Function at 0x435d50
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get file attributes
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x554536
mov eax, dword fs:[0]
push eax
sub esp, 0x38c
mov eax, dword [0x5932e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc8], ecx
xor edi, edi
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xa4], edi
push 1
push 0x571b30
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
call fcn.00409ab0
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x170]
push 5
push str.me.ex
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
call fcn.00409ab0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x158]
push 8
push str.thschro
mov dword [ebp - 0x148], edi
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
call fcn.00409ab0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x140]
push 5
push str.pp_Pa
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
call fcn.00409ab0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
push 4
push str.onA
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
call fcn.00409ab0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
push 7
push str.ntVersi
mov dword [ebp - 0x100], edi
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
call fcn.00409ab0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf8]
push 9
push 0x571b60
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
call fcn.00409ab0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x58]
push 8
push 0x571b6c
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00409ab0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x218]
push 0xa
push 0x571b78
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
call fcn.00409ab0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xe0]
push 2
push 0x571b84
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.00409ab0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x40]
push 3
push 0x571b88
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00409ab0
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x1b8]
call fcn.00409da0
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0xb
push ecx
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.00409da0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push ecx
mov edx, eax
lea ecx, [ebp - 0x188]
call fcn.00409da0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0xd
push ecx
mov edx, eax
lea ecx, [ebp - 0x200]
call fcn.00409da0
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xe
push ecx
mov edx, eax
lea ecx, [ebp - 0x1e8]
call fcn.00409da0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0x368]
call fcn.00409da0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x10
push ecx
mov edx, eax
lea ecx, [ebp - 0x350]
call fcn.00409da0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x11
push ecx
mov edx, eax
lea ecx, [ebp - 0x338]
call fcn.00409da0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0x320]
call fcn.00409da0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x13
push ecx
mov edx, eax
lea ecx, [ebp - 0xa0]
call fcn.00409da0
add esp, 0x28
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x30c]
cmp edx, 0x10
jb 0x43608c
mov ecx, dword [ebp - 0x320]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436082
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b02
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x324]
cmp edx, 0x10
jb 0x4360e5
mov ecx, dword [ebp - 0x338]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4360db
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b07
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x33c]
cmp edx, 0x10
jb 0x43613e
mov ecx, dword [ebp - 0x350]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436134
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b0c
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0xf
mov byte [ebp - 0x350], 0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x354]
cmp edx, 0x10
jb 0x436197
mov ecx, dword [ebp - 0x368]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43618d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b11
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x1d4]
cmp edx, 0x10
jb 0x4361f0
mov ecx, dword [ebp - 0x1e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4361e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b16
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1ec]
cmp edx, 0x10
jb 0x436249
mov ecx, dword [ebp - 0x200]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43623f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b1b
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x174]
cmp edx, 0x10
jb 0x4362a2
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436298
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b20
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x18c]
cmp edx, 0x10
jb 0x4362fb
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4362f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b25
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x1a4]
cmp edx, 0x10
jb 0x436354
mov ecx, dword [ebp - 0x1b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43634a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b2a
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x4363a7
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43639d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b2f
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x4363f7
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4363ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b34
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x204]
cmp edx, 0x10
jb 0x436450
mov ecx, dword [ebp - 0x218]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436446
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b39
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x4364a3
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436499
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b3e
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0xe4]
cmp edx, 0x10
jb 0x4364f3
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4364e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b43
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0xfc]
cmp edx, 0x10
jb 0x43654c
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436542
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b48
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x114]
cmp edx, 0x10
jb 0x4365a5
mov ecx, dword [ebp - 0x128]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43659b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b4d
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x12c]
cmp edx, 0x10
jb 0x4365fe
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4365f4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b52
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x144]
cmp edx, 0x10
jb 0x436657
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43664d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b57
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x4366b0
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4366a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b5c
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0xb0]
cmp edx, 0x10
jb 0x436709
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4366ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b61
push edx
push ecx
call fcn.005150f8
add esp, 8
sub esp, 0x18
mov dword [ebp - 0xb4], 0
mov ecx, esp
mov dword [ebp - 0xa8], esp
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x56ffc5
mov byte [ecx], 0
call fcn.00409ab0
sub esp, 0x18
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0xa0]
mov ecx, esp
push eax
call fcn.00409940
xor edx, edx
mov byte [ebp - 4], 0x28
mov ecx, 0x80000002
call fcn.00409150
mov esi, eax
add esp, 0x30
test esi, esi
jne 0x4367c6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa8], esp
push eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
push 0x56ffc6
mov byte [ecx], al
call fcn.00409ab0
sub esp, 0x18
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0xa0]
mov ecx, esp
push eax
call fcn.00409940
xor edx, edx
mov byte [ebp - 4], 0x28
mov ecx, 0x80000001
call fcn.00409150
add esp, 0x30
mov esi, eax
push 0
push 0x56ffc7
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x2b
test esi, esi
je 0x436891
sub esp, 0x18
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x571b8c
mov byte [ecx], 0
call fcn.00409ab0
mov edx, esi
lea ecx, [ebp - 0x1d0]
call fcn.00409450
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x436857
mov ecx, eax
call fcn.00409830
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x1bc]
cmp edx, 0x10
jb 0x436891
mov ecx, dword [ebp - 0x1d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436887
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b66
push edx
push ecx
call fcn.005150f8
add esp, 8
cmp dword [ebp - 0x18], 0
jne 0x436dfc
sub esp, 0x18
mov ecx, esp
push 0x11
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x571b94
mov byte [ecx], 0
call fcn.00409ab0
lea ecx, [ebp - 0x70]
call fcn.004d8190
add esp, 0x18
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x60]
test ecx, ecx
jne 0x436b09
sub esp, 0x18
mov ecx, esp
push 0xc
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x571ba8
mov byte [ecx], 0
call fcn.00409ab0
lea ecx, [ebp - 0x1d0]
call fcn.004d8190
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0x70]
cmp eax, esi
je 0x436939
mov ecx, eax
call fcn.00409830
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x1bc]
cmp edx, 0x10
jb 0x436973
mov ecx, dword [ebp - 0x1d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436969
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b6b
push edx
push ecx
call fcn.005150f8
add esp, 8
mov ecx, dword [ebp - 0x60]
test ecx, ecx
jne 0x436b09
sub esp, 0x18
mov ecx, esp
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x571bb8
mov byte [ecx], 0
call fcn.00409ab0
lea ecx, [ebp - 0x40]
call fcn.004d8190
add esp, 0x18
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xe0]
mov eax, dword [ebp - 0x30]
add eax, 0x14
mov dword [ebp - 0xd0], 0
push eax
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov dword [ebp - 0xa4], 0x200000
call fcn.00409fe0
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xe0]
push eax
call fcn.00409bf0
push 0x14
push str.Program_Files__x86_
lea ecx, [ebp - 0xe0]
call fcn.00409bf0
lea ecx, [ebp - 0x70]
call fcn.00409830
movups xmm0, xmmword [ebp - 0xe0]
lea ecx, [ebp - 0xe0]
mov byte [ebp - 0xe0], 0
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [ebp - 0xd0]
movq qword [ebp - 0x60], xmm0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 4], 0x2d
call fcn.00409830
sub esp, 0x18
lea eax, [ebp - 0x70]
mov ecx, esp
push eax
call fcn.00409940
call fcn.0040cae0
add esp, 0x18
test al, al
jne 0x436afa
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xc4]
mov byte [ebp - 0xc4], al
mov eax, dword [ebp - 0x30]
add eax, 0xe
mov dword [ebp - 0xb4], 0
push eax
mov dword [ebp - 0xb0], 0xf
mov dword [ebp - 0xa4], 0x400000
call fcn.00409fe0
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xc4]
push eax
call fcn.00409bf0
push 0xe
push 0x571bdc
lea ecx, [ebp - 0xc4]
call fcn.00409bf0
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x70]
call fcn.00409880
lea ecx, [ebp - 0xc4]
call fcn.00409830
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.00409830
mov ecx, dword [ebp - 0x60]
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
push ecx
cmovae eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x28]
push eax
call fcn.00409ab0
push 3
push 0x571bec
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0xc4]
cmp dword [ebp - 0xb0], 0x10
lea ecx, [ebp - 0x28]
push dword [ebp - 0xb4]
cmovae eax, dword [ebp - 0xc4]
push eax
call fcn.00409bf0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x2c
call fcn.00409830
push 0
push 0x56ffcd
lea ecx, [ebp - 0x28]
call fcn.00409bf0
push 5
push str.ation
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1a0]
push 0xb
push str.romeApplic
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1b8]
push 7
push str.ogleCh
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
call fcn.00409ab0
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 0x33
push eax
lea edx, [ebp - 0x1b8]
lea ecx, [ebp - 0x230]
call fcn.00409da0
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x34
push ecx
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.00409da0
add esp, 8
mov byte [ebp - 4], 0x35
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x436c64
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00409bf0
lea ecx, [ebp - 0x1d0]
call fcn.00409830
lea ecx, [ebp - 0x230]
call fcn.00409830
lea ecx, [ebp - 0x1b8]
call fcn.00409830
lea ecx, [ebp - 0x1a0]
call fcn.00409830
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x2c
call fcn.00409830
push 7
push 0x571c0c
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
call fcn.00409ab0
mov esi, dword [ebp - 0xc8]
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x36
lea eax, [esi + 0x1ac]
push eax
call fcn.00409940
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2a8]
push 8
push 0x571c14
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
call fcn.00409ab0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x290]
call fcn.00409940
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x278]
push 7
push 0x571c20
mov dword [ebp - 0xa4], 3
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
call fcn.00409ab0
push 0x59a848
lea ecx, [ebp - 0x260]
mov dword [ebp - 4], 0x3a
call fcn.00409940
sub esp, 8
mov dword [ebp - 4], 0x3b
lea eax, [ebp - 0x248]
mov dword [ebp - 0xa4], 0xf
mov ecx, esp
lea edx, [ebp - 0x2d8]
push eax
push edx
call fcn.00419d30
mov ecx, dword [esi + 0x5c]
push 0xc
call fcn.0044d0b0
push fcn.0040e2f0
push 3
push 0x30
lea eax, [ebp - 0x2d8]
mov dword [ebp - 4], 0x2c
push eax
call fcn.0051510b
mov edi, 7
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
call fcn.00409830
jmp 0x436e02
mov esi, dword [ebp - 0xc8]
sub esp, 0x18
mov ecx, esp
push 0xc
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x571c28
mov byte [ecx], 0
call fcn.00409ab0
lea ecx, [ebp - 0x88]
call fcn.004d8190
add esp, 0x18
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xf8]
push 3
push 0x571c38
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x110]
push 8
push str.ataDefa
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x128]
push 5
push str.ser_D
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x140]
push 4
push str.meU
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x158]
push 8
push str.gleChro
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x170]
push 4
push str.Goo
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x88]
cmp dword [ebp - 0x74], 0x10
push dword [ebp - 0x78]
cmovae eax, dword [ebp - 0x88]
push eax
push ecx
lea ecx, [ebp - 0x170]
call fcn.0040a1a0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb4], xmm0
or edi, 0x800000
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0xa4], edi
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x43
push eax
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x200]
call fcn.00409da0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x44
push ecx
mov edx, eax
lea ecx, [ebp - 0x188]
call fcn.00409da0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x45
push ecx
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.00409da0
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x46
push ecx
mov edx, eax
lea ecx, [ebp - 0x1b8]
call fcn.00409da0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x47
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.00409da0
add esp, 0x14
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x1a4]
cmp edx, 0x10
jb 0x43707f
mov ecx, dword [ebp - 0x1b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437075
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b70
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x18c]
cmp edx, 0x10
jb 0x4370d8
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4370ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b75
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x174]
cmp edx, 0x10
jb 0x437131
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437127
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b7a
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x1ec]
cmp edx, 0x10
jb 0x43718a
mov ecx, dword [ebp - 0x200]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437180
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b7f
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0xb0]
cmp edx, 0x10
jb 0x4371e3
mov ecx, dword [ebp - 0xc4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4371d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b84
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x43723c
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437232
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b89
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0x144]
cmp edx, 0x10
jb 0x437295
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43728b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b8e
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0x12c]
cmp edx, 0x10
jb 0x4372ee
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4372e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b93
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
mov byte [ebp - 4], 0x51
mov edx, dword [ebp - 0x114]
cmp edx, 0x10
jb 0x437347
mov ecx, dword [ebp - 0x128]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43733d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b98
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
mov byte [ebp - 4], 0x52
mov edx, dword [ebp - 0xfc]
cmp edx, 0x10
jb 0x4373a0
mov ecx, dword [ebp - 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437396
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437b9d
push edx
push ecx
call fcn.005150f8
add esp, 8
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0xe4]
cmp edx, 0x10
jb 0x4373f9
mov ecx, dword [ebp - 0xf8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4373ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437ba2
push edx
push ecx
call fcn.005150f8
add esp, 8
lea ecx, [esi + 0x1c4]
mov dword [ebp - 0xe8], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
mov dword [ebp - 0xa8], ecx
cmp ecx, eax
je 0x43743e
cmp dword [ebp - 0x14], 0x10
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00409ab0
lea ecx, [esi + 0x1c4]
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.00409940
cmp dword [ebp - 0x1d4], 0x10
lea eax, [ebp - 0x1e8]
cmovae eax, dword [ebp - 0x1e8]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesA]
mov edx, dword [ebp - 0x1d4]
cmp eax, 0xffffffff
setne al
mov byte [ebp - 0xa9], al
cmp edx, 0x10
jb 0x4374b1
mov ecx, dword [ebp - 0x1e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4374a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437ba7
push edx
push ecx
call fcn.005150f8
mov al, byte [ebp - 0xa9]
add esp, 8
test al, al
jne 0x437793
push 7
push 0x571c6c
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], al
call fcn.00409ab0
lea eax, [esi + 0x1ac]
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00409940
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x2d8]
or dword [ebp - 0xa4], 0x10
push 5
push 0x571c80
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
call fcn.00409ab0
mov dword [ebp - 4], 0x56
lea ecx, [ebp - 0x2c0]
push 9
push 0x571c74
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
call fcn.00409ab0
mov dword [ebp - 4], 0x57
lea ecx, [ebp - 0x2a8]
mov eax, edi
mov dword [ebp - 0x298], 0
push 4
or eax, 0x30
mov dword [ebp - 0x294], 0xf
push 0x571c88
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0x2a8], 0
call fcn.00409ab0
mov dword [ebp - 4], 0x58
lea ecx, [ebp - 0x290]
mov esi, dword [ebp - 0xa8]
push esi
call fcn.00409940
sub esp, 0x18
mov dword [ebp - 4], 0x59
mov eax, edi
mov ecx, esp
or eax, 0x70
mov edx, esi
mov dword [ebp - 0xa4], eax
push 0x571c90
call fcn.00409c80
add esp, 4
lea ecx, [ebp - 0x1e8]
call fcn.004d3d90
add esp, 0x18
push eax
push 0x571c98
mov ecx, edi
mov dword [ebp - 4], 0x5a
or ecx, 0xf0
sub esp, 0x18
mov dword [ebp - 0xa4], ecx
mov edx, esi
mov ecx, esp
push 0x571ca0
call fcn.00409c80
add esp, 4
lea ecx, [ebp - 0x248]
call fcn.004d3d90
add esp, 0x18
mov ecx, edi
mov dword [ebp - 4], 0x5b
or ecx, 0x1f0
mov edx, eax
mov dword [ebp - 0xa4], ecx
lea ecx, [ebp - 0x230]
call fcn.00425720
add esp, 4
mov ecx, edi
mov dword [ebp - 4], 0x5c
or ecx, 0x3f0
mov edx, eax
mov dword [ebp - 0xa4], ecx
lea ecx, [ebp - 0x1d0]
call fcn.00409da0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x5d
mov ecx, edi
or ecx, 0x7f0
mov dword [ebp - 0x268], 0
push 4
mov dword [ebp - 0xa4], ecx
lea ecx, [ebp - 0x278]
push 0x571cac
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
call fcn.00409ab0
mov dword [ebp - 0x250], 0
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x24c], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x260], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x250], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
call fcn.00409830
lea ecx, [ebp - 0x230]
call fcn.00409830
lea ecx, [ebp - 0x248]
call fcn.00409830
and edi, 0xfffff87f
lea ecx, [ebp - 0x1e8]
or edi, 0x870
call fcn.00409830
sub esp, 8
mov dword [ebp - 4], 0x5e
lea eax, [ebp - 0x248]
mov ecx, esp
lea edx, [ebp - 0x308]
or edi, 0x1000
mov dword [ebp - 0xa4], edi
push eax
push edx
call fcn.00419d30
mov edi, dword [ebp - 0xc8]
push 0x28
mov ecx, dword [edi + 0x5c]
call fcn.0044d0b0
push fcn.0040e2f0
push 4
push 0x30
lea eax, [ebp - 0x308]
mov dword [ebp - 4], 0x53
push eax
call fcn.0051510b
mov esi, 0xfffffffe
jmp 0x437a04
sub esp, 0x18
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.00409940
call fcn.0040cae0
add esp, 0x18
test al, al
jne 0x4377b5
or esi, 0xffffffff
jmp 0x437a04
push 3
push 0x571cb4
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
call fcn.00409ab0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x230]
or dword [ebp - 0xa4], 0x2000
push 3
push 0x571cb8
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.00409ab0
mov dword [ebp - 4], 0x60
lea ecx, [ebp - 0x248]
mov eax, edi
mov dword [ebp - 0x238], 0
push 1
or eax, 0x6000
mov dword [ebp - 0x234], 0xf
push 0x571cbc
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0x248], 0
call fcn.00409ab0
mov eax, edi
mov dword [ebp - 4], 0x61
or eax, 0xe000
lea edx, [ebp - 0x248]
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x398]
lea eax, [ebp - 0x230]
push eax
call fcn.00409da0
mov ecx, edi
mov dword [ebp - 4], 0x62
or ecx, 0x1e000
mov edx, eax
mov dword [ebp - 0xa4], ecx
lea ecx, [ebp - 0x1d0]
push ecx
lea ecx, [ebp - 0x380]
call fcn.00409da0
add esp, 8
mov ecx, edi
mov dword [ebp - 4], 0x63
or ecx, 0x3e000
mov dword [ebp - 0xa4], ecx
lea ecx, [esi + 0x1ac]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00425e70
lea ecx, [ebp - 0x380]
call fcn.00409830
lea ecx, [ebp - 0x398]
call fcn.00409830
lea ecx, [ebp - 0x248]
call fcn.00409830
lea ecx, [ebp - 0x230]
call fcn.00409830
and edi, 0xfffc1fff
mov dword [ebp - 4], 0x69
or edi, 0x40000
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0xa4], edi
call fcn.00409830
mov dword [ebp - 0x268], 0
push 4
push 0x571cc0
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
call fcn.00409ab0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x6a
push eax
lea ecx, [ebp - 0x260]
call fcn.00409940
sub esp, 8
mov dword [ebp - 4], 0x6b
lea eax, [ebp - 0x248]
mov ecx, esp
lea edx, [ebp - 0x2a8]
or edi, 0x180000
mov dword [ebp - 0xa4], edi
push eax
push edx
call fcn.00419d30
mov ecx, dword [esi + 0x5c]
push 0xd
call fcn.0044d0b0
push fcn.0040e2f0
push 2
push 0x30
lea eax, [ebp - 0x2a8]
mov dword [ebp - 4], 0x53
push eax
call fcn.0051510b
lea ecx, [esi + 0x20c]
lea eax, [ebp - 0x58]
cmp ecx, eax
je 0x4379e0
cmp dword [ebp - 0x44], 0x10
push dword [ebp - 0x48]
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.00409ab0
mov eax, dword [esi]
mov esi, dword [eax + 0x28]
mov ecx, esi
call dword [0x55d39c]
mov edi, dword [ebp - 0xc8]
mov ecx, edi
call esi
mov esi, eax
test esi, esi
jne 0x437a04
mov byte [edi + 0xfc], 1
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x437a38
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437a2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437bac
push edx
push ecx
call fcn.005150f8
add esp, 8
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x437a6f
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437a65
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437bb1
push edx
push ecx
call fcn.005150f8
add esp, 8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp edx, 0x10
jb 0x437ab8
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x437aae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x437bb6
push edx
push ecx
call fcn.005150f8
add esp, 8
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0x10
jb 0x437ae5
inc ecx
push ecx
push dword [ebp - 0xa0]
call fcn.00409f90
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00514e1d
mov esp, ebp
pop ebp
ret
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
call fcn.00519e03
int3