Function at 0x45d807
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get disk size
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e6c22
mov eax, dword fs:[0]
push eax
mov eax, 0x94d8
call fcn.004c3960
mov eax, dword [0x540698]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00467c8c
xor ebx, ebx
test al, al
jne 0x45d8a5
mov esi, ebx
call fcn.004c2f1b
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x8f8c], xmm0
mov edx, 0xfe
cmp esi, edx
jb 0x45d846
mov ecx, ebx
lea esi, [edx - 1]
mov eax, esi
cmp ecx, esi
jge 0x45d8a0
movsd xmm0, qword [ebp + eax*8 - 0x8f84]
movsd xmm1, qword [ebp + eax*8 - 0x8f8c]
comisd xmm0, xmm1
jbe 0x45d89b
movsd qword [ebp + eax*8 - 0x8f84], xmm1
movsd qword [ebp + eax*8 - 0x8f8c], xmm0
dec eax
cmp eax, ecx
jg 0x45d871
inc ecx
cmp ecx, edx
jl 0x45d86b
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x94ac]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94a4]
mov dword [ebp - 4], ebx
call fcn.00401718
mov ecx, dword [0x541ad4]
xor eax, eax
inc eax
mov byte [ebp - 4], al
lea eax, [ecx + 1]
imul eax, ecx
push 0x15
cdq
pop ecx
idiv ecx
push 0xd
pop eax
cmp edx, eax
jne 0x45d8ea
inc dword [0x54342c]
push edi
lea ecx, [ebp - 0x949c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9494]
mov byte [ebp - 4], 2
call fcn.00401718
push 3
pop eax
push edi
lea ecx, [ebp - 0x948c]
mov byte [ebp - 4], al
call fcn.00401718
push 4
pop eax
push edi
lea ecx, [ebp - 0x9484]
mov byte [ebp - 4], al
call fcn.00401718
mov byte [ebp - 4], 5
call fcn.00467a59
test al, al
jne 0x45d941
call fcn.004c2f1b
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x947c]
call fcn.00401718
push 6
pop eax
push edi
lea ecx, [ebp - 0x9474]
mov byte [ebp - 4], al
call fcn.00401718
push 7
pop eax
push edi
lea ecx, [ebp - 0x946c]
mov byte [ebp - 4], al
call fcn.00401718
mov edx, dword [0x541ad4]
push 0x14
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 8
cmp edx, 5
jne 0x45d999
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileType]
push edi
lea ecx, [ebp - 0x9464]
call fcn.00401718
push 9
pop eax
mov byte [ebp - 4], al
call fcn.00467a37
mov ecx, dword [0x5432c4]
mov edx, 0xfc8525
test al, al
cmove ecx, edx
mov dword [0x5432c4], ecx
push edi
lea ecx, [ebp - 0x945c]
call fcn.00401718
push 0xa
pop eax
push edi
lea ecx, [ebp - 0x9454]
mov byte [ebp - 4], al
call fcn.00401718
mov edx, dword [0x541ad4]
push 0xb
pop eax
mov dword [ebp - 0x904c], eax
mov byte [ebp - 4], al
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
push 9
pop esi
idiv esi
mov eax, dword [0x5433c8]
mov ecx, 0x574a1a14
push edi
cmp edx, 8
cmove eax, ecx
lea ecx, [ebp - 0x944c]
mov dword [0x5433c8], eax
call fcn.00401718
push 0xc
pop eax
mov dword [ebp - 0x9048], eax
mov byte [ebp - 4], al
mov eax, dword [0x541ad4]
lea edx, [eax + 2]
lea ecx, [eax + 1]
imul edx, ecx
imul edx, eax
and edx, 0x8000000f
jns 0x45da53
dec edx
or edx, 0xfffffff0
inc edx
push 0x64
pop ecx
cmp edx, esi
jne 0x45da7f
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x141]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x9444]
call fcn.00401718
push 0xd
pop ecx
mov byte [ebp - 4], cl
call fcn.00467a13
test al, al
jne 0x45dac0
mov edx, dword [0x541ad4]
mov ecx, ebx
mov eax, dword [ebp + ecx*4 - 0x85f0]
imul eax, eax, 0xb8
add edx, eax
inc ecx
cmp ecx, 0x1e4
jb 0x45daa2
mov dword [0x541ad4], edx
push edi
lea ecx, [ebp - 0x943c]
call fcn.00401718
mov byte [ebp - 4], 0xe
call fcn.00467a59
test al, al
jne 0x45dae4
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push edi
lea ecx, [ebp - 0x9434]
call fcn.00401718
push 0xf
pop eax
mov byte [ebp - 4], al
call fcn.00467c03
test al, al
jne 0x45db20
mov esi, dword [0x541ad4]
xor eax, eax
inc eax
mov ecx, eax
cmp esi, eax
jle 0x45db1a
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x45db0e
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x942c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9424]
mov byte [ebp - 4], 0x10
call fcn.00401718
mov byte [ebp - 4], 0x11
call fcn.00467b2b
test al, al
jne 0x45db5f
call fcn.004c2f1b
mov ecx, dword [0x541ad4]
cmp ecx, eax
jne 0x45db5f
dec ecx
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x941c]
call fcn.00401718
push 0x12
pop eax
push edi
lea ecx, [ebp - 0x9414]
mov byte [ebp - 4], al
call fcn.00401718
push 0x13
pop eax
push edi
lea ecx, [ebp - 0x940c]
mov byte [ebp - 4], al
call fcn.00401718
push 0x14
pop eax
push edi
lea ecx, [ebp - 0x9404]
mov byte [ebp - 4], al
call fcn.00401718
push 0x15
pop eax
mov byte [ebp - 4], al
call fcn.00467b8f
test al, al
jne 0x45dbe4
mov esi, dword [0x541ad4]
mov edx, ebx
push 8
mov ecx, edx
pop edi
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor ecx, eax
dec edi
jne 0x45dbbd
add esi, ecx
inc edx
cmp edx, 0x100
jl 0x45dbb8
mov dword [0x541ad4], esi
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x93fc]
call fcn.00401718
push 0x16
pop eax
push edi
lea ecx, [ebp - 0x93f4]
mov byte [ebp - 4], al
call fcn.00401718
push 0x17
pop eax
mov byte [ebp - 4], al
mov eax, dword [0x541ad4]
imul eax, eax
push 0x13
cdq
pop ecx
idiv ecx
cmp edx, 0xe
jne 0x45dc2d
push 4
pop eax
push eax
call fcn.004c1b05
pop ecx
mov ecx, dword [0x541ad4]
mov dword [eax], ecx
push edi
lea ecx, [ebp - 0x93ec]
call fcn.00401718
push 0x18
pop ebx
push edi
lea ecx, [ebp - 0x93e4]
mov byte [ebp - 4], bl
call fcn.00401718
push edi
lea ecx, [ebp - 0x93dc]
mov byte [ebp - 4], 0x19
call fcn.00401718
push edi
lea ecx, [ebp - 0x93d4]
mov byte [ebp - 4], 0x1a
call fcn.00401718
mov byte [ebp - 4], 0x1b
call fcn.004679c9
test al, al
jne 0x45dc83
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x93cc]
call fcn.00401718
push edi
lea ecx, [ebp - 0x93c4]
mov byte [ebp - 4], 0x1c
call fcn.00401718
push edi
lea ecx, [ebp - 0x93bc]
mov byte [ebp - 4], 0x1d
call fcn.00401718
push edi
lea ecx, [ebp - 0x93b4]
mov byte [ebp - 4], 0x1e
call fcn.00401718
push edi
lea ecx, [ebp - 0x93ac]
mov byte [ebp - 4], 0x1f
call fcn.00401718
push edi
lea ecx, [ebp - 0x93a4]
mov byte [ebp - 4], 0x20
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
idiv ebx
push 0xa
pop eax
mov byte [ebp - 4], 0x21
cmp edx, eax
jne 0x45dd02
dec ecx
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x939c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9394]
mov byte [ebp - 4], 0x22
call fcn.00401718
mov ebx, dword [0x541ad4]
push 0x17
lea eax, [ebx + 1]
imul eax, ebx
cdq
pop ecx
idiv ecx
push 0x16
pop eax
mov byte [ebp - 4], 0x23
cmp edx, eax
jne 0x45dd6a
xor eax, eax
push 6
mov dword [ebp - 0x9038], eax
lea ecx, [ebp - 0x64]
pop edi
xor esi, esi
inc esi
inc ecx
cmp esi, edi
jl 0x45dd4b
mov eax, dword [ebp - 0x9038]
push 0xc
inc eax
pop edx
mov dword [ebp - 0x9038], eax
cmp eax, edx
jl 0x45dd49
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x938c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9384]
mov byte [ebp - 4], 0x24
call fcn.00401718
mov byte [ebp - 4], 0x25
call fcn.00467b05
test al, al
jne 0x45ddc9
push 0x28
call fcn.004c0e30
pop ecx
mov edi, eax
xor esi, esi
call fcn.004c2f1b
add eax, dword [0x541ad4]
push 0xa
mov dword [edi + esi*4], eax
inc esi
pop eax
cmp esi, eax
jl 0x45dd9f
mov eax, dword [edi + 0x24]
push edi
mov dword [0x541ad4], eax
call fcn.004c1c8e
pop ecx
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x937c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9374]
mov byte [ebp - 4], 0x26
call fcn.00401718
mov ebx, dword [0x541ad4]
push 0xb
lea ecx, [ebx + 1]
lea eax, [ebx + 2]
imul eax, ecx
imul eax, ebx
cdq
pop ecx
idiv ecx
push 3
pop eax
mov byte [ebp - 4], 0x27
cmp edx, eax
jne 0x45de63
xor eax, eax
mov dword [ebp - 0x9038], eax
lea esi, [ebp - 0x64]
xor edi, edi
and dword [ebp - 0x903c], 0
mov eax, ebx
inc edi
cdq
idiv edi
mov dword [ebp - 0x9044], edi
mov edi, dword [ebp - 0x903c]
mov dword [ebp - 0x9040], edx
lea ecx, [edi + 1]
mov edi, ecx
push 3
pop ecx
cmp edi, ecx
jl 0x45de34
mov edi, dword [ebp - 0x9044]
add esi, ecx
cmp edi, 8
jl 0x45de15
mov eax, dword [ebp - 0x9038]
inc eax
mov dword [ebp - 0x9038], eax
cmp eax, ecx
jl 0x45de13
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x936c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9364]
mov byte [ebp - 4], 0x28
call fcn.00401718
push edi
lea ecx, [ebp - 0x935c]
mov byte [ebp - 4], 0x29
call fcn.00401718
push edi
lea ecx, [ebp - 0x9354]
mov byte [ebp - 4], 0x2a
call fcn.00401718
push edi
lea ecx, [ebp - 0x934c]
mov byte [ebp - 4], 0x2b
call fcn.00401718
mov byte [ebp - 4], 0x2c
call fcn.00467ccc
test al, al
jne 0x45df1b
mov esi, dword [0x541ad4]
test esi, esi
je 0x45df1b
push 3
pop edi
mov ecx, esi
and ecx, 0x80000001
jns 0x45ded8
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x45dee5
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x45deec
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x541ad4], esi
sub edx, 0
je 0x45df05
dec edx
dec edx
je 0x45df08
dec edx
je 0x45df09
jmp 0x45df12
add esi, 2
inc esi
add esi, 2
mov dword [0x541ad4], esi
test esi, esi
jne 0x45dec9
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9344]
call fcn.00401718
mov byte [ebp - 4], 0x2d
call fcn.0045997a
test al, al
jne 0x45df63
mov eax, dword [0x541ad4]
push 0x64
cdq
pop esi
idiv esi
xor ecx, ecx
push 4
pop ebx
lea eax, [edx + 0x2f4]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
jmp 0x45df69
push 4
pop ebx
push 0x64
pop esi
push edi
lea ecx, [ebp - 0x933c]
call fcn.00401718
mov eax, dword [0x541ad4]
imul eax, eax
push 0xf
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0x2e
cmp edx, 7
jne 0x45dfa2
call fcn.004c2f1b
mov ecx, dword [0x541ad4]
cmp ecx, eax
jne 0x45dfa2
dec ecx
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x9334]
call fcn.00401718
push edi
lea ecx, [ebp - 0x932c]
mov byte [ebp - 4], 0x2f
call fcn.00401718
push edi
lea ecx, [ebp - 0x9324]
mov byte [ebp - 4], 0x30
call fcn.00401718
push edi
lea ecx, [ebp - 0x931c]
mov byte [ebp - 4], 0x31
call fcn.00401718
push edi
lea ecx, [ebp - 0x9314]
mov byte [ebp - 4], 0x32
call fcn.00401718
push edi
lea ecx, [ebp - 0x930c]
mov byte [ebp - 4], 0x33
call fcn.00401718
push edi
lea ecx, [ebp - 0x9304]
mov byte [ebp - 4], 0x34
call fcn.00401718
push edi
lea ecx, [ebp - 0x92fc]
mov byte [ebp - 4], 0x35
call fcn.00401718
mov ecx, dword [0x541ad4]
mov byte [ebp - 4], 0x36
lea eax, [ecx + 1]
imul eax, ecx
cdq
idiv dword [ebp - 0x904c]
cmp edx, ebx
jne 0x45e05d
mov eax, ecx
cdq
idiv esi
xor ecx, ecx
lea eax, [edx + 0x141]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x92f4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x92ec]
mov byte [ebp - 4], 0x37
call fcn.00401718
push edi
lea ecx, [ebp - 0x92e4]
mov byte [ebp - 4], 0x38
call fcn.00401718
push 0x39
pop eax
push edi
lea ecx, [ebp - 0x92dc]
mov dword [ebp - 0x9038], eax
mov byte [ebp - 4], al
call fcn.00401718
push edi
lea ecx, [ebp - 0x92d4]
mov byte [ebp - 4], 0x3a
call fcn.00401718
push edi
lea ecx, [ebp - 0x92cc]
mov byte [ebp - 4], 0x3b
call fcn.00401718
push edi
lea ecx, [ebp - 0x92c4]
mov byte [ebp - 4], 0x3c
call fcn.00401718
push edi
lea ecx, [ebp - 0x92bc]
mov byte [ebp - 4], 0x3d
call fcn.00401718
push edi
lea ecx, [ebp - 0x92b4]
mov byte [ebp - 4], 0x3e
call fcn.00401718
push edi
lea ecx, [ebp - 0x92ac]
mov byte [ebp - 4], 0x3f
call fcn.00401718
mov edx, dword [0x541ad4]
push 0x16
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0x40
cmp edx, 8
jne 0x45e132
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push edi
lea ecx, [ebp - 0x92a4]
call fcn.00401718
mov byte [ebp - 4], 0x41
call fcn.00467b2b
test al, al
jne 0x45e16f
mov eax, dword [0x541ad4]
cdq
idiv esi
xor ecx, ecx
lea eax, [edx + 0x7b]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x929c]
call fcn.00401718
mov byte [ebp - 4], 0x42
call fcn.00467ccc
push edi
lea ecx, [ebp - 0x9294]
call fcn.00401718
push 0x43
pop ebx
push edi
lea ecx, [ebp - 0x928c]
mov byte [ebp - 4], bl
call fcn.00401718
push edi
lea ecx, [ebp - 0x9284]
mov byte [ebp - 4], 0x44
call fcn.00401718
push edi
lea ecx, [ebp - 0x927c]
mov byte [ebp - 4], 0x45
call fcn.00401718
push edi
lea ecx, [ebp - 0x9274]
mov byte [ebp - 4], 0x46
call fcn.00401718
push edi
lea ecx, [ebp - 0x926c]
mov byte [ebp - 4], 0x47
call fcn.00401718
push edi
lea ecx, [ebp - 0x9264]
mov byte [ebp - 4], 0x48
call fcn.00401718
mov edx, dword [0x541ad4]
push 0x16
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
push 0xd
pop eax
mov byte [ebp - 4], 0x49
cmp edx, eax
jne 0x45e234
push 4
pop eax
push eax
call fcn.004c1b05
mov esi, eax
call fcn.004c2f1b
mov dword [esi], eax
push esi
mov dword [0x541ad4], eax
call fcn.0042e00a
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x925c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9254]
mov byte [ebp - 4], 0x4a
call fcn.00401718
push edi
lea ecx, [ebp - 0x924c]
mov byte [ebp - 4], 0x4b
call fcn.00401718
mov ecx, dword [0x541ad4]
push 4
lea esi, [ecx + 1]
lea eax, [ecx + 2]
imul eax, esi
imul eax, ecx
cdq
idiv dword [ebp - 0x9048]
pop eax
mov byte [ebp - 4], 0x4c
cmp edx, eax
jne 0x45e2a7
sub ecx, 0
je 0x45e29d
dec ecx
je 0x45e294
mov dword [0x541ad4], esi
jmp 0x45e2a7
and dword [0x541ad4], 0
jmp 0x45e2a7
mov dword [0x541ad4], 2
push edi
lea ecx, [ebp - 0x9244]
call fcn.00401718
mov byte [ebp - 4], 0x4d
call fcn.00467bb7
test al, al
jne 0x45e2cd
lea eax, [ebp - 0x9030]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
push edi
lea ecx, [ebp - 0x923c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9234]
mov byte [ebp - 4], 0x4e
call fcn.00401718
push edi
lea ecx, [ebp - 0x922c]
mov byte [ebp - 4], 0x4f
call fcn.00401718
push 0x50
pop eax
mov byte [ebp - 4], al
call fcn.00467b49
test al, al
jne 0x45e367
mov esi, dword [0x541ad4]
test esi, esi
je 0x45e367
push 3
pop edi
mov ecx, esi
and ecx, 0x80000001
jns 0x45e324
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x45e331
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x45e338
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x541ad4], esi
sub edx, 0
je 0x45e351
dec edx
dec edx
je 0x45e354
dec edx
je 0x45e355
jmp 0x45e35e
add esi, 2
inc esi
add esi, 2
mov dword [0x541ad4], esi
test esi, esi
jne 0x45e315
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9224]
call fcn.00401718
push edi
lea ecx, [ebp - 0x921c]
mov byte [ebp - 4], 0x51
call fcn.00401718
push edi
lea ecx, [ebp - 0x9214]
mov byte [ebp - 4], 0x52
call fcn.00401718
push edi
lea ecx, [ebp - 0x920c]
mov byte [ebp - 4], 0x53
call fcn.00401718
push edi
lea ecx, [ebp - 0x9204]
mov byte [ebp - 4], 0x54
call fcn.00401718
push edi
lea ecx, [ebp - 0x91fc]
mov byte [ebp - 4], 0x55
call fcn.00401718
push edi
lea ecx, [ebp - 0x91f4]
mov byte [ebp - 4], 0x56
call fcn.00401718
push edi
lea ecx, [ebp - 0x91ec]
mov byte [ebp - 4], 0x57
call fcn.00401718
push edi
lea ecx, [ebp - 0x91e4]
mov byte [ebp - 4], 0x58
call fcn.00401718
push edi
lea ecx, [ebp - 0x91dc]
mov byte [ebp - 4], 0x59
call fcn.00401718
push edi
lea ecx, [ebp - 0x91d4]
mov byte [ebp - 4], 0x5a
call fcn.00401718
push edi
lea ecx, [ebp - 0x91cc]
mov byte [ebp - 4], 0x5b
call fcn.00401718
push edi
lea ecx, [ebp - 0x91c4]
mov byte [ebp - 4], 0x5c
call fcn.00401718
push edi
lea ecx, [ebp - 0x91bc]
mov byte [ebp - 4], 0x5d
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0x15
cdq
pop esi
idiv esi
push 9
pop eax
mov byte [ebp - 4], 0x5e
cmp edx, eax
jne 0x45e4dd
mov eax, ecx
cdq
sub eax, edx
mov edi, eax
push 3
mov dword [ebp - 0x9044], 0x73
mov eax, dword [ebp - 0x9044]
xor esi, esi
sar edi, 1
pop ebx
test edi, edi
jle 0x45e4d0
mov eax, ecx
cdq
and edx, ebx
add eax, edx
sar eax, 2
xor ecx, ecx
mov edx, edi
mov dword [ebp - 0x903c], edi
test eax, eax
jle 0x45e4b9
mov edx, ecx
mov dword [ebp - 0x9040], eax
add dword [ebp - 0x9044], edx
dec edx
dec dword [ebp - 0x9040]
jne 0x45e4a4
mov edx, dword [ebp - 0x903c]
add ecx, esi
dec edx
mov dword [ebp - 0x903c], edx
jne 0x45e498
mov ecx, dword [0x541ad4]
mov eax, dword [ebp - 0x9044]
inc esi
cmp esi, eax
jl 0x45e480
push 0x43
pop ebx
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x91b4]
call fcn.00401718
mov byte [ebp - 4], 0x5f
call fcn.00467b2b
test al, al
jne 0x45e555
mov esi, dword [0x541ad4]
test esi, esi
je 0x45e555
push 3
pop edi
mov ecx, esi
and ecx, 0x80000001
jns 0x45e512
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x45e51f
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x45e526
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x541ad4], esi
sub edx, 0
je 0x45e53f
dec edx
dec edx
je 0x45e542
dec edx
je 0x45e543
jmp 0x45e54c
add esi, 2
inc esi
add esi, 2
mov dword [0x541ad4], esi
test esi, esi
jne 0x45e503
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x91ac]
call fcn.00401718
push edi
lea ecx, [ebp - 0x91a4]
mov byte [ebp - 4], 0x60
call fcn.00401718
push edi
lea ecx, [ebp - 0x919c]
mov byte [ebp - 4], 0x61
call fcn.00401718
push edi
lea ecx, [ebp - 0x9194]
mov byte [ebp - 4], 0x62
call fcn.00401718
push edi
lea ecx, [ebp - 0x918c]
mov byte [ebp - 4], 0x63
call fcn.00401718
push 0x64
pop eax
push edi
lea ecx, [ebp - 0x9184]
mov byte [ebp - 4], al
call fcn.00401718
mov eax, dword [0x541ad4]
imul eax, eax
push 0x18
cdq
pop ecx
idiv ecx
push 3
pop eax
mov byte [ebp - 4], 0x65
cmp edx, eax
jne 0x45e638
xor eax, eax
push 0x1140
push eax
mov word [ebp - 0x11a8], ax
lea eax, [ebp - 0x11a6]
push eax
call fcn.004c3990
add esp, 0xc
xor edi, edi
xor esi, esi
xor edx, edx
test edi, edi
je 0x45e618
test edx, edx
je 0x45e618
lea eax, [edx + esi]
lea ecx, [edx + esi]
mov ax, word [ebp + eax*2 - 0x1206]
inc ax
add ax, word [ebp + ecx*2 - 0x11aa]
mov word [ebp + ecx*2 - 0x11a8], ax
inc edx
cmp edx, 0x2f
jl 0x45e5f0
add esi, 0x2f
inc edi
cmp esi, 0x8a1
jl 0x45e5ee
movsx eax, word [ebp - 0x68]
mov dword [0x541ad4], eax
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x917c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9174]
mov byte [ebp - 4], 0x66
call fcn.00401718
push edi
lea ecx, [ebp - 0x916c]
mov byte [ebp - 4], 0x67
call fcn.00401718
push edi
lea ecx, [ebp - 0x9164]
mov byte [ebp - 4], 0x68
call fcn.00401718
push edi
lea ecx, [ebp - 0x915c]
mov byte [ebp - 4], 0x69
call fcn.00401718
push edi
lea ecx, [ebp - 0x9154]
mov byte [ebp - 4], 0x6a
call fcn.00401718
push edi
lea ecx, [ebp - 0x914c]
mov byte [ebp - 4], 0x6b
call fcn.00401718
push edi
lea ecx, [ebp - 0x9144]
mov byte [ebp - 4], 0x6c
call fcn.00401718
push edi
lea ecx, [ebp - 0x913c]
mov byte [ebp - 4], 0x6d
call fcn.00401718
push edi
lea ecx, [ebp - 0x9134]
mov byte [ebp - 4], 0x6e
call fcn.00401718
push edi
lea ecx, [ebp - 0x912c]
mov byte [ebp - 4], 0x6f
call fcn.00401718
push edi
lea ecx, [ebp - 0x9124]
mov byte [ebp - 4], 0x70
call fcn.00401718
push edi
lea ecx, [ebp - 0x911c]
mov byte [ebp - 4], 0x71
call fcn.00401718
push edi
lea ecx, [ebp - 0x9114]
mov byte [ebp - 4], 0x72
call fcn.00401718
push edi
lea ecx, [ebp - 0x910c]
mov byte [ebp - 4], 0x73
call fcn.00401718
push edi
lea ecx, [ebp - 0x9104]
mov byte [ebp - 4], 0x74
call fcn.00401718
mov byte [ebp - 4], 0x75
push edi
lea ecx, [ebp - 0x90fc]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90f4]
mov byte [ebp - 4], 0x76
call fcn.00401718
push edi
lea ecx, [ebp - 0x90ec]
mov byte [ebp - 4], 0x77
call fcn.00401718
mov byte [ebp - 4], 0x78
call fcn.00406dc5
mov dword [ebp - 0x9048], 0xb2
test al, al
jne 0x45e7be
mov ecx, dword [0x541ad4]
mov eax, ecx
cdq
idiv dword [ebp - 0x9048]
mov eax, 0xb2
xor esi, esi
cmp edx, eax
je 0x45e7b8
mov edi, eax
mov eax, ecx
or eax, 0xffffff49
add ecx, eax
mov eax, ecx
imul eax, ecx
inc esi
cmp esi, eax
jg 0x45e7b3
mov eax, ecx
cdq
idiv edi
cmp edx, edi
jne 0x45e797
mov edi, 0x5401f0
mov dword [0x541ad4], esi
push edi
lea ecx, [ebp - 0x90e4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90dc]
mov byte [ebp - 4], 0x79
call fcn.00401718
push edi
lea ecx, [ebp - 0x90d4]
mov byte [ebp - 4], 0x7a
call fcn.00401718
push edi
lea ecx, [ebp - 0x90cc]
mov byte [ebp - 4], 0x7b
call fcn.00401718
push edi
lea ecx, [ebp - 0x90c4]
mov byte [ebp - 4], 0x7c
call fcn.00401718
mov ecx, dword [0x541ad4]
mov byte [ebp - 4], 0x7d
lea edx, [ecx + 2]
lea eax, [ecx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x8000000f
jns 0x45e82d
dec edx
or edx, 0xfffffff0
inc edx
push 0xd
pop eax
cmp edx, eax
jne 0x45e897
push 0x50
xor esi, esi
pop edi
call fcn.004c2f1b
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x8694], xmm0
cmp esi, edi
jb 0x45e839
xor ecx, ecx
mov edi, 0x5401f0
push 0x4f
pop eax
cmp ecx, eax
jge 0x45e891
movsd xmm0, qword [ebp + eax*8 - 0x868c]
movsd xmm1, qword [ebp + eax*8 - 0x8694]
comisd xmm0, xmm1
jbe 0x45e88c
movsd qword [ebp + eax*8 - 0x868c], xmm1
movsd qword [ebp + eax*8 - 0x8694], xmm0
dec eax
cmp eax, ecx
jg 0x45e862
inc ecx
cmp ecx, 0x50
jl 0x45e85b
push edi
lea ecx, [ebp - 0x90bc]
call fcn.00401718
mov byte [ebp - 4], 0x7e
call fcn.00467b8f
test al, al
jne 0x45e901
xor eax, eax
mov dword [ebp - 0x903c], eax
lea esi, [ebp - 0x86a0]
xor edi, edi
mov eax, dword [0x541ad4]
xor ebx, ebx
cdq
inc edi
idiv edi
mov dword [ebp - 0x9048], edx
lea ecx, [ebx + 1]
mov ebx, ecx
cmp ebx, 5
jl 0x45e8d1
push 0xc
pop eax
add esi, 5
cmp edi, eax
jl 0x45e8c0
mov eax, dword [ebp - 0x903c]
push 0xb
inc eax
pop ecx
mov dword [ebp - 0x903c], eax
cmp eax, ecx
jl 0x45e8be
push 0x43
pop ebx
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x90b4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90ac]
mov byte [ebp - 4], 0x7f
call fcn.00401718
push edi
lea ecx, [ebp - 0x90a4]
mov byte [ebp - 4], 0x80
call fcn.00401718
push edi
lea ecx, [ebp - 0x909c]
mov byte [ebp - 4], 0x81
call fcn.00401718
push edi
lea ecx, [ebp - 0x9094]
mov byte [ebp - 4], 0x82
call fcn.00401718
push edi
lea ecx, [ebp - 0x908c]
mov byte [ebp - 4], 0x83
call fcn.00401718
mov ecx, dword [0x541ad4]
push 0xb
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop esi
idiv esi
mov byte [ebp - 4], 0x84
cmp edx, 5
jne 0x45e99f
mov eax, ecx
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x7b]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x9084]
call fcn.00401718
push edi
lea ecx, [ebp - 0x907c]
mov byte [ebp - 4], 0x85
call fcn.00401718
push edi
lea ecx, [ebp - 0x9074]
mov byte [ebp - 4], 0x86
call fcn.00401718
mov ecx, dword [0x541ad4]
push 6
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
push 3
pop eax
mov byte [ebp - 4], 0x87
cmp edx, eax
jne 0x45e9f5
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push edi
lea ecx, [ebp - 0x906c]
call fcn.00401718
mov esi, dword [0x541ad4]
mov eax, esi
imul eax, esi
push 0xd
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0x88
cmp edx, 5
jne 0x45ea49
xor edx, edx
push 8
mov ecx, edx
pop edi
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor ecx, eax
dec edi
jne 0x45ea22
add esi, ecx
inc edx
cmp edx, 0x100
jl 0x45ea1d
mov dword [0x541ad4], esi
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9064]
call fcn.00401718
mov byte [ebp - 4], 0x89
call fcn.00467b71
test al, al
jne 0x45ea70
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push edi
lea ecx, [ebp - 0x905c]
call fcn.00401718
mov esi, dword [0x541ad4]
push 0x16
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
push 0x15
pop eax
mov byte [ebp - 4], 0x8a
cmp edx, eax
jne 0x45eaf8
test esi, esi
je 0x45eaf8
push 3
pop edi
mov ecx, esi
and ecx, 0x80000001
jns 0x45eab5
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x45eac2
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x45eac9
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x541ad4], esi
sub edx, 0
je 0x45eae2
dec edx
dec edx
je 0x45eae5
dec edx
je 0x45eae6
jmp 0x45eaef
add esi, 2
inc esi
add esi, 2
mov dword [0x541ad4], esi
test esi, esi
jne 0x45eaa6
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9054]
call fcn.00401718
push edi
lea ecx, [ebp - 0x93c0]
mov byte [ebp - 4], 0x8b
call fcn.00401718
push edi
lea ecx, [ebp - 0x9298]
mov byte [ebp - 4], 0x8c
call fcn.00401718
push edi
lea ecx, [ebp - 0x9450]
mov byte [ebp - 4], 0x8d
call fcn.00401718
push edi
lea ecx, [ebp - 0x9290]
mov byte [ebp - 4], 0x8e
call fcn.00401718
mov byte [ebp - 4], 0x8f
call fcn.00467bdf
test al, al
jne 0x45eb68
xor esi, esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push edi
lea ecx, [ebp - 0x93b8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9288]
mov byte [ebp - 4], 0x90
call fcn.00401718
push edi
lea ecx, [ebp - 0x9498]
mov byte [ebp - 4], 0x91
call fcn.00401718
push edi
lea ecx, [ebp - 0x9050]
mov byte [ebp - 4], 0x92
call fcn.00401718
push edi
lea ecx, [ebp - 0x93b0]
mov byte [ebp - 4], 0x93
call fcn.00401718
push edi
lea ecx, [ebp - 0x9278]
mov byte [ebp - 4], 0x94
call fcn.00401718
push edi
lea ecx, [ebp - 0x9448]
mov byte [ebp - 4], 0x95
call fcn.00401718
push edi
lea ecx, [ebp - 0x9270]
mov byte [ebp - 4], 0x96
call fcn.00401718
push edi
lea ecx, [ebp - 0x93a8]
mov byte [ebp - 4], 0x97
call fcn.00401718
push edi
lea ecx, [ebp - 0x9268]
mov byte [ebp - 4], 0x98
call fcn.00401718
push edi
lea ecx, [ebp - 0x94d0]
mov byte [ebp - 4], 0x99
call fcn.00401718
push edi
lea ecx, [ebp - 0x9260]
mov byte [ebp - 4], 0x9a
call fcn.00401718
push edi
lea ecx, [ebp - 0x93a0]
mov byte [ebp - 4], 0x9b
call fcn.00401718
push edi
lea ecx, [ebp - 0x9258]
mov byte [ebp - 4], 0x9c
call fcn.00401718
push edi
lea ecx, [ebp - 0x9440]
mov byte [ebp - 4], 0x9d
call fcn.00401718
mov byte [ebp - 4], 0x9e
call fcn.00467b05
test al, al
jne 0x45ec81
mov eax, 0xec
lea esi, [eax - 0x2c]
test esi, esi
je 0x45ec7a
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x45ec69
add eax, esi
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x9250]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9398]
mov byte [ebp - 4], 0x9f
call fcn.00401718
push edi
lea ecx, [ebp - 0x9248]
mov byte [ebp - 4], 0xa0
call fcn.00401718
push edi
lea ecx, [ebp - 0x9490]
mov byte [ebp - 4], 0xa1
call fcn.00401718
push edi
lea ecx, [ebp - 0x9240]
mov byte [ebp - 4], 0xa2
call fcn.00401718
push edi
lea ecx, [ebp - 0x9390]
mov byte [ebp - 4], 0xa3
call fcn.00401718
push edi
lea ecx, [ebp - 0x9238]
mov byte [ebp - 4], 0xa4
call fcn.00401718
mov esi, dword [0x541ad4]
push 0x16
lea eax, [esi + 1]
imul eax, esi
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0xa5
cmp edx, 7
jne 0x45ed23
xor eax, eax
inc eax
mov ecx, eax
cmp esi, eax
jle 0x45ed1d
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x45ed11
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x9438]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9230]
mov byte [ebp - 4], 0xa6
call fcn.00401718
push edi
lea ecx, [ebp - 0x9388]
mov byte [ebp - 4], 0xa7
call fcn.00401718
push edi
lea ecx, [ebp - 0x9228]
mov byte [ebp - 4], 0xa8
call fcn.00401718
push edi
lea ecx, [ebp - 0x94b8]
mov byte [ebp - 4], 0xa9
call fcn.00401718
mov byte [ebp - 4], 0xaa
call fcn.00467a37
test al, al
jne 0x45edcb
movd xmm4, dword [0x541ad4]
movsd xmm3, qword [0x4f6bd0]
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x45edb1
subsd xmm2, xmm3
divsd xmm3, qword [0x4f6bd8]
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x4f6bc8]
ja 0x45ed93
push edi
lea ecx, [ebp - 0x9220]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9380]
mov byte [ebp - 4], 0xab
call fcn.00401718
push edi
lea ecx, [ebp - 0x9218]
mov byte [ebp - 4], 0xac
call fcn.00401718
push edi
lea ecx, [ebp - 0x9430]
mov byte [ebp - 4], 0xad
call fcn.00401718
mov byte [ebp - 4], 0xae
call fcn.00406dc5
test al, al
jne 0x45ee1a
inc dword [0x541ad4]
push edi
lea ecx, [ebp - 0x9210]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9378]
mov byte [ebp - 4], 0xaf
call fcn.00401718
push edi
lea ecx, [ebp - 0x9208]
mov byte [ebp - 4], 0xb0
call fcn.00401718
mov esi, dword [0x541ad4]
push 0x15
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0xb1
cmp edx, 7
jne 0x45ee75
push 1
test esi, esi
pop eax
cmove esi, eax
mov dword [0x541ad4], esi
push edi
lea ecx, [ebp - 0x9488]
call fcn.00401718
mov eax, 0xb2
push edi
lea ecx, [ebp - 0x9200]
mov byte [ebp - 4], al
call fcn.00401718
push edi
lea ecx, [ebp - 0x9370]
mov byte [ebp - 4], 0xb3
call fcn.00401718
push edi
lea ecx, [ebp - 0x91f8]
mov byte [ebp - 4], 0xb4
call fcn.00401718
push edi
lea ecx, [ebp - 0x9428]
mov byte [ebp - 4], 0xb5
call fcn.00401718
push edi
lea ecx, [ebp - 0x91f0]
mov byte [ebp - 4], 0xb6
call fcn.00401718
push edi
lea ecx, [ebp - 0x9368]
mov byte [ebp - 4], 0xb7
call fcn.00401718
push edi
lea ecx, [ebp - 0x91e8]
mov byte [ebp - 4], 0xb8
call fcn.00401718
mov byte [ebp - 4], 0xb9
call fcn.0045997a
test al, al
jne 0x45ef18
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x50
xor edx, edx
pop esi
div esi
inc edx
mov dword [0x541ad4], edx
jmp 0x45ef1b
push 0x50
pop esi
push edi
lea ecx, [ebp - 0x94d8]
call fcn.00401718
mov byte [ebp - 4], 0xba
call fcn.00467b8f
test al, al
jne 0x45ef45
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
div esi
inc edx
mov dword [0x541ad4], edx
push edi
lea ecx, [ebp - 0x91e0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9360]
mov byte [ebp - 4], 0xbb
call fcn.00401718
push edi
lea ecx, [ebp - 0x91d8]
mov byte [ebp - 4], 0xbc
call fcn.00401718
mov eax, dword [0x541ad4]
mov byte [ebp - 4], 0xbd
lea ecx, [eax + 1]
imul ecx, eax
and ecx, reloc.OLEAUT32.dll_VariantInit
jns 0x45ef8d
dec ecx
or ecx, 0xfffffff8
inc ecx
cmp ecx, 3
jne 0x45efb7
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x7b]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x9420]
call fcn.00401718
push edi
lea ecx, [ebp - 0x91d0]
mov byte [ebp - 4], 0xbe
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0x18
cdq
pop esi
idiv esi
push 0x16
pop eax
mov byte [ebp - 4], 0xbf
cmp edx, eax
jne 0x45f00d
xor eax, eax
inc eax
mov esi, eax
cmp ecx, eax
jle 0x45f007
mov eax, ecx
cdq
idiv esi
inc esi
add esi, edx
cmp esi, ecx
jl 0x45effb
mov dword [0x541ad4], esi
push edi
lea ecx, [ebp - 0x9358]
call fcn.00401718
push edi
lea ecx, [ebp - 0x91c8]
mov byte [ebp - 4], 0xc0
call fcn.00401718
mov edi, dword [0x541ad4]
push 0x14
lea eax, [edi + 1]
imul eax, edi
cdq
pop ecx
idiv ecx
push 3
pop eax
mov byte [ebp - 4], 0xc1
cmp edx, eax
jne 0x45f057
xor esi, esi
mov ebx, edi
inc esi
dec ebx
cmp esi, 0xe2
jb 0x45f04a
push 0x43
pop ebx
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9480]
call fcn.00401718
push edi
lea ecx, [ebp - 0x91c0]
mov byte [ebp - 4], 0xc2
call fcn.00401718
push edi
lea ecx, [ebp - 0x9350]
mov byte [ebp - 4], 0xc3
call fcn.00401718
push edi
lea ecx, [ebp - 0x91b8]
mov byte [ebp - 4], 0xc4
call fcn.00401718
push edi
lea ecx, [ebp - 0x9418]
mov byte [ebp - 4], 0xc5
call fcn.00401718
push edi
lea ecx, [ebp - 0x91b0]
mov byte [ebp - 4], 0xc6
call fcn.00401718
push edi
lea ecx, [ebp - 0x9348]
mov byte [ebp - 4], 0xc7
call fcn.00401718
push edi
lea ecx, [ebp - 0x91a8]
mov byte [ebp - 4], 0xc8
call fcn.00401718
mov byte [ebp - 4], 0xc9
call fcn.00467b71
test al, al
jne 0x45f0ed
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
push edi
lea ecx, [ebp - 0x94b0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x91a0]
mov byte [ebp - 4], 0xca
call fcn.00401718
mov esi, dword [0x541ad4]
push 6
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
push 3
pop eax
mov byte [ebp - 4], 0xcb
cmp edx, eax
jne 0x45f133
dec esi
mov dword [0x541ad4], esi
push edi
lea ecx, [ebp - 0x9340]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9198]
mov byte [ebp - 4], 0xcc
call fcn.00401718
push edi
lea ecx, [ebp - 0x9410]
mov byte [ebp - 4], 0xcd
call fcn.00401718
push edi
lea ecx, [ebp - 0x9190]
mov byte [ebp - 4], 0xce
call fcn.00401718
push edi
lea ecx, [ebp - 0x9338]
mov byte [ebp - 4], 0xcf
call fcn.00401718
push edi
lea ecx, [ebp - 0x9188]
mov byte [ebp - 4], 0xd0
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0x12
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0xd1
cmp edx, 2
jne 0x45f21b
xor eax, eax
push 0x63c0
push eax
mov word [ebp - 0x756c], ax
lea eax, [ebp - 0x756a]
push eax
call fcn.004c3990
add esp, 0xc
xor edi, edi
xor esi, esi
xor edx, edx
test edi, edi
je 0x45f1f8
test edx, edx
je 0x45f1f8
lea eax, [edx + esi]
lea ecx, [edx + esi]
mov ax, word [ebp + eax*2 - 0x764e]
inc ax
add ax, word [ebp + ecx*2 - 0x756e]
mov word [ebp + ecx*2 - 0x756c], ax
inc edx
cmp edx, 0x71
jl 0x45f1d0
add esi, 0x71
inc edi
cmp esi, 0x31e1
jl 0x45f1ce
movsx eax, word [ebp - 0x11ac]
mov dword [0x541ad4], eax
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9478]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9180]
mov byte [ebp - 4], 0xd2
call fcn.00401718
push edi
lea ecx, [ebp - 0x9330]
mov byte [ebp - 4], 0xd3
call fcn.00401718
push edi
lea ecx, [ebp - 0x9178]
mov byte [ebp - 4], 0xd4
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
push 0xf
cdq
pop esi
idiv esi
mov byte [ebp - 4], 0xd5
cmp edx, 8
jne 0x45f298
mov eax, ecx
push 0x64
cdq
pop ecx
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x9408]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9170]
mov byte [ebp - 4], 0xd6
call fcn.00401718
push edi
lea ecx, [ebp - 0x9328]
mov byte [ebp - 4], 0xd7
call fcn.00401718
mov edx, dword [0x541ad4]
push 0x18
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
push 4
pop eax
xor esi, esi
mov byte [ebp - 4], 0xd8
cmp edx, eax
jne 0x45f2f5
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push edi
lea ecx, [ebp - 0x9168]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94c8]
mov byte [ebp - 4], 0xd9
call fcn.00401718
push edi
lea ecx, [ebp - 0x9160]
mov byte [ebp - 4], 0xda
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0x18
cdq
pop ecx
idiv ecx
push 0x16
pop eax
mov byte [ebp - 4], 0xdb
cmp edx, eax
jne 0x45f34a
call fcn.004c2f1b
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x9320]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9158]
mov byte [ebp - 4], 0xdc
call fcn.00401718
push edi
lea ecx, [ebp - 0x9400]
mov byte [ebp - 4], 0xdd
call fcn.00401718
push edi
lea ecx, [ebp - 0x9150]
mov byte [ebp - 4], 0xde
call fcn.00401718
push edi
lea ecx, [ebp - 0x9318]
mov byte [ebp - 4], 0xdf
call fcn.00401718
push edi
lea ecx, [ebp - 0x9148]
mov byte [ebp - 4], 0xe0
call fcn.00401718
push edi
lea ecx, [ebp - 0x9470]
mov byte [ebp - 4], 0xe1
call fcn.00401718
mov ecx, dword [0x541ad4]
push 6
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
xor eax, eax
inc eax
mov byte [ebp - 4], 0xe2
cmp edx, eax
jne 0x45f3d9
dec dword [0x543418]
push edi
lea ecx, [ebp - 0x9140]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9310]
mov byte [ebp - 4], 0xe3
call fcn.00401718
push edi
lea ecx, [ebp - 0x9138]
mov byte [ebp - 4], 0xe4
call fcn.00401718
push edi
lea ecx, [ebp - 0x93f8]
mov byte [ebp - 4], 0xe5
call fcn.00401718
push edi
lea ecx, [ebp - 0x9130]
mov byte [ebp - 4], 0xe6
call fcn.00401718
mov eax, dword [0x541ad4]
imul eax, eax
push 9
cdq
pop ecx
idiv ecx
push 6
pop eax
mov byte [ebp - 4], 0xe7
cmp edx, eax
jne 0x45f449
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push edi
lea ecx, [ebp - 0x9308]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9128]
mov byte [ebp - 4], 0xe8
call fcn.00401718
push edi
lea ecx, [ebp - 0x94a8]
mov byte [ebp - 4], 0xe9
call fcn.00401718
push edi
lea ecx, [ebp - 0x9120]
mov byte [ebp - 4], 0xea
call fcn.00401718
push edi
lea ecx, [ebp - 0x9300]
mov byte [ebp - 4], 0xeb
call fcn.00401718
push edi
lea ecx, [ebp - 0x9118]
mov byte [ebp - 4], 0xec
call fcn.00401718
push edi
lea ecx, [ebp - 0x93f0]
mov byte [ebp - 4], 0xed
call fcn.00401718
mov byte [ebp - 4], 0xee
call fcn.004679eb
test al, al
jne 0x45f4f8
mov esi, str.FYEB96apRsD
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1c]
push eax
movsd dword es:[edi], dword [esi]
call fcn.004c22f0
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
add esp, 0xc
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9110]
call fcn.00401718
push edi
lea ecx, [ebp - 0x92f8]
mov byte [ebp - 4], 0xef
call fcn.00401718
push edi
lea ecx, [ebp - 0x9108]
mov byte [ebp - 4], 0xf0
call fcn.00401718
push edi
lea ecx, [ebp - 0x9468]
mov byte [ebp - 4], 0xf1
call fcn.00401718
push edi
lea ecx, [ebp - 0x9100]
mov byte [ebp - 4], 0xf2
call fcn.00401718
push edi
lea ecx, [ebp - 0x92f0]
mov byte [ebp - 4], 0xf3
call fcn.00401718
mov byte [ebp - 4], 0xf4
call fcn.00467aab
test al, al
jne 0x45f59a
push 0x28
call fcn.004c0e30
pop ecx
push 0xa
mov edi, eax
xor esi, esi
pop ebx
call fcn.004c2f1b
add eax, dword [0x541ad4]
mov dword [edi + esi*4], eax
inc esi
cmp esi, ebx
jl 0x45f570
mov eax, dword [edi + 0x24]
push edi
mov dword [0x541ad4], eax
call fcn.004c1c8e
pop ecx
push 0x43
pop ebx
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x90f8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x93e8]
mov byte [ebp - 4], 0xf5
call fcn.00401718
push edi
lea ecx, [ebp - 0x90f0]
mov byte [ebp - 4], 0xf6
call fcn.00401718
mov eax, dword [0x541ad4]
imul eax, eax
mov byte [ebp - 4], 0xf7
and eax, 0x8000000f
jns 0x45f5de
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 7
jne 0x45f5e9
inc dword [0x543404]
push edi
lea ecx, [ebp - 0x92e8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90e8]
mov byte [ebp - 4], 0xf8
call fcn.00401718
push edi
lea ecx, [ebp - 0x94e0]
mov byte [ebp - 4], 0xf9
call fcn.00401718
push edi
lea ecx, [ebp - 0x90e0]
mov byte [ebp - 4], 0xfa
call fcn.00401718
push edi
lea ecx, [ebp - 0x92e0]
mov byte [ebp - 4], 0xfb
call fcn.00401718
mov edx, dword [0x541ad4]
push 0x18
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
push 9
pop eax
xor esi, esi
mov byte [ebp - 4], 0xfc
cmp edx, eax
jne 0x45f666
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push edi
lea ecx, [ebp - 0x90d8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x93e0]
mov byte [ebp - 4], 0xfd
call fcn.00401718
push edi
lea ecx, [ebp - 0x90d0]
mov byte [ebp - 4], 0xfe
call fcn.00401718
mov ecx, dword [0x541ad4]
push 0x12
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0xff
cmp edx, 0x11
jne 0x45f6b8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x92d8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90c8]
mov dword [ebp - 4], 0x100
call fcn.00401718
xor eax, eax
inc eax
push edi
lea ecx, [ebp - 0x9460]
mov byte [ebp - 4], al
call fcn.00401718
push edi
lea ecx, [ebp - 0x90c0]
mov byte [ebp - 4], 2
call fcn.00401718
push 3
pop eax
mov byte [ebp - 4], al
call fcn.00467b05
test al, al
jne 0x45f725
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x541ad4]
test eax, eax
push 7
pop eax
cmove ecx, eax
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x92d0]
call fcn.00401718
push 4
pop eax
push edi
lea ecx, [ebp - 0x90b8]
mov byte [ebp - 4], al
call fcn.00401718
mov esi, dword [0x541ad4]
push 0x12
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
push 0xd
pop eax
mov byte [ebp - 4], 5
cmp edx, eax
jne 0x45f790
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x2f4]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004c0e30
push eax
call fcn.004c1c8e
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x93d8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90b0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x92c8]
call fcn.00401718
call fcn.00467b49
test al, al
jne 0x45f7c3
inc dword [0x541ad4]
push edi
lea ecx, [ebp - 0x90a8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94a0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x90a0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x92c0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9098]
call fcn.00401718
push edi
lea ecx, [ebp - 0x93d0]
call fcn.00401718
call fcn.00467cae
xor esi, esi
test al, al
jne 0x45f840
mov ecx, dword [0x541ad4]
mov eax, ecx
sub eax, esi
je 0x45f836
dec eax
je 0x45f82e
inc ecx
mov dword [0x541ad4], ecx
jmp 0x45f840
mov dword [0x541ad4], esi
jmp 0x45f840
mov dword [0x541ad4], 2
push edi
lea ecx, [ebp - 0x9090]
call fcn.00401718
call fcn.00467b05
test al, al
jne 0x45f860
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push edi
lea ecx, [ebp - 0x92b8]
call fcn.00401718
mov esi, dword [0x541ad4]
push 0x18
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
cmp edx, 2
jne 0x45f8f5
mov eax, esi
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x9038]
xor ecx, ecx
sar edi, 1
test edi, edi
jle 0x45f8eb
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
xor esi, esi
mov edx, edi
mov dword [ebp - 0x9040], edi
test eax, eax
jle 0x45f8d4
mov edx, esi
mov dword [ebp - 0x903c], eax
add dword [ebp - 0x9038], edx
dec edx
dec dword [ebp - 0x903c]
jne 0x45f8bf
mov edx, dword [ebp - 0x9040]
add esi, ecx
dec edx
mov dword [ebp - 0x9040], edx
jne 0x45f8b3
mov esi, dword [0x541ad4]
mov eax, dword [ebp - 0x9038]
inc ecx
cmp ecx, eax
jl 0x45f89a
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9088]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9458]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9080]
call fcn.00401718
push edi
lea ecx, [ebp - 0x92b0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9078]
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
push 0x18
cdq
pop esi
idiv esi
push 0x12
pop eax
cmp edx, eax
jne 0x45f950
inc ecx
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x93c8]
call fcn.00401718
call fcn.00467b2b
test al, al
jne 0x45f9c4
mov esi, dword [0x541ad4]
test esi, esi
je 0x45f9c4
push 3
pop edi
mov ecx, esi
and ecx, 0x80000001
jns 0x45f981
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x45f98e
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x45f995
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x541ad4], esi
sub edx, 0
je 0x45f9ae
dec edx
dec edx
je 0x45f9b1
dec edx
je 0x45f9b2
jmp 0x45f9bb
add esi, 2
inc esi
add esi, 2
mov dword [0x541ad4], esi
test esi, esi
jne 0x45f972
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x9070]
call fcn.00401718
call fcn.00467bb7
test al, al
jne 0x45f9f1
xor eax, eax
inc eax
push 0x2c
mov edx, eax
pop esi
dec esi
lea ecx, [eax + edx]
lea edx, [eax]
mov eax, ecx
jns 0x45f9e1
mov dword [0x541ad4], ecx
push edi
lea ecx, [ebp - 0x92a8]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9068]
call fcn.00401718
call fcn.004679c9
test al, al
jne 0x45fa1c
call fcn.004c2f1b
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x94c0]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9060]
call fcn.00401718
push edi
lea ecx, [ebp - 0x92a0]
call fcn.00401718
mov ecx, dword [0x541ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 0xd
cdq
pop ecx
idiv ecx
push 3
pop eax
xor esi, esi
cmp edx, eax
jne 0x45fa68
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push edi
lea ecx, [ebp - 0x9058]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94e4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94dc]
call fcn.00401718
mov edx, dword [0x541ad4]
push 0xa
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
cmp edx, 8
jne 0x45fac6
mov eax, 0xa0
test ebx, ebx
je 0x45fabf
cdq
idiv ebx
mov ecx, ebx
mov eax, ecx
mov ebx, edx
test ecx, ecx
jne 0x45faae
add eax, ebx
mov dword [0x541ad4], eax
push edi
lea ecx, [ebp - 0x94d4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94cc]
call fcn.00401718
call fcn.0045997a
test al, al
jne 0x45fb54
xor eax, eax
push 0x7260
mov word [ebp - 0x840c], ax
lea eax, [ebp - 0x840a]
push esi
push eax
call fcn.004c3990
add esp, 0xc
mov edi, esi
xor edx, edx
test edi, edi
je 0x45fb31
test edx, edx
je 0x45fb31
lea eax, [esi + edx]
lea ecx, [esi + edx]
mov ax, word [ebp + eax*2 - 0x84fe]
inc ax
add ax, word [ebp + ecx*2 - 0x840e]
mov word [ebp + ecx*2 - 0x840c], ax
inc edx
cmp edx, 0x79
jl 0x45fb09
add esi, 0x79
inc edi
cmp esi, 0x3931
jl 0x45fb07
movsx eax, word [ebp - 0x11ac]
mov dword [0x541ad4], eax
mov edi, 0x5401f0
push edi
lea ecx, [ebp - 0x94c4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94bc]
call fcn.00401718
push edi
lea ecx, [ebp - 0x94b4]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9280]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9044]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9038]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9040]
call fcn.00401718
push edi
lea ecx, [ebp - 0x903c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x904c]
call fcn.00401718
push edi
lea ecx, [ebp - 0x9048]
call fcn.00401718
mov ecx, dword [0x541ad4]
push 0x14
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
cmp edx, 8
jne 0x45fc03
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x541ad4]
test eax, eax
push 7
pop eax
cmove ecx, eax
mov dword [0x541ad4], ecx
mov ecx, dword [ebp - 0x9048]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x904c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x903c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9040]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9038]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9044]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9280]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94b4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94bc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94c4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94cc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94d4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94dc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94e4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9058]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92a0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9060]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94c0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9068]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92a8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9070]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93c8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9078]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92b0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9080]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9458]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9088]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92b8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9090]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93d0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9098]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92c0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90a0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94a0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90a8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92c8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90b0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93d8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90b8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92d0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90c0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9460]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90c8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92d8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90d0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93e0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90d8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92e0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90e0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94e0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90e8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92e8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90f0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93e8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90f8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92f0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9100]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9468]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9108]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92f8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9110]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93f0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9118]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9300]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9120]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94a8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9128]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9308]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9130]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93f8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9138]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9310]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9140]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9470]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9148]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9318]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9150]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9400]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9158]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9320]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9160]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94c8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9168]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9328]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9170]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9408]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9178]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9330]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9180]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9478]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9188]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9338]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9190]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9410]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9198]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9340]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91a0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94b0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91a8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9348]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91b0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9418]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91b8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9350]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91c0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9480]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91c8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9358]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91d0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9420]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91d8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9360]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91e0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94d8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91e8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9368]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91f0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9428]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91f8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9370]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9200]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9488]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9208]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9378]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9210]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9430]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9218]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9380]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9220]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94b8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9228]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9388]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9230]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9438]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9238]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9390]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9240]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9490]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9248]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9398]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9250]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9440]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9258]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93a0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9260]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94d0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9268]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93a8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9270]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9448]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9278]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93b0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9050]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9498]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9288]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93b8]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9290]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9450]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9298]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93c0]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9054]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x905c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9064]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x906c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9074]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x907c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9084]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x908c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9094]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x909c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90a4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90ac]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90b4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90bc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90c4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90cc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90d4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90dc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90e4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90ec]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90f4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x90fc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9104]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x910c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9114]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x911c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9124]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x912c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9134]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x913c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9144]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x914c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9154]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x915c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9164]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x916c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9174]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x917c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9184]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x918c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9194]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x919c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91a4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91ac]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91b4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91bc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91c4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91cc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91d4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91dc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91e4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91ec]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91f4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x91fc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9204]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x920c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9214]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x921c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9224]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x922c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9234]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x923c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9244]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x924c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9254]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x925c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9264]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x926c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9274]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x927c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9284]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x928c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9294]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x929c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92a4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92ac]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92b4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92bc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92c4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92cc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92d4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92dc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92e4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92ec]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92f4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x92fc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9304]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x930c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9314]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x931c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9324]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x932c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9334]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x933c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9344]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x934c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9354]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x935c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9364]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x936c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9374]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x937c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9384]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x938c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9394]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x939c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93a4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93ac]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93b4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93bc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93c4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93cc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93d4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93dc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93e4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93ec]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93f4]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x93fc]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9404]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x940c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9414]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x941c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9424]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x942c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9434]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x943c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9444]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x944c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9454]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x945c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9464]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x946c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9474]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x947c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9484]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x948c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x9494]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x949c]
lea ecx, [ecx - 0x10]
call fcn.00404fef
mov ecx, dword [ebp - 0x94a4]
add ecx, 0xfffffff0
call fcn.00404fef
mov ecx, dword [ebp - 0x94ac]
add ecx, 0xfffffff0
call fcn.00404fef
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c29c4
leave
ret