Function at 0x4ad294
Capabilities:
Extract http body

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x41
push 0
push 0
dec ecx
jne 0x4ad29c
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405bc4
xor eax, eax
push ebp
push 0x4af0dc
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4aec2b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
xor eax, eax
push ebp
push 0x4ad4f1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x48]
call fcn.00405b50
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x2c]
mov ecx, 0x4af0f0
call fcn.00405b94
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x30]
call fcn.00405b50
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
call fcn.00405c60
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x4c]
call fcn.00404718
push eax
lea eax, [ebp - 0x54]
call fcn.00405b50
push eax
lea eax, [ebp - 0x64]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
lea eax, [ebp - 0x74]
mov edx, 0x4af108
call fcn.00413f54
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0x50]
mov ecx, 0x4af11c
call fcn.00405b94
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
call fcn.00405c60
mov edx, dword [ebp - 0x4c]
mov eax, 0x4af130
call fcn.004049cc
test eax, eax
jle 0x4ad4bd
push 0
lea eax, [ebp - 0x7c]
call fcn.00405b50
push eax
lea eax, [ebp - 0x8c]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x80]
push dword [ebp - 0x84]
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
lea eax, [ebp - 0x9c]
mov edx, 0x4af108
call fcn.00413f54
push dword [ebp - 0x90]
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x78]
mov ecx, 0x4af11c
call fcn.00405b94
mov eax, dword [ebp - 0x78]
push eax
mov eax, dword [eax]
call dword [eax + 0xf4]
call fcn.00405c60
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ad4fb
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
xor eax, eax
push ebp
push 0x4ad668
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x24]
call fcn.00405b50
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0xc]
call fcn.00405b50
push eax
lea eax, [ebp - 0xa4]
call fcn.00405b50
push eax
lea eax, [ebp - 0xa8]
mov edx, dword [ebp - 0x24]
mov ecx, 0x4af0f0
call fcn.00405b94
mov eax, dword [ebp - 0xa8]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 0xa0]
mov ecx, 0x4af144
call fcn.00405b94
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [eax]
call dword [eax + 0xa4]
call fcn.00405c60
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0xac]
call fcn.00404718
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
call fcn.00405c60
mov edx, dword [ebp - 0xac]
lea eax, [ebp - 0x10]
call fcn.004042c0
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ad73b
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
cmp dword [ebp - 8], 1
jne 0x4adfda
mov edx, dword [ebp - 0x10]
mov eax, 0x4af15c
call fcn.0040463c
test eax, eax
jne 0x4ad7d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aeec6
mov edx, dword [ebp - 0x10]
mov eax, 0x4af170
call fcn.0040463c
test eax, eax
jne 0x4ad95a
lea edx, [ebp - 0xb0]
mov eax, 0x4af18c
call fcn.004a828c
mov edx, dword [ebp - 0xb0]
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 0x10]
call fcn.004ac3d8
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404300
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
call fcn.0040463c
mov ebx, eax
lea edx, [ebp - 0xb4]
mov eax, 0x4af1a8
call fcn.004a828c
mov eax, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x10]
call fcn.0040463c
sub ebx, eax
push ebx
lea edx, [ebp - 0xb8]
mov eax, 0x4af1a8
call fcn.004a828c
mov eax, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x10]
call fcn.0040463c
mov edx, eax
lea eax, [ebp - 0x10]
pop ecx
call fcn.00404598
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
push 0x4af1fc
lea edx, [ebp - 0xbc]
mov eax, 0x4af33c
call fcn.004a828c
push dword [ebp - 0xbc]
push 0x4af368
lea eax, [ebp - 0x28]
mov edx, 3
call fcn.004043b8
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
call fcn.0040463c
mov ecx, eax
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x28]
call fcn.004045e0
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
mov edx, dword [ebp - 0x10]
mov eax, 0x4af374
call fcn.0040463c
test eax, eax
jne 0x4adfb9
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov edx, dword [ebp - 0x10]
mov eax, 0x4af3b8
call fcn.0040463c
test eax, eax
jne 0x4adb64
mov al, byte [0x4af3f4]
push eax
lea eax, [ebp - 0xc0]
push eax
lea edx, [ebp - 0xc4]
mov eax, 0x4af400
call fcn.004a828c
mov eax, dword [ebp - 0xc4]
push eax
lea edx, [ebp - 0xc8]
mov eax, 0x4af480
call fcn.004a828c
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0xc0]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
mov al, byte [0x4af3f4]
push eax
lea eax, [ebp - 0xcc]
push eax
lea edx, [ebp - 0xd0]
mov eax, 0x4af4d4
call fcn.004a828c
mov eax, dword [ebp - 0xd0]
push eax
lea edx, [ebp - 0xd4]
mov eax, 0x4af550
call fcn.004a828c
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov al, byte [0x4af3f4]
push eax
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebp - 0xdc]
mov eax, 0x4af5a0
call fcn.004a828c
mov eax, dword [ebp - 0xdc]
push eax
lea edx, [ebp - 0xe0]
mov eax, 0x4af624
call fcn.004a828c
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404300
mov edx, dword [ebp - 0x10]
mov eax, 0x4af67c
call fcn.0040463c
test eax, eax
jne 0x4adbfb
mov al, byte [0x4af3f4]
push eax
lea eax, [ebp - 0xe4]
push eax
lea edx, [ebp - 0xe8]
mov eax, 0x4af6b4
call fcn.004a828c
mov eax, dword [ebp - 0xe8]
push eax
lea edx, [ebp - 0xec]
mov eax, 0x4af718
call fcn.004a828c
mov edx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0xe4]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0xf0]
push eax
lea edx, [ebp - 0xf4]
mov eax, 0x4af754
call fcn.004a828c
mov eax, dword [ebp - 0xf4]
push eax
lea edx, [ebp - 0xf8]
mov eax, 0x4af7f8
call fcn.004a828c
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0xf0]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0xfc]
push eax
lea edx, [ebp - 0x100]
mov eax, 0x4af870
call fcn.004a828c
mov eax, dword [ebp - 0x100]
push eax
lea edx, [ebp - 0x104]
mov eax, 0x4af908
call fcn.004a828c
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0xfc]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0x108]
push eax
lea edx, [ebp - 0x10c]
mov eax, 0x4af994
call fcn.004a828c
mov eax, dword [ebp - 0x10c]
push eax
lea edx, [ebp - 0x110]
mov eax, 0x4af9ec
call fcn.004a828c
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0x108]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404300
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0x114]
push eax
lea edx, [ebp - 0x118]
mov eax, 0x4afa20
call fcn.004a828c
mov eax, dword [ebp - 0x118]
push eax
lea edx, [ebp - 0x11c]
mov eax, 0x4afa84
call fcn.004a828c
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0x120]
push eax
lea edx, [ebp - 0x124]
mov eax, 0x4afabc
call fcn.004a828c
mov eax, dword [ebp - 0x124]
push eax
lea edx, [ebp - 0x128]
mov eax, 0x4afb2c
call fcn.004a828c
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0x120]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0x12c]
push eax
lea edx, [ebp - 0x130]
mov eax, 0x4afb70
call fcn.004a828c
mov eax, dword [ebp - 0x130]
push eax
lea edx, [ebp - 0x134]
mov eax, 0x4afbcc
call fcn.004a828c
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0x138]
push eax
lea edx, [ebp - 0x13c]
mov eax, 0x4afbfc
call fcn.004a828c
mov eax, dword [ebp - 0x13c]
push eax
lea edx, [ebp - 0x140]
mov eax, 0x4afc68
call fcn.004a828c
mov edx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
jmp 0x4aebc7
cmp dword [ebp - 8], 2
jne 0x4aebc7
xor eax, eax
push ebp
push 0x4ae093
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x144]
call fcn.00404718
push eax
lea eax, [ebp - 0x148]
call fcn.00405b50
push eax
lea eax, [ebp - 0x150]
call fcn.00405b50
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c60
mov edx, dword [ebp - 0x150]
lea eax, [ebp - 0x14c]
mov ecx, 0x4af0f0
call fcn.00405b94
mov eax, dword [ebp - 0x14c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c60
mov eax, dword [ebp - 0x148]
push eax
mov eax, dword [eax]
call dword [eax + 0xf8]
call fcn.00405c60
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x18]
call fcn.004042c0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ae09d
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
mov edx, dword [ebp - 0x18]
mov eax, 0x4afca8
call fcn.0040463c
test eax, eax
jne 0x4ae1c6
xor eax, eax
push ebp
push 0x4ae18a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x154]
mov eax, 0x4afcc4
call fcn.004a828c
mov ecx, dword [ebp - 0x154]
mov edx, 0x4afce8
mov eax, dword [ebp - 4]
call fcn.004acf18
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
push 0x4afcf0
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [eax]
call dword [eax + 0xf4]
call fcn.00405c60
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ae194
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
mov edx, dword [ebp - 0x18]
mov eax, 0x4afe38
call fcn.0040463c
test eax, eax
jle 0x4ae402
xor eax, eax
push ebp
push 0x4ae2c5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 0x158]
push eax
lea edx, [ebp - 0x15c]
mov eax, 0x4afe4c
call fcn.004a828c
mov eax, dword [ebp - 0x15c]
push eax
lea edx, [ebp - 0x160]
mov eax, 0x4afe6c
call fcn.004a828c
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004ac8c8
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea edx, [ebp - 0x168]
mov eax, 0x4afe7c
call fcn.004a828c
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x164]
call fcn.00404870
mov eax, dword [ebp - 0x164]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [eax]
call dword [eax + 0xe4]
call fcn.00405c60
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ae2cf
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404300
xor eax, eax
push ebp
push 0x4ae3d1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 0x16c]
push eax
lea edx, [ebp - 0x170]
mov eax, 0x4aff38
call fcn.004a828c
mov eax, dword [ebp - 0x170]
push eax
lea edx, [ebp - 0x174]
mov eax, 0x4aff68
call fcn.004a828c
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004ac8c8
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
push 0
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [eax]
call dword [eax + 0xf4]
call fcn.00405c60
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ae3db
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
mov edx, dword [ebp - 0x18]
mov eax, 0x4aff80
call fcn.0040463c
test eax, eax
jle 0x4aebae
xor eax, eax
push ebp
push 0x4aeb6f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 0x178]
push eax
lea edx, [ebp - 0x17c]
mov eax, 0x4aff90
call fcn.004a828c
mov eax, dword [ebp - 0x17c]
push eax
lea edx, [ebp - 0x180]
mov eax, 0x4affa4
call fcn.004a828c
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004ac8c8
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x188]
call fcn.00404718
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [eax]
call dword [eax + 0xf0]
call fcn.00405c60
mov eax, dword [ebp - 0x188]
lea edx, [ebp - 0x184]
call fcn.004085b4
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x1c]
call fcn.004042c0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
cmp dword [ebp - 0x1c], 0
je 0x4ae52f
mov eax, 0x4cab2c
mov edx, dword [ebp - 0x1c]
call fcn.0040408c
mov eax, dword [0x4cd560]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0x4ae5ea
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x18c]
mov edx, ebx
mov eax, dword [0x4cd560]
call fcn.0041b7f0
mov eax, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x1c]
call fcn.0040463c
test eax, eax
jle 0x4ae5c9
lea eax, [ebx + 1]
mov dword [0x4cab30], eax
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
jmp 0x4ae5ea
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
inc ebx
dec esi
jne 0x4ae547
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
xor eax, eax
push ebp
push 0x4ae70e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x190]
call fcn.00404718
push eax
lea eax, [ebp - 0x198]
call fcn.00405b50
push eax
lea eax, [ebp - 0x1a8]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
lea edx, [ebp - 0x1bc]
mov eax, 0x4affb8
call fcn.004a828c
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
call fcn.00413f54
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x198]
lea eax, [ebp - 0x194]
mov ecx, 0x4af11c
call fcn.00405b94
mov eax, dword [ebp - 0x194]
push eax
mov eax, dword [eax]
call dword [eax + 0xf0]
call fcn.00405c60
mov edx, dword [ebp - 0x190]
lea eax, [ebp - 0x20]
call fcn.004042c0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ae747
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
cmp dword [ebp - 0x20], 0
jne 0x4ae878
lea eax, [ebp - 0x1c0]
call fcn.00404718
push eax
lea eax, [ebp - 0x1c8]
call fcn.00405b50
push eax
lea eax, [ebp - 0x1d8]
xor edx, edx
mov cl, 1
call fcn.00413ca0
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
lea edx, [ebp - 0x1ec]
mov eax, 0x4affdc
call fcn.004a828c
mov edx, dword [ebp - 0x1ec]
lea eax, [ebp - 0x1e8]
call fcn.00413f54
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
call fcn.00405c60
mov edx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov ecx, 0x4afffc
call fcn.00405b94
mov eax, dword [ebp - 0x1c4]
push eax
mov eax, dword [eax]
call dword [eax + 0x28]
call fcn.00405c60
mov edx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x20]
call fcn.004042c0
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
cmp dword [ebp - 0x1c], 0
je 0x4ae878
mov eax, 0x4cab2c
mov ecx, 0x4b0014
mov edx, dword [ebp - 0x1c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
mov eax, dword [ebp - 0x20]
call fcn.00409ef0
fstp qword [0x4cab20]
wait
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
mov eax, dword [ebp - 0x20]
call fcn.00409ef0
call fcn.00402a54
push edx
push eax
lea eax, [ebp - 0x1f0]
call fcn.00408a70
mov edx, dword [ebp - 0x1f0]
mov eax, 0x4cab28
call fcn.0040408c
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
mov eax, dword [0x4cab28]
mov edx, 0x4b0024
call fcn.00404444
jne 0x4ae968
mov eax, 0x4cab28
mov edx, 0x4b0030
call fcn.0040408c
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x3b0]
mov edx, dword [0x4cab28]
call fcn.0043e6c8
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404300
mov eax, dword [0x4cd120]
mov eax, dword [eax + 0x38c]
mov edx, dword [0x4cab28]
call fcn.0043e6c8
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
mov edx, dword [0x4cab2c]
mov eax, 0x4aff80
call fcn.0040463c
test eax, eax
jle 0x4aeb49
cmp dword [0x4cab30], 0
jne 0x4aeb49
mov edx, dword [0x4cab2c]
mov eax, 0x4b003c
call fcn.0040463c
test eax, eax
jle 0x4aea8e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aeec6
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea edx, [ebp - 0x1f4]
mov eax, 0x4b0050
call fcn.004a828c
mov eax, dword [ebp - 0x1f4]
call fcn.004a8530
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
mov eax, 0x3a98
call fcn.004a79e4
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404300
call fcn.00403ec4
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aeb79
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404300
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00404444
je 0x4aec21
lea eax, [ebp - 0x1f8]
mov edx, dword [ebp - 0x10]
call fcn.00404870
mov eax, dword [ebp - 0x1f8]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [eax]
call dword [eax + 0x54]
call fcn.00405c60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aec35
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
cmp dword [ebp - 8], 3
jne 0x4aee91
xor eax, eax
push ebp
push 0x4aee5d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
call fcn.00404300
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
call fcn.00404344
mov edx, dword [ebp - 0x10]
mov eax, 0x4af15c
call fcn.0040463c
test eax, eax
jne 0x4aed61
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aeec6
mov edx, dword [ebp - 0x10]
mov eax, 0x4b0064
call fcn.0040463c
test eax, eax
jne 0x4aee2c
mov al, byte [0x4af748]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea edx, [ebp - 0x200]
mov eax, 0x4b0084
call fcn.004a828c
mov eax, dword [ebp - 0x200]
push eax
lea edx, [ebp - 0x204]
mov eax, 0x4b00f4
call fcn.004a828c
mov edx, dword [ebp - 0x204]
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.0040d5f8
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x10]
call fcn.004040d0
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x38]
call fcn.00404300
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00404444
je 0x4aee2c
lea eax, [ebp - 0x208]
mov edx, dword [ebp - 0x10]
call fcn.00404870
mov eax, dword [ebp - 0x208]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [eax]
call dword [eax + 0x54]
call fcn.00405c60
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.00404344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4aee67
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
call fcn.00404344
lea eax, [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
call fcn.00404344
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
call fcn.00404300
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4af0e6
lea eax, [ebp - 0x208]
call fcn.00404718
lea eax, [ebp - 0x204]
mov edx, 3
call fcn.0040405c
lea eax, [ebp - 0x1f8]
call fcn.00404718
lea eax, [ebp - 0x1f4]
mov edx, 3
call fcn.0040405c
lea eax, [ebp - 0x1e8]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x1c8]
call fcn.00405b50
lea eax, [ebp - 0x1c4]
call fcn.00405b50
lea eax, [ebp - 0x1c0]
call fcn.00404718
lea eax, [ebp - 0x1bc]
call fcn.00404038
lea eax, [ebp - 0x1b8]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x198]
call fcn.00405b50
lea eax, [ebp - 0x194]
call fcn.00405b50
lea eax, [ebp - 0x190]
call fcn.00404718
lea eax, [ebp - 0x18c]
call fcn.00404038
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.00404730
lea eax, [ebp - 0x180]
mov edx, 7
call fcn.0040405c
lea eax, [ebp - 0x164]
call fcn.00404718
lea eax, [ebp - 0x160]
mov edx, 4
call fcn.0040405c
lea eax, [ebp - 0x150]
call fcn.00405b50
lea eax, [ebp - 0x14c]
call fcn.00405b50
lea eax, [ebp - 0x148]
call fcn.00405b50
lea eax, [ebp - 0x144]
call fcn.00404718
lea eax, [ebp - 0x140]
mov edx, 0x25
call fcn.0040405c
lea eax, [ebp - 0xac]
call fcn.00404718
lea eax, [ebp - 0xa8]
call fcn.00405b50
lea eax, [ebp - 0xa4]
call fcn.00405b50
lea eax, [ebp - 0xa0]
call fcn.00405b50
lea eax, [ebp - 0x9c]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x7c]
call fcn.00405b50
lea eax, [ebp - 0x78]
call fcn.00405b50
lea eax, [ebp - 0x74]
mov edx, dword [0x40111c]
mov ecx, 2
call fcn.00404b9c
lea eax, [ebp - 0x54]
call fcn.00405b50
lea eax, [ebp - 0x50]
call fcn.00405b50
lea eax, [ebp - 0x4c]
call fcn.00404718
lea eax, [ebp - 0x48]
call fcn.00405b50
lea eax, [ebp - 0x30]
call fcn.00405b50
lea eax, [ebp - 0x2c]
call fcn.00405b50
lea eax, [ebp - 0x28]
call fcn.00404038
lea eax, [ebp - 0x24]
call fcn.00405b50
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.0040405c
lea eax, [ebp - 0xc]
call fcn.00405b50
lea eax, [ebp - 4]
call fcn.00405b50
lea eax, [ebp - 0x44]
mov edx, 4
call fcn.0040405c
lea eax, [ebp - 0x34]
call fcn.00405b50
ret