Function at 0x464255
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x180
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402848
mov edx, 0x5211c8
lea ecx, [ebp - 0x168]
call fcn.00404766
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x46432e
mov word [ebp - 0x1c], 0x36
mov word [ebp - 0xcc], 0x48
mov word [ebp - 0xb8], 0x1a
mov word [ebp - 0x74], 0x6c
mov word [ebp - 0x44], 0x34
mov word [ebp - 0xf0], 0x70
mov word [ebp - 0x70], 0x35
mov word [ebp - 0x94], 0xc1
mov word [ebp - 0x40], 0x72
mov word [ebp - 0x6c], 0x69
mov word [ebp - 0x68], 0x2b
mov word [ebp - 0x90], 0x7a
mov word [ebp - 0x18], 0x22
mov word [ebp - 0x8c], 0xac
jmp 0x464463
mov dword [ebp - 0x13c], 2
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4643c3
mov word [ebp - 0x1c], 0x3c
and word [ebp - 0xcc], 0
and word [ebp - 0xb8], 0
mov word [ebp - 0x74], 0x68
mov word [ebp - 0x44], 0x39
mov word [ebp - 0xf0], 0x6c
mov word [ebp - 0x70], 0x3b
and word [ebp - 0x94], 0
mov word [ebp - 0x40], 0x6f
mov word [ebp - 0x6c], 0x61
mov word [ebp - 0x68], 0x2f
mov word [ebp - 0x90], 0x74
mov word [ebp - 0x18], 0x1c
and word [ebp - 0x8c], 0
jmp 0x464463
mov word [ebp - 0x1c], 0x12
mov word [ebp - 0xcc], 0x1b
mov word [ebp - 0xb8], 1
mov word [ebp - 0x74], 0xd9
mov word [ebp - 0x44], 0xcd
mov word [ebp - 0xf0], 0x28
mov word [ebp - 0x70], 0x11
mov word [ebp - 0x94], 0xca
mov word [ebp - 0x40], 0xe1
mov word [ebp - 0x6c], 0xcf
mov word [ebp - 0x68], 0xcb
mov word [ebp - 0x90], 0xde
mov word [ebp - 0x18], 8
mov word [ebp - 0x8c], 4
cmp word [0x521220], 0x1e
jl 0x464463
mov word [ebp - 0x68], 0xbe
mov word [ebp - 0x44], 0xc0
mov word [ebp - 0x94], 0xbd
mov word [ebp - 0x6c], 0xd0
mov word [ebp - 0x74], 0xcc
mov word [ebp - 0x40], 0xd4
mov word [ebp - 0x90], 0xd1
mov word [0x5210dc], 2
mov edx, 0x40e424
lea ecx, [ebp - 0x88]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x13c], al
mov dword [ebp - 0x144], 0x11
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0xc8]
call fcn.004048d4
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x178]
call fcn.00404766
mov ax, word [ebp - 0x1c]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x464682
push dword [ebp - 0x88]
push 0x40e434
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xf0]
jne 0x46467d
push dword [ebp - 0x88]
push 0x40c0c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x466301
mov dword [ebp - 0x13c], 0xce
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x4646e2
mov dword [ebp - 0x14c], 0xc1
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x464919
push dword [ebp - 0x88]
push 0x40e444
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x46483c
push dword [ebp - 0x88]
push 0x40bf4c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x46477c
push dword [ebp - 0x88]
push 0x40bffc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x28
jne 0x464914
push dword [ebp - 0x88]
push 0x40c0c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x466301
mov ax, word [ebp - 0xcc]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x464c55
push dword [ebp - 0x88]
push 0x40de68
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.0044506b
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xf0]
jne 0x464c50
push dword [ebp - 0x88]
push 0x40c0c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x51
jne 0x464bc0
push dword [ebp - 0x88]
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
mov edx, 0x40e45c
lea ecx, [ebp - 0xf4]
call fcn.004048b0
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0044b956
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea ecx, [ebp - 0xf4]
call fcn.00404868
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x466301
mov ax, word [ebp - 0xf0]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x465eb6
mov dword [ebp - 0x13c], 0x40c0c0
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov dword [ebp - 0x13c], 2
mov dword [ebp - 0x144], 0x8002
push 0x5211c8
lea eax, [ebp - 0x144]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x464e40
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x8c]
jne 0x464dd1
mov dword [ebp - 0x13c], 0x40dd2c
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
lea eax, [ebp - 0x104]
push eax
call fcn.0044506b
mov dword [ebp - 0x13c], 0x40bffc
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x464e3e
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
mov dword [ebp - 0x13c], 0x40bffc
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x464ead
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
mov dword [ebp - 0x13c], 0x40bffc
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x74]
jne 0x465121
push dword [ebp - 0x88]
push 0x40e474
call fcn.0040486e
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov edx, 0x40e490
lea ecx, [ebp - 0xf4]
call fcn.004048b0
mov word [ebp - 0x158], 0xd2
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0044b956
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x64]
call fcn.004048d4
lea ecx, [ebp - 0xf4]
call fcn.00404868
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x44]
jne 0x464fe7
mov dword [ebp - 0x13c], 0x40e1a0
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x64]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x70]
jne 0x4650d1
push dword [ebp - 0x88]
push 0x40c2a4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.0044b7fc
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea ecx, [ebp - 0x104]
call fcn.00404844
jmp 0x465eb1
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea ecx, [ebp - 0x104]
call fcn.00404844
mov edx, 0x40e490
lea ecx, [ebp - 0xf4]
call fcn.004048b0
mov word [ebp - 0x158], 0xd2
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0044b956
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xb4]
call fcn.004048d4
lea ecx, [ebp - 0xf4]
call fcn.00404868
mov dword [ebp - 0x13c], 0x40a6cc
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0xa4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x70]
jne 0x46531d
mov dword [ebp - 0x13c], 0x40c2a4
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0xa4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xbc
jne 0x4652aa
mov dword [ebp - 0x13c], 0x40e4a8
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xa4]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
lea eax, [ebp - 0x104]
push eax
call fcn.0044b7fc
mov dword [ebp - 0x13c], 0x40bffc
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xa4]
call fcn.004048d4
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40e4bc
lea ecx, [ebp - 0xf4]
call fcn.004048b0
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0044b956
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x2c]
call fcn.004048d4
lea ecx, [ebp - 0xf4]
call fcn.00404868
mov dword [ebp - 0x13c], 0x40a6cc
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x13c], al
mov dword [ebp - 0x144], 0x11
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0xc8]
call fcn.004048d4
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x188]
call fcn.00404766
mov ax, word [ebp - 0x94]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x46543b
mov dword [ebp - 0x13c], 0x40e4cc
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xcc
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x465497
mov dword [ebp - 0x14c], 0xbf
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4654d7
mov dword [ebp - 0x13c], 0x40dd98
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd1
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x465533
mov dword [ebp - 0x14c], 0xc4
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x465573
mov dword [ebp - 0x13c], 0x40ddb8
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov ax, word [ebp - 0x6c]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4655e2
mov dword [ebp - 0x13c], 0x40de58
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd0
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x46563e
mov dword [ebp - 0x14c], 0xc3
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x46567e
mov dword [ebp - 0x13c], 0x40dda8
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd2
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x4656da
mov dword [ebp - 0x14c], 0xc5
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x46571a
mov dword [ebp - 0x13c], 0x40ddc8
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd3
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x465776
mov dword [ebp - 0x14c], 0xc6
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4657b6
mov dword [ebp - 0x13c], 0x40ddd8
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd7
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x465812
mov dword [ebp - 0x14c], 0xca
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x465852
mov dword [ebp - 0x13c], 0x40de18
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd8
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x4658ae
mov dword [ebp - 0x14c], 0xcb
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4658ee
mov dword [ebp - 0x13c], 0x40de28
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xd4
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x46594a
mov dword [ebp - 0x14c], 0xc7
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x46598a
mov dword [ebp - 0x13c], 0x40dde8
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov dword [ebp - 0x13c], 0xbb
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4659f8
mov dword [ebp - 0x13c], 0x40e4e4
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov ax, word [ebp - 0x68]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x465cff
mov dword [ebp - 0x13c], 0x40dd50
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x90]
jne 0x465cff
mov dword [ebp - 0x13c], 0x40c590
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x18c], al
mov ecx, dword [ebp - 0x18]
call fcn.004046b8
cmp byte [ebp - 0x18c], al
jne 0x465b5c
mov dword [ebp - 0x13c], 0x40c284
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov cx, 0xd1
call fcn.004046b8
cmp byte [ebp - 0x18c], al
je 0x465b7e
mov cx, 0xc4
call fcn.004046b8
cmp byte [ebp - 0x18c], al
jne 0x465bd4
mov dword [ebp - 0x13c], 0x40dd7c
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
jmp 0x465cff
mov cx, 0xbf
call fcn.004046b8
cmp byte [ebp - 0x18c], al
jne 0x465c3b
mov ax, word [0x5210dc]
add ax, 2
jo 0x466413
mov word [0x5210dc], ax
mov dword [ebp - 0x13c], 0x40c284
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
jmp 0x465cff
mov cx, 0xfb
call fcn.004046b8
cmp byte [ebp - 0x18c], al
jne 0x465cc1
lea eax, [ebp - 0x104]
push eax
call fcn.00443e26
mov dword [ebp - 0x13c], 0x40bffc
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x465cff
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea ecx, [ebp - 0x104]
call fcn.00404844
mov edx, 0x40deb4
lea ecx, [ebp - 0xf4]
call fcn.004048b0
mov word [ebp - 0x158], 0x30
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0044b956
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xdc]
call fcn.004048d4
lea ecx, [ebp - 0xf4]
call fcn.00404868
lea eax, [ebp - 0x104]
push eax
call fcn.0044c548
mov dword [ebp - 0x13c], 0x40bffc
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xec]
call fcn.004048d4
lea ecx, [ebp - 0x104]
call fcn.00404844
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x466301
mov dword [ebp - 0x13c], 0xd7
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x465f16
mov dword [ebp - 0x14c], 0xca
mov dword [ebp - 0x154], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4661e1
push dword [ebp - 0x88]
push 0x40e4f4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.0044506b
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xd0
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xc3
setne cl
and ebx, ecx
test ebx, ebx
jne 0x4660f2
push dword [ebp - 0x88]
push 0x40e504
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x28
jne 0x4661dc
push dword [ebp - 0x88]
push 0x40c0c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
mov dword [ebp - 0x14c], 0x40bffc
mov dword [ebp - 0x154], 8
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x466301
mov dword [ebp - 0x13c], 0xbe
mov dword [ebp - 0x144], 0x8002
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x466301
push dword [ebp - 0x88]
push 0x40dce8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x51
jne 0x466301
push dword [ebp - 0x88]
push 0x40bb50
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x466413
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea eax, [ebp - 0x104]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.004048b6
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x144], 8
lea edx, [ebp - 0x144]
lea ecx, [ebp - 0x3c]
call fcn.00404766
push 0x4663f5
jmp 0x466370
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x168]
push eax
push 3
call fcn.00404898
add esp, 0x10
lea ecx, [ebp - 0x2c]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
lea ecx, [ebp - 0x64]
call fcn.00404844
lea ecx, [ebp - 0x84]
call fcn.00404844
lea ecx, [ebp - 0x88]
call fcn.00404868
lea ecx, [ebp - 0xa4]
call fcn.00404844
lea ecx, [ebp - 0xb4]
call fcn.00404844
lea ecx, [ebp - 0xc8]
call fcn.00404844
lea ecx, [ebp - 0xdc]
call fcn.00404844
lea ecx, [ebp - 0xec]
call fcn.00404844
ret
call fcn.0040477e