Function at 0x49fbcc
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x24
push 0
push 0
dec ecx
jne 0x49fbd4
push ebx
push esi
push edi
mov eax, 0x49f6ac
call fcn.00406b58
xor eax, eax
push ebp
push 0x4a1056
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a4300]
mov edx, dword [0x4a446c]
mov esi, eax
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor eax, eax
push ebp
push 0x49fc3c
push dword fs:[eax]
mov dword fs:[eax], esp
push 1
call fcn.00420280
push eax
call fcn.00420220
test eax, eax
jne 0x49fc32
push 0x4a1068
call fcn.004208cc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49fc46
call fcn.00457bf0
mov eax, dword [0x4a45c8]
mov edx, 0x4a1094
call fcn.00404764
call fcn.00402b68
push 1
call fcn.00420280
push eax
call fcn.00420220
call fcn.0043d49c
lea eax, [ebp - 0x18]
mov edx, dword [0x4a4664]
mov edx, dword [edx]
call fcn.00404918
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, 0x4a10c4
call fcn.00404a2c
mov eax, dword [ebp - 0x14]
mov edx, 7
call fcn.00426aec
xor edx, edx
push ebp
push 0x4a1031
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4a1003
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x4a4540]
mov edx, 0x4a10d8
call fcn.00404764
mov eax, dword [0x4a4300]
mov edx, dword [0x4a446c]
mov esi, eax
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x24]
call fcn.0044a704
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.0040daf4
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00408b60
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x4a4350]
call fcn.00404764
mov ecx, dword [0x4a4350]
mov ecx, dword [ecx]
lea eax, [ebp - 0x28]
mov edx, 0x4a10e8
call fcn.00404a2c
mov eax, dword [ebp - 0x28]
mov edx, 7
call fcn.00426aec
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.00402b08
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.00409808
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
call fcn.0045b400
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x34]
call fcn.004099e0
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.0040daf4
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.00408b60
mov edx, dword [ebp - 0x2c]
mov eax, 0x4a8c08
call fcn.00404764
mov eax, dword [0x4a4350]
mov eax, dword [eax]
mov edx, dword [0x4a8c08]
call fcn.00404b2c
jne 0x49fda4
mov edx, dword [0x4a4350]
mov edx, dword [edx]
mov eax, dword [0x4a43a0]
mov ecx, 0x4a10f8
call fcn.00404a2c
jmp 0x49fdcb
lea edx, [ebp - 0x48]
mov eax, dword [0x4a4848]
mov eax, dword [eax]
call fcn.00409808
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.0045b400
mov edx, dword [ebp - 0x44]
mov eax, dword [0x4a43a0]
call fcn.00404764
mov edx, dword [0x4a43a0]
mov edx, dword [edx]
mov eax, dword [0x4a42fc]
mov ecx, 0x4a1108
call fcn.00404a2c
mov ecx, dword [0x4a43a0]
mov ecx, dword [ecx]
lea eax, [ebp - 0x4c]
mov edx, 0x4a1118
call fcn.00404a2c
mov eax, dword [ebp - 0x4c]
mov edx, 7
call fcn.00426aec
mov eax, 0x4a8c00
call fcn.00404710
lea edx, [ebp - 0x50]
mov eax, 0x4a1130
call fcn.00446cec
mov eax, dword [ebp - 0x50]
mov edx, 0x4a1144
call fcn.00404b2c
mov eax, dword [0x4a4418]
sete byte [eax]
mov eax, dword [0x4a4418]
cmp byte [eax], 0
je 0x49fe4b
mov edx, 7
mov eax, 0x4a1150
call fcn.00426aec
jmp 0x49fe5a
mov edx, 7
mov eax, 0x4a1174
call fcn.00426aec
call fcn.00402aa8
test eax, eax
jle 0x4a0e27
lea edx, [ebp - 0x58]
mov eax, 1
call fcn.00402b08
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
call fcn.00408b24
mov edx, dword [ebp - 0x54]
mov eax, 0x4a8c00
call fcn.00404764
push 0x4a8c04
mov ecx, 2
mov edx, 1
mov eax, dword [0x4a8c00]
call fcn.00404c40
lea edx, [ebp - 0x5c]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov eax, dword [ebp - 0x5c]
mov edx, 0x4a1194
call fcn.00404b2c
jne 0x49fef6
mov edx, 7
mov eax, 0x4a11ac
call fcn.00426aec
call fcn.00458d6c
mov edx, 7
mov eax, 0x4a11c8
call fcn.00426aec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
lea edx, [ebp - 0x60]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov eax, dword [ebp - 0x60]
mov edx, 0x4a11e4
call fcn.00404b2c
jne 0x4a03f1
xor edx, edx
mov eax, 0x4a11f0
call fcn.00446c38
call fcn.00434d58
mov dword [0x4a8c24], 1
xor eax, eax
push ebp
push 0x49ffdb
push dword fs:[eax]
mov dword fs:[eax], esp
mov cl, 1
mov dl, 1
mov eax, dword [0x4467a8]
call fcn.00446ecc
mov dword [0x4a8c20], eax
push 0
mov ecx, dword [0x4a8c24]
mov edx, 0x4a1200
mov eax, dword [0x4a8c20]
call fcn.00448560
push 0
mov ecx, 0x4a8c14
mov edx, 0x4a1200
mov eax, dword [0x4a8c20]
call fcn.004479e8
mov eax, dword [0x4a8c14]
cmp eax, dword [0x4a8c24]
jne 0x49ff96
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a0008
mov eax, dword [0x4a8c20]
call fcn.00403870
xor eax, eax
mov dword [0x4a8c20], eax
lea edx, [ebp - 0x68]
mov eax, dword [0x4a8c24]
call fcn.00408e74
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x64]
mov edx, 0x4a1214
call fcn.00404a2c
mov eax, dword [ebp - 0x64]
mov edx, 7
call fcn.00426b0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49ffe5
push 0x64
call sub.kernel32.dll_Sleep_1
call fcn.0045b7c8
test al, al
jne 0x49ffec
inc dword [0x4a8c24]
cmp dword [0x4a8c24], 0x65
jne 0x49ff31
mov eax, dword [0x4a4418]
cmp byte [eax], 0
je 0x4a03f1
cmp dword [0x4a8c20], 0
je 0x4a03cf
mov edx, 7
mov eax, 0x4a1234
call fcn.00426aec
xor eax, eax
push ebp
push 0x4a03c3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a4730]
cmp byte [eax], 4
ja 0x4a0090
mov edx, 7
mov eax, 0x4a125c
call fcn.00426aec
lea eax, [ebp - 0x6c]
call fcn.0045d494
mov edx, dword [ebp - 0x6c]
mov eax, 0x4a8c08
call fcn.00404764
lea eax, [ebp - 0x70]
mov ecx, dword [0x4a8c08]
mov edx, 0x4a1288
call fcn.00404a2c
mov eax, dword [ebp - 0x70]
mov edx, 7
call fcn.00426aec
jmp 0x4a00a5
lea eax, [ebp - 0x74]
call fcn.0045d3dc
mov edx, dword [ebp - 0x74]
mov eax, 0x4a8c08
call fcn.00404764
cmp dword [0x4a8c08], 0
je 0x4a03b9
lea edx, [ebp - 0x78]
mov eax, 0x4a12bc
call fcn.00437618
mov edx, dword [ebp - 0x78]
mov eax, 0x4a8c30
call fcn.00404764
push 0x4a12d8
push dword [0x4a8c08]
push dword [0x4a8c30]
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.00404aa0
mov eax, dword [ebp - 0x7c]
mov edx, 7
call fcn.00426aec
lea eax, [ebp - 0x80]
mov ecx, dword [0x4a8c30]
mov edx, dword [0x4a8c08]
call fcn.00404a2c
mov eax, dword [ebp - 0x80]
call fcn.004094c4
push 0x4a12f4
push dword [0x4a8c08]
push dword [0x4a8c30]
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404aa0
mov eax, dword [ebp - 0x84]
mov edx, 7
call fcn.00426aec
push 0
mov eax, 0x4a8c28
call fcn.00404710
mov ecx, eax
mov edx, 0x4a1310
mov eax, dword [0x4a8c20]
call fcn.00447718
lea eax, [ebp - 0x88]
mov ecx, dword [0x4a8c28]
mov edx, 0x4a1334
call fcn.00404a2c
mov eax, dword [ebp - 0x88]
mov edx, 7
call fcn.00426aec
cmp dword [0x4a8c28], 0
je 0x4a01be
push 0x4a134c
lea eax, [ebp - 0x8c]
mov ecx, dword [0x4a8c30]
mov edx, dword [0x4a8c08]
call fcn.00404a2c
mov ecx, dword [ebp - 0x8c]
xor edx, edx
mov eax, dword [0x4a8c28]
call fcn.0045cfe4
push 0x4a1368
lea edx, [ebp - 0x90]
xor eax, eax
call fcn.00402b08
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x94]
mov ecx, dword [0x4a8c30]
mov edx, dword [0x4a8c08]
call fcn.00404a2c
mov ecx, dword [ebp - 0x94]
mov edx, 0x4a1388
pop eax
call fcn.0045cfe4
push 0
mov eax, 0x4a8c28
call fcn.00404710
mov ecx, eax
mov edx, 0x4a1398
mov eax, dword [0x4a8c20]
call fcn.00447718
lea eax, [ebp - 0x98]
mov ecx, dword [0x4a8c28]
mov edx, 0x4a13bc
call fcn.00404a2c
mov eax, dword [ebp - 0x98]
mov edx, 7
call fcn.00426aec
cmp dword [0x4a8c28], 0
je 0x4a0279
push 0x4a13d4
lea eax, [ebp - 0x9c]
mov ecx, dword [0x4a8c30]
mov edx, dword [0x4a8c08]
call fcn.00404a2c
mov ecx, dword [ebp - 0x9c]
xor edx, edx
mov eax, dword [0x4a8c28]
call fcn.0045cfe4
push 0
mov eax, 0x4a8c28
call fcn.00404710
mov ecx, eax
mov edx, 0x4a13e0
mov eax, dword [0x4a8c20]
call fcn.00447718
lea eax, [ebp - 0xa0]
mov ecx, dword [0x4a8c28]
mov edx, 0x4a13fc
call fcn.00404a2c
mov eax, dword [ebp - 0xa0]
mov edx, 7
call fcn.00426aec
cmp dword [0x4a8c28], 0
je 0x4a02f3
push 0x4a1410
lea eax, [ebp - 0xa4]
mov ecx, dword [0x4a8c30]
mov edx, dword [0x4a8c08]
call fcn.00404a2c
mov ecx, dword [ebp - 0xa4]
xor edx, edx
mov eax, dword [0x4a8c28]
call fcn.0045cfe4
mov edx, 7
mov eax, 0x4a1420
call fcn.00426aec
push 1
call fcn.0040aea8
call fcn.00402be0
mov ecx, eax
mov edx, 0x4a1434
mov eax, dword [0x4a8c20]
call fcn.00448560
mov eax, dword [0x4a8c20]
call fcn.00403870
push 0
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [0x4a4540]
mov ecx, dword [ecx]
lea eax, [ebp - 0xac]
mov edx, 0x4a1454
call fcn.00404a2c
mov edx, dword [ebp - 0xac]
mov ecx, 0x4a1478
mov eax, 0x80000002
call fcn.0043187c
mov eax, dword [ebp - 0xa8]
mov edx, 0x4a1144
call fcn.00404b2c
jne 0x4a038c
lea edx, [ebp - 0xb0]
mov eax, 0x4a12bc
call fcn.00437618
mov eax, dword [ebp - 0xb0]
call fcn.0043dca8
mov edx, 0x4a1454
mov ecx, dword [0x4a4540]
mov ecx, dword [ecx]
lea eax, [ebp - 0xb4]
call fcn.00404a2c
mov edx, dword [ebp - 0xb4]
mov ecx, 0x4a1478
mov eax, 0x80000002
call fcn.00431d3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a03f1
mov edx, 7
mov eax, 0x4a148c
call fcn.00426b0c
push 0x10
push 0x4a14b4
push 0x4a14c8
push 0
call sub.user32.dll_MessageBoxA_1
lea edx, [ebp - 0xb8]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov eax, dword [ebp - 0xb8]
mov edx, 0x4a1500
call fcn.00404b2c
jne 0x4a0437
xor edx, edx
mov eax, 0x4a1514
call fcn.00446c38
xor edx, edx
mov eax, 0x4a11f0
call fcn.00446c38
xor edx, edx
mov eax, 0x4a1528
call fcn.00446c38
lea edx, [ebp - 0xbc]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov eax, dword [ebp - 0xbc]
mov edx, 0x4a1540
call fcn.00404b2c
jne 0x4a0646
mov edx, 7
mov eax, 0x4a1558
call fcn.00426aec
mov edx, 7
mov eax, 0x4a1574
call fcn.00426aec
call fcn.0049f028
mov edx, 7
mov eax, 0x4a158c
call fcn.00426aec
mov edx, dword [0x4a4350]
mov edx, dword [edx]
lea eax, [ebp - 0xc0]
mov ecx, 0x4a15ac
call fcn.00404a2c
mov eax, dword [ebp - 0xc0]
call fcn.004096dc
mov edx, 7
mov eax, 0x4a15c4
call fcn.00426aec
mov eax, dword [0x4a4418]
cmp byte [eax], 0
je 0x4a0646
mov eax, dword [0x4a4730]
cmp byte [eax], 4
ja 0x4a04f6
lea eax, [ebp - 0xc4]
call fcn.0045d494
mov edx, dword [ebp - 0xc4]
mov eax, 0x4a8c08
call fcn.00404764
jmp 0x4a0511
lea eax, [ebp - 0xc8]
call fcn.0045d3dc
mov edx, dword [ebp - 0xc8]
mov eax, 0x4a8c08
call fcn.00404764
lea edx, [ebp - 0xcc]
mov eax, 0x4a12bc
call fcn.00437618
mov edx, dword [ebp - 0xcc]
mov eax, 0x4a8c08
call fcn.004049e8
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4a8c08]
call fcn.00430fe0
mov edx, 7
mov eax, 0x4a15e0
call fcn.00426aec
mov eax, dword [0x4a4730]
cmp byte [eax], 4
ja 0x4a057a
lea edx, [ebp - 0xd0]
mov eax, 0x4a12bc
call fcn.00437618
mov eax, dword [ebp - 0xd0]
mov edx, 0x10
call fcn.0045d548
jmp 0x4a059a
lea edx, [ebp - 0xd4]
mov eax, 0x4a12bc
call fcn.00437618
mov eax, dword [ebp - 0xd4]
mov edx, 0x19
call fcn.0045d548
mov edx, 7
mov eax, 0x4a15fc
call fcn.00426aec
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, 0x4a1620
mov edx, 0x4a1638
mov eax, 0x80000002
call fcn.0043187c
mov edx, dword [ebp - 0xd8]
mov eax, 0x4a8c2c
call fcn.00404764
lea edx, [ebp - 0xdc]
mov eax, dword [0x4a8c2c]
call fcn.0040dae0
mov edx, dword [ebp - 0xdc]
mov eax, 0x4a8c2c
mov ecx, 0x4a1684
call fcn.00404a2c
push dword [0x4a8c2c]
lea edx, [ebp - 0xe4]
mov eax, 0x4a12bc
call fcn.00437618
push dword [ebp - 0xe4]
push 0x4a16b8
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.00404aa0
mov eax, dword [ebp - 0xe0]
call fcn.004096dc
mov edx, 7
mov eax, 0x4a16c8
call fcn.00426aec
mov eax, dword [0x4a8c00]
mov edx, 0x4a1388
call fcn.00404b2c
jne 0x4a06b6
call fcn.00434d58
mov cl, 1
mov dl, 1
mov eax, dword [0x4467a8]
call fcn.00446ecc
mov dword [0x4a8c20], eax
mov ecx, 0x4a16e4
mov edx, 0x4a10d8
mov eax, dword [0x4a8c20]
call fcn.00449354
test al, al
jne 0x4a069a
push 0x10
push 0x4a14b4
push 0x4a16f0
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, dword [0x4a8c20]
call fcn.00403870
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1710
call fcn.00404b2c
jne 0x4a071c
call fcn.00434d58
mov cl, 1
mov dl, 1
mov eax, dword [0x4467a8]
call fcn.00446ecc
mov dword [0x4a8c20], eax
push 0
mov eax, 0x4a8c34
call fcn.00404710
push eax
mov ecx, 0x4a1720
mov edx, 0x4a10d8
mov eax, dword [0x4a8c20]
call fcn.00447a04
mov eax, dword [0x4a8c20]
call fcn.00403870
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1738
call fcn.00404b2c
jne 0x4a0992
mov edx, 7
mov eax, 0x4a174c
call fcn.00426aec
mov dl, 1
mov eax, 0x4a1764
call fcn.00433a90
mov dword [0x4a8c10], eax
push 0x12c
mov eax, dword [0x4a8c10]
push eax
call fcn.00420438
test eax, eax
jne 0x4a0751
mov edx, 7
mov eax, 0x4a177c
call fcn.00426aec
mov dl, 1
mov eax, 0x4a17a0
call fcn.00433a90
mov dword [0x4a8c10], eax
xor edx, edx
push ebp
push 0x4a07fb
push dword fs:[edx]
mov dword fs:[edx], esp
xor ebx, ebx
push 0xfa
mov eax, dword [0x4a8c10]
push eax
call fcn.00420438
test eax, eax
jne 0x4a07b6
mov eax, dword [0x4a8c10]
push eax
call fcn.004203e0
jmp 0x4a07e2
inc ebx
cmp ebx, 0x28
jne 0x4a0795
mov edx, 7
mov eax, 0x4a17bc
call fcn.00426aec
call fcn.00404154
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a0802
mov eax, dword [0x4a8c10]
push eax
call fcn.004204e8
ret
mov eax, dword [0x4a8c00]
mov edx, 0x4a1844
call fcn.00404b2c
jne 0x4a09bf
mov eax, dword [0x4a8c00]
call fcn.0045da34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1894
call fcn.00404b2c
jne 0x4a0a18
xor eax, eax
push ebp
push 0x4a09ed
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0045e6c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a0a06
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c04]
mov edx, 0x4a18c0
call fcn.00404b2c
jne 0x4a0a6c
xor eax, eax
push ebp
push 0x4a0a41
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a0a5a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c04]
mov edx, 0x4a18e8
call fcn.00404b2c
je 0x4a0a8e
mov eax, dword [0x4a8c04]
mov edx, 0x4a18f4
call fcn.00404b2c
jne 0x4a0af5
xor eax, eax
push ebp
push 0x4a0aca
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49093c]
call fcn.00490a28
mov ebx, eax
mov edx, dword [0x4a8c00]
mov eax, ebx
call fcn.0045d820
mov eax, ebx
call fcn.00403870
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a0ae3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1920
call fcn.00404b2c
jne 0x4a0b1d
call fcn.0045e080
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a192c
call fcn.00404b2c
jne 0x4a0b45
call fcn.0045e448
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1938
call fcn.00404b2c
jne 0x4a0c29
xor eax, eax
push ebp
push 0x4a0bfe
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00402aa8
cmp eax, 4
jne 0x4a0bbf
lea edx, [ebp - 0xec]
mov eax, 4
call fcn.00402b08
mov eax, dword [ebp - 0xec]
push eax
lea edx, [ebp - 0xf0]
mov eax, 3
call fcn.00402b08
mov eax, dword [ebp - 0xf0]
push eax
lea edx, [ebp - 0xf4]
mov eax, 2
call fcn.00402b08
mov eax, dword [ebp - 0xf4]
pop edx
pop ecx
call fcn.0045e810
jmp 0x4a0bf4
lea edx, [ebp - 0xf8]
mov eax, 3
call fcn.00402b08
mov eax, dword [ebp - 0xf8]
push eax
lea edx, [ebp - 0xfc]
mov eax, 2
call fcn.00402b08
mov eax, dword [ebp - 0xfc]
xor ecx, ecx
pop edx
call fcn.0045e810
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a0c17
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1970
call fcn.00404b2c
jne 0x4a0c5b
mov edx, 7
mov eax, 0x4a197c
call fcn.00426aec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a19a4
call fcn.00404b2c
jne 0x4a0c8d
mov edx, 7
mov eax, 0x4a19b8
call fcn.00426b0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a19e8
call fcn.00404b2c
jne 0x4a0cce
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49093c]
call fcn.00490a28
mov ebx, eax
mov eax, ebx
call fcn.00493678
mov eax, ebx
call fcn.00403870
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov eax, dword [0x4a8c00]
mov edx, 0x4a1a00
call fcn.00404b2c
jne 0x4a0d46
call fcn.00402aa8
cmp eax, 4
jne 0x4a0d34
lea edx, [ebp - 0x100]
mov eax, 4
call fcn.00402b08
mov eax, dword [ebp - 0x100]
push eax
lea edx, [ebp - 0x104]
mov eax, 3
call fcn.00402b08
mov eax, dword [ebp - 0x104]
push eax
lea edx, [ebp - 0x108]
mov eax, 2
call fcn.00402b08
mov eax, dword [ebp - 0x108]
pop edx
pop ecx
call fcn.0049e688
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
lea edx, [ebp - 0x10c]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov edx, dword [ebp - 0x10c]
mov eax, 0x4a1a14
call fcn.00404d24
test eax, eax
jle 0x4a0e4c
xor eax, eax
push ebp
push 0x4a0e0e
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x110]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov edx, dword [ebp - 0x110]
mov eax, 0x4a8c1c
call fcn.00404764
mov eax, 0x4a8c1c
mov ecx, 8
mov edx, 1
call fcn.00404c80
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49093c]
call fcn.00490a28
mov ebx, eax
lea eax, [ebp - 0x114]
mov ecx, dword [0x4a8c1c]
mov edx, 0x4a1a28
call fcn.00404a2c
mov eax, dword [ebp - 0x114]
mov edx, 7
call fcn.00426aec
mov eax, dword [ebx + 0xc]
mov ecx, dword [0x4a8c1c]
mov edx, 0x4a1a4c
call fcn.00449354
mov eax, ebx
call fcn.00403870
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a0e15
ret
cmp dword [0x4a8c00], 0
jne 0x4a0e4c
mov eax, dword [0x4a8c00]
call fcn.0045da34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404154
jmp 0x4a1038
mov edx, 7
mov eax, 0x4a1a60
call fcn.00426aec
lea edx, [ebp - 0x118]
mov eax, dword [0x4a8c00]
call fcn.00408b24
mov eax, dword [ebp - 0x118]
mov edx, 0x4a11e4
call fcn.00404b2c
je 0x4a0e82
call fcn.00434d58
xor eax, eax
push ebp
push 0x4a0ee8
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 7
mov eax, 0x4a1a7c
call fcn.00426aec
mov eax, dword [0x493b6c]
push eax
mov eax, dword [0x4a4324]
push eax
push 2
call fcn.00434da0
push eax
mov ecx, dword [0x4a4864]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x493c64]
call fcn.00422d78
mov edx, dword [0x4a47b0]
mov dword [edx], eax
mov edx, 7
mov eax, 0x4a1ab0
call fcn.00426aec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a0f2b
mov edx, 7
mov eax, 0x4a1b1c
call fcn.00426aec
xor eax, eax
push ebp
push 0x4a0ff2
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 7
mov eax, 0x4a1b44
call fcn.00426aec
call fcn.00402aa8
dec eax
jne 0x4a0f9a
lea edx, [ebp - 0x120]
mov eax, 1
call fcn.00402b08
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x11c]
call fcn.00408b24
mov eax, dword [ebp - 0x11c]
mov edx, 0x4a11e4
call fcn.00404b2c
jne 0x4a0f9a
mov eax, dword [0x4a4874]
mov byte [eax], 1
mov dl, 1
mov eax, dword [0x49db04]
call fcn.0049df40
mov edx, dword [0x4a4698]
mov dword [edx], eax
mov eax, dword [0x4a4698]
mov eax, dword [eax]
call fcn.0043b254
mov edx, 7
mov eax, 0x4a1b5c
call fcn.00426aec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a0ff9
mov eax, dword [0x4a4698]
mov eax, dword [eax]
call fcn.00403870
mov edx, 7
mov eax, 0x4a1b84
call fcn.00426aec
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a105d
lea eax, [ebp - 0x120]
mov edx, 0x44
call fcn.00404734
ret