Function at 0x46a1a8
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x73
push 0
push 0
dec ecx
jne 0x46a1b0
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00404480
mov esi, 0x47cc40
xor eax, eax
push ebp
push 0x46c829
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x47cc38], eax
push 0
lea edx, [ebp - 0x18]
mov eax, 0x99e6df
call fcn.00407fdc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x998]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x1c]
mov eax, 0x99e6e0
call fcn.00407fdc
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x99c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 2
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.00407fdc
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x440]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0x28]
mov eax, 2
call fcn.00407fdc
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + 0x444]
call fcn.00443d50
push 1
lea edx, [ebp - 0x2c]
mov eax, 3
call fcn.00407fdc
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x43c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x30]
mov eax, 4
call fcn.00407fdc
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x618]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x34]
mov eax, 5
call fcn.00407fdc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x61c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x38]
mov eax, 6
call fcn.00407fdc
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x620]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x3c]
mov eax, 7
call fcn.00407fdc
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x624]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x40]
mov eax, 8
call fcn.00407fdc
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x628]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x44]
mov eax, 9
call fcn.00407fdc
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x48]
mov eax, 0xa
call fcn.00407fdc
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x630]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x4c]
mov eax, 0xb
call fcn.00407fdc
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x634]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x50]
mov eax, 0xc
call fcn.00407fdc
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x638]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x54]
mov eax, 0xd
call fcn.00407fdc
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x63c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x58]
mov eax, 0xe
call fcn.00407fdc
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x640]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x5c]
mov eax, 0xf
call fcn.00407fdc
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x644]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x60]
mov eax, 0x10
call fcn.00407fdc
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x690]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x64]
mov eax, 0x11
call fcn.00407fdc
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x68c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x68]
mov eax, 0x12
call fcn.00407fdc
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x688]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x6c]
mov eax, 0x13
call fcn.00407fdc
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x684]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x70]
mov eax, 0x14
call fcn.00407fdc
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x680]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x74]
mov eax, 0x15
call fcn.00407fdc
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x67c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x78]
mov eax, 0x16
call fcn.00407fdc
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x678]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x7c]
mov eax, 0x17
call fcn.00407fdc
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x664]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x80]
mov eax, 0x18
call fcn.00407fdc
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x660]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x84]
mov eax, 0x19
call fcn.00407fdc
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x65c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x88]
mov eax, 0x1a
call fcn.00407fdc
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x658]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x8c]
mov eax, 0x1b
call fcn.00407fdc
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x654]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x90]
mov eax, 0x1c
call fcn.00407fdc
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x650]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x94]
mov eax, 0x1d
call fcn.00407fdc
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x64c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x98]
mov eax, 0x1e
call fcn.00407fdc
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x47c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x9c]
mov eax, 0x1f
call fcn.00407fdc
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x480]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xa0]
mov eax, 0x20
call fcn.00407fdc
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x488]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0xa4]
mov eax, 0x21
call fcn.00407fdc
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x48c]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0xa8]
mov eax, 0x22
call fcn.00407fdc
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x484]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xac]
mov eax, 0x23
call fcn.00407fdc
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x490]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xb0]
mov eax, 0x24
call fcn.00407fdc
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x494]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xb4]
mov eax, 0x25
call fcn.00407fdc
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x39c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xb8]
mov eax, 0x26
call fcn.00407fdc
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x3a0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xbc]
mov eax, 0x27
call fcn.00407fdc
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x3a8]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0xc0]
mov eax, 0x28
call fcn.00407fdc
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x420]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xc4]
mov eax, 0x29
call fcn.00407fdc
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x3a4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xc8]
mov eax, 0x2a
call fcn.00407fdc
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x3ac]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0xcc]
mov eax, 0x2b
call fcn.00407fdc
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x3b0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xa
lea edx, [ebp - 0xd4]
mov eax, 0x2c
call fcn.00407fdc
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0xd0]
call fcn.00407fdc
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebx + 0x3b4]
call fcn.00443d50
push 0
lea eax, [ebp - 0xd8]
push eax
lea edx, [ebp - 0xdc]
mov eax, 0x2d
call fcn.00407fdc
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xd8]
mov eax, dword [ebx + 0x66c]
call fcn.00443d50
push 0
lea eax, [ebp - 0xe0]
push eax
lea edx, [ebp - 0xe4]
mov eax, 0x2e
call fcn.00407fdc
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebx + 0x670]
call fcn.00443d50
push 0
lea edx, [ebp - 0xe8]
mov eax, 0x2f
call fcn.00407fdc
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x568]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xec]
mov eax, 0x30
call fcn.00407fdc
mov ecx, dword [ebp - 0xec]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x574]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xf0]
mov eax, 0x31
call fcn.00407fdc
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5f0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0xf4]
mov eax, 0x32
call fcn.00407fdc
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x570]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0x64
lea edx, [ebp - 0xfc]
mov eax, 0x33
call fcn.00407fdc
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0xf8]
call fcn.00407fdc
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebx + 0x56c]
call fcn.00443d50
push 0xc8
lea edx, [ebp - 0x104]
mov eax, 0x34
call fcn.00407fdc
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x100]
call fcn.00407fdc
mov edx, dword [ebp - 0x100]
mov eax, dword [ebx + 0x584]
call fcn.00443d50
push 0
lea edx, [ebp - 0x108]
mov eax, 0x35
call fcn.00407fdc
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x578]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x110]
mov eax, 0x36
call fcn.00407fdc
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x10c]
call fcn.00407fdc
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebx + 0x57c]
call fcn.00443d50
push 0xa
lea edx, [ebp - 0x118]
mov eax, 0x37
call fcn.00407fdc
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x114]
call fcn.00407fdc
mov edx, dword [ebp - 0x114]
mov eax, dword [ebx + 0x580]
call fcn.00443d50
push 0
lea edx, [ebp - 0x11c]
mov eax, 0x38
call fcn.00407fdc
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5e0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x120]
mov eax, 0x39
call fcn.00407fdc
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5e8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x124]
mov eax, 0x3a
call fcn.00407fdc
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5c0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x128]
mov eax, 0x3b
call fcn.00407fdc
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5c8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x12c]
mov eax, 0x3c
call fcn.00407fdc
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5d4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x130]
mov eax, 0x3d
call fcn.00407fdc
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5dc]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x134]
mov eax, 0x3e
call fcn.00407fdc
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x588]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x13c]
mov eax, 0x3f
call fcn.00407fdc
mov ecx, dword [ebp - 0x13c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x138]
call fcn.00407fdc
mov edx, dword [ebp - 0x138]
mov eax, dword [ebx + 0x58c]
call fcn.00443d50
push 0xa
lea edx, [ebp - 0x144]
mov eax, 0x40
call fcn.00407fdc
mov ecx, dword [ebp - 0x144]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x140]
call fcn.00407fdc
mov edx, dword [ebp - 0x140]
mov eax, dword [ebx + 0x590]
call fcn.00443d50
push 0
lea edx, [ebp - 0x148]
mov eax, 0x41
call fcn.00407fdc
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5e4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x14c]
mov eax, 0x42
call fcn.00407fdc
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5ec]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x150]
mov eax, 0x43
call fcn.00407fdc
mov ecx, dword [ebp - 0x150]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5c4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x154]
mov eax, 0x44
call fcn.00407fdc
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5cc]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x158]
mov eax, 0x45
call fcn.00407fdc
mov ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5d0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x15c]
mov eax, 0x46
call fcn.00407fdc
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5d8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x160]
mov eax, 0x47
call fcn.00407fdc
mov ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x594]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x164]
mov eax, 0x48
call fcn.00407fdc
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4d8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x168]
mov eax, 0x49
call fcn.00407fdc
mov ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4fc]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x16c]
mov eax, 0x4a
call fcn.00407fdc
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4f8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x170]
mov eax, 0x4b
call fcn.00407fdc
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x500]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x174]
mov eax, 0x4c
call fcn.00407fdc
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4e4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xa
lea edx, [ebp - 0x17c]
mov eax, 0x4d
call fcn.00407fdc
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x178]
call fcn.00407fdc
mov edx, dword [ebp - 0x178]
mov eax, dword [ebx + 0x4e0]
call fcn.00443d50
push 0
lea edx, [ebp - 0x180]
mov eax, 0x4e
call fcn.00407fdc
mov ecx, dword [ebp - 0x180]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4ec]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x184]
mov eax, 0x4f
call fcn.00407fdc
mov ecx, dword [ebp - 0x184]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4f0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x188]
mov eax, 0x50
call fcn.00407fdc
mov ecx, dword [ebp - 0x188]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4f4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x18c]
mov eax, 0x51
call fcn.00407fdc
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x504]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x190]
mov eax, 0x52
call fcn.00407fdc
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x4e8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xa
lea edx, [ebp - 0x198]
mov eax, 0x53
call fcn.00407fdc
mov ecx, dword [ebp - 0x198]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x194]
call fcn.00407fdc
mov edx, dword [ebp - 0x194]
mov eax, dword [ebx + 0x4dc]
call fcn.00443d50
push 0
lea edx, [ebp - 0x19c]
mov eax, 0x54
call fcn.00407fdc
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x6ac]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x1a0]
mov eax, 0x55
call fcn.00407fdc
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x6c4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
lea edx, [ebp - 0x1a8]
mov eax, 0x1e240
call fcn.00407fdc
mov eax, dword [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea edx, [ebp - 0x1ac]
mov eax, 0x56
call fcn.00407fdc
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1a4]
mov eax, dword [ebx + 0x6b0]
call fcn.00443d50
push 0
lea edx, [ebp - 0x1b0]
mov eax, 0x57
call fcn.00407fdc
mov ecx, dword [ebp - 0x1b0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x6c0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x1b4]
mov eax, 0x58
call fcn.00407fdc
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x6b4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x1b8]
mov eax, 0x59
call fcn.00407fdc
mov ecx, dword [ebp - 0x1b8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x6b8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0x78
lea edx, [ebp - 0x1c0]
mov eax, 0x5a
call fcn.00407fdc
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x1bc]
call fcn.00407fdc
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebx + 0x6bc]
call fcn.00443d50
push 0
lea edx, [ebp - 0x1c4]
mov eax, 0x5b
call fcn.00407fdc
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x3ec]
call fcn.00431a3c
push 0
lea edx, [ebp - 0x1c8]
mov eax, 0x5c
call fcn.00407fdc
mov ecx, dword [ebp - 0x1c8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x460]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x1cc]
mov eax, 0x5e
call fcn.00407fdc
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x970]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x1d0]
mov eax, 0x5f
call fcn.00407fdc
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x714]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0x14
lea edx, [ebp - 0x1d8]
mov eax, 0x60
call fcn.00407fdc
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x1d4]
call fcn.00407fdc
mov edx, dword [ebp - 0x1d4]
mov eax, dword [ebx + 0x718]
call fcn.00443d50
push 0
lea edx, [ebp - 0x1dc]
mov eax, 0x61
call fcn.00407fdc
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x71c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea eax, [ebp - 0x1e0]
push eax
lea edx, [ebp - 0x1e4]
mov eax, 0x62
call fcn.00407fdc
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1e0]
mov eax, dword [ebx + 0x720]
call fcn.00443d50
push 0
lea edx, [ebp - 0x1e8]
mov eax, 0x63
call fcn.00407fdc
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x72c]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0x12c
lea edx, [ebp - 0x1f0]
mov eax, 0x64
call fcn.00407fdc
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x1ec]
call fcn.00407fdc
mov edx, dword [ebp - 0x1ec]
mov eax, dword [ebx + 0x728]
call fcn.00443d50
push 0
lea edx, [ebp - 0x1f4]
mov eax, 0x65
call fcn.00407fdc
mov ecx, dword [ebp - 0x1f4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x730]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x1f8]
mov eax, 0x66
call fcn.00407fdc
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x740]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov dl, 1
mov eax, dword [0x411fbc]
call fcn.00403230
mov dword [ebp - 8], eax
mov dl, 0x7c
mov eax, dword [ebp - 8]
call fcn.004156b0
push 0
lea eax, [ebp - 0x1fc]
push eax
lea edx, [ebp - 0x200]
mov eax, 0x67
call fcn.00407fdc
mov ecx, dword [ebp - 0x200]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 8]
call fcn.00415524
mov eax, dword [ebx + 0x73c]
mov edx, dword [eax]
call dword [edx + 0xd8]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x46b6eb
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46b6eb
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x204]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x204]
lea edx, [ebp - 0x10]
call fcn.00407ddc
cmp dword [ebp - 0x10], 0
je 0x46b6e3
mov eax, dword [ebx + 0x73c]
mov eax, dword [eax + 0x218]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec dword [ebp - 0x14]
jne 0x46b6aa
mov eax, dword [ebp - 8]
call fcn.00403260
mov dl, 1
mov eax, dword [0x411fbc]
call fcn.00403230
mov dword [ebp - 8], eax
mov dl, 0x7c
mov eax, dword [ebp - 8]
call fcn.004156b0
push 0
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x20c]
mov eax, 0x68
call fcn.00407fdc
mov ecx, dword [ebp - 0x20c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x208]
mov eax, dword [ebp - 8]
call fcn.00415524
mov eax, dword [ebx + 0x74c]
mov edx, dword [eax]
call dword [edx + 0xd8]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x46b7b5
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46b7b5
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x210]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x210]
lea edx, [ebp - 0x10]
call fcn.00407ddc
cmp dword [ebp - 0x10], 0
je 0x46b7ad
mov eax, dword [ebx + 0x74c]
mov eax, dword [eax + 0x218]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec dword [ebp - 0x14]
jne 0x46b774
mov eax, dword [ebp - 8]
call fcn.00403260
push 0
lea edx, [ebp - 0x214]
mov eax, 0x69
call fcn.00407fdc
mov ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x424]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x218]
mov eax, 0x6a
call fcn.00407fdc
mov ecx, dword [ebp - 0x218]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x788]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xff
lea edx, [ebp - 0x220]
mov eax, 0x6b
call fcn.00407fdc
mov ecx, dword [ebp - 0x220]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x21c]
call fcn.00407fdc
mov edx, dword [ebp - 0x21c]
mov eax, dword [ebx + 0x78c]
call fcn.00443d50
push 0xff
lea edx, [ebp - 0x228]
mov eax, 0x6c
call fcn.00407fdc
mov ecx, dword [ebp - 0x228]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x224]
call fcn.00407fdc
mov edx, dword [ebp - 0x224]
mov eax, dword [ebx + 0x790]
call fcn.00443d50
push 0x1e
lea edx, [ebp - 0x230]
mov eax, 0x6d
call fcn.00407fdc
mov ecx, dword [ebp - 0x230]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x22c]
call fcn.00407fdc
mov edx, dword [ebp - 0x22c]
mov eax, dword [ebx + 0x794]
call fcn.00443d50
push 0
lea edx, [ebp - 0x234]
mov eax, 0x6e
call fcn.00407fdc
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x79c]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 1
lea edx, [ebp - 0x23c]
mov eax, 0x6f
call fcn.00407fdc
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x238]
call fcn.00407fdc
mov edx, dword [ebp - 0x238]
mov eax, dword [ebx + 0x754]
call fcn.00443d50
push 0x12c
lea edx, [ebp - 0x244]
mov eax, 0x70
call fcn.00407fdc
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x240]
call fcn.00407fdc
mov edx, dword [ebp - 0x240]
mov eax, dword [ebx + 0x758]
call fcn.00443d50
push 0
lea edx, [ebp - 0x248]
mov eax, 0x71
call fcn.00407fdc
mov ecx, dword [ebp - 0x248]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x750]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x24c]
mov eax, 0x72
call fcn.00407fdc
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x7b4]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea eax, [ebp - 0x250]
push eax
lea edx, [ebp - 0x254]
mov eax, 0x73
call fcn.00407fdc
mov ecx, dword [ebp - 0x254]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x250]
mov eax, dword [ebx + 0x7b8]
call fcn.00443d50
push 0xff
lea edx, [ebp - 0x25c]
mov eax, 0x74
call fcn.00407fdc
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x258]
call fcn.00407fdc
mov edx, dword [ebp - 0x258]
mov eax, dword [ebx + 0x7bc]
call fcn.00443d50
push 0xff
lea edx, [ebp - 0x264]
mov eax, 0x75
call fcn.00407fdc
mov ecx, dword [ebp - 0x264]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x260]
call fcn.00407fdc
mov edx, dword [ebp - 0x260]
mov eax, dword [ebx + 0x7c0]
call fcn.00443d50
mov dl, 1
mov eax, dword [0x411fbc]
call fcn.00403230
mov dword [ebp - 8], eax
mov dl, 0x7c
mov eax, dword [ebp - 8]
call fcn.004156b0
push 0
lea eax, [ebp - 0x268]
push eax
lea edx, [ebp - 0x26c]
mov eax, 0x76
call fcn.00407fdc
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x268]
mov eax, dword [ebp - 8]
call fcn.00415524
mov eax, dword [ebx + 0x7b0]
mov edx, dword [eax]
call dword [edx + 0xd8]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x46bb73
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46bb73
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0x270]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x10]
call fcn.00407ddc
cmp dword [ebp - 0x10], 0
je 0x46bb6b
mov eax, dword [ebx + 0x7b0]
mov eax, dword [eax + 0x218]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec dword [ebp - 0x14]
jne 0x46bb32
mov eax, dword [ebp - 8]
call fcn.00403260
push 0
lea edx, [ebp - 0x274]
mov eax, 0x77
call fcn.00407fdc
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x7c8]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x278]
mov eax, 0x78
call fcn.00407fdc
mov ecx, dword [ebp - 0x278]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x86c]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x27c]
mov eax, 0x79
call fcn.00407fdc
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x7d0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea eax, [ebp - 0x280]
push eax
lea edx, [ebp - 0x284]
mov eax, 0x7a
call fcn.00407fdc
mov ecx, dword [ebp - 0x284]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x280]
mov eax, dword [ebx + 0x7cc]
call fcn.00443d50
push 0
lea edx, [ebp - 0x288]
mov eax, 0x7b
call fcn.00407fdc
mov ecx, dword [ebp - 0x288]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x530]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x28c]
mov eax, 0x7c
call fcn.00407fdc
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x538]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x290]
mov eax, 0x7d
call fcn.00407fdc
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x534]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x294]
mov eax, 0x7e
call fcn.00407fdc
mov ecx, dword [ebp - 0x294]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x53c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x298]
mov eax, 0x7f
call fcn.00407fdc
mov ecx, dword [ebp - 0x298]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5f8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x29c]
mov eax, 0x80
call fcn.00407fdc
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5fc]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2a0]
mov eax, 0x81
call fcn.00407fdc
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x5f4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2a4]
mov eax, 0x82
call fcn.00407fdc
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x600]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x2a8]
mov eax, 0x83
call fcn.00407fdc
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x814]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x2ac]
mov eax, 0x84
call fcn.00407fdc
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x80c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x2b0]
mov eax, 0x85
call fcn.00407fdc
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x810]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2b4]
mov eax, 0x86
call fcn.00407fdc
mov ecx, dword [ebp - 0x2b4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x3c8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 7
lea edx, [ebp - 0x2bc]
mov eax, 0x87
call fcn.00407fdc
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x2b8]
call fcn.00407fdc
mov edx, dword [ebp - 0x2b8]
mov eax, dword [ebx + 0x3cc]
call fcn.00443d50
push 0
lea edx, [ebp - 0x2c0]
mov eax, 0x88
call fcn.00407fdc
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x3d4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xa
lea edx, [ebp - 0x2c8]
mov eax, 0x89
call fcn.00407fdc
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x2c4]
call fcn.00407fdc
mov edx, dword [ebp - 0x2c4]
mov eax, dword [ebx + 0x3d8]
call fcn.00443d50
push 0
lea edx, [ebp - 0x2cc]
mov eax, 0x8a
call fcn.00407fdc
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x3d0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xa
lea edx, [ebp - 0x2d4]
mov eax, 0x8b
call fcn.00407fdc
mov ecx, dword [ebp - 0x2d4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x2d0]
call fcn.00407fdc
mov edx, dword [ebp - 0x2d0]
mov eax, dword [ebx + 0x3dc]
call fcn.00443d50
push 0
lea edx, [ebp - 0x2d8]
mov eax, 0x8c
call fcn.00407fdc
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x38c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2dc]
mov eax, 0x8d
call fcn.00407fdc
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x388]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea eax, [ebp - 0x2e0]
push eax
lea edx, [ebp - 0x2e4]
mov eax, 0x8e
call fcn.00407fdc
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebx + 0x384]
call fcn.00443d50
push 0
lea edx, [ebp - 0x2e8]
mov eax, 0x8f
call fcn.00407fdc
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x870]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2ec]
mov eax, 0x90
call fcn.00407fdc
mov ecx, dword [ebp - 0x2ec]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x8d4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2f0]
mov eax, 0x91
call fcn.00407fdc
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9a0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2f4]
mov eax, 0x92
call fcn.00407fdc
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x91c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2f8]
mov eax, 0x93
call fcn.00407fdc
mov ecx, dword [ebp - 0x2f8]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x920]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x2fc]
mov eax, 0x94
call fcn.00407fdc
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x924]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x304]
mov eax, 0x95
call fcn.00407fdc
mov ecx, dword [ebp - 0x304]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x300]
call fcn.00407fdc
mov edx, dword [ebp - 0x300]
mov eax, dword [ebx + 0x950]
call fcn.00443d50
push 0
lea edx, [ebp - 0x30c]
mov eax, 0x96
call fcn.00407fdc
mov ecx, dword [ebp - 0x30c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x308]
call fcn.00407fdc
mov edx, dword [ebp - 0x308]
mov eax, dword [ebx + 0x954]
call fcn.00443d50
push 1
lea edx, [ebp - 0x310]
mov eax, 0x97
call fcn.00407fdc
mov ecx, dword [ebp - 0x310]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x92c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea eax, [ebp - 0x314]
push eax
lea edx, [ebp - 0x318]
mov eax, 0x98
call fcn.00407fdc
mov ecx, dword [ebp - 0x318]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x314]
mov eax, dword [ebx + 0x978]
call fcn.00443d50
push 0
lea eax, [ebp - 0x31c]
push eax
lea edx, [ebp - 0x320]
mov eax, 0x99
call fcn.00407fdc
mov ecx, dword [ebp - 0x320]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x31c]
mov eax, dword [ebx + 0x95c]
call fcn.00443d50
push 0x22b8
lea edx, [ebp - 0x328]
mov eax, 0x9a
call fcn.00407fdc
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x324]
call fcn.00407fdc
mov edx, dword [ebp - 0x324]
mov eax, dword [ebx + 0x968]
call fcn.00443d50
push 0
lea edx, [ebp - 0x32c]
mov eax, 0x9b
call fcn.00407fdc
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x974]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x330]
mov eax, 0x9c
call fcn.00407fdc
mov ecx, dword [ebp - 0x330]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x96c]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x334]
mov eax, 0x9d
call fcn.00407fdc
mov ecx, dword [ebp - 0x334]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0x9b4]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x338]
mov eax, 0x9e
call fcn.00407fdc
mov ecx, dword [ebp - 0x338]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9b8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x340]
mov eax, 0x9f
call fcn.00407fdc
mov ecx, dword [ebp - 0x340]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x33c]
call fcn.00407fdc
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebx + 0x9bc]
call fcn.00443d50
push 0
lea edx, [ebp - 0x348]
mov eax, 0xa0
call fcn.00407fdc
mov ecx, dword [ebp - 0x348]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x344]
call fcn.00407fdc
mov edx, dword [ebp - 0x344]
mov eax, dword [ebx + 0x668]
call fcn.00443d50
push 0xa0
lea edx, [ebp - 0x350]
mov eax, 0xa1
call fcn.00407fdc
mov ecx, dword [ebp - 0x350]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x34c]
call fcn.00407fdc
mov edx, dword [ebp - 0x34c]
mov eax, dword [ebx + 0x9e0]
call fcn.00443d50
push 0
lea edx, [ebp - 0x354]
mov eax, 0xa2
call fcn.00407fdc
mov ecx, dword [ebp - 0x354]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9e8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x358]
mov eax, 0xa3
call fcn.00407fdc
mov ecx, dword [ebp - 0x358]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9f4]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x35c]
mov eax, 0xa4
call fcn.00407fdc
mov ecx, dword [ebp - 0x35c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9f0]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x360]
mov eax, 0xa5
call fcn.00407fdc
mov ecx, dword [ebp - 0x360]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0x9f8]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0xa
lea edx, [ebp - 0x368]
mov eax, 0xa6
call fcn.00407fdc
mov ecx, dword [ebp - 0x368]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
lea edx, [ebp - 0x364]
call fcn.00407fdc
mov edx, dword [ebp - 0x364]
mov eax, dword [ebx + 0xa00]
call fcn.00443d50
push 0
lea edx, [ebp - 0x36c]
mov eax, 0xa7
call fcn.00407fdc
mov ecx, dword [ebp - 0x36c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa04]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea eax, [ebp - 0x370]
push eax
lea edx, [ebp - 0x374]
mov eax, 0xa8
call fcn.00407fdc
mov ecx, dword [ebp - 0x374]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov edx, dword [ebp - 0x370]
mov eax, dword [ebx + 0xa10]
call fcn.00443d50
push 1
lea edx, [ebp - 0x378]
mov eax, 0xa9
call fcn.00407fdc
mov ecx, dword [ebp - 0x378]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa3c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 1
lea edx, [ebp - 0x37c]
mov eax, 0xaa
call fcn.00407fdc
mov ecx, dword [ebp - 0x37c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa40]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x380]
mov eax, 0xab
call fcn.00407fdc
mov ecx, dword [ebp - 0x380]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0xa4c]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x384]
mov eax, 0xac
call fcn.00407fdc
mov ecx, dword [ebp - 0x384]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, eax
mov eax, dword [ebx + 0xa50]
mov ecx, dword [eax]
call dword [ecx + 0xd0]
push 0
lea edx, [ebp - 0x388]
mov eax, 0xad
call fcn.00407fdc
mov ecx, dword [ebp - 0x388]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa58]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x38c]
mov eax, 0xae
call fcn.00407fdc
mov ecx, dword [ebp - 0x38c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa5c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x390]
mov eax, 0xaf
call fcn.00407fdc
mov ecx, dword [ebp - 0x390]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa60]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x394]
mov eax, 0xb0
call fcn.00407fdc
mov ecx, dword [ebp - 0x394]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa64]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x398]
mov eax, 0xb1
call fcn.00407fdc
mov ecx, dword [ebp - 0x398]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa68]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
push 0
lea edx, [ebp - 0x39c]
mov eax, 0xb2
call fcn.00407fdc
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 4]
mov eax, dword [esi]
mov esi, dword [eax]
call dword [esi + 0x10]
mov edx, eax
mov eax, dword [ebx + 0xa6c]
mov ecx, dword [eax]
call dword [ecx + 0xcc]
mov dword [0x47cc38], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46c830
lea eax, [ebp - 0x39c]
mov edx, 0x64
call fcn.00403ff4
lea eax, [ebp - 0x20c]
mov edx, 0x64
call fcn.00403ff4
lea eax, [ebp - 0x7c]
mov edx, 0x1a
call fcn.00403ff4
lea eax, [ebp - 0x10]
call fcn.00403fd0
lea eax, [ebp - 4]
call fcn.00403fd0
ret