Function at 0x440b7e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1f4
mov eax, 0x46d6af
call fcn.0046bbe6
mov esi, ecx
mov dword [ebp - 0x1e8], esi
xor edi, edi
mov dword [ebp - 0x1c8], edi
push ecx
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044c02b
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
call fcn.0043e4dc
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
mov bl, al
call fcn.0044b6d9
test bl, bl
je 0x44250d
xor ebx, ebx
mov byte [ebp - 0x1c9], bl
mov byte [ebp - 0x1dd], bl
cmp esi, 3
jne 0x440f4e
sub esp, 0x18
lea eax, [ebp + 0x38]
mov ecx, esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
lea ecx, [ebp - 0x2c]
call fcn.0043f432
add esp, 0x18
mov byte [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x12c
jbe 0x440f42
push ecx
push str.NULL_secure
lea ecx, [ebp - 0x2c]
call fcn.0044b37c
push 0x10
cmp eax, 0xffffffff
lea eax, [ebp - 0x2c]
pop edx
je 0x440dfd
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x1b], 0xc
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x23], 6
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x27], 2
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x2b], 6
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x5f], 0xc
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x61], 0x2e
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x62], 0x24
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x63], 0x80
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x68], 4
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x69], 1
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x6a], 0x59
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x74], bl
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x75], 0xae
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0xae], 3
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0xaf], 0xfc
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0xb0], bl
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0xb1], 0xab
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0xae], 3
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x116], 3
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x117], 0xfc
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
mov byte [eax + 0x118], bl
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x119], 0x43
cmp dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x2c]
dec eax
add eax, ecx
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0044b40d
lea ecx, [ebp - 0x8c]
mov byte [ebp - 0x1c9], 1
call fcn.0043fc9d
lea ecx, [ebp + 0x38]
cmp ecx, eax
je 0x440dcd
mov byte [ebp - 0x1e4], bl
push dword [ebp - 0x1e4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x1d4], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov byte [ebp - 4], 5
jmp 0x440f20
mov ecx, dword [ebp - 0x18]
cmp ecx, edx
mov esi, dword [ebp - 0x2c]
cmovae eax, esi
cmp byte [eax + 0x12], 1
jne 0x440e58
cmp ecx, edx
lea eax, [ebp - 0x2c]
cmovae eax, esi
cmp byte [eax + 0x13], 1
jne 0x440e58
cmp ecx, edx
lea eax, [ebp - 0x2c]
cmovae eax, esi
cmp byte [eax + 0x1b], 5
jne 0x440e58
cmp ecx, edx
lea eax, [ebp - 0x2c]
cmovae eax, esi
cmp byte [eax + 0x2b], 2
je 0x440e58
cmp ecx, edx
lea eax, [ebp - 0x2c]
cmovae eax, esi
cmp byte [eax + 0x62], 0x24
jne 0x440e58
cmp ecx, edx
lea eax, [ebp - 0x2c]
cmovae eax, esi
cmp byte [eax + 0x63], 0x80
je 0x440f42
cmp ecx, edx
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x2c]
cmovae eax, esi
mov byte [eax + 0x12], 1
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x13], 1
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x1b], 5
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x2b], 2
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x62], 0x24
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], edx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax + 0x63], 0x80
cmp dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x2c]
dec eax
add eax, ecx
lea ecx, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0044b40d
lea ecx, [ebp - 0x8c]
mov byte [ebp - 0x1dd], 1
call fcn.0043fc9d
lea ecx, [ebp + 0x38]
cmp ecx, eax
je 0x440ef5
mov byte [ebp - 0x1e4], bl
push dword [ebp - 0x1e4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
sub esp, 0x18
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x1d4], esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov byte [ebp - 4], 6
sub esp, 0x18
lea eax, [ebp + 0x38]
mov ecx, esp
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov byte [ebp - 4], 4
call fcn.0043f3d3
add esp, 0x30
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0044b89e
cmp dword [ebp + 0x4c], 0x10
lea ecx, [ebp - 0x1e4]
lea eax, [ebp + 0x38]
cmovae eax, dword [ebp + 0x38]
push ecx
push eax
call fcn.00429c4a
pop ecx
pop ecx
test eax, eax
jne 0x4424da
mov eax, dword [ebp - 0x1e8]
mov esi, ebx
mov dword [ebp - 0x1d0], esi
cmp eax, 1
jne 0x441385
mov eax, dword [0x486fd0]
lea ecx, [ebp - 0x1d0]
push ebx
push ecx
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [eax + 0x38]
push 1
push 0xffffffffffffffff
call fcn.004209e3
add esp, 0x10
test eax, eax
jne 0x4424c1
mov esi, dword [ebp - 0x1d0]
push esi
call fcn.00412bcb
pop ecx
cmp eax, 0x64
jne 0x4424c7
push 3
push esi
mov byte [ebp - 4], 7
call fcn.00412f2a
pop ecx
pop ecx
add eax, 0xfffffffd
push 3
push esi
mov dword [ebp - 0x1e8], eax
call fcn.00412ff3
pop ecx
pop ecx
sub esp, 0x18
mov dword [ebp - 0x1f0], eax
mov ecx, esp
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x5c]
push ebx
push dword [ebp - 0x1e8]
lea edx, [edx + 3]
call fcn.0043ee70
add esp, 0x20
push 0x47a7c4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 8
call fcn.0044cae0
test al, al
jne 0x441347
push ebx
push esi
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push 1
push esi
mov byte [ebp - 4], 9
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], bl
call fcn.0044b945
push 2
push esi
mov byte [ebp - 4], 0xa
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0xa4], ebx
lea ecx, [ebp - 0xa4]
push eax
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], bl
call fcn.0044b945
lea edx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x74]
call fcn.0043ffb8
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0xa4]
mov ecx, dword [0x486fd0]
mov eax, dword [ecx + 0x44]
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x1d8], eax
call fcn.0043ffb8
mov dword [ebp - 0x1e8], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2c]
mov esi, dword [0x486fd0]
push 0x47a7c4
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x1f0], eax
call fcn.0044cae0
test al, al
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x44]
cmove ecx, edx
mov edx, dword [esi + 0x3c]
push ecx
lea ecx, [ebp - 0x1c4]
call fcn.0044bcbd
pop ecx
push 0x47ee20
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0044b441
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
or edi, 0x40
mov dword [ebp - 0x1c8], edi
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xf
call fcn.0044b441
push eax
lea ecx, [ebp - 0x134]
call fcn.0044b4e8
or edi, 0x80
mov dword [ebp - 0x1c8], edi
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x10
push eax
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1ac]
call fcn.0044cb1e
or edi, 0x100
mov dword [ebp - 0x1c8], edi
push 0x47ee20
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x11
call fcn.0044b441
push eax
lea ecx, [ebp - 0x194]
call fcn.0044b4e8
or edi, 0x200
mov dword [ebp - 0x1c8], edi
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x12
call fcn.0044b441
push eax
lea ecx, [ebp - 0x17c]
call fcn.0044b4e8
or edi, 0x400
mov dword [ebp - 0x1c8], edi
push dword [ebp - 0x1dc]
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x13
push eax
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x164]
call fcn.0044cb1e
or edi, 0x800
mov dword [ebp - 0x1c8], edi
push str._r_n_r_n
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x14
call fcn.0044b441
push eax
lea ecx, [ebp - 0x14c]
call fcn.0044b4e8
or edi, 0x1000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 0x15
push eax
mov ecx, 0x485b10
call fcn.0044b462
lea ecx, [ebp - 0x14c]
call fcn.0044b89e
lea ecx, [ebp - 0x164]
call fcn.0044b89e
lea ecx, [ebp - 0x17c]
call fcn.0044b89e
lea ecx, [ebp - 0x194]
call fcn.0044b89e
lea ecx, [ebp - 0x1ac]
call fcn.0044b89e
lea ecx, [ebp - 0x134]
call fcn.0044b89e
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0x1c4]
call fcn.0044b89e
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
lea ecx, [ebp - 0x74]
call fcn.0044b89e
inc dword [0x486fc4]
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 0x10
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x34], ebx
cmovae eax, dword [ebp - 0x44]
mov byte [eax], bl
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 0x1c], ebx
cmovae eax, dword [ebp - 0x2c]
mov byte [eax], bl
lea eax, [ebp - 0xa4]
cmp dword [ebp - 0x90], 0x10
mov dword [ebp - 0x94], ebx
cmovae eax, dword [ebp - 0xa4]
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0x2c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
mov esi, dword [ebp - 0x1d0]
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
lea ecx, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
mov byte [eax], bl
call fcn.0044b89e
mov dword [ebp - 4], 2
jmp 0x440fb7
cmp eax, 2
jne 0x441dd5
mov eax, dword [0x486fd0]
sub esp, 0x18
mov ecx, esp
push dword [eax + 0x48]
call fcn.0044b51b
mov ecx, dword [ebp - 0x1e4]
call fcn.00440ad1
add esp, 0x18
mov byte [ebp - 0x1c9], al
test al, al
jne 0x4413c3
mov ecx, dword [0x486fd0]
mov edx, dword [ecx + 0x4c]
jmp 0x4413cb
mov eax, dword [0x486fd0]
mov edx, dword [eax + 0x50]
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1d0]
push ebx
push eax
push 1
push 0xffffffffffffffff
call fcn.004209e3
mov esi, dword [ebp - 0x1d0]
add esp, 0x10
test eax, eax
jne 0x441695
push esi
call fcn.00412bcb
pop ecx
cmp eax, 0x64
jne 0x441695
push ebx
push esi
mov byte [ebp - 4], 0x17
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push 1
push esi
mov byte [ebp - 4], 0x18
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0xec]
push eax
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], bl
call fcn.0044b945
push 3
push ebx
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0xec]
call fcn.0044b2f0
lea ecx, [ebp - 0xec]
cmp ecx, eax
je 0x441491
mov byte [ebp - 0x1dc], bl
push dword [ebp - 0x1dc]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
push 0x47ee24
lea ecx, [ebp - 0xec]
call fcn.0044cae0
test al, al
jne 0x4414d9
push 0x47ee28
lea ecx, [ebp - 0xec]
call fcn.0044cae0
test al, al
jne 0x4414d9
push 1
push esi
call fcn.00412ff3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xec]
call fcn.0044b945
jmp 0x441551
push 1
push esi
call fcn.00412f2a
pop ecx
pop ecx
add eax, 0xfffffffd
push 1
push esi
mov dword [ebp - 0x1d8], eax
call fcn.00412ff3
pop ecx
pop ecx
sub esp, 0x18
add eax, 3
mov ecx, esp
mov dword [ebp - 0x1f0], eax
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x74]
push ebx
push dword [ebp - 0x1d8]
call fcn.0043ee70
lea ecx, [ebp - 0xec]
add esp, 0x20
cmp ecx, eax
je 0x441549
mov byte [ebp - 0x1e8], bl
push dword [ebp - 0x1e8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
mov edx, dword [0x486fd0]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x74]
mov edx, dword [edx + 0x54]
call fcn.0044bcbd
pop ecx
push 0x47ee20
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.0044b441
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
or edi, 0x2000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, 0x485b28
call fcn.0044b462
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x19
call fcn.0044b89e
mov edx, dword [0x486fd0]
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x74]
mov edx, dword [edx + 0x58]
call fcn.0044bcbd
pop ecx
push str._r_n_r_n
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.0044b441
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
or edi, 0x4000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, 0x485b28
call fcn.0044b462
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0x74]
call fcn.0044b89e
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0xec]
cmovae eax, dword [ebp - 0x44]
mov byte [eax], bl
lea eax, [ebp - 0xec]
cmp dword [ebp - 0xd8], 0x10
inc dword [0x486f84]
cmovae eax, dword [ebp - 0xec]
mov dword [ebp - 0xdc], ebx
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
mov dword [ebp - 4], 2
jmp 0x4413f3
cmp byte [ebp - 0x1c9], 0
jne 0x4424c7
push esi
call fcn.0041271f
mov eax, dword [0x486fd0]
pop ecx
push ebx
lea ecx, [ebp - 0x1d0]
mov edx, dword [eax + 0x5c]
push ecx
mov ecx, dword [ebp - 0x1e4]
push 1
push 0xffffffffffffffff
call fcn.004209e3
add esp, 0x10
test eax, eax
jne 0x4424c1
mov esi, dword [ebp - 0x1d0]
push esi
call fcn.00412bcb
pop ecx
cmp eax, 0x64
jne 0x4424c7
push 3
push esi
mov byte [ebp - 4], 0x1f
call fcn.00412f2a
pop ecx
pop ecx
add eax, 0xfffffffd
push 3
push esi
mov dword [ebp - 0x1dc], eax
call fcn.00412ff3
pop ecx
pop ecx
sub esp, 0x18
mov dword [ebp - 0x1d8], eax
mov ecx, esp
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x5c]
push ebx
push dword [ebp - 0x1dc]
lea edx, [edx + 3]
call fcn.0043ee70
add esp, 0x20
push 0x47a7c4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x20
call fcn.0044cae0
test al, al
jne 0x441d97
push ebx
push esi
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0xd4], ebx
lea ecx, [ebp - 0xd4]
push eax
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], bl
call fcn.0044b945
push 3
push ebx
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0xd4]
call fcn.0044b2f0
lea ecx, [ebp - 0xd4]
cmp ecx, eax
je 0x4417bd
mov byte [ebp - 0x1f0], bl
push dword [ebp - 0x1f0]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
push 0x47ee24
lea ecx, [ebp - 0xd4]
call fcn.0044cae0
test al, al
je 0x441869
push 0x47ee28
lea ecx, [ebp - 0xd4]
call fcn.0044cae0
test al, al
je 0x441869
push ebx
push esi
call fcn.00412f2a
pop ecx
pop ecx
add eax, 0xfffffffd
push ebx
push esi
mov dword [ebp - 0x1dc], eax
call fcn.00412ff3
pop ecx
pop ecx
sub esp, 0x18
add eax, 3
mov ecx, esp
mov dword [ebp - 0x1d8], eax
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x74]
push ebx
push dword [ebp - 0x1dc]
call fcn.0043ee70
lea ecx, [ebp - 0xd4]
add esp, 0x20
cmp ecx, eax
je 0x44185f
mov byte [ebp - 0x1e8], bl
push dword [ebp - 0x1e8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
jmp 0x44187e
push ebx
push esi
call fcn.00412ff3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.0044b945
push 1
push esi
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0xbc], ebx
lea ecx, [ebp - 0xbc]
push eax
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], bl
call fcn.0044b945
push 3
push ebx
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044b2f0
lea ecx, [ebp - 0xbc]
cmp ecx, eax
je 0x4418e2
mov byte [ebp - 0x200], bl
push dword [ebp - 0x200]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
push 0x47ee24
lea ecx, [ebp - 0xbc]
call fcn.0044cae0
test al, al
je 0x441990
push 0x47ee28
lea ecx, [ebp - 0xbc]
call fcn.0044cae0
test al, al
je 0x441990
push 1
push esi
call fcn.00412f2a
pop ecx
pop ecx
add eax, 0xfffffffd
push 1
push esi
mov dword [ebp - 0x1dc], eax
call fcn.00412ff3
pop ecx
pop ecx
sub esp, 0x18
add eax, 3
mov ecx, esp
mov dword [ebp - 0x1d8], eax
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x74]
push ebx
push dword [ebp - 0x1dc]
call fcn.0043ee70
lea ecx, [ebp - 0xbc]
add esp, 0x20
cmp ecx, eax
je 0x441986
mov byte [ebp - 0x1fc], bl
push dword [ebp - 0x1fc]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
jmp 0x4419a6
push 1
push esi
call fcn.00412ff3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xbc]
call fcn.0044b945
push 2
push esi
call fcn.00412ff3
pop ecx
pop ecx
mov dword [ebp - 0x104], ebx
lea ecx, [ebp - 0x104]
push eax
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], bl
call fcn.0044b945
push 3
push ebx
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x104]
call fcn.0044b2f0
lea ecx, [ebp - 0x104]
cmp ecx, eax
je 0x441a0a
mov byte [ebp - 0x1f8], bl
push dword [ebp - 0x1f8]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
push 0x47ee24
lea ecx, [ebp - 0x104]
call fcn.0044cae0
test al, al
je 0x441ab8
push 0x47ee28
lea ecx, [ebp - 0x104]
call fcn.0044cae0
test al, al
je 0x441ab8
push 2
push esi
call fcn.00412f2a
pop ecx
pop ecx
add eax, 0xfffffffd
push 2
push esi
mov dword [ebp - 0x1dc], eax
call fcn.00412ff3
pop ecx
pop ecx
sub esp, 0x18
add eax, 3
mov ecx, esp
mov dword [ebp - 0x1d8], eax
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
mov edx, dword [ebp - 0x1d8]
lea ecx, [ebp - 0x74]
push ebx
push dword [ebp - 0x1dc]
call fcn.0043ee70
lea ecx, [ebp - 0x104]
add esp, 0x20
cmp ecx, eax
je 0x441aae
mov byte [ebp - 0x1d4], bl
push dword [ebp - 0x1d4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x74]
call fcn.0044b89e
jmp 0x441ace
push 2
push esi
call fcn.00412ff3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x104]
call fcn.0044b945
mov eax, dword [0x486fd0]
lea edx, [ebp - 0xd4]
mov ecx, dword [eax + 0x68]
mov eax, dword [eax + 0x64]
mov dword [ebp - 0x1d8], ecx
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x1dc], eax
call fcn.0043ffb8
mov byte [ebp - 4], 0x24
mov ecx, dword [0x486fd0]
push eax
mov edx, dword [ecx + 0x60]
lea ecx, [ebp - 0x74]
call fcn.0044bd0e
pop ecx
push 0x47ee20
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.0044b441
push eax
lea ecx, [ebp - 0xa4]
call fcn.0044b4e8
or edi, 0x8000
mov dword [ebp - 0x1c8], edi
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x26
call fcn.0044b441
push eax
lea ecx, [ebp - 0x44]
call fcn.0044b4e8
or edi, 0x10000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x44]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x14c]
call fcn.0044b4e8
or edi, 0x20000
mov dword [ebp - 0x1c8], edi
push 0x47eb78
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x28
call fcn.0044b441
push eax
lea ecx, [ebp - 0x164]
call fcn.0044b4e8
or edi, 0x40000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x164]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x17c]
call fcn.0044b4e8
or edi, 0x80000
mov dword [ebp - 0x1c8], edi
push 0x47ee20
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x2a
call fcn.0044b441
push eax
lea ecx, [ebp - 0x194]
call fcn.0044b4e8
or edi, 0x100000
mov dword [ebp - 0x1c8], edi
push dword [ebp - 0x1d8]
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x194]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0044b4e8
or edi, 0x200000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x134]
call fcn.0044b4e8
or edi, 0x400000
mov dword [ebp - 0x1c8], edi
push str._r_n_r_n
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x2d
call fcn.0044b441
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
or edi, 0x800000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, 0x485b40
call fcn.0044b462
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0x134]
call fcn.0044b89e
lea ecx, [ebp - 0x1ac]
call fcn.0044b89e
lea ecx, [ebp - 0x194]
call fcn.0044b89e
lea ecx, [ebp - 0x17c]
call fcn.0044b89e
lea ecx, [ebp - 0x164]
call fcn.0044b89e
lea ecx, [ebp - 0x14c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
call fcn.0044b89e
lea ecx, [ebp - 0xa4]
call fcn.0044b89e
lea ecx, [ebp - 0x74]
call fcn.0044b89e
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
inc dword [0x486f9c]
lea eax, [ebp - 0xd4]
cmp dword [ebp - 0xc0], 0x10
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xc4], ebx
cmovae eax, dword [ebp - 0xd4]
mov byte [eax], bl
lea eax, [ebp - 0xbc]
cmp dword [ebp - 0xa8], 0x10
mov dword [ebp - 0xac], ebx
cmovae eax, dword [ebp - 0xbc]
mov byte [eax], bl
lea eax, [ebp - 0x104]
cmp dword [ebp - 0xf0], 0x10
mov dword [ebp - 0xf4], ebx
cmovae eax, dword [ebp - 0x104]
mov byte [eax], bl
call fcn.0044b89e
lea ecx, [ebp - 0xbc]
call fcn.0044b89e
lea ecx, [ebp - 0xd4]
call fcn.0044b89e
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
lea ecx, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
mov byte [eax], bl
call fcn.0044b89e
mov dword [ebp - 4], 2
jmp 0x4416d9
cmp eax, 3
jne 0x4424c7
mov eax, dword [0x486fd0]
sub esp, 0x18
mov ecx, esp
push dword [eax + 0x6c]
call fcn.0044b51b
mov ecx, dword [ebp - 0x1e4]
call fcn.00440ad1
add esp, 0x18
mov byte [ebp - 0x1e9], al
test al, al
je 0x441e39
mov ecx, dword [0x486fd0]
mov ecx, dword [ecx + 0x70]
push ecx
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
xor edi, edi
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0x44]
inc edi
jmp 0x441ecb
cmp byte [ebp - 0x1c9], 0
mov eax, dword [0x486fd0]
mov esi, dword [eax + 0x80]
jne 0x441e52
mov eax, dword [eax + 0x78]
jmp 0x441e55
mov eax, dword [eax + 0x7c]
mov dword [ebp - 0x5c], ebx
lea ecx, [ebp - 0x5c]
push eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], bl
call fcn.0044b945
mov dword [ebp - 4], 0x31
lea ecx, [ebp - 0x5c]
mov eax, dword [0x486fd0]
push ecx
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x1c8], 2
mov edx, dword [eax + 0x74]
call fcn.0044bd0e
pop ecx
mov dword [ebp - 4], 0x32
mov ecx, eax
push esi
mov dword [ebp - 0x1c8], 6
call fcn.0044b441
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
lea edx, [ebp - 0x8c]
mov dword [ebp - 4], 0x33
mov edi, 0x100000e
cmp dword [edx + 0x14], 0x10
mov dword [ebp - 0x1c8], edi
jb 0x441ed9
mov edx, dword [edx]
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1d0]
push ebx
push eax
push 1
push 0xffffffffffffffff
call fcn.004209e3
add esp, 0x10
neg eax
sbb al, al
inc al
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1c8]
test al, 8
je 0x441f23
and eax, 0xfffffff7
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x1c8], eax
call fcn.0044b89e
mov eax, dword [ebp - 0x1c8]
test al, 4
je 0x441f3e
and eax, 0xfffffffb
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x1c8], eax
call fcn.0044b89e
mov eax, dword [ebp - 0x1c8]
test al, 2
je 0x441f59
and eax, 0xfffffffd
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x1c8], eax
call fcn.0044b89e
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 4], 2
test al, 1
je 0x441f75
and eax, 0xfffffffe
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x1c8], eax
call fcn.0044b89e
cmp byte [ebp - 0x1d4], 0
je 0x4424c1
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], bl
mov byte [ebp - 4], 0x34
mov edi, dword [ebp - 0x1c8]
mov esi, dword [ebp - 0x1d0]
push esi
call fcn.00412bcb
pop ecx
cmp eax, 0x64
jne 0x442395
push 5
push esi
mov byte [ebp - 4], 0x35
call fcn.00412ff3
cmp byte [ebp - 0x1e9], 0
pop ecx
pop ecx
mov dword [ebp - 0x1fc], eax
jne 0x442030
push str.Chrome
lea ecx, [ebp + 0x20]
call fcn.0044cae0
push 5
push esi
mov byte [ebp - 0x1d4], al
call fcn.00412f2a
pop ecx
pop ecx
sub esp, 0x18
add eax, 0xfffffffd
mov ecx, esp
mov dword [ebp - 0x1f8], eax
lea eax, [ebp + 8]
push eax
mov dword [ecx], ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0044ba08
push dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x1fc]
lea ecx, [ebp - 0x74]
push dword [ebp - 0x1f8]
add edx, 3
call fcn.0043ee70
add esp, 0x20
or edi, 0x10
jmp 0x442065
push 5
push esi
call fcn.00412ff3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], 0xf
call fcn.0044b945
lea eax, [ebp - 0xa4]
or edi, 0x20
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x1c8], edi
call fcn.0044b4e8
mov eax, edi
mov dword [ebp - 4], 0x37
test al, 0x20
je 0x44209b
and eax, 0xffffffdf
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x1c8], eax
call fcn.0044b89e
mov eax, dword [ebp - 0x1c8]
mov byte [ebp - 4], 0x38
test al, 0x10
je 0x4420b4
and eax, 0xffffffef
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x1c8], eax
call fcn.0044b89e
push 0x47a7c4
lea ecx, [ebp - 0x5c]
call fcn.0044cae0
test al, al
jne 0x442367
mov edi, 0x47ee34
mov dword [ebp - 0x44], ebx
push edi
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push ebx
push esi
mov byte [ebp - 4], 0x39
call fcn.00412ff3
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
mov edx, eax
push ecx
lea ecx, [ebp - 0x11c]
call fcn.0044bd0e
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3a
call fcn.0044b462
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call fcn.0044b89e
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push 5
push str.FALSE
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3b
call fcn.0044cd42
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
mov edi, dword [ebp - 0x1c8]
or edi, 0x2000000
mov dword [ebp - 0x1c8], edi
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x2c]
call fcn.0044b462
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call fcn.0044b89e
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x47ee34
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push 1
push esi
mov byte [ebp - 4], 0x3d
call fcn.00412ff3
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
mov edx, eax
push ecx
lea ecx, [ebp - 0x11c]
call fcn.0044bd0e
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3e
call fcn.0044b462
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call fcn.0044b89e
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x47ee34
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push 2
push esi
mov byte [ebp - 4], 0x3f
call fcn.00412ff3
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
mov edx, eax
push ecx
lea ecx, [ebp - 0x11c]
call fcn.0044bd0e
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x40
call fcn.0044b462
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call fcn.0044b89e
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x47ee34
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
push 3
push esi
mov byte [ebp - 4], 0x41
call fcn.00412ff3
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
mov edx, eax
push ecx
lea ecx, [ebp - 0x11c]
call fcn.0044bd0e
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x42
call fcn.0044b462
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call fcn.0044b89e
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x47ee34
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0044b945
mov byte [ebp - 4], 0x43
push 4
push esi
call fcn.00412ff3
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
mov edx, eax
push ecx
lea ecx, [ebp - 0x11c]
call fcn.0044bd0e
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.0044b462
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x38
call fcn.0044b89e
push 0x47ee20
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x11c]
call fcn.0044bd40
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.0044b462
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
inc dword [0x486fa8]
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0x10
mov dword [ebp - 0x4c], ebx
cmovae eax, dword [ebp - 0x5c]
mov byte [eax], bl
jmp 0x44236d
mov edi, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
mov dword [ebp - 4], 0x34
jmp 0x441fa2
push 0x47a7c4
lea ecx, [ebp - 0x2c]
call fcn.0044cae0
test al, al
jne 0x4424b3
mov eax, dword [0x486fd0]
lea ebx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x11c]
mov edx, dword [0x485a88]
mov edi, dword [ebp - 0x1c]
cmovae ebx, dword [ebp - 0x2c]
mov esi, dword [eax + 0x88]
call fcn.0042a666
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x74]
mov edx, dword [0x486fd0]
push eax
mov edx, dword [edx + 0x84]
call fcn.0044bd0e
mov byte [ebp - 4], 0x48
mov ecx, eax
mov dword [esp], 0x47ee40
call fcn.0044b441
push eax
lea ecx, [ebp - 0x134]
call fcn.0044b4e8
lea eax, [ebp + 0x20]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x134]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044b4e8
push esi
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x4a
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b4e8
mov byte [ebp - 4], 0x4b
lea edx, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0x10
mov ecx, dword [0x486fbc]
cmovae edx, dword [ebp - 0x5c]
push 3
push edi
push ebx
call fcn.0042e156
add esp, 0xc
lea ecx, [ebp - 0x5c]
call fcn.0044b89e
lea ecx, [ebp - 0x8c]
call fcn.0044b89e
lea ecx, [ebp - 0x134]
call fcn.0044b89e
lea ecx, [ebp - 0x74]
call fcn.0044b89e
lea ecx, [ebp - 0x11c]
call fcn.0044b89e
inc dword [0x485a88]
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov esi, dword [ebp - 0x1d0]
cmovae eax, dword [ebp - 0x2c]
and dword [ebp - 0x1c], 0
mov byte [eax], 0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0044b89e
jmp 0x4424c7
mov esi, dword [ebp - 0x1d0]
push esi
call fcn.0041271f
pop ecx
push dword [ebp - 0x1e4]
call fcn.00428f36
pop ecx
cmp byte [ebp - 0x1dd], 0
je 0x44250d
push ecx
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp - 0x8c]
call fcn.0044c02b
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x4c
call fcn.0043e570
lea ecx, [ebp - 0x8c]
call fcn.0044b6d9
lea ecx, [ebp + 8]
call fcn.0044b89e
lea ecx, [ebp + 0x20]
call fcn.0044b89e
lea ecx, [ebp + 0x38]
call fcn.0044b89e
call fcn.0046bb38
ret