Function at 0x440c00
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x44f070
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x463740]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
mov eax, dword [0x463740]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 0
mov esi, 8
mov ecx, dword [esp + 0x30]
cmp ecx, esi
jb 0x440c97
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], esi
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x440ca7
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x440cc2
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 1
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x440d39
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x440d49
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x440d64
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 2
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x440ddb
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x440deb
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x440e06
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 3
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x440e7d
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x440e8d
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x440ea8
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 4
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x440f1f
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x440f2f
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x440f4a
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 5
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x440fc1
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x440fd1
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x440fec
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 6
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x441063
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x441073
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x44108e
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 7
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441105
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441115
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441130
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 8
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x4411a7
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x4411b7
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x4411d2
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 9
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441249
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441259
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441274
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 0xa
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x4412eb
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x4412fb
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x441316
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 0xb
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x44138d
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x44139d
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x4413b8
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 0xc
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x44142f
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x44143f
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x44145a
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 0xd
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x4414d1
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x4414e1
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x4414fc
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x34], 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0
push 0x456d02
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
call fcn.0042e060
mov dword [esp + 0x48], 0xe
mov ecx, dword [esp + 0x30]
cmp ecx, 8
jb 0x441573
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov dword [esp + 0x30], 8
cmovae eax, dword [esp + 0x20]
mov byte [eax + 8], 0
jmp 0x441583
mov eax, esi
sub eax, ecx
lea ecx, [esp + 0x20]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x34], 0x10
jb 0x44159e
push dword [esp + 0x20]
call fcn.004300b6
add esp, 4
push 0
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
push 0x456d02
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.0042e060
mov dword [esp + 0x48], 0xf
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441615
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441625
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441640
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x10
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441690
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x4416a0
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x4416bb
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x11
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x44170b
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x44171b
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441736
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x12
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441786
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441796
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x4417b1
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x13
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441801
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441811
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x44182c
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x14
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x44187c
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x44188c
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x4418a7
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x15
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x4418f7
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441907
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441922
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x16
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441972
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441982
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x44199d
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x17
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x4419ed
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x4419fd
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441a18
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x18
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441a68
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441a78
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441a93
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x19
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441ae3
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441af3
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441b0e
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x1a
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441b5e
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441b6e
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441b89
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x1b
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441bd9
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441be9
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441c04
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x1c
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441c54
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441c64
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441c7f
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x1d
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441ccf
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441cdf
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441cfa
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x1e
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441d4a
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441d5a
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441d75
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x1f
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441dc5
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441dd5
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441df0
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x20
mov ecx, dword [esp + 0x18]
cmp ecx, 8
jb 0x441e40
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441e50
mov eax, esi
sub eax, ecx
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441e6b
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0x456d02
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0043ef20
mov dword [esp + 0x48], 0x21
mov eax, dword [esp + 0x18]
cmp eax, 8
jb 0x441ebb
cmp dword [esp + 0x1c], 0x10
lea eax, [esp + 8]
mov dword [esp + 0x18], 8
cmovae eax, dword [esp + 8]
mov byte [eax + 8], 0
jmp 0x441ec9
push 0
sub esi, eax
lea ecx, [esp + 0xc]
push esi
call fcn.0043a910
mov dword [esp + 0x48], 0xffffffff
cmp dword [esp + 0x1c], 0x10
jb 0x441ee4
push dword [esp + 8]
call fcn.004300b6
add esp, 4
push 0xf4240
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x1c], 0
mov byte [esp + 0xc], 0
call fcn.0040d7bf
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.00438ea6
mov esp, ebp
pop ebp
ret