Function at 0x4672b8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x671925
mov eax, dword fs:[0]
push eax
sub esp, 0x708
mov eax, dword [0x7140f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x378], ecx
and dword [ebp - 4], 0
push 0x69c454
lea eax, [ebp - 0x578]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x574], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x574]
call fcn.004e0c90
push eax
call fcn.004387fd
pop ecx
mov dword [ebp - 0x37c], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x578]
call fcn.004e0a9e
cmp dword [ebp - 0x37c], 0
je 0x46883c
and dword [ebp - 0x380], 0
push 0x69c468
lea eax, [ebp - 0x580]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x57c], eax
mov ecx, dword [ebp - 0x57c]
call fcn.004e0c90
push eax
push dword [ebp - 0x37c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x380], eax
lea ecx, [ebp - 0x580]
call fcn.004e0a9e
and dword [ebp - 0x35c], 0
call dword [ebp - 0x380]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
je 0x468830
push 1
push 0x69c490
lea eax, [ebp - 0x590]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x58c]
call fcn.004e0c90
push eax
mov ecx, dword [ebp - 0x378]
call fcn.00468862
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x590]
call fcn.004e0a9e
push 1
push 0x69c4b8
lea eax, [ebp - 0x59c]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x598], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x598]
call fcn.004e0c90
push eax
mov ecx, dword [ebp - 0x378]
call fcn.00468862
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x59c]
call fcn.004e0a9e
push 0xfde9
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x6cc]
push eax
call fcn.004b95ad
add esp, 0xc
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x5a4], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x5a4]
call fcn.004e6550
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax]
pop ecx
mov dword [ebp - 0x5a8], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6cc]
call fcn.004e3095
cmp dword [ebp - 0x5a8], 0
je 0x468827
mov eax, dword [ebp - 0x35c]
call dword [eax + 4]
test eax, eax
je 0x4681ed
push 0x69c4e0
lea eax, [ebp - 0x394]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x390], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x390]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 8]
pop ecx
mov dword [ebp - 0x398], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x394]
call fcn.004e0a9e
cmp dword [ebp - 0x398], 0
je 0x4681ed
push 0x69c4f0
lea eax, [ebp - 0x3a4]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x3a0]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0xc]
pop ecx
mov dword [ebp - 0x3a8], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3a4]
call fcn.004e0a9e
cmp dword [ebp - 0x3a8], 0
je 0x4681ed
mov dword [ebp - 0x388], 1
lea ecx, [ebp - 0x30c]
call fcn.004e3033
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2f4]
call fcn.004e3033
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2dc]
call fcn.004e3033
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x354]
call fcn.004e3033
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x33c]
call fcn.004e3033
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x324]
call fcn.004e3033
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x388], 0
je 0x468193
push 0x69c4fc
lea eax, [ebp - 0x3b4]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b0], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x3b0]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x10]
pop ecx
push eax
lea ecx, [ebp - 0x264]
call fcn.004e2fd8
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3b4]
call fcn.004e0a9e
push 0x69c508
lea eax, [ebp - 0x3c0]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3bc], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x3bc]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x10]
pop ecx
push eax
lea ecx, [ebp - 0x24c]
call fcn.004e2fd8
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3c0]
call fcn.004e0a9e
push 0x69c514
lea eax, [ebp - 0x3cc]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x3c8]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x10]
pop ecx
push eax
lea ecx, [ebp - 0x5c4]
call fcn.004e2fd8
mov byte [ebp - 4], 0x14
push 0
push 0xfde9
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.0047d363
add esp, 0x10
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x5c4]
call fcn.004e3095
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3cc]
call fcn.004e0a9e
push 0x69c520
lea eax, [ebp - 0x3d8]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x3d4]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x10]
pop ecx
push eax
lea ecx, [ebp - 0x5dc]
call fcn.004e2fd8
mov byte [ebp - 4], 0x19
push 0
push 0xfde9
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0047d363
add esp, 0x10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x5dc]
call fcn.004e3095
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3d8]
call fcn.004e0a9e
push 0x69c530
lea eax, [ebp - 0x3e4]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x3e0]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x10]
pop ecx
push eax
lea ecx, [ebp - 0x234]
call fcn.004e2fd8
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x3e4]
call fcn.004e0a9e
push 0x69c53c
lea eax, [ebp - 0x3f0]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x3ec]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x10]
pop ecx
push eax
lea ecx, [ebp - 0x294]
call fcn.004e2fd8
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3f0]
call fcn.004e0a9e
push 0x69c548
lea eax, [ebp - 0x294]
push eax
call fcn.004f7404
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x4678a1
mov dword [ebp - 0x384], 1
jmp 0x4678a8
and dword [ebp - 0x384], 0
and dword [ebp - 0x370], 0
push 0x69c54c
lea eax, [ebp - 0x400]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3f8], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x3f8]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x6e4]
call fcn.004e2fd8
mov dword [ebp - 0x3fc], eax
push dword [ebp - 0x3fc]
lea eax, [ebp - 0x264]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x374], al
lea ecx, [ebp - 0x6e4]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x400]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x374]
test eax, eax
je 0x467943
mov dword [ebp - 0x370], reloc.OLEAUT32.dll_SysReAllocString
jmp 0x467a66
push 0x69c558
lea eax, [ebp - 0x410]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x408], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x408]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x6fc]
call fcn.004e2fd8
mov dword [ebp - 0x40c], eax
push dword [ebp - 0x40c]
lea eax, [ebp - 0x264]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x361], al
lea ecx, [ebp - 0x6fc]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x410]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x361]
test eax, eax
je 0x4679d7
mov dword [ebp - 0x370], VariantInit
jmp 0x467a66
push 0x69c564
lea eax, [ebp - 0x420]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x418]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x714]
call fcn.004e2fd8
mov dword [ebp - 0x41c], eax
push dword [ebp - 0x41c]
lea eax, [ebp - 0x264]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x362], al
lea ecx, [ebp - 0x714]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x420]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x362]
test eax, eax
je 0x467a66
mov dword [ebp - 0x370], VariantInit
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x384], 1
jne 0x467aa6
lea eax, [ebp - 0x358]
push eax
push 0xf013f
push 0
lea ecx, [ebp - 0x24c]
call fcn.004e6550
push eax
push dword [ebp - 0x370]
call fcn.00432acd
add esp, 0x14
mov dword [ebp - 0x36c], eax
jmp 0x467ad4
lea eax, [ebp - 0x358]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x24c]
call fcn.004e6550
push eax
push dword [ebp - 0x370]
call fcn.00432acd
add esp, 0x14
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 2
jne 0x467b54
cmp dword [0x71ab88], 1
jne 0x467b1e
push 0
lea eax, [ebp - 0x358]
push eax
push 0
push 0xf013f
push 4
push 0
push 0
lea ecx, [ebp - 0x24c]
call fcn.004e6550
push eax
push dword [ebp - 0x370]
call fcn.00432b3f
add esp, 0x24
mov dword [ebp - 0x36c], eax
jmp 0x467b54
push 0
lea eax, [ebp - 0x358]
push eax
push 0
push 0xf003f
push 4
push 0
push 0
lea ecx, [ebp - 0x24c]
call fcn.004e6550
push eax
push dword [ebp - 0x370]
call fcn.00432b3f
add esp, 0x24
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0
jne 0x4680e0
and dword [ebp - 0x360], 0
push 0x69c570
lea eax, [ebp - 0x430]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x428], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x428]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x5f4]
call fcn.004e2fd8
mov dword [ebp - 0x42c], eax
push dword [ebp - 0x42c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x363], al
lea ecx, [ebp - 0x5f4]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x430]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x363]
test eax, eax
je 0x467bfc
mov dword [ebp - 0x360], 3
jmp 0x468094
push 0x69c588
lea eax, [ebp - 0x440]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x438]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x60c]
call fcn.004e2fd8
mov dword [ebp - 0x43c], eax
push dword [ebp - 0x43c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x364], al
lea ecx, [ebp - 0x60c]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x440]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x364]
test eax, eax
je 0x467c90
mov dword [ebp - 0x360], 4
jmp 0x468094
push 0x69c5a0
lea eax, [ebp - 0x450]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x448], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x448]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x624]
call fcn.004e2fd8
mov dword [ebp - 0x44c], eax
push dword [ebp - 0x44c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x365], al
lea ecx, [ebp - 0x624]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x450]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x365]
test eax, eax
je 0x467d24
mov dword [ebp - 0x360], 5
jmp 0x468094
push 0x69c5cc
lea eax, [ebp - 0x460]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x458]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x63c]
call fcn.004e2fd8
mov dword [ebp - 0x45c], eax
push dword [ebp - 0x45c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x366], al
lea ecx, [ebp - 0x63c]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x460]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x366]
test eax, eax
je 0x467db8
mov dword [ebp - 0x360], 2
jmp 0x468094
push 0x69c5ec
lea eax, [ebp - 0x470]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x468], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x468]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x654]
call fcn.004e2fd8
mov dword [ebp - 0x46c], eax
push dword [ebp - 0x46c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x367], al
lea ecx, [ebp - 0x654]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x470]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x367]
test eax, eax
je 0x467e4c
mov dword [ebp - 0x360], 6
jmp 0x468094
push 0x69c600
lea eax, [ebp - 0x480]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x478], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x478]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x66c]
call fcn.004e2fd8
mov dword [ebp - 0x47c], eax
push dword [ebp - 0x47c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x368], al
lea ecx, [ebp - 0x66c]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x480]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x368]
test eax, eax
je 0x467ee0
mov dword [ebp - 0x360], 7
jmp 0x468094
push 0x69c61c
lea eax, [ebp - 0x490]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x488], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x488]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x684]
call fcn.004e2fd8
mov dword [ebp - 0x48c], eax
push dword [ebp - 0x48c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x373], al
lea ecx, [ebp - 0x684]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x490]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x373]
test eax, eax
je 0x467f71
and dword [ebp - 0x360], 0
jmp 0x468094
push 0x69c630
lea eax, [ebp - 0x4a0]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x498], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x498]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x69c]
call fcn.004e2fd8
mov dword [ebp - 0x49c], eax
push dword [ebp - 0x49c]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x372], al
lea ecx, [ebp - 0x69c]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4a0]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x372]
test eax, eax
je 0x468005
mov dword [ebp - 0x360], 0xb
jmp 0x468094
push 0x69c648
lea eax, [ebp - 0x4b0]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x4a8], eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x4a8]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x6b4]
call fcn.004e2fd8
mov dword [ebp - 0x4ac], eax
push dword [ebp - 0x4ac]
lea eax, [ebp - 0x234]
push eax
call fcn.004f73f4
pop ecx
pop ecx
mov byte [ebp - 0x371], al
lea ecx, [ebp - 0x6b4]
call fcn.004e3095
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4b0]
call fcn.004e0a9e
movzx eax, byte [ebp - 0x371]
test eax, eax
je 0x468094
mov dword [ebp - 0x360], 1
lea ecx, [ebp - 0x27c]
call fcn.004e685e
push eax
lea ecx, [ebp - 0x27c]
call fcn.004e6550
push eax
push dword [ebp - 0x360]
push 0
lea ecx, [ebp - 0x2c4]
call fcn.004e6550
push eax
push dword [ebp - 0x358]
call fcn.0043271e
add esp, 0x18
mov dword [ebp - 0x36c], eax
push dword [ebp - 0x358]
call fcn.00435978
pop ecx
push 0x69c658
lea eax, [ebp - 0x4bc]
push eax
call fcn.0041c9c1
pop ecx
pop ecx
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b8], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x4b8]
call fcn.004e0c90
push eax
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x14]
pop ecx
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4bc]
call fcn.004e0a9e
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x294]
call fcn.004e3095
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x234]
call fcn.004e3095
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x27c]
call fcn.004e3095
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2c4]
call fcn.004e3095
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x24c]
call fcn.004e3095
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x264]
call fcn.004e3095
jmp 0x4675f2
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x324]
call fcn.004e3095
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x33c]
call fcn.004e3095
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x354]
call fcn.004e3095
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2dc]
call fcn.004e3095
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2f4]
call fcn.004e3095
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30c]
call fcn.004e3095
push 0
push 0x69c664
lea eax, [ebp - 0x4c8]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c4], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x4c4]
call fcn.004e0c90
push eax
mov ecx, dword [ebp - 0x378]
call fcn.00468862
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4c8]
call fcn.004e0a9e
push 0
push 0x69c68c
lea eax, [ebp - 0x4d4]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x4d0]
call fcn.004e0c90
push eax
mov ecx, dword [ebp - 0x378]
call fcn.00468862
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4d4]
call fcn.004e0a9e
push 0x200
push 0
lea eax, [ebp - 0x210]
push eax
call fcn.0064a480
add esp, 0xc
push 0x100
lea eax, [ebp - 0x210]
push eax
push 0x69c6b4
lea eax, [ebp - 0x4e0]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x4dc], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x4dc]
call fcn.004e0c90
push eax
mov ecx, 0x71a9c0
call fcn.004486f1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4e0]
call fcn.004e0a9e
push 4
lea ecx, [ebp - 0x21c]
call fcn.004d2e66
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x21c]
call fcn.004e17a1
mov byte [ebp - 4], 0x33
push 0x100
lea eax, [ebp - 0x210]
push eax
push 0x69c6d4
lea eax, [ebp - 0x4ec]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x4e8], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x4e8]
call fcn.004e0c90
push eax
mov ecx, 0x71a9c0
call fcn.004486f1
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x4ec]
call fcn.004e0a9e
push 4
lea ecx, [ebp - 0x218]
call fcn.004d2e66
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x218]
call fcn.004e17a1
mov byte [ebp - 4], 0x35
push 0x1040
lea ecx, [ebp - 0x218]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x21c]
call fcn.004e0c90
push eax
push 0
call fcn.00436774
add esp, 0x10
mov ecx, 0x71a3f0
call fcn.0044d045
movzx eax, al
test eax, eax
jne 0x468809
mov ecx, 0x71a89c
call fcn.004490b3
push eax
lea ecx, [ebp - 0x2ac]
call fcn.004e18af
mov byte [ebp - 4], 0x36
push 4
lea ecx, [ebp - 0x214]
call fcn.004d2e66
lea ecx, [ebp - 0x2ac]
call fcn.004e3a26
push eax
lea ecx, [ebp - 0x214]
call fcn.004e17a1
mov byte [ebp - 4], 0x37
push 0x69c6fc
push 0x69c700
lea eax, [ebp - 0x4f8]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x4f4]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x4f8]
call fcn.004e0a9e
push 0x69c714
push 0x69c718
lea eax, [ebp - 0x504]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x500], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x500]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x504]
call fcn.004e0a9e
push 0x69c730
push 0x69c734
lea eax, [ebp - 0x510]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x50c], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x50c]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x510]
call fcn.004e0a9e
push 0x69c74c
push 0x69c750
lea eax, [ebp - 0x51c]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x518], eax
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x518]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x51c]
call fcn.004e0a9e
push 0x69c768
push 0x69c76c
lea eax, [ebp - 0x528]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x524], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x524]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x528]
call fcn.004e0a9e
push 0x69c788
push 0x69c78c
lea eax, [ebp - 0x534]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x584], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x584]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x534]
call fcn.004e0a9e
push 0x69c7a0
push 0x69c7a4
lea eax, [ebp - 0x540]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x53c]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x540]
call fcn.004e0a9e
push 0x69c7b4
push 0x69c7b8
lea eax, [ebp - 0x54c]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x548], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x548]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x54c]
call fcn.004e0a9e
push 0x69c7d0
push 0x69c7d4
lea eax, [ebp - 0x558]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x554], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x554]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x558]
call fcn.004e0a9e
push 0x69c7e8
push 0x69c7ec
lea eax, [ebp - 0x564]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x560], eax
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x560]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x564]
call fcn.004e0a9e
push 0x69c800
push 0x69c804
lea eax, [ebp - 0x570]
push eax
call fcn.0041cba3
pop ecx
pop ecx
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x56c], eax
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x56c]
call fcn.004e0c90
push eax
lea ecx, [ebp - 0x214]
call fcn.004e357d
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x570]
call fcn.004e0a9e
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x5ac], esp
lea ecx, [ebp - 0x214]
call fcn.004e0c90
push eax
mov ecx, esi
call fcn.004e18af
mov ecx, 0x71a89c
call fcn.004491b4
mov ecx, 0x71a4f4
call fcn.00449f54
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x214]
call fcn.004e0a9e
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x2ac]
call fcn.004e195a
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x218]
call fcn.004e0a9e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x21c]
call fcn.004e0a9e
mov eax, dword [ebp - 0x35c]
call dword [eax + 0x18]
push dword [ebp - 0x37c]
call fcn.0043888d
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004e195a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006486fb
leave
ret 0x18