Function at 0x4cc48c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xc6
push 0
push 0
dec ecx
jne 0x4cc495
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4ceaf4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x1475c
call fcn.00403ccc
mov eax, dword [ebp - 4]
add eax, 0x14754
call fcn.00403ccc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8a8]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8ac]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8b0]
xor edx, edx
call fcn.00435330
mov dword [ebp - 0x38], 0x46
xor ecx, ecx
push ebp
push 0x4cea12
push dword fs:[ecx]
mov dword fs:[ecx], esp
cmp dword [ebp - 0xc], 0
jne 0x4cc65a
mov edx, dword [ebp - 8]
mov eax, edx
shl edx, 3
sub edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov al, byte [eax + edx*8 + 0xe]
cmp al, 0x10
je 0x4cc59a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp al, 0xf
je 0x4cc59a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp al, 0xe
je 0x4cc59a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp al, 0xb
je 0x4cc59a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp al, 0xc
jne 0x4cc5aa
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp dword [eax + edx*8 + 4], 0xffffffff
je 0x4cc5b6
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
mov dword [eax + 0x14e7c], ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp dword [eax + edx*8 + 0x10], 0
jne 0x4cc5f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435448
mov edx, 3
mov eax, dword [ebp - 4]
call fcn.004cf44c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp dword [edx + eax*8 + 0x10], 0
jle 0x4cc652
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14e7c]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0xe], 5
je 0x4cc652
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14e7c]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0xe], 6
je 0x4cc652
mov eax, dword [ebp - 4]
call fcn.004cbad8
mov eax, dword [ebp - 4]
call fcn.004cb9ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
mov byte [eax + 0x1444e], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
xor edx, edx
call fcn.00435448
inc dword [ebp - 0x38]
mov ebx, dword [ebp - 8]
mov eax, ebx
shl ebx, 3
sub ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp dword [eax + ebx*8 + 0x10], 0
jle 0x4cdb78
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov al, byte [eax + ebx*8 + 0xf]
sub al, 1
jb 0x4cc6ca
je 0x4cc6fc
jmp 0x4cc722
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15040]
call fcn.00403d64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov eax, dword [eax + ebx*8]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x143a4]
dec eax
add eax, 4
mov dword [ebp - 0x30], eax
jmp 0x4cc77c
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15034]
call fcn.00403d64
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov eax, dword [eax + ebx*8]
dec eax
add eax, 4
mov dword [ebp - 0x30], eax
jmp 0x4cc77c
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
movzx esi, byte [ecx + edx*8 + 0xf]
mov edx, dword [ebp - 4]
mov edx, dword [edx + esi*4 + 0x14448]
call fcn.00403d64
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov eax, dword [ebp - 4]
mov eax, dword [eax + esi*4 + 0x14498]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
add eax, dword [edx + ebx*8]
dec eax
add eax, 4
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
call fcn.00409718
test al, al
jne 0x4cc7b7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x64c]
mov dl, 1
call fcn.00456a7c
mov eax, dword [ebp - 4]
mov byte [eax + 0x14938], 0x16
mov eax, dword [ebp - 4]
call fcn.004cbb00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
add eax, 0x1494c
mov edx, dword [ebp - 0x2c]
call fcn.0040649a
mov eax, dword [0x5034b8]
mov byte [eax], 0
mov eax, dword [ebp - 4]
add eax, 0x1494c
mov edx, 1
call fcn.004069d1
call fcn.00402874
mov edx, dword [ebp - 0x30]
sub edx, 4
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406a08
call fcn.00402874
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
add eax, 0x1494c
mov ecx, 4
call fcn.0040653c
call fcn.00402874
inc dword [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
movzx eax, byte [eax + ebx*8 + 0xe]
cmp eax, 0x10
ja case.0x4cc836.8
jmp dword [eax*4 + 0x4cc83d]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x58c]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x58c]
push 0x4ceb1c
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x590]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x590]
push 0x4ceb2c
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x594]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x594]
push 0x4ceb3c
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb4c
lea edx, [ebp - 0x598]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x598]
push 0x4ceb5c
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x59c]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x59c]
push 0x4ceb6c
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x5a0]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x5a0]
push 0x4ceb7c
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
lea eax, [ebp - 0x1c]
call fcn.00403ccc
cmp dword [ebp - 0xc], 0
jne 0x4cd893
mov eax, dword [ebp - 0x30]
push eax
push 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov eax, dword [eax + ebx*8 + 0x10]
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1544c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x153f8]
lea eax, [ebp - 0x5a4]
call fcn.00403f98
mov edx, dword [ebp - 0x5a4]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.004bb104
mov eax, dword [ebp - 4]
cmp dword [eax + 0x14934], 0
je 0x4ccd48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14934]
call fcn.00409718
test al, al
je 0x4ccd48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov eax, dword [eax + 0x208]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
lea edx, [ebp - 0x5a8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov eax, dword [eax + 0x208]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x5a8]
lea edx, [ebp - 0x20]
call fcn.004090d8
mov edx, dword [ebp - 0x20]
mov eax, 0x4ceb8c
call fcn.00404238
mov ebx, eax
test ebx, ebx
jle 0x4cd893
lea eax, [ebp - 0x20]
push eax
lea edx, [ebx + 5]
mov ecx, 0x14
mov eax, dword [ebp - 0x20]
call fcn.00404154
mov edx, dword [ebp - 0x20]
mov eax, 0x4ceb9c
call fcn.00404238
test eax, eax
jne 0x4ccb74
lea edx, [ebx + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov ecx, dword [eax]
call dword [ecx + 0xc8]
lea edx, [ebp - 0x5b0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14934]
call fcn.00409868
mov ecx, dword [ebp - 0x5b0]
lea eax, [ebp - 0x5ac]
mov edx, 0x4cebb0
call fcn.00403f98
mov edx, dword [ebp - 0x5ac]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
call fcn.0042c2e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov eax, dword [eax + 0x208]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x4ccd30
lea edx, [ebp - 0x5b4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov eax, dword [eax + 0x208]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x5b4]
lea edx, [ebp - 0x20]
call fcn.004090d8
mov edx, dword [ebp - 0x20]
mov eax, 0x4ceb9c
call fcn.00404238
mov ebx, eax
lea eax, [ebp - 0x20]
push eax
lea edx, [ebx + 0xa]
mov ecx, 0xff
mov eax, dword [ebp - 0x20]
call fcn.00404154
mov edx, dword [ebp - 0x20]
mov eax, 0x4cebd0
call fcn.00404238
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x18]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00404154
jmp 0x4ccc02
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov ecx, eax
dec ecx
mov edx, 2
mov eax, dword [ebp - 0x20]
call fcn.00404154
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
cmp al, 0x5c
je 0x4ccbe6
cmp al, 0x2e
je 0x4ccbe6
cmp al, 0x20
je 0x4ccbe6
cmp al, 0x3d
je 0x4ccbe6
cmp al, 0x27
je 0x4ccbe6
cmp al, 0x22
je 0x4ccbe6
jmp 0x4ccc3d
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00404154
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov edx, dword [ebp - 0x20]
cmp byte [edx + eax - 1], 0x20
je 0x4ccc21
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov edx, dword [ebp - 0x20]
cmp byte [edx + eax - 1], 0x27
je 0x4ccc21
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov edx, dword [ebp - 0x20]
cmp byte [edx + eax - 1], 0x22
je 0x4ccc21
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebdc
push dword [ebp - 0x20]
lea eax, [ebp - 0x5b8]
mov edx, 4
call fcn.0040400c
mov eax, dword [ebp - 0x5b8]
call fcn.00409718
test al, al
jne 0x4ccd30
mov edx, ebx
dec edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov edx, dword [ebp - 0x18]
add edx, 9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov ecx, dword [eax]
call dword [ecx + 0xc4]
lea edx, [ebp - 0x5c0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14934]
call fcn.00409868
mov ecx, dword [ebp - 0x5c0]
lea eax, [ebp - 0x5bc]
mov edx, 0x4cebb0
call fcn.00403f98
mov edx, dword [ebp - 0x5bc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
call fcn.0042c2e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
mov eax, dword [eax + 0x208]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f0]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xc4]
jmp 0x4cd893
mov eax, dword [ebp - 4]
add eax, 0x14934
call fcn.00403ccc
jmp 0x4cd893
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebe8
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.0040400c
mov eax, dword [ebp - 0x1c]
call fcn.00409764
jmp 0x4cd893
cmp dword [ebp - 0xc], 5
jne 0x4cce0d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp dword [eax + ebx*8 + 0x24], 0
jne 0x4cce00
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14944]
call fcn.00409764
mov eax, dword [ebp - 4]
inc dword [eax + 0x164e0]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebfc
lea edx, [ebp - 0x5c4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x164e0]
call fcn.00409428
push dword [ebp - 0x5c4]
push 0x4cec10
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
lea eax, [ebp - 0x1c]
call fcn.00403ccc
jmp 0x4cd893
mov eax, dword [ebp - 4]
inc dword [eax + 0x164e0]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cec20
lea edx, [ebp - 0x5c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x164e0]
call fcn.00409428
push dword [ebp - 0x5c8]
push 0x4cec10
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
cmp byte [eax + 0x143ed], 1
jne 0x4cced2
cmp dword [ebp - 0xc], 0
cmp dword [ebp - 0xc], 5
jne 0x4cce81
lea eax, [ebp - 0x1c]
call fcn.00403ccc
jmp 0x4cd893
mov eax, dword [ebp - 4]
inc dword [eax + 0x164e4]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cec30
lea edx, [ebp - 0x5cc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x164e4]
call fcn.00409428
push dword [ebp - 0x5cc]
push 0x4cec40
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
mov edx, 0x4cec50
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
add eax, 0x14948
call fcn.00403ccc
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cf44c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov edx, 0x4cec5c
call fcn.00435448
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
cmp byte [eax + 0x143ee], 1
jne 0x4cd059
cmp dword [ebp - 0xc], 0
jne 0x4cd008
xor eax, eax
push ebp
push 0x4ccfaf
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x5d0]
mov eax, 0x4cec8c
call fcn.0046d4dc
mov edx, dword [ebp - 0x5d0]
mov eax, dword [ebp - 4]
add eax, 0x164b8
call fcn.00405394
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cd008
mov eax, dword [ebp - 4]
inc dword [eax + 0x164e8]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cec30
lea edx, [ebp - 0x5d8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x164e8]
call fcn.00409428
push dword [ebp - 0x5d8]
push 0x4ceca8
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
mov edx, 0x4cec50
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
add eax, 0x14948
call fcn.00403ccc
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cf44c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov edx, 0x4cecb8
call fcn.00435448
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
cmp byte [eax + 0x143ef], 1
jne 0x4cd13e
mov eax, dword [ebp - 4]
inc dword [eax + 0x164ec]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cece8
lea edx, [ebp - 0x5dc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x164ec]
call fcn.00409428
push dword [ebp - 0x5dc]
push 0x4cecf8
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
jmp 0x4cd893
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
mov edx, 0x4cec50
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
add eax, 0x14948
call fcn.00403ccc
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cf44c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov edx, 0x4ced08
call fcn.00435448
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
cmp byte [eax + 0x143f0], 1
jne 0x4cd363
push 0
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 4]
add eax, 0x1494c
mov ecx, 0x1e
call fcn.0040653c
call fcn.00402874
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 0
je 0x4cd229
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 3
jne 0x4cd240
mov ebx, 0x1e
lea eax, [ebp - 0x43c]
mov dl, byte [eax]
sub dl, byte [ebp - 0x14]
dec edx
mov byte [eax], dl
inc eax
dec ebx
jne 0x4cd234
lea eax, [ebp - 0x20]
call fcn.00403ccc
mov ebx, 0xf
lea esi, [ebp - 0x43c]
lea eax, [ebp - 0x5e0]
mov dl, byte [esi]
call fcn.00403e74
mov edx, dword [ebp - 0x5e0]
lea eax, [ebp - 0x20]
call fcn.00403f54
inc esi
dec ebx
jne 0x4cd253
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebdc
push dword [ebp - 0x20]
push 0x4ced40
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 1
je 0x4cd2d2
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 4
jne 0x4cd2d6
add dword [ebp - 0x30], 0x1e
mov eax, dword [ebp - 0x1c]
call fcn.00409718
test al, al
je 0x4cd893
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
mov edx, 0x4cec50
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
add eax, 0x14948
mov edx, dword [ebp - 0x1c]
call fcn.00403d20
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.004cf44c
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
mov edx, 0x4cec50
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
add eax, 0x14948
call fcn.00403ccc
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004cf44c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8c4]
mov edx, 0x4ced50
call fcn.00435448
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
push 0
lea edx, [ebp - 0x43c]
mov eax, dword [ebp - 4]
add eax, 0x1494c
mov ecx, 0x1e
call fcn.0040653c
call fcn.00402874
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 0
je 0x4cd450
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 3
jne 0x4cd467
mov ebx, 0x1e
lea esi, [ebp - 0x43c]
mov al, byte [esi]
sub al, byte [ebp - 0x14]
dec eax
mov byte [esi], al
inc esi
dec ebx
jne 0x4cd45b
mov ebx, 0xf
lea esi, [ebp - 0x43c]
lea eax, [ebp - 0x5e4]
mov dl, byte [esi]
call fcn.00403e74
mov edx, dword [ebp - 0x5e4]
lea eax, [ebp - 0x20]
call fcn.00403f54
inc esi
dec ebx
jne 0x4cd472
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0xe], 5
jne 0x4cd4d7
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebdc
push dword [ebp - 0x20]
push 0x4ced90
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0xe], 6
jne 0x4cd51d
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebdc
push dword [ebp - 0x20]
push 0x4ceda0
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 1
je 0x4cd551
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x28], 4
jne 0x4cd555
add dword [ebp - 0x30], 0x1e
mov eax, dword [ebp - 4]
add eax, 0xa80
mov edx, dword [ebp - 0x1c]
call fcn.00403d20
mov eax, dword [ebp - 0x1c]
call fcn.00409718
test al, al
je 0x4cd893
mov ebx, 1
lea edx, [ebp - 0x5e8]
mov eax, dword [ebp - 0x1c]
call fcn.00409830
mov edx, dword [ebp - 0x5e8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x1544c]
call fcn.0040405c
jne 0x4cd6bb
mov eax, dword [ebp - 4]
cmp dword [eax + ebx*4 + 0x158fc], 0
je 0x4cd605
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x158fc]
push eax
call sub.user32.dll_IsWindow
test eax, eax
je 0x4cd605
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x158fc]
push eax
call sub.user32.dll_SetForegroundWindow
push 9
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x158fc]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
push 5
lea edx, [ebp - 0x5ec]
mov eax, dword [ebp - 0x1c]
call fcn.004097fc
mov eax, dword [ebp - 0x5ec]
call fcn.00404110
push eax
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x1544c]
call fcn.00404110
push eax
push 0x4ceda8
mov eax, dword [0x503418]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
push eax
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
jbe 0x4cd6c8
lea edx, [ebp - 0x5f0]
mov eax, dword [ebp - 0x1c]
call fcn.00409830
mov edx, dword [ebp - 0x5f0]
mov eax, dword [ebp - 4]
lea eax, [eax + ebx*4 + 0x1544c]
call fcn.00403d20
mov eax, dword [ebp - 4]
mov dword [eax + 0x15db0], ebx
mov eax, dword [ebp - 4]
call fcn.004eb998
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x15db4], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4f0]
mov dl, 1
call fcn.00456a7c
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
inc ebx
cmp ebx, 0x12d
jne 0x4cd57a
cmp ebx, 0x12d
jne 0x4cd803
mov ebx, 1
mov eax, dword [ebp - 4]
cmp dword [eax + ebx*4 + 0x1544c], 0
je 0x4cd717
mov eax, dword [ebp - 4]
mov ecx, dword [eax + ebx*4 + 0x1544c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x153f8]
lea eax, [ebp - 0x5f4]
call fcn.00403f98
mov eax, dword [ebp - 0x5f4]
call fcn.00409718
test al, al
jne 0x4cd7f6
mov eax, dword [ebp - 4]
mov dword [eax + 0x15db0], ebx
lea edx, [ebp - 0x5f8]
mov eax, dword [ebp - 0x1c]
call fcn.00409830
mov edx, dword [ebp - 0x5f8]
mov eax, dword [ebp - 4]
lea eax, [eax + ebx*4 + 0x1544c]
call fcn.00403d20
push 5
lea edx, [ebp - 0x5fc]
mov eax, dword [ebp - 0x1c]
call fcn.004097fc
mov eax, dword [ebp - 0x5fc]
call fcn.00404110
push eax
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x1544c]
call fcn.00404110
push eax
push 0x4ceda8
mov eax, dword [0x503418]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
push eax
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
jbe 0x4cd7b0
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x15db4], edx
mov eax, dword [ebp - 4]
call fcn.004eb998
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4f0]
mov dl, 1
call fcn.00456a7c
jmp 0x4cd7d7
push 0
mov ecx, 0x4cedb0
mov edx, 0x4cedb8
mov eax, dword [0x503418]
mov eax, dword [eax]
call fcn.00453ae8
mov eax, dword [ebp - 4]
lea eax, [eax + ebx*4 + 0x1544c]
call fcn.00403ccc
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
inc ebx
cmp ebx, 0x12d
jne 0x4cd6d9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
add edx, 0x1505d
call fcn.00403ef0
mov eax, dword [ebp - 4]
call fcn.004cbb00
push 0
push 0x4cede0
push dword [ebp - 0x20]
push 0x4cee10
mov eax, dword [ebp - 4]
push dword [eax + 0x14780]
push 0x4cee20
lea eax, [ebp - 0x600]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 0x600]
call fcn.00404110
mov edx, eax
mov ecx, 0x4cedb0
mov eax, dword [0x503418]
mov eax, dword [eax]
call fcn.00453ae8
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
inc dword [ebp - 0x38]
cmp dword [ebp - 0xc], 0
jne 0x4cd8ba
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp byte [ecx + edx*8 + 0xe], 0xa
je 0x4cda0c
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov al, byte [edx + eax*8 + 0x28]
cmp al, 1
je 0x4cd8f0
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 4
jne 0x4cda0c
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov esi, dword [edx + eax*8 + 0x10]
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov dl, byte [edx + eax*8 + 0xe]
test dl, dl
je 0x4cd96a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp dl, 2
je 0x4cd96a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp dl, 0xa
je 0x4cd96a
mov ecx, dword [ebp - 8]
mov ebx, ecx
shl ecx, 3
sub ecx, ebx
mov ebx, dword [ebp - 4]
mov ebx, dword [ebx + 0x15030]
cmp dl, 1
jne 0x4cd9c6
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp dword [edx + eax*8 + 0x24], 0
jle 0x4cd9c6
cmp dword [ebp - 0xc], 0
jne 0x4cd98f
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
sub esi, dword [edx + eax*8 + 0x24]
jmp 0x4cd9c6
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov edx, dword [edx + eax*8 + 0x10]
add edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
sub edx, dword [ecx + eax*8 + 0x24]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov esi, dword [edx + eax*8 + 0x24]
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0xe], 0
jne 0x4cd9f7
mov eax, dword [ebp - 0x30]
push eax
push esi
push 6
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.004f49cc
jmp 0x4cda0c
mov eax, dword [ebp - 0x30]
push eax
push esi
push 1
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.004f49cc
cmp dword [ebp - 0xc], 0
jne 0x4cda30
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp byte [ecx + edx*8 + 0xe], 0xa
je 0x4cdb78
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov al, byte [edx + eax*8 + 0x28]
test al, al
je 0x4cda66
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 3
jne 0x4cdb78
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov esi, dword [edx + eax*8 + 0x10]
mov ebx, dword [ebp - 8]
mov eax, ebx
shl ebx, 3
sub ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov al, byte [eax + ebx*8 + 0xe]
test al, al
je 0x4cdab3
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 1
jne 0x4cdb4a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp dword [eax + ebx*8 + 0x24], 0
jle 0x4cdb4a
cmp dword [ebp - 0xc], 0
jne 0x4cdadc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
sub esi, dword [eax + ebx*8 + 0x24]
jmp 0x4cdb4a
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.004066c8
call fcn.00402874
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov edx, dword [edx + ebx*8 + 0x10]
add edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
sub edx, dword [eax + ebx*8 + 0x24]
sub edx, 4
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406a08
call fcn.00402874
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
add eax, 0x1494c
mov ecx, 4
call fcn.0040653c
call fcn.00402874
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov esi, dword [eax + ebx*8 + 0x24]
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.004066c8
call fcn.00402874
mov dword [ebp - 0x30], eax
push esi
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x1c]
push eax
push 1
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.004c5c58
xor eax, eax
push ebp
push 0x4cdbbc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp dword [edx + eax*8 + 0x10], 0
jle 0x4cdbb2
mov eax, dword [ebp - 4]
add eax, 0x1494c
call fcn.00406604
call fcn.00402874
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cdbc6
inc dword [ebp - 0x38]
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
movzx eax, byte [edx + eax*8 + 0xe]
cmp eax, 0x10
ja case.0x4cdbf0.0
mov al, byte [eax + 0x4cdbf7]
jmp dword [eax*4 + 0x4cdc08]
mov ebx, 1
mov eax, dword [ebp - 4]
cmp dword [eax + ebx*4 + 0x1544c], 0
je 0x4cdc60
lea edx, [ebp - 0x604]
mov eax, dword [ebp - 0x1c]
call fcn.004097fc
lea eax, [ebp - 0x604]
mov edx, dword [ebp - 4]
mov edx, dword [edx + ebx*4 + 0x1544c]
call fcn.00403f54
mov eax, dword [ebp - 0x604]
call fcn.00409718
test al, al
jne 0x4cdd2d
mov eax, dword [ebp - 4]
mov dword [eax + 0x15db0], ebx
lea edx, [ebp - 0x608]
mov eax, dword [ebp - 0x1c]
call fcn.00409830
mov edx, dword [ebp - 0x608]
mov eax, dword [ebp - 4]
lea eax, [eax + ebx*4 + 0x1544c]
call fcn.00403d20
push 5
lea edx, [ebp - 0x60c]
mov eax, dword [ebp - 0x1c]
call fcn.004097fc
mov eax, dword [ebp - 0x60c]
call fcn.00404110
push eax
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + ebx*4 + 0x1544c]
call fcn.00404110
push eax
push 0x4ceda8
mov eax, dword [0x503418]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
push eax
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
jbe 0x4cdcf9
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x15db4], edx
mov eax, dword [ebp - 4]
call fcn.004eb998
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4f0]
mov dl, 1
call fcn.00456a7c
jmp 0x4cdd20
mov eax, dword [ebp - 4]
lea eax, [eax + ebx*4 + 0x1544c]
call fcn.00403ccc
push 0
mov ecx, 0x4cedb0
mov edx, 0x4cedb8
mov eax, dword [0x503418]
mov eax, dword [eax]
call fcn.00453ae8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
inc ebx
cmp ebx, 0x12d
jne 0x4cdc1d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
cmp dword [ebp - 0xc], 0
jne 0x4cdeee
cmp dword [ebp - 0x1c], 0
je 0x4cdd63
mov eax, dword [ebp - 0x1c]
call fcn.00409718
test al, al
jne 0x4cdd82
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14440]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
jmp 0x4cdd99
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov ebx, dword [ebp - 8]
mov eax, ebx
shl ebx, 3
sub ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp dword [eax + ebx*8 + 4], 0xffffffff
jne 0x4cddbb
mov eax, dword [ebp - 4]
call fcn.004d1a2c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
add byte [edx + 0x4cee30], bh
add byte [edx + 0x4cee30], bh
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8f8]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
cmp byte [eax + ebx*8 + 0x21], 0xa
jae 0x4cde2c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x460]
xor edx, edx
call fcn.00445a6c
jmp 0x4cde3c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x460]
mov dl, 1
call fcn.00445a6c
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.004e9184
mov eax, dword [ebp - 4]
call fcn.004cbb00
xor eax, eax
push ebp
push 0x4cde78
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cde82
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xc8]
xor eax, eax
push ebp
push 0x4cded0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7b4]
call fcn.00462394
test eax, eax
jne 0x4cdec6
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa2c]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cdeda
mov eax, dword [ebp - 4]
mov byte [eax + 0x15434], 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x14328], 0
cmp dword [ebp - 0xc], 1
jne 0x4cdf3c
cmp dword [ebp - 0x1c], 0
je 0x4cdf06
mov eax, dword [ebp - 0x1c]
call fcn.00409718
test al, al
jne 0x4cdf25
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14440]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x620]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
jmp 0x4cdf3c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x620]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
cmp dword [ebp - 0xc], 5
jne 0x4cdf8a
cmp dword [ebp - 0x1c], 0
je 0x4cdf54
mov eax, dword [ebp - 0x1c]
call fcn.00409718
test al, al
jne 0x4cdf73
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14440]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x454]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
jmp 0x4cdf8a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x454]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
cmp dword [ebp - 0x1c], 0
je 0x4cdf9c
mov eax, dword [ebp - 0x1c]
call fcn.00409718
test al, al
jne 0x4cdfd4
xor eax, eax
push ebp
push 0x4cdfc5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14440]
call fcn.00402f80
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea05
mov eax, dword [ebp - 0x1c]
call fcn.00409764
jmp 0x4cea05
mov ebx, dword [ebp - 8]
mov eax, ebx
shl ebx, 3
sub ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
mov al, byte [eax + ebx*8 + 0xe]
cmp al, 0x10
je 0x4ce05c
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xf
je 0x4ce05c
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xe
je 0x4ce05c
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xb
je 0x4ce05c
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xc
jne 0x4ce223
xor eax, eax
mov dword [ebp - 0x3c], eax
push 0x4cee3c
lea edx, [ebp - 0x610]
mov eax, dword [ebp - 8]
call fcn.00409428
push dword [ebp - 0x610]
push 0x4cef50
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040400c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15030]
movzx eax, byte [eax + ebx*8 + 0xe]
add eax, 0xfffffff5
cmp eax, 5
ja case.0x4ce0a2.13
jmp dword [eax*4 + 0x4ce0a9]
lea eax, [ebp - 0x20]
mov edx, 0x4cef5c
call fcn.00403f54
jmp case.0x4ce0a2.13
lea eax, [ebp - 0x20]
mov edx, 0x4cef68
call fcn.00403f54
jmp case.0x4ce0a2.13
lea eax, [ebp - 0x20]
mov edx, 0x4cef74
call fcn.00403f54
jmp case.0x4ce0a2.13
lea eax, [ebp - 0x20]
mov edx, 0x4cef80
call fcn.00403f54
jmp case.0x4ce0a2.13
lea eax, [ebp - 0x20]
mov edx, 0x4cef8c
call fcn.00403f54
push dword [ebp - 0x20]
push 0x4cef98
push 0x4cefa8
push 0x4cefb4
push 0x4cefa8
push 0x4cefc4
lea eax, [ebp - 0x20]
mov edx, 6
call fcn.0040400c
mov eax, dword [ebp - 4]
inc dword [eax + 0x164e0]
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4cebfc
lea edx, [ebp - 0x614]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x164e0]
call fcn.00409428
push dword [ebp - 0x614]
push 0x4cefd4
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
test eax, eax
jle 0x4ce1a4
mov ebx, 1
lea esi, [ebp - 0x43c]
mov edx, dword [ebp - 0x20]
mov dl, byte [edx + ebx - 1]
mov byte [esi], dl
inc ebx
inc esi
dec eax
jne 0x4ce196
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x588]
call fcn.0040649a
mov eax, dword [0x5034b8]
mov byte [eax], 2
mov edx, 1
lea eax, [ebp - 0x588]
call fcn.004069e8
call fcn.00402874
lea eax, [ebp - 0x588]
call fcn.0040670c
call fcn.00402874
mov edx, eax
lea eax, [ebp - 0x588]
call fcn.00406a08
call fcn.00402874
push 0
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov ecx, eax
lea edx, [ebp - 0x43c]
lea eax, [ebp - 0x588]
call fcn.004065a0
call fcn.00402874
lea eax, [ebp - 0x588]
call fcn.00406604
call fcn.00402874
lea eax, [ebp - 0x20]
call fcn.00403ccc
mov eax, dword [ebp - 4]
xor ebx, ebx
mov bl, byte [eax + 0x152ae]
cmp ebx, 1
jl 0x4ce243
cmp ebx, 0xc8
jle 0x4ce248
mov ebx, 0x19
mov eax, dword [ebp - 4]
cmp byte [eax + 0x152ad], 0
jne 0x4ce4e7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
cmp byte [eax + 0x1f6], 1
jne 0x4ce4e7
mov edx, dword [ebp - 0x1c]
mov eax, 0x4cefd4
call fcn.00404238
test eax, eax
jle 0x4ce4e7
push 0x4cefe4
lea edx, [ebp - 0x618]
mov eax, ebx
call fcn.00409428
push dword [ebp - 0x618]
push 0x4cf060
push 0x4cefa8
push 0x4cf06c
push 0x4cefa8
push 0x4cf078
push 0x4cefa8
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040400c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
cmp byte [eax + 0x1f6], 1
jne 0x4ce341
mov edx, dword [ebp - 0x1c]
mov eax, 0x4cefd4
call fcn.00404238
test eax, eax
jle 0x4ce341
mov eax, dword [ebp - 4]
cmp byte [eax + 0x15402], 2
je 0x4ce30f
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x29], 1
jne 0x4ce341
push dword [ebp - 0x20]
push 0x4cf090
push 0x4cefa8
push 0x4cf0b4
mov eax, dword [ebp - 4]
push dword [eax + 0xa68]
push 0x4cf0c0
push 0x4cefa8
lea eax, [ebp - 0x20]
mov edx, 7
call fcn.0040400c
push dword [ebp - 0x20]
push 0x4cf0d0
push 0x4cefa8
push 0x4cf0f0
push 0x4cefa8
push 0x4cf114
push 0x4cefa8
push 0x4cf120
push 0x4cefa8
push 0x4cf140
push 0x4cefa8
push 0x4cf14c
push 0x4cefa8
push 0x4cf17c
push 0x4cefa8
push 0x4cf1a8
push 0x4cefa8
push 0x4cf1e0
push 0x4cefa8
push 0x4cf204
push 0x4cefa8
push 0x4cf210
push 0x4cefa8
push 0x4cf234
push 0x4cefa8
lea eax, [ebp - 0x20]
mov edx, 0x19
call fcn.0040400c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
cmp byte [eax + 0x1f6], 1
jne 0x4ce436
mov edx, dword [ebp - 0x1c]
mov eax, 0x4cefd4
call fcn.00404238
test eax, eax
jle 0x4ce436
mov eax, dword [ebp - 4]
cmp byte [eax + 0x15402], 2
je 0x4ce412
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x29], 1
jne 0x4ce436
push dword [ebp - 0x20]
push 0x4cf25c
push 0x4cefa8
push 0x4cf2a8
push 0x4cefa8
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.0040400c
lea eax, [ebp - 0x20]
mov edx, 0x4cf2f0
call fcn.00403f54
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
test eax, eax
jle 0x4ce468
mov ebx, 1
lea esi, [ebp - 0x43c]
mov edx, dword [ebp - 0x20]
mov dl, byte [edx + ebx - 1]
mov byte [esi], dl
inc ebx
inc esi
dec eax
jne 0x4ce45a
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x588]
call fcn.0040649a
mov eax, dword [0x5034b8]
mov byte [eax], 2
mov edx, 1
lea eax, [ebp - 0x588]
call fcn.004069d1
call fcn.00402874
lea eax, [ebp - 0x588]
call fcn.0040670c
call fcn.00402874
mov edx, eax
lea eax, [ebp - 0x588]
call fcn.00406a08
call fcn.00402874
push 0
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov ecx, eax
lea edx, [ebp - 0x43c]
lea eax, [ebp - 0x588]
call fcn.004065a0
call fcn.00402874
lea eax, [ebp - 0x588]
call fcn.00406604
call fcn.00402874
cmp dword [ebp - 0x20], 0
jne 0x4ce632
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
cmp byte [eax + 0x1f6], 1
jne 0x4ce632
mov edx, dword [ebp - 0x1c]
mov eax, 0x4cefd4
call fcn.00404238
test eax, eax
jle 0x4ce632
mov eax, dword [ebp - 4]
cmp byte [eax + 0x15402], 2
je 0x4ce546
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp byte [edx + eax*8 + 0x29], 1
jne 0x4ce632
push 0x4cf304
mov eax, dword [ebp - 4]
push dword [eax + 0xa68]
push 0x4cf35c
push 0x4cefa8
push 0x4cf36c
push 0x4cefa8
push 0x4cf390
push 0x4cefa8
push 0x4cf3dc
push 0x4cefa8
push 0x4cf424
lea eax, [ebp - 0x20]
mov edx, 0xb
call fcn.0040400c
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
test eax, eax
jle 0x4ce5b3
mov ebx, 1
lea esi, [ebp - 0x43c]
mov edx, dword [ebp - 0x20]
mov dl, byte [edx + ebx - 1]
mov byte [esi], dl
inc ebx
inc esi
dec eax
jne 0x4ce5a5
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x588]
call fcn.0040649a
mov eax, dword [0x5034b8]
mov byte [eax], 2
mov edx, 1
lea eax, [ebp - 0x588]
call fcn.004069d1
call fcn.00402874
lea eax, [ebp - 0x588]
call fcn.0040670c
call fcn.00402874
mov edx, eax
lea eax, [ebp - 0x588]
call fcn.00406a08
call fcn.00402874
push 0
mov eax, dword [ebp - 0x20]
call fcn.00403f4c
mov ecx, eax
lea edx, [ebp - 0x43c]
lea eax, [ebp - 0x588]
call fcn.004065a0
call fcn.00402874
lea eax, [ebp - 0x588]
call fcn.00406604
call fcn.00402874
cmp dword [ebp - 0xc], 5
jne 0x4ce731
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov al, byte [edx + eax*8 + 0xe]
cmp al, 2
je 0x4ce689
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 1
je 0x4ce689
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xa
jne 0x4ce731
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
cmp dword [edx + eax*8 + 0x24], 0
jne 0x4ce6d2
mov eax, dword [ebp - 4]
add eax, 0x14944
mov edx, dword [ebp - 0x1c]
call fcn.00403d20
mov eax, dword [ebp - 4]
mov byte [eax + 0x14419], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x51c]
mov edx, 0x4cf434
call fcn.0047d620
jmp 0x4ce724
cmp dword [ebp - 0x1c], 0
jne 0x4ce705
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14440]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x454]
mov eax, dword [eax + 0x23c]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14440]
call fcn.00402f80
jmp 0x4ce724
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x454]
mov eax, dword [eax + 0x23c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x1c]
call fcn.00409764
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x14920]
cmp ebx, dword [ebp - 8]
je 0x4ce82f
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x620]
mov eax, ebx
call fcn.00409428
push dword [ebp - 0x620]
push 0x4ceb6c
lea eax, [ebp - 0x61c]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 0x61c]
call fcn.00409764
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb0c
lea edx, [ebp - 0x628]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14920]
call fcn.00409428
push dword [ebp - 0x628]
push 0x4ceb7c
lea eax, [ebp - 0x624]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 0x624]
call fcn.00409764
mov eax, dword [ebp - 4]
push dword [eax + 0x153f8]
mov eax, dword [ebp - 4]
push dword [eax + 0x1544c]
push 0x4ceb4c
lea edx, [ebp - 0x630]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x14920]
call fcn.00409428
push dword [ebp - 0x630]
push 0x4ceb5c
lea eax, [ebp - 0x62c]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 0x62c]
call fcn.00409764
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [eax + 0x14920], edx
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp dword [ecx + edx*8 + 4], 0xffffffff
jne 0x4ce937
mov eax, dword [ebp - 8]
mov edx, eax
shl eax, 3
sub eax, edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x15030]
mov al, byte [edx + eax*8 + 0xe]
cmp al, 0xb
je 0x4ce8a6
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xc
je 0x4ce8a6
mov edx, dword [ebp - 8]
mov ecx, edx
shl edx, 3
sub edx, ecx
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x15030]
cmp al, 0xe
jne 0x4ce937
mov eax, dword [ebp - 4]
mov byte [eax + 0x1444d], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x92c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov eax, dword [ebp - 4]
add eax, 0x14924
mov edx, dword [ebp - 0x1c]
call fcn.00403d20
mov eax, dword [0x503460]
cmp dword [eax], 0
jne 0x4ce8f2
mov ecx, dword [0x503460]
mov eax, dword [0x503418]
mov eax, dword [eax]
mov edx, dword [0x4b5b4c]
call fcn.00453910
mov eax, dword [0x503460]
mov eax, dword [eax]
call fcn.0045085c
lea eax, [ebp - 0x634]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x14924]
call fcn.004044d4
mov edx, dword [ebp - 0x634]
mov eax, dword [0x503460]
mov eax, dword [eax]
mov eax, dword [eax + 0x2d0]
call fcn.0047d620
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea85
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x608]
mov edx, 0x4cec50
call fcn.00435448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
mov dl, 1
call fcn.00435330
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8bc]
call fcn.0043565c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8fc]
xor edx, edx
call fcn.00435330
mov eax, dword [ebp - 4]
add eax, 0x14948
mov edx, dword [ebp - 0x1c]
call fcn.00403d20
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.004cf44c
mov eax, dword [ebp - 4]
mov byte [eax + 0x14328], 0
jmp 0x4cea05
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
add edx, 0x1505d
call fcn.00403ef0
mov eax, dword [ebp - 4]
call fcn.004cbb00
push 0
push 0x4cede0
push dword [ebp - 0x20]
push 0x4cee10
mov eax, dword [ebp - 4]
push dword [eax + 0x14780]
push 0x4cee20
lea eax, [ebp - 0x638]
mov edx, 5
call fcn.0040400c
mov eax, dword [ebp - 0x638]
call fcn.00404110
mov edx, eax
mov ecx, 0x4cedb0
mov eax, dword [0x503418]
mov eax, dword [eax]
call fcn.00453ae8
inc dword [ebp - 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4cea7a
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004cbf9c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ceafb
lea eax, [ebp - 0x638]
call fcn.00403ccc
lea eax, [ebp - 0x634]
call fcn.00404390
lea eax, [ebp - 0x630]
mov edx, 0x17
call fcn.00403cf0
lea eax, [ebp - 0x5d4]
mov edx, dword [0x4011b0]
mov ecx, 2
call fcn.00404748
lea eax, [ebp - 0x5cc]
mov edx, 0x11
call fcn.00403cf0
lea eax, [ebp - 0x2c]
call fcn.00403ccc
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00403cf0
ret