Function at 0x40129a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x604
mov eax, 0x634c40
call fcn.00611c5e
mov esi, ecx
xor ebx, ebx
lea ecx, [ebp - 0x520]
mov dword [ebp - 4], ebx
call fcn.0041b494
push eax
lea ecx, [ebp - 0x508]
call fcn.0040d5ca
push 8
mov byte [ebp - 4], 2
lea eax, [ebp - 0x520]
pop ecx
mov byte [eax], bl
inc eax
dec ecx
jne 0x4012d4
push 0x10
pop ecx
lea eax, [ebp - 0x518]
mov byte [eax], bl
inc eax
dec ecx
jne 0x4012e3
call fcn.0062bfdb
push 0x103
mov byte [ebp - 0x57c], al
lea eax, [ebp - 0x4d7]
push ebx
push eax
mov byte [ebp - 0x4d8], bl
call fcn.006125f0
add esp, 0xc
lea eax, [ebp - 0x4d8]
push 0x104
push eax
push ebx
call dword [0x6463fc]
lea eax, [ebp - 0x4d8]
push eax
call fcn.00402e6d
mov byte [ebp - 0x541], al
test al, al
jne 0x401340
push ebx
push 1
jmp 0x402c9f
cmp byte [esi + 4], 0
mov byte [ebp - 0x59c], bl
mov dword [ebp - 0x5e0], ebx
jne 0x4014a9
call fcn.00406983
lea edx, [ebp - 0x5d0]
mov ecx, eax
call fcn.0040661e
push 0x68
pop edx
push 0x2f
pop ecx
push 0x6c
mov edi, eax
mov word [ebp - 0x196], dx
xor eax, eax
mov word [ebp - 0x1b8], dx
mov word [ebp - 0x194], ax
pop eax
push 0x6d
mov word [ebp - 0x18e], ax
xor eax, eax
mov word [ebp - 0x18c], ax
pop eax
push 0x74
mov word [ebp - 0x1b2], ax
pop eax
push 0x6f
mov word [ebp - 0x1aa], ax
pop eax
push 0x65
pop edx
push 0x73
mov word [ebp - 0x1b4], ax
xor eax, eax
mov word [ebp - 0x198], cx
mov word [ebp - 0x190], cx
mov word [ebp - 0x1bc], cx
mov word [ebp - 0x19c], ax
mov word [ebp - 0x1b0], dx
mov word [ebp - 0x1ae], dx
mov word [ebp - 0x1a8], dx
pop ecx
mov word [ebp - 0x1a4], cx
push 0x6f
pop eax
mov word [ebp - 0x1a0], ax
push 0x6e
pop ecx
mov word [ebp - 0x19e], cx
mov word [ebp - 0x1a6], cx
push 0x72
pop eax
mov word [ebp - 0x1b6], ax
push 0x63
pop eax
mov word [ebp - 0x1ba], ax
push 0x69
pop eax
mov word [ebp - 0x1a2], ax
push 0x78
pop eax
mov word [ebp - 0x1ac], ax
test edi, edi
je 0x4014bb
xor eax, eax
inc eax
cmp dword [ebp - 0x5d0], eax
jle 0x4014bb
mov esi, eax
mov ecx, dword [edi + esi*4]
lea edx, [ebp - 0x198]
call fcn.0062e14c
mov ecx, dword [ebp - 0x59c]
test eax, eax
movzx ecx, cl
push 1
pop edx
cmove ecx, edx
lea edx, [ebp - 0x190]
mov dword [ebp - 0x59c], ecx
mov ecx, dword [edi + esi*4]
call fcn.0062e14c
mov ecx, dword [edi + esi*4]
lea edx, [ebp - 0x1bc]
test eax, eax
movzx ebx, bl
push 1
pop eax
cmove ebx, eax
call fcn.0062e14c
inc esi
cmp esi, dword [ebp - 0x5d0]
jl 0x40144c
mov dword [ebp - 0x5e0], ebx
jmp 0x4014bb
mov al, byte [esi + 2]
mov dword [ebp - 0x59c], eax
mov al, byte [esi + 3]
mov dword [ebp - 0x5e0], eax
call fcn.0062d9ee
test al, al
mov byte [ebp - 0x542], al
lea ecx, [ebp - 0x5a0]
setne byte [ebp - 0x55a]
call fcn.00629ea7
lea eax, [ebp - 0x584]
mov byte [ebp - 4], 3
push eax
call fcn.00402db0
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 4
call fcn.0040b594
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
push dword [ebp - 0x540]
call fcn.0040d5ca
push dword [ebp - 0x57c]
call fcn.00409244
test al, al
je 0x402c70
lea ecx, [ebp - 0x598]
call fcn.0062fd1b
mov byte [ebp - 4], 6
call fcn.00408d9a
test eax, eax
setne byte [ebp - 0x543]
call fcn.00408d9a
test eax, eax
setne bh
xor bl, bl
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x580]
call fcn.0040d74c
mov byte [ebp - 4], 7
xor esi, esi
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5a8]
call fcn.0040d74c
lea eax, [ebp - 0x53c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x580]
mov cl, bh
push eax
lea eax, [ebp - 0x5a8]
push eax
lea edx, [ebp - 0x559]
call fcn.004059f5
add esp, 0xc
test al, al
jne 0x4015c2
mov ecx, 0x3e8
call fcn.0040a394
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x5a8]
lea ecx, [ecx - 0x10]
call fcn.0040d912
inc esi
cmp esi, 5
jl 0x401560
jmp 0x4015e5
mov al, byte [ebp - 0x559]
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x5a8]
mov byte [ebp - 0x543], al
xor eax, eax
inc eax
mov bl, al
lea ecx, [ecx - 0x10]
call fcn.0040d912
push 0x6f
pop eax
push 0x72
mov byte [ebp - 0xdf], al
lea ecx, [ebp - 0x56c]
pop eax
mov byte [ebp - 0xda], al
test bl, bl
push 0x74
pop eax
mov byte [ebp - 0xdd], al
mov esi, 0x6825ec
mov eax, 0x6825e0
mov word [ebp - 0xd6], 0x4f53
cmove eax, esi
mov byte [ebp - 0xe0], 0x53
push eax
mov word [ebp - 0xd9], 0x5c65
mov word [ebp - 0xdc], 0x6177
mov byte [ebp - 0xde], 0x66
mov byte [ebp - 0xd7], 0x53
mov byte [ebp - 0xd4], 0
call fcn.0040db5c
push 0x74
pop eax
mov byte [ebp - 4], 9
lea edx, [ebp - 0xe0]
push 0x73
mov byte [ebp - 0x7a], al
xor ebx, ebx
pop eax
push 0x72
mov byte [ebp - 0x7b], al
mov ecx, 0x80000002
pop eax
mov byte [ebp - 0x7e], al
push 0x63
pop eax
mov byte [ebp - 0x80], al
push 0x69
pop eax
mov byte [ebp - 0x7d], al
mov eax, dword [ebp - 0x56c]
mov byte [ebp - 0x7c], 0x6e
mov byte [ebp - 0x79], bl
mov byte [ebp - 0x7f], 0x68
push dword [eax - 0xc]
push eax
xor eax, eax
inc eax
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00406530
mov edi, dword [ebp - 0x580]
add esp, 0x10
cmp dword [edi - 0xc], ebx
jle 0x4016e4
lea eax, [edi - 0x10]
push eax
call fcn.0041a974
pop ecx
lea esi, [eax + 0x10]
mov dword [ebp - 0x550], esi
lea eax, [ebp - 0x550]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x598]
call fcn.0041a9d3
lea ecx, [esi - 0x10]
call fcn.0040d912
jmp 0x4016f4
xor eax, eax
lea ecx, [ebp - 0x598]
inc eax
push eax
push esi
call fcn.0040daac
mov ecx, dword [ebp - 0x56c]
lea ecx, [ecx - 0x10]
call fcn.0040d912
lea ecx, [edi - 0x10]
mov byte [ebp - 4], 6
call fcn.0040d912
lea eax, [ebp - 0x5e8]
push eax
call fcn.00402e4f
lea eax, [ebp - 0x604]
mov byte [ebp - 4], 0xb
push eax
call fcn.0062aba6
mov byte [ebp - 4], 0xc
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5f0]
call fcn.0040d74c
mov byte [ebp - 4], 0xd
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5fc]
call fcn.0040d74c
mov byte [ebp - 4], 0xe
mov esi, ebx
lea eax, [ebp - 0x5fc]
push eax
lea eax, [ebp - 0x5f0]
push eax
call fcn.00408b37
test al, al
jne 0x401777
inc esi
cmp esi, 3
jl 0x40175a
mov edi, dword [ebp - 0x5f0]
push 0x74
pop eax
push 0x72
mov byte [ebp - 0x1d], al
pop eax
push 0x6f
mov byte [ebp - 0x1a], al
pop eax
push 0x69
mov byte [ebp - 0x1f], al
pop eax
push 0x63
mov byte [ebp - 0x58b], al
pop eax
push ecx
mov byte [ebp - 0x58c], al
mov esi, esp
lea eax, [edi - 0x10]
mov dword [ebp - 0x53c], esp
push eax
mov word [ebp - 0x18], 0x535c
mov word [ebp - 0x1c], 0x6177
mov word [ebp - 0x15], 0x4f
mov byte [ebp - 0x19], 0x65
mov byte [ebp - 0x1e], 0x66
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x16], 0x53
mov byte [ebp - 0x58a], bl
mov dword [ebp - 0x580], eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x58c]
mov ecx, esp
mov dword [ebp - 0x550], esp
push eax
call fcn.0040db5c
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x10
mov ecx, esp
push eax
call fcn.0040db5c
mov byte [ebp - 4], 0xe
call fcn.0062fcbb
push 0x63
pop eax
mov byte [ebp - 0x554], al
add esp, 8
mov eax, dword [ebp - 0x5fc]
mov esi, esp
add eax, 0xfffffff0
mov dword [ebp - 0x53c], esp
mov byte [ebp - 0x553], bl
push eax
mov dword [ebp - 0x56c], eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x554]
mov ecx, esp
mov dword [ebp - 0x550], esp
push eax
call fcn.0040db5c
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x12
mov ecx, esp
push eax
call fcn.0040db5c
mov byte [ebp - 4], 0xe
call fcn.0062fcbb
add esp, 0xc
mov dword [ebp - 0x5b0], 0x4f5353
lea ecx, [ebp - 0x5f4]
call fcn.0062a19f
push 0x103
lea eax, [ebp - 0x2c7]
mov byte [ebp - 4], 0x13
push ebx
push eax
mov byte [ebp - 0x2c8], bl
call fcn.006125f0
pop ecx
pop ecx
call fcn.0062aa38
push eax
lea edx, [ebp - 0x2c8]
call fcn.0062af9e
mov ebx, dword [ebp - 0x5f4]
mov edx, ebx
pop ecx
pop ecx
lea ecx, [ebp - 0x2c8]
call fcn.0062b22e
push 0
lea eax, [ebp - 0x2c8]
push eax
call dword [0x6463f8]
cmp byte [ebp - 0x59c], 0
jne 0x4019cc
cmp byte [ebp - 0x5e0], 0
jne 0x4019cc
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5ec]
call fcn.0040d74c
push 0x69
pop ecx
mov byte [ebp - 4], 0x24
xor eax, eax
push 0x73
mov byte [ebp - 0x98], cl
mov byte [ebp - 0x96], cl
pop ecx
push eax
push eax
lea eax, [ebp - 0x98]
mov word [ebp - 0x93], 0x255f
push eax
lea eax, [ebp - 0x5ec]
mov dword [ebp - 0x90], 0x64255f
push eax
mov byte [ebp - 0x97], 0x74
mov byte [ebp - 0x91], 0x64
mov byte [ebp - 0x95], 0x68
mov byte [ebp - 0x94], cl
call fcn.0041aabc
mov eax, dword [ebp - 0x5ec]
add esp, 0xc
add eax, 0xfffffff0
mov dword [ebp - 0x53c], esp
mov esi, esp
mov dword [ebp - 0x550], eax
push eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x25
mov esi, esp
mov eax, dword [ebp - 0x540]
add eax, 0xfffffff0
push eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
pop ecx
mov byte [ebp - 4], 0x24
call fcn.0062aa83
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x550]
call fcn.0040d912
jmp 0x402100
mov edx, dword [ebp - 0x540]
lea ecx, [ebp - 0x4f0]
call fcn.0062fe5a
cmp byte [ebp - 0x55a], 0
mov byte [ebp - 4], 0x14
jne 0x4019f7
cmp dword [ebp - 0x4e0], 0
jne 0x401c2e
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x560]
call fcn.0040d74c
push 0x73
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x4dc], 0x10
pop eax
push 0x74
pop ecx
mov byte [ebp - 0xe4], al
push 0x69
pop eax
mov byte [ebp - 0xf2], al
mov byte [ebp - 0xf4], al
lea eax, [ebp - 0x4f0]
cmovae eax, dword [ebp - 0x4f0]
push eax
push dword [ebp - 0x4e0]
movzx eax, byte [ebp - 0x541]
push eax
movzx eax, byte [ebp - 0x542]
push eax
lea eax, [ebp - 0xf4]
mov word [ebp - 0xec], 0x255f
push eax
lea eax, [ebp - 0x560]
mov byte [ebp - 0xe3], 0
push eax
mov byte [ebp - 0xf3], cl
mov word [ebp - 0xe9], 0x255f
mov word [ebp - 0xe6], 0x255f
mov byte [ebp - 0xf1], 0x62
mov word [ebp - 0xee], 0x6425
mov byte [ebp - 0xf0], cl
mov byte [ebp - 0xef], 0x5f
mov byte [ebp - 0xea], 0x64
mov byte [ebp - 0xe7], 0x64
call fcn.0041aabc
add esp, 0x18
lea ecx, [ebp - 0x560]
push 0x2d
push 0x2b
call fcn.0041ae82
push 0x5f
push 0x2f
lea ecx, [ebp - 0x560]
call fcn.0041ae82
push 0x20
push 0x3d
lea ecx, [ebp - 0x560]
call fcn.0041ae82
lea ecx, [ebp - 0x560]
call fcn.0041b277
mov ecx, eax
call fcn.0041b2c9
mov eax, dword [ebp - 0x560]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x53c], esp
mov esi, esp
push eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x16
mov esi, esp
mov eax, dword [ebp - 0x540]
add eax, 0xfffffff0
push eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
pop ecx
mov byte [ebp - 4], 0x15
call fcn.0062aa83
pop ecx
pop ecx
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5c8]
call fcn.0040d74c
lea eax, [ebp - 0x5cc]
mov byte [ebp - 4], 0x17
push eax
call fcn.00402db0
push 0x73
pop eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5cc]
push 0x10
mov byte [ebp - 0x75], al
mov byte [ebp - 0x73], al
mov byte [ebp - 0x77], al
lea eax, [ebp - 0x5c4]
push 0
push eax
mov byte [ebp - 0x78], 0x25
mov byte [ebp - 0x74], 0x25
mov byte [ebp - 0x76], 0x25
mov byte [ebp - 0x72], 0
call fcn.0041b0a5
mov byte [ebp - 4], 0x19
push dword [ebp - 0x540]
push 0x6825f0
push dword [eax]
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.0041aabc
mov byte [ebp - 4], 0x18
add esp, 0x14
mov ecx, dword [ebp - 0x5c4]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov esi, dword [ebp - 0x5c8]
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040d5ca
lea ecx, [ebp - 0x538]
call fcn.0062f8fd
add esp, 0x18
lea ecx, [ebp - 0x4f0]
push eax
call fcn.0040d34b
xor eax, eax
lea ecx, [ebp - 0x538]
push 0
inc eax
push eax
call fcn.0040c64e
mov ecx, dword [ebp - 0x5cc]
lea ecx, [ecx - 0x10]
call fcn.0040d912
lea ecx, [esi - 0x10]
call fcn.0040d912
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.0040d912
lea ecx, [ebp - 0x5d8]
call fcn.0062d01e
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x4f0]
cmp dword [ebp - 0x4dc], 0x10
lea edx, [ebp - 0x20]
push dword [ebp - 0x4e0]
cmovae eax, dword [ebp - 0x4f0]
mov ecx, 0x80000002
push eax
xor eax, eax
inc eax
push eax
push dword [ebp - 0x5d8]
call fcn.00406530
add esp, 0x10
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x558]
call fcn.0040d74c
push 0x74
pop eax
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x4dc], 0x10
push 0x69
pop ecx
push 0x73
mov byte [ebp - 0x107], al
pop eax
mov byte [ebp - 0xf8], al
push 0x63
pop eax
mov byte [ebp - 0x104], al
lea eax, [ebp - 0x4f0]
cmovae eax, dword [ebp - 0x4f0]
push eax
push dword [ebp - 0x4e0]
movzx eax, byte [ebp - 0x541]
push eax
movzx eax, byte [ebp - 0x542]
push eax
lea eax, [ebp - 0x108]
mov dword [ebp - 0xfe], 0x64255f64
push eax
lea eax, [ebp - 0x558]
mov word [ebp - 0xfa], 0x255f
push eax
mov byte [ebp - 0x106], cl
mov word [ebp - 0x103], 0x255f
mov byte [ebp - 0x108], cl
mov word [ebp - 0x100], 0x255f
mov byte [ebp - 0x105], 0x6e
mov byte [ebp - 0x101], 0x64
mov byte [ebp - 0xf7], 0
call fcn.0041aabc
add esp, 0x18
lea ecx, [ebp - 0x558]
push 0x2d
push 0x2b
call fcn.0041ae82
push 0x5f
push 0x2f
lea ecx, [ebp - 0x558]
call fcn.0041ae82
push 0x20
push 0x3d
lea ecx, [ebp - 0x558]
call fcn.0041ae82
lea ecx, [ebp - 0x558]
call fcn.0041b277
mov ecx, eax
call fcn.0041b2c9
mov eax, dword [ebp - 0x558]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x53c], esp
mov esi, esp
push eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x1c
mov esi, esp
mov eax, dword [ebp - 0x540]
add eax, 0xfffffff0
push eax
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
pop ecx
mov byte [ebp - 4], 0x1b
call fcn.0062aa83
pop ecx
pop ecx
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x5d4]
call fcn.0040db5c
push 0x74
pop eax
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x35], al
lea eax, [ebp - 0x5d8]
push eax
lea eax, [ebp - 0x5ac]
mov word [ebp - 0x37], 0x6164
push 0x6825dc
push eax
mov byte [ebp - 0x34], 0
mov byte [ebp - 0x38], 0x2e
call fcn.0041b1d7
add esp, 0xc
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
push ecx
push eax
lea eax, [ebp - 0x608]
push eax
call fcn.0041b17f
add esp, 0xc
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x5d4]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0041aca8
mov ecx, dword [ebp - 0x608]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x5ac]
add ecx, 0xfffffff0
call fcn.0040d912
push ecx
push 0x80
push 2
push ecx
mov ecx, dword [ebp - 0x5d4]
mov edx, 0x40000000
push 0
call fcn.0040a1e4
and dword [ebp - 0x564], 0
lea edx, [ebp - 0x4f0]
cmp dword [ebp - 0x4dc], 0x10
mov esi, eax
lea eax, [ebp - 0x564]
mov ecx, esi
cmovae edx, dword [ebp - 0x4f0]
add esp, 0x10
push eax
push dword [ebp - 0x4e0]
call fcn.00406bda
add esp, 0xc
mov ecx, esi
call fcn.00406e07
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x5d4]
lea ecx, [ecx - 0x10]
call fcn.0040d912
push 0x103
lea eax, [ebp - 0x3cf]
mov byte [ebp - 0x3d0], 0
push 0
push eax
call fcn.006125f0
pop ecx
pop ecx
push 0x23
lea edx, [ebp - 0x3d0]
call fcn.0062af9e
pop ecx
pop ecx
lea edx, [ebp - 0x5b0]
lea ecx, [ebp - 0x3d0]
call fcn.0062b22e
push 0
lea eax, [ebp - 0x3d0]
push eax
call dword [0x6463f8]
push 0x69
pop eax
mov byte [ebp - 0x5bf], al
mov eax, dword [ebp - 0x584]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x53c], esp
mov esi, esp
mov word [ebp - 0x5be], 0x64
push eax
mov byte [ebp - 0x5c0], 0x67
call fcn.0041a974
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x5c0]
mov ecx, esp
mov dword [ebp - 0x564], esp
push eax
call fcn.0040db5c
push ecx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x21
mov ecx, esp
push eax
call fcn.0040db5c
mov byte [ebp - 4], 0x1b
call fcn.0062fcbb
push 0x63
pop eax
push 0x6f
mov byte [ebp - 0x64], al
pop eax
push 0x69
mov byte [ebp - 0x63], al
pop eax
add esp, 4
mov byte [ebp - 0x65], al
lea eax, [ebp - 0x68]
mov word [ebp - 0x67], 0x2e68
mov byte [ebp - 0x68], 0x6e
mov byte [ebp - 0x62], 0
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.00405672
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x578]
call fcn.0040db5c
push 0x65
mov byte [ebp - 4], 0x22
pop eax
mov byte [ebp - 0x83], al
mov byte [ebp - 0x8a], 0x69
push 0x6e
mov byte [ebp - 0x85], al
pop eax
push 0x73
mov byte [ebp - 0x8b], al
mov byte [ebp - 0x89], al
pop eax
mov byte [ebp - 0x88], al
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x2c8]
mov word [ebp - 0x87], 0x2e74
push eax
push 0x31a2c0
push 0x95d360
mov byte [ebp - 0x84], 0x78
mov byte [ebp - 0x82], 0
mov byte [ebp - 0x8c], 0x75
call fcn.0063078a
push 0x74
pop eax
push 0x73
mov byte [ebp - 0x9e], al
pop eax
push 0x65
mov byte [ebp - 0x9f], al
pop eax
push 0x6e
pop ecx
mov byte [ebp - 0x9a], al
mov byte [ebp - 0x9c], al
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x578]
mov byte [ebp - 0x99], 0
push eax
lea eax, [ebp - 0x5e4]
mov word [ebp - 0xa4], 0x755c
push eax
mov byte [ebp - 0x9b], 0x78
mov byte [ebp - 0xa2], cl
mov byte [ebp - 0xa1], 0x69
mov byte [ebp - 0xa0], cl
mov byte [ebp - 0x9d], 0x2e
call fcn.0041b17f
add esp, 0xc
lea eax, [ebp - 0x588]
mov byte [ebp - 4], 0x23
push eax
push dword [ebp - 0x5e4]
mov word [ebp - 0x588], 0x532f
mov byte [ebp - 0x586], 0
call fcn.00405768
push dword [ebp - 0x5e4]
call dword [0x646410]
mov ecx, dword [ebp - 0x5e4]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x578]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x558]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x5d8]
lea ecx, [ecx - 0x10]
call fcn.0040d912
xor eax, eax
mov byte [ebp - 4], 0x13
push 0
inc eax
lea ecx, [ebp - 0x4f0]
push eax
call fcn.0040c64e
push 0x72
pop ecx
push 0x73
pop eax
push 0x69
pop edx
push 0x65
mov byte [ebp - 0x139], cl
mov byte [ebp - 0x158], cl
pop ecx
push 0x6e
mov byte [ebp - 0x16a], cl
mov byte [ebp - 0x13a], cl
mov byte [ebp - 0x175], cl
mov byte [ebp - 0x112], cl
mov byte [ebp - 0x15b], cl
mov byte [ebp - 0x159], cl
mov byte [ebp - 0x11d], cl
mov byte [ebp - 0x13f], cl
mov byte [ebp - 0x17d], cl
mov byte [ebp - 0x14c], cl
mov byte [ebp - 0x14e], cl
pop ecx
mov byte [ebp - 0x162], al
mov byte [ebp - 0x16f], al
mov byte [ebp - 0x161], 0x26
mov byte [ebp - 0x120], al
mov byte [ebp - 0x10b], al
mov word [ebp - 0x17c], 0x253d
mov byte [ebp - 0x137], dl
mov dword [ebp - 0x10f], 0x253d4449
mov byte [ebp - 0x15a], 0x56
mov word [ebp - 0x147], 0x3d6e
mov byte [ebp - 0x179], al
mov byte [ebp - 0x124], al
mov word [ebp - 0x12e], 0x706d
mov byte [ebp - 0x12b], dl
mov byte [ebp - 0x113], al
mov dword [ebp - 0x166], 0x253d6e6f
mov dword [ebp - 0x136], 0x253d6e6f
mov word [ebp - 0x13c], 0x5678
mov byte [ebp - 0x155], 0x6f
mov byte [ebp - 0x14a], al
mov byte [ebp - 0x144], al
mov byte [ebp - 0x150], 0x26
mov byte [ebp - 0x132], al
mov byte [ebp - 0x114], 0x26
mov byte [ebp - 0x13e], 0x66
mov byte [ebp - 0x123], 0x26
mov byte [ebp - 0x115], al
mov word [ebp - 0x178], 0x7526
mov byte [ebp - 0x172], 0x44
mov byte [ebp - 0x157], al
mov byte [ebp - 0x140], 0x72
mov byte [ebp - 0x153], 0x3d
mov byte [ebp - 0x176], al
mov byte [ebp - 0x141], dl
mov byte [ebp - 0x17a], 0x25
mov dword [ebp - 0x15f], 0x6d6f7268
mov dword [ebp - 0x12a], 0x44496e67
mov word [ebp - 0x126], 0x253d
mov byte [ebp - 0x168], al
mov byte [ebp - 0x14d], 0x56
mov byte [ebp - 0x148], 0x6f
mov dword [ebp - 0x184], 0x536c6c61
mov byte [ebp - 0x187], 0x6e
mov byte [ebp - 0x11b], al
mov byte [ebp - 0x16b], 0x56
mov byte [ebp - 0x169], 0x72
mov word [ebp - 0x171], 0x253d
mov byte [ebp - 0x111], al
mov byte [ebp - 0x14b], 0x72
mov word [ebp - 0x117], 0x253d
mov word [ebp - 0x11f], 0x5674
mov byte [ebp - 0x122], dl
mov byte [ebp - 0x110], al
mov byte [ebp - 0x17f], 0x61
mov byte [ebp - 0x12c], 0x61
mov byte [ebp - 0x154], cl
mov word [ebp - 0x174], 0x4972
mov word [ebp - 0x143], 0x6626
push 0x74
mov byte [ebp - 0x121], cl
mov byte [ebp - 0x118], cl
pop ecx
mov byte [ebp - 0x119], 0x6f
mov byte [ebp - 0x151], al
mov byte [ebp - 0x149], dl
mov byte [ebp - 0x160], 0x63
mov byte [ebp - 0x10a], 0
mov byte [ebp - 0x186], al
mov byte [ebp - 0x14f], dl
mov byte [ebp - 0x17e], cl
mov byte [ebp - 0x13d], 0x6f
mov byte [ebp - 0x188], dl
mov byte [ebp - 0x138], al
mov byte [ebp - 0x180], cl
mov word [ebp - 0x131], 0x6326
mov byte [ebp - 0x167], dl
mov word [ebp - 0x16e], 0x6f26
mov byte [ebp - 0x11c], 0x72
mov byte [ebp - 0x156], dl
mov byte [ebp - 0x16c], al
mov byte [ebp - 0x11a], dl
mov byte [ebp - 0x145], 0x25
mov byte [ebp - 0x12f], 0x61
mov byte [ebp - 0x152], 0x25
mov byte [ebp - 0x185], cl
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x600]
call fcn.0040d74c
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x508]
push dword [ebp - 0x584]
cmp dword [ebp - 0x4f4], 0x10
cmovae eax, dword [ebp - 0x508]
push eax
push edi
mov edi, dword [ebp - 0x604]
lea eax, [ebp - 0x188]
push edi
push dword [ebp - 0x5e8]
push dword [ebp - 0x598]
push dword [ebp - 0x5a0]
push dword [ebp - 0x540]
push eax
lea eax, [ebp - 0x600]
push eax
call fcn.0041aabc
add esp, 0x28
mov byte [ebp - 0x43], 0
mov word [ebp - 0x46], 0x7261
mov byte [ebp - 0x48], 0x53
push 0x74
pop eax
mov byte [ebp - 0x47], al
mov byte [ebp - 0x44], al
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5a4]
call fcn.0040d74c
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x27
mov esi, dword [ebp - 0x600]
push eax
lea eax, [ebp - 0x5a4]
push esi
push eax
call fcn.0041aabc
add esp, 0xc
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5b4]
call fcn.0040d74c
push 0x2f
mov byte [ebp - 4], 0x28
mov word [ebp - 0xab], 0x253d
pop ecx
push 0x68
pop edx
push 0x73
pop eax
push 0x74
mov byte [ebp - 0xba], cl
mov byte [ebp - 0xb6], al
mov byte [ebp - 0xa9], al
mov byte [ebp - 0xad], al
mov byte [ebp - 0xb7], cl
mov byte [ebp - 0xbb], cl
pop ecx
mov byte [ebp - 0xb8], al
mov eax, dword [ebp - 0x5a4]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x564], esp
push eax
mov byte [ebp - 0xc0], dl
mov word [ebp - 0xb4], 0x702e
mov byte [ebp - 0xb2], dl
mov word [ebp - 0xb1], 0x3f70
mov word [ebp - 0xbd], 0x3a70
mov byte [ebp - 0xb5], 0x6f
mov byte [ebp - 0xb9], 0x25
mov byte [ebp - 0xbe], cl
mov byte [ebp - 0xae], 0x65
mov byte [ebp - 0xa8], 0
mov byte [ebp - 0xaf], cl
mov byte [ebp - 0xbf], cl
mov byte [ebp - 0xac], cl
call fcn.0041a974
pop ecx
mov ecx, dword [ebp - 0x564]
add eax, 0x10
mov dword [ecx], eax
lea eax, [ebp - 0x594]
push eax
call fcn.0062d86f
mov dl, byte [ebp - 0x57c]
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0x29
call fcn.00418eb9
mov byte [ebp - 4], 0x2a
push dword [ebp - 0x594]
push dword [eax]
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x5b4]
push eax
call fcn.0041aabc
mov byte [ebp - 4], 0x29
add esp, 0x10
mov ecx, dword [ebp - 0x570]
lea ecx, [ecx - 0x10]
call fcn.0040d912
push dword [ebp - 0x5b4]
call fcn.0062cd14
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5f8]
call fcn.0040d74c
push 0x65
pop eax
mov byte [ebp - 4], 0x2b
mov byte [ebp - 0x27], al
mov byte [ebp - 0x25], al
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x5f4]
mov byte [ebp - 0x24], 0
push eax
lea eax, [ebp - 0x54c]
mov byte [ebp - 0x26], 0x78
push eax
mov byte [ebp - 0x28], 0x2e
call fcn.0041b17f
add esp, 0xc
xor edx, edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x54c]
inc edx
cmp byte [ebp - 0x543], 0
je 0x402610
cmp dword [eax - 4], edx
jle 0x4025fc
push dword [eax - 0xc]
lea ecx, [ebp - 0x54c]
call fcn.0040d92e
mov eax, dword [ebp - 0x54c]
push eax
lea eax, [ebp - 0x2c8]
push eax
push 0x1628a0
push 0x7faac0
jmp 0x40263b
cmp dword [eax - 4], edx
jle 0x402629
push dword [eax - 0xc]
lea ecx, [ebp - 0x54c]
call fcn.0040d92e
mov eax, dword [ebp - 0x54c]
push eax
lea eax, [ebp - 0x2c8]
push eax
push 0x155620
push 0x6a54a0
call fcn.0063078a
push 0xffffffffffffffff
lea ecx, [ebp - 0x54c]
call fcn.0040d716
push 0x73
pop eax
push dword [ebp - 0x54c]
mov byte [ebp - 0x4f], al
mov byte [ebp - 0x4c], al
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x50]
mov byte [ebp - 0x50], 0x25
push eax
lea eax, [ebp - 0x5f8]
mov word [ebp - 0x4e], 0x255c
push eax
mov byte [ebp - 0x4b], 0
call fcn.0041aabc
add esp, 0x10
call fcn.004f5dba
push eax
lea ecx, [ebp - 0x5dc]
call fcn.0040d74c
push 0x73
pop eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x540]
push 3
mov byte [ebp - 0x2d], al
mov byte [ebp - 0x2f], al
lea eax, [ebp - 0x548]
push 0x1d
push eax
mov byte [ebp - 0x2e], 0x25
mov byte [ebp - 0x30], 0x25
mov byte [ebp - 0x2c], 0
call fcn.0041b0a5
mov dword [ebp - 0x570], eax
push 3
push 0
lea eax, [ebp - 0x5b8]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x540]
call fcn.0041b0a5
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x570]
push dword [ecx]
push dword [eax]
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x5dc]
push eax
call fcn.0041aabc
mov ecx, dword [ebp - 0x5b8]
add esp, 0x10
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x548]
add ecx, 0xfffffff0
call fcn.0040d912
mov eax, dword [ebp - 0x5dc]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x53c], esp
mov dword [ebp - 0x548], esp
push eax
mov dword [ebp - 0x5b8], eax
call fcn.0041a974
mov ecx, dword [ebp - 0x548]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x564], esp
mov dword [ebp - 0x548], esp
mov eax, dword [ebp - 0x5f8]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x578], eax
call fcn.0041a974
mov ecx, dword [ebp - 0x548]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0x31
lea edi, [ebx - 0x10]
mov dword [ebp - 0x5ac], esp
mov dword [ebp - 0x548], esp
push edi
mov dword [ebp - 0x570], edi
call fcn.0041a974
mov ecx, dword [ebp - 0x548]
add eax, 0x10
mov dword [ecx], eax
mov ebx, esp
mov byte [ebp - 4], 0x32
push edi
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
pop ecx
mov byte [ebp - 4], 0x2d
call fcn.00403159
mov ecx, dword [ebp - 0x5b8]
add esp, 0x10
call fcn.0040d912
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x54c]
add ecx, 0xfffffff0
call fcn.0040d912
push ecx
mov ecx, esp
mov dword [ebp - 0x53c], esp
call fcn.0062fd1b
mov dl, byte [ebp - 0x57c]
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x33
call fcn.00418eb9
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
push ecx
sub eax, 0x10
mov dword [ebp - 0x548], esp
mov ebx, esp
push eax
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x35
mov ecx, esp
mov dword [ebp - 0x5b8], esp
mov ebx, 0x681ab4
push ebx
call fcn.0040db5c
mov dl, byte [ebp - 0x57c]
sub esp, 0x10
mov byte [ebp - 4], 0x36
mov ecx, esp
mov dword [ebp - 0x564], esp
call fcn.00418eb9
push ecx
mov byte [ebp - 4], 0x37
mov ecx, esp
mov dword [ebp - 0x5ac], esp
push ebx
call fcn.0040db5c
push ecx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x608], esp
mov eax, dword [ebp - 0x584]
mov ebx, esp
add eax, 0xfffffff0
push eax
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x508]
cmp dword [ebp - 0x4f4], 0x10
mov ecx, esp
mov dword [ebp - 0x5c4], esp
cmovae eax, dword [ebp - 0x508]
push eax
call fcn.0040db5c
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x5a0]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x550], esp
mov ebx, esp
push eax
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3b
mov ebx, esp
mov eax, dword [ebp - 0x540]
add eax, 0xfffffff0
mov dword [ebp - 0x5dc], esp
push eax
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3c
mov ebx, esp
mov dword [ebp - 0x5cc], esp
push dword [ebp - 0x56c]
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
mov byte [ebp - 4], 0x3d
mov ebx, esp
push dword [ebp - 0x580]
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
push ecx
push ecx
mov byte [ebp - 4], 0x3e
call fcn.0062d8fd
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x574]
lea ecx, [ecx - 0x10]
call fcn.0040d912
push 0x6f
pop eax
push 0x72
mov byte [ebp - 0x5f], al
xor ebx, ebx
pop eax
push 0x74
pop ecx
push 0x73
mov byte [ebp - 0x5a], al
mov byte [ebp - 0x5bc], al
mov word [ebp - 0x59], 0x5c65
mov word [ebp - 0x5c], 0x6177
mov dword [ebp - 0x57], 0x415449
mov byte [ebp - 0x5e], 0x66
mov byte [ebp - 0x5d], cl
mov byte [ebp - 0x60], 0x53
mov dword [ebp - 0x60c], 2
mov byte [ebp - 0x5b9], bl
pop eax
push 0x69
mov byte [ebp - 0x5bb], al
pop eax
push ecx
mov byte [ebp - 0x590], al
lea eax, [ebp - 0x2c8]
mov byte [ebp - 0x5ba], cl
mov ecx, esp
mov dword [ebp - 0x53c], esp
push eax
mov word [ebp - 0x58e], 0x70
mov byte [ebp - 0x58f], 0x64
call fcn.0040db5c
push ecx
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x590]
mov ecx, esp
mov dword [ebp - 0x574], esp
push eax
call fcn.0040db5c
push ecx
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x40
mov ecx, esp
push eax
call fcn.0040db5c
mov ecx, 0x80000002
mov byte [ebp - 4], 0x2b
call fcn.0040584b
add esp, 0xc
lea eax, [ebp - 0x60c]
lea edx, [ebp - 0x60]
mov ecx, 0x80000002
push 4
push eax
lea eax, [ebp - 0x5bc]
push 4
push eax
call fcn.00406530
push 0x65
pop eax
push 0x74
pop ecx
push 0x72
pop edx
add esp, 0xc
mov byte [ebp - 0xc9], al
mov byte [ebp - 0x3d], al
lea eax, [ebp - 0x40]
mov byte [ebp - 0xcd], cl
mov byte [ebp - 0x40], cl
mov ecx, esp
mov dword [ebp - 0x53c], esp
push eax
mov word [ebp - 0xd0], 0x6f53
mov word [ebp - 0xcc], 0x6177
mov word [ebp - 0xc8], 0x535c
mov byte [ebp - 0xce], 0x66
mov word [ebp - 0xc5], 0x4f
mov byte [ebp - 0xc6], 0x53
mov byte [ebp - 0xca], dl
mov byte [ebp - 0x3e], 0x75
mov byte [ebp - 0x3c], bl
mov byte [ebp - 0x3f], dl
call fcn.0040db5c
push ecx
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x554]
mov ecx, esp
mov dword [ebp - 0x574], esp
push eax
call fcn.0040db5c
push ecx
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x42
mov ecx, esp
push eax
call fcn.0040db5c
mov ecx, 0x80000001
mov byte [ebp - 4], 0x2b
call fcn.0040584b
add esp, 0xc
mov byte [ebp - 0x70], 0x46
mov word [ebp - 0x6b], 0x68
mov byte [ebp - 0x6e], 0x6e
push 0x69
pop ecx
push 0x73
pop eax
mov byte [ebp - 0x6c], al
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x5a4]
mov byte [ebp - 0x6d], cl
push esi
push eax
mov byte [ebp - 0x6f], cl
call fcn.0041aabc
mov eax, dword [ebp - 0x5a4]
pop ecx
pop ecx
add eax, 0xfffffff0
mov ebx, esp
push eax
mov dword [ebp - 0x574], eax
call fcn.0041a974
add eax, 0x10
mov dword [ebx], eax
lea eax, [ebp - 0x610]
pop ecx
push eax
call fcn.0062d86f
push eax
lea ecx, [ebp - 0x594]
mov byte [ebp - 4], 0x43
call fcn.0041a9d3
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x610]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov dl, byte [ebp - 0x57c]
lea ecx, [ebp - 0x568]
call fcn.00418eb9
mov byte [ebp - 4], 0x44
push dword [ebp - 0x594]
push dword [eax]
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x5b4]
push eax
call fcn.0041aabc
mov byte [ebp - 4], 0x2b
add esp, 0x10
mov ecx, dword [ebp - 0x568]
add ecx, 0xfffffff0
call fcn.0040d912
mov ebx, dword [ebp - 0x5b4]
push ebx
call fcn.0062cd14
push ecx
mov dword [ebp - 0x53c], esp
mov dword [ebp - 0x568], esp
push dword [ebp - 0x578]
call fcn.0041a974
mov ecx, dword [ebp - 0x568]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0x45
mov dword [ebp - 0x568], esp
push edi
call fcn.0041a974
pop ecx
mov ecx, dword [ebp - 0x568]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0x2b
call fcn.00630da9
pop ecx
pop ecx
push 0xa
pop edi
mov ecx, 0x3e8
call fcn.0040a394
dec edi
jne 0x402be4
mov ecx, dword [ebp - 0x578]
call fcn.0040d912
mov ecx, dword [ebp - 0x594]
lea ecx, [ecx - 0x10]
call fcn.0040d912
lea ecx, [ebx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x574]
call fcn.0040d912
lea ecx, [esi - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x570]
call fcn.0040d912
mov ecx, dword [ebp - 0x56c]
call fcn.0040d912
mov ecx, dword [ebp - 0x580]
call fcn.0040d912
mov ecx, dword [ebp - 0x604]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x5e8]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x598]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x540]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x584]
lea ecx, [ecx - 0x10]
call fcn.0040d912
mov ecx, dword [ebp - 0x5a0]
lea ecx, [ecx - 0x10]
call fcn.0040d912
xor eax, eax
push eax
inc eax
push eax
lea ecx, [ebp - 0x508]
call fcn.0040c64e
call fcn.00611c0d
ret