Function at 0x434cf0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Enumerate processes
Get number of processors
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x2e8]
push ebx
push esi
push edi
mov dword [ebp - 0x280], eax
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x24c], 0
xor eax, eax
push fcn.00434c80
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x27c], 0
mov byte [ebp - 0x284], 0
mov ecx, dword [0x5f4fe0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x288], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 7
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1d40]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1d40]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1d50]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1d50]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1d60]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1d60]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1d70]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1d70]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1d80]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1d80]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1d90]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1d90]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1da0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1da0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x288]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f4ff0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x28c], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 0xe
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1db0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1db0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1dc0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1dc0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1dd0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1dd0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1de0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1de0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1df0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1df0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e00]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e00]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e10]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e10]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e20]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e20]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x1c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e30]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e30]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x20
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e40]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e40]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x24
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e50]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e50]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x28
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e60]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e60]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x2c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e70]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e70]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x30
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1e80]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e80]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x34
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x28c]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5000]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x290], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 0x49
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1ea0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ea0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1eb0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1eb0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1ec0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ec0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1ed0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ed0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1ee0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ee0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1ef0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ef0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f00]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f00]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f10]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f10]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x1c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f20]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f20]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x20
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f30]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f30]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x24
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f40]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f40]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x28
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f50]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f50]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x2c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f60]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f60]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x30
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f70]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f70]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x34
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f80]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f80]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x38
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1f90]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1f90]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x3c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1fa0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1fa0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x40
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1fb0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1fb0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x44
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1fc0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1fc0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x48
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1fd0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1fd0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x4c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1fe0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1fe0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x50
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1ff0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1ff0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x54
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2000]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2000]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x58
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2010]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2010]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x5c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2020]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2020]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x60
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2030]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2030]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x64
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2040]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2040]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x68
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2050]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2050]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x6c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2060]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2060]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x70
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2070]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2070]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x74
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2080]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2080]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x78
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2090]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2090]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x7c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f20a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f20a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x80
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f20b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f20b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x84
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f20c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f20c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x88
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f20d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f20d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x8c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f20e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f20e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x90
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f20f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f20f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x94
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2100]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2100]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x98
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2110]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2110]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x9c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2120]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2120]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xa0
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2130]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2130]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xa4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2140]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2140]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xa8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2150]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2150]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xac
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2160]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2160]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xb0
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2170]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2170]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xb4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2180]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2180]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xb8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2190]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2190]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xbc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f21a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f21a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc0
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f21b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f21b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f21c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f21c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f21d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f21d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xcc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f21e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f21e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xd0
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f21f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f21f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xd4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2200]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2200]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xd8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2210]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2210]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xdc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2220]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2220]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xe0
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2230]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2230]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xe4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2240]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2240]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xe8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2250]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2250]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xec
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2260]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2260]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xf0
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2270]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2270]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xf4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2280]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2280]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xf8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2290]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2290]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xfc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f22a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f22a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x100
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f22b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f22b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x104
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f22c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f22c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x108
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f22d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f22d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f22e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f22e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x110
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f22f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f22f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x114
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2300]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2300]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x118
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2310]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2310]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x11c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2320]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2320]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x120
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x290]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5040]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x294], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 1
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2330]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2330]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x294]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5030]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x298], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 6
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2340]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2340]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2350]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2350]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2360]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2360]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2370]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2370]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2380]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2380]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2390]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2390]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x298]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5080]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x29c], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 0xd
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2400]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2400]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2410]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2410]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x1c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2420]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2420]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x20
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f23c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f23c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x24
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2430]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2430]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x28
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2440]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2440]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x2c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2450]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2450]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x30
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x29c]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5070]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2a0], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 4
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2460]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2460]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2470]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2470]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2480]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2480]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2490]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2490]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2a0]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5050]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2a4], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 4
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f24a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f24a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f24b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f24b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f24c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f24c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f24d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f24d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2a4]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5060]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2a8], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 3
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f24e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f24e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f24f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f24f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2500]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2500]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2a8]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5090]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2ac], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 5
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2510]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2510]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2520]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2520]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2530]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2530]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2540]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2540]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2550]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2550]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2ac]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50a0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2b0], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 1
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2560]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2560]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2b0]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50c0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2b4], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 0x14
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2570]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2570]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2580]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2580]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2590]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2590]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f25a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f25a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f25b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f25b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f25c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f25c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f25d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f25d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f25e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f25e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x1c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f25f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f25f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x20
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2600]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2600]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x24
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2610]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2610]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x28
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2620]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2620]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x2c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2630]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2630]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x30
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2640]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2640]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x34
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2650]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2650]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x38
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2660]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2660]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x3c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2670]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2670]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x40
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2780]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2780]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x44
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2680]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2680]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x48
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2690]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2690]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x4c
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2b4]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50b0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2b8], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 7
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2630]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2630]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2640]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2640]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f26a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f26a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f26b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f26b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f26c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f26c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f26d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f26d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f26e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f26e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2b8]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50f0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2bc], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 6
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f26f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f26f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2700]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2700]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2710]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2710]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2720]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2720]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2730]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2730]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2740]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2740]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2bc]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50e0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2c0], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 7
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2750]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2750]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2760]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2760]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2770]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2770]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2780]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2780]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2790]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2790]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f27a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f27a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f27b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f27b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2c0]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5100]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2c4], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 3
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f27c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f27c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f27d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f27d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f27e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f27e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2c4]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5110]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x2c8], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 0x15
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f27f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f27f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2800]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2800]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2810]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2810]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2820]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2820]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0xc
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2830]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2830]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x10
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2840]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2840]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x14
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2850]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2850]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x18
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2860]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2860]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x1c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2870]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2870]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x20
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2880]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2880]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x24
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2890]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2890]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x28
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f28a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f28a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x2c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f28b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f28b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x30
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f28c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f28c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x34
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f28d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f28d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x38
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f28e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f28e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x3c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f28f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f28f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x40
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2900]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2900]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x44
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2910]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2910]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x48
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2920]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2920]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x4c
call fcn.00408bc0
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2930]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2930]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
add eax, 0x50
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x2c8]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5130]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov edi, eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 1
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2940]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2940]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
lea eax, [edi + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f5140]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov esi, eax
mov ebx, 0x620d38
lea eax, [ebp - 0x24c]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x250], 1
lea eax, [ebp - 0x250]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x24c]
call fcn.0040d060
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f2950]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2950]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x24c]
call fcn.00408bc0
mov edx, dword [ebp - 0x24c]
lea eax, [esi + 8]
mov ecx, ebx
call fcn.0040d040
mov ebx, 0x622168
lea eax, [ebp - 0x258]
mov edx, 0x622168
call fcn.0040cf40
mov dword [ebp - 0x250], 0x13
lea eax, [ebp - 0x250]
push eax
mov edx, 0x622168
mov ecx, 1
lea eax, [ebp - 0x258]
call fcn.0040d060
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x288]
mov dword [eax], edx
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x28c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x290]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x294]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x298]
mov dword [eax + 0x10], edx
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x29c]
mov dword [eax + 0x14], edx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2a0]
mov dword [edx + 0x18], eax
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2a4]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x2a8]
mov dword [eax + 0x20], edx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2ac]
mov dword [edx + 0x24], eax
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2b0]
mov dword [edx + 0x28], eax
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2b4]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x2b8]
mov dword [eax + 0x30], edx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2bc]
mov dword [edx + 0x34], eax
mov eax, dword [ebp - 0x258]
mov edx, dword [ebp - 0x2c0]
mov dword [eax + 0x38], edx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2c4]
mov dword [edx + 0x3c], eax
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x2c8]
mov dword [edx + 0x40], eax
mov eax, dword [ebp - 0x258]
mov dword [eax + 0x44], edi
mov eax, dword [ebp - 0x258]
mov dword [eax + 0x48], esi
mov edx, dword [ebp - 0x258]
lea eax, [ebp - 4]
mov ecx, ebx
call fcn.0040d040
mov edx, 1
mov eax, 0x6252e4
call fcn.0044b430
mov dword [ebp - 0x2d0], eax
push 0
push 2
call fcn.00554180
mov esi, eax
cmp esi, 0xffffffff
jne 0x43815c
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2cc], eax
jmp 0x438736
mov dword [ebp - 0x248], 0x22c
lea eax, [ebp - 0x248]
push eax
push esi
call fcn.00554190
test eax, eax
je 0x438204
lea esi, [esi]
nop
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x224]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x260], 0xa
lea edx, [ebp - 0x260]
xor ecx, ecx
mov eax, 0x622110
call fcn.0045b2b0
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x2d0]
mov ebx, dword [ebp - 0x2d0]
mov ecx, dword [ebx]
call dword [ecx + 0xa8]
mov dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x240]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2d0]
mov edi, dword [ebp - 0x2d0]
mov ebx, dword [edi]
call dword [ebx + 0x94]
lea eax, [ebp - 0x248]
push eax
push esi
call fcn.005541a0
test eax, eax
jne 0x438180
push esi
call sub.kernel32.dll_CloseHandle
mov eax, dword [ebp - 4]
call fcn.0040cf30
mov dword [ebp - 0x2d8], eax
test eax, eax
jl 0x438668
mov dword [ebp - 0x2d4], 0xffffffff
lea esi, [esi]
add dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 8]
call fcn.0040cf30
mov dword [ebp - 0x2e4], eax
test eax, eax
jl 0x438654
mov dword [ebp - 0x2dc], 0xffffffff
lea esi, [esi]
nop
add dword [ebp - 0x2dc], 1
mov eax, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x2d0]
mov ecx, dword [edx]
call dword [ecx + 0x84]
sub eax, 1
mov dword [ebp - 0x2e8], eax
test eax, eax
jl 0x43862c
mov dword [ebp - 0x2e0], 0xffffffff
mov esi, esi
add dword [ebp - 0x2e0], 1
lea eax, [ebp - 0x254]
call fcn.00403d00
push 0
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x268]
mov esi, dword [ebp - 0x2d0]
mov ebx, dword [esi]
call dword [ebx + 0x7c]
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x264]
call fcn.004598a0
mov ebx, dword [ebp - 0x264]
lea eax, [ebp - 0x268]
push eax
mov eax, dword [0x5f1690]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1690]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x268]
lea eax, [ebp - 0x254]
mov ecx, ebx
call fcn.00408cc0
mov edx, dword [ebp - 0x254]
lea ecx, [ebp - 0x1c]
mov eax, 0x620a30
call fcn.004282c0
lea ecx, [ebp - 8]
lea edx, [ebp - 0x1c]
mov eax, 0x620a30
call fcn.00428240
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x2dc]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 8]
call fcn.00409780
test eax, eax
jne 0x438386
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 4]
or dword [ebp - 0x27c], eax
mov byte [ebp - 0x284], 1
jmp 0x43862a
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x268]
mov esi, dword [ebp - 0x2d0]
mov ebx, dword [esi]
call dword [ebx + 0x7c]
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x4383b0
mov eax, dword [eax - 4]
cmp eax, 0x10
jl 0x4384d0
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x268]
mov esi, dword [ebp - 0x2d0]
mov ebx, dword [esi]
call dword [ebx + 0x7c]
mov eax, dword [ebp - 0x268]
mov ecx, 0x10
mov edx, 1
call fcn.004099e0
lea eax, [ebp - 0x268]
call fcn.00403d00
push 0
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x264]
call fcn.004598a0
mov ebx, dword [ebp - 0x264]
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1690]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1690]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x268]
mov ecx, ebx
call fcn.00408cc0
mov edx, dword [ebp - 0x268]
lea ecx, [ebp - 0x278]
mov eax, 0x620a30
call fcn.004282c0
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x278]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 8]
lea edx, [ebp - 0x1c]
mov eax, 0x620a30
call fcn.00428240
lea eax, [ebp - 0x268]
push eax
mov eax, dword [0x5f1e80]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e80]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 8]
call fcn.00409780
test eax, eax
jne 0x4384d0
mov eax, dword [0x5f4ff0]
or eax, dword [ebp - 0x27c]
mov dword [ebp - 0x27c], eax
mov byte [ebp - 0x284], 1
jmp 0x43862a
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x268]
mov esi, dword [ebp - 0x2d0]
mov ebx, dword [esi]
call dword [ebx + 0x7c]
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x4384fa
mov eax, dword [eax - 4]
cmp eax, 0x11
jl 0x438618
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x268]
mov esi, dword [ebp - 0x2d0]
mov ebx, dword [esi]
call dword [ebx + 0x7c]
mov eax, dword [ebp - 0x268]
mov ecx, 0x11
mov edx, 1
call fcn.004099e0
lea eax, [ebp - 0x268]
call fcn.00403d00
push 0
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x264]
call fcn.004598a0
mov ebx, dword [ebp - 0x264]
lea eax, [ebp - 0x254]
push eax
mov eax, dword [0x5f1690]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1690]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x268]
mov ecx, ebx
call fcn.00408cc0
mov edx, dword [ebp - 0x268]
lea ecx, [ebp - 0x278]
mov eax, 0x620a30
call fcn.004282c0
lea edi, [ebp - 0x1c]
lea esi, [ebp - 0x278]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 8]
lea edx, [ebp - 0x1c]
mov eax, 0x620a30
call fcn.00428240
lea eax, [ebp - 0x268]
push eax
mov eax, dword [0x5f1e90]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f1e90]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 8]
call fcn.00409780
test eax, eax
jne 0x438618
mov eax, dword [0x5f4ff0]
or eax, dword [ebp - 0x27c]
mov dword [ebp - 0x27c], eax
mov byte [ebp - 0x284], 1
jmp 0x43862a
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x2e0]
jg 0x4382a0
mov esi, esi
mov al, byte [ebp - 0x284]
test al, al
je 0x438640
mov byte [ebp - 0x284], 0
jmp 0x438652
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x2dc]
jg 0x438268
mov esi, esi
mov eax, dword [ebp - 0x2d8]
cmp eax, dword [ebp - 0x2d4]
jg 0x438230
mov esi, esi
mov eax, dword [0x5f50b0]
and eax, dword [ebp - 0x27c]
ja 0x43872a
mov eax, dword [0x5f50d0]
and eax, dword [ebp - 0x27c]
ja 0x43872a
mov eax, dword [0x5f4ff0]
and eax, dword [ebp - 0x27c]
ja 0x43872a
mov eax, dword [0x5f50a0]
and eax, dword [ebp - 0x27c]
ja 0x43872a
mov eax, dword [0x5f50e0]
and eax, dword [ebp - 0x27c]
ja 0x43872a
mov eax, dword [0x5f5120]
and eax, dword [ebp - 0x27c]
ja 0x43872a
mov eax, dword [0x5f50f0]
and eax, dword [ebp - 0x27c]
ja 0x43872a
xor ebx, ebx
xor esi, esi
xor edi, edi
mov eax, dword [ebp - 0x280]
call fcn.00439050
mov ebx, eax
mov eax, dword [ebp - 0x280]
call fcn.00439590
mov esi, eax
mov eax, dword [ebp - 0x280]
call fcn.00433fc0
mov edi, eax
mov eax, ebx
or eax, dword [ebp - 0x27c]
mov dword [ebp - 0x27c], eax
mov eax, esi
or eax, dword [ebp - 0x27c]
mov dword [ebp - 0x27c], eax
mov eax, edi
or eax, dword [ebp - 0x27c]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2cc], eax
xor edx, edx
pop eax
add esp, 0xc
mov dword fs:[edx], eax
mov eax, ebp
call fcn.00434c80
mov eax, dword [ebp - 0x2cc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret