Function at 0x442200
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4611c1
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x97c
mov eax, dword [0x473090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
lea eax, [ebp - 0x88]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6c], esp
push 7
push 0x467cf0
call dword [0x4641b4]
mov dword [ebp - 0x770], eax
lea ecx, [ebp - 0x68]
call fcn.00402f50
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x778], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x778]
call fcn.00403010
mov dword [ebp - 0x77c], eax
mov edx, dword [ebp - 0x77c]
mov dword [ebp - 0x780], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x780]
call dword [0x464180]
push eax
call fcn.0045c97e
add esp, 4
push eax
lea eax, [ebp - 0xc8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xac], esp
push 7
push 0x467cf8
call dword [0x4641b4]
mov dword [ebp - 0x784], eax
lea ecx, [ebp - 0xa8]
call fcn.00402f50
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x78c], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x78c]
call fcn.00403010
mov dword [ebp - 0x790], eax
mov edx, dword [ebp - 0x790]
mov dword [ebp - 0x794], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x794]
call dword [0x464180]
push eax
lea ecx, [ebp + 8]
call dword [0x464180]
push eax
call dword [0x4642cc]
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x45], al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc8]
call dword [0x464174]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa8]
call fcn.00445e30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.00445e30
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x4426c2
push 0x467d00
lea ecx, [ebp - 0xe4]
call dword [0x464178]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x79c], ecx
mov byte [ebp - 4], 5
push 0x467d04
lea ecx, [ebp - 0x100]
call dword [0x464178]
mov dword [ebp - 0x7a0], eax
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x7a4], edx
mov byte [ebp - 4], 6
push 0x4731b0
mov eax, dword [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x7a8], eax
mov edx, dword [ebp - 0x7a8]
mov dword [ebp - 0x7ac], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x79c]
push eax
mov ecx, dword [ebp - 0x7ac]
push ecx
lea edx, [ebp - 0x44]
push edx
call dword [0x4641ac]
add esp, 0xc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x11c]
call dword [0x464174]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x100]
call dword [0x464174]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe4]
call dword [0x464174]
call fcn.00404990
test eax, eax
je 0x442460
call fcn.0040d550
lea ecx, [ebp - 0x44]
call dword [0x464198]
push eax
lea ecx, [ebp - 0x44]
call dword [0x464180]
push eax
lea ecx, [ebp + 8]
call dword [0x464180]
push eax
call dword [0x4642cc]
add esp, 0xc
test eax, eax
je 0x44265a
push str.1I___b1
lea ecx, [ebp - 0x138]
call dword [0x464178]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x7b4], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x7b4]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x194]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x178], esp
push 0x17
push 0x467d0c
call dword [0x4641b4]
mov dword [ebp - 0x7b8], eax
lea ecx, [ebp - 0x174]
call fcn.00402f50
mov dword [ebp - 0x7bc], eax
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], ecx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x7c0]
call fcn.004031c0
mov dword [ebp - 0x7c4], eax
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], edx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x7c8]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x154]
call dword [0x464178]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x7d0]
push ecx
lea edx, [ebp - 0x1b0]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x7d4], eax
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x7d8], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x7d8]
push ecx
lea edx, [ebp - 0x1cc]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x7e0], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x7e0]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1cc]
call dword [0x464174]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1b0]
call dword [0x464174]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x154]
call dword [0x464174]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x194]
call dword [0x464174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x174]
call fcn.00445e30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x138]
call dword [0x464174]
call fcn.004058f0
test eax, eax
je 0x442644
push 0x7c
push 0x48
call fcn.004071d0
add esp, 8
cmp eax, 0xf8
jge 0x442644
call fcn.00413310
jmp 0x44265a
push 0x3c
call fcn.004040b0
add esp, 4
cmp eax, 0x5c
jne 0x442655
jmp 0x44265a
call fcn.00413360
mov dword [ebp - 0x1d0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x1d0]
jmp 0x4436f1
push 0
push 0x467d24
lea ecx, [ebp + 8]
call dword [0x464204]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x14
call fcn.00404bb0
jmp 0x4426f7
mov dword [ebp - 4], 0
push 0x31
push 0xf4
call fcn.004071d0
add esp, 8
cmp eax, 0x18
jne 0x442720
call fcn.00406d60
test eax, eax
je 0x442720
call fcn.00413610
mov edx, dword [0x4641d4]
mov eax, dword [ebp - 0x18]
cmp eax, dword [edx]
jne 0x4428e8
push 0x467d28
lea ecx, [ebp - 0x1ec]
call dword [0x464178]
mov dword [ebp - 0x7e4], eax
mov ecx, dword [ebp - 0x7e4]
mov dword [ebp - 0x7e8], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x7e8]
push edx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x248]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0x17
push 0x467d2c
call dword [0x4641b4]
mov dword [ebp - 0x7ec], eax
lea ecx, [ebp - 0x228]
call fcn.00402f50
mov dword [ebp - 0x7f0], eax
mov edx, dword [ebp - 0x7f0]
mov dword [ebp - 0x7f4], edx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x7f4]
call fcn.00403370
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x7fc], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x7fc]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x208]
call dword [0x464178]
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x804], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x804]
push edx
lea eax, [ebp - 0x264]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x808], eax
mov ecx, dword [ebp - 0x808]
mov dword [ebp - 0x80c], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x80c]
push edx
lea eax, [ebp - 0x280]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x810], eax
mov ecx, dword [ebp - 0x810]
mov dword [ebp - 0x814], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x814]
push edx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x280]
call dword [0x464174]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x264]
call dword [0x464174]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x208]
call dword [0x464174]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x248]
call dword [0x464174]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x228]
call fcn.00445e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1ec]
call dword [0x464174]
mov dword [ebp - 0x284], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x284]
jmp 0x4436f1
cmp dword [ebp - 0x18], 0xf
ja 0x442aa9
push 0x467d44
lea ecx, [ebp - 0x2a0]
call dword [0x464178]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x81c], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x81c]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x2fc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2e0], esp
push 0x17
push 0x467d48
call dword [0x4641b4]
mov dword [ebp - 0x820], eax
lea ecx, [ebp - 0x2dc]
call fcn.00402f50
mov dword [ebp - 0x824], eax
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x828], ecx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x828]
call fcn.00403370
mov dword [ebp - 0x82c], eax
mov edx, dword [ebp - 0x82c]
mov dword [ebp - 0x830], edx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x830]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x2bc]
call dword [0x464178]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x838], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x838]
push ecx
lea edx, [ebp - 0x318]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x840], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x840]
push ecx
lea edx, [ebp - 0x334]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x848], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x848]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x334]
call dword [0x464174]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x318]
call dword [0x464174]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2bc]
call dword [0x464174]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2fc]
call dword [0x464174]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x2dc]
call fcn.00445e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a0]
call dword [0x464174]
mov dword [ebp - 0x338], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x338]
jmp 0x4436f1
mov edx, dword [ebp - 0x18]
push edx
push 0x467d60
lea ecx, [ebp + 8]
call dword [0x464208]
mov dword [ebp - 0x24], eax
mov eax, dword [0x4641d4]
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax]
jne 0x442c85
push 0x467d64
lea ecx, [ebp - 0x354]
call dword [0x464178]
mov dword [ebp - 0x84c], eax
mov edx, dword [ebp - 0x84c]
mov dword [ebp - 0x850], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x850]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x3b0]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x394], esp
push 0x17
push 0x467d68
call dword [0x4641b4]
mov dword [ebp - 0x854], eax
lea ecx, [ebp - 0x390]
call fcn.00402f50
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x85c], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x85c]
call fcn.00403560
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x860]
mov dword [ebp - 0x864], ecx
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x864]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x370]
call dword [0x464178]
mov dword [ebp - 0x868], eax
mov edx, dword [ebp - 0x868]
mov dword [ebp - 0x86c], edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x3cc]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x870], eax
mov edx, dword [ebp - 0x870]
mov dword [ebp - 0x874], edx
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x874]
push eax
lea ecx, [ebp - 0x3e8]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x878], eax
mov edx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], edx
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x87c]
push eax
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3e8]
call dword [0x464174]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x3cc]
call dword [0x464174]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x370]
call dword [0x464174]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x3b0]
call dword [0x464174]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x390]
call fcn.00445e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x354]
call dword [0x464174]
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x3ec]
jmp 0x4436f1
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
add edx, 3
cmp edx, dword [ebp - 0x18]
jbe 0x442e54
push 0x467d80
lea ecx, [ebp - 0x408]
call dword [0x464178]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x884], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x884]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x464]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x448], esp
push 0x17
push 0x467d84
call dword [0x4641b4]
mov dword [ebp - 0x888], eax
lea ecx, [ebp - 0x444]
call fcn.00402f50
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x88c]
mov dword [ebp - 0x890], ecx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x890]
call fcn.004031c0
mov dword [ebp - 0x894], eax
mov edx, dword [ebp - 0x894]
mov dword [ebp - 0x898], edx
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x898]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x424]
call dword [0x464178]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x8a0]
push ecx
lea edx, [ebp - 0x480]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x8a8]
push ecx
lea edx, [ebp - 0x49c]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x8b0]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x49c]
call dword [0x464174]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x480]
call dword [0x464174]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x424]
call dword [0x464174]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x464]
call dword [0x464174]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x444]
call fcn.00445e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x408]
call dword [0x464174]
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x4a0]
jmp 0x4436f1
mov edx, dword [ebp - 0x18]
push edx
push 0x467d9c
lea ecx, [ebp + 8]
call dword [0x464218]
mov dword [ebp - 0x20], eax
mov eax, dword [0x4641d4]
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [eax]
jne 0x443043
push 0x467da0
lea ecx, [ebp - 0x4bc]
call dword [0x464178]
mov dword [ebp - 0x8b4], eax
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x8b8]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x518]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4fc], esp
push 0x17
push 0x467da4
call dword [0x4641b4]
mov dword [ebp - 0x8bc], eax
lea ecx, [ebp - 0x4f8]
call fcn.00402f50
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x8c4], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x8c4]
call fcn.00403010
mov dword [ebp - 0x8c8], eax
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp - 0x8cc], ecx
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x8cc]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x4d8]
call dword [0x464178]
mov dword [ebp - 0x8d0], eax
mov edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0x534]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x8d8], eax
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8dc], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0x550]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x8e0], eax
mov edx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e4], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x8e4]
push eax
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x550]
call dword [0x464174]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x534]
call dword [0x464174]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x4d8]
call dword [0x464174]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x518]
call dword [0x464174]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4f8]
call fcn.00445e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4bc]
call dword [0x464174]
mov dword [ebp - 0x554], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x554]
jmp 0x4436f1
mov ecx, dword [ebp - 0x20]
push ecx
push 0x467dbc
lea ecx, [ebp + 8]
call dword [0x464204]
mov dword [ebp - 0x1c], eax
call fcn.00404bb0
test eax, eax
je 0x443066
call fcn.00413790
mov edx, dword [0x4641d4]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [edx]
jne 0x44308d
lea ecx, [ebp + 8]
call dword [0x464198]
mov dword [ebp - 0x1c], eax
call fcn.00406ce0
test eax, eax
je 0x44308d
call fcn.00422f50
mov ecx, dword [ebp - 0x20]
add ecx, 3
cmp ecx, dword [ebp - 0x1c]
jbe 0x443253
push 0x467dc0
lea ecx, [ebp - 0x570]
call dword [0x464178]
mov dword [ebp - 0x8e8], eax
mov edx, dword [ebp - 0x8e8]
mov dword [ebp - 0x8ec], edx
mov byte [ebp - 4], 0x34
mov eax, dword [ebp - 0x8ec]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x5cc]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5b0], esp
push 0x17
push 0x467dc4
call dword [0x4641b4]
mov dword [ebp - 0x8f0], eax
lea ecx, [ebp - 0x5ac]
call fcn.00402f50
mov dword [ebp - 0x8f4], eax
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f8], eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x8f8]
call fcn.00403370
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
mov dword [ebp - 0x900], ecx
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x900]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x58c]
call dword [0x464178]
mov dword [ebp - 0x904], eax
mov edx, dword [ebp - 0x904]
mov dword [ebp - 0x908], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x908]
push eax
lea ecx, [ebp - 0x5e8]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x90c], eax
mov edx, dword [ebp - 0x90c]
mov dword [ebp - 0x910], edx
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x910]
push eax
lea ecx, [ebp - 0x604]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x914], eax
mov edx, dword [ebp - 0x914]
mov dword [ebp - 0x918], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x918]
push eax
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x604]
call dword [0x464174]
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x5e8]
call dword [0x464174]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x58c]
call dword [0x464174]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x5cc]
call dword [0x464174]
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x5ac]
call fcn.00445e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x570]
call dword [0x464174]
mov dword [ebp - 0x608], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x608]
jmp 0x4436f1
mov ecx, dword [ebp - 0x1c]
push ecx
push 0x467ddc
lea ecx, [ebp + 8]
call dword [0x464218]
mov dword [ebp - 0x28], eax
call fcn.00406c80
test eax, eax
je 0x44327b
call fcn.0041bda0
call fcn.004205b0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x60c], esp
mov eax, dword [ebp - 0x18]
push eax
push 0
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x91c], eax
call fcn.00445f30
add esp, 0x1c
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 0
je 0x44351e
mov ecx, dword [ebp - 0x18]
push ecx
push 0
lea edx, [ebp - 0x628]
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x928], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x928]
push ecx
mov ecx, 0x4731e8
call fcn.00454730
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x628]
call dword [0x464174]
push 0x467de0
lea ecx, [ebp - 0x644]
call dword [0x464178]
mov dword [ebp - 0x92c], eax
mov edx, dword [ebp - 0x92c]
mov dword [ebp - 0x930], edx
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x930]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push 0
lea edx, [ebp - 0x660]
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x938], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x938]
push ecx
lea edx, [ebp - 0x6bc]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6a0], esp
push 0x1d
push 0x467de4
call dword [0x4641b4]
mov dword [ebp - 0x93c], eax
lea ecx, [ebp - 0x69c]
call fcn.00402f50
mov dword [ebp - 0x940], eax
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x944], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x944]
call fcn.00403370
mov dword [ebp - 0x948], eax
mov ecx, dword [ebp - 0x948]
mov dword [ebp - 0x94c], ecx
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x94c]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x67c]
call dword [0x464178]
mov dword [ebp - 0x950], eax
mov edx, dword [ebp - 0x950]
mov dword [ebp - 0x954], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x954]
push eax
lea ecx, [ebp - 0x6d8]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x958], eax
mov edx, dword [ebp - 0x958]
mov dword [ebp - 0x95c], edx
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x95c]
push eax
lea ecx, [ebp - 0x6f4]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x960], eax
mov edx, dword [ebp - 0x960]
mov dword [ebp - 0x964], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x964]
push eax
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x6f4]
call dword [0x464174]
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x6d8]
call dword [0x464174]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x67c]
call dword [0x464174]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x6bc]
call dword [0x464174]
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x69c]
call fcn.00445e30
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x660]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x644]
call dword [0x464174]
push 0xd2
push 0x26
call fcn.004071d0
add esp, 8
cmp eax, 0x1a4
jne 0x4434f9
call fcn.00406c10
test eax, eax
je 0x4434f9
call fcn.00423710
mov dword [ebp - 0x6f8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x6f8]
jmp 0x4436f1
mov ecx, dword [ebp - 0x18]
push ecx
push 0
lea edx, [ebp - 0x714]
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x96c], eax
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x96c]
push ecx
mov ecx, dword [ebp + 0x24]
call dword [0x46419c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x714]
call dword [0x464174]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x730]
push ecx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x970], eax
mov edx, dword [ebp - 0x970]
mov dword [ebp - 0x974], edx
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x974]
push eax
mov ecx, dword [ebp + 0x28]
call dword [0x46419c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x730]
call dword [0x464174]
push 0xf7
call fcn.004040b0
add esp, 4
mov dword [ebp - 0x978], eax
cmp dword [ebp - 0x978], 0x174
je 0x4435dc
jmp 0x4435de
jmp 0x4435e8
call fcn.0041bda0
call fcn.00414ee0
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea eax, [ebp - 0x74c]
push eax
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], ecx
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x980]
push edx
mov ecx, dword [ebp + 0x2c]
call dword [0x46419c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x74c]
call dword [0x464174]
mov eax, dword [0x4641d4]
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [eax]
je 0x4436d1
lea ecx, [ebp + 8]
call dword [0x464198]
sub eax, dword [ebp - 0x28]
cmp eax, 1
jbe 0x4436d1
lea ecx, [ebp + 8]
call dword [0x464198]
sub eax, dword [ebp - 0x28]
push eax
mov edx, dword [ebp - 0x28]
push edx
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x984]
mov dword [ebp - 0x988], ecx
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x988]
push edx
mov ecx, dword [ebp + 0x30]
call dword [0x46419c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x768]
call dword [0x464174]
call fcn.00406b90
mov dword [ebp - 0x98c], eax
cmp dword [ebp - 0x98c], 1
je 0x4436c7
jmp 0x4436d1
call fcn.0041bda0
call fcn.004137e0
mov dword [ebp - 0x76c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045c8a0
mov esp, ebp
pop ebp
ret