Function at 0x41ce90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x411f28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
mov ebp, dword [0x414338]
push esi
push edi
mov edi, dword [esp + 0x50]
xor ebx, ebx
push 0x41c884
mov eax, dword [edi]
mov esi, ecx
push eax
mov dword [esp + 0x18], ebx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41cee0
mov ecx, esi
call fcn.0041cb00
mov eax, 1
jmp 0x41de73
mov ecx, dword [edi]
push 0x41c87c
push ecx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41cf02
mov ecx, esi
call fcn.0041cc60
mov eax, 1
jmp 0x41de73
mov edx, dword [edi]
push 0x41c874
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41cf82
mov edi, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x58]
push edi
push ecx
mov ecx, esi
call fcn.0041c2c0
lea edx, [esp + 0x10]
push 0xa
push edx
lea eax, [esp + 0x5c]
push edi
push eax
mov ecx, esi
mov dword [esp + 0x58], ebx
call fcn.0041c2c0
lea ecx, [esp + 0x54]
lea edx, [esp + 0x50]
push ecx
push edx
mov ecx, esi
mov byte [esp + 0x50], 1
call fcn.0041c8f0
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], 0
call 0x428492
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push fcn.0041c870
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41cfda
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0xa
push ecx
lea eax, [esp + 0x5c]
push edx
push eax
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 2
push ecx
mov ecx, esi
call fcn.0041c720
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov edx, dword [edi]
push 0x41c868
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d095
mov edi, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x1c]
push edi
push ecx
mov ecx, esi
call fcn.0041c2c0
lea edx, [esp + 0x10]
push 0xa
push edx
lea eax, [esp + 0x58]
push edi
push eax
mov ecx, esi
mov dword [esp + 0x58], 3
call fcn.0041c2c0
mov bl, 4
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428504
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x14]
push ecx
push edx
lea eax, [esp + 0x5c]
push 0x41c85c
push eax
mov byte [esp + 0x58], 5
call 0x428528
add esp, 0x10
lea ecx, [esp + 0x54]
push ecx
mov ecx, esi
call fcn.0041c720
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 3
call 0x428492
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov edx, dword [edi]
push 0x41c448
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d125
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0xa
push eax
lea edx, [esp + 0x58]
push ecx
push edx
mov ecx, esi
call fcn.0041c2c0
mov ebx, 6
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], ebx
call 0x428504
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x54]
push eax
push 0x41c448
push 0x41c440
push ecx
mov byte [esp + 0x58], 7
call 0x428528
add esp, 0x10
lea edx, [esp + 0x54]
mov ecx, esi
push edx
call fcn.0041c720
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c850
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d18c
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0xa
push ecx
lea eax, [esp + 0x5c]
push edx
push eax
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 8
push ecx
mov ecx, esi
call fcn.0041bd40
add esi, 0x87c
push esi
call 0x426190
add esp, 4
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov edx, dword [edi]
push 0x41c848
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d1da
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0xa
push eax
lea edx, [esp + 0x5c]
push ecx
push edx
mov ecx, esi
call fcn.0041c2c0
lea eax, [esp + 0x54]
mov ecx, esi
push eax
call fcn.0041ce40
lea ecx, [esp + 0x54]
mov dword [esi + 0x828], eax
call 0x428492
mov eax, 1
jmp 0x41de73
mov ecx, dword [edi]
push 0x41c840
push ecx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d245
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x10]
push 0xa
push edx
lea ecx, [esp + 0x5c]
push eax
push ecx
mov ecx, esi
call fcn.0041c2c0
lea edx, [esp + 0x54]
lea ecx, [esi + 0x898]
push edx
mov dword [esp + 0x4c], 9
call 0x428516
add esi, 0x87c
push esi
call 0x426190
add esp, 4
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c838
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d37e
mov ebx, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0x20
push ecx
lea edx, [esp + 0x58]
push ebx
push edx
mov ecx, esi
call fcn.0041c2c0
lea edi, [esi + 0x82c]
push eax
mov ecx, edi
mov dword [esp + 0x4c], 0xa
call 0x428516
or ebp, 0xffffffff
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], ebp
call 0x428492
push edi
mov ecx, esi
call fcn.0041ce40
test eax, eax
jne 0x41d2b0
push 0x41d420
mov ecx, edi
call 0x428486
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x58]
push ebx
push ecx
mov ecx, esi
call fcn.0041c2c0
lea edi, [esi + 0x830]
push eax
mov ecx, edi
mov dword [esp + 0x4c], 0xb
call 0x428516
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], ebp
call 0x428492
push edi
mov ecx, esi
call fcn.0041ce40
test eax, eax
jne 0x41d2ff
push 0x41d420
mov ecx, edi
call 0x428486
lea edx, [esp + 0x10]
push 0xa
push edx
lea eax, [esp + 0x5c]
push ebx
push eax
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x54]
mov ebx, 0xc
push ecx
mov ecx, esi
mov dword [esp + 0x4c], ebx
call fcn.0041ce40
push 0x41c824
lea ecx, [esp + 0x54]
mov dword [esi + 0x834], eax
mov dword [esi + 0x838], 1
call 0x428558
lea edx, [esi + 0x820]
push eax
push edx
mov ecx, esi
mov byte [esp + 0x50], 0xd
call fcn.0041c8f0
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], ebp
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c814
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d3e1
cmp dword [esi + 0x838], ebx
je 0x41d9fb
push 0x41c7f4
lea ecx, [esp + 0x58]
mov dword [esi + 0x838], ebx
call 0x428558
lea ecx, [esi + 0x820]
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x50], 0xe
call fcn.0041c8f0
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov edx, dword [edi]
push 0x41c7ec
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d46c
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0xa
push eax
lea edx, [esp + 0x58]
push ecx
push edx
mov ecx, esi
call fcn.0041c2c0
mov ebx, 0xf
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], ebx
call 0x428504
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x54]
push eax
push 0x41c7e4
push ecx
mov byte [esp + 0x54], 0x10
call 0x428528
add esp, 0xc
lea edx, [esp + 0x54]
mov ecx, esi
push edx
call fcn.0041c720
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c7dc
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d55e
mov edi, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0x20
push ecx
lea edx, [esp + 0x5c]
push edi
push edx
mov ecx, esi
call fcn.0041c2c0
mov eax, dword [eax]
mov ebp, dword [fcn.0041433c]
push eax
call ebp
add esp, 4
lea ecx, [esp + 0x54]
mov dword [esi + 0x8c0], eax
call 0x428492
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x5c]
push edi
push ecx
mov ecx, esi
call fcn.0041c2c0
mov eax, dword [eax]
push eax
call ebp
add esp, 4
lea ecx, [esp + 0x54]
mov dword [esi + 0x8c8], eax
call 0x428492
lea edx, [esp + 0x10]
push 0x20
push edx
lea eax, [esp + 0x5c]
push edi
push eax
mov ecx, esi
call fcn.0041c2c0
push eax
lea ecx, [esi + 0x8c4]
mov dword [esp + 0x4c], 0x11
call 0x428516
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
lea ecx, [esp + 0x10]
push 0xa
push ecx
lea edx, [esp + 0x5c]
push edi
push edx
mov ecx, esi
call fcn.0041c2c0
mov eax, dword [eax]
push eax
call ebp
add esp, 4
lea ecx, [esp + 0x54]
mov dword [esi + 0x8cc], eax
call 0x428492
push ebx
push ebx
push ebx
push ebx
push esi
push 0x407e30
call 0x42853a
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c7d0
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d5b5
push 0x41c7b4
lea ecx, [esp + 0x58]
call 0x428558
lea ecx, [esi + 0x820]
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x50], 0x12
call fcn.0041c8f0
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
mov dword [esi + 0x8d0], eax
jmp 0x41de73
mov edx, dword [edi]
push 0x41c7a8
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d6f6
mov ebp, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x20]
push ebp
push ecx
mov ecx, esi
call fcn.0041c2c0
lea edx, [esp + 0x18]
mov ecx, esi
push edx
mov dword [esp + 0x4c], 0x13
call fcn.0041ce40
mov edi, eax
lea eax, [esp + 0x10]
push 0x20
push eax
neg edi
lea ecx, [esp + 0x1c]
push ebp
sbb edi, edi
push ecx
mov ecx, esi
neg edi
call fcn.0041c2c0
lea edx, [esp + 0x10]
push 0xa
push edx
lea eax, [esp + 0x58]
push ebp
push eax
mov ecx, esi
mov byte [esp + 0x58], 0x14
call fcn.0041c2c0
lea ecx, [esp + 0x50]
lea edx, [esp + 0x14]
push ecx
mov bl, 0x15
push edx
push edi
mov ecx, esi
mov byte [esp + 0x54], bl
call fcn.0041fc20
test eax, eax
jne 0x41d673
push 0x41c780
lea ecx, [esp + 0x58]
call 0x428558
push eax
lea eax, [esi + 0x820]
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x16
call fcn.0041c8f0
mov byte [esp + 0x48], bl
lea ecx, [esp + 0x54]
jmp 0x41d6ba
push 0x41c760
lea ecx, [esp + 0x58]
call 0x428558
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x48], 0x17
mov eax, dword [ecx - 8]
test eax, eax
je 0x41d69f
push 0x41c740
lea ecx, [esp + 0x58]
call 0x42848c
lea edx, [esp + 0x54]
lea eax, [esi + 0x820]
push edx
push eax
mov ecx, esi
call fcn.0041c8f0
mov byte [esp + 0x48], bl
lea ecx, [esp + 0x54]
call 0x428492
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 0x14
call 0x428492
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0x13
call 0x428492
lea ecx, [esp + 0x18]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov ecx, dword [edi]
push 0x41c73c
push ecx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41d7e8
mov edi, dword [esp + 0x54]
lea edx, [esp + 0x10]
push 0x20
push edx
lea eax, [esp + 0x5c]
push edi
push eax
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x10]
push 0xa
push ecx
lea edx, [esp + 0x58]
push edi
push edx
mov ecx, esi
mov dword [esp + 0x58], 0x18
call fcn.0041c2c0
mov eax, dword [eax]
push eax
call dword [fcn.0041433c]
add esp, 4
lea ecx, [esp + 0x50]
mov edi, eax
call 0x428492
cmp edi, ebx
jne 0x41d75f
mov edi, 0x3e8
lea eax, [esp + 0x54]
push edi
push eax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
jne 0x41d79d
push 0x41c718
lea ecx, [esp + 0x54]
call 0x428558
lea ecx, [esi + 0x820]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x50], 0x19
call fcn.0041c8f0
mov byte [esp + 0x48], 0x18
lea ecx, [esp + 0x50]
jmp 0x41d7c8
push 0x41c704
lea ecx, [esp + 0x54]
call 0x428558
lea edx, [esi + 0x820]
push eax
push edx
mov ecx, esi
mov byte [esp + 0x50], 0x1a
call fcn.0041c8f0
mov byte [esp + 0x48], 0x18
lea ecx, [esp + 0x50]
call 0x428492
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c6fc
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41da4c
cmp dword [esi + 0x878], ebx
jne 0x41d9fb
lea ecx, [esp + 0x20]
call 0x428504
lea ecx, [esp + 0x24]
mov dword [esp + 0x48], 0x1b
call 0x428504
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], 0x1c
call 0x428504
mov edi, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0x20
push ecx
lea edx, [esp + 0x5c]
mov ebx, 0x1d
push edi
push edx
mov ecx, esi
mov dword [esp + 0x58], ebx
call fcn.0041c2c0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x4c], 0x1e
call 0x428516
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x5c]
push edi
push ecx
mov ecx, esi
call fcn.0041c2c0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x4c], 0x1f
call 0x428516
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea edx, [esp + 0x10]
push 0x20
push edx
lea eax, [esp + 0x5c]
push edi
push eax
mov ecx, esi
call fcn.0041c2c0
mov eax, dword [eax]
mov ebp, dword [fcn.0041433c]
push eax
call ebp
add esp, 4
lea ecx, [esp + 0x54]
mov byte [esp + 0x3c], al
call 0x428492
lea ecx, [esp + 0x10]
push 0x20
push ecx
lea edx, [esp + 0x5c]
push edi
push edx
mov ecx, esi
call fcn.0041c2c0
mov eax, dword [eax]
push eax
call ebp
add esp, 4
lea ecx, [esp + 0x54]
mov dword [esp + 0x2c], eax
call 0x428492
lea eax, [esp + 0x10]
push 0xa
push eax
push edi
lea ecx, [esp + 0x60]
push ecx
mov ecx, esi
call fcn.0041c2c0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4c], 0x20
call 0x428516
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea edx, [esp + 0x20]
xor eax, eax
push edx
mov ecx, esi
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], esi
call fcn.0041def0
test eax, eax
je 0x41da05
lea eax, [esp + 0x24]
mov ecx, esi
push eax
call fcn.0041def0
test eax, eax
je 0x41da05
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esi + 0x83c]
call 0x4218c0
lea ecx, [esp + 0x50]
call 0x428504
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x28]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x28]
push ecx
push edx
push eax
lea ecx, [esp + 0x64]
push 0x41c6a0
push ecx
mov byte [esp + 0x64], 0x24
call 0x428528
add esp, 0x1c
lea edx, [esp + 0x50]
lea eax, [esi + 0x820]
mov ecx, esi
push edx
push eax
call fcn.0041c8f0
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x28]
mov dword [esp + 0x48], 0x26
call 0x428492
mov byte [esp + 0x48], 0x25
lea ecx, [esp + 0x24]
call 0x428492
lea ecx, [esp + 0x20]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
push 0x41c680
lea ecx, [esp + 0x58]
call 0x428558
lea ecx, [esi + 0x820]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x50], 0x21
call fcn.0041c8f0
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x28]
mov dword [esp + 0x48], 0x23
call 0x428492
mov byte [esp + 0x48], 0x22
jmp 0x41d9e1
mov edx, dword [edi]
push 0x41c670
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41da72
lea ecx, [esi + 0x83c]
call 0x421930
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c668
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41db31
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0xa
push ecx
lea eax, [esp + 0x58]
push edx
push eax
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0x27
call 0x428504
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0x54]
push ecx
push 0x41c660
push edx
mov byte [esp + 0x54], 0x28
call 0x428528
mov eax, dword [esp + 0x60]
add esp, 0xc
push ebx
push eax
call dword [fcn.00414040]
push 0x41c650
lea ecx, [esp + 0x1c]
call 0x428558
lea ecx, [esi + 0x820]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x50], 0x29
call fcn.0041c8f0
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 0x28
call 0x428492
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], 0x27
call 0x428492
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov edx, dword [edi]
push 0x41c648
push edx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41dc8f
mov edi, dword [esp + 0x54]
lea eax, [esp + 0x10]
push 0x20
push eax
lea ecx, [esp + 0x20]
push edi
push ecx
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], 0x2a
call 0x428504
lea edx, [esp + 0x10]
push 0x20
push edx
lea eax, [esp + 0x1c]
push edi
push eax
mov ecx, esi
mov byte [esp + 0x58], 0x2b
call fcn.0041c2c0
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x4c], 0x2c
call 0x428516
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0x2b
call 0x428492
mov ecx, dword [esp + 0x54]
mov ebp, dword [fcn.0041433c]
push ecx
call ebp
add esp, 4
lea edx, [esp + 0x10]
mov ebx, eax
lea eax, [esp + 0x14]
push 0xa
push edx
push edi
push eax
mov ecx, esi
call fcn.0041c2c0
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x4c], 0x2d
call 0x428516
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0x2b
call 0x428492
mov ecx, dword [esp + 0x54]
push ecx
call ebp
add esp, 4
lea ecx, [esp + 0x50]
mov edi, eax
call 0x428504
mov edx, dword [esp + 0x18]
push edi
push ebx
push edx
lea eax, [esp + 0x5c]
push 0x41c634
push eax
mov byte [esp + 0x5c], 0x2e
call 0x428528
mov ecx, dword [esp + 0x64]
add esp, 0x14
push 0
push ecx
call dword [fcn.00414040]
push 0x41c620
lea ecx, [esp + 0x18]
call 0x428558
mov byte [esp + 0x48], 0x2f
push eax
lea edx, [esi + 0x820]
mov ecx, esi
push edx
call fcn.0041c8f0
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0x2e
call 0x428492
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 0x2b
call 0x428492
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], 0x2a
call 0x428492
lea ecx, [esp + 0x18]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c618
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41dd84
mov edi, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0x20
push ecx
lea edx, [esp + 0x20]
push edi
push edx
mov ecx, esi
call fcn.0041c2c0
lea eax, [esp + 0x10]
push 0xa
push eax
lea ecx, [esp + 0x58]
push edi
push ecx
mov ecx, esi
mov dword [esp + 0x58], 0x30
call fcn.0041c2c0
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], 0x31
call 0x428504
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x18]
push 1
push edx
push 1
push eax
lea ecx, [esp + 0x64]
mov bl, 0x32
push 0x41c604
push ecx
mov byte [esp + 0x60], bl
call 0x428528
mov eax, dword [esp + 0x6c]
mov edx, dword [esi]
add esp, 0x18
mov ecx, dword [eax - 8]
push 0
push ecx
push eax
mov ecx, esi
call dword [edx + 0x20]
push 0x41c5f4
lea ecx, [esp + 0x18]
call 0x428558
push eax
lea eax, [esi + 0x820]
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x33
call fcn.0041c8f0
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], 0x31
call 0x428492
lea ecx, [esp + 0x50]
mov byte [esp + 0x48], 0x30
call 0x428492
lea ecx, [esp + 0x18]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov ecx, dword [edi]
push 0x41c5e8
push ecx
call ebp
add esp, 8
cmp eax, ebx
jne 0x41de1c
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x10]
push 0xa
push edx
lea ecx, [esp + 0x58]
push eax
push ecx
mov ecx, esi
call fcn.0041c2c0
mov ebx, 0x34
lea ecx, [esp + 0x54]
mov dword [esp + 0x48], ebx
call 0x428504
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x54]
push edx
push 0x41c5e0
push 0x41c5d8
push eax
mov byte [esp + 0x58], 0x35
call 0x428528
add esp, 0x10
lea ecx, [esp + 0x54]
push ecx
mov ecx, esi
call fcn.0041c720
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x18]
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], bl
call 0x428492
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
mov eax, dword [edi]
push 0x41c5d0
push eax
call ebp
add esp, 8
cmp eax, ebx
jne 0x41de71
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x10]
push 0xa
push ecx
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, esi
call fcn.0041c2c0
lea ecx, [esp + 0x1c]
mov dword [esp + 0x48], 0x36
push ecx
mov ecx, esi
call fcn.0041fd70
lea ecx, [esp + 0x1c]
mov dword [esp + 0x48], 0xffffffff
call 0x428492
mov eax, 1
jmp 0x41de73
xor eax, eax
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 8