Function at 0x48e28a
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4af98d
mov eax, dword fs:[0]
push eax
mov eax, 0x65f8
call fcn.0049f030
mov eax, dword [0x4c0390]
xor eax, esp
mov dword [esp + 0x65f4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c0390]
xor eax, esp
push eax
lea eax, [esp + 0x660c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x661c]
call dword [0x4b1358]
push eax
mov eax, dword [0x4c029c]
push eax
push str.DiskOn.ico
push 0x4f8570
call fcn.0049eab5
add esp, 0x10
lea ecx, [esp + 0x280]
call fcn.0043db00
mov dword [esp + 0x6614], 1
xor ebx, ebx
mov byte [esp + 0x794], bl
cmp dword [0x4dbc5c], ebx
je 0x48d91f
lea ecx, [esp + 0x5a08]
push ecx
lea edx, [esp + 0x520c]
push edx
mov ecx, 0x4e0c08
call fcn.00414290
push 0xc30
lea eax, [esp + 0x79c]
push ebx
push eax
call fcn.0049f060
add esp, 0xc
xor eax, eax
jmp 0x48d870
mov cl, byte [esp + eax + 0x5208]
mov byte [esp + eax + 0x798], cl
inc eax
test cl, cl
jne 0x48d870
lea ecx, [esp + 0x5a08]
push ecx
lea edx, [esp + 0xb9c]
push edx
call fcn.0046e6e0
lea ecx, [esp + 0x1fdc]
call fcn.00468ca0
lea ecx, [esp + 0x2000]
call fcn.00468ca0
lea ecx, [esp + 0x2024]
call fcn.00468ca0
push ebx
lea eax, [esp + 0x13cc]
push eax
lea ecx, [esp + 0x5a10]
push ecx
lea edx, [esp + 0x5214]
push edx
call fcn.00433eb0
test al, al
je 0x48d8fa
mov eax, dword [esp + 0x1fc8]
mov ecx, dword [esp + 0x1fcc]
mov dword [esp + 0x1398], eax
mov dword [esp + 0x139c], ecx
lea edx, [esp + 0x798]
push edx
lea ecx, [esp + 0x284]
call fcn.0043d760
lea ecx, [esp + 0x280]
call fcn.0043d9f0
jmp 0x48d9cb
lea ecx, [esp + 0x48]
call fcn.00466490
mov byte [esp + 0x6614], 2
lea edi, [esp + 0x48]
cmp esi, ebx
je 0x48d93c
mov edi, esi
jmp 0x48d94c
push ebx
lea eax, [esp + 0x4c]
push eax
mov ecx, 0x4dfee0
call fcn.0043fa00
push ebx
push ebx
push 1
push 1
push 1
lea ecx, [esp + 0x294]
push ecx
push 3
push edi
call fcn.0045efe0
test al, al
jne 0x48d995
mov byte [esp + 0x6614], 1
lea ecx, [esp + 0x48]
call fcn.00466110
mov dword [esp + 0x6614], 0xffffffff
lea ecx, [esp + 0x280]
call fcn.0048c140
jmp 0x48eccd
xor esi, esi
cmp dword [esp + 0x384], ebx
jbe 0x48d9ba
push esi
lea ecx, [esp + 0x284]
call fcn.00406770
inc esi
mov dword [eax + 8], ebx
cmp esi, dword [esp + 0x384]
jb 0x48d9a0
mov byte [esp + 0x6614], 1
lea ecx, [esp + 0x48]
call fcn.00466110
mov edx, dword [0x4c029c]
push 0x4f8570
push edx
call fcn.00457ad0
mov eax, dword [0x4dc1c8]
push eax
mov byte [esp + 0x1a], 0
call dword [0x4b1658]
mov edx, dword [0x4c9360]
neg eax
lea ecx, [esp + 0x280]
push ecx
sbb eax, eax
and eax, dword [0x4dc1c8]
push 0x48b590
push eax
push str.Silent_d
push edx
mov dword [esp + 0x34], ebx
call dword [0x4b1660]
test eax, eax
je 0x48ec67
xor esi, esi
push esi
push str.ExtrSep
push 0x4f8570
call fcn.00457560
test eax, eax
jne 0x48da51
cmp dword [0x4dbc60], 1
jne 0x48da4a
cmp byte [0x4e6942], al
jne 0x48da51
mov byte [esp + 0x1c], 0
jmp 0x48da56
mov byte [esp + 0x1c], 1
mov eax, dword [esp + 0x1c]
push esi
push eax
push esi
push 8
call fcn.00482620
lea ecx, [esp + 0x5608]
push ecx
push 0x400
call dword [0x4b13dc]
xor edi, edi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
mov dword [0x4dbcb0], esi
mov dword [0x4dbcb4], esi
cmp dword [esp + 0x384], esi
jbe 0x48dad0
mov edi, edi
push edi
lea ecx, [esp + 0x284]
call fcn.00406770
test byte [eax + 8], 8
je 0x48dac6
mov edx, dword [eax + 0x10]
add dword [0x4dbcb0], edx
mov eax, dword [eax + 0x14]
adc dword [0x4dbcb4], eax
inc esi
inc edi
cmp edi, dword [esp + 0x384]
jb 0x48daa0
push 0x480
lea ecx, [esp + 0x350c]
push ecx
xor ebp, ebp
push ebp
push esi
call fcn.004455e0
mov eax, dword [0x4db83c]
mov ebx, dword [0x4b1670]
lea edx, [esp + 0x3508]
push edx
push 0x65
push eax
call ebx
or esi, 0xffffffff
mov dword [0x4dc168], ebp
mov dword [0x4dc16c], ebp
mov dword [esp + 0x3c], ebp
cmp dword [0x4dc178], ebp
jne 0x48e398
cmp dword [0x4db840], 0
jne 0x48e3af
mov edx, dword [esp + 0x20]
push 0x480
lea ecx, [esp + 0x350c]
push ecx
push 0
push edx
call fcn.004455e0
mov ecx, dword [0x4db83c]
lea eax, [esp + 0x3508]
push eax
push 0x66
push ecx
call ebx
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push 0x480
lea edx, [esp + 0x350c]
push edx
push eax
push ecx
call fcn.004455e0
mov eax, dword [0x4db83c]
lea edx, [esp + 0x3508]
push edx
push 0x67
push eax
call ebx
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
push 0x480
lea ecx, [esp + 0x350c]
push ecx
push edx
push eax
call fcn.004455e0
mov edx, dword [0x4db83c]
lea ecx, [esp + 0x3508]
push ecx
push 0x68
push edx
call ebx
cmp esi, 0xffffffff
je 0x48dbe8
push esi
lea eax, [esp + 0x79c]
push eax
lea ecx, [esp + 0x288]
call fcn.0043d940
mov ecx, dword [eax + 0xc00]
add dword [0x4dc168], ecx
mov edx, dword [eax + 0xc04]
adc dword [0x4dc16c], edx
or esi, 0xffffffff
call fcn.004818d0
cmp ebp, dword [esp + 0x384]
jge 0x48e398
push ebp
lea ecx, [esp + 0x284]
call fcn.00406770
mov edi, eax
test byte [edi + 8], 8
mov dword [esp + 0x18], edi
je 0x48e386
mov eax, dword [edi + 4]
mov ecx, dword [edi]
push 1
push 0
push eax
push ecx
mov esi, ebp
mov ecx, 0x4e0c08
mov dword [esp + 0x54], esi
call fcn.004151d0
cmp eax, 1
jne 0x48e386
lea edx, [esp + 0x140]
push edx
mov ecx, 0x4e0c08
call fcn.004142e0
lea ecx, [esp + 0x1fdc]
call fcn.00468ca0
lea ecx, [esp + 0x2000]
call fcn.00468ca0
lea ecx, [esp + 0x2024]
call fcn.00468ca0
mov ecx, dword [edi + 4]
mov edx, dword [edi]
push 0
lea eax, [esp + 0x13cc]
push eax
push ecx
push edx
call fcn.00433eb0
test al, al
je 0x48e386
cmp byte [0x4e52b8], 0
jne 0x48dcbd
cmp dword [esp + 0x1cc], 0
je 0x48dcbd
push 0x50e
call fcn.0045c9e0
push eax
mov eax, dword [edi]
push eax
call fcn.00445f90
add esp, 8
jmp 0x48e386
lea ecx, [esp + 0x4a08]
push ecx
push 0x4b577c
call fcn.0047fca0
test al, al
je 0x48e386
lea edx, [esp + 0x4a08]
push edx
call fcn.004ad058
mov esi, 1
add esp, 4
cmp dword [0x4dbc60], esi
jne 0x48dcfe
mov ecx, 0x4e2ea0
call fcn.0041cd50
call fcn.0047bf60
push 0x4e798c
push 0x4e758c
mov ecx, 0x4e0c08
call fcn.00414290
mov eax, dword [0x4e0e10]
mov dword [0x4e613c], eax
call fcn.00477db0
mov ecx, dword [0x4e818c]
mov eax, 4
push 0x4b175c
mov dword [0x4e5744], esi
mov dword [0x4e5d28], eax
mov dword [0x4e5d2c], eax
call fcn.00466510
push 0x4e758c
push 0x20a
call fcn.0045c9e0
push eax
lea ecx, [esp + 0x3510]
push ecx
call fcn.0049eab5
add esp, 0xc
lea edx, [esp + 0x3508]
push edx
call fcn.00480470
cmp byte [0x4e5d22], 0
mov eax, dword [0x4f8648]
mov dword [esp + 0x1c], eax
je 0x48dd96
mov byte [0x4e5d22], 0
mov byte [esp + 0x16], 1
push 0
push 0
mov ecx, 0x4e0c08
call fcn.00416e40
cmp dword [0x4db840], 0
jne 0x48e35b
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [0x4f8648]
jne 0x48e35b
push 0x4f8570
call fcn.0047c350
cmp byte [0x4e42b0], 0
mov edx, dword [0x4e578c]
mov dword [esp + 0x40], edx
mov byte [0x4e585a], 0
jne 0x48de47
xor edi, edi
push edi
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x38]
push ecx
mov ecx, 0x4e0c08
mov dword [esp + 0x3c], edi
mov dword [esp + 0x30], edi
call fcn.00414730
cmp dword [esp + 0x24], edi
jbe 0x48de3a
push 0x4e42b0
push 0x4b4740
call fcn.0047fbc0
mov esi, eax
cmp esi, edi
je 0x48de3a
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
push esi
push edx
push 1
push eax
call fcn.004a0202
push esi
call fcn.004a0026
add esp, 0x14
mov ecx, dword [esp + 0x30]
push ecx
call fcn.0049f445
add esp, 4
mov esi, dword [esp + 0x18]
mov eax, dword [esi]
push 0x400
lea edx, [esp + 0x620c]
push edx
push eax
call fcn.0044ebf0
xor eax, eax
jmp 0x48de70
mov cl, byte [esp + eax + 0x38c]
mov byte [esp + eax + 0x4608], cl
inc eax
test cl, cl
jne 0x48de70
cmp byte [esp + 0x4608], cl
je 0x48de99
lea ecx, [esp + 0x4608]
push ecx
call fcn.0044ebb0
mov edx, dword [esi]
push edx
call fcn.00450080
cmp dword [0x4e613c], 0
mov byte [esp + 0x17], al
jne 0x48deba
mov ebx, 0x4b1774
mov ebp, 0x4b5774
jmp 0x48dec4
mov ebx, 0x4b19b8
mov ebp, 0x4b576c
cmp byte [0x4e32b0], 0
je 0x48ded7
mov ebx, 0x4b1778
mov ebp, 0x4b3898
mov edi, dword [esp + 0x18]
mov eax, dword [edi]
push ebx
push eax
call fcn.0044eb20
test al, al
je 0x48df7b
cmp byte [esp + 0x4608], 0
je 0x48df0f
lea ecx, [esp + 0x6208]
push ecx
lea edx, [esp + 0x460c]
push edx
call fcn.00465ee0
test eax, eax
jne 0x48df7b
mov byte [esp + 0x15], 1
xor eax, eax
jmp 0x48df20
mov cl, byte [esp + eax + 0x4a08]
mov byte [eax + 0x4e758c], cl
inc eax
test cl, cl
jne 0x48df20
push 0x4e758c
call fcn.0044ebb0
mov eax, dword [edi + 4]
test eax, eax
je 0x48dfe0
cmp word [eax], 0
je 0x48dfe0
push 0x1000000
push 0x4e798c
push 0x4e758c
call fcn.0046e3e0
mov eax, dword [edi + 4]
push eax
call fcn.0044e7b0
push eax
push 0x4e798c
call fcn.0046e740
jmp 0x48dfe9
cmp byte [esp + 0x4608], 0
mov byte [esp + 0x15], 0
je 0x48e0bc
xor eax, eax
mov cl, byte [esp + eax + 0x4608]
mov byte [eax + 0x4e758c], cl
inc eax
test cl, cl
jne 0x48df90
mov edx, dword [edi]
push edx
call fcn.0044e730
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x48dfb0
mov edi, 0x4e758c
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x48dfc1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x18]
jmp 0x48e0cd
xor ecx, ecx
mov word [0x4e798c], cx
mov edx, dword [edi]
push edx
call fcn.0044e730
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x48dff3
mov edi, 0x4e758c
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x48e004
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0x4e758c
rep movsb byte es:[edi], byte [esi]
call fcn.0044eac0
mov esi, eax
test esi, esi
je 0x48e1db
push 0x4e758c
mov byte [esi], 0
call fcn.0044eac0
mov byte [esi], 0x2e
test eax, eax
je 0x48e1db
cmp byte [esp + 0x17], 0
je 0x48e1db
cmp dword [esp + 0x150], 0
jne 0x48e1db
cmp dword [esp + 0x1b4], 0
je 0x48e1db
mov edx, eax
mov ecx, esi
sub edx, esi
mov al, byte [ecx]
mov byte [edx + ecx], al
inc ecx
test al, al
jne 0x48e073
push 0x4e798c
call fcn.0044eaf0
mov esi, eax
test esi, esi
je 0x48e1db
xor eax, eax
push 0x4e798c
mov word [esi], ax
call fcn.0044eaf0
mov ecx, 0x2e
mov word [esi], cx
test eax, eax
je 0x48e1db
push esi
push eax
call fcn.0046e6e0
jmp 0x48e1db
mov ecx, dword [edi]
mov edx, 0x4e758c
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x48e0c3
push 0x4e758c
call fcn.0044eac0
mov esi, eax
test esi, esi
je 0x48e130
push 0x4e758c
mov byte [esi], 0
call fcn.0044eac0
test eax, eax
je 0x48e12d
push 0x4b2b90
push eax
call fcn.00465ee0
test eax, eax
je 0x48e118
cmp byte [esp + 0x17], 0
je 0x48e12d
cmp dword [esp + 0x150], 0
jne 0x48e12d
cmp dword [esp + 0x1b4], 0
je 0x48e12d
push 0x4e798c
call fcn.0044eaf0
test eax, eax
je 0x48e130
xor ecx, ecx
mov word [eax], cx
jmp 0x48e130
mov byte [esi], 0x2e
push ebx
push 0x4e758c
call fcn.00450130
mov eax, dword [edi + 4]
test eax, eax
je 0x48e1a2
cmp word [eax], 0
je 0x48e1a2
cmp byte [esp + 0x4608], 0
je 0x48e18a
push 0x1000000
push 0x4e798c
lea edx, [esp + 0x4610]
push edx
call fcn.0046e3e0
mov eax, dword [edi + 4]
push eax
call fcn.0044e7b0
push eax
push 0x4e798c
call fcn.0046e740
push ebp
push 0x4e798c
call fcn.004501d0
jmp 0x48e1ab
push eax
push 0x4e798c
call fcn.0046e6e0
push ebp
push 0x4e798c
call fcn.004501d0
jmp 0x48e1ab
xor ecx, ecx
mov word [0x4e798c], cx
push 0x4e798c
push 0x4e758c
call fcn.00430550
test al, al
je 0x48e1db
push 0x50d
call fcn.0045c9e0
push eax
push 0x4e758c
call fcn.00445f90
add esp, 8
mov byte [esp + 0x15], 1
mov esi, dword [esp + 0x1c]
cmp esi, dword [0x4f8648]
jne 0x48e281
lea edx, [esp + 0x4a08]
push edx
call fcn.004ad058
mov ecx, dword [0x4e818c]
add esp, 4
push 0x4b175c
mov dword [0x4e576c], 3
mov dword [0x4e5768], 1
mov byte [0x4e57a3], 0
mov byte [0x4e57a7], 0
call fcn.00466510
push 0x4e758c
call fcn.0044e730
push eax
push 0x208
call fcn.0045c9e0
push eax
lea eax, [esp + 0x3510]
push eax
call fcn.0049eab5
add esp, 0xc
lea ecx, [esp + 0x3508]
push ecx
call fcn.00480470
cmp byte [0x4e5d22], 0
je 0x48e275
mov byte [0x4e5d22], 0
mov byte [esp + 0x16], 1
push 0
mov ecx, 0x4e0c08
call fcn.004160f0
cmp byte [0x4e42b0], 0
je 0x48e296
push 0
push 0x4e42b0
call fcn.00480010
cmp dword [0x4db840], 0
jne 0x48e347
cmp esi, dword [0x4f8648]
jne 0x48e347
push 1
push 0
push 0x4e798c
push 0x4e758c
mov ecx, 0x4e0c08
call fcn.004151d0
cmp eax, 1
jne 0x48e347
lea edx, [esp + 0x1e0]
push edx
mov ecx, 0x4e0c08
call fcn.004142e0
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x1a4]
cmp eax, dword [esp + 0x240]
jne 0x48e302
cmp ecx, dword [esp + 0x244]
je 0x48e3de
or eax, ecx
je 0x48e3de
push 0x4b1a58
lea eax, [esp + 0x144]
push eax
call fcn.00465ee0
test eax, eax
jne 0x48e32d
cmp dword [esp + 0x1b4], eax
jne 0x48e3de
push 0x50a
call fcn.0045c9e0
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
push eax
push edx
call fcn.00445f90
add esp, 8
cmp byte [esp + 0x15], 0
jne 0x48e35b
push 0x4e758c
call fcn.004a1e4d
add esp, 4
lea ecx, [esp + 0x5608]
push ecx
call fcn.004ad058
add esp, 4
lea edx, [esp + 0x4a08]
push edx
call fcn.0047fe00
mov ebp, dword [esp + 0x3c]
mov ebx, dword [0x4b1670]
mov esi, dword [esp + 0x44]
inc ebp
cmp dword [0x4dc178], 0
mov dword [esp + 0x3c], ebp
je 0x48db1d
cmp dword [0x4db840], 0
jne 0x48e3af
cmp dword [0x4dc178], 0
mov eax, 0x4d0
je 0x48e3b4
mov eax, 0x271
push eax
call fcn.0045c9e0
push eax
call fcn.00480470
cmp dword [0x4dc178], 0
je 0x48ebec
mov eax, dword [0x4db83c]
push eax
call dword [str.YT__b]
jmp 0x48ec06
mov eax, dword [esp + 0x790]
test eax, eax
je 0x48e460
mov ecx, dword [esp + 0x1ac]
push ecx
mov ecx, dword [esp + 0x1ac]
cdq
push ecx
push edx
push eax
call fcn.0049f660
push 0
mov esi, edx
mov edx, dword [esp + 0x250]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x250]
push edx
push eax
call fcn.0049f660
cmp esi, edx
jg 0x48e460
jl 0x48e428
cmp edi, eax
jae 0x48e460
push 0x4e758c
call fcn.0044e730
push eax
push 0x50f
call fcn.0045c9e0
push eax
lea ecx, [esp + 0x3510]
push ecx
call fcn.0049eab5
add esp, 0xc
lea edx, [esp + 0x3508]
push edx
call fcn.00480470
jmp 0x48e347
xor edi, edi
xor eax, eax
mov esi, 1
lea esp, [esp]
mov cl, byte [eax + 0x4e52b8]
mov byte [esp + eax + 0x3988], cl
add eax, esi
test cl, cl
jne 0x48e470
cmp dword [0x4dbc60], esi
jne 0x48e495
mov ecx, 0x4e2ea0
call fcn.0041cd50
call fcn.0047bf60
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x3988]
mov byte [eax + 0x4e52b8], cl
add eax, esi
test cl, cl
jne 0x48e4a0
push 0x4e798c
push 0x4e758c
mov ecx, 0x4e0c08
call fcn.00414290
mov eax, dword [0x4e0e10]
mov ecx, dword [0x4e818c]
push 0x4b175c
mov dword [0x4e613c], eax
mov byte [0x4e585a], 1
mov dword [0x4e57fc], edi
mov dword [0x4e5820], edi
call fcn.00466510
push 0x4e758c
call fcn.0044e730
push eax
push 0x20b
call fcn.0045c9e0
push eax
lea ecx, [esp + 0x3510]
push ecx
call fcn.0049eab5
add esp, 0xc
lea edx, [esp + 0x3508]
push edx
call fcn.00480470
cmp byte [0x4e5d22], 0
je 0x48e53c
mov byte [0x4e5d22], 0
mov byte [esp + 0x16], 1
push edi
push edi
mov ecx, 0x4e0c08
call fcn.00416e40
cmp dword [0x4db840], edi
jne 0x48e347
mov eax, dword [esp + 0x1c]
cmp eax, dword [0x4f8648]
jne 0x48e347
mov ecx, dword [esp + 0x240]
or ecx, dword [esp + 0x244]
jne 0x48e599
cmp dword [esp + 0x1fcc], edi
jl 0x48e599
jg 0x48e58c
cmp dword [esp + 0x1fc8], 0x200
jb 0x48e599
cmp dword [esp + 0x198], esi
jbe 0x48e347
mov eax, dword [esp + 0x790]
cmp eax, edi
je 0x48e5eb
mov ecx, dword [esp + 0x1ac]
push ecx
mov ecx, dword [esp + 0x1ac]
cdq
push ecx
push edx
push eax
call fcn.0049f660
push 0
mov esi, edx
mov edx, dword [esp + 0x250]
push 0x64
mov edi, eax
mov eax, dword [esp + 0x250]
push edx
push eax
call fcn.0049f660
cmp esi, edx
jl 0x48e347
jg 0x48e5eb
cmp edi, eax
jb 0x48e347
push 0x4e758c
call fcn.0044e730
push eax
push 0x25a
call fcn.0045c9e0
push eax
lea ecx, [esp + 0x3510]
push ecx
call fcn.0049eab5
add esp, 0xc
lea edx, [esp + 0x3508]
push edx
call fcn.00480470
mov eax, dword [esp + 0x1fc8]
inc dword [esp + 0x20]
add dword [esp + 0x28], eax
mov ecx, dword [esp + 0x1fcc]
adc dword [esp + 0x2c], ecx
lea ecx, [esp + 0x2468]
call fcn.00401d40
push 0
lea edx, [esp + 0x246c]
push edx
push 0x4e798c
push 0x4e758c
call fcn.00433eb0
test al, al
je 0x48e677
mov eax, dword [esp + 0x3068]
add dword [esp + 0x34], eax
mov ecx, dword [esp + 0x306c]
adc dword [esp + 0x38], ecx
cmp byte [esp + 0x15], 0
je 0x48ea12
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 4]
mov eax, dword [eax]
push 0
push 1
push edx
push eax
mov ecx, 0x4e0c08
call fcn.004151d0
cmp eax, 1
jne 0x48e35b
lea ecx, [esp + 0x48]
call fcn.00466490
mov byte [esp + 0x6614], 3
mov esi, dword [esp + 0x18]
mov eax, dword [esi]
lea edx, [esp + 0x4208]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x48e6c4
mov ecx, dword [esi + 4]
push ecx
call fcn.00465be0
push eax
lea edx, [esp + 0x79c]
push edx
call fcn.0046e6e0
mov edi, dword [0x4b1388]
mov byte [esp + 0x15], 0
lea eax, [esp + 0x4208]
push eax
lea ecx, [esp + 0x3e0c]
push 0x4b575c
push ecx
call fcn.0049eab5
add esp, 0xc
lea edx, [esp + 0x3e08]
push edx
lea eax, [esp + 0x420c]
push eax
call edi
test eax, eax
je 0x48e8bd
lea ecx, [esp + 0x4208]
push ecx
lea ecx, [esp + 0x4c]
call fcn.00466510
lea edx, [esp + 0x3e08]
push edx
lea ecx, [esp + 0x4c]
call fcn.00466510
lea eax, [esp + 0x798]
push eax
lea ecx, [esp + 0x420c]
push ecx
mov ecx, 0x4e0c08
call fcn.004149a0
test al, al
je 0x48e784
lea edx, [esp + 0x798]
push edx
lea eax, [esp + 0x420c]
push eax
call fcn.00430550
test al, al
jne 0x48e6f0
push 0
push 1
push 0x4e798c
push 0x4e758c
mov ecx, 0x4e0c08
call fcn.004151d0
cmp eax, 1
jne 0x48e8cf
xor eax, eax
jmp 0x48e7b0
mov cl, byte [eax + 0x4e758c]
mov byte [esp + eax + 0x4208], cl
inc eax
test cl, cl
jne 0x48e7b0
push 0x4e798c
lea ecx, [esp + 0x79c]
push ecx
call fcn.0046e6e0
mov edi, dword [0x4b1118]
mov ebp, dword [0x4b1304]
mov ebx, dword [esp + 0x40]
mov eax, dword [esi]
lea edx, [esp + 0x3e08]
sub edx, eax
nop
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x48e7f0
lea edx, [esp + 0x4208]
push edx
call fcn.0044e730
mov esi, eax
lea eax, [esp + 0x3e08]
push eax
call fcn.0044e730
mov cl, byte [esi]
mov byte [eax], cl
inc esi
inc eax
test cl, cl
jne 0x48e816
lea ecx, [esp + 0x3e08]
push ecx
lea edx, [esp + 0x420c]
push edx
call dword [0x4b1388]
test eax, eax
je 0x48e8c4
test ebx, ebx
je 0x48e847
cmp ebx, 1
jne 0x48e87d
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea eax, [esp + 0x3e20]
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x48e87d
lea ecx, [esp + 0x2458]
push ecx
push 0
push 0
push esi
call ebp
push esi
call dword [0x4b1374]
lea edx, [esp + 0x798]
push edx
lea eax, [esp + 0x420c]
push eax
mov ecx, 0x4e0c08
call fcn.004149a0
test al, al
je 0x48e8c9
lea ecx, [esp + 0x798]
push ecx
lea edx, [esp + 0x420c]
push edx
call fcn.00430550
test al, al
je 0x48e8c9
mov esi, dword [esp + 0x18]
jmp 0x48e7e4
mov byte [esp + 0x15], 1
jmp 0x48e8cf
mov byte [esp + 0x15], 1
mov edi, dword [0x4b1388]
xor bl, bl
cmp byte [esp + 0x78c], bl
jne 0x48e954
push 0x400
lea eax, [esp + 0x3a0c]
push eax
lea ecx, [esp + 0x50]
mov bl, 1
call fcn.004666d0
test al, al
je 0x48e94b
lea ebx, [ebx]
push 0x400
lea ecx, [esp + 0x4e0c]
push ecx
lea ecx, [esp + 0x50]
call fcn.004666d0
test al, al
je 0x48e94b
push 0
lea edx, [esp + 0x3a0c]
push edx
call fcn.00430550
test al, al
jne 0x48e949
push 0x400
lea eax, [esp + 0x3a0c]
push eax
lea ecx, [esp + 0x50]
call fcn.004666d0
test al, al
jne 0x48e900
jmp 0x48e94b
xor bl, bl
lea ecx, [esp + 0x48]
call fcn.00466090
push 0x400
lea ecx, [esp + 0x3a0c]
push ecx
lea ecx, [esp + 0x50]
call fcn.004666d0
test al, al
je 0x48e9fc
push 0x400
lea edx, [esp + 0x4e0c]
push edx
lea ecx, [esp + 0x50]
call fcn.004666d0
test al, al
je 0x48e9fc
cmp byte [esp + 0x15], 0
jne 0x48e9b8
test bl, bl
jne 0x48e9cc
push 0
lea eax, [esp + 0x4e0c]
push eax
call fcn.00431390
lea ecx, [esp + 0x4e08]
push ecx
call fcn.004a1e4d
add esp, 4
jmp 0x48e9de
test bl, bl
jne 0x48e9cc
lea edx, [esp + 0x3a08]
push edx
call fcn.004a1e4d
add esp, 4
lea eax, [esp + 0x3a08]
push eax
lea ecx, [esp + 0x4e0c]
push ecx
call edi
push 0x400
lea edx, [esp + 0x3a0c]
push edx
lea ecx, [esp + 0x50]
call fcn.004666d0
test al, al
jne 0x48e972
mov byte [esp + 0x6614], 1
lea ecx, [esp + 0x48]
call fcn.00466110
jmp 0x48e35b
cmp byte [esp + 0x78c], 0
je 0x48eb01
mov esi, dword [esp + 0x18]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push 0
push 1
push eax
push ecx
mov ecx, 0x4e0c08
call fcn.004151d0
cmp eax, 1
jne 0x48eb01
mov eax, dword [esi]
lea edx, [esp + 0x3a08]
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x48ea50
mov edx, dword [esi + 4]
push edx
call fcn.00465be0
push eax
lea eax, [esp + 0x79c]
push eax
call fcn.0046e6e0
lea ecx, [esp + 0x3a08]
push ecx
call fcn.0044e730
push eax
push 0x258
call fcn.0045c9e0
push eax
lea edx, [esp + 0x3510]
push edx
call fcn.0049eab5
add esp, 0xc
lea eax, [esp + 0x3508]
push eax
call fcn.00480470
push 0
lea ecx, [esp + 0x3a0c]
push ecx
call fcn.00431390
lea edx, [esp + 0x3a08]
push edx
call fcn.004a1e4d
add esp, 4
lea eax, [esp + 0x798]
push eax
lea ecx, [esp + 0x3a0c]
push ecx
mov ecx, 0x4e0c08
call fcn.004149a0
test al, al
je 0x48eb01
lea edx, [esp + 0x798]
push edx
lea eax, [esp + 0x3a0c]
push eax
call fcn.00430550
test al, al
jne 0x48ea71
push 0
push 1
push 0x4e798c
push 0x4e758c
mov ecx, 0x4e0c08
call fcn.004151d0
cmp eax, 1
jne 0x48e35b
xor eax, eax
jmp 0x48eb30
mov cl, byte [eax + 0x4e758c]
mov byte [esp + eax + 0x3e08], cl
inc eax
test cl, cl
jne 0x48eb30
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 4]
push edx
call fcn.00465be0
push eax
lea eax, [esp + 0x79c]
push eax
call fcn.0046e6e0
mov eax, dword [esp + 0x40]
test eax, eax
je 0x48eb6a
cmp eax, 1
jne 0x48eba8
push 0
push 0
push 3
push 0
push 0
push 0x40000000
lea ecx, [esp + 0x3e20]
push ecx
call dword [0x4b1118]
mov esi, eax
cmp esi, 0xffffffff
je 0x48eba8
lea edx, [esp + 0x2458]
push edx
push 0
push 0
push esi
call dword [0x4b1304]
push esi
call dword [0x4b1374]
lea eax, [esp + 0x798]
push eax
lea ecx, [esp + 0x3e0c]
push ecx
mov ecx, 0x4e0c08
call fcn.004149a0
test al, al
je 0x48e35b
lea edx, [esp + 0x798]
push edx
lea eax, [esp + 0x3e0c]
push eax
call fcn.00430550
test al, al
jne 0x48eb5d
jmp 0x48e35b
push 0
push 0
push 0
push 0
push 0
push 1
push 0
push 1
call fcn.00480c00
call fcn.00480510
cmp dword [0x4dbc5c], 0
je 0x48ec49
push 0
push 0
lea ecx, [esp + 0x5a10]
push ecx
lea edx, [esp + 0x5214]
push edx
mov ecx, 0x4e0c08
call fcn.004151d0
cmp eax, 1
je 0x48ec40
mov ecx, 0x4dfee0
call fcn.00441640
test al, al
jne 0x48ec50
cmp dword [0x4dbc5c], 0
jne 0x48ec67
cmp dword [esp + 0x20], 0
jbe 0x48ec67
push 0
push 0x4e758c
call fcn.0044e730
push eax
mov ecx, 0x4dfee0
call fcn.00441bc0
cmp byte [esp + 0x794], 0
je 0x48ec81
mov eax, dword [0x4c029c]
push eax
push 0x4f8570
call fcn.00457ad0
push 0x4f8570
call fcn.00457ba0
cmp byte [esp + 0x16], 0
je 0x48ec97
call fcn.0047f530
mov dword [esp + 0x6614], 5
mov eax, dword [esp + 0x378]
test eax, eax
je 0x48ecb6
push eax
call fcn.0049e7fd
add esp, 4
mov dword [esp + 0x6614], 0xffffffff
lea ecx, [esp + 0x280]
call fcn.00466110
mov ecx, dword [esp + 0x660c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x65f4]
xor ecx, esp
call fcn.0049eaa6
add esp, 0x6604
ret 4