Function at 0x4b3a23
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66da75
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x74b738]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c0], ecx
mov ebx, dword [ebp + 8]
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b3bc0
push 0x34
push 0x6ea304
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.004ac3c3
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xf0]
push 3
push 0x6d1880
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
call fcn.004ac3c3
mov byte [ebp - 4], 1
call fcn.0058af23
mov edi, eax
lea ecx, [ebp - 0x288]
push 0xd5
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.004adfb3
mov esi, eax
push 0x6ea56c
push esi
mov byte [ebp - 4], 2
call fcn.004ade23
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4b3b62
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3b58
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3b58
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4b3bc0
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3bb6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3bb6
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
add esp, 8
push ebx
lea ecx, [ebp - 0x1d8]
call fcn.0059a7d3
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x108]
push 0x10
xor ebx, ebx
mov dword [ebp - 0xf4], 0xf
push 0x6ea298
mov dword [ebp - 0xf8], ebx
mov byte [ebp - 0x108], bl
call fcn.004ac3c3
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0059bf13
test al, al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xf4]
sete al
mov byte [ebp - 0x199], al
cmp edx, 0x10
jb 0x4b3c64
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3c54
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3c54
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
mov al, byte [ebp - 0x199]
add esp, 8
test al, al
je 0x4b3dcd
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f87
push 0x34
push 0x6ea304
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.004ac3c3
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf0]
push 3
push 0x6d1880
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
call fcn.004ac3c3
mov byte [ebp - 4], 6
call fcn.0058af23
mov edi, eax
lea ecx, [ebp - 0x288]
push 0xdd
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.004adfb3
mov esi, eax
push 0x6ea58c
push esi
mov byte [ebp - 4], 7
call fcn.004ade23
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4b3d6d
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3d63
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3d63
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
add esp, 8
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp edx, 0x10
jb 0x4b4f87
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3dbe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3dbe
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
add esp, 8
jmp 0x4b4f87
push 0x10
push 0x6ea298
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.004ac3c3
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0059be53
test al, al
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xf4]
sete al
mov byte [ebp - 0x199], al
cmp edx, 0x10
jb 0x4b3e61
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3e51
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3e51
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
mov al, byte [ebp - 0x199]
add esp, 8
test al, al
je 0x4b3f6c
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f87
push 0x34
push 0x6ea304
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], al
call fcn.004ac3c3
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf0]
push 3
push 0x6d1880
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0xa
call fcn.0058af23
mov edi, eax
lea ecx, [ebp - 0x288]
push 0xe2
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.004adfb3
mov esi, eax
push 0x6ea5b4
push esi
mov byte [ebp - 4], 0xb
call fcn.004ade23
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
mov edx, dword [ebp - 0xdc]
cmp edx, 0x10
jb 0x4b3d6d
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3d63
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3d63
call dword [0x6815b4]
push 0x10
push 0x6ea298
lea ecx, [ebp - 0x108]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
call fcn.004ac3c3
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0059bdf3
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xf4]
cmp edx, 0x10
jb 0x4b3ff6
mov ecx, dword [ebp - 0x108]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b3fec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b3fec
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
add esp, 8
push 0
push 0x6d18c8
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1f0]
call fcn.0059ad83
mov byte [ebp - 4], 0xe
mov edi, eax
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x1a4], edi
cmp edx, 0x10
jb 0x4b409c
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b4092
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4b4092
call dword [0x6815b4]
push edx
push ecx
call 0x6eb88c
add esp, 8
xor esi, esi
mov dword [ebp - 0x1a0], esi
test edi, edi
je 0x4b4f77
nop dword [eax]
push esi
lea ecx, [ebp - 0x1f0]
call fcn.0059ab83
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059a8e3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xc0]
push 0
push 0x6d18c8
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bef3
test al, al
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xac]
sete bl
cmp edx, 0x10
jb 0x4b4155
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b414b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
test bl, bl
je 0x4b4439
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f59
push 0x34
push 0x6ea304
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], al
call fcn.004ac3c3
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xd8]
push 3
push 0x6d1880
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x13
call fcn.0058af23
push 1
push 2
lea ecx, [ebp - 0x288]
mov ebx, eax
call fcn.004a9693
push 0xffffffffffffffff
push 0x6d18d8
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x14
call fcn.004aaad3
push 0xffffffffffffffff
push 0x6d18dc
lea ecx, [ebp - 0xc0]
mov edi, eax
call fcn.004aaad3
push 0x64
mov esi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call 0x6ed417
add esp, 0xc
cmp esi, 0xffffffff
je 0x4b4319
lea eax, [esi - 1]
cmp edi, eax
jae 0x4b4319
mov eax, dword [ebp - 0xb0]
lea edx, [edi + 1]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
cmp eax, edx
jb 0x4b4fb2
sub esi, edi
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xac], 0x10
lea eax, [ebp - 0xc0]
cmovae eax, dword [ebp - 0xc0]
push ecx
add eax, edx
lea ecx, [ebp - 0x120]
push eax
call fcn.004ac3c3
cmp dword [ebp - 0x10c], 0x10
lea eax, [ebp - 0x120]
cmovae eax, dword [ebp - 0x120]
push eax
push 0xee
lea eax, [ebp - 0x74]
push 0x6d18f8
push eax
call fcn.004aadb3
mov edx, dword [ebp - 0x10c]
add esp, 0x10
cmp edx, 0x10
jb 0x4b42fc
mov ecx, dword [ebp - 0x120]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b42f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
jmp 0x4b432f
push 0xee
lea eax, [ebp - 0x74]
push 0x6d1904
push eax
call fcn.004aadb3
add esp, 0xc
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
cmovae eax, dword [ebp - 0xd8]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.004ade23
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.004ade23
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x15
push 0x6ea5e8
push eax
call fcn.004ade23
mov eax, dword [ebx]
lea ecx, [ebp - 0x288]
add esp, 0x18
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0xc4]
cmp edx, 0x10
jb 0x4b43cf
mov ecx, dword [ebp - 0xd8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b43c5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
cmp edx, 0x10
jb 0x4b4428
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b441e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
mov edi, dword [ebp - 0x1a4]
mov esi, dword [ebp - 0x1a0]
jmp 0x4b4f59
push 0xd
push 0x6ea2ac
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bf13
test al, al
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xac]
sete bl
cmp edx, 0x10
jb 0x4b44bf
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b44b5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
test bl, bl
je 0x4b4772
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f59
push 0x34
push 0x6ea304
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], al
call fcn.004ac3c3
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc0]
push 3
push 0x6d1880
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x18
call fcn.0058af23
push 1
push 2
lea ecx, [ebp - 0x288]
mov ebx, eax
call fcn.004a9693
push 0xffffffffffffffff
push 0x6d18d8
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x19
call fcn.004aaad3
push 0xffffffffffffffff
push 0x6d18dc
lea ecx, [ebp - 0xd8]
mov edi, eax
call fcn.004aaad3
push 0x64
mov esi, eax
lea eax, [ebp - 0x74]
push 0
push eax
call 0x6ed417
add esp, 0xc
cmp esi, 0xffffffff
je 0x4b4683
lea eax, [esi - 1]
cmp edi, eax
jae 0x4b4683
mov eax, dword [ebp - 0xc8]
lea edx, [edi + 1]
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
cmp eax, edx
jb 0x4b4fb2
sub esi, edi
sub eax, edx
lea ecx, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
cmovae eax, dword [ebp - 0xd8]
push ecx
add eax, edx
lea ecx, [ebp - 0xf0]
push eax
call fcn.004ac3c3
cmp dword [ebp - 0xdc], 0x10
lea eax, [ebp - 0xf0]
cmovae eax, dword [ebp - 0xf0]
push eax
push 0xf2
lea eax, [ebp - 0x74]
push 0x6d18f8
push eax
call fcn.004aadb3
mov edx, dword [ebp - 0xdc]
add esp, 0x10
cmp edx, 0x10
jb 0x4b4666
mov ecx, dword [ebp - 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b465c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
jmp 0x4b4699
push 0xf2
lea eax, [ebp - 0x74]
push 0x6d1904
push eax
call fcn.004aadb3
add esp, 0xc
cmp dword [ebp - 0xac], 0x10
lea eax, [ebp - 0xc0]
cmovae eax, dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.004ade23
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.004ade23
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x1a
push 0x6ea628
push eax
call fcn.004ade23
mov eax, dword [ebx]
lea ecx, [ebp - 0x288]
add esp, 0x18
push ecx
mov ecx, ebx
call dword [eax + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0xac]
cmp edx, 0x10
jb 0x4b4739
mov ecx, dword [ebp - 0xc0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4b472f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b3b52
push edx
push ecx
call 0x6eb88c
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
cmp edx, 0x10
jb 0x4b4428
mov ecx, dword [ebp - 0xd8]
jmp 0x4b43ff
push 3
push 0x6ea2bc
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bf13
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x10
mov bl, al
call fcn.004ac6f3
test bl, bl
jne 0x4b48b9
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f59
push 0x34
push 0x6ea304
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], al
call fcn.004ac3c3
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xc0]
push 3
push 0x6d1880
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], bl
call fcn.004ac3c3
mov byte [ebp - 4], 0x1d
call fcn.0058af23
mov edi, eax
lea ecx, [ebp - 0x288]
push 0xf6
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.004adfb3
mov esi, eax
push 0x6ea66c
push esi
mov byte [ebp - 4], 0x1e
call fcn.004ade23
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
lea ecx, [ebp - 0xc0]
call fcn.004ac6f3
lea ecx, [ebp - 0xd8]
call fcn.004ac6f3
mov esi, dword [ebp - 0x1a0]
mov edi, dword [ebp - 0x1a4]
jmp 0x4b4f59
push 3
push 0x6ea250
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bf13
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x10
mov bl, al
call fcn.004ac6f3
test bl, bl
jne 0x4b4a00
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f59
push 0x34
push 0x6ea304
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], al
call fcn.004ac3c3
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xc0]
push 3
push 0x6d1880
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], bl
call fcn.004ac3c3
mov byte [ebp - 4], 0x21
call fcn.0058af23
mov edi, eax
lea ecx, [ebp - 0x288]
push 0xfa
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.004adfb3
mov esi, eax
push 0x6ea6a8
push esi
mov byte [ebp - 4], 0x22
call fcn.004ade23
mov edx, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [edx + 0x1c]
lea ecx, [ebp - 0x288]
call fcn.004aa903
lea ecx, [ebp - 0xc0]
call fcn.004ac6f3
lea ecx, [ebp - 0xd8]
call fcn.004ac6f3
mov esi, dword [ebp - 0x1a0]
mov edi, dword [ebp - 0x1a4]
jmp 0x4b4f59
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xd8]
push 0
push 0x6d18c8
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xc0]
push 0xd
push 0x6ea2ac
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bb43
push eax
lea ecx, [ebp - 0x198]
call fcn.004b85d3
lea ecx, [ebp - 0x138]
call fcn.004ac743
lea ecx, [ebp - 0xc0]
call fcn.004ac743
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x23
call fcn.004ac743
push 0
push 0x6d18c8
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xc0]
push 3
push 0x6ea2bc
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bb43
push eax
lea ecx, [ebp - 0x180]
call fcn.004b85d3
lea ecx, [ebp - 0x138]
call fcn.004ac743
lea ecx, [ebp - 0xc0]
call fcn.004ac743
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x23
call fcn.004ac743
push 0
push 0x6d18c8
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xc0]
push 3
push 0x6ea250
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bb43
push eax
lea ecx, [ebp - 0x168]
call fcn.004b85d3
lea ecx, [ebp - 0x138]
call fcn.004ac743
lea ecx, [ebp - 0xc0]
call fcn.004ac743
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x23
call fcn.004ac743
push 7
push 0x6ea2c0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bf13
test al, al
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc0]
sete bl
call fcn.004ac743
push 0
push 0x6d18c8
test bl, bl
je 0x4b4cfb
lea ecx, [ebp - 0x150]
call fcn.004ac3c3
jmp 0x4b4da7
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xc0]
push 7
push 0x6ea2c0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0059bb43
push eax
lea ecx, [ebp - 0x150]
call fcn.004b85d3
lea ecx, [ebp - 0x138]
call fcn.004ac743
lea ecx, [ebp - 0xc0]
call fcn.004ac743
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x23
call fcn.004ac743
call fcn.0058af23
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x4b4f1f
push 0x34
push 0x6ea304
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], al
call fcn.004ac3c3
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xc0]
push 3
push 0x6d1880
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004ac3c3
mov byte [ebp - 4], 0x2e
call fcn.0058af23
mov edi, eax
lea ecx, [ebp - 0xa8]
push 0x107
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.004adfb3
mov esi, eax
push 0x6ea6e4
push esi
mov byte [ebp - 4], 0x2f
call fcn.004ade23
cmp dword [ebp - 0x184], 0x10
lea ecx, [ebp - 0x198]
cmovae ecx, dword [ebp - 0x198]
push ecx
push esi
call fcn.004ade23
push 0x6ea710
push esi
call fcn.004ade23
cmp dword [ebp - 0x16c], 0x10
lea eax, [ebp - 0x180]
cmovae eax, dword [ebp - 0x180]
push eax
push esi
call fcn.004ade23
push 0x6ea718
push esi
call fcn.004ade23
cmp dword [ebp - 0x154], 0x10
lea eax, [ebp - 0x168]
cmovae eax, dword [ebp - 0x168]
push eax
push esi
call fcn.004ade23
push 0x6ea720
push esi
call fcn.004ade23
cmp dword [ebp - 0x13c], 0x10
lea eax, [ebp - 0x150]
cmovae eax, dword [ebp - 0x150]
push eax
push esi
call fcn.004ade23
mov eax, dword [edi]
add esp, 0x40
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0xa8]
call fcn.004aa903
lea ecx, [ebp - 0xc0]
call fcn.004ac743
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x23
call fcn.004ac743
mov esi, dword [ebp - 0x1a0]
mov edi, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x198]
add ecx, 0x304
push eax
mov edx, dword [ecx + 4]
cmp dword [ecx + 8], edx
je 0x4b4f48
call fcn.004ba7c3
add esp, 4
add dword [ecx + 4], 0x60
jmp 0x4b4f4e
push edx
call fcn.004ba893
lea ecx, [ebp - 0x198]
call fcn.004b5013
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0xe
call fcn.00594863
inc esi
mov dword [ebp - 0x1a0], esi
cmp esi, edi
jb 0x4b40b3
lea ecx, [ebp - 0x1f0]
mov ebx, 1
call fcn.00594863
lea ecx, [ebp - 0x1d8]
call fcn.00594863
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call 0x6eb441
mov esp, ebp
pop ebp
ret 4
call fcn.004aac13
int3