Function at 0x40ca50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e4c6
mov eax, dword fs:[0]
push eax
sub esp, 0x3b0
mov eax, dword [0x4c8748]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x254], ecx
mov edi, dword [ecx + 0x40]
mov esi, dword [ecx + 0x3c]
cmp esi, edi
je 0x40caaa
nop dword [eax]
mov ecx, esi
call fcn.00401df0
add esi, 0x154
cmp esi, edi
jne 0x40ca90
mov ecx, dword [ebp - 0x254]
mov esi, dword [ecx + 0x3c]
lea eax, [ecx + 4]
mov dword [ecx + 0x40], esi
cmp dword [eax + 0x14], 0x10
mov dword [eax + 0x10], 0
jb 0x40cabf
mov eax, dword [eax]
mov byte [eax], 0
lea eax, [ecx + 0x1c]
cmp dword [eax + 0x14], 0x10
mov dword [eax + 0x10], 0
jb 0x40cad4
mov eax, dword [eax]
mov byte [eax], 0
lea eax, [ebp - 0x174]
push 0x105
push 0
push eax
mov dword [ecx + 0x38], 0x1c20
call fcn.00478960
movaps xmm0, xmmword [0x4a3dd0]
add esp, 0xc
mov ecx, dword [0x4ca4b8]
movups xmmword [ebp - 0x6c], xmm0
mov dword [ebp - 0x1c], 0x2664253d
movaps xmm0, xmmword [str.mn_davs_d_s_s_s_s_s_die_sver_scver_s_sosmj_dos_sadver_sscx]
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x18], 0x3d796373
movaps xmm0, xmmword [0x4a3db0]
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x14], 0x6425
movaps xmm0, xmmword [0x4a3dc0]
movups xmmword [ebp - 0x3c], xmm0
mov byte [ebp - 0x12], 0
movaps xmm0, xmmword [0x4a3de0]
movups xmmword [ebp - 0x2c], xmm0
xchg dword [ebp - 0x22c], eax
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test ecx, ecx
jne 0x40cc0c
mov eax, dword fs:[0x2c]
mov ecx, dword [0x4caa90]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e223
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40cbf4
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x40cbe0
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40cbe8
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x248], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x78]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.00401650
mov ecx, dword [0x4ca4b8]
mov dword [ebp - 4], 2
xchg dword [ebp - 0x240], eax
test ecx, ecx
jne 0x40ccd9
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e260
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 3
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40ccc4
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x40ccb0
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40ccb8
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x244], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x60]
push eax
lea ecx, [ebp - 0x274]
call fcn.00401650
mov ecx, dword [0x4ca4b8]
mov byte [ebp - 4], 5
xchg dword [ebp - 0x248], eax
test ecx, ecx
jne 0x40cda3
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e29d
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 6
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40cd8e
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 7
test eax, eax
je 0x40cd7a
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40cd82
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x22c], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x48]
push eax
lea ecx, [ebp - 0x35c]
call fcn.00401650
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 8
xchg dword [ebp - 0x244], eax
test ecx, ecx
jne 0x40ce6d
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e2da
push 0x4ca47c
mov dword [ebp - 0x23c], 0x4ca47c
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 9
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40ce58
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x40ce44
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40ce4c
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x240], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x1cc]
push eax
lea ecx, [ebp - 0x344]
call fcn.00401650
mov ecx, dword [0x4ca4b8]
mov byte [ebp - 4], 0xb
xchg dword [ebp - 0x248], eax
test ecx, ecx
jne 0x40cf3a
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e317
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40cf25
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x40cf11
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40cf19
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x22c], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
mov byte [ebp - 4], 0xb
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x28]
push eax
lea ecx, [ebp - 0x38c]
call fcn.00401650
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 0xe
xchg dword [ebp - 0x244], eax
test ecx, ecx
jne 0x40d004
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e354
push 0x4ca47c
mov dword [ebp - 0x23c], 0x4ca47c
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40cfef
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x40cfdb
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40cfe3
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x240], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 0xe
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x34]
push eax
lea ecx, [ebp - 0x32c]
call fcn.00401650
mov ecx, dword [0x4ca4b8]
mov byte [ebp - 4], 0x11
xchg dword [ebp - 0x248], eax
test ecx, ecx
jne 0x40d0ce
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e391
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d0b9
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x13
test eax, eax
je 0x40d0a5
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d0ad
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x22c], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
mov byte [ebp - 4], 0x11
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x10]
push eax
lea ecx, [ebp - 0x314]
call fcn.00401650
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 0x14
xchg dword [ebp - 0x244], eax
test ecx, ecx
jne 0x40d198
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e3ce
push 0x4ca47c
mov dword [ebp - 0x23c], 0x4ca47c
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d183
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x16
test eax, eax
je 0x40d16f
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d177
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x240], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 0x14
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 0x1c]
push eax
lea ecx, [ebp - 0x2fc]
call fcn.00401650
lea eax, [ebp - 0x3bc]
mov byte [ebp - 4], 0x17
push eax
call fcn.00474e50
add esp, 4
mov dword [ebp - 0x22c], eax
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 0x18
xchg dword [ebp - 0x244], eax
test ecx, ecx
jne 0x40d27c
mov ecx, dword fs:[0x2c]
mov eax, dword [0x4caa90]
mov edx, dword [ecx + eax*4]
mov ecx, dword [0x4ca494]
cmp ecx, dword [edx + 4]
jg 0x40e40b
push 0x4ca47c
mov dword [ebp - 0x23c], 0x4ca47c
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d267
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x40d253
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d25b
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x240], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 0x18
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + 4]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.00401650
mov ecx, dword [0x4ca4b8]
xchg dword [ebp - 0x244], eax
test ecx, ecx
jne 0x40d33e
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e448
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d32d
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x40d319
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d321
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x240], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
mov eax, dword [ecx + 0x44]
mov ecx, dword [0x4ca4b8]
mov dword [ebp - 0x2cc], eax
xchg dword [ebp - 0x248], eax
test ecx, ecx
jne 0x40d3fa
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e485
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d3e9
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x1f
test eax, eax
je 0x40d3d5
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d3dd
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x280], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
cmp dword [ebp - 0x2b0], 0x10
mov eax, dword [ecx + 0x40]
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x2c4]
cmovae eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x260], 0x10
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x274]
cmovae eax, dword [ebp - 0x274]
cmp dword [ebp - 0x348], 0x10
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x35c]
cmovae eax, dword [ebp - 0x35c]
cmp dword [ebp - 0x330], 0x10
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x344]
cmovae eax, dword [ebp - 0x344]
cmp dword [ebp - 0x378], 0x10
mov ecx, dword [0x4ca4b8]
mov dword [ebp - 0x2a4], eax
lea eax, [ebp - 0x38c]
cmovae eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x318], 0x10
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x32c]
cmovae eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x300], 0x10
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x314]
cmovae eax, dword [ebp - 0x314]
cmp dword [ebp - 0x2e8], 0x10
mov dword [ebp - 0x24c], eax
lea eax, [ebp - 0x2fc]
cmovae eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x250], eax
xchg dword [ebp - 0x284], eax
test ecx, ecx
jne 0x40d586
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e4c2
push 0x4ca4bc
mov dword [ebp - 0x23c], 0x4ca4bc
mov dword [ebp - 0x238], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d575
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x21
test eax, eax
je 0x40d561
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d569
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x288], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x4ca4b8]
mov dword [ebp - 0x238], eax
xchg dword [ebp - 0x28c], eax
test ecx, ecx
jne 0x40d642
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e4ff
push 0x4ca4bc
mov dword [ebp - 0x27c], 0x4ca4bc
mov dword [ebp - 0x278], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d631
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0x23
test eax, eax
je 0x40d61d
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d625
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x290], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
mov eax, dword [ecx + 8]
mov ecx, dword [0x4ca4b8]
mov dword [ebp - 0x230], eax
xchg dword [ebp - 0x294], eax
test ecx, ecx
jne 0x40d6fe
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca4d4]
cmp eax, dword [ecx + 4]
jg 0x40e53c
push 0x4ca4bc
mov dword [ebp - 0x25c], 0x4ca4bc
mov dword [ebp - 0x258], 1
call edi
mov eax, dword [0x4ca4b8]
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x228], eax
test eax, eax
jne 0x40d6ed
push 0xb0
call fcn.00477045
add esp, 4
mov dword [ebp - 0x278], eax
mov byte [ebp - 4], 0x25
test eax, eax
je 0x40d6d9
mov ecx, eax
call fcn.00412260
mov ecx, eax
mov dword [ebp - 0x228], eax
jmp 0x40d6e1
xor ecx, ecx
mov dword [ebp - 0x228], ecx
xchg dword [ebp - 0x278], eax
mov dword [0x4ca4b8], ecx
push 0x4ca4bc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x228]
mov eax, dword [ebp - 0x22c]
mov edx, dword [ecx + 4]
cmp dword [eax + 0x14], 0x10
jb 0x40d715
mov eax, dword [eax]
mov dword [ebp - 0x22c], eax
push dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x2e4]
push dword [ebp - 0x2c8]
cmp dword [ebp - 0x2d0], 0x10
push 0x4a3c78
push dword [ebp - 0x2ac]
cmovae eax, dword [ebp - 0x2e4]
push dword [ebp - 0x2a0]
push dword [ebp - 0x2a8]
push dword [ecx + 0x34]
mov ecx, dword [ebp - 0x22c]
push dword [ebp - 0x2a4]
push dword [ebp - 0x29c]
push dword [ebp - 0x298]
push dword [ebp - 0x24c]
push dword [ebp - 0x250]
push dword [ebp - 0x238]
push dword [ebp - 0x230]
push edx
push ecx
push eax
lea eax, [ebp - 0x6c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x174]
push 0x104
push eax
call fcn.00410760
mov edx, dword [ebp - 0x2d0]
add esp, 0x54
mov byte [ebp - 4], 0x18
cmp edx, 0x10
jb 0x40d7e0
mov ecx, dword [ebp - 0x2e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d7d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e579
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x3a8]
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d0], 0xf
mov byte [ebp - 0x2e4], 0
mov byte [ebp - 4], 0x17
cmp edx, 0x10
jb 0x40d839
mov ecx, dword [ebp - 0x3bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d82f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e57e
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0xf
mov byte [ebp - 0x3bc], 0
mov byte [ebp - 4], 0x14
cmp edx, 0x10
jb 0x40d892
mov ecx, dword [ebp - 0x2fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d888
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e583
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x300]
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], 0
mov byte [ebp - 4], 0x11
cmp edx, 0x10
jb 0x40d8eb
mov ecx, dword [ebp - 0x314]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d8e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e588
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x318]
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0xf
mov byte [ebp - 0x314], 0
mov byte [ebp - 4], 0xe
cmp edx, 0x10
jb 0x40d944
mov ecx, dword [ebp - 0x32c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d93a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e58d
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x378]
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0xf
mov byte [ebp - 0x32c], 0
mov byte [ebp - 4], 0xb
cmp edx, 0x10
jb 0x40d99d
mov ecx, dword [ebp - 0x38c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d993
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e592
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x330]
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
mov byte [ebp - 4], 8
cmp edx, 0x10
jb 0x40d9f6
mov ecx, dword [ebp - 0x344]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40d9ec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e597
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x348]
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0xf
mov byte [ebp - 0x344], 0
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x40da4f
mov ecx, dword [ebp - 0x35c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40da45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e59c
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0xf
mov byte [ebp - 0x35c], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x40daa8
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40da9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5a1
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x2b0]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 0xf
mov byte [ebp - 0x274], 0
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x40db04
mov ecx, dword [ebp - 0x2c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dafa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5a6
push edx
push ecx
call fcn.00476d79
add esp, 8
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x1a4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40db28
sub ecx, edx
lea eax, [ebp - 0x174]
push ecx
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00404010
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 0x27
xchg dword [ebp - 0x230], eax
test ecx, ecx
jne 0x40dc21
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e5ab
push 0x4ca47c
mov dword [ebp - 0x25c], 0x4ca47c
mov dword [ebp - 0x258], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x22c], eax
test eax, eax
jne 0x40dc0c
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0x29
test eax, eax
je 0x40dbf8
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x22c], eax
jmp 0x40dc00
xor ecx, ecx
mov dword [ebp - 0x22c], ecx
xchg dword [ebp - 0x238], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 0x27
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x22c]
lea eax, [ecx + 0x2a4]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.004046c0
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 0x2a
xchg dword [ebp - 0x250], eax
test ecx, ecx
jne 0x40dcee
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e5e8
push 0x4ca47c
mov dword [ebp - 0x25c], 0x4ca47c
mov dword [ebp - 0x258], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x22c], eax
test eax, eax
jne 0x40dcd9
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 0x2c
test eax, eax
je 0x40dcc5
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x22c], eax
jmp 0x40dccd
xor ecx, ecx
mov dword [ebp - 0x22c], ecx
xchg dword [ebp - 0x24c], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 0x2a
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x22c]
lea eax, [ecx + 0x28c]
push eax
lea ecx, [ebp - 0x274]
call fcn.004046c0
cmp dword [ebp - 0x2b0], 8
lea edx, [ebp - 0x18c]
push 1
push 0x2c9
push edx
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x2d
cmovae ecx, dword [ebp - 0x2c4]
lea edx, [ebp - 0x1a4]
cmp dword [ebp - 0x260], 8
lea eax, [ebp - 0x274]
push edx
cmovae eax, dword [ebp - 0x274]
push ecx
push eax
call fcn.00464190
mov edx, dword [ebp - 0x260]
add esp, 0x18
cmp eax, 0xa
mov byte [ebp - 4], 0x2a
setl byte [ebp - 0x231]
cmp edx, 8
jb 0x40dd99
mov ecx, dword [ebp - 0x274]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40dd8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e625
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x2b0]
xor eax, eax
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 7
mov word [ebp - 0x274], ax
mov byte [ebp - 4], 0x27
cmp edx, 8
jb 0x40ddfa
mov ecx, dword [ebp - 0x2c4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ddf0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e62a
push edx
push ecx
call fcn.00476d79
add esp, 8
cmp byte [ebp - 0x231], 0
je 0x40e0a1
mov ecx, dword [0x4ca478]
xchg dword [ebp - 0x230], eax
test ecx, ecx
jne 0x40debe
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e62f
push 0x4ca47c
mov dword [ebp - 0x25c], 0x4ca47c
mov dword [ebp - 0x258], 1
call edi
mov eax, dword [0x4ca478]
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x22c], eax
test eax, eax
jne 0x40dea9
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0x2f
test eax, eax
je 0x40de95
mov ecx, eax
call fcn.00413670
mov ecx, eax
mov dword [ebp - 0x22c], eax
jmp 0x40de9d
xor ecx, ecx
mov dword [ebp - 0x22c], ecx
xchg dword [ebp - 0x238], eax
mov dword [0x4ca478], ecx
push 0x4ca47c
mov byte [ebp - 4], 0x27
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x22c]
lea eax, [ecx + 0x2a4]
push eax
lea ecx, [ebp - 0x3a4]
call fcn.004046c0
mov ecx, dword [0x4ca478]
mov byte [ebp - 4], 0x30
xchg dword [ebp - 0x250], eax
test ecx, ecx
jne 0x40df8c
mov eax, dword [0x4caa90]
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x4ca494]
cmp eax, dword [ecx + 4]
jg 0x40e66c
push 0x4ca47c
mov dword [ebp - 0x25c], 0x4ca47c
mov dword [ebp - 0x258], 1
call edi
mov esi, dword [0x4ca478]
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x22c], esi
test esi, esi
jne 0x40df77
push 0x2d4
call fcn.00477045
add esp, 4
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 0x32
test eax, eax
je 0x40df63
mov ecx, eax
call fcn.00413670
mov esi, eax
mov dword [ebp - 0x22c], eax
jmp 0x40df6b
xor esi, esi
mov dword [ebp - 0x22c], esi
xchg dword [ebp - 0x24c], eax
mov dword [0x4ca478], esi
push 0x4ca47c
mov byte [ebp - 4], 0x30
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x22c]
lea eax, [ecx + 0x28c]
push eax
lea ecx, [ebp - 0x374]
call fcn.004046c0
cmp dword [ebp - 0x390], 8
lea edx, [ebp - 0x18c]
push 0
push 0x2c9
push edx
lea ecx, [ebp - 0x3a4]
mov byte [ebp - 4], 0x33
cmovae ecx, dword [ebp - 0x3a4]
lea edx, [ebp - 0x1a4]
cmp dword [ebp - 0x360], 8
lea eax, [ebp - 0x374]
push edx
cmovae eax, dword [ebp - 0x374]
push ecx
push eax
call fcn.00464190
mov edx, dword [ebp - 0x360]
add esp, 0x18
cmp eax, 0xa
mov byte [ebp - 4], 0x30
setl byte [ebp - 0x231]
cmp edx, 8
jb 0x40e037
mov ecx, dword [ebp - 0x374]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e02d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e6a9
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x390]
xor eax, eax
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 7
mov word [ebp - 0x374], ax
mov byte [ebp - 4], 0x27
cmp edx, 8
jb 0x40e098
mov ecx, dword [ebp - 0x3a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e08e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e6ae
push edx
push ecx
call fcn.00476d79
add esp, 8
cmp byte [ebp - 0x231], 0
jne 0x40e113
push 0x70
lea eax, [ebp - 0x224]
push 0
push eax
call fcn.00478960
add esp, 0xc
lea ecx, [ebp - 0x224]
call fcn.0046c840
xorps xmm0, xmm0
mov byte [ebp - 4], 0x34
push 0
lea ecx, [ebp - 0x1b4]
movups xmmword [ebp - 0x1b4], xmm0
call fcn.00468f40
push 0
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x224]
call fcn.0046f970
test al, al
jne 0x40e12e
lea ecx, [ebp - 0x1b4]
call fcn.00469340
lea ecx, [ebp - 0x224]
call fcn.004090c0
lea ecx, [ebp - 0x18c]
call fcn.00401ca0
lea ecx, [ebp - 0x1a4]
call fcn.00401ca0
jmp 0x40e1f7
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040a5e0
mov ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x18c]
push eax
call fcn.0040e6c0
lea ecx, [ebp - 0x1b4]
call fcn.00469340
lea ecx, [ebp - 0x224]
call fcn.004090c0
mov edx, dword [ebp - 0x178]
cmp edx, 0x10
jb 0x40e1a2
mov ecx, dword [ebp - 0x18c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e198
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e6b3
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
cmp edx, 0x10
jb 0x40e1f7
mov ecx, dword [ebp - 0x1a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e1ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e6b8
push edx
push ecx
call fcn.00476d79
add esp, 8
mov edx, dword [ebp - 0x254]
xor eax, eax
mov ecx, dword [edx + 0x3c]
cmp ecx, dword [edx + 0x40]
setne al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047702f
mov esp, ebp
pop ebp
ret
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40cb83
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40cb83
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40cc56
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40cc56
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40cd20
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40cd20
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40cdea
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40cdea
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40ceb7
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40ceb7
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40cf81
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40cf81
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40d04b
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40d04b
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40d115
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40d115
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40d1f9
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40d1f9
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40d2bf
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40d2bf
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40d37b
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40d37b
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40d507
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40d507
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40d5c3
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40d5c3
push 0x4ca4d4
call fcn.004771ff
add esp, 4
cmp dword [0x4ca4d4], 0xffffffff
jne 0x40d67f
push 0x4ca4bc
call esi
push 0x4a1380
call fcn.0047701a
push 0x4ca4d4
call fcn.004771b5
add esp, 8
jmp 0x40d67f
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40db9e
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40db9e
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40dc6b
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40dc6b
call fcn.0047c5ae
call fcn.0047c5ae
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40de3b
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40de3b
push 0x4ca494
call fcn.004771ff
add esp, 4
cmp dword [0x4ca494], 0xffffffff
jne 0x40df08
push 0x4ca47c
call esi
push 0x4a1390
call fcn.0047701a
push 0x4ca494
call fcn.004771b5
add esp, 8
jmp 0x40df08
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
call fcn.0047c5ae
int3