Function at 0x100471f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [0x1017bfd8]
push edi
cmp byte [esi], 0
je 0x1004758b
mov eax, dword [esi + 0x199c]
cmp eax, dword [esi + 0x1998]
je 0x1004721b
call fcn.10046f20
mov eax, dword [esi + 0x1998]
lea edi, [esi + 0x1c2c]
mov dword [esi + 0x19a0], eax
mov ebx, 2
mov dword [esi + 0x364], 0
mov dword [esi + 0x360], 0
mov dword [esi + 0x35c], 0
mov ecx, dword [edi + 4]
test ecx, ecx
jns 0x1004726f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.10053900
mov dword [edi], 0
add edi, 0xc
sub ebx, 1
jne 0x10047250
mov eax, dword [esi + 0x1b34]
test eax, eax
je 0x100472a1
test dword [eax + 8], 0x2000
jne 0x100472a1
mov ebx, dword [eax + 0x2f0]
mov ecx, dword [esi + 0x1b3c]
mov dword [ebp - 0xc], ebx
jmp 0x100472b4
xor ebx, ebx
mov dword [ebp - 0xc], ebx
test eax, eax
je 0x100472b2
mov ecx, dword [esi + 0x1b3c]
jmp 0x100472b4
xor ecx, ecx
mov eax, dword [esi + 0x19a4]
xor edi, edi
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
test eax, eax
je 0x10047326
cmp edi, eax
jge 0x1004758b
mov eax, dword [esi + 0x19ac]
mov edx, dword [eax + edi*4]
cmp byte [edx + 0x7a], 0
je 0x1004731b
cmp byte [edx + 0x81], 0
jne 0x1004731b
mov eax, dword [edx + 8]
test eax, 0x1000000
jne 0x1004731b
cmp edx, ebx
je 0x1004731b
cmp edx, ecx
je 0x1004731b
mov ecx, dword [0x1017bfd8]
test eax, 0x2000000
je 0x1004730d
add ecx, 0x1c38
jmp 0x10047313
add ecx, 0x1c2c
call fcn.10046da0
mov ecx, dword [ebp - 4]
mov eax, dword [esi + 0x19a4]
inc edi
cmp edi, eax
jne 0x100472c8
xor edi, edi
mov edx, dword [ebp + edi*4 - 0xc]
test edx, edx
je 0x10047361
cmp byte [edx + 0x7a], 0
je 0x10047361
cmp byte [edx + 0x81], 0
jne 0x10047361
test dword [edx + 8], 0x2000000
mov ecx, dword [0x1017bfd8]
je 0x10047356
add ecx, 0x1c38
jmp 0x1004735c
add ecx, 0x1c2c
call fcn.10046da0
inc edi
cmp edi, 2
jl 0x10047328
mov ebx, dword [esi + 0x1c2c]
lea edx, [esi + 0x1c2c]
mov eax, dword [edx + 0xc]
lea edi, [edx + 0xc]
mov ecx, dword [edx + 4]
add eax, ebx
mov dword [ebp - 4], eax
mov dword [ebp - 8], ecx
cmp eax, ecx
jle 0x100473bf
test ecx, ecx
je 0x100473a3
mov eax, ecx
cdq
sub eax, edx
lea edx, [esi + 0x1c2c]
mov ecx, eax
mov eax, dword [ebp - 4]
sar ecx, 1
add ecx, dword [ebp - 8]
jmp 0x100473a8
mov ecx, 8
cmp ecx, dword [ebp - 4]
cmovg eax, ecx
mov ecx, edx
push eax
call fcn.10053900
mov eax, dword [ebp - 4]
lea edx, [esi + 0x1c2c]
mov ecx, 1
mov dword [edx], eax
mov dword [ebp - 4], ecx
nop dword [eax]
mov eax, dword [edi]
test eax, eax
je 0x1004742a
jle 0x1004758b
cmp ebx, dword [edx]
jge 0x1004758b
shl eax, 2
push eax
mov eax, dword [edx + 8]
push dword [edi + 8]
lea eax, [eax + ebx*4]
push eax
call sub.VCRUNTIME140.dll_memcpy
add ebx, dword [edi]
add esp, 0xc
mov ecx, dword [edi + 4]
test ecx, ecx
jns 0x1004741b
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.10053900
mov ecx, dword [ebp - 4]
lea edx, [esi + 0x1c2c]
mov dword [edi], 0
inc ecx
add edi, 0xc
mov dword [ebp - 4], ecx
cmp ecx, 2
jl 0x100473d0
cmp byte [esi + 0xac], 0
je 0x10047467
push dword [esi + 0xe4]
mov edx, dword [esi + 0x1cbc]
lea ecx, [esi + 0x1c48]
push dword [esi + 0xe0]
movss xmm1, dword [esi + 0x15a0]
call fcn.10060640
add esp, 8
cmp dword [esi + 0x1c60], 0
je 0x10047481
lea edx, [esi + 0x1c48]
lea ecx, [esi + 0x1c2c]
call fcn.10046c70
mov edx, dword [0x1017bfd8]
test edx, edx
je 0x1004758b
mov byte [esi + 0x1c00], 1
cmp dword [esi + 0x1c2c], 0
jle 0x100474a7
mov eax, dword [esi + 0x1c34]
jmp 0x100474a9
xor eax, eax
mov dword [esi + 0x1c04], eax
mov eax, dword [esi + 0x1c2c]
mov dword [esi + 0x1c08], eax
mov dword [esi + 0x1c0c], 0
mov dword [esi + 0x1c10], 0
mov dword [esi + 0x1c14], 0
mov dword [esi + 0x1c18], 0
mov eax, dword [edx + 0x10]
mov ecx, dword [edx + 0x14]
mov dword [esi + 0x1c20], ecx
mov dword [esi + 0x1c1c], eax
mov ecx, dword [edx + 0xa8]
mov eax, dword [edx + 0xa4]
mov dword [esi + 0x1c28], ecx
xor ecx, ecx
mov dword [esi + 0x1c24], eax
cmp dword [esi + 0x1c2c], ecx
jle 0x1004754d
xor edx, edx
xor edi, edi
nop dword [eax + eax]
mov eax, dword [esi + 0x1c34]
mov eax, dword [eax + ecx*4]
add edx, dword [eax + 0x18]
mov dword [esi + 0x1c10], edx
mov eax, dword [esi + 0x1c34]
mov eax, dword [eax + ecx*4]
inc ecx
add edi, dword [eax + 0xc]
mov dword [esi + 0x1c0c], edi
cmp ecx, dword [esi + 0x1c2c]
jl 0x10047520
cmp dword [esi + 0x1c08], 0
mov eax, dword [esi + 0x1c10]
mov dword [esi + 0x35c], eax
mov eax, dword [esi + 0x1c0c]
mov dword [esi + 0x360], eax
jle 0x10047584
mov ecx, dword [esi + 0xdc]
test ecx, ecx
je 0x10047584
lea eax, [esi + 0x1c00]
push eax
call ecx
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3