Function at 0x401b70
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4f0
mov eax, dword [0x42c2e4]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
push edi
mov dword [ebp - 4], 0
mov esi, 0x44e8a0
call fcn.0040498d
test eax, eax
je 0x401f35
cmp dword [0x44ff2c], 6
je 0x401bb4
cmp dword [0x44ff2c], 7
jne 0x401e52
mov eax, dword [0x428720]
mov dword [ebp - 0x288], eax
mov ecx, dword [0x428724]
mov dword [ebp - 0x284], ecx
mov edx, dword [0x428728]
mov dword [ebp - 0x280], edx
mov ax, word [0x42872c]
mov word [ebp - 0x27c], ax
push 0x72
push 0
lea ecx, [ebp - 0x27a]
push ecx
call fcn.00414530
add esp, 0xc
mov edx, dword [0x428730]
mov dword [ebp - 0x208], edx
mov eax, dword [0x428734]
mov dword [ebp - 0x204], eax
mov ecx, dword [0x428738]
mov dword [ebp - 0x200], ecx
mov dx, word [0x42873c]
mov word [ebp - 0x1fc], dx
push 0x72
push 0
lea eax, [ebp - 0x1fa]
push eax
call fcn.00414530
add esp, 0xc
mov ecx, dword [0x428740]
mov dword [ebp - 0x188], ecx
mov edx, dword [0x428744]
mov dword [ebp - 0x184], edx
mov eax, dword [0x428748]
mov dword [ebp - 0x180], eax
mov cx, word [0x42874c]
mov word [ebp - 0x17c], cx
push 0x72
push 0
lea edx, [ebp - 0x17a]
push edx
call fcn.00414530
add esp, 0xc
mov eax, dword [0x428750]
mov dword [ebp - 0x108], eax
mov ecx, dword [0x428754]
mov dword [ebp - 0x104], ecx
mov edx, dword [0x428758]
mov dword [ebp - 0x100], edx
mov eax, dword [0x42875c]
mov dword [ebp - 0xfc], eax
push 0x70
push 0
lea ecx, [ebp - 0xf8]
push ecx
call fcn.00414530
add esp, 0xc
mov edx, dword [0x428760]
mov dword [ebp - 0x88], edx
mov eax, dword [0x428764]
mov dword [ebp - 0x84], eax
mov ecx, dword [0x428768]
mov dword [ebp - 0x80], ecx
mov edx, dword [0x42876c]
mov dword [ebp - 0x7c], edx
mov ax, word [0x428770]
mov word [ebp - 0x78], ax
push 0x6e
push 0
lea ecx, [ebp - 0x76]
push ecx
call fcn.00414530
add esp, 0xc
mov dword [ebp - 0x28c], 0
jmp 0x401d1e
mov edx, dword [ebp - 0x28c]
add edx, 1
mov dword [ebp - 0x28c], edx
cmp dword [ebp - 0x28c], 5
jge 0x401e4d
mov eax, dword [ebp - 0x28c]
shl eax, 7
lea ecx, [ebp + eax - 0x288]
push ecx
mov ecx, 0x44e8a0
call fcn.00404b75
test eax, eax
je 0x401e48
mov edx, dword [ebp - 0x28c]
shl edx, 7
lea eax, [ebp + edx - 0x288]
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4b0], 0x44e768
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4b4], ecx
mov edx, dword [ebp - 0x4ac]
mov ax, word [edx]
mov word [ebp - 0x4b6], ax
mov ecx, dword [ebp - 0x4b0]
mov dx, word [ebp - 0x4b6]
mov word [ecx], dx
mov eax, dword [ebp - 0x4ac]
add eax, 2
mov dword [ebp - 0x4ac], eax
mov ecx, dword [ebp - 0x4b0]
add ecx, 2
mov dword [ebp - 0x4b0], ecx
cmp word [ebp - 0x4b6], 0
jne 0x401d7a
mov dword [0x42d5d8], 6
mov dword [ebp - 0x4bc], 0x44ff34
mov dword [ebp - 0x4c0], 0x44e6e8
mov edx, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4bc]
mov cx, word [eax]
mov word [ebp - 0x4c6], cx
mov edx, dword [ebp - 0x4c0]
mov ax, word [ebp - 0x4c6]
mov word [edx], ax
mov ecx, dword [ebp - 0x4bc]
add ecx, 2
mov dword [ebp - 0x4bc], ecx
mov edx, dword [ebp - 0x4c0]
add edx, 2
mov dword [ebp - 0x4c0], edx
cmp word [ebp - 0x4c6], 0
jne 0x401dec
mov eax, dword [ebp - 0x28c]
mov dword [0x42d5dc], eax
mov dword [ebp - 4], 1
jmp 0x401e4d
jmp 0x401d0f
jmp 0x401f35
mov ecx, dword [0x44ff2c]
mov dword [0x42d5d8], ecx
mov dword [ebp - 0x4cc], 0x44ff34
mov dword [ebp - 0x4d0], 0x44e6e8
mov edx, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4cc]
mov cx, word [eax]
mov word [ebp - 0x4d6], cx
mov edx, dword [ebp - 0x4d0]
mov ax, word [ebp - 0x4d6]
mov word [edx], ax
mov ecx, dword [ebp - 0x4cc]
add ecx, 2
mov dword [ebp - 0x4cc], ecx
mov edx, dword [ebp - 0x4d0]
add edx, 2
mov dword [ebp - 0x4d0], edx
cmp word [ebp - 0x4d6], 0
jne 0x401e7e
mov dword [ebp - 0x4dc], 0x44ffb8
mov dword [ebp - 0x4e0], 0x44e768
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4dc]
mov dx, word [ecx]
mov word [ebp - 0x4e6], dx
mov eax, dword [ebp - 0x4e0]
mov cx, word [ebp - 0x4e6]
mov word [eax], cx
mov edx, dword [ebp - 0x4dc]
add edx, 2
mov dword [ebp - 0x4dc], edx
mov eax, dword [ebp - 0x4e0]
add eax, 2
mov dword [ebp - 0x4e0], eax
cmp word [ebp - 0x4e6], 0
jne 0x401ee6
mov dword [ebp - 4], 1
cmp dword [ebp - 4], 0
jne 0x401f4f
mov dword [0x42d5d8], 0xffffffff
mov dword [0x44e7ec], 0
cmp dword [0x44e6e4], 3
jne 0x401f6a
cmp dword [0x42d5d8], 0
jl 0x401f6a
cmp dword [0x42d5d8], 6
jl 0x401f80
cmp dword [0x42d5d8], 0xc
je 0x401f80
cmp dword [0x42d5d8], 0xd
jne 0x4021c6
cmp dword [0x44e7ec], 0
jne 0x4021c4
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x290], 0
xor ecx, ecx
mov word [ebp - 0x4a0], cx
push 0x206
push 0
lea edx, [ebp - 0x49e]
push edx
call fcn.00414530
add esp, 0xc
lea edi, [ebp - 0x4a0]
call fcn.00406716
lea eax, [ebp - 0x4a0]
add eax, 0xfffffffe
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x4ec]
mov dx, word [ecx + 2]
mov word [ebp - 0x4ee], dx
add dword [ebp - 0x4ec], 2
cmp word [ebp - 0x4ee], 0
jne 0x401fda
mov edi, dword [ebp - 0x4ec]
mov eax, dword [0x428774]
mov dword [edi], eax
mov ecx, dword [0x428778]
mov dword [edi + 4], ecx
mov edx, dword [0x42877c]
mov dword [edi + 8], edx
mov eax, dword [0x428780]
mov dword [edi + 0xc], eax
mov ecx, dword [0x428784]
mov dword [edi + 0x10], ecx
mov edx, dword [0x428788]
mov dword [edi + 0x14], edx
lea eax, [ebp - 0x4a0]
push eax
call dword [0x42413c]
cmp eax, 0xffffffff
jne 0x4020b1
lea ecx, [ebp - 0x298]
push ecx
push 0x42878c
push 0x8c
call fcn.00406770
add esp, 0xc
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x402078
cmp dword [ebp - 0x298], 0xa
jge 0x402082
jmp 0x4021d0
push 0x4287cc
lea edx, [ebp - 0x4a0]
push edx
mov eax, dword [ebp - 0x290]
push eax
mov eax, dword [ebp - 0x298]
call fcn.00406880
add esp, 0xc
test eax, eax
je 0x4020b1
jmp 0x4021d0
call dword [0x424138]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
mov ecx, 0x4500d4
call fcn.00401070
test eax, eax
jne 0x4020d7
jmp 0x4021d0
cmp dword [ebp - 0x290], 0
je 0x4020fb
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x4a8], edx
mov eax, dword [ebp - 0x4a8]
push eax
call fcn.00410a1e
add esp, 4
mov ecx, dword [0x42d5d8]
push ecx
mov ecx, 0x4500d4
call fcn.00401250
cmp dword [0x42d5d8], 0xc
je 0x40211e
cmp dword [0x42d5d8], 0xd
jne 0x402143
mov edx, dword [0x44e6d8]
push edx
mov eax, dword [0x44e6d4]
push eax
mov ecx, dword [0x44e6e0]
push ecx
mov edx, dword [0x44e6dc]
push edx
mov ecx, 0x4500d4
call fcn.004012f0
mov dword [ebp - 0x294], 0
lea eax, [ebp - 0x294]
push eax
push 0x28
call dword [fcn.00424134]
push eax
call dword [0x424008]
test eax, eax
je 0x40217d
push 1
push 0x428814
mov ecx, dword [ebp - 0x294]
push ecx
call fcn.00404ef4
add esp, 0xc
cmp dword [ebp - 0x294], 0
je 0x402193
mov edx, dword [ebp - 0x294]
push edx
call dword [fcn.00424130]
lea eax, [ebp - 0x4a0]
push eax
mov ecx, dword [0x44ff30]
push ecx
call fcn.00404dc0
add esp, 8
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 0
jne 0x4021c4
mov edx, dword [0x44ff30]
mov dword [0x44e7ec], edx
jmp 0x4021d0
mov dword [0x44e7ec], 0
mov eax, dword [ebp - 4]
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00410a29
mov esp, ebp
pop ebp
ret