Function at 0x4463f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x461a68
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x9a4
mov eax, dword [0x473090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x17c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x160], esp
push 8
push 0x467f40
call dword [0x4641b4]
mov dword [ebp - 0x6d0], eax
lea ecx, [ebp - 0x15c]
call fcn.00402f50
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp - 0x6d8], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x6d8]
call fcn.004031c0
mov dword [ebp - 0x6dc], eax
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], edx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6e0]
call dword [0x464180]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e4]
push eax
lea ecx, [ebp - 0x13c]
call dword [0x464178]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], ecx
mov byte [ebp - 4], 4
push 0x467f4c
lea ecx, [ebp - 0x198]
call dword [0x464178]
mov dword [ebp - 0x6f0], eax
mov edx, dword [ebp - 0x6f0]
mov dword [ebp - 0x6f4], edx
mov byte [ebp - 4], 5
push 0x4731b0
mov eax, dword [ebp - 0x6f4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x6f8], eax
mov edx, dword [ebp - 0x6f8]
mov dword [ebp - 0x6fc], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x6ec]
push eax
mov ecx, dword [ebp - 0x6fc]
push ecx
lea edx, [ebp - 0x34]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x700], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b4]
call dword [0x464174]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x198]
call dword [0x464174]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x13c]
call dword [0x464174]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x17c]
call dword [0x464174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x15c]
call fcn.00445e30
call fcn.00404ce0
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0
je 0x4465b1
call fcn.00414ee0
lea ecx, [ebp - 0x34]
call dword [0x464198]
mov dword [ebp - 0x708], eax
lea ecx, [ebp - 0x34]
call dword [0x464180]
mov dword [ebp - 0x70c], eax
lea ecx, [ebp + 8]
call dword [0x464180]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x708]
push eax
mov ecx, dword [ebp - 0x70c]
push ecx
mov edx, dword [ebp - 0x710]
push edx
call dword [0x4642cc]
add esp, 0xc
test eax, eax
je 0x446a21
push 0x467f50
lea ecx, [ebp - 0x1d0]
call dword [0x464178]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x718], eax
mov byte [ebp - 4], 0xd
push 0x467f54
lea ecx, [ebp - 0x1ec]
call dword [0x464178]
mov dword [ebp - 0x71c], eax
mov ecx, dword [ebp - 0x71c]
mov dword [ebp - 0x720], ecx
mov byte [ebp - 4], 0xe
push 0x4731b0
mov edx, dword [ebp - 0x720]
push edx
lea eax, [ebp - 0x208]
push eax
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x728], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x718]
push edx
mov eax, dword [ebp - 0x728]
push eax
lea ecx, [ebp - 0x120]
push ecx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x72c], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x208]
call dword [0x464174]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1ec]
call dword [0x464174]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1d0]
call dword [0x464174]
mov byte [ebp - 4], 0x14
call fcn.00406390
jmp 0x4466fa
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x120]
call dword [0x464198]
mov dword [ebp - 0x730], eax
lea ecx, [ebp - 0x120]
call dword [0x464180]
mov dword [ebp - 0x734], eax
lea ecx, [ebp + 8]
call dword [0x464180]
mov dword [ebp - 0x738], eax
mov edx, dword [ebp - 0x730]
push edx
mov eax, dword [ebp - 0x734]
push eax
mov ecx, dword [ebp - 0x738]
push ecx
call dword [0x4642cc]
add esp, 0xc
test eax, eax
jne 0x446841
lea edx, [ebp - 0x264]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x248], esp
push 0x14
push 0x467f58
call dword [0x4641b4]
mov dword [ebp - 0x73c], eax
lea ecx, [ebp - 0x244]
call fcn.00402f50
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x744], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x744]
call fcn.00403560
mov dword [ebp - 0x748], eax
mov ecx, dword [ebp - 0x748]
mov dword [ebp - 0x74c], ecx
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x74c]
call dword [0x464180]
mov dword [ebp - 0x750], eax
mov edx, dword [ebp - 0x750]
push edx
lea ecx, [ebp - 0x224]
call dword [0x464178]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x758], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x758]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x224]
call dword [0x464174]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x264]
call dword [0x464174]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x244]
call fcn.00445e30
jmp 0x4469df
push 0x467f70
lea ecx, [ebp - 0x280]
call dword [0x464178]
mov dword [ebp - 0x75c], eax
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x760], edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x760]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x2dc]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c0], esp
push 0x19
push 0x467f74
call dword [0x4641b4]
mov dword [ebp - 0x764], eax
lea ecx, [ebp - 0x2bc]
call fcn.00402f50
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x76c], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x76c]
call fcn.00403010
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x774], ecx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x774]
call dword [0x464180]
mov dword [ebp - 0x778], eax
mov edx, dword [ebp - 0x778]
push edx
lea ecx, [ebp - 0x29c]
call dword [0x464178]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x780], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x780]
push ecx
lea edx, [ebp - 0x2f8]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x788], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x788]
push ecx
lea edx, [ebp - 0x314]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x790], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x790]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x314]
call dword [0x464174]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x2f8]
call dword [0x464174]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x29c]
call dword [0x464174]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2dc]
call dword [0x464174]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2bc]
call fcn.00445e30
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x280]
call dword [0x464174]
mov dword [ebp - 0x318], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x120]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x318]
jmp 0x447e02
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0x1f
call fcn.00406310
jmp 0x446a4a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x38], 0
jmp 0x446a6d
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
mov ecx, 0x473278
call fcn.004549b0
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x794]
jae 0x446b3b
mov ecx, 0x473278
call fcn.004549b0
mov dword [ebp - 0x798], eax
call dword [0x46428c]
xor edx, edx
div dword [ebp - 0x798]
mov dword [ebp - 0x100], edx
push 7
call fcn.004040b0
add esp, 4
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], ecx
cmp dword [ebp - 0x7a0], 0xc
je 0x446ad7
jmp 0x446ad9
jmp 0x446ae3
call fcn.00424de0
call fcn.0041bda0
mov edx, dword [ebp - 0x100]
push edx
mov ecx, 0x473278
call fcn.004549d0
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x7a4]
movzx ecx, byte [eax + 0x74]
test ecx, ecx
jne 0x446b36
jmp 0x446b3b
jmp 0x446a64
mov ecx, 0x473278
call fcn.004549b0
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x7b0]
jne 0x446b88
mov dword [ebp - 0x31c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x31c]
jmp 0x447e02
push 0x464a27
lea ecx, [ebp - 0xfc]
call dword [0x464178]
mov dword [ebp - 0x7b4], eax
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x38], 0
jmp 0x446bb5
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 8
jae 0x446c39
call dword [0x46428c]
and eax, 0x80000001
jns 0x446bcd
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x446bed
call dword [0x46428c]
cdq
mov ecx, 0x19
idiv ecx
movsx edx, dl
add edx, 0x61
mov dword [ebp - 0x7b8], edx
jmp 0x446c07
call dword [0x46428c]
cdq
mov ecx, 0x19
idiv ecx
movsx edx, dl
add edx, 0x41
mov dword [ebp - 0x7b8], edx
mov eax, dword [ebp - 0x7b8]
push eax
push 1
lea ecx, [ebp - 0xfc]
call fcn.00458870
call fcn.00406240
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 0
je 0x446c34
call fcn.0041bda0
jmp 0x446bac
lea ecx, [ebp - 0x35c]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x340], esp
push 9
push 0x467f90
call dword [0x4641b4]
mov dword [ebp - 0x7c0], eax
lea ecx, [ebp - 0x33c]
call fcn.00402f50
mov dword [ebp - 0x7c4], eax
mov edx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c8], edx
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x7c8]
call fcn.004031c0
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x7d0]
call dword [0x464180]
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7d4]
push ecx
lea ecx, [ebp - 0xfc]
call dword [0x464220]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x35c]
call dword [0x464174]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x33c]
call fcn.00445e30
push 0x464a41
lea ecx, [ebp - 0x54]
call dword [0x464178]
mov dword [ebp - 0x7d8], eax
mov byte [ebp - 4], 0x24
lea edx, [ebp - 0x54]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x360], esp
lea eax, [ebp - 0xfc]
push eax
call dword [0x4641a0]
mov dword [ebp - 0x7dc], eax
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp - 0x7e0], ecx
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x364], esp
push 0x4732c4
call dword [0x4641a0]
mov dword [ebp - 0x7e4], eax
mov byte [ebp - 4], 0x24
call fcn.0043b7d0
add esp, 0x3c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x368], esp
lea edx, [ebp - 0x54]
push edx
call dword [0x4641a0]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x7ec], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3ac]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x390], esp
push 0xb
push 0x467f9c
call dword [0x4641b4]
mov dword [ebp - 0x7f0], eax
lea ecx, [ebp - 0x38c]
call fcn.00402f50
mov dword [ebp - 0x7f4], eax
mov edx, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f8], edx
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x7f8]
call fcn.00403370
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x800], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x800]
call dword [0x464180]
mov dword [ebp - 0x804], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x36c], esp
mov edx, dword [ebp - 0x804]
push edx
call dword [0x464178]
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x80c], eax
mov byte [ebp - 4], 0x29
sub esp, 0x1c
mov dword [ebp - 0x810], esp
mov dword [ebp - 0x3b0], esp
mov ecx, dword [0x4641d4]
mov edx, dword [ecx]
push edx
lea ecx, [ebp - 0x34]
call dword [0x464198]
mov dword [ebp - 0x814], eax
lea eax, [ebp - 0x3f0]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3d4], esp
push 7
push 0x467fa8
call dword [0x4641b4]
mov dword [ebp - 0x818], eax
lea ecx, [ebp - 0x3d0]
call fcn.00402f50
mov dword [ebp - 0x81c], eax
mov ecx, dword [ebp - 0x81c]
mov dword [ebp - 0x820], ecx
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x820]
call fcn.004031c0
mov dword [ebp - 0x824], eax
mov edx, dword [ebp - 0x824]
mov dword [ebp - 0x828], edx
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x828]
call dword [0x464180]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
push eax
call fcn.0045c97e
add esp, 4
mov ecx, dword [ebp - 0x814]
sub ecx, eax
push ecx
mov edx, dword [ebp - 0x810]
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x830], eax
mov byte [ebp - 4], 0x2f
call fcn.004502c0
add esp, 0x54
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3f0]
call dword [0x464174]
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x3d0]
call fcn.00445e30
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3ac]
call dword [0x464174]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x38c]
call fcn.00445e30
cmp dword [ebp - 0x8c], 0
jne 0x4472a0
push 0x467fb0
lea ecx, [ebp - 0x40c]
call dword [0x464178]
mov dword [ebp - 0x838], eax
mov ecx, dword [ebp - 0x838]
mov dword [ebp - 0x83c], ecx
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x83c]
push edx
mov eax, dword [0x4641d4]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x34]
call dword [0x464198]
mov dword [ebp - 0x840], eax
lea edx, [ebp - 0x44c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x430], esp
push 7
push 0x467fb4
call dword [0x4641b4]
mov dword [ebp - 0x844], eax
lea ecx, [ebp - 0x42c]
call fcn.00402f50
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x84c], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x84c]
call fcn.004031c0
mov dword [ebp - 0x850], eax
mov ecx, dword [ebp - 0x850]
mov dword [ebp - 0x854], ecx
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x854]
call dword [0x464180]
mov dword [ebp - 0x858], eax
mov edx, dword [ebp - 0x858]
push edx
call fcn.0045c97e
add esp, 4
mov ecx, dword [ebp - 0x840]
sub ecx, eax
push ecx
lea edx, [ebp - 0x468]
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x860], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x860]
push ecx
lea edx, [ebp - 0x4c4]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4a8], esp
push 0x19
push 0x467fbc
call dword [0x4641b4]
mov dword [ebp - 0x864], eax
lea ecx, [ebp - 0x4a4]
call fcn.00402f50
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x86c], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x86c]
call fcn.00403370
mov dword [ebp - 0x870], eax
mov ecx, dword [ebp - 0x870]
mov dword [ebp - 0x874], ecx
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x874]
call dword [0x464180]
mov dword [ebp - 0x878], eax
mov edx, dword [ebp - 0x878]
push edx
lea ecx, [ebp - 0x484]
call dword [0x464178]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x880], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x880]
push ecx
lea edx, [ebp - 0x4e0]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x888], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x888]
push ecx
lea edx, [ebp - 0x4fc]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x890], eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x890]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x4fc]
call dword [0x464174]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x4e0]
call dword [0x464174]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x484]
call dword [0x464174]
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x4c4]
call dword [0x464174]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x4a4]
call fcn.00445e30
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x468]
call dword [0x464174]
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x44c]
call dword [0x464174]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x42c]
call fcn.00445e30
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x40c]
call dword [0x464174]
call fcn.004061c0
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 0
je 0x447216
call fcn.0040d550
mov dword [ebp - 0x500], 0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x54]
call dword [0x464174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfc]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x500]
jmp 0x447e02
mov dword [ebp - 0x38], 0
jmp 0x4472b2
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, 0x473110
call fcn.004548d0
mov dword [ebp - 0x8a0], eax
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [ebp - 0x8a0]
jae 0x4473e7
mov edx, dword [ebp - 0x100]
push edx
mov ecx, 0x473278
call fcn.004549d0
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x8a4]
add ecx, 0x3c
call dword [0x464198]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x38]
push eax
mov ecx, 0x473110
call fcn.004548f0
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8ac]
call dword [0x464198]
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x8a8]
cmp ecx, dword [ebp - 0x8b0]
jne 0x4473e2
mov edx, dword [ebp - 0x38]
push edx
mov ecx, 0x473110
call fcn.004548f0
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
call dword [0x464180]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x100]
push eax
mov ecx, 0x473278
call fcn.004549d0
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x8bc]
add ecx, 0x3c
call dword [0x464180]
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8b8]
push ecx
mov edx, dword [ebp - 0x8c0]
push edx
call dword [0x4642ac]
add esp, 8
test eax, eax
jne 0x4473e2
mov eax, dword [ebp - 0x38]
push eax
mov ecx, 0x473110
call fcn.004548f0
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x504], esp
lea edx, [ebp - 0x54]
push edx
call dword [0x4641a0]
mov dword [ebp - 0x8c8], eax
call fcn.00430eb0
add esp, 0x20
jmp 0x4473e7
jmp 0x4472a9
mov byte [ebp - 0x75], 0
mov dword [ebp - 0x88], 0
xor eax, eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0xe0], 0
push 0x40
push 0
lea ecx, [ebp - 0xdc]
push ecx
call fcn.0045c8b6
add esp, 0xc
mov dword [ebp - 0xb4], 1
xor edx, edx
mov word [ebp - 0xb0], dx
mov dword [ebp - 0x94], 0
call dword [0x46428c]
cdq
mov ecx, 0x64
idiv ecx
add edx, 1
mov dword [ebp - 0x18], edx
call fcn.00405210
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 0
je 0x44746f
call fcn.00415cc0
call fcn.00415df0
mov edx, dword [ebp - 0x18]
imul edx, edx, 3
mov eax, dword [ebp - 0x18]
lea ecx, [edx + eax*2 + 0x15]
mov dword [ebp - 0x104], ecx
lea ecx, [ebp - 0x54]
call dword [0x464198]
mov dword [ebp - 0x8d0], eax
mov edx, dword [ebp - 0x8d0]
add edx, 0x64
push edx
call fcn.0045c84a
add esp, 4
mov dword [ebp - 0x8d4], eax
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x18]
push edx
lea ecx, [ebp - 0x54]
call dword [0x464180]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0x548]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0xa
push 0x467fd8
call dword [0x4641b4]
mov dword [ebp - 0x8dc], eax
lea ecx, [ebp - 0x528]
call fcn.00402f50
mov dword [ebp - 0x8e0], eax
mov edx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e4], edx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x8e4]
call fcn.00403370
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x8ec], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x8ec]
call dword [0x464180]
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f0]
push ecx
mov edx, dword [ebp - 0x74]
push edx
call dword [0x4642c4]
add esp, 0x10
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x548]
call dword [0x464174]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x528]
call fcn.00445e30
call fcn.00406160
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 0
je 0x44759d
call fcn.00415f20
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0xe0]
push ecx
push 0
push 0
push 0x8000000
push 0
push 0
push 0
mov edx, dword [ebp - 0x74]
push edx
push 0
call dword [0x4640e0]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x54c], eax
mov ecx, dword [ebp - 0x54c]
push ecx
call fcn.0045c984
add esp, 4
push 0x7d0
mov edx, dword [ebp - 0x88]
push edx
call dword [0x464034]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0x3b
call fcn.004067c0
jmp 0x44761e
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x94], 0x102
jne 0x44765b
push 0
mov eax, dword [ebp - 0x88]
push eax
call dword [0x4640d8]
call fcn.00406100
mov dword [ebp - 0x8f8], eax
cmp dword [ebp - 0x8f8], 0
je 0x447659
call fcn.00416180
jmp 0x447685
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x88]
push edx
call dword [0x4640f0]
test eax, eax
je 0x447685
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x104]
jne 0x447685
mov byte [ebp - 0x75], 1
mov ecx, dword [ebp - 0x88]
push ecx
call dword [0x4640b4]
mov edx, dword [ebp - 0x84]
push edx
call dword [0x4640b4]
mov byte [ebp - 4], 0x3d
call fcn.004047e0
jmp 0x4476c1
mov dword [ebp - 4], 0x24
mov byte [ebp - 4], 0x3f
call fcn.00405310
jmp 0x4476ea
mov dword [ebp - 4], 0x24
movzx eax, byte [ebp - 0x75]
test eax, eax
jne 0x447a25
lea ecx, [ebp - 0x54]
call dword [0x464180]
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
push ecx
call dword [0x464110]
push 0x467fe4
lea ecx, [ebp - 0x568]
call dword [0x464178]
mov dword [ebp - 0x900], eax
mov edx, dword [ebp - 0x900]
mov dword [ebp - 0x904], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x904]
push eax
mov ecx, dword [0x4641d4]
mov edx, dword [ecx]
push edx
lea ecx, [ebp - 0x34]
call dword [0x464198]
mov dword [ebp - 0x908], eax
lea eax, [ebp - 0x5a8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x58c], esp
push 7
push 0x467fe8
call dword [0x4641b4]
mov dword [ebp - 0x90c], eax
lea ecx, [ebp - 0x588]
call fcn.00402f50
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x910]
mov dword [ebp - 0x914], ecx
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x914]
call fcn.004031c0
mov dword [ebp - 0x918], eax
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0x91c], edx
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x91c]
call dword [0x464180]
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x920]
push eax
call fcn.0045c97e
add esp, 4
mov ecx, dword [ebp - 0x908]
sub ecx, eax
push ecx
lea edx, [ebp - 0x5c4]
push edx
lea ecx, [ebp + 8]
call dword [0x4641c4]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x928], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x928]
push ecx
lea edx, [ebp - 0x620]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x604], esp
push 0x1a
push 0x467ff0
call dword [0x4641b4]
mov dword [ebp - 0x92c], eax
lea ecx, [ebp - 0x600]
call fcn.00402f50
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x934], eax
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x934]
call fcn.00403010
mov dword [ebp - 0x938], eax
mov ecx, dword [ebp - 0x938]
mov dword [ebp - 0x93c], ecx
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x93c]
call dword [0x464180]
mov dword [ebp - 0x940], eax
mov edx, dword [ebp - 0x940]
push edx
lea ecx, [ebp - 0x5e0]
call dword [0x464178]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x948], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x948]
push ecx
lea edx, [ebp - 0x63c]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x950], eax
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x950]
push ecx
lea edx, [ebp - 0x658]
push edx
call dword [0x4641ac]
add esp, 0xc
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x958], eax
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x958]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x658]
call dword [0x464174]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x63c]
call dword [0x464174]
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x5e0]
call dword [0x464174]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x620]
call dword [0x464174]
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x600]
call fcn.00445e30
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x5c4]
call dword [0x464174]
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x5a8]
call dword [0x464174]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x588]
call fcn.00445e30
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x568]
call dword [0x464174]
call fcn.00401c00
mov dword [ebp - 0x95c], eax
cmp dword [ebp - 0x95c], 0
je 0x4479d6
call fcn.0041bda0
call fcn.0041bda0
mov dword [ebp - 0x65c], 0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x54]
call dword [0x464174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfc]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x65c]
jmp 0x447e02
lea ecx, [ebp - 0x70]
call dword [0x464194]
mov dword [ebp - 0x960], eax
mov byte [ebp - 4], 0x4a
call fcn.00404440
mov dword [ebp - 0x964], eax
cmp dword [ebp - 0x964], 0
je 0x447a51
call fcn.0040d550
lea edx, [ebp - 0x70]
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, 0x473278
call fcn.004549d0
mov dword [ebp - 0x968], eax
mov ecx, dword [ebp - 0x968]
add ecx, 0x3c
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x660], esp
push ecx
mov ecx, edx
call dword [0x4641a0]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x970], eax
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x100]
push ecx
mov ecx, 0x473278
call fcn.004549d0
mov dword [ebp - 0x974], eax
mov edx, dword [ebp - 0x974]
add edx, 0x58
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x664], esp
push edx
call dword [0x4641a0]
mov dword [ebp - 0x978], eax
mov byte [ebp - 4], 0x4a
call fcn.0043b7d0
add esp, 0x3c
lea ecx, [ebp - 0x70]
call dword [0x464180]
mov dword [ebp - 0x97c], eax
lea ecx, [ebp - 0x54]
call dword [0x464180]
mov dword [ebp - 0x980], eax
push 1
mov eax, dword [ebp - 0x97c]
push eax
mov ecx, dword [ebp - 0x980]
push ecx
call dword [0x4640ec]
test eax, eax
je 0x447bdc
mov dword [ebp - 0x668], 1
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x70]
call dword [0x464174]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x54]
call dword [0x464174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfc]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x668]
jmp 0x447e02
mov dword [ebp - 0x66c], 0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x70]
call dword [0x464174]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x54]
call dword [0x464174]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfc]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call dword [0x464174]
mov eax, dword [ebp - 0x66c]
jmp 0x447e02
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045c8a0
mov esp, ebp
pop ebp
ret