Function at 0x427220
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46b190
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push esi
push edi
mov eax, dword [0x4a01d8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xor esi, esi
cmp dword [edi + 0x168], esi
je 0x428700
lea ecx, [ebp - 0x20]
call fcn.00442670
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x24]
call fcn.00442670
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00442670
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.00442670
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00404070
mov byte [ebp - 4], 4
push esi
lea ecx, [ebp - 0x20]
call fcn.0044c4b0
test eax, eax
je 0x4286c1
push esi
lea ecx, [ebp - 0x24]
call fcn.0044c4b0
test eax, eax
je 0x4286c1
push esi
lea ecx, [ebp - 0x18]
call fcn.0044c4b0
test eax, eax
je 0x4286c1
push esi
lea ecx, [ebp - 0x28]
call fcn.0044c4b0
test eax, eax
je 0x4286c1
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x10], esi
mov bl, 5
mov byte [ebp - 4], bl
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push esi
lea edx, [ebp - 0x14]
push edx
push 0x2bf3
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x38], esi
mov byte [ebp - 4], 6
push 0x481e50
lea ecx, [ebp - 0x34]
call fcn.00406ec0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x14]
push esi
push esi
push ecx
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x34]
mov esi, dword [0x4765f4]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x38]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2bf4
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 8
push 0x481e74
lea ecx, [ebp - 0x38]
call fcn.00406ec0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x38]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x3c]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2c30
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0xa
push 0x482100
lea ecx, [ebp - 0x3c]
call fcn.00406ec0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x3c]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x40]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2c31
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x44], 0
mov byte [ebp - 4], 0xc
push 0x482128
lea ecx, [ebp - 0x40]
call fcn.00406ec0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x40]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x44]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2bf5
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0xe
push 0x481e98
lea ecx, [ebp - 0x44]
call fcn.00406ec0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x44]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x48]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2bf6
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x4c], 0
mov byte [ebp - 4], 0x10
push 0x481eb8
lea ecx, [ebp - 0x48]
call fcn.00406ec0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x48]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x4c]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
lea ecx, [ebp - 0x24]
call fcn.0044c800
xor eax, eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x13
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x30]
push edx
push 0
push 0
push 0x2bf7
push eax
mov eax, dword [ecx + 0x30]
call eax
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x2c]
push edx
push 0
push 0
push 0x2bf8
push eax
mov eax, dword [ecx + 0x30]
call eax
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x14]
push edx
push 0x2bf9
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x14
push 0x481edc
lea ecx, [ebp - 0x4c]
call fcn.00406ec0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1c]
push 0
push 0
push ecx
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x4c]
push edx
call esi
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x50]
push eax
call esi
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x16
push 0x481f0c
lea ecx, [ebp - 0x50]
call fcn.00406ec0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1c]
push 0
push 0
push ecx
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x50]
push edx
call esi
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x54]
push eax
call esi
mov dword [ebp - 0x58], 0
mov byte [ebp - 4], 0x18
push 0x481f3c
lea ecx, [ebp - 0x54]
call fcn.00406ec0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x24]
call fcn.0044c6c0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x54]
push edx
call esi
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x58]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
push 0xaa
lea ecx, [ebp - 0x24]
call fcn.0044c5b0
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0x1a
push 0x481d90
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x54]
call fcn.00406ec0
mov byte [ebp - 4], 0x1b
push 0x481d90
lea ecx, [ebp - 0x58]
call fcn.00406ec0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x24]
push ecx
push 0
push 1
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x58]
push edx
call esi
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x54]
push eax
call esi
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x5c]
push ecx
call esi
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x2c]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x30]
push eax
call esi
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x14]
push edx
push 0x2bfa
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x60], 0
mov byte [ebp - 4], 0x1d
push 0x481f68
lea ecx, [ebp - 0x5c]
call fcn.00406ec0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
push 0
push ecx
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x5c]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x60]
push ecx
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x2c0d
push eax
call edx
mov dword [ebp - 0x64], 0
mov byte [ebp - 4], 0x1f
push 0x481fb8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
push 0
push eax
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x60]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x64]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x14]
push edx
push 0x2c22
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x68], 0
mov byte [ebp - 4], 0x21
push 0x4820cc
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x68]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
lea ecx, [ebp - 0x18]
call fcn.0044c800
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
mov eax, dword [ecx + 0x40]
call eax
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x14]
push edx
push 0x2c25
push eax
mov eax, dword [ecx + 0x30]
call eax
cmp dword [ebp - 0x1c], 0
je 0x427913
cmp dword [ebp - 0x58], 1
jne 0x427913
mov eax, 0x480d20
jmp 0x427915
xor eax, eax
push eax
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x23
push 0x481ff0
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x24
push 0x481ff0
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x25
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
not ecx
and ecx, 0x480d20
push ecx
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x26
push 0x48206c
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x27
push 0x48206c
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x28
push 0
push 0
push 1
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x64]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x60]
push ecx
call esi
cmp dword [ebp - 0x1c], 0
je 0x427a15
cmp dword [ebp - 0x58], 2
jne 0x427a15
mov eax, 0x480d20
jmp 0x427a17
xor eax, eax
push eax
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x29
push 0x482034
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x2a
push 0x482034
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x2b
push 0
push 0
push 1
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x64]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x60]
push ecx
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
lea ecx, [ebp - 0x18]
call fcn.0044c800
mov eax, dword [edi + 0x168]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x2c26
push eax
call edx
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
and eax, 0x480d20
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x2c
push 0x48214c
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x64]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x14]
push edx
push 0x2c29
push eax
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
and ecx, 0x480d20
push ecx
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x2e
push 0x48217c
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x14]
push 0
push 0
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x68]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x64]
push ecx
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x2c2a
push eax
call edx
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
and eax, 0x480d20
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x30
push 0x4821b0
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x64]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x14]
push edx
push 0x2c35
push eax
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
and ecx, 0x480d20
push ecx
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x32
push 0x4821dc
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x14]
push 0
push 0
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x68]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x64]
push ecx
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
cmp dword [edi + 0x154], 0
je 0x42805e
lea ecx, [ebp - 0x18]
call fcn.0044c800
mov eax, dword [edi + 0x154]
lea ecx, [ebp - 0x2c]
push ecx
push 0x482e74
mov dword [ebp - 0x2c], 0
mov edx, dword [eax]
mov edx, dword [edx + 0x1c]
push 0x4806e8
push eax
call edx
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2bf4
push eax
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
not ecx
and ecx, 0x480d20
push ecx
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x34
push 0x482210
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x35
push 0x482210
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x14]
push 0
push 0
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x68]
push eax
call esi
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x64]
push ecx
call esi
mov byte [ebp - 4], bl
mov edx, dword [ebp - 0x60]
push edx
call esi
mov eax, dword [ebp - 0x2c]
sub eax, 1
neg eax
sbb eax, eax
not eax
and eax, 0x480d20
push eax
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x37
push 0x48223c
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x38
push 0x48223c
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x64]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x60]
push ecx
call esi
xor edx, edx
cmp dword [ebp - 0x2c], 2
lea ecx, [ebp - 0x60]
setne dl
sub edx, 1
and edx, 0x480d20
push edx
call fcn.00406ec0
mov byte [ebp - 4], 0x3a
push 0x482260
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x3b
push 0x482260
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x14]
push 0
push 0
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
xor ecx, ecx
cmp dword [ebp - 0x2c], 4
setne cl
sub ecx, 1
and ecx, 0x480d20
push ecx
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x3d
push 0x482284
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x3e
push 0x482284
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x14]
push 0
push 0
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x68]
push eax
call esi
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x64]
push ecx
call esi
mov byte [ebp - 4], bl
mov edx, dword [ebp - 0x60]
push edx
call esi
lea ecx, [ebp - 0x18]
call fcn.0044c800
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2c1e
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0x40
push 0x4822c4
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x5c]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2c1f
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x42
push 0x4822e8
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x54]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
lea ecx, [ebp - 0x18]
call fcn.0044c800
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x44
push 0x4822a8
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x45
push 0x4822a8
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044c6c0
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x64]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x50]
push ecx
call esi
push 0x78
lea ecx, [ebp - 0x18]
call fcn.0044c5b0
push 0xaa
lea ecx, [ebp - 0x18]
call fcn.0044c5b0
mov dword [ebp - 0x60], 0
mov byte [ebp - 4], 0x47
push 0x481d7c
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x48
push 0x481d7c
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x18]
push edx
push 0
push 1
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x68]
push eax
call esi
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x64]
push ecx
call esi
mov byte [ebp - 4], bl
mov edx, dword [ebp - 0x60]
push edx
call esi
mov eax, dword [edi + 0x168]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0x2c2e
push eax
mov eax, dword [ecx + 0x30]
call eax
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 0x4a
push 0x48230c
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x14]
push 0
push 0
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x5c]
push eax
call esi
lea ecx, [ebp - 0x10]
call fcn.00417180
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0x4c
push 0x482340
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x4d
push 0x482340
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x4e
push 0
push 0
push 1
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x54]
push eax
call esi
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x4f
push 0x481c80
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x50
push 0x481c80
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x51
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x52
push 0x481cbc
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x53
push 0x481cbc
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x54
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.0044c6c0
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x52
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x55
push 0x481c98
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x56
push 0x481c98
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x57
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.0044c6c0
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x55
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x58
push 0x481d14
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x59
push 0x481d14
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x5a
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.0044c6c0
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x5b
push 0x481cd0
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x5c
push 0x481cd0
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x5d
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.0044c6c0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
lea ecx, [ebp - 0x28]
call fcn.0044c800
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x5e
push 0x481cec
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x5f
push 0x481cec
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x60
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
call fcn.0044c6c0
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x5e
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
push 0x82
lea ecx, [ebp - 0x28]
call fcn.0044c5b0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x61
push 0x481d60
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x62
push 0x481d60
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x28]
push ecx
push 0
push 1
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x62
mov edx, dword [ebp - 0x68]
push edx
call esi
mov byte [ebp - 4], 0x61
mov eax, dword [ebp - 0x64]
push eax
call esi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x50]
push ecx
call esi
lea ecx, [ebp - 0x20]
call fcn.0044c800
mov eax, dword [edi + 0x158]
test eax, eax
je 0x428614
lea ecx, [ebp - 0x34]
call fcn.0044c9d0
mov byte [ebp - 4], 0x64
mov eax, dword [edi + 0x158]
mov edx, dword [eax]
mov edx, dword [edx + 0x44]
lea ecx, [ebp - 0x34]
push ecx
push eax
call edx
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x428609
lea edx, [ebp - 0x30]
mov dword [ebp - 0x30], 0
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
jne 0x428609
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
cmp eax, 3
ja case.default.0x428552
jmp dword [eax*4 + 0x428714]
mov dword [ebp - 0x2c], 0x481d2c
jmp case.default.0x428552
mov dword [ebp - 0x2c], 0x481d44
push 0x4770b8
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x66
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x67
push 0
push 0
push 1
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0x68]
push eax
call esi
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x64]
push ecx
call esi
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x60]
push edx
call esi
mov eax, dword [ebp - 0x30]
cmp eax, 1
je 0x4285e8
cmp eax, 2
jne 0x428609
mov eax, dword [ebp - 0x2c]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x68], esp
push eax
call fcn.00406ec0
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x20]
call fcn.0044c890
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x34]
call fcn.004225e0
push 0x482e30
lea ecx, [ebp - 0x60]
call fcn.00406ec0
mov byte [ebp - 4], 0x69
push 0x481d00
call fcn.0040a270
add esp, 4
push eax
lea ecx, [ebp - 0x64]
call fcn.00406ec0
mov byte [ebp - 4], 0x6a
push 0x481d00
lea ecx, [ebp - 0x68]
call fcn.00406ec0
mov byte [ebp - 4], 0x6b
push 0
push 0
push 1
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.0044c6c0
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x68]
push ecx
call esi
mov byte [ebp - 4], 0x69
mov edx, dword [ebp - 0x64]
push edx
call esi
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x60]
push eax
call esi
push 0x82
lea ecx, [ebp - 0x20]
call fcn.0044c5b0
mov edi, dword [edi + 0x170]
push 0x66
push edi
lea ecx, [ebp - 0x20]
call fcn.0044c690
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
push ecx
push edx
push 0
lea ecx, [ebp - 0x20]
call fcn.0044c5d0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x10]
push eax
call esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00402400
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.004133c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004133c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.004133c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004133c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8