Disassembly: 
  L1: 55 ?? push ebp
   8b ec ?? mov ebp, esp
   6a ff ?? push 0xff<255,-1>
   68 d8 68 40 00 ?? push 0x004068d8
   64 a1 00 00 00 00 ?? mov eax, dword fs:[0]
   50 ?? push eax
   51 ?? push ecx
   81 ec 80 00 00 00 ?? sub esp, 0x00000080<128>
   53 ?? push ebx
   56 ?? push esi
   57 ?? push edi
   8d bd 70 ff ff ff ?? lea edi, ss:[ebp + 0xffffff70<4294967152,-144>]
   b9 20 00 00 00 ?? mov ecx, 0x00000020<32>
   b8 cc cc cc cc ?? mov eax, 0xcccccccc
   f3 ab ?? rep_stosd
   a1 48 b0 40 00 ?? mov eax, dword ds:[0x0040b048]
   33 c5 ?? xor eax, ebp
   50 ?? push eax
   8d 45 f4 ?? lea eax, ss:[ebp + 0xf4<244,-12>]
   64 a3 00 00 00 00 ?? mov dword fs:[0], eax
   89 65 f0 ?? mov dword ss:[ebp + 0xf0<240,-16>], esp
   c7 45 ec 00 00 00 00 ?? mov dword ss:[ebp + 0xec<236,-20>], 0
   8b 4d 0c ?? mov ecx, dword ss:[ebp + 12]
   e8 39 eb ff ff ?? call function 0x00401109
  
  L2: 89 45 e8 ?? mov dword ss:[ebp + 0xe8<232,-24>], eax
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 40 c3 40 00 ?? call dword ds:[function 0x0040c340]
  
  L3: 3b f4 ?? cmp esi, esp
   e8 81 0d 00 00 ?? call function 0x00403370
  
  L4: 89 45 b8 ?? mov dword ss:[ebp + 0xb8<184,-72>], eax
   89 55 bc ?? mov dword ss:[ebp + 0xbc<188,-68>], edx
   83 7d bc 00 ?? cmp dword ss:[ebp + 0xbc<188,-68>], 0
   7c 4d ?? jl basic block L13
  
  L5: 7f 06 ?? jg basic block L7
  
  L6: 83 7d b8 00 ?? cmp dword ss:[ebp + 0xb8<184,-72>], 0
   76 45 ?? jbe basic block L13
  
  L7: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 40 c3 40 00 ?? call dword ds:[function 0x0040c340]
  
  L8: 3b f4 ?? cmp esi, esp
   e8 51 0d 00 00 ?? call function 0x00403370
  
  L9: 3b 45 e8 ?? cmp eax, dword ss:[ebp + 0xe8<232,-24>]
   76 24 ?? jbe basic block L13
  
  L10: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 40 c3 40 00 ?? call dword ds:[function 0x0040c340]
  
  L11: 3b f4 ?? cmp esi, esp
   e8 30 0d 00 00 ?? call function 0x00403370
  
  L12: 2b 45 e8 ?? sub eax, dword ss:[ebp + 0xe8<232,-24>]
   89 45 b4 ?? mov dword ss:[ebp + 0xb4<180,-76>], eax
   eb 07 ?? jmp basic block L14
  
  L13: c7 45 b4 00 00 00 00 ?? mov dword ss:[ebp + 0xb4<180,-76>], 0
  
  L14: 8b 45 b4 ?? mov eax, dword ss:[ebp + 0xb4<180,-76>]
   89 45 e4 ?? mov dword ss:[ebp + 0xe4<228,-28>], eax
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   51 ?? push ecx
   8d 4d d8 ?? lea ecx, ss:[ebp + 0xd8<216,-40>]
   e8 c6 ea ff ff ?? call function 0x00401127
  
  L15: c7 45 fc 00 00 00 00 ?? mov dword ss:[ebp + 0xfc<252,-4>], 0
   8d 4d d8 ?? lea ecx, ss:[ebp + 0xd8<216,-40>]
   e8 c7 e9 ff ff ?? call function 0x00401037
  
  L16: 83 f8 ff ?? cmp eax, 0xff<255,-1>
   75 0e ?? jne basic block L18
  
  L17: 8b 55 ec ?? mov edx, dword ss:[ebp + 0xec<236,-20>]
   83 ca 04 ?? or edx, 4
   89 55 ec ?? mov dword ss:[ebp + 0xec<236,-20>], edx
   e9 6e 02 00 00 ?? jmp basic block L62
  
  L18: c6 45 fc 01 ?? mov byte ss:[ebp + 0xfc<252,-4>], 1
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 44 c3 40 00 ?? call dword ds:[function 0x0040c344]
  
  L19: 3b f4 ?? cmp esi, esp
   e8 cd 0c 00 00 ?? call function 0x00403370
  
  L20: 89 45 b0 ?? mov dword ss:[ebp + 0xb0<176,-80>], eax
   8b 45 b0 ?? mov eax, dword ss:[ebp + 0xb0<176,-80>]
   25 c0 01 00 00 ?? and eax, 0x000001c0<448>
   83 f8 40 ?? cmp eax, 0x40<64>
   0f 84 a8 00 00 00 ?? je basic block L34
  
  L21: eb 09 ?? jmp basic block L22
  
  L22: 83 7d e4 00 ?? cmp dword ss:[ebp + 0xe4<228,-28>], 0
   0f 86 93 00 00 00 ?? jbe basic block L34
  
  L23: 8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   8b 02 ?? mov eax, dword ds:[edx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 48 04 ?? add ecx, dword ds:[eax + 4]
   8b f4 ?? mov esi, esp
   ff 15 48 c3 40 00 ?? call dword ds:[function 0x0040c348]
  
  L24: 3b f4 ?? cmp esi, esp
   e8 8a 0c 00 00 ?? call function 0x00403370
  
  L25: 88 45 af ?? mov byte ss:[ebp + 0xaf<175,-81>], al
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   8b f4 ?? mov esi, esp
   ff 15 4c c3 40 00 ?? call dword ds:[function 0x0040c34c]
  
  L26: 3b f4 ?? cmp esi, esp
   e8 6d 0c 00 00 ?? call function 0x00403370
  
  L27: 89 45 a8 ?? mov dword ss:[ebp + 0xa8<168,-88>], eax
   8b f4 ?? mov esi, esp
   0f b6 45 af ?? movzx eax, byte ss:[ebp + 0xaf<175,-81>]
   50 ?? push eax
   8b 4d a8 ?? mov ecx, dword ss:[ebp + 0xa8<168,-88>]
   ff 15 50 c3 40 00 ?? call dword ds:[function 0x0040c350]
  
  L28: 3b f4 ?? cmp esi, esp
   e8 53 0c 00 00 ?? call function 0x00403370
  
  L29: 89 45 a4 ?? mov dword ss:[ebp + 0xa4<164,-92>], eax
   8b 4d a4 ?? mov ecx, dword ss:[ebp + 0xa4<164,-92>]
   89 4d d0 ?? mov dword ss:[ebp + 0xd0<208,-48>], ecx
   e8 70 e9 ff ff ?? call function 0x0040109b
  
  L30: 89 45 a0 ?? mov dword ss:[ebp + 0xa0<160,-96>], eax
   8b 55 a0 ?? mov edx, dword ss:[ebp + 0xa0<160,-96>]
   89 55 cc ?? mov dword ss:[ebp + 0xcc<204,-52>], edx
   8d 45 d0 ?? lea eax, ss:[ebp + 0xd0<208,-48>]
   50 ?? push eax
   8d 4d cc ?? lea ecx, ss:[ebp + 0xcc<204,-52>]
   51 ?? push ecx
   e8 0f e9 ff ff ?? call function 0x00401050
  
  L31: 83 c4 08 ?? add esp, 8
   88 45 9f ?? mov byte ss:[ebp + 0x9f<159,-97>], al
   0f b6 55 9f ?? movzx edx, byte ss:[ebp + 0x9f<159,-97>]
   85 d2 ?? test edx, edx
   74 0b ?? je basic block L33
  
  L32: 8b 45 ec ?? mov eax, dword ss:[ebp + 0xec<236,-20>]
   83 c8 04 ?? or eax, 4
   89 45 ec ?? mov dword ss:[ebp + 0xec<236,-20>], eax
   eb 05 ?? jmp basic block L34
  
  L33: e9 5a ff ff ff ?? jmp 0x004026b9
   8b 4d e4 ?? mov ecx, dword ss:[ebp + 0xe4<228,-28>]
   83 e9 01 ?? sub ecx, 1
   89 4d e4 ?? mov dword ss:[ebp + 0xe4<228,-28>], ecx
  
  L34: 83 7d ec 00 ?? cmp dword ss:[ebp + 0xec<236,-20>], 0
   75 74 ?? jne basic block L43
  
  L35: 8b 4d 0c ?? mov ecx, dword ss:[ebp + 12]
   e8 33 e9 ff ff ?? call function 0x004010a0
  
  L36: 89 45 98 ?? mov dword ss:[ebp + 0x98<152,-104>], eax
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   8b f4 ?? mov esi, esp
   ff 15 4c c3 40 00 ?? call dword ds:[function 0x0040c34c]
  
  L37: 3b f4 ?? cmp esi, esp
   e8 e6 0b 00 00 ?? call function 0x00403370
  
  L38: 89 45 94 ?? mov dword ss:[ebp + 0x94<148,-108>], eax
   8b 45 e8 ?? mov eax, dword ss:[ebp + 0xe8<232,-24>]
   33 c9 ?? xor ecx, ecx
   8b f4 ?? mov esi, esp
   51 ?? push ecx
   50 ?? push eax
   8b 55 98 ?? mov edx, dword ss:[ebp + 0x98<152,-104>]
   52 ?? push edx
   8b 4d 94 ?? mov ecx, dword ss:[ebp + 0x94<148,-108>]
   ff 15 54 c3 40 00 ?? call dword ds:[function 0x0040c354]
  
  L39: 3b f4 ?? cmp esi, esp
   e8 c6 0b 00 00 ?? call function 0x00403370
  
  L40: 89 45 8c ?? mov dword ss:[ebp + 0x8c<140,-116>], eax
   89 55 90 ?? mov dword ss:[ebp + 0x90<144,-112>], edx
   8b 45 e8 ?? mov eax, dword ss:[ebp + 0xe8<232,-24>]
   33 c9 ?? xor ecx, ecx
   89 45 84 ?? mov dword ss:[ebp + 0x84<132,-124>], eax
   89 4d 88 ?? mov dword ss:[ebp + 0x88<136,-120>], ecx
   8b 55 8c ?? mov edx, dword ss:[ebp + 0x8c<140,-116>]
   3b 55 84 ?? cmp edx, dword ss:[ebp + 0x84<132,-124>]
   75 08 ?? jne basic block L42
  
  L41: 8b 45 90 ?? mov eax, dword ss:[ebp + 0x90<144,-112>]
   3b 45 88 ?? cmp eax, dword ss:[ebp + 0x88<136,-120>]
   74 0e ?? je basic block L43
  
  L42: 8b 4d ec ?? mov ecx, dword ss:[ebp + 0xec<236,-20>]
   83 c9 04 ?? or ecx, 4
   89 4d ec ?? mov dword ss:[ebp + 0xec<236,-20>], ecx
   e9 c4 00 00 00 ?? jmp basic block L56
  
  L43: eb 09 ?? jmp basic block L44
  
  L44: 83 7d e4 00 ?? cmp dword ss:[ebp + 0xe4<228,-28>], 0
   0f 86 af 00 00 00 ?? jbe basic block L56
  
  L45: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 48 c3 40 00 ?? call dword ds:[function 0x0040c348]
  
  L46: 3b f4 ?? cmp esi, esp
   e8 66 0b 00 00 ?? call function 0x00403370
  
  L47: 88 45 83 ?? mov byte ss:[ebp + 0x83<131,-125>], al
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 4c c3 40 00 ?? call dword ds:[function 0x0040c34c]
  
  L48: 3b f4 ?? cmp esi, esp
   e8 47 0b 00 00 ?? call function 0x00403370
  
  L49: 89 85 7c ff ff ff ?? mov dword ss:[ebp + 0xffffff7c<4294967164,-132>], eax
   8b f4 ?? mov esi, esp
   0f b6 45 83 ?? movzx eax, byte ss:[ebp + 0x83<131,-125>]
   50 ?? push eax
   8b 8d 7c ff ff ff ?? mov ecx, dword ss:[ebp + 0xffffff7c<4294967164,-132>]
   ff 15 50 c3 40 00 ?? call dword ds:[function 0x0040c350]
  
  L50: 3b f4 ?? cmp esi, esp
   e8 27 0b 00 00 ?? call function 0x00403370
  
  L51: 89 85 78 ff ff ff ?? mov dword ss:[ebp + 0xffffff78<4294967160,-136>], eax
   8b 8d 78 ff ff ff ?? mov ecx, dword ss:[ebp + 0xffffff78<4294967160,-136>]
   89 4d c8 ?? mov dword ss:[ebp + 0xc8<200,-56>], ecx
   e8 3e e8 ff ff ?? call function 0x0040109b
  
  L52: 89 85 74 ff ff ff ?? mov dword ss:[ebp + 0xffffff74<4294967156,-140>], eax
   8b 95 74 ff ff ff ?? mov edx, dword ss:[ebp + 0xffffff74<4294967156,-140>]
   89 55 c4 ?? mov dword ss:[ebp + 0xc4<196,-60>], edx
   8d 45 c8 ?? lea eax, ss:[ebp + 0xc8<200,-56>]
   50 ?? push eax
   8d 4d c4 ?? lea ecx, ss:[ebp + 0xc4<196,-60>]
   51 ?? push ecx
   e8 d7 e7 ff ff ?? call function 0x00401050
  
  L53: 83 c4 08 ?? add esp, 8
   88 85 73 ff ff ff ?? mov byte ss:[ebp + 0xffffff73<4294967155,-141>], al
   0f b6 95 73 ff ff ff ?? movzx edx, byte ss:[ebp + 0xffffff73<4294967155,-141>]
   85 d2 ?? test edx, edx
   74 0b ?? je basic block L55
  
  L54: 8b 45 ec ?? mov eax, dword ss:[ebp + 0xec<236,-20>]
   83 c8 04 ?? or eax, 4
   89 45 ec ?? mov dword ss:[ebp + 0xec<236,-20>], eax
   eb 05 ?? jmp basic block L56
  
  L55: e9 3e ff ff ff ?? jmp 0x004027db
   8b 55 e4 ?? mov edx, dword ss:[ebp + 0xe4<228,-28>]
   83 ea 01 ?? sub edx, 1
   89 55 e4 ?? mov dword ss:[ebp + 0xe4<228,-28>], edx
  
  L56: 8b f4 ?? mov esi, esp
   6a 00 ?? push 0
   6a 00 ?? push 0
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   ff 15 58 c3 40 00 ?? call dword ds:[function 0x0040c358]
  
  L57: 3b f4 ?? cmp esi, esp
   e8 b5 0a 00 00 ?? call function 0x00403370
  
  L58: eb 2d ?? jmp 0x004028ea
   c7 45 fc 00 00 00 00 ?? mov dword ss:[ebp + 0xfc<252,-4>], 0
  
  L59: 8b f4 ?? mov esi, esp
   6a 01 ?? push 1
   6a 04 ?? push 4
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b ca ?? mov ecx, edx
   ff 15 5c c3 40 00 ?? call dword ds:[function 0x0040c35c]
  
  L60: 3b f4 ?? cmp esi, esp
   e8 93 0a 00 00 ?? call function 0x00403370
  
  L61: c7 45 fc 00 00 00 00 ?? mov dword ss:[ebp + 0xfc<252,-4>], 0
   b8 f1 28 40 00 ?? mov eax, basic block L62
   c3 ?? ret
  
  L62: 8b f4 ?? mov esi, esp
   6a 00 ?? push 0
   8b 45 ec ?? mov eax, dword ss:[ebp + 0xec<236,-20>]
   50 ?? push eax
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   ff 15 5c c3 40 00 ?? call dword ds:[function 0x0040c35c]
  
  L63: 3b f4 ?? cmp esi, esp
   e8 5f 0a 00 00 ?? call function 0x00403370
  
  L64: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   89 45 c0 ?? mov dword ss:[ebp + 0xc0<192,-64>], eax
   c7 45 fc ff ff ff ff ?? mov dword ss:[ebp + 0xfc<252,-4>], 0xffffffff<4294967295,-1>
   8d 4d d8 ?? lea ecx, ss:[ebp + 0xd8<216,-40>]
   e8 7f e7 ff ff ?? call function 0x004010a5
  
  L65: 8b 45 c0 ?? mov eax, dword ss:[ebp + 0xc0<192,-64>]
   52 ?? push edx
   8b cd ?? mov ecx, ebp
   50 ?? push eax
   8d 15 5c 29 40 00 ?? lea edx, ds:[0x0040295c]
   e8 68 0a 00 00 ?? call function 0x004033a0
  
  L66: 58 ?? pop eax
   5a ?? pop edx
   8b 4d f4 ?? mov ecx, dword ss:[ebp + 0xf4<244,-12>]
   64 89 0d 00 00 00 00 ?? mov dword fs:[0], ecx
   59 ?? pop ecx
   5f ?? pop edi
   5e ?? pop esi
   5b ?? pop ebx
   81 c4 90 00 00 00 ?? add esp, 0x00000090<144>
   3b ec ?? cmp ebp, esp
   e8 1b 0a 00 00 ?? call function 0x00403370
  
  L67: 8b e5 ?? mov esp, ebp
   5d ?? pop ebp
   c3 ?? ret
  
  