Function at 0x4757d8
Capabilities:
Extract http body

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x12b
push 0
push 0
dec ecx
jne 0x4757e0
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x477d3b
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x477711
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xc]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0xc]
mov eax, 0x477d50
call fcn.004048f8
test eax, eax
je 0x475dbc
xor eax, eax
push ebp
push 0x475db2
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
push 0x47bf50
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x10]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x14]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov eax, dword [ebp - 0x10]
push eax
call fcn.004753bc
test al, al
je 0x475d9b
lea eax, [ebp - 0x18]
call fcn.00404650
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x78]
call fcn.00405c8c
mov edx, dword [ebp - 0x18]
mov eax, 0x477d98
call fcn.004048f8
test eax, eax
je 0x475d9b
lea eax, [ebp - 0x1c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov edx, dword [ebp - 0x1c]
mov eax, 0x47bf64
call fcn.00413c4c
push 0x477e1c
push 0x477e30
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x4c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5c]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x5c]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x2c]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x475a62
inc esi
xor ebx, ebx
push 0x477e4c
push ebx
push 0x477e5c
push 0x477e30
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0xa0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x70]
lea eax, [ebp - 0x60]
call fcn.00412b10
mov edx, dword [ebp - 0x60]
mov eax, 0x477e70
call fcn.00404574
test eax, eax
je 0x475a5a
push 0x47bf88
push 0x477e7c
lea eax, [ebx + 2]
push eax
push 0x477e5c
push 0x477e30
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0xd0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0xb0]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
inc ebx
dec esi
jne 0x475964
xor eax, eax
push ebp
push 0x475d91
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x47bf50
mov eax, dword [ebp - 4]
inc eax
push eax
lea eax, [ebp - 0xd4]
call fcn.00405b7c
push eax
lea eax, [ebp - 0xd8]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov eax, dword [ebp - 0xd4]
push eax
call fcn.004753bc
test al, al
jne 0x475ae6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47771b
mov eax, 0x47bf5c
call fcn.00405b7c
push eax
push 0x477e8c
lea eax, [ebp - 0xdc]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0xdc]
push eax
mov eax, dword [eax]
call dword [eax]
cmp dword [0x47bf5c], 0
je 0x475d87
lea eax, [ebp - 0xe0]
call fcn.00404650
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x78]
call fcn.00405c8c
mov edx, dword [ebp - 0xe0]
mov eax, 0x477ea0
call fcn.004048f8
test eax, eax
jne 0x475b67
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x475d9b
lea eax, [ebp - 0xe4]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov edx, dword [ebp - 0xe4]
mov eax, 0x47bf64
call fcn.00413c4c
lea eax, [ebp - 0xe8]
call fcn.00404650
push eax
lea eax, [ebp - 0xec]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c8c
mov eax, dword [ebp - 0xec]
push eax
mov eax, dword [eax]
call dword [eax + 0xf0]
call fcn.00405c8c
mov edx, dword [ebp - 0xe8]
mov eax, 0x477f1c
call fcn.004048f8
test eax, eax
je 0x475d87
push 0x477e1c
push 0x477e30
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x11c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x12c]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x12c]
pop eax
call fcn.004154ac
lea eax, [ebp - 0xfc]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x475d87
inc esi
xor ebx, ebx
push 0x477f28
push ebx
push 0x477e5c
push 0x477e30
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x170]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x150]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x130]
call fcn.00412b10
mov edx, dword [ebp - 0x130]
mov eax, 0x477f40
call fcn.00404574
test eax, eax
je 0x475d7f
push 0x47bf88
push 0x477e7c
push ebx
push 0x477e5c
push 0x477e30
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x1a0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x180]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
jmp 0x475d87
inc ebx
dec esi
jne 0x475c78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x475d9b
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jne 0x47584a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x475dbc
lea eax, [ebp - 0x1a4]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0x1a4]
mov eax, 0x477f58
call fcn.004048f8
test eax, eax
je 0x47618c
lea eax, [ebp - 0x1ac]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x1b0]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x1b0]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov edx, dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a8]
mov ecx, 0x477e8c
call fcn.00405bc0
mov edx, dword [ebp - 0x1a8]
mov eax, 0x47bf64
call fcn.00413c4c
push 0x477e1c
push 0x477fac
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x1e0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x1f0]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x1c0]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x475ff8
inc esi
xor ebx, ebx
push 0x477e4c
push ebx
push 0x477e5c
push 0x477fac
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x234]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x204]
lea eax, [ebp - 0x1f4]
call fcn.00412b10
mov edx, dword [ebp - 0x1f4]
mov eax, 0x477fbc
call fcn.00404574
test eax, eax
je 0x475ff0
push 0x47bf88
push 0x477fc0
push ebx
push 0x477e5c
push 0x477fac
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x264]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x244]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
jmp 0x475ff8
inc ebx
dec esi
jne 0x475ee9
push 0x47bf50
push 2
lea eax, [ebp - 0x268]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x26c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x26c]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov eax, dword [ebp - 0x268]
push eax
call fcn.004753bc
test al, al
jne 0x47605b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47771b
mov eax, 0x47bf5c
call fcn.00405b7c
push eax
push 0x477e8c
lea eax, [ebp - 0x270]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x270]
push eax
mov eax, dword [eax]
call dword [eax]
cmp dword [0x47bf5c], 0
je 0x47618c
lea eax, [ebp - 0x274]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov edx, dword [ebp - 0x274]
mov eax, 0x47bf64
call fcn.00413c4c
lea eax, [ebp - 0x278]
call fcn.00404650
push eax
lea eax, [ebp - 0x27c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf5c]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c8c
mov eax, dword [ebp - 0x27c]
push eax
mov eax, dword [eax]
call dword [eax + 0xe8]
call fcn.00405c8c
mov edx, dword [ebp - 0x278]
mov eax, 0x477fd4
call fcn.004048f8
test eax, eax
je 0x47618c
push 0x47bf88
push 0x477fe4
push 0
push 0x477e5c
push 0x477fac
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x2ac]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x28c]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x2b4]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2b0]
call fcn.004041f8
mov edx, dword [ebp - 0x2b0]
mov eax, 0x477ffc
call fcn.00404574
test eax, eax
je 0x476630
lea eax, [ebp - 0x2bc]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x2c0]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x2c0]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov edx, dword [ebp - 0x2bc]
lea eax, [ebp - 0x2b8]
mov ecx, 0x477e8c
call fcn.00405bc0
mov edx, dword [ebp - 0x2b8]
mov eax, 0x47bf64
call fcn.00413c4c
lea eax, [ebp - 0x2c4]
call fcn.00404650
push eax
lea eax, [ebp - 0x2c8]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c8c
mov eax, dword [ebp - 0x2c8]
push eax
mov eax, dword [eax]
call dword [eax + pe_nt_image_headers32]
call fcn.00405c8c
mov edx, dword [ebp - 0x2c4]
lea eax, [ebp - 8]
call fcn.004041f8
push 0x477e1c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x2f8]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x2e8]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2d8]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x308]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x308]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x2d8]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x476630
inc esi
xor ebx, ebx
mov edx, dword [ebp - 8]
mov eax, 0x478050
call fcn.00404574
test eax, eax
jle 0x47644a
push 0x478068
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x34c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x33c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x31c]
lea eax, [ebp - 0x30c]
call fcn.00412b10
mov edx, dword [ebp - 0x30c]
mov eax, 0x478080
call fcn.00404574
test eax, eax
je 0x47644a
lea eax, [ebp - 0x350]
mov ecx, dword [0x47bf88]
mov edx, 0x47808c
call fcn.0040427c
mov eax, dword [ebp - 0x350]
push eax
push 0x478090
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x380]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x370]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x360]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
mov edx, dword [ebp - 8]
mov eax, 0x4780a8
call fcn.00404574
test eax, eax
jg 0x476470
mov edx, dword [ebp - 8]
mov eax, 0x4780c0
call fcn.00404574
test eax, eax
jle 0x476628
push 0x478068
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x3c4]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x3c4]
push eax
lea eax, [ebp - 0x3b4]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x3a4]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x394]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x394]
lea eax, [ebp - 0x384]
call fcn.00412b10
mov edx, dword [ebp - 0x384]
mov eax, 0x478080
call fcn.00404574
test eax, eax
je 0x476628
push 0x478068
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x408]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x3f8]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x3e8]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3d8]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x3d8]
lea eax, [ebp - 0x3c8]
call fcn.00412b10
mov eax, dword [ebp - 0x3c8]
call fcn.00404230
cmp eax, 0x14
jge 0x476628
lea eax, [ebp - 0x40c]
mov ecx, dword [0x47bf88]
mov edx, 0x478080
call fcn.0040427c
mov eax, dword [ebp - 0x40c]
push eax
push 0x478090
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x43c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x41c]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
jmp 0x476630
inc ebx
dec esi
jne 0x476314
lea eax, [ebp - 0x440]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0x440]
mov eax, 0x4780d0
call fcn.004048f8
test eax, eax
je 0x476bb7
lea eax, [ebp - 0x448]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x44c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x44c]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov edx, dword [ebp - 0x448]
lea eax, [ebp - 0x444]
mov ecx, 0x477e8c
call fcn.00405bc0
mov edx, dword [ebp - 0x444]
mov eax, 0x47bf64
call fcn.00413c4c
push 0x477e1c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x47c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x46c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x45c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x48c]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x48c]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x45c]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x476886
inc esi
xor ebx, ebx
push 0x478068
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x4d0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x4c0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x4b0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x4a0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x4a0]
lea eax, [ebp - 0x490]
call fcn.00412b10
mov edx, dword [ebp - 0x490]
mov eax, 0x478130
call fcn.00404574
test eax, eax
je 0x47687e
lea eax, [ebp - 0x4d4]
mov ecx, 0x47813c
mov edx, dword [0x47bf88]
call fcn.0040427c
mov eax, dword [ebp - 0x4d4]
push eax
push 0x478090
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x504]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0x4f4]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x4e4]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x4e4]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
inc ebx
dec esi
jne 0x47675d
push 0x47bf50
push 1
lea eax, [ebp - 0x508]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x50c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x50c]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov eax, dword [ebp - 0x508]
push eax
call fcn.004753bc
test al, al
jne 0x4768e9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47771b
mov eax, 0x47bf5c
call fcn.00405b7c
push eax
push 0x477e8c
lea eax, [ebp - 0x510]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x510]
push eax
mov eax, dword [eax]
call dword [eax]
cmp dword [0x47bf5c], 0
je 0x476bb7
lea eax, [ebp - 0x514]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov edx, dword [ebp - 0x514]
mov eax, 0x47bf74
call fcn.00413c4c
push 0x477e1c
push 0x478148
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x544]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0x534]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x524]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x554]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x554]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x524]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x476bb7
inc esi
xor ebx, ebx
push 0x477e4c
push ebx
push 0x477e5c
push 0x478148
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x598]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x588]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x578]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x578]
push eax
lea eax, [ebp - 0x568]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x568]
lea eax, [ebp - 0x558]
call fcn.00412b10
mov edx, dword [ebp - 0x558]
mov eax, 0x478154
call fcn.00404574
test eax, eax
je 0x476baf
push 0x477e4c
push ebx
push 0x477e5c
push 0x478148
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x5dc]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x5cc]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x5bc]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x5ac]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x5ac]
lea eax, [ebp - 0x59c]
call fcn.00412b10
mov eax, dword [ebp - 0x59c]
call fcn.00404230
cmp eax, 0x64
jge 0x476baf
push 0x478164
push dword [0x47bf88]
push 0x47819c
lea eax, [ebp - 0x5e0]
mov edx, 3
call fcn.004042f0
mov eax, dword [ebp - 0x5e0]
push eax
push 0x4781a4
lea eax, [ebx + 1]
push eax
push 0x477e5c
push 0x478148
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x610]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x610]
push eax
lea eax, [ebp - 0x600]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x5f0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x5f0]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
jmp 0x476bb7
inc ebx
dec esi
jne 0x4769ea
lea eax, [ebp - 0x614]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0x614]
mov eax, 0x4781b8
call fcn.004048f8
test eax, eax
jle 0x476eac
lea eax, [ebp - 0x61c]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x620]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x620]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov edx, dword [ebp - 0x61c]
lea eax, [ebp - 0x618]
mov ecx, 0x477e8c
call fcn.00405bc0
mov edx, dword [ebp - 0x618]
mov eax, 0x47bf64
call fcn.00413c4c
push 0x477e1c
push 0x4781f4
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x650]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x640]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x660]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x660]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x630]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x476eac
inc esi
xor ebx, ebx
push 0x478068
push ebx
push 0x477e5c
push 0x4781f4
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x6a4]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x684]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x674]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x674]
lea eax, [ebp - 0x664]
call fcn.00412b10
mov edx, dword [ebp - 0x664]
mov eax, 0x478200
call fcn.00404574
test eax, eax
je 0x476ea4
push 0x478068
push ebx
push 0x477e5c
push 0x478148
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x6e8]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x6d8]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x6d8]
push eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x6c8]
push eax
lea eax, [ebp - 0x6b8]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x6b8]
lea eax, [ebp - 0x6a8]
call fcn.00412b10
mov eax, dword [ebp - 0x6a8]
call fcn.00404230
cmp eax, 0x50
jge 0x476ea4
push 0x478214
push dword [0x47bf88]
push 0x478244
lea eax, [ebp - 0x6ec]
mov edx, 3
call fcn.004042f0
mov eax, dword [ebp - 0x6ec]
push eax
push 0x4781a4
push ebx
push 0x477e5c
push 0x4781f4
push 0x477e38
push 0x477e44
push 0x47bf64
lea eax, [ebp - 0x71c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x70c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x6fc]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x6fc]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
inc ebx
dec esi
jne 0x476ce4
lea eax, [ebp - 0x720]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0x720]
mov eax, 0x478250
call fcn.004048f8
test eax, eax
jne 0x476f16
lea eax, [ebp - 0x724]
call fcn.00404650
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0xa0]
call fcn.00405c8c
mov edx, dword [ebp - 0x724]
mov eax, 0x4782b0
call fcn.004048f8
test eax, eax
je 0x477707
lea eax, [ebp - 0x72c]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x730]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x730]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov edx, dword [ebp - 0x72c]
lea eax, [ebp - 0x728]
mov ecx, 0x477e8c
call fcn.00405bc0
mov edx, dword [ebp - 0x728]
mov eax, 0x47bf64
call fcn.00413c4c
xor eax, eax
push ebp
push 0x4776fd
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
push 0x47bf50
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 0x734]
call fcn.00405b7c
push eax
lea eax, [ebp - 0x738]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf58]
push eax
mov eax, dword [eax]
call dword [eax + 0x1b0]
call fcn.00405c8c
mov eax, dword [ebp - 0x738]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
call fcn.00405c8c
mov eax, dword [ebp - 0x734]
push eax
call fcn.004753bc
test al, al
je 0x4776e6
mov eax, 0x47bf5c
call fcn.00405b7c
push eax
push 0x477e8c
lea eax, [ebp - 0x73c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x73c]
push eax
mov eax, dword [eax]
call dword [eax]
cmp dword [0x47bf5c], 0
je 0x4776e6
lea eax, [ebp - 0x740]
call fcn.00404650
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x78]
call fcn.00405c8c
mov edx, dword [ebp - 0x740]
mov eax, 0x478318
call fcn.004048f8
test eax, eax
je 0x4776e6
push 0x47bf54
push 2
lea eax, [ebp - 0x744]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x744]
push eax
call fcn.004753bc
test al, al
jne 0x4770aa
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47771b
mov eax, 0x47bf60
call fcn.00405b7c
push eax
push 0x477e8c
lea eax, [ebp - 0x748]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf54]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x748]
push eax
mov eax, dword [eax]
call dword [eax]
cmp dword [0x47bf60], 0
je 0x47737a
lea eax, [ebp - 0x74c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf54]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov edx, dword [ebp - 0x74c]
mov eax, 0x47bf74
call fcn.00413c4c
push 0x477e1c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x77c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0x76c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x76c]
push eax
lea eax, [ebp - 0x75c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x78c]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x78c]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x75c]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x47737a
inc esi
xor ebx, ebx
push 0x477e4c
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x7d0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x7d0]
push eax
lea eax, [ebp - 0x7c0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x7c0]
push eax
lea eax, [ebp - 0x7b0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x7b0]
push eax
lea eax, [ebp - 0x7a0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x7a0]
lea eax, [ebp - 0x790]
call fcn.00412b10
mov edx, dword [ebp - 0x790]
mov eax, 0x477e70
call fcn.00404574
test eax, eax
je 0x477372
push 0x477e4c
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x814]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x814]
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x7f4]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x7f4]
push eax
lea eax, [ebp - 0x7e4]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x7e4]
lea eax, [ebp - 0x7d4]
call fcn.00412b10
mov eax, dword [ebp - 0x7d4]
call fcn.00404230
cmp eax, 0x12c
jge 0x477372
push 0x478384
push dword [0x47bf88]
push 0x4783e4
lea eax, [ebp - 0x818]
mov edx, 3
call fcn.004042f0
mov eax, dword [ebp - 0x818]
push eax
push 0x4781a4
lea eax, [ebx + 1]
push eax
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x848]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x838]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0x828]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x828]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
jmp 0x47737a
inc ebx
dec esi
jne 0x4771ab
push 0x47bf54
push 3
lea eax, [ebp - 0x84c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf50]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x84c]
push eax
call fcn.004753bc
test al, al
jne 0x4773c2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47771b
mov eax, 0x47bf60
call fcn.00405b7c
push eax
push 0x477e8c
lea eax, [ebp - 0x850]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf54]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov eax, dword [ebp - 0x850]
push eax
mov eax, dword [eax]
call dword [eax]
cmp dword [0x47bf60], 0
je 0x4776e6
lea eax, [ebp - 0x854]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf54]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
call fcn.00405c8c
mov edx, dword [ebp - 0x854]
mov eax, 0x47bf74
call fcn.00413c4c
lea eax, [ebp - 0x858]
call fcn.00404650
push eax
lea eax, [ebp - 0x85c]
call fcn.00405b7c
push eax
mov eax, dword [0x47bf60]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
call fcn.00405c8c
mov eax, dword [ebp - 0x85c]
push eax
mov eax, dword [eax]
call dword [eax + 0xe8]
call fcn.00405c8c
mov edx, dword [ebp - 0x858]
mov eax, 0x4783f8
call fcn.004048f8
test eax, eax
je 0x4776e6
push 0x477e1c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x88c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
lea eax, [ebp - 0x87c]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x86c]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x89c]
mov edx, 1
mov cl, 1
call fcn.00413988
lea edx, [ebp - 0x89c]
pop eax
call fcn.004154ac
lea eax, [ebp - 0x86c]
call fcn.004101d8
mov esi, eax
test esi, esi
jl 0x4776e6
inc esi
xor ebx, ebx
push 0x477e4c
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x8e0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x8e0]
push eax
lea eax, [ebp - 0x8d0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x8c0]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x8c0]
push eax
lea eax, [ebp - 0x8b0]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x8b0]
lea eax, [ebp - 0x8a0]
call fcn.00412b10
mov edx, dword [ebp - 0x8a0]
mov eax, 0x477e70
call fcn.00404574
test eax, eax
je 0x4776de
push 0x477e4c
push ebx
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x924]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x924]
push eax
lea eax, [ebp - 0x914]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x914]
push eax
lea eax, [ebp - 0x904]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0x8f4]
push eax
call fcn.0040f4e8
add esp, 0xc
lea edx, [ebp - 0x8f4]
lea eax, [ebp - 0x8e4]
call fcn.00412b10
mov eax, dword [ebp - 0x8e4]
call fcn.00404230
cmp eax, 0x12c
jge 0x4776de
push 0x478428
push dword [0x47bf88]
push 0x478454
lea eax, [ebp - 0x928]
mov edx, 3
call fcn.004042f0
mov eax, dword [ebp - 0x928]
push eax
push 0x4781a4
lea eax, [ebx + 1]
push eax
push 0x477e5c
push 0x478044
push 0x477e38
push 0x477e44
push 0x47bf74
lea eax, [ebp - 0x958]
push eax
call fcn.0040f4e8
add esp, 0xc
lea eax, [ebp - 0x958]
push eax
lea eax, [ebp - 0x948]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x948]
push eax
lea eax, [ebp - 0x938]
push eax
call fcn.0040f4e8
add esp, 0x10
lea eax, [ebp - 0x938]
push eax
push 0
call fcn.0040f4e8
add esp, 0x10
jmp 0x4776e6
inc ebx
dec esi
jne 0x477517
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x15
jne 0x476f8e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x477707
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47771b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x477d45
lea eax, [ebp - 0x958]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x928]
call fcn.00403f70
lea eax, [ebp - 0x924]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x8e4]
call fcn.00403f70
lea eax, [ebp - 0x8e0]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x8a0]
call fcn.00403f70
lea eax, [ebp - 0x89c]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x85c]
call fcn.00405b7c
lea eax, [ebp - 0x858]
call fcn.00404650
lea eax, [ebp - 0x854]
mov edx, dword [0x401174]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x848]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x818]
call fcn.00403f70
lea eax, [ebp - 0x814]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x7d4]
call fcn.00403f70
lea eax, [ebp - 0x7d0]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x790]
call fcn.00403f70
lea eax, [ebp - 0x78c]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x74c]
mov edx, dword [0x401174]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x740]
call fcn.00404650
lea eax, [ebp - 0x73c]
call fcn.00405b7c
lea eax, [ebp - 0x738]
call fcn.00405b7c
lea eax, [ebp - 0x734]
call fcn.00405b7c
lea eax, [ebp - 0x730]
call fcn.00405b7c
lea eax, [ebp - 0x72c]
mov edx, dword [0x45ce2c]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x724]
mov edx, 2
call fcn.00404668
lea eax, [ebp - 0x71c]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x6ec]
call fcn.00403f70
lea eax, [ebp - 0x6e8]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x6a8]
call fcn.00403f70
lea eax, [ebp - 0x6a4]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x664]
call fcn.00403f70
lea eax, [ebp - 0x660]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x620]
call fcn.00405b7c
lea eax, [ebp - 0x61c]
mov edx, dword [0x45ce2c]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x614]
call fcn.00404650
lea eax, [ebp - 0x610]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x5e0]
call fcn.00403f70
lea eax, [ebp - 0x5dc]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x59c]
call fcn.00403f70
lea eax, [ebp - 0x598]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x558]
call fcn.00403f70
lea eax, [ebp - 0x554]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x514]
mov edx, dword [0x401174]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x50c]
call fcn.00405b7c
lea eax, [ebp - 0x508]
call fcn.00405b7c
lea eax, [ebp - 0x4f4]
mov edx, dword [0x4010b0]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x4d4]
call fcn.00403f70
lea eax, [ebp - 0x504]
call fcn.0040f4e0
lea eax, [ebp - 0x4d0]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x490]
call fcn.00403f70
lea eax, [ebp - 0x48c]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x44c]
call fcn.00405b7c
lea eax, [ebp - 0x448]
mov edx, dword [0x45ce2c]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x440]
call fcn.00404650
lea eax, [ebp - 0x43c]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x40c]
call fcn.00403f70
lea eax, [ebp - 0x408]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x3c8]
call fcn.00403f70
lea eax, [ebp - 0x3c4]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x384]
call fcn.00403f70
lea eax, [ebp - 0x380]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x350]
call fcn.00403f70
lea eax, [ebp - 0x34c]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x30c]
call fcn.00403f70
lea eax, [ebp - 0x308]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x2c8]
call fcn.00405b7c
lea eax, [ebp - 0x2c4]
call fcn.00404650
lea eax, [ebp - 0x2c0]
call fcn.00405b7c
lea eax, [ebp - 0x2bc]
mov edx, dword [0x45ce2c]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x2b4]
call fcn.00404650
lea eax, [ebp - 0x2b0]
call fcn.00403f70
lea eax, [ebp - 0x2ac]
mov edx, dword [0x4010b0]
mov ecx, 3
call fcn.00404ac8
lea eax, [ebp - 0x27c]
call fcn.00405b7c
lea eax, [ebp - 0x278]
call fcn.00404650
lea eax, [ebp - 0x274]
mov edx, dword [0x401174]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x26c]
call fcn.00405b7c
lea eax, [ebp - 0x268]
call fcn.00405b7c
lea eax, [ebp - 0x264]
mov edx, dword [0x4010b0]
mov ecx, 7
call fcn.00404ac8
lea eax, [ebp - 0x1f4]
call fcn.00403f70
lea eax, [ebp - 0x1f0]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x1b0]
call fcn.00405b7c
lea eax, [ebp - 0x1ac]
mov edx, dword [0x45ce2c]
mov ecx, 2
call fcn.00404ac8
lea eax, [ebp - 0x1a4]
call fcn.00404650
lea eax, [ebp - 0x1a0]
mov edx, dword [0x4010b0]
mov ecx, 7
call fcn.00404ac8
lea eax, [ebp - 0x130]
call fcn.00403f70
lea eax, [ebp - 0x12c]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0xec]
call fcn.00405b7c
lea eax, [ebp - 0xe8]
call fcn.00404650
lea eax, [ebp - 0xe4]
call fcn.00405b7c
lea eax, [ebp - 0xe0]
call fcn.00404650
lea eax, [ebp - 0xdc]
call fcn.00405b7c
lea eax, [ebp - 0xd8]
call fcn.00405b7c
lea eax, [ebp - 0xd4]
call fcn.00405b7c
lea eax, [ebp - 0xd0]
mov edx, dword [0x4010b0]
mov ecx, 7
call fcn.00404ac8
lea eax, [ebp - 0x60]
call fcn.00403f70
lea eax, [ebp - 0x5c]
mov edx, dword [0x4010b0]
mov ecx, 4
call fcn.00404ac8
lea eax, [ebp - 0x1c]
call fcn.00405b7c
lea eax, [ebp - 0x18]
call fcn.00404650
lea eax, [ebp - 0x14]
call fcn.00405b7c
lea eax, [ebp - 0x10]
call fcn.00405b7c
lea eax, [ebp - 0xc]
call fcn.00404650
lea eax, [ebp - 8]
call fcn.00403f70
ret