Function at 0x433f70
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46182a
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x10d8
call fcn.0045fad0
mov eax, dword [0x476090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
call fcn.00406060
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 0xd20], 0
je 0x433fdd
call fcn.00415140
call fcn.00419a80
lea ecx, [ebp + 8]
call dword [0x46717c]
mov dword [ebp - 0xd24], eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xd24]
push ecx
call fcn.00460492
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x43400a
jmp 0x435bcd
mov edx, dword [ebp - 0x18]
push edx
call fcn.0045f98a
add esp, 4
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x434]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp + 8]
call dword [0x46717c]
mov dword [ebp - 0xd2c], eax
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x18]
push eax
push 0
mov ecx, dword [ebp - 0xd2c]
push ecx
call fcn.0046048c
test eax, eax
jne 0x4341ff
lea edx, [ebp - 0x490]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x474], esp
push 0x20
push 0x4692f8
call dword [0x4671b4]
mov dword [ebp - 0xd30], eax
lea ecx, [ebp - 0x470]
call fcn.00402800
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp - 0xd34]
mov dword [ebp - 0xd38], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xd38]
call fcn.004029a0
mov dword [ebp - 0xd3c], eax
mov ecx, dword [ebp - 0xd3c]
mov dword [ebp - 0xd40], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xd40]
call dword [0x46717c]
mov dword [ebp - 0xd44], eax
mov edx, dword [ebp - 0xd44]
push edx
lea ecx, [ebp - 0x450]
call dword [0x46718c]
mov dword [ebp - 0xd48], eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0x450]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x450]
call dword [0x467174]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x490]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x470]
call fcn.0042b130
call fcn.00405710
mov dword [ebp - 0xd4c], eax
cmp dword [ebp - 0xd4c], 0
je 0x434170
push 0xff
push 0x42
call fcn.004048a0
add esp, 8
mov dword [ebp - 0xd50], eax
cmp dword [ebp - 0xd50], 0x41be
jge 0x434170
call fcn.0040c9d0
jmp 0x434190
push 0x42
call fcn.004082d0
add esp, 4
mov dword [ebp - 0xd54], eax
cmp dword [ebp - 0xd54], 0x65
jne 0x43418b
jmp 0x434190
call fcn.00415140
push 0xaa
push 0xdc
call fcn.004048a0
add esp, 8
mov dword [ebp - 0xd58], eax
mov ecx, dword [ebp - 0xd58]
mov dword [ebp - 0xd5c], ecx
cmp dword [ebp - 0xd5c], 0x9218
je 0x4341c2
jmp 0x4341c4
jmp 0x4341ce
call fcn.0040cb00
call fcn.0040cc30
jmp 0x435bcd
lea eax, [ebp - 0x20]
push eax
push 0x476104
lea ecx, [ebp - 0x4d8]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4bc], esp
push 0x1a
push 0x46931c
call dword [0x4671b4]
mov dword [ebp - 0xd68], eax
lea ecx, [ebp - 0x4b8]
call fcn.00402800
mov dword [ebp - 0xd6c], eax
mov edx, dword [ebp - 0xd6c]
mov dword [ebp - 0xd70], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xd70]
call fcn.004029a0
mov dword [ebp - 0xd74], eax
mov eax, dword [ebp - 0xd74]
mov dword [ebp - 0xd78], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xd78]
call dword [0x46717c]
mov dword [ebp - 0xd7c], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x498], esp
mov edx, dword [ebp - 0xd7c]
push edx
call dword [0x46718c]
mov dword [ebp - 0xd80], eax
lea eax, [ebp - 0x4f4]
push eax
call fcn.00435e00
add esp, 0x20
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xd84]
mov dword [ebp - 0xd88], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xd88]
call dword [0x4671dc]
mov dword [ebp - 0xd8c], eax
mov edx, dword [ebp - 0xd8c]
push edx
mov eax, dword [ebp - 0x24]
push eax
call fcn.00460480
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x491], al
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4f4]
call dword [0x4671d8]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4d8]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4b8]
call fcn.0042b130
movzx ecx, byte [ebp - 0x491]
test ecx, ecx
je 0x434465
lea edx, [ebp - 0x550]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x534], esp
push 0x20
push 0x469338
call dword [0x4671b4]
mov dword [ebp - 0xd90], eax
lea ecx, [ebp - 0x530]
call fcn.00402800
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0xd98], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xd98]
call fcn.004028b0
mov dword [ebp - 0xd9c], eax
mov ecx, dword [ebp - 0xd9c]
mov dword [ebp - 0xda0], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xda0]
call dword [0x46717c]
mov dword [ebp - 0xda4], eax
mov edx, dword [ebp - 0xda4]
push edx
lea ecx, [ebp - 0x510]
call dword [0x46718c]
mov dword [ebp - 0xda8], eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x510]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x510]
call dword [0x467174]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x550]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x530]
call fcn.0042b130
call fcn.00405d10
mov dword [ebp - 0xdac], eax
cmp dword [ebp - 0xdac], 0
je 0x43443b
push 0x13
call fcn.004082d0
add esp, 4
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0xdb0], 0x1e
jge 0x43443b
call fcn.00420890
jmp 0x434460
push 0x44
push 0x9a
call fcn.004073e0
add esp, 8
mov dword [ebp - 0xdb4], eax
cmp dword [ebp - 0xdb4], 0x22
jne 0x43445b
jmp 0x434460
call fcn.0040d020
jmp 0x435bcd
mov cl, byte [0x467afb]
mov byte [ebp - 0x430], cl
push 0x3ff
push 0
lea edx, [ebp - 0x42f]
push edx
call fcn.0045f9e0
add esp, 0xc
mov eax, dword [0x476104]
movzx ecx, word [eax + 2]
push ecx
mov edx, dword [0x476104]
movzx eax, word [edx]
push eax
lea ecx, [ebp - 0x590]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x574], esp
push 0x1e
push 0x46935c
call dword [0x4671b4]
mov dword [ebp - 0xdb8], eax
lea ecx, [ebp - 0x570]
call fcn.00402800
mov dword [ebp - 0xdbc], eax
mov edx, dword [ebp - 0xdbc]
mov dword [ebp - 0xdc0], edx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xdc0]
call fcn.00402cc0
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0xdc8], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xdc8]
call dword [0x46717c]
mov dword [ebp - 0xdcc], eax
mov ecx, dword [ebp - 0xdcc]
push ecx
lea edx, [ebp - 0x430]
push edx
call dword [0x4672c4]
add esp, 0x10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x590]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x570]
call fcn.0042b130
mov eax, dword [ebp + 0x24]
add eax, 0x38
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x594], esp
push eax
call dword [0x4671a0]
mov dword [ebp - 0xdd0], eax
mov ecx, dword [ebp - 0xdd0]
mov dword [ebp - 0xdd4], ecx
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x5f4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5d8], esp
push 0xb
push 0x46937c
call dword [0x4671b4]
mov dword [ebp - 0xdd8], eax
lea ecx, [ebp - 0x5d4]
call fcn.00402800
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0xde0], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xde0]
call fcn.00402cc0
mov dword [ebp - 0xde4], eax
mov ecx, dword [ebp - 0xde4]
mov dword [ebp - 0xde8], ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xde8]
call dword [0x46717c]
mov dword [ebp - 0xdec], eax
mov edx, dword [ebp - 0xdec]
push edx
lea ecx, [ebp - 0x5b4]
call dword [0x46718c]
mov dword [ebp - 0xdf0], eax
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0xdf4], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0x610]
call dword [0x46718c]
mov dword [ebp - 0xdf8], eax
mov edx, dword [ebp - 0xdf8]
mov dword [ebp - 0xdfc], edx
mov byte [ebp - 4], 0x11
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x598], esp
mov ecx, dword [ebp - 0xdf4]
push ecx
mov edx, dword [ebp - 0xdfc]
push edx
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xe00], eax
mov eax, dword [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x15
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x610]
call dword [0x467174]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x5b4]
call dword [0x467174]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x5f4]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5d4]
call fcn.0042b130
mov ecx, dword [ebp + 0x24]
add ecx, 0x54
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x614], esp
push ecx
mov ecx, edx
call dword [0x4671a0]
mov dword [ebp - 0xe04], eax
mov eax, dword [ebp - 0xe04]
mov dword [ebp - 0xe08], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x674]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x658], esp
push 0xf
push 0x469388
call dword [0x4671b4]
mov dword [ebp - 0xe0c], eax
lea ecx, [ebp - 0x654]
call fcn.00402800
mov dword [ebp - 0xe10], eax
mov edx, dword [ebp - 0xe10]
mov dword [ebp - 0xe14], edx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xe14]
call fcn.00402aa0
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0xe1c], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xe1c]
call dword [0x46717c]
mov dword [ebp - 0xe20], eax
mov ecx, dword [ebp - 0xe20]
push ecx
lea ecx, [ebp - 0x634]
call dword [0x46718c]
mov dword [ebp - 0xe24], eax
mov edx, dword [ebp - 0xe24]
mov dword [ebp - 0xe28], edx
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x690]
call dword [0x46718c]
mov dword [ebp - 0xe2c], eax
mov ecx, dword [ebp - 0xe2c]
mov dword [ebp - 0xe30], ecx
mov byte [ebp - 4], 0x1a
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x618], esp
mov eax, dword [ebp - 0xe28]
push eax
mov ecx, dword [ebp - 0xe30]
push ecx
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xe34], eax
mov edx, dword [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x1e
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x690]
call dword [0x467174]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x634]
call dword [0x467174]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x674]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x654]
call fcn.0042b130
mov eax, dword [ebp + 0x24]
add eax, 0xe0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x694], esp
push eax
call dword [0x4671a0]
mov dword [ebp - 0xe38], eax
mov ecx, dword [ebp - 0xe38]
mov dword [ebp - 0xe3c], ecx
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x6f4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6d8], esp
push 0xb
push 0x469398
call dword [0x4671b4]
mov dword [ebp - 0xe40], eax
lea ecx, [ebp - 0x6d4]
call fcn.00402800
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0xe48], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xe48]
call fcn.00402aa0
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
mov dword [ebp - 0xe50], ecx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0xe50]
call dword [0x46717c]
mov dword [ebp - 0xe54], eax
mov edx, dword [ebp - 0xe54]
push edx
lea ecx, [ebp - 0x6b4]
call dword [0x46718c]
mov dword [ebp - 0xe58], eax
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0xe5c], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0x710]
call dword [0x46718c]
mov dword [ebp - 0xe60], eax
mov edx, dword [ebp - 0xe60]
mov dword [ebp - 0xe64], edx
mov byte [ebp - 4], 0x23
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x698], esp
mov ecx, dword [ebp - 0xe5c]
push ecx
mov edx, dword [ebp - 0xe64]
push edx
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xe68], eax
mov eax, dword [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x27
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x710]
call dword [0x467174]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x6b4]
call dword [0x467174]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x6f4]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6d4]
call fcn.0042b130
call fcn.00405d10
mov dword [ebp - 0xe6c], eax
cmp dword [ebp - 0xe6c], 0
je 0x4349dd
push 0x66
push 0xc5
call fcn.004048a0
add esp, 8
mov dword [ebp - 0xe70], eax
cmp dword [ebp - 0xe70], 0x4e7e
jge 0x4349dd
call fcn.00402070
jmp 0x434a02
push 0x75
push 0x10
call fcn.004048a0
add esp, 8
mov dword [ebp - 0xe74], eax
cmp dword [ebp - 0xe74], 0x750
jne 0x4349fd
jmp 0x434a02
call fcn.0040d3c0
call fcn.00406060
mov dword [ebp - 0xe78], eax
cmp dword [ebp - 0xe78], 0
je 0x434a20
call fcn.0040fa00
call fcn.0040d4f0
mov ecx, dword [ebp + 0x24]
add ecx, 0x70
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x714], esp
push ecx
mov ecx, edx
call dword [0x4671a0]
mov dword [ebp - 0xe7c], eax
mov eax, dword [ebp - 0xe7c]
mov dword [ebp - 0xe80], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x774]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x758], esp
push 0xc
push 0x4693a4
call dword [0x4671b4]
mov dword [ebp - 0xe84], eax
lea ecx, [ebp - 0x754]
call fcn.00402800
mov dword [ebp - 0xe88], eax
mov edx, dword [ebp - 0xe88]
mov dword [ebp - 0xe8c], edx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0xe8c]
call fcn.004029a0
mov dword [ebp - 0xe90], eax
mov eax, dword [ebp - 0xe90]
mov dword [ebp - 0xe94], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0xe94]
call dword [0x46717c]
mov dword [ebp - 0xe98], eax
mov ecx, dword [ebp - 0xe98]
push ecx
lea ecx, [ebp - 0x734]
call dword [0x46718c]
mov dword [ebp - 0xe9c], eax
mov edx, dword [ebp - 0xe9c]
mov dword [ebp - 0xea0], edx
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x790]
call dword [0x46718c]
mov dword [ebp - 0xea4], eax
mov ecx, dword [ebp - 0xea4]
mov dword [ebp - 0xea8], ecx
mov byte [ebp - 4], 0x2c
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x718], esp
mov eax, dword [ebp - 0xea0]
push eax
mov ecx, dword [ebp - 0xea8]
push ecx
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xeac], eax
mov edx, dword [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x30
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x790]
call dword [0x467174]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x734]
call dword [0x467174]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x774]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x754]
call fcn.0042b130
mov byte [ebp - 4], 0x31
call fcn.00403a20
jmp 0x434bb5
mov dword [ebp - 4], 1
mov eax, dword [ebp + 0x24]
add eax, 0x8c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x794], esp
push eax
call dword [0x4671a0]
mov dword [ebp - 0xeb0], eax
mov ecx, dword [ebp - 0xeb0]
mov dword [ebp - 0xeb4], ecx
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x7f4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7d8], esp
push 0xe
push 0x4693b4
call dword [0x4671b4]
mov dword [ebp - 0xeb8], eax
lea ecx, [ebp - 0x7d4]
call fcn.00402800
mov dword [ebp - 0xebc], eax
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0xec0], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0xec0]
call fcn.00402cc0
mov dword [ebp - 0xec4], eax
mov ecx, dword [ebp - 0xec4]
mov dword [ebp - 0xec8], ecx
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0xec8]
call dword [0x46717c]
mov dword [ebp - 0xecc], eax
mov edx, dword [ebp - 0xecc]
push edx
lea ecx, [ebp - 0x7b4]
call dword [0x46718c]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0xed4], eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0x810]
call dword [0x46718c]
mov dword [ebp - 0xed8], eax
mov edx, dword [ebp - 0xed8]
mov dword [ebp - 0xedc], edx
mov byte [ebp - 4], 0x37
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x798], esp
mov ecx, dword [ebp - 0xed4]
push ecx
mov edx, dword [ebp - 0xedc]
push edx
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x3b
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x810]
call dword [0x467174]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x7b4]
call dword [0x467174]
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x7f4]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7d4]
call fcn.0042b130
call fcn.00403e40
mov dword [ebp - 0xee4], eax
cmp dword [ebp - 0xee4], 0
je 0x434d63
push 0x3f
call fcn.004082d0
add esp, 4
mov dword [ebp - 0xee8], eax
cmp dword [ebp - 0xee8], 0x60
jge 0x434d63
call fcn.00410c40
jmp 0x434d8b
push 0x40
push 0x95
call fcn.004048a0
add esp, 8
mov dword [ebp - 0xeec], eax
cmp dword [ebp - 0xeec], 0x2540
jne 0x434d86
jmp 0x434d8b
call fcn.00420890
mov ecx, dword [ebp + 0x24]
add ecx, 0x8c
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x814], esp
push ecx
mov ecx, edx
call dword [0x4671a0]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0xef0]
mov dword [ebp - 0xef4], eax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x874]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x858], esp
push 0xf
push 0x4693c4
call dword [0x4671b4]
mov dword [ebp - 0xef8], eax
lea ecx, [ebp - 0x854]
call fcn.00402800
mov dword [ebp - 0xefc], eax
mov edx, dword [ebp - 0xefc]
mov dword [ebp - 0xf00], edx
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0xf00]
call fcn.00402aa0
mov dword [ebp - 0xf04], eax
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0xf08], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0xf08]
call dword [0x46717c]
mov dword [ebp - 0xf0c], eax
mov ecx, dword [ebp - 0xf0c]
push ecx
lea ecx, [ebp - 0x834]
call dword [0x46718c]
mov dword [ebp - 0xf10], eax
mov edx, dword [ebp - 0xf10]
mov dword [ebp - 0xf14], edx
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x890]
call dword [0x46718c]
mov dword [ebp - 0xf18], eax
mov ecx, dword [ebp - 0xf18]
mov dword [ebp - 0xf1c], ecx
mov byte [ebp - 4], 0x40
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x818], esp
mov eax, dword [ebp - 0xf14]
push eax
mov ecx, dword [ebp - 0xf1c]
push ecx
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xf20], eax
mov edx, dword [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x44
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x890]
call dword [0x467174]
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x834]
call dword [0x467174]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x874]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x854]
call fcn.0042b130
mov eax, dword [ebp + 0x24]
add eax, 0xa8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x894], esp
push eax
call dword [0x4671a0]
mov dword [ebp - 0xf24], eax
mov ecx, dword [ebp - 0xf24]
mov dword [ebp - 0xf28], ecx
mov byte [ebp - 4], 0x45
lea edx, [ebp - 0x8f4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d8], esp
push 0x10
push 0x4693d4
call dword [0x4671b4]
mov dword [ebp - 0xf2c], eax
lea ecx, [ebp - 0x8d4]
call fcn.00402800
mov dword [ebp - 0xf30], eax
mov eax, dword [ebp - 0xf30]
mov dword [ebp - 0xf34], eax
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0xf34]
call fcn.004029a0
mov dword [ebp - 0xf38], eax
mov ecx, dword [ebp - 0xf38]
mov dword [ebp - 0xf3c], ecx
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0xf3c]
call dword [0x46717c]
mov dword [ebp - 0xf40], eax
mov edx, dword [ebp - 0xf40]
push edx
lea ecx, [ebp - 0x8b4]
call dword [0x46718c]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0xf44]
mov dword [ebp - 0xf48], eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0x910]
call dword [0x46718c]
mov dword [ebp - 0xf4c], eax
mov edx, dword [ebp - 0xf4c]
mov dword [ebp - 0xf50], edx
mov byte [ebp - 4], 0x49
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x898], esp
mov ecx, dword [ebp - 0xf48]
push ecx
mov edx, dword [ebp - 0xf50]
push edx
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xf54], eax
mov eax, dword [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x910]
call dword [0x467174]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x8b4]
call dword [0x467174]
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x8f4]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8d4]
call fcn.0042b130
mov ecx, dword [ebp + 0x24]
add ecx, 0xa8
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x914], esp
push ecx
mov ecx, edx
call dword [0x4671a0]
mov dword [ebp - 0xf58], eax
mov eax, dword [ebp - 0xf58]
mov dword [ebp - 0xf5c], eax
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x974]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x958], esp
push 0xc
push 0x4693e8
call dword [0x4671b4]
mov dword [ebp - 0xf60], eax
lea ecx, [ebp - 0x954]
call fcn.00402800
mov dword [ebp - 0xf64], eax
mov edx, dword [ebp - 0xf64]
mov dword [ebp - 0xf68], edx
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0xf68]
call fcn.00402aa0
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0xf6c]
mov dword [ebp - 0xf70], eax
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0xf70]
call dword [0x46717c]
mov dword [ebp - 0xf74], eax
mov ecx, dword [ebp - 0xf74]
push ecx
lea ecx, [ebp - 0x934]
call dword [0x46718c]
mov dword [ebp - 0xf78], eax
mov edx, dword [ebp - 0xf78]
mov dword [ebp - 0xf7c], edx
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x990]
call dword [0x46718c]
mov dword [ebp - 0xf80], eax
mov ecx, dword [ebp - 0xf80]
mov dword [ebp - 0xf84], ecx
mov byte [ebp - 4], 0x52
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x918], esp
mov eax, dword [ebp - 0xf7c]
push eax
mov ecx, dword [ebp - 0xf84]
push ecx
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xf88], eax
mov edx, dword [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x56
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x990]
call dword [0x467174]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x934]
call dword [0x467174]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x974]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x954]
call fcn.0042b130
call fcn.004078e0
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0xf8c], 0
je 0x435203
call fcn.00420890
mov eax, dword [ebp + 0x24]
add eax, 0xc4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x994], esp
push eax
call dword [0x4671a0]
mov dword [ebp - 0xf90], eax
mov ecx, dword [ebp - 0xf90]
mov dword [ebp - 0xf94], ecx
mov byte [ebp - 4], 0x57
lea edx, [ebp - 0x9f4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9d8], esp
push 0xb
push 0x4693f8
call dword [0x4671b4]
mov dword [ebp - 0xf98], eax
lea ecx, [ebp - 0x9d4]
call fcn.00402800
mov dword [ebp - 0xf9c], eax
mov eax, dword [ebp - 0xf9c]
mov dword [ebp - 0xfa0], eax
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0xfa0]
call fcn.00402aa0
mov dword [ebp - 0xfa4], eax
mov ecx, dword [ebp - 0xfa4]
mov dword [ebp - 0xfa8], ecx
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0xfa8]
call dword [0x46717c]
mov dword [ebp - 0xfac], eax
mov edx, dword [ebp - 0xfac]
push edx
lea ecx, [ebp - 0x9b4]
call dword [0x46718c]
mov dword [ebp - 0xfb0], eax
mov eax, dword [ebp - 0xfb0]
mov dword [ebp - 0xfb4], eax
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0xa10]
call dword [0x46718c]
mov dword [ebp - 0xfb8], eax
mov edx, dword [ebp - 0xfb8]
mov dword [ebp - 0xfbc], edx
mov byte [ebp - 4], 0x5b
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x998], esp
mov ecx, dword [ebp - 0xfb4]
push ecx
mov edx, dword [ebp - 0xfbc]
push edx
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x5f
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0xa10]
call dword [0x467174]
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x9b4]
call dword [0x467174]
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x9f4]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9d4]
call fcn.0042b130
mov byte [ebp - 4], 0x60
call fcn.00407860
jmp 0x435398
mov dword [ebp - 4], 1
mov ecx, dword [ebp + 0x24]
add ecx, 0xe0
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0xa14], esp
push ecx
mov ecx, edx
call dword [0x4671a0]
mov dword [ebp - 0xfc4], eax
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0xfc8], eax
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xa74]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa58], esp
push 0xe
push 0x469404
call dword [0x4671b4]
mov dword [ebp - 0xfcc], eax
lea ecx, [ebp - 0xa54]
call fcn.00402800
mov dword [ebp - 0xfd0], eax
mov edx, dword [ebp - 0xfd0]
mov dword [ebp - 0xfd4], edx
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0xfd4]
call fcn.00402cc0
mov dword [ebp - 0xfd8], eax
mov eax, dword [ebp - 0xfd8]
mov dword [ebp - 0xfdc], eax
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0xfdc]
call dword [0x46717c]
mov dword [ebp - 0xfe0], eax
mov ecx, dword [ebp - 0xfe0]
push ecx
lea ecx, [ebp - 0xa34]
call dword [0x46718c]
mov dword [ebp - 0xfe4], eax
mov edx, dword [ebp - 0xfe4]
mov dword [ebp - 0xfe8], edx
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0xa90]
call dword [0x46718c]
mov dword [ebp - 0xfec], eax
mov ecx, dword [ebp - 0xfec]
mov dword [ebp - 0xff0], ecx
mov byte [ebp - 4], 0x66
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0xa18], esp
mov eax, dword [ebp - 0xfe8]
push eax
mov ecx, dword [ebp - 0xff0]
push ecx
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0xff4], eax
mov edx, dword [ebp - 0x24]
push edx
mov byte [ebp - 4], 0x6a
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa90]
call dword [0x467174]
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xa34]
call dword [0x467174]
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0xa74]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa54]
call fcn.0042b130
call fcn.00406a10
mov dword [ebp - 0xff8], eax
cmp dword [ebp - 0xff8], 0
je 0x43552e
call fcn.00419a80
mov eax, dword [ebp + 0x24]
add eax, 0xe0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa94], esp
push eax
call dword [0x4671a0]
mov dword [ebp - 0xffc], eax
mov ecx, dword [ebp - 0xffc]
mov dword [ebp - 0x1000], ecx
mov byte [ebp - 4], 0x6b
lea edx, [ebp - 0xaf4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xad8], esp
push 0xc
push 0x469414
call dword [0x4671b4]
mov dword [ebp - 0x1004], eax
lea ecx, [ebp - 0xad4]
call fcn.00402800
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0x1008]
mov dword [ebp - 0x100c], eax
mov byte [ebp - 4], 0x6c
mov ecx, dword [ebp - 0x100c]
call fcn.00402aa0
mov dword [ebp - 0x1010], eax
mov ecx, dword [ebp - 0x1010]
mov dword [ebp - 0x1014], ecx
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x1014]
call dword [0x46717c]
mov dword [ebp - 0x1018], eax
mov edx, dword [ebp - 0x1018]
push edx
lea ecx, [ebp - 0xab4]
call dword [0x46718c]
mov dword [ebp - 0x101c], eax
mov eax, dword [ebp - 0x101c]
mov dword [ebp - 0x1020], eax
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0xb10]
call dword [0x46718c]
mov dword [ebp - 0x1024], eax
mov edx, dword [ebp - 0x1024]
mov dword [ebp - 0x1028], edx
mov byte [ebp - 4], 0x6f
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0xa98], esp
mov ecx, dword [ebp - 0x1020]
push ecx
mov edx, dword [ebp - 0x1028]
push edx
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x73
call fcn.00433bc0
add esp, 0x3c
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xb10]
call dword [0x467174]
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xab4]
call dword [0x467174]
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0xaf4]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xad4]
call fcn.0042b130
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0xb54]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb38], esp
push 2
push 0x469424
call dword [0x4671b4]
mov dword [ebp - 0x1030], eax
lea ecx, [ebp - 0xb34]
call fcn.00402800
mov dword [ebp - 0x1034], eax
mov ecx, dword [ebp - 0x1034]
mov dword [ebp - 0x1038], ecx
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp - 0x1038]
call fcn.00402e20
mov dword [ebp - 0x103c], eax
mov edx, dword [ebp - 0x103c]
mov dword [ebp - 0x1040], edx
mov byte [ebp - 4], 0x75
mov ecx, dword [ebp - 0x1040]
call dword [0x46717c]
mov dword [ebp - 0x1044], eax
mov eax, dword [ebp - 0x1044]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
call fcn.00460486
mov dword [ebp - 0xb14], eax
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0xb54]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb34]
call fcn.0042b130
cmp dword [ebp - 0xb14], 0
je 0x43580b
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax + 0xfc]
mov dword [edx + 8], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax + 0x100]
mov dword [edx + 0xc], ecx
mov byte [ebp - 4], 0x76
call fcn.00407670
jmp 0x4357a4
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax + 0xfc]
mov dword [edx + 0x10], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax + 0x100]
mov dword [edx + 0x14], ecx
mov byte [ebp - 4], 0x78
call fcn.004055e0
jmp 0x4357eb
mov dword [ebp - 4], 1
call fcn.00406a10
mov dword [ebp - 0x1048], eax
cmp dword [ebp - 0x1048], 0
je 0x43580b
call fcn.0041a0d0
lea ecx, [ebp + 8]
call dword [0x46717c]
mov dword [ebp - 0x104c], eax
push 0
mov edx, dword [ebp - 0x104c]
push edx
call dword [0x46713c]
mov dword [ebp - 0x28], eax
push 0x6f
push 0x80
call fcn.004048a0
add esp, 8
mov dword [ebp - 0x1050], eax
mov eax, dword [ebp - 0x1050]
mov dword [ebp - 0x1054], eax
cmp dword [ebp - 0x1054], 0x3780
je 0x43585b
jmp 0x43585d
jmp 0x435867
call fcn.0040d8e0
call fcn.00415140
cmp dword [ebp - 0x28], 0
jne 0x435a37
push 0x469428
lea ecx, [ebp - 0xb70]
call dword [0x46718c]
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp - 0x1058]
mov dword [ebp - 0x105c], ecx
mov byte [ebp - 4], 0x7a
mov edx, dword [ebp - 0x105c]
push edx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xbb0]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb94], esp
push 0x2b
push 0x46942c
call dword [0x4671b4]
mov dword [ebp - 0x1060], eax
lea ecx, [ebp - 0xb90]
call fcn.00402800
mov dword [ebp - 0x1064], eax
mov edx, dword [ebp - 0x1064]
mov dword [ebp - 0x1068], edx
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x1068]
call fcn.004029a0
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x1070], eax
mov byte [ebp - 4], 0x7c
mov ecx, dword [ebp - 0x1070]
call dword [0x46717c]
mov dword [ebp - 0x1074], eax
mov ecx, dword [ebp - 0x1074]
push ecx
lea edx, [ebp - 0xbcc]
push edx
call dword [0x4671b0]
add esp, 0xc
mov dword [ebp - 0x1078], eax
mov eax, dword [ebp - 0x1078]
mov dword [ebp - 0x107c], eax
mov byte [ebp - 4], 0x7d
mov ecx, dword [ebp - 0x107c]
push ecx
lea edx, [ebp - 0xbe8]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x1080], eax
mov eax, dword [ebp - 0x1080]
mov dword [ebp - 0x1084], eax
mov byte [ebp - 4], 0x7e
mov ecx, dword [ebp - 0x1084]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xbe8]
call dword [0x467174]
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xbcc]
call dword [0x467174]
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xbb0]
call dword [0x467174]
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xb90]
call fcn.0042b130
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb70]
call dword [0x467174]
push 1
call fcn.004082d0
add esp, 4
mov dword [ebp - 0x1088], eax
mov edx, dword [ebp - 0x1088]
mov dword [ebp - 0x108c], edx
cmp dword [ebp - 0x108c], 3
je 0x4359fd
jmp 0x4359ff
jmp 0x435a09
call fcn.0040da10
call fcn.00415140
jmp 0x435bcd
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [0x476104]
movzx eax, word [edx]
push eax
push 1
push 0x10
mov ecx, dword [ebp - 0x28]
push ecx
call dword [0x467114]
test eax, eax
jne 0x435bc6
push 0x469458
lea ecx, [ebp - 0xc04]
call dword [0x46718c]
mov dword [ebp - 0x1090], eax
mov edx, dword [ebp - 0x1090]
mov dword [ebp - 0x1094], edx
mov byte [ebp - 4], 0x81
mov eax, dword [ebp - 0x1094]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0xc44]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc28], esp
push 0x26
push 0x46945c
call dword [0x4671b4]
mov dword [ebp - 0x1098], eax
lea ecx, [ebp - 0xc24]
call fcn.00402800
mov dword [ebp - 0x109c], eax
mov eax, dword [ebp - 0x109c]
mov dword [ebp - 0x10a0], eax
mov byte [ebp - 4], 0x82
mov ecx, dword [ebp - 0x10a0]
call fcn.00402aa0
mov dword [ebp - 0x10a4], eax
mov ecx, dword [ebp - 0x10a4]
mov dword [ebp - 0x10a8], ecx
mov byte [ebp - 4], 0x83
mov ecx, dword [ebp - 0x10a8]
call dword [0x46717c]
mov dword [ebp - 0x10ac], eax
mov edx, dword [ebp - 0x10ac]
push edx
lea eax, [ebp - 0xc60]
push eax
call dword [0x4671b0]
add esp, 0xc
mov dword [ebp - 0x10b0], eax
mov ecx, dword [ebp - 0x10b0]
mov dword [ebp - 0x10b4], ecx
mov byte [ebp - 4], 0x84
mov edx, dword [ebp - 0x10b4]
push edx
lea eax, [ebp - 0xc7c]
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x10b8], eax
mov ecx, dword [ebp - 0x10b8]
mov dword [ebp - 0x10bc], ecx
mov byte [ebp - 4], 0x85
mov edx, dword [ebp - 0x10bc]
push edx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0xc7c]
call dword [0x467174]
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0xc60]
call dword [0x467174]
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0xc44]
call dword [0x467174]
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xc24]
call fcn.0042b130
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc04]
call dword [0x467174]
jmp 0x435bcd
jmp 0x435bcd
cmp dword [ebp - 0x24], 0
je 0x435beb
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc80], eax
mov ecx, dword [ebp - 0xc80]
push ecx
call fcn.0045fac4
add esp, 4
cmp dword [ebp - 0x28], 0
je 0x435c26
push 0
mov edx, dword [ebp - 0x28]
push edx
call dword [0x467098]
mov byte [ebp - 4], 0x86
call fcn.004077e0
jmp 0x435c1f
mov dword [ebp - 4], 1
mov dword [ebp - 0xc84], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0xc84]
jmp 0x435de0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045f9ec
mov esp, ebp
pop ebp
ret