Function at 0x4a4890
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x545436
mov eax, dword fs:[0]
push eax
sub esp, 0x450
mov eax, dword [0x596c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov eax, dword [0x59f554]
mov dword [ebp - 0x3c0], esi
mov dword [ebp - 0x3c4], 0
test al, 1
jne 0x4a48fd
or eax, 1
mov dword [0x59f554], eax
mov dword [ebp - 4], 0
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4a4912
cmp byte [eax + 0x19], 6
jb 0x4a4912
mov al, 1
jmp 0x4a4914
xor al, al
cmp byte [0x59f560], 0
jne 0x4a492e
cmp byte [0x59f561], 0
jne 0x4a492e
test al, al
je 0x4a4a63
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x45c]
call fcn.0047b4d0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x45c]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x88
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b46c
mov ecx, eax
call fcn.0047f0b0
mov edx, str.GetDefaultOASSecurityDescriptor
mov ecx, eax
call fcn.0047f0b0
mov byte [ebp - 4], 2
cmp dword [ebp - 0x30], 0x10
jb 0x4a49c2
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4a49c2
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x45c]
call fcn.0047b620
mov edi, eax
mov byte [ebp - 4], 4
cmp dword [edi + 0x14], 0x10
jb 0x4a49df
mov edi, dword [edi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4a4a0a
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 5
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 4
push edi
push 6
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp - 0x30], 0x10
jb 0x4a4a2d
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4a4a2d
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 1
call fcn.0047b5a0
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
jmp 0x4a4a63
xor eax, eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
push 0x573340
lea edx, [ebp - 0x2c]
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x5c]
call fcn.00490160
push 0x3a
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x44]
call fcn.004af170
push 0x573334
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x374]
call fcn.0048e8b0
push 0x57333c
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x344]
call fcn.0048e8b0
push 0x3a
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x314]
call fcn.004af170
push 0x573334
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2e4]
call fcn.0048e8b0
push 0x56b408
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2b4]
call fcn.0048e8b0
push 0x3a
mov edx, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x284]
call fcn.004af170
push 0x28
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x254]
call fcn.004af170
push 0x56b408
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x224]
call fcn.0048e8b0
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1f4]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1c4]
call fcn.004af170
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x194]
push str.0x001F0000
mov edx, eax
call fcn.0048e8b0
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x164]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x134]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x104]
call fcn.004af170
add esp, 0x40
push 0x57332c
mov edx, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xd4]
call fcn.0048e8b0
push 0x29
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa4]
call fcn.004af170
push 0x28
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8c]
call fcn.004af170
push 0x56b408
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x23c]
call fcn.0048e8b0
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x74]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x20c]
call fcn.004af170
push str.0x001F0000
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2fc]
call fcn.0048e8b0
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1dc]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x38c]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1ac]
call fcn.004af170
push 0x573324
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2cc]
call fcn.0048e8b0
push 0x29
mov edx, eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x17c]
call fcn.004af170
push 0x28
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x35c]
call fcn.004af170
push 0x573320
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x14c]
call fcn.0048e8b0
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x29c]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x11c]
call fcn.004af170
add esp, 0x40
push str.0x001F0000
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3bc]
call fcn.0048e8b0
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xec]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x26c]
call fcn.004af170
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xbc]
call fcn.004af170
push 0x573318
mov edx, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x32c]
call fcn.0048e8b0
push 0x29
mov edx, eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3a4]
call fcn.004af170
mov edi, eax
add esp, 0x18
lea eax, [ebp - 0x2c]
cmp eax, edi
je 0x4a4db3
cmp dword [ebp - 0x18], 8
jb 0x4a4d96
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4a4d96
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], 7
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.0047c330
cmp dword [ebp - 0x390], 8
jb 0x4a4dcf
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4a4dcf
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x390], 7
cmp dword [ebp - 0x318], 8
mov dword [ebp - 0x394], 0
mov word [ebp - 0x3a4], ax
jb 0x4a4e08
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x4a4e08
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x318], 7
cmp dword [ebp - 0xa8], 8
mov dword [ebp - 0x31c], 0
mov word [ebp - 0x32c], ax
jb 0x4a4e41
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4a4e41
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0xa8], 7
cmp dword [ebp - 0x258], 8
mov dword [ebp - 0xac], 0
mov word [ebp - 0xbc], ax
jb 0x4a4e7a
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x4a4e7a
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x258], 7
cmp dword [ebp - 0xd8], 8
mov dword [ebp - 0x25c], 0
mov word [ebp - 0x26c], ax
jb 0x4a4eb3
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x4a4eb3
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0xd8], 7
cmp dword [ebp - 0x3a8], 8
mov dword [ebp - 0xdc], 0
mov word [ebp - 0xec], ax
jb 0x4a4eec
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x4a4eec
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x3a8], 7
cmp dword [ebp - 0x108], 8
mov dword [ebp - 0x3ac], 0
mov word [ebp - 0x3bc], ax
jb 0x4a4f25
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x4a4f25
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x108], 7
cmp dword [ebp - 0x288], 8
mov dword [ebp - 0x10c], 0
mov word [ebp - 0x11c], ax
jb 0x4a4f5e
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4a4f5e
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x288], 7
cmp dword [ebp - 0x138], 8
mov dword [ebp - 0x28c], 0
mov word [ebp - 0x29c], ax
jb 0x4a4f97
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x4a4f97
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x138], 7
cmp dword [ebp - 0x348], 8
mov dword [ebp - 0x13c], 0
mov word [ebp - 0x14c], ax
jb 0x4a4fd0
mov eax, dword [ebp - 0x35c]
test eax, eax
je 0x4a4fd0
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x348], 7
cmp dword [ebp - 0x168], 8
mov dword [ebp - 0x34c], 0
mov word [ebp - 0x35c], ax
jb 0x4a5009
mov eax, dword [ebp - 0x17c]
test eax, eax
je 0x4a5009
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x168], 7
cmp dword [ebp - 0x2b8], 8
mov dword [ebp - 0x16c], 0
mov word [ebp - 0x17c], ax
jb 0x4a5042
mov eax, dword [ebp - 0x2cc]
test eax, eax
je 0x4a5042
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x2b8], 7
cmp dword [ebp - 0x198], 8
mov dword [ebp - 0x2bc], 0
mov word [ebp - 0x2cc], ax
jb 0x4a507b
mov eax, dword [ebp - 0x1ac]
test eax, eax
je 0x4a507b
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x198], 7
cmp dword [ebp - 0x378], 8
mov dword [ebp - 0x19c], 0
mov word [ebp - 0x1ac], ax
jb 0x4a50b4
mov eax, dword [ebp - 0x38c]
test eax, eax
je 0x4a50b4
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x378], 7
cmp dword [ebp - 0x1c8], 8
mov dword [ebp - 0x37c], 0
mov word [ebp - 0x38c], ax
jb 0x4a50ed
mov eax, dword [ebp - 0x1dc]
test eax, eax
je 0x4a50ed
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x1c8], 7
cmp dword [ebp - 0x2e8], 8
mov dword [ebp - 0x1cc], 0
mov word [ebp - 0x1dc], ax
jb 0x4a5126
mov eax, dword [ebp - 0x2fc]
test eax, eax
je 0x4a5126
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x2e8], 7
cmp dword [ebp - 0x1f8], 8
mov dword [ebp - 0x2ec], 0
mov word [ebp - 0x2fc], ax
jb 0x4a515f
mov eax, dword [ebp - 0x20c]
test eax, eax
je 0x4a515f
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x1f8], 7
cmp dword [ebp - 0x60], 8
mov dword [ebp - 0x1fc], 0
mov word [ebp - 0x20c], ax
jb 0x4a5192
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4a5192
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x60], 7
cmp dword [ebp - 0x228], 8
mov dword [ebp - 0x64], 0
mov word [ebp - 0x74], ax
jb 0x4a51c2
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x4a51c2
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x228], 7
cmp dword [ebp - 0x78], 8
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], ax
jb 0x4a51f8
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x4a51f8
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x78], 7
cmp dword [ebp - 0x90], 8
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
jb 0x4a522b
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x4a522b
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x90], 7
cmp dword [ebp - 0xc0], 8
mov dword [ebp - 0x94], 0
mov word [ebp - 0xa4], ax
jb 0x4a5264
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4a5264
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0xc0], 7
cmp dword [ebp - 0xf0], 8
mov dword [ebp - 0xc4], 0
mov word [ebp - 0xd4], ax
jb 0x4a529d
mov eax, dword [ebp - 0x104]
test eax, eax
je 0x4a529d
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0xf0], 7
cmp dword [ebp - 0x120], 8
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
jb 0x4a52d6
mov eax, dword [ebp - 0x134]
test eax, eax
je 0x4a52d6
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x120], 7
cmp dword [ebp - 0x150], 8
mov dword [ebp - 0x124], 0
mov word [ebp - 0x134], ax
jb 0x4a530f
mov eax, dword [ebp - 0x164]
test eax, eax
je 0x4a530f
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x150], 7
cmp dword [ebp - 0x180], 8
mov dword [ebp - 0x154], 0
mov word [ebp - 0x164], ax
jb 0x4a5348
mov eax, dword [ebp - 0x194]
test eax, eax
je 0x4a5348
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x180], 7
cmp dword [ebp - 0x1b0], 8
mov dword [ebp - 0x184], 0
mov word [ebp - 0x194], ax
jb 0x4a5381
mov eax, dword [ebp - 0x1c4]
test eax, eax
je 0x4a5381
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x1b0], 7
cmp dword [ebp - 0x1e0], 8
mov dword [ebp - 0x1b4], 0
mov word [ebp - 0x1c4], ax
jb 0x4a53ba
mov eax, dword [ebp - 0x1f4]
test eax, eax
je 0x4a53ba
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x1e0], 7
cmp dword [ebp - 0x210], 8
mov dword [ebp - 0x1e4], 0
mov word [ebp - 0x1f4], ax
jb 0x4a53f3
mov eax, dword [ebp - 0x224]
test eax, eax
je 0x4a53f3
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x210], 7
cmp dword [ebp - 0x240], 8
mov dword [ebp - 0x214], 0
mov word [ebp - 0x224], ax
jb 0x4a542c
mov eax, dword [ebp - 0x254]
test eax, eax
je 0x4a542c
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x240], 7
cmp dword [ebp - 0x270], 8
mov dword [ebp - 0x244], 0
mov word [ebp - 0x254], ax
jb 0x4a5465
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x4a5465
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x270], 7
cmp dword [ebp - 0x2a0], 8
mov dword [ebp - 0x274], 0
mov word [ebp - 0x284], ax
jb 0x4a549e
mov eax, dword [ebp - 0x2b4]
test eax, eax
je 0x4a549e
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x2a0], 7
cmp dword [ebp - 0x2d0], 8
mov dword [ebp - 0x2a4], 0
mov word [ebp - 0x2b4], ax
jb 0x4a54d7
mov eax, dword [ebp - 0x2e4]
test eax, eax
je 0x4a54d7
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x2d0], 7
cmp dword [ebp - 0x300], 8
mov dword [ebp - 0x2d4], 0
mov word [ebp - 0x2e4], ax
jb 0x4a5510
mov eax, dword [ebp - 0x314]
test eax, eax
je 0x4a5510
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x300], 7
cmp dword [ebp - 0x330], 8
mov dword [ebp - 0x304], 0
mov word [ebp - 0x314], ax
jb 0x4a5549
mov eax, dword [ebp - 0x344]
test eax, eax
je 0x4a5549
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x330], 7
cmp dword [ebp - 0x360], 8
mov dword [ebp - 0x334], 0
mov word [ebp - 0x344], ax
jb 0x4a5582
mov eax, dword [ebp - 0x374]
test eax, eax
je 0x4a5582
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov dword [ebp - 0x360], 7
cmp dword [ebp - 0x30], 8
mov dword [ebp - 0x364], 0
mov word [ebp - 0x374], ax
jb 0x4a55b5
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4a55b5
push eax
call fcn.00507b54
add esp, 4
xor eax, eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], 0
mov word [ebp - 0x44], ax
jb 0x4a55e3
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4a55e3
push eax
call fcn.00507b54
add esp, 4
mov eax, dword [0x59f554]
test al, 1
jne 0x4a560e
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0x2d
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 7
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4a5623
cmp byte [eax + 0x19], 6
jb 0x4a5623
mov al, 1
jmp 0x4a5625
xor al, al
cmp byte [0x59f560], 0
jne 0x4a563f
cmp byte [0x59f561], 0
jne 0x4a563f
test al, al
je 0x4a5748
sub esp, 8
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x45c]
call fcn.0047b4d0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2f
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x45c]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x9b
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b498
mov ecx, eax
call fcn.0047f0b0
mov edx, str.GetDefaultOASSecurityDescriptor
mov ecx, eax
call fcn.0047f0b0
mov byte [ebp - 4], 0x2f
cmp dword [ebp - 0x48], 0x10
jb 0x4a56d0
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4a56d0
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x45c]
call fcn.0047b620
mov edi, eax
mov byte [ebp - 4], 0x31
cmp dword [edi + 0x14], 0x10
jb 0x4a56ed
mov edi, dword [edi]
call fcn.004a1320
push edi
push 6
mov ecx, eax
call fcn.004a1510
cmp dword [ebp - 0x48], 0x10
jb 0x4a5712
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4a5712
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x2e
call fcn.0047b5a0
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
jmp 0x4a5748
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.0047afe0
cmp dword [ebp - 0x18], 8
jb 0x4a5769
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x4a5769
push ecx
call fcn.00507b54
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005072fd
mov esp, ebp
pop ebp
ret