Function at 0x481010
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5eb56f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
push edi
mov edi, ecx
push esi
mov dword [esp + 0x6c], edi
call fcn.004eada0
add esp, 4
test eax, eax
jne 0x482195
mov ebp, dword [esi + 1]
inc esi
push ebp
call fcn.004f4060
add esp, 4
cmp eax, 0x5000000
jne 0x482185
cmp ebp, 0x500fffe
je 0x482185
lea eax, [edi + 0xc0]
add esi, 4
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0xc8], esi
call fcn.0040ea40
mov dword [esp + 0x1c], 0x5f7bac
xor esi, esi
push ebp
mov dword [esp + 0xb4], esi
mov dword [esp + 0x94], esi
call fcn.004f4040
mov ebx, eax
mov eax, dword [esp + 0xc4]
add esp, 4
cmp ebx, esi
je 0x481142
cmp ebx, 0x10000000
je 0x4810e3
cmp ebx, 0x20000000
jne 0x4812d2
cmp eax, esi
je 0x4812d2
lea esi, [eax + 0x18]
mov edi, 1
jmp 0x481151
cmp eax, esi
je 0x4812d2
mov edx, dword [eax + 0xc]
lea ecx, [esp + 0x94]
push esi
push ecx
push edx
lea ecx, [edi + 0x340]
call fcn.004f4970
test eax, eax
je 0x4812d2
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x44], esi
je 0x481138
lea eax, [esp + 0x1c]
push esi
push eax
call fcn.004f0060
lea esi, [esp + 0x1c]
mov dword [esp + 0x90], 1
mov edi, 3
jmp 0x481151
lea esi, [ecx + 0xc]
mov edi, 3
jmp 0x481151
mov ecx, dword [esp + 0x68]
mov edi, 4
lea esi, [ecx + 0x304]
lea edx, [esp + 0x14]
mov ecx, esi
push edx
push 0
push ebp
call fcn.004f4200
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x4811af
cmp ebx, 0x20000000
jne 0x481196
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x14]
push ecx
push 0
lea esi, [eax + 0x38]
push ebp
mov ecx, esi
call fcn.004f4200
test eax, eax
mov dword [esp + 0x3c], eax
mov edi, 2
jne 0x4811af
mov edx, dword [esp + 0x68]
push 0x665720
lea ecx, [edx + 0xa08]
call fcn.005bc5aa
jmp 0x4812d2
lea ecx, [esp + 0x40]
call fcn.004918b0
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
mov byte [esp + 0xb0], 1
je 0x4812eb
mov ecx, dword [esp + 0xbc]
mov ebp, dword [esp + 0x68]
push 0
lea eax, [esp + 0x14]
mov edx, dword [ebp + 0x53c]
push 4
add ecx, 8
push eax
push ecx
push edx
call ebx
test eax, eax
je 0x4812b9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4812b9
mov edx, dword [0x675c1c]
push 0
lea ecx, [esp + 0x14]
push 4
push ecx
push eax
push edx
call ebx
test eax, eax
je 0x4812b9
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4812b9
mov ecx, eax
mov eax, dword [esp + 0x14]
add ecx, 4
xor ebx, ebx
test eax, eax
mov dword [esp + 0x10], ecx
jle 0x48128d
push 0
push ebx
mov ecx, esi
call fcn.004f4110
mov edi, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x14]
push eax
call fcn.00492700
add esp, 4
test eax, eax
jne 0x481284
mov eax, dword [edi]
test eax, eax
jne 0x481270
mov eax, 0x80000301
add edi, 6
lea ecx, [ebp + 0xc0]
push edi
push eax
call fcn.004194b0
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x481244
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004eab40
add esp, 4
mov ecx, ebp
push eax
call fcn.00480f00
jmp 0x481320
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], 0xffffffff
call fcn.00402470
jmp 0x482195
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x40]
push eax
mov eax, dword [esp + 0xc0]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
mov edx, dword [esp + 0xc4]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x80]
push edx
push edi
call fcn.00480d40
lea ecx, [esp + 0x54]
mov dword [esp + 0x10], eax
call fcn.004918b0
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
call fcn.004918b0
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xb0], 3
cmp ecx, eax
mov eax, dword [esp + 0x50]
je 0x4818d4
mov edx, dword [esp + 0xc4]
mov bl, byte [edx]
cmp bl, 0x37
je 0x4818d4
mov ebp, dword [esp + 0x68]
xor edi, edi
push edi
lea eax, [esp + 0x14]
push 4
push eax
mov esi, ecx
push ecx
mov ecx, dword [ebp + 0x53c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x482107
cmp dword [esp + 0x10], edi
je 0x482107
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edx
push eax
mov dword [esp + 0x40], eax
call fcn.004eab40
add esp, 4
cmp bl, 0x39
jne 0x48163f
cmp eax, edi
jne 0x481992
mov edx, dword [esp + 0x18]
push edx
call fcn.005027d0
mov esi, eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.005011b0
add esp, 8
cmp esi, 2
mov edi, eax
jne 0x4813fd
cmp edi, 1
je 0x4813fd
cmp edi, 3
je 0x4813fd
mov esi, 1
mov ecx, dword [esp + 0xc4]
cmp esi, 2
mov ebx, dword [ecx + 1]
jne 0x481562
push 1
lea edx, [esp + 0x1c]
push 1
push edx
lea ecx, [ebp + 0xc0]
call fcn.0045a400
cmp edi, 1
push 0
jne 0x481457
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x98]
push eax
push ecx
lea ecx, [ebp + 0x2e8]
call fcn.004f4970
test eax, eax
je 0x4819fe
mov edx, dword [esp + 0x94]
lea edi, [edx + 0xc]
jmp 0x4814aa
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x9c]
push eax
push ecx
lea ecx, [ebp + 0x340]
call fcn.004f4970
test eax, eax
je 0x4819fe
lea ecx, [esp + 0x24]
mov dword [esp + 0x20], 0
call fcn.00491ab0
mov ecx, dword [esp + 0x98]
lea edx, [esp + 0x1c]
push 0
push edx
call fcn.004f0060
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x1c]
add eax, 4
mov dword [esp + 0x10], eax
test edi, edi
je 0x4819fe
lea eax, [esp + 0x14]
mov ecx, edi
push eax
push 0
push ebx
call fcn.004f4200
mov ecx, dword [esp + 0x14]
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x3c], eax
jle 0x48151c
push 0
push ebx
mov ecx, edi
call fcn.004f4110
mov edx, dword [edi]
mov esi, eax
push esi
mov ecx, edi
call dword [edx + 0x14]
push eax
call fcn.00492700
add esp, 4
test eax, eax
jne 0x48150f
mov eax, dword [esi]
test eax, eax
jne 0x4814fb
mov eax, 0x80000301
add esi, 6
lea ecx, [ebp + 0xc0]
push esi
push eax
call fcn.004194b0
add dword [esp + 0x10], eax
mov eax, dword [esp + 0x14]
inc ebx
cmp ebx, eax
jl 0x4814cf
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x40]
push ecx
mov ecx, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push ecx
add eax, 6
push edx
push eax
call fcn.004eab40
add esp, 4
mov ecx, ebp
push eax
call fcn.00480f00
mov ecx, eax
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x4818cc
cmp esi, 3
jne 0x481b3a
mov eax, dword [esp + 0x18]
xor edi, edi
push edi
push eax
lea ecx, [ebp + 0xc0]
call fcn.00462300
cmp eax, edi
je 0x481ade
cmp dword [eax + 0x30], edi
jle 0x481ade
test dword [eax + 0x14], 0x800000
jne 0x481ade
mov esi, dword [eax + 0x34]
lea edx, [ebx - 1]
mov dword [esp + 0x14], edx
mov ecx, dword [eax + 0x30]
cmp edx, ecx
jge 0x481a72
mov ecx, dword [esp + 0x10]
cmp edx, edi
jl 0x481625
mov eax, dword [esi]
mov ebx, eax
shr ebx, 0x10
jne 0x4815d3
mov ebx, dword [esp + 0x18]
and eax, 0xffff
shr ebx, 0x10
shl ebx, 0x10
or eax, ebx
cmp edi, edx
jne 0x4815ff
lea edx, [esp + 0x18]
push edx
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [esi + 4]
push ecx
push eax
call fcn.004eab40
add esp, 4
mov ecx, ebp
push eax
call fcn.00480f00
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x48161c
mov ecx, dword [esi + 4]
push ecx
push eax
lea ecx, [ebp + 0xc0]
call fcn.004194b0
mov ecx, dword [esp + 0x10]
add ecx, eax
add esi, 0x1c
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x14]
inc edi
cmp edi, edx
jle 0x4815b9
mov eax, dword [esp + 0xc4]
add eax, 9
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x50]
jmp 0x4818cc
cmp bl, 0x3a
jne 0x4820ae
cmp eax, edi
jne 0x481689
cmp dword [esp + 0x18], 0x80000005
jne 0x481b9e
lea edx, [esp + 0x40]
mov ecx, ebp
push edx
push esi
call fcn.00480f60
test eax, eax
je 0x481c0a
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
neg eax
sbb eax, eax
mov dword [esp + 0x18], 0x80000101
and eax, ecx
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0xc4]
xor eax, eax
mov dword [esp + 0x64], eax
cmp byte [ecx], 0x3a
jne 0x4817c3
mov esi, dword [esp + 0xb8]
mov edi, dword [esp + 0xc0]
mov ebx, ecx
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x21
je 0x48171c
cmp al, 0x38
je 0x4816df
cmp al, 0x3b
jne 0x481c66
mov edx, dword [ebx + 1]
lea ecx, [esp + 0x54]
push edx
call fcn.00491be0
add ebx, 5
mov dword [esp + 0xc4], ebx
jmp 0x4817b0
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00491ab0
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x6c]
push eax
push ebx
push edi
push ecx
push esi
mov ecx, ebp
call fcn.004821c0
test eax, eax
je 0x481cca
push ebx
call fcn.004eab60
add esp, 4
jmp 0x481756
xor eax, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], eax
call fcn.00491ab0
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x6c]
inc ebx
push edx
push ebx
push edi
push eax
push esi
mov ecx, ebp
call fcn.00480830
test eax, eax
je 0x481d2e
mov ecx, ebx
call fcn.004eb460
add ebx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
mov dword [esp + 0xc4], ebx
jne 0x481d92
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004f40b0
add esp, 4
test eax, eax
je 0x481d92
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0xa0]
lea eax, [esp + 0x70]
push edx
push eax
push 0x80000301
push ecx
call fcn.00503ce0
mov edx, dword [esp + 0xb0]
add esp, 0x10
lea ecx, [esp + 0x54]
push edx
call fcn.00491be0
cmp byte [ebx], 0x3a
je 0x4816af
mov eax, dword [esp + 0x64]
xor ebx, ebx
cmp eax, ebx
jne 0x4817c9
xor ebx, ebx
xor edx, edx
jmp 0x4817cd
mov edx, dword [esp + 0x5c]
shr eax, 2
mov edi, eax
je 0x48203e
cmp edi, 0x7f
jge 0x48203e
cmp edi, 1
je 0x481852
mov ecx, dword [esp + 0x3c]
xor eax, eax
mov al, byte [ecx]
cmp edi, eax
jne 0x481e06
cmp edi, 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x90], 1
jl 0x48189b
lea ebx, [edi - 1]
lea esi, [ecx + 5]
mov eax, dword [edx]
add edx, 4
dec eax
mov dword [esp + 0x9c], edx
test eax, eax
jle 0x48187a
cmp eax, dword [esi - 4]
mov ecx, esi
jge 0x481f56
test ebx, ebx
jle 0x48184c
mov edx, ebx
mov ebp, dword [ecx]
add ecx, 4
imul eax, ebp
dec edx
jne 0x481836
mov edx, dword [esp + 0x9c]
mov ebp, dword [esp + 0x68]
add dword [esp + 0x14], eax
jmp 0x481880
mov edx, dword [edx]
dec edx
mov dword [esp + 0x14], edx
js 0x481e76
mov eax, dword [esp + 0x3c]
push eax
call fcn.004eab00
mov ecx, dword [esp + 0x18]
add esp, 4
cmp ecx, eax
jge 0x481ee6
jmp 0x48189b
jl 0x481fca
mov eax, dword [esp + 0x90]
add esi, 4
inc eax
dec ebx
cmp eax, edi
mov dword [esp + 0x90], eax
jle 0x481814
mov edx, dword [esp + 0x18]
lea ecx, [ebp + 0xc0]
push edx
call fcn.004194e0
imul eax, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov cl, byte [edx]
mov edx, dword [esp + 0x10]
add eax, edx
lea ecx, [eax + ecx*4 + 4]
xor eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x50], eax
test ecx, ecx
jne 0x481360
mov edx, dword [esp + 0xc8]
test edx, edx
je 0x4818e5
mov esi, dword [esp + 0x18]
mov dword [edx], esi
mov esi, dword [esp + 0xcc]
test esi, esi
je 0x481909
mov edi, dword [esp + 0x48]
neg eax
sbb eax, eax
and eax, edi
push eax
call fcn.004eab40
mov ecx, dword [esp + 0x14]
add esp, 4
mov dword [esi], eax
mov edi, ecx
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0x19
mov dword [esp + 0x20], 0
call fcn.00491ab0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00491ab0
mov eax, edi
jmp 0x482197
push 0x665710
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 5
jmp 0x48215e
push 0x6656f0
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 7
mov dword [esp + 0x20], 0
jmp 0x482162
push 0x665710
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 9
jmp 0x48215e
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0xa
jmp 0x48215e
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0xb
mov dword [esp + 0x20], 0
jmp 0x482162
push 0x6656dc
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0xc
jmp 0x48215e
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0xd
jmp 0x48215e
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x10
mov dword [esp + 0x20], 0
jmp 0x482162
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0xe
mov dword [esp + 0x20], 0
jmp 0x482162
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0x20], 0
jmp 0x482162
push 0x6656b8
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x11
mov dword [esp + 0x20], 0
jmp 0x482162
push 0x665698
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x13
mov dword [esp + 0x20], ebx
jmp 0x482162
push 0x665678
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x14
mov dword [esp + 0x20], ebx
jmp 0x482162
push 0x665660
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x15
mov dword [esp + 0x20], ebx
jmp 0x482162
push 0x665660
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x16
mov dword [esp + 0x20], 0
jmp 0x482162
push 0x665678
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x17
mov dword [esp + 0x20], 0
jmp 0x482162
push 0x665650
lea ecx, [ebp + 0xa08]
call fcn.005bc5aa
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x12
mov dword [esp + 0x20], ebx
jmp 0x482162
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 0x18
jmp 0x48215e
mov esi, 0x5f7940
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb0], 2
mov dword [esp + 0x7c], esi
call fcn.00491ab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xb0], 1
mov dword [esp + 0x54], esi
call fcn.00491ab0
lea ecx, [esp + 0x40]
mov byte [esp + 0xb0], 0
mov dword [esp + 0x40], esi
call fcn.00491ab0
mov dword [esp + 0x1c], 0x5f7a5c
mov dword [esp + 0xb0], 4
mov dword [esp + 0x20], edi
lea ecx, [esp + 0x24]
call fcn.00491ab0
lea ecx, [esp + 0x24]
mov dword [esp + 0xb0], 0xffffffff
mov dword [esp + 0x24], esi
call fcn.00491ab0
jmp 0x482195
push 0x66563c
lea ecx, [edi + 0xa08]
call fcn.005bc5aa
xor eax, eax
mov ecx, dword [esp + 0xa8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa4
ret 0x18