Function at 0x43fbe0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46385d
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xf10
mov eax, dword [0x476090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x88]
call dword [0x467194]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call dword [0x467194]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc0]
call dword [0x467194]
mov byte [ebp - 4], 2
call fcn.00407300
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0xb4c], 1
je 0x43fc5b
jmp 0x43fc65
call fcn.0041a0d0
call fcn.00410f80
lea ecx, [ebp - 0x4c]
call dword [0x467194]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call dword [0x467194]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call dword [0x467194]
mov byte [ebp - 4], 5
mov dword [ebp - 0x50], 0
push 0x4762c4
call fcn.0043f8a0
add esp, 4
mov dword [ebp - 0x50], eax
call fcn.00407220
test eax, eax
je 0x43fcc7
push 0x8d
call fcn.004082d0
add esp, 4
cmp eax, 0xd5
jge 0x43fcc7
call fcn.0040fa00
jmp 0x43fce7
push 0xd9
push 0x87
call fcn.004048a0
add esp, 8
cmp eax, 0x726f
jne 0x43fce2
jmp 0x43fce7
call fcn.00420890
call fcn.00407290
test eax, eax
je 0x43fcf5
call fcn.00419a80
cmp dword [ebp - 0x50], 0
jne 0x43fdf1
lea eax, [ebp - 0x11c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x100], esp
push 0x23
push 0x46a684
call dword [0x4671b4]
mov dword [ebp - 0xb50], eax
lea ecx, [ebp - 0xfc]
call fcn.00402800
mov dword [ebp - 0xb54], eax
mov ecx, dword [ebp - 0xb54]
mov dword [ebp - 0xb58], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xb58]
call fcn.00402aa0
mov dword [ebp - 0xb5c], eax
mov edx, dword [ebp - 0xb5c]
mov dword [ebp - 0xb60], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xb60]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0xdc]
call dword [0x46718c]
mov byte [ebp - 4], 8
lea eax, [ebp - 0xdc]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xdc]
call dword [0x467174]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xfc]
call fcn.0042b130
push 0x4d
push 0x76
call fcn.004073e0
add esp, 8
mov dword [ebp - 0xb64], eax
cmp dword [ebp - 0xb64], 0x26
je 0x43fde0
jmp 0x43fde2
jmp 0x43fdec
call fcn.00415140
call fcn.004110b0
jmp 0x43ff12
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x120], esp
push 0x4762c4
call dword [0x4671a0]
mov dword [ebp - 0xb68], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xb6c], eax
mov ecx, dword [ebp - 0xb6c]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jne 0x43ff12
lea edx, [ebp - 0x17c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x160], esp
push 0x25
push 0x46a6a8
call dword [0x4671b4]
mov dword [ebp - 0xb70], eax
lea ecx, [ebp - 0x15c]
call fcn.00402800
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0xb74]
mov dword [ebp - 0xb78], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xb78]
call fcn.00402aa0
mov dword [ebp - 0xb7c], eax
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp - 0xb80], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xb80]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x13c]
call dword [0x46718c]
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x13c]
push edx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x13c]
call dword [0x467174]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x17c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x15c]
call fcn.0042b130
call fcn.004034c0
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0xb84], 1
je 0x43ff08
jmp 0x43ff12
call fcn.00415140
call fcn.004111e0
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x1c0]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a4], esp
push 0xb
push 0x46a6d0
call dword [0x4671b4]
mov dword [ebp - 0xb88], eax
lea ecx, [ebp - 0x1a0]
call fcn.00402800
mov dword [ebp - 0xb8c], eax
mov edx, dword [ebp - 0xb8c]
mov dword [ebp - 0xb90], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xb90]
call fcn.004028b0
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0xb98], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xb98]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x180], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xb9c], eax
call fcn.0043fa60
add esp, 0x20
mov dword [ebp - 0xba0], eax
mov ecx, dword [ebp - 0xba0]
mov dword [ebp - 0x50], ecx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1c0]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1a0]
call fcn.0042b130
mov byte [ebp - 4], 0xe
call fcn.00406a10
jmp 0x43fffc
mov dword [ebp - 4], 5
call fcn.00407220
test eax, eax
je 0x440022
push 0x31
call fcn.004082d0
add esp, 4
cmp eax, 0x4b
jge 0x440022
call fcn.00410c40
jmp 0x440042
push 0xae
push 0xd9
call fcn.004048a0
add esp, 8
cmp eax, 0x937e
jne 0x44003d
jmp 0x440042
call fcn.00415140
cmp dword [ebp - 0x50], 0
jne 0x440115
lea edx, [ebp - 0x21c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x200], esp
push 0x27
push 0x46a6dc
call dword [0x4671b4]
mov dword [ebp - 0xba4], eax
lea ecx, [ebp - 0x1fc]
call fcn.00402800
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0xbac], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xbac]
call fcn.00402e20
mov dword [ebp - 0xbb0], eax
mov ecx, dword [ebp - 0xbb0]
mov dword [ebp - 0xbb4], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xbb4]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x1dc]
call dword [0x46718c]
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x1dc]
push edx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1dc]
call dword [0x467174]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x21c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1fc]
call fcn.0042b130
jmp 0x440767
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x220], esp
lea eax, [ebp - 0xa4]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xbb8], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jne 0x44021d
lea edx, [ebp - 0x27c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x260], esp
push 0x29
push 0x46a704
call dword [0x4671b4]
mov dword [ebp - 0xbc0], eax
lea ecx, [ebp - 0x25c]
call fcn.00402800
mov dword [ebp - 0xbc4], eax
mov eax, dword [ebp - 0xbc4]
mov dword [ebp - 0xbc8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xbc8]
call fcn.004028b0
mov dword [ebp - 0xbcc], eax
mov ecx, dword [ebp - 0xbcc]
mov dword [ebp - 0xbd0], ecx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xbd0]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x23c]
call dword [0x46718c]
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x23c]
push edx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x23c]
call dword [0x467174]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x27c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x25c]
call fcn.0042b130
jmp 0x440767
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push 0x24
push 0x46a730
call dword [0x4671b4]
mov dword [ebp - 0xbd4], eax
lea ecx, [ebp - 0x2a0]
call fcn.00402800
mov dword [ebp - 0xbd8], eax
mov edx, dword [ebp - 0xbd8]
mov dword [ebp - 0xbdc], edx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xbdc]
call fcn.00402cc0
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0xbe4], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xbe4]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x280], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xbe8], eax
mov ecx, dword [ebp - 0xbe8]
mov dword [ebp - 0xbec], ecx
mov byte [ebp - 4], 0x18
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c4], esp
lea edx, [ebp - 0xa4]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xbf0], eax
mov byte [ebp - 4], 0x17
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x2c0]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a0]
call fcn.0042b130
call fcn.004071a0
test eax, eax
je 0x440313
call fcn.00419a80
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c8], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xbf4], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xbf8], eax
mov ecx, dword [ebp - 0xbf8]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x4403dc
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30c], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0xbfc]
mov dword [ebp - 0xc00], eax
mov byte [ebp - 4], 0x19
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x310], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc04], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x308]
call fcn.00441df0
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0xc0c], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xc0c]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x308]
call fcn.00441ea0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x354]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x2f
push 0x46a758
call dword [0x4671b4]
mov dword [ebp - 0xc10], eax
lea ecx, [ebp - 0x334]
call fcn.00402800
mov dword [ebp - 0xc14], eax
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0xc18], ecx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xc18]
call fcn.00402e20
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0xc1c]
mov dword [ebp - 0xc20], edx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0xc20]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x314], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xc24], eax
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0xc28], eax
mov byte [ebp - 4], 0x1d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x358], esp
lea edx, [ebp - 0xa4]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc2c], eax
mov byte [ebp - 4], 0x1c
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x354]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x334]
call fcn.0042b130
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x35c], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xc30], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0xc34]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x44058d
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a0], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0xc38]
mov dword [ebp - 0xc3c], eax
mov byte [ebp - 4], 0x1e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a4], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc40], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x39c]
call fcn.00441df0
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xc48], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0xc48]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x39c]
call fcn.00441ea0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x3e8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3cc], esp
push 0x38
push 0x46a788
call dword [0x4671b4]
mov dword [ebp - 0xc4c], eax
lea ecx, [ebp - 0x3c8]
call fcn.00402800
mov dword [ebp - 0xc50], eax
mov ecx, dword [ebp - 0xc50]
mov dword [ebp - 0xc54], ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xc54]
call fcn.00402cc0
mov dword [ebp - 0xc58], eax
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0xc5c], edx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0xc5c]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a8], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0xc64], eax
mov byte [ebp - 4], 0x22
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ec], esp
lea edx, [ebp - 0xa4]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc68], eax
mov byte [ebp - 4], 0x21
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x3e8]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3c8]
call fcn.0042b130
mov byte [ebp - 4], 0x23
call fcn.00407150
jmp 0x440697
mov dword [ebp - 4], 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3f0], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xc6c], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xc70], eax
mov ecx, dword [ebp - 0xc70]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x440767
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x434], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0xc78], eax
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x438], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xc7c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x430]
call fcn.00441df0
mov dword [ebp - 0xc80], eax
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0xc84], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xc84]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x430]
call fcn.00441ea0
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x47c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x460], esp
push 7
push 0x46a7c4
call dword [0x4671b4]
mov dword [ebp - 0xc88], eax
lea ecx, [ebp - 0x45c]
call fcn.00402800
mov dword [ebp - 0xc8c], eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0xc90], ecx
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0xc90]
call fcn.00402e20
mov dword [ebp - 0xc94], eax
mov edx, dword [ebp - 0xc94]
mov dword [ebp - 0xc98], edx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xc98]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x43c], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xc9c], eax
call fcn.0043fa60
add esp, 0x20
mov dword [ebp - 0xca0], eax
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x47c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x45c]
call fcn.0042b130
call fcn.00407110
test eax, eax
je 0x44083d
call fcn.00411700
cmp dword [ebp - 0x50], 0
jne 0x440910
lea ecx, [ebp - 0x4d8]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4bc], esp
push 0x23
push 0x46a7cc
call dword [0x4671b4]
mov dword [ebp - 0xca4], eax
lea ecx, [ebp - 0x4b8]
call fcn.00402800
mov dword [ebp - 0xca8], eax
mov edx, dword [ebp - 0xca8]
mov dword [ebp - 0xcac], edx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0xcac]
call fcn.00402aa0
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0xcb4], eax
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0xcb4]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x498]
call dword [0x46718c]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x498]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x498]
call dword [0x467174]
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4d8]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4b8]
call fcn.0042b130
jmp 0x440e0e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4dc], esp
lea edx, [ebp - 0x88]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xcb8], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xcbc], eax
mov eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x440a18
lea ecx, [ebp - 0x538]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x51c], esp
push 0x25
push 0x46a7f0
call dword [0x4671b4]
mov dword [ebp - 0xcc0], eax
lea ecx, [ebp - 0x518]
call fcn.00402800
mov dword [ebp - 0xcc4], eax
mov edx, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc8], edx
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xcc8]
call fcn.004029a0
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0xcd0], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0xcd0]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x4f8]
call dword [0x46718c]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4f8]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x4f8]
call dword [0x467174]
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x538]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x518]
call fcn.0042b130
jmp 0x440e0e
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x57c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x560], esp
push 2
push 0x46a818
call dword [0x4671b4]
mov dword [ebp - 0xcd4], eax
lea ecx, [ebp - 0x55c]
call fcn.00402800
mov dword [ebp - 0xcd8], eax
mov ecx, dword [ebp - 0xcd8]
mov dword [ebp - 0xcdc], ecx
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0xcdc]
call fcn.004028b0
mov dword [ebp - 0xce0], eax
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0xce4], edx
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0xce4]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x53c], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xce8], eax
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0xcec], eax
mov byte [ebp - 4], 0x31
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x580], esp
lea edx, [ebp - 0x88]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xcf0], eax
mov byte [ebp - 4], 0x30
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x57c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x55c]
call fcn.0042b130
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x584], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xcf4], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf8]
mov dword [ebp - 0x50], ecx
call fcn.00407090
test eax, eax
je 0x440b58
push 0x83
push 0x5e
call fcn.004073e0
add esp, 8
cmp eax, 0x106
jge 0x440b58
call fcn.00411830
jmp 0x440b73
push 0xa9
push 0x69
call fcn.004073e0
add esp, 8
cmp eax, 0x54
jne 0x440b6e
jmp 0x440b73
call fcn.00411960
cmp dword [ebp - 0x50], 1
jne 0x440c0a
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5c8], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0xcfc]
mov dword [ebp - 0xd00], eax
mov byte [ebp - 4], 0x32
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5cc], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xd04], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c4]
call fcn.00441df0
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0xd0c], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0xd0c]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c4]
call fcn.00441ea0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x610]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5f4], esp
push 0xd
push 0x46a81c
call dword [0x4671b4]
mov dword [ebp - 0xd10], eax
lea ecx, [ebp - 0x5f0]
call fcn.00402800
mov dword [ebp - 0xd14], eax
mov ecx, dword [ebp - 0xd14]
mov dword [ebp - 0xd18], ecx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0xd18]
call fcn.004028b0
mov dword [ebp - 0xd1c], eax
mov edx, dword [ebp - 0xd1c]
mov dword [ebp - 0xd20], edx
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0xd20]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5d0], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], eax
mov byte [ebp - 4], 0x36
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x614], esp
lea edx, [ebp - 0x88]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xd2c], eax
mov byte [ebp - 4], 0x35
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x610]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5f0]
call fcn.0042b130
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x618], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xd30], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xd34], eax
mov ecx, dword [ebp - 0xd34]
mov dword [ebp - 0x50], ecx
push 0x37
push 0xd7
call fcn.004048a0
add esp, 8
cmp eax, 0x2e31
jne 0x440d48
call fcn.004055e0
test eax, eax
je 0x440d48
call fcn.00420890
cmp dword [ebp - 0x50], 1
jne 0x440e0e
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x65c], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], eax
mov byte [ebp - 4], 0x37
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x660], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xd40], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x658]
call fcn.00441df0
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0xd48], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0xd48]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x658]
call fcn.00441ea0
push 0xea
push pe_nt_image_headers32
call fcn.004073e0
add esp, 8
mov dword [ebp - 0xd4c], eax
cmp dword [ebp - 0xd4c], 0x75
je 0x440e02
jmp 0x440e04
jmp 0x440e0e
call fcn.00402070
call fcn.0040fa00
lea edx, [ebp - 0xc0]
push edx
lea eax, [ebp - 0x6a4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x688], esp
push 0xa
push 0x46a82c
call dword [0x4671b4]
mov dword [ebp - 0xd50], eax
lea ecx, [ebp - 0x684]
call fcn.00402800
mov dword [ebp - 0xd54], eax
mov ecx, dword [ebp - 0xd54]
mov dword [ebp - 0xd58], ecx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0xd58]
call fcn.00402aa0
mov dword [ebp - 0xd5c], eax
mov edx, dword [ebp - 0xd5c]
mov dword [ebp - 0xd60], edx
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0xd60]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x664], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xd64], eax
call fcn.0043fa60
add esp, 0x20
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0xd68]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x6a4]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x684]
call fcn.0042b130
cmp dword [ebp - 0x50], 0
jne 0x440fd2
lea ecx, [ebp - 0x700]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6e4], esp
push 0x26
push 0x46a838
call dword [0x4671b4]
mov dword [ebp - 0xd6c], eax
lea ecx, [ebp - 0x6e0]
call fcn.00402800
mov dword [ebp - 0xd70], eax
mov edx, dword [ebp - 0xd70]
mov dword [ebp - 0xd74], edx
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0xd74]
call fcn.004028b0
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0xd78]
mov dword [ebp - 0xd7c], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0xd7c]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x6c0]
call dword [0x46718c]
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x6c0]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x6c0]
call dword [0x467174]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x700]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6e0]
call fcn.0042b130
mov byte [ebp - 4], 0x3e
call fcn.00406f60
jmp 0x440fc6
mov dword [ebp - 4], 5
jmp 0x4416cd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x704], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xd80], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x4410da
lea ecx, [ebp - 0x760]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x744], esp
push 0x28
push 0x46a860
call dword [0x4671b4]
mov dword [ebp - 0xd88], eax
lea ecx, [ebp - 0x740]
call fcn.00402800
mov dword [ebp - 0xd8c], eax
mov edx, dword [ebp - 0xd8c]
mov dword [ebp - 0xd90], edx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0xd90]
call fcn.004028b0
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0xd98], eax
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0xd98]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x720]
call dword [0x46718c]
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x720]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x720]
call dword [0x467174]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x760]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x740]
call fcn.0042b130
jmp 0x4416cd
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x7a4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x788], esp
push 2
push 0x46a88c
call dword [0x4671b4]
mov dword [ebp - 0xd9c], eax
lea ecx, [ebp - 0x784]
call fcn.00402800
mov dword [ebp - 0xda0], eax
mov ecx, dword [ebp - 0xda0]
mov dword [ebp - 0xda4], ecx
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0xda4]
call fcn.00402aa0
mov dword [ebp - 0xda8], eax
mov edx, dword [ebp - 0xda8]
mov dword [ebp - 0xdac], edx
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0xdac]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x764], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0xdb4], eax
mov byte [ebp - 4], 0x45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7a8], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xdb8], eax
mov byte [ebp - 4], 0x44
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x7a4]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x784]
call fcn.0042b130
push 0xfe
call fcn.004082d0
add esp, 4
mov dword [ebp - 0xdbc], eax
cmp dword [ebp - 0xdbc], 0x17f
je 0x4411e3
jmp 0x4411e5
jmp 0x4411ef
call fcn.0041a0d0
call fcn.00411b30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7ac], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xdc0], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0xdc4]
mov dword [ebp - 0x50], ecx
call fcn.00407050
test eax, eax
je 0x44122f
call fcn.00402070
call fcn.00406fd0
mov dword [ebp - 0xdc8], eax
cmp dword [ebp - 0xdc8], 1
je 0x441245
jmp 0x44124f
call fcn.0040fa00
call fcn.00420890
cmp dword [ebp - 0x50], 1
jne 0x4412e6
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7f0], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0xdd0], eax
mov byte [ebp - 4], 0x46
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7f4], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xdd4], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7ec]
call fcn.00441df0
mov dword [ebp - 0xdd8], eax
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0xddc], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0xddc]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7ec]
call fcn.00441ea0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x838]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0xa
push 0x46a890
call dword [0x4671b4]
mov dword [ebp - 0xde0], eax
lea ecx, [ebp - 0x818]
call fcn.00402800
mov dword [ebp - 0xde4], eax
mov ecx, dword [ebp - 0xde4]
mov dword [ebp - 0xde8], ecx
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0xde8]
call fcn.00402e20
mov dword [ebp - 0xdec], eax
mov edx, dword [ebp - 0xdec]
mov dword [ebp - 0xdf0], edx
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0xdf0]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7f8], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xdf4], eax
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0xdf8], eax
mov byte [ebp - 4], 0x4a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x83c], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xdfc], eax
mov byte [ebp - 4], 0x49
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x838]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x818]
call fcn.0042b130
push 0xc4
push 0xcf
call fcn.004073e0
add esp, 8
mov dword [ebp - 0xe00], eax
cmp dword [ebp - 0xe00], 0x62
je 0x4413f1
jmp 0x4413f3
jmp 0x4413fd
call fcn.00420890
call fcn.00411ed0
mov byte [ebp - 4], 0x4b
call fcn.00407220
jmp 0x44141f
mov dword [ebp - 4], 5
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x840], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xe04], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xe08], eax
mov ecx, dword [ebp - 0xe08]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x4414ef
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x884], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0xe10], eax
mov byte [ebp - 4], 0x4d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x888], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xe14], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x880]
call fcn.00441df0
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0xe1c], eax
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0xe1c]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x880]
call fcn.00441ea0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x8cc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8b0], esp
push 0x15
push 0x46a89c
call dword [0x4671b4]
mov dword [ebp - 0xe20], eax
lea ecx, [ebp - 0x8ac]
call fcn.00402800
mov dword [ebp - 0xe24], eax
mov ecx, dword [ebp - 0xe24]
mov dword [ebp - 0xe28], ecx
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0xe28]
call fcn.00402e20
mov dword [ebp - 0xe2c], eax
mov edx, dword [ebp - 0xe2c]
mov dword [ebp - 0xe30], edx
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0xe30]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x88c], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0xe38], eax
mov byte [ebp - 4], 0x51
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d0], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xe3c], eax
mov byte [ebp - 4], 0x50
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x8cc]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8ac]
call fcn.0042b130
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d4], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xe40], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xe44], eax
mov ecx, dword [ebp - 0xe44]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x4416cd
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x918], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp - 0xe48]
mov dword [ebp - 0xe4c], eax
mov byte [ebp - 4], 0x52
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x91c], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xe50], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x914]
call fcn.00441df0
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0xe54]
mov dword [ebp - 0xe58], eax
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0xe58]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x914]
call fcn.00441ea0
push 0x87
call fcn.004082d0
add esp, 4
mov dword [ebp - 0xe5c], eax
cmp dword [ebp - 0xe5c], 0xcc
je 0x4416c1
jmp 0x4416c3
jmp 0x4416cd
call fcn.004123a0
call fcn.00412740
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x960]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x944], esp
push 0xf
push 0x46a8b4
call dword [0x4671b4]
mov dword [ebp - 0xe60], eax
lea ecx, [ebp - 0x940]
call fcn.00402800
mov dword [ebp - 0xe64], eax
mov ecx, dword [ebp - 0xe64]
mov dword [ebp - 0xe68], ecx
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0xe68]
call fcn.00402aa0
mov dword [ebp - 0xe6c], eax
mov edx, dword [ebp - 0xe6c]
mov dword [ebp - 0xe70], edx
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0xe70]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x920], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xe74], eax
call fcn.0043fa60
add esp, 0x20
mov dword [ebp - 0xe78], eax
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x960]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x940]
call fcn.0042b130
call fcn.00406f60
test eax, eax
je 0x4417a5
call fcn.00410c40
call fcn.00402070
cmp dword [ebp - 0x50], 0
jne 0x441878
lea ecx, [ebp - 0x9bc]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9a0], esp
push 0x25
push 0x46a8c4
call dword [0x4671b4]
mov dword [ebp - 0xe7c], eax
lea ecx, [ebp - 0x99c]
call fcn.00402800
mov dword [ebp - 0xe80], eax
mov edx, dword [ebp - 0xe80]
mov dword [ebp - 0xe84], edx
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0xe84]
call fcn.004028b0
mov dword [ebp - 0xe88], eax
mov eax, dword [ebp - 0xe88]
mov dword [ebp - 0xe8c], eax
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0xe8c]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x97c]
call dword [0x46718c]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x97c]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x97c]
call dword [0x467174]
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x9bc]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x99c]
call fcn.0042b130
jmp 0x441d67
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9c0], esp
lea edx, [ebp - 0x4c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xe90], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xe94], eax
mov eax, dword [ebp - 0xe94]
mov dword [ebp - 0x50], eax
call fcn.00406ee0
test eax, eax
je 0x4418b8
call fcn.00412870
cmp dword [ebp - 0x50], 0
jne 0x44198b
lea ecx, [ebp - 0xa1c]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa00], esp
push 0x27
push 0x46a8ec
call dword [0x4671b4]
mov dword [ebp - 0xe98], eax
lea ecx, [ebp - 0x9fc]
call fcn.00402800
mov dword [ebp - 0xe9c], eax
mov edx, dword [ebp - 0xe9c]
mov dword [ebp - 0xea0], edx
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0xea0]
call fcn.00402cc0
mov dword [ebp - 0xea4], eax
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0xea8], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0xea8]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x9dc]
call dword [0x46718c]
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x9dc]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x9dc]
call dword [0x467174]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xa1c]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x9fc]
call fcn.0042b130
jmp 0x441d67
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xa60]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa44], esp
push 2
push 0x46a914
call dword [0x4671b4]
mov dword [ebp - 0xeac], eax
lea ecx, [ebp - 0xa40]
call fcn.00402800
mov dword [ebp - 0xeb0], eax
mov ecx, dword [ebp - 0xeb0]
mov dword [ebp - 0xeb4], ecx
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0xeb4]
call fcn.004028b0
mov dword [ebp - 0xeb8], eax
mov edx, dword [ebp - 0xeb8]
mov dword [ebp - 0xebc], edx
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0xebc]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa20], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xec0], eax
mov eax, dword [ebp - 0xec0]
mov dword [ebp - 0xec4], eax
mov byte [ebp - 4], 0x5e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa64], esp
lea edx, [ebp - 0x4c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xec8], eax
mov byte [ebp - 4], 0x5d
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xa60]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa40]
call fcn.0042b130
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa68], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xecc], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xed0], eax
mov ecx, dword [ebp - 0xed0]
mov dword [ebp - 0x50], ecx
mov byte [ebp - 4], 0x5f
call fcn.00406e60
jmp 0x441ac4
mov dword [ebp - 4], 5
cmp dword [ebp - 0x50], 1
jne 0x441b62
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xaac], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0xed4]
mov dword [ebp - 0xed8], eax
mov byte [ebp - 4], 0x61
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xab0], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xedc], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xaa8]
call fcn.00441df0
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0xee4], eax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0xee4]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xaa8]
call fcn.00441ea0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xaf4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xad8], esp
push 0xd
push 0x46a918
call dword [0x4671b4]
mov dword [ebp - 0xee8], eax
lea ecx, [ebp - 0xad4]
call fcn.00402800
mov dword [ebp - 0xeec], eax
mov ecx, dword [ebp - 0xeec]
mov dword [ebp - 0xef0], ecx
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0xef0]
call fcn.004029a0
mov dword [ebp - 0xef4], eax
mov edx, dword [ebp - 0xef4]
mov dword [ebp - 0xef8], edx
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0xef8]
call dword [0x46717c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xab4], esp
push eax
call dword [0x46718c]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0xefc]
mov dword [ebp - 0xf00], eax
mov byte [ebp - 4], 0x65
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xaf8], esp
lea edx, [ebp - 0x4c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xf04], eax
mov byte [ebp - 4], 0x64
call fcn.0043e920
add esp, 0x3c
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0xaf4]
call dword [0x467174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xad4]
call fcn.0042b130
call fcn.004055e0
test eax, eax
je 0x441c6b
push 0xdf
call fcn.004082d0
add esp, 4
cmp eax, 0x150
jge 0x441c6b
call fcn.00410c40
jmp 0x441c8b
push 0xc9
push 0xd4
call fcn.004048a0
add esp, 8
cmp eax, 0xa674
jne 0x441c86
jmp 0x441c8b
call fcn.00415140
call fcn.00405710
test eax, eax
je 0x441c9e
call fcn.00410c40
call fcn.0040fa00
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xafc], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4671a0]
mov dword [ebp - 0xf08], eax
call fcn.0043f780
add esp, 0x1c
mov dword [ebp - 0xf0c], eax
mov ecx, dword [ebp - 0xf0c]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x441d67
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb40], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0xf10]
mov dword [ebp - 0xf14], eax
mov byte [ebp - 4], 0x66
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb44], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4671a0]
mov dword [ebp - 0xf18], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb3c]
call fcn.00441df0
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp - 0xf1c]
mov dword [ebp - 0xf20], eax
mov byte [ebp - 4], 0x67
mov ecx, dword [ebp - 0xf20]
push ecx
mov ecx, 0x47617c
call fcn.00457900
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb3c]
call fcn.00441ea0
mov dword [ebp - 0xb48], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call dword [0x467174]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call dword [0x467174]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call dword [0x467174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc0]
call dword [0x467174]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call dword [0x467174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call dword [0x467174]
mov eax, dword [ebp - 0xb48]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045f9ec
mov esp, ebp
pop ebp
ret