [esp + 0x64], vtable.std::basic_streambuf_char__struct_std::char_traits_char__.0
test edi, edi
je 0x472155
mov ecx, dword [edi]
test ecx, ecx
je 0x47214c
mov eax, dword [ecx]
call dword [eax + 8]
test eax, eax
je 0x47214c
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
push edi
call fcn.004e932d
add esp, 4
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x54], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [esp + ecx + 0x50], eax
lea eax, [esp + 0xc4]
push eax
mov dword [esp + 0xc8], vtable.std::ios_base.0
call fcn.00508b56
add esp, 4
cmp byte [esp + 0x27], 0
jne 0x4728dd
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, str.public_short_cut_not_exist:
mov byte [esp + 0x328], 0x11
test eax, 0xffff0000
jne 0x4721db
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x4721e9
push edi
push eax
lea ecx, [esp + 0x1c]
call fcn.00420bb0
jmp 0x4721e9
push str.public_short_cut_not_exist:
lea ecx, [esp + 0x18]
call fcn.00420650
mov byte [esp + 0x328], 0x12
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov eax, str.changeDesktopIcon
mov byte [esp + 0x328], 0x13
test eax, 0xffff0000
jne 0x472234
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x472244
push edi
push eax
lea ecx, [esp + 0x24]
call fcn.00420bb0
jmp 0x472244
push 0x11
push str.changeDesktopIcon
lea ecx, [esp + 0x24]
call fcn.00420c80
mov byte [esp + 0x328], 0x14
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x28], edi
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x32c], 0x15
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x40]
push ecx
mov edx, eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x32c], 0x16
call fcn.00421890
add esp, 4
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x328], 0x17
cmp dword [ecx + 0xc], 0
je 0x4722bb
push 0
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x328], 0x16
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4722e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x15
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472305
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x328], 0x14
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472326
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x12
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47234b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0xb
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472370
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x48]
push 0
lea eax, [esp + 0x24]
push eax
call fcn.0046be50
mov byte [esp + 0x328], 0x18
mov edx, dword [eax]
add esi, 0xfffffff0
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x4723d9
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x4723cc
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4723cc
call fcn.00420750
mov dword [esp + 0x18], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x4723c3
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0x10
mov dword [esp + 0x40], eax
jmp 0x4723d9
push dword [edx - 0xc]
lea ecx, [esp + 0x44]
push edx
call fcn.00420c80
mov byte [esp + 0x328], 0xb
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4723fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [esp + 0x30]
push eax
mov edx, 0x54d17c
lea ecx, [esp + 0x24]
call fcn.00424820
add esp, 4
push str..lnk
mov edx, eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x32c], 0x19
call fcn.00424740
add esp, 4
mov byte [esp + 0x328], 0x1a
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push dword [eax - 0xc]
push eax
call fcn.00428940
mov byte [esp + 0x328], 0x19
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47246b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0xb
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472490
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esp + 0x40]
sub esp, 0xc
lea ecx, [esp + 0x60]
push esi
call fcn.004275a0
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
cmp dword [esp + eax + 0x60], 0
mov dword [esp + eax + 0x54], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x54]
sete byte [esp + 0x27]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [esp + ecx + 0x50], eax
cmp dword [esp + 0xb4], 0
mov dword [esp + 0x64], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x47250d
mov edx, dword [esp + 0x70]
lea eax, [esp + 0xa8]
cmp dword [edx], eax
jne 0x47250d
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov dword [edx], eax
mov eax, dword [esp + 0x80]
mov dword [eax], ecx
mov eax, dword [esp + 0x90]
sub ecx, ecx
mov dword [eax], ecx
cmp byte [esp + 0xb0], 0
je 0x472520
lea ecx, [esp + 0x64]
call fcn.00428330
mov edi, dword [esp + 0x98]
mov dword [esp + 0x64], vtable.std::basic_streambuf_char__struct_std::char_traits_char__.0
test edi, edi
je 0x472553
mov ecx, dword [edi]
test ecx, ecx
je 0x47254a
mov eax, dword [ecx]
call dword [eax + 8]
test eax, eax
je 0x47254a
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
push edi
call fcn.004e932d
add esp, 4
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x54], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [esp + ecx + 0x50], eax
lea eax, [esp + 0xc4]
push eax
mov dword [esp + 0xc8], vtable.std::ios_base.0
call fcn.00508b56
add esp, 4
cmp byte [esp + 0x27], 0
jne 0x4728dd
push str.none_public_short_cut_not_exist:
lea ecx, [esp + 0x20]
call fcn.00420550
push str.changeDesktopIcon
lea ecx, [esp + 0x18]
mov byte [esp + 0x32c], 0x1b
call fcn.004204a0
mov byte [esp + 0x328], 0x1c
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x18], edi
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x32c], 0x1d
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x40]
push ecx
mov edx, eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x32c], 0x1e
call fcn.00421890
add esp, 4
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x328], 0x1f
cmp dword [ecx + 0xc], 0
je 0x472631
push 0
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x328], 0x1e
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472656
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x1d
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47267b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x328], 0x1c
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47269c
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x1b
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4726c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0xb
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4726e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.shortcut_not_exist
lea ecx, [esp + 0x38]
call fcn.00420600
add esi, 0xfffffff0
mov byte [esp + 0x2f], 0
mov byte [esp + 0x328], 2
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47271a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 1
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47273f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472764
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or ebx, 0xffffffff
mov edi, dword [esp + 0x34]
cmp dword [edi - 0xc], 0
je 0x47286a
push str.changeDesktopIcon
lea ecx, [esp + 0x18]
call fcn.004204a0
mov byte [esp + 0x328], 0x3f
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x34]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x32c], 0x40
call fcn.00421890
add esp, 4
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x328], 0x41
cmp dword [ecx + 0xc], 0
je 0x4727df
push 0
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x328], 0x40
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472804
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x328], 0x3f
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472825
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47284a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [esp + 0x2f], 0
je 0x47286a
push ecx
mov ecx, esp
push 0x54c728
call fcn.004204a0
lea ecx, [esp + 0x38]
call fcn.00422b40
add esp, 4
mov esi, dword [esp + 0x50]
test esi, esi
je 0x473540
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x328], 0x42
cmp dword [edi - 0xc], 0
push dword [esp + 0x34]
mov ecx, str.false
mov eax, str.true
cmovne eax, ecx
push eax
lea eax, [esp + 0x1c]
push str.__result__:__s____error__:___s_
push eax
call fcn.00421610
mov eax, 8
mov word [esi], ax
mov esi, dword [esp + 0x24]
add esp, 0x10
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x473518
call fcn.004208f0
mov edi, dword [esp + 0x44]
sub esp, 0xc
lea ecx, [esp + 0x60]
push edi
call fcn.004275a0
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
cmp dword [esp + eax + 0x60], 0
mov dword [esp + eax + 0x54], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x54]
sete byte [esp + 0x27]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [esp + ecx + 0x50], eax
cmp dword [esp + 0xb4], 0
mov dword [esp + 0x64], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x47295a
mov edx, dword [esp + 0x70]
lea eax, [esp + 0xa8]
cmp dword [edx], eax
jne 0x47295a
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov dword [edx], eax
mov eax, dword [esp + 0x80]
mov dword [eax], ecx
mov eax, dword [esp + 0x90]
sub ecx, ecx
mov dword [eax], ecx
cmp byte [esp + 0xb0], 0
je 0x47296d
lea ecx, [esp + 0x64]
call fcn.00428330
mov eax, dword [esp + 0x98]
mov dword [esp + 0x64], vtable.std::basic_streambuf_char__struct_std::char_traits_char__.0
mov dword [esp + 0x14], eax
test eax, eax
je 0x4729a8
mov ecx, dword [eax]
test ecx, ecx
je 0x47299f
mov eax, dword [ecx]
call dword [eax + 8]
test eax, eax
je 0x47299b
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx]
mov eax, dword [esp + 0x14]
push eax
call fcn.004e932d
add esp, 4
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 4]
mov dword [esp + eax + 0x54], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [esp + ecx + 0x50], eax
lea eax, [esp + 0xc4]
push eax
mov dword [esp + 0xc8], vtable.std::ios_base.0
call fcn.00508b56
add esp, 4
cmp byte [esp + 0x27], 0
jne 0x472bc0
push str.new_icon_not_exist:
lea ecx, [esp + 0x20]
call fcn.00420550
push str.changeDesktopIcon
lea ecx, [esp + 0x18]
mov byte [esp + 0x32c], 0x20
call fcn.004204a0
mov byte [esp + 0x328], 0x21
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x32c], 0x22
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x44]
push ecx
mov edx, eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x32c], 0x23
call fcn.00421890
add esp, 4
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x328], 0x24
cmp dword [ecx + 0xc], 0
je 0x472a86
push 0
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x328], 0x23
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472aac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x22
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472ad2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
or ebx, 0xffffffff
mov byte [esp + 0x328], 0x21
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472af6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x20
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472b1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0xb
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472b40
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.new_icon_not_exist
lea ecx, [esp + 0x38]
call fcn.00420600
mov byte [esp + 0x2f], 0
add esi, 0xfffffff0
mov byte [esp + 0x328], 2
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472b74
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 1
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472b99
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x328], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472764
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
jmp 0x472761
mov dword [esp + 0x38], 0
lea eax, [esp + 0x38]
push eax
push 0x54385c
push 1
push 0
push 0x54390c
mov byte [esp + 0x33c], 0x25
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [esp + 0x20], eax
test eax, eax
jns 0x472d1c
push str.changeDesktopIcon_error_CoCreateInstance_
lea ecx, [esp + 0x18]
call fcn.004204a0
mov byte [esp + 0x328], 0x26
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
mov byte [esp + 0x32c], 0x27
call fcn.00421890
add esp, 4
mov byte [esp + 0x328], 0x28
push dword [esp + 0x20]
mov edx, eax
lea ecx, [esp + 0x2c]
call fcn.00421800
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x32c], 0x29
call fcn.004222b0
mov byte [esp + 0x328], 0x28
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472c8e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x27
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472cb4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
or ebx, 0xffffffff
mov byte [esp + 0x328], 0x26
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472cd8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x25
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472cfd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0xb
mov eax, dword [esp + 0x38]
test eax, eax
je 0x472b53
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x472b53
mov eax, dword [esp + 0x38]
xor ecx, ecx
mov dword [esp + 0x3c], ecx
test eax, eax
je 0x472d48
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
push 0x553a00
push eax
call dword [ecx]
mov ecx, dword [esp + 0x3c]
xor edx, edx
test eax, eax
cmovs ecx, edx
mov dword [esp + 0x3c], ecx
push 2
mov byte [esp + 0x32c], 0x2a
mov eax, dword [ecx]
push esi
push ecx
call dword [eax + 0x14]
mov dword [esp + 0x20], eax
test eax, eax
jns 0x472e8c
push str.changeDesktopIcon_error_Load_
lea ecx, [esp + 0x18]
call fcn.004204a0
mov byte [esp + 0x328], 0x2b
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
mov byte [esp + 0x32c], 0x2c
call fcn.00421890
add esp, 4
mov byte [esp + 0x328], 0x2d
push dword [esp + 0x20]
mov edx, eax
lea ecx, [esp + 0x2c]
call fcn.00421800
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x32c], 0x2e
call fcn.004222b0
mov byte [esp + 0x328], 0x2d
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472dfe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x2c
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472e24
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x2b
lea edx, [ebx - 0x10]
or ebx, 0xffffffff
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472e48
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x2a
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472e6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x25
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x472cfd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x472cfd
xor eax, eax
push 0x206
push eax
mov word [esp + 0x114], ax
lea eax, [esp + 0x116]
push eax
call fcn.004eee10
mov eax, dword [esp + 0x44]
add esp, 0xc
mov ecx, dword [eax]
lea edx, [esp + 0x4c]
push edx
push 0x104
lea edx, [esp + 0x114]
push edx
push eax
call dword [ecx + 0x40]
mov dword [esp + 0x20], eax
test eax, eax
jns 0x472fa0
push str.changeDesktopIcon_error_GetIconLocation_
lea ecx, [esp + 0x18]
call fcn.004204a0
mov byte [esp + 0x328], 0x2f
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
mov byte [esp + 0x32c], 0x30
call fcn.00421890
add esp, 4
mov byte [esp + 0x328], 0x31
push dword [esp + 0x20]
mov edx, eax
lea ecx, [esp + 0x2c]
call fcn.00421800
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x32c], 0x32
call fcn.004222b0
mov byte [esp + 0x328], 0x31
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472f6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x30
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472f93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x2f
jmp 0x472e2c
push dword [esp + 0x4c]
mov eax, dword [esp + 0x3c]
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x44]
mov dword [esp + 0x20], eax
test eax, eax
jns 0x473087
push str.changeDesktopIcon_error_SetIconLocation_
lea ecx, [esp + 0x18]
call fcn.004204a0
mov byte [esp + 0x328], 0x33
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
mov byte [esp + 0x32c], 0x34
call fcn.00421890
add esp, 4
mov byte [esp + 0x328], 0x35
push dword [esp + 0x20]
mov edx, eax
lea ecx, [esp + 0x2c]
call fcn.00421800
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x32c], 0x36
call fcn.004222b0
mov byte [esp + 0x328], 0x35
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x473054
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x34
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47307a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x33
jmp 0x472e2c
mov eax, dword [esp + 0x3c]
push 1
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x18]
mov dword [esp + 0x20], eax
test eax, eax
jns 0x47316c
push str.changeDesktopIcon_error_Save_
lea ecx, [esp + 0x18]
call fcn.004204a0
mov byte [esp + 0x328], 0x37
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x20]
mov byte [esp + 0x32c], 0x38
call fcn.00421890
add esp, 4
mov byte [esp + 0x328], 0x39
push dword [esp + 0x20]
mov edx, eax
lea ecx, [esp + 0x2c]
call fcn.00421800
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x32c], 0x3a
call fcn.004222b0
mov byte [esp + 0x328], 0x39
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x473139
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x38
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47315f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0x37
jmp 0x472e2c
mov eax, dword [esp + 0x3c]
push esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov dword [esp + 0x18], eax
test eax, eax
jns 0x472e6d
push str.changeDesktopIcon_error_SaveCompleted_
lea ecx, [esp + 0x20]
call fcn.004204a0
mov byte [esp + 0x328], 0x3b
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x18]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x32c], 0x3c
call fcn.00421890
add esp, 4
mov byte [esp + 0x328], 0x3d
push dword [esp + 0x18]
mov edx, eax
lea ecx, [esp + 0x24]
call fcn.00421800
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x32c], 0x3e
call fcn.004222b0
lea ecx, [esp + 0x20]
call fcn.004205e0
lea ecx, [esp + 0x28]
call fcn.004205e0
lea ecx, [esp + 0x14]
call fcn.004205e0
lea ecx, [esp + 0x1c]
call fcn.004205e0
mov byte [esp + 0x328], 0x25
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x473230
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [esp + 0x328], 0xb
mov eax, dword [esp + 0x38]
test eax, eax
je 0x473246
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [esp + 0x40]
call fcn.004205e0
lea ecx, [esp + 0x30]
call fcn.004205e0
lea ecx, [esp + 0x44]
mov byte [esp + 0x328], 0
call fcn.004205e0
jmp 0x472764
push str.shortcutName_error
lea ecx, [esp + 0x20]
call fcn.00420550
push str.isDriectoryEmpty
lea ecx, [esp + 0x18]
mov byte [esp + 0x32c], 7
call fcn.004204a0
mov byte [esp + 0x328], 8
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x18], esi
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
mov byte [esp + 0x32c], 9
call fcn.00421890
add esp, 4
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x328], 0xa
cmp dword [ecx + 0xc], 0
je 0x4732ee
push 2
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x328], 9
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x473316
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [esp + 0x328], 8
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x473337
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 7
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47335c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 2
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x473381
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x328], 1
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4733a2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 0
mov edx, dword [esp + 0x44]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x472767
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x472767
push str.iconPath_error
lea ecx, [esp + 0x20]
call fcn.00420550
push str.changeDesktopIcon
lea ecx, [esp + 0x18]
mov byte [esp + 0x32c], 3
call fcn.004204a0
mov byte [esp + 0x328], 4
mov eax, dword [0x574ba4]
mov ecx, 0x574ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x18], esi
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
mov byte [esp + 0x32c], 5
call fcn.00421890
add esp, 4
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x328], 6
cmp dword [ecx + 0xc], 0
je 0x473450
push 2
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [ecx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x328], 5
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
or eax, 0xffffffff
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x473476
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [esp + 0x328], 4
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47349a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 3
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4734bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x328], 2
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4734e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [esp + 0x328], 1
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x473505
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
mov byte [esp + 0x328], 0
or ebx, 0xffffffff
jmp 0x4733b1
mov ecx, dword [esp + 0x50]
add esi, 0xfffffff0
mov dword [ecx + 8], eax
mov byte [esp + 0x328], 0
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x473540
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x328], 0xffffffff
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x473566
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x320]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x308]
xor ecx, esp
call fcn.004e8f3a
mov esp, ebp
pop ebp
ret 8