Function at 0x404163
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xa0
mov eax, 0x418a21
call fcn.00417b2d
mov edi, ecx
mov dword [ebp - 0x18], edi
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0xac], ebx
and dword [ebp - 0x5c], 0
mov dword [ebp - 0x3c], ebx
mov ecx, ebx
mov dword [ebp - 4], 1
call dword [0x41d4ac]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x5c], 1
call dword [0x41d488]
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 2
call dword [0x41d570]
push 0x49938c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call dword [0x41d3a4]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
mov ebx, dword [0x41d568]
call ebx
mov eax, dword [ebp + 0x10]
mov ecx, 0xab1cdf1c
cmp eax, ecx
ja 0x4047ce
je 0x40479f
mov ecx, 0x5af1f8fe
cmp eax, ecx
ja 0x4046a6
je 0x404628
cmp eax, 0xba545b7
je 0x40461e
cmp eax, 0x17b5a5f0
je 0x40454a
cmp eax, 0x1d8f77d1
je 0x4044f0
cmp eax, 0x1f2117c7
je 0x404428
cmp eax, 0x23a9f9f1
je 0x404367
cmp eax, 0x3893133c
jne 0x40434a
push 0x20
call fcn.004168d5
mov esi, eax
pop ecx
mov dword [ebp - 0x40], esi
push 8
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x5e
mov edi, esi
rep stosd dword es:[edi], eax
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
push ecx
mov byte [ebp - 4], 0x5f
mov ecx, eax
push 0
mov dword [ebp - 0x5c], 3
call dword [0x41d560]
mov edi, dword [ebp - 0x18]
mov ecx, esi
push eax
lea eax, [edi + 0x5c]
push eax
call fcn.00415420
mov esi, eax
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x5c], 1
call ebx
movss xmm2, dword [edi + 0x74]
cvtps2pd xmm2, xmm2
movaps xmm0, xmm2
mulsd xmm0, qword [0x49b640]
call fcn.004012e8
mulsd xmm2, qword [0x49b630]
mov dword [ebp - 0x20], eax
movaps xmm0, xmm2
call fcn.004012e8
mov dword [ebp - 0x1c], eax
mov ecx, esi
lea eax, [ebp - 0x20]
push eax
call dword [0x41db48]
movss xmm2, dword [edi + 0x74]
cvtps2pd xmm2, xmm2
movaps xmm0, xmm2
mulsd xmm0, qword [0x49b650]
call fcn.004012e8
mulsd xmm2, qword [0x49b638]
mov dword [ebp - 0x20], eax
movaps xmm0, xmm2
call fcn.004012e8
mov dword [ebp - 0x1c], eax
mov ecx, esi
lea eax, [ebp - 0x20]
push eax
call dword [0x41d940]
mov ecx, esi
call dword [0x41d930]
mov esi, dword [ebp - 0x3c]
mov ebx, dword [0x41d48c]
lea ecx, [ebp - 0x38]
call ebx
lea ecx, [ebp + 0x14]
call ebx
mov eax, esi
call fcn.00417adc
ret 0x14
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 9
push ecx
mov ecx, eax
call dword [0x41d558]
mov esi, eax
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call dword [0x41d31c]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x18]
mov edi, dword [0x41d330]
call edi
test al, al
jne 0x4043b3
push esi
lea ecx, [ebp - 0x18]
call dword [0x41d328]
lea ecx, [ebp - 0x18]
call edi
lea ecx, [ebp - 0x18]
mov byte [ebp - 0x74], al
mov byte [ebp - 4], 0xa
call dword [0x41d320]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x70]
call dword [0x41d56c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call dword [0x41d3a4]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0xd
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x70]
call ebx
lea ecx, [ebp - 0x54]
call dword [0x41d3c0]
lea ecx, [ebp - 0x50]
jmp 0x404543
mov edi, dword [0x41d494]
lea eax, [ebp - 0x30]
push 3
push eax
lea ecx, [ebp + 0x14]
call edi
mov dword [ebp - 0x54], eax
push 2
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp + 0x14]
call edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x58
mov esi, dword [0x41d558]
push ecx
mov ecx, eax
call esi
mov ebx, eax
push 1
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x59
push eax
lea ecx, [ebp + 0x14]
call edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, eax
call esi
mov edi, eax
push 0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x5b
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
mov esi, eax
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x54]
push 0
call dword [0x41d564]
movzx eax, al
mov ecx, esi
push eax
push ebx
push edi
push 0
call dword [0x41d560]
mov ecx, dword [ebp - 0x18]
push eax
call fcn.00405fa5
mov esi, dword [0x41d568]
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x74]
call dword [0x41d3c0]
lea ecx, [ebp - 0x88]
call esi
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x30]
call esi
jmp 0x40434a
call fcn.00408d27
movzx eax, al
lea ecx, [ebp - 0x70]
push eax
call dword [0x41d56c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call dword [0x41d3a4]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 8
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x70]
call ebx
jmp 0x40434d
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
push ecx
mov ecx, eax
call dword [0x41d558]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x14
push ecx
mov ecx, eax
call dword [0x41d394]
mov ecx, eax
mov byte [ebp - 4], 0x15
call dword [0x41d378]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [0x41d34c]
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x16
call dword [0x41d3a8]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x5c], 5
call dword [0x41d370]
lea ecx, [ebp - 0x74]
call dword [0x41d370]
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x70]
call dword [0x41d578]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call dword [0x41d3a4]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x70]
call ebx
lea ecx, [ebp - 0x18]
call dword [0x41d3c0]
lea ecx, [ebp - 0x40]
jmp 0x40441a
call fcn.00408fa0
jmp 0x40434a
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x30
push ecx
mov ecx, eax
call dword [0x41d558]
push eax
mov byte [ebp - 4], 0x31
call fcn.00408774
movzx eax, al
lea ecx, [ebp - 0x70]
push eax
call dword [0x41d56c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call dword [0x41d3a4]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x33
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x70]
call ebx
jmp 0x404616
cmp eax, 0x708b694e
je 0x404764
cmp eax, 0x76535355
je 0x40472f
cmp eax, 0x8370dbc3
je 0x40470d
cmp eax, 0x8ab85b9a
je 0x4046dd
cmp eax, 0xa9c7b810
jne 0x40434a
mov ecx, edi
call fcn.0040647b
jmp 0x40434a
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
push 0
mov ecx, eax
mov byte [ebp - 4], 0x4e
call dword [0x41d564]
movzx eax, al
push eax
call fcn.00408b03
lea ecx, [ebp - 0x50]
call ebx
jmp 0x40434a
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
push 0
mov ecx, eax
mov byte [ebp - 4], 0x5d
call dword [0x41d560]
mov dword [edi + 0x6c], eax
jmp 0x404703
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
push ecx
push ecx
xorps xmm0, xmm0
mov byte [ebp - 4], 0x56
mov ecx, eax
movsd qword [esp], xmm0
call dword [0x41d55c]
push ecx
push ecx
mov ecx, dword [edi + 0x20]
fstp qword [esp]
call dword [0x41d844]
jmp 0x404703
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push ecx
mov ecx, eax
call dword [0x41d558]
mov byte [ebp - 4], 0xf
mov ecx, dword [edi + 0x24]
push eax
call dword [0x41d458]
lea ecx, [ebp - 0x40]
call dword [0x41d3c0]
jmp 0x404703
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x54
push ecx
mov ecx, eax
call dword [0x41d558]
mov byte [ebp - 4], 0x55
mov ecx, dword [edi + 0x3c]
push eax
call dword [0x41dab8]
jmp 0x404791
mov ecx, 0xd15cf999
cmp eax, ecx
ja 0x404b31
je 0x4049b5
cmp eax, 0xab8216ae
je 0x40493a
cmp eax, 0xb18791be
je 0x40492e
cmp eax, 0xb1984c23
je 0x404923
cmp eax, 0xb4b50ac5
je 0x4048d7
cmp eax, 0xb514fc0d
je 0x4048b2
cmp eax, 0xcc155aa5
jne 0x40434a
mov edi, dword [0x41d494]
lea eax, [ebp - 0x88]
push 1
push eax
lea ecx, [ebp + 0x14]
call edi
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4f
mov esi, dword [0x41d558]
push ecx
mov ecx, eax
call esi
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x50
call dword [0x41d4b8]
push 0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp + 0x14]
call edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
push ecx
mov ecx, eax
call esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x53
push ecx
push eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x24]
call dword [0x41d450]
lea ecx, [ebp - 0x40]
call dword [0x41d3c0]
lea ecx, [ebp - 0x50]
call ebx
lea ecx, [ebp - 0x70]
call dword [0x41d4c4]
lea ecx, [ebp - 0x54]
call dword [0x41d3c0]
lea ecx, [ebp - 0x88]
jmp 0x404706
mov ecx, dword [edi + 0x20]
call dword [0x41d850]
mov ecx, eax
call dword [0x41d83c]
mov ecx, eax
call dword [0x41d868]
mov ecx, edi
call fcn.00415bb6
jmp 0x40434a
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x34
push ecx
mov ecx, eax
call dword [0x41d558]
push 0
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x35
call dword [0x41d434]
push eax
mov byte [ebp - 4], 0x36
call dword [0x41d68c]
pop ecx
lea ecx, [ebp - 0x40]
call dword [0x41d438]
lea ecx, [ebp - 0x54]
jmp 0x404794
call dword [0x41d46c]
jmp 0x40434a
mov ecx, edi
call fcn.00406999
jmp 0x40434a
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
push 0
mov ecx, eax
mov byte [ebp - 4], 0x10
call dword [0x41d564]
movzx eax, al
push eax
call fcn.00408c69
movzx eax, al
lea ecx, [ebp - 0x70]
push eax
call dword [0x41d56c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call dword [0x41d3a4]
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x12
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x70]
call ebx
jmp 0x404420
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d3f0]
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov dword [ebp - 0x40], ecx
jmp 0x404abc
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x70]
push esi
push eax
call dword [0x41d494]
or dword [ebp - 0x5c], 8
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x70]
call dword [0x41d554]
lea ecx, [ebp - 0x70]
call ebx
lea ecx, [ebp - 0x98]
call dword [0x41d3d4]
mov esi, eax
push 0
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x20]
call dword [0x41d494]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, eax
call dword [0x41d558]
push esi
push eax
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1f
mov ecx, dword [edi + 0x24]
push eax
call dword [0x41d454]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x20
push ecx
mov ecx, eax
call dword [0x41d4d4]
mov esi, dword [0x41d4c4]
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x54]
call dword [0x41d3c0]
lea ecx, [ebp - 0xa8]
call ebx
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x25
call esi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x88]
call dword [0x41d578]
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x38]
call dword [0x41d498]
lea ecx, [ebp - 0x88]
call ebx
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [0x41d48c]
mov esi, dword [ebp - 0x18]
inc esi
lea eax, [ebp - 0x78]
mov dword [ebp - 0x18], esi
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d3f8]
cmp esi, dword [eax + 4]
jne 0x4049cf
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x88]
call dword [0x41d57c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call dword [0x41d3a4]
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x28
mov esi, dword [ebp - 0x3c]
mov ecx, esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
call dword [0x41d3c0]
lea ecx, [ebp - 0x88]
jmp 0x404543
cmp eax, 0xd5dc4c34
je 0x404e7d
cmp eax, 0xe0023dbb
je 0x404e47
cmp eax, 0xe0902b2a
je 0x404d9b
cmp eax, 0xe33e76d6
je 0x404c05
cmp eax, 0xffed3eb4
jne 0x40434a
mov ebx, dword [0x41d494]
lea eax, [ebp - 0x50]
push 2
push eax
lea ecx, [ebp + 0x14]
call ebx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x48
mov esi, dword [0x41d558]
push ecx
mov ecx, eax
call esi
mov edi, eax
push 1
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp + 0x14]
call ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4a
push ecx
mov ecx, eax
call esi
mov esi, eax
push 0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [ebp + 0x14]
call ebx
push edi
push esi
push 0
mov ecx, eax
mov byte [ebp - 4], 0x4c
call dword [0x41d560]
push eax
call fcn.0040606c
mov esi, dword [0x41d568]
lea ecx, [ebp - 0x98]
call esi
lea ecx, [ebp - 0x40]
call dword [0x41d3c0]
lea ecx, [ebp - 0xa8]
call esi
lea ecx, [ebp - 0x54]
call dword [0x41d3c0]
lea ecx, [ebp - 0x50]
jmp 0x4044e9
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d3f0]
lea ecx, [ebp + 0x14]
mov esi, dword [eax]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x74], esi
call dword [0x41d3f8]
jmp 0x404d48
push edi
lea eax, [ebp - 0x88]
mov ecx, esi
push eax
call dword [0x41d494]
or dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x88]
call dword [0x41d554]
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x39
call ebx
push 0x4991cc
lea ecx, [ebp - 0x14]
call dword [0x41d3a4]
push 1
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x20]
call dword [0x41d494]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x3b
push ecx
mov ecx, eax
call dword [0x41d558]
mov esi, eax
push 0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x20]
call dword [0x41d494]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, eax
call dword [0x41d558]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3e
push ecx
push esi
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004089ea
lea ecx, [ebp - 0x40]
call dword [0x41d3c0]
lea ecx, [ebp - 0x98]
call ebx
lea ecx, [ebp - 0x54]
call dword [0x41d3c0]
lea ecx, [ebp - 0xa8]
call ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x44
call dword [0x41d3c0]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x50]
call dword [0x41d578]
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call dword [0x41d498]
lea ecx, [ebp - 0x50]
call ebx
lea ecx, [ebp - 0x18]
call dword [0x41d3c0]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [0x41d48c]
lea eax, [ebp - 0x28]
inc edi
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d3f8]
mov esi, dword [ebp - 0x74]
cmp edi, dword [eax + 4]
jne 0x404c2c
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x50]
call dword [0x41d57c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x46
call dword [0x41d3a4]
mov byte [ebp - 4], 0x47
mov esi, dword [ebp - 0x3c]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
lea eax, [ebp - 0x68]
push eax
call dword [0x41d4b4]
mov ecx, eax
call dword [0x41d504]
lea ecx, [ebp - 0x14]
jmp 0x40441a
mov edi, dword [0x41d494]
lea eax, [ebp - 0xa8]
push 1
push eax
lea ecx, [ebp + 0x14]
call edi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x29
mov esi, dword [0x41d554]
push ecx
mov ecx, eax
call esi
push 0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp + 0x14]
call edi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, eax
call esi
sub esp, 0x14
mov byte [ebp - 4], 0x2e
mov edi, esp
lea eax, [ebp - 0x20]
mov dword [ebp - 0x40], edi
mov ecx, edi
mov esi, dword [0x41d484]
push eax
call esi
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [edi + 8]
call esi
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
mov dword [edi + 0x10], eax
mov byte [ebp - 4], 0x2e
call fcn.00407787
add esp, 0x14
lea ecx, [ebp - 0x28]
call dword [0x41d618]
mov esi, dword [0x41d48c]
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x58]
call esi
lea ecx, [ebp - 0x98]
call ebx
lea ecx, [ebp - 0xa8]
jmp 0x404706
push 0
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp + 0x14]
call dword [0x41d494]
push 0
mov ecx, eax
mov byte [ebp - 4], 0x4d
call dword [0x41d564]
movzx eax, al
mov ecx, edi
push eax
call fcn.00406134
lea ecx, [ebp - 0x98]
jmp 0x404706
call fcn.00408bdc
movzx eax, al
lea ecx, [ebp - 0x50]
push eax
call dword [0x41d56c]
push 0x499390
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call dword [0x41d3a4]
mov byte [ebp - 4], 6
jmp 0x404d74