Function at 0x404683
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x431bf2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x9398
call fcn.00410770
push esi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x8ddc], esp
push dword [ebp + 8]
call fcn.00401bef
lea eax, [ebp - 0x8de0]
push eax
call fcn.004031db
pop ecx
pop ecx
mov dword [ebp - 0x9268], eax
mov eax, dword [ebp - 0x9268]
mov dword [ebp - 0x8ff4], eax
and dword [ebp - 4], 0
push dword [ebp - 0x8ff4]
mov ecx, 0x43b43c
call fcn.0040c201
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x8de0]
sub eax, 0x10
mov dword [ebp - 0x8ff8], eax
mov ecx, dword [ebp - 0x8ff8]
call fcn.00401a46
jmp 0x40488e
mov ecx, 0x43b43c
call fcn.00401da3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8de8], esp
push eax
call fcn.00401dde
push 0x156a
call fcn.00401541
add esp, 0x20
jmp 0x404be2
jmp 0x404d89
and dword [ebp - 0x10], 0
jmp 0x4050e0
jmp 0x4052b6
jmp 0x40548f
xor eax, eax
lea edi, [ebp - 0x8deb]
stosb byte es:[edi], al
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
push 0
push 0
call fcn.0040e62a
jmp 0x405953
and dword [ebp - 0x14], 0
jmp 0x405a0b
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
jmp 0x405cfe
and dword [ebp - 0x2a98], 0
jmp 0x405d14
mov eax, dword [ebp - 0x2a98]
inc eax
mov dword [ebp - 0x2a98], eax
mov eax, dword [ebp - 0x2a98]
cmp eax, dword [ebp - 0x18]
jae 0x40a7f5
jmp 0x405dfa
and dword [ebp - 0x2aa0], 0
xor eax, eax
lea edi, [ebp - 0x8ded]
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x8e11]
stosb byte es:[edi], al
lea eax, [ebp - 0x2a9c]
push eax
lea eax, [ebp - 0x2aa0]
push eax
push 5
mov eax, dword [ebp - 0x14]
push dword [eax]
push 0
push 0x433ee4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8df4], esp
push 0x433ec8
call fcn.0040bfdd
lea eax, [ebp - 0x8e10]
push eax
lea ecx, [ebp - 0x8ded]
call fcn.0040b328
mov dword [ebp - 0x928c], eax
mov eax, dword [ebp - 0x928c]
mov dword [ebp - 0x9068], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x9068]
cmp dword [eax + 0x14], 0x10
jb 0x405e8b
mov eax, dword [ebp - 0x9068]
mov eax, dword [eax]
mov dword [ebp - 0x9290], eax
jmp 0x405e97
mov eax, dword [ebp - 0x9068]
mov dword [ebp - 0x9290], eax
push dword [ebp - 0x9290]
push 0x433eac
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8e18], esp
push 0x433e90
call fcn.00401dde
lea eax, [ebp - 0x8e34]
push eax
lea ecx, [ebp - 0x8e11]
call fcn.0040b24d
mov dword [ebp - 0x9294], eax
mov eax, dword [ebp - 0x9294]
mov dword [ebp - 0x9080], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x9080]
cmp dword [eax + 0x14], 8
jb 0x405efb
mov eax, dword [ebp - 0x9080]
mov eax, dword [eax]
mov dword [ebp - 0x9298], eax
jmp 0x405f07
mov eax, dword [ebp - 0x9080]
mov dword [ebp - 0x9298], eax
push dword [ebp - 0x9298]
call dword [0x433040]
push eax
call dword [0x43303c]
mov dword [ebp - 0x929c], eax
call dword [ebp - 0x929c]
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x8e34]
call fcn.00402278
mov byte [ebp - 4], 1
mov dword [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x8e10]
call fcn.0040c340
or dword [ebp - 4], 0xffffffff
jmp 0x406109
cmp dword [ebp - 0x2a9c], 2
jbe 0x40a350
jmp 0x40656d
and dword [ebp - 0x30d0], 0
jmp 0x4068e1
and dword [ebp - 0x30cc], 0
jmp 0x406c29
xor eax, eax
lea edi, [ebp - 0x8e36]
stosb byte es:[edi], al
lea eax, [ebp - 0x30d0]
push eax
mov eax, dword [ebp - 0x14]
push dword [eax]
call fcn.0040e624
jmp 0x406e83
xor eax, eax
lea edi, [ebp - 0x8e37]
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x8e59]
stosb byte es:[edi], al
lea eax, [ebp - 0x30cc]
push eax
push 1
push 1
push 0
push 0x2000000
push dword [ebp - 0x30d0]
push str.QqD
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8e3c], esp
push 0x433cd8
call fcn.0040bfdd
lea eax, [ebp - 0x8e58]
push eax
lea ecx, [ebp - 0x8e37]
call fcn.0040b58e
mov dword [ebp - 0x92bc], eax
mov eax, dword [ebp - 0x92bc]
mov dword [ebp - 0x90a8], eax
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x90a8]
cmp dword [eax + 0x14], 0x10
jb 0x406f0e
mov eax, dword [ebp - 0x90a8]
mov eax, dword [eax]
mov dword [ebp - 0x92c0], eax
jmp 0x406f1a
mov eax, dword [ebp - 0x90a8]
mov dword [ebp - 0x92c0], eax
push dword [ebp - 0x92c0]
push 0x433cbc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8e60], esp
push 0x433ca0
call fcn.00401dde
lea eax, [ebp - 0x8e7c]
push eax
lea ecx, [ebp - 0x8e59]
call fcn.0040b4b3
mov dword [ebp - 0x92c4], eax
mov eax, dword [ebp - 0x92c4]
mov dword [ebp - 0x90c0], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x90c0]
cmp dword [eax + 0x14], 8
jb 0x406f7e
mov eax, dword [ebp - 0x90c0]
mov eax, dword [eax]
mov dword [ebp - 0x92c8], eax
jmp 0x406f8a
mov eax, dword [ebp - 0x90c0]
mov dword [ebp - 0x92c8], eax
push dword [ebp - 0x92c8]
call dword [0x433040]
push eax
call dword [0x43303c]
mov dword [ebp - 0x92cc], eax
call dword [ebp - 0x92cc]
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x8e7c]
call fcn.00402278
mov byte [ebp - 4], 5
mov dword [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x8e58]
call fcn.0040c340
or dword [ebp - 4], 0xffffffff
jmp 0x4070c0
xor eax, eax
lea edi, [ebp - 0x8e7d]
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x8ea1]
stosb byte es:[edi], al
push dword [ebp - 0x30d0]
push 0x433c94
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8e84], esp
push 0x433c88
call fcn.0040bfdd
lea eax, [ebp - 0x8ea0]
push eax
lea ecx, [ebp - 0x8e7d]
call fcn.0040b73f
mov dword [ebp - 0x92d8], eax
mov eax, dword [ebp - 0x92d8]
mov dword [ebp - 0x90d8], eax
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x90d8]
cmp dword [eax + 0x14], 0x10
jb 0x407139
mov eax, dword [ebp - 0x90d8]
mov eax, dword [eax]
mov dword [ebp - 0x92dc], eax
jmp 0x407145
mov eax, dword [ebp - 0x90d8]
mov dword [ebp - 0x92dc], eax
push dword [ebp - 0x92dc]
push 0x433c6c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8ea8], esp
push 0x433c50
call fcn.00401dde
lea eax, [ebp - 0x8ec4]
push eax
lea ecx, [ebp - 0x8ea1]
call fcn.0040b664
mov dword [ebp - 0x92e0], eax
mov eax, dword [ebp - 0x92e0]
mov dword [ebp - 0x90f0], eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x90f0]
cmp dword [eax + 0x14], 8
jb 0x4071a9
mov eax, dword [ebp - 0x90f0]
mov eax, dword [eax]
mov dword [ebp - 0x92e4], eax
jmp 0x4071b5
mov eax, dword [ebp - 0x90f0]
mov dword [ebp - 0x92e4], eax
push dword [ebp - 0x92e4]
call dword [0x433040]
push eax
call dword [0x43303c]
mov dword [ebp - 0x92e8], eax
call dword [ebp - 0x92e8]
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x8ec4]
call fcn.00402278
mov byte [ebp - 4], 9
mov dword [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x8ea0]
call fcn.0040c340
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x30cc]
mov dword [ebp - 0x30d0], eax
and dword [ebp - 0x30cc], 0
jmp 0x4073a8
xor eax, eax
lea edi, [ebp - 0x8ec9]
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x8eed]
stosb byte es:[edi], al
lea eax, [ebp - 0x2a9c]
push eax
push 4
lea eax, [ebp - 0x3140]
push eax
push 0x13
push dword [ebp - 0x30d0]
push 0x433c3c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8ed0], esp
push 0x433c28
call fcn.0040bfdd
lea eax, [ebp - 0x8eec]
push eax
lea ecx, [ebp - 0x8ec9]
call fcn.0040b8f0
mov dword [ebp - 0x92f0], eax
mov eax, dword [ebp - 0x92f0]
mov dword [ebp - 0x9108], eax
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x9108]
cmp dword [eax + 0x14], 0x10
jb 0x407433
mov eax, dword [ebp - 0x9108]
mov eax, dword [eax]
mov dword [ebp - 0x92f4], eax
jmp 0x40743f
mov eax, dword [ebp - 0x9108]
mov dword [ebp - 0x92f4], eax
push dword [ebp - 0x92f4]
push 0x433c0c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8ef4], esp
push 0x433bf0
call fcn.00401dde
lea eax, [ebp - 0x8f10]
push eax
lea ecx, [ebp - 0x8eed]
call fcn.0040b815
mov dword [ebp - 0x92f8], eax
mov eax, dword [ebp - 0x92f8]
mov dword [ebp - 0x9120], eax
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x9120]
cmp dword [eax + 0x14], 8
jb 0x4074a3
mov eax, dword [ebp - 0x9120]
mov eax, dword [eax]
mov dword [ebp - 0x92fc], eax
jmp 0x4074af
mov eax, dword [ebp - 0x9120]
mov dword [ebp - 0x92fc], eax
push dword [ebp - 0x92fc]
call dword [0x433040]
push eax
call dword [0x43303c]
mov dword [ebp - 0x9300], eax
call dword [ebp - 0x9300]
mov dword [ebp - 0x9304], eax
mov eax, dword [ebp - 0x9304]
mov dword [ebp - 0x8ec8], eax
mov byte [ebp - 4], 0xf
push 0
push 1
lea ecx, [ebp - 0x8f10]
call fcn.00402278
mov byte [ebp - 4], 0xd
mov dword [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x8eec]
call fcn.0040c340
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x8ec8], 0
je 0x40752b
mov eax, dword [ebp - 0x3140]
mov dword [ebp - 0x30cc], eax
jmp 0x4079ce
mov eax, dword [ebp - 0x30d0]
mov dword [ebp - 0x30cc], eax
jmp 0x4076a5
and dword [ebp - 0x30d0], 0
mov ecx, 0x43b43c
call fcn.00401da3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8f14], esp
push eax
call fcn.00401dde
push 0x1580
call fcn.00401541
add esp, 0x20
jmp 0x4079ce
jmp 0x407cc9
and dword [ebp - 0x30bc], 0
xor eax, eax
lea edi, [ebp - 0x8f15]
stosb byte es:[edi], al
push 0
push dword [ebp - 0x30cc]
lea eax, [ebp - 0x30bc]
push eax
call fcn.0040e61e
test eax, eax
jne 0x407cf8
and dword [ebp - 0x30bc], 0
jmp 0x407e74
push 0x44
push 0
lea eax, [ebp - 0x313c]
push eax
call fcn.004107a0
add esp, 0xc
jmp 0x407fae
mov byte [ebp - 0x30f4], 0x35
mov byte [ebp - 0x30f3], 0x2b
mov byte [ebp - 0x30f2], 0x2c
mov byte [ebp - 0x30f1], 0x31
mov byte [ebp - 0x30f0], 0x36
mov byte [ebp - 0x30ef], 0x23
mov byte [ebp - 0x30ee], 0x72
mov byte [ebp - 0x30ed], 0x1e
mov byte [ebp - 0x30ec], 0x26
mov byte [ebp - 0x30eb], 0x27
mov byte [ebp - 0x30ea], 0x24
mov byte [ebp - 0x30e9], 0x23
mov byte [ebp - 0x30e8], 0x37
mov byte [ebp - 0x30e7], 0x2e
mov byte [ebp - 0x30e6], 0x36
mov byte [ebp - 0x30e5], 0
lea eax, [ebp - 0x30f4]
mov dword [ebp - 0x3134], eax
jmp 0x40808e
mov dword [ebp - 0x30e4], 0x44
jmp 0x40838d
mov eax, dword [ebp - 0x30e4]
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
mov eax, dword [ebp - 0x30e4]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov eax, dword [ebp - 0x30e4]
and eax, 0x80000001
jns 0x4083b9
dec eax
or eax, 0xfffffffe
inc eax
add ecx, eax
mov dword [ebp - 0x313c], ecx
jmp 0x40842d
and dword [ebp - 0x597c], 0
jmp 0x408443
mov eax, dword [ebp - 0x597c]
inc eax
mov dword [ebp - 0x597c], eax
cmp dword [ebp - 0x597c], 0xf
jae 0x40846c
mov eax, dword [ebp - 0x597c]
movsx eax, byte [ebp + eax - 0x30f4]
xor eax, 0x42
mov ecx, dword [ebp - 0x597c]
mov byte [ebp + ecx - 0x30f4], al
jmp 0x408436
jmp 0x4087d8
push dword [ebp + 8]
lea ecx, [ebp - 0x8f1c]
call fcn.0040be92
mov dword [ebp - 0x932c], eax
mov eax, dword [ebp - 0x932c]
mov dword [ebp - 0x9330], eax
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x30e0]
push eax
lea eax, [ebp - 0x313c]
push eax
push 0
push dword [ebp - 0x30bc]
push 0x420
push 1
push 0
push 0
mov ecx, dword [ebp - 0x9330]
call fcn.0040bef3
push eax
push 0
push dword [ebp - 0x30cc]
call dword [section..rdata]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x8f16], al
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x8f1c]
sub eax, 0x10
mov dword [ebp - 0x919c], eax
mov ecx, dword [ebp - 0x919c]
call fcn.00401a46
movzx eax, byte [ebp - 0x8f16]
test eax, eax
je 0x409992
call dword [0x433038]
mov dword [ebp - 0x79f0], eax
jmp 0x408979
push 0x43a090
lea ecx, [ebp - 0x7a18]
call fcn.004020fa
mov dword [ebp - 4], 0x12
jmp 0x408c9b
push 0x30
pop eax
mov word [ebp - 0x7a14], ax
push 0x27
pop eax
mov word [ebp - 0x7a12], ax
push 0x23
pop eax
mov word [ebp - 0x7a10], ax
push 0x31
pop eax
mov word [ebp - 0x7a0e], ax
push 0x2d
pop eax
mov word [ebp - 0x7a0c], ax
push 0x2c
pop eax
mov word [ebp - 0x7a0a], ax
push 0x7f
pop eax
mov word [ebp - 0x7a08], ax
push 0x67
pop eax
mov word [ebp - 0x7a06], ax
push 0x2b
pop eax
mov word [ebp - 0x7a04], ax
push 0x64
pop eax
mov word [ebp - 0x7a02], ax
push 0x21
pop eax
mov word [ebp - 0x7a00], ax
push 0x2f
pop eax
mov word [ebp - 0x79fe], ax
push 0x26
pop eax
mov word [ebp - 0x79fc], ax
push 0x7f
pop eax
mov word [ebp - 0x79fa], ax
push 0x67
pop eax
mov word [ebp - 0x79f8], ax
push 0x31
pop eax
mov word [ebp - 0x79f6], ax
xor eax, eax
mov word [ebp - 0x79f4], ax
and dword [ebp - 0x7b04], 0
jmp 0x408d5a
mov eax, dword [ebp - 0x7b04]
inc eax
mov dword [ebp - 0x7b04], eax
cmp dword [ebp - 0x7b04], 0x10
jae 0x408d84
mov eax, dword [ebp - 0x7b04]
movzx eax, word [ebp + eax*2 - 0x7a14]
xor eax, 0x42
mov ecx, dword [ebp - 0x7b04]
mov word [ebp + ecx*2 - 0x7a14], ax
jmp 0x408d4d
mov ecx, 0x43b43c
call fcn.00401da3
push eax
push dword [ebp - 0x79f0]
lea eax, [ebp - 0x7a14]
push eax
lea eax, [ebp - 0x7a18]
push eax
call fcn.0040307c
add esp, 0x10
jmp 0x40900d
lea ecx, [ebp - 0x7a18]
call fcn.00401da3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8f20], esp
push eax
call fcn.00401dde
push 0x156b
call fcn.00401541
add esp, 0x20
jmp 0x40919e
push 0x4e20
call dword [0x433034]
jmp 0x409311
push dword [ebp + 8]
lea ecx, [ebp - 0x8f28]
call fcn.0040be92
mov dword [ebp - 0x933c], eax
mov eax, dword [ebp - 0x933c]
mov dword [ebp - 0x9340], eax
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x30e0]
push eax
lea eax, [ebp - 0x313c]
push eax
push 0
push dword [ebp - 0x30bc]
push 0x420
push 1
push 0
push 0
mov ecx, dword [ebp - 0x9340]
call fcn.0040bef3
push eax
push 0
push dword [ebp - 0x30cc]
call dword [section..rdata]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x8f21], al
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x8f28]
sub eax, 0x10
mov dword [ebp - 0x9228], eax
mov ecx, dword [ebp - 0x9228]
call fcn.00401a46
movzx eax, byte [ebp - 0x8f21]
test eax, eax
je 0x409974
call dword [0x433038]
mov dword [ebp - 0x79f0], eax
jmp 0x4096db
mov ecx, 0x43b43c
call fcn.00401da3
push eax
push dword [ebp - 0x79f0]
lea eax, [ebp - 0x7a14]
push eax
lea eax, [ebp - 0x7a18]
push eax
call fcn.0040307c
add esp, 0x10
jmp 0x40981b
lea ecx, [ebp - 0x7a18]
call fcn.00401da3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8f2c], esp
push eax
call fcn.00401dde
push 0x1581
call fcn.00401541
add esp, 0x20
jmp 0x409974
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x7a18]
sub eax, 0x10
mov dword [ebp - 0x9248], eax
mov ecx, dword [ebp - 0x9248]
call fcn.00401a46
jmp 0x409a88
cmp dword [ebp - 0x30bc], 0
je 0x409d9f
jmp 0x409d8b
xor eax, eax
lea edi, [ebp - 0x8f2d]
stosb byte es:[edi], al
push dword [ebp - 0x30bc]
call fcn.0040e618
jmp 0x409e7d
mov eax, dword [ebp - 0x30cc]
mov dword [ebp - 0x30c8], eax
mov eax, dword [ebp - 0x30e0]
mov dword [ebp - 0x30c4], eax
mov eax, dword [ebp - 0x30dc]
mov dword [ebp - 0x30c0], eax
and dword [ebp - 0x7e78], 0
jmp 0x409eb7
mov eax, dword [ebp - 0x7e78]
inc eax
mov dword [ebp - 0x7e78], eax
cmp dword [ebp - 0x7e78], 3
jae 0x409fe0
xor eax, eax
lea edi, [ebp - 0x8f2e]
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x8f51]
stosb byte es:[edi], al
mov eax, dword [ebp - 0x7e78]
push dword [ebp + eax*4 - 0x30c8]
push 0x433a54
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8f34], esp
push 0x433a48
call fcn.0040bfdd
lea eax, [ebp - 0x8f50]
push eax
lea ecx, [ebp - 0x8f2e]
call fcn.0040baa1
mov dword [ebp - 0x9378], eax
mov eax, dword [ebp - 0x9378]
mov dword [ebp - 0x9260], eax
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x9260]
cmp dword [eax + 0x14], 0x10
jb 0x409f44
mov eax, dword [ebp - 0x9260]
mov eax, dword [eax]
mov dword [ebp - 0x937c], eax
jmp 0x409f50
mov eax, dword [ebp - 0x9260]
mov dword [ebp - 0x937c], eax
push dword [ebp - 0x937c]
push 0x433a2c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8f58], esp
push 0x433a10
call fcn.00401dde
lea eax, [ebp - 0x8f74]
push eax
lea ecx, [ebp - 0x8f51]
call fcn.0040b9c6
mov dword [ebp - 0x9380], eax
mov eax, dword [ebp - 0x9380]
mov dword [ebp - 0x9384], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x9384]
call fcn.0040c0c3
push eax
call dword [0x433040]
push eax
call dword [0x43303c]
mov dword [ebp - 0x9388], eax
call dword [ebp - 0x9388]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x8f74]
call fcn.00401e6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f50]
call fcn.0040c061
jmp 0x409eaa
jmp 0x40a350
jmp 0x40a649
mov eax, dword [ebp - 0x14]
add eax, 0xc
mov dword [ebp - 0x14], eax
jmp 0x40a7f0
jmp 0x405d07
jmp 0x40a9e4
xor eax, eax
lea edi, [ebp - 0x8f75]
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x8f99]
stosb byte es:[edi], al
push dword [ebp - 0x10]
push 0x4339b0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8f7c], esp
push 0x4339a0
call fcn.0040bfdd
lea eax, [ebp - 0x8f98]
push eax
lea ecx, [ebp - 0x8f75]
call fcn.0040bc52
mov dword [ebp - 0x9394], eax
mov eax, dword [ebp - 0x9394]
mov dword [ebp - 0x9398], eax
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp - 0x9398]
call fcn.0040c09d
push eax
push 0x433984
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8fa0], esp
push 0x433968
call fcn.00401dde
lea eax, [ebp - 0x8fbc]
push eax
lea ecx, [ebp - 0x8f99]
call fcn.0040bb77
mov dword [ebp - 0x939c], eax
mov eax, dword [ebp - 0x939c]
mov dword [ebp - 0x93a0], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x93a0]
call fcn.0040c0c3
push eax
call dword [0x433040]
push eax
call dword [0x43303c]
mov dword [ebp - 0x93a4], eax
call dword [ebp - 0x93a4]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x8fbc]
call fcn.00401e6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f98]
call fcn.0040c061
jmp 0x40af96
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
leave
ret