Function at 0x485922
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x270
push ebx
push esi
push edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x220]
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.004e483d
add esp, 0xc
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x106], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x106], 0
jl 0x4859e6
mov dword [ebp - 0x164], 1
jmp 0x4859f0
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
je 0x485a04
mov dword [ebp - 0x50], 1
cmp dword [ebp - 0x164], 0
je 0x485bff
push 0x531848
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, eax
push 0x531844
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add ebx, eax
add ebx, 2
mov dword [ebp - 8], ebx
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0x160]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x106]
push eax
call dword [sym.imp.KERNEL32.dll__lread]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jl 0x485a6e
mov dword [ebp - 0x164], 1
jmp 0x485a78
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
je 0x485beb
push 8
lea eax, [ebp - 0x184]
push eax
push 0
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.004852e0
add esp, 0x14
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x485ae9
push 0x53184c
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x485adf
mov dword [ebp - 0x164], 1
jmp 0x485ae9
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
je 0x485beb
push 8
lea eax, [ebp - 0x184]
push eax
push 1
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.004852e0
add esp, 0x14
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x485beb
push 0x531850
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x485b50
mov dword [0x53183c], 1
jmp 0x485b5a
mov dword [0x53183c], 0
push 0x531854
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x485b80
mov dword [ebp - 4], 1
jmp 0x485b87
mov dword [ebp - 4], 0
push 0x531858
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x485bd2
push 0x53185c
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x485bd2
cmp dword [ebp - 4], 0
jne 0x485bd2
cmp dword [0x53183c], 0
je 0x485be1
mov dword [ebp - 0x164], 1
jmp 0x485beb
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
jne 0x485bff
mov dword [ebp - 0x44], 0x47
cmp dword [ebp - 0x164], 0
je 0x485c4e
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x106]
push eax
call fcn.004e436b
add esp, 8
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x485c44
mov dword [ebp - 0x164], 1
jmp 0x485c4e
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x7d00
jle 0x485c69
mov dword [ebp - 0x54], 0x7d00
cmp dword [ebp - 0x164], 0
je 0x485ce2
cmp dword [ebp - 0x170], 0
jne 0x485ce2
mov eax, dword [ebp - 0x54]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
call fcn.004e3c00
add esp, 4
test eax, eax
je 0x485cd3
cmp dword [ebp - 0x54], 0x800
jle 0x485cc4
mov eax, dword [ebp - 0x54]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x54], eax
jmp 0x485cce
mov dword [ebp - 0x164], 0
jmp 0x485cdd
mov dword [ebp - 0x170], 1
jmp 0x485c69
dec dword [ebp - 0x54]
cmp dword [ebp - 0x164], 0
je 0x485d35
push 0x5c2
push 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
push eax
call fcn.004e3c00
add esp, 4
test eax, eax
jne 0x485d2b
mov dword [ebp - 0x164], 1
jmp 0x485d35
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
je 0x485e74
mov dword [ebp - 0x20], 0xcb2
mov eax, dword [ebp - 0x20]
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
push eax
call fcn.004e3c00
add esp, 4
test eax, eax
jne 0x485d81
mov dword [ebp - 0x164], 1
jmp 0x485d8b
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
je 0x485e74
mov eax, dword [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov eax, dword [ebp - 0x2c]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x2c]
mov dword [eax + 8], pe_nt_image_headers32
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0xc], 0xd0
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x18], 0
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x14], 1
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x3c], 0xffffffff
mov eax, dword [ebp - 0x2c]
mov dword [eax + 0x1c], 6
mov eax, dword [ebp - 0x2c]
add eax, 0x80
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0x34], 0
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0x38], 0
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x70]
mov ecx, dword [ebp - 0x17c]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x74]
mov ecx, dword [ebp - 0x17c]
mov dword [ecx + 4], eax
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov cx, word [eax + 0x78]
mov eax, dword [ebp - 0x17c]
mov dword [eax + 8], ecx
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x7a]
mov ecx, dword [ebp - 0x17c]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x164], 0
je 0x486012
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x48], eax
push 4
push 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
push eax
call fcn.004e3c00
add esp, 4
test eax, eax
jne 0x485ec7
mov dword [ebp - 0x164], 1
jmp 0x485ed1
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x64], eax
cmp dword [ebp - 0x164], 0
je 0x485f00
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
cmp dword [0x53183c], 0
je 0x485fbd
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x80], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x7c], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x68], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x6c], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x70], 0
mov dword [ebp - 0x178], 0
jmp 0x485f57
inc dword [ebp - 0x178]
cmp dword [ebp - 0x178], 6
jge 0x485f7d
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + eax*4 + 0xd4], 0
jmp 0x485f51
mov dword [ebp - 0x178], 0
jmp 0x485f92
inc dword [ebp - 0x178]
cmp dword [ebp - 0x178], 0x12
jge 0x485fbd
mov eax, dword [ebp - 0x178]
mov ecx, eax
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x48]
mov byte [eax + ecx + 0x104], 0
jmp 0x485f8c
mov dword [ebp - 0x178], 0
jmp 0x485fd2
inc dword [ebp - 0x178]
cmp dword [ebp - 0x178], 0x12
jge 0x485ff8
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + eax*4 + 0x8c], 0
jmp 0x485fcc
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x164], 0
je 0x48602c
mov eax, dword [ebp - 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x198], 0
je 0x486049
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x164], 0
je 0x4860a6
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], 2
mov eax, dword [ebp - 8]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x4c], 0
mov byte [ebp - 0x260], 0
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x1c], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x20], 0
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x24], 0
cmp dword [ebp - 0x164], 0
je 0x486b91
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c], eax
jge 0x486b91
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 8], eax
jle 0x4860da
mov eax, dword [ebp - 0x54]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x106]
push eax
call dword [sym.imp.KERNEL32.dll__lread]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0xc], 0
jle 0x486114
mov dword [ebp - 0x164], 1
jmp 0x48611e
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 4], eax
cmp dword [ebp - 0x164], 0
je 0x486b8c
mov dword [ebp - 0x188], 0
jmp 0x486156
inc dword [ebp - 0x188]
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 8], eax
jle 0x486b86
inc dword [ebp - 0x194]
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0xc]
movsx eax, byte [eax + ecx]
test eax, eax
jne 0x486b4e
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xb4
jl 0x4861ca
cmp dword [ebp - 0x40], 0xbf
jg 0x4861ca
mov eax, dword [ebp - 0x40]
sub eax, 0xb4
mov ecx, eax
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
add eax, dword [ebp - 0x48]
add eax, 0x104
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.00485699
add esp, 8
jmp case.default.0x48686b
cmp dword [ebp - 0x40], 0xa1
jl 0x486211
cmp dword [ebp - 0x40], 0xa6
jg 0x486211
mov eax, dword [ebp - 0x40]
sub eax, 0x95
mov ecx, eax
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
add eax, dword [ebp - 0x48]
add eax, 0x104
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.00485699
add esp, 8
jmp case.default.0x48686b
cmp dword [ebp - 0x40], 0x7b
jl 0x48624d
cmp dword [ebp - 0x40], 0x7d
jg 0x48624d
lea eax, [ebp - 0x260]
push eax
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*4 - 0x267]
shl eax, 3
add eax, dword [ebp - 0x48]
add eax, 0x1ca
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.default.0x48686b
cmp dword [ebp - 0x40], 0x7f
jl 0x48628c
cmp dword [ebp - 0x40], 0x8e
jg 0x48628c
lea eax, [ebp - 0x260]
push eax
mov eax, dword [ebp - 0x40]
lea eax, [eax + eax*4 - 0x27b]
shl eax, 3
add eax, dword [ebp - 0x48]
add eax, 0x242
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.default.0x48686b
lea eax, [ebp - 0x260]
push eax
call fcn.0052308f
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x268], eax
jmp 0x486846
cmp dword [ebp - 0x38], 0
jne 0x4862c5
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x18], 1
jmp 0x4862cf
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x18], 0
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov dword [0x52c3dc], eax
jmp case.default.0x48686b
cmp dword [ebp - 0x38], 0
je 0x4862f3
mov eax, dword [ebp - 0x38]
mov dword [0x52c3dc], eax
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov dword [0x52c3d4], eax
jmp case.default.0x48686b
mov dword [0x52c3d8], 6
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x26c], eax
jmp 0x486340
mov dword [0x52c3d8], 0
jmp 0x48635f
mov dword [0x52c3d8], 2
jmp 0x48635f
cmp dword [ebp - 0x26c], 0
je 0x48631d
cmp dword [ebp - 0x26c], 2
je 0x48632c
jmp 0x48635f
jmp case.default.0x48686b
cmp dword [ebp - 0x38], 0
je 0x48637d
mov dword [0x52c3e0], 2
jmp 0x486387
mov eax, dword [0x52c3d8]
mov dword [0x52c3e0], eax
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp + 0xc]
add eax, 0x82
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 2
mov eax, dword [ebp + 0xc]
add eax, 0x82
push eax
call fcn.004e43fc
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x20], 0
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 2
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 4
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 8
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 0x10
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 0x20
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 0x40
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push pe_nt_image_headers32
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 0x100
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
mov eax, 1
mov ecx, dword [ebp - 0x40]
sub ecx, 0x15
shl eax, cl
push eax
mov eax, dword [ebp - 0x48]
add eax, 0x20
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
mov eax, 1
mov ecx, dword [ebp - 0x40]
sub ecx, 0x1b
shl eax, cl
push eax
mov eax, dword [ebp - 0x48]
add eax, 0x24
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x270], eax
jmp 0x48653c
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x24], 1
jmp 0x48655b
mov dword [ebp - 0x24], 1
jmp 0x48655b
cmp dword [ebp - 0x270], 2
je 0x486518
cmp dword [ebp - 0x270], 3
je 0x48652b
jmp 0x48655b
mov eax, dword [ebp - 0x38]
push eax
mov eax, 2
mov ecx, dword [ebp - 0x40]
sub ecx, 0x41
shl eax, cl
push eax
mov eax, dword [ebp - 0x48]
add eax, 0x28
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x48]
mov dword [edx + ecx*4 - 0x100], eax
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
mov eax, pe_nt_image_headers32
mov ecx, dword [ebp - 0x40]
sub ecx, 0x35
shl eax, cl
push eax
mov eax, dword [ebp - 0x48]
add eax, 0x28
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x48]
mov dword [edx + ecx*4], eax
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x48]
add eax, 0x28
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0xc6], eax
jmp case.default.0x48686b
cmp dword [ebp - 0x38], 0
je 0x48666e
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x28]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x28], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x2c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x2c], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x30]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x30], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x34]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x34], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x38]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x38], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x3c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x3c], eax
jmp case.default.0x48686b
cmp dword [0x53183c], 0
je 0x486687
mov dword [ebp - 0x40], 0x7a
jmp case.default.0x48686b
cmp dword [0x53183c], 0
je 0x4866a0
mov dword [ebp - 0x40], 0xbf
jmp case.default.0x48686b
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x64], 0
je 0x4866c0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x60], eax
jmp 0x4866ca
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x60], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x60]
push eax
call fcn.004853cc
add esp, 4
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x60], eax
jmp case.default.0x48686b
cmp dword [ebp - 0x38], 0
je 0x4866fb
mov eax, dword [ebp + 0xc]
mov dword [eax + 0xbe], 0x24
jmp case.default.0x48686b
cmp dword [ebp - 0x38], 0
jne 0x48671c
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x84], 1
jmp 0x486729
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x84], 0
jmp case.default.0x48686b
cmp dword [ebp - 0x38], 2
je 0x48674a
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x80], 1
jmp 0x486757
mov eax, dword [ebp - 0x48]
mov dword [eax + 0x80], 0
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x7c], eax
jmp case.default.0x48686b
mov ecx, 0x64
mov eax, dword [ebp - 0x38]
cdq
idiv ecx
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x68], eax
xor eax, eax
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0x68]
shl ecx, 2
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
sub eax, ecx
neg eax
sub dword [ebp - 0x38], eax
mov ecx, 0xa
mov eax, dword [ebp - 0x38]
cdq
idiv ecx
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x6c], eax
xor eax, eax
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0x6c]
lea ecx, [ecx + ecx*4]
add ecx, ecx
sub eax, ecx
neg eax
sub dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x70], eax
push 3
mov eax, dword [ebp - 0x48]
add eax, 0x68
push eax
call fcn.004853df
add esp, 8
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x78], eax
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x74], eax
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 0x200
mov eax, dword [ebp - 0x48]
add eax, 0x1c
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov eax, dword [ebp - 0x38]
push eax
push 0x2000
mov eax, dword [ebp - 0x48]
add eax, 0x28
push eax
call fcn.004e43fc
add esp, 0xc
jmp case.default.0x48686b
mov dword [ebp - 0x164], 1
jmp case.default.0x48686b
jmp case.default.0x48686b
sub dword [ebp - 0x268], 4
cmp dword [ebp - 0x268], 0xa9
ja case.default.0x48686b
mov eax, dword [ebp - 0x268]
xor ecx, ecx
mov cl, byte [eax + 0x486912]
jmp dword [ecx*4 + 0x486872]
mov byte [ebp - 0x260], 0
mov dword [ebp - 0x3c], 0
cmp dword [ebp - 0x40], 0xc0
jl 0x486b49
cmp dword [ebp - 0x168], 0
jne 0x486a07
movsx eax, byte [ebp - 0x4c]
test eax, eax
je 0x486a07
dec dword [ebp - 0x40]
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0xc]
mov al, byte [eax + ecx]
mov byte [ebp - 0x4c], al
jmp 0x486150
cmp dword [ebp - 0x168], 0
jne 0x486a2f
inc dword [ebp - 0x168]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x4c2], eax
dec dword [ebp - 0x16c]
cmp dword [ebp - 0x168], 0
je 0x486b00
mov eax, dword [ebp - 0x168]
cdq
xor eax, edx
sub eax, edx
and eax, 0x3f
xor eax, edx
sub eax, edx
jne 0x486b00
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x168], eax
je 0x486b00
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
add eax, 0x100
push eax
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x486ab1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x34]
push eax
call fcn.004e3c00
add esp, 4
test eax, eax
jne 0x486ae4
mov dword [ebp - 0x164], 1
jmp 0x486aee
mov dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
jne 0x486b00
jmp 0x486b86
inc dword [ebp - 0x16c]
cmp dword [ebp - 0x16c], 0x27
jne 0x486b49
mov eax, dword [ebp - 0x14]
dec eax
cmp eax, dword [ebp - 0x194]
jle 0x486b49
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x48]
mov dword [edx + ecx*4 + 0x4c2], eax
mov dword [ebp - 0x16c], 0
inc dword [ebp - 0x168]
jmp 0x486b72
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0xc]
mov al, byte [eax + ecx]
mov ecx, dword [ebp - 0x3c]
mov byte [ebp + ecx - 0x260], al
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov byte [ebp + eax - 0x260], 0
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0xc]
mov al, byte [eax + ecx]
mov byte [ebp - 0x4c], al
jmp 0x486150
mov eax, dword [ebp - 8]
add dword [ebp - 0x1c], eax
jmp 0x4860a6
cmp dword [ebp - 0x164], 0
je 0x486bf2
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10a], eax
mov eax, dword [ebp + 8]
mov dword [eax + 0x10e], 0xc
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x120], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x124], eax
cmp dword [ebp - 0x58], 0
je 0x486c06
mov eax, dword [ebp - 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x164], 0
je 0x486c80
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x84], 0
je 0x486c4b
push 4
push 0x45
call fcn.0049c591
add esp, 8
cmp eax, 7
jne 0x486c44
mov dword [ebp - 0x10], 1
jmp 0x486c4b
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], 0
jne 0x486c80
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00485720
add esp, 8
test eax, eax
jne 0x486c79
mov dword [ebp - 0x10], 1
jmp 0x486c80
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x164], 0
je 0x486c97
cmp dword [ebp - 0x10], 0
je 0x486d44
cmp dword [ebp - 0x198], 0
je 0x486cef
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x10], 0
je 0x486cbe
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x198], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x120], 0
cmp dword [ebp - 0x190], 0
je 0x486d09
mov eax, dword [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp + 8]
mov dword [eax + 0x124], 0
cmp dword [ebp - 0x58], 0
je 0x486d2a
mov eax, dword [ebp - 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0x50], 0
je 0x486d44
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x106]
push eax
call dword [sym.imp.KERNEL32.dll__lclose]
cmp dword [ebp - 0x198], 0
je 0x486d5e
mov eax, dword [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
cmp dword [ebp - 0x10], 0
je 0x486d72
mov eax, 7
jmp 0x486dc0
cmp dword [ebp - 0x24], 0
je 0x486d86
push 0x4b
call fcn.0049c6f9
add esp, 4
cmp dword [ebp - 0x164], 0
jne 0x486db9
cmp dword [ebp - 0x44], 0
je 0x486daa
mov eax, dword [ebp - 0x44]
jmp 0x486dc0
mov eax, 1
jmp 0x486dc0
xor eax, eax
jmp 0x486dc0
pop edi
pop esi
pop ebx
leave
ret 8