Disassembly: 
  L1: 55 ?? push ebp
   8b ec ?? mov ebp, esp
   6a ff ?? push 0xff<255,-1>
   68 18 71 40 00 ?? push 0x00407118
   64 a1 00 00 00 00 ?? mov eax, dword fs:[0]
   50 ?? push eax
   51 ?? push ecx
   83 ec 78 ?? sub esp, 0x78<120>
   53 ?? push ebx
   56 ?? push esi
   57 ?? push edi
   8d bd 78 ff ff ff ?? lea edi, ss:[ebp + 0xffffff78<4294967160,-136>]
   b9 1e 00 00 00 ?? mov ecx, 0x0000001e<30>
   b8 cc cc cc cc ?? mov eax, 0xcccccccc
   f3 ab ?? rep_stosd
   a1 04 c0 40 00 ?? mov eax, dword ds:[0x0040c004]
   33 c5 ?? xor eax, ebp
   50 ?? push eax
   8d 45 f4 ?? lea eax, ss:[ebp + 0xf4<244,-12>]
   64 a3 00 00 00 00 ?? mov dword fs:[0], eax
   89 65 f0 ?? mov dword ss:[ebp + 0xf0<240,-16>], esp
   c7 45 ec 00 00 00 00 ?? mov dword ss:[ebp + 0xec<236,-20>], 0
   8b 45 0c ?? mov eax, dword ss:[ebp + 12]
   50 ?? push eax
   e8 58 f8 ff ff ?? call function 0x00401096
  
  L2: 83 c4 04 ?? add esp, 4
   33 c9 ?? xor ecx, ecx
   89 45 e4 ?? mov dword ss:[ebp + 0xe4<228,-28>], eax
   89 4d e8 ?? mov dword ss:[ebp + 0xe8<232,-24>], ecx
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   8b 02 ?? mov eax, dword ds:[edx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 48 04 ?? add ecx, dword ds:[eax + 4]
   8b f4 ?? mov esi, esp
   ff 15 c8 d0 40 00 ?? call dword ds:[function 0x0040d0c8]
  
  L3: 3b f4 ?? cmp esi, esp
   e8 6e f9 ff ff ?? call function 0x004011d1
  
  L4: 89 45 b0 ?? mov dword ss:[ebp + 0xb0<176,-80>], eax
   89 55 b4 ?? mov dword ss:[ebp + 0xb4<180,-76>], edx
   83 7d b4 00 ?? cmp dword ss:[ebp + 0xb4<180,-76>], 0
   7c 62 ?? jl basic block L15
  
  L5: 7f 06 ?? jg basic block L7
  
  L6: 83 7d b0 00 ?? cmp dword ss:[ebp + 0xb0<176,-80>], 0
   76 5a ?? jbe basic block L15
  
  L7: 8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   8b f4 ?? mov esi, esp
   ff 15 c8 d0 40 00 ?? call dword ds:[function 0x0040d0c8]
  
  L8: 3b f4 ?? cmp esi, esp
   e8 40 f9 ff ff ?? call function 0x004011d1
  
  L9: 89 45 a8 ?? mov dword ss:[ebp + 0xa8<168,-88>], eax
   89 55 ac ?? mov dword ss:[ebp + 0xac<172,-84>], edx
   8b 45 ac ?? mov eax, dword ss:[ebp + 0xac<172,-84>]
   3b 45 e8 ?? cmp eax, dword ss:[ebp + 0xe8<232,-24>]
   7c 32 ?? jl basic block L15
  
  L10: 7f 08 ?? jg basic block L12
  
  L11: 8b 4d a8 ?? mov ecx, dword ss:[ebp + 0xa8<168,-88>]
   3b 4d e4 ?? cmp ecx, dword ss:[ebp + 0xe4<228,-28>]
   76 28 ?? jbe basic block L15
  
  L12: 8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   8b 02 ?? mov eax, dword ds:[edx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 48 04 ?? add ecx, dword ds:[eax + 4]
   8b f4 ?? mov esi, esp
   ff 15 c8 d0 40 00 ?? call dword ds:[function 0x0040d0c8]
  
  L13: 3b f4 ?? cmp esi, esp
   e8 0e f9 ff ff ?? call function 0x004011d1
  
  L14: 2b 45 e4 ?? sub eax, dword ss:[ebp + 0xe4<228,-28>]
   1b 55 e8 ?? sbb edx, dword ss:[ebp + 0xe8<232,-24>]
   89 45 a0 ?? mov dword ss:[ebp + 0xa0<160,-96>], eax
   89 55 a4 ?? mov dword ss:[ebp + 0xa4<164,-92>], edx
   eb 08 ?? jmp basic block L16
  
  L15: 0f 57 c0 ?? xorps xmm0, xmm0
   66 0f 13 45 a0 ?? movlpd double ss:[ebp + 0xa0<160,-96>], xmm0
  
  L16: 8b 4d a0 ?? mov ecx, dword ss:[ebp + 0xa0<160,-96>]
   89 4d dc ?? mov dword ss:[ebp + 0xdc<220,-36>], ecx
   8b 55 a4 ?? mov edx, dword ss:[ebp + 0xa4<164,-92>]
   89 55 e0 ?? mov dword ss:[ebp + 0xe0<224,-32>], edx
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   50 ?? push eax
   8d 4d d0 ?? lea ecx, ss:[ebp + 0xd0<208,-48>]
   e8 c6 f9 ff ff ?? call function 0x004012b7
  
  L17: c7 45 fc 00 00 00 00 ?? mov dword ss:[ebp + 0xfc<252,-4>], 0
   8d 4d d0 ?? lea ecx, ss:[ebp + 0xd0<208,-48>]
   e8 19 f7 ff ff ?? call function 0x00401019
  
  L18: 0f b6 c8 ?? movzx ecx, al
   85 c9 ?? test ecx, ecx
   75 0e ?? jne basic block L20
  
  L19: 8b 55 ec ?? mov edx, dword ss:[ebp + 0xec<236,-20>]
   83 ca 04 ?? or edx, 4
   89 55 ec ?? mov dword ss:[ebp + 0xec<236,-20>], edx
   e9 6e 02 00 00 ?? jmp basic block L69
  
  L20: c6 45 fc 01 ?? mov byte ss:[ebp + 0xfc<252,-4>], 1
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 cc d0 40 00 ?? call dword ds:[function 0x0040d0cc]
  
  L21: 3b f4 ?? cmp esi, esp
   e8 9c f8 ff ff ?? call function 0x004011d1
  
  L22: 89 45 9c ?? mov dword ss:[ebp + 0x9c<156,-100>], eax
   8b 45 9c ?? mov eax, dword ss:[ebp + 0x9c<156,-100>]
   25 c0 01 00 00 ?? and eax, 0x000001c0<448>
   83 f8 40 ?? cmp eax, 0x40<64>
   0f 84 b7 00 00 00 ?? je basic block L38
  
  L23: eb 12 ?? jmp basic block L24
  
  L24: 83 7d e0 00 ?? cmp dword ss:[ebp + 0xe0<224,-32>], 0
   0f 8c 99 00 00 00 ?? jl basic block L38
  
  L25: 7f 0a ?? jg basic block L27
  
  L26: 83 7d dc 00 ?? cmp dword ss:[ebp + 0xdc<220,-36>], 0
   0f 86 8d 00 00 00 ?? jbe basic block L38
  
  L27: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 ac d0 40 00 ?? call dword ds:[function 0x0040d0ac]
  
  L28: 3b f4 ?? cmp esi, esp
   e8 42 f8 ff ff ?? call function 0x004011d1
  
  L29: 88 45 9b ?? mov byte ss:[ebp + 0x9b<155,-101>], al
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 b0 d0 40 00 ?? call dword ds:[function 0x0040d0b0]
  
  L30: 3b f4 ?? cmp esi, esp
   e8 23 f8 ff ff ?? call function 0x004011d1
  
  L31: 89 45 94 ?? mov dword ss:[ebp + 0x94<148,-108>], eax
   8b f4 ?? mov esi, esp
   0f b6 45 9b ?? movzx eax, byte ss:[ebp + 0x9b<155,-101>]
   50 ?? push eax
   8b 4d 94 ?? mov ecx, dword ss:[ebp + 0x94<148,-108>]
   ff 15 c0 d0 40 00 ?? call dword ds:[function 0x0040d0c0]
  
  L32: 3b f4 ?? cmp esi, esp
   e8 09 f8 ff ff ?? call function 0x004011d1
  
  L33: 89 45 90 ?? mov dword ss:[ebp + 0x90<144,-112>], eax
   8b 4d 90 ?? mov ecx, dword ss:[ebp + 0x90<144,-112>]
   89 4d c8 ?? mov dword ss:[ebp + 0xc8<200,-56>], ecx
   e8 1a f7 ff ff ?? call function 0x004010f0
  
  L34: 89 45 c4 ?? mov dword ss:[ebp + 0xc4<196,-60>], eax
   8d 55 c8 ?? lea edx, ss:[ebp + 0xc8<200,-56>]
   52 ?? push edx
   8d 45 c4 ?? lea eax, ss:[ebp + 0xc4<196,-60>]
   50 ?? push eax
   e8 e1 f7 ff ff ?? call function 0x004011c7
  
  L35: 83 c4 08 ?? add esp, 8
   0f b6 c8 ?? movzx ecx, al
   85 c9 ?? test ecx, ecx
   74 0b ?? je basic block L37
  
  L36: 8b 55 ec ?? mov edx, dword ss:[ebp + 0xec<236,-20>]
   83 ca 04 ?? or edx, 4
   89 55 ec ?? mov dword ss:[ebp + 0xec<236,-20>], edx
   eb 05 ?? jmp basic block L38
  
  L37: e9 4b ff ff ff ?? jmp 0x0040194b
   8b 4d dc ?? mov ecx, dword ss:[ebp + 0xdc<220,-36>]
   83 e9 01 ?? sub ecx, 1
   8b 55 e0 ?? mov edx, dword ss:[ebp + 0xe0<224,-32>]
   83 da 00 ?? sbb edx, 0
   89 4d dc ?? mov dword ss:[ebp + 0xdc<220,-36>], ecx
   89 55 e0 ?? mov dword ss:[ebp + 0xe0<224,-32>], edx
  
  L38: 83 7d ec 00 ?? cmp dword ss:[ebp + 0xec<236,-20>], 0
   75 5c ?? jne basic block L46
  
  L39: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b f4 ?? mov esi, esp
   8b ca ?? mov ecx, edx
   ff 15 b0 d0 40 00 ?? call dword ds:[function 0x0040d0b0]
  
  L40: 3b f4 ?? cmp esi, esp
   e8 af f7 ff ff ?? call function 0x004011d1
  
  L41: 89 45 8c ?? mov dword ss:[ebp + 0x8c<140,-116>], eax
   8b f4 ?? mov esi, esp
   8b 45 e8 ?? mov eax, dword ss:[ebp + 0xe8<232,-24>]
   50 ?? push eax
   8b 4d e4 ?? mov ecx, dword ss:[ebp + 0xe4<228,-28>]
   51 ?? push ecx
   8b 55 0c ?? mov edx, dword ss:[ebp + 12]
   52 ?? push edx
   8b 4d 8c ?? mov ecx, dword ss:[ebp + 0x8c<140,-116>]
   ff 15 bc d0 40 00 ?? call dword ds:[function 0x0040d0bc]
  
  L42: 3b f4 ?? cmp esi, esp
   e8 8e f7 ff ff ?? call function 0x004011d1
  
  L43: 89 45 84 ?? mov dword ss:[ebp + 0x84<132,-124>], eax
   89 55 88 ?? mov dword ss:[ebp + 0x88<136,-120>], edx
   8b 45 84 ?? mov eax, dword ss:[ebp + 0x84<132,-124>]
   3b 45 e4 ?? cmp eax, dword ss:[ebp + 0xe4<228,-28>]
   75 08 ?? jne basic block L45
  
  L44: 8b 4d 88 ?? mov ecx, dword ss:[ebp + 0x88<136,-120>]
   3b 4d e8 ?? cmp ecx, dword ss:[ebp + 0xe8<232,-24>]
   74 09 ?? je basic block L46
  
  L45: 8b 55 ec ?? mov edx, dword ss:[ebp + 0xec<236,-20>]
   83 ca 04 ?? or edx, 4
   89 55 ec ?? mov dword ss:[ebp + 0xec<236,-20>], edx
  
  L46: 83 7d ec 00 ?? cmp dword ss:[ebp + 0xec<236,-20>], 0
   0f 85 bf 00 00 00 ?? jne basic block L62
  
  L47: eb 12 ?? jmp basic block L48
  
  L48: 83 7d e0 00 ?? cmp dword ss:[ebp + 0xe0<224,-32>], 0
   0f 8c a1 00 00 00 ?? jl basic block L62
  
  L49: 7f 0a ?? jg basic block L51
  
  L50: 83 7d dc 00 ?? cmp dword ss:[ebp + 0xdc<220,-36>], 0
   0f 86 95 00 00 00 ?? jbe basic block L62
  
  L51: 8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   8b 02 ?? mov eax, dword ds:[edx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 48 04 ?? add ecx, dword ds:[eax + 4]
   8b f4 ?? mov esi, esp
   ff 15 ac d0 40 00 ?? call dword ds:[function 0x0040d0ac]
  
  L52: 3b f4 ?? cmp esi, esp
   e8 21 f7 ff ff ?? call function 0x004011d1
  
  L53: 88 45 83 ?? mov byte ss:[ebp + 0x83<131,-125>], al
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   8b f4 ?? mov esi, esp
   ff 15 b0 d0 40 00 ?? call dword ds:[function 0x0040d0b0]
  
  L54: 3b f4 ?? cmp esi, esp
   e8 04 f7 ff ff ?? call function 0x004011d1
  
  L55: 89 85 7c ff ff ff ?? mov dword ss:[ebp + 0xffffff7c<4294967164,-132>], eax
   8b f4 ?? mov esi, esp
   0f b6 45 83 ?? movzx eax, byte ss:[ebp + 0x83<131,-125>]
   50 ?? push eax
   8b 8d 7c ff ff ff ?? mov ecx, dword ss:[ebp + 0xffffff7c<4294967164,-132>]
   ff 15 c0 d0 40 00 ?? call dword ds:[function 0x0040d0c0]
  
  L56: 3b f4 ?? cmp esi, esp
   e8 e4 f6 ff ff ?? call function 0x004011d1
  
  L57: 89 85 78 ff ff ff ?? mov dword ss:[ebp + 0xffffff78<4294967160,-136>], eax
   8b 8d 78 ff ff ff ?? mov ecx, dword ss:[ebp + 0xffffff78<4294967160,-136>]
   89 4d c0 ?? mov dword ss:[ebp + 0xc0<192,-64>], ecx
   e8 ef f5 ff ff ?? call function 0x004010f0
  
  L58: 89 45 bc ?? mov dword ss:[ebp + 0xbc<188,-68>], eax
   8d 55 c0 ?? lea edx, ss:[ebp + 0xc0<192,-64>]
   52 ?? push edx
   8d 45 bc ?? lea eax, ss:[ebp + 0xbc<188,-68>]
   50 ?? push eax
   e8 b6 f6 ff ff ?? call function 0x004011c7
  
  L59: 83 c4 08 ?? add esp, 8
   0f b6 c8 ?? movzx ecx, al
   85 c9 ?? test ecx, ecx
   74 0b ?? je basic block L61
  
  L60: 8b 55 ec ?? mov edx, dword ss:[ebp + 0xec<236,-20>]
   83 ca 04 ?? or edx, 4
   89 55 ec ?? mov dword ss:[ebp + 0xec<236,-20>], edx
   eb 05 ?? jmp basic block L62
  
  L61: e9 43 ff ff ff ?? jmp 0x00401a6e
   8b 45 dc ?? mov eax, dword ss:[ebp + 0xdc<220,-36>]
   83 e8 01 ?? sub eax, 1
   8b 4d e0 ?? mov ecx, dword ss:[ebp + 0xe0<224,-32>]
   83 d9 00 ?? sbb ecx, 0
   89 45 dc ?? mov dword ss:[ebp + 0xdc<220,-36>], eax
   89 4d e0 ?? mov dword ss:[ebp + 0xe0<224,-32>], ecx
  
  L62: 8b f4 ?? mov esi, esp
   6a 00 ?? push 0
   6a 00 ?? push 0
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b ca ?? mov ecx, edx
   ff 15 c4 d0 40 00 ?? call dword ds:[function 0x0040d0c4]
  
  L63: 3b f4 ?? cmp esi, esp
   e8 86 f6 ff ff ?? call function 0x004011d1
  
  L64: eb 26 ?? jmp 0x00401b73
   c7 45 fc 00 00 00 00 ?? mov dword ss:[ebp + 0xfc<252,-4>], 0
   eb 07 ?? jmp basic block L69
  
  L65: 8b f4 ?? mov esi, esp
   6a 01 ?? push 1
   6a 04 ?? push 4
   8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   8b 08 ?? mov ecx, dword ds:[eax]
   8b 55 08 ?? mov edx, dword ss:[ebp + 8]
   03 51 04 ?? add edx, dword ds:[ecx + 4]
   8b ca ?? mov ecx, edx
   ff 15 b8 d0 40 00 ?? call dword ds:[function 0x0040d0b8]
  
  L66: 3b f4 ?? cmp esi, esp
   e8 64 f6 ff ff ?? call function 0x004011d1
  
  L67: b8 7c 1b 40 00 ?? mov eax, basic block L68
   c3 ?? ret
  
  L68: c7 45 fc 00 00 00 00 ?? mov dword ss:[ebp + 0xfc<252,-4>], 0
  
  L69: 8b f4 ?? mov esi, esp
   6a 00 ?? push 0
   8b 45 ec ?? mov eax, dword ss:[ebp + 0xec<236,-20>]
   50 ?? push eax
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   8b 11 ?? mov edx, dword ds:[ecx]
   8b 4d 08 ?? mov ecx, dword ss:[ebp + 8]
   03 4a 04 ?? add ecx, dword ds:[edx + 4]
   ff 15 b8 d0 40 00 ?? call dword ds:[function 0x0040d0b8]
  
  L70: 3b f4 ?? cmp esi, esp
   e8 2e f6 ff ff ?? call function 0x004011d1
  
  L71: 8b 45 08 ?? mov eax, dword ss:[ebp + 8]
   89 45 b8 ?? mov dword ss:[ebp + 0xb8<184,-72>], eax
   c7 45 fc ff ff ff ff ?? mov dword ss:[ebp + 0xfc<252,-4>], 0xffffffff<4294967295,-1>
   8d 4d d0 ?? lea ecx, ss:[ebp + 0xd0<208,-48>]
   e8 1f f5 ff ff ?? call function 0x004010d7
  
  L72: 8b 45 b8 ?? mov eax, dword ss:[ebp + 0xb8<184,-72>]
   52 ?? push edx
   8b cd ?? mov ecx, ebp
   50 ?? push eax
   8d 15 ec 1b 40 00 ?? lea edx, ds:[0x00401bec]
   e8 2a f6 ff ff ?? call function 0x004011f4
  
  L73: 58 ?? pop eax
   5a ?? pop edx
   8b 4d f4 ?? mov ecx, dword ss:[ebp + 0xf4<244,-12>]
   64 89 0d 00 00 00 00 ?? mov dword fs:[0], ecx
   59 ?? pop ecx
   5f ?? pop edi
   5e ?? pop esi
   5b ?? pop ebx
   81 c4 88 00 00 00 ?? add esp, 0x00000088<136>
   3b ec ?? cmp ebp, esp
   e8 ea f5 ff ff ?? call function 0x004011d1
  
  L74: 8b e5 ?? mov esp, ebp
   5d ?? pop ebp
   c3 ?? ret
  
  