Function at 0x445920
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x464331
mov eax, dword fs:[0]
push eax
sub esp, 0x984
mov eax, dword [0x476090]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
lea eax, [ebp - 0x84]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x68], esp
push 7
push 0x46aba0
call dword [0x4671b4]
mov dword [ebp - 0x76c], eax
lea ecx, [ebp - 0x64]
call fcn.00402800
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x774], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x774]
call fcn.00402cc0
mov dword [ebp - 0x778], eax
mov edx, dword [ebp - 0x778]
mov dword [ebp - 0x77c], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x77c]
call dword [0x46717c]
push eax
call fcn.0045fabe
add esp, 4
push eax
lea eax, [ebp - 0xc4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa8], esp
push 7
push 0x46aba8
call dword [0x4671b4]
mov dword [ebp - 0x780], eax
lea ecx, [ebp - 0xa4]
call fcn.00402800
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x788], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x788]
call fcn.00402cc0
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x78c]
mov dword [ebp - 0x790], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x790]
call dword [0x46717c]
push eax
lea ecx, [ebp + 8]
call dword [0x46717c]
push eax
call dword [0x4672cc]
add esp, 0xc
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x41], al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc4]
call dword [0x467174]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa4]
call fcn.0042b130
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x84]
call dword [0x467174]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.0042b130
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x445d97
push 0x46abb0
lea ecx, [ebp - 0xe0]
call dword [0x46718c]
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x798], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x798]
push edx
push 0x4761b0
push 0x46abb4
lea ecx, [ebp - 0xfc]
call dword [0x46718c]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x7a0]
push ecx
lea edx, [ebp - 0x118]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x7a8]
push ecx
lea edx, [ebp - 0x40]
push edx
call dword [0x4671ac]
add esp, 0xc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x118]
call dword [0x467174]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xfc]
call dword [0x467174]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe0]
call dword [0x467174]
call fcn.00406140
test eax, eax
je 0x445b8a
push 0x11
call fcn.004082d0
add esp, 4
cmp eax, 0x1b
jge 0x445b8a
call fcn.00420890
jmp 0x445ba4
push 0x58
push 0x29
call fcn.004073e0
add esp, 8
cmp eax, 0xb0
jne 0x445b9f
jmp 0x445ba4
call fcn.00417480
lea ecx, [ebp - 0x40]
call dword [0x467198]
push eax
lea ecx, [ebp - 0x40]
call dword [0x46717c]
push eax
lea ecx, [ebp + 8]
call dword [0x46717c]
push eax
call dword [0x4672cc]
add esp, 0xc
test eax, eax
je 0x445d65
push 0x46abb8
lea ecx, [ebp - 0x134]
call dword [0x46718c]
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x7b0], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x7b0]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x190]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x174], esp
push 0x17
push 0x46abbc
call dword [0x4671b4]
mov dword [ebp - 0x7b4], eax
lea ecx, [ebp - 0x170]
call fcn.00402800
mov dword [ebp - 0x7b8], eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7bc], ecx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x7bc]
call fcn.00402cc0
mov dword [ebp - 0x7c0], eax
mov edx, dword [ebp - 0x7c0]
mov dword [ebp - 0x7c4], edx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x7c4]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x150]
call dword [0x46718c]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x7cc], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x7cc]
push ecx
lea edx, [ebp - 0x1ac]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x7d4], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x7d4]
push ecx
lea edx, [ebp - 0x1c8]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x7dc], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x7dc]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c8]
call dword [0x467174]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1ac]
call dword [0x467174]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x150]
call dword [0x467174]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x190]
call dword [0x467174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x170]
call fcn.0042b130
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x134]
call dword [0x467174]
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call dword [0x467174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x1cc]
jmp 0x446dcd
push 0
push 0x46abd4
lea ecx, [ebp + 8]
call dword [0x467204]
mov dword [ebp - 0x14], eax
call fcn.00405a10
test eax, eax
je 0x445dbd
call fcn.00415140
call fcn.00420890
mov edx, dword [0x4671d4]
mov eax, dword [ebp - 0x14]
cmp eax, dword [edx]
jne 0x445fa5
push 0x46abd8
lea ecx, [ebp - 0x1e8]
call dword [0x46718c]
mov dword [ebp - 0x7e0], eax
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x7e4], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x7e4]
push edx
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x244]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x228], esp
push 0x17
push 0x46abdc
call dword [0x4671b4]
mov dword [ebp - 0x7e8], eax
lea ecx, [ebp - 0x224]
call fcn.00402800
mov dword [ebp - 0x7ec], eax
mov edx, dword [ebp - 0x7ec]
mov dword [ebp - 0x7f0], edx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x7f0]
call fcn.004029a0
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f8], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x7f8]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x204]
call dword [0x46718c]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp - 0x800], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x800]
push edx
lea eax, [ebp - 0x260]
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x804], eax
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x808], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x808]
push edx
lea eax, [ebp - 0x27c]
push eax
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x80c]
mov dword [ebp - 0x810], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x810]
push edx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x27c]
call dword [0x467174]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x260]
call dword [0x467174]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x204]
call dword [0x467174]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x244]
call dword [0x467174]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x224]
call fcn.0042b130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e8]
call dword [0x467174]
call fcn.00403640
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 1
je 0x445f76
jmp 0x445f80
call fcn.00417820
call fcn.00417870
mov dword [ebp - 0x280], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x280]
jmp 0x446dcd
cmp dword [ebp - 0x14], 0xf
ja 0x446182
push 0x46abf4
lea ecx, [ebp - 0x29c]
call dword [0x46718c]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x81c], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x81c]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x2f8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2dc], esp
push 0x17
push 0x46abf8
call dword [0x4671b4]
mov dword [ebp - 0x820], eax
lea ecx, [ebp - 0x2d8]
call fcn.00402800
mov dword [ebp - 0x824], eax
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x828], ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x828]
call fcn.00402aa0
mov dword [ebp - 0x82c], eax
mov edx, dword [ebp - 0x82c]
mov dword [ebp - 0x830], edx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x830]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x2b8]
call dword [0x46718c]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x838], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x838]
push ecx
lea edx, [ebp - 0x314]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x840], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x840]
push ecx
lea edx, [ebp - 0x330]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x848], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x848]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x330]
call dword [0x467174]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x314]
call dword [0x467174]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2b8]
call dword [0x467174]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2f8]
call dword [0x467174]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2d8]
call fcn.0042b130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x29c]
call dword [0x467174]
call fcn.00406060
test eax, eax
je 0x44614f
call fcn.004179a0
mov dword [ebp - 0x334], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x334]
jmp 0x446dcd
mov edx, dword [ebp - 0x14]
push edx
push 0x46ac10
lea ecx, [ebp + 8]
call dword [0x467208]
mov dword [ebp - 0x20], eax
mov eax, dword [0x4671d4]
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [eax]
jne 0x44638b
push 0x46ac14
lea ecx, [ebp - 0x350]
call dword [0x46718c]
mov dword [ebp - 0x84c], eax
mov edx, dword [ebp - 0x84c]
mov dword [ebp - 0x850], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x850]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x3ac]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x390], esp
push 0x17
push 0x46ac18
call dword [0x4671b4]
mov dword [ebp - 0x854], eax
lea ecx, [ebp - 0x38c]
call fcn.00402800
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x85c], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x85c]
call fcn.00402e20
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x860]
mov dword [ebp - 0x864], ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x864]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x36c]
call dword [0x46718c]
mov dword [ebp - 0x868], eax
mov edx, dword [ebp - 0x868]
mov dword [ebp - 0x86c], edx
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x3c8]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x870], eax
mov edx, dword [ebp - 0x870]
mov dword [ebp - 0x874], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x874]
push eax
lea ecx, [ebp - 0x3e4]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x878], eax
mov edx, dword [ebp - 0x878]
mov dword [ebp - 0x87c], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x87c]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3e4]
call dword [0x467174]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x3c8]
call dword [0x467174]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x36c]
call dword [0x467174]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x3ac]
call dword [0x467174]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x38c]
call fcn.0042b130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x350]
call dword [0x467174]
push 0xe7
call fcn.004082d0
add esp, 4
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 0x15c
je 0x44635a
jmp 0x44635c
jmp 0x446366
call fcn.00420890
call fcn.0041a0d0
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x3e8]
jmp 0x446dcd
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 3
cmp edx, dword [ebp - 0x14]
jbe 0x44655a
push 0x46ac30
lea ecx, [ebp - 0x404]
call dword [0x46718c]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x888], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x888]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x460]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x444], esp
push 0x17
push 0x46ac34
call dword [0x4671b4]
mov dword [ebp - 0x88c], eax
lea ecx, [ebp - 0x440]
call fcn.00402800
mov dword [ebp - 0x890], eax
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x894], ecx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x894]
call fcn.00402cc0
mov dword [ebp - 0x898], eax
mov edx, dword [ebp - 0x898]
mov dword [ebp - 0x89c], edx
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x89c]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x420]
call dword [0x46718c]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a4], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x8a4]
push ecx
lea edx, [ebp - 0x47c]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x8ac], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x8ac]
push ecx
lea edx, [ebp - 0x498]
push edx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x8b4]
push ecx
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x498]
call dword [0x467174]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x47c]
call dword [0x467174]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x420]
call dword [0x467174]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x460]
call dword [0x467174]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x440]
call fcn.0042b130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x404]
call dword [0x467174]
mov dword [ebp - 0x49c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x49c]
jmp 0x446dcd
mov edx, dword [ebp - 0x14]
push edx
push 0x46ac4c
lea ecx, [ebp + 8]
call dword [0x467218]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x4671d4]
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [eax]
jne 0x446765
push 0x46ac50
lea ecx, [ebp - 0x4b8]
call dword [0x46718c]
mov dword [ebp - 0x8b8], eax
mov edx, dword [ebp - 0x8b8]
mov dword [ebp - 0x8bc], edx
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x8bc]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x514]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4f8], esp
push 0x17
push 0x46ac54
call dword [0x4671b4]
mov dword [ebp - 0x8c0], eax
lea ecx, [ebp - 0x4f4]
call fcn.00402800
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c8], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x8c8]
call fcn.004029a0
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x8d0]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x4d4]
call dword [0x46718c]
mov dword [ebp - 0x8d4], eax
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d8], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0x530]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x8dc], eax
mov edx, dword [ebp - 0x8dc]
mov dword [ebp - 0x8e0], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x54c]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x8e4], eax
mov edx, dword [ebp - 0x8e4]
mov dword [ebp - 0x8e8], edx
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x8e8]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x54c]
call dword [0x467174]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x530]
call dword [0x467174]
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x4d4]
call dword [0x467174]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x514]
call dword [0x467174]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4f4]
call fcn.0042b130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4b8]
call dword [0x467174]
mov dword [ebp - 0x550], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x550]
jmp 0x446dcd
mov ecx, dword [ebp - 0x1c]
push ecx
push 0x46ac6c
lea ecx, [ebp + 8]
call dword [0x467204]
mov dword [ebp - 0x18], eax
mov edx, dword [0x4671d4]
mov eax, dword [ebp - 0x18]
cmp eax, dword [edx]
jne 0x446793
lea ecx, [ebp + 8]
call dword [0x467198]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 3
cmp ecx, dword [ebp - 0x18]
jbe 0x446959
push 0x46ac70
lea ecx, [ebp - 0x56c]
call dword [0x46718c]
mov dword [ebp - 0x8f0], eax
mov edx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8f4], edx
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0x8f4]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x5c8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5ac], esp
push 0x17
push 0x46ac74
call dword [0x4671b4]
mov dword [ebp - 0x8f8], eax
lea ecx, [ebp - 0x5a8]
call fcn.00402800
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x900], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x900]
call fcn.00402cc0
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x904]
mov dword [ebp - 0x908], ecx
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x908]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x588]
call dword [0x46718c]
mov dword [ebp - 0x90c], eax
mov edx, dword [ebp - 0x90c]
mov dword [ebp - 0x910], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x910]
push eax
lea ecx, [ebp - 0x5e4]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x914], eax
mov edx, dword [ebp - 0x914]
mov dword [ebp - 0x918], edx
mov byte [ebp - 4], 0x34
mov eax, dword [ebp - 0x918]
push eax
lea ecx, [ebp - 0x600]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x91c], eax
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0x920], edx
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x920]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x600]
call dword [0x467174]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x5e4]
call dword [0x467174]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x588]
call dword [0x467174]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x5c8]
call dword [0x467174]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x5a8]
call fcn.0042b130
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x56c]
call dword [0x467174]
mov dword [ebp - 0x604], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x604]
jmp 0x446dcd
mov ecx, dword [ebp - 0x18]
push ecx
push 0x46ac8c
lea ecx, [ebp + 8]
call dword [0x467218]
mov dword [ebp - 0x24], eax
push 0xf3
push 0x52
call fcn.004048a0
add esp, 8
cmp eax, 0x4dd6
jne 0x446992
call fcn.00407150
test eax, eax
je 0x446992
call fcn.0040fa00
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x608], esp
mov eax, dword [ebp - 0x14]
push eax
push 0
push edx
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x924], eax
call fcn.004497b0
add esp, 0x1c
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 0
je 0x446c1f
mov ecx, dword [ebp - 0x14]
push ecx
push 0
lea edx, [ebp - 0x624]
push edx
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x930], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x930]
push ecx
mov ecx, 0x4761e8
call fcn.00457810
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x624]
call dword [0x467174]
push 0x46ac90
lea ecx, [ebp - 0x640]
call dword [0x46718c]
mov dword [ebp - 0x934], eax
mov edx, dword [ebp - 0x934]
mov dword [ebp - 0x938], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x938]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
push 0
lea edx, [ebp - 0x65c]
push edx
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0x940], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x940]
push ecx
lea edx, [ebp - 0x6b8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x69c], esp
push 0x1d
push 0x46ac94
call dword [0x4671b4]
mov dword [ebp - 0x944], eax
lea ecx, [ebp - 0x698]
call fcn.00402800
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x948]
mov dword [ebp - 0x94c], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x94c]
call fcn.004029a0
mov dword [ebp - 0x950], eax
mov ecx, dword [ebp - 0x950]
mov dword [ebp - 0x954], ecx
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x954]
call dword [0x46717c]
push eax
lea ecx, [ebp - 0x678]
call dword [0x46718c]
mov dword [ebp - 0x958], eax
mov edx, dword [ebp - 0x958]
mov dword [ebp - 0x95c], edx
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x95c]
push eax
lea ecx, [ebp - 0x6d4]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x960], eax
mov edx, dword [ebp - 0x960]
mov dword [ebp - 0x964], edx
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x964]
push eax
lea ecx, [ebp - 0x6f0]
push ecx
call dword [0x4671ac]
add esp, 0xc
mov dword [ebp - 0x968], eax
mov edx, dword [ebp - 0x968]
mov dword [ebp - 0x96c], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x96c]
push eax
mov ecx, 0x4762ac
call fcn.00457810
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x6f0]
call dword [0x467174]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x6d4]
call dword [0x467174]
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x678]
call dword [0x467174]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x6b8]
call dword [0x467174]
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x698]
call fcn.0042b130
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x65c]
call dword [0x467174]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x640]
call dword [0x467174]
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x6f4]
jmp 0x446dcd
mov ecx, dword [ebp - 0x14]
push ecx
push 0
lea edx, [ebp - 0x710]
push edx
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x974], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x974]
push ecx
mov ecx, dword [ebp + 0x24]
call dword [0x46719c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x710]
call dword [0x467174]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x72c]
push ecx
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x978], eax
mov edx, dword [ebp - 0x978]
mov dword [ebp - 0x97c], edx
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x97c]
push eax
mov ecx, dword [ebp + 0x28]
call dword [0x46719c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x72c]
call dword [0x467174]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
lea eax, [ebp - 0x748]
push eax
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x980]
mov dword [ebp - 0x984], ecx
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x984]
push edx
mov ecx, dword [ebp + 0x2c]
call dword [0x46719c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x748]
call dword [0x467174]
push 0x7f
push 0x4d
call fcn.004048a0
add esp, 8
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 0x2633
je 0x446d2d
jmp 0x446d2f
jmp 0x446d39
call fcn.00402070
call fcn.00419a80
mov eax, dword [0x4671d4]
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax]
je 0x446dad
lea ecx, [ebp + 8]
call dword [0x467198]
sub eax, dword [ebp - 0x24]
cmp eax, 1
jbe 0x446dad
lea ecx, [ebp + 8]
call dword [0x467198]
sub eax, dword [ebp - 0x24]
push eax
mov edx, dword [ebp - 0x24]
push edx
lea eax, [ebp - 0x764]
push eax
lea ecx, [ebp + 8]
call dword [0x4671c4]
mov dword [ebp - 0x98c], eax
mov ecx, dword [ebp - 0x98c]
mov dword [ebp - 0x990], ecx
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x990]
push edx
mov ecx, dword [ebp + 0x30]
call dword [0x46719c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x764]
call dword [0x467174]
mov dword [ebp - 0x768], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x467174]
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045f9ec
mov esp, ebp
pop ebp
ret