Function at 0x4345f0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xa88
mov eax, 0x460475
call fcn.00445495
mov edi, ecx
mov dword [ebp - 0x8a4], edi
mov esi, dword [ebp + 8]
push esi
push 0x405880
xor ebx, ebx
push 2
mov dword [ebp - 0x89c], ebx
call fcn.0042ed6c
push ebx
push ebx
lea ecx, [ebp - 0x8f4]
call fcn.004568b2
push 1
push esi
lea ecx, [ebp - 0x8f4]
mov dword [ebp - 4], ebx
call fcn.004569a7
lea ecx, [ebp - 0x994]
call fcn.00455de8
xor eax, eax
push 0x4058b4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
push ebx
lea eax, [ebp - 0x994]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 2
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 1
call fcn.00429e80
test bl, bl
je 0x4347d7
lea eax, [ebp - 0x994]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045645e
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x84], ebx
mov word [ebp - 0x94], ax
push ebx
lea eax, [ebp - 0x94]
push eax
push 0x469130
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.00456499
test al, al
je 0x4347b4
cmp dword [ebp - 0x84], ebx
je 0x4347b4
lea eax, [ebp - 0x94]
push eax
call fcn.0043354d
push 4
lea ecx, [ebp - 0x94]
lea ebx, [edi + 0x18c]
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 4]
lea eax, [ebp - 0x94]
push eax
push 0x4058d8
push 2
call fcn.0043910d
cmp byte [ebp + 0xc], 0
je 0x4347b2
lea eax, [edi + 0x484]
cmp dword [eax], 0
mov dword [ebp - 0x89c], eax
je 0x4347b2
mov ecx, eax
call fcn.00438fef
mov ecx, ebx
mov esi, eax
call fcn.0042ca88
lea edx, [esi + 0x88]
push edx
mov ecx, eax
call fcn.0042fc02
test eax, eax
je 0x4347b2
mov ecx, dword [ebp - 0x89c]
call fcn.00438fef
mov ecx, ebx
mov esi, eax
call fcn.0042ca88
lea ecx, [esi + 0x88]
push ecx
push eax
push 0x405940
push 0x29
lea ecx, [ebp - 0x894]
call fcn.00439172
mov esi, eax
push 0x462828
lea eax, [ebp - 0x50c]
mov ecx, 0xe2
lea edi, [ebp - 0x50c]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.004453e0
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 1
mov dword [ebp - 0x6c], 0x405310
call fcn.00455e59
jmp 0x4347d9
xor ebx, ebx
lea ecx, [ebp - 0x924]
call fcn.00456df5
xor eax, eax
push 0x4059ec
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
lea eax, [ebp - 0x924]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 6
call fcn.00455f30
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00429e80
lea ecx, [ebp - 0x924]
mov esi, ebx
call fcn.00456e23
test eax, eax
jle 0x434965
lea ecx, [ebp - 0x68]
call fcn.00455de8
lea eax, [ebp - 0x68]
push eax
push esi
lea ecx, [ebp - 0x924]
mov byte [ebp - 4], 7
call fcn.00456ec1
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x84], ebx
mov word [ebp - 0x94], ax
push 1
lea eax, [ebp - 0x48]
push eax
push 0x468e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xa
call fcn.00456499
lea eax, [ebp - 0x48]
push eax
call fcn.0043354d
lea eax, [ebp - 0x48]
push eax
call fcn.004373de
test al, al
je 0x4348cf
lea eax, [ebp - 0x48]
push eax
push 0x405a20
push 2
call fcn.00439218
jmp 0x434913
push 1
lea eax, [ebp - 0x94]
push eax
push 0x469088
lea ecx, [ebp - 0xdc]
call fcn.00456499
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x405a88
push 2
call fcn.0043927d
push 4
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x48]
push eax
mov ecx, edi
call fcn.0043802f
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 7
mov dword [ebp - 0xdc], 0x405310
call fcn.00455e59
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 5
call fcn.00455e59
lea ecx, [ebp - 0x924]
inc esi
call fcn.00456e23
cmp esi, eax
jl 0x434843
xor eax, eax
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], ebx
mov word [ebp - 0x138], ax
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0xb
call fcn.00456df5
xor eax, eax
push 0x405aec
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
lea eax, [ebp - 0x944]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0xd
call fcn.00455f30
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.00429e80
lea ecx, [ebp - 0x944]
call fcn.00456e23
mov esi, eax
test esi, esi
je 0x434cf9
mov dword [ebp - 0x89c], ebx
jle 0x434cc7
lea ecx, [ebp - 0x68]
call fcn.00455de8
lea eax, [ebp - 0x68]
push eax
push ebx
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0xe
call fcn.00456ec1
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xf
call fcn.0045645e
push 1
lea eax, [ebp - 0x48]
push eax
push 0x468e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x10
call fcn.00456499
lea eax, [ebp - 0x48]
push eax
call fcn.004317a6
push ebx
lea eax, [ebp - 0x48]
push eax
push 0x46914c
call fcn.00430e9b
test eax, eax
jne 0x434a98
lea ecx, [edi + 0x3c4]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x405b28
push 2
call fcn.004392e8
jmp 0x434af0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x8a0]
lea ebx, [edi + 0x3d4]
push eax
mov ecx, ebx
call fcn.00438809
mov eax, dword [edi + 0x3d8]
cmp eax, dword [ebp - 0x8a0]
lea eax, [ebp - 0x48]
push eax
jne 0x434ae2
lea eax, [ebp - 0x8b0]
push eax
mov ecx, ebx
call fcn.00439344
lea eax, [ebp - 0x48]
push eax
push 0x405bd0
push 2
call fcn.00439378
jmp 0x434aee
push 0x405c50
push 2
call fcn.004393dd
xor ebx, ebx
cmp esi, 1
jne 0x434b10
lea ecx, [edi + 0x39c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
push 0x405d38
jmp 0x434c04
xor eax, eax
push 0x405d8c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
push ebx
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x11
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x10
call fcn.00429e80
test bl, bl
je 0x434c66
cmp dword [0x46917c], 8
mov eax, dword [0x469168]
jae 0x434b75
mov eax, 0x469168
push dword [0x469178]
xor ebx, ebx
push eax
push dword [ebp - 0x128]
lea ecx, [ebp - 0x138]
push ebx
call fcn.00429c56
test eax, eax
je 0x434c36
push ebx
push 0x468ffc
lea eax, [ebp - 0x138]
push eax
call fcn.00430e9b
test eax, eax
je 0x434c36
cmp dword [0x469198], 8
mov eax, dword [0x469184]
jae 0x434bc5
mov eax, 0x469184
push dword [0x469194]
lea ecx, [ebp - 0x138]
push eax
push dword [ebp - 0x128]
push ebx
call fcn.00429c56
test eax, eax
je 0x434bff
push ebx
push 0x469018
lea eax, [ebp - 0x138]
push eax
call fcn.00430e9b
test eax, eax
je 0x434bff
push 0x405ea0
jmp 0x434c04
push 0x405e48
xor eax, eax
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 7
call fcn.004293f3
lea eax, [ebp - 0x2c]
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00429e80
jmp 0x434c68
lea ebx, [edi + 0x39c]
mov ecx, ebx
call fcn.0042ca88
cmp dword [eax + 0x10], 0
je 0x434c52
cmp dword [edi + 0x3bc], 4
je 0x434cb0
mov eax, dword [ebx]
push 4
lea ecx, [ebp - 0x48]
push ecx
mov ecx, ebx
call dword [eax + 4]
xor ebx, ebx
jmp 0x434b06
xor ebx, ebx
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xdc], 0x405310
call fcn.00455e59
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xc
call fcn.00455e59
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp eax, esi
jge 0x434cc9
mov ebx, eax
jmp 0x4349f8
push 0x405db0
push 0x21
lea ecx, [ebp - 0x894]
call fcn.0043076b
jmp 0x434792
xor ebx, ebx
lea ecx, [edi + 0x39c]
call fcn.0042ca88
cmp dword [eax + 0x10], ebx
je 0x434ce2
cmp dword [edi + 0x3bc], 4
je 0x434cf9
push 0x405f48
push 0x21
lea ecx, [ebp - 0x894]
call fcn.004306e7
jmp 0x434792
lea ecx, [ebp - 0x934]
call fcn.00456df5
xor eax, eax
push 0x405fe0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
lea eax, [ebp - 0x934]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x13
call fcn.00455f30
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
call fcn.00429e80
lea ecx, [ebp - 0x934]
mov esi, ebx
call fcn.00456e23
test eax, eax
jle 0x434eb8
lea ebx, [edi + 0x400]
lea ecx, [ebp - 0x68]
call fcn.00455de8
lea eax, [ebp - 0x68]
push eax
push esi
lea ecx, [ebp - 0x934]
mov byte [ebp - 4], 0x14
call fcn.00456ec1
and dword [ebp - 0x38], 0
xor eax, eax
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x15
call fcn.0045645e
push 1
lea eax, [ebp - 0x48]
push eax
push 0x468e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x16
call fcn.00456499
lea eax, [ebp - 0x48]
push eax
call fcn.004317a6
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x8a0]
push eax
mov ecx, ebx
call fcn.00438809
mov eax, dword [edi + 0x404]
cmp eax, dword [ebp - 0x8a0]
lea eax, [ebp - 0x48]
push eax
jne 0x434e65
lea eax, [ebp - 0x89c]
push eax
lea ecx, [edi + 0x3d4]
call fcn.00438809
mov eax, dword [edi + 0x3d8]
cmp eax, dword [ebp - 0x89c]
lea eax, [ebp - 0x48]
jne 0x434e56
push 0
push eax
push 0x46914c
call fcn.00430e9b
test eax, eax
lea eax, [ebp - 0x48]
push eax
jne 0x434e36
push 0x406020
push 2
call fcn.00439442
jmp 0x434e71
lea eax, [ebp - 0x8b0]
push eax
mov ecx, ebx
call fcn.00439344
lea eax, [ebp - 0x48]
push eax
push 0x406120
push 2
call fcn.00432a74
jmp 0x434e71
push eax
push 0x4061a0
push 2
call fcn.004394a7
jmp 0x434e71
push 0x4062c0
push 2
call fcn.0043950f
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0xdc], 0x405310
call fcn.00455e59
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x12
call fcn.00455e59
lea ecx, [ebp - 0x934]
inc esi
call fcn.00456e23
cmp esi, eax
jl 0x434d69
xor ebx, ebx
lea ecx, [ebp - 0x914]
call fcn.00456df5
xor eax, eax
push 0x4063a8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
lea eax, [ebp - 0x914]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x18
call fcn.00455f30
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.00429e80
lea ecx, [ebp - 0x914]
call fcn.00456e23
test eax, eax
jle 0x4351d8
lea esi, [edi + 0x30]
mov dword [ebp - 0x8b4], esi
lea ecx, [ebp - 0xd8]
call fcn.00455de8
lea eax, [ebp - 0xd8]
push eax
push ebx
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x19
call fcn.00456ec1
and dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1a
call fcn.0045645e
push 1
lea eax, [ebp - 0x2c]
push eax
push 0x468e90
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1b
call fcn.00456499
lea ecx, [ebp - 0x3c]
call fcn.00456df5
lea eax, [ebp - 0x3c]
push eax
push 0x4691f4
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x1c
call fcn.00455f30
lea eax, [ebp - 0x895]
push eax
lea eax, [ebp - 0x89a]
push eax
lea ecx, [ebp - 0x78]
call fcn.00437acc
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x1d
call fcn.0043a228
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x8b0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1e
call fcn.00439574
lea ecx, [ebp - 0x168]
call fcn.00437b74
push 0
push 1
lea ecx, [ebp - 0x184]
call fcn.00429e80
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
call fcn.00437b74
mov eax, dword [ebp - 0x8b0]
add eax, 0x24
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x8a0], eax
xor esi, esi
call fcn.00456e23
test eax, eax
jle 0x435178
mov edi, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x68]
call fcn.00455de8
lea eax, [ebp - 0x68]
push eax
push esi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
call fcn.00456ec1
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xb8]
call fcn.0045645e
and dword [ebp - 0x84], 0
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ecx
mov word [ebp - 0x94], ax
and dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], ecx
mov word [ebp - 0xf8], ax
push 1
lea eax, [ebp - 0x94]
push eax
push 0x468e90
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x22
call fcn.00456499
lea eax, [ebp - 0x94]
push eax
call fcn.004373de
test al, al
je 0x4350d6
lea eax, [ebp - 0x94]
push eax
push 0x405a20
push 2
call fcn.00439218
jmp 0x435124
push 1
lea eax, [ebp - 0xf8]
push eax
push 0x469088
lea ecx, [ebp - 0xb8]
call fcn.00456499
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x94]
push eax
push 0x4063d8
push 2
call fcn.004395c0
push 4
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x94]
push eax
mov ecx, edi
call fcn.0043802f
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xb8], 0x405310
call fcn.00455e59
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x1c
call fcn.00455e59
lea ecx, [ebp - 0x3c]
inc esi
call fcn.00456e23
cmp esi, eax
jl 0x435043
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1b
call fcn.00456e10
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x11c], 0x405310
call fcn.00455e59
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00429e80
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x17
call fcn.00455e59
lea ecx, [ebp - 0x914]
inc ebx
call fcn.00456e23
mov esi, dword [ebp - 0x8b4]
cmp ebx, eax
jl 0x434f29
mov edi, dword [ebp - 0x8a4]
lea ecx, [ebp - 0xa74]
call fcn.00455de8
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x40645c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.004293f3
push 0
lea eax, [ebp - 0xa74]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x24
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x23
call fcn.00429e80
test bl, bl
je 0x435422
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045645e
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0xe8], ebx
mov word [ebp - 0xf8], ax
push ebx
lea eax, [ebp - 0xf8]
push eax
push 0x468fa8
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x26
call fcn.00456499
test al, al
je 0x435293
push 4
lea eax, [ebp - 0xf8]
push eax
lea ecx, [edi + 0x5c]
call fcn.00433c0d
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
push ebx
lea eax, [ebp - 0x48]
push eax
push 0x4690dc
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x27
call fcn.00456499
test al, al
je 0x435313
cmp dword [ebp - 0x38], 0
je 0x435313
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.0042eb68
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.00429067
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x27
call fcn.00429e80
lea ecx, [edi + 0x9c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x406490
push 2
call fcn.00439631
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x84], ebx
mov word [ebp - 0x94], ax
mov dword [ebp - 0x18], ecx
push 0x4064e4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
push ebx
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x89c], 1
call fcn.00456499
test al, al
je 0x435374
cmp dword [ebp - 0x84], 0
je 0x435374
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x29
call fcn.00429e80
test bl, bl
je 0x4353e5
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.0042eb68
push eax
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2b
call fcn.00429067
push 0
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x29
call fcn.00429e80
lea ecx, [edi + 0x6c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x94]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x94]
push eax
push 0x4064f8
push 2
call fcn.00439696
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.00429e80
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x6c], 0x405310
call fcn.00455e59
lea ecx, [ebp - 0x9f4]
call fcn.00455de8
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x406554
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.004293f3
push 0
lea eax, [ebp - 0x9f4]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x2d
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2c
call fcn.00429e80
test bl, bl
je 0x43590e
lea eax, [ebp - 0x9f4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045645e
push 7
pop ecx
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], ax
mov dword [ebp - 0x18], ecx
push 0x4054b4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x30
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
push 4
pop esi
test bl, bl
je 0x43550e
lea ecx, [edi + 0x28c]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x406580
push 2
call fcn.004396fb
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x4054cc
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.004293f3
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x31
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x435578
lea ecx, [edi + 0x2b4]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x4065c0
push 2
call fcn.00439760
and dword [ebp - 0x1c], 0
xor eax, eax
push 0x405538
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.004293f3
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x2c]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x4356a3
cmp dword [0x46917c], 8
mov eax, dword [0x469168]
jae 0x4355d9
mov eax, 0x469168
push dword [0x469178]
xor ebx, ebx
push eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x48]
push ebx
call fcn.00429c56
test eax, eax
je 0x43565a
push ebx
push 0x468ffc
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
je 0x43565a
push 0x469184
lea ecx, [ebp - 0x48]
call fcn.0042fc02
test eax, eax
je 0x435630
push ebx
push 0x469018
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
je 0x435630
push 0x406688
jmp 0x435635
push 0x406640
lea ecx, [ebp - 0x114]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
lea ecx, [ebp - 0x114]
push ebx
push 1
call fcn.00429e80
jmp 0x4356a5
lea ecx, [edi + 0x2dc]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
xor eax, eax
push 0x406600
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
call fcn.004293f3
lea eax, [ebp - 0x2c]
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
jmp 0x435650
xor ebx, ebx
push 0x405550
lea ecx, [ebp - 0x114]
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x33
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x43577f
push 0x469168
lea ecx, [ebp - 0x48]
call fcn.0042fc02
test eax, eax
je 0x43573c
push 0
push 0x468ffc
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
je 0x43573c
push 0x469184
lea ecx, [ebp - 0x48]
call fcn.0042fc02
test eax, eax
je 0x435735
push 0
push 0x469018
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
je 0x435735
push 0x406788
jmp 0x43575b
push 0x406740
jmp 0x43575b
lea ecx, [edi + 0x2ec]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x406700
lea ecx, [ebp - 0x114]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.00429e80
push 0x406800
lea ecx, [ebp - 0x114]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x34
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x4357db
lea ecx, [edi + 0x2fc]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x406820
push 2
call fcn.004397c5
push 0x406864
lea ecx, [ebp - 0x114]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x35
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x435837
lea ecx, [edi + 0x324]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x406888
push 2
call fcn.00432b9a
push 0x4054e4
lea ecx, [ebp - 0x114]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x36
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x435893
lea ecx, [edi + 0x34c]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x4068cc
push 2
call fcn.0043982a
push 0x4054fc
lea ecx, [ebp - 0x114]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x37
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x2f
call fcn.00429e80
test bl, bl
je 0x4358ef
lea ecx, [edi + 0x374]
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
lea eax, [ebp - 0x48]
push eax
push 0x406908
push 2
call fcn.00432b9a
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x6c], 0x405310
call fcn.00455e59
lea ecx, [ebp - 0xa34]
call fcn.00455de8
push 0x40694c
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x38
call fcn.00428fea
push 0
lea ecx, [ebp - 0xa34]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x39
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x114]
mov bl, al
mov byte [ebp - 4], 0x38
call fcn.00429e80
test bl, bl
je 0x435ed8
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045645e
push 0
push 0
lea ecx, [ebp - 0x114]
call fcn.00429e80
mov bh, byte [ebp + 0xc]
mov byte [ebp - 4], 0x3b
test bh, bh
jne 0x4359df
push 0x40697c
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x3c
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0xb0]
mov bl, al
mov byte [ebp - 4], 0x3b
call fcn.00429e80
test bl, bl
je 0x4359df
push 4
lea eax, [ebp - 0x114]
push eax
lea ecx, [edi + 0x1ec]
call fcn.00433a90
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.00429e80
push 0x40531c
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3d
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x89c], 2
call fcn.00456499
test al, al
je 0x435a2a
cmp dword [ebp - 0x38], 0
je 0x435a2a
mov bl, 1
jmp 0x435a2c
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x3d
call fcn.00429e80
test bl, bl
je 0x435aa2
push 0
push 0x468ffc
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435afb
lea ecx, [edi + 0x224]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x406988
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
mov esi, 0x469018
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00429e80
push 0x406a50
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3f
call fcn.00428fea
push 0
lea ecx, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x89c], 4
call fcn.00456499
test al, al
je 0x435b58
cmp dword [ebp - 0x84], 0
je 0x435b58
mov bl, 1
jmp 0x435b5a
push 0
mov esi, 0x469018
push esi
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435aa7
lea ecx, [edi + 0x224]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x4069f8
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
jmp 0x435aa7
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x3f
call fcn.00429e80
test bl, bl
je 0x435c87
push 0
push 0x468ffc
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435c31
lea ecx, [edi + 0x214]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x406a78
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
lea ecx, [edi + 0x1ec]
call fcn.0042cae8
cmp dword [eax], 0
jne 0x435c87
push 0x406ad8
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
lea ecx, [edi + 0x224]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 0
call dword [eax + 4]
jmp 0x435c87
push 0
push esi
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435c87
lea ecx, [edi + 0x214]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x406bc8
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push 0x406c28
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x41
call fcn.00428fea
push 0
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x89c], 8
call fcn.00456499
test al, al
je 0x435cdb
cmp dword [ebp - 0xe8], 0
je 0x435cdb
mov bl, 1
jmp 0x435cdd
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x41
call fcn.00429e80
test bl, bl
je 0x435d8a
push 0
push 0x468ffc
lea eax, [ebp - 0xf8]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435d34
lea ecx, [edi + 0x204]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x406c40
jmp 0x435d66
push 0
push esi
lea eax, [ebp - 0xf8]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435d8a
lea ecx, [edi + 0x204]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x406ca0
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push 0
push 0
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push 0x406d00
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x43
call fcn.00428fea
push 0
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x44
mov dword [ebp - 0x89c], 0x10
call fcn.00456499
test al, al
je 0x435dd5
cmp dword [ebp - 0x1c], 0
je 0x435dd5
mov bl, 1
jmp 0x435dd7
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x43
call fcn.00429e80
test bl, bl
je 0x435e7e
push 0
push 0x468ffc
lea eax, [ebp - 0x2c]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435e2b
lea ecx, [edi + 0x23c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x406d18
jmp 0x435e5a
push 0
push esi
lea eax, [ebp - 0x2c]
push eax
call fcn.00430e9b
test eax, eax
jne 0x435e7e
lea ecx, [edi + 0x23c]
push 4
lea edx, [ebp - 0x895]
mov byte [ebp - 0x895], al
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push 0x406d80
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.00429e80
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x6c], 0x405310
call fcn.00455e59
jmp 0x435edb
mov bh, byte [ebp + 0xc]
lea ecx, [ebp - 0x9b4]
call fcn.00455de8
push 0x406dd8
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x45
call fcn.00428fea
push 0
lea ecx, [ebp - 0x9b4]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x46
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0xb0]
mov bl, al
mov byte [ebp - 4], 0x45
call fcn.00429e80
test bl, bl
je 0x436033
lea eax, [ebp - 0x9b4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045645e
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.00429e80
push 0
lea eax, [ebp - 0x48]
push eax
push 0x469088
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x48
call fcn.00456499
cmp dword [ebp - 0x38], 0
je 0x436014
push 0
mov esi, 0x4027ec
push esi
push 0x4691a0
lea eax, [ebp - 0x48]
push eax
call fcn.0042a4a5
push 0
push esi
push 0x4691bc
lea eax, [ebp - 0x48]
push eax
call fcn.0042a4a5
lea eax, [ebp - 0x48]
push eax
call fcn.0043354d
lea ecx, [edi + 0xf4]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x48]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x19
sete al
xor esi, esi
test al, al
je 0x435feb
cmp esi, ecx
jae 0x435fe0
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x435fcc
lea eax, [ebp - 0x48]
movzx eax, word [eax + esi*2]
push eax
call fcn.00455dcd
inc esi
test al, al
je 0x435feb
mov ecx, dword [ebp - 0x38]
jmp 0x435fbc
test al, al
je 0x435feb
push 0x406e08
jmp 0x435ff0
push 0x406e70
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x45
mov dword [ebp - 0x6c], 0x405310
call fcn.00455e59
test bh, bh
jne 0x436197
lea ecx, [ebp - 0x68]
call fcn.00455de8
push 0x406f00
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x49
call fcn.00428fea
push 0
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x4a
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0xb0]
mov bl, al
mov byte [ebp - 4], 0x49
call fcn.00429e80
test bl, bl
je 0x43618b
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push 0x406f44
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x4c
call fcn.00428fea
push ebx
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x89c], 0x20
call fcn.00456499
test al, al
je 0x4360ec
cmp dword [ebp - 0xe8], ebx
je 0x4360ec
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x4c
call fcn.00429e80
test bl, bl
je 0x436163
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.0042eb68
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x4e
call fcn.00429067
push 0
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x4c
call fcn.00429e80
lea ecx, [edi + 0x164]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0xf8]
push edx
call dword [eax + 4]
lea eax, [ebp - 0xf8]
push eax
push 0x406f58
push 2
call fcn.0043988f
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.00429e80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x49
mov dword [ebp - 0xdc], 0x405310
call fcn.00455e59
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x45
call fcn.00455e59
mov ebx, 0x4055bc
push ebx
lea ecx, [ebp - 0x114]
call fcn.00428fea
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x4f
call fcn.00428fea
push 4
push 1
xor ebx, ebx
push ebx
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x50
call fcn.004377aa
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x45
call fcn.00429e80
mov ebx, 0x4056d8
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00428fea
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x51
call fcn.00428fea
push 4
xor ebx, ebx
inc ebx
push ebx
push ebx
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x52
call fcn.004377aa
push 0
push ebx
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push 0
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.00429e80
mov ebx, 0x405830
push ebx
lea ecx, [ebp - 0xf8]
call fcn.00428fea
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x53
call fcn.00428fea
push 4
push 1
xor ebx, ebx
push ebx
push esi
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
call fcn.004377aa
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x45
call fcn.00429e80
mov ebx, 0x405844
push ebx
lea ecx, [ebp - 0x94]
call fcn.00428fea
mov esi, eax
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x55
call fcn.00428fea
push 4
push 1
xor ebx, ebx
push ebx
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x56
call fcn.004377aa
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x45
call fcn.00429e80
push 0x4055d4
lea ecx, [ebp - 0x48]
call fcn.00428fea
mov esi, eax
push 0x4055e8
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x57
call fcn.00428fea
push 4
push 1
push 1
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x58
call fcn.004377aa
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x45
call fcn.00429e80
mov ebx, 0x4053f4
push ebx
lea ecx, [ebp - 0xd4]
call fcn.00428fea
mov esi, eax
mov byte [ebp - 4], 0x59
push ebx
lea ecx, [ebp - 0xb0]
call fcn.00428fea
push 4
xor ebx, ebx
push ebx
push 1
push esi
push eax
lea eax, [ebp - 0x8f4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x5a
call fcn.004377aa
push ebx
push 1
lea ecx, [ebp - 0xb0]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x45
call fcn.00429e80
lea ecx, [ebp - 0xa94]
call fcn.00455de8
push 0x406fe0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5b
call fcn.00428fea
push ebx
lea ecx, [ebp - 0xa94]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x5c
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x5b
call fcn.00429e80
test bl, bl
je 0x4368e4
lea eax, [ebp - 0xa94]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x48]
call fcn.00429e80
push ebx
push ebx
lea ecx, [ebp - 0x94]
call fcn.00429e80
push ebx
push ebx
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push ebx
push ebx
lea ecx, [ebp - 0x114]
call fcn.00429e80
push ebx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push 0x407018
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x62
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x63
mov dword [ebp - 0x89c], 0x40
call fcn.00456499
test al, al
je 0x436499
cmp dword [ebp - 0x38], ebx
je 0x436499
mov bl, 1
push 0x62
pop esi
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.00429e80
test bl, bl
je 0x43653b
xor ebx, ebx
push ebx
push 0x469018
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
jne 0x436506
lea ecx, [edi + 0x24c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x407038
lea ecx, [ebp - 0x64]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.00429e80
jmp 0x43653d
push ebx
push 0x468ffc
lea eax, [ebp - 0x48]
push eax
call fcn.00430e9b
test eax, eax
jne 0x43653d
lea ecx, [edi + 0x24c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x407090
jmp 0x4364e7
xor ebx, ebx
push 0x4070ec
lea ecx, [ebp - 0x64]
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x64
mov dword [ebp - 0x89c], 0x80
call fcn.00456499
test al, al
je 0x43657b
cmp dword [ebp - 0x84], 0
je 0x43657b
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.00429e80
test bl, bl
je 0x436620
xor ebx, ebx
push ebx
push 0x469018
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
jne 0x4365e8
lea ecx, [edi + 0x25c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x407108
lea ecx, [ebp - 0x64]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.00429e80
jmp 0x436622
push ebx
push 0x468ffc
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
jne 0x436622
lea ecx, [edi + 0x25c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x407160
jmp 0x4365c9
xor ebx, ebx
push 0x4071b8
lea ecx, [ebp - 0x64]
call fcn.00428fea
push ebx
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x89c], 0x100
call fcn.00456499
test al, al
je 0x436660
cmp dword [ebp - 0xe8], 0
je 0x436660
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.00429e80
test bl, bl
je 0x436705
xor ebx, ebx
push ebx
push 0x469018
lea eax, [ebp - 0xf8]
push eax
call fcn.00430e9b
test eax, eax
jne 0x4366cd
lea ecx, [edi + 0x26c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x4071d8
lea ecx, [ebp - 0x64]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.00429e80
jmp 0x436707
push ebx
push 0x468ffc
lea eax, [ebp - 0xf8]
push eax
call fcn.00430e9b
test eax, eax
jne 0x436707
lea ecx, [edi + 0x26c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x407230
jmp 0x4366ae
xor ebx, ebx
push 0x407288
lea ecx, [ebp - 0x64]
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x66
mov dword [ebp - 0x89c], 0x200
call fcn.00456499
test al, al
je 0x43673f
cmp dword [ebp - 0x1c], 0
je 0x43673f
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.00429e80
test bl, bl
je 0x4367de
xor ebx, ebx
push ebx
push 0x469018
lea eax, [ebp - 0x2c]
push eax
call fcn.00430e9b
test eax, eax
jne 0x4367a9
lea ecx, [edi + 0x27c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], bl
call dword [eax + 4]
push 0x4072b0
lea ecx, [ebp - 0x64]
call fcn.00428fea
push eax
push 2
call fcn.0043f092
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.00429e80
jmp 0x4367e0
push ebx
push 0x468ffc
lea eax, [ebp - 0x2c]
push eax
call fcn.00430e9b
test eax, eax
jne 0x4367e0
lea ecx, [edi + 0x27c]
mov eax, dword [ecx]
push 4
lea edx, [ebp - 0x895]
push edx
mov byte [ebp - 0x895], 1
call dword [eax + 4]
push 0x407310
jmp 0x43678a
xor ebx, ebx
push 0x407370
lea ecx, [ebp - 0x64]
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x67
mov dword [ebp - 0x89c], 0x400
call fcn.00456499
test al, al
je 0x43681e
cmp dword [ebp - 0x104], 0
je 0x43681e
mov bl, 1
push 0
push 1
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.00429e80
test bl, bl
je 0x436887
push 0x3b
lea esi, [edi + 0x1b4]
push esi
lea eax, [ebp - 0x114]
push eax
call fcn.00431810
mov esi, dword [esi]
cmp esi, dword [edi + 0x1b8]
je 0x436887
mov ebx, 0x4691bc
jmp 0x436862
push 1
push 0
mov ecx, esi
call fcn.00429559
push 1
push ebx
push esi
call fcn.0042a3cb
test al, al
jne 0x436857
push esi
push 0x407390
push 2
call fcn.00439218
add esi, 0x1c
cmp esi, dword [edi + 0x1b8]
jne 0x436862
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0xdc], 0x405310
call fcn.00455e59
jmp 0x4368e6
xor ebx, ebx
lea ecx, [ebp - 0x954]
call fcn.00456df5
push 0x4073f4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x68
call fcn.00428fea
lea ecx, [ebp - 0x954]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x69
call fcn.00455f30
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x68
call fcn.00429e80
push 1
lea eax, [edi + 0x42c]
push eax
lea eax, [ebp - 0x954]
push eax
call fcn.0043a799
lea ecx, [ebp - 0x904]
call fcn.00456df5
push 0x407424
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x6a
call fcn.00428fea
lea ecx, [ebp - 0x904]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x6b
call fcn.00455f30
push ebx
push 1
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x6a
call fcn.00429e80
lea ecx, [ebp - 0xa54]
call fcn.00455de8
lea ecx, [ebp - 0x904]
mov byte [ebp - 4], 0x6c
mov esi, ebx
call fcn.00456e23
test eax, eax
jle 0x436b8c
lea eax, [ebp - 0xa54]
push eax
push esi
lea ecx, [ebp - 0x904]
call fcn.00456ec1
lea eax, [ebp - 0xa54]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
push ebx
push ebx
lea ecx, [ebp - 0x114]
call fcn.00429e80
push 1
lea eax, [ebp - 0x114]
push eax
push 0x468e90
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6e
call fcn.00456499
push ebx
push ebx
lea ecx, [ebp - 0x94]
call fcn.00429e80
push ebx
lea eax, [ebp - 0x94]
push eax
push 0x4690c0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6f
call fcn.00456499
test al, al
je 0x436d56
push ebx
push 0x4690a4
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
jne 0x436a4b
mov dword [ebp - 0x8a8], 3
jmp 0x436aa7
push ebx
push 0x468e58
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
je 0x436a9d
push ebx
push 0x468e3c
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
je 0x436a9d
push ebx
push 0x468e20
lea eax, [ebp - 0x94]
push eax
call fcn.00430e9b
test eax, eax
jne 0x436d38
mov dword [ebp - 0x8a8], 1
jmp 0x436aa7
mov dword [ebp - 0x8a8], 2
push 0x407548
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x8a2], bl
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x70
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x6f
call fcn.00429e80
test bl, bl
je 0x436b09
xor ebx, ebx
push ebx
push 0x40755c
lea eax, [ebp - 0x94]
push eax
call fcn.0042fc23
test eax, eax
jne 0x436b0b
mov byte [ebp - 0x8a2], 1
jmp 0x436b0b
xor ebx, ebx
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00439a34
push eax
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [edi + 0x43c]
mov byte [ebp - 4], 0x71
call fcn.00439a57
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.00429e80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0xdc], 0x405310
call fcn.00455e59
lea ecx, [ebp - 0x904]
inc esi
call fcn.00456e23
cmp esi, eax
jl 0x4369a9
lea ecx, [ebp - 0xa14]
call fcn.00455de8
push 0x407568
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x72
call fcn.00428fea
push ebx
lea ecx, [ebp - 0xa14]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x73
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x72
call fcn.00429e80
test bl, bl
je 0x436d74
lea eax, [ebp - 0xa14]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x48]
call fcn.00429e80
push 0x4075a8
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x75
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x76
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x75
call fcn.00429e80
test bl, bl
je 0x436c55
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.004317f0
mov dword [edi + 0x474], eax
lea eax, [ebp - 0x48]
push eax
push 0x4075c0
push 2
call fcn.0042e12d
push 0x407644
lea ecx, [ebp - 0x64]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x77
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x75
call fcn.00429e80
test bl, bl
je 0x436caf
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.004317f0
mov dword [edi + 0x478], eax
lea eax, [ebp - 0x48]
push eax
push 0x407660
push 2
call fcn.0043988f
push 0x4076e8
lea ecx, [ebp - 0x64]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x78
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x75
call fcn.00429e80
test bl, bl
je 0x436d10
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.004317f0
push eax
call fcn.004334c2
mov word [edi + 0x47c], ax
lea eax, [ebp - 0x48]
push eax
push 0x407710
push 2
call fcn.00432bff
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00429e80
mov esi, 0x405310
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x72
mov dword [ebp - 0xdc], esi
call fcn.00455e59
jmp 0x436d79
lea eax, [ebp - 0x94]
push eax
push 0x407460
push 0x21
lea ecx, [ebp - 0x894]
call fcn.004398f4
jmp 0x434792
lea eax, [ebp - 0x114]
push eax
push 0x4074d8
push 0x21
lea ecx, [ebp - 0x894]
call fcn.00439994
jmp 0x434792
mov esi, 0x405310
lea ecx, [ebp - 0x974]
call fcn.00455de8
push 0x4077a0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x79
call fcn.00428fea
push 0
lea ecx, [ebp - 0x974]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x7a
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x79
call fcn.00429e80
test bl, bl
je 0x436e88
lea eax, [ebp - 0x974]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push 0x4077c8
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x7c
call fcn.00428fea
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x7d
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x7c
call fcn.00429e80
test bl, bl
je 0x436e59
call fcn.0043f00c
test al, al
je 0x436e3b
lea eax, [ebp - 0x2c]
push eax
push 0x4077e0
push 2
call fcn.00439aaf
push 0
push 0x40780c
lea eax, [ebp - 0x2c]
push eax
call fcn.0042fc23
test eax, eax
jne 0x436ff8
and dword [edi + 0x470], eax
lea eax, [ebp - 0x974]
push eax
mov ecx, edi
call fcn.00437768
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00429e80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x79
mov dword [ebp - 0xdc], esi
call fcn.00455e59
lea ecx, [ebp - 0x9d4]
call fcn.00455de8
push 0x407884
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x7e
call fcn.00428fea
push 0
lea ecx, [ebp - 0x9d4]
push ecx
push eax
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x7f
call fcn.00456019
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x7e
call fcn.00429e80
test bl, bl
je 0x4370e6
lea eax, [ebp - 0x9d4]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045645e
xor ebx, ebx
push ebx
push ebx
lea ecx, [ebp - 0xf8]
call fcn.00429e80
push ebx
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push 0x4078b0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x82
call fcn.00428fea
push ebx
lea ecx, [ebp - 0xf8]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x83
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x82
call fcn.00429e80
test bl, bl
je 0x436f7e
call fcn.0043f00c
test al, al
je 0x436f5d
lea eax, [ebp - 0xf8]
push eax
push 0x4078c0
push 2
call fcn.00439bb4
push 0
push 0x4078e4
lea eax, [ebp - 0xf8]
push eax
call fcn.0042fc23
test eax, eax
jne 0x437036
and dword [edi + 0x494], eax
push 0x407930
lea ecx, [ebp - 0x64]
call fcn.00428fea
push 0
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x84
call fcn.00456499
push 0
push 1
lea ecx, [ebp - 0x64]
mov bl, al
mov byte [ebp - 4], 0x82
call fcn.00429e80
test bl, bl
je 0x4370b4
call fcn.0043f00c
test al, al
je 0x436fd4
lea eax, [ebp - 0x2c]
push eax
push 0x40794c
push 2
call fcn.00439cb9
xor ebx, ebx
push ebx
push 0x4078e4
lea eax, [ebp - 0x2c]
push eax
call fcn.0042fc23
test eax, eax
jne 0x43707a
mov dword [edi + 0x498], ebx
jmp 0x4370b6
push 0
push 0x407820
lea eax, [ebp - 0x2c]
push eax
call fcn.0042fc23
test eax, eax
jne 0x43701b
mov dword [edi + 0x470], 1
jmp 0x436e59
lea eax, [ebp - 0x2c]
push eax
push 0x407840
push 0x2c
lea ecx, [ebp - 0x894]
call fcn.00439b14
jmp 0x434792
push 0
push 0x4078ec
lea eax, [ebp - 0xf8]
push eax
call fcn.0042fc23
test eax, eax
jne 0x43705c
mov dword [edi + 0x494], 1
jmp 0x436f7e
lea eax, [ebp - 0xf8]
push eax
push 0x4078f4
push 0x2c
lea ecx, [ebp - 0x894]
call fcn.00439c19
jmp 0x434792
push ebx
push 0x4078ec
lea eax, [ebp - 0x2c]
push eax
call fcn.0042fc23
test eax, eax
jne 0x437099
mov dword [edi + 0x498], 1
jmp 0x4370b6
lea eax, [ebp - 0x2c]
push eax
push 0x407980
push 0x2c
lea ecx, [ebp - 0x894]
call fcn.00439d1e
jmp 0x434792
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00429e80
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.00429e80
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0xdc], esi
call fcn.00455e59
jmp 0x4370e8
xor ebx, ebx
lea ecx, [ebp - 0x9d4]
mov byte [edi + 0x480], 1
mov byte [ebp - 4], 0x79
call fcn.00455e59
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 0x72
call fcn.00455e59
lea ecx, [ebp - 0xa14]
mov byte [ebp - 4], 0x6c
call fcn.00455e59
lea ecx, [ebp - 0xa54]
mov byte [ebp - 4], 0x6a
call fcn.00455e59
lea ecx, [ebp - 0x904]
mov byte [ebp - 4], 0x68
call fcn.00456e10
lea ecx, [ebp - 0x954]
mov byte [ebp - 4], 0x5b
call fcn.00456e10
lea ecx, [ebp - 0xa94]
mov byte [ebp - 4], 0x45
call fcn.00455e59
lea ecx, [ebp - 0x9b4]
mov byte [ebp - 4], 0x38
call fcn.00455e59
lea ecx, [ebp - 0xa34]
mov byte [ebp - 4], 0x2c
call fcn.00455e59
lea ecx, [ebp - 0x9f4]
mov byte [ebp - 4], 0x23
call fcn.00455e59
lea ecx, [ebp - 0xa74]
mov byte [ebp - 4], 0x17
call fcn.00455e59
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 0x12
call fcn.00456e10
lea ecx, [ebp - 0x934]
mov byte [ebp - 4], 0xc
call fcn.00456e10
lea ecx, [ebp - 0x944]
mov byte [ebp - 4], 0xb
call fcn.00456e10
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.00429e80
lea ecx, [ebp - 0x924]
mov byte [ebp - 4], 1
call fcn.00456e10
lea ecx, [ebp - 0x994]
mov byte [ebp - 4], bl
call fcn.00455e59
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f4]
call fcn.00456980
call fcn.00445518
ret 8