Function at 0x48a140
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63c63a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7d0
mov dword [ebp - 0x634], ecx
mov dword [ebp - 4], 0
push 0x667e0c
lea eax, [ebp - 0x3b0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x638], eax
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x63c], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x63c]
call fcn.00404a70
push eax
call fcn.0044a140
add esp, 4
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3b0]
call fcn.00404a50
cmp dword [ebp - 0x10], 0
je 0x48b7cc
mov dword [ebp - 0x18], 0
push 0x667de4
lea edx, [ebp - 0x3b4]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x640]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x3b4]
call fcn.0040e840
mov dword [ebp - 0x14], 0
call dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x48b7c0
push 1
push 0x667dbc
lea ecx, [ebp - 0x3b8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x644], eax
mov edx, dword [ebp - 0x644]
mov dword [ebp - 0x648], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x648]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x634]
call fcn.0048a0a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3b8]
call fcn.00404a50
push 1
push 0x667d94
lea eax, [ebp - 0x3bc]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x64c], eax
mov ecx, dword [ebp - 0x64c]
mov dword [ebp - 0x650], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x650]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x634]
call fcn.0048a0a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3bc]
call fcn.00404a50
push 0xfde9
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x3dc]
push eax
call fcn.004e9f90
add esp, 0xc
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x654]
mov dword [ebp - 0x658], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x658]
call fcn.00419c10
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
call eax
add esp, 4
mov dword [ebp - 0x3c0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3dc]
call fcn.0040bf10
cmp dword [ebp - 0x3c0], 0
je 0x48b7b8
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 4]
call edx
test eax, eax
je 0x48b19b
push 0x667d84
lea eax, [ebp - 0x3e4]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0x65c]
mov dword [ebp - 0x660], ecx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x660]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
call eax
add esp, 4
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3e4]
call fcn.0040e840
cmp dword [ebp - 0x3e0], 0
je 0x48b19b
push 0x667d78
lea ecx, [ebp - 0x3ec]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x664], eax
mov edx, dword [ebp - 0x664]
mov dword [ebp - 0x668], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x668]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xc]
call ecx
add esp, 4
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3ec]
call fcn.0040e840
cmp dword [ebp - 0x3e8], 0
je 0x48b19b
mov dword [ebp - 0x2d0], 1
lea ecx, [ebp - 0x240]
call fcn.0040be40
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x278]
call fcn.0040be40
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2cc]
call fcn.0040be40
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x25c]
call fcn.0040be40
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2b0]
call fcn.0040be40
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x294]
call fcn.0040be40
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x2d0], 0
je 0x48b141
push 0x667d6c
lea edx, [ebp - 0x3f0]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x670], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x670]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
add esp, 4
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0040bea0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3f0]
call fcn.0040e840
push 0x667d60
lea eax, [ebp - 0x3f4]
push eax
call fcn.00425030
add esp, 8
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x674]
mov dword [ebp - 0x678], ecx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x678]
call fcn.0040e830
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x10]
call eax
add esp, 4
push eax
lea ecx, [ebp - 0x324]
call fcn.0040bea0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3f4]
call fcn.0040e840
push 0x66095c
lea ecx, [ebp - 0x414]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x67c], eax
mov edx, dword [ebp - 0x67c]
mov dword [ebp - 0x680], edx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x680]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 4
push eax
lea ecx, [ebp - 0x410]
call fcn.0040bea0
mov byte [ebp - 4], 0x14
push 0
push 0xfde9
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0x37c]
push eax
call fcn.0046c8e0
add esp, 0x10
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x410]
call fcn.0040bf10
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x414]
call fcn.0040e840
push 0x667d50
lea ecx, [ebp - 0x434]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x684], eax
mov edx, dword [ebp - 0x684]
mov dword [ebp - 0x688], edx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x688]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 4
push eax
lea ecx, [ebp - 0x430]
call fcn.0040bea0
mov byte [ebp - 4], 0x19
push 0
push 0xfde9
lea edx, [ebp - 0x430]
push edx
lea eax, [ebp - 0x308]
push eax
call fcn.0046c8e0
add esp, 0x10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x430]
call fcn.0040bf10
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x434]
call fcn.0040e840
push 0x667d44
lea ecx, [ebp - 0x438]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x68c], eax
mov edx, dword [ebp - 0x68c]
mov dword [ebp - 0x690], edx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x690]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 4
push eax
lea ecx, [ebp - 0x360]
call fcn.0040bea0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x438]
call fcn.0040e840
push 0x667d38
lea edx, [ebp - 0x43c]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x698], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x698]
call fcn.0040e830
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
call edx
add esp, 4
push eax
lea ecx, [ebp - 0x344]
call fcn.0040bea0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x43c]
call fcn.0040e840
push 0x660770
lea eax, [ebp - 0x344]
push eax
call fcn.0049cab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x48a721
mov dword [ebp - 0x328], 1
jmp 0x48a72b
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x380], 0
push 0x667d2c
lea edx, [ebp - 0x460]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x6a0]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x45c]
call fcn.0040bea0
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a8], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x6a8]
push edx
lea eax, [ebp - 0x2ec]
push eax
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x43d], al
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x45c]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x460]
call fcn.0040e840
movzx ecx, byte [ebp - 0x43d]
test ecx, ecx
je 0x48a7e0
mov dword [ebp - 0x380], reloc.SHLWAPI.dll_ParseURLW
jmp 0x48a931
push 0x667d20
lea edx, [ebp - 0x484]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x6b0]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x480]
call fcn.0040bea0
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x6b8]
push edx
lea eax, [ebp - 0x2ec]
push eax
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x461], al
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x480]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x484]
call fcn.0040e840
movzx ecx, byte [ebp - 0x461]
test ecx, ecx
je 0x48a88b
mov dword [ebp - 0x380], SysReAllocStringLen
jmp 0x48a931
push 0x667d14
lea edx, [ebp - 0x4a8]
push edx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x6c0]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x4a4]
call fcn.0040bea0
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c8], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x6c8]
push edx
lea eax, [ebp - 0x2ec]
push eax
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x485], al
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x4a4]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4a8]
call fcn.0040e840
movzx ecx, byte [ebp - 0x485]
test ecx, ecx
je 0x48a931
mov dword [ebp - 0x380], SysReAllocStringLen
mov dword [ebp - 0x388], 0
cmp dword [ebp - 0x328], 1
jne 0x48a975
lea edx, [ebp - 0x384]
push edx
push 0xf013f
push 0
lea ecx, [ebp - 0x324]
call fcn.00419c10
push eax
mov eax, dword [ebp - 0x380]
push eax
call fcn.004438e0
add esp, 0x14
mov dword [ebp - 0x388], eax
jmp 0x48a9a4
lea ecx, [ebp - 0x384]
push ecx
push 0xf003f
push 0
lea ecx, [ebp - 0x324]
call fcn.00419c10
push eax
mov edx, dword [ebp - 0x380]
push edx
call fcn.004438e0
add esp, 0x14
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 2
jne 0x48aa26
cmp dword [0x6da4b8], 1
jne 0x48a9ef
push 0
lea eax, [ebp - 0x384]
push eax
push 0
push 0xf013f
push 4
push 0
push 0
lea ecx, [ebp - 0x324]
call fcn.00419c10
push eax
mov ecx, dword [ebp - 0x380]
push ecx
call fcn.00443960
add esp, 0x24
mov dword [ebp - 0x388], eax
jmp 0x48aa26
push 0
lea edx, [ebp - 0x384]
push edx
push 0
push 0xf003f
push 4
push 0
push 0
lea ecx, [ebp - 0x324]
call fcn.00419c10
push eax
mov eax, dword [ebp - 0x380]
push eax
call fcn.00443960
add esp, 0x24
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0
jne 0x48b08c
mov dword [ebp - 0x38c], 0
push 0x667cfc
lea ecx, [ebp - 0x4cc]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x6cc], eax
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], edx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x6d0]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x4c8]
call fcn.0040bea0
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x6d8]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x4a9], al
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4c8]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4cc]
call fcn.0040e840
movzx eax, byte [ebp - 0x4a9]
test eax, eax
je 0x48aae8
mov dword [ebp - 0x38c], 3
jmp 0x48b03b
push 0x667ce4
lea ecx, [ebp - 0x4f0]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x6dc], eax
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], edx
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x6e0]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x4ec]
call fcn.0040bea0
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e8], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x6e8]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x4cd], al
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x4ec]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4f0]
call fcn.0040e840
movzx eax, byte [ebp - 0x4cd]
test eax, eax
je 0x48ab93
mov dword [ebp - 0x38c], 4
jmp 0x48b03b
push 0x667cb8
lea ecx, [ebp - 0x514]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x6ec], eax
mov edx, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f0], edx
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x6f0]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x510]
call fcn.0040bea0
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x6f8], eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x6f8]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x4f1], al
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x510]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x514]
call fcn.0040e840
movzx eax, byte [ebp - 0x4f1]
test eax, eax
je 0x48ac3e
mov dword [ebp - 0x38c], 5
jmp 0x48b03b
push 0x667c98
lea ecx, [ebp - 0x538]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x6fc], eax
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x700], edx
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x700]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x534]
call fcn.0040bea0
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x708], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x708]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x515], al
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x534]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x538]
call fcn.0040e840
movzx eax, byte [ebp - 0x515]
test eax, eax
je 0x48ace9
mov dword [ebp - 0x38c], 2
jmp 0x48b03b
push 0x667c84
lea ecx, [ebp - 0x55c]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x70c], eax
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x710], edx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x710]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x558]
call fcn.0040bea0
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x718], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x718]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x539], al
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x558]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x55c]
call fcn.0040e840
movzx eax, byte [ebp - 0x539]
test eax, eax
je 0x48ad94
mov dword [ebp - 0x38c], 6
jmp 0x48b03b
push 0x667c68
lea ecx, [ebp - 0x580]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x71c], eax
mov edx, dword [ebp - 0x71c]
mov dword [ebp - 0x720], edx
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x720]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x57c]
call fcn.0040bea0
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x728], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x728]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x55d], al
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x57c]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x580]
call fcn.0040e840
movzx eax, byte [ebp - 0x55d]
test eax, eax
je 0x48ae3f
mov dword [ebp - 0x38c], 7
jmp 0x48b03b
push 0x667c54
lea ecx, [ebp - 0x5a4]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x72c], eax
mov edx, dword [ebp - 0x72c]
mov dword [ebp - 0x730], edx
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x730]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x5a0]
call fcn.0040bea0
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x738], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x738]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x581], al
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x5a0]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5a4]
call fcn.0040e840
movzx eax, byte [ebp - 0x581]
test eax, eax
je 0x48aeea
mov dword [ebp - 0x38c], 0
jmp 0x48b03b
push 0x667c3c
lea ecx, [ebp - 0x5c8]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x73c], eax
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 0x740], edx
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x740]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x5c4]
call fcn.0040bea0
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x748], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x748]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x5a5], al
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x5c4]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5c8]
call fcn.0040e840
movzx eax, byte [ebp - 0x5a5]
test eax, eax
je 0x48af95
mov dword [ebp - 0x38c], 0xb
jmp 0x48b03b
push 0x667c2c
lea ecx, [ebp - 0x5ec]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x74c], eax
mov edx, dword [ebp - 0x74c]
mov dword [ebp - 0x750], edx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x750]
call fcn.0040e830
push eax
lea ecx, [ebp - 0x5e8]
call fcn.0040bea0
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x758], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x758]
push ecx
lea edx, [ebp - 0x360]
push edx
call fcn.0049cad0
add esp, 8
mov byte [ebp - 0x5c9], al
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x5e8]
call fcn.0040bf10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5ec]
call fcn.0040e840
movzx eax, byte [ebp - 0x5c9]
test eax, eax
je 0x48b03b
mov dword [ebp - 0x38c], 1
lea ecx, [ebp - 0x308]
call fcn.0049ba00
push eax
lea ecx, [ebp - 0x308]
call fcn.00419c10
push eax
mov ecx, dword [ebp - 0x38c]
push ecx
push 0
lea ecx, [ebp - 0x37c]
call fcn.00419c10
push eax
mov edx, dword [ebp - 0x384]
push edx
call fcn.004434d0
add esp, 0x18
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x384]
push eax
call fcn.00446dd0
add esp, 4
push 0x667d78
lea ecx, [ebp - 0x5f0]
push ecx
call fcn.00425030
add esp, 8
mov dword [ebp - 0x75c], eax
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x760], edx
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x760]
call fcn.0040e830
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
call ecx
add esp, 4
mov dword [ebp - 0x2d0], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x5f0]
call fcn.0040e840
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x344]
call fcn.0040bf10
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x360]
call fcn.0040bf10
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x308]
call fcn.0040bf10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x37c]
call fcn.0040bf10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x324]
call fcn.0040bf10
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2ec]
call fcn.0040bf10
jmp 0x48a465
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x294]
call fcn.0040bf10
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2b0]
call fcn.0040bf10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x25c]
call fcn.0040bf10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2cc]
call fcn.0040bf10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x278]
call fcn.0040bf10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x240]
call fcn.0040bf10
push 0
push 0x667dbc
lea edx, [ebp - 0x5f4]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x768], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x768]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x634]
call fcn.0048a0a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5f4]
call fcn.00404a50
push 0
push 0x667d94
lea ecx, [ebp - 0x5f8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x76c], eax
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x770], edx
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x770]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x634]
call fcn.0048a0a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5f8]
call fcn.00404a50
xor eax, eax
mov word [ebp - 0x224], ax
push 0x1fe
push 0
lea ecx, [ebp - 0x222]
push ecx
call fcn.0061b420
add esp, 0xc
push 0x100
lea edx, [ebp - 0x224]
push edx
push 0x667c0c
lea eax, [ebp - 0x5fc]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x778], ecx
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x778]
call fcn.00404a70
push eax
mov ecx, 0x6da338
call fcn.0045e680
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5fc]
call fcn.00404a50
lea edx, [ebp - 0x224]
push edx
lea ecx, [ebp - 0x1c]
call fcn.004088d0
mov byte [ebp - 4], 0x3f
push 0x100
lea eax, [ebp - 0x224]
push eax
push 0x667be4
lea ecx, [ebp - 0x600]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x77c], eax
mov edx, dword [ebp - 0x77c]
mov dword [ebp - 0x780], edx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x780]
call fcn.00404a70
push eax
mov ecx, 0x6da338
call fcn.0045e680
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x600]
call fcn.00404a50
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x20]
call fcn.004088d0
mov byte [ebp - 4], 0x41
push 0x1040
lea ecx, [ebp - 0x20]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x1c]
call fcn.00404a70
push eax
push 0
call fcn.00447d30
add esp, 0x10
mov ecx, 0x6d9ce0
call fcn.00464940
movzx ecx, al
test ecx, ecx
jne 0x48b7a0
mov ecx, 0x6da1ec
call fcn.00462670
push eax
lea ecx, [ebp - 0x3a8]
call fcn.00408a30
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3a8]
call fcn.0040bf60
push eax
lea ecx, [ebp - 0x3ac]
call fcn.004088d0
mov byte [ebp - 4], 0x43
push 0x65a5a8
push 0x667990
lea edx, [ebp - 0x604]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x788], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x788]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x604]
call fcn.00404a50
push 0x65a5a8
push 0x66794c
lea ecx, [ebp - 0x608]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x78c]
mov dword [ebp - 0x790], edx
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x790]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x608]
call fcn.00404a50
push 0x65a5a8
push 0x667900
lea eax, [ebp - 0x60c]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x798], ecx
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x798]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x60c]
call fcn.00404a50
push 0x65a5a8
push 0x6678c4
lea edx, [ebp - 0x610]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x7a0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x610]
call fcn.00404a50
push 0x65a5a8
push 0x667878
lea ecx, [ebp - 0x614]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7a4], eax
mov edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], edx
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x7a8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x614]
call fcn.00404a50
push 0x65a5a8
push 0x667834
lea eax, [ebp - 0x618]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7ac], eax
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp - 0x7b0], ecx
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x7b0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x618]
call fcn.00404a50
push 0x65a5a8
push 0x66780c
lea edx, [ebp - 0x61c]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], eax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x7b8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x61c]
call fcn.00404a50
push 0x65a5a8
push 0x6677e0
lea ecx, [ebp - 0x620]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7bc], eax
mov edx, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], edx
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x7c0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x620]
call fcn.00404a50
push 0x65a5a8
push 0x6677ac
lea eax, [ebp - 0x624]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], ecx
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x7c8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x624]
call fcn.00404a50
push 0x65a5a8
push 0x667708
lea edx, [ebp - 0x628]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x7d0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x628]
call fcn.00404a50
push 0x65a5a8
push 0x6676d0
lea ecx, [ebp - 0x62c]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7d4], eax
mov edx, dword [ebp - 0x7d4]
mov dword [ebp - 0x7d8], edx
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x7d8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0040b850
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x62c]
call fcn.00404a50
lea ecx, [ebp - 0x3ac]
call fcn.00404a70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x630], esp
push eax
call fcn.00408a30
mov dword [ebp - 0x7dc], eax
mov ecx, 0x6da1ec
call fcn.00462770
mov ecx, 0x6d9dd4
call fcn.00463580
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3ac]
call fcn.00404a50
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3a8]
call fcn.00408aa0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x20]
call fcn.00404a50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00404a50
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
call ecx
mov edx, dword [ebp - 0x10]
push edx
call fcn.0044a1e0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00408aa0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c