Function at 0x440470
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1828
call fcn.004261c7
push ebx
push esi
push edi
lea edi, [ebp - 0x1228]
mov ecx, 0x48a
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x47c514]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, 0x47e10b
call fcn.00426866
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x40], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x50], xmm0
lea eax, [ebp - 0x1064]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp + 0xc]
and eax, 0x800
jne 0x4404f4
mov dword [ebp - 0x1814], 1
jmp 0x4404fe
mov dword [ebp - 0x1814], 0
mov ecx, dword [ebp - 0x1814]
mov dword [ebp - 0x107c], ecx
lea eax, [ebp - 0x1098]
mov dword [ebp - 0x10a4], eax
lea eax, [ebp - 0x10e4]
mov dword [ebp - 0x10f0], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1100], xmm0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1814], eax
mov ecx, dword [ebp - 0x1814]
cmp dword [ecx + 4], 0
ja 0x440562
jb 0x44054f
mov edx, dword [ebp - 0x1814]
cmp dword [edx], 0x16
jae 0x440562
push 8
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
lea eax, [ebp - 0x50]
push eax
push 0x16
push 0x6054b50
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043ff80
add esp, 0x10
test eax, eax
jne 0x440590
push 7
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov esi, esp
push 0x16
mov eax, dword [ebp - 0x1070]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004265e1
cmp eax, 0x16
je 0x4405d4
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x6054b50
je 0x440644
push 8
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
cmp dword [ebp - 0x4c], 0
jl 0x4408b3
jg 0x44065a
cmp dword [ebp - 0x50], 0x4c
jb 0x4408b3
mov esi, esp
push 0x14
mov eax, dword [ebp - 0x10a4]
push eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x14
mov edx, dword [ebp - 0x4c]
sbb edx, 0
push edx
push ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004265e1
cmp eax, 0x14
jne 0x4408b3
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x7064b50
jne 0x4408b3
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx + 0xc]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx + 0xc]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.0042656e
or esi, eax
or edi, edx
mov dword [ebp - 0x1100], esi
mov dword [ebp - 0x10fc], edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub ecx, 0x38
mov edx, dword [eax + 4]
sbb edx, 0
mov dword [ebp - 0x1818], ecx
mov dword [ebp - 0x1814], edx
mov eax, dword [ebp - 0x10fc]
cmp eax, dword [ebp - 0x1814]
jb 0x440812
ja 0x4407ff
mov ecx, dword [ebp - 0x1100]
cmp ecx, dword [ebp - 0x1818]
jbe 0x440812
push 8
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov esi, esp
push 0x38
mov eax, dword [ebp - 0x10f0]
push eax
mov ecx, dword [ebp - 0x10fc]
push ecx
mov edx, dword [ebp - 0x1100]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004265e1
cmp eax, 0x38
jne 0x4408b3
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x6064b50
jne 0x4408b3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov dword [ecx + 0x34], 1
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 0xa]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 0xa]
shl ecx, 8
or eax, ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x10], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x18], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 4]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 4]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x24], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 6]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 6]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x30], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 0xc]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 0xc]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0xc]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0xc], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1070]
movzx eax, byte [edx + ecx + 0x10]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x1070]
movzx ecx, byte [edx + ecx + 0x10]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x1070]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
cmp dword [ecx + 0x34], 0
je 0x441036
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10a4]
movzx eax, byte [edx + ecx + 0x10]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10a4]
movzx ecx, byte [edx + ecx + 0x10]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10a4]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0x110c], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x20]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x20]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x20]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x20]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x24]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x24]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x24]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x24]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.0042656e
or esi, eax
or edi, edx
mov dword [ebp - 0x111c], esi
mov dword [ebp - 0x1118], edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x18]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x18]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x1c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x1c]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x1c]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x1c]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.0042656e
or esi, eax
or edi, edx
mov dword [ebp - 0x112c], esi
mov dword [ebp - 0x1128], edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 4]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 4]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 4]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 4]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 8]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.0042656e
or esi, eax
or edi, edx
mov dword [ebp - 0x113c], esi
mov dword [ebp - 0x1138], edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x28]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x28]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x28]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x28]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x2c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x2c]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x2c]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x2c]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.0042656e
or esi, eax
or edi, edx
mov dword [ebp - 0x114c], esi
mov dword [ebp - 0x1148], edi
cmp dword [ebp - 0x1138], 0
ja 0x440e08
jb 0x440df5
cmp dword [ebp - 0x113c], 0x2c
jae 0x440e08
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
cmp dword [ebp - 0x110c], 1
je 0x440e24
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
cmp dword [ebp - 0x1118], 0
ja 0x440e36
cmp dword [ebp - 0x111c], 0xffffffff
jbe 0x440e49
push 2
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0x111c]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
cmp dword [ebp - 0x1128], 0
ja 0x440e67
cmp dword [ebp - 0x112c], 0xffffffff
jbe 0x440e7a
push 2
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0x112c]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1148], 0
ja 0x440e95
cmp dword [ebp - 0x114c], 0xffffffff
jbe 0x440ea8
push 0xf
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0x114c]
mov dword [ebp - 0xc], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x10]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x10]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x10]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0x24], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x14]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x14]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x18
or eax, edx
mov dword [ebp - 0x30], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x30]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x30]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x30]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x30]
shl edx, 0x18
or eax, edx
mov esi, eax
xor edi, edi
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x10f0]
movzx eax, byte [edx + ecx + 0x34]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x10f0]
movzx ecx, byte [edx + ecx + 0x34]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x34]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x10f0]
movzx edx, byte [ecx + edx + 0x34]
shl edx, 0x18
or eax, edx
xor edx, edx
mov cl, 0x20
call fcn.0042656e
or esi, eax
or edi, edx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
cmp ecx, dword [ebp - 0x18]
je 0x441054
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x30]
je 0x44107b
cmp dword [ebp - 0x24], 1
jne 0x441068
cmp dword [ebp - 0x30], 1
je 0x44107b
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov ecx, dword [ebp - 0xc]
xor esi, esi
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov edx, 0x2e
mul edx
mov dword [ebp - 0x1818], ecx
mov dword [ebp - 0x1814], esi
mov dword [ebp - 0x1820], eax
mov dword [ebp - 0x181c], edx
mov eax, dword [ebp - 0x1814]
cmp eax, dword [ebp - 0x181c]
ja 0x4410d6
jb 0x4410c3
mov ecx, dword [ebp - 0x1818]
cmp ecx, dword [ebp - 0x1820]
jae 0x4410d6
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0xc]
xor ecx, ecx
add eax, dword [ebp - 0x40]
adc ecx, dword [ebp - 0x3c]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1818], eax
mov dword [ebp - 0x1814], ecx
mov dword [ebp - 0x181c], edx
mov eax, dword [ebp - 0x181c]
mov ecx, dword [ebp - 0x1814]
cmp ecx, dword [eax + 4]
jb 0x44112c
ja 0x441119
mov edx, dword [ebp - 0x181c]
mov eax, dword [ebp - 0x1818]
cmp eax, dword [edx]
jbe 0x44112c
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 0
je 0x441b05
push 0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x48]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00438960
add esp, 0x10
test eax, eax
je 0x441188
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x48]
add eax, 0x10
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00438960
add esp, 0x10
test eax, eax
jne 0x44119b
push 0x10
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
cmp dword [ebp - 0x107c], 0
je 0x4411da
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x48]
add eax, 0x20
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00438960
add esp, 0x10
test eax, eax
jne 0x4411da
push 0x10
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov esi, esp
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x48]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x44]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
call eax
add esp, 0x14
cmp esi, esp
call fcn.004265e1
cmp eax, dword [ebp - 0xc]
je 0x441222
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov edx, dword [ecx]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1164], eax
mov dword [ebp - 0x1158], 0
jmp 0x441251
mov eax, dword [ebp - 0x1158]
add eax, 1
mov dword [ebp - 0x1158], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x1158]
cmp ecx, dword [eax + 0x10]
jae 0x441b05
cmp dword [ebp - 0x1164], 0x2e
jb 0x4412bd
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx]
shl edx, 0x18
or eax, edx
cmp eax, 0x2014b50
je 0x4412d0
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov esi, dword [ebp - 0x5c]
sub esi, dword [ecx]
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0x48]
mov eax, dword [ebp - 0x1158]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x48]
add edx, 0x10
push edx
call fcn.00438850
add esp, 8
mov ecx, dword [edi + 0x10]
mov dword [ecx + eax*4], esi
cmp dword [ebp - 0x107c], 0
je 0x441334
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x48]
mov ecx, dword [ebp - 0x1158]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x48]
add eax, 0x20
push eax
call fcn.00438850
add esp, 8
mov ecx, dword [esi + 0x20]
mov edx, dword [ebp - 0x1158]
mov dword [ecx + eax*4], edx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x14]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x14]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x14]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x11b0], eax
mov dword [ebp - 0x11ac], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x18]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x18]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x18]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x11c0], eax
mov dword [ebp - 0x11bc], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x2a]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x2a]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x18
or eax, edx
xor ecx, ecx
mov dword [ebp - 0x11d0], eax
mov dword [ebp - 0x11cc], ecx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x1c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1c]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x1194], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x1e]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1e]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
cmp dword [ecx + 0x38], 0
jne 0x441816
cmp dword [ebp - 0x11a0], 0
je 0x441816
mov eax, dword [ebp - 0x11ac]
cmp eax, dword [ebp - 0x11bc]
jb 0x4414f3
ja 0x4414d9
mov ecx, dword [ebp - 0x11b0]
cmp ecx, dword [ebp - 0x11c0]
jbe 0x4414f3
mov edx, dword [ebp - 0x11b0]
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x1818], edx
mov dword [ebp - 0x1814], eax
jmp 0x44150b
mov ecx, dword [ebp - 0x11c0]
mov edx, dword [ebp - 0x11bc]
mov dword [ebp - 0x1818], ecx
mov dword [ebp - 0x1814], edx
mov eax, dword [ebp - 0x1814]
cmp eax, dword [ebp - 0x11cc]
jb 0x441593
ja 0x441529
mov ecx, dword [ebp - 0x1818]
cmp ecx, dword [ebp - 0x11d0]
jbe 0x441593
mov edx, dword [ebp - 0x11ac]
cmp edx, dword [ebp - 0x11bc]
jb 0x441561
ja 0x441547
mov eax, dword [ebp - 0x11b0]
cmp eax, dword [ebp - 0x11c0]
jbe 0x441561
mov ecx, dword [ebp - 0x11b0]
mov edx, dword [ebp - 0x11ac]
mov dword [ebp - 0x1820], ecx
mov dword [ebp - 0x181c], edx
jmp 0x441579
mov eax, dword [ebp - 0x11c0]
mov ecx, dword [ebp - 0x11bc]
mov dword [ebp - 0x1820], eax
mov dword [ebp - 0x181c], ecx
mov edx, dword [ebp - 0x1820]
mov eax, dword [ebp - 0x181c]
mov dword [ebp - 0x1828], edx
mov dword [ebp - 0x1824], eax
jmp 0x4415ab
mov ecx, dword [ebp - 0x11d0]
mov edx, dword [ebp - 0x11cc]
mov dword [ebp - 0x1828], ecx
mov dword [ebp - 0x1824], edx
cmp dword [ebp - 0x1828], 0xffffffff
jne 0x441816
cmp dword [ebp - 0x1824], 0
jne 0x441816
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x11dc], eax
cmp dword [ebp - 0x11dc], 0
je 0x441816
mov dword [ebp - 0x11f4], 0
mov eax, dword [ebp - 0x11a0]
mov ecx, dword [ebp - 0x1194]
lea edx, [ecx + eax + 0x2e]
cmp edx, dword [ebp - 0x1164]
jbe 0x4416c2
mov esi, esp
mov eax, dword [ebp - 0x11a0]
push eax
call dword [sym.imp.ucrtbased.dll_malloc]
add esp, 4
cmp esi, esp
call fcn.004265e1
mov dword [ebp - 0x11f4], eax
cmp dword [ebp - 0x11f4], 0
jne 0x44163f
push 0x10
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov esi, esp
mov eax, dword [ebp - 0x11a0]
push eax
mov ecx, dword [ebp - 0x11f4]
push ecx
mov edx, dword [ebp - 0x40]
add edx, 0x2e
mov eax, dword [ebp - 0x3c]
adc eax, 0
xor ecx, ecx
add edx, dword [ebp - 0x1194]
adc eax, ecx
push eax
push edx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x44]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
call edx
add esp, 0x14
cmp esi, esp
call fcn.004265e1
cmp eax, dword [ebp - 0x11a0]
je 0x4416b4
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004265e1
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0x11f4]
mov dword [ebp - 0x11e8], eax
jmp 0x4416d5
mov eax, dword [ebp - 0x1194]
mov ecx, dword [ebp - 0x5c]
lea edx, [ecx + eax + 0x2e]
mov dword [ebp - 0x11e8], edx
cmp dword [ebp - 0x11dc], 4
jae 0x44170a
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004265e1
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x11e8]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x11e8]
movzx ecx, byte [edx + ecx]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x1200], eax
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x11e8]
movzx eax, byte [edx + ecx + 2]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x11e8]
movzx ecx, byte [edx + ecx + 2]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x120c], eax
mov eax, dword [ebp - 0x120c]
add eax, 4
cmp eax, dword [ebp - 0x11dc]
jbe 0x4417a7
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004265e1
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
cmp dword [ebp - 0x1200], 1
jne 0x4417cc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov dword [ecx + 0x34], 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x48]
mov dword [ecx + 0x38], 1
jmp 0x4417fd
mov eax, dword [ebp - 0x120c]
mov ecx, dword [ebp - 0x11e8]
lea edx, [ecx + eax + 4]
mov dword [ebp - 0x11e8], edx
mov eax, dword [ebp - 0x11dc]
sub eax, 4
sub eax, dword [ebp - 0x120c]
mov dword [ebp - 0x11dc], eax
jne 0x4416d5
mov esi, esp
mov eax, dword [ebp - 0x11f4]
push eax
call dword [sym.imp.ucrtbased.dll_free]
add esp, 4
cmp esi, esp
call fcn.004265e1
cmp dword [ebp - 0x11b0], 0xffffffff
jne 0x44182c
cmp dword [ebp - 0x11ac], 0
je 0x4418dd
cmp dword [ebp - 0x11c0], 0xffffffff
jne 0x441842
cmp dword [ebp - 0x11bc], 0
je 0x4418dd
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0xa]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0xa]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0xa]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0xa]
shl edx, 0x18
or eax, edx
jne 0x4418ae
mov eax, dword [ebp - 0x11c0]
cmp eax, dword [ebp - 0x11b0]
jne 0x4418ca
mov ecx, dword [ebp - 0x11bc]
cmp ecx, dword [ebp - 0x11ac]
jne 0x4418ca
mov eax, dword [ebp - 0x11c0]
or eax, dword [ebp - 0x11bc]
je 0x4418dd
mov eax, dword [ebp - 0x11b0]
or eax, dword [ebp - 0x11ac]
jne 0x4418dd
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x22]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x22]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x117c], eax
cmp dword [ebp - 0x117c], 0xffff
je 0x441928
mov eax, dword [ebp - 0x117c]
cmp eax, dword [ebp - 0x24]
je 0x44193b
cmp dword [ebp - 0x117c], 1
je 0x44193b
push 0xa
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
cmp dword [ebp - 0x11b0], 0xffffffff
jne 0x441951
cmp dword [ebp - 0x11ac], 0
je 0x4419fe
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x2a]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x2a]
shl ecx, 8
or eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x10
or eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x2a]
shl edx, 0x18
or eax, edx
xor ecx, ecx
add eax, 0x1e
adc ecx, 0
add eax, dword [ebp - 0x11b0]
adc ecx, dword [ebp - 0x11ac]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1818], eax
mov dword [ebp - 0x1814], ecx
mov dword [ebp - 0x181c], edx
mov eax, dword [ebp - 0x181c]
mov ecx, dword [ebp - 0x1814]
cmp ecx, dword [eax + 4]
jb 0x4419fe
ja 0x4419eb
mov edx, dword [ebp - 0x181c]
mov eax, dword [ebp - 0x1818]
cmp eax, dword [edx]
jbe 0x4419fe
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 8]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 8]
shl ecx, 8
or eax, ecx
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
and eax, 0x2000
je 0x441a49
push 5
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x5c]
movzx eax, byte [edx + ecx + 0x1c]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1c]
shl ecx, 8
or eax, ecx
mov edx, 1
imul ecx, edx, 0
mov edx, dword [ebp - 0x5c]
movzx ecx, byte [edx + ecx + 0x1e]
mov edx, 1
shl edx, 0
mov esi, dword [ebp - 0x5c]
movzx edx, byte [esi + edx + 0x1e]
shl edx, 8
or ecx, edx
lea eax, [eax + ecx + 0x2e]
mov ecx, 1
imul edx, ecx, 0
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + edx + 0x20]
mov ecx, 1
shl ecx, 0
mov esi, dword [ebp - 0x5c]
movzx ecx, byte [esi + ecx + 0x20]
shl ecx, 8
or edx, ecx
add eax, edx
mov dword [ebp - 0x1170], eax
mov edx, dword [ebp - 0x1170]
cmp edx, dword [ebp - 0x1164]
jbe 0x441ae2
push 9
mov eax, dword [ebp + 8]
push eax
call fcn.00442840
add esp, 8
jmp 0x441b1f
mov eax, dword [ebp - 0x1164]
sub eax, dword [ebp - 0x1170]
mov dword [ebp - 0x1164], eax
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x1170]
mov dword [ebp - 0x5c], eax
jmp 0x441242
cmp dword [ebp - 0x107c], 0
je 0x441b1a
mov eax, dword [ebp + 8]
push eax
call fcn.004421d0
add esp, 4
mov eax, 1
push edx
mov ecx, ebp
push eax
lea edx, [0x441b50]
call fcn.00426514
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004263c0
add esp, 0x1828
cmp ebp, esp
call fcn.004265e1
mov esp, ebp
pop ebp
ret