Function at 0x4722c3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1b0
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4028d8
mov edx, 0x5211c8
lea ecx, [ebp - 0x188]
call fcn.00404766
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472396
mov word [ebp - 0x70], 0x35
mov word [ebp - 0x44], 0x37
mov word [ebp - 0x30], 0x78
mov word [ebp - 0xa4], 0x53
mov word [ebp - 0xec], 0x70
mov word [ebp - 0x8c], 0x59
mov word [ebp - 0x2c], 0x36
mov word [ebp - 0x6c], 0x54
mov word [ebp - 0xe8], 0x45
mov word [ebp - 0xa0], 0x48
mov word [ebp - 0x18], 0x6b
mov word [ebp - 0x68], 0x6c
mov word [ebp - 0x88], 0xbe
jmp 0x47249b
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472425
mov word [ebp - 0x70], 0x3b
mov word [ebp - 0x44], 0x3d
mov word [ebp - 0x30], 0x73
mov word [ebp - 0xa4], 0x51
mov word [ebp - 0xec], 0x6c
mov word [ebp - 0x8c], 0x57
mov word [ebp - 0x2c], 0x3c
mov word [ebp - 0x6c], 0x52
mov word [ebp - 0xe8], 0x48
mov word [ebp - 0xa0], 0x4d
mov word [ebp - 0x18], 0x65
mov word [ebp - 0x68], 0x68
and word [ebp - 0x88], 0
jmp 0x47249b
mov word [ebp - 0x70], 0x11
mov word [ebp - 0x44], 0x13
mov word [ebp - 0x30], 0x2b
mov word [ebp - 0xa4], 0x1f
mov word [ebp - 0xec], 0x28
mov word [ebp - 0x8c], 0x21
mov word [ebp - 0x2c], 0x12
mov word [ebp - 0x6c], 0x20
mov word [ebp - 0xe8], 0x18
mov word [ebp - 0xa0], 0x1b
mov word [ebp - 0x18], 0xd8
mov word [ebp - 0x68], 0xd9
mov word [ebp - 0x88], 0x16
cmp word [0x521220], 0x1e
jl 0x47249b
mov word [ebp - 0x18], 0xcb
mov word [ebp - 0x68], 0xcc
mov edx, 0x40a6cc
lea ecx, [ebp - 0x74]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x19c], al
mov cx, 0x17
call fcn.004046b8
cmp byte [ebp - 0x19c], al
jne 0x4724e3
mov edx, 0x40eba8
lea ecx, [ebp - 0x74]
call fcn.004048b0
jmp 0x472529
mov cx, 0x2b
call fcn.004046b8
cmp byte [ebp - 0x19c], al
jne 0x472503
mov edx, 0x40ebc0
lea ecx, [ebp - 0x74]
call fcn.004048b0
jmp 0x472529
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x64]
call fcn.00404766
jmp 0x47621d
mov word [0x5210dc], 2
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x158], al
mov dword [ebp - 0x160], 0x11
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xc4]
call fcn.004048d4
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x198]
call fcn.00404766
mov dword [ebp - 0x158], 0xd1
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4725d9
push dword [ebp - 0x74]
push 0x40ebd0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0x2e
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472639
push dword [ebp - 0x74]
push 0x40ebf0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0x31
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472699
push dword [ebp - 0x74]
push 0x40ec08
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0x56
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4726f9
push dword [ebp - 0x74]
push 0x40e340
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0xbe
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472759
push dword [ebp - 0x74]
push 0x40dce8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0xc2
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4727b9
push dword [ebp - 0x74]
push 0x40e3d4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0xc4
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472819
push dword [ebp - 0x74]
push 0x40ec1c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov dword [ebp - 0x158], 0xd1
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472879
push dword [ebp - 0x74]
push 0x40ebd0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4761fc
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x158], ax
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472e81
push dword [ebp - 0x74]
push 0x40e944
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x6c]
jne 0x472923
push dword [ebp - 0x74]
push 0x40e55c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x472ace
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x40]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xe8]
jne 0x472ace
mov dword [ebp - 0x158], 0x40ccac
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x40]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x472cfe
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1a0], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1a0], al
jne 0x472bca
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x472c96
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1a0], al
jne 0x472c96
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x472cfe
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x472e19
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x40]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xe8]
jne 0x472e19
mov dword [ebp - 0x158], 0x40ccac
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x40]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4761fc
mov ax, word [ebp - 0xa0]
mov word [ebp - 0x158], ax
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4732cb
push dword [ebp - 0x74]
push 0x40e28c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x473114
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1a4], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1a4], al
jne 0x472fe0
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4730ac
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1a4], al
jne 0x4730ac
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x473114
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x40]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xe8]
jne 0x4731ff
mov dword [ebp - 0x158], 0x40ccac
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x40]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4761fc
mov ax, word [ebp - 0x18]
mov word [ebp - 0x158], ax
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47360f
push dword [ebp - 0x74]
push 0x40ec48
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x47355b
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1a8], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1a8], al
jne 0x473427
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4734f3
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1a8], al
jne 0x4734f3
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x47355b
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4761fc
mov ax, word [ebp - 0x68]
mov word [ebp - 0x158], ax
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x473a34
push dword [ebp - 0x74]
push 0x40e474
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x88]
jne 0x473750
push dword [ebp - 0x74]
push 0x40c298
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x473980
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1ac], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1ac], al
jne 0x47384c
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x473918
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1ac], al
jne 0x473918
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x473980
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4761fc
mov dword [ebp - 0x158], 0x74
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47442e
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x473ac4
push dword [ebp - 0x74]
push 0x40ec5c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x474429
mov edx, 0x40deb4
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x30
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xd4]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
lea eax, [ebp - 0x110]
push eax
call fcn.0044a3ea
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xe4]
call fcn.004048d4
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x44]
jne 0x473c24
mov dword [ebp - 0x158], 0x40c2d4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x30]
jne 0x473d18
mov dword [ebp - 0x158], 0x40c2e4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x473d87
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x473fb7
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1b0], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1b0], al
jne 0x473e83
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x473f4f
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1b0], al
jne 0x473f4f
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x473fb7
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x474026
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x70]
jne 0x4740ca
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4741c9
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x4741c4
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x4742f1
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x4742f1
mov ax, word [0x5210dc]
add ax, 3
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x4742cc
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x4742f1
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4761fc
mov dword [ebp - 0x158], 0xda
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47448e
mov dword [ebp - 0x168], 0xcd
mov dword [ebp - 0x170], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x474e9d
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x160], 0x8002
mov dword [ebp - 0x168], 2
mov dword [ebp - 0x170], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047fc
push eax
push 0x5211c8
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047fc
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x474533
push dword [ebp - 0x74]
push 0x40ec5c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x474e98
mov edx, 0x40deb4
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x30
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xd4]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
lea eax, [ebp - 0x110]
push eax
call fcn.0044a3ea
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xe4]
call fcn.004048d4
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x44]
jne 0x474693
mov dword [ebp - 0x158], 0x40c2d4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x30]
jne 0x474787
mov dword [ebp - 0x158], 0x40c2e4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4747f6
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x474a26
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1b4], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1b4], al
jne 0x4748f2
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4749be
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1b4], al
jne 0x4749be
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x474a26
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x474a95
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x70]
jne 0x474b39
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x474c38
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x474c33
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x474d60
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x474d60
mov ax, word [0x5210dc]
add ax, 3
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x474d3b
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x474d60
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4761fc
mov dword [ebp - 0x158], 0xcd
mov dword [ebp - 0x160], 0x8002
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x475897
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x474f2d
push dword [ebp - 0x74]
push 0x40ec5c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x475892
mov edx, 0x40deb4
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x30
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xd4]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
lea eax, [ebp - 0x110]
push eax
call fcn.0044a3ea
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xe4]
call fcn.004048d4
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x44]
jne 0x47508d
mov dword [ebp - 0x158], 0x40c2d4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x30]
jne 0x475181
mov dword [ebp - 0x158], 0x40c2e4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4751f0
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x475420
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1b8], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1b8], al
jne 0x4752ec
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x4753b8
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1b8], al
jne 0x4753b8
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x475420
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x47548f
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x70]
jne 0x475533
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x475632
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x47562d
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x47575a
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x47575a
mov ax, word [0x5210dc]
add ax, 3
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x475735
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x47575a
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x4761fc
mov edx, 0x40deb4
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x30
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xd4]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
lea eax, [ebp - 0x110]
push eax
call fcn.0044a3ea
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xe4]
call fcn.004048d4
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x44]
jne 0x4759f7
mov dword [ebp - 0x158], 0x40c2d4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x84]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x30]
jne 0x475aeb
mov dword [ebp - 0x158], 0x40c2e4
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0xb4]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x475b5a
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xec]
jne 0x475d8a
mov dword [ebp - 0x158], 0x40c0c0
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x54]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x1bc], al
mov ecx, dword [ebp - 0x8c]
call fcn.004046b8
cmp byte [ebp - 0x1bc], al
jne 0x475c56
mov dword [ebp - 0x158], 0x40eb90
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
jmp 0x475d22
mov ecx, dword [ebp - 0x2c]
call fcn.004046b8
cmp byte [ebp - 0x1bc], al
jne 0x475d22
mov dword [ebp - 0x158], 0x40e434
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.00444aa2
mov dword [ebp - 0x158], 0x40bffc
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x22
jne 0x475d8a
mov dword [ebp - 0x158], 0x40da98
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x160], 0x800b
push 0x5211d8
lea eax, [ebp - 0x160]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x475df9
mov edx, 0x40ec70
lea ecx, [ebp - 0x100]
call fcn.004048b0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov edx, 0x40ec30
lea ecx, [ebp - 0x100]
call fcn.004048b0
mov word [ebp - 0x174], 0x39
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b956
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x28]
call fcn.004048d4
lea ecx, [ebp - 0x100]
call fcn.00404868
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x70]
jne 0x475e9d
mov ax, word [0x5210dc]
add ax, 1
jo 0x476313
mov word [0x5210dc], ax
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x160], 0x8002
push 0x5211c8
lea eax, [ebp - 0x160]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x475f9c
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x475f97
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x4760c4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xf8
jne 0x4760c4
mov ax, word [0x5210dc]
add ax, 3
jo 0x476313
mov word [0x5210dc], ax
lea eax, [ebp - 0x110]
push eax
call fcn.0044b65a
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov word [ebp - 0x178], cx
lea ecx, [ebp - 0x100]
call fcn.00404868
movsx eax, word [ebp - 0x178]
test eax, eax
je 0x47609f
mov dword [ebp - 0x158], 0x40c2a4
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x168], 0x40bffc
mov dword [ebp - 0x170], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x110]
call fcn.00404844
jmp 0x4760c4
mov dword [ebp - 0x158], 0x40a6cc
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x9c]
call fcn.00404766
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x74]
call fcn.004048b6
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x110]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], 8
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x64]
call fcn.00404766
push 0x4762f5
jmp 0x47626f
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x188]
push eax
push 2
call fcn.00404898
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.00404844
lea ecx, [ebp - 0x40]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
lea ecx, [ebp - 0x74]
call fcn.00404868
lea ecx, [ebp - 0x84]
call fcn.00404844
lea ecx, [ebp - 0x9c]
call fcn.00404844
lea ecx, [ebp - 0xb4]
call fcn.00404844
lea ecx, [ebp - 0xc4]
call fcn.00404844
lea ecx, [ebp - 0xd4]
call fcn.00404844
lea ecx, [ebp - 0xe4]
call fcn.00404844
lea ecx, [ebp - 0xfc]
call fcn.00404844
ret
call fcn.0040477e