Function at 0x40c240
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4658c4
mov eax, dword fs:[0]
push eax
sub esp, 0x23c
mov eax, dword [0x47d080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3c], ecx
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x20]
mov esi, dword [ebp + 0xc]
mov ecx, edi
push eax
mov dword [ebp - 0x50], edi
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 1
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x20]
mov ebx, edi
push eax
mov ecx, ebx
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 2
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 3
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 4
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 6
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 7
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 8
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 9
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0xa
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0xb
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0xc
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0xd
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0xe
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0xf
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x10
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x11
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x12
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x13
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x14
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x15
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x16
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x17
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x18
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x19
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x1a
push eax
call fcn.0042b1e0
movzx edi, ax
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x1b
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x1c
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x1d
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x1e
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x1f
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x20
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x21
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x22
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x23
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x24
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x25
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x20]
push eax
mov ecx, ebx
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x26
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x27
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x28
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x29
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x2a
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x2b
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x2c
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x20]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x2d
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x2e
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x2f
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x30
push eax
call fcn.00429ca0
mov bl, al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
mov eax, dword [ebp - 0x3c]
mov ebx, dword [ebp - 0x50]
cmp word [eax + 4], 0x60
ja 0x40ce01
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x31
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x32
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x62
jb 0x40cebc
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x33
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x34
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x64
jb 0x40d249
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x35
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x36
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x20]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x37
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x20]
push eax
mov ecx, ebx
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x38
push eax
call fcn.0042a630
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x14], 0
xorps xmm0, xmm0
mov ecx, ebx
push eax
movq qword [ebp - 0x1c], xmm0
call fcn.00406a30
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042c1a0
lea ecx, [ebp - 0xa0]
call fcn.00418480
mov dword [ebp - 4], 0x3a
mov edi, dword [ebp - 0x1c]
cmp edi, dword [ebp - 0x18]
je 0x40d038
add edi, 0xc
cmp byte [edi + 4], 0
je 0x40d011
push edi
mov ecx, esi
call fcn.0042a180
cmp dword [edi], 0
jbe 0x40d02d
mov ecx, dword [edi - 0xc]
mov eax, dword [edi - 8]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
add edi, 0x14
lea eax, [edi - 0xc]
cmp eax, dword [ebp - 0x18]
jne 0x40d003
lea eax, [ebp - 0x90]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x3c
push eax
call fcn.0042a630
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x3a
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x90]
mov dword [ebp - 0x24], 0
xorps xmm0, xmm0
mov ecx, ebx
push eax
movq qword [ebp - 0x2c], xmm0
call fcn.00406a30
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00429f10
lea ecx, [ebp - 0x90]
call fcn.00418480
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
cmp edi, eax
je 0x40d0d3
mov ebx, eax
push edi
mov ecx, esi
call fcn.0042a180
add edi, 4
cmp edi, ebx
jne 0x40d0c1
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0xa0]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x3f
push eax
call fcn.0042a630
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x3e
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x40
push eax
call fcn.0042a630
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x3e
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x41
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x3e
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x42
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x3e
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x43
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3e
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x40d237
mov eax, dword [ebp - 0x24]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x40d218
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e95c
push edx
push ecx
call fcn.0043c5fc
add esp, 8
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.0041c8c0
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x65
jb 0x40d3c5
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x44
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x45
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x46
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x47
push eax
call fcn.0042a630
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x90]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x48
push eax
call fcn.0042a630
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0xa0]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x49
push eax
call fcn.0042a630
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x66
jb 0x40d40c
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x4a
push eax
call fcn.0042b1e0
lea ecx, [ebp - 0x4c]
movzx edi, ax
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
mov eax, edi
mov ecx, esi
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.00422770
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x67
jb 0x40d547
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x4c
cmp byte [ebp - 0x12], 0
je 0x40d456
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40d474
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40d4af
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40d4a5
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e961
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x4f
cmp byte [ebp - 0x12], 0
je 0x40d4ee
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40d50c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40d547
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40d53d
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e966
push edx
push ecx
call fcn.0043c5fc
add esp, 8
cmp word [edi + 4], 0x68
jb 0x40d58b
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x51
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x6a
jb 0x40d647
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x52
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x53
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x54
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x6c
jb 0x40d8e1
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x55
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x56
cmp byte [ebp - 0x12], 0
je 0x40d691
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40d6af
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40d6ea
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40d6e0
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e96b
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x58
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x59
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x5a
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x5b
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x80]
call fcn.00418480
mov dword [ebp - 4], 0x5c
cmp byte [ebp - 0x12], 0
je 0x40d7d7
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40d7f5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40d830
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40d826
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e970
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x5e
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x5f
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x60
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x6d
jb 0x40da56
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x61
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x62
cmp byte [ebp - 0x12], 0
je 0x40d92b
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40d949
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40d984
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40d97a
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e975
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x64
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x65
cmp byte [ebp - 0x12], 0
je 0x40d9c3
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40d9e1
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40da1c
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40da12
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e97a
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x67
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
cmp word [edi + 4], 0x6e
jb 0x40da98
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x4c]
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x68
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
cmp word [edi + 4], 0x77
mov ebx, dword [ebp - 0x50]
jb 0x40dc6e
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x69
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x6a
cmp byte [ebp - 0x12], 0
je 0x40dae5
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40db03
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40db3e
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40db34
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e97f
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x6c
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x6d
cmp byte [ebp - 0x12], 0
je 0x40db7d
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40db9b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40dbd6
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40dbcc
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e984
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x6f
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042aef0
lea ecx, [ebp - 0x4c]
call fcn.00418480
mov dword [ebp - 4], 0x70
cmp byte [ebp - 0x12], 0
je 0x40dc15
lea eax, [ebp - 0x14]
mov ecx, esi
push eax
call fcn.00422770
cmp word [ebp - 0x14], 0
jbe 0x40dc33
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x40dc6e
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40dc64
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e989
push edx
push ecx
call fcn.0043c5fc
add esp, 8
cmp word [edi + 4], 0x79
jb 0x40dcb2
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x72
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x7a
jb 0x40dcf6
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x73
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x7c
jb 0x40dd3a
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x74
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
cmp word [edi + 4], 0x7e
jb 0x40dd7e
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x75
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
mov eax, 0x80
cmp word [edi + 4], ax
jb 0x40ddc6
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x76
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
mov eax, 0x81
cmp word [edi + 4], ax
jb 0x40de48
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x77
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x78
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
mov eax, 0x82
cmp word [edi + 4], ax
jb 0x40de90
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x79
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
mov eax, 0x83
cmp word [edi + 4], ax
jb 0x40ded8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x7a
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
mov eax, 0x84
cmp word [edi + 4], ax
jb 0x40dfd2
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x7b
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x7c
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x7d
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x7e
push eax
call fcn.0042a630
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x3c]
mov eax, 0x86
cmp word [edi + 4], ax
mov edi, dword [ebp - 0x50]
jb 0x40e01a
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x7f
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
mov eax, dword [ebp - 0x3c]
mov ecx, 0x88
cmp word [eax + 4], cx
jb 0x40e065
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x80
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
mov eax, dword [ebp - 0x3c]
mov ecx, 0x89
cmp word [eax + 4], cx
jb 0x40e20d
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x81
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x60]
push eax
mov ecx, ebx
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x82
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x83
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x84
push eax
call fcn.0042a630
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x90]
mov dword [ebp - 0x14], 0
xorps xmm0, xmm0
mov edi, ebx
push eax
mov ecx, edi
movq qword [ebp - 0x1c], xmm0
call fcn.00406a30
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x85
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00429f10
lea ecx, [ebp - 0x90]
call fcn.00418480
mov dword [ebp - 4], 0x86
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x1c]
cmp ebx, eax
je 0x40e1c8
mov edi, eax
push ebx
mov ecx, esi
call fcn.0042a180
add ebx, 4
cmp ebx, edi
jne 0x40e1b3
mov ebx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x50]
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
je 0x40e20a
mov eax, dword [ebp - 0x14]
sub eax, ebx
sar eax, 2
lea ecx, [eax*4]
mov eax, ebx
cmp ecx, 0x1000
jb 0x40e200
mov ebx, dword [eax - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e98e
push ecx
push ebx
call fcn.0043c5fc
add esp, 8
mov eax, dword [ebp - 0x3c]
mov ecx, 0x8a
cmp word [eax + 4], cx
jb 0x40e48b
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x87
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x60]
push eax
mov ecx, ebx
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x88
push eax
call fcn.0042a630
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x70]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x89
push eax
call fcn.0042a630
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x8a
push eax
call fcn.0042a630
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
lea eax, [ebp - 0x90]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x8b
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.0042bea0
lea ecx, [ebp - 0x90]
call fcn.00418480
mov dword [ebp - 4], 0x8c
cmp byte [ebp - 0xa4], 0
je 0x40e358
lea eax, [ebp - 0xa8]
mov ecx, esi
push eax
call fcn.0042a180
cmp dword [ebp - 0xa8], 0
jbe 0x40e37e
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb0]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xb4]
test ecx, ecx
je 0x40e3bf
mov edx, dword [ebp - 0xac]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40e3b5
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e993
push edx
push ecx
call fcn.0043c5fc
add esp, 8
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x8e
push eax
call fcn.0042a630
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], edi
push eax
mov ecx, esi
call fcn.0042a180
mov edi, dword [ebp - 0x50]
lea eax, [ebp - 0x60]
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
push eax
mov ecx, edi
movq qword [ebp - 0x1c], xmm0
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x8f
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0042c1a0
lea ecx, [ebp - 0x60]
call fcn.00418480
mov dword [ebp - 4], 0x90
mov ebx, dword [ebp - 0x1c]
cmp ebx, dword [ebp - 0x18]
je 0x40e479
add ebx, 0xc
cmp byte [ebx + 4], 0
je 0x40e452
push ebx
mov ecx, esi
call fcn.0042a180
cmp dword [ebx], 0
jbe 0x40e46e
mov ecx, dword [ebx - 0xc]
mov eax, dword [ebx - 8]
sub eax, ecx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push ecx
mov ecx, esi
call fcn.00404b10
add ebx, 0x14
lea eax, [ebx - 0xc]
cmp eax, dword [ebp - 0x18]
jne 0x40e444
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.0041c8c0
mov eax, dword [ebp - 0x3c]
mov ecx, 0x8d
cmp word [eax + 4], cx
jb 0x40e93e
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 0x92
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x60]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0x93
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x70]
mov dword [ebp - 4], 0x94
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x80]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0x95
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x90]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x96
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0xa0]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0x97
push eax
call fcn.00429ca0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 0x98
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x99
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 0x9a
push eax
call fcn.00429ca0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0xd8]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0xd8]
mov dword [ebp - 4], 0x9b
push eax
call fcn.00429ca0
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0xe8]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0xe8]
mov dword [ebp - 4], 0x9c
push eax
call fcn.00429ca0
lea ecx, [ebp - 0xe8]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0xf8]
mov dword [ebp - 4], 0x9d
push eax
call fcn.00429ca0
lea ecx, [ebp - 0xf8]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x108]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x108]
mov dword [ebp - 4], 0x9e
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x118]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x118]
mov dword [ebp - 4], 0x9f
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x118]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0x128]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x128]
mov dword [ebp - 4], 0xa0
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.0042c8b0
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 0xffffffff
call fcn.00418480
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x100
push eax
lea eax, [ebp - 0x248]
mov ecx, esi
push eax
call fcn.00404b10
lea eax, [ebp - 0x138]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x138]
mov dword [ebp - 4], 0xa2
push eax
call fcn.00429ca0
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
lea eax, [ebp - 0xb0]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0xb0]
mov dword [ebp - 4], 0xa3
push eax
call fcn.00429ca0
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], 0xffffffff
mov bl, al
call fcn.00418480
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
mov ecx, esi
call fcn.00429e60
mov eax, dword [ebp - 0x3c]
mov ecx, 0x8e
cmp word [eax + 4], cx
jb 0x40e93e
lea eax, [ebp - 0x148]
mov ecx, edi
push eax
call fcn.00406a30
lea eax, [ebp - 0x148]
mov dword [ebp - 4], 0xa4
push eax
call fcn.0042a630
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0xffffffff
mov edi, eax
call fcn.00418480
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], edi
push eax
mov ecx, esi
call fcn.0042a180
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043c5a8
mov esp, ebp
pop ebp
ret 8
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
call fcn.0044f733
int3