Function at 0x402e20
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4085f9
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x40b004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x44], edi
mov dword [ebp - 4], 0
mov dword [ebp - 0x70], edi
push 0x4091c0
mov dword [ebp - 0x6c], 0
call fcn.00406610
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x40]
push str.This_sN_tThe51ag
mov dword [ebp - 0x6c], 1
call fcn.00406610
push str.google.com
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.00406610
mov byte [ebp - 4], 2
call fcn.00401860
sub esp, 0x18
mov bl, al
mov esi, esp
mov dword [ebp - 0x4c], esp
lea eax, [ebp - 0x65]
mov dword [ebp - 0x48], esi
mov ecx, esi
mov byte [ebp - 0x44], bl
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 3
push eax
mov ecx, esi
call fcn.004069b0
sub esp, 0x18
mov byte [ebp - 4], 4
mov esi, esp
lea eax, [ebp - 0x66]
mov dword [ebp - 0x48], esi
mov ecx, esi
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 5
push eax
mov ecx, esi
call fcn.004069b0
mov byte [ebp - 4], 4
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x402f52
cmp bl, 0x23
je 0x402f52
lea ecx, [ebp - 0x64]
call fcn.00406d00
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 6
call fcn.00406730
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.00406750
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 7
push eax
mov ecx, edi
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 8
call fcn.00406490
mov byte [ebp - 4], 2
call fcn.00401920
sub esp, 0x18
mov bl, al
mov esi, esp
mov dword [ebp - 0x48], esp
lea eax, [ebp - 0x66]
mov dword [ebp - 0x4c], esi
mov ecx, esi
mov byte [ebp - 0x44], bl
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 9
push eax
mov ecx, esi
call fcn.004069b0
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov esi, esp
lea eax, [ebp - 0x65]
mov dword [ebp - 0x4c], esi
mov ecx, esi
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
mov ecx, esi
call fcn.004069b0
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403006
cmp bl, 0x23
je 0x403006
lea ecx, [ebp - 0x64]
call fcn.00406d00
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc
call fcn.00406730
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.00406750
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xd
push eax
mov ecx, edi
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xe
call fcn.00406490
mov byte [ebp - 4], 2
call fcn.00401920
sub esp, 0x18
mov bl, al
mov esi, esp
mov dword [ebp - 0x48], esp
lea eax, [ebp - 0x66]
mov dword [ebp - 0x4c], esi
mov ecx, esi
mov byte [ebp - 0x44], bl
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xf
push eax
mov ecx, esi
call fcn.004069b0
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov esi, esp
lea eax, [ebp - 0x65]
mov dword [ebp - 0x4c], esi
mov ecx, esi
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
mov ecx, esi
call fcn.004069b0
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4030ba
cmp bl, 0x23
je 0x4030ba
lea ecx, [ebp - 0x64]
call fcn.00406d00
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.00406730
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.00406750
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x13
push eax
mov ecx, edi
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x14
call fcn.00406490
mov byte [ebp - 4], 2
call fcn.004019e0
sub esp, 0x18
mov bl, al
mov esi, esp
mov dword [ebp - 0x48], esp
lea eax, [ebp - 0x66]
mov dword [ebp - 0x4c], esi
mov ecx, esi
mov byte [ebp - 0x44], bl
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x15
push eax
mov ecx, esi
call fcn.004069b0
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov esi, esp
lea eax, [ebp - 0x65]
mov dword [ebp - 0x4c], esi
mov ecx, esi
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
mov ecx, esi
call fcn.004069b0
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40316e
cmp bl, 0x23
je 0x40316e
lea ecx, [ebp - 0x64]
call fcn.00406d00
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x18
call fcn.00406730
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.00406750
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x19
push eax
mov ecx, edi
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x1a
call fcn.00406490
mov byte [ebp - 4], 2
call fcn.00401aa0
sub esp, 0x18
mov bl, al
mov esi, esp
mov dword [ebp - 0x48], esp
lea eax, [ebp - 0x66]
mov dword [ebp - 0x4c], esi
mov ecx, esi
mov byte [ebp - 0x44], bl
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, esi
call fcn.004069b0
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov esi, esp
lea eax, [ebp - 0x65]
mov dword [ebp - 0x4c], esi
mov ecx, esi
push eax
push dword [ebp - 0x48]
call fcn.00406ed0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, esi
call fcn.004069b0
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403207
cmp bl, 0x23
je 0x403207
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40326e
cmp bl, 0x23
je 0x40326e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x20
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4032d5
cmp bl, 0x23
je 0x4032d5
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x22
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401b60
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40333c
cmp bl, 0x23
je 0x40333c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x24
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4033a3
cmp bl, 0x23
je 0x4033a3
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x26
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40340a
cmp bl, 0x23
je 0x40340a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x28
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403471
cmp bl, 0x23
je 0x403471
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x2a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401c20
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4034d8
cmp bl, 0x23
je 0x4034d8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x2c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401ce0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40353f
cmp bl, 0x23
je 0x40353f
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x2e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4035a6
cmp bl, 0x23
je 0x4035a6
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x30
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401da0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40360d
cmp bl, 0x23
je 0x40360d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x32
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403674
cmp bl, 0x23
je 0x403674
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x34
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4036db
cmp bl, 0x23
je 0x4036db
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x36
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401e60
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403742
cmp bl, 0x23
je 0x403742
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x38
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4037a9
cmp bl, 0x23
je 0x4037a9
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x3a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401ce0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403810
cmp bl, 0x23
je 0x403810
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x3c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403877
cmp bl, 0x23
je 0x403877
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x3e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4038de
cmp bl, 0x23
je 0x4038de
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x40
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403945
cmp bl, 0x23
je 0x403945
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x42
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4039ac
cmp bl, 0x23
je 0x4039ac
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x44
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403a13
cmp bl, 0x23
je 0x403a13
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x46
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403a7a
cmp bl, 0x23
je 0x403a7a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x48
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403ae1
cmp bl, 0x23
je 0x403ae1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401f20
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403b48
cmp bl, 0x23
je 0x403b48
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403baf
cmp bl, 0x23
je 0x403baf
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401fe0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403c16
cmp bl, 0x23
je 0x403c16
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x50
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401aa0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403c7d
cmp bl, 0x23
je 0x403c7d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x52
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403ce4
cmp bl, 0x23
je 0x403ce4
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x54
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403d4b
cmp bl, 0x23
je 0x403d4b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x56
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403db2
cmp bl, 0x23
je 0x403db2
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x58
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403e19
cmp bl, 0x23
je 0x403e19
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x5a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403e80
cmp bl, 0x23
je 0x403e80
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x5c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403ee7
cmp bl, 0x23
je 0x403ee7
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x5e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x5f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403f4e
cmp bl, 0x23
je 0x403f4e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x60
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x403fb5
cmp bl, 0x23
je 0x403fb5
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x62
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004020a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40401c
cmp bl, 0x23
je 0x40401c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x64
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404083
cmp bl, 0x23
je 0x404083
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x66
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4040ea
cmp bl, 0x23
je 0x4040ea
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x68
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x69
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404151
cmp bl, 0x23
je 0x404151
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x6a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4041b8
cmp bl, 0x23
je 0x4041b8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x6c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x6d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40421f
cmp bl, 0x23
je 0x40421f
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x6e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x6f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404286
cmp bl, 0x23
je 0x404286
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x70
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x71
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4042ed
cmp bl, 0x23
je 0x4042ed
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x72
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402160
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404354
cmp bl, 0x23
je 0x404354
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x74
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x75
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4043bb
cmp bl, 0x23
je 0x4043bb
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x76
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402220
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x77
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404422
cmp bl, 0x23
je 0x404422
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x78
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x79
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404489
cmp bl, 0x23
je 0x404489
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x7a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4044f0
cmp bl, 0x23
je 0x4044f0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x7c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404557
cmp bl, 0x23
je 0x404557
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x7e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4045be
cmp bl, 0x23
je 0x4045be
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x80
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404625
cmp bl, 0x23
je 0x404625
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x82
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40468c
cmp bl, 0x23
je 0x40468c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x84
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4046f3
cmp bl, 0x23
je 0x4046f3
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x86
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004022e0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x87
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40475a
cmp bl, 0x23
je 0x40475a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x88
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4047c1
cmp bl, 0x23
je 0x4047c1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x8a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404828
cmp bl, 0x23
je 0x404828
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x8c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004023a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40488f
cmp bl, 0x23
je 0x40488f
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x8e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004020a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x8f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4048f6
cmp bl, 0x23
je 0x4048f6
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x90
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004023a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x91
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40495d
cmp bl, 0x23
je 0x40495d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x92
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402460
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x93
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4049c4
cmp bl, 0x23
je 0x4049c4
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x94
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x95
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404a2b
cmp bl, 0x23
je 0x404a2b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x96
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x97
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404a92
cmp bl, 0x23
je 0x404a92
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x98
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402520
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x99
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404af9
cmp bl, 0x23
je 0x404af9
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x9a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401fe0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404b60
cmp bl, 0x23
je 0x404b60
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x9c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404bc7
cmp bl, 0x23
je 0x404bc7
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0x9e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004025e0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0x9f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404c2e
cmp bl, 0x23
je 0x404c2e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa0
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xa1
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404c95
cmp bl, 0x23
je 0x404c95
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa2
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004026a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xa3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404cfc
cmp bl, 0x23
je 0x404cfc
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa4
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402760
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404d63
cmp bl, 0x23
je 0x404d63
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa6
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402820
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xa7
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404dca
cmp bl, 0x23
je 0x404dca
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa8
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401fe0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xa9
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404e31
cmp bl, 0x23
je 0x404e31
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xaa
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xab
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404e98
cmp bl, 0x23
je 0x404e98
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xac
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xad
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404eff
cmp bl, 0x23
je 0x404eff
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xae
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xaf
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404f66
cmp bl, 0x23
je 0x404f66
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb0
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xb1
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x404fcd
cmp bl, 0x23
je 0x404fcd
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb2
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xb3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405034
cmp bl, 0x23
je 0x405034
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb4
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xb5
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40509b
cmp bl, 0x23
je 0x40509b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb6
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xb7
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405102
cmp bl, 0x23
je 0x405102
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb8
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xb9
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405169
cmp bl, 0x23
je 0x405169
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xba
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xbb
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4051d0
cmp bl, 0x23
je 0x4051d0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xbc
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xbd
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405237
cmp bl, 0x23
je 0x405237
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xbe
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004028e0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xbf
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40529e
cmp bl, 0x23
je 0x40529e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc0
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xc1
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405305
cmp bl, 0x23
je 0x405305
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc2
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xc3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40536c
cmp bl, 0x23
je 0x40536c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc4
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4053d3
cmp bl, 0x23
je 0x4053d3
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc6
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xc7
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40543a
cmp bl, 0x23
je 0x40543a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc8
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xc9
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4054a1
cmp bl, 0x23
je 0x4054a1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xca
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xcb
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405508
cmp bl, 0x23
je 0x405508
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xcc
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004023a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xcd
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40556f
cmp bl, 0x23
je 0x40556f
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xce
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xcf
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4055d6
cmp bl, 0x23
je 0x4055d6
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd0
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xd1
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40563d
cmp bl, 0x23
je 0x40563d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd2
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xd3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4056a4
cmp bl, 0x23
je 0x4056a4
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd4
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004029a0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xd5
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40570b
cmp bl, 0x23
je 0x40570b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd6
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xd7
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405772
cmp bl, 0x23
je 0x405772
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd8
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xd9
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4057d9
cmp bl, 0x23
je 0x4057d9
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xda
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xdb
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405840
cmp bl, 0x23
je 0x405840
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xdc
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xdd
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4058a7
cmp bl, 0x23
je 0x4058a7
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xde
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xdf
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40590e
cmp bl, 0x23
je 0x40590e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe0
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402a60
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xe1
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405975
cmp bl, 0x23
je 0x405975
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe2
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xe3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4059dc
cmp bl, 0x23
je 0x4059dc
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe4
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xe5
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405a43
cmp bl, 0x23
je 0x405a43
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe6
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402b20
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xe7
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405aaa
cmp bl, 0x23
je 0x405aaa
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe8
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402be0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xe9
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405b11
cmp bl, 0x23
je 0x405b11
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xea
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xeb
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405b78
cmp bl, 0x23
je 0x405b78
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xec
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004028e0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xed
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405bdf
cmp bl, 0x23
je 0x405bdf
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xee
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401aa0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xef
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405c46
cmp bl, 0x23
je 0x405c46
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf0
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.004019e0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xf1
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405cad
cmp bl, 0x23
je 0x405cad
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf2
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401fe0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xf3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405d14
cmp bl, 0x23
je 0x405d14
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf4
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xf5
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405d7b
cmp bl, 0x23
je 0x405d7b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf6
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xf7
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405de2
cmp bl, 0x23
je 0x405de2
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00402ca0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xf9
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405e49
cmp bl, 0x23
je 0x405e49
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xfa
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xfb
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405eb0
cmp bl, 0x23
je 0x405eb0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xfc
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xfd
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405f17
cmp bl, 0x23
je 0x405f17
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov byte [ebp - 4], 0xfe
call fcn.00406420
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov byte [ebp - 4], 0xff
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov byte [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405f84
cmp bl, 0x23
je 0x405f84
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x100
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x101
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x405ff7
cmp bl, 0x23
je 0x405ff7
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x102
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x103
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x40606a
cmp bl, 0x23
je 0x40606a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x104
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00402a60
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x105
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4060dd
cmp bl, 0x23
je 0x4060dd
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x106
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x107
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x406150
cmp bl, 0x23
je 0x406150
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x108
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x109
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4061c3
cmp bl, 0x23
je 0x4061c3
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x10a
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00401920
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x10b
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x406236
cmp bl, 0x23
je 0x406236
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x10c
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00402ca0
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x10d
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x4062a9
cmp bl, 0x23
je 0x4062a9
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x10e
call fcn.00406420
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 2
call fcn.00406490
call fcn.00402d60
sub esp, 0x18
mov bl, al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x48], esp
mov ecx, esp
mov byte [ebp - 0x44], bl
push eax
call fcn.00406650
sub esp, 0x18
mov dword [ebp - 4], 0x10f
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.00406650
mov dword [ebp - 4], 2
call fcn.004010a0
add esp, 0x30
test eax, eax
je 0x406315
cmp bl, 0x23
je 0x406315
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
push 1
call fcn.004064e0
push eax
mov ecx, edi
mov dword [ebp - 4], 0x110
call fcn.00406420
lea ecx, [ebp - 0x64]
call fcn.00406490
lea ecx, [ebp - 0x28]
call fcn.00406490
lea ecx, [ebp - 0x40]
call fcn.00406490
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00406ee3
mov esp, ebp
pop ebp
ret