Function at 0x492050
Capabilities:
Check internet connectivity via wininet
Copy file
Delete file
Encode data using xor
Persist via lnk shortcut

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2ea
push 0
push 0
dec ecx
jne 0x492058
push ebx
push esi
push edi
mov edi, edx
mov dword [ebp - 0x24], eax
mov ebx, 0x49df4d
mov esi, 0x49df50
xor eax, eax
push ebp
push 0x4934a9
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [edi + 0xc], 1
jne 0x492219
push 0
push 1
call sub.wininet.dll_InternetAutodial
push 0
lea eax, [ebp - 0x2c]
push eax
call sub.wininet.dll_InternetGetConnectedState
test eax, eax
je 0x4921da
lea eax, [ebp - 0x20]
mov edx, 0x4934c4
call fcn.0041509c
lea eax, [ebp - 0x1584]
push eax
xor eax, eax
mov dword [ebp - 0x158c], eax
movzx eax, byte [0x49e484]
mov dword [ebp - 0x1588], eax
lea eax, [ebp - 0x158c]
mov cx, 0x11
mov edx, 1
call fcn.0041562c
lea edx, [ebp - 0x1584]
lea eax, [ebp - 0x10]
call fcn.00415158
movzx eax, byte [0x49e484]
test al, al
jbe 0x49213b
mov byte [ebp - 0x2d], al
mov byte [ebx], 1
movzx edi, byte [ebx]
mov eax, edi
dec eax
push eax
push 1
lea eax, [ebp - 0x159c]
movzx edx, byte [edi + 0x49e484]
movzx edx, dl
mov cl, 1
call fcn.00414dac
lea eax, [ebp - 0x159c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00415730
add esp, 0x10
inc byte [ebx]
dec byte [ebp - 0x2d]
jne 0x492101
mov eax, dword [0x498730]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x15a0]
mov edx, 0x498558
call fcn.00405d34
mov edx, dword [ebp - 0x15a0]
mov ecx, dword [0x498730]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3e4]
call fcn.00475b80
jmp 0x492188
mov eax, dword [0x49899c]
mov eax, dword [eax]
call fcn.0046aa68
push 0
call sub.kernel32.dll_Sleep_1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3e4]
mov edx, 0xfffffdf3
call fcn.004725fc
cmp eax, 4
jne 0x492175
lea ecx, [ebp - 0x15a4]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3e4]
mov edx, 0xd2
call fcn.00472798
mov eax, dword [ebp - 0x15a4]
mov edx, 0x4934fc
call fcn.00405d6c
je 0x4921e9
mov eax, 0x49350c
call fcn.0043d018
jmp 0x4933e1
mov eax, 0x493528
call fcn.0043d018
jmp 0x4933e1
lea edx, [ebp - 0x15a8]
movsx eax, word [0x49df48]
call fcn.00409bc4
mov edx, dword [ebp - 0x15a8]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3bc]
call fcn.0044bb04
mov eax, 0x493588
call fcn.0043d018
push esi
mov esi, 0x4935a0
mov edi, 0x49de48
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
mov byte [ebx], 1
movzx eax, byte [ebx]
movzx edx, byte [eax + 0x49de48]
xor dl, byte [ebx]
mov byte [eax + 0x49de48], dl
inc byte [ebx]
cmp byte [ebx], 7
jne 0x49222c
inc dword [0x49852c]
lea edx, [ebp - 0x15ac]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3bc]
call fcn.0044bad4
mov edx, dword [ebp - 0x15ac]
mov eax, 0x49de44
call fcn.004053bc
lea eax, [ebp - 0x15b0]
mov edx, 0x49de48
call fcn.004055cc
mov eax, dword [ebp - 0x15b0]
mov edx, dword [0x49de44]
call fcn.00405944
test eax, eax
jle 0x4922ba
lea edx, [ebp - 0x15b4]
movsx eax, word [0x49df48]
call fcn.00409bc4
mov edx, dword [ebp - 0x15b4]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3bc]
call fcn.0044bb04
lea edx, [ebp - 0x15b8]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3bc]
call fcn.0044bad4
mov eax, dword [ebp - 0x15b8]
lea edx, [ebp - 0x28]
call fcn.00403d2c
mov word [0x49df4a], ax
movzx eax, word [0x49df4a]
cmp ax, word [0x49df48]
je 0x49232a
cmp dword [0x49852c], 0xf
jae 0x49232a
imul eax, dword [0x49852c], 0x1388
push eax
call sub.kernel32.dll_Sleep_1
mov eax, 0x4935b0
call fcn.0043d018
imul eax, dword [0x49852c], 0x1388
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x4933e1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3dc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3cc]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x68]
cmp byte [0x498660], 0
je 0x49265f
lea eax, [ebp - 0x15bc]
mov ecx, 0x4935c4
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x15bc]
call fcn.0040a090
test al, al
je 0x49265f
lea eax, [ebp - 0x15c0]
mov ecx, 0x4935c4
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15c0]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cd0
call fcn.0040307c
push 0
mov edx, 0x49e0ac
mov ecx, 0x3c
mov eax, esi
call fcn.00403844
call fcn.0040307c
movzx edx, word [0x498524]
mov eax, esi
call fcn.00403cf8
call fcn.0040307c
push 0
mov edx, 0x4a1ab0
mov ecx, 0x117
mov eax, esi
call fcn.00403844
call fcn.0040307c
mov edx, 0xd6f
mov eax, esi
call fcn.00403cf8
call fcn.0040307c
push 0
mov edx, 0x4a127c
mov ecx, 0x834
mov eax, esi
call fcn.00403844
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x15c4]
mov ecx, 0x4935d8
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15c4]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cd0
call fcn.0040307c
push 0
mov edx, 0x4a1d34
mov ecx, 0x7aa8
mov eax, esi
call fcn.00403844
call fcn.0040307c
push 0
mov edx, 0x4a1bc8
mov ecx, 0x16a
mov eax, esi
call fcn.00403844
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
mov eax, 0x4935ec
call fcn.0043d018
lea eax, [ebp - 0x15c8]
mov ecx, 0x493650
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x15c8]
call fcn.0040a090
test al, al
je 0x492553
lea eax, [ebp - 0x15cc]
mov ecx, 0x493650
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15cc]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cd0
call fcn.0040307c
mov eax, esi
call fcn.00403a94
call fcn.0040307c
mov word [0x49e0a8], ax
movzx edx, word [0x49e0a8]
mov eax, 0x56bd38
call fcn.00405a88
push 0
mov eax, 0x56bd38
call fcn.00405858
mov edx, eax
movzx ecx, word [0x49e0a8]
mov eax, esi
call fcn.00403844
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x15d0]
mov ecx, 0x493664
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x15d0]
call fcn.0040a090
test al, al
je 0x49265f
lea eax, [ebp - 0x15d4]
mov ecx, 0x493664
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15d4]
mov eax, 0x4a97dc
call fcn.004036dc
mov edx, 0xa4
mov eax, 0x4a97dc
call fcn.00403cd0
call fcn.0040307c
mov word [0x49e0aa], 0
mov byte [0x49865c], 1
mov edx, 0x4a9928
mov eax, 0x4a97dc
call fcn.00403b7c
call fcn.0040307c
mov byte [ebx], 0
movzx eax, byte [ebx]
movzx edx, word [0x49e0aa]
imul edx, edx, 0xb
lea edx, [edx*2 + 0x4a99cc]
movzx ecx, word [eax*2 + 0x4a99af]
mov word [edx + eax*2], cx
inc byte [ebx]
cmp byte [ebx], 9
jne 0x4925dd
movzx eax, word [0x49e0aa]
imul eax, eax, 0xb
movzx edx, word [0x4a99ac]
mov word [eax*2 + 0x4a99de], dx
movzx edx, byte [0x4a99ae]
mov word [eax*2 + 0x4a99e0], dx
inc word [0x49e0aa]
mov eax, 0x4a97dc
call fcn.00403a28
call fcn.0040307c
test al, al
je 0x4925c6
mov eax, 0x4a97dc
call fcn.00403884
call fcn.0040307c
mov eax, 0x493678
call fcn.0043d018
mov eax, 0x49de44
mov edx, 0x4936a4
call fcn.004053bc
mov eax, dword [0x49de44]
call fcn.004057f8
mov edx, eax
lea eax, [ebp - 0x15d8]
call fcn.00405560
mov eax, dword [ebp - 0x15d8]
call fcn.0040a26c
mov eax, dword [0x498658]
call fcn.004057f8
mov edx, eax
lea eax, [ebp - 0x15dc]
call fcn.00405560
mov eax, dword [ebp - 0x15dc]
call fcn.0040a26c
lea eax, [ebp - 0x59]
call fcn.00491744
lea edx, [ebp - 0x9d]
mov eax, dword [ebp - 0x24]
call fcn.00491798
lea eax, [ebp - 0x59]
push eax
lea eax, [ebp - 0x9d]
push eax
push 0
push 0
push 0
push 0
call sub.UNZIP32.DLL_Wiz_SingleEntryUnzip
test eax, eax
jle 0x4926f3
mov eax, 0x4936b8
call fcn.0043d018
jmp 0x4933e1
cmp byte [0x56bd36], 0
je 0x4927a2
mov edx, 0x493738
mov eax, 0x49e0ec
call fcn.004036dc
mov eax, 0x493738
call fcn.0040a090
test al, al
je 0x49272e
mov eax, 0x49e0ec
call fcn.00403478
call fcn.0040307c
jmp 0x49273d
mov eax, 0x49e0ec
call fcn.0040346c
call fcn.0040307c
lea edx, [ebp - 0x15e0]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3f0]
call fcn.0044bad4
mov eax, dword [ebp - 0x15e0]
push eax
lea edx, [ebp - 0x15e4]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x3ec]
call fcn.0044bad4
mov edx, dword [ebp - 0x15e4]
mov eax, 0x49e0ec
call fcn.00405b18
mov dl, 0x20
call fcn.00403f5c
pop edx
call fcn.00405b18
call fcn.00403f98
call fcn.0040307c
mov eax, 0x49e0ec
call fcn.00403884
call fcn.0040307c
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x360]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov byte [0x498530], 0
lea eax, [ebp - 0x15e8]
mov ecx, 0x493748
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x15e8]
call fcn.0040a090
test al, al
jne 0x49281e
lea eax, [ebp - 0x15ec]
mov ecx, 0x493748
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15ec]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cec
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x15f0]
mov ecx, 0x4935c4
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15f0]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cd0
call fcn.0040307c
mov edx, 8
mov eax, esi
call fcn.00403cf8
call fcn.0040307c
push 0
mov edx, 0x49df4a
mov ecx, 2
mov eax, esi
call fcn.00403864
call fcn.0040307c
cmp byte [0x498660], 0
je 0x4928d8
movzx edx, word [0x498524]
mov eax, esi
call fcn.00403cf8
call fcn.0040307c
push 0
mov edx, 0x4a1ab0
mov ecx, 0x117
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov edx, 0xd6f
mov eax, esi
call fcn.00403cf8
call fcn.0040307c
push 0
mov edx, 0x4a127c
mov ecx, 0x834
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x15f4]
mov ecx, 0x49375c
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x15f4]
call fcn.0040a090
test al, al
jne 0x492a30
lea eax, [ebp - 0x15f8]
mov ecx, 0x49375c
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x15f8]
mov eax, 0x49e608
call fcn.004036dc
mov edx, 0x186
mov eax, 0x49e608
call fcn.00403cec
call fcn.0040307c
mov byte [ebx], 0
lea edx, [ebp - 0x1700]
movzx eax, byte [ebx]
call fcn.00409bc4
mov ecx, dword [ebp - 0x1700]
lea eax, [ebp - 0x16fc]
mov edx, 0x493770
call fcn.00405680
mov edx, dword [ebp - 0x16fc]
lea eax, [ebp - 0x16f8]
mov ecx, 0xff
call fcn.00405604
lea edx, [ebp - 0x16f8]
mov eax, 0x49e9ec
mov cl, 0x28
call fcn.00403918
mov edx, 0x49e9ec
mov eax, 0x49e608
call fcn.00403e00
call fcn.0040307c
inc byte [ebx]
cmp byte [ebx], 3
jne 0x49294a
mov eax, 0x49e608
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x1704]
mov ecx, 0x493788
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1704]
mov eax, 0x49e754
call fcn.004036dc
mov edx, 2
mov eax, 0x49e754
call fcn.00403cec
call fcn.0040307c
mov word [0x49e0a8], 0
mov byte [ebx], 0
mov edx, 0x49e0a8
mov eax, 0x49e754
call fcn.00403e00
call fcn.0040307c
inc byte [ebx]
cmp byte [ebx], 3
jne 0x492a06
mov eax, 0x49e754
call fcn.00403884
call fcn.0040307c
mov eax, 0x49e09c
mov edx, 0x49379c
call fcn.004053bc
mov eax, 0x49e0a0
mov ecx, 0x4937bc
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [0x49e09c]
call fcn.0040a090
test al, al
jne 0x492a7f
push 0xffffffffffffffff
mov eax, dword [0x49e09c]
call fcn.004057f8
push eax
mov eax, dword [0x49e0a0]
call fcn.004057f8
push eax
call sub.kernel32.dll_CopyFileA
mov edi, dword [0x49e0a0]
mov dword [ebp - 0x1708], edi
mov eax, dword [ebp - 0x1708]
call fcn.004057f8
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
cmp byte [0x498660], 0
je 0x492b1b
lea eax, [ebp - 0x170c]
mov ecx, 0x4935d8
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x170c]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cd0
call fcn.0040307c
push 0
mov edx, 0x4a1d34
mov ecx, 0x7aa8
mov eax, esi
call fcn.00403864
call fcn.0040307c
push 0
mov edx, 0x4a1bc8
mov ecx, 0x16a
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
mov eax, dword [0x56bd38]
mov dword [ebp - 0x1708], eax
mov eax, dword [ebp - 0x1708]
test eax, eax
je 0x492b35
sub eax, 4
mov eax, dword [eax]
cmp eax, 0x3e8
jle 0x492b9d
lea eax, [ebp - 0x1710]
mov ecx, 0x493650
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1710]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cd0
call fcn.0040307c
push 0
mov eax, 0x56bd38
call fcn.00405858
mov edx, eax
movzx ecx, word [0x49e0a8]
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
cmp byte [0x49865c], 0
je 0x492c99
lea eax, [ebp - 0x1714]
mov ecx, 0x493664
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1714]
mov eax, 0x4a97dc
call fcn.004036dc
mov edx, 0xa4
mov eax, 0x4a97dc
call fcn.00403cd0
call fcn.0040307c
mov word [0x49e0aa], 0
mov edx, 0x4a9928
mov eax, 0x4a97dc
call fcn.00403b7c
call fcn.0040307c
mov byte [ebx], 0
movzx eax, byte [ebx]
movzx edx, word [0x49e0aa]
imul edx, edx, 0xb
lea edx, [edx*2 + 0x4a99cc]
movzx edx, word [edx + eax*2]
mov word [eax*2 + 0x4a99af], dx
inc byte [ebx]
cmp byte [ebx], 9
jne 0x492c04
movzx edx, word [0x49e0aa]
imul eax, edx, 0xb
movzx ecx, word [eax*2 + 0x4a99de]
mov word [0x4a99ac], cx
movzx eax, byte [eax*2 + 0x4a99e0]
mov byte [0x4a99ae], al
mov eax, 0x4a97dc
call fcn.00403cf8
call fcn.0040307c
mov edx, 0x4a9928
mov eax, 0x4a97dc
call fcn.00403e00
call fcn.0040307c
inc word [0x49e0aa]
cmp word [0x49e0aa], 0x8d3e
jne 0x492bed
mov eax, 0x4a97dc
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x1574]
xor ecx, ecx
mov edx, 0x1388
call fcn.00403ae0
lea eax, [ebp - 0x1718]
mov ecx, 0x4937d0
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1718]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cec
call fcn.0040307c
push 0
lea edx, [ebp - 0x1574]
mov ecx, 0x1388
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
mov eax, 0x49eb74
xor ecx, ecx
mov edx, 0x2334
call fcn.00403ae0
lea eax, [ebp - 0x171c]
mov ecx, 0x4937e4
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x171c]
call fcn.0040a090
test al, al
jne 0x492da1
lea eax, [ebp - 0x1720]
mov ecx, 0x4937e4
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1720]
mov eax, 0x49e8a0
call fcn.004036dc
mov edx, 0x2334
mov eax, 0x49e8a0
call fcn.00403cec
call fcn.0040307c
mov byte [ebx], 0
mov edx, 0x49eb74
mov eax, 0x49e8a0
call fcn.00403e00
call fcn.0040307c
inc byte [ebx]
cmp byte [ebx], 0x64
jne 0x492d77
mov eax, 0x49e8a0
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x1724]
mov ecx, 0x4937f8
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x1724]
call fcn.0040a090
test al, al
jne 0x492e06
lea eax, [ebp - 0x1728]
mov ecx, 0x4937f8
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1728]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cec
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x172c]
mov ecx, 0x49380c
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x172c]
call fcn.0040a090
test al, al
jne 0x492e83
lea eax, [ebp - 0x1730]
mov ecx, 0x49380c
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1730]
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cec
call fcn.0040307c
push 0
mov edx, 0x49eb74
mov ecx, 0x4d
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x1734]
mov ecx, 0x493824
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x1734]
call fcn.0040a090
test al, al
jne 0x492f71
lea eax, [ebp - 0x1738]
mov ecx, 0x493824
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1738]
lea eax, [ebp - 0x1ec]
call fcn.004036dc
mov edx, 1
lea eax, [ebp - 0x1ec]
call fcn.00403cec
call fcn.0040307c
lea eax, [ebp - 0x1ec]
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x173c]
mov ecx, 0x493838
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x173c]
lea eax, [ebp - 0x1ec]
call fcn.004036dc
mov edx, 1
lea eax, [ebp - 0x1ec]
call fcn.00403cec
call fcn.0040307c
mov eax, 0x4a0f8c
xor ecx, ecx
mov edx, 0x2ee
call fcn.00403ae0
push 0
mov edx, 0x4a0f8c
mov ecx, 0x2ee
lea eax, [ebp - 0x1ec]
call fcn.00403864
call fcn.0040307c
lea eax, [ebp - 0x1ec]
call fcn.00403884
call fcn.0040307c
lea eax, [ebp - 0x1740]
mov ecx, 0x49384c
mov edx, dword [0x498658]
call fcn.00405680
mov eax, dword [ebp - 0x1740]
call fcn.0040a090
test al, al
jne 0x49303b
mov byte [0x4a0ea8], 0
mov byte [0x4a0ee5], 0
mov byte [0x4a0f22], 0
mov byte [0x4a0f2d], 0
mov byte [ebx], 1
movzx eax, byte [ebx]
imul eax, eax, 0xd
mov byte [eax + 0x4a0f2e], 0
inc byte [ebx]
cmp byte [ebx], 7
jne 0x492fb9
lea eax, [ebp - 0x1744]
mov ecx, 0x49384c
mov edx, dword [0x498658]
call fcn.00405680
mov edx, dword [ebp - 0x1744]
mov eax, 0x49e4bc
call fcn.004036dc
mov byte [0x4a0f89], 0
mov edx, 0xe2
mov eax, 0x49e4bc
call fcn.00403cec
call fcn.0040307c
mov byte [ebx], 0
mov edx, 0x4a0ea8
mov eax, 0x49e4bc
call fcn.00403e00
call fcn.0040307c
inc byte [ebx]
cmp byte [ebx], 0x64
jne 0x493011
mov eax, 0x49e4bc
call fcn.00403884
call fcn.0040307c
mov eax, 0x49de44
call fcn.00405858
xor ecx, ecx
mov edx, 0x1e
call fcn.00403ae0
mov edx, 0x493860
mov eax, esi
call fcn.004036dc
mov edx, 1
mov eax, esi
call fcn.00403cec
call fcn.0040307c
push 0
mov eax, 0x49de44
call fcn.00405858
mov edx, eax
mov ecx, 0x1e
mov eax, esi
call fcn.00403864
call fcn.0040307c
mov eax, esi
call fcn.00403884
call fcn.0040307c
mov eax, dword [0x498658]
call fcn.004057f8
mov edx, eax
lea eax, [ebp - 0x1748]
call fcn.00405560
lea eax, [ebp - 0x1748]
mov edx, 0x493874
call fcn.00405634
mov edx, dword [ebp - 0x1748]
mov eax, 0x49e0ec
call fcn.004036dc
mov eax, 0x49e0ec
call fcn.0040346c
call fcn.0040307c
mov eax, 0x49e0a0
mov edx, 0x493884
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x4938a0
mov edx, dword [0x498658]
call fcn.00405680
mov al, 3
call fcn.0049180c
mov eax, 0x49e0a0
mov edx, 0x4938b4
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x4938d8
mov edx, dword [0x498658]
call fcn.00405680
mov al, 3
call fcn.0049180c
mov eax, 0x49e0a0
mov edx, 0x4938ec
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x49390c
mov edx, dword [0x498658]
call fcn.00405680
mov al, 3
call fcn.0049180c
mov eax, 0x49e0a0
mov edx, 0x493920
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x49393c
mov edx, dword [0x498658]
call fcn.00405680
mov al, 3
call fcn.0049180c
mov eax, 0x49e0a0
mov edx, 0x493954
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x493970
mov edx, dword [0x498658]
call fcn.00405680
mov al, 3
call fcn.0049180c
lea eax, [ebp - 0x174c]
mov ecx, 0x493984
mov edx, dword [0x49e0a4]
call fcn.00405680
mov edx, dword [ebp - 0x174c]
mov eax, 0x49e2b8
call fcn.004036dc
mov eax, 0x49e2b8
call fcn.0040346c
call fcn.0040307c
mov edx, 0x4939a4
mov eax, 0x49e2b8
call fcn.00405b18
call fcn.00403f98
call fcn.0040307c
mov edx, 0x4939c0
mov eax, 0x49e2b8
call fcn.00405b18
call fcn.00403f98
call fcn.0040307c
mov eax, 0x49e2b8
call fcn.00403884
call fcn.0040307c
mov eax, 0x49e0a0
mov edx, 0x4939f8
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x493a10
mov edx, dword [0x498658]
call fcn.00405680
mov al, 3
call fcn.0049180c
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x368]
mov edx, dword [eax]
call dword [edx + 0xd8]
test al, al
je 0x4932de
xor eax, eax
call fcn.0049180c
mov al, 4
call fcn.0049180c
mov eax, 0x49e0a0
mov edx, 0x493a24
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x49393c
mov edx, dword [0x498658]
call fcn.00405680
xor eax, eax
call fcn.0049180c
mov al, 4
call fcn.0049180c
mov eax, 0x49e0a0
mov edx, 0x493a44
call fcn.004053bc
mov eax, 0x49e09c
mov ecx, 0x4938a0
mov edx, dword [0x498658]
call fcn.00405680
xor eax, eax
call fcn.0049180c
mov al, 4
call fcn.0049180c
mov eax, 0x49e0ec
call fcn.00403884
call fcn.0040307c
mov dl, 1
mov eax, dword [0x4228d4]
call fcn.00422a40
mov dword [0x49e0e8], eax
mov edx, 0x80000002
mov eax, dword [0x49e0e8]
call fcn.00422b1c
mov cl, 1
mov edx, 0x493a64
mov eax, dword [0x49e0e8]
call fcn.00422b84
test al, al
je 0x493340
mov ecx, 0x493a84
mov edx, 0x493a98
mov eax, dword [0x49e0e8]
call fcn.00422ef0
mov eax, dword [0x49e0e8]
call fcn.00422aec
mov eax, dword [0x49e0e8]
call fcn.0040453c
mov dl, 1
mov eax, dword [0x4228d4]
call fcn.00422a40
mov dword [0x49e0e8], eax
mov edx, 0x80000002
mov eax, dword [0x49e0e8]
call fcn.00422b1c
mov eax, dword [0x49e0e8]
mov byte [eax + 0xc], 0
mov cl, 1
mov edx, 0x493aac
mov eax, dword [0x49e0e8]
call fcn.00422b84
mov ecx, 0x493af4
mov edx, 0x493b08
mov eax, dword [0x49e0e8]
call fcn.00422ef0
lea eax, [ebp - 0x1750]
mov ecx, 0x493b1c
mov edx, dword [0x498658]
call fcn.00405680
mov ecx, dword [ebp - 0x1750]
mov edx, 0x493b34
mov eax, dword [0x49e0e8]
call fcn.00422ef0
mov eax, dword [0x49e0e8]
call fcn.00422aec
mov eax, dword [0x49e0e8]
call fcn.0040453c
mov eax, 0x493b4c
call fcn.0043d018
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4934b3
lea eax, [ebp - 0x1750]
mov edx, 0x12
call fcn.0040538c
lea eax, [ebp - 0x1704]
mov edx, 3
call fcn.0040538c
lea eax, [ebp - 0x15f8]
mov edx, 5
call fcn.0040538c
lea eax, [ebp - 0x15e4]
mov edx, 2
call fcn.0040538c
lea eax, [ebp - 0x15dc]
mov edx, 9
call fcn.0040538c
lea eax, [ebp - 0x15b8]
call fcn.00405368
lea eax, [ebp - 0x15b4]
mov edx, 2
call fcn.0040538c
lea eax, [ebp - 0x15ac]
call fcn.00405368
lea eax, [ebp - 0x15a8]
call fcn.00405368
lea eax, [ebp - 0x15a4]
mov edx, 2
call fcn.00405bfc
lea eax, [ebp - 0x159c]
call fcn.00410c30
lea eax, [ebp - 0x1584]
call fcn.00410c30
lea eax, [ebp - 0x20]
mov edx, dword [0x4010e8]
mov ecx, 2
call fcn.00405f9c
ret