Function at 0x4b3cd0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6e6879
mov eax, dword fs:[0]
push eax
sub esp, 0x4ac
mov eax, dword [0x766480]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [0x77ae98]
test ecx, ecx
je 0x4b3d10
push 0x32
call fcn.006ab490
mov eax, dword [esi + 0x348]
mov ecx, dword [eax + 0x18c]
test ecx, ecx
je 0x4b3d25
call fcn.005b79c0
mov dword [0x76a510], 0
call fcn.0065d950
mov ecx, 0x1a4e778
call fcn.00665220
test byte [0x1a4e873], 0x80
je 0x4b3dc3
test byte [0x1a4e973], 0x80
jne 0x4b3dc3
mov eax, dword [0x77ae94]
cmp dword [eax + 0x168], 0xf
je 0x4b3ddc
mov ecx, dword [0x77b1c4]
push 4
call fcn.004db360
mov edi, eax
mov ecx, dword [edi + 0x84]
test ecx, ecx
je 0x4b3ddc
mov edx, dword [ecx]
mov edx, dword [edx + 0x68]
call edx
test eax, eax
jne 0x4b3ddc
mov eax, dword [esi + 0x344]
mov ecx, edi
cmp byte [eax + 0x4f40], 0
jne 0x4b3db3
mov byte [eax + 0x4f40], 1
mov eax, dword [esi + 0x344]
push 0
mov dword [eax + 0x4c58], 1
call fcn.004ec6f0
jmp 0x4b3ddc
push 1
mov byte [eax + 0x4f40], 0
call fcn.004ec6f0
jmp 0x4b3ddc
test byte [0x1a4e824], 0x80
je 0x4b3ddc
test byte [0x1a4e924], 0x80
jne 0x4b3ddc
mov ecx, esi
call fcn.004b3230
push dword [0x7426d0]
call fcn.0065d860
fstp dword [ebp - 0x4a4]
movss xmm0, dword [ebp - 0x4a4]
add esp, 4
comiss xmm0, dword [0x70196c]
jb 0x4b3e4f
mov ecx, dword [0x76a0cc]
call fcn.006aac90
test al, al
jne 0x4b3e4f
push 0
push 0x780dc8
push 0x8c21c8
push dword [0x778fe4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push 0
push 2
push dword [0x778fe4]
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4c00], 5
jmp 0x4b4f2a
push dword [0x7426a0]
call fcn.0065d860
movss xmm2, dword [0x70196c]
add esp, 4
fstp dword [ebp - 0x4a0]
movss xmm1, dword [ebp - 0x4a0]
comiss xmm1, xmm2
jb 0x4b4063
comiss xmm1, dword [str.33_vA]
jbe 0x4b3eb7
movss xmm0, dword [0x700e24]
comiss xmm0, xmm1
jbe 0x4b3eb7
comiss xmm2, dword [ebp - 0x4a4]
jbe 0x4b3eb7
push 0
push str.ROW_Client_Error_
push str.Speed_hack_detected_.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
movaps xmm0, xmm1
addss xmm0, xmm1
push ecx
mov ecx, dword [esi + 0x34c]
movss dword [ebp - 0x4a4], xmm0
movss dword [esp], xmm0
call fcn.004b53e0
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bca50
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bcc50
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bc7a0
movss xmm0, dword [ebp - 0x4a0]
push ecx
movss dword [esp], xmm0
call fcn.004bd160
movss xmm0, dword [ebp - 0x4a0]
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bcb70
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bc7f0
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bc460
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bbb70
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bba60
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bca90
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bbd80
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bc940
movss xmm0, dword [ebp - 0x4a0]
push ecx
mov ecx, dword [esi + 0x344]
movss dword [esp], xmm0
call fcn.004bc560
movss xmm0, dword [ebp - 0x4a4]
push ecx
movss dword [esp], xmm0
call fcn.005bac00
mov ecx, eax
call fcn.005bae60
movss xmm0, dword [ebp - 0x4a4]
push ecx
movss dword [esp], xmm0
call fcn.005bac00
mov ecx, eax
call fcn.005baf00
movss xmm0, dword [ebp - 0x4a4]
push ecx
movss dword [esp], xmm0
call fcn.005bac00
mov ecx, eax
call fcn.005baeb0
mov ecx, dword [esi + 0x344]
call fcn.004bbc80
mov edx, dword [esi + 0x344]
mov eax, dword [edx + 0x4c94]
test al, 8
je 0x4b4112
movzx eax, word [edx + 0xc0]
add eax, 0xfffffffb
cmp eax, 0x13
ja case.0x4b4098.13
movzx eax, byte [eax + 0x4b4f64]
jmp dword [eax*4 + 0x4b4f48]
mov byte [ebp - 0x4a0], 1
jmp 0x4b40d3
mov byte [ebp - 0x4a0], 2
jmp 0x4b40d3
mov byte [ebp - 0x4a0], 3
jmp 0x4b40d3
mov byte [ebp - 0x4a0], 4
jmp 0x4b40d3
mov byte [ebp - 0x4a0], 0x11
jmp 0x4b40d3
mov byte [ebp - 0x4a0], 0x12
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b40e2
mov ecx, dword [eax + 0x54]
mov eax, dword [esi + 0x348]
push dword [ebp - 0x4a0]
push dword [eax + 0x164]
push ecx
call fcn.006b0080
add esp, 0xc
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4c94], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4f20
mov eax, dword [edx + 0x4cbc]
test al, 8
je 0x4b41f7
mov eax, 0x2000
or word [esi + 0x364], ax
mov ecx, dword [0x77ae98]
push 0x18
call fcn.006ac120
mov ecx, dword [esi + 0x348]
lea eax, [ecx + 0x11c]
push eax
call fcn.00478060
movzx eax, word [esi + 0x364]
mov ecx, dword [esi + 0x348]
push eax
push dword [esi + 0x35c]
push dword [esi + 0x360]
lea eax, [ecx + 0x134]
push eax
lea eax, [ecx + 0x11c]
push eax
push dword [0x77ae98]
call fcn.006aed00
push 0x7f4
call fcn.006df8c3
add esp, 0x1c
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4b41af
mov ecx, eax
call fcn.00486c20
mov edi, eax
jmp 0x4b41b1
xor edi, edi
sub esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
mov dword [esp + 4], 0x43480000
mov dword [esp], 0x43780000
push 0
push 0x85ddc8
call fcn.004871c0
mov dword [edi + 0x5ac], 0x186a0
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4cbc], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4f14
test byte [edx + 0x4cc0], 3
jne 0x4b4efc
test byte [edx + 0x4cc4], 3
jne 0x4b4e7e
mov eax, dword [edx + 0x4c90]
test al, 8
je 0x4b429f
mov ecx, dword [0x77ae98]
push 0xc
call fcn.006ac120
mov eax, dword [esi + 0x348]
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x494], 0
mov dword [eax + 4], 2
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b426a
mov ecx, dword [eax + 0x54]
push 0
lea eax, [ebp - 0x49c]
push eax
push 0
mov eax, dword [esi + 0x348]
push dword [eax + 0x164]
push ecx
call fcn.006aeae0
mov eax, dword [esi + 0x344]
add esp, 0x14
mov dword [eax + 0x4c90], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d7a
mov ecx, dword [0x7797f8]
mov eax, dword [ecx + 0x970]
test al, 8
je 0x4b4325
mov eax, dword [0x77ae98]
cmp dword [ecx + 0x974], 0
mov ecx, dword [eax + 0x4c]
je 0x4b42d8
test ecx, ecx
jne 0x4b42cf
mov ecx, dword [eax + 0x54]
mov byte [ebp - 0x4a4], 1
jmp 0x4b42e6
test ecx, ecx
jne 0x4b42df
mov ecx, dword [eax + 0x54]
mov byte [ebp - 0x4a4], 0
mov eax, dword [esi + 0x348]
push dword [ebp - 0x4a4]
mov eax, dword [eax + 0x164]
push eax
push ecx
call fcn.006aea90
mov eax, dword [0x7797f8]
add esp, 0xc
mov dword [eax + 0x974], 0
mov eax, dword [0x7797f8]
mov dword [eax + 0x970], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d5c
mov eax, dword [edx + 0x4c9c]
test al, 8
je 0x4b43ab
xor eax, eax
mov byte [ebp - 0x49d], 1
mov word [ebp - 0x4a4], ax
mov eax, dword [edx + 0x4f7c]
mov eax, dword [eax + 0x1b8]
mov ax, word [eax + 0x12]
mov word [ebp - 0x4ac], ax
xor eax, eax
push eax
push dword [ebp - 0x4a4]
mov word [ebp - 0x4aa], ax
mov eax, dword [ebp - 0x4ac]
sub esp, 8
mov ecx, esp
push 0
push dword [edx + 0x4c60]
mov dword [ecx], eax
mov al, byte [ebp - 0x49d]
push 2
mov byte [ecx + 4], al
call fcn.004bee70
add esp, 0x1c
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4c9c], 0
jmp 0x4b4f2a
test al, 0x10
je 0x4b43bb
mov dword [edx + 0x4f7c], 0
jmp 0x4b4396
mov eax, dword [edx + 0x4c98]
test al, 8
je 0x4b444f
mov ecx, dword [0x77ae98]
push 0xa
call fcn.006ac120
mov eax, dword [esi + 0x344]
mov eax, dword [eax + 0x4bdc]
cmp dword [eax + 0x1c], 0
mov ecx, dword [eax + 0x1b8]
jne 0x4b4401
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x28]
shr eax, 3
test al, 1
je 0x4b4401
movzx edx, byte [ecx + 0x15]
jmp 0x4b4406
mov edx, 1
mov ax, word [ecx + 0x12]
mov word [ebp - 0x49e], ax
lea eax, [ebp - 0x49e]
push eax
push edx
call fcn.004be240
mov ecx, dword [esi + 0x344]
add esp, 8
test eax, eax
je 0x4b4432
mov eax, 1
jmp 0x4b4434
xor eax, eax
mov dword [ecx + 0x4bf4], eax
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4c98], 0
jmp 0x4b4f2a
test al, 0x10
je 0x4b4462
mov dword [edx + 0x4c98], 0
jmp 0x4b4f2a
mov eax, dword [edx + 0x4ca0]
test al, 8
je 0x4b4501
mov ecx, dword [0x77ae98]
push 0xa
call fcn.006ac120
mov eax, 0xb
mov word [ebp - 0x4a0], ax
lea eax, [ebp - 0x4a0]
push eax
mov eax, dword [esi + 0x344]
movzx eax, byte [eax + 0x4ca4]
push eax
call fcn.004be240
mov ecx, dword [esi + 0x344]
add esp, 8
test eax, eax
je 0x4b44b7
mov eax, 1
jmp 0x4b44b9
xor eax, eax
mov dword [ecx + 0x4bf4], eax
mov eax, dword [0x77ae94]
mov ecx, dword [0x77b520]
push 0x81
push dword [eax + 0x164]
push 0x79a9c8
call fcn.0054c710
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4ca0], 0
mov eax, dword [esi + 0x344]
mov byte [eax + 0x4ca4], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d40
mov eax, dword [edx + 0x4ca8]
test al, 8
je 0x4b4577
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b4522
mov ecx, dword [eax + 0x54]
movzx eax, byte [edx + 0x4cb0]
push eax
mov eax, dword [esi + 0x348]
push dword [edx + 0x4cac]
push dword [eax + 0x164]
push ecx
call fcn.006af580
mov eax, dword [esi + 0x344]
add esp, 0x10
mov dword [eax + 0x4ca8], 0
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4cac], 0
mov eax, dword [esi + 0x344]
mov byte [eax + 0x4cb0], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d31
mov eax, dword [edx + 0x4cd0]
test al, 8
je 0x4b45c5
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b4598
mov ecx, dword [eax + 0x54]
mov eax, dword [0x77ae94]
push 2
push 2
push dword [eax + 0x164]
push ecx
call fcn.006af520
mov eax, dword [esi + 0x344]
add esp, 0x10
mov dword [eax + 0x4cd0], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d22
mov eax, dword [edx + 0x4cd8]
test al, 8
je 0x4b4613
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b45e6
mov ecx, dword [eax + 0x54]
mov eax, dword [0x77ae94]
push 1
push 1
push dword [eax + 0x164]
push ecx
call fcn.006af520
mov eax, dword [esi + 0x344]
add esp, 0x10
mov dword [eax + 0x4cd8], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d13
mov eax, dword [edx + 0x4cdc]
test al, 8
je 0x4b4691
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b4634
mov ecx, dword [eax + 0x54]
mov eax, dword [0x77ae94]
push 4
push dword [edx + 0x4ce8]
push dword [edx + 0x4ce4]
push dword [edx + 0xca]
push dword [eax + 0x164]
push ecx
call fcn.006afb30
mov eax, dword [esi + 0x344]
add esp, 0x18
mov dword [eax + 0x4cdc], 0
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4ce4], 0
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4ce8], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4d04
mov eax, dword [edx + 0x4ce0]
test al, 8
je 0x4b46fb
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b46b2
mov ecx, dword [eax + 0x54]
mov eax, dword [0x77ae94]
push 3
push 0
push dword [edx + 0x4ce4]
push dword [edx + 0xca]
push dword [eax + 0x164]
push ecx
call fcn.006afb30
mov eax, dword [esi + 0x344]
add esp, 0x18
mov dword [eax + 0x4ce0], 0
mov eax, dword [esi + 0x344]
mov dword [eax + 0x4ce4], 0
jmp 0x4b4f2a
test al, 0x11
jne 0x4b4cf5
cmp dword [ecx + 0x97c], 0
jne 0x4b483b
push 0x7f4
call fcn.006df8c3
add esp, 4
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x4b473d
mov ecx, eax
call fcn.00486c20
mov dword [ebp - 0x4a4], eax
jmp 0x4b4747
mov dword [ebp - 0x4a4], 0
mov eax, dword [0x7797f8]
mov dword [ebp - 4], 0xffffffff
push dword [eax + 0x980]
call fcn.00450800
mov ecx, eax
call fcn.0067de70
test eax, eax
je 0x4b4f2a
push dword [eax + 4]
call fcn.00450780
mov ecx, eax
call fcn.0067b810
mov edi, eax
test edi, edi
je 0x4b4f2a
mov ecx, dword [0x77b1c4]
push 4
call fcn.004db360
test eax, eax
je 0x4b4f2a
mov ecx, dword [eax + 0x6c]
test ecx, ecx
je 0x4b4835
push dword [edi + 0x30]
mov ecx, dword [ecx + 0x2cc]
call fcn.005173f0
test eax, eax
je 0x4b4f2a
mov edx, dword [esi + 0x344]
mov cl, byte [eax + 5]
cmp cl, byte [edx + 0x4f09]
jne 0x4b4835
cmp dword [edi + 0x1c], 0xf
lea ecx, [edi + 8]
jbe 0x4b47d8
mov ecx, dword [ecx]
add eax, 0xe
push eax
push ecx
lea eax, [ebp - 0x90]
push 0xa63dc8
push eax
call fcn.0044f6e0
mov edi, dword [ebp - 0x4a4]
lea eax, [ebp - 0x90]
add esp, 8
mov ecx, edi
mov dword [esp + 4], 0x43480000
mov dword [esp], 0x43780000
push 0x19
push eax
call fcn.004871c0
mov eax, dword [0x7797f8]
add eax, 0x988
mov dword [edi + 0x2f8], eax
mov eax, dword [0x7797f8]
mov dword [eax + 0x97c], 0xffffffff
mov ecx, dword [0x7797f8]
mov eax, dword [ecx + 0x988]
test al, 8
je 0x4b48d1
mov eax, dword [0x779904]
cmp byte [eax + 0xd2], 1
jge 0x4b48be
push 1
lea eax, [ebp - 0x194]
push 0x88d5c8
push eax
call fcn.0044f6e0
push 0x7f4
call fcn.006df8c3
add esp, 0x10
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x4b4891
mov ecx, eax
call fcn.00486c20
jmp 0x4b4893
xor eax, eax
sub esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
mov dword [esp + 4], 0x43480000
mov dword [esp], 0x43780000
push 0
push ecx
mov ecx, eax
call fcn.004871c0
jmp 0x4b4907
mov eax, dword [0x77ae98]
mov edx, dword [eax + 0x4c]
test edx, edx
jne 0x4b48cd
mov edx, dword [eax + 0x54]
push 1
jmp 0x4b48e6
test al, 0x11
je 0x4b4916
mov eax, dword [0x77ae98]
mov edx, dword [eax + 0x4c]
test edx, edx
jne 0x4b48e4
mov edx, dword [eax + 0x54]
push 2
mov eax, dword [esi + 0x348]
push dword [ecx + 0x980]
push dword [eax + 0x164]
push dword [ecx + 0x984]
push edx
call fcn.006af860
add esp, 0x14
mov eax, dword [0x7797f8]
mov dword [eax + 0x988], 0
mov ecx, dword [0x77b1c4]
push 4
call fcn.004db360
test eax, eax
je 0x4b4933
mov ecx, dword [eax + 0x6c]
test ecx, ecx
je 0x4b4933
call fcn.005135b0
mov eax, dword [esi + 0x344]
cmp dword [eax + 0x31ac], 0
je 0x4b49f1
call fcn.00450800
mov ecx, dword [eax]
test ecx, ecx
je 0x4b49f1
mov dword [ebp - 0x4a4], 0
call fcn.0066e890
sub esp, 0xc
mov ecx, esp
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
lea eax, [ebp - 0x4a0]
mov ecx, dword [esi + 0x344]
push eax
lea eax, [ebp - 0x4a4]
add ecx, 0x60
push eax
call fcn.0049bf30
test eax, eax
je 0x4b49f1
mov eax, dword [0x77ae98]
mov edx, dword [ebp - 0x4a4]
mov edi, dword [ebp - 0x4a0]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b49b2
mov ecx, dword [eax + 0x54]
mov eax, dword [edx + 8]
movzx eax, byte [eax + edi*4]
push eax
movzx eax, byte [edx + 4]
push edi
push 2
push eax
movzx eax, word [edx]
push eax
mov eax, dword [esi + 0x348]
push dword [eax + 0x164]
push ecx
call fcn.006b1190
mov eax, dword [ebp - 0x4a4]
add esp, 0x1c
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x4a0]
mov dword [ecx + eax*4], 0
call fcn.00450800
mov edi, dword [eax]
test edi, edi
je 0x4b4af4
mov ecx, dword [0x77ae98]
call fcn.006ab480
cmp eax, 0x1d
je 0x4b4af4
push 0x6a
call fcn.006abed0
add esp, 4
test al, al
jne 0x4b4af4
mov ecx, edi
call fcn.0066e890
sub esp, 0xc
mov ecx, esp
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ecx], xmm0
mov dword [ecx + 8], eax
mov ecx, dword [esi + 0x344]
add ecx, 0x60
call fcn.0049b860
mov edi, eax
test edi, edi
je 0x4b4af4
mov ecx, dword [esi + 0x344]
push edi
add ecx, 0x60
call fcn.00498a60
test eax, eax
je 0x4b4aa4
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b4a7a
mov ecx, dword [eax + 0x54]
movzx eax, word [edi]
push eax
mov eax, dword [esi + 0x348]
push 0
push dword [eax + 0x164]
push ecx
call fcn.006b1200
mov ecx, dword [0x77ae98]
add esp, 0x10
push 0x1d
call fcn.006ac120
jmp 0x4b4af4
push 0x7f4
call fcn.006df8c3
add esp, 4
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x4b4acb
mov ecx, eax
call fcn.00486c20
jmp 0x4b4acd
xor eax, eax
sub esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
mov dword [esp + 4], 0x43480000
mov dword [esp], 0x43780000
push 0
push 0xaf7dc8
call fcn.004871c0
mov ecx, dword [0x77b1c0]
test ecx, ecx
je 0x4b4b03
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [esi + 0x344]
call fcn.004bc1d0
push dword [0x7426cc]
call fcn.0065d860
fstp dword [ebp - 0x4a4]
movss xmm0, dword [ebp - 0x4a4]
add esp, 4
comiss xmm0, dword [0x70196c]
jb 0x4b4c33
mov eax, dword [esi + 0x344]
cmp dword [eax + 0x4c00], 4
jne 0x4b4c1c
call fcn.00450800
mov edi, dword [eax]
test edi, edi
je 0x4b4f2a
cmp byte [edi + 0x1d9], 0
jne 0x4b4c1c
mov eax, dword [esi + 0x344]
cmp dword [eax + 0x4cec], 0
je 0x4b4c1c
mov ecx, edi
call fcn.0066e710
fsub dword [0x701970]
mov ecx, edi
fstp dword [ebp - 0x4ac]
call fcn.0066e890
mov ecx, edi
movss xmm0, dword [eax]
divss xmm0, dword [0x700e28]
movss dword [ebp - 0x4a4], xmm0
call fcn.0066e890
mov ecx, edi
movss xmm0, dword [eax + 4]
divss xmm0, dword [0x700e28]
movss dword [ebp - 0x4a0], xmm0
call fcn.0066e890
movss xmm1, dword [ebp - 0x4a4]
movss xmm0, dword [eax + 8]
lea eax, [ebp - 0x4b8]
divss xmm0, dword [0x700e28]
push eax
push ecx
movss dword [ebp - 0x4b8], xmm1
movss xmm1, dword [ebp - 0x4a0]
movss dword [ebp - 0x4b0], xmm0
movss xmm0, dword [ebp - 0x4ac]
movss dword [ebp - 0x4b4], xmm1
movss dword [esp], xmm0
call fcn.004be280
add esp, 8
mov ecx, dword [esi + 0x344]
xor eax, eax
cmp dword [ecx + 0x4cec], eax
sete al
mov dword [ecx + 0x4cec], eax
mov eax, dword [esi + 0x348]
cmp byte [eax + 0x19e], 0
je 0x4b4c87
push dword [0x7426d8]
call fcn.0065d860
fstp dword [ebp - 0x4ac]
movss xmm0, dword [ebp - 0x4ac]
add esp, 4
comiss xmm0, dword [0x70196c]
jb 0x4b4c87
push 0
push ecx
mov dword [esp], 0x461c4000
push 0xffff7700
push 0xac81c8
call fcn.005bbe80
mov ecx, eax
call fcn.005bb7f0
mov ecx, dword [esi + 0x344]
cmp dword [ecx + 0x4f10], 7
jne 0x4b4f2a
movsx eax, word [ecx + 0xe3]
movd xmm1, eax
movzx eax, word [ecx + 0x4b66]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [0x743cf0], xmm1
call fcn.00450800
mov ecx, dword [eax]
test ecx, ecx
je 0x4b4f2a
mov ecx, dword [ecx + 0x200]
push 0x41
call fcn.006780a0
test al, al
je 0x4b4f2a
mov dword [0x743cf0], 0
jmp 0x4b4f2a
mov dword [edx + 0x4ce0], 0
jmp 0x4b46e6
mov dword [edx + 0x4cdc], 0
jmp 0x4b466c
mov dword [edx + 0x4cd8], 0
jmp 0x4b4f2a
mov dword [edx + 0x4cd0], 0
jmp 0x4b4f2a
mov dword [edx + 0x4ca8], 0
jmp 0x4b4555
mov dword [edx + 0x4ca0], 0
mov eax, dword [esi + 0x344]
mov byte [eax + 0x4ca4], 0
jmp 0x4b4f2a
mov dword [ecx + 0x974], 0
mov eax, dword [0x7797f8]
mov dword [eax + 0x970], 0
jmp 0x4b4f2a
mov eax, dword [esi + 0x348]
xorps xmm0, xmm0
movq qword [ebp - 0x49c], xmm0
mov dword [ebp - 0x494], 0
mov eax, dword [eax + 0x168]
sub eax, 4
je 0x4b4df8
sub eax, 1
jne 0x4b4e45
mov eax, dword [edx + 0x4cb4]
test eax, eax
jne 0x4b4dd3
mov dword [ebp - 0x49c], 0x4469aeb8
mov dword [ebp - 0x498], 0x423328f6
mov dword [ebp - 0x494], 0x4529f785
jmp 0x4b4e45
cmp eax, 1
jne 0x4b4e45
mov dword [ebp - 0x49c], 0x453e19ec
mov dword [ebp - 0x498], 0x42ce5c29
mov dword [ebp - 0x494], 0x445b9666
jmp 0x4b4e45
mov eax, dword [edx + 0x4cb4]
test eax, eax
jne 0x4b4e22
mov dword [ebp - 0x49c], 0x44e9d8f6
mov dword [ebp - 0x498], 0x41633333
mov dword [ebp - 0x494], 0x44c830a4
jmp 0x4b4e45
cmp eax, 1
jne 0x4b4e45
mov dword [ebp - 0x49c], 0x4428a5c3
mov dword [ebp - 0x498], 0x41173333
mov dword [ebp - 0x494], 0x44b62dc3
mov ecx, dword [0x77ae98]
push 0xc
call fcn.006ac120
mov eax, dword [esi + 0x348]
mov dword [eax + 4], 2
mov eax, dword [0x77ae98]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
jne 0x4b4e6e
mov ecx, dword [eax + 0x54]
push 0
lea eax, [ebp - 0x49c]
push eax
push 1
jmp 0x4b4275
push 0x3e2
lea eax, [ebp - 0x472]
mov dword [edx + 0x4cc4], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x706080]
add esp, 0xc
movups xmm0, xmmword [str.http:__www.rylliberation.com_]
mov dword [ebp - 0x478], eax
mov ax, word [0x706084]
push 5
push 0
push 0
mov word [ebp - 0x474], ax
lea eax, [ebp - 0x490]
push eax
movups xmmword [ebp - 0x490], xmm0
push str.open
movq xmm0, qword [0x706078]
push 0
movq qword [ebp - 0x480], xmm0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
push 0
push 2
push dword [esi + 4]
jmp 0x4b3e34
push 0
push 0
push 2
mov dword [edx + 0x4cc0], 0
push dword [esi + 4]
jmp 0x4b3e34
mov dword [edx + 0x4cbc], 0
jmp 0x4b4f2a
mov dword [edx + 0x4c94], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006dfb52
mov esp, ebp
pop ebp
ret