Function at 0x4ba2f4
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xfd
push 0
push 0
dec ecx
jne 0x4ba2fd
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, edx
lea edi, [ebp - 0x420]
push ecx
mov ecx, pe_nt_image_headers32
rep movsd dword es:[edi], dword [esi]
pop ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.00404c30
lea esi, [ebp - 0x70d]
xor eax, eax
push ebp
push 0x4bb106
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4bb124
push dword [ebp - 8]
push 0x4bb14c
lea edx, [ebp - 0x718]
mov eax, ebx
call fcn.00409290
push dword [ebp - 0x718]
lea eax, [ebp - 0x714]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x714]
call fcn.00404c40
push eax
call sub.kernel32.dll_OutputDebugStringA
xor edx, edx
push ebp
push 0x4bb002
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [ebp - 0x420], 0xff
jne 0x4ba4c2
cmp byte [ebp - 0x41f], 0xfe
jne 0x4ba4c2
mov eax, 0x10
call fcn.004027e8
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x41e]
mov ecx, 0x10
mov eax, dword [ebp - 0x1c]
call fcn.0040792c
lea edx, [ebp - 0x71c]
mov eax, dword [ebp - 0x1c]
call fcn.0040a134
mov eax, dword [ebp - 0x71c]
mov edx, 0x4bb160
call fcn.00404b8c
je 0x4ba43f
mov eax, dword [0x4c9e8c]
push eax
lea eax, [ebp - 0x720]
push eax
lea edx, [ebp - 0x724]
mov eax, dword [ebp - 0x1c]
call fcn.0040a134
mov edx, dword [ebp - 0x724]
xor ecx, ecx
mov eax, 0x4bb170
call fcn.00469d70
lea eax, [ebp - 0x720]
mov edx, 0x4bb180
call fcn.00404a48
mov eax, dword [ebp - 0x720]
push eax
mov ecx, ebx
mov edx, dword [ebp - 8]
mov eax, dword [0x4c9e3c]
call fcn.00488554
jmp 0x4ba479
lea edx, [ebp - 0x728]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
call fcn.00445ab8
lea eax, [ebp - 0x728]
mov edx, 0x4bb180
call fcn.00404a48
mov eax, dword [ebp - 0x728]
push eax
mov ecx, ebx
mov edx, dword [ebp - 8]
mov eax, dword [0x4c9e3c]
call fcn.00488554
push 0x4bb18c
push dword [ebp - 8]
push 0x4bb1a8
lea edx, [ebp - 0x730]
mov eax, dword [ebp - 0x1c]
call fcn.0040a134
push dword [ebp - 0x730]
lea eax, [ebp - 0x72c]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x72c]
call fcn.004b4ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bb042
mov al, byte [ebp - 0x420]
cmp al, 1
je 0x4ba4dd
cmp al, 2
je 0x4ba4dd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bb042
lea edx, [ebp - 0x420]
lea eax, [ebp - 0x60e]
mov ecx, 0x1ee
call fcn.0040792c
xor ebx, ebx
lea edi, [ebp - 0x5f2]
push dword [ebp - 0x14]
push 0x4bb1b4
lea ecx, [ebp - 0x734]
xor eax, eax
mov al, byte [edi]
mov edx, 2
call fcn.004093a4
push dword [ebp - 0x734]
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404b00
inc ebx
inc edi
cmp bl, 6
jne 0x4ba4fb
lea eax, [ebp - 0x14]
mov ecx, 1
mov edx, 1
call fcn.00404ce0
cmp dword [0x4c9e9c], 0
je 0x4ba57b
mov eax, dword [ebp - 0x14]
call fcn.004b5888
test al, al
jne 0x4ba57b
lea eax, [ebp - 0x738]
mov ecx, dword [ebp - 0x14]
mov edx, 0x4bb1c0
call fcn.00404a8c
mov eax, dword [ebp - 0x738]
call fcn.004b4dc4
jmp 0x4baff8
lea edx, [ebp - 0x51e]
mov eax, esi
mov ecx, 0xfe
call fcn.0040792c
xor ebx, ebx
mov byte [ebp - 0x1e], 0
jmp 0x4ba70d
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0xff
je 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba5cb
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 1
jne 0x4ba5cb
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba5f0
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 2
jne 0x4ba5f0
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba615
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 3
jne 0x4ba615
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba63a
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 4
jne 0x4ba63a
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba65f
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 5
jne 0x4ba65f
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba684
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 6
jne 0x4ba684
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba6a6
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 7
jne 0x4ba6a6
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba6c8
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 8
jne 0x4ba6c8
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
cmp byte [esi + eax], 0x35
jne 0x4ba6ea
xor eax, eax
mov al, bl
cmp byte [esi + eax + 2], 9
jne 0x4ba6ea
xor eax, eax
mov al, bl
mov al, byte [esi + eax + 2]
mov byte [ebp - 0x1e], al
jmp 0x4ba71c
xor eax, eax
mov al, bl
mov edx, eax
movzx eax, byte [esi + eax + 1]
add edx, eax
add edx, 2
cmp edx, 0xff
jae 0x4ba71c
xor eax, eax
mov al, bl
add bl, byte [esi + eax + 1]
add bl, 2
xor eax, eax
mov al, bl
cmp eax, 0xff
jb 0x4ba598
lea edx, [ebp - 0x740]
xor eax, eax
mov al, byte [ebp - 0x1e]
call fcn.00409290
mov ecx, dword [ebp - 0x740]
lea eax, [ebp - 0x73c]
mov edx, 0x4bb1d8
call fcn.00404a8c
mov eax, dword [ebp - 0x73c]
call fcn.00404c40
push eax
call sub.kernel32.dll_OutputDebugStringA
mov eax, dword [0x4c9e60]
mov edx, 0x4bb1f8
call fcn.00404b8c
jne 0x4ba775
cmp byte [ebp - 0x1e], 0
jne 0x4ba775
mov byte [ebp - 0x1e], 3
mov byte [ebp - 0x60e], 3
xor eax, eax
mov al, byte [ebp - 0x1e]
cmp eax, 9
ja case.0x4ba783.0
jmp dword [eax*4 + 0x4ba78a]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d0]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x4ba8f5
mov eax, 0x4bb1fc
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x1d], 0
mov byte [ebp - 0xd], 0
mov edi, esi
mov edx, dword [ebp - 0x1c]
mov eax, edi
mov ecx, 9
call fcn.00408d18
test al, al
je 0x4ba87d
mov byte [ebp - 0x1d], 1
cmp byte [edi - 2], 0x3c
jne 0x4ba88b
mov bl, byte [edi - 1]
cmp bl, 0x20
jbe 0x4ba80c
mov bl, 0x20
xor eax, eax
mov al, bl
call fcn.004027e8
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x4ba876
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov cl, bl
mov edx, edi
mov eax, dword [ebp - 0x1c]
call fcn.0040792c
cmp bl, 0x15
jb 0x4ba860
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x744]
mov eax, dword [ebp - 0x1c]
call fcn.0040a134
mov eax, dword [ebp - 0x744]
mov ecx, 5
mov edx, 0x10
call fcn.00404ca0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ba88b
mov eax, dword [ebp - 0x1c]
call fcn.00402808
ret
inc byte [ebp - 0xd]
inc edi
cmp byte [ebp - 0xd], 0xf6
jne 0x4ba7dd
cmp byte [ebp - 0x1d], 0
jne 0x4ba8f5
mov eax, dword [0x4c9e7c]
mov edx, 0x4bb210
call fcn.00404b8c
jne 0x4baff8
push 0x4bb21c
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x74c]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x74c]
lea eax, [ebp - 0x748]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x748]
call fcn.004b4ee0
jmp 0x4baff8
push 0x4bb254
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x754]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x754]
lea eax, [ebp - 0x750]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x750]
call fcn.004b4ee0
lea edx, [ebp - 0x758]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3f0]
call fcn.00445ab8
mov eax, dword [ebp - 0x758]
call fcn.0046a154
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x75c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.00445ab8
mov eax, dword [ebp - 0x75c]
call fcn.004093cc
test al, al
jbe 0x4baa6a
mov byte [ebp - 0x20], al
mov bl, 1
lea edx, [ebp - 0x760]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov eax, dword [ebp - 0x760]
call fcn.004b98ac
test al, al
jne 0x4baa55
lea edx, [ebp - 0x764]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov eax, dword [ebp - 0x764]
xor ecx, ecx
mov edx, 0x1f4
call fcn.0046a4b4
mov byte [ebp - 0x1f], al
cmp byte [ebp - 0x1f], 0
jne 0x4baa55
call sub.kernel32.dll_GetTickCount_1
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x768]
call fcn.0040937c
mov eax, dword [ebp - 0x768]
push eax
lea edx, [ebp - 0x76c]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov edx, dword [ebp - 0x76c]
mov eax, dword [0x4c9ea8]
pop ecx
call fcn.004ae994
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x770]
mov edx, 4
call fcn.004093a4
mov eax, dword [ebp - 0x770]
push eax
lea edx, [ebp - 0x774]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov ecx, dword [ebp - 0x774]
mov eax, dword [0x4c9eac]
pop edx
call fcn.004ae994
jmp 0x4baa6a
mov eax, dword [ebp - 0xc]
call fcn.00469b24
mov dword [ebp - 0xc], eax
inc ebx
dec byte [ebp - 0x20]
jne 0x4ba98d
cmp byte [ebp - 0x1f], 1
jne 0x4baa7f
mov eax, 0x4bb27c
call fcn.004b4ee0
jmp 0x4baff8
lea edx, [ebp - 0x778]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40c]
call fcn.00445ab8
mov eax, dword [ebp - 0x778]
push eax
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x77c]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov ecx, dword [ebp - 0x77c]
lea edx, [ebp - 0x60e]
mov eax, dword [ebp - 4]
call fcn.004b6d80
jmp 0x4baff8
push 0x4bb2a0
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x784]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x784]
lea eax, [ebp - 0x780]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x780]
call fcn.004b4ee0
jmp 0x4baff8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d0]
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
jne 0x4bab75
push 0x4bb2c4
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x78c]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x78c]
lea eax, [ebp - 0x788]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x788]
call fcn.004b4ee0
jmp 0x4babd9
mov eax, dword [0x4c9e7c]
mov edx, 0x4bb210
call fcn.00404b8c
jne 0x4baff8
push 0x4bb2ec
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x794]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x794]
lea eax, [ebp - 0x790]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x790]
call fcn.004b4ee0
jmp 0x4baff8
cmp byte [ebp - 0x60e], 3
jne 0x4babec
mov eax, 0x4bb314
call fcn.004b4ee0
lea edx, [ebp - 0x798]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3f0]
call fcn.00445ab8
mov eax, dword [ebp - 0x798]
call fcn.0046a154
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x79c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
call fcn.00445ab8
mov eax, dword [ebp - 0x79c]
call fcn.004093cc
test al, al
jbe 0x4bac88
mov byte [ebp - 0x20], al
mov bl, 1
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7a0]
mov edx, 4
call fcn.004093a4
mov eax, dword [ebp - 0x7a0]
push eax
lea edx, [ebp - 0x7a4]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov edx, dword [ebp - 0x7a4]
pop eax
call fcn.004b97ec
cmp al, 1
je 0x4bac88
mov eax, dword [ebp - 0xc]
call fcn.00469b24
mov dword [ebp - 0xc], eax
inc ebx
dec byte [ebp - 0x20]
jne 0x4bac36
cmp byte [ebp - 0x1f], 1
jne 0x4bac9d
mov eax, 0x4bb330
call fcn.004b4ee0
jmp 0x4baff8
mov eax, 0x4bb1fc
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0xd], 0
mov edi, esi
mov edx, dword [ebp - 0x1c]
mov eax, edi
mov ecx, 9
call fcn.00408d18
test al, al
je 0x4bad47
cmp byte [edi - 2], 0x3c
jne 0x4bad55
mov bl, byte [edi - 1]
cmp bl, 0x20
jbe 0x4bacd6
mov bl, 0x20
xor eax, eax
mov al, bl
call fcn.004027e8
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x4bad40
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov cl, bl
mov edx, edi
mov eax, dword [ebp - 0x1c]
call fcn.0040792c
cmp bl, 0x15
jb 0x4bad2a
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x7a8]
mov eax, dword [ebp - 0x1c]
call fcn.0040a134
mov eax, dword [ebp - 0x7a8]
mov ecx, 5
mov edx, 0x10
call fcn.00404ca0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bad55
mov eax, dword [ebp - 0x1c]
call fcn.00402808
ret
inc byte [ebp - 0xd]
inc edi
cmp byte [ebp - 0xd], 0xf6
jne 0x4bacab
mov eax, dword [0x4c9e4c]
mov edx, 0x4bb1f8
call fcn.00404b8c
jne 0x4bad84
lea eax, [ebp - 0x7ac]
mov ecx, dword [ebp - 0x18]
mov edx, 0x4bb350
call fcn.00404a8c
mov eax, dword [ebp - 0x7ac]
call fcn.004b4ee0
lea edx, [ebp - 0x7b0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40c]
call fcn.00445ab8
mov eax, dword [ebp - 0x7b0]
push eax
push 0
push 0x44
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x7b4]
mov eax, dword [ebp - 0xc]
call fcn.0046a1a8
mov ecx, dword [ebp - 0x7b4]
lea edx, [ebp - 0x60e]
mov eax, dword [ebp - 4]
call fcn.004b7534
jmp 0x4baff8
push 0x4bb364
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7bc]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x7bc]
lea eax, [ebp - 0x7b8]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7b8]
call fcn.004b4ee0
jmp 0x4baff8
push 0x4bb38c
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7c4]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x7c4]
lea eax, [ebp - 0x7c0]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7c0]
call fcn.004b4ee0
jmp 0x4baff8
push 0x4bb3b0
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7cc]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x7cc]
lea eax, [ebp - 0x7c8]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7c8]
call fcn.004b4ee0
jmp 0x4baff8
push 0x4bb3d4
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7d4]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x7d4]
lea eax, [ebp - 0x7d0]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7d0]
call fcn.004b4ee0
jmp 0x4baff8
mov eax, dword [0x4c9e78]
mov edx, 0x4bb210
call fcn.00404b8c
jne 0x4baff8
push 0x4bb3fc
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7dc]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x7dc]
lea eax, [ebp - 0x7d8]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7d8]
call fcn.004b4ee0
jmp 0x4baff8
push 0x4bb420
push dword [ebp - 0x14]
push 0x4bb244
mov eax, dword [ebp - 0x60a]
push eax
call sub.wsock32.dll_ntohl
lea ecx, [ebp - 0x7e4]
mov edx, 4
call fcn.004093a4
push dword [ebp - 0x7e4]
lea eax, [ebp - 0x7e0]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7e0]
call fcn.004b4ee0
jmp 0x4baff8
push 0x4bb448
push dword [ebp - 0x14]
push 0x4bb478
lea edx, [ebp - 0x7ec]
xor eax, eax
mov al, byte [ebp - 0x1e]
call fcn.00409290
push dword [ebp - 0x7ec]
lea eax, [ebp - 0x7e8]
mov edx, 4
call fcn.00404b00
mov eax, dword [ebp - 0x7e8]
call fcn.004b4ee0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4bb038
push 0x4bb494
call sub.kernel32.dll_OutputDebugStringA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bb110
lea eax, [ebp - 0x7f0]
mov edx, 0x10
call fcn.004047a4
lea eax, [ebp - 0x7b0]
call fcn.00404780
lea eax, [ebp - 0x7ac]
mov edx, 4
call fcn.004047a4
lea eax, [ebp - 0x79c]
mov edx, 2
call fcn.004047a4
lea eax, [ebp - 0x794]
mov edx, 7
call fcn.004047a4
lea eax, [ebp - 0x778]
call fcn.00404780
lea eax, [ebp - 0x774]
mov edx, 6
call fcn.004047a4
lea eax, [ebp - 0x75c]
mov edx, 2
call fcn.004047a4
lea eax, [ebp - 0x754]
mov edx, 0xb
call fcn.004047a4
lea eax, [ebp - 0x728]
call fcn.00404780
lea eax, [ebp - 0x724]
mov edx, 5
call fcn.004047a4
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004047a4
lea eax, [ebp - 8]
call fcn.00404780
ret