Function at 0x439c40
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b6562
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x118
mov eax, dword [0x533e00]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x130], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
push ecx
mov byte [esp + 0x134], 3
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4fe310
call fcn.004a4ff7
mov ecx, 0x56f7f0
call fcn.004183e0
test eax, eax
push 1
jge 0x4306c6
push 0x520778
jmp 0x430c1f
push 0x520750
call fcn.0045fb60
push 1
push 0x520734
call fcn.0045fb60
add esp, 0x10
lea ecx, [esp + 0x10]
push 0x52072c
call fcn.004a5112
mov ebp, 3
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x56f7f0
call fcn.00418830
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x30]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
mov eax, dword [esp + 0x10]
push 0x64
lea ecx, [esp + 0xac]
mov eax, dword [eax - 8]
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jle 0x4307a7
lea esi, [esp + 0xa8]
lea eax, [esp + 0x28]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x43079e
test cl, cl
je 0x43079a
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x43079e
add eax, 2
add esi, 2
test cl, cl
jne 0x430776
xor eax, eax
jmp 0x4307a3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4307bf
mov al, byte [0x579575]
test al, al
je 0x430c27
mov eax, ebp
dec ebp
test eax, eax
jne 0x4306f2
push 0x520720
lea ecx, [esp + 0x14]
mov ebp, 0x14
call fcn.004a5112
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x56f7f0
call fcn.00418830
mov ecx, dword [esp + 0x10]
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x30]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
mov eax, dword [esp + 0x10]
push 0xc8
lea ecx, [esp + 0xac]
mov eax, dword [eax - 8]
add eax, 5
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jle 0x4308a2
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
mov eax, dword [edx - 8]
add eax, 5
push eax
lea eax, [esp + 0xac]
push eax
push ecx
call fcn.0041e280
add esp, 0xc
push 0
push 0x52071c
mov ecx, eax
mov byte [esp + 0x138], 4
call fcn.0049e281
cmp eax, 0xffffffff
lea ecx, [esp + 0x1c]
setne bl
mov byte [esp + 0x130], 3
call fcn.004a4f89
test bl, bl
jne 0x4308c2
mov al, byte [0x579575]
test al, al
je 0x430c27
dec ebp
jne 0x4307d2
push 1
push 0x5206ec
jmp 0x430c1f
push 1
push 0x5206cc
call fcn.0045fb60
add esp, 8
mov ecx, 0x56f7f0
call fcn.00418830
lea edx, [esp + 0x10]
push 0x5206bc
push edx
call fcn.0049e5b4
mov eax, dword [esp + 0x18]
add esp, 8
lea ecx, [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0xffffffffffffffff
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
lea eax, [esp + 0x14]
push 0x1f4
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.00418aa0
test al, al
je 0x4309b6
push 0
push 0x5206b4
lea ecx, [esp + 0x1c]
call fcn.0049e281
cmp eax, 0xffffffff
jne 0x4309b6
push 0
push 0x5206ac
lea ecx, [esp + 0x1c]
call fcn.0049e281
cmp eax, 0xffffffff
je 0x430996
push 0x536030
push 0x5206ac
lea ecx, [esp + 0x1c]
call fcn.0049def0
push 1
push ecx
lea eax, [esp + 0x1c]
mov edx, esp
mov dword [esp + 0x24], esp
push eax
push 0x520694
push edx
call fcn.004a5292
call fcn.0045f930
jmp 0x4309c2
push 1
push 0x520670
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x10]
push 0x520660
call fcn.004a5112
push 0x22
lea ecx, [esp + 0x14]
call fcn.004a538c
mov ecx, dword [esp + 0x24]
lea ebp, [ecx + 0x60]
lea ecx, [esp + 0x10]
push ebp
call fcn.004a53a1
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
lea ebx, [edx + 0x64]
push ebx
call fcn.004a53a1
push 0x22
lea ecx, [esp + 0x14]
call fcn.004a538c
push 0xd
lea ecx, [esp + 0x14]
call fcn.004a538c
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov eax, dword [eax - 8]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0xffffffffffffffff
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
mov eax, dword [esp + 0x10]
push 0x3e8
lea ecx, [esp + 0xac]
mov eax, dword [eax - 8]
add eax, 6
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jl 0x430c18
push 1
push ecx
mov edx, esp
mov dword [esp + 0x24], esp
push ebp
push 0x520640
push edx
call fcn.004a5292
call fcn.0045f930
add esp, 8
mov ecx, 0x56f7f0
call fcn.00418830
lea eax, [esp + 0x10]
push 0x5206bc
push eax
call fcn.0049e5b4
mov ecx, dword [esp + 0x18]
add esp, 8
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0xffffffffffffffff
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
lea eax, [esp + 0x14]
push 0x1f4
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.00418aa0
test al, al
je 0x430b4d
push 0
push 0x5206b4
lea ecx, [esp + 0x1c]
call fcn.0049e281
cmp eax, 0xffffffff
je 0x430c75
push 1
push 0x520670
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x10]
push 0x520660
call fcn.004a5112
push 0x22
lea ecx, [esp + 0x14]
call fcn.004a538c
push ebp
lea ecx, [esp + 0x14]
call fcn.004a53a1
push ebx
lea ecx, [esp + 0x14]
call fcn.004a53a1
push 0x22
lea ecx, [esp + 0x14]
call fcn.004a538c
push 0xd
lea ecx, [esp + 0x14]
call fcn.004a538c
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0xffffffffffffffff
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
mov eax, dword [esp + 0x10]
push 0x3e8
lea ecx, [esp + 0xac]
mov eax, dword [eax - 8]
add eax, 6
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jge 0x430a8f
push 1
push 0x520628
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x130], 2
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x130], 1
call fcn.004a4f89
lea ecx, [esp + 0x20]
mov byte [esp + 0x130], 0
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov dword [esp + 0x130], 0xffffffff
call fcn.004a4f89
xor al, al
jmp 0x4310c9
push 1
push ecx
lea eax, [esp + 0x1c]
mov edx, esp
mov dword [esp + 0x24], esp
push eax
push 0x52060c
push edx
call fcn.004a5292
call fcn.0045f930
add esp, 8
mov ecx, 0x56f7f0
call fcn.00418830
lea ecx, [esp + 0x10]
push 0x5205fc
push ecx
call fcn.0049e5b4
mov edx, dword [esp + 0x18]
add esp, 8
lea ecx, [esp + 0x10]
mov eax, dword [edx - 8]
push eax
call fcn.004a53b9
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
or ebp, 0xffffffff
mov eax, ecx
mov esi, edi
mov edi, edx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0
and ecx, 3
lea edx, [esp + 0x30]
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
lea eax, [esp + 0x14]
push 0xc8
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.00418aa0
test al, al
je 0x430f2e
push 0
push 0x5206b4
lea ecx, [esp + 0x1c]
call fcn.0049e281
cmp eax, ebp
jne 0x430f2e
push 0
push 0x5206ac
lea ecx, [esp + 0x1c]
call fcn.0049e281
cmp eax, ebp
je 0x430d63
push 0x536030
push 0x5206ac
lea ecx, [esp + 0x1c]
call fcn.0049def0
push 1
push ecx
lea eax, [esp + 0x1c]
mov edx, esp
mov dword [esp + 0x24], esp
push eax
push 0x520694
push edx
call fcn.004a5292
call fcn.0045f930
add esp, 8
lea ecx, [esp + 0x10]
push 0x5205ec
call fcn.004a5112
push 0x22
lea ecx, [esp + 0x14]
call fcn.004a538c
mov esi, dword [esp + 0x24]
lea ecx, [esp + 0x10]
lea ebx, [esi + 0x68]
push ebx
call fcn.004a53a1
add esi, 0x6c
lea ecx, [esp + 0x10]
push esi
call fcn.004a53a1
push 0x22
lea ecx, [esp + 0x14]
call fcn.004a538c
push 0xd
lea ecx, [esp + 0x14]
call fcn.004a538c
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004a53b9
mov edi, eax
mov ecx, ebp
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
mov eax, dword [esp + 0x10]
push 0x3e8
lea ecx, [esp + 0xac]
mov eax, dword [eax - 8]
add eax, 6
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
push 1
jge 0x430e50
push 0x5205cc
jmp 0x430f35
push ecx
mov edx, esp
mov dword [esp + 0x24], esp
push ebx
push 0x520640
push edx
call fcn.004a5292
call fcn.0045f930
add esp, 8
mov ecx, 0x56f7f0
call fcn.00418830
lea eax, [esp + 0x10]
push 0x5205fc
push eax
call fcn.0049e5b4
mov ecx, dword [esp + 0x18]
add esp, 8
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004a53b9
mov edi, eax
mov ecx, ebp
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
lea eax, [esp + 0x14]
push 0x1f4
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.00418aa0
test al, al
je 0x430f25
push 0
push 0x5206b4
lea ecx, [esp + 0x1c]
call fcn.0049e281
cmp eax, ebp
jne 0x430f25
push 1
push ecx
lea eax, [esp + 0x1c]
mov edx, esp
mov dword [esp + 0x24], esp
push eax
push 0x52060c
push edx
call fcn.004a5292
call fcn.0045f930
jmp 0x430f3a
push 1
push 0x520670
jmp 0x430f35
push 1
push 0x5205a8
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x10]
push 0x52059c
mov dword [esp + 0x28], 0x14
call fcn.004a5112
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x10]
push eax
call fcn.004a53b9
mov edi, eax
mov ecx, ebp
xor eax, eax
lea edx, [esp + 0x28]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x56f7f0
call fcn.00418830
mov ecx, dword [esp + 0x10]
push ebp
push 0
lea edx, [esp + 0x30]
mov eax, dword [ecx - 8]
mov ecx, 0x56f7f0
push eax
push edx
call fcn.00418570
mov eax, dword [esp + 0x10]
push 0x1f4
lea ecx, [esp + 0xac]
mov eax, dword [eax - 8]
add eax, 5
push eax
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jle 0x431020
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
mov eax, dword [edx - 8]
add eax, 5
push eax
lea eax, [esp + 0xac]
push eax
push ecx
call fcn.0041e280
add esp, 0xc
push 0
push 0x52071c
mov ecx, eax
mov byte [esp + 0x138], 5
call fcn.0049e281
cmp eax, ebp
lea ecx, [esp + 0x1c]
setne bl
mov byte [esp + 0x130], 3
call fcn.004a4f89
test bl, bl
jne 0x431084
mov al, byte [0x579575]
test al, al
je 0x43103d
mov eax, dword [esp + 0x24]
mov edx, eax
dec eax
test edx, edx
mov dword [esp + 0x24], eax
je 0x431084
jmp 0x430f53
lea ecx, [esp + 0x14]
mov byte [esp + 0x130], 2
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x130], 1
call fcn.004a4f89
lea ecx, [esp + 0x20]
mov byte [esp + 0x130], 0
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov dword [esp + 0x130], ebp
call fcn.004a4f89
xor al, al
jmp 0x4310c9
lea ecx, [esp + 0x14]
mov byte [esp + 0x130], 2
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x130], 1
call fcn.004a4f89
lea ecx, [esp + 0x20]
mov byte [esp + 0x130], 0
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov dword [esp + 0x130], ebp
call fcn.004a4f89
mov al, 1
mov ecx, dword [esp + 0x128]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x124
ret
push 0xffffffffffffffff
push 0x4b6681
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x27c
push ebx
push ebp
push esi
push edi
xor edi, edi
mov esi, ecx
push edi
push edi
push 6
push edi
push edi
push 1
lea ecx, [esp + 0x54]
call fcn.0041d770
push 0x4fe7bc
lea eax, [esp + 0x14]
push esi
push eax
mov dword [esp + 0x2a0], edi
call fcn.004a521e
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x294], 1
mov dword [esp + 0xc4], ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0xc8], 0x520960
mov dword [esp + 0xa4], 0x520930
call fcn.0041d7e0
cmp eax, 1
je 0x431315
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 2
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
lea edx, [esp + 0x14]
lea ecx, [esp + 0x3c]
push edx
call fcn.0049e8db
push 0x320
mov ecx, 0x56f538
mov byte [esp + 0x298], 3
call fcn.0040c890
mov ecx, esi
call fcn.00436880
test al, al
jne 0x431399
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 4
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
cmp dword [esi + 0x160], edi
je 0x431404
push 1
push 0x5208fc
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 5
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
mov ecx, esi
call fcn.004366a0
test al, al
jne 0x431472
push 1
push 0x5208d8
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 6
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
push 0xe0
mov ecx, 0x56f7f0
call fcn.004188d0
push edi
mov ecx, 0x56f7f0
call fcn.00418950
lea eax, [esp + 0x1f]
push 0x7d0
push eax
mov ecx, 0x56f7f0
call fcn.004187f0
cmp byte [esp + 0x1f], 0xa5
jne 0x4314bd
lea ecx, [esp + 0x38]
push edi
push ecx
mov ecx, esi
call fcn.0042f8a0
lea ecx, [esp + 0x38]
call fcn.004a4f89
mov edx, dword [0x533e00]
mov dword [esp + 0x18], edx
mov eax, dword [esi + 0x29c]
mov ecx, dword [esi + 0x298]
push eax
push ecx
lea edx, [esp + 0x20]
push 0x5208b8
push edx
mov byte [esp + 0x2a4], 7
call fcn.0049e5b4
add esp, 0x10
lea eax, [esp + 0x18]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.004a4cfe
call fcn.0045f930
add esp, 8
lea ecx, [esp + 0x20]
call fcn.004a55c6
mov ecx, dword [esp + 0x14]
push edi
push 0x10
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2a0], 8
call fcn.004a56d8
test eax, eax
jne 0x4315b7
push 0x10
push edi
push 0x51f63c
call fcn.004a9666
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 9
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
lea ecx, [esp + 0x20]
call fcn.004a59d2
mov ebx, eax
push ebx
call fcn.0048d322
mov ebp, eax
add esp, 4
cmp ebp, edi
jne 0x431661
lea ecx, [esp + 0x20]
call fcn.004a58f3
push 0x10
push edi
push 0x51f5e0
call fcn.004a9666
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0xa
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
mov edx, dword [esp + 0x20]
push ebx
push ebp
lea ecx, [esp + 0x28]
call dword [edx + 0x34]
lea ecx, [esp + 0x20]
call fcn.004a58f3
push 0xd3
mov ecx, 0x56f7f0
call fcn.004188d0
push 0xa5
mov ecx, 0x56f7f0
call fcn.004188d0
push 1
mov ecx, 0x56f7f0
call fcn.004188d0
mov eax, dword [esi + 0x298]
mov ecx, 0x56f7f0
push eax
call fcn.00418950
mov ecx, dword [esi + 0x298]
lea eax, [ebx + ecx - 1]
mov ecx, 0x56f7f0
push eax
call fcn.00418950
push 1
mov ecx, 0x56f7f0
call fcn.00418950
push 0x7d0
push 0x5a
mov ecx, 0x56f7f0
call fcn.00418980
test al, al
jne 0x431777
push 1
push 0x520894
call fcn.0045fb60
push ebp
call fcn.0048d2da
add esp, 0xc
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0xb
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
lea edx, [esp + 0x1f]
push 0x3e8
push edx
mov ecx, 0x56f7f0
call fcn.004187f0
test al, al
jne 0x43181e
push 1
push 0x520870
call fcn.0045fb60
push ebp
call fcn.0048d2da
add esp, 0xc
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0xc
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
push 0xd5
mov ecx, 0x56f7f0
call fcn.004188d0
push 0x1f4
mov ecx, esi
call fcn.0042f7b0
test al, al
jne 0x4318bc
push ebp
call fcn.0048d2da
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0xd
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
push edi
mov ecx, 0x56f7f0
call fcn.004188d0
push 0x1000
mov ecx, 0x56f7f0
call fcn.00418950
push 0x1f4
mov ecx, esi
call fcn.0042f7b0
test al, al
jne 0x431965
push ebp
call fcn.0048d2da
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0xe
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
push 0xfa0
mov ecx, esi
call fcn.0042f7b0
test al, al
jne 0x4319f4
push ebp
call fcn.0048d2da
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0xf
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
mov eax, ebx
shr eax, 0xc
test ebx, 0xfff
mov dword [esp + 0x30], eax
je 0x431a0a
inc eax
mov dword [esp + 0x30], eax
push 2
push eax
call fcn.0045fea0
mov dword [esp + 0x3c], edi
add esp, 8
mov edi, ebp
cmp ebx, 0x1000
mov esi, 0x1000
jae 0x431a2a
mov esi, ebx
push 0x5a
mov ecx, 0x56f7f0
call fcn.004188d0
push 0xffffffffffffffff
push 0
push esi
push edi
mov ecx, 0x56f7f0
call fcn.00418570
push esi
push edi
call fcn.0041db90
add esp, 8
mov ecx, 0x56f7f0
push eax
call fcn.00418920
push 0xbb8
push 0x69
mov ecx, 0x56f7f0
call fcn.00418980
test al, al
je 0x431aa6
sub ebx, esi
mov esi, dword [esp + 0x34]
push esi
call fcn.0045ff80
mov al, byte [0x579575]
add esp, 4
inc esi
add edi, 0x1000
test al, al
mov dword [esp + 0x34], esi
je 0x431b31
cmp esi, dword [esp + 0x30]
jge 0x431bb2
jmp 0x431a1b
push 1
push 0x520848
call fcn.0045fb60
push ebp
call fcn.0048d2da
add esp, 0xc
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0x10
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
call fcn.0045ffa0
push ebp
call fcn.0048d2da
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0x11
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x431c31
push ebp
call fcn.0048d2da
add esp, 4
call fcn.0045ffa0
lea ecx, [esp + 0x20]
mov byte [esp + 0x294], 7
call fcn.004a561b
lea ecx, [esp + 0x18]
mov byte [esp + 0x294], 3
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x294], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 0
call fcn.004a4f89
lea ecx, [esp + 0xe8]
mov dword [esp + 0x294], 0x12
call fcn.004a4f89
lea ecx, [esp + 0x3c]
mov dword [esp + 0x294], 0xffffffff
call fcn.004a0db1
mov al, 1
mov ecx, dword [esp + 0x28c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x288
ret
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4b6735
push eax
mov eax, 0x168c
mov dword fs:[0], esp
call fcn.0048d3b0
push ebx
push ebp
push esi
push edi
push 0
push 0
push 6
mov esi, ecx
push 0
push 0
push 0
lea ecx, [esp + 0x64]
call fcn.0041d770
push 0x4fe7bc
lea eax, [esp + 0x18]
push esi
push eax
mov dword [esp + 0x16b0], 0
call fcn.004a521e
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x16a4], 1
mov dword [esp + 0xd4], ecx
lea ecx, [esp + 0x4c]
mov dword [esp + 0xd8], 0x520a34
mov dword [esp + 0xb4], 0x520930
call fcn.0041d7e0
cmp eax, 1
je 0x431d1f
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 2
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x51f8a0
call fcn.004a4ff7
push ecx
lea ecx, [esp + 0x54]
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x16b0], 3
call fcn.0049e8db
lea eax, [esp + 0x18]
mov byte [esp + 0x16ac], 1
push eax
call fcn.00461650
add esp, 0xc
push 0x320
mov ecx, 0x56f538
mov byte [esp + 0x16a8], 4
call fcn.0040c890
mov ecx, esi
call fcn.00436880
test al, al
jne 0x431dd4
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 5
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
mov eax, dword [esi + 0x160]
test eax, eax
je 0x431e41
push 1
push 0x5208fc
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 6
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
mov ecx, esi
call fcn.004366a0
test al, al
jne 0x431eaf
push 1
push 0x520a0c
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 7
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
mov ecx, dword [0x533e00]
mov dword [esp + 0x1c], ecx
mov edx, dword [esi + 0x29c]
mov eax, dword [esi + 0x298]
push edx
push eax
lea ecx, [esp + 0x24]
mov ebx, 8
push 0x5209ec
push ecx
mov byte [esp + 0x16b4], bl
call fcn.0049e5b4
add esp, 0x10
lea edx, [esp + 0x1c]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004a4cfe
call fcn.0045f930
add esp, 8
mov ecx, 0x56f7f0
call fcn.00418830
mov eax, dword [esp + 0x10]
push 0x4fe564
push eax
call fcn.0048d5c6
mov edi, eax
add esp, 8
test edi, edi
jne 0x431f96
push 1
push 0x5209c8
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x1c]
mov byte [esp + 0x16a4], 4
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 9
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
mov eax, dword [esi + 0x29c]
mov ebp, eax
shr ebp, 0xc
and eax, 0xfff
mov dword [esp + 0x20], eax
je 0x431fad
inc ebp
mov ecx, dword [esi + 0x298]
lea edx, [esp + 0x2c]
push ecx
push edx
call fcn.0041e0f0
mov eax, dword [esi + 0x29c]
lea ecx, [esp + 0x38]
push eax
push ecx
call fcn.0041e0f0
add esp, 0x10
lea edx, [esp + 0x1b]
lea eax, [esp + 0x2c]
mov ecx, esi
push 0x3e8
push 1
push edx
push ebx
push eax
push 0xd6
call fcn.0042f360
test al, al
jne 0x432062
push edi
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x1c]
mov byte [esp + 0x16a4], 4
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 0xa
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
cmp byte [esp + 0x1b], 0xa5
jne 0x4320f2
push edi
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x20]
push 1
push ecx
mov ecx, esi
call fcn.0042f8a0
lea ecx, [esp + 0x20]
call fcn.004a4f89
lea ecx, [esp + 0x1c]
mov byte [esp + 0x16a4], 4
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 0xb
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
push 0x1000
mov ecx, 0x56f7f0
call fcn.00418950
push 1
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004a4cfe
lea eax, [esp + 0x2c]
push eax
call fcn.00461570
add esp, 4
mov byte [esp + 0x16ac], 0xc
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
push 0x5209b8
push ecx
call fcn.004a5292
call fcn.0045f930
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x16a4], bl
call fcn.004a4f89
push 1
push ebp
call fcn.0045fea0
add esp, 8
xor esi, esi
test ebp, ebp
jle 0x43220b
lea eax, [ebp - 1]
cmp esi, eax
jne 0x4321a8
mov ebx, dword [esp + 0x20]
test ebx, ebx
je 0x4321a8
lea edx, [ebx + 2]
push 0x1f4
lea eax, [esp + 0x2a0]
push edx
push eax
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jl 0x43229e
push edi
push 1
lea ecx, [esp + 0x2a4]
push ebx
push ecx
jmp 0x4321dc
push 0x1f4
lea edx, [esp + 0x2a0]
push 0x1002
push edx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jl 0x43229e
push edi
push 1
lea eax, [esp + 0x2a4]
push 0x1000
push eax
call fcn.0048d45c
add esp, 0x10
mov ecx, 0x56f7f0
push 0x5a
call fcn.004188d0
push esi
call fcn.0045ff80
mov al, byte [0x579575]
add esp, 4
test al, al
je 0x43220b
inc esi
cmp esi, ebp
jl 0x432168
push 1
push 0x52099c
call fcn.0045fb60
call fcn.0045ffa0
push edi
call fcn.0048d3df
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x16a4], 4
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 0xd
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
mov al, 1
mov ecx, dword [esp + 0x169c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1698
ret
push 1
push 0x520984
call fcn.0045fb60
call fcn.0045ffa0
push edi
call fcn.0048d3df
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x16a4], 4
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x16a4], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x16a4], 0
call fcn.004a4f89
lea ecx, [esp + 0xf8]
mov dword [esp + 0x16a4], 0xe
call fcn.004a4f89
lea ecx, [esp + 0x4c]
mov dword [esp + 0x16a4], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x432285
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b676c
push eax
mov eax, 0x367a0
mov dword fs:[0], esp
call fcn.0048d3b0
push ebp
mov ebp, ecx
push 0x1f4
mov ecx, 0x56f538
call fcn.0040c890
mov ecx, ebp
call fcn.00436880
test al, al
jne 0x4327c2
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
mov eax, dword [ebp + 0x160]
test eax, eax
je 0x4327f3
push 1
push 0x5208fc
call fcn.0045fb60
add esp, 8
xor al, al
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
mov ecx, 0x56f7f0
call fcn.00418830
lea eax, [esp + 4]
push 0xc000
push eax
push 0xdf0000
mov ecx, ebp
call fcn.00432320
test al, al
jne 0x43282d
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
push esi
push edi
push 0
lea ecx, [esp + 0xc010]
call fcn.00445310
mov ecx, 0x3000
lea esi, [esp + 0xc]
lea edi, [esp + 0xc068]
mov dword [esp + 0x367b4], 0
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xc00c]
mov dword [esp + 0x1c068], 0xc000
mov byte [esp + 0x3676e], 0
call fcn.004a117b
mov al, byte [esp + 0x3676e]
pop edi
test al, al
pop esi
jne 0x4328cc
lea ecx, [esp + 0x36768]
mov dword [esp + 0x367ac], 1
call fcn.0049f006
lea ecx, [esp + 0xc004]
mov dword [esp + 0x367ac], 0xffffffff
call fcn.004a0db1
xor al, al
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
lea ecx, [esp + 0xc060]
push 0xc000
push ecx
push 0xdf0000
mov ecx, ebp
call fcn.004324e0
test al, al
push 1
je 0x432905
push 0x520b10
call fcn.0045fb60
add esp, 8
mov dword [esp + 0x367ac], 2
jmp 0x43291d
push 0x520af8
call fcn.0045fb60
add esp, 8
mov dword [esp + 0x367ac], 3
lea ecx, [esp + 0x36768]
call fcn.0049f006
lea ecx, [esp + 0xc004]
mov dword [esp + 0x367ac], 0xffffffff
call fcn.004a0db1
mov ecx, dword [esp + 0x367a4]
mov al, 1
pop ebp
mov dword fs:[0], ecx
add esp, 0x367ac
ret
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b67e2
push eax
mov eax, 0x367a0
mov dword fs:[0], esp
call fcn.0048d3b0
push ebp
mov ebp, ecx
push esi
push 0x52003c
mov eax, dword [ebp + 0x74]
push eax
call fcn.0048d5c6
mov esi, eax
add esp, 8
test esi, esi
jne 0x432a0f
push eax
push eax
push 0x520b2c
call fcn.004a9666
pop esi
xor al, al
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
push edi
push esi
push 1
lea eax, [esp + 0x14]
push 0xc000
push eax
call fcn.0048e1e3
push esi
call fcn.0048d3df
add esp, 0x14
lea ecx, [esp + 0xc00c]
push 0
call fcn.00445310
mov ecx, 0x3000
lea esi, [esp + 0xc]
lea edi, [esp + 0xc068]
mov dword [esp + 0x367b4], 0
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xc00c]
mov dword [esp + 0x1c068], 0xc000
mov byte [esp + 0x3676e], 0
call fcn.004a117b
mov al, byte [esp + 0x3676e]
pop edi
test al, al
jne 0x432ac8
lea ecx, [esp + 0x3676c]
mov dword [esp + 0x367b0], 1
call fcn.0049f006
lea ecx, [esp + 0xc008]
mov dword [esp + 0x367b0], 0xffffffff
call fcn.004a0db1
pop esi
xor al, al
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
push 0x1f4
mov ecx, 0x56f538
call fcn.0040c890
mov ecx, ebp
call fcn.00436880
test al, al
jne 0x432b29
lea ecx, [esp + 0x3676c]
mov dword [esp + 0x367b0], 2
call fcn.0049f006
lea ecx, [esp + 0xc008]
mov dword [esp + 0x367b0], 0xffffffff
call fcn.004a0db1
pop esi
xor al, al
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
mov eax, dword [ebp + 0x160]
test eax, eax
je 0x432b89
push 1
push 0x5208fc
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x3676c]
mov dword [esp + 0x367b0], 3
call fcn.0049f006
lea ecx, [esp + 0xc008]
mov dword [esp + 0x367b0], 0xffffffff
call fcn.004a0db1
pop esi
xor al, al
pop ebp
mov ecx, dword [esp + 0x367a0]
mov dword fs:[0], ecx
add esp, 0x367ac
ret
mov ecx, 0x56f7f0
call fcn.00418830
lea ecx, [esp + 0xc064]
push 0xc000
push ecx
push 0xdf0000
mov ecx, ebp
call fcn.004324e0
test al, al
push 1
je 0x432bcc
push 0x520b10
call fcn.0045fb60
add esp, 8
mov dword [esp + 0x367b0], 4
jmp 0x432be4
push 0x520af8
call fcn.0045fb60
add esp, 8
mov dword [esp + 0x367b0], 5
lea ecx, [esp + 0x3676c]
call fcn.0049f006
lea ecx, [esp + 0xc008]
mov dword [esp + 0x367b0], 0xffffffff
call fcn.004a0db1
mov ecx, dword [esp + 0x367a8]
pop esi
mov al, 1
pop ebp
mov dword fs:[0], ecx
add esp, 0x367ac
ret
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b6867
push eax
mov dword fs:[0], esp
sub esp, 0x1bc
push ebx
push ebp
push esi
mov esi, ecx
push edi
push 0x3e8
mov ecx, 0x56f538
call fcn.0040c890
push 1
push 0x521168
call fcn.0045fb60
add esp, 8
mov ecx, esi
call fcn.0042f520
test al, al
jne 0x4337aa
push 1
push 0x52113c
call fcn.0045fb60
push 1
push 0x521118
call fcn.0045fb60
add esp, 0x10
jmp 0x433d0d
lea eax, [esp + 0x18]
push 0x96
push eax
push 0x80000000
mov ecx, esi
call fcn.0042f480
test al, al
jne 0x4337d8
push 1
push 0x5210f0
call fcn.0045fb60
add esp, 8
jmp 0x433d0d
mov eax, dword [esp + 0x18]
push 1
mov word [esi + 0x15a], ax
and eax, 0xffff
push eax
push 0x5210d8
call fcn.0045fc00
add esp, 0xc
lea ecx, [esp + 0x18]
push 0x96
push ecx
push 0x80000008
mov ecx, esi
call fcn.0042f480
test al, al
jne 0x433826
push 1
push 0x5210b4
call fcn.0045fb60
add esp, 8
jmp 0x433d0d
mov eax, dword [esp + 0x18]
push 1
mov word [esi + 0x158], ax
and eax, 0xffff
push eax
push 0x521098
call fcn.0045fc00
mov ax, word [esi + 0x158]
add esp, 0xc
cmp ax, 0x6226
je 0x433873
cmp ax, 0x6225
je 0x433873
cmp ax, 0x6223
je 0x433873
push 1
push 0x521068
call fcn.0045fb60
add esp, 8
jmp 0x433d0d
cmp word [esp + 0x18], 0
jne 0x433884
mov ecx, esi
call fcn.0043b0b0
jmp 0x4338dd
cmp ax, 0x6205
jne 0x433893
mov ecx, esi
call fcn.00439fc0
jmp 0x4338dd
cmp ax, 0x6225
je 0x4338d6
cmp ax, 0x6228
je 0x4338d6
cmp ax, 0x6229
je 0x4338d6
cmp ax, 0x6230
je 0x4338d6
cmp ax, 0x6219
je 0x4338cd
cmp ax, 0x6217
je 0x4338cd
cmp ax, 0x6223
mov ecx, esi
jne 0x4338c6
call fcn.0043a4d0
jmp 0x4338dd
call fcn.0043a9a0
jmp 0x4338dd
mov ecx, esi
call fcn.0043a270
jmp 0x4338dd
mov ecx, esi
call fcn.0043ad20
test al, al
je 0x433d0d
push 1
push 0x52104c
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x24]
call fcn.004a55c6
mov edx, dword [0x533e00]
mov dword [esp + 0x1d4], 0
mov dword [esp + 0x10], edx
cmp word [esi + 0x158], 0x6223
mov byte [esp + 0x1d4], 1
jne 0x43395a
push 0x521034
lea eax, [esp + 0x24]
push esi
push eax
mov ebx, 0x8000800
call fcn.004a521e
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d8], 2
call fcn.004a50c2
mov byte [esp + 0x1d4], 1
lea ecx, [esp + 0x20]
jmp 0x43398d
push 0x52101c
lea ecx, [esp + 0x24]
push esi
push ecx
mov ebx, 0x40000800
call fcn.004a521e
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d8], 3
call fcn.004a50c2
mov byte [esp + 0x1d4], 1
lea ecx, [esp + 0x20]
call fcn.004a4f89
mov edx, dword [esp + 0x10]
push 0
push 0x10
push edx
lea ecx, [esp + 0x30]
call fcn.004a56d8
test eax, eax
jne 0x4339bc
push 1
push 0x520ff4
call fcn.0045fb60
add esp, 8
jmp 0x433ce8
lea ecx, [esp + 0x24]
call fcn.004a59d2
mov ebp, eax
push ebp
call fcn.0048d322
add esp, 4
mov edi, eax
lea ecx, [esp + 0x24]
push ebp
push edi
call fcn.004a57f5
lea ecx, [esp + 0x24]
call fcn.004a58f3
push 2
push ebp
push edi
call fcn.0041e620
add esp, 0xc
lea eax, [esp + 0xcc]
shr ebp, 1
push 0x1f4
push eax
push edi
push ebp
push ebx
push 0xa1
mov ecx, esi
call fcn.0042f080
test al, al
push edi
jne 0x433a22
call fcn.0048d2da
add esp, 4
jmp 0x433ce8
call fcn.0048d2da
add esp, 4
lea ecx, [esp + 0xcc]
lea edx, [esp + 0x14c]
push 0x64
push ecx
push edx
push ebp
push ebx
push 0xa4
mov ecx, esi
call fcn.0042f080
push 0xa8
mov ecx, 0x56f7f0
call fcn.004188d0
push ebx
mov ecx, 0x56f7f0
call fcn.00418950
push 0x32
lea eax, [esp + 0xd0]
push 5
push eax
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
push 1
jge 0x433a92
push 0x520fd4
call fcn.0045fb60
add esp, 8
jmp 0x433ce8
push 0x520fb8
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0xcc]
push 0x1f4
push 2
push ecx
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
push 1
jge 0x433ad0
push 0x520f9c
call fcn.0045fb60
add esp, 8
jmp 0x433ce8
lea edx, [esp + 0xd0]
push edx
call fcn.0041e150
add esp, 4
and eax, 0xffff
push eax
push 0x520f7c
call fcn.0045fc00
mov esi, dword [sym.imp.kernel32.dll_Sleep]
add esp, 0xc
push 0x32
call esi
mov eax, dword [0x533e00]
mov dword [esp + 0x14], eax
xor ebx, ebx
push 0x5116
mov ecx, 0x56f7f0
mov byte [esp + 0x1d8], 4
mov byte [esp + 0x74], 0
mov word [esp + 0x38], bx
mov word [esp + 0x3a], 0xf
mov word [esp + 0x3c], 0x67
mov word [esp + 0x3e], 0xda
call fcn.00418920
push 0x64
call esi
lea ebp, [esp + 0x3c]
lea edi, [esp + 0x34]
xor esi, esi
push 0x52
mov si, word [edi]
mov ecx, 0x56f7f0
call fcn.004188d0
mov ecx, esi
shl ecx, 8
add ecx, 0x16000001
push ecx
mov ecx, 0x56f7f0
call fcn.00418950
lea edx, [esp + 0x1c]
push 0x64
push edx
mov ecx, 0x56f7f0
call fcn.004189b0
test al, al
je 0x433bef
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x70]
push eax
push ecx
push esi
call fcn.004336f0
add esp, 0xc
test al, al
jne 0x433c2c
mov edx, dword [esp + 0x1c]
add edi, 2
and edx, 0xffff
inc ebx
mov dword [ebp], edx
add ebp, 4
cmp ebx, 4
jl 0x433b4a
push 0x52
mov ecx, 0x56f7f0
call fcn.004188d0
push 0x16000404
mov ecx, 0x56f7f0
call fcn.00418950
push 0xc8
lea eax, [esp + 0x54]
push 8
push eax
mov ecx, 0x56f7f0
call fcn.004186f0
test eax, eax
jge 0x433c03
push 1
push 0x520f5c
call fcn.0045fb60
add esp, 8
jmp 0x433cd7
movzx ax, byte [esp + 0x53]
movzx cx, byte [esp + 0x55]
shl eax, 8
lea edx, [esp + 0x70]
add eax, ecx
push edx
push eax
push 4
mov dword [esp + 0x28], eax
call fcn.004336f0
add esp, 0xc
test al, al
je 0x433c80
lea eax, [esp + 0x8c]
push 1
push eax
push 0x520f3c
call fcn.0045f910
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d4], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x1d4], 0
call fcn.004a4f89
lea ecx, [esp + 0x24]
mov dword [esp + 0x1d4], 0xffffffff
call fcn.004a561b
mov al, 1
jmp 0x433d0f
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
and eax, 0xffff
push eax
mov eax, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push eax
push ecx
lea edx, [esp + 0x28]
push 0x520f18
push edx
call fcn.0049e5b4
add esp, 0x1c
lea eax, [esp + 0x14]
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004a4cfe
call fcn.0045f930
push 1
push 0x520ef8
call fcn.0045fb60
add esp, 0x10
lea ecx, [esp + 0x14]
mov byte [esp + 0x1d4], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x1d4], 0
call fcn.004a4f89
lea ecx, [esp + 0x24]
mov dword [esp + 0x1d4], 0xffffffff
call fcn.004a561b
xor al, al
mov ecx, dword [esp + 0x1cc]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1c8
ret
sub esp, 0x40
push ebx
push esi
mov esi, ecx
push edi
push 0x3e8
mov ecx, 0x56f538
mov edi, dword [esi + 0x3c8]
lea ebx, [esi + 0x3c8]
call fcn.0040c890
mov ecx, esi
call fcn.00436880
test al, al
jne 0x433d65
pop edi
pop esi
pop ebx
add esp, 0x40
ret
lea eax, [esp + 0xc]
push pe_nt_image_headers32
push eax
push edi
mov ecx, esi
call fcn.00432320
test al, al
push 1
jne 0x433d90
push 0x521224
call fcn.0045fb60
add esp, 8
xor al, al
pop edi
pop esi
pop ebx
add esp, 0x40
ret
push 0x521204
call fcn.0045fb60
add esp, 8
push 0xa
call dword [sym.imp.kernel32.dll_Sleep]
mov ecx, 0x56f7f0
call fcn.00418830
lea ecx, [esp + 0xc]
push ecx
push 0
lea ecx, [esi + 0x2a4]
call fcn.0043ec70
mov eax, dword [esi + 0x3c4]
xor edi, edi
test eax, eax
jle 0x433df0
mov eax, dword [ebx]
lea edx, [esp + 0xc]
push pe_nt_image_headers32
push edx
push eax
mov ecx, esi
call fcn.004324e0
test al, al
je 0x433e3a
mov eax, dword [esi + 0x3c4]
inc edi
add ebx, 4
cmp edi, eax
jl 0x433dcd
push 1
push 0x5211e8
call fcn.0045fb60
mov ecx, dword [esi + 0xc5c]
mov eax, dword [esi + 0x3c0]
add esp, 8
sub ecx, 0x40
lea edx, [esi + 0xc60]
push ecx
push edx
push eax
mov ecx, esi
call fcn.004324e0
test al, al
push 1
jne 0x433e52
push 0x5211c4
call fcn.0045fb60
add esp, 8
xor al, al
pop edi
pop esi
pop ebx
add esp, 0x40
ret
push 1
push 0x5211a0
call fcn.0045fb60
add esp, 8
xor al, al
pop edi
pop esi
pop ebx
add esp, 0x40
ret
push 0x521184
call fcn.0045fb60
add esp, 8
mov al, 1
pop edi
pop esi
pop ebx
add esp, 0x40
ret
mov eax, dword [0x579560]
cmp eax, 7
ja case.default.0x439c4a
jmp dword [eax*4 + 0x439ccc]
mov eax, dword [0x579564]
test eax, eax
jne 0x439c5f
jmp 0x430650
jmp 0x442ee0
mov eax, dword [0x579564]
push eax
call fcn.004439d0
ret
mov edx, dword [0x579564]
push edx
call fcn.00443ae0
ret
mov eax, dword [0x579564]
test eax, eax
jne 0x439c8b
jmp 0x431c50
cmp eax, 1
jne 0x439c95
jmp 0x431250
cmp eax, 2
jne 0x439c9f
jmp 0x4424f0
cmp eax, 3
jne case.default.0x439c4a
jmp 0x442950
mov eax, dword [0x579564]
test eax, eax
jne 0x439cb7
jmp 0x432770
jmp 0x4329b0
jmp 0x433740
jmp 0x433d30
jmp 0x443c60
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4b7219
push eax
mov eax, 0x102a4
mov dword fs:[0], esp
call fcn.0048d3b0
push ebx
push ebp
push esi
push edi
xor edi, edi
mov esi, ecx
push edi
push edi
push 6
push edi
push edi
push edi
lea ecx, [esp + 0x7c]
call fcn.0041d770
push 0x4fe7bc
lea eax, [esp + 0x14]
push esi
push eax
mov dword [esp + 0x102c8], edi
call fcn.004a521e
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x102bc], 1
mov dword [esp + 0xec], ecx
lea ecx, [esp + 0x64]
mov dword [esp + 0xf0], 0x520a34
mov dword [esp + 0xcc], 0x5264b0
call fcn.0041d7e0
cmp eax, 1
je 0x4425b8
lea ecx, [esp + 0x10]
mov byte [esp + 0x102bc], 0
call fcn.004a4f89
lea ecx, [esp + 0x110]
mov dword [esp + 0x102bc], 2
call fcn.004a4f89
lea ecx, [esp + 0x64]
mov dword [esp + 0x102bc], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x4428c1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x5264ac
call fcn.004a4ff7
push ecx
lea ecx, [esp + 0x6c]
mov edx, esp
mov dword [esp + 0x2c], esp
push edx
mov byte [esp + 0x102c8], 3
call fcn.0049e8db
lea eax, [esp + 0x20]
mov byte [esp + 0x102c4], 1
push eax
call fcn.00461650
add esp, 0xc
lea ecx, [esp + 0x28]
mov byte [esp + 0x102bc], 4
call fcn.00440600
push 1
push 0x526494
mov dword [esp + 0x34], 0x56f7f0
call fcn.0045fb60
add esp, 8
mov ecx, 0x56f538
push 0x3e8
call fcn.0040c890
push 1
push 0x52647c
call fcn.0045fb60
push 1
push 0x526458
call fcn.0045fb60
add esp, 0x10
lea ecx, [esp + 0x28]
call fcn.00440b00
test al, al
push 1
jne 0x4426b9
push 0x526438
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x18]
mov byte [esp + 0x102bc], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x102bc], 0
call fcn.004a4f89
lea ecx, [esp + 0x110]
mov dword [esp + 0x102bc], 5
call fcn.004a4f89
lea ecx, [esp + 0x64]
mov dword [esp + 0x102bc], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x4428c1
push 0x526414
call fcn.0045fb60
mov ecx, dword [esp + 0x20]
push 0x4fe564
push ecx
call fcn.0048d5c6
mov ebp, eax
add esp, 0x10
cmp ebp, edi
jne 0x44273e
push 1
push 0x5263f4
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x18]
mov byte [esp + 0x102bc], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x102bc], 0
call fcn.004a4f89
lea ecx, [esp + 0x110]
mov dword [esp + 0x102bc], 6
call fcn.004a4f89
lea ecx, [esp + 0x64]
mov dword [esp + 0x102bc], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x4428c1
mov edx, dword [0x533e00]
mov dword [esp + 0x14], edx
push 1
push 0x180
mov byte [esp + 0x102c4], 7
call fcn.0045fea0
push 1
push 0x5263cc
call fcn.0045fb60
add esp, 0x10
mov bl, 8
mov esi, 1
push esi
lea eax, [esp + 0x24]
push edi
lea ecx, [esp + 0x2bc]
push eax
push ecx
lea ecx, [esp + 0x38]
call fcn.00442320
test al, al
je 0x442825
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x14]
and edx, 0xffff
push edx
push esi
push edi
push 0x5263ac
push eax
call fcn.0049e5b4
mov ecx, dword [esp + 0x34]
push 0
and ecx, 0xffff
lea edx, [esp + 0x2cc]
push ecx
lea eax, [esp + 0x38]
push edx
push eax
call fcn.0041e400
add esp, 0x24
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x102c0], bl
call fcn.004a53a1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x102bc], 7
call fcn.004a4f89
push 0x520000
lea ecx, [esp + 0x18]
call fcn.004a5365
mov ecx, dword [esp + 0x14]
push ebp
push ecx
call fcn.0048dd43
mov al, byte [0x579575]
add esp, 8
test al, al
je 0x4428da
inc esi
cmp esi, 2
jl 0x442772
inc edi
push edi
call fcn.0045ff80
add esp, 4
cmp edi, 0x180
jl 0x44276d
call fcn.0045ffa0
push ebp
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x28]
call fcn.00440ad0
push 0
push 0x51f288
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x102bc], 4
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x102bc], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x102bc], 0
call fcn.004a4f89
lea ecx, [esp + 0x110]
mov dword [esp + 0x102bc], 0xa
call fcn.004a4f89
lea ecx, [esp + 0x64]
mov dword [esp + 0x102bc], 0xffffffff
call fcn.004a0db1
mov al, 1
mov ecx, dword [esp + 0x102b4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x102b0
ret
call fcn.0045ffa0
push ebp
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x102bc], 4
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x102bc], 1
call fcn.004a4f89
lea ecx, [esp + 0x10]
mov byte [esp + 0x102bc], 0
call fcn.004a4f89
lea ecx, [esp + 0x110]
mov dword [esp + 0x102bc], 9
call fcn.004a4f89
lea ecx, [esp + 0x64]
mov dword [esp + 0x102bc], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x4428c1
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4b729e
push eax
mov eax, 0x302c0
mov dword fs:[0], esp
call fcn.0048d3b0
push ebx
push ebp
push esi
push edi
push 0
push 0
push 6
mov esi, ecx
push 0
push 0
push 1
lea ecx, [esp + 0x78]
call fcn.0041d770
push 0x4fe7bc
lea eax, [esp + 0x18]
push esi
push eax
mov dword [esp + 0x302e4], 0
call fcn.004a521e
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x302d8], 1
mov dword [esp + 0xe8], ecx
lea ecx, [esp + 0x60]
mov dword [esp + 0xec], 0x520960
mov dword [esp + 0xc8], 0x526518
call fcn.0041d7e0
cmp eax, 1
je 0x442a1f
lea ecx, [esp + 0x14]
mov byte [esp + 0x302d8], 0
call fcn.004a4f89
lea ecx, [esp + 0x10c]
mov dword [esp + 0x302d8], 2
call fcn.004a4f89
lea ecx, [esp + 0x60]
mov dword [esp + 0x302d8], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x442d7a
lea edx, [esp + 0x18]
lea ecx, [esp + 0x60]
push edx
call fcn.0049e8db
lea ecx, [esp + 0x24]
mov byte [esp + 0x302d8], 3
call fcn.00440600
push 1
push 0x526494
mov dword [esp + 0x30], 0x56f7f0
call fcn.0045fb60
add esp, 8
mov ecx, 0x56f538
push 0x3e8
call fcn.0040c890
push 1
push 0x52647c
call fcn.0045fb60
push 1
push 0x526458
call fcn.0045fb60
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.00440b00
test al, al
push 1
jne 0x442aef
push 0x526438
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x18]
mov byte [esp + 0x302d8], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x302d8], 0
call fcn.004a4f89
lea ecx, [esp + 0x10c]
mov dword [esp + 0x302d8], 4
call fcn.004a4f89
lea ecx, [esp + 0x60]
mov dword [esp + 0x302d8], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x442d7a
push 0x526414
call fcn.0045fb60
mov eax, dword [esp + 0x20]
push 0x52003c
push eax
call fcn.0048d5c6
mov esi, eax
add esp, 0x10
test esi, esi
mov dword [esp + 0x1c], esi
jne 0x442b78
push 1
push 0x5263f4
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x18]
mov byte [esp + 0x302d8], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x302d8], 0
call fcn.004a4f89
lea ecx, [esp + 0x10c]
mov dword [esp + 0x302d8], 5
call fcn.004a4f89
lea ecx, [esp + 0x60]
mov dword [esp + 0x302d8], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x442d7a
mov ecx, dword [0x533e00]
mov dword [esp + 0x10], ecx
push 1
push 0x100
mov byte [esp + 0x302e0], 6
call fcn.0045fea0
push 0
push 0
push esi
call fcn.0048df91
push 1
push 0x5264f8
call fcn.0045fb60
mov al, byte [esi + 0xc]
add esp, 0x1c
test al, 0x10
jne 0x442cf4
push esi
lea edx, [esp + 0x102b4]
push 0x20020
push edx
call fcn.0048df2f
add esp, 0xc
lea ecx, [esp + 0x10]
call fcn.004a4f14
lea eax, [esp + 0x102b0]
lea ecx, [esp + 0x10]
push eax
push 0x4fe6d4
push ecx
call fcn.0049e5b4
add esp, 0xc
lea ecx, [esp + 0x10]
push 0
push 0x3d
call fcn.004a5485
mov edi, eax
lea ecx, [esp + 0x10]
lea edx, [edi + 2]
push edx
push 0x3d
call fcn.004a5485
push 0
push 0x5b
lea ecx, [esp + 0x18]
mov ebx, eax
call fcn.004a5485
push 0
push 0x5d
lea ecx, [esp + 0x18]
mov ebp, eax
call fcn.004a5485
cmp edi, 0xffffffff
mov esi, eax
je 0x442ce4
cmp ebx, 0xffffffff
je 0x442ce4
cmp ebp, 0xffffffff
je 0x442ce4
cmp esi, 0xffffffff
je 0x442ce4
lea eax, [esp + edi + 0x102b1]
push 4
push eax
call fcn.0041dbe0
lea ecx, [esp + ebx + 0x102b9]
push 4
push ecx
mov edi, eax
call fcn.0041dbe0
sub esi, ebp
add esp, 0xc
dec esi
mov edx, esp
mov dword [esp + 0x24], esp
inc ebp
push esi
push ebp
push edx
lea ecx, [esp + 0x20]
mov ebx, eax
call fcn.0049e0c7
lea eax, [esp + 0x2b4]
push eax
call fcn.0041dcb0
mov ecx, eax
add esp, 8
and ecx, 0xffff
cmp ecx, 0x10000
jg 0x442d93
push ebx
push edi
lea edx, [esp + 0x2b8]
push eax
push edx
lea ecx, [esp + 0x34]
call fcn.00442440
mov al, byte [0x579575]
test al, al
je 0x442e18
and edi, 0xffff
push edi
call fcn.0045ff80
add esp, 4
mov eax, dword [esp + 0x1c]
mov esi, eax
test byte [eax + 0xc], 0x10
je 0x442bba
call fcn.0045ffa0
push esi
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x24]
call fcn.00440ad0
push 0
push 0x51f288
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0x10]
mov byte [esp + 0x302d8], 3
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x302d8], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x302d8], 0
call fcn.004a4f89
lea ecx, [esp + 0x10c]
mov dword [esp + 0x302d8], 9
call fcn.004a4f89
lea ecx, [esp + 0x60]
mov dword [esp + 0x302d8], 0xffffffff
call fcn.004a0db1
mov al, 1
mov ecx, dword [esp + 0x302d0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x302cc
ret
push 0
push 0
push 0x5264dc
call fcn.004a9666
call fcn.0045ffa0
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x302d8], 3
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x302d8], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x302d8], 0
call fcn.004a4f89
lea ecx, [esp + 0x10c]
mov dword [esp + 0x302d8], 7
call fcn.004a4f89
lea ecx, [esp + 0x60]
mov dword [esp + 0x302d8], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x442d7a
call fcn.0045ffa0
mov edx, dword [esp + 0x1c]
push edx
call fcn.0048d3df
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x302d8], 3
call fcn.004a4f89
lea ecx, [esp + 0x18]
mov byte [esp + 0x302d8], 1
call fcn.004a4f89
lea ecx, [esp + 0x14]
mov byte [esp + 0x302d8], 0
call fcn.004a4f89
lea ecx, [esp + 0x10c]
mov dword [esp + 0x302d8], 8
call fcn.004a4f89
lea ecx, [esp + 0x60]
mov dword [esp + 0x302d8], 0xffffffff
call fcn.004a0db1
xor al, al
jmp 0x442d7a
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b72dc
push eax
mov eax, 0x1070
mov dword fs:[0], esp
call fcn.0048d3b0
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x24], 0x2c
mov byte [esp + 0x25], 0x2e
mov byte [esp + 0x26], 0x34
mov byte [esp + 0x27], 0x3c
mov byte [esp + 0x28], 0x2a
mov byte [esp + 0x29], 0x43
mov byte [esp + 0x2a], 0x50
mov byte [esp + 0x2b], 0x58
mov byte [esp + 0x2c], 0x56
call fcn.00440600
push 1
push 0x526494
mov dword [esp + 0x4c], 0x56f7f0
call fcn.0045fb60
add esp, 8
mov ecx, 0x56f538
push 0x3e8
call fcn.0040c890
push 1
push 0x52647c
call fcn.0045fb60
push 1
push 0x526458
call fcn.0045fb60
add esp, 0x10
lea ecx, [esp + 0x40]
call fcn.00440b00
test al, al
push 1
jne 0x442f94
push 0x526438
jmp 0x443365
push 0x526414
call fcn.0045fb60
add esp, 8
xor esi, esi
movzx ax, byte [esp + esi + 0x24]
push 1
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x84]
push ecx
push edx
lea ecx, [esp + 0x50]
call fcn.00442320
test al, al
je 0x442fdf
cmp word [esp + 0xc], 0xa
jne 0x442fdf
lea eax, [esp + 0x7c]
push eax
call fcn.00442e90
add esp, 4
test al, al
jne 0x442fe5
inc esi
cmp esi, 9
jb 0x442fa3
cmp esi, 9
jne 0x442ff6
push 1
push 0x526684
jmp 0x443365
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
mov ax, word [esp + 0x84]
mov dword [esp + 0x30], ecx
movzx si, byte [esp + esi + 0x24]
lea ecx, [esp + 0x30]
push 7
push ecx
mov dword [esp + 0x3c], edx
mov word [esp + 0x40], ax
call fcn.0041df90
mov edx, dword [esp + 0x14]
add esp, 8
and edx, 0xffff
lea eax, [esp + 0x30]
push 1
sub edx, 3
push 0
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
call fcn.0041e400
add esp, 0xc
mov dword [esp + 0x108c], 0
mov edx, esp
mov dword [esp + 0x28], esp
push eax
push 0x526678
push edx
call fcn.004a5292
call fcn.0045f930
or ebp, 0xffffffff
add esp, 8
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1084], ebp
call fcn.004a4f89
push ecx
lea eax, [edi + 0x60]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004a4cfe
lea ecx, [esp + 0x14]
push ecx
call fcn.0041dcb0
add esp, 8
cmp eax, 7
jge 0x4430b5
push 1
push 0x526650
jmp 0x443365
lea edx, [esp + 0x10]
push 7
push edx
call fcn.0041df90
mov eax, dword [edi + 0x64]
add esp, 8
lea ecx, [esp + 0x10]
mov al, byte [eax]
push 1
push esi
push 0xa
sub al, 0x40
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x27], al
mov byte [esp + 0x28], 0x87
mov byte [esp + 0x29], 1
call fcn.00442440
test al, al
push 1
jne 0x4430fc
push 0x52662c
jmp 0x443365
lea edx, [esp + 0x10]
push esi
lea eax, [esp + 0x18]
push edx
push eax
lea ecx, [esp + 0x50]
call fcn.00442320
test al, al
je 0x44335e
cmp word [esp + 0xc], 0xa
jb 0x44335e
lea ecx, [esp + 0x10]
push 7
push ecx
call fcn.0041df90
mov edx, dword [esp + 0x14]
add esp, 8
and edx, 0xffff
lea eax, [esp + 0x10]
push 1
sub edx, 3
push 0
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
call fcn.0041e400
add esp, 0xc
mov dword [esp + 0x108c], 1
mov edx, esp
mov dword [esp + 0x28], esp
push eax
push 0x526620
push edx
call fcn.004a5292
call fcn.0045f930
add esp, 8
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1084], ebp
call fcn.004a4f89
push 2
lea eax, [esp + 0x10]
push esi
lea ecx, [esp + 0x84]
push eax
push ecx
lea ecx, [esp + 0x50]
call fcn.00442320
test al, al
je 0x443355
cmp word [esp + 0xc], 0xa
jne 0x443355
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x80]
mov cx, word [esp + 0x84]
mov dword [esp + 0x30], edx
lea edx, [esp + 0x30]
push 7
push edx
mov dword [esp + 0x3c], eax
mov word [esp + 0x40], cx
call fcn.0041df90
mov eax, dword [esp + 0x14]
add esp, 8
and eax, 0xffff
lea ecx, [esp + 0x30]
push 1
sub eax, 3
push 0
push eax
lea edx, [esp + 0x28]
push ecx
push edx
call fcn.0041e400
add esp, 0xc
mov dword [esp + 0x108c], 2
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
push 0x526614
push ecx
call fcn.004a5292
call fcn.0045f930
add esp, 8
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1084], ebp
call fcn.004a4f89
push ecx
lea edx, [edi + 0x68]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004a4cfe
lea eax, [esp + 0x14]
push eax
call fcn.0041dcb0
add esp, 8
cmp eax, 7
jge 0x44326e
push 1
push 0x5265ec
jmp 0x443365
lea ecx, [esp + 0x10]
push 7
push ecx
call fcn.0041df90
mov edx, dword [edi + 0x6c]
add esp, 8
lea ecx, [esp + 0x40]
mov al, byte [edx]
push 2
sub al, 0x40
push esi
mov byte [esp + 0x1f], al
lea eax, [esp + 0x18]
push 0xa
push eax
mov byte [esp + 0x28], 0x87
mov byte [esp + 0x29], 1
call fcn.00442440
test al, al
jne 0x4432b5
push 1
push 0x5265c8
jmp 0x443365
push 2
lea ecx, [esp + 0x10]
push esi
lea edx, [esp + 0x18]
push ecx
push edx
lea ecx, [esp + 0x50]
call fcn.00442320
test al, al
je 0x44334c
cmp word [esp + 0xc], 0xa
jb 0x44334c
lea eax, [esp + 0x10]
push 7
push eax
call fcn.0041df90
mov ecx, dword [esp + 0x14]
add esp, 8
and ecx, 0xffff
lea edx, [esp + 0x10]
push 1
sub ecx, 3
push 0
push ecx
lea eax, [esp + 0x48]
push edx
push eax
call fcn.0041e400
add esp, 0xc
mov dword [esp + 0x108c], 3
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
push 0x5265bc
push ecx
call fcn.004a5292
call fcn.0045f930
add esp, 8
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1084], ebp
call fcn.004a4f89
lea ecx, [esp + 0x40]
call fcn.00440ad0
mov al, 1
jmp 0x44336f
push 1
push 0x526594
jmp 0x443365
push 1
push 0x52656c
jmp 0x443365
push 1
push 0x526544
call fcn.0045fb60
add esp, 8
xor al, al
mov ecx, dword [esp + 0x107c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x107c
ret
mov eax, 0x1040
call fcn.0048d3b0
push esi
push edi
lea ecx, [esp + 0xc]
call fcn.00440600
push 1
push 0x526494
mov dword [esp + 0x18], 0x56f7f0
mov dword [esp + 0x10], 0x200
call fcn.0045fb60
add esp, 8
mov ecx, 0x56f538
push 0x3e8
call fcn.0040c890
push 1
push 0x52647c
call fcn.0045fb60
push 1
push 0x526458
call fcn.0045fb60
add esp, 0x10
lea ecx, [esp + 0xc]
call fcn.00440b00
test al, al
push 1
jne 0x443ce5
push 0x526438
call fcn.0045fb60
add esp, 8
xor al, al
pop edi
pop esi
add esp, 0x1040
ret
push 0x526414
call fcn.0045fb60
push 1
push 0x526a04
call fcn.0045fb60
push 1
push 0x120
call fcn.0045fea0
mov edi, dword [sym.imp.kernel32.dll_Sleep]
add esp, 0x18
mov esi, 0x50
lea eax, [esi - 0x60]
push eax
call fcn.0045ff80
add esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x48]
push 1
push esi
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.00442320
test al, al
je 0x443df5
cmp word [esp + 8], 0x100
jne 0x443da1
lea eax, [esp + 0x48]
push eax
call fcn.0041e120
add esp, 4
cmp eax, 0xffffffff
jne 0x443da1
lea ecx, [esp + 0x4c]
push ecx
call fcn.0041e120
add esp, 4
cmp eax, 0xffffffff
jne 0x443da1
lea edx, [esp + 0x144]
push edx
call fcn.0041e120
add esp, 4
cmp eax, 0xffffffff
jne 0x443da1
push 1
push esi
push 0x100
push 0x525d8c
lea ecx, [esp + 0x1c]
call fcn.00442440
test al, al
jne 0x443e2a
jmp 0x443de8
cmp word [esp + 8], 0x200
jne 0x443df5
lea eax, [esp + 0x48]
push eax
call fcn.0041e120
add esp, 4
cmp eax, 0xffffffff
jne 0x443df5
lea ecx, [esp + 0x4c]
push ecx
call fcn.0041e120
add esp, 4
cmp eax, 0xffffffff
jne 0x443df5
push 1
push esi
push 0x200
push 0x525e8c
lea ecx, [esp + 0x1c]
call fcn.00442440
test al, al
jne 0x443e2a
push 0x64
call edi
mov ecx, dword [esp + 0x10]
call fcn.00418830
inc esi
cmp esi, 0x180
jl 0x443d15
call fcn.0045ffa0
push 1
push 0x5269d0
call fcn.0045fb60
add esp, 8
lea ecx, [esp + 0xc]
call fcn.00440ad0
pop edi
mov al, 1
pop esi
add esp, 0x1040
ret
call fcn.0045ffa0
push 1
push 0x52699c
jmp 0x443e0e