Function at 0x493150
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x5a8]
sub esp, 0x5a8
push 0xffffffffffffffff
push 0x4c94bc
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x51e12c]
xor eax, ebp
mov dword [ebp + 0x5a4], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x84], edi
mov ebx, dword [ebp + 0x5b4]
lea eax, [ebp + 0x10]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x10]
mov dword [ebp + 8], 0x104
push 0x4f5e34
push eax
mov dword [ebp + 0xc], 1
call fcn.0041dc50
add esp, 0x14
lea ecx, [ebp]
mov dword [ebp - 4], 0
push ecx
push 1
push 0
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00416e10
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
test esi, esi
jne 0x493565
lea eax, [ebp - 0x10]
push 0x4f5e70
push eax
call fcn.0041dc50
add esp, 8
lea ecx, [ebp + 8]
mov dword [ebp - 4], 1
push ecx
lea ecx, [ebp + 0x10]
push ecx
lea ecx, [ebp + 0xc]
push ecx
push esi
mov ecx, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
push dword [ebp]
call fcn.004ae470
add esp, 0x18
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov dword [ebp + 0x4c4], 0x30
mov eax, 0x30
mov word [ebp + 0x4c2], ax
mov eax, 0x31
mov word [ebp + 0x4bc], ax
mov edx, 0x73
mov dword [ebp + 0x4be], 0x300030
mov dword [ebp + 0x560], 0x77006f
mov dword [ebp + 0x592], 0x610066
lea ecx, [eax + 0x34]
mov word [ebp + 0x58c], cx
mov eax, 0x6e
mov word [ebp + 0x564], ax
mov eax, 0x67
mov word [ebp + 0x57c], ax
mov eax, 0x76
mov dword [ebp + 0x558], 0x750068
mov ecx, 0x64
mov dword [ebp + 0x570], 0x6f0074
mov word [ebp + 0x556], dx
mov dword [ebp + 0x54e], 0x750020
mov dword [ebp + 0x548], 0x650065
mov dword [ebp + 0x588], 0x630069
mov dword [ebp + 0x566], 0x620020
mov dword [ebp + 0x57e], 0x730020
mov dword [ebp + 0x544], 0x700053
mov dword [ebp + 0x552], 0x200070
mov dword [ebp + 0x58e], 0x200073
mov dword [ebp + 0x582], 0x720065
mov dword [ebp + 0x56a], 0x200079
mov dword [ebp + 0x574], 0x700070
mov dword [ebp + 0x578], 0x6e0069
mov dword [ebp + 0x55c], 0x640074
mov dword [ebp + 0x59c], 0x72
mov dword [ebp + 0x598], 0x650074
mov word [ebp + 0x586], ax
mov word [ebp + 0x596], dx
mov word [ebp + 0x54c], cx
mov word [ebp + 0x56e], dx
test esi, esi
jne 0x493491
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp + 0x4f4]
call fcn.004538a0
lea eax, [ebp + 0x4bc]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp + 0x4f4]
push eax
call fcn.004555c0
add esp, 8
test al, al
je 0x49347a
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x544]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp - 0x10]
push 0x4f5e34
push eax
call fcn.0041dc50
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4f5e70
push eax
call fcn.0041dc50
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x4bc]
push eax
lea ecx, [ebp - 0x38]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov ecx, ebx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x80]
push eax
call fcn.0045d570
lea ecx, [ebp - 0x80]
call fcn.0045d4c0
lea ecx, [ebp + 0x4f4]
mov dword [ebp - 4], 0xffffffff
call fcn.004538e0
jmp 0x49355a
cmp esi, 2
je 0x49349f
cmp esi, 3
jne 0x49355a
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x544]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp - 0x10]
push 0x4f5e34
push eax
call fcn.0041dc50
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 7
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x10]
push 0x4f5e70
push eax
call fcn.0041dc50
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140u.dll_Ordinal_1663]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp + 0x4bc]
push eax
lea ecx, [ebp - 0x38]
call fcn.00455c20
lea eax, [ebp - 0x80]
mov dword [ebp - 0x14], 1
push eax
mov ecx, ebx
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x493579
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
push 0x104
lea eax, [ebp + 0x10]
mov dword [ebp], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, 0x6f
mov dword [ebp + 0xc], 1
mov eax, 0x53
mov dword [ebp + 8], 0x104
mov word [ebp + 0x2bc], ax
mov edx, 0x31
mov word [ebp + 0x2c6], dx
mov edx, 0x45
lea eax, [esi + 3]
mov word [ebp + 0x2a8], dx
mov word [ebp + 0x2d2], ax
lea edi, [esi - 0x13]
mov word [ebp + 0x2b6], ax
mov edx, 0x73
mov eax, 0x74
mov dword [ebp + 0x2da], 0x650053
mov word [ebp + 0x306], ax
mov eax, 0x61
mov word [ebp + 0x2ec], ax
lea eax, [ebp]
push eax
push 1
push 0
lea eax, [ebp + 0x2a0]
mov dword [ebp + 0x30c], 0x73
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x2b8], 0x6c006f
mov dword [ebp + 0x2fa], 0x750053
mov dword [ebp + 0x2ae], 0x6f0043
mov dword [ebp + 0x2c2], 0x300030
mov dword [ebp + 0x2ce], 0x74006e
mov dword [ebp + 0x2c8], 0x43005c
mov dword [ebp + 0x2e0], 0x690073
mov dword [ebp + 0x2e4], 0x6e006f
mov dword [ebp + 0x2a0], 0x590053
mov dword [ebp + 0x2f2], 0x650067
mov dword [ebp + 0x2a4], 0x540053
mov dword [ebp + 0x308], 0x6d0065
mov dword [ebp + 0x302], 0x730079
mov dword [ebp + 0x2b2], 0x74006e
mov dword [ebp + 0x2d4], 0x6c006f
mov dword [ebp + 0x2f6], 0x5c0072
mov dword [ebp + 0x2ee], 0x61006e
mov dword [ebp + 0x2e8], 0x4d0020
mov word [ebp + 0x2cc], si
mov dword [ebp + 0x2aa], 0x5c004d
mov dword [ebp + 0x2fe], 0x530062
mov dword [ebp + 0x2be], 0x740065
mov word [ebp + 0x2de], dx
mov word [ebp + 0x2d8], di
call fcn.00416e10
mov edi, dword [ebp - 0x84]
lea edx, [esi - 0x20]
add esp, 0x24
test eax, eax
jne 0x493a67
lea eax, [ebp + 8]
mov dword [ebp + 0x4c6], 0x6c
push eax
lea eax, [ebp + 0x10]
mov dword [ebp + 0x4be], 0x6f0069
push eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0x4c2], 0x61006e
push eax
push 0
lea eax, [ebp + 0x4b8]
mov dword [ebp + 0x4ba], 0x740070
push eax
push dword [ebp]
mov word [ebp + 0x4b8], dx
call fcn.004ae470
mov ecx, 0x44
mov dword [ebp + 0x584], 0x740073
mov word [ebp + 0x510], cx
mov edx, 0x20
mov ecx, 0x4f
mov word [ebp + 0x57e], dx
mov word [ebp + 0x520], cx
mov edx, 0x61
mov word [ebp + 0x534], cx
mov esi, 0x73
mov ecx, 0x63
mov word [ebp + 0x52a], dx
mov word [ebp + 0x59a], cx
mov edx, 0x20
mov ecx, 0x6c
mov word [ebp + 0x53e], si
mov word [ebp + 0x544], si
add esp, 0x18
mov word [ebp + 0x568], dx
mov esi, 0x6f
mov word [ebp + 0x51a], cx
mov edx, 0x65
xor ecx, ecx
mov dword [ebp + 0x540], 0x620075
mov dword [ebp + 0x53a], 0x200058
mov dword [ebp + 0x516], 0x620061
mov dword [ebp + 0x54a], 0x650074
mov dword [ebp + 0x56a], 0x65006d
mov dword [ebp + 0x51c], 0x200065
mov dword [ebp + 0x57a], 0x64006e
mov dword [ebp + 0x536], 0x490053
mov dword [ebp + 0x596], 0x720075
mov dword [ebp + 0x558], 0x660020
mov dword [ebp + 0x512], 0x730069
mov dword [ebp + 0x530], 0x500020
mov dword [ebp + 0x522], 0x2f0053
mov dword [ebp + 0x55c], 0x650072
mov dword [ebp + 0x588], 0x6d0065
mov dword [ebp + 0x52c], 0x64006e
mov dword [ebp + 0x560], 0x200065
mov dword [ebp + 0x526], 0x200032
mov dword [ebp + 0x592], 0x6f0073
mov dword [ebp + 0x552], 0x740020
mov dword [ebp + 0x580], 0x790073
mov dword [ebp + 0x572], 0x790072
mov dword [ebp + 0x59c], 0x730065
mov dword [ebp + 0x546], 0x730079
mov dword [ebp + 0x54e], 0x73006d
mov dword [ebp + 0x564], 0x700075
mov dword [ebp + 0x58c], 0x720020
mov dword [ebp + 0x56e], 0x6f006d
mov word [ebp + 0x556], si
mov dword [ebp + 0x576], 0x610020
mov word [ebp + 0x590], dx
mov word [ebp + 0x5a0], cx
test eax, eax
jne 0x4939e1
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp + 0x4f4]
call fcn.004538a0
lea eax, [ebp + 0x4f4]
mov dword [ebp - 4], 9
push 0x4dadb0
push eax
call fcn.004555c0
add esp, 8
test al, al
je 0x4939cd
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x510]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x2a0]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x4b8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
push 0x4dadb0
lea ecx, [ebp - 0x38]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov ecx, ebx
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x80]
push eax
call fcn.0045d570
lea ecx, [ebp - 0x80]
call fcn.0045d4c0
lea ecx, [ebp + 0x4f4]
mov dword [ebp - 4], 0xffffffff
call fcn.004538e0
jmp 0x493a5c
cmp eax, 2
je 0x4939eb
cmp eax, 3
jne 0x493a5c
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x510]
mov dword [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x2a0]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x4b8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
push 0x4dadb0
lea ecx, [ebp - 0x38]
call fcn.00455c20
lea eax, [ebp - 0x80]
mov dword [ebp - 0x14], 7
push eax
mov ecx, ebx
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x493a7b
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
xor eax, eax
mov word [ebp + 0x236], si
mov word [ebp + 0x29c], ax
mov edx, 0x5c
mov eax, 0x75
mov word [ebp + 0x24c], si
mov word [ebp + 0x228], ax
mov esi, 0x61
mov eax, 0x74
mov word [ebp + 0x278], dx
mov word [ebp + 0x246], ax
lea ecx, [edx + 9]
mov eax, 0x53
mov word [ebp + 0x26c], si
mov word [ebp + 0x25a], ax
mov edx, 0x72
lea eax, [ebp]
mov dword [ebp], 0
push eax
push 1
push 0
lea eax, [ebp + 0x218]
mov dword [ebp + 0xc], 4
push eax
mov esi, 0x67
mov dword [ebp + 8], 0x104
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x28a], 0x6e0061
mov dword [ebp + 0x292], 0x6d0065
mov dword [ebp + 0x224], 0x43005c
mov dword [ebp + 0x21c], 0x540053
mov dword [ebp + 0x242], 0x650053
mov dword [ebp + 0x232], 0x430074
mov dword [ebp + 0x22a], 0x720072
mov dword [ebp + 0x274], 0x720065
mov dword [ebp + 0x220], 0x4d0045
mov dword [ebp + 0x286], 0x4d0020
mov dword [ebp + 0x298], 0x74006e
mov dword [ebp + 0x248], 0x43005c
mov dword [ebp + 0x27e], 0x6f006d
mov dword [ebp + 0x23e], 0x6c006f
mov dword [ebp + 0x260], 0x690073
mov dword [ebp + 0x26e], 0x61006e
mov dword [ebp + 0x264], 0x6e006f
mov dword [ebp + 0x218], 0x590053
mov dword [ebp + 0x256], 0x5c006c
mov dword [ebp + 0x238], 0x74006e
mov dword [ebp + 0x24e], 0x74006e
mov dword [ebp + 0x282], 0x790072
mov dword [ebp + 0x22e], 0x6e0065
mov dword [ebp + 0x25c], 0x730065
mov dword [ebp + 0x28e], 0x670061
mov dword [ebp + 0x268], 0x4d0020
mov dword [ebp + 0x252], 0x6f0072
mov word [ebp + 0x272], si
mov word [ebp + 0x296], cx
mov word [ebp + 0x23c], dx
mov dword [ebp + 0x27a], 0x65004d
call fcn.00416e10
add esp, 0x18
mov esi, 0x6f
test eax, eax
jne 0x493e44
lea eax, [esi - 0xa]
mov dword [ebp + 0x58c], 0x450067
mov dword [ebp + 0x59e], eax
lea esi, [eax - 0x21]
mov word [ebp + 0x580], ax
mov ecx, 0x6e
mov eax, 0x76
mov dword [ebp + 0x590], 0x650078
mov word [ebp + 0x59c], ax
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 4]
mov dword [ebp + 0x57c], 0x6c0062
push eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0x582], 0x610050
push eax
push 0
lea eax, [ebp + 0x574]
mov dword [ebp + 0x574], 0x690044
push eax
push dword [ebp]
mov dword [ebp + 0x586], 0x690067
mov dword [ebp + 0x578], 0x610073
mov dword [ebp + 0x598], 0x690074
mov word [ebp + 0x58a], cx
mov dword [ebp + 0x594], 0x750063
call fcn.004ae470
mov ecx, 0x6b
mov dword [ebp + 0x4ea], 0x730069
mov word [ebp + 0x4ee], cx
add esp, 0x18
mov dword [ebp + 0x508], ecx
mov ecx, 0x74
mov word [ebp + 0x500], cx
mov ecx, 0x61
mov dword [ebp + 0x4f8], 0x65006e
mov word [ebp + 0x4e8], si
mov dword [ebp + 0x502], 0x650077
mov dword [ebp + 0x4f4], 0x720065
mov dword [ebp + 0x4f0], 0x6b0020
mov dword [ebp + 0x4fc], 0x20006c
mov word [ebp + 0x506], cx
test eax, eax
jne 0x493db8
cmp dword [ebp + 4], 1
je 0x493e34
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x4e8]
mov dword [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x218]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x574]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
jmp 0x493e0c
cmp eax, 2
je 0x493dc2
cmp eax, 3
jne 0x493e34
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x4e8]
mov dword [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x218]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x574]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x80]
mov dword [ebp - 0x20], 1
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], 0
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
mov esi, 0x6f
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x493e58
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
mov eax, 0x61
mov dword [ebp], 0
mov word [ebp + 0x476], ax
mov ecx, 0x6c
lea eax, [ebp]
mov word [ebp + 0x470], cx
push eax
push 1
push 0
lea eax, [ebp + 0x464]
mov dword [ebp + 4], 0
push eax
mov ecx, 0x73
mov dword [ebp + 0xc], 4
push SysReAllocString
mov dword [ebp + 8], 0x104
mov dword [ebp + 0x486], 0x74006b
mov dword [ebp + 0x48c], 0x70
mov dword [ebp + 0x47c], 0x5c006c
mov dword [ebp + 0x480], 0x650044
mov dword [ebp + 0x468], 0x74006e
mov dword [ebp + 0x464], 0x6f0043
mov dword [ebp + 0x46c], 0x6f0072
mov word [ebp + 0x48a], si
mov dword [ebp + 0x472], 0x500020
mov word [ebp + 0x484], cx
mov dword [ebp + 0x478], 0x65006e
call fcn.00416e10
add esp, 0x18
test eax, eax
jne 0x49412b
mov eax, 0x53
mov dword [ebp + 0x506], 0x6c006f
mov word [ebp + 0x4f4], ax
mov word [ebp + 0x500], ax
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 4]
mov dword [ebp + 0x4fc], 0x680074
push eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0x502], 0x720063
push eax
push 0
lea eax, [ebp + 0x4f4]
mov dword [ebp + 0x4f6], 0x6f006d
push eax
push dword [ebp]
mov word [ebp + 0x4fa], si
mov dword [ebp + 0x50a], 0x6c
call fcn.004ae470
xor ecx, ecx
mov dword [ebp + 0x564], 0x610073
mov word [ebp + 0x5a0], cx
add esp, 0x18
mov dword [ebp + 0x570], 0x6d0073
mov ecx, 0x6c
mov word [ebp + 0x596], cx
mov ecx, 0x64
mov dword [ebp + 0x574], 0x6f006f
mov dword [ebp + 0x592], 0x6f0072
mov dword [ebp + 0x578], 0x680074
mov dword [ebp + 0x56c], 0x200065
mov dword [ebp + 0x59c], 0x67006e
mov dword [ebp + 0x560], 0x690044
mov dword [ebp + 0x568], 0x6c0062
mov dword [ebp + 0x598], 0x69006c
mov dword [ebp + 0x58a], 0x200073
mov dword [ebp + 0x580], 0x6e0069
mov dword [ebp + 0x58e], 0x630073
mov dword [ebp + 0x57c], 0x770020
mov dword [ebp + 0x586], 0x77006f
mov word [ebp + 0x584], cx
test eax, eax
jne 0x49409f
cmp dword [ebp + 4], eax
je 0x49411b
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x560]
mov dword [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x464]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x4f4]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
jmp 0x4940f3
cmp eax, 2
je 0x4940a9
cmp eax, 3
jne 0x49411b
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x560]
mov dword [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x464]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x4f4]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x80]
mov dword [ebp - 0x20], 0
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], 0
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
mov esi, 0x6f
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x49413f
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
mov eax, 0x63
mov dword [ebp], 0
mov word [ebp + 0x326], ax
mov edx, 0x5c
mov eax, 0x20
mov dword [ebp + 4], 0
mov word [ebp + 0x344], ax
lea eax, [ebp]
push eax
push 1
push 0
lea eax, [ebp + 0x310]
mov dword [ebp + 0xc], 4
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 8], 0x104
mov dword [ebp + 0x366], 0x5c006e
mov dword [ebp + 0x372], 0x69006c
mov dword [ebp + 0x328], 0x6f0072
mov dword [ebp + 0x36e], 0x660072
mov dword [ebp + 0x314], 0x540046
mov dword [ebp + 0x330], 0x740066
mov dword [ebp + 0x35a], 0x650056
mov dword [ebp + 0x31c], 0x450052
mov dword [ebp + 0x352], 0x650072
mov dword [ebp + 0x32c], 0x6f0073
mov dword [ebp + 0x338], 0x6e0069
mov dword [ebp + 0x36a], 0x650050
mov dword [ebp + 0x34a], 0x43005c
mov dword [ebp + 0x35e], 0x730072
mov dword [ebp + 0x376], 0x62
mov dword [ebp + 0x340], 0x730077
mov dword [ebp + 0x318], 0x410057
mov dword [ebp + 0x310], 0x4f0053
mov dword [ebp + 0x322], 0x69004d
mov dword [ebp + 0x33c], 0x6f0064
mov dword [ebp + 0x362], 0x6f0069
mov dword [ebp + 0x34e], 0x720075
mov dword [ebp + 0x334], 0x57005c
mov dword [ebp + 0x346], 0x54004e
mov dword [ebp + 0x356], 0x74006e
mov word [ebp + 0x320], dx
call fcn.00416e10
add esp, 0x18
test eax, eax
jne 0x4944de
mov eax, 0x65
mov dword [ebp + 0x570], 0x610073
mov word [ebp + 0x578], ax
mov ecx, 0x72
lea eax, [ebp + 8]
mov dword [ebp + 0x59e], 0x73
push eax
lea eax, [ebp + 4]
mov dword [ebp + 0x598], 0x650074
push eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0x57a], 0x650050
push eax
push 0
lea eax, [ebp + 0x56c]
mov dword [ebp + 0x586], 0x61006d
push eax
push dword [ebp]
mov dword [ebp + 0x58e], 0x430065
mov dword [ebp + 0x56c], 0x690044
mov word [ebp + 0x59c], cx
mov dword [ebp + 0x58a], 0x63006e
mov dword [ebp + 0x574], 0x6c0062
mov dword [ebp + 0x594], 0x6e0075
mov dword [ebp + 0x580], 0x6f0066
mov word [ebp + 0x592], si
mov word [ebp + 0x584], cx
mov word [ebp + 0x57e], cx
call fcn.004ae470
mov ecx, 0x73
mov dword [ebp + 0x4e6], 0x720065
mov word [ebp + 0x4d8], cx
add esp, 0x18
mov dword [ebp + 0x4ee], 0x6d0072
mov ecx, 0x20
mov dword [ebp + 0x500], 0x6e0075
mov esi, 0x6f
mov dword [ebp + 0x4da], 0x620061
mov dword [ebp + 0x508], 0x72
mov dword [ebp + 0x4f2], 0x6e0061
mov dword [ebp + 0x4e2], 0x700020
mov dword [ebp + 0x4d4], 0x690044
mov dword [ebp + 0x4ea], 0x6f0066
mov dword [ebp + 0x4de], 0x65006c
mov dword [ebp + 0x504], 0x650074
mov dword [ebp + 0x4f6], 0x650063
mov dword [ebp + 0x4fc], 0x6f0063
mov word [ebp + 0x4fa], cx
test eax, eax
jne 0x494457
cmp dword [ebp + 4], 1
je 0x4944d3
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x4d4]
mov dword [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x310]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x56c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
jmp 0x4944ab
cmp eax, 2
je 0x494461
cmp eax, 3
jne 0x4944d3
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x4d4]
mov dword [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x310]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x56c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x80]
mov dword [ebp - 0x20], 1
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], 0
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x4944f2
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
lea eax, [ebp]
mov dword [ebp], 0
push eax
mov ecx, 0x53
mov dword [ebp + 4], 0
push 1
mov word [ebp + 0x3dc], cx
lea eax, [ebp + 0x3dc]
mov ecx, 0x6e
mov dword [ebp + 0xc], 4
push 0
mov word [ebp + 0x3ee], cx
mov ecx, 0x69
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 8], 0x104
mov dword [ebp + 0x3e2], 0x450054
mov dword [ebp + 0x3f4], 0x6c006f
mov dword [ebp + 0x408], 0x6e006f
mov dword [ebp + 0x404], 0x43005c
mov dword [ebp + 0x432], 0x6c
mov dword [ebp + 0x41c], 0x72006f
mov dword [ebp + 0x3fc], 0x300074
mov dword [ebp + 0x3f8], 0x650053
mov dword [ebp + 0x42e], 0x6f0072
mov dword [ebp + 0x400], 0x310030
mov dword [ebp + 0x3de], 0x530059
mov dword [ebp + 0x422], 0x790074
mov dword [ebp + 0x426], 0x6f0043
mov dword [ebp + 0x40c], 0x720074
mov dword [ebp + 0x418], 0x690072
mov dword [ebp + 0x42a], 0x74006e
mov dword [ebp + 0x3e6], 0x5c004d
mov dword [ebp + 0x410], 0x6c006f
mov dword [ebp + 0x414], 0x50005c
mov dword [ebp + 0x3ea], 0x6f0043
mov dword [ebp + 0x3f0], 0x720074
mov word [ebp + 0x420], cx
call fcn.00416e10
add esp, 0x18
test eax, eax
jne 0x49487f
lea ecx, [eax + 0x72]
mov dword [ebp + 0x572], 0x6e0069
mov eax, 0x79
mov dword [ebp + 0x594], 0x740061
mov word [ebp + 0x588], ax
mov eax, 0x57
mov word [ebp + 0x570], ax
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 4]
mov dword [ebp + 0x57e], 0x6f0069
push eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0x58a], 0x650053
push eax
push 0
lea eax, [ebp + 0x570]
mov dword [ebp + 0x576], 0x320033
push eax
push dword [ebp]
mov dword [ebp + 0x59c], 0x6e
mov dword [ebp + 0x584], 0x740069
mov dword [ebp + 0x57a], 0x720050
mov dword [ebp + 0x58e], 0x610070
mov dword [ebp + 0x598], 0x6f0069
mov word [ebp + 0x582], cx
mov word [ebp + 0x592], cx
call fcn.004ae470
mov ecx, 0x45
mov word [ebp + 0x4fe], si
mov word [ebp + 0x4cc], cx
add esp, 0x18
mov dword [ebp + 0x4ce], 0x61006e
mov edx, 0x72
mov dword [ebp + 0x4e0], 0x4e0020
mov esi, 0x73
mov dword [ebp + 0x50a], 0x72
mov ecx, 0x74
mov dword [ebp + 0x4d6], 0x200065
mov dword [ebp + 0x500], 0x650063
mov dword [ebp + 0x4ec], 0x62006e
mov dword [ebp + 0x4f6], 0x200064
mov dword [ebp + 0x506], 0x6f0073
mov dword [ebp + 0x4fa], 0x720070
mov dword [ebp + 0x4e8], 0x6f0020
mov dword [ebp + 0x4d2], 0x6c0062
mov dword [ebp + 0x4e4], 0x430049
mov dword [ebp + 0x4f0], 0x61006f
mov word [ebp + 0x504], si
mov word [ebp + 0x4f4], dx
mov dword [ebp + 0x4dc], 0x650068
mov word [ebp + 0x4da], cx
test eax, eax
jne 0x4947f8
cmp dword [ebp + 4], 0x26
je 0x494874
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x4cc]
mov dword [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x3dc]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x570]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
jmp 0x49484c
cmp eax, 2
je 0x494802
cmp eax, 3
jne 0x494874
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x4cc]
mov dword [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x3dc]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x570]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x80]
mov dword [ebp - 0x20], 0x26
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], 0
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x494893
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
mov eax, 0x30
mov dword [ebp], 0
mov word [ebp + 0x39e], ax
mov edx, 0x53
mov eax, 0x54
mov word [ebp + 0x380], dx
mov word [ebp + 0x3b8], ax
mov edx, 0x72
lea eax, [ebp]
mov dword [ebp + 4], 0
push eax
push 1
push 0
lea eax, [ebp + 0x37c]
mov dword [ebp + 0xc], 4
push eax
mov ecx, 0x61
mov dword [ebp + 8], 0x104
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x39a], 0x740065
mov dword [ebp + 0x37c], 0x590053
mov dword [ebp + 0x3a0], 0x310030
mov dword [ebp + 0x3a8], 0x720065
mov dword [ebp + 0x3b0], 0x650063
mov dword [ebp + 0x382], 0x450054
mov dword [ebp + 0x396], 0x53006c
mov dword [ebp + 0x3be], 0x700069
mov dword [ebp + 0x38e], 0x74006e
mov dword [ebp + 0x38a], 0x6f0043
mov dword [ebp + 0x3c6], 0x720061
mov dword [ebp + 0x3d6], 0x73
mov dword [ebp + 0x3ba], 0x700063
mov dword [ebp + 0x386], 0x5c004d
mov dword [ebp + 0x392], 0x6f0072
mov dword [ebp + 0x3a4], 0x53005c
mov dword [ebp + 0x3cc], 0x65006d
mov dword [ebp + 0x3c2], 0x50005c
mov dword [ebp + 0x3b4], 0x5c0073
mov dword [ebp + 0x3d0], 0x650074
mov dword [ebp + 0x3ac], 0x690076
mov word [ebp + 0x3ca], cx
mov word [ebp + 0x3d4], dx
call fcn.00416e10
add esp, 0x18
test eax, eax
jne 0x494bcb
mov eax, 0x62
mov dword [ebp + 0x4a2], 0x6b0073
mov word [ebp + 0x498], ax
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 4]
mov dword [ebp + 0x49a], 0x65006c
push eax
lea eax, [ebp + 0xc]
mov dword [ebp + 0x49e], 0x610054
push eax
push 0
lea eax, [ebp + 0x490]
mov dword [ebp + 0x4aa], 0x6c0066
push eax
push dword [ebp]
mov dword [ebp + 0x4b2], 0x64
mov dword [ebp + 0x4a6], 0x66004f
mov dword [ebp + 0x494], 0x610073
mov dword [ebp + 0x490], 0x690044
mov dword [ebp + 0x4ae], 0x61006f
call fcn.004ae470
mov ecx, 0x44
mov dword [ebp + 0x43e], 0x620061
mov word [ebp + 0x438], cx
add esp, 0x18
mov dword [ebp + 0x444], 0x200065
mov ecx, 0x6c
mov word [ebp + 0x442], cx
mov ecx, 0x74
mov dword [ebp + 0x456], 0x6c0066
mov dword [ebp + 0x44a], 0x730061
mov dword [ebp + 0x452], 0x66006f
mov dword [ebp + 0x44e], 0x20006b
mov dword [ebp + 0x45e], 0x64
mov dword [ebp + 0x43a], 0x730069
mov dword [ebp + 0x45a], 0x61006f
mov word [ebp + 0x448], cx
test eax, eax
jne 0x494b44
cmp dword [ebp + 4], eax
je 0x494bc0
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x438]
mov dword [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x37c]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x490]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14], eax
jmp 0x494b98
cmp eax, 2
je 0x494b4e
cmp eax, 3
jne 0x494bc0
lea ecx, [ebp - 0x80]
call fcn.0045d480
lea eax, [ebp + 0x438]
mov dword [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x18], reloc.OLEAUT32.dll_SysReAllocString
call fcn.00455c20
lea eax, [ebp + 0x37c]
push eax
lea ecx, [ebp - 0x68]
call fcn.00455c20
lea eax, [ebp + 0x490]
push eax
lea ecx, [ebp - 0x50]
call fcn.00455c20
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x80]
mov dword [ebp - 0x20], 0
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], 0
call fcn.0045d570
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
call fcn.0045d4c0
push dword [ebp]
call fcn.00404780
add esp, 4
push 0
mov ecx, edi
call fcn.00402860
test eax, eax
je 0x494bdf
mov ecx, edi
call fcn.0040e350
push 0x64
call fcn.004d9540
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x5a4]
xor ecx, ebp
call fcn.0046dcfd
lea esp, [ebp + 0x5a8]
pop ebp
ret 8