Function at 0x4ab8c4
Capabilities:
Download url
Receive data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x9b
push 0
push 0
dec ecx
jne 0x4ab8cc
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x4ace02
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.ole32.dll_CoInitialize
xor ecx, ecx
mov dl, 1
mov eax, dword [0x489f34]
call fcn.0048eef0
mov edx, eax
test edx, edx
je 0x4ab907
sub edx, 0xffffff34
lea eax, [ebp - 4]
call fcn.00405ddc
cmp ebx, 1
jne 0x4aba09
mov dl, 1
mov eax, dword [0x419c7c]
call fcn.004032fc
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
mov ecx, 0x4ace1c
mov edx, dword [0x4d2474]
call fcn.00404468
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x18]
call fcn.004a9f98
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0041ea04
xor ecx, ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 0x98]
mov eax, dword [ebp - 0x18]
call fcn.0040332c
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x38]
mov edx, 0x4ace2c
mov esi, dword [eax]
call dword [esi + 0xc]
lea edx, [ebp - 0x38]
mov eax, 0x4d2464
call fcn.00414280
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov edx, 0x4ace38
mov esi, dword [eax]
call dword [esi + 0xc]
lea edx, [ebp - 0x4c]
mov eax, 0x4d2488
call fcn.00414280
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x60]
mov edx, 0x4ace48
mov esi, dword [eax]
call dword [esi + 0xc]
lea edx, [ebp - 0x60]
mov eax, 0x4d248c
call fcn.00414280
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x74]
mov edx, 0x4ace58
mov esi, dword [eax]
call dword [esi + 0xc]
lea edx, [ebp - 0x74]
mov eax, 0x4d2490
call fcn.00414280
cmp ebx, 2
jne 0x4abf13
xor eax, eax
push ebp
push 0x4abca6
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4abc95
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
lea eax, [ebp - 0x10]
call fcn.00405dc4
push eax
push dword [0x4d2488]
push 0x4ace74
push 0x4ace8c
call fcn.0040ac08
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x80]
mov eax, 0x4ace9c
call fcn.0040b920
push dword [ebp - 0x80]
lea eax, [ebp - 0x7c]
mov edx, 4
call fcn.004044dc
mov eax, dword [ebp - 0x7c]
call fcn.0040461c
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.URLMON.DLL_URLOpenBlockingStreamA
mov dl, 1
mov eax, dword [0x41998c]
call fcn.004032fc
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
mov dl, 1
mov eax, dword [0x492014]
call fcn.0049273c
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x419c7c]
call fcn.004032fc
mov dword [ebp - 0x18], eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.0041ea04
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
call fcn.0041f340
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x6c]
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x84]
mov eax, 0x4d2478
call fcn.004041b0
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
sub eax, 1
jno 0x4abb08
call fcn.0040326c
test eax, eax
jl 0x4abbc6
inc eax
mov dword [ebp - 0x20], eax
xor esi, esi
lea ecx, [ebp - 0x88]
mov edx, esi
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x8c]
mov ecx, 0x4aceac
mov edx, dword [0x4d248c]
call fcn.00404468
mov eax, dword [ebp - 0x8c]
pop edx
call fcn.00404760
test eax, eax
jle 0x4abbbc
mov al, byte [0x4aceb0]
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x98]
mov edx, esi
mov eax, dword [ebp - 0x1c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x98]
push eax
lea eax, [ebp - 0x9c]
mov ecx, 0x4aceac
mov edx, dword [0x4d248c]
call fcn.00404468
mov edx, dword [ebp - 0x9c]
xor ecx, ecx
pop eax
call fcn.0040e658
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.004089d0
mov edx, dword [ebp - 0x90]
mov eax, 0x4d2478
call fcn.004041b0
inc esi
dec dword [ebp - 0x20]
jne 0x4abb16
mov eax, dword [0x4d2478]
mov edx, dword [0x4d2464]
call fcn.00404568
je 0x4abc6f
push 0
push 0
lea eax, [ebp - 0xa0]
mov ecx, 0x4acebc
mov edx, dword [0x4d2474]
call fcn.00404468
mov eax, dword [ebp - 0xa0]
call fcn.0040461c
push eax
push dword [0x4d2488]
push dword [0x4d248c]
push 0x4aced4
push 0x4ace8c
call fcn.0040ac08
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0xa8]
mov eax, 0x4ace9c
call fcn.0040b920
push dword [ebp - 0xa8]
lea eax, [ebp - 0xa4]
mov edx, 5
call fcn.004044dc
mov eax, dword [ebp - 0xa4]
call fcn.0040461c
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.URLMON.DLL_URLDownloadToFileA
mov eax, 0x4d2464
mov edx, dword [0x4d2478]
call fcn.004041b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4abc9c
mov eax, dword [ebp - 0x14]
call fcn.0040332c
mov eax, dword [ebp - 0x18]
call fcn.0040332c
mov eax, dword [ebp - 0x1c]
call fcn.0040332c
ret
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x178]
lea edx, [ebp - 0x174]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x174]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, 1
jno 0x4abf47
call fcn.0040326c
test eax, eax
jl 0x4ac85c
inc eax
mov dword [ebp - 0x20], eax
xor esi, esi
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x194]
lea edx, [ebp - 0x190]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x190]
push eax
lea eax, [ebp - 0x1a4]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x1a4]
lea ecx, [ebp - 0x18c]
pop eax
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x188]
mov edx, 0x4acf68
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1b4]
mov edx, 0x4acf78
call fcn.00415408
lea edx, [ebp - 0x1b4]
pop eax
call fcn.00417694
je 0x4ac2e3
mov edx, dword [0x4aa20c]
mov eax, 0x24
call fcn.00405144
mov ebx, eax
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x1d0]
lea edx, [ebp - 0x1cc]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1e0]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x1e0]
lea ecx, [ebp - 0x1c8]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1c4]
mov edx, 0x4acf68
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1c4]
mov eax, ebx
call fcn.00414280
lea edx, [ebp - 0x1fc]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x1fc]
lea edx, [ebp - 0x1f8]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x20c]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x20c]
lea ecx, [ebp - 0x1f4]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x1f4]
lea ecx, [ebp - 0x1f0]
mov edx, 0x4acf84
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x220]
mov eax, esi
call fcn.00408b60
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
call fcn.00415408
lea edx, [ebp - 0x21c]
pop eax
call fcn.00417678
lea edx, [ebp - 0x1f0]
lea eax, [ebx + 0xc]
call fcn.00414280
lea eax, [ebx + 8]
mov edx, 0x4acf98
call fcn.004041b0
lea edx, [ebp - 0x23c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 0x238]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x238]
push eax
lea eax, [ebp - 0x24c]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x24c]
lea ecx, [ebp - 0x234]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x230]
mov edx, 0x4acf84
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x230]
lea eax, [ebx + 0x10]
call fcn.00414280
lea edx, [ebp - 0x26c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 0x268]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x268]
push eax
lea eax, [ebp - 0x27c]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x27c]
lea ecx, [ebp - 0x264]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x264]
lea ecx, [ebp - 0x260]
mov edx, 0x4acfa4
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x260]
lea eax, [ebp - 0x250]
call fcn.00414280
mov eax, dword [ebp - 0x250]
call fcn.00408c9c
mov dword [ebx + 0x18], eax
lea edx, [ebp - 0x298]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x294]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x294]
push eax
lea eax, [ebp - 0x2a8]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0x290]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x290]
lea ecx, [ebp - 0x28c]
mov edx, 0x4acfb0
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x28c]
lea eax, [ebx + 0x20]
call fcn.00414280
lea edx, [ebp - 0x2c8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x2c4]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d8]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x2d8]
lea ecx, [ebp - 0x2c0]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x2bc]
mov edx, 0x4acfbc
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x2bc]
lea eax, [ebp - 0x2ac]
call fcn.00414280
mov eax, dword [ebp - 0x2ac]
call fcn.00408c9c
mov dword [ebx + 4], eax
mov byte [ebx + 0x1c], 0
xor eax, eax
mov dword [ebx + 0x14], eax
mov edx, ebx
mov eax, dword [0x4d2444]
call fcn.0041bc00
lea edx, [ebp - 0x2e8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x2e8]
lea edx, [ebp - 0x2e4]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2f8]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x2f8]
lea ecx, [ebp - 0x2e0]
pop eax
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov eax, dword [ebp - 0x2e0]
lea edx, [ebp - 0x2dc]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x2dc]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, 1
jno 0x4ac350
call fcn.0040326c
test eax, eax
jl 0x4ac852
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], 0
mov edx, dword [0x4aa20c]
mov eax, 0x24
call fcn.00405144
mov ebx, eax
lea edx, [ebp - 0x31c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x31c]
lea edx, [ebp - 0x318]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x318]
push eax
lea eax, [ebp - 0x32c]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x32c]
lea ecx, [ebp - 0x314]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x314]
lea edx, [ebp - 0x310]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x310]
push eax
lea eax, [ebp - 0x33c]
mov edx, dword [ebp - 8]
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x33c]
lea ecx, [ebp - 0x30c]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov edx, 0x4acf68
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x308]
mov eax, ebx
call fcn.00414280
lea edx, [ebp - 0x358]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x358]
lea edx, [ebp - 0x354]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x354]
push eax
lea eax, [ebp - 0x368]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x368]
lea ecx, [ebp - 0x350]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x350]
lea ecx, [ebp - 0x34c]
mov edx, 0x4acf68
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x34c]
lea eax, [ebx + 8]
call fcn.00414280
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x388]
push eax
lea eax, [ebp - 0x39c]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x39c]
lea ecx, [ebp - 0x384]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x384]
lea edx, [ebp - 0x380]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x380]
push eax
lea eax, [ebp - 0x3ac]
mov edx, dword [ebp - 8]
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x3ac]
lea ecx, [ebp - 0x37c]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x37c]
lea ecx, [ebp - 0x378]
mov edx, 0x4acf84
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x378]
push eax
lea edx, [ebp - 0x3c0]
mov eax, esi
add eax, 1
jno 0x4ac534
call fcn.0040326c
imul eax, eax, 0x3e8
jno 0x4ac541
call fcn.0040326c
add eax, dword [ebp - 8]
jno 0x4ac54b
call fcn.0040326c
call fcn.00408b60
mov edx, dword [ebp - 0x3c0]
lea eax, [ebp - 0x3bc]
call fcn.00415408
lea edx, [ebp - 0x3bc]
pop eax
call fcn.00417678
lea edx, [ebp - 0x378]
lea eax, [ebx + 0xc]
call fcn.00414280
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x3e4]
lea edx, [ebp - 0x3e0]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x3f4]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x3dc]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x3dc]
lea edx, [ebp - 0x3d8]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x404]
mov edx, dword [ebp - 8]
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x3d4]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x3d4]
lea ecx, [ebp - 0x3d0]
mov edx, 0x4acf84
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x3d0]
lea eax, [ebx + 0x10]
call fcn.00414280
lea edx, [ebp - 0x42c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x42c]
lea edx, [ebp - 0x428]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x428]
push eax
lea eax, [ebp - 0x43c]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x43c]
lea ecx, [ebp - 0x424]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x424]
lea edx, [ebp - 0x420]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x420]
push eax
lea eax, [ebp - 0x44c]
mov edx, dword [ebp - 8]
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x44c]
lea ecx, [ebp - 0x41c]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x41c]
lea ecx, [ebp - 0x418]
mov edx, 0x4acfa4
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x418]
lea eax, [ebp - 0x408]
call fcn.00414280
mov eax, dword [ebp - 0x408]
call fcn.00408c9c
mov dword [ebx + 0x18], eax
lea edx, [ebp - 0x470]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x470]
lea edx, [ebp - 0x46c]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x46c]
push eax
lea eax, [ebp - 0x480]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x480]
lea ecx, [ebp - 0x468]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x468]
lea edx, [ebp - 0x464]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x464]
push eax
lea eax, [ebp - 0x490]
mov edx, dword [ebp - 8]
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x460]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x460]
lea ecx, [ebp - 0x45c]
mov edx, 0x4acfb0
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x45c]
lea eax, [ebx + 0x20]
call fcn.00414280
lea edx, [ebp - 0x4b8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x4b8]
lea edx, [ebp - 0x4b4]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x4c8]
mov edx, esi
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x4c8]
lea ecx, [ebp - 0x4b0]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x4b0]
lea edx, [ebp - 0x4ac]
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x4d8]
mov edx, dword [ebp - 8]
mov cl, 0xfc
call fcn.00415154
lea edx, [ebp - 0x4d8]
lea ecx, [ebp - 0x4a8]
pop eax
mov edi, dword [eax]
call dword [edi + 0x10]
mov eax, dword [ebp - 0x4a8]
lea ecx, [ebp - 0x4a4]
mov edx, 0x4acfbc
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x4a4]
lea eax, [ebp - 0x494]
call fcn.00414280
mov eax, dword [ebp - 0x494]
call fcn.00408c9c
mov dword [ebx + 4], eax
mov byte [ebx + 0x1c], 0
xor eax, eax
mov dword [ebx + 0x14], eax
mov edx, ebx
mov eax, dword [0x4d2444]
call fcn.0041bc00
inc dword [ebp - 8]
dec dword [ebp - 0x24]
jne 0x4ac363
inc esi
dec dword [ebp - 0x20]
jne 0x4abf55
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ace0c
lea eax, [ebp - 0x4d8]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x4b8]
call fcn.00405dc4
lea eax, [ebp - 0x4b4]
call fcn.00405dc4
lea eax, [ebp - 0x4b0]
call fcn.00405dc4
lea eax, [ebp - 0x4ac]
call fcn.00405dc4
lea eax, [ebp - 0x4a8]
call fcn.00405dc4
lea eax, [ebp - 0x4a4]
call fcn.00410d54
lea eax, [ebp - 0x494]
call fcn.0040415c
lea eax, [ebp - 0x490]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x470]
call fcn.00405dc4
lea eax, [ebp - 0x46c]
call fcn.00405dc4
lea eax, [ebp - 0x468]
call fcn.00405dc4
lea eax, [ebp - 0x464]
call fcn.00405dc4
lea eax, [ebp - 0x460]
call fcn.00405dc4
lea eax, [ebp - 0x45c]
mov edx, dword [0x4010c0]
mov ecx, 3
call fcn.00404e24
lea eax, [ebp - 0x42c]
call fcn.00405dc4
lea eax, [ebp - 0x428]
call fcn.00405dc4
lea eax, [ebp - 0x424]
call fcn.00405dc4
lea eax, [ebp - 0x420]
call fcn.00405dc4
lea eax, [ebp - 0x41c]
call fcn.00405dc4
lea eax, [ebp - 0x418]
call fcn.00410d54
lea eax, [ebp - 0x408]
call fcn.0040415c
lea eax, [ebp - 0x404]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x3e4]
call fcn.00405dc4
lea eax, [ebp - 0x3e0]
call fcn.00405dc4
lea eax, [ebp - 0x3dc]
call fcn.00405dc4
lea eax, [ebp - 0x3d8]
call fcn.00405dc4
lea eax, [ebp - 0x3d4]
call fcn.00405dc4
lea eax, [ebp - 0x3d0]
call fcn.00410d54
lea eax, [ebp - 0x3c0]
call fcn.0040415c
lea eax, [ebp - 0x3bc]
mov edx, dword [0x4010c0]
mov ecx, 3
call fcn.00404e24
lea eax, [ebp - 0x38c]
call fcn.00405dc4
lea eax, [ebp - 0x388]
call fcn.00405dc4
lea eax, [ebp - 0x384]
call fcn.00405dc4
lea eax, [ebp - 0x380]
call fcn.00405dc4
lea eax, [ebp - 0x37c]
call fcn.00405dc4
lea eax, [ebp - 0x378]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x358]
call fcn.00405dc4
lea eax, [ebp - 0x354]
call fcn.00405dc4
lea eax, [ebp - 0x350]
call fcn.00405dc4
lea eax, [ebp - 0x34c]
mov edx, dword [0x4010c0]
mov ecx, 3
call fcn.00404e24
lea eax, [ebp - 0x31c]
call fcn.00405dc4
lea eax, [ebp - 0x318]
call fcn.00405dc4
lea eax, [ebp - 0x314]
call fcn.00405dc4
lea eax, [ebp - 0x310]
call fcn.00405dc4
lea eax, [ebp - 0x30c]
call fcn.00405dc4
lea eax, [ebp - 0x308]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x2e8]
call fcn.00405dc4
lea eax, [ebp - 0x2e4]
call fcn.00405dc4
lea eax, [ebp - 0x2e0]
call fcn.00405dc4
lea eax, [ebp - 0x2dc]
call fcn.00405dc4
lea eax, [ebp - 0x2d8]
call fcn.00410d54
lea eax, [ebp - 0x2c8]
call fcn.00405dc4
lea eax, [ebp - 0x2c4]
call fcn.00405dc4
lea eax, [ebp - 0x2c0]
call fcn.00405dc4
lea eax, [ebp - 0x2bc]
call fcn.00410d54
lea eax, [ebp - 0x2ac]
call fcn.0040415c
lea eax, [ebp - 0x2a8]
call fcn.00410d54
lea eax, [ebp - 0x298]
call fcn.00405dc4
lea eax, [ebp - 0x294]
call fcn.00405dc4
lea eax, [ebp - 0x290]
call fcn.00405dc4
lea eax, [ebp - 0x28c]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x26c]
call fcn.00405dc4
lea eax, [ebp - 0x268]
call fcn.00405dc4
lea eax, [ebp - 0x264]
call fcn.00405dc4
lea eax, [ebp - 0x260]
call fcn.00410d54
lea eax, [ebp - 0x250]
call fcn.0040415c
lea eax, [ebp - 0x24c]
call fcn.00410d54
lea eax, [ebp - 0x23c]
call fcn.00405dc4
lea eax, [ebp - 0x238]
call fcn.00405dc4
lea eax, [ebp - 0x234]
call fcn.00405dc4
lea eax, [ebp - 0x230]
call fcn.00410d54
lea eax, [ebp - 0x220]
call fcn.0040415c
lea eax, [ebp - 0x21c]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x1fc]
call fcn.00405dc4
lea eax, [ebp - 0x1f8]
call fcn.00405dc4
lea eax, [ebp - 0x1f4]
call fcn.00405dc4
lea eax, [ebp - 0x1f0]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x1d0]
call fcn.00405dc4
lea eax, [ebp - 0x1cc]
call fcn.00405dc4
lea eax, [ebp - 0x1c8]
call fcn.00405dc4
lea eax, [ebp - 0x1c4]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0x190]
call fcn.00405dc4
lea eax, [ebp - 0x18c]
call fcn.00405dc4
lea eax, [ebp - 0x188]
call fcn.00410d54
lea eax, [ebp - 0x1a4]
call fcn.00410d54
lea eax, [ebp - 0x194]
call fcn.00405dc4
lea eax, [ebp - 0x178]
call fcn.00405dc4
lea eax, [ebp - 0x174]
call fcn.00405dc4
lea eax, [ebp - 0x170]
call fcn.00405dc4
lea eax, [ebp - 0x16c]
call fcn.00410d54
lea eax, [ebp - 0x15c]
call fcn.00405dc4
lea eax, [ebp - 0x158]
call fcn.00410d54
lea eax, [ebp - 0x148]
call fcn.00405dc4
lea eax, [ebp - 0x144]
call fcn.00410d54
lea eax, [ebp - 0x134]
call fcn.00405dc4
lea eax, [ebp - 0x130]
call fcn.00410d54
lea eax, [ebp - 0x120]
call fcn.00405dc4
lea eax, [ebp - 0x11c]
call fcn.00410d54
lea eax, [ebp - 0x10c]
call fcn.00405dc4
lea eax, [ebp - 0x108]
call fcn.00410d54
lea eax, [ebp - 0xf8]
call fcn.00405dc4
lea eax, [ebp - 0xf4]
mov edx, dword [0x4010c0]
mov ecx, 2
call fcn.00404e24
lea eax, [ebp - 0xd4]
call fcn.00405dc4
lea eax, [ebp - 0xd0]
call fcn.00410d54
lea eax, [ebp - 0xc0]
call fcn.00405dc4
lea eax, [ebp - 0xbc]
call fcn.00410d54
lea eax, [ebp - 0xac]
mov edx, 0xd
call fcn.00404180
lea eax, [ebp - 0x78]
call fcn.00405dc4
lea eax, [ebp - 0x74]
call fcn.00410d54
lea eax, [ebp - 0x64]
call fcn.00405dc4
lea eax, [ebp - 0x60]
call fcn.00410d54
lea eax, [ebp - 0x50]
call fcn.00405dc4
lea eax, [ebp - 0x4c]
call fcn.00410d54
lea eax, [ebp - 0x3c]
call fcn.00405dc4
lea eax, [ebp - 0x38]
call fcn.00410d54
lea eax, [ebp - 0x28]
call fcn.0040415c
lea eax, [ebp - 0x10]
call fcn.00405dc4
lea eax, [ebp - 0xc]
call fcn.00405dc4
lea eax, [ebp - 4]
call fcn.00405dc4
ret