Function at 0x4b1ca8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff84
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], ebx
mov ebx, ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4b297f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x128]
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 0x12c]
mov dword [ebp - 0x14], edx
xor ecx, ecx
push ebp
push 0x4b294d
push dword fs:[ecx]
mov dword fs:[ecx], esp
xor edx, edx
mov dword [eax + 0x128], edx
mov dword [eax + 0x12c], edx
mov eax, dword [ebp - 4]
call fcn.004b113c
test ebx, ebx
je 0x4b1d1d
cmp dword [ebx + 0xc], 0
jne 0x4b1d45
lea edx, [ebp - 0x1c]
mov eax, dword [0x4bc3f8]
call fcn.00404c9c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
call fcn.0040348c
jmp 0x4b2954
mov esi, dword [ebx + 0xc]
cmp dword [esi + 0x18], 0
je 0x4b1d54
cmp dword [esi + 0xc], 0
jne 0x4b1d73
lea edx, [ebp - 0x1c]
mov eax, dword [0x4bc3bc]
call fcn.00404c9c
mov eax, dword [ebp - 0x1c]
call fcn.00440688
call fcn.0040348c
jmp 0x4b2954
lea eax, [ebp - 0x1c]
push eax
fild dword [esi + 0x18]
fmul dword [0x4b298c]
fstp xword [ebp - 0x30]
wait
lea eax, [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 3
lea edx, [ebp - 0x24]
xor ecx, ecx
mov eax, 0x4b2998
call fcn.00407db4
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2b0]
mov eax, dword [eax + 0x118]
mov edx, 2
call fcn.00443fc8
pop edx
call fcn.00443f54
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
mov dl, 1
call fcn.00429f48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x25c]
mov dl, 1
call fcn.00429f48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c8]
mov dl, 1
call fcn.00429f48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
mov dl, 1
call fcn.00429f48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
mov dl, 1
call fcn.00429f48
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x248]
mov dl, 1
call fcn.00429f48
lea edx, [ebp - 8]
mov eax, ebx
call fcn.004b0d0c
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, dword [ebp - 8]
call fcn.004039e8
mov eax, ebx
call fcn.00444cd0
mov edx, dword [eax + 8]
lea eax, [ebp - 0xc]
call fcn.00403a2c
lea eax, [ebp - 0x10]
mov edx, dword [ebx + 8]
call fcn.00403a2c
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc3a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4c], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x50]
mov ecx, 3
mov eax, 0x4b29a8
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c0]
call fcn.00429e8c
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc124]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4c], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x50]
mov ecx, 3
mov eax, 0x4b29c8
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c8]
call fcn.00429e8c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c8]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
call fcn.00429e8c
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc1f0]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4c], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x50]
mov ecx, 3
mov eax, 0x4b29c8
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
call fcn.00429e8c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
call fcn.00429e8c
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc454]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4c], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x50]
mov ecx, 3
mov eax, 0x4b29c8
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
call fcn.00429e8c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
mov edx, dword [eax + 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
call fcn.00429e8c
mov eax, dword [ebp - 8]
mov edx, 0x4b29e4
call fcn.00403d20
jne 0x4b204f
mov cl, 1
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ad264
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b29f4
call fcn.00403d20
je 0x4b206d
mov eax, dword [ebp - 8]
mov edx, 0x4b2a08
call fcn.00403d20
jne 0x4b207c
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004adac8
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2a20
call fcn.00403d20
jne 0x4b209c
xor ecx, ecx
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ad264
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2a30
call fcn.00403d20
jne 0x4b20ba
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004adb38
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2a40
call fcn.00403d20
jne 0x4b2160
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x154]
mov eax, esi
call fcn.00457bb8
test al, al
je 0x4b2107
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24c]
mov dl, 1
call fcn.00422734
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov dl, 1
call fcn.00422734
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2a58
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2a68
call fcn.00403d20
jne 0x4b2206
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x154]
mov eax, esi
call fcn.00457d80
test al, al
je 0x4b21ad
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24c]
mov dl, 1
call fcn.00422734
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov dl, 1
call fcn.00422734
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2a58
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2a80
call fcn.00403d20
jne 0x4b22b8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x154]
mov eax, esi
call fcn.00456a68
test al, al
je 0x4b2255
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24c]
mov dl, 1
call fcn.00422734
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov dl, 1
call fcn.00422734
jmp 0x4b225f
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ad070
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2a58
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2a98
call fcn.00403d20
jne 0x4b2448
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x154]
mov eax, esi
call fcn.00457a10
test al, al
jne 0x4b22ef
call fcn.0040348c
jmp 0x4b2954
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24c]
mov dl, 1
call fcn.00422734
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov dl, 1
call fcn.00422734
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0xc]
call fcn.00458a00
mov dword [0x4bf5e0], eax
lea edx, [ebp - 0x1c]
mov eax, dword [0x4bc230]
call fcn.00404c9c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x258]
call fcn.00422808
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x258]
mov dl, 1
call fcn.00422734
cmp dword [0x4bf5fc], 0
jne 0x4b239a
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x494ffc]
call fcn.0042db64
mov dword [0x4bf5fc], eax
mov eax, dword [0x4bf5fc]
mov edx, dword [0x4bf5d4]
sub edx, dword [eax + 0x38]
mov eax, dword [0x4bf5fc]
call fcn.00422204
mov eax, dword [0x4bf5fc]
mov edx, dword [0x4bf5d8]
sub edx, dword [eax + 0x3c]
mov eax, dword [0x4bf5fc]
call fcn.00422224
mov eax, dword [0x4bf5e0]
push eax
mov eax, dword [0x4bf5fc]
call fcn.0042644c
push eax
call sub.user32.dll_SetMenu
lea edx, [ebp - 0x54]
mov eax, esi
call fcn.004606b4
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 0x1c]
mov edx, 0x4b2aa8
call fcn.00403c5c
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x4bf5fc]
call fcn.00422808
mov eax, dword [0x4bf5fc]
call fcn.00430b7c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1dc]
mov edx, dword [eax]
call dword [edx + 0x78]
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2a58
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2abc
call fcn.00403d20
jne 0x4b255a
cmp dword [0x4bf600], 0
jne 0x4b249a
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4a99d0]
call fcn.0042db64
mov dword [0x4bf600], eax
mov edx, dword [0x4bf5d4]
mov eax, dword [0x4bf600]
call fcn.00422204
mov edx, dword [0x4bf5d8]
mov eax, dword [0x4bf600]
call fcn.00422224
jmp 0x4b24a4
mov eax, dword [0x4bf600]
xor edx, edx
mov dword [eax + 0xc], edx
lea edx, [ebp - 0x54]
mov eax, esi
call fcn.004606b4
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 0x1c]
mov edx, 0x4b2acc
call fcn.00403c5c
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x4bf600]
call fcn.00422808
mov eax, dword [0x4bf600]
call fcn.00430b7c
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004b0684
test al, al
je 0x4b2501
lea edx, [ebp - 0x1c]
mov eax, dword [0x4bc2d8]
call fcn.00404c9c
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x258]
call fcn.00422808
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2a58
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2ae0
call fcn.00403d20
jne 0x4b2600
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x154]
mov eax, esi
call fcn.00455b04
test al, al
je 0x4b25a7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24c]
mov dl, 1
call fcn.00422734
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov dl, 1
call fcn.00422734
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2a58
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [ebp - 8]
mov edx, 0x4b2af8
call fcn.00403d20
jne 0x4b26b4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [eax + 0x154]
mov eax, esi
call fcn.00458400
test al, al
je 0x4b26b4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24c]
mov dl, 1
call fcn.00422734
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov dl, 1
call fcn.00422734
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004b8b78
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc2a8]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x68], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x60], 0xb
mov eax, 0x4b2b08
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x58], 0xb
lea edx, [ebp - 0x6c]
mov ecx, 2
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov eax, dword [esi + 0xc]
cmp word [eax], 0x4d42
jne 0x4b26ea
mov edx, eax
add edx, 0xe
cmp word [edx], 0x28
jne 0x4b26ea
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b18
call fcn.004039e8
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004adb38
jmp 0x4b28d5
mov edx, dword [eax]
cmp edx, 0x38464947
jne 0x4b2715
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b28
call fcn.004039e8
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004adf94
jmp 0x4b28d5
cmp edx, 0xe0ffd8ff
jne 0x4b273e
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b38
call fcn.004039e8
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ae0e8
jmp 0x4b28d5
cmp edx, 0x474e5089
jne 0x4b2767
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b48
call fcn.004039e8
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ae230
jmp 0x4b28d5
mov edx, dword [esi + 0xc]
mov eax, dword [edx]
cmp eax, 0x46464952
je 0x4b277e
cmp eax, 0x6468544d
jne 0x4b2879
mov eax, edx
cmp dword [eax], 0x6468544d
jne 0x4b279c
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b58
call fcn.004039e8
jmp 0x4b27d7
add eax, 8
mov edx, dword [eax]
cmp edx, 0x20495641
jne 0x4b27bd
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b68
call fcn.004039e8
jmp 0x4b27d7
cmp edx, 0x45564157
jne 0x4b27d7
mov eax, dword [ebp - 4]
add eax, 0x360
mov edx, 0x4b2b78
call fcn.004039e8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
mov edx, 0x4b2b58
call fcn.00403d20
je 0x4b2816
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
mov edx, 0x4b2b68
call fcn.00403d20
je 0x4b2816
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
mov edx, 0x4b2b78
call fcn.00403d20
jne 0x4b2825
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004adc4c
jmp 0x4b28d5
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ad070
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc220]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x78], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x70], 0xb
lea edx, [ebp - 0x7c]
mov ecx, 1
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
jmp 0x4b28d5
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004ad070
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x54]
mov eax, dword [0x4bc220]
call fcn.00404c9c
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x78], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x70], 0xb
lea edx, [ebp - 0x7c]
mov ecx, 1
pop eax
call fcn.00407db4
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1fc]
call fcn.00429e8c
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004b8b78
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x90]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
xor edx, edx
call fcn.004382a8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x254]
xor edx, edx
call fcn.00422770
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b2954
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
xor ecx, ecx
mov edx, 0xcd
call fcn.00422f88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x230]
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x128], edx
mov edx, dword [ebp - 0x14]
mov dword [eax + 0x12c], edx
call fcn.00422c58
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b2986
lea eax, [ebp - 0x54]
call fcn.00403994
lea eax, [ebp - 0x1c]
call fcn.00403994
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.004039b8
ret