Function at 0x46cb5b
Capabilities:
Create thread

Disassembly:
push 0x72c
mov eax, 0x493ff1
call fcn.0047ae59
mov eax, dword [ebp + 8]
xor edi, edi
mov ebx, ecx
mov dword [ebp - 0x710], edi
cmp dword [ebx + 0x18], 0xffffffff
mov dword [ebp - 0x720], ebx
mov dword [ebp - 0x718], eax
jne 0x46ce24
mov dword [ebx + 0x18], edi
mov eax, dword [ebx + 0x3c]
sub eax, dword [ebx + 0x38]
mov ecx, 0x31c
cdq
idiv ecx
test eax, eax
je 0x46cc66
mov dword [ebp - 0x724], edi
mov esi, dword [ebx + 0x38]
add esi, dword [ebp - 0x724]
push 0x4a4d10
call fcn.00401c1b
pop ecx
test al, al
jne 0x46cbe2
mov eax, dword [ebx + 0x3c]
sub eax, dword [ebx + 0x38]
mov ecx, 0x31c
cdq
idiv ecx
add dword [ebp - 0x724], ecx
inc edi
cmp edi, eax
jb 0x46cbac
jmp 0x46cc66
imul edi, edi, 0x31c
add edi, dword [ebx + 0x38]
lea ebx, [ebp - 0x734]
lea ecx, [edi + 0x190]
call fcn.0041a468
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x730]
sub eax, dword [ebp - 0x734]
push 0x1c
cdq
pop ecx
idiv ecx
xor ebx, ebx
test eax, eax
je 0x46cc51
mov edi, dword [ebp - 0x720]
add edi, 0x3e4
xor esi, esi
mov ecx, dword [ebp - 0x734]
lea ecx, [ecx + esi]
call fcn.0041d4a4
mov eax, dword [ebp - 0x730]
sub eax, dword [ebp - 0x734]
push 0x1c
cdq
pop ecx
idiv ecx
inc ebx
add esi, 0x1c
cmp ebx, eax
jb 0x46cc29
lea esi, [ebp - 0x734]
mov byte [ebp - 4], 0
call fcn.00406513
mov ebx, dword [ebp - 0x720]
lea eax, [ebp - 0x738]
push eax
xor eax, eax
push eax
push ebx
push 0x46c715
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push str.Ukw
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 2
push eax
mov dword [ebp - 0x710], 1
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x80]
call fcn.00404573
push 3
pop ecx
mov dword [ebp - 4], ecx
push 0x49c1b4
mov esi, eax
mov dword [ebp - 0x710], ecx
call fcn.00401c1b
pop ecx
test al, al
je 0x46cd26
push str.UkxSPFJPREtH
lea eax, [ebp - 0x48]
call fcn.00401556
lea eax, [ebp - 0x48]
mov dword [ebp - 4], 4
push eax
mov dword [ebp - 0x710], 7
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x64]
call fcn.00404573
mov dword [ebp - 4], 5
push 0x49c198
mov esi, eax
mov dword [ebp - 0x710], 0xf
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x711], 1
test al, al
je 0x46cd2d
mov byte [ebp - 0x711], 0
test byte [ebp - 0x710], 8
je 0x46cd49
and dword [ebp - 0x710], 0xfffffff7
push 1
xor edi, edi
lea esi, [ebp - 0x64]
call fcn.0040162a
test byte [ebp - 0x710], 4
je 0x46cd65
and dword [ebp - 0x710], 0xfffffffb
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
test byte [ebp - 0x710], 2
je 0x46cd81
and dword [ebp - 0x710], 0xfffffffd
push 1
xor edi, edi
lea esi, [ebp - 0x80]
call fcn.0040162a
and dword [ebp - 4], 0
test byte [ebp - 0x710], 1
je 0x46cda1
and dword [ebp - 0x710], 0xfffffffe
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
cmp byte [ebp - 0x711], 0
je 0x46d003
inc dword [ebx + 0x24]
mov eax, dword [0x4b65d4]
mov ecx, dword [0x4b65d0]
sub eax, ecx
cdq
mov esi, 0x31c
idiv esi
mov edi, dword [0x4b65b0]
cmp edi, eax
jae 0x46ce24
mov eax, edi
imul eax, eax, 0x31c
mov dword [ebp - 0x724], eax
mov esi, dword [ebp - 0x724]
lea esi, [esi + ecx]
push 0x49e294
call fcn.00401c1b
pop ecx
test al, al
jne 0x46cfe3
mov eax, dword [0x4b65d4]
mov ecx, dword [0x4b65d0]
sub eax, ecx
cdq
mov esi, 0x31c
idiv esi
inc dword [0x4b65b0]
add dword [ebp - 0x724], 0x31c
inc edi
cmp edi, eax
jb 0x46cdde
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.0046b886
cmp dword [ebp + 0xc], 1
jne 0x46cf45
mov esi, dword [ebx + 0x18]
imul esi, esi, 0x31c
add esi, dword [ebx + 0x38]
push 0x4986d0
lea esi, [esi + 0x120]
call fcn.00401c1b
pop ecx
test al, al
jne 0x46cfbd
mov esi, dword [ebx + 0x18]
imul esi, esi, 0x31c
add esi, dword [ebx + 0x38]
push 0x49e294
lea esi, [esi + 0x120]
call fcn.00401c1b
pop ecx
test al, al
jne 0x46cfbd
push 0x49bf80
lea eax, [ebp - 0x48]
call fcn.00401556
push str.a2ViXHJlXw
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 6
call fcn.00401556
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 7
call fcn.0041fe3a
mov byte [ebp - 4], 8
mov ecx, dword [ebx + 0x18]
imul ecx, ecx, 0x31c
add ecx, dword [ebx + 0x38]
mov edx, eax
add ecx, 0x24
push ecx
lea ecx, [ebp - 0x80]
call fcn.0041abc7
mov byte [ebp - 4], 9
mov ecx, dword [ebx + 0x18]
xor edx, edx
imul ecx, ecx, 0x31c
add ecx, dword [ebx + 0x38]
push edx
push edx
push edx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [ebp - 0x48]
push edx
push dword [ecx + 0x1c]
add ecx, 0x104
push eax
push 1
push ecx
lea eax, [ebp - 0x64]
push eax
call fcn.0041592c
add esp, 0x34
push 1
xor edi, edi
lea esi, [ebp - 0x64]
call fcn.0040162a
push 1
lea esi, [ebp - 0x80]
call fcn.0040162a
push 1
lea esi, [ebp - 0x9c]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
push 1
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0
call fcn.0040162a
cmp dword [ebp + 0xc], 0
jne 0x46cfbd
mov esi, dword [ebx + 0x18]
imul esi, esi, 0x31c
add esi, dword [ebx + 0x38]
push 0x49e294
call fcn.00401c1b
pop ecx
test al, al
jne 0x46cf6a
mov byte [ebx + 1], 1
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0x38]
imul eax, eax, 0x31c
cmp dword [eax + ecx + 0xa4], 0
je 0x46cfbd
mov byte [0x4b6599], 1
mov eax, dword [ebx + 0x18]
mov dword [ebx + 0x3c8], eax
imul eax, eax, 0x31c
add eax, dword [ebx + 0x38]
push 0x4a4d10
mov esi, eax
call fcn.00401c1b
pop ecx
test al, al
jne 0x46cfbd
mov eax, dword [ebx + 0x18]
imul eax, eax, 0x31c
add eax, dword [ebx + 0x38]
push eax
push ebx
call fcn.00468eb2
mov eax, dword [ebx + 0x3c]
sub eax, dword [ebx + 0x38]
mov esi, 0x31c
cdq
idiv esi
mov ecx, dword [ebx + 0x18]
inc ecx
cmp ecx, eax
jb 0x46d015
mov eax, dword [ebp - 0x718]
call fcn.004109ce
jmp 0x46d653
mov ecx, dword [ebp - 0x718]
imul edi, edi, 0x31c
add edi, dword [0x4b65d0]
add edi, 0x20
push edi
call fcn.004040e8
jmp 0x46d653
push dword [ebp - 0x718]
mov ecx, ebx
call fcn.0046e6a0
jmp 0x46d653
mov dword [ebx + 0x18], ecx
imul ecx, ecx, 0x31c
add ecx, dword [ebx + 0x38]
lea eax, [ebp - 0x3f0]
push eax
call fcn.00468fdc
push 0x49c198
lea esi, [ebp - 0x3f0]
mov dword [ebp - 4], 0xa
call fcn.00401c1b
jmp 0x46d07f
mov eax, dword [ebx + 0x20]
dec eax
cmp dword [ebx + 0x24], eax
jle 0x46d221
inc dword [ebx + 0x18]
mov eax, dword [ebx + 0x18]
imul eax, eax, 0x31c
add eax, dword [ebx + 0x38]
lea ebx, [ebp - 0x3f0]
call fcn.0041102b
push 0x49c198
mov esi, ebx
call fcn.00401c1b
mov ebx, dword [ebp - 0x720]
pop ecx
test al, al
jne 0x46d046
push 0x49e294
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d0b5
inc dword [ebx + 0x18]
mov eax, dword [ebx + 0x18]
imul eax, eax, 0x31c
add eax, dword [ebx + 0x38]
mov ebx, esi
call fcn.0041102b
mov ebx, dword [ebp - 0x720]
push 0x49c154
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d56a
push str.Ukw
lea eax, [ebp - 0x48]
call fcn.00401556
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x10
or dword [ebp - 0x710], 0x200
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x80]
call fcn.00404573
mov edi, 0x49c198
mov dword [ebp - 4], 0x11
or dword [ebp - 0x710], 0x400
push edi
mov esi, eax
call fcn.00401c1b
pop ecx
test al, al
jne 0x46d175
push str.UkxSPFJPREtH
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0x12
or dword [ebp - 0x710], 0x800
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x64]
call fcn.00404573
mov dword [ebp - 4], 0x13
or dword [ebp - 0x710], 0x1000
push edi
mov esi, eax
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x711], 1
test al, al
je 0x46d17c
mov byte [ebp - 0x711], 0
test dword [ebp - 0x710], 0x1000
je 0x46d19e
and dword [ebp - 0x710], 0xffffefff
push 1
xor edi, edi
lea esi, [ebp - 0x64]
call fcn.0040162a
test dword [ebp - 0x710], 0x800
je 0x46d1c0
and dword [ebp - 0x710], 0xfffff7ff
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
test dword [ebp - 0x710], 0x400
je 0x46d1e2
and dword [ebp - 0x710], 0xfffffbff
push 1
xor edi, edi
lea esi, [ebp - 0x80]
call fcn.0040162a
mov dword [ebp - 4], 0xa
test dword [ebp - 0x710], 0x200
je 0x46d20b
and dword [ebp - 0x710], 0xfffffdff
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
cmp byte [ebp - 0x711], 0
je 0x46d3a4
push 0xa
mov ecx, ebx
jmp 0x46d356
push str.Ukw
lea eax, [ebp - 0x48]
call fcn.00401556
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xb
or dword [ebp - 0x710], 0x20
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x80]
call fcn.00404573
mov dword [ebp - 4], 0xc
or dword [ebp - 0x710], 0x40
push 0x49c1b4
mov esi, eax
call fcn.00401c1b
pop ecx
mov edi, 0x100
test al, al
je 0x46d2c6
push str.UkxSPFJPREtH
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0xd
or dword [ebp - 0x710], 0x80
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x64]
call fcn.00404573
mov dword [ebp - 4], 0xe
or dword [ebp - 0x710], edi
push 0x49c198
mov esi, eax
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x711], 1
test al, al
je 0x46d2cd
mov byte [ebp - 0x711], 0
test dword [ebp - 0x710], edi
je 0x46d2eb
and dword [ebp - 0x710], 0xfffffeff
push 1
xor edi, edi
lea esi, [ebp - 0x64]
call fcn.0040162a
test byte [ebp - 0x710], 0x80
je 0x46d30a
and dword [ebp - 0x710], 0xffffff7f
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
test byte [ebp - 0x710], 0x40
je 0x46d326
and dword [ebp - 0x710], 0xffffffbf
push 1
xor edi, edi
lea esi, [ebp - 0x80]
call fcn.0040162a
mov dword [ebp - 4], 0xa
test byte [ebp - 0x710], 0x20
je 0x46d349
and dword [ebp - 0x710], 0xffffffdf
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
cmp byte [ebp - 0x711], 0
mov ecx, ebx
je 0x46d366
push 0xa
push dword [ebp - 0x718]
call fcn.0046cb5b
jmp 0x46d63c
lea eax, [ebp - 0x6ec]
push eax
call fcn.0046e6a0
lea eax, [ebp - 0x6ec]
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x718]
push eax
call fcn.004040e8
or dword [ebp - 0x710], 0x10
lea eax, [ebp - 0x6ec]
push eax
mov byte [ebp - 4], 0xa
call fcn.00404757
jmp 0x46d643
push str.a2ViXHJlXzkp
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0041fe3a
cmp dword [eax + 0x14], 8
pop ecx
mov ecx, dword [eax + 0x10]
jb 0x46d3cd
mov eax, dword [eax]
push ecx
push eax
xor eax, eax
lea ecx, [ebp - 0x3cc]
call fcn.004062f4
cmp eax, 0xffffffff
setne byte [ebp - 0x719]
push 1
xor edi, edi
lea esi, [ebp - 0x64]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.0040162a
cmp byte [ebp - 0x719], 0
jne 0x46d218
mov eax, dword [ebx + 0xc]
mov edi, 0x4000
cmp eax, dword [ebx + 8]
jge 0x46d46d
push str.RVJbOEdDTUFMUUNSRA
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x15
or dword [ebp - 0x710], 0x2000
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x64]
call fcn.00404573
mov dword [ebp - 4], 0x16
or dword [ebp - 0x710], edi
push 0x49c1e4
mov esi, eax
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x711], 1
test al, al
je 0x46d474
mov byte [ebp - 0x711], 0
test dword [ebp - 0x710], edi
je 0x46d492
and dword [ebp - 0x710], 0xffffbfff
push 1
xor edi, edi
lea esi, [ebp - 0x64]
call fcn.0040162a
mov dword [ebp - 4], 0xa
test dword [ebp - 0x710], 0x2000
je 0x46d4bb
and dword [ebp - 0x710], 0xffffdfff
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
cmp byte [ebp - 0x711], 0
je 0x46d218
lea ecx, [ebp - 0x6ec]
call fcn.0046de51
xor ebx, ebx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x6d8], ebx
jne 0x46d661
cmp dword [ebp - 0x6a0], ebx
jne 0x46d661
mov edi, dword [ebp - 0x720]
mov eax, dword [edi + 0x3c]
sub eax, dword [edi + 0x38]
mov esi, 0x31c
cdq
idiv esi
mov ecx, dword [edi + 0x18]
cmp ecx, eax
jae 0x46d667
mov eax, ecx
imul eax, eax, 0x31c
add eax, dword [edi + 0x38]
lea ebx, [ebp - 0x3f0]
call fcn.0041102b
push 0x49e294
lea esi, [ebp - 0x2d0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d558
cmp dword [0x4b65b4], 1
jle 0x46d558
inc dword [edi + 0x18]
mov eax, dword [edi + 0x18]
imul eax, eax, 0x31c
add eax, dword [edi + 0x38]
call fcn.0041102b
lea eax, [ebp - 0x6ec]
push eax
mov byte [ebp - 4], 0xa
call fcn.00404757
mov ebx, edi
push 0x49c1b4
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
mov edi, 0x3e8
test al, al
je 0x46d5b3
push 0x46b9c3
push 0x7d0
push edi
push dword [0x4b643c]
call dword [sym.imp.USER32.dll_SetTimer]
lea eax, [ebp - 0x724]
push eax
xor eax, eax
push eax
push ebx
push 0x46b799
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x49c1b0
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d698
push edi
push dword [0x4b643c]
call dword [sym.imp.USER32.dll_KillTimer]
lea ecx, [ebp - 0x2b4]
mov byte [0x4b659b], 1
call fcn.00416290
mov eax, dword [0x4b616c]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 9
push dword [eax + 4]
call esi
push 3
xor eax, eax
push eax
push eax
push eax
push eax
push eax
mov eax, dword [0x4b616c]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x4b616c]
push 5
push dword [eax + 4]
call esi
mov ebx, 0x4b6598
call fcn.0046f48e
mov ecx, dword [ebp - 0x718]
lea eax, [ebp - 0x3d0]
push eax
call fcn.004040e8
or dword [ebp - 0x710], 0x10
mov byte [ebp - 4], 0
lea eax, [ebp - 0x3f0]
push eax
call fcn.00410ffe
mov eax, dword [ebp - 0x718]
call fcn.0047aedc
ret 8
mov edi, dword [ebp - 0x720]
mov ecx, dword [ebp - 0x718]
inc dword [edi + 0xc]
lea eax, [ebp - 0x6ec]
push eax
call fcn.004040e8
or dword [ebp - 0x710], 0x10
lea eax, [ebp - 0x6ec]
push eax
mov byte [ebp - 4], 0xa
call fcn.00404757
mov byte [ebp - 4], bl
jmp 0x46d647
push 0x4a4d80
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d731
lea eax, [ebp - 0x3cc]
push eax
lea esi, [ebp - 0x48]
call fcn.00405b15
push str.UEc9RUtVSlFJP0FB
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00401556
mov eax, esi
push eax
mov byte [ebp - 4], 0x19
call fcn.00404533
lea edx, [ebp - 0x2c]
mov ecx, eax
call fcn.0040b78d
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.0040162a
call fcn.0046b199
mov ebx, 0x4b6598
call fcn.0046f48e
mov ecx, dword [ebp - 0x720]
push 0
push dword [ebp - 0x718]
call fcn.0046cb5b
or dword [ebp - 0x710], 0x10
lea esi, [ebp - 0x48]
xor edi, edi
push 1
call fcn.0040162a
jmp 0x46d643
push 0x4a4d10
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d793
lea eax, [ebp - 0x308]
push eax
lea esi, [ebp - 0x48]
call fcn.00405b15
push 0x4a4d14
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1a
call fcn.00401556
mov eax, esi
push eax
mov byte [ebp - 4], 0x1b
call fcn.00404533
lea edx, [ebp - 0x2c]
mov ecx, eax
call fcn.0040b78d
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x1a
call fcn.0040162a
mov ecx, ebx
jmp 0x46d70c
mov eax, dword [ebx + 0x3c]
sub eax, dword [ebx + 0x38]
mov ecx, 0x31c
cdq
idiv ecx
mov ecx, dword [ebx + 0x18]
inc ecx
cmp ecx, eax
jb 0x46d7d5
lea esi, [ebp - 0x70c]
call fcn.00410fe3
lea ebx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x1c
call fcn.0041102b
mov eax, esi
push eax
mov byte [ebp - 4], 0xa
call fcn.00410ffe
mov ebx, dword [ebp - 0x720]
push 0x4986d0
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46da8e
mov edi, ebx
call fcn.0047002d
lea ecx, [ebp - 0x260]
mov byte [ebp - 0x719], al
call fcn.0046edef
cmp al, 1
je 0x46d218
lea eax, [ebp - 0x3d0]
push 1
push eax
call fcn.00419564
pop ecx
pop ecx
test al, al
jne 0x46d218
lea eax, [ebp - 0x3d0]
push eax
call fcn.00419e33
pop ecx
test al, al
jne 0x46d218
cmp dword [ebx + 0x24], 0
jle 0x46d84e
cmp byte [ebp - 0x719], 1
je 0x46d218
mov eax, dword [ebx + 0xc]
cmp eax, dword [ebx + 8]
jl 0x46d869
call fcn.0046ef3e
mov ebx, dword [ebp - 0x720]
test eax, eax
jg 0x46d218
push str.Ukw
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x64]
call fcn.00404573
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.0040162a
push str.UkxSPFJPREtH
lea eax, [ebp - 0x48]
call fcn.00401556
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x20
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x80]
call fcn.00404573
push 1
lea esi, [ebp - 0x48]
mov byte [ebp - 4], 0x22
call fcn.0040162a
push str.Ukw
lea eax, [ebp - 0x9c]
call fcn.00401556
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x23
or dword [ebp - 0x710], 0x8000
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0xd4]
call fcn.00404573
mov dword [ebp - 4], 0x24
or dword [ebp - 0x710], 0x10000
push 0x49c198
mov esi, eax
call fcn.00401c1b
pop ecx
mov edi, 0x40000
test al, al
jne 0x46d986
push str.UkxSPFJPREtH
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0x25
or dword [ebp - 0x710], 0x20000
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0xb8]
call fcn.00404573
mov dword [ebp - 4], 0x26
or dword [ebp - 0x710], edi
push 0x49c198
mov esi, eax
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x711], 1
test al, al
je 0x46d98d
mov byte [ebp - 0x711], 0
test dword [ebp - 0x710], edi
je 0x46d9ae
and dword [ebp - 0x710], 0xfffbffff
push 1
xor edi, edi
lea esi, [ebp - 0xb8]
call fcn.0040162a
test dword [ebp - 0x710], 0x20000
je 0x46d9d0
and dword [ebp - 0x710], 0xfffdffff
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
test dword [ebp - 0x710], 0x10000
je 0x46d9f5
and dword [ebp - 0x710], 0xfffeffff
push 1
xor edi, edi
lea esi, [ebp - 0xd4]
call fcn.0040162a
mov dword [ebp - 4], 0x22
test dword [ebp - 0x710], 0x8000
je 0x46da21
and dword [ebp - 0x710], 0xffff7fff
push 1
xor edi, edi
lea esi, [ebp - 0x9c]
call fcn.0040162a
cmp byte [ebp - 0x711], 0
je 0x46da54
push 0xa
push dword [ebp - 0x718]
mov ecx, ebx
call fcn.0046cb5b
or dword [ebp - 0x710], 0x10
push 1
xor edi, edi
lea esi, [ebp - 0x80]
call fcn.0040162a
lea esi, [ebp - 0x64]
jmp 0x46d723
cmp byte [ebp - 0x719], 1
jne 0x46da60
inc dword [ebx + 0x24]
call fcn.0046ef3e
mov ecx, dword [ebp - 0x720]
add dword [ecx + 0xc], eax
push 1
xor edi, edi
lea esi, [ebp - 0x80]
call fcn.0040162a
push 1
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 0xa
call fcn.0040162a
mov ebx, dword [ebp - 0x720]
push 0x49c3e8
lea esi, [ebp - 0x3f0]
call fcn.00401c1b
pop ecx
test al, al
je 0x46d62a
push 0
jmp 0x46d21a