Function at 0x46885c
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x36
push 0
push 0
dec ecx
jne 0x468865
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
test dl, dl
je 0x46887e
add esp, 0xfffffff0
call fcn.004043e8
mov ebx, ecx
mov byte [ebp - 0x19], dl
mov dword [ebp - 0x18], eax
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 0x1c]
call fcn.00405370
mov eax, dword [ebp + 0x18]
call fcn.00405370
mov eax, dword [ebp + 0x14]
call fcn.00405370
xor eax, eax
push ebp
push 0x469517
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, ebx
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.0041e4a8
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [eax + 0x30], edx
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [eax + 0x5c], edx
mov eax, dword [0x4700cc]
mov edx, esi
call fcn.004050e8
mov eax, dword [ebp - 0x18]
add eax, 0x68
push eax
lea eax, [ebp - 0x104]
mov edx, dword [ebp + 8]
call fcn.004050e8
mov eax, dword [ebp - 0x104]
mov ecx, 1
xor edx, edx
call fcn.004053e8
lea edx, [ebp - 0x108]
mov eax, dword [0x4700cc]
mov eax, dword [eax]
call fcn.00408d4c
mov eax, dword [ebp - 0x108]
mov edx, 0x46954c
call fcn.00405318
jne 0x468936
mov eax, dword [0x470494]
mov word [eax], 7
mov eax, dword [0x4701e0]
mov word [eax], 4
mov eax, dword [ebp + 0x14]
mov edx, 0x46955c
call fcn.00405318
jne 0x468949
xor ebx, ebx
jmp 0x46895f
mov eax, dword [ebp + 0x1c]
call fcn.0040969c
test al, al
jne 0x46895b
mov bx, 0xffff
jmp 0x46895f
mov bx, 2
mov eax, dword [ebp - 0x18]
add eax, 0x48
mov edx, dword [ebp + 0x14]
call fcn.00404f44
mov eax, dword [ebp - 0x18]
add eax, 0x60
mov edx, dword [ebp + 0x1c]
call fcn.00404f44
xor eax, eax
push ebp
push 0x4689a9
push dword fs:[eax]
mov dword fs:[eax], esp
push ebx
mov ecx, dword [ebp + 0x1c]
mov dl, 1
mov eax, dword [0x41687c]
call fcn.0041a92c
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x4c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4689ea
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x4674ac]
call fcn.0046754c
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x34], eax
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x4671e0]
call fcn.004672b0
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x38], eax
mov dl, 1
mov eax, dword [0x41667c]
call fcn.00404094
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x40], eax
mov dl, 1
mov eax, dword [0x41667c]
call fcn.00404094
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x44], eax
mov dl, 1
mov eax, dword [0x41667c]
call fcn.00404094
mov edi, eax
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x64], edi
mov eax, edi
mov edx, 0x469568
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469590
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4695b4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469600
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x46963c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4696ac
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4696e4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x46975c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4697a4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4697dc
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x46983c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4698c4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469934
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x46997c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x4699e4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469a20
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469a5c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469aa8
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469b00
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469b38
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469b8c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469be4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469c40
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469c84
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469cb4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469ce4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469d14
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469d48
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469d84
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x64]
mov edx, 0x469dc4
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor bx, 0xffff
jne 0x468ca9
lea eax, [ebp - 0x10c]
call fcn.00464938
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.00467a3c
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0x34]
mov eax, ebx
call fcn.004677c0
mov eax, dword [ebp - 0x114]
lea edx, [ebp - 0x110]
call fcn.00464a30
mov edx, dword [ebp - 0x110]
mov eax, ebx
call fcn.00467a24
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
mov ecx, dword [ebp + 0x18]
call fcn.00467a50
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x4c]
call fcn.0041a478
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x50], eax
mov dword [ecx + 0x54], edx
jmp 0x4694bf
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x4c]
call fcn.0041a498
lea edx, [ebp - 0x118]
mov eax, dword [ebp + 0x18]
call fcn.00409064
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.00467818
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.004676e0
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x11c]
call fcn.00408d4c
mov eax, dword [ebp - 0x11c]
push eax
lea eax, [ebp - 0x128]
mov edx, esi
call fcn.004050e8
mov eax, dword [ebp - 0x128]
lea edx, [ebp - 0x124]
call fcn.00408d4c
mov edx, dword [ebp - 0x124]
pop eax
call fcn.00405318
je 0x468d40
mov eax, dword [ebp + 0x10]
mov dword [eax], 1
jmp 0x4694bf
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
cmp word [eax + 0xc], 5
jae 0x468d5b
mov eax, dword [ebp + 0x10]
mov dword [eax], 4
jmp 0x4694bf
xor eax, eax
push ebp
push 0x468dbc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0x4c]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
sub eax, 0xc8
sbb edx, 0
push edx
push eax
mov eax, ebx
call fcn.0041a498
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x4c]
mov ecx, 0xc8
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x18]
add eax, 0x58
lea edx, [ebp - 0x100]
mov ecx, 0xc8
call fcn.00405160
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x468dd1
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x18]
mov edx, dword [edx + 0x58]
call fcn.00404f88
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.004677c0
mov eax, dword [ebp - 0x130]
lea edx, [ebp - 0x12c]
call fcn.00409064
cmp dword [ebp - 0x12c], 0
jne 0x468f00
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.00467710
mov eax, dword [ebp - 0x13c]
lea ecx, [ebp - 0x138]
mov dx, 8
call fcn.00465f10
mov eax, dword [ebp - 0x138]
lea edx, [ebp - 0x134]
call fcn.00409064
mov eax, dword [ebp - 0x134]
push eax
lea edx, [ebp - 0x140]
mov eax, dword [ebp + 0x18]
call fcn.00409064
mov edx, dword [ebp - 0x140]
pop eax
call fcn.00405318
je 0x468fcc
call fcn.0040aea8
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0xc]
mov edx, 0x469dfc
call fcn.0040baa8
push dword [ebp - 0xc]
push 0x46955c
mov eax, dword [ebp - 0x18]
push dword [eax + 0x58]
mov eax, dword [ebp - 0x18]
add eax, 0x58
mov edx, 3
call fcn.00405284
lea edx, [ebp - 0x144]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x58]
call fcn.00409064
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
test eax, eax
je 0x468ed2
sub eax, 4
mov eax, dword [eax]
cmp eax, 0xc3
jle 0x468ef2
mov eax, dword [ebp - 0x18]
add eax, 0x58
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x58]
mov ecx, 0xc3
xor edx, edx
call fcn.004053e8
mov eax, dword [ebp + 0x10]
mov dword [eax], 2
jmp 0x4694bf
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.00467768
mov eax, dword [ebp - 0x150]
lea edx, [ebp - 0x14c]
call fcn.00409064
mov eax, dword [ebp - 0x14c]
mov edx, 0x469e14
call fcn.00405318
je 0x468fcc
call fcn.0040aea8
fstp qword [ebp - 0x30]
wait
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov edx, 0x469dfc
call fcn.0040baa8
push dword [ebp - 0x10]
push 0x46955c
mov eax, dword [ebp - 0x18]
push dword [eax + 0x58]
mov eax, dword [ebp - 0x18]
add eax, 0x58
mov edx, 3
call fcn.00405284
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x58]
call fcn.00409064
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
test eax, eax
je 0x468f9e
sub eax, 4
mov eax, dword [eax]
cmp eax, 0xc3
jle 0x468fbe
mov eax, dword [ebp - 0x18]
add eax, 0x58
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x58]
mov ecx, 0xc3
xor edx, edx
call fcn.004053e8
mov eax, dword [ebp + 0x10]
mov dword [eax], 2
jmp 0x4694bf
call fcn.0040aea8
fstp qword [ebp - 0x38]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea eax, [ebp - 0x14]
mov edx, 0x469dfc
call fcn.0040baa8
push dword [ebp - 0x14]
push 0x469e34
mov eax, dword [ebp - 0x18]
push dword [eax + 0x58]
mov eax, dword [ebp - 0x18]
add eax, 0x58
mov edx, 3
call fcn.00405284
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x58]
call fcn.00409064
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
test eax, eax
je 0x469032
sub eax, 4
mov eax, dword [eax]
cmp eax, 0xc3
jle 0x469052
mov eax, dword [ebp - 0x18]
add eax, 0x58
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x58]
mov ecx, 0xc3
xor edx, edx
call fcn.004053e8
lea edx, [ebp - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x60]
call fcn.00465208
push dword [ebp - 4]
push 0x469e40
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x60]
call fcn.00465570
push dword [ebp - 0x15c]
push 0x469e4c
lea eax, [ebp - 4]
mov edx, 4
call fcn.00405284
lea eax, [ebp - 0x160]
mov ecx, 0x46955c
mov edx, dword [ebp - 4]
call fcn.00405208
mov eax, dword [ebp - 0x160]
call fcn.0040969c
test al, al
je 0x469123
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x164]
mov ecx, 0x469e5c
call fcn.00405208
mov eax, dword [ebp - 0x164]
call fcn.0040969c
test al, al
je 0x4690ff
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x168]
mov ecx, 0x469e5c
call fcn.00405208
mov eax, dword [ebp - 0x168]
call fcn.00405380
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x16c]
mov ecx, 0x46955c
mov edx, dword [ebp - 4]
call fcn.00405208
mov eax, dword [ebp - 0x16c]
call fcn.00405380
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x170]
mov ecx, 0x469e6c
mov edx, dword [ebp - 4]
call fcn.00405208
mov eax, dword [ebp - 0x170]
call fcn.0040969c
test al, al
je 0x4692dc
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x174]
mov ecx, 0x469e5c
call fcn.00405208
mov eax, dword [ebp - 0x174]
call fcn.0040969c
test al, al
je 0x469284
push 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x178]
mov ecx, 0x469e5c
call fcn.00405208
mov ecx, dword [ebp - 0x178]
mov dl, 1
mov eax, dword [0x41687c]
call fcn.0041a92c
mov ebx, eax
push 0
push 0x341
mov eax, ebx
call fcn.0041a498
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
call fcn.00467278
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.004676f8
mov eax, dword [ebp - 0x17c]
push eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], edx
fild qword [ebp - 0x184]
fdiv dword [0x469e70]
call fcn.00403370
mov ecx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
mov edx, ebx
call fcn.0046734c
mov eax, ebx
call fcn.004040c4
push 0x1040
lea ecx, [ebp - 0x188]
mov edx, 0x469e7c
mov eax, dword [ebp - 0x18]
call fcn.00467e3c
mov eax, dword [ebp - 0x188]
call fcn.00405380
push eax
lea ecx, [ebp - 0x18c]
mov edx, 0x469e9c
mov eax, dword [ebp - 0x18]
call fcn.00467e3c
mov eax, dword [ebp - 0x18c]
call fcn.00405380
push eax
push 0
call sub.user32.dll_MessageBoxA_1
lea eax, [ebp - 0x190]
mov ecx, 0x469e6c
mov edx, dword [ebp - 4]
call fcn.00405208
mov eax, dword [ebp - 0x190]
call fcn.00405380
push eax
call sub.kernel32.dll_DeleteFileA
mov eax, dword [ebp + 0x10]
mov dword [eax], 0xffffffff
jmp 0x4694bf
push 0x1040
lea ecx, [ebp - 0x194]
mov edx, 0x469e7c
mov eax, dword [ebp - 0x18]
call fcn.00467e3c
mov eax, dword [ebp - 0x194]
call fcn.00405380
push eax
lea ecx, [ebp - 0x198]
mov edx, 0x469eb8
mov eax, dword [ebp - 0x18]
call fcn.00467e3c
mov eax, dword [ebp - 0x198]
call fcn.00405380
push eax
push 0
call sub.user32.dll_MessageBoxA_1
mov eax, dword [ebp + 0x10]
mov dword [eax], 0xfffffffe
jmp 0x4694bf
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
cmp word [eax + 0xc], 7
jb 0x469313
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 8]
call fcn.00409064
cmp dword [ebp - 0x19c], 0
je 0x469313
mov eax, dword [ebp - 0x18]
call fcn.00467fd4
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x50], eax
mov dword [ecx + 0x54], edx
jmp 0x46935c
mov edx, 1
xor eax, eax
call fcn.00465d68
lea ecx, [ebp - 0x1a0]
mov edx, 0x469ed4
mov eax, dword [ebp - 0x18]
call fcn.00467e3c
mov eax, dword [ebp - 0x1a0]
mov edx, 2
call fcn.00465d68
mov eax, dword [ebp - 0x18]
call fcn.00467fa0
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x50], eax
mov dword [ecx + 0x54], edx
xor edx, edx
xor eax, eax
call fcn.00465d68
mov eax, dword [ebp - 0x18]
push dword [eax + 0x54]
push dword [eax + 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x4c]
call fcn.0041a498
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.004676f8
mov eax, dword [ebp - 0x1a4]
push eax
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
xor ecx, ecx
call fcn.0046734c
mov eax, dword [ebp - 0x18]
call fcn.004681f0
test eax, eax
je 0x4693b1
mov edx, dword [ebp + 0x10]
mov dword [edx], eax
jmp 0x4694bf
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x1a8]
mov ecx, 0x469e5c
call fcn.00405208
mov eax, dword [ebp - 0x1a8]
call fcn.0040969c
test al, al
jne 0x4694aa
xor eax, eax
push ebp
push 0x4694a0
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffff
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x1ac]
mov ecx, 0x469e5c
call fcn.00405208
mov ecx, dword [ebp - 0x1ac]
mov dl, 1
mov eax, dword [0x41687c]
call fcn.0041a92c
mov ebx, eax
push 0
push 0
mov eax, ebx
call fcn.0041a498
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x4c]
call fcn.0041a498
push 0
push 0x341
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x4c]
mov eax, ebx
call fcn.0041a714
lea edx, [ebp - 0x1b0]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x34]
call fcn.004676f8
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
mov edx, ebx
call fcn.0046742c
mov eax, ebx
call fcn.004040c4
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x60]
lea eax, [ebp - 0x1b4]
mov ecx, 0x469e5c
call fcn.00405208
mov eax, dword [ebp - 0x1b4]
mov edx, 2
call fcn.004097dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4694aa
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0x4c]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, ebx
call fcn.0041a498
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46951e
lea eax, [ebp - 0x1b4]
mov edx, 0xc
call fcn.00404f14
lea eax, [ebp - 0x17c]
mov edx, 0xd
call fcn.00404f14
lea eax, [ebp - 0x144]
mov edx, 0x11
call fcn.00404f14
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.00404f14
lea eax, [ebp + 0x14]
mov edx, 3
call fcn.00404f14
ret