Function at 0x468ba0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10141c75
mov eax, dword fs:[0]
push eax
sub esp, 0x378
mov eax, dword [0x101d74a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0x78]
call 0x3dcc60
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call dword [0x10152a70]
mov edi, eax
cmp edi, ebx
je 0x469f60
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], esi
call fcn.004e2900
movzx eax, al
cmp eax, ebx
mov dword [ebp - 0x148], eax
je 0x469f5a
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fbd0
call fcn.004decb0
movzx eax, al
cmp eax, ebx
mov dword [ebp - 0x148], eax
je 0x469f5a
lea ecx, [ebp - 0x78]
call fcn.004de1a0
mov edi, dword [0x1015292c]
nop
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fa14
call fcn.004decb0
cmp al, bl
je 0x469f52
push ecx
mov eax, esp
mov dword [eax], 0x1015fbc4
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 1
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fbb8
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 2
call dword [0x101526a0]
push eax
call edi
mov esi, eax
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x124], esi
mov byte [ebp - 4], bl
call dword [0x10152680]
cmp esi, 0x32
jb 0x468d12
mov dword [ebp - 0x124], 0x32
mov esi, dword [ebp - 0x124]
jmp 0x468d1a
cmp esi, ebx
je 0x469f5a
mov eax, dword [ebp - 0xf8]
cmp eax, ebx
jne 0x468f63
xor ecx, ecx
mov eax, esi
mov edx, 0x2c
mul edx
seto cl
mov dword [ebp - 0x120], ebx
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call fcn.004e3489
add esp, 4
mov dword [ebp - 0xf4], eax
cmp eax, ebx
mov byte [ebp - 4], 3
je 0x468d8f
push 0x10128ea0
push 0x100b76e0
push esi
mov dword [eax], esi
add eax, 4
push 0x2c
push eax
mov dword [ebp - 0xf8], eax
call fcn.004e3610
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], ecx
jmp 0x468d95
mov dword [ebp - 0xf8], ebx
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x244]
push ecx
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], bl
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], edx
call fcn.004cef90
lea ecx, [ebp - 0x78]
call fcn.004de1a0
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], edx
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fbac
call fcn.004decb0
cmp al, bl
je 0x469f45
cmp dword [ebp - 0x120], esi
jae 0x469f45
mov esi, dword [ebp - 0xf8]
add dword [ebp - 0x120], 1
add dword [ebp - 0xf8], 0x2c
push ecx
mov eax, esp
mov dword [esi + 4], ebx
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 4
call dword [0x101526a0]
push eax
lea ecx, [esi + 8]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb9c
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 5
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [esi + 0x24], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb80
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 6
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [esi + 0x28], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 7
call dword [0x101526bc]
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x128], ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 8
push eax
add ecx, 0xc
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 7
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call dword [0x10152680]
mov esi, dword [ebp - 0x124]
jmp 0x468dd7
cmp eax, 1
jne 0x46925d
xor ecx, ecx
mov eax, esi
mov edx, 0x64
mul edx
seto cl
mov dword [ebp - 0x120], ebx
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call fcn.004e3489
add esp, 4
mov dword [ebp - 0xf4], eax
cmp eax, ebx
mov byte [ebp - 4], 9
je 0x468fd3
push 0x100b7660
push 0x100b7700
push esi
mov dword [eax], esi
add eax, 4
push 0x64
push eax
mov dword [ebp - 0xf8], eax
call fcn.004e3610
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], ecx
jmp 0x468fd9
mov dword [ebp - 0xf8], ebx
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x1e4]
push ecx
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], bl
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x14c], edx
call fcn.004cef90
lea ecx, [ebp - 0x78]
call fcn.004de1a0
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], edx
nop
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fbac
call fcn.004decb0
cmp al, bl
je 0x469f45
cmp dword [ebp - 0x120], esi
jae 0x469f45
mov esi, dword [ebp - 0xf8]
add dword [ebp - 0xf8], 0x64
push ecx
mov eax, 1
add dword [ebp - 0x120], eax
mov dword [esi + 4], eax
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0xa
call dword [0x101526a0]
push eax
lea ecx, [esi + 8]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb9c
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0xb
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [esi + 0x24], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb80
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0xc
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [esi + 0x28], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1a0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1017d510
call fcn.004decb0
push ecx
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0xd
call dword [0x101526a0]
push eax
lea ecx, [esi + 0x2c]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb74
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0xe
call dword [0x101526a0]
push eax
lea ecx, [esi + 0x48]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1c0
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea edx, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xf
call dword [0x101526bc]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0x144]
push ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x1fc]
push edx
add ecx, 0xc
mov byte [ebp - 4], 0x10
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xf
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call dword [0x10152680]
mov esi, dword [ebp - 0x124]
jmp 0x469020
cmp eax, 2
jne 0x469c43
xor ecx, ecx
mov eax, esi
mov edx, 0xec
mul edx
seto cl
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call fcn.004e3489
add esp, 4
mov dword [ebp - 0xf4], eax
cmp eax, ebx
mov byte [ebp - 4], 0x11
je 0x4692c4
push 0x100b8bb0
push 0x100b8cc0
push esi
mov dword [eax], esi
add eax, 4
push 0xec
push eax
mov dword [ebp - 0xf8], eax
call fcn.004e3610
mov esi, dword [ebp - 0xf8]
jmp 0x4692c6
xor esi, esi
lea ecx, [ebp - 0x160]
push ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x214]
push edx
mov byte [ebp - 4], bl
mov dword [ebp - 0x160], 2
mov dword [ebp - 0x15c], esi
call fcn.004cef90
lea ecx, [ebp - 0x78]
mov dword [esi + 4], 2
call fcn.004de1a0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fb68
call fcn.004decb0
lea ecx, [ebp - 0x78]
call fcn.004de1a0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fb58
call fcn.004decb0
cmp al, bl
je 0x4694b6
push ecx
mov eax, esp
mov dword [eax], 0x1015fb9c
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [esi + 0x24], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1017ab84
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x13
call dword [0x101526a0]
push eax
lea ecx, [esi + 8]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov edx, dword [esi + 0x24]
mov dword [ebp - 0x100], edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x14
call dword [0x101526bc]
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x128], ecx
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x22c]
push eax
lea ecx, [esi + 0x64]
mov byte [ebp - 4], 0x15
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x14
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call dword [0x10152680]
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x16
call dword [0x101526bc]
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x128], edx
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, dword [ebp - 0xfc]
add ecx, 0xc
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x16
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call dword [0x10152680]
jmp 0x469320
lea ecx, [ebp - 0x78]
call fcn.004de1c0
lea ecx, [ebp - 0xf0]
call fcn.00467370
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x18
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fb50
call fcn.004decb0
lea ecx, [ebp - 0x78]
call fcn.004de1a0
lea esp, [esp]
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fb40
call fcn.004decb0
cmp al, bl
je 0x4698be
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb34
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x19
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x1a
call dword [0x101526a0]
push eax
lea ecx, [esi + 8]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb20
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [0x101526a0]
push eax
lea ecx, [ebp - 0x94]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
mov eax, dword [ebp - 0xf0]
cmp eax, 1
jne 0x46970e
lea ecx, [ebp - 0x78]
call fcn.004de1a0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1017d314
call fcn.004decb0
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1017ab84
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x1c
call dword [0x101526a0]
push eax
lea ecx, [ebp - 0xcc]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1a0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fb74
call fcn.004decb0
push ecx
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x1d
call dword [0x101526a0]
push eax
lea ecx, [ebp - 0xec]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb14
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1c0
jmp 0x4697c4
cmp eax, 2
jne 0x4697cc
lea ecx, [ebp - 0x78]
call fcn.004de1a0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1017d510
call fcn.004decb0
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1017ab84
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x1f
call dword [0x101526a0]
push eax
lea ecx, [ebp - 0xcc]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
mov dword [eax], 0x1015fb74
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x20
call dword [0x101526a0]
push eax
lea ecx, [ebp - 0xb0]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1c0
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x2f0]
call dword [0x101526bc]
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x21
call fcn.004674c0
lea edx, [ebp - 0x2f0]
push edx
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x22
call fcn.00467550
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x220]
push ecx
lea ecx, [esi + 0x70]
mov byte [ebp - 4], 0x23
call fcn.00468390
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x22
call fcn.00467460
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x18
call fcn.00467460
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea edx, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x24
call dword [0x101526bc]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0x144]
push ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x1d8]
push edx
add ecx, 0xc
mov byte [ebp - 4], 0x25
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x24
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
jmp 0x4694f0
lea ecx, [ebp - 0x78]
call fcn.004de1c0
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fb0c
call fcn.004decb0
push ecx
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x26
call dword [0x101526a0]
push eax
lea ecx, [esi + 0x7c]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea eax, [esi + 0x7c]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x27
call dword [0x101526bc]
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x128], edx
mov ecx, dword [ebp - 0xfc]
lea eax, [ebp - 0x144]
push eax
lea edx, [ebp - 0x250]
add ecx, 0xc
push edx
mov byte [ebp - 4], 0x28
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x27
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1017d314
call fcn.004decb0
push ecx
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x29
call dword [0x101526a0]
push eax
lea ecx, [esi + 0x98]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea eax, [esi + 0x98]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x2a
call dword [0x101526bc]
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x128], edx
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x1f0]
push ecx
mov ecx, dword [ebp - 0xfc]
add ecx, 0xc
mov byte [ebp - 4], 0x2b
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x2a
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015faf4
call fcn.004decb0
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1017ab84
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [0x101526a0]
push eax
lea ecx, [esi + 0xb4]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea eax, [esi + 0xb4]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x2d
call dword [0x101526bc]
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x128], ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x238]
push eax
add ecx, 0xc
mov byte [ebp - 4], 0x2e
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x2d
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
push ecx
mov eax, esp
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fad4
lea ecx, [ebp - 0x78]
call fcn.004decb0
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1017ab84
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x2f
call dword [0x101526a0]
push eax
lea ecx, [esi + 0xd0]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea eax, [esi + 0xd0]
push eax
lea ecx, [ebp - 0x11c]
call dword [0x101526bc]
mov dword [ebp - 0x100], esi
lea edx, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x30
call dword [0x101526bc]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0x144]
push ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x208]
push edx
add ecx, 0xc
mov byte [ebp - 4], 0x31
call fcn.004682a0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x30
call dword [0x10152680]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x18
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1c0
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], bl
call fcn.004673e0
jmp 0x468c50
cmp eax, 3
jne 0x469f52
xor ecx, ecx
mov eax, esi
mov edx, 0x58
mul edx
seto cl
mov dword [ebp - 0x120], ebx
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call fcn.004e3489
add esp, 4
mov dword [ebp - 0xf4], eax
cmp eax, ebx
mov byte [ebp - 4], 0x32
je 0x469cb3
push 0x100b8950
push 0x100b8a60
push esi
mov dword [eax], esi
add eax, 4
push 0x58
push eax
mov dword [ebp - 0xf8], eax
call fcn.004e3610
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], ecx
jmp 0x469cb9
mov dword [ebp - 0xf8], ebx
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x25c]
push ecx
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], bl
mov dword [ebp - 0x158], 3
mov dword [ebp - 0x154], edx
call fcn.004cef90
lea ecx, [ebp - 0x78]
call fcn.004de1a0
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xf8], edx
nop
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fac8
call fcn.004decb0
cmp al, bl
je 0x469f45
cmp dword [ebp - 0x120], esi
jae 0x469f45
mov esi, dword [ebp - 0xf8]
add dword [ebp - 0x120], 1
add dword [ebp - 0xf8], 0x58
push ecx
mov eax, esp
mov dword [esi + 4], 3
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x33
call dword [0x101526a0]
push eax
lea ecx, [esi + 8]
call dword [0x10152690]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push ecx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fb9c
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x34
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [esi + 0x24], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
push ecx
mov eax, esp
lea edx, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push edx
lea ecx, [ebp - 0x78]
mov dword [eax], 0x1015fab0
call 0x3dccf0
mov ecx, eax
mov byte [ebp - 4], 0x35
call dword [0x101526a0]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xf4], eax
mov byte [ebp - 4], bl
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1a0
cmp dword [ebp - 0xf4], ebx
je 0x469e77
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015faa0
call fcn.004decb0
cmp al, bl
je 0x469e77
push ecx
mov eax, esp
mov dword [eax], 0x1017ab84
lea eax, [ebp - 0x118]
mov dword [ebp - 0xf4], esp
push eax
lea ecx, [ebp - 0x78]
call 0x3dccf0
push eax
lea ecx, [esi + 0x2c]
mov byte [ebp - 4], 0x36
call 0x3ebfc0
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
jmp 0x469e20
push ecx
mov eax, esp
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xf4], esp
mov dword [eax], 0x1015fa94
call fcn.004decb0
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x78]
call 0x3dccc0
push eax
lea ecx, [esi + 0x3c]
mov byte [ebp - 4], 0x37
call dword [0x101526a4]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], bl
call dword [0x10152680]
lea ecx, [ebp - 0x78]
call fcn.004de1c0
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x188]
call dword [0x101526bc]
mov dword [ebp - 0x16c], esi
lea edx, [ebp - 0x188]
push edx
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x38
call dword [0x101526bc]
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x18c], eax
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x1c0]
push edx
add ecx, 0xc
mov byte [ebp - 4], 0x39
call fcn.004682a0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x38
call dword [0x10152680]
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], bl
call dword [0x10152680]
mov esi, dword [ebp - 0x124]
jmp 0x469d00
lea ecx, [ebp - 0x78]
call fcn.004de1c0
jmp 0x468c50
lea ecx, [ebp - 0x78]
call fcn.004de1c0
mov edi, dword [ebp - 0x148]
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 0xffffffff
call fcn.004e0950
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e35fa
mov esp, ebp
pop ebp
ret 4