Function at 0x4062c5
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x483574
mov eax, dword fs:[0]
push eax
mov eax, 0x2c58
call int.0046dcc0
mov eax, dword [0x49e390]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c10], edi
mov dword [edi], 0x48ae94
lea ebx, [edi + 4]
call fcn.0045d567
lea ecx, [ebx + 4]
mov dword [ecx], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
xor ecx, ecx
mov dword [ebx + 8], ecx
lea eax, [edi + 0x70]
push 7
mov dword [ebp - 4], ecx
pop edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2c14], eax
mov word [eax + 4], cx
lea eax, [edi + 0x94]
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2c2c], eax
mov word [eax + 4], cx
lea eax, [edi + 0xe8]
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c3c], eax
call fcn.0045adb2
lea eax, [edi + 0x160]
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c44], eax
call fcn.0045adb2
lea eax, [edi + 0x1d8]
push eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c4c], eax
call fcn.0045adb2
lea eax, [edi + 0x250]
push eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x2c54], eax
call fcn.0045adb2
lea eax, [edi + 0x2c8]
push eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c5c], eax
call fcn.0045b0c6
lea eax, [edi + 0x338]
push eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c64], eax
call fcn.0045b0c6
lea eax, [edi + 0x3a8]
push eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c20], eax
call fcn.0045b0c6
lea eax, [edi + 0x418]
push eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c18], eax
call fcn.0045b0c6
mov byte [ebp - 4], 0xa
lea eax, [edi + 0x488]
push eax
mov dword [ebp - 0x2c34], eax
call fcn.0045b2f1
lea esi, [edi + 0x508]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2c28], esi
call fcn.0045b637
lea esi, [edi + 0x544]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2c48], esi
call fcn.0045b637
lea esi, [edi + 0x580]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x2c30], esi
call fcn.0045b637
lea esi, [edi + 0x5bc]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2c58], esi
call fcn.0045b637
lea esi, [edi + 0x5f8]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2c40], esi
call fcn.0045b637
lea esi, [edi + 0x634]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c38], esi
call fcn.0045b637
lea esi, [edi + 0x670]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2c50], esi
call fcn.0045b637
lea eax, [edi + 0x6ac]
push eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x2c1c], eax
call fcn.0045adb2
mov byte [ebp - 4], 0x13
call fcn.0042a5b9
and dword [edi + 0x734], 0
mov dword [edi + 0x730], eax
mov eax, 0x487340
lea ecx, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000000
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x48731c
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000001
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call fcn.0040cf76
push 0
mov byte [ebp - 4], 0x14
push 1
lea esi, [ebp - 0x2c0c]
call fcn.00404ac2
mov eax, 0x4872f4
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000002
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x17
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x4872dc
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000003
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x4872b0
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000004
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x19
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x48a410
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000050
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x48a43c
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000060
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x48726c
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000005
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.0040cf76
push 0
push 1
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, 0x487294
lea ecx, [ebp - 0x2c0c]
call fcn.00404773
mov dword [ebp - 0x2bf0], 0x80000006
lea eax, [ebp - 0x2c0c]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1d
call fcn.0040cf76
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x2c0c]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
push 0x103
lea eax, [ebp - 0x3bc]
push eax
push ebx
mov word [ebp - 0x1b6], bx
call dword [0x484320]
mov esi, dword [0x484034]
lea eax, [ebp - 0x2c60]
push eax
push 0x20006
push ebx
push 0x48a470
push 0x80000001
call esi
cmp eax, ebx
jne 0x406786
push 4
lea eax, [ebp - 0x2be0]
push eax
push 4
push ebx
lea eax, [ebp - 0x3bc]
push eax
push dword [ebp - 0x2c60]
mov dword [ebp - 0x2be0], edi
call dword [0x484020]
mov edi, dword [ebp - 0x2c10]
push 0x7fe
lea eax, [ebp - 0xbba]
push ebx
push eax
mov byte [edi + 0x760], 1
mov byte [edi + 0x761], 1
mov byte [edi + 0x744], 1
mov dword [edi + 0x770], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
mov dword [edi + 0x44], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0x5c], ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
mov dword [edi + 0x68], ebx
mov dword [edi + 0x6c], ebx
mov dword [edi + 0x8c], ebx
mov dword [edi + 0x90], ebx
mov dword [edi + 0x724], ebx
mov dword [edi + 0x728], ebx
mov byte [edi + 0x762], bl
mov dword [edi + 0x764], ebx
mov dword [edi + 0x768], ebx
mov dword [edi + 0x76c], ebx
mov byte [edi + 0x745], 1
mov byte [edi + 0x73a], bl
mov word [ebp - 0xbbc], bx
call fcn.0045f070
add esp, 0xc
lea eax, [ebp - 0x2be8]
push eax
push 0x20019
push ebx
push 0x48a530
push 0x80000002
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406980
mov esi, dword [0x48401c]
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48a568
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2be4], ebx
mov dword [ebp - 0x2bdc], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406974
cmp dword [ebp - 0x2be4], 1
jne 0x406974
cmp dword [ebp - 0x2bdc], 2
jb 0x406974
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48a568
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
lea eax, [ebp - 0xbbc]
push eax
call dword [0x48440c]
test eax, eax
je 0x406974
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48a580
push dword [ebp - 0x2be8]
mov byte [edi + 0x73a], 1
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406974
cmp dword [ebp - 0x2be4], 1
jne 0x406974
cmp dword [ebp - 0x2bdc], 2
jb 0x406974
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48a580
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
push dword [ebp - 0x2be8]
call dword [0x484024]
cmp byte [edi + 0x73a], bl
je 0x4069a3
cmp dword [ebp - 0x2be0], ebx
jne 0x4069a3
mov esi, dword [ebp - 0x2c14]
lea eax, [ebp - 0xbbc]
call fcn.00404a56
jmp 0x4069e2
mov eax, dword [0x4a9c4c]
cmp byte [eax + 0x102], bl
push 1
lea eax, [ebp - 0x2bbc]
je 0x4069bc
push 0x2a
jmp 0x4069be
push 0x26
push eax
push ebx
call dword [0x4843fc]
mov esi, dword [ebp - 0x2c14]
lea eax, [ebp - 0x2bbc]
call fcn.00404a56
push 0x48a598
push esi
call fcn.00405141
mov eax, dword [ebp - 0x2c14]
push 0xffffffffffffffff
push dword [ebp - 0x2c2c]
xor ebx, ebx
call fcn.00404cf8
push 0x48a5c0
push ebx
mov eax, dword [ebp + 8]
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x190
push ebx
push ebx
push ebx
push 0xfffffffffffffff4
mov byte [edi + 0x739], bl
mov dword [edi + 0x758], ebx
mov dword [edi + 0xb4], eax
mov dword [edi + 0xb8], ebx
mov dword [edi + 0x73c], 0x128
mov dword [edi + 0x740], 0x210
call dword [0x48409c]
push 0xb99d7f
push 1
push ebx
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xdc], ebx
mov byte [edi + 0x738], bl
mov dword [edi + 0x748], ebx
mov dword [edi + 0x74c], ebx
mov dword [edi + 0x750], ebx
mov dword [edi + 0x754], ebx
call dword [0x4840ac]
mov dword [edi + 0xc0], eax
cmp dword [0x4a9eb8], 8
mov eax, dword [0x4a9ea4]
jae 0x406a9b
mov eax, 0x4a9ea4
push eax
push 0x48a5c8
push 0x5a
push 0x4a09fc
call fcn.0040529a
add esp, 0x10
mov eax, edi
call fcn.00409232
push 0x74
call fcn.0040624f
pop ecx
push 0x30
mov dword [edi + 0x10], eax
call fcn.0045fd65
cmp eax, ebx
pop ecx
je 0x406ad7
mov esi, eax
call fcn.004054a6
jmp 0x406ad9
xor eax, eax
push dword [edi + 0x10]
mov dword [edi + 0xc4], eax
push eax
call fcn.004057ba
mov esi, dword [edi + 0xc4]
mov eax, dword [esi + 0x18]
cmp eax, 0x20
jne 0x406afb
call fcn.00407617
push 0x83
call fcn.0040624f
pop ecx
push 0x30
mov dword [edi + 0x14], eax
call fcn.0045fd65
cmp eax, ebx
pop ecx
je 0x406b1e
mov esi, eax
call fcn.004054a6
jmp 0x406b20
xor eax, eax
push dword [edi + 0x14]
mov dword [edi + 0xc8], eax
push eax
call fcn.004057ba
mov esi, dword [edi + 0xc8]
cmp dword [esi + 0x18], 0x20
jne 0x406b40
call fcn.00407617
push 0x84
call fcn.0040624f
pop ecx
push 0x30
mov dword [edi + 0x18], eax
call fcn.0045fd65
cmp eax, ebx
pop ecx
je 0x406b63
mov esi, eax
call fcn.004054a6
jmp 0x406b65
xor eax, eax
push dword [edi + 0x18]
lea esi, [edi + 0xcc]
push eax
mov dword [esi], eax
call fcn.004057ba
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406b83
call fcn.00407617
push 0x85
call fcn.0040624f
pop ecx
push 0x30
mov dword [edi + 0x1c], eax
call fcn.0045fd65
cmp eax, ebx
pop ecx
je 0x406ba6
mov esi, eax
call fcn.004054a6
jmp 0x406ba8
xor eax, eax
push dword [edi + 0x1c]
lea esi, [edi + 0xd0]
push eax
mov dword [esi], eax
call fcn.004057ba
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406bc6
call fcn.00407617
push 0x9c
call fcn.0040624f
pop ecx
push 0x30
mov dword [edi + 0x20], eax
call fcn.0045fd65
cmp eax, ebx
pop ecx
je 0x406be9
mov esi, eax
call fcn.004054a6
jmp 0x406beb
xor eax, eax
push dword [edi + 0x20]
lea esi, [edi + 0xd4]
push eax
mov dword [esi], eax
call fcn.004057ba
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c09
call fcn.00407617
mov eax, dword [edi + 0xc4]
mov ecx, dword [eax + 0x10]
mov edx, dword [edi + 0xc8]
mov edx, dword [edx + 0x10]
lea ecx, [edx + ecx + 1]
mov dword [edi + 0x73c], ecx
mov eax, dword [eax + 0xc]
inc eax
push 0x7f
mov dword [edi + 0x740], eax
call fcn.0040624f
pop ecx
push 0x30
mov dword [edi + 0x90], eax
call fcn.0045fd65
cmp eax, ebx
pop ecx
je 0x406c52
mov esi, eax
call fcn.004054a6
jmp 0x406c54
xor eax, eax
push dword [edi + 0x90]
lea esi, [edi + 0xd8]
push eax
mov dword [esi], eax
call fcn.004057ba
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c75
call fcn.00407617
push 0x75
call fcn.0040624f
pop ecx
push 0x9b
mov dword [edi + 0x44], eax
call fcn.0040624f
pop ecx
push 0x9d
mov dword [edi + 0x48], eax
call fcn.0040624f
pop ecx
push eax
push dword [edi + 0x48]
mov dword [edi + 0x4c], eax
push dword [edi + 0x44]
mov edi, dword [ebp - 0x2c34]
call fcn.0045b3d0
mov dword [edi + 0x1c], ebx
mov ebx, dword [ebp - 0x2c10]
mov dword [edi + 0x20], 0x118
mov eax, dword [ebx + 0x740]
push 0x78
mov dword [ebx + 0x4c8], eax
mov byte [ebx + 0x4c0], 0
call fcn.0040624f
mov esi, dword [ebp - 0x2c3c]
pop ecx
push 4
pop edi
push edi
mov dword [ebx + 0x50], eax
push eax
mov eax, esi
call fcn.0045ae87
mov eax, dword [ebx + 0x740]
sub eax, 0x1f
push 0x79
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.0040624f
mov esi, dword [ebp - 0x2c44]
pop ecx
push edi
mov dword [ebx + 0x54], eax
push eax
mov eax, esi
call fcn.0045ae87
mov eax, dword [ebx + 0x740]
sub eax, 0x3e
push 0x94
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.0040624f
pop ecx
push 0x93
mov dword [ebx + 0x2c], eax
call fcn.0040624f
pop ecx
push 0x95
mov dword [ebx + 0x30], eax
call fcn.0040624f
pop ecx
push 0x96
mov dword [ebx + 0x34], eax
call fcn.0040624f
pop ecx
push 0x97
mov dword [ebx + 0x38], eax
call fcn.0040624f
cmp byte [ebx + 0x73a], 0
pop ecx
mov dword [ebx + 0x3c], eax
je 0x406d82
mov eax, dword [ebx + 0x38]
jmp 0x406d85
mov eax, dword [ebx + 0x30]
mov esi, dword [ebp - 0x2c4c]
push edi
mov dword [ebx + 0x40], eax
push eax
mov eax, esi
call fcn.0045ae87
push 0x9a
mov dword [esi + 0x2c], 0x1a4
mov dword [esi + 0x30], 0xb9
call fcn.0040624f
pop ecx
push 0x98
mov dword [ebx + 0x58], eax
call fcn.0040624f
pop ecx
push 0x99
mov dword [ebx + 0x5c], eax
call fcn.0040624f
pop ecx
push 0x80
mov dword [ebx + 0x60], eax
call fcn.0040624f
mov esi, dword [ebp - 0x2c54]
pop ecx
push edi
mov dword [ebx + 0x8c], eax
push eax
mov eax, esi
call fcn.0045ae87
push 0x7e
mov dword [esi + 0x2c], 0x16c
mov dword [esi + 0x30], 0x121
call fcn.0040624f
pop ecx
push 0x7d
mov dword [ebx + 0x68], eax
call fcn.0040624f
pop ecx
push 0x7b
mov dword [ebx + 0x6c], eax
call fcn.0040624f
mov edi, dword [ebp - 0x2c5c]
pop ecx
push eax
mov dword [ebx + 0x64], eax
call fcn.0045b27b
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x26
mov dword [edi + 0x60], 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a5d0
lea ecx, [ebp - 0x30]
call fcn.00404773
lea eax, [ebx + 0x2cc]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1e
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, edi
call fcn.0045b2dd
mov dword [ebx + 0x2ec], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c64]
call fcn.0045b27b
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
add eax, 0xf0
mov dword [edi + 0x60], 0xe6
mov dword [edi + 0x64], ecx
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a5e4
lea ecx, [ebp - 0x30]
call fcn.00404773
lea eax, [ebx + 0x33c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, edi
call fcn.0045b2dd
mov dword [ebx + 0x35c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c20]
call fcn.0045b27b
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x1c8
mov dword [edi + 0x60], 0x1be
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a5fc
lea ecx, [ebp - 0x30]
call fcn.00404773
lea eax, [ebx + 0x3ac]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, edi
call fcn.0045b2dd
mov dword [ebx + 0x3cc], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c18]
call fcn.0045b27b
mov eax, dword [edi + 0x68]
mov ecx, 0x158
mov dword [edi + 0x64], ecx
add eax, 0x1d8
mov dword [edi + 0x60], 0x1ce
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48a60c
lea ecx, [ebp - 0x30]
call fcn.00404773
lea eax, [ebx + 0x41c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov eax, edi
call fcn.0045b2dd
mov dword [ebx + 0x43c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
mov byte [ebx + 0x475], 1
mov byte [ebx + 0x325], 1
mov byte [ebx + 0x395], 1
mov eax, 0x48a628
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x405], 1
call fcn.00404773
mov edi, dword [ebp - 0x2c28]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x22
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b69c
mov dword [ebx + 0x528], 0xc36602
mov dword [edi + 0x24], 0x98
mov dword [edi + 0x28], esi
mov eax, 0x48a634
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x540], 0
call fcn.00404773
mov edi, dword [ebp - 0x2c48]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b69c
mov dword [ebx + 0x564], 0xc36602
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48a63c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x57c], 0
call fcn.00404773
mov edi, dword [ebp - 0x2c30]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x24
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045b69c
mov dword [ebx + 0x5a0], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48a654
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x5b8], 0
call fcn.00404773
mov edi, dword [ebp - 0x2c58]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x25
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
push 0x190
push 0xfffffffffffffff4
call fcn.0045b69c
mov dword [ebx + 0x5dc], 0x464646
mov eax, 0x48a664
lea ecx, [ebp - 0x30]
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
call fcn.00404773
mov edi, dword [ebp - 0x2c38]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
push 0x190
push 0xfffffffffffffff2
call fcn.0045b69c
mov dword [ebx + 0x654], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48a67c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x66c], 0
call fcn.00404773
mov edi, dword [ebp - 0x2c50]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x27
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
push 0x190
push 0xfffffffffffffff4
call fcn.0045b69c
mov dword [ebx + 0x690], 0x9f
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48a694
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x6a8], 0
call fcn.00404773
mov edi, dword [ebp - 0x2c40]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x28
call fcn.0045b68a
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404ac2
push 0x190
push 0xfffffffffffffff4
call fcn.0045b69c
mov dword [ebx + 0x618], 0x9f
mov dword [edi + 0x24], 0x1b4
mov dword [edi + 0x28], 0x120
push 0x91
mov byte [ebx + 0x630], 0
call fcn.0040624f
pop ecx
push 0x92
mov dword [ebx + 0x24], eax
call fcn.0040624f
mov esi, dword [ebp - 0x2c1c]
pop ecx
push 4
push dword [ebx + 0x24]
mov dword [ebx + 0x28], eax
mov eax, esi
call fcn.0045ae87
and dword [ebp - 0x2c24], 0
lea eax, [ebp - 0x2c24]
push eax
mov dword [esi + 0x2c], 0x25f
mov dword [esi + 0x30], 0x127
call dword [0x484374]
push eax
call dword [0x4843f8]
push 0xff
lea eax, [ebp - 0x1b3]
push 0
push eax
mov byte [ebx + 0x760], 0
mov byte [ebx + 0x739], 1
mov byte [ebx + 0x761], 0
mov byte [ebx + 0x325], 1
mov byte [ebx + 0x395], 1
mov byte [ebp - 0x1b4], 0
call fcn.0045f070
xor eax, eax
mov byte [ebp - 0x28], 0
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
call fcn.00442a19
pop ecx
lea ebx, [ebp - 0x28]
lea ecx, [ebp - 0x2bd8]
call fcn.0041b9ed
push 0x100
xor ebx, ebx
lea eax, [ebp - 0x1b4]
push ebx
push eax
mov byte [ebp - 4], 0x29
call fcn.0045f070
add esp, 0xc
push 0x7e
lea eax, [ebp - 0xb2]
push ebx
push eax
mov word [ebp - 0xb4], bx
call fcn.0045f070
add esp, 0xc
push 0xfde9
lea eax, [ebp - 0xb4]
push 0x40
push eax
lea edi, [ebp - 0x2bd8]
call fcn.0044d783
add esp, 0xc
push 0x48a6cc
lea eax, [ebp - 0x2bec]
push eax
call fcn.004046fa
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2bec]
push eax
mov byte [ebp - 4], 0x2a
call fcn.0040cad4
push 0x48a6dc
lea eax, [ebp - 0x2bec]
push eax
call fcn.0040cad4
push dword [ebp - 0x2bec]
push ebx
push 0x48a714
call dword [0x484524]
mov esi, dword [ebp - 0x2c10]
mov ecx, esi
call fcn.00407e51
mov ecx, esi
call fcn.004076a5
call dword [0x484208]
mov dword [esi + 0x75c], eax
mov eax, dword [ebp - 0x2bec]
add eax, 0xfffffff0
call fcn.00401160
push ebx
push 1
mov ecx, edi
call fcn.00401a57
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call int.0045e9eb
leave
ret 4