Function at 0x4a3ec0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x544bf6
mov eax, dword fs:[0]
push eax
sub esp, 0x450
mov eax, dword [0x595c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov eax, dword [0x59e598]
mov dword [ebp - 0x3c0], esi
mov dword [ebp - 0x3c4], 0
test al, 1
jne 0x4a3f2d
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 0
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4a3f42
cmp byte [eax + 0x19], 6
jb 0x4a3f42
mov al, 1
jmp 0x4a3f44
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4a3f5e
cmp byte [0x59e5a9], 0
jne 0x4a3f5e
test al, al
je 0x4a4093
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x45c]
call fcn.0047b550
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x45c]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x88
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a46c
mov ecx, eax
call fcn.0047f130
mov edx, str.GetDefaultOASSecurityDescriptor
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 2
cmp dword [ebp - 0x30], 0x10
jb 0x4a3ff2
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4a3ff2
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x45c]
call fcn.0047b6a0
mov edi, eax
mov byte [ebp - 4], 4
cmp dword [edi + 0x14], 0x10
jb 0x4a400f
mov edi, dword [edi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4a403a
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 5
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 4
push edi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x30], 0x10
jb 0x4a405d
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4a405d
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 1
call fcn.0047b620
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4a4093
xor eax, eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
push 0x572300
lea edx, [ebp - 0x2c]
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x5c]
call fcn.004901f0
push 0x3a
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x44]
call fcn.004ae950
push 0x5722f4
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x374]
call fcn.0048e940
push 0x5722fc
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x344]
call fcn.0048e940
push 0x3a
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x314]
call fcn.004ae950
push 0x5722f4
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2e4]
call fcn.0048e940
push 0x56a408
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2b4]
call fcn.0048e940
push 0x3a
mov edx, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x284]
call fcn.004ae950
push 0x28
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x254]
call fcn.004ae950
push 0x56a408
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x224]
call fcn.0048e940
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1f4]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1c4]
call fcn.004ae950
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x194]
push str.0x001F0000
mov edx, eax
call fcn.0048e940
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x164]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x134]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x104]
call fcn.004ae950
add esp, 0x40
push 0x5722ec
mov edx, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xd4]
call fcn.0048e940
push 0x29
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa4]
call fcn.004ae950
push 0x28
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8c]
call fcn.004ae950
push 0x56a408
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x23c]
call fcn.0048e940
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x74]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x20c]
call fcn.004ae950
push str.0x001F0000
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2fc]
call fcn.0048e940
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1dc]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x38c]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1ac]
call fcn.004ae950
push 0x5722e4
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2cc]
call fcn.0048e940
push 0x29
mov edx, eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x17c]
call fcn.004ae950
push 0x28
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x35c]
call fcn.004ae950
push 0x5722e0
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x14c]
call fcn.0048e940
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x29c]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x11c]
call fcn.004ae950
add esp, 0x40
push str.0x001F0000
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3bc]
call fcn.0048e940
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xec]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x26c]
call fcn.004ae950
push 0x3b
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xbc]
call fcn.004ae950
push 0x5722d8
mov edx, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x32c]
call fcn.0048e940
push 0x29
mov edx, eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3a4]
call fcn.004ae950
mov edi, eax
add esp, 0x18
lea eax, [ebp - 0x2c]
cmp eax, edi
je 0x4a43e3
cmp dword [ebp - 0x18], 8
jb 0x4a43c6
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4a43c6
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], 7
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.0047c3b0
cmp dword [ebp - 0x390], 8
jb 0x4a43ff
mov eax, dword [ebp - 0x3a4]
test eax, eax
je 0x4a43ff
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x390], 7
cmp dword [ebp - 0x318], 8
mov dword [ebp - 0x394], 0
mov word [ebp - 0x3a4], ax
jb 0x4a4438
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x4a4438
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x318], 7
cmp dword [ebp - 0xa8], 8
mov dword [ebp - 0x31c], 0
mov word [ebp - 0x32c], ax
jb 0x4a4471
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x4a4471
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0xa8], 7
cmp dword [ebp - 0x258], 8
mov dword [ebp - 0xac], 0
mov word [ebp - 0xbc], ax
jb 0x4a44aa
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x4a44aa
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x258], 7
cmp dword [ebp - 0xd8], 8
mov dword [ebp - 0x25c], 0
mov word [ebp - 0x26c], ax
jb 0x4a44e3
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x4a44e3
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0xd8], 7
cmp dword [ebp - 0x3a8], 8
mov dword [ebp - 0xdc], 0
mov word [ebp - 0xec], ax
jb 0x4a451c
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x4a451c
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x3a8], 7
cmp dword [ebp - 0x108], 8
mov dword [ebp - 0x3ac], 0
mov word [ebp - 0x3bc], ax
jb 0x4a4555
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x4a4555
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x108], 7
cmp dword [ebp - 0x288], 8
mov dword [ebp - 0x10c], 0
mov word [ebp - 0x11c], ax
jb 0x4a458e
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x4a458e
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x288], 7
cmp dword [ebp - 0x138], 8
mov dword [ebp - 0x28c], 0
mov word [ebp - 0x29c], ax
jb 0x4a45c7
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x4a45c7
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x138], 7
cmp dword [ebp - 0x348], 8
mov dword [ebp - 0x13c], 0
mov word [ebp - 0x14c], ax
jb 0x4a4600
mov eax, dword [ebp - 0x35c]
test eax, eax
je 0x4a4600
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x348], 7
cmp dword [ebp - 0x168], 8
mov dword [ebp - 0x34c], 0
mov word [ebp - 0x35c], ax
jb 0x4a4639
mov eax, dword [ebp - 0x17c]
test eax, eax
je 0x4a4639
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x168], 7
cmp dword [ebp - 0x2b8], 8
mov dword [ebp - 0x16c], 0
mov word [ebp - 0x17c], ax
jb 0x4a4672
mov eax, dword [ebp - 0x2cc]
test eax, eax
je 0x4a4672
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x2b8], 7
cmp dword [ebp - 0x198], 8
mov dword [ebp - 0x2bc], 0
mov word [ebp - 0x2cc], ax
jb 0x4a46ab
mov eax, dword [ebp - 0x1ac]
test eax, eax
je 0x4a46ab
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x198], 7
cmp dword [ebp - 0x378], 8
mov dword [ebp - 0x19c], 0
mov word [ebp - 0x1ac], ax
jb 0x4a46e4
mov eax, dword [ebp - 0x38c]
test eax, eax
je 0x4a46e4
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x378], 7
cmp dword [ebp - 0x1c8], 8
mov dword [ebp - 0x37c], 0
mov word [ebp - 0x38c], ax
jb 0x4a471d
mov eax, dword [ebp - 0x1dc]
test eax, eax
je 0x4a471d
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x1c8], 7
cmp dword [ebp - 0x2e8], 8
mov dword [ebp - 0x1cc], 0
mov word [ebp - 0x1dc], ax
jb 0x4a4756
mov eax, dword [ebp - 0x2fc]
test eax, eax
je 0x4a4756
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x2e8], 7
cmp dword [ebp - 0x1f8], 8
mov dword [ebp - 0x2ec], 0
mov word [ebp - 0x2fc], ax
jb 0x4a478f
mov eax, dword [ebp - 0x20c]
test eax, eax
je 0x4a478f
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x1f8], 7
cmp dword [ebp - 0x60], 8
mov dword [ebp - 0x1fc], 0
mov word [ebp - 0x20c], ax
jb 0x4a47c2
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4a47c2
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x60], 7
cmp dword [ebp - 0x228], 8
mov dword [ebp - 0x64], 0
mov word [ebp - 0x74], ax
jb 0x4a47f2
mov eax, dword [ebp - 0x23c]
test eax, eax
je 0x4a47f2
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x228], 7
cmp dword [ebp - 0x78], 8
mov dword [ebp - 0x22c], 0
mov word [ebp - 0x23c], ax
jb 0x4a4828
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x4a4828
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x78], 7
cmp dword [ebp - 0x90], 8
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
jb 0x4a485b
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x4a485b
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x90], 7
cmp dword [ebp - 0xc0], 8
mov dword [ebp - 0x94], 0
mov word [ebp - 0xa4], ax
jb 0x4a4894
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4a4894
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0xc0], 7
cmp dword [ebp - 0xf0], 8
mov dword [ebp - 0xc4], 0
mov word [ebp - 0xd4], ax
jb 0x4a48cd
mov eax, dword [ebp - 0x104]
test eax, eax
je 0x4a48cd
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0xf0], 7
cmp dword [ebp - 0x120], 8
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
jb 0x4a4906
mov eax, dword [ebp - 0x134]
test eax, eax
je 0x4a4906
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x120], 7
cmp dword [ebp - 0x150], 8
mov dword [ebp - 0x124], 0
mov word [ebp - 0x134], ax
jb 0x4a493f
mov eax, dword [ebp - 0x164]
test eax, eax
je 0x4a493f
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x150], 7
cmp dword [ebp - 0x180], 8
mov dword [ebp - 0x154], 0
mov word [ebp - 0x164], ax
jb 0x4a4978
mov eax, dword [ebp - 0x194]
test eax, eax
je 0x4a4978
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x180], 7
cmp dword [ebp - 0x1b0], 8
mov dword [ebp - 0x184], 0
mov word [ebp - 0x194], ax
jb 0x4a49b1
mov eax, dword [ebp - 0x1c4]
test eax, eax
je 0x4a49b1
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x1b0], 7
cmp dword [ebp - 0x1e0], 8
mov dword [ebp - 0x1b4], 0
mov word [ebp - 0x1c4], ax
jb 0x4a49ea
mov eax, dword [ebp - 0x1f4]
test eax, eax
je 0x4a49ea
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x1e0], 7
cmp dword [ebp - 0x210], 8
mov dword [ebp - 0x1e4], 0
mov word [ebp - 0x1f4], ax
jb 0x4a4a23
mov eax, dword [ebp - 0x224]
test eax, eax
je 0x4a4a23
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x210], 7
cmp dword [ebp - 0x240], 8
mov dword [ebp - 0x214], 0
mov word [ebp - 0x224], ax
jb 0x4a4a5c
mov eax, dword [ebp - 0x254]
test eax, eax
je 0x4a4a5c
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x240], 7
cmp dword [ebp - 0x270], 8
mov dword [ebp - 0x244], 0
mov word [ebp - 0x254], ax
jb 0x4a4a95
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x4a4a95
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x270], 7
cmp dword [ebp - 0x2a0], 8
mov dword [ebp - 0x274], 0
mov word [ebp - 0x284], ax
jb 0x4a4ace
mov eax, dword [ebp - 0x2b4]
test eax, eax
je 0x4a4ace
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x2a0], 7
cmp dword [ebp - 0x2d0], 8
mov dword [ebp - 0x2a4], 0
mov word [ebp - 0x2b4], ax
jb 0x4a4b07
mov eax, dword [ebp - 0x2e4]
test eax, eax
je 0x4a4b07
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x2d0], 7
cmp dword [ebp - 0x300], 8
mov dword [ebp - 0x2d4], 0
mov word [ebp - 0x2e4], ax
jb 0x4a4b40
mov eax, dword [ebp - 0x314]
test eax, eax
je 0x4a4b40
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x300], 7
cmp dword [ebp - 0x330], 8
mov dword [ebp - 0x304], 0
mov word [ebp - 0x314], ax
jb 0x4a4b79
mov eax, dword [ebp - 0x344]
test eax, eax
je 0x4a4b79
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x330], 7
cmp dword [ebp - 0x360], 8
mov dword [ebp - 0x334], 0
mov word [ebp - 0x344], ax
jb 0x4a4bb2
mov eax, dword [ebp - 0x374]
test eax, eax
je 0x4a4bb2
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov dword [ebp - 0x360], 7
cmp dword [ebp - 0x30], 8
mov dword [ebp - 0x364], 0
mov word [ebp - 0x374], ax
jb 0x4a4be5
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4a4be5
push eax
call fcn.005074d4
add esp, 4
xor eax, eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], 0
mov word [ebp - 0x44], ax
jb 0x4a4c13
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4a4c13
push eax
call fcn.005074d4
add esp, 4
mov eax, dword [0x59e598]
test al, 1
jne 0x4a4c3e
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x2d
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 7
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4a4c53
cmp byte [eax + 0x19], 6
jb 0x4a4c53
mov al, 1
jmp 0x4a4c55
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4a4c6f
cmp byte [0x59e5a9], 0
jne 0x4a4c6f
test al, al
je 0x4a4d78
sub esp, 8
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x45c]
call fcn.0047b550
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2f
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x45c]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x9b
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a498
mov ecx, eax
call fcn.0047f130
mov edx, str.GetDefaultOASSecurityDescriptor
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 0x2f
cmp dword [ebp - 0x48], 0x10
jb 0x4a4d00
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4a4d00
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x45c]
call fcn.0047b6a0
mov edi, eax
mov byte [ebp - 4], 0x31
cmp dword [edi + 0x14], 0x10
jb 0x4a4d1d
mov edi, dword [edi]
call fcn.004a0950
push edi
push 6
mov ecx, eax
call fcn.004a0b40
cmp dword [ebp - 0x48], 0x10
jb 0x4a4d42
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x4a4d42
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x2e
call fcn.0047b620
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x40c], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4a4d78
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.0047b060
cmp dword [ebp - 0x18], 8
jb 0x4a4d99
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x4a4d99
push ecx
call fcn.005074d4
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00506c7d
mov esp, ebp
pop ebp
ret