Function at 0x41d0bf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x290
mov dword [esp + 0x134], 4
and dword [esp + 0x138], 0
and dword [esp + 0x13c], 0
mov esi, ecx
mov eax, dword [0x45802c]
test eax, eax
jne 0x41d0fe
mov ecx, 0x45802c
call fcn.0043dbc0
push eax
call fcn.0044b604
cmp eax, 2
mov dword [esp + 0x240], esi
jb 0x41d127
mov ecx, dword [eax]
xor ecx, 1
or ecx, dword [eax + 4]
jne 0x41d127
add eax, 8
mov ecx, dword [eax]
mov edx, dword [eax + 4]
jmp 0x41d1ef
mov eax, dword [0x45802c]
test eax, eax
jne 0x41d13a
mov ecx, 0x45802c
call fcn.0043dbc0
push eax
call fcn.0044b604
test eax, eax
je 0x41d169
mov esi, eax
cmp eax, 1
jne 0x41d1aa
lea eax, [esp + 0x140]
push 0x46
pop edx
mov ecx, 0x460648
push 0x459520
push 0x4596c0
jmp 0x424aa8
call fcn.0044b6bc
push 0x20
push 0
push eax
call fcn.0044b694
test eax, eax
je 0x424b31
and dword [eax + 4], 0
and dword [eax], 0
mov dword [eax + 0x18], 0x45802c
mov esi, eax
mov eax, dword [0x45802c]
test eax, eax
jne 0x41d1a3
mov ecx, 0x45802c
call fcn.0043dbc0
push esi
push eax
call fcn.0044b5fc
xorps xmm0, xmm0
lea eax, [esp + 0x190]
movaps xmmword [eax], xmm0
push 0x10
push eax
call fcn.0044b574
test al, al
je 0x424ae3
movdqa xmm0, xmmword [esp + 0x190]
and dword [esi + 4], 0
mov dword [esi], 1
lea eax, [esi + 8]
movdqu xmmword [esi + 8], xmm0
movd ecx, xmm0
pshufd xmm0, xmm0, 0xe5
movd edx, xmm0
xor edi, edi
mov esi, ecx
mov ebx, dword [eax + 0xc]
inc edi
add esi, edi
mov edi, dword [eax + 8]
mov dword [eax], esi
mov esi, edx
adc esi, 0
mov dword [eax + 4], esi
lea eax, [esp + 0x78]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
and dword [eax + 0x10], 0
mov dword [eax + 0x14], 0x45f680
push 4
pop ecx
lea ebx, [esp + 0x140]
mov edx, 0xfffffefc
mov dword [eax + 0x18], ecx
and dword [eax + 0x1c], 0
and dword [eax + 0x20], 0
lea eax, [0x43c3a0]
mov ecx, 0x45aea0
mov dword [ebx], eax
mov eax, 0xffffbaa9
add ecx, edx
add eax, dword [ebx]
push 8
pop edi
push 0x10
pop edx
lea esi, [esp + 0x78]
lea edx, [esi + edx]
mov dword [esp + 0x26c], edx
lea edx, [esp + 0xf8]
push ecx
push edi
push edx
mov edi, edx
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.00404864
lea eax, [0x4467c8]
mov ecx, 0x45aeac
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff1681
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x442fad]
mov ecx, 0x45aed0
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffff4e9c
add ecx, edx
add eax, dword [ebx]
push 5
pop edx
push ecx
push edx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404809
lea eax, [0x446ae5]
mov ecx, 0x45aedc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff1364
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x441bfa]
mov ecx, 0x45af00
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xffff624f
add ecx, edx
add eax, dword [ebx]
push 0xc
pop edx
push ecx
push edx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040436a
lea eax, [0x4470be]
mov ecx, 0x45af10
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff0d8b
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x44222e]
mov ecx, 0x45af34
mov edx, 0xfffffefc
mov dword [ebx], eax
mov eax, 0xffff5c1b
add ecx, edx
add eax, dword [ebx]
push ecx
push 8
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.00404864
lea eax, [0x440a76]
mov ecx, 0x45af40
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff73d3
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4413ae]
mov ecx, 0x45af64
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff6a9b
add ecx, edx
add eax, dword [ebx]
push 6
pop edx
push ecx
push edx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004049d0
lea eax, [0x439196]
mov ecx, 0x45af70
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffecb3
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43a418]
mov ecx, 0x45af94
mov edx, 0xffffff1d
mov dword [ebx], eax
mov eax, 0xffffda31
add ecx, edx
add eax, dword [ebx]
push 7
pop edx
push ecx
push edx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040458c
lea eax, [0x43aefe]
mov ecx, 0x45afa0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffcf4b
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43e05d]
mov ecx, 0x45afc4
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff9dec
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004049d0
lea eax, [0x43b272]
mov ecx, 0x45afd0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffcbd7
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x443156]
mov ecx, 0x45aff4
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffff4cf3
add ecx, edx
add eax, dword [ebx]
push ecx
push 5
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404809
lea eax, [0x43871f]
mov ecx, 0x45b000
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffff72a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x438f7c]
mov ecx, 0x45b024
mov edx, 0xffffff1d
mov dword [ebx], eax
mov eax, 0xffffeecd
add ecx, edx
add eax, dword [ebx]
push ecx
push 7
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040458c
lea eax, [0x443ee8]
mov ecx, 0x45b030
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff3f61
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4390ff]
mov ecx, 0x45b054
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xffffed4a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040436a
lea eax, [0x438219]
mov ecx, 0x45b064
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffffc30
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43a54c]
mov ecx, 0x45b088
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffffd8fd
add ecx, edx
add eax, dword [ebx]
push ecx
push 5
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.00404809
lea eax, [0x43a34f]
mov ecx, 0x45b094
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffdafa
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43b89f]
mov ecx, 0x45b0b8
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffffc5aa
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004049d0
lea eax, [0x439c02]
mov ecx, 0x45b0c4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffe247
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43f227]
mov ecx, 0xffff8c22
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, dword [ebx]
add eax, ecx
mov ecx, 0x45b0e8
add ecx, edx
push ecx
push 6
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004049d0
lea eax, [0x44365c]
mov ecx, 0x45b0f4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff47ed
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x447037]
mov ecx, 0x45b118
mov dword [ebx], eax
mov eax, 0xffff0e12
add eax, dword [ebx]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push 3
pop edx
push ecx
push edx
push ebx
call eax
add esp, 0xc
movzx eax, word [ebx]
mov cl, byte [ebx + 2]
lea edx, [esp + 0xf8]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0xf8]
mov ecx, esi
call fcn.004044d6
lea eax, [0x44710d]
mov ecx, 0x45b120
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff0d3c
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4404d9]
mov ecx, 0x45b144
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff7970
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.004049d0
lea eax, [0x444b55]
mov ecx, 0x45b150
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff32f4
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43af08]
mov ecx, 0x45b174
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffffcf41
add ecx, edx
add eax, dword [ebx]
push ecx
push 5
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404809
lea eax, [0x43ad12]
mov ecx, 0x45b180
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffd137
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4438b9]
mov ecx, 0x45b1a4
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff4590
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.004049d0
lea eax, [0x442bd3]
mov ecx, 0x45b1b0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff5276
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x443d37]
mov ecx, 0x45b1d4
mov edx, 0xfffffefc
mov dword [ebx], eax
mov eax, 0xffff4112
add ecx, edx
add eax, dword [ebx]
push ecx
push 8
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404864
lea eax, [0x43d020]
mov ecx, 0x45b1e0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffae29
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4452f8]
mov ecx, 0x45b204
mov edx, 0xffffff1d
mov dword [ebx], eax
mov eax, 0xffff2b51
add ecx, edx
add eax, dword [ebx]
push ecx
push 7
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040458c
lea eax, [0x43d03f]
mov ecx, 0x45b210
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffae0a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x4443a6]
mov ecx, 0x45b234
mov edx, 0xfffffe57
mov dword [ebx], eax
mov eax, 0xffff3aa3
add ecx, edx
add eax, dword [ebx]
push 0xd
pop edx
push ecx
push edx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404420
lea eax, [0x4473a4]
mov ecx, 0x45b248
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff0aa5
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x447826]
mov ecx, 0x45b26c
mov edx, 0xfffffe57
mov dword [ebx], eax
mov eax, 0xffff0623
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xd
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404420
lea eax, [0x444672]
mov ecx, 0x45b280
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff37d7
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x445e33]
mov ecx, 0x45b2a4
mov edx, 0xfffffe15
mov dword [ebx], eax
mov eax, 0xffff2016
add ecx, edx
add eax, dword [ebx]
push 0xf
pop edx
push ecx
push edx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004045e7
lea eax, [0x44568f]
mov ecx, 0x45b2b8
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff27ba
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x445a09]
mov ecx, 0x45b2dc
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff2440
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004049d0
lea eax, [0x43aabf]
mov ecx, 0x45b2e8
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffd38a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x444872]
mov ecx, 0x45b30c
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffff35d7
add ecx, edx
add eax, dword [ebx]
push 0xa
pop edx
push ecx
push edx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea eax, [0x43f227]
mov ecx, 0xffff8c22
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0x45b31c
add ecx, dword [ebx]
add eax, edx
push eax
push 0x20
pop eax
push eax
push ebx
call ecx
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x444361]
mov ecx, 0x45b340
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffff3ae8
add ecx, edx
add eax, dword [ebx]
push 0xb
pop edx
push ecx
push edx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004043c5
lea eax, [0x4423be]
mov ecx, 0x45b350
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff5a8b
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43da29]
mov ecx, 0x45b374
mov edx, 0xfffffe15
mov dword [ebx], eax
mov eax, 0xffffa420
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xf
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004045e7
lea eax, [0x442b1c]
mov ecx, 0x45b388
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff532d
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4384f6]
mov ecx, 0x45b3ac
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xfffff953
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x446186]
mov ecx, 0x45b3bc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff1cc3
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4387c7]
mov ecx, 0x45b3e0
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xfffff682
add ecx, edx
add eax, dword [ebx]
push 0xe
pop edx
push ecx
push edx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040491a
lea eax, [0x440e7e]
mov ecx, 0x45b3f4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff6fcb
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43f4df]
mov ecx, 0x45b418
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffff896a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x440d4a]
mov ecx, 0x45b428
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff70ff
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x446883]
mov ecx, 0x45b44c
mov edx, 0xfffffe15
mov dword [ebx], eax
mov eax, 0xffff15c6
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xf
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004045e7
lea eax, [0x447cdc]
mov ecx, 0x45b460
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff016d
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x446d81]
mov ecx, 0x45b484
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffff10c8
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea eax, [0x446305]
mov ecx, 0x45b494
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff1b44
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x442448]
mov ecx, 0x45b4b8
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xffff5a01
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xe
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040491a
lea eax, [0x445974]
mov ecx, 0x45b4cc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff24d5
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43ae52]
mov ecx, 0x45b4f0
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xffffcff7
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
lea edi, [esp + 0x30]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040436a
lea eax, [0x43fb3a]
mov ecx, 0x45b500
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff830f
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x4431fc]
mov ecx, 0x45b524
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffff4c4d
add ecx, edx
add eax, dword [ebx]
push ecx
push 5
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.00404809
lea eax, [0x446d1a]
mov ecx, 0x45b530
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff112f
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404b97
lea esi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x438631]
mov ecx, 0x45b554
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xfffff818
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004049d0
lea eax, [0x43866b]
mov ecx, 0x45b560
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffff7de
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43d718]
mov ecx, 0x45b584
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffffa731
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x445a28]
mov ecx, 0x45b594
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff2421
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop edi
push edi
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x438978]
mov ecx, 0x45b5b8
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xfffff4d1
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040436a
lea eax, [0x43bbbb]
mov ecx, 0x45b5c8
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffc28e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43a7e6]
mov ecx, 0x45b5ec
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffffd663
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.00404a86
lea eax, [0x43b5ab]
mov ecx, 0x45b5fc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffc89e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x438da7]
mov ecx, 0x45b620
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xfffff0a2
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040436a
lea eax, [0x447a3d]
mov ecx, 0x45b630
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff040c
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x440b7d]
mov ecx, 0x45b654
mov edx, 0xffffff1d
mov dword [ebx], eax
mov eax, 0xffff72cc
add ecx, edx
add eax, dword [ebx]
push ecx
push 7
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.0040458c
lea eax, [0x43a652]
mov ecx, 0x45b660
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffd7f7
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43d211]
mov ecx, 0x45b684
mov edx, 0xfffffe57
mov dword [ebx], eax
mov eax, 0xffffac38
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xd
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.00404420
lea eax, [0x43886c]
mov ecx, 0x45b698
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffff5dd
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43c7ba]
mov ecx, 0x45b6bc
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffffb68f
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x441a28]
mov ecx, 0x45b6cc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff6421
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x440b2c]
mov ecx, 0x45b6f0
mov edx, 0xfffffefc
mov dword [ebx], eax
mov eax, 0xffff731d
add ecx, edx
add eax, dword [ebx]
push ecx
push 8
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404864
lea eax, [0x441348]
mov ecx, 0x45b6fc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff6b01
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x44659c]
mov ecx, 0x45b720
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffff18ad
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x43fec6]
mov ecx, 0x45b730
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff7f83
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop edi
push edi
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x443fe5]
mov ecx, 0x45b754
mov edx, 0xfffffdd3
mov dword [ebx], eax
mov eax, 0xffff3e64
add ecx, edx
add eax, dword [ebx]
push 0x11
pop edx
push ecx
push edx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.00404975
lea eax, [0x43d81e]
mov ecx, 0x45b76c
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffa62b
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x443f89]
mov ecx, 0x45b790
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffff3ec0
add ecx, edx
add eax, dword [ebx]
push ecx
push 5
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.00404809
lea eax, [0x44686e]
mov ecx, 0x45b79c
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff15db
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x438b17]
mov ecx, 0x45b7c0
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xfffff332
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea eax, [0x445c30]
mov ecx, 0x45b7d0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff2219
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea ecx, [esp + 0xb0]
lea edx, [esp + 0x78]
push edi
push esi
call fcn.004031e1
pop eax
pop ecx
lea ecx, [esp + 0xb0]
mov edi, ecx
call fcn.00405348
lea eax, [0x43de20]
mov ecx, 0x45b7f4
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xffffa029
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040436a
lea eax, [0x43c23f]
lea ecx, [0x45b301]
mov dword [ebx], eax
mov eax, 0xffffbc0a
add eax, dword [ebx]
push ecx
push 0x27
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.0040430f
lea esi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea edi, [esp + 0xb4]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x445c29]
mov ecx, 0x45b830
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xffff2220
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xe
pop ecx
push ecx
lea esi, [esp + 0x198]
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040491a
lea eax, [0x441fff]
mov ecx, 0x45b844
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff5e4a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop edi
push edi
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x439d36]
mov ecx, 0x45b868
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffffe113
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x43891f]
mov ecx, 0x45b878
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffff52a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4407b5]
mov ecx, 0x45b89c
mov edx, 0xfffffedb
mov dword [ebx], eax
mov eax, 0xffff7694
add ecx, edx
add eax, dword [ebx]
push 9
pop edx
push ecx
push edx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a2b
lea eax, [0x440acb]
mov ecx, 0x45b8ac
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff737e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x442da7]
mov ecx, 0x45b8d0
mov edx, 0xfffffe15
mov dword [ebx], eax
mov eax, 0xffff50a2
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xf
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004045e7
lea eax, [0x439498]
mov ecx, 0x45b8e4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffe9b1
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x441cc5]
mov ecx, 0x45b908
mov edx, 0xfffffdd3
mov dword [ebx], eax
mov eax, 0xffff6184
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x11
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404975
lea eax, [0x442688]
mov ecx, 0x45b920
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff57c1
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43f83a]
mov ecx, 0x45b944
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xffff860f
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xe
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040491a
lea eax, [0x4423b6]
mov ecx, 0x45b958
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff5a93
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x443740]
mov ecx, 0x45b97c
mov edx, 0xfffffdf4
mov dword [ebx], eax
mov eax, 0xffff4709
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x10
pop ecx
push ecx
lea esi, [esp + 0x198]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0xb0]
mov edx, esi
call fcn.004047ae
lea eax, [0x44010f]
mov ecx, 0x45b990
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff7d3a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43adf7]
mov ecx, 0x45b9b4
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffffd052
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea eax, [0x43d191]
mov ecx, 0x45b9c4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffacb8
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x440ded]
lea ecx, [0x45b692]
mov dword [ebx], eax
mov eax, 0xffff705c
add eax, dword [ebx]
push ecx
push 0x1a
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.00404b3c
lea eax, [0x4389bb]
mov ecx, 0x45ba08
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffff48e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x442954]
mov ecx, 0x45ba2c
mov dword [ebx], eax
mov eax, 0xffff54f5
add eax, dword [ebx]
push 0xffffffffffffff80
pop edx
add ecx, edx
push ecx
push 4
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov eax, dword [ebx]
lea edx, [esp + 0xf8]
mov ecx, esi
mov dword [edi], eax
call fcn.00404642
lea eax, [0x43c5fc]
mov ecx, 0x45ba34
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffb84d
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
mov esi, edi
call fcn.00405348
lea eax, [0x44689a]
mov ecx, 0x45ba58
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffff15af
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x447629]
lea ecx, [0x45b66d]
mov dword [ebx], eax
mov eax, 0xffff0820
add eax, dword [ebx]
push ecx
push 0x1f
push ebx
call eax
add esp, 0xc
xor ecx, ecx
lea edx, [esp + 0xe0]
lea esi, [esp + 0xa0]
lea edi, [esp + 0x28]
mov eax, 0x4609e4
inc ecx
mov dword [esi], edx
mov dword [edx], ebx
lea edx, [esp + 0x190]
mov dword [esi + 4], 0x403288
mov dword [edi], ecx
and dword [edi + 4], 0
mov dword [edx], eax
mov dword [edx + 4], ecx
and dword [edx + 8], 0
and dword [edi + 8], 0
mov dword [edx + 0x10], esi
mov dword [edx + 0x14], ecx
lea edx, [esp + 0x190]
mov ecx, edi
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, edi
call fcn.0040a92f
lea esi, [esp + 0x190]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x43d8c5]
mov ecx, 0x45ba8c
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffffa584
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004043c5
lea eax, [0x439502]
mov ecx, 0x45ba9c
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffe947
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43dac1]
mov ecx, 0x45bac0
mov edx, 0xfffffcec
mov dword [ebx], eax
mov eax, 0xffffa388
add ecx, edx
add eax, dword [ebx]
push 0x18
pop edx
push ecx
push edx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004042b4
lea eax, [0x44440f]
mov ecx, 0x45badc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff3a3a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43ae7a]
mov ecx, 0x45bb00
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffffcfcf
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x43f342]
mov ecx, 0x45bb10
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff8b07
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43d969]
mov ecx, 0x45bb34
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffffa4e0
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea eax, [0x437f94]
mov ecx, 0x45bb44
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffffeb5
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x44376b]
mov ecx, 0x45bb68
mov edx, 0xffffff5f
mov dword [ebx], eax
mov eax, 0xffff46de
add ecx, edx
add eax, dword [ebx]
push ecx
push 5
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404809
lea eax, [0x444464]
mov ecx, 0x45bb74
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff39e5
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x44157e]
mov ecx, 0x45bb98
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffff68cb
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea eax, [0x441198]
mov ecx, 0x45bba8
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff6cb1
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43f09c]
mov ecx, 0x45bbcc
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xffff8dad
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040436a
lea eax, [0x43c5aa]
mov ecx, 0x45bbdc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffb89f
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x446352]
mov ecx, 0x45bc00
mov edx, 0xfffffe78
mov dword [ebx], eax
mov eax, 0xffff1af7
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xc
pop ecx
push ecx
lea edi, [esp + 0x30]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040436a
lea eax, [0x444264]
mov ecx, 0x45bc10
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff3be5
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43a0af]
mov ecx, 0x45bc34
mov edx, 0xffffff1d
mov dword [ebx], eax
mov eax, 0xffffdd9a
add ecx, edx
add eax, dword [ebx]
push ecx
push 7
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.0040458c
lea eax, [0x43d8ec]
mov ecx, 0x45bc40
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffa55d
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43e891]
mov ecx, 0x45bc64
mov edx, 0xfffffedb
mov dword [ebx], eax
mov eax, 0xffff95b8
add ecx, edx
add eax, dword [ebx]
push ecx
push 9
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.00404a2b
lea eax, [0x439c34]
mov ecx, 0x45bc74
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffe215
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x4460a1]
mov ecx, 0x45bc98
mov edx, 0xfffffe57
mov dword [ebx], eax
mov eax, 0xffff1da8
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xd
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404420
lea eax, [0x4474c1]
mov ecx, 0x45bcac
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff0988
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x438acb]
mov ecx, 0x45bcd0
mov edx, 0xfffffe57
mov dword [ebx], eax
mov eax, 0xfffff37e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xd
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404420
lea eax, [0x43b58b]
mov ecx, 0x45bce4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffc8be
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43aada]
mov ecx, 0x45bd08
mov dword [ebx], eax
mov eax, 0xffffd36f
add eax, dword [ebx]
push 0xffffffffffffff80
pop edx
add ecx, edx
push ecx
push 4
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov eax, dword [ebx]
lea edx, [esp + 0xf8]
mov ecx, esi
mov dword [edi], eax
call fcn.00404642
lea eax, [0x43f17d]
mov ecx, 0x45bd10
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff8ccc
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x440ef8]
mov ecx, 0x45bd34
mov dword [ebx], eax
mov eax, 0xffff6f51
add eax, dword [ebx]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
movzx eax, word [ebx]
mov cl, byte [ebx + 2]
lea edx, [esp + 0xf8]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0xf8]
mov ecx, esi
call fcn.004044d6
lea eax, [0x443ce2]
mov ecx, 0x45bd3c
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff4167
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4464a0]
mov ecx, 0x45bd60
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffff19a9
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x43ba2b]
mov ecx, 0x45bd70
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffc41e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop esi
push esi
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, ebx
mov ecx, edi
call fcn.00404b97
lea esi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, esi
push edi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, esi
call fcn.00405348
lea eax, [0x440b1f]
mov ecx, 0x45bd94
mov edx, 0xfffffd4f
mov dword [ebx], eax
mov eax, 0xffff732a
add ecx, edx
add eax, dword [ebx]
push 0x15
pop edx
push ecx
push edx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004046f8
lea eax, [0x4467bf]
mov ecx, 0x45bdb0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff168a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43e51e]
mov ecx, 0x45bdd4
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff992b
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop esi
push esi
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.004049d0
lea eax, [0x4467e6]
mov ecx, 0x45bde0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff1663
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x44126d]
mov ecx, 0x45be04
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff6bdc
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.004049d0
lea eax, [0x445210]
mov ecx, 0x45be10
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff2c39
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43b29f]
mov ecx, 0x45be34
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffffcbaa
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x440bf6]
mov ecx, 0x45be44
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff7253
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43f5be]
mov ecx, 0x45be68
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffff888b
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.00404a86
lea eax, [0x44156d]
mov ecx, 0x45be78
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff68dc
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x444c5c]
mov ecx, 0x45be9c
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffff31ed
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.00404a86
lea eax, [0x4476b1]
mov ecx, 0x45beac
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff0798
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x446b78]
mov ecx, 0x45bed0
mov edx, 0xfffffedb
mov dword [ebx], eax
mov eax, 0xffff12d1
add ecx, edx
add eax, dword [ebx]
push ecx
push 9
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a2b
lea eax, [0x43d5a3]
mov ecx, 0x45bee0
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffa8a6
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43db08]
mov ecx, 0x45bf04
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xffffa341
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xe
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040491a
lea eax, [0x438d20]
mov ecx, 0x45bf18
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xfffff129
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x444f17]
mov ecx, 0x45bf3c
mov dword [ebx], eax
mov eax, 0xffff2f32
add eax, dword [ebx]
push 0xffffffffffffff80
pop edx
add ecx, edx
push ecx
push 4
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov eax, dword [ebx]
lea edx, [esp + 0xf8]
mov ecx, esi
mov dword [edi], eax
call fcn.00404642
lea eax, [0x447de1]
mov ecx, 0x45bf44
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff0068
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4405c4]
mov ecx, 0x45bf68
mov edx, 0xfffffefc
mov dword [ebx], eax
mov eax, 0xffff7885
add ecx, edx
add eax, dword [ebx]
push ecx
push 8
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.00404864
lea eax, [0x44100f]
mov ecx, 0x45bf74
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff6e3a
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4432e1]
mov ecx, 0x45bf98
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff4b68
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.004049d0
lea eax, [0x43be15]
mov ecx, 0x45bfa4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffc034
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x444831]
mov ecx, 0x45bfc8
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff3618
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004049d0
lea eax, [0x43e2cb]
mov ecx, 0x45bfd4
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff9b7e
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x439b34]
mov ecx, 0x45bff8
mov edx, 0xfffffeba
mov dword [ebx], eax
mov eax, 0xffffe315
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea esi, [esp + 0x100]
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.00404a86
lea eax, [0x44298e]
mov ecx, 0x45c008
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff54bb
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0x2c]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43ecf9]
mov ecx, 0x45c02c
mov edx, 0xfffffe99
mov dword [ebx], eax
mov eax, 0xffff9150
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004043c5
lea eax, [0x439ac1]
mov ecx, 0x45c03c
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffe388
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43ad07]
mov ecx, 0x45c060
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xffffd142
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xe
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.0040491a
lea eax, [0x43cbd6]
mov ecx, 0x45c074
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffb273
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4447e3]
mov ecx, 0x45c098
mov edx, 0xfffffe36
mov dword [ebx], eax
mov eax, 0xffff3666
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xe
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040491a
lea eax, [0x43ce08]
mov ecx, 0x45c0ac
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffb041
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x439650]
mov ecx, 0x45c0d0
mov edx, 0xffffff1d
mov dword [ebx], eax
mov eax, 0xffffe7f9
add ecx, edx
add eax, dword [ebx]
push ecx
push 7
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.0040458c
lea eax, [0x43bde0]
mov ecx, 0x45c0dc
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffc069
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop edi
push edi
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4470c7]
mov ecx, 0x45c100
mov edx, 0xfffffcec
mov dword [ebx], eax
mov eax, 0xffff0d82
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x18
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004042b4
lea eax, [0x43a1a2]
mov ecx, 0x45c11c
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffdca7
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43f178]
mov ecx, 0x45c140
mov edx, 0xfffffedb
mov dword [ebx], eax
mov eax, 0xffff8cd1
add ecx, edx
add eax, dword [ebx]
push ecx
push 9
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a2b
lea eax, [0x43d5f5]
mov ecx, 0x45c150
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffffa854
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x446879]
mov ecx, 0x45c174
mov edx, 0xfffffe15
mov dword [ebx], eax
mov eax, 0xffff15d0
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xf
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.004045e7
lea eax, [0x44528c]
mov ecx, 0x45c188
mov edx, 0xfffffbe4
mov dword [ebx], eax
mov eax, 0xffff2bbd
add ecx, edx
add eax, dword [ebx]
push ecx
push 0x20
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x28]
mov edx, ebx
mov ecx, esi
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push esi
lea esi, [esp + 0xb4]
push esi
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x443872]
lea ecx, [0x45beda]
mov dword [ebx], eax
mov eax, 0xffff45d7
add eax, dword [ebx]
push ecx
push 0x16
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
xor eax, eax
lea edx, [esp + 0x28]
lea ecx, [esp + 0xa0]
mov dword [edx], edi
mov dword [ecx], edx
inc eax
mov edx, 0x4609e4
mov edi, esi
mov dword [ecx + 4], 0x40336e
mov dword [esi], eax
and dword [esi + 4], 0
and dword [esi + 8], 0
mov dword [ebx], edx
mov dword [ebx + 4], eax
and dword [ebx + 8], 0
lea esi, [esp + 0x140]
mov dword [ebx + 0x10], ecx
mov ecx, edi
mov dword [ebx + 0x14], eax
mov edx, esi
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, edi
call fcn.0040a92f
lea eax, [0x440cb5]
mov ecx, 0x45c1c8
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff7194
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43edee]
mov ecx, 0x45c1ec
mov edx, 0xfffffe57
mov dword [esi], eax
mov eax, 0xffff905b
add ecx, edx
add eax, dword [esi]
push ecx
push 0xd
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0xb0]
mov edx, edi
call fcn.00404420
lea eax, [0x438d64]
mov ecx, 0x45c200
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xfffff0e5
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x28]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0xb4]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43c911]
mov ecx, 0x45c224
mov edx, 0xfffffe78
mov dword [esi], eax
mov eax, 0xffffb538
add ecx, edx
add eax, dword [esi]
push ecx
push 0xc
pop ecx
push ecx
lea edi, [esp + 0x30]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.0040436a
lea eax, [0x444e5f]
mov ecx, 0x45c234
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff2fea
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0xb4]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43b652]
mov ecx, 0x45c258
mov edx, 0xfffffe57
mov dword [esi], eax
mov eax, 0xffffc7f7
add ecx, edx
add eax, dword [esi]
push ecx
push 0xd
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404420
lea eax, [0x44278e]
mov ecx, 0x45c26c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff56bb
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0xb4]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43a020]
mov ecx, 0x45c290
mov edx, 0xfffffe78
mov dword [esi], eax
mov eax, 0xffffde29
add ecx, edx
add eax, dword [esi]
push ecx
push 0xc
pop ecx
push ecx
lea ebx, [esp + 0x30]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.0040436a
lea eax, [0x447dc9]
mov ecx, 0x45c2a0
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff0080
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43e2da]
mov ecx, 0x45c2c4
mov edx, 0xfffffe99
mov dword [esi], eax
mov eax, 0xffff9b6f
add ecx, edx
add eax, dword [esi]
push ecx
push 0xb
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.004043c5
lea eax, [0x43f82f]
mov ecx, 0x45c2d4
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff861a
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, esi
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x447ba3]
mov ecx, 0x45c2f8
mov edx, 0xfffffe99
mov dword [esi], eax
mov eax, 0xffff02a6
add ecx, edx
add eax, dword [esi]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.004043c5
lea eax, [0x43fef4]
mov ecx, 0x45c308
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff7f55
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x438135]
mov ecx, 0x45c32c
mov edx, 0xfffffe15
mov dword [esi], eax
mov eax, 0xfffffd14
add ecx, edx
add eax, dword [esi]
push ecx
push 0xf
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.004045e7
lea eax, [0x440887]
mov ecx, 0x45c340
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff75c2
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x28]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43857f]
mov ecx, 0x45c364
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xfffff8ca
add ecx, edx
add eax, dword [esi]
push ecx
push 6
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.004049d0
lea eax, [0x44625b]
mov ecx, 0x45c370
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff1bee
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43b1c0]
mov ecx, 0x45c394
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffffcc89
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404864
lea eax, [0x4388df]
mov ecx, 0x45c3a0
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xfffff56a
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x445bd9]
mov ecx, 0x45c3c4
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xffff2270
add ecx, edx
add eax, dword [esi]
push ecx
push 6
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.004049d0
lea eax, [0x447c5c]
mov ecx, 0x45c3d0
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff01ed
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43d329]
mov ecx, 0x45c3f4
mov edx, 0xfffffe57
mov dword [esi], eax
mov eax, 0xffffab20
add ecx, edx
add eax, dword [esi]
push ecx
push 0xd
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404420
lea eax, [0x4401fb]
mov ecx, 0x45c408
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff7c4e
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0xb4]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43d711]
mov ecx, 0x45c42c
mov edx, 0xfffffdf4
mov dword [esi], eax
mov eax, 0xffffa738
add ecx, edx
add eax, dword [esi]
push ecx
push 0x10
pop ecx
push ecx
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.004047ae
lea eax, [0x444d5e]
mov ecx, 0x45c440
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff30eb
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
mov edi, ebx
call fcn.00405348
lea eax, [0x441f90]
mov ecx, 0x45c464
mov edx, 0xfffffedb
mov dword [esi], eax
mov eax, 0xffff5eb9
add ecx, edx
add eax, dword [esi]
push ecx
push 9
pop ebx
push ebx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x28]
mov edx, edi
call fcn.00404a2b
lea eax, [0x4439be]
mov ecx, 0x45c474
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff448b
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4391ff]
mov ecx, 0x45c498
mov edx, 0xfffffedb
mov dword [esi], eax
mov eax, 0xffffec4a
add ecx, edx
add eax, dword [esi]
push ecx
push 9
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404a2b
lea eax, [0x445f61]
mov ecx, 0x45c4a8
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff1ee8
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43c877]
mov ecx, 0x45c4cc
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffffb5d2
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404864
lea eax, [0x43c9b0]
mov ecx, 0x45c4d8
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffb499
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43a8d6]
mov ecx, 0x45c4fc
mov edx, 0xfffffedb
mov dword [esi], eax
mov eax, 0xffffd573
add ecx, edx
add eax, dword [esi]
push ecx
push 9
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404a2b
lea eax, [0x43e677]
mov ecx, 0x45c50c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff97d2
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x441d36]
mov ecx, 0x45c530
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffff6113
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404864
lea eax, [0x43996f]
mov ecx, 0x45c53c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffe4da
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43b7ba]
mov ecx, 0x45c560
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xffffc68f
add ecx, edx
add eax, dword [esi]
push ecx
push 6
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.004049d0
lea eax, [0x43d41b]
mov ecx, 0x45c56c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffaa2e
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x44513b]
mov ecx, 0x45c590
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffff2d0e
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404864
lea eax, [0x43e82f]
mov ecx, 0x45c59c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff961a
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43d0b2]
mov ecx, 0x45c5c0
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffffad97
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404864
lea eax, [0x43fdca]
mov ecx, 0x45c5cc
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff807f
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x441699]
mov ecx, 0x45c5f0
mov edx, 0xfffffe99
mov dword [esi], eax
mov eax, 0xffff67b0
add ecx, edx
add eax, dword [esi]
push ecx
push 0xb
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.004043c5
lea eax, [0x43c731]
mov ecx, 0x45c600
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffb718
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43ee8a]
mov ecx, 0x45c624
mov dword [esi], eax
mov eax, 0xffff8fbf
add eax, dword [esi]
push 0xffffffffffffff80
pop edx
add ecx, edx
push ecx
push 4
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov eax, dword [esi]
lea ecx, [esp + 0xf8]
lea edx, [esp + 0xf8]
mov dword [ecx], eax
mov ecx, ebx
call fcn.00404642
lea eax, [0x43dbac]
mov ecx, 0x45c62c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffa29d
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x44571b]
mov ecx, 0x45c650
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffff272e
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404864
lea eax, [0x446fb5]
mov ecx, 0x45c65c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff0e94
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x447316]
mov ecx, 0x45c680
mov edx, 0xfffffedb
mov dword [esi], eax
mov eax, 0xffff0b33
add ecx, edx
add eax, dword [esi]
push ecx
push 9
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404a2b
lea eax, [0x43d749]
mov ecx, 0x45c690
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffa700
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x438bc8]
mov ecx, 0x45c6b4
mov edx, 0xfffffeba
mov dword [esi], eax
mov eax, 0xfffff281
add ecx, edx
add eax, dword [esi]
push ecx
push 0xa
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404a86
lea eax, [0x43e0a1]
mov ecx, 0x45c6c4
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff9da8
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ebx
push ebx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x4477ed]
mov ecx, 0x45c6e8
mov edx, 0xfffffd4f
mov dword [esi], eax
mov eax, 0xffff065c
add ecx, edx
add eax, dword [esi]
push ecx
push 0x15
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.004046f8
lea eax, [0x447b10]
mov ecx, 0x45c704
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff0339
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0xb4]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x441c9f]
lea ecx, [0x45c498]
mov dword [esi], eax
mov eax, 0xffff61aa
add eax, dword [esi]
push 0x14
pop edx
push ecx
push edx
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
mov eax, 0x4609e4
lea ecx, [esp + 0xa0]
mov dword [esi], eax
xor eax, eax
inc eax
mov edx, eax
mov dword [esi + 4], eax
and dword [esi + 8], 0
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], eax
lea eax, [esp + 0x28]
lea esi, [esp + 0x140]
mov dword [edi], edx
and dword [edi + 4], 0
and dword [edi + 8], 0
mov dword [ecx], eax
mov dword [ecx + 4], 0x40332f
mov ecx, edi
mov edx, esi
mov dword [eax], ebx
mov ebx, eax
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, edi
call fcn.0040a92f
lea eax, [0x440db4]
mov ecx, 0x45c740
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff7095
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, esi
mov edi, ebx
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0xb4]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43f952]
mov ecx, 0x45c764
mov edx, 0xfffffd4f
mov dword [esi], eax
mov eax, 0xffff84f7
add ecx, edx
add eax, dword [esi]
push ecx
push 0x15
pop ecx
push ecx
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.004046f8
lea eax, [0x4418fd]
mov ecx, 0x45c780
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff654c
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0xb4]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43ba3b]
lea ecx, [0x45c556]
mov dword [esi], eax
mov eax, 0xffffc40e
add eax, dword [esi]
push ecx
push 0x12
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404ae1
lea eax, [0x439bbe]
mov ecx, 0x45c7bc
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffe28b
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xf8]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea eax, [esp + 0xb4]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x442cb2]
mov ecx, 0x45c7e0
mov edx, 0xffffff5f
mov dword [esi], eax
mov eax, 0xffff5197
add ecx, edx
add eax, dword [esi]
push ecx
push 5
pop ebx
push ebx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404809
lea eax, [0x439831]
mov ecx, 0x45c7ec
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffffe618
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea ebx, [esp + 0x2c]
push ebx
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x4418c8]
mov ecx, 0x45c810
mov edx, 0xffffff5f
mov dword [esi], eax
mov eax, 0xffff6581
add ecx, edx
add eax, dword [esi]
push ecx
push 5
pop ecx
push ecx
lea edi, [esp + 0x100]
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.00404809
lea eax, [0x43f67e]
mov ecx, 0x45c81c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff87cb
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x190]
mov edx, esi
mov ecx, edi
call fcn.00404b97
lea ebx, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, ebx
push edi
lea edi, [esp + 0x2c]
push edi
call fcn.004031e1
pop eax
pop ecx
mov ecx, ebx
call fcn.00405348
lea eax, [0x43f57a]
mov ecx, 0x45c840
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffff88cf
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea ebx, [esp + 0x100]
push ebx
call eax
add esp, 0xc
mov ecx, edi
mov edx, ebx
call fcn.00404864
lea eax, [0x4412fb]
mov ecx, 0x45c84c
mov edx, 0xfffffbe4
mov dword [esi], eax
mov eax, 0xffff6b4e
add ecx, edx
add eax, dword [esi]
push ecx
push 0x20
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea ebx, [esp + 0x190]
mov edx, esi
mov ecx, ebx
call fcn.00404b97
lea edi, [esp + 0xb0]
lea edx, [esp + 0x78]
mov ecx, edi
push ebx
lea eax, [esp + 0x2c]
push eax
call fcn.004031e1
pop eax
pop ecx
mov ecx, edi
call fcn.00405348
lea eax, [0x43d782]
mov ecx, 0x45c870
mov edx, 0xfffffedb
mov dword [esi], eax
mov eax, 0xffffa6c7
add ecx, edx
add eax, dword [esi]
push ecx
push 9
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x190]
mov edx, edi
call fcn.00404a2b
lea eax, [0x447ca1]
mov ecx, 0x45c880
mov edx, 0xfffffeba
mov dword [esi], eax
mov eax, 0xffff01a8
add ecx, edx
add eax, dword [esi]
push ecx
push 0xa
pop ebx
push ebx
lea edi, [esp + 0x30]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.00404a86
lea ebx, [esp + 0x190]
lea ecx, [esp + 0xf8]
mov edx, ebx
push 0
push 0
push 5
pop eax
push eax
push esi
call fcn.004143c3
add esp, 0x10
lea eax, [0x43dc98]
mov ecx, 0x45c890
mov edx, 0xfffffe36
mov dword [esi], eax
mov eax, 0xffffa1b1
add ecx, edx
add eax, dword [esi]
push ecx
push 0xe
pop ecx
push ecx
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.0040491a
lea eax, [0x447a3c]
mov ecx, 0x45c8a4
mov edx, 0xfffffeba
mov esi, ebx
mov dword [ebx], eax
mov eax, 0xffff040d
add ecx, edx
add eax, dword [ebx]
push ecx
push 0xa
pop ecx
push ecx
lea ebx, [esp + 0xe8]
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.00404a86
lea ebx, [esp + 0xb0]
mov edx, edi
mov ecx, ebx
push 0
push 0
push 5
pop eax
push eax
push esi
call fcn.004143c3
add esp, 0x10
push 0x50
pop ecx
push 8
pop edx
call fcn.0040a74c
push 0xa
pop edx
mov edi, eax
lea esi, [esp + 0xf8]
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edi, [eax + 0x28]
mov esi, ebx
lea edx, [esp + 0x274]
rep movsd dword es:[edi], dword [esi]
mov dword [edx], eax
push 2
pop eax
lea esi, [esp + 0x280]
mov ecx, esi
mov dword [edx + 4], eax
mov dword [edx + 8], eax
call fcn.00414653
mov eax, dword [esi]
imul edx, dword [esi + 8], 0xc
mov ecx, dword [esi + 4]
lea esi, [esp + 0xe0]
add edx, eax
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov ecx, 0x45c90c
mov dword [esi + 0xc], edx
mov esi, 0xffffff3e
mov edx, 0x45c918
add ecx, esi
add edx, esi
mov dword [esp + 0x124], ecx
mov dword [esp + 0x1e4], edx
mov ecx, dword [esp + 0xe8]
cmp ecx, dword [esp + 0xec]
je 0x422168
lea eax, [ecx + 0xc]
mov dword [esp + 0xe8], eax
mov eax, dword [ecx]
test eax, eax
je 0x422168
mov esi, dword [ecx + 8]
mov edx, dword [ecx + 4]
test esi, esi
mov dword [esp + 0xdc], edx
mov ecx, esi
mov dword [esp + 4], esi
je 0x421a2d
mov ecx, dword [esp + 4]
mov edi, eax
lea esi, [eax + ecx]
mov dl, byte [edi]
lea ebx, [edi + 1]
test dl, dl
js 0x4219e1
mov edi, ebx
jmp 0x421a29
add edi, 2
cmp dl, 0xe0
jae 0x4219f0
cmp ebx, esi
cmove edi, ebx
jmp 0x421a29
cmp dl, 0xed
jne 0x421a0d
cmp ebx, esi
cmove edi, ebx
cmp edi, esi
je 0x421a2d
inc edi
cmp ebx, esi
je 0x421a29
cmp byte [ebx], 0x9f
jbe 0x421a29
jmp 0x424a6f
cmp ebx, esi
mov ecx, edi
cmove ecx, ebx
lea edi, [ecx + 1]
cmp ecx, esi
cmove edi, ecx
cmp dl, 0xf0
jb 0x421a29
lea ecx, [edi + 1]
cmp edi, esi
cmovne edi, ecx
cmp edi, esi
jne 0x4219d4
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0xdc]
mov ecx, 0xffff2655
mov dword [esp + 0x218], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x21c], eax
lea eax, [0x4457f4]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45c7af]
push ecx
push 9
lea esi, [esp + 0x198]
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x140]
mov edx, esi
mov ebx, esi
mov ecx, edi
call fcn.00404a2b
lea esi, [esp + 0x22c]
mov edx, edi
mov ecx, esi
call fcn.0041442e
mov ecx, edi
call fcn.00435706
lea eax, [0x438786]
mov ecx, 0xfffff6c3
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45c71a]
push ecx
push 0xe
push edi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, edi
call fcn.0040491a
lea edi, [esp + 0x250]
mov edx, ebx
mov ecx, edi
call fcn.0041442e
mov ecx, ebx
call fcn.00435706
mov edx, dword [esp + 0x214]
lea ecx, [esp + 0x18]
push 0
mov eax, 0x461f70
push eax
mov ebx, 0x461f70
push esi
push dword [esp + 0x228]
call fcn.00409dcf
add esp, 0x10
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x128]
push 0
push ebx
push edi
push dword [esp + 0x2c]
call fcn.00409dcf
add esp, 0x10
mov eax, dword [esp + 0x128]
mov ecx, 0xffff26cd
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 4], eax
lea eax, [0x44577c]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45c8db]
push ecx
xor ebx, ebx
inc ebx
push ebx
lea edi, [esp + 0x148]
push edi
call eax
add esp, 0xc
mov al, byte [esp + 0x140]
mov dword [esp + 8], ebx
and dword [esp + 0xc], 0
mov dword [esp + 0x140], 0x4609e4
mov dword [esp + 0x144], ebx
and dword [esp + 0x10], 0
and dword [esp + 0x148], 0
lea esi, [esp + 0xa0]
mov edx, edi
mov dword [esp + 0x150], esi
mov dword [esp + 0x154], ebx
lea ebx, [esp + 8]
mov ecx, ebx
mov byte [esp + 0x200], al
lea eax, [esp + 0x200]
mov dword [esp + 0x190], eax
lea eax, [esp + 0x190]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], 0x4031a2
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, ebx
call fcn.0040a92f
mov edx, dword [esp + 0xdc]
mov ecx, esi
push 0
mov eax, 0x461f70
push eax
push ebx
push dword [esp + 0x10]
call fcn.00409dcf
add esp, 0x10
mov eax, dword [esp + 0xa8]
mov esi, dword [esp + 0xa0]
mov ecx, 0xffffe6a9
mov dword [esp + 4], eax
lea eax, [0x4397a0]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45c7fc]
push ecx
push 8
pop ecx
push ecx
lea edi, [esp + 0x24c]
push edi
call eax
add esp, 0xc
lea ebx, [esp + 0x28]
mov edx, edi
mov ecx, ebx
call fcn.00404864
mov edx, esi
lea ecx, [esp + 0x1e8]
push 0
mov eax, 0x461f70
push eax
push ebx
push dword [esp + 0x10]
call fcn.00409dcf
add esp, 0x10
mov eax, dword [esp + 0x1f0]
mov esi, dword [esp + 0x1e8]
mov ecx, 0xffff9e62
mov dword [esp + 4], eax
lea eax, [0x43dfe7]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
push dword [esp + 0x124]
push 6
pop ebx
push ebx
lea edi, [esp + 0x20c]
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x190]
mov edx, edi
call fcn.004049d0
lea eax, [0x4435d6]
mov ecx, 0xffff4873
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
push dword [esp + 0x1e4]
push ebx
lea ebx, [esp + 0x264]
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0x140]
mov edx, ebx
mov ecx, edi
call fcn.004049d0
mov edx, esi
lea ecx, [esp + 0x220]
push dword [esp + 0x148]
push dword [esp + 0x144]
lea ebx, [esp + 0x198]
push ebx
push dword [esp + 0x10]
call fcn.00409dcf
add esp, 0x10
mov ecx, edi
call fcn.00435706
mov ecx, ebx
call fcn.00435706
lea ecx, [esp + 0x1e8]
call fcn.00435706
lea esi, [esp + 0x28]
mov ecx, esi
call fcn.00435706
lea ecx, [esp + 0xa0]
call fcn.00435706
lea ecx, [esp + 8]
call fcn.00435706
lea ecx, [esp + 0x128]
call fcn.00435706
lea ecx, [esp + 0x18]
call fcn.00435706
mov edx, dword [esp + 0x220]
mov ecx, esi
push 0x45a548
push dword [esp + 0x22c]
call fcn.00405c93
pop eax
pop ecx
push 0x14
pop ecx
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
call fcn.0040f41f
test eax, eax
je 0x421ea6
xor ebx, ebx
mov dword [esp + 0xdc], edx
mov dword [esp + 4], eax
inc ebx
mov ecx, ebx
call fcn.00406492
test edx, edx
je 0x424acd
mov edi, eax
test eax, eax
js 0x424acd
mov ecx, edi
mov esi, edx
call fcn.0040aa6b
test eax, eax
je 0x424ad8
mov ecx, dword [esp + 4]
shr edx, 3
mov dword [esp + 4], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0xdc]
mov dword [eax + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 1
push 0x14
pop ecx
lea edi, [esp + 0x140]
lea esi, [esp + 0x190]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x140]
call fcn.0040f41f
test eax, eax
je 0x421e8a
mov esi, eax
cmp ebx, dword [esp + 0xc]
mov eax, dword [esp + 4]
mov edi, edx
jne 0x421e78
lea ecx, [esp + 8]
call fcn.0040a573
mov eax, dword [esp + 8]
mov dword [eax + ebx*8], esi
mov dword [eax + ebx*8 + 4], edi
inc ebx
mov dword [esp + 4], eax
mov dword [esp + 0x10], ebx
jmp 0x421e4d
movq xmm0, qword [esp + 8]
mov edx, dword [esp + 0x10]
movq qword [esp + 0xa0], xmm0
mov dword [esp + 0xa8], edx
jmp 0x421ec3
mov dword [esp + 0xa0], 4
and dword [esp + 0xa4], 0
and dword [esp + 0xa8], 0
xor edx, edx
cmp edx, 1
jbe 0x424ab3
mov eax, dword [esp + 0xa0]
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x1e8], ecx
mov dword [esp + 0x1ec], eax
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x90]
movdqa xmm0, xmmword [ecx]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x88]
lea eax, [eax + ecx + 1]
push 0x10
pop edx
add ecx, edx
mov dword [esp + 0x194], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x198], eax
pmovmskb eax, xmm0
not eax
mov word [esp + 0x19c], ax
mov dword [esp + 0x1a0], ecx
lea ecx, [esp + 0x190]
call fcn.0040f6e4
test eax, eax
je 0x422127
test edx, edx
je 0x422127
lea eax, [esp + 0x1e8]
mov dword [esp + 0x25c], edx
add edx, 0xc
mov edi, 0x434e3e
mov dword [esp + 0x140], 0x45c934
mov dword [esp + 0x28], eax
lea eax, [esp + 0x25c]
mov dword [esp + 0x2c], 0x4031e0
mov dword [esp + 0x244], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edi
push 2
pop esi
lea eax, [esp + 0x28]
lea ecx, [esp + 0x128]
mov ebx, eax
mov dword [esp + 0x144], esi
and dword [esp + 0x148], 0
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], esi
lea esi, [esp + 0x140]
mov edx, esi
call fcn.0042e970
lea eax, [esp + 0x214]
mov dword [esp + 0x140], 0x45c964
mov dword [esp + 0x28], eax
lea eax, [esp + 0x244]
mov dword [esp + 0x2c], 0x409e55
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edi
push 2
pop eax
lea ecx, [esp + 0x18]
mov edx, esi
mov edi, ebx
mov dword [esp + 0x144], eax
and dword [esp + 0x148], 0
mov dword [esp + 0x150], ebx
mov dword [esp + 0x154], eax
call fcn.0042e970
mov eax, dword [esp + 0x128]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 4], eax
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov ebx, eax
mov eax, dword [esp + 0x20]
movq xmm0, qword [esp + 0x18]
mov ecx, 0xffffed6c
mov dword [esp + 0x10], eax
lea eax, [0x4390dd]
movq qword [esp + 8], xmm0
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45c915]
push ecx
push 3
push esi
call eax
add esp, 0xc
mov cl, byte [esp + 0x142]
movzx eax, word [esp + 0x140]
lea edx, [esp + 0x204]
mov byte [esp + 0x206], cl
mov ecx, edi
mov word [esp + 0x204], ax
call fcn.004044d6
mov ecx, esi
lea edx, [esp + 8]
push 0
push 0
push 2
pop eax
push eax
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov edi, ebx
mov edx, esi
xor eax, eax
inc eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov esi, edx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea eax, [esp + 0x28]
mov edx, dword [esp + 0xdc]
push eax
push dword [esp + 8]
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea ecx, [esp + 0x128]
call fcn.00435706
jmp 0x421f3a
lea ecx, [esp + 0xa0]
call fcn.004050ad
lea ecx, [esp + 0x220]
call fcn.00435706
lea ecx, [esp + 0x250]
call fcn.00435706
lea ecx, [esp + 0x22c]
call fcn.00435706
lea ecx, [esp + 0x214]
call fcn.00435706
jmp 0x42198c
lea edi, [esp + 0xe0]
mov ecx, edi
call fcn.00404fa8
lea ecx, [esp + 0x140]
lea eax, [0x444df7]
mov dword [ecx], eax
mov eax, 0xffff3052
mov esi, ecx
add eax, dword [ecx]
lea ecx, [0x45c770]
push ecx
push 0x10
pop ecx
push ecx
lea ecx, [esp + 0x30]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x43c3ea]
lea ecx, [0x45c46c]
mov dword [esi], eax
mov eax, 0xffffba5f
add eax, dword [esi]
push ecx
push 0x28
lea esi, [esp + 0x148]
push esi
call eax
add esp, 0xc
xor ecx, ecx
mov dword [edi], esi
mov dword [esp + 0xa0], edi
mov ebx, edi
lea edi, [esp + 0x190]
mov eax, 0x4609e4
lea esi, [esp + 8]
mov dword [esp + 0xa4], 0x403235
inc ecx
mov dword [edi], eax
lea eax, [esp + 0xa0]
mov edx, edi
mov dword [esi], ecx
and dword [esi + 4], 0
mov dword [edi + 4], ecx
and dword [edi + 8], 0
and dword [esi + 8], 0
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], ecx
mov ecx, esi
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, esi
call fcn.0040a92f
lea eax, [0x44483a]
mov ecx, 0x45c9bc
mov dword [edi], eax
mov eax, 0xffff360f
add eax, dword [edi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push edi
call eax
add esp, 0xc
mov cl, byte [edi + 2]
movzx eax, word [edi]
lea edx, [esp + 0x18]
mov edi, ebx
mov byte [edx + 2], cl
mov ecx, ebx
mov word [edx], ax
call fcn.004044d6
lea ecx, [esp + 0x190]
mov edx, esi
push 0
push 0
mov ebx, 1
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov edx, dword [esp + 4]
lea esi, [esp + 0x190]
lea eax, [esp + 0xe0]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov dword [eax], edx
lea edi, [esp + 0x190]
lea edx, [esp + 0x28]
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov ecx, edi
mov ebx, edx
push eax
push 0x10
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, edi
call fcn.0040a262
lea eax, [0x43ef62]
lea esi, [esp + 0x140]
mov ecx, 0x45c9c4
mov edx, 0xffffff1d
mov dword [esi], eax
mov eax, 0xffff8ee7
add ecx, edx
add eax, dword [esi]
push ecx
push 7
pop ecx
push ecx
lea ecx, [esp + 0x20]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x440bc4]
mov ecx, 0x45c9d0
mov edx, 0xfffffdd3
mov dword [esi], eax
mov eax, 0xffff7285
add ecx, edx
add eax, dword [esi]
push ecx
push 0x11
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ecx, [esp + 8]
mov edx, edi
call fcn.00404975
lea eax, [0x4476cb]
mov ecx, 0x45c9e8
mov edx, 0xfffffe36
mov dword [esi], eax
mov eax, 0xffff077e
add ecx, edx
add eax, dword [esi]
push ecx
push 0xe
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0xe0]
mov edx, ebx
mov ecx, edi
call fcn.0040491a
mov ecx, esi
lea edx, [esp + 8]
push 0
push 0
mov ebx, 1
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xe0]
lea edi, [esp + 0x18]
lea esi, [esp + 0x140]
mov dword [ecx], eax
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov ebx, ecx
mov ecx, esi
mov edx, edi
push ebx
push 7
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x43e5f9]
mov ecx, 0x45c9fc
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xffff9850
add ecx, edx
add eax, dword [esi]
push ecx
push 6
pop ecx
push ecx
push edi
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x446cc7]
mov ecx, 0x45ca08
mov edx, 0xfffffb3f
mov dword [esi], eax
mov eax, 0xffff1182
add ecx, edx
add eax, dword [esi]
push 0x25
pop edx
push ecx
push edx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
lea ecx, [esp + 8]
mov edx, edi
call fcn.0040447b
lea eax, [0x43a19a]
mov ecx, 0x45ca34
mov edx, 0xfffffe15
mov dword [esi], eax
mov eax, 0xffffdcaf
add ecx, edx
add eax, dword [esi]
push ecx
push 0xf
pop ecx
push ecx
lea esi, [esp + 0x30]
push esi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, esi
mov edi, ebx
call fcn.004045e7
lea esi, [esp + 0x140]
lea edx, [esp + 8]
mov ecx, esi
push 0
push 0
mov ebx, 1
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea edx, [esp + 0x18]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
lea edi, [esp + 0xe0]
lea esi, [esp + 0x140]
mov dword [edi], eax
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov ecx, esi
push edi
mov ebx, edi
push 6
pop edi
push edi
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x4479cb]
mov ecx, 0x45ca48
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xffff047e
add ecx, edx
add eax, dword [esi]
push ecx
push edi
lea ecx, [esp + 0x10]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x4461f6]
lea ecx, [0x45c572]
mov dword [esi], eax
mov eax, 0xffff1c53
add eax, dword [esi]
push ecx
push 0x26
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
xor ecx, ecx
mov eax, 0x4609e4
mov dword [esp + 0x28], edi
lea edi, [esp + 0x140]
inc ecx
mov dword [esi], eax
lea eax, [esp + 0xa0]
mov edx, edi
mov dword [ebx], ecx
and dword [ebx + 4], 0
and dword [ebx + 8], 0
mov dword [esi + 4], ecx
and dword [esi + 8], 0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
lea esi, [esp + 0xe0]
lea ebx, [esp + 0x28]
mov ecx, esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x4033d6
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, esi
call fcn.0040a92f
lea eax, [0x4426ba]
mov ecx, 0x45ca80
mov dword [edi], eax
mov eax, 0xffff578f
add eax, dword [edi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop esi
push esi
push edi
call eax
add esp, 0xc
movzx eax, word [edi]
mov cl, byte [edi + 2]
lea edx, [esp + 0x18]
mov edi, ebx
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, ebx
call fcn.004044d6
lea ebx, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, ebx
push 0
push 0
push esi
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov esi, ebx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
xor eax, eax
lea esi, [esp + 0x140]
lea edi, [esp + 8]
inc eax
mov ecx, esi
mov edx, edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea eax, [esp + 0x28]
push eax
push 6
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x443687]
mov ecx, 0x45ca88
mov edx, 0xffffff1d
mov dword [esi], eax
mov eax, 0xffff47c2
add ecx, edx
add eax, dword [esi]
push ecx
push 7
pop ecx
push ecx
push edi
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x438e3e]
mov ecx, 0x45ca94
mov edx, 0xfffffafd
mov dword [esi], eax
mov eax, 0xfffff00b
add ecx, edx
add eax, dword [esi]
push 0x27
pop edx
push ecx
push edx
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0xe0]
mov edx, ebx
mov ecx, edi
call fcn.0040430f
lea eax, [0x438534]
mov ecx, 0x45cac0
mov dword [esi], eax
mov eax, 0xfffff915
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
lea esi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, esi
call fcn.004044d6
lea ecx, [esp + 0x140]
mov edx, edi
push 0
push 0
mov ebx, 1
push ebx
push esi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea esi, [esp + 0x140]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
lea esi, [esp + 0x140]
lea edi, [esp + 8]
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov ecx, esi
mov edx, edi
push eax
push 7
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x4406e3]
mov ecx, 0x45cac8
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xffff7766
add ecx, edx
add eax, dword [esi]
push ecx
push 6
pop ecx
push ecx
push edi
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x441469]
mov ecx, 0x45cad4
mov edx, 0xfffffdd3
mov dword [esi], eax
mov eax, 0xffff69e0
add ecx, edx
add eax, dword [esi]
push ecx
push 0x11
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0xe0]
mov edx, edi
call fcn.00404975
lea eax, [0x442260]
mov ecx, 0x45caec
mov dword [esi], eax
mov eax, 0xffff5be9
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop edi
push edi
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
lea esi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, esi
call fcn.004044d6
lea ebx, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, ebx
push 0
push 0
push edi
push esi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov esi, ebx
lea ebx, [esp + 0x140]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
mov eax, 1
lea esi, [esp + 8]
lea edi, [esp + 0x28]
mov ecx, ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov edx, esi
push edi
push 6
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, ebx
call fcn.0040a262
lea eax, [0x443af2]
lea ecx, [0x45ca74]
mov dword [ebx], eax
mov eax, 0xffff4357
add eax, dword [ebx]
push ecx
push 4
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov eax, dword [ebx]
mov dword [esi], eax
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x43f8c4]
lea ecx, [0x45c302]
mov dword [ebx], eax
mov eax, 0xffff8585
add eax, dword [ebx]
push ecx
push 0x3e
push ebx
call eax
add esp, 0xc
xor edx, edx
lea eax, [esp + 0xe0]
lea ecx, [esp + 0x190]
mov dword [esp + 0xa0], edi
lea esi, [esp + 0xe0]
lea edi, [esp + 0x190]
mov dword [esp + 0x28], ebx
mov dword [esp + 0xa4], 0x403359
inc edx
mov dword [eax], edx
and dword [eax + 4], 0
and dword [eax + 8], 0
mov eax, 0x4609e4
mov dword [ecx], eax
mov dword [ecx + 4], edx
and dword [ecx + 8], 0
lea eax, [esp + 0xa0]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], edx
mov ecx, esi
mov edx, edi
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, esi
call fcn.0040a92f
lea eax, [0x446953]
mov ecx, 0x45cb40
mov dword [edi], eax
mov eax, 0xffff14f6
add eax, dword [edi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop esi
push esi
push edi
call eax
add esp, 0xc
movzx eax, word [edi]
mov cl, byte [edi + 2]
lea edx, [esp + 0x18]
lea edi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, edi
call fcn.004044d6
lea ecx, [esp + 0x190]
lea edx, [esp + 0xe0]
push 0
push 0
push esi
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea esi, [esp + 0x190]
lea edx, [esp + 8]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
xor eax, eax
lea esi, [esp + 0x190]
mov edi, edx
inc eax
mov ecx, esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea eax, [esp + 0x28]
push eax
push 4
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x4425bd]
mov ecx, 0x45cb48
mov edx, 0xffffff3e
mov dword [ebx], eax
mov eax, 0xffff588c
add ecx, edx
add eax, dword [ebx]
push ecx
push 6
pop ecx
push ecx
push edi
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x43b186]
lea ecx, [0x45c77a]
mov dword [ebx], eax
mov eax, 0xffffccc3
add eax, dword [ebx]
push ecx
push 0x1e
push esi
call eax
add esp, 0xc
lea ecx, [esp + 0xe0]
mov edx, esi
call fcn.004048bf
lea eax, [0x43bb1f]
mov ecx, 0x45cb78
mov dword [ebx], eax
mov eax, 0xffffc32a
add eax, dword [ebx]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop edi
push edi
push ebx
call eax
add esp, 0xc
movzx eax, word [ebx]
mov cl, byte [ebx + 2]
lea edx, [esp + 0x18]
lea esi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, esi
call fcn.004044d6
lea ebx, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, ebx
push 0
push 0
push edi
push esi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov esi, ebx
lea ebx, [esp + 8]
mov edx, ebx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
xor eax, eax
lea esi, [esp + 0x140]
inc eax
mov ecx, esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea eax, [esp + 0x28]
push eax
push 6
pop edi
push edi
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x43c88a]
mov ecx, 0x45cb80
mov edx, 0xffffff3e
mov dword [esi], eax
mov eax, 0xffffb5bf
add ecx, edx
add eax, dword [esi]
push ecx
push edi
push ebx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov ebx, eax
lea eax, [0x43a6f2]
mov ecx, 0x45cb8c
mov edx, 0xfffffafd
mov dword [esi], eax
mov eax, 0xffffd757
add ecx, edx
add eax, dword [esi]
push ecx
push 0x27
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0xe0]
mov edx, edi
call fcn.0040430f
lea eax, [0x44091d]
mov ecx, 0x45cbb8
mov dword [esi], eax
mov eax, 0xffff752c
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
lea edi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, edi
call fcn.004044d6
lea esi, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, esi
push 0
push 0
push 2
pop eax
push eax
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov edi, ebx
mov eax, 1
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea esi, [esp + 0x140]
lea ebx, [esp + 8]
lea eax, [esp + 0x28]
mov ecx, esi
mov edx, ebx
push eax
push 6
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x4429bc]
mov ecx, 0x45cbc0
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffff548d
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop edi
push edi
push ebx
call eax
add esp, 0xc
push 0x28
pop ecx
mov edx, edi
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x4425e3]
lea ecx, [0x45c876]
mov dword [esi], eax
mov eax, 0xffff5866
add eax, dword [esi]
push ecx
push 0x1a
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
lea edi, [esp + 0xe0]
mov edx, ebx
mov ecx, edi
call fcn.00404b3c
lea eax, [0x43c4f2]
mov ecx, 0x45cbec
mov dword [esi], eax
mov eax, 0xffffb957
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
lea esi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, esi
call fcn.004044d6
lea ebx, [esp + 0x140]
mov edx, edi
mov ecx, ebx
push 0
push 0
push 2
pop eax
push eax
push esi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov esi, ebx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
xor eax, eax
lea esi, [esp + 0x140]
lea edi, [esp + 8]
inc eax
mov ecx, esi
mov edx, edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea eax, [esp + 0x28]
push eax
push 8
pop ebx
push ebx
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x4420ed]
mov ecx, 0x45cbf4
mov edx, 0xffffff5f
mov dword [esi], eax
mov eax, 0xffff5d5c
add ecx, edx
add eax, dword [esi]
push ecx
push 5
pop ecx
push ecx
push edi
call eax
add esp, 0xc
push 0x28
pop ecx
mov edx, ebx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x446660]
mov ecx, 0x45cc00
mov edx, 0xfffffe15
mov dword [esi], eax
mov eax, 0xffff17e9
add ecx, edx
add eax, dword [esi]
push ecx
push 0xf
pop ecx
push ecx
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0xe0]
mov edx, edi
call fcn.004045e7
lea eax, [0x43d250]
mov ecx, 0x45cc14
mov dword [esi], eax
mov eax, 0xffffabf9
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop edi
push edi
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
lea esi, [esp + 0x28]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, esi
call fcn.004044d6
lea ebx, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, ebx
push 0
push 0
push edi
push esi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov esi, ebx
lea ebx, [esp + 0x28]
lea edx, [esp + 8]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
mov eax, 1
lea esi, [esp + 0x140]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov ecx, esi
push ebx
push 5
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x444541]
mov ecx, 0x45cc1c
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffff3908
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop edi
push edi
lea ecx, [esp + 0x20]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
mov edx, edi
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x443d37]
lea ecx, [0x45c8b1]
mov dword [esi], eax
mov eax, 0xffff4112
add eax, dword [esi]
push ecx
push 0x1b
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
xor ecx, ecx
lea eax, [esp + 0xe0]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x28], edi
lea edi, [esp + 0x140]
lea ebx, [esp + 0xe0]
mov dword [esp + 0xa4], 0x40329d
inc ecx
mov edx, edi
mov dword [eax], ecx
and dword [eax + 4], 0
and dword [eax + 8], 0
mov eax, 0x4609e4
mov dword [esi], eax
mov dword [esi + 4], ecx
and dword [esi + 8], 0
lea eax, [esp + 0xa0]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov ecx, ebx
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, ebx
call fcn.0040a92f
lea eax, [0x43f0de]
mov ecx, 0x45cc48
mov edx, 0xfffffefc
mov dword [edi], eax
mov eax, 0xffff8d6b
add ecx, edx
add eax, dword [edi]
push ecx
push 8
pop ecx
push ecx
lea esi, [esp + 0x10]
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404864
lea esi, [esp + 0x140]
mov edx, ebx
mov ecx, esi
push 0
push 0
push 4
pop eax
push eax
push edi
mov ebx, edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea edx, [esp + 0x18]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
xor eax, eax
lea esi, [esp + 0x140]
inc eax
mov ecx, esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
push ebx
push 8
pop edi
push edi
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x43b511]
mov ecx, 0x45cc54
mov edx, 0xfffffe99
mov dword [esi], eax
mov eax, 0xffffc938
add ecx, edx
add eax, dword [esi]
push ecx
push 0xb
pop ecx
push ecx
lea ecx, [esp + 0x10]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
mov edx, edi
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x439ddf]
lea ecx, [0x45c9b3]
mov dword [esi], eax
mov eax, 0xffffe06a
add eax, dword [esi]
push ecx
push 0x15
lea edi, [esp + 0x198]
push edi
call eax
add esp, 0xc
lea ebx, [esp + 0xe0]
mov edx, edi
mov ecx, ebx
call fcn.004046f8
lea eax, [0x43d729]
mov ecx, 0x45cc80
mov edx, 0xfffffefc
mov dword [esi], eax
mov eax, 0xffffa720
add ecx, edx
add eax, dword [esi]
push ecx
push 8
pop ecx
push ecx
lea esi, [esp + 0x20]
push esi
call eax
add esp, 0xc
lea edi, [esp + 0x28]
mov edx, esi
mov ecx, edi
call fcn.00404864
lea esi, [esp + 0x140]
mov edx, ebx
mov ecx, esi
push 0
push 0
mov ebx, 1
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
lea edi, [esp + 0x140]
lea ebx, [esp + 8]
lea eax, [esp + 0x28]
mov ecx, edi
mov edx, ebx
push eax
push 0xb
pop esi
push esi
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, edi
call fcn.0040a262
lea eax, [0x446de5]
mov ecx, 0x45cc8c
mov edx, 0xfffffe99
mov dword [edi], eax
mov eax, 0xffff1064
add ecx, edx
add eax, dword [edi]
push ecx
push esi
push ebx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x43fbe3]
lea ecx, [0x45c715]
mov dword [edi], eax
mov eax, 0xffff8266
add eax, dword [edi]
push ecx
push 0x2b
push edi
call eax
add esp, 0xc
xor edx, edx
lea eax, [esp + 0xe0]
lea ecx, [esp + 0x190]
lea ebx, [esp + 0xe0]
lea esi, [esp + 0x190]
mov dword [esp + 0x28], edi
lea edi, [esp + 0x28]
inc edx
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], 0x40331a
mov dword [eax], edx
and dword [eax + 4], 0
and dword [eax + 8], 0
mov eax, 0x4609e4
mov dword [ecx], eax
mov dword [ecx + 4], edx
and dword [ecx + 8], 0
lea eax, [esp + 0xa0]
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], edx
mov ecx, ebx
mov edx, esi
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, ebx
call fcn.0040a92f
lea eax, [0x43b6f3]
mov ecx, 0x45cccc
mov dword [esi], eax
mov eax, 0xffffc756
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, edi
call fcn.004044d6
lea esi, [esp + 0x190]
mov edx, ebx
mov ecx, esi
push 0
push 0
mov eax, 1
push eax
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea edx, [esp + 8]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
mov eax, 1
lea esi, [esp + 0x190]
lea edi, [esp + 0x28]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov ecx, esi
push edi
push 0xb
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea eax, [0x444cfb]
lea ecx, [esp + 0x140]
mov edx, 0xfffffe36
mov dword [ecx], eax
mov eax, 0xffff314e
add eax, dword [ecx]
mov ecx, 0x45ccd4
add ecx, edx
push ecx
push 0xe
pop ecx
push ecx
push edi
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x444687]
lea edx, [esp + 0x140]
lea ecx, [0x45c6fe]
mov dword [edx], eax
mov eax, 0xffff37c2
add eax, dword [edx]
push ecx
push 0x2e
push edx
mov edi, edx
call eax
add esp, 0xc
xor ecx, ecx
lea eax, [esp + 8]
mov dword [ebx], edi
lea edi, [esp + 8]
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], 0x403413
inc ecx
mov dword [eax], ecx
and dword [eax + 4], 0
and dword [eax + 8], 0
mov eax, 0x4609e4
mov dword [esi], eax
mov dword [esi + 4], ecx
and dword [esi + 8], 0
lea eax, [esp + 0xa0]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
lea esi, [esp + 0x190]
mov ecx, edi
mov edx, esi
call fcn.00404c16
movzx ecx, al
call fcn.00406836
mov ecx, edi
call fcn.0040a92f
lea eax, [0x43ad37]
mov ecx, 0x45cd1c
mov dword [esi], eax
mov eax, 0xffffd112
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
mov byte [edx + 2], cl
mov word [edx], ax
lea edx, [esp + 0x18]
mov ecx, ebx
call fcn.004044d6
lea esi, [esp + 0x190]
mov edx, edi
mov ecx, esi
push 0
push 0
xor eax, eax
inc eax
push eax
push ebx
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea edx, [esp + 0x28]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [ebx], eax
xor eax, eax
lea edi, [esp + 0x190]
inc eax
mov ecx, edi
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push ebx
push 0xe
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, edi
call fcn.0040a262
lea eax, [0x441412]
lea esi, [esp + 0x140]
mov ecx, 0x45cd24
mov edx, 0xffffff5f
mov dword [esi], eax
mov eax, 0xffff6a37
add ecx, edx
add eax, dword [esi]
push ecx
push 5
pop ecx
push ecx
lea ecx, [esp + 0x10]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 4], eax
lea eax, [0x44508c]
mov ecx, 0x45cd30
mov edx, 0xfffffb3f
mov dword [esi], eax
mov eax, 0xffff2dbd
add ecx, edx
add eax, dword [esi]
push ecx
push 0x25
pop ecx
push ecx
push edi
call eax
add esp, 0xc
lea ebx, [esp + 0xe0]
mov edx, edi
mov ecx, ebx
call fcn.0040447b
lea eax, [0x44250b]
mov ecx, 0x45cd5c
mov dword [esi], eax
mov eax, 0xffff593e
add eax, dword [esi]
push 0xffffffffffffffa1
pop edx
add ecx, edx
push ecx
push 3
pop ecx
push ecx
push esi
call eax
add esp, 0xc
movzx eax, word [esi]
mov cl, byte [esi + 2]
lea edx, [esp + 0x18]
mov byte [edx + 2], cl
mov word [edx], ax
lea ecx, [esp + 0x28]
lea edx, [esp + 0x18]
mov edi, ecx
call fcn.004044d6
lea esi, [esp + 0x140]
mov edx, ebx
mov ecx, esi
push 0
push 0
xor ebx, ebx
inc ebx
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea edx, [esp + 8]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ebx
lea eax, [esp + 0x28]
mov dword [esp + 0xdc], ebx
mov dword [esp + 0x30], ebx
lea ebx, [esp + 0x140]
mov ecx, ebx
push eax
push 5
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, ebx
call fcn.0040a262
lea eax, [0x44674e]
lea ecx, [0x45c8e5]
mov dword [ebx], eax
mov eax, 0xffff16fb
add eax, dword [ebx]
push 0x23
pop edx
push ecx
push edx
push ebx
call eax
add esp, 0xc
lea eax, [0x43db86]
lea edi, [esp + 0x190]
mov ecx, 0x45cd8c
mov edx, 0xfffffe99
mov dword [edi], eax
mov eax, 0xffffa2c3
add ecx, edx
add eax, dword [edi]
push ecx
push 0xb
pop esi
push esi
push edi
call eax
add esp, 0xc
lea edi, [esp + 0x244]
mov edx, ebx
mov ecx, edi
push esi
lea eax, [esp + 0x194]
push eax
push 0x23
pop eax
push eax
call fcn.00411aea
add esp, 0xc
xor eax, eax
cmp dword [edi], eax
je 0x423653
movq xmm0, qword [esp + 0x244]
mov edx, dword [esp + 0x24c]
movq qword [esp + 0xe0], xmm0
mov dword [esp + 0xe8], edx
mov ecx, dword [esp + 0xe0]
call fcn.00447c10
test eax, eax
je 0x42363c
mov ecx, eax
call fcn.00447c10
test eax, eax
je 0x42363c
mov ebx, eax
lea eax, [0x43f954]
lea esi, [esp + 0x140]
lea ecx, [0x45ccda]
mov edi, edx
mov dword [esi], eax
mov eax, 0xffff84f5
add eax, dword [esi]
push ecx
push 6
pop ecx
push ecx
lea ecx, [esp + 0x20]
push ecx
call eax
add esp, 0xc
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
lea edx, [esp + 8]
mov dword [esp + 4], eax
mov dword [edx], ebx
mov dword [edx + 4], edi
lea edi, [esp + 0x28]
mov ecx, edi
call fcn.00404753
lea eax, [0x440d07]
lea ecx, [0x45cd49]
mov dword [esi], eax
mov eax, 0xffff7142
add eax, dword [esi]
push ecx
push 3
lea ecx, [esp + 0x148]
push ecx
call eax
add esp, 0xc
mov cl, byte [esi + 2]
movzx eax, word [esi]
lea edx, [esp + 0x128]
lea ebx, [esp + 0x190]
mov byte [edx + 2], cl
mov ecx, ebx
mov word [edx], ax
call fcn.004044d6
mov ecx, esi
mov edx, edi
push 0
push 0
push 4
pop eax
push eax
push ebx
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov eax, dword [esp + 4]
lea edx, [esp + 0x18]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x190], eax
xor eax, eax
lea esi, [esp + 0x140]
inc eax
mov ecx, esi
mov dword [esp + 0x194], eax
mov dword [esp + 0x198], eax
push ebx
push 6
pop eax
push eax
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea ecx, [esp + 0xe0]
call fcn.00435706
mov al, 1
mov dword [esp + 0x23c], eax
jmp 0x42365e
mov dword [esp + 0x23c], 0
lea eax, [0x443b4b]
lea ecx, [0x45ca39]
mov dword [esp + 0x140], eax
mov eax, 0xffff42fe
add eax, dword [esp + 0x140]
push 0x1b
pop edx
push ecx
push edx
lea ecx, [esp + 0x148]
push ecx
call eax
add esp, 0xc
lea eax, [0x4462e3]
lea ecx, [0x45cc8a]
mov dword [esp + 0x190], eax
mov eax, 0xffff1b66
add eax, dword [esp + 0x190]
push ecx
push 0xa
pop edi
push edi
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x214]
lea edx, [esp + 0x140]
mov ecx, esi
push edi
push ebx
push 0x1b
pop eax
push eax
call fcn.00411aea
add esp, 0xc
cmp dword [esi], 0
je 0x423b07
mov eax, dword [esp + 0x21c]
movq xmm0, qword [esp + 0x214]
lea edi, [esp + 0x140]
lea ecx, [0x45cc47]
mov dword [esp + 0x1f0], eax
lea eax, [0x43b843]
movq qword [esp + 0x1e8], xmm0
mov dword [edi], eax
mov eax, 0xffffc606
add eax, dword [edi]
push ecx
push 0xd
pop esi
push esi
lea ebx, [esp + 0x30]
push ebx
call eax
add esp, 0xc
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], esi
lea esi, [esp + 0x190]
lea eax, [esp + 0x1e8]
mov dword [edi], 0x45cde0
mov dword [esi], eax
lea eax, [esp + 0xe0]
mov dword [esi + 4], 0x409e55
mov dword [esi + 8], eax
mov dword [esi + 0xc], 0x4031e0
push 2
pop eax
lea ecx, [esp + 0x190]
lea ebx, [esp + 0xa0]
mov edx, edi
mov dword [edi + 4], eax
and dword [edi + 8], 0
mov dword [edi + 0x10], ecx
mov ecx, ebx
mov dword [edi + 0x14], eax
call fcn.0042e970
mov eax, dword [ebx + 8]
mov dword [esp + 0x128], 1
and dword [esp + 0x12c], 0
mov edx, dword [ebx]
and dword [esp + 0x130], 0
lea edi, [esp + 0x140]
mov ecx, edi
push eax
call fcn.004034b9
pop eax
mov ecx, edi
mov edx, 0x45ce04
call fcn.00406937
lea edx, [esp + 0x25c]
lea edi, [esp + 0x140]
mov dword [esp + 0x210], eax
mov dword [edx], eax
lea eax, [esp + 0x128]
mov ecx, edi
push eax
call fcn.00403669
pop eax
mov ecx, edi
mov edx, 0x45ce14
call fcn.004069a6
mov edx, dword [esp + 0x128]
lea edi, [esp + 0x140]
mov ecx, edi
push dword [esp + 0x130]
call fcn.00406b43
pop eax
mov ecx, esi
mov edx, edi
push 0x45ce24
call fcn.004069e1
pop eax
lea eax, [0x44452b]
lea ecx, [0x45cd72]
mov dword [edi], eax
mov eax, 0xffff391e
add eax, dword [edi]
push ecx
push 6
lea edi, [esp + 0x258]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
call fcn.004389b1
cmp byte [eax], 6
push 0xa
pop edi
jne 0x423ab9
add eax, 4
mov ecx, eax
call fcn.0040f5d2
mov dword [esp + 0x1f8], edx
cmp dword [esp + 0x1f8], eax
je 0x423ab9
mov dword [esp + 0x22c], eax
add eax, 0x20
mov ecx, 0xffff3775
mov dword [esp + 4], eax
lea eax, [0x4446d4]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45cd75]
push ecx
push 7
lea ebx, [esp + 0xe8]
push ebx
call eax
add esp, 0xc
lea eax, [esp + 0x1e8]
mov dword [esp + 0x28], 0x45ce40
mov dword [esp + 0x140], eax
lea eax, [esp + 0x22c]
mov dword [esp + 0x144], 0x409e55
mov dword [esp + 0x148], ebx
mov dword [esp + 0x14c], 0x40a4d7
mov dword [esp + 0x150], eax
mov eax, 0x4034a5
mov dword [esp + 0x154], eax
push 3
pop esi
lea edi, [esp + 0x28]
lea eax, [esp + 0x140]
lea ecx, [esp + 0x18]
mov edx, edi
mov dword [esp + 0x2c], esi
and dword [esp + 0x30], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], esi
call fcn.0042e970
lea eax, [0x44597d]
mov ecx, 0xffff24cc
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45cd15]
push ecx
push 0xb
push ebx
call eax
add esp, 0xc
mov dword [esp + 0x140], 0x45ce64
mov dword [esp + 0x144], esi
and dword [esp + 0x148], 0
lea eax, [esp + 0x22c]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 0x40a4c4
lea ecx, [esp + 8]
lea edx, [esp + 0x140]
mov dword [esp + 0x150], edi
mov dword [esp + 0x154], 2
mov dword [esp + 0x30], eax
mov eax, 0x4034a5
mov dword [esp + 0x34], eax
call fcn.0042e970
mov eax, dword [esp + 8]
mov dword [esp + 0x1e4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x124], eax
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x20]
movq xmm0, qword [esp + 0x18]
mov ecx, 0xffffb26d
mov dword [esp + 0xe8], eax
lea eax, [0x43cbdc]
movq qword [esp + 0xe0], xmm0
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45cd46]
push ecx
push 0xa
lea esi, [esp + 0x228]
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.00404a86
lea esi, [esp + 0x140]
mov edx, ebx
mov ecx, esi
push 0
push 0
xor ebx, ebx
inc ebx
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov edx, dword [esp + 0x1fc]
mov eax, esi
mov edi, edx
rep movsd dword es:[edi], dword [esi]
push 0xa
pop edi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x1e4]
mov ecx, eax
mov esi, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
push eax
push dword [esp + 0x128]
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, esi
call fcn.0040a262
lea ecx, [esp + 8]
call fcn.00435706
mov eax, dword [esp + 4]
jmp 0x42387b
lea ecx, [esp + 0x190]
call fcn.00405539
push dword [esp + 0x210]
call fcn.0044b794
lea ecx, [esp + 0x128]
call fcn.00435706
lea ecx, [esp + 0xa0]
call fcn.00435706
lea ecx, [esp + 0x1e8]
call fcn.00435706
mov al, 1
lea ebx, [esp + 0x190]
mov dword [esp + 0x210], eax
jmp 0x423b15
mov dword [esp + 0x210], 0
push 0xa
pop edi
lea eax, [0x4427b8]
lea ecx, [0x45cae3]
mov dword [esp + 0x140], eax
mov eax, 0xffff5691
add eax, dword [esp + 0x140]
push 0x1d
pop edx
push ecx
push edx
lea ecx, [esp + 0x148]
push ecx
call eax
add esp, 0xc
lea eax, [0x442fdc]
lea ecx, [0x45cd7a]
mov dword [esp + 0x190], eax
mov eax, 0xffff4e6d
add eax, dword [esp + 0x190]
push ecx
push edi
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x22c]
lea edx, [esp + 0x140]
mov ecx, esi
push edi
push ebx
push 0x1d
pop eax
push eax
call fcn.00411aea
add esp, 0xc
cmp dword [esi], 0
je 0x423c71
mov eax, dword [esp + 0x234]
movq xmm0, qword [esp + 0x22c]
lea esi, [esp + 0x140]
lea ecx, [0x45cd8a]
mov dword [esp + 0x20], eax
lea eax, [0x43b144]
movq qword [esp + 0x18], xmm0
mov dword [esi], eax
mov eax, 0xffffcd05
add eax, dword [esi]
push ecx
push edi
lea ebx, [esp + 0x30]
push ebx
call eax
add esp, 0xc
mov dword [esp + 0xe0], ebx
lea eax, [esp + 0x18]
lea ebx, [esp + 0xe0]
mov dword [esp + 0xe4], edi
mov dword [esi], 0x45cde0
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], 0x409e55
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], 0x4031e0
push 2
pop eax
lea ecx, [esp + 0x190]
lea edi, [esp + 8]
mov edx, esi
mov dword [esi + 4], eax
and dword [esi + 8], 0
mov dword [esi + 0x10], ecx
mov ecx, edi
mov dword [esi + 0x14], eax
call fcn.0042e970
mov edx, dword [edi]
lea esi, [esp + 0x140]
mov ecx, esi
push dword [edi + 8]
call fcn.00414261
pop eax
xor eax, eax
cmp dword [esi], eax
je 0x423c81
lea ecx, [esp + 8]
call fcn.00435706
lea ecx, [esp + 0x140]
call fcn.0040566a
jmp 0x423d2c
mov dword [esp + 0x238], 0
jmp 0x423d48
movsd xmm0, qword [esp + 0x154]
movsd xmm2, qword [esp + 0x144]
movsd xmm1, qword [esp + 0x14c]
lea eax, [0x44459d]
lea esi, [esp + 0x190]
lea ecx, [0x45cd58]
mov dword [esi], eax
mov eax, 0xffff38ac
movsd qword [esp + 0x38], xmm0
movsd qword [esp + 0x30], xmm1
movsd qword [esp + 0x28], xmm2
add eax, dword [esi]
push ecx
push 0xc
pop ecx
push ecx
push ebx
call eax
add esp, 0xc
mov ecx, esi
mov edx, ebx
call fcn.0040436a
push 0x18
pop ecx
push 4
pop edx
call fcn.0040a74c
movsd xmm0, qword [esp + 0x28]
movsd xmm1, qword [esp + 0x30]
lea ecx, [esp + 0x134]
mov edx, esi
movsd qword [eax], xmm0
movsd qword [eax + 8], xmm1
movq xmm0, qword [esp + 0x38]
movq qword [eax + 0x10], xmm0
mov dword [esi + 0xc], eax
xor eax, eax
inc eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
call fcn.0040a262
lea ecx, [esp + 8]
call fcn.00435706
lea ecx, [esp + 0x18]
call fcn.00435706
mov al, 1
mov dword [esp + 0x238], eax
push 0xa
pop edi
lea ebx, [esp + 0x190]
lea eax, [0x440e48]
lea ecx, [0x45cb37]
mov dword [esp + 0x140], eax
mov eax, 0xffff7001
add eax, dword [esp + 0x140]
push ecx
push 0x1d
pop ecx
push ecx
lea ecx, [esp + 0x148]
push ecx
call eax
add esp, 0xc
lea eax, [0x4387aa]
lea ecx, [0x45cdce]
mov dword [esp + 0x190], eax
mov eax, 0xfffff69f
add eax, dword [esp + 0x190]
push ecx
push edi
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x250]
lea edx, [esp + 0x140]
mov ecx, esi
push edi
push ebx
push 0x1d
pop eax
push eax
call fcn.00411aea
add esp, 0xc
cmp dword [esi], 0
je 0x4241fc
mov eax, dword [esp + 0x258]
movq xmm0, qword [esp + 0x250]
lea edi, [esp + 0x140]
lea ecx, [0x45cd7b]
mov dword [esp + 0x1f0], eax
lea eax, [0x438569]
movq qword [esp + 0x1e8], xmm0
mov dword [edi], eax
mov eax, 0xfffff8e0
add eax, dword [edi]
push ecx
push 0xd
pop ecx
push ecx
lea ecx, [esp + 0x30]
mov esi, ebx
mov ebx, ecx
push ecx
call eax
add esp, 0xc
mov dword [esp + 0xe0], ebx
push 0xd
pop eax
lea ecx, [esp + 0x190]
mov dword [edi], 0x45cde0
mov dword [esp + 0xe4], eax
lea eax, [esp + 0x1e8]
mov dword [ecx], eax
lea eax, [esp + 0xe0]
mov dword [ecx + 4], 0x409e55
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], 0x4031e0
push 2
pop eax
lea ebx, [esp + 0xa0]
mov edx, edi
mov ecx, ebx
mov dword [edi + 4], eax
and dword [edi + 8], 0
mov dword [edi + 0x10], esi
mov dword [edi + 0x14], eax
call fcn.0042e970
mov eax, dword [ebx + 8]
mov dword [esp + 0x128], 1
and dword [esp + 0x12c], 0
mov edx, dword [ebx]
and dword [esp + 0x130], 0
lea edi, [esp + 0x140]
mov ecx, edi
push eax
call fcn.004034b9
pop eax
mov ecx, edi
mov edx, 0x45cf38
call fcn.00406937
lea edx, [esp + 0x200]
lea edi, [esp + 0x140]
mov dword [esp + 0x20c], eax
mov dword [edx], eax
lea eax, [esp + 0x128]
mov ecx, edi
push eax
call fcn.00403669
pop eax
mov ecx, edi
mov edx, 0x45cf48
call fcn.004069a6
mov edx, dword [esp + 0x128]
lea edi, [esp + 0x140]
mov ecx, edi
push dword [esp + 0x130]
call fcn.00406b43
pop eax
lea esi, [esp + 0x190]
mov edx, edi
mov ecx, esi
push 0x45cf58
call fcn.004069e1
pop eax
lea eax, [0x43c636]
lea ecx, [0x45cea6]
mov dword [edi], eax
mov eax, 0xffffb813
add eax, dword [edi]
push ecx
push 6
lea edi, [esp + 0x264]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
lea esi, [esp + 0xe0]
call fcn.004389b1
cmp byte [eax], 6
jne 0x4241b5
add eax, 4
mov ecx, eax
call fcn.0040f5d2
mov dword [esp + 4], eax
mov dword [esp + 0x1f8], edx
mov eax, dword [esp + 4]
cmp dword [esp + 0x1f8], eax
je 0x4241b5
mov dword [esp + 0x204], eax
add eax, 0x20
mov ecx, 0xffffff6a
mov dword [esp + 4], eax
lea eax, [0x437edf]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45ce91]
push ecx
push 7
push esi
call eax
add esp, 0xc
lea eax, [esp + 0x1e8]
mov ebx, 0x4034a5
mov dword [esp + 0x28], 0x45ce40
mov dword [esp + 0x140], eax
lea eax, [esp + 0x204]
mov dword [esp + 0x144], 0x409e55
mov dword [esp + 0x148], esi
mov dword [esp + 0x14c], 0x40a4d7
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], ebx
push 3
pop esi
lea edi, [esp + 0x28]
lea eax, [esp + 0x140]
lea ecx, [esp + 0x18]
mov edx, edi
mov dword [esp + 0x2c], esi
and dword [esp + 0x30], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], esi
call fcn.0042e970
lea eax, [0x441460]
mov ecx, 0xffff69e9
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45cdf8]
push ecx
push 0xc
pop ecx
push ecx
lea ecx, [esp + 0xe8]
push ecx
call eax
add esp, 0xc
mov dword [esp + 0x140], 0x45ce64
mov dword [esp + 0x144], esi
and dword [esp + 0x148], 0
lea eax, [esp + 0xe0]
lea ecx, [esp + 8]
lea edx, [esp + 0x140]
mov dword [esp + 0x150], edi
mov dword [esp + 0x154], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x204]
mov dword [esp + 0x2c], 0x40a49e
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ebx
call fcn.0042e970
mov eax, dword [esp + 8]
mov dword [esp + 0x1e4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x124], eax
push 0x28
pop ecx
push 8
pop edx
call fcn.0040a74c
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x20]
movq xmm0, qword [esp + 0x18]
mov ecx, 0xfffff3b7
mov dword [esp + 0xe8], eax
lea eax, [0x438a92]
movq qword [esp + 0xe0], xmm0
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45ce4a]
push ecx
push 0xa
lea esi, [esp + 0x228]
push esi
call eax
add esp, 0xc
mov ecx, edi
mov edx, esi
call fcn.00404a86
lea esi, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, esi
push 0
push 0
xor ebx, ebx
inc ebx
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov edx, dword [esp + 0x1fc]
mov eax, esi
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], edx
lea esi, [esp + 0xe0]
mov ecx, eax
mov edi, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov edx, dword [esp + 0x1e4]
push eax
push dword [esp + 0x128]
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, edi
call fcn.0040a262
lea ecx, [esp + 8]
call fcn.00435706
jmp 0x423f6a
lea ecx, [esp + 0x190]
call fcn.00405539
push dword [esp + 0x20c]
call fcn.0044b794
lea ecx, [esp + 0x128]
call fcn.00435706
lea ecx, [esp + 0xa0]
call fcn.00435706
lea ecx, [esp + 0x1e8]
call fcn.00435706
mov al, 1
mov dword [esp + 0x20c], eax
jmp 0x424207
mov dword [esp + 0x20c], 0
lea eax, [0x43cdd3]
lea ecx, [0x45ccef]
mov dword [esp + 0x140], eax
mov eax, 0xffffb076
add eax, dword [esp + 0x140]
push ecx
push 0x15
pop ecx
push ecx
lea ecx, [esp + 0x148]
push ecx
call eax
add esp, 0xc
lea eax, [0x43a029]
lea ecx, [0x45ce76]
mov dword [esp + 0x190], eax
mov eax, 0xffffde20
add eax, dword [esp + 0x190]
push ecx
push 0xa
pop edi
push edi
lea ebx, [esp + 0x198]
push ebx
call eax
add esp, 0xc
lea esi, [esp + 0x220]
lea edx, [esp + 0x140]
mov ecx, esi
push edi
push ebx
push 0x15
pop eax
push eax
call fcn.00411aea
add esp, 0xc
xor edi, edi
cmp dword [esi], 0
je 0x4246c1
mov eax, dword [esp + 0x228]
movq xmm0, qword [esp + 0x220]
lea edi, [esp + 0x140]
lea ecx, [0x45ce23]
mov dword [esp + 0x1f0], eax
lea eax, [0x43ca1b]
movq qword [esp + 0x1e8], xmm0
mov dword [edi], eax
mov eax, 0xffffb42e
add eax, dword [edi]
push ecx
push 0xd
pop esi
push esi
lea ebx, [esp + 0x30]
push ebx
call eax
add esp, 0xc
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], esi
mov dword [edi], 0x45cde0
push 2
pop eax
lea ecx, [esp + 0x190]
lea esi, [esp + 0x190]
lea ebx, [esp + 0xa0]
mov edx, edi
mov dword [edi + 4], eax
and dword [edi + 8], 0
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], eax
lea eax, [esp + 0x1e8]
mov ecx, ebx
mov dword [esi], eax
lea eax, [esp + 0xe0]
mov dword [esi + 4], 0x409e55
mov dword [esi + 8], eax
mov dword [esi + 0xc], 0x4031e0
call fcn.0042e970
mov eax, dword [ebx + 8]
mov dword [esp + 0x128], 1
and dword [esp + 0x12c], 0
mov edx, dword [ebx]
and dword [esp + 0x130], 0
lea edi, [esp + 0x140]
mov ecx, edi
push eax
call fcn.004034b9
pop eax
mov ecx, edi
mov edx, 0x45cfe0
call fcn.00406937
lea edx, [esp + 0x270]
lea edi, [esp + 0x140]
mov dword [esp + 0x268], eax
mov dword [edx], eax
lea eax, [esp + 0x128]
mov ecx, edi
push eax
call fcn.00403669
pop eax
mov ecx, edi
mov edx, 0x45cff0
call fcn.004069a6
mov edx, dword [esp + 0x128]
lea edi, [esp + 0x140]
mov ecx, edi
push dword [esp + 0x130]
call fcn.00406b43
pop eax
mov ecx, esi
mov edx, edi
push 0x45d000
call fcn.004069e1
pop eax
lea eax, [0x43e3c8]
lea ecx, [0x45cf4e]
mov dword [edi], eax
mov eax, 0xffff9a81
add eax, dword [edi]
push ecx
push 6
lea edi, [esp + 0x20c]
push edi
call eax
add esp, 0xc
mov ecx, esi
mov edx, edi
lea esi, [esp + 0xe0]
call fcn.004389b1
cmp byte [eax], 6
jne 0x42467f
add eax, 4
mov ecx, eax
call fcn.0040f5d2
mov dword [esp + 4], eax
mov dword [esp + 0x1f8], edx
mov eax, dword [esp + 4]
cmp dword [esp + 0x1f8], eax
je 0x42467f
mov dword [esp + 0x200], eax
add eax, 0x20
mov ecx, 0xfffff04e
mov dword [esp + 4], eax
lea eax, [0x438dfb]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45cf39]
push ecx
push 7
push esi
call eax
add esp, 0xc
lea eax, [esp + 0x1e8]
mov dword [esp + 0x28], 0x45ce40
mov dword [esp + 0x140], eax
lea eax, [esp + 0x200]
mov dword [esp + 0x144], 0x409e55
mov dword [esp + 0x148], esi
mov dword [esp + 0x14c], 0x40a4d7
mov dword [esp + 0x150], eax
mov eax, 0x4034a5
mov dword [esp + 0x154], eax
push 3
pop edi
lea ebx, [esp + 0x28]
lea eax, [esp + 0x140]
lea ecx, [esp + 0x18]
mov edx, ebx
mov dword [esp + 0x2c], edi
and dword [esp + 0x30], 0
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
call fcn.0042e970
lea eax, [0x43b95d]
mov ecx, 0xffffc4ec
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45cf24]
push ecx
push 8
pop esi
push esi
lea ecx, [esp + 0xe8]
push ecx
call eax
add esp, 0xc
mov dword [esp + 0x140], 0x45ce64
mov dword [esp + 0x144], edi
and dword [esp + 0x148], 0
lea eax, [esp + 0xe0]
lea edx, [esp + 0x200]
mov ecx, 0x4034a5
mov dword [esp + 0x150], ebx
mov dword [esp + 0x154], 2
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x40a4b1
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ecx
lea ecx, [esp + 8]
lea edx, [esp + 0x140]
call fcn.0042e970
mov eax, dword [esp + 8]
mov dword [esp + 0x1e4], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x124], eax
push 0x28
pop ecx
mov edx, esi
call fcn.0040a74c
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x20]
movq xmm0, qword [esp + 0x18]
mov ecx, 0xffffde28
mov dword [esp + 0xe8], eax
lea eax, [0x43a021]
movq qword [esp + 0xe0], xmm0
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x140]
add eax, ecx
lea ecx, [0x45ceee]
push ecx
push 0xa
lea esi, [esp + 0x264]
push esi
call eax
add esp, 0xc
mov ecx, ebx
mov edx, esi
mov edi, ebx
call fcn.00404a86
lea esi, [esp + 0x140]
lea edx, [esp + 0xe0]
mov ecx, esi
push 0
push 0
xor ebx, ebx
inc ebx
push ebx
push edi
call fcn.004143c3
add esp, 0x10
push 0xa
pop ecx
mov edx, dword [esp + 0x1fc]
mov eax, esi
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], edx
lea esi, [esp + 0xe0]
mov ecx, eax
mov edi, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov edx, dword [esp + 0x1e4]
push eax
push dword [esp + 0x128]
call fcn.00424b39
pop eax
pop ecx
lea ecx, [esp + 0x134]
mov edx, edi
call fcn.0040a262
lea ecx, [esp + 8]
call fcn.00435706
jmp 0x42442e
lea ecx, [esp + 0x190]
call fcn.00405539
push dword [esp + 0x268]
call fcn.0044b794
lea ecx, [esp + 0x128]
call fcn.00435706
lea ecx, [esp + 0xa0]
call fcn.00435706
lea ecx, [esp + 0x1e8]
call fcn.00435706
mov bl, 1
xor edi, edi
jmp 0x4246c3
xor ebx, ebx
mov eax, dword [esp + 0x134]
imul esi, dword [esp + 0x13c], 0x18
mov ecx, dword [esp + 0x138]
lea edx, [esp + 0x190]
add esi, eax
mov dword [edx], eax
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov dword [edx + 0xc], esi
and dword [edx + 0x10], 0
and dword [edx + 0x2c], 0
lea esi, [esp + 0x28]
mov ecx, esi
call fcn.00402160
cmp dword [esi], edi
je 0x424924
movq xmm0, qword [esp + 0x38]
movsd xmm2, qword [esp + 0x28]
movsd xmm1, qword [esp + 0x30]
lea esi, [esp + 0xe0]
lea edx, [esp + 0x190]
mov ecx, esi
movq qword [esp + 0x150], xmm0
movsd qword [esp + 0x148], xmm1
movsd qword [esp + 0x140], xmm2
call fcn.0040228e
mov ecx, dword [esi]
xor eax, eax
dec eax
inc ecx
cmove ecx, eax
call fcn.004064ad
test edx, edx
je 0x424acd
mov esi, eax
test eax, eax
mov dword [esp + 0x124], ebx
js 0x424acd
mov ecx, esi
mov edi, edx
call fcn.0040aa6b
mov ebx, eax
test eax, eax
je 0x424b2b
mov eax, edx
xor edx, edx
push 0x18
pop ecx
div ecx
mov edx, ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x140]
movq xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd xmm2, qword [eax + 0x10]
movsd qword [ebx + 0x10], xmm2
movsd qword [ebx + 8], xmm1
movq qword [ebx], xmm0
push 0x12
pop ecx
lea esi, [esp + 0x190]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, eax
mov esi, edx
lea ecx, [esp + 0xe0]
mov edx, edi
call fcn.00402160
cmp dword [esp + 0xe0], 0
je 0x4248e9
mov eax, dword [esp + 4]
movsd xmm0, qword [esp + 0xf0]
movsd xmm2, qword [esp + 0xe0]
movsd xmm1, qword [esp + 0xe8]
cmp dword [esp + 0xdc], eax
movsd qword [esp + 0x38], xmm0
movsd qword [esp + 0x30], xmm1
movsd qword [esp + 0x28], xmm2
jne 0x4248b3
lea ecx, [esp + 8]
mov edx, edi
call fcn.0040228e
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
mov eax, 0xffffffff
inc ecx
cmove ecx, eax
add ecx, edx
jb 0x424ac3
lea eax, [edx + edx]
cmp eax, ecx
cmova ecx, eax
push 4
pop eax
cmp ecx, eax
cmovbe ecx, eax
call fcn.004064ad
mov ecx, dword [esp + 4]
mov edi, edx
test ecx, ecx
je 0x42487a
imul ecx, ecx, 0x18
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 4
jmp 0x42487f
and dword [esp + 8], 0
mov edx, eax
lea eax, [esp + 8]
lea ecx, [esp + 0x18]
push eax
push edi
call fcn.00435478
pop eax
pop ecx
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x18], 1
je 0x424ac7
xor edx, edx
push 0x18
pop ecx
lea edi, [esp + 0x140]
div ecx
movsd xmm0, qword [esp + 0x38]
inc dword [esp + 0xdc]
mov dword [esp + 4], eax
movsd qword [ebx + esi + 0x10], xmm0
movq xmm0, qword [esp + 0x28]
movsd xmm1, qword [esp + 0x30]
movsd qword [ebx + esi + 8], xmm1
movq qword [ebx + esi], xmm0
add esi, 0x18
jmp 0x4247c8
lea ecx, [esp + 0xe0]
call fcn.00405b67
lea ecx, [esp + 0x140]
call fcn.004050f1
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xdc]
mov dword [eax], ebx
mov ebx, dword [esp + 0x124]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
jmp 0x424945
mov eax, dword [esp + 0x240]
lea ecx, [esp + 0x190]
mov dword [eax], 4
and dword [eax + 4], 0
and dword [eax + 8], 0
call fcn.004050f1
cmp dword [esp + 0x220], 0
sete al
or bl, al
jne 0x424960
lea ecx, [esp + 0x220]
call fcn.00435706
cmp dword [esp + 0x250], 0
mov ecx, dword [esp + 0x20c]
sete al
or cl, al
jne 0x424982
lea ecx, [esp + 0x250]
call fcn.00435706
cmp dword [esp + 0x22c], 0
mov ecx, dword [esp + 0x238]
sete al
or cl, al
jne 0x4249a4
lea ecx, [esp + 0x22c]
call fcn.00435706
cmp dword [esp + 0x214], 0
mov ecx, dword [esp + 0x210]
sete al
or cl, al
jne 0x4249c6
lea ecx, [esp + 0x214]
call fcn.00435706
cmp dword [esp + 0x244], 0
mov ecx, dword [esp + 0x23c]
sete al
or cl, al
jne 0x4249e8
lea ecx, [esp + 0x244]
call fcn.00435706
lea ecx, [esp + 0x274]
call fcn.00405902
mov eax, dword [esp + 0x88]
test eax, eax
je 0x424a67
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
lea esi, [esp + 0x140]
movdqa xmm0, xmmword [ecx]
lea eax, [eax + ecx + 1]
add ecx, 0x10
mov dword [esi], edx
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x98]
mov dword [esi + 8], eax
pmovmskb eax, xmm0
not eax
mov word [esi + 0xc], ax
mov dword [esi + 0x10], ecx
mov ecx, esi
call fcn.0040f6e4
test eax, eax
je 0x424a5b
mov ecx, edx
mov edi, edx
call fcn.00435706
add edi, 0xc
mov ecx, edi
call fcn.00435706
jmp 0x424a3b
mov ecx, dword [esp + 0x26c]
call fcn.0040fcaa
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x144], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x148], eax
push 0x2b
pop edx
mov ecx, 0x461d58
push 0x45c8c4
push 0x459730
lea eax, [esp + 0x148]
push eax
call fcn.004323e0
add esp, 0xc
ud2
xor ecx, ecx
inc ecx
push 0x45c924
call fcn.00430940
pop eax
ud2
xor eax, eax
jmp 0x424ac9
mov ecx, ebx
test eax, eax
jne 0x424ad4
call fcn.0042e8c0
ud2
mov edx, eax
jmp 0x424adc
mov ecx, edi
mov edx, esi
call fcn.0042e8b0
ud2
call fcn.0044b6ec
xor edx, edx
lea ecx, [esp + 0x28]
lea esi, [esp + 0xb0]
mov byte [ecx], 0
mov dword [esi], ecx
mov dword [ecx + 4], eax
lea ecx, [esp + 0x140]
inc edx
mov dword [esi + 4], 0x4427d0
mov dword [ecx], 0x4619c4
mov dword [ecx + 4], edx
and dword [ecx + 8], 0
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], edx
mov edx, 0x4619cc
call fcn.00443620
ud2
mov ecx, esi
mov edx, edi
jmp 0x424adc
push 0x20
pop ecx
push 8
pop edx
jmp 0x424adc