Function at 0x475c90
Capabilities:
Parse pe header
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x403506
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x108
call fcn.00403500
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4032f0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [0x401104]
mov dword [ebp - 4], 3
push 0
push 0x415a5c
lea eax, [ebp - 0x5c]
push eax
call dword [0x401244]
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x3c]
push edx
call dword [0x4012dc]
mov dword [ebp - 4], 4
mov dword [ebp - 0x88], 0xea60
mov dword [ebp - 0x90], 3
mov dword [ebp - 0xa8], 0xea60
mov dword [ebp - 0xb0], 3
mov dword [ebp - 0xc8], 0xea60
mov dword [ebp - 0xd0], 3
mov dword [ebp - 0xe8], 0xea60
mov dword [ebp - 0xf0], 3
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xcc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xc8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xc4]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xf0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xec]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xe4]
mov dword [eax + 0xc], edx
push 4
push 0x415a94
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x4c
mov dword [ebp - 4], 5
mov dword [ebp - 0x88], 4
mov dword [ebp - 0x90], 2
mov dword [ebp - 0xa8], 0x3300
mov dword [ebp - 0xb0], 2
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 1
push 0x415aac
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x40134c]
add esp, 0x2c
mov dword [ebp - 4], 6
mov edx, dword [ebp + 0x4c]
movsx eax, word [edx]
test eax, eax
je 0x475f94
mov dword [ebp - 4], 7
mov dword [ebp - 0x88], 6
mov dword [ebp - 0x90], 2
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xb0], 0xb
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 1
push 0x415aac
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x40134c]
add esp, 0x2c
jmp 0x476035
mov dword [ebp - 4], 9
mov dword [ebp - 0x88], 6
mov dword [ebp - 0x90], 2
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0xb0], 0xb
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 1
push 0x415aac
lea edx, [ebp - 0x3c]
push edx
call dword [0x40134c]
add esp, 0x2c
mov dword [ebp - 4], 0xb
mov eax, dword [ebp + 0x48]
mov ecx, dword [eax]
push ecx
call dword [0x401044]
cmp eax, 1
jle 0x47613f
mov dword [ebp - 4], 0xc
mov edx, dword [ebp + 0x48]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x90], 0x4008
mov eax, dword [ebp + 8]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 0x4008
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xb0], 0xb
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xa0]
mov dword [ecx], edx
mov eax, dword [ebp - 0x9c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x98]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x94]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 3
push 0x415a2c
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x3c
jmp 0x47632d
mov dword [ebp - 4], 0xe
mov edx, dword [ebp + 0x20]
movsx eax, word [edx]
test eax, eax
je 0x476243
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x88], 0x415ac0
mov dword [ebp - 0x90], 8
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xb0], 0x4008
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xc0], 0xb
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xc0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xbc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xb8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xb4]
mov dword [edx + 0xc], ecx
push 3
push 0x415a2c
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x3c
jmp 0x47632d
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x88], 0x415ad0
mov dword [ebp - 0x90], 8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], 0x4008
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xc0], 0xb
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xc0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xbc]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xb8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xb4]
mov dword [ecx + 0xc], eax
push 3
push 0x415a2c
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x3c
mov dword [ebp - 4], 0x14
mov edx, dword [ebp + 0xc]
cmp word [edx], 0xa
jne 0x4766ad
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x88], 0x415adc
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415af0
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x88], 0x415c28
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415c4c
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x88], 0x415c74
mov dword [ebp - 0x90], 8
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x18
mov ecx, dword [ebp + 0x50]
mov edx, dword [ecx]
push edx
call dword [0x401044]
cmp eax, 5
jle 0x476600
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x88], 0x415c88
mov dword [ebp - 0x90], 8
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
jmp 0x4766a8
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x88], 0x415c88
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415ca4
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
jmp 0x4774c6
mov dword [ebp - 4], 0x1f
mov eax, dword [ebp + 0xc]
cmp word [eax], 0xb
jne 0x476d55
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x88], 0x415adc
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415d78
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x88], 0x415c28
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415c4c
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x88], 0x415d84
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415da8
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x88], 0x415dcc
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415dec
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x88], 0x415c74
mov dword [ebp - 0x90], 8
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x88], 0x415e04
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415dec
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x88], 0x415e18
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415e2c
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x88], 0x415ed8
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415efc
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x88], 0x415f10
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415f34
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x88], 0x415c88
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415ca4
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
jmp 0x4774c6
mov dword [ebp - 4], 0x2c
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
push ecx
call dword [0x401044]
cmp eax, 5
jle 0x476e18
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x88], 0x415f4c
mov dword [ebp - 0x90], 8
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x2f
mov ecx, dword [ebp + 0x40]
mov edx, dword [ecx]
push edx
call dword [0x401044]
cmp eax, 3
jle 0x476ee0
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x88], 0x415f60
mov dword [ebp - 0x90], 8
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
jmp 0x47704a
mov dword [ebp - 4], 0x32
mov edx, dword [ebp + 0x34]
movsx eax, word [edx]
test eax, eax
je 0x476fa2
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x88], 0x415f60
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415f80
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
jmp 0x47704a
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x88], 0x415f60
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415fa8
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x38
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax]
push ecx
call dword [0x401044]
cmp eax, 5
jle 0x47710d
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x88], 0x415c74
mov dword [ebp - 0x90], 8
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x3b
mov ecx, dword [ebp + 0x30]
mov edx, dword [ecx]
push edx
call dword [0x401044]
cmp eax, 5
jle 0x4771d0
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0x88], 0x415ff0
mov dword [ebp - 0x90], 8
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x3e
mov edx, dword [ebp + 0x38]
mov eax, dword [edx]
push eax
call dword [0x401044]
cmp eax, 5
jle 0x477293
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x88], 0x416000
mov dword [ebp - 0x90], 8
mov ecx, dword [ebp + 0x38]
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x41
mov eax, dword [ebp + 0x3c]
mov ecx, dword [eax]
push ecx
call dword [0x401044]
cmp eax, 5
jle 0x477356
mov dword [ebp - 4], 0x42
mov dword [ebp - 0x88], 0x416020
mov dword [ebp - 0x90], 8
mov edx, dword [ebp + 0x3c]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x88]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x84]
mov dword [eax + 0xc], edx
mov eax, 0x10
call fcn.00403500
mov eax, esp
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xac]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xa4]
mov dword [eax + 0xc], edx
push 2
push 0x415c00
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x44
mov ecx, dword [ebp + 0x50]
mov edx, dword [ecx]
push edx
call dword [0x401044]
cmp eax, 5
jle 0x47741e
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x88], 0x415c88
mov dword [ebp - 0x90], 8
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], 0x4008
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0xb0]
mov dword [ecx], edx
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
push 2
push 0x415c00
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
jmp 0x4774c6
mov dword [ebp - 4], 0x47
mov dword [ebp - 0x88], 0x415c88
mov dword [ebp - 0x90], 8
mov dword [ebp - 0xa8], 0x415ca4
mov dword [ebp - 0xb0], 8
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call fcn.00403500
mov edx, esp
mov eax, dword [ebp - 0xb0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xa8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xa4]
mov dword [edx + 0xc], ecx
push 2
push 0x415c00
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x2c
mov dword [ebp - 4], 0x4a
mov eax, dword [ebp + 0x20]
movsx ecx, word [eax]
test ecx, ecx
je 0x47753f
mov dword [ebp - 4], 0x4b
mov edx, dword [ebp + 0x24]
mov eax, dword [edx]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 8
mov eax, 0x10
call fcn.00403500
mov ecx, esp
mov edx, dword [ebp - 0x90]
mov dword [ecx], edx
mov eax, dword [ebp - 0x8c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x84]
mov dword [ecx + 0xc], eax
push 1
push 0x416030
lea ecx, [ebp - 0x3c]
push ecx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0x1c
jmp 0x477561
mov dword [ebp - 4], 0x4d
push 0
push 0x416030
lea edx, [ebp - 0x3c]
push edx
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0xc
mov dword [ebp - 4], 0x4f
call dword [0x401118]
mov dword [ebp - 4], 0x50
push 0
push 0x41603c
lea eax, [ebp - 0x3c]
push eax
call dword [0x401198]
push eax
call dword [0x4012ec]
add esp, 0xc
mov dword [ebp - 4], 0x51
push 0
push 0x41605c
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x5c]
push edx
call dword [0x40130c]
add esp, 0x10
push eax
call dword [fcn.00401048]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
mov dword [ebp - 4], 0x52
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x90], 0x8002
push 0
push 0x41606c
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call dword [0x40130c]
add esp, 0x10
push eax
lea edx, [ebp - 0x6c]
push edx
call dword [0x4010c8]
push eax
lea eax, [ebp - 0x90]
push eax
call dword [0x4010d0]
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
movsx ecx, word [ebp - 0x10c]
test ecx, ecx
je 0x47764b
mov dword [ebp - 4], 0x53
mov edx, 0x40ce3c
lea ecx, [ebp - 0x28]
call dword [0x4012b4]
jmp 0x477abe
mov dword [ebp - 4], 0x56
push 0
push 0x416088
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x5c]
push eax
call dword [0x40130c]
add esp, 0x10
push eax
call dword [fcn.00401048]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
mov dword [ebp - 4], 0x57
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0x44]
call dword [0x4012b4]
mov dword [ebp - 4], 0x58
mov ecx, dword [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x5c]
push edx
call fcn.00475030
lea eax, [ebp - 0x5c]
push eax
call dword [fcn.00401048]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
mov dword [ebp - 4], 0x59
mov ecx, dword [ebp - 0x40]
push ecx
call dword [0x401044]
cmp eax, 5
jle 0x4776f3
mov dword [ebp - 4], 0x5a
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp + 0x28]
call dword [0x4012b4]
mov dword [ebp - 4], 0x5c
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax]
push ecx
call fcn.00475470
mov edx, eax
mov ecx, dword [ebp + 0x2c]
call dword [fcn.0040132c]
mov dword [ebp - 4], 0x5d
push 0
push 0x41606c
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x5c]
push eax
call dword [0x40130c]
add esp, 0x10
push eax
lea ecx, [ebp - 0x80]
push ecx
call dword [0x401294]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x24]
push eax
call dword [0x401030]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
mov dword [ebp - 4], 0x5e
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x90], 0x4008
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x5c]
push eax
call dword [0x401088]
mov dword [ebp - 0x98], 0x4160b8
mov dword [ebp - 0xa0], 8
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xb0], 0x8002
push 1
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0xa0]
push edx
push 0
lea eax, [ebp - 0x6c]
push eax
call dword [0x401254]
push eax
lea ecx, [ebp - 0xb0]
push ecx
call dword [0x401008]
mov word [ebp - 0x10c], ax
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x5c]
push eax
push 2
call dword [fcn.00401050]
add esp, 0xc
movsx ecx, word [ebp - 0x10c]
test ecx, ecx
je 0x477804
mov dword [ebp - 4], 0x5f
lea edx, [ebp - 0x24]
push edx
call fcn.00477b60
mov dword [ebp - 4], 0x61
mov eax, dword [ebp + 0xc]
cmp word [eax], 0x64
jne 0x477866
mov dword [ebp - 4], 0x62
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x90], 0x6011
push 0
push 0x40
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x5c]
push eax
call dword [fcn.00401250]
lea ecx, [ebp - 0x5c]
push ecx
call dword [fcn.00401048]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
jmp 0x477abe
mov dword [ebp - 4], 0x65
mov edx, dword [ebp + 0xc]
cmp word [edx], 1
jne 0x477952
mov dword [ebp - 4], 0x66
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 0x4008
push 0
lea ecx, [ebp - 0x90]
push ecx
call dword [0x40127c]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.0040132c]
push eax
push 0x40ce3c
call dword [0x401184]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x10c], ax
lea ecx, [ebp - 0x48]
call dword [fcn.00401380]
movsx edx, word [ebp - 0x10c]
test edx, edx
je 0x477904
mov dword [ebp - 4], 0x67
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 0x4008
lea ecx, [ebp - 0x90]
push ecx
call dword [0x401180]
mov dword [ebp - 4], 0x69
mov dword [ebp - 0x108], 2
mov word [ebp - 0x104], 0xffff
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [ebp + 0x14]
push edx
call fcn.00472ce0
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x48]
call dword [fcn.00401380]
jmp 0x477a1b
mov dword [ebp - 4], 0x6b
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
push ecx
call dword [0x401044]
cmp eax, 1
jge 0x4779cf
mov dword [ebp - 4], 0x6c
mov edx, 0x412c8c
lea ecx, [ebp - 0x48]
call dword [0x4012b4]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x90], 0x6011
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x5c]
push edx
call fcn.00474d90
lea eax, [ebp - 0x5c]
push eax
call dword [fcn.00401048]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x48]
call dword [fcn.00401380]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
jmp 0x477a1b
mov dword [ebp - 4], 0x6e
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x90], 0x6011
mov edx, dword [ebp + 0x1c]
push edx
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call fcn.00474d90
lea edx, [ebp - 0x5c]
push edx
call dword [fcn.00401048]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [fcn.0040132c]
lea ecx, [ebp - 0x5c]
call dword [fcn.00401034]
jmp 0x477abe
push 0x477b3f
jmp 0x477b0e
lea ecx, [ebp - 0x24]
push ecx
push 0
call dword [fcn.004010e0]
lea ecx, [ebp - 0x2c]
call dword [fcn.00401380]
lea ecx, [ebp - 0x3c]
call dword [fcn.00401034]
lea ecx, [ebp - 0x40]
call dword [fcn.00401380]
lea ecx, [ebp - 0x44]
call dword [fcn.00401380]
ret