Function at 0x480b80
Capabilities:
Create process on windows
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xe6
push 0
push 0
dec ecx
jne 0x480b88
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4844f2
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
xor eax, eax
push ebp
push 0x483f3f
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x480bd6
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x484508
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x480be0
push 0x64
call sub.kernel32.dll_Sleep_1
xor eax, eax
push ebp
push 0x480c0b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x484528
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x480c15
push 0x64
call sub.kernel32.dll_Sleep_1
xor eax, eax
push ebp
push 0x48261b
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xc0]
mov eax, 0x484548
call fcn.00461b8c
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 0x70]
call fcn.004152c0
push 0
push 0
push 0
push 0x48456c
push 0x484570
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.00410b5c
add esp, 0x1c
lea edx, [ebp - 0xd0]
lea eax, [ebp - 0x80]
call fcn.004153a8
push 0x484590
push 0x4845b0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.00410b5c
add esp, 0x10
lea edx, [ebp - 0xe0]
lea eax, [ebp - 0x90]
call fcn.004153a8
push 0x4845c0
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0xf4]
lea eax, [ebp - 0xe4]
call fcn.00414e84
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 8]
mov ecx, 0x4845cc
call fcn.00406234
jmp 0x4825c0
xor eax, eax
push ebp
push 0x4825ab
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xa0]
call fcn.004166a8
test al, al
jne 0x4825a1
push 0x4845dc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00410b5c
add esp, 0xc
lea eax, [ebp - 0x104]
call fcn.004166a8
test al, al
jne 0x4825a1
push 0x4845dc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x118]
lea eax, [ebp - 0x108]
call fcn.00414198
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x10]
call fcn.00408878
xor eax, eax
push ebp
push 0x480f1e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4845ec
push dword [0x48afa4]
push 0x484600
lea eax, [ebp - 0x11c]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x480e66
lea eax, [ebp - 0x120]
mov ecx, 0x484610
mov edx, dword [0x48afa4]
call fcn.004048b0
mov eax, dword [ebp - 0x120]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x480e66
lea eax, [ebp - 0x124]
mov ecx, 0x484630
mov edx, dword [0x48afa4]
call fcn.004048b0
mov eax, dword [ebp - 0x124]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x480e66
push 0x4845ec
push dword [0x48afa4]
push 0x484644
lea eax, [ebp - 0x128]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x480e66
lea eax, [ebp - 0x12c]
mov ecx, 0x484654
mov edx, dword [0x48afa4]
call fcn.004048b0
mov eax, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jle 0x480e9c
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x484688
push dword [ebp - 0x10]
lea eax, [ebp - 0x130]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x130]
xor edx, edx
call fcn.0047ddd8
jmp 0x480f14
mov edx, dword [ebp - 0x10]
mov eax, 0x4846a8
call fcn.00404ba8
test eax, eax
jg 0x480ee0
mov edx, dword [ebp - 0x10]
mov eax, 0x4846c8
call fcn.00404ba8
test eax, eax
jg 0x480ee0
mov edx, dword [ebp - 0x10]
mov eax, 0x4846ec
call fcn.00404ba8
test eax, eax
jg 0x480ee0
mov edx, dword [ebp - 0x10]
mov eax, 0x484710
call fcn.00404ba8
test eax, eax
jle 0x480f14
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x48473c
push dword [ebp - 0x10]
lea eax, [ebp - 0x134]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x134]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x480f28
xor eax, eax
push ebp
push 0x4814f3
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x10]
mov eax, 0x48475c
call fcn.00404ba8
dec eax
je 0x480f66
mov edx, dword [ebp - 0x10]
mov eax, 0x484774
call fcn.00404ba8
dec eax
je 0x480f66
mov edx, dword [ebp - 0x10]
mov eax, 0x484790
call fcn.00404ba8
dec eax
jne 0x480f9f
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
lea eax, [ebp - 0x138]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x138]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
mov edx, dword [ebp - 0x10]
mov eax, 0x4847c8
call fcn.00404ba8
dec eax
je 0x480fc0
mov edx, dword [ebp - 0x10]
mov eax, 0x4847e4
call fcn.00404ba8
test eax, eax
jle 0x480ff9
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
lea eax, [ebp - 0x13c]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x13c]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
mov edx, dword [ebp - 0x10]
mov eax, 0x484800
call fcn.00404ba8
dec eax
je 0x48103b
mov edx, dword [ebp - 0x10]
mov eax, 0x48481c
call fcn.00404ba8
dec eax
je 0x48103b
mov edx, dword [ebp - 0x10]
mov eax, 0x484834
call fcn.00404ba8
test eax, eax
jg 0x48103b
mov edx, dword [ebp - 0x10]
mov eax, 0x484850
call fcn.00404ba8
test eax, eax
jle 0x481074
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
lea eax, [ebp - 0x140]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x140]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
mov edx, dword [ebp - 0x10]
mov eax, 0x48486c
call fcn.00404ba8
dec eax
je 0x4810b4
mov edx, dword [ebp - 0x10]
mov eax, 0x484890
call fcn.00404ba8
dec eax
je 0x4810b4
mov edx, dword [ebp - 0x10]
mov eax, 0x4848b0
call fcn.00404ba8
dec eax
je 0x4810b4
mov edx, dword [ebp - 0x10]
mov eax, 0x4848cc
call fcn.00404ba8
dec eax
jne 0x4810f6
cmp dword [0x48afe8], 2
jbe 0x4810c1
mov byte [ebp - 1], 1
push 0x4848ec
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
lea eax, [ebp - 0x144]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x144]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x15c]
lea eax, [ebp - 0x14c]
call fcn.00414198
mov eax, dword [ebp - 0x14c]
lea edx, [ebp - 0x148]
call fcn.00408878
mov edx, dword [ebp - 0x148]
mov eax, 0x484914
call fcn.00404ba8
test eax, eax
jg 0x4811f1
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x174]
lea eax, [ebp - 0x164]
call fcn.00414198
mov eax, dword [ebp - 0x164]
lea edx, [ebp - 0x160]
call fcn.00408878
mov edx, dword [ebp - 0x160]
mov eax, 0x484930
call fcn.00404ba8
test eax, eax
jg 0x4811f1
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x17c]
call fcn.00414198
mov eax, dword [ebp - 0x17c]
lea edx, [ebp - 0x178]
call fcn.00408878
mov edx, dword [ebp - 0x178]
mov eax, 0x48494c
call fcn.00404ba8
test eax, eax
jle 0x48127f
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x1a4]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a0]
call fcn.00415230
lea eax, [ebp - 0x1a0]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x1b4]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x190]
call fcn.00414198
mov eax, dword [ebp - 0x190]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x1cc]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x1cc]
lea eax, [ebp - 0x1bc]
call fcn.00414198
mov eax, dword [ebp - 0x1bc]
lea edx, [ebp - 0x1b8]
call fcn.00408878
mov edx, dword [ebp - 0x1b8]
mov eax, 0x484978
call fcn.00404ba8
test eax, eax
jle 0x481362
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x1e4]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1e0]
call fcn.00415230
lea eax, [ebp - 0x1e0]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x1f4]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x1e0]
lea eax, [ebp - 0x1d0]
call fcn.00414198
mov eax, dword [ebp - 0x1d0]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x20c]
lea eax, [ebp - 0x1fc]
call fcn.00414198
mov eax, dword [ebp - 0x1fc]
lea edx, [ebp - 0x1f8]
call fcn.00408878
mov edx, dword [ebp - 0x1f8]
mov eax, 0x484994
call fcn.00404ba8
test eax, eax
jg 0x481408
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x224]
lea eax, [ebp - 0x214]
call fcn.00414198
mov eax, dword [ebp - 0x214]
lea edx, [ebp - 0x210]
call fcn.00408878
mov edx, dword [ebp - 0x210]
mov eax, 0x4849b8
call fcn.00404ba8
test eax, eax
jle 0x481493
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x23c]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x238]
call fcn.00415230
lea eax, [ebp - 0x238]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x24c]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x238]
lea eax, [ebp - 0x228]
call fcn.00414198
mov eax, dword [ebp - 0x228]
xor edx, edx
call fcn.0047ddd8
jmp 0x4814e9
mov edx, dword [ebp - 0x10]
mov eax, 0x4849d8
call fcn.00404ba8
test eax, eax
jle 0x4814e9
mov edx, dword [ebp - 0x10]
mov eax, 0x4849f4
call fcn.00404ba8
test eax, eax
jle 0x4814e9
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
lea eax, [ebp - 0x250]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x250]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4814fd
xor eax, eax
push ebp
push 0x4818de
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x254]
mov ecx, 0x484a08
mov edx, dword [0x48afb0]
call fcn.004048b0
mov eax, dword [ebp - 0x254]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x4815f1
lea eax, [ebp - 0x258]
mov ecx, 0x484a24
mov edx, dword [0x48afb0]
call fcn.004048b0
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x4815f1
lea eax, [ebp - 0x25c]
mov ecx, 0x484a3c
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x25c]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
dec eax
je 0x4815f1
lea eax, [ebp - 0x260]
mov ecx, 0x484a50
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x260]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
dec eax
je 0x4815f1
mov edx, dword [ebp - 0x10]
mov eax, 0x484a60
call fcn.00404ba8
dec eax
je 0x4815f1
mov edx, dword [ebp - 0x10]
mov eax, 0x484a80
call fcn.00404ba8
dec eax
je 0x4815f1
mov edx, dword [ebp - 0x10]
mov eax, 0x484a98
call fcn.00404ba8
dec eax
je 0x4815f1
mov edx, dword [ebp - 0x10]
mov eax, 0x484aac
call fcn.00404ba8
dec eax
jne 0x481625
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
lea eax, [ebp - 0x264]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x264]
xor edx, edx
call fcn.0047ddd8
mov edx, dword [ebp - 0x10]
mov eax, 0x484ac0
call fcn.00404ba8
dec eax
jne 0x481717
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x27c]
lea eax, [ebp - 0x26c]
call fcn.00414198
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 0x268]
call fcn.00408878
mov edx, dword [ebp - 0x268]
mov eax, 0x484ad4
call fcn.00404ba8
test eax, eax
jle 0x481717
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x294]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x294]
lea eax, [ebp - 0x290]
call fcn.00415230
lea eax, [ebp - 0x290]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x2a4]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x290]
lea eax, [ebp - 0x280]
call fcn.00414198
mov eax, dword [ebp - 0x280]
xor edx, edx
call fcn.0047ddd8
mov edx, dword [ebp - 0x10]
mov eax, 0x484af0
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484b10
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484b28
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484b50
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484b6c
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484b84
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484ba0
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484bbc
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484bd8
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484bf4
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484c0c
call fcn.00404ba8
test eax, eax
jg 0x4817f7
mov edx, dword [ebp - 0x10]
mov eax, 0x484c2c
call fcn.00404ba8
test eax, eax
jle 0x4818d4
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x2bc]
lea eax, [ebp - 0x2ac]
call fcn.00414198
mov eax, dword [ebp - 0x2ac]
lea edx, [ebp - 0x2a8]
call fcn.00408878
mov edx, dword [ebp - 0x2a8]
mov eax, 0x484c44
call fcn.00404ba8
dec eax
jne 0x4818d4
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x2d4]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x2d4]
lea eax, [ebp - 0x2d0]
call fcn.00415230
lea eax, [ebp - 0x2d0]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x2e4]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x2d0]
lea eax, [ebp - 0x2c0]
call fcn.00414198
mov eax, dword [ebp - 0x2c0]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4818e8
xor eax, eax
push ebp
push 0x481a96
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x2fc]
lea eax, [ebp - 0x2ec]
call fcn.00414198
mov eax, dword [ebp - 0x2ec]
lea edx, [ebp - 0x2e8]
call fcn.00408878
mov edx, dword [ebp - 0x2e8]
mov eax, 0x484c54
call fcn.00404ba8
test eax, eax
jle 0x481954
cmp dword [0x48afe8], 2
ja 0x481a03
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x314]
lea eax, [ebp - 0x304]
call fcn.00414198
mov eax, dword [ebp - 0x304]
lea edx, [ebp - 0x300]
call fcn.00408878
mov edx, dword [ebp - 0x300]
mov eax, 0x484c7c
call fcn.00404ba8
test eax, eax
jle 0x4819ae
cmp dword [0x48afe8], 2
ja 0x481a03
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x32c]
lea eax, [ebp - 0x31c]
call fcn.00414198
mov eax, dword [ebp - 0x31c]
lea edx, [ebp - 0x318]
call fcn.00408878
mov edx, dword [ebp - 0x318]
mov eax, 0x484c98
call fcn.00404ba8
test eax, eax
jle 0x481a8c
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x344]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x344]
lea eax, [ebp - 0x340]
call fcn.00415230
lea eax, [ebp - 0x340]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x354]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x354]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x340]
lea eax, [ebp - 0x330]
call fcn.00414198
mov eax, dword [ebp - 0x330]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x481aa0
xor eax, eax
push ebp
push 0x481d1d
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x36c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x36c]
lea eax, [ebp - 0x35c]
call fcn.00414198
mov eax, dword [ebp - 0x35c]
lea edx, [ebp - 0x358]
call fcn.00408878
mov eax, dword [ebp - 0x358]
push eax
push 0x484cb4
push dword [0x48afb4]
push 0x484cc4
lea eax, [ebp - 0x370]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x370]
pop edx
call fcn.00404ba8
test eax, eax
jg 0x481c8a
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x388]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x388]
lea eax, [ebp - 0x378]
call fcn.00414198
mov eax, dword [ebp - 0x378]
lea edx, [ebp - 0x374]
call fcn.00408878
mov eax, dword [ebp - 0x374]
push eax
push 0x484cd8
push dword [0x48afb4]
push 0x484cec
lea eax, [ebp - 0x38c]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x38c]
pop edx
call fcn.00404ba8
test eax, eax
jg 0x481c8a
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x3a4]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x394]
call fcn.00414198
mov eax, dword [ebp - 0x394]
lea edx, [ebp - 0x390]
call fcn.00408878
mov eax, dword [ebp - 0x390]
push eax
push 0x484cf8
push dword [0x48afb4]
push 0x484cec
lea eax, [ebp - 0x3a8]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x3a8]
pop edx
call fcn.00404ba8
test eax, eax
jg 0x481c8a
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x3c0]
lea eax, [ebp - 0x3b0]
call fcn.00414198
mov eax, dword [ebp - 0x3b0]
lea edx, [ebp - 0x3ac]
call fcn.00408878
mov eax, dword [ebp - 0x3ac]
push eax
push 0x484d0c
push dword [0x48afb4]
push 0x484d1c
lea eax, [ebp - 0x3c4]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x3c4]
pop edx
call fcn.00404ba8
test eax, eax
jle 0x481d13
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484968
lea eax, [ebp - 0x3dc]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x3dc]
lea eax, [ebp - 0x3d8]
call fcn.00415230
lea eax, [ebp - 0x3d8]
push eax
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x3ec]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x3ec]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x3d8]
lea eax, [ebp - 0x3c8]
call fcn.00414198
mov eax, dword [ebp - 0x3c8]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x481d27
xor eax, eax
push ebp
push 0x481f57
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x48afec], 1
jae 0x481f4d
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x404]
lea eax, [ebp - 0x3f4]
call fcn.00414198
mov eax, dword [ebp - 0x3f4]
lea edx, [ebp - 0x3f0]
call fcn.00408878
mov edx, dword [ebp - 0x3f0]
mov eax, 0x484d38
call fcn.00404ba8
test eax, eax
jg 0x481ec4
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x41c]
lea eax, [ebp - 0x40c]
call fcn.00414198
mov eax, dword [ebp - 0x40c]
lea edx, [ebp - 0x408]
call fcn.00408878
mov edx, dword [ebp - 0x408]
mov eax, 0x484d48
call fcn.00404ba8
test eax, eax
jg 0x481ec4
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x434]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x434]
lea eax, [ebp - 0x424]
call fcn.00414198
mov eax, dword [ebp - 0x424]
lea edx, [ebp - 0x420]
call fcn.00408878
mov eax, dword [ebp - 0x420]
push eax
lea eax, [ebp - 0x438]
mov ecx, 0x484d5c
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x438]
pop edx
call fcn.00404ba8
test eax, eax
jg 0x481ec4
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x450]
lea eax, [ebp - 0x440]
call fcn.00414198
mov eax, dword [ebp - 0x440]
lea edx, [ebp - 0x43c]
call fcn.00408878
mov eax, dword [ebp - 0x43c]
push eax
lea eax, [ebp - 0x454]
mov ecx, 0x484d6c
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x454]
pop edx
call fcn.00404ba8
test eax, eax
jle 0x481f4d
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4847ac
push dword [ebp - 0x10]
push 0x484d7c
lea eax, [ebp - 0x46c]
mov edx, 5
call fcn.00404924
mov edx, dword [ebp - 0x46c]
lea eax, [ebp - 0x468]
call fcn.00415230
lea eax, [ebp - 0x468]
push eax
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x47c]
pop eax
call fcn.00416b50
lea edx, [ebp - 0x468]
lea eax, [ebp - 0x458]
call fcn.00414198
mov eax, dword [ebp - 0x458]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x481f61
cmp dword [0x48afec], 1
jae 0x482358
xor eax, eax
push ebp
push 0x482197
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x494]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x484]
call fcn.00414198
mov eax, dword [ebp - 0x484]
lea edx, [ebp - 0x480]
call fcn.00408878
mov edx, dword [ebp - 0x480]
mov eax, 0x484d8c
call fcn.00404ba8
test eax, eax
jg 0x482159
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x4ac]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x4ac]
lea eax, [ebp - 0x49c]
call fcn.00414198
mov eax, dword [ebp - 0x49c]
lea edx, [ebp - 0x498]
call fcn.00408878
mov eax, dword [ebp - 0x498]
push eax
lea eax, [ebp - 0x4b0]
mov ecx, dword [0x48afa4]
mov edx, 0x484da4
call fcn.004048b0
mov eax, dword [ebp - 0x4b0]
pop edx
call fcn.00404ba8
test eax, eax
jg 0x482159
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x4c8]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x4c8]
lea eax, [ebp - 0x4b8]
call fcn.00414198
mov eax, dword [ebp - 0x4b8]
lea edx, [ebp - 0x4b4]
call fcn.00408878
mov edx, dword [ebp - 0x4b4]
mov eax, 0x484db8
call fcn.00404ba8
test eax, eax
jg 0x482159
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x4e0]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x4e0]
lea eax, [ebp - 0x4d0]
call fcn.00414198
mov eax, dword [ebp - 0x4d0]
lea edx, [ebp - 0x4cc]
call fcn.00408878
mov eax, dword [ebp - 0x4cc]
push eax
push 0x484dd0
push dword [0x48afa4]
push 0x484de0
lea eax, [ebp - 0x4e4]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x4e4]
pop edx
call fcn.00404ba8
test eax, eax
jg 0x482159
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x4fc]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x4fc]
lea eax, [ebp - 0x4ec]
call fcn.00414198
mov eax, dword [ebp - 0x4ec]
lea edx, [ebp - 0x4e8]
call fcn.00408878
mov edx, dword [ebp - 0x4e8]
mov eax, 0x484dec
call fcn.00404ba8
test eax, eax
jle 0x48218d
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x484e00
push dword [ebp - 0x10]
lea eax, [ebp - 0x500]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x500]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4821a1
xor eax, eax
push ebp
push 0x48234e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x518]
lea eax, [ebp - 0x508]
call fcn.00414198
mov eax, dword [ebp - 0x508]
lea edx, [ebp - 0x504]
call fcn.00408878
mov eax, dword [ebp - 0x504]
mov edx, 0x484e2c
call fcn.004049b0
je 0x48224d
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x530]
lea eax, [ebp - 0x520]
call fcn.00414198
mov eax, dword [ebp - 0x520]
lea edx, [ebp - 0x51c]
call fcn.00408878
mov eax, dword [ebp - 0x51c]
mov edx, 0x484e3c
call fcn.004049b0
jne 0x4822a1
push 0x4848fc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x548]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x538]
call fcn.00414198
mov eax, dword [ebp - 0x538]
lea edx, [ebp - 0x534]
call fcn.00408878
mov edx, dword [ebp - 0x534]
mov eax, 0x484e4c
call fcn.00404ba8
dec eax
je 0x482340
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x560]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x560]
lea eax, [ebp - 0x550]
call fcn.00414198
mov eax, dword [ebp - 0x550]
lea edx, [ebp - 0x54c]
call fcn.00408878
mov eax, dword [ebp - 0x54c]
mov edx, 0x484e60
call fcn.004049b0
jne 0x482344
push 0x484d24
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x578]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x578]
lea eax, [ebp - 0x568]
call fcn.00414198
mov eax, dword [ebp - 0x568]
lea edx, [ebp - 0x564]
call fcn.00408878
mov edx, dword [ebp - 0x564]
mov eax, 0x484e70
call fcn.00404ba8
dec eax
jne 0x482344
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482358
push 0x484e78
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x590]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x590]
lea eax, [ebp - 0x580]
call fcn.00414198
mov eax, dword [ebp - 0x580]
lea edx, [ebp - 0x57c]
call fcn.00408878
mov eax, dword [ebp - 0x57c]
mov edx, 0x484e90
call fcn.004049b0
jne 0x4823ce
push dword [0x48aff4]
push 0x484ec0
push dword [ebp - 0x10]
push 0x484ecc
mov eax, 0x48aff4
mov edx, 4
call fcn.00404924
jmp 0x4825a1
push 0x484e78
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x5a8]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x5a8]
lea eax, [ebp - 0x598]
call fcn.00414198
mov eax, dword [ebp - 0x598]
lea edx, [ebp - 0x594]
call fcn.00408878
mov eax, dword [ebp - 0x594]
mov edx, 0x484ed8
call fcn.004049b0
jne 0x482444
push dword [0x48aff8]
push 0x484ec0
push dword [ebp - 0x10]
push 0x484ecc
mov eax, 0x48aff8
mov edx, 4
call fcn.00404924
jmp 0x4825a1
xor eax, eax
push ebp
push 0x482597
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x5b8]
push eax
call fcn.00410b5c
add esp, 0xc
lea eax, [ebp - 0x5b8]
call fcn.004166a8
test al, al
jne 0x4824f2
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x5d0]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x5d0]
lea eax, [ebp - 0x5c0]
call fcn.00414198
mov eax, dword [ebp - 0x5c0]
lea edx, [ebp - 0x5bc]
call fcn.00408878
mov eax, dword [ebp - 0x5bc]
mov edx, 0x484f08
call fcn.004049b0
jne 0x4824f2
push dword [0x48aff4]
push 0x484ec0
push dword [ebp - 0x10]
push 0x484ecc
mov eax, 0x48aff4
mov edx, 4
call fcn.00404924
jmp 0x48258d
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.00410b5c
add esp, 0xc
lea eax, [ebp - 0x5e0]
call fcn.004166a8
test al, al
jne 0x48258d
push 0x484e18
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x5f8]
push eax
call fcn.00410b5c
add esp, 0xc
lea edx, [ebp - 0x5f8]
lea eax, [ebp - 0x5e8]
call fcn.00414198
mov eax, dword [ebp - 0x5e8]
lea edx, [ebp - 0x5e4]
call fcn.00408878
mov eax, dword [ebp - 0x5e4]
mov edx, 0x484e2c
call fcn.004049b0
jne 0x48258d
push dword [0x48aff8]
push 0x484ec0
push dword [ebp - 0x10]
push 0x484ecc
mov eax, 0x48aff8
mov edx, 4
call fcn.00404924
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4825a1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4825b5
lea eax, [ebp - 0xa0]
call fcn.00410b40
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xa0]
push eax
push 1
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x480ceb
push 0x484f1c
push dword [0x48aff4]
push 0x484f38
push dword [0x48aff8]
lea eax, [ebp - 0x5fc]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x5fc]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482625
cmp byte [ebp - 1], 0
jne 0x483966
xor eax, eax
push ebp
push 0x4827f9
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x604]
mov edx, 0x484f4c
mov eax, 0x484f5c
call fcn.0047e9dc
mov eax, dword [ebp - 0x604]
lea edx, [ebp - 0x600]
call fcn.00408878
mov edx, dword [ebp - 0x600]
mov eax, 0x48affc
call fcn.004045f8
lea ecx, [ebp - 0x60c]
mov edx, 0x484f70
mov eax, 0x484f5c
call fcn.0047e9dc
mov eax, dword [ebp - 0x60c]
lea edx, [ebp - 0x608]
call fcn.00408878
mov edx, dword [ebp - 0x608]
mov eax, 0x48b000
call fcn.004045f8
push 0
lea eax, [ebp - 0x618]
push eax
mov ecx, 0x484f84
mov edx, 0x484f98
mov eax, 0x80000002
call fcn.0047edcc
mov eax, dword [ebp - 0x618]
lea edx, [ebp - 0x614]
call fcn.00408b54
mov eax, dword [ebp - 0x614]
lea edx, [ebp - 0x610]
call fcn.00408878
mov edx, dword [ebp - 0x610]
mov eax, 0x48b004
call fcn.004045f8
push 0
lea eax, [ebp - 0x624]
push eax
mov ecx, 0x484fc4
mov edx, 0x484f98
mov eax, 0x80000002
call fcn.0047edcc
mov eax, dword [ebp - 0x624]
lea edx, [ebp - 0x620]
call fcn.00408b54
mov eax, dword [ebp - 0x620]
lea edx, [ebp - 0x61c]
call fcn.00408878
mov edx, dword [ebp - 0x61c]
mov eax, 0x48b008
call fcn.004045f8
push 0
lea eax, [ebp - 0x630]
push eax
mov ecx, 0x484fe0
mov edx, 0x484f98
mov eax, 0x80000002
call fcn.0047edcc
mov eax, dword [ebp - 0x630]
lea edx, [ebp - 0x62c]
call fcn.00408b54
mov eax, dword [ebp - 0x62c]
lea edx, [ebp - 0x628]
call fcn.00408878
mov edx, dword [ebp - 0x628]
mov eax, 0x48b00c
call fcn.004045f8
push 0x484ffc
push dword [0x48affc]
push 0x48501c
push dword [0x48b000]
push 0x485028
push dword [0x48b004]
push 0x48501c
push dword [0x48b008]
push 0x48501c
push dword [0x48b00c]
push 0x484ecc
lea eax, [ebp - 0x634]
mov edx, 0xb
call fcn.00404924
mov eax, dword [ebp - 0x634]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482803
cmp dword [0x48aff4], 0
jne 0x482819
cmp dword [0x48aff8], 0
jne 0x482819
mov byte [ebp - 0x45], 1
cmp dword [0x48affc], 0
jne 0x482826
mov byte [ebp - 0x46], 1
cmp dword [0x48b000], 0
jne 0x482833
mov byte [ebp - 0x47], 1
mov al, byte [ebp - 0x45]
or al, byte [ebp - 0x46]
jne 0x482845
cmp byte [ebp - 0x47], 0
je 0x483966
xor eax, eax
push ebp
push 0x48395c
push dword fs:[eax]
mov dword fs:[eax], esp
push 8
push 0
push 0x485034
call sub.kernel32.dll_LoadLibraryExA_1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x483904
push 0x485044
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [ebp - 0x28], eax
mov eax, dword [0x48af9c]
call fcn.00404a64
push eax
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [ebp - 0x2c], eax
push 0x48505c
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [ebp - 0x30], eax
xor eax, eax
push ebp
push 0x4828d0
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x485080
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [ebp - 0x34], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4828da
push 6
push 0
push 0
push 0
call dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
je 0x483904
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xbc], 0x1c
mov eax, pe_nt_image_headers32
call fcn.00402a88
mov dword [ebp - 0x38], eax
jmp 0x48389e
add dword [ebp - 0x44], 1
jno 0x48291e
call fcn.00403660
lea eax, [ebp - 0x14]
call fcn.004045a4
lea eax, [ebp - 0x10]
call fcn.004045a4
lea eax, [ebp - 0x18]
call fcn.004045a4
lea eax, [ebp - 0x1c]
call fcn.004045a4
lea eax, [ebp - 0x20]
call fcn.004045a4
xor eax, eax
push ebp
push 0x4829aa
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push pe_nt_image_headers32
mov eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x30]
lea eax, [ebp - 0x63c]
mov edx, dword [ebp - 0x38]
call fcn.0040479c
mov eax, dword [ebp - 0x63c]
lea edx, [ebp - 0x638]
call fcn.00408878
mov eax, dword [ebp - 0x638]
lea edx, [ebp - 0x14]
call fcn.00408b54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4829b4
xor eax, eax
push ebp
push 0x482a18
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push pe_nt_image_headers32
mov eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0xc
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x30]
lea eax, [ebp - 0x644]
mov edx, dword [ebp - 0x38]
call fcn.0040479c
mov eax, dword [ebp - 0x644]
lea edx, [ebp - 0x640]
call fcn.00408878
mov eax, dword [ebp - 0x640]
lea edx, [ebp - 0x10]
call fcn.00408b54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482a22
cmp dword [ebp - 0x10], 0
jne 0x482a33
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.0040463c
xor eax, eax
push ebp
push 0x482a97
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push pe_nt_image_headers32
mov eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x30]
lea eax, [ebp - 0x64c]
mov edx, dword [ebp - 0x38]
call fcn.0040479c
mov eax, dword [ebp - 0x64c]
lea edx, [ebp - 0x648]
call fcn.00408878
mov eax, dword [ebp - 0x648]
lea edx, [ebp - 0x18]
call fcn.00408b54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482aa1
xor eax, eax
push ebp
push 0x482b05
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push pe_nt_image_headers32
mov eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
push 4
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x30]
lea eax, [ebp - 0x654]
mov edx, dword [ebp - 0x38]
call fcn.0040479c
mov eax, dword [ebp - 0x654]
lea edx, [ebp - 0x650]
call fcn.00408878
mov eax, dword [ebp - 0x650]
lea edx, [ebp - 0x1c]
call fcn.00408b54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482b0f
xor eax, eax
push ebp
push 0x482b73
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push pe_nt_image_headers32
mov eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
push 7
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x30]
lea eax, [ebp - 0x65c]
mov edx, dword [ebp - 0x38]
call fcn.0040479c
mov eax, dword [ebp - 0x65c]
lea edx, [ebp - 0x658]
call fcn.00408878
mov eax, dword [ebp - 0x658]
lea edx, [ebp - 0x20]
call fcn.00408b54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482b7d
push 0x4850a8
push dword [0x48af9c]
push 0x4850b4
push dword [ebp - 0x14]
push 0x4850c8
push dword [ebp - 0x10]
push 0x4850d4
push 0x4850e0
push dword [ebp - 0x18]
push 0x4850f0
push dword [ebp - 0x1c]
push 0x485100
push dword [ebp - 0x20]
lea eax, [ebp - 0x660]
mov edx, 0xd
call fcn.00404924
mov eax, dword [ebp - 0x660]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
push ebp
push 0x482cb4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x20]
mov edx, 0x484f08
call fcn.004049b0
sete al
and al, byte [ebp - 0x45]
je 0x482c1c
push dword [0x48aff4]
push 0x484ec0
push dword [ebp - 0x14]
push 0x484ecc
mov eax, 0x48aff4
mov edx, 4
call fcn.00404924
jmp 0x482caa
mov eax, dword [ebp - 0x20]
mov edx, 0x484e2c
call fcn.004049b0
sete al
and al, byte [ebp - 0x45]
je 0x482c55
push dword [0x48aff8]
push 0x484ec0
push dword [ebp - 0x14]
push 0x484ecc
mov eax, 0x48aff8
mov edx, 4
call fcn.00404924
jmp 0x482caa
mov eax, dword [ebp - 0x20]
mov edx, 0x485110
call fcn.004049b0
jne 0x482caa
cmp byte [ebp - 0x46], 0
je 0x482c87
push dword [0x48affc]
push dword [ebp - 0x10]
push 0x485124
mov eax, 0x48affc
mov edx, 3
call fcn.00404924
cmp byte [ebp - 0x47], 0
je 0x482caa
push dword [0x48b000]
push dword [ebp - 0x18]
push 0x485124
mov eax, 0x48b000
mov edx, 3
call fcn.00404924
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482cbe
xor eax, eax
push ebp
push 0x482e68
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4845ec
push dword [0x48afa4]
push 0x484600
lea eax, [ebp - 0x664]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x664]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x482db0
lea eax, [ebp - 0x668]
mov ecx, 0x484610
mov edx, dword [0x48afa4]
call fcn.004048b0
mov eax, dword [ebp - 0x668]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x482db0
lea eax, [ebp - 0x66c]
mov ecx, 0x484630
mov edx, dword [0x48afa4]
call fcn.004048b0
mov eax, dword [ebp - 0x66c]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x482db0
push 0x4845ec
push dword [0x48afa4]
push 0x484644
lea eax, [ebp - 0x670]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x670]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x482db0
lea eax, [ebp - 0x674]
mov ecx, 0x484654
mov edx, dword [0x48afa4]
call fcn.004048b0
mov eax, dword [ebp - 0x674]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jle 0x482de6
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485130
push dword [ebp - 0x10]
lea eax, [ebp - 0x678]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x678]
xor edx, edx
call fcn.0047ddd8
jmp 0x482e5e
mov edx, dword [ebp - 0x10]
mov eax, 0x4846a8
call fcn.00404ba8
test eax, eax
jg 0x482e2a
mov edx, dword [ebp - 0x10]
mov eax, 0x4846c8
call fcn.00404ba8
test eax, eax
jg 0x482e2a
mov edx, dword [ebp - 0x10]
mov eax, 0x4846ec
call fcn.00404ba8
test eax, eax
jg 0x482e2a
mov edx, dword [ebp - 0x10]
mov eax, 0x484710
call fcn.00404ba8
test eax, eax
jle 0x482e5e
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485154
push dword [ebp - 0x10]
lea eax, [ebp - 0x67c]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x67c]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x482e72
xor eax, eax
push ebp
push 0x4831b5
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x10]
mov eax, 0x48475c
call fcn.00404ba8
dec eax
je 0x482eb0
mov edx, dword [ebp - 0x10]
mov eax, 0x484774
call fcn.00404ba8
dec eax
je 0x482eb0
mov edx, dword [ebp - 0x10]
mov eax, 0x484790
call fcn.00404ba8
dec eax
jne 0x482ee9
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
lea eax, [ebp - 0x680]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x680]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x10]
mov eax, 0x4847c8
call fcn.00404ba8
dec eax
je 0x482f0a
mov edx, dword [ebp - 0x10]
mov eax, 0x4847e4
call fcn.00404ba8
test eax, eax
jle 0x482f43
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
lea eax, [ebp - 0x684]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x684]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x10]
mov eax, 0x484800
call fcn.00404ba8
dec eax
je 0x482f85
mov edx, dword [ebp - 0x10]
mov eax, 0x48481c
call fcn.00404ba8
dec eax
je 0x482f85
mov edx, dword [ebp - 0x10]
mov eax, 0x484834
call fcn.00404ba8
test eax, eax
jg 0x482f85
mov edx, dword [ebp - 0x10]
mov eax, 0x484850
call fcn.00404ba8
test eax, eax
jle 0x482fbe
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
lea eax, [ebp - 0x688]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x688]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x10]
mov eax, 0x48486c
call fcn.00404ba8
dec eax
je 0x482ffe
mov edx, dword [ebp - 0x10]
mov eax, 0x484890
call fcn.00404ba8
dec eax
je 0x482ffe
mov edx, dword [ebp - 0x10]
mov eax, 0x4848b0
call fcn.00404ba8
dec eax
je 0x482ffe
mov edx, dword [ebp - 0x10]
mov eax, 0x4848cc
call fcn.00404ba8
dec eax
jne 0x483040
cmp dword [0x48afe8], 2
jbe 0x48300b
mov byte [ebp - 1], 1
push 0x4848ec
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
lea eax, [ebp - 0x68c]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x68c]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x18]
mov eax, 0x485198
call fcn.00404ba8
test eax, eax
jg 0x483062
mov edx, dword [ebp - 0x18]
mov eax, 0x48494c
call fcn.00404ba8
test eax, eax
jle 0x4830a3
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x690]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x690]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x18]
mov eax, 0x4851b4
call fcn.00404ba8
test eax, eax
jle 0x4830f5
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x694]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x694]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x18]
mov eax, 0x4851d0
call fcn.00404ba8
test eax, eax
jg 0x483117
mov edx, dword [ebp - 0x18]
mov eax, 0x4851ec
call fcn.00404ba8
test eax, eax
jle 0x483155
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x698]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x698]
xor edx, edx
call fcn.0047ddd8
jmp 0x4831ab
mov edx, dword [ebp - 0x10]
mov eax, 0x4849d8
call fcn.00404ba8
test eax, eax
jle 0x4831ab
mov edx, dword [ebp - 0x10]
mov eax, 0x4849f4
call fcn.00404ba8
test eax, eax
jle 0x4831ab
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
lea eax, [ebp - 0x69c]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x69c]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4831bf
xor eax, eax
push ebp
push 0x483487
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x6a0]
mov ecx, 0x484a08
mov edx, dword [0x48afb0]
call fcn.004048b0
mov eax, dword [ebp - 0x6a0]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x4832b3
lea eax, [ebp - 0x6a4]
mov ecx, 0x484a24
mov edx, dword [0x48afb0]
call fcn.004048b0
mov eax, dword [ebp - 0x6a4]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
test eax, eax
jg 0x4832b3
lea eax, [ebp - 0x6a8]
mov ecx, 0x484a3c
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x6a8]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
dec eax
je 0x4832b3
lea eax, [ebp - 0x6ac]
mov ecx, 0x484a50
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x6ac]
mov edx, dword [ebp - 0x10]
call fcn.00404ba8
dec eax
je 0x4832b3
mov edx, dword [ebp - 0x10]
mov eax, 0x484a60
call fcn.00404ba8
dec eax
je 0x4832b3
mov edx, dword [ebp - 0x10]
mov eax, 0x484a80
call fcn.00404ba8
dec eax
je 0x4832b3
mov edx, dword [ebp - 0x10]
mov eax, 0x484a98
call fcn.00404ba8
dec eax
je 0x4832b3
mov edx, dword [ebp - 0x10]
mov eax, 0x484aac
call fcn.00404ba8
dec eax
jne 0x4832e7
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
lea eax, [ebp - 0x6b0]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x6b0]
xor edx, edx
call fcn.0047ddd8
mov edx, dword [ebp - 0x10]
mov eax, 0x484ac0
call fcn.00404ba8
dec eax
jne 0x483355
mov edx, dword [ebp - 0x18]
mov eax, 0x484cb4
call fcn.00404ba8
test eax, eax
jle 0x483355
mov edx, dword [ebp - 0x18]
mov eax, 0x485208
call fcn.00404ba8
test eax, eax
jle 0x483355
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x6b4]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x6b4]
xor edx, edx
call fcn.0047ddd8
mov edx, dword [ebp - 0x10]
mov eax, 0x484af0
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484b10
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484b28
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484b50
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484b6c
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484b84
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484ba0
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484bbc
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484bd8
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484bf4
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484c0c
call fcn.00404ba8
test eax, eax
jg 0x483431
mov edx, dword [ebp - 0x10]
mov eax, 0x484c2c
call fcn.00404ba8
test eax, eax
jle 0x48347d
mov edx, dword [ebp - 0x18]
mov eax, 0x484c44
call fcn.00404ba8
dec eax
jne 0x48347d
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x6b8]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x6b8]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483491
xor eax, eax
push ebp
push 0x48352a
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x18]
mov eax, 0x485218
call fcn.00404ba8
test eax, eax
jle 0x4834b9
cmp dword [0x48afe8], 2
ja 0x4834e4
mov edx, dword [ebp - 0x18]
mov eax, 0x485230
call fcn.00404ba8
test eax, eax
jle 0x4834d3
cmp dword [0x48afe8], 2
ja 0x4834e4
mov edx, dword [ebp - 0x18]
mov eax, 0x485248
call fcn.00404ba8
test eax, eax
jle 0x483520
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x6bc]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x6bc]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483534
xor eax, eax
push ebp
push 0x4835ec
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x484cb4
push dword [0x48afb4]
push 0x484de0
lea eax, [ebp - 0x6c0]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x6c0]
mov edx, dword [ebp - 0x18]
call fcn.00404ba8
test eax, eax
jg 0x4835a6
push 0x484d0c
push dword [0x48afb4]
push 0x484de0
lea eax, [ebp - 0x6c4]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x6c4]
mov edx, dword [ebp - 0x18]
call fcn.00404ba8
test eax, eax
jle 0x4835e2
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
lea eax, [ebp - 0x6c8]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x6c8]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4835f6
xor eax, eax
push ebp
push 0x4836bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x1c]
mov eax, 0x484d38
call fcn.00404ba8
test eax, eax
jg 0x483676
mov edx, dword [ebp - 0x1c]
mov eax, 0x484d48
call fcn.00404ba8
test eax, eax
jg 0x483676
lea eax, [ebp - 0x6cc]
mov ecx, 0x484d5c
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x6cc]
mov edx, dword [ebp - 0x1c]
call fcn.00404ba8
test eax, eax
jg 0x483676
lea eax, [ebp - 0x6d0]
mov ecx, 0x484d6c
mov edx, dword [0x48afb4]
call fcn.004048b0
mov eax, dword [ebp - 0x6d0]
mov edx, dword [ebp - 0x1c]
call fcn.00404ba8
test eax, eax
jle 0x4836b2
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485178
push dword [ebp - 0x10]
push 0x484d7c
push dword [ebp - 0x1c]
lea eax, [ebp - 0x6d4]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x6d4]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4836c6
xor eax, eax
push ebp
push 0x4837d9
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x18]
mov eax, 0x484d8c
call fcn.00404ba8
test eax, eax
jg 0x48379b
lea eax, [ebp - 0x6d8]
mov ecx, dword [0x48afa4]
mov edx, 0x484da4
call fcn.004048b0
mov eax, dword [ebp - 0x6d8]
mov edx, dword [ebp - 0x18]
call fcn.00404ba8
test eax, eax
jg 0x48379b
mov edx, dword [ebp - 0x18]
mov eax, 0x484db8
call fcn.00404ba8
test eax, eax
jg 0x48379b
push 0x484cb4
push dword [0x48afa4]
push 0x484de0
lea eax, [ebp - 0x6dc]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x6dc]
mov edx, dword [ebp - 0x18]
call fcn.00404ba8
test eax, eax
jg 0x48379b
push 0x484de0
push dword [0x48afa4]
push 0x485264
lea eax, [ebp - 0x6e0]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x6e0]
mov edx, dword [ebp - 0x18]
call fcn.00404ba8
test eax, eax
jg 0x48379b
mov edx, dword [ebp - 0x1c]
mov eax, 0x484dec
call fcn.00404ba8
test eax, eax
jle 0x4837cf
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x485278
push dword [ebp - 0x10]
lea eax, [ebp - 0x6e4]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x6e4]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4837e3
xor eax, eax
push ebp
push 0x483894
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x20]
mov edx, 0x484e2c
call fcn.004049b0
je 0x48380f
mov eax, dword [ebp - 0x20]
mov edx, 0x484e3c
call fcn.004049b0
jne 0x48381f
mov edx, dword [ebp - 0x18]
mov eax, 0x484e4c
call fcn.00404ba8
dec eax
je 0x48383e
mov eax, dword [ebp - 0x20]
mov edx, 0x484e60
call fcn.004049b0
jne 0x48388a
mov edx, dword [ebp - 0x1c]
mov eax, 0x484e70
call fcn.00404ba8
dec eax
jne 0x48388a
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x48529c
push dword [ebp - 0x10]
push 0x484968
push dword [ebp - 0x18]
push 0x484d7c
push dword [ebp - 0x1c]
push 0x4852c0
push dword [ebp - 0x20]
lea eax, [ebp - 0x6e8]
mov edx, 0xa
call fcn.00404924
mov eax, dword [ebp - 0x6e8]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48389e
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x2c]
test eax, eax
jne 0x482913
cmp dword [ebp - 0x38], 0
je 0x4838c6
mov eax, dword [ebp - 0x38]
call fcn.00402ab8
call sub.kernel32.dll_GetLastError
test eax, eax
je 0x4838db
call sub.kernel32.dll_GetLastError
cmp eax, 0x103
jne 0x483904
xor eax, eax
push ebp
push 0x4838fa
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x40]
push eax
call dword [ebp - 0x34]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483904
push 0x4852d4
push dword [0x48aff4]
push 0x4852fc
push dword [0x48aff8]
push 0x485314
push dword [0x48affc]
push 0x48501c
push dword [0x48b000]
push 0x484ecc
lea eax, [ebp - 0x6ec]
mov edx, 9
call fcn.00404924
mov eax, dword [ebp - 0x6ec]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483966
cmp byte [ebp - 1], 0
jne 0x4839a0
xor eax, eax
push ebp
push 0x483996
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0047eef8
call fcn.0047f444
test al, al
je 0x48398c
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4839a0
xor eax, eax
push ebp
push 0x483a6b
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebp - 1], 0
jne 0x4839f2
lea ecx, [ebp - 0x6f4]
mov edx, 0x485324
mov eax, 0x48533c
call fcn.0047e9dc
mov eax, dword [ebp - 0x6f4]
lea edx, [ebp - 0x6f0]
call fcn.00408878
mov edx, dword [ebp - 0x6f0]
mov eax, dword [0x48afa4]
call fcn.00404ba8
test eax, eax
jle 0x4839f2
mov byte [ebp - 1], 1
cmp byte [ebp - 1], 0
jne 0x483a3a
cmp dword [0x48afe8], 1
jbe 0x483a3a
push 0x484de0
push dword [0x48afa4]
push 0x484de0
lea eax, [ebp - 0x6f8]
mov edx, 3
call fcn.00404924
mov eax, dword [ebp - 0x6f8]
mov edx, dword [0x48b000]
call fcn.00404ba8
test eax, eax
jle 0x483a3a
mov byte [ebp - 1], 1
cmp byte [ebp - 1], 0
jne 0x483a61
cmp dword [0x48afe8], 1
jbe 0x483a61
mov edx, dword [0x48affc]
mov eax, dword [0x48afa4]
call fcn.00404ba8
test eax, eax
jle 0x483a61
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483a75
cmp byte [ebp - 1], 0
jne 0x483d50
xor eax, eax
push ebp
push 0x483d46
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x6fc]
mov edx, 0x48534c
mov eax, 0x48533c
call fcn.0047e9dc
mov eax, dword [ebp - 0x6fc]
lea edx, [ebp - 0x4c]
call fcn.00408878
cmp dword [ebp - 0x4c], 0
je 0x483ac3
mov eax, dword [ebp - 0x4c]
call fcn.00404864
cmp eax, 5
jge 0x483ad1
lea eax, [ebp - 0x4c]
mov edx, dword [0x48b004]
call fcn.0040463c
lea ecx, [ebp - 0x700]
mov edx, 0x485368
mov eax, 0x485380
call fcn.0047e9dc
mov eax, dword [ebp - 0x700]
lea edx, [ebp - 0x50]
call fcn.00408878
cmp dword [ebp - 0x50], 0
je 0x483b07
mov eax, dword [ebp - 0x50]
call fcn.00404864
cmp eax, 5
jge 0x483b15
lea eax, [ebp - 0x50]
mov edx, dword [0x48b008]
call fcn.0040463c
lea ecx, [ebp - 0x704]
mov edx, 0x485398
mov eax, 0x485380
call fcn.0047e9dc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x54]
call fcn.00408878
cmp dword [ebp - 0x54], 0
je 0x483b4b
mov eax, dword [ebp - 0x54]
call fcn.00404864
cmp eax, 5
jge 0x483b59
lea eax, [ebp - 0x54]
mov edx, dword [0x48b00c]
call fcn.0040463c
lea eax, [ebp - 0x58]
mov edx, dword [0x48affc]
call fcn.0040463c
lea eax, [ebp - 0x5c]
mov edx, dword [0x48b000]
call fcn.0040463c
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x48afb0]
call fcn.00404ba8
test eax, eax
jg 0x483ba8
mov edx, dword [ebp - 0x50]
mov eax, 0x4853a8
call fcn.00404ba8
test eax, eax
jg 0x483ba8
mov edx, dword [ebp - 0x54]
mov eax, dword [0x48afb0]
call fcn.00404ba8
test eax, eax
jle 0x483be6
mov byte [ebp - 1], 1
push 0x4853c0
push dword [ebp - 0x4c]
push 0x4853dc
push dword [ebp - 0x50]
push 0x4853dc
push dword [ebp - 0x54]
lea eax, [ebp - 0x708]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x708]
xor edx, edx
call fcn.0047ddd8
jmp 0x483d3c
mov edx, dword [ebp - 0x50]
mov eax, 0x4853e8
call fcn.00404ba8
dec eax
je 0x483c06
mov edx, dword [ebp - 0x54]
mov eax, 0x485404
call fcn.00404ba8
dec eax
jne 0x483c3c
mov byte [ebp - 1], 1
push 0x485420
push dword [ebp - 0x50]
push 0x4853dc
push dword [ebp - 0x54]
lea eax, [ebp - 0x70c]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x70c]
xor edx, edx
call fcn.0047ddd8
jmp 0x483d3c
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x48afa4]
call fcn.00404ba8
dec eax
je 0x483c5c
mov edx, dword [ebp - 0x54]
mov eax, dword [0x48afa4]
call fcn.00404ba8
dec eax
jne 0x483c9d
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x48543c
push dword [ebp - 0x4c]
push 0x4853dc
push dword [ebp - 0x54]
lea eax, [ebp - 0x710]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x710]
xor edx, edx
call fcn.0047ddd8
jmp 0x483d3c
mov edx, dword [ebp - 0x58]
mov eax, 0x48475c
call fcn.00404ba8
dec eax
je 0x483cbe
mov edx, dword [ebp - 0x5c]
mov eax, 0x484914
call fcn.00404ba8
test eax, eax
jle 0x483cfc
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x48544c
push dword [ebp - 0x58]
push 0x4853dc
push dword [ebp - 0x5c]
lea eax, [ebp - 0x714]
mov edx, 6
call fcn.00404924
mov eax, dword [ebp - 0x714]
xor edx, edx
call fcn.0047ddd8
jmp 0x483d3c
mov edx, dword [ebp - 0x4c]
mov eax, 0x485460
call fcn.00404ba8
test eax, eax
jg 0x483d38
mov edx, dword [ebp - 0x54]
mov eax, 0x485470
call fcn.00404ba8
test eax, eax
jg 0x483d38
mov edx, dword [ebp - 0x58]
mov eax, 0x485488
call fcn.00404ba8
test eax, eax
jle 0x483d3c
cmp dword [0x48afe8], 1
jbe 0x483d3c
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483d50
cmp byte [ebp - 1], 0
jne 0x483efb
xor eax, eax
push ebp
push 0x483de0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x71c]
call fcn.00462820
mov eax, dword [ebp - 0x71c]
lea edx, [ebp - 0x718]
call fcn.00408878
mov eax, dword [ebp - 0x718]
lea edx, [ebp - 0x5c]
call fcn.00408b54
mov edx, dword [ebp - 0x5c]
mov eax, 0x484774
call fcn.00404ba8
dec eax
jne 0x483dd6
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x4854a4
push dword [ebp - 0x5c]
lea eax, [ebp - 0x720]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x720]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483dea
xor eax, eax
push ebp
push 0x483ef1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x724]
push eax
mov ecx, 0x484fc4
mov edx, 0x4854b8
mov eax, 0x80000002
call fcn.0047edcc
mov eax, dword [ebp - 0x724]
lea edx, [ebp - 0x4c]
call fcn.00408878
push 0
lea eax, [ebp - 0x728]
push eax
mov ecx, 0x484fe0
mov edx, 0x4854b8
mov eax, 0x80000002
call fcn.0047edcc
mov eax, dword [ebp - 0x728]
lea edx, [ebp - 0x50]
call fcn.00408878
mov edx, dword [ebp - 0x4c]
mov eax, 0x4853a8
call fcn.00404ba8
test eax, eax
jg 0x483e70
mov edx, dword [ebp - 0x50]
mov eax, dword [0x48afb0]
call fcn.00404ba8
test eax, eax
jle 0x483ea3
mov byte [ebp - 1], 1
push 0x4854f0
push dword [ebp - 0x4c]
push 0x4853dc
push dword [ebp - 0x50]
lea eax, [ebp - 0x72c]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x72c]
xor edx, edx
call fcn.0047ddd8
jmp 0x483ee7
mov edx, dword [ebp - 0x50]
mov eax, dword [0x48afa4]
call fcn.00404ba8
dec eax
jne 0x483ee7
mov byte [ebp - 1], 1
push 0x484674
push dword [0x48af90]
push 0x48550c
push dword [ebp - 0x50]
lea eax, [ebp - 0x730]
mov edx, 4
call fcn.00404924
mov eax, dword [ebp - 0x730]
xor edx, edx
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483efb
cmp byte [ebp - 1], 0
jne 0x483f35
xor eax, eax
push ebp
push 0x483f2b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x60]
call fcn.0047fe48
cmp dword [ebp - 0x60], 0
je 0x483f21
mov byte [ebp - 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483f35
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x483f49
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4844fc
lea eax, [ebp - 0x730]
mov edx, 0x4e
call fcn.004045c8
lea eax, [ebp - 0x5f8]
call fcn.00410b54
lea eax, [ebp - 0x5e8]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x5e0]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.004050a4
lea eax, [ebp - 0x5c0]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x5b8]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.004050a4
lea eax, [ebp - 0x598]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x590]
call fcn.00410b54
lea eax, [ebp - 0x580]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x578]
call fcn.00410b54
lea eax, [ebp - 0x568]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x560]
call fcn.00410b54
lea eax, [ebp - 0x550]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x538]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x548]
call fcn.00410b54
lea eax, [ebp - 0x530]
call fcn.00410b54
lea eax, [ebp - 0x520]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x518]
call fcn.00410b54
lea eax, [ebp - 0x508]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x4fc]
call fcn.00410b54
lea eax, [ebp - 0x4ec]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x4e0]
call fcn.00410b54
lea eax, [ebp - 0x4d0]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x4c8]
call fcn.00410b54
lea eax, [ebp - 0x4b8]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x4ac]
call fcn.00410b54
lea eax, [ebp - 0x49c]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x494]
call fcn.00410b54
lea eax, [ebp - 0x484]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x47c]
call fcn.00410b54
lea eax, [ebp - 0x46c]
call fcn.004045a4
lea eax, [ebp - 0x468]
call fcn.00410b54
lea eax, [ebp - 0x458]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x450]
call fcn.00410b54
lea eax, [ebp - 0x440]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x434]
call fcn.00410b54
lea eax, [ebp - 0x424]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x41c]
call fcn.00410b54
lea eax, [ebp - 0x40c]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x404]
call fcn.00410b54
lea eax, [ebp - 0x3f4]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x3ec]
call fcn.00410b54
lea eax, [ebp - 0x3dc]
call fcn.004045a4
lea eax, [ebp - 0x3d8]
call fcn.00410b54
lea eax, [ebp - 0x3c8]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x3c0]
call fcn.00410b54
lea eax, [ebp - 0x3b0]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x3a4]
call fcn.00410b54
lea eax, [ebp - 0x394]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x388]
call fcn.00410b54
lea eax, [ebp - 0x378]
mov edx, 3
call fcn.004045c8
lea eax, [ebp - 0x36c]
call fcn.00410b54
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x354]
call fcn.00410b54
lea eax, [ebp - 0x344]
call fcn.004045a4
lea eax, [ebp - 0x340]
call fcn.00410b54
lea eax, [ebp - 0x330]
call fcn.004045a4
lea eax, [ebp - 0x32c]
call fcn.00410b54
lea eax, [ebp - 0x31c]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x314]
call fcn.00410b54
lea eax, [ebp - 0x304]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x2fc]
call fcn.00410b54
lea eax, [ebp - 0x2ec]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x2e4]
call fcn.00410b54
lea eax, [ebp - 0x2d4]
call fcn.004045a4
lea eax, [ebp - 0x2d0]
call fcn.00410b54
lea eax, [ebp - 0x2c0]
call fcn.004045a4
lea eax, [ebp - 0x2bc]
call fcn.00410b54
lea eax, [ebp - 0x2ac]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x2a4]
call fcn.00410b54
lea eax, [ebp - 0x294]
call fcn.004045a4
lea eax, [ebp - 0x290]
call fcn.00410b54
lea eax, [ebp - 0x280]
call fcn.004045a4
lea eax, [ebp - 0x27c]
call fcn.00410b54
lea eax, [ebp - 0x26c]
mov edx, 8
call fcn.004045c8
lea eax, [ebp - 0x24c]
call fcn.00410b54
lea eax, [ebp - 0x23c]
call fcn.004045a4
lea eax, [ebp - 0x238]
call fcn.00410b54
lea eax, [ebp - 0x228]
call fcn.004045a4
lea eax, [ebp - 0x224]
call fcn.00410b54
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x20c]
call fcn.00410b54
lea eax, [ebp - 0x1fc]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x1f4]
call fcn.00410b54
lea eax, [ebp - 0x1e4]
call fcn.004045a4
lea eax, [ebp - 0x1e0]
call fcn.00410b54
lea eax, [ebp - 0x1d0]
call fcn.004045a4
lea eax, [ebp - 0x1cc]
call fcn.00410b54
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x1b4]
call fcn.00410b54
lea eax, [ebp - 0x1a4]
call fcn.004045a4
lea eax, [ebp - 0x1a0]
call fcn.00410b54
lea eax, [ebp - 0x190]
call fcn.004045a4
lea eax, [ebp - 0x18c]
call fcn.00410b54
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x174]
call fcn.00410b54
lea eax, [ebp - 0x164]
mov edx, 2
call fcn.004045c8
lea eax, [ebp - 0x15c]
call fcn.00410b54
lea eax, [ebp - 0x14c]
mov edx, 0xd
call fcn.004045c8
lea eax, [ebp - 0x118]
call fcn.00410b54
lea eax, [ebp - 0x108]
call fcn.004045a4
lea eax, [ebp - 0x104]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.004050a4
lea eax, [ebp - 0xe4]
call fcn.004061f0
lea eax, [ebp - 0xe0]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.004050a4
lea eax, [ebp - 0xc0]
call fcn.004061f0
lea eax, [ebp - 0xa0]
mov edx, dword [0x4010c0]
mov ecx, 4
call fcn.004050a4
lea eax, [ebp - 0x60]
mov edx, 6
call fcn.004045c8
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.004045c8
lea eax, [ebp - 8]
call fcn.004061f0
ret