Function at 0x4c212c
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x46
push 0
push 0
dec ecx
jne 0x4c2134
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x4c3ba4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [esi + 0x2f8]
call fcn.00474f8c
test eax, eax
jne 0x4c216c
mov eax, 0x4c3bbc
call fcn.0043f078
jmp 0x4c3b69
mov eax, dword [esi + 0x2f8]
call fcn.00474f8c
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.00404b48
mov eax, dword [esi + 0x2f8]
call fcn.00474f8c
mov esi, eax
jmp 0x4c219a
mov eax, esi
call fcn.00472810
mov esi, eax
mov eax, esi
call fcn.00472810
test eax, eax
jne 0x4c2191
test esi, esi
je 0x4c3b69
mov byte [ebp - 9], 1
mov eax, esi
call fcn.0047295c
test eax, eax
je 0x4c21ce
mov eax, esi
call fcn.0047295c
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.00404b48
mov edx, dword [ebp - 4]
mov eax, 0x4c3bf8
call fcn.004050a4
test eax, eax
jg 0x4c2235
mov eax, esi
call fcn.00472b6c
mov edi, eax
dec edi
test edi, edi
jl 0x4c2235
inc edi
xor ebx, ebx
mov edx, ebx
mov eax, esi
call fcn.00472a98
test eax, eax
je 0x4c2231
mov edx, ebx
mov eax, esi
call fcn.00472a98
mov edx, dword [eax + 8]
mov eax, 0x4c3bf8
call fcn.004050a4
test eax, eax
jle 0x4c2231
mov edx, ebx
mov eax, esi
call fcn.00472a98
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.00404b48
mov byte [ebp - 9], 0
jmp 0x4c2235
inc ebx
dec edi
jne 0x4c21f0
cmp byte [ebp - 9], 0
jne 0x4c225c
mov edx, ebx
mov eax, esi
call fcn.00472a98
call fcn.0047295c
call fcn.004729b8
call fcn.004729b8
call fcn.004729b8
mov ebx, eax
jmp 0x4c2265
mov eax, esi
call fcn.0047295c
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 8]
call fcn.00404b48
mov edx, dword [ebp - 4]
mov eax, 0x4c3c08
call fcn.004050a4
test eax, eax
jle 0x4c229c
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp - 4]
call fcn.00404d68
mov ecx, eax
mov edx, 0x10
mov eax, dword [ebp - 4]
call fcn.00404fc0
mov ebx, 1
jmp 0x4c22bb
mov eax, dword [ebp - 4]
cmp byte [eax + ebx - 1], 0x20
jne 0x4c22ba
lea eax, [ebp - 4]
call fcn.00404fb8
mov byte [eax + ebx - 1], 0x2b
inc ebx
mov eax, dword [ebp - 4]
call fcn.00404d68
cmp ebx, eax
jle 0x4c22a3
push 0x4c3c20
push dword [ebp - 4]
push 0x4c3c48
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404e28
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.00408e3c
mov edx, dword [ebp - 0x10]
mov eax, 0x4c3c5c
call fcn.004050a4
test eax, eax
jg 0x4c230e
mov edx, dword [ebp - 8]
mov eax, 0x4c3c80
call fcn.004050a4
test eax, eax
jle 0x4c231b
lea eax, [ebp - 8]
mov edx, 0x4c3c8c
call fcn.00404b48
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x14]
mov eax, 0x4c3ca8
call fcn.004050a4
test eax, eax
jle 0x4c2344
lea eax, [ebp - 8]
mov edx, 0x4c3cb8
call fcn.00404b48
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x18]
mov eax, 0x4c3cd8
call fcn.004050a4
test eax, eax
jle 0x4c236d
lea eax, [ebp - 8]
mov edx, 0x4c3ce8
call fcn.00404b48
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1c]
mov eax, 0x4c3d0c
call fcn.004050a4
test eax, eax
jg 0x4c23c1
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x20]
mov eax, 0x4c3d1c
call fcn.004050a4
test eax, eax
jg 0x4c23c1
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x24]
mov eax, 0x4c3d30
call fcn.004050a4
test eax, eax
jle 0x4c23ce
lea eax, [ebp - 8]
mov edx, 0x4c3d44
call fcn.00404b48
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x28]
mov eax, 0x4c3d64
call fcn.004050a4
test eax, eax
jle 0x4c23f7
lea eax, [ebp - 8]
mov edx, 0x4c3d78
call fcn.00404b48
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x2c]
mov eax, 0x4c3d9c
call fcn.004050a4
test eax, eax
jle 0x4c2420
lea eax, [ebp - 8]
mov edx, 0x4c3dac
call fcn.00404b48
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x30]
mov eax, 0x4c3dcc
call fcn.004050a4
test eax, eax
jle 0x4c2449
lea eax, [ebp - 8]
mov edx, 0x4c3ddc
call fcn.00404b48
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x34]
mov eax, 0x4c3df8
call fcn.004050a4
test eax, eax
jle 0x4c2472
lea eax, [ebp - 8]
mov edx, 0x4c3e08
call fcn.00404b48
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x38]
mov eax, 0x4c3e28
call fcn.004050a4
test eax, eax
jle 0x4c249b
lea eax, [ebp - 8]
mov edx, 0x4c3e38
call fcn.00404b48
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x3c]
mov eax, 0x4c3e58
call fcn.004050a4
test eax, eax
jle 0x4c24c4
lea eax, [ebp - 8]
mov edx, 0x4c3e68
call fcn.00404b48
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x40]
mov eax, 0x4c3e8c
call fcn.004050a4
test eax, eax
jle 0x4c24ed
lea eax, [ebp - 8]
mov edx, 0x4c3e9c
call fcn.00404b48
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x44]
mov eax, 0x4c3eb8
call fcn.004050a4
test eax, eax
jle 0x4c2516
lea eax, [ebp - 8]
mov edx, 0x4c3ec8
call fcn.00404b48
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x48]
mov eax, 0x4c3ee8
call fcn.004050a4
test eax, eax
jle 0x4c253f
lea eax, [ebp - 8]
mov edx, 0x4c3ef8
call fcn.00404b48
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x4c]
mov eax, 0x4c3f18
call fcn.004050a4
test eax, eax
jle 0x4c2568
lea eax, [ebp - 8]
mov edx, 0x4c3f24
call fcn.00404b48
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x50]
mov eax, 0x4c3f48
call fcn.004050a4
test eax, eax
jle 0x4c2591
lea eax, [ebp - 8]
mov edx, 0x4c3f58
call fcn.00404b48
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x54]
mov eax, 0x4c3f78
call fcn.004050a4
test eax, eax
jle 0x4c25ba
lea eax, [ebp - 8]
mov edx, 0x4c3f88
call fcn.00404b48
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x58]
mov eax, 0x4c3fa4
call fcn.004050a4
test eax, eax
jle 0x4c25e3
lea eax, [ebp - 8]
mov edx, 0x4c3fb8
call fcn.00404b48
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x5c]
mov eax, 0x4c3fd8
call fcn.004050a4
test eax, eax
jle 0x4c260c
lea eax, [ebp - 8]
mov edx, 0x4c3fe8
call fcn.00404b48
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x60]
mov eax, 0x4c4004
call fcn.004050a4
test eax, eax
jle 0x4c2635
lea eax, [ebp - 8]
mov edx, 0x4c4018
call fcn.00404b48
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x64]
mov eax, 0x4c403c
call fcn.004050a4
test eax, eax
jle 0x4c265e
lea eax, [ebp - 8]
mov edx, 0x4c404c
call fcn.00404b48
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x68]
mov eax, 0x4c406c
call fcn.004050a4
test eax, eax
jle 0x4c2687
lea eax, [ebp - 8]
mov edx, 0x4c407c
call fcn.00404b48
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x6c]
mov eax, 0x4c409c
call fcn.004050a4
test eax, eax
jle 0x4c26b0
lea eax, [ebp - 8]
mov edx, 0x4c40ac
call fcn.00404b48
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x70]
mov eax, 0x4c40cc
call fcn.004050a4
test eax, eax
jle 0x4c26d9
lea eax, [ebp - 8]
mov edx, 0x4c40dc
call fcn.00404b48
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x74]
mov eax, 0x4c40f8
call fcn.004050a4
test eax, eax
jle 0x4c2702
lea eax, [ebp - 8]
mov edx, 0x4c410c
call fcn.00404b48
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x78]
mov eax, 0x4c412c
call fcn.004050a4
test eax, eax
jle 0x4c272b
lea eax, [ebp - 8]
mov edx, 0x4c413c
call fcn.00404b48
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x7c]
mov eax, 0x4c4160
call fcn.004050a4
test eax, eax
jle 0x4c2754
lea eax, [ebp - 8]
mov edx, 0x4c413c
call fcn.00404b48
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x80]
mov eax, 0x4c4170
call fcn.004050a4
test eax, eax
jle 0x4c277d
lea eax, [ebp - 8]
mov edx, 0x4c4180
call fcn.00404b48
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x84]
mov eax, 0x4c41a0
call fcn.004050a4
test eax, eax
jle 0x4c27ac
lea eax, [ebp - 8]
mov edx, 0x4c41b4
call fcn.00404b48
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x88]
mov eax, 0x4c41d4
call fcn.004050a4
test eax, eax
jle 0x4c27db
lea eax, [ebp - 8]
mov edx, 0x4c41e4
call fcn.00404b48
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x8c]
mov eax, 0x4c420c
call fcn.004050a4
test eax, eax
jle 0x4c280a
lea eax, [ebp - 8]
mov edx, 0x4c421c
call fcn.00404b48
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x90]
mov eax, 0x4c423c
call fcn.004050a4
test eax, eax
jle 0x4c2839
lea eax, [ebp - 8]
mov edx, 0x4c4250
call fcn.00404b48
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x94]
mov eax, 0x4c4270
call fcn.004050a4
test eax, eax
jle 0x4c2868
lea eax, [ebp - 8]
mov edx, 0x4c4284
call fcn.00404b48
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x98]
mov eax, 0x4c42a4
call fcn.004050a4
test eax, eax
jle 0x4c2897
lea eax, [ebp - 8]
mov edx, 0x4c42b4
call fcn.00404b48
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x9c]
mov eax, 0x4c42d4
call fcn.004050a4
test eax, eax
jle 0x4c28c6
lea eax, [ebp - 8]
mov edx, 0x4c42e4
call fcn.00404b48
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xa0]
mov eax, 0x4c4304
call fcn.004050a4
test eax, eax
jle 0x4c28f5
lea eax, [ebp - 8]
mov edx, 0x4c4314
call fcn.00404b48
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xa4]
mov eax, 0x4c4334
call fcn.004050a4
test eax, eax
jle 0x4c2924
lea eax, [ebp - 8]
mov edx, 0x4c4344
call fcn.00404b48
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xa8]
mov eax, 0x4c4364
call fcn.004050a4
test eax, eax
jle 0x4c2953
lea eax, [ebp - 8]
mov edx, 0x4c4374
call fcn.00404b48
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xac]
mov eax, 0x4c4394
call fcn.004050a4
test eax, eax
jle 0x4c2982
lea eax, [ebp - 8]
mov edx, 0x4c43a4
call fcn.00404b48
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xb0]
mov eax, 0x4c43c4
call fcn.004050a4
test eax, eax
jle 0x4c29b1
lea eax, [ebp - 8]
mov edx, 0x4c43d4
call fcn.00404b48
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xb4]
mov eax, 0x4c43f4
call fcn.004050a4
test eax, eax
jle 0x4c29e0
lea eax, [ebp - 8]
mov edx, 0x4c4404
call fcn.00404b48
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xb8]
mov eax, 0x4c4424
call fcn.004050a4
test eax, eax
jle 0x4c2a0f
lea eax, [ebp - 8]
mov edx, 0x4c4438
call fcn.00404b48
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xbc]
mov eax, 0x4c445c
call fcn.004050a4
test eax, eax
jle 0x4c2a3e
lea eax, [ebp - 8]
mov edx, 0x4c446c
call fcn.00404b48
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xc0]
mov eax, 0x4c448c
call fcn.004050a4
test eax, eax
jle 0x4c2a6d
lea eax, [ebp - 8]
mov edx, 0x4c449c
call fcn.00404b48
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xc4]
mov eax, 0x4c44b8
call fcn.004050a4
test eax, eax
jle 0x4c2a9c
lea eax, [ebp - 8]
mov edx, 0x4c44c8
call fcn.00404b48
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xc8]
mov eax, 0x4c44e8
call fcn.004050a4
test eax, eax
jle 0x4c2acb
lea eax, [ebp - 8]
mov edx, 0x4c44f8
call fcn.00404b48
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xcc]
mov eax, 0x4c4518
call fcn.004050a4
test eax, eax
jle 0x4c2afa
lea eax, [ebp - 8]
mov edx, 0x4c4528
call fcn.00404b48
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xd0]
mov eax, 0x4c4548
call fcn.004050a4
test eax, eax
jle 0x4c2b29
lea eax, [ebp - 8]
mov edx, 0x4c4558
call fcn.00404b48
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xd4]
mov eax, 0x4c4578
call fcn.004050a4
test eax, eax
jle 0x4c2b58
lea eax, [ebp - 8]
mov edx, 0x4c4588
call fcn.00404b48
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xd8]
mov eax, 0x4c45a4
call fcn.004050a4
test eax, eax
jle 0x4c2b87
lea eax, [ebp - 8]
mov edx, 0x4c45b4
call fcn.00404b48
lea edx, [ebp - 0xdc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xdc]
mov eax, 0x4c45d0
call fcn.004050a4
test eax, eax
jle 0x4c2bb6
lea eax, [ebp - 8]
mov edx, 0x4c45e0
call fcn.00404b48
lea edx, [ebp - 0xe0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xe0]
mov eax, 0x4c4600
call fcn.004050a4
test eax, eax
jle 0x4c2be5
lea eax, [ebp - 8]
mov edx, 0x4c460c
call fcn.00404b48
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xe4]
mov eax, 0x4c4628
call fcn.004050a4
test eax, eax
jle 0x4c2c14
lea eax, [ebp - 8]
mov edx, 0x4c4638
call fcn.00404b48
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xe8]
mov eax, 0x4c4658
call fcn.004050a4
test eax, eax
jle 0x4c2c43
lea eax, [ebp - 8]
mov edx, 0x4c466c
call fcn.00404b48
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xec]
mov eax, 0x4c468c
call fcn.004050a4
test eax, eax
jle 0x4c2c72
lea eax, [ebp - 8]
mov edx, 0x4c46a0
call fcn.00404b48
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xf0]
mov eax, 0x4c46c0
call fcn.004050a4
test eax, eax
jle 0x4c2ca1
lea eax, [ebp - 8]
mov edx, 0x4c46d0
call fcn.00404b48
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xf4]
mov eax, 0x4c46f0
call fcn.004050a4
test eax, eax
jle 0x4c2cd0
lea eax, [ebp - 8]
mov edx, 0x4c4700
call fcn.00404b48
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xf8]
mov eax, 0x4c4720
call fcn.004050a4
test eax, eax
jle 0x4c2cff
lea eax, [ebp - 8]
mov edx, 0x4c4730
call fcn.00404b48
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0xfc]
mov eax, 0x4c4750
call fcn.004050a4
test eax, eax
jle 0x4c2d2e
lea eax, [ebp - 8]
mov edx, 0x4c4760
call fcn.00404b48
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x100]
mov eax, 0x4c4780
call fcn.004050a4
test eax, eax
jle 0x4c2d5d
lea eax, [ebp - 8]
mov edx, 0x4c4790
call fcn.00404b48
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x104]
mov eax, 0x4c47b0
call fcn.004050a4
test eax, eax
jle 0x4c2d8c
lea eax, [ebp - 8]
mov edx, 0x4c47c0
call fcn.00404b48
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x108]
mov eax, 0x4c47e4
call fcn.004050a4
test eax, eax
jle 0x4c2dbb
lea eax, [ebp - 8]
mov edx, 0x4c47f4
call fcn.00404b48
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x10c]
mov eax, 0x4c4814
call fcn.004050a4
test eax, eax
jle 0x4c2dea
lea eax, [ebp - 8]
mov edx, 0x4c4824
call fcn.00404b48
lea edx, [ebp - 0x110]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x110]
mov eax, 0x4c4848
call fcn.004050a4
test eax, eax
jle 0x4c2e19
lea eax, [ebp - 8]
mov edx, 0x4c485c
call fcn.00404b48
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x114]
mov eax, 0x4c4884
call fcn.004050a4
test eax, eax
jle 0x4c2e48
lea eax, [ebp - 8]
mov edx, 0x4c4894
call fcn.00404b48
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x118]
mov eax, 0x4c48b4
call fcn.004050a4
test eax, eax
jle 0x4c2e77
lea eax, [ebp - 8]
mov edx, 0x4c48c4
call fcn.00404b48
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x11c]
mov eax, 0x4c48e4
call fcn.004050a4
test eax, eax
jle 0x4c2ea6
lea eax, [ebp - 8]
mov edx, 0x4c48f4
call fcn.00404b48
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x120]
mov eax, 0x4c4914
call fcn.004050a4
test eax, eax
jle 0x4c2ed5
lea eax, [ebp - 8]
mov edx, 0x4c4924
call fcn.00404b48
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x124]
mov eax, 0x4c4944
call fcn.004050a4
test eax, eax
jle 0x4c2f04
lea eax, [ebp - 8]
mov edx, 0x4c4954
call fcn.00404b48
lea edx, [ebp - 0x128]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x128]
mov eax, 0x4c4974
call fcn.004050a4
test eax, eax
jle 0x4c2f33
lea eax, [ebp - 8]
mov edx, 0x4c4984
call fcn.00404b48
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x12c]
mov eax, 0x4c49c0
call fcn.004050a4
test eax, eax
jle 0x4c2f62
lea eax, [ebp - 8]
mov edx, 0x4c49d0
call fcn.00404b48
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x130]
mov eax, 0x4c49f4
call fcn.004050a4
test eax, eax
jle 0x4c2f91
lea eax, [ebp - 8]
mov edx, 0x4c4a04
call fcn.00404b48
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x134]
mov eax, 0x4c4a24
call fcn.004050a4
test eax, eax
jle 0x4c2fc0
lea eax, [ebp - 8]
mov edx, 0x4c4a34
call fcn.00404b48
lea edx, [ebp - 0x138]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x138]
mov eax, 0x4c4a54
call fcn.004050a4
test eax, eax
jle 0x4c2fef
lea eax, [ebp - 8]
mov edx, 0x4c4a64
call fcn.00404b48
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x13c]
mov eax, 0x4c4a80
call fcn.004050a4
test eax, eax
jle 0x4c301e
lea eax, [ebp - 8]
mov edx, 0x4c4a90
call fcn.00404b48
lea edx, [ebp - 0x140]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x140]
mov eax, 0x4c4ab4
call fcn.004050a4
test eax, eax
jle 0x4c304d
lea eax, [ebp - 8]
mov edx, 0x4c4ac4
call fcn.00404b48
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x144]
mov eax, 0x4c4ae0
call fcn.004050a4
test eax, eax
jle 0x4c307c
lea eax, [ebp - 8]
mov edx, 0x4c4af0
call fcn.00404b48
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x148]
mov eax, 0x4c4b10
call fcn.004050a4
test eax, eax
jle 0x4c30ab
lea eax, [ebp - 8]
mov edx, 0x4c4b20
call fcn.00404b48
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x14c]
mov eax, 0x4c4b40
call fcn.004050a4
test eax, eax
jle 0x4c30da
lea eax, [ebp - 8]
mov edx, 0x4c4b54
call fcn.00404b48
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x150]
mov eax, 0x4c4b78
call fcn.004050a4
test eax, eax
jle 0x4c3109
lea eax, [ebp - 8]
mov edx, 0x4c4b88
call fcn.00404b48
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x154]
mov eax, 0x4c4ba8
call fcn.004050a4
test eax, eax
jle 0x4c3138
lea eax, [ebp - 8]
mov edx, 0x4c4bb8
call fcn.00404b48
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x158]
mov eax, 0x4c4bd8
call fcn.004050a4
test eax, eax
jle 0x4c3167
lea eax, [ebp - 8]
mov edx, 0x4c4be8
call fcn.00404b48
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x15c]
mov eax, 0x4c4c08
call fcn.004050a4
test eax, eax
jle 0x4c3196
lea eax, [ebp - 8]
mov edx, 0x4c4c18
call fcn.00404b48
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x160]
mov eax, 0x4c4c38
call fcn.004050a4
test eax, eax
jle 0x4c31c5
lea eax, [ebp - 8]
mov edx, 0x4c4c48
call fcn.00404b48
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x164]
mov eax, 0x4c4c68
call fcn.004050a4
test eax, eax
jle 0x4c31f4
lea eax, [ebp - 8]
mov edx, 0x4c4c78
call fcn.00404b48
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x168]
mov eax, 0x4c4c98
call fcn.004050a4
test eax, eax
jle 0x4c3223
lea eax, [ebp - 8]
mov edx, 0x4c4c78
call fcn.00404b48
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x16c]
mov eax, 0x4c4cac
call fcn.004050a4
test eax, eax
jle 0x4c3252
lea eax, [ebp - 8]
mov edx, 0x4c4cbc
call fcn.00404b48
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x170]
mov eax, 0x4c4cd8
call fcn.004050a4
test eax, eax
jle 0x4c3281
lea eax, [ebp - 8]
mov edx, 0x4c4ce8
call fcn.00404b48
lea edx, [ebp - 0x174]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x174]
mov eax, 0x4c4d04
call fcn.004050a4
test eax, eax
jle 0x4c32b0
lea eax, [ebp - 8]
mov edx, 0x4c4d14
call fcn.00404b48
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x178]
mov eax, 0x4c4d34
call fcn.004050a4
test eax, eax
jle 0x4c32df
lea eax, [ebp - 8]
mov edx, 0x4c4d44
call fcn.00404b48
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x17c]
mov eax, 0x4c4d04
call fcn.004050a4
test eax, eax
jle 0x4c330e
lea eax, [ebp - 8]
mov edx, 0x4c4d14
call fcn.00404b48
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x180]
mov eax, 0x4c4d68
call fcn.004050a4
test eax, eax
jle 0x4c333d
lea eax, [ebp - 8]
mov edx, 0x4c4d78
call fcn.00404b48
lea edx, [ebp - 0x184]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x184]
mov eax, 0x4c4d98
call fcn.004050a4
test eax, eax
jle 0x4c336c
lea eax, [ebp - 8]
mov edx, 0x4c4da8
call fcn.00404b48
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x188]
mov eax, 0x4c4dc8
call fcn.004050a4
test eax, eax
jle 0x4c339b
lea eax, [ebp - 8]
mov edx, 0x4c4dd8
call fcn.00404b48
lea edx, [ebp - 0x18c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x18c]
mov eax, 0x4c4dfc
call fcn.004050a4
test eax, eax
jle 0x4c33ca
lea eax, [ebp - 8]
mov edx, 0x4c4e08
call fcn.00404b48
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x190]
mov eax, 0x4c4e30
call fcn.004050a4
test eax, eax
jle 0x4c33f9
lea eax, [ebp - 8]
mov edx, 0x4c4e40
call fcn.00404b48
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x194]
mov eax, 0x4c4e64
call fcn.004050a4
test eax, eax
jle 0x4c3428
lea eax, [ebp - 8]
mov edx, 0x4c4e74
call fcn.00404b48
lea edx, [ebp - 0x198]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x198]
mov eax, 0x4c4e94
call fcn.004050a4
test eax, eax
jle 0x4c3457
lea eax, [ebp - 8]
mov edx, 0x4c4ea8
call fcn.00404b48
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x19c]
mov eax, 0x4c4ec8
call fcn.004050a4
test eax, eax
jle 0x4c3486
lea eax, [ebp - 8]
mov edx, 0x4c4ed4
call fcn.00404b48
lea edx, [ebp - 0x1a0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1a0]
mov eax, 0x4c4efc
call fcn.004050a4
test eax, eax
jle 0x4c34b5
lea eax, [ebp - 8]
mov edx, 0x4c4f0c
call fcn.00404b48
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1a4]
mov eax, 0x4c4f2c
call fcn.004050a4
test eax, eax
jle 0x4c34e4
lea eax, [ebp - 8]
mov edx, 0x4c4f3c
call fcn.00404b48
lea edx, [ebp - 0x1a8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1a8]
mov eax, 0x4c4f5c
call fcn.004050a4
test eax, eax
jle 0x4c3513
lea eax, [ebp - 8]
mov edx, 0x4c4f3c
call fcn.00404b48
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1ac]
mov eax, 0x4c4f70
call fcn.004050a4
test eax, eax
jle 0x4c3542
lea eax, [ebp - 8]
mov edx, 0x4c4f84
call fcn.00404b48
lea edx, [ebp - 0x1b0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1b0]
mov eax, 0x4c4fa4
call fcn.004050a4
test eax, eax
jle 0x4c3571
lea eax, [ebp - 8]
mov edx, 0x4c4fb4
call fcn.00404b48
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1b4]
mov eax, 0x4c4fd0
call fcn.004050a4
test eax, eax
jle 0x4c35a0
lea eax, [ebp - 8]
mov edx, 0x4c4fe0
call fcn.00404b48
lea edx, [ebp - 0x1b8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1b8]
mov eax, 0x4c5000
call fcn.004050a4
test eax, eax
jle 0x4c35cf
lea eax, [ebp - 8]
mov edx, 0x4c5010
call fcn.00404b48
lea edx, [ebp - 0x1bc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1bc]
mov eax, 0x4c502c
call fcn.004050a4
test eax, eax
jle 0x4c35fe
lea eax, [ebp - 8]
mov edx, 0x4c503c
call fcn.00404b48
lea edx, [ebp - 0x1c0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1c0]
mov eax, 0x4c5064
call fcn.004050a4
test eax, eax
jle 0x4c362d
lea eax, [ebp - 8]
mov edx, 0x4c5074
call fcn.00404b48
lea edx, [ebp - 0x1c4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1c4]
mov eax, 0x4c5094
call fcn.004050a4
test eax, eax
jle 0x4c365c
lea eax, [ebp - 8]
mov edx, 0x4c50a4
call fcn.00404b48
lea edx, [ebp - 0x1c8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1c8]
mov eax, 0x4c50c4
call fcn.004050a4
test eax, eax
jle 0x4c368b
lea eax, [ebp - 8]
mov edx, 0x4c50d4
call fcn.00404b48
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1cc]
mov eax, 0x4c50f4
call fcn.004050a4
test eax, eax
jle 0x4c36ba
lea eax, [ebp - 8]
mov edx, 0x4c5104
call fcn.00404b48
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1d0]
mov eax, 0x4c5120
call fcn.004050a4
test eax, eax
jle 0x4c36e9
lea eax, [ebp - 8]
mov edx, 0x4c5130
call fcn.00404b48
lea edx, [ebp - 0x1d4]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1d4]
mov eax, 0x4c5160
call fcn.004050a4
test eax, eax
jle 0x4c3718
lea eax, [ebp - 8]
mov edx, 0x4c5170
call fcn.00404b48
lea edx, [ebp - 0x1d8]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1d8]
mov eax, 0x4c5194
call fcn.004050a4
test eax, eax
jle 0x4c3747
lea eax, [ebp - 8]
mov edx, 0x4c51a8
call fcn.00404b48
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1dc]
mov eax, 0x4c51cc
call fcn.004050a4
test eax, eax
jle 0x4c3776
lea eax, [ebp - 8]
mov edx, 0x4c51dc
call fcn.00404b48
lea edx, [ebp - 0x1e0]
mov eax, dword [ebp - 8]
call fcn.00408e00
mov edx, dword [ebp - 0x1e0]
mov eax, 0x4c51fc
call fcn.004050a4
test eax, eax
jle 0x4c37a5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c3bab
lea eax, [ebp - 0x230]
mov edx, 0x64
call fcn.00404ad4
lea eax, [ebp - 0xa0]
mov edx, 0x25
call fcn.00404ad4
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404ad4
ret