Function at 0x4260c2
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
sub esp, 0x58
lea ebp, [esp - 4]
mov eax, dword [0x495180]
xor eax, ebp
mov dword [ebp + 0x58], eax
push 0x108
mov eax, 0x46e1ed
call fcn.0044d0e9
mov eax, ecx
xor edi, edi
mov dword [ebp + 0x2c], edi
mov dword [ebp + 8], eax
add eax, 0x280
mov dword [ebp + 0x28], edi
fld dword [eax]
fstp dword [ebp - 0x34]
fld dword [0x474cf0]
fcomp dword [eax]
fnstsw ax
test ah, 0x44
jp 0x426112
fld dword [0x472948]
fstp dword [ebp - 0x34]
push 0xa
call fcn.00428fd0
fld dword [ebp - 0x34]
push ecx
fstp qword [esp]
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x18], esp
push str.ATMpfAUzOSQFIDklLwgiIggienwFMzkkBSA5OAYSLnk
mov dword [ebp - 0xd0], eax
call fcn.004023a5
lea eax, [ebp]
push eax
call fcn.004042ec
add esp, 0x24
push dword [eax]
push dword [ebp - 0xd0]
call fcn.0044f843
mov ecx, dword [ebp]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401264
push 0x14
push dword [ebp - 0xd0]
lea eax, [ebp + 0x30]
push eax
call fcn.0044fcb5
add esp, 0xc
mov esi, 0x471c55
push esi
lea ecx, [ebp - 0x10c]
call fcn.00404603
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 1
call fcn.0041aa05
push esi
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 2
call fcn.00404603
push esi
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 3
call fcn.00404603
push esi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.00404603
push 0x496740
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.00403ffb
lea ecx, [ebp - 0x90]
call fcn.004034c4
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
push ecx
push ecx
push 0xffffffffffffffff
push eax
push ecx
mov edi, 0xfde9
push edi
call esi
xor ecx, ecx
push 2
pop edx
mov dword [ebp - 0x94], eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00428fd0
pop ecx
lea ecx, [ebp - 0x90]
mov ebx, eax
call fcn.004034c4
push dword [ebp - 0x94]
push ebx
push 0xffffffffffffffff
push eax
push 0
push edi
call esi
push ebx
call fcn.00421bc4
pop ecx
push ebx
mov dword [ebp], eax
call fcn.00428fc5
pop ecx
lea ecx, [ebp - 0xcc]
call fcn.00410156
lea eax, [ebp - 0x104]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 0x20]
mov byte [ebp - 4], 6
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [ebp]
test ecx, ecx
je 0x42846c
lea eax, [ebp - 0x30]
push eax
call fcn.0042279a
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 7
call fcn.004101c5
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.0040fa22
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
mov esi, str.Cx4HOiwLHzAFGRsMAw4hfgsOBywDCy0tCHlyKxoYB3MIIgAzBQsLPQASeggHMyZyCB4HfwALCxkBEil3
push esi
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
xor edi, edi
inc edi
mov ecx, eax
mov byte [ebp - 4], 8
mov dword [ebp + 0x2c], edi
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0xb4]
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 9
mov dword [ebp + 0x2c], 3
call fcn.00408194
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x42638a
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.Kyc6OysjAzwBM348BQ4mOysnOjs
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov dword [ebp - 4], 0xa
mov dword [ebp + 0x2c], 7
call fcn.00407e49
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040c2ca
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0xb
mov dword [ebp + 0x2c], 0xf
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
test al, al
je 0x42638a
mov bl, 1
jmp 0x42638c
xor bl, bl
test byte [ebp + 0x2c], 8
je 0x4263a4
and dword [ebp + 0x2c], 0xfffffff7
push 0
push edi
lea ecx, [ebp - 0x8c]
call fcn.0040844c
test byte [ebp + 0x2c], 4
je 0x4263b9
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x2c], 0xfffffffb
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp + 0x2c], 2
je 0x4263ce
and dword [ebp + 0x2c], 0xfffffffd
push 0
push edi
lea ecx, [ebp - 0x50]
call fcn.0040844c
test byte [ebp + 0x2c], 1
mov dword [ebp - 4], 6
je 0x4263ea
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x4265d6
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push esi
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xd
call fcn.004112c1
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [eax]
call fcn.00422615
push 0
push edi
lea ecx, [ebp - 0x50]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x10
call fcn.00401264
push 0
lea ecx, [ebp - 0x88]
call fcn.0040681e
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
lea eax, [ebp + 0x30]
push eax
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x20], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x11
call fcn.0041016f
mov ecx, dword [ebp + 8]
lea eax, [ebp + 0x1c]
push eax
call fcn.004256f7
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.ATMpfAUzOSQFIDkMA3lfwsYfj4aCw89LCMTDA4eJX0BMyl8BTM5Pi55KXc
mov byte [ebp - 4], 0x12
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
push dword [eax]
push dword [ebp - 0xf4]
call fcn.0044e59e
mov ebx, eax
neg ebx
pop ecx
sbb bl, bl
pop ecx
mov ecx, dword [ebp + 0x20]
inc bl
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x426552
fld1
fcomp dword [ebp - 0x34]
fnstsw ax
test ah, 0x44
jp 0x426516
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywDC3ogCQ0POQkZDw8LLSEeCQt6GSwjAxoJMw8JCzI5LAYzPS0GGzkOBy05Iwk9LSILLQsTAB4LBAcCAwYLeSELEBsTcy8jLQwGGzkbCCMHHg4tKTMaJx8EAz0uZQsOegYDCSEhLC09DgcJDHIJMAMiLDIlPg8CfgkvGykFCD0hGiktLSAIMz06Ghs5Cw4wBx4JCy5_LHgfGgkJD3wPCC0mAwkhLSkiOQQNGRMnDhkHDwcyJXMaGAsJLx56OAswejoDG3otCDAlCQk9KS0BGQsDhsEfwsNDxoJMw8NBgs5HgYtHy0FHi0LBwkccwseBzosCx9zLnkpdw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
mov byte [ebp - 4], 0x13
jmp 0x42653a
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.ATMpfAUzOSQFIDkOAwJ_IggZGwMAIgsQAx5yCw4YOS0LC34iExsPMA8zKRsJGHItCxt_MwMbEyAPMD0MDyMDIgsYISwACAsQCDMPDAIkfn4LCQceGgsfBQAeLQgNG3JCCImMAAiJRAIeXINB3lJw0iISgAPQsQBR5yDAIYciENIAhhGgsTJAIzGysHAn5yCCMDLAAtHy0sIwsLBwIDIQ4IIQ4aCw8wLCA9DAkIMnMGPQAwAxsHBQAefjgAMCV9ATMpfAU9d3c
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp + 0x1c]
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x12
call fcn.00401264
mov ebx, dword [ebp + 8]
and dword [ebx + 0x2a4], 0
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x2a8], eax
mov dword [ebx + 0x2ac], 0x52
mov edi, esp
lea esi, [ebx + 0x2a0]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x20], esp
mov ecx, esp
push eax
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
mov ecx, dword [ebp + 0x1c]
add esp, 0x14
add ecx, 0xfffffff0
mov dword [ebx + 0x284], eax
call fcn.00401264
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x10
call fcn.0040fa22
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 6
call fcn.00408497
push dword [ebp - 0x88]
call fcn.00428fc5
xor edi, edi
pop ecx
inc edi
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.Kyc6OysgJX4AGXpBjAhfysnOjsrLXd3
mov byte [ebp + 0xf], 0
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x10
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.00407e49
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x20
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0xb4]
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x16
call fcn.00408194
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x4266c4
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x1c], esp
push str.ATMpfAUzOSQFIDkMAwl6Jwgifj4aCx8vACA5OAAwJX0BMykmLj13dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x40
mov ecx, eax
mov dword [ebp - 4], 0x17
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x80
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0x18
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
test al, al
je 0x4266c4
mov bl, 1
jmp 0x4266c6
xor bl, bl
test byte [ebp + 0x2c], 0x80
je 0x4266de
and dword [ebp + 0x2c], 0xffffff7f
push 0
push edi
lea ecx, [ebp - 0x50]
call fcn.0040844c
test byte [ebp + 0x2c], 0x40
je 0x4266f3
mov ecx, dword [ebp + 0x20]
and dword [ebp + 0x2c], 0xffffffbf
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp + 0x2c], 0x20
je 0x42670b
and dword [ebp + 0x2c], 0xffffffdf
push 0
push edi
lea ecx, [ebp - 0x8c]
call fcn.0040844c
test byte [ebp + 0x2c], 0x10
mov dword [ebp - 4], 6
je 0x426727
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xffffffef
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x42672f
mov byte [ebp + 0xf], 1
lea eax, [ebp - 0x94]
push 0x95
push eax
call fcn.0040afe9
pop ecx
pop ecx
cmp byte [ebp + 0xf], 0
push 0x19
pop edi
mov byte [ebp - 4], 0x19
jne 0x426a00
push 0x47c118
push dword [ebp - 0x94]
call fcn.0044e59e
pop ecx
pop ecx
test eax, eax
jne 0x426a00
call fcn.0042b084
push eax
lea ecx, [ebp + 0x2c]
call fcn.004075fa
mov byte [ebp - 4], 0x1a
call fcn.0042b084
push eax
lea ecx, [ebp + 0x28]
call fcn.004075fa
fld dword [0x472948]
fcomp dword [ebp - 0x34]
mov byte [ebp - 4], 0x1b
fnstsw ax
test ah, 0x44
jp 0x426800
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
mov esi, str.Cx4HOiwLHzAFGRsMAw4hfgsOBywDC3ogCQ0POQkZDw8LLSEeCQt6GSwjAxoJMw8JCzI5LAYzPS0GGzkOBy05Iw4ZAyILIz1zDzALOQMyBzgOGC1_AAs5AwMScisaGHI_Dh4LJgk9ehAsIykGBwspJQYOAyYDCx8QARs5Di8bCCIJCCECLD0fPggyCwwCJH4EBj0iMAcLOT0JMwMrCTIHLQskIQIJPSETCDMpBgItGCIGDgMGDwsPLgIzOQ4vGwQmDj0tfwMtBwMAGXoDLxsHBQgwAwIACy0hBh4lBhobcj0OHgcaDhspAAszDwAHCyklBg4DJgMLHxABGzkOLxsIIg49fg4ALQsAj0fOQAycgQLIxsOKS0tEwAgCwsJEgRlCzMpLA09ISgaJAMDAyQ6cggeB38ACx8tBR4tCwcJHHM
push esi
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
push eax
lea ecx, [ebp + 0x2c]
mov byte [ebp - 4], 0x1c
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1b
call fcn.00401264
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push esi
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
mov byte [ebp - 4], 0x1d
jmp 0x426860
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.ATMpfAUzOSQFIDkOAwJ_IggZGwMAIgsQAx5yCw4YOS0LC34iExsPMA8zKRsOJCUtCBgmMxo9Cy8vIw8LAzJyfggjCycDGw8QAjMbGw0bKSIIGH9hBQsLIA8wPQwOIx9CxghGgULExApMxMrDRsuZQggBGEAIiUQDTMpCw0eIWUIGHosAAglPSwgPQ0AMnILCzAIYQcIJQAIMykLA3kHIQkbIX8DGwsAKSRGxobKSIIGH9hBQsLIA8wPQwOGSE4CwhPhMYJTAvJx8NBwkPcg8LIQYsCxMuBSA5OAAwJX0BM3t5Lj13dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
push eax
lea ecx, [ebp + 0x2c]
mov byte [ebp - 4], 0x1e
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1b
call fcn.00401264
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.Kyc6OysjA2EaIDo9EB0fOgYjGCEDMxt_GiM5JwAnG3MDMCE8BiMfcwAJEyYBM35_EAkhJgB4HyAADiFhATMTJwYwLXwBMyEiATN6PBAeeiAFGXI_AB56IQAjHzgGICYmADByYQYzfyYJGQdhBzA9IAAjEzwQPS04AAkbPAUNKQ4ADiFhATMTJwYwIiQNIx9GiByPhozcn8GeBstBSN7OysnOjs
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp + 0x28]
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1b
call fcn.00401264
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x298], eax
mov dword [ebx + 0x294], 0xd6
mov dword [ebx + 0x29c], 0x210
mov edi, esp
lea esi, [ebx + 0x290]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x20], esp
mov ecx, esp
push eax
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
add esp, 0x14
sub esp, 0x10
mov dword [ebx + 0x288], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebx + 0x2b8], eax
mov dword [ebx + 0x2b4], 0xd6
mov dword [ebx + 0x2bc], 0x210
mov edi, esp
lea esi, [ebx + 0x2b0]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x28]
mov dword [ebp + 0x20], esp
mov ecx, esp
push eax
mov byte [ebx + 0x338], 1
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
and dword [ebp - 0xa4], 0
add esp, 0x14
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.ATMpfAUzOSQFIDkOAwJ_IggZGwMAIgsQAx4HDAMwej0PCyEiAC0IfgIzCwsJGActCwsmMAAtCxANMD0IDRgHLQsYIQcAI34vABJCw0SfyYLGH9hAwsTIQEZCwsOIwwiCx4HHgA9Ez0DICErBwkPcggbIQIaM349DngfDA0SAGEOCCECGj0YfhoZAw0HCy4wCwhPhozfjADGQsrAwsuMwswBx4APRMzAjMTDQkeenIIG3p8BTM5JAUgOTgGEi55
mov dword [ebx + 0x28c], eax
mov dword [ebp - 0xa0], 0xd6
mov dword [ebp - 0x9c], 0x2a8
mov dword [ebp - 0x98], 0x266
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.004042ec
add esp, 0x24
lea eax, [ebp + 0x1c]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x20
call fcn.00424c24
lea edi, [ebx + 0x2e8]
mov eax, dword [edi + 8]
lea ecx, [ebp - 0xa4]
push ecx
push eax
mov ecx, edi
call fcn.00423c26
lea esi, [ebx + 0x2fc]
mov eax, dword [esi + 8]
lea ecx, [ebp + 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004247d2
push edi
lea ecx, [ebx + 0x2c0]
call fcn.00423f68
push esi
lea ecx, [ebx + 0x2d4]
call fcn.00424bfb
lea ecx, [ebx + 0x310]
mov eax, dword [ecx + 8]
lea edx, [ebp - 0xa4]
push edx
push eax
call fcn.00423c26
lea ecx, [ebx + 0x324]
mov eax, dword [ecx + 8]
lea edx, [ebp + 0x1c]
push edx
push eax
call fcn.004247d2
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp + 0x28]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp + 0x2c]
jmp 0x428430
lea eax, [ebp + 0x20]
push 0x9d
push eax
mov byte [ebp + 7], 0
mov byte [ebp + 0xf], 0
call fcn.0040afe9
pop ecx
pop ecx
push dword [eax]
call fcn.0044e964
pop ecx
mov ecx, dword [ebp + 0x20]
cmp eax, 1
setne bl
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x4281f0
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.Kyc6OysgJX4AGXpBjAhfysnOjsrLXd3
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ebx, 0x100
or dword [ebp + 0x2c], ebx
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.00407e49
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040c2ca
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0xb4]
mov esi, 0x200
or dword [ebp + 0x2c], esi
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x22
call fcn.00408194
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x426b2e
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x1c], esp
push str.ATMpfAUzOSQFIDkMAwl6Jwgifj4aCx8vACA5OAAwJX0BMykmLj13dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x400
mov ecx, eax
mov dword [ebp - 4], 0x23
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x800
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0x24
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e21
mov byte [ebp + 0x27], 1
test al, al
jne 0x426b32
mov byte [ebp + 0x27], 0
test dword [ebp + 0x2c], 0x800
je 0x426b4e
and dword [ebp + 0x2c], 0xfffff7ff
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
test dword [ebp + 0x2c], 0x400
je 0x426b69
mov ecx, dword [ebp + 0x20]
and dword [ebp + 0x2c], 0xfffffbff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x2c], esi
je 0x426b84
and dword [ebp + 0x2c], 0xfffffdff
push 0
push 1
lea ecx, [ebp - 0x8c]
call fcn.0040844c
mov dword [ebp - 4], edi
test dword [ebp + 0x2c], ebx
je 0x426b9e
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xfffffeff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x426f0c
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x20], esp
push str.ATMpfAUzOSQFIDkMAwl6Jwgifj4aCx8vACA5OAAwJX0BMykmLj13dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x26
call fcn.004112c1
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x29
call fcn.00401264
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x18], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywGGzkFCHlyKwYYB3MLCQt_BQsLPQASeggHMyZyCB4Hfxojf38BEil3
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
mov ebx, 0x1000
or dword [ebp + 0x2c], ebx
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
mov esi, 0x2000
or dword [ebp + 0x2c], esi
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x2b
call fcn.00408194
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x426cff
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.ATMpfAUzOSQFIDkOBzMhfggiJjMsMzkkBSA5OAAwJX0
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x4000
mov ecx, eax
mov dword [ebp - 4], 0x2c
call fcn.00407e49
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x8000
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x2d
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
mov byte [ebp + 0x27], 1
test al, al
jne 0x426d03
mov byte [ebp + 0x27], 0
test dword [ebp + 0x2c], 0x8000
je 0x426d21
and dword [ebp + 0x2c], 0xffff7fff
push edi
push 1
lea ecx, [ebp - 0x8c]
call fcn.0040844c
test dword [ebp + 0x2c], 0x4000
je 0x426d3c
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xffffbfff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x2c], esi
je 0x426d53
and dword [ebp + 0x2c], 0xffffdfff
push edi
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov dword [ebp - 4], 0x29
test dword [ebp + 0x2c], ebx
je 0x426d71
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x2c], 0xffffefff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x426eba
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.ATMpfAUzOSQFIDkOBzMhfggiJjMsMzkkBSA5OAAwJX0
mov byte [ebp + 7], 1
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2f
call fcn.004112c1
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [eax]
call fcn.00422615
push edi
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x32
call fcn.00401264
push edi
lea ecx, [ebp - 0x88]
call fcn.0040681e
lea ecx, [ebp - 0xf0]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
lea eax, [ebp + 0x30]
push eax
sub esp, 0x20
lea eax, [ebp - 0xf0]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x33
call fcn.0041016f
mov ecx, dword [ebp + 8]
lea eax, [ebp + 0x1c]
push eax
call fcn.004256f7
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x298], eax
mov dword [ebx + 0x294], 0xd6
mov dword [ebx + 0x29c], 0x210
mov edi, esp
lea esi, [ebx + 0x290]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x34
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
mov ecx, dword [ebp + 0x1c]
add esp, 0x14
add ecx, 0xfffffff0
mov dword [ebx + 0x288], eax
call fcn.00401264
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x32
call fcn.0040fa22
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x29
call fcn.00408497
push dword [ebp - 0x88]
call fcn.00428fc5
pop ecx
jmp 0x426ebd
mov ebx, dword [ebp + 8]
lea edi, [ebx + 0x2fc]
push edi
lea esi, [ebx + 0x2e8]
push esi
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
call fcn.0041016f
mov ecx, ebx
call fcn.00425c3f
push esi
lea ecx, [ebx + 0x2c0]
call fcn.00423f68
push edi
lea ecx, [ebx + 0x2d4]
call fcn.00424bfb
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x19
call fcn.0040fa22
jmp 0x427649
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Kyc6OysgJX4AGXpBjAhfysnOjsrLXd3
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ebx, 0x10000
or dword [ebp + 0x2c], ebx
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0xb4]
mov esi, 0x20000
or dword [ebp + 0x2c], esi
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x36
call fcn.00408194
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x426ffb
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.ATMpfAUzOSQFIDkMAwl6Jwgifj4aCx8vACA5OAAwJX0BMykmLj13dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x40000
mov ecx, eax
mov dword [ebp - 4], 0x37
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x80000
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0x38
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
mov byte [ebp + 0x27], 1
test al, al
jne 0x426fff
mov byte [ebp + 0x27], 0
test dword [ebp + 0x2c], 0x80000
je 0x42701b
and dword [ebp + 0x2c], 0xfff7ffff
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
test dword [ebp + 0x2c], 0x40000
je 0x427036
mov ecx, dword [ebp + 0x20]
and dword [ebp + 0x2c], 0xfffbffff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x2c], esi
je 0x42704e
and dword [ebp + 0x2c], 0xfffdffff
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
mov dword [ebp - 4], edi
test dword [ebp + 0x2c], ebx
je 0x427068
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xfffeffff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x427649
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBykpLS0oAxk9KwYYcgsBGRgzDgsDLwASeggHMyZyCB4HfwALHy0FEil3
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x39
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x3a
call fcn.004112c1
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [eax]
call fcn.00422615
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3d
call fcn.00401264
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x7c]
sar eax, 2
cmp esi, eax
jae 0x42762e
push esi
lea ecx, [ebp - 0x88]
call fcn.0040681e
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x3e
call fcn.0041016f
mov ecx, dword [ebp + 8]
call fcn.0042588c
test al, al
je 0x427742
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
mov esi, str.Kyc6Oysgcn4AJzo7Kycldw
push esi
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
mov edi, 0x100000
or dword [ebp + 0x2c], edi
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
mov ebx, 0x200000
or dword [ebp + 0x2c], ebx
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x40
call fcn.00408194
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x427216
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push esi
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x400000
mov ecx, eax
mov dword [ebp - 4], 0x41
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x800000
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x42
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e06
mov byte [ebp + 0x27], 1
test al, al
jne 0x42721a
mov byte [ebp + 0x27], 0
test dword [ebp + 0x2c], 0x800000
je 0x427236
and dword [ebp + 0x2c], 0xff7fffff
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
test dword [ebp + 0x2c], 0x400000
je 0x427251
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xffbfffff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x2c], ebx
je 0x42726c
and dword [ebp + 0x2c], 0xffdfffff
push 0
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
mov dword [ebp - 4], 0x3e
test dword [ebp + 0x2c], edi
je 0x42728a
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x2c], 0xffefffff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x42733c
mov esi, dword [ebp + 8]
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBykALS0oAxg5DAcwISEIGQt_BQsLPQASeggHeT5_BiB7eS49d3c
mov byte [esi + 0x384], 1
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x43
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x44
call fcn.004112c1
lea ecx, [ebp - 0x50]
push ecx
mov ecx, dword [eax]
call fcn.0042227a
cmp dword [eax + 0x18], 8
mov byte [ebp - 4], 0x45
jb 0x427302
mov eax, dword [eax + 4]
jmp 0x427305
add eax, 4
push eax
lea ecx, [esi + 0x37c]
call fcn.00408dbc
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
push 0
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.00401264
jmp 0x427622
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
mov edi, str.ATMpfAUzOSQFIDkOBzMhfggiJjMsMzkkBSA5OAAwJX0
push edi
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
mov ebx, 0x1000000
or dword [ebp + 0x2c], ebx
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
mov esi, 0x2000000
or dword [ebp + 0x2c], esi
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x47
call fcn.00408194
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x427426
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywGGzkFCHlyKwYYB3MLCQt_BQsLPQASeggHMyZyCB4Hfxojf38BEil3
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x4000000
mov ecx, eax
mov dword [ebp - 4], 0x48
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x8000000
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x49
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
mov byte [ebp + 0x27], 1
test al, al
jne 0x42742a
mov byte [ebp + 0x27], 0
test dword [ebp + 0x2c], 0x8000000
je 0x427449
and dword [ebp + 0x2c], 0xf7ffffff
push 0
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
test dword [ebp + 0x2c], 0x4000000
je 0x427464
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x2c], 0xfbffffff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x2c], esi
je 0x42747c
and dword [ebp + 0x2c], 0xfdffffff
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
mov dword [ebp - 4], 0x3e
test dword [ebp + 0x2c], ebx
je 0x42749a
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x2c], 0xfeffffff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x4275e1
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push edi
mov byte [ebp + 7], 1
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x4a
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x4b
call fcn.004112c1
lea ecx, [ebp - 0xac]
push ecx
mov ecx, dword [eax]
call fcn.00422615
push 0
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x4e
call fcn.00401264
push 0
lea ecx, [ebp - 0xac]
call fcn.0040681e
lea ecx, [ebp - 0x54]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
lea eax, [ebp + 0x30]
push eax
sub esp, 0x20
lea eax, [ebp - 0x54]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x4f
call fcn.0041016f
mov ecx, dword [ebp + 8]
lea eax, [ebp + 0x1c]
push eax
call fcn.004256f7
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x298], eax
mov dword [ebx + 0x294], 0xd6
mov dword [ebx + 0x29c], 0x210
mov edi, esp
lea esi, [ebx + 0x290]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x50
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
mov ecx, dword [ebp + 0x1c]
add esp, 0x14
add ecx, 0xfffffff0
mov dword [ebx + 0x288], eax
call fcn.00401264
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4e
call fcn.0040fa22
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x3e
call fcn.00408497
push dword [ebp - 0xac]
call fcn.00428fc5
pop ecx
jmp 0x4275e4
mov ebx, dword [ebp + 8]
lea edi, [ebx + 0x2fc]
push edi
lea esi, [ebx + 0x2e8]
push esi
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
call fcn.0041016f
mov ecx, ebx
call fcn.00425c3f
push esi
lea ecx, [ebx + 0x2c0]
call fcn.00423f68
push edi
lea ecx, [ebx + 0x2d4]
call fcn.00424bfb
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3d
call fcn.0040fa22
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x19
call fcn.00408497
push dword [ebp - 0x88]
call fcn.00428fc5
pop ecx
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywsPTk9CDMtDgkychsJMAtzDhsLPQASeggHMyZyCB4HfwALHy0FEil3
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov edi, 0x10000000
or dword [ebp + 0x2c], edi
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0xb4]
mov esi, 0x20000000
or dword [ebp + 0x2c], esi
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x52
call fcn.00408194
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x427754
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywsPTk9CDMtDgkychsJMAtzDhsLPQASeggHMyZyCB4HfwALHy0FEil3
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x2c], 0x40000000
mov ecx, eax
mov dword [ebp - 4], 0x53
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
or dword [ebp + 0x2c], 0x80000000
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0x54
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e21
test al, al
je 0x427754
mov bl, 1
jmp 0x427756
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3d
call fcn.0040fa22
inc esi
jmp 0x4270e3
xor bl, bl
test dword [ebp + 0x2c], 0x80000000
je 0x427775
and dword [ebp + 0x2c], 0x7fffffff
push 0
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
test dword [ebp + 0x2c], 0x40000000
je 0x427790
mov ecx, dword [ebp + 0x20]
and dword [ebp + 0x2c], 0xbfffffff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x2c], esi
je 0x4277a8
and dword [ebp + 0x2c], 0xdfffffff
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov dword [ebp - 4], 0x19
test dword [ebp + 0x2c], edi
je 0x4277bf
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x427aee
mov eax, dword [ebp + 8]
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywsPTk9CDMtDgkychsJMAtzDhsLPQASeggHMyZyCB4HfwALHy0FEil3
mov byte [eax + 0x338], 1
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x56
call fcn.004112c1
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
xor edi, edi
push 0
inc edi
push edi
lea ecx, [ebp - 0xec]
call fcn.0040844c
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x59
call fcn.00401264
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
mov esi, str.Kyc6OysjByQBM3o8BR06OysnJXc
push esi
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x28], edi
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
or dword [ebp + 0x28], 2
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x5b
call fcn.00408194
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x42791a
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push esi
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x28], 4
mov ecx, eax
mov dword [ebp - 4], 0x5c
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
or dword [ebp + 0x28], 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x5d
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
test al, al
je 0x42791a
mov bl, 1
jmp 0x42791c
xor bl, bl
test byte [ebp + 0x28], 8
je 0x427931
and dword [ebp + 0x28], 0xfffffff7
push 0
push edi
lea ecx, [ebp - 0x70]
call fcn.0040844c
test byte [ebp + 0x28], 4
je 0x427946
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x28], 0xfffffffb
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp + 0x28], 2
je 0x42795b
and dword [ebp + 0x28], 0xfffffffd
push 0
push edi
lea ecx, [ebp - 0x50]
call fcn.0040844c
test byte [ebp + 0x28], 1
mov dword [ebp - 4], 0x59
je 0x427977
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x28], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x427ab4
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push esi
mov byte [ebp + 0xf], 1
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x5e
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x5f
call fcn.004112c1
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [eax]
call fcn.00422615
push 0
push edi
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x62
call fcn.00401264
push 0
lea ecx, [ebp - 0x88]
call fcn.0040681e
lea ecx, [ebp - 0x54]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
lea eax, [ebp + 0x30]
push eax
sub esp, 0x20
lea eax, [ebp - 0x54]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x63
call fcn.0041016f
mov ecx, dword [ebp + 8]
lea eax, [ebp + 0x1c]
push eax
call fcn.004256f7
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x2b8], eax
mov dword [ebx + 0x2b4], 0xd6
mov dword [ebx + 0x2bc], 0x210
mov edi, esp
lea esi, [ebx + 0x2b0]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x64
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
mov ecx, dword [ebp + 0x1c]
add esp, 0x14
add ecx, 0xfffffff0
mov dword [ebx + 0x28c], eax
call fcn.00401264
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x62
call fcn.0040fa22
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x59
call fcn.00408497
push dword [ebp - 0x88]
call fcn.00428fc5
pop ecx
mov esi, ebx
jmp 0x427ab7
mov esi, dword [ebp + 8]
lea eax, [esi + 0x324]
push eax
lea eax, [esi + 0x310]
push eax
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
call fcn.0041016f
mov ecx, esi
call fcn.00425c3f
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x19
call fcn.0040fa22
jmp 0x4281f0
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.ATMpfAUzOSQFIDkNCRspIgswCyIDPRMwLDA5OAAwJX0BMykmLj13dw
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x28], 0x10
mov ecx, eax
mov byte [ebp - 4], 0x65
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
or dword [ebp + 0x28], 0x20
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0xb4]
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x66
call fcn.00408194
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x427bd8
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywsPTk9CDMtDgkychsJMAtzDhsLPQASeggHMyZyCB4HfwALHy0FEil3
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x28], 0x40
mov ecx, eax
mov dword [ebp - 4], 0x67
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
or dword [ebp + 0x28], 0x80
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], 0x68
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
test al, al
je 0x427bd8
mov bl, 1
jmp 0x427bda
xor bl, bl
test byte [ebp + 0x28], 0x80
je 0x427bf6
and dword [ebp + 0x28], 0xffffff7f
push 0
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
test byte [ebp + 0x28], 0x40
je 0x427c0b
mov ecx, dword [ebp + 0x20]
and dword [ebp + 0x28], 0xffffffbf
add ecx, 0xfffffff0
call fcn.00401264
test byte [ebp + 0x28], 0x20
je 0x427c21
and dword [ebp + 0x28], 0xffffffdf
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
test byte [ebp + 0x28], 0x10
mov dword [ebp - 4], 0x19
je 0x427c3d
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x28], 0xffffffef
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x4281f0
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywsPTk9CDMtDgkychsJMAtzDhsLPQASeggHMyZyCB4HfwALHy0FEil3
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x69
call fcn.00407e49
push eax
lea ecx, [ebp - 0xec]
call fcn.0040c2ca
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x6a
call fcn.004112c1
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [eax]
call fcn.00422615
xor esi, esi
push esi
push 1
lea ecx, [ebp - 0xec]
call fcn.0040844c
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x6d
call fcn.00401264
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x7c]
sar eax, 2
cmp esi, eax
jae 0x4281d5
push esi
lea ecx, [ebp - 0x88]
call fcn.0040681e
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x6e
call fcn.0041016f
mov ecx, edi
call fcn.0042588c
test al, al
je 0x428225
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
mov esi, str.Kyc6Oysgcn4AJzo7Kycldw
push esi
mov byte [edi + 0x338], 1
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
mov edi, 0x100
or dword [ebp + 0x28], edi
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
mov ebx, 0x200
or dword [ebp + 0x28], ebx
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x70
call fcn.00408194
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x427df5
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push esi
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x28], 0x400
mov ecx, eax
mov dword [ebp - 4], 0x71
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
or dword [ebp + 0x28], 0x800
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x72
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e06
mov byte [ebp + 0x27], 1
test al, al
jne 0x427df9
mov byte [ebp + 0x27], 0
test dword [ebp + 0x28], 0x800
je 0x427e15
and dword [ebp + 0x28], 0xfffff7ff
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
test dword [ebp + 0x28], 0x400
je 0x427e30
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x28], 0xfffffbff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x28], ebx
je 0x427e48
and dword [ebp + 0x28], 0xfffffdff
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
mov dword [ebp - 4], 0x6e
test dword [ebp + 0x28], edi
je 0x427e66
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x28], 0xfffffeff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x427f0f
mov esi, dword [ebp + 8]
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBykALS0oAxg5DAcwISEIGQt_BQsLPQASeggHeT5_BiB7eS49d3c
mov byte [esi + 0x385], 1
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x73
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x74
call fcn.004112c1
lea ecx, [ebp - 0x50]
push ecx
mov ecx, dword [eax]
call fcn.0042227a
cmp dword [eax + 0x18], 8
mov byte [ebp - 4], 0x75
jb 0x427ed8
mov eax, dword [eax + 4]
jmp 0x427edb
add eax, 4
push eax
lea ecx, [esi + 0x380]
call fcn.00408dbc
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.00401264
jmp 0x4281c9
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
mov edi, str.ATMpfAUzOSQFIDkOBzMhfggiJjMsMzkkBSA5OAAwJX0
push edi
call fcn.004023a5
lea eax, [ebp + 0x1c]
push eax
call fcn.00409d12
add esp, 0x24
mov ebx, 0x1000
or dword [ebp + 0x28], ebx
mov ecx, eax
mov byte [ebp - 4], 0x76
call fcn.00407e49
push eax
lea ecx, [ebp - 0x50]
call fcn.0040c2ca
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x18]
mov esi, 0x2000
or dword [ebp + 0x28], esi
lea ecx, [ebp + 0x10]
mov dword [ebp - 4], 0x77
call fcn.00408194
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x30]
call fcn.004097ae
lea ecx, [ebp + 0x10]
push ecx
mov ecx, eax
call fcn.004068c5
test al, al
jne 0x427ff3
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywGGzkFCHlyKwYYB3MLCQt_BQsLPQASeggHMyZyCB4Hfxojf38BEil3
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
or dword [ebp + 0x28], 0x4000
mov ecx, eax
mov dword [ebp - 4], 0x78
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
or dword [ebp + 0x28], 0x8000
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x79
call fcn.004112c1
mov ecx, dword [eax]
call fcn.00421e18
mov byte [ebp + 0x27], 1
test al, al
jne 0x427ff7
mov byte [ebp + 0x27], 0
test dword [ebp + 0x28], 0x8000
je 0x428013
and dword [ebp + 0x28], 0xffff7fff
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
test dword [ebp + 0x28], 0x4000
je 0x42802e
mov ecx, dword [ebp + 0x18]
and dword [ebp + 0x28], 0xffffbfff
add ecx, 0xfffffff0
call fcn.00401264
test dword [ebp + 0x28], esi
je 0x428046
and dword [ebp + 0x28], 0xffffdfff
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.0040844c
mov dword [ebp - 4], 0x6e
test dword [ebp + 0x28], ebx
je 0x428064
mov ecx, dword [ebp + 0x1c]
and dword [ebp + 0x28], 0xffffefff
add ecx, 0xfffffff0
call fcn.00401264
cmp byte [ebp + 0x27], 0
je 0x4281a0
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push edi
mov byte [ebp + 0xf], 1
call fcn.004023a5
lea eax, [ebp + 0x18]
push eax
call fcn.00409d12
add esp, 0x24
mov ecx, eax
mov byte [ebp - 4], 0x7a
call fcn.00407e49
push eax
lea ecx, [ebp - 0x70]
call fcn.0040c2ca
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x7b
call fcn.004112c1
lea ecx, [ebp - 0xac]
push ecx
mov ecx, dword [eax]
call fcn.00422615
push 0
push 1
lea ecx, [ebp - 0x70]
call fcn.0040844c
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x7e
call fcn.00401264
push 0
lea ecx, [ebp - 0xac]
call fcn.0040681e
lea ecx, [ebp - 0x54]
push ecx
mov ecx, dword [eax]
call fcn.0042279a
lea eax, [ebp + 0x30]
push eax
sub esp, 0x20
lea eax, [ebp - 0x54]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x7f
call fcn.0041016f
mov ecx, dword [ebp + 8]
lea eax, [ebp + 0x1c]
push eax
call fcn.004256f7
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x2b8], eax
mov dword [ebx + 0x2b4], 0xd6
mov dword [ebx + 0x2bc], 0x210
mov edi, esp
lea esi, [ebx + 0x2b0]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x80
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
mov ecx, dword [ebp + 0x1c]
add esp, 0x14
add ecx, 0xfffffff0
mov dword [ebx + 0x28c], eax
call fcn.00401264
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x7e
call fcn.0040fa22
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x6e
call fcn.00408497
push dword [ebp - 0xac]
call fcn.00428fc5
pop ecx
mov esi, dword [ebp + 8]
lea eax, [esi + 0x324]
push eax
lea eax, [esi + 0x310]
push eax
sub esp, 0x20
lea eax, [ebp - 0x30]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
call fcn.0041016f
mov ecx, esi
call fcn.00425c3f
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6d
call fcn.0040fa22
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x19
call fcn.00408497
push dword [ebp - 0x88]
call fcn.00428fc5
pop ecx
lea eax, [ebp + 0x20]
push 0x9d
push eax
call fcn.0040afe9
pop ecx
pop ecx
push dword [eax]
mov esi, 0x10000
or dword [ebp + 0x28], esi
call fcn.0044e964
pop ecx
cmp eax, 1
je 0x428237
cmp byte [ebp + 7], 0
je 0x428237
cmp byte [ebp + 0xf], 0
je 0x428237
xor bl, bl
jmp 0x428239
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6d
call fcn.0040fa22
inc esi
jmp 0x427cc2
mov bl, 1
test dword [ebp + 0x28], esi
je 0x428249
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
call fcn.00401264
test bl, bl
je 0x42843c
call fcn.0042b084
push eax
lea ecx, [ebp + 0x28]
call fcn.004075fa
mov byte [ebp - 4], 0x81
call fcn.0042b084
push eax
lea ecx, [ebp + 0x1c]
call fcn.004075fa
fld dword [0x472948]
fcomp dword [ebp - 0x34]
push 2
sub esp, 0x1c
mov byte [ebp - 4], 0x82
mov ecx, esp
fnstsw ax
mov dword [ebp + 0x14], esp
test ah, 0x44
jp 0x4282e7
push str.Kyc6OysjA2EaIDo9EB0fOgYjGCEDMxt_GiM5JwAnG3MDMCE8BiMfcwAJEyYBM35_EAkhJgB4HyAADiFhATMTJwYwLXwBMyEiATN6PBAeeiAFGXI_AB56IQAjHzgGICYmADByYQYzfyYFIC0mBh4tPAUeIRwGGXI4BQ4hHC95ImUQCQt8Bh06OysnJXc
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
push eax
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0x83
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x82
call fcn.00401264
push 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Cx4HOiwLHzAFGRsMAw4hfgsOBywDC3ogCQ0POQkZDw8LLSEeCQt6GSwjAxoJMw8JCzI5LAYzPS0GGzkOBy05Iw4ZAyILIz1zDzALOQMyBzgOGC1_AAs5AwMScisaGHI_Dh4LJgk9ehAsIykGBwspJQYOAyYDCx8QARs5Di8bCCIJCCECLD0fPggyCwwCJH4EBj0iMAcLOT0JMwMrCTIHLQskIQIJPSETCDMpBgItGCIGDgMGDwsPLgIzOQ4vGwQmDj0iYQAjPT4JMgs8AAJBAg9IQcQG34DAxIHDgk9OQsJAiYzDi0Efwt4HwUJCwQiBgkHMywtejAvLT0OLx4mcwseBzosCx8wBRkbDAMOIX4IIgM_Lxt3dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
mov byte [ebp - 4], 0x84
jmp 0x42833d
push str.Kyc6OysjA2EaIDo9EB0fOgYjGCEDMxt_GiM5JwAnG3MDMCE8BiMfcwAJEyYBM35_EAkhJgB4HyAADiFhATMTJwYwLXwBMyEiATN6PBAeeiAFGXI_AB56IQAjHzgGICYmADByYQYzfyYFIC0mBh4tPAUeIRwGGXI4BQ4mIQMOJT4rJzo7Ky13dw
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
push eax
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0x85
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x82
call fcn.00401264
push 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x14], esp
push str.Kyc6OysjA2EaIDo9EB0fOgYjGCEDMxt_GiM5JwAnG3MDMCE8BiMfcwAJEyYBM35_EAkhJgB4HyAADiFhATMTJwYwLXwBMyEiATN6PBAeeiAFGXI_AB56IQAjHzgGICYmADByYQYzfyYFIC0mBh4tPAUeIRwGCQchAzAhIwYzfyEDDiUKyc6Oystd3c
call fcn.004023a5
lea eax, [ebp + 0x20]
push eax
call fcn.004042ec
add esp, 0x24
mov byte [ebp - 4], 0x86
push eax
lea ecx, [ebp + 0x1c]
call fcn.00403ffb
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x82
call fcn.00401264
cmp byte [ebp + 7], 0
jne 0x4283b8
mov eax, dword [ebp + 8]
cmp byte [eax + 0x384], 0
jne 0x4283b8
mov ebx, eax
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x298], eax
mov dword [ebx + 0x294], 0xd6
mov dword [ebx + 0x29c], 0x210
mov edi, esp
lea esi, [ebx + 0x290]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x28]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
add esp, 0x14
mov dword [ebx + 0x288], eax
cmp byte [ebp + 0xf], 0
jne 0x428422
mov eax, dword [ebp + 8]
cmp byte [eax + 0x385], 0
jne 0x428422
mov ebx, eax
mov eax, dword [ebp - 0xfc]
sub esp, 0x10
mov dword [ebx + 0x2b8], eax
mov dword [ebx + 0x2b4], 0xd6
mov dword [ebx + 0x2bc], 0x210
mov edi, esp
lea esi, [ebx + 0x2b0]
and dword [esi], 0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x1c]
mov dword [ebp + 0x14], esp
mov ecx, esp
push eax
mov byte [ebx + 0x338], 1
movsd dword es:[edi], dword [esi]
call fcn.0040397f
call fcn.0041bb74
add esp, 0x14
mov dword [ebx + 0x28c], eax
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp + 0x28]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x19
call fcn.00401264
cmp dword [ebp], 0
je 0x428453
mov ecx, dword [ebp]
call fcn.00422683
push dword [ebp]
call fcn.00428fc5
pop ecx
lea ecx, [ebp - 0xcc]
call fcn.0040e6df
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.00401264
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 5
call fcn.0040fa22
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0xf4]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0x108]
add ecx, 0xfffffff0
call fcn.00401264
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 1
call fcn.0041aa12
push dword [ebp - 0xd0]
call fcn.00428fc5
pop ecx
mov ecx, dword [ebp - 0x10c]
add ecx, 0xfffffff0
call fcn.00401264
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x58]
xor ecx, ebp
call fcn.0044d0a7
add ebp, 0x5c
leave
ret