Function at 0x402a69
Capabilities:
Inspect section memory permissions

Disassembly:
push 0xa4
mov eax, 0x737608
call fcn.0054dced
xor ebx, ebx
mov dword [ebp - 0x50], ebx
push 0x64
mov dword [ebp - 0x78], ebx
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x402aa0
push 8
mov ecx, eax
call fcn.00590db0
mov dword [ebp - 0x58], eax
jmp 0x402aa3
mov dword [ebp - 0x58], ebx
or dword [ebp - 4], 0xffffffff
xor edi, edi
inc edi
push edi
push dword [ebp - 0x58]
mov ecx, esi
call fcn.0057e0d0
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], edi
je 0x402b0a
push 0x753750
lea ecx, [ebp - 0x94]
call fcn.00402474
lea eax, [ebp - 0x94]
push eax
push 0x80000
push 0x823328
push 0x823330
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x54]
push 0x271a
push esi
mov dword [ebp - 0x50], edi
call fcn.00407a09
mov dword [ebp - 0x60], eax
jmp 0x402b0d
mov dword [ebp - 0x60], ebx
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x50], 1
je 0x402b26
and dword [ebp - 0x50], 0xfffffffe
lea ecx, [ebp - 0x94]
call fcn.00401b9b
mov ecx, dword [ebp - 0x58]
push ebx
push 5
push 0x2000
push ebx
push dword [ebp - 0x60]
call fcn.004022fb
push 0x64
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 4
je 0x402b5b
push 8
mov ecx, eax
call fcn.00590db0
jmp 0x402b5d
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x60]
push 1
push eax
mov dword [esi + 0x19c], eax
call fcn.0057e0d0
push 0x15c
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 5
mov edi, 0x13f1
je 0x402be1
push 0x753720
lea ecx, [ebp - 0x58]
call fcn.00402474
lea eax, [ebp - 0x58]
push eax
push ebx
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 2
push eax
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x68], 0x16f
mov dword [ebp - 0x64], 0x57
call fcn.004079d6
mov ecx, dword [ebp - 0x54]
push eax
push 0x823330
push 0x8232fc
push edi
push dword [ebp - 0x60]
call fcn.0040234b
jmp 0x402be3
xor eax, eax
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x50], 2
mov dword [esi + 0x1a0], eax
je 0x402bff
and dword [ebp - 0x50], 0xfffffffd
lea ecx, [ebp - 0x58]
call fcn.00401b9b
mov ecx, dword [esi + 0x19c]
push ebx
push 5
push 0x20f0
push ebx
push dword [esi + 0x1a0]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 8
je 0x402c8f
push 0x753708
lea ecx, [ebp - 0x6c]
call fcn.00402474
push 0x7b2acc
mov byte [ebp - 4], 9
or dword [ebp - 0x50], 4
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x58]
call fcn.00402474
lea eax, [ebp - 0x6c]
push eax
push ebx
push 0x823328
push 0x823330
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 4], 0xa
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x50], 8
push edi
push dword [ebp - 0x60]
call fcn.004022ad
jmp 0x402c91
xor eax, eax
mov dword [ebp - 4], 0xb
test byte [ebp - 0x50], 8
mov dword [esi + 0x1a4], eax
je 0x402cb0
and dword [ebp - 0x50], 0xfffffff7
lea ecx, [ebp - 0x58]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x50], 4
je 0x402cc6
and dword [ebp - 0x50], 0xfffffffb
lea ecx, [ebp - 0x6c]
call fcn.00401b9b
mov ecx, dword [esi + 0x19c]
push ebx
push 5
push 0xb0
push ebx
push dword [esi + 0x1a4]
call fcn.004022fb
push 0x15c
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0xd
je 0x402d46
push 0x75d018
lea ecx, [ebp - 0x58]
call fcn.00402474
push 0x10
pop eax
mov byte [ebp - 4], 0xe
or dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.004079d6
mov eax, dword [eax + 4]
or dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x54]
call fcn.0040794d
jmp 0x402d48
xor eax, eax
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x50], 0x10
mov dword [esi + 0x1a8], eax
je 0x402d64
and dword [ebp - 0x50], 0xffffffef
lea ecx, [ebp - 0x58]
call fcn.00401b9b
mov ecx, dword [esi + 0x1a8]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x2cc]
mov ecx, dword [esi + 0x19c]
push ebx
push 5
push 0x2030
push 1
push dword [esi + 0x1a8]
call fcn.004022fb
push 0x64
call fcn.005416ba
pop ecx
mov ecx, eax
mov dword [ebp - 0x64], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x10
je 0x402db2
push 4
call fcn.00590db0
mov dword [ebp - 0x6c], eax
jmp 0x402db5
mov dword [ebp - 0x6c], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [esi + 0x19c]
push ebx
push 5
push 0x2000
push ebx
push dword [ebp - 0x6c]
call fcn.00402424
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x11
je 0x402e6d
push 0x753708
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2b00
mov byte [ebp - 4], 0x12
or dword [ebp - 0x50], 0x20
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x58]
call fcn.00402474
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 0x40
or dword [ebp - 0x64], 0xffffffff
push eax
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x68], 0x28
call fcn.004079d6
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x5c]
push eax
push ebx
lea eax, [ebp - 0x74]
push eax
push 0x823330
lea eax, [ebp - 0x58]
push eax
push edi
push dword [ebp - 0x60]
call fcn.004022ad
jmp 0x402e6f
xor eax, eax
mov dword [ebp - 4], 0x14
test byte [ebp - 0x50], 0x40
mov dword [esi + 0x1ac], eax
je 0x402e8e
and dword [ebp - 0x50], 0xffffffbf
lea ecx, [ebp - 0x58]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x50], 0x20
je 0x402ea4
and dword [ebp - 0x50], 0xffffffdf
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x870
push 1
push dword [esi + 0x1ac]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x16
je 0x402f38
push 0x753708
lea ecx, [ebp - 0x58]
call fcn.00402474
push 0x7b2b44
mov byte [ebp - 4], 0x17
or dword [ebp - 0x50], 0x80
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402474
lea eax, [ebp - 0x58]
push eax
push ebx
push 0x823328
push 0x823330
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 4], 0x18
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x50], 0x100
push edi
push dword [ebp - 0x60]
call fcn.004022ad
jmp 0x402f3a
xor eax, eax
mov dword [ebp - 4], 0x19
test word [ebp - 0x50], 0x100
mov dword [esi + 0x1b0], eax
je 0x402f5e
and dword [ebp - 0x50], 0xfffffeff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x50], 0x80
je 0x402f77
and dword [ebp - 0x50], 0xffffff7f
lea ecx, [ebp - 0x58]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x870
push 4
push dword [esi + 0x1b0]
call fcn.004022fb
push 0x15c
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x1b
je 0x402fe2
push 0x753720
lea ecx, [ebp - 0x5c]
call fcn.00402474
lea eax, [ebp - 0x5c]
push eax
push ebx
push 0x823328
push 0x823330
push 0x8232fc
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x50], 0x200
push edi
push dword [ebp - 0x60]
call fcn.0040234b
jmp 0x402fe4
xor eax, eax
or dword [ebp - 4], 0xffffffff
test word [ebp - 0x50], 0x200
mov dword [esi + 0x1b4], eax
je 0x403005
and dword [ebp - 0x50], 0xfffffdff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x800
push ebx
push dword [esi + 0x1b4]
call fcn.004022fb
push 0x194
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x1e
je 0x4030e4
push 0x750260
lea ecx, [ebp - 0x70]
call fcn.00402474
mov byte [ebp - 4], 0x1f
or dword [ebp - 0x50], 0x400
push 0x7aff50
lea ecx, [ebp - 0x58]
call fcn.00402474
push 0x7b2b70
mov dword [ebp - 4], 0x20
or dword [ebp - 0x50], 0x800
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402474
lea eax, [ebp - 0x68]
mov dword [ebp - 4], 0x21
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 0x1000
or dword [ebp - 0x64], 0xffffffff
push eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x68], 0x28
call fcn.004079d6
mov eax, dword [eax]
or dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x70]
push eax
push 0x200002
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x2710
push dword [ebp - 0x60]
push dword [ebp - 0x54]
call fcn.00402630
jmp 0x4030e6
xor eax, eax
mov dword [ebp - 4], 0x23
test word [ebp - 0x50], 0x1000
mov dword [esi + 0x1b8], eax
je 0x40310a
and dword [ebp - 0x50], 0xffffefff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov dword [ebp - 4], 0x22
test word [ebp - 0x50], 0x800
je 0x403128
and dword [ebp - 0x50], 0xfffff7ff
lea ecx, [ebp - 0x58]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test word [ebp - 0x50], 0x400
je 0x403143
and dword [ebp - 0x50], 0xfffffbff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 0xa
push 0x820
push ebx
push dword [esi + 0x1b8]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x25
je 0x4031cb
push 0x7536cc
lea ecx, [ebp - 0x5c]
call fcn.00402474
mov byte [ebp - 4], 0x26
or dword [ebp - 0x50], 0x2000
push 0x7aff50
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x5c]
push eax
push ebx
push 0x823328
push 0x823330
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], 0x27
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x50], 0x4000
push 0xffffffffffffffff
push dword [ebp - 0x60]
call fcn.00407894
mov dword [ebp - 0x58], eax
jmp 0x4031ce
mov dword [ebp - 0x58], ebx
mov dword [ebp - 4], 0x28
test word [ebp - 0x50], 0x4000
je 0x4031ec
and dword [ebp - 0x50], 0xffffbfff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test word [ebp - 0x50], 0x2000
je 0x403207
and dword [ebp - 0x50], 0xffffdfff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
push 0x68
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x2a
je 0x40322e
push 4
push dword [ebp - 0x58]
mov ecx, eax
call fcn.00591190
mov dword [ebp - 0x58], eax
jmp 0x403231
mov dword [ebp - 0x58], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [esi + 0x19c]
push ebx
push 5
push 0x20f0
push ebx
push dword [ebp - 0x58]
call fcn.00402424
push 0x15c
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x2b
je 0x4032bc
push 0x753720
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x70]
push eax
push ebx
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 0x8000
push eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x80], 0x47
mov dword [ebp - 0x7c], 0x18
call fcn.004079d6
mov ecx, dword [ebp - 0x54]
push eax
push 0x823330
push 0x8232fc
push edi
push dword [ebp - 0x60]
call fcn.0040234b
jmp 0x4032be
xor eax, eax
or dword [ebp - 4], 0xffffffff
test word [ebp - 0x50], 0x8000
mov dword [esi + 0x1bc], eax
je 0x4032df
and dword [ebp - 0x50], 0xffff7fff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov ecx, dword [ebp - 0x58]
push ebx
push 5
push 0x2000
push ebx
push dword [esi + 0x1bc]
call fcn.004022fb
push 0xb4
call fcn.005416ba
pop ecx
mov ecx, eax
mov dword [ebp - 0x64], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x2e
je 0x403322
push ebx
push 3
push 2
push 2
call fcn.00590920
mov dword [ebp - 0x6c], eax
jmp 0x403325
mov dword [ebp - 0x6c], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x6c]
push ebx
push 1
call fcn.00590d80
mov ecx, dword [ebp - 0x58]
push ebx
push 5
push 0x800
push 1
push dword [ebp - 0x6c]
call fcn.00402424
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x2f
je 0x4033c5
push 0x753708
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2b98
mov byte [ebp - 4], 0x30
or dword [ebp - 0x50], 0x10000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x5c]
push eax
push ebx
push 0x823328
push 0x823330
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], 0x31
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x50], 0x20000
push edi
push dword [ebp - 0x60]
call fcn.004022ad
jmp 0x4033c7
xor eax, eax
mov dword [ebp - 4], 0x32
test dword [ebp - 0x50], 0x20000
mov dword [esi + 0x1c0], eax
je 0x4033ec
and dword [ebp - 0x50], 0xfffdffff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x10000
je 0x403408
and dword [ebp - 0x50], 0xfffeffff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x2830
push ebx
push dword [esi + 0x1c0]
call fcn.004022fb
push 0x194
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x34
je 0x4034e4
push 0x750260
lea ecx, [ebp - 0x58]
call fcn.00402474
mov byte [ebp - 4], 0x35
or dword [ebp - 0x50], 0x40000
push 0x7aff50
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2bac
mov dword [ebp - 4], 0x36
or dword [ebp - 0x50], 0x80000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x37
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 0x100000
or dword [ebp - 0x7c], 0xffffffff
push eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x80], 0x64
call fcn.004079d6
mov eax, dword [eax]
or dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x58]
push eax
push 0x200002
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x70]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x60]
push dword [ebp - 0x54]
call fcn.00402630
jmp 0x4034e6
xor eax, eax
mov dword [ebp - 4], 0x39
test dword [ebp - 0x50], 0x100000
mov dword [esi + 0x1c4], eax
je 0x40350b
and dword [ebp - 0x50], 0xffefffff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov dword [ebp - 4], 0x38
test dword [ebp - 0x50], 0x80000
je 0x40352a
and dword [ebp - 0x50], 0xfff7ffff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x40000
je 0x403546
and dword [ebp - 0x50], 0xfffbffff
lea ecx, [ebp - 0x58]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x2830
push ebx
push dword [esi + 0x1c4]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x3b
je 0x403603
push 0x753708
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2bc0
mov byte [ebp - 4], 0x3c
or dword [ebp - 0x50], 0x200000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 0x400000
or dword [ebp - 0x7c], 0xffffffff
push eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x80], 0x41
call fcn.004079d6
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x5c]
push eax
push ebx
lea eax, [ebp - 0x68]
push eax
push 0x823330
lea eax, [ebp - 0x70]
push eax
push edi
push dword [ebp - 0x60]
call fcn.004022ad
jmp 0x403605
xor eax, eax
mov dword [ebp - 4], 0x3e
test dword [ebp - 0x50], 0x400000
mov dword [esi + 0x1c8], eax
je 0x40362a
and dword [ebp - 0x50], 0xffbfffff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x200000
je 0x403646
and dword [ebp - 0x50], 0xffdfffff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x830
push ebx
push dword [esi + 0x1c8]
call fcn.004022fb
push 0x64
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x40
je 0x403681
push 4
mov ecx, eax
call fcn.00590db0
mov dword [ebp - 0x58], eax
jmp 0x403684
mov dword [ebp - 0x58], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x2800
push ebx
push dword [ebp - 0x58]
call fcn.00402424
push 0x1b4
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x41
je 0x40374c
push 0x7537dc
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2be0
mov byte [ebp - 4], 0x42
or dword [ebp - 0x50], 0x800000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x43
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x50], 0x1000000
or dword [ebp - 0x80], 0xffffffff
push eax
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x7c], 0xd
call fcn.004079d6
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x5c]
push eax
push 0x84e31c
push ebx
lea eax, [ebp - 0x68]
push eax
push 0x823330
lea eax, [ebp - 0x70]
push eax
push 0x2713
push dword [ebp - 0x60]
call fcn.0040767a
jmp 0x40374e
xor eax, eax
mov dword [ebp - 4], 0x44
test dword [ebp - 0x50], 0x1000000
mov dword [esi + 0x1cc], eax
je 0x403773
and dword [ebp - 0x50], 0xfeffffff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x800000
je 0x40378f
and dword [ebp - 0x50], 0xff7fffff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov ecx, dword [esi + 0x1cc]
mov eax, dword [ecx]
push 0xff
call dword [eax + 0x310]
mov ecx, dword [ebp - 0x58]
push ebx
push 5
push 0x830
push 1
push dword [esi + 0x1cc]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x54], eax
cmp eax, ebx
mov dword [ebp - 4], 0x46
je 0x403843
push 0x753680
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2bfc
mov byte [ebp - 4], 0x47
or dword [ebp - 0x50], 0x2000000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x5c]
push eax
push 0x84e31c
push 0x200001
push 0x823328
push 0x823330
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp - 0x54]
or dword [ebp - 0x50], 0x4000000
push 0x2714
push dword [ebp - 0x60]
call fcn.0040211f
jmp 0x403845
xor eax, eax
mov dword [ebp - 4], 0x49
test dword [ebp - 0x50], 0x4000000
mov dword [esi + 0x1d0], eax
je 0x40386a
and dword [ebp - 0x50], 0xfbffffff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x2000000
je 0x403886
and dword [ebp - 0x50], 0xfdffffff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
mov ecx, dword [ebp - 0x58]
push ebx
push 5
push 0x830
push ebx
push dword [esi + 0x1d0]
call fcn.004022fb
push 0x64
call fcn.005416ba
pop ecx
mov ecx, eax
mov dword [ebp - 0x64], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x4b
je 0x4038c1
push 4
call fcn.00590db0
mov dword [ebp - 0x58], eax
jmp 0x4038c4
mov dword [ebp - 0x58], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [esi + 0x19c]
push ebx
push 0xa
push 0x20f0
push ebx
push dword [ebp - 0x58]
call fcn.00402424
push 0x64
call fcn.005416ba
pop ecx
mov ecx, eax
mov dword [ebp - 0x64], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x4c
je 0x403903
push 4
call fcn.00590db0
mov dword [ebp - 0x6c], eax
jmp 0x403906
mov dword [ebp - 0x6c], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
push ebx
push ebx
push 0x20f0
push 1
push dword [ebp - 0x6c]
call fcn.00402424
push 0x194
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x4d
je 0x4039bd
push 0x750260
lea ecx, [ebp - 0x54]
call fcn.00402474
mov byte [ebp - 4], 0x4e
or dword [ebp - 0x50], 0x8000000
push 0x7aff50
lea ecx, [ebp - 0x5c]
call fcn.00402474
push 0x7b2c04
mov dword [ebp - 4], 0x4f
or dword [ebp - 0x50], 0x10000000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
lea eax, [ebp - 0x54]
push eax
push 0x200002
push 0x823328
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 4], 0x50
or dword [ebp - 0x50], 0x20000000
push 0xffffffffffffffff
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call fcn.00402630
jmp 0x4039bf
xor eax, eax
mov dword [ebp - 4], 0x52
test dword [ebp - 0x50], 0x20000000
mov dword [esi + 0x1d4], eax
je 0x4039e4
and dword [ebp - 0x50], 0xdfffffff
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov dword [ebp - 4], 0x51
test dword [ebp - 0x50], 0x10000000
je 0x403a03
and dword [ebp - 0x50], 0xefffffff
lea ecx, [ebp - 0x5c]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x8000000
je 0x403a1f
and dword [ebp - 0x50], 0xf7ffffff
lea ecx, [ebp - 0x54]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 5
push 0x8f0
push 1
push dword [esi + 0x1d4]
call fcn.004022fb
push 0x64
call fcn.005416ba
pop ecx
mov ecx, eax
mov dword [ebp - 0x64], ecx
cmp ecx, ebx
mov dword [ebp - 4], 0x54
je 0x403a5b
push 4
call fcn.00590db0
mov dword [ebp - 0x6c], eax
jmp 0x403a5e
mov dword [ebp - 0x6c], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x58]
push ebx
push ebx
push 0x20f0
push 1
push dword [ebp - 0x6c]
call fcn.00402424
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x55
je 0x403aff
push 0x753680
lea ecx, [ebp - 0x70]
call fcn.00402474
push 0x7b2c38
mov byte [ebp - 4], 0x56
or dword [ebp - 0x50], 0x40000000
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x54]
call fcn.00402474
lea eax, [ebp - 0x70]
push eax
push 0x84e31c
push 0x200001
push 0x823328
push 0x823330
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 4], 0x57
mov ecx, dword [ebp - 0x64]
or dword [ebp - 0x50], 0x80000000
push 0x2716
push dword [ebp - 0x60]
call fcn.0040211f
jmp 0x403b01
xor eax, eax
mov dword [ebp - 4], 0x58
test dword [ebp - 0x50], 0x80000000
mov dword [esi + 0x1d8], eax
je 0x403b26
and dword [ebp - 0x50], 0x7fffffff
lea ecx, [ebp - 0x54]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test dword [ebp - 0x50], 0x40000000
je 0x403b3b
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov ecx, dword [esi + 0x1d8]
mov eax, dword [ecx]
call dword [eax + 0x2cc]
mov ecx, dword [ebp - 0x6c]
push ebx
push 2
push 0x830
push 1
push dword [esi + 0x1d8]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x5a
je 0x403bea
push 0x753680
lea ecx, [ebp - 0x70]
call fcn.00402474
push 0x7b2c60
mov byte [ebp - 4], 0x5b
push ecx
mov dword [ebp - 0x78], 1
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x54]
call fcn.00402474
lea eax, [ebp - 0x70]
push eax
push 0x84e31c
push 0x200000
push 0x823328
push 0x823330
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x64]
push 0x2717
push dword [ebp - 0x60]
mov dword [ebp - 0x78], 3
call fcn.0040211f
jmp 0x403bec
xor eax, eax
mov dword [ebp - 4], 0x5d
test byte [ebp - 0x78], 2
mov dword [esi + 0x1dc], eax
je 0x403c0b
and dword [ebp - 0x78], 0xfffffffd
lea ecx, [ebp - 0x54]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x78], 1
je 0x403c21
and dword [ebp - 0x78], 0xfffffffe
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 2
push 0x830
push ebx
push dword [esi + 0x1dc]
call fcn.004022fb
push 0x150
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x5f
je 0x403cbb
push 0x753680
lea ecx, [ebp - 0x70]
call fcn.00402474
push 0x7b2c7c
mov byte [ebp - 4], 0x60
or dword [ebp - 0x78], 4
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x54]
call fcn.00402474
lea eax, [ebp - 0x70]
push eax
push 0x84e31c
push 0x200000
push 0x823328
push 0x823330
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 4], 0x61
mov ecx, dword [ebp - 0x64]
or dword [ebp - 0x78], 8
push 0x13ed
push dword [ebp - 0x60]
call fcn.0040211f
jmp 0x403cbd
xor eax, eax
mov dword [ebp - 4], 0x62
test byte [ebp - 0x78], 8
mov dword [esi + 0x1e0], eax
je 0x403cdc
and dword [ebp - 0x78], 0xfffffff7
lea ecx, [ebp - 0x54]
call fcn.00401b9b
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x78], 4
je 0x403cee
lea ecx, [ebp - 0x70]
call fcn.00401b9b
mov ecx, dword [ebp - 0x6c]
push ebx
push 2
push 0x830
push ebx
push dword [esi + 0x1e0]
call fcn.004022fb
push esi
push ebx
push 0x406e69
push dword [0x84e268]
mov ecx, esi
push 0xffffffffffffffff
push 0x2721
call fcn.005fe490
mov ecx, dword [esi + 0x1a0]
push esi
push ebx
push 0x404dcf
push dword [0x84e16c]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1a0]
push esi
push ebx
push 0x404e6e
push dword [0x84e184]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1a0]
push esi
push ebx
push 0x404eb0
push dword [0x84e188]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1b4]
push esi
push ebx
push 0x404ec8
push dword [0x84e16c]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1b4]
push esi
push ebx
push 0x404e6e
push dword [0x84e184]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1b4]
push esi
push ebx
push 0x404eb0
push dword [0x84e188]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1bc]
push esi
push ebx
push 0x404efb
push dword [0x84e16c]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1bc]
push esi
push ebx
push 0x404e6e
push dword [0x84e184]
push 0xffffffffffffffff
push edi
call fcn.005fe490
mov ecx, dword [esi + 0x1bc]
push esi
push ebx
push 0x404eb0
push dword [0x84e188]
push 0xffffffffffffffff
push edi
call fcn.005fe490
push esi
push ebx
mov edi, 0x4044a8
push edi
push dword [0x84dad4]
lea ecx, [esi + 0x228]
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.005fe490
push esi
push ebx
push edi
push dword [0x84dadc]
lea ecx, [esi + 0x228]
push 0xffffffffffffffff
push 0xffffffffffffffff
call fcn.005fe490
push ebx
push ebx
push ebx
push 1
push 0x80
call fcn.005fec10
push eax
call dword [0x744660]
mov edi, 0x7517f0
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], edi
lea ecx, [ebp - 0x74]
mov dword [ebp - 4], 0x64
call fcn.005fd980
mov ecx, dword [ebp - 0x70]
push 0x10
pop eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x74]
call fcn.005fd980
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x54]
mov dword [eax + 0x14], ecx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x65
call fcn.005fd980
mov ecx, dword [ebp - 0x64]
push 0x20
pop eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x68]
call fcn.005fd980
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x54]
mov dword [eax + 0x14], ecx
lea ecx, [ebp - 0x90]
call fcn.005feb60
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x66
call fcn.005ac400
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x90]
call fcn.005ac400
mov eax, dword [esi]
lea ecx, [ebp - 0x90]
push ecx
mov ecx, esi
call dword [eax + 0x2c8]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x65
call fcn.00407650
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x64
call fcn.0057d0a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74]
call fcn.0057d0a0
push 0xc
call fcn.005416ba
pop ecx
mov dword [ebp - 0x64], eax
cmp eax, ebx
mov dword [ebp - 4], 0x67
je 0x403f53
push 0xf
push 1
push 0x10
push 0x10
mov ecx, eax
call fcn.004075fa
jmp 0x403f55
xor eax, eax
or dword [ebp - 4], 0xffffffff
lea edi, [esi + 0x224]
push 0x83b8b8
lea ecx, [ebp - 0x80]
mov dword [edi], eax
call fcn.0059a1f0
push 0x8232fc
mov dword [ebp - 4], 0x68
mov ecx, dword [edi]
push eax
call fcn.005acbc0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80]
call fcn.0057d0a0
mov ecx, dword [0x86ff90]
add ecx, 0x70
call fcn.0040b929
push 0x7b2c8c
push ecx
call fcn.00401000
pop ecx
mov ecx, eax
call fcn.00412eae
push eax
lea ecx, [ebp - 0x30]
call fcn.0040182d
push 0x7b2ca4
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0x69
call fcn.0040182d
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x6a
mov edi, dword [0x86ff90]
lea eax, [ebp - 0x30]
add edi, 0x70
push eax
call fcn.0044ffe5
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x69
call fcn.00401f4f
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x30]
call fcn.004020e6
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x6b
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x2d4]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x69
call fcn.00401b9b
push esi
call fcn.00405b66
mov ecx, dword [0x86ff90]
add ecx, 0xb8
call fcn.005a14d0
test al, al
mov edi, 0x7b2cc0
je 0x404086
mov eax, dword [0x86ff90]
push 0xffffffffffffffff
add eax, 0xb8
push eax
lea ecx, [ebp - 0x80]
call fcn.004075c6
mov byte [ebp - 4], 0x6c
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x80]
push edx
call dword [eax + 0x2c8]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x69
call fcn.0057d0a0
jmp 0x40411b
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], 0x7526a0
push edi
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x6d
call fcn.0040182d
lea eax, [ebp - 0x68]
push eax
push 0x91
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x6e
call fcn.0040431e
push ebx
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 0x81], al
mov byte [ebp - 4], 0x6d
call fcn.00401f4f
cmp byte [ebp - 0x81], bl
je 0x404108
push 0xffffffffffffffff
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x80]
call fcn.004075c6
mov byte [ebp - 4], 0x6f
mov ecx, dword [esi + 0x1a0]
mov eax, dword [ecx]
lea edx, [ebp - 0x80]
push edx
call dword [eax + 0x2c8]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x6d
call fcn.0057d0a0
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], 0x750280
call fcn.005fd8d0
mov ecx, dword [0x86ff90]
add ecx, 0xdc
call fcn.005a14d0
test al, al
je 0x40416c
mov eax, dword [0x86ff90]
push 0xffffffffffffffff
add eax, 0xdc
push eax
lea ecx, [ebp - 0x80]
call fcn.004075c6
mov byte [ebp - 4], 0x70
mov ecx, dword [esi + 0x1bc]
mov eax, dword [ecx]
lea edx, [ebp - 0x80]
push edx
call dword [eax + 0x2c8]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x69
call fcn.0057d0a0
jmp 0x404201
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], 0x7526a0
push edi
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x71
call fcn.0040182d
lea eax, [ebp - 0x68]
push eax
push 0x92
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x72
call fcn.0040431e
push ebx
push 1
lea ecx, [ebp - 0xb0]
mov byte [ebp - 0x81], al
mov byte [ebp - 4], 0x71
call fcn.00401f4f
cmp byte [ebp - 0x81], bl
je 0x4041ee
push 0xffffffffffffffff
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x80]
call fcn.004075c6
mov byte [ebp - 4], 0x73
mov ecx, dword [esi + 0x1bc]
mov eax, dword [ecx]
lea edx, [ebp - 0x80]
push edx
call dword [eax + 0x2c8]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x71
call fcn.0057d0a0
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], 0x750280
call fcn.005fd8d0
mov eax, dword [0x86ff90]
add eax, 0x70
push eax
mov ecx, esi
call fcn.0040643f
mov eax, dword [0x86ff90]
cmp dword [eax + 0x88], 8
jb 0x404224
mov eax, dword [eax + 0x74]
jmp 0x404227
add eax, 0x74
push eax
lea ecx, [ebp - 0x54]
call fcn.00402474
mov byte [ebp - 4], 0x74
mov ecx, dword [esi + 0x1c4]
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
call dword [eax + 0x3c]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x69
call fcn.00401b9b
mov eax, dword [0x86ff90]
add eax, 0x8c
cmp dword [eax + 0x18], 8
jb 0x404264
mov eax, dword [eax + 4]
jmp 0x404267
add eax, 4
push eax
lea ecx, [ebp - 0x70]
call fcn.00402474
mov byte [ebp - 4], 0x75
mov eax, dword [esi + 0x1c4]
lea ecx, [eax + 0x150]
lea eax, [ebp - 0x70]
push eax
call fcn.005fbb30
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x69
call fcn.00401b9b
lea eax, [ebp - 0x4c]
push eax
push 3
pop ecx
call fcn.0040b83f
pop ecx
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x76
call fcn.004020e6
mov byte [ebp - 4], 0x77
mov eax, dword [esi + 0x1d4]
lea ecx, [eax + 0x150]
lea eax, [ebp - 0x5c]
push eax
call fcn.005fbb30
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x76
call fcn.00401b9b
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x4c]
call fcn.004020e6
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x78
mov ecx, dword [esi + 0x1d4]
push eax
call fcn.0057df50
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x76
call fcn.00401b9b
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.00401f4f
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00401f4f
call fcn.0054dd70
ret