Function at 0x4d9db0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59c293
mov eax, dword fs:[0]
push eax
sub esp, 0x238
mov eax, dword [0x6121d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 4], 0
push 0x61d124
mov dword [ebp - 0x18c], 0x61d124
call fcn.00545d61
add esp, 4
test eax, eax
je 0x4d9e12
push eax
call fcn.0054581a
add esp, 4
mov byte [ebp - 0x188], 1
mov dword [ebp - 0xfc], 0
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0xfc], 0
mov dword [ebp - 0x100], 5
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xb8], 3
call fcn.004ad8c0
push str.PROGRAMDATA
call fcn.00580c50
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.004e0eb0
push 0x5ec670
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xac]
call fcn.004b58f0
add esp, 8
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4d9ea0
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
mov dword [ebp - 0x140], 0
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x140], 0
mov dword [ebp - 0x144], 5
push 0
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0x148]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xac]
call fcn.0051b8f0
add esp, 0xc
test eax, eax
js 0x4da212
mov eax, dword [ebp - 0x144]
cmp eax, 3
jne 0x4d9f12
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
jmp 0x4d9f24
cmp eax, 2
jne 0x4d9f22
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 8]
jmp 0x4d9f24
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0xb4], eax
test eax, eax
jle 0x4da212
nop dword [eax]
nop dword [eax + eax]
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
push ebx
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x148]
call fcn.004addb0
mov edi, eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0x40]
mov ecx, dword [edi]
push eax
mov esi, dword [ecx + 0x130]
mov ecx, esi
call dword [0x5aa43c]
mov ecx, edi
call esi
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
call fcn.004adb30
push ecx
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 7
call fcn.004defa0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x234]
cmovae eax, dword [ebp - 0x40]
sub esp, 8
push eax
call fcn.004e03c0
test eax, eax
mov eax, dword [ebp - 0x244]
push 0
mov eax, dword [eax + 4]
jne 0x4d9ffd
lea edx, [ebp - 0x244]
add edx, eax
mov ecx, dword [edx + 0xc]
or ecx, 2
mov eax, ecx
or eax, 4
cmp dword [edx + 0x38], 0
cmovne eax, ecx
mov ecx, edx
jmp 0x4da012
lea ecx, [ebp - 0x244]
xor edx, edx
add ecx, eax
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
push eax
call fcn.004baf20
push 0
push 0x5dc6ad
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
call fcn.004b28d0
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x244]
call fcn.004e1010
lea ecx, [ebp - 0x234]
call fcn.004e0300
test eax, eax
jne 0x4da087
mov eax, dword [ebp - 0x244]
lea edx, [ebp - 0x244]
push 0
mov eax, dword [eax + 4]
add edx, eax
mov ecx, dword [edx + 0xc]
or ecx, 2
mov eax, ecx
or eax, 4
cmp dword [edx + 0x38], 0
cmovne eax, ecx
mov ecx, edx
push eax
call fcn.004baf20
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd0], vtable.WaJson.0
mov byte [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 5
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.004bcf00
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 8
jb 0x4da0c7
mov eax, dword [eax]
test eax, eax
jne 0x4da0e6
mov eax, dword [ebp - 0xd0]
mov esi, dword [eax + 0x5c]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0xd0]
call esi
jmp 0x4da101
sub esp, 0x18
lea esi, [ebp - 0xd0]
mov ecx, esp
push eax
call fcn.004ab630
mov ecx, esi
call fcn.004b8530
add esp, 0x18
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4da11a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
lea eax, [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0x104]
mov esi, dword [eax + 0x20]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0x104]
call esi
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], vtable.WaJson.0
call fcn.004adb30
mov eax, dword [ebp - 0x44]
cmp eax, 0x10
jb 0x4da168
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004b3ec0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x244]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x248], eax
lea ecx, [ebp - 0x234]
call fcn.004df920
mov eax, dword [ebp - 0x244]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x244]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x248], eax
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0xf
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00545e80
mov eax, dword [ebp - 0x2c]
add esp, 4
cmp eax, 8
jb 0x4da205
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004abec0
inc ebx
cmp ebx, dword [ebp - 0xb4]
jl 0x4d9f40
mov dword [ebp - 0x120], 0
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x120], 0
mov dword [ebp - 0x124], 5
mov dword [ebp - 0x14c], 0
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x14c], 0
mov dword [ebp - 0x150], 5
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x128]
mov dword [ebp - 0xb8], 2
call fcn.004ad8c0
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 2
push eax
lea ecx, [ebp - 0x154]
call fcn.004ad8c0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
call fcn.004c02a0
mov dword [ebp - 0xd8], eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
call fcn.004e0cc0
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x13
call fcn.004d98e0
mov ebx, eax
mov dword [ebp - 0xe8], ebx
test ebx, ebx
je 0x4daf47
push ebx
call fcn.004d9b60
test al, al
je 0x4daf47
push str.oiGetThreatLogEx
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x4da886
lea eax, [ebp - 0x138]
mov ecx, esi
push eax
push 0
push 0
call dword [0x5aa43c]
call esi
add esp, 0xc
test eax, eax
js 0x4da877
mov edi, dword [ebp - 0x138]
test edi, edi
je 0x4da868
mov eax, 0xf2b9d649
xor ecx, ecx
mul edi
shr edx, 0xa
mov eax, edx
mov edx, 0x438
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00541106
add esp, 4
mov ebx, eax
lea eax, [ebp - 0x138]
mov dword [ebp - 0xf8], ebx
mov ecx, esi
push eax
push edi
push ebx
call dword [0x5aa43c]
call esi
add esp, 0xc
test eax, eax
jle 0x4da85f
mov eax, 0xf2b9d649
mul dword [ebp - 0x138]
mov esi, edx
shr esi, 0xa
mov dword [ebp - 0xb8], esi
test esi, esi
jle 0x4da85f
add ebx, 0x424
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd0], vtable.WaJson.0
mov byte [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 5
mov byte [ebp - 4], 0x14
lea eax, [ebx - 0x424]
mov dword [ebp - 0x12c], 0
lea ecx, [ebp - 0x134]
push eax
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x12c], 0
mov dword [ebp - 0x130], 5
call fcn.004b08d0
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x15
push eax
push str.threat_name
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x134]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x14
lea edi, [ebx - 0x21c]
mov dword [ebp - 0x5c], 0
lea ecx, [ebp - 0x64]
push edi
mov dword [ebp - 0x64], vtable.WaJson.0
mov byte [ebp - 0x5c], 0
mov dword [ebp - 0x60], 5
call fcn.004b08d0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x17
push eax
push str.path
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x14
mov eax, dword [ebx + 4]
sub eax, 0x76c
mov dword [ebp - 0x80], eax
mov eax, dword [ebx]
dec eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebx - 4]
mov dword [ebp - 0x88], eax
mov eax, dword [ebx - 8]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebx - 0xc]
mov dword [ebp - 0x90], eax
mov eax, dword [ebx - 0x10]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
call fcn.00579e7c
add esp, 4
mov dword [ebp - 0xdc], 0
mov esi, eax
mov dword [ebp - 0xf4], edx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xe4], vtable.WaJson.0
mov byte [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 5
call fcn.004adb30
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xe0], 1
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x19
push eax
push str.scan_time
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x14
mov eax, dword [ebx + 0xc]
test eax, eax
jne 0x4da5db
mov dword [ebp - 0x108], eax
lea ecx, [ebp - 0x110]
push str.none
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x108], al
mov dword [ebp - 0x10c], 5
call fcn.004b08d0
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x1b
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x110]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
jmp 0x4da693
cmp eax, 1
jne 0x4da621
push 0x5eb784
lea ecx, [ebp - 0xc4]
call fcn.004acb20
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x1d
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
jmp 0x4da693
cmp eax, 0xc
je 0x4da660
cmp eax, 0x70
je 0x4da660
push 0x5ec6d8
lea ecx, [ebp - 0x4c]
call fcn.004acb20
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x21
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], vtable.WaJson.0
jmp 0x4da693
push 0x5eb774
lea ecx, [ebp - 0x34]
call fcn.004acb20
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x1f
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], vtable.WaJson.0
call fcn.004adb30
push edi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.004ab630
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x15c]
lea ecx, [ebp - 0x28]
mov esi, dword [eax + 0x28]
mov byte [ebp - 4], 0x14
call fcn.004ab5f0
push edi
lea ecx, [ebp - 0x28]
call fcn.004ab630
test esi, esi
je 0x4da7a9
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x164]
mov esi, dword [ebp - 0xb4]
mov eax, dword [eax + 0x28]
cdq
cmp edx, dword [ebp - 0xf4]
jg 0x4da726
jl 0x4da71d
cmp eax, esi
jae 0x4da726
mov byte [ebp - 0xad], 1
jmp 0x4da72d
mov byte [ebp - 0xad], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.004ab5f0
cmp byte [ebp - 0xad], 0
je 0x4da829
push edi
lea ecx, [ebp - 0x28]
call fcn.004ab630
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x16c]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
mov dword [eax + 0x28], esi
call fcn.004ab5f0
push edi
lea ecx, [ebp - 0x28]
call fcn.004ab630
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004e1c40
mov edi, dword [ebp - 0x174]
jmp 0x4da807
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x17c]
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0xb4]
mov byte [ebp - 4], 0x14
mov dword [eax + 0x28], esi
call fcn.004ab5f0
push edi
lea ecx, [ebp - 0x28]
call fcn.004ab630
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004e1c40
mov edi, dword [ebp - 0x184]
mov eax, dword [edi + 0x28]
lea ecx, [ebp - 0xd0]
push ecx
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [edi + 0x28]
call esi
lea ecx, [ebp - 0x28]
call fcn.004ab5f0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x13
add ebx, 0x438
sub dword [ebp - 0xb8], 1
jne 0x4da3b4
mov ebx, dword [ebp - 0xf8]
push ebx
call fcn.00541101
add esp, 4
mov dword [ebp - 0xb4], 0
jmp 0x4daf1a
mov dword [ebp - 0xb4], 0xffffffff
jmp 0x4daf1a
push str.oiGetNextThreat
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
mov dword [ebp - 0xf4], ebx
test ebx, ebx
je 0x4daf10
push 0x43c
call fcn.00540e66
add esp, 4
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0xb8], esi
push 0x43c
push esi
push 0
call dword [0x5aa43c]
call ebx
add esp, 0xc
cmp eax, 1
jne 0x4daf06
lea ebx, [esi + 0x208]
nop dword [eax + eax]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd0], vtable.WaJson.0
mov byte [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x108], 0
push esi
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x108], 0
mov dword [ebp - 0x10c], 5
call fcn.004b08d0
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x2b
push eax
push str.threat_name
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x110]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x5c], 0
push ebx
mov dword [ebp - 0x64], vtable.WaJson.0
mov byte [ebp - 0x5c], 0
mov dword [ebp - 0x60], 5
call fcn.004b08d0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x2d
push eax
push str.path
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x2a
mov eax, dword [esi + 0x428]
sub eax, 0x76c
mov dword [ebp - 0x80], eax
mov eax, dword [esi + 0x424]
dec eax
mov dword [ebp - 0x84], eax
mov eax, dword [esi + 0x420]
mov dword [ebp - 0x88], eax
mov eax, dword [esi + 0x41c]
mov dword [ebp - 0x8c], eax
mov eax, dword [esi + 0x418]
mov dword [ebp - 0x90], eax
mov eax, dword [esi + 0x414]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
call fcn.00579e7c
add esp, 4
mov dword [ebp - 0xdc], 0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xf8], edx
mov edi, eax
mov dword [ebp - 0xe4], vtable.WaJson.0
mov byte [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 5
call fcn.004adb30
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe0], 1
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x2f
push eax
push str.scan_time
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x2a
mov eax, dword [esi + 0x430]
test eax, eax
jne 0x4dab0b
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0x134]
push str.none
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
mov byte [ebp - 0x12c], al
mov dword [ebp - 0x130], 5
call fcn.004b08d0
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x31
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x134]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
jmp 0x4dac1d
cmp eax, 1
jne 0x4dab61
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
push 0x5eb784
mov dword [ebp - 0x34], vtable.WaJson.0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x30], 5
call fcn.004b08d0
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x33
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], vtable.WaJson.0
jmp 0x4dac1d
cmp eax, 0xc
je 0x4dabb9
cmp eax, 0x70
je 0x4dabb9
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x4c]
push 0x5ec6d8
mov dword [ebp - 0x4c], vtable.WaJson.0
mov byte [ebp - 0x44], 0
mov dword [ebp - 0x48], 5
call fcn.004b08d0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x37
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], vtable.WaJson.0
jmp 0x4dac1d
mov dword [ebp - 0xbc], 0
lea ecx, [ebp - 0xc4]
push 0x5eb774
mov dword [ebp - 0xc4], vtable.WaJson.0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 5
call fcn.004b08d0
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x35
push eax
push str.remediation
lea ecx, [ebp - 0xd0]
call fcn.004adf50
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x2a
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [ebx], ax
jne 0x4dac43
xor ecx, ecx
jmp 0x4dac5f
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4dac50
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x28]
call fcn.004ab820
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x184]
mov esi, dword [eax + 0x28]
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4daca5
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
test esi, esi
je 0x4dadc4
cmp word [ebx], ax
jne 0x4dacca
xor ecx, ecx
jmp 0x4dacdf
mov ecx, ebx
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4dacd0
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x28]
call fcn.004ab820
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 0x28]
cdq
cmp edx, dword [ebp - 0xf8]
jg 0x4dad24
jl 0x4dad1b
cmp eax, edi
jae 0x4dad24
mov byte [ebp - 0xad], 1
jmp 0x4dad2b
mov byte [ebp - 0xad], 0
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dad44
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
cmp byte [ebp - 0xad], 0
je 0x4daeb8
push ebx
lea ecx, [ebp - 0x28]
call fcn.004ab630
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x174]
mov byte [ebp - 4], 0x2a
mov dword [eax + 0x28], edi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dad96
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
push ebx
lea ecx, [ebp - 0x28]
call fcn.004ab630
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004e1c40
mov edi, dword [ebp - 0x16c]
jmp 0x4dae89
cmp word [ebx], ax
jne 0x4dadcd
xor ecx, ecx
jmp 0x4dade1
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4dadd2
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x28]
call fcn.004ab820
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0xd8]
call fcn.004e1cd0
mov eax, dword [ebp - 0x164]
mov byte [ebp - 4], 0x2a
mov dword [eax + 0x28], edi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dae27
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [ebx], ax
jne 0x4dae44
xor ecx, ecx
jmp 0x4dae5f
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4dae50
sub ecx, edx
sar ecx, 1
push ecx
push ebx
lea ecx, [ebp - 0x28]
call fcn.004ab820
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004e1c40
mov edi, dword [ebp - 0x15c]
mov eax, dword [edi + 0x28]
lea ecx, [ebp - 0xd0]
push ecx
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [edi + 0x28]
call esi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4daeb8
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
mov edi, dword [ebp - 0xb8]
mov esi, dword [edi + 0x438]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], vtable.WaJson.0
call fcn.004adb30
push 0x43c
push edi
mov byte [ebp - 4], 0x13
push esi
mov esi, dword [ebp - 0xf4]
mov ecx, esi
call dword [0x5aa43c]
call esi
add esp, 0xc
mov esi, edi
cmp eax, 1
je 0x4da8e0
xor eax, eax
mov dword [ebp - 0xb4], eax
jmp 0x4daf1a
mov dword [ebp - 0xb4], 0xffffffe5
mov edi, dword [ebp - 0xe8]
push str.FinalizeClientPipe
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x4daf40
mov ecx, esi
call dword [0x5aa43c]
call esi
test al, al
jne 0x4daf54
mov ebx, 0xffffffe5
jmp 0x4daf5a
mov edi, dword [ebp - 0xe8]
mov ebx, 0xffffffe5
jmp 0x4daf5a
mov ebx, dword [ebp - 0xb4]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
or ecx, 0xffffffff
test eax, eax
cmove ebx, ecx
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0xb4], ebx
call fcn.004dee20
mov eax, dword [ebp - 0xf0]
mov esi, dword [eax]
mov dword [ebp - 0xb8], esi
cmp esi, eax
je 0x4db0f3
nop dword [eax + eax]
mov eax, dword [esi + 0x28]
lea ecx, [ebp - 0xf8]
push ecx
push str.scan_time
mov edi, dword [eax + 0x9c]
mov ecx, edi
call dword [0x5aa43c]
lea ecx, [esi + 0x28]
call edi
mov edx, dword [ebp - 0xf8]
lea ecx, [ebp - 0x28]
call fcn.00520640
mov byte [ebp - 4], 0x40
cmp dword [eax + 0x14], 8
jb 0x4dafdc
mov eax, dword [eax]
mov dword [ebp - 0xbc], 0
lea ecx, [ebp - 0xc4]
push eax
mov dword [ebp - 0xc4], vtable.WaJson.0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 5
call fcn.004b08d0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xc4]
mov eax, dword [esi + 0x28]
push ecx
push str.scan_time
mov edi, dword [eax + 0x80]
mov ecx, edi
call dword [0x5aa43c]
lea ecx, [esi + 0x28]
call edi
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db065
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
cmp dword [ebp - 0x100], 3
je 0x4db098
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 3
push eax
mov eax, dword [ebp - 0x104]
mov edi, dword [eax + 0x48]
mov ecx, edi
call dword [0x5aa43c]
lea ecx, [ebp - 0x104]
call edi
mov edi, dword [ebp - 0xfc]
mov eax, dword [edi + 4]
cmp eax, dword [edi + 8]
jne 0x4db0ae
push ecx
mov ecx, edi
call fcn.004b5e90
mov ecx, dword [edi + 4]
add esi, 0x28
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0xe8], ecx
mov byte [ebp - 4], 0x43
test ecx, ecx
je 0x4db0ce
push esi
call fcn.004aca50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xb8]
add dword [edi + 4], 0xc
call fcn.004c8f00
mov esi, dword [ebp - 0xb8]
cmp esi, dword [ebp - 0xf0]
jne 0x4dafa0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xd8]
mov eax, dword [ebp - 0xd8]
push dword [eax + 4]
call fcn.004b4ec0
mov eax, dword [ebp - 0xd8]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0xd8]
mov dword [eax], eax
mov eax, dword [ebp - 0xd8]
mov dword [eax + 8], eax
mov dword [ebp - 0xd4], 0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
push dword [eax + 4]
call fcn.004dff80
mov eax, dword [ebp - 0xf0]
xor edi, edi
mov byte [ebp - 0xad], 1
xor ebx, ebx
mov dword [eax + 4], eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], eax
mov eax, dword [ebp - 0xf0]
mov byte [ebp - 4], 0x13
mov dword [ebp - 0xe8], edi
mov dword [eax + 8], eax
mov dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x100]
cmp eax, 3
jne 0x4db1a8
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
jmp 0x4db1ba
cmp eax, 2
jne 0x4db1b8
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax + 8]
jmp 0x4db1ba
xor eax, eax
cmp ebx, eax
jae 0x4db419
push 1
xor eax, eax
mov dword [ebp - 0x5c], 7
push str.0123:
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
call fcn.004ab820
push ebx
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x104]
call fcn.004addb0
mov edi, eax
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x70]
mov ecx, dword [edi]
push eax
push str.scan_time
mov esi, dword [ecx + 0xa4]
mov ecx, esi
call dword [0x5aa43c]
mov ecx, edi
call esi
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
call fcn.004adb30
xor eax, eax
mov byte [ebp - 4], 0x46
push 0xffffffffffffffff
push eax
mov word [ebp - 0x11c], ax
lea ecx, [ebp - 0x11c]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x108], 7
push eax
mov dword [ebp - 0x10c], 0
call fcn.004abb60
cmp dword [ebp - 0x108], 8
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
call fcn.00580cac
mov ecx, dword [ebp - 0x108]
add esp, 4
mov esi, eax
cmp ecx, 8
jb 0x4db2a8
inc ecx
push ecx
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x11c]
call fcn.004abec0
cmp esi, dword [ebp - 0xe8]
jle 0x4db320
xor eax, eax
mov dword [ebp - 0x108], 7
push 0xffffffffffffffff
push eax
mov word [ebp - 0x11c], ax
lea ecx, [ebp - 0x11c]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x10c], 0
push eax
call fcn.004abb60
cmp dword [ebp - 0x108], 8
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
call fcn.00580cac
mov dword [ebp - 0xe8], eax
add esp, 4
mov eax, dword [ebp - 0x108]
cmp eax, 8
jb 0x4db320
inc eax
lea ecx, [ebp - 0x11c]
push eax
push dword [ebp - 0x11c]
call fcn.004abec0
xor eax, eax
mov dword [ebp - 0x2c], 7
push eax
push 0x5e91b4
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.004ab820
push ebx
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x104]
call fcn.004addb0
mov edi, eax
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x40]
mov ecx, dword [edi]
push eax
push str.remediation
mov esi, dword [ecx + 0xa4]
mov ecx, esi
call dword [0x5aa43c]
mov ecx, edi
call esi
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], vtable.WaJson.0
call fcn.004adb30
mov esi, dword [ebp - 0x2c]
lea ecx, [ebp - 0x40]
mov edi, dword [ebp - 0x40]
cmp esi, 8
mov edx, dword [ebp - 0x30]
push 4
cmovae ecx, edi
push str.none
call fcn.004b27f0
add esp, 8
test eax, eax
je 0x4db3cd
cmp esi, 8
lea ecx, [ebp - 0x40]
push 7
cmovae ecx, edi
push 0x5ec6d8
call fcn.004b27f0
add esp, 8
test eax, eax
jne 0x4db3d4
mov byte [ebp - 0xad], 0
cmp esi, 8
jb 0x4db3e6
lea eax, [esi + 1]
push eax
push edi
lea ecx, [ebp - 0x40]
call fcn.004abec0
xor eax, eax
mov byte [ebp - 4], 0x13
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4db413
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004abec0
inc ebx
jmp 0x4db180
mov dword [ebp - 0xdc], 0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], vtable.WaJson.0
mov byte [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 5
call fcn.004adb30
mov al, byte [ebp - 0xad]
mov byte [ebp - 0xdc], al
mov dword [ebp - 0xe0], 4
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x28]
push 0xa
xor eax, eax
mov dword [ebp - 0x14], 7
push str.no_threats
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.004ab820
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x128]
mov esi, dword [eax + 0x78]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0x128]
call esi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db4c3
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x13
mov edi, dword [ebp - 0xe8]
test edi, edi
je 0x4db5d4
mov edx, edi
lea ecx, [ebp - 0x58]
call fcn.00520640
mov byte [ebp - 4], 0x4f
cmp dword [eax + 0x14], 8
jb 0x4db504
mov eax, dword [eax]
mov dword [ebp - 0xbc], 0
lea ecx, [ebp - 0xc4]
push eax
mov dword [ebp - 0xc4], vtable.WaJson.0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 5
call fcn.004b08d0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x28]
push 0x10
xor eax, eax
mov dword [ebp - 0x14], 7
push str.last_threat_time
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.004ab820
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x128]
mov esi, dword [eax + 0x78]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0x128]
call esi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db599
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x44]
cmp eax, 8
jb 0x4db68a
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004abec0
jmp 0x4db68a
mov dword [ebp - 0xbc], 0
lea ecx, [ebp - 0xc4]
push str.0123:
mov dword [ebp - 0xc4], vtable.WaJson.0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 5
call fcn.004b08d0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x28]
push 0x10
xor eax, eax
mov dword [ebp - 0x14], 7
push str.last_threat_time
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.004ab820
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x128]
mov esi, dword [eax + 0x78]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0x128]
call esi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db66d
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x13
push 7
xor eax, eax
mov dword [ebp - 0x14], 7
push str.threats
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.004ab820
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x56
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x128]
mov esi, dword [eax + 0x7c]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0x128]
call esi
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db6ee
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
push 6
xor eax, eax
mov dword [ebp - 0x14], 7
push str.result
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.004ab820
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x154]
mov esi, dword [eax + 0x7c]
mov ecx, esi
call dword [0x5aa43c]
lea ecx, [ebp - 0x154]
call esi
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db752
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x154]
call fcn.004b0b90
mov esi, eax
mov ebx, dword [ebp - 0x13c]
cmp ebx, esi
je 0x4db7a8
cmp dword [ebx + 0x14], 8
jb 0x4db781
mov eax, dword [ebx + 0x14]
mov ecx, ebx
inc eax
push eax
push dword [ebx]
call fcn.004abec0
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x4db799
mov eax, dword [ebx]
jmp 0x4db79b
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
mov ecx, ebx
push esi
call fcn.004ab9d0
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4db7bd
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004abec0
mov eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0xf0]
push eax
push dword [eax]
lea eax, [ebp - 0x13c]
push eax
call fcn.004e0660
push dword [ebp - 0xf0]
call fcn.00407310
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0xd8]
add esp, 4
push eax
push dword [eax]
lea eax, [ebp - 0x13c]
push eax
call fcn.004cb140
push dword [ebp - 0xd8]
call fcn.00407310
add esp, 4
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x154]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x128]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
call fcn.004adb30
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x148]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
call fcn.004adb30
push 0
push 1
lea ecx, [ebp - 0xac]
call fcn.004ab690
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x104]
mov dword [ebp - method.WaJson.virtual_0], vtable.WaJson.0
call fcn.004adb30
lea ecx, [ebp - 0x18c]
call fcn.004b1fb0
mov dword [ebp - 4], 0x5d
lea ecx, [ebp + 8]
mov dword [ebp + 8], vtable.WaJson.0
call fcn.004adb30
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00540c56
mov esp, ebp
pop ebp
ret 0x10