Function at 0x46bd6c
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x23
push 0
push 0
dec ecx
jne 0x46bd74
push ebx
push esi
push edi
mov eax, 0x46b934
call fcn.00406a88
xor eax, eax
push ebp
push 0x46d1d4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x46fc68]
mov edx, dword [0x46fd70]
mov esi, eax
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor eax, eax
push ebp
push 0x46bddc
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
call fcn.0041d358
push eax
call fcn.0041d2f8
test eax, eax
jne 0x46bdd2
push 0x46d1e4
call fcn.0041d9a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46bde6
call fcn.0044e6dc
mov eax, dword [0x46fe6c]
mov edx, 0x46d210
call fcn.004046f8
call fcn.00402b20
push 1
call fcn.0041d358
push eax
call fcn.0041d2f8
call fcn.0043a2fc
lea eax, [ebp - 0x18]
mov edx, dword [0x46feec]
mov edx, dword [edx]
call fcn.004048ac
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, 0x46d240
call fcn.004049c0
mov eax, dword [ebp - 0x14]
mov edx, 7
call fcn.00423af8
xor edx, edx
push ebp
push 0x46d1af
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x46d181
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x46fe0c]
mov edx, 0x46d254
call fcn.004046f8
mov eax, dword [0x46fc68]
mov edx, dword [0x46fd70]
mov esi, eax
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x24]
call fcn.004411f0
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.0040d190
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00408410
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x46fca0]
call fcn.004046f8
mov ecx, dword [0x46fca0]
mov ecx, dword [ecx]
lea eax, [ebp - 0x28]
mov edx, 0x46d264
call fcn.004049c0
mov eax, dword [ebp - 0x28]
mov edx, 7
call fcn.00423af8
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.00402ac0
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.00409078
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
call fcn.0045001c
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x34]
call fcn.00409250
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.0040d190
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.00408410
mov edx, dword [ebp - 0x2c]
mov eax, 0x47494c
call fcn.004046f8
mov eax, dword [0x46fca0]
mov eax, dword [eax]
mov edx, dword [0x47494c]
call fcn.00404ac0
jne 0x46bf44
mov edx, dword [0x46fca0]
mov edx, dword [edx]
mov eax, dword [0x46fcdc]
mov ecx, 0x46d274
call fcn.004049c0
jmp 0x46bf6b
lea edx, [ebp - 0x48]
mov eax, dword [0x47004c]
mov eax, dword [eax]
call fcn.00409078
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.0045001c
mov edx, dword [ebp - 0x44]
mov eax, dword [0x46fcdc]
call fcn.004046f8
mov edx, dword [0x46fcdc]
mov edx, dword [edx]
mov eax, dword [0x46fc64]
mov ecx, 0x46d284
call fcn.004049c0
mov ecx, dword [0x46fcdc]
mov ecx, dword [ecx]
lea eax, [ebp - 0x4c]
mov edx, 0x46d294
call fcn.004049c0
mov eax, dword [ebp - 0x4c]
mov edx, 7
call fcn.00423af8
mov eax, 0x474944
call fcn.004046a4
lea edx, [ebp - 0x50]
mov eax, 0x46d2ac
call fcn.0043da0c
mov eax, dword [ebp - 0x50]
mov edx, 0x46d2c0
call fcn.00404ac0
mov eax, dword [0x46fd3c]
sete byte [eax]
mov eax, dword [0x46fd3c]
cmp byte [eax], 0
je 0x46bfeb
mov edx, 7
mov eax, 0x46d2cc
call fcn.00423af8
jmp 0x46bffa
mov edx, 7
mov eax, 0x46d2f0
call fcn.00423af8
call fcn.00402a60
test eax, eax
jle 0x46cfa5
lea edx, [ebp - 0x58]
mov eax, 1
call fcn.00402ac0
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
call fcn.004083d4
mov edx, dword [ebp - 0x54]
mov eax, 0x474944
call fcn.004046f8
push 0x474948
mov ecx, 2
mov edx, 1
mov eax, dword [0x474944]
call fcn.00404bd4
lea edx, [ebp - 0x5c]
mov eax, dword [0x474944]
call fcn.004083d4
mov eax, dword [ebp - 0x5c]
mov edx, 0x46d310
call fcn.00404ac0
jne 0x46c096
mov edx, 7
mov eax, 0x46d328
call fcn.00423af8
call fcn.00453acc
mov edx, 7
mov eax, 0x46d344
call fcn.00423af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
lea edx, [ebp - 0x60]
mov eax, dword [0x474944]
call fcn.004083d4
mov eax, dword [ebp - 0x60]
mov edx, 0x46d360
call fcn.00404ac0
jne 0x46c580
xor edx, edx
mov eax, 0x46d36c
call fcn.0043d958
call fcn.00431bc8
mov dword [0x474968], 1
xor eax, eax
push ebp
push 0x46c17b
push dword fs:[eax]
mov dword fs:[eax], esp
mov cl, 1
mov dl, 1
mov eax, dword [0x43d4c8]
call fcn.0043dbec
mov dword [0x474964], eax
push 0
mov ecx, dword [0x474968]
mov edx, 0x46d37c
mov eax, dword [0x474964]
call fcn.0043f280
push 0
mov ecx, 0x474958
mov edx, 0x46d37c
mov eax, dword [0x474964]
call fcn.0043e708
mov eax, dword [0x474958]
cmp eax, dword [0x474968]
jne 0x46c136
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46c1a8
mov eax, dword [0x474964]
call fcn.00403828
xor eax, eax
mov dword [0x474964], eax
lea edx, [ebp - 0x68]
mov eax, dword [0x474968]
call fcn.004086e4
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 0x46d390
call fcn.004049c0
mov eax, dword [ebp - 0x64]
mov edx, 7
call fcn.00423b18
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46c185
push 0x64
call sub.kernel32.dll_Sleep
call fcn.004503e4
test al, al
jne 0x46c18c
inc dword [0x474968]
cmp dword [0x474968], 0x65
jne 0x46c0d1
mov eax, dword [0x46fd3c]
cmp byte [eax], 0
je 0x46c580
cmp dword [0x474964], 0
je 0x46c55e
mov edx, 7
mov eax, 0x46d3b0
call fcn.00423af8
xor eax, eax
push ebp
push 0x46c552
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x46ff78]
cmp byte [eax], 4
ja 0x46c230
mov edx, 7
mov eax, 0x46d3d8
call fcn.00423af8
lea eax, [ebp - 0x6c]
call fcn.004520b0
mov edx, dword [ebp - 0x6c]
mov eax, 0x47494c
call fcn.004046f8
lea eax, [ebp - 0x70]
mov ecx, dword [0x47494c]
mov edx, 0x46d404
call fcn.004049c0
mov eax, dword [ebp - 0x70]
mov edx, 7
call fcn.00423af8
jmp 0x46c245
lea eax, [ebp - 0x74]
call fcn.00451ff8
mov edx, dword [ebp - 0x74]
mov eax, 0x47494c
call fcn.004046f8
cmp dword [0x47494c], 0
je 0x46c548
mov eax, 0x474974
mov edx, 0x46d438
call fcn.004046f8
push 0x46d454
push dword [0x47494c]
push dword [0x474974]
lea eax, [ebp - 0x78]
mov edx, 3
call fcn.00404a34
mov eax, dword [ebp - 0x78]
mov edx, 7
call fcn.00423af8
lea eax, [ebp - 0x7c]
mov ecx, dword [0x474974]
mov edx, dword [0x47494c]
call fcn.004049c0
mov eax, dword [ebp - 0x7c]
call fcn.00408d34
push 0x46d470
push dword [0x47494c]
push dword [0x474974]
lea eax, [ebp - 0x80]
mov edx, 3
call fcn.00404a34
mov eax, dword [ebp - 0x80]
mov edx, 7
call fcn.00423af8
push 0
mov eax, 0x47496c
call fcn.004046a4
mov ecx, eax
mov edx, 0x46d48c
mov eax, dword [0x474964]
call fcn.0043e438
lea eax, [ebp - 0x84]
mov ecx, dword [0x47496c]
mov edx, 0x46d4b0
call fcn.004049c0
mov eax, dword [ebp - 0x84]
mov edx, 7
call fcn.00423af8
cmp dword [0x47496c], 0
je 0x46c34d
push 0x46d4c8
lea eax, [ebp - 0x88]
mov ecx, dword [0x474974]
mov edx, dword [0x47494c]
call fcn.004049c0
mov ecx, dword [ebp - 0x88]
xor edx, edx
mov eax, dword [0x47496c]
call fcn.00451c00
push 0x46d4e4
lea edx, [ebp - 0x8c]
xor eax, eax
call fcn.00402ac0
mov eax, dword [ebp - 0x8c]
push eax
lea eax, [ebp - 0x90]
mov ecx, dword [0x474974]
mov edx, dword [0x47494c]
call fcn.004049c0
mov ecx, dword [ebp - 0x90]
mov edx, 0x46d504
pop eax
call fcn.00451c00
push 0
mov eax, 0x47496c
call fcn.004046a4
mov ecx, eax
mov edx, 0x46d514
mov eax, dword [0x474964]
call fcn.0043e438
lea eax, [ebp - 0x94]
mov ecx, dword [0x47496c]
mov edx, 0x46d538
call fcn.004049c0
mov eax, dword [ebp - 0x94]
mov edx, 7
call fcn.00423af8
cmp dword [0x47496c], 0
je 0x46c408
push 0x46d550
lea eax, [ebp - 0x98]
mov ecx, dword [0x474974]
mov edx, dword [0x47494c]
call fcn.004049c0
mov ecx, dword [ebp - 0x98]
xor edx, edx
mov eax, dword [0x47496c]
call fcn.00451c00
push 0
mov eax, 0x47496c
call fcn.004046a4
mov ecx, eax
mov edx, 0x46d55c
mov eax, dword [0x474964]
call fcn.0043e438
lea eax, [ebp - 0x9c]
mov ecx, dword [0x47496c]
mov edx, 0x46d578
call fcn.004049c0
mov eax, dword [ebp - 0x9c]
mov edx, 7
call fcn.00423af8
cmp dword [0x47496c], 0
je 0x46c482
push 0x46d58c
lea eax, [ebp - 0xa0]
mov ecx, dword [0x474974]
mov edx, dword [0x47494c]
call fcn.004049c0
mov ecx, dword [ebp - 0xa0]
xor edx, edx
mov eax, dword [0x47496c]
call fcn.00451c00
mov edx, 7
mov eax, 0x46d59c
call fcn.00423af8
push 1
call fcn.0040a650
call fcn.00402b98
mov ecx, eax
mov edx, 0x46d5b0
mov eax, dword [0x474964]
call fcn.0043f280
mov eax, dword [0x474964]
call fcn.00403828
push 0
lea eax, [ebp - 0xa4]
push eax
mov ecx, dword [0x46fe0c]
mov ecx, dword [ecx]
lea eax, [ebp - 0xa8]
mov edx, 0x46d5d0
call fcn.004049c0
mov edx, dword [ebp - 0xa8]
mov ecx, 0x46d5f4
mov eax, 0x80000002
call fcn.0042e6ec
mov eax, dword [ebp - 0xa4]
mov edx, 0x46d2c0
call fcn.00404ac0
jne 0x46c51b
lea edx, [ebp - 0xac]
mov eax, 0x46d608
call fcn.00434488
mov eax, dword [ebp - 0xac]
call fcn.0043ab08
mov edx, 0x46d5d0
mov ecx, dword [0x46fe0c]
mov ecx, dword [ecx]
lea eax, [ebp - 0xb0]
call fcn.004049c0
mov edx, dword [ebp - 0xb0]
mov ecx, 0x46d5f4
mov eax, 0x80000002
call fcn.0042ebac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46c580
mov edx, 7
mov eax, 0x46d624
call fcn.00423b18
push 0x10
push 0x46d64c
push 0x46d660
push 0
call sub.user32.dll_MessageBoxA_1
lea edx, [ebp - 0xb4]
mov eax, dword [0x474944]
call fcn.004083d4
mov eax, dword [ebp - 0xb4]
mov edx, 0x46d698
call fcn.00404ac0
jne 0x46c5c6
xor edx, edx
mov eax, 0x46d6ac
call fcn.0043d958
xor edx, edx
mov eax, 0x46d36c
call fcn.0043d958
xor edx, edx
mov eax, 0x46d6c0
call fcn.0043d958
lea edx, [ebp - 0xb8]
mov eax, dword [0x474944]
call fcn.004083d4
mov eax, dword [ebp - 0xb8]
mov edx, 0x46d6d8
call fcn.00404ac0
jne 0x46c7c4
mov edx, 7
mov eax, 0x46d6f0
call fcn.00423af8
mov edx, 7
mov eax, 0x46d70c
call fcn.00423af8
call fcn.0046b2b0
mov edx, 7
mov eax, 0x46d724
call fcn.00423af8
mov edx, dword [0x46fca0]
mov edx, dword [edx]
lea eax, [ebp - 0xbc]
mov ecx, 0x46d744
call fcn.004049c0
mov eax, dword [ebp - 0xbc]
call fcn.00408f4c
mov edx, 7
mov eax, 0x46d75c
call fcn.00423af8
mov eax, dword [0x46fd3c]
cmp byte [eax], 0
je 0x46c7c4
mov eax, dword [0x46ff78]
cmp byte [eax], 4
ja 0x46c685
lea eax, [ebp - 0xc0]
call fcn.004520b0
mov edx, dword [ebp - 0xc0]
mov eax, 0x47494c
call fcn.004046f8
jmp 0x46c6a0
lea eax, [ebp - 0xc4]
call fcn.00451ff8
mov edx, dword [ebp - 0xc4]
mov eax, 0x47494c
call fcn.004046f8
mov eax, 0x47494c
mov edx, 0x46d438
call fcn.0040497c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x47494c]
call fcn.0042de50
mov edx, 7
mov eax, 0x46d778
call fcn.00423af8
mov eax, dword [0x46ff78]
cmp byte [eax], 4
ja 0x46c6f8
lea edx, [ebp - 0xc8]
mov eax, 0x46d608
call fcn.00434488
mov eax, dword [ebp - 0xc8]
mov edx, 0x10
call fcn.00452164
jmp 0x46c718
lea edx, [ebp - 0xcc]
mov eax, 0x46d608
call fcn.00434488
mov eax, dword [ebp - 0xcc]
mov edx, 0x19
call fcn.00452164
mov edx, 7
mov eax, 0x46d794
call fcn.00423af8
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, 0x46d7b8
mov edx, 0x46d7d0
mov eax, 0x80000002
call fcn.0042e6ec
mov edx, dword [ebp - 0xd0]
mov eax, 0x474970
call fcn.004046f8
lea edx, [ebp - 0xd4]
mov eax, dword [0x474970]
call fcn.0040d17c
mov edx, dword [ebp - 0xd4]
mov eax, 0x474970
mov ecx, 0x46d81c
call fcn.004049c0
push dword [0x474970]
lea edx, [ebp - 0xdc]
mov eax, 0x46d608
call fcn.00434488
push dword [ebp - 0xdc]
push 0x46d850
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00404a34
mov eax, dword [ebp - 0xd8]
call fcn.00408f4c
mov edx, 7
mov eax, 0x46d860
call fcn.00423af8
mov eax, dword [0x474944]
mov edx, 0x46d504
call fcn.00404ac0
jne 0x46c834
call fcn.00431bc8
mov cl, 1
mov dl, 1
mov eax, dword [0x43d4c8]
call fcn.0043dbec
mov dword [0x474964], eax
mov ecx, 0x46d87c
mov edx, 0x46d254
mov eax, dword [0x474964]
call fcn.00440074
test al, al
jne 0x46c818
push 0x10
push 0x46d64c
push 0x46d888
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x474964]
call fcn.00403828
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46d8a8
call fcn.00404ac0
jne 0x46c89a
call fcn.00431bc8
mov cl, 1
mov dl, 1
mov eax, dword [0x43d4c8]
call fcn.0043dbec
mov dword [0x474964], eax
push 0
mov eax, 0x474978
call fcn.004046a4
push eax
mov ecx, 0x46d8b8
mov edx, 0x46d254
mov eax, dword [0x474964]
call fcn.0043e724
mov eax, dword [0x474964]
call fcn.00403828
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46d8d0
call fcn.00404ac0
jne 0x46cb10
mov edx, 7
mov eax, 0x46d8e4
call fcn.00423af8
mov dl, 1
mov eax, 0x46d8fc
call fcn.00430900
mov dword [0x474954], eax
push 0x12c
mov eax, dword [0x474954]
push eax
call fcn.0041d510
test eax, eax
jne 0x46c8cf
mov edx, 7
mov eax, 0x46d914
call fcn.00423af8
mov dl, 1
mov eax, 0x46d938
call fcn.00430900
mov dword [0x474954], eax
xor edx, edx
push ebp
push 0x46c979
push dword fs:[edx]
mov dword fs:[edx], esp
xor ebx, ebx
push 0xfa
mov eax, dword [0x474954]
push eax
call fcn.0041d510
test eax, eax
jne 0x46c934
mov eax, dword [0x474954]
push eax
call fcn.0041d4b8
jmp 0x46c960
inc ebx
cmp ebx, 0x28
jne 0x46c913
mov edx, 7
mov eax, 0x46d954
call fcn.00423af8
call fcn.0040410c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46c980
mov eax, dword [0x474954]
push eax
call fcn.0041d5c0
ret
mov eax, dword [0x474944]
mov edx, 0x46d9dc
call fcn.00404ac0
jne 0x46cb3d
mov eax, dword [0x474944]
call fcn.00452650
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46da2c
call fcn.00404ac0
jne 0x46cb96
xor eax, eax
push ebp
push 0x46cb6b
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004532e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46cb84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474948]
mov edx, 0x46da58
call fcn.00404ac0
jne 0x46cbea
xor eax, eax
push ebp
push 0x46cbbf
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46cbd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474948]
mov edx, 0x46da80
call fcn.00404ac0
je 0x46cc0c
mov eax, dword [0x474948]
mov edx, 0x46da8c
call fcn.00404ac0
jne 0x46cc73
xor eax, eax
push ebp
push 0x46cc48
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x45cc10]
call fcn.0045ccfc
mov ebx, eax
mov edx, dword [0x474944]
mov eax, ebx
call fcn.0045243c
mov eax, ebx
call fcn.00403828
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46cc61
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46dab8
call fcn.00404ac0
jne 0x46cc9b
call fcn.00452c9c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46dac4
call fcn.00404ac0
jne 0x46ccc3
call fcn.00453064
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46dad0
call fcn.00404ac0
jne 0x46cda7
xor eax, eax
push ebp
push 0x46cd7c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00402a60
cmp eax, 4
jne 0x46cd3d
lea edx, [ebp - 0xe4]
mov eax, 4
call fcn.00402ac0
mov eax, dword [ebp - 0xe4]
push eax
lea edx, [ebp - 0xe8]
mov eax, 3
call fcn.00402ac0
mov eax, dword [ebp - 0xe8]
push eax
lea edx, [ebp - 0xec]
mov eax, 2
call fcn.00402ac0
mov eax, dword [ebp - 0xec]
pop edx
pop ecx
call fcn.0045342c
jmp 0x46cd72
lea edx, [ebp - 0xf0]
mov eax, 3
call fcn.00402ac0
mov eax, dword [ebp - 0xf0]
push eax
lea edx, [ebp - 0xf4]
mov eax, 2
call fcn.00402ac0
mov eax, dword [ebp - 0xf4]
xor ecx, ecx
pop edx
call fcn.0045342c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46cd95
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46db08
call fcn.00404ac0
jne 0x46cdd9
mov edx, 7
mov eax, 0x46db14
call fcn.00423af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46db3c
call fcn.00404ac0
jne 0x46ce0b
mov edx, 7
mov eax, 0x46db50
call fcn.00423b18
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46db80
call fcn.00404ac0
jne 0x46ce4c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x45cc10]
call fcn.0045ccfc
mov ebx, eax
mov eax, ebx
call fcn.0045f938
mov eax, ebx
call fcn.00403828
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov eax, dword [0x474944]
mov edx, 0x46db98
call fcn.00404ac0
jne 0x46cec4
call fcn.00402a60
cmp eax, 4
jne 0x46ceb2
lea edx, [ebp - 0xf8]
mov eax, 4
call fcn.00402ac0
mov eax, dword [ebp - 0xf8]
push eax
lea edx, [ebp - 0xfc]
mov eax, 3
call fcn.00402ac0
mov eax, dword [ebp - 0xfc]
push eax
lea edx, [ebp - 0x100]
mov eax, 2
call fcn.00402ac0
mov eax, dword [ebp - 0x100]
pop edx
pop ecx
call fcn.0046a910
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
lea edx, [ebp - 0x104]
mov eax, dword [0x474944]
call fcn.004083d4
mov edx, dword [ebp - 0x104]
mov eax, 0x46dbac
call fcn.00404c5c
test eax, eax
jle 0x46cfca
xor eax, eax
push ebp
push 0x46cf8c
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x108]
mov eax, dword [0x474944]
call fcn.004083d4
mov edx, dword [ebp - 0x108]
mov eax, 0x474960
call fcn.004046f8
mov eax, 0x474960
mov ecx, 8
mov edx, 1
call fcn.00404c14
xor ecx, ecx
mov dl, 1
mov eax, dword [0x45cc10]
call fcn.0045ccfc
mov ebx, eax
lea eax, [ebp - 0x10c]
mov ecx, dword [0x474960]
mov edx, 0x46dbc0
call fcn.004049c0
mov eax, dword [ebp - 0x10c]
mov edx, 7
call fcn.00423af8
mov eax, dword [ebx + 0xc]
mov ecx, dword [0x474960]
mov edx, 0x46dbe4
call fcn.00440074
mov eax, ebx
call fcn.00403828
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46cf93
ret
cmp dword [0x474944], 0
jne 0x46cfca
mov eax, 0x46d9dc
call fcn.00452650
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.0040410c
jmp 0x46d1b6
mov edx, 7
mov eax, 0x46dbf8
call fcn.00423af8
lea edx, [ebp - 0x110]
mov eax, dword [0x474944]
call fcn.004083d4
mov eax, dword [ebp - 0x110]
mov edx, 0x46d360
call fcn.00404ac0
je 0x46d000
call fcn.00431bc8
xor eax, eax
push ebp
push 0x46d066
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 7
mov eax, 0x46dc14
call fcn.00423af8
mov eax, dword [0x45fe2c]
push eax
mov eax, dword [0x46fc80]
push eax
push 2
call fcn.00431c10
push eax
mov ecx, dword [0x470064]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x45ff24]
call fcn.0041fe50
mov edx, dword [0x46ffe4]
mov dword [edx], eax
mov edx, 7
mov eax, 0x46dc48
call fcn.00423af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46d0a9
mov edx, 7
mov eax, 0x46dcb4
call fcn.00423af8
xor eax, eax
push ebp
push 0x46d170
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 7
mov eax, 0x46dcdc
call fcn.00423af8
call fcn.00402a60
dec eax
jne 0x46d118
lea edx, [ebp - 0x118]
mov eax, 1
call fcn.00402ac0
mov eax, dword [ebp - 0x118]
lea edx, [ebp - 0x114]
call fcn.004083d4
mov eax, dword [ebp - 0x114]
mov edx, 0x46d360
call fcn.00404ac0
jne 0x46d118
mov eax, dword [0x47006c]
mov byte [eax], 1
mov dl, 1
mov eax, dword [0x469d90]
call fcn.0046a1c8
mov edx, dword [0x46ff0c]
mov dword [edx], eax
mov eax, dword [0x46ff0c]
mov eax, dword [eax]
call fcn.004380c0
mov edx, 7
mov eax, 0x46dcf4
call fcn.00423af8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46d177
mov eax, dword [0x46ff0c]
mov eax, dword [eax]
call fcn.00403828
mov edx, 7
mov eax, 0x46dd1c
call fcn.00423af8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46d1db
lea eax, [ebp - 0x118]
mov edx, 0x42
call fcn.004046c8
ret