Function at 0x458e9f
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x247
push 0
push 0
dec ecx
jne 0x4586ec
push ebx
push esi
push edi
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x22]
mov edx, dword [0x45b5a0]
call fcn.00405ea0
mov ecx, 0x65
lea eax, [ebp - 0x1b8]
mov edx, dword [0x40102c]
call fcn.00405ed0
xor eax, eax
push ebp
push 0x45a118
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x417178]
call fcn.0040440c
mov dword [ebp - 0x1d0], eax
mov dl, 1
mov eax, dword [0x417178]
call fcn.0040440c
mov dword [ebp - 0x1d8], eax
xor edx, edx
push ebp
push 0x45a04c
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0xc]
call fcn.004052b8
lea eax, [ebp - 0x11e8]
xor ecx, ecx
mov edx, 0x1000
call fcn.004039f0
lea edx, [ebp - 0x11e8]
mov ecx, 0x1000
mov eax, dword [ebp - 0x1bc]
call fcn.0043ac98
mov ebx, eax
mov eax, dword [ebp - 0x1bc]
cmp byte [eax + 0xc], 0
jne 0x4587ab
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45a05b
lea eax, [ebp - 8]
mov edx, ebx
call fcn.00405998
lea eax, [ebp - 8]
call fcn.004057c4
lea edx, [ebp - 0x11e8]
mov ecx, ebx
call fcn.00408278
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.004055a0
lea edx, [ebp - 0x22]
mov eax, dword [ebp - 0xc]
call fcn.0045babc
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
call fcn.00405350
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x20]
call fcn.00405350
movzx eax, byte [ebp - 0x21]
cmp byte [ebp - 0x22], 0
je 0x45a03f
movzx eax, al
cmp eax, 0x99
ja case.0x458812.0
jmp dword [eax*4 + 0x458819]
mov eax, 0x496a1c
call fcn.004052b8
mov eax, 0x496a20
call fcn.004052b8
lea eax, [ebp - 0x11ec]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov edx, dword [ebp - 0x11ec]
mov eax, 0x496a10
mov ecx, dword [0x45cbd4]
call fcn.00406948
mov eax, 0x496a1c
mov edx, dword [0x496a10]
mov edx, dword [edx]
call fcn.0040530c
mov eax, 0x496a20
mov edx, dword [0x496a10]
mov edx, dword [edx + 4]
call fcn.0040530c
call fcn.00458458
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.0045cc10
jmp case.0x458812.0
mov eax, dword [ebp - 0x1bc]
mov dword [0x496a0c], eax
lea eax, [ebp - 0x1cc]
push eax
push 0
push 0
push 0x458044
push 0
push 0
call sub.kernel32.dll_CreateThread_1
jmp case.0x458812.0
lea eax, [ebp - 0x11f0]
call fcn.004585d4
mov ecx, dword [ebp - 0x11f0]
mov dl, 0x72
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
call fcn.00444884
jmp case.0x458812.0
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.004448e0
mov ecx, dword [ebp - 4]
mov dl, 0x47
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.004516e4
jmp case.0x458812.0
mov eax, dword [ebp - 0x1bc]
mov dword [0x496a08], eax
mov eax, 0x45a140
call fcn.0045cf70
test al, al
je 0x458bc6
mov eax, 0x45a140
call fcn.0045d0ec
lea edx, [ebp - 0x11f8]
mov eax, 0x1a
call fcn.0045cde0
mov eax, dword [ebp - 0x11f8]
call fcn.00405764
mov edx, eax
lea eax, [ebp - 0x11f4]
call fcn.004054b0
lea eax, [ebp - 0x11f4]
mov edx, 0x45a154
call fcn.004055a0
mov eax, dword [ebp - 0x11f4]
mov cl, 1
mov edx, 0x45a164
call fcn.00458054
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.0045ce5c
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00457a10
jmp case.0x458812.0
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
call fcn.00457ca0
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.004511a4
mov ecx, dword [ebp - 4]
mov dl, 0x59
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 0x18]
call fcn.00453514
cmp al, 1
jne 0x458ccd
mov eax, dword [ebp - 0x18]
xor edx, edx
call fcn.00405d1c
je case.0x458812.0
lea eax, [ebp - 0x1200]
mov ecx, dword [ebp - 0x18]
mov edx, 0x45a170
call fcn.00405c64
mov edx, dword [ebp - 0x1200]
lea eax, [ebp - 0x11fc]
call fcn.0040555c
mov ecx, dword [ebp - 0x11fc]
mov dl, 0x57
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.00453630
cmp dword [ebp - 4], 0
je case.0x458812.0
lea eax, [ebp - 0x1204]
mov ecx, dword [ebp - 4]
mov edx, 0x45a180
call fcn.004055ec
mov ecx, dword [ebp - 0x1204]
mov dl, 0x57
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.004536a4
jmp case.0x458812.0
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.00453d4c
mov ecx, dword [ebp - 4]
mov dl, 0x56
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.00458284
mov ecx, dword [ebp - 4]
mov dl, 0x65
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.004578d8
mov ecx, dword [ebp - 4]
mov dl, 0x64
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0xc]
push eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
call fcn.00457d74
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.00457ac4
mov ecx, dword [ebp - 4]
mov dl, 0x62
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
lea edx, [ebp - 4]
call fcn.0044402c
mov ecx, dword [ebp - 4]
mov dl, 0x76
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00457850
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.0045cc10
jmp case.0x458812.0
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
call fcn.00409704
mov edx, dword [ebp - 0x14]
mov edx, dword [edx + 4]
call fcn.00451ff0
jmp case.0x458812.0
call fcn.00456800
call fcn.004568c4
lea edx, [ebp - 4]
xor eax, eax
call fcn.00456bc8
mov ecx, dword [ebp - 4]
mov dl, 0x97
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 0x1208]
call fcn.0045631c
mov edx, dword [ebp - 0x1208]
lea eax, [ebp - 4]
call fcn.0040555c
mov ecx, dword [ebp - 4]
mov dl, 0x96
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.0045d420
jmp case.0x458812.0
push 1
push 0
push 0
mov eax, dword [ebp - 0x10]
call fcn.00405764
push eax
push 0x45a184
push 0
call sub.shell32.dll_ShellExecuteA
jmp case.0x458812.0
mov eax, dword [ebp - 0x1d0]
call fcn.00419ef0
mov eax, dword [ebp - 0x1d8]
call fcn.00419ef0
xor eax, eax
push ebp
push 0x458f09
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.00409704
mov dword [ebp - 0x120c], eax
fild dword [ebp - 0x120c]
fdiv dword [0x45a18c]
fstp st(0)
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x458f13
mov dl, 1
mov eax, dword [0x41cbb4]
call fcn.00422650
mov ebx, eax
mov eax, dword [ebp - 0x10]
call fcn.00409704
mov edx, ebx
call fcn.004563a8
mov edx, dword [ebp - 0x1d0]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, ebx
call fcn.0040443c
mov eax, dword [ebp - 0x1d0]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x458f5e
cmp eax, 0
jbe case.0x458812.0
jmp 0x458f64
jle case.0x458812.0
mov dl, 1
mov eax, dword [0x417178]
call fcn.0040440c
mov ebx, eax
push 0
push 0
xor edx, edx
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
call dword [ecx + 0x18]
xor edx, edx
push ebp
push 0x459022
push dword fs:[edx]
mov dword fs:[edx], esp
push ebx
mov cl, 3
mov dl, 1
mov eax, dword [0x43e870]
call fcn.0043eaa8
mov esi, eax
mov eax, dword [ebp - 0x1d0]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov edx, dword [ebp - 0x1d0]
mov eax, esi
call fcn.00419a4c
mov eax, esi
call fcn.0040443c
push 0
push 0
mov eax, ebx
call fcn.004197d0
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.00405998
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push eax
lea eax, [ebp - 0x10]
call fcn.004057c4
mov edx, eax
mov eax, ebx
pop ecx
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x10]
mov dl, 0x53
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
lea eax, [ebp - 8]
call fcn.004052b8
mov eax, ebx
call fcn.0040443c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x458812.0
mov eax, dword [ebp - 0x1d0]
call fcn.00419ef0
mov eax, dword [ebp - 0x1d8]
call fcn.00419ef0
xor eax, eax
push ebp
push 0x459080
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
call fcn.00409704
mov dword [ebp - 0x120c], eax
fild dword [ebp - 0x120c]
fdiv dword [0x45a18c]
fstp xword [ebp - 0x1e8]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4590a5
mov dl, 1
mov eax, dword [0x41cbb4]
call fcn.00422650
mov esi, eax
mov dl, 1
mov eax, dword [0x41cbb4]
call fcn.00422650
mov ebx, eax
movzx eax, word [ebp - 0x1e0]
push eax
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x1c4]
xor eax, eax
call fcn.004532e4
mov edx, eax
mov eax, esi
call fcn.004237c4
mov dl, 6
mov eax, esi
call fcn.00423ab4
push 0x8c
mov cx, 0xc8
mov edx, ebx
mov eax, esi
call fcn.0045d480
mov edx, dword [ebp - 0x1d0]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, ebx
call fcn.0040443c
mov eax, esi
call fcn.0040443c
mov eax, dword [ebp - 0x1d0]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x459141
cmp eax, 0
jbe case.0x458812.0
jmp 0x459147
jle case.0x458812.0
mov dl, 1
mov eax, dword [0x417178]
call fcn.0040440c
mov ebx, eax
push 0
push 0
xor edx, edx
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
call dword [ecx + 0x18]
xor edx, edx
push ebp
push 0x459214
push dword fs:[edx]
mov dword fs:[edx], esp
push ebx
mov cl, 3
mov dl, 1
mov eax, dword [0x43e870]
call fcn.0043eaa8
mov esi, eax
mov eax, dword [ebp - 0x1d0]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov edx, dword [ebp - 0x1d0]
mov eax, esi
call fcn.00419a4c
mov eax, esi
call fcn.0040443c
push 0
push 0
mov eax, ebx
call fcn.004197d0
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.00405998
xor ecx, ecx
mov dl, 0x91
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push eax
lea eax, [ebp - 0x10]
call fcn.004057c4
mov edx, eax
mov eax, ebx
pop ecx
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [ebp - 0x10]
mov dl, 0x92
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
lea eax, [ebp - 8]
call fcn.004052b8
mov eax, ebx
call fcn.0040443c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x458812.0
lea eax, [ebp - 0x1210]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov edx, dword [ebp - 0x1210]
mov eax, 0x496a10
mov ecx, dword [0x45cbd4]
call fcn.00406948
mov eax, 0x496a1c
mov edx, dword [0x496a10]
mov edx, dword [edx]
call fcn.0040530c
mov eax, 0x496a20
mov edx, dword [0x496a10]
mov edx, dword [edx + 4]
call fcn.0040530c
call fcn.0045841c
jmp case.0x458812.0
mov eax, dword [0x490b44]
mov edx, dword [ebp - 0x10]
call fcn.0040530c
jmp case.0x458812.0
call fcn.00458398
push 0
call sub.kernel32.dll_ExitProcess_1
lea ecx, [ebp - 4]
mov edx, 0x45a198
mov eax, 0x45a1d4
call fcn.00450da0
mov ecx, dword [ebp - 4]
mov dl, 0x54
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea ecx, [ebp - 4]
mov edx, 0x45a1ec
mov eax, 0x45a220
call fcn.00450da0
mov ecx, dword [ebp - 4]
mov dl, 0x55
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea ecx, [ebp - 4]
mov edx, 0x45a238
mov eax, 0x45a26c
call fcn.00450da0
mov ecx, dword [ebp - 4]
mov dl, 0x88
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.0044dc40
mov ecx, dword [ebp - 4]
mov dl, 0x89
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.00455670
mov ecx, dword [ebp - 4]
mov dl, 0x95
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, 0x496a18
call fcn.004052b8
mov eax, dword [ebp - 0x1bc]
mov dword [0x496a14], eax
lea eax, [ebp - 0x1214]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov edx, dword [ebp - 0x1214]
mov eax, 0x496a10
mov ecx, dword [0x45cbd4]
call fcn.00406948
push 0
push 0
lea eax, [ebp - 0x1cc]
push eax
mov ecx, 0x458348
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
mov eax, dword [ebp - 0x1bc]
mov dword [0x496a04], eax
mov byte [0x496a00], 1
jmp case.0x458812.0
mov eax, dword [ebp - 0x1bc]
call fcn.0043ac20
jmp case.0x458812.0
push 0
call sub.kernel32.dll_ExitProcess_1
xor ecx, ecx
mov dl, 0x35
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.0045ebec
mov ecx, dword [ebp - 4]
mov dl, 5
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea ecx, [ebp - 4]
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.0045e988
mov ecx, dword [ebp - 4]
mov dl, 6
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
push 0x64
call sub.kernel32.dll_Sleep_2
lea ecx, [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0045e988
mov ecx, dword [ebp - 4]
mov dl, 7
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.0045e5a8
test al, al
je 0x459476
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459483
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 8
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0045e5a8
test al, al
je 0x4594b5
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x4594c2
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 8
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00405764
mov edx, eax
lea eax, [ebp - 0x1218]
call fcn.004054b0
mov eax, dword [ebp - 0x1218]
call fcn.00405764
push eax
call sub.kernel32.dll_DeleteFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x459516
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459523
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0xa
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b8]
call fcn.0045e62c
test al, al
je 0x459575
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459582
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0xb
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
mov eax, dword [ebp - 0x1b8]
call fcn.00409a94
test al, al
jne 0x4595f1
push dword [ebp - 0x1b4]
push 0x45a134
push dword [ebp - 0x1b0]
push 0x45a134
lea edx, [ebp - 0x121c]
xor eax, eax
call fcn.00409598
push dword [ebp - 0x121c]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00405668
jmp 0x459632
push dword [ebp - 0x1b4]
push 0x45a134
push dword [ebp - 0x1b0]
push 0x45a134
mov eax, dword [ebp - 0x1b8]
call fcn.0045dd60
push edx
push eax
lea eax, [ebp - 0x1220]
call fcn.00409684
push dword [ebp - 0x1220]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00405668
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x32
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
mov eax, dword [ebp - 0x1b8]
call fcn.00409a94
test al, al
jne 0x4596f2
push dword [ebp - 0x1b4]
push 0x45a134
push dword [ebp - 0x1b0]
push 0x45a134
lea edx, [ebp - 0x1224]
xor eax, eax
call fcn.00409598
push dword [ebp - 0x1224]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00405668
jmp 0x459733
push dword [ebp - 0x1b4]
push 0x45a134
push dword [ebp - 0x1b0]
push 0x45a134
mov eax, dword [ebp - 0x1b8]
call fcn.0045dd60
push edx
push eax
lea eax, [ebp - 0x1228]
call fcn.00409684
push dword [ebp - 0x1228]
lea eax, [ebp - 0x10]
mov edx, 5
call fcn.00405668
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x33
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
push dword [ebp - 0x1b8]
push 0x45a134
push dword [ebp - 0x1b4]
push 0x45a134
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00405668
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0xe
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
push dword [ebp - 0x1b8]
push 0x45a134
push dword [ebp - 0x1b4]
push 0x45a134
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00405668
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x40
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.00444458
mov ecx, dword [ebp - 4]
mov dl, 0xf
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.00443eb8
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.00443f4c
jmp case.0x458812.0
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, 0x45a134
call fcn.0045dbf8
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
call fcn.00409704
call fcn.00443fc4
push eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
call fcn.00409704
pop edx
call fcn.00443ff4
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.0045e6f8
test al, al
je 0x45996b
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459978
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x10
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.004528c0
mov ecx, dword [ebp - 4]
mov dl, 0x11
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.0045270c
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x12
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.00452718
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x13
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409704
call fcn.004526fc
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x13
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 4]
call fcn.00452f34
mov ecx, dword [ebp - 4]
mov dl, 0x15
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 0x122c]
push eax
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00452c30
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x17
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea eax, [ebp - 0x1230]
push eax
xor ecx, ecx
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00452c30
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x16
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
push dword [ebp - 0x1b8]
push 0x45a134
lea eax, [ebp - 0x1234]
call fcn.00453438
push dword [ebp - 0x1234]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00405668
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x19
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x10]
call fcn.00405350
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x25
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.004546ec
mov ecx, dword [ebp - 4]
mov dl, 0x1c
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
push 0x64
call sub.kernel32.dll_Sleep_2
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x10]
call fcn.00454220
mov ecx, dword [ebp - 4]
mov dl, 0x1d
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x1bc]
call fcn.0045aa14
jmp case.0x458812.0
push dword [ebp - 0x10]
push 0x45a29c
push 0x45a2a8
lea eax, [ebp - 0x1238]
mov edx, 3
call fcn.00405668
mov eax, dword [ebp - 0x1238]
call fcn.0045aa4c
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b8]
call fcn.00454a34
test al, al
je 0x459c90
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459c9d
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x22
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00454ea4
test al, al
je 0x459ccd
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459cda
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x23
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b8]
call fcn.00455434
test al, al
je 0x459d26
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x459d33
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x24
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x27
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x48
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
mov eax, 0x208
call fcn.00402ea0
mov ebx, eax
mov esi, ebx
mov eax, esi
mov edx, dword [0x490aec]
mov edx, dword [edx]
mov ecx, 0xff
call fcn.00405570
mov eax, dword [0x490a48]
mov eax, dword [eax]
mov dword [esi + 0x200], eax
lea eax, [esi + 0x100]
mov edx, dword [ebp - 0x10]
mov ecx, 0xff
call fcn.00405570
mov byte [esi + 0x204], 0x67
push ebx
push 0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, 0x45bc70
xor edx, edx
xor eax, eax
call fcn.0040523c
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
mov edx, 0x45a290
call fcn.004056fc
jne 0x459e93
lea eax, [ebp - 4]
call fcn.0045e4b8
jmp 0x459e9b
lea eax, [ebp - 4]
call fcn.0045e530
cmp dword [ebp - 4], 0
je case.0x458812.0
mov ecx, dword [ebp - 4]
mov dl, 0x36
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.004531f4
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
push 0
push 0
push 0
push 0
push 2
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.user32.dll_mouse_event
mov eax, dword [ebp - 0x1b4]
call fcn.00409704
push eax
mov eax, dword [ebp - 0x1b8]
call fcn.00409704
push eax
call sub.user32.dll_SetCursorPos
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
push 0
push 0
push 0
push 0
push 8
call sub.user32.dll_mouse_event
push 0
push 0
push 0
push 0
push 0x10
call sub.user32.dll_mouse_event
mov eax, dword [ebp - 0x1b4]
call fcn.00409704
push eax
mov eax, dword [ebp - 0x1b8]
call fcn.00409704
push eax
call sub.user32.dll_SetCursorPos
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.00409d90
test al, al
je 0x459f90
mov ecx, 0x45a284
mov dl, 0x3a
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov ecx, 0x45a290
mov dl, 0x3a
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov eax, dword [ebp - 0x10]
call fcn.0045e728
test al, al
je 0x459fc7
mov ecx, 0x45a284
mov dl, 0x3b
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
mov ecx, 0x45a290
mov dl, 0x3b
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
jmp case.0x458812.0
lea edx, [ebp - 0x1b8]
mov ecx, 0x64
mov eax, dword [ebp - 0x10]
call fcn.004584c8
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b8]
call fcn.0045e62c
test al, al
je 0x45a018
lea eax, [ebp - 4]
mov edx, 0x45a284
call fcn.00405350
jmp 0x45a025
lea eax, [ebp - 4]
mov edx, 0x45a290
call fcn.00405350
mov ecx, dword [ebp - 4]
mov dl, 0x3c
mov eax, dword [ebp - 0x1bc]
call fcn.0045bb88
cmp dword [ebp - 0xc], 0
jne 0x4587d5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x458752
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45a122
lea eax, [ebp - 0x1238]
mov edx, 9
call fcn.004052dc
lea eax, [ebp - 0x1214]
mov edx, dword [0x45cbd4]
mov ecx, 2
call fcn.00405fbc
lea eax, [ebp - 0x1208]
call fcn.00405a2c
lea eax, [ebp - 0x1204]
call fcn.004052b8
lea eax, [ebp - 0x1200]
call fcn.00405a2c
lea eax, [ebp - 0x11fc]
mov edx, 4
call fcn.004052dc
lea eax, [ebp - 0x11ec]
mov edx, dword [0x45cbd4]
call fcn.0040690c
lea eax, [ebp - 0x1b8]
mov ecx, 0x65
mov edx, dword [0x40102c]
call fcn.00405fbc
lea eax, [ebp - 0x22]
mov edx, dword [0x45b5a0]
call fcn.00405f70
lea eax, [ebp - 0x18]
call fcn.00405a2c
lea eax, [ebp - 0x14]
mov edx, dword [0x45cbd4]
call fcn.0040690c
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.004052dc
ret