Function at 0x42adee
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x5248c8
call fcn.004512a8
sub esp, 0x29c
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x1c], edi
nop
nop
nop
nop
nop
nop
nop
nop
lea ecx, [ebp - 0x20]
call fcn.00402133
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x14]
call fcn.00402133
mov byte [ebp - 4], 1
push 0x74
pop esi
push esi
lea eax, [ebp - 0x2a8]
push ebx
push eax
call fcn.00451330
mov dword [ebp - 0x2a8], esi
add esp, 0xc
lea esi, [edi + 0x1610]
push 1
mov ecx, esi
call fcn.0042a859
push 0x8e
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 2
push 0x531514
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00402795
add esp, 0xc
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x14]
call fcn.00402611
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00402189
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push dword [ebp - 0x14]
push dword [esi]
call dword [0x52f468]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xc]
push 0x52faf0
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x24], eax
call fcn.004026dd
push 0xffffffffffffffff
push ebx
mov ecx, esi
mov byte [ebp - 0x238], 1
mov dword [ebp - 0x2a4], 0x800005
mov dword [ebp - 0x2a0], 5
mov dword [ebp - 0x294], ebx
call fcn.0042a7c8
lea eax, [ebp - 0x2a8]
push eax
mov ecx, esi
call fcn.0042a7f0
mov edi, 0x9211
mov eax, edi
mov word [ebp - 0x90], ax
add eax, 0x53
mov word [ebp - 0x8e], ax
lea eax, [edi + 0x64]
mov ecx, eax
mov word [ebp - 0x8c], cx
add ecx, 2
mov word [ebp - 0x8a], cx
lea ecx, [edi + 0x6e]
mov word [ebp - 0x88], cx
mov ecx, eax
mov word [ebp - 0x86], cx
add ecx, 0xfffffffe
mov word [ebp - 0x84], cx
lea ebx, [edi + 0x60]
mov ecx, ebx
mov word [ebp - 0x82], cx
inc ecx
mov word [ebp - 0x76], ax
mov word [ebp - 0x80], cx
add eax, 4
mov word [ebp - 0x74], ax
lea ecx, [edi + 0x6c]
mov word [ebp - 0x7e], cx
add ecx, 0xfffffffb
mov eax, ebx
mov word [ebp - 0x72], ax
mov word [ebp - 0x7c], cx
mov eax, edi
mov ecx, ebx
mov word [ebp - 0x70], ax
mov word [ebp - 0x7a], cx
lea esi, [edi + 0x23]
mov eax, esi
add ecx, 9
mov word [ebp - 0x6e], ax
mov word [ebp - 0x6c], ax
mov word [ebp - 0x6a], ax
mov word [ebp - 0x68], ax
mov word [ebp - 0x66], ax
mov word [ebp - 0x64], ax
mov word [ebp - 0x62], ax
mov word [ebp - 0x60], ax
mov word [ebp - 0x5e], ax
mov word [ebp - 0x5c], ax
mov word [ebp - 0x5a], ax
mov word [ebp - 0x58], ax
mov word [ebp - 0x56], ax
mov word [ebp - 0x54], ax
mov word [ebp - 0x52], ax
mov word [ebp - 0x50], ax
mov word [ebp - 0x4e], ax
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], ax
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], ax
mov word [ebp - 0x44], ax
mov word [ebp - 0x42], ax
mov word [ebp - 0x40], ax
mov word [ebp - 0x3e], ax
mov word [ebp - 0x3c], ax
mov word [ebp - 0x3a], ax
mov word [ebp - 0x38], ax
mov word [ebp - 0x36], ax
mov word [ebp - 0x34], ax
mov word [ebp - 0x32], ax
mov word [ebp - 0x30], ax
mov word [ebp - 0x2e], ax
mov word [ebp - 0x78], cx
xor eax, eax
push 0x8f
lea ecx, [ebp - 0x10]
mov word [ebp - 0x2c], ax
call fcn.0041a1e7
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x20]
call fcn.00402611
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x18]
call fcn.00404421
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x64]
mov ecx, dword [ecx + 0x178]
mov eax, dword [eax]
push ecx
mov dword [ebp - 0x10], eax
call dword [0x52f3f4]
push eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00403c4b
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x188], 0
je 0x42b227
mov eax, edi
mov word [ebp - 0x90], ax
add eax, 0x61
mov word [ebp - 0x8e], ax
lea eax, [edi + 0x6c]
mov word [ebp - 0x8c], ax
add eax, 0xfffffffb
mov word [ebp - 0x8a], ax
mov eax, ebx
mov word [ebp - 0x88], ax
add eax, 9
mov word [ebp - 0x86], ax
lea eax, [edi + 0x64]
mov word [ebp - 0x84], ax
add eax, 4
mov word [ebp - 0x82], ax
mov eax, ebx
mov word [ebp - 0x80], ax
mov eax, edi
mov word [ebp - 0x7e], ax
mov eax, esi
mov word [ebp - 0x7c], ax
mov word [ebp - 0x7a], ax
mov word [ebp - 0x78], ax
mov word [ebp - 0x76], ax
mov word [ebp - 0x74], ax
mov word [ebp - 0x72], ax
mov word [ebp - 0x70], ax
mov word [ebp - 0x6e], ax
mov word [ebp - 0x6c], ax
mov word [ebp - 0x6a], ax
mov word [ebp - 0x68], ax
mov word [ebp - 0x66], ax
mov word [ebp - 0x64], ax
mov word [ebp - 0x62], ax
mov word [ebp - 0x60], ax
mov word [ebp - 0x5e], ax
mov word [ebp - 0x5c], ax
mov word [ebp - 0x5a], ax
mov word [ebp - 0x58], ax
mov word [ebp - 0x56], ax
mov word [ebp - 0x54], ax
mov word [ebp - 0x52], ax
mov word [ebp - 0x50], ax
mov word [ebp - 0x4e], ax
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], ax
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], ax
mov word [ebp - 0x44], ax
mov word [ebp - 0x42], ax
mov word [ebp - 0x40], ax
mov word [ebp - 0x3e], ax
mov word [ebp - 0x3c], ax
mov word [ebp - 0x3a], ax
mov word [ebp - 0x38], ax
mov word [ebp - 0x36], ax
mov word [ebp - 0x34], ax
mov word [ebp - 0x32], ax
mov word [ebp - 0x30], ax
mov word [ebp - 0x2e], ax
xor eax, eax
push 0x90
lea ecx, [ebp - 0x10]
mov word [ebp - 0x2c], ax
call fcn.0041a1e7
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x20]
call fcn.00402611
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x18]
call fcn.00404421
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x64]
mov ecx, dword [ecx + 0x18c]
mov eax, dword [eax]
push ecx
mov dword [ebp - 0x10], eax
call dword [0x52f3f4]
push eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00403c4b
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
push 0x92
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 8
jmp 0x42b238
push 0x93
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 9
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
xor ecx, ecx
cmp dword [eax + 0x20], ecx
jne 0x42b268
cmp dword [eax + 0x50], ecx
je 0x42b312
push 0x94
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x50], 0
je 0x42b2ca
push 0x95
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x20], 0
je 0x42b303
push 0x96
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0xc
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
jmp 0x42b310
push 0x53150c
lea ecx, [ebp - 0x14]
call fcn.004026a9
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x38], ecx
jne 0x42b33a
cmp dword [eax + 0x30], ecx
jne 0x42b33a
cmp dword [eax + 0x2c], ecx
jne 0x42b33a
cmp dword [eax + 0x34], ecx
jne 0x42b33a
cmp dword [eax + 0x24], ecx
jne 0x42b33a
cmp dword [eax + 0x28], ecx
je 0x42b608
push 0x97
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x18], 1
call fcn.0041a1e7
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x24], 0
je 0x42b3a7
push 0x98
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0xe
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x34], 0
je 0x42b422
cmp dword [ebp - 0x18], 0
jne 0x42b3c8
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
jmp 0x42b3f3
push 0x99
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x9a
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x10
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x2c], 0
je 0x42b49d
cmp dword [ebp - 0x18], 0
jne 0x42b443
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
jmp 0x42b46e
push 0x99
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x11
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x9b
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x12
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x38], 0
je 0x42b518
cmp dword [ebp - 0x18], 0
jne 0x42b4be
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
jmp 0x42b4e9
push 0x99
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x13
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x9c
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x14
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x28], 0
je 0x42b593
cmp dword [ebp - 0x18], 0
jne 0x42b539
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
jmp 0x42b564
push 0x99
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x15
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x9d
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x16
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x30], 0
je 0x42b5fb
cmp dword [ebp - 0x18], 0
jne 0x42b5d0
push 0x9e
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x17
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x9f
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x18
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x53150c
lea ecx, [ebp - 0x14]
call fcn.004026a9
lea ecx, [ebp - 0x28]
call fcn.004116da
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
push dword [eax + 0xe4]
push dword [eax + 0xe0]
call fcn.00440130
mov eax, dword [ebp - 0x9c]
add esp, 0x10
sub eax, 0
je 0x42b674
dec eax
je 0x42b668
dec eax
je 0x42b65c
dec eax
jne 0x42b686
movzx eax, word [0x5a35c4]
push eax
push 6
jmp 0x42b67e
movzx eax, word [0x5a35c4]
push eax
push 5
jmp 0x42b67e
movzx eax, word [0x5a35c4]
push eax
push 4
jmp 0x42b67e
movzx eax, word [0x5a35c4]
push eax
push 3
lea ecx, [ebp - 0x28]
call fcn.004119be
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0xd8], 0
je 0x42bb99
cmp dword [eax + 0xe8], 0
je 0x42bb99
mov eax, edi
mov word [ebp - 0x90], ax
mov eax, 0x927a
mov word [ebp - 0x8e], ax
add eax, 0xffffffe7
mov word [ebp - 0x8c], ax
mov eax, 0x9279
mov ecx, eax
mov word [ebp - 0x8a], cx
add ecx, 0xfffffffd
mov word [ebp - 0x88], cx
mov ecx, ebx
mov word [ebp - 0x86], cx
lea ecx, [eax - 0x13]
mov word [ebp - 0x84], cx
mov ecx, edi
mov word [ebp - 0x82], cx
mov ecx, esi
mov word [ebp - 0x80], cx
mov word [ebp - 0x7e], cx
mov word [ebp - 0x7c], cx
mov word [ebp - 0x7a], cx
mov word [ebp - 0x78], cx
mov word [ebp - 0x76], cx
mov word [ebp - 0x74], cx
mov word [ebp - 0x72], cx
mov word [ebp - 0x70], cx
mov word [ebp - 0x6e], cx
mov word [ebp - 0x6c], cx
mov word [ebp - 0x6a], cx
mov word [ebp - 0x68], cx
mov word [ebp - 0x66], cx
mov word [ebp - 0x64], cx
mov word [ebp - 0x62], cx
mov word [ebp - 0x60], cx
mov word [ebp - 0x5e], cx
mov word [ebp - 0x5c], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x58], cx
mov word [ebp - 0x56], cx
mov word [ebp - 0x54], cx
mov word [ebp - 0x52], cx
mov word [ebp - 0x50], cx
mov word [ebp - 0x4e], cx
mov word [ebp - 0x4c], cx
mov word [ebp - 0x4a], cx
mov word [ebp - 0x48], cx
mov word [ebp - 0x46], cx
mov word [ebp - 0x44], cx
mov word [ebp - 0x42], cx
mov word [ebp - 0x40], cx
mov word [ebp - 0x3e], cx
mov word [ebp - 0x3c], cx
mov word [ebp - 0x3a], cx
mov word [ebp - 0x38], cx
mov word [ebp - 0x36], cx
mov word [ebp - 0x34], cx
mov word [ebp - 0x32], cx
mov word [ebp - 0x30], cx
mov word [ebp - 0x2e], cx
xor ecx, ecx
mov word [ebp - 0x2c], cx
mov ecx, edi
mov word [ebp - 0x16c], cx
lea ecx, [eax - 0x19]
mov word [ebp - 0x16a], cx
add ecx, 0x1d
mov edx, ecx
mov word [ebp - 0x168], dx
mov edx, eax
mov word [ebp - 0x166], dx
mov edx, ebx
mov word [ebp - 0x164], dx
lea edx, [eax - 0x18]
mov word [ebp - 0x162], dx
add edx, 0x19
mov word [ebp - 0x160], dx
mov edx, ecx
mov word [ebp - 0x15e], dx
lea edx, [eax - 0x19]
mov word [ebp - 0x15c], dx
mov edx, edi
mov word [ebp - 0x15a], dx
mov edx, esi
mov word [ebp - 0x158], dx
mov word [ebp - 0x156], dx
mov word [ebp - 0x154], dx
mov word [ebp - 0x152], dx
mov word [ebp - 0x150], dx
mov word [ebp - 0x14e], dx
mov word [ebp - 0x14c], dx
mov word [ebp - 0x14a], dx
mov word [ebp - 0x148], dx
mov word [ebp - 0x146], dx
mov word [ebp - 0x144], dx
mov word [ebp - 0x142], dx
mov word [ebp - 0x140], dx
mov word [ebp - 0x13e], dx
mov word [ebp - 0x13c], dx
mov word [ebp - 0x13a], dx
mov word [ebp - 0x138], dx
mov word [ebp - 0x136], dx
mov word [ebp - 0x134], dx
mov word [ebp - 0x132], dx
mov word [ebp - 0x130], dx
mov word [ebp - 0x12e], dx
mov word [ebp - 0x12c], dx
mov word [ebp - 0x12a], dx
mov word [ebp - 0x128], dx
mov word [ebp - 0x126], dx
mov word [ebp - 0x124], dx
mov word [ebp - 0x122], dx
mov word [ebp - 0x120], dx
mov word [ebp - 0x11e], dx
mov word [ebp - 0x11c], dx
mov word [ebp - 0x11a], dx
mov word [ebp - 0x118], dx
mov word [ebp - 0x116], dx
mov word [ebp - 0x114], dx
mov word [ebp - 0x112], dx
mov word [ebp - 0x110], dx
mov word [ebp - 0x10e], dx
mov word [ebp - 0x10c], dx
mov word [ebp - 0x10a], dx
xor edx, edx
mov word [ebp - 0x100], ax
add eax, 0xfffffffc
mov word [ebp - 0xfe], ax
mov eax, 0x9278
mov word [ebp - 0x108], dx
mov word [ebp - 0xfa], ax
mov edx, edi
mov eax, edi
mov word [ebp - 0x104], dx
mov word [ebp - 0xf8], ax
mov eax, esi
mov edx, ebx
mov word [ebp - 0x102], dx
mov word [ebp - 0xfc], cx
mov word [ebp - 0xf6], ax
mov word [ebp - 0xf4], ax
mov word [ebp - 0xf2], ax
mov word [ebp - 0xf0], ax
mov word [ebp - 0xee], ax
mov word [ebp - 0xec], ax
mov word [ebp - 0xea], ax
mov word [ebp - 0xe8], ax
mov word [ebp - 0xe6], ax
mov word [ebp - 0xe4], ax
mov word [ebp - 0xe2], ax
mov word [ebp - 0xe0], ax
mov word [ebp - 0xde], ax
mov word [ebp - 0xdc], ax
mov word [ebp - 0xda], ax
mov word [ebp - 0xd8], ax
mov word [ebp - 0xd6], ax
mov word [ebp - 0xd4], ax
mov word [ebp - 0xd2], ax
mov word [ebp - 0xd0], ax
mov word [ebp - 0xce], ax
mov word [ebp - 0xcc], ax
mov word [ebp - 0xca], ax
mov word [ebp - 0xc8], ax
mov word [ebp - 0xc6], ax
mov word [ebp - 0xc4], ax
mov word [ebp - 0xc2], ax
mov word [ebp - 0xc0], ax
mov word [ebp - 0xbe], ax
mov word [ebp - 0xbc], ax
mov word [ebp - 0xba], ax
mov word [ebp - 0xb8], ax
mov word [ebp - 0xb6], ax
mov word [ebp - 0xb4], ax
mov word [ebp - 0xb2], ax
mov word [ebp - 0xb0], ax
mov word [ebp - 0xae], ax
mov word [ebp - 0xac], ax
mov word [ebp - 0xaa], ax
mov word [ebp - 0xa8], ax
mov word [ebp - 0xa6], ax
mov word [ebp - 0xa4], ax
mov word [ebp - 0xa2], ax
xor eax, eax
push 0xa0
lea ecx, [ebp - 0x10]
mov word [ebp - 0xa0], ax
call fcn.0041a1e7
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x20]
call fcn.00402611
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea ecx, [ebp - 0x18]
call fcn.00402133
mov byte [ebp - 4], 0x1b
push dword [ebp - 0x94]
lea eax, [ebp - 0x18]
push 0x531308
push eax
call fcn.00403254
add esp, 0xc
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x1c
push dword [ebp - 0x18]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x1d
push dword [ebp - 0x28]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0x64]
mov ecx, dword [ecx + 0x120]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18]
call fcn.00402189
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0xd8], 0
je 0x42c26e
cmp dword [eax + 0xec], 0
je 0x42c26e
mov eax, edi
mov word [ebp - 0x104], ax
mov eax, 0x927a
mov ecx, eax
mov word [ebp - 0x102], cx
add ecx, 0xffffffe7
mov word [ebp - 0x100], cx
lea ecx, [eax - 1]
mov edx, ecx
mov word [ebp - 0xfe], dx
add edx, 0xfffffffd
mov word [ebp - 0xfc], dx
mov edx, ebx
mov word [ebp - 0xfa], dx
lea edx, [eax - 0x14]
mov word [ebp - 0xf8], dx
mov edx, edi
mov word [ebp - 0xf6], dx
mov edx, esi
mov word [ebp - 0xf4], dx
mov word [ebp - 0xf2], dx
mov word [ebp - 0xf0], dx
mov word [ebp - 0xee], dx
mov word [ebp - 0xec], dx
mov word [ebp - 0xea], dx
mov word [ebp - 0xe8], dx
mov word [ebp - 0xe6], dx
mov word [ebp - 0xe4], dx
mov word [ebp - 0xe2], dx
mov word [ebp - 0xe0], dx
mov word [ebp - 0xde], dx
mov word [ebp - 0xdc], dx
mov word [ebp - 0xda], dx
mov word [ebp - 0xd8], dx
mov word [ebp - 0xd6], dx
mov word [ebp - 0xd4], dx
mov word [ebp - 0xd2], dx
mov word [ebp - 0xd0], dx
mov word [ebp - 0xce], dx
mov word [ebp - 0xcc], dx
mov word [ebp - 0xca], dx
mov word [ebp - 0xc8], dx
mov word [ebp - 0xc6], dx
mov word [ebp - 0xc4], dx
mov word [ebp - 0xc2], dx
mov word [ebp - 0xc0], dx
mov word [ebp - 0xbe], dx
mov word [ebp - 0xbc], dx
mov word [ebp - 0xba], dx
mov word [ebp - 0xb8], dx
mov word [ebp - 0xb6], dx
mov word [ebp - 0xb4], dx
mov word [ebp - 0xb2], dx
mov word [ebp - 0xb0], dx
mov word [ebp - 0xae], dx
mov word [ebp - 0xac], dx
mov word [ebp - 0xaa], dx
mov word [ebp - 0xa8], dx
mov word [ebp - 0xa6], dx
mov word [ebp - 0xa4], dx
mov word [ebp - 0xa2], dx
xor edx, edx
mov word [ebp - 0xa0], dx
mov edx, edi
mov word [ebp - 0x16c], dx
lea edx, [eax - 0x1a]
mov word [ebp - 0x16a], dx
add edx, 0x1d
mov word [ebp - 0x168], dx
mov edx, ecx
mov word [ebp - 0x166], dx
mov edx, ebx
mov word [ebp - 0x164], dx
lea edx, [eax - 0x19]
mov word [ebp - 0x162], dx
mov edx, eax
mov word [ebp - 0x160], dx
add edx, 3
mov word [ebp - 0x15e], dx
lea edx, [eax - 0x1a]
mov word [ebp - 0x15c], dx
mov edx, edi
mov word [ebp - 0x15a], dx
mov edx, esi
mov word [ebp - 0x158], dx
mov word [ebp - 0x156], dx
mov word [ebp - 0x154], dx
mov word [ebp - 0x152], dx
mov word [ebp - 0x150], dx
mov word [ebp - 0x14e], dx
mov word [ebp - 0x14c], dx
mov word [ebp - 0x14a], dx
mov word [ebp - 0x148], dx
mov word [ebp - 0x146], dx
mov word [ebp - 0x144], dx
mov word [ebp - 0x142], dx
mov word [ebp - 0x140], dx
mov word [ebp - 0x13e], dx
mov word [ebp - 0x13c], dx
mov word [ebp - 0x13a], dx
mov word [ebp - 0x138], dx
mov word [ebp - 0x136], dx
mov word [ebp - 0x134], dx
mov word [ebp - 0x132], dx
mov word [ebp - 0x130], dx
mov word [ebp - 0x12e], dx
mov word [ebp - 0x12c], dx
mov word [ebp - 0x12a], dx
mov word [ebp - 0x128], dx
mov word [ebp - 0x126], dx
mov word [ebp - 0x124], dx
mov word [ebp - 0x122], dx
mov word [ebp - 0x120], dx
mov word [ebp - 0x11e], dx
mov word [ebp - 0x11c], dx
mov word [ebp - 0x11a], dx
mov word [ebp - 0x118], dx
mov word [ebp - 0x116], dx
mov word [ebp - 0x114], dx
mov word [ebp - 0x112], dx
mov word [ebp - 0x110], dx
mov word [ebp - 0x10e], dx
mov word [ebp - 0x10c], dx
mov word [ebp - 0x10a], dx
xor edx, edx
mov word [ebp - 0x108], dx
mov edx, edi
mov word [ebp - 0x1d4], dx
lea edx, [eax - 0x13]
mov word [ebp - 0x1d2], dx
mov edx, ebx
mov word [ebp - 0x1d0], dx
lea edx, [eax - 0x14]
mov word [ebp - 0x1ce], dx
add edx, 0xfffffffc
mov word [ebp - 0x1cc], dx
mov edx, ebx
mov word [ebp - 0x1ca], dx
lea edx, [eax - 0x14]
mov word [ebp - 0x1c8], dx
mov edx, eax
mov word [ebp - 0x1c6], dx
add edx, 0xfffffffb
mov word [ebp - 0x1c4], dx
mov edx, ecx
mov word [ebp - 0x1c2], dx
mov edx, ebx
mov word [ebp - 0x1c0], dx
mov edx, edi
mov word [ebp - 0x1be], dx
mov edx, esi
mov word [ebp - 0x1bc], dx
mov word [ebp - 0x1ba], dx
mov word [ebp - 0x1b8], dx
mov word [ebp - 0x1b6], dx
mov word [ebp - 0x1b4], dx
mov word [ebp - 0x1b2], dx
mov word [ebp - 0x1b0], dx
mov word [ebp - 0x1ae], dx
mov word [ebp - 0x1ac], dx
mov word [ebp - 0x1aa], dx
mov word [ebp - 0x1a8], dx
mov word [ebp - 0x1a6], dx
mov word [ebp - 0x1a4], dx
mov word [ebp - 0x1a2], dx
mov word [ebp - 0x1a0], dx
mov word [ebp - 0x19e], dx
mov word [ebp - 0x19c], dx
mov word [ebp - 0x19a], dx
mov word [ebp - 0x198], dx
mov word [ebp - 0x196], dx
mov word [ebp - 0x194], dx
mov word [ebp - 0x192], dx
mov word [ebp - 0x190], dx
mov word [ebp - 0x18e], dx
mov word [ebp - 0x18c], dx
mov word [ebp - 0x18a], dx
mov word [ebp - 0x188], dx
mov word [ebp - 0x186], dx
mov word [ebp - 0x184], dx
mov word [ebp - 0x182], dx
mov word [ebp - 0x180], dx
mov word [ebp - 0x17e], dx
mov word [ebp - 0x17c], dx
mov word [ebp - 0x17a], dx
mov word [ebp - 0x178], dx
mov word [ebp - 0x176], dx
mov word [ebp - 0x174], dx
mov word [ebp - 0x172], dx
xor edx, edx
mov word [ebp - 0x170], dx
mov edx, edi
mov word [ebp - 0x90], dx
lea edx, [eax - 8]
mov word [ebp - 0x8e], dx
add edx, 9
mov word [ebp - 0x8c], dx
lea edx, [eax - 2]
mov word [ebp - 0x8a], dx
add edx, 0xfffffff8
mov word [ebp - 0x88], dx
mov edx, ebx
mov word [ebp - 0x82], ax
mov word [ebp - 0x86], dx
lea edx, [eax - 0x14]
add eax, 0xfffffffb
mov word [ebp - 0x80], ax
mov eax, edi
mov word [ebp - 0x7a], ax
mov eax, esi
mov word [ebp - 0x84], dx
mov word [ebp - 0x7e], cx
mov word [ebp - 0x7c], bx
mov word [ebp - 0x78], ax
mov word [ebp - 0x76], ax
mov word [ebp - 0x74], ax
mov word [ebp - 0x72], ax
mov word [ebp - 0x70], ax
mov word [ebp - 0x6e], ax
mov word [ebp - 0x6c], ax
mov word [ebp - 0x6a], ax
mov word [ebp - 0x68], ax
mov word [ebp - 0x66], ax
mov word [ebp - 0x64], ax
mov word [ebp - 0x62], ax
mov word [ebp - 0x60], ax
mov word [ebp - 0x5e], ax
mov word [ebp - 0x5c], ax
mov word [ebp - 0x5a], ax
mov word [ebp - 0x58], ax
mov word [ebp - 0x56], ax
mov word [ebp - 0x54], ax
mov word [ebp - 0x52], ax
mov word [ebp - 0x50], ax
mov word [ebp - 0x4e], ax
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], ax
mov word [ebp - 0x48], ax
mov word [ebp - 0x46], ax
mov word [ebp - 0x44], ax
mov word [ebp - 0x42], ax
mov word [ebp - 0x40], ax
mov word [ebp - 0x3e], ax
mov word [ebp - 0x3c], ax
mov word [ebp - 0x3a], ax
mov word [ebp - 0x38], ax
mov word [ebp - 0x36], ax
mov word [ebp - 0x34], ax
mov word [ebp - 0x32], ax
mov word [ebp - 0x30], ax
mov word [ebp - 0x2e], ax
xor eax, eax
push 0xa1
lea ecx, [ebp - 0x10]
mov word [ebp - 0x2c], ax
call fcn.0041a1e7
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x20]
call fcn.00402611
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea ecx, [ebp - 0x18]
call fcn.00402133
mov byte [ebp - 4], 0x20
push dword [ebp - 0x94]
lea eax, [ebp - 0x18]
push 0x531308
push eax
call fcn.00403254
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x21
push dword [ebp - 0x18]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x22
push dword [ebp - 0x28]
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x23
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x64]
mov ecx, dword [ecx + 0x14c]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x24
mov ecx, dword [ebx + 0x64]
mov ecx, dword [ecx + 0x148]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18]
call fcn.00402189
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x4c]
cmp dword [eax - 0xc], 0
je 0x42c587
mov eax, edi
mov word [ebp - 0x1d4], ax
mov eax, 0x9264
mov word [ebp - 0x1d2], ax
add eax, 0x11
mov word [ebp - 0x1d0], ax
mov eax, 0x9267
mov ecx, eax
mov word [ebp - 0x1cc], ax
add eax, 0xfffffffc
mov word [ebp - 0x1ca], ax
lea eax, [ecx + 0x14]
mov word [ebp - 0x1c8], ax
add eax, 0xffffffeb
mov word [ebp - 0x1c6], ax
lea eax, [ecx + 9]
mov word [ebp - 0x1c4], ax
mov eax, esi
mov word [ebp - 0x1c0], ax
mov word [ebp - 0x1be], ax
mov word [ebp - 0x1bc], ax
mov word [ebp - 0x1ba], ax
mov word [ebp - 0x1b8], ax
mov word [ebp - 0x1b6], ax
mov word [ebp - 0x1b4], ax
mov word [ebp - 0x1b2], ax
mov word [ebp - 0x1b0], ax
mov word [ebp - 0x1ae], ax
mov word [ebp - 0x1ac], ax
mov word [ebp - 0x1aa], ax
mov word [ebp - 0x1a8], ax
mov word [ebp - 0x1a6], ax
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a2], ax
mov word [ebp - 0x1a0], ax
mov word [ebp - 0x19e], ax
mov word [ebp - 0x19c], ax
mov word [ebp - 0x19a], ax
mov word [ebp - 0x198], ax
mov word [ebp - 0x196], ax
mov word [ebp - 0x194], ax
mov word [ebp - 0x192], ax
mov word [ebp - 0x190], ax
mov word [ebp - 0x18e], ax
mov word [ebp - 0x18c], ax
mov word [ebp - 0x18a], ax
mov word [ebp - 0x188], ax
mov word [ebp - 0x186], ax
mov word [ebp - 0x184], ax
mov word [ebp - 0x182], ax
mov word [ebp - 0x180], ax
mov word [ebp - 0x17e], ax
mov word [ebp - 0x17c], ax
mov word [ebp - 0x17a], ax
mov word [ebp - 0x178], ax
mov word [ebp - 0x176], ax
mov word [ebp - 0x174], ax
mov word [ebp - 0x1ce], cx
xor eax, eax
xor ebx, ebx
push 0xa2
lea ecx, [ebp - 0x10]
inc ebx
mov word [ebp - 0x1c2], di
mov word [ebp - 0x172], si
mov word [ebp - 0x170], ax
call fcn.0041a1e7
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x20]
call fcn.00402611
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x26
mov esi, dword [ebp - 0x1c]
mov ecx, dword [esi + 0x64]
mov ecx, dword [ecx + 0x4c]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.0040e3dc
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov eax, dword [ebp - 0x20]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov eax, dword [esi + 0x64]
xor edi, edi
cmp dword [eax + 0x40], edi
je 0x42c4aa
push 0xa9
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x27
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
xor ebx, ebx
mov eax, dword [esi + 0x64]
cmp dword [eax + 0x3c], edi
je 0x42c4f0
cmp ebx, edi
jne 0x42c4c3
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
push 0xa3
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x28
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
xor ebx, ebx
mov eax, dword [esi + 0x64]
cmp dword [eax + 0x44], edi
je 0x42c536
cmp ebx, edi
jne 0x42c509
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
push 0xa4
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x29
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
xor ebx, ebx
mov eax, dword [esi + 0x64]
cmp dword [eax + 0x48], edi
je 0x42c57a
cmp ebx, edi
jne 0x42c54f
push 0x53101c
lea ecx, [ebp - 0x14]
call fcn.004026a9
push 0xa5
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x2a
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0x53150c
lea ecx, [ebp - 0x14]
call fcn.004026a9
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x54], 0
je 0x42c635
push 0xa6
lea ecx, [ebp - 0x10]
call fcn.0041a1e7
mov byte [ebp - 4], 0x2b
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10]
call fcn.00403c4b
push 0xa7
lea ecx, [ebp - 0x98]
call fcn.0041a1e7
mov esi, eax
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
push dword [eax + 0x54]
lea eax, [ebp - 0x18]
push eax
call fcn.004359ec
mov byte [ebp - 4], 0x2d
push esi
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00402737
add esp, 0x14
mov byte [ebp - 4], 0x2e
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x10]
call fcn.00402189
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x18]
call fcn.00402189
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x98]
call fcn.00403c4b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x64]
cmp dword [eax + 0x58], 0
je 0x42c6aa
push 0x64
lea ecx, [ebp - 0x234]
push ecx
push 0
add eax, 0x5c
push eax
push 2
push 0x400
call dword [0x52f210]
push 0xa8
lea ecx, [ebp - 0x98]
call fcn.0041a1e7
mov byte [ebp - 4], 0x2f
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x98]
call fcn.00403c4b
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x14]
call fcn.004026a9
push 0x531508
lea ecx, [ebp - 0x14]
call fcn.004026a9
push 0x531514
lea ecx, [ebp - 0x14]
call fcn.004026a9
mov edi, dword [ebp - 0x1c]
xor esi, esi
push esi
push dword [ebp - 0x14]
add edi, 0x1610
mov ecx, edi
call fcn.0042aaa6
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x2a0], esi
mov esi, dword [ebp - 0x24]
push 0xffffffffffffffff
push esi
mov ecx, edi
mov byte [ebp - 0x238], 0
mov dword [ebp - 0x2a4], 0x40800001
call fcn.0042a7c8
lea eax, [ebp - 0x2a8]
push eax
mov ecx, edi
call fcn.0042a7f0
mov eax, dword [ebp - 0x14]
add esi, dword [eax - 0xc]
push 0x52faf0
lea ecx, [ebp - 0x14]
call fcn.004026dd
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x64]
mov eax, dword [eax + 4]
cmp dword [eax - 0xc], 0
jne 0x42c7c7
push 0xaa
lea ecx, [ebp - 0x18]
call fcn.0041a1e7
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x30
push 0x592688
lea ecx, [ebp - 0x10]
call fcn.00404421
mov byte [ebp - 4], 0x31
push dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.00402737
add esp, 0xc
mov byte [ebp - 4], 0x32
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x98]
call fcn.00402189
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x10]
call fcn.00403c4b
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18]
call fcn.00403c4b
push 0xab
lea ecx, [ebp - 0x24]
call fcn.0041a1e7
mov byte [ebp - 4], 0x33
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x24]
call fcn.00403c4b
mov eax, dword [ebx + 0x64]
cmp dword [eax + 0x20], 0
jne 0x42c7fb
push 0xac
lea ecx, [ebp - 0x24]
call fcn.0041a1e7
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x24]
call fcn.00403c4b
mov eax, dword [ebx + 0x64]
cmp dword [eax + 0x50], 0
jne 0x42c82f
push 0xad
lea ecx, [ebp - 0x24]
call fcn.0041a1e7
mov byte [ebp - 4], 0x35
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x24]
call fcn.00403c4b
push 0x531504
lea ecx, [ebp - 0x14]
call fcn.004026a9
push 0
push dword [ebp - 0x14]
mov ecx, edi
call fcn.0042aaa6
push 0xffffffffffffffff
push esi
mov ecx, edi
mov dword [ebp - 0x2a4], 0x40000000
mov dword [ebp - 0x294], 0xff
call fcn.0042a7c8
lea eax, [ebp - 0x2a8]
push eax
mov ecx, edi
call fcn.0042a7f0
mov eax, dword [ebp - 0x14]
add esi, dword [eax - 0xc]
push 0x52faf0
lea ecx, [ebp - 0x14]
call fcn.004026dd
mov eax, dword [ebx + 0x64]
cmp dword [eax + 0xd8], 0
jne 0x42c8be
push 0xae
lea ecx, [ebp - 0x24]
call fcn.0041a1e7
mov byte [ebp - 4], 0x36
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x24]
call fcn.00403c4b
mov eax, dword [ebx + 0x64]
mov eax, dword [eax + 0x4c]
cmp dword [eax - 0xc], 0
jne 0x42c8f5
push 0xaf
lea ecx, [ebp - 0x24]
call fcn.0041a1e7
mov byte [ebp - 4], 0x37
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.00402279
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x24]
call fcn.00403c4b
push 0
push dword [ebp - 0x14]
mov ecx, edi
call fcn.0042aaa6
push 0xffffffffffffffff
push esi
mov ecx, edi
mov dword [ebp - 0x2a4], 0x40000000
mov dword [ebp - 0x294], 0xff0000
call fcn.0042a7c8
lea eax, [ebp - 0x2a8]
push eax
mov ecx, edi
call fcn.0042a7f0
push 0
push 0xffffffffffffffff
mov ecx, edi
call fcn.0042a7c8
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.00403c4b
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00402189
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00402189
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret