Function at 0x4338f8
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x31
push 0
push 0
dec ecx
jne 0x433901
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x435bc0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.0040c0ec
mov byte [0x44aca4], al
cmp byte [0x44aca4], 0
je 0x433950
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov edx, 0x435bd8
call fcn.0040b7d0
jmp 0x433960
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
mov edx, 0x435bfc
call fcn.0040b7d0
mov eax, 0x44aca0
call fcn.00403b0c
cmp byte [0x44ab7c], 0
jne 0x433a10
push 1
mov ecx, 0x435c10
xor edx, edx
xor eax, eax
call fcn.0043269c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
xor edx, edx
call fcn.0040b424
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
xor edx, edx
call fcn.0040b424
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
xor edx, edx
call fcn.0040b424
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
xor edx, edx
call fcn.0040b424
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
xor edx, edx
call fcn.0040b424
cmp byte [0x44ac9c], 0
je 0x4339f7
cmp dword [0x44ac04], 0
je 0x4339f7
lea eax, [ebp - 0x68]
mov ecx, dword [0x44ac04]
mov edx, 0x435c58
call fcn.00403df4
mov eax, dword [ebp - 0x68]
xor edx, edx
call fcn.00433778
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 8]
mov byte [0x44aca4], 1
jmp 0x435967
xor eax, eax
mov al, byte [0x44ab7c]
dec eax
test eax, eax
jb 0x435967
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x30], 0x44ab80
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov edi, eax
mov eax, dword [edi + 0x6f4]
push eax
push 1
mov ecx, 0x435c64
xor edx, edx
xor eax, eax
call fcn.00432798
mov eax, dword [edi + 0x4c]
push eax
push 0
mov ecx, 0x435c7c
xor edx, edx
xor eax, eax
call fcn.00432798
mov eax, dword [edi + 0x40]
push eax
push 0
mov ecx, 0x435c8c
xor edx, edx
xor eax, eax
call fcn.00432798
cmp byte [0x44aca4], 0
je 0x433abb
mov eax, dword [edi + 0x44]
push eax
push 0
mov ecx, 0x435ca4
xor edx, edx
mov eax, 0x435cbc
call fcn.00432798
cmp byte [0x44ac9c], 0
je 0x433aa7
cmp byte [edi + 0x48], 0
jne 0x433abb
mov al, byte [edi + 0x48]
push eax
push 0
mov ecx, 0x435cec
xor edx, edx
xor eax, eax
call fcn.00432a1c
push dword [edi + 0x5c]
push dword [edi + 0x58]
lea edx, [ebp - 0x6c]
mov al, 1
call fcn.0040e014
mov eax, dword [ebp - 0x6c]
push eax
push 0
mov ecx, 0x435d10
xor edx, edx
mov eax, 0x435d20
call fcn.00432798
mov bl, byte [edi + 0x275d]
test bl, bl
je 0x433b0d
lea edx, [ebp - 0x70]
mov eax, ebx
call fcn.00420f20
mov eax, dword [ebp - 0x70]
push eax
push 0
mov ecx, 0x435e8c
xor edx, edx
mov eax, 0x435ea0
call fcn.00432798
push 0
mov ecx, 0x435ed4
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0x705], 0
je 0x433b3b
push 1
mov ecx, 0x435eec
xor edx, edx
mov eax, 0x435efc
call fcn.0043269c
jmp 0x433b8a
mov al, byte [edi + 0x275c]
sub al, 1
jb 0x433b4d
je 0x433b62
sub al, 0xd
je 0x433b77
jmp 0x433b8a
push 1
mov ecx, 0x435f30
xor edx, edx
mov eax, 0x435f40
call fcn.0043269c
jmp 0x433b8a
push 1
mov ecx, 0x435f6c
xor edx, edx
mov eax, 0x435f7c
call fcn.0043269c
jmp 0x433b8a
push 1
mov ecx, 0x435fa8
xor edx, edx
mov eax, 0x435fb8
call fcn.0043269c
cmp byte [0x44aca4], 0
je 0x433d18
cmp byte [edi + 0x705], 0
je 0x433bc7
lea edx, [ebp - 0x74]
mov eax, dword [edi + 0x70c]
call fcn.00421400
mov eax, dword [ebp - 0x74]
push eax
push 0
mov ecx, 0x435fec
xor edx, edx
xor eax, eax
call fcn.00432798
jmp 0x433c64
cmp byte [edi + 0x275c], 1
jne 0x433bf5
cmp byte [edi + 0x61], 0
je 0x433bf5
lea edx, [ebp - 0x78]
mov al, byte [edi + 0x61]
call fcn.004211cc
mov eax, dword [ebp - 0x78]
push eax
push 0
mov ecx, 0x436000
xor edx, edx
xor eax, eax
call fcn.00432798
push 0
mov ecx, 0x436014
xor edx, edx
mov eax, 0x436028
call fcn.0043269c
push 1
lea edx, [ebp - 0x80]
mov al, byte [edi + 0x60]
call fcn.00421328
mov ecx, dword [ebp - 0x80]
lea eax, [ebp - 0x7c]
mov edx, 0x43605c
call fcn.00403df4
mov ecx, dword [ebp - 0x7c]
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0x704], 0
je 0x433c64
push 0
mov ecx, 0x436068
xor edx, edx
mov eax, 0x436074
call fcn.0043269c
mov eax, dword [edi + 0x6f8]
push eax
push 1
mov ecx, 0x436128
xor edx, edx
xor eax, eax
call fcn.00432798
cmp byte [edi + 0x705], 0
je 0x433ce7
cmp byte [edi + 0x2729], 0
je 0x433ca2
xor eax, eax
mov al, byte [edi + 0x2729]
push eax
push 0
mov ecx, 0x43613c
xor edx, edx
mov eax, 0x436168
call fcn.004328e0
push 1
mov ecx, 0x436210
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44ac9c], 0
je 0x433cb7
cmp dword [edi + 0x2718], 0x200
je 0x433d18
cmp dword [edi + 0x2718], 0x200
setne al
push eax
cmp dword [edi + 0x50], 0x200
setne al
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x43621c
xor edx, edx
mov eax, 0x436238
call fcn.00432b84
jmp 0x433d18
cmp byte [0x44ac9c], 0
je 0x433cf9
cmp dword [edi + 0x50], 0x200
je 0x433d18
cmp dword [edi + 0x50], 0x200
setne al
push eax
push 0
push 0x436238
mov ecx, 0x43621c
xor edx, edx
pop eax
call fcn.00432a1c
cmp byte [0x44aca4], 0
je 0x433d3e
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x436270
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44aca4], 0
je 0x434076
cmp byte [edi + 0x705], 0
je 0x433eb4
lea ecx, [ebp - 0x88]
mov dl, byte [edi + 0x271d]
mov al, byte [edi + 0x271c]
call fcn.00420e70
push dword [ebp - 0x88]
push 0x43628c
push 0x436298
push 0x4362a8
lea eax, [ebp - 0x84]
mov edx, 4
call fcn.00403e68
mov eax, dword [ebp - 0x84]
push eax
push 0
mov ecx, 0x4362b4
mov dl, 1
xor eax, eax
call fcn.00432798
push 1
mov eax, 0x435fb8
mov ecx, 0x435fa8
xor edx, edx
call fcn.0043269c
push 1
push 0x43628c
lea edx, [ebp - 0x90]
xor eax, eax
mov al, byte [edi + 0x271c]
call fcn.0040628c
push dword [ebp - 0x90]
push 0x4362e0
lea edx, [ebp - 0x94]
xor eax, eax
mov al, byte [edi + 0x271d]
call fcn.0040628c
push dword [ebp - 0x94]
push 0x4362f0
lea eax, [ebp - 0x8c]
mov edx, 5
call fcn.00403e68
mov ecx, dword [ebp - 0x8c]
xor edx, edx
xor eax, eax
call fcn.0043269c
lea ecx, [ebp - 0x9c]
mov dl, byte [edi + 0x271f]
mov al, byte [edi + 0x271e]
call fcn.00420e70
push dword [ebp - 0x9c]
push 0x43628c
push 0x436298
push 0x4362fc
lea edx, [ebp - 0xa0]
xor eax, eax
mov al, byte [edi + 0x271e]
call fcn.0040628c
push dword [ebp - 0xa0]
push 0x4362e0
lea edx, [ebp - 0xa4]
xor eax, eax
mov al, byte [edi + 0x271f]
call fcn.0040628c
push dword [ebp - 0xa4]
push 0x4362f0
lea eax, [ebp - 0x98]
mov edx, 8
call fcn.00403e68
mov eax, dword [ebp - 0x98]
push eax
push 0
mov ecx, 0x43630c
mov dl, 1
xor eax, eax
call fcn.00432798
jmp 0x434026
cmp byte [edi + 0x275c], 0
jne 0x433f90
lea edx, [ebp - 0xac]
mov al, byte [edi + 0x6a]
call fcn.00421070
push dword [ebp - 0xac]
push 0x43628c
push 0x436298
push 0x436330
lea edx, [ebp - 0xb0]
xor eax, eax
mov al, byte [edi + 0x6a]
call fcn.0040628c
push dword [ebp - 0xb0]
push 0x4362f0
lea eax, [ebp - 0xa8]
mov edx, 6
call fcn.00403e68
mov eax, dword [ebp - 0xa8]
push eax
push 0
mov ecx, 0x4362b4
mov dl, 1
xor eax, eax
call fcn.00432798
lea edx, [ebp - 0xb8]
mov al, byte [edi + 0x69]
call fcn.00421070
push dword [ebp - 0xb8]
push 0x43628c
push 0x436298
push 0x436330
lea edx, [ebp - 0xbc]
xor eax, eax
mov al, byte [edi + 0x69]
call fcn.0040628c
push dword [ebp - 0xbc]
push 0x4362f0
lea eax, [ebp - 0xb4]
mov edx, 6
call fcn.00403e68
mov eax, dword [ebp - 0xb4]
push eax
push 0
mov ecx, 0x43630c
mov dl, 1
xor eax, eax
call fcn.00432798
jmp 0x434026
cmp byte [edi + 0x62], 0
je 0x433fdb
lea edx, [ebp - 0xc4]
mov al, byte [edi + 0x62]
call fcn.0042116c
push dword [ebp - 0xc4]
push 0x43628c
push 0x436298
lea eax, [ebp - 0xc0]
mov edx, 3
call fcn.00403e68
mov eax, dword [ebp - 0xc0]
push eax
push 0
mov ecx, 0x4362b4
mov dl, 1
xor eax, eax
call fcn.00432798
cmp byte [edi + 0x63], 0
je 0x434026
lea edx, [ebp - 0xcc]
mov al, byte [edi + 0x63]
call fcn.0042116c
push dword [ebp - 0xcc]
push 0x43628c
push 0x436298
lea eax, [ebp - 0xc8]
mov edx, 3
call fcn.00403e68
mov eax, dword [ebp - 0xc8]
push eax
push 0
mov ecx, 0x43630c
mov dl, 1
xor eax, eax
call fcn.00432798
movzx eax, word [edi + 0x6b4]
push eax
push 0
mov ecx, 0x436348
mov dl, 1
xor eax, eax
call fcn.004328e0
push 1
mov ecx, 0x436374
xor edx, edx
xor eax, eax
call fcn.0043269c
movzx eax, word [edi + 0x6b6]
push eax
push 0
mov ecx, 0x436384
mov dl, 1
xor eax, eax
call fcn.004328e0
push 1
mov ecx, 0x436374
xor edx, edx
xor eax, eax
call fcn.0043269c
movzx eax, word [edi + 0x6b2]
push eax
push 0
mov ecx, 0x4363ac
mov dl, 1
xor eax, eax
call fcn.004328e0
push 1
mov ecx, 0x436374
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44aca4], 0
je 0x4341cd
movzx eax, word [edi + 0x6bc]
push eax
push 0
mov ecx, 0x4363cc
mov dl, 1
xor eax, eax
call fcn.004328e0
push 1
mov ecx, 0x436374
xor edx, edx
xor eax, eax
call fcn.0043269c
movzx eax, word [edi + 0x6b8]
push eax
push 0
mov ecx, 0x4363f0
mov dl, 1
xor eax, eax
call fcn.004328e0
push 1
mov ecx, 0x436374
xor edx, edx
xor eax, eax
call fcn.0043269c
mov si, word [edi + 0x6b2]
mov bx, word [edi + 0x6b8]
cmp si, bx
jae 0x43415a
movzx eax, bx
mov dword [ebp - 0xd8], eax
fild dword [ebp - 0xd8]
movzx eax, si
mov dword [ebp - 0xdc], eax
fild dword [ebp - 0xdc]
fdivp st(1)
fsub dword [0x43640c]
fmul dword [0x436410]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0xd4]
call fcn.00406208
mov al, byte [ebp - 0xd4]
mov byte [edi + 0x6ba], al
jmp 0x4341a4
movzx eax, si
mov dword [ebp - 0xd8], eax
fild dword [ebp - 0xd8]
movzx eax, bx
mov dword [ebp - 0xdc], eax
fild dword [ebp - 0xdc]
fdivp st(1)
fsub dword [0x43640c]
fmul dword [0x436410]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0xd4]
call fcn.00406208
mov al, byte [ebp - 0xd4]
mov byte [edi + 0x6ba], al
xor eax, eax
mov al, byte [edi + 0x6ba]
push eax
push 0
mov ecx, 0x43641c
mov dl, 1
xor eax, eax
call fcn.004328e0
push 1
mov ecx, 0x43643c
xor edx, edx
xor eax, eax
call fcn.0043269c
xor eax, eax
mov al, byte [edi + 0x6b0]
push eax
push 0
mov ecx, 0x436448
mov dl, 1
mov eax, 0x436468
call fcn.004328e0
mov bl, byte [edi + 0x6b1]
test bl, bl
je 0x434229
push 1
lea edx, [ebp - 0xe4]
xor eax, eax
mov al, bl
call fcn.0040628c
mov ecx, dword [ebp - 0xe4]
lea eax, [ebp - 0xe0]
mov edx, 0x43649c
call fcn.00403df4
mov ecx, dword [ebp - 0xe0]
xor edx, edx
xor eax, eax
call fcn.0043269c
push 1
mov ecx, 0x4364a8
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44aca4], 0
je 0x4347a9
cmp byte [edi + 0x704], 0
jne 0x434284
cmp word [edi + 0x2756], 0
je 0x434284
movzx eax, word [edi + 0x2756]
push eax
push 0
mov ecx, 0x4364b4
mov dl, 1
mov eax, 0x4364d0
call fcn.004328e0
push 1
mov ecx, 0x436504
xor edx, edx
xor eax, eax
call fcn.0043269c
mov ebx, dword [edi + 0x64]
test ebx, ebx
je 0x4342b8
mov eax, ebx
xor edx, edx
push edx
push eax
lea edx, [ebp - 0xe8]
mov al, 1
call fcn.0040e014
mov eax, dword [ebp - 0xe8]
push eax
push 0
mov ecx, 0x436514
mov dl, 1
mov eax, 0x436528
call fcn.00432798
cmp byte [0x44ac9c], 0
je 0x4342c7
cmp byte [edi + 0x73], 0
jne 0x4342e4
mov al, byte [edi + 0x72]
push eax
mov al, byte [edi + 0x73]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x436554
mov dl, 1
mov eax, 0x436580
call fcn.00432b84
cmp byte [edi + 0x705], 0
jne 0x434319
cmp byte [0x44ac9c], 0
je 0x4342fc
cmp byte [edi + 0x75], 0
jne 0x434319
mov al, byte [edi + 0x74]
push eax
mov al, byte [edi + 0x75]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x4365b0
mov dl, 1
mov eax, 0x4365cc
call fcn.00432b84
cmp byte [edi + 0x704], 0
jne 0x43436e
cmp byte [0x44ac9c], 0
je 0x434331
cmp byte [edi + 0x7a], 0
je 0x43436e
mov al, byte [edi + 0x7a]
push eax
mov al, byte [edi + 0x7b]
push eax
xor eax, eax
mov al, byte [edi + 0x7c]
push eax
push 0
mov ecx, 0x436600
mov dl, 1
mov eax, 0x436628
call fcn.00432b84
cmp byte [edi + 0x7a], 0
je 0x43436e
xor eax, eax
mov al, byte [edi + 0x7d]
push eax
push 0
mov ecx, 0x436654
mov dl, 1
xor eax, eax
call fcn.004328e0
cmp byte [edi + 0x705], 0
jne 0x4343a7
cmp byte [0x44ac9c], 0
je 0x434386
cmp byte [edi + 0x77], 0
je 0x4343a7
mov al, byte [edi + 0x77]
push eax
mov al, byte [edi + 0x78]
push eax
xor eax, eax
mov al, byte [edi + 0x79]
push eax
push 0
mov ecx, 0x436694
mov dl, 1
mov eax, 0x4366bc
call fcn.00432b84
cmp byte [edi + 0x705], 0
jne 0x434491
cmp byte [edi + 0x704], 0
je 0x4343f2
cmp byte [0x44ac9c], 0
je 0x4343cf
cmp byte [edi + 0x8c], 0
je 0x4343f2
mov al, byte [edi + 0x8b]
push eax
mov al, byte [edi + 0x8c]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x4366e8
mov dl, 1
mov eax, 0x436708
call fcn.00432b84
cmp byte [edi + 0x275c], 0
jne 0x434427
cmp byte [0x44ac9c], 0
je 0x43440d
cmp byte [edi + 0x88], 0
je 0x434427
mov al, byte [edi + 0x88]
push eax
push 0
mov ecx, 0x43673c
mov dl, 1
mov eax, 0x436758
call fcn.00432a1c
cmp byte [edi + 0x8a], 0
jne 0x43445c
cmp byte [0x44ac9c], 0
je 0x434442
cmp byte [edi + 0x89], 0
je 0x43445c
mov al, byte [edi + 0x89]
push eax
push 0
mov ecx, 0x436788
mov dl, 1
mov eax, 0x4367b4
call fcn.00432a1c
cmp byte [edi + 0x275c], 0
je 0x434491
cmp byte [0x44ac9c], 0
je 0x434477
cmp byte [edi + 0x8a], 0
jne 0x434491
mov al, byte [edi + 0x8a]
push eax
push 0
mov ecx, 0x4367e0
mov dl, 1
mov eax, 0x43680c
call fcn.00432a1c
cmp byte [edi + 0x704], 0
je 0x4344d8
cmp byte [0x44ac9c], 0
je 0x4344b5
cmp byte [edi + 0x2758], 0
je 0x4344b5
cmp byte [edi + 0x2759], 0
jne 0x4344d8
mov al, byte [edi + 0x2758]
push eax
mov al, byte [edi + 0x2759]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x436838
mov dl, 1
mov eax, 0x436848
call fcn.00432b84
cmp byte [edi + 0x705], 0
je 0x434671
mov al, byte [edi + 0x2720]
push eax
mov al, byte [edi + 0x2721]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x4368f8
mov dl, 1
xor eax, eax
call fcn.00432b84
cmp dword [edi + 0x2724], 0
je 0x434556
push 1
push 0x4362a8
mov eax, dword [edi + 0x2724]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0xf0]
mov al, 1
call fcn.0040e014
push dword [ebp - 0xf0]
push 0x4362f0
lea eax, [ebp - 0xec]
mov edx, 3
call fcn.00403e68
mov ecx, dword [ebp - 0xec]
xor edx, edx
xor eax, eax
call fcn.0043269c
mov al, byte [edi + 0x272b]
push eax
cmp byte [edi + 0x272c], 0
jne 0x434573
cmp byte [edi + 0x272d], 0
jne 0x434573
xor eax, eax
jmp 0x434575
mov al, 1
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x436924
mov dl, 1
xor eax, eax
call fcn.00432b84
cmp byte [edi + 0x272b], 0
je 0x434671
cmp byte [edi + 0x272c], 0
je 0x434603
lea edx, [ebp - 0xf4]
mov al, byte [edi + 0x272c]
call fcn.00433744
mov eax, dword [ebp - 0xf4]
push eax
push 0
mov ecx, 0x436950
mov dl, 1
xor eax, eax
call fcn.00432798
lea eax, [edi + 0x383]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x436978
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x38b]
cmp dword [eax], 0
je 0x434603
lea eax, [edi + 0x38b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x43699c
mov dl, 1
xor eax, eax
call fcn.004328e0
cmp byte [edi + 0x272d], 0
je 0x434671
lea edx, [ebp - 0xf8]
mov al, byte [edi + 0x272d]
call fcn.00433744
mov eax, dword [ebp - 0xf8]
push eax
push 0
mov ecx, 0x4369c8
mov dl, 1
xor eax, eax
call fcn.00432798
lea eax, [edi + 0x387]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x4369f0
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x38f]
cmp dword [eax], 0
je 0x434671
lea eax, [edi + 0x38f]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x436a14
mov dl, 1
xor eax, eax
call fcn.004328e0
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x436a40
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0x705], 0
jne 0x4346b3
xor eax, eax
mov al, byte [edi + 0x2aa]
push eax
push 0
mov ecx, 0x436a54
mov dl, 1
mov eax, 0x436a70
call fcn.004328e0
mov al, byte [edi + 0x6ab]
test al, al
je 0x434798
cmp byte [edi + 0x6ac], 0
je 0x43470d
push 0
mov ecx, 0x436aa8
mov dl, 1
xor eax, eax
call fcn.0043269c
mov al, byte [edi + 0x6ac]
push eax
push 1
mov ecx, 0x436abc
xor edx, edx
mov eax, 0x436ad4
call fcn.00432a1c
xor eax, eax
mov al, byte [edi + 0x6ac]
push eax
push 1
mov ecx, 0x436b04
xor edx, edx
xor eax, eax
call fcn.004328e0
cmp byte [edi + 0x6af], 0
je 0x4347a9
mov al, byte [edi + 0x6af]
push eax
push 0
mov ecx, 0x436b28
mov dl, 1
xor eax, eax
call fcn.00432a1c
push 1
mov ecx, 0x436b04
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0x6af], 0xff
jne 0x43475c
push 1
mov ecx, 0x436b48
xor edx, edx
xor eax, eax
call fcn.0043269c
jmp 0x4347a9
push 1
lea edx, [ebp - 0x100]
xor eax, eax
mov al, byte [edi + 0x6af]
call fcn.0040628c
mov ecx, dword [ebp - 0x100]
mov edx, 0x43605c
lea eax, [ebp - 0xfc]
call fcn.00403df4
mov ecx, dword [ebp - 0xfc]
xor edx, edx
xor eax, eax
call fcn.0043269c
jmp 0x4347a9
push eax
push 0
mov ecx, 0x436b58
mov dl, 1
xor eax, eax
call fcn.00432a1c
mov bl, byte [edi + 0x91]
test bl, bl
je 0x4347df
cmp bl, byte [edi + 0x90]
je 0x4347df
lea edx, [ebp - 0x104]
mov eax, ebx
call fcn.00433744
mov eax, dword [ebp - 0x104]
push eax
push 0
mov ecx, 0x436b70
mov dl, 1
xor eax, eax
call fcn.00432798
mov bl, byte [edi + 0x90]
test bl, bl
je 0x43480d
lea edx, [ebp - 0x108]
mov eax, ebx
call fcn.00433744
mov eax, dword [ebp - 0x108]
push eax
push 0
mov ecx, 0x436ba0
mov dl, 1
xor eax, eax
call fcn.00432798
mov bl, byte [edi + 0x8f]
test bl, bl
je 0x43483b
lea edx, [ebp - 0x10c]
mov eax, ebx
call fcn.00433744
mov eax, dword [ebp - 0x10c]
push eax
push 0
mov ecx, 0x436bd0
mov dl, 1
xor eax, eax
call fcn.00432798
mov bl, byte [edi + 0x8e]
test bl, bl
je 0x43486c
lea edx, [ebp - 0x110]
mov eax, ebx
call fcn.00433744
mov eax, dword [ebp - 0x110]
push eax
push 0
mov ecx, 0x436bf4
mov dl, 1
mov eax, 0x436c10
call fcn.00432798
cmp byte [edi + 0x6d9], 0
je 0x4348cf
cmp byte [0x44ac9c], 0
je 0x4348a3
cmp dword [edi + 0x6dc], 0
je 0x4348cf
mov eax, dword [edi + 0x6dc]
push eax
push 0
mov ecx, 0x436c44
mov dl, 1
mov eax, 0x436c64
call fcn.004328e0
jmp 0x4348cf
cmp byte [0x44aca4], 0
jne 0x4348b5
cmp dword [edi + 0x6dc], 0
je 0x4348cf
mov eax, dword [edi + 0x6dc]
push eax
push 0
mov ecx, 0x436c44
mov dl, 1
mov eax, 0x436c64
call fcn.004328e0
cmp byte [edi + 0x705], 0
jne 0x4348e1
cmp byte [edi + 0x6cc], 0
je 0x4348f8
mov eax, dword [edi + 0x6d0]
push eax
push 0
mov ecx, 0x436c94
mov dl, 1
xor eax, eax
call fcn.004328e0
cmp byte [edi + 0x705], 0
jne 0x43490a
cmp byte [edi + 0x6be], 0
je 0x434958
cmp byte [edi + 0x705], 0
jne 0x43491c
cmp dword [edi + 0x6c0], 0
je 0x434940
mov eax, dword [edi + 0x6c8]
xor edx, edx
div dword [edi + 0x6c0]
push eax
push 0
mov ecx, 0x436cb4
mov dl, 1
mov eax, 0x436cd0
call fcn.004328e0
jmp 0x434958
push 0x436d00
push 0
mov ecx, 0x436cb4
mov dl, 1
mov eax, 0x436cd0
call fcn.00432798
cmp byte [0x44aca4], 0
je 0x4349d5
cmp byte [edi + 0x704], 0
jne 0x4349d5
cmp byte [0x44ac9c], 0
je 0x434979
cmp byte [edi + 0x7e], 0
je 0x4349d5
mov al, byte [edi + 0x7e]
push eax
mov al, byte [edi + 0x7f]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x436d18
mov dl, 1
mov eax, 0x436d3c
call fcn.00432b84
cmp byte [edi + 0x7f], 0
je 0x4349d5
cmp byte [edi + 0x80], 0
je 0x4349c0
xor eax, eax
mov al, byte [edi + 0x80]
push eax
push 0
mov ecx, 0x436dac
mov dl, 1
xor eax, eax
call fcn.004328e0
jmp 0x4349d5
push 0x436de0
push 0
mov ecx, 0x436dac
mov dl, 1
xor eax, eax
call fcn.00432798
cmp byte [edi + 0x705], 0
jne 0x434a13
cmp byte [0x44aca4], 0
je 0x434a13
cmp byte [0x44ac9c], 0
je 0x4349f9
cmp byte [edi + 0x81], 0
jne 0x434a13
mov al, byte [edi + 0x81]
push eax
push 0
mov ecx, 0x436e04
mov dl, 1
mov eax, 0x436e24
call fcn.00432a1c
cmp byte [edi + 0xa4], 0
je 0x434a43
push 0x436e50
push 0
mov ecx, 0x436e68
mov dl, 1
xor eax, eax
call fcn.00432798
push 0
mov ecx, 0x436e7c
mov dl, 1
xor eax, eax
call fcn.0043269c
jmp 0x434ab3
push 0x436eb0
push 0
mov ecx, 0x436e68
mov dl, 1
xor eax, eax
call fcn.00432798
cmp byte [edi + 0xa7], 0
je 0x434a81
push 1
mov ecx, 0x436ec4
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x436edc
mov dl, 1
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0xa5], 0
je 0x434a9a
push 1
mov ecx, 0x436f18
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0xa8], 0
je 0x434ab3
push 1
mov ecx, 0x436f38
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44aca4], 0
je 0x4357ab
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x436f54
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44ac9c], 0
je 0x434aec
cmp byte [edi + 0x6c], 0
je 0x434b5d
cmp byte [edi + 0x705], 0
je 0x434b0b
mov al, byte [edi + 0x6b]
push eax
push 0
mov ecx, 0x436f6c
mov dl, 1
xor eax, eax
call fcn.00432a1c
jmp 0x434b25
mov al, byte [edi + 0x6b]
push eax
mov al, byte [edi + 0x6c]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x436f6c
mov dl, 1
xor eax, eax
call fcn.00432b84
cmp byte [edi + 0x6c], 0
je 0x434b5d
cmp byte [edi + 0x6d], 0
je 0x434b48
push 0x436f98
push 0
mov ecx, 0x436fac
mov dl, 1
xor eax, eax
call fcn.00432798
jmp 0x434b5d
push 0x436fc8
push 0
mov ecx, 0x436fac
mov dl, 1
xor eax, eax
call fcn.00432798
cmp byte [edi + 0x705], 0
jne 0x434b8c
cmp byte [0x44ac9c], 0
je 0x434b75
cmp byte [edi + 0x6e], 0
jne 0x434b8c
mov al, byte [edi + 0x6e]
push eax
push 0
mov ecx, 0x436fdc
mov dl, 1
mov eax, 0x437004
call fcn.00432a1c
cmp byte [0x44ac9c], 0
je 0x434b9b
cmp byte [edi + 0x70], 0
je 0x434bb2
mov al, byte [edi + 0x70]
push eax
push 0
mov ecx, 0x437044
mov dl, 1
mov eax, 0x43706c
call fcn.00432a1c
cmp byte [edi + 0x6b], 0
je 0x434bfb
cmp dword [edi + 0x6e0], 0
je 0x434bfb
cmp dword [edi + 0x6e0], 0x1fe
je 0x434be6
mov eax, dword [edi + 0x6e0]
push eax
push 0
mov ecx, 0x4370b4
mov dl, 1
xor eax, eax
call fcn.004328e0
jmp 0x434bfb
push 0x4370e0
push 0
mov ecx, 0x4370b4
mov dl, 1
xor eax, eax
call fcn.00432798
cmp byte [edi + 0x705], 0
jne 0x434c8c
cmp byte [0x44ac9c], 0
jne 0x434c2b
mov al, byte [edi + 0x85]
push eax
push 0
mov ecx, 0x4370f0
mov dl, 1
mov eax, 0x437110
call fcn.00432a1c
cmp byte [edi + 0x86], 0
je 0x434c66
cmp byte [0x44ac9c], 0
je 0x434c46
cmp byte [edi + 0x87], 0
je 0x434c66
mov al, byte [edi + 0x86]
push eax
mov al, byte [edi + 0x87]
push eax
push 0xffffffffffffffff
push 0
mov ecx, 0x43713c
mov dl, 1
xor eax, eax
call fcn.00432b84
cmp byte [0x44ac9c], 0
je 0x434c75
cmp byte [edi + 0x71], 0
je 0x434c8c
mov al, byte [edi + 0x71]
push eax
push 0
mov ecx, 0x437164
mov dl, 1
mov eax, 0x437180
call fcn.00432a1c
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x437214
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0x705], 0
je 0x4350e8
xor eax, eax
mov al, byte [edi + 0x2ab]
push eax
push 0
mov ecx, 0x437228
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x2ac]
movzx eax, word [eax]
push eax
push 0
mov ecx, 0x437244
mov dl, 1
xor eax, eax
call fcn.004328e0
xor eax, eax
mov al, byte [edi + 0x2ae]
push eax
push 0
mov ecx, 0x437264
mov dl, 1
xor eax, eax
call fcn.004328e0
xor eax, eax
mov al, byte [edi + 0x2af]
push eax
push 0
mov ecx, 0x43727c
mov dl, 1
xor eax, eax
call fcn.004328e0
xor eax, eax
mov al, byte [edi + 0x2b0]
push eax
push 0
mov ecx, 0x4372a0
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x76a]
movzx eax, word [eax]
add eax, eax
lea eax, [eax + eax*4]
xor edx, edx
mov dl, byte [edi + 0x769]
add eax, edx
cmp eax, 0xd
jbe 0x434d6a
xor eax, eax
mov al, byte [edi + 0x2b1]
push eax
push 0
mov ecx, 0x4372b8
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x2cb]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x4372ec
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x2db]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437304
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x2eb]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437320
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x2fb]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x43733c
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x30b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437358
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x31b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437378
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x32b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437390
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x33b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x4373a8
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x34b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x4373c4
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x35b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x4373ec
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x76a]
movzx eax, word [eax]
add eax, eax
lea eax, [eax + eax*4]
xor edx, edx
mov dl, byte [edi + 0x769]
add eax, edx
cmp eax, 0xb
jbe 0x434f28
lea eax, [edi + 0x36b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x43741c
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x36f]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437448
mov dl, 1
xor eax, eax
call fcn.004328e0
xor ebx, ebx
mov esi, ebx
and esi, 0xff
mov eax, esi
add eax, eax
add eax, 0xc8
lea eax, [edi + eax + 0x2ab]
cmp word [eax], 0
je 0x434f22
xor eax, eax
mov al, bl
add eax, eax
add eax, 0xc8
lea eax, [edi + eax + 0x2ab]
movzx eax, word [eax]
push eax
push 0
lea edx, [ebp - 0x118]
mov eax, esi
inc eax
call fcn.0040628c
mov ecx, dword [ebp - 0x118]
lea eax, [ebp - 0x114]
mov edx, 0x437474
call fcn.00403df4
mov ecx, dword [ebp - 0x114]
mov dl, 1
xor eax, eax
call fcn.004328e0
inc ebx
cmp bl, 8
jne 0x434eb9
lea eax, [edi + 0x76a]
movzx eax, word [eax]
add eax, eax
lea eax, [eax + eax*4]
xor edx, edx
mov dl, byte [edi + 0x769]
add eax, edx
cmp eax, 0xc
jbe 0x434fa9
lea eax, [edi + 0x383]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437490
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x387]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x4374cc
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x38b]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437508
mov dl, 1
xor eax, eax
call fcn.004328e0
lea eax, [edi + 0x38f]
mov eax, dword [eax]
push eax
push 0
mov ecx, 0x437540
mov dl, 1
xor eax, eax
call fcn.004328e0
cmp byte [edi + 0x2ab], 0
je 0x435059
push 0
xor ecx, ecx
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2ab], 1
je 0x434fdc
push 0
mov ecx, 0x437578
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2ab], 2
je 0x434ff5
push 0
mov ecx, 0x4375c0
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2ab], 4
je 0x43500e
push 0
mov ecx, 0x4375fc
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2ab], 8
je 0x435027
push 0
mov ecx, 0x437648
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2ab], 0x10
je 0x435040
push 0
mov ecx, 0x437680
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2ab], 0x20
je 0x435059
push 0
mov ecx, 0x4376b8
mov dl, 1
xor eax, eax
call fcn.0043269c
cmp byte [edi + 0x2b1], 0
je 0x4356fb
lea eax, [edi + 0x76a]
movzx eax, word [eax]
add eax, eax
lea eax, [eax + eax*4]
xor edx, edx
mov dl, byte [edi + 0x769]
add eax, edx
cmp eax, 0xd
jbe 0x4356fb
push 0
xor ecx, ecx
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2b1], 1
je 0x4350ad
push 0
mov ecx, 0x437704
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2b1], 4
je 0x4350c6
push 0
mov ecx, 0x437760
mov dl, 1
xor eax, eax
call fcn.0043269c
test byte [edi + 0x2b1], 8
je 0x4356fb
push 0
mov ecx, 0x4377bc
mov dl, 1
xor eax, eax
call fcn.0043269c
jmp 0x4356fb
mov bl, 9
lea esi, [ebp - 0x64]
call fcn.00408ab0
mov dword [esi], eax
add esi, 4
dec bl
jne 0x4350ed
mov eax, dword [ebp - 0x64]
mov edx, 0x43780c
call fcn.0040c3c0
mov eax, dword [ebp - 0x60]
mov edx, 0x437818
call fcn.0040c3c0
mov eax, dword [ebp - 0x5c]
mov edx, 0x437828
call fcn.0040c3c0
mov eax, dword [ebp - 0x58]
mov edx, 0x437838
call fcn.0040c3c0
mov eax, dword [ebp - 0x54]
mov edx, 0x437848
call fcn.0040c3c0
mov eax, dword [ebp - 0x50]
mov edx, 0x437858
call fcn.0040c3c0
mov eax, dword [ebp - 0x4c]
mov edx, 0x437868
call fcn.0040c3c0
mov eax, dword [ebp - 0x48]
mov edx, 0x43787c
call fcn.0040c3c0
mov eax, dword [ebp - 0x44]
mov edx, 0x437890
call fcn.0040c3c0
mov al, byte [edi + 0x2aa]
dec eax
test al, al
jb 0x435494
inc eax
mov byte [ebp - 0x29], al
mov bl, 0
lea edx, [ebp - 0x11c]
xor eax, eax
mov al, bl
lea esi, [eax + eax*2]
xor eax, eax
mov al, byte [edi + esi*4 + 0x2ad]
call fcn.0040628c
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x64]
call fcn.0040c3c0
lea ecx, [ebp - 0x120]
mov dl, byte [edi + esi*4 + 0x2ad]
mov eax, edi
call fcn.0042795c
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x60]
call fcn.0040c3c0
test byte [edi + esi*4 + 0x2ae], 1
je 0x4351e9
lea eax, [ebp - 0x1c]
mov edx, 0x4378a0
call fcn.00403ba4
jmp 0x4351f6
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403ba4
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
test byte [edi + eax*4 + 0x2ae], 2
je 0x435216
lea eax, [ebp - 0x1c]
mov edx, 0x4378b8
call fcn.00403db0
jmp 0x435223
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403db0
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
test byte [edi + eax*4 + 0x2ae], 4
je 0x435243
lea eax, [ebp - 0x1c]
mov edx, 0x4378c4
call fcn.00403db0
jmp 0x435250
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403db0
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
test byte [edi + eax*4 + 0x2ae], 8
je 0x435270
lea eax, [ebp - 0x1c]
mov edx, 0x4378d0
call fcn.00403db0
jmp 0x43527d
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403db0
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
test byte [edi + eax*4 + 0x2ae], 0x10
je 0x43529d
lea eax, [ebp - 0x1c]
mov edx, 0x4378dc
call fcn.00403db0
jmp 0x4352aa
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403db0
xor eax, eax
mov al, bl
lea eax, [eax + eax*2]
test byte [edi + eax*4 + 0x2ae], 0x20
je 0x4352ca
lea eax, [ebp - 0x1c]
mov edx, 0x4378e8
call fcn.00403db0
jmp 0x4352d7
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403db0
lea eax, [ebp - 0x124]
mov ecx, 0x43628c
mov edx, dword [ebp - 0x1c]
call fcn.00403df4
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x5c]
call fcn.0040c3c0
lea edx, [ebp - 0x128]
xor eax, eax
mov al, byte [edi + esi*4 + 0x2b0]
call fcn.0040628c
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x58]
call fcn.0040c3c0
lea edx, [ebp - 0x12c]
xor eax, eax
mov al, byte [edi + esi*4 + 0x2b1]
call fcn.0040628c
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x54]
call fcn.0040c3c0
lea edx, [ebp - 0x130]
xor eax, eax
mov al, byte [edi + esi*4 + 0x4ae]
call fcn.0040628c
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x50]
call fcn.0040c3c0
lea eax, [edi + esi*4 + 0x2b2]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
lea eax, [edi + esi*4 + 0x2b6]
movzx eax, word [eax]
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x134]
lea eax, [ebp - 0x24]
call fcn.0040613c
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x4c]
call fcn.0040c3c0
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x15], 5
xor eax, eax
mov al, byte [ebp - 0x15]
xor edx, edx
mov dl, bl
lea edx, [edx + edx*2]
lea edx, [edi + edx*4]
cmp byte [edx + eax + 0x2b2], 0
je 0x4353bc
mov al, byte [ebp - 0x15]
mov byte [ebp - 0x16], al
jmp 0x4353c5
dec byte [ebp - 0x15]
cmp byte [ebp - 0x15], 0xff
jne 0x43539b
lea eax, [ebp - 0x1c]
call fcn.00403b0c
mov al, byte [ebp - 0x16]
cmp al, 0
jb 0x435415
mov byte [ebp - 0x15], al
xor eax, eax
mov al, byte [ebp - 0x15]
xor edx, edx
mov dl, bl
lea edx, [edx + edx*2]
lea edx, [edi + edx*4]
movzx eax, byte [edx + eax + 0x2b2]
lea ecx, [ebp - 0x138]
mov edx, 2
call fcn.0040ccb8
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x1c]
call fcn.00403db0
dec byte [ebp - 0x15]
cmp byte [ebp - 0x15], 0xff
jne 0x4353d7
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x1c]
call fcn.0040c3c0
mov edx, ebx
mov eax, edi
call fcn.0042c310
cmp al, 1
je 0x43543a
mov edx, ebx
mov eax, edi
call fcn.0042c310
cmp al, 2
jne 0x435449
lea eax, [ebp - 0x1c]
mov edx, 0x4378f4
call fcn.00403ba4
jmp 0x43547f
mov edx, ebx
mov eax, edi
call fcn.0042c310
cmp al, 3
je 0x435463
mov edx, ebx
mov eax, edi
call fcn.0042c310
cmp al, 4
jne 0x435472
lea eax, [ebp - 0x1c]
mov edx, 0x437900
call fcn.00403ba4
jmp 0x43547f
lea eax, [ebp - 0x1c]
mov edx, 0x4378ac
call fcn.00403ba4
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x1c]
call fcn.0040c3c0
inc ebx
dec byte [ebp - 0x29]
jne 0x435185
mov byte [ebp - 0x15], 0xf8
lea esi, [ebp - 0x48]
mov byte [ebp - 0x16], 0
mov al, byte [edi + 0x2aa]
test al, al
jb 0x4354f9
inc eax
mov byte [ebp - 0x29], al
mov bl, 0
lea ecx, [ebp - 0x13c]
xor edx, edx
mov dl, bl
mov eax, dword [esi]
call fcn.0040c42c
mov eax, dword [ebp - 0x13c]
call fcn.00403da8
xor edx, edx
mov dl, byte [ebp - 0x16]
cmp eax, edx
jle 0x4354f3
lea ecx, [ebp - 0x140]
xor edx, edx
mov dl, bl
mov eax, dword [esi]
call fcn.0040c42c
mov eax, dword [ebp - 0x140]
call fcn.00403da8
mov byte [ebp - 0x16], al
inc ebx
dec byte [ebp - 0x29]
jne 0x4354af
mov al, byte [edi + 0x2aa]
test al, al
jb 0x43557a
inc eax
mov byte [ebp - 0x29], al
mov bl, 0
lea ecx, [ebp - 0x148]
xor edx, edx
mov dl, bl
mov eax, dword [esi]
call fcn.0040c42c
mov eax, dword [ebp - 0x148]
call fcn.00403da8
xor edx, edx
mov dl, byte [ebp - 0x16]
sub edx, eax
inc edx
lea ecx, [ebp - 0x144]
mov eax, 0x43628c
call fcn.00406450
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x14c]
xor edx, edx
mov dl, bl
mov eax, dword [esi + 4]
call fcn.0040c42c
mov edx, dword [ebp - 0x14c]
pop eax
call fcn.00403db0
mov ecx, dword [ebp - 0x144]
xor edx, edx
mov dl, bl
mov eax, dword [esi + 4]
call fcn.0040c484
inc ebx
dec byte [ebp - 0x29]
jne 0x435509
sub esi, 4
inc byte [ebp - 0x15]
jne 0x43549b
mov al, byte [edi + 0x2aa]
test al, al
jb 0x4356bb
inc eax
mov byte [ebp - 0x29], al
mov bl, 0
lea ecx, [ebp - 0x150]
mov esi, ebx
and esi, 0xff
mov edx, esi
mov eax, dword [ebp - 0x64]
call fcn.0040c42c
push dword [ebp - 0x150]
lea ecx, [ebp - 0x154]
mov edx, esi
mov eax, dword [ebp - 0x60]
call fcn.0040c42c
push dword [ebp - 0x154]
lea ecx, [ebp - 0x158]
mov edx, esi
mov eax, dword [ebp - 0x5c]
call fcn.0040c42c
push dword [ebp - 0x158]
lea ecx, [ebp - 0x15c]
mov edx, esi
mov eax, dword [ebp - 0x58]
call fcn.0040c42c
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x160]
mov edx, esi
mov eax, dword [ebp - 0x54]
call fcn.0040c42c
push dword [ebp - 0x160]
lea ecx, [ebp - 0x164]
mov edx, esi
mov eax, dword [ebp - 0x50]
call fcn.0040c42c
push dword [ebp - 0x164]
lea ecx, [ebp - 0x168]
mov edx, esi
mov eax, dword [ebp - 0x4c]
call fcn.0040c42c
push dword [ebp - 0x168]
lea ecx, [ebp - 0x16c]
mov edx, esi
mov eax, dword [ebp - 0x48]
call fcn.0040c42c
push dword [ebp - 0x16c]
lea eax, [ebp - 0x1c]
mov edx, 8
call fcn.00403e68
cmp byte [edi + 0xa4], 0
jne 0x435683
cmp byte [edi + 0xa5], 0
jne 0x435683
cmp byte [edi + 0xa7], 0
jne 0x435683
cmp byte [edi + 0xa8], 0
je 0x4356a3
lea ecx, [ebp - 0x170]
xor edx, edx
mov dl, bl
mov eax, dword [ebp - 0x44]
call fcn.0040c42c
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x1c]
call fcn.00403db0
push 0
mov ecx, dword [ebp - 0x1c]
mov dl, 1
xor eax, eax
call fcn.0043269c
inc ebx
dec byte [ebp - 0x29]
jne 0x43559a
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x437910
mov dl, 1
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x437964
mov dl, 1
xor eax, eax
call fcn.0043269c
mov bl, 9
lea esi, [ebp - 0x64]
mov eax, dword [esi]
call fcn.0040a308
add esi, 4
dec bl
jne 0x4356ed
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
mov ecx, 0x4379a4
xor edx, edx
xor eax, eax
call fcn.0043269c
mov eax, dword [edi + 0x34]
push eax
push 0
mov ecx, 0x4379b4
mov dl, 1
mov eax, 0x4379cc
call fcn.00432798
cmp byte [edi + 0x705], 0
jne 0x4357ab
cmp byte [edi + 0x275c], 0
jne 0x4357ab
cmp byte [edi + 0x32], 0
je 0x4357ab
cmp byte [edi + 0x31], 0
je 0x435764
push 0x4379f8
push 0
mov ecx, 0x437a0c
mov dl, 1
xor eax, eax
call fcn.00432798
jmp 0x435779
push 0x437a28
push 0
mov ecx, 0x437a0c
mov dl, 1
xor eax, eax
call fcn.00432798
cmp byte [edi + 0x30], 0
je 0x435796
push 0x437a3c
push 0
mov ecx, 0x437a50
mov dl, 1
xor eax, eax
call fcn.00432798
jmp 0x4357ab
push 0x437a68
push 0
mov ecx, 0x437a50
mov dl, 1
xor eax, eax
call fcn.00432798
cmp dword [edi + 0x6e8], 0
je 0x4357ce
mov eax, dword [edi + 0x6e8]
push eax
push 0
mov ecx, 0x437a78
mov dl, 1
mov eax, 0x437a94
call fcn.00432798
cmp byte [edi + 0x2754], 0
je 0x43581d
push 0
mov ecx, 0x437b2c
mov dl, 1
xor eax, eax
call fcn.0043269c
push 1
mov ecx, 0x437b48
xor edx, edx
mov eax, 0x437b54
call fcn.0043269c
cmp byte [0x44aca4], 0
je 0x43581d
mov al, byte [edi + 0x2755]
push eax
push 0
mov ecx, 0x437b80
mov dl, 1
mov eax, 0x437b90
call fcn.00432a1c
lea edx, [ebp - 0x174]
lea eax, [edi + 0x94]
call fcn.0040e5c8
mov eax, dword [ebp - 0x174]
push eax
push 0
mov ecx, 0x437bc8
mov dl, 1
xor eax, eax
call fcn.00432798
mov al, byte [0x44aca4]
and al, byte [0x44ac9c]
je 0x43587e
cmp dword [edi + 0x700], 0
je 0x43587e
mov edx, 0x435c58
lea eax, [ebp - 0x178]
mov ecx, dword [edi + 0x700]
call fcn.00403df4
mov eax, dword [ebp - 0x178]
xor edx, edx
call fcn.00433778
mov al, byte [0x44ab7c]
dec eax
and eax, 0xff
cmp eax, dword [ebp - 0x10]
je 0x4358ba
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
jmp 0x435957
cmp byte [0x44aca4], 0
je 0x435957
push 0
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.0043269c
mov eax, dword [0x44a9f4]
push eax
push 0
mov ecx, 0x437be4
xor edx, edx
xor eax, eax
call fcn.00432798
mov eax, dword [0x44a91c]
push eax
push 0
mov ecx, 0x437c00
xor edx, edx
xor eax, eax
call fcn.00432798
cmp byte [0x44ac9c], 0
je 0x435922
cmp byte [0x44ac30], 0
je 0x435922
push 0
mov ecx, 0x437c20
xor edx, edx
xor eax, eax
call fcn.0043269c
cmp byte [0x44ac9c], 0
je 0x435957
cmp dword [0x44ac04], 0
je 0x435957
mov edx, 0x435c58
lea eax, [ebp - 0x17c]
mov ecx, dword [0x44ac04]
call fcn.00403df4
mov eax, dword [ebp - 0x17c]
xor edx, edx
call fcn.00433778
inc dword [ebp - 0x10]
add dword [ebp - 0x30], 4
dec dword [ebp - 0x28]
jne 0x433a32
cmp byte [0x44ac9c], 0
je 0x435975
call fcn.00433118
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
call fcn.00408cec
push 0x437c44
push dword [0x44aca0]
push 0x437c78
lea eax, [ebp - 0x180]
mov edx, 3
call fcn.00403e68
mov eax, dword [ebp - 0x180]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
xor ecx, ecx
xor edx, edx
call fcn.0040997c
call fcn.00408ab0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x184]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
xor ecx, ecx
mov dl, 1
call fcn.0040983c
mov edx, dword [ebp - 0x184]
mov eax, dword [ebp - 0x14]
call fcn.00408bbc
xor ebx, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
dec eax
test eax, eax
jb 0x435a4e
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00408ad4
mov edx, eax
lea eax, [ebp - 0x188]
call fcn.00403ce8
mov eax, dword [ebp - 0x188]
call fcn.00403da8
cmp ebx, eax
jge 0x435a46
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00408ad4
mov edx, eax
lea eax, [ebp - 0x18c]
call fcn.00403ce8
mov eax, dword [ebp - 0x18c]
call fcn.00403da8
mov ebx, eax
inc dword [ebp - 0x10]
dec dword [ebp - 0x28]
jne 0x4359fa
cmp ebx, 0x26
jge 0x435a58
mov ebx, 0x26
lea eax, [ebp - 0x40]
call fcn.00409e58
push 2
call sub.user32.dll_GetSystemMetrics
mov edx, eax
mov eax, ebx
shl eax, 3
add eax, 0x10
add edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bfc8
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax + 0x1c]
shl ebx, 4
add ebx, 0xd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, ebx
call fcn.0040bbb8
lea edx, [ebx + 0x5f]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bfa8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bbac
cmp eax, dword [ebp - 0x34]
jle 0x435aea
mov eax, dword [ebp - 0x34]
add eax, eax
mov ecx, 3
cdq
idiv ecx
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
call fcn.0040bbb8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
call fcn.0040bbac
mov edx, eax
add edx, 0x5f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bfa8
push 0xfffffffffffffff0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x1c]
push eax
call sub.user32.dll_GetWindowLongA
test eax, 0x200000
jne 0x435b23
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bf94
push eax
push 2
call sub.user32.dll_GetSystemMetrics
pop edx
sub edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bfc8
push ebp
call fcn.00433848
pop ecx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bb84
mov edx, dword [ebp - 0x38]
sub edx, eax
sar edx, 1
jns 0x435b41
adc edx, 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bb30
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bbac
mov edx, dword [ebp - 0x34]
sub edx, eax
sar edx, 1
jns 0x435b63
adc edx, 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040bb60
mov eax, dword [ebp - 0x14]
call fcn.0040a308
cmp byte [0x44ac9c], 0
jne 0x435b8a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x18]
call fcn.0040b944
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x435bc7
lea eax, [ebp - 0x18c]
mov edx, 0x2c
call fcn.00403b30
lea eax, [ebp - 0xcc]
mov edx, 0x1a
call fcn.00403b30
lea eax, [ebp - 0x1c]
call fcn.00403b0c
ret