Function at 0x48e00c
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe88
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4900a9
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x60]
mov eax, dword [0x66f0b8]
mov eax, dword [eax]
call fcn.00654d58
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00621908
mov edx, dword [ebp - 0x5c]
mov eax, 0x672b1c
call fcn.004038bc
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 4]
cmp dword [0x672b14], 0x2656743
jg 0x48e084
mov edx, 0x4900c0
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
jmp 0x48e090
mov edx, 0x4900d4
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov edx, 0x4900e4
mov eax, ebx
call fcn.00617894
mov dword [0x672780], eax
mov ecx, dword [0x6658b4]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov dword [0x672784], eax
mov eax, dword [0x66f294]
cmp byte [eax], 0
jne 0x48e0c9
or dword [0x672784], 1
mov ecx, 0x7fffffff
mov edx, 0x490108
mov eax, ebx
call fcn.00617880
mov dword [0x672788], eax
mov eax, dword [0x66f294]
cmp byte [eax], 0
je 0x48e10b
mov eax, dword [0x490114]
or eax, dword [0x672788]
mov dword [0x672788], eax
mov eax, dword [0x490118]
not eax
and eax, dword [0x67278c]
mov dword [0x67278c], eax
mov al, 2
call fcn.0062df9c
push 0x672791
push 0x672796
push 0x67279a
push 0
push 0x5f5f0303
push 0x4b4b0201
mov ecx, 0x672790
mov edx, 0x490124
mov eax, ebx
call fcn.006178a8
mov dword [0x672792], 0x672790
lea ecx, [ebp - 0x5c]
mov edx, 0x490138
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x67279e
call fcn.004038bc
lea ecx, [ebp - 0x64]
mov edx, 0x490150
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 0x64]
call fcn.00539fc8
mov dword [0x6727a2], eax
mov eax, dword [0x6727a2]
call fcn.00539ff8
test al, al
jne 0x48e195
xor eax, eax
mov dword [0x6727a2], eax
call fcn.00506a54
mov edx, dword [eax + 0x198]
add edx, 0x60
push edx
mov edx, dword [eax + 0x1a0]
add edx, 0x60
push edx
push 0x6727a6
push 0x1010101
mov edx, dword [0x66e858]
movzx edx, byte [edx]
inc edx
shl edx, 0x10
or edx, 0x909
or edx, 0xa000000
push edx
push 0x3010808
mov eax, dword [eax + 0x194]
lea ecx, [eax + 0x60]
mov edx, 0x490168
mov eax, ebx
call fcn.006178a8
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x68]
mov edx, dword [0x66ec04]
mov edx, dword [edx]
call fcn.00403438
mov ecx, dword [ebp - 0x68]
mov edx, 0x49017c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0x10]
mov edx, dword [ebp - 0x64]
mov eax, 0x6727aa
call fcn.004032c8
lea ecx, [ebp - 0x5c]
mov edx, 0x490194
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x6727ae
call fcn.004038bc
lea ecx, [ebp - 0x5c]
mov edx, 0x4901a8
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x6727b2
call fcn.004038bc
push 0x6727b7
push 0
push 0
push 0
push 0xffff
push 0xffff
mov ecx, 0x6727b6
mov edx, 0x4901c4
mov eax, ebx
call fcn.006178a8
lea ecx, [ebp - 0x5c]
mov edx, 0x4901d4
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x6727b8
call fcn.004038bc
push 0xffff
push 0x20
mov ecx, 0x20
mov edx, 0x4901ec
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727bc], eax
push 0x3e8
push 0xc8
mov ecx, 1
mov edx, 0x490204
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727c0], eax
mov ecx, 0xffff
mov edx, 0x490218
mov eax, ebx
call fcn.00617880
mov dword [0x6727c4], eax
mov ecx, 0xff
mov edx, 0x49022c
mov eax, ebx
call fcn.00617880
mov dword [0x6727c8], eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x490238
mov edx, 0x49024c
mov eax, ebx
call fcn.00617944
mov edx, dword [ebp - 0x5c]
mov eax, 0x6727cc
call fcn.004038bc
push 0x7fffffff
push 0
xor ecx, ecx
mov edx, 0x490260
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727d0], eax
push 0x7fffffff
push 0
xor ecx, ecx
mov edx, 0x490274
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727d4], eax
push 0x7fffffff
push 0
xor ecx, ecx
mov edx, 0x490288
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727d8], eax
lea ecx, [ebp - 0x5c]
mov edx, 0x49029c
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x6727dc
call fcn.004038bc
xor ecx, ecx
mov edx, 0x4902b0
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 8]
inc eax
mov byte [0x6727e0], al
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x4902c0
mov edx, 0x4902dc
mov eax, ebx
call fcn.00617944
mov edx, dword [ebp - 0x5c]
mov eax, 0x6727e1
call fcn.004038bc
push 0xffff
push 0xf081
mov ecx, 0x20
mov edx, 0x4902f8
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727e5], eax
push 0x1f4
push 0x64
mov ecx, 0xa
mov edx, 0x490314
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727e9], eax
push 4
push 2
xor ecx, ecx
mov edx, 0x49032c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x6727ed], al
push 0xc
push 4
xor ecx, ecx
mov edx, 0x490348
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x6727ee], al
mov eax, dword [0x66f294]
cmp byte [eax], 0
je 0x48e448
mov al, byte [0x6727ee]
add al, 0xf6
sub al, 2
jae 0x48e448
mov byte [0x6727ee], 4
push 0x6727f7
push 0x6727fb
push 0
push 0x10101
push 0x3f3f3f
push 0x10205
mov ecx, 0x6727ef
mov edx, 0x49035c
mov eax, ebx
call fcn.006178a8
push 0x4000
push 5
mov ecx, 1
mov edx, 0x49036c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727f3], eax
push 0xff
push 2
xor ecx, ecx
mov edx, 0x490384
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6727ff], eax
push 0xf4240
push 0x1f4
mov ecx, 0xa
mov edx, 0x4903a0
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672803], eax
push 2
push 2
xor ecx, ecx
mov edx, 0x4903b8
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672807], al
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [0x6658ac]
mov edx, 0x4903d4
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0x10]
mov edx, dword [ebp - 0x64]
mov eax, 0x672808
call fcn.004032c8
push 8
push 0x6658b8
mov ecx, 0x67280c
mov edx, 0x4903e4
mov eax, ebx
call fcn.00617bdc
lea ecx, [ebp - 0x5c]
mov edx, 0x4903fc
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x672814
call fcn.004038bc
lea eax, [ebp - 0x64]
push eax
xor ecx, ecx
mov edx, 0x490410
mov eax, ebx
call fcn.00617a64
mov edx, dword [ebp - 0x64]
mov eax, 0x672818
call fcn.004032c8
lea ecx, [ebp - 0x60]
mov edx, 0x490428
mov eax, ebx
call fcn.006179f0
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00619cd4
mov eax, dword [ebp - 0x5c]
call fcn.0064d644
mov edx, dword [0x66fe64]
mov dword [edx], eax
mov eax, dword [0x66fe64]
mov eax, dword [eax]
mov dl, 1
call fcn.00650140
cmp dword [0x672b14], 0x2656743
jg 0x48e5a8
mov edx, 0x4900d4
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
push 4
push 0xffffffffffffffff
xor ecx, ecx
mov edx, 0x490434
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x67281c], al
cmp byte [0x67281c], 0xff
jne 0x48e5e6
mov byte [0x67281c], 1
mov eax, 0xd
call fcn.006569dc
cmp ax, 0x30
jne 0x48e5e6
mov byte [0x67281c], 0
push 0x1e
push 0xa
xor ecx, ecx
mov edx, 0x49044c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x67281d], eax
lea ecx, [ebp - 8]
mov edx, 0x490460
mov eax, ebx
call fcn.006179d4
cmp dword [ebp - 8], 0
je 0x48e6e1
mov eax, dword [ebp - 8]
call fcn.0040351c
mov edx, eax
shr edx, 3
mov eax, dword [0x672821]
call fcn.0064e7dc
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
call fcn.0040351c
mov ecx, eax
mov eax, dword [0x672821]
mov edx, dword [eax + 0x1c]
lea eax, [ebp - 0x3c]
call fcn.0062c62c
mov eax, dword [0x672821]
call fcn.0064ebbc
mov eax, dword [0x672821]
mov eax, dword [eax + 0x18]
dec eax
cmp eax, 0
jl 0x48e698
mov dword [ebp - 0x3c], eax
mov eax, dword [0x672821]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x3c]
mov eax, dword [eax + edx*4]
cmp eax, 2
jl 0x48e682
cmp eax, 0x7d0
jle 0x48e68f
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x672821]
call fcn.0064ea88
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x48e668
mov eax, dword [0x672821]
mov eax, dword [eax + 0x18]
sub eax, 2
cmp eax, 0
jl 0x48e6e1
mov dword [ebp - 0x3c], eax
mov eax, dword [0x672821]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x3c]
mov eax, dword [eax + edx*4]
mov edx, dword [0x672821]
mov edx, dword [edx + 0x1c]
mov ecx, dword [ebp - 0x3c]
cmp eax, dword [edx + ecx*4 + 4]
jne 0x48e6d8
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x672821]
call fcn.0064ea88
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x48e6ab
mov eax, dword [0x672821]
cmp dword [eax + 0x18], 0
jne 0x48e701
mov edx, dword [0x66f59c]
mov ecx, 0x40
mov eax, dword [0x672821]
call fcn.0064e9b4
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
call fcn.0061d78c
mov ecx, dword [ebp - 0x60]
mov edx, 0x490474
mov eax, ebx
call fcn.00617944
mov edx, dword [ebp - 0x5c]
mov eax, 0x672825
call fcn.004038bc
push 0xffff
mov eax, dword [0x66e878]
movzx eax, word [eax]
push eax
xor ecx, ecx
mov edx, 0x490484
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov word [0x672829], ax
or word [0x672829], 0x20
test byte [0x672829], 0x80
jne 0x48e779
test byte [0x672899], 0x10
je 0x48e76f
or dword [0x672898], 0x2000
and dword [0x672898], 0xffffefff
push 0x6729d5
push 0x6729d6
push 0
push 0
push 0x10401
push 0x10201
mov ecx, 0x6729d4
mov edx, 0x490494
mov eax, ebx
call fcn.006178a8
mov eax, dword [0x66f294]
cmp byte [eax], 0
je 0x48e7b5
mov byte [0x67282b], 0
jmp 0x48e81b
push 4
push 4
xor ecx, ecx
mov edx, 0x4904a8
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x67282b], al
mov eax, dword [0x66eb5c]
cmp byte [eax], 0
je 0x48e7ff
cmp byte [0x67282b], 4
sete al
and eax, 0x7f
mov edx, dword [0x66f41c]
mov al, byte [edx + eax]
push eax
mov eax, dword [0x66ef58]
mov eax, dword [eax]
push eax
mov eax, dword [eax]
call dword [eax + 0x88]
jmp 0x48e81b
mov al, byte [0x67282b]
add al, 0xfd
sub al, 2
jb 0x48e814
mov eax, dword [0x66eecc]
cmp byte [eax], 0
jne 0x48e81b
mov byte [0x67282b], 0
push 2
push 0
xor ecx, ecx
mov edx, 0x4904bc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x67282c], al
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
call fcn.0048dda0
mov ecx, dword [ebp - 0x60]
mov edx, 0x4904cc
mov eax, ebx
call fcn.00617944
mov eax, dword [ebp - 0x5c]
mov edx, 0x6729d8
call fcn.00545bcc
lea ecx, [ebp - 0x5c]
mov edx, 0x4904d8
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x6729ec
call fcn.004038bc
lea ecx, [ebp - 0x38]
mov edx, 0x4904ec
mov eax, ebx
call fcn.00617b50
test byte [ebp - 0x38], 1
jne 0x48e8bd
cmp dword [ebp - 0x38], 0
jle 0x48e8bd
sub dword [ebp - 0x38], 2
mov edx, dword [ebp - 0x38]
movzx edx, byte [eax + edx]
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x30
jg 0x48e8b7
mov edx, dword [ebp - 0x38]
mov dl, byte [eax + edx + 1]
xor ecx, ecx
mov cl, byte [ebp - 0x3c]
mov byte [ecx + 0x67282d], dl
cmp dword [ebp - 0x38], 0
jg 0x48e891
call fcn.00401fac
lea ecx, [ebp - 0x68]
mov edx, 0x4904fc
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00619ca0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x66f29c]
mov eax, dword [eax]
call fcn.0064f34c
lea ecx, [ebp - 0x68]
mov edx, 0x49050c
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00619ca0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x66fa54]
mov eax, dword [eax]
call fcn.0064f34c
cmp dword [0x672b14], 0x2656743
jg 0x48e954
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x49051c
mov edx, 0x490550
mov eax, ebx
call fcn.00617a64
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00619ca0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x66f734]
mov eax, dword [eax]
mov eax, dword [eax + 8]
call fcn.0064f34c
jmp 0x48e986
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x49051c
mov edx, 0x490564
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0x10]
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00619ca0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x66f734]
mov eax, dword [eax]
mov eax, dword [eax + 8]
call fcn.0064f34c
mov eax, dword [0x66f734]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dl, 1
call fcn.00650140
lea eax, [ebp - 0x68]
push eax
xor ecx, ecx
mov edx, 0x490578
mov eax, ebx
call fcn.00617a64
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00619ca0
mov eax, dword [ebp - 0x64]
push eax
call fcn.00465e68
mov eax, dword [eax + 0x2c]
pop edx
call fcn.0064f34c
push ebp
xor edx, edx
mov eax, dword [0x672af0]
call fcn.0048de2c
pop ecx
push ebp
mov dl, 1
mov eax, dword [0x672af4]
call fcn.0048de2c
pop ecx
mov eax, dword [0x66f294]
cmp byte [eax], 0
jne 0x48ea1c
call fcn.004a6408
mov eax, dword [eax + 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 4]
mov ecx, 0x49058c
call fcn.004a1390
call fcn.004a6408
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 4]
mov ecx, 0x4905a0
call fcn.004a1390
mov edx, 0x4905b8
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
lea ecx, [ebp - 0x64]
mov edx, 0x4905d0
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 0x64]
call fcn.00539fc8
mov dword [0x672970], eax
mov eax, dword [0x672970]
call fcn.00539ff8
test al, al
jne 0x48ea59
xor eax, eax
mov dword [0x672970], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov edi, dword [0x66f934]
mov esi, dword [0x66f000]
mov dword [ebp - 0x58], 0x672974
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [edi]
mov edx, dword [0x66f030]
mov ecx, dword [edx + eax*4]
lea eax, [ebp - 0x64]
mov edx, 0x4905e4
call fcn.00403568
mov eax, dword [ebp - 0x64]
push eax
lea eax, [ebp - 0x60]
mov edx, dword [esi]
call fcn.00403a24
mov ecx, dword [ebp - 0x60]
mov eax, ebx
pop edx
call fcn.00617944
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
call fcn.004038bc
inc dword [ebp - 0x3c]
add dword [ebp - 0x58], 4
add esi, 4
add edi, 4
cmp dword [ebp - 0x3c], 5
jne 0x48ea71
cmp dword [0x672b14], 0x2656743
jg 0x48eade
mov edx, 0x4905f8
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
jmp 0x48eaea
mov edx, 0x490614
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
lea edx, [ebp - 0x60]
mov eax, dword [0x66f518]
mov eax, dword [eax]
call fcn.00654d58
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00621908
mov edx, dword [ebp - 0x5c]
mov eax, 0x6729f0
call fcn.004038bc
lea ecx, [ebp - 0x5c]
mov edx, 0x490628
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x6729f4
call fcn.004038bc
lea ecx, [ebp - 0x5c]
mov edx, 0x490640
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x6729f8
call fcn.004038bc
lea ecx, [ebp - 0x60]
mov edx, 0x490654
mov eax, ebx
call fcn.006179f0
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00619cd4
mov edx, dword [ebp - 0x5c]
mov eax, 0x6729fc
call fcn.004038bc
lea ecx, [ebp - 0x64]
mov edx, 0x490668
mov eax, ebx
call fcn.006179d4
mov edx, dword [ebp - 0x64]
mov eax, 0x672a00
call fcn.004032c8
push 0x672a20
push 0x672a21
push 0
push 0
push 0x10501
push 0x500
mov ecx, 0x672a22
mov edx, 0x4900f8
mov eax, ebx
call fcn.006178a8
lea ecx, [ebp - 0x5c]
mov edx, 0x49067c
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x672a04
call fcn.004038bc
push 0x7bc0
push 0x2490
mov ecx, 0x5a0
mov edx, 0x49068c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a08], eax
push 0x7bc0
push 0x1464
mov ecx, 0x5a0
mov edx, 0x49069c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a0c], eax
push 0x1f40
push 0xfa0
xor ecx, ecx
mov edx, 0x4906ac
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a10], eax
push 0x1f40
push 0x1388
mov ecx, 0xfa0
mov edx, 0x4906bc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a14], eax
push 0x1f40
push 0x3e8
xor ecx, ecx
mov edx, 0x4906cc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a18], eax
push 0x7d0
push 0x3e8
xor ecx, ecx
mov edx, 0x4906dc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a1c], eax
lea ecx, [ebp - 0x64]
mov edx, 0x4906ec
mov eax, ebx
call fcn.006179d4
mov edx, dword [ebp - 0x64]
mov eax, 0x672a24
call fcn.004032c8
mov edx, 0x490700
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov al, 5
call fcn.0061c864
test al, al
je 0x48ecc1
mov byte [ebp - 0x11], 2
jmp 0x48eceb
push 2
push 2
xor ecx, ecx
mov edx, 0x490710
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 1
je 0x48ece7
mov al, 4
call fcn.0061c864
test al, al
je 0x48eceb
mov byte [ebp - 0x11], 0
mov eax, dword [0x66eb60]
mov eax, dword [eax]
mov ecx, 6
cdq
idiv ecx
mov dword [ebp - 0x30], eax
mov eax, dword [0x66eae8]
mov eax, dword [eax]
mov ecx, 6
cdq
idiv ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x68]
call fcn.0048dcf8
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 0x490720
call fcn.00403568
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x30]
mov eax, ebx
call fcn.00617880
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x68]
call fcn.0048dcf8
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 0x49072c
call fcn.00403568
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x34]
mov eax, ebx
call fcn.00617880
mov dword [ebp - 0x18], eax
mov eax, dword [0x66eb60]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x30]
shl eax, 2
push eax
lea eax, [ebp - 0x68]
call fcn.0048dcf8
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 0x490738
call fcn.00403568
mov edx, dword [ebp - 0x64]
mov ecx, dword [0x66ef78]
mov ecx, dword [ecx]
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov esi, eax
mov eax, dword [0x66eae8]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x34]
shl eax, 2
push eax
lea eax, [ebp - 0x68]
call fcn.0048dcf8
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 0x490744
call fcn.00403568
mov edx, dword [ebp - 0x64]
mov ecx, dword [0x66ef08]
mov ecx, dword [ecx]
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov dword [ebp - 0x2c], eax
call fcn.00506a54
mov dword [ebp - 0x48], eax
xor edx, edx
mov eax, dword [ebp - 0x48]
call fcn.0063b1d8
call fcn.0064e140
mov edi, eax
push edi
push 0x48dd40
push 0
push 0
mov eax, dword [0x66f620]
mov eax, dword [eax]
call eax
mov byte [ebp - 0x41], 1
mov eax, dword [edi + 8]
test eax, eax
jns 0x48ee10
add eax, 0xf
sar eax, 4
dec eax
cmp eax, 0
jl 0x48ee68
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
sub eax, 0xc8
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, esi
sub ecx, 0xc8
mov edx, dword [ebp - 0x18]
add edx, 0x64
mov eax, dword [ebp - 0x1c]
add eax, 0x64
call fcn.0064d580
lea edx, [ebp - 0x78]
mov eax, dword [edi + 4]
mov ecx, dword [ebp - 0x3c]
shl ecx, 4
add eax, ecx
call fcn.00618d48
test al, al
je 0x48ee5f
mov byte [ebp - 0x41], 0
jmp 0x48ee68
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x48ee1c
mov eax, edi
call fcn.004028c0
cmp byte [ebp - 0x41], 0
je 0x48ee93
mov eax, dword [ebp - 0x30]
shl eax, 2
push eax
mov eax, dword [ebp - 0x34]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0x24]
jmp 0x48eea6
push esi
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0x24]
mov dl, byte [ebp - 0x11]
mov eax, dword [ebp - 0x48]
call fcn.0063b1d8
mov edx, 0x490750
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov cl, 1
mov edx, 0x490768
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 8]
mov byte [0x672988], al
inc dword [0x67298c]
test byte [0x672787], 4
je 0x48eef9
push 0x63
push 1
mov ecx, 1
mov edx, 0x49077c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x67298c], eax
mov eax, dword [0x66f294]
cmp byte [eax], 0
jne 0x48ef31
push 2
push 0
xor ecx, ecx
mov edx, 0x490794
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672990], al
push 2
push 2
xor ecx, ecx
mov edx, 0x4907a8
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672991], al
mov edx, 0x4907bc
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
push 0x1f4
push 0x64
mov ecx, 0xa
mov edx, 0x4907cc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 4]
mov dword [edx + 8], eax
push 4
push 4
xor ecx, ecx
mov edx, 0x4907dc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 4]
mov byte [edx + 0xc], al
mov eax, dword [ebp - 4]
lea esi, [eax + 0x1d]
lea eax, [esi + 1]
push eax
lea eax, [esi + 2]
push eax
lea eax, [esi + 3]
push eax
push 0
push 0x1030101
push 0x1020000
mov ecx, esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, 0x4907f0
call fcn.006178a8
push 6
push 3
xor ecx, ecx
mov edx, 0x490800
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov byte [esi + 4], al
cmp dword [0x672b14], 0x2656743
jg 0x48efd2
mov edx, 0x490814
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
jmp 0x48efde
mov edx, 0x490834
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
call fcn.005fe7e0
mov dword [ebp - 0x4c], eax
push 1
push 0
xor ecx, ecx
mov edx, 0x490848
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x20b], al
push 0xff
push 0
xor ecx, ecx
mov edx, 0x490858
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x4c]
mov byte [edx + 0x20c], al
mov byte [ebp - 0x25], 0
mov dword [ebp - 0x58], 0x66589c
mov esi, 0x6658a4
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1b4]
mov dword [ebp - 0x20], eax
cmp byte [ebp - 0x25], 0
jne 0x48f04d
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax + 0x1a8]
mov dword [ebp - 0x20], eax
call fcn.0064d630
mov dword [ebp - 0x24], eax
push 0x1e
push 0
lea eax, [ebp - 0x64]
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
call fcn.00403438
mov edx, dword [ebp - 0x64]
xor ecx, ecx
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
dec eax
mov dword [ebp - 0x40], eax
mov edi, dword [ebp - 0x40]
test edi, edi
jl 0x48f0b6
inc edi
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x64]
mov edx, dword [ebp - 0x3c]
mov eax, dword [esi]
call fcn.00655c8c
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0xc]
mov eax, ebx
call fcn.006179f0
cmp dword [ebp - 0xc], 0
je 0x48f0b0
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x30]
inc dword [ebp - 0x3c]
dec edi
jne 0x48f085
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x120]
mov edx, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
call fcn.004028c0
inc byte [ebp - 0x25]
add esi, 4
add dword [ebp - 0x58], 4
cmp byte [ebp - 0x25], 2
jne 0x48f02f
mov edx, 0x490870
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov ecx, dword [0x6658c0]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov dword [0x672860], eax
cmp dword [0x672780], 0
jne 0x48f135
mov eax, dword [0x66eb60]
mov eax, dword [eax]
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [0x66eae8]
mov ecx, dword [edx]
cdq
idiv ecx
cmp eax, 0xe
jle 0x48f135
or dword [0x672860], 0x1000
push 2
push 2
xor ecx, ecx
mov edx, 0x490880
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672864], al
push 0x672869
push 0x67286a
push 0
push 0
push 0x20102
push 1
mov ecx, 0x672868
mov edx, 0x49058c
mov eax, ebx
call fcn.006178a8
mov eax, dword [0x66f294]
cmp byte [eax], 0
je 0x48f193
cmp byte [0x672868], 2
jne 0x48f18c
mov byte [0x672868], 1
mov byte [0x67286a], 0
push 0x67286c
push 0x672871
push 0
push 0x10000
push 0x50401
push 0x10201
mov ecx, 0x67286b
mov edx, 0x490894
mov eax, ebx
call fcn.006178a8
mov eax, dword [0x66eb60]
mov eax, dword [eax]
mov ecx, 3
cdq
idiv ecx
push eax
mov eax, dword [0x670124]
mov eax, dword [eax]
add eax, eax
push eax
mov ecx, dword [0x670124]
mov ecx, dword [ecx]
mov edx, 0x4908a4
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x67286d], eax
mov eax, dword [0x66f294]
cmp byte [eax], 0
je 0x48f20a
mov eax, dword [0x66f808]
mov eax, dword [eax]
mov dword [0x672876], eax
jmp 0x48f243
mov ecx, dword [0x66f68c]
mov ecx, dword [ecx]
mov edx, 0x4908b8
mov eax, ebx
call fcn.00617880
mov dword [0x672876], eax
cmp dword [0x672b14], 0x2670938
jge 0x48f239
or dword [0x672876], 0x80000
or dword [0x672876], 0x100000
cmp dword [0x672b14], 0x2656743
jg 0x48f289
mov cl, 1
mov edx, 0x4908cc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 8]
mov byte [0x67287a], al
mov eax, dword [0x66f294]
movzx eax, byte [eax]
mov edx, 2
sub edx, eax
push edx
push 0
xor ecx, ecx
mov edx, 0x4908e4
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x67287b], al
jmp 0x48f2bd
push 0x67287b
push 0
push 0
push 0
mov eax, dword [0x66f294]
movzx eax, byte [eax]
mov edx, 2
sub edx, eax
shl edx, 8
or edx, 1
push edx
push 1
mov ecx, 0x67287a
mov edx, 0x4908cc
mov eax, ebx
call fcn.006178a8
mov edx, 0x4908f4
mov eax, ebx
call fcn.00617894
mov edx, 0x67287c
mov dword [edx], eax
mov edx, 0x490904
mov eax, ebx
call fcn.00617894
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
call fcn.00513e5c
mov byte [0x672880], al
mov eax, dword [ebp - 0x3c]
shr eax, 0x10
call fcn.00513e5c
mov byte [0x672881], al
mov eax, dword [0x66f294]
cmp byte [eax], 0
je 0x48f31c
mov ax, word [0x49090c]
mov word [0x672882], ax
jmp 0x48f3ae
mov edx, 0x490918
mov eax, ebx
call fcn.00617894
mov esi, eax
mov ax, word [0x490924]
mov word [0x672882], ax
mov dword [ebp - 0x3c], 0xa
mov al, byte [ebp - 0x3c]
cmp al, 0xf
ja 0x48f34a
and eax, 0x7f
bt esi, eax
jae 0x48f362
mov eax, dword [ebp - 0x3c]
call fcn.00513e5c
cmp al, 0xf
ja 0x48f362
and eax, 0x7f
bts dword [0x672882], eax
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x48f33d
mov edx, 0x490930
mov eax, ebx
call fcn.00617894
mov esi, eax
mov dword [ebp - 0x3c], 0xa
mov al, byte [ebp - 0x3c]
cmp al, 0xf
ja 0x48f38d
and eax, 0x7f
bt esi, eax
jae 0x48f3a5
mov eax, dword [ebp - 0x3c]
call fcn.00513e5c
cmp al, 0xf
ja 0x48f3a5
and eax, 0x7f
bts dword [0x672884], eax
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x48f380
call fcn.0048cba0
push 8
push 8
xor ecx, ecx
mov edx, 0x490940
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672886], eax
push 3
push 3
xor ecx, ecx
mov edx, 0x490954
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x67288a], al
mov ecx, 0x80
mov edx, 0x490968
mov eax, ebx
call fcn.00617880
mov byte [0x67288b], al
push 0x1f4
push 0
mov ecx, 0xfffffffc
mov edx, 0x490978
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x67288c], eax
cmp dword [0x67288c], 0
jle 0x48f42d
cmp dword [0x67288c], 0xa
jge 0x48f42d
xor eax, eax
mov dword [0x67288c], eax
movzx ecx, word [0x6658b0]
mov edx, 0x490988
mov eax, ebx
call fcn.00617880
mov word [0x672890], ax
mov eax, 0x48
call fcn.0064bd24
mov ecx, eax
mov edx, 0x49099c
mov eax, ebx
call fcn.00617880
mov edx, dword [0x66eae8]
mov edx, dword [edx]
call fcn.00653538
mov dword [0x672892], eax
cmp dword [0x672892], 0
jle 0x48f489
cmp dword [0x672892], 0x10
jge 0x48f489
xor eax, eax
mov dword [0x672892], eax
mov eax, dword [ebp - 4]
add eax, 0x18
lea edx, [eax + 1]
push edx
lea edx, [eax + 2]
push edx
lea edx, [eax + 3]
push edx
push 0
push 0x1030101
push 0x1030000
mov ecx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, 0x4907f0
call fcn.006178a8
mov eax, dword [ebp - 4]
lea edx, [eax + 0x18]
mov eax, dword [ebp - 4]
call fcn.004910c8
mov edx, 0x4909b0
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov ecx, dword [0x6658c4]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov dword [0x672898], eax
test byte [0x672898], 1
setne al
neg al
sbb eax, eax
push eax
mov eax, dword [0x66fb14]
mov eax, dword [eax]
push eax
call sub.shell32.dll_DragAcceptFiles
mov eax, 0x6728a0
call fcn.00544200
mov edx, 0x4909c0
mov eax, ebx
call fcn.00617894
mov dword [0x6728b8], eax
mov ecx, 0xff0000
mov edx, 0x4909d4
mov eax, ebx
call fcn.00617880
mov dword [0x6728dc], eax
push 0x14
push 2
mov ecx, 1
mov edx, 0x4909e8
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x6728fc], eax
push 0x672904
push 0x67290c
push 0x672914
push 0
push 0x91414ff
push 0x1050000
mov ecx, 0x672900
mov edx, 0x490a0c
mov eax, ebx
call fcn.006178a8
mov edx, 0x490a20
mov eax, ebx
call fcn.00617894
mov dword [0x672908], eax
mov ecx, 0xff
mov edx, 0x490a34
mov eax, ebx
call fcn.00617880
mov dword [0x672910], eax
mov ecx, 0xff00
mov edx, 0x490a48
mov eax, ebx
call fcn.00617880
mov dword [0x672918], eax
push 2
push 0
xor ecx, ecx
mov edx, 0x490a5c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x67291c], al
mov eax, dword [0x66f294]
cmp byte [eax], 0
jne 0x48f60b
mov edx, 0x490a6c
mov eax, ebx
call fcn.00617894
mov byte [0x67291d], al
mov al, byte [0x490a78]
and al, byte [0x67291d]
mov dl, byte [0x490a78]
cmp dl, al
jne 0x48f60b
mov al, byte [0x490924]
mov byte [0x67291d], al
mov dword [0x672920], 0x2d0
mov eax, dword [0x66f294]
cmp byte [eax], 0
jne 0x48f63c
push 0x3de0
push 0x2d0
xor ecx, ecx
mov edx, 0x490a84
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672920], eax
mov edx, 0x490a9c
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov ecx, dword [0x6658c8]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov dword [0x672924], eax
test byte [0x672924], 0x40
je 0x48f6d8
call fcn.0053955c
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x5c]
mov edx, 0x490ab0
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x50]
add eax, 0xc
call fcn.004038bc
lea ecx, [ebp - 0x5c]
mov edx, 0x490ac8
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x50]
add eax, 0x10
call fcn.004038bc
lea ecx, [ebp - 8]
mov edx, 0x490ae8
mov eax, ebx
call fcn.006179d4
cmp dword [ebp - 8], 0
je 0x48f6d8
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.00619ca0
mov eax, dword [ebp - 0x64]
call fcn.0064d5c0
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x14], eax
lea ecx, [ebp - 0x68]
mov edx, 0x490b00
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00619ca0
mov edx, dword [ebp - 0x64]
mov eax, dword [0x672b24]
call fcn.0064f34c
lea ecx, [ebp - 0x5c]
mov edx, 0x490b10
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x672b20
call fcn.004038bc
cmp dword [0x672b20], 0
jne 0x48f74b
lea edx, [ebp - 0x60]
mov eax, dword [0x670204]
mov eax, dword [eax]
call fcn.00654d58
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00621908
mov edx, dword [ebp - 0x5c]
mov eax, 0x672b20
call fcn.004038bc
push 0
mov eax, dword [0x672b20]
push eax
call sub.kernel32.dll_CreateDirectoryW
push 9
push 5
xor ecx, ecx
mov edx, 0x490b28
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672928], eax
push 0x10
push 2
xor ecx, ecx
mov edx, 0x490b40
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x67292c], eax
push 0xe42
push 0x78
mov ecx, 1
mov edx, 0x490b58
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672930], eax
push 0x78
push 3
xor ecx, ecx
mov edx, 0x490b78
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672934], eax
push 3
push 0
xor ecx, ecx
mov edx, 0x490b8c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672938], al
push 5
push 2
xor ecx, ecx
mov edx, 0x490ba4
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672941], al
xor eax, eax
mov dword [ebp - 0x3c], eax
mov esi, 0x6658cc
mov eax, dword [ebp - 0x3c]
sub eax, 1
jb 0x48f801
je 0x48f80a
dec eax
je 0x48f813
jmp 0x48f81c
mov dword [ebp - 0x10], 0x672942
jmp 0x48f823
mov dword [ebp - 0x10], 0x672946
jmp 0x48f823
mov dword [ebp - 0x10], 0x67294a
jmp 0x48f823
mov dword [ebp - 0x10], 0x67294e
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x64]
mov dl, byte [esi]
call fcn.00403418
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 0x68]
mov edx, 0x490bbc
call fcn.00403568
mov edx, dword [ebp - 0x68]
mov ecx, 0x490bd0
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
call fcn.004032c8
inc dword [ebp - 0x3c]
inc esi
cmp dword [ebp - 0x3c], 4
jne 0x48f7f2
push 2
push 1
xor ecx, ecx
mov edx, 0x490bdc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672952], al
lea ecx, [ebp - 0x5c]
mov edx, 0x490bf4
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x672953
call fcn.004038bc
lea ecx, [ebp - 0x64]
mov edx, 0x490c0c
mov eax, ebx
call fcn.006179d4
mov edx, dword [ebp - 0x64]
mov eax, 0x672957
call fcn.004032c8
cmp dword [0x672957], 0
jne 0x48f8cc
mov eax, 0x672957
mov edx, 0x490c28
call fcn.004032c8
lea ecx, [ebp - 0x5c]
mov edx, 0x490c38
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x67295b
call fcn.004038bc
lea ecx, [ebp - 0x64]
mov edx, 0x490c54
mov eax, ebx
call fcn.006179d4
mov edx, dword [ebp - 0x64]
mov eax, 0x67295f
call fcn.004032c8
push 0xb
push 0xffffffffffffffff
or ecx, 0xffffffff
mov edx, 0x490c6c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672963], eax
push 3
push 0
xor ecx, ecx
mov edx, 0x490c80
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov byte [0x672967], al
cmp dword [0x672b14], 0x2656743
jg 0x48f9aa
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490c94
mov eax, dword [0x672b28]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490cac
mov eax, dword [0x672b2c]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490ccc
mov eax, dword [0x672b30]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490ce0
mov eax, dword [0x672b34]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490cf8
mov eax, dword [0x672b38]
call fcn.00618820
jmp 0x48fa13
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490d14
mov eax, dword [0x672b28]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490d28
mov eax, dword [0x672b2c]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490ccc
mov eax, dword [0x672b30]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490d3c
mov eax, dword [0x672b34]
call fcn.00618820
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, 0x490d50
mov eax, dword [0x672b38]
call fcn.00618820
mov edx, 0x490d64
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
xor ecx, ecx
mov cl, byte [0x6658d0]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov byte [0x672a38], al
lea ecx, [ebp - 0x64]
mov edx, 0x490d74
mov eax, ebx
call fcn.006179d4
mov edx, dword [ebp - 0x64]
mov eax, 0x672a3c
call fcn.004032c8
push 0x7fffffff
push 0x7fffffff
mov ecx, 4
mov edx, 0x490d8c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672a40], eax
cmp dword [0x672a40], 0x7fffffff
je 0x48fa9c
cmp dword [0x672a40], 0x40
jle 0x48fa95
mov dword [0x672a40], 0x40
jmp 0x48fa9c
and dword [0x672a40], 0xfffffffc
mov edx, 0x490da0
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x66f294]
cmp byte [eax], 0
jne 0x48fc36
cmp dword [0x672b14], 0x2670938
jge 0x48fb57
call fcn.004a6408
call fcn.004a3b60
mov eax, dword [eax + 0x9c]
mov edx, dword [0x672a5c]
mov dword [edx + 4], eax
lea ecx, [ebp - 0x64]
mov edx, 0x490db4
mov eax, ebx
call fcn.006179d4
mov edx, dword [ebp - 0x64]
mov eax, dword [0x672a5c]
mov eax, dword [eax + 8]
call fcn.0062478c
mov eax, dword [0x672a5c]
mov eax, dword [eax + 4]
mov edx, dword [0x672b3c]
cmp eax, dword [edx + 4]
jne 0x48fb4b
mov eax, dword [0x672b3c]
mov edx, dword [eax + 8]
mov eax, dword [0x672a5c]
mov eax, dword [eax + 8]
call fcn.0048ce84
test al, al
je 0x48fb4b
mov edx, dword [0x672b44]
mov eax, dword [0x672a5c]
call fcn.0048cf0c
mov eax, dword [0x66f310]
mov al, byte [eax]
mov byte [0x672a61], al
jmp 0x48fc36
mov byte [0x672a60], 2
jmp 0x48fc36
xor eax, eax
mov dword [ebp - 0x3c], eax
xor eax, eax
mov al, byte [ebp - 0x3c]
mov eax, dword [eax*4 + 0x672a54]
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x64]
mov eax, 0x490dbc
mov edx, dword [ebp - 0x3c]
call fcn.00655c8c
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 4]
mov eax, ebx
call fcn.00617880
mov edx, dword [ebp - 0x54]
mov dword [edx + 4], eax
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x64]
mov eax, 0x490dc8
mov edx, dword [ebp - 0x3c]
call fcn.00655c8c
mov edx, dword [ebp - 0x64]
mov ecx, 0x490ddc
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0x10]
mov eax, dword [ebp - 8]
mov edx, 0x490ddc
call fcn.0040362c
je 0x48fbd1
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 8]
call fcn.0062478c
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 3
jne 0x48fb5c
push 0x672a61
push 0
push 0
push 0
push 0x102
mov eax, dword [0x66f310]
movzx eax, byte [eax]
shl eax, 8
or eax, 0
push eax
mov ecx, 0x672a60
mov edx, 0x490de8
mov eax, ebx
call fcn.006178a8
cmp byte [0x672a61], 0
je 0x48fc36
mov eax, dword [0x66f310]
cmp byte [eax], 0
je 0x48fc36
call fcn.0048cc88
test al, al
je 0x48fc2f
mov byte [0x672a60], 1
jmp 0x48fc36
mov byte [0x672a60], 0
xor eax, eax
mov al, byte [0x672a60]
mov eax, dword [eax*4 + 0x672a54]
call fcn.0048cf54
lea ecx, [ebp - 8]
mov edx, 0x490dfc
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 8]
call fcn.0040351c
dec eax
je 0x48fccf
cmp dword [ebp - 8], 0
je 0x48fc81
mov eax, dword [ebp - 8]
call fcn.0040351c
and eax, 0x80000007
jns 0x48fc7d
dec eax
or eax, 0xfffffff8
inc eax
test eax, eax
je 0x48fc98
mov edx, dword [0x66edf8]
mov ecx, 0x120
mov eax, dword [0x672a64]
call fcn.0064e9b4
jmp 0x48fccf
mov eax, dword [ebp - 8]
call fcn.0040351c
mov edx, eax
shr edx, 3
mov eax, dword [0x672a64]
call fcn.0064e7dc
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
call fcn.0040351c
mov ecx, eax
mov eax, dword [0x672a64]
mov edx, dword [eax + 0x1c]
lea eax, [ebp - 0x3c]
call fcn.0062c62c
mov ecx, 0xff000000
xor edx, edx
mov eax, dword [0x672a64]
call fcn.0064ea48
mov edx, 0x490e0c
mov eax, ebx
call fcn.00617894
mov dword [0x672a68], eax
mov eax, 0x672a6c
mov ecx, 0xff
mov edx, 0x40
call fcn.00402694
lea ecx, [ebp - 8]
mov edx, 0x490e20
mov eax, ebx
call fcn.006179d4
mov eax, dword [ebp - 8]
call fcn.0040351c
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jle 0x48fd4a
test byte [ebp - 0x3c], 1
jne 0x48fd4a
cmp dword [ebp - 0x3c], 0x80
jg 0x48fd4a
mov eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
mov edx, 0x672a6c
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
call fcn.0062c62c
mov edx, 0x490e38
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
movzx ecx, word [0x6658d4]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov word [0x672aac], ax
xor ecx, ecx
mov cl, byte [0x6658d8]
mov edx, 0x490e4c
mov eax, ebx
call fcn.00617880
mov byte [0x672aae], al
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x490e5c
mov edx, 0x490e68
mov eax, ebx
call fcn.00617944
lea eax, [ebp - 0x178]
mov edx, dword [ebp - 0xc]
mov ecx, 0xff
call fcn.00403a34
lea eax, [ebp - 0x178]
mov edx, 0x490e74
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402624
jne 0x48fdd8
mov edx, 0x490e78
mov eax, dword [0x672ab0]
call fcn.0064f3f0
jmp 0x48fdf0
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0xc]
call fcn.00619cd4
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x672ab0]
call fcn.0064f440
mov edx, 0x490f10
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov cl, 1
mov edx, 0x490f24
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 8]
mov byte [0x672ab8], al
mov ecx, 0x80000000
mov edx, 0x490f34
mov eax, ebx
call fcn.00617880
mov dword [0x672abc], eax
lea ecx, [ebp - 0x5c]
mov edx, 0x490f44
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x672ac0
call fcn.004038bc
mov edx, 0x490f54
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
xor ecx, ecx
mov cl, byte [0x6658dc]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov byte [0x672ac4], al
lea edx, [ebp - 0x60]
mov eax, 0x490f5c
call fcn.00654d58
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00621908
mov edx, dword [ebp - 0x5c]
mov eax, 0x672ac8
call fcn.004038bc
lea ecx, [ebp - 0x5c]
mov edx, 0x490f74
mov eax, ebx
call fcn.00617a0c
mov edx, dword [ebp - 0x5c]
mov eax, 0x672acc
call fcn.004038bc
lea ecx, [ebp - 0x5c]
mov edx, 0x490f88
mov eax, ebx
call fcn.006179f0
mov edx, dword [ebp - 0x5c]
mov eax, 0x672ad0
call fcn.004038bc
lea eax, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x60]
mov eax, 0x490fa4
call fcn.00654d58
mov ecx, dword [ebp - 0x60]
mov edx, 0x490fb4
mov eax, ebx
call fcn.00617944
mov edx, dword [ebp - 0x5c]
mov eax, 0x672ad4
call fcn.004038bc
mov edx, 0x490fd8
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [0x672af8]
add eax, 0x21
push eax
push 0
push 0
push 0
push 0x104
push 0
mov eax, dword [0x672af8]
lea ecx, [eax + 0x20]
mov edx, 0x4900f8
mov eax, ebx
call fcn.006178a8
mov edx, 0x490fec
mov eax, ebx
call fcn.00617894
dec eax
cmp eax, 0
jl 0x48ffcc
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x64]
mov eax, 0x490ff4
mov edx, dword [ebp - 0x3c]
call fcn.00655c8c
mov edx, dword [ebp - 0x64]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
or ecx, 0xffffffff
mov edx, 0x491008
mov eax, ebx
call fcn.00617880
push eax
or ecx, 0xffffffff
mov edx, 0x49101c
mov eax, ebx
call fcn.00617880
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x60]
mov edx, 0x491030
mov eax, ebx
call fcn.006179f0
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x5c]
call fcn.00619cd4
mov eax, dword [ebp - 0x5c]
push eax
mov edx, 0x491044
mov eax, ebx
call fcn.00617894
mov ecx, eax
mov dl, 1
mov eax, dword [0x48c800]
call fcn.0048d4bc
mov edx, eax
mov eax, dword [0x672af8]
call fcn.0064e9dc
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffff
jne 0x48ff3f
mov edx, 0x491054
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 4]
xor ecx, ecx
mov cl, byte [0x6658e0]
mov edx, 0x4900f8
mov eax, ebx
call fcn.00617880
mov byte [0x672ad8], al
push 0x1f4
push 0xf
mov ecx, 1
mov edx, 0x49106c
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672adc], eax
push 0x1f4
push 0x19
mov ecx, 2
mov edx, 0x491080
mov eax, ebx
mov esi, dword [eax]
call dword [esi + 0xc]
mov dword [0x672ae0], eax
cmp dword [0x672b14], 0x2656743
jg 0x49004f
mov ecx, 0x672ae8
mov edx, 0x491094
mov eax, ebx
call fcn.00617b50
mov dword [0x672ae4], eax
jmp 0x490065
mov ecx, 0x672ae8
mov edx, 0x4910bc
mov eax, ebx
call fcn.00617b50
mov dword [0x672ae4], eax
mov eax, dword [0x66f294]
mov al, byte [eax]
mov byte [0x672b5e], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4900b0
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.00403298
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00403898
lea eax, [ebp - 0xc]
call fcn.00403880
lea eax, [ebp - 8]
call fcn.00403274
ret