Function at 0x5ba8c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x18
push ebx
push esi
lea eax, [esp + 8]
push eax
push 0x40000000
mov ecx, 0x968a18
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.0040fcf0
lea ecx, [esp + 8]
push ecx
lea edx, [esp + 0x18]
push edx
mov ecx, 0x968a00
mov dword [esp + 0x10], 0x40000000
mov dword [esp + 0x14], 0x40000000
mov dword [esp + 0x18], 0x40000000
mov dword [esp + 0x1c], 0xc0000000
mov dword [esp + 0x20], 0xc0000000
mov dword [esp + 0x24], 0xc0000000
call fcn.0040ede0
lea eax, [esp + 0x14]
xor ebx, ebx
push eax
push 0x40000000
mov ecx, 0x968a48
mov byte [0x968a28], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968a30
mov dword [esp + 0x1c], 0x40000000
mov dword [esp + 0x20], 0x40000000
mov dword [esp + 0x24], 0x40000000
mov dword [esp + 0x10], 0xc0000000
mov dword [esp + 0x14], 0xc0000000
mov dword [esp + 0x18], 0xc0000000
call fcn.0040ede0
lea eax, [esp + 0x14]
push eax
push 0x40000000
mov ecx, 0x968a78
mov byte [0x968a58], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968a60
mov dword [esp + 0x1c], 0x40000000
mov dword [esp + 0x20], 0x40000000
mov dword [esp + 0x24], 0x40000000
mov dword [esp + 0x10], 0xc0000000
mov dword [esp + 0x14], 0xc0000000
mov dword [esp + 0x18], 0xc0000000
call fcn.0040ede0
lea eax, [esp + 0x14]
push eax
push 0x40000000
mov ecx, 0x968aa8
mov byte [0x968a88], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
mov dword [esp + 0x14], 0x40000000
mov dword [esp + 0x18], 0x40000000
mov dword [esp + 0x1c], 0x40000000
mov dword [esp + 8], 0xc0000000
mov dword [esp + 0xc], 0xc0000000
mov dword [esp + 0x10], 0xc0000000
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968a90
call fcn.0040ede0
lea eax, [esp + 0x14]
push eax
push 0x40000000
mov ecx, 0x968ad8
mov byte [0x968ab8], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968ac0
mov dword [esp + 0x1c], 0x40000000
mov dword [esp + 0x20], 0x40000000
mov dword [esp + 0x24], 0x40000000
mov dword [esp + 0x10], 0xc0000000
mov dword [esp + 0x14], 0xc0000000
mov dword [esp + 0x18], 0xc0000000
call fcn.0040ede0
lea eax, [esp + 0x14]
push eax
push 0x40000000
mov ecx, 0x968b08
mov byte [0x968ae8], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968af0
mov dword [esp + 0x1c], 0x40000000
mov dword [esp + 0x20], 0x40000000
mov dword [esp + 0x24], 0x40000000
mov dword [esp + 0x10], 0xc0000000
mov dword [esp + 0x14], 0xc0000000
mov dword [esp + 0x18], 0xc0000000
call fcn.0040ede0
push ebx
push ebx
push ebx
push 2
push ebx
push 3
mov ecx, 0x968df0
mov byte [0x968b18], bl
call fcn.0040f870
mov esi, dword [0x968e1c]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x3e
lea eax, [esp + 0x20]
push eax
push 0x3eb33333
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], 0xbe4ccccc
call fcn.0040fd10
push 0xff
push 1
push 0x3e
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3eb33333
add ecx, 0x14
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], 0x3e4cccd0
call fcn.0040fd10
mov dword [esp + 0x14], ebx
mov ecx, dword [esi + 8]
push 0xff
push 2
push 0x3e
lea edx, [esp + 0x20]
push edx
push 0x3eb33333
add ecx, 0x28
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], 0x3f19999a
call fcn.0040fd10
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0xbf800000
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.0040ef10
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc]
push eax
add ecx, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0x3f800000
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.0040ef10
lea ecx, [esp + 0x14]
push ecx
push 0x3f800000
mov ecx, 0x968e08
mov byte [esi + 6], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc]
push eax
mov ecx, 0x968df0
mov dword [esp + 0x1c], 0x3eb33333
mov dword [esp + 0x20], 0x3eb33333
mov dword [esp + 0x24], 0x3f733333
mov dword [esp + 0x10], 0xbeb33333
mov dword [esp + 0x14], 0xbeb33333
mov dword [esp + 0x18], 0xbf800000
call fcn.0040ede0
push ebx
push ebx
push ebx
push 2
push ebx
push 9
mov ecx, 0x968e20
mov byte [0x968e18], bl
call fcn.0040f870
mov esi, dword [0x968e4c]
push 0xff
push ebx
push 0x3e
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3eb33333
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], 0xbe4ccccc
call fcn.0040fd10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], 0x3e4cccd0
mov ecx, dword [esi + 8]
push 0xff
push 1
push 0x3e
lea edx, [esp + 0x20]
push edx
push 0x3eb33333
add ecx, 0x14
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push 2
push 0x3e
lea eax, [esp + 0x20]
push eax
push 0x3eb33333
add ecx, 0x28
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], 0x3f19999a
call fcn.0040fd10
push 0xff
push 6
push 0x3e
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e051eb8
add ecx, 0x3c
mov dword [esp + 0x28], 0x3e3851ec
mov dword [esp + 0x2c], 0x3eb33333
mov dword [esp + 0x30], 0x3f400000
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push 6
push 0x3e
lea edx, [esp + 0x20]
push edx
push 0x3e051eb8
add ecx, 0x50
mov dword [esp + 0x28], 0x3e3851ec
mov dword [esp + 0x2c], 0x3f000000
mov dword [esp + 0x30], 0x3f400000
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push 5
push 0x3e
lea eax, [esp + 0x20]
push eax
push 0x3e051eb8
add ecx, 0x64
mov dword [esp + 0x28], 0xbe3851ec
mov dword [esp + 0x2c], 0x3eb33333
mov dword [esp + 0x30], 0x3f400000
call fcn.0040fd10
push 0xff
push 5
push 0x3e
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e051eb8
add ecx, 0x78
mov dword [esp + 0x28], 0xbe3851ec
mov dword [esp + 0x2c], 0x3f000000
mov dword [esp + 0x30], 0x3f400000
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push 8
push 0x3e
lea edx, [esp + 0x20]
push edx
push 0x3e4ccccd
add ecx, 0x8c
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 0x3f000000
mov dword [esp + 0x30], 0x3ee66668
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push 4
push 0x3e
lea eax, [esp + 0x20]
push eax
push 0x3eb33333
add ecx, 0xa0
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 0x3f0ccccd
mov dword [esp + 0x30], 0x3e4cccd0
call fcn.0040fd10
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [esi + 0x10]
lea edx, [esp + 0xc]
push edx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0xbf800000
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.0040ef10
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, dword [esi + 0x10]
add ecx, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0x3f800000
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.0040ef10
lea edx, [esp + 0x14]
push edx
push 0x3f800000
mov ecx, 0x968e38
mov byte [esi + 6], bl
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, 0x968e20
mov dword [esp + 0x1c], 0x3eb33333
mov dword [esp + 0x20], 0x3f666666
mov dword [esp + 0x24], 0x3f733333
mov dword [esp + 0x10], 0xbeb33333
mov dword [esp + 0x14], 0xbeb33333
mov dword [esp + 0x18], 0xbf800000
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 3
mov ecx, 0x968e50
mov byte [0x968e48], bl
call fcn.0040f870
mov esi, dword [0x968e7c]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea edx, [esp + 0x20]
push edx
push 0x3e19999a
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 0xbe800000
mov dword [esp + 0x30], 0xbeb33333
call fcn.0040fd10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0xbf733333
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea eax, [esp + 0x20]
push eax
push 0x3e19999a
add ecx, 0x14
mov dword [esp + 0x30], 0xbeb33333
call fcn.0040fd10
push 0xff
push ebx
push 0x40
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e800000
add ecx, 0x28
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 0xbf19999a
mov dword [esp + 0x30], 0x3e800000
call fcn.0040fd10
lea edx, [esp + 0x14]
push edx
push 0x3fc00000
mov ecx, 0x968e68
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], 0xbf19999a
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, 0x968e50
mov dword [esp + 0x1c], 0x3e99999a
mov dword [esp + 0x20], 0xbf99999a
mov dword [esp + 0x24], 0x3f19999a
mov dword [esp + 0x10], 0xbe99999a
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0xbf19999a
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
mov ecx, 0x968e80
mov byte [0x968e78], bl
call fcn.0040f870
mov esi, dword [0x968eac]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea edx, [esp + 0x20]
push edx
push 0x3e19999a
mov dword [esp + 0x28], 0x3f59999a
mov dword [esp + 0x2c], 0xbd4ccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea eax, [esp + 0x20]
push eax
push 0x3e19999a
add ecx, 0x14
mov dword [esp + 0x28], 0x3ecccccd
mov dword [esp + 0x2c], 0x3d4ccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
push 0xff
push ebx
mov dword [esp + 0x1c], 0xbecccccd
mov dword [esp + 0x20], 0x3d4ccccd
mov dword [esp + 0x24], ebx
push 0x40
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e19999a
add ecx, 0x28
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea edx, [esp + 0x20]
push edx
push 0x3e19999a
add ecx, 0x3c
mov dword [esp + 0x28], 0xbf59999a
mov dword [esp + 0x2c], 0xbd4ccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
lea eax, [esp + 0x14]
push eax
push 0x400ccccd
mov ecx, 0x968e98
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968e80
mov dword [esp + 0x1c], 0x3f99999a
mov dword [esp + 0x20], 0x3e99999a
mov dword [esp + 0x24], 0x3e4ccccd
mov dword [esp + 0x10], 0xbf99999a
mov dword [esp + 0x14], 0xbe99999a
mov dword [esp + 0x18], 0xbe4ccccd
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
mov ecx, 0x968eb0
mov byte [0x968ea8], bl
call fcn.0040f870
mov esi, dword [0x968edc]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea eax, [esp + 0x20]
push eax
push 0x3e19999a
mov dword [esp + 0x28], 0x3e19999a
mov dword [esp + 0x2c], 0x3ee66666
mov dword [esp + 0x30], ebx
call fcn.0040fd10
push 0xff
push ebx
push 0x40
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e19999a
add ecx, 0x14
mov dword [esp + 0x28], 0x3e19999a
mov dword [esp + 0x2c], 0xbee66666
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], 0xbe19999a
mov dword [esp + 0x28], 0xbee66666
mov dword [esp + 0x2c], ebx
push 0x3e19999a
add ecx, 0x28
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea eax, [esp + 0x20]
push eax
push 0x3e19999a
add ecx, 0x3c
mov dword [esp + 0x28], 0xbe19999a
mov dword [esp + 0x2c], 0x3ee66666
mov dword [esp + 0x30], ebx
call fcn.0040fd10
lea ecx, [esp + 0x14]
push ecx
push 0x3fb33333
mov ecx, 0x968ec8
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc]
push eax
mov ecx, 0x968eb0
mov dword [esp + 0x1c], 0x3e99999a
mov dword [esp + 0x20], 0x3f19999a
mov dword [esp + 0x24], 0x3e19999a
mov dword [esp + 0x10], 0xbe99999a
mov dword [esp + 0x14], 0xbf19999a
mov dword [esp + 0x18], 0xbe19999a
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
mov ecx, 0x968ee0
mov byte [0x968ed8], bl
call fcn.0040f870
mov esi, dword [0x968f0c]
push 0xff
push ebx
push 0x40
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e4ccccd
mov dword [esp + 0x28], 0xbecccccd
mov dword [esp + 0x2c], 0x3dcccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea edx, [esp + 0x20]
push edx
push 0x3e4ccccd
add ecx, 0x14
mov dword [esp + 0x28], 0xbecccccd
mov dword [esp + 0x2c], 0x3f666666
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea eax, [esp + 0x20]
push eax
push 0x3e4ccccd
add ecx, 0x28
mov dword [esp + 0x28], 0x3ecccccd
mov dword [esp + 0x2c], 0x3dcccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov dword [esp + 0x14], 0x3ecccccd
mov dword [esp + 0x18], 0x3f666666
push 0xff
push ebx
push 0x40
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e4ccccd
add ecx, 0x3c
mov dword [esp + 0x30], ebx
call fcn.0040fd10
lea edx, [esp + 0x14]
push edx
push 0x3fd9999a
mov ecx, 0x968ef8
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], 0x3f000000
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, 0x968ee0
mov dword [esp + 0x1c], 0x3f333333
mov dword [esp + 0x20], 0x3f99999a
mov dword [esp + 0x24], 0x3e99999a
mov dword [esp + 0x10], 0xbf333333
mov dword [esp + 0x14], 0xbe4ccccd
mov dword [esp + 0x18], 0xbe99999a
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 4
mov ecx, 0x968f10
mov byte [0x968f08], bl
call fcn.0040f870
mov esi, dword [0x968f3c]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea edx, [esp + 0x20]
push edx
push 0x3e4ccccd
mov dword [esp + 0x28], 0xbecccccd
mov dword [esp + 0x2c], 0xbdcccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x40
lea eax, [esp + 0x20]
push eax
push 0x3e4ccccd
add ecx, 0x14
mov dword [esp + 0x28], 0xbecccccd
mov dword [esp + 0x2c], 0xbf19999a
mov dword [esp + 0x30], ebx
call fcn.0040fd10
push 0xff
push ebx
push 0x40
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e4ccccd
add ecx, 0x28
mov dword [esp + 0x28], 0x3ecccccd
mov dword [esp + 0x2c], 0xbdcccccd
mov dword [esp + 0x30], ebx
call fcn.0040fd10
push 0xff
push ebx
mov dword [esp + 0x1c], 0x3ecccccd
mov dword [esp + 0x20], 0xbf19999a
mov dword [esp + 0x24], ebx
push 0x40
mov ecx, dword [esi + 8]
lea edx, [esp + 0x20]
push edx
push 0x3e4ccccd
add ecx, 0x3c
call fcn.0040fd10
lea eax, [esp + 0x14]
push eax
push 0x3fb33333
mov ecx, 0x968f28
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], 0xbecccccd
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968f10
mov dword [esp + 0x1c], 0x3f333333
mov dword [esp + 0x20], 0x3e4ccccd
mov dword [esp + 0x24], 0x3e99999a
mov dword [esp + 0x10], 0xbf333333
mov dword [esp + 0x14], 0xbf666666
mov dword [esp + 0x18], 0xbe99999a
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 2
mov ecx, 0x968f40
mov byte [0x968f38], bl
call fcn.0040f870
mov esi, dword [0x968f6c]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x3c
lea eax, [esp + 0x20]
push eax
push 0x3eb33333
mov dword [esp + 0x28], 0xbe99999a
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.0040fd10
push 0xff
push ebx
push 0x3c
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3eb33333
add ecx, 0x14
mov dword [esp + 0x28], 0x3e99999a
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.0040fd10
lea edx, [esp + 0x14]
push edx
push 0x3fb33333
mov ecx, 0x968f58
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xc]
push ecx
mov ecx, 0x968f40
mov dword [esp + 0x1c], 0x3f333333
mov dword [esp + 0x20], 0x3ecccccd
mov dword [esp + 0x24], 0x3ecccccd
mov dword [esp + 0x10], 0xbf333333
mov dword [esp + 0x14], 0xbecccccd
mov dword [esp + 0x18], 0xbecccccd
call fcn.0040ede0
mov byte [0x968f68], bl
push ebx
push ebx
push ebx
push ebx
push ebx
push 2
mov ecx, 0x968f70
call fcn.0040f870
mov esi, dword [0x968f9c]
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x3e
lea edx, [esp + 0x20]
push edx
push 0x3e4ccccd
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.0040fd10
mov ecx, dword [esi + 8]
push 0xff
push ebx
push 0x3e
lea eax, [esp + 0x20]
push eax
push 0x3e4ccccd
add ecx, 0x14
mov dword [esp + 0x28], 0x3f4ccccd
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.0040fd10
lea ecx, [esp + 0x14]
push ecx
push 0x3f333333
mov ecx, 0x968f88
mov dword [esp + 0x1c], 0x3ecccccd
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0xc]
push eax
mov ecx, 0x968f70
mov dword [esp + 0x1c], 0x3f8ccccd
mov dword [esp + 0x20], 0x3e99999a
mov dword [esp + 0x24], 0x3e99999a
mov dword [esp + 0x10], 0xbe99999a
mov dword [esp + 0x14], 0xbe99999a
mov dword [esp + 0x18], 0xbe99999a
call fcn.0040ede0
push ebx
push ebx
push ebx
push ebx
push ebx
push 2
mov ecx, 0x968fa0
mov byte [0x968f98], bl
call fcn.0040f870
mov esi, dword [0x968fcc]
push 0xff
push ebx
push 0x3e
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esi + 8]
push 0x3e19999a
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.0040fd10
push 0xff
push ebx
push 0x3e
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], 0x3f000000
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
push 0x3e19999a
mov ecx, dword [esi + 8]
add ecx, 0x14
call fcn.0040fd10
lea eax, [esp + 0x14]
push eax
push 0x3f000000
mov ecx, 0x968fb8
mov dword [esp + 0x1c], 0x3e800000
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
call fcn.0040fcf0
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc]
push edx
mov ecx, 0x968fa0
mov dword [esp + 0x1c], 0x3f333333
mov dword [esp + 0x20], 0x3e4ccccd
mov dword [esp + 0x24], 0x3e4ccccd
mov dword [esp + 0x10], 0xbe4ccccd
mov dword [esp + 0x14], 0xbe4ccccd
mov dword [esp + 0x18], 0xbe4ccccd
call fcn.0040ede0
mov dword [esp + 8], 0xbe800000
mov eax, dword [esp + 8]
mov dword [esp + 0xc], 0xbe800000
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], 0xbe800000
mov edx, dword [esp + 0x10]
mov dword [0x968fd0], eax
mov dword [0x968fd4], ecx
mov dword [0x968fd8], edx
mov dword [esp + 8], 0x3e800000
mov eax, dword [esp + 8]
mov dword [esp + 0xc], 0x3e800000
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], 0x3e800000
mov edx, dword [esp + 0x10]
pop esi
mov byte [0x968fc8], bl
mov dword [0x968ff4], 0x3e800000
mov dword [0x968fdc], eax
mov dword [0x968fe0], ecx
mov dword [0x968fe4], edx
pop ebx
add esp, 0x18
ret