Function at 0x40bcf0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a9e7
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x56a040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
push 0x27d61e0
mov dword [ebp - 0x18], edi
call fcn.00407fb0
mov eax, dword [0x27d61f8]
mov dword [edi + 0x18], eax
mov eax, dword [0x27d61fc]
mov dword [edi + 0x1c], eax
mov eax, dword [0x27d6200]
mov dword [edi + 0x20], eax
mov eax, dword [0x27d6204]
mov dword [edi + 0x24], eax
mov eax, dword [0x27d6208]
mov dword [edi + 0x28], eax
mov eax, dword [0x27d620c]
mov dword [edi + 0x2c], eax
push 0x27d6210
lea ecx, [edi + 0x30]
mov dword [ebp - 4], 0
call fcn.00407fb0
mov eax, dword [0x27d6228]
mov dword [edi + 0x48], eax
mov eax, dword [0x27d622c]
mov dword [edi + 0x4c], eax
mov eax, dword [0x27d6230]
mov dword [edi + 0x50], eax
mov eax, dword [0x27d6234]
mov dword [edi + 0x54], eax
mov eax, dword [0x27d6238]
mov dword [edi + 0x58], eax
mov eax, dword [0x27d623c]
mov dword [edi + 0x5c], eax
push 0x27d6240
lea ecx, [edi + 0x60]
mov byte [ebp - 4], 1
call fcn.00407fb0
mov eax, dword [0x27d6258]
mov dword [edi + 0x78], eax
mov eax, dword [0x27d625c]
mov dword [edi + 0x7c], eax
mov eax, dword [0x27d6260]
mov dword [edi + 0x80], eax
mov eax, dword [0x27d6264]
mov dword [edi + 0x84], eax
mov eax, dword [0x27d6268]
mov dword [edi + 0x88], eax
mov eax, dword [0x27d626c]
mov dword [edi + 0x8c], eax
lea esi, [edi + 0x90]
mov byte [ebp - 4], 2
push 0x27d6270
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6288]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d628c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6290]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6294]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6298]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d629c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xc0]
mov byte [ebp - 4], 3
push 0x27d62a0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d62b8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d62bc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d62c0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d62c4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d62c8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d62cc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xf0]
mov byte [ebp - 4], 4
push 0x27d62d0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d62e8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d62ec]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d62f0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d62f4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d62f8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d62fc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x120]
mov byte [ebp - 4], 5
push 0x27d6300
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6318]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d631c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6320]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6324]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6328]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d632c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x150]
mov byte [ebp - 4], 6
push 0x27d6330
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6348]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d634c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6350]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6354]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6358]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d635c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x180]
mov byte [ebp - 4], 7
push 0x27d6360
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6378]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d637c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6380]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6384]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6388]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d638c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x1b0]
mov byte [ebp - 4], 8
push 0x27d6390
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d63a8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d63ac]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d63b0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d63b4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d63b8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d63bc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x1e0]
mov byte [ebp - 4], 9
push 0x27d63c0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d63d8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d63dc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d63e0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d63e4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d63e8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d63ec]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x210]
mov byte [ebp - 4], 0xa
push 0x27d63f0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6408]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d640c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6410]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6414]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6418]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d641c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x240]
mov byte [ebp - 4], 0xb
push 0x27d6420
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6438]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d643c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6440]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6444]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6448]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d644c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x270]
mov byte [ebp - 4], 0xc
push 0x27d6450
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6468]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d646c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6470]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6474]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6478]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d647c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x2a0]
mov byte [ebp - 4], 0xd
push 0x27d6480
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6498]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d649c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d64a0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d64a4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d64a8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d64ac]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x2d0]
mov byte [ebp - 4], 0xe
push 0x27d64b0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d64c8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d64cc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d64d0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d64d4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d64d8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d64dc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x300]
mov byte [ebp - 4], 0xf
push 0x27d64e0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d64f8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d64fc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6500]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6504]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6508]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d650c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x330]
mov byte [ebp - 4], 0x10
push 0x27d6510
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6528]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d652c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6530]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6534]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6538]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d653c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x360]
mov byte [ebp - 4], 0x11
push 0x27d6540
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6558]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d655c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6560]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6564]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6568]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d656c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x390]
mov byte [ebp - 4], 0x12
push 0x27d6570
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6588]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d658c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6590]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6594]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6598]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d659c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x3c0]
mov byte [ebp - 4], 0x13
push 0x27d65a0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d65b8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d65bc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d65c0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d65c4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d65c8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d65cc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x3f0]
mov byte [ebp - 4], 0x14
push 0x27d65d0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d65e8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d65ec]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d65f0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d65f4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d65f8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d65fc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x420]
mov byte [ebp - 4], 0x15
push 0x27d6600
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6618]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d661c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6620]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6624]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6628]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d662c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x450]
mov byte [ebp - 4], 0x16
push 0x27d6630
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6648]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d664c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6650]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6654]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6658]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d665c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x480]
mov byte [ebp - 4], 0x17
push 0x27d6660
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6678]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d667c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6680]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6684]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6688]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d668c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x4b0]
mov byte [ebp - 4], 0x18
push 0x27d6690
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d66a8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d66ac]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d66b0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d66b4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d66b8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d66bc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x4e0]
mov byte [ebp - 4], 0x19
push 0x27d66c0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d66d8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d66dc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d66e0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d66e4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d66e8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d66ec]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x510]
mov byte [ebp - 4], 0x1a
push 0x27d66f0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6708]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d670c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6710]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6714]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6718]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d671c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x540]
mov byte [ebp - 4], 0x1b
push 0x27d6720
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6738]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d673c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6740]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6744]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6748]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d674c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x570]
mov byte [ebp - 4], 0x1c
push 0x27d6750
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6768]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d676c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6770]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6774]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6778]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d677c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x5a0]
mov byte [ebp - 4], 0x1d
push 0x27d6780
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6798]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d679c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d67a0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d67a4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d67a8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d67ac]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x5d0]
mov byte [ebp - 4], 0x1e
push 0x27d67b0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d67c8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d67cc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d67d0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d67d4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d67d8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d67dc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x600]
mov byte [ebp - 4], 0x1f
push 0x27d67e0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d67f8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d67fc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6800]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6804]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6808]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d680c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x630]
mov byte [ebp - 4], 0x20
push 0x27d6810
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6828]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d682c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6830]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6834]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6838]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d683c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x660]
mov byte [ebp - 4], 0x21
push 0x27d6840
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6858]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d685c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6860]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6864]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6868]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d686c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x690]
mov byte [ebp - 4], 0x22
push 0x27d6870
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6888]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d688c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6890]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6894]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6898]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d689c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x6c0]
mov byte [ebp - 4], 0x23
push 0x27d68a0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d68b8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d68bc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d68c0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d68c4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d68c8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d68cc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x6f0]
mov byte [ebp - 4], 0x24
push 0x27d68d0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d68e8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d68ec]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d68f0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d68f4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d68f8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d68fc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x720]
mov byte [ebp - 4], 0x25
push 0x27d6900
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6918]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d691c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6920]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6924]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6928]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d692c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x750]
mov byte [ebp - 4], 0x26
push 0x27d6930
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6948]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d694c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6950]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6954]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6958]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d695c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x780]
mov byte [ebp - 4], 0x27
push 0x27d6960
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6978]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d697c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6980]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6984]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6988]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d698c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x7b0]
mov byte [ebp - 4], 0x28
push 0x27d6990
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d69a8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d69ac]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d69b0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d69b4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d69b8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d69bc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x7e0]
mov byte [ebp - 4], 0x29
push 0x27d69c0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d69d8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d69dc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d69e0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d69e4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d69e8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d69ec]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x810]
mov byte [ebp - 4], 0x2a
push 0x27d69f0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6a08]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6a0c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6a10]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6a14]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6a18]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6a1c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x840]
mov byte [ebp - 4], 0x2b
push 0x27d6a20
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6a38]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6a3c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6a40]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6a44]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6a48]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6a4c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x870]
mov byte [ebp - 4], 0x2c
push 0x27d6a50
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6a68]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6a6c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6a70]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6a74]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6a78]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6a7c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x8a0]
mov byte [ebp - 4], 0x2d
push 0x27d6a80
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6a98]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6a9c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6aa0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6aa4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6aa8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6aac]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x8d0]
mov byte [ebp - 4], 0x2e
push 0x27d6ab0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6ac8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6acc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6ad0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6ad4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6ad8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6adc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x900]
mov byte [ebp - 4], 0x2f
push 0x27d6ae0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6af8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6afc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6b00]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6b04]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6b08]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6b0c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x930]
mov byte [ebp - 4], 0x30
push 0x27d6b10
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6b28]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6b2c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6b30]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6b34]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6b38]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6b3c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x960]
mov byte [ebp - 4], 0x31
push 0x27d6b40
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6b58]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6b5c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6b60]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6b64]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6b68]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6b6c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x990]
mov byte [ebp - 4], 0x32
push 0x27d6b70
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6b88]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6b8c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6b90]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6b94]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6b98]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6b9c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x9c0]
mov byte [ebp - 4], 0x33
push 0x27d6ba0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6bb8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6bbc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6bc0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6bc4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6bc8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6bcc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0x9f0]
mov byte [ebp - 4], 0x34
push 0x27d6bd0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6be8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6bec]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6bf0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6bf4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6bf8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6bfc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xa20]
mov byte [ebp - 4], 0x35
push 0x27d6c00
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6c18]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6c1c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6c20]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6c24]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6c28]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6c2c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xa50]
mov byte [ebp - 4], 0x36
push 0x27d6c30
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6c48]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6c4c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6c50]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6c54]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6c58]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6c5c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xa80]
mov byte [ebp - 4], 0x37
push 0x27d6c60
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6c78]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6c7c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6c80]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6c84]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6c88]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6c8c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xab0]
mov byte [ebp - 4], 0x38
push 0x27d6c90
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6ca8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6cac]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6cb0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6cb4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6cb8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6cbc]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xae0]
mov byte [ebp - 4], 0x39
push 0x27d6cc0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6cd8]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6cdc]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6ce0]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6ce4]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6ce8]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6cec]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xb10]
mov byte [ebp - 4], 0x3a
push 0x27d6cf0
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6d08]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6d0c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6d10]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6d14]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6d18]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6d1c]
mov dword [esi + 0x2c], eax
lea esi, [edi + 0xb40]
mov byte [ebp - 4], 0x3b
push 0x27d6d20
mov ecx, esi
call fcn.00407fb0
mov eax, dword [0x27d6d38]
mov dword [esi + 0x18], eax
mov eax, dword [0x27d6d3c]
mov dword [esi + 0x1c], eax
mov eax, dword [0x27d6d40]
mov dword [esi + 0x20], eax
mov eax, dword [0x27d6d44]
mov dword [esi + 0x24], eax
mov eax, dword [0x27d6d48]
mov dword [esi + 0x28], eax
mov eax, dword [0x27d6d4c]
mov dword [esi + 0x2c], eax
mov byte [ebp - 4], 0x3c
mov eax, dword [0x27d6d50]
mov dword [edi + 0xb70], eax
mov eax, dword [0x27d6d54]
mov ecx, dword [0x27d6d58]
mov dword [edi + 0xb78], ecx
mov dword [edi + 0xb74], eax
mov eax, dword [0x27d6d5c]
mov ecx, dword [0x27d6d60]
mov dword [edi + 0xb80], ecx
lea ecx, [edi + 0xbbc]
mov dword [edi + 0xb7c], eax
mov eax, dword [0x27d6d64]
mov dword [edi + 0xb84], eax
mov eax, dword [0x27d6d68]
mov dword [edi + 0xb88], eax
mov eax, dword [0x27d6d6c]
mov dword [edi + 0xb8c], eax
mov eax, dword [0x27d6d70]
mov dword [edi + 0xb90], eax
mov eax, dword [0x27d6d74]
mov dword [edi + 0xb94], eax
mov eax, dword [0x27d6d78]
mov dword [edi + 0xb98], eax
mov eax, dword [0x27d6d7c]
mov dword [edi + 0xb9c], eax
mov eax, dword [0x27d6d80]
mov dword [edi + 0xba0], eax
mov eax, dword [0x27d6d84]
mov dword [edi + 0xba4], eax
mov eax, dword [0x27d6d88]
mov dword [edi + 0xba8], eax
mov eax, dword [0x27d6d8c]
mov dword [edi + 0xbac], eax
mov eax, dword [0x27d6d90]
mov dword [edi + 0xbb0], eax
mov eax, dword [0x27d6d94]
mov dword [edi + 0xbb4], eax
mov eax, dword [0x27d6d98]
mov dword [edi + 0xbb8], eax
push 0x27d6d9c
call fcn.00407fb0
lea ecx, [edi + 0xbd4]
mov byte [ebp - 4], 0x3d
push 0x27d6db4
call fcn.00407fb0
lea ecx, [edi + 0xbec]
mov byte [ebp - 4], 0x3e
push 0x27d6dcc
call fcn.00407fb0
lea ecx, [edi + 0xc04]
mov byte [ebp - 4], 0x3f
push 0x27d6de4
call fcn.00407fb0
lea ecx, [edi + 0xc1c]
mov byte [ebp - 4], 0x40
push 0x27d6dfc
call fcn.0040f6c0
mov byte [ebp - 4], 0x41
lea ecx, [edi + 0xc2c]
mov eax, dword [0x27d6e08]
push 0x27d6e0c
mov dword [edi + 0xc28], eax
call fcn.0040f6c0
mov byte [ebp - 4], 0x42
lea ecx, [edi + 0xc40]
mov eax, dword [0x27d6e18]
mov dword [edi + 0xc38], eax
mov eax, dword [0x27d6e1c]
push 0x27d6e20
mov dword [edi + 0xc3c], eax
call fcn.0040f6c0
mov byte [ebp - 4], 0x43
lea ecx, [edi + 0xc5c]
mov eax, dword [0x27d6e2c]
mov dword [edi + 0xc4c], eax
mov eax, dword [0x27d6e30]
mov dword [edi + 0xc50], eax
mov eax, dword [0x27d6e34]
mov dword [edi + 0xc54], eax
mov eax, dword [0x27d6e38]
push 0x27d6e3c
mov dword [edi + 0xc58], eax
call fcn.00407fb0
lea ecx, [edi + 0xc74]
mov byte [ebp - 4], 0x44
push 0x27d6e54
call fcn.0040f6c0
mov byte [ebp - 4], 0x45
lea ecx, [edi + 0xc98]
mov eax, dword [0x27d6e60]
mov dword [edi + 0xc80], eax
mov eax, dword [0x27d6e64]
mov dword [edi + 0xc84], eax
mov eax, dword [0x27d6e68]
mov dword [edi + 0xc88], eax
mov eax, dword [0x27d6e6c]
mov dword [edi + 0xc8c], eax
mov eax, dword [0x27d6e70]
mov dword [edi + 0xc90], eax
mov eax, dword [0x27d6e74]
push 0x27d6e78
mov dword [edi + 0xc94], eax
call fcn.00407fb0
lea ecx, [edi + 0xcb0]
mov byte [ebp - 4], 0x46
push 0x27d6e90
call fcn.00407fb0
mov byte [ebp - 4], 0x47
lea ecx, [edi + 0xcc8]
push 0x27d6ea8
call fcn.00407fb0
lea ecx, [edi + 0xce0]
mov byte [ebp - 4], 0x48
push 0x27d6ec0
call fcn.00407fb0
mov byte [ebp - 4], 0x49
lea ecx, [edi + 0xcfc]
mov eax, dword [0x27d6ed8]
push 0x27d6edc
mov dword [edi + 0xcf8], eax
call fcn.00407fb0
mov byte [ebp - 4], 0x4a
lea ecx, [edi + 0xd24]
mov eax, dword [0x27d6ef4]
mov dword [edi + 0xd14], eax
mov eax, dword [0x27d6ef8]
mov dword [edi + 0xd18], eax
mov eax, dword [0x27d6efc]
mov dword [edi + 0xd1c], eax
mov eax, dword [0x27d6f00]
push 0x27d6f04
mov dword [edi + 0xd20], eax
call fcn.0040f620
mov byte [ebp - 4], 0x4b
lea esi, [edi + 0xd38]
mov eax, dword [0x27d6f10]
mov dword [edi + 0xd30], eax
mov eax, dword [0x27d6f14]
mov dword [edi + 0xd34], eax
push 0x40
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], esi
call fcn.004d7c03
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
push 0x27d6f18
mov ecx, esi
mov byte [ebp - 4], 0x4c
call fcn.0040ffd0
mov byte [ebp - 4], 0x4d
mov eax, dword [0x27d6f20]
mov dword [edi + 0xd40], eax
mov eax, dword [0x27d6f24]
mov dword [edi + 0xd44], eax
mov eax, dword [0x27d6f28]
mov dword [edi + 0xd48], eax
mov eax, dword [0x27d6f2c]
mov dword [edi + 0xd4c], eax
mov eax, dword [0x27d6f30]
mov dword [edi + 0xd50], eax
mov ecx, dword [0x27d6f34]
mov dword [edi + 0xd54], ecx
mov ecx, dword [0x27d6f38]
mov dword [edi + 0xd58], ecx
mov ecx, dword [0x27d6f3c]
mov dword [edi + 0xd5c], ecx
lea ecx, [edi + 0xd60]
push 0x27d6f40
call fcn.00407fb0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4