Function at 0x48f580
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x16
push 0
push 0
dec ecx
jne 0x48f589
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x490edc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x49bee0]
call fcn.00410a5c
cmp eax, 8
jge 0x48f5c3
mov eax, 0x20
jmp 0x48f5e8
mov eax, dword [0x49bee0]
mov ebx, dword [eax + 4]
mov eax, dword [0x49bee0]
call fcn.00410a5c
push eax
mov eax, dword [ebx + 4]
pop edx
sub eax, edx
cmp eax, 0x1000
jle 0x48f5e8
mov eax, 0x1000
mov edx, 0x49beec
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x2f8]
mov ecx, dword [ecx + 0x80]
xchg ecx, eax
call fcn.0046e160
mov esi, eax
test esi, esi
jle 0x490e9e
mov eax, esi
cdq
add dword [0x498b64], eax
adc dword [0x498b68], edx
mov ebx, 0x49beec
mov eax, dword [0x49bee0]
call fcn.00410a5c
test eax, eax
jg 0x48f636
cmp dword [ebx], 0x13572469
jne 0x48f647
mov edx, 0x49beec
mov ecx, esi
mov eax, dword [0x49bee0]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [0x49bee0]
mov ebx, dword [eax + 4]
mov eax, dword [0x49bee0]
call fcn.00410a5c
test eax, eax
jle 0x490e9e
mov eax, dword [0x49bee0]
call fcn.00410a5c
cmp eax, dword [ebx + 4]
jl 0x490e8b
xor edx, edx
push ebp
push 0x490e84
push dword fs:[edx]
mov dword fs:[edx], esp
mov edx, dword [ebx + 4]
mov eax, ebx
call fcn.00470f58
test al, al
jne 0x490e6c
cmp byte [ebx + 0xd], 0xd
jne 0x48f6b6
mov ecx, dword [ebx + 0x10]
mov eax, 0x49d0dc
mov edx, 0xa
call fcn.00472320
call fcn.0040367c
jmp 0x490e9e
mov dl, 1
mov eax, dword [0x470728]
call fcn.00402e54
mov dword [ebp - 0x10], eax
xor edx, edx
push ebp
push 0x490e65
push dword fs:[edx]
mov dword fs:[edx], esp
xor ecx, ecx
mov edx, dword [0x49bee0]
mov eax, dword [ebp - 0x10]
call fcn.00410b04
mov eax, dword [0x49bee0]
call fcn.00410e44
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 4]
cmp byte [ebx + 0xe], 0
je 0x48f704
mov edx, dword [ebx + 8]
mov eax, dword [ebp - 4]
call fcn.0048a2fc
mov edx, dword [ebx + 8]
mov eax, dword [0x49d108]
call fcn.0040f154
test eax, eax
jge case.0x48fad0.204
mov edx, dword [ebx + 8]
mov eax, dword [0x49d108]
call fcn.0040ef9c
mov eax, dword [0x49d108]
cmp dword [eax + 8], 0x64
jle 0x48f73d
xor edx, edx
mov eax, dword [0x49d108]
call fcn.0040efe8
mov al, byte [ebx + 0xd]
cmp al, 0xa
jne 0x48f753
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.0048aca4
jmp case.0x48fad0.204
cmp al, 0xb
jne 0x48fab5
mov al, byte [ebx + 0xc]
sub al, 0x97
je 0x48f76f
sub al, 0x11
je 0x48faa4
jmp case.0x48fad0.204
mov eax, dword [0x49923c]
mov dword [eax], 0
mov dword [eax + 4], 0
mov byte [0x49bee4], 3
mov byte [ebp - 0x26], 0
cmp byte [0x498b3c], 0
je 0x48f7a0
mov byte [0x498b3c], 0
mov byte [ebp - 0x26], 1
mov edx, dword [0x49d19c]
and edx, 1
xor dl, 1
mov eax, dword [0x4990fc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2e8]
call fcn.00435580
cmp dword [0x498ba8], 0
jne 0x48f7da
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4885ec]
call fcn.00413cc0
mov dword [0x498ba8], eax
xor eax, eax
mov al, byte [0x498b24]
mov edx, dword [ebx + 0x10]
and edx, 0xff
cmp eax, edx
je 0x48f818
mov al, byte [ebx + 0x10]
and al, 0xff
mov byte [0x498b24], al
xor ecx, ecx
mov cl, byte [0x498b24]
mov edx, 0x490ef4
mov eax, 0x490f08
call fcn.004714dc
call fcn.0048f0c0
mov byte [ebp - 0x26], 1
mov eax, dword [ebx + 0x10]
shr eax, 8
and eax, 0xff
xor edx, edx
mov dl, byte [0x498ab4]
cmp eax, edx
je 0x48f850
mov byte [0x498ab4], al
xor eax, eax
mov al, byte [0x498ab4]
push eax
mov eax, 0x490f08
mov edx, 0x490f40
pop ecx
call fcn.004714dc
mov byte [ebp - 0x26], 1
mov eax, dword [ebx + 0x10]
shr eax, 0x10
and eax, 0xff
xor edx, edx
mov dl, byte [0x498ab8]
cmp eax, edx
je 0x48f888
mov byte [0x498ab8], al
xor eax, eax
mov al, byte [0x498ab8]
push eax
mov eax, 0x490f08
mov edx, 0x490f54
pop ecx
call fcn.004714dc
mov byte [ebp - 0x26], 1
cmp byte [0x498ab4], 0
je 0x48f8ac
cmp byte [0x498ab8], 0
je 0x48f8ac
mov al, byte [0x490f60]
not eax
and al, byte [0x498c54]
mov byte [0x498c54], al
mov ecx, dword [ebx + 0x10]
shr ecx, 0x18
cmp dword [0x498ad4], 0
jne 0x48f8c9
cmp dword [0x498ad0], 0xea60
jae 0x48f8ec
jmp 0x48f8cb
jge 0x48f8ec
cmp byte [0x498b2c], 1
jne 0x48f8ec
test cl, 1
je 0x48f8ec
mov ecx, dword [0x49d198]
mov dl, byte [0x490f60]
mov al, 1
call fcn.00486a88
mov eax, dword [ebx + 0x14]
mov dword [0x498b10], eax
mov al, byte [0x490f64]
cmp al, byte [0x498c54]
jne 0x48f917
cmp dword [0x498b20], 0x3e8
jle 0x48f917
mov dword [0x498b20], 0x3e8
mov eax, dword [ebx + 0x18]
mov edx, eax
and edx, 0x53530000
cmp edx, 0x53530000
jne 0x48fa57
test al, 1
sete byte [0x498bbc]
test byte [ebx + 0x18], 2
setne byte [0x498bd0]
mov eax, dword [ebx + 0x18]
and eax, 0x20
test eax, eax
setne dl
cmp dl, byte [0x498bc0]
je 0x48f962
test eax, eax
setne byte [0x498bc0]
mov byte [ebp - 0x26], 1
mov eax, dword [ebx + 0x18]
and eax, 0x40
test eax, eax
setne dl
cmp dl, byte [0x498bc4]
je 0x48f982
test eax, eax
setne byte [0x498bc4]
mov byte [ebp - 0x26], 1
mov eax, dword [ebx + 0x18]
and eax, 0x10
test eax, eax
setne dl
cmp dl, byte [0x498bd4]
je 0x48f9a2
test eax, eax
setne byte [0x498bd4]
mov byte [ebp - 0x26], 1
mov eax, dword [ebx + 0x18]
and eax, 0x100
test eax, eax
setne dl
cmp dl, byte [0x498bd8]
je 0x48f9c4
test eax, eax
setne byte [0x498bd8]
mov byte [ebp - 0x26], 1
mov eax, dword [ebx + 0x18]
and eax, 4
test eax, eax
setne dl
cmp dl, byte [0x498be4]
je 0x48f9e4
test eax, eax
setne byte [0x498be4]
mov byte [ebp - 0x26], 1
test byte [ebx + 0x18], 8
je 0x48f9f9
xor ecx, ecx
mov dl, byte [0x490f68]
mov al, 1
call fcn.00486a88
cmp byte [0x498bd0], 0
jne 0x48fa09
xor eax, eax
mov dword [0x498c2c], eax
mov ax, word [ebx + 0x1c]
mov word [0x498c04], ax
mov eax, dword [ebx + 0x1c]
shr eax, 0x10
mov word [0x498c08], ax
test byte [ebx + 0x18], 0x80
setne byte [0x498bc8]
cmp byte [0x498bc8], 0
je 0x48fa4d
lea edx, [ebp - 0x38]
lea eax, [ebx + 0x20]
call fcn.00409384
mov edx, dword [ebp - 0x38]
mov eax, dword [0x499124]
call fcn.00403be4
jmp 0x48fa57
mov eax, dword [0x499124]
call fcn.00403b90
cmp dword [0x498b08], 0x2480000
jb 0x48fa8f
cmp byte [0x498ab4], 0
jne 0x48fa8f
call fcn.00409e08
call fcn.00402a04
xor eax, 0x2a
mov ecx, eax
shl ecx, 4
add ecx, eax
mov eax, 0x490f08
mov edx, 0x490f74
call fcn.004714dc
cmp byte [ebp - 0x26], 0
je 0x48fa9a
call fcn.00488ca8
call fcn.00488bd8
jmp case.0x48fad0.204
mov eax, dword [0x4990fc]
mov eax, dword [eax]
call fcn.0042b818
jmp case.0x48fad0.204
cmp al, 0xc
jne case.0x48fad0.204
xor eax, eax
mov al, byte [ebx + 0xc]
add eax, 0xffffff35
cmp eax, 0x15
ja case.0x48fad0.204
jmp dword [eax*4 + 0x48fad7]
cmp byte [0x49d0b0], 0
jne case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov byte [0x49d05c], 0
call fcn.0048ab30
mov eax, 0x49d148
call fcn.00403b90
mov edx, 0x20
mov eax, dword [ebp - 0x10]
call fcn.00410a50
mov edx, 0x49d10c
mov ecx, 8
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
call dword [esi + 4]
cmp byte [0x49d113], 0
je 0x48fbbc
mov byte [0x49d10c], 2
mov byte [0x49d10d], 1
mov byte [0x49d10e], 2
mov byte [0x49d10f], 2
mov byte [0x49d110], 2
mov byte [0x49d111], 2
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x3c]
mov eax, 0x49cef8
call fcn.00403be4
mov eax, 0x49cef8
call fcn.00472660
mov eax, dword [0x49cef8]
cmp byte [eax + 1], 0x3a
jne 0x48fbfc
mov eax, dword [0x49cef8]
mov al, byte [eax]
call fcn.004029f4
mov byte [0x49d0a4], al
jmp 0x48fc03
mov byte [0x49d0a4], 0
cmp byte [0x49d0a4], 0
je 0x48fc6a
mov al, byte [0x49d0a4]
call fcn.00484264
test eax, eax
jne 0x48fc6a
lea edx, [ebp - 0x40]
mov al, byte [0x49d0a4]
call fcn.00484450
mov edx, dword [ebp - 0x40]
mov eax, 0x49d0a8
call fcn.00403be4
cmp dword [0x49d0a8], 0
je 0x48fc74
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x400
mov edx, 3
mov eax, dword [0x49cef8]
call fcn.00404018
mov ecx, dword [ebp - 0x44]
mov eax, 0x49cef8
mov edx, dword [0x49d0a8]
call fcn.00403e5c
jmp 0x48fc74
mov eax, 0x49d0a8
call fcn.00403b90
mov byte [0x49d1b0], 0
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x48]
mov eax, dword [0x49cefc]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x49cf00]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x49cf00]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48fce5
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
lea edx, [ebp - 0x24]
mov ecx, 4
mov eax, dword [ebp - 0x10]
mov edi, dword [eax]
call dword [edi + 4]
mov ecx, dword [ebp - 0x24]
mov edx, esi
mov eax, dword [0x49cf00]
mov edi, dword [eax]
call dword [edi + 0x24]
inc esi
dec dword [ebp - 0x34]
jne 0x48fcc0
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x50]
mov eax, 0x49cf08
call fcn.00403be4
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x54]
mov eax, 0x49cf0c
call fcn.00403be4
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x58]
mov eax, 0x49cf10
call fcn.00403be4
mov eax, dword [ebx + 0x10]
mov dword [0x49d0bd], eax
mov dl, byte [ebx + 0x18]
mov byte [0x49d114], dl
mov edx, dword [ebx + 0x1c]
and edx, 0xff
mov byte [0x498abc], dl
shl eax, 8
and eax, 0xffff
mov edx, dword [0x498ddc]
mov dword [edx], eax
cmp dword [ebx + 0x14], 0
jle 0x48fe27
mov byte [0x49d0ce], 1
mov dl, 1
mov eax, dword [0x470728]
call fcn.00402e54
mov esi, eax
mov dword [0x49d0b1], esi
mov edx, dword [ebx + 0x14]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [0x49d0b1]
call fcn.00410a5c
mov edx, dword [0x498ddc]
add eax, dword [edx]
dec eax
mov edx, dword [0x498ddc]
mov ecx, dword [edx]
cdq
idiv ecx
mov dword [0x49d0b9], eax
xor eax, eax
mov dword [0x49d0c1], eax
xor eax, eax
mov dword [0x49d0c5], eax
mov byte [0x49d0c9], 1
mov eax, dword [0x49d0b9]
push eax
mov eax, 0x49d0b5
mov ecx, 1
mov edx, dword [0x4886c4]
call fcn.00405544
add esp, 4
mov eax, dword [0x49d0b9]
dec eax
test eax, eax
jl 0x48fe00
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
mov eax, dword [0x49d0b5]
mov byte [eax + esi], 0
inc esi
dec dword [ebp - 0x34]
jne 0x48fdf1
mov eax, dword [0x49d060]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [0x49d1a4], 1
xor eax, eax
mov dword [0x49d0d7], eax
mov byte [0x49d0b0], 1
jmp case.0x48fad0.204
mov byte [0x49d0ce], 0
jmp case.0x48fad0.204
cmp dword [0x498c84], 0
jne case.0x48fad0.204
inc dword [0x498c84]
xor edx, edx
push ebp
push 0x490325
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
cmp byte [0x49d0b0], 0
jne 0x4902fb
mov edx, 0x20
mov eax, dword [ebp - 0x10]
call fcn.00410a50
mov eax, dword [ebx + 0x10]
mov dword [0x49d0bd], eax
mov edx, eax
shl edx, 8
and edx, 0xffff
mov ecx, dword [0x498ddc]
mov dword [ecx], edx
mov esi, eax
shr esi, 8
mov edx, esi
mov eax, dword [0x49cef0]
call fcn.0040f0f8
mov esi, eax
cmp byte [esi + 0x18], 2
jne 0x4902e0
mov byte [esi + 0x18], 0
lea edx, [esi + 8]
mov ecx, 8
mov eax, dword [ebp - 0x10]
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0x5c]
mov eax, esi
call fcn.00403be4
mov eax, dword [ebx + 0x18]
mov dword [esi + 4], eax
mov eax, dword [ebx + 0x1c]
mov dword [esi + 0x10], eax
mov dword [0x49d0ca], esi
mov byte [0x49d0ce], 2
cmp byte [0x49d1b0], 0
jne 0x48ff0e
call fcn.0048f484
cmp dword [0x49cef8], 0
je 0x4902c8
lea edx, [ebp - 0x14]
mov eax, dword [esi]
call fcn.00408ee8
mov eax, dword [ebp - 0x14]
call fcn.0048e264
test al, al
je 0x4902ad
push dword [0x49cef8]
push 0x490f88
push dword [esi]
push 0x490fa0
lea eax, [ebp - 0x2c]
mov edx, 4
call fcn.00403ed0
push dword [0x49cef8]
push dword [esi]
push 0x490fb0
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00403ed0
cmp dword [esi + 0xc], 0
jne 0x48ff7f
cmp dword [esi + 8], 0xa00000
jb 0x48ffbf
jmp 0x48ff81
jl 0x48ffbf
mov eax, dword [ebp - 0x30]
call fcn.00408c98
test al, al
jne 0x48ffbf
lea eax, [ebp - 0x30]
call fcn.00403fe0
push eax
lea eax, [ebp - 0x2c]
call fcn.00403fe0
push eax
call sub.kernel32.dll_MoveFileA
lea eax, [ebp - 0x60]
mov ecx, 0x490f88
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x60]
call fcn.00409124
cmp byte [0x49d113], 0
je 0x48ffce
mov byte [ebp - 0x25], 0
jmp 0x490000
mov eax, dword [0x49d0cf]
mov edx, dword [esi]
call fcn.00403f20
jne 0x48fffc
mov ecx, dword [esi]
lea eax, [ebp - 0x64]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x30]
call fcn.0048f3f4
mov byte [ebp - 0x25], al
jmp 0x490000
mov byte [ebp - 0x25], 0
mov ecx, dword [esi]
lea eax, [ebp - 0x68]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x68]
mov edx, 0x20
call fcn.00408d00
cmp byte [ebp - 0x25], 0
je 0x490046
mov ecx, dword [esi]
lea eax, [ebp - 0x6c]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x6c]
mov dx, 2
call fcn.00470f94
mov dword [0x49d0b1], eax
jmp 0x490067
mov ecx, dword [esi]
lea eax, [ebp - 0x70]
mov edx, dword [0x49cef8]
call fcn.00403e5c
mov eax, dword [ebp - 0x70]
mov dx, 0xffff
call fcn.00470f94
mov dword [0x49d0b1], eax
cmp dword [0x49d0b1], 0
je 0x490292
mov eax, dword [0x49cef8]
cmp byte [eax + 1], 0x3a
jne 0x49009b
mov eax, dword [0x49cef8]
mov al, byte [eax]
call fcn.004029f4
sub al, 0x41
inc eax
call fcn.00409068
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x4900cc
cmp dword [0x49d0a8], 0
je 0x4900be
mov al, byte [0x49d0a4]
call fcn.0048467c
sub eax, 0x2faf0800
sbb edx, 0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x4900cc
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 0x7fff
cmp dword [esi + 0xc], 0
jne 0x4900fd
cmp dword [esi + 8], 0
jne 0x4900fd
push 0
push 1
push 0
mov ecx, dword [0x49d0bd]
mov edx, 0x76
mov eax, dword [ebp - 4]
call fcn.00489fc8
mov al, 1
call fcn.0048c858
jmp 0x490311
mov eax, dword [0x49d0b1]
mov edx, dword [0x46e9bc]
call fcn.00403014
call fcn.0046ea28
add eax, dword [ebp - 0x20]
adc edx, dword [ebp - 0x1c]
sub eax, dword [esi + 8]
sbb edx, dword [esi + 0xc]
cmp edx, 0
jne 0x490130
cmp eax, 0x1312d00
jb 0x490264
jmp 0x490136
jl 0x490264
push dword [esi + 0xc]
push dword [esi + 8]
mov eax, dword [0x49d0b1]
mov edx, dword [0x46e9bc]
call fcn.00403014
call fcn.0046ead8
mov eax, dword [0x498ddc]
mov eax, dword [eax]
cdq
push edx
push eax
mov eax, dword [0x498ddc]
mov eax, dword [eax]
cdq
add eax, dword [esi + 8]
adc edx, dword [esi + 0xc]
sub eax, 1
sbb edx, 0
call fcn.0040659e
mov dword [0x49d0b9], eax
xor eax, eax
mov dword [0x49d0c1], eax
xor eax, eax
mov dword [0x49d0c5], eax
mov byte [0x49d0c9], 1
mov eax, dword [0x49d0b9]
push eax
mov eax, 0x49d0b5
mov ecx, 1
mov edx, dword [0x4886c4]
call fcn.00405544
add esp, 4
mov eax, dword [0x49d060]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [0x49d1a4], 1
xor eax, eax
mov dword [0x49d0d7], eax
mov byte [0x49d0b0], 1
cmp byte [ebp - 0x25], 0
je 0x490227
mov eax, dword [ebp - 0x30]
call fcn.0048dc80
mov eax, dword [0x49d0c1]
cmp eax, dword [0x49d0b9]
jne 0x49020e
push 0
push 1
push 0
mov ecx, dword [0x49d0bd]
mov edx, 0x76
mov eax, dword [ebp - 4]
call fcn.00489fc8
mov al, 1
call fcn.0048c858
jmp 0x490311
mov dword [0x49d1a4], 0x7fffffff
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0048a98c
jmp 0x490311
mov eax, dword [0x49d0b9]
dec eax
test eax, eax
jl 0x490246
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
mov eax, dword [0x49d0b5]
mov byte [eax + esi], 0
inc esi
dec dword [ebp - 0x34]
jne 0x490237
push 0
push 0
push 0
mov ecx, dword [0x49d0bd]
mov edx, 0x9c
mov eax, dword [ebp - 4]
call fcn.00489fc8
jmp 0x490311
mov eax, 0x49d0cf
mov edx, 0x490fc4
call fcn.00403be4
xor eax, eax
call fcn.0048c858
push 0
push 0
push 0
mov ecx, dword [ebx + 0x10]
mov edx, 0xad
mov eax, dword [ebp - 4]
call fcn.0048a07c
jmp 0x490311
push 0
push 1
push 0
mov ecx, dword [0x49d0bd]
mov edx, 0x79
mov eax, dword [ebp - 4]
call fcn.00489fc8
jmp 0x490311
push 0
push 1
push 0
mov ecx, dword [0x49d0bd]
mov edx, 0x79
mov eax, dword [ebp - 4]
call fcn.00489fc8
jmp 0x490311
push 0
push 0
push 0
mov ecx, dword [ebx + 0x10]
mov edx, 0xad
mov eax, dword [ebp - 4]
call fcn.0048a07c
jmp 0x490311
push 0
push 1
push 0
mov ecx, dword [0x49d0bd]
mov edx, 0x76
mov eax, dword [ebp - 4]
call fcn.00489fc8
jmp 0x490311
push 0
push 0
push 0
mov ecx, dword [ebx + 0x10]
mov edx, 0xab
mov eax, dword [ebp - 4]
call fcn.0048a07c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push case.0x48fad0.204
dec dword [0x498c84]
ret
cmp byte [0x49d0b0], 0
jne case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x49d0bd], eax
shl eax, 8
and eax, 0xffff
mov edx, dword [0x498ddc]
mov dword [edx], eax
mov byte [0x49d0ce], 3
mov dl, 1
mov eax, dword [0x470728]
call fcn.00402e54
mov esi, eax
mov dword [0x49d0b1], esi
mov edx, dword [ebx + 0x14]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebx + 0x18]
shr eax, 0x10
mov dword [0x49d038], eax
mov eax, dword [ebx + 0x18]
and eax, 0xffff
mov dword [0x49d03c], eax
mov eax, dword [0x49d0b1]
call fcn.00410a5c
mov edx, dword [0x498ddc]
add eax, dword [edx]
dec eax
mov edx, dword [0x498ddc]
mov ecx, dword [edx]
cdq
idiv ecx
mov dword [0x49d0b9], eax
xor eax, eax
mov dword [0x49d0c1], eax
xor eax, eax
mov dword [0x49d0c5], eax
mov byte [0x49d0c9], 1
mov eax, dword [0x49d0b9]
push eax
mov eax, 0x49d0b5
mov ecx, 1
mov edx, dword [0x4886c4]
call fcn.00405544
add esp, 4
mov eax, dword [0x49d0b9]
dec eax
test eax, eax
jl 0x49041a
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
mov eax, dword [0x49d0b5]
mov byte [eax + esi], 0
inc esi
dec dword [ebp - 0x34]
jne 0x49040b
mov eax, dword [0x49d060]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [0x49d1a4], 1
xor eax, eax
mov dword [0x49d0d7], eax
mov byte [0x49d0b0], 1
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
cmp byte [0x49d1b0], 0
jne 0x490467
call fcn.0048f484
cmp dword [0x49cef8], 0
jne 0x490480
mov dword [ebp - 0x20], 0xff000001
mov dword [ebp - 0x1c], 0xffffffff
jmp 0x4904d8
mov eax, dword [0x49cef8]
cmp byte [eax + 1], 0x3a
jne 0x4904a7
mov eax, dword [0x49cef8]
mov al, byte [eax]
call fcn.004029f4
sub al, 0x41
inc eax
call fcn.00409068
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x4904d8
cmp dword [0x49d0a8], 0
je 0x4904ca
mov al, byte [0x49d0a4]
call fcn.0048467c
sub eax, 0x2faf0800
sbb edx, 0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x4904d8
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 0x7fff
cmp dword [ebp - 0x1c], 0
jne 0x4904ed
cmp dword [ebp - 0x20], 0x112a880
jb 0x4905ee
jmp 0x4904f3
jl 0x4905ee
push 0
push 0
push 0
mov ecx, dword [ebx + 0x10]
mov edx, 0xab
mov eax, dword [ebp - 4]
call fcn.0048a07c
cmp byte [0x49d0b0], 0
jne case.0x48fad0.204
mov eax, dword [ebx + 0x10]
mov dword [0x49d0bd], eax
shl eax, 8
and eax, 0xffff
mov edx, dword [0x498ddc]
mov dword [edx], eax
mov byte [0x49d0ce], 4
mov dl, 1
mov eax, dword [0x470728]
call fcn.00402e54
mov esi, eax
mov dword [0x49d0b1], esi
mov edx, dword [ebx + 0x14]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [0x49d0b1]
call fcn.00410a5c
mov edx, dword [0x498ddc]
add eax, dword [edx]
dec eax
mov edx, dword [0x498ddc]
mov ecx, dword [edx]
cdq
idiv ecx
mov dword [0x49d0b9], eax
xor eax, eax
mov dword [0x49d0c1], eax
xor eax, eax
mov dword [0x49d0c5], eax
mov byte [0x49d0c9], 1
mov eax, dword [0x49d0b9]
push eax
mov eax, 0x49d0b5
mov ecx, 1
mov edx, dword [0x4886c4]
call fcn.00405544
add esp, 4
mov eax, dword [0x49d0b9]
dec eax
test eax, eax
jl 0x4905c7
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
mov eax, dword [0x49d0b5]
mov byte [eax + esi], 0
inc esi
dec dword [ebp - 0x34]
jne 0x4905b8
mov eax, dword [0x49d060]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [0x49d1a4], 1
xor eax, eax
mov dword [0x49d0d7], eax
mov byte [0x49d0b0], 1
jmp case.0x48fad0.204
push 0
push 0
push 0
mov ecx, dword [ebx + 0x10]
mov edx, 0xad
mov eax, dword [ebp - 4]
call fcn.0048a07c
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov byte [0x498b14], 0
mov ecx, dword [0x49913c]
mov ecx, dword [ecx]
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.0048a32c
mov dword [0x498ae0], 0
mov dword [0x498ae4], 0
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x498b1c], eax
cmp byte [0x498b28], 2
je 0x490744
mov eax, dword [0x49d044]
call fcn.00408c98
test al, al
je 0x4906a4
mov eax, dword [0x49d044]
call fcn.00408c30
cmp eax, dword [0x498b1c]
je 0x490744
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d4]
call fcn.0044ffe8
push 0
mov ecx, dword [ebx + 4]
sub ecx, 0x20
lea edx, [ebx + 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d4]
call fcn.00450020
xor eax, eax
push ebp
push 0x49073a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x49d044]
call fcn.00408c98
test al, al
je 0x4906fa
mov edx, 0x20
mov eax, dword [0x49d044]
call fcn.00408d00
test eax, eax
jne 0x490730
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x24]
mov edx, dword [0x49d044]
call fcn.00410dc0
mov edx, dword [0x498b1c]
mov eax, dword [0x49d044]
call fcn.00470b98
mov edx, 0x22
mov eax, dword [0x49d044]
call fcn.00408d00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490744
test byte [0x498c54], 2
jne case.0x48fad0.204
cmp dword [0x498b20], 0x3e8
jle case.0x48fad0.204
mov dword [0x498b20], 0x3e8
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov eax, dword [ebx + 0x10]
mov dword [0x498b18], eax
cmp byte [0x498b28], 2
je 0x490861
mov eax, dword [0x49d040]
call fcn.00408c98
test al, al
je 0x4907c1
mov eax, dword [0x49d040]
call fcn.00408c30
cmp eax, dword [0x498b18]
je 0x490861
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d4]
call fcn.0044ffe8
push 0
mov ecx, dword [ebx + 4]
sub ecx, 0x20
lea edx, [ebx + 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d4]
call fcn.00450020
xor eax, eax
push ebp
push 0x490857
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x49d040]
call fcn.00408c98
test al, al
je 0x490817
mov edx, 0x20
mov eax, dword [0x49d040]
call fcn.00408d00
test eax, eax
jne 0x49084d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d4]
mov eax, dword [eax + 0x24]
mov edx, dword [0x49d040]
call fcn.00410dc0
mov edx, dword [0x498b18]
mov eax, dword [0x49d040]
call fcn.00470b98
mov edx, 0x22
mov eax, dword [0x49d040]
call fcn.00408d00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490861
cmp dword [0x498b20], 0x3e8
jle case.0x48fad0.204
mov dword [0x498b20], 0x3e8
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov eax, dword [ebx + 0x1c]
test al, al
je 0x4908ad
mov eax, dword [ebp - 0x10]
call fcn.0048d958
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 4]
mov eax, ebx
call fcn.0048c6cc
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
lea edx, [ebp - 0x14]
lea eax, [ebx + 0x20]
call fcn.00409384
push 0x40
mov eax, dword [0x498d08]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
push eax
mov eax, dword [ebp - 0x14]
call fcn.00403fd4
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp case.0x48fad0.204
mov eax, dword [ebx + 0x1c]
test al, al
je 0x490913
mov eax, dword [ebp - 0x10]
call fcn.0048d958
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 4]
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov eax, dword [ebx + 0x10]
shr eax, 8
and al, 0xff
mov edx, dword [0x498ee4]
mov byte [edx], al
mov al, byte [ebx + 0x10]
and al, 0xff
mov edx, dword [0x49909c]
mov byte [edx], al
lea edi, [ebx + 0x20]
lea edx, [ebp - 0x78]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.004086dc
mov edx, dword [ebp - 0x74]
mov eax, dword [0x49d094]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
lea edx, [ebp - 0x80]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 0x7c]
call fcn.004086dc
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x49d098]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x49d098]
call fcn.00488b20
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
lea edx, [ebp - 0x88]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x84]
call fcn.004086dc
mov edx, dword [ebp - 0x84]
mov eax, dword [0x49d09c]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebx + 0x14]
and eax, 0xffff
cmp eax, 0x535
jne 0x490c5d
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
lea edx, [ebp - 0x8c]
mov eax, edi
call fcn.00409384
mov edx, dword [ebp - 0x8c]
mov eax, 0x498b40
call fcn.00403be4
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
lea edx, [ebp - 0x90]
mov eax, edi
call fcn.00409384
mov edx, dword [ebp - 0x90]
mov eax, 0x498b44
call fcn.00403be4
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
mov eax, dword [ebx + 4]
mov esi, ebx
add eax, esi
cmp edi, eax
jae 0x490ab0
lea edx, [ebp - 0x94]
mov eax, edi
call fcn.00409384
mov edx, dword [ebp - 0x94]
mov eax, 0x498b48
call fcn.00403be4
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
lea edx, [ebp - 0x9c]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0x98]
call fcn.004086dc
mov edx, dword [ebp - 0x98]
mov eax, dword [0x49d174]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
mov eax, dword [ebx + 4]
add eax, esi
cmp edi, eax
jae 0x490ae0
lea edx, [ebp - 0xa0]
mov eax, edi
call fcn.00409384
mov edx, dword [ebp - 0xa0]
mov eax, 0x49d0a0
call fcn.00403be4
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
mov eax, dword [ebx + 4]
add eax, esi
cmp edi, eax
jae 0x490b7e
lea edx, [ebp - 0xa8]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.004086dc
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0x14]
call fcn.004088b4
mov eax, edi
call fcn.0040913c
add edi, eax
inc edi
mov edx, dword [ebp - 0x14]
mov eax, 0x490fd4
call fcn.004040fc
mov esi, eax
test esi, esi
jne 0x490b45
mov edx, dword [ebp - 0x14]
mov eax, 0x490fe0
call fcn.004040fc
mov esi, eax
test esi, esi
jle 0x490b58
lea eax, [ebp - 0x14]
mov ecx, 1
mov edx, esi
call fcn.00404058
test esi, esi
jne 0x490b23
mov eax, dword [ebp - 0x14]
mov edx, dword [0x49d150]
call fcn.00403f20
je 0x490b7e
mov eax, 0x49d150
mov edx, dword [ebp - 0x14]
call fcn.00403be4
call fcn.00488874
mov eax, dword [ebx + 4]
mov esi, ebx
add eax, esi
cmp edi, eax
jae 0x490bab
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
sub eax, 0x30
mov dword [0x498bcc], eax
mov eax, edi
call fcn.0040913c
inc eax
add edi, eax
mov eax, dword [ebx + 4]
add eax, esi
cmp edi, eax
jae 0x490bcc
lea edx, [ebp - 0x14]
mov eax, edi
call fcn.00409384
mov eax, dword [ebp - 0x14]
call fcn.00408ad4
mov word [0x498c0c], ax
cmp byte [0x498b80], 0
jne 0x490bf5
cmp dword [0x498ad4], 0
jne 0x490bec
cmp dword [0x498ad0], 0xea60
jb 0x490bf5
jmp 0x490bee
jl 0x490bf5
mov byte [0x498b84], 1
mov eax, dword [ebx + 0x14]
and eax, 0x10000
cmp eax, 0x10000
sete byte [0x498b80]
cmp byte [0x498b80], 0
jne 0x490c2b
mov eax, dword [0x4991e0]
test byte [eax], 0x20
je 0x490c2b
xor ecx, ecx
mov dl, byte [0x490fe4]
xor eax, eax
call fcn.00486a88
mov eax, dword [ebx + 0x14]
and eax, 0x20000
cmp eax, 0x20000
sete byte [0x498b88]
mov eax, dword [ebx + 0x14]
and eax, 0x40000
cmp eax, 0x40000
sete byte [0x498b8c]
mov al, byte [0x498b88]
call fcn.00492f70
mov eax, dword [ebx + 0x18]
mov dword [0x498b54], eax
call fcn.00488ca8
call fcn.00484d44
call fcn.00488bd8
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
mov eax, dword [ebx + 0x1c]
test al, al
je 0x490ca6
mov eax, dword [ebp - 0x10]
call fcn.0048d958
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 4]
mov ecx, dword [ebx + 4]
cmp ecx, 0x20
jle case.0x48fad0.204
mov eax, ecx
sub eax, 0x20
mov ecx, 0x28
cdq
idiv ecx
test edx, edx
jne case.0x48fad0.204
mov eax, dword [0x49d088]
call fcn.00491734
cmp eax, dword [ebx + 0x10]
jge 0x490ce9
mov ecx, dword [ebx + 4]
sub ecx, 0x20
lea edx, [ebx + 0x20]
mov eax, dword [0x49d088]
call fcn.0048c620
call fcn.00409e08
fstp qword [ebp - 0xb0]
wait
call fcn.00409e34
fadd qword [ebp - 0xb0]
fstp qword [0x498bb4]
wait
jmp case.0x48fad0.204
mov eax, dword [0x498ad0]
mov dword [0x498c38], eax
mov eax, dword [0x498ad4]
mov dword [0x498c3c], eax
push 0
push 0
push 0
mov ecx, dword [ebx + 0x10]
mov edx, 0xab
mov eax, dword [ebp - 4]
call fcn.0048a07c
cmp byte [0x49d0b0], 0
jne case.0x48fad0.204
mov edx, 0x20
mov eax, dword [ebp - 0x10]
call fcn.00410a50
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 0x10]
call fcn.00470e3c
mov edx, dword [ebp - 0xb4]
mov eax, 0x49d0cf
call fcn.00403be4
mov eax, dword [ebx + 0x10]
mov dword [0x49d0bd], eax
mov eax, dword [0x49d0bd]
shl eax, 8
and eax, 0xffff
mov edx, dword [0x498ddc]
mov dword [edx], eax
mov byte [0x49d0ce], 5
mov eax, dword [0x49d0d3]
mov dword [0x49d0b1], eax
mov edx, dword [ebx + 0x14]
mov eax, dword [0x49d0b1]
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [0x49d0b1]
call fcn.00410a5c
mov edx, dword [0x498ddc]
add eax, dword [edx]
dec eax
mov edx, dword [0x498ddc]
mov ecx, dword [edx]
cdq
idiv ecx
mov dword [0x49d0b9], eax
xor eax, eax
mov dword [0x49d0c1], eax
xor eax, eax
mov dword [0x49d0c5], eax
mov byte [0x49d0c9], 1
mov eax, dword [0x49d0b9]
push eax
mov eax, 0x49d0b5
mov ecx, 1
mov edx, dword [0x4886c4]
call fcn.00405544
add esp, 4
mov eax, dword [0x49d0b9]
dec eax
test eax, eax
jl 0x490e21
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
mov eax, dword [0x49d0b5]
mov byte [eax + esi], 0
inc esi
dec dword [ebp - 0x34]
jne 0x490e12
mov eax, dword [0x49d060]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [0x49d1a4], 1
xor eax, eax
mov dword [0x49d0d7], eax
mov byte [0x49d0b0], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x490e6c
cmp dword [0x49bee8], 0x92e04
jg 0x490e64
mov eax, dword [ebp - 0x10]
call fcn.00402e84
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x490e9e
mov eax, dword [0x49bee0]
call fcn.00410e44
ret
mov eax, dword [0x49bee0]
call fcn.00410a5c
cmp eax, 0x20
je 0x48f5ad
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x490ee3
lea eax, [ebp - 0xb4]
call fcn.00403b90
lea eax, [ebp - 0xa8]
mov edx, 0x1d
call fcn.00403bb4
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00403bb4
lea eax, [ebp - 0x14]
call fcn.00403b90
ret