Function at 0x481420
Capabilities:
Check for peb ntglobalflag flag
Check os version
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x566715
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x274
mov al, byte [esp + 7]
push ebx
push ebp
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x40], edi
mov byte [esp + 0x274], al
mov dword [esp + 0x278], ebx
mov dword [esp + 0x27c], ebx
mov dword [esp + 0x280], ebx
push 6
push 0x5a3670
lea ecx, [esp + 0x44]
mov dword [esp + 0x294], ebx
call fcn.005318a0
push 6
push 0x59c0fc
lea ecx, [esp + 0x3c]
mov byte [esp + 0x294], 1
call fcn.005318a0
push 6
push 0x59c0f4
lea ecx, [esp + 0x40]
mov byte [esp + 0x294], 2
call fcn.005318a0
mov cl, byte [esp + 0x17]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c], cl
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov al, 0xae
mov cl, 0x58
mov byte [esp + 0x28c], 4
mov byte [esp + 0x44], 8
mov byte [esp + 0x45], 2
mov byte [esp + 0x46], al
mov byte [esp + 0x47], bl
mov byte [esp + 0x48], bl
mov byte [esp + 0x49], bl
mov byte [esp + 0x4a], bl
mov byte [esp + 0x4b], bl
mov byte [esp + 0x4c], bl
mov byte [esp + 0x4d], bl
mov byte [esp + 0x4e], 8
mov byte [esp + 0x4f], 3
mov byte [esp + 0x50], al
mov byte [esp + 0x51], 4
mov byte [esp + 0x52], 1
mov byte [esp + 0x53], bl
mov byte [esp + 0x54], bl
mov byte [esp + 0x55], bl
mov byte [esp + 0x56], bl
mov byte [esp + 0x57], bl
mov byte [esp + 0x58], 8
mov byte [esp + 0x59], 3
mov byte [esp + 0x5a], al
mov byte [esp + 0x5b], 4
mov byte [esp + 0x5c], bl
mov byte [esp + 0x5d], bl
mov byte [esp + 0x5e], bl
mov byte [esp + 0x5f], bl
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], bl
mov byte [esp + 0x62], 8
mov byte [esp + 0x63], 7
mov byte [esp + 0x64], al
mov byte [esp + 0x65], cl
mov byte [esp + 0x66], 3
mov byte [esp + 0x67], bl
mov byte [esp + 0x68], bl
mov byte [esp + 0x69], bl
mov byte [esp + 0x6a], bl
mov byte [esp + 0x6b], bl
mov byte [esp + 0x6c], 8
mov byte [esp + 0x6d], 7
mov byte [esp + 0x6e], al
mov byte [esp + 0x6f], cl
mov byte [esp + 0x70], 1
mov byte [esp + 0x71], bl
mov byte [esp + 0x72], bl
mov byte [esp + 0x73], bl
mov byte [esp + 0x74], bl
mov byte [esp + 0x75], bl
mov byte [esp + 0x76], 8
mov byte [esp + 0x77], 7
mov byte [esp + 0x78], al
mov byte [esp + 0x79], cl
mov byte [esp + 0x7a], 0xc
mov byte [esp + 0x7b], bl
mov byte [esp + 0x7c], bl
mov byte [esp + 0x7d], bl
mov byte [esp + 0x7e], bl
mov byte [esp + 0x7f], bl
mov byte [esp + 0x80], 8
mov byte [esp + 0x81], 7
mov byte [esp + 0x82], al
mov byte [esp + 0x83], cl
mov byte [esp + 0x84], 4
mov byte [esp + 0x85], bl
mov byte [esp + 0x86], bl
mov byte [esp + 0x87], bl
mov byte [esp + 0x88], bl
mov byte [esp + 0x89], bl
mov byte [esp + 0x8a], 8
mov byte [esp + 0x8b], 7
mov byte [esp + 0x8c], al
mov byte [esp + 0x8d], cl
mov byte [esp + 0x8e], 0x30
mov byte [esp + 0x8f], bl
mov byte [esp + 0x90], bl
mov byte [esp + 0x91], bl
mov byte [esp + 0x92], bl
mov byte [esp + 0x93], bl
mov byte [esp + 0x94], 8
mov byte [esp + 0x95], 7
mov byte [esp + 0x96], al
mov byte [esp + 0x97], cl
mov byte [esp + 0x98], 0x10
mov byte [esp + 0x99], bl
mov byte [esp + 0x9a], bl
mov byte [esp + 0x9b], bl
mov byte [esp + 0x9c], bl
mov byte [esp + 0x9d], bl
mov byte [esp + 0x9e], 8
mov byte [esp + 0x9f], 7
mov byte [esp + 0xa0], al
mov byte [esp + 0xa1], cl
mov byte [esp + 0xa2], bl
mov byte [esp + 0xa3], 0xc
mov byte [esp + 0xa4], bl
mov byte [esp + 0xa5], bl
mov byte [esp + 0xa6], bl
mov byte [esp + 0xa7], bl
mov byte [esp + 0xa8], 8
mov byte [esp + 0xa9], 7
mov byte [esp + 0xaa], al
mov byte [esp + 0xab], cl
mov byte [esp + 0xac], bl
mov byte [esp + 0xad], 4
mov byte [esp + 0xae], bl
mov byte [esp + 0xaf], bl
mov byte [esp + 0xb0], bl
mov byte [esp + 0xb1], bl
mov byte [esp + 0xb2], 8
mov byte [esp + 0xb3], 7
mov byte [esp + 0xb4], al
mov byte [esp + 0xb5], cl
mov byte [esp + 0xb6], bl
mov byte [esp + 0xb7], bl
mov byte [esp + 0xb8], 3
mov byte [esp + 0xb9], bl
mov byte [esp + 0xba], bl
mov byte [esp + 0xbb], bl
mov byte [esp + 0xbc], 8
mov byte [esp + 0xbd], 7
mov dl, 0x40
mov byte [esp + 0xbe], al
mov byte [esp + 0xbf], cl
mov byte [esp + 0xc0], bl
mov byte [esp + 0xc1], bl
mov byte [esp + 0xc2], 1
mov byte [esp + 0xc3], bl
mov byte [esp + 0xc4], bl
mov byte [esp + 0xc5], bl
mov byte [esp + 0xc6], 8
mov byte [esp + 0xc7], 7
mov byte [esp + 0xc8], al
mov byte [esp + 0xc9], cl
mov byte [esp + 0xca], bl
mov byte [esp + 0xcb], bl
mov byte [esp + 0xcc], 0xc0
mov byte [esp + 0xcd], bl
mov byte [esp + 0xce], bl
mov byte [esp + 0xcf], bl
mov byte [esp + 0xd0], 8
mov byte [esp + 0xd1], 7
mov byte [esp + 0xd2], al
mov byte [esp + 0xd3], cl
mov byte [esp + 0xd4], bl
mov byte [esp + 0xd5], bl
mov byte [esp + 0xd6], dl
mov byte [esp + 0xd7], bl
mov byte [esp + 0xd8], bl
mov byte [esp + 0xd9], bl
mov byte [esp + 0xda], 8
mov byte [esp + 0xdb], 7
mov byte [esp + 0xdc], al
mov byte [esp + 0xdd], cl
mov byte [esp + 0xde], bl
mov byte [esp + 0xdf], bl
mov byte [esp + 0xe0], bl
mov byte [esp + 0xe1], 0xc
mov byte [esp + 0xe2], bl
mov byte [esp + 0xe3], bl
mov byte [esp + 0xe4], 8
mov byte [esp + 0xe5], 7
mov byte [esp + 0xe6], al
mov byte [esp + 0xe7], cl
mov byte [esp + 0xe8], bl
mov byte [esp + 0xe9], bl
mov byte [esp + 0xea], bl
mov byte [esp + 0xeb], 4
mov byte [esp + 0xec], bl
mov byte [esp + 0xed], bl
mov byte [esp + 0xee], 8
mov byte [esp + 0xef], 7
mov byte [esp + 0xf0], al
mov byte [esp + 0xf1], cl
mov byte [esp + 0xf2], bl
mov byte [esp + 0xf3], 3
mov byte [esp + 0xf4], bl
mov byte [esp + 0xf5], bl
mov byte [esp + 0xf6], bl
mov byte [esp + 0xf7], bl
mov byte [esp + 0xf8], 8
mov byte [esp + 0xf9], 7
mov byte [esp + 0xfa], al
mov byte [esp + 0xfb], cl
mov byte [esp + 0xfc], bl
mov byte [esp + 0xfd], 1
mov byte [esp + 0xfe], bl
mov byte [esp + 0xff], bl
mov byte [esp + 0x100], bl
mov byte [esp + 0x101], bl
mov byte [esp + 0x102], 8
mov byte [esp + 0x103], 7
mov byte [esp + 0x104], al
mov byte [esp + 0x105], cl
mov byte [esp + 0x106], bl
mov byte [esp + 0x107], 0xc0
mov byte [esp + 0x108], bl
mov byte [esp + 0x109], bl
mov byte [esp + 0x10a], bl
mov byte [esp + 0x10b], bl
mov byte [esp + 0x10c], 8
mov byte [esp + 0x10d], 7
mov byte [esp + 0x111], dl
mov byte [esp + 0x138], dl
mov dl, 0x16
mov byte [esp + 0x10e], al
mov byte [esp + 0x10f], cl
mov byte [esp + 0x110], bl
mov byte [esp + 0x112], bl
mov byte [esp + 0x113], bl
mov byte [esp + 0x114], bl
mov byte [esp + 0x115], bl
mov byte [esp + 0x116], 8
mov byte [esp + 0x117], 7
mov byte [esp + 0x118], al
mov byte [esp + 0x119], cl
mov byte [esp + 0x11a], bl
mov byte [esp + 0x11b], bl
mov byte [esp + 0x11c], bl
mov byte [esp + 0x11d], 3
mov byte [esp + 0x11e], bl
mov byte [esp + 0x11f], bl
mov byte [esp + 0x120], 8
mov byte [esp + 0x121], 7
mov byte [esp + 0x122], al
mov byte [esp + 0x123], cl
mov byte [esp + 0x124], bl
mov byte [esp + 0x125], bl
mov byte [esp + 0x126], bl
mov byte [esp + 0x127], 1
mov byte [esp + 0x128], bl
mov byte [esp + 0x129], bl
mov byte [esp + 0x12a], 8
mov byte [esp + 0x12b], 7
mov byte [esp + 0x12c], al
mov byte [esp + 0x12d], cl
mov byte [esp + 0x12e], 0xc0
mov byte [esp + 0x12f], bl
mov byte [esp + 0x130], bl
mov byte [esp + 0x131], bl
mov byte [esp + 0x132], bl
mov byte [esp + 0x133], bl
mov byte [esp + 0x134], 8
mov byte [esp + 0x135], 7
mov byte [esp + 0x136], al
mov byte [esp + 0x137], cl
mov byte [esp + 0x139], bl
mov byte [esp + 0x13a], bl
mov byte [esp + 0x13b], bl
mov byte [esp + 0x13c], bl
mov byte [esp + 0x13d], bl
mov byte [esp + 0x13e], 8
mov byte [esp + 0x13f], 7
mov byte [esp + 0x140], al
mov byte [esp + 0x141], cl
mov byte [esp + 0x142], bl
mov byte [esp + 0x143], bl
mov byte [esp + 0x144], bl
mov byte [esp + 0x145], bl
mov byte [esp + 0x146], 0x30
mov byte [esp + 0x147], bl
mov byte [esp + 0x148], 8
mov byte [esp + 0x149], 7
mov byte [esp + 0x14a], al
mov byte [esp + 0x14b], cl
mov byte [esp + 0x14c], bl
mov byte [esp + 0x14d], bl
mov byte [esp + 0x14e], bl
mov byte [esp + 0x14f], bl
mov byte [esp + 0x150], 0x10
mov byte [esp + 0x151], bl
mov byte [esp + 0x152], 8
mov byte [esp + 0x153], 2
mov byte [esp + 0x154], 0x1a
mov byte [esp + 0x155], dl
mov byte [esp + 0x156], bl
mov byte [esp + 0x157], bl
mov byte [esp + 0x158], bl
mov byte [esp + 0x159], bl
mov byte [esp + 0x15a], bl
mov byte [esp + 0x15b], bl
mov byte [esp + 0x15c], 8
mov byte [esp + 0x15d], 5
mov cl, 0x51
mov byte [esp + 0x15e], al
mov byte [esp + 0x15f], cl
mov byte [esp + 0x169], cl
mov cl, 0x50
mov byte [esp + 0x160], 1
mov byte [esp + 0x17d], cl
mov byte [esp + 0x187], cl
mov cl, 0x53
mov byte [esp + 0x161], bl
mov byte [esp + 0x162], bl
mov byte [esp + 0x163], bl
mov byte [esp + 0x164], bl
mov byte [esp + 0x165], bl
mov byte [esp + 0x166], 8
mov byte [esp + 0x167], 5
mov byte [esp + 0x168], al
mov byte [esp + 0x16a], 1
mov byte [esp + 0x16b], bl
mov byte [esp + 0x16c], bl
mov byte [esp + 0x16d], bl
mov byte [esp + 0x16e], bl
mov byte [esp + 0x16f], bl
mov byte [esp + 0x170], 8
mov byte [esp + 0x171], 2
mov byte [esp + 0x172], 0x1a
mov byte [esp + 0x173], 0x15
mov byte [esp + 0x174], bl
mov byte [esp + 0x175], bl
mov byte [esp + 0x176], bl
mov byte [esp + 0x177], bl
mov byte [esp + 0x178], bl
mov byte [esp + 0x179], bl
mov byte [esp + 0x17a], 8
mov byte [esp + 0x17b], 5
mov byte [esp + 0x17c], al
mov byte [esp + 0x17e], 1
mov byte [esp + 0x17f], bl
mov byte [esp + 0x180], bl
mov byte [esp + 0x181], bl
mov byte [esp + 0x182], bl
mov byte [esp + 0x183], bl
mov byte [esp + 0x184], 8
mov byte [esp + 0x185], 5
mov byte [esp + 0x186], al
mov byte [esp + 0x188], 1
mov byte [esp + 0x189], bl
mov byte [esp + 0x18a], bl
mov byte [esp + 0x18b], bl
mov byte [esp + 0x18c], bl
mov byte [esp + 0x18d], bl
mov byte [esp + 0x18e], 8
mov byte [esp + 0x18f], 5
mov byte [esp + 0x190], al
mov byte [esp + 0x191], cl
mov byte [esp + 0x192], 1
mov byte [esp + 0x193], bl
mov byte [esp + 0x194], bl
mov byte [esp + 0x195], bl
mov byte [esp + 0x196], bl
mov byte [esp + 0x197], bl
mov byte [esp + 0x198], 8
mov byte [esp + 0x199], 5
mov byte [esp + 0x19a], al
mov byte [esp + 0x19b], cl
mov byte [esp + 0x19c], 1
mov byte [esp + 0x19d], dl
mov byte [esp + 0x19e], 0x80
mov byte [esp + 0x19f], bl
mov byte [esp + 0x1a0], bl
mov byte [esp + 0x1a1], bl
mov byte [esp + 0x1a2], 8
mov byte [esp + 0x1a3], 5
mov byte [esp + 0x1a4], al
mov byte [esp + 0x1a5], cl
mov byte [esp + 0x1a6], 1
mov byte [esp + 0x1a7], 0x2d
mov byte [esp + 0x1a8], bl
mov byte [esp + 0x1a9], bl
mov byte [esp + 0x1aa], bl
mov byte [esp + 0x1ab], bl
mov byte [esp + 0x1bb], dl
mov cl, 0x52
mov dl, 0x6d
mov byte [esp + 0x1af], cl
mov byte [esp + 0x1b9], cl
mov byte [esp + 0x1c3], cl
mov byte [esp + 0x1cd], dl
mov byte [esp + 0x1e1], dl
mov cl, 0x6c
mov dl, 0x6f
mov byte [esp + 0x1ac], 8
mov byte [esp + 0x1ad], 5
mov byte [esp + 0x1ae], al
mov byte [esp + 0x1b0], 1
mov byte [esp + 0x1b1], bl
mov byte [esp + 0x1b2], bl
mov byte [esp + 0x1b3], bl
mov byte [esp + 0x1b4], bl
mov byte [esp + 0x1b5], bl
mov byte [esp + 0x1b6], 8
mov byte [esp + 0x1b7], 5
mov byte [esp + 0x1b8], al
mov byte [esp + 0x1ba], 1
mov byte [esp + 0x1bc], 0x80
mov byte [esp + 0x1bd], bl
mov byte [esp + 0x1be], bl
mov byte [esp + 0x1bf], bl
mov byte [esp + 0x1c0], 8
mov byte [esp + 0x1c1], 5
mov byte [esp + 0x1c2], al
mov byte [esp + 0x1c4], 1
mov byte [esp + 0x1c5], 0x2d
mov byte [esp + 0x1c6], bl
mov byte [esp + 0x1c7], bl
mov byte [esp + 0x1c8], bl
mov byte [esp + 0x1c9], bl
mov byte [esp + 0x1ca], 8
mov byte [esp + 0x1cb], 5
mov byte [esp + 0x1cc], al
mov byte [esp + 0x1ce], 1
mov byte [esp + 0x1cf], 0xff
mov byte [esp + 0x1d0], 0xff
mov byte [esp + 0x1d1], bl
mov byte [esp + 0x1d2], bl
mov byte [esp + 0x1d3], bl
mov byte [esp + 0x1d4], 8
mov byte [esp + 0x1d5], 5
mov byte [esp + 0x1d6], al
mov byte [esp + 0x1d7], cl
mov byte [esp + 0x1d8], 1
mov byte [esp + 0x1d9], 0xff
mov byte [esp + 0x1da], 0xff
mov byte [esp + 0x1db], bl
mov byte [esp + 0x1dc], bl
mov byte [esp + 0x1dd], bl
mov byte [esp + 0x1de], 8
mov byte [esp + 0x1df], 5
mov byte [esp + 0x1e0], al
mov byte [esp + 0x1e2], 1
mov byte [esp + 0x1e3], bl
mov byte [esp + 0x1e4], bl
mov byte [esp + 0x1e5], bl
mov byte [esp + 0x1e6], bl
mov byte [esp + 0x1e7], bl
mov byte [esp + 0x1e8], 8
mov byte [esp + 0x1e9], 5
mov byte [esp + 0x1ea], al
mov byte [esp + 0x1eb], cl
mov byte [esp + 0x1ec], 1
mov byte [esp + 0x1ed], bl
mov byte [esp + 0x1ee], bl
mov byte [esp + 0x1ef], bl
mov byte [esp + 0x1f0], bl
mov byte [esp + 0x1f1], bl
mov byte [esp + 0x1f2], 8
mov byte [esp + 0x1f3], 5
mov byte [esp + 0x1f4], al
mov byte [esp + 0x1f5], dl
mov byte [esp + 0x1f6], 1
mov byte [esp + 0x1f7], 0xff
mov byte [esp + 0x1f8], 0xff
mov cl, 0x6e
mov byte [esp + 0x209], dl
mov byte [esp + 0x1ff], cl
mov byte [esp + 0x213], cl
mov dl, 0x70
mov cl, 0xf0
mov byte [esp + 0x1f9], bl
mov byte [esp + 0x1fa], bl
mov byte [esp + 0x1fb], bl
mov byte [esp + 0x1fc], 8
mov byte [esp + 0x1fd], 5
mov byte [esp + 0x1fe], al
mov byte [esp + 0x200], 1
mov byte [esp + 0x201], 0xff
mov byte [esp + 0x202], 0xff
mov byte [esp + 0x203], bl
mov byte [esp + 0x204], bl
mov byte [esp + 0x205], bl
mov byte [esp + 0x206], 8
mov byte [esp + 0x207], 5
mov byte [esp + 0x208], al
mov byte [esp + 0x20a], 1
mov byte [esp + 0x20b], bl
mov byte [esp + 0x20c], bl
mov byte [esp + 0x20d], bl
mov byte [esp + 0x20e], bl
mov byte [esp + 0x20f], bl
mov byte [esp + 0x210], 8
mov byte [esp + 0x211], 5
mov byte [esp + 0x212], al
mov byte [esp + 0x214], 1
mov byte [esp + 0x215], bl
mov byte [esp + 0x216], bl
mov byte [esp + 0x217], bl
mov byte [esp + 0x218], bl
mov byte [esp + 0x219], bl
mov byte [esp + 0x21a], 8
mov byte [esp + 0x21b], 5
mov byte [esp + 0x21c], al
mov byte [esp + 0x21d], dl
mov byte [esp + 0x21e], 1
mov byte [esp + 0x21f], 0xff
mov byte [esp + 0x220], 0xff
mov byte [esp + 0x221], bl
mov byte [esp + 0x222], bl
mov byte [esp + 0x223], bl
mov byte [esp + 0x224], 8
mov byte [esp + 0x225], 5
mov byte [esp + 0x226], al
mov byte [esp + 0x227], dl
mov byte [esp + 0x228], 1
mov byte [esp + 0x229], bl
mov byte [esp + 0x22a], bl
mov byte [esp + 0x22b], bl
mov byte [esp + 0x22c], bl
mov byte [esp + 0x22d], bl
mov byte [esp + 0x22e], 8
mov byte [esp + 0x22f], 5
mov byte [esp + 0x230], al
mov byte [esp + 0x231], 0x55
mov byte [esp + 0x232], 1
mov byte [esp + 0x233], cl
mov byte [esp + 0x234], cl
mov byte [esp + 0x235], bl
mov byte [esp + 0x236], bl
mov byte [esp + 0x237], bl
mov byte [esp + 0x238], 8
mov byte [esp + 0x239], 5
mov byte [esp + 0x23a], al
mov byte [esp + 0x23b], 0x54
mov byte [esp + 0x23c], 1
mov byte [esp + 0x23d], cl
mov byte [esp + 0x23e], cl
mov byte [esp + 0x23f], bl
mov byte [esp + 0x240], bl
mov byte [esp + 0x241], bl
mov byte [esp + 0x242], 8
mov byte [esp + 0x243], 5
mov byte [esp + 0x244], al
mov byte [esp + 0x245], dl
mov byte [esp + 0x246], 1
push ebx
push ebx
push ecx
mov byte [esp + 0x25d], cl
mov byte [esp + 0x25e], cl
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x59b910
mov byte [esp + 0x25b], bl
mov byte [esp + 0x25c], bl
mov byte [esp + 0x25d], bl
mov byte [esp + 0x25e], bl
mov byte [esp + 0x25f], bl
mov byte [esp + 0x260], 8
mov byte [esp + 0x261], 5
mov byte [esp + 0x262], al
mov byte [esp + 0x263], 0x56
mov byte [esp + 0x264], 1
mov byte [esp + 0x267], bl
mov byte [esp + 0x268], bl
mov byte [esp + 0x269], bl
mov byte [esp + 0x26a], 8
mov byte [esp + 0x26b], 5
mov byte [esp + 0x26c], al
mov byte [esp + 0x26d], dl
mov byte [esp + 0x26e], 1
mov byte [esp + 0x26f], bl
mov byte [esp + 0x270], bl
mov byte [esp + 0x271], bl
mov byte [esp + 0x272], bl
mov byte [esp + 0x273], bl
call fcn.005318a0
push ecx
mov byte [esp + 0x29c], 5
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x59c0ec
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x29c], 4
call fcn.00533b90
mov ecx, edi
call fcn.004844d0
mov esi, dword [esp + 0x294]
mov dword [esp + 0x2c], 1
and esi, 0xff
lea ebp, [esi + esi*4]
shl ebp, 3
mov al, byte [ebp + 0x57784e]
mov dx, word [ebp + 0x577840]
mov cl, byte [ebp + 0x577856]
mov byte [esp + 0x17], al
mov al, byte [ebp + 0x57785f]
mov word [esp + 0x18], dx
mov dx, word [ebp + 0x577842]
cmp al, 1
mov byte [esp + 0x10], cl
mov word [esp + 0x30], dx
jb 0x482474
movsx eax, word [esp + 0x2c]
mov cl, byte [eax + ebp + 0x57785f]
push ecx
mov ecx, edi
call fcn.004cfac0
test ax, ax
je 0x482558
mov eax, dword [esp + 0x2c]
movzx dx, byte [ebp + 0x57785f]
inc eax
cmp ax, dx
mov dword [esp + 0x2c], eax
jle 0x482441
cmp word [esp + 0x30], bx
je 0x4824de
xor eax, eax
lea ecx, [esp + 0x38]
mov al, byte [esp + 0x31]
push eax
push 4
call fcn.00531ad0
mov ecx, dword [esp + 0x30]
push ecx
push 5
lea ecx, [esp + 0x40]
call fcn.00531ad0
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
lea edx, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
mov byte [esp + 0x2a0], 6
call fcn.00531810
mov ecx, 0x5c6628
mov byte [esp + 0x29c], 4
call fcn.00533b90
mov al, byte [esp + 0x17]
mov cl, byte [esp + 0x10]
cmp cl, al
jbe 0x48263b
add esi, 0xfffffff3
cmp esi, 5
ja case.0x4824fa.15
jmp dword [esi*4 + 0x482c6c]
mov ecx, dword [esp + 0x10]
lea edx, [edi + 0x30]
and ecx, 0xff
push 0xff
push edx
movzx ax, byte [ecx + ebp + 0x577856]
movsx esi, ax
lea ecx, [edi + 0x9c]
lea eax, [esi + esi*4 - 0xa]
lea edx, [esp + eax*2 + 0x4c]
push edx
call fcn.00455340
mov cl, byte [edi + 0x41]
mov dl, byte [edi + 0x42]
lea eax, [esi + esi*4]
push ebx
shl eax, 1
push 1
mov byte [esp + eax + 0x47], cl
mov byte [esp + eax + 0x48], dl
lea ecx, [edi + 0xc]
lea edx, [esp + eax + 0x4c]
push ecx
push edx
jmp 0x482630
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x48257d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x482574
cmp al, 0xff
je 0x482574
dec al
mov byte [ecx], al
jmp 0x48257d
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x38]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x28c], 2
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x28c], 1
call fcn.00531940
lea ecx, [esp + 0x3c]
mov byte [esp + 0x28c], bl
call fcn.00531940
push ebx
call fcn.00556360
add esp, 4
xor ax, ax
jmp 0x482c4e
mov eax, dword [esp + 0x10]
push ebx
and eax, 0xff
push 1
movzx cx, byte [eax + ebp + 0x577856]
movsx esi, cx
lea eax, [edi + 0xc]
lea ecx, [edi + 0x9c]
lea esi, [esi + esi*4]
push eax
shl esi, 1
lea edx, [esp + esi + 0x50]
push edx
call fcn.004551e0
push ebx
lea eax, [edi + 0xc]
push 1
push eax
lea eax, [esp + esi + 0x5a]
push eax
jmp 0x482630
mov ecx, dword [esp + 0x10]
push ebx
and ecx, 0xff
lea edx, [edi + 0xc]
push 1
push edx
movzx ax, byte [ecx + ebp + 0x577856]
movsx eax, ax
lea eax, [eax + eax*4]
lea ecx, [esp + eax*2 + 0x50]
push ecx
lea ecx, [edi + 0x9c]
call fcn.004551e0
mov al, byte [esp + 0x294]
cmp al, 0xf
jb 0x48264f
cmp al, 0x10
mov byte [esp + 0x30], 1
jbe 0x482654
mov byte [esp + 0x30], 2
push ebx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov byte [esp + 0x29c], 7
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x59c0e4
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x29c], 4
call fcn.00533b90
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x3c]
push edx
push 5
mov byte [edi + 0x94], bl
call fcn.00531ad0
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00531810
mov ecx, dword [0x5c6634]
call fcn.005396d0
movzx ax, byte [esp + 0x17]
cmp ax, 1
jl 0x482719
movsx ecx, ax
lea esi, [ebp + 0x57784f]
mov dword [esp + 0x10], ecx
mov dl, byte [esi]
lea ecx, [esp + 0x34]
push edx
push 5
call fcn.00531ad0
push 1
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00531810
mov ecx, dword [0x5c6634]
call fcn.00539850
mov eax, dword [esp + 0x10]
inc esi
dec eax
mov dword [esp + 0x10], eax
jne 0x4826e1
mov ecx, dword [esp + 0x30]
and ecx, 0xff
mov dl, byte [ecx + ebp + 0x57784e]
lea ecx, [esp + 0x34]
push edx
push 5
call fcn.00531ad0
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00531810
lea ecx, [esp + 0x264]
push ecx
call fcn.005388b0
add esp, 8
mov dword [esp + 0x10], eax
mov eax, dword [eax + 8]
mov ecx, dword [0x57217c]
mov esi, eax
mov byte [esp + 0x28c], 8
cmp ecx, esi
mov dword [esp + 0x18], esi
jae 0x48277c
mov esi, ecx
mov dword [esp + 0x18], esi
lea edx, [esp + 0x1c]
cmp edx, dword [esp + 0x10]
jne 0x4827f1
mov eax, dword [esp + 0x24]
mov edi, ecx
cmp eax, esi
jae 0x482795
call fcn.00556597
lea ecx, [esp + 0x1c]
call fcn.00405210
mov eax, dword [esp + 0x24]
sub eax, esi
cmp eax, edi
jae 0x4827aa
mov edi, eax
cmp edi, ebx
jbe 0x4827e3
mov ecx, dword [esp + 0x20]
sub eax, edi
add ecx, esi
push eax
lea edx, [edi + ecx]
push edx
push ecx
call fcn.00556b00
mov esi, dword [esp + 0x30]
add esp, 0xc
sub esi, edi
lea ecx, [esp + 0x1c]
push ebx
push esi
call fcn.00404d70
test al, al
je 0x4827e3
push esi
lea ecx, [esp + 0x20]
call fcn.00404d50
lea ecx, [esp + 0x1c]
call fcn.00405210
jmp 0x482910
cmp esi, ebx
jbe 0x48286f
cmp esi, eax
jne 0x48286f
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 4]
cmp eax, ebx
jne 0x482809
mov eax, 0x572184
cmp byte [eax - 1], 0xfe
jae 0x48286f
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x482838
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x48282b
cmp al, 0xff
je 0x48282b
dec al
mov byte [ecx], al
jmp 0x482838
push ecx
call fcn.00556360
mov edx, dword [esp + 0x14]
add esp, 4
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov eax, dword [edx + 4]
cmp eax, ebx
jne 0x482850
mov eax, 0x572184
mov dword [esp + 0x20], eax
mov ecx, dword [edx + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [edx + 0xc]
mov dword [esp + 0x28], ecx
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x482914
lea ecx, [esp + 0x1c]
call fcn.004050f0
cmp eax, esi
jae 0x482881
call fcn.0055636b
mov edx, dword [esp + 0x20]
cmp edx, ebx
je 0x4828a9
mov al, byte [edx - 1]
cmp al, bl
je 0x4828a9
cmp al, 0xff
je 0x4828a9
cmp esi, ebx
jne 0x4828d2
dec al
push ebx
lea ecx, [esp + 0x20]
mov byte [edx - 1], al
call fcn.00404bb0
jmp 0x482914
cmp esi, ebx
jne 0x4828ba
push 1
lea ecx, [esp + 0x20]
call fcn.00404bb0
jmp 0x482914
mov eax, dword [esp + 0x28]
cmp eax, 0x1f
ja 0x4828c7
cmp eax, esi
jae 0x4828e0
push 1
lea ecx, [esp + 0x20]
call fcn.00404bb0
push esi
lea ecx, [esp + 0x20]
call fcn.00405100
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 4]
cmp esi, ebx
jne 0x4828f0
mov esi, 0x572184
mov eax, dword [esp + 0x18]
mov edi, edx
mov ecx, eax
push eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
call fcn.00404d50
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x264]
mov byte [esp + 0x28c], 4
cmp eax, ebx
je 0x482944
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x48293b
cmp al, 0xff
je 0x48293b
dec al
mov byte [ecx], al
jmp 0x482944
push ecx
call fcn.00556360
add esp, 4
mov al, byte [esp + 0x1c]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x274], ebx
mov dword [esp + 0x278], ebx
mov dword [esp + 0x27c], ebx
mov byte [esi], al
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov ecx, dword [0x57217c]
mov eax, dword [esp + 0x34]
cmp ecx, eax
mov dword [esp + 0x280], esp
mov dword [esp + 0x28], esi
mov dword [esp + 0x20], eax
jae 0x482990
mov eax, ecx
mov dword [esp + 0x20], eax
lea edx, [esp + 0x2c]
cmp esi, edx
jne 0x482a08
mov eax, dword [esp + 0x20]
mov edi, ecx
cmp eax, ebx
jbe 0x4829a7
call fcn.00556597
mov ecx, esi
call fcn.00405210
mov eax, dword [esi + 8]
mov edx, dword [esp + 0x20]
sub eax, edx
cmp eax, edi
jae 0x4829bd
mov edi, eax
cmp edi, ebx
jbe 0x4829fc
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x20]
add ecx, edx
sub eax, edi
push eax
lea edx, [ecx + edi]
push edx
push ecx
call fcn.00556b00
mov eax, dword [esi + 8]
add esp, 0xc
sub eax, edi
mov ecx, esi
push ebx
push eax
mov dword [esp + 0x30], eax
call fcn.00404d70
test al, al
je 0x4829fc
mov eax, dword [esp + 0x28]
mov ecx, esi
push eax
call fcn.00404d50
mov ecx, esi
call fcn.00405210
jmp 0x482a9a
cmp eax, ebx
jbe 0x482a56
cmp eax, dword [esp + 0x34]
jne 0x482a56
mov ecx, dword [esp + 0x30]
cmp ecx, ebx
jne 0x482a1f
mov ecx, 0x572184
cmp byte [ecx - 1], 0xfe
jae 0x482a56
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov eax, dword [esp + 0x30]
cmp eax, ebx
jne 0x482a3b
mov eax, 0x572184
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x34]
mov dword [esi + 8], ecx
mov edx, dword [esp + 0x38]
mov dword [esi + 0xc], edx
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x482a9e
push 1
push eax
mov ecx, esi
call fcn.00404d70
test al, al
je 0x482a9e
mov esi, dword [esp + 0x30]
cmp esi, ebx
jne 0x482a71
mov esi, 0x572184
mov eax, dword [esp + 0x28]
mov edi, dword [eax + 4]
mov eax, dword [esp + 0x20]
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 4]
mov dword [ecx + 8], eax
add eax, edx
mov byte [eax], bl
mov edi, dword [esp + 0x50]
push ecx
mov byte [esp + 0x2a0], 9
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x5a3dbc
call fcn.005318a0
mov ecx, dword [0x5c6634]
mov byte [esp + 0x2a0], 4
call fcn.00539a20
mov ecx, dword [0x5c6634]
call fcn.00539bf0
inc eax
cmp ax, bx
mov dword [esp + 0x10], eax
je 0x4826ac
mov al, byte [esp + 0x294]
cmp al, 0x11
jb 0x482b5c
cmp al, 0x12
ja 0x482b5c
mov eax, dword [esp + 0x10]
movzx dx, byte [ebp + 0x57784e]
movsx ecx, ax
cmp ax, dx
mov byte [esp + 0x30], al
mov cl, byte [ecx + ebp + 0x577856]
mov byte [esp + 0x2c], cl
je 0x482baf
mov eax, dword [esp + 0x2c]
lea edx, [edi + 0xc]
and eax, 0xff
push ebx
push 1
push edx
lea esi, [eax + eax*4]
lea ecx, [edi + 0x9c]
shl esi, 1
lea eax, [esp + esi + 0x50]
push eax
call fcn.004551e0
push ebx
lea eax, [edi + 0xc]
push 1
lea ecx, [esp + esi + 0x56]
push eax
push ecx
lea ecx, [edi + 0x9c]
call fcn.004551e0
jmp 0x4826ac
mov ecx, dword [esp + 0x10]
movsx edx, cx
mov byte [esp + 0x30], cl
mov al, byte [edx + ebp + 0x577856]
cmp al, 0xff
mov byte [esp + 0x2c], al
je 0x482b9d
push ebx
lea eax, [edi + 0xc]
push 1
push eax
mov eax, dword [esp + 0x38]
and eax, 0xff
lea ecx, [eax + eax*4]
lea edx, [esp + ecx*2 + 0x50]
lea ecx, [edi + 0x9c]
push edx
call fcn.004551e0
mov ecx, dword [esp + 0x10]
movzx ax, byte [ebp + 0x57784e]
cmp cx, ax
je 0x482bd7
jmp 0x4826ac
cmp cl, 0xff
je 0x482bd7
mov eax, dword [esp + 0x2c]
push ebx
and eax, 0xff
lea ecx, [edi + 0xc]
push 1
push ecx
lea edx, [eax + eax*4]
lea ecx, [edi + 0x9c]
lea eax, [esp + edx*2 + 0x50]
push eax
call fcn.004551e0
mov ecx, edi
call fcn.0047de70
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x482c03
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x482bfa
cmp al, 0xff
je 0x482bfa
dec al
mov byte [ecx], al
jmp 0x482c03
push ecx
call fcn.00556360
add esp, 4
lea ecx, [esp + 0x38]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x28c], 2
call fcn.00531940
lea ecx, [esp + 0x34]
mov byte [esp + 0x28c], 1
call fcn.00531940
lea ecx, [esp + 0x3c]
mov byte [esp + 0x28c], bl
call fcn.00531940
push ebx
call fcn.00556360
add esp, 4
mov ax, 1
mov ecx, dword [esp + 0x284]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x280
ret 4