Function at 0x440390
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5469e7
mov eax, dword fs:[0]
push eax
mov eax, 0x1a1c
call fcn.00474db0
mov eax, dword [0x673114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x49
lea edi, [ebp - 0x30c]
mov esi, str.kncVV9R7Sy2wJ4WpN1Ig302SR9sxwpSYSIXrAnVbhvwtpGNOIJdC6lurJ38RJqA5BQIe1SlLsoiEO6Fwin9ZPqbj5rA65rThb2dUeDflgMDzDBVqpqIaJnSlCTAhexVOzruVGAoHVRBBMDrVLENcEWVT7cABfNSiagcIBXzMZrqUtN3tMuokuQzhhNvS59mGxVNE1q7CPsfa4UatkeTHZYZlel1FUWGaAxp2j6BgxpYnYV0LgjZl5NEadZ4hPfqABBhT3tEZLYH8NeFWGtqdZ86v07gbhfagSWl
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x35
lea edi, [ebp - 0xe8]
mov esi, str.L0VbbyJgNsrg3QKWRtdp4W5PcyZUtlBRdjUNjXkcMAPRlU3kCrJ1hJ0kgbjBhITcTJPaIC7xkjxrVyxYgx4VGV1tkeW1uPDEWWlrLmB78pnFGoan4TXcwdOOWvY2MVUOu6slr4fjO5IABjjayiYNYTcpCQBX8UzqlFzYm7mY6G39Wax423FAoeFmuqa8z446QJxSbxRKfYK5FuvDdv5Ps
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x59
movsw word es:[edi], word [esi]
mov esi, str.DMpkd3KeUC9M8JWJWM3XDwMfna2ZW46IzSrTm2kr3HYPTGpUyfMpCPvH60L16DECaOWgYxStmCFpaLnBnAOy8p2qiFkSymcu3dZNbkLRc6KCDnQe00VigfcSWO3L18LsKs0h3gbYukzNMIKO6R4O6M37UaDLGHUnaothIaQdkx5DIFyOn21iMQX4xazAf3uRO3OF8G3uyPnRDItiCWFN3ZVUQ6evR7nCcGxUzLsqskthdFyxP1kQRC3nilSTf5eSTw3yakJeVLB8HudWUE1NCRNstMm4fdBb8ImRCQewRUBtp5P8rO5xAuvkNpzQMMbnlXmTTOVhPlvhtkozCubPIures4ERrfEBxTP
lea edi, [ebp - 0x6cc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4b
lea edi, [ebp - 0x438]
mov esi, str.bcG3W7RjISMqKZaeYiMxEO1rgCzEXmh0YtYAPyu5HKNNByuIEg5bi7bzg0dEiJ5DCoYq2ZMCimJAsjQSM1xVEniZ8AyAX6oqLbhU3kbrsjwpvEv7OOGYGrPIgNTL6iozE1LpQ1oQk2RPNY5htAFY6V9XafZQWROE3BPk4nw6KcULLuLMPV8aWZED1x3nv3XTSIOKdKwerPJQGDsm3uf9vBkGFIRDQfVGABz4k9T9e2ynUGZibkTGYV1BQMQRPA0338a66nS0ouoQJkOLLz8BvLWIjAWGqrFTZQx1FCffvwg
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3f
lea edi, [ebp - 0x1e8]
mov esi, str.PPBH7oYjdYMtcRPn7dQXgCRjX5niP1X0E4SPFrStPt5P0gyYuCNF0YSNapxiSb96qOBoMqTOBYNFsMIyop6e4hvjiTML89vDEGuyOy1N3edw9d1ZyDYf2iard4qGZ2LGkSS8y4vAMklRB66YbrX5gkLnCgGb4gjCoTTwV1UoAFJcYwI93OhP93HmfWNGnQssBE3wpY2Q1X16Gj3afsZn5Wm5gDJ8afKaTN1ZynN45P2Q5C7ZfIL6KEz3eE35MD
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4c
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.DGrV33hnBNQMUooejBjtN6SDdXCEn1PHqIrJtX0GYR1Rydkq3xjJw7HDTJy1YD5YNuKFmypZwf7BYuVQz0dfYYpjqzNPuzyrDGlFukfei8asOYnsT04uWp9yRc1OdIZafGMcrCE3IaRxapvgCNY29ISxruFBwzD38McknGLapNNmU1a8OZa9eeW3s2F7qKTVXQuvFObJ4ZAcf23habjFbNUKrmTEykOIQV42q4AVB6XhwS6Pj1KGD5BeTXfV6pR8ahZT0zTYLcR9oP2kW9UrnOM5in2JSrM9CpEsgO3mXob0LCg
lea edi, [ebp - 0x568]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
lea edi, [ebp - 0x1474]
mov esi, str.LCRZdciOaESGgMsDNJgRfPZamNSisgKj7wIaomjy5Wa8g04d1EYcsDQknii2Es3WBbCb1AeuT9LWTChtxXUeLw2MEXEaf2AAhPgRHKa5AEXKOw1N6LBc1MAqcXrgTp21qE9wnt7ulZ3e0ajQU2kjhEBrc8pkEnCcFDPYpX2mYqejAccUiOyV0mAFOvrgI1vwcAro2woxkeKJezhTpjJZiYEEJwQJJn7xo7S0P62BUfMKNfBX4PypSg5UmcTA6PYDF5WaoRTJiJ72gvAYUK2rnEuD6UsEL7TnrCmKsAPXtSuZNVVJ5j9UjrIYhXAnI9gnKEvjMn9TmuG63DjwWgFwIdTZ2lw4oSv7ONldfzIfyqT7JQklzTgjU1edY2EJpi0H1vx0AASnJmSMwpnRVjWxobKOJ4EMvhR22DLpbjzFJgqSMydoyOkol25f9V5Mlryz6pfm9PhKWZSfw
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsw word es:[edi], word [esi]
mov esi, str.cE4YUL5RQHpiRxUFm1VtbT7qCdNXIDp1Nn2lO45JKn5XSy6PHiQE9cyAYRIGfW9t0Pvswb4scZtIZZo1DAuxbDsEXSQEcOQ19fSDUfVaFVM1iLXKMtcXZV104NgIpE1II9pA5YUT1p0mTj0wp96pp2Haq4lz6s6l9JS1FkmhNjVe4tBDjQhcUkZ95MGuROdiSCGkzoe4w7ZETLxtMTzOsvPh8TruiVrvg6RCljZjNIm4iRV6bL4zuZQUQJmiXH8305RBYX1pTsHboCvjRSWhZxLY06qx9CqMQokzlnXr49GEg802HgOiyqIr5S9DuqDq1MzpCce7YCTJs3X3Emx9j88ELihKffNvk5aXVkEMYPlMnwbne0uyEqQXVYdNPaojCUW5duLUkcFYup1L241N5pNCAgQAiTyxN0no89touNmXcgfTdQ9BGLuM4hQvVkHXc1dGq0tYh1HVH7kFVFX
lea edi, [ebp - 0x181c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x79
lea edi, [ebp - 0x1a04]
mov esi, str.KY1xOfksfDwJqMJPgp0lksDgOtHJL5vDKrhTli9NKdh2O0Ub4GoWLIcJ82pQAICA4s3aCES55erKNCNMW9WYlV9K0GAyVv7rw1Hg4TnMJGVlLj1MEMftpXPJZUJ0yGxPme0WRUjaRwDZ714SejWlE9C9PnZPGHxQlg9ozLHUoskvixpaDhD667ZEx7cvtcwGOF38a23wcshneW1ufEj6KdDqepDkFnaaTxy9JfYgYmLhO0RLcCxPhqJ3mOB08EnoP5NPGLRADYFPHMZN1zb4GKnJ4iFEyofW7TmwwWB8117n15Uq2Gw4DJIztZsSvxNs2dlM2wBZNnwUB83kD0U476DxUlBMPbNM0JaxVojNdiBWyu0Uw4VGZWXDSCkYQj0xMnw6jKcfxXKVlfoSD8jRnlxffv5UCRpxF40102brLi48JUsOZnYTJ3dnECTLAT242C7zccXkMhMLF2HjY1upT2eIe3OlZMsJzF6Q
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x40
movsb byte es:[edi], byte [esi]
mov esi, str.8N5Lkl83jSUq85lVlfztzSk2mzs3Zytk3NlvnTwqwTyUrbzXV0wsQUgnMBHTUplLt5nHVHGNKx9EC9x24EY873onr1u95VaUez7QkuOu4hPkTHJzSqNE5PKZzFnZbTkJrwqKkAPEP9VLwkmCIjeoM7utpSbmMwcvZUXyIbYCTapGFfCVwkqtOg7TIiWm7Tch2o2W2QnD1dJdlY950RHYqtfvbHUNR7QySYYBOpXFaFlrL2Ndwvj96UAfma9CoBxPPH
lea edi, [ebp - 0x9a4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.5ggr3w52nM4ecEH8G5s2LtHoWE90wOepogOksiPqhoQHYX1iGF6bOtwZYeggOiYwGyKcLJcXekl7w5u2Z98XifKY5GLsdA4LMH3VlMrZP2xntzHmfafl7AKg1CYRU9wIPCQpGYgAp8ChmRlm57UekMZ9hUK7vfZfgnMkBTKhLdW2YwBmy0uRD6oDQJqjGXOTUaDS1wYMRLVSlTyQJpGwsgBQFpFAFRTY7tIgICByMOLFUmctJkIQSjfuhcwYI0L7cmsKFXuZxsAiwq1cNRxmG59zW5vEUc0lz9luN8Biynujcfg7BuQWuvaYDUlL9FA0h7mHL8nAzwa6lD8PmoYNbmvqh3xs9vxcIQM7PKvj77YsrIY59DP0avOvO07ErA7PQCQYYmnO92BxxWyxaySVGcOxrdwvnTwygkoQbvib6iepGwsd4vsOJJaqZH36xIgWT011aQqGhypm
lea edi, [ebp - 0x12a4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3a
movsb byte es:[edi], byte [esi]
mov esi, str.odAcv7cIC0quM5klPpTBsq69ovgDhdOqnIAlRGy0xjDbKnlvBmmVAAE7A3zLvZtDFTXYHkjRcCePPxGOARjKsKCCIf2iifGtXDHf0qboqxBDF4ISnZdX2oqs7CciSmFxE89i6b5UgHUQnPcZ9yzDVx76cDGI4iUmlRpNXUwkJozMGqPYPluOqCxHTDLPBlGyq01x81hvbGQc0qdfb4tIbvsCOiCnlXhLRIqOwwyXHf
lea edi, [ebp - 0x8a0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x54
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.xCILEFRN2ZnrzdL1DBgjmO74Xng25956CvvOVnALAgjwN8FIigiC9dBFjtHgOGAe0bIJ8JIxmOmdzrikn7NLxGCnQwhFAzjyN61C5uKJBtKm4HbhbiDk9eakZbf12hdcsHtunI3CkgmD62NbqRvp8N8c7dmbVngo6qXQvdCa1SlfboR0ygRr4nIu9OwXuEJKHBh0Vsfj76DMdOkQjB0I5nE32WW9elFeqY0XGdRpNrzjH47KU8HMUpVUeMvShsjfSqXKN4j6WPfMIAEBVE21JfylSzcGzdJ8hVD8Fv63aTmuC4xKF5Yp6JgtXCpfGOwfmV9zDamqmG3I005
lea edi, [ebp - 0xf78]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x39
lea edi, [ebp - 0x7b4]
mov esi, str.x5AIqYzOte91IiZZ7XJuyOAPRCpNPD4bCD4pag5b911ugJvdY5ErS51n5UH70rcaoNnUgtHggnR21yP9XH7ovtXK3H8TPiTquLtHlbrfV6i88et3SV0f4Ks22uLaJBVqdJaDkoweRMbDf0D0jhctw0whLwNy58dwnBaeG1oHIZ9WTaqqsasBceBZ75KVppJOXufi70S1cKBRh2OJ7EtkRr1PIao3XKBbS8NBw
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x53
movsw word es:[edi], word [esi]
mov esi, str.1zyDFRUTSzJ7Kj0bZJZ1vDaZCiHbGU8JWkUdGW5yOxAbRA5TVT7vURchcFVEw1CqGVbeDBReeY7elQDG8ENYDC5iR8efaS4a3ct5oIa8DF1VJ6FzhKBCDck8I5Pm0wbacHGBmVzFAcO3par94HMtZhGzS3PlpREteC9lvEMEOiXqExiEA3RTFBS4HDGiWpxtBMMx7juJ6t9nbi17ARIPwA5Y6v1ARAES8uxvqTQICrH1hEpqSP3LbdTkk9Zij83SizkLLGzvlDNYfa0WLTK5fg5AzSNydBsw0AfnlmeNQ1gQfGDDk1DUbZW7OUYb7ihh0O57vltG2eb
lea edi, [ebp - 0xe28]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
lea edi, [ebp - 0x10d4]
mov esi, str.ij5ZMT6CnpLbLXWNitDTTh8QUcDk8TQEdGRImmmHautKGx4To88sAcat1XVweBFsKXcS60VPbOWDPjLRLYtPayqH6k5rnEYaaJQznDCCkvjghrreHVxsqsyaDk03zwCt4lYoczC5zAdrD1FwMLWHAWsDvDoWZdm9tIrm8tvOwbuzKJ23OgX0pyOgKb7MRpSWcrbzY243YC3Vlp79lVrVGye1aerOylJyvAJDeFE7yjJy6YDivQSNXuK1ZCLXIfszZ8K3q6Twx2yMMzm33BV8lhaafgq7KPmPLi7QyKqqSGh4oShw1BDE944GlWZuCo9sPU3DLT2hUDwCmE7JkLyoSrr2
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x47
movsb byte es:[edi], byte [esi]
mov esi, str.grT32AFo7sActWnRdNwlDEj1DAqr3Fe0tasRBa1tC9XTPR3WJ8eoGbmwr6qI4pQ7cxvaB4KRUdOnTfvNbvaMKxYoLSIIs24qhBiKkHoT0cXU7nPKftQodL2sQPpODeewOoEw3BR3YldHTAMzzqhIt2PUTmrgPaz6bj1TIKZAxrcXlDM09cTRWoH3OEKpwhHSnN3tJ7T9QHEfKEnyoOAcGu1FJBEURkbPv7Tn34MWX44p8CTiQt5TLFwwnevC1cGQJ4vqsqUUXKAOSMUEgmSZIhSYI4W
lea edi, [ebp - 0xcdc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x43
mov esi, str.xd3KNi1pitmQHoE1AQlRK2JnxpGN8ptwncIg4qXcbj1PIyaMJcABoYcAm8X3vsbPk0JMoNVYvR58DJSmUALE2zbtcb60mw0ma34DDH3AGuKTG1wb8SWTIIVI3ZPqjLpV84sGQBMx15958gpjeO86PzYzjYBAomVLS8T1leCw7putiDmIcF5k9h6SCJhSISbvs0BxzrbfVMTJ25kjFpDCAjMAf3QXwqDC8xQWDPIXdrWGxKBy8lb4iyE3WpFm0Vvis3iq623JkLUrAl
mov dword [ebp - 0x1a28], 0
lea edi, [ebp - 0xbc0]
mov dword [ebp - 0x1a24], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x42
mov dword [ebp - 0x1a20], 0
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.VxrydT4AUB9h1CtPolaWlC5YR9ZJj8BKAtmjqIiokK0orWFt1DAEGXyt4aKBlsYdvpMDS9WK8BBmtJCBJgs3ojpDNUuFRuXzQArDeCpdSZgAR8rAqIiVGkyMIWoxWZhqnWvWWoCVPseWIL94NARk3xKcGhfVL4TtNQDohBAQWxS6Cq6vmg1IqqRKnclZITcnGnUnQDXyiCTgrzq4ZGyZLLw4NZXJsBgp1SfWyITK7gU857iBH5vOWpyEiP6AiXkJGMlZR4bH
lea edi, [ebp - 0xab0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x74
movsb byte es:[edi], byte [esi]
mov esi, str.49Pa5I8GSnjOmOOma2AR97LdUKO58Nec1ZDI8uraN38jYdzl5UR2PbcrmVthDIhZRvutN5Pnctfn9Omx2BprgxMb6JO6YzBIgrXHe4sFRWAcP6RqhIQ7KsFcbzmqDFYg0KITT3iBr4Qsw5tJ8CJFflLHBZpFh6cgjdXjcF5bxTswl322BlUD0N8wq6V1EsmDxNmi5BXZya92VRNSRs427MZ0SrfYiCihT1vlP8lCPI1jtD2Sq6NviZa8vQnTSBAtJDf2YqL90MZ2vlF8wo3yV1BVi2v8Qo84Lm2qPaNLIXfFaEDli3CbK0MpTm1TgLSsC1uQKJMrn6QlkyCUwj6lE74lIx3hUzpP8MAUyoYSBD6bQur6KVqo1F5Ua0GFSrXvhu2l6vdE3yQP8G3jCmUPNBd2VqSiRDYsZgMRJ1IeXbngumTgIi86VgnVhFp7lwRCbts6hVC3NTorsxja
lea edi, [ebp - 0x1648]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x30c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1a08], 0xf
mov dword [ebp - 0x1a0c], 0
mov byte [ebp - 0x1a1c], 0
jne 0x440590
xor ecx, ecx
jmp 0x4405a9
lea ecx, [ebp - 0x30c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4405a0
sub ecx, edx
push ecx
lea eax, [ebp - 0x30c]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.00407d30
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4405f4
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
cmp byte [ebp - 0xe8], 0
mov dword [ebp - 0x1a08], 0xf
mov dword [ebp - 0x1a0c], 0
mov byte [ebp - 0x1a1c], 0
jne 0x44061c
xor ecx, ecx
jmp 0x44062e
lea ecx, [ebp - 0xe8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440625
sub ecx, edx
push ecx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.00407d30
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440679
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
cmp byte [ebp - 0x6cc], 0
mov dword [ebp - 0x1a08], 0xf
mov dword [ebp - 0x1a0c], 0
mov byte [ebp - 0x1a1c], 0
jne 0x4406a1
xor ecx, ecx
jmp 0x4406b9
lea ecx, [ebp - 0x6cc]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4406b0
sub ecx, edx
push ecx
lea eax, [ebp - 0x6cc]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.00407d30
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440704
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
cmp byte [ebp - 0x438], 0
mov dword [ebp - 0x1a08], 0xf
mov dword [ebp - 0x1a0c], 0
mov byte [ebp - 0x1a1c], 0
jne 0x44072c
xor ecx, ecx
jmp 0x44073e
lea ecx, [ebp - 0x438]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440735
sub ecx, edx
push ecx
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.00407d30
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440789
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
cmp byte [ebp - 0x1e8], 0
mov dword [ebp - 0x1a08], 0xf
mov dword [ebp - 0x1a0c], 0
mov byte [ebp - 0x1a1c], 0
jne 0x4407b1
xor ecx, ecx
jmp 0x4407c9
lea ecx, [ebp - 0x1e8]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4407c0
sub ecx, edx
push ecx
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.00407d30
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440814
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
cmp byte [ebp - 0x568], 0
mov dword [ebp - 0x1a08], 0xf
mov dword [ebp - 0x1a0c], 0
mov byte [ebp - 0x1a1c], 0
jne 0x44083c
xor eax, eax
jmp 0x44084e
lea eax, [ebp - 0x568]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x440845
sub eax, edx
push eax
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.00407d30
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440899
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x1474]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4408e3
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x181c]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x44092d
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x1a04]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440977
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x9a4]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4409c1
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x12a4]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440a0b
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x8a0]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440a55
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0xf78]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440a9f
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x7b4]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440ae9
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0xe28]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
mov eax, dword [ebp - 0x1a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440b33
inc eax
lea ecx, [ebp - 0x1a1c]
push eax
push dword [ebp - 0x1a1c]
call fcn.00407e30
lea eax, [ebp - 0x10d4]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
lea ecx, [ebp - 0x1a1c]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0xcdc]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
lea ecx, [ebp - 0x1a1c]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0xbc0]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
lea ecx, [ebp - 0x1a1c]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0xab0]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
lea ecx, [ebp - 0x1a1c]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x1648]
push eax
lea ecx, [ebp - 0x1a1c]
call fcn.004057d0
lea eax, [ebp - 0x1a1c]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1a28]
call fcn.00407f90
lea ecx, [ebp - 0x1a1c]
mov byte [ebp - 4], 0
call fcn.00405930
cmp dword [ebx + 0x4c8], 0
je 0x440c56
mov ecx, ebx
call fcn.00441eb0
lea eax, [ebx + 0x4d4]
push eax
push 0
push ebx
push 0x4415b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x1a28]
mov dword [ebx + 0x4d0], eax
call fcn.00405970
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474d9e
mov esp, ebp
pop ebp
ret