Function at 0x421ed0
Capabilities:
Contain obfuscated stackstrings
Get cpu information
Get hostname
Get mac address on windows
Get memory capacity
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4511ee
mov eax, dword fs:[0]
push eax
sub esp, 0x848
mov eax, dword [0x46900c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x520]
push ecx
lea edx, [ebp - 0x3a0]
push edx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x524]
push ecx
lea edx, [ebp - 0x388]
push edx
call fcn.0041aa10
add esp, 8
mov byte [ebp - 4], 1
push 0x460c96
lea ecx, [ebp - 0x370]
call fcn.00406a50
mov byte [ebp - 4], 2
push 0x4641d8
lea ecx, [ebp - 0x358]
call fcn.00406a50
mov byte [ebp - 4], 3
push 0x4641dc
lea ecx, [ebp - 0x340]
call fcn.00406a50
mov byte [ebp - 4], 4
push 0x4641e0
lea ecx, [ebp - 0x328]
call fcn.00406a50
mov byte [ebp - 4], 5
push 0x4641e4
lea ecx, [ebp - 0x310]
call fcn.00406a50
mov byte [ebp - 4], 6
push 0x4641e8
lea ecx, [ebp - 0x2f8]
call fcn.00406a50
mov byte [ebp - 4], 7
push 0x4641ec
lea ecx, [ebp - 0x2e0]
call fcn.00406a50
mov byte [ebp - 4], 8
push 0x4641f0
lea ecx, [ebp - 0x2c8]
call fcn.00406a50
mov byte [ebp - 4], 9
push 0x104
push 0
lea eax, [ebp - 0x120]
push eax
call fcn.0042c590
add esp, 0xc
mov dword [ebp - 0x2a8], 0x104
mov dword [ebp - 0x2ac], 1
mov ecx, 0xb
mov esi, 0x4641f4
lea edi, [ebp - 0x2a4]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xd7
push 0
lea ecx, [ebp - 0x277]
push ecx
call fcn.0042c590
add esp, 0xc
lea edx, [ebp - 0x3e4]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x2a4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jne 0x4221fc
lea ecx, [ebp - 0x2a8]
push ecx
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x2ac]
push eax
push 0
push 0x464224
mov ecx, dword [ebp - 0x3e4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jne 0x4220aa
lea edx, [ebp - 0x120]
push edx
lea ecx, [ebp - 0x370]
call fcn.00424530
mov dword [ebp - 0x2a8], 0x104
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x2ac]
push edx
push 0
push str.CurrentBuild
mov eax, dword [ebp - 0x3e4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jne 0x4221f2
push 0x464244
lea ecx, [ebp - 0x3a0]
push ecx
lea edx, [ebp - 0x83c]
push edx
call fcn.00426860
add esp, 0xc
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4f0], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0x4f0]
push edx
lea eax, [ebp - 0x824]
push eax
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], ecx
mov byte [ebp - 4], 0xb
push 0x464240
mov edx, dword [ebp - 0x4f8]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4fc], eax
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0x500], ecx
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x120]
push edx
mov eax, dword [ebp - 0x500]
push eax
lea ecx, [ebp - 0x554]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x504], eax
mov edx, dword [ebp - 0x504]
push edx
lea ecx, [ebp - 0x358]
call fcn.00419fe0
lea ecx, [ebp - 0x554]
call fcn.00406980
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x80c]
call fcn.00406980
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x824]
call fcn.00406980
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x83c]
call fcn.00406980
mov dword [ebp - 0x2a8], 0x104
cmp dword [ebp - 0x3e4], 0
je 0x42221c
mov eax, dword [ebp - 0x3e4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x3e4], 0
lea ecx, [ebp - 0x2a8]
push ecx
lea edx, [ebp - 0x120]
push edx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x340]
call fcn.00424530
mov dword [ebp - 0x2a8], 0x104
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push 0x104
lea ecx, [ebp - 0x2a4]
push ecx
call fcn.0041a590
lea edx, [ebp - 0x3e4]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x2a4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jne 0x42235c
mov dword [ebp - 0x2ac], 4
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2a8], 4
lea ecx, [ebp - 0x2a8]
push ecx
lea edx, [ebp - 0x2b0]
push edx
lea eax, [ebp - 0x2ac]
push eax
push 0
push str.MHz
mov ecx, dword [ebp - 0x3e4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x2a8], 0x104
cmp dword [ebp - 0x3f0], 0
jne 0x42233c
cvtsi2ss xmm0, dword [ebp - 0x2b0]
divss xmm0, dword [0x464748]
cvtss2sd xmm0, xmm0
sub esp, 8
movsd qword [esp], xmm0
push str._.1f_GHz
push 0x104
lea edx, [ebp - 0x120]
push edx
call fcn.00412990
add esp, 0x14
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x310]
call fcn.00424530
cmp dword [ebp - 0x3e4], 0
je 0x42235c
mov ecx, dword [ebp - 0x3e4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x3e4], 0
push str.HARDWAREDESCRIPTIONSystemBIOS
push 0x104
lea edx, [ebp - 0x2a4]
push edx
call fcn.0041a590
lea eax, [ebp - 0x3e4]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x2a4]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jne 0x42241f
mov dword [ebp - 0x2ac], 1
lea edx, [ebp - 0x2a8]
push edx
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x2ac]
push ecx
push 0
push str.BIOSSerialNumber
mov edx, dword [ebp - 0x3e4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0
jne 0x4223f5
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00424530
mov dword [ebp - 0x2a8], 0x104
cmp dword [ebp - 0x3e4], 0
je 0x42241f
mov ecx, dword [ebp - 0x3e4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3e0], 0x40
lea edx, [ebp - 0x3e0]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov edx, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x3d8]
call fcn.0044fb30
divsd xmm0, qword [0x464740]
sub esp, 8
movsd qword [esp], xmm0
push str._.1fG
push 0x104
lea eax, [ebp - 0x120]
push eax
call fcn.00412990
add esp, 0x14
lea ecx, [ebp - 0x120]
push ecx
lea ecx, [ebp - 0x2f8]
call fcn.00424530
push 0x288
call fcn.00429208
add esp, 4
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x4224c2
push 0x288
push 0
mov edx, dword [ebp - 0x3f8]
push edx
call fcn.0042c590
add esp, 0xc
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], eax
jmp 0x4224cc
mov dword [ebp - 0x3fc], 0
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3e8], 0x288
lea edx, [ebp - 0x3e8]
push edx
mov eax, dword [ebp - 0x3ec]
push eax
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0x6f
jne 0x42258f
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x400], ecx
push 0x288
mov edx, dword [ebp - 0x400]
push edx
call fcn.00429238
add esp, 8
cmp dword [ebp - 0x400], 0
jne 0x42253e
mov dword [ebp - 0x508], 0
jmp 0x422554
mov dword [ebp - 0x3ec], 0x8123
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x3e8]
push ecx
call fcn.00429464
add esp, 4
mov dword [ebp - 0x50c], eax
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0x3ec], edx
lea eax, [ebp - 0x3e8]
push eax
mov ecx, dword [ebp - 0x3ec]
push ecx
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov dword [ebp - 0x404], eax
push 0x80
push 0
lea edx, [ebp - 0x1a0]
push edx
call fcn.0042c590
add esp, 0xc
mov dword [ebp - 0x3f4], 0
jmp 0x4225c0
mov eax, dword [ebp - 0x3f4]
add eax, 1
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3ec]
mov edx, dword [ebp - 0x3f4]
cmp edx, dword [ecx + 0x190]
jae 0x422626
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov word [ebp - 0x14], ax
mov ecx, dword [ebp - 0x3ec]
add ecx, dword [ebp - 0x3f4]
movzx edx, byte [ecx + 0x194]
push edx
push str._02x_
push 4
lea eax, [ebp - 0x1c]
push eax
call fcn.0041a4c0
add esp, 0x10
lea ecx, [ebp - 0x1c]
push ecx
push 4
imul edx, dword [ebp - 0x3f4], 3
lea eax, [ebp + edx - 0x1a0]
push eax
call fcn.004308bb
add esp, 0xc
jmp 0x4225b1
mov ecx, 1
imul edx, ecx, 0x11
mov dword [ebp - 0x408], edx
cmp dword [ebp - 0x408], 0x80
jae 0x422642
jmp 0x422647
call fcn.0042938a
mov eax, dword [ebp - 0x408]
mov byte [ebp + eax - 0x1a0], 0
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x328]
call fcn.00424530
mov edx, dword [ebp - 0x3ec]
add edx, 8
push edx
lea ecx, [ebp - 0x2e0]
call fcn.00424530
cmp dword [ebp - 0x3ec], 0
je 0x4226da
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x40c], eax
push 0x288
mov ecx, dword [ebp - 0x40c]
push ecx
call fcn.00429238
add esp, 8
cmp dword [ebp - 0x40c], 0
jne 0x4226ba
mov dword [ebp - 0x510], 0
jmp 0x4226d0
mov dword [ebp - 0x3ec], 0x8123
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x510], edx
mov dword [ebp - 0x3ec], 0
push str._major_:_
lea ecx, [ebp - 0x7f4]
call fcn.00406a50
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x518], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3a0]
push ecx
mov edx, dword [ebp - 0x518]
push edx
lea eax, [ebp - 0x7dc]
push eax
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x51c], eax
mov ecx, dword [ebp - 0x51c]
mov dword [ebp - 0x520], ecx
mov byte [ebp - 4], 0xe
push 0x464360
mov edx, dword [ebp - 0x520]
push edx
lea eax, [ebp - 0x7c4]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x410], ecx
mov byte [ebp - 4], 0xf
push str._minor_:_
mov edx, dword [ebp - 0x410]
push edx
lea eax, [ebp - 0x7ac]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x414], eax
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x418], ecx
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x418]
push eax
lea ecx, [ebp - 0x794]
push ecx
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x41c], eax
mov edx, dword [ebp - 0x41c]
mov dword [ebp - 0x420], edx
mov byte [ebp - 4], 0x11
push 0x464350
mov eax, dword [ebp - 0x420]
push eax
lea ecx, [ebp - 0x77c]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x424], eax
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x428], edx
mov byte [ebp - 4], 0x12
push str._osType_:_
mov eax, dword [ebp - 0x428]
push eax
lea ecx, [ebp - 0x764]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x42c], eax
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], edx
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x370]
push eax
mov ecx, dword [ebp - 0x430]
push ecx
lea edx, [ebp - 0x74c]
push edx
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0x14
push 0x464340
mov ecx, dword [ebp - 0x438]
push ecx
lea edx, [ebp - 0x734]
push edx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x440], eax
mov byte [ebp - 4], 0x15
push str._osVersion_:_
mov ecx, dword [ebp - 0x440]
push ecx
lea edx, [ebp - 0x71c]
push edx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x448], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x358]
push ecx
mov edx, dword [ebp - 0x448]
push edx
lea eax, [ebp - 0x704]
push eax
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x44c], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x450], ecx
mov byte [ebp - 4], 0x17
push 0x46432c
mov edx, dword [ebp - 0x450]
push edx
lea eax, [ebp - 0x6ec]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x454], eax
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x458], ecx
mov byte [ebp - 4], 0x18
push str._pcName_:_
mov edx, dword [ebp - 0x458]
push edx
lea eax, [ebp - 0x854]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x45c]
mov dword [ebp - 0x460], ecx
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x340]
push edx
mov eax, dword [ebp - 0x460]
push eax
lea ecx, [ebp - 0x6bc]
push ecx
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x464], eax
mov edx, dword [ebp - 0x464]
mov dword [ebp - 0x468], edx
mov byte [ebp - 4], 0x1a
push 0x46431c
mov eax, dword [ebp - 0x468]
push eax
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x46c], eax
mov edx, dword [ebp - 0x46c]
mov dword [ebp - 0x470], edx
mov byte [ebp - 4], 0x1b
push str._mac_:_
mov eax, dword [ebp - 0x470]
push eax
lea ecx, [ebp - 0x68c]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x474], eax
mov edx, dword [ebp - 0x474]
mov dword [ebp - 0x478], edx
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x328]
push eax
mov ecx, dword [ebp - 0x478]
push ecx
lea edx, [ebp - 0x674]
push edx
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x480], eax
mov byte [ebp - 4], 0x1d
push 0x464310
mov ecx, dword [ebp - 0x480]
push ecx
lea edx, [ebp - 0x65c]
push edx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x488], eax
mov byte [ebp - 4], 0x1e
push str._cpu_:_
mov ecx, dword [ebp - 0x488]
push ecx
lea edx, [ebp - 0x644]
push edx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x490], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x310]
push ecx
mov edx, dword [ebp - 0x490]
push edx
lea eax, [ebp - 0x62c]
push eax
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
mov dword [ebp - 0x498], ecx
mov byte [ebp - 4], 0x20
push 0x464304
mov edx, dword [ebp - 0x498]
push edx
lea eax, [ebp - 0x614]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], ecx
mov byte [ebp - 4], 0x21
push str._memory_:_
mov edx, dword [ebp - 0x4a0]
push edx
lea eax, [ebp - 0x5fc]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], ecx
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x2f8]
push edx
mov eax, dword [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x5e4]
push ecx
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x4ac], eax
mov edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x4b0], edx
mov byte [ebp - 4], 0x23
push 0x4642f4
mov eax, dword [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x5cc]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4b4], eax
mov edx, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b8], edx
mov byte [ebp - 4], 0x24
push str._pcCard_:_
mov eax, dword [ebp - 0x4b8]
push eax
lea ecx, [ebp - 0x5b4]
push ecx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4bc], eax
mov edx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c0], edx
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x2e0]
push eax
mov ecx, dword [ebp - 0x4c0]
push ecx
lea edx, [ebp - 0x59c]
push edx
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c8], eax
mov byte [ebp - 4], 0x26
push 0x4642e4
mov ecx, dword [ebp - 0x4c8]
push ecx
lea edx, [ebp - 0x584]
push edx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 4], 0x27
push str._bios_:_
mov ecx, dword [ebp - 0x4d0]
push ecx
lea edx, [ebp - 0x56c]
push edx
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x4d8], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2c8]
push ecx
mov edx, dword [ebp - 0x4d8]
push edx
lea eax, [ebp - 0x6d4]
push eax
call fcn.004269e0
add esp, 0xc
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4e0], ecx
mov byte [ebp - 4], 0x29
push 0x4642d4
mov edx, dword [ebp - 0x4e0]
push edx
lea eax, [ebp - 0x53c]
push eax
call fcn.00426820
add esp, 0xc
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00419fe0
lea ecx, [ebp - 0x53c]
call fcn.00406980
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x6d4]
call fcn.00406980
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x56c]
call fcn.00406980
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x584]
call fcn.00406980
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x59c]
call fcn.00406980
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x5b4]
call fcn.00406980
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x5cc]
call fcn.00406980
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5e4]
call fcn.00406980
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5fc]
call fcn.00406980
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x614]
call fcn.00406980
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x62c]
call fcn.00406980
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x644]
call fcn.00406980
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x65c]
call fcn.00406980
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x674]
call fcn.00406980
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x68c]
call fcn.00406980
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6a4]
call fcn.00406980
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6bc]
call fcn.00406980
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x854]
call fcn.00406980
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x6ec]
call fcn.00406980
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x704]
call fcn.00406980
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x71c]
call fcn.00406980
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x734]
call fcn.00406980
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x74c]
call fcn.00406980
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x764]
call fcn.00406980
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x77c]
call fcn.00406980
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x794]
call fcn.00406980
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x7ac]
call fcn.00406980
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x7c4]
call fcn.00406980
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x7dc]
call fcn.00406980
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x7f4]
call fcn.00406980
mov dword [ebp - 0x4e8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2c8]
call fcn.00406980
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2e0]
call fcn.00406980
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f8]
call fcn.00406980
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x310]
call fcn.00406980
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x328]
call fcn.00406980
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x340]
call fcn.00406980
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x358]
call fcn.00406980
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x370]
call fcn.00406980
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x388]
call fcn.00406980
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.00406980
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004291f2
mov esp, ebp
pop ebp
ret