Function at 0x43f620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6375b1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8bc
mov dword [ebp - 0x730], ecx
mov dword [ebp - 0x72c], 0
mov eax, dword [ebp + 0x20]
add eax, dword [ebp + 0x2c]
mov ecx, dword [ebp - 0x730]
mov dword [ecx + 0x1a60], eax
lea ecx, [ebp - 0x218]
call fcn.00404a30
mov dword [ebp - 4], 0
mov edx, dword [ebp + 8]
push edx
push 0x6611d0
lea eax, [ebp - 0x658]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x734]
mov dword [ebp - 0x738], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x738]
call fcn.00404a70
push eax
lea edx, [ebp - 0x218]
push edx
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x658]
call fcn.00404a50
lea ecx, [ebp - 0x218]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0xcb0
mov eax, dword [ebp - 0x730]
mov edx, dword [eax + 0xcb0]
mov eax, dword [edx + 0x170]
call eax
mov dword [ebp - 0x640], 0xff
push 0xff
lea ecx, [ebp - 0x214]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00444900
add esp, 0x10
push 0x660cac
lea ecx, [ebp - 0x660]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x73c], eax
mov edx, dword [ebp - 0x73c]
mov dword [ebp - 0x740], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x72c]
or eax, 1
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x740]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x214]
push ecx
call fcn.00444200
add esp, 8
test eax, eax
je 0x43f7ea
mov ecx, 0x6da338
call fcn.0045e660
push eax
mov ecx, 0x6da338
call fcn.0045e570
push eax
push 0x65a5ac
lea edx, [ebp - 0x664]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x748], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x72c]
or ecx, 2
mov dword [ebp - 0x72c], ecx
mov ecx, dword [ebp - 0x748]
call fcn.00404a70
push eax
call fcn.0044a480
add esp, 8
test eax, eax
jne 0x43f7ea
mov dword [ebp - 0x74c], 1
jmp 0x43f7f4
mov dword [ebp - 0x74c], 0
mov dl, byte [ebp - 0x74c]
mov byte [ebp - 0x659], dl
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x72c]
and eax, 2
je 0x43f824
and dword [ebp - 0x72c], 0xfffffffd
lea ecx, [ebp - 0x664]
call fcn.00404a50
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x72c]
and ecx, 1
je 0x43f848
and dword [ebp - 0x72c], 0xfffffffe
lea ecx, [ebp - 0x660]
call fcn.00404a50
movzx edx, byte [ebp - 0x659]
test edx, edx
je 0x43fb01
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x648]
call fcn.004088d0
mov byte [ebp - 4], 4
push 0x660ca4
lea ecx, [ebp - 0x668]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x750], eax
mov edx, dword [ebp - 0x750]
mov dword [ebp - 0x754], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x754]
call fcn.00404a70
push eax
push 0x660c9c
lea eax, [ebp - 0x66c]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x758], eax
mov ecx, dword [ebp - 0x758]
mov dword [ebp - 0x75c], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x75c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x648]
call fcn.0040b850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x66c]
call fcn.00404a50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x668]
call fcn.00404a50
push 0x660c94
lea edx, [ebp - 0x670]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x764], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x764]
call fcn.00404a70
push eax
push 0x660c8c
lea ecx, [ebp - 0x674]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x768], eax
mov edx, dword [ebp - 0x768]
mov dword [ebp - 0x76c], edx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x76c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x648]
call fcn.0040b850
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x674]
call fcn.00404a50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x670]
call fcn.00404a50
push 0x660c84
lea eax, [ebp - 0x678]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x774], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x774]
call fcn.00404a70
push eax
push 0x660c7c
lea edx, [ebp - 0x67c]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x77c], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x77c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x648]
call fcn.0040b850
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x67c]
call fcn.00404a50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x678]
call fcn.00404a50
push 0x660c70
lea ecx, [ebp - 0x680]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x780], eax
mov edx, dword [ebp - 0x780]
mov dword [ebp - 0x784], edx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x784]
call fcn.00404a70
push eax
push 0x660c60
lea eax, [ebp - 0x684]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x788], eax
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x78c], ecx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x78c]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x648]
call fcn.0040b850
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x684]
call fcn.00404a50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x680]
call fcn.00404a50
push 0x104
push 0
lea edx, [ebp - 0x214]
push edx
call fcn.0061b420
add esp, 0xc
lea ecx, [ebp - 0x648]
call fcn.0040c010
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00441700
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x648]
call fcn.00404a50
push 0x660c58
lea ecx, [ebp - 0x68c]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x790], eax
mov edx, dword [ebp - 0x790]
mov dword [ebp - 0x794], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x72c]
or eax, 4
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x794]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x214]
push ecx
call fcn.00444200
add esp, 8
test eax, eax
je 0x43fbcf
mov ecx, 0x6da338
call fcn.0045e660
push eax
mov ecx, 0x6da338
call fcn.0045e570
push eax
push 0x660c44
lea edx, [ebp - 0x690]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x79c], eax
mov dword [ebp - 4], 0xe
mov ecx, dword [ebp - 0x72c]
or ecx, 8
mov dword [ebp - 0x72c], ecx
mov ecx, dword [ebp - 0x79c]
call fcn.00404a70
push eax
call fcn.0044a480
add esp, 8
test eax, eax
jne 0x43fbcf
mov dword [ebp - 0x7a0], 1
jmp 0x43fbd9
mov dword [ebp - 0x7a0], 0
mov dl, byte [ebp - 0x7a0]
mov byte [ebp - 0x685], dl
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x72c]
and eax, 8
je 0x43fc09
and dword [ebp - 0x72c], 0xfffffff7
lea ecx, [ebp - 0x690]
call fcn.00404a50
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x72c]
and ecx, 4
je 0x43fc2d
and dword [ebp - 0x72c], 0xfffffffb
lea ecx, [ebp - 0x68c]
call fcn.00404a50
movzx edx, byte [ebp - 0x685]
test edx, edx
je 0x43fee6
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x64c]
call fcn.004088d0
mov byte [ebp - 4], 0xf
push 0x660c9c
lea ecx, [ebp - 0x694]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7a4], eax
mov edx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], edx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x7a8]
call fcn.00404a70
push eax
push 0x660ca4
lea eax, [ebp - 0x698]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7ac], eax
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp - 0x7b0], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x7b0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x64c]
call fcn.0040b850
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x698]
call fcn.00404a50
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x694]
call fcn.00404a50
push 0x660c8c
lea edx, [ebp - 0x69c]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x7b8]
call fcn.00404a70
push eax
push 0x660c94
lea ecx, [ebp - 0x6a0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7bc], eax
mov edx, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], edx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x7c0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x64c]
call fcn.0040b850
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x6a0]
call fcn.00404a50
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x69c]
call fcn.00404a50
push 0x660c7c
lea eax, [ebp - 0x6a4]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], ecx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7c8]
call fcn.00404a70
push eax
push 0x660c84
lea edx, [ebp - 0x6a8]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x7d0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x64c]
call fcn.0040b850
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6a8]
call fcn.00404a50
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6a4]
call fcn.00404a50
push 0x660c60
lea ecx, [ebp - 0x6ac]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7d4], eax
mov edx, dword [ebp - 0x7d4]
mov dword [ebp - 0x7d8], edx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x7d8]
call fcn.00404a70
push eax
push 0x660c70
lea eax, [ebp - 0x6b0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7dc], eax
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp - 0x7e0], ecx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x7e0]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x64c]
call fcn.0040b850
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6b0]
call fcn.00404a50
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6ac]
call fcn.00404a50
push 0x104
push 0
lea edx, [ebp - 0x214]
push edx
call fcn.0061b420
add esp, 0xc
lea ecx, [ebp - 0x64c]
call fcn.0040c010
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00441700
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x64c]
call fcn.00404a50
lea ecx, [ebp - 0x214]
push ecx
mov ecx, dword [ebp - 0x730]
add ecx, 0xdd4
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0xdd4]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x428]
call fcn.00404a30
mov byte [ebp - 4], 0x18
mov eax, dword [ebp + 0x14]
push eax
push 0x6611d0
lea ecx, [ebp - 0x6b4]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7e4], eax
mov edx, dword [ebp - 0x7e4]
mov dword [ebp - 0x7e8], edx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x7e8]
call fcn.00404a70
push eax
lea eax, [ebp - 0x428]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6b4]
call fcn.00404a50
lea ecx, [ebp - 0x428]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0xef8
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0xef8]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x63c]
call fcn.00404a30
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp + 0x18]
push eax
push 0x6611b8
lea ecx, [ebp - 0x6b8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7ec], eax
mov edx, dword [ebp - 0x7ec]
mov dword [ebp - 0x7f0], edx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x7f0]
call fcn.00404a70
push eax
lea eax, [ebp - 0x63c]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6b8]
call fcn.00404a50
lea ecx, [ebp - 0x63c]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x101c
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x101c]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x224]
call fcn.00404a30
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp + 0x1c]
push eax
push 0x661198
lea ecx, [ebp - 0x6bc]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7f4], eax
mov edx, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f8], edx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x7f8]
call fcn.00404a70
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x6bc]
call fcn.00404a50
lea ecx, [ebp - 0x224]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x1140
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x1140]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x638]
call fcn.00404a30
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp + 0x20]
push eax
push 0x6611d0
lea ecx, [ebp - 0x6c0]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x7fc], eax
mov edx, dword [ebp - 0x7fc]
mov dword [ebp - 0x800], edx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x800]
call fcn.00404a70
push eax
lea eax, [ebp - 0x638]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6c0]
call fcn.00404a50
lea ecx, [ebp - 0x638]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x1264
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x1264]
mov edx, dword [eax + 0x170]
call edx
push 0xff
lea eax, [ebp - 0x634]
push eax
mov ecx, dword [ebp + 0x28]
push ecx
mov edx, dword [ebp + 0x24]
push edx
call fcn.00444900
add esp, 0x10
push 0x660cac
lea eax, [ebp - 0x6c8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x804], eax
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x808], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x72c]
or edx, 0x10
mov dword [ebp - 0x72c], edx
mov ecx, dword [ebp - 0x808]
call fcn.00404a70
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00444200
add esp, 8
test eax, eax
je 0x440243
mov ecx, 0x6da338
call fcn.0045e660
push eax
mov ecx, 0x6da338
call fcn.0045e570
push eax
push 0x65a5ac
lea ecx, [ebp - 0x6cc]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x80c], eax
mov edx, dword [ebp - 0x80c]
mov dword [ebp - 0x810], edx
mov dword [ebp - 4], 0x21
mov eax, dword [ebp - 0x72c]
or eax, 0x20
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x810]
call fcn.00404a70
push eax
call fcn.0044a480
add esp, 8
test eax, eax
jne 0x440243
mov dword [ebp - 0x814], 1
jmp 0x44024d
mov dword [ebp - 0x814], 0
mov cl, byte [ebp - 0x814]
mov byte [ebp - 0x6c1], cl
mov dword [ebp - 4], 0x20
mov edx, dword [ebp - 0x72c]
and edx, 0x20
je 0x44027d
and dword [ebp - 0x72c], 0xffffffdf
lea ecx, [ebp - 0x6cc]
call fcn.00404a50
mov dword [ebp - 4], 0x1e
mov eax, dword [ebp - 0x72c]
and eax, 0x10
je 0x4402a1
and dword [ebp - 0x72c], 0xffffffef
lea ecx, [ebp - 0x6c8]
call fcn.00404a50
movzx ecx, byte [ebp - 0x6c1]
test ecx, ecx
je 0x44055a
lea edx, [ebp - 0x634]
push edx
lea ecx, [ebp - 0x650]
call fcn.004088d0
mov byte [ebp - 4], 0x22
push 0x660ca4
lea eax, [ebp - 0x6d0]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
mov dword [ebp - 0x81c], ecx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x81c]
call fcn.00404a70
push eax
push 0x660c9c
lea edx, [ebp - 0x6d4]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x824], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x824]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x650]
call fcn.0040b850
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x6d4]
call fcn.00404a50
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6d0]
call fcn.00404a50
push 0x660c94
lea ecx, [ebp - 0x6d8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x828], eax
mov edx, dword [ebp - 0x828]
mov dword [ebp - 0x82c], edx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x82c]
call fcn.00404a70
push eax
push 0x660c8c
lea eax, [ebp - 0x6dc]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x830]
mov dword [ebp - 0x834], ecx
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x834]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x650]
call fcn.0040b850
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x6dc]
call fcn.00404a50
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6d8]
call fcn.00404a50
push 0x660c84
lea edx, [ebp - 0x6e0]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x83c], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x83c]
call fcn.00404a70
push eax
push 0x660c7c
lea ecx, [ebp - 0x6e4]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x840], eax
mov edx, dword [ebp - 0x840]
mov dword [ebp - 0x844], edx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x844]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x650]
call fcn.0040b850
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6e4]
call fcn.00404a50
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6e0]
call fcn.00404a50
push 0x660c70
lea eax, [ebp - 0x6e8]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x848], eax
mov ecx, dword [ebp - 0x848]
mov dword [ebp - 0x84c], ecx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x84c]
call fcn.00404a70
push eax
push 0x660c60
lea edx, [ebp - 0x6ec]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x854], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x854]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x650]
call fcn.0040b850
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x6ec]
call fcn.00404a50
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x6e8]
call fcn.00404a50
push 0x104
push 0
lea ecx, [ebp - 0x634]
push ecx
call fcn.0061b420
add esp, 0xc
lea ecx, [ebp - 0x650]
call fcn.0040c010
push eax
lea edx, [ebp - 0x634]
push edx
call fcn.00441700
add esp, 8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x650]
call fcn.00404a50
push 0x660c58
lea eax, [ebp - 0x6f4]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x858], eax
mov ecx, dword [ebp - 0x858]
mov dword [ebp - 0x85c], ecx
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x72c]
or edx, 0x40
mov dword [ebp - 0x72c], edx
mov ecx, dword [ebp - 0x85c]
call fcn.00404a70
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00444200
add esp, 8
test eax, eax
je 0x44062a
mov ecx, 0x6da338
call fcn.0045e660
push eax
mov ecx, 0x6da338
call fcn.0045e570
push eax
push 0x660c44
lea ecx, [ebp - 0x6f8]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x860], eax
mov edx, dword [ebp - 0x860]
mov dword [ebp - 0x864], edx
mov dword [ebp - 4], 0x2c
mov eax, dword [ebp - 0x72c]
or eax, 0x80
mov dword [ebp - 0x72c], eax
mov ecx, dword [ebp - 0x864]
call fcn.00404a70
push eax
call fcn.0044a480
add esp, 8
test eax, eax
jne 0x44062a
mov dword [ebp - 0x868], 1
jmp 0x440634
mov dword [ebp - 0x868], 0
mov cl, byte [ebp - 0x868]
mov byte [ebp - 0x6ed], cl
mov dword [ebp - 4], 0x2b
mov edx, dword [ebp - 0x72c]
and edx, 0x80
je 0x44066a
and dword [ebp - 0x72c], 0xffffff7f
lea ecx, [ebp - 0x6f8]
call fcn.00404a50
mov dword [ebp - 4], 0x1e
mov eax, dword [ebp - 0x72c]
and eax, 0x40
je 0x44068e
and dword [ebp - 0x72c], 0xffffffbf
lea ecx, [ebp - 0x6f4]
call fcn.00404a50
movzx ecx, byte [ebp - 0x6ed]
test ecx, ecx
je 0x440947
lea edx, [ebp - 0x634]
push edx
lea ecx, [ebp - 0x654]
call fcn.004088d0
mov byte [ebp - 4], 0x2d
push 0x660c9c
lea eax, [ebp - 0x6fc]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x86c], eax
mov ecx, dword [ebp - 0x86c]
mov dword [ebp - 0x870], ecx
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x870]
call fcn.00404a70
push eax
push 0x660ca4
lea edx, [ebp - 0x700]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x878], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x878]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x654]
call fcn.0040b850
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x700]
call fcn.00404a50
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x6fc]
call fcn.00404a50
push 0x660c8c
lea ecx, [ebp - 0x704]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x87c], eax
mov edx, dword [ebp - 0x87c]
mov dword [ebp - 0x880], edx
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x880]
call fcn.00404a70
push eax
push 0x660c94
lea eax, [ebp - 0x708]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x884], eax
mov ecx, dword [ebp - 0x884]
mov dword [ebp - 0x888], ecx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x888]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x654]
call fcn.0040b850
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x708]
call fcn.00404a50
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x704]
call fcn.00404a50
push 0x660c7c
lea edx, [ebp - 0x70c]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x890], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x890]
call fcn.00404a70
push eax
push 0x660c84
lea ecx, [ebp - 0x710]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x894], eax
mov edx, dword [ebp - 0x894]
mov dword [ebp - 0x898], edx
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x898]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x654]
call fcn.0040b850
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x710]
call fcn.00404a50
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x70c]
call fcn.00404a50
push 0x660c60
lea eax, [ebp - 0x714]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x89c]
mov dword [ebp - 0x8a0], ecx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x8a0]
call fcn.00404a70
push eax
push 0x660c70
lea edx, [ebp - 0x718]
push edx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x8a8]
call fcn.00404a70
push eax
lea ecx, [ebp - 0x654]
call fcn.0040b850
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x718]
call fcn.00404a50
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x714]
call fcn.00404a50
push 0x104
push 0
lea ecx, [ebp - 0x634]
push ecx
call fcn.0061b420
add esp, 0xc
lea ecx, [ebp - 0x654]
call fcn.0040c010
push eax
lea edx, [ebp - 0x634]
push edx
call fcn.00441700
add esp, 8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x654]
call fcn.00404a50
lea eax, [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x1388
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x1388]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x220]
call fcn.00404a30
mov byte [ebp - 4], 0x36
mov eax, dword [ebp + 0x2c]
push eax
push 0x6611d0
lea ecx, [ebp - 0x71c]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x8ac], eax
mov edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], edx
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x8b0]
call fcn.00404a70
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x71c]
call fcn.00404a50
lea ecx, [ebp - 0x220]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x14ac
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x14ac]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x644]
call fcn.00404a30
mov byte [ebp - 4], 0x38
mov eax, dword [ebp + 0x30]
push eax
push 0x6611b8
lea ecx, [ebp - 0x720]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x8b4], eax
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8b8], edx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x8b8]
call fcn.00404a70
push eax
lea eax, [ebp - 0x644]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x720]
call fcn.00404a50
lea ecx, [ebp - 0x644]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x15d0
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x15d0]
mov edx, dword [eax + 0x170]
call edx
lea ecx, [ebp - 0x21c]
call fcn.00404a30
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp + 0x34]
push eax
push 0x661198
lea ecx, [ebp - 0x724]
push ecx
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x8bc], eax
mov edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], edx
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x8c0]
call fcn.00404a70
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00404bd0
add esp, 0xc
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x724]
call fcn.00404a50
lea ecx, [ebp - 0x21c]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x16f4
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x16f4]
mov edx, dword [eax + 0x170]
call edx
xor eax, eax
mov word [ebp - 0x424], ax
push 0x1fe
push 0
lea ecx, [ebp - 0x422]
push ecx
call fcn.0061b420
add esp, 0xc
push 0x100
lea edx, [ebp - 0x424]
push edx
push 0x661178
lea eax, [ebp - 0x728]
push eax
call fcn.004255b0
add esp, 8
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c8], ecx
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x8c8]
call fcn.00404a70
push eax
mov ecx, 0x6da338
call fcn.0045e680
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x728]
call fcn.00404a50
lea ecx, [ebp - 0x42c]
call fcn.00404a30
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x730]
mov eax, dword [edx + 0x1a60]
push eax
lea ecx, [ebp - 0x424]
push ecx
lea edx, [ebp - 0x42c]
push edx
call fcn.00404bd0
add esp, 0xc
lea ecx, [ebp - 0x42c]
call fcn.00404a70
push eax
mov ecx, dword [ebp - 0x730]
add ecx, 0x1818
mov eax, dword [ebp - 0x730]
mov edx, dword [eax + 0x1818]
mov eax, dword [edx + 0x170]
call eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x42c]
call fcn.00404a50
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x21c]
call fcn.00404a50
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x644]
call fcn.00404a50
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x220]
call fcn.00404a50
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x638]
call fcn.00404a50
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x224]
call fcn.00404a50
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x63c]
call fcn.00404a50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x428]
call fcn.00404a50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x218]
call fcn.00404a50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x30