Function at 0x435606
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Get process heap flags

Disassembly:
mov eax, 0x595c7d
call fcn.005348dc
sub esp, 0x288
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, ecx
push 0x37
pop ecx
mov dword [esi], eax
xor eax, eax
lea edi, [esi + 4]
push str.btn001m
rep stosd dword es:[edi], eax
push str.btn001t
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x7c], esi
call fcn.00432b24
xor ebx, ebx
push ebx
push eax
lea ecx, [esi + 0xe0]
mov dword [ebp - 4], ebx
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00432776
push str.btn002m
push str.btn002t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x140]
mov byte [ebp - 4], 3
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 5
call fcn.00432776
push str.sld000m
push str.sld000t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x1a0]
mov byte [ebp - 4], 6
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call fcn.00432776
push str.tit000t
push str.cur000m
lea ecx, [ebp - 0x78]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x200]
mov byte [ebp - 4], 9
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xb
call fcn.00432776
push ebx
push str.cur000t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
mov byte [ebp - 4], 0xc
push eax
lea ecx, [esi + 0x260]
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xe
call fcn.00432776
push str.dnd000m
push str.dnd000t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x2c0]
mov byte [ebp - 4], 0xf
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call fcn.00432776
push 0x5c8a2c
push 0x5c8a24
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x320]
mov byte [ebp - 4], 0x12
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00432776
mov edi, str.mpe000t
push edi
push str.mpf000m
push str.mpf000t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x380]
mov byte [ebp - 4], 0x15
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x17
call fcn.00437d46
push edi
push str.mpi000t
push str.mpe001m
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x388]
mov byte [ebp - 4], 0x18
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x1a
call fcn.00437d46
push edi
push ebx
push str.mpe001t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x390]
mov byte [ebp - 4], 0x1b
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1d
call fcn.00437d46
push edi
push str.twi000t
push str.twi001t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x398]
mov byte [ebp - 4], 0x1e
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x20
call fcn.00437d46
push edi
push ebx
push str.ret000m
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x3a0]
mov byte [ebp - 4], 0x21
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x23
call fcn.00437d46
push edi
push ebx
push str.ret000t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x3a8]
mov byte [ebp - 4], 0x24
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x26
call fcn.00437d46
push edi
push str.ret001m
push str.ret001t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x3b0]
mov byte [ebp - 4], 0x27
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x29
call fcn.00437d46
push edi
push str.tip000m
push str.tip000t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x3b8]
mov byte [ebp - 4], 0x2a
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2c
call fcn.00437d46
push ebx
mov eax, 0x100
push eax
push eax
lea ecx, [esi + 0x3c0]
call fcn.004128fc
push edi
push str.tip001m
push str.tip001t
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2d
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x3c8]
mov byte [ebp - 4], 0x2e
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x30
call fcn.00437d46
push edi
push str.tip005m
push str.tip005t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x3d0]
mov byte [ebp - 4], 0x31
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x33
call fcn.00437d46
push edi
push str.tip003m
push str.tip003t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x3d8]
mov byte [ebp - 4], 0x34
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x36
call fcn.00437d46
push edi
push str.tip004m
push str.tip004t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x3e0]
mov byte [ebp - 4], 0x37
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x39
call fcn.00437d46
push edi
push str.dul000m
push str.dul000t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x3e8]
mov byte [ebp - 4], 0x3a
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3c
call fcn.00437d46
push edi
push str.dul001m
push str.dul001t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x3f0]
mov byte [ebp - 4], 0x3d
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3f
call fcn.00437d46
push edi
push str.lbl000m
push str.lbl000t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x3f8]
mov byte [ebp - 4], 0x40
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.00437d46
push edi
push str.bms000m
push str.bms000t
lea ecx, [ebp - 0x78]
call fcn.00437c90
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x400]
mov byte [ebp - 4], 0x43
call fcn.00412931
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x45
call fcn.00437d46
push edi
push str.wiz000t
push str.itm000t
lea ecx, [ebp - 0x48]
call fcn.00437c90
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x408]
mov byte [ebp - 4], 0x46
call fcn.00412931
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.00437d46
push ebx
push str.spl000t
lea ecx, [ebp - 0x78]
call fcn.00432b24
mov byte [ebp - 4], 0x49
push ebx
push eax
lea ecx, [esi + 0x410]
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x4b
call fcn.00432776
push ebx
push str.lne000m
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
lea ecx, [esi + 0x470]
push eax
mov byte [ebp - 4], 0x4c
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4e
call fcn.00432776
push ebx
push str.lne000t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x4d0]
mov byte [ebp - 4], 0x4f
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x51
call fcn.00432776
push str.fnt000m
push str.fnt000t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0x530]
mov byte [ebp - 4], 0x52
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x54
call fcn.00432776
push str.fnt001m
push str.fnt001t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push 1
pop edi
push edi
lea ecx, [esi + 0x590]
push eax
mov byte [ebp - 4], 0x55
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x57
call fcn.00432776
push str.fnt002m
push str.fnt002t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push edi
lea ecx, [esi + 0x5f0]
push eax
mov byte [ebp - 4], 0x58
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5a
call fcn.00432776
push str.fnt003m
push str.fnt003t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push edi
lea ecx, [esi + 0x650]
push eax
mov byte [ebp - 4], 0x5b
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x5d
call fcn.00432776
push str.fnt004m
push str.fnt004t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push edi
lea ecx, [esi + 0x6b0]
push eax
mov byte [ebp - 4], 0x5e
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x60
call fcn.00432776
push str.fsp000m
push str.fsp000t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push edi
lea ecx, [esi + 0x710]
push eax
mov byte [ebp - 4], 0x61
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x63
call fcn.00432776
push str.inf000m
push str.inf000t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push edi
lea ecx, [esi + 0x770]
push eax
mov byte [ebp - 4], 0x64
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x66
call fcn.00432776
push str.log000m
push str.log000t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push ebx
lea ecx, [esi + 0x7d0]
push eax
mov byte [ebp - 4], 0x67
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x69
call fcn.00432776
push str.cls000m
push str.cls000t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
lea ecx, [esi + 0x830]
push eax
mov byte [ebp - 4], 0x6a
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x6c
call fcn.00432776
push str.cls001m
push str.cls001t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push ebx
lea ecx, [esi + 0x890]
push eax
mov byte [ebp - 4], 0x6d
call fcn.0055d248
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x6f
call fcn.00432776
push str.std000m
push str.std000t
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
lea ecx, [esi + 0x8f0]
push eax
mov byte [ebp - 4], 0x70
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x72
call fcn.00432776
push str.map000m
push str.map000t
lea ecx, [ebp - 0x78]
call fcn.00432b24
push eax
lea ecx, [esi + 0x950]
mov byte [ebp - 4], 0x73
call fcn.005637da
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x75
call fcn.00432776
push 0x5c8830
push 0x5c8828
lea ecx, [ebp - 0x48]
call fcn.00432b24
push ebx
push eax
lea ecx, [esi + 0xa18]
mov byte [ebp - 4], 0x76
call fcn.0055d248
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x78
call fcn.00432776
mov edi, 0x5c6dc4
push edi
push 0x5c881c
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 0x79
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push str.specials_s002
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa78], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x7a
call fcn.0040d3cd
push edi
push str.specials_s003
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa7c], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x7b
call fcn.0040d3cd
push edi
push str.specials_s004
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa80], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x7c
call fcn.0040d3cd
push edi
push str.specials_s027
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa84], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x7d
call fcn.0040d3cd
push edi
push 0x5c87d0
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa88], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
mov byte [ebp - 4], 0x7e
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push 0x5c87c4
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa8c], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x7f
call fcn.0040d3cd
push edi
push 0x5c87b8
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa90], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x80
call fcn.0040d3cd
push edi
push 0x5c87ac
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa94], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x81
call fcn.0040d3cd
push edi
push 0x5c87a0
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa98], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x82
call fcn.0040d3cd
push edi
push str.specials_s005
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xa9c], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
mov byte [ebp - 4], 0x83
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push 0x5c8784
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaa0], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x84
call fcn.0040d3cd
push edi
push 0x5c8784
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaa4], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x85
call fcn.0040d3cd
push edi
push 0x5c8778
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaa8], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x86
call fcn.0040d3cd
push edi
push 0x5c876c
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaac], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x87
call fcn.0040d3cd
push edi
push 0x5c8760
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xab0], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
mov byte [ebp - 4], 0x88
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push 0x5c8754
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xab4], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x89
call fcn.0040d3cd
push edi
push 0x5c8748
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xab8], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x8a
call fcn.0040d3cd
push edi
push str.specials_s023
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xabc], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x8b
call fcn.0040d3cd
push edi
push str.specials_s029
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xac0], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x8c
call fcn.0040d3cd
push edi
push str.specials_s030
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xac4], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
mov byte [ebp - 4], 0x8d
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push str.specials_s031
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xac8], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x8e
call fcn.0040d3cd
push edi
push str.specials_s032
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xacc], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x8f
call fcn.0040d3cd
push edi
push str.specials_s033
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xad0], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x90
call fcn.0040d3cd
push edi
push str.specials_s021
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xad4], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x91
call fcn.0040d3cd
push edi
push str.specials_s022
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xad8], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
mov byte [ebp - 4], 0x92
push 1
push eax
call fcn.0040d3cd
push edi
push str.specials_s020
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xadc], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x93
call fcn.0040d3cd
push edi
push str.specials_s036
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xae0], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x94
call fcn.0040d3cd
fldz
fstp dword [ebp - 0x18]
push edi
fldz
push str.specials_s040
fstp dword [ebp - 0x14]
lea ecx, [ebp - 0x294]
fldz
mov byte [ebp - 4], 0x78
mov dword [esi + 0xae4], eax
fstp dword [ebp - 0x10]
call fcn.0040fef3
fld dword [0x5a5950]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push 3
push ecx
fstp dword [esp]
push ecx
fld dword [0x5a5514]
lea edx, [ebp - 0x18]
fstp dword [esp]
push edx
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x95
call fcn.0040d279
fldz
fstp dword [ebp - 0x18]
push edi
fldz
push str.specials_s041
fstp dword [ebp - 0x14]
lea ecx, [ebp - 0x294]
fldz
mov byte [ebp - 4], 0x78
mov dword [esi + 0xae8], eax
fstp dword [ebp - 0x10]
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
mov byte [ebp - 4], 0x96
fld dword [0x5a5950]
push 3
push ecx
fstp dword [esp]
push ecx
fld dword [0x5a5514]
lea edx, [ebp - 0x18]
fstp dword [esp]
push edx
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d279
fldz
fstp dword [ebp - 0x18]
push edi
fldz
push str.specials_s042
fstp dword [ebp - 0x14]
lea ecx, [ebp - 0x294]
fldz
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaec], eax
fstp dword [ebp - 0x10]
call fcn.0040fef3
fld dword [0x5a5950]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push 3
push ecx
fstp dword [esp]
push ecx
fld dword [0x5a5514]
lea edx, [ebp - 0x18]
fstp dword [esp]
push edx
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x97
call fcn.0040d279
fldz
fstp dword [ebp - 0x18]
push edi
fldz
push 0x5c866c
fstp dword [ebp - 0x14]
lea ecx, [ebp - 0x294]
fldz
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaf0], eax
fstp dword [ebp - 0x10]
call fcn.0040fef3
fld dword [0x5a5950]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push 3
push ecx
fstp dword [esp]
push ecx
fld dword [0x5a5514]
lea edx, [ebp - 0x18]
fstp dword [esp]
push edx
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x98
call fcn.0040d279
push edi
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaf4], eax
push 0x5c8658
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x99
call fcn.0040d3cd
push edi
push 0x5c8644
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xaf8], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x9a
call fcn.0040d3cd
push edi
push 0x5c8630
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xafc], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x9b
call fcn.0040d3cd
push edi
push 0x5c861c
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xb00], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x9c
call fcn.0040d3cd
push edi
push 0x5c8608
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xb04], eax
call fcn.0040fef3
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x9d
call fcn.0040d3cd
mov dword [esi + 0xb08], eax
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 0x78
mov dword [esi + 0xb0c], ebx
lea ecx, [esi + 0xb10]
push ebx
mov byte [ecx], al
call fcn.00401321
push 0x5ef440
call fcn.00533ff0
pop ecx
push eax
push 0x5ef440
lea ecx, [esi + 0xb10]
call fcn.00401267
lea eax, [esi + 0x5f0]
push eax
lea ecx, [esi + 0x590]
mov byte [ebp - 4], 0x9e
call fcn.0055d5a1
lea eax, [esi + 0x650]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x770]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x470]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x890]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x6b0]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x830]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x8f0]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
lea eax, [esi + 0x710]
push eax
lea ecx, [esi + 0x590]
call fcn.0055d5a1
push 0xe
lea ecx, [esi + 0x590]
call fcn.00416f0d
push 1
lea ecx, [esi + 0x590]
call fcn.00407dba
lea eax, [esi + 0x650]
push eax
lea ecx, [esi + 0x5f0]
call fcn.0055d5a1
lea eax, [esi + 0x7d0]
push eax
lea ecx, [esi + 0x5f0]
call fcn.0055d5a1
lea eax, [esi + 0x590]
push eax
lea ecx, [esi + 0x5f0]
call fcn.0055d5a1
push 1
lea ecx, [esi + 0x5f0]
call fcn.00407dba
lea eax, [esi + 0x5f0]
push eax
lea ecx, [esi + 0x650]
call fcn.0055d5a1
lea eax, [esi + 0x7d0]
push eax
lea ecx, [esi + 0x650]
call fcn.0055d5a1
lea eax, [esi + 0x770]
push eax
lea ecx, [esi + 0x650]
call fcn.0055d5a1
lea eax, [esi + 0x470]
push eax
lea ecx, [esi + 0x650]
call fcn.0055d5a1
lea eax, [esi + 0x890]
push eax
lea ecx, [esi + 0x650]
call fcn.0055d5a1
lea eax, [esi + 0x8f0]
push eax
lea ecx, [esi + 0x650]
call fcn.0055d5a1
push 0x11
lea ecx, [esi + 0x650]
call fcn.00416f0d
push 1
lea ecx, [esi + 0x650]
call fcn.00407dba
push 2
lea ecx, [esi + 0x650]
call fcn.00416f75
lea eax, [esi + 0x5f0]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x650]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x770]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x470]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x590]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x590]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x830]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x8f0]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
lea eax, [esi + 0x710]
push eax
lea ecx, [esi + 0x6b0]
call fcn.0055d5a1
push 0xe
lea ecx, [esi + 0x6b0]
call fcn.00416f0d
push 1
lea ecx, [esi + 0x6b0]
call fcn.00407dba
push 0xe
lea ecx, [esi + 0x710]
call fcn.00416f0d
push 1
lea ecx, [esi + 0x710]
call fcn.00407dba
mov ecx, dword [esi + 0xaec]
push 0x14
call fcn.00415629
mov ecx, dword [esi + 0xaf0]
push 0x14
call fcn.00415629
mov ecx, dword [esi + 0xaf4]
push 0x1e
call fcn.00415629
push edi
push 0x5c85fc
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0x9f
call fcn.0040d3cd
push edi
push 0x5c85f0
lea ecx, [ebp - 0x294]
mov dword [esi + 4], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa0
call fcn.0040d3cd
push edi
push 0x5c85e4
lea ecx, [ebp - 0x294]
mov dword [esi + 8], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa1
call fcn.0040d3cd
push edi
push 0x5c85d8
lea ecx, [ebp - 0x294]
mov dword [esi + 0xc], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa2
call fcn.0040d3cd
push edi
push 0x5c85cc
lea ecx, [ebp - 0x294]
mov dword [esi + 0x10], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa3
call fcn.0040d3cd
push edi
push 0x5c85c0
lea ecx, [ebp - 0x294]
mov dword [esi + 0x14], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa4
call fcn.0040d3cd
push edi
push 0x5c85b4
lea ecx, [ebp - 0x294]
mov dword [esi + 0x18], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa5
call fcn.0040d3cd
push edi
push 0x5c85a8
lea ecx, [ebp - 0x294]
mov dword [esi + 0x1c], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa6
call fcn.0040d3cd
push edi
push 0x5c859c
lea ecx, [ebp - 0x294]
mov dword [esi + 0x20], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa7
call fcn.0040d3cd
push edi
push 0x5c8590
lea ecx, [ebp - 0x294]
mov dword [esi + 0x24], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa8
call fcn.0040d3cd
push edi
push 0x5c8584
lea ecx, [ebp - 0x294]
mov dword [esi + 0x28], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xa9
call fcn.0040d3cd
push edi
push 0x5c8578
lea ecx, [ebp - 0x294]
mov dword [esi + 0x2c], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xaa
call fcn.0040d3cd
push edi
push 0x5c856c
lea ecx, [ebp - 0x294]
mov dword [esi + 0x30], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xab
call fcn.0040d3cd
push edi
push 0x5c8560
lea ecx, [ebp - 0x294]
mov dword [esi + 0x34], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xac
call fcn.0040d3cd
push edi
push 0x5c8554
lea ecx, [ebp - 0x294]
mov dword [esi + 0x38], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xad
call fcn.0040d3cd
push edi
push 0x5c8548
lea ecx, [ebp - 0x294]
mov dword [esi + 0x3c], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov byte [ebp - 4], 0xae
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push 0x5c853c
lea ecx, [ebp - 0x294]
mov dword [esi + 0x40], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xaf
call fcn.0040d3cd
push edi
push 0x5c8530
lea ecx, [ebp - 0x294]
mov dword [esi + 0x44], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb0
call fcn.0040d3cd
push edi
push 0x5c8524
lea ecx, [ebp - 0x294]
mov dword [esi + 0x48], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb1
call fcn.0040d3cd
push edi
push 0x5c8518
lea ecx, [ebp - 0x294]
mov dword [esi + 0x4c], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb2
call fcn.0040d3cd
push edi
push 0x5c850c
lea ecx, [ebp - 0x294]
mov dword [esi + 0x50], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov byte [ebp - 4], 0xb3
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push 0x5c8500
lea ecx, [ebp - 0x294]
mov dword [esi + 0x54], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb4
call fcn.0040d3cd
push edi
push 0x5c84f4
lea ecx, [ebp - 0x294]
mov dword [esi + 0x58], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb5
call fcn.0040d3cd
push edi
push 0x5c84e8
lea ecx, [ebp - 0x294]
mov dword [esi + 0x5c], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb6
call fcn.0040d3cd
push edi
push 0x5c84dc
lea ecx, [ebp - 0x294]
mov dword [esi + 0x60], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb7
call fcn.0040d3cd
push edi
push 0x5c84d0
lea ecx, [ebp - 0x294]
mov dword [esi + 0x64], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
mov byte [ebp - 4], 0xb8
push ebx
push ebx
push 0x64
push 1
push eax
call fcn.0040d3cd
push edi
push 0x5c84c4
lea ecx, [ebp - 0x294]
mov dword [esi + 0x68], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xb9
call fcn.0040d3cd
push edi
push 0x5c84b8
lea ecx, [ebp - 0x294]
mov dword [esi + 0x6c], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xba
call fcn.0040d3cd
push edi
push 0x5c84ac
lea ecx, [ebp - 0x294]
mov dword [esi + 0x70], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xbb
call fcn.0040d3cd
push edi
push 0x5c84a0
lea ecx, [ebp - 0x294]
mov dword [esi + 0x74], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x1458]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xbc
call fcn.0040d3cd
push edi
push 0x5c8494
lea ecx, [ebp - 0x294]
mov dword [esi + 0x78], eax
mov byte [ebp - 4], 0x9e
call fcn.0040fef3
push ebx
push ebx
mov byte [ebp - 4], 0xbd
push 0x64
mov ecx, dword [esi]
push 1
push eax
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x7c], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8488
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xbe
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x80], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c847c
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xbf
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x84], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8470
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc0
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x88], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8464
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc1
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x8c], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8458
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc2
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x90], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c844c
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc3
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x94], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8440
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc4
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x98], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8434
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc5
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0x9c], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8428
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc6
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xa0], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c841c
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc7
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xa4], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8410
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc8
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xa8], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c8404
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xc9
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xac], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c83f8
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xca
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xb0], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c83ec
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xcb
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xb4], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c83e0
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xcc
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xb8], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c83d4
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xcd
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xbc], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c83c8
lea ecx, [ebp - 0x294]
call fcn.0040fef3
push ebx
push ebx
push 0x64
mov byte [ebp - 4], 0xce
push 1
mov ecx, dword [esi]
push eax
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xc0], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push 0x5c83bc
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xcf
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xc4], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
push edi
push str.B_dB
lea ecx, [ebp - 0x294]
call fcn.0040fef3
mov ecx, dword [esi]
push ebx
push ebx
push 0x64
push 1
push eax
mov byte [ebp - 4], 0xd0
call fcn.00437e2b
mov ecx, eax
call fcn.0040d3cd
lea ecx, [ebp - 0x294]
mov dword [esi + 0xc8], eax
mov byte [ebp - 4], 0x9e
call fcn.0058ccaf
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8