Function at 0x41e0a0
Capabilities:
Contain obfuscated stackstrings
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x562e46
mov eax, dword fs:[0]
push eax
mov eax, 0x2d94
call fcn.00528110
mov eax, dword [0x5c5ebc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2aec], ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x88c
call fcn.0041dca0
xor eax, eax
mov word [ebp - 0x2664], ax
push 0x208
push 0
lea ecx, [ebp - 0x2662]
push ecx
call fcn.005281f0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x434], dx
push 0x208
push 0
lea eax, [ebp - 0x432]
push eax
call fcn.005281f0
add esp, 0xc
push 0x105
lea ecx, [ebp - 0x434]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x434]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x434]
push eax
push str._sAccInfo.ini
lea ecx, [ebp - 0x2664]
push ecx
call fcn.00527b98
add esp, 0xc
push 0x57560c
lea edx, [ebp - 0x2664]
push edx
call fcn.0052a29d
add esp, 8
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
jne 0x41e1a5
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x88c
mov eax, dword [ebp - 0x2aec]
mov edx, dword [eax + 0x88c]
mov eax, dword [edx + 0x14]
call eax
jmp 0x420a61
xor ecx, ecx
mov word [ebp - 0x2454], cx
push 0x2000
push 0
lea edx, [ebp - 0x2452]
push edx
call fcn.005281f0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x2874], ax
push 0x208
push 0
lea ecx, [ebp - 0x2872]
push ecx
call fcn.005281f0
add esp, 0xc
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411ad0
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x43c], 0
lea ecx, [ebp - 0x448]
call fcn.00415d60
mov dword [ebp - 4], 0
push str._System__r_n
lea ecx, [ebp - 0x448]
call fcn.00415e60
mov edx, dword [ebp - 0x444]
push edx
push 0x5755ec
lea eax, [ebp - 0x2454]
push eax
call fcn.00527b98
add esp, 0xc
push 0x5755d4
lea ecx, [ebp - 0x448]
call fcn.00424520
lea ecx, [ebp - 0x2454]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov edx, dword [ebp - 0x2aec]
mov eax, dword [edx + 4]
push eax
push 0x5755ec
lea ecx, [ebp - 0x2454]
push ecx
call fcn.00527b98
add esp, 0xc
push 0x5755b4
lea ecx, [ebp - 0x448]
call fcn.00424520
lea edx, [ebp - 0x2454]
push edx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov eax, dword [ebp - 0x2aec]
mov ecx, dword [eax + 8]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755a0
lea ecx, [ebp - 0x448]
call fcn.00424520
lea eax, [ebp - 0x2454]
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x2aec]
mov edx, dword [ecx + 0xc]
push edx
push 0x5755ec
lea eax, [ebp - 0x2454]
push eax
call fcn.00527b98
add esp, 0xc
push 0x575584
lea ecx, [ebp - 0x2974]
push ecx
call fcn.0042d9b0
add esp, 4
mov dword [ebp - 0x2af0], eax
mov edx, dword [ebp - 0x2af0]
mov dword [ebp - 0x2af4], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2af4]
push eax
lea ecx, [ebp - 0x2978]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2af8], eax
mov ecx, dword [ebp - 0x2af8]
call fcn.00415f60
push eax
lea edx, [ebp - 0x2454]
push edx
push str.NTUserAuth
push 0x57555c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x2978]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2974]
call fcn.00415e20
push 0x575584
lea eax, [ebp - 0x297c]
push eax
call fcn.0042d9b0
add esp, 4
mov dword [ebp - 0x2afc], eax
mov ecx, dword [ebp - 0x2afc]
mov dword [ebp - 0x2b00], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2b00]
push edx
lea eax, [ebp - 0x2980]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b04], eax
mov ecx, dword [ebp - 0x2b04]
call fcn.00415f60
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x10
push ecx
push str.NTDomain
push 0x57555c
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x2980]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x297c]
call fcn.00415e20
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120d0
mov dword [ebp - 0x2878], eax
mov edx, dword [ebp - 0x2878]
push edx
push 0x5755ec
lea eax, [ebp - 0x2454]
push eax
call fcn.00527b98
add esp, 0xc
push 0x575528
lea ecx, [ebp - 0x448]
call fcn.00424520
lea ecx, [ebp - 0x2454]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x840
call fcn.00411e10
mov dword [ebp - 0x438], eax
mov edx, dword [ebp - 0x438]
push edx
push 0x5755ec
lea eax, [ebp - 0x2454]
push eax
call fcn.00527b98
add esp, 0xc
push 0x575500
lea ecx, [ebp - 0x448]
call fcn.00424520
lea ecx, [ebp - 0x2454]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov dword [ebp - 0x43c], 0
jmp 0x41e51d
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0x2878]
jae 0x41ecc9
mov ecx, dword [ebp - 0x43c]
add ecx, 1
push ecx
push str.Filter_03d
lea edx, [ebp - 0x2874]
push edx
call fcn.00527b98
add esp, 0xc
mov eax, dword [ebp - 0x43c]
add eax, 1
cmp eax, 0x3e8
jb 0x41e57b
mov ecx, dword [ebp - 0x43c]
add ecx, 1
push ecx
push 0x5754d4
lea edx, [ebp - 0x2874]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5754d0
lea ecx, [ebp - 0x448]
call fcn.00424520
lea eax, [ebp - 0x2874]
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5754c8
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5754bc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov eax, dword [eax + 0x8074]
push eax
push 0x5755ec
lea ecx, [ebp - 0x2454]
push ecx
call fcn.00527b98
add esp, 0xc
push 0x575490
lea ecx, [ebp - 0x448]
call fcn.00424520
lea edx, [ebp - 0x2454]
push edx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov ecx, dword [eax + 0x8070]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x57546c
lea ecx, [ebp - 0x448]
call fcn.00424520
lea eax, [ebp - 0x2454]
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov edx, dword [eax + 0x8078]
push edx
push 0x5755ec
lea eax, [ebp - 0x2454]
push eax
call fcn.00527b98
add esp, 0xc
push 0x575448
lea ecx, [ebp - 0x448]
call fcn.00424520
lea ecx, [ebp - 0x2454]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov eax, dword [eax + 0x807c]
push eax
push 0x5755ec
lea ecx, [ebp - 0x2454]
push ecx
call fcn.00527b98
add esp, 0xc
push 0x575424
lea ecx, [ebp - 0x448]
call fcn.00424520
lea edx, [ebp - 0x2454]
push edx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x575404
lea ecx, [ebp - 0x448]
call fcn.00424520
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x2068
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5753ec
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x62
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
push str.URLFilter
lea ecx, [ebp - 0x448]
call fcn.00424520
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x406a
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5753bc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x606c
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
movzx edx, word [eax + 0x62]
test edx, edx
je 0x41ecc4
push 0x5753b4
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x62
push eax
call fcn.0052a29d
add esp, 8
mov dword [ebp - 0x287c], eax
cmp dword [ebp - 0x287c], 0
je 0x41eba1
push 2
push 0
mov ecx, dword [ebp - 0x287c]
push ecx
call fcn.0052a152
add esp, 0xc
mov edx, dword [ebp - 0x287c]
push edx
call fcn.0052a05a
add esp, 4
mov dword [ebp - 0x2884], eax
push 0
push 0
mov eax, dword [ebp - 0x287c]
push eax
call fcn.0052a152
add esp, 0xc
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
cmp dword [eax + 0x2064], 0
je 0x41e9b8
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov eax, dword [eax + 0x2064]
mov dword [ebp - 0x2984], eax
mov ecx, dword [ebp - 0x2984]
push ecx
call fcn.004dea57
add esp, 4
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov dword [eax + 0x2064], 0
mov eax, dword [ebp - 0x2884]
lea eax, [eax + eax + 1]
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x2988], eax
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov ecx, dword [ebp - 0x2988]
mov dword [eax + 0x2064], ecx
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov eax, dword [eax + 0x2064]
xor ecx, ecx
mov word [eax], cx
xor edx, edx
mov word [ebp - 0x2454], dx
mov eax, dword [ebp - 0x2884]
add eax, 1
push eax
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x298c], eax
mov ecx, dword [ebp - 0x298c]
mov dword [ebp - 0x2880], ecx
mov edx, dword [ebp - 0x2884]
add edx, 1
push edx
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x2990], eax
mov eax, dword [ebp - 0x2990]
mov dword [ebp - 0x2888], eax
mov ecx, dword [ebp - 0x2888]
mov byte [ecx], 0
mov edx, dword [ebp - 0x2880]
mov byte [edx], 0
cmp dword [ebp - 0x2880], 0
je 0x41eb8d
mov eax, dword [ebp - 0x287c]
push eax
push 1
mov ecx, dword [ebp - 0x2884]
push ecx
mov edx, dword [ebp - 0x2880]
push edx
call fcn.00529ea0
add esp, 0x10
mov eax, dword [ebp - 0x2880]
add eax, dword [ebp - 0x2884]
mov byte [eax], 0
push 0x5753b0
push 0x5753ac
mov ecx, dword [ebp - 0x2888]
push ecx
mov edx, dword [ebp - 0x2880]
push edx
mov ecx, dword [ebp - 0x2aec]
call fcn.00420a80
mov eax, dword [ebp - 0x2888]
push eax
lea ecx, [ebp - 0x2994]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2b08], eax
mov edx, dword [ebp - 0x2b08]
mov dword [ebp - 0x2b0c], edx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x2b0c]
call fcn.00415f60
push eax
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov ecx, dword [eax + 0x2064]
push ecx
call fcn.005282c4
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2994]
call fcn.00415e20
mov edx, dword [ebp - 0x2880]
mov dword [ebp - 0x2998], edx
mov eax, dword [ebp - 0x2998]
push eax
call fcn.004dea41
add esp, 4
mov ecx, dword [ebp - 0x2888]
mov dword [ebp - 0x299c], ecx
mov edx, dword [ebp - 0x299c]
push edx
call fcn.004dea41
add esp, 4
mov eax, dword [ebp - 0x287c]
push eax
call fcn.00529b67
add esp, 4
jmp 0x41ecc4
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
cmp dword [eax + 0x2064], 0
je 0x41ec17
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov eax, dword [eax + 0x2064]
mov dword [ebp - 0x29a0], eax
mov ecx, dword [ebp - 0x29a0]
push ecx
call fcn.004dea57
add esp, 4
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov dword [eax + 0x2064], 0
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x62
push eax
call fcn.00528324
add esp, 4
add eax, 1
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004dea4c
add esp, 4
mov dword [ebp - 0x29a4], eax
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov ecx, dword [ebp - 0x29a4]
mov dword [eax + 0x2064], ecx
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
add eax, 0x62
push eax
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x858
call fcn.004120f0
mov ecx, dword [eax + 0x2064]
push ecx
call fcn.005282c4
add esp, 8
jmp 0x41e50e
mov dword [ebp - 0x43c], 0
jmp 0x41ece4
mov edx, dword [ebp - 0x43c]
add edx, 1
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0x438]
jae 0x41ef4d
mov ecx, dword [ebp - 0x43c]
add ecx, 1
push ecx
push str.Time_03d
lea edx, [ebp - 0x2874]
push edx
call fcn.00527b98
add esp, 0xc
mov eax, dword [ebp - 0x43c]
add eax, 1
cmp eax, 0x3e8
jb 0x41ed42
mov ecx, dword [ebp - 0x43c]
add ecx, 1
push ecx
push 0x575388
lea edx, [ebp - 0x2874]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5754d0
lea ecx, [ebp - 0x448]
call fcn.00424520
lea eax, [ebp - 0x2874]
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5754c8
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5754bc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x840
call fcn.00411e30
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov dword [ebp - 0x288c], 0
jmp 0x41edd3
mov edx, dword [ebp - 0x288c]
add edx, 1
mov dword [ebp - 0x288c], edx
cmp dword [ebp - 0x288c], 7
jge 0x41ef48
xor eax, eax
mov word [ebp - 0x28a0], ax
xor ecx, ecx
mov dword [ebp - 0x289e], ecx
mov dword [ebp - 0x289a], ecx
mov dword [ebp - 0x2896], ecx
mov dword [ebp - 0x2892], ecx
mov word [ebp - 0x288e], cx
mov edx, dword [ebp - 0x288c]
push edx
push 0x5755ec
lea eax, [ebp - 0x28a0]
push eax
call fcn.00527b98
add esp, 0xc
lea ecx, [ebp - 0x28a0]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x575384
lea ecx, [ebp - 0x448]
call fcn.00424520
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x840
call fcn.00411e30
mov ecx, dword [ebp - 0x288c]
imul ecx, ecx, 0x2002
lea edx, [eax + ecx + 0x62]
push edx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
mov eax, dword [ebp - 0x288c]
push eax
push str.Mask_d
lea ecx, [ebp - 0x28a0]
push ecx
call fcn.00527b98
add esp, 0xc
xor edx, edx
mov word [ebp - 0x296c], dx
push 0xc6
push 0
lea eax, [ebp - 0x296a]
push eax
call fcn.005281f0
add esp, 0xc
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x840
call fcn.00411e30
mov edx, dword [ebp - 0x288c]
mov eax, dword [eax + edx*4 + 0xe070]
push eax
push 0x57536c
lea ecx, [ebp - 0x296c]
push ecx
call fcn.00527b98
add esp, 0xc
lea edx, [ebp - 0x28a0]
push edx
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x575384
lea ecx, [ebp - 0x448]
call fcn.00424520
lea eax, [ebp - 0x296c]
push eax
lea ecx, [ebp - 0x448]
call fcn.00424520
push 0x5755cc
lea ecx, [ebp - 0x448]
call fcn.00424520
jmp 0x41edc4
jmp 0x41ecd5
xor ecx, ecx
mov word [ebp - 0x224], cx
push 0x208
push 0
lea edx, [ebp - 0x222]
push edx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x43c], 0
jmp 0x41ef87
mov eax, dword [ebp - 0x43c]
add eax, 1
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x43c]
cmp ecx, dword [ebp - 0x444]
jae 0x420985
mov edx, dword [ebp - 0x43c]
add edx, 1
push edx
push str.User_03d
lea eax, [ebp - 0x224]
push eax
call fcn.00527b98
add esp, 0xc
mov ecx, dword [ebp - 0x43c]
add ecx, 1
cmp ecx, 0x3e8
jb 0x41efe6
mov edx, dword [ebp - 0x43c]
add edx, 1
push edx
push str.User_d
lea eax, [ebp - 0x224]
push eax
call fcn.00527b98
add esp, 0xc
push 0x5754c8
lea ecx, [ebp - 0x224]
push ecx
push 0x5754d0
lea ecx, [ebp - 0x29a8]
call fcn.00415da0
mov dword [ebp - 0x2b10], eax
mov edx, dword [ebp - 0x2b10]
mov dword [ebp - 0x2b14], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x2b14]
push eax
lea ecx, [ebp - 0x29ac]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b18], eax
mov edx, dword [ebp - 0x2b18]
mov dword [ebp - 0x2b1c], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x2b1c]
push eax
lea ecx, [ebp - 0x29b0]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b20], eax
mov edx, dword [ebp - 0x2b20]
mov dword [ebp - 0x2b24], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x2b24]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x29b0]
call fcn.00415e20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x29ac]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29a8]
call fcn.00415e20
push 0x5755cc
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
push eax
push 0x575334
lea ecx, [ebp - 0x29b4]
call fcn.00415da0
mov dword [ebp - 0x2b28], eax
mov edx, dword [ebp - 0x2b28]
mov dword [ebp - 0x2b2c], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2b2c]
push eax
lea ecx, [ebp - 0x29b8]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b30], eax
mov edx, dword [ebp - 0x2b30]
mov dword [ebp - 0x2b34], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2b34]
push eax
lea ecx, [ebp - 0x29bc]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b38], eax
mov edx, dword [ebp - 0x2b38]
mov dword [ebp - 0x2b3c], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x2b3c]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x29bc]
call fcn.00415e20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x29b8]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29b4]
call fcn.00415e20
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
add eax, 0x202
push eax
lea edx, [ebp - 0x2454]
push edx
call fcn.005282c4
add esp, 8
lea eax, [ebp - 0x2454]
push eax
call fcn.0042dbe0
add esp, 4
push 0x5755cc
lea ecx, [ebp - 0x2454]
push ecx
push 0x575320
lea ecx, [ebp - 0x29c0]
call fcn.00415da0
mov dword [ebp - 0x2b40], eax
mov edx, dword [ebp - 0x2b40]
mov dword [ebp - 0x2b44], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x2b44]
push eax
lea ecx, [ebp - 0x29c4]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b48], eax
mov edx, dword [ebp - 0x2b48]
mov dword [ebp - 0x2b4c], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x2b4c]
push eax
lea ecx, [ebp - 0x29c8]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b50], eax
mov edx, dword [ebp - 0x2b50]
mov dword [ebp - 0x2b54], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x2b54]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x29c8]
call fcn.00415e20
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x29c4]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29c0]
call fcn.00415e20
push 0x5755cc
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
add eax, 0x268
push eax
push 0x575308
lea ecx, [ebp - 0x29cc]
call fcn.00415da0
mov dword [ebp - 0x2b58], eax
mov edx, dword [ebp - 0x2b58]
mov dword [ebp - 0x2b5c], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x2b5c]
push eax
lea ecx, [ebp - 0x29d0]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b60], eax
mov edx, dword [ebp - 0x2b60]
mov dword [ebp - 0x2b64], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x2b64]
push eax
lea ecx, [ebp - 0x29d4]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b68], eax
mov edx, dword [ebp - 0x2b68]
mov dword [ebp - 0x2b6c], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x2b6c]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x29d4]
call fcn.00415e20
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x29d0]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29cc]
call fcn.00415e20
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov edx, dword [eax + 0x288]
mov dword [ebp - 0x2970], edx
mov eax, dword [ebp - 0x2970]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [ebp - 0x29d8]
push ecx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2b70], eax
mov edx, dword [ebp - 0x2b70]
mov eax, dword [edx]
push eax
push 0x575300
lea ecx, [ebp - 0x2454]
push ecx
call fcn.00527b98
add esp, 0xc
lea ecx, [ebp - 0x29d8]
call fcn.00415e20
push 0x5755cc
lea edx, [ebp - 0x2454]
push edx
push 0x5752e4
lea ecx, [ebp - 0x29dc]
call fcn.00415da0
mov dword [ebp - 0x2b74], eax
mov eax, dword [ebp - 0x2b74]
mov dword [ebp - 0x2b78], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2b78]
push ecx
lea edx, [ebp - 0x29e0]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b7c], eax
mov eax, dword [ebp - 0x2b7c]
mov dword [ebp - 0x2b80], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x2b80]
push ecx
lea edx, [ebp - 0x29e4]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b84], eax
mov eax, dword [ebp - 0x2b84]
mov dword [ebp - 0x2b88], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2b88]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x29e4]
call fcn.00415e20
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x29e0]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29dc]
call fcn.00415e20
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov eax, dword [eax + 0x28c]
mov dword [ebp - 0x2970], eax
mov ecx, dword [ebp - 0x2970]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea edx, [ebp - 0x29e8]
push edx
call fcn.00499f80
add esp, 8
mov dword [ebp - 0x2b8c], eax
mov eax, dword [ebp - 0x2b8c]
mov ecx, dword [eax]
push ecx
push 0x575300
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
lea ecx, [ebp - 0x29e8]
call fcn.00415e20
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x5752c4
lea ecx, [ebp - 0x29ec]
call fcn.00415da0
mov dword [ebp - 0x2b90], eax
mov ecx, dword [ebp - 0x2b90]
mov dword [ebp - 0x2b94], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x2b94]
push edx
lea eax, [ebp - 0x29f0]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2b98], eax
mov ecx, dword [ebp - 0x2b98]
mov dword [ebp - 0x2b9c], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x2b9c]
push edx
lea eax, [ebp - 0x29f4]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2ba0], eax
mov ecx, dword [ebp - 0x2ba0]
mov dword [ebp - 0x2ba4], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x2ba4]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x29f4]
call fcn.00415e20
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x29f0]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29ec]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x294]
push ecx
push 0x57536c
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x5752a8
lea ecx, [ebp - 0x29f8]
call fcn.00415da0
mov dword [ebp - 0x2ba8], eax
mov ecx, dword [ebp - 0x2ba8]
mov dword [ebp - 0x2bac], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x2bac]
push edx
lea eax, [ebp - 0x29fc]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2bb0], eax
mov ecx, dword [ebp - 0x2bb0]
mov dword [ebp - 0x2bb4], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x2bb4]
push edx
lea eax, [ebp - 0x2a00]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2bb8], eax
mov ecx, dword [ebp - 0x2bb8]
mov dword [ebp - 0x2bbc], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x2bbc]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2a00]
call fcn.00415e20
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x29fc]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29f8]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x298]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x575294
lea ecx, [ebp - 0x2a04]
call fcn.00415da0
mov dword [ebp - 0x2bc0], eax
mov ecx, dword [ebp - 0x2bc0]
mov dword [ebp - 0x2bc4], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x2bc4]
push edx
lea eax, [ebp - 0x2a08]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2bc8], eax
mov ecx, dword [ebp - 0x2bc8]
mov dword [ebp - 0x2bcc], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x2bcc]
push edx
lea eax, [ebp - 0x2a0c]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2bd0], eax
mov ecx, dword [ebp - 0x2bd0]
mov dword [ebp - 0x2bd4], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x2bd4]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2a0c]
call fcn.00415e20
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2a08]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a04]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x29c]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x57527c
lea ecx, [ebp - 0x2a10]
call fcn.00415da0
mov dword [ebp - 0x2bd8], eax
mov ecx, dword [ebp - 0x2bd8]
mov dword [ebp - 0x2bdc], ecx
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x2bdc]
push edx
lea eax, [ebp - 0x2a14]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2be0], eax
mov ecx, dword [ebp - 0x2be0]
mov dword [ebp - 0x2be4], ecx
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x2be4]
push edx
lea eax, [ebp - 0x2a18]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2be8], eax
mov ecx, dword [ebp - 0x2be8]
mov dword [ebp - 0x2bec], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x2bec]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2a18]
call fcn.00415e20
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x2a14]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a10]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x2a0]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x575264
lea ecx, [ebp - 0x2a1c]
call fcn.00415da0
mov dword [ebp - 0x2bf0], eax
mov ecx, dword [ebp - 0x2bf0]
mov dword [ebp - 0x2bf4], ecx
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x2bf4]
push edx
lea eax, [ebp - 0x2a20]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2bf8], eax
mov ecx, dword [ebp - 0x2bf8]
mov dword [ebp - 0x2bfc], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x2bfc]
push edx
lea eax, [ebp - 0x2a24]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c00], eax
mov ecx, dword [ebp - 0x2c00]
mov dword [ebp - 0x2c04], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x2c04]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2a24]
call fcn.00415e20
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x2a20]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a1c]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x2a4]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x57524c
lea ecx, [ebp - 0x2a28]
call fcn.00415da0
mov dword [ebp - 0x2c08], eax
mov ecx, dword [ebp - 0x2c08]
mov dword [ebp - 0x2c0c], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x2c0c]
push edx
lea eax, [ebp - 0x2a2c]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c10], eax
mov ecx, dword [ebp - 0x2c10]
mov dword [ebp - 0x2c14], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x2c14]
push edx
lea eax, [ebp - 0x2a30]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c18], eax
mov ecx, dword [ebp - 0x2c18]
mov dword [ebp - 0x2c1c], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x2c1c]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x2a30]
call fcn.00415e20
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2a2c]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a28]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x2a8]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x575230
lea ecx, [ebp - 0x2a34]
call fcn.00415da0
mov dword [ebp - 0x2c20], eax
mov ecx, dword [ebp - 0x2c20]
mov dword [ebp - 0x2c24], ecx
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x2c24]
push edx
lea eax, [ebp - 0x2a38]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c28], eax
mov ecx, dword [ebp - 0x2c28]
mov dword [ebp - 0x2c2c], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x2c2c]
push edx
lea eax, [ebp - 0x2a3c]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c30], eax
mov ecx, dword [ebp - 0x2c30]
mov dword [ebp - 0x2c34], ecx
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x2c34]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x2a3c]
call fcn.00415e20
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x2a38]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a34]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x264]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x575208
lea ecx, [ebp - 0x2a40]
call fcn.00415da0
mov dword [ebp - 0x2c38], eax
mov ecx, dword [ebp - 0x2c38]
mov dword [ebp - 0x2c3c], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x2c3c]
push edx
lea eax, [ebp - 0x2a44]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c40], eax
mov ecx, dword [ebp - 0x2c40]
mov dword [ebp - 0x2c44], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x2c44]
push edx
lea eax, [ebp - 0x2a48]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c48], eax
mov ecx, dword [ebp - 0x2c48]
mov dword [ebp - 0x2c4c], ecx
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x2c4c]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2a48]
call fcn.00415e20
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2a44]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a40]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x290]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x5751e4
lea ecx, [ebp - 0x2a4c]
call fcn.00415da0
mov dword [ebp - 0x2c50], eax
mov ecx, dword [ebp - 0x2c50]
mov dword [ebp - 0x2c54], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x2c54]
push edx
lea eax, [ebp - 0x2a50]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c58], eax
mov ecx, dword [ebp - 0x2c58]
mov dword [ebp - 0x2c5c], ecx
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x2c5c]
push edx
lea eax, [ebp - 0x2a54]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c60], eax
mov ecx, dword [ebp - 0x2c60]
mov dword [ebp - 0x2c64], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x2c64]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x2a54]
call fcn.00415e20
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x2a50]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a4c]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x284]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x5751c0
lea ecx, [ebp - 0x2a58]
call fcn.00415da0
mov dword [ebp - 0x2c68], eax
mov ecx, dword [ebp - 0x2c68]
mov dword [ebp - 0x2c6c], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x2c6c]
push edx
lea eax, [ebp - 0x2a5c]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c70], eax
mov ecx, dword [ebp - 0x2c70]
mov dword [ebp - 0x2c74], ecx
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x2c74]
push edx
lea eax, [ebp - 0x2a60]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c78], eax
mov ecx, dword [ebp - 0x2c78]
mov dword [ebp - 0x2c7c], ecx
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x2c7c]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x2a60]
call fcn.00415e20
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2a5c]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a58]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x2d0], 0
je 0x41fee8
mov dword [ebp - 0x2c80], 0x5751bc
jmp 0x41fef2
mov dword [ebp - 0x2c80], 0x5751b8
push 0x5755cc
mov ecx, dword [ebp - 0x2c80]
push ecx
push 0x5751a8
lea ecx, [ebp - 0x2a64]
call fcn.00415da0
mov dword [ebp - 0x2c84], eax
mov edx, dword [ebp - 0x2c84]
mov dword [ebp - 0x2c88], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x2c88]
push eax
lea ecx, [ebp - 0x2a68]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c8c], eax
mov edx, dword [ebp - 0x2c8c]
mov dword [ebp - 0x2c90], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x2c90]
push eax
lea ecx, [ebp - 0x2a6c]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2c94], eax
mov edx, dword [ebp - 0x2c94]
mov dword [ebp - 0x2c98], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x2c98]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x2a6c]
call fcn.00415e20
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2a68]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a64]
call fcn.00415e20
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x2d4], 0
je 0x41ffe8
mov dword [ebp - 0x2c9c], 0x5751bc
jmp 0x41fff2
mov dword [ebp - 0x2c9c], 0x5751b8
push 0x5755cc
mov edx, dword [ebp - 0x2c9c]
push edx
push 0x57518c
lea ecx, [ebp - 0x2a70]
call fcn.00415da0
mov dword [ebp - 0x2ca0], eax
mov eax, dword [ebp - 0x2ca0]
mov dword [ebp - 0x2ca4], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x2ca4]
push ecx
lea edx, [ebp - 0x2a74]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2ca8], eax
mov eax, dword [ebp - 0x2ca8]
mov dword [ebp - 0x2cac], eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2cac]
push ecx
lea edx, [ebp - 0x2a78]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2cb0], eax
mov eax, dword [ebp - 0x2cb0]
mov dword [ebp - 0x2cb4], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x2cb4]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x2a78]
call fcn.00415e20
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x2a74]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a70]
call fcn.00415e20
push 0x5755cc
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
add eax, 0x2d8
push eax
push 0x575168
lea ecx, [ebp - 0x2a7c]
call fcn.00415da0
mov dword [ebp - 0x2cb8], eax
mov eax, dword [ebp - 0x2cb8]
mov dword [ebp - 0x2cbc], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x2cbc]
push ecx
lea edx, [ebp - 0x2a80]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2cc0], eax
mov eax, dword [ebp - 0x2cc0]
mov dword [ebp - 0x2cc4], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x2cc4]
push ecx
lea edx, [ebp - 0x2a84]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2cc8], eax
mov eax, dword [ebp - 0x2cc8]
mov dword [ebp - 0x2ccc], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x2ccc]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x2a84]
call fcn.00415e20
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2a80]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a7c]
call fcn.00415e20
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x4dc], 0
je 0x4201c8
mov dword [ebp - 0x2cd0], 0x5751bc
jmp 0x4201d2
mov dword [ebp - 0x2cd0], 0x5751b8
push 0x5755cc
mov eax, dword [ebp - 0x2cd0]
push eax
push 0x575154
lea ecx, [ebp - 0x2a88]
call fcn.00415da0
mov dword [ebp - 0x2cd4], eax
mov ecx, dword [ebp - 0x2cd4]
mov dword [ebp - 0x2cd8], ecx
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x2cd8]
push edx
lea eax, [ebp - 0x2a8c]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2cdc], eax
mov ecx, dword [ebp - 0x2cdc]
mov dword [ebp - 0x2ce0], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x2ce0]
push edx
lea eax, [ebp - 0x2a90]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2ce4], eax
mov ecx, dword [ebp - 0x2ce4]
mov dword [ebp - 0x2ce8], ecx
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x2ce8]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x2a90]
call fcn.00415e20
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x2a8c]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a88]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x4e0], 0
je 0x4202c8
mov dword [ebp - 0x2cec], 0x5751bc
jmp 0x4202d2
mov dword [ebp - 0x2cec], 0x5751b8
push 0x5755cc
mov ecx, dword [ebp - 0x2cec]
push ecx
push 0x575138
lea ecx, [ebp - 0x2a94]
call fcn.00415da0
mov dword [ebp - 0x2cf0], eax
mov edx, dword [ebp - 0x2cf0]
mov dword [ebp - 0x2cf4], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x2cf4]
push eax
lea ecx, [ebp - 0x2a98]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2cf8], eax
mov edx, dword [ebp - 0x2cf8]
mov dword [ebp - 0x2cfc], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x2cfc]
push eax
lea ecx, [ebp - 0x2a9c]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d00], eax
mov edx, dword [ebp - 0x2d00]
mov dword [ebp - 0x2d04], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x2d04]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2a9c]
call fcn.00415e20
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2a98]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a94]
call fcn.00415e20
push 0x5755cc
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
add eax, 0x4e4
push eax
push 0x575114
lea ecx, [ebp - 0x2aa0]
call fcn.00415da0
mov dword [ebp - 0x2d08], eax
mov edx, dword [ebp - 0x2d08]
mov dword [ebp - 0x2d0c], edx
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x2d0c]
push eax
lea ecx, [ebp - 0x2aa4]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d10], eax
mov edx, dword [ebp - 0x2d10]
mov dword [ebp - 0x2d14], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x2d14]
push eax
lea ecx, [ebp - 0x2aa8]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d18], eax
mov edx, dword [ebp - 0x2d18]
mov dword [ebp - 0x2d1c], edx
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x2d1c]
push eax
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2aa8]
call fcn.00415e20
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2aa4]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2aa0]
call fcn.00415e20
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x50c], 0
je 0x4204a8
mov dword [ebp - 0x2d20], 0x5751bc
jmp 0x4204b2
mov dword [ebp - 0x2d20], 0x5751b8
push 0x5755cc
mov edx, dword [ebp - 0x2d20]
push edx
push 0x5750f4
lea ecx, [ebp - 0x2aac]
call fcn.00415da0
mov dword [ebp - 0x2d24], eax
mov eax, dword [ebp - 0x2d24]
mov dword [ebp - 0x2d28], eax
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x2d28]
push ecx
lea edx, [ebp - 0x2ab0]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d2c], eax
mov eax, dword [ebp - 0x2d2c]
mov dword [ebp - 0x2d30], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x2d30]
push ecx
lea edx, [ebp - 0x2ab4]
push edx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d34], eax
mov eax, dword [ebp - 0x2d34]
mov dword [ebp - 0x2d38], eax
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x2d38]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2ab4]
call fcn.00415e20
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x2ab0]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2aac]
call fcn.00415e20
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x50c], 0
je 0x420688
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x514]
push ecx
mov edx, dword [eax + 0x510]
push edx
push str._I64u
lea eax, [ebp - 0x2454]
push eax
call fcn.00527b98
add esp, 0x10
push 0x5750cc
lea ecx, [ebp - 0x434]
push ecx
lea ecx, [ebp - 0x2ab8]
call fcn.00415da0
mov dword [ebp - 0x2d3c], eax
mov edx, dword [ebp - 0x2d3c]
mov dword [ebp - 0x2d40], edx
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x2d40]
push eax
lea ecx, [ebp - 0x2abc]
push ecx
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d44], eax
mov edx, dword [ebp - 0x2d44]
mov dword [ebp - 0x2d48], edx
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x2d48]
call fcn.00415f60
push eax
lea eax, [ebp - 0x2454]
push eax
mov ecx, dword [ebp - 0x43c]
push ecx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
push eax
push str.LeftTime
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x2abc]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ab8]
call fcn.00415e20
mov edx, dword [ebp - 0x43c]
push edx
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
cmp dword [eax + 0x518], 0
je 0x4206b5
mov dword [ebp - 0x2d4c], 0x5751bc
jmp 0x4206bf
mov dword [ebp - 0x2d4c], 0x5751b8
push 0x5755cc
mov eax, dword [ebp - 0x2d4c]
push eax
push 0x57508c
lea ecx, [ebp - 0x2ac0]
call fcn.00415da0
mov dword [ebp - 0x2d50], eax
mov ecx, dword [ebp - 0x2d50]
mov dword [ebp - 0x2d54], ecx
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x2d54]
push edx
lea eax, [ebp - 0x2ac4]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d58], eax
mov ecx, dword [ebp - 0x2d58]
mov dword [ebp - 0x2d5c], ecx
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x2d5c]
push edx
lea eax, [ebp - 0x2ac8]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d60], eax
mov ecx, dword [ebp - 0x2d60]
mov dword [ebp - 0x2d64], ecx
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x2d64]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x2ac8]
call fcn.00415e20
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x2ac4]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ac0]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x51c]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x57506c
lea ecx, [ebp - 0x2acc]
call fcn.00415da0
mov dword [ebp - 0x2d68], eax
mov ecx, dword [ebp - 0x2d68]
mov dword [ebp - 0x2d6c], ecx
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x2d6c]
push edx
lea eax, [ebp - 0x2ad0]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d70], eax
mov ecx, dword [ebp - 0x2d70]
mov dword [ebp - 0x2d74], ecx
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x2d74]
push edx
lea eax, [ebp - 0x2ad4]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d78], eax
mov ecx, dword [ebp - 0x2d78]
mov dword [ebp - 0x2d7c], ecx
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x2d7c]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x2ad4]
call fcn.00415e20
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x2ad0]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2acc]
call fcn.00415e20
mov eax, dword [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x810
call fcn.00411af0
mov ecx, dword [eax + 0x520]
push ecx
push 0x5755ec
lea edx, [ebp - 0x2454]
push edx
call fcn.00527b98
add esp, 0xc
push 0x5755cc
lea eax, [ebp - 0x2454]
push eax
push 0x575040
lea ecx, [ebp - 0x2ad8]
call fcn.00415da0
mov dword [ebp - 0x2d80], eax
mov ecx, dword [ebp - 0x2d80]
mov dword [ebp - 0x2d84], ecx
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x2d84]
push edx
lea eax, [ebp - 0x2adc]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d88], eax
mov ecx, dword [ebp - 0x2d88]
mov dword [ebp - 0x2d8c], ecx
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0x2d8c]
push edx
lea eax, [ebp - 0x2ae0]
push eax
call fcn.00411930
add esp, 0xc
mov dword [ebp - 0x2d90], eax
mov ecx, dword [ebp - 0x2d90]
mov dword [ebp - 0x2d94], ecx
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0x2d94]
push edx
lea ecx, [ebp - 0x448]
call fcn.004115f0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x2ae0]
call fcn.00415e20
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x2adc]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ad8]
call fcn.00415e20
jmp 0x41ef78
mov eax, dword [ebp - 0x440]
push eax
push 1
lea ecx, [ebp - 0x448]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x2ae4]
push ecx
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x2d98], eax
mov edx, dword [ebp - 0x2d98]
mov dword [ebp - 0x2d9c], edx
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x2d9c]
call fcn.00412150
push eax
call fcn.00529140
add esp, 4
push eax
lea ecx, [ebp - 0x448]
call fcn.00415f60
push eax
lea eax, [ebp - 0x2ae8]
push eax
call fcn.00499e90
add esp, 8
mov dword [ebp - 0x2da0], eax
mov ecx, dword [ebp - 0x2da0]
call fcn.00412150
push eax
call fcn.00529a6e
add esp, 0x10
lea ecx, [ebp - 0x2ae8]
call fcn.00412130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ae4]
call fcn.00412130
mov ecx, dword [ebp - 0x440]
push ecx
call fcn.00529b67
add esp, 4
mov ecx, dword [ebp - 0x2aec]
add ecx, 0x88c
mov edx, dword [ebp - 0x2aec]
mov eax, dword [edx + 0x88c]
mov edx, dword [eax + 0x14]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.00415e20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00527aad
mov esp, ebp
pop ebp
ret