Function at 0x40db20
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0x74
push 0xffffffffffffffff
push 0x4e397c
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x11811f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp + 0x68], edi
push 0
mov dword [ebp + 0x70], 0
push dword [ebp + 0x7c]
call dword [0x4f8f84]
push 0x198
mov dword [ebp - 4], 0
mov dword [edi], vtable.MainWindow.0
mov dword [edi + 8], vtable.MainWindow.1.0
call fcn.004e094b
mov dword [edi + 0x18], eax
add esp, 4
mov word [edi + 0x37], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
mov dword [edi + 0x78], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
mov dword [edi + 0x8c], 0
lea ecx, [edi + 0x90]
call fcn.0040daa0
lea eax, [edi + 0x150]
push 2
push eax
call fcn.004e1cb2
add esp, 8
lea eax, [edi + 0x184]
mov ecx, eax
mov dword [ebp + 0x48], eax
call dword [0x4f85d4]
lea eax, [edi + 0x188]
mov ecx, eax
mov dword [ebp + 0x4c], eax
call dword [0x4f85d4]
lea eax, [edi + 0x18c]
mov ecx, eax
mov dword [ebp + 0x44], eax
call dword [0x4f85d4]
lea eax, [edi + 0x190]
mov ecx, eax
mov dword [ebp + 0x64], eax
call dword [0x4f85d4]
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0x19c], 0
mov dword [edi + 0x1a0], 0
mov dword [edi + 0x1a4], 0
mov dword [edi + 0x1a8], 0
mov dword [edi + 0x1ac], 0
mov dword [edi + 0x1b0], 0
mov dword [edi + 0x1b4], 0
mov dword [edi + 0x1b8], 0
mov dword [edi + 0x1bc], 0
mov dword [edi + 0x1c0], 0
mov dword [edi + 0x1c4], 0
mov dword [edi + 0x1c8], 0
mov dword [edi + 0x1cc], 0
mov dword [edi + 0x1d0], 0
mov dword [edi + 0x1d8], 0
mov dword [edi + 0x1dc], 0
mov dword [edi + 0x1e0], 0
mov dword [edi + 0x1e4], 0
mov dword [edi + 0x1e8], 0
mov dword [edi + 0x1ec], 0
mov dword [edi + 0x204], 0
mov dword [edi + 0x208], 0
mov dword [edi + 0x20c], 0
mov dword [edi + 0x210], 0
mov byte [edi + 0x247], 0
mov dword [edi + 0x250], 0
mov dword [edi + 0x254], 0
mov dword [edi + 0x258], 0
lea eax, [edi + 0x25c]
mov byte [ebp - 4], 0xa
push 0
mov ecx, eax
mov dword [ebp + 0x40], eax
call fcn.00404120
mov ecx, dword [edi + 0x18]
push edi
mov byte [ebp - 4], 0xb
mov dword [edi + 0x290], 0
mov dword [edi + 0x294], 0
mov byte [edi + 0x29c], 1
call fcn.00421e90
mov esi, dword [0x4f9004]
push ecx
mov eax, esp
mov word [edi + 0x34], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x28], 0
mov dword [eax], 0x84
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x18]
call esi
push ecx
mov eax, esp
mov dword [eax], 0x84
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0xbc]
call esi
push ecx
mov eax, esp
mov dword [eax], 0x84
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x14]
call esi
push ecx
mov eax, esp
mov dword [eax], 0x84
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x68]
call esi
mov ebx, dword [0x4f83a4]
lea eax, [ebp + 0x70]
push 0x113d9ec
push eax
call ebx
mov esi, dword [0x4f8370]
lea eax, [ebp + 0x70]
push 0
push 3
push 8
push 0x416250
push fcn.00416550
push eax
mov byte [ebp - 4], 0xc
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113d9f8
push eax
call ebx
push 0
push 3
push 0x40c
push 0x416440
mov byte [ebp - 4], 0xd
push fcn.00416550
lea eax, [ebp + 0x70]
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da08
push eax
call ebx
push 0
push 3
push 0xa4
push 0x416270
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0xe
push 0x416560
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da1c
push eax
call ebx
push 0
push 3
push 0x4b8
push 0x416420
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0xf
push fcn.00416550
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da2c
push eax
call ebx
push 0
push 3
push 0x7e0
push 0x416460
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x10
push fcn.00416550
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da40
push eax
call ebx
push 0
push 3
push 8
push 0x416480
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x11
push fcn.00416550
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
push 0x113da4c
lea eax, [ebp + 0x70]
push eax
call ebx
push 0
push 3
push 0x10
push 0x4164b0
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x12
push fcn.00416550
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da58
push eax
call ebx
push 0
push 3
push 0x30
push 0x416220
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x13
push fcn.00416550
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da64
push eax
call ebx
push 0
push 3
push 0x34
push 0x416380
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x14
push 0x416570
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x70]
push 0x113da74
push eax
call ebx
push 0
push 3
push 0xc
push 0x416520
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x15
push 0x4165a0
push eax
call esi
add esp, 0x20
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x70]
call dword [0x4f85dc]
lea eax, [ebp + 0x24]
mov byte [edi + 0x36], 0
push eax
mov dword [edi + 0x4c], 0
mov byte [edi + 0x220], 1
mov dword [edi + 0x180], 0xffffffff
call dword [0x4f83d0]
add esp, 4
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp + 0x3c]
call dword [0x4f85d0]
push 0xffffffffffffffff
mov esi, eax
mov dword [ebp + 0x70], 4
lea eax, [ebp + 0x6c]
push 0x113da90
push eax
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0x18
call dword [0x4f85c4]
lea ecx, [ebp + 0x6c]
mov byte [ebp - 4], 0x17
call dword [0x4f85cc]
mov ebx, dword [0x4f86e4]
push ecx
mov eax, esp
lea ecx, [ebp]
push 0
push esi
mov dword [eax], 0
call ebx
lea ecx, [ebp + 0x3c]
call dword [0x4f85cc]
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
lea eax, [ebp + 0x70]
push eax
call dword [0x4f83d0]
add esp, 4
mov esi, eax
lea eax, [ebp + 0x6c]
mov byte [ebp - 4], 0x1c
push eax
push 0
push 0
push 0
lea ecx, [ebp - 0x20]
call dword [0x4f85e4]
mov ecx, eax
call dword [0x4f85e0]
push esi
push 0x113da9c
mov ecx, eax
mov byte [ebp - 4], 0x1d
call dword [0x4f856c]
mov ecx, eax
call dword [0x4f83e0]
lea ecx, [ebp + 0x6c]
call dword [0x4f8570]
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
mov esi, dword [0x4f86dc]
lea ecx, [ebp]
call esi
test al, al
jne 0x40e1a2
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x58]
push 1
push 1
push eax
mov ecx, dword [ecx + 0x18c]
call dword [0x4f8fb0]
push eax
lea eax, [ebp + 0x28]
push eax
lea ecx, [ebp]
call dword [0x4f86d8]
push eax
lea ecx, [ebp]
call dword [0x4f86e0]
mov esi, dword [0x4f8610]
lea ecx, [ebp + 0x28]
call esi
mov ecx, dword [edi + 0x18]
lea eax, [ebp]
push eax
mov ecx, dword [ecx + 0x18c]
call dword [0x4f913c]
jmp 0x40e240
push 8
push 0x113dac4
call dword [0x4f8504]
mov dword [ebp + 0x70], eax
add esp, 4
mov byte [ebp - 4], 0x1e
mov eax, esp
lea ecx, [ebp + 0x28]
push 0
mov dword [eax], 0
lea eax, [ebp + 0x70]
push eax
call ebx
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x20
call dword [0x4f85cc]
lea ecx, [ebp + 0x28]
call esi
test al, al
jne 0x40e231
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x58]
push 1
push 1
push eax
mov ecx, dword [ecx + 0x18c]
call dword [0x4f8fb0]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x28]
call dword [0x4f86d8]
push eax
lea ecx, [ebp + 0x28]
call dword [0x4f86e0]
mov esi, dword [0x4f8610]
lea ecx, [ebp - 0x1c]
call esi
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x28]
push eax
mov ecx, dword [ecx + 0x18c]
call dword [0x4f913c]
jmp 0x40e237
mov esi, dword [0x4f8610]
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0x1b
call esi
mov eax, dword [edi + 0x18]
push 0
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov eax, dword [edi + 0x18]
push 0
mov ecx, dword [eax + 0x34]
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov eax, dword [edi + 0x18]
push 1
mov ecx, dword [eax + 0x6c]
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov eax, dword [edi + 0x18]
push 1
mov ecx, dword [eax + 0x70]
mov eax, dword [ecx]
call dword [eax + 0x2c]
push 0x7c
mov dword [edi + 0x144], 0
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x6c], eax
push 0
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.00447450
push pe_nt_image_headers32
mov byte [ebp - 4], 0x1b
mov dword [edi + 0x134], eax
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x6c], eax
push 0
mov ecx, eax
mov byte [ebp - 4], 0x22
call fcn.0044d280
push 0x20
mov byte [ebp - 4], 0x1b
mov dword [edi + 0x138], eax
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x6c], eax
push 0
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00444ec0
push 0x24
mov byte [ebp - 4], 0x1b
mov dword [edi + 0x13c], eax
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x6c], eax
push 0
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.00443f00
push 0x38
mov byte [ebp - 4], 0x1b
mov dword [edi + 0x140], eax
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x6c], eax
push 0
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.00405b50
push 0
push 0x113dad0
push edi
push 0x113daf0
mov byte [ebp - 4], 0x1b
mov dword [edi + 0x14c], eax
push eax
mov esi, dword [0x4f8494]
lea eax, [ebp + 0x6c]
push eax
call esi
mov ebx, dword [0x4f84cc]
lea ecx, [ebp + 0x6c]
add esp, 0x18
call ebx
push 0
push 0x113db10
push edi
push 0x113db20
push dword [edi + 0x138]
lea eax, [ebp + 0x6c]
push eax
call esi
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0
push 0x113db30
push edi
push 0x113db48
push dword [edi + 0x138]
lea eax, [ebp + 0x6c]
push eax
call esi
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0
push 0x113db60
push edi
push 0x113db70
push dword [edi + 0x138]
lea eax, [ebp + 0x6c]
push eax
call esi
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0
push 0x113db80
push edi
push 0x113db9c
push dword [edi + 0x138]
lea eax, [ebp + 0x6c]
push eax
call esi
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0
push 0x113dbb4
push edi
push 0x113dbe4
push dword [edi + 0x138]
lea eax, [ebp + 0x6c]
push eax
call esi
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0
push 0x113dc14
push dword [edi + 0x138]
lea eax, [ebp + 0x6c]
push 0x113dc50
push edi
push eax
call esi
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0x1c
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x6c], eax
mov byte [ebp - 4], 0x26
push 0
mov ecx, eax
call fcn.0040b6f0
push 0x18
mov byte [ebp - 4], 0x1b
mov dword [edi + 0x148], eax
call fcn.004e094b
mov esi, eax
add esp, 4
mov dword [ebp + 0x6c], esi
push edi
mov edi, dword [0x4f830c]
mov ecx, esi
mov byte [ebp - 4], 0x27
call edi
push 0
push 0x113dc8c
push dword [ebp + 0x68]
lea eax, [ebp + 0x6c]
mov dword [esi], vtable.QTimer.0
push 0x113dca8
push esi
push eax
mov byte [ebp - 4], 0x1b
call dword [0x4f8494]
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
push 0x64
mov ecx, esi
call dword [0x4f8300]
mov esi, dword [ebp + 0x68]
mov ecx, dword [esi + 0x18]
mov ecx, dword [ecx + 0x38]
call dword [0x4f9154]
mov ecx, dword [esi + 0x18]
mov ecx, dword [ecx + 0x58]
call dword [0x4f9024]
mov ecx, dword [esi + 0x138]
push 0
call fcn.0047bb20
push 0x18
call fcn.004e094b
mov esi, eax
add esp, 4
mov dword [ebp + 0x6c], esi
push dword [ebp + 0x68]
mov ecx, esi
mov byte [ebp - 4], 0x28
call edi
mov eax, dword [ebp + 0x68]
mov dword [esi], vtable.QTimer.0
mov byte [ebp - 4], 0x1b
mov dword [eax + 0x298], esi
or dword [esi + 0x14], 1
call dword [0x4f8f30]
add eax, 0x64
push eax
mov eax, dword [ebp + 0x68]
mov ecx, dword [eax + 0x298]
call dword [0x4f8304]
push 0x18
call fcn.004e094b
mov esi, eax
add esp, 4
mov dword [ebp + 0x6c], esi
push dword [ebp + 0x68]
mov ecx, esi
mov byte [ebp - 4], 0x29
call edi
mov eax, dword [ebp + 0x68]
push 0
push 0x113dcb4
push eax
push 0x113dca8
mov dword [esi], vtable.QTimer.0
mov byte [ebp - 4], 0x1b
mov dword [eax + 0x218], esi
push esi
lea eax, [ebp + 0x6c]
push eax
call dword [0x4f8494]
add esp, 0x18
lea ecx, [ebp + 0x6c]
call ebx
lea eax, [ebp + 0x6c]
push eax
call dword [0x4f83d0]
mov esi, dword [ebp + 0x48]
add esp, 4
mov ecx, esi
push eax
call dword [0x4f8404]
lea ecx, [ebp + 0x6c]
call dword [0x4f85cc]
mov ebx, dword [ebp + 0x4c]
mov ecx, ebx
push 0
call dword [0x4f85b8]
push 5
push 0x113dcc4
call dword [0x4f8504]
mov dword [ebp + 0x70], eax
add esp, 4
mov byte [ebp + 0x4c], 0x20
mov ecx, esp
mov byte [ebp - 4], 0x2a
push dword [ebp + 0x4c]
call dword [0x4f839c]
mov edi, dword [0x4f8394]
lea eax, [ebp + 0x6c]
push 0
push esi
push eax
lea ecx, [ebp + 0x70]
call edi
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp + 0x4c], 0x20
push dword [ebp + 0x4c]
mov byte [ebp - 4], 0x2b
call dword [0x4f839c]
push 0
push ebx
lea eax, [ebp + 0x48]
mov ecx, esi
push eax
call edi
mov esi, dword [ebp + 0x44]
mov ecx, esi
push eax
call dword [0x4f8404]
lea ecx, [ebp + 0x48]
call dword [0x4f85cc]
lea ecx, [ebp + 0x6c]
call dword [0x4f85cc]
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
mov edi, dword [ebp + 0x64]
mov ecx, edi
push esi
call dword [0x4f85c8]
mov ebx, dword [ebp + 0x68]
push esi
mov esi, dword [0x4f9140]
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x54]
call esi
mov ecx, dword [ebx + 0x18]
push edi
mov ecx, dword [ecx + 0x84]
call esi
mov dword [ebx + 0x194], 0
mov dword [ebx + 0x198], 0
mov dword [ebx + 0x19c], 0
mov dword [ebx + 0x1a0], 0
push 0
lea ecx, [ebp + 0x50]
mov dword [ebx + 0x1a4], 0
mov dword [ebx + 0x1a8], 0
mov dword [ebx + 0x1ac], 0
mov dword [ebx + 0x1b0], 0
mov dword [ebx + 0x1fc], 0
mov dword [ebx + 0x200], 0
call dword [0x4f835c]
push 0xffffffffffffffff
push 0
push 0x113dccc
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x2c
push eax
mov ecx, 0x11810a0
call dword [0x4f84f0]
mov eax, dword [ebx + 0x18]
mov byte [ebp - 4], 0x2d
mov edi, dword [eax + 0x78]
mov ecx, edi
call dword [0x4f8f24]
lea ecx, [ebp + 0x64]
mov esi, eax
call dword [0x4f861c]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x2e
push ecx
lea ecx, [ebp + 0x70]
push ecx
push eax
push esi
mov ecx, edi
call dword [0x4f8f1c]
lea ecx, [ebp + 0x64]
call dword [0x4f8620]
lea ecx, [ebp + 0x70]
call dword [0x4f85cc]
mov ebx, dword [0x4f8488]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1b
call ebx
push 1
lea ecx, [ebp + 0x50]
call dword [0x4f835c]
push 0xffffffffffffffff
push 0
push 0x113dcd8
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x2f
push eax
mov ecx, 0x11810a0
call dword [0x4f84f0]
mov eax, dword [ebp + 0x68]
mov byte [ebp - 4], 0x30
mov eax, dword [eax + 0x18]
mov edi, dword [eax + 0x78]
mov ecx, edi
call dword [0x4f8f24]
lea ecx, [ebp + 0x64]
mov esi, eax
call dword [0x4f861c]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x31
push ecx
lea ecx, [ebp + 0x70]
push ecx
push eax
push esi
mov ecx, edi
call dword [0x4f8f1c]
lea ecx, [ebp + 0x64]
call dword [0x4f8620]
lea ecx, [ebp + 0x70]
call dword [0x4f85cc]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1b
call ebx
push 2
lea ecx, [ebp + 0x50]
call dword [0x4f835c]
push 0xffffffffffffffff
push 0
push 0x113dce4
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x32
push eax
mov ecx, 0x11810a0
call dword [0x4f84f0]
mov eax, dword [ebp + 0x68]
mov byte [ebp - 4], 0x33
mov eax, dword [eax + 0x18]
mov edi, dword [eax + 0x78]
mov ecx, edi
call dword [0x4f8f24]
lea ecx, [ebp + 0x64]
mov esi, eax
call dword [0x4f861c]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x34
push ecx
lea ecx, [ebp + 0x70]
push ecx
push eax
push esi
mov ecx, edi
call dword [0x4f8f1c]
lea ecx, [ebp + 0x64]
call dword [0x4f8620]
lea ecx, [ebp + 0x70]
call dword [0x4f85cc]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1b
call ebx
push 3
lea ecx, [ebp + 0x50]
call dword [0x4f835c]
push 0xffffffffffffffff
push 0
push 0x113dcf0
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x35
push eax
mov ecx, 0x11810a0
call dword [0x4f84f0]
mov eax, dword [ebp + 0x68]
mov byte [ebp - 4], 0x36
mov eax, dword [eax + 0x18]
mov edi, dword [eax + 0x78]
mov ecx, edi
call dword [0x4f8f24]
lea ecx, [ebp + 0x64]
mov esi, eax
call dword [0x4f861c]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x37
push ecx
lea ecx, [ebp + 0x70]
push ecx
push eax
push esi
mov ecx, edi
call dword [0x4f8f1c]
lea ecx, [ebp + 0x64]
call dword [0x4f8620]
lea ecx, [ebp + 0x70]
call dword [0x4f85cc]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1b
call ebx
push 4
lea ecx, [ebp + 0x50]
call dword [0x4f835c]
push 0xffffffffffffffff
push 0
push 0x113dcfc
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x38
push eax
mov ecx, 0x11810a0
call dword [0x4f84f0]
mov eax, dword [ebp + 0x68]
mov byte [ebp - 4], 0x39
mov eax, dword [eax + 0x18]
mov edi, dword [eax + 0x78]
mov ecx, edi
call dword [0x4f8f24]
lea ecx, [ebp + 0x64]
mov esi, eax
call dword [0x4f861c]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x3a
push ecx
lea ecx, [ebp + 0x70]
push ecx
push eax
push esi
mov ecx, edi
call dword [0x4f8f1c]
lea ecx, [ebp + 0x64]
call dword [0x4f8620]
lea ecx, [ebp + 0x70]
call dword [0x4f85cc]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1b
call ebx
push 5
lea ecx, [ebp + 0x50]
call dword [0x4f835c]
push 0xffffffffffffffff
push 0
push 0x113dd04
lea eax, [ebp + 0x70]
mov byte [ebp - 4], 0x3b
push eax
mov ecx, 0x11810a0
call dword [0x4f84f0]
mov eax, dword [ebp + 0x68]
mov byte [ebp - 4], 0x3c
mov eax, dword [eax + 0x18]
mov edi, dword [eax + 0x78]
mov ecx, edi
call dword [0x4f8f24]
lea ecx, [ebp + 0x64]
mov esi, eax
call dword [0x4f861c]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x3d
push ecx
lea ecx, [ebp + 0x70]
push ecx
push eax
push esi
mov ecx, edi
call dword [0x4f8f1c]
lea ecx, [ebp + 0x64]
call dword [0x4f8620]
lea ecx, [ebp + 0x70]
call dword [0x4f85cc]
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x1b
call ebx
push 0xffffffffffffffff
push 0
push 0x113dccc
mov ebx, dword [0x4f84f0]
lea eax, [ebp + 0x70]
push eax
mov ecx, 0x11810a0
call ebx
mov edi, dword [ebp + 0x68]
lea eax, [ebp + 0x70]
mov esi, dword [0x4f8f18]
push eax
push 0
mov ecx, dword [edi + 0x18]
mov byte [ebp - 4], 0x3e
mov ecx, dword [ecx + 0x78]
call esi
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
push 0xffffffffffffffff
push 0
push 0x113dcd8
lea eax, [ebp + 0x70]
mov ecx, 0x11810a0
push eax
call ebx
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x70]
push eax
push 1
mov byte [ebp - 4], 0x3f
mov ecx, dword [ecx + 0x78]
call esi
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
push 0xffffffffffffffff
push 0
push 0x113dce4
lea eax, [ebp + 0x70]
mov ecx, 0x11810a0
push eax
call ebx
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x70]
push eax
push 2
mov byte [ebp - 4], 0x40
mov ecx, dword [ecx + 0x78]
call esi
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
push 0xffffffffffffffff
push 0
push 0x113dcf0
lea eax, [ebp + 0x70]
mov ecx, 0x11810a0
push eax
call ebx
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x70]
push eax
push 3
mov byte [ebp - 4], 0x41
mov ecx, dword [ecx + 0x78]
call esi
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
push 0xffffffffffffffff
push 0
push 0x113dcfc
lea eax, [ebp + 0x70]
mov ecx, 0x11810a0
push eax
call ebx
mov byte [ebp - 4], 0x42
mov ecx, dword [edi + 0x18]
lea eax, [ebp + 0x70]
push eax
push 4
mov ecx, dword [ecx + 0x78]
call esi
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
push 0xffffffffffffffff
push 0
push 0x113dd04
lea eax, [ebp + 0x70]
mov ecx, 0x11810a0
push eax
call ebx
mov ebx, edi
mov byte [ebp - 4], 0x43
lea eax, [ebp + 0x70]
push eax
push 5
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x78]
call esi
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
push 0x20
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x5c], eax
push 0
mov ecx, eax
mov byte [ebp - 4], 0x44
call fcn.00498950
mov ecx, dword [ebx + 0x18]
mov edi, dword [0x4f9024]
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x1d4], 0
mov ecx, dword [ecx + 0x8c]
mov byte [ebp - 4], 0x1b
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x90]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x94]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x98]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x190]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x194]
call edi
mov ecx, dword [ebx + 0x18]
mov word [ebx + 0x236], 0
mov word [ebx + 0x233], 0
mov byte [ebx + 0x1f8], 0
mov byte [ebx + 0x235], 0
mov ecx, dword [ecx + 0x9c]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xa0]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xc8]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xa4]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xa8]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xc4]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xac]
call edi
mov esi, dword [0x4f8f48]
push ecx
mov eax, esp
mov dword [eax], 0x84
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xa4]
call esi
push ecx
mov eax, esp
mov dword [eax], 0x84
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xa8]
call esi
push 0x36d8c
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x5c], eax
push dword [ebp + 0x7c]
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.004a0ca0
mov dword [ebx + 0x238], eax
lea eax, [ebp + 0x7c]
push 0x113dd0c
push eax
mov byte [ebp - 4], 0x1b
call dword [0x4f83a4]
push 0
push 3
push 0xc
push 0x4164f0
lea eax, [ebp + 0x7c]
mov byte [ebp - 4], 0x46
push 0x416590
push eax
call dword [0x4f8370]
add esp, 0x20
mov byte [ebp - 4], 0x1b
lea ecx, [ebp + 0x7c]
call dword [0x4f85dc]
push 0x18
call fcn.004e094b
add esp, 4
mov dword [ebp + 0x7c], eax
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.0049d090
push 0
push 0x113dd24
push eax
mov dword [ebx + 0x30], eax
lea eax, [ebp + 0x7c]
push 0x113dd38
push ebx
mov ebx, dword [0x4f8494]
push eax
mov byte [ebp - 4], 0x1b
call ebx
mov esi, dword [0x4f84cc]
lea ecx, [ebp + 0x7c]
add esp, 0x18
call esi
mov eax, dword [ebp + 0x68]
push 0
push 0x113dd4c
push dword [eax + 0x238]
push 0x113dd60
push eax
lea eax, [ebp + 0x7c]
push eax
call ebx
add esp, 0x18
lea ecx, [ebp + 0x7c]
call esi
push 0
push 0x113dd74
push dword [ebp + 0x40]
lea eax, [ebp + 0x40]
push 0x113dd7c
push dword [ebp + 0x68]
push eax
call ebx
add esp, 0x18
lea ecx, [ebp + 0x40]
call esi
mov eax, dword [ebp + 0x68]
push 0
push 0x113dd8c
push dword [eax + 0x238]
push 0x113ddb8
push dword [eax + 0x30]
lea eax, [ebp + 0x44]
push eax
call ebx
add esp, 0x18
lea ecx, [ebp + 0x44]
call esi
mov eax, dword [ebp + 0x68]
push 0
push 0x113dde4
push eax
push 0x113de04
push dword [eax + 0x238]
lea eax, [ebp + 0x20]
push eax
call ebx
add esp, 0x18
lea ecx, [ebp + 0x20]
call esi
mov eax, dword [ebp + 0x68]
push 0
push 0x113dd24
push dword [eax + 0x30]
push 0x113dd38
push dword [eax + 0x238]
lea eax, [ebp + 0x1c]
push eax
call ebx
add esp, 0x18
lea ecx, [ebp + 0x1c]
call esi
mov eax, dword [ebp + 0x68]
push 0
push 0x113de24
push eax
push 0x113de44
push dword [eax + 0x238]
lea eax, [ebp + 0x38]
push eax
call ebx
add esp, 0x18
lea ecx, [ebp + 0x38]
call esi
mov ebx, dword [ebp + 0x68]
mov esi, dword [0x4f8364]
push 7
mov ecx, dword [ebx + 0x30]
call esi
push 7
lea ecx, [ebx + 0x25c]
call esi
xorps xmm0, xmm0
movq qword [ebx + 0x23c], xmm0
mov word [ebx + 0x244], 0
push 0x18
mov byte [ebx + 0x246], 0
call fcn.004e094b
mov esi, eax
mov dword [ebp + 0x5c], esi
push 0
push 0x113a6bd
mov byte [ebp - 4], 0x48
call dword [0x4f8504]
mov dword [ebp + 0x6c], eax
push 0
push 0x113a6bd
mov byte [ebp - 4], 0x49
mov dword [ebp + 0x70], 0x7ff9
call dword [0x4f8504]
add esp, 0x14
mov dword [ebp + 0x7c], eax
push 0x103
push 0
push ecx
mov eax, esp
mov dword [ebp - 4], 0x4a
mov ecx, esi
mov dword [ebp + 0x70], 0x7ffb
mov dword [eax], 0
lea eax, [ebp + 0x6c]
push eax
lea eax, [ebp + 0x7c]
push eax
push 1
call dword [0x4f8f74]
mov dword [esi], vtable.QMessageBox.0
mov dword [esi + 8], vtable.QMessageBox.1.0
lea ecx, [ebp + 0x7c]
mov dword [ebx + 0x28c], esi
call dword [0x4f85cc]
lea ecx, [ebp + 0x6c]
mov dword [ebp - 4], 0x1b
call dword [0x4f85cc]
push ecx
mov eax, esp
mov dword [eax], 0x400
mov ecx, dword [ebx + 0x28c]
call dword [0x4f8f6c]
lea eax, [ebp + 0x18]
mov byte [ebp + 0x7f], 0
push eax
lea ecx, [ebp + 0x7f]
call fcn.004110c0
mov ecx, dword [ebx + 0x28c]
push eax
push 0x400
mov byte [ebp - 4], 0x4d
call dword [0x4f8f60]
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
mov ecx, dword [ebx + 0x28c]
push 0xc8
call dword [0x4f8fac]
mov ecx, dword [ebx + 0x28c]
push 0x50
call dword [0x4f8fa8]
lea eax, [ebp + 0x60]
push eax
lea ecx, [ebp + 0x7f]
call fcn.004116f0
mov ecx, dword [ebx + 0x28c]
push eax
mov byte [ebp - 4], 0x4e
call dword [0x4f8f5c]
lea ecx, [ebp + 0x60]
mov byte [ebp - 4], 0x1b
call dword [0x4f85cc]
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x2c]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xb0]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x16c]
call edi
lea eax, [ebp + 0x10]
push eax
call dword [0x4f8338]
mov ecx, dword [ebx + 0x18]
lea eax, [ebp + 0x10]
mov esi, dword [0x4f8efc]
add esp, 4
mov ecx, dword [ecx + 0x7c]
push eax
call esi
push 0
push 1
lea eax, [ebp + 0x30]
push eax
lea ecx, [ebp + 0x10]
call dword [0x4f833c]
mov ecx, dword [ebx + 0x18]
push eax
mov ecx, dword [ecx + 0x80]
call esi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x160]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xc0]
call edi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0xb8]
call edi
mov ecx, ebx
call fcn.004d67e0
mov ecx, ebx
call fcn.004d8560
lea ecx, [ebp]
call dword [0x4f8610]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
lea esp, [ebp + 0x74]
pop ebp
ret 4