Function at 0x49fe90
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1f
push 0
push 0
dec ecx
jne 0x49fe99
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404928
mov ebx, 0x4ba020
xor eax, eax
push ebp
push 0x4a162a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
call fcn.00404488
lea eax, [ebp - 0x18]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1640
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a164c
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x1c]
mov eax, esi
pop ecx
call fcn.0040478c
mov edx, dword [ebp - 8]
mov eax, 0x4a1658
call fcn.00404a7c
test eax, eax
jne 0x49ff65
mov edx, dword [ebp - 8]
mov eax, 0x4a1664
call fcn.00404a7c
test eax, eax
jne 0x49ff65
mov edx, dword [ebp - 8]
mov eax, 0x4a1670
call fcn.00404a7c
test eax, eax
jne 0x49ff65
mov edx, dword [ebp - 8]
mov eax, 0x4a167c
call fcn.00404a7c
test eax, eax
je 0x49ff74
mov eax, esi
mov edx, dword [ebp - 8]
call fcn.004044dc
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1688
call fcn.00404a7c
test eax, eax
je 0x49ff96
mov eax, esi
mov edx, 0x4a1694
call fcn.004044dc
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a16a8
call fcn.00404a7c
test eax, eax
je 0x49ffbe
mov eax, esi
mov ecx, 0x4a164c
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
lea eax, [ebp - 0x20]
push eax
mov ecx, 9
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov eax, dword [ebp - 0x20]
mov edx, 0x4a1694
call fcn.00404884
jne 0x4a006f
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a16b4
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov edi, dword [eax]
call dword [edi]
cmp dword [ebp - 0xc], 0
jne 0x4a0019
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a1694
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov edx, 0xa
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
call fcn.00404884
jne 0x4a0058
mov eax, esi
mov ecx, 0x4a164c
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov eax, esi
mov ecx, 0x4a1640
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a16c8
call fcn.00404a7c
test eax, eax
je 0x4a00d7
mov edx, dword [ebp - 8]
mov eax, 0x4a16d8
call fcn.00404a7c
test eax, eax
je 0x4a00d7
mov edx, dword [ebp - 8]
mov eax, 0x4a16e4
call fcn.00404a7c
test eax, eax
jne 0x4a00d7
lea eax, [ebp - 0x28]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a164c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x28]
mov eax, esi
mov ecx, 0x4a16f0
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1704
call fcn.00404a7c
test eax, eax
je 0x4a0166
mov edx, dword [ebp - 8]
mov eax, 0x4a16e4
call fcn.00404a7c
test eax, eax
jne 0x4a0166
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a164c
call fcn.00404a7c
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push 0x4b9fe4
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [0x4b85cc]
mov eax, dword [eax]
mov edx, dword [0x4b9fe4]
call fcn.0047431c
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.004b1034
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1720
call fcn.00404a7c
test eax, eax
je 0x4a0240
mov edx, dword [ebp - 8]
mov eax, 0x4a1730
call fcn.00404a7c
test eax, eax
je 0x4a01c1
lea eax, [ebp - 0x2c]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1730
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x2c]
mov eax, esi
mov ecx, 0x4a173c
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1748
call fcn.00404a7c
test eax, eax
je 0x4a0207
lea eax, [ebp - 0x30]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1748
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x30]
mov eax, esi
mov ecx, 0x4a164c
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a164c
call fcn.00404a7c
test eax, eax
je 0x4a022f
mov eax, esi
mov ecx, 0x4a1640
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov eax, esi
mov edx, 0x4a1754
call fcn.004044dc
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1778
call fcn.00404a7c
test eax, eax
je 0x4a0277
mov eax, 0x4b9fcc
mov edx, 0x4a178c
call fcn.004044dc
mov eax, esi
mov ecx, 0x4a179c
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a17b4
call fcn.00404a7c
test eax, eax
je 0x4a02ae
mov eax, 0x4b9fcc
mov edx, 0x4a17c8
call fcn.004044dc
mov eax, esi
mov ecx, 0x4a179c
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a17d4
call fcn.00404a7c
test eax, eax
je 0x4a0332
push 0x4ba040
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [0x4ba040]
push eax
mov ecx, 0x4a17e4
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
lea eax, [ebp - 0x34]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1748
call fcn.00404a7c
mov edx, eax
mov ecx, 9
mov eax, dword [ebp - 8]
call fcn.00404998
mov ecx, dword [ebp - 0x34]
mov eax, esi
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a17f8
call fcn.00404a7c
test eax, eax
je 0x4a03dd
mov edx, dword [ebp - 8]
mov eax, 0x4a1808
call fcn.00404a7c
test eax, eax
je 0x4a03dd
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
test eax, eax
jne 0x4a039d
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x4a03c3
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x4a16b4
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a17f8
call fcn.00404a7c
test eax, eax
je 0x4a0488
mov edx, dword [ebp - 8]
mov eax, 0x4a1814
call fcn.00404a7c
test eax, eax
je 0x4a0488
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
test eax, eax
jne 0x4a0448
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x4a046e
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x4a1694
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1820
call fcn.00404a7c
test eax, eax
je 0x4a04c2
mov edx, dword [ebp - 8]
mov eax, 0x4a1808
call fcn.00404a7c
test eax, eax
je 0x4a04c2
push 0
mov ecx, 0x4a16b4
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1820
call fcn.00404a7c
test eax, eax
je 0x4a04fc
mov edx, dword [ebp - 8]
mov eax, 0x4a1814
call fcn.00404a7c
test eax, eax
je 0x4a04fc
push 0
mov ecx, 0x4a1694
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1834
call fcn.00404a7c
test eax, eax
je 0x4a05ae
mov edx, dword [ebp - 8]
mov eax, 0x4a1844
call fcn.00404a7c
test eax, eax
je 0x4a05ae
lea eax, [ebp - 0x38]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1854
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x38]
mov eax, esi
mov ecx, 0x4a1860
call fcn.0040478c
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1844
call fcn.00404a7c
add eax, 5
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
mov edx, 0x4a1870
call fcn.00404884
jne 0x4a0594
lea eax, [ebp - 8]
call fcn.00404488
mov eax, dword [ebp - 8]
push eax
mov ecx, 0x4a187c
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a188c
call fcn.00404a7c
test eax, eax
je 0x4a0661
push 0x4b9fcc
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 4
mov eax, dword [ebp - 8]
call fcn.00404998
lea eax, [ebp - 0x3c]
mov edx, dword [0x4b9fcc]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x40]
call fcn.00402eb4
lea eax, [ebp - 0x44]
mov edx, dword [0x4b9fcc]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x40]
mov cl, 2
call fcn.00402e84
lea edx, [ebp - 0x40]
mov eax, 0x4b9fcc
call fcn.004046e4
lea eax, [ebp - 0x48]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1854
call fcn.00404a7c
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x48]
mov eax, esi
mov ecx, 0x4a1860
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a18a0
call fcn.00404a7c
test eax, eax
je 0x4a06e1
push 0x4b9fcc
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
mov edx, eax
inc edx
mov ecx, 4
mov eax, dword [ebp - 8]
call fcn.00404998
lea eax, [ebp - 0x3c]
mov edx, dword [0x4b9fcc]
mov dl, byte [edx]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x40]
call fcn.00402eb4
lea eax, [ebp - 0x44]
mov edx, dword [0x4b9fcc]
mov dl, byte [edx + 3]
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x40]
mov cl, 2
call fcn.00402e84
lea edx, [ebp - 0x40]
mov eax, 0x4b9fcc
call fcn.004046e4
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a18b4
call fcn.00404a7c
test eax, eax
je 0x4a0765
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0x4c]
mov ecx, 0x4a18c8
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a18d4
call fcn.00404a7c
test eax, eax
je 0x4a079b
push 0
lea eax, [ebp - 0x50]
mov ecx, 0x4a18c8
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a18ec
call fcn.00404a7c
test eax, eax
je 0x4a07f2
mov edx, dword [ebp - 8]
mov eax, 0x4a16e4
call fcn.00404a7c
test eax, eax
jne 0x4a07f2
lea eax, [ebp - 0x54]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a164c
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404998
mov edx, dword [ebp - 0x54]
mov eax, esi
mov ecx, 0x4a18fc
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a190c
call fcn.00404a7c
test eax, eax
je 0x4a09a2
push 0x4b9fc8
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [0x4b9fc8]
mov eax, 0x4a1714
call fcn.00404a7c
test eax, eax
je 0x4a086a
lea eax, [ebp - 0x14]
push eax
mov edx, dword [0x4b9fc8]
mov eax, 0x4a1714
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4b9fc8]
call fcn.00404998
jmp 0x4a0878
lea eax, [ebp - 0x14]
mov edx, dword [0x4b9fc8]
call fcn.00404520
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
call fcn.00404a7c
test eax, eax
jne 0x4a08d3
push dword [ebp - 0xc]
push dword [0x4b9fc8]
push 0x4a1924
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
push 0x4b9fc8
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov edx, dword [0x4b9fc8]
mov eax, 0x4a1714
call fcn.00404a7c
test eax, eax
je 0x4a0936
lea eax, [ebp - 0x14]
push eax
mov edx, dword [0x4b9fc8]
mov eax, 0x4a1714
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4b9fc8]
call fcn.00404998
jmp 0x4a0944
lea eax, [ebp - 0x14]
mov edx, dword [0x4b9fc8]
call fcn.00404520
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
call fcn.00404a7c
test eax, eax
jne 0x4a15ff
push dword [ebp - 0xc]
push dword [0x4b9fc8]
push 0x4a1924
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1930
call fcn.00404a7c
test eax, eax
je 0x4a0a9e
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push 0x4b9fc8
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [0x4b9fc8]
mov eax, dword [ebp - 4]
call fcn.004a20d4
lea ecx, [ebp - 0x5c]
mov edx, dword [0x4b9fc8]
mov eax, dword [ebp - 4]
call fcn.004a1ef0
push 0
mov ecx, dword [0x4b9fc8]
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [0x4b9fc8]
mov eax, dword [ebp - 4]
call fcn.004a21f8
push 0
mov ecx, dword [0x4b9fc8]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1948
call fcn.00404a7c
test eax, eax
je 0x4a0cf8
mov edx, dword [ebp - 8]
mov eax, 0x4a1958
call fcn.00404a7c
test eax, eax
je 0x4a0cf8
mov edx, dword [ebp - 8]
mov eax, 0x4a1968
call fcn.00404a7c
test eax, eax
je 0x4a0cf8
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a1844
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4a1844
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
push 0x4b9fc8
mov edx, dword [ebp - 8]
mov eax, 0x4a1844
call fcn.00404a7c
add eax, 5
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
cmp dword [0x4b9fc8], 0
je 0x4a15ff
mov edx, dword [0x4b9fc8]
mov eax, 0x4a1714
call fcn.00404a7c
test eax, eax
je 0x4a0b7d
push 0x4b9fc8
mov edx, dword [0x4b9fc8]
mov eax, 0x4a1714
call fcn.00404a7c
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [0x4b9fc8]
call fcn.00404998
mov edx, dword [ebp - 0x10]
mov eax, dword [0x4b9fc8]
call fcn.00404a7c
test eax, eax
jne 0x4a0bd3
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4b9fc8]
call fcn.00404a7c
test eax, eax
je 0x4a15ff
push dword [ebp - 0x10]
push dword [0x4b9fc8]
push 0x4a1924
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 0x10]
push eax
mov ecx, 0x4a1844
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x68]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004a231c
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [0x4b9fc8]
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
push dword [ebp - 0xc]
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a1924
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [0x4b9fc8]
mov edx, 0x4a1844
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [0x4b9fc8]
push eax
lea eax, [ebp - 0x6c]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x74]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0x74]
lea ecx, [ebp - 0x70]
mov eax, dword [ebp - 4]
call fcn.004a25f4
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [0x4b9fc8]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
push dword [ebp - 0xc]
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a1924
lea eax, [ebp - 0xc]
mov edx, 4
call fcn.00404800
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [0x4b9fc8]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [0x4b9fc8]
push eax
lea eax, [ebp - 0x78]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1978
call fcn.00404a7c
test eax, eax
je 0x4a0d3d
mov edx, dword [ebp - 8]
mov eax, 0x4a1958
call fcn.00404a7c
test eax, eax
je 0x4a0d3d
lea eax, [ebp - 0x80]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0x80]
lea ecx, [ebp - 0x7c]
mov eax, dword [ebp - 4]
call fcn.004a231c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1948
call fcn.00404a7c
test eax, eax
je 0x4a0e7d
mov edx, dword [ebp - 8]
mov eax, 0x4a198c
call fcn.00404a7c
test eax, eax
je 0x4a0e7d
push 0x4a19a0
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19ac
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
lea eax, [ebp - 0x8c]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x88]
mov eax, dword [ebp - 4]
call fcn.004a231c
lea eax, [ebp - 0x94]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
mov eax, dword [ebp - 4]
call fcn.004a25f4
push 0x4a19bc
lea eax, [ebp - 0x98]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
push 0
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19cc
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 4]
push 0x4a19dc
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19e8
lea eax, [ebp - 0xa0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1a00
call fcn.00404a7c
test eax, eax
je 0x4a0f29
mov edx, dword [ebp - 8]
mov eax, 0x4a198c
call fcn.00404a7c
test eax, eax
je 0x4a0f29
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19ac
lea eax, [ebp - 0xa4]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi + 0x50]
lea eax, [ebp - 0xac]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0xac]
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 4]
call fcn.004a231c
lea eax, [ebp - 0xb4]
mov ecx, dword [0x4b9fcc]
mov edx, dword [ebx]
call fcn.0040478c
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0xb0]
mov eax, dword [ebp - 4]
call fcn.004a25f4
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1948
call fcn.00404a7c
test eax, eax
je 0x4a1029
mov edx, dword [ebp - 8]
mov eax, 0x4a19e8
call fcn.00404a7c
test eax, eax
je 0x4a1029
mov edx, dword [ebp - 8]
mov eax, 0x4a1a14
call fcn.00404a7c
test eax, eax
je 0x4a1029
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1844
call fcn.00404a7c
add eax, 5
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
mov edx, 0x4a19dc
call fcn.00404884
je 0x4a0ff1
push 0
lea eax, [ebp - 0xb8]
push eax
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19e8
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov esi, dword [eax]
call dword [esi]
push dword [ebp - 0xb8]
push dword [ebp - 8]
push 0x4a1a24
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404800
mov eax, dword [ebp - 8]
push eax
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19e8
lea eax, [ebp - 0xc0]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1a00
call fcn.00404a7c
test eax, eax
je 0x4a107f
mov edx, dword [ebp - 8]
mov eax, 0x4a19e8
call fcn.00404a7c
test eax, eax
je 0x4a107f
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19e8
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1948
call fcn.00404a7c
test eax, eax
je 0x4a10eb
mov edx, dword [ebp - 8]
mov eax, 0x4a1a30
call fcn.00404a7c
test eax, eax
je 0x4a10eb
mov edx, dword [ebp - 8]
mov eax, 0x4a19cc
call fcn.00404a7c
test eax, eax
je 0x4a10eb
push 0x4a19a0
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19cc
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1a00
call fcn.00404a7c
test eax, eax
je 0x4a1152
mov edx, dword [ebp - 8]
mov eax, 0x4a1a30
call fcn.00404a7c
test eax, eax
je 0x4a1152
mov edx, dword [ebp - 8]
mov eax, 0x4a19cc
call fcn.00404a7c
test eax, eax
je 0x4a1152
push dword [ebx]
push dword [0x4b9fcc]
push 0x4a19cc
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00404800
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 0x50]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1a48
call fcn.00404a7c
test eax, eax
je 0x4a1195
push 0x4a19a0
lea eax, [ebp - 0xd0]
mov ecx, 0x4a1a5c
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1a68
call fcn.00404a7c
test eax, eax
je 0x4a11d8
push 0x4a1a7c
lea eax, [ebp - 0xd4]
mov ecx, 0x4a1a5c
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1a88
call fcn.00404a7c
test eax, eax
je 0x4a1275
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049f5e4
test eax, eax
je 0x4a1275
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0xd8]
mov ecx, 0x4a1a9c
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1aa8
call fcn.00404a7c
test eax, eax
je 0x4a12b1
push 0
lea eax, [ebp - 0xdc]
mov ecx, 0x4a1a9c
mov edx, dword [ebx]
call fcn.0040478c
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1ac0
call fcn.00404a7c
test eax, eax
je 0x4a12f4
push 0x4a1ad4
lea eax, [ebp - 0xe0]
mov ecx, 0x4a1ae4
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1af4
call fcn.00404a7c
test eax, eax
je 0x4a1334
push 0
lea eax, [ebp - 0xe4]
mov ecx, 0x4a1ae4
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1b0c
call fcn.00404a7c
test eax, eax
je 0x4a13b7
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
test eax, eax
jne 0x4a1360
lea eax, [ebp - 8]
call fcn.00404488
jmp 0x4a1386
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1714
call fcn.00404a7c
inc eax
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 8]
push eax
lea eax, [ebp - 0xe8]
mov ecx, 0x4a1b20
mov edx, dword [0x4b9fcc]
call fcn.0040478c
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1b30
call fcn.00404a7c
test eax, eax
je 0x4a1410
lea eax, [ebp - 0xec]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1b48
call fcn.00404a7c
add eax, 7
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 0xec]
push eax
mov ecx, 0x4a1b58
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1b6c
call fcn.00404a7c
test eax, eax
je 0x4a1469
lea eax, [ebp - 0xf0]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x4a1b84
call fcn.00404a7c
add eax, 9
push eax
mov eax, dword [ebp - 8]
call fcn.00404740
mov ecx, eax
mov eax, dword [ebp - 8]
pop edx
call fcn.00404998
mov eax, dword [ebp - 0xf0]
push eax
mov ecx, 0x4a1b98
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1bb0
call fcn.00404a7c
test eax, eax
je 0x4a1495
push 0x4a1bcc
mov ecx, 0x4a1bdc
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1bf0
call fcn.00404a7c
test eax, eax
je 0x4a14c1
push 0x4a1c0c
mov ecx, 0x4a1bdc
mov edx, dword [ebx]
mov eax, dword [0x4b9f80]
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1c1c
call fcn.00404a7c
test eax, eax
je 0x4a14fe
mov eax, dword [0x4b84bc]
mov eax, dword [eax]
mov eax, dword [eax + 0x2f0]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov eax, esi
mov ecx, 0x4a1640
mov edx, dword [0x4ba040]
call fcn.0040478c
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1c2c
call fcn.00404a7c
test eax, eax
jne 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1c40
call fcn.00404a7c
test eax, eax
jne 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1c54
call fcn.00404a7c
test eax, eax
jne 0x4a154a
mov edx, dword [ebp - 8]
mov eax, 0x4a1c68
call fcn.00404a7c
test eax, eax
je 0x4a1597
push 0
lea eax, [ebp - 0xf4]
mov ecx, 0x4a1c74
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0xf4]
call fcn.00404938
push eax
lea eax, [ebp - 0xf8]
mov ecx, 0x4a1c88
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0xf8]
call fcn.00404938
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x4a15ff
mov edx, dword [ebp - 8]
mov eax, 0x4a1c98
call fcn.00404a7c
test eax, eax
je 0x4a15f5
push 0
lea eax, [ebp - 0xfc]
mov ecx, 0x4a1c88
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0xfc]
call fcn.00404938
push eax
lea eax, [ebp - 0x100]
mov ecx, 0x4a1c74
mov edx, dword [0x4ba014]
call fcn.0040478c
mov eax, dword [ebp - 0x100]
call fcn.00404938
push eax
call sub.kernel32.dll_CopyFileA
jmp 0x4a15ff
mov eax, esi
mov edx, dword [ebp - 8]
call fcn.004044dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a1631
lea eax, [ebp - 0x100]
mov edx, 0x2f
call fcn.004044ac
lea eax, [ebp - 0x38]
mov edx, 0xd
call fcn.004044ac
ret