Function at 0x4bf540
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Send data
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cbf96
mov eax, dword fs:[0]
push eax
sub esp, 0x150
push esi
mov eax, dword [0x6385e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
add ecx, 0x10
call fcn.00401110
mov dword [ebp - 0x20], 0
mov ecx, dword [ebp - 0x124]
cmp dword [ecx + 0x60], 0
jne 0x4bf5a4
call fcn.004beac0
mov dword [ebp - 0x20], eax
jmp 0x4bf5b0
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x18]
call fcn.004b34a0
mov dword [ebp - 4], 0
cmp dword [ebp - 0x20], 0
je 0x4bf619
mov ecx, dword [ebp - 0x124]
add ecx, 4
push ecx
lea edx, [ebp - 0xb8]
push edx
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x12c], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x12c]
push edx
lea ecx, [ebp - 0x18]
call fcn.004b3890
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb8]
call fcn.004b3860
jmp 0x4bf627
mov eax, dword [0x63e870]
push eax
lea ecx, [ebp - 0x18]
call fcn.004b38f0
lea ecx, [ebp - 0x18]
push ecx
call fcn.004b4e70
add esp, 4
movzx edx, al
test edx, edx
je 0x4bf65b
push 0x10000000
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov dword [edx + 0x20], eax
jmp 0x4bf681
push 0x10000000
push 0
lea ecx, [ebp - 0x18]
call fcn.004553f0
push eax
push 3
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov dword [edx + 0x20], eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
cmp dword [ecx + 0x20], 0
jne 0x4bf69b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
jmp 0x4bf6fe
push 4
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
push eax
push 3
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x20]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
push 4
mov ecx, dword [ebp - 0x124]
add ecx, 0x48
push ecx
push 5
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
push 4
mov edx, dword [ebp - 0x124]
add edx, 0x48
push edx
push 6
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
cmp dword [ebp - 0x1c], 0
jne 0x4bf7a5
lea eax, [ebp - 0xc4]
push eax
mov ecx, dword [ebp - 0x124]
add ecx, 4
call fcn.004bd030
mov dword [ebp - 0x130], eax
mov ecx, dword [ebp - 0x124]
mov esi, dword [ecx + 0x64]
push 0
mov ecx, dword [ebp - 0x124]
add ecx, 4
call fcn.004bd940
push eax
mov ecx, dword [ebp - 0x130]
call fcn.004553f0
push eax
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [esi + 0x24], eax
lea ecx, [ebp - 0xc4]
call fcn.004b3860
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
cmp dword [eax + 0x24], 0
jne 0x4bf7a5
mov ecx, dword [ebp - 0x124]
call fcn.004c0160
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4bf7a5
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [edx + 0x2c]
mov dword [ecx + 0x24], edx
cmp dword [ebp - 0x1c], 0
jne 0x4bf98e
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0x124]
add ecx, 4
call fcn.004bd200
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 4], 2
mov edx, dword [0x63e86c]
push edx
mov ecx, dword [ebp - 0x138]
call fcn.004b4b00
mov byte [ebp - 0xc5], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.004b3860
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x4bf81f
mov ecx, dword [ebp - 0x2c]
or ecx, 0x800000
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x124]
cmp dword [edx + 0x38], 0
jne 0x4bf830
jmp 0x4bf8b1
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x38], 1
jne 0x4bf84a
mov ecx, dword [ebp - 0x2c]
or ecx, 0x100
mov dword [ebp - 0x2c], ecx
jmp 0x4bf8b1
mov edx, dword [ebp - 0x124]
cmp dword [edx + 0x38], 2
jne 0x4bf858
jmp 0x4bf8b1
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x38], 3
jne 0x4bf866
jmp 0x4bf8b1
mov ecx, dword [ebp - 0x124]
cmp dword [ecx + 0x38], 4
jne 0x4bf880
mov edx, dword [ebp - 0x2c]
or edx, 0x100
mov dword [ebp - 0x2c], edx
jmp 0x4bf8b1
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0x38], 5
jne 0x4bf89a
mov ecx, dword [ebp - 0x2c]
or ecx, 0x100
mov dword [ebp - 0x2c], ecx
jmp 0x4bf8b1
mov edx, dword [ebp - 0x124]
cmp dword [edx + 0x38], 6
jne 0x4bf8b1
mov eax, dword [ebp - 0x2c]
or eax, 0x100
mov dword [ebp - 0x2c], eax
push 0
push str.POST
mov ecx, dword [ebp - 0x124]
add ecx, 0x3c
call fcn.004b4b20
movzx ecx, al
test ecx, ecx
je 0x4bf8d9
mov edx, dword [ebp - 0x2c]
or edx, 0x100
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0x607468
mov dword [ebp - 0x24], 0
lea eax, [ebp - 0xe0]
push eax
mov ecx, dword [ebp - 0x124]
add ecx, 4
call fcn.004bd070
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x124]
mov esi, dword [ecx + 0x64]
mov edx, dword [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x13c]
call fcn.004553f0
push eax
mov ecx, dword [ebp - 0x124]
add ecx, 0x3c
call fcn.004553f0
push eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x24]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [esi + 0x28], eax
lea ecx, [ebp - 0xe0]
call fcn.004b3860
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
cmp dword [edx + 0x28], 0
jne 0x4bf98e
mov ecx, dword [ebp - 0x124]
call fcn.004c0160
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4bf98e
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [ecx + 0x2c]
mov dword [eax + 0x28], ecx
cmp dword [ebp - 0x1c], 0
jne 0x4bf9c5
push 0
push 0x7e4c00
push 0x4bf170
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0x28]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4bf9c5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4bfb5f
cmp dword [ebp - 0x20], 0
je 0x4bfb5f
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0x14]
call edx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4bfb5f
push 0x5ffc9c
lea ecx, [ebp - 0xec]
call fcn.004b3550
mov byte [ebp - 4], 3
lea eax, [ebp - 0xec]
push eax
mov ecx, dword [ebp - 0x124]
add ecx, 4
push ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x34]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xec]
call fcn.004b3860
cmp dword [ebp - 0x38], 0
je 0x4bfb5f
mov ecx, dword [ebp - 0x38]
call fcn.00407d80
mov ecx, eax
call fcn.00404b70
test eax, eax
jle 0x4bfaab
mov ecx, dword [ebp - 0x38]
call fcn.004888c0
push eax
push 0x5fc5a0
mov ecx, dword [ebp - 0x38]
call fcn.00407d80
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004b4080
add esp, 0x10
lea ecx, [ebp - 0x44]
call fcn.00404b70
push eax
lea ecx, [ebp - 0x44]
call fcn.004553f0
push eax
push 0x1002
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x28]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
lea ecx, [ebp - 0x44]
call fcn.004b3860
jmp 0x4bfae3
mov ecx, dword [ebp - 0x38]
call fcn.004888c0
mov ecx, eax
call fcn.00404b70
push eax
mov ecx, dword [ebp - 0x38]
call fcn.004888c0
mov ecx, eax
call fcn.004553f0
push eax
push 0x1002
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x28]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov ecx, dword [ebp - 0x38]
call fcn.004bb880
mov ecx, eax
call fcn.00404b70
push eax
mov ecx, dword [ebp - 0x38]
call fcn.004bb880
mov ecx, eax
call fcn.004553f0
push eax
push 0x1003
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x28]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 0
je 0x4bfb55
push 1
mov eax, dword [ebp - 0xf0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xf0]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x140], eax
jmp 0x4bfb5f
mov dword [ebp - 0x140], 0
cmp dword [ebp - 0x1c], 0
jne 0x4bfb98
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
movzx eax, byte [edx + 4]
test eax, eax
jne 0x4bfb98
mov dword [ebp - 0x48], 2
push 4
lea ecx, [ebp - 0x48]
push ecx
push 0x3f
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0x28]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
cmp dword [ebp - 0x1c], 0x2f00
jne 0x4bfba8
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0
jne 0x4bfce6
lea edx, [ebp - 0x54]
push edx
mov ecx, dword [ebp - 0x124]
add ecx, 0x4c
call fcn.004beb10
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x124]
add eax, 0x28
push eax
call fcn.004b4e70
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x4bfc0d
push str.Content_Type:
lea ecx, [ebp - 0x54]
call fcn.004b3b40
mov edx, dword [ebp - 0x124]
add edx, 0x28
push edx
lea ecx, [ebp - 0x54]
call fcn.004b3ad0
push 0x5fc5bc
lea ecx, [ebp - 0x54]
call fcn.004b3b40
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
cmp dword [ecx + 8], 0
jne 0x4bfc28
mov dword [ebp - 0x144], 0
jmp 0x4bfc4f
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov edx, dword [eax + 8]
mov eax, dword [ecx]
mov ecx, edx
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
push edx
mov eax, dword [ebp - 0x58]
push eax
push 0
push 0
lea ecx, [ebp - 0x54]
call fcn.00404b70
push eax
lea ecx, [ebp - 0x54]
call fcn.004553f0
push eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x28]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x4bfcab
mov ecx, dword [ebp - 0x124]
call fcn.004c0160
mov dword [ebp - 0x148], eax
jmp 0x4bfcb7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x148], eax
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0x2f00
jne 0x4bfcda
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x54]
call fcn.004b3860
jmp 0x4bfb98
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x54]
call fcn.004b3860
cmp dword [ebp - 0x1c], 0
jne 0x4bfdb0
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
cmp dword [eax + 8], 0
je 0x4bfdb0
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov ecx, dword [edx + 8]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
call edx
test eax, eax
jle 0x4bfdb0
push 0
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov ecx, dword [ecx + 8]
mov edx, dword [edx]
mov eax, dword [edx + 0x18]
call eax
push eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov ecx, dword [edx + 8]
call fcn.00532050
push eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x4bfd8d
mov ecx, dword [ebp - 0x124]
call fcn.004c0160
mov dword [ebp - 0x14c], eax
jmp 0x4bfd99
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x2f00
jne 0x4bfdb0
jmp 0x4bfb98
cmp dword [ebp - 0x1c], 0
jne 0x4bfe0a
push 0
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [edx + 0x28]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x4bfde7
mov ecx, dword [ebp - 0x124]
call fcn.004c0160
mov dword [ebp - 0x150], eax
jmp 0x4bfdf3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0x2f00
jne 0x4bfe0a
jmp 0x4bfb98
cmp dword [ebp - 0x1c], 0
jne 0x4c00f5
push 0x34
call fcn.0054d57b
add esp, 4
mov dword [ebp - 0xfc], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0xfc], 0
je 0x4bfe4b
mov edx, dword [ebp - 0x124]
push edx
mov ecx, dword [ebp - 0xfc]
call fcn.004bed80
mov dword [ebp - 0x154], eax
jmp 0x4bfe55
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov eax, dword [ebp - 0xf8]
mov dword [edx + 0xc], eax
mov dword [ebp - 0x70], 4
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
push 0
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x78]
push edx
push 0
push 0x20000013
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x4bfec6
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x78]
mov dword [edx + 0x20], eax
mov dword [ebp - 0x70], 4
push 0
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0
push 0x20000005
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x4bff07
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x74]
mov dword [edx + 0x24], eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x68], 0
push 0
lea ecx, [ebp - 0x70]
push ecx
mov edx, dword [ebp - 0x68]
push edx
push 0
push 0x16
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax + 0x64]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov dword [ebp - 0x6c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x4c00f5
lea ecx, [ebp - 0x84]
call fcn.004b34a0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x70]
shr eax, 1
push eax
lea ecx, [ebp - 0x84]
call fcn.004b48d0
push 0
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x84]
call fcn.004553f0
push eax
push 0
push 0x16
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0x28]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x4c00e6
mov edx, dword [ebp - 0x70]
shr edx, 1
push edx
lea ecx, [ebp - 0x84]
call fcn.004b5930
push 0
lea ecx, [ebp - 0x90]
call fcn.00430200
mov byte [ebp - 4], 7
lea eax, [ebp - 0x90]
push eax
push 0x5fc5bc
lea ecx, [ebp - 0x84]
call fcn.004b63d0
mov dword [ebp - 0x94], 1
jmp 0x4bfff2
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
lea ecx, [ebp - 0x90]
call fcn.004b9730
cmp dword [ebp - 0x94], eax
jge 0x4c00d7
lea ecx, [ebp - 0xac]
call fcn.004b34a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa0]
call fcn.004b34a0
mov byte [ebp - 4], 9
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0xac]
push eax
push 0x3a
mov ecx, dword [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x90]
call fcn.00430700
mov ecx, eax
call fcn.004b6400
movzx edx, al
test edx, edx
je 0x4c00b4
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0xa0]
call fcn.004b6c40
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x15c]
push edx
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x64]
mov ecx, dword [edx + 0xc]
call fcn.00407d80
mov ecx, eax
call fcn.00447790
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x108]
call fcn.004b3860
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa0]
call fcn.004b3860
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac]
call fcn.004b3860
jmp 0x4bffe3
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x90]
call fcn.00430250
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x84]
call fcn.004b3860
cmp dword [ebp - 0x1c], 0
je 0x4c011b
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00413920
push 0x6265d4
lea ecx, [ebp - 0x11c]
push ecx
call fcn.00553e2b
mov edx, dword [ebp - 0x124]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004b3860
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret