Function at 0x401b90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x48c0
call fcn.00426210
push ebx
push ebp
push esi
push edi
mov edi, 0x49f670
call fcn.00401860
call fcn.004119b0
mov ecx, 0x49f6b8
call fcn.00407c40
mov ecx, 0x49f6c8
call fcn.00407c40
mov ecx, 0x49f6d8
call fcn.00407c40
mov ecx, 0x49f720
call fcn.00407c40
mov ecx, 0x49f734
call fcn.00407c40
mov ecx, 0x49f744
call fcn.00407c40
mov ecx, 0x49f754
call fcn.00407c40
mov ecx, 0x49f768
call fcn.00407c40
mov ecx, 0x49f778
call fcn.00407c40
mov ecx, 0x49f788
call fcn.00407c40
xor ebx, ebx
mov ecx, 0x49f7d0
mov byte [0x49f798], bl
mov dword [0x49f79c], 0xffffffff
mov dword [0x49f7a0], ebx
mov dword [0x49f7a4], ebx
mov dword [0x49f7a8], ebx
mov dword [0x49f7ac], ebx
mov dword [0x49f7b0], ebx
mov byte [0x49f7b4], bl
mov byte [0x49f7b5], bl
mov dword [0x49f7b8], ebx
mov dword [0x49f7bc], ebx
mov dword [0x49f7c0], ebx
mov dword [0x49f7c4], ebx
call fcn.00407c40
mov ebp, 1
mov ecx, 0x49f858
mov dword [0x49f7e0], 0x484c18
mov dword [0x49f7e4], ebx
mov dword [0x49f7e8], ebx
mov dword [0x49f7ec], ebx
mov dword [0x49f7f0], ebx
mov dword [0x49f7f4], ebx
mov byte [0x49f7f8], bl
mov byte [0x49f7f9], bl
mov dword [0x49f7fc], 0x484c18
mov dword [0x49f800], ebx
mov dword [0x49f804], ebx
mov dword [0x49f808], ebx
mov dword [0x49f80c], 0x484c18
mov dword [0x49f810], ebx
mov dword [0x49f814], ebx
mov dword [0x49f818], ebx
mov dword [0x49f81c], 0x484c18
mov dword [0x49f820], ebx
mov dword [0x49f824], ebx
mov dword [0x49f828], ebx
mov dword [0x49f82c], 0x484c18
mov dword [0x49f830], ebx
mov dword [0x49f834], ebx
mov dword [0x49f838], ebx
mov dword [0x49f848], ebx
mov dword [0x49f850], ebp
mov dword [0x49f854], ebx
call fcn.00407c40
mov esi, 0x49f868
call fcn.004016b0
mov dword [0x49f940], 0x484c18
mov dword [0x49f944], ebx
mov dword [0x49f948], ebx
mov dword [0x49f94c], ebx
mov esi, 0x49f95c
call fcn.00401650
mov ecx, 0x49f9ec
call fcn.00407c40
mov ecx, 0x49fa0c
call fcn.00407c40
lea eax, [esp + 0x48a8]
mov dword [0x49fa2c], ebx
mov dword [0x49fa30], ebx
mov dword [0x49fa34], ebx
mov dword [0x49fa48], ebx
mov dword [0x49fa50], ebp
mov dword [0x49fa54], ebx
call fcn.00411920
lea eax, [esp + 0x48a8]
mov edi, 0x49f7ac
call fcn.00411940
push 0xfffffffffffffff6
mov byte [0x49f6fc], bl
mov dword [0x49f6f8], ebx
mov dword [0x49f6ec], ebx
mov dword [0x49f6f0], ebx
mov dword [0x49f6e8], ebx
mov dword [0x49f6f4], ebx
mov dword [0x49f7cc], ebx
mov byte [0x49fa1c], bl
mov byte [0x49fa1d], bl
mov byte [0x49fa28], bl
mov byte [0x49fa29], bl
mov byte [0x49fa40], bl
mov dword [0x49fa08], ebx
mov dword [0x49f730], ebx
mov dword [0x49f764], ebx
mov byte [0x49f798], bl
mov dword [0x49f79c], 0xffffffff
call dword [sym.imp.KERNEL32.DLL_GetStdHandle]
cmp eax, ebx
jne 0x42e4f4
mov dword [0x49fa38], ebx
call fcn.0040f810
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x8c], ecx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xec], ecx
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x17c], ecx
mov ecx, 0x4606be
mov dword [esp + 0x1a8], ecx
xor ecx, ecx
mov dword [esp + 0x1b0], ecx
mov ecx, 0x45e39f
mov dword [esp + 0x1d8], ecx
xor ecx, ecx
mov dword [esp + 0x1e0], ecx
mov ecx, 0x4603ac
mov dword [esp + 0x208], ecx
xor ecx, ecx
mov dword [esp + 0x210], ecx
mov ecx, 0x453284
mov dword [esp + 0x238], ecx
xor ecx, ecx
mov dword [esp + 0x240], ecx
mov eax, 0x46053e
mov dword [esp + 0x28], eax
mov ecx, 0x44b42c
mov dword [esp + 0x268], ecx
xor ecx, ecx
mov dword [esp + 0x270], ecx
mov eax, 0x46067e
mov dword [esp + 0x58], eax
xor edx, edx
mov eax, 0x435f46
mov dword [esp + 0x88], eax
mov ecx, 0x46f557
mov dword [esp + 0x298], ecx
xor ecx, ecx
mov dword [esp + 0x2a0], ecx
mov eax, 0x456ef8
mov dword [esp + 0xb8], eax
mov eax, 0x461164
mov dword [esp + 0xe8], eax
mov ecx, 0x45af3c
mov dword [esp + 0x2c8], ecx
xor ecx, ecx
mov eax, 0x461137
mov dword [esp + 0x118], eax
mov dword [esp + 0x2d0], ecx
mov eax, 0x46063e
mov ecx, 0x45ad4d
mov dword [esp + 0x148], eax
mov dword [esp + 0x2f8], ecx
mov eax, 0x46f04a
xor ecx, ecx
mov dword [esp + 0x178], eax
mov eax, 3
mov dword [esp + 0x300], ecx
mov ecx, 0x45ab53
mov dword [esp + 0x30], edx
mov dword [esp + 0x60], edx
mov dword [esp + 0x90], edx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xf0], edx
mov dword [esp + 0x120], edx
mov dword [esp + 0x150], edx
mov dword [esp + 0x180], edx
mov dword [esp + 0x18c], eax
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1dc], edx
mov dword [esp + 0x20c], edx
mov dword [esp + 0x23c], edx
mov dword [esp + 0x26c], edx
mov dword [esp + 0x29c], edx
mov dword [esp + 0x2cc], edx
mov dword [esp + 0x2fc], edx
mov dword [esp + 0x30c], eax
mov dword [esp + 0x328], ecx
mov dword [esp + 0x32c], edx
xor ecx, ecx
mov dword [esp + 0x330], ecx
mov ecx, 0x460c35
mov dword [esp + 0x358], ecx
xor ecx, ecx
mov dword [esp + 0x360], ecx
mov ecx, 0x460bbb
mov dword [esp + 0x388], ecx
xor ecx, ecx
mov dword [esp + 0x390], ecx
mov ecx, 0x460be8
mov dword [esp + 0x3b8], ecx
xor ecx, ecx
mov dword [esp + 0x3c0], ecx
mov ecx, 0x4609bc
mov dword [esp + 0x3e8], ecx
xor ecx, ecx
mov dword [esp + 0x3f0], ecx
mov ecx, 0x46095a
mov dword [esp + 0x418], ecx
xor ecx, ecx
mov dword [esp + 0x420], ecx
mov ecx, 0x460b6e
mov dword [esp + 0x448], ecx
xor ecx, ecx
mov dword [esp + 0x450], ecx
mov ecx, 0x460372
mov dword [esp + 0x478], ecx
xor ecx, ecx
mov dword [esp + 0x480], ecx
mov ecx, 0x44b474
mov dword [esp + 0x4a8], ecx
xor ecx, ecx
mov dword [esp + 0x4b0], ecx
mov ecx, 0x47c61f
mov dword [esp + 0x4d8], ecx
xor ecx, ecx
mov dword [esp + 0x4e0], ecx
mov ecx, 0x463c18
mov dword [esp + 0x508], ecx
xor ecx, ecx
mov dword [esp + 0x510], ecx
mov ecx, 0x4603ec
mov dword [esp + 0x538], ecx
xor ecx, ecx
mov dword [esp + 0x540], ecx
mov ecx, 0x46105b
mov dword [esp + 0x568], ecx
xor ecx, ecx
mov dword [esp + 0x570], ecx
mov ecx, 0x460fc2
mov dword [esp + 0x598], ecx
xor ecx, ecx
mov dword [esp + 0x5a0], ecx
mov ecx, 0x460084
mov dword [esp + 0x5c8], ecx
xor ecx, ecx
mov dword [esp + 0x5d0], ecx
mov ecx, 0x45ffde
mov dword [esp + 0x5f8], ecx
xor ecx, ecx
mov dword [esp + 0x600], ecx
mov ecx, 0x45b142
mov dword [esp + 0x35c], edx
mov dword [esp + 0x38c], edx
mov dword [esp + 0x3bc], edx
mov dword [esp + 0x3ec], edx
mov dword [esp + 0x3fc], eax
mov dword [esp + 0x41c], edx
mov dword [esp + 0x44c], edx
mov dword [esp + 0x47c], edx
mov dword [esp + 0x4ac], edx
mov dword [esp + 0x4dc], edx
mov dword [esp + 0x50c], edx
mov dword [esp + 0x53c], edx
mov dword [esp + 0x56c], edx
mov dword [esp + 0x59c], edx
mov dword [esp + 0x5cc], edx
mov dword [esp + 0x5fc], edx
mov dword [esp + 0x628], ecx
mov dword [esp + 0x62c], edx
mov edi, 0x475bf6
mov dword [esp + 0x718], edi
xor edi, edi
mov dword [esp + 0x71c], edi
mov dword [esp + 0x720], edi
mov dword [esp + 0x724], edi
xor ecx, ecx
mov edi, 0x475c38
mov dword [esp + 0x748], edi
xor edi, edi
mov dword [esp + 0x74c], edi
mov dword [esp + 0x750], edi
mov dword [esp + 0x754], edi
mov dword [esp + 0x630], ecx
mov edi, 0x476072
mov dword [esp + 0x778], edi
xor edi, edi
mov dword [esp + 0x77c], edi
mov dword [esp + 0x780], edi
mov dword [esp + 0x784], edi
mov ecx, 0x45de34
mov dword [esp + 0x658], ecx
xor ecx, ecx
mov dword [esp + 0x660], ecx
mov edi, 0x4705b7
mov dword [esp + 0x7a8], edi
xor edi, edi
mov dword [esp + 0x7ac], edi
mov dword [esp + 0x7b0], edi
mov dword [esp + 0x7b4], edi
mov ecx, 0x45ddfc
mov dword [esp + 0x688], ecx
xor ecx, ecx
mov dword [esp + 0x690], ecx
mov edi, 0x474f15
mov dword [esp + 0x7d8], edi
xor edi, edi
mov ecx, 0x475f80
mov dword [esp + 0x6b8], ecx
xor ecx, ecx
mov dword [esp + 0x7dc], edi
mov dword [esp + 0x7e0], edi
mov dword [esp + 0x7e4], edi
mov edi, 0x475d6a
mov dword [esp + 0x6c0], ecx
mov dword [esp + 0x808], edi
xor edi, edi
mov ecx, 0x475648
mov dword [esp + 0x6e8], ecx
xor ecx, ecx
mov dword [esp + 0x80c], edi
mov dword [esp + 0x810], edi
mov dword [esp + 0x814], edi
mov edi, 0x475e75
mov dword [esp + 0x65c], edx
mov dword [esp + 0x68c], edx
mov dword [esp + 0x6bc], edx
mov dword [esp + 0x6ec], edx
mov dword [esp + 0x6f0], ecx
mov dword [esp + 0x838], edi
xor edi, edi
mov ecx, 4
mov edx, 5
mov dword [esp + 0x6c8], eax
mov dword [esp + 0x6f8], ecx
mov dword [esp + 0x6fc], edx
mov dword [esp + 0x728], eax
mov dword [esp + 0x72c], eax
mov dword [esp + 0x758], eax
mov dword [esp + 0x75c], eax
mov dword [esp + 0x788], eax
mov dword [esp + 0x78c], eax
mov dword [esp + 0x7e8], eax
mov dword [esp + 0x7ec], eax
mov dword [esp + 0x818], eax
mov dword [esp + 0x81c], eax
mov dword [esp + 0x83c], edi
mov dword [esp + 0x840], edi
mov dword [esp + 0x844], edi
mov dword [esp + 0x848], eax
mov dword [esp + 0x84c], eax
mov edi, 0x475b72
mov dword [esp + 0x868], edi
xor edi, edi
mov dword [esp + 0x86c], edi
mov dword [esp + 0x870], edi
mov dword [esp + 0x874], edi
mov edi, 0x47528e
mov dword [esp + 0x898], edi
xor edi, edi
mov dword [esp + 0x89c], edi
mov dword [esp + 0x8a0], edi
mov dword [esp + 0x8a4], edi
mov edi, 0x475c7a
mov dword [esp + 0x8c8], edi
xor edi, edi
mov dword [esp + 0x8cc], edi
mov dword [esp + 0x8d0], edi
mov dword [esp + 0x8d4], edi
mov edi, 0x47b4ab
mov dword [esp + 0x8f8], edi
xor edi, edi
mov dword [esp + 0x8fc], edi
mov dword [esp + 0x900], edi
mov dword [esp + 0x904], edi
mov edi, 0x475f0e
mov dword [esp + 0x928], edi
xor edi, edi
mov dword [esp + 0x92c], edi
mov dword [esp + 0x930], edi
mov dword [esp + 0x934], edi
mov edi, 0x475bb4
mov dword [esp + 0x958], edi
xor edi, edi
mov dword [esp + 0x95c], edi
mov dword [esp + 0x960], edi
mov dword [esp + 0x964], edi
mov edi, 0x474f6c
mov dword [esp + 0x988], edi
xor edi, edi
mov dword [esp + 0x98c], edi
mov dword [esp + 0x990], edi
mov dword [esp + 0x994], edi
mov edi, 0x4605be
mov dword [esp + 0x9b8], edi
xor edi, edi
mov dword [esp + 0x9bc], edi
mov dword [esp + 0x9c0], edi
mov dword [esp + 0x9c4], edi
mov edi, 0x460f77
mov dword [esp + 0x9e8], edi
xor edi, edi
mov dword [esp + 0x9ec], edi
mov dword [esp + 0x9f0], edi
mov dword [esp + 0x9f4], edi
mov edi, 0x4626f5
mov dword [esp + 0xa18], edi
xor edi, edi
mov dword [esp + 0xa1c], edi
mov dword [esp + 0xa20], edi
mov dword [esp + 0xa24], edi
mov edi, 0x462683
mov dword [esp + 0xa48], edi
xor edi, edi
mov dword [esp + 0xa4c], edi
mov dword [esp + 0xa50], edi
mov dword [esp + 0xa54], edi
mov edi, 0x473da7
mov dword [esp + 0xa78], edi
mov dword [esp + 0x878], eax
mov dword [esp + 0x87c], eax
mov dword [esp + 0x8a8], ecx
mov dword [esp + 0x8d8], edx
mov dword [esp + 0x908], ecx
mov dword [esp + 0x90c], edx
mov dword [esp + 0x938], ecx
mov dword [esp + 0x93c], edx
mov dword [esp + 0x968], eax
mov dword [esp + 0x96c], eax
mov dword [esp + 0x998], ecx
mov dword [esp + 0xa2c], eax
xor edi, edi
mov dword [esp + 0xa7c], edi
mov dword [esp + 0xa80], edi
mov dword [esp + 0xa84], edi
mov edi, 0x46228e
mov dword [esp + 0xaa8], edi
xor edi, edi
mov dword [esp + 0xaac], edi
mov dword [esp + 0xab0], edi
mov dword [esp + 0xab4], edi
mov edi, 0x462624
mov dword [esp + 0xad8], edi
xor edi, edi
mov dword [esp + 0xadc], edi
mov dword [esp + 0xae0], edi
mov dword [esp + 0xae4], edi
mov edi, 0x471a53
mov dword [esp + 0xb08], edi
xor edi, edi
mov dword [esp + 0xb0c], edi
mov dword [esp + 0xb10], edi
mov dword [esp + 0xb14], edi
mov edi, 0x45c70c
mov dword [esp + 0xb38], edi
xor edi, edi
mov dword [esp + 0xb3c], edi
mov dword [esp + 0xb40], edi
mov dword [esp + 0xb44], edi
mov edi, 0x45c5c3
mov dword [esp + 0xb68], edi
xor edi, edi
mov dword [esp + 0xb6c], edi
mov dword [esp + 0xb70], edi
mov dword [esp + 0xb74], edi
mov edi, 0x467458
mov dword [esp + 0xb98], edi
xor edi, edi
mov dword [esp + 0xb9c], edi
mov dword [esp + 0xba0], edi
mov dword [esp + 0xba4], edi
mov edi, 0x45c796
mov dword [esp + 0xbc8], edi
xor edi, edi
mov dword [esp + 0xbcc], edi
mov dword [esp + 0xbd0], edi
mov dword [esp + 0xbd4], edi
mov edi, 0x45c801
mov dword [esp + 0xbf8], edi
xor edi, edi
mov dword [esp + 0xbfc], edi
mov dword [esp + 0xc00], edi
mov dword [esp + 0xc04], edi
mov edi, 0x46dcbf
mov dword [esp + 0xc28], edi
xor edi, edi
mov dword [esp + 0xc2c], edi
mov dword [esp + 0xc30], edi
mov dword [esp + 0xc34], edi
mov edi, 0x46d972
mov dword [esp + 0xc58], edi
xor edi, edi
mov dword [esp + 0xc5c], edi
mov dword [esp + 0xc60], edi
mov dword [esp + 0xc64], edi
mov edi, 0x46da7e
mov dword [esp + 0xc88], edi
xor edi, edi
mov dword [esp + 0xc8c], edi
mov dword [esp + 0xc90], edi
mov dword [esp + 0xc94], edi
mov edi, 0x45c532
mov dword [esp + 0xcb8], edi
xor edi, edi
mov dword [esp + 0xcbc], edi
mov dword [esp + 0xcc0], edi
mov dword [esp + 0xcc4], edi
mov dword [esp + 0xabc], eax
mov dword [esp + 0xb18], eax
mov dword [esp + 0xba8], eax
mov dword [esp + 0xbac], eax
mov dword [esp + 0xc6c], eax
mov edi, 0x46dbaf
mov dword [esp + 0xce8], edi
xor edi, edi
mov dword [esp + 0xcec], edi
mov dword [esp + 0xcf0], edi
mov dword [esp + 0xcf4], edi
mov edi, 0x474284
mov dword [esp + 0xd18], edi
xor edi, edi
mov dword [esp + 0xd1c], edi
mov dword [esp + 0xd20], edi
mov dword [esp + 0xd24], edi
mov edi, 0x4636e7
mov dword [esp + 0xd48], edi
xor edi, edi
mov dword [esp + 0xd4c], edi
mov dword [esp + 0xd50], edi
mov dword [esp + 0xd54], edi
mov edi, 0x4634ff
mov dword [esp + 0xd78], edi
xor edi, edi
mov dword [esp + 0xd7c], edi
mov dword [esp + 0xd80], edi
mov dword [esp + 0xd84], edi
mov edi, 0x4635e4
mov dword [esp + 0xda8], edi
xor edi, edi
mov dword [esp + 0xdac], edi
mov dword [esp + 0xdb0], edi
mov dword [esp + 0xdb4], edi
mov edi, 0x463aec
mov dword [esp + 0xdd8], edi
xor edi, edi
mov dword [esp + 0xddc], edi
mov dword [esp + 0xde0], edi
mov dword [esp + 0xde4], edi
mov edi, 0x463ebe
mov dword [esp + 0xe08], edi
xor edi, edi
mov dword [esp + 0xe0c], edi
mov dword [esp + 0xe10], edi
mov dword [esp + 0xe14], edi
mov edi, 0x463e6a
mov dword [esp + 0xe38], edi
xor edi, edi
mov dword [esp + 0xe3c], edi
mov dword [esp + 0xe40], edi
mov dword [esp + 0xe44], edi
mov edi, 0x463de1
mov dword [esp + 0xe68], edi
xor edi, edi
mov dword [esp + 0xe6c], edi
mov dword [esp + 0xe70], edi
mov dword [esp + 0xe74], edi
mov edi, 0x463451
mov dword [esp + 0xe98], edi
xor edi, edi
mov dword [esp + 0xe9c], edi
mov dword [esp + 0xea0], edi
mov dword [esp + 0xea4], edi
mov edi, 0x463916
mov dword [esp + 0xec8], edi
xor edi, edi
mov dword [esp + 0xecc], edi
mov dword [esp + 0xed0], edi
mov dword [esp + 0xed4], edi
mov edi, 0x463a01
mov dword [esp + 0xef8], edi
xor edi, edi
mov dword [esp + 0xefc], edi
mov dword [esp + 0xf00], edi
mov dword [esp + 0xf04], edi
mov edi, 0x4637cc
mov dword [esp + 0xf28], edi
xor edi, edi
mov dword [esp + 0xf2c], edi
mov dword [esp + 0xf30], edi
mov dword [esp + 0xf34], edi
mov dword [esp + 0xcf8], eax
mov dword [esp + 0xcfc], ecx
mov dword [esp + 0xe1c], edx
mov edi, 0x439e0e
mov dword [esp + 0xf58], edi
xor edi, edi
mov dword [esp + 0xf5c], edi
mov dword [esp + 0xf60], edi
mov dword [esp + 0xf64], edi
mov edi, 0x46031f
mov dword [esp + 0xf88], edi
xor edi, edi
mov dword [esp + 0xf8c], edi
mov dword [esp + 0xf90], edi
mov dword [esp + 0xf94], edi
mov edi, 0x4602d5
mov dword [esp + 0xfb8], edi
xor edi, edi
mov dword [esp + 0xfbc], edi
mov dword [esp + 0xfc0], edi
mov dword [esp + 0xfc4], edi
mov edi, 0x460283
mov dword [esp + 0xfe8], edi
xor edi, edi
mov dword [esp + 0xfec], edi
mov dword [esp + 0xff0], edi
mov dword [esp + 0xff4], edi
mov edi, 0x46f1f3
mov dword [esp + 0x1018], edi
xor edi, edi
mov dword [esp + 0x101c], edi
mov dword [esp + 0x1020], edi
mov dword [esp + 0x1024], edi
mov edi, 0x47ccfa
mov dword [esp + 0x1048], edi
xor edi, edi
mov dword [esp + 0x104c], edi
mov dword [esp + 0x1050], edi
mov dword [esp + 0x1054], edi
mov edi, 0x46073e
mov dword [esp + 0x1078], edi
xor edi, edi
mov dword [esp + 0x107c], edi
mov dword [esp + 0x1080], edi
mov dword [esp + 0x1084], edi
mov edi, 0x4622f7
mov dword [esp + 0x10a8], edi
xor edi, edi
mov dword [esp + 0x10ac], edi
mov dword [esp + 0x10b0], edi
mov dword [esp + 0x10b4], edi
mov edi, 0x46507a
mov dword [esp + 0x10d8], edi
xor edi, edi
mov dword [esp + 0x10dc], edi
mov dword [esp + 0x10e0], edi
mov dword [esp + 0x10e4], edi
mov edi, 0x4624ec
mov dword [esp + 0x1108], edi
xor edi, edi
mov dword [esp + 0x110c], edi
mov dword [esp + 0x1110], edi
mov dword [esp + 0x1114], edi
mov edi, 0x46333b
mov dword [esp + 0x1138], edi
xor edi, edi
mov dword [esp + 0x113c], edi
mov dword [esp + 0x1140], edi
mov dword [esp + 0x1144], edi
mov edi, 0x463064
mov dword [esp + 0x1168], edi
xor edi, edi
mov dword [esp + 0x116c], edi
mov dword [esp + 0x1170], edi
mov dword [esp + 0x1174], edi
mov edi, 0x4624a1
mov dword [esp + 0x1198], edi
xor edi, edi
mov dword [esp + 0x119c], edi
mov dword [esp + 0x11a0], edi
mov dword [esp + 0x11a4], edi
mov edi, 0x4626bc
mov dword [esp + 0x111c], eax
mov dword [esp + 0x114c], eax
mov dword [esp + 0x11c8], edi
xor edi, edi
mov dword [esp + 0x11cc], edi
mov dword [esp + 0x11d0], edi
mov dword [esp + 0x11d4], edi
mov edi, 0x4629b0
mov dword [esp + 0x11f8], edi
xor edi, edi
mov dword [esp + 0x11fc], edi
mov dword [esp + 0x1200], edi
mov dword [esp + 0x1204], edi
mov edi, 0x4628bb
mov dword [esp + 0x1228], edi
xor edi, edi
mov dword [esp + 0x122c], edi
mov dword [esp + 0x1230], edi
mov dword [esp + 0x1234], edi
mov edi, 0x462e64
mov dword [esp + 0x1258], edi
xor edi, edi
mov dword [esp + 0x125c], edi
mov dword [esp + 0x1260], edi
mov dword [esp + 0x1264], edi
mov edi, 0x462804
mov dword [esp + 0x1288], edi
xor edi, edi
mov dword [esp + 0x128c], edi
mov dword [esp + 0x1290], edi
mov dword [esp + 0x1294], edi
mov edi, 0x473fb5
mov dword [esp + 0x12b8], edi
xor edi, edi
mov dword [esp + 0x12bc], edi
mov dword [esp + 0x12c0], edi
mov dword [esp + 0x12c4], edi
mov edi, 0x46275e
mov dword [esp + 0x12e8], edi
xor edi, edi
mov dword [esp + 0x12ec], edi
mov dword [esp + 0x12f0], edi
mov dword [esp + 0x12f4], edi
mov edi, 0x464789
mov dword [esp + 0x1318], edi
xor edi, edi
mov dword [esp + 0x131c], edi
mov dword [esp + 0x1320], edi
mov dword [esp + 0x1324], edi
mov edi, 0x4744cb
mov dword [esp + 0x1348], edi
xor edi, edi
mov dword [esp + 0x134c], edi
mov dword [esp + 0x1350], edi
mov dword [esp + 0x1354], edi
mov edi, 0x462b1a
mov dword [esp + 0x1378], edi
xor edi, edi
mov dword [esp + 0x137c], edi
mov dword [esp + 0x1380], edi
mov dword [esp + 0x1384], edi
mov edi, 0x466af3
mov dword [esp + 0x13a8], edi
xor edi, edi
mov dword [esp + 0x13ac], edi
mov dword [esp + 0x13b0], edi
mov dword [esp + 0x13b4], edi
mov edi, 0x46232e
mov dword [esp + 0x13d8], edi
xor edi, edi
mov dword [esp + 0x13dc], edi
mov dword [esp + 0x13e0], edi
mov dword [esp + 0x13e4], edi
mov edi, 0x465139
mov dword [esp + 0x1408], edi
xor edi, edi
mov dword [esp + 0x140c], edi
mov dword [esp + 0x1410], edi
mov dword [esp + 0x1414], edi
mov edi, 0x464770
mov dword [esp + 0x135c], eax
mov dword [esp + 0x13bc], eax
mov dword [esp + 0x13ec], eax
mov dword [esp + 0x1438], edi
xor edi, edi
mov dword [esp + 0x143c], edi
mov dword [esp + 0x1440], edi
mov dword [esp + 0x1444], edi
mov edi, 0x464c29
mov dword [esp + 0x1468], edi
xor edi, edi
mov dword [esp + 0x146c], edi
mov dword [esp + 0x1470], edi
mov dword [esp + 0x1474], edi
mov edi, 0x464e75
mov dword [esp + 0x1498], edi
xor edi, edi
mov dword [esp + 0x149c], edi
mov dword [esp + 0x14a0], edi
mov dword [esp + 0x14a4], edi
mov edi, 0x462fca
mov dword [esp + 0x14c8], edi
xor edi, edi
mov dword [esp + 0x14cc], edi
mov dword [esp + 0x14d0], edi
mov dword [esp + 0x14d4], edi
mov edi, 0x462f88
mov dword [esp + 0x14f8], edi
xor edi, edi
mov dword [esp + 0x14fc], edi
mov dword [esp + 0x1500], edi
mov dword [esp + 0x1504], edi
mov edi, 0x464757
mov dword [esp + 0x1528], edi
xor edi, edi
mov dword [esp + 0x152c], edi
mov dword [esp + 0x1530], edi
mov dword [esp + 0x1534], edi
mov edi, 0x464092
mov dword [esp + 0x1558], edi
xor edi, edi
mov dword [esp + 0x155c], edi
mov dword [esp + 0x1560], edi
mov dword [esp + 0x1564], edi
mov edi, 0x462bc7
mov dword [esp + 0x1588], edi
xor edi, edi
mov dword [esp + 0x158c], edi
mov dword [esp + 0x1590], edi
mov dword [esp + 0x1594], edi
mov edi, 0x46481a
mov dword [esp + 0x15b8], edi
xor edi, edi
mov dword [esp + 0x15bc], edi
mov dword [esp + 0x15c0], edi
mov dword [esp + 0x15c4], edi
mov edi, 0x464bff
mov dword [esp + 0x15e8], edi
xor edi, edi
mov dword [esp + 0x15ec], edi
mov dword [esp + 0x15f0], edi
mov dword [esp + 0x15f4], edi
mov edi, 0x464c14
mov dword [esp + 0x1618], edi
xor edi, edi
mov dword [esp + 0x161c], edi
mov dword [esp + 0x1620], edi
mov dword [esp + 0x1624], edi
mov edi, 0x46044b
mov dword [esp + 0x1648], edi
xor edi, edi
mov dword [esp + 0x164c], edi
mov dword [esp + 0x1650], edi
mov dword [esp + 0x1654], edi
mov edi, 0x453148
mov dword [esp + 0x1678], edi
xor edi, edi
mov dword [esp + 0x1448], eax
mov dword [esp + 0x1538], eax
mov dword [esp + 0x156c], edx
mov dword [esp + 0x159c], eax
mov dword [esp + 0x15cc], ecx
mov dword [esp + 0x167c], edi
mov dword [esp + 0x1680], edi
mov dword [esp + 0x1684], edi
mov edi, 0x46f808
mov dword [esp + 0x16a8], edi
xor edi, edi
mov dword [esp + 0x16ac], edi
mov dword [esp + 0x16b0], edi
mov dword [esp + 0x16b4], edi
mov edi, 0x4787b4
mov dword [esp + 0x16d8], edi
xor edi, edi
mov dword [esp + 0x16dc], edi
mov dword [esp + 0x16e0], edi
mov dword [esp + 0x16e4], edi
mov edi, 0x47878a
mov dword [esp + 0x1708], edi
xor edi, edi
mov dword [esp + 0x170c], edi
mov dword [esp + 0x1710], edi
mov dword [esp + 0x1714], edi
mov edi, 0x478775
mov dword [esp + 0x1738], edi
xor edi, edi
mov dword [esp + 0x173c], edi
mov dword [esp + 0x1740], edi
mov dword [esp + 0x1744], edi
mov edi, 0x478760
mov dword [esp + 0x1768], edi
xor edi, edi
mov dword [esp + 0x176c], edi
mov dword [esp + 0x1770], edi
mov dword [esp + 0x1774], edi
mov edi, 0x47874b
mov dword [esp + 0x1798], edi
xor edi, edi
mov dword [esp + 0x179c], edi
mov dword [esp + 0x17a0], edi
mov dword [esp + 0x17a4], edi
mov edi, 0x478736
mov dword [esp + 0x17c8], edi
xor edi, edi
mov dword [esp + 0x17cc], edi
mov dword [esp + 0x17d0], edi
mov dword [esp + 0x17d4], edi
mov edi, 0x47857d
mov dword [esp + 0x17f8], edi
xor edi, edi
mov dword [esp + 0x17fc], edi
mov dword [esp + 0x1800], edi
mov dword [esp + 0x1804], edi
mov edi, 0x47870c
mov dword [esp + 0x1828], edi
xor edi, edi
mov dword [esp + 0x182c], edi
mov dword [esp + 0x1830], edi
mov dword [esp + 0x1834], edi
mov edi, 0x4786f7
mov dword [esp + 0x1858], edi
xor edi, edi
mov dword [esp + 0x185c], edi
mov dword [esp + 0x1860], edi
mov dword [esp + 0x1864], edi
mov edi, 0x4786e2
mov dword [esp + 0x1888], edi
xor edi, edi
mov dword [esp + 0x188c], edi
mov dword [esp + 0x1890], edi
mov dword [esp + 0x1894], edi
mov edi, 0x4786cd
mov dword [esp + 0x18b8], edi
xor edi, edi
mov dword [esp + 0x168c], ecx
mov dword [esp + 0x16e8], ecx
mov dword [esp + 0x1718], eax
mov dword [esp + 0x1748], eax
mov dword [esp + 0x1778], eax
mov dword [esp + 0x17d8], eax
mov dword [esp + 0x1838], eax
mov dword [esp + 0x186c], edx
mov dword [esp + 0x1898], eax
mov dword [esp + 0x18bc], edi
mov dword [esp + 0x18c0], edi
mov dword [esp + 0x18c4], edi
mov edi, 0x4786b8
mov dword [esp + 0x18e8], edi
xor edi, edi
mov dword [esp + 0x18ec], edi
mov dword [esp + 0x18f0], edi
mov dword [esp + 0x18f4], edi
mov edi, 0x47879f
mov dword [esp + 0x1918], edi
xor edi, edi
mov dword [esp + 0x191c], edi
mov dword [esp + 0x1920], edi
mov dword [esp + 0x1924], edi
mov edi, 0x4786a3
mov dword [esp + 0x1948], edi
xor edi, edi
mov dword [esp + 0x194c], edi
mov dword [esp + 0x1950], edi
mov dword [esp + 0x1954], edi
mov edi, 0x47868e
mov dword [esp + 0x1978], edi
xor edi, edi
mov dword [esp + 0x197c], edi
mov dword [esp + 0x1980], edi
mov dword [esp + 0x1984], edi
mov edi, 0x478679
mov dword [esp + 0x19a8], edi
xor edi, edi
mov dword [esp + 0x19ac], edi
mov dword [esp + 0x19b0], edi
mov dword [esp + 0x19b4], edi
mov edi, 0x478664
mov dword [esp + 0x19d8], edi
xor edi, edi
mov dword [esp + 0x19dc], edi
mov dword [esp + 0x19e0], edi
mov dword [esp + 0x19e4], edi
mov edi, 0x47864f
mov dword [esp + 0x1a08], edi
xor edi, edi
mov dword [esp + 0x1a0c], edi
mov dword [esp + 0x1a10], edi
mov dword [esp + 0x1a14], edi
mov edi, 0x478721
mov dword [esp + 0x1a38], edi
xor edi, edi
mov dword [esp + 0x1a3c], edi
mov dword [esp + 0x1a40], edi
mov dword [esp + 0x1a44], edi
mov edi, 0x478568
mov dword [esp + 0x1a68], edi
xor edi, edi
mov dword [esp + 0x1a6c], edi
mov dword [esp + 0x1a70], edi
mov dword [esp + 0x1a74], edi
mov edi, 0x47863a
mov dword [esp + 0x1a98], edi
xor edi, edi
mov dword [esp + 0x1a9c], edi
mov dword [esp + 0x1aa0], edi
mov dword [esp + 0x1aa4], edi
mov edi, 0x478625
mov dword [esp + 0x1ac8], edi
xor edi, edi
mov dword [esp + 0x1acc], edi
mov dword [esp + 0x1ad0], edi
mov dword [esp + 0x1ad4], edi
mov edi, 0x4785fb
mov dword [esp + 0x1af8], edi
xor edi, edi
mov dword [esp + 0x18c8], ecx
mov dword [esp + 0x18f8], eax
mov dword [esp + 0x1928], eax
mov dword [esp + 0x1958], eax
mov dword [esp + 0x1988], eax
mov dword [esp + 0x19ec], eax
mov dword [esp + 0x1a1c], ecx
mov dword [esp + 0x1a48], eax
mov dword [esp + 0x1a78], eax
mov dword [esp + 0x1aa8], eax
mov dword [esp + 0x1afc], edi
mov dword [esp + 0x1b00], edi
mov dword [esp + 0x1b04], edi
mov edi, 0x478610
mov dword [esp + 0x1b28], edi
xor edi, edi
mov dword [esp + 0x1b2c], edi
mov dword [esp + 0x1b30], edi
mov dword [esp + 0x1b34], edi
mov edi, 0x4785e6
mov dword [esp + 0x1b58], edi
xor edi, edi
mov dword [esp + 0x1b5c], edi
mov dword [esp + 0x1b60], edi
mov dword [esp + 0x1b64], edi
mov edi, 0x4785d1
mov dword [esp + 0x1b88], edi
xor edi, edi
mov dword [esp + 0x1b8c], edi
mov dword [esp + 0x1b90], edi
mov dword [esp + 0x1b94], edi
mov edi, 0x4785bc
mov dword [esp + 0x1bb8], edi
xor edi, edi
mov dword [esp + 0x1bbc], edi
mov dword [esp + 0x1bc0], edi
mov dword [esp + 0x1bc4], edi
mov edi, 0x4785a7
mov dword [esp + 0x1be8], edi
xor edi, edi
mov dword [esp + 0x1bec], edi
mov dword [esp + 0x1bf0], edi
mov dword [esp + 0x1bf4], edi
mov edi, 0x478592
mov dword [esp + 0x1c18], edi
xor edi, edi
mov dword [esp + 0x1c1c], edi
mov dword [esp + 0x1c20], edi
mov dword [esp + 0x1c24], edi
mov edi, 0x461caf
mov dword [esp + 0x1c48], edi
xor edi, edi
mov dword [esp + 0x1c4c], edi
mov dword [esp + 0x1c50], edi
mov dword [esp + 0x1c54], edi
mov edi, 0x4616f5
mov dword [esp + 0x1c78], edi
xor edi, edi
mov dword [esp + 0x1c7c], edi
mov dword [esp + 0x1c80], edi
mov dword [esp + 0x1c84], edi
mov edi, 0x4616c4
mov dword [esp + 0x1ca8], edi
xor edi, edi
mov dword [esp + 0x1cac], edi
mov dword [esp + 0x1cb0], edi
mov dword [esp + 0x1cb4], edi
mov edi, 0x461516
mov dword [esp + 0x1cd8], edi
xor edi, edi
mov dword [esp + 0x1cdc], edi
mov dword [esp + 0x1ce0], edi
mov dword [esp + 0x1ce4], edi
mov edi, 0x473970
mov dword [esp + 0x1d08], edi
xor edi, edi
mov dword [esp + 0x1d0c], edi
mov dword [esp + 0x1d10], edi
mov dword [esp + 0x1d14], edi
mov edi, 0x4611bd
mov dword [esp + 0x1d38], edi
xor edi, edi
mov dword [esp + 0x1d3c], edi
mov dword [esp + 0x1d40], edi
mov dword [esp + 0x1d44], edi
mov edi, 0x461356
mov dword [esp + 0x1d68], edi
xor edi, edi
mov dword [esp + 0x1b08], eax
mov dword [esp + 0x1d1c], ecx
mov dword [esp + 0x1d6c], edi
mov dword [esp + 0x1d70], edi
mov dword [esp + 0x1d74], edi
mov edi, 0x46f6e2
mov dword [esp + 0x1d98], edi
xor edi, edi
mov dword [esp + 0x1d9c], edi
mov dword [esp + 0x1da0], edi
mov dword [esp + 0x1da4], edi
mov edi, 0x461a72
mov dword [esp + 0x1dc8], edi
xor edi, edi
mov dword [esp + 0x1dcc], edi
mov dword [esp + 0x1dd0], edi
mov dword [esp + 0x1dd4], edi
mov edi, 0x461aec
mov dword [esp + 0x1df8], edi
xor edi, edi
mov dword [esp + 0x1dfc], edi
mov dword [esp + 0x1e00], edi
mov dword [esp + 0x1e04], edi
mov edi, 0x461ab0
mov dword [esp + 0x1e28], edi
xor edi, edi
mov dword [esp + 0x1e2c], edi
mov dword [esp + 0x1e30], edi
mov dword [esp + 0x1e34], edi
mov edi, 0x461971
mov dword [esp + 0x1e58], edi
xor edi, edi
mov dword [esp + 0x1e5c], edi
mov dword [esp + 0x1e60], edi
mov dword [esp + 0x1e64], edi
mov edi, 0x461f10
mov dword [esp + 0x1e88], edi
xor edi, edi
mov dword [esp + 0x1e8c], edi
mov dword [esp + 0x1e90], edi
mov dword [esp + 0x1e94], edi
mov edi, 0x461f62
mov dword [esp + 0x1eb8], edi
xor edi, edi
mov dword [esp + 0x1ebc], edi
mov dword [esp + 0x1ec0], edi
mov dword [esp + 0x1ec4], edi
mov edi, 0x461bc5
mov dword [esp + 0x1ee8], edi
xor edi, edi
mov dword [esp + 0x1eec], edi
mov dword [esp + 0x1ef0], edi
mov dword [esp + 0x1ef4], edi
mov edi, 0x461809
mov dword [esp + 0x1f18], edi
xor edi, edi
mov dword [esp + 0x1f1c], edi
mov dword [esp + 0x1f20], edi
mov dword [esp + 0x1f24], edi
mov edi, 0x46f75c
mov dword [esp + 0x1f48], edi
xor edi, edi
mov dword [esp + 0x1f4c], edi
mov dword [esp + 0x1f50], edi
mov dword [esp + 0x1f54], edi
mov edi, 0x461921
mov dword [esp + 0x1f78], edi
xor edi, edi
mov dword [esp + 0x1f7c], edi
mov dword [esp + 0x1f80], edi
mov dword [esp + 0x1f84], edi
mov edi, 0x461b28
mov dword [esp + 0x1fa8], edi
xor edi, edi
mov dword [esp + 0x1fac], edi
mov dword [esp + 0x1fb0], edi
mov dword [esp + 0x1fb4], edi
mov edi, 0x46178f
mov dword [esp + 0x1fd8], edi
mov dword [esp + 0x1d78], ecx
mov dword [esp + 0x1d7c], ecx
mov dword [esp + 0x1e6c], eax
mov dword [esp + 0x1efc], edx
mov dword [esp + 0x1f5c], ecx
mov dword [esp + 0x1f8c], eax
xor edi, edi
mov dword [esp + 0x1fdc], edi
mov dword [esp + 0x1fe0], edi
mov dword [esp + 0x1fe4], edi
mov edi, 0x461747
mov dword [esp + 0x2008], edi
xor edi, edi
mov dword [esp + 0x200c], edi
mov dword [esp + 0x2010], edi
mov dword [esp + 0x2014], edi
mov edi, 0x461a36
mov dword [esp + 0x2038], edi
xor edi, edi
mov dword [esp + 0x203c], edi
mov dword [esp + 0x2040], edi
mov dword [esp + 0x2044], edi
mov edi, 0x461673
mov dword [esp + 0x2068], edi
xor edi, edi
mov dword [esp + 0x206c], edi
mov dword [esp + 0x2070], edi
mov dword [esp + 0x2074], edi
mov edi, 0x4615a9
mov dword [esp + 0x2098], edi
xor edi, edi
mov dword [esp + 0x209c], edi
mov dword [esp + 0x20a0], edi
mov dword [esp + 0x20a4], edi
mov edi, 0x46131d
mov dword [esp + 0x20c8], edi
xor edi, edi
mov dword [esp + 0x20cc], edi
mov dword [esp + 0x20d0], edi
mov dword [esp + 0x20d4], edi
mov edi, 0x47384b
mov dword [esp + 0x20f8], edi
xor edi, edi
mov dword [esp + 0x20fc], edi
mov dword [esp + 0x2100], edi
mov dword [esp + 0x2104], edi
mov edi, 0x473ba2
mov dword [esp + 0x2128], edi
xor edi, edi
mov dword [esp + 0x212c], edi
mov dword [esp + 0x2130], edi
mov dword [esp + 0x2134], edi
mov edi, 0x473afa
mov dword [esp + 0x2158], edi
xor edi, edi
mov dword [esp + 0x215c], edi
mov dword [esp + 0x2160], edi
mov dword [esp + 0x2164], edi
mov edi, 0x461280
mov dword [esp + 0x2188], edi
xor edi, edi
mov dword [esp + 0x218c], edi
mov dword [esp + 0x2190], edi
mov dword [esp + 0x2194], edi
mov edi, 0x47369b
mov dword [esp + 0x21b8], edi
xor edi, edi
mov dword [esp + 0x21bc], edi
mov dword [esp + 0x21c0], edi
mov dword [esp + 0x21c4], edi
mov edi, 0x461fb4
mov dword [esp + 0x21e8], edi
xor edi, edi
mov dword [esp + 0x21ec], edi
mov dword [esp + 0x21f0], edi
mov dword [esp + 0x21f4], edi
mov edi, 0x461486
mov dword [esp + 0x2218], edi
xor edi, edi
mov dword [esp + 0x221c], edi
mov dword [esp + 0x2220], edi
mov dword [esp + 0x2224], edi
mov dword [esp + 0x1fe8], eax
mov dword [esp + 0x1fec], edx
mov dword [esp + 0x207c], eax
mov dword [esp + 0x20ac], edx
mov dword [esp + 0x222c], edx
mov edi, 0x4532a6
mov dword [esp + 0x2248], edi
xor edi, edi
mov dword [esp + 0x224c], edi
mov dword [esp + 0x2250], edi
mov dword [esp + 0x2254], edi
mov edi, 0x461d46
mov dword [esp + 0x2278], edi
xor edi, edi
mov dword [esp + 0x227c], edi
mov dword [esp + 0x2280], edi
mov dword [esp + 0x2284], edi
mov edi, 0x461e55
mov dword [esp + 0x22a8], edi
xor edi, edi
mov dword [esp + 0x22ac], edi
mov dword [esp + 0x22b0], edi
mov dword [esp + 0x22b4], edi
mov edi, 0x461ea6
mov dword [esp + 0x22d8], edi
xor edi, edi
mov dword [esp + 0x22dc], edi
mov dword [esp + 0x22e0], edi
mov dword [esp + 0x22e4], edi
mov edi, 0x462004
mov dword [esp + 0x2308], edi
xor edi, edi
mov dword [esp + 0x230c], edi
mov dword [esp + 0x2310], edi
mov dword [esp + 0x2314], edi
mov edi, 0x4620b6
mov dword [esp + 0x2338], edi
xor edi, edi
mov dword [esp + 0x233c], edi
mov dword [esp + 0x2340], edi
mov dword [esp + 0x2344], edi
mov edi, 0x461ce5
mov dword [esp + 0x2368], edi
xor edi, edi
mov dword [esp + 0x236c], edi
mov dword [esp + 0x2370], edi
mov dword [esp + 0x2374], edi
mov edi, 0x4619ea
mov dword [esp + 0x2398], edi
xor edi, edi
mov dword [esp + 0x239c], edi
mov dword [esp + 0x23a0], edi
mov dword [esp + 0x23a4], edi
mov edi, 0x46210d
mov dword [esp + 0x23c8], edi
xor edi, edi
mov dword [esp + 0x23cc], edi
mov dword [esp + 0x23d0], edi
mov dword [esp + 0x23d4], edi
mov edi, 0x46f47f
mov dword [esp + 0x23f8], edi
xor edi, edi
mov dword [esp + 0x23fc], edi
mov dword [esp + 0x2400], edi
mov dword [esp + 0x2404], edi
mov edi, 0x45e0a9
mov dword [esp + 0x2428], edi
xor edi, edi
mov dword [esp + 0x242c], edi
mov dword [esp + 0x2430], edi
mov dword [esp + 0x2434], edi
mov edi, 0x4531e6
mov dword [esp + 0x2458], edi
xor edi, edi
mov dword [esp + 0x245c], edi
mov dword [esp + 0x2460], edi
mov dword [esp + 0x2464], edi
mov edi, 0x460d1f
mov dword [esp + 0x2488], edi
xor edi, edi
mov dword [esp + 0x225c], eax
mov dword [esp + 0x228c], edx
mov dword [esp + 0x22ec], eax
mov dword [esp + 0x231c], eax
mov dword [esp + 0x237c], eax
mov dword [esp + 0x246c], ecx
mov dword [esp + 0x248c], edi
mov dword [esp + 0x2a0c], edx
mov dword [esp + 0x2a38], edx
mov dword [esp + 0x2b8c], edx
mov dword [esp + 0x2d68], edx
mov dword [esp + 0x3188], edx
mov dword [esp + 0x31b8], edx
mov dword [esp + 0x32dc], edx
mov dword [esp + 0x330c], edx
mov dword [esp + 0x3a2c], edx
mov edx, 0x45ae67
mov dword [esp + 0x3a48], edx
xor edx, edx
mov dword [esp + 0x3a4c], edx
mov dword [esp + 0x3a50], edx
mov edx, 0x47156e
mov dword [esp + 0x3a78], edx
xor edx, edx
mov dword [esp + 0x3a7c], edx
mov dword [esp + 0x3a80], edx
mov edx, 0x45a67b
mov dword [esp + 0x3aa8], edx
xor edx, edx
mov dword [esp + 0x3aac], edx
mov dword [esp + 0x3ab0], edx
mov edx, 0x45a1df
mov dword [esp + 0x3ad8], edx
xor edx, edx
mov dword [esp + 0x3adc], edx
mov dword [esp + 0x3ae0], edx
mov edx, 0x47142a
mov dword [esp + 0x3b08], edx
xor edx, edx
mov dword [esp + 0x3b0c], edx
mov dword [esp + 0x3b10], edx
mov edx, 0x45aa18
mov dword [esp + 0x3b38], edx
xor edx, edx
mov dword [esp + 0x3b3c], edx
mov dword [esp + 0x3b40], edx
mov edx, 0x45a9a1
mov dword [esp + 0x3b68], edx
xor edx, edx
mov dword [esp + 0x2490], edi
mov dword [esp + 0x2494], edi
mov edi, 0x46f33a
mov dword [esp + 0x24cc], ecx
mov dword [esp + 0x252c], eax
mov dword [esp + 0x2558], ecx
mov dword [esp + 0x255c], ecx
mov dword [esp + 0x25e8], eax
mov dword [esp + 0x25ec], ecx
mov dword [esp + 0x2618], ecx
mov dword [esp + 0x261c], ecx
mov dword [esp + 0x2648], eax
mov dword [esp + 0x264c], ecx
mov dword [esp + 0x2afc], eax
mov dword [esp + 0x2b88], eax
mov dword [esp + 0x2bec], ecx
mov dword [esp + 0x2c1c], eax
mov dword [esp + 0x2d08], ecx
mov dword [esp + 0x2d3c], eax
mov dword [esp + 0x2fac], eax
mov dword [esp + 0x300c], eax
mov dword [esp + 0x30fc], ecx
mov dword [esp + 0x315c], ecx
mov dword [esp + 0x31ec], ecx
mov dword [esp + 0x327c], eax
mov dword [esp + 0x351c], eax
mov dword [esp + 0x354c], eax
mov dword [esp + 0x35dc], eax
mov dword [esp + 0x366c], eax
mov dword [esp + 0x36cc], ecx
mov dword [esp + 0x399c], eax
mov dword [esp + 0x39cc], ecx
mov dword [esp + 0x39f8], eax
mov dword [esp + 0x39fc], ecx
mov dword [esp + 0x3a28], eax
mov dword [esp + 0x3a8c], eax
mov dword [esp + 0x3b1c], ecx
mov dword [esp + 0x3b6c], edx
mov dword [esp + 0x3b70], edx
mov edx, 0x45a92d
mov dword [esp + 0x3b98], edx
xor edx, edx
mov dword [esp + 0x3b9c], edx
mov dword [esp + 0x3ba0], edx
mov edx, 0x45a6b7
mov dword [esp + 0x3bc8], edx
xor edx, edx
mov dword [esp + 0x3bcc], edx
mov dword [esp + 0x3bd0], edx
mov edx, 0x4605fe
mov dword [esp + 0x3bf8], edx
xor edx, edx
mov dword [esp + 0x3bfc], edx
mov dword [esp + 0x3c00], edx
mov edx, 0x45d59b
mov dword [esp + 0x3c28], edx
xor edx, edx
mov dword [esp + 0x3c2c], edx
mov dword [esp + 0x3c30], edx
mov edx, 0x45d551
mov dword [esp + 0x3c58], edx
xor edx, edx
mov dword [esp + 0x3c5c], edx
mov dword [esp + 0x3c60], edx
mov edx, 0x45d76c
mov dword [esp + 0x3c88], edx
xor edx, edx
mov dword [esp + 0x3c8c], edx
mov dword [esp + 0x3c90], edx
mov edx, 0x45d670
mov dword [esp + 0x3cb8], edx
xor edx, edx
mov dword [esp + 0x3cbc], edx
mov dword [esp + 0x3cc0], edx
mov edx, 0x45da55
mov dword [esp + 0x3ce8], edx
xor edx, edx
mov dword [esp + 0x3cec], edx
mov dword [esp + 0x3cf0], edx
mov edx, 0x45d89a
mov dword [esp + 0x3d18], edx
xor edx, edx
mov dword [esp + 0x3d1c], edx
mov dword [esp + 0x3d20], edx
mov edx, 0x45d820
mov dword [esp + 0x3d48], edx
xor edx, edx
mov dword [esp + 0x3d4c], edx
mov dword [esp + 0x3d50], edx
mov edx, 0x45d4cf
mov dword [esp + 0x3d78], edx
xor edx, edx
mov dword [esp + 0x3d7c], edx
mov dword [esp + 0x3d80], edx
mov edx, 0x45d504
mov dword [esp + 0x3da8], edx
xor edx, edx
mov dword [esp + 0x3dac], edx
mov dword [esp + 0x3db0], edx
mov edx, 0x40de40
mov dword [esp + 0x3dd8], edx
xor edx, edx
mov dword [esp + 0x3ddc], edx
mov dword [esp + 0x3de0], edx
mov edx, 0x40e620
mov dword [esp + 0x3e08], edx
xor edx, edx
mov dword [esp + 0x3e0c], edx
mov dword [esp + 0x3e10], edx
mov edx, 0x4592a7
mov dword [esp + 0x3e38], edx
xor edx, edx
mov dword [esp + 0x3e3c], edx
mov dword [esp + 0x3e40], edx
mov edx, 0x466951
mov dword [esp + 0x3e68], edx
xor edx, edx
mov dword [esp + 0x3ccc], eax
mov dword [esp + 0x3d2c], eax
mov dword [esp + 0x3e6c], edx
mov dword [esp + 0x3e70], edx
mov edx, 0x46693c
mov dword [esp + 0x3e98], edx
xor edx, edx
mov dword [esp + 0x3e9c], edx
mov dword [esp + 0x3ea0], edx
mov edx, 0x4599a9
mov dword [esp + 0x3ec8], edx
xor edx, edx
mov dword [esp + 0x3ecc], edx
mov dword [esp + 0x3ed0], edx
mov edx, 0x459a27
mov dword [esp + 0x3ef8], edx
xor edx, edx
mov dword [esp + 0x3efc], edx
mov dword [esp + 0x3f00], edx
mov edx, 0x45995d
mov dword [esp + 0x3f28], edx
xor edx, edx
mov dword [esp + 0x3f2c], edx
mov dword [esp + 0x3f30], edx
mov edx, 0x45990b
mov dword [esp + 0x3f58], edx
xor edx, edx
mov dword [esp + 0x3f5c], edx
mov dword [esp + 0x3f60], edx
mov edx, 0x45989c
mov dword [esp + 0x3f88], edx
xor edx, edx
mov dword [esp + 0x3f8c], edx
mov dword [esp + 0x3f90], edx
mov edx, 0x4597ff
mov dword [esp + 0x3fb8], edx
xor edx, edx
mov dword [esp + 0x3fbc], edx
mov dword [esp + 0x3fc0], edx
mov edx, 0x4597bc
mov dword [esp + 0x3fe8], edx
xor edx, edx
mov dword [esp + 0x3fec], edx
mov dword [esp + 0x3ff0], edx
mov edx, 0x45977b
mov dword [esp + 0x4018], edx
xor edx, edx
mov dword [esp + 0x401c], edx
mov dword [esp + 0x4020], edx
mov edx, 0x44b291
mov dword [esp + 0x4048], edx
xor edx, edx
mov dword [esp + 0x404c], edx
mov dword [esp + 0x4050], edx
mov edx, 0x4507da
mov dword [esp + 0x4078], edx
xor edx, edx
mov dword [esp + 0x407c], edx
mov dword [esp + 0x4080], edx
mov edx, 0x45964f
mov dword [esp + 0x40a8], edx
xor edx, edx
mov dword [esp + 0x40ac], edx
mov dword [esp + 0x40b0], edx
mov edx, 0x45076e
mov dword [esp + 0x40d8], edx
xor edx, edx
mov dword [esp + 0x40dc], edx
mov dword [esp + 0x40e0], edx
mov edx, 0x456a49
mov dword [esp + 0x4108], edx
xor edx, edx
mov dword [esp + 0x410c], edx
mov dword [esp + 0x4110], edx
mov edx, 0x4596ec
mov dword [esp + 0x4138], edx
xor edx, edx
mov dword [esp + 0x413c], edx
mov dword [esp + 0x4140], edx
mov edx, 0x452149
mov dword [esp + 0x4168], edx
mov dword [esp + 0x3e7c], ecx
mov dword [esp + 0x3eac], ecx
xor edx, edx
mov dword [esp + 0x416c], edx
mov dword [esp + 0x4170], edx
mov edx, 0x45f4ed
mov dword [esp + 0x4198], edx
xor edx, edx
mov dword [esp + 0x419c], edx
mov dword [esp + 0x41a0], edx
mov edx, 0x472a48
mov dword [esp + 0x41c8], edx
xor edx, edx
mov dword [esp + 0x41cc], edx
mov dword [esp + 0x41d0], edx
mov edx, 0x472897
mov dword [esp + 0x41f8], edx
xor edx, edx
mov dword [esp + 0x41fc], edx
mov dword [esp + 0x4200], edx
mov edx, 0x47295a
mov dword [esp + 0x4228], edx
xor edx, edx
mov dword [esp + 0x422c], edx
mov dword [esp + 0x4230], edx
mov edx, 0x472ba3
mov dword [esp + 0x4258], edx
xor edx, edx
mov dword [esp + 0x425c], edx
mov dword [esp + 0x4260], edx
mov edx, 0x472e1a
mov dword [esp + 0x4288], edx
xor edx, edx
mov dword [esp + 0x428c], edx
mov dword [esp + 0x4290], edx
mov edx, 0x45d4cf
mov dword [esp + 0x42b8], edx
xor edx, edx
mov dword [esp + 0x42bc], edx
mov dword [esp + 0x42c0], edx
mov edx, 0x45d504
mov dword [esp + 0x42e8], edx
xor edx, edx
mov dword [esp + 0x42ec], edx
mov dword [esp + 0x42f0], edx
mov edx, 0x46f33a
mov dword [esp + 0x4318], edx
xor edx, edx
mov dword [esp + 0x431c], edx
mov dword [esp + 0x4320], edx
mov edx, 0x45d33f
mov dword [esp + 0x4348], edx
xor edx, edx
mov dword [esp + 0x434c], edx
mov dword [esp + 0x4350], edx
mov edx, 0x471142
mov dword [esp + 0x4378], edx
xor edx, edx
mov dword [esp + 0x437c], edx
mov dword [esp + 0x4380], edx
mov edx, 0x471240
mov dword [esp + 0x43a8], edx
xor edx, edx
mov dword [esp + 0x43ac], edx
mov dword [esp + 0x43b0], edx
mov edx, 0x470e6e
mov dword [esp + 0x43d8], edx
xor edx, edx
mov dword [esp + 0x43dc], edx
mov dword [esp + 0x43e0], edx
mov edx, 0x4711fc
mov dword [esp + 0x4408], edx
xor edx, edx
mov dword [esp + 0x440c], edx
mov dword [esp + 0x4410], edx
mov edx, 0x470036
mov dword [esp + 0x4438], edx
xor edx, edx
mov dword [esp + 0x4178], eax
mov dword [esp + 0x417c], ecx
mov dword [esp + 0x426c], eax
mov dword [esp + 0x443c], edx
mov dword [esp + 0x4440], edx
mov dword [esp + 0x444c], ecx
mov edx, 0x4704c8
mov dword [esp + 0x4468], edx
xor edx, edx
mov dword [esp + 0x446c], edx
mov dword [esp + 0x4470], edx
mov edx, 0x4707b8
mov dword [esp + 0x4498], edx
xor edx, edx
mov dword [esp + 0x449c], edx
mov dword [esp + 0x44a0], edx
mov edx, 0x4706d2
mov dword [esp + 0x44c8], edx
xor edx, edx
mov dword [esp + 0x44cc], edx
mov dword [esp + 0x44d0], edx
mov edx, 0x47066c
mov dword [esp + 0x44f8], edx
xor edx, edx
mov dword [esp + 0x44fc], edx
mov dword [esp + 0x4500], edx
mov edx, 0x4709d4
mov dword [esp + 0x4528], edx
xor edx, edx
mov dword [esp + 0x452c], edx
mov dword [esp + 0x4530], edx
mov edx, 0x470100
mov dword [esp + 0x4558], edx
xor edx, edx
mov dword [esp + 0x455c], edx
mov dword [esp + 0x4560], edx
mov edx, 0x470413
mov dword [esp + 0x4588], edx
xor edx, edx
mov dword [esp + 0x458c], edx
mov dword [esp + 0x4590], edx
mov edx, 0x470ca1
mov dword [esp + 0x45b8], edx
xor edx, edx
mov dword [esp + 0x45bc], edx
mov dword [esp + 0x45c0], edx
mov edx, 0x470d15
mov dword [esp + 0x45e8], edx
xor edx, edx
mov dword [esp + 0x45ec], edx
mov dword [esp + 0x45f0], edx
mov edx, 0x470e04
mov dword [esp + 0x4618], edx
xor edx, edx
mov dword [esp + 0x461c], edx
mov dword [esp + 0x4620], edx
mov edx, 0x470196
mov dword [esp + 0x4648], edx
xor edx, edx
mov dword [esp + 0x464c], edx
mov dword [esp + 0x4650], edx
mov edx, 0x47083b
mov dword [esp + 0x4678], edx
xor edx, edx
mov dword [esp + 0x467c], edx
mov dword [esp + 0x4680], edx
mov edx, 0x443761
mov dword [esp + 0x46a8], edx
xor edx, edx
mov dword [esp + 0x46ac], edx
mov dword [esp + 0x46b0], edx
mov edx, 0x443729
mov dword [esp + 0x46d8], edx
xor edx, edx
mov dword [esp + 0x46dc], edx
mov dword [esp + 0x46e0], edx
mov edx, 0x470ed3
mov dword [esp + 0x4718], ecx
mov ecx, 0x470ad1
mov dword [esp + 0x4708], edx
xor edx, edx
mov dword [esp + 0x4738], ecx
mov dword [esp + 0x4688], eax
mov dword [esp + 0x470c], edx
mov dword [esp + 0x4710], edx
mov dword [esp + 0x473c], edx
xor ecx, ecx
mov dword [esp + 0x4740], ecx
mov ecx, 0x471092
mov dword [esp + 0x4768], ecx
xor ecx, ecx
mov dword [esp + 0x4770], ecx
mov ecx, 0x470d9c
mov dword [esp + 0x4798], ecx
xor ecx, ecx
mov dword [esp + 0x47a0], ecx
mov ecx, 0x470354
mov dword [esp + 0x47c8], ecx
xor ecx, ecx
mov dword [esp + 0x47d0], ecx
mov ecx, 0x47bea4
mov dword [esp + 0x47f8], ecx
xor ecx, ecx
mov dword [esp + 0x4800], ecx
mov ecx, 0x47be5d
mov dword [esp + 0x4828], ecx
xor ecx, ecx
mov dword [esp + 0x4830], ecx
mov ecx, 0x47bdcf
mov dword [esp + 0x4858], ecx
xor ecx, ecx
mov dword [esp + 0x4860], ecx
mov dword [esp + 0x4748], eax
mov dword [esp + 0x474c], eax
mov dword [esp + 0x4778], eax
mov dword [esp + 0x477c], eax
mov dword [esp + 0x47a8], eax
mov dword [esp + 0x47ac], eax
mov dword [esp + 0x47d8], eax
mov dword [esp + 0x47dc], eax
mov dword [esp + 0x480c], eax
mov dword [esp + 0x483c], eax
mov dword [esp + 0x486c], eax
mov dword [esp + 0x489c], eax
mov dword [esp + 0x476c], edx
mov dword [esp + 0x479c], edx
mov dword [esp + 0x47cc], edx
mov dword [esp + 0x47fc], edx
mov dword [esp + 0x482c], edx
mov dword [esp + 0x485c], edx
mov ecx, 0x47be16
mov dword [esp + 0x4888], ecx
xor ecx, ecx
mov dword [esp + 0x488c], edx
mov eax, 0x183
mov dword [0x49f840], eax
mov edx, 0x30
mul edx
mov dword [esp + 0x4890], ecx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00412288
add esp, 4
cmp dword [0x49f840], ebx
mov dword [0x49f83c], eax
jle 0x407a6a
mov esi, 2
mov dword [esp + 0x18], 0x482340
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x48], str.ACOS
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x78], str.ADLIBDISABLE
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa8], str.ADLIBENABLE
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xcc], esi
mov dword [esp + 0xd8], 0x482388
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebp
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x108], str.ASCW
mov dword [esp + 0x124], ebx
mov dword [esp + 0x128], ebp
mov dword [esp + 0x12c], ebp
mov dword [esp + 0x138], str.ASIN
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], ebp
mov dword [esp + 0x15c], ebp
mov dword [esp + 0x168], str.ASSIGN
mov dword [esp + 0x184], ebx
mov dword [esp + 0x188], esi
mov dword [esp + 0x198], str.ATAN
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], ebp
mov dword [esp + 0x1bc], ebp
mov dword [esp + 0x1c8], str.AUTOITSETOPTION
mov dword [esp + 0x1e4], ebx
mov dword [esp + 0x1e8], ebp
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f8], str.AUTOITWINGETTITLE
mov dword [esp + 0x214], ebx
mov dword [esp + 0x218], ebx
mov dword [esp + 0x21c], ebx
mov dword [esp + 0x228], str.AUTOITWINSETTITLE
mov dword [esp + 0x244], ebx
mov dword [esp + 0x248], ebp
mov dword [esp + 0x24c], ebp
mov dword [esp + 0x258], str.BEEP
mov dword [esp + 0x274], ebx
mov dword [esp + 0x278], ebx
mov dword [esp + 0x27c], esi
mov dword [esp + 0x288], str.BINARY
mov dword [esp + 0x2a4], ebx
mov dword [esp + 0x2a8], ebp
mov dword [esp + 0x2ac], ebp
mov dword [esp + 0x2b8], str.BINARYLEN
mov dword [esp + 0x2d4], ebx
mov dword [esp + 0x2d8], ebp
mov dword [esp + 0x2dc], ebp
mov dword [esp + 0x2e8], str.BINARYMID
mov dword [esp + 0x304], ebx
mov dword [esp + 0x308], esi
mov dword [esp + 0x318], str.BINARYTOSTRING
mov dword [esp + 0x334], ebx
mov dword [esp + 0x338], ebp
mov dword [esp + 0x33c], esi
mov dword [esp + 0x348], str.BITAND
mov dword [esp + 0x364], ebx
mov dword [esp + 0x368], esi
mov dword [esp + 0x36c], 0xff
mov dword [esp + 0x378], str.BITNOT
mov dword [esp + 0x394], ebx
mov dword [esp + 0x398], ebp
mov dword [esp + 0x39c], ebp
mov dword [esp + 0x3a8], str.BITOR
mov dword [esp + 0x3c4], ebx
mov dword [esp + 0x3c8], esi
mov dword [esp + 0x3cc], 0xff
mov dword [esp + 0x3d8], str.BITROTATE
mov dword [esp + 0x3f4], ebx
mov dword [esp + 0x3f8], esi
mov dword [esp + 0x408], 0x4824d0
mov dword [esp + 0x424], ebx
mov dword [esp + 0x428], esi
mov dword [esp + 0x42c], esi
mov dword [esp + 0x438], 0x4824e4
mov dword [esp + 0x454], ebx
mov dword [esp + 0x458], esi
mov dword [esp + 0x45c], 0xff
mov dword [esp + 0x468], 0x4824f4
mov dword [esp + 0x484], ebx
mov dword [esp + 0x488], ebp
mov dword [esp + 0x48c], ebp
mov dword [esp + 0x498], 0x48250c
mov dword [esp + 0x4b4], ebx
mov dword [esp + 0x4b8], ebp
mov dword [esp + 0x4bc], ebp
mov dword [esp + 0x4c8], 0x482518
mov dword [esp + 0x4e4], ebx
mov dword [esp + 0x4e8], ebp
mov dword [esp + 0x4ec], 0xff
mov dword [esp + 0x4f8], 0x482524
mov dword [esp + 0x514], ebx
mov dword [esp + 0x518], esi
mov dword [esp + 0x51c], esi
mov dword [esp + 0x528], 0x482534
mov dword [esp + 0x544], ebx
mov dword [esp + 0x548], ebp
mov dword [esp + 0x54c], ebp
mov dword [esp + 0x558], 0x482544
mov dword [esp + 0x574], ebx
mov dword [esp + 0x578], ebp
mov dword [esp + 0x57c], ebp
mov dword [esp + 0x588], 0x48254c
mov dword [esp + 0x5a4], ebx
mov dword [esp + 0x5a8], ebp
mov dword [esp + 0x5ac], ebp
mov dword [esp + 0x5b8], 0x482558
mov dword [esp + 0x5d4], ebx
mov dword [esp + 0x5d8], ebx
mov dword [esp + 0x5dc], ebx
mov dword [esp + 0x5e8], 0x482568
mov dword [esp + 0x604], ebx
mov dword [esp + 0x608], ebp
mov dword [esp + 0x60c], ebp
mov dword [esp + 0x618], 0x482578
mov dword [esp + 0x634], ebx
mov dword [esp + 0x638], ebx
mov dword [esp + 0x63c], esi
mov dword [esp + 0x648], 0x482590
mov dword [esp + 0x664], ebx
mov dword [esp + 0x668], ebp
mov dword [esp + 0x66c], ebp
mov dword [esp + 0x678], 0x4825ac
mov dword [esp + 0x694], ebx
mov dword [esp + 0x698], ebp
mov dword [esp + 0x69c], ebp
mov dword [esp + 0x6a8], 0x4825d0
mov dword [esp + 0x6c4], ebx
mov dword [esp + 0x6cc], 7
mov dword [esp + 0x6d8], 0x4825ec
mov dword [esp + 0x6f4], ebx
mov dword [esp + 0x708], 0x48260c
mov dword [esp + 0x738], 0x48262c
mov dword [esp + 0x768], 0x482648
mov dword [esp + 0x798], 0x482664
mov dword [esp + 0x7b8], ebp
mov dword [esp + 0x7bc], esi
mov dword [esp + 0x7c8], 0x482684
mov dword [esp + 0x7f8], 0x4826a8
mov dword [esp + 0x828], 0x4826c4
mov dword [esp + 0x858], 0x4826e4
mov dword [esp + 0x888], 0x4826fc
mov dword [esp + 0x8ac], 6
mov dword [esp + 0x8b8], 0x48271c
mov dword [esp + 0x8dc], 7
mov dword [esp + 0x8e8], 0x482734
mov dword [esp + 0x918], 0x48274c
mov dword [esp + 0x948], 0x48276c
mov dword [esp + 0x978], 0x482784
mov dword [esp + 0x99c], 6
mov dword [esp + 0x9a8], 0x4827a4
mov dword [esp + 0x9c8], ebp
mov dword [esp + 0x9cc], ebp
mov dword [esp + 0x9d8], 0x4827ac
mov dword [esp + 0x9f8], ebp
mov dword [esp + 0x9fc], ebp
mov dword [esp + 0xa08], 0x4827b4
mov dword [esp + 0xa28], esi
mov dword [esp + 0xa38], 0x4827c4
mov dword [esp + 0xa58], ebp
mov dword [esp + 0xa5c], ebp
mov dword [esp + 0xa68], 0x4827d8
mov dword [esp + 0xa88], ebp
mov dword [esp + 0xa8c], esi
mov dword [esp + 0xa98], 0x4827f0
mov dword [esp + 0xab8], esi
mov dword [esp + 0xac8], 0x482800
mov dword [esp + 0xae8], ebp
mov dword [esp + 0xaec], esi
mov dword [esp + 0xaf8], 0x482814
mov dword [esp + 0xb1c], 0x43
mov dword [esp + 0xb28], 0x482824
mov dword [esp + 0xb48], ebp
mov dword [esp + 0xb4c], ebp
mov dword [esp + 0xb58], 0x482844
mov dword [esp + 0xb78], ebp
mov dword [esp + 0xb7c], ebp
mov dword [esp + 0xb88], 0x482868
mov dword [esp + 0xbb8], 0x482890
mov dword [esp + 0xbd8], ebp
mov dword [esp + 0xbdc], ebp
mov dword [esp + 0xbe8], 0x4828a4
mov dword [esp + 0xc08], ebp
mov dword [esp + 0xc0c], ebp
mov dword [esp + 0xc18], 0x4828b4
mov dword [esp + 0xc38], ebp
mov dword [esp + 0xc3c], esi
mov dword [esp + 0xc48], 0x4828d4
mov dword [esp + 0xc68], esi
mov dword [esp + 0xc78], 0x4828f8
mov dword [esp + 0xc98], ebp
mov dword [esp + 0xc9c], esi
mov dword [esp + 0xca8], 0x482918
mov dword [esp + 0xcc8], ebp
mov dword [esp + 0xccc], ebp
mov dword [esp + 0xcd8], 0x48293c
mov dword [esp + 0xd08], 0x482960
mov dword [esp + 0xd28], ebp
mov dword [esp + 0xd2c], ebp
mov dword [esp + 0xd38], 0x48297c
mov dword [esp + 0xd58], ebp
mov dword [esp + 0xd5c], ebp
mov dword [esp + 0xd68], 0x4829a4
mov dword [esp + 0xd88], ebp
mov dword [esp + 0xd8c], ebp
mov dword [esp + 0xd98], 0x4829c0
mov dword [esp + 0xdb8], ebp
mov dword [esp + 0xdbc], ebp
mov dword [esp + 0xdc8], 0x4829e0
mov dword [esp + 0xde8], ebp
mov dword [esp + 0xdec], ebp
mov dword [esp + 0xdf8], 0x4829fc
mov dword [esp + 0xe18], esi
mov dword [esp + 0xe28], 0x482a14
mov dword [esp + 0xe48], ebp
mov dword [esp + 0xe4c], ebp
mov dword [esp + 0xe58], 0x482a2c
mov dword [esp + 0xe78], ebp
mov dword [esp + 0xe7c], ebp
mov dword [esp + 0xe88], 0x482a44
mov dword [esp + 0xea8], esi
mov dword [esp + 0xeac], esi
mov dword [esp + 0xeb8], 0x482a60
mov dword [esp + 0xed8], ebp
mov dword [esp + 0xedc], ebp
mov dword [esp + 0xee8], 0x482a80
mov dword [esp + 0xf08], ebp
mov dword [esp + 0xf0c], ebp
mov dword [esp + 0xf18], 0x482aa0
mov dword [esp + 0xf38], ebp
mov dword [esp + 0xf3c], ebp
mov dword [esp + 0xf48], 0x482ab8
mov dword [esp + 0xf68], ebx
mov dword [esp + 0xf6c], 8
mov dword [esp + 0xf78], 0x482ad8
mov dword [esp + 0xf98], ebp
mov dword [esp + 0xf9c], ebp
mov dword [esp + 0xfa8], 0x482ae8
mov dword [esp + 0xfc8], ebp
mov dword [esp + 0xfcc], esi
mov dword [esp + 0xfd8], 0x482af8
mov dword [esp + 0xff8], ebx
mov dword [esp + 0xffc], ebx
mov dword [esp + 0x1008], 0x482b0c
mov dword [esp + 0x1028], ebp
mov dword [esp + 0x102c], ebp
mov dword [esp + 0x1038], 0x482b18
mov dword [esp + 0x1058], ebp
mov dword [esp + 0x105c], ebp
mov dword [esp + 0x1068], 0x482b28
mov dword [esp + 0x1088], ebp
mov dword [esp + 0x108c], ebp
mov dword [esp + 0x1098], 0x482b30
mov dword [esp + 0x10b8], ebp
mov dword [esp + 0x10bc], ebp
mov dword [esp + 0x10c8], 0x482b4c
mov dword [esp + 0x10e8], ebp
mov dword [esp + 0x10ec], ebp
mov dword [esp + 0x10f8], 0x482b60
mov dword [esp + 0x1118], esi
mov dword [esp + 0x1128], 0x482b74
mov dword [esp + 0x1148], esi
mov dword [esp + 0x1158], 0x482b9c
mov dword [esp + 0x1178], esi
mov dword [esp + 0x117c], 9
mov dword [esp + 0x1188], 0x482bc4
mov dword [esp + 0x11a8], ebp
mov dword [esp + 0x11ac], ebp
mov dword [esp + 0x11b8], 0x482bdc
mov dword [esp + 0x11d8], ebp
mov dword [esp + 0x11dc], ebp
mov dword [esp + 0x11e8], 0x482bf4
mov dword [esp + 0x1208], ebp
mov dword [esp + 0x120c], ebp
mov dword [esp + 0x1218], 0x482c18
mov dword [esp + 0x1238], ebp
mov dword [esp + 0x123c], ebp
mov dword [esp + 0x1248], 0x482c3c
mov dword [esp + 0x1268], ebp
mov dword [esp + 0x126c], ebp
mov dword [esp + 0x1278], 0x482c58
mov dword [esp + 0x1298], ebp
mov dword [esp + 0x129c], esi
mov dword [esp + 0x12a8], 0x482c78
mov dword [esp + 0x12c8], ebp
mov dword [esp + 0x12cc], ebp
mov dword [esp + 0x12d8], 0x482c98
mov dword [esp + 0x12f8], ebp
mov dword [esp + 0x12fc], esi
mov dword [esp + 0x1308], 0x482cbc
mov dword [esp + 0x1328], ebp
mov dword [esp + 0x132c], ebp
mov dword [esp + 0x1338], 0x482cd4
mov dword [esp + 0x1358], ebp
mov dword [esp + 0x1368], 0x482cec
mov dword [esp + 0x1388], ebp
mov dword [esp + 0x138c], esi
mov dword [esp + 0x1398], 0x482d0c
mov dword [esp + 0x13b8], esi
mov dword [esp + 0x13c8], 0x482d24
mov dword [esp + 0x13e8], esi
mov dword [esp + 0x13f8], 0x482d38
mov dword [esp + 0x1418], esi
mov dword [esp + 0x141c], esi
mov dword [esp + 0x1428], 0x482d4c
mov dword [esp + 0x144c], 6
mov dword [esp + 0x1458], 0x482d6c
mov dword [esp + 0x1478], ebp
mov dword [esp + 0x147c], esi
mov dword [esp + 0x1488], 0x482d80
mov dword [esp + 0x14a8], ebp
mov dword [esp + 0x14ac], esi
mov dword [esp + 0x14b8], 0x482d9c
mov dword [esp + 0x14d8], ebp
mov dword [esp + 0x14dc], ebp
mov dword [esp + 0x14e8], 0x482db4
mov dword [esp + 0x1508], ebx
mov dword [esp + 0x150c], ebp
mov dword [esp + 0x1518], 0x482dd8
mov dword [esp + 0x153c], 6
mov dword [esp + 0x1548], 0x482df8
mov dword [esp + 0x1568], esi
mov dword [esp + 0x1578], 0x482e1c
mov dword [esp + 0x1598], esi
mov dword [esp + 0x15a8], 0x482e38
mov dword [esp + 0x15c8], esi
mov dword [esp + 0x15d8], 0x482e50
mov dword [esp + 0x15f8], esi
mov dword [esp + 0x15fc], esi
mov dword [esp + 0x1608], 0x482e64
mov dword [esp + 0x1628], esi
mov dword [esp + 0x162c], esi
mov dword [esp + 0x1638], 0x482e80
mov dword [esp + 0x1658], ebp
mov dword [esp + 0x165c], ebp
mov dword [esp + 0x1668], 0x482e8c
mov dword [esp + 0x1688], ebp
mov dword [esp + 0x1698], 0x482ea4
mov dword [esp + 0x16b8], ebp
mov dword [esp + 0x16bc], 8
mov dword [esp + 0x16c8], 0x482eb8
mov dword [esp + 0x16ec], 8
mov dword [esp + 0x16f8], 0x482edc
mov dword [esp + 0x171c], 7
mov dword [esp + 0x1728], 0x482f04
mov dword [esp + 0x174c], 7
mov dword [esp + 0x1758], 0x482f30
mov dword [esp + 0x177c], 7
mov dword [esp + 0x1788], 0x482f58
mov dword [esp + 0x17a8], ebx
mov dword [esp + 0x17ac], ebp
mov dword [esp + 0x17b8], 0x482f8c
mov dword [esp + 0x17dc], 7
mov dword [esp + 0x17e8], 0x482fb0
mov dword [esp + 0x1808], ebx
mov dword [esp + 0x180c], ebx
mov dword [esp + 0x1818], 0x482fd8
mov dword [esp + 0x183c], 7
mov dword [esp + 0x1848], 0x482ffc
mov dword [esp + 0x1868], esi
mov dword [esp + 0x1878], 0x483028
mov dword [esp + 0x189c], 7
mov dword [esp + 0x18a8], 0x483050
mov dword [esp + 0x18cc], 8
mov dword [esp + 0x18d8], 0x483074
mov dword [esp + 0x18fc], 7
mov dword [esp + 0x1908], 0x48309c
mov dword [esp + 0x192c], 7
mov dword [esp + 0x1938], 0x4830c4
mov dword [esp + 0x195c], 7
mov dword [esp + 0x1968], 0x4830e8
mov dword [esp + 0x198c], 7
mov dword [esp + 0x1998], 0x483114
mov dword [esp + 0x19b8], esi
mov dword [esp + 0x19bc], esi
mov dword [esp + 0x19c8], 0x483148
mov dword [esp + 0x19e8], ebp
mov dword [esp + 0x19f8], 0x48316c
mov dword [esp + 0x1a18], esi
mov dword [esp + 0x1a28], 0x483198
mov dword [esp + 0x1a4c], 7
mov dword [esp + 0x1a58], 0x4831c4
mov dword [esp + 0x1a7c], 7
mov dword [esp + 0x1a88], 0x4831e8
mov dword [esp + 0x1aac], 7
mov dword [esp + 0x1ab8], 0x48320c
mov dword [esp + 0x1ad8], esi
mov dword [esp + 0x1adc], 6
mov dword [esp + 0x1ae8], 0x483238
mov dword [esp + 0x1b0c], 7
mov dword [esp + 0x1b18], 0x483260
mov dword [esp + 0x1b38], esi
mov dword [esp + 0x1b3c], 6
mov dword [esp + 0x1b48], 0x483288
mov dword [esp + 0x1b68], esi
mov dword [esp + 0x1b6c], 6
mov dword [esp + 0x1b78], 0x4832ac
mov dword [esp + 0x1b98], ebp
mov dword [esp + 0x1b9c], ebp
mov dword [esp + 0x1ba8], 0x4832d8
mov dword [esp + 0x1bc8], esi
mov dword [esp + 0x1bcc], 6
mov dword [esp + 0x1bd8], 0x483304
mov dword [esp + 0x1bf8], esi
mov dword [esp + 0x1bfc], esi
mov dword [esp + 0x1c08], 0x483338
mov dword [esp + 0x1c28], ebp
mov dword [esp + 0x1c2c], esi
mov dword [esp + 0x1c38], 0x483360
mov dword [esp + 0x1c58], ebp
mov dword [esp + 0x1c5c], ebp
mov dword [esp + 0x1c68], 0x48337c
mov dword [esp + 0x1c88], ebp
mov dword [esp + 0x1c8c], ebp
mov dword [esp + 0x1c98], 0x4833a0
mov dword [esp + 0x1cb8], ebx
mov dword [esp + 0x1cbc], ebp
mov dword [esp + 0x1cc8], 0x4833c0
mov dword [esp + 0x1ce8], ebp
mov dword [esp + 0x1cec], esi
mov dword [esp + 0x1cf8], 0x4833d8
mov dword [esp + 0x1d18], esi
mov dword [esp + 0x1d28], 0x4833f8
mov dword [esp + 0x1d48], esi
mov dword [esp + 0x1d4c], esi
mov dword [esp + 0x1d58], 0x483430
mov dword [esp + 0x1d88], 0x483450
mov dword [esp + 0x1da8], ebp
mov dword [esp + 0x1dac], esi
mov dword [esp + 0x1db8], 0x483478
mov dword [esp + 0x1dd8], esi
mov dword [esp + 0x1ddc], esi
mov dword [esp + 0x1de8], 0x48349c
mov dword [esp + 0x1e08], esi
mov dword [esp + 0x1e0c], esi
mov dword [esp + 0x1e18], 0x4834bc
mov dword [esp + 0x1e38], esi
mov dword [esp + 0x1e3c], esi
mov dword [esp + 0x1e48], 0x4834e0
mov dword [esp + 0x1e68], esi
mov dword [esp + 0x1e78], 0x483500
mov dword [esp + 0x1e98], ebp
mov dword [esp + 0x1e9c], esi
mov dword [esp + 0x1ea8], 0x48352c
mov dword [esp + 0x1ec8], ebp
mov dword [esp + 0x1ecc], esi
mov dword [esp + 0x1ed8], 0x483554
mov dword [esp + 0x1ef8], esi
mov dword [esp + 0x1f08], 0x483574
mov dword [esp + 0x1f28], esi
mov dword [esp + 0x1f2c], 8
mov dword [esp + 0x1f38], 0x483598
mov dword [esp + 0x1f58], esi
mov dword [esp + 0x1f68], 0x4835b8
mov dword [esp + 0x1f88], esi
mov dword [esp + 0x1f98], 0x4835d8
mov dword [esp + 0x1fb8], esi
mov dword [esp + 0x1fbc], esi
mov dword [esp + 0x1fc8], 0x4835fc
mov dword [esp + 0x1ff8], 0x483618
mov dword [esp + 0x2018], esi
mov dword [esp + 0x201c], esi
mov dword [esp + 0x2028], 0x483640
mov dword [esp + 0x2048], esi
mov dword [esp + 0x204c], esi
mov dword [esp + 0x2058], 0x483660
mov dword [esp + 0x2078], esi
mov dword [esp + 0x2088], 0x483680
mov dword [esp + 0x20a8], esi
mov dword [esp + 0x20b8], 0x48369c
mov dword [esp + 0x20d8], ebx
mov dword [esp + 0x20dc], ebp
mov dword [esp + 0x20e8], 0x4836b0
mov dword [esp + 0x2108], ebx
mov dword [esp + 0x24b8], edi
xor edi, edi
mov dword [esp + 0x24bc], edi
mov dword [esp + 0x24c0], edi
mov dword [esp + 0x24c4], edi
mov edi, 0x45fd6c
mov dword [esp + 0x24e8], edi
xor edi, edi
mov dword [esp + 0x24ec], edi
mov dword [esp + 0x24f0], edi
mov dword [esp + 0x24f4], edi
mov edi, 0x46532f
mov dword [esp + 0x2518], edi
xor edi, edi
mov dword [esp + 0x251c], edi
mov dword [esp + 0x2520], edi
mov dword [esp + 0x2524], edi
mov edi, 0x465492
mov dword [esp + 0x2548], edi
xor edi, edi
mov dword [esp + 0x210c], ebp
mov dword [esp + 0x2118], 0x4836d4
mov dword [esp + 0x2138], ebx
mov dword [esp + 0x213c], ebp
mov dword [esp + 0x2148], 0x4836e8
mov dword [esp + 0x2168], ebx
mov dword [esp + 0x216c], ebp
mov dword [esp + 0x2178], 0x483700
mov dword [esp + 0x2198], esi
mov dword [esp + 0x219c], esi
mov dword [esp + 0x21a8], 0x483720
mov dword [esp + 0x21c8], ebp
mov dword [esp + 0x21cc], esi
mov dword [esp + 0x21d8], 0x483748
mov dword [esp + 0x21f8], ebp
mov dword [esp + 0x21fc], esi
mov dword [esp + 0x2208], 0x483764
mov dword [esp + 0x2228], esi
mov dword [esp + 0x2238], 0x48377c
mov dword [esp + 0x2258], ebx
mov dword [esp + 0x2268], 0x483798
mov dword [esp + 0x2288], ebp
mov dword [esp + 0x2298], 0x4837b0
mov dword [esp + 0x22b8], ebp
mov dword [esp + 0x22bc], esi
mov dword [esp + 0x22c8], 0x4837c8
mov dword [esp + 0x22e8], ebp
mov dword [esp + 0x22f8], 0x4837e0
mov dword [esp + 0x2318], esi
mov dword [esp + 0x2328], 0x4837fc
mov dword [esp + 0x2348], ebx
mov dword [esp + 0x234c], esi
mov dword [esp + 0x2358], 0x483814
mov dword [esp + 0x2378], ebp
mov dword [esp + 0x2388], 0x48382c
mov dword [esp + 0x23a8], ebx
mov dword [esp + 0x23ac], ebp
mov dword [esp + 0x23b8], 0x483848
mov dword [esp + 0x23d8], ebp
mov dword [esp + 0x23dc], esi
mov dword [esp + 0x23e8], 0x48385c
mov dword [esp + 0x2408], ebp
mov dword [esp + 0x240c], esi
mov dword [esp + 0x2418], 0x483864
mov dword [esp + 0x2438], ebp
mov dword [esp + 0x243c], esi
mov dword [esp + 0x2448], 0x483878
mov dword [esp + 0x2468], ebp
mov dword [esp + 0x2478], 0x483894
mov dword [esp + 0x2498], ebp
mov dword [esp + 0x249c], ebp
mov dword [esp + 0x24a8], 0x4838a0
mov dword [esp + 0x24c8], ebp
mov dword [esp + 0x24d8], 0x4838b0
mov dword [esp + 0x24f8], ebp
mov dword [esp + 0x24fc], ebp
mov dword [esp + 0x2508], 0x4838c8
mov dword [esp + 0x2528], esi
mov dword [esp + 0x2538], 0x4838dc
mov dword [esp + 0x254c], edi
mov dword [esp + 0x2550], edi
mov dword [esp + 0x2554], edi
mov edi, 0x474b54
mov dword [esp + 0x2578], edi
xor edi, edi
mov dword [esp + 0x257c], edi
mov dword [esp + 0x2580], edi
mov dword [esp + 0x2584], edi
mov edi, 0x474732
mov dword [esp + 0x25a8], edi
xor edi, edi
mov dword [esp + 0x25ac], edi
mov dword [esp + 0x25b0], edi
mov dword [esp + 0x25b4], edi
mov edi, 0x462154
mov dword [esp + 0x25d8], edi
xor edi, edi
mov dword [esp + 0x25dc], edi
mov dword [esp + 0x25e0], edi
mov dword [esp + 0x25e4], edi
mov edi, 0x4653fb
mov dword [esp + 0x2608], edi
xor edi, edi
mov dword [esp + 0x260c], edi
mov dword [esp + 0x2610], edi
mov dword [esp + 0x2614], edi
mov edi, 0x4748bb
mov dword [esp + 0x2638], edi
xor edi, edi
mov dword [esp + 0x263c], edi
mov dword [esp + 0x2640], edi
mov dword [esp + 0x2644], edi
mov edi, 0x45ef9c
mov dword [esp + 0x2668], edi
xor edi, edi
mov dword [esp + 0x266c], edi
mov dword [esp + 0x2670], edi
mov dword [esp + 0x2674], edi
mov edi, 0x46f65a
mov dword [esp + 0x2698], edi
xor edi, edi
mov dword [esp + 0x269c], edi
mov dword [esp + 0x26a0], edi
mov dword [esp + 0x26a4], edi
mov edi, 0x45f5cf
mov dword [esp + 0x26c8], edi
xor edi, edi
mov dword [esp + 0x26cc], edi
mov dword [esp + 0x26d0], edi
mov dword [esp + 0x26d4], edi
mov edi, 0x460f47
mov dword [esp + 0x26f8], edi
xor edi, edi
mov dword [esp + 0x26fc], edi
mov dword [esp + 0x2700], edi
mov dword [esp + 0x2704], edi
mov edi, 0x460ee7
mov dword [esp + 0x2728], edi
xor edi, edi
mov dword [esp + 0x2568], 0x4838ec
mov dword [esp + 0x2588], esi
mov dword [esp + 0x258c], esi
mov dword [esp + 0x2598], 0x48390c
mov dword [esp + 0x25b8], ebp
mov dword [esp + 0x25bc], ebp
mov dword [esp + 0x25c8], 0x483934
mov dword [esp + 0x25f8], 0x483958
mov dword [esp + 0x2628], 0x48396c
mov dword [esp + 0x2658], 0x48398c
mov dword [esp + 0x2678], esi
mov dword [esp + 0x267c], 0xa
mov dword [esp + 0x2688], 0x4839a0
mov dword [esp + 0x26a8], ebp
mov dword [esp + 0x26ac], ebp
mov dword [esp + 0x26b8], 0x4839a8
mov dword [esp + 0x26d8], ebx
mov dword [esp + 0x26dc], ebx
mov dword [esp + 0x26e8], 0x4839b8
mov dword [esp + 0x53ec8b55], ebp
push ebp
mov ebp, esp
push ebx
push 1
pop eax
test eax, eax
je 0x407ac6
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x6fc], 0
jne 0x40759b
and byte [ebp - 0x77c], 0
and byte [ebp - 0x77b], 0
mov byte [ebp - 0x77a], 4
and byte [ebp - 0x779], 0
mov byte [ebp - 0x778], 0xb8
mov byte [ebp - 0x777], 0xc1
mov byte [ebp - 0x776], 0xa7
mov byte [ebp - 0x775], 0xab
mov byte [ebp - 0x774], 0x89
mov byte [ebp - 0x773], 0x94
mov byte [ebp - 0x772], 0x9c
mov byte [ebp - 0x771], 0x89
mov byte [ebp - 0x770], 0x9a
mov byte [ebp - 0x76f], 0x96
mov byte [ebp - 0x76e], 0xdb
mov byte [ebp - 0x76d], 0xbd
mov byte [ebp - 0x76c], 0x92
mov byte [ebp - 0x76b], 0x97
mov byte [ebp - 0x76a], 0x9e
mov byte [ebp - 0x769], 0x88
mov byte [ebp - 0x768], 0xa7
mov byte [ebp - 0x767], 0xb8
mov byte [ebp - 0x766], 0x94
mov byte [ebp - 0x765], 0x96
mov byte [ebp - 0x764], 0x96
mov byte [ebp - 0x763], 0x94
mov byte [ebp - 0x762], 0x95
mov byte [ebp - 0x761], 0xdb
mov byte [ebp - 0x760], 0xbd
mov byte [ebp - 0x75f], 0x92
mov byte [ebp - 0x75e], 0x97
mov byte [ebp - 0x75d], 0x9e
mov byte [ebp - 0x75c], 0x88
mov byte [ebp - 0x75b], 0xa7
mov byte [ebp - 0x75a], 0xa8
mov byte [ebp - 0x759], 0x82
mov byte [ebp - 0x758], 0x88
mov byte [ebp - 0x757], 0x8f
mov byte [ebp - 0x756], 0x9e
mov byte [ebp - 0x755], 0x96
mov byte [ebp - 0x754], 0xa7
mov byte [ebp - 0x753], 0x88
mov byte [ebp - 0x752], 0x82
mov byte [ebp - 0x751], 0x96
mov byte [ebp - 0x750], 0x88
mov byte [ebp - 0x74f], 0x89
mov byte [ebp - 0x74e], 0x8d
mov byte [ebp - 0x74d], 0xd5
mov byte [ebp - 0x74c], 0x9f
mov byte [ebp - 0x74b], 0x97
mov byte [ebp - 0x74a], 0x97
mov byte [ebp - 0x749], 0xfb
lea eax, [ebp - 0x77c]
push eax
call fcn.00405a30
pop ecx
mov al, byte [ebp - 0x12c]
mov byte [ebp - 0x778], al
push 0x30
lea eax, [ebp - 0x77c]
push eax
call fcn.00405a30
pop ecx
push eax
lea eax, [ebp - 0x504]
push eax
call fcn.00405991
add esp, 0xc
lea eax, [ebp - 0x504]
mov dword [ebp - 0x3a0], eax
jmp 0x407998
cmp dword [ebp - 0x6fc], 1
jne 0x40764c
and byte [ebp - 0x78c], 0
and byte [ebp - 0x78b], 0
mov byte [ebp - 0x78a], 0xa0
and byte [ebp - 0x789], 0
mov byte [ebp - 0x788], 3
mov byte [ebp - 0x787], 0x3b
mov byte [ebp - 0x786], 0x33
mov byte [ebp - 0x785], 0x3c
mov byte [ebp - 0x784], 0x30
mov byte [ebp - 0x783], 0x3a
mov byte [ebp - 0x782], 0x2d
mov byte [ebp - 0x781], 0x71
mov byte [ebp - 0x780], 0x3b
mov byte [ebp - 0x77f], 0x33
mov byte [ebp - 0x77e], 0x33
mov byte [ebp - 0x77d], 0x5f
push 0xc
lea eax, [ebp - 0x78c]
push eax
call fcn.00405a30
pop ecx
push eax
mov eax, dword [ebp - 0x28]
lea eax, [ebp + eax - 0x12c]
push eax
call fcn.00405991
add esp, 0xc
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x3a0], eax
jmp 0x407998
cmp dword [ebp - 0x6fc], 2
jne 0x407709
and byte [ebp - 0x79c], 0
and byte [ebp - 0x79b], 0
mov byte [ebp - 0x79a], 0x10
and byte [ebp - 0x799], 0
mov byte [ebp - 0x798], 0xb3
mov byte [ebp - 0x797], 0x8c
mov byte [ebp - 0x796], 0x80
mov byte [ebp - 0x795], 0x81
mov byte [ebp - 0x794], 0x9d
mov byte [ebp - 0x793], 0x8a
mov byte [ebp - 0x792], 0x9c
mov byte [ebp - 0x791], 0xc1
mov byte [ebp - 0x790], 0x8b
mov byte [ebp - 0x78f], 0x83
mov byte [ebp - 0x78e], 0x83
mov byte [ebp - 0x78d], 0xef
call fcn.00405a20
dec eax
xchg edi, eax
cwde
adc ebp, dword [edx + 0xc]
lea eax, [ebp - 0x79c]
push eax
call fcn.00405a30
pop ecx
push eax
mov eax, dword [ebp - 0x550]
lea eax, [ebp + eax - 0x654]
push eax
call fcn.00405991
add esp, 0xc
lea eax, [ebp - 0x654]
mov dword [ebp - 0x3a0], eax
jmp 0x407998
cmp dword [ebp - 0x6fc], 3
jne 0x4077aa
and byte [ebp - 0x7ac], 0
and byte [ebp - 0x7ab], 0
mov byte [ebp - 0x7aa], 0xed
and byte [ebp - 0x7a9], 0
mov byte [ebp - 0x7a8], 0x4e
mov byte [ebp - 0x7a7], 0x55
mov byte [ebp - 0x7a6], 0x56
mov byte [ebp - 0x7a5], 0x7e
mov byte [ebp - 0x7a4], 0x21
mov byte [ebp - 0x7a3], 0x20
mov byte [ebp - 0x7a2], 0x3c
mov byte [ebp - 0x7a1], 0x76
mov byte [ebp - 0x7a0], 0x7e
mov byte [ebp - 0x79f], 0x7e
mov byte [ebp - 0x79e], 0x12
push 0xb
lea eax, [ebp - 0x7ac]
push eax
call fcn.00405a30
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.00405991
add esp, 0xc
jmp 0x407998
cmp dword [ebp - 0x6fc], 4
jne 0x407854
and byte [ebp - 0x7bc], 0
and byte [ebp - 0x7bb], 0
mov byte [ebp - 0x7ba], 2
and byte [ebp - 0x7b9], 0
mov byte [ebp - 0x7b8], 0xa1
mov byte [ebp - 0x7b7], 0xb2
mov byte [ebp - 0x7b6], 0xb1
mov byte [ebp - 0x7b5], 0xb8
mov byte [ebp - 0x7b4], 0xcf
mov byte [ebp - 0x7b3], 0xce
mov byte [ebp - 0x7b2], 0xd3
mov byte [ebp - 0x7b1], 0x99
mov byte [ebp - 0x7b0], 0x91
mov byte [ebp - 0x7af], 0x91
mov byte [ebp - 0x7ae], 0xfd
call fcn.00405a20
adc al, dl
hlt
cmp dword [ebp - 0x6fc], 5
jne 0x4078f5
and byte [ebp - 0x7cc], 0
and byte [ebp - 0x7cb], 0
mov byte [ebp - 0x7ca], 0x3f
and byte [ebp - 0x7c9], 0
mov byte [ebp - 0x7c8], 0x9c
mov byte [ebp - 0x7c7], 0x90
mov byte [ebp - 0x7c6], 0x93
mov byte [ebp - 0x7c5], 0x81
mov byte [ebp - 0x7c4], 0x90
mov byte [ebp - 0x7c3], 0xac
mov byte [ebp - 0x7c2], 0xee
mov byte [ebp - 0x7c1], 0xa4
mov byte [ebp - 0x7c0], 0xac
mov byte [ebp - 0x7bf], 0xac
mov byte [ebp - 0x7be], 0xc0
push 0xb
lea eax, [ebp - 0x7cc]
push eax
call fcn.00405a30
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.00405991
add esp, 0xc
jmp 0x407998
cmp dword [ebp - 0x6fc], 6
jne 0x407993
and byte [ebp - 0x7dc], 0
and byte [ebp - 0x7db], 0
mov byte [ebp - 0x7da], 0x11
and byte [ebp - 0x7d9], 0
mov byte [ebp - 0x7d8], 0xb2
mov byte [ebp - 0x7d7], 0x8b
mov byte [ebp - 0x7d6], 0x9c
mov byte [ebp - 0x7d5], 0x9c
mov byte [ebp - 0x7d4], 0x81
mov byte [ebp - 0x7d3], 0x9c
mov byte [ebp - 0x7d2], 0xc0
mov byte [ebp - 0x7d1], 0x82
mov byte [ebp - 0x7d0], 0x81
mov byte [ebp - 0x7cf], 0x89
mov byte [ebp - 0x7ce], 0xee
push 0xb
lea eax, [ebp - 0x7dc]
push eax
call fcn.00405a30
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.00405991
add esp, 0xc
jmp 0x407998
jmp 0x407ac6
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
and dword [ebp - 0x37c], 0
call fcn.00405a20
push eax
test ah, dl
mov byte [0xfc60b5ff], al
invalid
jmp 0x4073c2
cmp dword [ebp - 0x37c], 0
jne 0x407b70
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x7e8], eax
and dword [ebp - 0x7e0], 0
push 0x1000
push 8
push dword [ebp - 0x674]
call dword [ebp - 0x67c]
mov dword [ebp - 0x7e4], eax
push dword [ebp - 0x7e4]
lea eax, [ebp - 0x7ec]
push eax
push dword [ebp - 0x748]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.00405bfc
add esp, 0x14
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 0
je 0x407b5c
lea eax, [ebp - 0x714]
push eax
call fcn.00405a30
pop ecx
push eax
push dword [ebp - 0x7e0]
call fcn.00405ac5
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x7e4]
push 1
push dword [ebp - 0x674]
call dword [ebp - 0x39c]
push dword [ebp + 0x1c]
push dword [ebp - 0xc]
push dword [ebp - 0x540]
push dword [ebp - 0x684]
push dword [ebp - 0x688]
push dword [ebp - 0x3ac]
push dword [ebp - 0x400]
push dword [ebp - 0x54c]
push dword [ebp - 0x678]
lea eax, [ebp - 0x334]
push eax
push dword [ebp - 4]
push dword [ebp + 8]
call dword [ebp - 0x37c]
pop edi
pop esi
pop ebx
leave
ret
cmp eax, 0xffffffff
je 0x401e39
mov esi, eax
push esi
call fcn.0044440f
add esp, 4
push eax
mov dword [0x49fa38], eax
call fcn.00436e7d
push esi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x401e3f