Function at 0x4b9fa0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e5762
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x980
push ebx
mov ebx, ecx
push esi
mov dword [ebp - 0x14], ebx
push edi
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x750]
push 9
xor eax, eax
mov dword [ebp - 0x73c], 7
push 0x628804
mov dword [ebp - 0x740], 0
mov word [ebp - 0x750], ax
call fcn.00405a70
mov dword [ebp - 0x738], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x734]
push 0xa
xor eax, eax
mov dword [ebp - 0x720], 7
push str._INTERNET_
mov dword [ebp - 0x724], 0
mov word [ebp - 0x734], ax
call fcn.00405a70
mov dword [ebp - 0x71c], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x718]
push 0xa
xor eax, eax
mov dword [ebp - 0x704], 7
push str._PROGRAMS_
mov dword [ebp - 0x708], 0
mov word [ebp - 0x718], ax
call fcn.00405a70
mov dword [ebp - 0x700], 2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6fc]
push 0xa
xor eax, eax
mov dword [ebp - 0x6e8], 7
push str._CONTROLS_
mov dword [ebp - 0x6ec], 0
mov word [ebp - 0x6fc], ax
call fcn.00405a70
mov dword [ebp - 0x6e4], 3
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6e0]
push 0xa
xor eax, eax
mov dword [ebp - 0x6cc], 7
push str._PRINTERS_
mov dword [ebp - 0x6d0], 0
mov word [ebp - 0x6e0], ax
call fcn.00405a70
mov dword [ebp - 0x6c8], 4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6c4]
push 0xa
xor eax, eax
mov dword [ebp - 0x6b0], 7
push str._PERSONAL_
mov dword [ebp - 0x6b4], 0
mov word [ebp - 0x6c4], ax
call fcn.00405a70
mov dword [ebp - 0x6ac], 5
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x6a8]
xor eax, eax
mov dword [ebp - 0x694], 7
push 0xb
mov dword [ebp - 0x698], 0
mov word [ebp - 0x6a8], ax
push str._FAVORITES_
call fcn.00405a70
mov dword [ebp - 0x690], 6
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x68c]
push 9
xor eax, eax
mov dword [ebp - 0x678], 7
push str._STARTUP_
mov dword [ebp - 0x67c], 0
mov word [ebp - 0x68c], ax
call fcn.00405a70
mov dword [ebp - 0x674], 7
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x670]
push 8
xor eax, eax
mov dword [ebp - 0x65c], 7
push str._RECENT_
mov dword [ebp - 0x660], 0
mov word [ebp - 0x670], ax
call fcn.00405a70
mov dword [ebp - 0x658], 8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x654]
push 8
xor eax, eax
mov dword [ebp - 0x640], 7
push str._SENDTO_
mov dword [ebp - 0x644], 0
mov word [ebp - 0x654], ax
call fcn.00405a70
mov dword [ebp - 0x63c], 9
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x638]
push 0xb
xor eax, eax
mov dword [ebp - 0x624], 7
push str._BITBUCKET_
mov dword [ebp - 0x628], 0
mov word [ebp - 0x638], ax
call fcn.00405a70
mov dword [ebp - 0x620], 0xa
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x61c]
push 0xb
xor eax, eax
mov dword [ebp - 0x608], 7
push str._STARTMENU_
mov dword [ebp - 0x60c], 0
mov word [ebp - 0x61c], ax
call fcn.00405a70
mov dword [ebp - 0x604], 0xb
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x600]
push 0xd
xor eax, eax
mov dword [ebp - 0x5ec], 7
push str._MYDOCUMENTS_
mov dword [ebp - 0x5f0], 0
mov word [ebp - 0x600], ax
call fcn.00405a70
mov dword [ebp - 0x5e8], 5
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5e4]
push 9
xor eax, eax
mov dword [ebp - 0x5d0], 7
push str._MYMUSIC_
mov dword [ebp - 0x5d4], 0
mov word [ebp - 0x5e4], ax
call fcn.00405a70
mov dword [ebp - 0x5cc], 0xd
mov byte [ebp - 4], 0xf
push 9
xor eax, eax
mov dword [ebp - 0x5b4], 7
push str._MYVIDEO_
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x5b8], 0
mov word [ebp - 0x5c8], ax
call fcn.00405a70
mov dword [ebp - 0x5b0], 0xe
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x5ac]
push 0x12
xor eax, eax
mov dword [ebp - 0x598], 7
push str._DESKTOPDIRECTORY_
mov dword [ebp - 0x59c], 0
mov word [ebp - 0x5ac], ax
call fcn.00405a70
mov dword [ebp - 0x594], 0x10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x590]
push 8
xor eax, eax
mov dword [ebp - 0x57c], 7
push str._DRIVES_
mov dword [ebp - 0x580], 0
mov word [ebp - 0x590], ax
call fcn.00405a70
mov dword [ebp - 0x578], 0x11
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x574]
push 9
xor eax, eax
mov dword [ebp - 0x560], 7
push str._NETWORK_
mov dword [ebp - 0x564], 0
mov word [ebp - 0x574], ax
call fcn.00405a70
mov dword [ebp - 0x55c], 0x12
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x558]
push 9
xor eax, eax
mov dword [ebp - 0x544], 7
push str._NETHOOD_
mov dword [ebp - 0x548], 0
mov word [ebp - 0x558], ax
call fcn.00405a70
mov dword [ebp - 0x540], 0x13
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x53c]
push 7
xor eax, eax
mov dword [ebp - 0x528], 7
push str._FONTS_
mov dword [ebp - 0x52c], 0
mov word [ebp - 0x53c], ax
call fcn.00405a70
mov dword [ebp - 0x524], 0x14
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x520]
push 0xb
xor eax, eax
mov dword [ebp - 0x50c], 7
push str._TEMPLATES_
mov dword [ebp - 0x510], 0
mov word [ebp - 0x520], ax
call fcn.00405a70
mov dword [ebp - 0x508], 0x15
mov byte [ebp - 4], 0x16
xor eax, eax
mov dword [ebp - 0x4f0], 7
mov dword [ebp - 0x4f4], 0
mov word [ebp - 0x504], ax
push 0x12
push str._COMMON_STARTMENU_
lea ecx, [ebp - 0x504]
call fcn.00405a70
mov dword [ebp - 0x4ec], 0x16
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4e8]
push 0x11
xor eax, eax
mov dword [ebp - 0x4d4], 7
push str._COMMON_PROGRAMS_
mov dword [ebp - 0x4d8], 0
mov word [ebp - 0x4e8], ax
call fcn.00405a70
mov dword [ebp - 0x4d0], 0x17
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4cc]
push 0x10
xor eax, eax
mov dword [ebp - 0x4b8], 7
push str._COMMON_STARTUP_
mov dword [ebp - 0x4bc], 0
mov word [ebp - 0x4cc], ax
call fcn.00405a70
mov dword [ebp - 0x4b4], 0x18
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4b0]
push 0x19
xor eax, eax
mov dword [ebp - 0x49c], 7
push str._COMMON_DESKTOPDIRECTORY_
mov dword [ebp - 0x4a0], 0
mov word [ebp - 0x4b0], ax
call fcn.00405a70
mov dword [ebp - 0x498], 0x19
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x494]
push 9
xor eax, eax
mov dword [ebp - 0x480], 7
push str._APPDATA_
mov dword [ebp - 0x484], 0
mov word [ebp - 0x494], ax
call fcn.00405a70
mov dword [ebp - 0x47c], 0x1a
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x478]
push 0xb
xor eax, eax
mov dword [ebp - 0x464], 7
push str._PRINTHOOD_
mov dword [ebp - 0x468], 0
mov word [ebp - 0x478], ax
call fcn.00405a70
mov dword [ebp - 0x460], 0x1b
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x45c]
push 0xf
xor eax, eax
mov dword [ebp - 0x448], 7
push str._LOCAL_APPDATA_
mov dword [ebp - 0x44c], 0
mov word [ebp - 0x45c], ax
call fcn.00405a70
mov dword [ebp - 0x444], 0x1c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x440]
push 0xc
xor eax, eax
mov dword [ebp - 0x42c], 7
push str._ALTSTARTUP_
mov dword [ebp - 0x430], 0
mov word [ebp - 0x440], ax
call fcn.00405a70
mov dword [ebp - 0x428], 0x1d
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x424]
push 0x13
xor eax, eax
mov dword [ebp - 0x410], 7
push str._COMMON_ALTSTARTUP_
mov dword [ebp - 0x414], 0
mov word [ebp - 0x424], ax
call fcn.00405a70
mov dword [ebp - 0x40c], 0x1e
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x408]
push 0x12
xor eax, eax
mov dword [ebp - 0x3f4], 7
push str._COMMON_FAVORITES_
mov dword [ebp - 0x3f8], 0
mov word [ebp - 0x408], ax
call fcn.00405a70
mov dword [ebp - 0x3f0], 0x1f
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x3ec]
push 0x10
xor eax, eax
mov dword [ebp - 0x3d8], 7
push str._INTERNET_CACHE_
mov dword [ebp - 0x3dc], 0
mov word [ebp - 0x3ec], ax
call fcn.00405a70
mov dword [ebp - 0x3d4], 0x20
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x3d0]
push 9
xor eax, eax
mov dword [ebp - 0x3bc], 7
push str._COOKIES_
mov dword [ebp - 0x3c0], 0
mov word [ebp - 0x3d0], ax
call fcn.00405a70
mov dword [ebp - 0x3b8], 0x21
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3b4]
push 9
xor eax, eax
mov dword [ebp - 0x3a0], 7
push str._HISTORY_
mov dword [ebp - 0x3a4], 0
mov word [ebp - 0x3b4], ax
call fcn.00405a70
mov dword [ebp - 0x39c], 0x22
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x398]
push 0x10
xor eax, eax
mov dword [ebp - 0x384], 7
push str._COMMON_APPDATA_
mov dword [ebp - 0x388], 0
mov word [ebp - 0x398], ax
call fcn.00405a70
mov dword [ebp - 0x380], 0x23
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x37c]
push 9
xor eax, eax
mov dword [ebp - 0x368], 7
push str._WINDOWS_
mov dword [ebp - 0x36c], 0
mov word [ebp - 0x37c], ax
call fcn.00405a70
mov dword [ebp - 0x364], 0x24
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x34c], 7
push 8
xor eax, eax
mov dword [ebp - 0x350], 0
push str._SYSTEM_
lea ecx, [ebp - 0x360]
mov word [ebp - 0x360], ax
call fcn.00405a70
mov dword [ebp - 0x348], 0x25
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x344]
push 0xf
xor eax, eax
mov dword [ebp - 0x330], 7
push str._PROGRAM_FILES_
mov dword [ebp - 0x334], 0
mov word [ebp - 0x344], ax
call fcn.00405a70
mov dword [ebp - 0x32c], 0x26
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x328]
push 0xc
xor eax, eax
mov dword [ebp - 0x314], 7
push str._MYPICTURES_
mov dword [ebp - 0x318], 0
mov word [ebp - 0x328], ax
call fcn.00405a70
mov dword [ebp - 0x310], 0x27
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x30c]
push 9
xor eax, eax
mov dword [ebp - 0x2f8], 7
push str._PROFILE_
mov dword [ebp - 0x2fc], 0
mov word [ebp - 0x30c], ax
call fcn.00405a70
mov dword [ebp - 0x2f4], 0x28
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2f0]
push 0xb
xor eax, eax
mov dword [ebp - 0x2dc], 7
push str._SYSTEMX86_
mov dword [ebp - 0x2e0], 0
mov word [ebp - 0x2f0], ax
call fcn.00405a70
mov dword [ebp - 0x2d8], 0x29
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x2d4]
push 0x12
xor eax, eax
mov dword [ebp - 0x2c0], 7
push str._PROGRAM_FILESX86_
mov dword [ebp - 0x2c4], 0
mov word [ebp - 0x2d4], ax
call fcn.00405a70
mov dword [ebp - 0x2bc], 0x2a
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x2b8]
push 0x16
xor eax, eax
mov dword [ebp - 0x2a4], 7
push str._PROGRAM_FILES_COMMON_
mov dword [ebp - 0x2a8], 0
mov word [ebp - 0x2b8], ax
call fcn.00405a70
mov dword [ebp - 0x2a0], 0x2b
mov byte [ebp - 4], 0x2c
xor eax, eax
mov dword [ebp - 0x288], 7
mov dword [ebp - 0x28c], 0
mov word [ebp - 0x29c], ax
push 0x19
push str._PROGRAM_FILES_COMMONX86_
lea ecx, [ebp - 0x29c]
call fcn.00405a70
mov dword [ebp - 0x284], 0x2c
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x280]
push 0x12
xor eax, eax
mov dword [ebp - 0x26c], 7
push str._COMMON_TEMPLATES_
mov dword [ebp - 0x270], 0
mov word [ebp - 0x280], ax
call fcn.00405a70
mov dword [ebp - 0x268], 0x2d
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x264]
push 0x12
xor eax, eax
mov dword [ebp - 0x250], 7
push str._COMMON_DOCUMENTS_
mov dword [ebp - 0x254], 0
mov word [ebp - 0x264], ax
call fcn.00405a70
mov dword [ebp - 0x24c], 0x2e
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x248]
push 0x13
xor eax, eax
mov dword [ebp - 0x234], 7
push str._COMMON_ADMINTOOLS_
mov dword [ebp - 0x238], 0
mov word [ebp - 0x248], ax
call fcn.00405a70
mov dword [ebp - 0x230], 0x2f
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x22c]
push 0xc
xor eax, eax
mov dword [ebp - 0x218], 7
push str._ADMINTOOLS_
mov dword [ebp - 0x21c], 0
mov word [ebp - 0x22c], ax
call fcn.00405a70
mov dword [ebp - 0x214], 0x30
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x210]
push 0xd
xor eax, eax
mov dword [ebp - 0x1fc], 7
push str._CONNECTIONS_
mov dword [ebp - 0x200], 0
mov word [ebp - 0x210], ax
call fcn.00405a70
mov dword [ebp - 0x1f8], 0x31
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1f4]
push 0xe
xor eax, eax
mov dword [ebp - 0x1e0], 7
push str._COMMON_MUSIC_
mov dword [ebp - 0x1e4], 0
mov word [ebp - 0x1f4], ax
call fcn.00405a70
mov dword [ebp - 0x1dc], 0x35
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1d8]
push 0x11
xor eax, eax
mov dword [ebp - 0x1c4], 7
push str._COMMON_PICTURES_
mov dword [ebp - 0x1c8], 0
mov word [ebp - 0x1d8], ax
call fcn.00405a70
mov dword [ebp - 0x1c0], 0x36
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1bc]
push 0xe
xor eax, eax
mov dword [ebp - 0x1a8], 7
push str._COMMON_VIDEO_
mov dword [ebp - 0x1ac], 0
mov word [ebp - 0x1bc], ax
call fcn.00405a70
mov dword [ebp - 0x1a4], 0x37
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1a0]
push 0xb
xor eax, eax
mov dword [ebp - 0x18c], 7
push str._RESOURCES_
mov dword [ebp - 0x190], 0
mov word [ebp - 0x1a0], ax
call fcn.00405a70
mov dword [ebp - 0x188], 0x38
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x184]
push 0x15
xor eax, eax
mov dword [ebp - 0x170], 7
push str._RESOURCES_LOCALIZED_
mov dword [ebp - 0x174], 0
mov word [ebp - 0x184], ax
call fcn.00405a70
mov dword [ebp - 0x16c], 0x39
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x168]
push 0x12
xor eax, eax
mov dword [ebp - 0x154], 7
push str._COMMON_OEM_LINKS_
mov dword [ebp - 0x158], 0
mov word [ebp - 0x168], ax
call fcn.00405a70
mov dword [ebp - 0x150], 0x3a
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x14c]
push 0xd
xor eax, eax
mov dword [ebp - 0x138], 7
push str._CDBURN_AREA_
mov dword [ebp - 0x13c], 0
mov word [ebp - 0x14c], ax
call fcn.00405a70
mov dword [ebp - 0x134], 0x3b
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x130]
push 0x11
xor eax, eax
mov dword [ebp - 0x11c], 7
push str._COMPUTERSNEARME_
mov dword [ebp - 0x120], 0
mov word [ebp - 0x130], ax
call fcn.00405a70
mov dword [ebp - 0x118], 0x3d
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x114]
push 0xd
xor eax, eax
mov dword [ebp - 0x100], 7
push str._FLAG_CREATE_
mov dword [ebp - 0x104], 0
mov word [ebp - 0x114], ax
call fcn.00405a70
mov dword [ebp - 0xfc], 0x8000
mov byte [ebp - 4], 0x3b
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0xe8], 0
push 0x12
xor eax, eax
lea ecx, [ebp - 0xf8]
push str._FLAG_DONT_VERIFY_
mov word [ebp - 0xf8], ax
call fcn.00405a70
mov dword [ebp - 0xe0], 0x4000
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xdc]
push 0x14
xor eax, eax
mov dword [ebp - 0xc8], 7
push str._FLAG_DONT_UNEXPAND_
mov dword [ebp - 0xcc], 0
mov word [ebp - 0xdc], ax
call fcn.00405a70
mov dword [ebp - 0xc4], 0x2000
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xc0]
push 0xf
xor eax, eax
mov dword [ebp - 0xac], 7
push str._FLAG_NO_ALIAS_
mov dword [ebp - 0xb0], 0
mov word [ebp - 0xc0], ax
call fcn.00405a70
mov dword [ebp - 0xa8], 0x1000
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xa4]
push 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 7
call fcn.004059c0
push str._FLAG_PER_USER_INIT_
lea ecx, [ebp - 0xa4]
call fcn.00405a20
mov dword [ebp - 0x8c], 0x800
push str._FLAG_MASK_
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x3f
call fcn.004050d0
mov dword [ebp - 0x70], 0xff00
push 0x61ff08
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x40
call fcn.004050d0
push 0x61ff04
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x41
call fcn.004050d0
push 0x628f78
push str.shell32.dll
mov byte [ebp - 4], 0x42
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x208
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x988]
push 0
push eax
call fcn.0050b930
add esp, 0xc
lea edi, [ebp - 0x750]
xor esi, esi
push 0
push edi
lea ecx, [ebp + 8]
call fcn.0046e615
cmp eax, 0xffffffff
jne 0x4bb0a1
inc esi
add edi, 0x1c
cmp esi, 0x3f
jb 0x4baf11
push dword [ebp - 0x38]
lea eax, [ebp - 0x768]
push 0
push eax
lea ecx, [ebp + 8]
call fcn.00418dc0
lea edx, [ebp - 0x48]
mov ecx, eax
call fcn.0040aaf0
lea ecx, [ebp - 0x768]
mov bl, al
call fcn.00405040
lea eax, [ebp - 0x68]
lea ecx, [ebp + 8]
test bl, bl
je 0x4bb014
push 0xffffffffffffffff
push dword [ebp - 0x38]
push eax
call fcn.00418dc0
mov esi, eax
lea eax, [ebp - 0x780]
mov byte [ebp - 4], 0x45
push eax
call fcn.004b9e10
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x768]
call fcn.004b9510
mov byte [ebp - 4], 0x47
mov edx, eax
mov ecx, dword [ebp - 0x14]
push esi
call fcn.0044be70
add esp, 4
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x768]
call fcn.00405040
lea ecx, [ebp - 0x780]
call fcn.00405040
lea ecx, [ebp - 0x68]
call fcn.00405040
lea ecx, [ebp - 0x30]
call fcn.00405040
lea ecx, [ebp - 0x48]
call fcn.00405040
push fcn.00405040
push 0x3f
push 0x1c
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 1
push eax
call fcn.004c26e5
lea ecx, [ebp + 8]
call fcn.00405040
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x20]
push 0
push eax
call fcn.00418dc0
lea edx, [ebp - 0x30]
mov ecx, eax
call fcn.0040aaf0
lea ecx, [ebp - 0x68]
mov bl, al
call fcn.00405040
test bl, bl
je 0x4bb089
push 0xffffffffffffffff
push dword [ebp - 0x20]
lea eax, [ebp - 0x780]
push eax
lea ecx, [ebp + 8]
call fcn.00418dc0
mov esi, eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x48
push eax
call fcn.004b9e10
add esp, 4
mov byte [ebp - 4], 0x49
mov edx, eax
mov ecx, dword [ebp - 0x14]
push esi
call fcn.0044be70
add esp, 4
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x68]
call fcn.00405040
lea ecx, [ebp - 0x780]
jmp 0x4bafca
mov ecx, dword [ebp - 0x14]
lea eax, [ebp + 8]
push eax
call fcn.0040aac0
mov dword [ebp - 0x10], 1
jmp 0x4bafcf
lea eax, [esi*8]
sub eax, esi
push 0
push dword [ebp + eax*4 - 0x738]
lea eax, [ebp - 0x988]
push eax
push 0
call dword [ebp - 0x18]
sub esp, 0x18
lea eax, [ebp - 0x988]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.004050d0
sub esp, 0x18
mov byte [ebp - 4], 0x43
mov ecx, esp
mov dword [ebp - 0x4c], esp
push edi
call fcn.00405150
sub esp, 0x18
mov byte [ebp - 4], 0x44
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00405150
mov ecx, ebx
mov byte [ebp - 4], 0x42
call fcn.004bbb10
add esp, 0x48
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x10], 1
call fcn.00405040
lea ecx, [ebp - 0x48]
call fcn.00405040
push fcn.00405040
push 0x3f
push 0x1c
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 1
push eax
call fcn.004c26e5
lea ecx, [ebp + 8]
call fcn.00405040
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret