Function at 0x431a1e
Capabilities:
Contain obfuscated stackstrings
Query or enumerate registry value

Disassembly:
mov eax, 0x6bedc7
call fcn.006b9c3c
sub esp, 0x2f8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x34], ecx
xor ebx, ebx
mov dword [ebp - 0x30], ebx
xor edi, edi
inc edi
mov dword [ebp - 4], edi
push 2
pop eax
mov byte [ebp - 4], al
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
push 7
pop ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], ebx
xor eax, eax
mov word [ebp - 0xc8], ax
mov byte [ebp - 4], 4
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], ebx
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 5
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], ebx
mov word [ebp - 0xe0], ax
mov byte [ebp - 4], 6
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe8], ebx
mov word [ebp - 0xf8], ax
mov byte [ebp - 4], cl
mov dword [ebp - 0x5c], ebx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x48], esp
push 0x73b7ec
call fcn.004a63fc
mov byte [ebp - 4], 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0x73bb00
call fcn.004a63fc
mov byte [ebp - 4], 9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x44], esp
lea eax, [ebp + 8]
push eax
call fcn.004a6481
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7c]
call fcn.00460cfb
add esp, 0x48
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp + 8]
call fcn.004a638e
mov byte [ebp - 4], 7
push ebx
push edi
lea ecx, [ebp - 0x7c]
call fcn.004ab703
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov byte [ebp - 4], 0xc
mov edx, 0x73bb04
lea ecx, [ebp - 0x74]
call fcn.004b201b
mov byte [ebp - 4], 0xd
sub esp, 0x10
mov esi, esp
mov dword [ebp - 0x48], esp
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea eax, [ebp - 0x74]
push eax
call fcn.004b3a8d
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xd
mov edx, edi
mov ecx, esi
call fcn.004b594a
add esp, 0xc
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xd
lea edx, [ebp + 8]
lea ecx, [ebp - 0x88]
call fcn.004b5b64
add esp, 0x10
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x6c], 8
jbe 0x431bd8
cmp dword [ebp - 0x74], ebx
je 0x431bd8
push dword [ebp - 0x74]
call fcn.0068a1e2
pop ecx
mov eax, dword [ebp - 0x88]
cmp dword [eax + 0x14], 0x10
jb 0x431be6
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00411aae
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x7c]
cmp dword [ebp - 0x68], 0x10
cmovae esi, dword [ebp - 0x7c]
call fcn.0069c0cd
mov dword [eax], ebx
push 0xa
lea eax, [ebp - 0x38]
push eax
push esi
call fcn.0069a91b
add esp, 0xc
mov edi, eax
mov dword [ebp - 0x28], edx
cmp esi, dword [ebp - 0x38]
jne 0x431c28
push str.invalid_stoll_argument
call fcn.00582111
call fcn.0069c0cd
cmp dword [eax], 0x22
jne 0x431c3c
push str.stoll_argument_out_of_range
call fcn.00582151
mov dword [ebp - 0x4c], edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0xc
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x7c]
call fcn.00411bc8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x48], esp
push 0x73a418
call fcn.00411aae
mov byte [ebp - 4], 0x11
push 0x73bb04
mov edx, dword [ebp - 0x88]
lea ecx, [ebp - 0x150]
call fcn.0041cd61
mov byte [ebp - 4], 0x12
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00411a44
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov dword [ebp - 0x44], esp
lea edx, [ebp + 8]
mov ecx, esp
call fcn.00461197
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x138]
call fcn.00460e77
add esp, 0x48
mov byte [ebp - 4], 0x16
mov edx, eax
lea ecx, [ebp - 0x7c]
call fcn.00461060
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0xb0]
call fcn.004a638e
mov byte [ebp - 4], 0x16
push ebx
push esi
lea ecx, [ebp - 0x7c]
call fcn.004ab703
mov byte [ebp - 4], 0x15
push ebx
push esi
lea ecx, [ebp - 0x138]
call fcn.00411bc8
mov byte [ebp - 4], 0xc
push ebx
push esi
lea ecx, [ebp - 0x150]
call fcn.00411bc8
lea eax, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 8
cmovae eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0x54]
push ecx
push 0x20119
push ebx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x431dc2
push str._block2_0__block2_
mov esi, dword [ebp - 0x34]
mov ecx, esi
call fcn.00411aae
xor edi, edi
inc edi
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.004aa208
mov byte [ebp - 4], 6
push ebx
push edi
lea ecx, [ebp - 0xf8]
call fcn.004ab703
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0xe0]
call fcn.004ab703
mov byte [ebp - 4], 4
push ebx
push edi
lea ecx, [ebp - 0xb0]
call fcn.004ab703
mov byte [ebp - 4], 3
push ebx
push edi
lea ecx, [ebp - 0xc8]
call fcn.004ab703
mov byte [ebp - 4], bl
push ebx
push edi
lea ecx, [ebp + 8]
call fcn.004ab703
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x10c], 7
mov dword [ebp - 0x110], ebx
xor eax, eax
mov word [ebp - 0x120], ax
mov byte [ebp - 4], 0x18
call fcn.0040f6f5
push eax
lea ecx, [ebp - 0x48]
call fcn.004ab6cf
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x1a
push ebx
push ebx
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xfc]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x54]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x4325a8
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov esi, 0x79e48e
push esi
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0068a1f0
mov dword [ebp - 0x38], eax
push esi
push dword [ebp - 0x50]
call fcn.0068a1f0
add esp, 0x10
mov dword [ebp - 0x24], eax
call fcn.0040f6f5
push eax
lea ecx, [ebp - 0x20]
call fcn.004ab6cf
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1c
call fcn.0040f6f5
push eax
lea ecx, [ebp - 0x18]
call fcn.004ab6cf
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1e
push ecx
lea ecx, [ebp - 0x304]
call fcn.0049fef6
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x8c], esi
cmp esi, 0xf
jae 0x431ebf
push 0xa
pop ecx
sub ecx, dword [edi + esi*4 + 0x10]
imul eax, ecx, 0x12
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [esi + edi], dl
inc esi
jmp 0x431e98
mov byte [edi + 0xf], bl
push edi
lea ecx, [ebp - 0x1f8]
call fcn.00411aae
mov byte [ebp - 4], 0x1f
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.00460888
mov byte [ebp - 4], 0x20
mov edx, eax
lea ecx, [ebp - 0x1c8]
call fcn.00461060
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x21
push ecx
lea ecx, [ebp - 0x2b8]
call fcn.0049ff61
mov edi, eax
mov esi, ebx
mov dword [ebp - 0x90], esi
cmp esi, 9
jae 0x431f2e
mov ecx, dword [edi + esi*4 + 0xc]
sub ecx, 0x39
imul eax, ecx, 0x1c
cdq
push 0x7f
pop ecx
idiv ecx
lea eax, [ecx + edx]
cdq
idiv ecx
mov byte [edi + esi], dl
inc esi
jmp 0x431f07
mov byte [edi + 9], bl
push edi
lea ecx, [ebp - 0x1b0]
call fcn.00411aae
mov byte [ebp - 4], 0x22
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.00460888
mov byte [ebp - 4], 0x23
mov edx, eax
lea ecx, [ebp - 0x180]
call fcn.00461060
mov byte [ebp - 4], 0x24
push 0x73bb20
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.004b1fc7
pop ecx
mov byte [ebp - 4], 0x25
push dword [ebp - 0x28]
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.004b0769
mov byte [ebp - 4], 0x26
mov dword [esp], 0x73bb1c
mov edx, eax
lea ecx, [ebp - 0x150]
call fcn.004b1fc7
pop ecx
mov byte [ebp - 4], 0x27
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc8]
call fcn.004abef0
mov byte [ebp - 4], 0x26
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x150]
call fcn.004ab703
mov byte [ebp - 4], 0x25
push ebx
push esi
lea ecx, [ebp - 0x138]
call fcn.004ab703
mov byte [ebp - 4], 0x24
push ebx
push esi
lea ecx, [ebp - 0x168]
call fcn.004ab703
mov byte [ebp - 4], 0x23
push ebx
push esi
lea ecx, [ebp - 0x180]
call fcn.004ab703
mov byte [ebp - 4], 0x22
push ebx
push esi
lea ecx, [ebp - 0x198]
call fcn.00411bc8
mov byte [ebp - 4], 0x21
push ebx
push esi
lea ecx, [ebp - 0x1b0]
call fcn.00411bc8
mov byte [ebp - 4], 0x20
push ebx
push esi
lea ecx, [ebp - 0x1c8]
call fcn.004ab703
mov byte [ebp - 4], 0x1f
push ebx
push esi
lea ecx, [ebp - 0x1e0]
call fcn.00411bc8
mov byte [ebp - 4], 0x1e
push ebx
push esi
lea ecx, [ebp - 0x1f8]
call fcn.00411bc8
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x24]
test edi, edi
je 0x43257a
test esi, esi
je 0x43257a
mov ecx, ebx
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
lea eax, [ebp - 0x2c]
push eax
push ebx
lea eax, [ebp - 0x44]
push eax
push edi
push ecx
push dword [ebp - 0x54]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
cmp eax, 0x103
je 0x43257a
push edi
lea ecx, [ebp - 0x1f8]
call fcn.004a63fc
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0xe0]
call fcn.004a638e
mov byte [ebp - 4], 0x1e
push ebx
push 1
lea ecx, [ebp - 0x1f8]
call fcn.004ab703
push 0x73a418
lea ecx, [ebp - 0x18]
call fcn.004a5e30
mov eax, dword [ebp - 0x2c]
sub eax, 1
je 0x43228f
sub eax, 3
je 0x43225a
sub eax, 7
je 0x43219b
cmp dword [ebp - 0x2c], 3
je 0x432110
push dword [ebp - 0x2c]
push 0x73bb7c
lea eax, [ebp - 0x18]
push eax
call fcn.004b05ca
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov esi, dword [eax - 0xc]
mov dword [ebp - 0x58], esi
mov ecx, ebx
mov dword [ebp - 0x94], ecx
cmp ecx, dword [ebp - 0x1c]
jae 0x432331
lea edi, [ecx + 1]
mov eax, 0x73bb84
cmp edi, dword [ebp - 0x1c]
mov edx, 0x73b808
cmovae eax, edx
push eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ecx + eax]
push eax
push str._02x_s
lea eax, [ebp - 0x20]
push eax
call fcn.004b0575
add esp, 0x10
mov eax, dword [ebp - 0x20]
add esi, dword [eax - 0xc]
mov dword [ebp - 0x58], esi
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x18]
call fcn.004ae6d3
cmp esi, 0x4b
jle 0x432197
push 2
pop eax
mov esi, eax
mov dword [ebp - 0x58], esi
cmp edi, dword [ebp - 0x1c]
jae 0x432197
push 0x73bb88
call fcn.0069cd67
pop ecx
push eax
push 0x73bb88
lea ecx, [ebp - 0x18]
call fcn.004ae6d3
mov ecx, edi
jmp 0x43211b
cmp dword [ebp - 0x1c], 8
jne 0x432331
push 0x73bb54
lea ecx, [ebp - 0x18]
call fcn.004a5e30
push 7
pop edi
mov esi, ebx
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x98], esi
cmp esi, 8
jae 0x4321f7
mov eax, 0x73b808
push eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [eax + edi]
push eax
push str._02x_s
lea eax, [ebp - 0x20]
push eax
call fcn.004b0575
add esp, 0x10
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x18]
call fcn.004ae6d3
dec edi
inc esi
jmp 0x4321b7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7c]
call fcn.004a63fc
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x1e0]
call fcn.00461197
mov byte [ebp - 4], 0x2a
push ecx
mov ecx, eax
call fcn.00422b40
pop ecx
push edx
push eax
push str.___I64u_
lea eax, [ebp - 0x18]
push eax
call fcn.004b05ca
add esp, 0x10
mov byte [ebp - 4], 0x29
push ebx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.00411bc8
mov byte [ebp - 4], 0x1e
push ebx
push 1
lea ecx, [ebp - 0x7c]
call fcn.004ab703
jmp 0x432331
cmp dword [ebp - 0x1c], 4
jne 0x432331
mov esi, dword [esi]
push esi
push str.0x_08x
lea eax, [ebp - 0x18]
push eax
call fcn.004b05ca
add esp, 0xc
push esi
push str.___d_
lea eax, [ebp - 0x18]
push eax
call fcn.004b05ca
add esp, 0xc
jmp 0x432331
mov edi, dword [ebp - 0x1c]
shr edi, 1
push edi
lea ecx, [ebp - 0x20]
call fcn.004ab636
mov esi, eax
push edi
lea ecx, [ebp - 0x20]
call fcn.004ab60b
push dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x24]
push ebx
push esi
call fcn.0068bfa0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4322c7
cmp byte [eax + ebx - 1], 0
jne 0x4322c7
dec eax
shr eax, 1
push eax
lea ecx, [ebp - 0x20]
call fcn.004ab60b
mov eax, dword [ebp - 0x18]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x20]
mov ebx, dword [esi - 0xc]
add eax, ebx
mov dword [ebp - 0x28], eax
push eax
lea ecx, [ebp - 0x18]
call fcn.004ab636
mov edi, eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x18]
call fcn.004ab60b
lea ecx, [ebx + ebx]
push ecx
push esi
mov eax, dword [ebp - 0x3c]
lea eax, [edi + eax*2]
push eax
call fcn.0068bfa0
add esp, 0xc
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
jne 0x432326
mov eax, dword [ebp - 0x18]
push dword [eax - 8]
push eax
call fcn.0069675f
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
call fcn.004ab60b
xor ebx, ebx
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
jne 0x43233d
mov eax, ebx
jmp 0x432346
push dword [ebp - 0x18]
call fcn.0069cd67
pop ecx
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0xf8]
call fcn.004abd80
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x2a0]
call fcn.00461197
mov byte [ebp - 4], 0x2b
mov edx, eax
lea ecx, [ebp - 0x288]
call fcn.00460888
mov byte [ebp - 4], 0x2c
mov edx, eax
lea ecx, [ebp - 0x270]
call fcn.00461060
mov edi, eax
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x258]
call fcn.00413ca4
mov byte [ebp - 4], 0x2e
mov edx, eax
lea ecx, [ebp - 0x240]
call fcn.00461060
mov esi, eax
mov byte [ebp - 4], 0x2f
lea edx, [ebp - 0xe0]
lea ecx, [ebp - 0x228]
call fcn.0046237a
mov byte [ebp - 4], 0x30
mov edx, eax
lea ecx, [ebp - 0x210]
call fcn.00461197
mov byte [ebp - 4], 0x31
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.00460888
mov byte [ebp - 4], 0x32
mov edx, eax
lea ecx, [ebp - 0x150]
call fcn.00461060
mov byte [ebp - 4], 0x33
push 0x73bba0
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.004b1fc7
pop ecx
mov byte [ebp - 4], 0x34
push esi
mov edx, eax
lea ecx, [ebp - 0x180]
call fcn.004b0769
mov byte [ebp - 4], 0x35
mov dword [esp], 0x73bba0
mov edx, eax
lea ecx, [ebp - 0x198]
call fcn.004b1fc7
pop ecx
mov byte [ebp - 4], 0x36
push edi
mov edx, eax
lea ecx, [ebp - 0x1b0]
call fcn.004b0769
mov byte [ebp - 4], 0x37
mov dword [esp], 0x73bb1c
mov edx, eax
lea ecx, [ebp - 0x1c8]
call fcn.004b1fc7
pop ecx
mov byte [ebp - 4], 0x38
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xc8]
call fcn.004abef0
mov byte [ebp - 4], 0x37
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x1c8]
call fcn.004ab703
mov byte [ebp - 4], 0x36
push ebx
push esi
lea ecx, [ebp - 0x1b0]
call fcn.004ab703
mov byte [ebp - 4], 0x35
push ebx
push esi
lea ecx, [ebp - 0x198]
call fcn.004ab703
mov byte [ebp - 4], 0x34
push ebx
push esi
lea ecx, [ebp - 0x180]
call fcn.004ab703
mov byte [ebp - 4], 0x33
push ebx
push esi
lea ecx, [ebp - 0x168]
call fcn.004ab703
mov byte [ebp - 4], 0x32
push ebx
push esi
lea ecx, [ebp - 0x150]
call fcn.004ab703
mov byte [ebp - 4], 0x31
push ebx
push esi
lea ecx, [ebp - 0x138]
call fcn.00411bc8
mov byte [ebp - 4], 0x30
push ebx
push esi
lea ecx, [ebp - 0x210]
call fcn.00411bc8
mov byte [ebp - 4], 0x2f
push ebx
push esi
lea ecx, [ebp - 0x228]
call fcn.004ab703
mov byte [ebp - 4], 0x2e
push ebx
push esi
lea ecx, [ebp - 0x240]
call fcn.004ab703
mov byte [ebp - 4], 0x2d
push ebx
push esi
lea ecx, [ebp - 0x258]
call fcn.00411bc8
mov byte [ebp - 4], 0x2c
push ebx
push esi
lea ecx, [ebp - 0x270]
call fcn.004ab703
mov byte [ebp - 4], 0x2b
push ebx
push esi
lea ecx, [ebp - 0x288]
call fcn.00411bc8
mov byte [ebp - 4], 0x1e
push ebx
push esi
lea ecx, [ebp - 0x2a0]
call fcn.00411bc8
mov ecx, dword [ebp - 0x60]
inc ecx
mov dword [ebp - 0x60], ecx
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x38]
jmp 0x43206d
push edi
call fcn.0068a1e2
pop ecx
push esi
call fcn.0068a1e2
pop ecx
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x18]
call fcn.004ab6b4
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x20]
call fcn.004ab6b4
lea edx, [ebp - 0xc8]
mov esi, dword [ebp - 0x34]
mov ecx, esi
call fcn.00461197
xor edi, edi
inc edi
mov dword [ebp - 0x30], edi
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x48]
call fcn.004ab6b4
mov byte [ebp - 4], 0xc
push ebx
push edi
lea ecx, [ebp - 0x120]
call fcn.004ab703
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.004aa208
mov byte [ebp - 4], 6
push ebx
push edi
lea ecx, [ebp - 0xf8]
call fcn.004ab703
mov byte [ebp - 4], 5
push ebx
push edi
lea ecx, [ebp - 0xe0]
call fcn.004ab703
mov byte [ebp - 4], 4
push ebx
push edi
lea ecx, [ebp - 0xb0]
call fcn.004ab703
mov byte [ebp - 4], 3
push ebx
push edi
lea ecx, [ebp - 0xc8]
call fcn.004ab703
push 2
pop eax
mov byte [ebp - 4], al
test ebx, ebx
je 0x431da2
mov ecx, ebx
call fcn.0040f5b8
jmp 0x431da2