Function at 0x427e30
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5b8bde
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
mov eax, dword [esp + 0x78]
push ebx
push ebp
push esi
push edi
push 0x62d214
mov esi, ecx
push eax
push 0x117
mov dword [esp + 0x24], esi
call fcn.00532520
lea edi, [esi + 0x98]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x80], ebp
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0xd4]
mov byte [esp + 0x80], 1
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x110]
mov byte [esp + 0x80], 2
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x14c]
mov byte [esp + 0x80], 3
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x188]
mov byte [esp + 0x80], 4
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x1c4]
mov byte [esp + 0x80], 5
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x200]
mov byte [esp + 0x80], 6
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
lea edi, [esi + 0x23c]
mov byte [esp + 0x80], 7
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x278]
mov byte [esp + 0x80], 8
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x2b4]
mov byte [esp + 0x80], 9
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x2f0]
mov byte [esp + 0x80], 0xa
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
mov byte [esp + 0x80], 0xb
lea edi, [esi + 0x32c]
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x368]
mov byte [esp + 0x80], 0xc
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x3a4]
mov byte [esp + 0x80], 0xd
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x3e0]
mov byte [esp + 0x80], 0xe
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x41c]
mov byte [esp + 0x80], 0xf
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x458]
mov byte [esp + 0x80], 0x10
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x494]
mov byte [esp + 0x80], 0x11
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f18e8
lea edi, [esi + 0x4d0]
mov byte [esp + 0x80], 0x12
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f11d4
lea edi, [esi + 0x50c]
mov byte [esp + 0x80], 0x13
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f134c
lea edi, [esi + 0x548]
mov byte [esp + 0x80], 0x14
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f18e8
lea edi, [esi + 0x584]
mov byte [esp + 0x80], 0x15
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f18e8
lea edi, [esi + 0x5c0]
mov byte [esp + 0x80], 0x16
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x5fc]
mov byte [esp + 0x80], 0x17
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1814
lea edi, [esi + 0x638]
mov byte [esp + 0x80], 0x18
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea ecx, [esi + 0x698]
mov byte [esp + 0x80], 0x19
call fcn.004dcc40
mov ecx, dword [0x639698]
mov dword [esi + 0x89c], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x8a0], edx
mov dword [esi + 0x898], ebp
mov eax, dword [0x639698]
mov dword [esi + 0x8a8], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x8ac], ecx
mov dword [esi + 0x8a4], ebp
mov edx, dword [0x639698]
mov dword [esi + 0x8b4], edx
mov eax, dword [0x639698]
mov dword [esi + 0x8b8], eax
mov dword [esi + 0x8b0], ebp
mov ecx, dword [0x639698]
mov dword [esi + 0x8c0], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x8c4], edx
mov dword [esi + 0x8bc], ebp
mov eax, dword [0x639698]
mov dword [esi + 0x8cc], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x8d0], ecx
mov dword [esi + 0x8c8], ebp
mov edx, dword [0x639698]
mov dword [esi + 0x8d8], edx
mov eax, dword [0x639698]
mov dword [esi + 0x8dc], eax
mov dword [esi + 0x8d4], ebp
mov ecx, dword [0x639698]
mov dword [esi + 0x8e4], ecx
mov edx, dword [0x639698]
mov dword [esi + 0x8e8], edx
mov dword [esi + 0x8e0], ebp
mov eax, dword [0x639698]
mov dword [esi + 0x8f0], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x8f4], ecx
mov dword [esi + 0x8ec], ebp
mov edx, dword [0x639698]
mov dword [esi + 0x8fc], edx
mov eax, dword [0x639698]
mov dword [esi + 0x900], eax
mov dword [esi + 0x8f8], ebp
mov ecx, dword [0x639698]
lea edi, [esi + 0x904]
mov dword [edi + 4], ecx
mov edx, dword [0x639698]
mov dword [edi + 8], edx
mov dword [edi], ebp
mov eax, dword [0x639698]
mov dword [esi + 0x914], eax
mov ecx, dword [0x639698]
mov dword [esi + 0x918], ecx
mov dword [esi + 0x910], ebp
mov edx, dword [0x639698]
mov dword [esi + 0x920], edx
mov eax, dword [0x639698]
mov dword [esi + 0x924], eax
mov dword [esi + 0x91c], ebp
mov byte [esp + 0x80], 0x26
lea eax, [esi + 0x928]
push fcn.00410bc0
push fcn.004295f0
push 6
push 0xc
push eax
call fcn.00573af2
push fcn.00410bc0
push fcn.004295f0
lea eax, [esi + 0x970]
push 6
push 0xc
push eax
mov byte [esp + 0x94], 0x27
call fcn.00573af2
push fcn.00410bc0
push fcn.004295f0
lea eax, [esi + 0x9b8]
push 6
push 0xc
push eax
mov byte [esp + 0x94], 0x28
call fcn.00573af2
push fcn.00410bc0
push fcn.004295f0
lea eax, [esi + 0xa00]
push 6
push 0xc
push eax
mov byte [esp + 0x94], 0x29
call fcn.00573af2
push fcn.00410bc0
push fcn.004295f0
lea eax, [esi + 0xa48]
push 6
push 0xc
push eax
mov byte [esp + 0x94], 0x2a
call fcn.00573af2
push fcn.00410bc0
push fcn.004295f0
lea eax, [esi + 0xa90]
push 6
push 0xc
push eax
mov byte [esp + 0x94], 0x2b
call fcn.00573af2
mov ecx, dword [0x639698]
mov dword [esi + 0xadc], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xae0], edx
mov dword [esi + 0xad8], ebp
mov eax, dword [0x639698]
mov dword [esi + 0xae4], eax
mov ecx, dword [0x639698]
mov dword [esi + 0xae8], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xaec], edx
mov eax, dword [0x639698]
mov dword [esi + 0xaf4], eax
mov ecx, dword [0x639698]
mov dword [esi + 0xaf8], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xafc], edx
mov eax, dword [0x639698]
mov dword [esi + 0xb04], eax
mov ecx, dword [0x639698]
mov dword [esi + 0xb08], ecx
mov dword [esi + 0xb00], ebp
mov edx, dword [0x639698]
mov dword [esi + 0xb10], edx
mov eax, dword [0x639698]
mov dword [esi + 0xb14], eax
mov dword [esi + 0xb0c], ebp
mov ecx, dword [0x639698]
mov dword [esi + 0xb20], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xb24], edx
mov dword [esi + 0xb1c], ebp
mov eax, dword [0x639698]
mov dword [esi + 0xb28], eax
mov ecx, dword [0x639698]
mov dword [esi + 0xb2c], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xb30], edx
mov eax, dword [0x639698]
mov dword [esi + 0xb34], eax
mov ecx, dword [0x639698]
mov dword [esi + 0xb38], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xb3c], edx
mov eax, dword [0x639698]
lea ebx, [esi + 0xb48]
mov dword [ebx], eax
mov ecx, dword [0x639698]
mov dword [ebx + 4], ecx
mov edx, dword [0x639698]
mov dword [ebx + 8], edx
mov dword [ebx + 0x10], ebp
mov dword [ebx + 0x14], ebp
mov eax, dword [0x639698]
mov dword [esi + 0xb60], eax
mov ecx, dword [0x639698]
mov dword [esi + 0xb64], ecx
mov edx, dword [0x639698]
mov dword [esi + 0xb68], edx
mov dword [esi + 0xb70], ebp
mov dword [esi + 0xb74], ebp
push fcn.00429430
push fcn.00429410
push 0x10
lea eax, [esi + 0xc2c]
push 0xc
push eax
mov byte [esp + 0x94], 0x36
call fcn.00573af2
push fcn.00429430
push fcn.00429410
push 0x10
lea ecx, [esi + 0xcec]
push 0xc
push ecx
mov byte [esp + 0x94], 0x37
call fcn.00573af2
lea ecx, [esi + 0xdc8]
mov byte [esp + 0x80], 0x38
call fcn.0043db40
mov edx, dword [0x639698]
mov dword [esi + 0xf1c], edx
push 0x50
mov byte [esp + 0x84], 0x3a
mov dword [esi + 0xf24], 0x14
call fcn.0058ecf8
lea ecx, [esi + 0xf20]
add esp, 4
mov dword [ecx], eax
call fcn.00431b10
push 0x18
mov byte [esp + 0x84], 0x3b
mov dword [esi + 0xf34], 6
call fcn.0058ecf8
add esp, 4
lea ecx, [esi + 0xf30]
mov dword [ecx], eax
call fcn.00431b10
push 0x640
mov byte [esp + 0x84], 0x3c
mov dword [esi + 0xf44], 0xc8
call fcn.0058ecf8
lea ecx, [esi + 0xf40]
add esp, 4
mov dword [ecx], eax
call fcn.00431ae0
push 0x62d20c
lea ecx, [esp + 0x8c]
mov byte [esp + 0x84], 0x3d
mov dword [esi], 0x5dcc38
call fcn.00593749
mov eax, dword [esp + 0x88]
push 0x62d200
push eax
lea ecx, [esi + 0xad8]
mov byte [esp + 0x88], 0x3e
call fcn.00429610
push 8
lea ecx, [esi + 0xad8]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push 0x62d1ec
push ecx
lea ecx, [esi + 0x91c]
call fcn.00429610
push ebp
lea ecx, [esi + 0x91c]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d1e0
push edx
lea ecx, [esi + 0x928]
call fcn.00429610
push ebp
lea ecx, [esi + 0x928]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d1d4
push eax
lea ecx, [esi + 0x970]
call fcn.00429610
push 0xffffff
lea ecx, [esi + 0x970]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push 0x62d1c8
push ecx
lea ecx, [esi + 0x9b8]
call fcn.00429610
push ebp
lea ecx, [esi + 0x9b8]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d1b8
push edx
lea ecx, [esi + 0xa00]
call fcn.00429610
push ebp
lea ecx, [esi + 0xa00]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d1ac
push eax
lea ecx, [esi + 0xa48]
call fcn.00429610
push ebp
lea ecx, [esi + 0xa48]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push 0x62d1a0
push ecx
lea ecx, [esi + 0xa90]
call fcn.00429610
push 0x14
lea ecx, [esi + 0xa90]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d194
lea ecx, [esi + 0x934]
push edx
call fcn.00429610
push 0xffffff
lea ecx, [esi + 0x934]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d188
lea ecx, [esi + 0x97c]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0x97c]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d17c
lea ecx, [esi + 0x9c4]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0x9c4]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d16c
lea ecx, [esi + 0xa0c]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0xa0c]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d160
lea ecx, [esi + 0xa54]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0xa54]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d154
lea ecx, [esi + 0xa9c]
push eax
call fcn.00429610
push 0x14
lea ecx, [esi + 0xa9c]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d148
lea ecx, [esi + 0x940]
push edx
call fcn.00429610
push 0xff
lea ecx, [esi + 0x940]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d13c
lea ecx, [esi + 0x988]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0x988]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d130
lea ecx, [esi + 0x9d0]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0x9d0]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d120
lea ecx, [esi + 0xa18]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0xa18]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d114
lea ecx, [esi + 0xa60]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0xa60]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d108
lea ecx, [esi + 0xaa8]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0xaa8]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d0fc
lea ecx, [esi + 0x94c]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0x94c]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d0f0
lea ecx, [esi + 0x994]
push eax
call fcn.00429610
push 0xffffff
lea ecx, [esi + 0x994]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d0e4
lea ecx, [esi + 0x9dc]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0x9dc]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d0d4
lea ecx, [esi + 0xa24]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0xa24]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d0c8
lea ecx, [esi + 0xa6c]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0xa6c]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d0bc
lea ecx, [esi + 0xab4]
push eax
call fcn.00429610
push 0x14
lea ecx, [esi + 0xab4]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d0b0
lea ecx, [esi + 0x958]
push edx
call fcn.00429610
push 0xffffff
lea ecx, [esi + 0x958]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d0a4
lea ecx, [esi + 0x9a0]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0x9a0]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d098
lea ecx, [esi + 0x9e8]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0x9e8]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d088
lea ecx, [esi + 0xa30]
push eax
call fcn.00429610
push ebp
lea ecx, [esi + 0xa30]
call fcn.00410c40
mov edx, dword [esp + 0x88]
push 0x62d07c
lea ecx, [esi + 0xa78]
push edx
call fcn.00429610
push ebp
lea ecx, [esi + 0xa78]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push 0x62d070
lea ecx, [esi + 0xac0]
push eax
call fcn.00429610
push 0x14
lea ecx, [esi + 0xac0]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push ecx
lea ecx, [esi + 0x968]
call fcn.00593864
push 0x62d064
lea ecx, [esi + 0x96c]
call fcn.00593864
push 0xff
lea ecx, [esi + 0x964]
call fcn.00410c40
mov edx, dword [esp + 0x88]
lea ecx, [esi + 0x9b0]
push edx
call fcn.00593864
push 0x62d058
lea ecx, [esi + 0x9b4]
call fcn.00593864
push ebp
lea ecx, [esi + 0x9ac]
call fcn.00410c40
mov eax, dword [esp + 0x88]
lea ecx, [esi + 0x9f8]
push eax
call fcn.00593864
push 0x62d04c
lea ecx, [esi + 0x9fc]
call fcn.00593864
push ebp
lea ecx, [esi + 0x9f4]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push ecx
lea ecx, [esi + 0xa40]
call fcn.00593864
push 0x62d03c
lea ecx, [esi + 0xa44]
call fcn.00593864
push ebp
lea ecx, [esi + 0xa3c]
call fcn.00410c40
mov edx, dword [esp + 0x88]
lea ecx, [esi + 0xa88]
push edx
call fcn.00593864
push 0x62d030
lea ecx, [esi + 0xa8c]
call fcn.00593864
push ebp
lea ecx, [esi + 0xa84]
call fcn.00410c40
mov eax, dword [esp + 0x88]
lea ecx, [esi + 0xad0]
push eax
call fcn.00593864
push 0x62d024
lea ecx, [esi + 0xad4]
call fcn.00593864
push ebp
lea ecx, [esi + 0xacc]
call fcn.00410c40
mov dword [esi + 0xf7d20], ebp
mov dword [esi + 0xf58], ebp
mov dword [esi + 0xf5c], ebp
mov dword [esi + 0xf00], ebp
mov dword [esi + 0xf04], ebp
mov ecx, dword [esp + 0x88]
mov dword [esi + 0xf08], ebp
mov dword [esi + 0xf0c], ebp
mov dword [esi + 0xf10], ebp
mov dword [esi + 0xf14], ebp
mov eax, 1
mov dword [esi + 0xf18], ebp
mov dword [esi + 0xfa4], eax
mov dword [esi + 0xb80], ebp
mov dword [esi + 0xb84], ebp
mov dword [esi + 0xfb8], eax
mov dword [esi + 0xe04], esi
push ecx
mov dword [esi + 0x3ad4], ebp
lea ecx, [esi + 0x89c]
mov dword [esi + 0xfa0], ebp
call fcn.00593864
push 0x62d018
lea ecx, [esi + 0x8a0]
call fcn.00593864
push ebp
lea ecx, [esi + 0x898]
call fcn.00410c40
mov edx, dword [esp + 0x88]
lea ecx, [esi + 0x8a8]
push edx
call fcn.00593864
push 0x62d00c
lea ecx, [esi + 0x8ac]
call fcn.00593864
push 1
lea ecx, [esi + 0x8a4]
call fcn.00410c40
mov eax, dword [esp + 0x88]
lea ecx, [esi + 0x8b4]
push eax
call fcn.00593864
push 0x62d000
lea ecx, [esi + 0x8b8]
call fcn.00593864
push ebp
lea ecx, [esi + 0x8b0]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push ecx
lea ecx, [esi + 0x8cc]
call fcn.00593864
push 0x62cff4
lea ecx, [esi + 0x8d0]
call fcn.00593864
push ebp
lea ecx, [esi + 0x8c8]
call fcn.00410c40
mov edx, dword [esp + 0x88]
lea ecx, [esi + 0x8d8]
push edx
call fcn.00593864
push 0x62cfe8
lea ecx, [esi + 0x8dc]
call fcn.00593864
push 1
lea ecx, [esi + 0x8d4]
call fcn.00410c40
mov eax, dword [esp + 0x88]
push eax
lea ecx, [esi + 0x8e4]
call fcn.00593864
push 0x62cfdc
lea ecx, [esi + 0x8e8]
call fcn.00593864
push 1
lea ecx, [esi + 0x8e0]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push ecx
lea ecx, [esi + 0x8c0]
call fcn.00593864
push 0x62cfc8
lea ecx, [esi + 0x8c4]
call fcn.00593864
push 0x54
lea ecx, [esi + 0x8bc]
call fcn.00410c40
mov edx, dword [esp + 0x88]
lea ecx, [esi + 0x8f0]
push edx
call fcn.00593864
push 0x62cfbc
lea ecx, [esi + 0x8f4]
call fcn.00593864
push 1
lea ecx, [esi + 0x8ec]
call fcn.00410c40
mov eax, dword [esp + 0x88]
lea ecx, [edi + 4]
push eax
call fcn.00593864
push 0x62cfb0
lea ecx, [edi + 8]
call fcn.00593864
push 0x4b
mov ecx, edi
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push ecx
lea ecx, [esi + 0xaf8]
call fcn.00593864
push 0x62cfa0
lea ecx, [esi + 0xafc]
call fcn.00593864
push 0x62cf94
lea ecx, [esi + 0xaf4]
call fcn.004294f0
mov edx, dword [esp + 0x88]
lea ecx, [esi + 0x8fc]
push edx
call fcn.00593864
push 0x62cf84
lea ecx, [esi + 0x900]
call fcn.00593864
push 1
lea ecx, [esi + 0x8f8]
call fcn.00410c40
mov eax, dword [esp + 0x88]
lea ecx, [esi + 0xb04]
push eax
call fcn.00593864
push 0x62cf70
lea ecx, [esi + 0xb08]
call fcn.00593864
push 0xffffffffffffffff
lea ecx, [esi + 0xb00]
call fcn.00410c40
mov ecx, dword [esp + 0x88]
push ecx
lea ecx, [esi + 0xb10]
call fcn.00593864
push 0x62cf68
lea ecx, [esi + 0xb14]
call fcn.00593864
push 1
lea ecx, [esi + 0xb0c]
call fcn.00410c40
cmp dword [edi], 5
jge 0x428e36
mov dword [edi], 5
mov eax, dword [edi]
cmp eax, 0x64
jle 0x428e43
mov dword [edi], 0x64
mov edx, dword [esp + 0x88]
mov ecx, ebx
push edx
call fcn.00593864
push 0x62cf60
lea ecx, [ebx + 4]
call fcn.00593864
push 0x3ff00000
push ebp
mov ecx, ebx
call fcn.004c7cc0
mov eax, dword [esp + 0x88]
lea edi, [esi + 0xb60]
push eax
mov ecx, edi
call fcn.00593864
push 0x62cf58
lea ecx, [edi + 4]
call fcn.00593864
push 0x3ff00000
push ebp
mov ecx, edi
call fcn.004c7cc0
push 0x62cf50
lea ecx, [esi + 0xb68]
call fcn.00593864
push 0x62cf50
lea ecx, [esi + 0xb50]
call fcn.00593864
mov ecx, dword [esp + 0x88]
lea edi, [esi + 0xae4]
push ecx
lea ecx, [edi + 4]
call fcn.00593864
push 0x62cf44
lea ecx, [edi + 8]
call fcn.00593864
push 0x62cf38
mov ecx, edi
call fcn.004294f0
mov edx, dword [esp + 0x88]
lea ebx, [esi + 0x910]
push edx
lea ecx, [ebx + 4]
call fcn.00593864
push 0x62cf30
lea ecx, [ebx + 8]
call fcn.00593864
push ebp
mov ecx, ebx
call fcn.00410c40
push 0x62cf1c
lea eax, [esp + 0x18]
push 0x664810
push eax
call fcn.00593970
mov ecx, dword [eax]
mov edx, dword [esp + 0x88]
lea edi, [esi + 0xb28]
mov dword [esp + 0x10], ecx
push edx
mov byte [esp + 0x84], 0x3f
lea ecx, [edi + 4]
call fcn.00593864
push 0x62cf0c
lea ecx, [edi + 8]
call fcn.00593864
mov eax, dword [esp + 0x10]
mov ecx, edi
push eax
call fcn.004294f0
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 0x3e
call fcn.005936db
mov ecx, dword [esp + 0x88]
lea edi, [esi + 0xb34]
push ecx
lea ecx, [edi + 4]
call fcn.00593864
push 0x62cf00
lea ecx, [edi + 8]
call fcn.00593864
push 0x63f7e8
mov ecx, edi
call fcn.004294f0
mov edx, dword [esp + 0x88]
lea edi, [esi + 0xb1c]
push edx
lea ecx, [edi + 4]
call fcn.00593864
push 0x62cef0
lea ecx, [edi + 8]
call fcn.00593864
push 1
mov ecx, edi
call fcn.00410c40
mov dword [esi + 0xf7d18], ebp
mov dword [esi + 0xf7d1c], ebp
mov dword [esi + 0x894], ebp
mov eax, dword [ebx]
mov dword [esi + 0x674], eax
mov eax, dword [esi + 0x8c8]
mov dword [esi + 0x678], eax
mov eax, dword [esi + 0x898]
mov dword [esi + 0x67c], eax
mov eax, dword [esi + 0x8a4]
mov dword [esi + 0x680], eax
mov eax, dword [esi + 0x8b0]
mov dword [esi + 0x684], eax
mov eax, dword [esi + 0x8d4]
mov dword [esi + 0x688], eax
mov eax, dword [esi + 0x8e0]
mov dword [esi + 0x690], eax
mov eax, dword [esi + 0x91c]
mov ecx, 1
mov dword [esi + 0xf50], ebp
mov dword [esi + 0xf7d30], ebp
mov dword [esi + 0xb88], ebp
mov dword [esi + 0x68c], ecx
mov dword [esi + 0x694], eax
mov dword [esi + 0xf60], ebp
mov dword [esi + 0xf54], 0x407f4000
mov dword [esi + 0xf64], ebp
mov dword [esi + 0xf6c], ebp
mov dword [esi + 0xf98], ebp
mov dword [esi + 0xf68], ebp
mov dword [esi + 0xf74], ecx
mov dword [esi + 0xf7d2c], ebp
mov dword [esi + 0xf7d28], ebp
mov dword [esi + 0xf7d24], ebp
mov dword [esi + 0xf7d34], ebp
mov dword [esi + 0xb8c], 0x40a58880
fld qword [esi + 0xb58]
fmul qword [0x5dcc30]
lea edi, [esi + 0x3ad8]
mov ecx, 0x3d08f
xor eax, eax
mov edx, 0x100
fdivr qword [0x5dcc28]
push edx
fstp qword [esi + 0xf7d40]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edi, [esi + 0x36d0]
mov ecx, 0x100
xor eax, eax
rep stosd dword es:[edi], eax
lea edi, [esi + 0xdb8]
mov ecx, 0x140
mov dword [esi + 0x3ad0], ebp
mov dword [esi + 0x36cc], ebp
mov dword [edi], eax
mov dword [edi + 4], ebp
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
call fcn.0058ecf8
mov edi, eax
add esp, 4
mov dword [esi + 0xf9c], edi
mov ecx, 0x40
xor eax, eax
rep stosd dword es:[edi], eax
push ebp
push 0x165
mov ecx, esi
call fcn.0058ef06
mov ebx, dword [ebx]
mov ecx, esi
push ebx
mov dword [esi + 0x87c], 1
call fcn.0042ce90
push ebp
push ebp
push 0x62ceec
lea edi, [esi + 0x50c]
push ebp
push 1
mov ecx, edi
call fcn.0058c609
push ebp
push ebp
push 0x62cee8
push 1
push 1
mov ecx, edi
call fcn.0058c609
lea eax, [esp + 0x14]
push 0xcde4
push eax
call fcn.004ec350
add esp, 8
mov eax, dword [eax]
push ebp
push ebp
push eax
push 2
push 1
mov ecx, edi
mov byte [esp + 0x94], 0x40
call fcn.0058c609
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 0x3e
call fcn.005936db
lea ecx, [esp + 0x14]
push 0xcde5
push ecx
call fcn.004ec350
add esp, 8
mov eax, dword [eax]
push ebp
push ebp
push eax
push 3
push 1
mov ecx, edi
mov byte [esp + 0x94], 0x41
call fcn.0058c609
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 0x3e
call fcn.005936db
mov eax, dword [esi + 0x528]
lea edx, [esp + 0x2c]
push edx
push eax
call dword [0x5da880]
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
call fcn.0059715b
mov eax, dword [esi + 0x528]
lea edx, [esp + 0x1c]
push edx
push 1
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], 0x145
mov dword [esp + 0x30], 0x105
push 0x1328
push eax
call dword [0x5da8f0]
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
sub ebx, ecx
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x24]
sub edi, ecx
mov ecx, dword [esp + 0x20]
sub ebx, edx
sub edi, ecx
mov ecx, dword [esp + 0x28]
add edi, ecx
sub ecx, dword [esp + 0x20]
add ebx, eax
push 6
sub eax, edx
push ecx
push eax
push ebp
push ebp
push ebp
lea ecx, [esi + 0x50c]
call fcn.00592d8d
mov edx, dword [esi + 0xdc8]
mov eax, 5
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
push ebp
push 0x4d2
lea eax, [esp + 0x44]
lea ecx, [esi + 0xdc8]
push esi
push eax
push 0x50000000
push 0x62d20c
push ebp
mov dword [esp + 0x60], 0x145
mov dword [esp + 0x64], 0x105
call dword [edx + 0x54]
mov ecx, dword [esi + 0xde4]
push ecx
call dword [0x5da884]
lea ecx, [esi + 0xdc8]
call fcn.004415e0
lea edx, [esp + 0x4c]
lea ecx, [esi + 0x638]
push edx
call fcn.00590650
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x74]
add ecx, edi
add eax, edi
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x4c]
add eax, 0x105
push ecx
lea ecx, [esi + 0x638]
mov dword [esp + 0x74], eax
call fcn.00590667
mov edx, dword [esi + 0x1c]
push edx
call dword [0x5da888]
cmp eax, ebp
mov dword [esp + 0x10], eax
je 0x42938b
jmp 0x42932e
mov eax, dword [esp + 0x10]
cmp eax, dword [esi + 0x654]
je 0x42937a
cmp eax, dword [esi + 0x528]
je 0x42937a
cmp eax, dword [esi + 0xde4]
je 0x42937a
lea ecx, [esp + 0x4c]
push ecx
push eax
call dword [0x5da88c]
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x10]
add edx, ebx
mov dword [esp + 0x70], edx
lea edx, [esp + 0x4c]
add ecx, ebx
push edx
push eax
mov dword [esp + 0x70], ecx
call dword [0x5da890]
mov eax, dword [esp + 0x10]
push 2
push eax
call dword [0x5da894]
cmp eax, ebp
mov dword [esp + 0x10], eax
jne 0x42932a
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
call fcn.00590650
mov ecx, dword [esp + 0x70]
add ecx, ebx
cmp edi, ebp
mov dword [esp + 0x70], ecx
jle 0x4293a9
add dword [esp + 0x74], edi
lea edx, [esp + 0x4c]
mov ecx, esi
push edx
call fcn.00590667
mov ecx, dword [esi + 0x1c]
lea eax, [esi + 0xfa8]
push eax
push ecx
call dword [0x5da880]
mov edx, dword [esi + 0x1c]
push 1
push ebp
push edx
call dword [0x5da8dc]
mov dword [esi + 0xf88], ebp
lea ecx, [esp + 0x88]
mov dword [esi + 0xf94], ebp
mov dword [esi + 0xf8c], ebp
mov byte [esp + 0x80], 0x3d
call fcn.005936db
mov ecx, dword [esp + 0x78]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x74
ret 4