Function at 0x432400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4a969e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x168
mov eax, dword [0x4d14fc]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x18], eax
xor ebp, ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x180], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebp
push ebp
lea ecx, [esp + 0x1c]
mov byte [esp + 0x184], 3
call fcn.004374f0
mov dword [esp + 0x40], ebp
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x184], 4
mov dword [esp + 0x14], esp
mov dword [eax], str.Animal.xml
call fcn.00437570
mov bl, 5
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.item
call fcn.00437a70
test al, al
je 0x4331ae
lea ecx, [esp + 0xe8]
call fcn.004012e0
lea ecx, [esp + 0x18]
mov byte [esp + 0x180], bl
call fcn.00438890
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], 0x4cfaf8
call fcn.00437a70
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0xf0]
mov byte [esp + 0x184], 6
call fcn.0049608e
lea ecx, [esp + 0x9c]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.name
call fcn.00437a70
lea ecx, [esp + 0xd8]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0xf4]
mov byte [esp + 0x184], 7
call fcn.0049608e
lea ecx, [esp + 0xd8]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.gender
call fcn.00437a70
lea edx, [esp + 0xe0]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0xf8]
mov byte [esp + 0x184], 8
call fcn.0049608e
lea ecx, [esp + 0xe0]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.mhours
call fcn.00437a70
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0xfc]
mov byte [esp + 0x184], 9
call fcn.0049608e
lea ecx, [esp + 0x5c]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
mov dword [esp + 0x14], esp
mov eax, esp
lea ecx, [esp + 0x1c]
mov dword [eax], str.grass
call fcn.00437a70
lea ecx, [esp + 0xa4]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x100]
mov byte [esp + 0x184], 0xa
call fcn.0049608e
lea ecx, [esp + 0xa4]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.price
call fcn.00437a70
lea edx, [esp + 0x64]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x104]
mov byte [esp + 0x184], 0xb
call fcn.0049608e
lea ecx, [esp + 0x64]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.mname
call fcn.00437a70
lea eax, [esp + 0xe4]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x108]
mov byte [esp + 0x184], 0xc
call fcn.0049608e
lea ecx, [esp + 0xe4]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.mprice
call fcn.00437a70
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x10c]
mov byte [esp + 0x184], 0xd
call fcn.0049608e
lea ecx, [esp + 0x6c]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.munits
call fcn.00437a70
lea edx, [esp + 0xac]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
mov byte [esp + 0x180], 0xe
push eax
lea ecx, [esp + 0x110]
call fcn.0049608e
lea ecx, [esp + 0xac]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.phours
call fcn.00437a70
lea eax, [esp + 0x74]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x114]
mov byte [esp + 0x184], 0xf
call fcn.0049608e
lea ecx, [esp + 0x74]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.units
call fcn.00437a70
lea ecx, [esp + 0xcc]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x118]
mov byte [esp + 0x184], 0x10
call fcn.0049608e
lea ecx, [esp + 0xcc]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.stealnum
call fcn.00437a70
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x11c]
mov byte [esp + 0x184], 0x11
call fcn.0049608e
lea ecx, [esp + 0x7c]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.pname
call fcn.00437a70
lea eax, [esp + 0xb4]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x120]
mov byte [esp + 0x184], 0x12
call fcn.0049608e
lea ecx, [esp + 0xb4]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
mov dword [esp + 0x14], esp
mov eax, esp
lea ecx, [esp + 0x1c]
mov dword [eax], 0x4cfe90
call fcn.00437a70
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x120]
mov byte [esp + 0x184], 0x13
call fcn.0049608e
lea ecx, [esp + 0x84]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.pprice
call fcn.00437a70
lea edx, [esp + 0xdc]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x128]
mov byte [esp + 0x184], 0x14
call fcn.0049608e
lea ecx, [esp + 0xdc]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.ppresent
call fcn.00437a70
lea eax, [esp + 0x8c]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x184], 0x15
call fcn.0049608e
lea ecx, [esp + 0x8c]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.punits
call fcn.00437a70
lea ecx, [esp + 0xbc]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x130]
mov byte [esp + 0x184], 0x16
call fcn.0049608e
lea ecx, [esp + 0xbc]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.bpname
call fcn.00437a70
lea edx, [esp + 0x94]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
mov byte [esp + 0x180], 0x17
push eax
lea ecx, [esp + 0x134]
call fcn.0049608e
lea ecx, [esp + 0x94]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.bpprice
call fcn.00437a70
lea eax, [esp + 0xd4]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x138]
mov byte [esp + 0x184], 0x18
call fcn.0049608e
lea ecx, [esp + 0xd4]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.paction
call fcn.00437a70
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x13c]
mov byte [esp + 0x184], 0x19
call fcn.0049608e
lea ecx, [esp + 0x54]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.mpresent
call fcn.00437a70
lea edx, [esp + 0xc4]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x140]
mov byte [esp + 0x184], 0x1a
call fcn.0049608e
lea ecx, [esp + 0xc4]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.rank
call fcn.00437a70
lea eax, [esp + 0x58]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x144]
mov byte [esp + 0x184], 0x1b
call fcn.0049608e
lea ecx, [esp + 0x58]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
mov dword [esp + 0x14], esp
mov eax, esp
lea ecx, [esp + 0x1c]
mov dword [eax], str.arank
call fcn.00437a70
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x148]
mov byte [esp + 0x184], 0x1c
call fcn.0049608e
lea ecx, [esp + 0x60]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.phour
call fcn.00437a70
lea edx, [esp + 0x68]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x14c]
mov byte [esp + 0x184], 0x1d
call fcn.0049608e
lea ecx, [esp + 0x68]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.pdaynum
call fcn.00437a70
lea eax, [esp + 0x70]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x150]
mov byte [esp + 0x184], 0x1e
call fcn.0049608e
lea ecx, [esp + 0x70]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.pmin_num
call fcn.00437a70
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x154]
mov byte [esp + 0x184], 0x1f
call fcn.0049608e
lea ecx, [esp + 0x78]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.pmax_num
call fcn.00437a70
lea edx, [esp + 0x80]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
mov byte [esp + 0x180], 0x20
push eax
lea ecx, [esp + 0x158]
call fcn.0049608e
lea ecx, [esp + 0x80]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.bskey
call fcn.00437a70
lea eax, [esp + 0x88]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0x184], 0x21
call fcn.0049608e
lea ecx, [esp + 0x88]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.skey
call fcn.00437a70
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x160]
mov byte [esp + 0x184], 0x22
call fcn.0049608e
lea ecx, [esp + 0x90]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.bnum
call fcn.00437a70
lea edx, [esp + 0x98]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x164]
mov byte [esp + 0x184], 0x23
call fcn.0049608e
lea ecx, [esp + 0x98]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], str.bbuy
call fcn.00437a70
lea eax, [esp + 0xa0]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x16c]
mov byte [esp + 0x184], 0x24
call fcn.0049608e
lea ecx, [esp + 0xa0]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
mov dword [esp + 0x14], esp
mov eax, esp
lea ecx, [esp + 0x1c]
mov dword [eax], str.status
call fcn.00437a70
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00418c80
push eax
lea ecx, [esp + 0x170]
mov byte [esp + 0x184], 0x25
call fcn.0049608e
lea ecx, [esp + 0xa8]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], 0x4cfa04
call fcn.00437a70
lea edx, [esp + 0xb0]
lea ecx, [esp + 0x18]
push edx
call fcn.00418c80
push eax
lea ecx, [esp + 0x174]
mov byte [esp + 0x184], 0x26
call fcn.0049608e
lea ecx, [esp + 0xb0]
mov byte [esp + 0x180], bl
call fcn.00495f55
push ecx
lea ecx, [esp + 0x1c]
mov eax, esp
mov dword [esp + 0x14], esp
mov dword [eax], 0x4cfa00
call fcn.00437a70
lea eax, [esp + 0xb8]
lea ecx, [esp + 0x18]
push eax
call fcn.00418c80
push eax
lea ecx, [esp + 0x178]
mov byte [esp + 0x184], 0x27
call fcn.0049608e
lea ecx, [esp + 0xb8]
mov byte [esp + 0x180], bl
call fcn.00495f55
lea ecx, [esp + 0x18]
call fcn.004388d0
mov ecx, dword [esp + 0xc0]
mov eax, 0x38e38e39
mov esi, dword [ecx + 0x18c]
lea edi, [ecx + 0x184]
mov ebp, esi
mov ecx, dword [edi + 0xc]
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x4330ab
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x432f5d
mov edx, esi
mov eax, 0x38e38e39
sub edx, ecx
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
mov dword [esp + 0x14], edx
ja 0x432f65
mov dword [esp + 0x14], 1
test ecx, ecx
jne 0x432f6d
xor edx, edx
jmp 0x432f80
sub esi, ecx
mov eax, 0x38e38e39
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov eax, dword [esp + 0x14]
add eax, edx
test eax, eax
mov dword [esp + 0xd0], eax
jge 0x432f93
xor eax, eax
lea ecx, [eax + eax*8]
shl ecx, 4
push ecx
call fcn.00495c96
mov esi, dword [edi + 4]
add esp, 4
cmp esi, ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
je 0x432fd7
mov edx, dword [esp + 0x14]
push esi
push edx
call fcn.00433870
mov edx, dword [esp + 0x1c]
add esi, 0x90
add esp, 8
add edx, 0x90
cmp esi, ebp
mov dword [esp + 0x14], edx
jne 0x432fb1
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0xe8]
push eax
push ecx
call fcn.00433870
mov eax, dword [edi + 8]
add esp, 8
cmp ebp, eax
mov dword [esp + 0xc8], eax
je 0x433025
mov edx, dword [esp + 0x14]
lea esi, [edx + 0x90]
push ebp
push esi
call fcn.00433870
mov eax, dword [esp + 0xd0]
add ebp, 0x90
add esp, 8
add esi, 0x90
cmp ebp, eax
jne 0x433004
mov esi, dword [edi + 8]
mov ebp, dword [edi + 4]
cmp ebp, esi
je 0x433042
mov eax, dword [ebp]
push 0
mov ecx, ebp
call dword [eax]
add ebp, 0x90
cmp ebp, esi
jne 0x43302f
mov eax, dword [edi + 4]
push eax
call fcn.00495cbf
mov eax, dword [esp + 0xd4]
mov esi, dword [esp + 0x14]
add esp, 4
lea ecx, [eax + eax*8]
mov eax, dword [edi + 4]
shl ecx, 4
add ecx, esi
test eax, eax
mov dword [edi + 0xc], ecx
jne 0x433081
xor edx, edx
mov dword [edi + 4], esi
lea ecx, [edx + edx*8 + 9]
shl ecx, 4
add ecx, esi
mov dword [edi + 8], ecx
jmp 0x433193
mov ecx, dword [edi + 8]
mov dword [edi + 4], esi
sub ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [edx + edx*8 + 9]
shl ecx, 4
add ecx, esi
mov dword [edi + 8], ecx
jmp 0x433193
mov ecx, esi
mov eax, 0x38e38e39
sub ecx, ebp
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x433154
cmp ebp, esi
mov eax, ebp
je 0x4330eb
lea ecx, [eax + 0x90]
push eax
push ecx
mov dword [esp + 0x18], ecx
call fcn.00433870
mov eax, dword [esp + 0x18]
add esp, 8
cmp eax, esi
jne 0x4330cf
mov esi, dword [edi + 8]
mov eax, 0x38e38e39
mov ecx, esi
sub ecx, ebp
imul ecx
sar edx, 5
mov ecx, edx
mov eax, 1
shr ecx, 0x1f
add edx, ecx
sub eax, edx
je 0x433132
mov dword [esp + 0x14], eax
lea edx, [esp + 0xe8]
push edx
push esi
call fcn.00433870
mov eax, dword [esp + 0x1c]
add esp, 8
add esi, 0x90
dec eax
mov dword [esp + 0x14], eax
jne 0x433110
mov esi, dword [edi + 8]
cmp ebp, esi
je 0x43318c
lea eax, [esp + 0xe8]
mov ecx, ebp
push eax
call fcn.00402c90
add ebp, 0x90
cmp ebp, esi
jne 0x433139
jmp 0x43318c
push esi
push esi
add esi, 0xffffff70
mov ecx, edi
push esi
call fcn.00433300
mov eax, dword [edi + 8]
push eax
add eax, 0xffffff70
push eax
push ebp
call fcn.00433670
lea ecx, [esp + 0xf4]
lea edx, [ebp + 0x90]
push ecx
push edx
push ebp
call fcn.00433340
add esp, 0x18
add dword [edi + 8], 0x90
lea ecx, [esp + 0xe8]
mov byte [esp + 0x180], 4
call fcn.00401450
xor ebp, ebp
jmp 0x432485
mov eax, dword [esp + 0x4c]
xor esi, esi
dec eax
mov dword [esp + 0x180], 0x29
sar eax, 0x10
inc eax
test eax, eax
jle 0x4331e6
mov ecx, dword [esp + 0x48]
mov eax, dword [ecx + esi*4]
push eax
call fcn.00495cbf
mov edx, dword [esp + 0x50]
add esp, 4
inc esi
dec edx
sar edx, 0x10
inc edx
cmp esi, edx
jl 0x4331c8
mov eax, dword [esp + 0x48]
cmp eax, ebp
je 0x4331f7
push eax
call fcn.00495cbf
add esp, 4
mov ecx, dword [esp + 0x44]
cmp ecx, ebp
je 0x43323a
xor edi, edi
mov eax, dword [edi + ecx]
cmp eax, ebp
je 0x433229
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push 0x418d40
push ecx
push 0xc
push eax
call fcn.00458982
push esi
call fcn.00495cbf
mov ecx, dword [esp + 0x48]
add esp, 4
add edi, 4
cmp edi, 0x1c
jl 0x433201
push ecx
call fcn.00495cbf
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x44], ebp
mov byte [esp + 0x180], 0x28
call fcn.00495f55
lea ecx, [esp + 0x18]
mov dword [esp + 0x180], 0xffffffff
call fcn.00495f55
mov ecx, dword [esp + 0x178]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x174
ret