Function at 0x41f2e0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x52ad30
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push ebp
push esi
mov esi, dword [esp + 0x3c]
push edi
push 0x3f000000
push 0x577600
push 0x5775f4
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
or ebp, 0xffffffff
fstp dword [esp + 0x40]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x5775dc
push edi
call dword [ebx + 0x1c]
push 0
push 0x5775c8
push 0x5775c0
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x5775a8
push edi
call dword [ebx + 0x1c]
push 0x3f800000
push 0x577598
push 0x5775c0
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x575e80
push edi
call dword [ebx + 0x1c]
push 0x3f800000
push 0x57758c
push 0x5775c0
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577578
push edi
call dword [ebx + 0x1c]
push 0x3f800000
push 0x577568
push 0x5775c0
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577550
push edi
call dword [ebx + 0x1c]
push 0x3f800000
push 0x57753c
push 0x5775c0
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x575558
push edi
call dword [ebx + 0x1c]
push 1
push 0x577530
push 0x5775c0
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x575548
push edi
call dword [edx + 0x1c]
push 0x3f800000
push 0x577520
push 0x5775c0
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x575534
push edi
call dword [ebx + 0x1c]
push 0x1388
push 0x577514
push 0x5775c0
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
mov eax, dword [esp + 0x44]
push 0x577500
push edi
call dword [eax + 0x1c]
push 1
push 0x5774f4
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
push 0x5774e0
mov edx, dword [esp + 0x48]
push edi
call dword [edx + 0x1c]
push 0x24
push 0x5774d0
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x5774b8
push edi
call dword [edx + 0x1c]
push 0
push 0x5774a8
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577490
push edi
call dword [edx + 0x1c]
push 0xae
push 0x577480
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577468
push edi
call dword [edx + 0x1c]
push 0xf2
push 0x577458
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577440
push edi
call dword [edx + 0x1c]
push 0x24
push 0x57742c
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577410
push edi
call dword [edx + 0x1c]
push 0
push 0x5773fc
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x5773e0
push edi
call dword [edx + 0x1c]
push 0xae
push 0x5773cc
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
mov edx, dword [edi]
push 0x575a40
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x5773b0
push edi
call dword [edx + 0x1c]
push 0xf2
push 0x57739c
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577380
push edi
call dword [edx + 0x1c]
push 0x3eaaaaab
push 0x577374
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577360
push edi
call dword [ebx + 0x1c]
push 0xff
push 0x57734c
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
mov eax, dword [esp + 0x44]
push 0x577334
push edi
call dword [eax + 0x1c]
push 0xff
push 0x577320
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577308
push edi
call dword [edx + 0x1c]
push 0x40
push 0x5772f4
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x5772dc
push edi
call dword [edx + 0x1c]
push 0
push 0x5772c8
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x5772b0
push edi
call dword [edx + 0x1c]
push 0x3f800000
push 0x577294
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
fstp dword [esp + 0x40]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577274
push edi
call dword [ebx + 0x1c]
push 0x3f800000
push 0x577260
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577244
push edi
call dword [ebx + 0x1c]
push 0x3ea8f5c3
push 0x577234
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x57721c
push edi
call dword [ebx + 0x1c]
push 0x3e8
push 0x577210
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
mov eax, dword [esp + 0x44]
push 0x5771fc
push edi
call dword [eax + 0x1c]
lea ecx, [esp + 0x40]
xor ebx, ebx
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x3c], ebx
call fcn.0050e020
mov edi, 0x5771f4
mov ecx, ebp
xor eax, eax
mov byte [esp + 0x38], 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x5771f4
push ecx
push 0x5771f4
lea ecx, [esp + 0x20]
call fcn.004067c0
lea edx, [esp + 0x18]
push 0xff000000
push edx
push esi
mov byte [esp + 0x44], 2
call fcn.0041f220
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], bl
call fcn.00418e50
lea eax, [esp + 0x40]
mov ebx, 3
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x3c], ebx
call fcn.0050e020
mov edi, 0x5771ec
mov ecx, ebp
xor eax, eax
mov byte [esp + 0x38], 4
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x5771ec
push ecx
push 0x5771ec
lea ecx, [esp + 0x20]
call fcn.004067c0
lea ecx, [esp + 0x18]
push 0xff808080
push ecx
push esi
mov byte [esp + 0x44], 5
call fcn.0041f220
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], bl
call fcn.00418e50
mov ebx, 1
push ebx
push 0x5771e0
mov dword [esp + 0x40], 6
call fcn.004c2ae0
add esp, 8
lea edx, [esp + 0x40]
mov edi, eax
lea ecx, [esp + 0x18]
push edx
mov dword [esp + 0x18], edi
call fcn.0050e020
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
mov byte [esp + 0x38], 7
not ecx
dec ecx
add ecx, eax
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.004067c0
lea eax, [esp + 0x18]
push 0xff00ffff
push eax
push esi
mov byte [esp + 0x44], 8
call fcn.0041f220
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 6
call fcn.00418e50
push ebx
push 0x5771d8
mov dword [esp + 0x40], 9
call fcn.004c2ae0
add esp, 8
lea ecx, [esp + 0x13]
mov edi, eax
push ecx
lea ecx, [esp + 0x28]
mov dword [esp + 0x18], edi
call fcn.0050e020
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x14]
mov byte [esp + 0x38], 0xa
not ecx
dec ecx
add ecx, eax
push ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.004067c0
lea edx, [esp + 0x24]
push 0xffff0000
push edx
push esi
mov byte [esp + 0x44], 0xb
call fcn.0041f220
add esp, 0xc
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 9
call fcn.00418e50
inc ebx
mov dword [esp + 0x38], ebp
cmp ebx, 0xf
jle 0x41fbf2
push 0x40a00000
push 0x5771c0
push 0x5766cc
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x5771a4
push edi
call dword [ebx + 0x1c]
push 0x43960000
push 0x577190
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577174
push edi
call dword [ebx + 0x1c]
push 0x3e8
push 0x57715c
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x577140
push edi
call dword [edx + 0x1c]
push 0x3c23d70a
push 0x577124
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
fstp dword [esp + 0x40]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x577104
push edi
call dword [ebx + 0x1c]
push 0x3c23d70a
push 0x5770e8
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x5770c8
push edi
call dword [ebx + 0x1c]
push 0xbf333333
push 0x5770ac
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x57708c
push edi
call dword [ebx + 0x1c]
lea edx, [esp + 0x40]
lea ecx, [esp + 0x24]
push edx
mov dword [esp + 0x3c], 0xc
call fcn.0050e020
mov edi, 0x577074
mov ecx, ebp
xor eax, eax
mov byte [esp + 0x38], 0xd
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x577074
push ecx
push 0x577074
lea ecx, [esp + 0x2c]
call fcn.004067c0
lea eax, [esp + 0x24]
push 0x20404060
push eax
push esi
mov byte [esp + 0x44], 0xe
call fcn.0041f090
mov ebx, eax
mov eax, dword [0x57f188]
add esp, 0xc
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x1c], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x1c]
add esp, 8
push eax
push 0x577058
push edi
call dword [edx + 0x1c]
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0xc
call fcn.00418e50
lea eax, [esp + 0x40]
lea ecx, [esp + 0x24]
push eax
mov dword [esp + 0x3c], 0xf
call fcn.0050e020
mov edi, 0x57703c
mov ecx, ebp
xor eax, eax
mov byte [esp + 0x38], 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, 0x57703c
push ecx
push 0x57703c
lea ecx, [esp + 0x2c]
call fcn.004067c0
lea ecx, [esp + 0x24]
push 0x40404060
push ecx
push esi
mov byte [esp + 0x44], 0x11
call fcn.0041f090
mov ebx, eax
mov eax, dword [0x57f188]
add esp, 0xc
mov edx, dword [eax]
push ebp
push eax
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x1c], edx
call fcn.004c2ae0
add esp, 8
push eax
mov eax, dword [esp + 0x18]
push 0x57701c
push edi
call dword [eax + 0x1c]
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0xf
call fcn.00418e50
push 0x12c
mov dword [esp + 0x3c], ebp
push 0x577004
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576fe4
push edi
call dword [edx + 0x1c]
push 0xbb8
push 0x576fcc
push 0x57684c
push fcn.004059a0
mov ecx, esi
call fcn.004060d0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576fac
push edi
call dword [edx + 0x1c]
push 0x43fa0000
push 0x576f98
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576f7c
push edi
call dword [ebx + 0x1c]
push 0x3d4ccccd
push 0x576f60
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576f40
push edi
call dword [ebx + 0x1c]
push 0x3d4ccccd
push 0x576f28
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576f08
push edi
call dword [ebx + 0x1c]
push 0x3b449ba6
push 0x576ef0
push 0x57684c
push fcn.0041e810
mov ecx, esi
call fcn.00420cf0
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576ed0
push edi
call dword [ebx + 0x1c]
lea eax, [esp + 0x13]
lea ecx, [esp + 0x24]
push eax
mov dword [esp + 0x3c], 0x12
call fcn.0050e020
mov edi, 0x576ebc
mov ecx, ebp
xor eax, eax
mov dl, byte [esp + 0x40]
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x40]
add ecx, 0x576ebc
push eax
mov byte [esp + 0x3c], 0x13
mov byte [esp + 0x44], dl
push ecx
push 0x576ebc
lea ecx, [esp + 0x30]
call fcn.004012f0
lea ecx, [esp + 0x24]
push ebp
push ecx
push esi
mov byte [esp + 0x44], 0x14
call fcn.0041f090
mov ebx, eax
mov eax, dword [0x57f188]
add esp, 0xc
mov edx, dword [eax]
push ebp
push eax
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x1c], edx
call fcn.004c2ae0
add esp, 8
push eax
mov eax, dword [esp + 0x18]
push 0x576ea0
push edi
call dword [eax + 0x1c]
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x15
call fcn.00418e50
mov eax, dword [esi]
push 0x4072c000
push 0
push 0x576e8c
push 0x57684c
push eax
mov dword [esp + 0x4c], ebp
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576e70
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x7d0
push 0x576e58
push 0x57684c
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
push 0x576e3c
push edi
mov eax, dword [esp + 0x4c]
call dword [eax + 0x1c]
mov eax, dword [esi]
push 0x40518000
push 0
push 0x576e24
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576e04
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x3f847ae1
push 0x40000000
push 0x576dec
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576dcc
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x3f50624d
push 0xe0000000
push 0x576db4
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576d94
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x40240000
push 0
push 0x576d80
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576d64
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x3fb99999
push 0xa0000000
push 0x576d4c
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576d2c
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0xbf847ae1
push 0x40000000
push 0x576d18
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576cfc
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0xbf847ae1
push 0x40000000
push 0x576ce8
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
fstp dword [esp + 0x40]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576ccc
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0
push 0
push 0x576cb8
push 0x57684c
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576c9c
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x3e8
push 0x576c88
push 0x57684c
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576c70
push edi
call dword [edx + 0x1c]
mov eax, dword [esi]
push 0x2710
push 0x576c5c
push 0x57684c
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576c44
push edi
call dword [edx + 0x1c]
mov eax, dword [esi]
push 0x2710
push 0x576c2c
push 0x57684c
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576c10
push edi
call dword [edx + 0x1c]
mov eax, dword [esi]
push 0x1388
push 0x576bfc
push 0x57684c
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576be0
push edi
call dword [edx + 0x1c]
lea eax, [esp + 0x13]
lea ecx, [esp + 0x24]
push eax
mov dword [esp + 0x3c], 0x16
call fcn.0050e020
mov edi, 0x576bd8
mov ecx, ebp
xor eax, eax
mov dl, byte [esp + 0x40]
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x40]
add ecx, 0x576bd8
push eax
push ecx
push 0x576bd8
lea ecx, [esp + 0x30]
mov byte [esp + 0x44], 0x17
mov byte [esp + 0x4c], dl
call fcn.004012f0
mov byte [esp + 0x38], 0x18
lea ecx, [esp + 0x24]
push ecx
push esi
call fcn.0041e990
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x19
call fcn.00418e50
lea edx, [esp + 0x13]
lea ecx, [esp + 0x24]
push edx
mov dword [esp + 0x3c], 0x1a
call fcn.0050e020
mov edi, 0x576bd0
mov ecx, ebp
xor eax, eax
lea edx, [esp + 0x40]
repne scasb al, byte es:[edi]
mov al, byte [esp + 0x40]
push edx
not ecx
dec ecx
mov byte [esp + 0x3c], 0x1b
add ecx, 0x576bd0
mov byte [esp + 0x44], al
push ecx
push 0x576bd0
lea ecx, [esp + 0x30]
call fcn.004012f0
lea eax, [esp + 0x24]
mov byte [esp + 0x38], 0x1c
push eax
push esi
call fcn.0041e990
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x1d
call fcn.00418e50
lea ecx, [esp + 0x13]
mov dword [esp + 0x38], 0x1e
push ecx
lea ecx, [esp + 0x28]
call fcn.0050e020
mov edi, 0x576bc8
mov ecx, ebp
xor eax, eax
mov dl, byte [esp + 0x40]
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x40]
add ecx, 0x576bc8
push eax
push ecx
push 0x576bc8
lea ecx, [esp + 0x30]
mov byte [esp + 0x44], 0x1f
mov byte [esp + 0x4c], dl
call fcn.004012f0
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x20
push ecx
push esi
call fcn.0041e990
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x21
call fcn.00418e50
lea edx, [esp + 0x13]
mov dword [esp + 0x38], 0x22
push edx
lea ecx, [esp + 0x28]
call fcn.0050e020
mov edi, 0x576bd8
mov ecx, ebp
xor eax, eax
lea edx, [esp + 0x40]
repne scasb al, byte es:[edi]
mov al, byte [esp + 0x40]
push edx
not ecx
dec ecx
mov byte [esp + 0x3c], 0x23
add ecx, 0x576bd8
mov byte [esp + 0x44], al
push ecx
push 0x576bd8
lea ecx, [esp + 0x30]
call fcn.004012f0
lea eax, [esp + 0x24]
mov byte [esp + 0x38], 0x24
push eax
push esi
call fcn.0041ee50
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x25
call fcn.00418e50
lea ecx, [esp + 0x13]
mov dword [esp + 0x38], 0x26
push ecx
lea ecx, [esp + 0x28]
call fcn.0050e020
mov edi, 0x576bd0
mov ecx, ebp
xor eax, eax
mov dl, byte [esp + 0x40]
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x40]
add ecx, 0x576bd0
push eax
push ecx
push 0x576bd0
lea ecx, [esp + 0x30]
mov byte [esp + 0x44], 0x27
mov byte [esp + 0x4c], dl
call fcn.004012f0
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x28
push ecx
push esi
call fcn.0041ee50
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x29
call fcn.00418e50
lea edx, [esp + 0x13]
lea ecx, [esp + 0x24]
push edx
mov dword [esp + 0x3c], 0x2a
call fcn.0050e020
mov edi, 0x576bc8
mov ecx, ebp
xor eax, eax
mov byte [esp + 0x38], 0x2b
repne scasb al, byte es:[edi]
mov al, byte [esp + 0x40]
lea edx, [esp + 0x40]
not ecx
dec ecx
mov byte [esp + 0x40], al
add ecx, 0x576bc8
push edx
push ecx
push 0x576bc8
lea ecx, [esp + 0x30]
call fcn.004012f0
lea eax, [esp + 0x24]
mov byte [esp + 0x38], 0x2c
push eax
push esi
call fcn.0041ee50
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x38], 0x2d
call fcn.00418e50
mov eax, dword [esi]
push 0x1388
push 0x576bb4
push 0x576bac
push eax
mov dword [esp + 0x48], ebp
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576b94
push edi
call dword [edx + 0x1c]
mov eax, dword [esi]
push 0x403e0000
push 0
push 0x576b84
push 0x576bac
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
fld dword [esp + 0x40]
sub esp, 8
mov edi, eax
fstp qword [esp]
mov ebx, dword [edi]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576b6c
push edi
call dword [ebx + 0x1c]
mov eax, dword [esi]
push 0x3fe00000
push 0
push 0x576b54
push 0x576bac
push eax
call fcn.0041e810
mov eax, dword [0x57f188]
push ebp
fstp dword [esp + 0x44]
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
mov edi, eax
mov ebx, dword [edi]
fld dword [esp + 0x40]
sub esp, 8
fstp qword [esp]
push 0x57668c
call fcn.004c2ae0
add esp, 0xc
push eax
push 0x576b34
push edi
call dword [ebx + 0x1c]
push 0x57f2d4
push 0x576b1c
lea eax, [esp + 0x2c]
push 0x576bac
push eax
mov ecx, esi
call fcn.00420d10
mov edi, dword [eax]
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
mov dword [esp + 0x40], 0x2e
call dword [ecx + 0xc]
mov edx, dword [eax]
push edi
push 0x576b00
push eax
call dword [edx + 0x1c]
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0x2f
call fcn.00418e50
push 0x57f2d4
push 0x576ae4
lea eax, [esp + 0x2c]
push 0x576bac
push eax
mov ecx, esi
mov dword [esp + 0x48], ebp
call fcn.00420d10
mov edi, dword [eax]
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
mov dword [esp + 0x40], 0x30
call dword [ecx + 0xc]
mov edx, dword [eax]
push edi
push 0x576ac4
push eax
call dword [edx + 0x1c]
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0x31
call fcn.00418e50
mov eax, dword [esi]
push 0x1388
push 0x576ab4
push 0x576ab0
push eax
mov dword [esp + 0x48], ebp
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
push 0x576aa0
mov edx, dword [esp + 0x48]
push edi
call dword [edx + 0x1c]
push 0x57f2d4
push 0x576a88
lea eax, [esp + 0x2c]
push 0x576ab0
push eax
mov ecx, esi
call fcn.00420d10
mov edi, dword [eax]
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
mov dword [esp + 0x40], 0x32
call dword [ecx + 0xc]
mov edx, dword [eax]
push edi
push 0x576a88
push eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
sub ecx, eax
mov dword [esp + 0x38], 0x33
push ecx
push eax
lea ecx, [esp + 0x34]
call fcn.004fdfd0
push 0x57f2d4
push 0x576a74
lea edx, [esp + 0x20]
push 0x576ab0
push edx
mov ecx, esi
mov dword [esp + 0x48], ebp
call fcn.00420d10
mov edi, dword [eax]
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
mov dword [esp + 0x40], 0x34
call dword [ecx + 0xc]
mov edx, dword [eax]
push edi
push 0x576a74
push eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
sub ecx, eax
mov dword [esp + 0x38], 0x35
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.004fdfd0
mov eax, dword [esi]
push 0x7d0
push 0x576a68
push 0x576ab0
push eax
mov dword [esp + 0x48], ebp
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov edx, dword [eax]
call dword [edx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
add esp, 8
push eax
mov eax, dword [esp + 0x44]
push 0x576a68
push edi
call dword [eax + 0x1c]
mov eax, dword [esi]
push 0xc8
push 0x576a58
push 0x576ab0
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576a58
push edi
call dword [edx + 0x1c]
mov eax, dword [esi]
push 0xffff0000
push 0x576a4c
push 0x576ab0
push eax
call fcn.004059a0
mov ebx, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
push ebx
push 0x575a40
mov edx, dword [edi]
mov dword [esp + 0x48], edx
call fcn.004c2ae0
mov edx, dword [esp + 0x48]
add esp, 8
push eax
push 0x576a4c
push edi
call dword [edx + 0x1c]
mov esi, dword [esi]
push 0xffff0000
push 0x576a40
push 0x576ab0
push esi
call fcn.004059a0
mov edi, eax
mov eax, dword [0x57f188]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov esi, eax
push edi
push 0x575a40
mov ebx, dword [esi]
call fcn.004c2ae0
add esp, 8
push eax
push 0x576a40
push esi
call dword [ebx + 0x1c]
mov ecx, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2c
ret