Function at 0x4402e0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x546dc7
mov eax, dword fs:[0]
push eax
mov eax, 0x1d00
call fcn.004741b0
mov eax, dword [0x672114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, 0x6c
lea edi, [ebp - 0x6d4]
mov esi, str.NS1zTWj654NDmpLDst6uxEJWDlZ7Oqf2fFM8FUxKkIZTfWTovT76wMVXJ8jEiFmbye3qTbm4gZg3gx6iCKq4ZRXZIc3H2tNci0HbLgkYAm5HJFg9GQpAPtaqeFinyK88zavcOB62Bx6dpBpdItxgHMzI1NfqGkYu0k1flQDzbCNSqDYpRCRvhOUkko6NGiUYvjMPpcmfFASKWCpVsbxN0M9NeV6y2fJoKgTRhjdt8HGTBDsjnGMAJ2STxI0744l2gnIc9ybcRJHsTOFJnAZHfSOsMbLPDjBIL7cEGkJpzqOjLdOT95r4nBpDGPydYHsr4pmCN2L6z7UIPKO6p1aJnPaz8wvfTxTlzSDcxSZNEMnTI1roMO7IQiSZWK8lXjPiTrFXCSZG99QZOHwJjnncroT8fhmvxKCj6ofplAbd0K0EO6TwIu
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x63
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.RGfAKodiM1BUnu4z8XHXjHxu6qzbFSXhj89EN9vZXzTSSCKheeXgI3hT3w5PKqB2uGJA7ly4f2R6kj6pbqOgoBETpOJehnN34nXB4fNaQ5vbytR0WNE9oJlzpLdb5MbM6wlREMGP9pwD03QBN9dMicSavcRIEDZdm7kughvMw0ezMK4LYiCLW1AmvKRcG1Ne1luKuwowosI5VcW4mxbLzJC8Sa4QTBqV5jhoR09XRNot3uUPHgasw4fv0K0NVkh4XDwUywYKBLYrBx7T2iC2yDAZHDrfLtIz2Kf5Y5sgGN8sv2oxIGf4D5f7hGNXNMvRtXyJWv60Ey2ehQPqqE1dGGWrOX5ITehmcnFRjBw3U4vk4xtwwDcqR21yPpDWCqEk3sOfGkQ9wPPl
lea edi, [ebp - 0x380]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x33
movsb byte es:[edi], byte [esi]
mov esi, str.2fEGiaYCYRnC5yOCk4VOXMvP6hrM4eqCU2vov4D9cpFHwi3ynPih9TRMtjIu6FAVddvwfoKomFP7n3ovquGaKn1hrUZDYOLszcJjnokVpHSgzcWkBJpSsoKW2RUF7nu9YGCLm1XVFWDKqtxNfY8hgNsQYG6kym6mWkxkpb0Gcc2VWcYqHiqT2chaufuUPXjV3mZLmKfUk3K9
lea edi, [ebp - 0xe0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x77
movsb byte es:[edi], byte [esi]
mov esi, str.kIkYoS58xYfeMz14pSu3fqooCMoB58jb6V7jChXvmOhQVRQM66iRedFIpTcRIjZqo6KzQxrBJOtXBmtF6yLusnw9KyebDFdmcQuaCTHoXBdFoifUtGDuocyNCZacifWYfeWEfWekCEbUaqupUaJoQDn9UQAKjIOYJHN1grs9BHoRTHS0pM6Zp7wAK5VQ9LFpwHNu5RZQWUK1GnlYST6KCNOAPrHtzNLOetGxM0D5rFJYVahYmGXgrSqNBY04UOCydzgAiacge5W5YDlDF9yNZQ3XwOnVZhyxG048h0Bsn4nvsGHwZGxeJAFLViiBKTIlsYnvZEaIFPady75DsPeAWTqmWsF5lWv4ay9ImnhxWrnJdQxTiLztnTgWL8zsc3dx2W0R1P522sCkoJIrKGPcUnAw4bFpR56K74BM0WzKbrPNQnAuaFW20AnBZcM2iS2CnDkCB7QFz5N2t89T8tlWiZeEHDk2Ar
lea edi, [ebp - 0x8b4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x44
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.e42Nu3PUulnWUoXKUjW0jSJsBqdgsXIn8vOUnlBjoeEqak4owXjEBv89lYRYeZ3xlzXbQLGtLaOWxQUNqIPnVzB43kzLjHS9hhCdfHW2Qd6wiYTjIKqqgy9Htmadw5lXzBAe570Q6ytQjnLmVvngmGcLOiWUmbzS8jWUBkDmCzv8VkE3Y6e6sObS5MXeTEszSLZ4KRwnQ8tlylTHrRHgbnhSfoLEKTUl9XPsTMblpdkV25hkFMSOUT5bD5t1CIWRaBL2IBnaEUfcIr5
lea edi, [ebp - 0x1f0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x67
lea edi, [ebp - 0x520]
mov esi, str.kudCOLYHbFOQfGHuEzI4Tpr58vDLALIswbak1b4JiulKdOCvPLQuVu3AeME1HjOmL7lpEtexDnTR7KK48sEbckNTE6eayC6clkKtzlTB90e2Rh5tcltZbRlA3fynHcbqeKqeZxnZlLHMhuSZR1WWKSCP2TAJ0n5NdXBp0kFg9fdLgYC0PcOtLp9yJRLwt4n9PAqrQQgOFfXafX8UKzF45aYGDjNzHX4zSsSSWjnJoTLO9dXRIb2ft1e6BYEZZDbLTw563cZ0MGoYxzBDx2ugMGzOwJhTlHyZ7aSd3HGjaLjLIsvdUjZeT4rGnje9hikS1hGKNM1WKo8DMnUHdiolQ5VsUMVhucRiN66QofZ5Om79dqAD8Z0VYsPuacOTS3VNGyalkSgGXQatfBIGAoKI6lADExDl
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x59
movsb byte es:[edi], byte [esi]
mov esi, str.HealhNxSuJ4UDZuhqnmdOjQT6qNuDFnW0l85XK3nLjvuecEFcFyfxROOlSwV5Umz3VplZVVATbXAZUyEPHj86tWR2Iwcl4FDetPDfcN0hv5Er3rfZrO47SEKIOJavWdQxwBXzLG3LwhBf08O4t1oDIfMxSMWF5G2FQ5eelqkxfL0f6XamlzOL63xJK5cVWNMQ2raFFOij5DN8jq8Y5AYKB2WWCPVWIiAAnDYQrRTBRHP1IRnAnDXmss9VGMIOmwFPGUYBiKkgVbox8pskozTtiBWO4bfwSdab1YiIhXgWaoU0TCjLJaolPiWjHrH4JStgRjVBHgQyq5bSqUZpMkDoIjOE57lzkWndDw
lea edi, [ebp - 0x1178]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4e
lea edi, [ebp - 0xc10]
mov esi, str.OCbveKpnZWLLzu7rSihtXHjUqxEyrp1Geye1vIqAl0tbqK7KeVIojCFKaHm27TAW9XcJ48FwC7hMMZFvCc9Niq5EhlY7dvpQDhHAlI1rBlv9mrsnS233n6yn9sQkAZ0N16VQImMCgRxJCleLn6HyMbtos0k8e5l23CyEK1ZRJcMwmYe3BTC0ZVMUowc24mv4FXqhlLrN5h4LkrH0sXAbCXQRkBbAGuzIRe4kBaqREG3Hljqx4B7AfzZ0sKhvQFIiNRBwtt8FY0BQ50YK4EVhB5YFUWSFYWufg13xjqoKDmsaH99iSUVDq9Vy1J
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x41
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.2EREKwgpMpXeXZwLcDykQwe8oYecYbsUqT8MJjciYbImgDKGAg8aBzf0JpdxoqzlAj1wFDwk73XZmPEB2bxlWa2LMoxRl4fmdYaHdl7nIwT52XUyyFnEn1esVvRibrKWYeev2tSmOO6WN8akARKuxXHp7AgGR3WdiWpmuLQTMxgogMDEoR7QyFaznpctjH0dUAoDSCtmJmYD3FxjsrKZ9ruhGCPDHhXvUEME1mzWHhQ07fyxbDtV6Aw0rk8bzyfguRh
lea edi, [ebp - 0x9b8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x57
lea edi, [ebp - 0x1014]
mov esi, str.jhAPh44x7ogTTSQPhNMwGZfXC81wPJYEWf886BIg6TkdUhlexRd3OQ7MX8KdPSsdk8vOMsWtoSS3684kFE0Tkn4gdR2RGEjogTR6ekpLQjDtYRsIv8VVRdGzsos1k7WexCXSnpJqp3NIQ9U9Uhjdul2T4n3mfgG0f36uShOWbo3QRSEcpN5Bf2X8wLPIIj6dtPI46PBQ6Y2Zooh0W4U3QAOlJxtZNw9PCwIWyJfk0tbEHTE9GXJ3ab0p7kxmyQrBvqthaRPcLB3p5peMcwzMyFyDTWxy78dBgTn9E9z6n7ICZtVSB7sWqgIGz3pWrseMkxREhL1grj3yoV8vELi7L4Cljd1
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x60
lea edi, [ebp - 0x1478]
mov esi, str.aOgYcDI3sOiplJ329nEq3IC2060PjWIvRuaw5ff9YeaHSiqsaeQWj2Db2tAMG7GqzH1yqppAkfY61YXDsONErneWgqF6v8peWYaIvi6eN0CTzhSZYrJiFMEXhVe0RFYTMr6dNvD9rBD4zNVXuBt1sH4tupjzIoI9TKr63LZEBC4RStmdr1AKhwO2Zk2WJXM5sSkp9V3aO5w2zpknsjWCPBRsBBJuLbjLLZqEcCUPz2CfytI11Fc4ZYYTROJQZkzzf7pJfi4DEKiIKJ3RPynWRkZJE0lF5yNILVidssap1ynwWNmGQHCTu3rxnmj4wOlI5dyPgybbAJEEWgI2WUpiVQX74J4I3NpjE5uOxzjZQDVTmi5h1qhPXxWDp573DONao
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x63
movsw word es:[edi], word [esi]
mov esi, str.dIjR1iDht9hJJ0NHnZgJPQtEPzbDubJJLzMHE4CNnVEMH7dOrt7FFs4omBfDJkxc3qSZ4O2B2eoRpWj3HCLi2jrV9IOSfLJ2GDpjaDTf9gWo8rRUgD8Kz9gZ7WR8zqaJP1dceY46uqq3CQ8cIvdF2CDxwvKnPPj55MsfqLSmHtzoF2Ts36VB6htOtyeCyXZ54UdEWIeT0VnY0ZZmSwlmgaZrIhsRngVycLQXGJ3OugHFm9XpYqIc4mzcd4ZEMM1fzSIDqYtJbXeDzNoGgsGgCtyEOocg2IZweZ6ckg5WYmxRhVcxHQOqhSqDyIhXsUqMwSsK0NGNMJrD91JhZz30yKgw8TlH3QUyU1xknRcGBpY1TPnLZYPVMkGv7LPMZAdBmBkYLN4szMx
lea edi, [ebp - 0x1604]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5f
lea edi, [ebp - 0x12f4]
mov esi, str.aZxY4jGf9jjPSH5KLj7EVKsKngLtumFy2ilgTbeo8xkpEkgrc5QerAkqaQ47Yrfz8Ket5zPE9fZ6fXpmNsp0KrCI6pAhZJ72D7bRgFpA6E0MAqBT9r8vhH0bSpPXTpqHsk46JaXs9eC3sHhSIKgKil5lhrsJRJfKIcu47Jn0jKh5ZzxktfKZVtF04GsPYrQyyGO24s1uE3q6cHzTTSaf1QXrFc5beb8GSThCNHGmQgBiK8LymLDPpqbzj3MKWSWm6ASwFZ67mZ0U5KupBq8PVJNMycwCBmbKzB11ZzdfgMIGiNmpPc1aGlQeXDoFgj2wtfrLlCvhzXEgOfi0iLdfFwbpf0heoiL3XB7UsqU9CoXpsV3BVt1Ctxbdt2h
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
lea edi, [ebp - 0x1b00]
mov esi, str.yj7iKQJzjsNRQjOpB7ZbzfedKWyWcfdQEwTfJEMfEmSJBBHk7vZ4jlRTrVvubsM90JAJq8lilgWrtqN8prgaEVY4NgevQIKo3cfHlrcANMdWcSxC0oUryHw0E4VsWAcYSCwOHr2zahGAySwuHmdbNoeWxPHTKeDNE59xRl7Yavi9oYNiTLahE2GzDFVKj68hqypEHkDnSIEBywsrANlt2vH3rhN6luKJVZiCgNYvHhR6UsytUWc12vzS08W1PaFFdM5kjLzeuOdHxmnGeDEJTKKU6kHjo5Ijr6M6je4lWppk5hkMkOrTgD4jCRuEHFmFC7rjOfump6AjanVhvQlkIOgHBn2KVQXHidRIPxSpWTBfeIY5BBIDIenWF3iqz7ioO17glKP8SbgcaFv9g0zc2hOsFC4c2tUs7iu1c3u7IEimzONHjm0zfN0GwzFgMUSXQtTZDpmZFKkb6t9FNGEk6
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x63
movsw word es:[edi], word [esi]
mov esi, str.UoRhj3WuNlAfoSXnUMhQ2g52KM5WE0TqmsFii91FLFnQmObSiPdIVD2a98c6y6vKUtCdWM5YR74dOr0OLCaeSMpRGxsGO5FctNl2HcmqGjICN2ui0kWCsot76ROs8xEODwXNZ7yBecbkvBiwamaYu4VegByomaoeK2phlQJBCMs7929lWfjJW4v8rZKyTIwseJHSOBbH3Duv2wiFW1g1T9KmdVw9hoJFBhUGIUAH4V8iulHcdeFGAkeI54rcl6MactZuG0wVwcbqT3PKsgDtZDbYKYfn8C4aDUz7jMCuJXDivUy9VB3gToLlKNrEKXrV9x99qwneqiHYg4JU15BNhBhD9tyx01AUDozCPwuuoRze2CRbllbmEAeQTE1YdIKj345Wl6GtLrsp
lea edi, [ebp - 0x1794]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x79
movsb byte es:[edi], byte [esi]
mov esi, str.unEk5cRJANMTMOy2iB72B2YLfTIGaAD0EXKlyIP07Jr6QHZxZwuhqwvz0SfMW1ZyVVRsev4kLc4mAENpnaFSHJJLuO00tq4W305s6IS02lyo6cOhhI9QOJI2kyZDLwlNIEKUf8ecGNHxTCs0ILyg3D9dwu4Tf1kpECmqJSqnuYoWhbSlpNNxkycAHzwPT0jtbfwrwd4K7JFhCtqwcZjcQP36pdZzxEODgTUaFAu8uFRrupkwWctf1Jg17KXAQ9PoJ5OyghQMyB3tg2tqtA7hdDe01cNkezh5aSlLDwlABMowSkJcI8jpSulZxcS53ccf6S3UxNvjka4qsKGPH5ghPChXjyIq3cwdjEqKA1I6G0QqXuZuvqaSuup7XLdJQ6sJDyIH0ghxMnvhUGFETl1L3NTgYndVf1UeKUblHnOhAbp1jCEucvCDR1fDWzxrYWepzAaIGnnqOfbiOzriSN9fU7f5nxKqTY4bqdD1JA
lea edi, [ebp - 0x1ce8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x52
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.AZ28c7IVL3H670crw4DajLK8W2QClknhpuP1kpSsaFrhwjqRzRC3iEMBRag2uNV3Obncl9qcPq8jjpmeN0TKC2XDFX2fyQj2CqcRyJ3f3JOGLfXOOXd7kPJSI38s5OQ48jyiJJHVZ6yaYVQxtoAMaXvAwubKTNCWZtHZE2VnuPO0xTm2t458dddLh6QUBV3Ej3MmrEw7fGLZ5QVHpfJ9wZdiLupoItuE5jpOUBCR4lcTMjsmnZzakdFuamu89VJM2XnBz9z5aJpzmwchmU3SIUpZDahiPPhOuKhrM1VVwJUWlf3BRNCK8awq2cWCd8GLCGCvblJo
lea edi, [ebp - 0xd5c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
mov dword [ebp - 0x1d0c], 0
mov dword [ebp - 0x1d08], 0
mov dword [ebp - 0x1d04], 0
movsb byte es:[edi], byte [esi]
mov esi, str.dX2f6QqHkr2pVwSWs7NnXo1NFcVLtTqDs17IEsKCXCowXVXKRtPmiMo6fUTdeoZzdxTFC209XHwd0UB4ZgkdxPTAqvhsFDIUwBKGMPAyqo0VbxPJm1BuWk84rhbIKDJCJCNiSXqGwbrTAz7iV2ciWmRKXb4jRqogbRWtTdKWputi55tpmeDzC2g6bmudArxMKDJobi2q3kKVxc6jNNWxw83dZB5HoXTWEqUXaIMmLpUcAuIN4pRuAYxvkVUwiLuTFbgzyajUHOPkA59W1sZ5Dq024sJYGkg5cLHV4uEBd2a2vnNTPnaqbH2iPb2WmwZHZNtffw6u2NUgrfqGetarUykn
lea edi, [ebp - 0xeb8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x64
movsb byte es:[edi], byte [esi]
mov esi, str.L1pTknBAKqZg2FMiap3PNLI6HAdMpMcBiHmVY7KOkOA7Zq43Qos1RQY0Ei6dCgXa1SxohBWXsKbNQvoTAwGDXbX4a81WuqmQlSncjSt95ESkgVfSYDMAjYEuGWsNeUSvhBxwWMhiHLee2USLBdMzC0rz3azzFbZsSTQU4OOCNymxCyosQ7yfahUaHvtOqqFOQ92gsy9PqNus9ya7jnihHH4JNBtNOkLYzjkjFmcYJ8db65Mp0byeCxTvj6EdBleRH1taINpzRZu0dTNMttynnDxjZvzQpzWWBEl144piCWIYURSAPOfmgrPxXYJbIviFrS2EF9WmTXMHnR5TZaclfVkOKdgG1OpquJmPuQi7veGhs5lVLZ5fzj0lr2zRaKACZfsRUHfVMNyuHJvWae
lea edi, [ebp - 0x1928]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x46
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.cPQMdVnTWIr9bv6RbOFtvViWw9WLdNpIKHiXlDP0yfLPxYPy9LieDvKU12TwrtS4nHj43sYcZMGjKrsDbt6fgNDBugyO7q3oT147iU6qoPEF1hQEiugFvnDzcaOt9D0Zx8LRhxqiqiMqUiP7MBkAnu3eqK1RzJwCyleXUsARixMZyRcqjGQlu7j54SIgN3hAlvlFajwQesonk9KgJnwpIoxFlRMOzABAAZoQIC8wIDFfh7G0VySPJHHmaOje44QUKDPAlaactpBRbUvlTHtsxJcS
lea edi, [ebp - 0xad4]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x6d4], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1cec], 0xf
mov dword [ebp - 0x1cf0], 0
mov byte [ebp - 0x1d00], 0
jne 0x4404e3
xor ecx, ecx
jmp 0x4404f9
lea ecx, [ebp - 0x6d4]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4404f0
sub ecx, edx
push ecx
lea eax, [ebp - 0x6d4]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.00407f10
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440544
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
cmp byte [ebp - 0x380], 0
mov dword [ebp - 0x1cec], 0xf
mov dword [ebp - 0x1cf0], 0
mov byte [ebp - 0x1d00], 0
jne 0x44056c
xor ecx, ecx
jmp 0x44057e
lea ecx, [ebp - 0x380]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440575
sub ecx, edx
push ecx
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.00407f10
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4405c9
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
cmp byte [ebp - 0xe0], 0
mov dword [ebp - 0x1cec], 0xf
mov dword [ebp - 0x1cf0], 0
mov byte [ebp - 0x1d00], 0
jne 0x4405f1
xor ecx, ecx
jmp 0x440609
lea ecx, [ebp - 0xe0]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440600
sub ecx, edx
push ecx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.00407f10
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440654
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
cmp byte [ebp - 0x8b4], 0
mov dword [ebp - 0x1cec], 0xf
mov dword [ebp - 0x1cf0], 0
mov byte [ebp - 0x1d00], 0
jne 0x44067c
xor ecx, ecx
jmp 0x44068e
lea ecx, [ebp - 0x8b4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440685
sub ecx, edx
push ecx
lea eax, [ebp - 0x8b4]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.00407f10
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4406d9
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
cmp byte [ebp - 0x1f0], 0
mov dword [ebp - 0x1cec], 0xf
mov dword [ebp - 0x1cf0], 0
mov byte [ebp - 0x1d00], 0
jne 0x440701
xor ecx, ecx
jmp 0x440719
lea ecx, [ebp - 0x1f0]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440710
sub ecx, edx
push ecx
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.00407f10
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440764
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
cmp byte [ebp - 0x520], 0
mov dword [ebp - 0x1cec], 0xf
mov dword [ebp - 0x1cf0], 0
mov byte [ebp - 0x1d00], 0
jne 0x44078c
xor eax, eax
jmp 0x44079e
lea eax, [ebp - 0x520]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x440795
sub eax, edx
push eax
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.00407f10
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4407e9
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1178]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440833
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0xc10]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x44087d
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x9b8]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4408c7
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440911
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1478]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x44095b
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1604]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4409a5
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x12f4]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4409ef
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1b00]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440a39
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1794]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
mov eax, dword [ebp - 0x1cec]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x440a83
inc eax
lea ecx, [ebp - 0x1d00]
push eax
push dword [ebp - 0x1d00]
call fcn.00408010
lea eax, [ebp - 0x1ce8]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0xd5c]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0xeb8]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x1928]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0xad4]
push eax
lea ecx, [ebp - 0x1d00]
call fcn.004057d0
lea eax, [ebp - 0x1d00]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1d0c]
call fcn.00408170
lea ecx, [ebp - 0x1d00]
mov byte [ebp - 4], 0
call fcn.00405a30
cmp dword [ebx + 0x4c8], 0
je 0x440ba6
mov ecx, ebx
call fcn.00441e00
lea eax, [ebx + 0x4d4]
push eax
push 0
push ebx
push 0x441500
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x1d0c]
mov dword [ebx + 0x4d0], eax
call fcn.00405a70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474193
mov esp, ebp
pop ebp
ret