Function at 0x44616c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x278
mov dword [ebp - 0x14], 0x3ae35568
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x14], 0
jmp 0x446196
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 6
je 0x446414
mov dword [ebp - 0xd4], 0xe3e7631
mov dword [ebp - 0x80], 0x62a04f77
mov dword [ebp - 0x15c], 0x1a83
mov dword [ebp - 0x28], 0
jmp 0x4461cb
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4461e1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x94], 3
jmp 0x4461c4
mov eax, 0x693009c
test eax, eax
je 0x446206
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x94], 0
je 0x446206
mov dword [ebp - 0xf0], 1
jmp 0x44620d
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 2
jl 0x446222
mov dword [ebp - 0x138], 1
jmp 0x446229
and dword [ebp - 0x138], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94]
cmp eax, dword [ebp - 0x138]
je 0x44624a
mov dword [ebp - 0x140], 1
jmp 0x446251
and dword [ebp - 0x140], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x204], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94]
mov dword [ebp - 0x1d0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94]
cmp dword [ebp - 0x140], eax
jle 0x4462aa
mov dword [ebp - 0xfc], 1
jmp 0x4462b1
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0x80], 0x62a4b15
jle 0x4462d2
mov dword [ebp - 0x130], 1
jmp 0x4462d9
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x130], eax
je 0x446322
cmp dword [ebp - 0x15c], 0
jne 0x4462fc
cmp dword [ebp - 0x80], 0
jne 0x4462fc
and dword [ebp - 0xb4], 0
jmp 0x446306
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x80]
add eax, 0x18f8f6a1
je 0x446322
mov dword [ebp - 0x124], 1
jmp 0x446329
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0
jne 0x44633e
mov dword [ebp - 0xbc], 1
jmp 0x446345
and dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 4
jge 0x44635a
mov dword [ebp - 0x104], 1
jmp 0x446361
and dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94]
add eax, dword [ebp - 0x104]
jne 0x44638b
cmp dword [ebp - 0x14], 0
jne 0x44638b
cmp dword [ebp - 0x14], 0
jne 0x44638b
and dword [ebp - 0xc4], 0
jmp 0x446395
mov dword [ebp - 0xc4], 1
cmp dword [ebp - 0xc4], 0xffffffff
ja 0x4463aa
mov dword [ebp - 0x144], 1
jmp 0x4463b1
and dword [ebp - 0x144], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94]
cmp dword [ebp - 0x144], eax
je 0x4463d2
mov dword [ebp - 0xcc], 1
jmp 0x4463d9
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0xcc], eax
jl 0x4463fc
mov eax, 0x8e60
test eax, eax
je 0x4463fc
mov dword [ebp - 0x10c], 1
jmp 0x446403
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xd4], eax
jmp 0x44618f
mov byte [ebp - 0x7c], 0xb
mov byte [ebp - 0x7b], 0x6d
mov byte [ebp - 0x7a], 0x19
mov byte [ebp - 0x79], 0x7d
mov byte [ebp - 0x78], 0xa
mov byte [ebp - 0x77], 0x70
mov byte [ebp - 0x76], 0x18
mov byte [ebp - 0x75], 0x80
mov byte [ebp - 0x74], 0x12
mov byte [ebp - 0x73], 0x7c
mov byte [ebp - 0x72], 4
mov byte [ebp - 0x71], 0x70
mov byte [ebp - 0x70], 9
mov byte [ebp - 0x6f], 0x77
mov byte [ebp - 0x6e], 0x17
mov byte [ebp - 0x6d], 0x87
mov byte [ebp - 0x6c], 0x10
mov byte [ebp - 0x6b], 0x82
mov byte [ebp - 0x6a], 8
mov byte [ebp - 0x69], 0x7c
mov byte [ebp - 0x68], 0xe
mov byte [ebp - 0x67], 0x84
mov byte [ebp - 0x66], 0x16
mov byte [ebp - 0x65], 0x8e
mov byte [ebp - 0x64], 9
mov byte [ebp - 0x63], 0xc2
mov byte [ebp - 0x62], 0xf0
mov byte [ebp - 0x61], 0x39
mov byte [ebp - 0x60], 0x95
mov byte [ebp - 0x5f], 0xcd
mov byte [ebp - 0x5e], 0x6f
mov byte [ebp - 0x5d], 0x19
mov byte [ebp - 0x5c], 0x19
mov byte [ebp - 0x5b], 0xc
mov byte [ebp - 0x5a], 0x86
mov byte [ebp - 0x59], 0xd
mov byte [ebp - 0x58], 0x89
mov byte [ebp - 0x57], 0x15
mov byte [ebp - 0x56], 0x93
mov byte [ebp - 0x55], 2
mov byte [ebp - 0x54], 0x82
mov byte [ebp - 0x53], 3
mov byte [ebp - 0x52], 0x85
mov byte [ebp - 0x51], 0x13
mov byte [ebp - 0x50], 0x97
mov byte [ebp - 0x4f], 0x11
mov byte [ebp - 0x4e], 0x97
mov byte [ebp - 0x4d], 7
mov byte [ebp - 0x4c], 0x8f
mov byte [ebp - 0x4b], 5
mov byte [ebp - 0x4a], 0x8f
mov byte [ebp - 0x49], 1
mov byte [ebp - 0x48], 0x8d
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0x8e
mov byte [ebp - 0x45], 0x14
mov byte [ebp - 0x44], 0xa4
mov byte [ebp - 0x43], 6
mov byte [ebp - 0x42], 0x98
mov byte [ebp - 0x41], 0xf
mov byte [ebp - 0x40], 0xa3
and dword [ebp - 0x18], 0
and dword [ebp - 0x12c], 0
jmp 0x44651d
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x3d
jae 0x446868
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x7c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x446574
push 0x2aeb
push 0x39a5
push 0
push 0x13f2
push 0x352a
push 0x2caa
lea eax, [ebp - 0x12c]
push eax
call fcn.004473c3
add esp, 0x1c
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.004456a0
pop ecx
pop ecx
jmp 0x446515
call fcn.00445cde
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x7b]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x12c]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x34], eax
mov dword [ebp - 8], 0x198a8f93
push 3
lea ecx, [ebp - 0x190]
call fcn.00412f0d
mov dword [ebp - 0x1c], 0x8616691c
push 0x7adf
push 0x1dd8
lea eax, [ebp - 0x1d8]
push eax
push 0x47af
push 0
push 0x2ae5
lea eax, [ebp - 0x190]
push eax
push 0x2936
call fcn.0044720c
add esp, 0x20
cmp dword [ebp - 8], 0
je 0x446777
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x1bc], 4
mov dword [ebp - 0x1b8], 4
mov dword [ebp - 0x1b4], 4
mov dword [ebp - 0x1b0], 4
lea ecx, [ebp - 0x85]
call fcn.0041300a
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x260]
call fcn.0041300d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f8]
call fcn.00412fb9
push 4
lea ecx, [ebp - 0x1c8]
call fcn.00412f0d
mov dword [ebp - 0x180], 0x47d86c3c
push 0
push 0x6c72
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.0044733f
add esp, 0x10
mov dword [ebp - 8], 0
jmp 0x44669c
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x15
jle 0x44674e
mov dword [ebp - 0xdc], 0x607a9881
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x13c], 1
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 8]
push eax
push 0
push 0x78a0
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00447130
add esp, 0x24
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.004459b0
add esp, 0x28
jmp 0x446695
push 0x3226
push 0
call fcn.0044705c
pop ecx
pop ecx
lea ecx, [ebp - 0x1c8]
call fcn.00412fdf
lea ecx, [ebp - 0x1f8]
call fcn.00412fdf
jmp 0x446833
mov dword [ebp - 8], 0xffffffe2
jmp 0x446787
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 6
je 0x44682e
mov dword [ebp - 0xec], 0xb6068be3
mov dword [ebp - 0x38], 0
jmp 0x4467ab
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4467c1
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x224], 0
jmp 0x4467a4
lea eax, [ebp - 0x190]
push eax
push 0x47b3
lea eax, [ebp - 0xec]
push eax
push 0
call fcn.00447008
add esp, 0x10
mov dword [ebp - 0x1c], 0
jmp 0x4467ee
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x2b
jle 0x446829
mov dword [ebp - 0x154], 0x20a61b3e
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xec]
mov dword [ebp + eax - 0x224], ecx
lea eax, [ebp - 0x154]
push eax
push 0x1d7d
push 0
call fcn.00446f76
add esp, 0xc
jmp 0x4467e7
jmp 0x446780
call fcn.00445c27
lea ecx, [ebp - 0x190]
call fcn.00412fdf
cmp dword [ebp - 0x34], 0
jge 0x446851
mov eax, dword [ebp - 0x34]
add eax, 0x100
mov dword [ebp - 0x34], eax
jmp 0x44683e
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x7c]
mov cl, byte [ebp - 0x34]
mov byte [ebp + eax - 0x258], cl
jmp 0x446515
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x258], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x98], 0x85c9e53e
mov dword [ebp - 0x198], 0x1dc7e906
call fcn.00445d77
cmp dword [ebp - 0x10], 0xedcad20
jge 0x4468ab
mov dword [ebp - 0x11c], 1
jmp 0x4468b2
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x10]
jl 0x4468d8
mov dword [ebp - 0xf4], 1
jmp 0x4468df
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x10]
or ecx, 0xffffffff
sub ecx, dword [ebp - 0xf4]
add eax, ecx
je 0x44693e
mov dword [ebp - 0x20], 0
jmp 0x4468ff
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x446915
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x200], 0x3d9b
jmp 0x4468f8
mov dword [ebp - 0x10], 0
jmp 0x446925
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x44693c
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x200], 0
je 0x44693a
jmp 0x44693c
jmp 0x44691e
jmp 0x4469ad
mov dword [ebp - 0x164], 0x82f7
mov dword [ebp - 0x184], 0xefc7127b
mov dword [ebp - 0x16c], 0xd8f3b1ad
mov dword [ebp - 0x19c], 0x12535b5b
mov dword [ebp - 0x168], 0xffff
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00446054
add esp, 0x20
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x278]
call fcn.0041bb26
and dword [ebp - 0x2c], 0
jmp 0x4469cc
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1b
jae 0x4469df
mov eax, dword [ebp - 0x2c]
mov byte [ebp + eax - 0x258], 0
jmp 0x4469c5
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0x1e8], 0xd8bc0d13
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0xf8], 0xaab39e22
mov dword [ebp - 0x174], 0xdae4f9db
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xd0], 6
mov dword [ebp - 0x214], 7
mov dword [ebp - 0x30], 0
jmp 0x446a3f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x446a55
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xa4], 0x50315362
jmp 0x446a38
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
add eax, 0x738f5859
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa4]
jge 0x446aad
mov dword [ebp - 0x134], 1
jmp 0x446ab4
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
sub eax, dword [ebp - 0x174]
cmp eax, 0xa025ec56
je 0x446adc
mov eax, 0x491d
test eax, eax
je 0x446adc
mov dword [ebp - 0xac], 1
jmp 0x446ae3
and dword [ebp - 0xac], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4]
cmp eax, dword [ebp - 0xac]
jne 0x446b08
xor eax, eax
inc eax
je 0x446b08
mov dword [ebp - 0x194], 1
jmp 0x446b0f
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x84], 1
cmp dword [ebp - 0x84], 0xe70
je 0x446b50
mov dword [ebp - 0xb0], 1
jmp 0x446b57
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0xdaba
jle 0x446b6f
mov dword [ebp - 0xc0], 1
jmp 0x446b76
and dword [ebp - 0xc0], 0
mov dword [ebp - 0xb8], 7
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xc0]
jle 0x446b9a
mov dword [ebp - 0xc8], 1
jmp 0x446ba1
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4]
cmp dword [ebp - 0xd0], eax
jne 0x446bcd
mov dword [ebp - 0xd8], 1
jmp 0x446bd4
and dword [ebp - 0xd8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xd8]
sub ecx, dword [ebp + eax - 0xa4]
push 4
pop eax
shl eax, 1
imul ecx, dword [ebp + eax - 0xa4]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xa4]
jle 0x446c14
cmp dword [ebp - 0x84], 0
jne 0x446c14
and dword [ebp - 0xe0], 0
jmp 0x446c1e
mov dword [ebp - 0xe0], 1
cmp dword [ebp - 0xe0], 0xfbc6
jne 0x446c36
mov dword [ebp - 0xe8], 1
jmp 0x446c3d
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0x1c17
jl 0x446c61
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa4], 0
jne 0x446c61
and dword [ebp - 0xa8], 0
jmp 0x446c6b
mov dword [ebp - 0xa8], 1
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xf8], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa4], 0xfffffff9
push 0xa9d51a
lea ecx, [ebp - 0x23c]
call fcn.0041bb26
mov dword [ebp - 0xc], 0x2e91a04
mov dword [ebp - 0x3c], 0
jmp 0x446cae
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x446cc4
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1a8], 0xc6548aab
jmp 0x446ca7
mov dword [ebp - 0xc], 0
jmp 0x446cd4
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x15
jle 0x446cf3
mov dword [ebp - 0x17c], 0x22124f84
lea eax, [ebp - 0x17c]
push eax
call fcn.00445c46
pop ecx
jmp 0x446ccd
mov dword [ebp - 0xc], 0xffffffef
jmp 0x446d03
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffed
jge 0x446ee7
mov dword [ebp - 4], 0x9dce
mov dword [ebp - 0x24], 0xfffffffb
push 3
lea ecx, [ebp - 0x150]
call fcn.00412f0d
mov dword [ebp - 0x158], 0xec0dcee0
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.00419775
pop ecx
pop ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 4], 0
jne 0x446d5a
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xc]
cmp dword [ebp - 4], eax
jg 0x446d72
mov dword [ebp - 0x100], 1
jmp 0x446d79
and dword [ebp - 0x100], 0
push 1
lea ecx, [ebp - 0x150]
call fcn.00412ffb
mov ecx, dword [ebp - 0x100]
imul ecx, dword [eax]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x108], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x1a8], ecx
mov eax, dword [ebp - 0x108]
sub eax, 0x2151
cmp eax, dword [ebp - 0xc]
jle 0x446dd9
push 1
lea ecx, [ebp - 0x150]
call fcn.00412ffb
cmp dword [eax], 0
jne 0x446dd9
and dword [ebp - 0x110], 0
jmp 0x446de3
mov dword [ebp - 0x110], 1
cmp dword [ebp - 0x110], 1
jle 0x446df8
mov dword [ebp - 0x118], 1
jmp 0x446dff
and dword [ebp - 0x118], 0
push 2
lea ecx, [ebp - 0x150]
call fcn.00412ffb
mov ecx, dword [ebp - 0x118]
cmp ecx, dword [eax]
jg 0x446e28
cmp dword [ebp - 0x24], 0
je 0x446e28
mov dword [ebp - 0x120], 1
jmp 0x446e2f
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x120], eax
jl 0x446eb7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8], 0
je 0x446eb7
call fcn.00445bb1
mov dword [ebp - 4], 0
jmp 0x446e62
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x446eb5
push dword [ebp - 4]
lea ecx, [ebp - 0x150]
call fcn.00412ffb
cmp dword [eax], 0
je 0x446e7d
jmp 0x446eb5
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x1a8], 0
jne 0x446e99
cmp dword [ebp - 0x24], 0
jne 0x446e99
and dword [ebp - 0x128], 0
jmp 0x446ea3
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1a8], ecx
jmp 0x446e5b
jmp 0x446ed7
mov dword [ebp - 0x160], 0x42796a45
cmp dword [ebp - 0x160], 0
je 0x446ed7
lea ecx, [ebp - 0x150]
call fcn.00412fdf
jmp 0x446ee7
lea ecx, [ebp - 0x150]
call fcn.00412fdf
jmp 0x446cfc
call fcn.00445f7c
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.0044610f
add esp, 0x10
lea eax, [ebp - 0x23c]
push eax
mov ecx, dword [ebp + 8]
call fcn.00412dfb
lea ecx, [ebp - 0x23c]
call fcn.00412e63
lea ecx, [ebp - 0x278]
call fcn.00412e63
mov eax, dword [ebp + 8]
mov esp, ebp
pop ebp
ret