Function at 0x4335a0
Capabilities:
Check http status code
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
lea ecx, [ebx + 0xac24]
lea eax, [ebp - 0x30]
call fcn.00442d90
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebx + 0x2f4]
push edx
call fcn.00443f20
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x357d0]
cmp eax, 0xfa
jg 0x43510f
je 0x434664
cmp eax, 0xc8
ja case.0x433604.1
movzx ecx, byte [eax + 0x435a28]
jmp dword [ecx*4 + 0x435a08]
mov dl, byte [ebx + 0xa427c]
test dl, dl
jne case.0x433604.0
mov esi, ebx
mov byte [ebx + 0xa42bd], 1
call fcn.004117f0
push ebx
call fcn.0043a8d0
or ecx, 0xffffffff
mov dword [0x4e2370], 0
mov dword [0x4e2378], ecx
mov dword [0x4e25ec], ecx
mov eax, 0x4e2644
lea esp, [esp]
mov dword [eax - 0x54], ecx
mov dword [eax], ecx
add eax, 4
cmp eax, 0x4e2698
jl 0x433650
or eax, 0xffffffff
lea edi, [ebx + 0xa4164]
mov dword [0x4e2698], eax
mov dword [0x4e269c], eax
mov dword [0x4e26a0], eax
mov dword [0x4e26a4], eax
mov dword [0x4e2398], 0
mov dword [0x4e26c8], eax
mov dword [0x4e26b0], eax
mov dword [0x4e26ac], eax
mov dword [0x4e26b4], eax
mov dword [0x4b920c], eax
mov dword [0x4cc554], eax
mov dword [0x4cc558], eax
mov dword [0x4cc55c], eax
mov dword [0x4cc560], eax
mov dword [0x4cc564], eax
mov dword [0x4cc568], eax
mov dword [0x4cc56c], eax
mov dword [0x4cc570], eax
call fcn.00432da0
call fcn.00432b70
push 0
push 8
lea esi, [ebx + 0xa3f48]
mov ecx, 0x93
mov edi, 0x4e239c
rep movsd dword es:[edi], dword [esi]
mov al, byte [ebx + 0xa3e58]
push str.CFGChip.kg
push ebx
mov byte [0x4e25e8], al
call fcn.00417210
or eax, 0xffffffff
mov byte [ebx + 0xb120], 0
mov dword [0x4e26b8], eax
mov dword [0x4e26bc], eax
mov dword [0x4e26c0], eax
mov dword [0x4e26c4], eax
cmp dword [0x4e2390], eax
jne 0x433788
mov edx, dword [ebx + 0x21c]
mov eax, dword [edx + 0x14]
lea ecx, [ebx + 0x21c]
call eax
push 0x10010
push 0x49d880
push 0x49d600
test eax, eax
jne 0x433761
push eax
call dword [0x48935c]
mov dword [ebx + 0x357d0], 0x384
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebx + 0x21c]
mov eax, dword [edx + 0xb8]
lea ecx, [ebx + 0x21c]
call eax
mov dword [ebx + 0x357d0], 0x384
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x357d0], 0x6e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebx + 0xb0ec]
push ecx
call fcn.00406f70
mov esi, ebx
call fcn.00404080
mov eax, dword [0x4e2370]
test eax, eax
js 0x4337be
push eax
push ebx
call fcn.004040c0
push ebx
mov byte [ebx + 0xb120], 1
call fcn.00435c10
mov edx, dword [0x4e2370]
mov eax, dword [edx*4 + 0x4b9058]
push eax
push ebx
call fcn.004174c0
mov ecx, dword [0x4e26bc]
mov dword [0x4e2378], 0xffffffff
mov dword [0x4e26b8], ecx
mov byte [ebx + 0xa42bd], 0
mov dword [ebx + 0x357d0], 0x96
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x4e2370]
test eax, eax
js 0x43381f
push eax
push ebx
call fcn.004040c0
push ebx
mov byte [ebx + 0xb120], 1
call fcn.00435c10
mov edx, dword [0x4e2370]
mov eax, dword [edx*4 + 0x4b9058]
push eax
push ebx
call fcn.004174c0
mov ecx, dword [0x4e26bc]
mov dword [0x4e2378], 0xffffffff
mov dword [0x4e26b8], ecx
mov byte [ebx + 0xa42bd], 0
mov dword [ebx + 0x357d0], 0x96
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, ebx
call fcn.00403a30
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0xb104]
cmp dword [0x4e26c8], eax
je 0x433898
push ebx
mov ecx, eax
mov dword [0x4e26c8], eax
call fcn.00432e70
add esp, 4
mov esi, dword [ebx + 0xad80]
mov edi, dword [ebx + 0xad84]
mov eax, esi
xor eax, edi
mov edx, eax
and edx, edi
test dl, 2
jne 0x4338bd
mov ecx, eax
and ecx, esi
test ecx, 0x2000
je 0x4338c4
mov dword [ebp - 8], 5
mov edi, dword [0x489370]
and eax, esi
test eax, 0x10000
je 0x433930
mov esi, dword [0x4e26b8]
dec esi
jns 0x4338e1
mov esi, 0x18
mov edx, dword [esi*8 + 0x4b946c]
mov eax, dword [esi*8 + 0x4b9468]
push edx
push eax
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebx + 0x2f4]
call fcn.00443ea0
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
mov eax, dword [eax + 4]
mov edx, dword [ebx + 0x21c]
mov edx, dword [edx + 0x60]
lea ecx, [ebx + 0x21c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call edi
mov dword [0x4e26b8], esi
mov eax, dword [ebx + 0xad80]
mov edx, dword [ebx + 0xad84]
xor edx, eax
and edx, eax
test edx, 0x20000
je 0x4339a5
mov esi, dword [0x4e26b8]
inc esi
cmp esi, 0x18
jle 0x433956
xor esi, esi
mov eax, dword [esi*8 + 0x4b946c]
mov ecx, dword [esi*8 + 0x4b9468]
push eax
push ecx
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebx + 0x2f4]
call fcn.00443ea0
mov ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov edx, dword [eax + 4]
mov eax, dword [ebx + 0x21c]
mov eax, dword [eax + 0x60]
lea ecx, [ebx + 0x21c]
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x18]
push edx
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
push ecx
push edx
call edi
mov dword [0x4e26b8], esi
mov eax, dword [ebx + 0xad80]
mov ecx, dword [ebx + 0xad84]
xor ecx, eax
and ecx, eax
jns 0x4339c9
push 0x13
mov eax, ebx
call fcn.004192a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 8]
dec eax
cmp eax, 0x1b
ja case.default.0x4339d6
jmp dword [eax*4 + 0x435af4]
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4339ee
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e2370]
test eax, eax
je case.0x433604.1
mov edx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], edx
mov dword [0x4e2370], 0
mov dword [ebx + 0x357d0], 0x64
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x433a36
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e2370]
mov ecx, 1
cmp eax, ecx
je case.0x433604.1
cmp eax, 3
jge case.0x433604.1
mov edx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], edx
mov dword [0x4e2370], ecx
mov dword [ebx + 0x357d0], 0xc8
add dword [0x4e2398], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x433a8e
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e2370]
cmp eax, 2
je case.0x433604.1
mov ecx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], ecx
mov dword [0x4e2370], 2
mov dword [ebx + 0x357d0], 0x12c
mov eax, dword [0x4e2398]
add eax, 5
cdq
mov ecx, 6
idiv ecx
mov dword [0x4e2398], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x433aed
mov edi, ebx
call fcn.0042f510
mov byte [0x4e2374], 1
mov dword [ebx + 0x357d0], 0x384
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba078]
test ecx, ecx
js 0x433b18
mov edi, ebx
call fcn.0042f510
mov byte [0x4e2374], 0
mov dword [ebx + 0x357d0], 0x384
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x357d0], 0x320
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x433b56
mov edi, ebx
call fcn.0042f510
cmp byte [ebx + 0xa3e8c], 0
je case.0x433604.1
push 7
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa3e58], 1
mov byte [ebx + 0xa4068], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 7
mov edi, ebx
call fcn.004045b0
cmp byte [ebx + 0xa3e8c], 0
mov al, byte [ebx + 0xa4068]
mov dword [ebx + 0xa406c], 0
mov byte [ebp - 0xc], al
je case.0x433604.1
cmp byte [ebx + 0x318], 1
mov edx, dword [ebx + 0x314]
mov dword [ebp - 8], edx
jne 0x433be0
cmp byte [ebx + 0x318], 0
je 0x433be0
test byte [ebx + 0x31c], 1
je 0x433be0
test al, al
jne case.0x433604.1
jmp 0x433be0
mov al, byte [ebx + 0xa427c]
test al, al
jne 0x433be0
lea esi, [ebx + 0x368]
mov edi, 7
mov eax, esi
call fcn.00444510
add esi, 0x254
dec edi
jne 0x433bf5
lea esi, [ebx + 0x13b4]
mov edi, 0x32
push esi
call fcn.0043e6b0
add esi, 0x290
dec edi
jne 0x433c10
lea esi, [ebx + 0x93d4]
mov edi, 6
lea ebx, [ebx]
mov eax, esi
call fcn.00445540
add esi, 8
dec edi
jne 0x433c30
lea eax, [ebx + 0x9408]
mov dword [ebp - 0x10], eax
call fcn.00447960
lea esi, [ebx + 0xb154]
mov edi, 0x14
push esi
call fcn.0043e6b0
add esi, 0x290
dec edi
jne 0x433c56
lea ecx, [ebx + 0xe6f8]
push ecx
call fcn.0043e6b0
lea esi, [ebx + 0x2f4]
call fcn.00443ba0
xor edx, edx
cmp byte [ebp - 0xc], dl
push str.dwmapi.dll
setne dl
mov dword [ebx + 0x31c], edx
call dword [0x489090]
mov edi, eax
test edi, edi
je 0x433cbf
push str.DwmEnableComposition
push edi
call dword [0x4890a0]
test eax, eax
je 0x433cb8
cmp byte [ebx + 0xa42c0], 0
je 0x433cb8
push 1
call eax
push edi
call dword [0x4890ac]
mov ecx, dword [ebp - 8]
push 1
push esi
call fcn.00443750
test al, al
je case.0x433604.1
mov byte [ebx + 0xa3e58], 1
lea edi, [ebx + 0x368]
mov dword [ebp - 8], 7
mov edx, esi
mov ecx, edi
call fcn.00444e70
add edi, 0x254
dec dword [ebp - 8]
jne 0x433ce6
lea edi, [ebx + 0x13b4]
mov dword [ebp - 8], 0x32
mov eax, esi
mov ecx, edi
call fcn.004401d0
add edi, 0x290
dec dword [ebp - 8]
jne 0x433d07
lea edi, [ebx + 0x93d4]
mov dword [ebp - 8], 6
push esi
mov eax, edi
call fcn.004455f0
add edi, 8
dec dword [ebp - 8]
jne 0x433d28
lea eax, [ebx + 0xb154]
push eax
mov eax, esi
call fcn.0043b670
mov eax, dword [ebx + 0x21c]
mov edx, dword [eax + 0x48]
lea ecx, [ebx + 0x21c]
call edx
mov eax, dword [ebx + 0x21c]
mov edx, dword [eax + 0x4c]
lea ecx, [ebx + 0x21c]
call edx
mov edi, dword [0x489360]
push str.normal.cur
mov dword [ebx + 0x9814], 0
call edi
push str.push.cur
mov dword [ebx + 0x9808], eax
call edi
push str.cross.cur
mov dword [ebx + 0x980c], eax
call edi
mov ecx, dword [ebp - 0x10]
mov edx, esi
mov dword [ebx + 0x9810], eax
call fcn.004479a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x433dc3
mov edi, ebx
call fcn.0042f510
cmp byte [ebx + 0xa3e8d], 0
je case.0x433604.1
push 8
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa3e58], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 8
mov edi, ebx
call fcn.004045b0
cmp byte [ebx + 0xa3e8d], 0
mov al, byte [ebx + 0xa4068]
mov dword [ebx + 0xa406c], 1
je case.0x433604.1
mov ecx, dword [ebx + 0x314]
mov dword [ebp - 8], ecx
jmp 0x433e20
mov dl, byte [ebx + 0xa427c]
test dl, dl
jne 0x433e20
lea esi, [ebx + 0x368]
mov edi, 7
mov eax, esi
call fcn.00444510
add esi, 0x254
dec edi
jne 0x433e35
lea esi, [ebx + 0x13b4]
mov edi, 0x32
push esi
call fcn.0043e6b0
add esi, 0x290
dec edi
jne 0x433e50
lea esi, [ebx + 0x93d4]
mov edi, 6
lea ebx, [ebx]
mov eax, esi
call fcn.00445540
add esi, 8
dec edi
jne 0x433e70
lea eax, [ebx + 0x9408]
mov dword [ebp - 0x10], eax
call fcn.00447960
lea esi, [ebx + 0xb154]
mov edi, 0x14
push esi
call fcn.0043e6b0
add esi, 0x290
dec edi
jne 0x433e96
lea eax, [ebx + 0xe6f8]
push eax
call fcn.0043e6b0
lea esi, [ebx + 0x2f4]
call fcn.00443ba0
push str.dwmapi.dll
mov dword [ebx + 0x31c], edi
call dword [0x489090]
mov edi, eax
test edi, edi
je 0x433eee
push str.DwmEnableComposition
push edi
call dword [0x4890a0]
test eax, eax
je 0x433ee7
push 0
call eax
push edi
call dword [0x4890ac]
mov ecx, dword [ebp - 8]
push 0
push esi
call fcn.00443750
test al, al
je case.0x433604.1
mov dl, 1
mov eax, esi
mov byte [ebx + 0xa3e58], 0
call fcn.00443de0
lea edi, [ebx + 0x368]
mov dword [ebp - 8], 7
mov edi, edi
mov edx, esi
mov ecx, edi
call fcn.00444e70
add edi, 0x254
dec dword [ebp - 8]
jne 0x433f20
lea edi, [ebx + 0x13b4]
mov dword [ebp - 8], 0x32
mov eax, esi
mov ecx, edi
call fcn.004401d0
add edi, 0x290
dec dword [ebp - 8]
jne 0x433f41
lea edi, [ebx + 0x93d4]
mov dword [ebp - 8], 6
push esi
mov eax, edi
call fcn.004455f0
add edi, 8
dec dword [ebp - 8]
jne 0x433f62
lea eax, [ebx + 0xb154]
push eax
mov eax, esi
call fcn.0043b670
mov edx, dword [ebx + 0x21c]
mov eax, dword [edx + 0x48]
lea ecx, [ebx + 0x21c]
call eax
mov edx, dword [ebx + 0x21c]
mov eax, dword [edx + 0x4c]
lea ecx, [ebx + 0x21c]
call eax
jmp 0x433d68
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x433fb8
mov edi, ebx
call fcn.0042f510
cmp byte [ebx + 0xa3e8c], 0
je case.0x433604.1
push 9
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa3e58], 1
mov byte [ebx + 0xa4068], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 9
mov edi, ebx
call fcn.004045b0
cmp byte [ebx + 0xa3e8c], 0
mov dword [ebx + 0xa406c], 2
je case.0x433604.1
cmp byte [ebx + 0x318], 1
mov ecx, dword [ebx + 0x314]
mov dword [ebp - 8], ecx
jne 0x434030
cmp byte [ebx + 0x318], 0
je 0x434030
test byte [ebx + 0x31c], 1
jne case.0x433604.1
lea ecx, [ecx]
mov dl, byte [ebx + 0xa427c]
test dl, dl
jne 0x434030
lea esi, [ebx + 0x368]
mov edi, 7
mov eax, esi
call fcn.00444510
add esi, 0x254
dec edi
jne 0x434045
lea esi, [ebx + 0x13b4]
mov edi, 0x32
push esi
call fcn.0043e6b0
add esi, 0x290
dec edi
jne 0x434060
lea esi, [ebx + 0x93d4]
mov edi, 6
lea ebx, [ebx]
mov eax, esi
call fcn.00445540
add esi, 8
dec edi
jne 0x434080
lea eax, [ebx + 0x9408]
mov dword [ebp - 0x10], eax
call fcn.00447960
lea esi, [ebx + 0xb154]
mov edi, 0x14
push esi
call fcn.0043e6b0
add esi, 0x290
dec edi
jne 0x4340a6
lea eax, [ebx + 0xe6f8]
push eax
call fcn.0043e6b0
lea esi, [ebx + 0x2f4]
call fcn.00443ba0
push str.dwmapi.dll
mov dword [ebx + 0x31c], 1
call dword [0x489090]
mov edi, eax
test edi, edi
je 0x43410b
push str.DwmEnableComposition
push edi
call dword [0x4890a0]
test eax, eax
je 0x434104
cmp byte [ebx + 0xa42c0], 0
je 0x434104
push 1
call eax
push edi
call dword [0x4890ac]
mov ecx, dword [ebp - 8]
push 1
push esi
call fcn.00443750
test al, al
je case.0x433604.1
mov byte [ebx + 0xa3e58], 1
lea edi, [ebx + 0x368]
mov dword [ebp - 8], 7
mov edx, esi
mov ecx, edi
call fcn.00444e70
add edi, 0x254
dec dword [ebp - 8]
jne 0x434132
lea edi, [ebx + 0x13b4]
mov dword [ebp - 8], 0x32
mov eax, esi
mov ecx, edi
call fcn.004401d0
add edi, 0x290
dec dword [ebp - 8]
jne 0x434153
lea edi, [ebx + 0x93d4]
mov dword [ebp - 8], 6
push esi
mov eax, edi
call fcn.004455f0
add edi, 8
dec dword [ebp - 8]
jne 0x434174
lea eax, [ebx + 0xb154]
push eax
mov eax, esi
call fcn.0043b670
mov edx, dword [ebx + 0x21c]
mov eax, dword [edx + 0x48]
lea ecx, [ebx + 0x21c]
call eax
mov edx, dword [ebx + 0x21c]
mov eax, dword [edx + 0x4c]
lea ecx, [ebx + 0x21c]
call eax
jmp 0x433d68
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4341ca
mov edi, ebx
call fcn.0042f510
push 0xa
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4064], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xb
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434206
mov edi, ebx
call fcn.0042f510
push 0xb
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4064], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xa
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434242
mov edi, ebx
call fcn.0042f510
push 0xd
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4060], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xc
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x43427e
mov edi, ebx
call fcn.0042f510
push 0xc
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4060], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xd
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4342ba
mov edi, ebx
call fcn.0042f510
push 0xf
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4061], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xe
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4342f6
mov edi, ebx
call fcn.0042f510
push 0xe
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4061], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xf
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434332
mov edi, ebx
call fcn.0042f510
push 0x10
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4062], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0x11
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x43436e
mov edi, ebx
call fcn.0042f510
push 0x11
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4062], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0x10
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4343aa
mov edi, ebx
call fcn.0042f510
push 0x1b
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4066], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0x1c
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4343e6
mov edi, ebx
call fcn.0042f510
push 0x1c
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4066], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0x1b
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434422
mov edi, ebx
call fcn.0042f510
mov ecx, dword [ebp - 8]
push ecx
xor eax, eax
mov edi, ebx
call fcn.004045b0
mov edx, dword [ebp - 8]
add edx, 0xffffffee
mov dword [ebx + 0xa4080], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [0x4e2378], 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x4e2378]
push eax
mov ecx, ebx
call fcn.00435e70
test byte [ebx + 0xad80], 1
jne case.0x433604.1
mov edx, dword [0x4e2378]
mov eax, dword [edx*4 + 0x4e25f0]
cmp eax, 0xffffffff
je 0x4344c3
imul eax, eax, 0xbc
lea ecx, [eax + ebx + 0x21d40]
test ecx, ecx
je 0x4344c3
mov eax, dword [edx*4 + 0x4b91b8]
shl eax, 5
add eax, 0x49aba0
mov edx, dword [eax]
mov dword [ecx + 0x7c], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x80], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x84], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x88], eax
mov edx, ebx
call fcn.00432af0
mov dword [0x4e2378], 0xffffffff
mov dword [ebx + 0x357d0], 0x96
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebx + 0xb0ec]
push ecx
call fcn.00406f70
mov esi, ebx
call fcn.00404080
mov eax, dword [0x4e2370]
test eax, eax
js 0x43450a
push eax
push ebx
call fcn.004040c0
push ebx
mov byte [ebx + 0xb120], 1
call fcn.00435c10
mov edx, dword [0x4e2370]
mov eax, dword [edx*4 + 0x4b9058]
push eax
push ebx
call fcn.004174c0
mov eax, dword [0x4e25ec]
or ecx, 0xffffffff
cmp eax, ecx
je 0x43455d
test eax, eax
js 0x434557
cmp eax, 0x190
jge 0x434557
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e25ec], ecx
lea edi, [ebx + 0x21d40]
xor eax, eax
cmp byte [edi], 0
je 0x434636
inc eax
add edi, 0xbc
cmp eax, 0x190
jl 0x434565
or eax, 0xffffffff
mov dword [0x4e25ec], eax
cmp eax, 0xffffffff
je 0x4345f6
mov eax, dword [0x4e2390]
cmp eax, 0xffffffff
je 0x4345f6
mov edx, dword [0x4e2380]
lea ecx, [eax + eax*2]
lea edi, [edx + ecx*8]
call fcn.0044e810
mov ecx, dword [0x4e2380]
push eax
mov eax, dword [0x4e2390]
push 0x170
sub esp, 0x18
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0044e2d0
call fcn.00433130
mov edx, dword [0x4e25ec]
add esp, 0x18
push eax
push 1
push edx
mov eax, 1
mov ecx, ebx
call fcn.00421060
mov ecx, dword [0x4e25ec]
push 1
mov eax, ebx
call fcn.00421140
mov eax, dword [ebx + 0xb0cc]
mov dword [0x4e237c], eax
call fcn.00433160
mov ecx, dword [0x4e26c0]
mov dword [0x4e2378], 0xffffffff
mov dword [0x4e26b8], ecx
mov byte [ebx + 0xa42bd], 0
mov dword [ebx + 0x357d0], 0xfa
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea esi, [edi + 0xa4]
mov dword [ebp - 0x10], eax
mov byte [edi], 1
call fcn.0044e3a0
xor eax, eax
mov dword [edi + 0xa0], eax
mov dword [edi + 0x9c], eax
mov eax, dword [ebp - 0x10]
mov dword [edi + 4], 1
jmp 0x43457f
mov esi, ebx
mov byte [ebp - 0xc], 0
call fcn.00403a30
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0xb104]
cmp dword [0x4e26c8], eax
je 0x434690
push ebx
mov ecx, eax
mov dword [0x4e26c8], eax
call fcn.00432e70
add esp, 4
mov esi, dword [ebx + 0xad80]
mov edi, dword [ebx + 0xad84]
mov eax, esi
xor eax, edi
mov edx, eax
and edx, edi
test dl, 2
jne 0x4346b5
mov ecx, eax
and ecx, esi
test ecx, 0x2000
je 0x4346bc
mov dword [ebp - 8], 5
mov edi, dword [0x489370]
and eax, esi
test eax, 0x10000
je 0x434728
mov esi, dword [0x4e26b8]
dec esi
jns 0x4346d9
mov esi, 0xe
mov edx, dword [esi*8 + 0x4b95fc]
mov eax, dword [esi*8 + 0x4b95f8]
push edx
push eax
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebx + 0x2f4]
call fcn.00443ea0
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
mov eax, dword [eax + 4]
mov edx, dword [ebx + 0x21c]
mov edx, dword [edx + 0x60]
lea ecx, [ebx + 0x21c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call edi
mov dword [0x4e26b8], esi
mov eax, dword [ebx + 0xad80]
mov edx, dword [ebx + 0xad84]
xor edx, eax
and edx, eax
test edx, 0x20000
je 0x43479d
mov esi, dword [0x4e26b8]
inc esi
cmp esi, 0xe
jle 0x43474e
xor esi, esi
mov eax, dword [esi*8 + 0x4b95fc]
mov ecx, dword [esi*8 + 0x4b95f8]
push eax
push ecx
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebx + 0x2f4]
call fcn.00443ea0
mov ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov edx, dword [eax + 4]
mov eax, dword [ebx + 0x21c]
mov eax, dword [eax + 0x60]
lea ecx, [ebx + 0x21c]
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x18]
push edx
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
push ecx
push edx
call edi
mov dword [0x4e26b8], esi
mov eax, dword [ebx + 0xad80]
mov ecx, dword [ebx + 0xad84]
xor ecx, eax
and ecx, eax
js 0x4339b7
mov eax, dword [ebp - 8]
dec eax
cmp eax, 0xf
ja case.0x4347c0.2
jmp dword [eax*4 + 0x435b64]
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4347d8
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e25ec]
or ecx, 0xffffffff
cmp eax, ecx
je 0x43480a
test eax, eax
js 0x434804
cmp eax, 0x190
jge 0x434804
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e25ec], ecx
mov eax, dword [0x4e26b0]
cmp eax, ecx
je 0x434839
test eax, eax
js 0x434833
cmp eax, 0x190
jge 0x434833
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b0], ecx
mov eax, dword [0x4e26ac]
cmp eax, ecx
je 0x434868
test eax, eax
js 0x434862
cmp eax, 0x190
jge 0x434862
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26ac], ecx
mov eax, dword [0x4e26b4]
cmp eax, ecx
je 0x434897
test eax, eax
js 0x434891
cmp eax, 0x190
jge 0x434891
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b4], ecx
mov edx, dword [0x4e2370]
mov eax, dword [0x4e26b8]
mov dword [edx*4 + 0x4e26bc], eax
mov dword [0x4e2370], 0
mov dword [ebx + 0x357d0], 0x64
dec dword [0x4e2398]
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4348d9
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e25ec]
or ecx, 0xffffffff
cmp eax, ecx
je 0x43490b
test eax, eax
js 0x434905
cmp eax, 0x190
jge 0x434905
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e25ec], ecx
mov eax, dword [0x4e26b0]
cmp eax, ecx
je 0x43493a
test eax, eax
js 0x434934
cmp eax, 0x190
jge 0x434934
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b0], ecx
mov eax, dword [0x4e26ac]
cmp eax, ecx
je 0x434969
test eax, eax
js 0x434963
cmp eax, 0x190
jge 0x434963
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26ac], ecx
mov eax, dword [0x4e26b4]
cmp eax, ecx
je 0x434998
test eax, eax
js 0x434992
cmp eax, 0x190
jge 0x434992
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b4], ecx
mov eax, dword [0x4e2370]
cmp eax, 2
je 0x4349c3
mov ecx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], ecx
mov dword [0x4e2370], 2
mov dword [ebx + 0x357d0], 0x12c
inc dword [0x4e2398]
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4349df
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e25ec]
or ecx, 0xffffffff
cmp eax, ecx
je 0x434a11
test eax, eax
js 0x434a0b
cmp eax, 0x190
jge 0x434a0b
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e25ec], ecx
mov eax, dword [0x4e26b0]
cmp eax, ecx
je 0x434a40
test eax, eax
js 0x434a3a
cmp eax, 0x190
jge 0x434a3a
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b0], ecx
mov eax, dword [0x4e26ac]
cmp eax, ecx
je 0x434a6f
test eax, eax
js 0x434a69
cmp eax, 0x190
jge 0x434a69
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26ac], ecx
mov eax, dword [0x4e26b4]
cmp eax, ecx
je 0x434a9e
test eax, eax
js 0x434a98
cmp eax, 0x190
jge 0x434a98
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b4], ecx
mov byte [0x4e2374], 1
mov dword [ebx + 0x357d0], 0x384
jmp 0x4350de
mov ecx, dword [0x4ba078]
test ecx, ecx
js 0x434ac5
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e25ec]
or ecx, 0xffffffff
cmp eax, ecx
je 0x434af7
test eax, eax
js 0x434af1
cmp eax, 0x190
jge 0x434af1
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e25ec], ecx
mov eax, dword [0x4e26b0]
cmp eax, ecx
je 0x434b26
test eax, eax
js 0x434b20
cmp eax, 0x190
jge 0x434b20
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b0], ecx
mov eax, dword [0x4e26ac]
cmp eax, ecx
je 0x434b55
test eax, eax
js 0x434b4f
cmp eax, 0x190
jge 0x434b4f
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26ac], ecx
mov eax, dword [0x4e26b4]
cmp eax, ecx
je 0x434b84
test eax, eax
js 0x434b7e
cmp eax, 0x190
jge 0x434b7e
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], ecx
mov dword [0x4e26b4], ecx
mov byte [0x4e2374], 0
mov dword [ebx + 0x357d0], 0x384
jmp 0x4350de
mov dword [ebx + 0x357d0], 0x320
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434bba
mov edi, ebx
call fcn.0042f510
push 7
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa405d], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 8
mov edi, ebx
call fcn.004045b0
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434bf2
mov edi, ebx
call fcn.0042f510
push 8
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa405d], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 7
mov edi, ebx
call fcn.004045b0
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434c2a
mov edi, ebx
call fcn.0042f510
push 9
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa405e], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xa
mov edi, ebx
call fcn.004045b0
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434c62
mov edi, ebx
call fcn.0042f510
push 0xa
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa405e], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 9
mov edi, ebx
call fcn.004045b0
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434c9a
mov edi, ebx
call fcn.0042f510
push 0xb
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4067], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xc
mov edi, ebx
call fcn.004045b0
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434cd2
mov edi, ebx
call fcn.0042f510
push 0xc
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4067], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xb
mov edi, ebx
call fcn.004045b0
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434d0a
mov edi, ebx
call fcn.0042f510
push 0xe
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4063], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xd
mov edi, ebx
call fcn.004045b0
lea esp, [esp]
mov dl, byte [ebx + 0xa427c]
test dl, dl
jne 0x434d30
mov eax, dword [0x4e2390]
cmp eax, 0xffffffff
je 0x434d63
mov ecx, dword [0x4e2380]
lea eax, [eax + eax*2]
lea edi, [ecx + eax*8]
push 1
push ecx
call fcn.0044e810
add esp, 4
push ebx
mov esi, eax
call fcn.004187f0
mov byte [ebp - 0xc], 1
jmp 0x4350de
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434d7d
mov edi, ebx
call fcn.0042f510
push 0xd
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa4063], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xe
mov edi, ebx
call fcn.004045b0
nop
mov dl, byte [ebx + 0xa427c]
test dl, dl
jne 0x434da0
jmp 0x434d3a
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434dbd
mov edi, ebx
call fcn.0042f510
mov ecx, dword [0x4e2384]
sub ecx, dword [0x4e2380]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x4350de
mov ecx, dword [0x4e2390]
test ecx, ecx
jne 0x434df2
lea ecx, [eax - 1]
jmp 0x434df3
dec ecx
mov eax, dword [0x4e25ec]
or edx, 0xffffffff
mov dword [0x4e2390], ecx
cmp eax, edx
je 0x434e31
test eax, eax
js 0x434e2b
cmp eax, 0x190
jge 0x434e2b
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], edx
mov ecx, dword [0x4e2390]
mov dword [0x4e25ec], edx
lea edi, [ebx + 0x21d40]
xor eax, eax
lea esp, [esp]
cmp byte [edi], 0
je 0x434ef8
inc eax
add edi, 0xbc
cmp eax, 0x190
jl 0x434e40
or eax, 0xffffffff
mov dword [0x4e25ec], eax
cmp eax, 0xffffffff
je 0x434ed0
cmp ecx, 0xffffffff
je 0x434ebb
mov eax, dword [0x4e2380]
lea edx, [ecx + ecx*2]
lea edi, [eax + edx*8]
call fcn.0044e810
mov edx, dword [0x4e2380]
push eax
mov eax, dword [0x4e2390]
push 0x170
lea ecx, [eax + eax*2]
sub esp, 0x18
lea eax, [edx + ecx*8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0044e2d0
call fcn.00433130
add esp, 0x18
push eax
mov eax, dword [0x4e25ec]
push 1
push eax
mov eax, 1
mov ecx, ebx
call fcn.00421060
mov ecx, dword [0x4e25ec]
push 1
mov eax, ebx
call fcn.00421140
lea ebx, [ebx]
mov cl, byte [ebx + 0xa427c]
test cl, cl
jne 0x434ed0
mov eax, dword [0x4e2390]
cmp eax, 0xffffffff
je 0x434d63
lea edx, [eax + eax*2]
mov eax, dword [0x4e2380]
lea edi, [eax + edx*8]
jmp 0x434d50
lea esi, [edi + 0xa4]
mov dword [ebp - 0x10], eax
mov byte [edi], 1
call fcn.0044e3a0
xor eax, eax
mov dword [edi + 0xa0], eax
mov dword [edi + 0x9c], eax
mov eax, dword [ebp - 0x10]
mov dword [edi + 4], 1
mov ecx, dword [0x4e2390]
jmp 0x434e5a
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x434f3d
mov edi, ebx
call fcn.0042f510
mov ecx, dword [0x4e2384]
sub ecx, dword [0x4e2380]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x4350de
mov ecx, dword [0x4e2390]
inc ecx
mov dword [0x4e2390], ecx
cmp ecx, eax
jl 0x434f7c
xor ecx, ecx
mov dword [0x4e2390], ecx
mov eax, dword [0x4e25ec]
or edx, 0xffffffff
cmp eax, edx
je 0x434fb4
test eax, eax
js 0x434fae
cmp eax, 0x190
jge 0x434fae
imul eax, eax, 0xbc
mov byte [eax + ebx + 0x21d40], 0
mov dword [eax + ebx + 0x21d44], edx
mov ecx, dword [0x4e2390]
mov dword [0x4e25ec], edx
lea edi, [ebx + 0x21d40]
xor eax, eax
lea esp, [esp]
cmp byte [edi], 0
je 0x435079
inc eax
add edi, 0xbc
cmp eax, 0x190
jl 0x434fc0
or eax, 0xffffffff
mov dword [0x4e25ec], eax
cmp eax, 0xffffffff
je 0x435050
cmp ecx, 0xffffffff
je 0x43503d
mov edx, dword [0x4e2380]
lea ecx, [ecx + ecx*2]
lea edi, [edx + ecx*8]
call fcn.0044e810
mov ecx, dword [0x4e2380]
push eax
mov eax, dword [0x4e2390]
push 0x170
sub esp, 0x18
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0044e2d0
call fcn.00433130
mov edx, dword [0x4e25ec]
add esp, 0x18
push eax
push 1
push edx
mov eax, 1
mov ecx, ebx
call fcn.00421060
mov ecx, dword [0x4e25ec]
push 1
mov eax, ebx
call fcn.00421140
lea esp, [esp]
mov al, byte [ebx + 0xa427c]
test al, al
jne 0x435050
mov eax, dword [0x4e2390]
cmp eax, 0xffffffff
je 0x434d63
mov edx, dword [0x4e2380]
lea ecx, [eax + eax*2]
lea edi, [edx + ecx*8]
jmp 0x434d50
lea esi, [edi + 0xa4]
mov dword [ebp - 0x10], eax
mov byte [edi], 1
call fcn.0044e3a0
xor eax, eax
mov dword [edi + 0xa0], eax
mov dword [edi + 0x9c], eax
mov eax, dword [ebp - 0x10]
mov dword [edi + 4], 1
mov ecx, dword [0x4e2390]
jmp 0x434fda
push ebx
xor ecx, ecx
call fcn.00436490
push ebx
mov ecx, 1
call fcn.00436490
push ebx
mov ecx, 2
call fcn.00436490
cmp dword [0x4e2378], 0xffffffff
je 0x4350de
mov dword [ebx + 0x357d0], 0x104
cmp dword [ebx + 0x357d0], 0xfa
jne case.0x433604.1
cmp byte [ebp - 0xc], 0
jne 0x435101
cmp dword [ebx + 0xa4070], 0
je case.0x433604.1
call fcn.00433160
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x168
jg 0x435723
je 0x435692
sub eax, 0x104
je 0x4355f5
sub eax, 0x28
je 0x435582
sub eax, 0x32
jne case.0x433604.1
mov esi, ebx
call fcn.00403a30
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0xb104]
cmp dword [0x4e26c8], eax
je 0x435165
push ebx
mov ecx, eax
mov dword [0x4e26c8], eax
call fcn.00432e70
add esp, 4
mov edi, dword [ebx + 0xad80]
mov esi, dword [ebx + 0xad84]
mov eax, edi
xor eax, esi
mov ecx, eax
and ecx, esi
test cl, 2
jne 0x43518a
mov edx, eax
and edx, edi
test edx, 0x2000
je 0x435191
mov dword [ebp - 8], 5
mov esi, dword [0x489370]
and eax, edi
test eax, 0x10000
je 0x4351fd
mov edi, dword [0x4e26b8]
dec edi
jns 0x4351ae
mov edi, 0x28
mov eax, dword [edi*8 + 0x4b978c]
mov ecx, dword [edi*8 + 0x4b9788]
push eax
push ecx
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebx + 0x2f4]
call fcn.00443ea0
mov ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov edx, dword [eax + 4]
mov eax, dword [ebx + 0x21c]
mov eax, dword [eax + 0x60]
lea ecx, [ebx + 0x21c]
mov dword [ebp - 0x14], edx
lea edx, [ebp - 0x18]
push edx
call eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
push ecx
push edx
call esi
mov dword [0x4e26b8], edi
mov eax, dword [ebx + 0xad80]
mov ecx, dword [ebx + 0xad84]
xor ecx, eax
and ecx, eax
test ecx, 0x20000
je 0x435272
mov edi, dword [0x4e26b8]
inc edi
cmp edi, 0x28
jle 0x435223
xor edi, edi
mov edx, dword [edi*8 + 0x4b978c]
mov eax, dword [edi*8 + 0x4b9788]
push edx
push eax
lea ecx, [ebp - 0x58]
push ecx
lea ecx, [ebx + 0x2f4]
call fcn.00443ea0
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
mov eax, dword [eax + 4]
mov edx, dword [ebx + 0x21c]
mov edx, dword [edx + 0x60]
lea ecx, [ebx + 0x21c]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
call edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call esi
mov dword [0x4e26b8], edi
mov eax, dword [ebx + 0xad80]
mov edx, dword [ebx + 0xad84]
xor edx, eax
and edx, eax
js 0x4339b7
mov eax, dword [ebp - 8]
dec eax
cmp eax, 0x2f
ja case.default.0x43529c
movzx eax, byte [eax + 0x435bdc]
jmp dword [eax*4 + 0x435ba4]
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4352b4
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e2370]
test eax, eax
je case.0x433604.1
mov ecx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], ecx
mov dword [0x4e2370], 0
mov dword [ebx + 0x357d0], 0x64
jmp 0x433abd
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4352f8
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e2370]
mov ecx, 1
cmp eax, ecx
je case.0x433604.1
mov edx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], edx
mov dword [0x4e2370], ecx
mov dword [ebx + 0x357d0], 0xc8
sub dword [0x4e2398], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x435347
mov edi, ebx
call fcn.0042f510
mov eax, dword [0x4e2370]
cmp eax, 2
je case.0x433604.1
mov ecx, dword [0x4e26b8]
mov dword [eax*4 + 0x4e26bc], ecx
mov dword [0x4e2370], 2
mov dword [ebx + 0x357d0], 0x12c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x435390
mov edi, ebx
call fcn.0042f510
push 0xb
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa3f60], 1
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xc
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4353cc
mov edi, ebx
call fcn.0042f510
push 0xc
lea eax, [ebx + 0xb0ec]
mov byte [ebx + 0xa3f60], 0
call fcn.004075a0
mov eax, dword [0x4e2370]
push 0xb
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba088]
test ecx, ecx
js case.0x433604.1
mov edi, ebx
call fcn.0042f510
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [ebp - 8]
mov edx, dword [esi*8 + 0x4b9824]
mov ecx, dword [esi*8 + 0x4b9820]
add esi, 0xffffffe1
push edx
mov edx, ebx
call fcn.0042f810
mov dword [0x4b920c], esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x435451
mov edi, ebx
call fcn.0042f510
cmp byte [ebx + 0xa3f4c], 0
mov edi, ebx
sete al
mov byte [ebx + 0xa3f4c], al
mov eax, dword [ebx + 0x35870]
call fcn.0042ee60
mov ecx, dword [ebp - 8]
mov eax, dword [0x4e2370]
push ecx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x435496
mov edi, ebx
call fcn.0042f510
cmp byte [ebx + 0xa3f4e], 0
mov eax, dword [ebp - 8]
sete dl
mov byte [ebx + 0xa3f4e], dl
push eax
mov eax, dword [0x4e2370]
mov edi, ebx
call fcn.004045b0
cmp byte [ebx + 0xa3f4e], 0
je case.0x433604.1
mov eax, ebx
call fcn.0042f7f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x4354e4
mov edi, ebx
call fcn.0042f510
cmp byte [ebx + 0xa3f4d], 0
mov edx, dword [ebp - 8]
sete cl
mov byte [ebx + 0xa3f4d], cl
mov eax, dword [0x4e2370]
push edx
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4ba074]
test ecx, ecx
js 0x43551e
mov edi, ebx
call fcn.0042f510
mov eax, dword [ebp - 8]
cmp byte [ebx + eax + 0xa3f54], 0
push eax
sete cl
mov byte [ebx + eax + 0xa3f54], cl
mov eax, dword [0x4e2370]
mov edi, ebx
call fcn.004045b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, 3
mov edi, edi
test esi, esi
js 0x43555c
push ebx
mov ecx, esi
call fcn.00436490
inc esi
cmp esi, 0x15
jl 0x435550
cmp dword [0x4e2378], 0xffffffff
je case.0x433604.1
mov dword [ebx + 0x357d0], 0x168
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [ebx + 0xb0ec]
push edx
call fcn.00406f70
mov esi, ebx
call fcn.00404080
mov eax, dword [0x4e2370]
test eax, eax
js 0x4355a5
push eax
push ebx
call fcn.004040c0
push ebx
mov byte [ebx + 0xb120], 1
call fcn.00435c10
mov eax, dword [0x4e2370]
mov ecx, dword [eax*4 + 0x4b9058]
push ecx
push ebx
call fcn.004174c0
mov edx, dword [0x4e26c4]
mov dword [0x4e2378], 0xffffffff
mov dword [0x4e26b8], edx
mov byte [ebx + 0xa42bd], 0
mov dword [ebx + 0x357d0], 0x15e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x4e2378]
push eax
mov ecx, ebx
call fcn.00435e70
mov ecx, dword [ebx + 0xb0cc]
mov dword [0x4e237c], ecx
test byte [ebx + 0xad80], 1
jne 0x435684
mov edx, dword [0x4e2378]
mov eax, dword [edx*4 + 0x4e25f0]
cmp eax, 0xffffffff
je 0x435669
imul eax, eax, 0xbc
lea ecx, [eax + ebx + 0x21d40]
test ecx, ecx
je 0x435669
mov eax, dword [edx*4 + 0x4b91b8]
shl eax, 5
add eax, 0x49aba0
mov edx, dword [eax]
mov dword [ecx + 0x7c], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x80], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x84], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x88], eax
mov edx, ebx
call fcn.00432af0
mov dword [0x4e2378], 0xffffffff
mov dword [ebx + 0x357d0], 0xfa
call fcn.00433160
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4e2378]
push ecx
mov ecx, ebx
call fcn.00435e70
test byte [ebx + 0xad80], 1
jne case.0x433604.1
mov edx, dword [0x4e2378]
mov eax, dword [edx*4 + 0x4e25f0]
cmp eax, 0xffffffff
je 0x4356ff
imul eax, eax, 0xbc
lea ecx, [eax + ebx + 0x21d40]
test ecx, ecx
je 0x4356ff
mov eax, dword [edx*4 + 0x4b91b8]
shl eax, 5
add eax, 0x49aba0
mov edx, dword [eax]
mov dword [ecx + 0x7c], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x80], edx
mov edx, dword [eax + 8]
mov dword [ecx + 0x84], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x88], eax
mov edx, ebx
call fcn.00432af0
mov dword [0x4e2378], 0xffffffff
mov dword [ebx + 0x357d0], 0x15e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
sub eax, 0x320
je 0x4359e9
sub eax, 0xa
je 0x435988
sub eax, 0x5a
jne case.0x433604.1
cmp byte [0x4e2374], al
jne 0x4357ca
mov ecx, dword [0x4e24c0]
cmp ecx, dword [ebx + 0xa406c]
je 0x43577e
mov dl, byte [0x4e25e8]
push eax
mov byte [ebx + 0xa3e58], dl
movzx eax, byte [0x4e24bc]
movzx ecx, byte [0x4e25e8]
push eax
push ecx
mov edi, ebx
call fcn.004392e0
mov al, byte [0x4e23a0]
cmp byte [ebx + 0xa3f4c], al
je 0x43579e
mov byte [ebx + 0xa3f4c], al
mov eax, dword [ebx + 0x35870]
mov edi, ebx
call fcn.0042ee60
mov esi, dword [0x4e23a8]
mov eax, ebx
call fcn.0042f060
mov esi, dword [0x4e23b0]
mov eax, ebx
call fcn.0042f120
lea edi, [ebx + 0xa3f48]
mov ecx, 0x93
mov esi, 0x4e239c
rep movsd dword es:[edi], dword [esi]
mov edi, dword [0x4e2390]
cmp edi, 0xffffffff
je 0x43584c
mov eax, 0x4e2380
mov esi, 0x4e25b8
call fcn.004368f0
mov edi, eax
call fcn.0044e810
jmp 0x4357f0
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x435810
test cl, cl
je 0x43580c
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x435810
add eax, 2
add esi, 2
test cl, cl
jne 0x4357f0
xor eax, eax
jmp 0x435815
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x435827
mov dl, byte [0x4e24b7]
cmp dl, byte [ebx + 0xa4063]
je 0x43584c
mov edi, dword [0x4e2390]
push 1
push ecx
mov eax, 0x4e2380
call fcn.004368f0
mov edi, eax
call fcn.0044e810
add esp, 4
push ebx
mov esi, eax
call fcn.004187f0
mov eax, dword [0x4e2370]
mov edx, ebx
mov dword [0x4b9064], eax
call fcn.00432af0
lea ecx, [ebx + 0xb0ec]
push ecx
call fcn.00406f70
push ebx
mov byte [ebx + 0xb120], 0
call fcn.00414780
mov esi, ebx
call fcn.00404080
call fcn.00435e00
mov ecx, 0x4e2698
or edx, 0xffffffff
lea ebx, [ebx]
mov eax, dword [ecx]
cmp eax, edx
je 0x4358b4
cmp eax, 0x18f
ja 0x4358b2
imul eax, eax, 0xbc
mov byte [eax + ebx + 0xf6c4], 0
mov dword [eax + ebx + 0xf6c8], edx
mov dword [ecx], edx
add ecx, 4
cmp ecx, 0x4e26a4
jl 0x435890
mov eax, dword [0x4e26a4]
cmp eax, edx
je 0x4358ee
test eax, eax
js 0x4358e8
cmp eax, 0x190
jge 0x4358e8
imul eax, eax, 0xbc
mov byte [ebx + eax + 0xf6c4], 0
mov dword [ebx + eax + 0xf6c8], edx
mov dword [0x4e26a4], edx
mov eax, dword [ebx + 0x3582c]
cmp eax, edx
je 0x435901
push 0
push eax
push ebx
call fcn.004168a0
mov edx, dword [0x4e2384]
mov eax, dword [0x4e2380]
push edx
push eax
lea ecx, [ebp - 0x10]
push ecx
push 0x4e2380
call fcn.00436990
mov edx, dword [0x4e26d4]
mov eax, dword [edx + 4]
push eax
mov ecx, 0x4e26d0
call fcn.00431d80
mov eax, dword [0x4e26d4]
mov dword [eax + 4], eax
mov eax, dword [0x4e26d4]
mov dword [eax], eax
mov eax, dword [0x4e26d4]
mov dword [eax + 8], eax
xor eax, eax
mov dword [0x4e26d8], eax
mov ecx, ebx
mov dword [ebx + 0x357d0], eax
call fcn.00419350
mov dword [ebx + 0x357ac], eax
mov eax, dword [ebx + 0x357a0]
cmp dword [ebx + 0x3579c], eax
je 0x435978
add eax, 0xfffffffc
mov dword [ebx + 0x357a0], eax
mov byte [ebx + 0xa42bd], 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [0x4cdeb8], 1
jne 0x4359a5
mov eax, ebx
call fcn.004199d0
mov eax, dword [ebx + 0x35870]
mov edi, ebx
call fcn.0042ee60
mov dword [ebx + 0x357d0], 0x32
mov eax, dword [0x4e2370]
sub eax, 0
je 0x433a12
dec eax
je 0x4359d6
dec eax
jne case.0x433604.1
mov dword [ebx + 0x357d0], 0x12c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x357d0], 0xc8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 5
mov esi, ebx
call fcn.00427f90
mov dword [ebx + 0x357d0], 0x32a
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4