Function at 0x49d13c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff00
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x48]
mov edx, dword [0x41bf84]
call fcn.0040b244
xor eax, eax
push ebp
push 0x49e3c1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, dword [0x4125a4]
call fcn.0040bfc8
lea eax, [ebp - 0x60]
push eax
call sub.kernel32.dll_QueryPerformanceCounter_1
test eax, eax
je 0x49d1d1
lea eax, [ebp - 0x68]
push eax
call sub.kernel32.dll_QueryPerformanceFrequency
test eax, eax
je 0x49d1d1
push 0
push 0x3e8
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
call fcn.0040b898
push edx
push eax
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
call fcn.0040b898
mov dword [0x7635d8], eax
mov dword [0x7635dc], edx
push 0x49e3d0
mov eax, dword [0x7635d4]
push eax
call fcn.00411010
test eax, eax
setne byte [0x7635e0]
cmp byte [0x7635e0], 0
je 0x49d1f8
call fcn.0049ced8
call sub.kernel32.dll_GetVersion_1
cmp al, 6
jb 0x49d21b
push 0x49e410
push 0x49e428
call sub.kernel32.dll_LoadLibraryA_1
push eax
call fcn.00411010
mov dword [0x7635e4], eax
mov eax, dword [0x768868]
mov dword [eax], fcn.0049c5c0
mov eax, dword [0x7689f8]
mov dword [eax], 0x46f818
mov eax, dword [0x768f88]
mov dword [eax], 0x46fe28
mov eax, 0x49c72c
mov edx, dword [0x768ca8]
mov dword [edx], eax
push 0x49e438
push 0x49e450
call sub.kernel32.dll_GetModuleHandleW_2
push eax
call fcn.00411010
mov dword [0x7635f0], eax
push 0x49e46c
push 0x49e488
call sub.kernel32.dll_GetModuleHandleW_2
push eax
call fcn.00411010
mov dword [0x7635f4], eax
lea edx, [ebp - 0xd4]
mov eax, dword [0x7635d4]
call fcn.00474468
mov edx, dword [ebp - 0xd4]
mov eax, 0x763e14
call fcn.0040d52c
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x368]
test al, al
je 0x49d2fb
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x36c]
test al, al
je 0x49d2fb
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x378]
test al, al
je 0x49d2fb
mov eax, dword [0x7635d4]
call fcn.0049c83c
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp eax, dword [0x7635d4]
je 0x49d2fb
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0xc]
call fcn.0049c83c
call fcn.0049cde8
push 0x76f1f8
call sub.kernel32.dll_InitializeCriticalSection_1
push 0x76f1e0
call sub.kernel32.dll_InitializeCriticalSection_1
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x368]
test al, al
je 0x49e344
lea edx, [ebp - 0xd0]
lea eax, [ebp - 0xbc]
call fcn.0045fb48
lea eax, [ebp - 0xdc]
push eax
call sub.kernel32.dll_GetCurrentProcessId
mov cl, 0x30
mov edx, 1
call fcn.00414ca8
mov ecx, dword [ebp - 0xdc]
lea eax, [ebp - 0xd8]
mov edx, 0x49e4a8
call fcn.0040a1dc
mov eax, dword [ebp - 0xd8]
call fcn.0040a3a8
push eax
push 0x14
push 0
push 4
lea eax, [ebp - 0xbc]
push eax
push 0xffffffffffffffff
call sub.kernel32.dll_CreateFileMappingA
mov ebx, eax
call sub.kernel32.dll_GetLastError_2
test eax, eax
jne 0x49d431
push 0
push 0
push 0
push 0xf001f
push ebx
call sub.kernel32.dll_MapViewOfFile
mov dword [0x7635ec], eax
mov eax, dword [0x7635ec]
mov dword [eax + 0xc], 1
push 0
push 0
push 0
call fcn.00410d2c
mov edx, dword [0x7635ec]
mov dword [edx], eax
push 0
push 0
push 0
call fcn.00410d2c
mov edx, dword [0x7635ec]
mov dword [edx + 4], eax
mov eax, dword [0x7635ec]
xor edx, edx
mov dword [eax + 8], edx
mov eax, dword [0x7635ec]
mov dword [eax + 0x10], ebx
lea eax, [ebp - 4]
call fcn.0045e8b8
cmp dword [ebp - 4], 0
je 0x49d423
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov dword [0x7634d8], eax
push 0
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov ecx, 0x49e4cc
xor edx, edx
call fcn.004604c0
jmp 0x49d47b
mov eax, dword [0x768fe0]
mov eax, dword [eax]
mov dword [0x7634d8], eax
jmp 0x49d47b
test ebx, ebx
je 0x49d461
push 0
push 0
push 0
push 0xf001f
push ebx
call sub.kernel32.dll_MapViewOfFile
mov dword [0x7635ec], eax
push ebx
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [0x7635ec]
add eax, 0xc
push eax
call sub.kernel32.dll_InterlockedIncrement
jmp 0x49d47b
push 0
push 0x49e4e4
push 0x49e4f0
push 0
call sub.user32.dll_MessageBoxA_1
push 0
call sub.kernel32.dll_ExitProcess_1
cmp dword [0x7635ec], 0
jne 0x49d49e
push 0
push 0x49e4e4
push 0x49e518
push 0
call sub.user32.dll_MessageBoxA_1
push 0
call sub.kernel32.dll_ExitProcess_1
cmp dword [0x7634d8], 0
jne 0x49d518
push 0xffffffffffffffff
mov eax, dword [0x7635ec]
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_WaitForSingleObject
xor edx, edx
push ebp
push 0x49d4fc
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x7635ec]
mov eax, dword [eax + 8]
test eax, eax
je 0x49d4e0
mov edx, dword [eax]
mov dword [0x7634d8], edx
mov eax, dword [eax + 8]
test eax, eax
jne 0x49d4d1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49d503
mov eax, dword [0x7635ec]
mov eax, dword [eax + 4]
push eax
call sub.kernel32.dll_ReleaseMutex
ret
push 0
call sub.kernel32.dll_GetModuleHandleW_2
cmp eax, dword [0x7635d4]
je 0x49d534
cmp byte [0x7635e0], 0
jne 0x49d534
xor ebx, ebx
jmp 0x49d536
mov bl, 1
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x36c]
test al, al
je 0x49e33b
mov eax, 0x763560
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763564
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763568
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x76356c
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763570
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763574
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763578
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x76357c
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763580
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763584
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763588
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x76358c
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x763598
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x76359c
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635a0
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635a4
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635a8
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635ac
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635b0
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635b4
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635b8
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635bc
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635c0
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635c4
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635c8
mov edx, dword [0x7635d4]
call fcn.0049c748
mov eax, 0x7635d0
mov edx, dword [0x7635d4]
call fcn.0049c748
cmp dword [0x7635a8], 0
je 0x49d713
cmp dword [0x763560], 0
je 0x49d713
cmp dword [0x763568], 0
je 0x49d713
cmp dword [0x763570], 0
jne 0x49db02
test bl, bl
je 0x49db02
mov esi, 0x40d628
movzx eax, word [esi]
cmp ax, 0x25ff
jne 0x49d754
add esi, 2
mov eax, dword [esi]
mov esi, dword [eax]
mov edi, dword [0x768a24]
mov edi, dword [edi]
lea ecx, [ebp - 8]
lea edx, [ebp - 0x50]
mov eax, esi
call edi
mov eax, dword [ebp - 0x50]
cmp eax, dword [0x7635d4]
jne 0x49d776
xor eax, eax
mov dword [ebp - 0x50], eax
jmp 0x49d776
cmp ax, 0x8b55
jne 0x49d776
push 0x49e554
mov ecx, 0x28
mov edx, 0x49e574
mov eax, dword [0x7635d4]
call fcn.0049caac
mov dword [ebp - 0x50], eax
mov esi, 0x104
push 0x49e584
mov ecx, esi
mov edx, 0x49e5d0
mov eax, dword [ebp - 0x50]
call fcn.0049caac
mov edi, eax
cmp dword [ebp - 0x50], 0
jne 0x49d7ad
push 0x49e5e0
mov ecx, esi
mov edx, 0x49e574
mov eax, edi
call fcn.0049caac
mov dword [ebp - 0x50], eax
push 0x49e604
mov ecx, esi
mov edx, 0x49e64c
xor eax, eax
call fcn.0049caac
mov dword [ebp - 0x54], eax
push 0x49e660
mov ecx, esi
mov edx, 0x49e6ac
xor eax, eax
call fcn.0049caac
mov esi, eax
cmp dword [0x7635a8], 0
jne 0x49da6b
cmp dword [ebp - 0x50], 0
je 0x49da6b
push 0x49e6b0
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763578], eax
cmp dword [0x763578], 0
je 0x49da62
mov eax, dword [0x763578]
cmp byte [eax], 0xe9
je 0x49da62
push 0x49e71c
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x76357c], eax
push 0x49e78c
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763580], eax
push 0x49e7e0
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763584], eax
push 0x49e874
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763588], eax
push 0x49e8d0
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x76358c], eax
push 0x49e91c
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763590], eax
push 0x49e964
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763594], eax
push 0x49e9ac
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
mov dword [0x763598], eax
push 0x49e9f8
mov eax, dword [ebp - 0x50]
push eax
call fcn.00411010
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
mov byte [ebp - 0x49], 1
jmp 0x49da48
cmp dword [ebp - 0x84], 0
je 0x49da23
cmp byte [ebp - 0x85], 0
je 0x49da23
cmp dword [ebp - 0x78], 4
jne 0x49da23
cmp byte [ebp - 0x49], 0
je 0x49d998
mov byte [ebp - 0x49], 0
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0x84]
call fcn.0041d5d4
jmp 0x49d97b
cmp word [ebp - 0xae], 0xc7
jne 0x49d953
cmp byte [ebp - 0xac], 0x40
jne 0x49d953
mov eax, dword [ebp - 0x90]
sub eax, 5
cmp byte [eax], 4
jne 0x49d953
mov eax, dword [ebp - 0x90]
sub eax, 4
mov eax, dword [eax]
mov dword [0x7635b0], eax
jmp 0x49da23
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x90]
call fcn.0041d5d4
push esi
push edi
lea esi, [ebp - 0x100]
lea edi, [ebp - 0xb0]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
cmp byte [ebp - 0xb0], 0
je 0x49da23
cmp word [ebp - 0xae], 0xc3
jne 0x49d91c
jmp 0x49da23
mov eax, dword [ebp - 0x84]
mov dword [0x7635a8], eax
lea edx, [ebp - 0x8c]
mov eax, dword [0x7635a8]
call fcn.0041d5d4
jmp 0x49da0d
cmp dword [ebp - 0x84], 0
je 0x49d9e8
cmp word [ebp - 0x8a], 0xe8
jne 0x49d9e8
cmp byte [ebp - 0x85], 0
je 0x49d9e8
cmp dword [ebp - 0x78], 4
jne 0x49d9e8
mov eax, dword [ebp - 0x84]
mov dword [0x7635ac], eax
jmp 0x49da6b
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
push esi
push edi
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
cmp byte [ebp - 0x8c], 0
je 0x49da6b
cmp word [ebp - 0x8a], 0xc3
jne 0x49d9b5
jmp 0x49da6b
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
push esi
push edi
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
cmp byte [ebp - 0x8c], 0
je 0x49da6b
cmp word [ebp - 0x8a], 0xc3
jne 0x49d8d7
jmp 0x49da6b
xor ebx, ebx
xor eax, eax
mov dword [0x763578], eax
test bl, bl
je 0x49db02
cmp dword [0x763560], 0
jne 0x49daa0
test edi, edi
je 0x49daa0
push 0x49ea80
push edi
call fcn.00411010
mov dword [0x763560], eax
push 0x49eafc
push edi
call fcn.00411010
mov dword [0x763564], eax
cmp dword [0x763568], 0
jne 0x49dad5
cmp dword [ebp - 0x54], 0
je 0x49dad5
push 0x49eb88
mov eax, dword [ebp - 0x54]
push eax
call fcn.00411010
mov dword [0x763568], eax
push 0x49ebfc
mov eax, dword [ebp - 0x54]
push eax
call fcn.00411010
mov dword [0x76356c], eax
cmp dword [0x763570], 0
jne 0x49db02
test esi, esi
je 0x49db02
push 0x49ec74
push esi
call fcn.00411010
mov dword [0x763570], eax
push 0x49ecf0
push esi
call fcn.00411010
mov dword [0x763574], eax
mov eax, dword [0x768a60]
mov dword [0x763f50], eax
cmp dword [0x7635b0], 0
je 0x49db24
mov edx, 0x49a3f4
mov eax, dword [0x7635b0]
call fcn.00492710
cmp dword [0x763560], 0
je 0x49db3c
mov edx, 0x499a18
mov eax, dword [0x763560]
call fcn.00492710
cmp dword [0x763564], 0
je 0x49db54
mov edx, 0x4999f0
mov eax, dword [0x763564]
call fcn.00492710
cmp dword [0x763568], 0
je 0x49db6c
mov edx, 0x499a18
mov eax, dword [0x763568]
call fcn.00492710
cmp dword [0x76356c], 0
je 0x49db84
mov edx, 0x4999f0
mov eax, dword [0x76356c]
call fcn.00492710
cmp dword [0x763570], 0
je 0x49db9c
mov edx, 0x499a18
mov eax, dword [0x763570]
call fcn.00492710
cmp dword [0x763574], 0
je 0x49dbb4
mov edx, 0x4999f0
mov eax, dword [0x763574]
call fcn.00492710
cmp dword [0x763578], 0
je 0x49dbcc
mov edx, 0x4999c4
mov eax, dword [0x763578]
call fcn.00492710
cmp dword [0x76359c], 0
je 0x49dbe4
mov edx, 0x499a5c
mov eax, dword [0x76359c]
call fcn.00492710
cmp dword [0x7635a0], 0
je 0x49dbfc
mov edx, 0x499a84
mov eax, dword [0x7635a0]
call fcn.00492710
cmp dword [0x7635a4], 0
je 0x49dc26
mov byte [0x763550], 1
mov eax, 0x18
call fcn.00406718
mov dword [0x763f64], eax
mov eax, dword [0x763f64]
push eax
call sub.kernel32.dll_InitializeCriticalSection_1
cmp dword [0x76357c], 0
je 0x49dcfe
cmp dword [0x763580], 0
je 0x49dcfe
lea edx, [ebp - 0x48]
mov eax, dword [0x76357c]
call fcn.0041e91c
mov eax, dword [ebp - 0x28]
call fcn.0040bc88
dec eax
jne 0x49dc63
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov dword [0x76357c], eax
lea edx, [ebp - 0x48]
mov eax, dword [0x763580]
call fcn.0041e91c
mov eax, dword [ebp - 0x28]
call fcn.0040bc88
dec eax
jne 0x49dc86
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov dword [0x763580], eax
lea edx, [ebp - 0x8c]
mov eax, dword [0x76357c]
call fcn.0041d5d4
jmp 0x49dcec
mov esi, dword [ebp - 0x84]
test esi, esi
je 0x49dccb
cmp esi, dword [0x763580]
jne 0x49dccb
cmp dword [ebp - 0x78], 4
jne 0x49dcfe
cmp byte [ebp - 0x85], 0
je 0x49dcfe
mov edx, 0x499c74
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49dcfe
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49dc98
cmp dword [0x763598], 0
je 0x49dd94
mov esi, fcn.0040680c
cmp word [esi], 0x25ff
jne 0x49dd1e
add esi, 2
mov eax, dword [esi]
mov esi, dword [eax]
lea edx, [ebp - 0x8c]
mov eax, dword [0x763598]
call fcn.0041d5d4
jmp 0x49dd82
mov edi, dword [ebp - 0x84]
test edi, edi
je 0x49dd5f
cmp esi, edi
jne 0x49dd5f
cmp dword [ebp - 0x78], 4
jne 0x49dd94
cmp byte [ebp - 0x85], 0
je 0x49dd94
mov edx, 0x499b34
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49dd94
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
push esi
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop esi
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49dd30
call fcn.0049c768
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
mov byte [ebp - 0x49], 0
jmp 0x49ddff
cmp byte [ebp - 0x85], 0
je 0x49ddde
cmp dword [ebp - 0x78], 4
jne 0x49ddde
cmp dword [ebp - 0x84], 0
je 0x49ddde
cmp byte [ebp - 0x49], 0
je 0x49ddda
mov edx, 0x499b90
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49de11
mov byte [ebp - 0x49], 1
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49ddaa
call fcn.0049c768
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
jmp 0x49de77
mov esi, dword [ebp - 0x84]
test esi, esi
je 0x49de56
cmp esi, dword [0x7635ac]
jne 0x49de56
cmp dword [ebp - 0x78], 4
jne 0x49de89
cmp byte [ebp - 0x85], 0
je 0x49de89
mov edx, 0x499d58
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49de89
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49de23
mov esi, dword [0x7635a8]
test esi, esi
je 0x49df0d
cmp dword [0x7635ac], 0
je 0x49df0d
lea edx, [ebp - 0x8c]
mov eax, esi
call fcn.0041d5d4
jmp 0x49defb
mov eax, dword [ebp - 0x84]
cmp eax, dword [0x7635ac]
jne 0x49deda
cmp dword [ebp - 0x78], 4
jne 0x49df0d
cmp byte [ebp - 0x85], 0
je 0x49df0d
mov edx, 0x499d60
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49df0d
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49deab
mov esi, dword [0x7635ac]
test esi, esi
je 0x49df88
lea edx, [ebp - 0x8c]
mov eax, esi
call fcn.0041d5d4
jmp 0x49df76
mov eax, dword [ebp - 0x84]
cmp eax, dword [0x7635ac]
jne 0x49df55
cmp dword [ebp - 0x78], 4
jne 0x49df88
cmp byte [ebp - 0x85], 0
je 0x49df88
mov edx, 0x499d70
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49df88
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49df26
call fcn.0049c7a4
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
jmp 0x49dfbb
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x8c], 0
je 0x49dffc
cmp word [ebp - 0x8a], 0x8b
jne 0x49dfea
cmp byte [ebp - 0x88], 0x15
jne 0x49dfea
mov eax, dword [ebp - 0x70]
add eax, 2
mov eax, dword [eax]
mov edx, dword [0x768a60]
cmp eax, edx
je 0x49dffc
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49df9a
cmp word [ebp - 0x8a], 0x8b
jne 0x49e017
mov edx, 0x763f54
mov eax, dword [ebp - 0x70]
add eax, 2
call fcn.00492768
call fcn.0049c7b8
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
jmp 0x49e04a
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x8c], 0
je 0x49e08b
cmp word [ebp - 0x8a], 0xff
jne 0x49e079
cmp byte [ebp - 0x88], 0x15
jne 0x49e079
mov eax, dword [ebp - 0x70]
add eax, 2
mov eax, dword [eax]
mov edx, dword [0x768a60]
cmp eax, edx
je 0x49e08b
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49e029
cmp word [ebp - 0x8a], 0xff
jne 0x49e0a6
mov edx, 0x763f58
mov eax, dword [ebp - 0x70]
add eax, 2
call fcn.00492768
mov eax, dword [0x768e0c]
mov eax, dword [eax]
mov dword [0x763f5c], eax
call fcn.0049c7cc
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
jmp 0x49e0e5
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x8c], 0
je 0x49e114
cmp word [ebp - 0x8a], 0xff
jne 0x49e102
cmp byte [ebp - 0x88], 0x25
je 0x49e114
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49e0c4
cmp word [ebp - 0x8a], 0xff
jne 0x49e12f
mov edx, 0x763f60
mov eax, dword [ebp - 0x70]
add eax, 2
call fcn.00492768
call fcn.0049c790
mov esi, eax
lea edx, [ebp - 0x8c]
mov eax, esi
call fcn.0041d5d4
jmp 0x49e168
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
push esi
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop esi
cmp byte [ebp - 0x8c], 0
je 0x49e17a
cmp byte [ebp - 0x87], 0
je 0x49e145
mov eax, dword [ebp - 0x84]
mov dword [0x763628], eax
mov edx, 0x49a458
mov eax, esi
call fcn.00492710
lea edx, [ebp - 0x8c]
mov eax, fcn.00407bf8
call fcn.0041d5d4
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x49e1af
mov esi, eax
jmp 0x49e1b4
mov esi, fcn.00407bf8
call fcn.0049c754
lea edx, [ebp - 0x8c]
call fcn.0041d5d4
jmp 0x49e212
cmp esi, dword [ebp - 0x84]
jne 0x49e1ef
cmp dword [ebp - 0x78], 4
jne 0x49e224
cmp byte [ebp - 0x85], 0
je 0x49e224
mov edx, 0x49a734
sub edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x80]
call fcn.00492768
jmp 0x49e224
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x6c]
call fcn.0041d5d4
push esi
lea esi, [ebp - 0x100]
lea edi, [ebp - 0x8c]
mov ecx, 9
rep movsd dword es:[edi], dword [esi]
pop esi
movzx eax, word [ebp - 0x8a]
add eax, 0xffffff3e
sub ax, 2
jae 0x49e1c6
call fcn.0049c77c
mov edx, 0x49a744
call fcn.00492710
cmp dword [0x763584], 0
je 0x49e286
cmp dword [0x76358c], 0
je 0x49e286
mov edx, 0x498c6c
mov eax, dword [0x763584]
call fcn.00492710
mov edx, 0x4129b8
mov eax, dword [0x76358c]
call fcn.00492710
cmp dword [0x763588], 0
je 0x49e27b
mov edx, 0x498cc8
mov eax, dword [0x763588]
call fcn.00492710
mov eax, dword [0x768d30]
mov dword [eax], 0x498bf4
push 0
push 0
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_FlushInstructionCache
call fcn.00490684
call fcn.0046ee08
mov esi, fcn.004097d4
cmp word [esi], 0x25ff
jne 0x49e2b2
add esi, 2
mov eax, dword [esi]
mov esi, dword [eax]
mov dword [0x763f70], esi
lea edx, [ebp - 0x48]
mov eax, esi
call fcn.0041e91c
cmp byte [ebp - 0x48], 0
je 0x49e2d3
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x3c]
mov dword [0x763f74], eax
push 0
call sub.kernel32.dll_GetModuleHandleW_2
cmp eax, dword [0x7635d4]
je 0x49e2eb
cmp byte [0x7635e0], 0
je 0x49e2f5
mov eax, dword [0x763e14]
call fcn.0049b314
mov eax, ebx
call fcn.004623e8
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x37c]
test al, al
je 0x49e336
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp eax, dword [0x7635d4]
jne 0x49e336
mov eax, dword [0x763e14]
mov edx, dword [eax]
call dword [edx + 0x380]
mov dword [0x763e58], eax
call fcn.0046f49c
call fcn.004908a4
mov eax, 0x499680
test eax, eax
jmp 0x49e374
lea eax, [ebp - 4]
call fcn.0045e8b8
cmp dword [ebp - 4], 0
je 0x49e35e
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov dword [0x7634d8], eax
jmp 0x49e36a
mov eax, dword [0x768fe0]
mov eax, dword [eax]
mov dword [0x7634d8], eax
mov eax, 0x763e14
call fcn.0040d514
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49e3c8
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.004099a4
lea eax, [ebp - 0xd4]
call fcn.0040d514
lea eax, [ebp - 0x48]
mov edx, dword [0x41bf84]
call fcn.0040b31c
lea eax, [ebp - 8]
call fcn.00409938
lea eax, [ebp - 4]
mov edx, dword [0x4125a4]
call fcn.0040bfc8
ret