Function at 0x406356
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x483d2e
mov eax, dword fs:[0]
push eax
mov eax, 0x2c68
call fcn.0046e3f0
mov eax, dword [0x49f390]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2c14], edi
mov dword [edi], 0x48bf74
lea ebx, [edi + 4]
call fcn.0040e65b
lea ecx, [ebx + 4]
mov dword [ecx], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
xor ecx, ecx
mov dword [ebx + 8], ecx
lea eax, [edi + 0x70]
push 7
mov dword [ebp - 4], ecx
pop edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2bf0], eax
mov word [eax + 4], cx
lea eax, [edi + 0x94]
mov dword [eax + 0x18], edx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x2c1c], eax
mov word [eax + 4], cx
lea eax, [edi + 0xe8]
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c30], eax
call fcn.0045b500
lea eax, [edi + 0x160]
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c38], eax
call fcn.0045b500
lea eax, [edi + 0x1d8]
push eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c40], eax
call fcn.0045b500
lea eax, [edi + 0x250]
push eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x2c48], eax
call fcn.0045b500
lea eax, [edi + 0x2c8]
push eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c50], eax
call fcn.0045b814
lea eax, [edi + 0x338]
push eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c58], eax
call fcn.0045b814
lea eax, [edi + 0x3a8]
push eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c28], eax
call fcn.0045b814
lea eax, [edi + 0x418]
push eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c54], eax
call fcn.0045b814
mov byte [ebp - 4], 0xa
lea eax, [edi + 0x488]
push eax
mov dword [ebp - 0x2c2c], eax
call fcn.0045ba3f
lea esi, [edi + 0x508]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2c4c], esi
call fcn.0045bd85
lea esi, [edi + 0x544]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2c34], esi
call fcn.0045bd85
lea esi, [edi + 0x580]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x2c5c], esi
call fcn.0045bd85
lea esi, [edi + 0x5bc]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2c3c], esi
call fcn.0045bd85
lea esi, [edi + 0x5f8]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2c70], esi
call fcn.0045bd85
lea esi, [edi + 0x634]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c44], esi
call fcn.0045bd85
lea esi, [edi + 0x670]
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2c68], esi
call fcn.0045bd85
lea eax, [edi + 0x6ac]
mov byte [ebp - 4], 0x12
push eax
mov dword [ebp - 0x2c20], eax
call fcn.0045b500
mov byte [ebp - 4], 0x13
call fcn.0042a7b9
and dword [edi + 0x738], 0
mov dword [edi + 0x734], eax
mov eax, 0x488340
lea ecx, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000000
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x48831c
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000001
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call fcn.0040d694
push 0
mov byte [ebp - 4], 0x14
push 1
lea esi, [ebp - 0x2c10]
call fcn.00404aed
mov eax, 0x4882f4
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000002
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x17
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x4882dc
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000003
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x4882b0
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000004
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x19
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x48b438
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000050
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x48b464
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000060
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x48826c
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000005
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1c
call fcn.0040d694
push 0
push 1
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, 0x488294
lea ecx, [ebp - 0x2c10]
call fcn.004047cc
mov dword [ebp - 0x2bf4], 0x80000006
lea eax, [ebp - 0x2c10]
push eax
lea edi, [ebp - 0x20]
mov byte [ebp - 4], 0x1d
call fcn.0040d694
xor ebx, ebx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x2c10]
mov byte [ebp - 4], 0x14
call fcn.00404aed
push 0x103
lea eax, [ebp - 0x3bc]
push eax
push ebx
mov word [ebp - 0x1b6], bx
call dword [0x485320]
mov esi, dword [0x485034]
lea eax, [ebp - 0x2c60]
push eax
push 0x20006
push ebx
push 0x48b498
push 0x80000001
call esi
cmp eax, ebx
jne 0x406817
push 4
lea eax, [ebp - 0x2be0]
push eax
push 4
push ebx
lea eax, [ebp - 0x3bc]
push eax
push dword [ebp - 0x2c60]
mov dword [ebp - 0x2be0], edi
call dword [0x485020]
mov edi, dword [ebp - 0x2c14]
push 0x7fe
lea eax, [ebp - 0xbba]
push ebx
push eax
mov byte [edi + 0x768], 1
mov byte [edi + 0x769], 1
mov byte [edi + 0x748], 1
mov dword [edi + 0x778], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ebx
mov dword [edi + 0x34], ebx
mov dword [edi + 0x38], ebx
mov dword [edi + 0x3c], ebx
mov dword [edi + 0x40], ebx
mov dword [edi + 0x44], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0x5c], ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x64], ebx
mov dword [edi + 0x68], ebx
mov dword [edi + 0x6c], ebx
mov dword [edi + 0x8c], ebx
mov dword [edi + 0x90], ebx
mov dword [edi + 0x724], ebx
mov dword [edi + 0x728], ebx
mov dword [edi + 0x72c], ebx
mov byte [edi + 0x76a], bl
mov dword [edi + 0x76c], ebx
mov dword [edi + 0x770], ebx
mov dword [edi + 0x774], ebx
mov byte [edi + 0x749], 1
mov byte [edi + 0x73e], bl
mov word [ebp - 0xbbc], bx
call fcn.0045f790
add esp, 0xc
lea eax, [ebp - 0x2be8]
push eax
push 0x20019
push ebx
push 0x48b558
push 0x80000002
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406a17
mov esi, dword [0x48501c]
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48b590
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2be4], ebx
mov dword [ebp - 0x2bdc], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406a0b
cmp dword [ebp - 0x2be4], 1
jne 0x406a0b
cmp dword [ebp - 0x2bdc], 2
jb 0x406a0b
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48b590
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
lea eax, [ebp - 0xbbc]
push eax
call dword [0x48540c]
test eax, eax
je 0x406a0b
lea eax, [ebp - 0x2bdc]
push eax
push ebx
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48b5a8
push dword [ebp - 0x2be8]
mov byte [edi + 0x73e], 1
call esi
cmp eax, ebx
mov dword [ebp - 0x2be0], eax
jne 0x406a0b
cmp dword [ebp - 0x2be4], 1
jne 0x406a0b
cmp dword [ebp - 0x2bdc], 2
jb 0x406a0b
lea eax, [ebp - 0x2bdc]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x2be4]
push eax
push ebx
push 0x48b5a8
push dword [ebp - 0x2be8]
mov dword [ebp - 0x2bdc], 0x400
call esi
mov dword [ebp - 0x2be0], eax
push dword [ebp - 0x2be8]
call dword [0x485024]
cmp byte [edi + 0x73e], bl
je 0x406a3a
cmp dword [ebp - 0x2be0], ebx
jne 0x406a3a
mov esi, dword [ebp - 0x2bf0]
lea eax, [ebp - 0xbbc]
call fcn.00404a81
jmp 0x406a79
mov eax, dword [0x4aac4c]
cmp byte [eax + 0x102], bl
push 1
lea eax, [ebp - 0x2bbc]
je 0x406a53
push 0x2a
jmp 0x406a55
push 0x26
push eax
push ebx
call dword [0x4853fc]
mov esi, dword [ebp - 0x2bf0]
lea eax, [ebp - 0x2bbc]
call fcn.00404a81
push 0x48b5c0
push esi
call fcn.0040516c
mov eax, dword [ebp - 0x2bf0]
push 0xffffffffffffffff
push dword [ebp - 0x2c1c]
xor ebx, ebx
call fcn.00404d23
push 0x48b5e8
push ebx
mov eax, dword [ebp + 8]
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push 0x190
push ebx
push ebx
push ebx
push 0xfffffffffffffff4
mov byte [edi + 0x73d], bl
mov dword [edi + 0x760], ebx
mov dword [edi + 0xb4], eax
mov dword [edi + 0xb8], ebx
mov dword [edi + 0x740], 0x128
mov dword [edi + 0x744], 0x210
call dword [0x48509c]
push 0xb99d7f
push 1
push ebx
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xdc], ebx
mov byte [edi + 0x73c], bl
mov dword [edi + 0x750], ebx
mov dword [edi + 0x754], ebx
mov dword [edi + 0x758], ebx
mov dword [edi + 0x75c], ebx
call dword [0x4850ac]
mov dword [edi + 0xc0], eax
cmp dword [0x4aaec0], 8
mov eax, dword [0x4aaeac]
jae 0x406b32
mov eax, 0x4aaeac
push eax
push 0x48b5f0
push 0x5a
push 0x4a19fc
call fcn.004052c5
add esp, 0x10
mov eax, edi
call fcn.00409490
push 0x74
call fcn.0040627f
pop ecx
push 0x30
mov dword [edi + 0x10], eax
call fcn.00460485
cmp eax, ebx
pop ecx
je 0x406b6e
mov esi, eax
call fcn.004054d2
jmp 0x406b70
xor eax, eax
push dword [edi + 0x10]
mov dword [edi + 0xc4], eax
push eax
call fcn.004057e6
mov esi, dword [edi + 0xc4]
mov eax, dword [esi + 0x18]
cmp eax, 0x20
jne 0x406b92
call fcn.004077d9
push 0x83
call fcn.0040627f
pop ecx
push 0x30
mov dword [edi + 0x14], eax
call fcn.00460485
cmp eax, ebx
pop ecx
je 0x406bb5
mov esi, eax
call fcn.004054d2
jmp 0x406bb7
xor eax, eax
push dword [edi + 0x14]
mov dword [edi + 0xc8], eax
push eax
call fcn.004057e6
mov esi, dword [edi + 0xc8]
cmp dword [esi + 0x18], 0x20
jne 0x406bd7
call fcn.004077d9
push 0x84
call fcn.0040627f
pop ecx
push 0x30
mov dword [edi + 0x18], eax
call fcn.00460485
cmp eax, ebx
pop ecx
je 0x406bfa
mov esi, eax
call fcn.004054d2
jmp 0x406bfc
xor eax, eax
push dword [edi + 0x18]
lea esi, [edi + 0xcc]
push eax
mov dword [esi], eax
call fcn.004057e6
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c1a
call fcn.004077d9
push 0x85
call fcn.0040627f
pop ecx
push 0x30
mov dword [edi + 0x1c], eax
call fcn.00460485
cmp eax, ebx
pop ecx
je 0x406c3d
mov esi, eax
call fcn.004054d2
jmp 0x406c3f
xor eax, eax
push dword [edi + 0x1c]
lea esi, [edi + 0xd0]
push eax
mov dword [esi], eax
call fcn.004057e6
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406c5d
call fcn.004077d9
push 0x9c
call fcn.0040627f
pop ecx
push 0x30
mov dword [edi + 0x20], eax
call fcn.00460485
cmp eax, ebx
pop ecx
je 0x406c80
mov esi, eax
call fcn.004054d2
jmp 0x406c82
xor eax, eax
push dword [edi + 0x20]
lea esi, [edi + 0xd4]
push eax
mov dword [esi], eax
call fcn.004057e6
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406ca0
call fcn.004077d9
mov eax, dword [edi + 0xc4]
mov ecx, dword [eax + 0x10]
mov edx, dword [edi + 0xc8]
mov edx, dword [edx + 0x10]
lea ecx, [edx + ecx + 1]
mov dword [edi + 0x740], ecx
mov eax, dword [eax + 0xc]
inc eax
push 0x7f
mov dword [edi + 0x744], eax
call fcn.0040627f
pop ecx
push 0x30
mov dword [edi + 0x90], eax
call fcn.00460485
cmp eax, ebx
pop ecx
je 0x406ce9
mov esi, eax
call fcn.004054d2
jmp 0x406ceb
xor eax, eax
push dword [edi + 0x90]
lea esi, [edi + 0xd8]
push eax
mov dword [esi], eax
call fcn.004057e6
mov esi, dword [esi]
cmp dword [esi + 0x18], 0x20
jne 0x406d0c
call fcn.004077d9
push 0x75
call fcn.0040627f
pop ecx
push 0x9b
mov dword [edi + 0x44], eax
call fcn.0040627f
pop ecx
push 0x9d
mov dword [edi + 0x48], eax
call fcn.0040627f
pop ecx
push eax
push dword [edi + 0x48]
mov dword [edi + 0x4c], eax
push dword [edi + 0x44]
mov edi, dword [ebp - 0x2c2c]
call fcn.0045bb1e
mov dword [edi + 0x1c], ebx
mov ebx, dword [ebp - 0x2c14]
mov dword [edi + 0x20], 0x118
mov eax, dword [ebx + 0x744]
push 0x78
mov dword [ebx + 0x4c8], eax
mov byte [ebx + 0x4c0], 0
call fcn.0040627f
mov esi, dword [ebp - 0x2c30]
pop ecx
push 4
pop edi
push edi
mov dword [ebx + 0x50], eax
push eax
mov eax, esi
call fcn.0045b5d5
mov eax, dword [ebx + 0x744]
sub eax, 0x1f
push 0x79
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.0040627f
mov esi, dword [ebp - 0x2c38]
pop ecx
push edi
mov dword [ebx + 0x54], eax
push eax
mov eax, esi
call fcn.0045b5d5
mov eax, dword [ebx + 0x744]
sub eax, 0x3e
push 0x94
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], 0xa
call fcn.0040627f
pop ecx
push 0x93
mov dword [ebx + 0x2c], eax
call fcn.0040627f
pop ecx
push 0x95
mov dword [ebx + 0x30], eax
call fcn.0040627f
pop ecx
push 0x96
mov dword [ebx + 0x34], eax
call fcn.0040627f
pop ecx
push 0x97
mov dword [ebx + 0x38], eax
call fcn.0040627f
cmp byte [ebx + 0x73e], 0
pop ecx
mov dword [ebx + 0x3c], eax
je 0x406e19
mov eax, dword [ebx + 0x38]
jmp 0x406e1c
mov eax, dword [ebx + 0x30]
mov esi, dword [ebp - 0x2c40]
push edi
mov dword [ebx + 0x40], eax
push eax
mov eax, esi
call fcn.0045b5d5
push 0x9a
mov dword [esi + 0x2c], 0x1a4
mov dword [esi + 0x30], 0xb9
call fcn.0040627f
pop ecx
push 0x98
mov dword [ebx + 0x58], eax
call fcn.0040627f
pop ecx
push 0x99
mov dword [ebx + 0x5c], eax
call fcn.0040627f
pop ecx
push 0x80
mov dword [ebx + 0x60], eax
call fcn.0040627f
mov esi, dword [ebp - 0x2c48]
pop ecx
push edi
mov dword [ebx + 0x8c], eax
push eax
mov eax, esi
call fcn.0045b5d5
push 0x7e
mov dword [esi + 0x2c], 0x16c
mov dword [esi + 0x30], 0x121
call fcn.0040627f
pop ecx
push 0x7d
mov dword [ebx + 0x68], eax
call fcn.0040627f
pop ecx
push 0x7b
mov dword [ebx + 0x6c], eax
call fcn.0040627f
mov edi, dword [ebp - 0x2c50]
pop ecx
push eax
mov dword [ebx + 0x64], eax
call fcn.0045b9c9
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x26
mov dword [edi + 0x60], 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b5f8
lea ecx, [ebp - 0x30]
call fcn.004047cc
lea eax, [ebx + 0x2cc]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1e
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, edi
call fcn.0045ba2b
mov dword [ebx + 0x2ec], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c58]
call fcn.0045b9c9
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
add eax, 0xf0
mov dword [edi + 0x60], 0xe6
mov dword [edi + 0x64], ecx
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b60c
lea ecx, [ebp - 0x30]
call fcn.004047cc
lea eax, [ebx + 0x33c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, edi
call fcn.0045ba2b
mov dword [ebx + 0x35c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c28]
call fcn.0045b9c9
mov eax, dword [edi + 0x68]
mov ecx, 0x14f
mov dword [edi + 0x64], ecx
add eax, 0x1c8
mov dword [edi + 0x60], 0x1be
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b624
lea ecx, [ebp - 0x30]
call fcn.004047cc
lea eax, [ebx + 0x3ac]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, edi
call fcn.0045ba2b
mov dword [ebx + 0x3cc], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
push dword [ebx + 0x64]
mov edi, dword [ebp - 0x2c54]
call fcn.0045b9c9
mov eax, dword [edi + 0x68]
mov ecx, 0x158
mov dword [edi + 0x64], ecx
add eax, 0x1d8
mov dword [edi + 0x60], 0x1ce
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
mov eax, 0x48b634
lea ecx, [ebp - 0x30]
call fcn.004047cc
lea eax, [ebx + 0x41c]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov eax, edi
call fcn.0045ba2b
mov dword [ebx + 0x43c], 0x464646
mov byte [edi + 0x3c], 0
mov byte [edi + 0x5c], 0
mov byte [ebx + 0x475], 1
mov byte [ebx + 0x325], 1
mov byte [ebx + 0x395], 1
mov eax, 0x48b650
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x405], 1
call fcn.004047cc
mov edi, dword [ebp - 0x2c4c]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x22
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045bdea
mov dword [ebx + 0x528], 0xc36602
mov dword [edi + 0x24], 0x98
mov dword [edi + 0x28], esi
mov eax, 0x48b65c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x540], 0
call fcn.004047cc
mov edi, dword [ebp - 0x2c34]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045bdea
mov dword [ebx + 0x564], 0xc36602
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48b664
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x57c], 0
call fcn.004047cc
mov edi, dword [ebp - 0x2c5c]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x24
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
mov esi, 0x190
push esi
push 0xfffffffffffffff4
call fcn.0045bdea
mov dword [ebx + 0x5a0], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], esi
mov eax, 0x48b67c
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x5b8], 0
call fcn.004047cc
mov edi, dword [ebp - 0x2c3c]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x25
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
push 0x190
push 0xfffffffffffffff4
call fcn.0045bdea
mov dword [ebx + 0x5dc], 0x464646
mov eax, 0x48b68c
lea ecx, [ebp - 0x30]
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
call fcn.004047cc
mov edi, dword [ebp - 0x2c44]
push edi
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
push 0x190
push 0xfffffffffffffff2
call fcn.0045bdea
mov dword [ebx + 0x654], 0x464646
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48b6a4
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x66c], 0
call fcn.004047cc
mov byte [ebp - 4], 0x27
mov edi, dword [ebp - 0x2c68]
push edi
lea eax, [ebp - 0x30]
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
push 0x190
push 0xfffffffffffffff4
call fcn.0045bdea
mov dword [ebx + 0x690], 0x9f
mov dword [edi + 0x24], 0x1c
mov dword [edi + 0x28], 0x127
mov eax, 0x48b6bc
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x6a8], 0
call fcn.004047cc
mov byte [ebp - 4], 0x28
mov edi, dword [ebp - 0x2c70]
push edi
lea eax, [ebp - 0x30]
call fcn.0045bdd8
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
push 0x190
push 0xfffffffffffffff4
call fcn.0045bdea
mov dword [ebx + 0x618], 0x9f
mov dword [edi + 0x24], 0x1b4
mov dword [edi + 0x28], 0x120
push 0x91
mov byte [ebx + 0x630], 0
call fcn.0040627f
pop ecx
push 0x92
mov dword [ebx + 0x24], eax
call fcn.0040627f
mov esi, dword [ebp - 0x2c20]
pop ecx
push 4
push dword [ebx + 0x24]
mov dword [ebx + 0x28], eax
mov eax, esi
call fcn.0045b5d5
and dword [ebp - 0x2c18], 0
lea eax, [ebp - 0x2c18]
push eax
mov dword [esi + 0x2c], 0x25f
mov dword [esi + 0x30], 0x127
call dword [0x485374]
push eax
call dword [0x4853f8]
xor esi, esi
inc esi
cmp dword [ebp - 0x2c18], esi
mov edi, eax
jle 0x40740b
push 0x48b6f4
push dword [edi + esi*4]
call fcn.004638ef
test eax, eax
pop ecx
pop ecx
jne 0x407394
mov byte [ebx + 0x768], al
mov byte [ebx + 0x73d], 1
jmp 0x4073fe
push 0x48b6fc
push dword [edi + esi*4]
call fcn.004638ef
test eax, eax
pop ecx
pop ecx
jne 0x4073af
mov byte [ebx + 0x769], al
jmp 0x4073fe
push 0x48b718
push dword [edi + esi*4]
call fcn.004638ef
test eax, eax
pop ecx
pop ecx
jne 0x4073ca
mov byte [ebx + 0x325], al
jmp 0x4073fe
push 0x48b738
push dword [edi + esi*4]
call fcn.004638ef
test eax, eax
pop ecx
pop ecx
jne 0x4073e5
mov byte [ebx + 0x395], al
jmp 0x4073fe
push 0x48b750
push dword [edi + esi*4]
call fcn.004638ef
test eax, eax
pop ecx
pop ecx
jne 0x4073fe
mov byte [ebx + 0x748], al
inc esi
cmp esi, dword [ebp - 0x2c18]
jl 0x407372
cmp byte [ebx + 0x768], 0
jne 0x4074a5
mov edi, dword [ebp - 0x2bf0]
cmp dword [edi + 0x18], 8
jb 0x407429
mov eax, dword [edi + 4]
jmp 0x40742c
lea eax, [edi + 4]
lea ecx, [ebp - 0x2c24]
push ecx
lea ecx, [ebp - 0x2c74]
push ecx
lea ecx, [ebp - 0x2c6c]
push ecx
push eax
call dword [0x4850f0]
test eax, eax
je 0x407471
cmp dword [ebp - 0x2c20], 0
ja 0x4074a5
jb 0x407463
cmp dword [ebp - 0x2c24], 0x19000000
jae 0x4074a5
lea ecx, [ebp - 0x30]
call fcn.004062f5
mov byte [ebp - 4], 0x29
jmp 0x40747d
lea ecx, [ebp - 0x30]
call fcn.004062f5
mov byte [ebp - 4], 0x2a
push 0xffffffffffffffff
push edi
xor ebx, ebx
call fcn.00404d23
push ebx
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.00404aed
push 0xffffffffffffffff
push dword [ebp - 0x2c1c]
mov eax, edi
call fcn.00404d23
push 0xff
lea eax, [ebp - 0x1b3]
push 0
push eax
mov byte [ebp - 0x1b4], 0
call fcn.0045f790
xor eax, eax
mov byte [ebp - 0x28], 0
lea edi, [ebp - 0x27]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x1b4]
add esp, 0xc
push eax
lea ecx, [ebp - 0x28]
call int.00442e03
pop ecx
lea ebx, [ebp - 0x28]
lea ecx, [ebp - 0x2bd8]
call fcn.0041c18f
push 0x100
xor ebx, ebx
lea eax, [ebp - 0x1b4]
push ebx
push eax
mov byte [ebp - 4], 0x2b
call fcn.0045f790
add esp, 0xc
push 0x7e
lea eax, [ebp - 0xb2]
push ebx
push eax
mov word [ebp - 0xb4], bx
call fcn.0045f790
add esp, 0xc
push 0xfde9
lea eax, [ebp - 0xb4]
push 0x40
push eax
lea edi, [ebp - 0x2bd8]
call 0x44da85
add esp, 0xc
push 0x48b764
lea eax, [ebp - 0x2bec]
push eax
call fcn.00404753
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2bec]
push eax
mov byte [ebp - 4], 0x2c
call fcn.0040d1b9
push 0x48b774
lea eax, [ebp - 0x2bec]
push eax
call fcn.0040d1b9
push dword [ebp - 0x2bec]
push ebx
push 0x48b7ac
call dword [0x485524]
mov esi, dword [ebp - 0x2c14]
mov ecx, esi
call fcn.00408013
mov ecx, esi
call fcn.00407867
call dword [0x485208]
mov dword [esi + 0x764], eax
mov eax, dword [ebp - 0x2bec]
add eax, 0xfffffff0
call fcn.00401160
push ebx
push 1
mov ecx, edi
call fcn.00401a8c
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045f105
leave
ret 4