Function at 0x446e80
Capabilities:
Allocate or change rwx memory
Create thread
Inject thread
Parse pe header
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x486c3d
mov eax, dword fs:[0]
push eax
sub esp, 0xb3c
mov eax, dword [0x4b8bd0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x944], esi
mov dword [ebp - 0xaa8], eax
xor ebx, ebx
push 1
mov dword [ebp - 4], ebx
call fcn.00402ad1
push esi
call fcn.004010dc
mov eax, 0xf
add esp, 8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
mov dword [ebp - 0x9c0], ebx
mov dword [ebp - 0x994], ebx
mov dword [ebp - 0x990], ebx
mov dword [ebp - 0x98c], ebx
mov dword [ebp - 0xa38], ebx
mov dword [ebp - 0xa34], ebx
mov dword [ebp - 0xa30], ebx
mov dword [ebp - 0x9d0], ebx
mov dword [ebp - 0x9cc], ebx
mov dword [ebp - 0x9c8], ebx
mov dword [ebp - 0x980], ebx
mov dword [ebp - 0x97c], ebx
mov dword [ebp - 0x978], ebx
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
mov dword [ebp - 0x960], ebx
mov dword [ebp - 0x95c], ebx
mov dword [ebp - 0x958], ebx
mov dword [ebp - 0x9a8], ebx
mov dword [ebp - 0x9a4], ebx
mov dword [ebp - 0x9a0], ebx
mov dword [ebp - 0xa14], ebx
mov dword [ebp - 0xa10], ebx
mov dword [ebp - 0xa0c], ebx
mov dword [ebp - 0xa24], ebx
mov dword [ebp - 0xa20], ebx
mov dword [ebp - 0xa1c], ebx
xor esi, esi
mov dword [ebp - 0x9e0], ebx
mov dword [ebp - 0x9dc], esi
mov dword [ebp - 0x9d8], ebx
mov dword [ebp - 0xa00], ebx
mov dword [ebp - 0x9fc], ebx
mov dword [ebp - 0x9f8], ebx
mov dword [ebp - 0x9f0], ebx
mov dword [ebp - 0x9ec], ebx
mov dword [ebp - 0x9e8], ebx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
mov dword [ebp - 0x970], ebx
mov dword [ebp - 0x96c], ebx
mov dword [ebp - 0x968], ebx
mov dword [ebp - 0xa6c], ebx
mov dword [ebp - 0xa68], ebx
mov dword [ebp - 0xa64], ebx
mov dword [ebp - 0xa48], ebx
mov dword [ebp - 0xa44], ebx
mov dword [ebp - 0xa40], ebx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
mov dword [ebp - 0xa98], ebx
mov dword [ebp - 0xa94], ebx
mov dword [ebp - 0xa90], ebx
mov dword [ebp - 0xa88], ebx
mov dword [ebp - 0xa84], ebx
mov dword [ebp - 0xa80], ebx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], ebx
mov byte [ebp - 0xd4], bl
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xb8], bl
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
lea ecx, [ebp - 0x9bc]
push ecx
lea ecx, [ebp - 0x994]
mov byte [ebp - 4], 0x18
call fcn.00402243
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
sub ecx, edi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x948], ebx
je 0x4493a7
lea ecx, [ecx]
mov eax, dword [ebp - 0x948]
lea ecx, [eax*8]
sub ecx, eax
push 0xffffffffffffffff
lea eax, [edi + ecx*4]
push ebx
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401afa
mov ecx, dword [ebp - 0x9a4]
sub ecx, dword [ebp - 0x9a8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x447203
mov esi, dword [ebp - 0x9a8]
mov dword [ebp - 0x93c], eax
mov edi, 0x10
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], edi
jb 0x447132
mov eax, dword [ecx]
jmp 0x447134
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 0x1c]
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x940], esp
cmp dword [ecx + 0x14], edi
jb 0x447164
mov eax, dword [ecx]
jmp 0x447166
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xa78], esp
cmp dword [ecx + 0x14], edi
jb 0x447193
mov eax, dword [ecx]
jmp 0x447195
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
lea ecx, [ebp - 0x280]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
call fcn.004015c3
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x26c], edi
jb 0x4471de
mov edx, dword [ebp - 0x280]
push edx
call fcn.00453509
add esp, 4
add esi, 0x38
dec dword [ebp - 0x93c]
mov dword [ebp - 0x26c], 0xf
mov dword [ebp - 0x270], ebx
mov byte [ebp - 0x280], bl
jne 0x447114
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x970]
call fcn.004029c8
sub esp, 0x1c
mov ecx, esp
mov edi, 0xf
mov dword [ecx + 0x14], edi
mov esi, 0x10
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x447236
mov eax, dword [ecx]
jmp 0x447238
mov eax, ecx
push 7
push str.ASSERT_
mov byte [eax], bl
call fcn.00402707
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push 7
push ebx
push ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1c
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x44748b
lea edx, [ebp - 0xd4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x447296
mov eax, dword [ecx]
jmp 0x447298
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x449dd3
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xd4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.00401afa
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x64]
call fcn.00401afa
lea eax, [ebp - 0x984]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x984], ebx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x447301
mov eax, dword [ecx]
jmp 0x447303
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x48]
push edx
mov byte [eax], bl
call fcn.00401afa
mov esi, dword [ebp - 0x944]
push esi
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x44944d
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov edi, 0x10
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], edi
jb 0x44734b
mov eax, dword [ecx]
jmp 0x44734d
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x64]
push eax
call fcn.00401afa
lea ecx, [ebp - 0xab8]
push ecx
call fcn.004022e8
add esp, 0x20
mov eax, dword [ebp - 0xab4]
sub eax, dword [ebp - 0xab8]
mov byte [ebp - 4], 0x1d
sar eax, 1
je 0x44972e
push eax
call fcn.004544b1
mov edi, eax
mov eax, dword [ebp - 0xab4]
sub eax, dword [ebp - 0xab8]
add esp, 4
lea edx, [ebp - 0xa04]
push edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x984]
push edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x449b78
mov esi, dword [ebp - 0xab4]
mov ecx, dword [ebp - 0xab8]
sub esi, ecx
sar esi, 1
cmp dword [ebp - 0xa04], esi
jne 0x449b78
xor eax, eax
cmp esi, ebx
jbe 0x4473fc
lea esp, [esp]
mov edx, pe_nt_image_headers32
cmp word [ecx + eax*2], dx
jae 0x4473f7
mov dl, byte [ecx + eax*2]
cmp dl, byte [edi + eax]
jne 0x449921
inc eax
cmp eax, esi
jb 0x4473e0
push edi
call fcn.004544a6
mov eax, dword [ebp - 0xab8]
add esp, 4
mov byte [ebp - 4], 0x18
cmp eax, ebx
je 0x44741c
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0xab8], ebx
mov dword [ebp - 0xab4], ebx
mov dword [ebp - 0xab0], ebx
cmp eax, dword [ebp - 0x96c]
je 0x449371
mov esi, dword [ebp - 0x96c]
add esi, 0xffffffe4
mov edi, 0x10
cmp dword [esi + 0x14], edi
jb 0x44745e
mov eax, dword [esi]
push eax
call fcn.00453509
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
cmp dword [esi + 0x14], edi
jb 0x44747c
mov eax, dword [esi]
mov byte [eax], bl
mov dword [ebp - 0x96c], esi
jmp 0x449371
mov eax, esi
mov byte [eax], bl
mov dword [ebp - 0x96c], esi
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x4474a5
mov eax, dword [ecx]
jmp 0x4474a7
mov eax, ecx
push 8
push str.ASSERT2_
mov byte [eax], bl
call fcn.00402707
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push 8
push ebx
push ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x22
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x447890
push 1
push ebx
lea edx, [ebp - 0x92c]
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x92c], 0x28
call fcn.0040235b
push 1
mov esi, eax
push ebx
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x92c], 0x29
call fcn.0040235b
cmp esi, ebx
jle 0x44a3fe
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44a3fe
sub eax, esi
dec eax
push eax
push ecx
lea ecx, [ebp - 0x1f4]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
mov edi, 0x10
mov byte [ebp - 4], 0x23
cmp dword [eax + 0x14], edi
jb 0x44754f
mov eax, dword [eax]
push 0x2c
push eax
lea edx, [ebp - 0xae8]
push edx
call fcn.00401c8f
add esp, 0xc
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x1e0], edi
jb 0x44757c
mov eax, dword [ebp - 0x1f4]
push eax
call fcn.00453509
add esp, 4
mov ecx, dword [ebp - 0xae4]
mov esi, dword [ebp - 0xae8]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], ebx
mov byte [ebp - 0x1f4], bl
cmp ecx, 3
jne 0x44a039
sub esp, 0x1c
mov ecx, esp
mov edx, esi
mov esi, 0xf
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], edi
jb 0x4475dd
mov eax, dword [ecx]
jmp 0x4475df
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
lea edx, [ebp - 0x29c]
push edx
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x26
call fcn.004015c3
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x288], edi
jb 0x447621
mov eax, dword [ebp - 0x29c]
push eax
call fcn.00453509
add esp, 4
mov edx, dword [ebp - 0xae8]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x28c], ebx
mov byte [ebp - 0x29c], bl
mov dword [ecx + 0x14], esi
add edx, 0x1c
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], edi
jb 0x447656
mov eax, dword [ecx]
jmp 0x447658
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
lea ecx, [ebp - 0x37c]
push ecx
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x27
call fcn.004015c3
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x368], edi
jb 0x44769a
mov edx, dword [ebp - 0x37c]
push edx
call fcn.00453509
add esp, 4
mov edx, dword [ebp - 0xae8]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x368], esi
mov dword [ebp - 0x36c], ebx
mov byte [ebp - 0x37c], bl
mov dword [ecx + 0x14], esi
add edx, 0x38
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], edi
jb 0x4476cf
mov eax, dword [ecx]
jmp 0x4476d1
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
lea eax, [ebp - 0xf0]
push eax
call fcn.00401b63
add esp, 0x20
mov edx, dword [ebp - 0xe0]
mov byte [ebp - 4], 0x28
cmp edx, 2
jb 0x44a1cc
mov esi, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xf0]
mov ecx, eax
cmp esi, edi
jae 0x447716
lea ecx, [ebp - 0xf0]
cmp byte [ecx], 0x22
jne 0x44a1cc
cmp esi, edi
jae 0x447729
lea eax, [ebp - 0xf0]
cmp byte [eax + edx - 1], 0x22
jne 0x44a1cc
lea ecx, [ebp - 0x984]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x984], ebx
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], edi
jb 0x44775f
mov eax, dword [ecx]
jmp 0x447761
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x48]
push edx
mov byte [eax], bl
call fcn.00401afa
mov esi, dword [ebp - 0x944]
push esi
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x44a2fb
sub esp, 0x1c
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
lea ecx, [ebp - 0xb00]
push ecx
call fcn.004022e8
add esp, 0x20
mov eax, dword [ebp - 0xafc]
sub eax, dword [ebp - 0xb00]
mov byte [ebp - 4], 0x29
sar eax, 1
je 0x44a324
push eax
call fcn.004544b1
mov ecx, eax
mov eax, dword [ebp - 0xafc]
sub eax, dword [ebp - 0xb00]
add esp, 4
lea edx, [ebp - 0xa04]
push edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x984]
push ecx
push eax
push esi
mov dword [ebp - 0x950], ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x44a3b5
mov esi, dword [ebp - 0xafc]
mov edi, dword [ebp - 0xb00]
sub esi, edi
sar esi, 1
cmp dword [ebp - 0xa04], esi
jne 0x44a3b5
xor eax, eax
cmp esi, ebx
jbe 0x44784c
mov ecx, dword [ebp - 0x950]
jmp 0x447830
mov edx, pe_nt_image_headers32
cmp word [edi + eax*2], dx
jae 0x447847
mov dl, byte [edi + eax*2]
cmp dl, byte [ecx + eax]
jne 0x44a356
inc eax
cmp eax, esi
jb 0x447830
mov eax, dword [ebp - 0x950]
push eax
call fcn.004544a6
add esp, 4
lea ecx, [ebp - 0xb00]
call fcn.00402b99
lea ecx, [ebp - 0xf0]
call fcn.00401aa5
lea ecx, [ebp - 0xae8]
mov byte [ebp - 4], 0x18
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x4478aa
mov eax, dword [ecx]
jmp 0x4478ac
mov eax, ecx
push 0xc
push str.GLOBALALLOC_
mov byte [eax], bl
call fcn.00402707
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push 0xc
push ebx
push ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x447a78
lea edx, [ebp - 0xd4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x44790a
mov eax, dword [ecx]
jmp 0x44790c
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x44a6b3
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xd4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.00401afa
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x64]
call fcn.00401afa
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], esi
jae 0x447959
lea eax, [ebp - 0x64]
push eax
call fcn.004547b1
add esp, 4
cmp eax, ebx
jle 0x44a58f
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa04], eax
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x44798b
mov eax, dword [ecx]
jmp 0x44798d
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.00401afa
mov ecx, dword [ebp - 0x944]
push ecx
call fcn.00401cbc
add esp, 0x24
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x11c], ebx
mov byte [ebp - 0x12c], bl
lea edx, [ebp - 0xaec]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xaec], ebx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x4479e7
mov eax, dword [ecx]
jmp 0x4479e9
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.00401afa
call fcn.004016b8
mov ecx, dword [ebp - 0xaec]
add esp, 0x20
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x48]
mov dword [ebp - 0x130], ecx
push edx
lea ecx, [ebp - 0x12c]
call fcn.00401afa
mov eax, dword [ebp - 0xa04]
lea ecx, [ebp - 0x130]
push ecx
lea ecx, [ebp - 0x9d0]
mov dword [ebp - 0x110], eax
call fcn.00402234
lea ecx, [ebp - 0x970]
call fcn.00402c48
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x118], esi
jb 0x447a61
mov edx, dword [ebp - 0x12c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x11c], ebx
mov byte [ebp - 0x12c], bl
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x447a92
mov eax, dword [ecx]
jmp 0x447a94
mov eax, ecx
push 0xd
push str.CREATETHREAD_
mov byte [eax], bl
call fcn.00402707
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x940], esp
push 0xd
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x447b7b
push 1
push ebx
lea ecx, [ebp - 0x92c]
push ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x92c], 0x28
call fcn.0040235b
push 1
push ebx
lea edx, [ebp - 0x92c]
push edx
lea ecx, [ebp - 0x2c]
mov esi, eax
mov byte [ebp - 0x92c], 0x29
call fcn.0040235b
cmp esi, ebx
jle 0x44a83a
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44a83a
sub esp, 0x1c
sub eax, esi
mov edx, esp
mov dword [ebp - 0x930], esp
dec eax
push eax
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
lea eax, [ebp - 0x4e4]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2d
call fcn.004015c3
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x9f0]
call fcn.004029c8
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.LOADLIBRARY_
call fcn.00401ffa
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x940], esp
push 0xc
push ebx
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2e
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x447c68
push 1
push ebx
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x92c], 0x28
call fcn.0040235b
push 1
push ebx
lea ecx, [ebp - 0x92c]
push ecx
lea ecx, [ebp - 0x2c]
mov esi, eax
mov byte [ebp - 0x92c], 0x29
call fcn.0040235b
cmp esi, ebx
jle 0x44a9b1
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44a9b1
sub esp, 0x1c
sub eax, esi
mov edx, esp
mov dword [ebp - 0x930], esp
dec eax
push eax
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
lea eax, [ebp - 0x500]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.004015c3
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
push ebx
push ebx
push str.LOADLIBRARY
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.READMEM_
call fcn.00401ffa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push 8
push ebx
push ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x447eb5
lea edx, [ebp - 0xd4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0x930], esp
cmp dword [ecx + 0x14], esi
jb 0x447ccd
mov eax, dword [ecx]
jmp 0x447ccf
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x44aa6b
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0xd4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.00401afa
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x64]
call fcn.00401afa
lea eax, [ebp - 0xa04]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
mov dword [ebp - 0xa04], ebx
call fcn.00401f14
mov eax, dword [ebp - 0x944]
push eax
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x44a9d3
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], esi
jae 0x447d54
lea eax, [ebp - 0x64]
push eax
call fcn.004547b1
mov edi, eax
add esp, 4
mov dword [ebp - 0x938], edi
cmp edi, ebx
jle 0x44a9e6
push edi
call fcn.004544b1
mov edx, dword [ebp - 0xa04]
add esp, 4
lea ecx, [ebp - 0xaf0]
push ecx
mov esi, eax
mov eax, dword [ebp - 0x944]
push edi
push esi
push edx
push eax
mov dword [ebp - 0x93c], esi
mov dword [ebp - 0xaf0], ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x44a9f9
cmp dword [ebp - 0xaf0], edi
jb 0x44a9f9
lea ecx, [ebp - 0x970]
call fcn.00402c48
push 0x498f30
lea ecx, [ebp - 0x48]
call fcn.00402856
xor esi, esi
cmp edi, ebx
jle 0x447e8c
jmp 0x447de0
mov ecx, dword [ebp - 0x93c]
movzx edx, byte [ecx + esi]
push edx
lea eax, [ebp - 0x90c]
push eax
call fcn.004029ff
mov edi, eax
push 0x498f2c
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x66c]
push edx
mov byte [ebp - 4], 0x33
call fcn.00402734
push edi
push eax
lea eax, [ebp - 0x7d8]
push eax
mov byte [ebp - 4], 0x34
call fcn.00401ee7
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x35
call fcn.004015c3
lea ecx, [ebp - 0x7d8]
call fcn.00401aa5
lea ecx, [ebp - 0x66c]
call fcn.00401aa5
lea ecx, [ebp - 0x90c]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
mov ecx, esi
and ecx, 0xf
cmp cl, 0xf
jne 0x447e7f
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x970]
call fcn.004029c8
push 0x498f30
lea ecx, [ebp - 0x48]
call fcn.00402856
inc esi
cmp esi, dword [ebp - 0x938]
jl 0x447de0
cmp dword [ebp - 0x38], 2
jbe 0x447ea1
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x970]
call fcn.004029c8
mov ecx, dword [ebp - 0x93c]
push ecx
call fcn.004544a6
add esp, 4
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.REGISTERSYMBOL_
call fcn.00401ffa
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x940], esp
push edi
push ebx
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x447fa2
push 1
push ebx
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x92c], 0x28
call fcn.0040235b
push 1
push ebx
lea ecx, [ebp - 0x92c]
push ecx
lea ecx, [ebp - 0x2c]
mov esi, eax
mov byte [ebp - 0x92c], 0x29
call fcn.0040235b
cmp esi, ebx
jle 0x44aa7e
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44aa7e
sub esp, 0x1c
sub eax, esi
mov edx, esp
mov dword [ebp - 0x930], esp
dec eax
push eax
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
lea eax, [ebp - 0x6a4]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x37
call fcn.004015c3
lea ecx, [ebp - 0x6a4]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x9e0]
call fcn.004029c8
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.UNREGISTERSYMBOL_
call fcn.00401ffa
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x940], esp
push 0x11
push ebx
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448098
push 1
push ebx
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x92c], 0x28
call fcn.0040235b
push 1
push ebx
lea ecx, [ebp - 0x92c]
push ecx
lea ecx, [ebp - 0x2c]
mov esi, eax
mov byte [ebp - 0x92c], 0x29
call fcn.0040235b
cmp esi, ebx
jle 0x44aa7e
cmp eax, ebx
jle 0x44aa7e
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44aa7e
sub esp, 0x1c
sub eax, esi
mov edx, esp
mov dword [ebp - 0x930], esp
dec eax
push eax
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
lea eax, [ebp - 0x810]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x39
call fcn.004015c3
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0xa00]
call fcn.004029c8
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.AOBSCAN_
call fcn.00401ffa
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x940], esp
push 8
push ebx
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3a
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448223
lea eax, [ebp - 0xd4]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
call fcn.00401f14
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x44aaf2
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x48]
call fcn.004027ca
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.004027ca
lea edx, [ebp - 0x984]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
mov dword [ebp - 0x984], ebx
call fcn.00401f14
mov edi, dword [ebp - 0x944]
push 0x7fffffff
push ebx
push 1
push edi
call fcn.00401a46
add esp, 0x30
cmp al, bl
je 0x44aa91
mov ecx, dword [ebp - 0x984]
push ecx
lea edx, [ebp - 0x570]
push edx
call fcn.004029ff
mov esi, eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x554]
push str.DEFINE_
push ecx
mov byte [ebp - 4], 0x3c
call fcn.004017b2
push 0x498ee4
push eax
lea edx, [ebp - 0x730]
push edx
mov byte [ebp - 4], 0x3d
call fcn.00401ec9
push esi
push eax
lea eax, [ebp - 0x538]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00401ee7
push 0x498ee0
push eax
lea ecx, [ebp - 0x51c]
push ecx
mov byte [ebp - 4], 0x3f
call fcn.00401ec9
add esp, 0x38
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x40
call fcn.004015c3
lea ecx, [ebp - 0x51c]
call fcn.00401aa5
lea ecx, [ebp - 0x538]
call fcn.00401aa5
lea ecx, [ebp - 0x730]
call fcn.00401aa5
lea ecx, [ebp - 0x554]
call fcn.00401aa5
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
mov esi, 0x10
jmp 0x448229
mov edi, dword [ebp - 0x944]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.AOBSCAN2_
call fcn.00401ffa
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x940], esp
push 9
push ebx
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x41
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x44861b
push ebx
push 0x28
lea ecx, [ebp - 0x2c]
call fcn.00402086
push ebx
push 0x29
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402086
cmp esi, ebx
jle 0x44ab97
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44ab97
sub eax, esi
dec eax
push eax
push ecx
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
mov esi, 0x10
mov byte [ebp - 4], 0x42
cmp dword [eax + 0x14], esi
jb 0x4482bc
mov eax, dword [eax]
push 0x2c
push eax
lea ecx, [ebp - 0xacc]
push ecx
call fcn.00401c8f
add esp, 0xc
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x44
call fcn.00401aa5
lea ecx, [ebp - 0xacc]
call fcn.00402d15
push ebx
cmp eax, 6
jne 0x44ab05
lea ecx, [ebp - 0xacc]
call fcn.00401037
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
lea edx, [ebp - 0x8b8]
push edx
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x45
call fcn.004015c3
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x44
call fcn.00401aa5
push 1
lea ecx, [ebp - 0xacc]
call fcn.00401037
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
lea eax, [ebp - 0x7a0]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x46
call fcn.004015c3
lea ecx, [ebp - 0x7a0]
mov byte [ebp - 4], 0x44
call fcn.00401aa5
push 4
lea ecx, [ebp - 0xacc]
mov dword [ebp - 0x984], ebx
call fcn.00401037
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
lea ecx, [ebp - 0x58c]
push ecx
call fcn.00401b63
add esp, 0x20
cmp dword [eax + 0x14], esi
jb 0x4483bc
mov eax, dword [eax]
push eax
call fcn.004547b1
add esp, 4
lea ecx, [ebp - 0x58c]
mov edi, eax
call fcn.00401aa5
lea edx, [ebp - 0xad0]
push edx
push 2
lea ecx, [ebp - 0xacc]
mov dword [ebp - 0xad0], ebx
call fcn.00401037
sub esp, 0x1c
mov dword [ebp - 0x930], esp
mov esi, esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
push esi
call fcn.00401b63
add esp, 0x20
call fcn.004018e8
add esp, 0x20
mov byte [ebp - 0x931], al
lea eax, [ebp - 0xad8]
push eax
push 3
lea ecx, [ebp - 0xacc]
mov dword [ebp - 0xad8], ebx
call fcn.00401037
sub esp, 0x1c
mov dword [ebp - 0x930], esp
mov esi, esp
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
push esi
call fcn.00401b63
add esp, 0x20
call fcn.004018e8
add esp, 0x20
push 5
lea ecx, [ebp - 0xacc]
mov byte [ebp - 0x949], al
call fcn.00401037
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
lea ecx, [ebp - 0x10c]
push ecx
call fcn.00401b63
add esp, 0x20
mov esi, dword [ebp - 0xfc]
mov byte [ebp - 4], 0x47
mov byte [ebp - 0x92c], bl
cmp esi, 2
jb 0x4484d3
push ebx
lea ecx, [ebp - 0x10c]
call fcn.004017da
cmp byte [eax], 0x22
jne 0x4484d3
dec esi
push esi
lea ecx, [ebp - 0x10c]
call fcn.004017da
cmp byte [eax], 0x22
mov al, 1
je 0x4484d9
mov al, byte [ebp - 0x92c]
cmp edi, 1
jl 0x44ab73
cmp byte [ebp - 0x931], bl
je 0x44ab73
cmp byte [ebp - 0x949], bl
je 0x44ab73
cmp al, bl
je 0x44ab73
lea edx, [ebp - 0x984]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
mov ecx, dword [ebp - 0xad8]
mov edx, dword [ebp - 0xad0]
mov eax, dword [ebp - 0x944]
push ecx
push edx
push edi
push eax
call fcn.00401a46
add esp, 0x30
cmp al, bl
je 0x44ab1d
mov ecx, dword [ebp - 0x984]
push ecx
lea edx, [ebp - 0x6c0]
push edx
call fcn.004029ff
mov esi, eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x688]
push str.DEFINE_
push ecx
mov byte [ebp - 4], 0x48
call fcn.004017b2
push 0x498ee4
push eax
lea edx, [ebp - 0x650]
push edx
mov byte [ebp - 4], 0x49
call fcn.00401ec9
push esi
push eax
lea eax, [ebp - 0x5fc]
push eax
mov byte [ebp - 4], 0x4a
call fcn.00401ee7
push 0x498ee0
push eax
lea ecx, [ebp - 0x5c4]
push ecx
mov byte [ebp - 4], 0x4b
call fcn.00401ec9
add esp, 0x38
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
call fcn.004015c3
lea ecx, [ebp - 0x5c4]
call fcn.00401aa5
lea ecx, [ebp - 0x5fc]
call fcn.00401aa5
lea ecx, [ebp - 0x650]
call fcn.00401aa5
lea ecx, [ebp - 0x688]
call fcn.00401aa5
lea ecx, [ebp - 0x6c0]
call fcn.00401aa5
lea ecx, [ebp - 0x10c]
call fcn.00401aa5
lea ecx, [ebp - 0xacc]
mov byte [ebp - 4], 0x18
call fcn.00401cad
mov edi, dword [ebp - 0x944]
mov esi, 0x10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.DEFINE_
call fcn.00401ffa
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x940], esp
push 7
push ebx
push edx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4d
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448765
lea eax, [ebp - 0xd4]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
call fcn.00401f14
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x44ac0c
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x48]
call fcn.004027ca
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.004027ca
lea ecx, [ebp - 0x9a8]
xor esi, esi
call fcn.00401168
mov edi, eax
cmp edi, ebx
jbe 0x44870e
jmp 0x4486c0
sub esp, 0x1c
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
call fcn.00401f14
push esi
lea ecx, [ebp - 0x9a8]
mov byte [ebp - 4], 0x4e
call fcn.0040165e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push eax
call fcn.00401f14
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, bl
jne 0x44abaa
inc esi
cmp esi, edi
jb 0x4486c0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x6f8]
call fcn.00401f14
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x6dc]
mov byte [ebp - 4], 0x50
call fcn.00401f14
lea edx, [ebp - 0x6f8]
push edx
lea ecx, [ebp - 0x9a8]
mov byte [ebp - 4], 0x51
call fcn.00402af9
lea ecx, [ebp - 0x970]
call fcn.00402c48
lea ecx, [ebp - 0x6f8]
mov byte [ebp - 4], 0x18
call fcn.00402563
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.FULLACCESS_
call fcn.00401ffa
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x940], esp
push 0xb
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448870
lea ecx, [ebp - 0xd4]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
call fcn.00401f14
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x44ac1f
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x48]
call fcn.004027ca
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x64]
call fcn.004027ca
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], esi
jae 0x4487fd
lea eax, [ebp - 0x64]
push eax
call fcn.004547b1
add esp, 4
lea edx, [ebp - 0xb0c]
push edx
sub esp, 0x1c
mov esi, eax
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
mov dword [ebp - 0xa9c], esi
call fcn.00401f14
push edi
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x44ac1f
cmp esi, ebx
jbe 0x44ac1f
mov ecx, dword [ebp - 0xb0c]
lea edx, [ebp - 0xaa0]
mov dword [ebp - 0xaa0], ecx
push edx
lea ecx, [ebp - 0xa14]
call fcn.00401e4c
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.LABEL_
call fcn.00401ffa
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x940], esp
push 6
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x53
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448b29
push ebx
push 0x28
lea ecx, [ebp - 0x2c]
call fcn.00402086
push ebx
push 0x29
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402086
cmp esi, ebx
jle 0x44ad62
cmp eax, ebx
jle 0x44ad62
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x44ad62
sub esp, 0x1c
sub eax, esi
mov edx, esp
mov dword [ebp - 0x930], esp
dec eax
push eax
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
lea eax, [ebp - 0x714]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x54
call fcn.004015c3
lea ecx, [ebp - 0x714]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
lea ecx, [ebp - 0xb14]
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
mov dword [ebp - 0xb14], ebx
call fcn.00401f14
call fcn.004018e8
add esp, 0x20
cmp al, 1
je 0x44ac32
lea ecx, [ebp - 0x960]
xor esi, esi
call fcn.00401bbd
mov edi, eax
mov dword [ebp - 0x93c], edi
cmp edi, ebx
jbe 0x4489a5
mov edi, dword [ebp - 0x960]
add edi, 8
mov edi, edi
lea eax, [ebp - 0x48]
push eax
mov ecx, edi
call fcn.004014dd
test eax, eax
je 0x44ac5a
inc esi
add edi, 0x48
cmp esi, dword [ebp - 0x93c]
jb 0x448980
mov edi, dword [ebp - 0x93c]
push 0x498eb8
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x408]
push edx
mov byte [ebp - 0x931], bl
call fcn.00402734
add esp, 0xc
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x55
xor esi, esi
call fcn.00402d15
test eax, eax
je 0x44acf5
lea esp, [esp]
lea eax, [ebp - 0x408]
push eax
push esi
lea ecx, [ebp + 0xc]
call fcn.00401037
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
lea ecx, [ebp - 0x74c]
push ecx
call fcn.00401b63
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.004014dd
test eax, eax
lea ecx, [ebp - 0x74c]
sete byte [ebp - 0x949]
mov byte [ebp - 4], 0x55
call fcn.00401aa5
cmp byte [ebp - 0x949], bl
je 0x448a4e
cmp byte [ebp - 0x931], bl
jne 0x44ac82
mov byte [ebp - 0x931], 1
lea ecx, [ebp + 0xc]
inc esi
call fcn.00402d15
cmp esi, eax
jb 0x4489e0
cmp byte [ebp - 0x931], bl
je 0x44acf5
lea ecx, [ebp - 0x4c8]
call fcn.00401d25
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 0x59
call fcn.004027ca
xor eax, eax
mov byte [ebp - 0x4c8], bl
cmp edi, ebx
jbe 0x448aac
mov ecx, dword [ebp - 0x960]
mov edx, dword [ebp - 0x38]
add ecx, 0x18
lea ecx, [ecx]
cmp dword [ecx], edx
jbe 0x448aac
inc eax
add ecx, 0x48
cmp eax, edi
jb 0x448aa0
cmp eax, edi
jb 0x448ac4
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x960]
call fcn.004018ca
jmp 0x448aff
mov ecx, dword [ebp - 0x960]
push eax
lea edx, [ebp - 0xb44]
mov dword [ebp - 0x940], ecx
push edx
lea ecx, [ebp - 0x940]
call fcn.00402937
mov eax, dword [eax]
lea ecx, [ebp - 0x4c8]
push ecx
push eax
lea edx, [ebp - 0xa28]
push edx
lea ecx, [ebp - 0x960]
call fcn.00402103
lea ecx, [ebp - 0x970]
call fcn.00402c48
lea ecx, [ebp - 0x4c8]
call fcn.004017f3
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.DEALLOC_
call fcn.00401ffa
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x940], esp
push 8
push ebx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x5a
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448c88
mov edi, dword [ebp - 0xaa8]
mov ecx, edi
call fcn.004010eb
test eax, eax
je 0x448c78
push ebx
push 0x28
lea ecx, [ebp - 0x2c]
call fcn.00402086
push ebx
push 0x29
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402086
cmp esi, ebx
jle 0x448c78
cmp eax, ebx
jle 0x448c78
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x448c78
sub esp, 0x1c
sub eax, esi
mov edx, esp
mov dword [ebp - 0x930], esp
dec eax
push eax
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
lea eax, [ebp - 0x784]
push eax
call fcn.00401b63
add esp, 0x20
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5b
call fcn.004015c3
lea ecx, [ebp - 0x784]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
mov ecx, edi
mov dword [ebp - 0x938], ebx
call fcn.004010eb
test eax, eax
je 0x448c78
xor esi, esi
lea esp, [esp]
sub esp, 0x1c
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
call fcn.00401f14
mov eax, dword [edi]
sub esp, 0x1c
add eax, esi
add eax, 4
mov ecx, esp
mov dword [ebp - 0x940], esp
push eax
mov byte [ebp - 4], 0x5c
call fcn.00401f14
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448c60
mov eax, dword [edi]
add eax, esi
push eax
lea ecx, [ebp - 0xa24]
call fcn.004015eb
inc dword [ebp - 0x938]
mov ecx, edi
add esi, 0x24
call fcn.004010eb
cmp dword [ebp - 0x938], eax
jb 0x448c10
lea ecx, [ebp - 0x970]
call fcn.00402c48
jmp 0x449371
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.ALLOC_
call fcn.00401ffa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push 6
push ebx
push ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x5d
call fcn.00402cb6
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
jne 0x448e5e
lea edx, [ebp - 0xd4]
push edx
sub esp, 0x1c
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x930], esp
push eax
call fcn.00401f14
call fcn.00402b21
add esp, 0x20
cmp al, bl
je 0x44ae04
lea ecx, [ebp - 0xd4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.004027ca
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x64]
call fcn.004027ca
lea eax, [ebp - 0xb10]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
mov dword [ebp - 0xb10], ebx
call fcn.00401f14
call fcn.004018e8
add esp, 0x20
cmp al, 1
je 0x44ad75
lea ecx, [ebp - 0x980]
xor edi, edi
call fcn.004010eb
mov esi, eax
cmp esi, ebx
jbe 0x448d93
mov eax, dword [ebp - 0x980]
add eax, 4
mov dword [ebp - 0x93c], eax
jmp 0x448d70
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x93c]
call fcn.004014dd
test eax, eax
je 0x44ad9c
add dword [ebp - 0x93c], 0x24
inc edi
cmp edi, esi
jb 0x448d70
lea ecx, [ebp - 0x464]
call fcn.004029e6
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x5f
call fcn.004027ca
cmp dword [ebp - 0x50], 0x10
mov eax, dword [ebp - 0x64]
jae 0x448dbd
lea eax, [ebp - 0x64]
push eax
call fcn.004547b1
mov dword [ebp - 0x444], eax
add esp, 4
xor eax, eax
cmp esi, ebx
jbe 0x448dec
mov ecx, dword [ebp - 0x980]
mov edx, dword [ebp - 0x38]
add ecx, 0x14
mov edi, edi
cmp dword [ecx], edx
jbe 0x448dec
inc eax
add ecx, 0x24
cmp eax, esi
jb 0x448de0
cmp eax, esi
jb 0x448e04
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x980]
call fcn.00402234
jmp 0x448e3f
mov ecx, dword [ebp - 0x980]
push eax
lea edx, [ebp - 0x998]
mov dword [ebp - 0x940], ecx
push edx
lea ecx, [ebp - 0x940]
call fcn.004013f7
mov eax, dword [eax]
lea ecx, [ebp - 0x464]
push ecx
push eax
lea edx, [ebp - 0xabc]
push edx
lea ecx, [ebp - 0x980]
call fcn.00402c25
lea ecx, [ebp - 0x970]
call fcn.00402c48
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0x18
call fcn.00402680
jmp 0x449371
mov eax, dword [ebp - 0x1c]
dec eax
push eax
lea ecx, [ebp - 0x2c]
call fcn.004017da
cmp byte [eax], 0x3a
jne 0x44901f
lea ecx, [ebp - 0x960]
mov byte [ebp - 0x931], bl
call fcn.00401bbd
cmp eax, ebx
jbe 0x448f00
mov esi, dword [ebp - 0x960]
add esi, 0x24
mov edi, eax
lea ecx, [esi - 0x1c]
push ecx
lea ecx, [ebp - 0x3b4]
call fcn.00401f14
push 0x498eb8
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x60
call fcn.00402ced
lea edx, [ebp - 0x3b4]
push edx
lea ecx, [ebp - 0x2c]
call fcn.004014dd
test eax, eax
jne 0x448edf
lea ecx, [ebp - 0x970]
call fcn.00402d15
dec eax
mov dword [esi], eax
mov byte [ebp - 0x931], 1
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
add esi, 0x48
dec edi
jne 0x448e94
cmp byte [ebp - 0x931], bl
jne 0x449371
lea ecx, [ebp - 0x980]
call fcn.004010eb
cmp eax, ebx
jbe 0x448f7b
mov esi, dword [ebp - 0x980]
add esi, 4
mov edi, eax
lea ebx, [ebx]
push esi
lea ecx, [ebp - 0x424]
call fcn.00401f14
push 0x498eb8
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x61
call fcn.00402ced
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004014dd
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x424]
test eax, eax
jne 0x448f64
mov byte [ebp - 0x931], 1
call fcn.00401aa5
add esi, 0x24
dec edi
jne 0x448f20
cmp byte [ebp - 0x931], bl
jne 0x449371
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0xb08]
push ecx
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x930], esp
dec edx
push edx
push ebx
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
mov ecx, dword [ebp - 0x944]
push ecx
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x44ae17
mov edx, dword [ebp - 0xb08]
push edx
lea eax, [ebp - 0x7bc]
push eax
call fcn.004029ff
push 0x498eb8
push eax
lea ecx, [ebp - 0x480]
push ecx
mov byte [ebp - 4], 0x62
call fcn.00401ec9
add esp, 0x14
lea ecx, [ebp - 0x7bc]
mov byte [ebp - 4], 0x64
call fcn.00401aa5
lea ecx, [ebp - 0x970]
call fcn.00402c48
lea edx, [ebp - 0x480]
push edx
lea ecx, [ebp - 0x970]
call fcn.004029c8
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
jmp 0x449371
lea eax, [ebp - 0xa59]
push eax
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
mov byte [ebp - 0xa59], bl
call fcn.00401f14
lea eax, [ebp - 0x7f4]
push edi
push eax
call fcn.004023b0
add esp, 0x28
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x65
call fcn.004015c3
lea ecx, [ebp - 0x7f4]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
cmp byte [ebp - 0xa59], bl
je 0x44908e
lea ecx, [ebp - 0x970]
call fcn.00402c48
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x970]
call fcn.004029c8
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.call
call fcn.00401ffa
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x940], esp
push edx
mov byte [ebp - 4], 0x66
call fcn.00401f14
mov byte [ebp - 4], 0x18
call fcn.004020b8
add esp, 0x3c
cmp eax, 0xffffffff
je 0x449173
lea ecx, [ebp - 0xa04]
push ecx
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x930], esp
push 0xffffffffffffffff
add eax, 4
push eax
push edx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xa04], ebx
call fcn.00402cb6
push edi
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x449173
mov eax, dword [ebp - 0xa04]
push eax
lea ecx, [ebp - 0x864]
push ecx
call fcn.004029ff
push eax
lea edx, [ebp - 0x82c]
push 0x498e94
push edx
mov byte [ebp - 4], 0x67
call fcn.00402cbb
add esp, 0x14
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x68
call fcn.004015c3
lea ecx, [ebp - 0x82c]
call fcn.00401aa5
lea ecx, [ebp - 0x864]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
lea ecx, [ebp - 0x970]
call fcn.00402c48
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x970]
call fcn.004029c8
lea ecx, [ebp - 0x980]
call fcn.004010eb
cmp eax, ebx
jbe 0x449208
mov esi, dword [ebp - 0x980]
add esi, 4
mov edi, eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.00000000
call fcn.00401ffa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push esi
mov byte [ebp - 4], 0x69
call fcn.00401f14
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0xa78], esp
push edx
mov byte [ebp - 4], 0x6a
call fcn.00401f14
lea eax, [ebp - 0x89c]
push eax
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x6b
call fcn.004015c3
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
add esi, 0x24
dec edi
jne 0x449191
lea ecx, [ebp - 0x9d0]
call fcn.004010eb
cmp eax, ebx
jbe 0x4492a7
mov esi, dword [ebp - 0x9d0]
add esi, 4
mov edi, eax
jmp 0x449230
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.00000000
call fcn.00401ffa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push esi
mov byte [ebp - 4], 0x6c
call fcn.00401f14
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0xa78], esp
push edx
mov byte [ebp - 4], 0x6d
call fcn.00401f14
lea eax, [ebp - 0x8f0]
push eax
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x6e
call fcn.004015c3
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
add esi, 0x24
dec edi
jne 0x449230
lea ecx, [ebp - 0x960]
call fcn.00401bbd
cmp eax, ebx
jbe 0x44933c
mov esi, dword [ebp - 0x960]
add esi, 8
mov edi, eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.00000000
call fcn.00401ffa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x940], esp
push esi
mov byte [ebp - 4], 0x6f
call fcn.00401f14
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0xa78], esp
push edx
mov byte [ebp - 4], 0x70
call fcn.00401f14
lea eax, [ebp - 0x928]
push eax
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x71
call fcn.004015c3
lea ecx, [ebp - 0x928]
mov byte [ebp - 4], 0x18
call fcn.00401aa5
add esi, 0x48
dec edi
jne 0x4492c5
mov ecx, dword [ebp - 0x994]
add ecx, 4
push ecx
sub esp, 0x1c
lea edx, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x930], esp
push edx
call fcn.00401f14
mov eax, dword [ebp - 0x9c0]
push eax
call fcn.00402284
add esp, 0x24
cmp al, bl
je 0x44ae5e
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp - 0x948]
sub ecx, edi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
mov dword [ebp - 0x948], esi
cmp esi, ecx
jb 0x4470c0
mov esi, dword [ebp - 0x9dc]
sub esi, dword [ebp - 0x9e0]
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0xa78], eax
je 0x44b1bd
mov dword [ebp - 0x948], ebx
cmp eax, ebx
jbe 0x44b1bd
mov ecx, dword [ebp - 0x97c]
sub ecx, dword [ebp - 0x980]
mov eax, 0x38e38e39
imul ecx
mov eax, dword [ebp - 0x9e0]
sar edx, 3
mov edi, edx
shr edi, 0x1f
add edi, edx
mov dword [ebp - 0x950], edi
mov dword [ebp - 0x93c], eax
lea esp, [esp]
mov dword [ebp - 0x938], ebx
cmp edi, ebx
jbe 0x44aee0
mov esi, dword [ebp - 0x980]
add esi, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x930], esp
jb 0x44ae71
mov eax, dword [ecx]
jmp 0x44ae73
push 0x1f
push str._is_not_a_valid_name_or_address
lea ecx, [ebp - 0x48]
call fcn.00401fd2
mov eax, dword [ebp - 0x48]
mov esi, 0x10
cmp dword [ebp - 0x34], esi
jae 0x44946c
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [ebp - 0x9b8]
cmp eax, ebx
je 0x449489
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], esi
jb 0x4494b7
mov edx, dword [ebp - 0x80]
push edx
call fcn.00453509
add esp, 4
mov esi, dword [ebp - 0x970]
mov edi, 0xf
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
cmp esi, ebx
je 0x4494f3
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x96c]
push eax
lea ecx, [ebp - 0x964]
push ecx
push edx
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov esi, 0x10
cmp dword [ebp - 0x88], esi
jb 0x44950f
mov eax, dword [ebp - 0x9c]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x449532
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], esi
jb 0x44954c
mov edx, dword [ebp - 0x48]
push edx
call fcn.00453509
add esp, 4
mov esi, dword [ebp - 0x9f0]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
cmp esi, ebx
je 0x449583
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x9ec]
push eax
lea ecx, [ebp - 0x9e4]
push ecx
push edx
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0xa00]
cmp esi, ebx
je 0x4495b1
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x9fc]
push eax
lea ecx, [ebp - 0x9f4]
push ecx
push edx
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x9e0]
cmp esi, ebx
je 0x4495df
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x9dc]
push eax
lea ecx, [ebp - 0x9d4]
push ecx
push edx
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x4495f2
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x449605
push eax
call fcn.00453509
add esp, 4
mov esi, dword [ebp - 0x9a8]
cmp esi, ebx
je 0x449633
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x9a4]
push eax
lea ecx, [ebp - 0x99c]
push ecx
push edx
push esi
call fcn.0040277a
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x960]
cmp esi, ebx
je 0x449661
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x95c]
push eax
lea ecx, [ebp - 0x954]
push ecx
push edx
push esi
call fcn.004024c3
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x980]
cmp esi, ebx
je 0x44968f
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x97c]
push eax
lea ecx, [ebp - 0x974]
push ecx
push edx
push esi
call fcn.00401749
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x9d0]
cmp esi, ebx
je 0x4496bd
mov eax, dword [ebp - 0x998]
mov edx, dword [ebp - 0x9cc]
push eax
lea ecx, [ebp - 0x9c4]
push ecx
push edx
push esi
call fcn.00401749
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x994]
cmp esi, ebx
je 0x4496e4
mov ecx, dword [ebp - 0x990]
lea eax, [ebp - 0x988]
push eax
push ecx
push esi
call fcn.00401636
push esi
call fcn.00453509
add esp, 0x10
cmp dword [ebp - 0x18], 0x10
jb 0x4496f6
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00453509
add esp, 4
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
cmp eax, ebx
je 0x449727
mov ecx, dword [ebp - 0x998]
push ecx
mov ecx, dword [ebp + 0x10]
lea edx, [ebp + 0x18]
push edx
push ecx
push eax
call fcn.0040100f
mov edx, dword [ebp + 0xc]
push edx
call fcn.00453509
add esp, 0x14
xor al, al
jmp 0x44d03c
push 0x1a
push str._is_not_a_valid_bytestring
lea ecx, [ebp - 0x64]
call fcn.00401fd2
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], edi
jae 0x449748
lea eax, [ebp - 0x64]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [ebp - 0xab8]
cmp eax, ebx
je 0x449765
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0xab8], ebx
mov dword [ebp - 0xab4], ebx
mov dword [ebp - 0xab0], ebx
cmp eax, ebx
je 0x44978a
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], edi
jb 0x4497b8
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453509
add esp, 4
mov esi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x4497fe
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x449821
mov edx, dword [ebp - 0x64]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44983b
mov eax, dword [ebp - 0x48]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x449878
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44988b
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
mov esi, dword [ebp - 0x994]
cmp esi, ebx
je 0x4498f4
mov edx, dword [ebp - 0x990]
lea ecx, [ebp - 0x988]
push ecx
push edx
push esi
call fcn.00401636
push esi
call fcn.00453509
add esp, 0x10
cmp dword [ebp - 0x18], edi
jb 0x449905
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], 0xf
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401cad
xor al, al
jmp 0x44d03c
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x2d4]
push str.The_bytes_at
push edx
call fcn.004017b2
push str._are_not_what_was_expected
push eax
lea eax, [ebp - 0x210]
push eax
mov byte [ebp - 4], 0x1e
call fcn.00401ec9
add esp, 0x18
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x1f
call fcn.004015c3
mov esi, 0x10
cmp dword [ebp - 0x1fc], esi
jb 0x449978
mov ecx, dword [ebp - 0x210]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x1fc], 0xf
mov dword [ebp - 0x200], ebx
mov byte [ebp - 0x210], bl
cmp dword [ebp - 0x2c0], esi
jb 0x4499a5
mov edx, dword [ebp - 0x2d4]
push edx
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c0], 0xf
mov dword [ebp - 0x2c4], ebx
mov byte [ebp - 0x2d4], bl
cmp dword [ebp - 0x34], esi
jae 0x4499c6
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push edi
call fcn.004544a6
mov eax, dword [ebp - 0xab8]
add esp, 4
cmp eax, ebx
je 0x4499ec
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0xab8], ebx
mov dword [ebp - 0xab4], ebx
mov dword [ebp - 0xab0], ebx
cmp eax, ebx
je 0x449a11
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], esi
jb 0x449a3f
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453509
add esp, 4
mov edi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], esi
jb 0x449a85
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x449aa8
mov edx, dword [ebp - 0x64]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], esi
jb 0x449ac2
mov eax, dword [ebp - 0x48]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x449aff
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x449b12
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], esi
jb 0x449b70
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], edi
jmp 0x44990c
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x30c]
push str.The_memory_at
push eax
call fcn.004017b2
push str._can_not_be_read
push eax
lea ecx, [ebp - 0x360]
push ecx
mov byte [ebp - 4], 0x20
call fcn.00401ec9
add esp, 0x18
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x21
call fcn.004015c3
mov esi, 0x10
cmp dword [ebp - 0x34c], esi
jb 0x449bcf
mov edx, dword [ebp - 0x360]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x34c], 0xf
mov dword [ebp - 0x350], ebx
mov byte [ebp - 0x360], bl
cmp dword [ebp - 0x2f8], esi
jb 0x449bfc
mov eax, dword [ebp - 0x30c]
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2f8], 0xf
mov dword [ebp - 0x2fc], ebx
mov byte [ebp - 0x30c], bl
cmp dword [ebp - 0x34], esi
jae 0x449c1d
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push edi
call fcn.004544a6
mov eax, dword [ebp - 0xab8]
add esp, 4
cmp eax, ebx
je 0x449c43
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0xab8], ebx
mov dword [ebp - 0xab4], ebx
mov dword [ebp - 0xab0], ebx
cmp eax, ebx
je 0x449c68
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], esi
jb 0x449c96
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.00453509
add esp, 4
mov edi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], esi
jb 0x449cdc
mov edx, dword [ebp - 0x9c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x449cff
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], esi
jb 0x449d19
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x449d56
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x449d69
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], esi
jb 0x449b70
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], edi
jmp 0x44990c
push ebx
push ebx
push str.Wrong_syntax._ASSERT_address_11_22_33__55_66_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [ebp - 0x9b8]
cmp eax, ebx
je 0x449df4
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], esi
jb 0x449e22
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453509
add esp, 4
mov esi, dword [ebp - 0x970]
mov dword [ebp - 0x6c], 0xf
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
cmp esi, ebx
je 0x449e5d
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x96c]
push ecx
lea edx, [ebp - 0x964]
push edx
push eax
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov edi, 0x10
cmp dword [ebp - 0x88], edi
jb 0x449e79
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.00453509
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x449ea1
mov edx, dword [ebp - 0x64]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x449ebb
mov eax, dword [ebp - 0x48]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 0x9f0]
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
cmp esi, ebx
je 0x449ef2
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x9ec]
push ecx
lea edx, [ebp - 0x9e4]
push edx
push eax
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0xa00]
cmp esi, ebx
je 0x449f20
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x9fc]
push ecx
lea edx, [ebp - 0x9f4]
push edx
push eax
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x9e0]
cmp esi, ebx
je 0x449f4e
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x9dc]
push ecx
lea edx, [ebp - 0x9d4]
push edx
push eax
push esi
call fcn.0040100f
push esi
call fcn.00453509
add esp, 0x14
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x449f61
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x449f74
push eax
call fcn.00453509
add esp, 4
cmp dword [ebp - 0x9a8], ebx
je 0x449fa6
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x9a4]
mov esi, dword [ebp - 0x9a8]
push ecx
lea edx, [ebp - 0x99c]
push edx
push eax
push esi
call fcn.0040277a
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x960]
cmp esi, ebx
je 0x449fd4
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x95c]
push ecx
lea edx, [ebp - 0x954]
push edx
push eax
push esi
call fcn.004024c3
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x980]
cmp esi, ebx
je 0x44a002
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x97c]
push ecx
lea edx, [ebp - 0x974]
push edx
push eax
push esi
call fcn.00401749
push esi
call fcn.00453509
add esp, 0x14
mov esi, dword [ebp - 0x9d0]
cmp esi, ebx
je 0x4498cd
mov ecx, dword [ebp - 0x998]
mov eax, dword [ebp - 0x9cc]
push ecx
lea edx, [ebp - 0x9c4]
push edx
push eax
push esi
call fcn.00401749
push esi
call fcn.00453509
add esp, 0x14
jmp 0x4498cd
push ebx
push ebx
push 0x498d40
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xae8]
call fcn.00401cad
mov eax, dword [ebp - 0x9b8]
cmp eax, ebx
je 0x44a065
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], edi
jb 0x44a093
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.00453509
add esp, 4
mov esi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x44a0d9
mov edx, dword [ebp - 0x9c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x44a0fc
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44a116
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44a153
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44a166
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], edi
jb 0x44a1c4
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], esi
jmp 0x44990c
push ebx
push ebx
push str.assert2
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xf0]
call fcn.00401aa5
lea ecx, [ebp - 0xae8]
call fcn.00401cad
lea ecx, [ebp - 0x9bc]
call fcn.00401f0a
lea ecx, [ebp - 0xd4]
call fcn.0040257c
lea ecx, [ebp - 0xa88]
call fcn.00401145
lea ecx, [ebp - 0xa98]
call fcn.00401145
lea ecx, [ebp - 0x80]
call fcn.00401aa5
lea ecx, [ebp - 0xa48]
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
lea ecx, [ebp - 0x9c]
call fcn.00401aa5
lea ecx, [ebp - 0x64]
call fcn.00401aa5
lea ecx, [ebp - 0x48]
call fcn.00401aa5
lea ecx, [ebp - 0x9f0]
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
lea ecx, [ebp - 0xa24]
call fcn.004013d9
lea ecx, [ebp - 0xa14]
call fcn.00401de8
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
lea ecx, [ebp - 0x2c]
call fcn.00401aa5
lea ecx, [ebp + 0xc]
call fcn.00401cad
xor al, al
jmp 0x44d03c
push 0x1f
push str._is_not_a_valid_name_or_address
lea ecx, [ebp - 0x48]
call fcn.00401fd2
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], edi
jae 0x44a315
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1da
push str._is_not_a_valid_bytestring
lea ecx, [ebp - 0x64]
call fcn.00402ced
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], edi
jae 0x44a33c
lea eax, [ebp - 0x64]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0xb00]
call fcn.00402b99
jmp 0x44a1da
mov eax, dword [ebp - 0xe0]
cmp eax, 2
jbe 0x44a396
add eax, 0xfffffffe
push eax
push 1
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0xf0]
call fcn.00402cb6
cmp dword [eax + 0x14], 0x10
jb 0x44a381
mov eax, dword [eax]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x8d4]
call fcn.00401aa5
mov ecx, dword [ebp - 0x950]
push ecx
call fcn.004544a6
add esp, 4
lea ecx, [ebp - 0xb00]
call fcn.00402b99
jmp 0x44a1da
mov eax, dword [ebp - 0xe0]
cmp eax, 2
jbe 0x44a3f5
add eax, 0xfffffffe
push eax
push 1
lea edx, [ebp - 0x634]
push edx
lea ecx, [ebp - 0xf0]
call fcn.00402cb6
cmp dword [eax + 0x14], 0x10
jb 0x44a3e0
mov eax, dword [eax]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x634]
call fcn.00401aa5
mov eax, dword [ebp - 0x950]
push eax
jmp 0x44a39d
push ebx
push ebx
push str.Wrong_syntax._ASSERT_address_11_22_33__55_66_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [ebp - 0x9b8]
cmp eax, ebx
je 0x44a41f
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
mov edi, 0x10
cmp dword [ebp - 0x6c], edi
jb 0x44a452
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.00453509
add esp, 4
mov esi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x44a498
mov edx, dword [ebp - 0x9c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x44a4bb
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44a4d5
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44a512
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44a525
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], edi
jb 0x44a1c4
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], esi
jmp 0x44990c
push 0x14
push str._is_not_a_valid_size
lea ecx, [ebp - 0x64]
call fcn.00401fd2
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x50], esi
jae 0x44a5a9
lea eax, [ebp - 0x64]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x9bc]
call fcn.00401f0a
lea ecx, [ebp - 0xd4]
call fcn.0040257c
lea ecx, [ebp - 0xa88]
call fcn.00401145
lea ecx, [ebp - 0xa98]
call fcn.00401145
cmp dword [ebp - 0x6c], esi
jb 0x44a5f0
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], esi
jb 0x44a631
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x44a654
mov edx, dword [ebp - 0x64]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], esi
jb 0x44a66e
mov eax, dword [ebp - 0x48]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
lea ecx, [ebp - 0xa24]
call fcn.004013d9
lea ecx, [ebp - 0xa14]
call fcn.00401de8
jmp 0x449b12
push ebx
push ebx
push str.Wrong_syntax._GLOBALALLOC_name_size_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [ebp - 0x9b8]
cmp eax, ebx
je 0x44a6d4
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], esi
jb 0x44a702
mov edx, dword [ebp - 0x80]
push edx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], esi
jb 0x44a743
mov eax, dword [ebp - 0x9c]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x44a766
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], esi
jb 0x44a780
mov edx, dword [ebp - 0x48]
push edx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44a7bd
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44a7d0
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], esi
jb 0x449b70
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], edi
jmp 0x44990c
push ebx
push ebx
push str.Wrong_syntax._CreateThread_address_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x9bc]
call fcn.00401f0a
lea ecx, [ebp - 0xd4]
call fcn.0040257c
mov edi, 0x10
cmp dword [ebp - 0x6c], edi
jb 0x44a874
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.00453509
add esp, 4
mov esi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x44a8ba
mov edx, dword [ebp - 0x9c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x44a8dd
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44a8f7
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44a934
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44a947
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], edi
jb 0x44a1c4
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], esi
jmp 0x44990c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push str.Wrong_syntax._LoadLibrary_filename_
call fcn.00401ffa
call fcn.00401361
add esp, 0x1c
jmp 0x44a1f0
push ebx
push ebx
push str.Invalid_address_for_ReadMem
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push ebx
push ebx
push str.Invalid_size_for_ReadMem
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push esi
call fcn.004544a6
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x880]
push str.The_memory_at
push ecx
call fcn.004017b2
push str._could_not_be_fully_read
push eax
lea edx, [ebp - 0x618]
push edx
mov byte [ebp - 4], 0x31
call fcn.00401ec9
add esp, 0x1c
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x32
call fcn.004015c3
lea ecx, [ebp - 0x618]
call fcn.00401aa5
lea ecx, [ebp - 0x880]
call fcn.00401aa5
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x44aa5c
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push ebx
push ebx
push str.Wrong_syntax._ReadMem_address_size_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push ebx
push ebx
push str.Syntax_error
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push str.The_array_of_byte_
lea ecx, [ebp - 0x1bc]
call fcn.00401ffa
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x3b
call fcn.0040139d
push str._could_not_be_found
lea ecx, [ebp - 0x1bc]
call fcn.00402ced
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x1a8], esi
jae 0x44aad8
lea eax, [ebp - 0x1bc]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x1bc]
call fcn.00401aa5
jmp 0x44a1f0
push ebx
push ebx
push str.Wrong_syntax._AOBSCAN_name_11_22_33__55_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push ebx
push 0x498b00
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xacc]
jmp 0x44a1eb
mov eax, dword [ebp - 0xfc]
cmp eax, 2
jbe 0x44ab81
add eax, 0xfffffffe
push eax
push 1
lea ecx, [ebp - 0x5e0]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00402cb6
cmp dword [eax + 0x14], 0x10
jb 0x44ab48
mov eax, dword [eax]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x5e0]
call fcn.00401aa5
lea ecx, [ebp - 0x10c]
call fcn.00401aa5
lea ecx, [ebp - 0xacc]
jmp 0x44a1eb
push ebx
push ebx
push str.aobscan2
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x10c]
call fcn.00401aa5
lea ecx, [ebp - 0xacc]
jmp 0x44a1eb
push ebx
push ebx
push 0x498b00
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x44a1f0
push str.Define
lea ecx, [ebp - 0x1d8]
call fcn.00401ffa
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x4f
call fcn.0040139d
push str._already_defined
lea ecx, [ebp - 0x1d8]
call fcn.00402ced
cmp dword [ebp - 0x1c4], 0x10
mov eax, dword [ebp - 0x1d8]
jae 0x44abf2
lea eax, [ebp - 0x1d8]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x1d8]
call fcn.00401aa5
jmp 0x44a1f0
push ebx
push ebx
push str.Wrong_syntax._DEFINE_name_whatever_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push ebx
push ebx
push str.Syntax_error._FullAccess_address_size_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push str._is_not_a_valid_identifier
lea ecx, [ebp - 0x48]
call fcn.00402ced
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x44ac4b
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push str._is_being_redeclared
lea ecx, [ebp - 0x48]
call fcn.00402ced
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x44ac73
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x5a8]
push str.label
push ecx
call fcn.004017b2
push str._is_being_defined_more_than_once
push eax
lea edx, [ebp - 0x3d0]
push edx
mov byte [ebp - 4], 0x57
call fcn.00401ec9
add esp, 0x18
lea ecx, [ebp - 0x5a8]
call fcn.00401aa5
cmp dword [ebp - 0x3bc], 0x10
mov eax, dword [ebp - 0x3d0]
jae 0x44acd0
lea eax, [ebp - 0x3d0]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x3d0]
call fcn.00401aa5
lea ecx, [ebp - 0x408]
call fcn.00401aa5
jmp 0x44a1f0
push str.label
lea ecx, [ebp - 0x1a0]
call fcn.00401ffa
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x58
call fcn.0040139d
push str._is_not_defined_in_the_scriptd
lea ecx, [ebp - 0x1a0]
call fcn.00402ced
cmp dword [ebp - 0x18c], 0x10
mov eax, dword [ebp - 0x1a0]
jae 0x44ad3d
lea eax, [ebp - 0x1a0]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x1a0]
call fcn.00401aa5
lea ecx, [ebp - 0x408]
call fcn.00401aa5
jmp 0x44a1f0
push ebx
push ebx
push str.Syntax_Error
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
push str._is_not_a_valid_identifier
lea ecx, [ebp - 0x48]
call fcn.00402ced
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x34], esi
jae 0x44ad8d
lea eax, [ebp - 0x48]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x848]
push str.The_identifier
push edx
call fcn.004017b2
push str._has_already_been_declared
push eax
lea eax, [ebp - 0x440]
push eax
mov byte [ebp - 4], 0x5e
call fcn.00401ec9
add esp, 0x18
lea ecx, [ebp - 0x848]
call fcn.00401aa5
cmp dword [ebp - 0x42c], 0x10
mov eax, dword [ebp - 0x440]
jae 0x44adea
lea eax, [ebp - 0x440]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x440]
call fcn.00401aa5
jmp 0x44a1f0
push ebx
push ebx
push str.Wrong_syntax._ALLOC_identifier_sizeinbytes_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x3ec]
push str.The_address_specifier_is_not_valid:
push edx
call fcn.004017b2
mov eax, dword [ebp - 0x3ec]
add esp, 0xc
cmp dword [ebp - 0x3d8], 0x10
jae 0x44ae44
lea eax, [ebp - 0x3ec]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x3ec]
call fcn.00401aa5
jmp 0x44a1f0
push ebx
push ebx
push str.This_instruction_cant_be_compiled
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44a1f0
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x72
mov dword [ebp - 0x940], esp
jb 0x44aea1
mov eax, dword [ecx]
jmp 0x44aea3
mov eax, ecx
mov edx, dword [ebp - 0x93c]
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
je 0x44b19d
mov eax, dword [ebp - 0x938]
inc eax
add esi, 0x24
mov dword [ebp - 0x938], eax
cmp eax, edi
jb 0x449427
mov ecx, dword [ebp - 0x95c]
sub ecx, dword [ebp - 0x960]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov dword [ebp - 0x938], ebx
je 0x44afa0
mov edi, dword [ebp - 0x960]
add edi, 8
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x930], esp
jb 0x44af31
mov eax, dword [ecx]
jmp 0x44af33
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x73
mov dword [ebp - 0x940], esp
jb 0x44af61
mov eax, dword [ecx]
jmp 0x44af63
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
mov eax, dword [ebp - 0x93c]
push ebx
push eax
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
je 0x44b197
mov eax, dword [ebp - 0x938]
inc eax
add edi, 0x48
mov dword [ebp - 0x938], eax
cmp eax, esi
jb 0x44af12
mov eax, dword [ebp - 0x948]
mov edx, dword [ebp - 0x9e0]
lea ecx, [eax*8]
sub ecx, eax
lea eax, [edx + ecx*4]
push str._was_supposed_to_be_added_to_the_symbollist__but_it_isnt_declared
push eax
lea ecx, [ebp - 0x184]
push ecx
call fcn.00402734
mov eax, dword [ebp - 0x184]
mov edi, 0x10
add esp, 0xc
cmp dword [ebp - 0x170], edi
jae 0x44afe6
lea eax, [ebp - 0x184]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x170], edi
jb 0x44b007
mov edx, dword [ebp - 0x184]
push edx
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9b8]
mov esi, 0xf
mov dword [ebp - 0x170], esi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
cmp eax, ebx
je 0x44b031
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], edi
jb 0x44b05f
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x44b0a0
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x44b0c3
mov edx, dword [ebp - 0x64]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44b0dd
mov eax, dword [ebp - 0x48]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44b11a
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44b12d
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], edi
jb 0x44a1c4
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], esi
jmp 0x44990c
mov edi, dword [ebp - 0x950]
mov eax, dword [ebp - 0x948]
add dword [ebp - 0x93c], 0x1c
inc eax
mov dword [ebp - 0x948], eax
cmp eax, dword [ebp - 0xa78]
jb 0x449410
mov ecx, dword [ebp - 0x9ec]
mov esi, dword [ebp - 0x9f0]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x940], eax
je 0x44b742
mov dword [ebp - 0x948], ebx
cmp eax, ebx
jbe 0x44b742
mov dword [ebp - 0x950], esi
mov edi, edi
lea edx, [ebp - 0x984]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x930], esp
jb 0x44b226
mov eax, dword [ecx]
jmp 0x44b228
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
mov eax, dword [ebp - 0x950]
push ebx
push eax
call fcn.00401afa
mov ecx, dword [ebp - 0x944]
push ecx
call fcn.004010aa
add esp, 0x24
cmp al, bl
jne 0x44b722
mov ecx, dword [ebp - 0x95c]
sub ecx, dword [ebp - 0x960]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov dword [ebp - 0x938], ebx
je 0x44b310
mov edi, dword [ebp - 0x960]
add edi, 8
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x930], esp
jb 0x44b2a1
mov eax, dword [ecx]
jmp 0x44b2a3
mov eax, ecx
mov edx, dword [ebp - 0x950]
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x74
mov dword [ebp - 0xa28], esp
jb 0x44b2d7
mov eax, dword [ecx]
jmp 0x44b2d9
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edi
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
je 0x44b722
mov eax, dword [ebp - 0x938]
inc eax
add edi, 0x48
mov dword [ebp - 0x938], eax
cmp eax, esi
jb 0x44b282
mov ecx, dword [ebp - 0x97c]
sub ecx, dword [ebp - 0x980]
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov esi, edx
shr esi, 0x1f
add esi, edx
mov dword [ebp - 0x938], ebx
je 0x44b3d0
mov edi, dword [ebp - 0x980]
add edi, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x930], esp
jb 0x44b361
mov eax, dword [ecx]
jmp 0x44b363
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
mov eax, dword [ebp - 0x950]
push ebx
push eax
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x75
mov dword [ebp - 0xa28], esp
jb 0x44b397
mov eax, dword [ecx]
jmp 0x44b399
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edi
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
je 0x44b722
mov eax, dword [ebp - 0x938]
inc eax
add edi, 0x24
mov dword [ebp - 0x938], eax
cmp eax, esi
jb 0x44b342
mov ecx, dword [ebp - 0x9a4]
sub ecx, dword [ebp - 0x9a8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
xor esi, esi
add edi, edx
je 0x44b48f
mov ecx, dword [ebp - 0x9a8]
mov dword [ebp - 0x93c], ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x930], esp
jb 0x44b422
mov eax, dword [ecx]
jmp 0x44b424
mov eax, ecx
mov edx, dword [ebp - 0x950]
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x76
mov dword [ebp - 0xa28], esp
jb 0x44b458
mov eax, dword [ecx]
jmp 0x44b45a
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
mov eax, dword [ebp - 0x93c]
push ebx
push eax
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, 1
je 0x44b6c5
add dword [ebp - 0x93c], 0x38
inc esi
cmp esi, edi
jb 0x44b403
mov eax, dword [ebp - 0x948]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ebp - 0x9f0]
lea eax, [eax + edx*4]
push eax
lea ecx, [ebp - 0x398]
push str.The_address_in_createthread_
push ecx
call fcn.004017b2
push str.__is_not_valid
push eax
lea edx, [ebp - 0x168]
push edx
mov byte [ebp - 4], 0x77
call fcn.00401ec9
mov esi, 0x10
add esp, 0x18
cmp dword [ebp - 0x384], esi
jb 0x44b4ee
mov eax, dword [ebp - 0x398]
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x168]
mov edi, 0xf
mov dword [ebp - 0x384], edi
mov dword [ebp - 0x388], ebx
mov byte [ebp - 0x398], bl
cmp dword [ebp - 0x154], esi
jae 0x44b519
lea eax, [ebp - 0x168]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x154], esi
jb 0x44b53a
mov ecx, dword [ebp - 0x168]
push ecx
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x158], ebx
mov byte [ebp - 0x168], bl
cmp eax, ebx
je 0x44b55f
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], esi
jb 0x44b58d
mov edx, dword [ebp - 0x80]
push edx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], esi
jb 0x44b5ce
mov eax, dword [ebp - 0x9c]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], esi
jb 0x44b5f1
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], esi
jb 0x44b60b
mov edx, dword [ebp - 0x48]
push edx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44b648
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44b65b
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], esi
jb 0x449b70
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], edi
jmp 0x44990c
mov eax, dword [ebp - 0x9a8]
lea ecx, [ebp - 0x984]
push ecx
sub esp, 0x1c
mov ecx, esp
lea edx, [esi*8]
mov dword [ecx + 0x14], 0xf
sub edx, esi
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
lea eax, [eax + edx*8 + 0x1c]
mov dword [ebp - 0x930], esp
jb 0x44b6fe
mov edx, dword [ecx]
jmp 0x44b700
mov edx, ecx
push 0xffffffffffffffff
push ebx
push eax
mov byte [edx], bl
call fcn.00401afa
mov ecx, dword [ebp - 0x944]
push ecx
call fcn.004010aa
add esp, 0x24
cmp al, bl
je 0x44b48f
mov eax, dword [ebp - 0x948]
add dword [ebp - 0x950], 0x1c
inc eax
mov dword [ebp - 0x948], eax
cmp eax, dword [ebp - 0x940]
jb 0x44b200
mov eax, dword [ebp - 0x97c]
mov esi, dword [ebp - 0x980]
sub eax, esi
mov ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov edi, edx
shr edi, 0x1f
add edi, edx
mov dword [ebp - 0x950], edi
je 0x44b7c4
xor eax, eax
mov dword [ebp - 0xa04], eax
cmp edi, ebx
jbe 0x44b78e
lea ecx, [esi + 0x20]
mov edx, edi
lea esp, [esp]
add eax, dword [ecx]
add ecx, 0x24
dec edx
mov dword [ebp - 0xa04], eax
jne 0x44b780
mov ecx, dword [ebp - 0x944]
push 0x40
push 0x1000
add eax, 0x1000
push eax
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [esi], eax
cmp edi, 1
jbe 0x44b7c4
lea eax, [esi + 0x20]
lea ecx, [edi - 1]
mov edx, dword [eax - 0x20]
add edx, dword [eax]
add eax, 0x24
dec ecx
mov dword [eax - 0x20], edx
jne 0x44b7b6
mov eax, dword [ebp - 0x990]
mov ecx, dword [ebp - 0x994]
push eax
push ecx
lea edx, [ebp - 0x930]
push edx
lea ecx, [ebp - 0x994]
call fcn.004012fd
mov ecx, dword [ebp - 0x96c]
sub ecx, dword [ebp - 0x970]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
xor esi, esi
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x948], esi
mov dword [ebp - 0x930], eax
je 0x44c62a
mov ecx, dword [ebp - 0x9cc]
sub ecx, dword [ebp - 0x9d0]
mov eax, 0x38e38e39
imul ecx
mov ecx, dword [ebp - 0x9a4]
sub ecx, dword [ebp - 0x9a8]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0xabc], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0xa28], eax
jmp 0x44b86d
mov esi, dword [ebp - 0x948]
mov edi, dword [ebp - 0x950]
mov ecx, dword [ebp - 0x970]
lea eax, [esi*8]
push 0xffffffffffffffff
sub eax, esi
lea eax, [ecx + eax*4]
push ebx
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401afa
cmp edi, ebx
jbe 0x44b97c
mov esi, dword [ebp - 0x980]
mov dword [ebp - 0x93c], edi
mov edi, 0x10
mov eax, dword [esi]
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x938], esp
push eax
push edx
call fcn.004029ff
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x78
mov dword [ebp - 0xaa4], esp
cmp dword [ecx + 0x14], edi
jb 0x44b8da
mov eax, dword [ecx]
jmp 0x44b8dc
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 4]
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x79
mov dword [ebp - 0xa74], esp
cmp dword [ecx + 0x14], edi
jb 0x44b90c
mov eax, dword [ecx]
jmp 0x44b90e
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
lea ecx, [ebp - 0x344]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x7a
call fcn.004015c3
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x330], edi
jb 0x44b957
mov edx, dword [ebp - 0x344]
push edx
call fcn.00453509
add esp, 4
add esi, 0x24
dec dword [ebp - 0x93c]
mov dword [ebp - 0x330], 0xf
mov dword [ebp - 0x334], ebx
mov byte [ebp - 0x344], bl
jne 0x44b8a4
cmp dword [ebp - 0xabc], ebx
jbe 0x44ba6a
mov esi, dword [ebp - 0x9d0]
mov edi, dword [ebp - 0xabc]
mov ecx, dword [esi]
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0xa74], esp
push ecx
push eax
call fcn.004029ff
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x7b
mov dword [ebp - 0xaa4], esp
jb 0x44b9cb
mov eax, dword [ecx]
jmp 0x44b9cd
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 4]
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x7c
mov dword [ebp - 0x93c], esp
jb 0x44b9fe
mov eax, dword [ecx]
jmp 0x44ba00
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
lea ecx, [ebp - 0x264]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x7d
call fcn.004015c3
cmp dword [ebp - 0x250], 0x10
mov byte [ebp - 4], 0x18
jb 0x44ba4a
mov edx, dword [ebp - 0x264]
push edx
call fcn.00453509
add esp, 4
add esi, 0x24
dec edi
mov dword [ebp - 0x250], 0xf
mov dword [ebp - 0x254], ebx
mov byte [ebp - 0x264], bl
jne 0x44b994
cmp dword [ebp - 0xa28], ebx
jbe 0x44bb85
mov eax, dword [ebp - 0xa28]
mov esi, dword [ebp - 0x9a8]
mov dword [ebp - 0x93c], eax
jmp 0x44ba90
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa74], esp
jb 0x44baaf
mov eax, dword [ecx]
jmp 0x44bab1
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 0x1c]
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov edi, 0x10
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x7e
mov dword [ebp - 0xaa4], esp
cmp dword [ecx + 0x14], edi
jb 0x44bae6
mov eax, dword [ecx]
jmp 0x44bae8
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x7f
mov dword [ebp - 0x938], esp
cmp dword [ecx + 0x14], edi
jb 0x44bb15
mov eax, dword [ecx]
jmp 0x44bb17
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
lea ecx, [ebp - 0x248]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x80
call fcn.004015c3
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x234], edi
jb 0x44bb60
mov edx, dword [ebp - 0x248]
push edx
call fcn.00453509
add esp, 4
add esi, 0x38
dec dword [ebp - 0x93c]
mov dword [ebp - 0x234], 0xf
mov dword [ebp - 0x238], ebx
mov byte [ebp - 0x248], bl
jne 0x44ba90
mov eax, dword [ebp - 0x2c]
mov edi, 0x10
cmp dword [ebp - 0x18], edi
jae 0x44bb95
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + eax - 1], 0x3a
je 0x44c091
mov ecx, dword [ebp - 0x95c]
sub ecx, dword [ebp - 0x960]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
add esi, edx
mov dword [ebp - 0x938], ebx
je 0x44c091
mov edi, dword [ebp - 0x960]
add edi, 8
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa74], esp
jb 0x44bbf6
mov eax, dword [ecx]
jmp 0x44bbf8
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x81
mov dword [ebp - 0xaa4], esp
jb 0x44bc26
mov eax, dword [ecx]
jmp 0x44bc28
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x2c]
push edx
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.004020b8
add esp, 0x3c
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x938]
jne 0x44bc64
inc eax
add edi, 0x48
mov dword [ebp - 0x938], eax
cmp eax, esi
jb 0x44bbd5
jmp 0x44c08c
mov ecx, dword [ebp - 0x960]
lea eax, [eax + eax*8]
lea esi, [ecx + eax*8]
sub esp, 0x1c
mov dword [ebp - 0x93c], esi
mov dword [ebp - 0xa74], esp
cmp byte [esi], bl
jne 0x44bfcc
mov eax, dword [ebp - 0x9c0]
mov edx, esp
push eax
push edx
call fcn.004029ff
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov edi, 0x10
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x82
mov dword [ebp - 0xaa4], esp
cmp dword [ecx + 0x14], edi
jb 0x44bcbd
mov eax, dword [ecx]
jmp 0x44bcbf
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 8]
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x83
mov dword [ebp - 0x938], esp
cmp dword [ecx + 0x14], edi
jb 0x44bcef
mov eax, dword [ecx]
jmp 0x44bcf1
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
lea ecx, [ebp - 0x22c]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x84
call fcn.004015c3
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x218], edi
jb 0x44bd3a
mov edx, dword [ebp - 0x22c]
push edx
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9c0]
sub esp, 0x1c
add eax, 0xfffff
mov ecx, esp
mov dword [ebp - 0xa74], esp
push eax
push ecx
mov dword [ebp - 0x218], 0xf
mov dword [ebp - 0x21c], ebx
mov byte [ebp - 0x22c], bl
call fcn.004029ff
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x85
mov dword [ebp - 0xaa4], esp
cmp dword [ecx + 0x14], edi
jb 0x44bd8f
mov eax, dword [ecx]
jmp 0x44bd91
mov eax, ecx
push 0xffffffffffffffff
push ebx
add esi, 8
push esi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x86
mov dword [ebp - 0x938], esp
cmp dword [ecx + 0x14], edi
jb 0x44bdc1
mov eax, dword [ecx]
jmp 0x44bdc3
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x2c]
push edx
mov byte [eax], bl
call fcn.00401afa
lea eax, [ebp - 0x2b8]
push eax
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x87
call fcn.004015c3
cmp dword [ebp - 0x2a4], edi
jb 0x44be08
mov ecx, dword [ebp - 0x2b8]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x2a4], 0xf
mov dword [ebp - 0x2a8], ebx
mov byte [ebp - 0x2b8], bl
mov dword [ebp - 0xb38], ebx
mov dword [ebp - 0xb34], ebx
mov dword [ebp - 0xb30], ebx
mov edx, dword [ebp - 0x9c0]
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0x994]
mov byte [ebp - 4], 0x88
mov dword [ebp - 0xb3c], edx
call fcn.00402243
mov esi, dword [ebp - 0x994]
mov ecx, dword [ebp - 0x990]
sub ecx, esi
mov eax, 0x66666667
imul ecx
sar edx, 3
mov edi, edx
shr edi, 0x1f
add edi, edx
lea ecx, [edi + edi*4]
lea esi, [esi + ecx*4 - 0x10]
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa74], esp
jb 0x44be98
mov eax, dword [ecx]
jmp 0x44be9a
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x2c]
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [ebp - 0x9c0]
push eax
call fcn.00402284
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov ecx, dword [esi]
add esp, 0x24
mov dword [ebp - 0x938], eax
mov eax, dword [esi + 4]
push eax
push ecx
lea ecx, [ebp - 0xb48]
push ecx
mov ecx, esi
call fcn.00402239
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa74], esp
jb 0x44bef7
mov eax, dword [ecx]
jmp 0x44bef9
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x48]
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [ebp - 0x9c0]
push eax
call fcn.00402284
mov eax, dword [esi + 4]
sub eax, dword [esi]
add esp, 0x24
cmp dword [ebp - 0x938], eax
jle 0x44bf62
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa74], esp
jb 0x44bf43
mov eax, dword [ecx]
jmp 0x44bf45
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x2c]
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [ebp - 0x9c0]
push eax
call fcn.00402284
add esp, 0x24
lea ecx, [ebp - 0x938]
push ecx
mov ecx, dword [ebp - 0x93c]
dec edi
add ecx, 0x28
mov dword [ebp - 0x938], edi
call fcn.00401ad7
mov ecx, dword [ebp - 0x93c]
lea edx, [ebp - 0x948]
push edx
add ecx, 0x38
call fcn.004022ac
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov byte [ebp - 4], 0x18
add dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0xb38]
cmp eax, ebx
je 0x44bfb5
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0xb38], ebx
mov dword [ebp - 0xb34], ebx
mov dword [ebp - 0xb30], ebx
jmp 0x44c611
mov edx, dword [esi + 4]
mov ecx, esp
push edx
push ecx
call fcn.004029ff
sub esp, 0x14
mov ecx, esp
mov edi, 0xf
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x89
mov dword [ebp - 0xaa4], esp
jb 0x44bffc
mov eax, dword [ecx]
jmp 0x44bffe
mov eax, ecx
push 0xffffffffffffffff
push ebx
add esi, 8
push esi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], edi
mov esi, 0x10
mov dword [ecx + 0x10], ebx
mov byte [ebp - 4], 0x8a
mov dword [ebp - 0x93c], esp
cmp dword [ecx + 0x14], esi
jb 0x44c02f
mov eax, dword [ecx]
jmp 0x44c031
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
lea ecx, [ebp - 0x2f0]
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x8b
call fcn.004015c3
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x2dc], esi
jb 0x44c07a
mov edx, dword [ebp - 0x2f0]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x2dc], edi
mov dword [ebp - 0x2e0], ebx
mov byte [ebp - 0x2f0], bl
mov edi, 0x10
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x44c09c
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
cmp byte [eax + ecx - 1], 0x3a
jne 0x44c545
mov edx, dword [ebp - 0x95c]
mov esi, dword [ebp - 0x960]
sub edx, esi
mov eax, 0x38e38e39
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor ecx, ecx
add eax, edx
je 0x44c0e6
lea edx, [esi + 0x24]
mov esi, dword [ebp - 0x948]
cmp esi, dword [edx]
je 0x44c2fb
inc ecx
add edx, 0x48
cmp ecx, eax
jb 0x44c0d0
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x9c0]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa70], esp
dec eax
push eax
push ebx
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00402cb6
mov edx, dword [ebp - 0x944]
push edx
call fcn.004010aa
add esp, 0x24
cmp al, 1
je 0x44c611
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14c]
push str.This_address_specifier_is_not_valid:
push ecx
call fcn.004017b2
mov eax, dword [ebp - 0x14c]
add esp, 0xc
cmp dword [ebp - 0x138], edi
jae 0x44c14a
lea eax, [ebp - 0x14c]
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x138], edi
jb 0x44c16b
mov edx, dword [ebp - 0x14c]
push edx
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0x9b8]
mov esi, 0xf
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
cmp eax, ebx
je 0x44c195
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
cmp dword [ebp - 0x6c], edi
jb 0x44c1c3
mov eax, dword [ebp - 0x80]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x44c204
mov ecx, dword [ebp - 0x9c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x44c227
mov edx, dword [ebp - 0x64]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44c241
mov eax, dword [ebp - 0x48]
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44c27e
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44c291
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], edi
jb 0x44a1c4
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x18], esi
jmp 0x44990c
mov eax, dword [ebp - 0x960]
lea edx, [ecx + ecx*8]
mov ecx, dword [ebp - 0x9c0]
lea esi, [eax + edx*8]
mov dword [esi + 4], ecx
mov byte [esi], 1
mov edx, dword [esi + 0x2c]
sub edx, dword [esi + 0x28]
mov dword [ebp - 0x93c], ebx
sar edx, 2
test edx, edx
je 0x44c611
lea ebx, [ebx]
mov edi, dword [ebp - 0x93c]
mov eax, dword [esi + 0x28]
mov edx, dword [ebp - 0x994]
add edi, edi
add edi, edi
mov eax, dword [edi + eax]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4 + 4]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sub esp, 0x1c
mov dword [ebp - 0x938], ecx
mov ecx, dword [esi + 4]
mov eax, esp
mov dword [ebp - 0xa74], esp
push ecx
push eax
call fcn.004029ff
sub esp, 0x14
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xaa4], esp
jb 0x44c390
mov eax, dword [ecx]
jmp 0x44c392
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 8]
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [esi + 0x38]
mov eax, dword [eax + edi]
mov edx, dword [ebp - 0x970]
lea ecx, [eax*8]
sub ecx, eax
sub esp, 0x1c
lea eax, [edx + ecx*4]
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x8d
mov dword [ebp - 0xa70], esp
jb 0x44c3db
mov edx, dword [ecx]
jmp 0x44c3dd
mov edx, ecx
push 0xffffffffffffffff
push ebx
push eax
mov byte [edx], bl
call fcn.00401afa
lea eax, [ebp - 0x328]
push eax
mov byte [ebp - 4], 0x18
call fcn.00401d75
add esp, 0x58
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x8e
call fcn.004015c3
cmp dword [ebp - 0x314], 0x10
mov byte [ebp - 4], 0x18
jb 0x44c424
mov ecx, dword [ebp - 0x328]
push ecx
call fcn.00453509
add esp, 4
mov ecx, dword [ebp - 0x994]
mov dword [ebp - 0x314], 0xf
mov dword [ebp - 0x318], ebx
mov byte [ebp - 0x328], bl
mov edx, dword [esi + 0x28]
mov eax, dword [edi + edx]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4 + 4]
lea ecx, [ecx + eax*4 + 4]
mov eax, dword [ecx + 4]
push eax
push edx
lea edx, [ebp - 0xa9c]
push edx
call fcn.00402239
mov eax, dword [esi + 0x28]
mov eax, dword [edi + eax]
mov edx, dword [ebp - 0x994]
lea ecx, [eax + eax*4]
lea eax, [edx + ecx*4 + 4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa70], esp
jb 0x44c495
mov eax, dword [ecx]
jmp 0x44c497
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x48]
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [esi + 0x28]
mov eax, dword [eax + edi]
mov ecx, dword [ebp - 0x994]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
lea eax, [ecx + eax*4]
push edx
call fcn.00402284
mov eax, dword [esi + 0x28]
mov eax, dword [edi + eax]
mov edx, dword [ebp - 0x994]
lea ecx, [eax + eax*4]
mov eax, dword [edx + ecx*4 + 8]
sub eax, dword [edx + ecx*4 + 4]
lea ecx, [edx + ecx*4 + 4]
add esp, 0x24
cmp eax, dword [ebp - 0x938]
jge 0x44c522
mov ecx, dword [ebp - 0x938]
sub ecx, eax
mov dword [ebp - 0x938], ecx
mov ecx, dword [esi + 0x28]
lea eax, [ebp - 0x949]
push eax
mov eax, dword [edi + ecx]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x994]
lea ecx, [eax + edx*4 + 4]
mov byte [ebp - 0x949], 0x90
call fcn.00401311
dec dword [ebp - 0x938]
jne 0x44c4f4
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
mov eax, dword [ebp - 0x93c]
inc eax
sar ecx, 2
mov dword [ebp - 0x93c], eax
cmp eax, ecx
jb 0x44c330
jmp 0x44c611
mov dword [ebp - 0xb24], ebx
mov dword [ebp - 0xb20], ebx
mov dword [ebp - 0xb1c], ebx
mov eax, dword [ebp - 0x9c0]
lea ecx, [ebp - 0xb28]
push ecx
lea ecx, [ebp - 0x994]
mov byte [ebp - 4], 0x8f
mov dword [ebp - 0xb28], eax
call fcn.00402243
mov esi, dword [ebp - 0x994]
mov ecx, dword [ebp - 0x990]
sub ecx, esi
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*4]
lea esi, [esi + edx*4 - 0x10]
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
mov dword [ebp - 0xa70], esp
cmp dword [ecx + 0x14], edi
jb 0x44c5be
mov eax, dword [ecx]
jmp 0x44c5c0
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [ebp - 0x2c]
push eax
call fcn.00401afa
mov ecx, dword [ebp - 0x9c0]
push ecx
call fcn.00402284
mov edx, dword [esi + 4]
sub edx, dword [esi]
mov eax, dword [ebp - 0xb24]
add dword [ebp - 0x9c0], edx
add esp, 0x24
mov byte [ebp - 4], 0x18
cmp eax, ebx
je 0x44c5ff
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0xb24], ebx
mov dword [ebp - 0xb20], ebx
mov dword [ebp - 0xb1c], ebx
mov eax, dword [ebp - 0x948]
inc eax
mov dword [ebp - 0x948], eax
cmp eax, dword [ebp - 0x930]
jb 0x44b861
mov edi, dword [ebp - 0xa10]
sub edi, dword [ebp - 0xa14]
xor esi, esi
sar edi, 3
mov byte [ebp - 0x92c], 1
cmp edi, ebx
jbe 0x44c67a
jmp 0x44c650
mov eax, dword [ebp - 0xa14]
mov ecx, dword [eax + esi*8 + 4]
lea edx, [ebp - 0xad4]
push edx
mov edx, dword [eax + esi*8]
mov eax, dword [ebp - 0x944]
push 0x40
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
inc esi
cmp esi, edi
jb 0x44c650
mov ecx, dword [ebp - 0x990]
mov esi, dword [ebp - 0x994]
sub ecx, esi
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x44c781
add esi, 4
mov dword [ebp - 0xa28], eax
mov edx, dword [esi + 4]
sub edx, dword [esi]
mov eax, dword [esi - 4]
lea ecx, [ebp - 0xad4]
push ecx
mov ecx, dword [ebp - 0x944]
push 0x40
push edx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov eax, dword [esi + 4]
sub eax, dword [esi]
push eax
call fcn.004544b1
mov edx, dword [esi + 4]
mov edi, eax
add esp, 4
xor eax, eax
sub edx, dword [esi]
je 0x44c6f3
mov ecx, dword [esi]
mov dl, byte [eax + ecx]
mov byte [edi + eax], dl
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
inc eax
cmp eax, ecx
jb 0x44c6e1
mov eax, dword [esi + 4]
sub eax, dword [esi]
mov ecx, dword [ebp - 0x944]
lea edx, [ebp - 0xb04]
push edx
push eax
mov eax, dword [esi - 4]
push edi
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
push edi
setne byte [ebp - 0x931]
call fcn.004544a6
mov eax, dword [ebp - 0xad4]
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
add esp, 4
lea edx, [ebp - 0xb04]
push edx
mov edx, dword [esi - 4]
push eax
mov eax, dword [ebp - 0x944]
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
cmp byte [ebp - 0x931], bl
jne 0x44c757
mov byte [ebp - 0x92c], bl
add esi, 0x14
dec dword [ebp - 0xa28]
jne 0x44c6a8
cmp byte [ebp - 0x92c], bl
jne 0x44c781
push ebx
push ebx
push str.Not_all_instructions_could_be_injected
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44ceae
mov esi, dword [ebp - 0xaa8]
mov edx, dword [esi + 4]
sub edx, dword [esi]
mov ecx, dword [ebp - 0xa20]
mov edi, dword [ebp - 0xa24]
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
sub ecx, edi
shr eax, 0x1f
sar ecx, 2
add eax, edx
cmp ecx, eax
jne 0x44c7ec
or esi, 0xffffffff
xor eax, eax
cmp ecx, ebx
jbe 0x44c7d2
mov edx, dword [ebp - 0xaa8]
mov edx, dword [edx]
cmp dword [edx], esi
jae 0x44c7ca
mov esi, dword [edi + eax*4]
inc eax
add edx, 0x24
cmp eax, ecx
jb 0x44c7c3
mov eax, dword [ebp - 0x944]
push 0x8000
push ebx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov esi, dword [ebp - 0xaa8]
mov ecx, esi
call fcn.004023c9
cmp dword [ebp - 0x950], ebx
jbe 0x44c822
mov esi, dword [ebp - 0x980]
mov edi, dword [ebp - 0x950]
jmp 0x44c810
mov ecx, dword [ebp - 0xaa8]
push esi
call fcn.00402234
add esi, 0x24
dec edi
jne 0x44c810
mov ecx, dword [ebp - 0x9fc]
mov esi, dword [ebp - 0xa00]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x44c888
mov edi, eax
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44c866
mov eax, dword [ecx]
jmp 0x44c868
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov ecx, dword [ebp - 0x944]
push ecx
call fcn.004028fb
add esp, 0x20
add esi, 0x1c
dec edi
jne 0x44c847
mov eax, dword [ebp - 0xa78]
cmp eax, ebx
jbe 0x44cb4d
mov esi, dword [ebp - 0x9e0]
mov dword [ebp - 0xa28], eax
mov dword [ebp - 0x938], ebx
cmp dword [ebp - 0x950], ebx
jbe 0x44c948
mov edi, dword [ebp - 0x980]
add edi, 4
lea ecx, [ecx]
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44c8df
mov eax, dword [ecx]
jmp 0x44c8e1
mov eax, ecx
push 0xffffffffffffffff
push ebx
push edi
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x90
mov dword [ebp - 0xa70], esp
jb 0x44c90f
mov eax, dword [ecx]
jmp 0x44c911
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, bl
jne 0x44c9a6
mov eax, dword [ebp - 0x938]
inc eax
add edi, 0x24
mov dword [ebp - 0x938], eax
cmp eax, dword [ebp - 0x950]
jb 0x44c8c0
mov ecx, dword [ebp - 0x95c]
sub ecx, dword [ebp - 0x960]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x44cb3e
mov edi, dword [ebp - 0x960]
add edi, 4
mov dword [ebp - 0xa78], eax
lea ebx, [ebx]
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44ca49
mov eax, dword [ecx]
jmp 0x44ca4b
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44c9c5
mov eax, dword [ecx]
jmp 0x44c9c7
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov edi, dword [ebp - 0x944]
push edi
call fcn.004028fb
add esp, 4
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44c9fd
mov eax, dword [ecx]
jmp 0x44c9ff
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [ebp - 0x938]
lea edx, [eax + eax*8]
mov eax, dword [ebp - 0x980]
sub esp, 0x1c
lea eax, [eax + edx*4]
mov edx, dword [eax]
mov ecx, esp
mov dword [ebp - 0xa70], esp
push edx
push ecx
mov byte [ebp - 4], 0x91
call fcn.004029ff
add esp, 8
push edi
mov byte [ebp - 4], 0x18
call fcn.00401e8d
add esp, 0x3c
jmp 0x44cb3e
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
push ebx
lea eax, [edi + 4]
push eax
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x92
mov dword [ebp - 0xa70], esp
jb 0x44ca7c
mov eax, dword [ecx]
jmp 0x44ca7e
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, bl
je 0x44cb2f
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44cabc
mov eax, dword [ecx]
jmp 0x44cabe
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov ecx, dword [ebp - 0x944]
push ecx
call fcn.004028fb
add esp, 4
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44caf4
mov eax, dword [ecx]
jmp 0x44caf6
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [edi]
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0xa70], esp
push eax
push edx
mov byte [ebp - 4], 0x93
call fcn.004029ff
mov ecx, dword [ebp - 0x944]
add esp, 8
push ecx
mov byte [ebp - 4], 0x18
call fcn.00401e8d
add esp, 0x3c
add edi, 0x48
dec dword [ebp - 0xa78]
jne 0x44c980
add esi, 0x1c
dec dword [ebp - 0xa28]
jne 0x44c8a2
mov eax, dword [ebp - 0x940]
cmp eax, ebx
jbe 0x44ceae
mov edx, dword [ebp - 0x9f0]
mov dword [ebp - 0x948], edx
mov dword [ebp - 0x940], eax
lea ecx, [ecx]
lea eax, [ebp - 0x984]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44cb96
mov eax, dword [ecx]
jmp 0x44cb98
mov eax, ecx
mov edx, dword [ebp - 0x948]
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [ebp - 0x944]
push eax
call fcn.004010aa
add esp, 0x24
mov byte [ebp - 0x931], al
cmp al, bl
jne 0x44ce5f
mov ecx, dword [ebp - 0x95c]
sub ecx, dword [ebp - 0x960]
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov esi, edx
shr esi, 0x1f
xor edi, edi
add esi, edx
je 0x44cc88
mov ecx, dword [ebp - 0x960]
add ecx, 8
mov dword [ebp - 0x93c], ecx
lea ebx, [ebx]
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44cc1f
mov eax, dword [ecx]
jmp 0x44cc21
mov eax, ecx
mov edx, dword [ebp - 0x948]
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x94
mov dword [ebp - 0xa70], esp
jb 0x44cc55
mov eax, dword [ecx]
jmp 0x44cc57
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
mov eax, dword [ebp - 0x93c]
push ebx
push eax
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, bl
jne 0x44ccbf
add dword [ebp - 0x93c], 0x48
inc edi
cmp edi, esi
jb 0x44cc00
xor edi, edi
cmp dword [ebp - 0x950], ebx
jbe 0x44cd3a
mov esi, dword [ebp - 0x980]
add esi, 4
nop
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44ccd7
mov eax, dword [ecx]
jmp 0x44ccd9
mov edx, dword [ebp - 0x960]
lea ecx, [edi + edi*8]
mov eax, dword [edx + ecx*8 + 4]
mov dword [ebp - 0x984], eax
jmp 0x44ce5f
mov eax, ecx
mov edx, dword [ebp - 0x948]
push 0xffffffffffffffff
push ebx
push edx
mov byte [eax], bl
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x95
mov dword [ebp - 0xa70], esp
jb 0x44cd0d
mov eax, dword [ecx]
jmp 0x44cd0f
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, bl
jne 0x44cd86
inc edi
add esi, 0x24
cmp edi, dword [ebp - 0x950]
jb 0x44cca0
mov ecx, dword [ebp - 0x9a4]
mov esi, dword [ebp - 0x9a8]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov edi, edx
shr edi, 0x1f
add edi, edx
mov dword [ebp - 0x938], ebx
je 0x44ce9b
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44cd9d
mov eax, dword [ecx]
jmp 0x44cd9f
mov ecx, dword [ebp - 0x980]
lea eax, [edi + edi*8]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x984], edx
jmp 0x44ce5f
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], bl
mov eax, dword [ebp - 0x948]
push ebx
push eax
call fcn.00401afa
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov byte [ebp - 4], 0x96
mov dword [ebp - 0xa70], esp
jb 0x44cdd3
mov eax, dword [ecx]
jmp 0x44cdd5
mov eax, ecx
push 0xffffffffffffffff
push ebx
push esi
mov byte [eax], bl
call fcn.00401afa
mov byte [ebp - 4], 0x18
call fcn.00401e6f
add esp, 0x38
cmp al, bl
je 0x44ce3f
lea ecx, [ebp - 0x984]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0xa9c], esp
jb 0x44ce16
mov eax, dword [ecx]
jmp 0x44ce18
mov eax, ecx
push 0xffffffffffffffff
push ebx
lea edx, [esi + 0x1c]
push edx
mov byte [eax], bl
call fcn.00401afa
mov eax, dword [ebp - 0x944]
push eax
call fcn.004010aa
add esp, 0x24
mov byte [ebp - 0x931], al
cmp al, bl
jne 0x44ce5f
mov eax, dword [ebp - 0x938]
inc eax
add esi, 0x38
mov dword [ebp - 0x938], eax
cmp eax, edi
jb 0x44cd67
cmp byte [ebp - 0x931], bl
je 0x44ce9b
mov edx, dword [ebp - 0x984]
mov eax, dword [ebp - 0x944]
lea ecx, [ebp - 0xb40]
push ecx
push ebx
push ebx
push edx
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test eax, eax
setne al
mov byte [ebp - 0x92c], al
cmp al, bl
jne 0x44ce9b
push ebx
push ebx
push str.CreateThread
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
add dword [ebp - 0x948], 0x1c
dec dword [ebp - 0x940]
jne 0x44cb70
mov eax, dword [ebp - 0x9b8]
cmp eax, ebx
je 0x44cec1
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x9b8], ebx
mov dword [ebp - 0x9b4], ebx
mov dword [ebp - 0x9b0], ebx
call fcn.0040257c
mov edi, 0x10
cmp dword [ebp - 0x6c], edi
jb 0x44cef4
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.00453509
add esp, 4
mov esi, 0xf
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov byte [ebp - 0x80], bl
call fcn.00401cad
lea ecx, [ebp - 0xa6c]
call fcn.00401cad
lea ecx, [ebp - 0x970]
call fcn.00401cad
cmp dword [ebp - 0x88], edi
jb 0x44cf3a
mov edx, dword [ebp - 0x9c]
push edx
call fcn.00453509
add esp, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x8c], ebx
mov byte [ebp - 0x9c], bl
cmp dword [ebp - 0x50], edi
jb 0x44cf5d
mov eax, dword [ebp - 0x64]
push eax
call fcn.00453509
add esp, 4
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], ebx
mov byte [ebp - 0x64], bl
cmp dword [ebp - 0x34], edi
jb 0x44cf77
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x48], bl
call fcn.00401cad
lea ecx, [ebp - 0xa00]
call fcn.00401cad
lea ecx, [ebp - 0x9e0]
call fcn.00401cad
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x44cfb4
push eax
call fcn.00453509
add esp, 4
mov eax, dword [ebp - 0xa14]
cmp eax, ebx
je 0x44cfc7
push eax
call fcn.00453509
add esp, 4
lea ecx, [ebp - 0x9a8]
call fcn.004015f0
lea ecx, [ebp - 0x960]
call fcn.0040150a
lea ecx, [ebp - 0xa58]
call fcn.0040186b
lea ecx, [ebp - 0x980]
call fcn.0040186b
lea ecx, [ebp - 0x9d0]
call fcn.0040186b
lea ecx, [ebp - 0xa38]
call fcn.00401a6e
lea ecx, [ebp - 0x994]
call fcn.00401f9b
cmp dword [ebp - 0x18], edi
jb 0x44d025
mov edx, dword [ebp - 0x2c]
push edx
call fcn.00453509
add esp, 4
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401cad
mov al, byte [ebp - 0x92c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044fef1
mov esp, ebp
pop ebp
ret