Function at 0x476250
Capabilities:
Check for time delay via gettickcount
Get file size
Get thread local storage value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x53f1f1
push eax
mov dword fs:[0], esp
sub esp, 0xf14
mov ecx, 0x84
xor eax, eax
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xf44]
xor ebx, ebx
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0xf4c]
mov ecx, 0x84
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c0], ebx
call edi
mov esi, dword [esp + 0xf34]
mov dword [0x5928c8], eax
cmp esi, ebx
je 0x477397
cmp word [esi], bx
je 0x477397
mov eax, dword [esp + 0xf38]
cmp eax, ebx
je 0x477397
cmp word [eax], bx
je 0x477397
cmp dword [0x5928cc], ebx
jne 0x4762f3
mov dword [0x5928c0], 2
mov dword [0x5928c4], 0x306
jmp 0x4773ab
mov eax, dword [0x54a4b4]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x30], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xf2c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], eax
mov ebp, dword [esp + 0xf48]
xor eax, eax
cmp ebp, ebx
mov ecx, 0xe1
setne al
mov dword [esp + 0x20], eax
xor eax, eax
lea edi, [esp + 0xad]
mov byte [esp + 0xac], bl
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xf40]
lea edx, [esp + 0x58]
stosw word es:[edi], ax
push edx
push 0x60
stosb byte es:[edi], al
push 1
mov dword [esp + 0x48], ecx
push 5
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x98]
push 0x80
mov dword [esp + 0x98], ebx
push 0x120089
push esi
rep stosd dword es:[edi], eax
mov byte [esp + 0xf48], 2
mov dword [esp + 0x68], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x40], 0xffffffff
mov dword [esp + 0x50], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
call fcn.004bb100
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
mov dword [esp + 0x38], ebp
jne 0x4763ed
cmp dword [esp + 0x58], 0xc0000034
je 0x476e83
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push esi
call fcn.004bb100
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
mov dword [esp + 0x38], ebp
je 0x476e36
push ebp
call fcn.0046ef50
add esp, 4
cmp eax, ebx
push ebp
jne 0x476e5b
call fcn.0046f120
add esp, 4
test eax, eax
jne 0x476e5a
lea eax, [esp + 0x84]
push 0x28
push eax
push ebp
call fcn.004ba310
add esp, 0xc
test eax, eax
je 0x476ebf
mov ecx, dword [0x592e90]
mov esi, dword [esp + 0xf38]
lea edx, [esp + 0x2c]
push ecx
push edx
push 0x5752e4
push esi
mov dword [esp + 0x50], ebx
call fcn.004bac20
add esp, 0x10
test eax, eax
je 0x476479
push esi
call fcn.004bb190
add esp, 4
test eax, eax
je 0x476479
mov eax, dword [esp + 0x2c]
push eax
call fcn.004bb190
add esp, 4
test eax, eax
je 0x476479
mov dword [esp + 0x4c], 1
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x48], 1
cmp eax, ebx
je 0x4766b8
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x18]
call fcn.0043bf70
mov edx, dword [esp + 0x14]
push ebx
push 0x60
push 2
push 1
push 0x80
push 0x12019f
push edx
call fcn.004bb100
add esp, 0x1c
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x476ee3
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x64]
mov dword [esp + 0x60], ebx
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0xf38]
lea eax, [esp + 0x60]
push eax
push ecx
call fcn.004ba4f0
add esp, 8
test eax, eax
je 0x476b04
mov eax, dword [esp + 0xf3c]
mov dword [esp + 0x44], 1
cmp eax, ebx
jne 0x476b04
mov edx, dword [esp + 0xf38]
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push edx
call fcn.004bb100
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
je 0x476b04
cmp dword [esp + 0x20], ebx
je 0x4765d2
mov dword [esp + 0x18], ebx
mov dword [0x5928c0], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x7bd]
mov byte [esp + 0x7bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x7bc]
push eax
push ebp
call fcn.00487930
add esp, 8
test eax, eax
jne 0x476593
lea ecx, [esp + 0x18]
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x4765ad
lea edx, [esp + 0x18]
test edx, edx
je 0x4765a6
mov eax, dword [esp + 0x7d8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x7d4]
cmp eax, ebx
jne 0x4765b7
cmp dword [esp + 0x18], ebx
je 0x4765ce
cmp dword [esp + 0xf48], 1
jne 0x4765d2
push ebp
call fcn.0046ef50
add esp, 4
test eax, eax
je 0x4765d2
mov dword [esp + 0x20], ebx
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x435]
mov byte [esp + 0x434], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x434]
push ecx
push ebp
stosb byte es:[edi], al
call fcn.0047cda0
add esp, 8
test eax, eax
je 0x4766ac
mov edx, dword [esp + 0x434]
mov eax, dword [esp + 0x438]
mov ecx, dword [esp + 0x43c]
mov dword [esp + 0xac], edx
mov edx, dword [esp + 0x440]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xf40]
mov dword [esp + 0xb4], ecx
mov ecx, 0x66
lea esi, [esp + 0x47c]
lea edi, [esp + 0xf4]
mov dword [esp + 0xb8], edx
cmp eax, ebx
mov dword [esp + 0x48], ebx
rep movsd dword es:[edi], dword [esi]
jne 0x4766ac
mov eax, dword [esp + 0x7b4]
cmp eax, ebx
jbe 0x4766ac
push eax
call fcn.00520a0a
mov ecx, dword [esp + 0x7b8]
mov edx, eax
mov esi, ecx
xor eax, eax
mov edi, edx
mov dword [esp + 0x40], edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x7b8]
lea eax, [esp + 0x44]
push eax
push ecx
push edx
push ebp
mov dword [esp + 0x54], ebx
call fcn.0047d110
add esp, 0x14
push ebp
call dword [0x593fb8]
jmp 0x476b04
mov esi, dword [esp + 0xf38]
lea ecx, [esp + 0x14]
push esi
call fcn.0043c060
lea edx, [esp + 0x60]
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x64]
mov dword [esp + 0x60], ebx
push edx
rep stosd dword es:[edi], eax
push esi
call fcn.004ba4f0
add esp, 8
test eax, eax
je 0x476791
mov eax, dword [esp + 0x80]
mov edi, 1
cmp eax, ebx
mov dword [esp + 0x44], edi
jne 0x47670e
cmp dword [esp + 0x7c], ebx
je 0x476795
mov eax, dword [0x592e90]
lea ecx, [esp + 0x10]
push eax
push ecx
push 0x5751c4
push esi
call fcn.004bac20
add esp, 0x10
test eax, eax
je 0x476770
mov edx, dword [esp + 0x10]
mov dword [esp + 0x40], 1
push edx
push esi
call fcn.004ba950
add esp, 8
test eax, eax
je 0x47674f
mov dword [esp + 0x28], 1
jmp 0x476795
mov dword [0x5928c0], 0x28
mov dword [0x5928c4], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476795
mov dword [0x5928c0], 0x24
mov dword [0x5928c4], 0x3ea
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476795
mov edi, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
push ebx
push 0x60
push 3
push 1
push 0x80
push 0x12019f
push eax
call fcn.004bb100
add esp, 0x1c
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
jne 0x4767f4
mov ecx, dword [esp + 0x14]
push 1
push ebx
push ecx
call fcn.004ba390
mov edx, dword [esp + 0x20]
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x12019f
push edx
call fcn.004bb100
add esp, 0x28
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x476f07
cmp edi, ebx
je 0x476804
mov eax, dword [esp + 0x28]
mov dword [esp + 0x30], ebx
cmp eax, ebx
je 0x47680c
mov dword [esp + 0x30], 1
cmp edi, ebx
je 0x476a01
mov eax, dword [esp + 0x28]
or ebp, 0xffffffff
cmp eax, ebx
mov dword [esp + 0x18], 0xffffffff
je 0x4768f5
mov eax, dword [esp + 0x10]
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push eax
call fcn.004bb100
mov ebp, eax
add esp, 0x1c
cmp ebp, 0xffffffff
je 0x4768fd
cmp dword [esp + 0x20], ebx
je 0x4768ef
mov dword [esp + 0x18], ebx
mov dword [0x5928c0], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x7bd]
mov byte [esp + 0x7bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x7bc]
push ecx
push ebp
stosb byte es:[edi], al
call fcn.00487930
add esp, 8
test eax, eax
jne 0x4768b0
lea edx, [esp + 0x18]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x4768ca
lea eax, [esp + 0x18]
test eax, eax
je 0x4768c3
mov ecx, dword [esp + 0x7d8]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x7d4]
cmp eax, ebx
jne 0x4768d4
cmp dword [esp + 0x18], ebx
je 0x4768eb
cmp dword [esp + 0xf48], 1
jne 0x4768ef
push ebp
call fcn.0046ef50
add esp, 4
test eax, eax
je 0x4768ef
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ebp
jmp 0x4768fd
mov edx, dword [esp + 0x24]
mov dword [esp + 0x18], edx
cmp dword [esp + 0xf3c], ebx
jne 0x4769f5
mov edx, dword [esp + 0x18]
cmp edx, 0xffffffff
je 0x4769f5
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x435]
mov byte [esp + 0x434], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x434]
push eax
push edx
call fcn.0047cda0
add esp, 8
test eax, eax
je 0x4769f5
mov ecx, dword [esp + 0x434]
mov eax, dword [esp + 0x43c]
mov edx, dword [esp + 0x438]
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x440]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xf40]
mov dword [esp + 0xb8], ecx
mov ecx, 0x66
lea esi, [esp + 0x47c]
lea edi, [esp + 0xf4]
mov dword [esp + 0xb0], edx
cmp eax, ebx
mov dword [esp + 0x48], ebx
rep movsd dword es:[edi], dword [esi]
jne 0x4769f5
mov eax, dword [esp + 0x7b4]
cmp eax, ebx
jbe 0x4769f5
push eax
call fcn.00520a0a
mov ecx, dword [esp + 0x7b8]
mov edx, eax
mov esi, ecx
xor eax, eax
mov edi, edx
mov dword [esp + 0x40], edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x7b8]
lea eax, [esp + 0x60]
push eax
push ecx
push edx
mov edx, dword [esp + 0x28]
push edx
mov dword [esp + 0x70], ebx
call fcn.0047d110
add esp, 0x14
cmp ebp, 0xffffffff
je 0x476a01
push ebp
call dword [0x593fb8]
mov ebp, dword [esp + 0x28]
cmp ebp, ebx
jne 0x476b04
cmp dword [esp + 0x40], ebx
je 0x476b04
mov eax, dword [esp + 0x10]
push eax
call fcn.00422e21
add esp, 4
test eax, eax
jbe 0x476b04
mov dword [esp + 0x18], ebx
mov dword [0x5928c0], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
mov ecx, 0xe1
xor eax, eax
lea edi, [esp + 0x7bd]
mov byte [esp + 0x7bc], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [esp + 0x24]
lea ecx, [esp + 0x7bc]
push ecx
push edi
call fcn.00487930
add esp, 8
test eax, eax
jne 0x476a82
lea edx, [esp + 0x18]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x476a9c
lea eax, [esp + 0x18]
test eax, eax
je 0x476a95
mov ecx, dword [esp + 0x7d8]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x7d4]
cmp eax, ebx
jne 0x476aac
cmp dword [esp + 0x18], ebx
jne 0x476aac
mov dword [esp + 0x20], ebx
jmp 0x476b04
mov edx, dword [esp + 0x10]
push ebx
push 0x60
push 2
push 1
push 0x80
push 0x12019f
push edx
call fcn.004bb100
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
je 0x476af5
push 0xffffffffffffffff
push esi
push edi
call fcn.0046d8b0
add esp, 0xc
test eax, eax
je 0x476aea
mov ebp, 1
mov dword [esp + 0x28], ebp
push esi
call dword [0x593fb8]
cmp ebp, ebx
jne 0x476b04
mov eax, dword [esp + 0x10]
push 1
push eax
call fcn.004ba690
add esp, 8
mov ecx, 0xf7
xor eax, eax
lea edi, [esp + 0xb45]
mov byte [esp + 0xb44], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0xb44]
test ecx, ecx
stosb byte es:[edi], al
jne 0x476b63
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x2947
call esi
mov dword [0x5928c8], eax
mov dword [0x5928c0], 7
mov dword [0x5928c4], 0x47f
jmp 0x476bfa
mov eax, dword [0x575268]
mov edx, dword [0x575264]
mov ecx, dword [0x57526c]
mov dword [esp + 0xb48], eax
mov dword [esp + 0xb44], edx
mov edx, dword [0x575270]
lea eax, [esp + 0xac]
mov dword [esp + 0xb4c], ecx
test eax, eax
mov dword [esp + 0xb50], edx
mov dword [esp + 0xb64], 2
mov dword [esp + 0xb68], ebx
mov dword [esp + 0xb6c], ebx
mov dword [esp + 0xb70], ebx
jne 0x476cc6
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x2988
call esi
mov dword [0x5928c8], eax
mov dword [0x5928c0], 8
mov dword [0x5928c4], 0x486
call esi
mov ebp, dword [esp + 0x38]
mov dword [0x5928c8], eax
cmp ebp, 0xffffffff
je 0x476c11
push ebp
call dword [0x593fb8]
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
je 0x476c21
push eax
call dword [0x593fb8]
cmp dword [esp + 0xf40], ebx
jne 0x476c3b
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x476c3b
push eax
call fcn.00520a33
add esp, 4
cmp dword [esp + 0x1c], ebx
jne 0x476f87
cmp dword [0x592e80], ebx
je 0x476f6c
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [esp + 0x14]
mov dword [0x5928c0], ebx
call ebp
cmp esi, ebx
mov dword [0x5928c8], eax
je 0x47706b
push esi
call fcn.00422e21
add esp, 4
test eax, eax
je 0x47706b
push ebx
push 0x60
push 1
push 7
push 0x80
push 0x120089
push esi
call fcn.004bb100
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
jne 0x476f2b
mov dword [0x5928c0], 3
mov dword [0x5928c4], 0x175d
call ebp
mov dword [0x5928c8], eax
jmp 0x476f49
lea ecx, [esp + 0x28c]
test ecx, ecx
jne 0x476cf2
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x296f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476d41
mov ecx, 0x66
xor eax, eax
lea edi, [esp + 0x28c]
mov esi, 0x5928d0
rep stosd dword es:[edi], eax
mov eax, dword [0x5751c0]
mov ecx, 0x66
lea edi, [esp + 0x28c]
cmp eax, 0xffffffff
rep movsd dword es:[edi], dword [esi]
je 0x476d31
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x476d31
mov dword [esp + 0x2ac], eax
lea edx, [esp + 0x28c]
push edx
call fcn.004bb2c0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x476d7b
mov ecx, 0x66
lea esi, [esp + 0x28c]
lea edi, [esp + 0xf4]
lea eax, [esp + 0xac]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.004bb2f0
add esp, 4
mov ecx, dword [0x592e88]
mov edx, dword [0x592e8c]
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x3c]
lea eax, [esp + 0x50]
mov dword [esp + 0x420], edx
push eax
lea edx, [esp + 0xb0]
push ecx
lea eax, [esp + 0xb4c]
push edx
push eax
push esi
push ebp
mov dword [esp + 0x68], ebx
call fcn.0047fdc0
mov ecx, dword [esp + 0x68]
add esp, 0x18
cmp ecx, ebx
je 0x476ddb
cmp dword [esp + 0x30], ebx
jne 0x476ddb
mov dword [esp + 0x30], 1
cmp eax, ebx
je 0x476c05
test byte [esp + 0xf50], 2
je 0x476e00
lea ecx, [esp + 0x84]
push 0x28
push ecx
push esi
call fcn.004ba350
add esp, 0xc
test byte [esp + 0xf50], 4
je 0x476e1d
lea edx, [esp + 0x54]
lea eax, [esp + 0x34]
push edx
push eax
push ebp
call fcn.004bb8b0
add esp, 0xc
cmp dword [esp + 0xf54], ebx
je 0x476e2d
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [esp + 0x1c], ebx
jmp 0x476c05
mov dword [0x5928c0], 3
mov dword [0x5928c4], 0x344
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476c21
push ebp
call dword [0x593fb8]
mov ecx, dword [esp + 0xf54]
mov edx, dword [esp + 0xf50]
mov eax, dword [esp + 0xf38]
push ecx
push edx
push ebx
push eax
push esi
call fcn.0046d550
add esp, 0x14
lea ecx, [esp + 0x14]
mov byte [esp + 0xf2c], 1
call fcn.0043bde0
lea ecx, [esp + 0x2c]
mov byte [esp + 0xf2c], bl
call fcn.0043bde0
lea ecx, [esp + 0x10]
mov dword [esp + 0xf2c], 0xffffffff
call fcn.0043bde0
xor eax, eax
jmp 0x4773b7
mov dword [0x5928c0], 5
mov dword [0x5928c4], 0x368
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476c05
mov dword [0x5928c0], 4
mov dword [0x5928c4], 0x384
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476c05
mov dword [0x5928c0], 4
mov dword [0x5928c4], 0x408
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x5928c8], eax
jmp 0x476c05
lea ecx, [esp + 0xac]
push ecx
push esi
call fcn.0047fa70
add esp, 8
mov edi, eax
push esi
call dword [0x593fb8]
cmp edi, ebx
jne 0x476f6c
mov dword [0x5928c0], 0x1c
mov dword [0x5928c4], 0x4b2
call ebp
mov dword [0x5928c8], eax
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x476f87
mov edx, dword [esp + 0x54]
push edx
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004bab90
add esp, 0xc
mov eax, dword [esp + 0x4c]
cmp eax, ebx
mov eax, dword [esp + 0x1c]
je 0x477204
cmp eax, ebx
jne 0x4771f0
cmp dword [esp + 0x44], ebx
je 0x477152
mov ecx, dword [0x592e90]
mov esi, dword [esp + 0xf38]
lea edx, [esp + 0x10]
push ecx
push edx
push 0x5751c4
push esi
call fcn.004bac20
add esp, 0x10
test eax, eax
je 0x477347
mov eax, dword [esp + 0x10]
push eax
push esi
call fcn.004ba950
add esp, 8
test eax, eax
je 0x4770d2
mov ecx, dword [esp + 0x14]
push esi
push ecx
call fcn.004ba950
add esp, 8
test eax, eax
je 0x47709f
cmp dword [esp + 0x20], ebx
je 0x47708b
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xf4c]
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [edx + 0x20c], eax
jb 0x477233
lea eax, [eax + eax + 2]
push eax
call fcn.00520a0a
mov edx, dword [esp + 0xf50]
mov edi, eax
xor eax, eax
mov ecx, dword [edx + 0x20c]
mov dword [edx + 0x208], edi
lea ecx, [ecx + ecx + 2]
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
mov ecx, dword [edx + 0x208]
push eax
push ecx
jmp 0x47733f
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x174f
call ebp
mov dword [0x5928c8], eax
jmp 0x476f6c
mov edx, dword [esp + 0x10]
push 1
push edx
call fcn.004ba690
add esp, 8
jmp 0x477347
mov eax, dword [esp + 0x10]
push esi
push eax
call fcn.004ba950
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf4c]
add esp, 8
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x477116
jmp 0x4770f5
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0xf44]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x477116
mov edx, dword [esp + 0xf44]
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.00423aea
add esp, 8
jmp 0x477347
lea edx, [eax + eax + 2]
push edx
call fcn.00520a0a
mov edx, dword [esp + 0xf48]
mov edi, eax
mov eax, dword [edx + 0x20c]
mov dword [edx + 0x208], edi
lea ecx, [eax + eax + 2]
xor eax, eax
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x18]
jmp 0x477337
mov eax, dword [esp + 0xf38]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.004ba950
add esp, 8
test eax, eax
jne 0x477347
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xf44]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [edx + 0x20c], eax
jae 0x4771ac
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
rep stosd dword es:[edi], eax
push edx
call fcn.00423aea
add esp, 8
jmp 0x477347
lea eax, [eax + eax + 2]
push eax
call fcn.00520a0a
mov edx, dword [esp + 0xf48]
mov edi, eax
xor eax, eax
mov ecx, dword [edx + 0x20c]
mov dword [edx + 0x208], edi
lea ecx, [ecx + ecx + 2]
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
mov ecx, dword [edx + 0x208]
push eax
push ecx
jmp 0x47733f
mov edx, dword [esp + 0x14]
push 1
push edx
call fcn.004ba690
add esp, 8
jmp 0x477347
cmp eax, ebx
jne 0x477280
cmp dword [esp + 0x28], ebx
je 0x477347
cmp dword [esp + 0x20], ebx
je 0x47726c
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xf4c]
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x477254
mov edx, dword [esp + 0xf4c]
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.00423aea
add esp, 8
jmp 0x477347
lea edx, [eax + eax + 2]
push edx
call fcn.00520a0a
mov edx, dword [esp + 0xf50]
mov edi, eax
jmp 0x477313
mov eax, dword [esp + 0x10]
push 1
push eax
call fcn.004ba690
add esp, 8
jmp 0x477347
cmp dword [esp + 0x30], ebx
je 0x477298
mov ecx, dword [esp + 0xf38]
push 1
push ecx
call fcn.004ba690
add esp, 8
cmp dword [esp + 0x28], ebx
je 0x477347
mov edx, dword [esp + 0xf38]
mov eax, dword [esp + 0x10]
push edx
push eax
call fcn.004ba950
add esp, 8
test eax, eax
jne 0x477347
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xf44]
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esi - 8]
cmp eax, 0x104
mov dword [ecx + 0x20c], eax
jae 0x477300
mov edx, dword [esp + 0xf44]
mov ecx, 0x82
xor eax, eax
mov edi, edx
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.00423aea
add esp, 8
jmp 0x477347
lea edx, [eax + eax + 2]
push edx
call fcn.00520a0a
mov edx, dword [esp + 0xf48]
mov edi, eax
mov dword [edx + 0x208], edi
mov eax, dword [edx + 0x20c]
lea ecx, [eax + eax + 2]
xor eax, eax
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x14]
mov edx, dword [edx + 0x208]
push ecx
push edx
call fcn.00423aea
add esp, 0xc
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x47735c
push eax
call fcn.00520a33
add esp, 4
mov dword [esp + 0x34], ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0xf2c], 1
call fcn.0043bde0
lea ecx, [esp + 0x2c]
mov byte [esp + 0xf2c], bl
call fcn.0043bde0
lea ecx, [esp + 0x10]
mov dword [esp + 0xf2c], 0xffffffff
call fcn.0043bde0
mov eax, dword [esp + 0x1c]
jmp 0x4773b7
mov dword [0x5928c0], 1
mov dword [0x5928c4], 0x300
call edi
mov dword [0x5928c8], eax
mov eax, 1
mov ecx, dword [esp + 0xf24]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xf20
ret