Function at 0x4ea170
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x8b7144
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x300
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov eax, 0xffffffff
mov dword [edx + 4], eax
test ecx, ecx
mov dword [edx], eax
je 0x4ea1be
mov eax, 0xffffffff
mov edx, dword [ebp + 0x14]
mov dword [edx + 4], eax
mov dword [edx], eax
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4ea1d2
mov eax, 0xffffffff
mov edx, dword [ebp + 0x18]
mov dword [edx + 4], eax
mov dword [edx], eax
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x4ea1e6
mov eax, 0xffffffff
mov edx, dword [ebp + 0x1c]
mov dword [edx + 4], eax
mov dword [edx], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x14]
mov dword [eax], 0
call fcn.004e2de4
cmp eax, 5
je 0x4ea211
xor eax, eax
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
lea eax, [ebp - 0x150]
mov ecx, dword [ebp - 0x14]
push eax
call fcn.004e4770
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov ecx, dword [ebp - 0x14]
push eax
call fcn.004e4b7c
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x150]
call fcn.004e44ac
cmp eax, 1
je 0x4ea3a4
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x30c], eax
mov dword [ebp - 4], 2
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea2d2
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x304], eax
mov dword [ebp - 4], 3
mov dword [ebp - 4], 4
mov dword [ebp - 4], 3
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea288
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 4], 5
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea36e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 4], 6
mov dword [ebp - 4], 7
mov dword [ebp - 4], 6
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea324
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
lea eax, [ebp - 0x130]
mov ecx, dword [ebp - 0x14c]
push eax
call fcn.004e22f4
mov dword [ebp - 4], 8
push dword [ebp - 0x130]
call fcn.004232ec
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x130]
call fcn.00406220
mov eax, dword [ebp + 8]
mov edx, dword [eax]
test edx, edx
jge 0x4ea46d
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 4], 9
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea672
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 4], 0xb
mov dword [ebp - 4], 0xa
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea427
jmp 0x4ea669
lea ecx, [ebp - 0x140]
call fcn.004e2e74
movzx eax, al
test eax, eax
je 0x4ea504
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea74d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 4], 0x10
mov dword [ebp - 4], 0x11
mov dword [ebp - 4], 0x10
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea4be
jmp 0x4ea744
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.0041f980
test eax, eax
je 0x4ea822
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea597
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 0x16
mov dword [ebp - 4], 0x17
mov dword [ebp - 4], 0x16
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea54d
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea633
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x294], eax
mov dword [ebp - 4], 0x19
mov dword [ebp - 4], 0x1a
mov dword [ebp - 4], 0x19
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea5e9
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea70e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 4], 0xe
mov dword [ebp - 4], 0xd
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea6c4
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4ea7e9
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 4], 0x14
mov dword [ebp - 4], 0x13
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4ea79f
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x138]
mov dword [ebp - 0x14], eax
je 0x4eaac6
lea ecx, [ebp - 0x12c]
mov eax, dword [ebp - 0x14]
lea edx, [eax + 8]
push edx
call fcn.0040618c
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
mov eax, dword [ebp - 0x14]
lea edx, [eax + 0xc]
push edx
call fcn.0040618c
mov dword [ebp - 4], 0x1c
mov edi, dword [ebp - 0x12c]
test edi, edi
jne 0x4ea91c
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 4], 0x1d
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eac25
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x284], eax
mov dword [ebp - 4], 0x1e
mov dword [ebp - 4], 0x1f
mov dword [ebp - 4], 0x1e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4ea8d6
jmp 0x4eac1c
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4ea92e
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4ea926
test eax, eax
jle 0x4ea877
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax]
cmp ebx, 0xffffffff
je 0x4eb7cf
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 4]
cmp edx, 0xffffffff
je 0x4eb60c
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
test edx, edx
je 0x4eaa85
cmp edx, 0x73
je 0x4eb0c0
cmp edx, 0x70
jne 0x4ea9e0
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x4eae6e
mov eax, dword [ebp + 0x1c]
mov edx, dword [eax + 4]
cmp edx, 0xffffffff
jne 0x4ea9e0
lea esi, [ebp - 0x124]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4ea98a
mov al, byte [ebp + 0x20]
test al, al
je 0x4ea9b7
lea edx, [ebp - 0x124]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0xc]
push eax
push edx
push ecx
call fcn.00421df8
test eax, eax
jne 0x4eacf7
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
jmp 0x4eaab1
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 4], 0x4d
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eafee
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x184], eax
mov dword [ebp - 4], 0x4e
mov dword [ebp - 4], 0x4f
mov dword [ebp - 4], 0x4e
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eaa3f
jmp 0x4eafe5
movsx eax, byte [edi]
mov edx, dword [ebp + 0x10]
mov dword [edx], eax
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
cmp eax, dword [ebp - 0x138]
mov dword [ebp - 0x14], eax
jne 0x4ea837
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0x53
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eab47
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x164], eax
mov dword [ebp - 4], 0x54
mov dword [ebp - 4], 0x55
mov dword [ebp - 4], 0x54
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eaafd
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 4], 0x56
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eabe3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x154], eax
mov dword [ebp - 4], 0x57
mov dword [ebp - 4], 0x58
mov dword [ebp - 4], 0x57
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eab99
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
mov eax, 1
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 4], 0x20
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eacc1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x274], eax
mov dword [ebp - 4], 0x21
mov dword [ebp - 4], 0x22
mov dword [ebp - 4], 0x21
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eac77
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 4], 0x47
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4ead9c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 4], 0x48
mov dword [ebp - 4], 0x49
mov dword [ebp - 4], 0x48
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4ead52
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 4], 0x4a
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eae38
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x194], eax
mov dword [ebp - 4], 0x4b
mov dword [ebp - 4], 0x4c
mov dword [ebp - 4], 0x4b
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eadee
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 4], 0x41
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4eaf13
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 4], 0x42
mov dword [ebp - 4], 0x43
mov dword [ebp - 4], 0x42
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4eaec9
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 4], 0x44
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4eafaf
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 4], 0x45
mov dword [ebp - 4], 0x46
mov dword [ebp - 4], 0x45
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4eaf65
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 4], 0x50
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4eb08a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x174], eax
mov dword [ebp - 4], 0x51
mov dword [ebp - 4], 0x52
mov dword [ebp - 4], 0x51
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4eb040
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4eb495
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4eb495
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + 4]
cmp ecx, 0xffffffff
jne 0x4ea969
mov eax, dword [ebp + 0x14]
lea ebx, [eax + 9]
push 0xc
push edi
push ebx
call fcn.00898e60
add esp, 0xc
mov esi, dword [ebp + 0x14]
mov al, byte [ebp + 0x20]
test al, al
mov byte [esi + 0x15], 0
je 0x4eb1c4
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0xc]
push eax
push ebx
push edx
call fcn.004211dc
test eax, eax
je 0x4eb1c4
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x20c], eax
mov dword [ebp - 4], 0x35
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4eb24c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x204], eax
mov dword [ebp - 4], 0x36
mov dword [ebp - 4], 0x37
mov dword [ebp - 4], 0x36
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4eb17e
jmp 0x4eb243
mov edi, dword [ebp - 0x128]
test edi, edi
je 0x4eb21a
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4eb1e0
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4eb1d8
test eax, eax
jle 0x4eb21a
mov eax, dword [ebp + 0x18]
lea ebx, [eax + 9]
push 0xc
push edi
push ebx
call fcn.00898e60
add esp, 0xc
mov esi, dword [ebp + 0x18]
mov al, byte [ebp + 0x20]
test al, al
mov byte [esi + 0x15], 0
je 0x4eb21a
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp + 0xc]
push eax
push ebx
push edx
call fcn.004211dc
test eax, eax
jne 0x4eb31e
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
jmp 0x4eaab1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], 0x38
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb2e8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 4], 0x39
mov dword [ebp - 4], 0x3a
mov dword [ebp - 4], 0x39
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb29e
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 4], 0x3b
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb3c3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 4], 0x3c
mov dword [ebp - 4], 0x3d
mov dword [ebp - 4], 0x3c
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb379
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 4], 0x3e
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb45f
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 4], 0x3f
mov dword [ebp - 4], 0x40
mov dword [ebp - 4], 0x3f
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb415
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 4], 0x2f
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4eb53a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x224], eax
mov dword [ebp - 4], 0x30
mov dword [ebp - 4], 0x31
mov dword [ebp - 4], 0x30
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4eb4f0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 4], 0x32
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x4eb5d6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0x33
mov dword [ebp - 4], 0x34
mov dword [ebp - 4], 0x33
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp eax, edx
jne 0x4eb58c
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x18], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
push edi
call fcn.0089ab9d
pop ecx
mov esi, dword [ebp + 0xc]
mov dword [esi + 4], eax
mov dl, byte [ebp + 0x20]
test dl, dl
je 0x4eb62f
mov edx, dword [ebp + 0xc]
push edx
push eax
push ebx
call fcn.0041fde8
test eax, eax
jne 0x4eb658
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
jmp 0x4eaab1
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb6fd
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x244], eax
mov dword [ebp - 4], 0x2a
mov dword [ebp - 4], 0x2b
mov dword [ebp - 4], 0x2a
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb6b3
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 4], 0x2c
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb799
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x234], eax
mov dword [ebp - 4], 0x2d
mov dword [ebp - 4], 0x2e
mov dword [ebp - 4], 0x2d
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb74f
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c
movsx eax, byte [edi]
push eax
call fcn.00898f5e
pop ecx
movsx eax, al
cmp eax, 0x41
jl 0x4eb817
cmp eax, 0x5a
jg 0x4eb817
add eax, 0xffffffbf
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
jmp 0x4eaab1
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x128]
call fcn.00406220
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00406220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 4], 0x23
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb8bc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 4], 0x25
mov dword [ebp - 4], 0x24
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb872
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor eax, eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x150]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 4], 0x26
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edx
je 0x4eb958
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x254], eax
mov dword [ebp - 4], 0x27
mov dword [ebp - 4], 0x28
mov dword [ebp - 4], 0x27
lea ecx, [eax + 0xc]
call fcn.00406220
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 8]
call fcn.00406220
mov eax, dword [ebp - 0x14]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edx
jne 0x4eb90e
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push eax
call fcn.00888fb0
pop ecx
xor edx, edx
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x14c], edx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x1c