Function at 0x4a8458
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x49
push 0
push 0
dec ecx
jne 0x4a8460
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x4a9fdd
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [esi + 0x2f4]
call fcn.00470e78
test eax, eax
jne 0x4a8498
mov eax, 0x4a9ff4
call fcn.0043ca5c
jmp 0x4a9fa2
mov eax, dword [esi + 0x2f4]
call fcn.00470e78
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.004048c8
mov eax, dword [esi + 0x2f4]
call fcn.00470e78
mov esi, eax
jmp 0x4a84c6
mov eax, esi
call fcn.0046e91c
mov esi, eax
mov eax, esi
call fcn.0046e91c
test eax, eax
jne 0x4a84bd
test esi, esi
je 0x4a9fa2
mov byte [ebp - 9], 1
mov eax, esi
call fcn.0046ea68
test eax, eax
je 0x4a84fa
mov eax, esi
call fcn.0046ea68
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.004048c8
mov edx, dword [ebp - 4]
mov eax, 0x4aa030
call fcn.00404e24
test eax, eax
jg 0x4a8561
mov eax, esi
call fcn.0046ec78
mov edi, eax
dec edi
test edi, edi
jl 0x4a8561
inc edi
xor ebx, ebx
mov edx, ebx
mov eax, esi
call fcn.0046eba4
test eax, eax
je 0x4a855d
mov edx, ebx
mov eax, esi
call fcn.0046eba4
mov edx, dword [eax + 8]
mov eax, 0x4aa030
call fcn.00404e24
test eax, eax
jle 0x4a855d
mov edx, ebx
mov eax, esi
call fcn.0046eba4
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.004048c8
mov byte [ebp - 9], 0
jmp 0x4a8561
inc ebx
dec edi
jne 0x4a851c
cmp byte [ebp - 9], 0
jne 0x4a8588
mov edx, ebx
mov eax, esi
call fcn.0046eba4
call fcn.0046ea68
call fcn.0046eac4
call fcn.0046eac4
call fcn.0046eac4
mov ebx, eax
jmp 0x4a8591
mov eax, esi
call fcn.0046ea68
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 8]
call fcn.004048c8
mov edx, dword [ebp - 4]
mov eax, 0x4aa040
call fcn.00404e24
test eax, eax
jle 0x4a85c8
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp - 4]
call fcn.00404ae8
mov ecx, eax
mov edx, 9
mov eax, dword [ebp - 4]
call fcn.00404d40
mov ebx, 1
jmp 0x4a85e7
mov eax, dword [ebp - 4]
cmp byte [eax + ebx - 1], 0x20
jne 0x4a85e6
lea eax, [ebp - 4]
call fcn.00404d38
mov byte [eax + ebx - 1], 0x2b
inc ebx
mov eax, dword [ebp - 4]
call fcn.00404ae8
cmp ebx, eax
jle 0x4a85cf
push 0x4aa050
push dword [ebp - 4]
push 0x4aa078
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404ba8
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.00408be0
mov edx, dword [ebp - 0x10]
mov eax, 0x4aa08c
call fcn.00404e24
test eax, eax
jg 0x4a863a
mov edx, dword [ebp - 8]
mov eax, 0x4aa0b0
call fcn.00404e24
test eax, eax
jle 0x4a8647
lea eax, [ebp - 8]
mov edx, 0x4aa0bc
call fcn.004048c8
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x14]
mov eax, 0x4aa0d8
call fcn.00404e24
test eax, eax
jle 0x4a8670
lea eax, [ebp - 8]
mov edx, 0x4aa0e8
call fcn.004048c8
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x18]
mov eax, 0x4aa10c
call fcn.00404e24
test eax, eax
jg 0x4a86c4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1c]
mov eax, 0x4aa11c
call fcn.00404e24
test eax, eax
jg 0x4a86c4
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x20]
mov eax, 0x4aa130
call fcn.00404e24
test eax, eax
jle 0x4a86d1
lea eax, [ebp - 8]
mov edx, 0x4aa144
call fcn.004048c8
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x24]
mov eax, 0x4aa164
call fcn.00404e24
test eax, eax
jle 0x4a86fa
lea eax, [ebp - 8]
mov edx, 0x4aa178
call fcn.004048c8
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x28]
mov eax, 0x4aa19c
call fcn.00404e24
test eax, eax
jle 0x4a8723
lea eax, [ebp - 8]
mov edx, 0x4aa1ac
call fcn.004048c8
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x2c]
mov eax, 0x4aa1cc
call fcn.00404e24
test eax, eax
jle 0x4a874c
lea eax, [ebp - 8]
mov edx, 0x4aa1dc
call fcn.004048c8
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x30]
mov eax, 0x4aa1f8
call fcn.00404e24
test eax, eax
jle 0x4a8775
lea eax, [ebp - 8]
mov edx, 0x4aa208
call fcn.004048c8
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x34]
mov eax, 0x4aa228
call fcn.00404e24
test eax, eax
jle 0x4a879e
lea eax, [ebp - 8]
mov edx, 0x4aa238
call fcn.004048c8
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x38]
mov eax, 0x4aa258
call fcn.00404e24
test eax, eax
jle 0x4a87c7
lea eax, [ebp - 8]
mov edx, 0x4aa26c
call fcn.004048c8
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x3c]
mov eax, 0x4aa28c
call fcn.00404e24
test eax, eax
jle 0x4a87f0
lea eax, [ebp - 8]
mov edx, 0x4aa29c
call fcn.004048c8
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x40]
mov eax, 0x4aa2c0
call fcn.00404e24
test eax, eax
jg 0x4a8828
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x44]
mov eax, 0x4aa2cc
call fcn.00404e24
test eax, eax
jle 0x4a8835
lea eax, [ebp - 8]
mov edx, 0x4aa2ec
call fcn.004048c8
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x48]
mov eax, 0x4aa308
call fcn.00404e24
test eax, eax
jle 0x4a885e
lea eax, [ebp - 8]
mov edx, 0x4aa318
call fcn.004048c8
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x4c]
mov eax, 0x4aa338
call fcn.00404e24
test eax, eax
jle 0x4a8887
lea eax, [ebp - 8]
mov edx, 0x4aa348
call fcn.004048c8
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x50]
mov eax, 0x4aa368
call fcn.00404e24
test eax, eax
jle 0x4a88b0
lea eax, [ebp - 8]
mov edx, 0x4aa374
call fcn.004048c8
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x54]
mov eax, 0x4aa398
call fcn.00404e24
test eax, eax
jle 0x4a88d9
lea eax, [ebp - 8]
mov edx, 0x4aa3a8
call fcn.004048c8
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x58]
mov eax, 0x4aa3c8
call fcn.00404e24
test eax, eax
jle 0x4a8902
lea eax, [ebp - 8]
mov edx, 0x4aa3d8
call fcn.004048c8
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x5c]
mov eax, 0x4aa3f4
call fcn.00404e24
test eax, eax
jle 0x4a892b
lea eax, [ebp - 8]
mov edx, 0x4aa408
call fcn.004048c8
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x60]
mov eax, 0x4aa428
call fcn.00404e24
test eax, eax
jle 0x4a8954
lea eax, [ebp - 8]
mov edx, 0x4aa438
call fcn.004048c8
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x64]
mov eax, 0x4aa454
call fcn.00404e24
test eax, eax
jle 0x4a897d
lea eax, [ebp - 8]
mov edx, 0x4aa468
call fcn.004048c8
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x68]
mov eax, 0x4aa48c
call fcn.00404e24
test eax, eax
jle 0x4a89a6
lea eax, [ebp - 8]
mov edx, 0x4aa49c
call fcn.004048c8
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x6c]
mov eax, 0x4aa4bc
call fcn.00404e24
test eax, eax
jle 0x4a89cf
lea eax, [ebp - 8]
mov edx, 0x4aa4cc
call fcn.004048c8
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x70]
mov eax, 0x4aa4ec
call fcn.00404e24
test eax, eax
jle 0x4a89f8
lea eax, [ebp - 8]
mov edx, 0x4aa4fc
call fcn.004048c8
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x74]
mov eax, 0x4aa51c
call fcn.00404e24
test eax, eax
jle 0x4a8a21
lea eax, [ebp - 8]
mov edx, 0x4aa52c
call fcn.004048c8
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x78]
mov eax, 0x4aa548
call fcn.00404e24
test eax, eax
jle 0x4a8a4a
lea eax, [ebp - 8]
mov edx, 0x4aa55c
call fcn.004048c8
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x7c]
mov eax, 0x4aa57c
call fcn.00404e24
test eax, eax
jle 0x4a8a73
lea eax, [ebp - 8]
mov edx, 0x4aa58c
call fcn.004048c8
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x80]
mov eax, 0x4aa5b0
call fcn.00404e24
test eax, eax
jle 0x4a8a9c
lea eax, [ebp - 8]
mov edx, 0x4aa58c
call fcn.004048c8
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x84]
mov eax, 0x4aa5c0
call fcn.00404e24
test eax, eax
jle 0x4a8acb
lea eax, [ebp - 8]
mov edx, 0x4aa5d0
call fcn.004048c8
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x88]
mov eax, 0x4aa5f0
call fcn.00404e24
test eax, eax
jle 0x4a8afa
lea eax, [ebp - 8]
mov edx, 0x4aa604
call fcn.004048c8
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x8c]
mov eax, 0x4aa624
call fcn.00404e24
test eax, eax
jle 0x4a8b29
lea eax, [ebp - 8]
mov edx, 0x4aa634
call fcn.004048c8
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x90]
mov eax, 0x4aa65c
call fcn.00404e24
test eax, eax
jle 0x4a8b58
lea eax, [ebp - 8]
mov edx, 0x4aa66c
call fcn.004048c8
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x94]
mov eax, 0x4aa68c
call fcn.00404e24
test eax, eax
jle 0x4a8b87
lea eax, [ebp - 8]
mov edx, 0x4aa6a0
call fcn.004048c8
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x98]
mov eax, 0x4aa6c0
call fcn.00404e24
test eax, eax
jle 0x4a8bb6
lea eax, [ebp - 8]
mov edx, 0x4aa6d4
call fcn.004048c8
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x9c]
mov eax, 0x4aa6f4
call fcn.00404e24
test eax, eax
jle 0x4a8be5
lea eax, [ebp - 8]
mov edx, 0x4aa704
call fcn.004048c8
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xa0]
mov eax, 0x4aa724
call fcn.00404e24
test eax, eax
jle 0x4a8c14
lea eax, [ebp - 8]
mov edx, 0x4aa734
call fcn.004048c8
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xa4]
mov eax, 0x4aa754
call fcn.00404e24
test eax, eax
jle 0x4a8c43
lea eax, [ebp - 8]
mov edx, 0x4aa764
call fcn.004048c8
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xa8]
mov eax, 0x4aa784
call fcn.00404e24
test eax, eax
jle 0x4a8c72
lea eax, [ebp - 8]
mov edx, 0x4aa794
call fcn.004048c8
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xac]
mov eax, 0x4aa7b4
call fcn.00404e24
test eax, eax
jle 0x4a8ca1
lea eax, [ebp - 8]
mov edx, 0x4aa7c4
call fcn.004048c8
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xb0]
mov eax, 0x4aa7e4
call fcn.00404e24
test eax, eax
jle 0x4a8cd0
lea eax, [ebp - 8]
mov edx, 0x4aa7f4
call fcn.004048c8
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xb4]
mov eax, 0x4aa814
call fcn.00404e24
test eax, eax
jle 0x4a8cff
lea eax, [ebp - 8]
mov edx, 0x4aa824
call fcn.004048c8
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xb8]
mov eax, 0x4aa844
call fcn.00404e24
test eax, eax
jle 0x4a8d2e
lea eax, [ebp - 8]
mov edx, 0x4aa854
call fcn.004048c8
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xbc]
mov eax, 0x4aa874
call fcn.00404e24
test eax, eax
jle 0x4a8d5d
lea eax, [ebp - 8]
mov edx, 0x4aa888
call fcn.004048c8
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xc0]
mov eax, 0x4aa8ac
call fcn.00404e24
test eax, eax
jle 0x4a8d8c
lea eax, [ebp - 8]
mov edx, 0x4aa8bc
call fcn.004048c8
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xc4]
mov eax, 0x4aa8dc
call fcn.00404e24
test eax, eax
jle 0x4a8dbb
lea eax, [ebp - 8]
mov edx, 0x4aa2ec
call fcn.004048c8
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xc8]
mov eax, 0x4aa8ec
call fcn.00404e24
test eax, eax
jle 0x4a8dea
lea eax, [ebp - 8]
mov edx, 0x4aa8fc
call fcn.004048c8
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xcc]
mov eax, 0x4aa91c
call fcn.00404e24
test eax, eax
jle 0x4a8e19
lea eax, [ebp - 8]
mov edx, 0x4aa92c
call fcn.004048c8
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xd0]
mov eax, 0x4aa94c
call fcn.00404e24
test eax, eax
jle 0x4a8e48
lea eax, [ebp - 8]
mov edx, 0x4aa95c
call fcn.004048c8
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xd4]
mov eax, 0x4aa97c
call fcn.00404e24
test eax, eax
jle 0x4a8e77
lea eax, [ebp - 8]
mov edx, 0x4aa98c
call fcn.004048c8
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xd8]
mov eax, 0x4aa9ac
call fcn.00404e24
test eax, eax
jle 0x4a8ea6
lea eax, [ebp - 8]
mov edx, 0x4aa9bc
call fcn.004048c8
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xdc]
mov eax, 0x4aa9d8
call fcn.00404e24
test eax, eax
jle 0x4a8ed5
lea eax, [ebp - 8]
mov edx, 0x4aa9e8
call fcn.004048c8
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xe0]
mov eax, 0x4aaa04
call fcn.00404e24
test eax, eax
jle 0x4a8f04
lea eax, [ebp - 8]
mov edx, 0x4aaa14
call fcn.004048c8
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xe4]
mov eax, 0x4aaa34
call fcn.00404e24
test eax, eax
jle 0x4a8f33
lea eax, [ebp - 8]
mov edx, 0x4aaa40
call fcn.004048c8
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xe8]
mov eax, 0x4aaa5c
call fcn.00404e24
test eax, eax
jle 0x4a8f62
lea eax, [ebp - 8]
mov edx, 0x4aaa6c
call fcn.004048c8
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xec]
mov eax, 0x4aaa8c
call fcn.00404e24
test eax, eax
jle 0x4a8f91
lea eax, [ebp - 8]
mov edx, 0x4aaaa0
call fcn.004048c8
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xf0]
mov eax, 0x4aaac0
call fcn.00404e24
test eax, eax
jle 0x4a8fc0
lea eax, [ebp - 8]
mov edx, 0x4aaad4
call fcn.004048c8
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xf4]
mov eax, 0x4aaaf4
call fcn.00404e24
test eax, eax
jle 0x4a8fef
lea eax, [ebp - 8]
mov edx, 0x4aab04
call fcn.004048c8
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xf8]
mov eax, 0x4aab24
call fcn.00404e24
test eax, eax
jle 0x4a901e
lea eax, [ebp - 8]
mov edx, 0x4aab34
call fcn.004048c8
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0xfc]
mov eax, 0x4aab54
call fcn.00404e24
test eax, eax
jle 0x4a904d
lea eax, [ebp - 8]
mov edx, 0x4aab64
call fcn.004048c8
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x100]
mov eax, 0x4aab84
call fcn.00404e24
test eax, eax
jle 0x4a907c
lea eax, [ebp - 8]
mov edx, 0x4aab94
call fcn.004048c8
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x104]
mov eax, 0x4aabb4
call fcn.00404e24
test eax, eax
jle 0x4a90ab
lea eax, [ebp - 8]
mov edx, 0x4aabc4
call fcn.004048c8
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x108]
mov eax, 0x4aabe4
call fcn.00404e24
test eax, eax
jle 0x4a90da
lea eax, [ebp - 8]
mov edx, 0x4aabf8
call fcn.004048c8
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x10c]
mov eax, 0x4aac1c
call fcn.00404e24
test eax, eax
jle 0x4a9109
lea eax, [ebp - 8]
mov edx, 0x4aac2c
call fcn.004048c8
lea edx, [ebp - 0x110]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x110]
mov eax, 0x4aac4c
call fcn.00404e24
test eax, eax
jle 0x4a9138
lea eax, [ebp - 8]
mov edx, 0x4aac5c
call fcn.004048c8
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x114]
mov eax, 0x4aac80
call fcn.00404e24
test eax, eax
jle 0x4a9167
lea eax, [ebp - 8]
mov edx, 0x4aac94
call fcn.004048c8
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x118]
mov eax, 0x4aacbc
call fcn.00404e24
test eax, eax
jle 0x4a9196
lea eax, [ebp - 8]
mov edx, 0x4aaccc
call fcn.004048c8
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x11c]
mov eax, 0x4aacec
call fcn.00404e24
test eax, eax
jle 0x4a91c5
lea eax, [ebp - 8]
mov edx, 0x4aacfc
call fcn.004048c8
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x120]
mov eax, 0x4aad1c
call fcn.00404e24
test eax, eax
jle 0x4a91f4
lea eax, [ebp - 8]
mov edx, 0x4aad2c
call fcn.004048c8
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x124]
mov eax, 0x4aad4c
call fcn.00404e24
test eax, eax
jle 0x4a9223
lea eax, [ebp - 8]
mov edx, 0x4aad5c
call fcn.004048c8
lea edx, [ebp - 0x128]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x128]
mov eax, 0x4aad7c
call fcn.00404e24
test eax, eax
jle 0x4a9252
lea eax, [ebp - 8]
mov edx, 0x4aad8c
call fcn.004048c8
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x12c]
mov eax, 0x4aadac
call fcn.00404e24
test eax, eax
jle 0x4a9281
lea eax, [ebp - 8]
mov edx, 0x4aadbc
call fcn.004048c8
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x130]
mov eax, 0x4aadf8
call fcn.00404e24
test eax, eax
jle 0x4a92b0
lea eax, [ebp - 8]
mov edx, 0x4aae08
call fcn.004048c8
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x134]
mov eax, 0x4aae2c
call fcn.00404e24
test eax, eax
jle 0x4a92df
lea eax, [ebp - 8]
mov edx, 0x4aae3c
call fcn.004048c8
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x138]
mov eax, 0x4aae5c
call fcn.00404e24
test eax, eax
jle 0x4a930e
lea eax, [ebp - 8]
mov edx, 0x4aae6c
call fcn.004048c8
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x13c]
mov eax, 0x4aae8c
call fcn.00404e24
test eax, eax
jle 0x4a933d
lea eax, [ebp - 8]
mov edx, 0x4aae9c
call fcn.004048c8
lea edx, [ebp - 0x140]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x140]
mov eax, 0x4aaeb8
call fcn.00404e24
test eax, eax
jle 0x4a936c
lea eax, [ebp - 8]
mov edx, 0x4aaec8
call fcn.004048c8
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x144]
mov eax, 0x4aaeec
call fcn.00404e24
test eax, eax
jle 0x4a939b
lea eax, [ebp - 8]
mov edx, 0x4aaefc
call fcn.004048c8
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x148]
mov eax, 0x4aaf18
call fcn.00404e24
test eax, eax
jle 0x4a93ca
lea eax, [ebp - 8]
mov edx, 0x4aaf28
call fcn.004048c8
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x14c]
mov eax, 0x4aaf48
call fcn.00404e24
test eax, eax
jle 0x4a93f9
lea eax, [ebp - 8]
mov edx, 0x4aaf58
call fcn.004048c8
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x150]
mov eax, 0x4aaf78
call fcn.00404e24
test eax, eax
jle 0x4a9428
lea eax, [ebp - 8]
mov edx, 0x4aaf8c
call fcn.004048c8
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x154]
mov eax, 0x4aafb0
call fcn.00404e24
test eax, eax
jle 0x4a9457
lea eax, [ebp - 8]
mov edx, 0x4aafc0
call fcn.004048c8
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x158]
mov eax, 0x4aafe0
call fcn.00404e24
test eax, eax
jle 0x4a9486
lea eax, [ebp - 8]
mov edx, 0x4aaff0
call fcn.004048c8
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x15c]
mov eax, 0x4ab010
call fcn.00404e24
test eax, eax
jle 0x4a94b5
lea eax, [ebp - 8]
mov edx, 0x4ab020
call fcn.004048c8
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x160]
mov eax, 0x4ab040
call fcn.00404e24
test eax, eax
jle 0x4a94e4
lea eax, [ebp - 8]
mov edx, 0x4ab050
call fcn.004048c8
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x164]
mov eax, 0x4ab070
call fcn.00404e24
test eax, eax
jle 0x4a9513
lea eax, [ebp - 8]
mov edx, 0x4ab080
call fcn.004048c8
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x168]
mov eax, 0x4ab0a0
call fcn.00404e24
test eax, eax
jle 0x4a9542
lea eax, [ebp - 8]
mov edx, 0x4ab0b0
call fcn.004048c8
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x16c]
mov eax, 0x4ab0d0
call fcn.00404e24
test eax, eax
jle 0x4a9571
lea eax, [ebp - 8]
mov edx, 0x4ab0b0
call fcn.004048c8
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x170]
mov eax, 0x4ab0e4
call fcn.00404e24
test eax, eax
jle 0x4a95a0
lea eax, [ebp - 8]
mov edx, 0x4ab0f4
call fcn.004048c8
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x174]
mov eax, 0x4ab110
call fcn.00404e24
test eax, eax
jle 0x4a95cf
lea eax, [ebp - 8]
mov edx, 0x4ab120
call fcn.004048c8
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x178]
mov eax, 0x4ab13c
call fcn.00404e24
test eax, eax
jle 0x4a95fe
lea eax, [ebp - 8]
mov edx, 0x4ab14c
call fcn.004048c8
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x17c]
mov eax, 0x4ab16c
call fcn.00404e24
test eax, eax
jle 0x4a962d
lea eax, [ebp - 8]
mov edx, 0x4ab17c
call fcn.004048c8
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x180]
mov eax, 0x4ab13c
call fcn.00404e24
test eax, eax
jle 0x4a965c
lea eax, [ebp - 8]
mov edx, 0x4ab14c
call fcn.004048c8
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x184]
mov eax, 0x4ab1a0
call fcn.00404e24
test eax, eax
jle 0x4a968b
lea eax, [ebp - 8]
mov edx, 0x4ab1b0
call fcn.004048c8
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x188]
mov eax, 0x4ab1d0
call fcn.00404e24
test eax, eax
jle 0x4a96ba
lea eax, [ebp - 8]
mov edx, 0x4ab1e0
call fcn.004048c8
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x18c]
mov eax, 0x4ab200
call fcn.00404e24
test eax, eax
jle 0x4a96e9
lea eax, [ebp - 8]
mov edx, 0x4ab210
call fcn.004048c8
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x190]
mov eax, 0x4ab234
call fcn.00404e24
test eax, eax
jle 0x4a9718
lea eax, [ebp - 8]
mov edx, 0x4ab240
call fcn.004048c8
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x194]
mov eax, 0x4ab268
call fcn.00404e24
test eax, eax
jle 0x4a9747
lea eax, [ebp - 8]
mov edx, 0x4ab278
call fcn.004048c8
lea edx, [ebp - 0x198]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x198]
mov eax, 0x4ab29c
call fcn.00404e24
test eax, eax
jle 0x4a9776
lea eax, [ebp - 8]
mov edx, 0x4ab278
call fcn.004048c8
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x19c]
mov eax, 0x4ab2ac
call fcn.00404e24
test eax, eax
jle 0x4a97a5
lea eax, [ebp - 8]
mov edx, 0x4ab2bc
call fcn.004048c8
lea edx, [ebp - 0x1a0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1a0]
mov eax, 0x4ab2dc
call fcn.00404e24
test eax, eax
jle 0x4a97d4
lea eax, [ebp - 8]
mov edx, 0x4ab2f0
call fcn.004048c8
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1a4]
mov eax, 0x4ab310
call fcn.00404e24
test eax, eax
jle 0x4a9803
lea eax, [ebp - 8]
mov edx, 0x4ab320
call fcn.004048c8
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1a8]
mov eax, 0x4ab348
call fcn.00404e24
test eax, eax
jle 0x4a9832
lea eax, [ebp - 8]
mov edx, 0x4ab358
call fcn.004048c8
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1ac]
mov eax, 0x4ab378
call fcn.00404e24
test eax, eax
jle 0x4a9861
lea eax, [ebp - 8]
mov edx, 0x4ab388
call fcn.004048c8
lea edx, [ebp - 0x1b0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1b0]
mov eax, 0x4ab3a8
call fcn.00404e24
test eax, eax
jle 0x4a9890
lea eax, [ebp - 8]
mov edx, 0x4ab388
call fcn.004048c8
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1b4]
mov eax, 0x4ab3bc
call fcn.00404e24
test eax, eax
jle 0x4a98bf
lea eax, [ebp - 8]
mov edx, 0x4ab3d0
call fcn.004048c8
lea edx, [ebp - 0x1b8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1b8]
mov eax, 0x4ab3f0
call fcn.00404e24
test eax, eax
jle 0x4a98ee
lea eax, [ebp - 8]
mov edx, 0x4ab400
call fcn.004048c8
lea edx, [ebp - 0x1bc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1bc]
mov eax, 0x4ab41c
call fcn.00404e24
test eax, eax
jle 0x4a991d
lea eax, [ebp - 8]
mov edx, 0x4ab42c
call fcn.004048c8
lea edx, [ebp - 0x1c0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1c0]
mov eax, 0x4ab44c
call fcn.00404e24
test eax, eax
jle 0x4a994c
lea eax, [ebp - 8]
mov edx, 0x4ab45c
call fcn.004048c8
lea edx, [ebp - 0x1c4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1c4]
mov eax, 0x4ab478
call fcn.00404e24
test eax, eax
jle 0x4a997b
lea eax, [ebp - 8]
mov edx, 0x4ab488
call fcn.004048c8
lea edx, [ebp - 0x1c8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1c8]
mov eax, 0x4ab4b0
call fcn.00404e24
test eax, eax
jle 0x4a99aa
lea eax, [ebp - 8]
mov edx, 0x4ab4c0
call fcn.004048c8
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1cc]
mov eax, 0x4ab4e0
call fcn.00404e24
test eax, eax
jle 0x4a99d9
lea eax, [ebp - 8]
mov edx, 0x4ab4f0
call fcn.004048c8
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1d0]
mov eax, 0x4ab510
call fcn.00404e24
test eax, eax
jle 0x4a9a08
lea eax, [ebp - 8]
mov edx, 0x4ab520
call fcn.004048c8
lea edx, [ebp - 0x1d4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1d4]
mov eax, 0x4ab540
call fcn.00404e24
test eax, eax
jle 0x4a9a37
lea eax, [ebp - 8]
mov edx, 0x4ab550
call fcn.004048c8
lea edx, [ebp - 0x1d8]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1d8]
mov eax, 0x4ab56c
call fcn.00404e24
test eax, eax
jle 0x4a9a66
lea eax, [ebp - 8]
mov edx, 0x4ab57c
call fcn.004048c8
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1dc]
mov eax, 0x4ab5ac
call fcn.00404e24
test eax, eax
jle 0x4a9a95
lea eax, [ebp - 8]
mov edx, 0x4aaa40
call fcn.004048c8
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1e0]
mov eax, 0x4ab5bc
call fcn.00404e24
test eax, eax
jle 0x4a9ac4
lea eax, [ebp - 8]
mov edx, 0x4ab5d0
call fcn.004048c8
lea edx, [ebp - 0x1e4]
mov eax, dword [ebp - 8]
call fcn.00408ba4
mov edx, dword [ebp - 0x1e4]
mov eax, 0x4ab5f4
call fcn.00404e24
test eax, eax
jle 0x4a9af3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a9fe4
lea eax, [ebp - 0x248]
mov edx, 0x64
call fcn.00404854
lea eax, [ebp - 0xb8]
mov edx, 0x2b
call fcn.00404854
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404854
ret