Function at 0x41166d
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x480cab
mov eax, dword fs:[0]
push eax
sub esp, 0x658
mov eax, dword [0x4b0760]
xor eax, esp
mov dword [esp + 0x650], eax
push ebx
push esi
push edi
mov eax, dword [0x4b0760]
xor eax, esp
push eax
lea eax, [esp + 0x668]
mov dword fs:[0], eax
mov ebx, edx
mov dword [esp + 0x74], ebx
mov esi, ecx
and dword [esp + 0x44], 0xfffffe00
and dword [esp + 0x48], 0
lea ecx, [esp + 0x5ec]
mov dword [esp + 0x670], 1
call fcn.0041509b
mov edx, esi
mov byte [esp + 0x670], 2
lea ecx, [esp + 0x5a4]
call fcn.0042741d
push ecx
lea eax, [esp + 0x40]
mov byte [esp + 0x674], 3
push eax
lea eax, [esp + 0x5ac]
push eax
lea ecx, [esp + 0x5f8]
call fcn.004150e1
test al, al
je 0x412d3a
lea ecx, [esp + 0x3c]
call fcn.004178d0
test al, al
jne 0x412d3a
mov esi, 0x498420
lea ecx, [esp + 0x2c]
push esi
call fcn.00417179
mov edx, 0x2761
mov byte [esp + 0x670], 4
lea ecx, [esp + 0x39c]
call fcn.00427723
lea ecx, [esp + 0x2c]
mov byte [esp + 0x670], 5
push ecx
push eax
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x48]
call fcn.00417c25
lea ecx, [esp + 0x33c]
mov byte [esp + 0x670], 6
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [ebx + 0xc]
call fcn.00403f33
push 0
push 1
lea ecx, [esp + 0x344]
call fcn.00402e0b
lea ecx, [esp + 0x7c]
mov byte [esp + 0x670], 5
call fcn.004172e5
push 0
push 1
lea ecx, [esp + 0x3a4]
call fcn.00402e0b
lea ecx, [esp + 0x2c]
mov byte [esp + 0x670], 3
call fcn.004172e5
push esi
lea ecx, [esp + 0x30]
call fcn.00417179
mov edx, 0x2762
mov byte [esp + 0x670], 7
lea ecx, [esp + 0x39c]
call fcn.00427723
lea ecx, [esp + 0x2c]
mov byte [esp + 0x670], 8
push ecx
push eax
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x48]
call fcn.00417c25
lea ecx, [esp + 0x33c]
mov byte [esp + 0x670], 9
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [ebx + 0x24]
call fcn.00403f33
xor ebx, ebx
lea ecx, [esp + 0x33c]
push ebx
push 1
call fcn.00402e0b
lea ecx, [esp + 0x7c]
mov byte [esp + 0x670], 8
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x3a4]
call fcn.00402e0b
mov byte [esp + 0x670], 3
lea ecx, [esp + 0x2c]
call fcn.004172e5
push esi
lea ecx, [esp + 0x30]
call fcn.00417179
mov edx, 0x2763
mov byte [esp + 0x670], 0xa
lea ecx, [esp + 0x33c]
call fcn.00427723
lea ecx, [esp + 0x2c]
mov byte [esp + 0x670], 0xb
push ecx
push eax
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x48]
call fcn.00417c25
push ebx
push 1
lea ecx, [esp + 0x344]
call fcn.00402e0b
lea ecx, [esp + 0x2c]
mov byte [esp + 0x670], 0xe
call fcn.004172e5
lea ecx, [esp + 0x14]
mov edi, ebx
call fcn.0041788a
test eax, eax
je 0x412d25
mov dword [esp + 0x78], 0x30
mov dword [esp + 0x60], 0x60
lea ecx, [esp + 0x48c]
call fcn.00412d8f
push esi
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x674], 0xf
call fcn.00417179
mov edx, 0x2776
mov byte [esp + 0x670], 0x10
lea ecx, [esp + 0x5bc]
call fcn.00427723
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x670], 0x11
push ecx
push eax
lea eax, [esp + 0x6c]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
push ebx
push 1
lea ecx, [esp + 0x5c4]
call fcn.00402e0b
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
lea ecx, [esp + 0x64]
mov esi, ebx
call fcn.0041788a
test eax, eax
je 0x411d2b
push 0xf
pop eax
mov dword [esp + 0x440], eax
mov dword [esp + 0x43c], ebx
mov byte [esp + 0x42c], bl
mov dword [esp + 0x458], eax
mov dword [esp + 0x454], ebx
mov byte [esp + 0x444], bl
mov dword [esp + 0x470], eax
mov dword [esp + 0x46c], ebx
mov byte [esp + 0x45c], bl
mov dword [esp + 0x488], eax
mov dword [esp + 0x484], ebx
mov byte [esp + 0x474], bl
push 0x498420
lea ecx, [esp + 0x190]
mov byte [esp + 0x674], 0x15
call fcn.00417179
mov edx, 0x2777
mov byte [esp + 0x670], 0x16
lea ecx, [esp + 0x324]
call fcn.00427723
lea ecx, [esp + 0x18c]
mov byte [esp + 0x670], 0x17
push ecx
push eax
lea eax, [esp + 0x2b4]
push eax
push ecx
push esi
lea ecx, [esp + 0x78]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x30c]
mov byte [esp + 0x670], 0x18
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x430]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x2ac]
mov byte [esp + 0x670], 0x17
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x18c]
mov byte [esp + 0x670], 0x15
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0xb0]
call fcn.00417179
mov edx, 0x2778
mov byte [esp + 0x670], 0x19
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0xac]
mov byte [esp + 0x670], 0x1a
push ecx
push eax
lea eax, [esp + 0x214]
push eax
push ecx
push esi
lea ecx, [esp + 0x78]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x1b
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x448]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x20c]
mov byte [esp + 0x670], 0x1a
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0xac]
mov byte [esp + 0x670], 0x15
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x150]
call fcn.00417179
mov edx, 0x2779
mov byte [esp + 0x670], 0x1c
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x14c]
mov byte [esp + 0x670], 0x1d
push ecx
push eax
lea eax, [esp + 0x294]
push eax
push ecx
push esi
lea ecx, [esp + 0x78]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x1e
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x460]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x28c]
mov byte [esp + 0x670], 0x1d
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x14c]
mov byte [esp + 0x670], 0x15
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0xd0]
call fcn.00417179
mov edx, 0x277a
mov byte [esp + 0x670], 0x1f
lea ecx, [esp + 0x30c]
call fcn.00427723
mov byte [esp + 0x670], 0x20
lea ecx, [esp + 0xcc]
push ecx
push eax
lea eax, [esp + 0x234]
push eax
push ecx
push esi
lea ecx, [esp + 0x78]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x21
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x478]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x22c]
mov byte [esp + 0x670], 0x20
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0xcc]
mov byte [esp + 0x670], 0x15
call fcn.004172e5
lea eax, [esp + 0x42c]
push eax
lea ecx, [esp + 0x490]
call fcn.0040a801
lea ecx, [esp + 0x42c]
mov byte [esp + 0x670], 0x14
call fcn.00404f98
lea ecx, [esp + 0x64]
inc esi
call fcn.0041788a
cmp esi, eax
jb 0x411992
push 0x498420
lea ecx, [esp + 0x1d0]
call fcn.00417179
mov edx, 0x2764
mov byte [esp + 0x670], 0x22
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x670], 0x23
push ecx
push eax
lea eax, [esp + 0x1f4]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x24
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x49c]
call fcn.00403f33
xor esi, esi
lea ecx, [esp + 0x324]
push ebx
inc esi
push esi
call fcn.00402e0b
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x670], 0x23
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0xf0]
call fcn.00417179
mov edx, 0x2765
mov byte [esp + 0x670], 0x25
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0xec]
mov byte [esp + 0x670], 0x26
push ecx
push eax
lea eax, [esp + 0x2d4]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x27
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x4b4]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x670], 0x26
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0xec]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x170]
call fcn.00417179
mov edx, 0x2766
mov byte [esp + 0x670], 0x28
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x16c]
mov byte [esp + 0x670], 0x29
push ecx
push eax
lea eax, [esp + 0x264]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x2a
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x4cc]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x25c]
mov byte [esp + 0x670], 0x29
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x16c]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x110]
call fcn.00417179
mov edx, 0x2767
mov byte [esp + 0x670], 0x2b
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x10c]
mov byte [esp + 0x670], 0x2c
push ecx
push eax
lea eax, [esp + 0x2e4]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
mov byte [esp + 0x670], 0x2d
lea ecx, [esp + 0x324]
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x4e4]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x2dc]
mov byte [esp + 0x670], 0x2c
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x10c]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x1b0]
call fcn.00417179
mov edx, 0x2768
mov byte [esp + 0x670], 0x2e
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x670], 0x2f
push ecx
push eax
lea eax, [esp + 0x284]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
push 0x30
pop ecx
mov byte [esp + 0x670], cl
lea ecx, [esp + 0x324]
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x4fc]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x27c]
mov byte [esp + 0x670], 0x2f
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x130]
call fcn.00417179
mov edx, 0x2769
mov byte [esp + 0x670], 0x31
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x12c]
mov byte [esp + 0x670], 0x32
push ecx
push eax
lea eax, [esp + 0x2f4]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x33
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x514]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x670], 0x32
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x12c]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x90]
call fcn.00417179
mov edx, 0x276a
mov byte [esp + 0x670], 0x34
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x8c]
mov byte [esp + 0x670], 0x35
push ecx
push eax
lea eax, [esp + 0x2a4]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x36
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x52c]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x29c]
mov byte [esp + 0x670], 0x35
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x8c]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0xa0]
call fcn.00417179
mov byte [esp + 0x670], 0x37
mov edx, 0x276b
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x9c]
mov byte [esp + 0x670], 0x38
push ecx
push eax
lea eax, [esp + 0x304]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x39
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x544]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x2fc]
mov byte [esp + 0x670], 0x38
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x9c]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0xc0]
call fcn.00417179
mov edx, 0x276c
mov byte [esp + 0x670], 0x3a
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0xbc]
mov byte [esp + 0x670], 0x3b
push ecx
push eax
lea eax, [esp + 0x2c4]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x3c
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x55c]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x2bc]
mov byte [esp + 0x670], 0x3b
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0xbc]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0xe0]
call fcn.00417179
mov edx, 0x276d
mov byte [esp + 0x670], 0x3d
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0xdc]
mov byte [esp + 0x670], 0x3e
push ecx
push eax
lea eax, [esp + 0x244]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x324]
mov byte [esp + 0x670], 0x3f
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x574]
call fcn.00403f33
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0x23c]
mov byte [esp + 0x670], 0x3e
call fcn.004172e5
push ebx
push esi
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0xdc]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x100]
call fcn.00417179
mov edx, 0x276e
mov byte [esp + 0x670], 0x40
lea ecx, [esp + 0x324]
call fcn.00427723
lea ecx, [esp + 0xfc]
mov byte [esp + 0x670], 0x41
push ecx
push eax
lea eax, [esp + 0x34]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
push ebx
push esi
lea ecx, [esp + 0x32c]
call fcn.00402e0b
lea ecx, [esp + 0xfc]
mov byte [esp + 0x670], 0x44
call fcn.004172e5
lea ecx, [esp + 0x2c]
call fcn.0041788a
test eax, eax
je 0x4127f4
xor eax, eax
push 0xf
pop ecx
mov dword [esp + 0x380], ecx
mov dword [esp + 0x37c], eax
mov byte [esp + 0x36c], al
mov dword [esp + 0x398], ecx
mov dword [esp + 0x394], eax
mov byte [esp + 0x384], al
push 0x498420
lea ecx, [esp + 0x120]
mov byte [esp + 0x674], 0x45
call fcn.00417179
mov edx, 0x276f
mov byte [esp + 0x670], 0x46
lea ecx, [esp + 0x3b4]
call fcn.00427723
lea ecx, [esp + 0x11c]
mov byte [esp + 0x670], 0x47
push ecx
push eax
lea eax, [esp + 0x254]
push eax
push ecx
push ebx
lea ecx, [esp + 0x40]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x30c]
mov byte [esp + 0x670], 0x48
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x370]
call fcn.00403f33
xor esi, esi
lea ecx, [esp + 0x30c]
push esi
push 1
call fcn.00402e0b
lea ecx, [esp + 0x24c]
mov byte [esp + 0x670], 0x47
call fcn.004172e5
push esi
push 1
lea ecx, [esp + 0x3bc]
call fcn.00402e0b
lea ecx, [esp + 0x11c]
mov byte [esp + 0x670], 0x45
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x140]
call fcn.00417179
mov edx, 0x2770
mov byte [esp + 0x670], 0x49
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x13c]
mov byte [esp + 0x670], 0x4a
push ecx
push eax
lea eax, [esp + 0x274]
push eax
push ecx
push ebx
lea ecx, [esp + 0x40]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
mov byte [esp + 0x670], 0x4b
lea ecx, [esp + 0x3b4]
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x388]
call fcn.00403f33
push esi
push 1
lea ecx, [esp + 0x3bc]
call fcn.00402e0b
lea ecx, [esp + 0x26c]
mov byte [esp + 0x670], 0x4a
call fcn.004172e5
push esi
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x13c]
mov byte [esp + 0x670], 0x45
call fcn.004172e5
mov esi, dword [esp + 0x58c]
lea eax, [esp + 0x36c]
cmp eax, esi
jae 0x41274e
mov ecx, dword [esp + 0x588]
cmp ecx, eax
ja 0x41274e
sub eax, ecx
cdq
idiv dword [esp + 0x78]
mov dword [esp + 0x10], eax
cmp esi, dword [esp + 0x590]
jne 0x41272b
push ecx
lea ecx, [esp + 0x58c]
call fcn.00413fcb
mov esi, dword [esp + 0x58c]
mov ecx, dword [esp + 0x588]
mov eax, dword [esp + 0x10]
imul eax, eax, 0x30
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], esi
add eax, ecx
mov byte [esp + 0x670], 0x4c
test esi, esi
je 0x4127ad
push eax
mov ecx, esi
call fcn.0040ced6
jmp 0x4127a6
cmp esi, dword [esp + 0x590]
jne 0x41276b
push ecx
lea ecx, [esp + 0x58c]
call fcn.00413fcb
mov esi, dword [esp + 0x58c]
mov dword [esp + 0x28], esi
mov dword [esp + 0x10], esi
mov byte [esp + 0x670], 0x4d
test esi, esi
je 0x4127ad
lea eax, [esp + 0x36c]
mov ecx, esi
push eax
call fcn.00403eea
lea eax, [esp + 0x384]
mov byte [esp + 0x670], 0x4e
push eax
lea ecx, [esi + 0x18]
call fcn.00403eea
mov esi, dword [esp + 0x58c]
push 0x30
pop eax
add esi, eax
mov byte [esp + 0x670], 0x44
mov dword [esp + 0x58c], esi
lea ecx, [esp + 0x384]
xor esi, esi
push 0
inc esi
push esi
call fcn.00402e0b
push 0
push esi
lea ecx, [esp + 0x374]
call fcn.00402e0b
lea ecx, [esp + 0x2c]
inc ebx
call fcn.0041788a
cmp ebx, eax
jb 0x412522
push 0x498420
lea ecx, [esp + 0x160]
call fcn.00417179
mov edx, 0x2771
mov byte [esp + 0x670], 0x4f
lea ecx, [esp + 0x3b4]
call fcn.00427723
lea ecx, [esp + 0x15c]
mov byte [esp + 0x670], 0x50
push ecx
push eax
lea eax, [esp + 0x54]
push eax
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
xor ebx, ebx
lea ecx, [esp + 0x3b4]
push ebx
push esi
call fcn.00402e0b
lea ecx, [esp + 0x15c]
mov byte [esp + 0x670], 0x53
call fcn.004172e5
lea ecx, [esp + 0x4c]
mov esi, ebx
call fcn.0041788a
test eax, eax
je 0x412cbe
push 0xf
pop eax
mov dword [esp + 0x3e0], eax
mov dword [esp + 0x3dc], ebx
mov byte [esp + 0x3cc], bl
mov dword [esp + 0x3f8], eax
mov dword [esp + 0x3f4], ebx
mov byte [esp + 0x3e4], bl
mov dword [esp + 0x410], eax
mov dword [esp + 0x40c], ebx
mov byte [esp + 0x3fc], bl
mov dword [esp + 0x428], eax
mov dword [esp + 0x424], ebx
mov byte [esp + 0x414], bl
push 0x498420
lea ecx, [esp + 0x180]
mov byte [esp + 0x674], 0x54
call fcn.00417179
mov edx, 0x2772
mov byte [esp + 0x670], 0x55
lea ecx, [esp + 0x354]
call fcn.00427723
lea ecx, [esp + 0x17c]
mov byte [esp + 0x670], 0x56
push ecx
push eax
lea eax, [esp + 0x204]
push eax
push ecx
push esi
lea ecx, [esp + 0x60]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x30c]
mov byte [esp + 0x670], 0x57
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x3d0]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x670], 0x56
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x35c]
call fcn.00402e0b
lea ecx, [esp + 0x17c]
mov byte [esp + 0x670], 0x54
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x1a0]
call fcn.00417179
mov edx, 0x2774
mov byte [esp + 0x670], 0x58
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x19c]
mov byte [esp + 0x670], 0x59
push ecx
push eax
lea eax, [esp + 0x224]
push eax
push ecx
push esi
lea ecx, [esp + 0x60]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x354]
mov byte [esp + 0x670], 0x5a
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x400]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x35c]
call fcn.00402e0b
lea ecx, [esp + 0x21c]
mov byte [esp + 0x670], 0x59
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x19c]
mov byte [esp + 0x670], 0x54
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x1c0]
call fcn.00417179
mov edx, 0x2773
mov byte [esp + 0x670], 0x5b
lea ecx, [esp + 0x30c]
call fcn.00427723
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x670], 0x5c
push ecx
push eax
lea eax, [esp + 0x3a4]
push eax
push ecx
push esi
lea ecx, [esp + 0x60]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
lea ecx, [esp + 0x354]
mov byte [esp + 0x670], 0x5d
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x3e8]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x35c]
call fcn.00402e0b
lea ecx, [esp + 0x39c]
mov byte [esp + 0x670], 0x5c
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x314]
call fcn.00402e0b
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x670], 0x54
call fcn.004172e5
push 0x498420
lea ecx, [esp + 0x80]
call fcn.00417179
mov edx, 0x2775
mov byte [esp + 0x670], 0x5e
lea ecx, [esp + 0x5d4]
call fcn.00427723
mov byte [esp + 0x670], 0x5f
lea ecx, [esp + 0x7c]
push ecx
push eax
lea eax, [esp + 0x344]
push eax
push ecx
push esi
lea ecx, [esp + 0x60]
call fcn.004178f4
pop ecx
mov ecx, eax
call fcn.00417c25
push 0x60
pop ecx
mov byte [esp + 0x670], cl
lea ecx, [esp + 0x354]
push ecx
mov ecx, eax
call fcn.004173d6
push eax
lea ecx, [esp + 0x418]
call fcn.00403f33
push ebx
push 1
lea ecx, [esp + 0x35c]
call fcn.00402e0b
lea ecx, [esp + 0x33c]
mov byte [esp + 0x670], 0x5f
call fcn.004172e5
push ebx
push 1
lea ecx, [esp + 0x5dc]
call fcn.00402e0b
lea ecx, [esp + 0x7c]
mov byte [esp + 0x670], 0x54
call fcn.004172e5
mov ecx, dword [esp + 0x598]
lea eax, [esp + 0x3cc]
cmp eax, ecx
jae 0x412c44
mov ebx, dword [esp + 0x594]
cmp ebx, eax
ja 0x412c44
sub eax, ebx
cdq
idiv dword [esp + 0x60]
mov dword [esp + 0x10], eax
cmp ecx, dword [esp + 0x59c]
jne 0x412c29
push ecx
lea ecx, [esp + 0x598]
call fcn.00414035
mov ecx, dword [esp + 0x598]
mov ebx, dword [esp + 0x594]
mov eax, dword [esp + 0x10]
imul eax, eax, 0x60
mov dword [esp + 0x28], ecx
mov dword [esp + 0x10], ecx
add eax, ebx
mov byte [esp + 0x670], 0x61
test ecx, ecx
je 0x412c89
jmp 0x412c7c
cmp ecx, dword [esp + 0x59c]
jne 0x412c61
push ecx
lea ecx, [esp + 0x598]
call fcn.00414035
mov ecx, dword [esp + 0x598]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x10], ecx
mov byte [esp + 0x670], 0x62
test ecx, ecx
je 0x412c89
lea eax, [esp + 0x3cc]
push eax
call fcn.00408d5a
mov ecx, dword [esp + 0x598]
push 0x60
pop eax
add ecx, eax
mov byte [esp + 0x670], 0x53
mov dword [esp + 0x598], ecx
lea ecx, [esp + 0x3cc]
call fcn.00405134
lea ecx, [esp + 0x4c]
inc esi
call fcn.0041788a
push 0
pop ebx
cmp esi, eax
jb 0x41287e
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x48c]
push eax
call fcn.00413ddf
lea ecx, [esp + 0x4c]
mov byte [esp + 0x670], 0x44
call fcn.004172e5
lea ecx, [esp + 0x2c]
mov byte [esp + 0x670], 0x14
call fcn.004172e5
lea ecx, [esp + 0x64]
mov byte [esp + 0x670], 0xf
call fcn.004172e5
lea ecx, [esp + 0x48c]
call fcn.00404fcc
lea ecx, [esp + 0x14]
inc edi
call fcn.0041788a
mov esi, 0x498420
cmp edi, eax
jb 0x4118f9
lea ecx, [esp + 0x14]
mov byte [esp + 0x670], 3
mov bl, 1
call fcn.004172e5
jmp 0x412d3c
xor bl, bl
push 0
push 1
lea ecx, [esp + 0x5ac]
call fcn.00402e0b
lea ecx, [esp + 0x5ec]
call fcn.004105d0
or dword [esp + 0x670], 0xffffffff
lea ecx, [esp + 0x3c]
call fcn.004172e5
mov al, bl
mov ecx, dword [esp + 0x668]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x650]
xor ecx, esp
call fcn.00460e52
mov esp, ebp
pop ebp
ret