Function at 0x417af0
Capabilities:
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x7310
call fcn.004e7170
push ebx
push esi
push edi
mov dword [ebp - 0xc], 0
jmp 0x417b0d
xor eax, eax
test eax, eax
jne 0x417b07
push 0x84
push 0
push 0x5f9360
call fcn.004e6e70
add esp, 0xc
mov ecx, dword [0x4fe7f8]
mov dword [0x5f93ae], ecx
mov dword [0x5f53c4], 0
mov edx, dword [0x5f93ae]
and edx, 0x400
test edx, edx
je 0x417b57
mov dword [0x5f53c4], 1
mov dword [0x5fb9e0], 0
mov eax, dword [0x5f93ae]
and eax, 0x200
test eax, eax
je 0x417b79
mov dword [0x5fb9e0], 1
jmp 0x426856
jmp 0x426873
mov cx, word [0x5e4574]
add cx, 1
mov word [0x5e4574], cx
call fcn.004885b0
call fcn.00488860
push 0x800
push 0
push 0x5fba40
call fcn.004e6e70
add esp, 0xc
push 0x8001
call dword [0x5fe794]
mov dword [0x5e455c], eax
mov edx, dword [0x5f93ae]
and edx, 2
test edx, edx
je 0x426bcd
push 0x18
push 0x54f698
push 0x5fa4e0
call fcn.004e6b30
add esp, 0xc
mov dword [0x5f5660], 0x16
jmp 0x4268f1
mov eax, dword [0x5f5660]
sub eax, 1
mov dword [0x5f5660], eax
cmp dword [0x5f5660], 0
jl 0x426920
mov ecx, dword [0x5f5660]
mov edx, dword [0x5f5660]
mov al, byte [ecx + 0x5fa4e0]
xor al, byte [edx + 0x5fa4e1]
mov ecx, dword [0x5f5660]
mov byte [ecx + 0x5fa4e0], al
jmp 0x4268e4
push 0x18
push 0x5fa4e0
push 0x5fa080
call fcn.004e6b30
add esp, 0xc
mov byte [0x5fa098], 0
push 0x5e4654
push 0x20019
push 0
push 0x5fa080
push 0x80000002
call dword [0x5f5b40]
test eax, eax
jne 0x426972
mov edx, dword [0x5e4654]
push edx
call dword [0x5f5cac]
mov dword [0x525b00], 1
mov dword [0x58ad1d], 0
cmp dword [0x525b00], 0
je 0x426bcd
push 0x532db8
call fcn.00495520
add esp, 4
push 0
call dword [0x5f8138]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0x491a20
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x30], 0x54f6b4
mov dword [ebp - 0x2c], 0x54f6c0
lea ecx, [ebp - 0x50]
push ecx
call dword [0x5fac60]
mov word [ebp - 0x9c], ax
push 0x10
call dword [0x5faa40]
mov dword [ebp - 0x28], eax
push 0x11
call dword [0x5faa40]
mov dword [ebp - 0x54], eax
mov dword [0x5fba00], 0x12c
mov dword [0x5fc320], 0xc8
mov dword [0x5e46e0], 0
push 0
mov edx, dword [ebp - 0x10]
push edx
push 0
push 0
mov eax, dword [0x5fc320]
push eax
mov ecx, dword [0x5fba00]
push ecx
mov eax, dword [ebp - 0x54]
sub eax, dword [0x5fc320]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x28]
sub eax, dword [0x5fba00]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x80040000
push 0x54f6cc
push 0x54f6d8
push 0x80
call dword [0x5fabb4]
mov dword [0x5e46e0], eax
cmp dword [0x5e46e0], 0
je 0x426bcd
push 0xa
mov edx, dword [0x5e46e0]
push edx
call dword [0x5fa070]
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [0x5e46e0]
push ecx
call dword [0x5fc510]
mov dword [ebp - 0x98], eax
push 0x5f9ff0
mov edx, dword [0x5e46e0]
push edx
call dword [0x5f5ca4]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call fcn.00495110
add esp, 8
mov edx, dword [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0xa4]
push eax
push 0xa
mov ecx, dword [0x5fba00]
sub ecx, dword [ebp - 0xa4]
sub ecx, 0x14
push ecx
mov edx, dword [ebp - 0x98]
push edx
call fcn.00495170
add esp, 0x14
push 0x10
push 0x5f9ff0
lea eax, [ebp - 0x20]
push eax
call fcn.004e6b30
add esp, 0xc
mov eax, dword [0x5f9ffc]
sub eax, dword [0x5f9ff4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [0x5f9ff4]
lea edx, [ecx + eax - 0x28]
mov dword [ebp - 0x1c], edx
push 0x10
lea eax, [ebp - 0x20]
push eax
push 0x5f9ff0
call fcn.004e6b30
add esp, 0xc
push 0x4fbbf8
call fcn.00486390
add esp, 4
push 0x4fbbf8
call fcn.00486870
add esp, 4
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [0x5e46e0]
push edx
call dword [0x5fe640]
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x5e46e0]
push ecx
call dword [0x5f5ca4]
push 1
lea edx, [ebp - 0x20]
push edx
mov eax, dword [0x5e46e0]
push eax
call dword [0x5fba28]
mov ecx, dword [0x5e46e0]
push ecx
call dword [0x5fa4c4]
lea edx, [ebp - 0x24]
push edx
push 0
push 0
push 0x491cf0
push 0x3e8
push 0
call dword [0x5f9220]
mov dword [ebp - 0xa0], eax
mov ax, word [0x5e4574]
add ax, 1
mov word [0x5e4574], ax
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
call fcn.00493150
push 0
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426c5c
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426c5c
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x4f4bf8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f4bf8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f4bf8
call fcn.004862b0
add esp, 8
push 5
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426cc2
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426cc2
push 0x1000
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x4fd3f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4fd3f8
call fcn.0049e980
add esp, 8
push 0x1000
push 0x4fd3f8
call fcn.004862b0
add esp, 8
push 6
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426d28
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426d28
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x4fe3f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4fe3f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4fe3f8
call fcn.004862b0
add esp, 8
push 1
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426d8e
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426d8e
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x4f53f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f53f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f53f8
call fcn.004862b0
add esp, 8
push 2
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426df4
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426df4
push 0x400
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x4f57f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f57f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f57f8
call fcn.004862b0
add esp, 8
push 3
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426e5a
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426e5a
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x4f63f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f63f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f63f8
call fcn.004862b0
add esp, 8
push 4
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426ec0
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426ec0
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x4f83f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f83f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f83f8
call fcn.004862b0
add esp, 8
push 7
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426f26
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426f26
push 0x400
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x4f8bf8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f8bf8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f8bf8
call fcn.004862b0
add esp, 8
push 8
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426f8c
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426f8c
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x4f8ff8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f8ff8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f8ff8
call fcn.004862b0
add esp, 8
push 9
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x426ff2
mov ecx, dword [ebp - 0x11b8]
push ecx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x426ff2
push 0x400
mov edx, dword [ebp - 0x11b8]
push edx
push 0x4f93f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f93f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f93f8
call fcn.004862b0
add esp, 8
push 0xa
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x427058
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x427058
push 0x400
mov ecx, dword [ebp - 0x11b8]
push ecx
push 0x4f97f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f97f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f97f8
call fcn.004862b0
add esp, 8
push 0xb
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x4270be
mov edx, dword [ebp - 0x11b8]
push edx
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x4270be
push 0x400
mov eax, dword [ebp - 0x11b8]
push eax
push 0x4f67f8
call fcn.004864c0
add esp, 0xc
push 0
push 0x4f67f8
call fcn.0049e980
add esp, 8
push 0x400
push 0x4f67f8
call fcn.004862b0
add esp, 8
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x11b0]
push edx
call fcn.004e6ed0
add esp, 8
lea eax, [ebp - 0x11b0]
push eax
call fcn.004f265d
add esp, 4
push 0x54f6e4
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x11b0]
push ecx
call fcn.004e8000
add esp, 8
mov dword [ebp - 0x15c0], eax
cmp dword [ebp - 0x15c0], 0
je 0x427118
mov dword [ebp - 0x1ac], 1
jmp 0x42714e
push 0x54f6fc
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x11b0]
push edx
call fcn.004e8000
add esp, 8
mov dword [ebp - 0x15c0], eax
cmp dword [ebp - 0x15c0], 0
je 0x42714e
mov dword [ebp - 0x1b0], 1
cmp dword [ebp - 0x1b0], 0
je 0x427491
mov dword [0x5f5600], 0
jmp 0x427174
mov eax, dword [0x5f5600]
add eax, 1
mov dword [0x5f5600], eax
cmp dword [0x5f5600], 0xc
jge 0x427491
cmp dword [0x5f5600], 0
jne 0x4271ac
push 0x54f710
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 1
jne 0x4271d7
push 0x54f724
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 2
jne 0x427202
push 0x54f738
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 3
jne 0x42722d
push 0x54f748
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 4
jne 0x427258
push 0x54f75c
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 5
jne 0x427283
push 0x54f774
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 6
jne 0x4272ae
push 0x54f790
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 7
jne 0x4272d9
push 0x54f7a8
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 8
jne 0x427304
push 0x54f7c0
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.004e6ed0
add esp, 8
jmp 0x427167
cmp dword [0x5f5600], 9
jne 0x42732c
push 0x54f7e0
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x26c0]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x42737d
cmp dword [0x5f5600], 0xa
jne 0x427357
push 0x54f7fc
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x26c0]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x427167
cmp dword [0x5f5600], 0xb
jne 0x42737d
push 0x54f818
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x26c0]
push eax
call fcn.004e6ed0
add esp, 8
push 0x1000
push 0
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.004e6e70
add esp, 0xc
mov edx, dword [0x5f5600]
push edx
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x427404
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x427404
push 0x1000
mov ecx, dword [ebp - 0x11b8]
push ecx
lea edx, [ebp - 0x25c0]
push edx
call fcn.004864c0
add esp, 0xc
push 0
lea eax, [ebp - 0x25c0]
push eax
call fcn.0049e980
add esp, 8
push 0x1000
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.004862b0
add esp, 8
push 0xfff
lea edx, [ebp - 0x25c0]
push edx
lea eax, [ebp - 0x11b0]
push eax
call fcn.004e6b30
add esp, 0xc
mov dword [0x5f5660], 0xffd
jmp 0x42743a
mov ecx, dword [0x5f5660]
sub ecx, 1
mov dword [0x5f5660], ecx
cmp dword [0x5f5660], 0
jl 0x42746b
mov edx, dword [0x5f5660]
mov eax, dword [0x5f5660]
mov cl, byte [ebp + edx - 0x11b0]
xor cl, byte [ebp + eax - 0x11af]
mov edx, dword [0x5f5660]
mov byte [ebp + edx - 0x11b0], cl
jmp 0x42742b
mov byte [ebp - 0x1b1], 0
push 0x40
lea eax, [ebp - 0x26c0]
push eax
lea ecx, [ebp - 0x11b0]
push ecx
push 0
call fcn.004859f0
add esp, 0x10
jmp 0x427167
cmp dword [ebp - 0x1ac], 0
je 0x427c98
lea edx, [ebp - 0x15b8]
push edx
lea eax, [ebp - 0x11b4]
push eax
call fcn.00493500
add esp, 8
test eax, eax
je 0x427c98
mov dword [ebp - 0x2ac4], 0
push 0x100
lea ecx, [ebp - 0x4fc4]
push ecx
call dword [sym.imp.kernel32.dll_GetSystemDirectoryA]
push 0x5c
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e70b0
add esp, 8
mov dword [ebp - 0x15c0], eax
cmp dword [ebp - 0x15c0], 0
je 0x427521
mov eax, dword [ebp - 0x15c0]
mov byte [eax + 1], 0
push 0x54f830
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.004e6ee0
add esp, 8
jmp 0x42753e
push 0x54f844
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e6ed0
add esp, 8
lea eax, [ebp - 0x4fc4]
push eax
lea ecx, [ebp - 0x1a8]
push ecx
call fcn.004e6ed0
add esp, 8
push 0x54f85c
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e7fdf
add esp, 8
mov dword [ebp - 0x2ac4], eax
mov dword [ebp - 0x15bc], 0
jmp 0x427589
mov eax, dword [ebp - 0x15bc]
add eax, 1
mov dword [ebp - 0x15bc], eax
mov ecx, dword [ebp - 0x15bc]
cmp ecx, dword [ebp - 0x11b4]
jge 0x427c2c
mov byte [ebp - 0x4fc8], 0
mov edx, dword [ebp - 0x15bc]
mov eax, dword [ebp + edx*4 - 0x15b8]
push eax
call fcn.004934d0
add esp, 4
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 4
push 0x54f860
call fcn.004e7eb5
add esp, 0x10
mov dword [ebp - 0x4fcc], 0
jmp 0x4275eb
mov edx, dword [ebp - 0x4fcc]
add edx, 1
mov dword [ebp - 0x4fcc], edx
cmp dword [ebp - 0x4fcc], 0x20
jge 0x42760e
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 0x10
push 0x54f868
call fcn.004e7eb5
add esp, 0x10
jmp 0x4275dc
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 4
push 0x54f87c
call fcn.004e7eb5
add esp, 0x10
lea edx, [ebp - 0x4ec4]
push edx
mov eax, dword [ebp - 0x15bc]
mov ecx, dword [ebp + eax*4 - 0x15b8]
push ecx
call fcn.004935d0
add esp, 8
lea edx, [ebp - 0x4ec4]
push edx
mov eax, dword [ebp - 0x15bc]
mov ecx, dword [ebp + eax*4 - 0x15b8]
push ecx
push 0x54f884
lea edx, [ebp - 0x2ac0]
push edx
call fcn.004e6fc0
add esp, 0x10
lea eax, [ebp - 0x2ac0]
push eax
call fcn.004e7020
add esp, 4
mov dword [ebp - 0x4fd4], eax
mov dword [ebp - 0x4fcc], 0
jmp 0x42769c
mov ecx, dword [ebp - 0x4fcc]
add ecx, 1
mov dword [ebp - 0x4fcc], ecx
mov edx, dword [ebp - 0x4fcc]
cmp edx, dword [ebp - 0x4fd4]
jge 0x4276e7
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 1
mov ecx, dword [ebp - 0x4fcc]
lea edx, [ebp + ecx - 0x2ac0]
push edx
call fcn.004e7eb5
add esp, 0x10
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 1
lea ecx, [ebp - 0x4fc8]
push ecx
call fcn.004e7eb5
add esp, 0x10
jmp 0x42768d
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 4
push 0x54f8a8
call fcn.004e7eb5
add esp, 0x10
mov dword [ebp - 0x4fd0], 0
jmp 0x42771a
mov eax, dword [ebp - 0x4fd0]
add eax, 1
mov dword [ebp - 0x4fd0], eax
cmp dword [ebp - 0x4fd0], 0xc
jge 0x427c27
cmp dword [ebp - 0x4fd0], 0
jne 0x427752
push 0x54f8b0
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 1
jne 0x42777d
push 0x54f8c0
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 2
jne 0x4277a8
push 0x54f8d0
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 3
jne 0x4277d3
push 0x54f8dc
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 4
jne 0x4277fe
push 0x54f8ec
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 5
jne 0x427829
push 0x54f900
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 6
jne 0x427854
push 0x54f918
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 7
jne 0x42787f
push 0x54f92c
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 8
jne 0x4278aa
push 0x54f940
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.004e6ed0
add esp, 8
jmp 0x42770b
cmp dword [ebp - 0x4fd0], 9
jne 0x4278d2
push 0x54f95c
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x4fc4]
push ecx
call fcn.004e6ed0
add esp, 8
jmp 0x427923
cmp dword [ebp - 0x4fd0], 0xa
jne 0x4278fd
push 0x54f974
call fcn.0049be80
add esp, 4
push eax
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e6ed0
add esp, 8
jmp 0x42770b
cmp dword [ebp - 0x4fd0], 0xb
jne 0x427923
push 0x54f98c
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.004e6ed0
add esp, 8
push 0x1000
push 0
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.004e6e70
add esp, 0xc
mov edx, dword [ebp - 0x4fd0]
push edx
call fcn.00494830
add esp, 4
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x11b8], 0
je 0x4279aa
mov eax, dword [ebp - 0x11b8]
push eax
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x4279aa
push 0x1000
mov ecx, dword [ebp - 0x11b8]
push ecx
lea edx, [ebp - 0x25c0]
push edx
call fcn.004864c0
add esp, 0xc
push 0
lea eax, [ebp - 0x25c0]
push eax
call fcn.0049e980
add esp, 8
push 0x1000
lea ecx, [ebp - 0x25c0]
push ecx
call fcn.004862b0
add esp, 8
push 0xfff
lea edx, [ebp - 0x25c0]
push edx
lea eax, [ebp - 0x11b0]
push eax
call fcn.004e6b30
add esp, 0xc
mov dword [0x5f5660], 0xffd
jmp 0x4279e0
mov ecx, dword [0x5f5660]
sub ecx, 1
mov dword [0x5f5660], ecx
cmp dword [0x5f5660], 0
jl 0x427a11
mov edx, dword [0x5f5660]
mov eax, dword [0x5f5660]
mov cl, byte [ebp + edx - 0x11b0]
xor cl, byte [ebp + eax - 0x11af]
mov edx, dword [0x5f5660]
mov byte [ebp + edx - 0x11b0], cl
jmp 0x4279d1
mov byte [ebp - 0x1b1], 0
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 4
push 0x54f9a0
call fcn.004e7eb5
add esp, 0x10
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 2
push 0x54f9a8
call fcn.004e7eb5
add esp, 0x10
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e7020
add esp, 4
mov dword [ebp - 0x4fd4], eax
mov dword [ebp - 0x4fcc], 0
jmp 0x427a78
mov eax, dword [ebp - 0x4fcc]
add eax, 1
mov dword [ebp - 0x4fcc], eax
mov ecx, dword [ebp - 0x4fcc]
cmp ecx, dword [ebp - 0x4fd4]
jge 0x427ac3
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 1
mov eax, dword [ebp - 0x4fcc]
lea ecx, [ebp + eax - 0x4fc4]
push ecx
call fcn.004e7eb5
add esp, 0x10
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 1
lea eax, [ebp - 0x4fc8]
push eax
call fcn.004e7eb5
add esp, 0x10
jmp 0x427a69
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 2
push 0x54f9ac
call fcn.004e7eb5
add esp, 0x10
mov edx, dword [ebp - 0x2ac4]
push edx
push 1
push 4
push 0x54f9b0
call fcn.004e7eb5
add esp, 0x10
lea eax, [ebp - 0x11b0]
push eax
call fcn.004a97f0
add esp, 4
test eax, eax
je 0x427b5f
push 0x2000
push 0
lea ecx, [ebp - 0x4ac4]
push ecx
call fcn.004e6e70
add esp, 0xc
lea edx, [ebp - 0x4ac4]
push edx
lea eax, [ebp - 0x11b0]
push eax
call fcn.004a9820
add esp, 8
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 2
lea edx, [ebp - 0x4ac4]
push edx
call fcn.004e7e98
add esp, 4
push eax
lea eax, [ebp - 0x4ac4]
push eax
call fcn.004e7eb5
add esp, 0x10
jmp 0x427c0a
lea ecx, [ebp - 0x11b0]
push ecx
call fcn.004e7020
add esp, 4
mov dword [ebp - 0x4fd4], eax
mov dword [ebp - 0x4fcc], 0
jmp 0x427b8f
mov edx, dword [ebp - 0x4fcc]
add edx, 1
mov dword [ebp - 0x4fcc], edx
mov eax, dword [ebp - 0x4fcc]
cmp eax, dword [ebp - 0x4fd4]
jge 0x427c0a
mov ecx, dword [ebp - 0x4fcc]
movsx edx, byte [ebp + ecx - 0x11b0]
cmp edx, 0xa
jne 0x427bca
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 4
push 0x54f9b8
call fcn.004e7eb5
add esp, 0x10
jmp 0x427c05
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 1
mov edx, dword [ebp - 0x4fcc]
lea eax, [ebp + edx - 0x11b0]
push eax
call fcn.004e7eb5
add esp, 0x10
mov ecx, dword [ebp - 0x2ac4]
push ecx
push 1
push 1
lea edx, [ebp - 0x4fc8]
push edx
call fcn.004e7eb5
add esp, 0x10
jmp 0x427b80
mov eax, dword [ebp - 0x2ac4]
push eax
push 1
push 4
push 0x54f9c0
call fcn.004e7eb5
add esp, 0x10
jmp 0x42770b
jmp 0x42757a
call fcn.004934f0
mov ecx, dword [ebp - 0x2ac4]
push ecx
call fcn.004e7d8b
add esp, 4
mov edx, dword [ebp - 0x2ac4]
push edx
call fcn.004e7d35
add esp, 4
push 0x54f9c8
call fcn.0049be80
add esp, 4
push eax
lea eax, [ebp - 0x4fc4]
push eax
call fcn.004e6ed0
add esp, 8
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0x4fc4]
push edx
call fcn.004e6ee0
add esp, 8
push 0x40
push 0x5e477c
lea eax, [ebp - 0x4fc4]
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
call fcn.00494740
cmp dword [ebp - 0x1b0], 0
jne 0x427caf
cmp dword [ebp - 0x1ac], 0
je 0x427cb6
push 0
call fcn.004e6a52
mov ecx, dword [0x5f93ae]
and ecx, 0x80
test ecx, ecx
je 0x427fed
push 0x4fcbf8
call fcn.00486390
add esp, 4
push 0x4fcbf8
lea edx, [ebp - 0x5054]
push edx
call fcn.004e6ed0
add esp, 8
push 0x4fcbf8
call fcn.00486350
add esp, 4
cmp dword [0x525af0], 0
je 0x427d29
lea eax, [ebp - 0x5054]
push eax
push 0x54f9e4
push 0x5f6e00
call fcn.004e6fc0
add esp, 0xc
push 0x5f6e00
push 0
call fcn.00499750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x427cf8
lea edx, [ebp - 0x5054]
push edx
call fcn.00486400
add esp, 4
mov dword [ebp - 0x5058], eax
cmp dword [ebp - 0x5058], 0
je 0x427fb6
push 0xff
push 0x54fa40
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
push 1
push 0x54fa50
call fcn.0049be80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.00486520
add esp, 0xc
push 2
push 0x54fa60
call fcn.0049be80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.00486520
add esp, 0xc
push 5
push 0x54fa6c
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
push 0xd
push 0x54fa7c
call fcn.0049be80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.00486520
add esp, 0xc
push 0xf
push 0x54fa90
call fcn.0049be80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.00486520
add esp, 0xc
push 0x10
push 0x54faa4
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
push 0x11
push 0x54fac0
call fcn.0049be80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.00486520
add esp, 0xc
push 0x12
push 0x54fad8
call fcn.0049be80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.00486520
add esp, 0xc
push 0x14
push 0x54faf0
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
push 0x13
push 0x54fb00
call fcn.0049be80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.00486520
add esp, 0xc
push 0x1a
push 0x54fb10
call fcn.0049be80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.00486520
add esp, 0xc
push 0x1b
push 0x54fb1c
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
push 0x1c
push 0x54fb2c
call fcn.0049be80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.00486520
add esp, 0xc
push 0x1d
push 0x54fb3c
call fcn.0049be80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.00486520
add esp, 0xc
push 0x1e
push 0x54fb48
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
push 0x100
push 0x54fb58
call fcn.0049be80
add esp, 4
push eax
mov ecx, dword [ebp - 0x5058]
push ecx
call fcn.00486520
add esp, 0xc
push 0x101
push 0x54fb70
call fcn.0049be80
add esp, 4
push eax
mov edx, dword [ebp - 0x5058]
push edx
call fcn.00486520
add esp, 0xc
push 6
push 0x54fb84
call fcn.0049be80
add esp, 4
push eax
mov eax, dword [ebp - 0x5058]
push eax
call fcn.00486520
add esp, 0xc
mov ecx, dword [ebp - 0x5058]
push ecx
call dword [0x5f5cac]
jmp 0x427fed
cmp dword [0x525af0], 0
je 0x427fe7
lea edx, [ebp - 0x5054]
push edx
push 0x54fb98
push 0x5f6e00
call fcn.004e6fc0
add esp, 0xc
push 0x5f6e00
push 0
call fcn.00499750
add esp, 8
xor eax, eax
test eax, eax
jne 0x427fb6
jmp 0x430e7b
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x605c]
push edx
call fcn.004e6ed0
add esp, 8
lea eax, [ebp - 0x605c]
push eax
call fcn.004f265d
add esp, 4
push 0x54fbd4
call fcn.0049be80
add esp, 4
push eax
lea ecx, [ebp - 0x605c]
push ecx
call fcn.004e8000
add esp, 8
mov dword [ebp - 0x6068], eax
cmp dword [ebp - 0x6068], 0
je 0x430fd9
mov dword [0x525af0], 1
push 0x54fbe4
call fcn.0049be80
add esp, 4
push eax
call fcn.004e7020
add esp, 4
mov dword [ebp - 0x6064], eax
mov edx, dword [ebp - 0x6068]
lea eax, [ebp - 0x605c]
sub edx, eax
mov ecx, dword [ebp + 0x10]
add ecx, edx
mov dword [ebp - 0x505c], ecx
mov edx, dword [ebp - 0x6068]
push edx
call fcn.004e7020
add esp, 4
sub eax, dword [ebp - 0x6064]
mov dword [ebp - 0x6060], eax
mov eax, dword [ebp - 0x6060]
push eax
mov ecx, dword [ebp - 0x6064]
mov edx, dword [ebp - 0x6068]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0x6068]
push ecx
call fcn.004e7a00
add esp, 0xc
mov edx, dword [ebp - 0x6060]
push edx
mov eax, dword [ebp - 0x6064]
mov ecx, dword [ebp - 0x505c]
lea edx, [ecx + eax + 1]
push edx
mov eax, dword [ebp - 0x505c]
push eax
call fcn.004e7a00
add esp, 0xc
mov ecx, dword [ebp - 0x6060]
mov edx, dword [ebp - 0x6068]
lea eax, [edx + ecx - 1]
mov dword [ebp - 0x6068], eax
mov ecx, dword [ebp - 0x6060]
mov edx, dword [ebp - 0x505c]
lea eax, [edx + ecx - 1]
mov dword [ebp - 0x505c], eax
mov ecx, dword [ebp - 0x6064]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x6068]
push edx
call fcn.004e6e70
add esp, 0xc
mov eax, dword [ebp - 0x6064]
add eax, 1
push eax
push 0
mov ecx, dword [ebp - 0x505c]
push ecx
call fcn.004e6e70
add esp, 0xc
jmp 0x430fe3
mov dword [0x525af0], 0
mov edx, dword [0x5f93ae]
and edx, 0x40
test edx, edx
je 0x430ffa
mov dword [0x525af0], 1
cmp dword [0x525af0], 0
je 0x4311c7
push 0x3ff
push 0x4f4bf8
lea eax, [ebp - 0x7068]
push eax
call fcn.004e6b30
add esp, 0xc
mov dword [0x5f5660], 0x3fd
jmp 0x43103b
mov ecx, dword [0x5f5660]
sub ecx, 1
mov dword [0x5f5660], ecx
cmp dword [0x5f5660], 0
jl 0x43106c
mov edx, dword [0x5f5660]
mov eax, dword [0x5f5660]
mov cl, byte [ebp + edx - 0x7068]
xor cl, byte [ebp + eax - 0x7067]
mov edx, dword [0x5f5660]
mov byte [ebp + edx - 0x7068], cl
jmp 0x43102c
mov byte [ebp - 0x6c69], 0
mov dword [0x5f5660], 0xffd
jmp 0x43108c
mov eax, dword [0x5f5660]
sub eax, 1
mov dword [0x5f5660], eax
cmp dword [0x5f5660], 0
jl 0x4310bb
mov ecx, dword [0x5f5660]
mov edx, dword [0x5f5660]
mov al, byte [ecx + 0x4fd3f8]
xor al, byte [edx + 0x4fd3f9]
mov ecx, dword [0x5f5660]
mov byte [ecx + 0x4fd3f8], al
jmp 0x43107f
push 0xfff
push 0x4fd3f8
lea edx, [ebp - 0x605c]
push edx
call fcn.004e6b30
add esp, 0xc
mov byte [ebp - 0x505d], 0
push 0x4fd3f8
call fcn.004e7020
add esp, 4
test eax, eax
jbe 0x431130
push 0x44
lea eax, [ebp - 0x7068]
push eax
lea ecx, [ebp - 0x605c]
push ecx
push 0
call fcn.004859f0
add esp, 0x10
cmp eax, 6
je 0x431130
cmp dword [0x525af0], 0
je 0x431123
push 0x54fbf4
push 4
call fcn.00499750
add esp, 8
xor edx, edx
test edx, edx
jne 0x43110b
push 0
call fcn.004e6a52
call fcn.004997c0
test eax, eax
je 0x4311c7
mov dword [0x5f5660], 0x3fd
jmp 0x431156
mov eax, dword [0x5f5660]
sub eax, 1
mov dword [0x5f5660], eax
cmp dword [0x5f5660], 0
jl 0x431185
mov ecx, dword [0x5f5660]
mov edx, dword [0x5f5660]
mov al, byte [ecx + 0x4fe3f8]
xor al, byte [edx + 0x4fe3f9]
mov ecx, dword [0x5f5660]
mov byte [ecx + 0x4fe3f8], al
jmp 0x431149
push 0x3ff
push 0x4fe3f8
lea edx, [ebp - 0x605c]
push edx
call fcn.004e6b30
add esp, 0xc
mov byte [ebp - 0x5c5d], 0
lea eax, [ebp - 0x7068]
push eax
push 0x34
call fcn.00499750
add esp, 8
lea ecx, [ebp - 0x605c]
push ecx
push 0x33
call fcn.00499750
add esp, 8
cmp dword [0x525af0], 0
je 0x4311df
push 0x54fbfc
push 0
call fcn.00499750
add esp, 8
xor edx, edx
test edx, edx
jne 0x4311c7
mov eax, dword [0x5f93ae]
and eax, 0x2000
test eax, eax
je 0x431211
cmp dword [0x525af0], 0
je 0x43120b
push 0x54fc24
push 0
call fcn.00499750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x4311f3
call fcn.00499850
mov edx, dword [0x5f93ae]
and edx, 0x20
test edx, edx
je 0x43124b
mov dword [0x544aa8], 0
cmp dword [0x525af0], 0
je 0x431245
push 0x54fc5c
push 0
call fcn.00499750
add esp, 8
xor eax, eax
test eax, eax
jne 0x43122d
mov dword [0x5303a8], 0x4f4b94
mov dword [0x5fe72c], 1
mov ecx, dword [0x5fe72c]
mov dword [0x5fd578], ecx
mov edx, dword [0x5fd578]
mov dword [0x5f5330], edx
mov dword [0x5f5ca8], 1
mov eax, dword [0x5f5ca8]
mov dword [0x5fa064], eax
mov ecx, dword [0x5fa064]
mov dword [0x5f5cc0], ecx
mov dword [0x5fb9ec], 0x4f4358
call dword [0x5f8174]
mov dword [0x5e4518], eax
call dword [0x5fa494]
mov dword [0x5e4520], eax
cmp dword [0x525af0], 0
je 0x4312cf
push 0x54fd04
push 2
call fcn.00499750
add esp, 8
xor edx, edx
test edx, edx
jne 0x4312b7
push 0xb
push 0x54fd8c
push 0x5fa4e0
call fcn.004e6b30
add esp, 0xc
mov dword [0x5f5660], 9
jmp 0x431302
mov eax, dword [0x5f5660]
sub eax, 1
mov dword [0x5f5660], eax
cmp dword [0x5f5660], 0
jl 0x431331
mov ecx, dword [0x5f5660]
mov edx, dword [0x5f5660]
mov al, byte [ecx + 0x5fa4e0]
xor al, byte [edx + 0x5fa4e1]
mov ecx, dword [0x5f5660]
mov byte [ecx + 0x5fa4e0], al
jmp 0x4312f5
push 0xb
push 0x5fa4e0
push 0x5fa080
call fcn.004e6b30
add esp, 0xc
mov byte [0x5fa08b], 0
push 0x5fa080
push 0
push 0
call dword [0x5fd57c]
mov dword [0x5e4514], eax
cmp dword [0x5e4514], 0
jne 0x4313ac
cmp dword [0x525af0], 0
je 0x431381
push 0x54fd98
push 0
call fcn.00499750
add esp, 8
xor edx, edx
test edx, edx
jne 0x431369
cmp dword [0x525af0], 0
je 0x43139f
push 0x5e4780
push 4
call fcn.00499750
add esp, 8
xor eax, eax
test eax, eax
jne 0x431387
push 0
call fcn.004e6a52
call dword [0x5f9fe0]
cmp eax, 0xb7
jne 0x43148f
cmp dword [0x5e4514], 0
je 0x4313e0
mov ecx, dword [0x5e4514]
push ecx
call dword [0x5f5b44]
mov edx, dword [0x5e4514]
push edx
call dword [0x5f5334]
cmp dword [0x5e44fc], 0
je 0x4313f5
mov eax, dword [0x5e44fc]
push eax
call dword [0x5f53c0]
cmp dword [0x5e4500], 0
je 0x43140b
mov ecx, dword [0x5e4500]
push ecx
call dword [0x5f53c0]
cmp dword [0x5e4504], 0
je 0x431421
mov edx, dword [0x5e4504]
push edx
call dword [0x5f53c0]
cmp dword [0x5e4508], 0
je 0x431436
mov eax, dword [0x5e4508]
push eax
call dword [0x5f53c0]
cmp dword [0x5e450c], 0
je 0x43144c
mov ecx, dword [0x5e450c]
push ecx
call dword [0x5f53c0]
cmp dword [0x525af0], 0
je 0x431464
push 0x54fe20
push 0x20
call fcn.00499750
add esp, 8
xor edx, edx
test edx, edx
jne 0x43144c
cmp dword [0x525af0], 0
je 0x431482
push 0x5e4784
push 4
call fcn.00499750
add esp, 8
xor eax, eax
test eax, eax
jne 0x43146a
push 0
call fcn.004e6a52
cmp dword [0x525af0], 0
je 0x4314a7
push 0x54fe88
push 2
call fcn.00499750
add esp, 8
xor ecx, ecx
test ecx, ecx
jne 0x43148f
jmp 0x43d0a0
push 0xffffffffffffffff
mov edx, dword [0x5e4514]
push edx
call dword [0x5fc330]
mov eax, 0x43d11e
mov dword [0x5fab68], eax
mov eax, 0x456100
mov dword [0x5fe714], eax
cmp dword [0x525af0], 0
je 0x43d0db
push 0x54ff00
push 2
call fcn.00499750
add esp, 8
xor eax, eax
test eax, eax
jne 0x43d0c3
cmp dword [0x5e46e0], 0
je 0x43d104
mov ecx, dword [0x5f93ae]
and ecx, 2
test ecx, ecx
je 0x43d104
mov edx, dword [0x5e46e0]
push edx
call dword [0x5fa4c4]
call fcn.0040c9d0
call dword [0x5fab6c]
mov dword [0x5e4718], eax
pop edi
add byte [ebx + 0x5e4718], ah
mov eax, dword [0x5e4718]
mov dword [0x5e4714], eax
mov edi, 0x403000
mov esi, 0x404120
push ebx
sub bl, 4
in eax, 0x1d
wait
popfd
mov ecx, 0x6eefcc0f
out 0x2b, eax
pop ss
dec edx
xor eax, edx
sal dword [ecx], cl
xchg ebp, eax
mov ebx, 0x9af8c25d
adc ebp, eax
sbb dword [edi], edi
mov ecx, 0x8001d5e
outsb dx, byte [esi]
lea ebp, [0x7e54870b]
jmp 0x43d10d