Function at 0x4a4550
Capabilities:
Shutdown system

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2c
push 0
push 0
dec ecx
jne 0x4a4558
push ecx
push ebx
push esi
push edi
mov eax, 0x4a4238
call fcn.00406d74
mov ebx, dword [0x4a9a38]
mov esi, dword [0x4a98dc]
xor eax, eax
push ebp
push 0x4a58df
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004a3208
test al, al
jne 0x4a45f8
call fcn.004a3638
push 0x4ac9a8
push 0x28
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.advapi32.dll_OpenProcessToken
push 0x4ac9b0
push 0x4a58f0
push 0
call sub.advapi32.dll_LookupPrivilegeValueA
mov dword [0x4ac9ac], 1
mov dword [0x4ac9b8], 2
push 0x4ac9cc
push 0x4ac9bc
push 0x10
push 0x4ac9ac
push 0
mov eax, dword [0x4ac9a8]
push eax
call sub.advapi32.dll_AdjustTokenPrivileges
push 1
push 9
call sub.user32.dll_ExitWindowsEx
call fcn.004047d0
lea edx, [ebp - 0x18]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.00409558
lea eax, [ebp - 0x14]
mov edx, 0x4a590c
call fcn.00404b80
mov eax, dword [ebp - 0x14]
call fcn.004093d4
test al, al
je 0x4a4695
lea edx, [ebp - 0x20]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00409558
lea eax, [ebp - 0x1c]
mov edx, 0x4a590c
call fcn.00404b80
mov ecx, dword [ebp - 0x1c]
mov dl, 1
mov eax, dword [0x4613f0]
call fcn.004614a0
mov dword [0x4ac99c], eax
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4a5924
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x24]
mov eax, ebx
call fcn.00404914
mov eax, dword [0x4ac99c]
call fcn.00403b54
jmp 0x4a46ad
push 0x10
push 0x4a5944
push 0x4a594c
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
lea edx, [ebp - 0x2c]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.00409558
lea eax, [ebp - 0x28]
mov edx, 0x4a5978
call fcn.00404b80
mov eax, dword [ebp - 0x28]
call fcn.004093d4
test al, al
jne 0x4a471e
push 0x10
lea ecx, [ebp - 0x30]
mov eax, dword [ebx]
mov edx, 0x4a598c
call fcn.004a3278
mov eax, dword [ebp - 0x30]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x34]
mov eax, dword [ebx]
mov edx, 0x4a59a0
call fcn.004a3278
mov eax, dword [ebp - 0x34]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0045fdcc
mov ecx, dword [0x4a9b50]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
mov edx, dword [0x49e86c]
call fcn.0045fde4
mov ecx, dword [0x4a9b8c]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
mov edx, dword [0x49cb78]
call fcn.0045fde4
mov ecx, dword [0x4a99f8]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
mov edx, dword [0x49c994]
call fcn.0045fde4
mov ecx, esi
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
mov edx, dword [0x49b17c]
call fcn.0045fde4
mov ecx, dword [0x4a9acc]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
mov edx, dword [0x499f1c]
call fcn.0045fde4
mov byte [0x4ac96c], 0
mov byte [0x4ac984], 0
mov byte [0x4ac985], 0
mov eax, dword [0x4a9a84]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x38]
mov eax, 1
call fcn.00402ac0
cmp dword [ebp - 0x38], 0
je 0x4a4e84
xor eax, eax
mov dword [0x4ac988], eax
mov eax, 0x4ac978
call fcn.004048c0
call fcn.00402a60
mov edi, eax
test edi, edi
jle 0x4a4be1
mov dword [0x4ac974], 1
call fcn.00402a60
lea edx, [ebp - 0x3c]
call fcn.00402ac0
mov eax, dword [ebp - 0x3c]
call fcn.00404b78
test eax, eax
je 0x4a4bd4
mov eax, dword [0x4ac978]
call fcn.00404b78
test eax, eax
jne 0x4a4839
mov edx, 0x4ac978
mov eax, dword [0x4ac974]
call fcn.00402ac0
jmp 0x4a4863
push dword [0x4ac978]
push 0x4a59b8
lea edx, [ebp - 0x40]
mov eax, dword [0x4ac974]
call fcn.00402ac0
push dword [ebp - 0x40]
mov eax, 0x4ac978
mov edx, 3
call fcn.00404c38
lea edx, [ebp - 0x48]
mov eax, dword [0x4ac974]
call fcn.00402ac0
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.00408ba8
mov edx, dword [ebp - 0x44]
mov eax, 0x4ac970
call fcn.00404914
mov eax, dword [0x4ac970]
mov edx, 0x4a59c4
call fcn.00404cbc
jne 0x4a48aa
mov eax, dword [ebx]
call fcn.004a340c
call fcn.004047d0
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a59d4
call fcn.00404cbc
jne 0x4a48c8
mov eax, dword [0x4a9a78]
mov byte [eax], 1
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a59e4
call fcn.00404cbc
jne 0x4a48e4
inc dword [0x4ac9a4]
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a59fc
call fcn.00404cbc
jne 0x4a4901
add dword [0x4ac9a4], 2
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a5a14
call fcn.00404cbc
jne 0x4a491e
mov byte [0x4ac9a0], 1
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a5a28
call fcn.00404cbc
jne 0x4a493b
mov byte [0x4ac985], 1
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a5a38
call fcn.00404cbc
jne 0x4a4957
inc dword [0x4ac988]
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5a48
call fcn.00404eb4
dec eax
jne 0x4a499c
push 0x4ac990
lea edx, [ebp - 0x4c]
mov eax, dword [0x4ac974]
call fcn.00402ac0
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [0x4ac970]
call fcn.00404b78
mov ecx, eax
mov edx, 0xd
pop eax
call fcn.00404dd0
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a5a5c
call fcn.00404cbc
jne 0x4a49b9
add dword [0x4ac988], 2
jmp 0x4a4bd4
mov eax, dword [0x4ac970]
mov edx, 0x4a5a70
call fcn.00404cbc
jne 0x4a49d6
mov byte [0x4ac984], 1
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5a84
call fcn.00404eb4
dec eax
jne 0x4a49f6
mov eax, dword [0x4a9a5c]
mov byte [eax], 1
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5a98
call fcn.00404eb4
dec eax
jne 0x4a4a36
mov eax, dword [0x4a9ac4]
push eax
mov eax, dword [0x4ac970]
call fcn.00404b78
mov ecx, eax
mov edx, 0xa
mov eax, dword [0x4ac970]
call fcn.00404dd0
mov eax, dword [0x4a9a84]
inc dword [eax]
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5aac
call fcn.00404eb4
dec eax
jne 0x4a4a56
mov eax, dword [0x4a9a5c]
mov byte [eax], 1
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5ac0
call fcn.00404eb4
dec eax
jne 0x4a4a97
mov eax, dword [0x4a9ac4]
push eax
mov eax, dword [0x4ac970]
call fcn.00404b78
mov ecx, eax
mov edx, 0xb
mov eax, dword [0x4ac970]
call fcn.00404dd0
mov eax, dword [0x4a9a84]
add dword [eax], 2
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5ad4
call fcn.00404eb4
dec eax
jne 0x4a4adc
push 0x4ac998
lea edx, [ebp - 0x50]
mov eax, dword [0x4ac974]
call fcn.00402ac0
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [0x4ac970]
call fcn.00404b78
mov ecx, eax
mov edx, 0xa
pop eax
call fcn.00404dd0
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5ae8
call fcn.00404eb4
dec eax
jne 0x4a4b14
push 0x4ac994
mov eax, dword [0x4ac970]
call fcn.00404b78
mov ecx, eax
mov edx, 7
mov eax, dword [0x4ac970]
call fcn.00404dd0
jmp 0x4a4bd4
mov edx, dword [0x4ac970]
mov eax, 0x4a5af8
call fcn.00404eb4
dec eax
jne 0x4a4b4c
push 0x4ac98c
mov eax, dword [0x4ac970]
call fcn.00404b78
mov ecx, eax
mov edx, 6
mov eax, dword [0x4ac970]
call fcn.00404dd0
jmp 0x4a4bd4
mov byte [0x4ac96c], 1
mov eax, dword [0x4ac97c]
call fcn.00404b78
test eax, eax
jne 0x4a4b8e
mov edx, 0x4ac97c
mov eax, dword [0x4ac974]
call fcn.00402ac0
lea ecx, [ebp - 0x54]
mov eax, dword [ebx]
mov edx, 0x4a5b08
call fcn.004a3278
mov edx, dword [ebp - 0x54]
mov eax, 0x4ac980
call fcn.00404914
jmp 0x4a4bd4
push dword [0x4ac97c]
push 0x4a5b24
lea edx, [ebp - 0x58]
mov eax, dword [0x4ac974]
call fcn.00402ac0
push dword [ebp - 0x58]
mov eax, 0x4ac97c
mov edx, 3
call fcn.00404c38
lea ecx, [ebp - 0x5c]
mov eax, dword [ebx]
mov edx, 0x4a5b30
call fcn.004a3278
mov edx, dword [ebp - 0x5c]
mov eax, 0x4ac980
call fcn.00404914
inc dword [0x4ac974]
dec edi
jne 0x4a47fd
cmp byte [0x4ac96c], 0
je 0x4a4cd1
push 0x10
lea ecx, [ebp - 0x60]
mov eax, dword [ebx]
mov edx, 0x4a598c
call fcn.004a3278
mov eax, dword [ebp - 0x60]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x68]
mov eax, dword [ebx]
mov edx, 0x4a5b4c
call fcn.004a3278
push dword [ebp - 0x68]
push 0x4a5b60
lea ecx, [ebp - 0x6c]
mov eax, dword [ebx]
mov edx, 0x4a5b6c
call fcn.004a3278
push dword [ebp - 0x6c]
push 0x4a5b84
lea ecx, [ebp - 0x70]
mov eax, dword [ebx]
mov edx, 0x4a5b90
call fcn.004a3278
push dword [ebp - 0x70]
push 0x4a5ba0
push 0x4a5b60
push 0x4a5bac
push dword [0x4ac978]
push 0x4a5bac
push 0x4a5b60
lea ecx, [ebp - 0x74]
mov eax, dword [ebx]
mov edx, 0x4a5bb8
call fcn.004a3278
push dword [ebp - 0x74]
push 0x4a5bcc
lea edx, [ebp - 0x78]
mov eax, dword [0x4ac974]
dec eax
call fcn.00409014
push dword [ebp - 0x78]
push 0x4a5bac
push 0x4a5b60
push dword [0x4ac980]
push 0x4a5bcc
push dword [0x4ac97c]
push 0x4a5bac
lea eax, [ebp - 0x64]
mov edx, 0x14
call fcn.00404c38
mov eax, dword [ebp - 0x64]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
mov eax, dword [0x4a989c]
mov dl, byte [0x4ac985]
mov byte [eax], dl
mov eax, dword [0x4a9960]
mov dl, byte [0x4ac984]
mov byte [eax], dl
mov eax, dword [0x4ac990]
call fcn.00404b78
test eax, eax
je 0x4a4d0b
mov eax, dword [0x4a9974]
mov edx, dword [0x4ac990]
call fcn.00404914
jmp 0x4a4d49
push 0x10
lea ecx, [ebp - 0x7c]
mov eax, dword [ebx]
mov edx, 0x4a598c
call fcn.004a3278
mov eax, dword [ebp - 0x7c]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x80]
mov eax, dword [ebx]
mov edx, 0x4a5bd8
call fcn.004a3278
mov eax, dword [ebp - 0x80]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
cmp dword [0x4ac988], 2
jg 0x4a4d5c
mov eax, dword [0x4a9a84]
cmp dword [eax], 2
jle 0x4a4da6
push 0x10
lea ecx, [ebp - 0x84]
mov eax, dword [ebx]
mov edx, 0x4a598c
call fcn.004a3278
mov eax, dword [ebp - 0x84]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x88]
mov eax, dword [ebx]
mov edx, 0x4a5bf4
call fcn.004a3278
mov eax, dword [ebp - 0x88]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
mov eax, dword [0x4ac994]
call fcn.00404b78
test eax, eax
je 0x4a4dc4
mov eax, dword [0x4a9910]
mov edx, dword [0x4ac994]
call fcn.00404914
mov eax, dword [0x4ac998]
call fcn.00404b78
test eax, eax
je 0x4a4de2
mov eax, dword [0x4a98b0]
mov edx, dword [0x4ac998]
call fcn.00404914
mov eax, dword [0x4ac98c]
call fcn.00404b78
test eax, eax
je 0x4a4e00
mov eax, dword [0x4a9b7c]
mov edx, dword [0x4ac98c]
call fcn.00404914
cmp dword [0x4ac9a4], 1
jne 0x4a4e19
mov eax, dword [0x4a9b50]
mov eax, dword [eax]
xor edx, edx
call fcn.004a0728
jmp 0x4a4e30
cmp dword [0x4ac9a4], 2
jne 0x4a4e30
mov eax, dword [0x4a9b50]
mov eax, dword [eax]
mov dl, 1
call fcn.004a0728
cmp byte [0x4ac9a0], 0
je 0x4a4e4f
mov eax, dword [0x4a98e4]
mov byte [eax], 1
mov eax, dword [0x4a9b50]
mov eax, dword [eax]
xor edx, edx
call fcn.004a0ebc
cmp dword [0x4ac988], 1
jne 0x4a4e68
mov eax, dword [0x4a9b50]
mov eax, dword [eax]
xor edx, edx
call fcn.004a0ebc
jmp 0x4a4e7f
cmp dword [0x4ac988], 2
jne 0x4a4e7f
mov eax, dword [0x4a9b50]
mov eax, dword [eax]
xor edx, edx
call fcn.004a0de0
call fcn.004047d0
mov eax, dword [ebx]
call fcn.004a370c
push 0x4a59b8
lea ecx, [ebp - 0x90]
mov eax, dword [ebx]
mov edx, 0x4a5c14
call fcn.004a3278
push dword [ebp - 0x90]
push 0x4a5c28
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x4a9b50]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x98]
mov eax, dword [ebx]
mov edx, 0x4a5c34
call fcn.004a3278
push dword [ebp - 0x98]
push 0x4a5c28
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x94]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f8]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0xa0]
mov eax, dword [ebx]
mov edx, 0x4a5c48
call fcn.004a3278
push dword [ebp - 0xa0]
push 0x4a5c28
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x9c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0xa8]
mov eax, dword [ebx]
mov edx, 0x4a5c60
call fcn.004a3278
push dword [ebp - 0xa8]
push 0x4a5c28
lea eax, [ebp - 0xa4]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0xa4]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0xb0]
mov eax, dword [ebx]
mov edx, 0x4a5c74
call fcn.004a3278
push dword [ebp - 0xb0]
push 0x4a5c28
lea eax, [ebp - 0xac]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0xac]
mov eax, dword [esi]
mov eax, dword [eax + 0x354]
call fcn.0043ffb4
lea ecx, [ebp - 0xb4]
mov eax, dword [ebx]
mov edx, 0x4a5c88
call fcn.004a3278
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi]
mov eax, dword [eax + 0x2f0]
call fcn.0043ffb4
lea ecx, [ebp - 0xb8]
mov eax, dword [ebx]
mov edx, 0x4a5c98
call fcn.004a3278
mov edx, dword [ebp - 0xb8]
mov eax, dword [esi]
mov eax, dword [eax + 0x2f4]
call fcn.0043ffb4
lea ecx, [ebp - 0xbc]
mov eax, dword [ebx]
mov edx, 0x4a5ca8
call fcn.004a3278
mov edx, dword [ebp - 0xbc]
mov eax, dword [esi]
mov eax, dword [eax + 0x2f8]
call fcn.0043ffb4
lea ecx, [ebp - 0xc0]
mov eax, dword [ebx]
mov edx, 0x4a5cb8
call fcn.004a3278
mov edx, dword [ebp - 0xc0]
mov eax, dword [esi]
mov eax, dword [eax + 0x31c]
call fcn.0043ffb4
lea ecx, [ebp - 0xc4]
mov eax, dword [ebx]
mov edx, 0x4a5cc8
call fcn.004a3278
mov edx, dword [ebp - 0xc4]
mov eax, dword [esi]
mov eax, dword [eax + 0x33c]
call fcn.0043ffb4
lea ecx, [ebp - 0xc8]
mov eax, dword [ebx]
mov edx, 0x4a5cd8
call fcn.004a3278
mov edx, dword [ebp - 0xc8]
mov eax, dword [esi]
mov eax, dword [eax + 0x340]
call fcn.0043ffb4
mov eax, dword [esi]
mov eax, dword [eax + 0x318]
mov edx, dword [eax]
call dword [edx + 0xd4]
lea ecx, [ebp - 0xcc]
mov eax, dword [ebx]
mov edx, 0x4a5ce8
call fcn.004a3278
mov edx, dword [ebp - 0xcc]
mov eax, dword [esi]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0xd0]
mov eax, dword [ebx]
mov edx, 0x4a5cfc
call fcn.004a3278
mov edx, dword [ebp - 0xd0]
mov eax, dword [esi]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov edx, dword [eax]
call dword [edx + 0xd4]
lea ecx, [ebp - 0xd4]
mov eax, dword [ebx]
mov edx, 0x4a5d10
call fcn.004a3278
mov edx, dword [ebp - 0xd4]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0xd8]
mov eax, dword [ebx]
mov edx, 0x4a5d24
call fcn.004a3278
mov edx, dword [ebp - 0xd8]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0xdc]
mov eax, dword [ebx]
mov edx, 0x4a5d38
call fcn.004a3278
mov edx, dword [ebp - 0xdc]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov edx, dword [eax]
call dword [edx + 0xd4]
lea ecx, [ebp - 0xe0]
mov eax, dword [ebx]
mov edx, 0x4a5d48
call fcn.004a3278
mov edx, dword [ebp - 0xe0]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0xe4]
mov eax, dword [ebx]
mov edx, 0x4a5d60
call fcn.004a3278
mov edx, dword [ebp - 0xe4]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0xe8]
mov eax, dword [ebx]
mov edx, 0x4a5d78
call fcn.004a3278
mov edx, dword [ebp - 0xe8]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x4a59b8
lea ecx, [ebp - 0xf0]
mov eax, dword [ebx]
mov edx, 0x4a5d98
call fcn.004a3278
push dword [ebp - 0xf0]
push 0x4a5c28
lea eax, [ebp - 0xec]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0xec]
mov eax, dword [esi]
mov eax, dword [eax + 0x314]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0xf8]
mov eax, dword [ebx]
mov edx, 0x4a5c14
call fcn.004a3278
push dword [ebp - 0xf8]
push 0x4a5c28
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0xf4]
mov eax, dword [esi]
mov eax, dword [eax + 0x30c]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x100]
mov eax, dword [ebx]
mov edx, 0x4a5dac
call fcn.004a3278
push dword [ebp - 0x100]
push 0x4a5c28
lea eax, [ebp - 0xfc]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0xfc]
mov eax, dword [esi]
mov eax, dword [eax + 0x2fc]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x108]
mov eax, dword [ebx]
mov edx, 0x4a5dc0
call fcn.004a3278
push dword [ebp - 0x108]
push 0x4a5c28
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x104]
mov eax, dword [esi]
mov eax, dword [eax + 0x304]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x110]
mov eax, dword [ebx]
mov edx, 0x4a5dd0
call fcn.004a3278
push dword [ebp - 0x110]
push 0x4a5de4
lea eax, [ebp - 0x10c]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x10c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x30c]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x118]
mov eax, dword [ebx]
mov edx, 0x4a5dd0
call fcn.004a3278
push dword [ebp - 0x118]
push 0x4a5dfc
lea eax, [ebp - 0x114]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x114]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x314]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x120]
mov eax, dword [ebx]
mov edx, 0x4a5e14
call fcn.004a3278
push dword [ebp - 0x120]
push 0x4a5c28
lea eax, [ebp - 0x11c]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi]
mov eax, dword [eax + 0x344]
call fcn.0043ffb4
push 0x4a59b8
lea ecx, [ebp - 0x128]
mov eax, dword [ebx]
mov edx, 0x4a5e28
call fcn.004a3278
push dword [ebp - 0x128]
push 0x4a5c28
lea eax, [ebp - 0x124]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x124]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x31c]
call fcn.0043ffb4
lea ecx, [ebp - 0x12c]
mov eax, dword [ebx]
mov edx, 0x4a5e3c
call fcn.004a3278
mov edx, dword [ebp - 0x12c]
mov eax, dword [esi]
call fcn.0043ffb4
lea ecx, [ebp - 0x130]
mov eax, dword [ebx]
mov edx, 0x4a5938
call fcn.004a3278
mov edx, dword [ebp - 0x130]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
call fcn.0043ffb4
lea edx, [ebp - 0x138]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x138]
lea edx, [ebp - 0x134]
call fcn.00409558
lea eax, [ebp - 0x134]
mov edx, 0x4a590c
call fcn.00404b80
mov eax, dword [ebp - 0x134]
call fcn.004093d4
test al, al
je 0x4a58b5
lea edx, [ebp - 0x140]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.00409558
lea eax, [ebp - 0x13c]
mov edx, 0x4a590c
call fcn.00404b80
mov ecx, dword [ebp - 0x13c]
mov dl, 1
mov eax, dword [0x4613f0]
call fcn.004614a0
mov dword [0x4ac99c], eax
push 0
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x4a5e54
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x144]
mov edx, 0x4a5e68
call fcn.00404cbc
jne 0x4a55d0
mov eax, dword [esi]
mov eax, dword [eax + 0x2f0]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc8]
push 0
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x4a5c98
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x148]
mov edx, 0x4a5e68
call fcn.00404cbc
jne 0x4a5610
mov eax, dword [esi]
mov eax, dword [eax + 0x2f4]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc8]
push 0
lea eax, [ebp - 0x14c]
push eax
mov ecx, 0x4a5ca8
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x14c]
mov edx, 0x4a5e68
call fcn.00404cbc
jne 0x4a5650
mov eax, dword [esi]
mov eax, dword [eax + 0x2f8]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc8]
push 0
lea eax, [ebp - 0x150]
push eax
mov ecx, 0x4a5e74
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x150]
mov edx, 0x4a5e68
call fcn.00404cbc
jne 0x4a5690
mov eax, dword [esi]
mov eax, dword [eax + 0x31c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc8]
push 0
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x4a5cc8
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x154]
mov edx, 0x4a5e68
call fcn.00404cbc
jne 0x4a56d0
mov eax, dword [esi]
mov eax, dword [eax + 0x33c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc8]
push 0
lea eax, [ebp - 0x158]
push eax
mov ecx, 0x4a5cd8
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x158]
mov edx, 0x4a5e68
call fcn.00404cbc
jne 0x4a5710
mov eax, dword [esi]
mov eax, dword [eax + 0x340]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc8]
push 0
mov ecx, 0x4a5e88
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x318]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
mov ecx, 0x4a5e98
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x310]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
mov ecx, 0x4a5eb0
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, eax
mov eax, dword [esi]
mov eax, dword [eax + 0x358]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
mov ecx, 0x4a5c48
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, eax
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
mov ecx, 0x4a5ec4
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, eax
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2fc]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
mov ecx, 0x4a5edc
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, eax
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea eax, [ebp - 0x15c]
push eax
mov ecx, 0x4a5ef0
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x15c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ffb4
push 0
lea eax, [ebp - 0x160]
push eax
mov ecx, 0x4a5f04
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x160]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ffb4
push 0
lea eax, [ebp - 0x164]
push eax
mov ecx, 0x4a5e28
mov edx, 0x4a5938
mov eax, dword [0x4ac99c]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x164]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x320]
call fcn.0043ffb4
mov eax, dword [0x4ac99c]
call fcn.00403b54
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0045fe64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a58e6
lea eax, [ebp - 0x164]
mov edx, 0x55
call fcn.004048e4
ret