Function at 0x4294d0
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dc4e2
mov eax, dword fs:[0]
push eax
sub esp, 0x638
push ebx
push esi
push edi
mov eax, dword [0x6fe068]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x20], edi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x10], 0
call fcn.0040af80
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x130]
call fcn.0040af80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x15c]
call fcn.0040af80
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x70], 0
test eax, eax
je 0x429553
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0xc]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 3
push 8
push dword [edi + 0x11a0]
call dword [0x703504]
mov edx, eax
lea ecx, [ebp - 0x4c]
call fcn.0045a010
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x10], 8
call dword [eax + 0x44]
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x120]
call dword [eax + 0x44]
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x120]
call fcn.0040b5f0
mov ebx, 8
mov dword [ebp - 0x10], ebx
and ebx, 0xfffffff7
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
mov byte [ebp - 4], 4
push 8
push dword [edi + 0x1300]
call dword [0x703504]
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.0045a010
or ebx, 0x10
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x15c]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x14c]
call dword [eax + 0x44]
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x14c]
call fcn.0040b5f0
and ebx, 0xffffffef
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x104]
call fcn.0040baa0
mov eax, dword [edi + 0x2f84]
test eax, eax
jne 0x429698
cmp dword [edi + 0x2f9c], eax
mov eax, 0x6e2dcc
je 0x429698
mov eax, dword [edi + 0x2f94]
mov ecx, 0x6e2dcc
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4296c6
test dx, dx
je 0x4296c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4296c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4296a0
xor eax, eax
jmp 0x4296cb
sbb eax, eax
or eax, 1
mov ebx, 0x6e2dcc
test eax, eax
je 0x42978f
lea ecx, [ebp - 0x104]
call fcn.0040af80
mov byte [ebp - 4], 5
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0xf8], 0x6e2dc8
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x10]
or esi, 1
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0xf8]
test eax, eax
jne 0x429722
cmp dword [ebp - 0xe0], 0
mov eax, ebx
cmovne eax, dword [ebp - 0xe8]
push 0
push ecx
push 0
push eax
lea ecx, [ebp - 0x130]
call fcn.0044eac0
cmp eax, 0xffffffff
jne 0x429789
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov dword [ebp - 4], 7
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], 0x6e2dc8
mov dword [ebp - 4], 8
or esi, 2
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x429773
cmp dword [ebp - 0x28], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x30]
push 0
push ecx
push 0
push eax
lea ecx, [ebp - 0x15c]
call fcn.0044eac0
cmp eax, 0xffffffff
je 0x42978f
mov byte [ebp - 0x11], 1
jmp 0x429793
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x10]
test al, 2
je 0x4297b9
and eax, 0xfffffffd
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 2
test al, 1
je 0x4297d9
and eax, 0xfffffffe
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x104]
call fcn.0040baa0
cmp byte [ebp - 0x11], 0
je 0x42992a
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], str.Account
mov byte [ebp - 4], 0xc
add edi, 0x2f78
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x4c]
push 0
push edi
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00423db0
mov esi, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x130]
mov edx, dword [ebp - 0x130]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x128], ecx
lea ecx, [ebp - 0x120]
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x120]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x120]
call fcn.0040b5f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], str.Password
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x4c]
mov ecx, dword [ebp - 0x20]
push 0
push edi
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.00423db0
mov esi, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x15c]
mov edx, dword [ebp - 0x15c]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x154], ecx
lea ecx, [ebp - 0x14c]
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x14c]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x14c]
call fcn.0040b5f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x124]
mov edi, dword [ebp - 0x10c]
test eax, eax
je 0x42993e
mov ecx, eax
jmp 0x429949
test edi, edi
mov ecx, ebx
cmovne ecx, dword [ebp - 0x114]
mov edx, 0x6e3830
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x429976
test si, si
je 0x429972
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x429976
add ecx, 4
add edx, 4
test si, si
jne 0x429950
xor ecx, ecx
jmp 0x42997b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x429a02
test eax, eax
jne 0x429992
test edi, edi
mov eax, ebx
cmovne eax, dword [ebp - 0x114]
mov ecx, 0x6e2dcc
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4299bd
test dx, dx
je 0x4299b9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4299bd
add eax, 4
add ecx, 4
test dx, dx
jne 0x429997
xor eax, eax
jmp 0x4299c2
sbb eax, eax
or eax, 1
test eax, eax
je 0x429a02
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x7c]
call dword [eax + 0x44]
mov eax, dword [ebp - 0x12c]
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x6c]
call dword [eax + 0x44]
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0040b5f0
mov esi, dword [ebp - 0x150]
mov edi, dword [ebp - 0x138]
test esi, esi
je 0x429a16
mov eax, esi
jmp 0x429a21
test edi, edi
mov eax, ebx
cmovne eax, dword [ebp - 0x140]
mov ecx, 0x6e3828
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x429a4c
test dx, dx
je 0x429a48
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x429a4c
add eax, 4
add ecx, 4
test dx, dx
jne 0x429a26
xor eax, eax
jmp 0x429a51
sbb eax, eax
or eax, 1
test eax, eax
je 0x429ab7
test esi, esi
je 0x429a5d
mov eax, esi
jmp 0x429a68
test edi, edi
mov eax, ebx
cmovne eax, dword [ebp - 0x140]
mov ecx, 0x6e2dcc
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x429a96
test dx, dx
je 0x429a92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x429a96
add eax, 4
add ecx, 4
test dx, dx
jne 0x429a70
xor eax, eax
jmp 0x429a9b
sbb eax, eax
or eax, 1
test eax, eax
je 0x429ab7
test esi, esi
jne 0x429aae
test edi, edi
mov esi, ebx
cmovne esi, dword [ebp - 0x140]
push esi
lea ecx, [ebp - 0x7c]
call fcn.0044de00
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], 0x6e3488
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x7c]
call fcn.00424b30
mov esi, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
cmp esi, 1
jne 0x429b8f
lea ecx, [ebp - 0x104]
call fcn.0040af80
mov byte [ebp - 4], 0x16
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0xf8], 0x6e2dcc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], 0x6e3488
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xf8]
test ecx, ecx
jne 0x429b56
cmp dword [ebp - 0xe0], 0
mov ecx, ebx
cmovne ecx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x429b67
cmp dword [ebp - 0x28], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x30]
sub esp, 0xc
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.0044dc60
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x104]
call fcn.0040baa0
mov edi, dword [ebp - 0x70]
test edi, edi
je 0x429b9a
mov ecx, edi
jmp 0x429ba4
cmp dword [ebp - 0x58], 0
mov ecx, ebx
cmovne ecx, dword [ebp - 0x60]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429ba7
sub ecx, edx
sar ecx, 1
cmp ecx, 0x20
jle 0x429c0c
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], 0x6e3b20
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x4c]
mov ebx, dword [ebp - 0x20]
push eax
lea ecx, [ebx + 0x1454]
call fcn.00408350
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
push 0
push dword [ebx + 0x1460]
call dword [0x703558]
xor esi, esi
jmp 0x42ad54
cmp ecx, 4
jl 0x429d7e
lea ecx, [ebp - 0x7c]
xor esi, esi
call fcn.0040ec50
mov edx, eax
test edx, edx
jle 0x429c61
test edi, edi
je 0x429c2d
mov ecx, edi
jmp 0x429c37
cmp dword [ebp - 0x58], 0
mov ecx, ebx
cmovne ecx, dword [ebp - 0x60]
movzx eax, word [ecx + esi*2]
cmp eax, 0x61
jb 0x429c45
cmp eax, 0x7a
jbe 0x429c5c
cmp eax, 0x41
jb 0x429c4f
cmp eax, 0x5a
jbe 0x429c5c
add eax, 0xffffffd0
cmp ax, 9
ja 0x429d7e
inc esi
cmp esi, edx
jl 0x429c25
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], 0x6e3c54
mov byte [ebp - 4], 0x20
mov esi, dword [ebp - 0x10]
or esi, 4
mov dword [ebp - 0x10], esi
mov edi, dword [ebp - 0x40]
test edi, edi
jne 0x429c99
cmp dword [ebp - 0x28], 0
mov edi, ebx
cmovne edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x58]
test eax, eax
je 0x429cc1
mov ebx, eax
mov dword [ebp - 0x18], ebx
lea ecx, [ebx + 2]
nop dword [eax + eax]
mov ax, word [ebx]
add ebx, 2
test ax, ax
jne 0x429cb0
sub ebx, ecx
sar ebx, 1
jmp 0x429cdc
test ecx, ecx
jne 0x429cd1
mov ebx, 0x6e2dcc
mov dword [ebp - 0x18], ebx
xor ebx, ebx
jmp 0x429ce4
mov ebx, dword [ebp - 0x60]
mov dword [ebp - 0x18], ebx
mov ebx, ecx
shr ebx, 1
dec ebx
test ebx, ebx
js 0x429d7e
test edi, edi
je 0x429e11
cmp word [edi], 0
je 0x429e11
test ebx, ebx
je 0x429d7e
mov edx, edi
lea ecx, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x429d03
sub edx, ecx
sar edx, 1
jns 0x429d2f
mov edx, edi
lea ecx, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x429d20
sub edx, ecx
sar edx, 1
test edx, edx
jle 0x429d7e
sub ebx, edx
inc ebx
test ebx, ebx
jle 0x429d7e
mov eax, dword [ebp - 0x18]
sub edi, eax
mov dword [ebp - 0x50], 0
mov ecx, eax
xor esi, esi
nop word [eax + eax]
cmp esi, edx
je 0x429de9
mov ax, word [ecx]
cmp ax, word [ecx + edi]
jne 0x429d67
inc esi
add ecx, 2
jmp 0x429d50
mov ecx, dword [ebp - 0x50]
sub edi, 2
mov eax, dword [ebp - 0x18]
inc ecx
add eax, 2
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x18], eax
cmp ecx, ebx
jl 0x429d46
mov bl, 1
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x10]
test al, 4
je 0x429da0
and eax, 0xfffffffb
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
test bl, bl
je 0x429e29
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], 0
test eax, eax
je 0x429dc0
push eax
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x6c]
call dword [eax + 0xc]
push 0x6e3c8c
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
call fcn.0044c650
mov edi, 1
jmp 0x429e2b
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x429d7e
mov ecx, dword [ebp - 0x70]
test ecx, ecx
jne 0x429e04
cmp dword [ebp - 0x58], 0
mov ecx, 0x6e2dcc
cmovne ecx, dword [ebp - 0x60]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x429d7e
lea eax, [ebp - 0x7c]
push eax
call fcn.0042ae50
test eax, eax
je 0x429d7e
xor bl, bl
jmp 0x429d80
xor edi, edi
lea ecx, [ebp - 0x3a4]
call fcn.0043fe80
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4f4]
call fcn.00442d60
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x4c], 0x6e2c70
mov dword [ebp - 0x4c], vtable.CVolObject.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x4c], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x25
push ecx
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], vtable.rg_n1::rg_n1959.0
call fcn.00439f30
mov byte [ebp - 4], 0x27
mov dword [ebp - method.CVolRefObject.virtual_0], 0x6e2c70
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov byte [ebp - 4], 0x28
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x29
push ecx
lea ecx, [ebp - 0xf8]
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.rg_n1::rg_n1959.0
call fcn.00439f30
mov byte [ebp - 4], 0x2b
mov dword [ebp - method.CVolRefObject.virtual_0], 0x6e2c70
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0
mov byte [ebp - 4], 0x2c
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x2d
push ecx
lea ecx, [ebp - 0x1a8]
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.rg_n1::rg_n1959.0
call fcn.00439f30
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xa8]
call fcn.0040af80
mov byte [ebp - 4], 0x30
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], 0x6e2dcc
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x188]
call fcn.0040af80
mov byte [ebp - 4], 0x32
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x17c], 0x6e2dcc
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2bc]
call fcn.0040af80
mov byte [ebp - 4], 0x34
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x2b0], 0x6e2dcc
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x290]
call fcn.0040af80
mov byte [ebp - 4], 0x36
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x284], 0x6e2dcc
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x264]
call fcn.0040af80
mov byte [ebp - 4], 0x38
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x258], 0x6e2dcc
mov byte [ebp - 4], 0x39
mov dword [ebp - 0xd8], 0x6e2c70
mov dword [ebp - 0xd8], vtable.CVolObject.0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 0x3a
mov dword [ebp - 0xd8], vtable.rg_n1::rg_n2391.0
mov byte [ebp - 4], 0x3b
push ecx
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xd8], vtable.rg_n1::rg_n1959.0
call fcn.00439f30
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x238]
call fcn.0040af80
mov byte [ebp - 4], 0x3e
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x22c], str.SpaceNirvanaFengHeng
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x20c]
call fcn.0040af80
mov byte [ebp - 4], 0x40
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x200], str.Space__
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x20c]
lea ecx, [ebp - 0x1e0]
call fcn.0044ec60
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x238]
push ecx
mov edx, eax
lea ecx, [ebp - 0x304]
call fcn.0040eeb0
mov esi, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x2e8]
mov ebx, dword [ebp - 0x20]
push str._Login
lea edx, [ebx + 0x2ef4]
call fcn.0044ede0
add esp, 4
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x4c]
or dword [ebp - 0x48], 1
or dword [ebp - 0x100], 1
or dword [ebp - 0x1b0], 1
or dword [ebp - 0xd4], 1
push ecx
lea ecx, [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x1b4]
push ecx
push 1
push 0xffffffffffffffff
push 0x1388
lea ecx, [ebp - 0xa8]
push ecx
lea ecx, [ebp - 0x188]
push ecx
lea ecx, [ebp - 0x2bc]
push ecx
lea ecx, [ebp - 0x290]
push ecx
lea ecx, [ebp - 0x264]
push ecx
lea ecx, [ebp - 0xd8]
push ecx
push esi
push 1
push eax
lea eax, [ebp - 0x644]
push eax
lea ecx, [ebp - 0x3a4]
call fcn.00440410
mov esi, eax
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x4f4]
mov edx, dword [ebp - 0x4f4]
call dword [edx + 0x44]
push esi
lea ecx, [ebp - 0x4f4]
call fcn.004182d0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x644]
call fcn.00418490
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x2e8]
call fcn.0040baa0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x304]
call fcn.0040ba10
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x20c]
call fcn.0040baa0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x238]
call fcn.0040baa0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xcc]
call fcn.00439da0
mov byte [ebp - 4], 0x39
mov dword [ebp - 0xd8], vtable.CVolObject.0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x264]
call fcn.0040baa0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x290]
call fcn.0040baa0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2bc]
call fcn.0040baa0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x188]
call fcn.0040baa0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x1a8]
call fcn.00439da0
mov byte [ebp - 4], 0x2b
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xf8]
call fcn.00439da0
mov byte [ebp - 4], 0x27
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x40]
call fcn.00439da0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xa8]
cmp dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4c], vtable.CVolObject.0
jne 0x42a331
call fcn.0040af80
test edi, edi
je 0x42a2df
mov byte [ebp - 4], 0x59
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], 0x6e3b20
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebx + 0x1454]
call fcn.00408350
jmp 0x42a30d
mov byte [ebp - 4], 0x5c
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], str.veQ1Y_
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebx + 0x1454]
call fcn.00408350
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
push 0
push dword [ebx + 0x1460]
call dword [0x703558]
xor esi, esi
jmp 0x42ad36
call fcn.0040af80
mov byte [ebp - 4], 0x5f
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], str.SpaceNirvanaFengHeng
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0xa8]
push eax
lea edx, [ebp - 0x4e8]
lea ecx, [ebp - 0x1e0]
call fcn.0040f1c0
mov edi, eax
mov byte [ebp - 4], 0x61
add ebx, 0x2f4c
mov ecx, ebx
mov dword [ebp - 0x50], ebx
mov edx, dword [ebx]
call dword [edx + 0x44]
mov ecx, dword [edi + 4]
mov dword [ebx + 4], ecx
lea ecx, [ebx + 0x10]
mov eax, dword [edi + 8]
mov dword [ebx + 8], eax
mov eax, dword [edi + 0xc]
mov dword [ebx + 0xc], eax
mov eax, dword [ebx + 0x10]
call dword [eax + 0x44]
lea eax, [edi + 0x10]
push eax
lea ecx, [ebx + 0x10]
call fcn.0040b5f0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x63
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], str.__Information__
mov byte [ebp - 4], 0x64
mov ebx, 0x6e2dcc
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x42a3f9
cmp dword [ebp - 0x28], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x30]
push 0
push ecx
mov ecx, dword [ebp - 0x50]
push 0
push eax
call fcn.0044eac0
mov esi, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
cmp esi, 0xffffffff
jne 0x42a432
mov eax, dword [ebp - 0x20]
push 0
push dword [eax + 0x1460]
call dword [0x703558]
xor esi, esi
jmp 0x42ad36
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x66
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], str.C:Space_
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x42a461
cmp dword [ebp - 0x28], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x30]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
push eax
call esi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
lea ecx, [ebp - 0x4c]
call fcn.0040af80
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x4c], vtable.CWConstString.0
mov dword [ebp - 0x40], str.C:SpaceConfig_
mov byte [ebp - 4], 0x6a
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x42a4a7
cmp dword [ebp - 0x28], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x30]
push 0
push eax
call esi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
cmp dword [ebp - 0x1c], 0
je 0x42aa30
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x42a4d3
cmp dword [ebp - 0x58], 0
mov eax, ebx
cmovne eax, dword [ebp - 0x60]
mov ecx, 0x6e3c8c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42a4fe
test dx, dx
je 0x42a4fa
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42a4fe
add eax, 4
add ecx, 4
test dx, dx
jne 0x42a4d8
xor eax, eax
jmp 0x42a503
sbb eax, eax
or eax, 1
test eax, eax
je 0x42aa30
lea ecx, [ebp - 0xd8]
call fcn.0040af80
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0xa8]
call fcn.0040af80
mov byte [ebp - 4], 0x6d
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], 0x6e3c54
mov byte [ebp - 4], 0x6e
sub esp, 8
lea eax, [ebp - 0xa8]
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x1e0]
push eax
call fcn.0042c110
mov esi, eax
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0xd8]
mov edx, dword [ebp - 0xd8]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0xd4], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0xd0], ecx
lea ecx, [ebp - 0xc8]
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xc8]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040b5f0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
mov edi, dword [ebp - 0xb4]
xor edx, edx
mov ecx, dword [ebp - 0xbc]
mov esi, dword [ebp - 0xcc]
nop dword [eax]
test esi, esi
je 0x42a5e8
mov eax, esi
jmp 0x42a5ef
test edi, edi
mov eax, ebx
cmovne eax, ecx
lea ecx, [eax + 2]
mov dword [ebp - 0x1c], ecx
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x42a5f5
sub eax, dword [ebp - 0x1c]
sar eax, 1
cmp edx, eax
jge 0x42aa21
mov ecx, dword [ebp - 0xbc]
test esi, esi
je 0x42a61b
mov eax, esi
jmp 0x42a622
test edi, edi
mov eax, ebx
cmovne eax, ecx
movzx eax, word [eax + edx*2]
cmp eax, 0x30
jb 0x42a630
cmp eax, 0x39
jbe 0x42a633
inc edx
jmp 0x42a5e0
lea esi, [edx - 1]
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xd8]
call fcn.0040baa0
cmp esi, 0xffffffff
je 0x42aa30
lea ecx, [ebp - 0xa8]
call fcn.0040af80
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x1b4]
push 0x6e2dcc
call fcn.0040d270
mov edi, eax
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x104]
push 0x6e2dcc
call fcn.0040d270
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x73
mov ecx, dword [ebp - 0x70]
test ecx, ecx
jne 0x42a69e
cmp dword [ebp - 0x58], 0
mov ecx, ebx
cmovne ecx, dword [ebp - 0x60]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a6a1
sub ecx, edx
lea eax, [ebp - 0x4c]
sar ecx, 1
push ecx
push esi
push eax
lea ecx, [ebp - 0x7c]
call fcn.0044e6e0
mov esi, eax
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x20c]
push str.Password
call fcn.0040d270
mov byte [ebp - 4], 0x75
mov ecx, dword [ebp - 0x20]
push edi
push dword [ebp - 0x1c]
push esi
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.004238a0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x264]
push 0x6e2dcc
call fcn.0040d270
mov ebx, eax
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x290]
push 0x6e2dcc
call fcn.0040d270
mov edi, eax
mov byte [ebp - 4], 0x78
lea eax, [ebp - 0x2bc]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7c]
push 0
push eax
call fcn.0044e6e0
mov esi, eax
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x188]
push str.Account
call fcn.0040d270
mov byte [ebp - 4], 0x7a
push ebx
mov ebx, dword [ebp - 0x20]
mov ecx, ebx
push edi
push esi
push eax
lea eax, [ebp - 0x2e8]
push eax
call fcn.004238a0
mov byte [ebp - 4], 0x7b
mov edx, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1e0]
call fcn.0044ec60
add esp, 4
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xa8]
push eax
call fcn.0040c700
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x2e8]
call fcn.0040baa0
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x188]
call fcn.0040baa0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x2bc]
call fcn.0040baa0
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x290]
call fcn.0040baa0
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x264]
call fcn.0040baa0
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x238]
call fcn.0040baa0
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x20c]
call fcn.0040baa0
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x104]
call fcn.0040baa0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x1b4]
call fcn.0040baa0
push 0
push ecx
lea edx, [ebx + 0x2f78]
push 0
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x1c], edx
call fcn.0040b260
push eax
mov ecx, edx
call fcn.0044eac0
cmp eax, 0xffffffff
jne 0x42aa15
push str.C:SpaceValue.NK
lea ecx, [ebp - 0x104]
call fcn.0040d270
mov dword [ebp - 0xac], eax
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x4c]
push str.SpaceNirvanaFengHeng
call fcn.0040d270
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x20c]
push 0x6e2dcc
call fcn.0040d270
mov ebx, eax
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x238]
push 0x6e2dcc
call fcn.0040d270
mov edi, eax
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x264]
push str.wmic_cpu_get_processorid
call fcn.0040d270
mov byte [ebp - 4], 0x87
mov edx, eax
push ecx
lea ecx, [ebp - 0x290]
call fcn.0040fc20
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xc8]
push eax
call fcn.0044bda0
mov byte [ebp - 4], 0x89
mov edx, eax
lea ecx, [ebp - 0x2bc]
call fcn.0040c1f0
mov esi, eax
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x188]
push str.CpuCode
call fcn.0040d270
mov byte [ebp - 4], 0x8b
mov ecx, dword [ebp - 0x20]
push ebx
push edi
push esi
push eax
lea eax, [ebp - 0x2e8]
push eax
call fcn.004238a0
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x1e0]
mov edx, dword [ebp - 0x1c]
push eax
call fcn.0044ec60
add esp, 4
mov byte [ebp - 4], 0x8d
mov edx, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x304]
call fcn.0040eeb0
mov edx, eax
mov byte [ebp - 4], 0x8e
push ecx
mov ecx, dword [ebp - 0xac]
call fcn.0040b260
push eax
mov ecx, edx
call fcn.0044cc40
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x304]
call fcn.0040ba10
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x2e8]
call fcn.0040baa0
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x188]
call fcn.0040baa0
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x2bc]
call fcn.0040baa0
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xc8]
call fcn.0040ba10
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x290]
call fcn.0040baa0
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x264]
call fcn.0040baa0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x238]
call fcn.0040baa0
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x20c]
call fcn.0040baa0
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x4c]
call fcn.0040baa0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x104]
call fcn.0040baa0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xa8]
jmp 0x42aa2b
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xd8]
call fcn.0040baa0
lea ecx, [ebp - 0x330]
call fcn.0040af80
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0xa8]
call fcn.0040af80
mov byte [ebp - 4], 0x96
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], str.Information
mov byte [ebp - 4], 0x97
lea eax, [ebp - 0xa8]
mov ebx, dword [ebp - 0x20]
mov ecx, ebx
push 0
push dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.00423db0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x330]
push eax
call fcn.0040c700
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebx + 0x2184]
call fcn.00408210
lea ecx, [ebp - 0x188]
call fcn.0040af80
mov byte [ebp - 4], 0x9a
mov dword [ebp - method.CVolRefObject.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x17c], 0x6e2dcc
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0xa8]
call fcn.0040af80
mov byte [ebp - 4], 0x9c
mov dword [ebp - 0xa8], vtable.CWConstString.0
mov dword [ebp - 0x9c], 0x6e2dcc
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xa8]
mov ecx, ebx
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004208c0
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x188]
call fcn.0040baa0
push 4
lea ecx, [ebp - 0x20c]
call fcn.0040ec80
mov dword [ebp - 0xac], eax
mov byte [ebp - 4], 0xa0
lea eax, [ebp - 0x238]
push eax
call fcn.0042ada0
mov ebx, eax
mov byte [ebp - 4], 0xa1
push 2
lea ecx, [ebp - 0x264]
call fcn.0040ec80
mov edi, eax
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x290]
push 1
call fcn.0040ec80
mov esi, eax
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x2bc]
push 4
call fcn.0040ec80
mov byte [ebp - 4], 0xa4
mov edx, eax
push esi
lea ecx, [ebp - 0x188]
call fcn.0044ec60
mov byte [ebp - 4], 0xa5
mov edx, eax
push edi
lea ecx, [ebp - 0xa8]
call fcn.0044ec60
mov byte [ebp - 4], 0xa6
mov edx, eax
push ebx
lea ecx, [ebp - 0x2e8]
call fcn.0044ec60
mov byte [ebp - 4], 0xa7
mov edx, eax
push dword [ebp - 0xac]
lea ecx, [ebp - 0x1e0]
call fcn.0044ec60
add esp, 0x10
mov esi, eax
mov byte [ebp - 4], 0xa8
lea eax, [ebp - 0xd8]
mov ecx, eax
mov dword [ebp - 0x1c], eax
call fcn.0040af80
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0xc8]
mov eax, dword [esi + 4]
mov dword [ebp - 0xd4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0xd0], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd8], vtable.CWString.0
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040b5f0
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0xcc]
test eax, eax
jne 0x42ac74
cmp dword [ebp - 0xb4], eax
mov eax, 0x6e2dcc
cmovne eax, dword [ebp - 0xbc]
push 0xfffffffffffffffa
push eax
call dword [0x7034d8]
mov esi, eax
mov byte [ebp - 4], 0xa8
lea ecx, [ebp - 0xd8]
call fcn.0040baa0
mov eax, dword [ebp - 0x20]
push esi
push dword [eax + 0x20]
call dword [0x703574]
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x1e0]
call fcn.0040baa0
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x2e8]
call fcn.0040baa0
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0xa8]
call fcn.0040baa0
mov byte [ebp - 4], 0xa4
lea ecx, [ebp - 0x188]
call fcn.0040baa0
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x2bc]
call fcn.0040baa0
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x290]
call fcn.0040baa0
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x264]
call fcn.0040baa0
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x238]
call fcn.0040baa0
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x20c]
call fcn.0040baa0
mov esi, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x330]
call fcn.0040baa0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4f4]
call fcn.00418490
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3a4]
call fcn.00440140
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x15c]
call fcn.0040baa0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x130]
call fcn.0040baa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.0040baa0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret