Function at 0x576788
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x3f
push 0
push 0
dec ecx
jne 0x576790
push ecx
push ebx
push esi
push edi
mov ebx, eax
lea eax, [ebp - 0xd8]
mov edx, dword [0x48b5e4]
call fcn.0040603c
xor eax, eax
push ebp
push 0x577cb3
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0xdc], 0xffffffff
lea edx, [ebp - 0x118]
mov eax, 0x577cd4
call fcn.0049b4d8
mov ecx, dword [ebp - 0x118]
mov edx, dword [select]
mov edx, dword [edx + 0x16c]
lea eax, [ebp - 4]
call fcn.004056ac
lea edx, [ebp - 0x2c]
mov eax, dword [0x6c0a74]
mov eax, dword [eax]
call fcn.00461da0
mov eax, dword [ebp - 4]
call fcn.004c9c68
test al, al
je 0x577c2c
mov dl, 1
mov eax, dword [0x49fa90]
call fcn.00404400
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jge 0x57684e
mov eax, dword [ebp - 0xe0]
call fcn.00404430
jmp 0x577c2c
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 4]
call fcn.0040ae98
mov edx, dword [ebp - 0x11c]
lea ecx, [ebp - 0xe0]
mov eax, ebx
call fcn.00573c20
mov dword [ebp - 0xdc], 1
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x577894
inc esi
xor ebx, ebx
lea ecx, [ebp - 8]
mov edx, ebx
mov eax, dword [ebp - 0xe0]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 8], 0
je 0x57788c
mov eax, dword [ebp - 8]
cmp byte [eax], 0x5b
jne 0x57788c
lea eax, [ebp - 0x14]
call fcn.00405394
mov byte [ebp - 0xd8], 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x120]
push eax
mov ecx, 0x577cf0
mov edx, 0x577cfc
mov eax, dword [ebp - 8]
call fcn.0048aec8
mov edx, dword [ebp - 0x120]
lea eax, [ebp - 8]
call fcn.0040542c
push 2
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 0x124], 0x20
mov byte [ebp - 0x123], 0x2c
mov byte [ebp - 0x122], 9
lea ecx, [ebp - 0x124]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x14]
call fcn.0048ad34
push 3
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 0x12c], 0x7c
mov byte [ebp - 0x12b], 0x2f
mov byte [ebp - 0x12a], 0x5c
mov byte [ebp - 0x129], 9
lea ecx, [ebp - 0x12c]
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x14]
call fcn.0048ab7c
mov eax, dword [ebp - 0x128]
lea edx, [ebp - 0x18]
call fcn.0040a278
cmp dword [ebp - 0x20], 0
je 0x57698d
mov eax, dword [ebp - 0x20]
cmp byte [eax], 0x22
jne 0x57698d
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x130]
push eax
mov ecx, 0x577d08
mov edx, 0x577d08
mov eax, dword [ebp - 0x20]
call fcn.0048aec8
push 2
lea eax, [ebp - 0x134]
push eax
mov byte [ebp - 0x124], 0x20
mov byte [ebp - 0x123], 0x2c
mov byte [ebp - 0x122], 9
lea ecx, [ebp - 0x124]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x20]
call fcn.0048ab7c
mov eax, dword [ebp - 0x134]
lea edx, [ebp - 0x24]
call fcn.0040a278
xor edx, edx
mov eax, dword [ebp - 0x24]
call fcn.0040a9e0
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0x14], 0
je 0x57788c
lea eax, [ebp - 0xd8]
mov edx, dword [0x48b5e4]
call fcn.0040610c
xor ecx, ecx
mov edx, 0xa8
call fcn.0048a158
mov dword [ebp - 0xb0], 1
xor eax, eax
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0x34]
call fcn.00405394
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0xa8], 0xffffffff
lea eax, [ebp - 0x4c]
call fcn.00405394
mov byte [ebp - 0x40], 0
mov byte [ebp - 0x3f], 0
mov dword [ebp - 0xa4], 0xffffffff
mov byte [ebp - 0xb8], 0
mov byte [ebp - 0xfd], 0
mov dword [ebp - 0x104], 0xffffffff
mov byte [ebp - 0x105], 1
cmp dword [ebp - 8], 0
je 0x57773e
push 1
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 0x13c], 0x20
mov byte [ebp - 0x13b], 9
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 8]
call fcn.0040542c
cmp dword [ebp - 0xc], 0
je 0x57773e
mov edx, 0x577d14
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576acc
mov byte [ebp - 0xd8], 1
jmp 0x576a68
mov edx, 0x577d24
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576ae6
mov byte [ebp - 0xd7], 1
jmp 0x576a68
mov edx, 0x577d34
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576b03
mov byte [ebp - 0xd6], 1
jmp 0x576a68
mov edx, 0x577d44
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576b20
mov byte [ebp - 0xd5], 1
jmp 0x576a68
mov edx, 0x577d54
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576b3d
mov byte [ebp - 0xd4], 1
jmp 0x576a68
mov edx, 0x577d60
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576b5a
mov byte [ebp - 0xd3], 1
jmp 0x576a68
mov edx, 0x577d70
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576b77
mov byte [ebp - 0xb8], 1
jmp 0x576a68
mov edx, 0x577d80
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576b94
mov byte [ebp - 0xb5], 1
jmp 0x576a68
mov edx, 0x577d94
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576bb1
mov byte [ebp - 0xb4], 1
jmp 0x576a68
mov edx, 0x577da4
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x576bce
mov byte [ebp - 0xb3], 1
jmp 0x576a68
mov ecx, 3
mov edx, 0x577db8
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x576dbb
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x140]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
push 0
lea eax, [ebp - 0x144]
push eax
mov byte [ebp - 0x148], 0x2c
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x10]
call fcn.0040542c
xor edx, edx
mov eax, dword [ebp - 0x1c]
call fcn.0040a9e0
mov dword [ebp - 0x104], eax
push 0
lea eax, [ebp - 0x14c]
push eax
mov byte [ebp - 0x148], 0x2c
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov edx, dword [ebp - 0x14c]
lea eax, [ebp - 0x10]
call fcn.0040542c
push 0
lea eax, [ebp - 0x150]
push eax
mov byte [ebp - 0x148], 0x2c
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov edx, dword [ebp - 0x150]
lea eax, [ebp - 0x10]
call fcn.0040542c
mov eax, dword [ebp - 0x1c]
mov edx, 0x577ddc
call fcn.004057bc
jne 0x576cba
mov byte [ebp - 0x105], 0
jmp 0x576cc1
mov byte [ebp - 0x105], 1
cmp dword [ebp - 0x30], 0
jne 0x576d07
mov dword [ebp - 0xdc], 0xfffffff4
lea eax, [ebp - 0x154]
mov ecx, 0x577de8
mov edx, dword [ebp - 0x14]
call fcn.004056ac
mov edx, dword [ebp - 0x154]
mov eax, dword [0x6c0a74]
mov eax, dword [eax]
mov eax, dword [eax + 0x434]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x577c2c
mov eax, dword [ebp - 0x104]
add eax, 0xfffffffe
sub eax, 0x62
jb 0x576d55
mov dword [ebp - 0xdc], 0xfffffff3
lea eax, [ebp - 0x158]
mov ecx, 0x577e04
mov edx, dword [ebp - 0x14]
call fcn.004056ac
mov edx, dword [ebp - 0x158]
mov eax, dword [0x6c0a74]
mov eax, dword [eax]
mov eax, dword [eax + 0x434]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x577c2c
mov eax, dword [0x6c0ee4]
mov eax, dword [eax]
mov edx, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x54]
inc eax
je 0x576db4
mov dword [ebp - 0xdc], 0xfffffff2
push dword [ebp - 0x14]
push 0x577e20
push dword [ebp - 0x30]
push 0x577e34
lea eax, [ebp - 0x15c]
mov edx, 4
call fcn.00405728
mov edx, dword [ebp - 0x15c]
mov eax, dword [0x6c0a74]
mov eax, dword [eax]
mov eax, dword [eax + 0x434]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x577c2c
mov byte [ebp - 0xfd], 1
mov ecx, 0xb
mov edx, 0x577e48
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x576ecf
mov byte [ebp - 0xd2], 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x160]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
push 0
lea eax, [ebp - 0x164]
push eax
mov byte [ebp - 0x148], 0x2c
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x28]
call fcn.0048ab7c
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 0x28]
call fcn.0040542c
push 0
lea eax, [ebp - 0x168]
push eax
mov byte [ebp - 0x148], 0x2c
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x28]
call fcn.0048ab7c
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x28]
call fcn.0040542c
push 0
lea eax, [ebp - 0x16c]
push eax
mov byte [ebp - 0x148], 0x2c
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
call fcn.0048ab7c
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x28]
call fcn.0040542c
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0xe8], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x1c]
call fcn.0040a9e0
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0x5c], 0
jne 0x576eb8
mov dword [ebp - 0xdc], 0xfffffff5
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x54], eax
jmp 0x576a68
mov ecx, 0xa
mov edx, 0x577e5c
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x576f15
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x170]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
mov eax, dword [ebp - 0x10]
call fcn.0057667c
mov dword [ebp - 0xfc], eax
jmp 0x576a68
mov ecx, 6
mov edx, 0x577e70
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x576f6b
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x174]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
mov edi, dword [ebp - 0x10]
test edi, edi
je 0x576f54
sub edi, 4
mov edi, dword [edi]
dec edi
jle 0x576a68
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x10]
call fcn.0040542c
jmp 0x576a68
mov ecx, 0xa
mov edx, 0x577e80
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x576fbe
mov dword [ebp - 0xa8], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x178]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0xac], eax
jmp 0x576a68
mov ecx, 0xb
mov edx, 0x577e94
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57700f
xor eax, eax
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x17c]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0xac], eax
jmp 0x576a68
mov ecx, 5
mov edx, 0x577ea8
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57705f
mov byte [ebp - 0xd1], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x180]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0xa4], eax
jmp 0x576a68
mov ecx, 7
mov edx, 0x577eb8
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5770af
mov byte [ebp - 0xd0], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x184]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x9c], eax
jmp 0x576a68
mov ecx, 0xa
mov edx, 0x577ec8
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5770ff
mov byte [ebp - 0xcf], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x188]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0xa0], eax
jmp 0x576a68
mov ecx, 8
mov edx, 0x577edc
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57714f
mov byte [ebp - 0xce], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x18c]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x98], eax
jmp 0x576a68
mov ecx, 0xb
mov edx, 0x577ef0
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57719f
mov byte [ebp - 0xcd], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x190]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x94], eax
jmp 0x576a68
mov ecx, 9
mov edx, 0x577f04
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5771ef
mov byte [ebp - 0xcc], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x194]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x90], eax
jmp 0x576a68
mov ecx, 5
mov edx, 0x577f18
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577274
mov byte [ebp - 0xcb], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x198]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
push 0
lea eax, [ebp - 0x19c]
push eax
mov byte [ebp - 0x148], 0x2f
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov eax, dword [ebp - 0x19c]
or edx, 0xffffffff
call fcn.0040a9e0
mov dword [ebp - 0x8c], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x88], eax
jmp 0x576a68
mov ecx, 5
mov edx, 0x577f28
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5772f6
mov byte [ebp - 0xca], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1a0]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
push 0
lea eax, [ebp - 0x1a4]
push eax
mov byte [ebp - 0x148], 0x2f
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov eax, dword [ebp - 0x1a4]
or edx, 0xffffffff
call fcn.0040a9e0
mov dword [ebp - 0x84], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x80], eax
jmp 0x576a68
mov ecx, 0xb
mov edx, 0x577f38
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577375
mov byte [ebp - 0xc9], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1a8]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
push 0
lea eax, [ebp - 0x1ac]
push eax
mov byte [ebp - 0x148], 0x2f
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov eax, dword [ebp - 0x1ac]
or edx, 0xffffffff
call fcn.0040a9e0
mov dword [ebp - 0x7c], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x78], eax
jmp 0x576a68
mov ecx, 0xb
mov edx, 0x577f4c
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5773f4
mov byte [ebp - 0xc7], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1b0]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
push 0
lea eax, [ebp - 0x1b4]
push eax
mov byte [ebp - 0x148], 0x2f
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x10]
call fcn.0048ab7c
mov eax, dword [ebp - 0x1b4]
or edx, 0xffffffff
call fcn.0040a9e0
mov dword [ebp - 0x6c], eax
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x68], eax
jmp 0x576a68
mov ecx, 8
mov edx, 0x577f60
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577416
mov byte [ebp - 0xc5], 1
jmp 0x576a68
mov ecx, 6
mov edx, 0x577f74
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577438
mov byte [ebp - 0xc4], 1
jmp 0x576a68
mov ecx, 8
mov edx, 0x577f84
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57745a
mov byte [ebp - 0xc3], 1
jmp 0x576a68
mov ecx, 8
mov edx, 0x577f98
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57747c
mov byte [ebp - 0xc2], 1
jmp 0x576a68
mov ecx, 0xd
mov edx, 0x577fac
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57749e
mov byte [ebp - 0xc1], 1
jmp 0x576a68
mov ecx, 0xc
mov edx, 0x577fc4
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5774c0
mov byte [ebp - 0xc0], 1
jmp 0x576a68
mov ecx, 0xe
mov edx, 0x577fdc
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5774e2
mov byte [ebp - 0xbf], 1
jmp 0x576a68
mov ecx, 0xc
mov edx, 0x577ff4
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577504
mov byte [ebp - 0xbe], 1
jmp 0x576a68
mov ecx, 6
mov edx, 0x57800c
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577526
mov byte [ebp - 0xbd], 1
jmp 0x576a68
mov ecx, 4
mov edx, 0x57801c
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577548
mov byte [ebp - 0xbc], 1
jmp 0x576a68
mov ecx, 0xe
mov edx, 0x57802c
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x57756a
mov byte [ebp - 0xbb], 1
jmp 0x576a68
mov ecx, 0xb
mov edx, 0x578044
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577589
mov byte [ebp - 0x3f], 1
jmp 0x576a68
mov edx, 0x578058
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x5775a6
mov byte [ebp - 0xb9], 1
jmp 0x576a68
mov edx, 0x578068
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x5775c3
mov byte [ebp - 0xb7], 1
jmp 0x576a68
mov edx, 0x57807c
mov eax, dword [ebp - 0xc]
call fcn.00409e3c
test eax, eax
jne 0x5775e0
mov byte [ebp - 0xb6], 1
jmp 0x576a68
mov ecx, 7
mov edx, 0x578090
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577629
mov byte [ebp - 0x3e], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.0040a9e0
mov dword [ebp - 0x3c], eax
jmp 0x576a68
mov ecx, 0xf
mov edx, 0x5780a0
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x577681
mov byte [ebp - 0x50], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1bc]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
lea edx, [ebp - 0x1c0]
mov eax, dword [ebp - 0x10]
call fcn.0040a278
mov edx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x4c]
call fcn.0040542c
jmp 0x576a68
mov ecx, 0x10
mov edx, 0x5780b8
mov eax, dword [ebp - 0xc]
call fcn.0048b068
test al, al
je 0x5776d9
mov byte [ebp - 0x48], 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1c4]
push eax
mov ecx, 0x577dc4
mov edx, 0x577dd0
mov eax, dword [ebp - 0xc]
call fcn.0048aec8
lea edx, [ebp - 0x1c8]
mov eax, dword [ebp - 0x10]
call fcn.0040a278
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x44]
call fcn.0040542c
jmp 0x576a68
mov eax, dword [ebp - 0xc]
cmp byte [eax], 0x4c
jne 0x576a68
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x577708
mov eax, dword [ebp - 0x114]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x114]
dec ecx
mov edx, 2
mov eax, dword [ebp - 0xc]
call fcn.0040588c
mov eax, dword [ebp - 0x1cc]
mov edx, 1
call fcn.0040a9e0
mov dword [ebp - 0xb0], eax
jmp 0x576a68
cmp byte [ebp - 0xfd], 0
je 0x577842
cmp dword [ebp - 0x18], 0
jne 0x57775c
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.0040542c
mov dl, 1
mov eax, dword [0x41cf4c]
call fcn.00404400
mov dword [ebp - 0x10c], eax
mov eax, dword [0x6c0ee4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x30]
mov edi, dword [eax]
call dword [edi + 0x3c]
mov eax, dword [ebp - 0x104]
test eax, eax
jle 0x577880
mov dword [ebp - 0x110], eax
mov dword [ebp - 0xe4], 1
push 0x5780d4
push dword [ebp - 0x18]
push 0x5780e4
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 0xe4]
call fcn.0040a784
push dword [ebp - 0x1d0]
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00405728
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xfc]
push eax
mov eax, dword [0x6c0984]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00672d40
mov edi, eax
mov byte [edi + 0x104], 1
lea eax, [edi + 0x11c]
mov edx, dword [ebp - 0x30]
call fcn.004053e8
movzx eax, byte [ebp - 0x105]
mov byte [edi + 0x19c], al
mov edx, edi
mov eax, dword [ebp - 0x10c]
call fcn.0041fa48
inc dword [ebp - 0xe4]
dec dword [ebp - 0x110]
jne 0x5777a1
jmp 0x577880
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xf8]
push eax
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xfc]
push eax
mov eax, dword [0x6c0984]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
call fcn.00672d40
test eax, eax
jne 0x577880
mov dword [ebp - 0xdc], 0xfffffff6
jmp 0x577c2c
mov eax, dword [0x6c0dd0]
mov eax, dword [eax]
call fcn.00481158
inc ebx
dec esi
jne 0x576892
mov eax, dword [0x6c0984]
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
mov eax, dword [0x6c0b48]
mov ecx, 1
mov edx, dword [0x672858]
call fcn.00406be0
add esp, 4
mov eax, dword [0x6c0b48]
mov eax, dword [eax]
call fcn.00406a24
mov edx, eax
add edx, edx
add edx, edx
mov eax, dword [0x6c0b48]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00403ae0
mov eax, dword [0x6c0984]
mov eax, dword [eax]
mov esi, dword [eax + 8]
test esi, esi
jle 0x5779cc
mov ebx, 1
push dword [ebp - 0x2c]
push 0x5780f0
lea edx, [ebp - 0x1d8]
mov eax, dword [0x6c0984]
mov eax, dword [eax]
mov eax, dword [eax + 8]
call fcn.0040a784
push dword [ebp - 0x1d8]
push 0x578110
lea edx, [ebp - 0x1dc]
mov eax, ebx
call fcn.0040a784
push dword [ebp - 0x1dc]
push 0x57811c
lea eax, [ebp - 0x1d4]
mov edx, 6
call fcn.00405728
mov edx, dword [ebp - 0x1d4]
mov eax, dword [0x6c0a74]
mov eax, dword [eax]
call fcn.00461dd0
mov edi, ebx
dec edi
mov edx, edi
mov eax, dword [0x6c0984]
mov eax, dword [eax]
call fcn.00672c64
test al, al
jne 0x577974
mov dword [ebp - 0xdc], 0xfffffff6
jmp 0x577c2c
mov edx, edi
mov eax, dword [0x6c0984]
mov eax, dword [eax]
call fcn.0041fbf0
cmp dword [eax + 0x54], 0
je 0x5779b8
mov edx, edi
mov eax, dword [0x6c0984]
mov eax, dword [eax]
call fcn.0041fbf0
mov edx, dword [eax + 0x54]
mov eax, dword [0x6c0984]
mov eax, dword [eax]
call fcn.00673f60
push eax
mov edx, edi
mov eax, dword [0x6c0984]
mov eax, dword [eax]
call fcn.0041fbf0
pop edx
mov dword [eax + 0x58], edx
mov eax, dword [0x6c0dd0]
mov eax, dword [eax]
call fcn.00481158
inc ebx
dec esi
jne 0x5778ee
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x577c12
inc esi
xor ebx, ebx
lea ecx, [ebp - 8]
mov edx, ebx
mov eax, dword [ebp - 0xe0]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 8], 0
je 0x577c0a
mov eax, dword [ebp - 8]
cmp byte [eax], 0x5b
je 0x577c0a
mov eax, dword [ebp - 8]
cmp byte [eax], 0x3b
je 0x577c0a
push 2
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 0x124], 0x20
mov byte [ebp - 0x123], 0x2c
mov byte [ebp - 0x122], 9
lea ecx, [ebp - 0x124]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x1e0]
lea eax, [ebp - 8]
call fcn.0040542c
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0xc]
call fcn.0040542c
push 2
lea eax, [ebp - 0x1e4]
push eax
mov byte [ebp - 0x124], 0x20
mov byte [ebp - 0x123], 0x2c
mov byte [ebp - 0x122], 9
lea ecx, [ebp - 0x124]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x1e4]
lea eax, [ebp - 8]
call fcn.0040542c
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a9e0
mov edi, eax
push 2
lea eax, [ebp - 0x1e8]
push eax
mov byte [ebp - 0x124], 0x20
mov byte [ebp - 0x123], 0x2c
mov byte [ebp - 0x122], 9
lea ecx, [ebp - 0x124]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x1e8]
lea eax, [ebp - 8]
call fcn.0040542c
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a9e0
mov dword [ebp - 0xf0], eax
push 4
lea eax, [ebp - 0x1ec]
push eax
mov byte [ebp - 0x1f4], 0x20
mov byte [ebp - 0x1f3], 0x2c
mov byte [ebp - 0x1f2], 0x2d
mov byte [ebp - 0x1f1], 0x3e
mov byte [ebp - 0x1f0], 9
lea ecx, [ebp - 0x1f4]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x1ec]
lea eax, [ebp - 8]
call fcn.0040542c
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
call fcn.0040542c
push 2
lea eax, [ebp - 0x1f8]
push eax
mov byte [ebp - 0x124], 0x20
mov byte [ebp - 0x123], 0x2c
mov byte [ebp - 0x122], 9
lea ecx, [ebp - 0x124]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x1f8]
lea eax, [ebp - 8]
call fcn.0040542c
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a9e0
mov dword [ebp - 0xf4], eax
push 3
lea eax, [ebp - 0x1fc]
push eax
mov byte [ebp - 0x12c], 0x20
mov byte [ebp - 0x12b], 0x2c
mov byte [ebp - 0x12a], 0x3b
mov byte [ebp - 0x129], 9
lea ecx, [ebp - 0x12c]
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0048ab7c
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 8]
call fcn.0040542c
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0040a9e0
mov edx, dword [ebp - 0xf0]
push edx
mov edx, dword [ebp - 0x1c]
push edx
mov edx, dword [ebp - 0xf4]
push edx
push eax
mov eax, dword [0x6c0984]
mov eax, dword [eax]
mov ecx, edi
mov edx, dword [ebp - 0x14]
call fcn.00673338
inc ebx
dec esi
jne 0x5779e5
mov eax, dword [0x6c0a74]
mov eax, dword [eax]
mov edx, dword [ebp - 0x2c]
call fcn.00461dd0
mov eax, dword [ebp - 0xe0]
call fcn.00404430
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x577cbd
lea eax, [ebp - 0x1fc]
mov edx, 2
call fcn.004053b8
lea eax, [ebp - 0x1ec]
mov edx, 0x29
call fcn.004053b8
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.004053b8
lea eax, [ebp - 0x138]
mov edx, 3
call fcn.004053b8
lea eax, [ebp - 0x128]
call fcn.00405394
lea eax, [ebp - 0x120]
mov edx, 3
call fcn.004053b8
lea eax, [ebp - 0xd8]
mov edx, dword [0x48b5e4]
call fcn.0040610c
lea eax, [ebp - 0x30]
mov edx, 0xc
call fcn.004053b8
ret