Function at 0x44e4f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4627a1
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1b10
call fcn.0045c990
mov eax, dword [0x473090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 3
mov byte [ebp - 4], 4
mov dword [ebp - 0x10a4], 0
mov dword [ebp - 0x10b8], 0
push 0x3c
push 0x64
call fcn.00407520
add esp, 8
mov dword [ebp - 0x17f8], eax
cmp dword [ebp - 0x17f8], 0x1770
jne 0x44e57c
call fcn.004048e0
mov dword [ebp - 0x17fc], eax
cmp dword [ebp - 0x17fc], 0
je 0x44e57c
call fcn.00420560
call fcn.00405310
mov dword [ebp - 0x1800], eax
mov eax, dword [ebp - 0x1800]
mov dword [ebp - 0x1804], eax
cmp dword [ebp - 0x1804], 1
je 0x44e59e
jmp 0x44e5a8
call fcn.00424de0
call fcn.004205b0
mov dword [ebp - 0x10a8], 0
push 1
push 3
lea ecx, [ebp - 0xa0]
call dword [0x4641fc]
mov dword [ebp - 0x1808], eax
mov byte [ebp - 4], 5
mov byte [ebp - 0x10a0], 0
push 0xff5
push 0
lea ecx, [ebp - 0x109f]
push ecx
call fcn.0045c8b6
add esp, 0xc
mov dword [ebp - 0x10b0], 0xff6
push 0x73
push 0x37
call fcn.004071d0
add esp, 8
mov dword [ebp - 0x180c], eax
cmp dword [ebp - 0x180c], 0xe6
jne 0x44e62a
call fcn.00405210
mov dword [ebp - 0x1810], eax
cmp dword [ebp - 0x1810], 0
je 0x44e62a
call fcn.004207f0
call fcn.00404860
mov dword [ebp - 0x1814], eax
cmp dword [ebp - 0x1814], 0
je 0x44e666
push 0xa8
push 0x36
call fcn.00407520
add esp, 8
mov dword [ebp - 0x1818], eax
cmp dword [ebp - 0x1818], 0x2370
jge 0x44e666
call fcn.00420b90
jmp 0x44e691
push 0xaf
push 0xc7
call fcn.00407520
add esp, 8
mov dword [ebp - 0x181c], eax
cmp dword [ebp - 0x181c], 0x8809
jne 0x44e68c
jmp 0x44e691
call fcn.00420cc0
push 0
push 0
push 0
push 0
push 0x4682b8
call dword [0x4643b8]
mov dword [ebp - 0x10a4], eax
cmp dword [ebp - 0x10a4], 0
jne 0x44e821
lea edx, [ebp - 0x1120]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1104], esp
push 0x17
push 0x4682bc
call dword [0x4641b4]
mov dword [ebp - 0x1820], eax
lea ecx, [ebp - 0x1100]
call fcn.00402f50
mov dword [ebp - 0x1824], eax
mov eax, dword [ebp - 0x1824]
mov dword [ebp - 0x1828], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1828]
call fcn.00403370
mov dword [ebp - 0x182c], eax
mov ecx, dword [ebp - 0x182c]
mov dword [ebp - 0x1830], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1830]
call dword [0x464180]
mov dword [ebp - 0x1834], eax
mov edx, dword [ebp - 0x1834]
push edx
lea ecx, [ebp - 0x10e0]
call dword [0x464178]
mov dword [ebp - 0x1838], eax
mov eax, dword [ebp - 0x1838]
mov dword [ebp - 0x183c], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x183c]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x10e0]
call dword [0x464174]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1120]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1100]
call fcn.00445e30
mov dword [ebp - 0x1124], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x1124]
jmp 0x450299
lea ecx, [ebp + 8]
call dword [0x464180]
mov dword [ebp - 0x1848], eax
push 1
push 0
push 3
push 0
push 0
push 0x50
mov eax, dword [ebp - 0x1848]
push eax
mov ecx, dword [ebp - 0x10a4]
push ecx
call dword [0x4643cc]
mov dword [ebp - 0x10b8], eax
cmp dword [ebp - 0x10b8], 0
jne 0x44ea14
lea edx, [ebp - 0x10a8]
push edx
lea eax, [ebp - 0x10b8]
push eax
lea ecx, [ebp - 0x10a4]
push ecx
call fcn.0044d010
add esp, 0xc
call fcn.004047e0
mov dword [ebp - 0x184c], eax
cmp dword [ebp - 0x184c], 0
je 0x44e89e
call fcn.0041bda0
call fcn.004210b0
lea edx, [ebp - 0x1180]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1164], esp
push 0x17
push 0x4682d4
call dword [0x4641b4]
mov dword [ebp - 0x1850], eax
lea ecx, [ebp - 0x1160]
call fcn.00402f50
mov dword [ebp - 0x1854], eax
mov eax, dword [ebp - 0x1854]
mov dword [ebp - 0x1858], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1858]
call fcn.00403370
mov dword [ebp - 0x185c], eax
mov ecx, dword [ebp - 0x185c]
mov dword [ebp - 0x1860], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1860]
call dword [0x464180]
mov dword [ebp - 0x1864], eax
mov edx, dword [ebp - 0x1864]
push edx
lea ecx, [ebp - 0x1140]
call dword [0x464178]
mov dword [ebp - 0x1868], eax
mov eax, dword [ebp - 0x1868]
mov dword [ebp - 0x186c], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x186c]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1140]
call dword [0x464174]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1180]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1160]
call fcn.00445e30
mov dword [ebp - 0x1184], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x1184]
jmp 0x450299
lea eax, [ebp - 0x11c8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x11ac], esp
push 0xf
push 0x4682ec
call dword [0x4641b4]
mov dword [ebp - 0x1878], eax
lea ecx, [ebp - 0x11a8]
call fcn.00402f50
mov dword [ebp - 0x187c], eax
mov ecx, dword [ebp - 0x187c]
mov dword [ebp - 0x1880], ecx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1880]
call fcn.00403100
mov dword [ebp - 0x1884], eax
mov edx, dword [ebp - 0x1884]
mov dword [ebp - 0x1888], edx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x1888]
call dword [0x464180]
mov dword [ebp - 0x188c], eax
mov eax, dword [ebp - 0x188c]
push eax
call fcn.0045c97e
add esp, 4
add eax, 1
push eax
call fcn.0045c84a
add esp, 4
mov dword [ebp - 0x1890], eax
mov ecx, dword [ebp - 0x1890]
mov dword [ebp - 0x1188], ecx
mov edx, dword [ebp - 0x1188]
mov dword [ebp - 0x10b4], edx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x11c8]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11a8]
call fcn.00445e30
lea eax, [ebp - 0x1208]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x11ec], esp
push 0xf
push 0x4682fc
call dword [0x4641b4]
mov dword [ebp - 0x1894], eax
lea ecx, [ebp - 0x11e8]
call fcn.00402f50
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov dword [ebp - 0x189c], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x189c]
call fcn.00403100
mov dword [ebp - 0x18a0], eax
mov edx, dword [ebp - 0x18a0]
mov dword [ebp - 0x18a4], edx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x18a4]
call dword [0x464180]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ebp - 0x18a8]
push eax
call fcn.0045c97e
add esp, 4
add eax, 1
push eax
push 0
mov ecx, dword [ebp - 0x10b4]
push ecx
call fcn.0045c8b6
add esp, 0xc
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1208]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11e8]
call fcn.00445e30
push 0x49
call fcn.004040b0
add esp, 4
mov dword [ebp - 0x18ac], eax
cmp dword [ebp - 0x18ac], 0x6f
jne 0x44ebd3
call fcn.00403730
mov dword [ebp - 0x18b0], eax
cmp dword [ebp - 0x18b0], 0
je 0x44ebd3
call fcn.0040d550
lea edx, [ebp - 0x1248]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x122c], esp
push 0xf
push 0x46830c
call dword [0x4641b4]
mov dword [ebp - 0x18b4], eax
lea ecx, [ebp - 0x1228]
call fcn.00402f50
mov dword [ebp - 0x18b8], eax
mov eax, dword [ebp - 0x18b8]
mov dword [ebp - 0x18bc], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x18bc]
call fcn.00403100
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x18c0]
mov dword [ebp - 0x18c4], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x18c4]
call dword [0x464180]
mov dword [ebp - 0x18c8], eax
mov edx, dword [ebp - 0x18c8]
push edx
mov eax, dword [ebp - 0x10b4]
push eax
call fcn.0045c9bc
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1248]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1228]
call fcn.00445e30
push 0x6c
push 0xb4
call fcn.004071d0
add esp, 8
mov dword [ebp - 0x18cc], eax
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x18d0], ecx
cmp dword [ebp - 0x18d0], 0x36
je 0x44ecad
jmp 0x44ecaf
jmp 0x44ecb9
call fcn.00423710
call fcn.0040d550
push 1
push 0x84403000
lea edx, [ebp - 0x10b4]
push edx
push 0
push 0
lea ecx, [ebp + 0x24]
call dword [0x464180]
mov dword [ebp - 0x18d4], eax
mov eax, dword [ebp - 0x18d4]
push eax
lea ecx, [ebp - 0x1288]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x126c], esp
push 4
push 0x46831c
call dword [0x4641b4]
mov dword [ebp - 0x18d8], eax
lea ecx, [ebp - 0x1268]
call fcn.00402f50
mov dword [ebp - 0x18dc], eax
mov edx, dword [ebp - 0x18dc]
mov dword [ebp - 0x18e0], edx
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x18e0]
call fcn.00403560
mov dword [ebp - 0x18e4], eax
mov eax, dword [ebp - 0x18e4]
mov dword [ebp - 0x18e8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x18e8]
call dword [0x464180]
mov dword [ebp - 0x18ec], eax
mov ecx, dword [ebp - 0x18ec]
push ecx
mov edx, dword [ebp - 0x10b8]
push edx
call dword [0x4643d8]
mov dword [ebp - 0x10a8], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1288]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1268]
call fcn.00445e30
mov eax, dword [ebp - 0x10b4]
mov dword [ebp - 0x128c], eax
mov ecx, dword [ebp - 0x128c]
push ecx
call fcn.0045c984
add esp, 4
cmp dword [ebp - 0x10a8], 0
jne 0x44ef6d
lea edx, [ebp - 0x10a8]
push edx
lea eax, [ebp - 0x10b8]
push eax
lea ecx, [ebp - 0x10a4]
push ecx
call fcn.0044d010
add esp, 0xc
lea edx, [ebp - 0x12e8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x12cc], esp
push 0x17
push 0x468324
call dword [0x4641b4]
mov dword [ebp - 0x18f0], eax
lea ecx, [ebp - 0x12c8]
call fcn.00402f50
mov dword [ebp - 0x18f4], eax
mov eax, dword [ebp - 0x18f4]
mov dword [ebp - 0x18f8], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x18f8]
call fcn.00403100
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1900], ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1900]
call dword [0x464180]
mov dword [ebp - 0x1904], eax
mov edx, dword [ebp - 0x1904]
push edx
lea ecx, [ebp - 0x12a8]
call dword [0x464178]
mov dword [ebp - 0x1908], eax
mov eax, dword [ebp - 0x1908]
mov dword [ebp - 0x190c], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x190c]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x12a8]
call dword [0x464174]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x12e8]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x12c8]
call fcn.00445e30
mov dword [ebp - 0x12ec], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x12ec]
jmp 0x450299
lea ecx, [ebp + 0x40]
call dword [0x464198]
mov dword [ebp - 0x191c], eax
mov eax, dword [ebp - 0x191c]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x10ac], 0
lea ecx, [ebp - 0xa0]
test ecx, ecx
je 0x44efad
lea edx, [ebp - 0xa0]
add edx, 8
mov dword [ebp - 0x1920], edx
jmp 0x44efb7
mov dword [ebp - 0x1920], 0
lea eax, [ebp - 0x132c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1310], esp
push 4
push 0x46833c
call dword [0x4641b4]
mov dword [ebp - 0x1924], eax
lea ecx, [ebp - 0x130c]
call fcn.00402f50
mov dword [ebp - 0x1928], eax
mov ecx, dword [ebp - 0x1928]
mov dword [ebp - 0x192c], ecx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x192c]
call fcn.00403560
mov dword [ebp - 0x1930], eax
mov edx, dword [ebp - 0x1930]
mov dword [ebp - 0x1934], edx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x1934]
call dword [0x464180]
mov dword [ebp - 0x1938], eax
mov eax, dword [ebp - 0x1938]
push eax
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x136c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1350], esp
push 0x43
push 0x468348
call dword [0x4641b4]
mov dword [ebp - 0x193c], eax
lea ecx, [ebp - 0x134c]
call fcn.00402f50
mov dword [ebp - 0x1940], eax
mov eax, dword [ebp - 0x1940]
mov dword [ebp - 0x1944], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x1944]
call fcn.004031c0
mov dword [ebp - 0x1948], eax
mov ecx, dword [ebp - 0x1948]
mov dword [ebp - 0x194c], ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x194c]
call dword [0x464180]
mov dword [ebp - 0x1950], eax
mov edx, dword [ebp - 0x1950]
push edx
lea eax, [ebp - 0x13ac]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1390], esp
push 0xf
push 0x46838c
call dword [0x4641b4]
mov dword [ebp - 0x1954], eax
lea ecx, [ebp - 0x138c]
call fcn.00402f50
mov dword [ebp - 0x1958], eax
mov ecx, dword [ebp - 0x1958]
mov dword [ebp - 0x195c], ecx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x195c]
call fcn.00403100
mov dword [ebp - 0x1960], eax
mov edx, dword [ebp - 0x1960]
mov dword [ebp - 0x1964], edx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x1964]
call dword [0x464180]
mov dword [ebp - 0x1968], eax
mov eax, dword [ebp - 0x1968]
push eax
mov ecx, dword [ebp - 0x1920]
push ecx
call fcn.004583a0
add esp, 8
mov dword [ebp - 0x196c], eax
mov edx, dword [ebp - 0x196c]
push edx
call fcn.004583a0
add esp, 8
mov dword [ebp - 0x1970], eax
mov ecx, dword [ebp - 0x1970]
call dword [0x464210]
mov dword [ebp - 0x1974], eax
mov eax, dword [ebp - 0x1974]
push eax
call fcn.004583a0
add esp, 8
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x13ac]
call dword [0x464174]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x138c]
call fcn.00445e30
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x136c]
call dword [0x464174]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x134c]
call fcn.00445e30
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x132c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x130c]
call fcn.00445e30
call fcn.00404760
mov dword [ebp - 0x1978], eax
mov ecx, dword [ebp - 0x1978]
mov dword [ebp - 0x197c], ecx
cmp dword [ebp - 0x197c], 1
je 0x44f208
jmp 0x44f212
call fcn.00421360
call fcn.00424de0
lea ecx, [ebp + 0x40]
call dword [0x464180]
mov dword [ebp - 0x1980], eax
lea edx, [ebp - 0x13c8]
push edx
lea ecx, [ebp - 0xa0]
call dword [0x464148]
mov dword [ebp - 0x1984], eax
mov eax, dword [ebp - 0x1984]
mov dword [ebp - 0x1988], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1988]
call dword [0x464180]
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0xa4]
push ecx
mov edx, dword [ebp - 0x1980]
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x198c]
push eax
mov ecx, dword [ebp - 0x10a8]
push ecx
call dword [0x4643c4]
mov dword [ebp - 0x10ac], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x13c8]
call dword [0x464174]
cmp dword [ebp - 0x10ac], 0
jne 0x44f497
call dword [0x464090]
cmp eax, 0x2f0d
jne 0x44f497
lea edx, [ebp - 0x1424]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1408], esp
push 0x1b
push 0x46839c
call dword [0x4641b4]
mov dword [ebp - 0x1990], eax
lea ecx, [ebp - 0x1404]
call fcn.00402f50
mov dword [ebp - 0x1994], eax
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x1998], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1998]
call fcn.00403370
mov dword [ebp - 0x199c], eax
mov ecx, dword [ebp - 0x199c]
mov dword [ebp - 0x19a0], ecx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x19a0]
call dword [0x464180]
mov dword [ebp - 0x19a4], eax
mov edx, dword [ebp - 0x19a4]
push edx
lea ecx, [ebp - 0x13e4]
call dword [0x464178]
mov dword [ebp - 0x19a8], eax
mov eax, dword [ebp - 0x19a8]
mov dword [ebp - 0x19ac], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x19ac]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x13e4]
call dword [0x464174]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1424]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1404]
call fcn.00445e30
mov dword [ebp - 0x10c0], 4
lea edx, [ebp - 0x10c0]
push edx
lea eax, [ebp - 0x10c4]
push eax
push 0x1f
mov ecx, dword [ebp - 0x10a8]
push ecx
call dword [0x4643c0]
mov edx, dword [ebp - 0x10c4]
or edx, 0x100
mov dword [ebp - 0x10c4], edx
push 4
lea eax, [ebp - 0x10c4]
push eax
push 0x1f
mov ecx, dword [ebp - 0x10a8]
push ecx
call dword [0x4643bc]
call fcn.004046f0
mov dword [ebp - 0x19b0], eax
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x19b4], edx
cmp dword [ebp - 0x19b4], 1
je 0x44f409
jmp 0x44f413
call fcn.004213b0
call fcn.004205b0
lea ecx, [ebp + 0x40]
call dword [0x464180]
mov dword [ebp - 0x19b8], eax
lea eax, [ebp - 0x1440]
push eax
lea ecx, [ebp - 0xa0]
call dword [0x464148]
mov dword [ebp - 0x19bc], eax
mov ecx, dword [ebp - 0x19bc]
mov dword [ebp - 0x19c0], ecx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x19c0]
call dword [0x464180]
mov dword [ebp - 0x19c4], eax
mov edx, dword [ebp - 0xa4]
push edx
mov eax, dword [ebp - 0x19b8]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x19c4]
push ecx
mov edx, dword [ebp - 0x10a8]
push edx
call dword [0x4643c4]
mov dword [ebp - 0x10ac], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1440]
call dword [0x464174]
cmp dword [ebp - 0x10ac], 0
jne 0x44f7db
lea eax, [ebp - 0x10a8]
push eax
lea ecx, [ebp - 0x10b8]
push ecx
lea edx, [ebp - 0x10a4]
push edx
call fcn.0044d010
add esp, 0xc
push 0x4683b8
lea ecx, [ebp - 0x145c]
call dword [0x464178]
mov dword [ebp - 0x19c8], eax
mov eax, dword [ebp - 0x19c8]
mov dword [ebp - 0x19cc], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x19cc]
push ecx
lea edx, [ebp + 0x24]
push edx
push 0x4683bc
lea ecx, [ebp - 0x1478]
call dword [0x464178]
mov dword [ebp - 0x19d0], eax
mov eax, dword [ebp - 0x19d0]
mov dword [ebp - 0x19d4], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x19d4]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x14d4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14b8], esp
push 0x1b
push 0x4683c0
call dword [0x4641b4]
mov dword [ebp - 0x19d8], eax
lea ecx, [ebp - 0x14b4]
call fcn.00402f50
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x19e0], ecx
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x19e0]
call fcn.004031c0
mov dword [ebp - 0x19e4], eax
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x19e8], edx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x19e8]
call dword [0x464180]
mov dword [ebp - 0x19ec], eax
mov eax, dword [ebp - 0x19ec]
push eax
lea ecx, [ebp - 0x1494]
call dword [0x464178]
mov dword [ebp - 0x19f0], eax
mov ecx, dword [ebp - 0x19f0]
mov dword [ebp - 0x19f4], ecx
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x19f4]
push edx
lea eax, [ebp - 0x14f0]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x19f8], eax
mov ecx, dword [ebp - 0x19f8]
mov dword [ebp - 0x19fc], ecx
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x19fc]
push edx
lea eax, [ebp - 0x150c]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a00], eax
mov ecx, dword [ebp - 0x1a00]
mov dword [ebp - 0x1a04], ecx
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x1a04]
push edx
lea eax, [ebp - 0x1528]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a08], eax
mov ecx, dword [ebp - 0x1a08]
mov dword [ebp - 0x1a0c], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x1a0c]
push edx
lea eax, [ebp - 0x1544]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a10], eax
mov ecx, dword [ebp - 0x1a10]
mov dword [ebp - 0x1a14], ecx
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1a14]
push edx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1544]
call dword [0x464174]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1528]
call dword [0x464174]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x150c]
call dword [0x464174]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x14f0]
call dword [0x464174]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1494]
call dword [0x464174]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x14d4]
call dword [0x464174]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x14b4]
call fcn.00445e30
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1478]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x145c]
call dword [0x464174]
mov dword [ebp - 0x1548], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x1548]
jmp 0x450299
mov dword [ebp - 0x10b0], 0xff6
push 0xd1
push 0xf
call fcn.004071d0
add esp, 8
mov dword [ebp - 0x1a28], eax
cmp dword [ebp - 0x1a28], 0x1a2
jne 0x44f81f
call fcn.004045f0
mov dword [ebp - 0x1a2c], eax
cmp dword [ebp - 0x1a2c], 0
je 0x44f81f
call fcn.00421530
mov edx, dword [ebp - 0x10b0]
push edx
push 0
lea eax, [ebp - 0x10a0]
push eax
call fcn.0045c8b6
add esp, 0xc
push 0
lea ecx, [ebp - 0x10b0]
push ecx
lea edx, [ebp - 0x10a0]
push edx
push 0x13
mov eax, dword [ebp - 0x10a8]
push eax
call dword [0x4643c8]
test eax, eax
je 0x44fb9b
movsx ecx, byte [ebp - 0x10a0]
cmp ecx, 0x32
je 0x44fb9b
lea edx, [ebp - 0x10a8]
push edx
lea eax, [ebp - 0x10b8]
push eax
lea ecx, [ebp - 0x10a4]
push ecx
call fcn.0044d010
add esp, 0xc
call fcn.004058f0
mov dword [ebp - 0x1a30], eax
cmp dword [ebp - 0x1a30], 0
je 0x44f8a9
call fcn.00421660
call fcn.00422f50
push 0x4683dc
lea ecx, [ebp - 0x1564]
call dword [0x464178]
mov dword [ebp - 0x1a34], eax
mov edx, dword [ebp - 0x1a34]
mov dword [ebp - 0x1a38], edx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x1a38]
push eax
lea ecx, [ebp + 0x24]
push ecx
push 0x4683e0
lea ecx, [ebp - 0x1580]
call dword [0x464178]
mov dword [ebp - 0x1a3c], eax
mov edx, dword [ebp - 0x1a3c]
mov dword [ebp - 0x1a40], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x1a40]
push eax
lea ecx, [ebp - 0x10a0]
push ecx
lea ecx, [ebp - 0x159c]
call dword [0x464178]
mov dword [ebp - 0x1a44], eax
mov edx, dword [ebp - 0x1a44]
mov dword [ebp - 0x1a48], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x1a48]
push eax
lea ecx, [ebp - 0x15f8]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x15dc], esp
push 0x1d
push 0x4683e4
call dword [0x4641b4]
mov dword [ebp - 0x1a4c], eax
lea ecx, [ebp - 0x15d8]
call fcn.00402f50
mov dword [ebp - 0x1a50], eax
mov edx, dword [ebp - 0x1a50]
mov dword [ebp - 0x1a54], edx
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x1a54]
call fcn.00403100
mov dword [ebp - 0x1a58], eax
mov eax, dword [ebp - 0x1a58]
mov dword [ebp - 0x1a5c], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x1a5c]
call dword [0x464180]
mov dword [ebp - 0x1a60], eax
mov ecx, dword [ebp - 0x1a60]
push ecx
lea ecx, [ebp - 0x15b8]
call dword [0x464178]
mov dword [ebp - 0x1a64], eax
mov edx, dword [ebp - 0x1a64]
mov dword [ebp - 0x1a68], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x1a68]
push eax
lea ecx, [ebp - 0x1614]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a6c], eax
mov edx, dword [ebp - 0x1a6c]
mov dword [ebp - 0x1a70], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x1a70]
push eax
lea ecx, [ebp - 0x1630]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a74], eax
mov edx, dword [ebp - 0x1a74]
mov dword [ebp - 0x1a78], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x1a78]
push eax
lea ecx, [ebp - 0x164c]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a7c], eax
mov edx, dword [ebp - 0x1a7c]
mov dword [ebp - 0x1a80], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x1a80]
push eax
lea ecx, [ebp - 0x1668]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1a84], eax
mov edx, dword [ebp - 0x1a84]
mov dword [ebp - 0x1a88], edx
mov byte [ebp - 4], 0x34
mov eax, dword [ebp - 0x1a88]
push eax
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1668]
call dword [0x464174]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x164c]
call dword [0x464174]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1630]
call dword [0x464174]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1614]
call dword [0x464174]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x15b8]
call dword [0x464174]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x15f8]
call dword [0x464174]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x15d8]
call fcn.00445e30
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x159c]
call dword [0x464174]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1580]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1564]
call dword [0x464174]
mov dword [ebp - 0x166c], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x166c]
jmp 0x450299
mov dword [ebp - 0x10b0], 0xff6
mov byte [ebp - 4], 0x35
call fcn.00404990
jmp 0x44fbc7
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x10b0]
push ecx
push 0
lea edx, [ebp - 0x10a0]
push edx
call fcn.0045c8b6
add esp, 0xc
lea ecx, [ebp + 0x5c]
call dword [0x464198]
mov dword [ebp - 0x1a8c], eax
cmp dword [ebp - 0x1a8c], 0
jbe 0x44ff7c
push 0
lea eax, [ebp - 0x10b0]
push eax
lea ecx, [ebp - 0x10a0]
push ecx
push 1
mov edx, dword [ebp - 0x10a8]
push edx
call dword [0x4643c8]
test eax, eax
je 0x44ff7c
lea ecx, [ebp + 0x5c]
call dword [0x464198]
mov dword [ebp - 0x1a90], eax
lea ecx, [ebp + 0x5c]
call dword [0x464180]
mov dword [ebp - 0x1a94], eax
mov eax, dword [ebp - 0x1a90]
push eax
mov ecx, dword [ebp - 0x1a94]
push ecx
lea edx, [ebp - 0x10a0]
push edx
call dword [0x4642cc]
add esp, 0xc
test eax, eax
je 0x44ff7c
lea eax, [ebp - 0x10a8]
push eax
lea ecx, [ebp - 0x10b8]
push ecx
lea edx, [ebp - 0x10a4]
push edx
call fcn.0044d010
add esp, 0xc
push 0x468404
lea ecx, [ebp - 0x1688]
call dword [0x464178]
mov dword [ebp - 0x1a98], eax
mov eax, dword [ebp - 0x1a98]
mov dword [ebp - 0x1a9c], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x1a9c]
push ecx
lea edx, [ebp + 0x24]
push edx
push 0x468408
lea ecx, [ebp - 0x16a4]
call dword [0x464178]
mov dword [ebp - 0x1aa0], eax
mov eax, dword [ebp - 0x1aa0]
mov dword [ebp - 0x1aa4], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x1aa4]
push ecx
lea edx, [ebp - 0x10a0]
push edx
lea ecx, [ebp - 0x16c0]
call dword [0x464178]
mov dword [ebp - 0x1aa8], eax
mov eax, dword [ebp - 0x1aa8]
mov dword [ebp - 0x1aac], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x1aac]
push ecx
lea edx, [ebp - 0x171c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1700], esp
push 0x1d
push 0x46840c
call dword [0x4641b4]
mov dword [ebp - 0x1ab0], eax
lea ecx, [ebp - 0x16fc]
call fcn.00402f50
mov dword [ebp - 0x1ab4], eax
mov eax, dword [ebp - 0x1ab4]
mov dword [ebp - 0x1ab8], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x1ab8]
call fcn.00403370
mov dword [ebp - 0x1abc], eax
mov ecx, dword [ebp - 0x1abc]
mov dword [ebp - 0x1ac0], ecx
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x1ac0]
call dword [0x464180]
mov dword [ebp - 0x1ac4], eax
mov edx, dword [ebp - 0x1ac4]
push edx
lea ecx, [ebp - 0x16dc]
call dword [0x464178]
mov dword [ebp - 0x1ac8], eax
mov eax, dword [ebp - 0x1ac8]
mov dword [ebp - 0x1acc], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x1acc]
push ecx
lea edx, [ebp - 0x1738]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1ad0], eax
mov eax, dword [ebp - 0x1ad0]
mov dword [ebp - 0x1ad4], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x1ad4]
push ecx
lea edx, [ebp - 0x1754]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1ad8], eax
mov eax, dword [ebp - 0x1ad8]
mov dword [ebp - 0x1adc], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x1adc]
push ecx
lea edx, [ebp - 0x1770]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1ae0], eax
mov eax, dword [ebp - 0x1ae0]
mov dword [ebp - 0x1ae4], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x1ae4]
push ecx
lea edx, [ebp - 0x178c]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x1ae8], eax
mov eax, dword [ebp - 0x1ae8]
mov dword [ebp - 0x1aec], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x1aec]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x178c]
call dword [0x464174]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1770]
call dword [0x464174]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1754]
call dword [0x464174]
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1738]
call dword [0x464174]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x16dc]
call dword [0x464174]
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x171c]
call dword [0x464174]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x16fc]
call fcn.00445e30
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x16c0]
call dword [0x464174]
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x16a4]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1688]
call dword [0x464174]
mov dword [ebp - 0x1790], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x1790]
jmp 0x450299
mov ecx, dword [ebp + 0x78]
call dword [0x46420c]
call fcn.00407f50
mov dword [ebp - 0x1af0], eax
mov edx, dword [ebp - 0x1af0]
mov dword [ebp - 0x1af4], edx
cmp dword [ebp - 0x1af4], 1
je 0x44ffa7
jmp 0x44ffb1
call fcn.00421b30
call fcn.00424de0
mov dword [ebp - 0x10bc], 0
mov dword [ebp - 0x10b0], 0xff6
mov eax, dword [ebp - 0x10b0]
push eax
push 0
lea ecx, [ebp - 0x10a0]
push ecx
call fcn.0045c8b6
add esp, 0xc
push 0x10
call fcn.004040b0
add esp, 4
mov dword [ebp - 0x1af8], eax
cmp dword [ebp - 0x1af8], 0x1a
jne 0x45000f
call fcn.00407dc0
mov dword [ebp - 0x1afc], eax
cmp dword [ebp - 0x1afc], 0
je 0x45000f
call fcn.00422f50
lea edx, [ebp - 0x10bc]
push edx
mov eax, dword [ebp - 0x10b0]
sub eax, 1
push eax
lea ecx, [ebp - 0x10a0]
push ecx
mov edx, dword [ebp - 0x10a8]
push edx
call dword [0x4643d0]
mov dword [ebp - 0x10ac], eax
cmp dword [ebp - 0x10ac], 0
je 0x45008c
cmp dword [ebp - 0x10bc], 0
jbe 0x45008c
mov eax, dword [ebp - 0x10bc]
push eax
lea ecx, [ebp - 0x10a0]
push ecx
mov ecx, dword [ebp + 0x78]
call dword [0x46422c]
mov byte [ebp - 4], 0x41
call fcn.00405490
jmp 0x450085
mov dword [ebp - 4], 5
cmp dword [ebp - 0x10ac], 1
jne 0x4500a2
cmp dword [ebp - 0x10bc], 0
ja 0x45000f
push 0x32
push 0x78
call fcn.00407520
add esp, 8
mov dword [ebp - 0x1b00], eax
cmp dword [ebp - 0x1b00], 0x1770
jne 0x4500d9
call fcn.00404570
mov dword [ebp - 0x1b04], eax
cmp dword [ebp - 0x1b04], 0
je 0x4500d9
call fcn.00421c60
lea edx, [ebp - 0x10a8]
push edx
lea eax, [ebp - 0x10b8]
push eax
lea ecx, [ebp - 0x10a4]
push ecx
call fcn.0044d010
add esp, 0xc
mov dword [ebp - 0x1794], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call dword [0x4641f0]
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x24]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x40]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call dword [0x464174]
mov eax, dword [ebp - 0x1794]
jmp 0x450299
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045c8a0
mov esp, ebp
pop ebp
ret