Function at 0x45fd68
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x39c
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402808
mov edx, 0x5211c8
lea ecx, [ebp - 0x3a8]
call fcn.00404766
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x380], 0x8002
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x45fe93
mov word [ebp - 0x18], 0x39
mov word [ebp - 0x80], 0x42
mov word [ebp - 0x258], 0x44
mov word [ebp - 0x254], 0x4d
mov word [ebp - 0x218], 0x9f
mov word [ebp - 0x98], 0x9e
mov word [ebp - 0x250], 0x66
mov word [ebp - 0x94], 0xd9
mov word [ebp - 0x24c], 0x79
mov word [ebp - 0x104], 0x8e
mov word [ebp - 0xdc], 0x37
mov word [ebp - 0x7c], 0x78
mov word [ebp - 0x1b0], 0x4e
mov word [ebp - 0x1f4], 0x51
mov word [ebp - 0x29c], 0xa8
mov word [ebp - 0x1ac], 0xd3
mov word [ebp - 0x1a8], 0xd2
mov word [ebp - 0x174], 0x6f
mov word [ebp - 0x170], 0xbe
mov word [ebp - 0x16c], 0x8d
mov word [ebp - 0x100], 0x35
jmp 0x460005
mov dword [ebp - 0x378], 2
mov dword [ebp - 0x380], 0x8002
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x45fede
mov word [ebp - 0x100], 0x3b
mov word [ebp - 0xdc], 0x3d
mov word [ebp - 0x7c], 0x73
jmp 0x460005
mov word [ebp - 0x18], 0xcd
mov word [ebp - 0x80], 0x17
mov word [ebp - 0x258], 0xcf
mov word [ebp - 0x254], 0xce
mov word [ebp - 0x218], 0xdd
mov word [ebp - 0x98], 0xd1
mov word [ebp - 0x250], 0x25
mov word [ebp - 0x94], 0xdb
mov word [ebp - 0x24c], 0xe1
mov word [ebp - 0x104], 0x2c
mov word [ebp - 0xdc], 0x13
mov word [ebp - 0x7c], 0x2b
mov word [ebp - 0x1b0], 0xd2
mov word [ebp - 0x1f4], 0xd7
mov word [ebp - 0x29c], 0xe3
mov word [ebp - 0x1ac], 0x3a
mov word [ebp - 0x1a8], 0xde
mov word [ebp - 0x174], 0x27
mov word [ebp - 0x170], 0x16
mov word [ebp - 0x16c], 0xd
mov word [ebp - 0x100], 0x11
cmp word [0x521220], 0x1e
jl 0x460005
mov word [ebp - 0x174], 0x27
mov word [ebp - 0x18], 0xc0
mov word [ebp - 0x258], 0xc2
mov word [ebp - 0x254], 0xc1
mov word [ebp - 0x218], 0xd0
mov word [ebp - 0x98], 0xc4
mov word [ebp - 0x1b0], 0xc5
mov word [ebp - 0x1f4], 0xca
mov word [ebp - 0x29c], 0xd6
mov word [ebp - 0x1a8], 0xd1
mov word [ebp - 0x94], 0xce
mov word [ebp - 0x24c], 0xd4
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd
jne 0x460034
mov edx, 0x40e220
lea ecx, [ebp - 0x138]
call fcn.004048b0
jmp 0x460044
mov edx, 0x40dac4
lea ecx, [ebp - 0x138]
call fcn.004048b0
mov word [0x5210dc], 2
mov dword [ebp - 0x378], 2
mov dword [ebp - 0x380], 0x8002
push 0x5211c8
lea eax, [ebp - 0x380]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x460206
mov edx, 0x40df34
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x68]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x228]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x1a8]
jne 0x4601b7
mov dword [ebp - 0x378], 0x40df44
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x228]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044506b
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x228]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40deb4
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0x30
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xc8]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044a3ea
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x1f0]
call fcn.004048d4
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x168]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xdc]
jne 0x46031a
mov dword [ebp - 0x378], 0x40c2d4
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x168]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x2cc]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x7c]
jne 0x46040e
mov dword [ebp - 0x378], 0x40c2e4
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x2cc]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x2cc]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1e0]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x100]
jne 0x4606a5
mov dword [ebp - 0x378], 0x40c2a4
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1e0]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044506b
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
je 0x460560
lea eax, [ebp - 0x2e0]
push eax
call fcn.004bcd00
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.004048d4
lea ecx, [ebp - 0x2e0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x4606a5
mov dword [ebp - 0x378], 0x40bf4c
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044506b
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
je 0x4606a0
lea eax, [ebp - 0x2e0]
push eax
call fcn.004bcd00
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1e0]
call fcn.004048d4
lea ecx, [ebp - 0x2e0]
call fcn.00404844
jmp 0x460560
lea eax, [ebp - 0x2e0]
push eax
call fcn.00451b94
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x28]
call fcn.004048d4
mov dword [ebp - 0x378], 2
mov dword [ebp - 0x380], 0x8002
push 0x5211c8
lea eax, [ebp - 0x380]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4607e9
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
mov dword [ebp - 0x388], 0x40bffc
mov dword [ebp - 0x390], 8
lea eax, [ebp - 0x330]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1a4]
call fcn.004048d4
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 6
call fcn.00404898
add esp, 0x1c
jmp 0x46235b
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x124]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x19
jne 0x4608dd
mov dword [ebp - 0x378], 0x40df60
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x124]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x124]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x298]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x18]
jne 0x4609d1
mov dword [ebp - 0x378], 0x40df70
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x298]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044506b
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x298]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40df84
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x278]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40df98
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x248]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x194]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x24c]
jne 0x460b54
mov dword [ebp - 0x378], 0x40dfb0
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x194]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40dfc4
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x380], 0x8002
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 1
setl cl
neg ecx
mov word [ebp - 0x388], cx
mov dword [ebp - 0x390], 0xb
push 0x5211c8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.00404808
push eax
call fcn.00404892
mov word [ebp - 0x398], ax
lea ecx, [ebp - 0x2d0]
call fcn.00404868
lea ecx, [ebp - 0x390]
call fcn.00404844
movsx eax, word [ebp - 0x398]
test eax, eax
je 0x460c8b
mov edx, 0x40dc74
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xd8
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xfc]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40dfd8
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x58]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40dff0
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xd8]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40d448
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0x14
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x78]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1c0]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x104]
jne 0x460e57
mov dword [ebp - 0x378], 0x40bfe8
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1c0]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044506b
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1c0]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov edx, 0x40dbc0
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x148]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40e01c
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x48]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x114]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x16c]
jne 0x460f42
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044bb2e
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x114]
call fcn.004048d4
mov edx, 0x40e02c
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x2ac]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x134]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x80]
jne 0x461120
mov dword [ebp - 0x378], 0x40e040
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x134]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x134]
call fcn.004048d4
lea ecx, [ebp - 0x2e0]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x461120
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
mov dword [ebp - 0x378], 0x40bf4c
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x2f0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x388], 0x40bffc
mov dword [ebp - 0x390], 8
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x134]
call fcn.004048d4
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1d0]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x174]
jne 0x461217
mov dword [ebp - 0x378], 0x40da70
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1d0]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1d0]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0xa8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x94]
jne 0x46130e
mov dword [ebp - 0x378], 0x40e050
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0xa8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xa8]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x38]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x170]
jne 0x4613f9
mov dword [ebp - 0x378], 0x40c298
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x38]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044506b
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x380], 0x8002
push 0x5211c8
lea eax, [ebp - 0x380]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4615bd
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x184]
call fcn.004048d4
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x238]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x288]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0xec]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x2bc]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x90]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0xb8]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x214]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x268]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x204]
call fcn.00404766
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x158]
call fcn.00404766
jmp 0x461e42
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x184]
call fcn.00404766
cmp word [0x521220], 0x1e
jge 0x4616e2
mov edx, 0x40e068
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xd9
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x288]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40e07c
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xca
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x238]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40e0a0
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xda
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xec]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
jmp 0x4617cf
mov edx, 0x40e068
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0x50
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x288]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40e07c
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xbd
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x238]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40e0a0
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xcd
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0xec]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov edx, 0x40e090
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xdc
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x2bc]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
cmp word [0x521220], 0x1e
jge 0x461879
mov edx, 0x40e0b4
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xe0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
jmp 0x4618c8
mov edx, 0x40e0b4
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xd3
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x90]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0xb8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xe2
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd5
setne cl
and ebx, ecx
test ebx, ebx
jne 0x4619e5
mov dword [ebp - 0x378], 0x40e0c4
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0xb8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x461a40
mov edx, 0x40e0e0
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xd8
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x214]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
jmp 0x461a8f
mov edx, 0x40e0e0
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xcb
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x214]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x268]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xdf
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xd2
setne cl
and ebx, ecx
test ebx, ebx
jne 0x461bac
mov dword [ebp - 0x378], 0x40dcb4
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x268]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x268]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x378], 0x40a6cc
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x204]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x2a
jne 0x461df3
mov dword [ebp - 0x378], 0x40dca0
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x204]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xd3
jne 0x461c9b
mov dword [ebp - 0x378], 0x40e0fc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x204]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x462590
lea eax, [ebp - 0x2e0]
push eax
call fcn.00444aa2
mov dword [ebp - 0x378], 0x40bffc
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x204]
call fcn.004048d4
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x10
jne 0x461df3
mov edx, 0x40e108
lea ecx, [ebp - 0x2d0]
call fcn.004048b0
mov word [ebp - 0x394], 0xd0
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.0044b956
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x158]
call fcn.004048d4
lea ecx, [ebp - 0x2d0]
call fcn.00404868
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x370]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.004048b6
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 0xa
call fcn.00404898
add esp, 0x2c
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.004048b6
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 7
call fcn.00404898
add esp, 0x20
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.004048b6
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 7
call fcn.00404898
add esp, 0x20
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x330]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.004048b6
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 8
call fcn.00404898
add esp, 0x24
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.004048b6
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x380], 8
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x1a4]
call fcn.00404766
push 0x46256f
jmp 0x4623d3
lea ecx, [ebp - 0x3a8]
call fcn.00404844
lea ecx, [ebp - 0x28]
call fcn.00404844
lea ecx, [ebp - 0x38]
call fcn.00404844
lea ecx, [ebp - 0x48]
call fcn.00404844
lea ecx, [ebp - 0x58]
call fcn.00404844
lea ecx, [ebp - 0x68]
call fcn.00404844
lea ecx, [ebp - 0x78]
call fcn.00404844
lea ecx, [ebp - 0x90]
call fcn.00404844
lea ecx, [ebp - 0xa8]
call fcn.00404844
lea ecx, [ebp - 0xb8]
call fcn.00404844
lea ecx, [ebp - 0xc8]
call fcn.00404844
lea ecx, [ebp - 0xd8]
call fcn.00404844
lea ecx, [ebp - 0xec]
call fcn.00404844
lea ecx, [ebp - 0xfc]
call fcn.00404844
lea ecx, [ebp - 0x114]
call fcn.00404844
lea ecx, [ebp - 0x124]
call fcn.00404844
lea ecx, [ebp - 0x134]
call fcn.00404844
lea ecx, [ebp - 0x138]
call fcn.00404868
lea ecx, [ebp - 0x148]
call fcn.00404844
lea ecx, [ebp - 0x158]
call fcn.00404844
lea ecx, [ebp - 0x168]
call fcn.00404844
lea ecx, [ebp - 0x184]
call fcn.00404844
lea ecx, [ebp - 0x194]
call fcn.00404844
lea ecx, [ebp - 0x1c0]
call fcn.00404844
lea ecx, [ebp - 0x1d0]
call fcn.00404844
lea ecx, [ebp - 0x1e0]
call fcn.00404844
lea ecx, [ebp - 0x1f0]
call fcn.00404844
lea ecx, [ebp - 0x204]
call fcn.00404844
lea ecx, [ebp - 0x214]
call fcn.00404844
lea ecx, [ebp - 0x228]
call fcn.00404844
lea ecx, [ebp - 0x238]
call fcn.00404844
lea ecx, [ebp - 0x248]
call fcn.00404844
lea ecx, [ebp - 0x268]
call fcn.00404844
lea ecx, [ebp - 0x278]
call fcn.00404844
lea ecx, [ebp - 0x288]
call fcn.00404844
lea ecx, [ebp - 0x298]
call fcn.00404844
lea ecx, [ebp - 0x2ac]
call fcn.00404844
lea ecx, [ebp - 0x2bc]
call fcn.00404844
lea ecx, [ebp - 0x2cc]
call fcn.00404844
ret
call fcn.0040477e