Function at 0x409340
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x470b60
mov eax, dword fs:[0]
push eax
sub esp, 0x77c
mov eax, dword [0x48f088]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x44]
call fcn.00426c10
push 0x390
lea eax, [ebp - 0x6b8]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.0044b7d0
add esp, 0xc
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6d0]
push 0
push 0x484b18
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
call fcn.0040c370
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x6d0]
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00406d20
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x6bc]
cmp edx, 0x10
jb 0x409431
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409427
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a17f
push edx
push ecx
call fcn.0044945e
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x409469
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40945f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a184
push edx
push ecx
call fcn.0044945e
add esp, 8
push 0xac
lea eax, [ebp - 0x248]
push 0
push eax
call fcn.0044b7d0
mov eax, 6
mov dword [ebp - 0x6c0], 0xc8c8dedd
add esp, 0xc
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6bc], 0xc0dbd7
xor ecx, ecx
mov al, cl
sub al, 0x46
xor byte [ebp + ecx - 0x6c0], al
inc ecx
mov eax, dword [ebp - 0x6c4]
cmp ecx, eax
jb 0x4094a0
mov byte [ebp + eax - 0x6c0], 0
lea ecx, [ebp - 0x6c0]
mov word [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4094e0
sub ecx, edx
lea eax, [ebp - 0x6c0]
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c370
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30]
push eax
push ecx
lea ecx, [ebp - 0x748]
call fcn.00402600
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x6ec]
push 0
push 0x484b18
mov dword [ebp - 0x6dc], 0
mov dword [ebp - 0x6d8], 0xf
mov byte [ebp - 0x6ec], 0
call fcn.0040c370
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6d0]
push 0
push 0x484b18
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
call fcn.0040c370
push 0
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6d0]
push eax
lea ecx, [ebp - 0x248]
call fcn.00403ae0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x248]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x690]
mov dword [ebp - method.0.virtual_0], 0x484ac8
cmp dword [ebp - 0x68c], eax
je 0x4095d1
lea ecx, [ebp - 0x248]
mov dword [eax], ecx
add dword [ebp - 0x690], 4
jmp 0x4095e4
lea ecx, [ebp - 0x6d4]
push ecx
push eax
lea ecx, [ebp - 0x694]
call fcn.0040dcf0
mov dword [ebp - method.0.virtual_0], 0x484ac8
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x6bc]
cmp edx, 0x10
jb 0x40962c
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409622
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a189
push edx
push ecx
call fcn.0044945e
add esp, 8
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x6d8]
cmp edx, 0x10
jb 0x40966a
mov ecx, dword [ebp - 0x6ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409660
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a18e
push edx
push ecx
call fcn.0044945e
add esp, 8
lea ecx, [ebp - 0x728]
call fcn.004024f0
lea ecx, [ebp - 0x748]
call fcn.00402560
push fcn.00402b40
push 1
push 0x1c
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xf
push eax
call fcn.004490e3
push 0xac
lea eax, [ebp - 0x19c]
push 0
push eax
call fcn.0044b7d0
movaps xmm0, xmmword [0x485730]
add esp, 0xc
mov dword [ebp - 0x6cc], 0xf
xor ecx, ecx
movups xmmword [ebp - 0x6c8], xmm0
nop word [eax + eax]
mov al, cl
sub al, 0x46
xor byte [ebp + ecx - 0x6c8], al
inc ecx
mov eax, dword [ebp - 0x6cc]
cmp ecx, eax
jb 0x4096d0
mov byte [ebp + eax - 0x6c8], 0
lea ecx, [ebp - 0x6c8]
mov word [ebp - 0x708], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x6f0], 0xf
mov byte [ebp - 0x704], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409720
sub ecx, edx
lea eax, [ebp - 0x6c8]
push ecx
push eax
lea ecx, [ebp - 0x704]
call fcn.0040c370
lea eax, [ebp - 0x6ec]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x708]
push eax
push ecx
lea ecx, [ebp - 0x788]
call fcn.00402600
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x6d0]
push 0
push 0x484b18
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
call fcn.0040c370
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x6ec]
push 0
push 0x484b18
mov dword [ebp - 0x6dc], 0
mov dword [ebp - 0x6d8], 0xf
mov byte [ebp - 0x6ec], 0
call fcn.0040c370
push 0
lea eax, [ebp - 0x788]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea ecx, [ebp - 0x19c]
call fcn.00403ae0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x690]
mov dword [ebp - method.0.virtual_0], 0x484ac8
cmp dword [ebp - 0x68c], eax
je 0x40981a
lea ecx, [ebp - 0x19c]
mov dword [eax], ecx
add dword [ebp - 0x690], 4
jmp 0x40982d
lea ecx, [ebp - 0x6d4]
push ecx
push eax
lea ecx, [ebp - 0x694]
call fcn.0040dcf0
mov dword [ebp - method.0.virtual_0], 0x484ac8
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x6d8]
cmp edx, 0x10
jb 0x409875
mov ecx, dword [ebp - 0x6ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40986b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a193
push edx
push ecx
call fcn.0044945e
add esp, 8
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x6bc]
cmp edx, 0x10
jb 0x4098b3
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4098a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a198
push edx
push ecx
call fcn.0044945e
add esp, 8
lea ecx, [ebp - 0x768]
call fcn.004024f0
lea ecx, [ebp - 0x788]
call fcn.00402560
push fcn.00402b40
push 1
push 0x1c
lea eax, [ebp - 0x708]
mov byte [ebp - 4], 0x19
push eax
call fcn.004490e3
push 0xac
lea eax, [ebp - 0xf0]
push 0
push eax
call fcn.0044b7d0
add esp, 0xc
mov dword [ebp - 0x6c4], 0xc4c8dedd
xor ecx, ecx
mov dword [ebp - 0x6c0], 0xa5a9c9df
mov eax, 8
mov byte [ebp - 0x6bc], 0xc2
mov dword [ebp - 0x6c8], eax
mov word [ebp - 0x6bb], cx
mov byte [ebp - 0x6b9], cl
nop dword [eax]
mov al, cl
sub al, 0x46
xor byte [ebp + ecx - 0x6c4], al
inc ecx
mov eax, dword [ebp - 0x6c8]
cmp ecx, eax
jb 0x409930
mov byte [ebp + eax - 0x6c4], 0
lea ecx, [ebp - 0x6c4]
mov word [ebp - 0x30], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409970
sub ecx, edx
lea eax, [ebp - 0x6c4]
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c370
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x30]
push eax
push ecx
lea ecx, [ebp - 0x748]
call fcn.00402600
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x6d0]
push 0
push 0x484b18
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
call fcn.0040c370
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x6ec]
push 0
push 0x484b18
mov dword [ebp - 0x6dc], 0
mov dword [ebp - 0x6d8], 0xf
mov byte [ebp - 0x6ec], 0
call fcn.0040c370
push 0
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea ecx, [ebp - 0xf0]
call fcn.00403ae0
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0xf0], 0x484ac8
cmp dword [ebp - 0x68c], eax
je 0x409a61
lea ecx, [ebp - 0xf0]
mov dword [eax], ecx
add dword [ebp - 0x690], 4
jmp 0x409a74
lea ecx, [ebp - 0x6d4]
push ecx
push eax
lea ecx, [ebp - 0x694]
call fcn.0040dcf0
mov dword [ebp - 0xf0], method.0.virtual_0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x6d8]
cmp edx, 0x10
jb 0x409abc
mov ecx, dword [ebp - 0x6ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409ab2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a19d
push edx
push ecx
call fcn.0044945e
add esp, 8
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x6bc]
cmp edx, 0x10
jb 0x409afa
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409af0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1a2
push edx
push ecx
call fcn.0044945e
add esp, 8
lea ecx, [ebp - 0x728]
call fcn.004024f0
lea ecx, [ebp - 0x748]
call fcn.00402560
push fcn.00402b40
push 1
push 0x1c
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x23
push eax
call fcn.004490e3
push 0xe0
lea eax, [ebp - 0x328]
push 0
push eax
call fcn.0044b7d0
add esp, 0xc
mov dword [ebp - 0x6c4], 0xd8d0d2dc
xor ecx, ecx
mov dword [ebp - 0x6c0], 0xa4added0
mov eax, 8
mov byte [ebp - 0x6bc], 0xc2
mov dword [ebp - 0x6c8], eax
mov word [ebp - 0x6bb], cx
mov byte [ebp - 0x6b9], cl
mov al, cl
sub al, 0x46
xor byte [ebp + ecx - 0x6c4], al
inc ecx
mov eax, dword [ebp - 0x6c8]
cmp ecx, eax
jb 0x409b71
mov byte [ebp + eax - 0x6c4], 0
lea ecx, [ebp - 0x6c4]
mov word [ebp - 0x708], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x6f0], 0xf
mov byte [ebp - 0x704], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409bc0
sub ecx, edx
lea eax, [ebp - 0x6c4]
push ecx
push eax
lea ecx, [ebp - 0x704]
call fcn.0040c370
lea eax, [ebp - 0x6ec]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x708]
push eax
push ecx
lea ecx, [ebp - 0x788]
call fcn.00402600
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x6d0]
push 0
push 0x484b18
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
call fcn.0040c370
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6ec]
push 0
push 0x484b18
mov dword [ebp - 0x6dc], 0
mov dword [ebp - 0x6d8], 0xf
mov byte [ebp - 0x6ec], 0
call fcn.0040c370
push 0
lea eax, [ebp - 0x788]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea ecx, [ebp - 0x328]
call fcn.00403ae0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x27c]
mov dword [ebp - method..G.1.virtual_0], vtable..G.1.0
call fcn.0040ada0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x264]
call fcn.0040ada0
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x328]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x690]
cmp dword [ebp - 0x68c], eax
je 0x409cf2
lea ecx, [ebp - 0x328]
mov dword [eax], ecx
add dword [ebp - 0x690], 4
jmp 0x409d05
lea ecx, [ebp - 0x6d4]
push ecx
push eax
lea ecx, [ebp - 0x694]
call fcn.0040dcf0
mov dword [ebp - method..G.1.virtual_0], vtable..G.1.0
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x6d8]
cmp edx, 0x10
jb 0x409d4d
mov ecx, dword [ebp - 0x6ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409d43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1a7
push edx
push ecx
call fcn.0044945e
add esp, 8
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x6bc]
cmp edx, 0x10
jb 0x409d8b
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409d81
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1ac
push edx
push ecx
call fcn.0044945e
add esp, 8
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x409dc3
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409db9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1b1
push edx
push ecx
call fcn.0044945e
add esp, 8
lea ecx, [ebp - 0x768]
call fcn.004024f0
lea ecx, [ebp - 0x788]
call fcn.00402560
push fcn.00402b40
push 1
push 0x1c
lea eax, [ebp - 0x708]
mov byte [ebp - 4], 0x31
push eax
call fcn.004490e3
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x6b8]
mov eax, dword [ebp - 0x6b8]
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x38]
add esi, 0x18
call dword [eax + 0x34]
push edi
push esi
lea eax, [ebp - 0x6d4]
push eax
lea ecx, [ebp - 0x6b8]
call fcn.0040e8e0
mov dword [ebp - 4], 0x31
lea ecx, [ebp - 0x248]
mov eax, dword [ebp - 0x248]
mov eax, dword [eax + 4]
call eax
test al, al
je 0x409fb5
lea ecx, [ebp - 0x2c]
call fcn.00408670
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0x6ec]
push eax
call fcn.00416590
add esp, 8
mov byte [ebp - 4], 0x35
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x409e70
mov eax, dword [eax]
push ecx
push eax
push 0x490910
call fcn.00410ff0
mov edx, dword [ebp - 0x6d8]
add esp, 0xc
cmp edx, 0x10
jb 0x409eb9
mov ecx, dword [ebp - 0x6ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x409eaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1b6
push edx
push ecx
call fcn.0044945e
add esp, 8
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x409ef3
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x409ee9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1bb
push edx
push ecx
call fcn.0044945e
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea ecx, [ebp - 0x328]
call fcn.0040a280
lea ecx, [ebp - 0x64]
mov dword [ebp - 0xf0], vtable.0.0
call fcn.004024f0
lea ecx, [ebp - 0x84]
call fcn.00402560
lea ecx, [ebp - 0xf0]
call fcn.00402fe0
lea ecx, [ebp - 0x110]
mov dword [ebp - method.0.virtual_0], vtable.0.0
call fcn.004024f0
lea ecx, [ebp - 0x130]
call fcn.00402560
lea ecx, [ebp - 0x19c]
call fcn.00402fe0
lea ecx, [ebp - 0x1bc]
mov dword [ebp - method.0.virtual_0], vtable.0.0
call fcn.004024f0
lea ecx, [ebp - 0x1dc]
call fcn.00402560
lea ecx, [ebp - 0x248]
call fcn.00402fe0
lea ecx, [ebp - 0x6b8]
call fcn.00407530
push dword [ebp - 0x40]
call fcn.00448dfd
add esp, 4
lea ecx, [ebp - 0x3c]
call fcn.0040bed0
xor eax, eax
jmp 0x40a152
mov eax, dword [ebp - 0x19c]
lea ecx, [ebp - 0x19c]
mov eax, dword [eax + 4]
call eax
test al, al
je 0x40a02b
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00416630
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.00409070
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x409f07
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40a01c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40a1c0
push edx
push ecx
call fcn.0044945e
add esp, 8
jmp 0x409f07
mov eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0xf0]
mov eax, dword [eax + 4]
call eax
test al, al
je 0x409f07
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x6ec]
push eax
call fcn.00416630
add esp, 8
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2c]
call fcn.00408c30
lea ecx, [ebp - 0x6ec]
mov byte [ebp - 4], 0x39
call fcn.0040a770
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
push eax
push 0x490910
call fcn.00410ff0
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.0040ac60
jmp 0x409f07
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00448dec
mov esp, ebp
pop ebp
ret
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
call fcn.0044e6c9
int3