Function at 0x46b940
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54be17
mov eax, dword fs:[0]
push eax
mov eax, 0x1ddc
call fcn.00474db0
mov eax, dword [0x673114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x61
lea edi, [ebp - 0x41c]
mov esi, str.x9kplEsdKfjbgv8Us21kubRw37TGhXxjbbypcqK2wuRV3pL0OptFq2Bf3fcodXdJ20AnBZv7Uqb1Hf0h9ppJtdMTy0TGQtQvdTsZrd6udsM23DsmJpMABvICrdJzNBOWfA2IiikYDzVUq0WJ1RdSNMPEZAhOaYRIAV8sfx8VrEcjYEtIYVbCD3KuLLOMM6XYtUxv36kVmoIDkp4kUNeMfDoilhxYGHHGnVWHCgrip7GfJBPx88LkxYRYE0oHaA8WUjtIxlwc41xrC8j9Xc5DJBA1xsInPZSobExcjpYLMGYbKlNsCduVSXO3wlmZGYIelSrclwL0I7Tg7hRIzOeSuaCc0N9xYt1b7Y4NzkA6aNTqKUsSLdFWaAAoKvn6kcWLeqV
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
lea edi, [ebp - 0x154]
mov esi, str.wKSWpubnEndgwiFHtU1O9Dv7QiFkKSq7cchi8O5rIZDcEfScfKk4l7A9JsPoUKzrfKdVOlAMpWnVT6j5LomqtMeY0j3ghJgctkilKa1TdmLH0ewQQNA4egzoVPuIYNAV3cK93OqanaY02jK06yA45ndT1teWUgZ82jFZyd85ogDmAf6ZEQrh3xgTTym0X4EWLQk1qL3bwSAFHBwynk0poYYKinPI8b8zkiDDJ1dIW0c81DrSkLNpjJPVHCbDQYJhAJGD8d6s3lMdyvgzwWnNjKQoXOW1JVgNWsWanlglrBhYayLgydJigLUlsl6PQdo2
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x71
movsb byte es:[edi], byte [esi]
mov esi, str.txzAll3tamueNDwgOYxBRdZerkTu6tMSwvpfEIbBFb1E358WGKhVuP4sUTqhZp5Zof7nimrZcdNpzkFCH2DS4CecxNN6HxIR5Y7AdpXll7WE3HRUJrLNFitAAh9Kdb9cj4fDYUsv8fi0NEqfqNluV1Oc9m0SytGPJwPNo0tHNKIFuzoI2gJXlILg3n6ZnEyW7yO8vwd7Dlskd2sD2vc0T527W6LFbwU5J8uj7opxifwsc1qs8mjdZqB1QYBD7yAatvlnElmOE7BXG4WDmLEggIkqIse4x5aDVDZQZQKgp9lG5JoodbLGgJi97LxxY2YQj7K7b2mqL0kWB8cNPehmNPNe1TNla53m0rTVuwXybfM0maV7kQokC68ZnFTsZiKg602Zgg2PaMVxgdNauJC9SgV6sm1ezhTIP7XMadF9smiRiTaypBJ4XMZN6icmH1gTzTvz
lea edi, [ebp - 0xb28]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6c
movsb byte es:[edi], byte [esi]
mov esi, str.c7O6mnHa5jVGWymzKXJWxqOwDOiRvVOcV3DV9i4MAw0jPhdaNqaVR2eZU9KSVRVu7TK1iwqNcrDwxhwv9s2EVQFD9bLN293XdsQA5R4p641xsl0eXyMbMdzc3OGPHRDnBNz7ZHrUdPslPamuY7sUcelKupKAt0w4U4wmZauuS1RcHEJcBQAVokfvF88zChHJxRMJ7ii3HUr0Lny3NMKYZlvdD5RSXOnoD5QaewlzLup079V1oCSrK3q5cZ5pHtsHjCtiNk2DZImwGhArRaL1fQqTva1TmR12W4a9rK2En8AqXNGSLMlobY6j3Ya1BEdJYaHX1t9teOuwd7K8n3wS11XMXTzzrAEMX8HT9fqL7ehilDZoPd9zrzYEXHMifI7IZkZVmcGELWZLltBXs6SOaq7T2olVUiRFh6GpfOQYPHt9oq78
lea edi, [ebp - 0x5d0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6d
movsb byte es:[edi], byte [esi]
mov esi, str.CtMzeBKfDWpjAbHVuoX8hDzyflMdav2aOooygjSHF0KceMdgbWNe8PwKbV56bPTOURCDr7P3prbbKCyBHVOubazZjTg8INMq0nbibZH33aGntAhm6uAJ4KEdEGtebLq5yMviZy4KgIVGpD2m5kdeWWCDnX4nQPZUWkq5dFZDsNWmYiiW09tXxuLdFr3nYOMyJsrbop9SiwcCkRqFPHkTJ51HphPJ63eD7kCpDmGqKADtqVyZGhbn8KWqT0M6KuSf1OpL3EQohIVLA3wP1rLFuNPgao2z5mxPxta6e8CBu6EtELn4Hc0q81BSVD6xOAyuyoRDKfoqohcUPFQASOZVMTOkoWUWTTbj1bLzdb0fJ4aNhl9BgJy7ijauSXG7RfOBvZh2HXzpH9A6mZc0lw25vXyXiLW61REnmXuAmUkyc2hacjylssa
lea edi, [ebp - 0x784]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x51
lea edi, [ebp - 0x298]
mov esi, str.wM0AL6QeAQqbAlwkNM33kYb2HixIXGGuciSQOzywOVhs5umnTWRiW9xYPaVq69sl6ZY4XKyv91UNJfONtL4Vk3IbtTeIipUsnivqcH28bAGgznwObYZnUtPC6QzX3HkQtVJPr87aIBbWtFb8YYCx2bYaVrqaB4yS3qFgPSY1Uxo8C77JSyVBk3hG0Euv69jFWLh7kj3KGeKxlawypGozZVkE2m9JIXYCcW0nBIcu0bjQTFc6Iimp0thHSGTxCiRDouz2LCT1qpg3wTdzxgjiR7o80zv4z7sBvXtwWZymX7itgUWsGN10dW04XD036b3jEpf
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x65
lea edi, [ebp - 0x149c]
mov esi, str.IY4zBvaZyd1ekfEIhXdP8WTgH8SZiyAV58zIcMMTgJwnXLCfr0lqDKEcZldKPtyztAq0aVlMTCQITCMMJ6TU0fnOuyXLajsaixYXD4zQ0JRhugSfWcNXgA8ASSwbKPttVvGIOvIXufpbkQ1M4FjiNibZBjgRlB30QlCCG9QrUHfJVZfNH8rSRpcEO3HtAIEf7AEAQeE92a6T4TP79XmGbWgFX9bm6cfXndcCqWh2IemqVl6qnoGvZ4M9q4Fd0fxh2yXlX0zxIAgUWmH31Lfk0EbqMGz2ZuFbMqkSHFJjJjhZghzifpsXPNfucYEw7d7OLART2UquM7jf73PWsAMAjfxNLjGgPkFv1eV9xe3B5BVK7AOxq77Kilp5eiFLWvDEHe2fWbsLOUKGMljtFB1Ni
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5f
movsw word es:[edi], word [esi]
mov esi, str.kACzxOfibQNzIu7CfOkdZN5TwmdaKfnSmljrk7mZ22P7N6muj3B5YDQHq8idlFZqdVKOtyMNKPSoM0F20B5e73hmxQWDLuHfvA2zKr6HJWzxGvvJ8Bzrw7XgfKoZGeDIsT4hRdg9kB3jAnib2OQ5xqwjBo1KYqJsdveeYYdIf3b79wTBaXOmod6IXbw0khChgDx8ktqN0PAzXbIcA6l1qivFvNT840IOP5E77BQrtMLmtaAiWl2fnoXMPgFdkTZKCEZQZV4laUCCwjsocxftb6qKYw8j4PpskLxBJvIRMaPjgF9B3OPzH0TGOyx9xX2YnTbU3q9QH75H6phWbg8Yvn2g5visbVwVb7b3nloVdLaDt29R0vieFvnRNpfD
lea edi, [ebp - 0x1170]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x64
movsb byte es:[edi], byte [esi]
mov esi, str.AsIqyHmDsyaUQ0YiZwHLXwZxq1cqIed8HhyE9ENb2d6IMtVYxFhUya3B6CqxoBI5FaDgiaWC09iCP35xUr3fTiPaL83CCZYaNrLqAR9e9ApXZHQ8OLlY5vzKT5YHXM51J3KFE0hT23CjlF15llergoBdqi4VY4zZei3yoTIHXsZ7NtdJ2BKLwFv44fogGv5edXR6wCr2nUVGMWXs5U5qBgYT0YcaPODv4cUijbZTNqNaNeFWNYmKsn9sQgxazLiRODGfmUENHsLbUV0Fv3UkzBfTyZCvCzFFXAz6KGLWm50q4RLnyVKg5LaGshBJ1IULrJkRSZtJLSPVc1c3icjICN3ArYO4WzlT0y8gwL7pleFskdxh5dDSOHxQHqB8kEiPNKePH1LODa2Y7TKy
lea edi, [ebp - 0x1304]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x79
movsb byte es:[edi], byte [esi]
mov esi, str.c1zCO1RLFqQES5yNggPGHcKRkJDCXNG7TU144CtDwdTg2TVXp1uUGBU0X3NILcOxV3Ftxz3eTbx3pgw6AbU296Ilzdumg2lMGxIWfWnYSSKMUMtl5nazLP8itISCoPxRa45BlVRb6tvI3gPmORVBAGaWyQKRB8IzbX2FJHmxhnekWbQriwPkGU1zL8iCC6XmO3LyrNMcdS5umgnPNaGjfAvroLGCLVoQrwkedaZk8foFpqEOyZqf5icAbhEu0qHYzNPZlyTftxH41Sl6GR8H7vHLYrxk7UZBfPfaubSv0k9xq8T3WFxSZ6krwW962JOlOnWguQnnlb2jxaMvgCtOFMbRgLopko0SoNW06BKvHVe1OigfkhukWRIjOPl5tUbz5wg6YLyzLx0YyvCVK9LTQQpohWMCPQRjdrgNF49rH2IpnNkqFz0bl071gxZf5NZEP8mGW9KQ7AQw0pARzHZgxGuh01Qtj1ZyXH8i0
lea edi, [ebp - 0x1bd4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
movsw word es:[edi], word [esi]
mov esi, str.sE9iACWs0chyWSIj8HCaDcdJlzdX0QtlKWQNZcXa6Mwe0cNjNDSHfRhCqUWMFU9GnsXEtSLegSZfPLqEhslpsdVvUuBCxv4oL5QzklIfdOnjXFXPN9AvONcqBpW0qekgvNtRYgNOfBFft7rOesZcWlSsBzKJnX5B2zdO3ihOOSVq1gAY6ojGA4mWGzzueNuFOaCc2ChPREL4F7KDKSZSe90StVWEDtLyqrU11sXkUacexgdXPdKPY0JawRQ4UAqiXxRqTHmm5csx5opXh0pH4Ok23AIIdrc9sqOwCzGnQbvV7swQ6HidwlkqE3o2Pgl
lea edi, [ebp - 0xe98]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x55
lea edi, [ebp - 0xff0]
mov esi, str.vW9nFDYKccw5Mb3ptv2QfnQqwzRCkGL09MCORxekDZhACwv1ayUtoMEVVOfZMead1geI3R8UT3WJVbyY3h8BMp1yTM6jEeNL81WA10aRkkHpml9H6s7gD3otVKila1OTFcSXTmApQeqAFyqr2TgFKHlvBvf2iSDVpNqFTYNeSjUyQhbfDXC52M1YFku8m0U88Vq7vfy2EYTPXakAnneS17x6pAvSc23NsZHal3m2LIttV7c4L7ATqScF30I5J49eC9EBSGAqjuwHAGwoH2v9qLEZac48fBGGIKynWPIF6fpQeA1JxrkXXbU5ID1M4ktzIWEWFAGhqMcPWjEBl8VWx
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7b
movsw word es:[edi], word [esi]
mov esi, str.TQ7uVdbGK1KRuAznQpBhxYqyF9vW5oXLodMJCBUn686lBURf7TaERHGkVGUiJej8cDnjo3rqAvTs9KKOkHp6aIaUic41HRl7Ec2PulW4n1nAMErk9dQ5KPcblmDs7xatz7ZHlARxNtavnVxnYy15TweyMN3n4hiyCfAGSK7E8PZZUMCyN2IkBzHSX4mpuqpexOqi9LGW4zIt59UDjuCs0V1ncgJNNZvLhXLfbzk2rjHXOfPxXHY0tRYoPdUVkjw2aMhxOI01rZYArLLjFKy2lFV0jY2GyadaePJsmCmDP7TvD8PofChTVJ6moaLyev6iyAPp0XaJ9jLe8gphAmHMTZ946G7xNxPtKUB2OikiTkweTOpfOr5lcEd9MJWbI2SNfYHhiDOA4vaaoTeBpU45cbzwCTYB4feRKxtFok172O2qB0WmJDot4WyAWbIa7VDsG0cRMxDBfW45CrnW7ZmrSObba0ajX1x8hgE4vZIAZ0AD
lea edi, [ebp - 0x1dc4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6c
movsb byte es:[edi], byte [esi]
mov esi, str.yACvxVeecLSWC86d67lHnXLLo9ix1Yzy5ABBBupWbHEtcSmlcL7K5gWjNqspsPkubD5meD7M9dVX7ySrMyM8vb0xdPcbpftqlXFOLQRvZbv6NFfjJhMinIGOzOKHBkxyhOmXJTLpEfxCyAKXVp4o3Jrnv5fTRO0evl9JcgeumpHUZj9zhA4QC0gnRF7z3nQH9JzS31vPi4XeNsdszAytFcjqxgkmJMeIqiKmyN6W1PE4lXd7x1ChUxP4sWszR363GSqafgQi8yLd3kF2mqjAapRp0GHeZoyA8KDL0I00kcVVhHGLwcD2IRv7l0uDLUSwtUCMm23V7t3eNU3k2eT3Dw6sTQZmADtT16tTs6SFQKBk7M3v8rbwh99Z1cE6cZxuX0DHvkpzkKIJco764Y6ZLJyQrrSvT3flWYJA3YDU9jxK63Hq5
lea edi, [ebp - 0x1650]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3f
movsw word es:[edi], word [esi]
mov esi, str.nccVVNMfrlSoRMcJxnjTTh2EZl8JexFVfGMrDZuA3ChEGvgDowObziGc32TljxkNybYC2iOgTcMzf6XzhRnaYFAO5uxPSr5WldDbxIux8LRyPAQH7zPZIMnKglh0Cjw8kkWNgVzMQugbPXAYBlWvDetwhrAeo938XqSQ0l0HEFqn9vVbpD54libEw2NRjDUwnKFjUFCcbAVEeOw6wCvKYFE6MC0p2HJ3iGOf4bmEkWTHlXakFiCfmsH3wQOAD
lea edi, [ebp - 0xc28]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3a
movsw word es:[edi], word [esi]
mov esi, str.ZDD6EwLFtbn7V41mUjM3hzHue7aWIZxO6gnVKBXOe9DlTWVPt3WsZIry0etiqkxhgUqjBbMmH83WjwrOZtaPMdvwceDtKV1Ck7WefDObl2rpF72R1OP6R1P6mfMtsggjwajsciTnBQQ4l4FNqwSYoR8SH4qQPYDAgrOA76ptiAl9UmCQ2YRiJy36EtREQHbpYI8sUsxv6ONEMHYyEPvmYvqlwbjhxdFUiGdS1v6D6F
lea edi, [ebp - 0x870]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x78
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Zn9YzddyuZB8vCGX9151YFX6iIy6Z1jlPO3WRhFpKhwQRyOQFNhI5h1ISvpQxGWC8hLhw5Y0Ds0uFlLG0sPNPAIEJdShwogZNItQr21TGavdLs1kNohGLLgsNw2QE9dzEr3UJyEJNYrMjjBPMMte7IUH4p3dOaAi9GvaStdHErwKT6TOG3NsXdOmHjopwmfKmimEzOkZOaRIKdxh8SidncgbaSvT5TS979eJxxTryqzAmkdFOCfwx9Ir1jCcug4qhX7z9DElN6gFrnOtVVZ52ZnpIxK3CidV2neifyoMAILwxb6wzjIJwzDMD0j0qJbVI9LuMqTi5TUB5sHy4TP9XEanLbPMsaeHVb4CL6ZWEQODJ6FAkb2l0z54YPoYaxWvBpLhcyha5lC3V6myC0SGbLo06xcQiQCMpxe60zxZTdMgIKxJ7A7dqk3wKgSPyyeDhIorJPNHMNUP8W4IDf9dy68p6w4GAMq
lea edi, [ebp - 0x19ec]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4c
mov dword [ebp - 0x1de8], 0
mov esi, str.DMtVmmNOISwoVhAl3uiXOe3gAeU8pRBXYI3F9aGGDgKC7qJqXzgBIzJVgHJgQpHVUoNVpqzvdQ2gQXh7xAgUZL8SmWDAspmqjjVgTEPmYplJvVznfbePlYY6Tb4SXhwvBcJbcrnLdYtt4N05yhaUBPerrrK0Hc58DIxJMkCe9Uc5nY0AurQOyBhFyNhlIBKztqCtbq9Q7VJ8ekEBG0J0vp3JRNK3a9R3BmeyHfmjySiwDAa6DLhrpaU86vn3i68tExPGEAohqADBynkik3WwdH4IvDWpzfqSF2jxSsdU0LQ5jRj
mov dword [ebp - 0x1de4], 0
lea edi, [ebp - 0xd58]
mov dword [ebp - 0x1de0], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3b
lea edi, [ebp - 0x960]
mov esi, str.RoL3zA0EnV0KkPLnIieJOcISg6W4Zr7y63zbWk9ZVFr2tTltgdB3xmGvoIyKQEGMpr9xbgKovQPx1AaFomu1Mhaq8mvcjjHykWgn4KKtOG2ZmOKOCeLsbkCskHfW0NNjM5TmtD9hpauSc8oe6lR5p31lYxcZFUg7X94b8kQdWlCkz1W6gMwAuGzgHLQBJ9urDqCZhINVcVYAwNztGaqwjRcgpOh10ly4uDMXoPdmOdgX63
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.5FScc0kE22cdfawUTHvRviaWw1URRAKfVfXHiWDdpOWR7eTEVWt3gN0gfF09tAOuWS1jjI9lnULwLalxsZzt5nwLFROJaFA8XcNZm9cafA1cIGdbtpM9ornJkARC7r8dFDCOUx5NmSn3hM4nh0K04HXxEFQnKwKKrU0QsU9IUN1cFuQhs01kcyNFfXemqvz156aCkGeTsA3bR1CN8d4RytcFDhx5gCqodgjt9Z5g9pjzbBRDjXaXCZs8l3E2lVi0OEkaY1hR8atD4G0IavVOPEa6dRMP6pfFudYlz3OFf5mPN6PwkFgLTab48sBPrDQBD11Hku13bJc6wiDjtpezxRcHDCcgtTLQT08p05wYpRbm8IpsCSF3NSsEaDZKTgR2ChuzHA7SIJ8DqwrXIQUMat5vcXAGxdhAySFZgIQcr7iX1nhYAVYavOO8z
lea edi, [ebp - 0x180c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp byte [ebp - 0x41c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1dc8], 0xf
mov dword [ebp - 0x1dcc], 0
mov byte [ebp - 0x1ddc], 0
jne 0x46bb41
xor ecx, ecx
jmp 0x46bb59
lea ecx, [ebp - 0x41c]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bb50
sub ecx, edx
push ecx
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.00407d30
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bba4
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
cmp byte [ebp - 0x154], 0
mov dword [ebp - 0x1dc8], 0xf
mov dword [ebp - 0x1dcc], 0
mov byte [ebp - 0x1ddc], 0
jne 0x46bbcc
xor ecx, ecx
jmp 0x46bbde
lea ecx, [ebp - 0x154]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bbd5
sub ecx, edx
push ecx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.00407d30
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bc29
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
cmp byte [ebp - 0xb28], 0
mov dword [ebp - 0x1dc8], 0xf
mov dword [ebp - 0x1dcc], 0
mov byte [ebp - 0x1ddc], 0
jne 0x46bc51
xor ecx, ecx
jmp 0x46bc69
lea ecx, [ebp - 0xb28]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bc60
sub ecx, edx
push ecx
lea eax, [ebp - 0xb28]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.00407d30
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bcb4
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
cmp byte [ebp - 0x5d0], 0
mov dword [ebp - 0x1dc8], 0xf
mov dword [ebp - 0x1dcc], 0
mov byte [ebp - 0x1ddc], 0
jne 0x46bcdc
xor ecx, ecx
jmp 0x46bcee
lea ecx, [ebp - 0x5d0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bce5
sub ecx, edx
push ecx
lea eax, [ebp - 0x5d0]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.00407d30
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bd39
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
cmp byte [ebp - 0x784], 0
mov dword [ebp - 0x1dc8], 0xf
mov dword [ebp - 0x1dcc], 0
mov byte [ebp - 0x1ddc], 0
jne 0x46bd61
xor ecx, ecx
jmp 0x46bd79
lea ecx, [ebp - 0x784]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bd70
sub ecx, edx
push ecx
lea eax, [ebp - 0x784]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.00407d30
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bdc4
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
cmp byte [ebp - 0x298], 0
mov dword [ebp - 0x1dc8], 0xf
mov dword [ebp - 0x1dcc], 0
mov byte [ebp - 0x1ddc], 0
jne 0x46bdec
xor eax, eax
jmp 0x46bdfe
lea eax, [ebp - 0x298]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x46bdf5
sub eax, edx
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.00407d30
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46be49
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x149c]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46be93
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x1170]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bedd
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x1304]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bf27
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x1bd4]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bf71
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0xe98]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46bfbb
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0xff0]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46c005
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x1dc4]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46c04f
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x1650]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46c099
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0xc28]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
mov eax, dword [ebp - 0x1dc8]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x46c0e3
inc eax
lea ecx, [ebp - 0x1ddc]
push eax
push dword [ebp - 0x1ddc]
call fcn.00407e30
lea eax, [ebp - 0x870]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
lea ecx, [ebp - 0x1ddc]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x19ec]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
lea ecx, [ebp - 0x1ddc]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0xd58]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
lea ecx, [ebp - 0x1ddc]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x960]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
lea ecx, [ebp - 0x1ddc]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x180c]
push eax
lea ecx, [ebp - 0x1ddc]
call fcn.004057d0
lea eax, [ebp - 0x1ddc]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1de8]
call fcn.00407f90
lea ecx, [ebp - 0x1ddc]
call fcn.00405930
lea eax, [ebx + 0x54c]
push eax
push 0
push ebx
push 0x46cd90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x1de8]
mov dword [ebx + 0x550], eax
call fcn.00405970
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474d9e
mov esp, ebp
pop ebp
ret