Function at 0x431a20
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50cc2b
mov eax, dword fs:[0]
push eax
sub esp, 0xd78
mov eax, dword [0x5655bc]
xor eax, ebp
mov dword [ebp - 0x24], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xcc0], ecx
call fcn.00411050
mov ecx, eax
call fcn.0040a160
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x431a6b
jmp 0x433654
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00421c90
jmp 0x431a8a
push 0
lea ecx, [ebp - 0x88c]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00421d40
lea edx, [ebp - 0x894]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.00407740
push eax
lea ecx, [ebp - 0x18]
call fcn.0044bcc0
movzx eax, al
test eax, eax
je 0x433654
push str.SoftID
lea ecx, [ebp - 0x8b0]
call fcn.00401c80
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcc4], ecx
lea edx, [ebp - 0x8b0]
push edx
lea eax, [ebp - 0x5a0]
push eax
mov ecx, dword [ebp - 0xcc4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc4]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8b0]
call fcn.00401cc0
push 0x516f64
lea ecx, [ebp - 0x8cc]
call fcn.00401c80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcc8], ecx
lea edx, [ebp - 0x8cc]
push edx
lea eax, [ebp - 0x514]
push eax
mov ecx, dword [ebp - 0xcc8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcc8]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8cc]
call fcn.00401cc0
push str.SoftVer
lea ecx, [ebp - 0x8e8]
call fcn.00401c80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xccc], ecx
lea edx, [ebp - 0x8e8]
push edx
lea eax, [ebp - 0x494]
push eax
mov ecx, dword [ebp - 0xccc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xccc]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8e8]
call fcn.00401cc0
push 0x516f88
lea ecx, [ebp - 0x904]
call fcn.00401c80
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcd0], ecx
lea edx, [ebp - 0x904]
push edx
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0xcd0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcd0]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x904]
call fcn.00401cc0
push 0x516f9c
lea ecx, [ebp - 0x478]
call fcn.00401c80
mov byte [ebp - 4], 0xc
push 0x516fa0
lea ecx, [ebp - 0x920]
call fcn.00401c80
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcd4], ecx
lea edx, [ebp - 0x920]
push edx
lea eax, [ebp - 0x650]
push eax
mov ecx, dword [ebp - 0xcd4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcd4]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x920]
call fcn.00401cc0
push str.SoftShowName
lea ecx, [ebp - 0x93c]
call fcn.00401c80
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcd8], ecx
lea edx, [ebp - 0x93c]
push edx
lea eax, [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0xcd8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcd8]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x93c]
call fcn.00401cc0
push str.SoftExe
lea ecx, [ebp - 0x958]
call fcn.00401c80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcdc], ecx
lea edx, [ebp - 0x958]
push edx
lea eax, [ebp - 0xc4]
push eax
mov ecx, dword [ebp - 0xcdc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcdc]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x958]
call fcn.00401cc0
push str.SoftQExe
lea ecx, [ebp - 0x974]
call fcn.00401c80
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xce0], ecx
lea edx, [ebp - 0x974]
push edx
lea eax, [ebp - 0x5f8]
push eax
mov ecx, dword [ebp - 0xce0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xce0]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x974]
call fcn.00401cc0
push str.SoftSilentParam
lea ecx, [ebp - 0x990]
call fcn.00401c80
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xce4], ecx
lea edx, [ebp - 0x990]
push edx
lea eax, [ebp - 0x4f8]
push eax
mov ecx, dword [ebp - 0xce4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xce4]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x990]
call fcn.00401cc0
push str.SoftRegKey
lea ecx, [ebp - 0x9ac]
call fcn.00401c80
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xce8], ecx
lea edx, [ebp - 0x9ac]
push edx
lea eax, [ebp - 0x4dc]
push eax
mov ecx, dword [ebp - 0xce8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xce8]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x9ac]
call fcn.00401cc0
push str.SoftIconAdd
lea ecx, [ebp - 0x9c8]
call fcn.00401c80
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcec], ecx
lea edx, [ebp - 0x9c8]
push edx
lea eax, [ebp - 0x54c]
push eax
mov ecx, dword [ebp - 0xcec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcec]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x9c8]
call fcn.00401cc0
push 0x517044
lea ecx, [ebp - 0x5dc]
call fcn.00401c80
mov byte [ebp - 4], 0x22
push 0x517048
lea ecx, [ebp - 0x9e4]
call fcn.00401c80
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcf0], ecx
lea edx, [ebp - 0x9e4]
push edx
lea eax, [ebp - 0x5c0]
push eax
mov ecx, dword [ebp - 0xcf0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcf0]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x9e4]
call fcn.00401cc0
push str.Soft360Set
lea ecx, [ebp - 0xa00]
call fcn.00401c80
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcf4], ecx
lea edx, [ebp - 0xa00]
push edx
lea eax, [ebp - 0x584]
push eax
mov ecx, dword [ebp - 0xcf4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcf4]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa00]
call fcn.00401cc0
push str.SoftRestartKey
lea ecx, [ebp - 0xa1c]
call fcn.00401c80
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcf8], ecx
lea edx, [ebp - 0xa1c]
push edx
lea eax, [ebp - 0x568]
push eax
mov ecx, dword [ebp - 0xcf8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcf8]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa1c]
call fcn.00401cc0
push str.SoftRestartName
lea ecx, [ebp - 0xa38]
call fcn.00401c80
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xcfc], ecx
lea edx, [ebp - 0xa38]
push edx
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0xcfc]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xcfc]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xa38]
call fcn.00401cc0
push str.SoftRunType
lea ecx, [ebp - 0xa54]
call fcn.00401c80
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xd00], ecx
lea edx, [ebp - 0xa54]
push edx
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xd00]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd00]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xa54]
call fcn.00401cc0
push str.SoftPath
lea ecx, [ebp - 0xa70]
call fcn.00401c80
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xd04], ecx
lea edx, [ebp - 0xa70]
push edx
lea eax, [ebp - 0x4c0]
push eax
mov ecx, dword [ebp - 0xd04]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd04]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xa70]
call fcn.00401cc0
push str.SoftTName
lea ecx, [ebp - 0xa8c]
call fcn.00401c80
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xd08], ecx
lea edx, [ebp - 0xa8c]
push edx
lea eax, [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd08]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xa8c]
call fcn.00401cc0
push str.SoftRegion
lea ecx, [ebp - 0xaa8]
call fcn.00401c80
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x18]
call fcn.00435680
mov ecx, dword [eax]
mov dword [ebp - 0xd0c], ecx
lea edx, [ebp - 0xaa8]
push edx
lea eax, [ebp - 0x3f4]
push eax
mov ecx, dword [ebp - 0xd0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xd0c]
mov eax, dword [edx + 0x18]
call eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xaa8]
call fcn.00401cc0
push 0
push 0x2c
lea ecx, [ebp - 0x45c]
call fcn.0040cdf0
mov dword [ebp - 0x618], eax
mov ecx, dword [ebp - 0x618]
add ecx, 1
push ecx
push 0x2c
lea ecx, [ebp - 0x45c]
call fcn.0040cdf0
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x8c]
call fcn.00403b50
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x440]
call fcn.00403b50
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x40]
call fcn.00403b50
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x45c]
call fcn.00403cd0
movzx edx, al
test edx, edx
jne 0x43228e
mov eax, dword [ebp - 0x618]
push eax
push 0
lea ecx, [ebp - 0xac4]
push ecx
lea ecx, [ebp - 0x45c]
call fcn.00403d10
mov dword [ebp - 0xd10], eax
mov edx, dword [ebp - 0xd10]
mov dword [ebp - 0xd14], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0xd14]
push eax
lea ecx, [ebp - 0x8c]
call fcn.00403ba0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xac4]
call fcn.00401cc0
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x618]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x618]
add edx, 1
push edx
lea eax, [ebp - 0xae0]
push eax
lea ecx, [ebp - 0x45c]
call fcn.00403d10
mov dword [ebp - 0xd18], eax
mov ecx, dword [ebp - 0xd18]
mov dword [ebp - 0xd1c], ecx
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0xd1c]
push edx
lea ecx, [ebp - 0x440]
call fcn.00403ba0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xae0]
call fcn.00401cc0
lea ecx, [ebp - 0x45c]
call fcn.00403cc0
sub eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x44]
add eax, 1
push eax
lea ecx, [ebp - 0xafc]
push ecx
lea ecx, [ebp - 0x45c]
call fcn.00403d10
mov dword [ebp - 0xd20], eax
mov edx, dword [ebp - 0xd20]
mov dword [ebp - 0xd24], edx
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0xd24]
push eax
lea ecx, [ebp - 0x40]
call fcn.00403ba0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xafc]
call fcn.00401cc0
push 0x517114
lea ecx, [ebp - 0x650]
push ecx
call fcn.00408570
add esp, 8
movzx edx, al
test edx, edx
je 0x432417
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x40]
call fcn.00401cc0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x440]
call fcn.00401cc0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x8c]
call fcn.00401cc0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x3f4]
call fcn.00401cc0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x45c]
call fcn.00401cc0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x4c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xa8]
call fcn.00401cc0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x60]
call fcn.00401cc0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x568]
call fcn.00401cc0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x584]
call fcn.00401cc0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x54c]
call fcn.00401cc0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x4dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4f8]
call fcn.00401cc0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5f8]
call fcn.00401cc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc4]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x634]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x650]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x478]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x420]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x494]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x514]
call fcn.00401cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a0]
call fcn.00401cc0
jmp 0x431a79
push str.111313
lea eax, [ebp - 0x478]
push eax
call fcn.004228d0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4325a0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x40]
call fcn.00401cc0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x440]
call fcn.00401cc0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x8c]
call fcn.00401cc0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x3f4]
call fcn.00401cc0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x45c]
call fcn.00401cc0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x4c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xa8]
call fcn.00401cc0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x60]
call fcn.00401cc0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x568]
call fcn.00401cc0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x584]
call fcn.00401cc0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x54c]
call fcn.00401cc0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x4dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4f8]
call fcn.00401cc0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5f8]
call fcn.00401cc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc4]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x634]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x650]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x478]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x420]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x494]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x514]
call fcn.00401cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a0]
call fcn.00401cc0
jmp 0x431a79
lea edx, [ebp - 0x3f4]
push edx
lea ecx, [ebp - 0x3d8]
call fcn.00403b70
mov byte [ebp - 4], 0x41
push 0
push 0x2c
lea ecx, [ebp - 0x3d8]
call fcn.0040cdf0
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x424], 0
lea ecx, [ebp - 0x614]
call fcn.00403b50
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x70]
call fcn.00435550
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3d8]
call fcn.00403cc0
cmp dword [ebp - 0x5a4], eax
jb 0x432624
lea ecx, [ebp - 0x3d8]
call fcn.00403cd0
movzx eax, al
test eax, eax
jne 0x432624
lea ecx, [ebp - 0x3d8]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00435610
lea ecx, [ebp - 0x3d8]
call fcn.00403cc0
cmp dword [ebp - 0x5a4], eax
jae 0x432884
cmp dword [ebp - 0x424], 0
jne 0x43275a
mov edx, dword [ebp - 0x5a4]
sub edx, dword [ebp - 0x424]
push edx
mov eax, dword [ebp - 0x424]
push eax
lea ecx, [ebp - 0xb18]
push ecx
lea ecx, [ebp - 0x3d8]
call fcn.00403d10
mov dword [ebp - 0xd28], eax
mov edx, dword [ebp - 0xd28]
mov dword [ebp - 0xd2c], edx
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0xd2c]
push eax
lea ecx, [ebp - 0x614]
call fcn.00403ba0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xb18]
call fcn.00401cc0
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x424], ecx
mov edx, dword [ebp - 0x5a4]
add edx, 1
push edx
push 0x2c
lea ecx, [ebp - 0x3d8]
call fcn.0040cdf0
mov dword [ebp - 0x5a4], eax
lea ecx, [ebp - 0x3d8]
call fcn.00403cc0
cmp dword [ebp - 0x5a4], eax
jbe 0x432746
lea ecx, [ebp - 0x3d8]
call fcn.00403cc0
sub eax, dword [ebp - 0x5a4]
sub eax, 1
push eax
mov eax, dword [ebp - 0x424]
push eax
lea ecx, [ebp - 0xb34]
push ecx
lea ecx, [ebp - 0x3d8]
call fcn.00403d10
mov dword [ebp - 0xd30], eax
mov edx, dword [ebp - 0xd30]
mov dword [ebp - 0xd34], edx
mov byte [ebp - 4], 0x45
mov eax, dword [ebp - 0xd34]
push eax
lea ecx, [ebp - 0x614]
call fcn.00403ba0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xb34]
call fcn.00401cc0
lea ecx, [ebp - 0x614]
push ecx
lea ecx, [ebp - 0x70]
call fcn.00435610
jmp 0x43287f
mov edx, dword [ebp - 0x5a4]
sub edx, dword [ebp - 0x424]
sub edx, 1
push edx
mov eax, dword [ebp - 0x424]
add eax, 1
push eax
lea ecx, [ebp - 0xb50]
push ecx
lea ecx, [ebp - 0x3d8]
call fcn.00403d10
mov dword [ebp - 0xd38], eax
mov edx, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], edx
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0xd3c]
push eax
lea ecx, [ebp - 0x614]
call fcn.00403ba0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xb50]
call fcn.00401cc0
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x424], ecx
mov edx, dword [ebp - 0x5a4]
add edx, 1
push edx
push 0x2c
lea ecx, [ebp - 0x3d8]
call fcn.0040cdf0
mov dword [ebp - 0x5a4], eax
lea eax, [ebp - 0x614]
push eax
lea ecx, [ebp - 0x70]
call fcn.00435610
lea ecx, [ebp - 0x3d8]
call fcn.00403cc0
cmp dword [ebp - 0x5a4], eax
jbe 0x43287f
lea ecx, [ebp - 0x3d8]
call fcn.00403cc0
sub eax, dword [ebp - 0x5a4]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x424]
add ecx, 1
push ecx
lea edx, [ebp - 0xb6c]
push edx
lea ecx, [ebp - 0x3d8]
call fcn.00403d10
mov dword [ebp - 0xd40], eax
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xd44], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0xd44]
push ecx
lea ecx, [ebp - 0x614]
call fcn.00403ba0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xb6c]
call fcn.00401cc0
lea edx, [ebp - 0x614]
push edx
lea ecx, [ebp - 0x70]
call fcn.00435610
jmp 0x432624
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x70]
call fcn.00421c90
lea ecx, [ebp - 0x4a4]
call fcn.00435550
mov byte [ebp - 4], 0x48
jmp 0x4328b8
push 0
lea ecx, [ebp - 0xb74]
push ecx
lea ecx, [ebp - 0x404]
call fcn.004356a0
lea edx, [ebp - 0xb7c]
push edx
lea ecx, [ebp - 0x70]
call fcn.00407740
push eax
lea ecx, [ebp - 0x404]
call fcn.0044bcc0
movzx eax, al
test eax, eax
je 0x432c08
lea ecx, [ebp - 0x404]
call fcn.00435680
push eax
lea ecx, [ebp - 0x67c]
call fcn.00403b70
mov byte [ebp - 4], 0x49
push 0
push 0x5f
lea ecx, [ebp - 0x67c]
call fcn.0040cdf0
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x680], 0
lea ecx, [ebp - 0x69c]
call fcn.00403b50
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x660]
call fcn.00435550
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x67c]
call fcn.00403cc0
cmp dword [ebp - 0x6a0], eax
jb 0x43296d
lea ecx, [ebp - 0x67c]
call fcn.00403cd0
movzx ecx, al
test ecx, ecx
jne 0x43296d
lea edx, [ebp - 0x67c]
push edx
lea ecx, [ebp - 0x4a4]
call fcn.00435610
lea ecx, [ebp - 0x67c]
call fcn.00403cc0
cmp dword [ebp - 0x6a0], eax
jae 0x432bd6
cmp dword [ebp - 0x680], 0
jne 0x432aa6
mov eax, dword [ebp - 0x6a0]
sub eax, dword [ebp - 0x680]
push eax
mov ecx, dword [ebp - 0x680]
push ecx
lea edx, [ebp - 0xb98]
push edx
lea ecx, [ebp - 0x67c]
call fcn.00403d10
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0xd48]
mov dword [ebp - 0xd4c], eax
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0xd4c]
push ecx
lea ecx, [ebp - 0x69c]
call fcn.00403ba0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xb98]
call fcn.00401cc0
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x680], edx
mov eax, dword [ebp - 0x6a0]
add eax, 1
push eax
push 0x5f
lea ecx, [ebp - 0x67c]
call fcn.0040cdf0
mov dword [ebp - 0x6a0], eax
lea ecx, [ebp - 0x67c]
call fcn.00403cc0
cmp dword [ebp - 0x6a0], eax
jbe 0x432a8f
lea ecx, [ebp - 0x67c]
call fcn.00403cc0
sub eax, dword [ebp - 0x6a0]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x680]
push ecx
lea edx, [ebp - 0xbb4]
push edx
lea ecx, [ebp - 0x67c]
call fcn.00403d10
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 0xd50]
mov dword [ebp - 0xd54], eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0xd54]
push ecx
lea ecx, [ebp - 0x69c]
call fcn.00403ba0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbb4]
call fcn.00401cc0
lea edx, [ebp - 0x69c]
push edx
lea ecx, [ebp - 0x4a4]
call fcn.00435610
jmp 0x432bd1
mov eax, dword [ebp - 0x6a0]
sub eax, dword [ebp - 0x680]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x680]
add ecx, 1
push ecx
lea edx, [ebp - 0xbd0]
push edx
lea ecx, [ebp - 0x67c]
call fcn.00403d10
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0xd5c], eax
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0xd5c]
push ecx
lea ecx, [ebp - 0x69c]
call fcn.00403ba0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbd0]
call fcn.00401cc0
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x680], edx
mov eax, dword [ebp - 0x6a0]
add eax, 1
push eax
push 0x5f
lea ecx, [ebp - 0x67c]
call fcn.0040cdf0
mov dword [ebp - 0x6a0], eax
lea ecx, [ebp - 0x69c]
push ecx
lea ecx, [ebp - 0x4a4]
call fcn.00435610
lea ecx, [ebp - 0x67c]
call fcn.00403cc0
cmp dword [ebp - 0x6a0], eax
jbe 0x432bd1
lea ecx, [ebp - 0x67c]
call fcn.00403cc0
sub eax, dword [ebp - 0x6a0]
sub eax, 1
push eax
mov edx, dword [ebp - 0x680]
add edx, 1
push edx
lea eax, [ebp - 0xbec]
push eax
lea ecx, [ebp - 0x67c]
call fcn.00403d10
mov dword [ebp - 0xd60], eax
mov ecx, dword [ebp - 0xd60]
mov dword [ebp - 0xd64], ecx
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0xd64]
push edx
lea ecx, [ebp - 0x69c]
call fcn.00403ba0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbec]
call fcn.00401cc0
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.00435610
jmp 0x43296d
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x660]
call fcn.00435580
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x69c]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x67c]
call fcn.00401cc0
jmp 0x4328a4
lea ecx, [ebp - 0x3bc]
call fcn.004258c0
mov byte [ebp - 4], 0x50
mov dword [ebp - 0x6a4], 0
jmp 0x432c32
mov ecx, dword [ebp - 0x6a4]
add ecx, 1
mov dword [ebp - 0x6a4], ecx
lea ecx, [ebp - 0x4a4]
call fcn.004355a0
xor edx, edx
mov ecx, 5
div ecx
cmp dword [ebp - 0x6a4], eax
jae 0x432d7a
lea ecx, [ebp - 0x4a4]
call fcn.004355a0
cmp eax, 5
jae 0x432c64
jmp 0x432c23
lea ecx, [ebp - 0x74c]
call fcn.00435290
mov byte [ebp - 4], 0x51
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0x750], edx
mov eax, dword [ebp - 0x750]
imul eax, eax, 5
push eax
lea ecx, [ebp - 0x4a4]
call fcn.004355e0
push eax
lea ecx, [ebp - 0x74c]
call fcn.00403ba0
mov ecx, dword [ebp - 0x750]
imul ecx, ecx, 5
add ecx, 1
push ecx
lea ecx, [ebp - 0x4a4]
call fcn.004355e0
push eax
lea ecx, [ebp - 0x730]
call fcn.00403ba0
mov edx, dword [ebp - 0x750]
imul edx, edx, 5
add edx, 2
push edx
lea ecx, [ebp - 0x4a4]
call fcn.004355e0
push eax
lea ecx, [ebp - 0x714]
call fcn.00403ba0
mov eax, dword [ebp - 0x750]
imul eax, eax, 5
add eax, 3
push eax
lea ecx, [ebp - 0x4a4]
call fcn.004355e0
push eax
lea ecx, [ebp - 0x6f8]
call fcn.00403ba0
mov ecx, dword [ebp - 0x750]
imul ecx, ecx, 5
add ecx, 4
push ecx
lea ecx, [ebp - 0x4a4]
call fcn.004355e0
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00403ba0
mov edx, dword [ebp - 0x750]
imul edx, edx, 5
add edx, 4
push edx
lea ecx, [ebp - 0x4a4]
call fcn.004355e0
push eax
lea ecx, [ebp - 0x6dc]
call fcn.00403ba0
lea eax, [ebp - 0x74c]
push eax
lea ecx, [ebp - 0x160]
call fcn.00435470
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x74c]
call fcn.00429960
jmp 0x432c23
lea ecx, [ebp - 0x530]
call fcn.00403b50
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x160]
call fcn.00421c90
jmp 0x432dab
push 0
lea edx, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0x20]
call fcn.004356e0
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [ebp - 0x160]
call fcn.00407740
push eax
lea ecx, [ebp - 0x20]
call fcn.0044bcc0
movzx ecx, al
test ecx, ecx
je 0x433016
lea ecx, [ebp - 0x20]
call fcn.00435680
push eax
lea ecx, [ebp - 0x874]
call fcn.00429c10
mov byte [ebp - 4], 0x53
lea edx, [ebp - 0x83c]
push edx
lea ecx, [ebp - 0x76c]
call fcn.00403b70
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x820]
push eax
lea ecx, [ebp - 0x7c0]
call fcn.00403b70
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x804]
push ecx
lea ecx, [ebp - 0x788]
call fcn.00403b70
mov byte [ebp - 4], 0x56
lea edx, [ebp - 0x7e8]
push edx
lea ecx, [ebp - 0x7a4]
call fcn.00403b70
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x76c]
call fcn.00401e70
push eax
call fcn.0046589b
add esp, 4
mov dword [ebp - 0x7c4], eax
lea ecx, [ebp - 0x7c0]
call fcn.00401e70
push eax
call fcn.0046589b
add esp, 4
mov dword [ebp - 0x7cc], eax
lea eax, [ebp - 0xc18]
push eax
call fcn.00411050
mov ecx, eax
call fcn.0040a340
mov dword [ebp - 0xd68], eax
mov ecx, dword [ebp - 0xd68]
mov dword [ebp - 0xd6c], ecx
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0xd6c]
call fcn.00401e70
push eax
call fcn.0046589b
add esp, 4
mov dword [ebp - 0x7c8], eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xc18]
call fcn.00401cc0
push 0x517128
lea edx, [ebp - 0x874]
push edx
call fcn.00408570
add esp, 8
movzx eax, al
test eax, eax
je 0x432f98
mov ecx, dword [ebp - 0x7c8]
cmp ecx, dword [ebp - 0x7c4]
jl 0x432f96
mov edx, dword [ebp - 0x7c8]
cmp edx, dword [ebp - 0x7cc]
jge 0x432f96
lea eax, [ebp - 0xc34]
push eax
call fcn.00411050
mov ecx, eax
call fcn.0040a340
mov dword [ebp - 0xd70], eax
mov ecx, dword [ebp - 0xd70]
mov dword [ebp - 0xd74], ecx
mov byte [ebp - 4], 0x59
mov edx, dword [ebp - 0xd74]
push edx
lea eax, [ebp - 0x788]
push eax
lea ecx, [ebp - 0xc50]
push ecx
call fcn.00404360
add esp, 0xc
mov dword [ebp - 0xd78], eax
mov edx, dword [ebp - 0xd78]
mov dword [ebp - 0xd7c], edx
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0xd7c]
push eax
lea ecx, [ebp - 0x530]
call fcn.00403ba0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xc50]
call fcn.00401cc0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xc34]
call fcn.00401cc0
jmp 0x432fc6
mov ecx, dword [ebp - 0x7c8]
cmp ecx, dword [ebp - 0x7c4]
jl 0x432fc6
mov edx, dword [ebp - 0x7c8]
cmp edx, dword [ebp - 0x7cc]
jge 0x432fc6
lea eax, [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x530]
call fcn.00403ba0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x7a4]
call fcn.00401cc0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x788]
call fcn.00401cc0
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x7c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x76c]
call fcn.00401cc0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x874]
call fcn.00429960
jmp 0x432d9a
lea ecx, [ebp - 0x650]
push ecx
lea edx, [ebp - 0x3fc]
push edx
mov ecx, dword [ebp - 0xcc0]
add ecx, 0x6b4
call fcn.00425fd0
lea eax, [ebp - 0xc58]
push eax
mov ecx, dword [ebp - 0xcc0]
add ecx, 0x6b4
call fcn.00421c10
push eax
lea ecx, [ebp - 0x3fc]
call fcn.00422240
movzx ecx, al
test ecx, ecx
je 0x4332c9
lea edx, [ebp - 0x5a0]
push edx
lea ecx, [ebp - 0x3bc]
call fcn.00403ba0
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x3a0]
call fcn.00403ba0
lea ecx, [ebp - 0x494]
push ecx
lea ecx, [ebp - 0x384]
call fcn.00403ba0
mov dword [ebp - 0x368], 0
mov byte [ebp - 0x364], 1
lea edx, [ebp - 0x4dc]
push edx
lea ecx, [ebp - 0x2d0]
call fcn.00403ba0
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00403ba0
lea ecx, [ebp - 0x440]
push ecx
lea ecx, [ebp - 0x298]
call fcn.00403ba0
lea edx, [ebp - 0x40]
push edx
lea ecx, [ebp - 0x27c]
call fcn.00403ba0
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00403ba0
lea ecx, [ebp - 0x5dc]
push ecx
lea ecx, [ebp - 0x1d4]
call fcn.00403ba0
lea edx, [ebp - 0x5c0]
push edx
lea ecx, [ebp - 0x228]
call fcn.00403ba0
lea eax, [ebp - 0x584]
push eax
lea ecx, [ebp - 0x20c]
call fcn.00403ba0
lea ecx, [ebp - 0x3f4]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00403ba0
lea edx, [ebp - 0x568]
push edx
lea ecx, [ebp - 0x150]
call fcn.00403ba0
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x134]
call fcn.00403ba0
lea ecx, [ebp - 0xa8]
push ecx
lea ecx, [ebp - 0x118]
call fcn.00403ba0
push 0x51712c
lea edx, [ebp - 0x478]
push edx
call fcn.00408570
add esp, 8
movzx eax, al
test eax, eax
je 0x4331a1
mov byte [ebp - 0x344], 1
jmp 0x4331a8
mov byte [ebp - 0x344], 0
push 0x517130
lea ecx, [ebp - 0x360]
call fcn.00403bc0
lea ecx, [ebp - 0x634]
push ecx
lea ecx, [ebp - 0x340]
call fcn.00403ba0
lea edx, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0x324]
call fcn.00403ba0
lea eax, [ebp - 0x5f8]
push eax
lea ecx, [ebp - 0x308]
call fcn.00403ba0
lea ecx, [ebp - 0x4f8]
push ecx
lea ecx, [ebp - 0x2ec]
call fcn.00403ba0
lea edx, [ebp - 0x4c0]
push edx
lea ecx, [ebp - 0xe0]
call fcn.00403ba0
lea ecx, [ebp - 0x884]
call fcn.00426060
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x884]
call fcn.004260b0
lea ecx, [ebp - 0x884]
push ecx
lea edx, [ebp - 0x650]
push edx
lea ecx, [ebp - 0xcb0]
call fcn.00426190
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0xd80]
mov dword [ebp - 0xd84], eax
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0xd84]
push ecx
lea ecx, [ebp - 0xc84]
call fcn.00428940
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0xc84]
push edx
lea eax, [ebp - 0xcbc]
push eax
mov ecx, dword [ebp - 0xcc0]
add ecx, 0x6b4
call fcn.00425e10
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xc84]
call fcn.00425cf0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xcb0]
call fcn.00425cf0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x884]
call fcn.00426090
jmp 0x433493
lea ecx, [ebp - 0x5a0]
push ecx
lea ecx, [ebp - 0x3bc]
call fcn.00403ba0
lea edx, [ebp - 0x514]
push edx
lea ecx, [ebp - 0x3a0]
call fcn.00403ba0
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x384]
call fcn.00403ba0
mov dword [ebp - 0x368], 0
mov byte [ebp - 0x364], 1
lea ecx, [ebp - 0x4dc]
push ecx
lea ecx, [ebp - 0x2d0]
call fcn.00403ba0
lea edx, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0x2b4]
call fcn.00403ba0
lea eax, [ebp - 0x440]
push eax
lea ecx, [ebp - 0x298]
call fcn.00403ba0
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x27c]
call fcn.00403ba0
lea edx, [ebp - 0x54c]
push edx
lea ecx, [ebp - 0x1f0]
call fcn.00403ba0
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00403ba0
lea ecx, [ebp - 0x5c0]
push ecx
lea ecx, [ebp - 0x228]
call fcn.00403ba0
lea edx, [ebp - 0x584]
push edx
lea ecx, [ebp - 0x20c]
call fcn.00403ba0
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00403ba0
lea ecx, [ebp - 0x568]
push ecx
lea ecx, [ebp - 0x150]
call fcn.00403ba0
lea edx, [ebp - 0x60]
push edx
lea ecx, [ebp - 0x134]
call fcn.00403ba0
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x118]
call fcn.00403ba0
push 0x517134
lea ecx, [ebp - 0x478]
push ecx
call fcn.00408570
add esp, 8
movzx edx, al
test edx, edx
je 0x433406
mov byte [ebp - 0x344], 1
jmp 0x43340d
mov byte [ebp - 0x344], 0
push 0x517138
lea ecx, [ebp - 0x360]
call fcn.00403bc0
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x340]
call fcn.00403ba0
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0x324]
call fcn.00403ba0
lea edx, [ebp - 0x5f8]
push edx
lea ecx, [ebp - 0x308]
call fcn.00403ba0
lea eax, [ebp - 0x4f8]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00403ba0
lea ecx, [ebp - 0x4c0]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.00403ba0
lea edx, [ebp - 0x3bc]
push edx
lea ecx, [ebp - 0x3fc]
call fcn.00415e30
add eax, 0x1c
mov ecx, eax
call fcn.004260b0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x530]
call fcn.00401cc0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x3bc]
call fcn.00425ae0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x4a4]
call fcn.00435580
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x70]
call fcn.00435580
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x614]
call fcn.00401cc0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x3d8]
call fcn.00401cc0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x40]
call fcn.00401cc0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x440]
call fcn.00401cc0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x8c]
call fcn.00401cc0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x3f4]
call fcn.00401cc0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x45c]
call fcn.00401cc0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x4c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xa8]
call fcn.00401cc0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x60]
call fcn.00401cc0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x568]
call fcn.00401cc0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x584]
call fcn.00401cc0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5c0]
call fcn.00401cc0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x54c]
call fcn.00401cc0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x4dc]
call fcn.00401cc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4f8]
call fcn.00401cc0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5f8]
call fcn.00401cc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc4]
call fcn.00401cc0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x634]
call fcn.00401cc0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x650]
call fcn.00401cc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x478]
call fcn.00401cc0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x420]
call fcn.00401cc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x494]
call fcn.00401cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x514]
call fcn.00401cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a0]
call fcn.00401cc0
jmp 0x431a79
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.00463a0b
mov esp, ebp
pop ebp
ret