Function at 0x41a1e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x498c4b
mov eax, dword fs:[0]
push eax
sub esp, 0x520
mov eax, dword [0x4bd0c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x4c0], 0
movlpd qword [ebp - 0x4d8], xmm0
movlpd qword [ebp - 0x4d0], xmm0
movlpd qword [ebp - 0x4c8], xmm0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4a8], 0xf
mov byte [ebp - 0x4bc], 0
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x490], 0xf
mov byte [ebp - 0x4a4], 0
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
movlpd qword [ebp - 0x480], xmm0
movlpd qword [ebp - 0x478], xmm0
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0
mov word [ebp - 0x440], 0
mov dword [ebp - 4], 2
xor esi, esi
xor eax, eax
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x4f0], esi
mov dword [ebp - 0x4f8], esi
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x4f4], eax
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 3
call fcn.00405ef0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x4e0], eax
test eax, eax
jne 0x41a385
mov edi, dword [ebp - 0x4d8]
cmp edi, 0x5265c00
jbe 0x41a394
mov edi, 0x5265c00
mov dword [ebp - 0x4e0], 0
cmp byte [ebp - 0x440], 0
je 0x41b0dc
push dword [ebp - 0x4cc]
lea ecx, [ebp - 0x1a0]
push dword [ebp - 0x4d0]
call fcn.00410330
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0x508], 0
mov byte [ebp - 4], 5
lea edx, [ebp - 0x510]
push dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x4c0]
push dword [ebp - 0x4c8]
push dword [ebp - 0x4e0]
push edi
call fcn.00408890
mov edi, dword [ebp - 0x510]
add esp, 0x18
test al, al
mov dword [ebp - 0x500], edi
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x518], eax
je 0x41b091
mov dword [ebp - 0x4e0], edi
cmp edi, eax
je 0x41b08b
push dword [edi + 4]
lea ecx, [ebp - 0x1b8]
mov esi, 0x314e
push dword [edi]
call fcn.00410330
add esp, 8
mov dword [ebp - 0x124], 0
mov eax, 0xf
mov dword [ebp - 0x114], 2
mov dword [ebp - 0x110], eax
movzx eax, word [0x4b254c]
mov word [ebp - 0x124], ax
mov byte [ebp - 0x122], 0
movups xmm0, xmmword [ebp - 0x124]
mov dword [ebp - 0x428], 2
mov dword [ebp - 0x424], 0xf
movups xmmword [ebp - 0x438], xmm0
lea eax, [ebp - 0x1b8]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x420]
call fcn.00403aa0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x13c], 0
mov eax, 0xf
mov dword [ebp - 0x12c], 2
mov dword [ebp - 0x128], eax
movzx eax, word [0x4b2550]
mov word [ebp - 0x13c], ax
mov byte [ebp - 0x13a], 0
movups xmm0, xmmword [ebp - 0x13c]
mov dword [ebp - 0x3f4], 2
mov dword [ebp - 0x3f0], 0xf
movups xmmword [ebp - 0x404], xmm0
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x3ec]
call fcn.00403aa0
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x154], 0
mov eax, 0xf
mov dword [ebp - 0x144], 2
mov dword [ebp - 0x140], eax
mov word [ebp - 0x154], si
mov byte [ebp - 0x152], 0
movups xmm0, xmmword [ebp - 0x154]
mov dword [ebp - 0x3c0], 2
mov dword [ebp - 0x3bc], eax
movups xmmword [ebp - 0x3d0], xmm0
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x3a4], eax
mov byte [ebp - 0x3b8], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x230]
mov edx, dword [edi + 8]
push 0
mov dword [ebp - 0x3a0], 1
call fcn.0041c920
add esp, 4
lea ecx, [ebp - 0x3b8]
push eax
call fcn.00403880
lea ecx, [ebp - 0x230]
call fcn.00403830
mov dword [ebp - 0x28], 0
push 2
push 0x4b3d70
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 0x14
call fcn.00403e10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x39c]
call fcn.00403aa0
lea eax, [ebp - 0x4bc]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x384]
call fcn.00403aa0
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0xc4], 0
push 2
push 0x4b3d74
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
mov byte [ebp - 4], 0x18
call fcn.00403e10
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x368]
call fcn.00403aa0
lea eax, [ebp - 0x4a4]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x350]
call fcn.00403aa0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0xac], 0
push 2
push 0x4b3d78
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
mov byte [ebp - 4], 0x1c
call fcn.00403e10
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x334]
call fcn.00403aa0
lea eax, [edi + 0xc]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x31c]
call fcn.00403aa0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x10c], 0
push 2
mov dword [ebp - 0xfc], 0
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0xf8], 0xf
mov byte [ebp - 0x10c], 0
mov byte [ebp - 4], 0x20
push 0x4b3d7c
call fcn.00403e10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1d0]
push dword [ebp - 0x4c4]
mov dl, 1
push dword [ebp - 0x4c8]
call fcn.00411bc0
add esp, 8
mov esi, eax
lea eax, [ebp - 0x10c]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x300]
call fcn.00403aa0
push esi
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x24
call fcn.00403aa0
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0xf4], 0
push 2
push 0x4b3d80
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
mov byte [ebp - 4], 0x25
call fcn.00403e10
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1e8]
mov edx, dword [ebp - 0x4c0]
push 1
call fcn.0041c920
add esp, 4
mov esi, eax
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00403aa0
push esi
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 0x29
call fcn.00403aa0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0xdc], 0
push 2
push 0x4b3d84
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
mov byte [ebp - 4], 0x2a
call fcn.00403e10
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x200]
mov edx, dword [edi + 0x24]
push 1
call fcn.0041c920
add esp, 4
mov esi, eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x298]
call fcn.00403aa0
mov byte [ebp - 4], 0x2e
push esi
lea ecx, [ebp - 0x280]
call fcn.00403aa0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x40], 0
push 2
push 0x4b3d88
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0x2f
call fcn.00403e10
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x218]
mov edx, dword [edi + 0x30]
push 1
call fcn.0041c920
add esp, 4
mov esi, eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x264]
call fcn.00403aa0
push esi
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x33
call fcn.00403aa0
mov dword [ebp - 0x234], 0
mov byte [ebp - 4], 0x41
push 0xa
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0
call fcn.0040db80
mov esi, eax
lea eax, [ebp - 0x4ec]
mov dword [ebp - 0x4ec], esi
mov dword [ebp - 0x4e8], esi
mov dword [ebp - 0x52c], eax
lea ecx, [esi + 0x208]
mov dword [ebp - 0x4e4], ecx
lea edi, [ebp - 0x438]
mov dword [ebp - 0x528], esi
mov dword [ebp - 0x524], esi
mov dword [ebp - 0x520], eax
mov byte [ebp - 4], 0x43
nop word [eax + eax]
push edi
mov ecx, esi
mov dword [ebp - 0x514], esi
call fcn.00403aa0
lea eax, [edi + 0x18]
mov byte [ebp - 4], 0x45
lea ecx, [esi + 0x18]
push eax
call fcn.00403aa0
mov byte [ebp - 4], 0x43
mov eax, dword [edi + 0x30]
add edi, 0x34
mov dword [esi + 0x30], eax
add esi, 0x34
lea eax, [ebp - 0x230]
mov dword [ebp - 0x524], esi
cmp edi, eax
jne 0x41a990
mov dword [ebp - 0x528], esi
mov dword [ebp - 0x4e8], esi
mov byte [ebp - 4], 0x46
lea edx, [ebp - 0x51c]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x51c], 2
call fcn.0040ca60
lea eax, [ebp - 0x4ec]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040d8c0
mov byte [ebp - 4], 0x49
mov esi, dword [ebp - 0x4ec]
test esi, esi
je 0x41aa92
mov edi, dword [ebp - 0x4e8]
cmp esi, edi
je 0x41aa38
mov ecx, esi
call fcn.004029d0
add esi, 0x34
cmp esi, edi
jne 0x41aa24
mov esi, dword [ebp - 0x4ec]
mov eax, dword [ebp - 0x4e4]
sub eax, esi
sar eax, 2
imul eax, eax, 0xc4ec4ec5
imul ecx, eax, 0x34
mov eax, esi
cmp ecx, 0x1000
jb 0x41aa6a
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push ecx
push esi
call fcn.0046e38b
add esp, 8
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0
push fcn.004029d0
push 0xa
push 0x34
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x4a
push eax
call fcn.0046e614
lea ecx, [ebp - 0x218]
call fcn.00403830
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x41aaee
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41aae4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
lea ecx, [ebp - 0x200]
call fcn.00403830
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x41ab37
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ab2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
lea ecx, [ebp - 0x1e8]
call fcn.00403830
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0xe0]
cmp edx, 0x10
jb 0x41ab80
mov ecx, dword [ebp - 0xf4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ab76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
lea ecx, [ebp - 0x1d0]
call fcn.00403830
mov byte [ebp - 4], 0x52
mov edx, dword [ebp - 0xf8]
cmp edx, 0x10
jb 0x41abc9
mov ecx, dword [ebp - 0x10c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41abbf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0x98]
cmp edx, 0x10
jb 0x41ac07
mov ecx, dword [ebp - 0xac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41abfd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0xb0]
cmp edx, 0x10
jb 0x41ac45
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ac3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
mov byte [ebp - 4], 0x55
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x41ac7d
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ac73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
mov byte [ebp - 4], 0x56
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x58
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov byte [ebp - 0x4d9], 0
mov dword [ebp - 0x40], 0
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
push 0x4bfe30
mov edx, 0x408880
mov byte [ebp - 4], 0x5d
mov ecx, 0x4bfe2c
call fcn.0040dcd0
mov eax, dword [0x4bfe30]
add esp, 4
cmp eax, 7
ja case.0x41ad06.4
jmp dword [eax*4 + 0x41b114]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x5b
call fcn.004036b0
jmp 0x41af64
lea edx, [ebp - 0x40]
mov ecx, 0x4bfe38
call fcn.0040a0f0
lea ecx, [ebp - 0x40]
test al, al
jne 0x41ad40
mov byte [ebp - 4], 0x5b
call fcn.004036b0
jmp 0x41af64
mov esi, dword [ebp - 0x4e0]
sub esp, 8
push dword [esi + 4]
push dword [esi]
call fcn.00407720
add esp, 0x10
lea ecx, [ebp - 0x40]
test al, al
jne 0x41ad6b
mov byte [ebp - 4], 0x5b
call fcn.004036b0
jmp 0x41af64
lea eax, [ebp - 0x70]
mov edx, esi
push 0
push eax
call fcn.004077c0
add esp, 8
jmp 0x41ad94
mov edx, dword [ebp - 0x4e0]
lea eax, [ebp - 0x70]
push eax
mov ecx, 0x4bfe50
call fcn.00408190
add esp, 4
mov byte [ebp - 0x4d9], al
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x41adb3
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004042f0
cmp byte [ebp - 0x4d9], 0
je 0x41af64
cmp dword [ebp - 0x60], 0
je 0x41ae92
mov dword [ebp - 0x28], 0
push 2
push 0x4b3d8c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 0x5b
call fcn.00403e10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [ebp - 0x188]
call fcn.00403aa0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x60
push eax
lea ecx, [ebp - 0x170]
call fcn.00403aa0
mov dword [ebp - 0x158], 0
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x188]
mov eax, dword [ebp - 0x78]
push ecx
cmp eax, dword [ebp - 0x74]
je 0x41ae46
mov ecx, eax
call fcn.0041cf30
add dword [ebp - 0x78], 0x34
jmp 0x41ae4f
push eax
lea ecx, [ebp - 0x7c]
call fcn.0041cda0
lea ecx, [ebp - 0x188]
call fcn.004029d0
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x41ae92
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ae88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
cmp dword [ebp - 0x48], 0
je 0x41af64
mov dword [ebp - 0x28], 0
push 2
push 0x4b3d90
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 0x5b
call fcn.00403e10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x63
push eax
lea ecx, [ebp - 0x188]
call fcn.00403aa0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x64
push eax
lea ecx, [ebp - 0x170]
call fcn.00403aa0
mov dword [ebp - 0x158], 0
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x188]
mov eax, dword [ebp - 0x78]
push ecx
cmp eax, dword [ebp - 0x74]
je 0x41af18
mov ecx, eax
call fcn.0041cf30
add dword [ebp - 0x78], 0x34
jmp 0x41af21
push eax
lea ecx, [ebp - 0x7c]
call fcn.0041cda0
lea ecx, [ebp - 0x188]
call fcn.004029d0
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x41af64
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41af5a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
mov esi, dword [ebp - 0x4f0]
lea eax, [ebp - 0x94]
push eax
cmp esi, dword [ebp - 0x504]
je 0x41afa1
mov ecx, esi
mov dword [ebp - 0x514], esi
call fcn.00403aa0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x67
lea ecx, [esi + 0x18]
push eax
call fcn.0040d8c0
add esi, 0x24
mov dword [ebp - 0x4f8], esi
jmp 0x41afbf
push esi
lea ecx, [ebp - 0x4fc]
call fcn.0041cbf0
mov eax, dword [ebp - 0x4f4]
mov esi, dword [ebp - 0x4f8]
mov dword [ebp - 0x504], eax
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x4f0], esi
cmp edx, 0x10
jb 0x41affd
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41aff3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x41b043
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41b039
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b10d
push edx
push ecx
call fcn.0046e38b
add esp, 8
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.0040da40
lea ecx, [ebp - 0x94]
call fcn.00403830
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 5
call fcn.00403830
mov edi, dword [ebp - 0x4e0]
mov eax, dword [ebp - 0x518]
add edi, 0x38
jmp 0x41a421
mov edi, dword [ebp - 0x500]
test edi, edi
je 0x41b0ba
push ecx
mov edx, eax
mov ecx, edi
call fcn.00409b00
mov eax, dword [ebp - 0x508]
add esp, 4
sub eax, edi
sar eax, 3
imul eax, eax, 0xb6db6db7
push eax
push edi
call fcn.00409d60
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 3
call fcn.00403830
cmp dword [ebp - 0x4fc], esi
je 0x41b0dc
lea ecx, [ebp - 0x4fc]
call fcn.0040bf00
lea ecx, [ebp - 0x4fc]
call fcn.0040d9d0
lea ecx, [ebp - 0x4d8]
call fcn.00406490
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046e348
mov esp, ebp
pop ebp
ret
call fcn.00473154
nop
or eax, 0x1e0041ad
lodsd eax, dword [esi]
inc ecx
add byte [esi], bl
lodsd eax, dword [esi]
inc ecx
add byte [ebp - 0x53], bh
inc ecx
add byte [edx - 0x65ffbe53], bl
lodsd eax, dword [esi]
inc ecx
add byte [edx + 0x1e0041ad], bl
lodsd eax, dword [esi]
inc ecx
add ah, cl
int3