Function at 0x43c980
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46071d
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xf10
mov eax, dword [0x473090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x88]
call dword [0x464194]
mov dword [ebp - 4], 0
call fcn.00407d80
test eax, eax
je 0x43c9d8
call fcn.00424de0
call fcn.0040e5a0
call fcn.00407d80
test eax, eax
je 0x43c9fb
push 0x14
push 0x24
call fcn.00407520
add esp, 8
cmp eax, 0x2d0
jge 0x43c9fb
call fcn.0040d550
jmp 0x43ca18
push 0xf1
push 0x39
call fcn.00407520
add esp, 8
cmp eax, 0x35a9
jne 0x43ca13
jmp 0x43ca18
call fcn.00424de0
lea ecx, [ebp - 0xa4]
call dword [0x464194]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc0]
call dword [0x464194]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call dword [0x464194]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call dword [0x464194]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call dword [0x464194]
mov byte [ebp - 4], 5
mov dword [ebp - 0x50], 0
push 0x4732c4
call fcn.0043c6a0
add esp, 4
mov dword [ebp - 0x50], eax
call fcn.00404440
test eax, eax
je 0x43ca89
call fcn.00424de0
call fcn.0041bda0
cmp dword [ebp - 0x50], 0
jne 0x43cb6f
lea eax, [ebp - 0x11c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x100], esp
push 0x23
push 0x4677d4
call dword [0x4641b4]
mov dword [ebp - 0xb4c], eax
lea ecx, [ebp - 0xfc]
call fcn.00402f50
mov dword [ebp - 0xb50], eax
mov ecx, dword [ebp - 0xb50]
mov dword [ebp - 0xb54], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xb54]
call fcn.004031c0
mov dword [ebp - 0xb58], eax
mov edx, dword [ebp - 0xb58]
mov dword [ebp - 0xb5c], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xb5c]
call dword [0x464180]
push eax
lea ecx, [ebp - 0xdc]
call dword [0x464178]
mov byte [ebp - 4], 8
lea eax, [ebp - 0xdc]
push eax
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xdc]
call dword [0x464174]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xfc]
call fcn.00445e30
call fcn.00407940
test eax, eax
je 0x43cb6a
call fcn.0040e6d0
call fcn.00414ee0
jmp 0x43ccc3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x120], esp
push 0x4732c4
call dword [0x4641a0]
mov dword [ebp - 0xb60], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xb64], eax
mov ecx, dword [ebp - 0xb64]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jne 0x43ccc3
lea edx, [ebp - 0x17c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x160], esp
push 0x25
push 0x4677f8
call dword [0x4641b4]
mov dword [ebp - 0xb68], eax
lea ecx, [ebp - 0x15c]
call fcn.00402f50
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0xb70], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xb70]
call fcn.00403100
mov dword [ebp - 0xb74], eax
mov ecx, dword [ebp - 0xb74]
mov dword [ebp - 0xb78], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xb78]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x13c]
call dword [0x464178]
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x13c]
push edx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x13c]
call dword [0x464174]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x17c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x15c]
call fcn.00445e30
push 0x30
push 0x4d
call fcn.00407520
add esp, 8
mov dword [ebp - 0xb7c], eax
cmp dword [ebp - 0xb7c], 0xe70
je 0x43cc90
jmp 0x43cc92
jmp 0x43cc9c
call fcn.00414ee0
call fcn.0040e800
push 0x4b
call fcn.004040b0
add esp, 4
mov dword [ebp - 0xb80], eax
cmp dword [ebp - 0xb80], 0x72
je 0x43ccb7
jmp 0x43ccb9
jmp 0x43ccc3
call fcn.00422f50
call fcn.0040e930
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x1c0]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a4], esp
push 0xb
push 0x467820
call dword [0x4641b4]
mov dword [ebp - 0xb84], eax
lea ecx, [ebp - 0x1a0]
call fcn.00402f50
mov dword [ebp - 0xb88], eax
mov edx, dword [ebp - 0xb88]
mov dword [ebp - 0xb8c], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xb8c]
call fcn.00403100
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0xb94], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xb94]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x180], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xb98], eax
call fcn.0043c7d0
add esp, 0x20
mov dword [ebp - 0xb9c], eax
mov ecx, dword [ebp - 0xb9c]
mov dword [ebp - 0x50], ecx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1c0]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1a0]
call fcn.00445e30
cmp dword [ebp - 0x50], 0
jne 0x43ce71
lea edx, [ebp - 0x21c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x200], esp
push 0x27
push str.qwb_W__a1
call dword [0x4641b4]
mov dword [ebp - 0xba0], eax
lea ecx, [ebp - 0x1fc]
call fcn.00402f50
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0xba8], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xba8]
call fcn.00403560
mov dword [ebp - 0xbac], eax
mov ecx, dword [ebp - 0xbac]
mov dword [ebp - 0xbb0], ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xbb0]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x1dc]
call dword [0x464178]
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x1dc]
push edx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1dc]
call dword [0x464174]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x21c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1fc]
call fcn.00445e30
call fcn.004078e0
test eax, eax
je 0x43ce6c
call fcn.004205b0
call fcn.00414ee0
jmp 0x43d4dc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x220], esp
lea eax, [ebp - 0xa4]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xbb4], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xbb8], eax
mov ecx, dword [ebp - 0xbb8]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jne 0x43cf79
lea edx, [ebp - 0x27c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x260], esp
push 0x29
push 0x467854
call dword [0x4641b4]
mov dword [ebp - 0xbbc], eax
lea ecx, [ebp - 0x25c]
call fcn.00402f50
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0xbc4], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xbc4]
call fcn.00403100
mov dword [ebp - 0xbc8], eax
mov ecx, dword [ebp - 0xbc8]
mov dword [ebp - 0xbcc], ecx
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xbcc]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x23c]
call dword [0x464178]
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x23c]
push edx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x23c]
call dword [0x464174]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x27c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x25c]
call fcn.00445e30
jmp 0x43d4dc
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push 0x24
push 0x467880
call dword [0x4641b4]
mov dword [ebp - 0xbd0], eax
lea ecx, [ebp - 0x2a0]
call fcn.00402f50
mov dword [ebp - 0xbd4], eax
mov edx, dword [ebp - 0xbd4]
mov dword [ebp - 0xbd8], edx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xbd8]
call fcn.00403370
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ebp - 0xbe0], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xbe0]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x280], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xbe4], eax
mov ecx, dword [ebp - 0xbe4]
mov dword [ebp - 0xbe8], ecx
mov byte [ebp - 4], 0x16
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c4], esp
lea edx, [ebp - 0xa4]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xbec], eax
mov byte [ebp - 4], 0x15
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2c0]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a0]
call fcn.00445e30
call fcn.00407860
test eax, eax
je 0x43d06f
call fcn.0040e980
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c8], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xbf0], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xbf4], eax
mov ecx, dword [ebp - 0xbf4]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x43d138
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x30c], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0xbfc], eax
mov byte [ebp - 4], 0x17
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x310], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc00], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x308]
call fcn.0043eb10
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0xc08], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0xc08]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x308]
call fcn.0043ebc0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x354]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x2f
push 0x4678a8
call dword [0x4641b4]
mov dword [ebp - 0xc0c], eax
lea ecx, [ebp - 0x334]
call fcn.00402f50
mov dword [ebp - 0xc10], eax
mov ecx, dword [ebp - 0xc10]
mov dword [ebp - 0xc14], ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xc14]
call fcn.00403010
mov dword [ebp - 0xc18], eax
mov edx, dword [ebp - 0xc18]
mov dword [ebp - 0xc1c], edx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xc1c]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x314], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xc20], eax
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0xc24], eax
mov byte [ebp - 4], 0x1b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x358], esp
lea edx, [ebp - 0xa4]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc28], eax
mov byte [ebp - 4], 0x1a
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x354]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x334]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x35c], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xc2c], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xc30], eax
mov ecx, dword [ebp - 0xc30]
mov dword [ebp - 0x50], ecx
push 4
push 0xce
call fcn.00407520
add esp, 8
mov dword [ebp - 0xc34], eax
cmp dword [ebp - 0xc34], 0x338
je 0x43d275
jmp 0x43d277
jmp 0x43d281
call fcn.0040ed20
call fcn.00414ee0
cmp dword [ebp - 0x50], 1
jne 0x43d318
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a0], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0xc38]
mov dword [ebp - 0xc3c], eax
mov byte [ebp - 4], 0x1c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a4], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc40], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x39c]
call fcn.0043eb10
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xc48], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xc48]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x39c]
call fcn.0043ebc0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x3e8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3cc], esp
push 0x38
push 0x4678d8
call dword [0x4641b4]
mov dword [ebp - 0xc4c], eax
lea ecx, [ebp - 0x3c8]
call fcn.00402f50
mov dword [ebp - 0xc50], eax
mov ecx, dword [ebp - 0xc50]
mov dword [ebp - 0xc54], ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xc54]
call fcn.00403370
mov dword [ebp - 0xc58], eax
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0xc5c], edx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0xc5c]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a8], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0xc64], eax
mov byte [ebp - 4], 0x20
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ec], esp
lea edx, [ebp - 0xa4]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc68], eax
mov byte [ebp - 4], 0x1f
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3e8]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3c8]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3f0], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xc6c], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xc70], eax
mov ecx, dword [ebp - 0xc70]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x43d4dc
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x434], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0xc78], eax
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x438], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xc7c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x430]
call fcn.0043eb10
mov dword [ebp - 0xc80], eax
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0xc84], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0xc84]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x430]
call fcn.0043ebc0
call fcn.00407800
test eax, eax
je 0x43d4dc
call fcn.0040ed70
call fcn.0040f110
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x47c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x460], esp
push 7
push 0x467914
call dword [0x4641b4]
mov dword [ebp - 0xc88], eax
lea ecx, [ebp - 0x45c]
call fcn.00402f50
mov dword [ebp - 0xc8c], eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0xc90], ecx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0xc90]
call fcn.004031c0
mov dword [ebp - 0xc94], eax
mov edx, dword [ebp - 0xc94]
mov dword [ebp - 0xc98], edx
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0xc98]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x43c], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xc9c], eax
call fcn.0043c7d0
add esp, 0x20
mov dword [ebp - 0xca0], eax
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x47c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x45c]
call fcn.00445e30
cmp dword [ebp - 0x50], 0
jne 0x43d685
lea ecx, [ebp - 0x4d8]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4bc], esp
push 0x23
push 0x46791c
call dword [0x4641b4]
mov dword [ebp - 0xca4], eax
lea ecx, [ebp - 0x4b8]
call fcn.00402f50
mov dword [ebp - 0xca8], eax
mov edx, dword [ebp - 0xca8]
mov dword [ebp - 0xcac], edx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0xcac]
call fcn.00403370
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0xcb4], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xcb4]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x498]
call dword [0x464178]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x498]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x498]
call dword [0x464174]
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x4d8]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4b8]
call fcn.00445e30
call fcn.00405210
test eax, eax
je 0x43d680
call fcn.0040f240
jmp 0x43db5d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4dc], esp
lea edx, [ebp - 0x88]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xcb8], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xcbc], eax
mov eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x43d78d
lea ecx, [ebp - 0x538]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x51c], esp
push 0x25
push 0x467940
call dword [0x4641b4]
mov dword [ebp - 0xcc0], eax
lea ecx, [ebp - 0x518]
call fcn.00402f50
mov dword [ebp - 0xcc4], eax
mov edx, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc8], edx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xcc8]
call fcn.004031c0
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0xcd0], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0xcd0]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x4f8]
call dword [0x464178]
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4f8]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4f8]
call dword [0x464174]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x538]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x518]
call fcn.00445e30
jmp 0x43db5d
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x57c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x560], esp
push 2
push 0x467968
call dword [0x4641b4]
mov dword [ebp - 0xcd4], eax
lea ecx, [ebp - 0x55c]
call fcn.00402f50
mov dword [ebp - 0xcd8], eax
mov ecx, dword [ebp - 0xcd8]
mov dword [ebp - 0xcdc], ecx
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xcdc]
call fcn.00403370
mov dword [ebp - 0xce0], eax
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0xce4], edx
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xce4]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x53c], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xce8], eax
mov eax, dword [ebp - 0xce8]
mov dword [ebp - 0xcec], eax
mov byte [ebp - 4], 0x2d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x580], esp
lea edx, [ebp - 0x88]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xcf0], eax
mov byte [ebp - 4], 0x2c
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x57c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x55c]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x584], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xcf4], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf8]
mov dword [ebp - 0x50], ecx
push 2
push 0x5b
call fcn.00407520
add esp, 8
cmp eax, 0xb6
jne 0x43d8c8
call fcn.00404990
test eax, eax
je 0x43d8c8
call fcn.004205b0
push 0x5d
push 0x8e
call fcn.00407520
add esp, 8
cmp eax, 0x3396
jne 0x43d8ec
call fcn.004066a0
test eax, eax
je 0x43d8ec
call fcn.004205b0
cmp dword [ebp - 0x50], 1
jne 0x43d983
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5c8], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0xcfc]
mov dword [ebp - 0xd00], eax
mov byte [ebp - 4], 0x2e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5cc], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xd04], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c4]
call fcn.0043eb10
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0xd0c], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0xd0c]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c4]
call fcn.0043ebc0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x610]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5f4], esp
push 0xd
push 0x46796c
call dword [0x4641b4]
mov dword [ebp - 0xd10], eax
lea ecx, [ebp - 0x5f0]
call fcn.00402f50
mov dword [ebp - 0xd14], eax
mov ecx, dword [ebp - 0xd14]
mov dword [ebp - 0xd18], ecx
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0xd18]
call fcn.004031c0
mov dword [ebp - 0xd1c], eax
mov edx, dword [ebp - 0xd1c]
mov dword [ebp - 0xd20], edx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0xd20]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5d0], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], eax
mov byte [ebp - 4], 0x32
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x614], esp
lea edx, [ebp - 0x88]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xd2c], eax
mov byte [ebp - 4], 0x31
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x610]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5f0]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x618], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xd30], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xd34], eax
mov ecx, dword [ebp - 0xd34]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x43db5d
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x65c], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0xd3c], eax
mov byte [ebp - 4], 0x33
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x660], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xd40], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x658]
call fcn.0043eb10
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0xd48], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0xd48]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x658]
call fcn.0043ebc0
mov byte [ebp - 4], 0x35
call fcn.00407790
jmp 0x43db56
mov dword [ebp - 4], 5
lea edx, [ebp - 0xc0]
push edx
lea eax, [ebp - 0x6a4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x688], esp
push 0xa
push 0x46797c
call dword [0x4641b4]
mov dword [ebp - 0xd4c], eax
lea ecx, [ebp - 0x684]
call fcn.00402f50
mov dword [ebp - 0xd50], eax
mov ecx, dword [ebp - 0xd50]
mov dword [ebp - 0xd54], ecx
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0xd54]
call fcn.00403560
mov dword [ebp - 0xd58], eax
mov edx, dword [ebp - 0xd58]
mov dword [ebp - 0xd5c], edx
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0xd5c]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x664], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xd60], eax
call fcn.0043c7d0
add esp, 0x20
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0xd64]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x6a4]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x684]
call fcn.00445e30
call fcn.00406000
test eax, eax
je 0x43dc33
call fcn.00423710
cmp dword [ebp - 0x50], 0
jne 0x43dd33
lea ecx, [ebp - 0x700]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x6e4], esp
push 0x26
push 0x467988
call dword [0x4641b4]
mov dword [ebp - 0xd68], eax
lea ecx, [ebp - 0x6e0]
call fcn.00402f50
mov dword [ebp - 0xd6c], eax
mov edx, dword [ebp - 0xd6c]
mov dword [ebp - 0xd70], edx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0xd70]
call fcn.00403100
mov dword [ebp - 0xd74], eax
mov eax, dword [ebp - 0xd74]
mov dword [ebp - 0xd78], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0xd78]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x6c0]
call dword [0x464178]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x6c0]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x6c0]
call dword [0x464174]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x700]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6e0]
call fcn.00445e30
push 0xf6
call fcn.004040b0
add esp, 4
mov dword [ebp - 0xd7c], eax
cmp dword [ebp - 0xd7c], 0x173
je 0x43dd22
jmp 0x43dd24
jmp 0x43dd2e
call fcn.00422f50
call fcn.00422f50
jmp 0x43e418
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x704], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xd80], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0x50], eax
push 0x5f
call fcn.004040b0
add esp, 4
cmp eax, 0x90
jne 0x43dd87
call fcn.00407d80
test eax, eax
je 0x43dd87
call fcn.004205b0
cmp dword [ebp - 0x50], 0
jne 0x43de83
lea ecx, [ebp - 0x760]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x744], esp
push 0x28
push 0x4679b0
call dword [0x4641b4]
mov dword [ebp - 0xd88], eax
lea ecx, [ebp - 0x740]
call fcn.00402f50
mov dword [ebp - 0xd8c], eax
mov edx, dword [ebp - 0xd8c]
mov dword [ebp - 0xd90], edx
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0xd90]
call fcn.00403100
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0xd98], eax
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0xd98]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x720]
call dword [0x464178]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x720]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x720]
call dword [0x464174]
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x760]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x740]
call fcn.00445e30
mov byte [ebp - 4], 0x3f
call fcn.00404990
jmp 0x43de77
mov dword [ebp - 4], 5
jmp 0x43e418
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x7a4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x788], esp
push 2
push 0x4679dc
call dword [0x4641b4]
mov dword [ebp - 0xd9c], eax
lea ecx, [ebp - 0x784]
call fcn.00402f50
mov dword [ebp - 0xda0], eax
mov ecx, dword [ebp - 0xda0]
mov dword [ebp - 0xda4], ecx
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0xda4]
call fcn.00403560
mov dword [ebp - 0xda8], eax
mov edx, dword [ebp - 0xda8]
mov dword [ebp - 0xdac], edx
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0xdac]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x764], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0xdb4], eax
mov byte [ebp - 4], 0x43
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7a8], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xdb8], eax
mov byte [ebp - 4], 0x42
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7a4]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x784]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7ac], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xdbc], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xdc0], eax
mov ecx, dword [ebp - 0xdc0]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x43e054
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7f0], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0xdc4]
mov dword [ebp - 0xdc8], eax
mov byte [ebp - 4], 0x44
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7f4], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xdcc], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7ec]
call fcn.0043eb10
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0xdd0]
mov dword [ebp - 0xdd4], eax
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0xdd4]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x7ec]
call fcn.0043ebc0
call fcn.00405760
mov dword [ebp - 0xdd8], eax
cmp dword [ebp - 0xdd8], 1
je 0x43e04a
jmp 0x43e054
call fcn.004205b0
call fcn.0040f3c0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x838]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0xa
push 0x4679e0
call dword [0x4641b4]
mov dword [ebp - 0xddc], eax
lea ecx, [ebp - 0x818]
call fcn.00402f50
mov dword [ebp - 0xde0], eax
mov ecx, dword [ebp - 0xde0]
mov dword [ebp - 0xde4], ecx
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0xde4]
call fcn.004031c0
mov dword [ebp - 0xde8], eax
mov edx, dword [ebp - 0xde8]
mov dword [ebp - 0xdec], edx
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0xdec]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x7f8], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xdf0], eax
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0xdf4], eax
mov byte [ebp - 4], 0x48
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x83c], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xdf8], eax
mov byte [ebp - 4], 0x47
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x838]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x818]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x840], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xdfc], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xe00], eax
mov ecx, dword [ebp - 0xe00]
mov dword [ebp - 0x50], ecx
push 0xdc
push 0x14
call fcn.00407520
add esp, 8
mov dword [ebp - 0xe04], eax
cmp dword [ebp - 0xe04], 0x1130
je 0x43e191
jmp 0x43e193
jmp 0x43e19d
call fcn.0041bda0
call fcn.0040d550
cmp dword [ebp - 0x50], 1
jne 0x43e234
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x884], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xe08], eax
mov eax, dword [ebp - 0xe08]
mov dword [ebp - 0xe0c], eax
mov byte [ebp - 4], 0x49
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x888], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xe10], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x880]
call fcn.0043eb10
mov dword [ebp - 0xe14], eax
mov eax, dword [ebp - 0xe14]
mov dword [ebp - 0xe18], eax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0xe18]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x880]
call fcn.0043ebc0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x8cc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8b0], esp
push 0x15
push 0x4679ec
call dword [0x4641b4]
mov dword [ebp - 0xe1c], eax
lea ecx, [ebp - 0x8ac]
call fcn.00402f50
mov dword [ebp - 0xe20], eax
mov ecx, dword [ebp - 0xe20]
mov dword [ebp - 0xe24], ecx
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0xe24]
call fcn.00403010
mov dword [ebp - 0xe28], eax
mov edx, dword [ebp - 0xe28]
mov dword [ebp - 0xe2c], edx
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0xe2c]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x88c], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xe30], eax
mov eax, dword [ebp - 0xe30]
mov dword [ebp - 0xe34], eax
mov byte [ebp - 4], 0x4d
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d0], esp
lea edx, [ebp - 0xc0]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xe38], eax
mov byte [ebp - 4], 0x4c
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x8cc]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8ac]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d4], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xe3c], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xe40], eax
mov ecx, dword [ebp - 0xe40]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x43e418
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x918], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0xe48], eax
mov byte [ebp - 4], 0x4e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x91c], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xe4c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x914]
call fcn.0043eb10
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0xe50]
mov dword [ebp - 0xe54], eax
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0xe54]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x914]
call fcn.0043ebc0
call fcn.00407710
mov dword [ebp - 0xe58], eax
cmp dword [ebp - 0xe58], 1
je 0x43e3fb
jmp 0x43e405
call fcn.00422f50
call fcn.00422f50
call fcn.00407690
test eax, eax
je 0x43e418
call fcn.00424de0
call fcn.00422f50
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x960]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x944], esp
push 0xf
push 0x467a04
call dword [0x4641b4]
mov dword [ebp - 0xe5c], eax
lea ecx, [ebp - 0x940]
call fcn.00402f50
mov dword [ebp - 0xe60], eax
mov ecx, dword [ebp - 0xe60]
mov dword [ebp - 0xe64], ecx
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0xe64]
call fcn.004031c0
mov dword [ebp - 0xe68], eax
mov edx, dword [ebp - 0xe68]
mov dword [ebp - 0xe6c], edx
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0xe6c]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x920], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xe70], eax
call fcn.0043c7d0
add esp, 0x20
mov dword [ebp - 0xe74], eax
mov eax, dword [ebp - 0xe74]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x960]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x940]
call fcn.00445e30
cmp dword [ebp - 0x50], 0
jne 0x43e5b0
lea ecx, [ebp - 0x9bc]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9a0], esp
push 0x25
push 0x467a14
call dword [0x4641b4]
mov dword [ebp - 0xe78], eax
lea ecx, [ebp - 0x99c]
call fcn.00402f50
mov dword [ebp - 0xe7c], eax
mov edx, dword [ebp - 0xe7c]
mov dword [ebp - 0xe80], edx
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0xe80]
call fcn.00403100
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0xe84]
mov dword [ebp - 0xe88], eax
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0xe88]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x97c]
call dword [0x464178]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x97c]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x97c]
call dword [0x464174]
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9bc]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x99c]
call fcn.00445e30
jmp 0x43ea61
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9c0], esp
lea edx, [ebp - 0x4c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xe8c], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xe90], eax
mov eax, dword [ebp - 0xe90]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jne 0x43e6d9
lea ecx, [ebp - 0xa1c]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa00], esp
push 0x27
push 0x467a3c
call dword [0x4641b4]
mov dword [ebp - 0xe94], eax
lea ecx, [ebp - 0x9fc]
call fcn.00402f50
mov dword [ebp - 0xe98], eax
mov edx, dword [ebp - 0xe98]
mov dword [ebp - 0xe9c], edx
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0xe9c]
call fcn.00403560
mov dword [ebp - 0xea0], eax
mov eax, dword [ebp - 0xea0]
mov dword [ebp - 0xea4], eax
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0xea4]
call dword [0x464180]
push eax
lea ecx, [ebp - 0x9dc]
call dword [0x464178]
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x9dc]
push ecx
mov ecx, 0x4732ac
call fcn.00454730
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x9dc]
call dword [0x464174]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa1c]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x9fc]
call fcn.00445e30
push 0x51
push 0xbd
call fcn.00407520
add esp, 8
cmp eax, 0x3bcd
jne 0x43e6d4
call fcn.00407610
test eax, eax
je 0x43e6d4
call fcn.0041bda0
jmp 0x43ea61
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xa60]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa44], esp
push 2
push 0x467a64
call dword [0x4641b4]
mov dword [ebp - 0xea8], eax
lea ecx, [ebp - 0xa40]
call fcn.00402f50
mov dword [ebp - 0xeac], eax
mov ecx, dword [ebp - 0xeac]
mov dword [ebp - 0xeb0], ecx
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0xeb0]
call fcn.00403010
mov dword [ebp - 0xeb4], eax
mov edx, dword [ebp - 0xeb4]
mov dword [ebp - 0xeb8], edx
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0xeb8]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa20], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xebc], eax
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0xec0], eax
mov byte [ebp - 4], 0x5a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa64], esp
lea edx, [ebp - 0x4c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xec4], eax
mov byte [ebp - 4], 0x59
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xa60]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa40]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa68], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xec8], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xecc], eax
mov ecx, dword [ebp - 0xecc]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 1
jne 0x43e887
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xaac], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0xed4], eax
mov byte [ebp - 4], 0x5b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xab0], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xed8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xaa8]
call fcn.0043eb10
mov dword [ebp - 0xedc], eax
mov eax, dword [ebp - 0xedc]
mov dword [ebp - 0xee0], eax
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0xee0]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xaa8]
call fcn.0043ebc0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xaf4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xad8], esp
push 0xd
push str.3ZY_x
call dword [0x4641b4]
mov dword [ebp - 0xee4], eax
lea ecx, [ebp - 0xad4]
call fcn.00402f50
mov dword [ebp - 0xee8], eax
mov ecx, dword [ebp - 0xee8]
mov dword [ebp - 0xeec], ecx
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0xeec]
call fcn.004031c0
mov dword [ebp - 0xef0], eax
mov edx, dword [ebp - 0xef0]
mov dword [ebp - 0xef4], edx
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0xef4]
call dword [0x464180]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xab4], esp
push eax
call dword [0x464178]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp - 0xef8]
mov dword [ebp - 0xefc], eax
mov byte [ebp - 4], 0x5f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xaf8], esp
lea edx, [ebp - 0x4c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xf00], eax
mov byte [ebp - 4], 0x5e
call fcn.0043b7d0
add esp, 0x3c
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0xaf4]
call dword [0x464174]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xad4]
call fcn.00445e30
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xafc], esp
lea eax, [ebp - 0x30]
push eax
call dword [0x4641a0]
mov dword [ebp - 0xf04], eax
call fcn.0043c5e0
add esp, 0x1c
mov dword [ebp - 0xf08], eax
mov ecx, dword [ebp - 0xf08]
mov dword [ebp - 0x50], ecx
push 0x1a
push 0xd9
call fcn.004071d0
add esp, 8
mov dword [ebp - 0xf0c], eax
cmp dword [ebp - 0xf0c], 0xd
je 0x43e9be
jmp 0x43e9c0
jmp 0x43e9ca
call fcn.00423710
call fcn.0040f410
cmp dword [ebp - 0x50], 1
jne 0x43ea61
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb40], esp
lea edx, [ebp - 0x6c]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0xf10]
mov dword [ebp - 0xf14], eax
mov byte [ebp - 4], 0x60
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb44], esp
lea edx, [ebp - 0x30]
push edx
call dword [0x4641a0]
mov dword [ebp - 0xf18], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb3c]
call fcn.0043eb10
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp - 0xf1c]
mov dword [ebp - 0xf20], eax
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0xf20]
push ecx
mov ecx, 0x47317c
call fcn.00454850
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb3c]
call fcn.0043ebc0
mov dword [ebp - 0xb48], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call dword [0x464174]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call dword [0x464174]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c]
call dword [0x464174]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc0]
call dword [0x464174]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call dword [0x464174]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call dword [0x464174]
mov eax, dword [ebp - 0xb48]
jmp 0x43eaef
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045c8a0
mov esp, ebp
pop ebp
ret