Function at 0x4d1c40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53bfc9
mov eax, dword fs:[0]
push eax
sub esp, 0x9c4
mov eax, dword [0x58a87c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x7ec], ecx
mov dword [ebp - 0x7f4], 0
mov dword [ebp - 0x9d0], 0
mov ecx, dword [ebp - 0x7ec]
call fcn.004d1af0
lea ecx, [ebp - 0x28]
call fcn.00406eb0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.00406eb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c0]
call fcn.00406eb0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d8]
call fcn.00406eb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd0]
call fcn.00406eb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1a8]
call fcn.00406eb0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x190]
call fcn.00406eb0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x178]
call fcn.00406eb0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x160]
call fcn.00406eb0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x148]
call fcn.00406eb0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00406eb0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x118]
call fcn.00406eb0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x100]
call fcn.00406eb0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe8]
call fcn.00406eb0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
call fcn.00406eb0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x70]
call fcn.00406eb0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb8]
call fcn.00406eb0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa0]
call fcn.00406eb0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x88]
call fcn.00406eb0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1f0]
call fcn.00406eb0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7e8]
call fcn.00428890
mov byte [ebp - 4], 0x15
push str.Install.data
lea ecx, [ebp - 0x208]
call fcn.00406e70
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x208]
push eax
mov ecx, dword [ebp - 0x7ec]
push ecx
lea edx, [ebp - 0x220]
push edx
call fcn.004179c0
add esp, 0xc
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x208]
call fcn.00406de0
lea eax, [ebp - 0x7e8]
push eax
lea ecx, [ebp - 0x220]
push ecx
call fcn.00428e20
add esp, 8
movzx edx, al
test edx, edx
je 0x4d1e65
lea ecx, [ebp - 0x7e8]
call fcn.00407340
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x7f0]
mov ecx, dword [eax + 4]
push ecx
push str._010u
lea edx, [ebp - 0x28]
push edx
call fcn.004121b0
add esp, 0xc
mov eax, dword [ebp - 0x7f0]
mov ecx, dword [eax]
push ecx
push str._010u
lea edx, [ebp - 0x40]
push edx
call fcn.004121b0
add esp, 0xc
mov eax, dword [ebp - 0x7ec]
add eax, 0x4c
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00406db0
push str.0030
lea ecx, [ebp - 0x1d8]
call fcn.00406d80
push 2
push 0
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x888], eax
mov edx, dword [ebp - 0x888]
mov dword [ebp - 0x88c], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x88c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x298]
call fcn.00406de0
push 2
push 2
lea ecx, [ebp - 0x2b0]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x890], eax
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x894], edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x894]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2b0]
call fcn.00406de0
push 2
push 4
lea ecx, [ebp - 0x2c8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x898], eax
mov edx, dword [ebp - 0x898]
mov dword [ebp - 0x8a0], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x8a0]
push eax
lea ecx, [ebp - 0x190]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2c8]
call fcn.00406de0
push 2
push 6
lea ecx, [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x8a4], eax
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], edx
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x8a8]
push eax
lea ecx, [ebp - 0x178]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2e0]
call fcn.00406de0
push 2
push 8
lea ecx, [ebp - 0x2f8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x8ac], eax
mov edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0x160]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2f8]
call fcn.00406de0
push 2
push 0
lea ecx, [ebp - 0x310]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00406cc0
mov dword [ebp - 0x8b4], eax
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x8b8]
push eax
lea ecx, [ebp - 0x148]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x310]
call fcn.00406de0
push 2
push 2
lea ecx, [ebp - 0x328]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00406cc0
mov dword [ebp - 0x8bc], eax
mov edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x130]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x328]
call fcn.00406de0
push 2
push 4
lea ecx, [ebp - 0x340]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00406cc0
mov dword [ebp - 0x8c4], eax
mov edx, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c8], edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x8c8]
push eax
lea ecx, [ebp - 0x118]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x340]
call fcn.00406de0
push 2
push 6
lea ecx, [ebp - 0x358]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00406cc0
mov dword [ebp - 0x8cc], eax
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x8d0]
push eax
lea ecx, [ebp - 0x100]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x358]
call fcn.00406de0
push 2
push 8
lea ecx, [ebp - 0x370]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00406cc0
mov dword [ebp - 0x8d4], eax
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d8], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x370]
call fcn.00406de0
push 2
push 0
lea ecx, [ebp - 0x388]
push ecx
lea ecx, [ebp - 0x1c0]
call fcn.00406cc0
mov dword [ebp - 0x8dc], eax
mov edx, dword [ebp - 0x8dc]
mov dword [ebp - 0x8e0], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x58]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x388]
call fcn.00406de0
push 2
push 2
lea ecx, [ebp - 0x3a0]
push ecx
lea ecx, [ebp - 0x1c0]
call fcn.00406cc0
mov dword [ebp - 0x83c], eax
mov edx, dword [ebp - 0x83c]
mov dword [ebp - 0x8e4], edx
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x8e4]
push eax
lea ecx, [ebp - 0x70]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3a0]
call fcn.00406de0
push 2
push 4
lea ecx, [ebp - 0x3b8]
push ecx
lea ecx, [ebp - 0x1c0]
call fcn.00406cc0
mov dword [ebp - 0x8e8], eax
mov edx, dword [ebp - 0x8e8]
mov dword [ebp - 0x8ec], edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x8ec]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3b8]
call fcn.00406de0
push 2
push 0
lea ecx, [ebp - 0x3d0]
push ecx
lea ecx, [ebp - 0x1d8]
call fcn.00406cc0
mov dword [ebp - 0x8f0], eax
mov edx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], edx
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x8f4]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3d0]
call fcn.00406de0
push 2
push 2
lea ecx, [ebp - 0x3e8]
push ecx
lea ecx, [ebp - 0x1d8]
call fcn.00406cc0
mov dword [ebp - 0x8f8], eax
mov edx, dword [ebp - 0x8f8]
mov dword [ebp - 0x8fc], edx
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x8fc]
push eax
lea ecx, [ebp - 0x88]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3e8]
call fcn.00406de0
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0x538]
push eax
call fcn.00414d10
add esp, 0xc
mov dword [ebp - 0x900], eax
mov ecx, dword [ebp - 0x900]
mov dword [ebp - 0x904], ecx
mov byte [ebp - 4], 0x28
lea edx, [ebp - 0x1a8]
push edx
mov eax, dword [ebp - 0x904]
push eax
lea ecx, [ebp - 0x520]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x908], eax
mov edx, dword [ebp - 0x908]
mov dword [ebp - 0x90c], edx
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x90c]
push ecx
lea edx, [ebp - 0x508]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x914], eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x190]
push ecx
mov edx, dword [ebp - 0x914]
push edx
lea eax, [ebp - 0x4f0]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x918], eax
mov ecx, dword [ebp - 0x918]
mov dword [ebp - 0x91c], ecx
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0xe8]
push edx
mov eax, dword [ebp - 0x91c]
push eax
lea ecx, [ebp - 0x4d8]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x920], eax
mov edx, dword [ebp - 0x920]
mov dword [ebp - 0x924], edx
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp - 0x924]
push ecx
lea edx, [ebp - 0x4c0]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x928], eax
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x92c], eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x92c]
push edx
lea eax, [ebp - 0x4a8]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x930]
mov dword [ebp - 0x934], ecx
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x148]
push edx
mov eax, dword [ebp - 0x934]
push eax
lea ecx, [ebp - 0x490]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x938], eax
mov edx, dword [ebp - 0x938]
mov dword [ebp - 0x93c], edx
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x93c]
push ecx
lea edx, [ebp - 0x478]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x940], eax
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x944], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x944]
push edx
lea eax, [ebp - 0x460]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x948], eax
mov ecx, dword [ebp - 0x948]
mov dword [ebp - 0x94c], ecx
mov byte [ebp - 4], 0x31
lea edx, [ebp - 0x118]
push edx
mov eax, dword [ebp - 0x94c]
push eax
lea ecx, [ebp - 0x448]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x950], eax
mov edx, dword [ebp - 0x950]
mov dword [ebp - 0x954], edx
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x954]
push ecx
lea edx, [ebp - 0x430]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0x95c], eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x95c]
push edx
lea eax, [ebp - 0x418]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 0x960]
mov dword [ebp - 0x964], ecx
mov byte [ebp - 4], 0x34
lea edx, [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x964]
push eax
lea ecx, [ebp - 0x400]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x96c], eax
mov edx, dword [ebp - 0x96c]
mov dword [ebp - 0x970], edx
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x970]
push eax
lea ecx, [ebp - 0x28]
call fcn.00406df0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x400]
call fcn.00406de0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x418]
call fcn.00406de0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x430]
call fcn.00406de0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x448]
call fcn.00406de0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x460]
call fcn.00406de0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x478]
call fcn.00406de0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x490]
call fcn.00406de0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x4a8]
call fcn.00406de0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x4c0]
call fcn.00406de0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4d8]
call fcn.00406de0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4f0]
call fcn.00406de0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x508]
call fcn.00406de0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x520]
call fcn.00406de0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x538]
call fcn.00406de0
push 1
push 0
lea ecx, [ebp - 0x550]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x974], eax
mov edx, dword [ebp - 0x974]
mov dword [ebp - 0x978], edx
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x978]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x550]
call fcn.00406de0
push 2
push 1
lea ecx, [ebp - 0x568]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x97c], eax
mov edx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x980]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x568]
call fcn.00406de0
push 2
push 3
lea ecx, [ebp - 0x580]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x984], eax
mov edx, dword [ebp - 0x984]
mov dword [ebp - 0x988], edx
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x988]
push eax
lea ecx, [ebp - 0x190]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x580]
call fcn.00406de0
push 2
push 5
lea ecx, [ebp - 0x598]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x98c], eax
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0x990], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x990]
push eax
lea ecx, [ebp - 0x178]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x598]
call fcn.00406de0
push 2
push 7
lea ecx, [ebp - 0x5b0]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x994], eax
mov edx, dword [ebp - 0x994]
mov dword [ebp - 0x998], edx
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x998]
push eax
lea ecx, [ebp - 0x160]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5b0]
call fcn.00406de0
push 2
push 9
lea ecx, [ebp - 0x268]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x99c], eax
mov edx, dword [ebp - 0x99c]
mov dword [ebp - 0x9a0], edx
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x148]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x268]
call fcn.00406de0
push 2
push 0xb
lea ecx, [ebp - 0x5c8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x9a4], eax
mov edx, dword [ebp - 0x9a4]
mov dword [ebp - 0x9a8], edx
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x9a8]
push eax
lea ecx, [ebp - 0x130]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5c8]
call fcn.00406de0
push 2
push 0xd
lea ecx, [ebp - 0x5e0]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x9ac], eax
mov edx, dword [ebp - 0x9ac]
mov dword [ebp - 0x9b0], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x9b0]
push eax
lea ecx, [ebp - 0x118]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5e0]
call fcn.00406de0
push 2
push 0xf
lea ecx, [ebp - 0x5f8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x968], eax
mov edx, dword [ebp - 0x968]
mov dword [ebp - 0x9b4], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x9b4]
push eax
lea ecx, [ebp - 0x100]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5f8]
call fcn.00406de0
push 2
push 0x11
lea ecx, [ebp - 0x610]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x9b8], eax
mov edx, dword [ebp - 0x9b8]
mov dword [ebp - 0x9bc], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x9bc]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x610]
call fcn.00406de0
push 2
push 0x13
lea ecx, [ebp - 0x628]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x9c0], eax
mov edx, dword [ebp - 0x9c0]
mov dword [ebp - 0x9c4], edx
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x9c4]
push eax
lea ecx, [ebp - 0x58]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x628]
call fcn.00406de0
push 2
push 0x15
lea ecx, [ebp - 0x640]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x9c8], eax
mov edx, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x9cc]
push eax
lea ecx, [ebp - 0x70]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x640]
call fcn.00406de0
push 2
push 0x17
lea ecx, [ebp - 0x658]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x7f8], eax
mov edx, dword [ebp - 0x7f8]
mov dword [ebp - 0x7fc], edx
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x7fc]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x658]
call fcn.00406de0
push 2
push 0x19
lea ecx, [ebp - 0x670]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x800], eax
mov edx, dword [ebp - 0x800]
mov dword [ebp - 0x804], edx
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x804]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x670]
call fcn.00406de0
push 2
push 0x1b
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x808], eax
mov edx, dword [ebp - 0x808]
mov dword [ebp - 0x80c], edx
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x80c]
push eax
lea ecx, [ebp - 0x88]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x688]
call fcn.00406de0
push 1
push 0x1d
lea ecx, [ebp - 0x6a0]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406cc0
mov dword [ebp - 0x810], eax
mov edx, dword [ebp - 0x810]
mov dword [ebp - 0x814], edx
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0x814]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00406df0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6a0]
call fcn.00406de0
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0x280]
push eax
call fcn.00414d10
add esp, 0xc
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
mov dword [ebp - 0x81c], ecx
mov byte [ebp - 4], 0x46
lea edx, [ebp - 0x1a8]
push edx
mov eax, dword [ebp - 0x81c]
push eax
lea ecx, [ebp - 0x250]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x820], eax
mov edx, dword [ebp - 0x820]
mov dword [ebp - 0x824], edx
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x824]
push ecx
lea edx, [ebp - 0x238]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x82c], eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x190]
push ecx
mov edx, dword [ebp - 0x82c]
push edx
lea eax, [ebp - 0x7a8]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x830]
mov dword [ebp - 0x834], ecx
mov byte [ebp - 4], 0x49
lea edx, [ebp - 0xe8]
push edx
mov eax, dword [ebp - 0x834]
push eax
lea ecx, [ebp - 0x790]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x838], eax
mov edx, dword [ebp - 0x838]
mov dword [ebp - 0x89c], edx
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp - 0x89c]
push ecx
lea edx, [ebp - 0x778]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x844], eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x844]
push edx
lea eax, [ebp - 0x760]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x848], eax
mov ecx, dword [ebp - 0x848]
mov dword [ebp - 0x84c], ecx
mov byte [ebp - 4], 0x4c
lea edx, [ebp - 0x1f0]
push edx
mov eax, dword [ebp - 0x84c]
push eax
lea ecx, [ebp - 0x748]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x850], eax
mov edx, dword [ebp - 0x850]
mov dword [ebp - 0x854], edx
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x854]
push ecx
lea edx, [ebp - 0x730]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x85c], eax
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xb8]
push ecx
mov edx, dword [ebp - 0x85c]
push edx
lea eax, [ebp - 0x718]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x860]
mov dword [ebp - 0x864], ecx
mov byte [ebp - 4], 0x4f
lea edx, [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x700]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x868], eax
mov edx, dword [ebp - 0x868]
mov dword [ebp - 0x86c], edx
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x86c]
push ecx
lea edx, [ebp - 0x6e8]
push edx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x874], eax
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x70]
push ecx
mov edx, dword [ebp - 0x874]
push edx
lea eax, [ebp - 0x6d0]
push eax
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x878], eax
mov ecx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], ecx
mov byte [ebp - 4], 0x52
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x6b8]
push ecx
call fcn.00407590
add esp, 0xc
mov dword [ebp - 0x880], eax
mov edx, dword [ebp - 0x880]
mov dword [ebp - 0x884], edx
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0xa0]
push eax
mov ecx, dword [ebp - 0x884]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00407590
add esp, 0xc
mov eax, dword [ebp - 0x7f4]
or eax, 1
mov dword [ebp - 0x7f4], eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x6b8]
call fcn.00406de0
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x6d0]
call fcn.00406de0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x6e8]
call fcn.00406de0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x700]
call fcn.00406de0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x718]
call fcn.00406de0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x730]
call fcn.00406de0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x748]
call fcn.00406de0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x760]
call fcn.00406de0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x778]
call fcn.00406de0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x790]
call fcn.00406de0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x7a8]
call fcn.00406de0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x238]
call fcn.00406de0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x250]
call fcn.00406de0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x280]
call fcn.00406de0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x220]
call fcn.00406de0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7e8]
call fcn.00428920
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1f0]
call fcn.00406de0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x88]
call fcn.00406de0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa0]
call fcn.00406de0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb8]
call fcn.00406de0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x70]
call fcn.00406de0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
call fcn.00406de0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe8]
call fcn.00406de0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x100]
call fcn.00406de0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x118]
call fcn.00406de0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x130]
call fcn.00406de0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x148]
call fcn.00406de0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x160]
call fcn.00406de0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x178]
call fcn.00406de0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x190]
call fcn.00406de0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1a8]
call fcn.00406de0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd0]
call fcn.00406de0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d8]
call fcn.00406de0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c0]
call fcn.00406de0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.00406de0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00406de0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ef136
mov esp, ebp
pop ebp
ret 4