Function at 0x440ad1
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4750e4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x658
push ebx
mov al, byte [esp + 0xb]
push ebp
push esi
push edi
mov ebp, ecx
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x28], esp
push 0
mov ecx, ebx
mov byte [ebx], al
call fcn.00413460
mov edi, 0x4930f8
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x30], ecx
push ecx
mov ecx, ebx
call fcn.00413860
test al, al
je 0x43fe34
mov eax, dword [esp + 0x2c]
mov edi, dword [ebx + 4]
mov ecx, eax
mov esi, 0x4930f8
mov edx, ecx
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.00413840
push 0
lea ecx, [esp + 0x5c]
call fcn.004565a0
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x569]
mov byte [esp + 0x568], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [esp + 0x17]
push 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x674], 0
mov byte [esp + 0x34], al
call fcn.00413460
mov edi, 0x4930f8
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
lea ecx, [esp + 0x34]
push ebx
call fcn.00413860
test al, al
je 0x43febc
mov edi, dword [esp + 0x34]
mov ecx, ebx
mov edx, ecx
mov esi, 0x4930f8
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x34]
call fcn.00413840
mov al, byte [esp + 0x17]
push 0
lea ecx, [esp + 0x24]
mov byte [esp + 0x674], 1
mov byte [esp + 0x24], al
call fcn.00413460
mov edi, 0x4930f8
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
lea ecx, [esp + 0x24]
push ebx
call fcn.00413860
test al, al
je 0x43ff1b
mov edi, dword [esp + 0x24]
mov ecx, ebx
mov edx, ecx
mov esi, 0x4930f8
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x24]
call fcn.00413840
lea edi, [ebp + 0x74]
xor esi, esi
mov ebx, 2
push esi
mov ecx, edi
mov byte [esp + 0x674], bl
call fcn.0044e8c0
mov byte [esp + 0x1c], al
mov ecx, edi
movzx ax, al
push eax
call fcn.0044e8c0
push edi
mov ecx, ebp
mov byte [esp + 0x1b], al
call fcn.00448760
fstp qword [esp + 0x5c]
xor eax, eax
mov al, byte [ebp + 0x40]
cmp eax, 0x19
ja case.default.0x43ff62
jmp dword [eax*4 + 0x442b7c]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877bc
call fcn.0044e650
lea ecx, [esp + 0x55c]
push ecx
call fcn.0045ad10
add esp, 8
mov edx, dword [0x47814c]
lea esi, [ebp + 0x64]
push edx
push 0
push eax
mov ecx, esi
mov byte [esp + 0x67c], 3
call fcn.00413260
push 1
lea ecx, [esp + 0x55c]
mov byte [esp + 0x674], bl
call fcn.00413460
fld qword [esp + 0x5c]
fmul qword [0x478388]
sub esp, 8
lea eax, [esp + 0x12c]
fsub qword [0x478298]
fstp qword [esp]
push str._.1f
push eax
call fcn.00467c1a
lea edi, [esp + 0x134]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0x128]
push ecx
mov ecx, esi
call fcn.004135c0
xor esi, esi
jmp case.default.0x43ff62
mov al, byte [esp + 0x17]
test al, al
jne 0x440069
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877ac
call fcn.0044e650
lea edx, [esp + 0x50c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 4
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x50c]
jmp 0x440104
push ecx
cmp al, 1
mov ecx, esp
jne 0x4400bb
mov dword [esp + 0x1c], esp
push 6
push 0x4877a4
call fcn.0044e650
lea edx, [esp + 0x52c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 5
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x52c]
jmp 0x440104
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x54c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 6
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x54c]
call fcn.00413460
push 6
push 0x4877ac
lea ecx, [esp + 0xe0]
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 7
call fcn.00413f00
lea ecx, [esp + 0xd8]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4877a4
lea ecx, [esp + 0xe8]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 8
call fcn.00413f00
lea ecx, [esp + 0xe0]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x4415b2
mov al, byte [esp + 0x17]
test al, al
jne 0x4401f4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48779c
call fcn.0044e650
lea edx, [esp + 0x25c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 9
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x25c]
jmp 0x44028f
push ecx
cmp al, 1
mov ecx, esp
jne 0x440246
mov dword [esp + 0x1c], esp
push 6
push 0x487794
call fcn.0044e650
lea edx, [esp + 0x53c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0xa
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x53c]
jmp 0x44028f
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x27c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0xb
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x27c]
call fcn.00413460
push 6
push 0x48779c
lea ecx, [esp + 0xf0]
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0xc
call fcn.00413f00
lea ecx, [esp + 0xe8]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487794
lea ecx, [esp + 0xf8]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0xd
call fcn.00413f00
lea ecx, [esp + 0xf0]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x4415b2
mov al, byte [esp + 0x17]
test al, al
jne 0x44037f
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48778c
call fcn.0044e650
lea edx, [esp + 0x3fc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0xe
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x3fc]
jmp 0x44046f
cmp al, 1
jne 0x4403d4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487784
call fcn.0044e650
lea edx, [esp + 0x29c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0xf
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x29c]
jmp 0x44046f
push ecx
cmp al, bl
mov ecx, esp
jne 0x440426
mov dword [esp + 0x1c], esp
push 6
push 0x48777c
call fcn.0044e650
lea edx, [esp + 0x4bc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x10
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x4bc]
jmp 0x44046f
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x2bc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x11
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x2bc]
call fcn.00413460
push 6
push 0x48778c
lea ecx, [esp + 0x100]
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
mov byte [ebp + 0x43], bl
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x12
call fcn.00413f00
lea ecx, [esp + 0xf8]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487784
lea ecx, [esp + 0x108]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x13
call fcn.00413f00
lea ecx, [esp + 0x100]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48777c
lea ecx, [esp + 0x110]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x14
call fcn.00413f00
lea ecx, [esp + 0x108]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x4415b2
mov al, byte [esp + 0x17]
test al, al
jne 0x44059e
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487774
call fcn.0044e650
lea edx, [esp + 0x41c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x15
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x41c]
jmp 0x440639
push ecx
cmp al, 1
mov ecx, esp
jne 0x4405f0
mov dword [esp + 0x1c], esp
push 6
push 0x48776c
call fcn.0044e650
lea edx, [esp + 0x2dc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x16
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x2dc]
jmp 0x440639
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x51c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x17
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x51c]
call fcn.00413460
push 6
push 0x487774
lea ecx, [esp + 0x118]
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x18
call fcn.00413f00
lea ecx, [esp + 0x110]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48776c
lea ecx, [esp + 0x120]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x19
call fcn.00413f00
lea ecx, [esp + 0x118]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x4415b2
mov al, byte [esp + 0x17]
test al, al
jne 0x440729
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487764
call fcn.0044e650
lea edx, [esp + 0x2fc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x1a
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x2fc]
jmp 0x440b16
cmp al, 1
jne 0x44077e
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48775c
call fcn.0044e650
lea edx, [esp + 0x43c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x1b
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x43c]
jmp 0x440b16
cmp al, bl
jne 0x4407d3
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487754
call fcn.0044e650
lea edx, [esp + 0x31c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x1c
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x31c]
jmp 0x440b16
cmp al, 3
jne 0x440828
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48774c
call fcn.0044e650
lea edx, [esp + 0x4dc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x1d
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x4dc]
jmp 0x440b16
cmp al, 4
jne 0x44087d
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487744
call fcn.0044e650
lea edx, [esp + 0x33c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x1e
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x33c]
jmp 0x440b16
cmp al, 5
jne 0x4408d2
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48773c
call fcn.0044e650
lea edx, [esp + 0x45c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x1f
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x45c]
jmp 0x440b16
cmp al, 6
jne 0x440927
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487734
call fcn.0044e650
lea edx, [esp + 0x35c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x20
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x35c]
jmp 0x440b16
cmp al, 7
jne 0x44097c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48772c
call fcn.0044e650
lea edx, [esp + 0x23c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x21
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x23c]
jmp 0x440b16
cmp al, 8
jne 0x4409d1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487724
call fcn.0044e650
lea edx, [esp + 0x37c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x22
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x37c]
jmp 0x440b16
cmp al, 9
jne 0x440a26
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48771c
call fcn.0044e650
lea edx, [esp + 0x47c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x23
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x47c]
jmp 0x440b16
cmp al, 0xa
jne 0x440a7b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487714
call fcn.0044e650
lea edx, [esp + 0x39c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x24
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x39c]
jmp 0x440b16
push ecx
cmp al, 0xd
mov ecx, esp
jne 0x440acd
mov dword [esp + 0x1c], esp
push 6
push 0x48770c
call fcn.0044e650
lea edx, [esp + 0x4fc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x25
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x4fc]
jmp 0x440b16
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x3bc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x26
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x3bc]
call fcn.00413460
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
mov byte [ebp + 0x43], bl
mov byte [ebp + 0x44], 3
mov byte [ebp + 0x45], 4
mov byte [ebp + 0x46], 5
mov byte [ebp + 0x47], 6
mov byte [ebp + 0x48], 7
mov byte [ebp + 0x49], 8
mov byte [ebp + 0x4a], 9
push 6
mov byte [ebp + 0x4b], 0xa
push 0x487764
lea ecx, [esp + 0x128]
mov byte [ebp + 0x4c], 0xd
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x27
call fcn.00413f00
lea ecx, [esp + 0x120]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48775c
lea ecx, [esp + 0xc4]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x28
call fcn.00413f00
lea ecx, [esp + 0xbc]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487754
lea ecx, [esp + 0x90]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x29
call fcn.00413f00
lea ecx, [esp + 0x88]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48774c
lea ecx, [esp + 0x104]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x2a
call fcn.00413f00
lea ecx, [esp + 0xfc]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487744
lea ecx, [esp + 0x98]
call fcn.0044e650
mov ecx, dword [esi + 8]
mov byte [esp + 0x670], 0x2b
push eax
push 1
push ecx
mov ecx, esi
call fcn.00413f00
lea ecx, [esp + 0x90]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48773c
lea ecx, [esp + 0xe4]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x2c
call fcn.00413f00
lea ecx, [esp + 0xdc]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487734
lea ecx, [esp + 0xa0]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x2d
call fcn.00413f00
lea ecx, [esp + 0x98]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48772c
lea ecx, [esp + 0x124]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x2e
call fcn.00413f00
lea ecx, [esp + 0x11c]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487724
lea ecx, [esp + 0xa8]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x2f
call fcn.00413f00
lea ecx, [esp + 0xa0]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48771c
lea ecx, [esp + 0xec]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x30
call fcn.00413f00
mov byte [esp + 0x670], bl
lea ecx, [esp + 0xe4]
call fcn.0044e6f0
push 6
push 0x487714
lea ecx, [esp + 0xb0]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x31
call fcn.00413f00
lea ecx, [esp + 0xa8]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48770c
lea ecx, [esp + 0x10c]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x32
call fcn.00413f00
lea ecx, [esp + 0x104]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x4415b2
test byte [esp + 0x17], 0x80
je 0x440e88
push ecx
mov byte [0x493771], 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487704
call fcn.0044e650
lea edx, [esp + 0x49c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x33
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x49c]
jmp 0x440ed4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876fc
call fcn.0044e650
lea edx, [esp + 0x3dc]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x34
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x3dc]
call fcn.00413460
push 6
push 0x487704
lea ecx, [esp + 0xb8]
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x35
call fcn.00413f00
lea ecx, [esp + 0xb0]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876fc
lea ecx, [esp + 0xf4]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x36
call fcn.00413f00
lea ecx, [esp + 0xec]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 0x80
jmp 0x4415a6
test byte [esp + 0x17], 1
je 0x440fbd
push ecx
mov byte [0x493771], 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876f4
call fcn.0044e650
lea eax, [esp + 0x24c]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x37
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x24c]
jmp 0x441009
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876ec
call fcn.0044e650
lea edx, [esp + 0x26c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x38
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x26c]
call fcn.00413460
push 6
push 0x4876f4
lea ecx, [esp + 0x88]
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x39
call fcn.00413f00
lea ecx, [esp + 0x80]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876ec
lea ecx, [esp + 0xc0]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x3a
call fcn.00413f00
mov byte [esp + 0x670], bl
lea ecx, [esp + 0xb8]
jmp 0x44159f
test byte [esp + 0x17], bl
je 0x4410e7
push ecx
mov byte [0x493771], 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876f4
call fcn.0044e650
lea eax, [esp + 0x28c]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x3b
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x28c]
jmp 0x441133
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876ec
call fcn.0044e650
lea edx, [esp + 0x2ac]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x3c
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x2ac]
call fcn.00413460
push 6
push 0x4876f4
lea ecx, [esp + 0x11c]
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x3d
call fcn.00413f00
lea ecx, [esp + 0x114]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876ec
lea ecx, [esp + 0xcc]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x3e
call fcn.00413f00
lea ecx, [esp + 0xc4]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push ebx
jmp 0x4415a6
test byte [esp + 0x17], 4
je 0x441218
push ecx
mov byte [0x493771], 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876e4
call fcn.0044e650
lea eax, [esp + 0x2cc]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x3f
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x2cc]
jmp 0x441264
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876dc
call fcn.0044e650
lea edx, [esp + 0x2ec]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x40
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x2ec]
call fcn.00413460
push 6
push 0x4876e4
lea ecx, [esp + 0xfc]
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x41
call fcn.00413f00
lea ecx, [esp + 0xf4]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876dc
lea ecx, [esp + 0xd4]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x42
call fcn.00413f00
lea ecx, [esp + 0xcc]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 4
jmp 0x4415a6
mov al, byte [esp + 0x17]
test al, al
jne 0x441347
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876d4
call fcn.0044e650
lea eax, [esp + 0x30c]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x43
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x30c]
jmp 0x4413e2
push ecx
cmp al, 1
mov ecx, esp
jne 0x441399
mov dword [esp + 0x1c], esp
push 6
push 0x4876cc
call fcn.0044e650
lea edx, [esp + 0x32c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x44
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x32c]
jmp 0x4413e2
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x34c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x45
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x34c]
call fcn.00413460
push 6
push 0x4876d4
lea ecx, [esp + 0x114]
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x46
call fcn.00413f00
lea ecx, [esp + 0x10c]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876cc
lea ecx, [esp + 0xdc]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x47
call fcn.00413f00
lea ecx, [esp + 0xd4]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x4415b2
test byte [esp + 0x17], 1
je 0x4414d5
push ecx
mov byte [0x493771], 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487784
call fcn.0044e650
lea edx, [esp + 0x36c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x48
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x36c]
jmp 0x441521
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48778c
call fcn.0044e650
lea edx, [esp + 0x38c]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x49
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov byte [esp + 0x670], bl
push 1
lea ecx, [esp + 0x38c]
call fcn.00413460
push 6
push 0x487784
lea ecx, [esp + 0x8c]
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea esi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x4a
call fcn.00413f00
lea ecx, [esp + 0x84]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48778c
lea ecx, [esp + 0x94]
call fcn.0044e650
mov ecx, dword [esi + 8]
push eax
push 1
push ecx
mov ecx, esi
mov byte [esp + 0x67c], 0x4b
call fcn.00413f00
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x8c]
call fcn.0044e6f0
push 1
mov edx, dword [esp + 0x20]
mov ecx, ebp
push edx
call fcn.004490e0
push 1
lea ecx, [esp + 0x24]
mov esi, eax
mov byte [esp + 0x674], 1
call fcn.00413460
push 1
lea ecx, [esp + 0x34]
mov byte [esp + 0x674], 0
call fcn.00413460
push 1
lea ecx, [esp + 0x50]
mov dword [esp + 0x674], 0xffffffff
call fcn.00413460
jmp 0x442b60
test byte [esp + 0x17], 4
je 0x4416a4
push ecx
mov byte [0x493771], 1
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487784
call fcn.0044e650
lea eax, [esp + 0x198]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x4c
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x198]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x44168a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441681
cmp al, 0xff
je 0x441681
dec al
mov byte [ecx], al
mov dword [esp + 0x198], esi
mov dword [esp + 0x19c], esi
mov dword [esp + 0x1a0], esi
jmp 0x441724
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x198], esi
mov dword [esp + 0x19c], esi
mov dword [esp + 0x1a0], esi
jmp 0x441724
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48778c
call fcn.0044e650
lea edx, [esp + 0x208]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x4d
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x208]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x44170f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441706
cmp al, 0xff
je 0x441706
dec al
mov byte [ecx], al
jmp 0x44170f
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x208], esi
mov dword [esp + 0x20c], esi
mov dword [esp + 0x210], esi
push 6
push 0x487784
lea ecx, [esp + 0x9c]
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea edi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, edi
mov byte [esp + 0x67c], 0x4e
call fcn.00413f00
lea ecx, [esp + 0x94]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48778c
lea ecx, [esp + 0xa4]
call fcn.0044e650
mov ecx, dword [edi + 8]
push eax
push 1
push ecx
mov ecx, edi
mov byte [esp + 0x67c], 0x4f
call fcn.00413f00
lea ecx, [esp + 0x9c]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov edx, dword [esp + 0x1c]
push 4
push edx
mov ecx, ebp
call fcn.004490e0
mov edi, eax
mov eax, dword [esp + 0x24]
cmp eax, esi
je 0x4417d7
mov cl, byte [eax - 1]
test cl, cl
je 0x4417cd
cmp cl, 0xff
je 0x4417cd
dec cl
mov byte [eax - 1], cl
jmp 0x4417d7
dec eax
push eax
call fcn.00467320
add esp, 4
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], esi
cmp ecx, esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
je 0x441807
mov al, byte [ecx - 1]
test al, al
je 0x4417fd
cmp al, 0xff
je 0x4417fd
dec al
mov byte [ecx - 1], al
jmp 0x441807
dec ecx
push ecx
call fcn.00467320
add esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp + 0x34], esi
cmp eax, esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
je 0x441d0f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441d06
cmp al, 0xff
je 0x441d06
dec al
mov byte [ecx], al
mov ax, di
mov ecx, dword [esp + 0x668]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [esp + 0x17]
test al, al
jne 0x4418fb
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876c4
call fcn.0044e650
lea eax, [esp + 0x1f8]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x50
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x1f8]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x4418e1
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4418d8
cmp al, 0xff
je 0x4418d8
dec al
mov byte [ecx], al
mov dword [esp + 0x1f8], esi
mov dword [esp + 0x1fc], esi
mov dword [esp + 0x200], esi
jmp 0x441b64
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x1f8], esi
mov dword [esp + 0x1fc], esi
mov dword [esp + 0x200], esi
jmp 0x441b64
cmp al, 1
jne 0x4419a0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48779c
call fcn.0044e650
lea edx, [esp + 0x1e8]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x51
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x1e8]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441986
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x44197d
cmp al, 0xff
je 0x44197d
dec al
mov byte [ecx], al
mov dword [esp + 0x1e8], esi
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f0], esi
jmp 0x441b64
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x1e8], esi
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f0], esi
jmp 0x441b64
cmp al, bl
jne 0x441a45
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487794
call fcn.0044e650
lea edx, [esp + 0x178]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x52
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x178]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441a2b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441a22
cmp al, 0xff
je 0x441a22
dec al
mov byte [ecx], al
mov dword [esp + 0x178], esi
mov dword [esp + 0x17c], esi
mov dword [esp + 0x180], esi
jmp 0x441b64
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x178], esi
mov dword [esp + 0x17c], esi
mov dword [esp + 0x180], esi
jmp 0x441b64
push ecx
cmp al, 3
mov ecx, esp
jne 0x441ae7
mov dword [esp + 0x1c], esp
push 6
push 0x48777c
call fcn.0044e650
lea edx, [esp + 0x1d8]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x53
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x1d8]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441ad0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441ac7
cmp al, 0xff
je 0x441ac7
dec al
mov byte [ecx], al
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1dc], esi
mov dword [esp + 0x1e0], esi
jmp 0x441b64
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1dc], esi
mov dword [esp + 0x1e0], esi
jmp 0x441b64
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x148]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x54
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x148]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441b4f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441b46
cmp al, 0xff
je 0x441b46
dec al
mov byte [ecx], al
jmp 0x441b4f
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x148], esi
mov dword [esp + 0x14c], esi
mov dword [esp + 0x150], esi
push 6
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
mov byte [ebp + 0x43], bl
push 0x4876c4
lea ecx, [esp + 0xac]
mov byte [ebp + 0x44], 3
call fcn.0044e650
mov ecx, dword [ebp + 0x84]
lea edi, [ebp + 0x7c]
push eax
push 1
push ecx
mov ecx, edi
mov byte [esp + 0x67c], 0x55
call fcn.00413f00
lea ecx, [esp + 0xa4]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48779c
lea ecx, [esp + 0xb4]
call fcn.0044e650
mov ecx, dword [edi + 8]
push eax
push 1
push ecx
mov ecx, edi
mov byte [esp + 0x67c], 0x56
call fcn.00413f00
lea ecx, [esp + 0xac]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487794
lea ecx, [esp + 0xbc]
call fcn.0044e650
mov ecx, dword [edi + 8]
push eax
push 1
push ecx
mov ecx, edi
mov byte [esp + 0x67c], 0x57
call fcn.00413f00
lea ecx, [esp + 0xb4]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48777c
lea ecx, [esp + 0xc8]
call fcn.0044e650
mov ecx, dword [edi + 8]
push eax
push 1
push ecx
mov ecx, edi
mov byte [esp + 0x67c], 0x58
call fcn.00413f00
lea ecx, [esp + 0xc0]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
mov edi, eax
mov eax, dword [esp + 0x24]
cmp eax, esi
je 0x441c97
mov cl, byte [eax - 1]
test cl, cl
je 0x441c8d
cmp cl, 0xff
je 0x441c8d
dec cl
mov byte [eax - 1], cl
jmp 0x441c97
dec eax
push eax
call fcn.00467320
add esp, 4
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], esi
cmp ecx, esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
je 0x441cc7
mov al, byte [ecx - 1]
test al, al
je 0x441cbd
cmp al, 0xff
je 0x441cbd
dec al
mov byte [ecx - 1], al
jmp 0x441cc7
dec ecx
push ecx
call fcn.00467320
add esp, 4
mov eax, dword [esp + 0x50]
mov dword [esp + 0x34], esi
cmp eax, esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
je 0x441d0f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441d06
cmp al, 0xff
je 0x441d06
dec al
mov byte [ecx], al
mov ax, di
mov ecx, dword [esp + 0x668]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push ecx
call fcn.00467320
add esp, 4
mov ax, di
mov ecx, dword [esp + 0x668]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [esp + 0x17]
test al, al
jne 0x441dd1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876bc
call fcn.0044e650
lea edx, [esp + 0x218]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x59
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x218]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441db7
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441dae
cmp al, 0xff
je 0x441dae
dec al
mov byte [ecx], al
mov dword [esp + 0x218], esi
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x218], esi
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], esi
jmp 0x44224a
cmp al, 1
jne 0x441e76
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876b4
call fcn.0044e650
lea edx, [esp + 0x1b8]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x5a
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x1b8]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441e5c
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441e53
cmp al, 0xff
je 0x441e53
dec al
mov byte [ecx], al
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1c0], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1c0], esi
jmp 0x44224a
cmp al, bl
jne 0x441f1b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876ac
call fcn.0044e650
lea edx, [esp + 0x158]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x5b
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x158]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441f01
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441ef8
cmp al, 0xff
je 0x441ef8
dec al
mov byte [ecx], al
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], esi
mov dword [esp + 0x160], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], esi
mov dword [esp + 0x160], esi
jmp 0x44224a
cmp al, 3
jne 0x441fc0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4876a4
call fcn.0044e650
lea edx, [esp + 0x168]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x5c
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x168]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x441fa6
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x441f9d
cmp al, 0xff
je 0x441f9d
dec al
mov byte [ecx], al
mov dword [esp + 0x168], esi
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x168], esi
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], esi
jmp 0x44224a
cmp al, 4
jne 0x442065
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48769c
call fcn.0044e650
lea edx, [esp + 0x188]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x5d
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x188]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x44204b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x442042
cmp al, 0xff
je 0x442042
dec al
mov byte [ecx], al
mov dword [esp + 0x188], esi
mov dword [esp + 0x18c], esi
mov dword [esp + 0x190], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x188], esi
mov dword [esp + 0x18c], esi
mov dword [esp + 0x190], esi
jmp 0x44224a
cmp al, 5
jne 0x44210a
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x487694
call fcn.0044e650
lea edx, [esp + 0x1a8]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x5e
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x1a8]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x4420f0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4420e7
cmp al, 0xff
je 0x4420e7
dec al
mov byte [ecx], al
mov dword [esp + 0x1a8], esi
mov dword [esp + 0x1ac], esi
mov dword [esp + 0x1b0], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x1a8], esi
mov dword [esp + 0x1ac], esi
mov dword [esp + 0x1b0], esi
jmp 0x44224a
cmp al, 6
jne 0x4421af
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x48768c
call fcn.0044e650
lea edx, [esp + 0x1c8]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x5f
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
mov eax, dword [esp + 0x1c8]
mov byte [esp + 0x670], bl
cmp eax, esi
je 0x442195
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x44218c
cmp al, 0xff
je 0x44218c
dec al
mov byte [ecx], al
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d0], esi
jmp 0x44224a
push ecx
call fcn.00467320
add esp, 4
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d0], esi
jmp 0x44224a
push ecx
cmp al, 7
mov ecx, esp
jne 0x442206
mov dword [esp + 0x1c], esp
push 6
push 0x487684
call fcn.0044e650
lea edx, [esp + 0x3ac]
push edx
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0x670], 0x60
push ecx
push esi
push eax
lea ecx, [ebp + 0x64]
call fcn.00413260
push 1
lea ecx, [esp + 0x3ac]
mov byte [esp + 0x674], bl
call fcn.00413460
jmp 0x44224a
mov dword [esp + 0x1c], esp
push 6
push 0x48760c
call fcn.0044e650
lea edx, [esp + 0x3cc]
push edx
call fcn.0045ad10
add esp, 8
push eax
lea ecx, [ebp + 0x64]
mov byte [esp + 0x674], 0x61
call fcn.0044a950
lea ecx, [esp + 0x3c8]
mov byte [esp + 0x670], bl
call fcn.00413060
mov byte [ebp + 0x41], 0
mov byte [ebp + 0x42], 1
mov byte [ebp + 0x43], bl
mov byte [ebp + 0x44], 3
mov byte [ebp + 0x45], 4
mov byte [ebp + 0x46], 5
push 6
mov byte [ebp + 0x47], 6
push 0x4876bc
lea ecx, [esp + 0xd0]
mov byte [ebp + 0x48], 7
call fcn.0044e650
lea esi, [ebp + 0x7c]
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x62
call fcn.0044ad40
lea ecx, [esp + 0xc8]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876b4
lea ecx, [esp + 0xd8]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x63
call fcn.0044ad40
lea ecx, [esp + 0xd0]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876ac
lea ecx, [esp + 0x48]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x64
call fcn.0044ad40
lea ecx, [esp + 0x40]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x4876a4
lea ecx, [esp + 0x80]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x65
call fcn.0044ad40
lea ecx, [esp + 0x78]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48769c
lea ecx, [esp + 0x7c]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x66
call fcn.0044ad40
lea ecx, [esp + 0x74]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487694
lea ecx, [esp + 0x84]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x67
call fcn.0044ad40
lea ecx, [esp + 0x7c]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x48768c
lea ecx, [esp + 0x4c]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x68
call fcn.0044ad40
lea ecx, [esp + 0x44]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
push 6
push 0x487684
lea ecx, [esp + 0x20]
call fcn.0044e650
push eax
mov ecx, esi
mov byte [esp + 0x674], 0x69
call fcn.0044ad40
lea ecx, [esp + 0x18]
mov byte [esp + 0x670], bl
call fcn.0044e6f0
mov ecx, ebp
call fcn.00448d40
jmp 0x442b33
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877bc
call fcn.0044e650
lea eax, [esp + 0x3ec]
push eax
call fcn.0045ad10
add esp, 8
lea edi, [ebp + 0x64]
push eax
mov ecx, edi
mov byte [esp + 0x674], 0x6a
call fcn.0044a950
lea ecx, [esp + 0x3e8]
mov byte [esp + 0x670], bl
call fcn.00413060
fld qword [esp + 0x5c]
fmul qword [0x478298]
sub esp, 8
lea ecx, [esp + 0x12c]
fstp qword [esp]
push str._.0f
push ecx
call fcn.00467c1a
add esp, 0x10
lea edx, [esp + 0x124]
mov ecx, edi
push edx
call fcn.0044ab60
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x487674
call fcn.0044e650
lea eax, [esp + 0x40c]
push eax
call fcn.0045ad10
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x674], 0x6b
call fcn.0044a950
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x408]
jmp 0x44264e
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877bc
call fcn.0044e650
lea edx, [esp + 0x42c]
push edx
call fcn.0045ad10
add esp, 8
lea edi, [ebp + 0x64]
push eax
mov ecx, edi
mov byte [esp + 0x674], 0x6c
call fcn.0044a950
lea ecx, [esp + 0x428]
mov byte [esp + 0x670], bl
call fcn.00413060
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
push eax
push ecx
lea edx, [esp + 0x12c]
push str._.0f
push edx
call fcn.00467c1a
add esp, 0x10
lea eax, [esp + 0x124]
mov ecx, edi
push eax
call fcn.0044ab60
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x48766c
call fcn.0044e650
lea ecx, [esp + 0x44c]
push ecx
call fcn.0045ad10
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x674], 0x6d
call fcn.0044a950
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x448]
jmp 0x442720
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877bc
call fcn.0044e650
lea eax, [esp + 0x46c]
push eax
call fcn.0045ad10
add esp, 8
lea edi, [ebp + 0x64]
push eax
mov ecx, edi
mov byte [esp + 0x674], 0x6e
call fcn.0044a950
lea ecx, [esp + 0x468]
mov byte [esp + 0x670], bl
call fcn.00413060
fld qword [esp + 0x5c]
fmul qword [0x478310]
sub esp, 8
lea ecx, [esp + 0x12c]
fstp qword [esp]
push str._.0f
push ecx
call fcn.00467c1a
add esp, 0x10
lea edx, [esp + 0x124]
mov ecx, edi
push edx
call fcn.0044ab60
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x487674
call fcn.0044e650
lea eax, [esp + 0x48c]
push eax
call fcn.0045ad10
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x674], 0x6f
call fcn.0044a950
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x488]
call fcn.00413060
push 0x20
mov ecx, edi
call fcn.0044ac30
lea ecx, [esp + 0x20]
push ecx
jmp 0x442805
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877bc
call fcn.0044e650
lea edx, [esp + 0x4ac]
push edx
call fcn.0045ad10
add esp, 8
lea edi, [ebp + 0x64]
push eax
mov ecx, edi
mov byte [esp + 0x674], 0x70
call fcn.0044a950
lea ecx, [esp + 0x4a8]
mov byte [esp + 0x670], bl
call fcn.00413060
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
push eax
push ecx
lea edx, [esp + 0x12c]
push str._.0f
push edx
call fcn.00467c1a
add esp, 0x10
lea eax, [esp + 0x124]
mov ecx, edi
push eax
call fcn.0044ab60
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x487664
call fcn.0044e650
lea ecx, [esp + 0x4cc]
push ecx
call fcn.0045ad10
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x674], 0x71
call fcn.0044a950
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x4c8]
call fcn.00413060
push 0x20
mov ecx, edi
call fcn.0044ac30
lea edx, [esp + 0x20]
push edx
jmp 0x442805
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x4877bc
call fcn.0044e650
lea eax, [esp + 0x4ec]
push eax
call fcn.0045ad10
add esp, 8
lea edi, [ebp + 0x64]
push eax
mov ecx, edi
mov byte [esp + 0x674], 0x72
call fcn.0044a950
lea ecx, [esp + 0x4e8]
mov byte [esp + 0x670], bl
call fcn.00413060
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
push ecx
push edx
lea eax, [esp + 0x12c]
push str._.0f
push eax
call fcn.00467c1a
add esp, 0x10
lea ecx, [esp + 0x124]
push ecx
mov ecx, edi
call fcn.0044ab60
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x48765c
call fcn.0044e650
lea edx, [esp + 0x228]
push edx
call fcn.0045ad10
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x674], 0x73
call fcn.0044a950
lea ecx, [esp + 0x224]
mov byte [esp + 0x670], bl
call fcn.00413060
push 0x20
mov ecx, edi
call fcn.0044ac30
lea eax, [esp + 0x20]
push eax
mov ecx, edi
call fcn.0044aa90
push esi
push 3
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x30], esp
push ecx
mov ecx, esp
mov dword [esp + 0x60], esp
push 6
push 0x4875b8
call fcn.0044e650
push esi
call fcn.0045ad10
sub esp, 8
lea edx, [ebp + 0x64]
mov ecx, esp
mov dword [esp + 0x6c], esp
push edx
mov byte [esp + 0x69c], 0x74
call fcn.00412e80
mov ecx, 0x4937b8
mov byte [esp + 0x698], bl
call fcn.00457010
cmp ax, bx
jne 0x4428a6
lea ecx, [esp + 0x20]
mov byte [esp + 0x670], 1
call fcn.00413060
lea ecx, [esp + 0x30]
mov byte [esp + 0x670], 0
call fcn.00413060
lea ecx, [esp + 0x48]
call fcn.004076a0
mov ax, 1
mov ecx, dword [esp + 0x668]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
push 0x3b9ac9ff
lea eax, [esp + 0x56c]
push 0x48699c
push eax
call fcn.00467c1a
push ecx
lea edx, [esp + 0x27]
mov ecx, esp
mov dword [esp + 0x28], esp
lea eax, [esp + 0x578]
push edx
push eax
call fcn.00412fa0
sub esp, 0x10
lea edx, [esp + 0x92]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
push 0x486928
mov byte [esp + 0x698], 0x75
call fcn.00412fa0
sub esp, 0x10
lea eax, [esp + 0xa3]
mov ecx, esp
mov dword [esp + 0xac], esp
push eax
push 0x486a1c
mov byte [esp + 0x6a8], 0x76
call fcn.00412fa0
sub esp, 0x10
lea edx, [esp + 0xb1]
mov ecx, esp
mov dword [esp + 0xb4], esp
push edx
push 0x4930f8
mov byte [esp + 0x6b8], 0x77
call fcn.00412fa0
sub esp, 0x10
mov byte [esp + 0x6c0], 0x78
mov esi, esp
mov dword [esp + 0xc8], esp
push ecx
mov ecx, esp
mov dword [esp + 0x94], esp
push 6
push 0x4875b8
call fcn.0044e650
push esi
call fcn.0045ad10
sub esp, 8
mov byte [esp + 0x6d0], 0x79
mov esi, esp
mov dword [esp + 0xa0], esp
push ecx
mov ecx, esp
mov dword [esp + 0xa4], esp
push 6
push 0x4877bc
call fcn.0044e650
push esi
call fcn.0045ad10
add esp, 8
lea eax, [esp + 0x284]
mov ecx, 0x4937b8
mov byte [esp + 0x6d0], bl
push eax
call fcn.004572d0
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x674], 0x7a
call fcn.00442c10
lea ecx, [esp + 0x224]
mov byte [esp + 0x670], bl
call fcn.004076a0
lea ecx, [esp + 0x48]
call fcn.00452fc0
cmp ax, bx
je 0x442861
lea ecx, [esp + 0x48]
call fcn.00452fc0
cmp ax, 1
jne 0x4428a6
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x4c]
call fcn.004566e0
mov ecx, eax
mov byte [esp + 0x670], 0x7b
call fcn.0045fc20
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x568]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov byte [esp + 0x670], bl
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x5c]
call fcn.00413060
lea ecx, [esp + 0x568]
push ecx
call fcn.00467d6e
mov ecx, eax
xor eax, eax
mov al, byte [ebp + 0x40]
add esp, 4
cmp eax, 0x16
ja case.0x442a82.2
xor edx, edx
mov dl, byte [eax + 0x442bf8]
jmp dword [edx*4 + 0x442be4]
lea ecx, [ecx + ecx + 0x14]
jmp case.0x442a82.2
mov eax, 0x66666667
imul ecx
mov ecx, edx
sar ecx, 2
mov eax, ecx
shr eax, 0x1f
add ecx, eax
jmp case.0x442a82.2
mov eax, 0x51eb851f
imul ecx
mov ecx, edx
sar ecx, 5
mov edx, ecx
shr edx, 0x1f
add ecx, edx
mov byte [esp + 0x5c], cl
mov eax, ecx
mov edx, ecx
xor edi, edi
shr ecx, 0x18
lea esi, [ebp + 0x74]
mov byte [esp + 0x5f], cl
sar eax, 8
sar edx, 0x10
push edi
mov ecx, esi
mov byte [esp + 0x61], al
mov byte [esp + 0x62], dl
call fcn.0044e8c0
and eax, 0xff
sub eax, 4
js 0x442b1e
mov al, byte [esp + edi + 0x5c]
mov ecx, esi
push eax
push 0
call fcn.0044e8c0
xor cx, cx
mov cl, al
sub ecx, edi
push ecx
mov ecx, esi
call fcn.0044e8d0
push 0
mov ecx, esi
inc edi
call fcn.0044e8c0
and eax, 0xff
sub eax, 4
cmp edi, eax
jle 0x442aeb
push 0
push 0
mov ecx, esi
call fcn.0044e8c0
push eax
push 0
mov ecx, ebp
call fcn.004492b0
lea ecx, [esp + 0x20]
mov esi, eax
mov byte [esp + 0x670], 1
call fcn.00413060
lea ecx, [esp + 0x30]
mov byte [esp + 0x670], 0
call fcn.00413060
lea ecx, [esp + 0x48]
call fcn.004076a0
mov ecx, dword [esp + 0x668]
mov ax, si
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret