Function at 0x4a6ac0
Capabilities:
Create process on windows
Create process suspended

Disassembly:
sub esp, 0xe4
push ebp
push esi
mov esi, dword [esp + 0xf0]
cmp esi, 0x3e8
mov ebp, ecx
jne 0x4a6ae6
pop esi
mov al, 1
pop ebp
add esp, 0xe4
ret 4
mov ecx, dword [ebp + 0x440]
lea eax, [ecx - 1]
cmp eax, 0x88
push edi
ja case.0x4a6afb.3
jmp dword [eax*4 + 0x4a7d58]
push esi
mov ecx, ebp
call fcn.004a4fd0
push esi
mov ecx, ebp
call fcn.004a4fb0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a4ff0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a4ff0
push esi
mov ecx, ebp
call fcn.004a4fb0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
je 0x4a6b88
dec esi
jne 0x4a7d4a
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
mov esi, dword [ebp + 0x444]
cmp esi, 5
mov ecx, dword [0x74e6a0]
jne 0x4a6bb3
call fcn.0054df50
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
call fcn.0054d730
call fcn.00410fb0
test eax, eax
je 0x4a6be5
mov eax, dword [0x74cdc4]
test eax, eax
je 0x4a6be5
mov al, byte [eax + 0x4e4]
mov byte [esp + 0xc], al
mov ecx, dword [esp + 0xc]
push ecx
call fcn.00410fb0
mov ecx, eax
call fcn.00419290
push 0
call fcn.00411400
mov eax, esi
add esp, 4
sub eax, 2
je 0x4a6ca5
dec eax
je 0x4a6c21
dec eax
jne case.0x4a6afb.58
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push 0x44
lea edx, [esp + 0xb0]
push 0
push edx
call fcn.0062f6b0
push 0x10
lea eax, [esp + 0x1c]
push 0
push eax
mov dword [esp + 0xc4], 0x44
call fcn.0062f6b0
add esp, 0x18
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0xb0]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push str.PatchUpdate.exe
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [esp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [esp + 0x10]
push ecx
call esi
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
mov ecx, dword [0x74c754]
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
jne case.0x4a6afb.3
mov ecx, dword [ebp + 0x444]
push 0
call fcn.004b0770
jmp case.0x4a6afb.3
dec esi
je 0x4a6ced
dec esi
jne 0x4a6e76
jmp case.0x4a6afb.3
call fcn.0040f9b0
pop edi
pop esi
mov al, 1
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5ac0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a58d0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5060
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6130
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a61d0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a59b0
jmp case.0x4a6afb.3
mov eax, dword [0x74ce08]
test eax, eax
je case.0x4a6afb.3
add eax, 0xc58
push 0x20
push eax
lea eax, [esp + 0x50]
push eax
mov byte [esp + 0x44], 0xe
mov byte [esp + 0x45], 0x15
mov dword [esp + 0x95], 0
call fcn.0062fff0
mov ecx, dword [0x74c650]
mov edx, dword [ecx + 0x458]
push 0x20
add edx, 4
push edx
lea eax, [esp + 0x7c]
push eax
call fcn.0062fff0
add esp, 0x18
dec esi
je 0x4a6db1
dec esi
jne 0x4a6db9
mov byte [esp + 0x88], 0
jmp 0x4a6db9
mov byte [esp + 0x88], 1
mov edx, dword [0x739498]
mov ecx, 0x739498
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x55
lea edx, [esp + 0x40]
mov dword [esp + 0x42], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
jmp case.0x4a6afb.3
push 1
push esi
mov ecx, ebp
call fcn.004a5a20
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a64d0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6550
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a65d0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6690
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6750
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6800
jmp case.0x4a6afb.3
cmp esi, 1
jne case.0x4a6afb.3
mov eax, dword [ebp + 0x444]
cmp eax, 0xffffffff
je case.0x4a6afb.3
mov dword [esp + 0x12], eax
mov eax, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x17
mov byte [esp + 0xd], 4
call dword [eax + 8]
mov ecx, dword [0x74c754]
mov dword [esp + 0xe], eax
mov edx, dword [ecx]
push 0
push 0xa
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
mov al, 1
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5bc0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5b80
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5b40
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5c00
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5c60
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5530
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5710
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5cc0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5d40
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5dd0
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6080
jmp case.0x4a6afb.3
cmp esi, 1
sete cl
add cl, 5
mov byte [esp + 0xc], 0x19
mov byte [esp + 0x12], cl
jmp 0x4a7129
cmp esi, 1
jne case.0x4a6afb.3
mov byte [esp + 0x34], 1
jmp 0x4a6f2a
cmp esi, 1
jne case.0x4a6afb.3
mov byte [esp + 0x34], 2
mov eax, dword [ebp + 0x444]
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0x20], 0xc
mov byte [esp + 0x21], 3
mov dword [esp + 0x30], eax
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x2a], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
jmp case.0x4a6afb.3
mov ecx, dword [0x752364]
call fcn.00613250
test eax, eax
je case.0x4a6afb.3
dec esi
mov edi, dword [eax + 0x11c]
jne 0x4a70c1
test edi, edi
je 0x4a70c1
mov ecx, dword [edi + 0x2c]
mov edx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc4], edx
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xac], 4
mov byte [esp + 0xad], 3
mov dword [esp + 0xc8], eax
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x20
lea edx, [esp + 0xb4]
mov dword [esp + 0xb6], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
push 0
call fcn.005ffb10
mov ecx, eax
call fcn.005fe580
mov al, byte [0x74b1e8]
test al, al
je 0x4a70c1
lea ecx, [esp + 0x38]
call fcn.004a5010
mov eax, dword [edi + 0x30]
lea ecx, [edi + 4]
push ecx
lea edx, [esp + 0x55]
mov esi, 1
push edx
mov dword [esp + 0x51], esi
mov dword [esp + 0x55], eax
call fcn.00630960
mov ecx, dword [0x74c650]
mov word [esp + 0x85], si
mov dword [esp + 0x81], esi
mov eax, dword [ecx + 0x458]
mov edx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
mov dword [esp + 0x79], edx
mov dword [esp + 0x18], eax
mov eax, dword [ecx + 0x458]
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
add esp, 8
mov dword [esp + 0x75], eax
mov dword [esp + 0xc], ecx
mov ecx, dword [0x74c754]
mov edx, dword [ecx]
push 0x4d
lea eax, [esp + 0x3c]
push eax
call dword [edx + 0x1c]
mov ecx, dword [edi + 0x2c]
mov dword [esp + 0x30], ecx
mov ecx, dword [0x74c754]
push 0x14
lea eax, [esp + 0x24]
mov byte [esp + 0x24], 4
mov byte [esp + 0x25], 2
mov edx, dword [ecx]
push eax
call dword [edx + 0x1c]
push esi
push 0x33
call fcn.004a6440
mov ecx, eax
call fcn.004a63e0
jmp case.0x4a6afb.3
mov esi, 1
push esi
push 0x33
call fcn.004a6440
mov ecx, eax
call fcn.004a63e0
jmp case.0x4a6afb.3
cmp esi, 1
jne 0x4a70f0
mov ecx, dword [0x74c650]
mov ecx, dword [ecx + 0x458]
call fcn.00433f20
mov eax, dword [0x74cdf4]
test eax, eax
je case.0x4a6afb.3
mov dword [eax + 0x4e8], 0
jmp case.0x4a6afb.3
mov eax, dword [ebp + 0x444]
test eax, eax
jne 0x4a7159
cmp esi, 1
jne case.0x4a6afb.3
mov byte [esp + 0xc], 0x1c
mov byte [esp + 0x12], 0
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xd], 4
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 7
lea edx, [esp + 0x14]
mov dword [esp + 0x16], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6880
jmp case.0x4a6afb.3
mov eax, dword [ebp + 0x444]
test eax, eax
jne 0x4a71ae
cmp esi, 1
jne case.0x4a6afb.3
mov eax, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x1c
mov byte [esp + 0xd], 4
mov byte [esp + 0x12], 2
call dword [eax + 8]
mov ecx, dword [0x74c754]
mov dword [esp + 0xe], eax
mov edx, dword [ecx]
push 0
push 7
lea eax, [esp + 0x14]
jmp 0x4a6e6b
push esi
mov ecx, ebp
call fcn.004a6940
jmp case.0x4a6afb.3
mov eax, dword [ebp + 0x444]
test eax, eax
jne 0x4a71e5
cmp esi, 1
jne case.0x4a6afb.3
push 0
push ecx
push 0x6dbb14
mov ecx, 0x74cdb0
call fcn.00463150
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a6a00
jmp case.0x4a6afb.3
dec esi
jne case.0x4a6afb.58
mov ecx, dword [0x74c650]
mov ecx, dword [ecx + 0x458]
call fcn.00433ed0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
jne case.0x4a6afb.58
mov edx, dword [ebp + 0x444]
mov eax, dword [0x74c650]
mov ecx, dword [eax + 0x458]
push edx
call fcn.00433480
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x56
mov dword [esp + 0x1c], 1
jmp 0x4a7302
dec esi
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x56
jmp 0x4a729b
dec esi
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x55
mov dword [esp + 0x1c], 1
jmp 0x4a7302
dec esi
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x55
mov eax, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 4
mov dword [esp + 0x1c], 2
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x12], eax
mov edx, dword [ecx]
push 0x14
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
jne case.0x4a6afb.58
mov eax, dword [ebp + 0x444]
test eax, eax
je case.0x4a6afb.58
mov ecx, dword [eax]
mov byte [esp + 0xd], 0x12
mov dword [esp + 0x1c], ecx
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 4
call dword [edx + 8]
push 0
push 0x14
lea edx, [esp + 0x14]
jmp 0x4a79c9
dec esi
jne case.0x4a6afb.58
mov ecx, dword [ebp + 0x444]
test ecx, ecx
je case.0x4a6afb.58
call fcn.00521580
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push 1
push esi
mov ecx, ebp
call fcn.004a50f0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push 1
push esi
mov ecx, ebp
call fcn.004a5170
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push 0
push esi
mov ecx, ebp
call fcn.004a50f0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push 0
push esi
mov ecx, ebp
call fcn.004a5170
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a60a0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a54b0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a6040
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a51f0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5250
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a52c0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5330
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5390
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a53f0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5450
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
call fcn.0041a560
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x2c]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov ecx, dword [0x74ced0]
test ecx, ecx
je case.0x4a6afb.58
call fcn.0046d200
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne 0x4a787c
mov eax, dword [ebp + 0x444]
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x21
mov byte [esp + 0xd], 1
mov dword [esp + 0x12], eax
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0xa
lea edx, [esp + 0x14]
mov dword [esp + 0x16], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
jmp 0x4a787c
cmp esi, 1
jne 0x4a787c
mov byte [esp + 0xc], 0x19
mov byte [esp + 0xd], 5
jmp 0x4a7857
cmp esi, 1
jne case.0x4a6afb.58
mov ecx, dword [ebp + 0x444]
mov edx, dword [0x739498]
mov dword [esp + 0x12], ecx
mov ecx, 0x739498
mov byte [esp + 0xc], 0x24
mov byte [esp + 0xd], 6
call dword [edx + 8]
push 0
push 0xa
lea edx, [esp + 0x14]
jmp 0x4a79c9
cmp esi, 1
jne 0x4a7606
mov ecx, dword [0x74ce28]
test ecx, ecx
je case.0x4a6afb.58
call fcn.00477a20
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 2
jne case.0x4a6afb.58
mov ecx, dword [0x74ce28]
test ecx, ecx
je case.0x4a6afb.58
call fcn.00477980
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne 0x4a7664
mov ecx, dword [0x74cee4]
test ecx, ecx
je case.0x4a6afb.58
call fcn.00489e30
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 2
jne case.0x4a6afb.58
mov ecx, dword [0x74cee4]
test ecx, ecx
je case.0x4a6afb.58
call fcn.005e8330
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne 0x4a76e3
mov eax, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x16
mov byte [esp + 0xd], 0x13
mov byte [esp + 0x1c], 2
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x12], eax
mov edx, dword [ecx]
push 0x11
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 2
jne case.0x4a6afb.58
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x16
mov byte [esp + 0xd], 0x13
mov byte [esp + 0x1c], 1
call dword [edx + 8]
push 0
push 0x11
lea edx, [esp + 0x14]
jmp 0x4a79c9
cmp esi, 1
jne 0x4a775a
mov eax, dword [ebp + 0x444]
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0x20], 0x16
mov byte [esp + 0x21], 0x1c
mov dword [esp + 0x30], eax
mov byte [esp + 0x34], 1
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x2a], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
mov ecx, ebp
call fcn.005e8330
push esi
mov ecx, ebp
call fcn.004a5fa0
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
call fcn.0045aa00
mov ecx, dword [eax + 0x54]
test ecx, ecx
je 0x4a7d4a
lea ecx, [esp + 0x38]
call fcn.004513a0
push 0x4f
call fcn.0045aa00
mov eax, dword [eax + 0x54]
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.0062f860
add esp, 0xc
cmp esi, 1
jne 0x4a77dd
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0x86], 1
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x4f
lea edx, [esp + 0x40]
mov dword [esp + 0x42], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
jmp 0x4a780f
cmp esi, 2
jne 0x4a780f
mov eax, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0x86], 2
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x3e], eax
mov edx, dword [ecx]
push 0x4f
lea eax, [esp + 0x40]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
call fcn.0045aa00
mov ecx, eax
call fcn.00450fb0
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x29
mov byte [esp + 0xd], 9
jmp 0x4a79b3
cmp esi, 1
jne 0x4a787c
mov byte [esp + 0xc], 0x1b
mov byte [esp + 0xd], 0x17
mov eax, dword [0x739498]
mov ecx, 0x739498
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x12], eax
mov edx, dword [ecx]
push 6
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x10]
mov eax, dword [0x74cdf4]
test eax, eax
je case.0x4a6afb.58
mov ecx, ebp
mov dword [eax + 0x4e8], 0
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x36
jmp 0x4a792e
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x16
mov byte [esp + 0xd], 0x43
jmp 0x4a7a01
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x44
jmp 0x4a792e
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x16
mov byte [esp + 0xd], 0x45
jmp 0x4a7a01
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x46
jmp 0x4a792e
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x16
mov byte [esp + 0xd], 0x47
jmp 0x4a7a01
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xd], 0x48
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x16
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x10
lea edx, [esp + 0x14]
mov dword [esp + 0x16], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x16
mov byte [esp + 0xd], 0x49
jmp 0x4a7a01
push esi
mov ecx, ebp
call fcn.004a60e0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x1b
mov byte [esp + 0xd], 0x18
mov edx, dword [0x739498]
mov ecx, 0x739498
call dword [edx + 8]
push 0
push 6
lea edx, [esp + 0x14]
mov ecx, dword [0x74c754]
mov dword [esp + 0x16], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov byte [esp + 0xc], 0x15
mov byte [esp + 0xd], 0x1a
mov eax, dword [0x739498]
mov ecx, 0x739498
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x12], eax
mov edx, dword [ecx]
push 0x10
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov cl, byte [ebp + 0x444]
mov edx, dword [0x739498]
mov byte [esp + 0x12], cl
mov ecx, 0x739498
mov byte [esp + 0xc], 0x19
mov byte [esp + 0xd], 4
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 7
lea edx, [esp + 0x14]
mov dword [esp + 0x16], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
mov ecx, dword [0x74cef4]
test ecx, ecx
je case.0x4a6afb.58
call fcn.005e8330
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov eax, dword [0x74cef8]
test eax, eax
je case.0x4a6afb.58
mov edx, dword [0x739498]
lea esi, [eax + 0x440]
mov al, byte [ebp + 0x444]
mov ecx, 0x1c
lea edi, [esp + 0x38]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x739498
mov byte [esp + 0xaa], al
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0x73
lea edx, [esp + 0x40]
mov dword [esp + 0x42], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
mov ecx, dword [0x74cef8]
call fcn.005e8330
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
push esi
mov ecx, ebp
call fcn.004a5e60
jmp case.0x4a6afb.3
push esi
mov ecx, ebp
call fcn.004a5f50
jmp case.0x4a6afb.3
dec esi
jne case.0x4a6afb.58
mov ecx, dword [0x74cdcc]
call fcn.004e5650
mov ecx, dword [0x74cdcc]
call fcn.005e8330
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
je 0x4a7b7d
dec esi
jne 0x4a7d4a
mov al, 1
jmp 0x4a7b7f
mov al, 2
mov esi, dword [ebp + 0x444]
mov ecx, 0xc
lea edi, [esp + 0xac]
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0xb7], al
mov eax, dword [0x739498]
mov ecx, 0x739498
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0xb2], eax
mov edx, dword [ecx]
push 0x30
lea eax, [esp + 0xb4]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
mov eax, dword [ebp + 0x444]
je 0x4a7bf4
dec esi
jne case.0x4a6afb.58
mov dword [esp + 0x1b], 0
jmp 0x4a7bfc
mov dword [esp + 0x1b], 1
mov ecx, dword [eax + 0xb]
mov edx, dword [eax + 7]
mov eax, dword [0x739498]
mov dword [esp + 0x17], ecx
mov ecx, 0x739498
mov dword [esp + 0x13], edx
mov byte [esp + 0xd], 0xc
mov byte [esp + 0x12], 0
mov byte [esp + 0xc], 0x2e
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x12], eax
mov edx, dword [ecx]
lea eax, [esp + 0x10]
push 0x13
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
dec esi
je 0x4a7caf
dec esi
jne case.0x4a6afb.58
mov edx, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x2e
mov byte [esp + 0x12], 0
mov byte [esp + 0xd], 0x12
mov dword [esp + 0x13], 0
call dword [edx + 8]
mov ecx, dword [0x74c754]
push 0
push 0xb
lea edx, [esp + 0x14]
mov dword [esp + 0x16], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
mov eax, dword [0x739498]
mov ecx, 0x739498
mov byte [esp + 0xc], 0x2e
mov byte [esp + 0x12], 0
mov byte [esp + 0xd], 0x12
mov dword [esp + 0x13], 1
call dword [eax + 8]
mov ecx, dword [0x74c754]
push 0
mov dword [esp + 0x12], eax
mov edx, dword [ecx]
push 0xb
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x10]
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov ecx, dword [0x74cec0]
test ecx, ecx
je case.0x4a6afb.58
call fcn.005e8330
mov ecx, ebp
mov dword [0x74cec0], 0
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4
cmp esi, 1
jne case.0x4a6afb.58
mov ecx, dword [0x74e210]
call fcn.0051d5d0
mov ecx, ebp
call fcn.005e8330
pop edi
pop esi
xor al, al
pop ebp
add esp, 0xe4
ret 4