Function at 0x46c9c4
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xcb
push 0
push 0
dec ecx
jne 0x46c9cc
push ecx
push ebx
push esi
push edi
mov ebx, dword [0x477318]
xor eax, eax
push ebp
push 0x471280
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x477180]
mov eax, dword [eax]
mov dword [ebp - 4], eax
mov edx, 0x32
mov al, 3
call fcn.00472af8
mov eax, dword [0x4771a4]
mov edx, 0x47129c
call fcn.00404638
push 0
push 1
mov ecx, dword [0x4771a4]
mov ecx, dword [ecx]
mov edx, dword [0x477594]
mov edx, dword [edx]
lea eax, [ebp - 0x40]
call fcn.00404900
mov edx, dword [ebp - 0x40]
mov eax, dword [0x4774a4]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004664d8
test eax, eax
jne 0x46ca5f
mov eax, dword [0x477128]
mov eax, dword [eax]
add eax, 4
jno 0x46ca52
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
mov eax, dword [0x4775a4]
mov edx, dword [0x4774a4]
mov edx, dword [edx]
mov edx, dword [edx + 0x48]
call fcn.00404638
mov eax, 0x4712d4
call fcn.0046b0f8
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x4712e4
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471310
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x58], al
mov byte [ebp - 0x54], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47134c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471368
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x48], al
mov byte [ebp - 0x44], 1
lea edx, [ebp - 0x60]
mov eax, dword [0x477448]
mov eax, dword [eax]
mov ecx, 3
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
mov eax, dword [0x4771a4]
mov edx, 0x4713a0
call fcn.00404638
push 0
push 1
mov ecx, dword [0x4771a4]
mov ecx, dword [ecx]
mov edx, dword [0x477594]
mov edx, dword [edx]
lea eax, [ebp - 0x64]
call fcn.00404900
mov edx, dword [ebp - 0x64]
mov eax, dword [0x4774a4]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004664d8
test eax, eax
jne 0x46cb91
mov eax, dword [0x477128]
mov eax, dword [eax]
add eax, 4
jno 0x46cb84
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
mov eax, dword [0x4775a4]
mov edx, dword [0x4774a4]
mov edx, dword [edx]
mov edx, dword [edx + 0x48]
call fcn.00404638
mov eax, 0x4713ec
call fcn.0046b0f8
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x4712e4
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471310
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x58], al
mov byte [ebp - 0x54], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47134c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471368
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x48], al
mov byte [ebp - 0x44], 1
lea edx, [ebp - 0x60]
mov eax, dword [0x477448]
mov eax, dword [eax]
mov ecx, 3
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
push 1
push 1
lea eax, [ebp - 0x68]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x4713fc
mov edx, 0x471410
call fcn.0045975c
mov edx, dword [ebp - 0x68]
mov eax, dword [0x477120]
call fcn.00404638
mov eax, dword [0x477120]
cmp dword [eax], 0
setne al
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x47730c]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
mov edx, 0x37
mov al, 3
call fcn.00472af8
mov eax, dword [0x4771a4]
mov edx, 0x471428
call fcn.00404638
push 0x47145c
lea ecx, [ebp - 0x78]
mov eax, dword [0x477200]
mov eax, dword [eax]
mov edx, 0x471478
call fcn.004692f4
push dword [ebp - 0x78]
push 0x471480
lea ecx, [ebp - 0x7c]
mov eax, dword [0x477200]
mov eax, dword [eax]
mov edx, 0x4714a0
call fcn.004692f4
push dword [ebp - 0x7c]
lea eax, [ebp - 0x74]
mov edx, 4
call fcn.00404e4c
mov edx, dword [ebp - 0x74]
mov eax, dword [0x4773e4]
call fcn.0040487c
lea eax, [ebp - 0x84]
mov edx, dword [0x4773e4]
mov edx, dword [edx]
call fcn.00404e20
mov edx, dword [ebp - 0x84]
lea ecx, [ebp - 0x80]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004693b4
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 0x10]
call fcn.0040487c
lea edx, [ebp - 0x88]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.00469414
mov edx, dword [ebp - 0x88]
lea eax, [ebp - 0x14]
call fcn.0040487c
push dword [ebp - 0x10]
push 0x4714ac
push dword [ebp - 0x14]
push 0x4714c0
push 0x4714d4
push 0x4714e4
lea eax, [ebp - 0x90]
mov edx, 6
call fcn.00404974
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x8c]
call fcn.00459f18
mov ecx, dword [ebp - 0x8c]
mov eax, dword [0x4773e4]
mov edx, 0x4714f0
call fcn.00404900
push 0
push 1
mov ecx, dword [0x4771a4]
mov ecx, dword [ecx]
mov edx, dword [0x477594]
mov edx, dword [edx]
lea eax, [ebp - 0x94]
call fcn.00404900
mov edx, dword [ebp - 0x94]
mov ecx, dword [0x4773e4]
mov ecx, dword [ecx]
mov eax, dword [0x4774a4]
mov eax, dword [eax]
call fcn.004664d8
test eax, eax
jne 0x46ce2b
mov eax, dword [0x477128]
mov eax, dword [eax]
add eax, 4
jno 0x46ce1e
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
mov eax, dword [0x4775a4]
mov edx, dword [0x4774a4]
mov edx, dword [edx]
mov edx, dword [edx + 0x48]
call fcn.00404638
mov eax, 0x471504
call fcn.0046b0f8
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471514
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x4774fc]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47154c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477554]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x4712e4
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471310
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x58], al
mov byte [ebp - 0x54], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47134c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471368
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x48], al
mov byte [ebp - 0x44], 1
lea edx, [ebp - 0x60]
mov eax, dword [0x477448]
mov eax, dword [eax]
mov ecx, 3
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
mov edx, 0x46
mov al, 4
call fcn.00472af8
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47157c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477460]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
mov eax, dword [0x477588]
mov eax, dword [eax]
mov edx, dword [0x477374]
cmp eax, dword [edx]
je 0x46cfcd
mov eax, dword [0x477588]
mov eax, dword [eax]
mov dword [ebp - 4], eax
jmp 0x470e40
lea eax, [ebp - 0x34]
mov edx, dword [0x4775a4]
mov edx, dword [edx]
call fcn.0040467c
push 1
push 1
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x4715a0
mov edx, 0x4715b0
call fcn.0045975c
xor eax, eax
mov dword [ebp - 0x28], eax
mov edx, 0x4b
mov al, 4
call fcn.00472af8
add dword [ebp - 0x28], 1
jno 0x46d017
call fcn.004037ec
mov eax, dword [ebp - 0x28]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4715c8
mov edx, 0x4715d8
mov eax, dword [ebp - 0x18]
call fcn.0045975c
cmp dword [ebp - 0x1c], 0
jne 0x46d05d
cmp dword [ebp - 0x28], 1
jne 0x46d05d
mov eax, dword [0x47730c]
mov eax, dword [eax]
add eax, 1
jno 0x46d050
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
cmp dword [ebp - 0x1c], 0
je 0x470e36
push 1
push 1
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4715f4
mov edx, 0x471600
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4715f4
mov edx, 0x471628
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov eax, dword [ebp - 0x24]
mov edx, 0x471650
call fcn.00404a00
jne 0x46d173
lea eax, [ebp - 0x98]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00404b14
mov eax, dword [ebp - 0x98]
mov edx, 0x47165c
call fcn.00404a00
je 0x46d104
lea eax, [ebp - 0x9c]
push eax
mov ecx, 4
mov edx, 1
mov eax, dword [ebp - 0x20]
call fcn.00404b14
mov eax, dword [ebp - 0x9c]
mov edx, 0x47166c
call fcn.00404a00
jne 0x46d162
mov eax, dword [ebp - 0x20]
mov edx, 0x47167c
call fcn.00404a00
je 0x46d140
mov eax, dword [ebp - 0x20]
mov edx, 0x47168c
call fcn.00404a00
je 0x46d140
mov eax, dword [ebp - 0x20]
mov edx, 0x47169c
call fcn.00404a00
je 0x46d140
mov eax, dword [ebp - 0x20]
mov edx, 0x4716ac
call fcn.00404a00
jne 0x46d151
mov eax, dword [0x4771a4]
mov edx, 0x4716bc
call fcn.00404638
jmp 0x46d1a2
mov eax, dword [0x4771a4]
mov edx, 0x4716f8
call fcn.00404638
jmp 0x46d1a2
mov eax, dword [0x4771a4]
mov edx, 0x4716bc
call fcn.00404638
jmp 0x46d1a2
mov eax, dword [ebp - 0x24]
mov edx, 0x471734
call fcn.00404a00
jne 0x46d193
mov eax, dword [0x4771a4]
mov edx, 0x471740
call fcn.00404638
jmp 0x46d1a2
mov eax, dword [0x4771a4]
mov edx, 0x47177c
call fcn.00404638
push 0x4717b8
push 1
push 1
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x4715f4
mov edx, 0x4717d4
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0xac]
lea eax, [ebp - 0xa8]
call fcn.00404e20
mov edx, dword [ebp - 0xa8]
lea ecx, [ebp - 0xa4]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xa4]
push 0x4717e0
lea eax, [ebp - 0xb4]
mov edx, dword [ebp - 0x20]
call fcn.00404e20
mov edx, dword [ebp - 0xb4]
lea ecx, [ebp - 0xb0]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xb0]
push 0x4717fc
push 1
push 1
lea eax, [ebp - 0xc0]
push eax
mov ecx, 0x4715f4
mov edx, 0x47181c
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 0xbc]
call fcn.00404e20
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0xb8]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xb8]
push 0x471840
push 1
push 1
lea eax, [ebp - 0xcc]
push eax
mov ecx, 0x4715f4
mov edx, 0x471860
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0xc8]
call fcn.00404e20
mov edx, dword [ebp - 0xc8]
lea ecx, [ebp - 0xc4]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xc4]
push 0x471884
push 1
push 1
lea eax, [ebp - 0xd8]
push eax
mov ecx, 0x4715f4
mov edx, 0x4718a4
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
call fcn.00404e20
mov edx, dword [ebp - 0xd4]
lea ecx, [ebp - 0xd0]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xd0]
push 0x4718c8
lea eax, [ebp - 0xe0]
mov edx, dword [ebp - 0x24]
call fcn.00404e20
mov edx, dword [ebp - 0xe0]
lea ecx, [ebp - 0xdc]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xdc]
push 0x4718ec
push 1
push 1
lea eax, [ebp - 0xec]
push eax
mov ecx, 0x4715f4
mov edx, 0x471904
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0xe8]
call fcn.00404e20
mov edx, dword [ebp - 0xe8]
lea ecx, [ebp - 0xe4]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xe4]
push 0x471924
push 1
push 1
lea eax, [ebp - 0xf8]
push eax
mov ecx, 0x4715f4
mov edx, 0x471940
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0xf4]
call fcn.00404e20
mov edx, dword [ebp - 0xf4]
lea ecx, [ebp - 0xf0]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xf0]
push 0x471960
push 1
push 1
lea eax, [ebp - 0x104]
push eax
mov ecx, 0x4715f4
mov edx, 0x471984
mov eax, dword [ebp - 0x34]
call fcn.0045975c
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x100]
call fcn.00404e20
mov edx, dword [ebp - 0x100]
lea ecx, [ebp - 0xfc]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0xfc]
push 0x4719a4
push 1
push 1
lea eax, [ebp - 0x110]
push eax
mov ecx, 0x4715f4
mov edx, 0x4719c4
mov eax, dword [ebp - 0x34]
call fcn.0045975c
mov edx, dword [ebp - 0x110]
lea eax, [ebp - 0x10c]
call fcn.00404e20
mov edx, dword [ebp - 0x10c]
lea ecx, [ebp - 0x108]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x108]
push 0x471480
push 1
push 1
lea eax, [ebp - 0x11c]
push eax
mov ecx, 0x4715f4
mov edx, 0x4719e8
mov eax, dword [ebp - 0x34]
call fcn.0045975c
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x118]
call fcn.00404e20
mov edx, dword [ebp - 0x118]
lea ecx, [ebp - 0x114]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x114]
push 0x471a08
push 1
push 1
lea eax, [ebp - 0x128]
push eax
mov ecx, 0x4715f4
mov edx, 0x471a2c
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0x128]
lea eax, [ebp - 0x124]
call fcn.00404e20
mov edx, dword [ebp - 0x124]
lea ecx, [ebp - 0x120]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x120]
push 0x471a50
push 1
push 1
lea eax, [ebp - 0x134]
push eax
mov ecx, 0x4715f4
mov edx, 0x471a74
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x130]
call fcn.00404e20
mov edx, dword [ebp - 0x130]
lea ecx, [ebp - 0x12c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x12c]
push 0x471a98
push 1
push 1
lea eax, [ebp - 0x140]
push eax
mov ecx, 0x4715f4
mov edx, 0x471ac4
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0x140]
lea eax, [ebp - 0x13c]
call fcn.00404e20
mov edx, dword [ebp - 0x13c]
lea ecx, [ebp - 0x138]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x138]
push 0x471aec
push 1
push 1
lea eax, [ebp - 0x14c]
push eax
mov ecx, 0x4715f4
mov edx, 0x471b0c
mov eax, dword [ebp - 0x1c]
call fcn.0045975c
mov edx, dword [ebp - 0x14c]
lea eax, [ebp - 0x148]
call fcn.00404e20
mov edx, dword [ebp - 0x148]
lea ecx, [ebp - 0x144]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x144]
lea eax, [ebp - 0xa0]
mov edx, 0x1e
call fcn.00404e4c
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x4773e4]
call fcn.0040487c
lea eax, [ebp - 0x154]
mov edx, dword [0x4773e4]
mov edx, dword [edx]
call fcn.00404e20
mov edx, dword [ebp - 0x154]
lea ecx, [ebp - 0x150]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004693b4
mov edx, dword [ebp - 0x150]
lea eax, [ebp - 0x10]
call fcn.0040487c
lea edx, [ebp - 0x158]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.00469414
mov edx, dword [ebp - 0x158]
lea eax, [ebp - 0x14]
call fcn.0040487c
push dword [ebp - 0x10]
push 0x4714ac
push dword [ebp - 0x14]
push 0x4714c0
push 0x4714d4
push 0x4714e4
lea eax, [ebp - 0x160]
mov edx, 6
call fcn.00404974
mov eax, dword [ebp - 0x160]
lea edx, [ebp - 0x15c]
call fcn.00459f18
mov ecx, dword [ebp - 0x15c]
mov eax, dword [0x4773e4]
mov edx, 0x4714f0
call fcn.00404900
push 0
push 1
mov ecx, dword [0x4771a4]
mov ecx, dword [ecx]
mov edx, dword [0x477594]
mov edx, dword [edx]
lea eax, [ebp - 0x164]
call fcn.00404900
mov edx, dword [ebp - 0x164]
mov ecx, dword [0x4773e4]
mov ecx, dword [ecx]
mov eax, dword [0x4774a4]
mov eax, dword [eax]
call fcn.004664d8
test eax, eax
jne 0x46d745
mov eax, dword [0x477128]
mov eax, dword [eax]
add eax, 3
jno 0x46d738
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
mov eax, dword [0x4775a4]
mov edx, dword [0x4774a4]
mov edx, dword [edx]
mov edx, dword [edx + 0x48]
call fcn.00404638
mov eax, dword [ebp - 0x28]
cdq
push edx
push eax
lea eax, [ebp - 0x16c]
call fcn.0046a52c
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x168]
mov edx, 0x471b34
call fcn.00404900
mov eax, dword [ebp - 0x168]
call fcn.0046b0f8
lea eax, [ebp - 0x38]
mov edx, dword [0x4775a4]
mov edx, dword [edx]
call fcn.0040467c
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47154c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x184], al
mov byte [ebp - 0x180], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471b48
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x17c], al
mov byte [ebp - 0x178], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471b64
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x174], al
mov byte [ebp - 0x170], 1
lea edx, [ebp - 0x184]
mov eax, dword [0x477554]
mov eax, dword [eax]
mov ecx, 2
call fcn.00472b40
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x4712e4
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471310
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x58], al
mov byte [ebp - 0x54], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47134c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471368
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x48], al
mov byte [ebp - 0x44], 1
lea edx, [ebp - 0x60]
mov eax, dword [0x477448]
mov eax, dword [eax]
mov ecx, 3
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
mov edi, 0x14
lea esi, [ebx + 4]
mov eax, esi
call fcn.004045e4
add esi, 4
dec edi
jne 0x46d8f1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov eax, 0x471bac
call fcn.00404bf8
test eax, eax
jle 0x46dea2
push 1
push 1
lea eax, [ebp - 8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x471bd0
mov edx, 0x471be8
call fcn.0045975c
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x190]
push eax
xor ecx, ecx
mov edx, 0x471c04
mov eax, dword [ebp - 8]
call fcn.00459368
mov eax, dword [ebp - 0x190]
xor ecx, ecx
mov edx, 0x471c10
call fcn.00459368
mov eax, dword [ebp - 0x18c]
xor ecx, ecx
mov edx, 0x471c1c
call fcn.00459368
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 8]
call fcn.0040467c
push 1
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push 1
lea eax, [ebp - 0x194]
push eax
mov ecx, 0x471c28
mov edx, 0x471c34
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x194]
mov ecx, 0x4715f4
mov edx, 0x4717d4
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x198]
push eax
mov ecx, 0x471c50
mov edx, 0x471c5c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x198]
lea eax, [ebx + 4]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x19c]
push eax
mov ecx, 0x4715f4
mov edx, 0x471c78
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x19c]
lea eax, [ebx + 8]
call fcn.00404638
mov eax, dword [ebx + 8]
call fcn.004048b4
cmp eax, 0x3f
jle 0x46da55
lea eax, [ebp - 0x1a0]
push eax
mov eax, dword [ebx + 8]
mov ecx, 0x3c
mov edx, 1
call fcn.00459958
mov edx, dword [ebp - 0x1a0]
lea eax, [ebx + 8]
mov ecx, 0x471c9c
call fcn.00404900
push 1
mov edx, dword [0x477120]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471ca8
call fcn.004592e0
test eax, eax
jle 0x46da7c
lea eax, [ebx + 0xc]
call fcn.004045e4
jmp 0x46dada
push 1
push 1
lea eax, [ebp - 0x1a8]
push eax
push 1
push 1
lea eax, [ebp - 0x1ac]
push eax
mov edx, dword [ebx + 4]
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x471ccc
call fcn.0045975c
mov eax, dword [ebp - 0x1ac]
mov ecx, 0x471cdc
mov edx, 0x471ce8
call fcn.0045975c
mov eax, dword [ebp - 0x1a8]
lea edx, [ebp - 0x1a4]
call fcn.0045a088
mov edx, dword [ebp - 0x1a4]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x1b0]
push eax
mov eax, dword [ebx + 0xc]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov edx, dword [ebp - 0x1b0]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x1b4]
push eax
push 1
push 1
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x471c50
mov edx, 0x471d04
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x1b8]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov eax, dword [ebp - 0x1b4]
lea edx, [ebp - 0x2c]
call fcn.0045a088
push 1
push 1
lea eax, [ebp - 0x1bc]
push eax
mov ecx, 0x471d1c
mov edx, 0x471d2c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x1bc]
lea eax, [ebx + 0x24]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x1c0]
push eax
mov eax, dword [ebx + 0x24]
mov ecx, 0x471d40
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x1c0]
lea eax, [ebx + 0x24]
call fcn.00404638
lea eax, [ebx + 0x14]
call fcn.004045e4
lea eax, [ebx + 0x18]
call fcn.004045e4
lea eax, [ebp - 0x1c4]
push eax
push 1
push 1
lea eax, [ebp - 0x1c8]
push eax
mov ecx, 0x4715c8
mov edx, 0x471d4c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x1c8]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x1c4]
lea eax, [ebx + 0x30]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x1cc]
push eax
mov eax, dword [ebx + 0x30]
mov ecx, 0x471d70
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x1cc]
lea eax, [ebx + 0x30]
call fcn.00404638
lea eax, [ebx + 0x30]
push eax
mov eax, dword [ebx + 0x30]
mov ecx, 8
mov edx, 1
call fcn.00404b14
lea eax, [ebp - 0x1d0]
push eax
push 1
push 1
lea eax, [ebp - 0x1d4]
push eax
mov ecx, 0x4715c8
mov edx, 0x471d4c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x1d4]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x1d0]
lea eax, [ebx + 0x34]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x1d8]
push eax
mov eax, dword [ebx + 0x34]
mov ecx, 0x471d70
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x1d8]
lea eax, [ebx + 0x34]
call fcn.00404638
lea ecx, [ebp - 0x1dc]
mov eax, dword [ebx + 0x34]
mov edx, 8
call fcn.0046a4f8
mov edx, dword [ebp - 0x1dc]
lea eax, [ebx + 0x34]
call fcn.00404638
lea eax, [ebx + 0x28]
mov edx, dword [ebx + 0x30]
call fcn.00404638
lea eax, [ebx + 0x2c]
mov edx, dword [ebx + 0x34]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x1e0]
push eax
push 1
push 1
lea eax, [ebp - 0x1e4]
push eax
mov ecx, 0x471d1c
mov edx, 0x471d80
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x1e4]
mov ecx, 0x471d40
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x1e0]
lea eax, [ebx + 0x38]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x1e8]
push eax
push 1
push 1
lea eax, [ebp - 0x1ec]
push eax
mov ecx, 0x4715c8
mov edx, 0x471d80
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x1ec]
mov ecx, 0x471d1c
mov edx, 0x471d98
call fcn.0045975c
mov edx, dword [ebp - 0x1e8]
lea eax, [ebx + 0x3c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x1f0]
push eax
mov eax, dword [ebx + 0x3c]
mov ecx, 0x471d40
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x1f0]
lea eax, [ebx + 0x3c]
call fcn.00404638
lea eax, [ebp - 0x1f4]
push eax
mov eax, dword [ebx + 0x3c]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x1f4]
lea eax, [ebx + 0x3c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x1f8]
push eax
push 1
push 1
lea eax, [ebp - 0x1fc]
push eax
mov ecx, 0x471d1c
mov edx, 0x471dc0
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x1fc]
mov ecx, 0x471d40
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x1f8]
lea eax, [ebx + 0x44]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x200]
push eax
push 1
push 1
lea eax, [ebp - 0x204]
push eax
mov ecx, 0x4715c8
mov edx, 0x471dc0
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x204]
mov ecx, 0x471d1c
mov edx, 0x471d98
call fcn.0045975c
mov edx, dword [ebp - 0x200]
lea eax, [ebx + 0x48]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x208]
push eax
mov eax, dword [ebx + 0x48]
mov ecx, 0x471d40
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x208]
lea eax, [ebx + 0x48]
call fcn.00404638
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [ebx + 0x48]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x20c]
lea eax, [ebx + 0x48]
call fcn.00404638
jmp 0x47007c
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov eax, 0x471dd8
call fcn.00404bf8
test eax, eax
jle 0x46f4dc
push 1
push 1
lea eax, [ebp - 8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x471bd0
mov edx, 0x471be8
call fcn.0045975c
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x214]
push eax
xor ecx, ecx
mov edx, 0x471c10
mov eax, dword [ebp - 8]
call fcn.00459368
mov eax, dword [ebp - 0x214]
xor ecx, ecx
mov edx, 0x471c1c
call fcn.00459368
mov edx, dword [ebp - 0x210]
lea eax, [ebp - 8]
call fcn.0040467c
mov eax, dword [0x4771a4]
mov edx, 0x471dfc
call fcn.00404638
push 0x4717b8
push 1
push 1
lea eax, [ebp - 0x224]
push eax
push 1
push 1
lea eax, [ebp - 0x228]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x228]
mov ecx, 0x4715f4
mov edx, 0x471e34
call fcn.0045975c
mov edx, dword [ebp - 0x224]
lea eax, [ebp - 0x220]
call fcn.00404e20
mov edx, dword [ebp - 0x220]
lea ecx, [ebp - 0x21c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x21c]
push 0x471e50
push 1
push 1
lea eax, [ebp - 0x234]
push eax
push 1
push 1
lea eax, [ebp - 0x238]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x238]
mov ecx, 0x4715f4
mov edx, 0x471e6c
call fcn.0045975c
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x230]
call fcn.00404e20
mov edx, dword [ebp - 0x230]
lea ecx, [ebp - 0x22c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x22c]
push 0x471e88
push 1
push 1
lea eax, [ebp - 0x244]
push eax
push 1
push 1
lea eax, [ebp - 0x248]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x248]
mov ecx, 0x4715f4
mov edx, 0x471ea8
call fcn.0045975c
mov edx, dword [ebp - 0x244]
lea eax, [ebp - 0x240]
call fcn.00404e20
mov edx, dword [ebp - 0x240]
lea ecx, [ebp - 0x23c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x23c]
push 0x4718ec
push 1
push 1
lea eax, [ebp - 0x254]
push eax
push 1
push 1
lea eax, [ebp - 0x258]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x258]
mov ecx, 0x4715f4
mov edx, 0x471ec8
call fcn.0045975c
mov edx, dword [ebp - 0x254]
lea eax, [ebp - 0x250]
call fcn.00404e20
mov edx, dword [ebp - 0x250]
lea ecx, [ebp - 0x24c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x24c]
push 0x4717fc
push 1
push 1
lea eax, [ebp - 0x264]
push eax
push 1
push 1
lea eax, [ebp - 0x268]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x268]
mov ecx, 0x4715f4
mov edx, 0x471ee8
call fcn.0045975c
mov edx, dword [ebp - 0x264]
lea eax, [ebp - 0x260]
call fcn.00404e20
mov edx, dword [ebp - 0x260]
lea ecx, [ebp - 0x25c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x25c]
push 0x471f04
push 1
push 1
lea eax, [ebp - 0x274]
push eax
push 1
push 1
lea eax, [ebp - 0x278]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x278]
mov ecx, 0x4715f4
mov edx, 0x471f28
call fcn.0045975c
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
call fcn.00404e20
mov edx, dword [ebp - 0x270]
lea ecx, [ebp - 0x26c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x26c]
push 0x471f48
push 1
push 1
lea eax, [ebp - 0x284]
push eax
push 1
push 1
lea eax, [ebp - 0x288]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x288]
mov ecx, 0x4715f4
mov edx, 0x471f68
call fcn.0045975c
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0x280]
call fcn.00404e20
mov edx, dword [ebp - 0x280]
lea ecx, [ebp - 0x27c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x27c]
push 0x471f84
push 1
push 1
lea eax, [ebp - 0x294]
push eax
push 1
push 1
lea eax, [ebp - 0x298]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x298]
mov ecx, 0x4715f4
mov edx, 0x471fa8
call fcn.0045975c
mov edx, dword [ebp - 0x294]
lea eax, [ebp - 0x290]
call fcn.00404e20
mov edx, dword [ebp - 0x290]
lea ecx, [ebp - 0x28c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x28c]
push 0x471fc8
push 1
push 1
lea eax, [ebp - 0x2a4]
push eax
push 1
push 1
lea eax, [ebp - 0x2a8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x2a8]
mov ecx, 0x4715f4
mov edx, 0x471fec
call fcn.0045975c
mov edx, dword [ebp - 0x2a4]
lea eax, [ebp - 0x2a0]
call fcn.00404e20
mov edx, dword [ebp - 0x2a0]
lea ecx, [ebp - 0x29c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x29c]
push 0x471884
push 1
push 1
lea eax, [ebp - 0x2b4]
push eax
push 1
push 1
lea eax, [ebp - 0x2b8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x2b8]
mov ecx, 0x4715f4
mov edx, 0x472010
call fcn.0045975c
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2b0]
call fcn.00404e20
mov edx, dword [ebp - 0x2b0]
lea ecx, [ebp - 0x2ac]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x2ac]
push 0x47202c
push 1
push 1
lea eax, [ebp - 0x2c4]
push eax
push 1
push 1
lea eax, [ebp - 0x2c8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x2c8]
mov ecx, 0x4715f4
mov edx, 0x472054
call fcn.0045975c
mov edx, dword [ebp - 0x2c4]
lea eax, [ebp - 0x2c0]
call fcn.00404e20
mov edx, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x2bc]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x2bc]
push 0x471960
push 1
push 1
lea eax, [ebp - 0x2d4]
push eax
push 1
push 1
lea eax, [ebp - 0x2d8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x2d8]
mov ecx, 0x4715f4
mov edx, 0x472078
call fcn.0045975c
mov edx, dword [ebp - 0x2d4]
lea eax, [ebp - 0x2d0]
call fcn.00404e20
mov edx, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x2cc]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x2cc]
push 0x472098
push 1
push 1
lea eax, [ebp - 0x2e4]
push eax
push 1
push 1
lea eax, [ebp - 0x2e8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x2e8]
mov ecx, 0x4715f4
mov edx, 0x4720b8
call fcn.0045975c
mov edx, dword [ebp - 0x2e4]
lea eax, [ebp - 0x2e0]
call fcn.00404e20
mov edx, dword [ebp - 0x2e0]
lea ecx, [ebp - 0x2dc]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x2dc]
push 0x4720d8
push 1
push 1
lea eax, [ebp - 0x2f4]
push eax
push 1
push 1
lea eax, [ebp - 0x2f8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x2f8]
mov ecx, 0x4715f4
mov edx, 0x4720f0
call fcn.0045975c
mov edx, dword [ebp - 0x2f4]
lea eax, [ebp - 0x2f0]
call fcn.00404e20
mov edx, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x2ec]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x2ec]
push 0x472108
push 1
push 1
lea eax, [ebp - 0x304]
push eax
push 1
push 1
lea eax, [ebp - 0x308]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x471dd8
call fcn.0045975c
mov eax, dword [ebp - 0x308]
mov ecx, 0x4715f4
mov edx, 0x472134
call fcn.0045975c
mov edx, dword [ebp - 0x304]
lea eax, [ebp - 0x300]
call fcn.00404e20
mov edx, dword [ebp - 0x300]
lea ecx, [ebp - 0x2fc]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004692f4
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x218]
mov edx, 0x1e
call fcn.00404e4c
mov edx, dword [ebp - 0x218]
mov eax, dword [0x4773e4]
call fcn.0040487c
lea eax, [ebp - 0x310]
mov edx, dword [0x4773e4]
mov edx, dword [edx]
call fcn.00404e20
mov edx, dword [ebp - 0x310]
lea ecx, [ebp - 0x30c]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.004693b4
mov edx, dword [ebp - 0x30c]
lea eax, [ebp - 0x10]
call fcn.0040487c
lea edx, [ebp - 0x314]
mov eax, dword [0x477200]
mov eax, dword [eax]
call fcn.00469414
mov edx, dword [ebp - 0x314]
lea eax, [ebp - 0x14]
call fcn.0040487c
push dword [ebp - 0x10]
push 0x4714ac
push dword [ebp - 0x14]
push 0x4714c0
push 0x4714d4
push 0x4714e4
lea eax, [ebp - 0x31c]
mov edx, 6
call fcn.00404974
mov eax, dword [ebp - 0x31c]
lea edx, [ebp - 0x318]
call fcn.00459f18
mov ecx, dword [ebp - 0x318]
mov eax, dword [0x4773e4]
mov edx, 0x4714f0
call fcn.00404900
push 0
push 1
mov ecx, dword [0x4771a4]
mov ecx, dword [ecx]
mov edx, dword [0x477594]
mov edx, dword [edx]
lea eax, [ebp - 0x320]
call fcn.00404900
mov edx, dword [ebp - 0x320]
mov ecx, dword [0x4773e4]
mov ecx, dword [ecx]
mov eax, dword [0x4774a4]
mov eax, dword [eax]
call fcn.004664d8
test eax, eax
jne 0x46e6f8
mov eax, dword [0x477128]
mov eax, dword [eax]
add eax, 3
jno 0x46e6eb
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
mov eax, dword [0x4775a4]
mov edx, dword [0x4774a4]
mov edx, dword [edx]
mov edx, dword [edx + 0x48]
call fcn.00404638
mov eax, dword [ebp - 0x28]
cdq
push edx
push eax
lea eax, [ebp - 0x328]
call fcn.0046a52c
mov ecx, dword [ebp - 0x328]
lea eax, [ebp - 0x324]
mov edx, 0x47215c
call fcn.00404900
mov eax, dword [ebp - 0x324]
call fcn.0046b0f8
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47154c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x184], al
mov byte [ebp - 0x180], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471b48
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x17c], al
mov byte [ebp - 0x178], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471b64
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x174], al
mov byte [ebp - 0x170], 1
lea edx, [ebp - 0x184]
mov eax, dword [0x477554]
mov eax, dword [eax]
mov ecx, 2
call fcn.00472b40
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x4712e4
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471310
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x58], al
mov byte [ebp - 0x54], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47134c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471368
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x48], al
mov byte [ebp - 0x44], 1
lea edx, [ebp - 0x60]
mov eax, dword [0x477448]
mov eax, dword [eax]
mov ecx, 3
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
push 1
push 1
lea eax, [ebp - 0x32c]
push eax
push 1
push 1
lea eax, [ebp - 0x330]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x4715c8
mov edx, 0x472170
call fcn.0045975c
mov eax, dword [ebp - 0x330]
mov ecx, 0x471d40
mov edx, 0x472188
call fcn.0045975c
mov edx, dword [ebp - 0x32c]
lea eax, [ebx + 0x18]
call fcn.00404638
cmp dword [ebx + 0x18], 0
jne 0x46e930
push 1
push 1
lea eax, [ebp - 0x334]
push eax
push 1
push 1
lea eax, [ebp - 0x338]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x4715c8
mov edx, 0x47219c
call fcn.0045975c
mov eax, dword [ebp - 0x338]
mov ecx, 0x471d40
mov edx, 0x472188
call fcn.0045975c
mov edx, dword [ebp - 0x334]
lea eax, [ebx + 0x18]
call fcn.00404638
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebx + 0x18]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov eax, dword [ebp - 0x340]
lea edx, [ebp - 0x33c]
call fcn.004597a0
mov edx, dword [ebp - 0x33c]
lea eax, [ebx + 0x18]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x344]
push eax
push 1
push 1
lea eax, [ebp - 0x348]
push eax
mov ecx, 0x4721b4
mov edx, 0x4721c4
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x348]
xor ecx, ecx
mov edx, 0x4721d8
call fcn.0045975c
mov edx, dword [ebp - 0x344]
lea eax, [ebx + 4]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x34c]
push eax
mov ecx, 0x471c50
mov edx, 0x4721ec
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x34c]
lea eax, [ebx + 8]
call fcn.00404638
mov eax, dword [ebx + 8]
call fcn.004048b4
cmp eax, 0x3f
jle 0x46ea11
lea eax, [ebp - 0x350]
push eax
mov eax, dword [ebx + 8]
mov ecx, 0x3c
mov edx, 1
call fcn.00459958
mov edx, dword [ebp - 0x350]
lea eax, [ebx + 8]
mov ecx, 0x471c9c
call fcn.00404900
push 1
mov edx, dword [0x477120]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471ca8
call fcn.004592e0
test eax, eax
jle 0x46ea38
lea eax, [ebx + 0xc]
call fcn.004045e4
jmp 0x46ea96
push 1
push 1
lea eax, [ebp - 0x358]
push eax
push 1
push 1
lea eax, [ebp - 0x35c]
push eax
mov edx, dword [ebx + 4]
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x471ccc
call fcn.0045975c
mov eax, dword [ebp - 0x35c]
mov ecx, 0x471cdc
mov edx, 0x471ce8
call fcn.0045975c
mov eax, dword [ebp - 0x358]
lea edx, [ebp - 0x354]
call fcn.0045a088
mov edx, dword [ebp - 0x354]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x360]
push eax
mov eax, dword [ebx + 0xc]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov edx, dword [ebp - 0x360]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x364]
push eax
push 1
push 1
lea eax, [ebp - 0x368]
push eax
push 1
push 1
lea eax, [ebp - 0x36c]
push eax
push 1
push 1
lea eax, [ebp - 0x370]
push eax
mov ecx, 0x472208
mov edx, 0x47221c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x370]
mov ecx, 0x471d70
mov edx, 0x472230
call fcn.0045975c
mov eax, dword [ebp - 0x36c]
mov ecx, 0x471cdc
mov edx, 0x471c28
call fcn.0045975c
mov eax, dword [ebp - 0x368]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov eax, dword [ebp - 0x364]
lea edx, [ebp - 0x2c]
call fcn.0045a088
push 1
push 1
lea eax, [ebp - 0x374]
push eax
push 1
push 1
lea eax, [ebp - 0x378]
push eax
push 1
push 1
lea eax, [ebp - 0x37c]
push eax
mov ecx, 0x472208
mov edx, 0x472240
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x37c]
mov ecx, 0x472254
mov edx, 0x472260
call fcn.0045975c
mov eax, dword [ebp - 0x378]
mov ecx, 0x472278
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x374]
lea eax, [ebx + 0x14]
call fcn.00404638
cmp dword [ebx + 0x14], 0
jne 0x46ec1e
push 1
push 1
lea eax, [ebp - 0x380]
push eax
push 1
push 1
lea eax, [ebp - 0x384]
push eax
push 1
push 1
lea eax, [ebp - 0x388]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x472208
mov edx, 0x472284
call fcn.0045975c
mov eax, dword [ebp - 0x388]
mov ecx, 0x471d1c
mov edx, 0x472298
call fcn.0045975c
mov eax, dword [ebp - 0x384]
mov ecx, 0x471d40
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x380]
lea eax, [ebx + 0x14]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x38c]
push eax
push 1
push 1
lea eax, [ebp - 0x390]
push eax
mov ecx, 0x4722a4
mov edx, 0x4722b4
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x390]
mov ecx, 0x471d40
mov edx, 0x4722cc
call fcn.0045975c
mov edx, dword [ebp - 0x38c]
lea eax, [ebx + 0x1c]
call fcn.00404638
lea eax, [ebp - 0x394]
push eax
mov eax, dword [ebx + 0x1c]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x394]
lea eax, [ebx + 0x1c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x4715f4
mov edx, 0x471fec
call fcn.0045975c
lea eax, [ebp - 0x398]
push eax
push 1
push 1
lea eax, [ebp - 0x39c]
push eax
mov ecx, 0x4715f4
mov edx, 0x471ec8
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x39c]
xor ecx, ecx
mov edx, 0x4722e0
call fcn.00459368
mov edx, dword [ebp - 0x398]
lea eax, [ebx + 0x24]
call fcn.00404638
lea eax, [ebp - 0x3a0]
push eax
push 1
push 1
lea eax, [ebp - 0x3a4]
push eax
mov ecx, 0x472208
mov edx, 0x471d4c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x3a4]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x3a0]
lea eax, [ebx + 0x28]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x3a8]
push eax
push 1
push 1
lea eax, [ebp - 0x3ac]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 0x471d70
mov edx, 0x4722f0
call fcn.0045975c
mov eax, dword [ebp - 0x3ac]
xor ecx, ecx
mov edx, 0x472304
call fcn.0045975c
mov edx, dword [ebp - 0x3a8]
lea eax, [ebx + 0x28]
call fcn.00404638
lea eax, [ebx + 0x28]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 8
mov edx, 1
call fcn.00404b14
cmp dword [ebx + 0x28], 0
jne 0x46ee3d
lea eax, [ebp - 0x3b0]
push eax
push 1
push 1
lea eax, [ebp - 0x3b4]
push eax
mov ecx, 0x472208
mov edx, 0x472310
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x3b4]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x3b0]
lea eax, [ebx + 0x28]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x3b8]
push eax
push 1
push 1
lea eax, [ebp - 0x3bc]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 0x471d70
mov edx, 0x47232c
call fcn.0045975c
mov eax, dword [ebp - 0x3bc]
xor ecx, ecx
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x3b8]
lea eax, [ebx + 0x28]
call fcn.00404638
lea eax, [ebx + 0x28]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 8
mov edx, 1
call fcn.00404b14
lea eax, [ebp - 0x3c0]
push eax
push 1
push 1
lea eax, [ebp - 0x3c4]
push eax
mov ecx, 0x472208
mov edx, 0x471d4c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x3c4]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x3c0]
lea eax, [ebx + 0x2c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x3c8]
push eax
push 1
push 1
lea eax, [ebp - 0x3cc]
push eax
mov eax, dword [ebx + 0x2c]
mov ecx, 0x471d70
mov edx, 0x4722f0
call fcn.0045975c
mov eax, dword [ebp - 0x3cc]
xor ecx, ecx
mov edx, 0x472304
call fcn.0045975c
mov edx, dword [ebp - 0x3c8]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea ecx, [ebp - 0x3d0]
mov eax, dword [ebx + 0x2c]
mov edx, 8
call fcn.0046a4f8
mov edx, dword [ebp - 0x3d0]
lea eax, [ebx + 0x2c]
call fcn.00404638
cmp dword [ebx + 0x2c], 0
jne 0x46efa1
lea eax, [ebp - 0x3d4]
push eax
push 1
push 1
lea eax, [ebp - 0x3d8]
push eax
mov ecx, 0x472208
mov edx, 0x472348
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x3d8]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x3d4]
lea eax, [ebx + 0x2c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x3dc]
push eax
push 1
push 1
lea eax, [ebp - 0x3e0]
push eax
mov eax, dword [ebx + 0x2c]
mov ecx, 0x471d70
mov edx, 0x472360
call fcn.0045975c
mov eax, dword [ebp - 0x3e0]
xor ecx, ecx
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x3dc]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea ecx, [ebp - 0x3e4]
mov eax, dword [ebx + 0x2c]
mov edx, 8
call fcn.0046a4f8
mov edx, dword [ebp - 0x3e4]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebp - 0x3e8]
push eax
push 1
push 1
lea eax, [ebp - 0x3ec]
push eax
mov ecx, 0x472208
mov edx, 0x471d4c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x3ec]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x3e8]
lea eax, [ebx + 0x30]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x3f0]
push eax
push 1
push 1
lea eax, [ebp - 0x3f4]
push eax
mov eax, dword [ebx + 0x30]
mov ecx, 0x471d70
mov edx, 0x4722f0
call fcn.0045975c
mov eax, dword [ebp - 0x3f4]
xor ecx, ecx
mov edx, 0x472304
call fcn.0045975c
mov edx, dword [ebp - 0x3f0]
lea eax, [ebx + 0x30]
call fcn.00404638
lea eax, [ebx + 0x30]
push eax
mov eax, dword [ebx + 0x30]
mov ecx, 8
mov edx, 1
call fcn.00404b14
cmp dword [ebx + 0x30], 0
jne 0x46f0ef
lea eax, [ebp - 0x3f8]
push eax
push 1
push 1
lea eax, [ebp - 0x3fc]
push eax
mov ecx, 0x472208
mov edx, 0x472348
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x3fc]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x3f8]
lea eax, [ebx + 0x30]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x400]
push eax
push 1
push 1
lea eax, [ebp - 0x404]
push eax
mov eax, dword [ebx + 0x30]
mov ecx, 0x471d70
mov edx, 0x472360
call fcn.0045975c
mov eax, dword [ebp - 0x404]
xor ecx, ecx
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x400]
lea eax, [ebx + 0x30]
call fcn.00404638
lea eax, [ebx + 0x30]
push eax
mov eax, dword [ebx + 0x30]
mov ecx, 8
mov edx, 1
call fcn.00404b14
lea eax, [ebp - 0x408]
push eax
push 1
push 1
lea eax, [ebp - 0x40c]
push eax
mov ecx, 0x472208
mov edx, 0x471d4c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x40c]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x408]
lea eax, [ebx + 0x34]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x410]
push eax
push 1
push 1
lea eax, [ebp - 0x414]
push eax
mov eax, dword [ebx + 0x34]
mov ecx, 0x471d70
mov edx, 0x4722f0
call fcn.0045975c
mov eax, dword [ebp - 0x414]
xor ecx, ecx
mov edx, 0x472304
call fcn.0045975c
mov edx, dword [ebp - 0x410]
lea eax, [ebx + 0x34]
call fcn.00404638
lea ecx, [ebp - 0x418]
mov eax, dword [ebx + 0x34]
mov edx, 8
call fcn.0046a4f8
mov edx, dword [ebp - 0x418]
lea eax, [ebx + 0x34]
call fcn.00404638
cmp dword [ebx + 0x34], 0
jne 0x46f253
lea eax, [ebp - 0x41c]
push eax
push 1
push 1
lea eax, [ebp - 0x420]
push eax
mov ecx, 0x472208
mov edx, 0x472348
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x420]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x41c]
lea eax, [ebx + 0x34]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x424]
push eax
push 1
push 1
lea eax, [ebp - 0x428]
push eax
mov eax, dword [ebx + 0x34]
mov ecx, 0x471d70
mov edx, 0x472360
call fcn.0045975c
mov eax, dword [ebp - 0x428]
xor ecx, ecx
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x424]
lea eax, [ebx + 0x34]
call fcn.00404638
lea ecx, [ebp - 0x42c]
mov eax, dword [ebx + 0x34]
mov edx, 8
call fcn.0046a4f8
mov edx, dword [ebp - 0x42c]
lea eax, [ebx + 0x34]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x430]
push eax
push 1
push 1
lea eax, [ebp - 0x434]
push eax
mov ecx, 0x4715c8
mov edx, 0x471d80
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x434]
mov ecx, 0x471d70
mov edx, 0x471c28
call fcn.0045975c
mov edx, dword [ebp - 0x430]
lea eax, [ebx + 0x38]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x438]
push eax
push 1
push 1
lea eax, [ebp - 0x43c]
push eax
mov ecx, 0x4715c8
mov edx, 0x471d80
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x43c]
mov ecx, 0x471d70
mov edx, 0x47237c
call fcn.0045975c
mov edx, dword [ebp - 0x438]
lea eax, [ebx + 0x3c]
call fcn.00404638
lea eax, [ebp - 0x440]
push eax
push 1
push 1
lea eax, [ebp - 0x444]
push eax
mov eax, dword [ebx + 0x3c]
xor ecx, ecx
mov edx, 0x471c28
call fcn.0045975c
mov eax, dword [ebp - 0x444]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x440]
lea eax, [ebx + 0x3c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x44c]
push eax
push 1
push 1
lea eax, [ebp - 0x450]
push eax
mov ecx, 0x4715c8
mov edx, 0x471dc0
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x450]
mov ecx, 0x471d70
mov edx, 0x471c28
call fcn.0045975c
mov eax, dword [ebp - 0x44c]
lea edx, [ebp - 0x448]
call fcn.0045a088
mov edx, dword [ebp - 0x448]
lea eax, [ebx + 0x44]
call fcn.00404638
cmp dword [ebx + 0x44], 0
jne 0x46f414
push 1
push 1
lea eax, [ebp - 0x454]
push eax
push 1
push 1
lea eax, [ebp - 0x458]
push eax
mov ecx, 0x4713fc
mov edx, 0x472398
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x458]
mov ecx, 0x471c50
mov edx, 0x4723ac
call fcn.0045975c
mov edx, dword [ebp - 0x454]
lea eax, [ebx + 0x44]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x460]
push eax
mov eax, dword [ebx + 0x44]
xor ecx, ecx
mov edx, 0x4723c0
call fcn.0045975c
mov eax, dword [ebp - 0x460]
lea edx, [ebp - 0x45c]
call fcn.0045a088
mov edx, dword [ebp - 0x45c]
lea eax, [ebx + 0x44]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x464]
push eax
push 1
push 1
lea eax, [ebp - 0x468]
push eax
mov ecx, 0x4715c8
mov edx, 0x471dc0
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x468]
mov ecx, 0x471d70
mov edx, 0x47237c
call fcn.0045975c
mov edx, dword [ebp - 0x464]
lea eax, [ebx + 0x48]
call fcn.00404638
lea eax, [ebp - 0x46c]
push eax
push 1
push 1
lea eax, [ebp - 0x470]
push eax
mov eax, dword [ebx + 0x48]
xor ecx, ecx
mov edx, 0x471c28
call fcn.0045975c
mov eax, dword [ebp - 0x470]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x46c]
lea eax, [ebx + 0x48]
call fcn.00404638
mov eax, dword [ebx + 0x18]
call fcn.0045989c
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477464]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
call fcn.00472c0c
test al, al
je 0x47007c
mov eax, dword [0x477588]
mov eax, dword [eax]
mov dword [ebp - 4], eax
jmp 0x470e40
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov eax, 0x4723d0
call fcn.00404bf8
test eax, eax
jle 0x46fa5b
push 1
push 1
lea eax, [ebp - 8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x471bd0
mov edx, 0x471be8
call fcn.0045975c
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x478]
push eax
xor ecx, ecx
mov edx, 0x471c10
mov eax, dword [ebp - 8]
call fcn.00459368
mov eax, dword [ebp - 0x478]
xor ecx, ecx
mov edx, 0x471c1c
call fcn.00459368
mov edx, dword [ebp - 0x474]
lea eax, [ebp - 8]
call fcn.0040467c
push 1
push 1
lea eax, [ebp - 0x47c]
push eax
mov ecx, 0x471c50
mov edx, 0x471c5c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x47c]
lea eax, [ebx + 4]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x480]
push eax
mov ecx, 0x4715f4
mov edx, 0x471c78
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x480]
lea eax, [ebx + 8]
call fcn.00404638
mov eax, dword [ebx + 8]
call fcn.004048b4
cmp eax, 0x3f
jle 0x46f5e0
lea eax, [ebp - 0x484]
push eax
mov eax, dword [ebx + 8]
mov ecx, 0x3c
mov edx, 1
call fcn.00459958
mov edx, dword [ebp - 0x484]
lea eax, [ebx + 8]
mov ecx, 0x471c9c
call fcn.00404900
push 1
mov edx, dword [0x477120]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471ca8
call fcn.004592e0
test eax, eax
jle 0x46f607
lea eax, [ebx + 0xc]
call fcn.004045e4
jmp 0x46f665
push 1
push 1
lea eax, [ebp - 0x48c]
push eax
push 1
push 1
lea eax, [ebp - 0x490]
push eax
mov edx, dword [ebx + 4]
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x471ccc
call fcn.0045975c
mov eax, dword [ebp - 0x490]
mov ecx, 0x471cdc
mov edx, 0x471ce8
call fcn.0045975c
mov eax, dword [ebp - 0x48c]
lea edx, [ebp - 0x488]
call fcn.0045a088
mov edx, dword [ebp - 0x488]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x494]
push eax
mov eax, dword [ebx + 0xc]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov edx, dword [ebp - 0x494]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x49c]
push eax
push 2
push 1
lea eax, [ebp - 0x4a0]
push eax
mov ecx, 0x471c50
mov edx, 0x4723f8
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x4a0]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov eax, dword [ebp - 0x49c]
xor ecx, ecx
mov edx, 0x471cdc
call fcn.00459368
mov eax, dword [ebp - 0x498]
lea edx, [ebp - 0x2c]
call fcn.0045a088
push 1
push 1
lea eax, [ebp - 0x4a4]
push eax
push 1
push 1
lea eax, [ebp - 0x4a8]
push eax
mov ecx, 0x4722a4
mov edx, 0x47240c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x4a8]
mov ecx, 0x471d40
mov edx, 0x472424
call fcn.0045975c
mov edx, dword [ebp - 0x4a4]
lea eax, [ebx + 0x1c]
call fcn.00404638
lea eax, [ebp - 0x4ac]
push eax
mov eax, dword [ebx + 0x1c]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x4ac]
lea eax, [ebx + 0x1c]
call fcn.00404638
lea eax, [ebx + 0x24]
call fcn.004045e4
push 2
push 1
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x471c50
mov edx, 0x472438
mov eax, dword [ebp - 8]
call fcn.0045975c
push 2
push 1
lea eax, [ebp - 0x4b0]
push eax
mov ecx, 0x471c50
mov edx, 0x47244c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x4b0]
lea eax, [ebx + 0x14]
call fcn.00404638
lea eax, [ebp - 0x4b8]
push eax
mov eax, dword [ebx + 0x14]
xor ecx, ecx
mov edx, 0x472278
call fcn.00459368
mov eax, dword [ebp - 0x4b8]
lea edx, [ebp - 0x4b4]
call fcn.0045a088
mov edx, dword [ebp - 0x4b4]
lea eax, [ebx + 0x14]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x4c0]
push eax
mov ecx, 0x471c50
mov edx, 0x472460
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x4c0]
lea edx, [ebp - 0x4bc]
call fcn.00457550
mov edx, dword [ebp - 0x4bc]
lea eax, [ebx + 0x28]
call fcn.00404638
lea eax, [ebp - 0x4c4]
push eax
push 1
push 1
lea eax, [ebp - 0x4c8]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 0x472474
xor edx, edx
call fcn.0045975c
mov eax, dword [ebp - 0x4c8]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x4c4]
lea eax, [ebx + 0x28]
call fcn.00404638
lea eax, [ebp - 0x4d0]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 8
mov edx, 1
call fcn.00404b14
mov eax, dword [ebp - 0x4d0]
lea edx, [ebp - 0x4cc]
call fcn.0045a088
mov edx, dword [ebp - 0x4cc]
lea eax, [ebx + 0x28]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x4d8]
push eax
mov ecx, 0x471c50
mov edx, 0x472460
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x4d8]
lea edx, [ebp - 0x4d4]
call fcn.00457550
mov edx, dword [ebp - 0x4d4]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebp - 0x4dc]
push eax
push 1
push 1
lea eax, [ebp - 0x4e0]
push eax
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
mov edx, 0x472474
call fcn.0045975c
mov eax, dword [ebp - 0x4e0]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x4dc]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea ecx, [ebp - 0x4e8]
mov eax, dword [ebx + 0x2c]
mov edx, 8
call fcn.0046a4f8
mov eax, dword [ebp - 0x4e8]
lea edx, [ebp - 0x4e4]
call fcn.0045a088
mov edx, dword [ebp - 0x4e4]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebx + 0x30]
mov edx, dword [ebx + 0x28]
call fcn.00404638
lea eax, [ebx + 0x34]
mov edx, dword [ebx + 0x2c]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x4ec]
push eax
mov ecx, 0x471c50
mov edx, 0x472480
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x4ec]
lea eax, [ebx + 0x38]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x4f0]
push eax
mov ecx, 0x471c50
mov edx, 0x4722cc
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x4f0]
lea eax, [ebx + 0x3c]
call fcn.00404638
lea eax, [ebp - 0x4f4]
push eax
mov eax, dword [ebx + 0x3c]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x4f4]
lea eax, [ebx + 0x3c]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x4fc]
push eax
mov ecx, 0x471c50
mov edx, 0x472494
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x4fc]
lea edx, [ebp - 0x4f8]
call fcn.0045a088
mov edx, dword [ebp - 0x4f8]
lea eax, [ebx + 0x44]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x500]
push eax
mov ecx, 0x471c50
mov edx, 0x4724a8
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x500]
lea eax, [ebx + 0x48]
call fcn.00404638
lea eax, [ebp - 0x504]
push eax
mov eax, dword [ebx + 0x48]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x504]
lea eax, [ebx + 0x48]
call fcn.00404638
jmp 0x47007c
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov eax, 0x4724bc
call fcn.00404bf8
test eax, eax
jle 0x47004c
push 1
push 1
lea eax, [ebp - 8]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x471bd0
mov edx, 0x471be8
call fcn.0045975c
lea eax, [ebp - 0x508]
push eax
lea eax, [ebp - 0x50c]
push eax
xor ecx, ecx
mov edx, 0x471c10
mov eax, dword [ebp - 8]
call fcn.00459368
mov eax, dword [ebp - 0x50c]
xor ecx, ecx
mov edx, 0x471c1c
call fcn.00459368
mov edx, dword [ebp - 0x508]
lea eax, [ebp - 8]
call fcn.0040467c
push 1
push 1
lea eax, [ebp - 0x510]
push eax
mov ecx, 0x471c50
mov edx, 0x471c5c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x510]
lea eax, [ebx + 4]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x514]
push eax
mov ecx, 0x4715f4
mov edx, 0x471c78
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x514]
lea eax, [ebx + 8]
call fcn.00404638
mov eax, dword [ebx + 8]
call fcn.004048b4
cmp eax, 0x3f
jle 0x46fb5f
lea eax, [ebp - 0x518]
push eax
mov eax, dword [ebx + 8]
mov ecx, 0x3c
mov edx, 1
call fcn.00459958
mov edx, dword [ebp - 0x518]
lea eax, [ebx + 8]
mov ecx, 0x471c9c
call fcn.00404900
push 1
mov edx, dword [0x477120]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471ca8
call fcn.004592e0
test eax, eax
jle 0x46fb86
lea eax, [ebx + 0xc]
call fcn.004045e4
jmp 0x46fbe4
push 1
push 1
lea eax, [ebp - 0x520]
push eax
push 1
push 1
lea eax, [ebp - 0x524]
push eax
mov edx, dword [ebx + 4]
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x471ccc
call fcn.0045975c
mov eax, dword [ebp - 0x524]
mov ecx, 0x471cdc
mov edx, 0x471ce8
call fcn.0045975c
mov eax, dword [ebp - 0x520]
lea edx, [ebp - 0x51c]
call fcn.0045a088
mov edx, dword [ebp - 0x51c]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x528]
push eax
mov eax, dword [ebx + 0xc]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov edx, dword [ebp - 0x528]
lea eax, [ebx + 0xc]
call fcn.00404638
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x530]
push eax
push 2
push 1
lea eax, [ebp - 0x534]
push eax
mov ecx, 0x471c50
mov edx, 0x4723f8
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x534]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov eax, dword [ebp - 0x530]
xor ecx, ecx
mov edx, 0x471cdc
call fcn.00459368
mov eax, dword [ebp - 0x52c]
lea edx, [ebp - 0x2c]
call fcn.0045a088
push 1
push 1
lea eax, [ebp - 0x538]
push eax
push 1
push 1
lea eax, [ebp - 0x53c]
push eax
mov ecx, 0x4722a4
mov edx, 0x4724e8
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x53c]
mov ecx, 0x471d40
mov edx, 0x47244c
call fcn.0045975c
mov edx, dword [ebp - 0x538]
lea eax, [ebx + 0x1c]
call fcn.00404638
lea eax, [ebp - 0x540]
push eax
mov eax, dword [ebx + 0x1c]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x540]
lea eax, [ebx + 0x1c]
call fcn.00404638
lea eax, [ebx + 0x24]
call fcn.004045e4
push 2
push 1
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x471c50
mov edx, 0x472500
mov eax, dword [ebp - 8]
call fcn.0045975c
push 2
push 1
lea eax, [ebp - 0x544]
push eax
mov ecx, 0x471c50
mov edx, 0x472480
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x544]
lea eax, [ebx + 0x14]
call fcn.00404638
lea eax, [ebp - 0x54c]
push eax
mov eax, dword [ebx + 0x14]
xor ecx, ecx
mov edx, 0x472278
call fcn.00459368
mov eax, dword [ebp - 0x54c]
lea edx, [ebp - 0x548]
call fcn.0045a088
mov edx, dword [ebp - 0x548]
lea eax, [ebx + 0x14]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x550]
push eax
push 1
push 1
lea eax, [ebp - 0x554]
push eax
mov ecx, 0x4722a4
mov edx, 0x47219c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x554]
mov ecx, 0x471d40
mov edx, 0x472188
call fcn.0045975c
mov edx, dword [ebp - 0x550]
lea eax, [ebx + 0x18]
call fcn.00404638
cmp dword [ebx + 0x18], 0
jne 0x46fdf2
push 1
push 1
lea eax, [ebp - 0x558]
push eax
push 1
push 1
lea eax, [ebp - 0x55c]
push eax
mov ecx, 0x4722a4
mov edx, 0x472170
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x55c]
mov ecx, 0x471d40
mov edx, 0x472188
call fcn.0045975c
mov edx, dword [ebp - 0x558]
lea eax, [ebx + 0x18]
call fcn.00404638
lea eax, [ebp - 0x560]
push eax
mov eax, dword [ebx + 0x18]
xor ecx, ecx
mov edx, 0x471cf8
call fcn.00459368
mov edx, dword [ebp - 0x560]
lea eax, [ebx + 0x18]
call fcn.00404638
lea eax, [ebp - 0x564]
push eax
push 2
push 1
lea eax, [ebp - 0x568]
push eax
mov ecx, 0x471c50
mov edx, 0x472460
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x568]
xor ecx, ecx
mov edx, 0x471c04
call fcn.00459368
mov eax, dword [ebp - 0x564]
lea edx, [ebp - 0xc]
call fcn.00457550
lea eax, [ebp - 0x56c]
push eax
push 1
push 1
lea eax, [ebp - 0x570]
push eax
mov ecx, 0x472474
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov eax, dword [ebp - 0x570]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x56c]
lea eax, [ebx + 0x28]
call fcn.00404638
lea eax, [ebp - 0x578]
push eax
mov eax, dword [ebx + 0x28]
mov ecx, 8
mov edx, 1
call fcn.00404b14
mov eax, dword [ebp - 0x578]
lea edx, [ebp - 0x574]
call fcn.0045a088
mov edx, dword [ebp - 0x574]
lea eax, [ebx + 0x28]
call fcn.00404638
lea eax, [ebp - 0x57c]
push eax
push 1
push 1
lea eax, [ebp - 0x580]
push eax
xor ecx, ecx
mov edx, 0x472474
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov eax, dword [ebp - 0x580]
xor ecx, ecx
mov edx, 0x471d64
call fcn.00459368
mov edx, dword [ebp - 0x57c]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea ecx, [ebp - 0x588]
mov eax, dword [ebx + 0x2c]
mov edx, 8
call fcn.0046a4f8
mov eax, dword [ebp - 0x588]
lea edx, [ebp - 0x584]
call fcn.0045a088
mov edx, dword [ebp - 0x584]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebx + 0x30]
mov edx, dword [ebx + 0x28]
call fcn.00404638
lea eax, [ebx + 0x34]
mov edx, dword [ebx + 0x2c]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x58c]
push eax
mov ecx, 0x471c50
mov edx, 0x472494
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x58c]
lea eax, [ebx + 0x38]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x590]
push eax
mov ecx, 0x471c50
mov edx, 0x4724a8
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x590]
lea eax, [ebx + 0x3c]
call fcn.00404638
lea eax, [ebp - 0x594]
push eax
mov eax, dword [ebx + 0x3c]
xor ecx, ecx
mov edx, 0x471db4
call fcn.00459368
mov edx, dword [ebp - 0x594]
lea eax, [ebx + 0x3c]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x598]
push eax
mov ecx, 0x471c50
mov edx, 0x4723ac
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x598]
lea eax, [ebx + 0x44]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x5a0]
push eax
mov eax, dword [ebx + 0x44]
xor ecx, ecx
mov edx, 0x4723c0
call fcn.0045975c
mov eax, dword [ebp - 0x5a0]
lea edx, [ebp - 0x59c]
call fcn.0045a088
mov edx, dword [ebp - 0x59c]
lea eax, [ebx + 0x44]
call fcn.00404638
lea eax, [ebx + 0x48]
call fcn.004045e4
lea eax, [ebx + 0x48]
call fcn.004045e4
jmp 0x47007c
mov byte [ebp - 0x70], 0
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x47730c]
mov eax, dword [eax]
add eax, 3
jno 0x470068
call fcn.004037ec
xor ecx, ecx
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
lea eax, [ebx + 0x20]
mov edx, dword [ebp - 0x30]
call fcn.00404638
lea eax, [ebx + 0x10]
mov edx, dword [ebp - 0x2c]
call fcn.00404638
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov eax, 0x4723d0
call fcn.00404bf8
test eax, eax
jle 0x4700c4
mov eax, dword [ebx + 0x20]
mov edx, 0x472514
call fcn.00404a00
jne 0x470103
lea eax, [ebx + 0x18]
mov edx, dword [ebx + 0x10]
call fcn.00404638
jmp 0x470103
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov eax, 0x471bac
call fcn.00404bf8
test eax, eax
jle 0x470103
mov eax, dword [ebx + 0x24]
mov edx, 0x472524
call fcn.00404a00
je 0x4700f8
mov eax, dword [ebx + 0x24]
mov edx, 0x472534
call fcn.00404a00
jne 0x470103
lea eax, [ebx + 0x18]
mov edx, dword [ebx + 0x10]
call fcn.00404638
cmp dword [ebx + 4], 0
setne al
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x4770cc]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
cmp dword [ebx + 0xc], 0
je 0x470155
mov eax, dword [ebx + 0xc]
call fcn.0045989c
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477464]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
cmp dword [ebx + 0x14], 0
je 0x47017b
mov eax, dword [ebx + 0x14]
call fcn.0045989c
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477464]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
mov eax, dword [ebp - 0x2c]
call fcn.0045989c
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477464]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
call fcn.00472c0c
test al, al
je 0x4701b3
mov eax, dword [0x477588]
mov eax, dword [eax]
mov dword [ebp - 4], eax
jmp 0x470e40
xor eax, eax
push ebp
push 0x4701d7
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x1c], 0
setne al
call fcn.00472a04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x470215
mov eax, dword [0x477310]
mov eax, dword [eax + 0x38]
mov edx, 0x472554
call fcn.00404a00
jne 0x46d000
mov edx, 0x55
mov al, 4
call fcn.00472af8
lea eax, [ebp - 0x3c]
mov edx, dword [ebx + 4]
call fcn.0040467c
mov edi, 0x14
lea esi, [ebx + 4]
mov eax, esi
call fcn.004045e4
add esi, 4
dec edi
jne 0x47024c
lea eax, [ebx + 4]
mov edx, 0x472560
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0xc]
push eax
push 1
push 1
lea eax, [ebp - 0x5a4]
push eax
mov ecx, 0x472574
mov edx, 0x472584
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x5a4]
mov ecx, 0x471c50
mov edx, 0x47259c
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x5a8]
push eax
mov ecx, 0x471cf8
mov edx, 0x4725ac
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5a8]
lea eax, [ebx + 0x30]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x5ac]
push eax
mov ecx, 0x471cf8
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5ac]
lea eax, [ebx + 0x34]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x5b0]
push eax
xor ecx, ecx
mov edx, 0x4725ac
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5b0]
lea eax, [ebx + 0x38]
call fcn.00404638
mov eax, dword [ebp - 0x24]
mov edx, 0x471734
call fcn.00404a00
jne 0x470339
lea eax, [ebx + 0x3c]
mov edx, 0x4725b8
call fcn.00404638
jmp 0x470346
lea eax, [ebx + 0x3c]
mov edx, 0x4725c4
call fcn.00404638
mov edx, dword [ebp - 0x38]
mov eax, 0x471bac
call fcn.00404bf8
test eax, eax
jle 0x470363
xor eax, eax
call fcn.00472a04
jmp 0x46d000
mov edx, dword [ebp - 0x38]
mov eax, 0x471dd8
call fcn.00404bf8
test eax, eax
jle 0x4708b2
push 1
push 1
lea eax, [ebp - 0x5b4]
push eax
mov ecx, 0x471d40
mov edx, 0x4725d0
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x5b4]
lea eax, [ebx + 8]
call fcn.00404638
lea eax, [ebx + 0xc]
call fcn.004045e4
push 1
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x4725ec
call fcn.004592e0
test eax, eax
jle 0x470410
push 1
push 1
lea eax, [ebp - 0x5b8]
push eax
push 4
push 1
lea eax, [ebp - 0x5bc]
push eax
mov ecx, 0x471d40
mov edx, 0x472608
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x5bc]
mov ecx, 0x472620
mov edx, 0x47262c
call fcn.0045975c
mov edx, dword [ebp - 0x5b8]
lea eax, [ebx + 0x14]
call fcn.00404638
jmp 0x470418
lea eax, [ebx + 0x14]
call fcn.004045e4
lea eax, [ebp - 0x5c0]
push eax
mov eax, dword [ebx + 0x14]
xor ecx, ecx
mov edx, 0x472638
call fcn.00459368
mov edx, dword [ebp - 0x5c0]
lea eax, [ebx + 0x14]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x5c4]
push eax
push 1
push 1
lea eax, [ebp - 0x5c8]
push eax
mov ecx, 0x4715a0
mov edx, 0x472644
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x5c8]
mov ecx, 0x4715f4
mov edx, 0x471e34
call fcn.0045975c
mov ecx, dword [ebp - 0x5c4]
mov eax, dword [0x4771a4]
mov edx, 0x472664
call fcn.00404900
push 0
push 1
mov ecx, dword [0x4771a4]
mov ecx, dword [ecx]
mov edx, dword [0x477594]
mov edx, dword [edx]
lea eax, [ebp - 0x5cc]
call fcn.00404900
mov edx, dword [ebp - 0x5cc]
mov eax, dword [0x4774a4]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004664d8
test eax, eax
jne 0x4704e3
mov eax, dword [0x477128]
mov eax, dword [eax]
add eax, 3
jno 0x4704d6
call fcn.004037ec
mov edx, dword [0x477588]
mov dword [edx], eax
jmp 0x470e40
mov eax, dword [0x4775a4]
mov edx, dword [0x4774a4]
mov edx, dword [edx]
mov edx, dword [edx + 0x48]
call fcn.00404638
mov eax, 0x4726b0
call fcn.0046b0f8
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47154c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x70], al
mov byte [ebp - 0x6c], 1
lea edx, [ebp - 0x70]
mov eax, dword [0x477554]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00472b40
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x4712e4
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x60], al
mov byte [ebp - 0x5c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471310
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x58], al
mov byte [ebp - 0x54], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x47134c
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x50], al
mov byte [ebp - 0x4c], 1
push 1
mov edx, dword [0x4775a4]
mov edx, dword [edx]
mov ecx, 1
mov eax, 0x471368
call fcn.004592e0
test eax, eax
sete al
mov byte [ebp - 0x48], al
mov byte [ebp - 0x44], 1
lea edx, [ebp - 0x60]
mov eax, dword [0x477448]
mov eax, dword [eax]
mov ecx, 3
call fcn.00472b40
call fcn.00472c0c
test al, al
jne 0x470e40
push 1
push 1
lea eax, [ebp - 0x5d0]
push eax
push 1
push 1
lea eax, [ebp - 0x5d4]
push eax
mov eax, dword [0x4775a4]
mov eax, dword [eax]
mov ecx, 0x471cdc
mov edx, 0x4726c0
call fcn.0045975c
mov eax, dword [ebp - 0x5d4]
mov ecx, 0x471d40
mov edx, 0x471d04
call fcn.0045975c
mov edx, dword [ebp - 0x5d0]
lea eax, [ebx + 0x10]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4713fc
mov edx, 0x4726d8
mov eax, dword [ebp - 8]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x5d8]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5d8]
lea eax, [ebx + 0x18]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x5dc]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5dc]
lea eax, [ebx + 0x1c]
call fcn.00404638
push 3
push 1
lea eax, [ebp - 0x5e0]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5e0]
lea eax, [ebx + 0x20]
call fcn.00404638
push 4
push 1
lea eax, [ebp - 0x5e4]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5e4]
lea eax, [ebx + 0x24]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0xc]
push eax
push 1
push 1
lea eax, [ebp - 0x5e8]
push eax
mov ecx, 0x472574
mov edx, 0x472584
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x471c50
mov edx, 0x47259c
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x5ec]
push eax
mov ecx, 0x471cf8
mov edx, 0x4725ac
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5ec]
lea eax, [ebx + 0x30]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x5f0]
push eax
mov ecx, 0x471cf8
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5f0]
lea eax, [ebx + 0x34]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x5f4]
push eax
xor ecx, ecx
mov edx, 0x4725ac
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5f4]
lea eax, [ebx + 0x38]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x4715c8
mov edx, dword [ebp - 0x3c]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x5f8]
push eax
mov ecx, 0x4715f4
mov edx, 0x472704
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5f8]
lea eax, [ebx + 0x28]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x5fc]
push eax
mov ecx, 0x471c50
mov edx, 0x472724
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x5fc]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebp - 0x600]
push eax
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
mov edx, 0x472638
call fcn.00459368
mov edx, dword [ebp - 0x600]
lea eax, [ebx + 0x2c]
call fcn.00404638
xor eax, eax
push ebp
push 0x47086f
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
call fcn.00472a04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46d000
mov edx, dword [ebp - 0x38]
mov eax, 0x4723d0
call fcn.00404bf8
test eax, eax
jle 0x470b15
lea eax, [ebx + 8]
call fcn.004045e4
lea eax, [ebx + 0xc]
call fcn.004045e4
lea eax, [ebx + 0x14]
call fcn.004045e4
lea eax, [ebx + 0x10]
call fcn.004045e4
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4713fc
mov edx, 0x4726d8
mov eax, dword [ebp - 8]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x604]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x604]
lea eax, [ebx + 0x18]
call fcn.00404638
mov eax, dword [ebx + 0x18]
mov edx, 0x471db4
call fcn.00404a00
jne 0x470943
lea eax, [ebx + 0x18]
call fcn.004045e4
push 2
push 1
lea eax, [ebp - 0x60c]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov eax, dword [ebp - 0x60c]
lea edx, [ebp - 0x608]
call fcn.0045a088
mov edx, dword [ebp - 0x608]
lea eax, [ebx + 0x1c]
call fcn.00404638
mov eax, dword [ebx + 0x1c]
mov edx, 0x471db4
call fcn.00404a00
jne 0x470996
lea eax, [ebx + 0x1c]
call fcn.004045e4
push 3
push 1
lea eax, [ebp - 0x610]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x610]
lea eax, [ebx + 0x20]
call fcn.00404638
mov eax, dword [ebx + 0x20]
mov edx, 0x471db4
call fcn.00404a00
jne 0x4709d8
lea eax, [ebx + 0x20]
call fcn.004045e4
push 4
push 1
lea eax, [ebp - 0x614]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x614]
lea eax, [ebx + 0x24]
call fcn.00404638
mov eax, dword [ebx + 0x24]
mov edx, 0x471db4
call fcn.00404a00
jne 0x470a1a
lea eax, [ebx + 0x24]
call fcn.004045e4
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x4715c8
mov edx, dword [ebp - 0x3c]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x618]
push eax
mov ecx, 0x4715f4
mov edx, 0x472704
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x618]
lea eax, [ebx + 0x28]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x61c]
push eax
mov ecx, 0x471c50
mov edx, 0x472724
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x61c]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebp - 0x620]
push eax
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
mov edx, 0x472638
call fcn.00459368
mov edx, dword [ebp - 0x620]
lea eax, [ebx + 0x2c]
call fcn.00404638
xor eax, eax
push ebp
push 0x470ad2
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
call fcn.00472a04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46d000
mov edx, dword [ebp - 0x38]
mov eax, 0x4724bc
call fcn.00404bf8
test eax, eax
jle 0x46d000
push 2
push 1
lea eax, [ebp - 0x624]
push eax
mov ecx, 0x471d40
mov edx, 0x47273c
mov eax, dword [ebp - 8]
call fcn.0045975c
mov edx, dword [ebp - 0x624]
lea eax, [ebx + 8]
call fcn.00404638
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x630]
push eax
mov eax, dword [ebx + 8]
xor ecx, ecx
mov edx, 0x471c1c
call fcn.00459368
mov eax, dword [ebp - 0x630]
xor ecx, ecx
mov edx, 0x471c10
call fcn.00459368
mov eax, dword [ebp - 0x62c]
xor ecx, ecx
mov edx, 0x471c04
call fcn.00459368
mov edx, dword [ebp - 0x628]
lea eax, [ebx + 8]
call fcn.00404638
lea eax, [ebx + 0xc]
call fcn.004045e4
lea eax, [ebx + 0x14]
call fcn.004045e4
lea eax, [ebx + 0x10]
call fcn.004045e4
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4713fc
mov edx, 0x4726d8
mov eax, dword [ebp - 8]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x634]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x634]
lea eax, [ebx + 0x18]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x638]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x638]
lea eax, [ebx + 0x1c]
call fcn.00404638
push 3
push 1
lea eax, [ebp - 0x63c]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x63c]
lea eax, [ebx + 0x20]
call fcn.00404638
push 4
push 1
lea eax, [ebp - 0x640]
push eax
mov ecx, 0x471d40
mov edx, 0x4726f0
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x640]
lea eax, [ebx + 0x24]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0xc]
push eax
push 1
push 1
lea eax, [ebp - 0x644]
push eax
mov ecx, 0x472574
mov edx, 0x472584
mov eax, dword [ebp - 8]
call fcn.0045975c
mov eax, dword [ebp - 0x644]
mov ecx, 0x471c50
mov edx, 0x47259c
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x648]
push eax
mov ecx, 0x471cf8
mov edx, 0x4725ac
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x648]
lea eax, [ebx + 0x30]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0x64c]
push eax
mov ecx, 0x471cf8
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x64c]
lea eax, [ebx + 0x34]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x650]
push eax
xor ecx, ecx
mov edx, 0x4725ac
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x650]
lea eax, [ebx + 0x38]
call fcn.00404638
push 1
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, dword [0x477120]
mov eax, dword [eax]
mov ecx, 0x4715c8
mov edx, dword [ebp - 0x3c]
call fcn.0045975c
push 1
push 1
lea eax, [ebp - 0x654]
push eax
mov ecx, 0x4715f4
mov edx, 0x472704
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x654]
lea eax, [ebx + 0x28]
call fcn.00404638
push 2
push 1
lea eax, [ebp - 0x658]
push eax
mov ecx, 0x471c50
mov edx, 0x472724
mov eax, dword [ebp - 0xc]
call fcn.0045975c
mov edx, dword [ebp - 0x658]
lea eax, [ebx + 0x2c]
call fcn.00404638
lea eax, [ebp - 0x65c]
push eax
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
mov edx, 0x472638
call fcn.00459368
mov edx, dword [ebp - 0x65c]
lea eax, [ebx + 0x2c]
call fcn.00404638
xor eax, eax
push ebp
push 0x470df6
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
call fcn.00472a04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46d000
mov eax, dword [0x477374]
mov eax, dword [eax]
mov dword [ebp - 4], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47128a
lea eax, [ebp - 0x65c]
mov edx, 0x63
call fcn.00404608
lea eax, [ebp - 0x4cc]
call fcn.004045e4
lea eax, [ebp - 0x4d0]
call fcn.004045e4
lea eax, [ebp - 0x4c8]
mov edx, 0x62
call fcn.00404608
lea eax, [ebp - 0x33c]
call fcn.004045e4
lea eax, [ebp - 0x340]
call fcn.004045e4
lea eax, [ebp - 0x338]
mov edx, 9
call fcn.00404608
lea eax, [ebp - 0x314]
mov edx, 3
call fcn.00404cec
lea eax, [ebp - 0x308]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x300]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x2f8]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x2f0]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x2e8]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x2d8]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x2d0]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x2c8]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x2c0]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x2b8]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x2b0]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x2a0]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x298]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x290]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x288]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x280]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x278]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x270]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x268]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x260]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x250]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x248]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x230]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x220]
mov edx, 3
call fcn.00404cec
lea eax, [ebp - 0x214]
mov edx, 0x1a
call fcn.00404608
lea eax, [ebp - 0x1ac]
mov edx, 0xa
call fcn.00404608
lea eax, [ebp - 0x16c]
mov edx, 5
call fcn.00404608
lea eax, [ebp - 0x158]
mov edx, 3
call fcn.00404cec
lea eax, [ebp - 0x14c]
call fcn.004045e4
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x140]
call fcn.004045e4
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x134]
call fcn.004045e4
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x128]
call fcn.004045e4
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x11c]
call fcn.004045e4
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x110]
call fcn.004045e4
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0x104]
call fcn.004045e4
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0xf8]
call fcn.004045e4
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0xec]
call fcn.004045e4
lea eax, [ebp - 0xe8]
mov edx, 4
call fcn.00404cec
lea eax, [ebp - 0xd8]
call fcn.004045e4
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0xcc]
call fcn.004045e4
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.00404cec
lea eax, [ebp - 0xc0]
call fcn.004045e4
lea eax, [ebp - 0xbc]
mov edx, 4
call fcn.00404cec
lea eax, [ebp - 0xac]
call fcn.004045e4
lea eax, [ebp - 0xa8]
mov edx, 3
call fcn.00404cec
lea eax, [ebp - 0x9c]
mov edx, 5
call fcn.00404608
lea eax, [ebp - 0x88]
mov edx, 6
call fcn.00404cec
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.00404608
lea eax, [ebp - 0x40]
mov edx, 6
call fcn.00404608
lea eax, [ebp - 0x24]
mov edx, 8
call fcn.00404608
ret