Function at 0x4587c7
Capabilities:
Contain obfuscated stackstrings
Get disk size
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4df494
mov eax, dword fs:[0]
push eax
mov eax, 0xb810
call fcn.004bc610
mov eax, dword [0x531698]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, 0x5311f0
push edi
lea ecx, [ebp - 0xb80c]
call fcn.00401749
and dword [ebp - 4], 0
push edi
lea ecx, [ebp - 0xb804]
call fcn.00401749
xor eax, eax
inc eax
push edi
lea ecx, [ebp - 0xb7fc]
mov byte [ebp - 4], al
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7f4]
mov byte [ebp - 4], 2
call fcn.00401749
push 3
pop eax
push edi
lea ecx, [ebp - 0xb7ec]
mov byte [ebp - 4], al
call fcn.00401749
push 4
pop ebx
push edi
lea ecx, [ebp - 0xb7e4]
mov byte [ebp - 4], bl
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7dc]
mov byte [ebp - 4], 5
call fcn.00401749
mov byte [ebp - 4], 6
call fcn.00460c9c
test al, al
jne 0x458883
inc dword [0x533460]
push edi
lea ecx, [ebp - 0xb7d4]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7cc]
mov byte [ebp - 4], 7
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7c4]
mov byte [ebp - 4], 8
call fcn.00401749
push 9
pop eax
push edi
lea ecx, [ebp - 0xb7bc]
mov byte [ebp - 4], al
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7b4]
mov byte [ebp - 4], 0xa
call fcn.00401749
push 0xb
pop eax
push edi
lea ecx, [ebp - 0xb7ac]
mov byte [ebp - 4], al
call fcn.00401749
push 0xc
pop eax
push edi
lea ecx, [ebp - 0xb7a4]
mov byte [ebp - 4], al
call fcn.00401749
push 0xd
pop eax
push edi
lea ecx, [ebp - 0xb79c]
mov byte [ebp - 4], al
call fcn.00401749
push 0xe
pop eax
push edi
lea ecx, [ebp - 0xb794]
mov byte [ebp - 4], al
call fcn.00401749
push edi
lea ecx, [ebp - 0xb78c]
mov byte [ebp - 4], 0xf
call fcn.00401749
push edi
lea ecx, [ebp - 0xb784]
mov byte [ebp - 4], 0x10
call fcn.00401749
push 0x11
pop eax
push edi
lea ecx, [ebp - 0xb77c]
mov byte [ebp - 4], al
call fcn.00401749
push 0x12
pop eax
push edi
lea ecx, [ebp - 0xb774]
mov byte [ebp - 4], al
call fcn.00401749
mov byte [ebp - 4], 0x13
push edi
lea ecx, [ebp - 0xb76c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb764]
mov byte [ebp - 4], 0x14
call fcn.00401749
push 0x15
pop eax
push edi
lea ecx, [ebp - 0xb75c]
mov byte [ebp - 4], al
call fcn.00401749
push edi
lea ecx, [ebp - 0xb754]
mov byte [ebp - 4], 0x16
call fcn.00401749
push 0x17
pop eax
push edi
lea ecx, [ebp - 0xb74c]
mov byte [ebp - 4], al
call fcn.00401749
mov ecx, dword [0x532ad4]
push 0x18
pop eax
mov byte [ebp - 4], al
lea eax, [ecx + 1]
imul eax, ecx
push 0x11
cdq
pop ecx
idiv ecx
push 9
pop eax
cmp edx, eax
jne 0x4589df
push ebx
call fcn.004ba88b
pop ecx
mov ecx, dword [0x532ad4]
mov dword [eax], ecx
push edi
lea ecx, [ebp - 0xb744]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb73c]
mov byte [ebp - 4], 0x19
call fcn.00401749
push 0x1a
pop ebx
push edi
lea ecx, [ebp - 0xb734]
mov byte [ebp - 4], bl
call fcn.00401749
push edi
lea ecx, [ebp - 0xb72c]
mov byte [ebp - 4], 0x1b
call fcn.00401749
push edi
lea ecx, [ebp - 0xb724]
mov byte [ebp - 4], 0x1c
call fcn.00401749
push edi
lea ecx, [ebp - 0xb71c]
mov byte [ebp - 4], 0x1d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb714]
mov byte [ebp - 4], 0x1e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb70c]
mov byte [ebp - 4], 0x1f
call fcn.00401749
mov byte [ebp - 4], 0x20
call fcn.00460cba
test al, al
jne 0x458adf
xor eax, eax
push 0xafc6
push eax
mov word [ebp - 0xb368], ax
lea eax, [ebp - 0xb366]
push eax
call fcn.004bc640
add esp, 0xc
xor edi, edi
xor esi, esi
xor edx, edx
test edi, edi
je 0x458ab6
test edx, edx
je 0x458ab6
lea eax, [esi + edx]
lea ecx, [esi + edx]
mov ax, word [ebp + eax*2 - 0xb494]
inc ax
add ax, word [ebp + ecx*2 - 0xb36a]
mov word [ebp + ecx*2 - 0xb368], ax
inc edx
cmp edx, 0x96
jl 0x458a8e
add esi, 0x96
inc edi
cmp esi, 0x57e4
jl 0x458a8c
movsx eax, word [ebp - 0x3a2]
mov dword [0x532ad4], eax
mov edi, 0x5311f0
push edi
lea ecx, [ebp - 0xb704]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6fc]
mov byte [ebp - 4], 0x21
call fcn.00401749
mov ecx, dword [0x532ad4]
push 0x17
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0x22
cmp edx, 5
jne 0x458b1c
inc dword [0x533418]
push edi
lea ecx, [ebp - 0xb6f4]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6ec]
mov byte [ebp - 4], 0x23
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6e4]
mov byte [ebp - 4], 0x24
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6dc]
mov byte [ebp - 4], 0x25
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6d4]
mov byte [ebp - 4], 0x26
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6cc]
mov byte [ebp - 4], 0x27
call fcn.00401749
mov byte [ebp - 4], 0x28
call fcn.00460b66
push 0x64
pop ecx
test al, al
jne 0x458baf
mov eax, dword [0x532ad4]
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x63]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004b9bb1
push eax
call fcn.004baa14
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0xb6c4]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6bc]
mov byte [ebp - 4], 0x29
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6b4]
mov byte [ebp - 4], 0x2a
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6ac]
mov byte [ebp - 4], 0x2b
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6a4]
mov byte [ebp - 4], 0x2c
call fcn.00401749
push edi
lea ecx, [ebp - 0xb69c]
mov byte [ebp - 4], 0x2d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb694]
mov byte [ebp - 4], 0x2e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb68c]
mov byte [ebp - 4], 0x2f
call fcn.00401749
mov esi, dword [0x532ad4]
push 0xd
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
push 0xc
pop eax
mov byte [ebp - 4], 0x30
cmp edx, eax
jne 0x458c5c
push 1
test esi, esi
pop eax
cmove esi, eax
mov dword [0x532ad4], esi
push edi
lea ecx, [ebp - 0xb684]
call fcn.00401749
mov ecx, dword [0x532ad4]
push 0x18
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
mov eax, dword [0x5334ec]
mov ecx, 0xfdf9e013
push edi
mov byte [ebp - 4], 0x31
cmp edx, 0xd
cmove eax, ecx
lea ecx, [ebp - 0xb67c]
mov dword [0x5334ec], eax
call fcn.00401749
push edi
lea ecx, [ebp - 0xb674]
mov byte [ebp - 4], 0x32
call fcn.00401749
push edi
lea ecx, [ebp - 0xb66c]
mov byte [ebp - 4], 0x33
call fcn.00401749
push edi
lea ecx, [ebp - 0xb664]
mov byte [ebp - 4], 0x34
call fcn.00401749
push edi
lea ecx, [ebp - 0xb65c]
mov byte [ebp - 4], 0x35
call fcn.00401749
push edi
lea ecx, [ebp - 0xb654]
mov byte [ebp - 4], 0x36
call fcn.00401749
push edi
lea ecx, [ebp - 0xb64c]
mov byte [ebp - 4], 0x37
call fcn.00401749
push edi
lea ecx, [ebp - 0xb644]
mov byte [ebp - 4], 0x38
call fcn.00401749
push edi
lea ecx, [ebp - 0xb63c]
mov byte [ebp - 4], 0x39
call fcn.00401749
push edi
lea ecx, [ebp - 0xb634]
mov byte [ebp - 4], 0x3a
call fcn.00401749
mov byte [ebp - 4], 0x3b
call fcn.00460cba
xor esi, esi
test al, al
jne 0x458d49
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push edi
lea ecx, [ebp - 0xb62c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb624]
mov byte [ebp - 4], 0x3c
call fcn.00401749
push edi
lea ecx, [ebp - 0xb61c]
mov byte [ebp - 4], 0x3d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb614]
mov byte [ebp - 4], 0x3e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb60c]
mov byte [ebp - 4], 0x3f
call fcn.00401749
push edi
lea ecx, [ebp - 0xb604]
mov byte [ebp - 4], 0x40
call fcn.00401749
mov byte [ebp - 4], 0x41
call fcn.00460bce
test al, al
jne 0x458dbd
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push edi
lea ecx, [ebp - 0xb5fc]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5f4]
mov byte [ebp - 4], 0x42
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5ec]
mov byte [ebp - 4], 0x43
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5e4]
mov byte [ebp - 4], 0x44
call fcn.00401749
mov eax, dword [0x532ad4]
imul eax, eax
push 0xb
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0x45
cmp edx, 2
jne 0x458e25
push esi
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push edi
lea ecx, [ebp - 0xb5dc]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5d4]
mov byte [ebp - 4], 0x46
call fcn.00401749
mov byte [ebp - 4], 0x47
call fcn.00460b84
test al, al
jne 0x458eaa
mov eax, dword [0x532ad4]
cdq
sub eax, edx
mov ecx, esi
mov esi, eax
sar esi, 1
test esi, esi
jle 0x458ea0
mov eax, dword [0x532ad4]
cdq
and edx, 3
add eax, edx
sar eax, 2
xor edi, edi
mov edx, esi
mov dword [ebp - 0xb36c], esi
test eax, eax
jle 0x458e95
mov edx, edi
mov dword [ebp - 0xb374], eax
add ebx, edx
dec edx
dec dword [ebp - 0xb374]
jne 0x458e84
mov edx, dword [ebp - 0xb36c]
add edi, ecx
dec edx
mov dword [ebp - 0xb36c], edx
jne 0x458e78
inc ecx
cmp ecx, ebx
jl 0x458e5c
mov edi, 0x5311f0
push edi
lea ecx, [ebp - 0xb5cc]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5c4]
mov byte [ebp - 4], 0x48
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5bc]
mov byte [ebp - 4], 0x49
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5b4]
mov byte [ebp - 4], 0x4a
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5ac]
mov byte [ebp - 4], 0x4b
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5a4]
mov byte [ebp - 4], 0x4c
call fcn.00401749
push edi
lea ecx, [ebp - 0xb59c]
mov byte [ebp - 4], 0x4d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb594]
mov byte [ebp - 4], 0x4e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb58c]
mov byte [ebp - 4], 0x4f
call fcn.00401749
push edi
lea ecx, [ebp - 0xb584]
mov byte [ebp - 4], 0x50
call fcn.00401749
push edi
lea ecx, [ebp - 0xb57c]
mov byte [ebp - 4], 0x51
call fcn.00401749
push edi
lea ecx, [ebp - 0xb574]
mov byte [ebp - 4], 0x52
call fcn.00401749
push edi
lea ecx, [ebp - 0xb56c]
mov byte [ebp - 4], 0x53
call fcn.00401749
push edi
lea ecx, [ebp - 0xb564]
mov byte [ebp - 4], 0x54
call fcn.00401749
push edi
lea ecx, [ebp - 0xb55c]
mov byte [ebp - 4], 0x55
call fcn.00401749
push edi
lea ecx, [ebp - 0xb554]
mov byte [ebp - 4], 0x56
call fcn.00401749
mov byte [ebp - 4], 0x57
push edi
lea ecx, [ebp - 0xb54c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb544]
mov byte [ebp - 4], 0x58
call fcn.00401749
push edi
lea ecx, [ebp - 0xb53c]
mov byte [ebp - 4], 0x59
call fcn.00401749
push edi
lea ecx, [ebp - 0xb534]
mov byte [ebp - 4], 0x5a
call fcn.00401749
push edi
lea ecx, [ebp - 0xb52c]
mov byte [ebp - 4], 0x5b
call fcn.00401749
push edi
lea ecx, [ebp - 0xb524]
mov byte [ebp - 4], 0x5c
call fcn.00401749
mov byte [ebp - 4], 0x5d
call fcn.00460c74
test al, al
jne 0x459029
call fcn.004bbc9b
mov ecx, dword [0x532ad4]
cmp ecx, eax
jne 0x459029
dec ecx
mov dword [0x532ad4], ecx
push edi
lea ecx, [ebp - 0xb51c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb514]
mov byte [ebp - 4], 0x5e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb50c]
mov byte [ebp - 4], 0x5f
call fcn.00401749
push edi
lea ecx, [ebp - 0xb504]
mov byte [ebp - 4], 0x60
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4fc]
mov byte [ebp - 4], 0x61
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4f4]
mov byte [ebp - 4], 0x62
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4ec]
mov byte [ebp - 4], 0x63
call fcn.00401749
push 0x64
pop ebx
push edi
lea ecx, [ebp - 0xb4e4]
mov byte [ebp - 4], bl
call fcn.00401749
mov eax, dword [0x532ad4]
imul eax, eax
push 0xd
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0x65
cmp edx, 5
jne 0x4590c4
inc dword [0x5334e4]
push edi
lea ecx, [ebp - 0xb4dc]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4d4]
mov byte [ebp - 4], 0x66
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4cc]
mov byte [ebp - 4], 0x67
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4c4]
mov byte [ebp - 4], 0x68
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4bc]
mov byte [ebp - 4], 0x69
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4b4]
mov byte [ebp - 4], 0x6a
call fcn.00401749
mov ecx, dword [0x532ad4]
mov eax, ecx
imul eax, ecx
push 0xe
cdq
pop esi
idiv esi
mov byte [ebp - 4], 0x6b
cmp edx, 0xa
jne 0x459161
mov eax, ecx
cdq
idiv ebx
xor ecx, ecx
push 4
lea eax, [edx + 0x2f4]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004b9bb1
push eax
call fcn.004baa14
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0xb4ac]
call fcn.00401749
mov ecx, dword [0x532ad4]
mov eax, ecx
imul eax, ecx
mov byte [ebp - 4], 0x6c
and eax, 0x8000000f
jns 0x459188
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 5
jne 0x4591a8
xor eax, eax
inc eax
mov esi, eax
cmp ecx, eax
jle 0x4591a2
mov eax, ecx
cdq
idiv esi
inc esi
add esi, edx
cmp esi, ecx
jl 0x459196
mov dword [0x532ad4], esi
push edi
lea ecx, [ebp - 0xb4a4]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb49c]
mov byte [ebp - 4], 0x6d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb494]
mov byte [ebp - 4], 0x6e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb48c]
mov byte [ebp - 4], 0x6f
call fcn.00401749
push edi
lea ecx, [ebp - 0xb484]
mov byte [ebp - 4], 0x70
call fcn.00401749
push edi
lea ecx, [ebp - 0xb47c]
mov byte [ebp - 4], 0x71
call fcn.00401749
push edi
lea ecx, [ebp - 0xb474]
mov byte [ebp - 4], 0x72
call fcn.00401749
push edi
lea ecx, [ebp - 0xb46c]
mov byte [ebp - 4], 0x73
call fcn.00401749
push edi
lea ecx, [ebp - 0xb464]
mov byte [ebp - 4], 0x74
call fcn.00401749
push edi
lea ecx, [ebp - 0xb45c]
mov byte [ebp - 4], 0x75
call fcn.00401749
push edi
lea ecx, [ebp - 0xb454]
mov byte [ebp - 4], 0x76
call fcn.00401749
push edi
lea ecx, [ebp - 0xb44c]
mov byte [ebp - 4], 0x77
call fcn.00401749
push edi
lea ecx, [ebp - 0xb444]
mov byte [ebp - 4], 0x78
call fcn.00401749
push edi
lea ecx, [ebp - 0xb43c]
mov byte [ebp - 4], 0x79
call fcn.00401749
push edi
lea ecx, [ebp - 0xb434]
mov byte [ebp - 4], 0x7a
call fcn.00401749
push edi
lea ecx, [ebp - 0xb42c]
mov byte [ebp - 4], 0x7b
call fcn.00401749
mov byte [ebp - 4], 0x7c
push edi
lea ecx, [ebp - 0xb424]
call fcn.00401749
mov byte [ebp - 4], 0x7d
call fcn.00460b22
test al, al
jne 0x459320
mov esi, dword [0x532ad4]
test esi, esi
je 0x459320
push 3
pop edi
mov ecx, esi
and ecx, 0x80000001
jns 0x4592dd
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x4592ea
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x4592f1
lea esi, [esi*2 + 1]
mov eax, esi
cdq
idiv edi
mov dword [0x532ad4], esi
sub edx, 0
je 0x45930a
dec edx
dec edx
je 0x45930d
dec edx
je 0x45930e
jmp 0x459317
add esi, 2
inc esi
add esi, 2
mov dword [0x532ad4], esi
test esi, esi
jne 0x4592ce
mov edi, 0x5311f0
push edi
lea ecx, [ebp - 0xb41c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb414]
mov byte [ebp - 4], 0x7e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb40c]
mov byte [ebp - 4], 0x7f
call fcn.00401749
mov ebx, dword [0x532ad4]
push 0x12
lea eax, [ebx + 1]
imul eax, ebx
cdq
pop ecx
idiv ecx
push 0xd
pop eax
mov byte [ebp - 4], 0x80
cmp edx, eax
jne 0x4593c9
xor eax, eax
mov dword [ebp - 0xb36c], eax
lea esi, [ebp - 0x3a0]
xor edi, edi
and dword [ebp - 0xb374], 0
mov eax, ebx
inc edi
cdq
idiv edi
mov dword [ebp - 0xb37c], edi
mov edi, dword [ebp - 0xb374]
mov dword [ebp - 0xb378], edx
lea ecx, [edi + 1]
mov edi, ecx
cmp edi, 7
jl 0x459398
mov edi, dword [ebp - 0xb37c]
add esi, 7
cmp edi, 0xa
jl 0x459379
mov eax, dword [ebp - 0xb36c]
push 0xd
inc eax
pop ecx
mov dword [ebp - 0xb36c], eax
cmp eax, ecx
jl 0x459377
mov edi, 0x5311f0
push edi
lea ecx, [ebp - 0xb404]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3fc]
mov byte [ebp - 4], 0x81
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3f4]
mov byte [ebp - 4], 0x82
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3ec]
mov byte [ebp - 4], 0x83
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3e4]
mov byte [ebp - 4], 0x84
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3dc]
mov byte [ebp - 4], 0x85
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3d4]
mov byte [ebp - 4], 0x86
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3cc]
mov byte [ebp - 4], 0x87
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3c4]
mov byte [ebp - 4], 0x88
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3bc]
mov byte [ebp - 4], 0x89
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3b4]
mov byte [ebp - 4], 0x8a
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3ac]
mov byte [ebp - 4], 0x8b
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3a4]
mov byte [ebp - 4], 0x8c
call fcn.00401749
push edi
lea ecx, [ebp - 0xb39c]
mov byte [ebp - 4], 0x8d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb394]
mov byte [ebp - 4], 0x8e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb38c]
mov byte [ebp - 4], 0x8f
call fcn.00401749
mov byte [ebp - 4], 0x90
push edi
lea ecx, [ebp - 0xb384]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5d0]
mov byte [ebp - 4], 0x91
call fcn.00401749
push edi
lea ecx, [ebp - 0xb788]
mov byte [ebp - 4], 0x92
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5c8]
mov byte [ebp - 4], 0x93
call fcn.00401749
push edi
lea ecx, [ebp - 0xb380]
mov byte [ebp - 4], 0x94
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5c0]
mov byte [ebp - 4], 0x95
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7d0]
mov byte [ebp - 4], 0x96
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5b8]
mov byte [ebp - 4], 0x97
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6e8]
mov byte [ebp - 4], 0x98
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5b0]
mov byte [ebp - 4], 0x99
call fcn.00401749
push edi
lea ecx, [ebp - 0xb780]
mov byte [ebp - 4], 0x9a
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5a8]
mov byte [ebp - 4], 0x9b
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6e0]
mov byte [ebp - 4], 0x9c
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5a0]
mov byte [ebp - 4], 0x9d
call fcn.00401749
push edi
lea ecx, [ebp - 0xb808]
mov byte [ebp - 4], 0x9e
call fcn.00401749
push edi
lea ecx, [ebp - 0xb598]
mov byte [ebp - 4], 0x9f
call fcn.00401749
mov byte [ebp - 4], 0xa0
push edi
lea ecx, [ebp - 0xb6d8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb590]
mov byte [ebp - 4], 0xa1
call fcn.00401749
push edi
lea ecx, [ebp - 0xb778]
mov byte [ebp - 4], 0xa2
call fcn.00401749
push edi
lea ecx, [ebp - 0xb588]
mov byte [ebp - 4], 0xa3
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6d0]
mov byte [ebp - 4], 0xa4
call fcn.00401749
push edi
lea ecx, [ebp - 0xb580]
mov byte [ebp - 4], 0xa5
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7c8]
mov byte [ebp - 4], 0xa6
call fcn.00401749
push edi
lea ecx, [ebp - 0xb578]
mov byte [ebp - 4], 0xa7
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6c8]
mov byte [ebp - 4], 0xa8
call fcn.00401749
push edi
lea ecx, [ebp - 0xb570]
mov byte [ebp - 4], 0xa9
call fcn.00401749
push edi
lea ecx, [ebp - 0xb770]
mov byte [ebp - 4], 0xaa
call fcn.00401749
push edi
lea ecx, [ebp - 0xb568]
mov byte [ebp - 4], 0xab
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6c0]
mov byte [ebp - 4], 0xac
call fcn.00401749
push edi
lea ecx, [ebp - 0xb560]
mov byte [ebp - 4], 0xad
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7f0]
mov byte [ebp - 4], 0xae
call fcn.00401749
push edi
lea ecx, [ebp - 0xb558]
mov byte [ebp - 4], 0xaf
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6b8]
mov byte [ebp - 4], 0xb0
call fcn.00401749
push edi
lea ecx, [ebp - 0xb550]
mov byte [ebp - 4], 0xb1
call fcn.00401749
push edi
lea ecx, [ebp - 0xb768]
mov byte [ebp - 4], 0xb2
call fcn.00401749
mov ecx, dword [0x532ad4]
push 0x11
lea eax, [ecx + 1]
imul eax, ecx
cdq
pop ecx
idiv ecx
xor ebx, ebx
mov byte [ebp - 4], 0xb3
cmp edx, 0xf
jne 0x45971d
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push edi
lea ecx, [ebp - 0xb548]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6b0]
mov byte [ebp - 4], 0xb4
call fcn.00401749
push edi
lea ecx, [ebp - 0xb540]
mov byte [ebp - 4], 0xb5
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7c0]
mov byte [ebp - 4], 0xb6
call fcn.00401749
push edi
lea ecx, [ebp - 0xb538]
mov byte [ebp - 4], 0xb7
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6a8]
mov byte [ebp - 4], 0xb8
call fcn.00401749
push edi
lea ecx, [ebp - 0xb530]
mov byte [ebp - 4], 0xb9
call fcn.00401749
push edi
lea ecx, [ebp - 0xb760]
mov byte [ebp - 4], 0xba
call fcn.00401749
push edi
lea ecx, [ebp - 0xb528]
mov byte [ebp - 4], 0xbb
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6a0]
mov byte [ebp - 4], 0xbc
call fcn.00401749
push edi
lea ecx, [ebp - 0xb520]
mov byte [ebp - 4], 0xbd
call fcn.00401749
push edi
lea ecx, [ebp - 0xb810]
mov byte [ebp - 4], 0xbe
call fcn.00401749
push edi
lea ecx, [ebp - 0xb518]
mov byte [ebp - 4], 0xbf
call fcn.00401749
mov byte [ebp - 4], 0xc0
call fcn.00460c10
test al, al
jne 0x45980d
push 0x9f
push 0x9e
push str._d__d_n
call fcn.004bc7c4
add esp, 0xc
push edi
lea ecx, [ebp - 0xb698]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb510]
mov byte [ebp - 4], 0xc1
call fcn.00401749
push edi
lea ecx, [ebp - 0xb758]
mov byte [ebp - 4], 0xc2
call fcn.00401749
push edi
lea ecx, [ebp - 0xb508]
mov byte [ebp - 4], 0xc3
call fcn.00401749
push edi
lea ecx, [ebp - 0xb690]
mov byte [ebp - 4], 0xc4
call fcn.00401749
push edi
lea ecx, [ebp - 0xb500]
mov byte [ebp - 4], 0xc5
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7b8]
mov byte [ebp - 4], 0xc6
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4f8]
mov byte [ebp - 4], 0xc7
call fcn.00401749
push edi
lea ecx, [ebp - 0xb688]
mov byte [ebp - 4], 0xc8
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4f0]
mov byte [ebp - 4], 0xc9
call fcn.00401749
push edi
lea ecx, [ebp - 0xb750]
mov byte [ebp - 4], 0xca
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4e8]
mov byte [ebp - 4], 0xcb
call fcn.00401749
push edi
lea ecx, [ebp - 0xb680]
mov byte [ebp - 4], 0xcc
call fcn.00401749
mov edx, dword [0x532ad4]
push 9
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
mov byte [ebp - 4], 0xcd
cmp edx, 7
jne 0x459905
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push edi
lea ecx, [ebp - 0xb4e0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7e8]
mov byte [ebp - 4], 0xce
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4d8]
mov byte [ebp - 4], 0xcf
call fcn.00401749
push edi
lea ecx, [ebp - 0xb678]
mov byte [ebp - 4], 0xd0
call fcn.00401749
mov byte [ebp - 4], 0xd1
call fcn.00460bac
test al, al
jne 0x45996f
mov esi, dword [0x532ad4]
xor eax, eax
inc eax
mov ecx, eax
cmp esi, eax
jle 0x459969
mov eax, esi
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, esi
jl 0x45995d
mov dword [0x532ad4], ecx
push edi
lea ecx, [ebp - 0xb4d0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb748]
mov byte [ebp - 4], 0xd2
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4c8]
mov byte [ebp - 4], 0xd3
call fcn.00401749
push edi
lea ecx, [ebp - 0xb670]
mov byte [ebp - 4], 0xd4
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4c0]
mov byte [ebp - 4], 0xd5
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7b0]
mov byte [ebp - 4], 0xd6
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4b8]
mov byte [ebp - 4], 0xd7
call fcn.00401749
push edi
lea ecx, [ebp - 0xb668]
mov byte [ebp - 4], 0xd8
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4b0]
mov byte [ebp - 4], 0xd9
call fcn.00401749
push edi
lea ecx, [ebp - 0xb740]
mov byte [ebp - 4], 0xda
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4a8]
mov byte [ebp - 4], 0xdb
call fcn.00401749
push edi
lea ecx, [ebp - 0xb660]
mov byte [ebp - 4], 0xdc
call fcn.00401749
push edi
lea ecx, [ebp - 0xb4a0]
mov byte [ebp - 4], 0xdd
call fcn.00401749
mov byte [ebp - 4], 0xde
call fcn.00460c34
test al, al
jne 0x459a67
push 4
pop eax
push eax
call fcn.004ba88b
mov esi, eax
call fcn.004bbc9b
mov dword [esi], eax
push esi
mov dword [0x532ad4], eax
call fcn.004ba78f
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0xb800]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb498]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb658]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb490]
call fcn.00401749
call fcn.00460b66
test al, al
jne 0x459aa6
inc dword [0x533518]
push edi
lea ecx, [ebp - 0xb738]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb488]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb650]
call fcn.00401749
mov ecx, dword [0x532ad4]
mov eax, ecx
imul eax, ecx
push 0x15
cdq
pop esi
idiv esi
push 3
pop eax
cmp edx, eax
jne 0x459ae9
inc ecx
mov dword [0x532ad4], ecx
push edi
lea ecx, [ebp - 0xb480]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7a8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb478]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb648]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb470]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb730]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb468]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb640]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb460]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7e0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb458]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb638]
call fcn.00401749
call fcn.00460ce2
test al, al
jne 0x459b88
dec dword [0x532ad4]
push edi
lea ecx, [ebp - 0xb450]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb728]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb448]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb630]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb440]
call fcn.00401749
mov esi, dword [0x532ad4]
push 0x18
lea ecx, [esi + 1]
lea eax, [esi + 2]
imul eax, ecx
imul eax, esi
cdq
pop ecx
idiv ecx
push 9
pop eax
cmp edx, eax
jne 0x459bea
dec esi
mov dword [0x532ad4], esi
push edi
lea ecx, [ebp - 0xb7a0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb438]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb628]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb430]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb720]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb428]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb620]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb420]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb818]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb418]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb618]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb410]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb718]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb408]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb610]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb400]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb798]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3f8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb608]
call fcn.00401749
mov edx, dword [0x532ad4]
push 0xe
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
pop ecx
idiv ecx
push 9
pop eax
cmp edx, eax
jne 0x459d04
push 0x8c
push 0x8b
push str._d__d_n
call fcn.004bc7c4
add esp, 0xc
push edi
lea ecx, [ebp - 0xb3f0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb710]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3e8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb600]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3e0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7d8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3d8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5f8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3d0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb708]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3c8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5f0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3c0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb790]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3b8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5e8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3b0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb700]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3a8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5e0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb3a0]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb7f8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb398]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb5d8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb390]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6f8]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb388]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb81c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb814]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb6f0]
call fcn.00401749
mov eax, dword [0x532ad4]
imul eax, eax
push 0xc
cdq
pop ecx
idiv ecx
push 3
pop eax
cmp edx, eax
jne 0x459ef6
xor eax, eax
push 0x991e
mov word [ebp - 0x9cc0], ax
lea eax, [ebp - 0x9cbe]
push ebx
push eax
call fcn.004bc640
add esp, 0xc
mov edi, ebx
mov esi, ebx
mov edx, ebx
test edi, edi
je 0x459ecd
test edx, edx
je 0x459ecd
lea eax, [esi + edx]
lea ecx, [esi + edx]
mov ax, word [ebp + eax*2 - 0x9dd8]
inc ax
add ax, word [ebp + ecx*2 - 0x9cc2]
mov word [ebp + ecx*2 - 0x9cc0], ax
inc edx
cmp edx, 0x8c
jl 0x459ea5
add esi, 0x8c
inc edi
cmp esi, 0x4c90
jl 0x459ea3
movsx eax, word [ebp - 0x3a2]
mov dword [0x532ad4], eax
mov edi, 0x5311f0
push edi
lea ecx, [ebp - 0xb374]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb36c]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb378]
call fcn.00401749
push edi
lea ecx, [ebp - 0xb37c]
call fcn.00401749
mov ecx, dword [ebp - 0xb37c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb378]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb36c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb374]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6f0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb814]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb81c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb388]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6f8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb390]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5d8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb398]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7f8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3a0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5e0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3a8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb700]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3b0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5e8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3b8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb790]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3c0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5f0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3c8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb708]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3d0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5f8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3d8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7d8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3e0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb600]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3e8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb710]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3f0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb608]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3f8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb798]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb400]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb610]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb408]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb718]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb410]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb618]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb418]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb818]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb420]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb620]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb428]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb720]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb430]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb628]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb438]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7a0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb440]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb630]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb448]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb728]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb450]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb638]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb458]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7e0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb460]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb640]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb468]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb730]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb470]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb648]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb478]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7a8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb480]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb650]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb488]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb738]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb490]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb658]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb498]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb800]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4a0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb660]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4a8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb740]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4b0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb668]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4b8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7b0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4c0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb670]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4c8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb748]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4d0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb678]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4d8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7e8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4e0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb680]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4e8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb750]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4f0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb688]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4f8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7b8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb500]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb690]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb508]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb758]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb510]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb698]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb518]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb810]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb520]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6a0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb528]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb760]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb530]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6a8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb538]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7c0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb540]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6b0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb548]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb768]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb550]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6b8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb558]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7f0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb560]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6c0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb568]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb770]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb570]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6c8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb578]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7c8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb580]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6d0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb588]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb778]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb590]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6d8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb598]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb808]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5a0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6e0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5a8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb780]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5b0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6e8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5b8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7d0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5c0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb380]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5c8]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb788]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5d0]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb384]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb38c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb394]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb39c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3a4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3ac]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3b4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3bc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3c4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3cc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3d4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3dc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3e4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3ec]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3f4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb3fc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb404]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb40c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb414]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb41c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb424]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb42c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb434]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb43c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb444]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb44c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb454]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb45c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb464]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb46c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb474]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb47c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb484]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb48c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb494]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb49c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4a4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4ac]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4b4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4bc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4c4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4cc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4d4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4dc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4e4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4ec]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4f4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb4fc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb504]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb50c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb514]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb51c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb524]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb52c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb534]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb53c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb544]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb54c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb554]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb55c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb564]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb56c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb574]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb57c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb584]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb58c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb594]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb59c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5a4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5ac]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5b4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5bc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5c4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5cc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5d4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5dc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5e4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5ec]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5f4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb5fc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb604]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb60c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb614]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb61c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb624]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb62c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb634]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb63c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb644]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb64c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb654]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb65c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb664]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb66c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb674]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb67c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb684]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb68c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb694]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb69c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6a4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6ac]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6b4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6bc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6c4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6cc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6d4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6dc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6e4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6ec]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6f4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb6fc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb704]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb70c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb714]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb71c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb724]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb72c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb734]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb73c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb744]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb74c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb754]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb75c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb764]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb76c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb774]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb77c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb784]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb78c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb794]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb79c]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7a4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7ac]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7b4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7bc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7c4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7cc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7d4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7dc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7e4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7ec]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7f4]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb7fc]
lea ecx, [ecx - 0x10]
call fcn.00404c8b
mov ecx, dword [ebp - 0xb804]
add ecx, 0xfffffff0
call fcn.00404c8b
mov ecx, dword [ebp - 0xb80c]
add ecx, 0xfffffff0
call fcn.00404c8b
xor eax, eax
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bb744
leave
ret