Function at 0x4079d1
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Self delete

Disassembly:
mov eax, 0x422fba
call fcn.00417f9c
sub esp, 0x9a8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 3
mov edi, 0x80004003
jne 0x407a06
push edi
call fcn.004178f6
mov ecx, dword [ebp + 8]
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
cmp edx, 1
jne 0x407a1e
mov dword [ebp - 0x40], ebx
jmp 0x407a34
cmp dword [ebp + 8], ebx
jne 0x407a29
push edi
call fcn.004178f6
mov ecx, dword [ebp + 8]
call fcn.0040d23a
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp + 8], ebx
mov byte [ebp - 4], 4
jne 0x407a46
push edi
call fcn.004178f6
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x1fc]
push eax
call fcn.00406a3e
push dword [eax]
lea ecx, [ebp - 0x28]
call fcn.0040679c
lea ecx, [ebp - 0x1fc]
call fcn.00413e77
cmp dword [ebp - 0x28], ebx
jne 0x407a75
push edi
call fcn.004178f6
push dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x184]
push eax
call fcn.0040694c
push dword [eax]
lea ecx, [ebp - 0x18]
call fcn.0040679c
lea ecx, [ebp - 0x184]
call fcn.00413e77
push ebx
lea ecx, [ebp - 0x18]
call fcn.0040cb5c
test al, al
jne 0x40c82b
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b958
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 5
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push ebx
mov byte [ebp - 4], 4
call fcn.0040f439
add esp, 0x14
cmp dword [ebp - 0x18], ebx
jne 0x407b17
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x23c]
push eax
call fcn.0040cf71
push eax
lea ecx, [ebp - 0x100]
call fcn.00401790
lea eax, [ebp - 0x100]
lea ecx, [ebp - 0x2c]
push eax
call fcn.004061df
lea ecx, [ebp - 0x100]
call fcn.00406e16
lea ecx, [ebp - 0x23c]
call fcn.00406e16
lea ecx, [ebp - 0x2c]
call fcn.00406da8
mov ecx, dword [ebp - 0x2c]
cmp ecx, ebx
je 0x407b6d
call fcn.00401863
jmp 0x407b6f
xor eax, eax
push 0x42f160
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
je 0x408350
lea eax, [ebp - 0x1d4]
push eax
call fcn.00415012
pop ecx
mov ecx, dword [eax]
mov byte [ebp - 4], 8
cmp ecx, ebx
je 0x407ba4
call fcn.00401863
mov esi, eax
jmp 0x407ba6
xor esi, esi
mov ecx, dword [ebp - 0x2c]
cmp ecx, ebx
je 0x407bb4
call fcn.00401863
jmp 0x407bb6
xor eax, eax
push esi
push eax
call fcn.00417b40
mov ebx, eax
pop ecx
neg ebx
pop ecx
mov byte [ebp - 4], 4
sbb bl, bl
lea ecx, [ebp - 0x1d4]
inc bl
call fcn.00406e16
test bl, bl
jne 0x408350
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x407bec
call fcn.00401863
jmp 0x407bee
xor eax, eax
push 0x42b94c
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
je 0x408350
cmp dword [0x42f3c0], 1
je 0x407cd8
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b91c
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov dword [ebp - 4], 0x190
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov edi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
mov byte [ebp - 4], 0x91
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x92
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push 4
pop esi
push 0
mov dword [ebp - 4], esi
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov dword [ebp - 4], 0x193
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x94
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x95
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push 0
mov dword [ebp - 4], esi
call fcn.0040f439
add esp, 0x14
jmp 0x409bf2
lea ecx, [ebp - 0x54]
call fcn.00413fdf
xor ebx, ebx
push 0x17
push ebx
push 0x42b538
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 0x196
call fcn.00406271
push ebx
lea ecx, [ebp - 0x54]
call fcn.0040cb5c
test al, al
je 0x407d56
push dword [ebp - 0x40]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x97
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x98
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x99
mov ecx, esp
mov dword [ebp - 0x24], esp
jmp 0x407e33
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x9a
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x96
call fcn.004069a8
cmp ax, bx
jne 0x407e5e
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b8f4
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x9b
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov esi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
mov byte [ebp - 4], 0x9c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x9d
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push ebx
mov byte [ebp - 4], 0x96
call fcn.0040f439
add esp, 0x14
push dword [ebp - 0x40]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x9e
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x9f
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xa0
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push ebx
mov byte [ebp - 4], 0x96
call fcn.0040f439
add esp, 0x18
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 4
call fcn.00413e77
jmp 0x409bf2
lea ecx, [ebp - 0x54]
call fcn.004177ce
lea ecx, [ebp - 0x148]
push ecx
mov ecx, eax
call fcn.00406a3e
push eax
lea ecx, [ebp - 0x28]
call fcn.0040cbee
lea ecx, [ebp - 0x148]
call fcn.00413e77
lea ecx, [ebp - 0x28]
call fcn.004177ce
mov ecx, eax
call fcn.0040d11d
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0xd0]
push ecx
mov ecx, eax
call fcn.0040d098
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xa1
call fcn.004177ce
mov edi, dword [ebp - 0x40]
mov ecx, eax
push edi
call fcn.0040cfed
lea ecx, [ebp - 0x28]
call fcn.004177ce
lea ecx, [ebp - 0xd0]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040d0f1
lea ecx, [ebp - 0x80]
call fcn.00413fdf
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa2
call fcn.004177ce
mov ecx, eax
call fcn.0040d070
cmp ax, 0xffff
jne 0x408013
lea ecx, [ebp - 0xb4]
call fcn.00413fdf
lea ecx, [ebp - 0xd4]
call fcn.00413fdf
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa4
call fcn.004177ce
dec edi
lea ecx, [ebp - 0x118]
push edi
push ecx
mov ecx, eax
call fcn.0040694c
push eax
lea ecx, [ebp - 0xb4]
call fcn.0040cbee
lea ecx, [ebp - 0x118]
call fcn.00413e77
lea ecx, [ebp - 0xb4]
call fcn.004177ce
lea ecx, [ebp - 0x248]
push ecx
mov ecx, eax
call fcn.004068f3
push eax
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa5
call fcn.0040ce6a
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0xa4
call fcn.00413e77
push 0x42f3f8
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b8ec
call fcn.004017af
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xa6
call fcn.004177ce
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0xa4
push ecx
mov ecx, eax
call fcn.004067c7
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa7
call fcn.0040cb36
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0xa4
call fcn.004018bb
lea ecx, [ebp - 0xb4]
call fcn.004177ce
lea ecx, [ebp - 0x80]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfab
lea ecx, [ebp - 0xd4]
call fcn.00413e77
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xa2
call fcn.00413e77
push ebx
lea ecx, [ebp - 0x80]
call fcn.0040cb5c
test al, al
je 0x408052
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x120]
push ecx
mov ecx, eax
call fcn.004068c1
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa8
call fcn.0040ce47
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xa2
call fcn.00413e77
mov esi, 0x42f160
lea ecx, [ebp - 0xbc]
push esi
call fcn.004017af
push esi
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0xa9
call fcn.004017af
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0xaa
push eax
push ecx
lea eax, [ebp - 0x80]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
call fcn.004150a0
pop ecx
pop ecx
lea ecx, [ebp - 0xbc]
call fcn.0040ca94
push esi
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
je 0x408259
fldz
lea eax, [ebp - 0x28c]
fstp qword [ebp - 0x2a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToSystemTime]
movzx eax, word [ebp - 0x280]
push eax
movzx eax, word [ebp - 0x282]
push eax
movzx eax, word [ebp - 0x284]
push eax
movzx eax, word [ebp - 0x286]
push eax
movzx eax, word [ebp - 0x28a]
push eax
movzx eax, word [ebp - 0x28c]
push eax
lea eax, [ebp - 0x8b4]
push 0x42b8c8
push eax
call fcn.0041865d
add esp, 0x20
lea ecx, [ebp - 0x104]
push 0x42b8c0
call fcn.004017af
lea eax, [ebp - 0x8b4]
lea ecx, [ebp - 0xfc]
push eax
mov byte [ebp - 4], 0xab
call fcn.004017af
push 0x42b4a8
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xac
call fcn.004017af
lea eax, [ebp - 0xf4]
mov ecx, 0x42f3b0
push eax
lea eax, [ebp - 0x258]
push eax
mov byte [ebp - 4], 0xad
call fcn.00403115
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xae
push ecx
lea ecx, [ebp - 0x128]
push ecx
mov ecx, eax
call fcn.00403115
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xaf
push ecx
lea ecx, [ebp - 0x250]
push ecx
mov ecx, eax
call fcn.00403115
push eax
lea ecx, [ebp - 0xb0]
call fcn.004061df
lea ecx, [ebp - 0x250]
call fcn.00406e16
lea ecx, [ebp - 0x128]
call fcn.00406e16
lea ecx, [ebp - 0x258]
call fcn.00406e16
lea ecx, [ebp - 0xf4]
call fcn.00406e16
lea ecx, [ebp - 0xfc]
call fcn.00406e16
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xaa
call fcn.00406e16
push 0x17
push ebx
push 0x42b4e8
lea ecx, [ebp - 0x10c]
call fcn.0040cc37
push 6
push ecx
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
push ecx
lea eax, [ebp - 0xbc]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00401790
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xb2
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xb0
call fcn.0040d38c
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xaa
call fcn.00413e77
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp - 0x54]
mov esi, eax
call fcn.004177ce
push esi
mov ebx, eax
call fcn.004186af
pop ecx
inc eax
push eax
mov ecx, ebx
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb3
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xaa
call fcn.00406bcc
push 1
push 1
push ecx
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb4
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, eax
call fcn.00406a70
push 0
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
mov byte [ebp - 4], 0xaa
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0xb0]
call fcn.00406e16
lea ecx, [ebp - 0xbc]
call fcn.00406e16
lea ecx, [ebp - 0x80]
call fcn.00413e77
lea ecx, [ebp - 0xd0]
call fcn.00413e77
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], 4
call fcn.00413e77
lea ecx, [ebp - 0x28]
call fcn.00413e77
lea ecx, [ebp - 0x18]
call fcn.00413e77
and byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00406e16
push 2
jmp 0x40a0f6
xor ebx, ebx
cmp dword [ebp - 0x18], ebx
jne 0x40835d
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x18]
call fcn.0040d00e
cmp ax, bx
jne 0x40bd4c
cmp dword [ebp - 0x18], ebx
jne 0x408379
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x130]
push eax
call fcn.0040684d
push eax
lea ecx, [ebp - 0x30]
call fcn.00401790
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 9
call fcn.00406e16
cmp dword [ebp - 0x18], ebx
jne 0x4083ab
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x260]
push eax
call fcn.00406887
push eax
lea ecx, [ebp - 0x34]
call fcn.00401790
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xa
call fcn.00406e16
mov ecx, dword [ebp - 0x30]
cmp ecx, ebx
je 0x4083e0
call fcn.00401863
jmp 0x4083e2
xor eax, eax
mov esi, 0x42f160
push esi
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
jne 0x4087b4
push ecx
mov edi, 0x42b8a0
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xb
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov ebx, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0xc
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
xor esi, esi
mov byte [ebp - 4], 0xa
push esi
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xe
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push esi
mov byte [ebp - 4], 0xa
call fcn.0040f439
add esp, 0x14
cmp dword [ebp + 8], esi
jne 0x4084c4
push 0x80004003
call fcn.004178f6
mov ecx, dword [ebp + 8]
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
cmp edx, 1
jne 0x4097ee
push 0x17
push esi
push 0x42b298
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], esi
call fcn.00402e12
cmp eax, esi
jge 0x4084ff
cmp eax, 0x80004002
je 0x4084ff
push eax
call fcn.004178f6
push 2
push esi
lea ecx, [ebp - 0x66c]
mov byte [ebp - 4], 0x11
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x12
call fcn.004017af
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x13
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.004033d0
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x66c]
push eax
mov byte [ebp - 4], 0x11
call ebx
cmp eax, esi
jge 0x40855a
push eax
call fcn.004178f6
mov esi, 0x42b618
mov word [ebp - 0x31c], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x314], eax
jne 0x408586
test esi, esi
je 0x408586
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x14
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
call fcn.004017af
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x15
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.004033d0
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x11
push eax
call ebx
test eax, eax
jge 0x4085cf
push eax
call fcn.004178f6
mov esi, 0x42b894
mov word [ebp - 0x2dc], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x2d4], eax
jne 0x4085fb
test esi, esi
je 0x4085fb
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x16
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
call fcn.004017af
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x17
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.004033d0
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x11
push eax
call ebx
test eax, eax
jge 0x408644
push eax
call fcn.004178f6
push edi
lea ecx, [ebp - 0x278]
call fcn.004017af
push eax
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x18
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x19
call fcn.004017af
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1a
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.004033d0
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0x18
push eax
call ebx
test eax, eax
jge 0x4086a3
push eax
call fcn.004178f6
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x11
call fcn.00406e16
cmp dword [ebp - 0x18], 0
jne 0x4086c2
push 0x80004003
call fcn.004178f6
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x78]
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
jge 0x4086de
push 0x42b498
push esi
push eax
call fcn.00417904
cmp dword [ebp + 8], 0
jne 0x4086fb
mov esi, 0x80004003
push esi
call fcn.004178f6
cmp dword [ebp + 8], 0
jne 0x4086fb
push esi
call fcn.004178f6
mov ecx, dword [ebp + 8]
mov esi, ecx
call fcn.00406aaa
push 1
pop ecx
sub ecx, eax
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x88]
test eax, eax
jge 0x408724
push 0x42b500
push esi
push eax
call fcn.00417904
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1b
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x1c
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1d
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x11
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x78]
jmp 0x408b8c
mov ecx, dword [ebp - 0x34]
cmp ecx, ebx
je 0x4087c2
call fcn.00401863
jmp 0x4087c4
xor eax, eax
push esi
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
jne 0x408b96
push ecx
mov edi, 0x42b87c
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x1e
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov ebx, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0x1f
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
xor esi, esi
mov byte [ebp - 4], 0xa
push esi
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x21
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x22
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push esi
mov byte [ebp - 4], 0xa
call fcn.0040f439
add esp, 0x14
cmp dword [ebp + 8], esi
jne 0x4088a1
push 0x80004003
call fcn.004178f6
mov ecx, dword [ebp + 8]
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
cmp edx, 1
jne 0x4097ee
push 0x17
push esi
push 0x42b298
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], esi
call fcn.00402e12
cmp eax, esi
jge 0x4088dc
cmp eax, 0x80004002
je 0x4088dc
push eax
call fcn.004178f6
push 2
push esi
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x24
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x25
call fcn.004017af
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x26
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004033d0
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x58c]
push eax
mov byte [ebp - 4], 0x24
call ebx
cmp eax, esi
jge 0x408937
push eax
call fcn.004178f6
mov esi, 0x42b618
mov word [ebp - 0x35c], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x354], eax
jne 0x408963
test esi, esi
je 0x408963
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x35c]
mov byte [ebp - 4], 0x27
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
call fcn.004017af
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x28
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.004033d0
lea eax, [ebp - 0x35c]
mov byte [ebp - 4], 0x24
push eax
call ebx
test eax, eax
jge 0x4089ac
push eax
call fcn.004178f6
mov esi, 0x42b894
mov word [ebp - 0x2fc], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x2f4], eax
jne 0x4089d8
test esi, esi
je 0x4089d8
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x2fc]
mov byte [ebp - 4], 0x29
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
call fcn.004017af
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2a
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.004033d0
lea eax, [ebp - 0x2fc]
mov byte [ebp - 4], 0x24
push eax
call ebx
test eax, eax
jge 0x408a21
push eax
call fcn.004178f6
push edi
lea ecx, [ebp - 0x13c]
call fcn.004017af
push eax
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 0x2b
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x2c
call fcn.004017af
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2d
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x2c
call fcn.004033d0
lea eax, [ebp - 0x3cc]
mov byte [ebp - 4], 0x2b
push eax
call ebx
test eax, eax
jge 0x408a80
push eax
call fcn.004178f6
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x24
call fcn.00406e16
cmp dword [ebp - 0x18], 0
jne 0x408a9f
push 0x80004003
call fcn.004178f6
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x74]
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
jge 0x408abb
push 0x42b498
push esi
push eax
call fcn.00417904
cmp dword [ebp + 8], 0
jne 0x408ad8
mov esi, 0x80004003
push esi
call fcn.004178f6
cmp dword [ebp + 8], 0
jne 0x408ad8
push esi
call fcn.004178f6
mov ecx, dword [ebp + 8]
mov esi, ecx
call fcn.00406aaa
push 1
pop ecx
sub ecx, eax
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x88]
test eax, eax
jge 0x408b01
push 0x42b500
push esi
push eax
call fcn.00417904
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2e
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x2f
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x30
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x24
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x74]
call fcn.00413e77
jmp 0x4097ee
cmp dword [ebp + 8], ebx
jne 0x408ba1
push edi
call fcn.004178f6
mov ecx, dword [ebp + 8]
call fcn.00406aaa
push 2
pop ebx
cdq
mov ecx, ebx
idiv ecx
cmp edx, 1
jne 0x40a108
lea ecx, [ebp - 0x30]
call fcn.00406da8
lea ecx, [ebp - 0x34]
call fcn.00406da8
mov ecx, dword [ebp - 0x30]
test ecx, ecx
je 0x408bd8
call fcn.00401863
jmp 0x408bda
xor eax, eax
push 0x42b858
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
jne 0x40a108
mov ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x408bfd
call fcn.00401863
jmp 0x408bff
xor eax, eax
push 0x42b844
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
jne 0x40a108
and dword [ebp - 0x38], eax
cmp dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x31
jne 0x408c26
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x1dc]
push eax
call fcn.004068c1
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x32
call fcn.0040667c
test eax, eax
jge 0x408c53
cmp eax, 0x80004002
je 0x408c53
push eax
call fcn.004178f6
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x31
call fcn.00413e77
push 0
lea ecx, [ebp - 0x38]
call fcn.0040cb5c
test al, al
jne 0x40a0fc
cmp dword [ebp - 0x38], 0
jne 0x408c80
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x38]
call fcn.00401941
cmp eax, 3
jne 0x40a0fc
cmp dword [ebp - 0x38], 0
jne 0x408c9d
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x6ec]
push ebx
push eax
call fcn.00401968
push eax
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x33
call fcn.004065d7
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x6ec]
push eax
mov byte [ebp - 4], 0x35
call ebx
xor esi, esi
cmp eax, esi
jge 0x408cd9
push eax
call fcn.004178f6
cmp dword [ebp - 0x38], esi
jne 0x408ce4
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x3ec]
push 3
push eax
call fcn.00401968
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x36
call fcn.004065d7
lea eax, [ebp - 0x3ec]
mov byte [ebp - 4], 0x38
push eax
call ebx
cmp eax, esi
jge 0x408d19
push eax
call fcn.004178f6
mov eax, dword [ebp - 0x64]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
mov dword [ecx], eax
call fcn.00406260
push ecx
lea eax, [ebp - 0x5c]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
call fcn.00410dfa
pop ecx
cmp eax, esi
pop ecx
jne 0x40901a
push 0x17
push esi
push 0x42b298
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], esi
call fcn.00402e12
cmp eax, esi
jge 0x408d6b
cmp eax, 0x80004002
je 0x408d6b
push eax
call fcn.004178f6
push 2
push esi
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 4], 0x39
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x3a
call fcn.004017af
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x3b
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x3a
call fcn.004033d0
lea eax, [ebp - 0x5ac]
mov byte [ebp - 4], 0x39
push eax
call ebx
cmp eax, esi
jge 0x408dc0
push eax
call fcn.004178f6
mov esi, 0x42b618
mov word [ebp - 0x33c], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x334], eax
jne 0x408dec
test esi, esi
je 0x408dec
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x33c]
mov byte [ebp - 4], 0x3c
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
call fcn.004017af
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x3d
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.004033d0
lea eax, [ebp - 0x33c]
mov byte [ebp - 4], 0x39
push eax
call ebx
test eax, eax
jge 0x408e35
push eax
call fcn.004178f6
mov esi, 0x42b894
mov word [ebp - 0x2b4], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x2ac], eax
jne 0x408e61
test esi, esi
je 0x408e61
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x2b4]
mov byte [ebp - 4], 0x3e
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
call fcn.004017af
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x3f
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004033d0
lea eax, [ebp - 0x2b4]
mov byte [ebp - 4], 0x39
push eax
call ebx
test eax, eax
jge 0x408eaa
push eax
call fcn.004178f6
push 0x42b808
lea ecx, [ebp - 0x144]
call fcn.004017af
push eax
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x40
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x41
call fcn.004017af
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x42
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x41
call fcn.004033d0
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x40
push eax
call ebx
test eax, eax
jge 0x408f0d
push eax
call fcn.004178f6
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x39
call fcn.00406e16
cmp dword [ebp - 0x18], 0
jne 0x408f28
push edi
call fcn.004178f6
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x60]
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
jge 0x408f44
push 0x42b498
push esi
push eax
call fcn.00417904
cmp dword [ebp + 8], 0
jne 0x408f5c
push edi
call fcn.004178f6
cmp dword [ebp + 8], 0
jne 0x408f5c
push edi
call fcn.004178f6
mov ecx, dword [ebp + 8]
mov esi, ecx
call fcn.00406aaa
push 1
pop ecx
sub ecx, eax
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x88]
test eax, eax
jge 0x408f85
push 0x42b500
push esi
push eax
call fcn.00417904
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x43
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x39
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x44
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x45
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x39
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x60]
call fcn.00413e77
jmp 0x4097d6
cmp dword [ebp - 0x38], esi
jne 0x409025
push edi
call fcn.004178f6
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x68c]
push 1
push eax
call fcn.00401968
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x46
call fcn.004065d7
lea eax, [ebp - 0x68c]
mov byte [ebp - 4], 0x48
push eax
call ebx
cmp eax, esi
jge 0x40905a
push eax
call fcn.004178f6
mov ecx, dword [ebp - 0x50]
cmp ecx, esi
je 0x409068
call fcn.00401863
jmp 0x40906a
xor eax, eax
push 0x42f160
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
jne 0x409415
push ecx
mov edi, 0x42b7f4
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x49
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov esi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
mov byte [ebp - 4], 0x4a
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x4b
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push 0
mov byte [ebp - 4], 0x48
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x4c
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x4d
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x4e
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
xor esi, esi
mov byte [ebp - 4], 0x48
push esi
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], esi
push 0x17
push esi
push 0x42b298
call fcn.00402e12
cmp eax, esi
jge 0x409161
cmp eax, 0x80004002
je 0x409161
push eax
call fcn.004178f6
push 2
push esi
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x4f
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x50
call fcn.004017af
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x51
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x50
call fcn.004033d0
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0x4f
push eax
call ebx
cmp eax, esi
jge 0x4091b6
push eax
call fcn.004178f6
mov esi, 0x42b618
mov word [ebp - 0x2cc], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x2c4], eax
jne 0x4091e2
test esi, esi
je 0x4091e2
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0x52
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
call fcn.004017af
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x53
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004033d0
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0x4f
push eax
call ebx
test eax, eax
jge 0x40922b
push eax
call fcn.004178f6
mov esi, 0x42b894
mov word [ebp - 0x2ec], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x2e4], eax
jne 0x409257
test esi, esi
je 0x409257
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 0x54
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
call fcn.004017af
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x55
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.004033d0
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 0x4f
push eax
call ebx
test eax, eax
jge 0x4092a0
push eax
call fcn.004178f6
push edi
lea ecx, [ebp - 0x22c]
call fcn.004017af
push eax
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 4], 0x56
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x57
call fcn.004017af
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x58
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x57
call fcn.004033d0
lea eax, [ebp - 0x5cc]
mov byte [ebp - 4], 0x56
push eax
call ebx
test eax, eax
jge 0x4092ff
push eax
call fcn.004178f6
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x4f
call fcn.00406e16
cmp dword [ebp - 0x18], 0
jne 0x40931e
push 0x80004003
call fcn.004178f6
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x68]
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
jge 0x40933a
push 0x42b498
push esi
push eax
call fcn.00417904
cmp dword [ebp + 8], 0
jne 0x409357
mov esi, 0x80004003
push esi
call fcn.004178f6
cmp dword [ebp + 8], 0
jne 0x409357
push esi
call fcn.004178f6
mov ecx, dword [ebp + 8]
mov esi, ecx
call fcn.00406aaa
push 1
pop ecx
sub ecx, eax
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x88]
test eax, eax
jge 0x409380
push 0x42b500
push esi
push eax
call fcn.00417904
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x59
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x4f
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x5a
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x5b
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x4f
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x68]
call fcn.00413e77
jmp 0x4097ce
mov dword [ebp - 0x3c], esi
push 0x17
push esi
push 0x42b538
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x5c
call fcn.00406271
cmp dword [ebp - 0x3c], esi
jne 0x409825
push ecx
mov edi, 0x42b7c0
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x5d
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x5e
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov esi, 0x42b464
mov ecx, esp
mov dword [ebp - 0x24], esp
push esi
mov byte [ebp - 4], 0x5f
call fcn.004017af
push 0
mov byte [ebp - 4], 0x5c
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x60
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x61
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x62
mov ecx, esp
mov dword [ebp - 0x24], esp
push esi
call fcn.004017af
xor esi, esi
mov byte [ebp - 4], 0x5c
push esi
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
push 0x17
push esi
push 0x42b298
call fcn.00402e12
cmp eax, esi
jge 0x409517
cmp eax, 0x80004002
je 0x409517
push eax
call fcn.004178f6
push 2
push esi
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x63
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x64
call fcn.004017af
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x65
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x64
call fcn.004033d0
lea eax, [ebp - 0x44c]
mov byte [ebp - 4], 0x63
push eax
call ebx
cmp eax, esi
jge 0x40956c
push eax
call fcn.004178f6
mov esi, 0x42b618
mov word [ebp - 0x30c], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x304], eax
jne 0x409598
test esi, esi
je 0x409598
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0x66
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
call fcn.004017af
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x67
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x66
call fcn.004033d0
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0x63
push eax
call ebx
test eax, eax
jge 0x4095e1
push eax
call fcn.004178f6
mov esi, 0x42b894
mov word [ebp - 0x32c], 8
push esi
call fcn.004179a3
test eax, eax
mov dword [ebp - 0x324], eax
jne 0x40960d
test esi, esi
je 0x40960d
push 0x8007000e
call fcn.004178f6
lea eax, [ebp - 0x32c]
mov byte [ebp - 4], 0x68
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
call fcn.004017af
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x69
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.004033d0
lea eax, [ebp - 0x32c]
mov byte [ebp - 4], 0x63
push eax
call ebx
test eax, eax
jge 0x409656
push eax
call fcn.004178f6
push edi
lea ecx, [ebp - 0x14c]
call fcn.004017af
push eax
lea ecx, [ebp - 0x71c]
mov byte [ebp - 4], 0x6a
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x6b
call fcn.004017af
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x6c
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004033d0
lea eax, [ebp - 0x71c]
mov byte [ebp - 4], 0x6a
push eax
call ebx
test eax, eax
jge 0x4096b5
push eax
call fcn.004178f6
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x63
call fcn.00406e16
cmp dword [ebp - 0x18], 0
jne 0x4096d4
push 0x80004003
call fcn.004178f6
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x70]
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
jge 0x4096f0
push 0x42b498
push esi
push eax
call fcn.00417904
cmp dword [ebp + 8], 0
jne 0x40970d
mov esi, 0x80004003
push esi
call fcn.004178f6
cmp dword [ebp + 8], 0
jne 0x40970d
push esi
call fcn.004178f6
mov ecx, dword [ebp + 8]
mov esi, ecx
call fcn.00406aaa
push 1
pop ecx
sub ecx, eax
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x88]
test eax, eax
jge 0x409736
push 0x42b500
push esi
push eax
call fcn.00417904
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x6d
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x63
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x6e
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x6f
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x63
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x70]
call fcn.00413e77
lea ecx, [ebp - 0x3c]
call fcn.00413e77
lea ecx, [ebp - 0x50]
call fcn.00406e16
lea ecx, [ebp - 0x64]
call fcn.00406e16
lea ecx, [ebp - 0x5c]
call fcn.00406e16
lea ecx, [ebp - 0x38]
call fcn.00413e77
lea ecx, [ebp - 0x34]
call fcn.00406e16
lea ecx, [ebp - 0x30]
call fcn.00406e16
lea ecx, [ebp - 0x28]
call fcn.00413e77
lea ecx, [ebp - 0x18]
call fcn.00413e77
lea ecx, [ebp - 0x2c]
call fcn.00406e16
lea ecx, [ebp + 8]
call fcn.00413e77
xor eax, eax
jmp 0x40ca83
push 0x42b7b8
lea ecx, [ebp - 0x108]
call fcn.004017af
lea eax, [ebp - 0x50]
mov ecx, 0x42f3b4
push eax
lea eax, [ebp - 0x154]
push eax
mov byte [ebp - 4], 0x70
call fcn.00403115
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x71
push ecx
lea ecx, [ebp - 0x1e4]
push ecx
mov ecx, eax
call fcn.00403115
push eax
lea ecx, [ebp - 0x50]
call fcn.004061df
lea ecx, [ebp - 0x1e4]
call fcn.00406e16
lea ecx, [ebp - 0x154]
call fcn.00406e16
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x5c
call fcn.00406e16
lea ecx, [ebp - 0x50]
call fcn.0040ca94
lea ecx, [ebp - 0x7b4]
push 0x4000
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_OpenFile]
push ecx
cmp eax, 0xffffffff
mov ecx, esp
jne 0x409c15
mov esi, 0x42b7a0
mov dword [ebp - 0x14], esp
push esi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x72
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov edi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
mov byte [ebp - 4], 0x73
call fcn.004017af
push ecx
mov ebx, 0x42b464
mov ecx, esp
mov dword [ebp - 0x24], esp
push ebx
mov byte [ebp - 4], 0x74
call fcn.004017af
push 0
mov byte [ebp - 4], 0x5c
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x75
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x76
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x77
mov ecx, esp
mov dword [ebp - 0x24], esp
push ebx
call fcn.004017af
xor edi, edi
mov byte [ebp - 4], 0x5c
push edi
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp - 0xa0]
push 0x17
push edi
push 0x42b298
call fcn.0040cbc0
push 2
push edi
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x78
call fcn.004063bf
mov byte [ebp - 4], 0x79
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
call fcn.004017af
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x7a
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x79
call fcn.004033d0
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x78
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x5ec]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0x7b
call fcn.004017af
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x7c
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.004033d0
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x78
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x48c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0x7d
call fcn.004017af
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x7e
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x7d
call fcn.004033d0
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 0x78
call fcn.004018bb
push esi
lea ecx, [ebp - 0x254]
call fcn.004017af
push eax
lea ecx, [ebp - 0x6ac]
mov byte [ebp - 4], 0x7f
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x80
call fcn.004017af
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x81
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x80
call fcn.004033d0
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x6ac]
call fcn.004018bb
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x78
call fcn.00406e16
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
push 1
pop ecx
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x82
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x83
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x84
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x78
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0xa0]
call fcn.00413e77
lea ecx, [ebp - 0x3c]
call fcn.00413e77
lea ecx, [ebp - 0x50]
call fcn.00406e16
lea ecx, [ebp - 0x64]
call fcn.00406e16
lea ecx, [ebp - 0x5c]
call fcn.00406e16
lea ecx, [ebp - 0x38]
call fcn.00413e77
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00406e16
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00406e16
lea ecx, [ebp - 0x28]
call fcn.00413e77
lea ecx, [ebp - 0x18]
call fcn.00413e77
and byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00406e16
xor esi, esi
jmp 0x40ca79
lea eax, [ebp - 0x50]
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x85
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.0040d13e
cmp ax, si
push ecx
jne 0x409f3a
mov esi, 0x42b788
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x86
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov edi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
mov byte [ebp - 4], 0x87
call fcn.004017af
push ecx
mov ebx, 0x42b464
mov ecx, esp
mov dword [ebp - 0x24], esp
push ebx
mov byte [ebp - 4], 0x88
call fcn.004017af
push 0
mov byte [ebp - 4], 0x5c
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x89
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x8a
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x8b
mov ecx, esp
mov dword [ebp - 0x24], esp
push ebx
call fcn.004017af
xor edi, edi
mov byte [ebp - 4], 0x5c
push edi
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp - 0x84]
push 0x17
push edi
push 0x42b298
call fcn.0040cbc0
push 2
push edi
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0x8c
call fcn.004063bf
mov byte [ebp - 4], 0x8d
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
call fcn.004017af
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x8e
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x8d
call fcn.004033d0
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0x8c
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x60c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0x8f
call fcn.004017af
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x90
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x8f
call fcn.004033d0
lea ecx, [ebp - 0x60c]
mov byte [ebp - 4], 0x8c
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x4cc]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0x91
call fcn.004017af
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x92
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x91
call fcn.004033d0
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x8c
call fcn.004018bb
push esi
lea ecx, [ebp - 0x15c]
call fcn.004017af
push eax
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x93
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x94
call fcn.004017af
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x95
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x94
call fcn.004033d0
lea ecx, [ebp - 0x70c]
mov byte [ebp - 4], 0x93
call fcn.004018bb
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x8c
call fcn.00406e16
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x84]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
push 1
pop ecx
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x96
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x8c
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x97
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x98
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x8c
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x84]
jmp 0x409bad
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406b8f
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x99
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.0040d2ca
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x9a
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.0040d19a
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004177ce
mov ecx, eax
call fcn.00406ad4
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x9b
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.00406b11
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
lea ecx, [ebp - 0x3c]
mov esi, eax
call fcn.004177ce
push esi
mov ecx, eax
call fcn.0040d2a6
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp - 0x3c]
mov ebx, eax
call fcn.004177ce
push ebx
mov esi, eax
call fcn.004186af
pop ecx
inc eax
push eax
mov ecx, esi
call fcn.0040d282
lea ecx, [ebp - 0x3c]
call fcn.004177ce
push 0
mov ecx, eax
call fcn.0040d261
lea ecx, [ebp + 8]
call fcn.004177ce
lea ecx, [ebp - 0x1ec]
push ecx
mov ecx, eax
call fcn.00406a70
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x9c
call fcn.00403390
mov esi, eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x9d
call fcn.004177ce
push esi
mov ecx, eax
call fcn.0040d35b
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x9c
call fcn.004018bb
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x5c
call fcn.00406e16
lea ecx, [ebp - 0x3c]
call fcn.0040cb59
push eax
mov ecx, 0x42f180
call fcn.0040cbfc
lea ecx, [ebp - 0x3c]
call fcn.004177ce
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
lea ecx, [ebp - 0x3c]
call fcn.00413e77
lea ecx, [ebp - 0x50]
call fcn.00406e16
lea ecx, [ebp - 0x64]
call fcn.00406e16
lea ecx, [ebp - 0x5c]
call fcn.00406e16
lea ecx, [ebp - 0x38]
call fcn.00413e77
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00406e16
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00406e16
lea ecx, [ebp - 0x28]
call fcn.00413e77
lea ecx, [ebp - 0x18]
call fcn.00413e77
and byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00406e16
push 1
pop esi
jmp 0x40ca79
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
call fcn.00413e77
xor edi, edi
lea ecx, [ebp - 0x4c]
push edi
call fcn.0040cac5
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x9e
call fcn.00413fdf
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x9f
call fcn.004177ce
lea ecx, [ebp - 0x164]
push ecx
mov ecx, eax
call fcn.00406a04
push eax
lea ecx, [ebp - 0x48]
call fcn.004061df
lea ecx, [ebp - 0x164]
call fcn.00406e16
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004017af
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0x48]
push eax
call section..text
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040cbee
lea ecx, [ebp - 0x234]
call fcn.00413e77
push edi
lea ecx, [ebp - 0x4c]
call fcn.0040cb5c
test al, al
je 0x40a4b9
push ecx
mov esi, 0x42b778
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xa0
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov edi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
mov byte [ebp - 4], 0xa1
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xa2
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push 0
mov byte [ebp - 4], 0x9f
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xa3
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0xa4
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xa5
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push 0
mov byte [ebp - 4], 0x9f
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
cdq
mov ecx, ebx
push 1
idiv ecx
pop edi
cmp edx, edi
jne 0x40b720
push 0x17
push 0
push 0x42b298
lea ecx, [ebp - 0x88]
call fcn.0040cbc0
push ebx
push 0
lea ecx, [ebp - 0x62c]
mov byte [ebp - 4], 0xa6
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0xa7
call fcn.004017af
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xa8
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xa7
call fcn.004033d0
lea ecx, [ebp - 0x62c]
mov byte [ebp - 4], 0xa6
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x37c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0xa9
call fcn.004017af
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xaa
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xa9
call fcn.004033d0
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0xa6
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x6cc]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0xab
call fcn.004017af
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xac
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xab
call fcn.004033d0
lea ecx, [ebp - 0x6cc]
mov byte [ebp - 4], 0xa6
call fcn.004018bb
push esi
lea ecx, [ebp - 0x16c]
call fcn.004017af
push eax
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0xad
call fcn.00403390
mov byte [ebp - 4], 0xae
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
call fcn.004017af
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xaf
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xae
call fcn.004033d0
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0xad
call fcn.004018bb
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0xa6
call fcn.00406e16
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x88]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
mov ecx, edi
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb0
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xa6
call fcn.00406bcc
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xb1
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb2
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0xa6
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x88]
call fcn.00413e77
jmp 0x40b720
push edi
lea ecx, [ebp - 0x44]
call fcn.0040cac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb3
call fcn.004177ce
mov ecx, eax
call fcn.0040d070
cmp ax, 0xffff
je 0x40a512
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x1f4]
push ecx
mov ecx, eax
call fcn.004068c1
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb4
call fcn.0040ce47
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0xb3
call fcn.00413e77
jmp 0x40a5b8
push edi
lea ecx, [ebp - 0xd8]
call fcn.0040cac5
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb5
call fcn.004177ce
lea ecx, [ebp - 0x174]
push ecx
mov ecx, eax
call fcn.004068f3
push eax
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xb6
call fcn.0040ce6a
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0xb5
call fcn.00413e77
push 0x42f3f8
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b8ec
call fcn.004017af
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xb7
call fcn.004177ce
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 0xb5
push ecx
mov ecx, eax
call fcn.004067c7
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb8
call fcn.0040cb36
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 0xb5
call fcn.004018bb
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xb3
call fcn.00413e77
lea ecx, [ebp - 0x18]
call fcn.004177ce
mov ecx, eax
call fcn.0040d0ca
cmp eax, edi
mov dword [ebp - 0x14], eax
jle 0x40ac85
push 0x17
push edi
push 0x42b768
lea ecx, [ebp - 0xcc]
call fcn.0040cc09
mov esi, 0x42b760
lea ecx, [ebp - 0x24c]
push esi
mov byte [ebp - 4], 0xb9
call fcn.004017af
mov dword [ebp - 0x1c], eax
push 3
lea ecx, [ebp - 0x54c]
push dword [ebp - 0x40]
mov byte [ebp - 4], 0xba
call fcn.00406408
push eax
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xbb
call fcn.004065d7
mov dword [ebp - 0x20], eax
push 0x42b75c
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0xbc
call fcn.004017af
mov dword [ebp - 0x24], eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xbd
call fcn.004177ce
lea ecx, [ebp - 0x1bc]
push ecx
mov ecx, eax
call fcn.00406a04
mov dword [ebp - 0x17c], eax
push 0x42b758
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xbe
call fcn.004017af
mov dword [ebp - 0x264], eax
push esi
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0xbf
call fcn.004017af
mov edi, eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xc0
call fcn.004177ce
lea ecx, [ebp - 0x214]
push ecx
mov ecx, eax
call fcn.00406ad4
mov esi, eax
push 0x42b75c
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0xc1
call fcn.004017af
mov ebx, eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xc2
call fcn.004177ce
lea ecx, [ebp - 0x244]
push ecx
mov ecx, eax
call fcn.0040d31e
lea ecx, [ebp - 0x1a4]
push ebx
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xc3
call fcn.00403115
lea ecx, [ebp - 0x20c]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xc4
call fcn.00403115
lea ecx, [ebp - 0x19c]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xc5
call fcn.00403115
push dword [ebp - 0x264]
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xc6
push ecx
mov ecx, eax
call fcn.00403115
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0xc7
push ecx
mov ecx, eax
call fcn.00403115
push dword [ebp - 0x24]
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0xc8
push ecx
mov ecx, eax
call fcn.00403115
push dword [ebp - 0x20]
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0xc9
push ecx
mov ecx, eax
call fcn.00403115
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xca
push ecx
mov ecx, eax
call fcn.00403115
lea ecx, [ebp - 0x18c]
call fcn.00406e16
lea ecx, [ebp - 0x204]
call fcn.00406e16
lea ecx, [ebp - 0x194]
call fcn.00406e16
lea ecx, [ebp - 0x25c]
call fcn.00406e16
lea ecx, [ebp - 0x19c]
call fcn.00406e16
lea ecx, [ebp - 0x20c]
call fcn.00406e16
lea ecx, [ebp - 0x1a4]
call fcn.00406e16
lea ecx, [ebp - 0x244]
call fcn.00406e16
lea ecx, [ebp - 0x1ac]
call fcn.00406e16
lea ecx, [ebp - 0x214]
call fcn.00406e16
lea ecx, [ebp - 0x1b4]
call fcn.00406e16
lea ecx, [ebp - 0x27c]
call fcn.00406e16
lea ecx, [ebp - 0x1bc]
call fcn.00406e16
lea ecx, [ebp - 0x21c]
call fcn.00406e16
lea ecx, [ebp - 0x1c4]
call fcn.00406e16
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0xcd
call fcn.004018bb
lea ecx, [ebp - 0x24c]
call fcn.00406e16
push ecx
lea eax, [ebp - 0xc4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00401790
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xdd
call fcn.004177ce
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xcc
push ecx
mov ecx, eax
call fcn.0040d409
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xde
call fcn.00403348
test eax, eax
jne 0x40a8ca
push ecx
lea eax, [ebp - 0xc4]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00401790
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xdf
call fcn.004177ce
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0xde
push ecx
mov ecx, eax
call fcn.0040d473
push eax
lea ecx, [ebp - 0x98]
call fcn.004061df
lea ecx, [ebp - 0x1cc]
call fcn.00406e16
lea ecx, [ebp - 0x98]
call fcn.00403348
test eax, eax
jne 0x40ac1d
push ecx
mov edi, 0x42b73c
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xe0
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov esi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
mov byte [ebp - 4], 0xe1
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xe2
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push 0
mov byte [ebp - 4], 0xde
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xe3
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0xe4
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xe5
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push 0
mov byte [ebp - 4], 0xde
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
push 1
pop ebx
cmp edx, ebx
jne 0x40abf7
push 0x17
push 0
push 0x42b298
lea ecx, [ebp - 0x90]
call fcn.0040cbc0
push 2
push 0
lea ecx, [ebp - 0x72c]
mov byte [ebp - 4], 0xe6
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0xe7
call fcn.004017af
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xe8
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xe7
call fcn.004033d0
lea ecx, [ebp - 0x72c]
mov byte [ebp - 4], 0xe6
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x56c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0xe9
call fcn.004017af
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xea
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xe9
call fcn.004033d0
lea ecx, [ebp - 0x56c]
mov byte [ebp - 4], 0xe6
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x38c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0xeb
call fcn.004017af
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xec
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xeb
call fcn.004033d0
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0xe6
call fcn.004018bb
push edi
lea ecx, [ebp - 0x224]
call fcn.004017af
push eax
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0xed
call fcn.00403390
mov byte [ebp - 4], 0xee
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
call fcn.004017af
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xef
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xee
call fcn.004033d0
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0xed
call fcn.004018bb
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0xe6
call fcn.00406e16
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x90]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
mov ecx, ebx
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xf0
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xe6
call fcn.00406bcc
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xf1
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xf2
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0xe6
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x90]
call fcn.00413e77
lea ecx, [ebp - 0x98]
call fcn.00406e16
lea ecx, [ebp - 0xc4]
call fcn.00406e16
lea ecx, [ebp - 0xcc]
call fcn.00413e77
jmp 0x40b718
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x36c]
push eax
call fcn.00403390
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xf3
call fcn.004177ce
lea ecx, [ebp - 0x36c]
push ecx
mov ecx, eax
push dword [ebp - 0x14]
call fcn.0040ce8d
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0xde
call fcn.004018bb
lea ecx, [ebp - 0x98]
call fcn.00406e16
lea ecx, [ebp - 0xc4]
call fcn.00406e16
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xb3
call fcn.00413e77
push 2
xor edi, edi
pop ebx
push edi
lea ecx, [ebp - 0x44]
call fcn.0040cb5c
test al, al
je 0x40aca2
push 0x17
push edi
push 0x42b2a8
lea ecx, [ebp - 0x44]
call fcn.00402f0e
lea ecx, [ebp - 0x44]
call fcn.004177ce
mov ecx, eax
call fcn.00401941
cmp eax, 0xf
jle 0x40afe5
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b718
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xf4
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov esi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
mov byte [ebp - 4], 0xf5
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xf6
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
xor edi, edi
mov byte [ebp - 4], 0xb3
push edi
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xf7
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0xf8
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xf9
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push edi
mov byte [ebp - 4], 0xb3
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
cdq
idiv ebx
cmp edx, 1
jne 0x40b718
push 0x17
push edi
push 0x42b298
lea ecx, [ebp - 0x94]
call fcn.0040cbc0
mov ebx, 0xfa
push 2
push edi
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], bl
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0xfb
call fcn.004017af
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xfc
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xfb
call fcn.004033d0
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], bl
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x3dc]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0xfd
call fcn.004017af
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xfe
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0xfd
call fcn.004033d0
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], bl
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x3fc]
call fcn.00406464
or byte [ebp - 4], 0xff
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
call fcn.004017af
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0x100
call fcn.004177ce
mov ecx, eax
mov dword [ebp - 4], 0xff
call fcn.004033d0
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], bl
call fcn.004018bb
push 0x42b6f4
lea ecx, [ebp - 0x134]
call fcn.004017af
push eax
lea ecx, [ebp - 0x41c]
mov dword [ebp - 4], 0x101
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 2
call fcn.004017af
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 3
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.004033d0
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 1
call fcn.004018bb
lea ecx, [ebp - 0x134]
mov dword [ebp - 4], ebx
call fcn.00406e16
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x94]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
push 1
pop ecx
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x104
call fcn.004177ce
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.00406bcc
push 1
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov dword [ebp - 4], 0x105
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov dword [ebp - 4], ebx
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x94]
call fcn.00413e77
jmp 0x40b718
lea ecx, [ebp - 0x29c]
call fcn.004018ad
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x107
call fcn.004177ce
lea ecx, [ebp - 0x138]
push ecx
mov ecx, eax
call fcn.00406a04
push eax
lea ecx, [ebp - 0x48]
call fcn.004061df
lea ecx, [ebp - 0x138]
call fcn.00406e16
push 1
push ecx
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
lea eax, [ebp - 0x29c]
lea ecx, [ebp - 0x18]
push eax
mov byte [ebp - 4], 8
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, eax
call fcn.00406887
push ecx
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 7
call fcn.00401430
test al, al
jne 0x40b396
push 0x42b6ec
lea ecx, [ebp - 0xe0]
call fcn.004017af
push ecx
lea eax, [ebp - 0xe0]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xa
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov esi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
mov byte [ebp - 4], 0xb
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push 0
mov byte [ebp - 4], 9
call fcn.0040f439
add esp, 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0xd
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x20], esp
push esi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push 0
mov byte [ebp - 4], 9
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
cdq
mov ecx, ebx
push 1
idiv ecx
pop edi
cmp edx, edi
jne 0x40b386
push 0x17
push 0
push 0x42b298
lea ecx, [ebp - 0x8c]
call fcn.0040cbc0
push ebx
push 0
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x10
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x11
call fcn.004017af
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x12
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.004033d0
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x10
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x45c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0x13
call fcn.004017af
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x14
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.004033d0
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 0x10
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x47c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0x15
call fcn.004017af
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x16
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.004033d0
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 0x10
call fcn.004018bb
lea eax, [ebp - 0xe0]
lea ecx, [ebp - 0x49c]
push eax
call fcn.00403390
push eax
push ecx
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
call fcn.004017af
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x18
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.004033d0
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 0x10
call fcn.004018bb
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
mov ecx, edi
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x19
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00406bcc
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x1a
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1b
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x10
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x8c]
call fcn.00413e77
lea ecx, [ebp - 0xe0]
call fcn.00406e16
jmp 0x40b706
lea eax, [ebp - 0x29c]
lea ecx, [ebp - 0x58]
push eax
call fcn.0040cb9a
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x1c
call fcn.004177ce
lea ecx, [ebp - 0x58]
mov ebx, eax
call fcn.0040cb59
push eax
mov ecx, ebx
call fcn.0040cfcc
push 2
push 0
lea ecx, [ebp - 0x4dc]
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x1d
call fcn.004017af
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1e
call fcn.004177ce
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, eax
call fcn.004067c7
mov ecx, eax
mov byte [ebp - 4], 0x1f
call fcn.00406492
lea ecx, [ebp - 0x4bc]
mov ebx, eax
mov byte [ebp - 4], 0x1d
call fcn.004018bb
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x1c
call fcn.004018bb
test bx, bx
push 0x42b454
jne 0x40b739
lea ecx, [ebp - 0x1a8]
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
push ecx
push 0x42b44c
lea ecx, [ebp - 0x51c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x21
call fcn.004017af
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x22
call fcn.004177ce
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 0x21
push ecx
mov ecx, eax
call fcn.004067c7
push eax
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x23
call fcn.004065d7
mov dword [ebp - 0x20], eax
push 0x42b6e4
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x24
call fcn.004017af
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x25
call fcn.004177ce
lea ecx, [ebp - 0x190]
push ecx
mov ecx, eax
call fcn.00406887
mov dword [ebp - 0x14], eax
push 0x42b6d8
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x26
call fcn.004017af
mov edi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.004177ce
lea ecx, [ebp - 0x180]
push ecx
mov ecx, eax
call fcn.0040684d
mov ebx, eax
push 0x42b6d0
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x28
call fcn.004017af
mov esi, eax
push 0x42b414
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x29
call fcn.004017af
lea ecx, [ebp - 0x168]
push esi
mov byte [ebp - 4], 0x2a
push ecx
mov ecx, eax
call fcn.00403115
lea ecx, [ebp - 0x160]
push ebx
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.00403115
lea ecx, [ebp - 0x158]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2c
call fcn.00403115
push dword [ebp - 0x14]
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x2d
push ecx
mov ecx, eax
call fcn.00403115
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x2e
push ecx
mov ecx, eax
call fcn.00403115
push dword [ebp - 0x20]
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, eax
call fcn.00403115
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.00403115
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 0x31
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x32
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b070
call fcn.004017af
push 0
mov byte [ebp - 4], 0x30
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp - 0x140]
call fcn.00406e16
lea ecx, [ebp - 0x110]
call fcn.00406e16
lea ecx, [ebp - 0x150]
call fcn.00406e16
lea ecx, [ebp - 0x158]
call fcn.00406e16
lea ecx, [ebp - 0x160]
call fcn.00406e16
lea ecx, [ebp - 0x168]
call fcn.00406e16
lea ecx, [ebp - 0x170]
call fcn.00406e16
lea ecx, [ebp - 0x178]
call fcn.00406e16
lea ecx, [ebp - 0x180]
call fcn.00406e16
lea ecx, [ebp - 0x188]
call fcn.00406e16
lea ecx, [ebp - 0x190]
call fcn.00406e16
lea ecx, [ebp - 0x198]
call fcn.00406e16
lea ecx, [ebp - 0x1a0]
call fcn.00406e16
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 0x21
call fcn.004018bb
lea ecx, [ebp - 0x51c]
mov byte [ebp - 4], 0x20
call fcn.004018bb
lea ecx, [ebp - 0x1a8]
call fcn.00406e16
push ecx
lea eax, [ebp - 0x58]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
push dword [ebp - 0x40]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x34
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, eax
call fcn.00406a04
mov byte [ebp - 4], 0x1c
call fcn.00410803
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.00413e77
lea ecx, [ebp - 0x29c]
mov dword [ebp - 4], 0xb3
call fcn.004018bb
lea ecx, [ebp - 0x44]
call fcn.00413e77
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x9e
call fcn.00406e16
lea ecx, [ebp - 0x4c]
call fcn.00413e77
jmp 0x409bda
lea ecx, [ebp - 0x1f8]
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x35
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
push ecx
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x1f0]
push ecx
mov ecx, eax
call fcn.00406887
mov dword [ebp - 0x14], eax
push 0x42b6c4
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x36
call fcn.004017af
mov edi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x37
call fcn.004177ce
lea ecx, [ebp - 0x1e0]
push ecx
mov ecx, eax
call fcn.0040684d
mov esi, eax
push 0x42b6d0
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x38
call fcn.004017af
mov ebx, eax
push 0x42b6c0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x39
call fcn.004017af
lea ecx, [ebp - 0x1c8]
push ebx
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x3a
call fcn.00403115
lea ecx, [ebp - 0x1c0]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.00403115
lea ecx, [ebp - 0x1b8]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.00403115
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, eax
call fcn.00403115
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00403115
push ecx
mov byte [ebp - 4], 0x3f
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x40
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x41
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b12c
call fcn.004017af
xor edi, edi
mov byte [ebp - 4], 0x3e
push edi
call fcn.0040f439
add esp, 0x14
lea ecx, [ebp - 0x1b0]
call fcn.00406e16
lea ecx, [ebp - 0x1b8]
call fcn.00406e16
lea ecx, [ebp - 0x1c0]
call fcn.00406e16
lea ecx, [ebp - 0x1c8]
call fcn.00406e16
lea ecx, [ebp - 0x1d0]
call fcn.00406e16
lea ecx, [ebp - 0x1d8]
call fcn.00406e16
lea ecx, [ebp - 0x1e0]
call fcn.00406e16
lea ecx, [ebp - 0x1e8]
call fcn.00406e16
lea ecx, [ebp - 0x1f0]
call fcn.00406e16
lea ecx, [ebp - 0x1f8]
call fcn.00406e16
push ecx
lea eax, [ebp - 0x58]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
push dword [ebp - 0x40]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x42
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, eax
call fcn.00406a04
mov byte [ebp - 4], 0x1c
call fcn.00410803
add esp, 0xc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
push 1
pop ebx
cmp edx, ebx
jne 0x40bcf9
mov esi, 0x42f160
lea ecx, [ebp - 0xc8]
push esi
call fcn.004017af
push esi
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x43
call fcn.004017af
lea ecx, [ebp - 0x34c]
call fcn.004018ad
lea eax, [ebp - 0x34c]
mov byte [ebp - 4], 0x45
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b8ec
call fcn.004017af
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x46
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.0040cf13
cmp ax, di
je 0x40bbb6
lea eax, [ebp - 0x34c]
lea ecx, [ebp - 0xdc]
push eax
call fcn.0040cae2
push edi
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x47
call fcn.0040cb7b
test al, al
je 0x40bba7
lea eax, [ebp - 0xc8]
push eax
push ecx
lea eax, [ebp - 0xdc]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
call fcn.004150a0
pop ecx
pop ecx
lea ecx, [ebp - 0xc8]
call fcn.0040ca94
push esi
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
je 0x40bba7
fldz
lea eax, [ebp - 0x274]
fstp qword [ebp - 0x2bc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x274]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToSystemTime]
movzx eax, word [ebp - 0x268]
push eax
movzx eax, word [ebp - 0x26a]
push eax
movzx eax, word [ebp - 0x26c]
push eax
movzx eax, word [ebp - 0x26e]
push eax
movzx eax, word [ebp - 0x272]
push eax
movzx eax, word [ebp - 0x274]
push eax
lea eax, [ebp - 0x9b4]
push 0x42b8c8
push eax
call fcn.0041865d
add esp, 0x20
lea ecx, [ebp - 0xf8]
push 0x42b8c0
call fcn.004017af
lea eax, [ebp - 0x9b4]
lea ecx, [ebp - 0xe4]
push eax
mov byte [ebp - 4], 0x48
call fcn.004017af
push 0x42b4a8
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x49
call fcn.004017af
lea eax, [ebp - 0xf0]
mov ecx, 0x42f3b0
push eax
lea eax, [ebp - 0x210]
push eax
mov byte [ebp - 4], 0x4a
call fcn.00403115
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x4b
push ecx
lea ecx, [ebp - 0x208]
push ecx
mov ecx, eax
call fcn.00403115
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x4c
push ecx
lea ecx, [ebp - 0x200]
push ecx
mov ecx, eax
call fcn.00403115
push eax
lea ecx, [ebp - 0xb8]
call fcn.004061df
lea ecx, [ebp - 0x200]
call fcn.00406e16
lea ecx, [ebp - 0x208]
call fcn.00406e16
lea ecx, [ebp - 0x210]
call fcn.00406e16
lea ecx, [ebp - 0xf0]
call fcn.00406e16
lea ecx, [ebp - 0xe4]
call fcn.00406e16
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x47
call fcn.00406e16
push 0x17
push edi
push 0x42b4e8
lea ecx, [ebp - 0xe8]
call fcn.0040cc37
push 6
push ecx
lea eax, [ebp - 0xb8]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
push ecx
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00401790
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x4f
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.0040d38c
lea ecx, [ebp - 0xe8]
call fcn.00413e77
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x45
call fcn.00413e77
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
mov ecx, ebx
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x50
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.00406bcc
push ebx
push ebx
push ecx
lea eax, [ebp - 0xb8]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00401790
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x51
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x52
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x45
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0x44
call fcn.004018bb
lea ecx, [ebp - 0xb8]
call fcn.00406e16
lea ecx, [ebp - 0xc8]
call fcn.00406e16
lea ecx, [ebp - 0x58]
call fcn.00413e77
lea ecx, [ebp - 0x29c]
mov dword [ebp - 4], 0xb3
call fcn.004018bb
lea ecx, [ebp - 0x44]
call fcn.00413e77
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x9e
call fcn.00406e16
lea ecx, [ebp - 0x4c]
call fcn.00413e77
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x34]
call fcn.00406e16
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00406e16
lea ecx, [ebp - 0x28]
call fcn.00413e77
lea ecx, [ebp - 0x18]
call fcn.00413e77
and byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00406e16
mov esi, ebx
jmp 0x40ca79
lea ecx, [ebp - 0x58]
call fcn.00413e77
lea ecx, [ebp - 0x29c]
mov dword [ebp - 4], 0xb3
call fcn.004018bb
lea ecx, [ebp - 0x44]
call fcn.00413e77
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x9e
call fcn.00406e16
lea ecx, [ebp - 0x4c]
call fcn.00413e77
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00406e16
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00406e16
jmp 0x40c107
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0xac]
push ecx
mov ecx, eax
call fcn.0040d036
mov ebx, 0x42f160
lea ecx, [ebp - 0xa8]
push ebx
mov dword [ebp - 4], 0x153
call fcn.004017af
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x54
call fcn.0040ca94
push ebx
push eax
call fcn.00417b40
pop ecx
test eax, eax
pop ecx
je 0x40c50e
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x218]
push ecx
mov ecx, eax
call fcn.004068c1
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x55
call fcn.00406550
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x57
call fcn.00413e77
push 1
pop esi
lea ecx, [ebp - 0xc0]
call fcn.004177ce
mov ecx, eax
call fcn.00401941
cmp esi, eax
jg 0x40be3f
lea ecx, [ebp - 0xc0]
call fcn.004177ce
lea ecx, [ebp - 0x53c]
push esi
push ecx
mov ecx, eax
call fcn.00401968
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x58
call fcn.004065d7
push eax
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x59
call fcn.0040317a
lea ecx, [ebp - 0x220]
call fcn.00406e16
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0x57
call fcn.004018bb
inc esi
jmp 0x40bdd2
lea ecx, [ebp - 0xa8]
call fcn.0040ca94
lea ecx, [ebp - 0xac]
mov ebx, eax
call fcn.0040ca94
xor edi, edi
push 5
push edi
push ebx
push eax
push 0x42b6b8
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jle 0x40c15b
push dword [ebp - 0x40]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b3ec
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x5a
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x5b
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x5c
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push edi
mov byte [ebp - 4], 0x57
call fcn.0040f439
add esp, 0x18
lea ecx, [ebp - 0xa4]
push 0x17
push edi
push 0x42b298
call fcn.0040cbc0
push 0x17
push edi
push 0x42b2a8
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x5d
call fcn.0040cb08
push 2
push 0xffffffffffffffff
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x5e
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x5f
call fcn.004017af
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x60
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x5f
call fcn.004033d0
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x5e
call fcn.004018bb
push 1
lea ecx, [ebp - 0xec]
pop edi
push edi
call fcn.0040cb59
push eax
lea ecx, [ebp - 0x57c]
call fcn.0040caa3
mov byte [ebp - 4], 0x61
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b8ec
call fcn.004017af
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x62
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.0040cebf
lea ecx, [ebp - 0x57c]
mov byte [ebp - 4], 0x5e
call fcn.004018bb
push ecx
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
push dword [ebp - 0x40]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x63
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, eax
call fcn.00406a04
mov byte [ebp - 4], 0x5e
call fcn.00410803
add esp, 0xc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
cmp edx, edi
jne 0x40c0c9
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0xa4]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov ebx, eax
call fcn.004177ce
mov ecx, edi
sub ecx, ebx
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x64
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x5e
call fcn.00406bcc
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x65
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x66
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x5e
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0xec]
call fcn.00413e77
lea ecx, [ebp - 0xa4]
call fcn.00413e77
lea ecx, [ebp - 0xc0]
call fcn.00413e77
lea ecx, [ebp - 0xa8]
call fcn.00406e16
lea ecx, [ebp - 0xac]
mov dword [ebp - 4], 4
call fcn.00406e16
inc dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.004177ce
mov ecx, eax
call fcn.00406981
cmp dword [ebp - 0x40], eax
jge 0x40c82b
lea ecx, [ebp - 0x28]
call fcn.004177ce
push dword [ebp - 0x40]
lea ecx, [ebp - 0x228]
push ecx
mov ecx, eax
call fcn.0040694c
push eax
lea ecx, [ebp - 0x18]
call fcn.0040cbee
lea ecx, [ebp - 0x228]
call fcn.00413e77
xor ebx, ebx
mov edi, 0x80004003
jmp 0x407a9c
push eax
push 0x42b6ac
lea ecx, [ebp - 0x124]
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x67
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
push ecx
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x11c]
push ecx
mov ecx, eax
call fcn.0040d036
mov esi, eax
push 0x42b69c
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x68
call fcn.004017af
mov ebx, eax
push 0x42b414
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x69
call fcn.004017af
lea ecx, [ebp - 0x238]
push ebx
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.00403115
lea ecx, [ebp - 0x230]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.00403115
mov ecx, eax
mov byte [ebp - 4], 0x6c
call fcn.00403115
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x6d
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x6e
mov ecx, esp
mov dword [ebp - 0x20], esp
push 0x42b46c
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x6f
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push edi
mov byte [ebp - 4], 0x6c
call fcn.0040f439
add esp, 0x18
lea ecx, [ebp - 0x230]
call fcn.00406e16
lea ecx, [ebp - 0x238]
call fcn.00406e16
lea ecx, [ebp - 0x240]
call fcn.00406e16
lea ecx, [ebp - 0x114]
call fcn.00406e16
lea ecx, [ebp - 0x11c]
call fcn.00406e16
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x57
call fcn.00406e16
push 0x17
push edi
push 0x42b298
lea ecx, [ebp - 0x6c]
call fcn.0040cbc0
push 2
push edi
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 0x70
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x71
call fcn.004017af
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x72
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.004033d0
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 0x70
call fcn.004018bb
push 0x42b694
lea ecx, [ebp - 0x5bc]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0x73
call fcn.004017af
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x74
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x73
call fcn.004033d0
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x70
call fcn.004018bb
push 0x42b688
lea ecx, [ebp - 0x5dc]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0x75
call fcn.004017af
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x76
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.004033d0
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 0x70
call fcn.004018bb
push 0x42b674
lea ecx, [ebp - 0x12c]
call fcn.004017af
push eax
lea ecx, [ebp - 0x5fc]
mov byte [ebp - 4], 0x77
call fcn.00403390
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b440
mov byte [ebp - 4], 0x78
call fcn.004017af
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x79
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004033d0
lea ecx, [ebp - 0x5fc]
mov byte [ebp - 4], 0x77
call fcn.004018bb
lea ecx, [ebp - 0x12c]
call fcn.00406e16
push ecx
lea eax, [ebp - 0x6c]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00405eb9
push dword [ebp - 0x40]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7a
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ecx
mov ecx, eax
call fcn.00406a04
mov byte [ebp - 4], 0x70
call fcn.00410803
add esp, 0xc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
push 1
pop ebx
cmp edx, ebx
jne 0x40c4f6
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
mov ecx, ebx
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7b
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.00406bcc
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42f160
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x7c
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7d
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x70
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x6c]
call fcn.00413e77
lea ecx, [ebp - 0xc0]
call fcn.00413e77
jmp 0x40c809
push ecx
mov esi, 0x42b650
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x7e
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov edi, 0x42b46c
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
mov byte [ebp - 4], 0x7f
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x80
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b070
call fcn.004017af
push 0
mov byte [ebp - 4], 0x54
call fcn.0040f439
add esp, 0x14
push dword [ebp - 0x40]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b908
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x81
call fcn.004177ce
mov ecx, eax
call fcn.00406a04
push ecx
mov byte [ebp - 4], 0x82
mov ecx, esp
mov dword [ebp - 0x20], esp
push edi
call fcn.004017af
push ecx
mov byte [ebp - 4], 0x83
mov ecx, esp
mov dword [ebp - 0x24], esp
push 0x42b464
call fcn.004017af
push 0
mov byte [ebp - 4], 0x54
call fcn.0040f439
add esp, 0x18
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
push 2
cdq
pop ecx
idiv ecx
push 1
pop edi
cmp edx, edi
jne 0x40c809
push 0x17
push 0
push 0x42b298
lea ecx, [ebp - 0x9c]
call fcn.0040cbc0
push 2
push 0
lea ecx, [ebp - 0x61c]
mov byte [ebp - 4], 0x84
call fcn.004063bf
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b458
mov byte [ebp - 4], 0x85
call fcn.004017af
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x86
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x85
call fcn.004033d0
lea ecx, [ebp - 0x61c]
mov byte [ebp - 4], 0x84
call fcn.004018bb
push 0x42b618
lea ecx, [ebp - 0x63c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b60c
mov byte [ebp - 4], 0x87
call fcn.004017af
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x88
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.004033d0
lea ecx, [ebp - 0x63c]
mov byte [ebp - 4], 0x84
call fcn.004018bb
push 0x42b894
lea ecx, [ebp - 0x65c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x42b5ec
mov byte [ebp - 4], 0x89
call fcn.004017af
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x8a
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x89
call fcn.004033d0
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 0x84
call fcn.004018bb
push esi
lea ecx, [ebp - 0x67c]
call fcn.00406464
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
mov byte [ebp - 4], 0x8b
push 0x42b440
call fcn.004017af
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x8c
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x8b
call fcn.004033d0
lea ecx, [ebp - 0x67c]
mov byte [ebp - 4], 0x84
call fcn.004018bb
lea ecx, [ebp - 0x18]
call fcn.004177ce
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.0040cb59
push eax
mov ecx, esi
call fcn.0040cfcc
lea ecx, [ebp + 8]
call fcn.004177ce
mov ecx, eax
call fcn.00406aaa
lea ecx, [ebp + 8]
mov esi, eax
call fcn.004177ce
mov ecx, edi
sub ecx, esi
push ecx
mov ecx, eax
call fcn.0040d282
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00415012
pop ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x8d
call fcn.004177ce
mov ecx, eax
mov byte [ebp - 4], 0x84
call fcn.00406bcc
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push ebx
call fcn.004017af
push ecx
lea ecx, [ebp + 8]
mov eax, esp
mov dword [ebp - 0x1c], esp
push eax
mov byte [ebp - 4], 0x8e
call fcn.004177ce
mov ecx, eax
call fcn.00406a70
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x8f
call fcn.004177ce
mov ecx, eax
call fcn.00406b65
push eax
lea ecx, [ebp + 8]
call fcn.004177ce
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ecx
mov ecx, eax
call fcn.00406ad4
mov byte [ebp - 4], 0x84
call fcn.00410b47
add esp, 0x18
lea ecx, [ebp - 0x9c]
call fcn.00413e77
lea ecx, [ebp - 0xa8]
call fcn.00406e16
lea ecx, [ebp - 0xac]
mov dword [ebp - 4], 4
call fcn.00406e16
jmp 0x409bf2
lea ecx, [ebp - 0x28]
call fcn.00413e77
mov dword [ebp - 4], 2
push 1
pop esi
jmp 0x40ca65
lea ecx, [ebp - 0x18]
call fcn.00413e77
and byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.00406e16
lea ecx, [ebp + 8]
call fcn.00413e77
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4