Function at 0x4b2954
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x4f
push 0
push 0
dec ecx
jne 0x4b295d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405bc4
mov eax, dword [ebp - 8]
call fcn.00405bc4
mov eax, dword [ebp + 0xc]
call fcn.004044e8
mov eax, dword [ebp + 8]
call fcn.004044e8
xor eax, eax
push ebp
push 0x4b5856
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x330]
mov edx, dword [0x4b586c]
call fcn.0046b908
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov al, 1
call fcn.004b26d4
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x384]
xor edx, edx
call fcn.0043e5b8
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov byte [0x4cab8c], 0
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
mov eax, dword [0x4cad10]
push eax
lea edx, [ebp - 0x3c]
mov eax, 0x4b5878
call fcn.004a828c
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 0x38]
call fcn.00404870
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0xbb8
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, dword [ebp - 4]
call fcn.004abf20
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, 0x4cd570
call fcn.00405b50
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea edx, [ebp - 0x44]
mov eax, 0x4b58f0
call fcn.004a828c
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
call fcn.004a92dc
mov edx, dword [ebp - 0x48]
pop eax
call fcn.00404300
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0x40]
call fcn.00404870
mov edx, dword [ebp - 0x40]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3f8]
call fcn.00468170
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, 0x7d0
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
cmp byte [0x4cab90], 0
je 0x4b2db7
jmp 0x4b5453
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
xor eax, eax
push ebp
push 0x4b2e79
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x384]
mov dl, 1
call fcn.0043e5b8
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x384]
mov dl, 5
call fcn.0043dbac
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b2e83
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor eax, eax
push ebp
push 0x4b304d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
call fcn.004b26d4
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea edx, [ebp - 0x4c]
mov eax, 0x4b5964
call fcn.004a828c
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3a4]
call fcn.0043e6c8
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3a0]
xor edx, edx
call fcn.0043e6c8
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3a4]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x64]
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea edx, [ebp - 0x50]
mov eax, 0x4b5978
call fcn.004a828c
mov edx, dword [ebp - 0x50]
mov eax, 0x4cd538
call fcn.0040408c
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor eax, eax
mov dword [0x4cd53c], eax
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
push 0x4cd524
push 0
push 0
push 0x4aaae4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b3057
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
cmp byte [0x4cab90], 0
jne 0x4b5453
lea edx, [ebp - 0x54]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3f8]
call fcn.00468150
mov eax, dword [ebp - 0x54]
push eax
lea edx, [ebp - 0x58]
mov eax, 0x4b599c
call fcn.004a828c
mov eax, dword [ebp - 0x58]
mov edx, dword [0x4cd120]
mov ecx, dword [edx + 0x39c]
pop edx
call fcn.004b0130
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, 0xc8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
cmp dword [0x4cab40], 0
je 0x4b307e
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x24]
mov edx, dword [0x4cab40]
call fcn.004040d0
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0x4cab40
call fcn.00404038
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
call fcn.004082f4
mov eax, dword [ebp - 0x5c]
mov edx, 0x4b59d0
call fcn.00404444
jne 0x4b31f3
mov eax, 0x4b59e0
call fcn.004a8530
mov eax, 0x7d0
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea edx, [ebp - 0x64]
mov eax, 0x4b59f4
call fcn.004a828c
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 4]
call fcn.004ab600
mov edx, dword [ebp - 0x60]
mov eax, 0x4cd570
call fcn.00405b68
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, dword [0x4cd570]
call fcn.004abf20
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
xor eax, eax
push ebp
push 0x4b3aeb
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4b3358
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x68]
call fcn.00405b50
push eax
mov eax, dword [0x4cd570]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x68]
lea eax, [ebp - 0x14]
mov ecx, 0x4b5a1c
call fcn.00405b94
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x10]
call fcn.00405b50
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b33af
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x70]
mov edx, dword [ebp + 8]
call fcn.00404870
mov eax, dword [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
call fcn.00405b50
push eax
lea eax, [ebp - 0x88]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push dword [ebp - 0x84]
push dword [ebp - 0x88]
lea edx, [ebp - 0x9c]
mov eax, 0x4b5a54
call fcn.004a828c
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0x98]
call fcn.00413f54
push dword [ebp - 0x8c]
push dword [ebp - 0x90]
push dword [ebp - 0x94]
push dword [ebp - 0x98]
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x74]
mov ecx, 0x4b5a6c
call fcn.00405b94
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, 0x64
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0xa0]
mov edx, dword [ebp + 8]
call fcn.00404870
mov eax, dword [ebp - 0xa0]
push eax
lea eax, [ebp - 0xa8]
call fcn.00405b50
push eax
lea eax, [ebp - 0xb8]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
lea edx, [ebp - 0xcc]
mov eax, 0x4b5a84
call fcn.004a828c
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0xc8]
call fcn.00413f54
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0xa8]
lea eax, [ebp - 0xa4]
mov ecx, 0x4b5a6c
call fcn.00405b94
mov eax, dword [ebp - 0xa4]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, 0x64
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0xd0]
call fcn.00405b50
push eax
lea eax, [ebp - 0xe0]
mov edx, 3
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
lea edx, [ebp - 0xf4]
mov eax, 0x4b5ab0
call fcn.004a828c
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 0xf0]
call fcn.00413f54
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 0x18]
mov ecx, 0x4b5ac8
call fcn.00405b94
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, 0x12c
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0xf8]
mov edx, dword [ebp + 0xc]
call fcn.00404870
mov eax, dword [ebp - 0xf8]
push eax
lea eax, [ebp - 0x100]
call fcn.00405b50
push eax
lea eax, [ebp - 0x110]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x104]
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
lea edx, [ebp - 0x124]
mov eax, 0x4b5ae0
call fcn.004a828c
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x120]
call fcn.00413f54
push dword [ebp - 0x114]
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x100]
lea eax, [ebp - 0xfc]
mov ecx, 0x4b5a6c
call fcn.00405b94
mov eax, dword [ebp - 0xfc]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0xc8
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0xc8
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x128]
mov edx, dword [ebp - 0x24]
call fcn.00404870
mov eax, dword [ebp - 0x128]
push eax
lea eax, [ebp - 0x130]
call fcn.00405b50
push eax
lea eax, [ebp - 0x140]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x134]
push dword [ebp - 0x138]
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
lea edx, [ebp - 0x154]
mov eax, 0x4b5b04
call fcn.004a828c
mov edx, dword [ebp - 0x154]
lea eax, [ebp - 0x150]
call fcn.00413f54
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push dword [ebp - 0x14c]
push dword [ebp - 0x150]
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x12c]
mov ecx, 0x4b5a6c
call fcn.00405b94
mov eax, dword [ebp - 0x12c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0x64
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x158]
call fcn.00405b50
push eax
lea edx, [ebp - 0x160]
mov eax, 0x4b5b1c
call fcn.004a828c
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 0x15c]
call fcn.00404870
mov eax, dword [ebp - 0x15c]
push eax
lea eax, [ebp - 0x168]
call fcn.00405b50
push eax
mov eax, dword [0x4cd570]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x164]
mov ecx, 0x4b5b28
call fcn.00405b94
mov eax, dword [ebp - 0x164]
push eax
mov eax, dword [eax]
call dword [eax + 0xb8]
call fcn.00405c60
mov eax, dword [ebp - 0x158]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
mov eax, 0x7d0
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [0x4cd570]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, dword [ebp - 4]
call fcn.004abf20
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0xbb8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b3b2c
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x170]
call fcn.00404718
push eax
lea eax, [ebp - 0x174]
call fcn.00405b50
push eax
lea eax, [ebp - 0x17c]
call fcn.00405b50
push eax
mov eax, dword [0x4cd570]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov ecx, 0x4b5a1c
call fcn.00405b94
mov eax, dword [ebp - 0x178]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
mov eax, dword [ebp - 0x174]
push eax
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
call fcn.00405c60
mov edx, dword [ebp - 0x170]
mov eax, 0x4b5b58
call fcn.004049cc
test eax, eax
jg 0x4b3bd9
mov eax, dword [ebp - 0x24]
call fcn.004042f8
cmp eax, 4
jle 0x4b3c96
push 0x40030
push 0x4b5b64
push 0x4b5b74
push 0
call sub.user32.dll_MessageBoxA_1
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, 0x4cab40
call fcn.00404038
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3a0]
xor edx, edx
call fcn.0043e6c8
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
jmp 0x4b2d06
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
jmp 0x4b3ce5
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea edx, [ebp - 0x180]
mov eax, 0x4b5b94
call fcn.004a828c
mov eax, dword [ebp - 0x180]
call fcn.004a8530
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x308]
mov edx, dword [0x4b586c]
call fcn.0046b908
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x380]
xor edx, edx
call fcn.004333f8
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x384]
xor edx, edx
call fcn.0043e5b8
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
mov al, 1
call fcn.004b26d4
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0x4cd570
call fcn.00405b50
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
xor eax, eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, 0x7d0
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
cmp dword [0x4cd570], 0
jne 0x4b4117
cmp byte [0x4cab90], 0
jne 0x4b5453
mov eax, dword [ebp - 4]
call fcn.004abf20
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea edx, [ebp - 0x188]
mov eax, 0x4b5bb4
call fcn.004a828c
mov edx, dword [ebp - 0x188]
lea ecx, [ebp - 0x184]
mov eax, dword [ebp - 4]
call fcn.004ab600
mov edx, dword [ebp - 0x184]
mov eax, 0x4cd570
call fcn.00405b68
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
inc dword [ebp - 0x28]
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
cmp dword [ebp - 0x28], 0x64
jne 0x4b40b5
lea edx, [ebp - 0x18c]
mov eax, 0x4b5bd4
call fcn.004a828c
mov eax, dword [ebp - 0x18c]
call fcn.004a8530
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x194]
call fcn.00404718
push eax
mov eax, dword [0x4cd570]
push eax
mov eax, dword [eax]
call dword [eax + 0x78]
call fcn.00405c60
mov edx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
call fcn.004042c0
mov eax, dword [ebp - 0x190]
call fcn.004a8414
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
mov eax, 0x64
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
cmp dword [0x4cd570], 0
je 0x4b3ed9
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, dword [0x4cd570]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, dword [ebp - 4]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, 0xbb8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [0x4cd570]
call fcn.004abf20
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
mov eax, dword [ebp - 4]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
xor eax, eax
push ebp
push 0x4b42ca
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x198]
push eax
lea edx, [ebp - 0x19c]
mov eax, 0x4b5bf0
call fcn.004a828c
mov ecx, dword [ebp - 0x19c]
mov edx, 0x4b5c10
mov eax, dword [0x4cd570]
call fcn.004ac8c8
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4321
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, 0x7d0
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
xor eax, eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
cmp byte [0x4cab90], 0
jne 0x4b5453
xor eax, eax
push ebp
push 0x4b441a
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1a4]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x308]
mov edx, 0xd3
call fcn.004641f0
mov edx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x20]
call fcn.004042c0
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4424
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0xc8
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
inc dword [ebp - 0x28]
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
cmp dword [ebp - 0x28], 0x64
jne 0x4b4684
xor eax, eax
push ebp
push 0x4b457f
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x1a8]
mov eax, 0x4b5c3c
call fcn.004a828c
mov eax, dword [ebp - 0x1a8]
call fcn.004a8530
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea edx, [ebp - 0x1b4]
mov eax, 0x4b5c58
call fcn.004a828c
mov edx, dword [ebp - 0x1b4]
lea eax, [ebp - 0x1b0]
call fcn.00404870
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1b8]
call fcn.00404718
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x78]
call fcn.00405c60
mov edx, dword [ebp - 0x1b8]
pop eax
call fcn.0040489c
mov edx, dword [ebp - 0x1b0]
lea eax, [ebp - 0x1ac]
call fcn.004042c0
mov eax, dword [ebp - 0x1ac]
call fcn.004a8414
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4589
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
xor eax, eax
push ebp
push 0x4b4656
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1bc]
push eax
lea edx, [ebp - 0x1c0]
mov eax, 0x4b5bf0
call fcn.004a828c
mov ecx, dword [ebp - 0x1c0]
mov edx, 0x4b5c10
mov eax, dword [0x4cd570]
call fcn.004ac8c8
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4660
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea edx, [ebp - 0x1c4]
mov eax, 0x4b5c68
call fcn.004a828c
mov eax, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0x20]
call fcn.0040463c
test eax, eax
jle 0x4b43b3
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea edx, [ebp - 8]
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x308]
call fcn.00468150
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, dword [ebp - 8]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x18]
call fcn.00405b50
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
xor eax, eax
push ebp
push 0x4b4acc
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4cab90], 0
je 0x4b47d7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b5453
lea eax, [ebp - 0x1c8]
call fcn.00405b50
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x14]
mov ecx, 0x4b5a1c
call fcn.00405b94
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x10]
call fcn.00405b50
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
call fcn.00405c60
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, dword [ebp - 0xc]
cmp eax, 0xe
ja case.0x4b4867.0
jmp dword [eax*4 + 0x4b486e]
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1cc]
push eax
mov ecx, 0x4b5c88
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1d0]
push eax
mov ecx, 0x4b5cac
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1d4]
push eax
mov ecx, 0x4b5cc0
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1d8]
push eax
mov ecx, 0x4b5cd4
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1dc]
push eax
mov ecx, 0x4b5ce8
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1e0]
push eax
mov ecx, 0x4b5cfc
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1e4]
push eax
mov ecx, 0x4b5d10
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1e8]
push eax
mov ecx, 0x4b5d24
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1ec]
push eax
mov ecx, 0x4b5d38
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1f0]
push eax
mov ecx, 0x4b5d4c
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1f4]
push eax
mov ecx, 0x4b5d60
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1f8]
push eax
mov ecx, 0x4b5d74
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x1fc]
push eax
mov ecx, 0x4b5d88
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
jmp case.0x4b4867.0
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x4b5d9c
mov edx, 0x4b5c9c
mov eax, dword [ebp - 8]
call fcn.004ac8c8
mov eax, 0xc8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4ad6
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
cmp dword [ebp - 0x18], 0
je 0x4b47b3
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
mov eax, 0x1f4
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor eax, eax
push ebp
push 0x4b4bb7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b4d08
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor eax, eax
push ebp
push 0x4b4e9e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x20c]
call fcn.00405b50
push eax
lea edx, [ebp - 0x214]
mov eax, 0x4b5df0
call fcn.004a828c
mov edx, dword [ebp - 0x214]
lea eax, [ebp - 0x210]
call fcn.00404870
mov eax, dword [ebp - 0x210]
push eax
lea eax, [ebp - 0x21c]
call fcn.00405b50
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
mov ecx, 0x4b5b28
call fcn.00405b94
mov eax, dword [ebp - 0x218]
push eax
mov eax, dword [eax]
call dword [eax + 0xb8]
call fcn.00405c60
mov eax, dword [ebp - 0x20c]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.004b245c
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004b245c
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b5064
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
mov eax, 0x3e8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, dword [ebp - 8]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
xor eax, eax
push ebp
push 0x4b5375
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x23c]
call fcn.00405b50
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x14]
mov ecx, 0x4b5a1c
call fcn.00405b94
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x10]
call fcn.00405b50
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
call fcn.00405c60
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x240]
call fcn.00405b50
push eax
lea eax, [ebp - 0x250]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push dword [ebp - 0x250]
lea edx, [ebp - 0x264]
mov eax, 0x4b5e60
call fcn.004a828c
mov edx, dword [ebp - 0x264]
lea eax, [ebp - 0x260]
call fcn.00413f54
push dword [ebp - 0x254]
push dword [ebp - 0x258]
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x240]
lea eax, [ebp - 0x1c]
mov ecx, 0x4b5ac8
call fcn.00405b94
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [eax]
call dword [eax + 0xf4]
call fcn.00405c60
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404300
mov eax, 0xc8
call fcn.004a79e4
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x268]
call fcn.00405b50
push eax
lea edx, [ebp - 0x270]
mov eax, 0x4b5e84
call fcn.004a828c
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0x26c]
call fcn.00404870
mov eax, dword [ebp - 0x26c]
push eax
lea eax, [ebp - 0x278]
call fcn.00405b50
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0x274]
mov ecx, 0x4b5b28
call fcn.00405b94
mov eax, dword [ebp - 0x274]
push eax
mov eax, dword [eax]
call dword [eax + 0xb8]
call fcn.00405c60
mov eax, dword [ebp - 0x268]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
call fcn.00405c60
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b53c1
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404300
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
call fcn.00404344
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
mov eax, 0x5dc
call fcn.004a79e4
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404300
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404300
lea eax, [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
call fcn.00404344
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
call fcn.00404344
mov eax, dword [ebp - 8]
call fcn.004abf20
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
call fcn.00404344
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x30]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b5860
lea eax, [ebp - 0x27c]
call fcn.00404038
lea eax, [ebp - 0x278]
call fcn.00405b50
lea eax, [ebp - 0x274]
call fcn.00405b50
lea eax, [ebp - 0x270]
call fcn.00404038
lea eax, [ebp - 0x26c]
call fcn.00404718
lea eax, [ebp - 0x268]
call fcn.00405b50
lea eax, [ebp - 0x264]
call fcn.00404038
lea eax, [ebp - 0x260]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x240]
mov edx, dword [0x4011e8]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x238]
call fcn.00404038
lea eax, [ebp - 0x234]
call fcn.00405b50
lea eax, [ebp - 0x230]
call fcn.00405b50
lea eax, [ebp - 0x22c]
call fcn.00404038
lea eax, [ebp - 0x228]
call fcn.00404718
lea eax, [ebp - 0x224]
call fcn.00405b50
lea eax, [ebp - 0x220]
call fcn.00404038
lea eax, [ebp - 0x21c]
call fcn.00405b50
lea eax, [ebp - 0x218]
call fcn.00405b50
lea eax, [ebp - 0x214]
call fcn.00404038
lea eax, [ebp - 0x210]
call fcn.00404718
lea eax, [ebp - 0x20c]
call fcn.00405b50
lea eax, [ebp - 0x208]
mov edx, 0x10
call fcn.0040405c
lea eax, [ebp - 0x1c8]
call fcn.00405b50
lea eax, [ebp - 0x1c4]
mov edx, 3
call fcn.0040405c
lea eax, [ebp - 0x1b8]
call fcn.00404718
lea eax, [ebp - 0x1b4]
call fcn.00404038
lea eax, [ebp - 0x1b0]
call fcn.00404718
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.0040405c
lea eax, [ebp - 0x1a4]
call fcn.00404718
lea eax, [ebp - 0x1a0]
mov edx, 3
call fcn.0040405c
lea eax, [ebp - 0x194]
call fcn.00404718
lea eax, [ebp - 0x190]
mov edx, 3
call fcn.0040405c
lea eax, [ebp - 0x184]
call fcn.00405b50
lea eax, [ebp - 0x180]
call fcn.00404038
lea eax, [ebp - 0x17c]
call fcn.00405b50
lea eax, [ebp - 0x178]
call fcn.00405b50
lea eax, [ebp - 0x174]
call fcn.00405b50
lea eax, [ebp - 0x170]
call fcn.00404718
lea eax, [ebp - 0x16c]
call fcn.00404038
lea eax, [ebp - 0x168]
call fcn.00405b50
lea eax, [ebp - 0x164]
call fcn.00405b50
lea eax, [ebp - 0x160]
call fcn.00404038
lea eax, [ebp - 0x15c]
call fcn.00404718
lea eax, [ebp - 0x158]
call fcn.00405b50
lea eax, [ebp - 0x154]
call fcn.00404038
lea eax, [ebp - 0x150]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x130]
call fcn.00405b50
lea eax, [ebp - 0x12c]
call fcn.00405b50
lea eax, [ebp - 0x128]
call fcn.00404718
lea eax, [ebp - 0x124]
call fcn.00404038
lea eax, [ebp - 0x120]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x100]
call fcn.00405b50
lea eax, [ebp - 0xfc]
call fcn.00405b50
lea eax, [ebp - 0xf8]
call fcn.00404718
lea eax, [ebp - 0xf4]
call fcn.00404038
lea eax, [ebp - 0xf0]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0xd0]
call fcn.00405b50
lea eax, [ebp - 0xcc]
call fcn.00404038
lea eax, [ebp - 0xc8]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0xa8]
call fcn.00405b50
lea eax, [ebp - 0xa4]
call fcn.00405b50
lea eax, [ebp - 0xa0]
call fcn.00404718
lea eax, [ebp - 0x9c]
call fcn.00404038
lea eax, [ebp - 0x98]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x78]
call fcn.00405b50
lea eax, [ebp - 0x74]
call fcn.00405b50
lea eax, [ebp - 0x70]
call fcn.00404718
lea eax, [ebp - 0x6c]
call fcn.00404038
lea eax, [ebp - 0x68]
call fcn.00405b50
lea eax, [ebp - 0x64]
call fcn.00404038
lea eax, [ebp - 0x60]
call fcn.00405b50
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0040405c
lea eax, [ebp - 0x54]
call fcn.00405b50
lea eax, [ebp - 0x50]
mov edx, 4
call fcn.0040405c
lea eax, [ebp - 0x40]
call fcn.00404718
lea eax, [ebp - 0x3c]
call fcn.00404038
lea eax, [ebp - 0x38]
call fcn.00404718
lea eax, [ebp - 0x34]
mov edx, 3
call fcn.0040405c
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0040405c
lea eax, [ebp - 0x1c]
mov edx, dword [0x465ec8]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x14]
call fcn.00405b50
lea eax, [ebp - 0x10]
call fcn.00405b50
lea eax, [ebp - 8]
mov edx, dword [0x466a88]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp + 8]
mov edx, 2
call fcn.0040405c
ret