Function at 0x47f860
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Get disk size
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5171f4
mov eax, dword fs:[0]
push eax
sub esp, 0xeac
mov eax, dword [0x577680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe98], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov dword [ebp - 4], 0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe90], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 1
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe88], eax
mov byte [ebp - 4], 2
call fcn.00493cf0
mov ebx, dword [sym.imp.KERNEL32.dll_OpenThread]
mov esi, 7
test al, al
jne 0x47f90c
push 0
push 0
push 0
call ebx
mov ecx, dword [0x578ad4]
test eax, eax
cmove ecx, esi
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe80], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 3
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe78], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe70], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 5
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe68], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 6
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe60], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 7
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe58], eax
mov eax, dword [0x578ad4]
imul eax, eax
cdq
mov edi, 0x14
idiv edi
mov byte [ebp - 4], 8
cmp edx, 3
jne 0x47f9d6
push 0
push 0
push 0
call ebx
mov ecx, dword [0x578ad4]
test eax, eax
cmove ecx, esi
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe50], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 9
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe48], eax
mov byte [ebp - 4], 0xa
call fcn.00493b40
test al, al
jne 0x47fa34
mov esi, dword [0x578ad4]
mov ecx, 1
cmp esi, ecx
jle 0x47fa2e
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x47fa22
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe40], eax
mov byte [ebp - 4], 0xb
call fcn.00493a60
test al, al
jne 0x47fa73
mov esi, 1
mov eax, esi
mov edx, 0x1d
dec edx
lea ecx, [eax + esi]
lea esi, [eax]
mov eax, ecx
jns 0x47fa63
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe38], eax
mov byte [ebp - 4], 0xc
call fcn.00493b60
test al, al
jne 0x47fabb
mov ebx, dword [0x578ad4]
xor esi, esi
mov edi, ebx
mov eax, edi
lea ecx, [ebx + esi]
cdq
idiv ecx
inc esi
dec edi
mov dword [ebp + esi*4 - 0x99c], edx
cmp esi, 0x33
jb 0x47faa0
mov edi, 0x14
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe30], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe28], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xe
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe20], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xf
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe18], eax
mov byte [ebp - 4], 0x10
call fcn.00493a60
test al, al
jne 0x47fb48
mov esi, 1
mov eax, esi
mov edx, 0x11
dec edx
lea ecx, [eax + esi]
lea esi, [eax]
mov eax, ecx
jns 0x47fb38
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe10], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x11
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe08], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x12
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe00], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x13
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdf8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x14
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdf0], eax
mov byte [ebp - 4], 0x15
call fcn.00493990
test al, al
jne 0x47fc38
xor esi, esi
call fcn.004f1791
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x464], xmm0
cmp esi, 0x82
jb 0x47fbd5
xor ecx, ecx
mov eax, 0x81
cmp ecx, eax
jge 0x47fc2f
nop
movsd xmm0, qword [ebp + eax*8 - 0x45c]
movsd xmm1, qword [ebp + eax*8 - 0x464]
comisd xmm0, xmm1
jbe 0x47fc2a
movsd qword [ebp + eax*8 - 0x45c], xmm1
movsd qword [ebp + eax*8 - 0x464], xmm0
dec eax
cmp eax, ecx
jg 0x47fc00
inc ecx
cmp ecx, 0x82
jl 0x47fbf6
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xde8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x16
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xde0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x17
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdd8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x18
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdd0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x19
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdc8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x1a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdc0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x1b
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdb8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x1c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdb0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x1d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xda8], eax
mov byte [ebp - 4], 0x1e
call fcn.00493960
mov esi, dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
test al, al
jne 0x47fd3d
push 0
push 0
push 0
push 0
push 0
call esi
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xda0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x1f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd98], eax
mov byte [ebp - 4], 0x20
call fcn.00493930
test al, al
jne 0x47fd9e
push 4
call fcn.004f04fa
mov esi, eax
call fcn.004f1791
mov dword [esi], eax
push esi
mov dword [0x578ad4], eax
call fcn.004f03fe
mov esi, dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd90], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x21
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd88], eax
mov edx, dword [0x578ad4]
mov byte [ebp - 4], 0x22
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x15
idiv ecx
cmp edx, 0xa
jne 0x47fdf9
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd80], eax
mov byte [ebp - 4], 0x23
call fcn.00493d80
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
test al, al
jne 0x47fe34
call ebx
xor edx, edx
mov ecx, 0x50
div ecx
inc edx
mov dword [0x578ad4], edx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd78], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x24
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd70], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x25
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd68], eax
mov ecx, dword [0x578ad4]
mov byte [ebp - 4], 0x26
lea edx, [ecx + 2]
lea eax, [ecx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x8000000f
jns 0x47fea1
dec edx
or edx, 0xfffffff0
inc edx
cmp edx, 5
jne 0x47feb2
push 0
push 0
push 0
push 0
push 0
call esi
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd60], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x27
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd58], eax
mov ecx, dword [0x578ad4]
mov byte [ebp - 4], 0x28
lea eax, [ecx + 1]
imul eax, ecx
cdq
mov ecx, 0x12
idiv ecx
lea esi, [ecx - 0xe]
cmp edx, 3
jne 0x47ff56
mov eax, dword [0x535c88]
movq xmm0, qword [str.sSSoxo7LJ2VcH]
mov dword [ebp - 0xa10], eax
mov ax, word [0x535c8c]
mov word [ebp - 0xa0c], ax
lea eax, [ebp - 0xa18]
movq qword [ebp - 0xa18], xmm0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47ff33
xor ecx, ecx
sub eax, edx
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd50], eax
mov byte [ebp - 4], 0x29
call fcn.00493cf0
test al, al
jne 0x47ff83
call fcn.004f1791
mov dword [0x578ad4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd48], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x2a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd40], eax
mov byte [ebp - 4], 0x2b
call fcn.00493d80
test al, al
jne 0x47ffc7
call ebx
mov dword [0x578ad4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd38], eax
mov byte [ebp - 4], 0x2c
call fcn.00493b60
test al, al
jne 0x47fff0
inc dword [0x57a044]
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd30], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x2d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd28], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x2e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd20], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x2f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd18], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x30
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd10], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x31
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd08], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x32
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd00], eax
mov byte [ebp - 4], 0x33
call fcn.00493ac0
test al, al
jne 0x480113
mov eax, dword [0x535c98]
movq xmm0, qword [str.O4xYne7hIAXXHC]
mov dword [ebp - 0xa10], eax
mov ax, word [0x535c9c]
mov word [ebp - 0xa0c], ax
mov al, byte [0x535c9e]
mov byte [ebp - 0xa0a], al
lea eax, [ebp - 0xa18]
movq qword [ebp - 0xa18], xmm0
lea edx, [eax + 1]
jmp 0x4800f0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4800f0
xor ecx, ecx
sub eax, edx
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcf8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x34
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcf0], eax
mov ecx, dword [0x578ad4]
mov byte [ebp - 4], 0x35
lea eax, [ecx + 1]
imul eax, ecx
cdq
idiv edi
mov eax, 1
cmp edx, 0x13
jne 0x48016b
test ecx, ecx
cmove ecx, eax
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xce8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x36
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xce0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x37
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcd8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x38
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcd0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x39
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcc8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x3a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcc0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x3b
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcb8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x3c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcb0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x3d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xca8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x3e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xca0], eax
mov byte [ebp - 4], 0x3f
call fcn.00493b40
test al, al
jne 0x480299
mov esi, dword [0x578ad4]
mov ecx, 1
cmp esi, ecx
jle 0x480293
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x480287
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc98], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x40
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc90], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x41
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc88], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x42
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc80], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x43
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc78], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x44
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc70], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x45
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc68], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x46
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc60], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x47
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc58], eax
mov byte [ebp - 4], 0x48
call fcn.00493cc0
test al, al
jne 0x4803c6
push 0x28
call fcn.004ef820
add esp, 4
mov edi, eax
xor esi, esi
lea ebx, [ebx]
call fcn.004f1791
add eax, dword [0x578ad4]
inc esi
mov dword [edi + esi*4 - 4], eax
cmp esi, 0xa
jl 0x4803a0
mov eax, dword [edi + 0x24]
push edi
mov dword [0x578ad4], eax
call fcn.004f0683
add esp, 4
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc50], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x49
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc48], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x4a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc40], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x4b
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc38], eax
mov eax, dword [0x578ad4]
imul eax, eax
cdq
mov ecx, 0x15
idiv ecx
mov byte [ebp - 4], 0x4c
cmp edx, 3
jne 0x480450
lea eax, [ebp - 0x978]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc30], eax
mov byte [ebp - 4], 0x4d
call fcn.00493b40
test al, al
jne 0x4804d8
mov edi, dword [0x578ad4]
mov eax, edi
cdq
sub eax, edx
xor ecx, ecx
mov ebx, eax
sar ebx, 1
mov esi, 0xc7
mov dword [ebp - 0xa00], ecx
mov dword [ebp - 0x9fc], ebx
test ebx, ebx
jle 0x4804cd
mov eax, edi
cdq
and edx, 3
lea edi, [edx + eax]
sar edi, 2
xor edx, edx
test edi, edi
jle 0x4804bc
mov eax, edx
mov ecx, edi
nop
add esi, eax
dec eax
dec ecx
jne 0x4804b0
mov ecx, dword [ebp - 0xa00]
add edx, ecx
dec ebx
jne 0x4804a7
mov ebx, dword [ebp - 0x9fc]
mov edi, dword [0x578ad4]
inc ecx
mov dword [ebp - 0xa00], ecx
cmp ecx, esi
jl 0x480495
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc28], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x4e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc20], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x4f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc18], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x50
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc10], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x51
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc08], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x52
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc00], eax
mov esi, dword [0x578ad4]
mov eax, esi
imul eax, esi
cdq
mov ecx, 0x14
idiv ecx
mov byte [ebp - 4], 0x53
cmp edx, 0x12
jne 0x4805aa
xor edi, edi
test esi, esi
je 0x4805a4
mov eax, esi
mov ecx, esi
cdq
sub eax, edx
and ecx, 1
mov esi, eax
add edi, ecx
sar esi, 1
jne 0x480592
mov dword [0x578ad4], edi
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbf8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x54
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbf0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x55
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbe8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x56
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbe0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x57
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbd8], eax
mov byte [ebp - 4], 0x58
call fcn.00493b40
test al, al
jne 0x480651
mov esi, 1
mov eax, esi
mov edx, 0x41
dec edx
lea ecx, [eax + esi]
lea esi, [eax]
mov eax, ecx
jns 0x480641
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbd0], eax
mov byte [ebp - 4], 0x59
call fcn.00493d80
test al, al
jne 0x480684
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbc8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x5a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbc0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x5b
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbb8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x5c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbb0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x5d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xba8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x5e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xba0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x5f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb98], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x60
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb90], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x61
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb88], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x62
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb80], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x63
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb78], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x64
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb70], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x65
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb68], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x66
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb60], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x67
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb58], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x68
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb50], eax
mov edx, dword [0x578ad4]
mov byte [ebp - 4], 0x69
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 6
idiv ecx
cmp edx, 5
jne 0x480853
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb48], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x6a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb40], eax
mov ebx, dword [0x578ad4]
mov ecx, 0x15
lea eax, [ebx + 1]
imul eax, ebx
cdq
idiv ecx
mov byte [ebp - 4], 0x6b
cmp edx, 7
jne 0x4808ce
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
xor ecx, ecx
add eax, edx
mov dword [ebp - 0xa08], ebx
mov dword [ebp - 0xa08], eax
lea esp, [esp]
mov dword [ebp + ecx*4 - 0x48], 0
inc ecx
cmp ecx, 0xe
jl 0x4808c0
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa08], eax
mov ebx, dword [0x578ad4]
mov ecx, 0x18
lea eax, [ebx + 1]
imul eax, ebx
cdq
idiv ecx
mov byte [ebp - 4], 0x6c
cmp edx, 0xd
jne 0x4809ac
xor edx, edx
mov dword [ebp - 0xa04], edx
lea ecx, [ebp - 0x63c]
jmp 0x480920
xor eax, eax
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0xa00], ecx
mov edi, edi
lea edi, [eax + 1]
lea ecx, [edx + 1]
mov eax, ebx
cdq
idiv ecx
mov eax, ebx
mov ecx, ebx
sub ecx, dword [ebp - 0xa04]
mov ebx, dword [ebp - 0xa00]
mov esi, edx
cdq
imul esi, ecx
idiv edi
add esi, eax
sub esi, dword [ebp - 0x9fc]
push esi
push 0x52a4e0
mov dword [ebx], esi
call fcn.004f20c4
mov edx, dword [ebp - 0xa04]
mov eax, edi
add ebx, 4
add esp, 8
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0xa00], ebx
cmp eax, 0x14
jge 0x48098f
mov ebx, dword [0x578ad4]
jmp 0x480930
inc edx
mov dword [ebp - 0xa04], edx
cmp edx, 0x13
jge 0x4809ac
mov ebx, dword [0x578ad4]
mov ecx, dword [ebp - 0xa00]
jmp 0x480920
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb30], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x6d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb28], eax
mov eax, dword [0x578ad4]
imul eax, eax
cdq
mov ecx, 0xa
idiv ecx
mov byte [ebp - 4], 0x6e
cmp edx, 2
jne 0x480a29
push 0x28
call fcn.004ef820
add esp, 4
mov edi, eax
xor esi, esi
call fcn.004f1791
add eax, dword [0x578ad4]
inc esi
mov dword [edi + esi*4 - 4], eax
cmp esi, 0xa
jl 0x480a03
mov eax, dword [edi + 0x24]
push edi
mov dword [0x578ad4], eax
call fcn.004f0683
add esp, 4
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb20], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x6f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb18], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x70
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb10], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x71
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb08], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x72
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb00], eax
mov esi, dword [0x578ad4]
mov ebx, 0x16
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
idiv ebx
mov eax, dword [0x5771f0]
mov byte [ebp - 4], 0x73
cmp edx, 5
cmove esi, ecx
mov ecx, 0x5771f0
mov dword [0x578ad4], esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xaf8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x74
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xaf0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x75
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xae8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x76
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xae0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x77
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xad8], eax
mov byte [ebp - 4], 0x78
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xad0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x79
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xac8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x7a
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xac0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x7b
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xab8], eax
mov ebx, dword [0x578ad4]
mov eax, ebx
imul eax, ebx
imul eax, ebx
cdq
mov edi, 0x13
idiv edi
mov byte [ebp - 4], 0x7c
cmp edx, 0xa
jne 0x480bec
xor esi, esi
mov edi, ebx
lea ebx, [ebx]
inc esi
dec edi
cmp esi, 0x4b
jb 0x480be0
mov edi, 0x13
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xab0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x7d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xaa8], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x7e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xaa0], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x7f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa98], eax
mov byte [ebp - 4], 0x80
call fcn.00493990
test al, al
jne 0x480c82
mov esi, dword [0x578ad4]
mov ecx, 1
cmp esi, ecx
jle 0x480c7c
lea esp, [esp]
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x480c70
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa90], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x81
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa88], eax
mov byte [ebp - 4], 0x82
call fcn.00493d20
test al, al
jne 0x480cd3
mov eax, dword [0x578ad4]
test eax, eax
mov ecx, 1
cmove eax, ecx
mov dword [0x578ad4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa80], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x83
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa78], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x84
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa70], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x85
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa68], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x86
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa60], eax
mov byte [ebp - 4], 0x87
call fcn.00493a90
test al, al
jne 0x480d9c
mov esi, dword [0x578ad4]
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x63]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa58], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x88
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa50], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x89
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa48], eax
mov eax, dword [0x578ad4]
imul eax, eax
cdq
idiv edi
mov byte [ebp - 4], 0x8a
cmp edx, 0xe
jne 0x480e1c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x578ad4]
test eax, eax
mov eax, 7
cmove ecx, eax
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa40], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x8b
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa38], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x8c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa30], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x8d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa28], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x8e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa20], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x8f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc6c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x90
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe24], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x91
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc64], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x92
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd8c], eax
mov byte [ebp - 4], 0x93
call fcn.00493d20
test al, al
jne 0x480f97
xor ecx, ecx
mov dword [ebp - 0xa04], ecx
lea esi, [ebp - 0x308]
xor eax, eax
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0xa00], esi
nop
mov esi, dword [0x578ad4]
lea ebx, [eax + 1]
mov eax, esi
cdq
inc ecx
idiv ecx
mov eax, esi
mov ecx, esi
sub ecx, dword [ebp - 0xa04]
mov esi, dword [ebp - 0xa00]
mov edi, edx
cdq
imul edi, ecx
idiv ebx
add edi, eax
sub edi, dword [ebp - 0x9fc]
push edi
push 0x52a4e0
mov dword [esi], edi
call fcn.004f20c4
mov ecx, dword [ebp - 0xa04]
mov eax, ebx
add esi, 4
add esp, 8
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0xa00], esi
cmp eax, 0x19
jl 0x480f30
inc ecx
mov dword [ebp - 0xa04], ecx
cmp ecx, 7
jl 0x480f21
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa1c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x94
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe6c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x95
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc54], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x96
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd84], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x97
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc4c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x98
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe1c], eax
mov edi, dword [0x578ad4]
mov byte [ebp - 4], 0x99
lea ecx, [edi + 1]
lea eax, [edi + 2]
imul eax, ecx
imul eax, edi
cdq
mov ecx, 0xa
idiv ecx
cmp edx, 2
jne 0x4810b8
mov eax, edi
cdq
sub eax, edx
xor ecx, ecx
mov ebx, eax
sar ebx, 1
mov esi, 0xfe
mov dword [ebp - 0x9fc], ecx
mov dword [ebp - 0xa00], ebx
mov edi, edi
test ebx, ebx
jle 0x4810ad
mov eax, edi
cdq
and edx, 3
lea edi, [edx + eax]
sar edi, 2
xor edx, edx
test edi, edi
jle 0x48109c
mov eax, edx
mov ecx, edi
lea ebx, [ebx]
add esi, eax
dec eax
dec ecx
jne 0x481090
mov ecx, dword [ebp - 0x9fc]
add edx, ecx
dec ebx
jne 0x481082
mov ebx, dword [ebp - 0xa00]
mov edi, dword [0x578ad4]
inc ecx
mov dword [ebp - 0x9fc], ecx
cmp ecx, esi
jl 0x481070
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc44], eax
mov esi, dword [0x578ad4]
mov edi, 0x16
lea ecx, [esi + 1]
mov eax, ecx
imul eax, esi
cdq
idiv edi
mov eax, dword [0x5771f0]
mov byte [ebp - 4], 0x9a
cmp edx, 7
cmove esi, ecx
mov ecx, 0x5771f0
mov dword [0x578ad4], esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd7c], eax
mov byte [ebp - 4], 0x9b
call fcn.00493c20
test al, al
jne 0x481185
xor eax, eax
push 0x880
push eax
mov word [ebp - 0x8cc], ax
lea eax, [ebp - 0x8ca]
push eax
call fcn.004f2250
add esp, 0xc
xor edi, edi
xor esi, esi
lea esp, [esp]
xor edx, edx
test edi, edi
je 0x48116a
test edx, edx
je 0x48116a
lea eax, [esi + edx]
lea ecx, [esi + edx]
mov ax, word [ebp + eax*2 - 0x90e]
inc ax
add ax, word [ebp + ecx*2 - 0x8ce]
mov word [ebp + ecx*2 - 0x8cc], ax
inc edx
cmp edx, 0x21
jl 0x481142
add esi, 0x21
inc edi
cmp esi, 0x441
jl 0x481140
movsx eax, word [ebp - 0x4c]
mov dword [0x578ad4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc3c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x9c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xea4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x9d
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc34], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x9e
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd74], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0x9f
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc2c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe14], eax
mov byte [ebp - 4], 0xa1
call fcn.00493c50
mov ebx, 4
test al, al
jne 0x48126b
mov esi, dword [0x578ad4]
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x141]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc24], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa2
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd6c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa3
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc1c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe64], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa5
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc14], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa6
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd64], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa7
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc0c], eax
mov esi, dword [0x578ad4]
mov byte [ebp - 4], 0xa8
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
mov ecx, 0x11
idiv ecx
cmp edx, 0xe
jne 0x481373
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x63]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe0c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xa9
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc04], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xaa
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd5c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xab
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbfc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xac
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe8c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xad
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbf4], eax
mov ecx, dword [0x578ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
mov edi, 0x15
idiv edi
mov byte [ebp - 4], 0xae
cmp edx, 0x12
jne 0x48143a
test ecx, ecx
mov eax, 1
cmove ecx, eax
mov dword [0x578ad4], ecx
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd54], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xaf
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbec], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe04], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb1
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbe4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb2
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd4c], eax
mov byte [ebp - 4], 0xb3
call fcn.00493a90
test al, al
jne 0x481538
xor esi, esi
call fcn.004f1791
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0x4dc], xmm0
cmp esi, 0x91
jb 0x4814c7
xor ecx, ecx
jmp 0x4814f0
mov eax, 0x90
cmp ecx, eax
jge 0x48152f
lea esp, [esp]
movsd xmm0, qword [ebp + eax*8 - 0x4d4]
movsd xmm1, qword [ebp + eax*8 - 0x4dc]
comisd xmm0, xmm1
jbe 0x48152a
movsd qword [ebp + eax*8 - 0x4d4], xmm1
movsd qword [ebp + eax*8 - 0x4dc], xmm0
dec eax
cmp eax, ecx
jg 0x481500
inc ecx
cmp ecx, 0x91
jl 0x4814f0
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbdc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe5c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb5
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbd4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb6
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd44], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb7
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbcc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdfc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xb9
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbc4], eax
mov eax, dword [0x578ad4]
imul eax, eax
cdq
mov ecx, 0x14
idiv ecx
mov byte [ebp - 4], 0xba
cmp edx, 7
jne 0x48160e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x578ad4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd3c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xbb
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbbc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xbc
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xeac], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xbd
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbb4], eax
mov byte [ebp - 4], 0xbe
call fcn.00493d50
test al, al
jne 0x481689
call fcn.004f1791
mov dword [0x578ad4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd34], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xbf
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbac], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdf4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc1
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xba4], eax
mov byte [ebp - 4], 0xc2
call fcn.00493990
test al, al
jne 0x481733
mov esi, dword [0x578ad4]
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x63]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd2c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc3
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb9c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe54], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc5
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb94], eax
mov esi, dword [0x578ad4]
mov eax, esi
imul eax, esi
imul eax, esi
cdq
idiv edi
mov byte [ebp - 4], 0xc6
cmp edx, 3
jne 0x4817e7
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x2f4]
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd24], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc7
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb8c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdec], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xc9
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb84], eax
mov edi, dword [0x578ad4]
mov eax, edi
imul eax, edi
cdq
mov ecx, 0x13
idiv ecx
mov byte [ebp - 4], 0xca
cmp edx, 0xf
jne 0x4818c8
mov eax, edi
cdq
sub eax, edx
xor ecx, ecx
mov ebx, eax
sar ebx, 1
mov esi, 0xce
mov dword [ebp - 0x9fc], ecx
mov dword [ebp - 0xa00], ebx
test ebx, ebx
jle 0x4818bd
mov eax, edi
cdq
and edx, 3
lea edi, [edx + eax]
sar edi, 2
xor edx, edx
test edi, edi
jle 0x4818ac
mov eax, edx
mov ecx, edi
lea ecx, [ecx]
add esi, eax
dec eax
dec ecx
jne 0x4818a0
mov ecx, dword [ebp - 0x9fc]
add edx, ecx
dec ebx
jne 0x481895
mov ebx, dword [ebp - 0xa00]
mov edi, dword [0x578ad4]
inc ecx
mov dword [ebp - 0x9fc], ecx
cmp ecx, esi
jl 0x481883
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd1c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xcb
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb7c], eax
mov esi, dword [0x578ad4]
mov byte [ebp - 4], 0xcc
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
mov ecx, 0xe
idiv ecx
cmp edx, 0xd
jne 0x481970
movsd xmm3, qword [0x52a190]
movsd xmm6, qword [0x52a198]
movsd xmm5, qword [0x52a188]
movd xmm4, esi
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
mov edi, edi
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x48195a
subsd xmm2, xmm3
divsd xmm3, xmm6
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm5
ja 0x481940
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe84], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xcd
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb74], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xce
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd14], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xcf
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb6c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xde4], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd1
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb64], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd2
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd0c], eax
mov esi, dword [0x578ad4]
mov byte [ebp - 4], 0xd3
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
mov ecx, 0xf
idiv ecx
lea ebx, [ecx - 0xe]
cmp edx, 3
jne 0x481a53
test esi, esi
cmove esi, ebx
mov dword [0x578ad4], esi
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb5c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe4c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd5
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb54], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd6
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd04], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd7
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb4c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xddc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xd9
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb44], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xda
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcfc], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xdb
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb3c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xdc
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe9c], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xdd
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb34], eax
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
mov byte [ebp - 4], 0xde
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcf4], eax
mov byte [ebp - 4], 0xdf
call fcn.00493b60
mov eax, dword [0x5771f0]
mov ecx, 0x5771f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb2c], eax
push 0x5771f0
lea ecx, [ebp - 0xdd4]
mov byte [ebp - 4], 0xe0
call fcn.004019c0
lea ecx, [ebp - 0xb24]
call fcn.00401ce0
lea ecx, [ebp - 0xcec]
call fcn.00401ce0
lea ecx, [ebp - 0xb1c]
call fcn.00401ce0
lea ecx, [ebp - 0xe44]
call fcn.00401ce0
lea ecx, [ebp - 0xb14]
call fcn.00401ce0
call fcn.00493d80
test al, al
jne 0x481c09
mov eax, dword [0x578ad4]
test eax, eax
cmove eax, ebx
mov dword [0x578ad4], eax
lea ecx, [ebp - 0xce4]
call fcn.00401ce0
lea ecx, [ebp - 0xb0c]
call fcn.00401ce0
lea ecx, [ebp - 0xdcc]
call fcn.00401ce0
lea ecx, [ebp - 0xb04]
call fcn.00401ce0
lea ecx, [ebp - 0xcdc]
call fcn.00401ce0
lea ecx, [ebp - 0xafc]
call fcn.00401ce0
lea ecx, [ebp - 0xe7c]
call fcn.00401ce0
lea ecx, [ebp - 0xaf4]
call fcn.00401ce0
lea ecx, [ebp - 0xcd4]
call fcn.00401ce0
call fcn.00493ac0
mov ebx, dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
test al, al
jne 0x481c89
push 0
push 0
push 0
push 0
push 0
push 0
call ebx
lea ecx, [ebp - 0xaec]
call fcn.00401ce0
lea ecx, [ebp - 0xdc4]
call fcn.00401ce0
mov ecx, dword [0x578ad4]
lea eax, [ecx + 1]
imul eax, ecx
cdq
mov ecx, 0x13
idiv ecx
cmp edx, 7
jne 0x481cd8
lea eax, [ecx - 6]
mov esi, 0x34
test esi, esi
je 0x481cd1
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x481cc0
add eax, esi
mov dword [0x578ad4], eax
lea ecx, [ebp - 0xae4]
call fcn.00401ce0
lea ecx, [ebp - 0xccc]
call fcn.00401ce0
lea ecx, [ebp - 0xadc]
call fcn.00401ce0
call fcn.00493960
test al, al
jne 0x481d12
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
lea ecx, [ebp - 0xe3c]
call fcn.00401ce0
lea ecx, [ebp - 0xad4]
call fcn.00401ce0
lea ecx, [ebp - 0xcc4]
call fcn.00401ce0
lea ecx, [ebp - 0xacc]
call fcn.00401ce0
lea ecx, [ebp - 0xdbc]
call fcn.00401ce0
lea ecx, [ebp - 0xac4]
call fcn.00401ce0
lea ecx, [ebp - 0xcbc]
call fcn.00401ce0
call fcn.00493cf0
test al, al
jne 0x481dde
mov edi, dword [0x578ad4]
mov eax, edi
cdq
sub eax, edx
xor ecx, ecx
mov ebx, eax
sar ebx, 1
mov esi, 0x85
mov dword [ebp - 0x9fc], ecx
mov dword [ebp - 0xa00], ebx
lea ebx, [ebx]
test ebx, ebx
jle 0x481dcd
mov eax, edi
cdq
and edx, 3
lea edi, [edx + eax]
sar edi, 2
xor edx, edx
test edi, edi
jle 0x481dbc
mov eax, edx
mov ecx, edi
lea ebx, [ebx]
add esi, eax
dec eax
dec ecx
jne 0x481db0
mov ecx, dword [ebp - 0x9fc]
add edx, ecx
dec ebx
jne 0x481da2
mov ebx, dword [ebp - 0xa00]
mov edi, dword [0x578ad4]
inc ecx
mov dword [ebp - 0x9fc], ecx
cmp ecx, esi
jl 0x481d90
mov ebx, dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea ecx, [ebp - 0xabc]
call fcn.00401ce0
lea ecx, [ebp - 0xeb4]
call fcn.00401ce0
lea ecx, [ebp - 0xab4]
call fcn.00401ce0
lea ecx, [ebp - 0xcb4]
call fcn.00401ce0
lea ecx, [ebp - 0xaac]
call fcn.00401ce0
mov dword [ebp - 4], 0x100
call fcn.00493930
test al, al
jne 0x481e43
push 4
call fcn.004f04fa
mov esi, eax
call fcn.004f1791
mov dword [esi], eax
push esi
mov dword [0x578ad4], eax
call fcn.004f03fe
add esp, 8
lea ecx, [ebp - 0xdb4]
call fcn.00401ce0
lea ecx, [ebp - 0xaa4]
call fcn.00401ce0
lea ecx, [ebp - 0xcac]
call fcn.00401ce0
lea ecx, [ebp - 0xa9c]
call fcn.00401ce0
lea ecx, [ebp - 0xe34]
call fcn.00401ce0
lea ecx, [ebp - 0xa94]
call fcn.00401ce0
lea ecx, [ebp - 0xca4]
call fcn.00401ce0
lea ecx, [ebp - 0xa8c]
call fcn.00401ce0
lea ecx, [ebp - 0xdac]
call fcn.00401ce0
lea ecx, [ebp - 0xa84]
call fcn.00401ce0
lea ecx, [ebp - 0xc9c]
call fcn.00401ce0
lea ecx, [ebp - 0xa7c]
call fcn.00401ce0
mov ecx, dword [0x578ad4]
lea edx, [ecx + 2]
lea eax, [ecx + 1]
imul edx, eax
imul edx, ecx
and edx, reloc.OLEAUT32.dll_VariantInit
jns 0x481ee6
dec edx
or edx, 0xfffffff8
inc edx
mov eax, dword [0x57a22c]
mov ecx, 0x6b2a4185
cmp edx, 1
cmove eax, ecx
lea ecx, [ebp - 0xe74]
mov dword [0x57a22c], eax
call fcn.00401ce0
lea ecx, [ebp - 0xa74]
call fcn.00401ce0
mov edx, dword [0x578ad4]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x14
idiv ecx
cmp edx, 0x12
jne 0x481f3e
push 0
push 0
push 0
push 0
push 0
push 0
call ebx
lea ecx, [ebp - 0xc94]
call fcn.00401ce0
lea ecx, [ebp - 0xa6c]
call fcn.00401ce0
lea ecx, [ebp - 0xda4]
call fcn.00401ce0
lea ecx, [ebp - 0xa64]
call fcn.00401ce0
call fcn.00493d20
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileW]
test al, al
jne 0x481f95
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call edi
push 0
push 0
call ebx
lea ecx, [ebp - 0xc8c]
call fcn.00401ce0
lea ecx, [ebp - 0xa5c]
call fcn.00401ce0
lea ecx, [ebp - 0xe2c]
call fcn.00401ce0
lea ecx, [ebp - 0xa54]
call fcn.00401ce0
lea ecx, [ebp - 0xc84]
call fcn.00401ce0
mov esi, dword [0x578ad4]
mov eax, esi
imul eax, esi
cdq
mov ecx, 0xc
idiv ecx
mov byte [ebp - 4], 0x17
cmp edx, 6
jne 0x482020
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x7b]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
lea ecx, [ebp - 0xa4c]
call fcn.00401ce0
lea ecx, [ebp - 0xd9c]
call fcn.00401ce0
mov esi, dword [0x578ad4]
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
mov ecx, 0x12
idiv ecx
cmp edx, 0x10
jne 0x4820be
test esi, esi
je 0x4820be
lea esp, [esp]
mov ecx, esi
and ecx, 0x80000001
jns 0x48206f
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x48207c
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x482083
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x578ad4], esi
sub ecx, 0
je 0x4820ad
sub ecx, 2
je 0x4820b0
dec ecx
je 0x4820b1
jmp 0x4820ba
add esi, 2
inc esi
add esi, 2
mov dword [0x578ad4], esi
test esi, esi
jne 0x482060
lea ecx, [ebp - 0xa44]
call fcn.00401ce0
lea ecx, [ebp - 0xc7c]
call fcn.00401ce0
lea ecx, [ebp - 0xa3c]
call fcn.00401ce0
call fcn.00493b60
test al, al
jne 0x4820fe
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call edi
push 0
push 0
call ebx
lea ecx, [ebp - 0xe94]
call fcn.00401ce0
lea ecx, [ebp - 0xa34]
call fcn.00401ce0
lea ecx, [ebp - 0xc74]
call fcn.00401ce0
call fcn.00493930
test al, al
jne 0x48212e
dec dword [0x578ad4]
lea ecx, [ebp - 0xa2c]
call fcn.00401ce0
lea ecx, [ebp - 0xd94]
call fcn.00401ce0
mov ecx, dword [0x578ad4]
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
mov esi, 9
idiv esi
cmp edx, 7
jne 0x482166
inc ecx
mov dword [0x578ad4], ecx
lea ecx, [ebp - 0xa24]
call fcn.00401ce0
call fcn.00493900
test al, al
jne 0x482182
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
lea ecx, [ebp - 0xeb8]
call fcn.00401ce0
lea ecx, [ebp - 0xeb0]
call fcn.00401ce0
lea ecx, [ebp - 0xea8]
call fcn.00401ce0
lea ecx, [ebp - 0xea0]
call fcn.00401ce0
mov esi, dword [0x578ad4]
mov edi, 0xc
lea ecx, [esi + 1]
mov eax, ecx
imul eax, esi
cdq
idiv edi
cmp edx, 5
cmove esi, ecx
lea ecx, [ebp - 0xb38]
mov dword [0x578ad4], esi
call fcn.00401ce0
lea ecx, [ebp - 0xc5c]
call fcn.00401ce0
mov edx, dword [0x578ad4]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x16
idiv ecx
cmp edx, 3
jne 0x482215
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea ecx, [ebp - 0xa04]
call fcn.00401ce0
lea ecx, [ebp - 0xa00]
call fcn.00401ce0
lea ecx, [ebp - 0x9fc]
call fcn.00401ce0
lea ecx, [ebp - 0x9fc]
call fcn.004020a0
lea ecx, [ebp - 0xa00]
call fcn.004020a0
lea ecx, [ebp - 0xa04]
call fcn.004020a0
lea ecx, [ebp - 0xc5c]
call fcn.004020a0
lea ecx, [ebp - 0xb38]
call fcn.004020a0
lea ecx, [ebp - 0xea0]
call fcn.004020a0
lea ecx, [ebp - 0xea8]
call fcn.004020a0
lea ecx, [ebp - 0xeb0]
call fcn.004020a0
lea ecx, [ebp - 0xeb8]
call fcn.004020a0
lea ecx, [ebp - 0xa24]
call fcn.004020a0
lea ecx, [ebp - 0xd94]
call fcn.004020a0
lea ecx, [ebp - 0xa2c]
call fcn.004020a0
lea ecx, [ebp - 0xc74]
call fcn.004020a0
lea ecx, [ebp - 0xa34]
call fcn.004020a0
lea ecx, [ebp - 0xe94]
call fcn.004020a0
lea ecx, [ebp - 0xa3c]
call fcn.004020a0
lea ecx, [ebp - 0xc7c]
call fcn.004020a0
lea ecx, [ebp - 0xa44]
call fcn.004020a0
lea ecx, [ebp - 0xd9c]
call fcn.004020a0
lea ecx, [ebp - 0xa4c]
call fcn.004020a0
lea ecx, [ebp - 0xc84]
call fcn.004020a0
lea ecx, [ebp - 0xa54]
call fcn.004020a0
lea ecx, [ebp - 0xe2c]
call fcn.004020a0
lea ecx, [ebp - 0xa5c]
call fcn.004020a0
lea ecx, [ebp - 0xc8c]
call fcn.004020a0
lea ecx, [ebp - 0xa64]
call fcn.004020a0
lea ecx, [ebp - 0xda4]
call fcn.004020a0
lea ecx, [ebp - 0xa6c]
call fcn.004020a0
lea ecx, [ebp - 0xc94]
call fcn.004020a0
lea ecx, [ebp - 0xa74]
call fcn.004020a0
lea ecx, [ebp - 0xe74]
call fcn.004020a0
lea ecx, [ebp - 0xa7c]
call fcn.004020a0
lea ecx, [ebp - 0xc9c]
call fcn.004020a0
lea ecx, [ebp - 0xa84]
call fcn.004020a0
lea ecx, [ebp - 0xdac]
call fcn.004020a0
lea ecx, [ebp - 0xa8c]
call fcn.004020a0
lea ecx, [ebp - 0xca4]
call fcn.004020a0
lea ecx, [ebp - 0xa94]
call fcn.004020a0
lea ecx, [ebp - 0xe34]
call fcn.004020a0
lea ecx, [ebp - 0xa9c]
call fcn.004020a0
lea ecx, [ebp - 0xcac]
call fcn.004020a0
lea ecx, [ebp - 0xaa4]
call fcn.004020a0
lea ecx, [ebp - 0xdb4]
call fcn.004020a0
lea ecx, [ebp - 0xaac]
call fcn.004020a0
lea ecx, [ebp - 0xcb4]
call fcn.004020a0
lea ecx, [ebp - 0xab4]
call fcn.004020a0
lea ecx, [ebp - 0xeb4]
call fcn.004020a0
lea ecx, [ebp - 0xabc]
call fcn.004020a0
lea ecx, [ebp - 0xcbc]
call fcn.004020a0
lea ecx, [ebp - 0xac4]
call fcn.004020a0
lea ecx, [ebp - 0xdbc]
call fcn.004020a0
lea ecx, [ebp - 0xacc]
call fcn.004020a0
lea ecx, [ebp - 0xcc4]
call fcn.004020a0
lea ecx, [ebp - 0xad4]
call fcn.004020a0
lea ecx, [ebp - 0xe3c]
call fcn.004020a0
lea ecx, [ebp - 0xadc]
call fcn.004020a0
lea ecx, [ebp - 0xccc]
call fcn.004020a0
lea ecx, [ebp - 0xae4]
call fcn.004020a0
lea ecx, [ebp - 0xdc4]
call fcn.004020a0
lea ecx, [ebp - 0xaec]
call fcn.004020a0
lea ecx, [ebp - 0xcd4]
call fcn.004020a0
lea ecx, [ebp - 0xaf4]
call fcn.004020a0
lea ecx, [ebp - 0xe7c]
call fcn.004020a0
lea ecx, [ebp - 0xafc]
call fcn.004020a0
lea ecx, [ebp - 0xcdc]
call fcn.004020a0
lea ecx, [ebp - 0xb04]
call fcn.004020a0
lea ecx, [ebp - 0xdcc]
call fcn.004020a0
lea ecx, [ebp - 0xb0c]
call fcn.004020a0
lea ecx, [ebp - 0xce4]
call fcn.004020a0
lea ecx, [ebp - 0xb14]
call fcn.004020a0
lea ecx, [ebp - 0xe44]
call fcn.004020a0
lea ecx, [ebp - 0xb1c]
call fcn.004020a0
lea ecx, [ebp - 0xcec]
call fcn.004020a0
lea ecx, [ebp - 0xb24]
call fcn.004020a0
lea ecx, [ebp - 0xdd4]
call fcn.004020a0
lea ecx, [ebp - 0xb2c]
call fcn.004020a0
lea ecx, [ebp - 0xcf4]
call fcn.004020a0
lea ecx, [ebp - 0xb34]
call fcn.004020a0
lea ecx, [ebp - 0xe9c]
call fcn.004020a0
lea ecx, [ebp - 0xb3c]
call fcn.004020a0
lea ecx, [ebp - 0xcfc]
call fcn.004020a0
lea ecx, [ebp - 0xb44]
call fcn.004020a0
lea ecx, [ebp - 0xddc]
call fcn.004020a0
lea ecx, [ebp - 0xb4c]
call fcn.004020a0
lea ecx, [ebp - 0xd04]
call fcn.004020a0
lea ecx, [ebp - 0xb54]
call fcn.004020a0
lea ecx, [ebp - 0xe4c]
call fcn.004020a0
lea ecx, [ebp - 0xb5c]
call fcn.004020a0
lea ecx, [ebp - 0xd0c]
call fcn.004020a0
lea ecx, [ebp - 0xb64]
call fcn.004020a0
lea ecx, [ebp - 0xde4]
call fcn.004020a0
lea ecx, [ebp - 0xb6c]
call fcn.004020a0
lea ecx, [ebp - 0xd14]
call fcn.004020a0
lea ecx, [ebp - 0xb74]
call fcn.004020a0
lea ecx, [ebp - 0xe84]
call fcn.004020a0
lea ecx, [ebp - 0xb7c]
call fcn.004020a0
lea ecx, [ebp - 0xd1c]
call fcn.004020a0
lea ecx, [ebp - 0xb84]
call fcn.004020a0
lea ecx, [ebp - 0xdec]
call fcn.004020a0
lea ecx, [ebp - 0xb8c]
call fcn.004020a0
lea ecx, [ebp - 0xd24]
call fcn.004020a0
lea ecx, [ebp - 0xb94]
call fcn.004020a0
lea ecx, [ebp - 0xe54]
call fcn.004020a0
lea ecx, [ebp - 0xb9c]
call fcn.004020a0
lea ecx, [ebp - 0xd2c]
call fcn.004020a0
lea ecx, [ebp - 0xba4]
call fcn.004020a0
lea ecx, [ebp - 0xdf4]
call fcn.004020a0
lea ecx, [ebp - 0xbac]
call fcn.004020a0
lea ecx, [ebp - 0xd34]
call fcn.004020a0
lea ecx, [ebp - 0xbb4]
call fcn.004020a0
lea ecx, [ebp - 0xeac]
call fcn.004020a0
lea ecx, [ebp - 0xbbc]
call fcn.004020a0
lea ecx, [ebp - 0xd3c]
call fcn.004020a0
lea ecx, [ebp - 0xbc4]
call fcn.004020a0
lea ecx, [ebp - 0xdfc]
call fcn.004020a0
lea ecx, [ebp - 0xbcc]
call fcn.004020a0
lea ecx, [ebp - 0xd44]
call fcn.004020a0
lea ecx, [ebp - 0xbd4]
call fcn.004020a0
lea ecx, [ebp - 0xe5c]
call fcn.004020a0
lea ecx, [ebp - 0xbdc]
call fcn.004020a0
lea ecx, [ebp - 0xd4c]
call fcn.004020a0
lea ecx, [ebp - 0xbe4]
call fcn.004020a0
lea ecx, [ebp - 0xe04]
call fcn.004020a0
lea ecx, [ebp - 0xbec]
call fcn.004020a0
lea ecx, [ebp - 0xd54]
call fcn.004020a0
lea ecx, [ebp - 0xbf4]
call fcn.004020a0
lea ecx, [ebp - 0xe8c]
call fcn.004020a0
lea ecx, [ebp - 0xbfc]
call fcn.004020a0
lea ecx, [ebp - 0xd5c]
call fcn.004020a0
lea ecx, [ebp - 0xc04]
call fcn.004020a0
lea ecx, [ebp - 0xe0c]
call fcn.004020a0
lea ecx, [ebp - 0xc0c]
call fcn.004020a0
lea ecx, [ebp - 0xd64]
call fcn.004020a0
lea ecx, [ebp - 0xc14]
call fcn.004020a0
lea ecx, [ebp - 0xe64]
call fcn.004020a0
lea ecx, [ebp - 0xc1c]
call fcn.004020a0
lea ecx, [ebp - 0xd6c]
call fcn.004020a0
lea ecx, [ebp - 0xc24]
call fcn.004020a0
lea ecx, [ebp - 0xe14]
call fcn.004020a0
lea ecx, [ebp - 0xc2c]
call fcn.004020a0
lea ecx, [ebp - 0xd74]
call fcn.004020a0
lea ecx, [ebp - 0xc34]
call fcn.004020a0
lea ecx, [ebp - 0xea4]
call fcn.004020a0
lea ecx, [ebp - 0xc3c]
call fcn.004020a0
lea ecx, [ebp - 0xd7c]
call fcn.004020a0
lea ecx, [ebp - 0xc44]
call fcn.004020a0
lea ecx, [ebp - 0xe1c]
call fcn.004020a0
lea ecx, [ebp - 0xc4c]
call fcn.004020a0
lea ecx, [ebp - 0xd84]
call fcn.004020a0
lea ecx, [ebp - 0xc54]
call fcn.004020a0
lea ecx, [ebp - 0xe6c]
call fcn.004020a0
lea ecx, [ebp - 0xa1c]
call fcn.004020a0
lea ecx, [ebp - 0xd8c]
call fcn.004020a0
lea ecx, [ebp - 0xc64]
call fcn.004020a0
lea ecx, [ebp - 0xe24]
call fcn.004020a0
lea ecx, [ebp - 0xc6c]
call fcn.004020a0
lea ecx, [ebp - 0xa20]
call fcn.004020a0
lea ecx, [ebp - 0xa28]
call fcn.004020a0
lea ecx, [ebp - 0xa30]
call fcn.004020a0
lea ecx, [ebp - 0xa38]
call fcn.004020a0
lea ecx, [ebp - 0xa40]
call fcn.004020a0
lea ecx, [ebp - 0xa48]
call fcn.004020a0
lea ecx, [ebp - 0xa50]
call fcn.004020a0
lea ecx, [ebp - 0xa58]
call fcn.004020a0
lea ecx, [ebp - 0xa60]
call fcn.004020a0
lea ecx, [ebp - 0xa68]
call fcn.004020a0
lea ecx, [ebp - 0xa70]
call fcn.004020a0
lea ecx, [ebp - 0xa78]
call fcn.004020a0
lea ecx, [ebp - 0xa80]
call fcn.004020a0
lea ecx, [ebp - 0xa88]
call fcn.004020a0
lea ecx, [ebp - 0xa90]
call fcn.004020a0
lea ecx, [ebp - 0xa98]
call fcn.004020a0
lea ecx, [ebp - 0xaa0]
call fcn.004020a0
lea ecx, [ebp - 0xaa8]
call fcn.004020a0
lea ecx, [ebp - 0xab0]
call fcn.004020a0
lea ecx, [ebp - 0xab8]
call fcn.004020a0
lea ecx, [ebp - 0xac0]
call fcn.004020a0
lea ecx, [ebp - 0xac8]
call fcn.004020a0
lea ecx, [ebp - 0xad0]
call fcn.004020a0
lea ecx, [ebp - 0xad8]
call fcn.004020a0
lea ecx, [ebp - 0xae0]
call fcn.004020a0
lea ecx, [ebp - 0xae8]
call fcn.004020a0
lea ecx, [ebp - 0xaf0]
call fcn.004020a0
lea ecx, [ebp - 0xaf8]
call fcn.004020a0
lea ecx, [ebp - 0xb00]
call fcn.004020a0
lea ecx, [ebp - 0xb08]
call fcn.004020a0
lea ecx, [ebp - 0xb10]
call fcn.004020a0
lea ecx, [ebp - 0xb18]
call fcn.004020a0
lea ecx, [ebp - 0xb20]
call fcn.004020a0
lea ecx, [ebp - 0xb28]
call fcn.004020a0
lea ecx, [ebp - 0xb30]
call fcn.004020a0
lea ecx, [ebp - 0xa08]
call fcn.004020a0
lea ecx, [ebp - 0xb40]
call fcn.004020a0
lea ecx, [ebp - 0xb48]
call fcn.004020a0
lea ecx, [ebp - 0xb50]
call fcn.004020a0
lea ecx, [ebp - 0xb58]
call fcn.004020a0
lea ecx, [ebp - 0xb60]
call fcn.004020a0
lea ecx, [ebp - 0xb68]
call fcn.004020a0
lea ecx, [ebp - 0xb70]
call fcn.004020a0
lea ecx, [ebp - 0xb78]
call fcn.004020a0
lea ecx, [ebp - 0xb80]
call fcn.004020a0
lea ecx, [ebp - 0xb88]
call fcn.004020a0
lea ecx, [ebp - 0xb90]
call fcn.004020a0
lea ecx, [ebp - 0xb98]
call fcn.004020a0
lea ecx, [ebp - 0xba0]
call fcn.004020a0
lea ecx, [ebp - 0xba8]
call fcn.004020a0
lea ecx, [ebp - 0xbb0]
call fcn.004020a0
lea ecx, [ebp - 0xbb8]
call fcn.004020a0
lea ecx, [ebp - 0xbc0]
call fcn.004020a0
lea ecx, [ebp - 0xbc8]
call fcn.004020a0
lea ecx, [ebp - 0xbd0]
call fcn.004020a0
lea ecx, [ebp - 0xbd8]
call fcn.004020a0
lea ecx, [ebp - 0xbe0]
call fcn.004020a0
lea ecx, [ebp - 0xbe8]
call fcn.004020a0
lea ecx, [ebp - 0xbf0]
call fcn.004020a0
lea ecx, [ebp - 0xbf8]
call fcn.004020a0
lea ecx, [ebp - 0xc00]
call fcn.004020a0
lea ecx, [ebp - 0xc08]
call fcn.004020a0
lea ecx, [ebp - 0xc10]
call fcn.004020a0
lea ecx, [ebp - 0xc18]
call fcn.004020a0
lea ecx, [ebp - 0xc20]
call fcn.004020a0
lea ecx, [ebp - 0xc28]
call fcn.004020a0
lea ecx, [ebp - 0xc30]
call fcn.004020a0
lea ecx, [ebp - 0xc38]
call fcn.004020a0
lea ecx, [ebp - 0xc40]
call fcn.004020a0
lea ecx, [ebp - 0xc48]
call fcn.004020a0
lea ecx, [ebp - 0xc50]
call fcn.004020a0
lea ecx, [ebp - 0xc58]
call fcn.004020a0
lea ecx, [ebp - 0xc60]
call fcn.004020a0
lea ecx, [ebp - 0xc68]
call fcn.004020a0
lea ecx, [ebp - 0xc70]
call fcn.004020a0
lea ecx, [ebp - 0xc78]
call fcn.004020a0
lea ecx, [ebp - 0xc80]
call fcn.004020a0
lea ecx, [ebp - 0xc88]
call fcn.004020a0
lea ecx, [ebp - 0xc90]
call fcn.004020a0
lea ecx, [ebp - 0xc98]
call fcn.004020a0
lea ecx, [ebp - 0xca0]
call fcn.004020a0
lea ecx, [ebp - 0xca8]
call fcn.004020a0
lea ecx, [ebp - 0xcb0]
call fcn.004020a0
lea ecx, [ebp - 0xcb8]
call fcn.004020a0
lea ecx, [ebp - 0xcc0]
call fcn.004020a0
lea ecx, [ebp - 0xcc8]
call fcn.004020a0
lea ecx, [ebp - 0xcd0]
call fcn.004020a0
lea ecx, [ebp - 0xcd8]
call fcn.004020a0
lea ecx, [ebp - 0xce0]
call fcn.004020a0
lea ecx, [ebp - 0xce8]
call fcn.004020a0
lea ecx, [ebp - 0xcf0]
call fcn.004020a0
lea ecx, [ebp - 0xcf8]
call fcn.004020a0
lea ecx, [ebp - 0xd00]
call fcn.004020a0
lea ecx, [ebp - 0xd08]
call fcn.004020a0
lea ecx, [ebp - 0xd10]
call fcn.004020a0
lea ecx, [ebp - 0xd18]
call fcn.004020a0
lea ecx, [ebp - 0xd20]
call fcn.004020a0
lea ecx, [ebp - 0xd28]
call fcn.004020a0
lea ecx, [ebp - 0xd30]
call fcn.004020a0
lea ecx, [ebp - 0xd38]
call fcn.004020a0
lea ecx, [ebp - 0xd40]
call fcn.004020a0
lea ecx, [ebp - 0xd48]
call fcn.004020a0
lea ecx, [ebp - 0xd50]
call fcn.004020a0
lea ecx, [ebp - 0xd58]
call fcn.004020a0
lea ecx, [ebp - 0xd60]
call fcn.004020a0
lea ecx, [ebp - 0xd68]
call fcn.004020a0
lea ecx, [ebp - 0xd70]
call fcn.004020a0
lea ecx, [ebp - 0xd78]
call fcn.004020a0
lea ecx, [ebp - 0xd80]
call fcn.004020a0
lea ecx, [ebp - 0xd88]
call fcn.004020a0
lea ecx, [ebp - 0xd90]
call fcn.004020a0
lea ecx, [ebp - 0xd98]
call fcn.004020a0
lea ecx, [ebp - 0xda0]
call fcn.004020a0
lea ecx, [ebp - 0xda8]
call fcn.004020a0
lea ecx, [ebp - 0xdb0]
call fcn.004020a0
lea ecx, [ebp - 0xdb8]
call fcn.004020a0
lea ecx, [ebp - 0xdc0]
call fcn.004020a0
lea ecx, [ebp - 0xdc8]
call fcn.004020a0
lea ecx, [ebp - 0xdd0]
call fcn.004020a0
lea ecx, [ebp - 0xdd8]
call fcn.004020a0
lea ecx, [ebp - 0xde0]
call fcn.004020a0
lea ecx, [ebp - 0xde8]
call fcn.004020a0
lea ecx, [ebp - 0xdf0]
call fcn.004020a0
lea ecx, [ebp - 0xdf8]
call fcn.004020a0
lea ecx, [ebp - 0xe00]
call fcn.004020a0
lea ecx, [ebp - 0xe08]
call fcn.004020a0
lea ecx, [ebp - 0xe10]
call fcn.004020a0
lea ecx, [ebp - 0xe18]
call fcn.004020a0
lea ecx, [ebp - 0xe20]
call fcn.004020a0
lea ecx, [ebp - 0xe28]
call fcn.004020a0
lea ecx, [ebp - 0xe30]
call fcn.004020a0
lea ecx, [ebp - 0xe38]
call fcn.004020a0
lea ecx, [ebp - 0xe40]
call fcn.004020a0
lea ecx, [ebp - 0xe48]
call fcn.004020a0
lea ecx, [ebp - 0xe50]
call fcn.004020a0
lea ecx, [ebp - 0xe58]
call fcn.004020a0
lea ecx, [ebp - 0xe60]
call fcn.004020a0
lea ecx, [ebp - 0xe68]
call fcn.004020a0
lea ecx, [ebp - 0xe70]
call fcn.004020a0
lea ecx, [ebp - 0xe78]
call fcn.004020a0
lea ecx, [ebp - 0xe80]
call fcn.004020a0
lea ecx, [ebp - 0xe88]
call fcn.004020a0
lea ecx, [ebp - 0xe90]
call fcn.004020a0
lea ecx, [ebp - 0xe98]
call fcn.004020a0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f0cd4
mov esp, ebp
pop ebp
ret