Function at 0x492908
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x107a
push 0
push 0
dec ecx
jne 0x492910
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4955d6
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x495584
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x8184]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8184]
mov edx, 0x4955ec
call fcn.00404c78
jne 0x4929b1
lea ecx, [ebp - 0x8188]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8188]
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00495d68
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4955ec
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x818c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x818c]
mov edx, 0x4955f8
call fcn.00404c78
jne 0x492d06
xor eax, eax
push ebp
push 0x492cef
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 3
jl 0x492c95
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x492c7e
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x8190]
push eax
lea ecx, [ebp - 0x8194]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8194]
call fcn.00404b2c
push eax
lea ecx, [ebp - 0x8198]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8198]
mov ecx, 1
pop edx
call fcn.00404d8c
mov eax, dword [ebp - 0x8190]
mov edx, 0x495604
call fcn.00404c78
jne 0x492b8e
lea ecx, [ebp - 0x819c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x819c]
call fcn.0040943c
test al, al
je 0x492c74
mov eax, dword [ebp - 0x20]
call fcn.00404b2c
mov edx, eax
lea eax, [ebp - 0x20]
mov ecx, 1
call fcn.00404dcc
lea edx, [ebp - 0x81a0]
mov eax, dword [ebp - 0x20]
call fcn.0049095c
mov ecx, dword [ebp - 0x81a0]
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00404b78
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x1c]
mov ecx, 0x495604
mov edx, dword [ebp - 0x18]
call fcn.00404b78
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x492b6f
inc dword [ebp - 0xc]
lea edx, [ebp - 0x81a4]
mov eax, dword [ebp - 0x18]
call fcn.00490a0c
push dword [ebp - 0x81a4]
push 0x495610
lea edx, [ebp - 0x81a8]
mov eax, dword [ebp - 0xc]
call fcn.00408ed0
push dword [ebp - 0x81a8]
push 0x495620
lea edx, [ebp - 0x81ac]
mov eax, dword [ebp - 0x18]
call fcn.0049095c
push dword [ebp - 0x81ac]
push 0x495604
lea eax, [ebp - 0x1c]
mov edx, 6
call fcn.00404bec
mov eax, dword [ebp - 0x1c]
call fcn.0040943c
test al, al
jne 0x492b14
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.00496568
jmp 0x492c74
lea ecx, [ebp - 0x81b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81b0]
call fcn.0040942c
test al, al
je 0x492c74
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x81b4]
mov eax, dword [ebp - 0x20]
call fcn.0049095c
mov edx, dword [ebp - 0x81b4]
lea eax, [ebp - 0x1c]
call fcn.00404b34
xor eax, eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00404904
jmp 0x492c5a
inc dword [ebp - 0xc]
lea edx, [ebp - 0x81b8]
mov eax, dword [ebp - 0x18]
call fcn.00490a0c
push dword [ebp - 0x81b8]
push 0x495610
lea edx, [ebp - 0x81bc]
mov eax, dword [ebp - 0xc]
call fcn.00408ed0
push dword [ebp - 0x81bc]
push 0x495620
lea edx, [ebp - 0x81c0]
mov eax, dword [ebp - 0x18]
call fcn.0049095c
push dword [ebp - 0x81c0]
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00404bec
mov eax, dword [ebp - 0x1c]
call fcn.0040942c
test al, al
jne 0x492c04
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.0049640c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492c88
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jne 0x492a01
lea eax, [ebp - 0x30]
mov edx, 0x4955f8
call fcn.00404904
lea edx, [ebp - 0x81c4]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x81c4]
lea eax, [ebp - 0x30]
call fcn.00404904
lea eax, [ebp - 0x81c8]
mov ecx, 0x49562c
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x81c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492cf9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x81cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81cc]
mov edx, 0x495638
call fcn.00404c78
jne 0x492d82
xor eax, eax
push ebp
push 0x492d6b
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a21d5], 0
je 0x492d4e
mov eax, dword [0x4a21d8]
call fcn.0041c0ac
cmp byte [0x4a21d6], 0
je 0x492d61
mov eax, dword [0x4a21dc]
call fcn.0041c0ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492d75
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x81d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81d0]
mov edx, 0x495644
call fcn.00404c78
jne 0x492f77
xor eax, eax
push ebp
push 0x492f60
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 2
jl 0x492f06
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x492eef
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x81d4]
push eax
lea ecx, [ebp - 0x81d8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81d8]
call fcn.00404b2c
push eax
lea ecx, [ebp - 0x81dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81dc]
mov ecx, 1
pop edx
call fcn.00404d8c
mov eax, dword [ebp - 0x81d4]
mov edx, 0x495604
call fcn.00404c78
jne 0x492e85
lea ecx, [ebp - 0x81e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81e0]
call fcn.0040943c
test al, al
je 0x492ee5
lea ecx, [ebp - 0x81e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x81e4]
mov eax, dword [ebp - 4]
call fcn.004961e4
jmp 0x492ee5
lea ecx, [ebp - 0x81e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81e8]
call fcn.0040942c
test al, al
je 0x492ee5
lea ecx, [ebp - 0x81ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81ec]
xor edx, edx
call fcn.0040955c
lea ecx, [ebp - 0x81f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81f0]
call fcn.00409678
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492ef9
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jne 0x492dd2
lea eax, [ebp - 0x30]
mov edx, 0x4955f8
call fcn.00404904
lea edx, [ebp - 0x81f4]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x81f4]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x81f8]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x81f8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492f6a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x81fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81fc]
mov edx, 0x495650
call fcn.00404c78
jne 0x493072
xor eax, eax
push ebp
push 0x49305b
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
push ebp
push 0x492ff7
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.00409690
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493001
lea eax, [ebp - 0x30]
mov edx, 0x4955f8
call fcn.00404904
lea edx, [ebp - 0x8200]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8200]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8204]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8204]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493065
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8208]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8208]
mov edx, 0x49565c
call fcn.00404c78
jne 0x4931d6
xor eax, eax
push ebp
push 0x4931bf
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x49314d
inc dword [ebp - 0xc]
lea ecx, [ebp - 0x8210]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8210]
lea edx, [ebp - 0x820c]
call fcn.00490a0c
push dword [ebp - 0x820c]
lea ecx, [ebp - 0x8218]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8218]
lea edx, [ebp - 0x8214]
call fcn.0049095c
push dword [ebp - 0x8214]
push 0x495668
lea edx, [ebp - 0x821c]
mov eax, dword [ebp - 0xc]
call fcn.00408ed0
push dword [ebp - 0x821c]
push 0x495620
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00404bec
mov eax, dword [ebp - 0x18]
call fcn.0040943c
test al, al
jne 0x4930c7
mov eax, dword [ebp - 0x18]
call fcn.00409974
lea eax, [ebp - 0x30]
mov edx, 0x4955f8
call fcn.00404904
lea edx, [ebp - 0x8220]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8220]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8224]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8224]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4931c9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8228]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8228]
mov edx, 0x495674
call fcn.00404c78
jne 0x49336d
xor edx, edx
push ebp
push 0x493356
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4932b1
inc dword [ebp - 0xc]
lea ecx, [ebp - 0x8230]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8230]
lea edx, [ebp - 0x822c]
call fcn.00490a0c
push dword [ebp - 0x822c]
push 0x495680
lea edx, [ebp - 0x8234]
mov eax, dword [ebp - 0xc]
call fcn.00408ed0
push dword [ebp - 0x8234]
push 0x495620
lea ecx, [ebp - 0x823c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x823c]
lea edx, [ebp - 0x8238]
call fcn.0049095c
push dword [ebp - 0x8238]
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00404bec
mov eax, dword [ebp - 0x18]
call fcn.0040942c
test al, al
jne 0x49322b
xor edx, edx
push ebp
push 0x4932f2
push dword fs:[edx]
mov dword fs:[edx], esp
push 0xffff
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x413744]
call fcn.004181ac
call fcn.00403a98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4932fc
lea eax, [ebp - 0x30]
mov edx, 0x4955f8
call fcn.00404904
lea edx, [ebp - 0x8240]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8240]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8244]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8244]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493360
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8248]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8248]
mov edx, 0x495690
call fcn.00404c78
jne 0x493552
xor eax, eax
push ebp
push 0x49353b
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4934a3
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x824c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x824c]
call fcn.0040903c
sub eax, 1
jb 0x49340a
je 0x49342b
dec eax
je 0x49344c
dec eax
je 0x49346d
jmp 0x49348c
push 1
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404d2c
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404d2c
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x49348c
push 0
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404d2c
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404d2c
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x49348c
push 3
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404d2c
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404d2c
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x49348c
push 6
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404d2c
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404d2c
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x18]
mov eax, 0x49569c
call fcn.0046c308
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4934ba
lea eax, [ebp - 0x30]
mov edx, 0x495638
call fcn.00404904
lea edx, [ebp - 0x8250]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8250]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8254]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8254]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
mov ecx, 0x49562c
lea eax, [ebp - 0x8258]
mov edx, dword [ebp - 0x18]
call fcn.00404b78
mov edx, dword [ebp - 0x8258]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493545
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x825c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x825c]
mov edx, 0x4956bc
call fcn.00404c78
jne 0x4935b4
xor edx, edx
push ebp
push 0x49359d
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x48ea94]
call fcn.0048eb0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4935a7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8260]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8260]
mov edx, 0x4956c8
call fcn.00404c78
jne 0x493792
xor eax, eax
push ebp
push 0x49377b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x30]
mov edx, 0x4956d4
call fcn.00404904
lea edx, [ebp - 0x8264]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8264]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8268]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8268]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x826c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x826c]
lea eax, [ebp - 0x180]
call fcn.00402e90
mov eax, dword [0x49f190]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x180]
call fcn.00403310
call fcn.00402894
xor edx, edx
lea eax, [ebp - 0x180]
call fcn.00403338
call fcn.00402894
lea eax, [ebp - 0x180]
call fcn.0040319c
call fcn.00402894
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov cl, 1
call fcn.0045e84c
xor eax, eax
push ebp
push 0x493723
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
or edx, 0xffffffff
call fcn.0045ea94
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x8180]
mov ecx, 0x8000
lea eax, [ebp - 0x180]
call fcn.00402ff4
call fcn.00402894
push 0
lea edx, [ebp - 0x8180]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [ebp - 0x14]
call fcn.0045e508
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.0045eabc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493757
cmp dword [ebp - 0x14], 0
jne 0x4936b4
lea eax, [ebp - 0x180]
call fcn.00403034
call fcn.00402894
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493785
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8270]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8270]
mov edx, 0x4956e0
call fcn.00404c78
jne 0x493830
xor eax, eax
push ebp
push 0x493819
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a21d5], 0
je 0x4937da
mov eax, dword [0x4a21d8]
call fcn.0041c0ac
mov dl, 1
mov eax, dword [0x4992b8]
call fcn.00499324
mov dword [0x4a21d8], eax
cmp byte [0x4a21d6], 0
je 0x4937fe
mov eax, dword [0x4a21dc]
call fcn.0041c0ac
mov dl, 1
mov eax, dword [0x498ce4]
call fcn.00498d4c
mov dword [0x4a21dc], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493823
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8274]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8274]
mov edx, 0x4956ec
call fcn.00404c78
jne 0x493a50
xor eax, eax
push ebp
push 0x493a0c
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x413520]
call fcn.00403a68
mov esi, eax
mov dl, 1
mov eax, dword [0x413520]
call fcn.00403a68
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov dl, 1
mov eax, dword [0x42aa80]
call fcn.0042ab80
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x4939fb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
mov edx, 0x4956f8
call fcn.00404c78
jne 0x4938d1
mov edx, 0x80000000
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
mov eax, dword [ebp - 0x1c]
mov edx, 0x495714
call fcn.00404c78
jne 0x4938ed
mov edx, 0x80000001
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
mov eax, dword [ebp - 0x1c]
mov edx, 0x495730
call fcn.00404c78
jne 0x493909
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
mov eax, dword [ebp - 0x1c]
mov edx, 0x49574c
call fcn.00404c78
jne 0x493925
mov edx, 0x80000003
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
mov eax, dword [ebp - 0x1c]
mov edx, 0x495760
call fcn.00404c78
jne 0x493941
mov edx, 0x80000005
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
mov eax, dword [ebp - 0x1c]
mov edx, 0x49577c
call fcn.00404c78
jne 0x49395d
mov edx, 0x80000006
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
lea eax, [ebp - 0x20]
call fcn.0040486c
lea ecx, [ebp - 0x8278]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8278]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
call fcn.0042ad64
test al, al
je 0x4939dd
mov edx, esi
mov eax, dword [ebp - 0x2c]
call fcn.0042b088
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x4939d2
inc ebx
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x827c]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x827c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec ebx
jne 0x4939ae
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.0042abf0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x493a02
mov eax, dword [ebp - 0x2c]
call fcn.00403a98
ret
lea ecx, [ebp - 0x8280]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8280]
mov edx, 0x4957a4
call fcn.00404c78
jne 0x493aac
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00496e94
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957b0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8284]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8284]
mov edx, 0x4957bc
call fcn.00404c78
jne 0x493b35
xor eax, eax
push ebp
push 0x493b1e
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004978b8
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00496e94
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957b0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493b28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8288]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8288]
mov edx, 0x4956d4
call fcn.00404c78
jne 0x493bbe
xor eax, eax
push ebp
push 0x493ba7
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00497ee4
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00496e94
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957b0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493bb1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x828c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x828c]
mov edx, 0x4957c8
call fcn.00404c78
jne 0x493c47
xor eax, eax
push ebp
push 0x493c30
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004978b8
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00496e94
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957b0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493c3a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8290]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8290]
mov edx, 0x4957d4
call fcn.00404c78
jne 0x493cd0
xor eax, eax
push ebp
push 0x493cb9
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00498124
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00496e94
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957b0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493cc3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8294]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8294]
mov edx, 0x4957e0
call fcn.00404c78
jne 0x493d59
xor eax, eax
push ebp
push 0x493d42
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00497cb4
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00496e94
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957b0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493d4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8298]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8298]
mov edx, 0x4957ec
call fcn.00404c78
jne 0x493daf
lea eax, [ebp - 0x30]
call fcn.00490ab8
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495650
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x829c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x829c]
mov edx, 0x4957f8
call fcn.00404c78
jne 0x493e20
lea ecx, [ebp - 0x82a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82a0]
lea edx, [ebp - 0x30]
call fcn.00492728
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956bc
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82a4]
mov edx, 0x495804
call fcn.00404c78
jne 0x493e79
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00490f08
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x49565c
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82a8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82a8]
mov edx, 0x495810
call fcn.00404c78
jne 0x493ed2
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00490fe8
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495674
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82ac]
mov edx, 0x49581c
call fcn.00404c78
jne 0x493fa3
xor eax, eax
push ebp
push 0x493f5d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00491568
lea ecx, [ebp - 0x82b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82b0]
call fcn.0040903c
push eax
push 0xffffffffffffffff
push 0x1f0fff
call sub.user32.dll_LoadIconA
mov ebx, eax
lea eax, [ebp - 0x28]
push eax
push ebx
call sub.user32.dll_GetMenu
mov eax, dword [ebp - 0x28]
push eax
push ebx
call sub.user32.dll_ReleaseDC
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493f67
push 0x12c
call fcn.0040e060
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00490fe8
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495674
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82b4]
mov edx, 0x495828
call fcn.00404c78
jne 0x493ffc
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00491770
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495690
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82b8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82b8]
mov edx, 0x495834
call fcn.00404c78
jne 0x4940ae
xor eax, eax
push ebp
push 0x494072
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0x10
lea ecx, [ebp - 0x82bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82bc]
call fcn.0040903c
mov eax, dword [eax*4 + 0x4a1e98]
push eax
call fcn.004075f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49407c
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00491770
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495690
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c0]
mov edx, 0x495840
call fcn.00404c78
jne 0x49415c
xor eax, eax
push ebp
push 0x494120
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea ecx, [ebp - 0x82c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c4]
call fcn.0040903c
mov eax, dword [eax*4 + 0x4a1e98]
push eax
call fcn.004076c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49412a
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00491770
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495690
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82c8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c8]
mov edx, 0x49584c
call fcn.00404c78
jne 0x49420a
xor eax, eax
push ebp
push 0x4941ce
push dword fs:[eax]
mov dword fs:[eax], esp
push 5
lea ecx, [ebp - 0x82cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82cc]
call fcn.0040903c
mov eax, dword [eax*4 + 0x4a1e98]
push eax
call fcn.004076c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4941d8
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00491770
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495690
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82d0]
mov edx, 0x495858
call fcn.00404c78
jne 0x4942b8
xor eax, eax
push ebp
push 0x49427c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea ecx, [ebp - 0x82d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82d4]
call fcn.0040903c
mov eax, dword [eax*4 + 0x4a1e98]
push eax
call fcn.004072f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494286
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00491770
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495690
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82d8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82d8]
mov edx, 0x495864
call fcn.00404c78
jne 0x494366
xor eax, eax
push ebp
push 0x49432a
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffffffffffffffff
lea ecx, [ebp - 0x82dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82dc]
call fcn.0040903c
mov eax, dword [eax*4 + 0x4a1e98]
push eax
call fcn.004072f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494334
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00491770
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495690
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82e0]
mov edx, 0x495870
call fcn.00404c78
jne 0x4943f9
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.004915e4
cmp dword [ebp - 0x30], 0
jne 0x4943d2
lea eax, [ebp - 0x30]
mov edx, 0x49587c
call fcn.00404904
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495638
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956c8
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82e4]
mov edx, 0x49588c
call fcn.00404c78
jne 0x4944d4
xor eax, eax
push ebp
push 0x49445e
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x82e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x82e8]
xor eax, eax
call fcn.00473b94
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494468
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.004915e4
cmp dword [ebp - 0x30], 0
jne 0x4944ad
lea eax, [ebp - 0x30]
mov edx, 0x49587c
call fcn.00404904
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495638
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956c8
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82ec]
mov edx, 0x495898
call fcn.00404c78
jne 0x4945af
xor eax, eax
push ebp
push 0x494539
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x82f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x82f0]
xor eax, eax
call fcn.00473c80
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494543
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.004915e4
cmp dword [ebp - 0x30], 0
jne 0x494588
lea eax, [ebp - 0x30]
mov edx, 0x49587c
call fcn.00404904
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495638
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956c8
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x82f4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82f4]
mov edx, 0x4958a4
call fcn.00404c78
jne 0x49475c
xor eax, eax
push ebp
push 0x4946e6
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42aa80]
call fcn.0042ab80
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x4946d5
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
lea ecx, [ebp - 0x82fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x82fc]
lea eax, [ebp - 0x82f8]
mov edx, 0x4958b0
call fcn.00404b78
mov edx, dword [ebp - 0x82f8]
mov cl, 1
mov eax, dword [ebp - 0x2c]
call fcn.0042ad64
test al, al
je 0x4946b7
lea ecx, [ebp - 0x8300]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8300]
call fcn.0040903c
sub eax, 1
jb 0x49467d
je 0x494691
dec eax
je 0x4946a5
jmp 0x4946b7
mov ecx, 2
mov edx, 0x4958dc
mov eax, dword [ebp - 0x2c]
call fcn.0042b360
jmp 0x4946b7
mov ecx, 3
mov edx, 0x4958dc
mov eax, dword [ebp - 0x2c]
call fcn.0042b360
jmp 0x4946b7
mov ecx, 4
mov edx, 0x4958dc
mov eax, dword [ebp - 0x2c]
call fcn.0042b360
mov eax, dword [ebp - 0x2c]
call fcn.0042abf0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4946dc
mov eax, dword [ebp - 0x2c]
call fcn.00403a98
ret
lea ecx, [ebp - 0x8304]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8304]
mov edx, 0x4958ec
call fcn.00404c78
jne 0x494835
xor eax, eax
push ebp
push 0x4947bf
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8308]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8308]
call fcn.00473ec8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4947c9
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.004915e4
cmp dword [ebp - 0x30], 0
jne 0x49480e
lea eax, [ebp - 0x30]
mov edx, 0x49587c
call fcn.00404904
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x495638
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956c8
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x830c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x830c]
mov edx, 0x4958f8
call fcn.00404c78
jne 0x49488b
lea eax, [ebp - 0x30]
call fcn.0048d754
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956e0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8310]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8310]
mov edx, 0x495904
call fcn.00404c78
jne 0x49494c
lea ecx, [ebp - 0x8314]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8314]
call fcn.0048dc74
push 0x1f4
call fcn.0040e060
lea ecx, [ebp - 0x8318]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8318]
push eax
lea ecx, [ebp - 0x831c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x831c]
pop edx
call fcn.0048da0c
lea eax, [ebp - 0x30]
call fcn.0048d754
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956e0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8320]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8320]
mov edx, 0x495910
call fcn.00404c78
jne 0x4949c9
lea ecx, [ebp - 0x8324]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8324]
call fcn.0048dc74
push 0x64
call fcn.0040e060
lea eax, [ebp - 0x30]
call fcn.0048d754
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4956e0
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8328]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8328]
mov edx, 0x49591c
call fcn.00404c78
jne 0x494a0b
call fcn.00490cb0
push 0
push 6
call fcn.00407320
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x832c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x832c]
mov edx, 0x495928
call fcn.00404c78
jne 0x494aae
xor eax, eax
push ebp
push 0x494a70
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8330]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8330]
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00498438
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494a87
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957a4
mov eax, dword [ebp - 4]
call fcn.00490dc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8334]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8334]
mov edx, 0x495958
call fcn.00404c78
jne 0x494af0
call fcn.00490cb0
push 0
push 0xc
call fcn.00407320
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8338]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8338]
mov edx, 0x495964
call fcn.00404c78
jne 0x494c53
xor edx, edx
push ebp
push 0x494bb8
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x833c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x833c]
push eax
lea ecx, [ebp - 0x8340]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8340]
call fcn.0040903c
push eax
lea ecx, [ebp - 0x8344]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8344]
call fcn.0040903c
push eax
lea ecx, [ebp - 0x8348]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8348]
mov dl, 1
mov eax, dword [0x48e4b8]
call fcn.0048e538
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494bc2
lea eax, [ebp - 0x30]
mov edx, 0x495638
call fcn.00404904
lea edx, [ebp - 0x834c]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x834c]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8350]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8350]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, 0x495970
call fcn.0046c308
mov ecx, 0x49562c
lea eax, [ebp - 0x8354]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8354]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x8358]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8358]
mov edx, 0x495980
call fcn.00404c78
jne 0x494d48
xor eax, eax
push ebp
push 0x494cba
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a21d4], 0
je 0x494c9f
mov eax, dword [0x4a21e0]
call fcn.0041c0ac
mov dl, 1
mov eax, dword [0x498864]
call fcn.00498980
mov dword [0x4a21e0], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494cc4
lea eax, [ebp - 0x30]
mov edx, 0x495638
call fcn.00404904
lea edx, [ebp - 0x835c]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x835c]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8360]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8360]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, 0x49598c
call fcn.0046c308
mov ecx, 0x49562c
lea eax, [ebp - 0x8364]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8364]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x8368]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8368]
mov edx, 0x49599c
call fcn.00404c78
jne 0x494f8c
xor eax, eax
push ebp
push 0x494ed3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, dword [eax]
call dword [edx + 0x58]
lea eax, [ebp - 0x836c]
push eax
lea ecx, [ebp - 0x8370]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8370]
mov ecx, 1
mov edx, 1
call fcn.00404d8c
mov eax, dword [ebp - 0x836c]
call fcn.0040903c
mov dword [0x4a2218], eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x8374]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8374]
mov ecx, 1
mov edx, 2
call fcn.00404d8c
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30c]
mov eax, dword [ebp - 4]
call fcn.00490d28
test al, al
je 0x494ebc
xor eax, eax
push ebp
push 0x494e7f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x30]
mov edx, 0x4957b0
call fcn.00404904
lea edx, [ebp - 0x8378]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8378]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x837c]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x837c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494eb1
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
call fcn.00492328
lea eax, [ebp - 0x18]
mov edx, 0x4959a8
call fcn.00404904
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494f0a
lea eax, [ebp - 0x30]
mov edx, 0x495638
call fcn.00404904
lea edx, [ebp - 0x8380]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8380]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8384]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8384]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x18]
call fcn.0046c308
mov ecx, 0x49562c
lea eax, [ebp - 0x8388]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8388]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x838c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x838c]
mov edx, 0x4959c8
call fcn.00404c78
jne 0x495095
lea eax, [ebp - 0x18]
mov edx, 0x4959d4
call fcn.00404904
xor eax, eax
push ebp
push 0x494ffc
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [0x4a2218], 0xffffffff
mov eax, dword [ebp - 4]
call fcn.0049269c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, dword [eax]
call dword [edx + 0x58]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495013
lea eax, [ebp - 0x30]
mov edx, 0x495638
call fcn.00404904
lea edx, [ebp - 0x8390]
mov eax, dword [ebp - 0x30]
call fcn.0046c308
mov edx, dword [ebp - 0x8390]
lea eax, [ebp - 0x30]
call fcn.00404904
mov ecx, 0x49562c
lea eax, [ebp - 0x8394]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8394]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x18]
call fcn.0046c308
mov ecx, 0x49562c
lea eax, [ebp - 0x8398]
mov edx, dword [ebp - 0x30]
call fcn.00404b78
mov edx, dword [ebp - 0x8398]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x839c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x839c]
mov edx, 0x4959f4
call fcn.00404c78
jne 0x495118
xor eax, eax
push ebp
push 0x4950e1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00475314
lea edx, [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4950eb
cmp dword [ebp - 0x30], 0
jne 0x4950fe
lea eax, [ebp - 0x30]
mov edx, 0x495a00
call fcn.00404904
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4957bc
mov eax, dword [ebp - 4]
call fcn.00490dc4
lea ecx, [ebp - 0x83a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83a0]
mov edx, 0x495a0c
call fcn.00404c78
jne 0x49518c
xor eax, eax
push ebp
push 0x495182
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00496dd8
lea ecx, [ebp - 0x83a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x83a4]
mov eax, dword [ebp - 4]
call fcn.00491cc0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49518c
lea ecx, [ebp - 0x83a8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83a8]
mov edx, 0x495a18
call fcn.00404c78
jne 0x4952cb
xor eax, eax
push ebp
push 0x4951e3
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, dword [0x4a1e94]
call fcn.0040955c
mov eax, dword [ebp - 4]
call fcn.00496dd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4951ed
mov eax, dword [0x4a1e78]
call fcn.00473ec8
mov eax, dword [0x4a1e70]
mov edx, 0x495a24
call fcn.00404c78
jne 0x49520f
mov byte [0x4a1e8c], 0
mov eax, dword [0x4a1e70]
mov edx, 0x495a30
call fcn.00404c78
jne 0x495227
mov byte [0x4a1e8c], 1
mov eax, dword [0x4a1e70]
mov edx, 0x495a3c
call fcn.00404c78
jne 0x49523f
mov byte [0x4a1e8c], 3
mov eax, dword [0x4a1e70]
mov edx, 0x495a48
call fcn.00404c78
jne 0x495257
mov byte [0x4a1e8c], 2
mov eax, dword [0x4a1e70]
mov edx, 0x495a54
call fcn.00404c78
jne 0x49526f
mov byte [0x4a1e8c], 4
lea edx, [ebp - 0x83ac]
mov al, byte [0x4a1e8c]
call fcn.0048fff4
mov edx, dword [ebp - 0x83ac]
mov eax, 0x4a1e94
mov ecx, dword [0x4a1e74]
call fcn.00404b78
mov eax, dword [0x4a1e94]
call fcn.00404d2c
mov edx, eax
lea eax, [ebp - 0x83b0]
call fcn.00404a64
mov eax, dword [ebp - 0x83b0]
call fcn.00409678
xor eax, eax
call fcn.004047d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x83b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83b4]
mov edx, 0x495a60
call fcn.00404c78
jne 0x495347
xor eax, eax
push ebp
push 0x49533d
push dword fs:[eax]
mov dword fs:[eax], esp
push 3
push 0
push 0
lea ecx, [ebp - 0x83b8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83b8]
call fcn.00404d2c
push eax
push 0x495a64
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495347
lea ecx, [ebp - 0x83bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83bc]
mov edx, 0x495a74
call fcn.00404c78
jne 0x4953b7
xor edx, edx
push ebp
push 0x4953ad
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x83c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x83c0]
mov dl, 1
mov eax, dword [0x48e73c]
call fcn.0048e7cc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4953b7
lea ecx, [ebp - 0x83c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83c4]
mov edx, 0x495a80
call fcn.00404c78
jne 0x495492
xor eax, eax
push ebp
push 0x49547b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42aa80]
call fcn.0042ab80
mov dword [ebp - 0x2c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042ac20
mov edx, 0x495a8c
mov eax, dword [ebp - 0x2c]
call fcn.0042b5a0
test al, al
jne 0x49542a
mov edx, 0x495a8c
mov eax, dword [ebp - 0x2c]
call fcn.0042ac88
mov cl, 1
mov edx, 0x495a8c
mov eax, dword [ebp - 0x2c]
call fcn.0042ad64
lea ecx, [ebp - 0x83c8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x83c8]
mov edx, 0x495ac4
mov eax, dword [ebp - 0x2c]
call fcn.0042b290
mov eax, dword [ebp - 0x2c]
call fcn.0042abf0
mov eax, dword [ebp - 0x2c]
call fcn.00403a98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495485
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x83cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83cc]
mov edx, 0x495ad4
call fcn.00404c78
jne 0x495514
xor eax, eax
push ebp
push 0x4954f6
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x83d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83d0]
call fcn.0040903c
mov dword [0x4a21e4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49550a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
lea ecx, [ebp - 0x83d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83d4]
mov edx, 0x495ae0
call fcn.00404c78
jne 0x49557a
xor eax, eax
push ebp
push 0x495566
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a21d4], 0
je 0x49555c
mov eax, dword [0x4a21e0]
call fcn.0041c0ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495570
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49558e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4955dd
lea eax, [ebp - 0x83d4]
mov edx, 0x64
call fcn.00404890
lea eax, [ebp - 0x8244]
mov edx, 0x31
call fcn.00404890
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00404890
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404890
ret