Function at 0x4fa1e0
Capabilities:
Create process on windows

Disassembly:
mov eax, dword [0xa4efd4]
push ebx
cmp eax, 0x65
push esi
ja case.0x4fa1f8.10
xor ecx, ecx
mov cl, byte [eax + 0x4faf70]
jmp dword [ecx*4 + 0x4faf44]
call fcn.004f97a0
test eax, eax
je case.0x4fa1f8.10
call fcn.004efe30
pop esi
mov dword [0xa4efd4], 1
mov dword [0xa4efd8], 0
pop ebx
ret
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4fa288
mov edx, dword [0x6665d8]
add eax, 0x42
mov dword [0xa25c10], eax
mov eax, dword [0xce8060]
add eax, edx
mov dword [0xce829c], esi
cmp eax, 0x1d
mov dword [0xce8060], eax
jle 0x4fa27e
mov dword [0x6665d8], 0xffffffff
cmp eax, esi
jge 0x4fa288
mov dword [0x6665d8], esi
mov edx, dword [0x647e98]
mov eax, dword [0x647e90]
cmp edx, eax
jne 0x4fa2ae
mov eax, dword [0x647e9c]
mov ecx, dword [0x647e94]
cmp eax, ecx
jne 0x4fa2ae
cmp dword [0xce829c], ebx
je 0x4fa328
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4fa2e0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fa2e0
mov eax, dword [0xa4effc]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4fa304
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fa304
mov eax, dword [0xa4f000]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4fa328
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fa328
mov eax, dword [0xa4f008]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
mov dword [0x647e38], esi
push 0xce7f98
call fcn.0043f3b0
add esp, 4
cmp al, 2
jne 0x4fa343
mov eax, dword [0xce7f98]
mov dword [0xcd5d28], eax
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004f1250
test eax, eax
je 0x4fa363
mov dword [0xa4efd8], ebx
mov dword [0xa4efd4], 2
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4fa380
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa392
call fcn.004f1a60
call fcn.00489b20
cmp dword [0x6486c8], ebx
je 0x4faedd
mov ecx, dword [0x647e54]
mov edx, dword [0x647e50]
push ecx
push edx
jmp 0x4faedf
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4fa416
mov edx, dword [0x6665d8]
add eax, 0x42
mov dword [0xa25c10], eax
mov eax, dword [0xce8060]
add eax, edx
mov dword [0xce829c], esi
cmp eax, 0x1d
mov dword [0xce8060], eax
jle 0x4fa40c
mov dword [0x6665d8], 0xffffffff
cmp eax, esi
jge 0x4fa416
mov dword [0x6665d8], esi
mov eax, dword [0x647e98]
mov ecx, dword [0x647e90]
cmp eax, ecx
jne 0x4fa43c
mov ecx, dword [0x647e9c]
mov eax, dword [0x647e94]
cmp ecx, eax
jne 0x4fa43c
cmp dword [0xce829c], ebx
je 0x4fa4b6
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4fa46e
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa46e
mov eax, dword [0xa4effc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4fa492
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa492
mov eax, dword [0xa4f000]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4fa4b6
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa4b6
mov eax, dword [0xa4f008]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
push 0xce7f98
call fcn.0043f3b0
add esp, 4
cmp al, 2
jne 0x4fa4d3
mov edx, dword [0xce7f98]
mov dword [0xcd5d28], edx
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x66c5ec], bl
je 0x4fa4e7
call fcn.0049df10
call fcn.004f1ea0
test eax, eax
je 0x4fa500
mov dword [0xa4efd8], ebx
mov dword [0xa4efd4], 4
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4fa51d
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa52f
call fcn.004f2cc0
call fcn.00489b20
cmp dword [0x6486c8], ebx
je 0x4faedd
mov eax, dword [0x647e54]
mov ecx, dword [0x647e50]
push eax
push ecx
jmp 0x4faedf
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4fa640
mov ecx, dword [0xcd59e8]
add eax, 0x42
mov dword [0xa25c10], eax
mov eax, dword [0xcd5c6c]
inc eax
mov dword [0xce829c], esi
cmp eax, ecx
mov dword [0xcd5c6c], eax
jle 0x4fa5bc
cmp dword [0xce8030], ebx
je 0x4fa5b0
mov dword [0xcd5c6c], ecx
jmp 0x4fa5bc
mov edx, dword [0xcd5c54]
mov dword [0xcd5c6c], edx
xor eax, eax
mov dword [0xce8064], eax
mov ecx, dword [eax*4 + 0xcd5acc]
mov edx, dword [eax*4 + 0xcd59fc]
inc ecx
cmp ecx, edx
mov dword [eax*4 + 0xcd5acc], ecx
jle 0x4fa605
cmp dword [eax*4 + 0xcd5b48], ebx
je 0x4fa5f7
push 0x63
call fcn.004f3150
mov eax, dword [0xce8064]
add esp, 4
jmp 0x4fa605
mov ecx, dword [eax*4 + 0xcd5b74]
mov dword [eax*4 + 0xcd5acc], ecx
inc eax
cmp eax, 8
mov dword [0xce8064], eax
jl 0x4fa5c3
mov eax, dword [0xcd5aec]
mov ecx, dword [0xcd5a1c]
inc eax
cmp eax, ecx
mov dword [0xcd5aec], eax
jle 0x4fa640
cmp dword [0xcd5b68], ebx
je 0x4fa634
call fcn.004f3610
jmp 0x4fa640
mov edx, dword [0xcd5b94]
mov dword [0xcd5aec], edx
mov eax, dword [0x647e98]
mov ecx, dword [0x647e90]
cmp eax, ecx
jne 0x4fa666
mov ecx, dword [0x647e9c]
mov eax, dword [0x647e94]
cmp ecx, eax
jne 0x4fa666
cmp dword [0xce829c], ebx
je 0x4fa6e0
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4fa698
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa698
mov eax, dword [0xa4effc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4fa6bc
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa6bc
mov eax, dword [0xa4f000]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4fa6e0
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa6e0
mov eax, dword [0xa4f008]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
push 0xce7f98
call fcn.0043f3b0
add esp, 4
cmp al, 2
jne 0x4fa6fd
mov edx, dword [0xce7f98]
mov dword [0xcd5d28], edx
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x66c5ec], bl
je 0x4fa711
call fcn.0049df10
call fcn.004f4070
dec eax
je 0x4fa728
dec eax
jne 0x4fa787
mov dword [0xa4efd4], 5
jmp 0x4fa787
call fcn.004e5430
mov eax, dword [0xa26ff0]
mov ecx, dword [eax*4 + 0xa27024]
push ecx
call dword [sym.imp.USER32.dll_SetCursor]
xor eax, eax
mov dword [0xce8064], eax
mov ecx, dword [eax*4 + 0xcd5c80]
cmp ecx, ebx
je 0x4fa767
push ecx
call fcn.00612e45
mov eax, dword [0xce8064]
add esp, 4
mov dword [eax*4 + 0xcd5c80], ebx
inc eax
cmp eax, 0x1c
mov dword [0xce8064], eax
jl 0x4fa747
call fcn.004f03c0
mov dword [0xa4efd4], 0x64
mov dword [0xa4efd8], ebx
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4fa7a4
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa7bb
call fcn.00452a00
call fcn.004f54e0
call fcn.00489b20
cmp dword [0x6486c8], ebx
je 0x4faedd
mov edx, dword [0x647e54]
mov eax, dword [0x647e50]
push edx
push eax
jmp 0x4faedf
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4fa8ce
add eax, 0x42
mov dword [0xce829c], esi
mov dword [0xa25c10], eax
xor eax, eax
mov dword [0xce8064], eax
mov ecx, dword [eax*4 + 0xcd5acc]
mov edx, dword [eax*4 + 0xcd59fc]
inc ecx
cmp ecx, edx
mov dword [eax*4 + 0xcd5acc], ecx
jle 0x4fa87a
cmp dword [eax*4 + 0xcd5b48], ebx
je 0x4fa86c
call fcn.004f6770
mov ecx, dword [0xce8064]
cmp ecx, eax
jne 0x4fa85c
call fcn.004f64b0
mov eax, dword [0xce8064]
jmp 0x4fa87a
push ecx
call fcn.004f3150
mov eax, dword [0xce8064]
add esp, 4
jmp 0x4fa87a
mov ecx, dword [eax*4 + 0xcd5b74]
mov dword [eax*4 + 0xcd5acc], ecx
inc eax
cmp eax, 8
mov dword [0xce8064], eax
jl 0x4fa81e
xor eax, eax
mov dword [0xce8064], 4
mov ecx, dword [eax + 0xcd5c70]
inc ecx
mov dword [eax + 0xcd5c70], ecx
mov edx, ecx
mov ecx, dword [eax + 0xcd59ec]
cmp edx, ecx
jle 0x4fa8c6
cmp dword [eax + 0xce8034], ebx
je 0x4fa8ba
mov dword [eax + 0xcd5c70], ecx
jmp 0x4fa8c6
mov edx, dword [eax + 0xcd5c58]
mov dword [eax + 0xcd5c70], edx
add eax, 4
cmp eax, 0xc
jl 0x4fa891
mov eax, dword [0x647e98]
mov ecx, dword [0x647e90]
cmp eax, ecx
jne 0x4fa8f4
mov ecx, dword [0x647e9c]
mov eax, dword [0x647e94]
cmp ecx, eax
jne 0x4fa8f4
cmp dword [0xce829c], ebx
je 0x4fa96e
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4fa926
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa926
mov eax, dword [0xa4effc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4fa94a
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa94a
mov eax, dword [0xa4f000]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4fa96e
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4fa96e
mov eax, dword [0xa4f008]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
call fcn.004f67e0
test eax, eax
je 0x4fa987
mov dword [0xa4efd8], ebx
mov dword [0xa4efd4], 6
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4fa9a4
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa7bb
call fcn.004f7150
jmp 0x4fa7bb
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4faa4e
mov ecx, dword [0xcd59e8]
add eax, 0x42
mov dword [0xa25c10], eax
mov eax, dword [0xcd5c6c]
inc eax
mov dword [0xce829c], esi
cmp eax, ecx
mov dword [0xcd5c6c], eax
jle 0x4faa1d
cmp dword [0xce8030], ebx
jne 0x4faa17
mov ecx, dword [0xcd5c54]
mov dword [0xcd5c6c], ecx
mov eax, dword [0xcd5acc]
mov ecx, dword [0xcd59fc]
inc eax
cmp eax, ecx
mov dword [0xcd5acc], eax
jle 0x4faa4e
cmp dword [0xcd5b48], ebx
je 0x4faa42
mov dword [0xcd5acc], ecx
jmp 0x4faa4e
mov edx, dword [0xcd5b74]
mov dword [0xcd5acc], edx
mov eax, dword [0x647e98]
mov ecx, dword [0x647e90]
cmp eax, ecx
jne 0x4faa74
mov ecx, dword [0x647e9c]
mov eax, dword [0x647e94]
cmp ecx, eax
jne 0x4faa74
cmp dword [0xce829c], ebx
je 0x4faaee
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4faaa6
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4faaa6
mov eax, dword [0xa4effc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4faaca
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4faaca
mov eax, dword [0xa4f000]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4faaee
mov edx, dword [eax]
push eax
call dword [edx + 0x60]
test eax, eax
je 0x4faaee
mov eax, dword [0xa4f008]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x6c]
mov dword [0x647e38], esi
push 0xce7f98
call fcn.0043f3b0
add esp, 4
cmp al, 2
jne 0x4fab0b
mov edx, dword [0xce7f98]
mov dword [0xcd5d28], edx
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x66c5ec], bl
je 0x4fab1f
call fcn.0049df10
call fcn.004f79c0
test eax, eax
je 0x4fab87
call fcn.004e5430
mov eax, dword [0xa26ff0]
mov ecx, dword [eax*4 + 0xa27024]
push ecx
call dword [sym.imp.USER32.dll_SetCursor]
xor eax, eax
mov dword [0xce8064], eax
mov ecx, dword [eax*4 + 0xcd5c80]
cmp ecx, ebx
je 0x4fab67
push ecx
call fcn.00612e45
mov eax, dword [0xce8064]
add esp, 4
mov dword [eax*4 + 0xcd5c80], ebx
inc eax
cmp eax, 0x1c
mov dword [0xce8064], eax
jl 0x4fab47
call fcn.004f03c0
mov dword [0xa4efd4], 0x64
mov dword [0xa4efd8], ebx
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4faba4
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa7bb
call fcn.00452a00
call fcn.004f89e0
jmp 0x4fa7bb
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4fac04
add eax, 0x42
mov dword [0xce829c], esi
mov dword [0xa25c10], eax
mov eax, dword [0xce8044]
inc eax
mov dword [0xce8044], eax
cmp dword [0xce8044], 0x32
jl 0x4fac44
cmp byte [0xa591f1], bl
je 0x4fac38
mov ecx, dword [0xa2af98]
push 5
push 0x68ef6c
push 0x68ef6c
push str.http:__www.17tx.ws
push str.open
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [0xce8044], ebx
mov byte [0xa591f1], bl
mov edx, dword [0x647e98]
mov eax, dword [0x647e90]
cmp edx, eax
jne 0x4fac6a
mov eax, dword [0x647e9c]
mov ecx, dword [0x647e94]
cmp eax, ecx
jne 0x4fac6a
cmp dword [0xce829c], ebx
je 0x4face4
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4fac9c
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fac9c
mov eax, dword [0xa4effc]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4facc0
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4facc0
mov eax, dword [0xa4f000]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4face4
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4face4
mov eax, dword [0xa4f008]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
mov dword [0x647e38], esi
push 0xce7f98
call fcn.0043f3b0
add esp, 4
cmp al, 2
jne 0x4facfb
mov dword [0xcd5d28], ebx
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x66c5ec], bl
je 0x4fad0f
call fcn.0049df10
call fcn.004f07b0
test eax, eax
je 0x4fad2e
mov eax, dword [0xcd5b44]
mov ecx, dword [0xcd5cf4]
mov dword [0xa4efd8], eax
mov dword [0xa4efd4], ecx
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4fad4b
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa7bb
call fcn.004f0900
jmp 0x4fa7bb
xor ebx, ebx
mov dword [0xce829c], ebx
mov dword [0xce82a0], ebx
call fcn.005a44e0
mov ecx, dword [0xa25c10]
mov dword [0x6d6790], eax
cmp ecx, eax
mov esi, 1
jae 0x4fad9b
add eax, 0x42
mov dword [0xce829c], esi
mov dword [0xa25c10], eax
mov ecx, dword [0x647e98]
mov eax, dword [0x647e90]
cmp ecx, eax
jne 0x4fadc1
mov edx, dword [0x647e9c]
mov eax, dword [0x647e94]
cmp edx, eax
jne 0x4fadc1
cmp dword [0xce829c], ebx
je 0x4fae3b
mov eax, dword [0xa4effc]
mov dword [0xce82a0], esi
cmp eax, ebx
je 0x4fadf3
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fadf3
mov eax, dword [0xa4effc]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
test eax, eax
jne case.0x4fa1f8.10
mov dword [0x647e38], esi
mov eax, dword [0xa4f000]
cmp eax, ebx
je 0x4fae17
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fae17
mov eax, dword [0xa4f000]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
mov dword [0x647e38], esi
mov eax, dword [0xa4f008]
cmp eax, ebx
je 0x4fae3b
mov ecx, dword [eax]
push eax
call dword [ecx + 0x60]
test eax, eax
je 0x4fae3b
mov eax, dword [0xa4f008]
push eax
mov edx, dword [eax]
call dword [edx + 0x6c]
mov dword [0x647e38], esi
push 0xce7f98
call fcn.0043f3b0
add esp, 4
cmp al, 2
jne 0x4fae56
mov eax, dword [0xce7f98]
mov dword [0xcd5d28], eax
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x66c5ec], bl
je 0x4fae6a
call fcn.0049df10
call fcn.004f0c70
dec eax
je 0x4fae77
dec eax
jne 0x4faea5
jmp 0x4fae95
mov ecx, dword [0xce8028]
push 0xce7f80
push ecx
mov dword [0xcd5a20], 0xb
call fcn.004e53e0
add esp, 8
mov dword [0xa4efd8], ebx
mov dword [0xa4efd4], 4
cmp dword [0xce82a0], ebx
je case.0x4fa1f8.10
cmp dword [0xce829c], ebx
jne 0x4faec2
push esi
call fcn.005a77b0
add esp, 4
call fcn.005a07e0
cmp dword [0xce829c], ebx
je 0x4fa7bb
call fcn.004f0fe0
jmp 0x4fa7bb
push ebx
push ebx
call fcn.005a7630
mov eax, dword [0xce829c]
add esp, 8
cmp eax, ebx
jne case.0x4fa1f8.10
push ebx
call fcn.005a77b0
add esp, 4
pop esi
pop ebx
ret
pop esi
mov dword [0xa4efd8], 0
mov dword [0xa4efd4], 1
pop ebx
ret
xor ebx, ebx
mov ecx, 0xa4bb08
push ebx
mov dword [0xa4f2b4], 1
call fcn.004ed830
mov ecx, dword [0xa2af98]
push ebx
push ebx
push 2
push ecx
mov dword [0xce8248], ebx
call dword [sym.imp.USER32.dll_PostMessageA]
pop esi
pop ebx
ret