Function at 0x4083e0
Capabilities:
Contain obfuscated stackstrings
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46c88c
mov eax, dword fs:[0]
push eax
sub esp, 0x16c
mov eax, dword [0x490004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp + 0xc]
lea esi, [eax + 0x50]
mov edi, dword [ebp + 8]
sub esp, 0x18
mov dword [ebp - 0xac], 0
xorps xmm0, xmm0
mov dword [ebp - 0xe4], ecx
xor ecx, ecx
mov dword [ebp - 0xb8], ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 2
push 0x482f68
movups xmmword [ecx], xmm0
mov dword [ebp - 0xc8], esi
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00411360
mov esi, eax
mov dword [ebp - 4], 2
mov ecx, 0x7fffffff
mov edx, dword [edi + 0x10]
sub ecx, edx
cmp ecx, 1
jb 0x409ee3
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x4084ac
mov eax, dword [edi]
push 1
push 0x482f48
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.00413b20
push esi
lea edx, [ebp - 0x114]
mov dword [ebp - 0xac], 1
lea ecx, [ebp - 0xa8]
call fcn.00411730
add esp, 4
mov byte [ebp - 4], 3
mov esi, 1
mov dword [ebp - 0xac], esi
and esi, 0xfffffffe
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x114]
call fcn.00410830
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xfc]
call fcn.00410830
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x14], esp
push 2
movups xmmword [ecx], xmm0
push 0x482f6c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 6
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00411360
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 8
mov ecx, 0x7fffffff
mov edx, dword [edi + 0x10]
sub ecx, edx
cmp ecx, 1
jb 0x409ee8
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x408588
mov eax, dword [edi]
push 1
push 0x482f48
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.00413b20
push dword [ebp - 0xb0]
or esi, 4
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xac], esi
call fcn.00411730
add esp, 4
mov byte [ebp - 4], 9
and esi, 0xfffffffb
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x114]
call fcn.00410830
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xfc]
call fcn.00410830
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x14], esp
push 2
movups xmmword [ecx], xmm0
push 0x482f70
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00411360
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 0xe
mov ecx, 0x7fffffff
mov edx, dword [edi + 0x10]
sub ecx, edx
cmp ecx, 1
jb 0x409eed
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x40865d
mov eax, dword [edi]
push 1
push 0x482f48
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.00413b20
push dword [ebp - 0xb0]
or esi, 0x10
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xac], esi
call fcn.00411730
add esp, 4
mov byte [ebp - 4], 0xf
and esi, 0xffffffef
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x114]
call fcn.00410830
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xfc]
call fcn.00410830
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x14], esp
push 2
movups xmmword [ecx], xmm0
push 0x482f74
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00411360
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 0x14
mov ecx, 0x7fffffff
mov edx, dword [edi + 0x10]
sub ecx, edx
cmp ecx, 1
jb 0x409ef2
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x40872f
mov eax, dword [edi]
push 1
push 0x482f48
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.00413b20
push dword [ebp - 0xb0]
or esi, 0x40
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0xac], esi
call fcn.00411730
add esp, 4
mov byte [ebp - 4], 0x15
and esi, 0xffffffbf
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x114]
call fcn.00410830
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xfc]
call fcn.00410830
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x14], esp
push 2
movups xmmword [ecx], xmm0
push 0x482f78
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00411360
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 0x1a
mov ecx, 0x7fffffff
mov edx, dword [edi + 0x10]
sub ecx, edx
cmp ecx, 1
jb 0x409ef7
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x408801
mov eax, dword [edi]
push 1
push 0x482f48
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.00413b20
push dword [ebp - 0xb0]
or esi, 0x100
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x48]
mov dword [ebp - 0xac], esi
call fcn.00411730
add esp, 4
mov byte [ebp - 4], 0x1b
and esi, 0xfffffeff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x114]
call fcn.00410830
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xfc]
call fcn.00410830
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x14], esp
push 2
movups xmmword [ecx], xmm0
push 0x482f7c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00411360
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 0x20
mov eax, 0x7fffffff
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 1
jb 0x409efc
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x4088d9
mov eax, dword [edi]
push 1
push 0x482f48
push ecx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x114]
call fcn.00413b20
push dword [ebp - 0xb0]
or esi, 0x400
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0xac], esi
call fcn.00411730
add esp, 4
mov byte [ebp - 4], 0x21
and esi, 0xfffffbff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x114]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xfc]
call fcn.00410830
lea eax, [ebp - 0xa8]
push eax
call fcn.0040e3a0
test al, al
je 0x408cd1
lea eax, [ebp - 0x14]
push eax
sub esp, 0x18
lea eax, [ebp - 0xa8]
mov ecx, esp
mov dword [ebp - 0xc0], esp
push eax
call fcn.004101b0
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x23
call fcn.0042abd0
sub esp, 0x18
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov dword [ebp - 0xbc], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x482f68
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00411360
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x160]
mov edx, dword [ebp - 0xe4]
call fcn.00406690
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x27
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x18], esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x482f64
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0xb4]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411360
mov ecx, eax
mov byte [ebp - 4], 0x2a
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x408a67
cmp dword [ecx + 0x14], 0x10
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
jb 0x408a5f
mov eax, dword [ecx]
mov word [eax + edx], 0x5c
jmp 0x408a7e
push 1
push 0x482f48
mov byte [ebp - 0x18], 0
push dword [ebp - 0x18]
push 1
call fcn.00412410
mov ecx, eax
movups xmm0, xmmword [ecx]
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xfc], xmm0
mov dword [ebp - 0xb8], 4
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0xfc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xe0]
push eax
push dword [ebp - 0x14]
call fcn.00413940
mov dword [ebp - 0xb8], 0xc
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0xcc]
mov eax, edx
mov ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp eax, 1
jb 0x408b2d
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe0]
cmovae eax, dword [ebp - 0xe0]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0xe0]
jmp 0x408b4e
push 1
push 0x482f48
mov byte [ebp - 0xbc], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0xbc]
push 1
call fcn.00412410
movups xmm0, xmmword [eax]
or esi, 0x1000
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x130]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0x14]
call fcn.00413940
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x114]
or esi, 0x2000
mov dword [ebp - 0xac], esi
cmp dword [ebp - 0x100], 0x10
push ecx
cmovae edx, dword [ebp - 0x114]
mov ecx, dword [eax + 0x80]
call fcn.00405530
and esi, 0xffffdfff
add esp, 4
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x114]
call fcn.00410830
and esi, 0xffffefff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x130]
call fcn.00410830
mov eax, 0xc
mov dword [ebp - 0xb8], eax
and eax, 0xfffffff7
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xe0]
call fcn.00410830
mov ecx, dword [ebp - 0xb8]
and ecx, 0xfffffffb
mov dword [ebp - 0xb8], ecx
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xfc]
call fcn.00410830
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x148]
call fcn.00410830
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x160]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x178]
call fcn.00410830
mov eax, dword [ebp - 0xb4]
push dword [ebp - 0x14]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x80]
call fcn.00405f90
mov eax, dword [ebp - 0xb4]
add esp, 4
mov ecx, dword [eax + 0x80]
call fcn.00405ae0
push dword [ebp - 0xb0]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x90]
push eax
call fcn.0040e3a0
test al, al
je 0x409059
lea eax, [ebp - 0x18]
push eax
sub esp, 0x18
lea eax, [ebp - 0x90]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004101b0
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x23
call fcn.0042abd0
sub esp, 0x18
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov dword [ebp - 0xc0], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x482f6c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411360
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x160]
mov edx, dword [ebp - 0xe4]
call fcn.00406690
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x31
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x118], esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x482f64
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x32
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0xb4]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00411360
mov ecx, eax
mov byte [ebp - 4], 0x34
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x408df6
cmp dword [ecx + 0x14], 0x10
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
jb 0x408dee
mov eax, dword [ecx]
mov word [eax + edx], 0x5c
jmp 0x408e0d
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
push dword [ebp - 0x14]
push 1
call fcn.00412410
mov ecx, eax
movups xmm0, xmmword [ecx]
or esi, 0x4000
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x130]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xe0]
push eax
push dword [ebp - 0x118]
call fcn.00413940
or esi, 0x8000
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0xcc]
mov eax, edx
mov ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp eax, 1
jb 0x408ec3
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe0]
cmovae eax, dword [ebp - 0xe0]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0xe0]
jmp 0x408ede
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x14]
push 1
call fcn.00412410
movups xmm0, xmmword [eax]
or esi, 0x10000
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0xfc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0x118]
call fcn.00413940
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x114]
or esi, 0x20000
mov dword [ebp - 0xac], esi
cmp dword [ebp - 0x100], 0x10
push ecx
cmovae edx, dword [ebp - 0x114]
mov ecx, dword [eax + 0x80]
call fcn.00405530
and esi, 0xfffdffff
add esp, 4
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x114]
call fcn.00410830
and esi, 0xfffeffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xfc]
call fcn.00410830
and esi, 0xffff7fff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xe0]
call fcn.00410830
and esi, 0xffffbfff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x130]
call fcn.00410830
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x178]
call fcn.00410830
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x160]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x148]
call fcn.00410830
mov eax, dword [ebp - 0xb4]
push dword [ebp - 0x18]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x80]
call fcn.00405f90
mov eax, dword [ebp - 0xb4]
add esp, 4
mov ecx, dword [eax + 0x80]
call fcn.00405ae0
push dword [ebp - 0xb0]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x78]
push eax
call fcn.0040e3a0
test al, al
je 0x4093db
lea eax, [ebp - 0x18]
push eax
sub esp, 0x18
lea eax, [ebp - 0x78]
mov ecx, esp
mov dword [ebp - 0x118], esp
push eax
call fcn.004101b0
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 0x23
call fcn.0042abd0
sub esp, 0x18
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov dword [ebp - 0x14], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x482f70
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411360
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x160]
mov edx, dword [ebp - 0xe4]
call fcn.00406690
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x3b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xc4], esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x482f64
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0xb4]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00411360
mov ecx, eax
mov byte [ebp - 4], 0x3e
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x409178
cmp dword [ecx + 0x14], 0x10
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
jb 0x409170
mov eax, dword [ecx]
mov word [eax + edx], 0x5c
jmp 0x40918f
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
push dword [ebp - 0x14]
push 1
call fcn.00412410
mov ecx, eax
movups xmm0, xmmword [ecx]
or esi, 0x40000
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x130]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xe0]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
or esi, 0x80000
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0xcc]
mov eax, edx
mov ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp eax, 1
jb 0x409245
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe0]
cmovae eax, dword [ebp - 0xe0]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0xe0]
jmp 0x409260
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x14]
push 1
call fcn.00412410
movups xmm0, xmmword [eax]
or esi, 0x100000
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0xfc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x114]
or esi, 0x200000
mov dword [ebp - 0xac], esi
cmp dword [ebp - 0x100], 0x10
push ecx
cmovae edx, dword [ebp - 0x114]
mov ecx, dword [eax + 0x80]
call fcn.00405530
and esi, 0xffdfffff
add esp, 4
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x114]
call fcn.00410830
and esi, 0xffefffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xfc]
call fcn.00410830
and esi, 0xfff7ffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xe0]
call fcn.00410830
and esi, 0xfffbffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x130]
call fcn.00410830
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x178]
call fcn.00410830
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x160]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x148]
call fcn.00410830
mov eax, dword [ebp - 0xb4]
push dword [ebp - 0x18]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x80]
call fcn.00405f90
mov eax, dword [ebp - 0xb4]
add esp, 4
mov ecx, dword [eax + 0x80]
call fcn.00405ae0
push dword [ebp - 0xb0]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x60]
push eax
call fcn.0040e3a0
test al, al
je 0x40975d
lea eax, [ebp - 0x18]
push eax
sub esp, 0x18
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp - 0xc4], esp
push eax
call fcn.004101b0
mov byte [ebp - 4], 0x42
mov byte [ebp - 4], 0x23
call fcn.0042abd0
sub esp, 0x18
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov dword [ebp - 0x118], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x482f74
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411360
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x160]
mov edx, dword [ebp - 0xe4]
call fcn.00406690
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x45
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x482f64
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0xb4]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00411360
mov ecx, eax
mov byte [ebp - 4], 0x48
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x4094fa
cmp dword [ecx + 0x14], 0x10
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
jb 0x4094f2
mov eax, dword [ecx]
mov word [eax + edx], 0x5c
jmp 0x409511
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
push dword [ebp - 0x14]
push 1
call fcn.00412410
mov ecx, eax
movups xmm0, xmmword [ecx]
or esi, 0x400000
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x130]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xe0]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
or esi, 0x800000
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0xcc]
mov eax, edx
mov ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp eax, 1
jb 0x4095c7
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe0]
cmovae eax, dword [ebp - 0xe0]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0xe0]
jmp 0x4095e2
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x14]
push 1
call fcn.00412410
movups xmm0, xmmword [eax]
or esi, 0x1000000
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0xfc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x114]
or esi, 0x2000000
mov dword [ebp - 0xac], esi
cmp dword [ebp - 0x100], 0x10
push ecx
cmovae edx, dword [ebp - 0x114]
mov ecx, dword [eax + 0x80]
call fcn.00405530
and esi, 0xfdffffff
add esp, 4
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x114]
call fcn.00410830
and esi, 0xfeffffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0xfc]
call fcn.00410830
and esi, 0xff7fffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xe0]
call fcn.00410830
and esi, 0xffbfffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x130]
call fcn.00410830
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x178]
call fcn.00410830
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x160]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x148]
call fcn.00410830
mov eax, dword [ebp - 0xb4]
push dword [ebp - 0x18]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x80]
call fcn.00405f90
mov eax, dword [ebp - 0xb4]
add esp, 4
mov ecx, dword [eax + 0x80]
call fcn.00405ae0
push dword [ebp - 0xb0]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x48]
push eax
call fcn.0040e3a0
test al, al
je 0x409adf
lea eax, [ebp - 0x18]
push eax
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0xc4], esp
push eax
call fcn.004101b0
mov byte [ebp - 4], 0x4c
mov byte [ebp - 4], 0x23
call fcn.0042abd0
sub esp, 0x18
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov dword [ebp - 0x118], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x482f78
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x4d
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411360
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x160]
mov edx, dword [ebp - 0xe4]
call fcn.00406690
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x4f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x482f64
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x50
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0xb4]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00411360
mov ecx, eax
mov byte [ebp - 4], 0x52
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x40987c
cmp dword [ecx + 0x14], 0x10
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
jb 0x409874
mov eax, dword [ecx]
mov word [eax + edx], 0x5c
jmp 0x409893
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
push dword [ebp - 0x14]
push 1
call fcn.00412410
mov ecx, eax
movups xmm0, xmmword [ecx]
or esi, 0x4000000
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x130]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xe0]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
or esi, 0x8000000
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0xcc]
mov eax, edx
mov ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp eax, 1
jb 0x409949
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe0]
cmovae eax, dword [ebp - 0xe0]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0xe0]
jmp 0x409964
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x14]
push 1
call fcn.00412410
movups xmm0, xmmword [eax]
or esi, 0x10000000
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0xfc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
mov eax, dword [ebp - 0xb4]
lea edx, [ebp - 0x114]
or esi, 0x20000000
mov dword [ebp - 0xac], esi
cmp dword [ebp - 0x100], 0x10
push ecx
cmovae edx, dword [ebp - 0x114]
mov ecx, dword [eax + 0x80]
call fcn.00405530
and esi, 0xdfffffff
add esp, 4
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x114]
call fcn.00410830
and esi, 0xefffffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xfc]
call fcn.00410830
and esi, 0xf7ffffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xe0]
call fcn.00410830
and esi, 0xfbffffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x130]
call fcn.00410830
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x178]
call fcn.00410830
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x160]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x148]
call fcn.00410830
mov eax, dword [ebp - 0xb4]
push dword [ebp - 0x18]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x80]
call fcn.00405f90
mov eax, dword [ebp - 0xb4]
add esp, 4
mov ecx, dword [eax + 0x80]
call fcn.00405ae0
push dword [ebp - 0xb0]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x30]
push eax
call fcn.0040e3a0
test al, al
je 0x409e49
lea eax, [ebp - 0x18]
push eax
sub esp, 0x18
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0xc4], esp
push eax
call fcn.004101b0
mov byte [ebp - 4], 0x56
mov byte [ebp - 4], 0x23
call fcn.0042abd0
sub esp, 0x18
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov dword [ebp - 0x118], esp
xorps xmm0, xmm0
push 2
movups xmmword [ecx], xmm0
push 0x482f7c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x57
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc8]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x148]
call fcn.00411360
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x160]
mov edx, dword [ebp - 0xe4]
call fcn.00406690
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x59
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x482f64
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00412090
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0xb4]
call fcn.0040f900
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00411360
mov ecx, eax
mov byte [ebp - 4], 0x5c
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 1
jb 0x409bfe
cmp dword [ecx + 0x14], 0x10
lea eax, [edx + 1]
mov dword [ecx + 0x10], eax
mov eax, ecx
jb 0x409bf6
mov eax, dword [ecx]
mov word [eax + edx], 0x5c
jmp 0x409c15
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
push dword [ebp - 0x14]
push 1
call fcn.00412410
mov ecx, eax
movups xmm0, xmmword [ecx]
or esi, 0x40000000
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0x130]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xe0]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
or esi, 0x80000000
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x5e
mov edx, dword [ebp - 0xcc]
mov eax, edx
mov ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp eax, 1
jb 0x409ccb
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xe0]
cmovae eax, dword [ebp - 0xe0]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0xe0]
jmp 0x409ce6
push 1
push 0x482f48
mov byte [ebp - 0x14], 0
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x14]
push 1
call fcn.00412410
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
or dword [ebp - 0xb8], 1
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x5f
lea eax, [ebp - 0xfc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0xc4]
call fcn.00413940
or dword [ebp - 0xb8], 2
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x100], 0x10
push ecx
cmovae edx, dword [ebp - 0x114]
mov ecx, dword [eax + 0x80]
call fcn.00405530
and dword [ebp - 0xb8], 0xfffffffd
add esp, 4
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x114]
call fcn.00410830
and dword [ebp - 0xb8], 0xfffffffe
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0xfc]
call fcn.00410830
and esi, 0x7fffffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xe0]
call fcn.00410830
and esi, 0xbfffffff
mov dword [ebp - 0xac], esi
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x130]
call fcn.00410830
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x178]
call fcn.00410830
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x160]
call fcn.00410830
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x148]
call fcn.00410830
mov esi, dword [ebp - 0xb4]
push dword [ebp - 0x18]
mov edx, dword [ebp - 0xb0]
mov ecx, dword [esi + 0x80]
call fcn.00405f90
mov ecx, dword [esi + 0x80]
add esp, 4
call fcn.00405ae0
push dword [ebp - 0xb0]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x409e4f
mov esi, dword [ebp - 0xb4]
push dword [ebp - 0xe4]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xc4], esp
push edi
call fcn.004101b0
mov byte [ebp - 4], 0x60
mov byte [ebp - 4], 0x23
mov ecx, esi
call fcn.0040a8c0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x30]
call fcn.00410830
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x48]
call fcn.00410830
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x60]
call fcn.00410830
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x78]
call fcn.00410830
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x90]
call fcn.00410830
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa8]
call fcn.00410830
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042e653
mov esp, ebp
pop ebp
ret 8
call fcn.00406680
call fcn.00406680
call fcn.00406680
call fcn.00406680
call fcn.00406680
call fcn.00406680
int3