Function at 0x416b10
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46d4b6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5e8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x74], ebx
push 0x4000
call fcn.004332ac
add esp, 4
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
push ebx
push 0
xor edx, edx
lea ecx, [ebp - 0x14]
call fcn.00412ed0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 2
push str..BotNPCKartAIPhysParaCfg.yml
lea ecx, [ebp - 0x54]
call fcn.00406da0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.004348f0
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x54]
call fcn.004080d0
push str.NPCKartAIPhysParaInfo
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x144]
call fcn.00409fd0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11c]
call fcn.00405240
mov dword [ebp - 0x18], 0
xor eax, eax
mov esi, dword [sym.imp.WS2_32.dll_htonl]
mov edi, dword [sym.imp.WS2_32.dll_htons]
cmp eax, 0xc
jae 0x41727c
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00409e40
mov byte [ebp - 4], 7
push str.NPCKartAIPhysPara
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x16c]
call fcn.00404dc0
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x24], ebx
push 0
call edi
mov word [ebx], ax
add ebx, 2
mov dword [ebp - 0x24], ebx
push str.NpcN2OIntervalTime
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x194]
call fcn.00404dc0
push str.NpcTriggerN2ORate
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1bc]
call fcn.00404dc0
push str.NpcRestCheckTime
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0xc
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e4]
call fcn.00404dc0
push str.NpcFixVelocity
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0xd
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20c]
call fcn.00404dc0
push str.NpcFixVelocityRate
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0xe
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x234]
call fcn.00404dc0
push ecx
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041a820
mov byte [ebp - 4], 0xf
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x25c]
call fcn.00404dc0
push str.NpcSJetRate
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x10
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x284]
call fcn.00404dc0
push ecx
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041a9a0
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2ac]
call fcn.00404dc0
push str.ForwardAccel
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xf4]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x3c], ecx
mov byte [ebx], cl
inc ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], 0
xor eax, eax
cmp eax, ecx
jae 0x416f22
push 0
call edi
mov word [ebx], ax
lea ecx, [ebx + 2]
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409e40
mov byte [ebp - 4], 0x13
push 0x480118
lea ecx, [ebp - 0x2d4]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x14
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x20], ecx
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2d4]
call fcn.00404dc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2fc]
call fcn.00404dc0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34c]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409e40
mov byte [ebp - 4], 0x15
push str.Value
lea ecx, [ebp - 0x324]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x16
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x324]
call fcn.00404dc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x34c]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call edi
mov word [ebx], ax
add ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x3c]
jmp 0x416e28
push str.BackwardAccel
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xcc]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x68], ecx
mov byte [ebx], cl
inc ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], 0
xor eax, eax
nop dword [eax]
cmp eax, ecx
jae 0x41705a
push 0
call edi
mov word [ebx], ax
lea ecx, [ebx + 2]
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00409e40
mov byte [ebp - 4], 0x18
push 0x480118
lea ecx, [ebp - 0x374]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x19
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x20], ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x374]
call fcn.00404dc0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x39c]
call fcn.00404dc0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00409e40
mov byte [ebp - 4], 0x1a
push str.Value
lea ecx, [ebp - 0x3c4]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x1b
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x3c4]
call fcn.00404dc0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3ec]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call edi
mov word [ebx], ax
add ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x68]
jmp 0x416f60
push ecx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041ab20
mov byte [ebp - 4], 0x1c
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x414]
call fcn.00404dc0
push str.NpcDriftRate
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [ebx], eax
add ebx, 4
mov dword [ebp - 0x24], ebx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x43c]
call fcn.00404dc0
push str.CompensateParam
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xa4]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x6c], ecx
mov byte [ebx], cl
inc ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], 0
xor eax, eax
nop
cmp eax, ecx
jae 0x4171fa
push 0
call edi
mov word [ebx], ax
lea ecx, [ebx + 2]
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409e40
mov byte [ebp - 4], 0x1f
push str.Percent
lea ecx, [ebp - 0x464]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x20
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x20], ecx
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x464]
call fcn.00404dc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x48c]
call fcn.00404dc0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409e40
mov byte [ebp - 4], 0x21
push str.Value
lea ecx, [ebp - 0x4b4]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x22
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x4b4]
call fcn.00404dc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x4dc]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call edi
mov word [ebx], ax
add ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x6c]
jmp 0x417100
mov edi, dword [ebp - 0x14]
sub ebx, edi
mov dword [ebp - 0x1c], ebx
push ebx
mov eax, dword [sym.imp.WS2_32.dll_htons]
call eax
mov word [edi], ax
add dword [ebp - 0x14], ebx
lea ecx, [ebp - 0x504]
call fcn.00410f40
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x64]
call fcn.00411170
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x504]
call fcn.00404dc0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xa4]
call fcn.00404dc0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xcc]
call fcn.00404dc0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf4]
call fcn.00404dc0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x64]
call fcn.00404dc0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x416bd6
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11c]
call fcn.00404dc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x144]
call fcn.00404dc0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x25
push dword [ebp - 0x74]
push 0
xor edx, edx
lea ecx, [ebp - 0x14]
call fcn.00412ed0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
mov byte [eax], 0xc
inc dword [ebp - 0x14]
mov dword [ebp - 4], 0x27
push str..BotNPCPlayerKartAIPhysParaCfg.yml
lea ecx, [ebp - 0x54]
call fcn.00406da0
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.004348f0
add esp, 8
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x54]
call fcn.004080d0
push str.NPCKartAIPhysParaInfo
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x144]
call fcn.00409fd0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x11c]
call fcn.00405240
mov dword [ebp - 0x20], 0
xor eax, eax
mov ebx, dword [sym.imp.WS2_32.dll_htons]
cmp eax, 0xc
jae 0x417b2e
mov edi, dword [ebp - 0x14]
push 0
call ebx
mov word [edi], ax
add edi, 2
mov dword [ebp - 0x3c], edi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00409e40
mov byte [ebp - 4], 0x2c
push str.NPCKartAIPhysPara
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x504]
call fcn.00404dc0
mov dword [ebp - 0x28], edi
push 0
call ebx
mov word [edi], ax
add edi, 2
mov dword [ebp - 0x28], edi
push str.NpcN2OIntervalTime
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x2f
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4dc]
call fcn.00404dc0
push str.NpcTriggerN2ORate
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x30
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x4b4]
call fcn.00404dc0
push str.NpcRestCheckTime
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x31
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x48c]
call fcn.00404dc0
push str.NpcFixVelocity
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x32
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x464]
call fcn.00404dc0
push str.NpcFixVelocityRate
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x33
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x43c]
call fcn.00404dc0
push ecx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041a820
mov byte [ebp - 4], 0x34
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x414]
call fcn.00404dc0
push str.NpcSJetRate
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x35
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3ec]
call fcn.00404dc0
push ecx
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041a9a0
mov byte [ebp - 4], 0x36
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3c4]
call fcn.00404dc0
push str.ForwardAccel
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xa4]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x6c], ecx
mov byte [edi], cl
inc edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x38], 0
xor eax, eax
nop
cmp eax, ecx
jae 0x41768a
push 0
call ebx
mov word [edi], ax
lea ecx, [edi + 2]
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409e40
mov byte [ebp - 4], 0x38
push 0x480118
lea ecx, [ebp - 0x39c]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x39
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x39c]
call fcn.00404dc0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x374]
call fcn.00404dc0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409e40
mov byte [ebp - 4], 0x3a
push str.Value
lea ecx, [ebp - 0x34c]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x3b
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x34c]
call fcn.00404dc0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x324]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x6c]
jmp 0x417590
push str.BackwardAccel
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xcc]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x68], ecx
mov byte [edi], cl
inc edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], 0
xor eax, eax
cmp eax, ecx
jae 0x4177bb
push 0
call ebx
mov word [edi], ax
lea ecx, [edi + 2]
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00409e40
mov byte [ebp - 4], 0x3d
push 0x480118
lea ecx, [ebp - 0x2fc]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x3e
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2fc]
call fcn.00404dc0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x2d4]
call fcn.00404dc0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00409e40
mov byte [ebp - 4], 0x3f
push str.Value
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x40
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2ac]
call fcn.00404dc0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x284]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x68]
jmp 0x4176c1
push ecx
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041ab20
mov byte [ebp - 4], 0x41
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x25c]
call fcn.00404dc0
push str.NpcDriftRate
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x42
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x28], edi
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x234]
call fcn.00404dc0
push str.CompensateParam
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xf4]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x78], ecx
mov byte [edi], cl
inc edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0
xor eax, eax
cmp eax, ecx
jae 0x41795a
push 0
call ebx
mov word [edi], ax
lea ecx, [edi + 2]
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409e40
mov byte [ebp - 4], 0x44
push str.Percent
lea ecx, [ebp - 0x20c]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x45
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x20c]
call fcn.00404dc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1e4]
call fcn.00404dc0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409e40
mov byte [ebp - 4], 0x46
push str.Value
lea ecx, [ebp - 0x1bc]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x47
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1bc]
call fcn.00404dc0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x194]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x78]
jmp 0x417860
sub edi, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edi
push edi
call ebx
mov ecx, dword [ebp - 0x3c]
mov word [ecx], ax
add edi, ecx
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xf4]
call fcn.00404dc0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xcc]
call fcn.00404dc0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xa4]
call fcn.00404dc0
push str.N2OStartTime
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x48
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x16c]
call fcn.00404dc0
push str.NpcN2OMaxCount
lea eax, [ebp - 0x52c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x49
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 4], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x52c]
call fcn.00404dc0
push str.Dis2FirstPlay
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x4a
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 8], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x554]
call fcn.00404dc0
push str.LostControlTime
lea eax, [ebp - 0x57c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x4b
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 0xc], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x57c]
call fcn.00404dc0
push str.LostInterval
lea eax, [ebp - 0x5a4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x4c
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 0x10], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x5a4]
call fcn.00404dc0
push str.LostControlCount
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x4d
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 0x14], eax
add edi, 0x18
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x5cc]
call fcn.00404dc0
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
sub eax, edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x14], eax
lea ecx, [ebp - 0x5f4]
call fcn.00410f40
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x64]
call fcn.00411170
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x5f4]
call fcn.00404dc0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x64]
call fcn.00404dc0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
jmp 0x417336
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x11c]
call fcn.00404dc0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x144]
call fcn.00404dc0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x50
push dword [ebp - 0x74]
push 0
xor edx, edx
lea ecx, [ebp - 0x14]
call fcn.00412ed0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
mov byte [eax], 0xc
inc dword [ebp - 0x14]
mov dword [ebp - 4], 0x52
push str..BotNPCRankedMatchKartAIPhysParaCfg.yml
lea ecx, [ebp - 0x54]
call fcn.00406da0
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.004348f0
add esp, 8
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x54]
call fcn.004080d0
push str.NPCKartAIPhysParaInfo
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x144]
call fcn.00409fd0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x11c]
call fcn.00405240
mov dword [ebp - 0x20], 0
xor eax, eax
cmp eax, 0xc
jae 0x4183de
mov edi, dword [ebp - 0x14]
push 0
call ebx
mov word [edi], ax
add edi, 2
mov dword [ebp - 0x3c], edi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00409e40
mov byte [ebp - 4], 0x57
push str.NPCKartAIPhysPara
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x5f4]
call fcn.00404dc0
mov dword [ebp - 0x2c], edi
push 0
call ebx
mov word [edi], ax
add edi, 2
mov dword [ebp - 0x2c], edi
push str.NpcN2OIntervalTime
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x5a
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x5cc]
call fcn.00404dc0
push str.NpcTriggerN2ORate
lea eax, [ebp - 0x5a4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x5b
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x5a4]
call fcn.00404dc0
push str.NpcRestCheckTime
lea eax, [ebp - 0x57c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x5c
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x57c]
call fcn.00404dc0
push str.NpcFixVelocity
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x5d
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x554]
call fcn.00404dc0
push str.NpcFixVelocityRate
lea eax, [ebp - 0x52c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x5e
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x52c]
call fcn.00404dc0
push ecx
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041a820
mov byte [ebp - 4], 0x5f
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x504]
call fcn.00404dc0
push str.NpcSJetRate
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x60
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x4dc]
call fcn.00404dc0
push ecx
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041a9a0
mov byte [ebp - 4], 0x61
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x4b4]
call fcn.00404dc0
push str.ForwardAccel
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xa4]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x78], ecx
mov byte [edi], cl
inc edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x38], 0
xor eax, eax
nop dword [eax + eax]
cmp eax, ecx
jae 0x417f3a
push 0
call ebx
mov word [edi], ax
lea ecx, [edi + 2]
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409e40
mov byte [ebp - 4], 0x63
push 0x480118
lea ecx, [ebp - 0x48c]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x64
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x48c]
call fcn.00404dc0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x464]
call fcn.00404dc0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409e40
mov byte [ebp - 4], 0x65
push str.Value
lea ecx, [ebp - 0x43c]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x66
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x43c]
call fcn.00404dc0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x414]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x78]
jmp 0x417e40
push str.BackwardAccel
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0xcc]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x6c], ecx
mov byte [edi], cl
inc edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 0
xor eax, eax
cmp eax, ecx
jae 0x41806b
push 0
call ebx
mov word [edi], ax
lea ecx, [edi + 2]
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00409e40
mov byte [ebp - 4], 0x68
push 0x480118
lea ecx, [ebp - 0x3ec]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x69
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x3ec]
call fcn.00404dc0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x3c4]
call fcn.00404dc0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00409e40
mov byte [ebp - 4], 0x6a
push str.Value
lea ecx, [ebp - 0x39c]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x6b
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x39c]
call fcn.00404dc0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x374]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x6c]
jmp 0x417f71
push ecx
lea eax, [ebp - 0x34c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0041ab20
mov byte [ebp - 4], 0x6c
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x34c]
call fcn.00404dc0
push str.NpcDriftRate
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x6d
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
add edi, 4
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x324]
call fcn.00404dc0
push str.CompensateParam
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0xf4]
call fcn.00405240
mov ecx, eax
mov dword [ebp - 0x68], ecx
mov byte [edi], cl
inc edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], 0
xor eax, eax
cmp eax, ecx
jae 0x41820a
push 0
call ebx
mov word [edi], ax
lea ecx, [edi + 2]
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409e40
mov byte [ebp - 4], 0x6f
push str.Percent
lea ecx, [ebp - 0x2fc]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x70
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x2fc]
call fcn.00404dc0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x2d4]
call fcn.00404dc0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00409e40
mov byte [ebp - 4], 0x71
push str.Value
lea ecx, [ebp - 0x2ac]
push ecx
mov ecx, eax
call fcn.00409fd0
mov byte [ebp - 4], 0x72
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x2ac]
call fcn.00404dc0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x284]
call fcn.00404dc0
mov eax, 0xa
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
add edi, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x68]
jmp 0x418110
sub edi, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edi
push edi
call ebx
mov ecx, dword [ebp - 0x3c]
mov word [ecx], ax
add edi, ecx
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0xf4]
call fcn.00404dc0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xcc]
call fcn.00404dc0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xa4]
call fcn.00404dc0
push str.N2OStartTime
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x73
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi], eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x25c]
call fcn.00404dc0
push str.NpcN2OMaxCount
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x74
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 4], eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x234]
call fcn.00404dc0
push str.Dis2FirstPlay
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x75
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 8], eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x20c]
call fcn.00404dc0
push str.LostControlTime
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x76
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 0xc], eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x1e4]
call fcn.00404dc0
push str.LostInterval
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x77
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 0x10], eax
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x1bc]
call fcn.00404dc0
push str.LostControlCount
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x64]
call fcn.00409fd0
mov byte [ebp - 4], 0x78
mov ecx, eax
call fcn.0040a160
push eax
call esi
mov dword [edi + 0x14], eax
add edi, 0x18
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x194]
call fcn.00404dc0
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
sub eax, edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
push eax
call ebx
mov word [edi], ax
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x14], eax
lea ecx, [ebp - 0x16c]
call fcn.00410f40
mov byte [ebp - 4], 0x79
push eax
lea ecx, [ebp - 0x64]
call fcn.00411170
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x16c]
call fcn.00404dc0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x64]
call fcn.00404dc0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
jmp 0x417be2
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x11c]
call fcn.00404dc0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x144]
call fcn.00404dc0
mov dword [ebp - 4], 0xffffffff
push 0x3bc27
call esi
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
add dword [ebp - 0x14], 4
push 0x3c
call ebx
mov ecx, dword [ebp - 0x14]
mov word [ecx], ax
add dword [ebp - 0x14], 2
push 0xa
call ebx
mov ecx, dword [ebp - 0x14]
mov word [ecx], ax
add dword [ebp - 0x14], 2
push 0xc
call ebx
mov ecx, dword [ebp - 0x14]
mov word [ecx], ax
add dword [ebp - 0x14], 2
push 0
call ebx
mov ecx, dword [ebp - 0x14]
mov word [ecx], ax
mov eax, dword [ebp - 0x14]
add eax, 2
mov dword [ebp - 0x14], eax
mov byte [eax], 1
mov edi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x14], edi
push 0
call ebx
mov word [edi], ax
lea ebx, [edi + 2]
push 0
call esi
mov dword [ebx], eax
push 0x64
call esi
mov dword [ebx + 4], eax
add ebx, 8
push 0
call esi
mov dword [ebx], eax
mov edi, dword [ebp - 0x14]
sub ebx, edi
add ebx, 4
push ebx
mov eax, dword [sym.imp.WS2_32.dll_htons]
call eax
mov word [edi], ax
add dword [ebp - 0x14], ebx
push 0x190
call esi
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
add dword [ebp - 0x14], 4
push 0xb54
call esi
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
add dword [ebp - 0x14], 4
push 0x32
call esi
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
add dword [ebp - 0x14], 4
push 0
call esi
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
mov byte [eax], 0
inc dword [ebp - 0x14]
push 0x4e20
call esi
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov byte [eax], 0
mov edi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x14], edi
push 0
mov ebx, dword [sym.imp.WS2_32.dll_htons]
call ebx
mov word [edi], ax
push 0
call esi
mov dword [edi + 2], eax
push 0xea60
call esi
mov dword [edi + 6], eax
push 0xa
call esi
mov dword [edi + 0xa], eax
add edi, 0xe
push 0
call esi
mov dword [edi], eax
mov esi, dword [ebp - 0x14]
sub edi, esi
add edi, 4
push edi
call ebx
mov word [esi], ax
mov eax, dword [ebp - 0x14]
add eax, edi
mov dword [ebp - 0x14], eax
mov byte [eax], 0x10
inc dword [ebp - 0x14]
push 0xa
call ebx
mov ecx, dword [ebp - 0x14]
mov word [ecx], ax
mov eax, dword [ebp - 0x14]
add eax, 2
mov dword [ebp - 0x14], eax
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov byte [eax], 0
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
mov esi, dword [ebp - 0x7c]
sub ecx, esi
mov ebx, dword [ebp - 0x74]
movzx eax, word [ebx + 0x10]
push ecx
push 2
push eax
push 1
push eax
push ecx
push esi
mov edx, 0x61ea
mov ecx, ebx
call fcn.004202d0
add esp, 0x1c
push esi
call fcn.00433246
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret