Function at 0x4ebf30
Capabilities:
Create thread
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x392c
call fcn.0059bef0
mov eax, dword [0x6ac30c]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, word [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
add eax, 0xfffffe0c
mov esi, ecx
mov dword [ebp - 0x3928], esi
cmp eax, 0x13b
ja case.default.0x4ebf70
movzx eax, byte [eax + 0x4f380c]
push edi
jmp dword [eax*4 + 0x4f3564]
lea edi, [ebx + 4]
mov dword [ebp - 0x3918], 0x50
lea ecx, [edi - 4]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004ccbf0
cmp word [edi + 0x12], 0
je 0x4ebfdd
mov ecx, 0x6d3dc8
call fcn.0046d160
test eax, eax
je 0x4ebfc6
mov eax, dword [edi]
push eax
mov ecx, esi
call fcn.004d6f20
test eax, eax
je 0x4ebfdd
mov edx, 0x200
cmp word [eax + 0x4a], dx
je 0x4ebfdd
mov eax, dword [edi]
push eax
jmp 0x4ebfc9
mov edx, dword [edi]
push edx
movzx eax, word [edi + 4]
movzx ecx, word [edi + 0x12]
push eax
push ecx
mov ecx, 0x60d9d8
call fcn.0055b9f0
add edi, 0x44
dec dword [ebp - 0x3918]
jne 0x4ebf84
lea esi, [ebx + 0x17ec]
mov edi, 0x50
mov ecx, dword [0x6d41dc]
lea edx, [esi - 4]
push edx
call fcn.004ccbf0
movzx eax, word [esi + 0x12]
test ax, ax
je 0x4ec01e
mov ecx, dword [esi]
movzx edx, word [esi + 4]
push ecx
push edx
push eax
mov ecx, 0x60d9d8
call fcn.0055b9f0
add esi, 0x44
dec edi
jne 0x4ebff3
lea esi, [ebx + 0x1544]
mov edi, 0xa
nop
mov ecx, dword [0x6d41dc]
lea eax, [esi - 4]
push eax
call fcn.004ccbf0
movzx eax, word [esi + 0x12]
test ax, ax
je 0x4ec05b
mov ecx, dword [esi]
movzx edx, word [esi + 4]
push ecx
push edx
push eax
mov ecx, 0x60d9d8
call fcn.0055b9f0
add esi, 0x44
dec edi
jne 0x4ec030
lea esi, [ebx + 0x2d2c]
mov edi, 3
lea esp, [esp]
mov ecx, dword [0x6d43fc]
lea eax, [esi - 4]
push eax
call fcn.00543b40
movzx eax, word [esi + 0x12]
test ax, ax
je 0x4ec09b
mov ecx, dword [esi]
movzx edx, word [esi + 4]
push ecx
push edx
push eax
mov ecx, 0x60d9d8
call fcn.0055b9f0
add esi, 0x44
dec edi
jne 0x4ec070
lea esi, [ebx + 0x2e0a]
mov dword [ebp - 0x3918], 7
mov ecx, dword [0x6d4204]
lea edi, [esi - 0x16]
push edi
call fcn.00583dc0
movzx eax, word [esi]
test ax, ax
je 0x4ec0dc
mov ecx, dword [esi - 0x12]
movzx edx, word [esi - 0xe]
push ecx
push edx
push eax
mov ecx, 0x60d9d8
call fcn.0055b9f0
mov eax, dword [edi]
test eax, eax
je 0x4ec0fc
push eax
mov ecx, 0x6f7048
call fcn.00584ca0
test eax, eax
je 0x4ec0fc
push eax
mov ecx, 0x6f7048
call fcn.00586310
add esi, 0x44
dec dword [ebp - 0x3918]
jne 0x4ec0b1
add ebx, 0x2fd4
mov esi, 4
mov ecx, dword [0x6d4204]
lea eax, [ebx - 4]
push eax
call fcn.00583dc0
movzx eax, word [ebx + 0x12]
test ax, ax
je 0x4ec13d
mov ecx, dword [ebx]
movzx edx, word [ebx + 4]
push ecx
push edx
push eax
mov ecx, 0x60d9d8
call fcn.0055b9f0
add ebx, 0x44
dec esi
jne 0x4ec112
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx + 0x280e]
xor ecx, ecx
mov dword [ebp - 0xa], eax
mov word [ebp - 0x10], cx
add eax, 2
lea ecx, [ebp - 0x10]
mov dword [ebp - 0xe], eax
call fcn.00431010
test al, al
je 0x4ec331
movzx eax, al
add eax, 0xfffffff8
cmp eax, 5
ja case.default.0x4ec194
jmp dword [eax*4 + 0x4f3948]
push 0x44c5b0
push 0x96
push 0x50
lea edx, [ebp - 0x2ff4]
push edx
call fcn.004014d0
lea eax, [ebp - 0x2ff4]
push eax
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx ecx, word [ebx + 0x2802]
push ecx
lea edx, [ebp - 0x2ff4]
push edx
mov ecx, 0x6d5cf0
call fcn.004e0580
jmp case.default.0x4ec194
push 0x4d6540
push 0x96
push 0x5f
lea eax, [ebp - 0x38bc]
push eax
call fcn.004014d0
lea ecx, [ebp - 0x38bc]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx edx, word [ebx + 0x2804]
push edx
lea eax, [ebp - 0x38bc]
push eax
mov ecx, 0x6d5cf0
call fcn.004e5660
jmp case.default.0x4ec194
push 0x4d41b0
push 0x96
push 0x1c
lea ecx, [ebp - 0x117c]
push ecx
call fcn.004014d0
lea edx, [ebp - 0x117c]
push edx
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx eax, word [ebx + 0x2806]
push eax
lea ecx, [ebp - 0x117c]
push ecx
mov ecx, 0x6d5cf0
call fcn.004e2520
jmp case.default.0x4ec194
lea edx, [ebp - 0x10e4]
push edx
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx eax, word [ebx + 0x2808]
push eax
lea ecx, [ebp - 0x10e4]
push ecx
mov ecx, 0x6d9f28
call fcn.00546260
jmp case.default.0x4ec194
push 0x4d4170
push 0x96
push 0x2a
lea edx, [ebp - 0x19b0]
push edx
call fcn.004014d0
lea eax, [ebp - 0x19b0]
push eax
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx ecx, word [ebx + 0x280a]
push ecx
lea edx, [ebp - 0x19b0]
push edx
mov ecx, 0x6f7048
call fcn.005872a0
jmp case.default.0x4ec194
push 0x4d4190
push 0x96
push 0x14
lea eax, [ebp - 0xccc]
push eax
call fcn.004014d0
lea ecx, [ebp - 0xccc]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx edx, word [ebx + 0x280c]
push edx
lea eax, [ebp - 0xccc]
push eax
mov ecx, 0x6f7048
call fcn.00587320
lea ecx, [ebp - 0x10]
call fcn.00431050
lea ecx, [ebp - 0x10]
call fcn.00431010
test al, al
jne 0x4ec185
lea esi, [ebx + 0x2a]
mov edi, 0x96
lea esp, [esp]
cmp dword [esi], 0
je 0x4ec351
mov ecx, dword [0x6d42d8]
push esi
call fcn.00552500
add esi, 0x44
dec edi
jne 0x4ec340
mov ecx, dword [ebx + 0x22]
push ecx
mov ecx, dword [0x6d42d8]
call fcn.00551f10
mov edx, dword [0x6d42d8]
mov dword [edx + 0x258], 1
mov ecx, dword [0x6d41dc]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
mov ecx, dword [0x6d42d8]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
mov eax, dword [0x6d8f5c]
cmp byte [eax + 0xa9c], 0
je case.default.0x4eec58
mov ecx, dword [0x6d42d8]
push 1
call fcn.00552460
mov ecx, dword [0x6d42d8]
push 1
call fcn.005524a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx + 0x1016]
xor ecx, ecx
mov dword [ebp - 0xa], eax
mov word [ebp - 0x10], cx
add eax, 2
lea ecx, [ebp - 0x10]
mov dword [ebp - 0xe], eax
call fcn.00431010
test al, al
je 0x4ec497
movzx eax, al
sub eax, 8
je 0x4ec442
dec eax
jne 0x4ec47f
push 0x4d6540
push 0x3c
push 0x5f
lea edx, [ebp - 0x1758]
push edx
call fcn.004014d0
lea eax, [ebp - 0x1758]
push eax
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx ecx, word [ebx + 0x1014]
push ecx
lea edx, [ebp - 0x1758]
push edx
mov ecx, 0x6d5cf0
call fcn.004e5660
jmp 0x4ec47f
push 0x44c5b0
push 0x3c
push 0x50
lea eax, [ebp - 0x13d4]
push eax
call fcn.004014d0
lea ecx, [ebp - 0x13d4]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx edx, word [ebx + 0x1012]
push edx
lea eax, [ebp - 0x13d4]
push eax
mov ecx, 0x6d5cf0
call fcn.004e0580
lea ecx, [ebp - 0x10]
call fcn.00431050
lea ecx, [ebp - 0x10]
call fcn.00431010
test al, al
jne 0x4ec3f8
add ebx, 0x22
mov esi, 0x3c
nop
cmp dword [ebx], 0
je 0x4ec4b1
mov ecx, dword [0x6d43fc]
push ebx
call fcn.00543b40
add ebx, 0x44
dec esi
jne 0x4ec4a0
mov ecx, dword [0x6d43fc]
mov dword [ecx + 0x2c8], 1
mov ecx, 0x6d9f28
call fcn.00544c10
mov ecx, dword [0x6d43fc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
lea ecx, [ebx + 0x6a]
push ecx
mov ecx, esi
call fcn.004e0390
movzx edx, word [ebx + 0x2e]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edi, eax
add ebx, 0x26
test edi, edi
je 0x4ec532
push ebx
mov ecx, edi
call fcn.004d28e0
push 0
push 0x11
mov ecx, 0x602128
call fcn.0047abf0
jmp 0x4ecd66
push str.MP_ITEM_MONSTER_RAREOBTAIN_NOTIFY
push ebx
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
mov edi, eax
push edi
call fcn.004caad0
test eax, eax
jne 0x4ec564
push eax
push 0x1645
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push 0
push 0x11
mov ecx, 0x602128
call fcn.0047abf0
jmp 0x4ecd66
lea eax, [ebx + 0x28]
push eax
call fcn.004e0510
mov eax, dword [0x60db88]
mov edi, 1
mov dword [ebp - 0x391c], eax
mov dword [0x60db7c], 0
mov dword [ebp - 0x3928], edi
mov ecx, dword [0x6d4338]
push edi
call fcn.00560a40
mov dword [ebp - 0x3918], eax
test eax, eax
je 0x4ec645
mov edi, dword [0x6d41dc]
mov ecx, eax
call fcn.004d4130
movzx ecx, ax
push ecx
mov ecx, edi
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ec63f
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
mov ecx, edi
cmp dword [ebp - 0x391c], eax
jb 0x4ec66a
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
call eax
mov edi, dword [ebp - 0x391c]
push 0
push 0
push 0
lea ecx, [ebp - 0x3924]
sub edi, eax
push ecx
mov ecx, dword [ebp - 0x3918]
mov dword [ebp - 0x391c], edi
call fcn.004d4130
movzx edx, ax
push edx
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3928]
mov ecx, dword [0x6d4338]
push eax
call fcn.00560ce0
test edi, edi
jle 0x4ec691
mov edi, dword [ebp - 0x3928]
inc edi
mov dword [ebp - 0x3928], edi
cmp edi, 0x15
jl 0x4ec5a0
cmp dword [ebp - 0x391c], 0
jle 0x4ec691
mov dword [0x60db84], 0
jmp 0x4ec69c
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov dword [ebp - 0x3918], eax
call edx
sub eax, dword [ebp - 0x391c]
mov ecx, edi
push eax
mov eax, dword [ebp - 0x3918]
mov edx, dword [eax + 0x94]
call edx
mov eax, dword [0x60db88]
sub dword [0x60db84], eax
mov dword [0x60db7c], 0
mov ecx, dword [ebx + 0x22]
lea edi, [ebx + 0x28]
push edi
push ecx
mov ecx, dword [0x6d4338]
call fcn.00561490
mov ecx, dword [0x6d4338]
xor ebx, ebx
push ebx
call fcn.00560a40
test eax, eax
je 0x4ec738
mov ebx, dword [0x6d41dc]
mov ecx, eax
call fcn.004d4130
movzx edx, ax
push edx
mov ecx, ebx
call fcn.004cae60
mov ebx, eax
test ebx, ebx
je 0x4ec738
mov ecx, dword [edi]
mov eax, dword [ebx]
mov edx, dword [eax + 0x94]
push ecx
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x8c]
push 0
push 0
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
push eax
push edi
push ebx
mov ecx, esi
call fcn.004e5d00
mov ecx, dword [0x6d4338]
push ebx
push 0
call fcn.00561290
mov eax, dword [ebx]
mov edx, dword [eax + 0x68]
push 1
mov ecx, ebx
call edx
mov ecx, dword [0x6d4338]
call fcn.00560bc0
push 0xe1
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d4338]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 0
call edx
mov ecx, dword [0x6d4338]
cmp dword [ecx + 0x3f18], 0
jne 0x4ee7ac
test ebx, ebx
je case.default.0x4eec58
push ebx
push 0
call fcn.00561290
mov eax, dword [ebx]
mov edx, dword [eax + 0x68]
push 1
mov ecx, ebx
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d4338]
mov dword [0x60db7c], 0
call fcn.00560bc0
mov ecx, dword [0x6d4338]
call fcn.00560c20
mov ecx, dword [0x6d4338]
call fcn.00560c80
mov edi, 1
lea esp, [esp]
mov ecx, dword [0x6d4338]
push edi
call fcn.00560a40
test eax, eax
je 0x4ec81f
push 0
push 0
push 0
lea ecx, [ebp - 0x3924]
push ecx
mov ecx, eax
call fcn.004d4130
movzx edx, ax
push edx
mov ecx, esi
call fcn.004e5440
inc edi
cmp edi, 0x15
jl 0x4ec7f0
mov ecx, dword [0x6d4338]
push 2
call fcn.00560f00
push 0xe2
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d4338]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 0
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d4338]
mov dword [0x60db7c], 0
call fcn.00560bc0
mov ecx, dword [0x6d4338]
call fcn.00560c20
mov ecx, dword [0x6d4338]
call fcn.00560c80
push 0x5d801c
push 0x16d3
push str.ItemManager.cpp
call fcn.0040b590
mov ecx, dword [0x6d4338]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
add esp, 0xc
push 0
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00599ee0
mov eax, dword [ebx + 0x22]
add eax, 0xfffffffd
add esp, 0xc
cmp eax, 0xb
ja case.0x4ec906.5
jmp dword [eax*4 + 0x4f3960]
push 0x439
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4eca4c
push 0x43a
jmp 0x4eca3a
mov edi, 1
jmp 0x4ec940
mov ecx, dword [0x6d4338]
push edi
call fcn.00560a40
test eax, eax
je 0x4ec96f
push 0
push 0
push 0
lea ecx, [ebp - 0x3924]
push ecx
mov ecx, eax
call fcn.004d4130
movzx edx, ax
push edx
mov ecx, esi
call fcn.004e5440
inc edi
cmp edi, 0x15
jl 0x4ec940
mov ecx, dword [0x6d4338]
push 0
call fcn.00560a40
test eax, eax
je 0x4ec9bd
mov esi, dword [0x6d41dc]
mov ecx, eax
call fcn.004d4130
movzx eax, ax
push eax
mov ecx, esi
call fcn.004cae60
mov esi, eax
test esi, esi
je 0x4ec9bd
mov ecx, dword [0x6d4338]
push esi
push 0
call fcn.00561290
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
mov ecx, dword [0x6d4338]
push 3
call fcn.00560f00
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d4338]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 0
call eax
push 0x43b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4eca4c
push 0x43c
jmp 0x4eca3a
push 0x43d
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea eax, [ebp - 0x110]
push eax
jmp 0x4eca4c
push 0x441
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4eca4c
push 0x442
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea edx, [ebp - 0x110]
push edx
call fcn.0059a4c2
add esp, 8
lea eax, [ebp - 0x110]
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d4338]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
add esp, 0xc
push 0
call eax
mov ecx, dword [0x6d4338]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
push ebx
mov ecx, esi
call fcn.004e85c0
pop edi
pop esi
mov dword [0x604218], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push ebx
call fcn.004e8ec0
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
jmp 0x4f05d3
xor edi, edi
push edi
push edi
call fcn.004d53d0
push 2
push edi
mov ecx, esi
call fcn.004d53d0
push 0xa
push edi
mov ecx, esi
call fcn.004d53d0
push 4
push edi
mov ecx, esi
call fcn.004d53d0
push 5
push edi
mov ecx, esi
call fcn.004d53d0
cmp byte [ebx + 0x26], 0
mov dword [ebp - 0x3918], edi
mov dword [ebp - 0x3920], edi
jbe 0x4ecc8e
nop
movzx eax, word [ebp - 0x3920]
mov ecx, eax
shl ecx, 4
push 0
add ecx, eax
movzx eax, word [ebx + ecx*4 + 0x31]
push 0
lea edi, [ebx + ecx*4]
push 0
lea edx, [ebp - 0x3918]
push edx
push eax
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
push str.MP_ITEM_DIVIDE_ACK
add edi, 0x29
push edi
mov ecx, esi
call fcn.004dabe0
mov edi, eax
push edi
mov ecx, esi
call fcn.004d54a0
test eax, eax
jne 0x4ecbc6
push eax
push 0x1741
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov edx, dword [edi]
mov eax, dword [edx + 0x84]
mov ecx, edi
call eax
test ax, ax
je 0x4ecc73
mov edx, dword [edi]
mov eax, dword [edx + 0x84]
lea ecx, [ebp - 0xc]
push ecx
mov ecx, edi
call eax
movzx ecx, ax
push ecx
call fcn.0055a7b0
lea edx, [ebp - 0xc]
add esp, 8
mov dword [ebp - 0x3928], 0
mov dword [ebp - 0x391c], edx
lea ebx, [ebx]
mov eax, dword [ebp - 0x391c]
cmp word [eax], 0
je 0x4ecc57
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
push 0
push 0
mov ecx, edi
call eax
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x7c]
mov ecx, edi
call eax
mov edx, dword [ebp - 0x391c]
movzx ecx, ax
mov ax, word [edx]
add ax, word [ebp - 0x3928]
push ecx
dec ax
movzx ecx, ax
push ecx
mov ecx, 0x60d9d8
call fcn.0055bb90
mov eax, dword [ebp - 0x3928]
add dword [ebp - 0x391c], 2
add eax, 0xa
mov dword [ebp - 0x3928], eax
cmp ax, 0x28
jb 0x4ecc10
mov eax, dword [ebp - 0x3920]
movzx edx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4ecb60
xor edi, edi
mov ecx, 0x60d9d8
call fcn.0055b060
mov dword [0x604218], edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
xor edi, edi
cmp byte [ebx + 0x26], 0
mov dword [ebp - 0x3920], edi
jbe 0x4ecd66
movzx eax, word [ebp - 0x3920]
mov ecx, eax
shl ecx, 4
add ecx, eax
movzx edx, word [ebx + ecx*4 + 0x31]
lea eax, [ebx + ecx*4]
mov ecx, dword [0x6d41dc]
push edx
mov dword [ebp - 0x3918], eax
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ecd04
mov eax, dword [ebp - 0x3918]
add eax, 0x29
push eax
mov ecx, edi
call fcn.004d28e0
jmp 0x4ecd3f
mov ecx, dword [ebp - 0x3918]
add ecx, 0x29
push str.MP_ITEM_MONSTER_OBTAIN_NOTIFY
push ecx
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
mov edi, eax
push edi
call fcn.004caad0
test eax, eax
jne 0x4ecd3f
push eax
push 0x176d
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push 0
push 0x11
mov ecx, 0x602128
call fcn.0047abf0
mov eax, dword [ebp - 0x3920]
movzx edx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4eccc3
push 0x1013
mov ecx, 0x604150
call fcn.004c56f0
test eax, eax
je 0x4ecd82
push 0
mov ecx, eax
call fcn.0043d640
test edi, edi
je 0x4ecdbe
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x79
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
add esp, 0x10
mov ecx, edi
call edx
push eax
mov ecx, esi
call fcn.004d5550
mov ecx, 0x60d9d8
call fcn.0055b060
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6fa0
test eax, eax
je case.default.0x4eec58
push edi
call fcn.004d5780
mov ecx, 0x6d5cf0
call fcn.004d7820
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x82e
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x33
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 0x22]
cmp ebx, 7
je 0x4ece52
cmp ebx, 3
je 0x4ece52
push 0
push 0x179b
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 5
jmp 0x4f05c8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 4
push 0
mov ecx, esi
call fcn.004d53d0
push 5
jmp 0x4f05d3
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
cmp dword [ebx + 0x22], 0
je 0x4ecee4
push 0
push 0x17bb
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push 0
push 0x17bc
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov ecx, 0x604150
call fcn.004c8da0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
push 0
push 0x17c8
push str.ItemManager.cpp
call fcn.0040b590
mov ecx, dword [0x6d41dc]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
add esp, 0xc
push 0
call edx
cmp dword [ebx + 0x22], 4
je 0x4ecf72
mov ecx, 0x604150
call fcn.004c8da0
push 0x31f
jmp 0x4f3536
mov edx, dword [ebx + 0x22]
push edx
mov ecx, 0x6d8f58
call fcn.0052fc20
mov esi, eax
xor edi, edi
cmp esi, edi
je case.default.0x4eec58
cmp byte [esi + 0x128], 1
jne case.default.0x4eec58
movzx eax, byte [ebx + 0x26]
dec eax
cmp eax, 3
ja case.default.0x4eec58
jmp dword [eax*4 + 0x4f3990]
cmp dword [esi + 0x40c], edi
je 0x4ed014
push str.t_ba_070.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
mov word [ebp - 0x38d0], ax
fstp dword [ebp - 0x38c8]
push 1
lea eax, [ebp - 0x38d0]
push eax
push 0xfffffffffffffff1
mov ecx, esi
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push str.m_ba_070.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
push 1
fstp dword [ebp - 0x38c8]
lea ecx, [ebp - 0x38d0]
push ecx
push 0xfffffffffffffff1
mov ecx, esi
mov word [ebp - 0x38d0], ax
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [esi + 0x40c], edi
je 0x4ed0c4
push str.t_ba_071.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
push 1
fstp dword [ebp - 0x38c8]
lea edx, [ebp - 0x38d0]
push edx
push 0xfffffffffffffff0
mov ecx, esi
mov word [ebp - 0x38d0], ax
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push str.m_ba_071.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
mov word [ebp - 0x38d0], ax
fstp dword [ebp - 0x38c8]
push 1
lea eax, [ebp - 0x38d0]
push eax
push 0xfffffffffffffff0
mov ecx, esi
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [esi + 0x40c], edi
je 0x4ed174
push str.t_ba_077.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
push 1
fstp dword [ebp - 0x38c8]
lea ecx, [ebp - 0x38d0]
push ecx
push 0xffffffffffffffef
mov ecx, esi
mov word [ebp - 0x38d0], ax
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push str.m_ba_077.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
push 1
fstp dword [ebp - 0x38c8]
lea edx, [ebp - 0x38d0]
push edx
push 0xffffffffffffffef
mov ecx, esi
mov word [ebp - 0x38d0], ax
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [esi + 0x40c], edi
je 0x4ed224
push str.t_ba_078.beff
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
mov word [ebp - 0x38d0], ax
fstp dword [ebp - 0x38c8]
push 1
lea eax, [ebp - 0x38d0]
push eax
push 0xffffffffffffffee
mov ecx, esi
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x5d7f68
call fcn.0040c1b0
fldz
add esp, 4
fst dword [ebp - 0x38c0]
push edi
fst dword [ebp - 0x38c4]
push 1
fstp dword [ebp - 0x38c8]
lea ecx, [ebp - 0x38d0]
push ecx
push 0xffffffffffffffee
mov ecx, esi
mov word [ebp - 0x38d0], ax
mov dword [ebp - 0x38cc], edi
call fcn.0052dc50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [ebx + 0x22]
push edx
call fcn.004d51d0
dec dword [esi + 0x298]
movzx eax, al
cmp eax, 0xb
ja case.0x4ed29b.2
movzx ecx, byte [eax + 0x4f39b0]
jmp dword [ecx*4 + 0x4f39a0]
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edi, eax
test edi, edi
je case.default.0x4eec58
mov ecx, edi
call fcn.004d2860
test eax, 0x200
je 0x4ed70a
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
cmp eax, 1
jbe 0x4ed326
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push 0xffffffffffffffff
push eax
call fcn.004cad90
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
push eax
mov ecx, 0x6b03d4
call fcn.004319e0
test eax, eax
je 0x4ed35b
movzx ecx, word [eax]
mov edx, dword [eax + 4]
push 0
push ecx
mov ecx, dword [0x6d8f5c]
push edx
add ecx, 0x69c
call fcn.00417960
jmp 0x4ed35b
movzx ecx, word [ebx + 0x22]
push 0
push 0
push 0
lea eax, [ebp - 0x3918]
push eax
push ecx
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
test eax, eax
je 0x4ed35b
push eax
mov ecx, esi
call fcn.004d7420
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcf28
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcf67
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcf6f
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcf6e
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcfe1
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcfe7
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcff0
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcff2
je 0x4ed6ab
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcfac
je 0x4ed6ab
mov ecx, edi
call fcn.004d2860
test eax, 0x200
je case.default.0x4eec58
mov ecx, edi
call fcn.004d2860
mov ecx, edi
cmp eax, 0x200
jne 0x4ed5ba
call fcn.004d2890
cmp word [eax + 0xd2], 0
jne 0x4ed45c
mov ecx, edi
call fcn.004d2890
fld dword [eax + 0xd4]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4ed489
mov ecx, dword [0x6d8f5c]
mov esi, 1
cmp dword [ecx + 0x40c], esi
mov ecx, 0x6d2020
jne 0x4ed480
push 0xcee
call fcn.00462210
jmp 0x4ed48e
push 0x46
call fcn.00462210
jmp 0x4ed48e
mov esi, 1
mov ecx, edi
call fcn.004d2890
cmp word [eax + 0xd8], 0
jne 0x4ed4b7
mov ecx, edi
call fcn.004d2890
fld dword [eax + 0xdc]
fldz
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4ed4d8
mov edx, dword [0x6d8f5c]
mov ecx, 0x6d2020
cmp dword [edx + 0x40c], esi
jne 0x4ed4d1
push 0xcef
jmp 0x4ed4d3
push 0x47
call fcn.00462210
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
cmp eax, 0xcf27
je 0x4ed518
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
cmp eax, 0xcf66
je 0x4ed518
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
cmp eax, 0xcf75
je 0x4ed518
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
cmp eax, 0xc5a5
jne 0x4ed538
mov eax, dword [0x6d8f5c]
mov ecx, 0x6d2020
cmp dword [eax + 0x40c], esi
jne 0x4ed531
push 0xcf5
jmp 0x4ed533
push 0x4d
call fcn.00462210
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcfe0
je 0x4ed55c
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
cmp eax, 0xcfe6
jne 0x4ed907
mov ecx, dword [0x6d8f5c]
cmp dword [ecx + 0x40c], esi
mov ecx, 0x6d2020
jne 0x4ed596
push 0xcf5
call fcn.00462210
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x4d
call fcn.00462210
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
call fcn.004d2860
cmp eax, 0x201
jne 0x4ed61c
mov eax, dword [0x6d9f9c]
test eax, eax
je 0x4ed907
mov edx, dword [eax + 0x129]
push 0
push 0
push 0
push edx
push 0
lea ecx, [ebp - 0x3908]
push ecx
push eax
push 0xc51
mov ecx, 0x6d2020
mov dword [ebp - 0x3908], eax
call fcn.00461b70
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, edi
call fcn.004d2860
cmp eax, 0x22b
jne 0x4ed907
fldz
mov ecx, 0x7530
fld dword [0x6f71c0]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x4ed678
fmul qword [0x5d7f60]
fnstcw word [ebp - 0x391a]
movzx eax, word [ebp - 0x391a]
or eax, 0xc00
mov dword [ebp - 0x3918], eax
fldcw word [ebp - 0x3918]
fistp qword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
fldcw word [ebp - 0x391a]
jmp 0x4ed67a
fstp st(0)
push 0
push ecx
mov ecx, dword [0x6d8f5c]
add ecx, 0x69c
call fcn.004178d0
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [0x6d8f5c]
cmp dword [edx + 0x40c], 1
mov ecx, 0x6d2020
jne 0x4ed6e6
push 0xcf6
call fcn.00462210
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x4e
call fcn.00462210
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
test eax, 0x8000
jne 0x4ed78f
test eax, 0x1000
jne 0x4ed78f
test eax, 0x400
je 0x4ed772
movzx ecx, word [ebx + 0x22]
push 0
push 0
push 0
lea eax, [ebp - 0x3918]
push eax
push ecx
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
mov edx, dword [0x6d8f5c]
push edx
push 0x38
mov ecx, 0x6003d0
call fcn.00436200
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
test eax, 0x4000
je 0x4ed825
cmp eax, 0x4001
je 0x4ed78f
cmp eax, 0x4024
jne 0x4ed907
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
cmp eax, 1
jbe 0x4ed7cf
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push 0xffffffffffffffff
push eax
call fcn.004cad90
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [ebx + 0x22]
push 0
push 0
push 0
lea ecx, [ebp - 0x3918]
push ecx
push edx
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
test eax, eax
je 0x4ed907
push eax
mov ecx, esi
call fcn.004d7420
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
test al, 0x40
jne 0x4ed907
push 0
push 0x1900
jmp 0x4ed8fa
push 0
push 0x1906
jmp 0x4ed8fa
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov edi, eax
mov ecx, edi
call fcn.004d2860
test eax, 0x100
je 0x4ed907
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
cmp eax, 1
jbe 0x4ed88e
movzx ecx, word [ebx + 0x22]
push 0xffffffffffffffff
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cad90
jmp 0x4ed8c3
movzx eax, word [ebx + 0x22]
push 0
push 0
push 0
lea edx, [ebp - 0x3918]
push edx
push eax
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
test eax, eax
je 0x4ed8c3
push eax
mov ecx, esi
call fcn.004d7420
mov ecx, dword [0x6d8f5c]
push ecx
push 0x44
mov ecx, 0x6003d0
call fcn.00436200
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0x1926
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx edx, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
test eax, eax
je 0x4ed96e
mov ecx, dword [0x6d41e4]
push eax
call fcn.00588ee0
mov ecx, dword [0x6d41e4]
call fcn.00513ff0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
test eax, eax
je 0x4ed9d5
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d41e4]
push 0
push 3
call fcn.00513400
mov ecx, dword [0x6d41e4]
call fcn.00513ff0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d41e4]
push 0
push 3
call fcn.00513400
movzx edx, word [ebx + 0x26]
push 3
push 0
push 0
lea ecx, [ebp - 0x392c]
push ecx
push edx
mov ecx, esi
call fcn.004e5440
xor eax, eax
mov dword [ebp - 0x3918], 0
cmp ax, word [ebx + 0x38]
jae 0x4edb03
lea ecx, [ebx + 0x40]
mov dword [ebp - 0x391c], ecx
lea esp, [esp]
mov edx, dword [ebp - 0x391c]
mov eax, dword [edx - 6]
push eax
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4edac4
mov ecx, dword [ebp - 0x391c]
movzx edx, word [ecx - 2]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4edac4
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x391c]
sub eax, dword [ecx]
je 0x4edac4
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
mov dword [ebp - 0x3920], eax
call edx
mov ecx, dword [ebp - 0x391c]
sub eax, dword [ecx]
mov edx, dword [ebp - 0x3920]
push eax
mov eax, dword [edx + 0x94]
mov ecx, edi
call eax
jmp 0x4edae3
mov edx, dword [ebp - 0x391c]
movzx eax, word [edx - 2]
push 0
push 0
push 0
lea ecx, [ebp - 0x3924]
push ecx
push eax
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
movzx ecx, word [ebx + 0x38]
add dword [ebp - 0x391c], 0xa
inc eax
mov dword [ebp - 0x3918], eax
cmp eax, ecx
jl 0x4eda50
mov esi, dword [ebp - 0x392c]
mov dx, word [ebx + 0x26]
mov eax, dword [ebx + 0x28]
add esi, 0x2c0
mov ecx, 0x11
lea edi, [ebp - 0x3914]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x2c]
mov word [ebp - 0x390c], dx
mov dword [ebp - 0x3906], ecx
mov ecx, dword [ebp - 0x3928]
xor edx, edx
push eax
mov dword [ebp - 0x3910], eax
mov word [ebp - 0x38fe], dx
call fcn.004d7120
test eax, eax
jne 0x4edb58
mov dword [ebp - 0x390a], eax
mov eax, dword [ebp - 0x3910]
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov ecx, dword [0x6d41e4]
push 0
push 1
mov edi, eax
call fcn.00513400
test edi, edi
je 0x4edbc6
mov ecx, 0x100
test word [edi + 0x4a], cx
jne 0x4edbc6
mov ecx, dword [0x6d41dc]
lea edx, [ebp - 0x3914]
push edx
call fcn.004ccbf0
movzx eax, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov ecx, dword [0x6d41e4]
mov esi, eax
push esi
push 1
call fcn.005132f0
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
add edi, 4
push edi
push 0xcf
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d41e4]
call fcn.00513ff0
mov ecx, dword [0x6d41e4]
cmp dword [ecx + 0x4298], 0
je case.default.0x4eec58
push 1
push 3
call fcn.00513400
mov ecx, dword [0x6d41e4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d41e4]
push 1
push 3
call fcn.00513400
movzx edx, word [ebx + 0x26]
push 0
push 0
push 0
lea ecx, [ebp - 0x3924]
push ecx
push edx
mov ecx, esi
call fcn.004e5440
xor eax, eax
mov dword [ebp - 0x3920], 0
cmp ax, word [ebx + 0x38]
jae 0x4edd19
lea edi, [ebx + 0x40]
lea ecx, [ecx]
mov ecx, dword [edi - 6]
push ecx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4edce4
movzx edx, word [edi - 2]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edx, dword [eax]
mov dword [ebp - 0x3918], eax
mov ecx, eax
mov eax, dword [edx + 0x90]
call eax
sub eax, dword [edi]
je 0x4edce4
mov ecx, dword [ebp - 0x3918]
mov eax, dword [ecx]
mov edx, dword [eax + 0x90]
mov dword [ebp - 0x392c], eax
call edx
sub eax, dword [edi]
mov ecx, dword [ebp - 0x3918]
push eax
mov eax, dword [ebp - 0x392c]
mov edx, dword [eax + 0x94]
call edx
jmp 0x4edcfd
movzx ecx, word [edi - 2]
push 0
push 0
push 0
lea eax, [ebp - 0x3928]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3920]
movzx edx, word [ebx + 0x38]
inc eax
add edi, 0xa
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4edc80
mov ecx, dword [0x6d41e4]
push 1
push 1
call fcn.00513400
push 0xd0
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d41e4]
call fcn.00513ff0
mov ecx, dword [0x6d41e4]
cmp dword [ecx + 0x4298], 0
je case.default.0x4eec58
mov eax, dword [ecx]
mov edx, dword [eax + 0x54]
push 0
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d41e4]
call fcn.00512ea0
xor eax, eax
mov dword [ebp - 0x3920], 0
cmp ax, word [ebx + 0x38]
jae 0x4ede49
lea edi, [ebx + 0x40]
nop
mov ecx, dword [edi - 6]
push ecx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4ede14
movzx edx, word [edi - 2]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edx, dword [eax]
mov dword [ebp - 0x3918], eax
mov ecx, eax
mov eax, dword [edx + 0x90]
call eax
sub eax, dword [edi]
je 0x4ede14
mov ecx, dword [ebp - 0x3918]
mov eax, dword [ecx]
mov edx, dword [eax + 0x90]
mov dword [ebp - 0x392c], eax
call edx
sub eax, dword [edi]
mov ecx, dword [ebp - 0x3918]
push eax
mov eax, dword [ebp - 0x392c]
mov edx, dword [eax + 0x94]
call edx
jmp 0x4ede2d
movzx ecx, word [edi - 2]
push 0
push 0
push 0
lea eax, [ebp - 0x3924]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3920]
movzx edx, word [ebx + 0x38]
inc eax
add edi, 0xa
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4eddb0
push 0xd1
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d41e4]
call fcn.00513ff0
mov ecx, dword [0x6d41e4]
cmp dword [ecx + 0x4298], 0
je case.default.0x4eec58
push 1
push 3
call fcn.00513400
mov ecx, dword [0x6d41e4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x54]
push 0
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00599ee0
mov eax, dword [ebx + 0x22]
add eax, 0xffffffec
add esp, 0xc
cmp eax, 3
ja case.default.0x4edee0
jmp dword [eax*4 + 0x4f39bc]
push 0x43e
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4edf62
movzx eax, word [ebx + 0x26]
push 0
push 0
push 0
lea edx, [ebp - 0x3924]
push edx
push eax
mov ecx, esi
call fcn.004e5440
push 0x440
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4edf62
push 0x43f
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea edx, [ebp - 0x110]
push edx
jmp 0x4edf62
push 0x43a
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0059a4c2
add esp, 8
lea ecx, [ebp - 0x110]
push ecx
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d41e4]
add esp, 0xc
push 1
push 3
call fcn.00513400
mov ecx, dword [0x6d41e4]
call fcn.00513ff0
mov ecx, dword [0x6d41e4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 0x22], 0x3ff
jne 0x4edff1
mov ecx, dword [0x6d44d4]
mov dword [0x6d7aa8], 1
test ecx, ecx
je 0x4edff1
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
mov ecx, dword [0x6d4240]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
cmp dword [ebx + 0x22], 0x400
jne case.default.0x4eec58
mov dword [0x6d7aa8], 0
push 0x9fd
jmp 0x4f3536
mov edi, dword [0x6d44d4]
push 0x318
mov ecx, 0x604150
mov dword [ebp - 0x3928], edi
call fcn.004c56f0
test eax, eax
je 0x4ee03f
movzx ecx, word [ebx + 0x22]
push 1
push ecx
mov ecx, edi
call fcn.00476930
xor edx, edx
mov dword [ebp - 0x3920], 0
cmp dx, word [ebx + 0x26]
jae 0x4ee11e
lea eax, [ebx + 0x2c]
mov dword [ebp - 0x391c], eax
mov edi, edi
mov ecx, dword [ebp - 0x391c]
movzx edx, word [ecx]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ee0fe
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x391c]
cmp eax, dword [ecx + 2]
jbe 0x4ee0c4
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
mov dword [ebp - 0x392c], eax
call edx
mov ecx, dword [ebp - 0x391c]
sub eax, dword [ecx + 2]
mov edx, dword [ebp - 0x392c]
push eax
mov eax, dword [edx + 0x94]
mov ecx, edi
call eax
jmp 0x4ee0fe
mov edx, dword [ebp - 0x391c]
movzx eax, word [edx]
push 0
push 0
push 0
lea ecx, [ebp - 0x3918]
push ecx
push eax
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
test eax, eax
je 0x4ee0fe
push eax
mov ecx, esi
call fcn.004d7420
mov eax, dword [ebp - 0x3920]
movzx ecx, word [ebx + 0x26]
add dword [ebp - 0x391c], 0xa
inc eax
mov dword [ebp - 0x3920], eax
cmp eax, ecx
jl 0x4ee060
mov ecx, dword [ebp - 0x3928]
call fcn.0047fd50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 0x22]
lea eax, [ebx - 4]
cmp eax, 5
ja case.0x4ee147.5
jmp dword [eax*4 + 0x4f39cc]
push 0x7a
jmp 0x4f3536
push 0x441
jmp 0x4f3536
push 0x9f4
jmp 0x4f3536
push 0x9f9
jmp 0x4f3536
push ebx
push 0x9fc
jmp 0x4f1e8e
mov ecx, dword [0x6d44d4]
test ecx, ecx
je case.default.0x4eec58
movzx edx, word [ebx + 0x22]
push edx
call fcn.00475f50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx eax, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
test eax, eax
je 0x4ee1f3
mov ecx, dword [0x6d41e8]
push eax
call fcn.00588ee0
mov ecx, dword [0x6d41e8]
call fcn.00589fa0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x22]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
test eax, eax
je 0x4ee25a
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d41e8]
push 0
push 3
call fcn.00589520
mov ecx, dword [0x6d41e8]
call fcn.00589fa0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x22]
xor eax, eax
push ecx
mov ecx, esi
mov dword [ebp - 0x38d0], eax
mov dword [ebp - 0x38cc], eax
mov dword [ebp - 0x38c8], eax
mov dword [ebp - 0x38c4], eax
mov dword [ebp - 0x38c0], eax
call fcn.004d6f20
mov dword [ebp - 0x3924], eax
test eax, eax
je case.default.0x4eec58
test byte [eax + 0x4a], 0x80
je 0x4ee317
movzx edx, word [ebx + 0x26]
mov eax, dword [0x6d8f5c]
push edx
push eax
call fcn.004d5390
test eax, eax
je case.default.0x4eec58
mov ecx, dword [eax]
push ecx
mov ecx, 0x6f7048
call fcn.00584ca0
mov edx, dword [eax]
mov dword [ebp - 0x38d0], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x38cc], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x38c8], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x38c4], ecx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x38c0], edx
mov ecx, dword [0x6d41e8]
push 0
push 3
call fcn.00589520
movzx ecx, word [ebx + 0x26]
push 3
push 0
push 0
lea eax, [ebp - 0x3920]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
xor edx, edx
mov dword [ebp - 0x3918], 0
cmp dx, word [ebx + 0x38]
jae 0x4ee410
lea eax, [ebx + 0x40]
mov dword [ebp - 0x391c], eax
mov edi, edi
mov ecx, dword [ebp - 0x391c]
mov edx, dword [ecx - 6]
push edx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4ee3d4
mov eax, dword [ebp - 0x391c]
movzx ecx, word [eax - 2]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ee3d4
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
mov ecx, dword [ebp - 0x391c]
sub eax, dword [ecx]
je 0x4ee3d4
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
mov dword [ebp - 0x392c], eax
call edx
mov ecx, dword [ebp - 0x391c]
sub eax, dword [ecx]
mov edx, dword [ebp - 0x392c]
push eax
mov eax, dword [edx + 0x94]
mov ecx, edi
call eax
jmp 0x4ee3f0
mov edx, dword [ebp - 0x391c]
movzx eax, word [edx - 2]
push 0
push 0
push 0
lea ecx, [ebp - 8]
push ecx
push eax
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
movzx ecx, word [ebx + 0x38]
add dword [ebp - 0x391c], 0xa
inc eax
mov dword [ebp - 0x3918], eax
cmp eax, ecx
jl 0x4ee360
mov esi, dword [ebp - 0x3920]
mov dx, word [ebx + 0x26]
mov eax, dword [ebx + 0x28]
add esi, 0x2c0
mov ecx, 0x11
lea edi, [ebp - 0x3914]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x2c]
mov word [ebp - 0x390c], dx
mov dword [ebp - 0x3906], ecx
mov ecx, dword [ebp - 0x3928]
xor edx, edx
push eax
mov dword [ebp - 0x3910], eax
mov word [ebp - 0x38fe], dx
call fcn.004d7120
test eax, eax
jne 0x4ee465
mov dword [ebp - 0x390a], eax
mov ecx, dword [0x6d41dc]
lea eax, [ebp - 0x3914]
push eax
call fcn.004ccbf0
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov ecx, dword [0x6d41e8]
mov esi, eax
push esi
push 1
call fcn.005893f0
mov edx, dword [esi]
mov eax, dword [edx + 0x68]
push 1
mov ecx, esi
call eax
mov ecx, esi
call fcn.004d2890
add eax, 4
push eax
push 0xcf
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [ebp - 0x3924]
test byte [ecx + 0x4a], 0x80
je 0x4ee505
lea edx, [ebp - 0x38d0]
push edx
mov ecx, 0x6f7048
call fcn.005861f0
mov eax, dword [ebp - 0x38cc]
mov ecx, dword [ebp - 0x3928]
push eax
call fcn.004e77f0
mov ecx, dword [0x6d41e8]
call fcn.00589fa0
mov ecx, dword [0x6d41e8]
cmp dword [ecx + 0x4320], 0
je case.default.0x4eec58
push 1
push 3
call fcn.00589520
mov ecx, dword [0x6d41e8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d41e8]
push 1
push 3
call fcn.00589520
movzx edx, word [ebx + 0x26]
push 0
push 0
push 0
lea ecx, [ebp - 8]
push ecx
push edx
mov ecx, esi
call fcn.004e5440
xor eax, eax
mov dword [ebp - 0x3920], 0
cmp ax, word [ebx + 0x38]
jae 0x4ee629
lea edi, [ebx + 0x40]
lea esp, [esp]
mov ecx, dword [edi - 6]
push ecx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4ee5f4
movzx edx, word [edi - 2]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edx, dword [eax]
mov dword [ebp - 0x3918], eax
mov ecx, eax
mov eax, dword [edx + 0x90]
call eax
sub eax, dword [edi]
je 0x4ee5f4
mov ecx, dword [ebp - 0x3918]
mov eax, dword [ecx]
mov edx, dword [eax + 0x90]
mov dword [ebp - 0x3924], eax
call edx
sub eax, dword [edi]
mov ecx, dword [ebp - 0x3918]
push eax
mov eax, dword [ebp - 0x3924]
mov edx, dword [eax + 0x94]
call edx
jmp 0x4ee60d
movzx ecx, word [edi - 2]
push 0
push 0
push 0
lea eax, [ebp - 0x392c]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3920]
movzx edx, word [ebx + 0x38]
inc eax
add edi, 0xa
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4ee590
mov ecx, dword [0x6d41e8]
push 1
push 1
call fcn.00589520
push 0xd0
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d41e8]
call fcn.00589fa0
mov ecx, dword [0x6d41e8]
cmp dword [ecx + 0x4320], 0
je case.default.0x4eec58
mov eax, dword [ecx]
mov edx, dword [eax + 0x54]
push 0
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d41e8]
call fcn.00588a70
xor eax, eax
mov dword [ebp - 0x3920], 0
cmp ax, word [ebx + 0x38]
jae 0x4ee756
lea edi, [ebx + 0x40]
nop
mov ecx, dword [edi - 6]
push ecx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4ee724
movzx edx, word [edi - 2]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edx, dword [eax]
mov dword [ebp - 0x3918], eax
mov ecx, eax
mov eax, dword [edx + 0x90]
call eax
sub eax, dword [edi]
je 0x4ee724
mov ecx, dword [ebp - 0x3918]
mov eax, dword [ecx]
mov edx, dword [eax + 0x90]
mov dword [ebp - 0x3924], eax
call edx
sub eax, dword [edi]
mov ecx, dword [ebp - 0x3918]
push eax
mov eax, dword [ebp - 0x3924]
mov edx, dword [eax + 0x94]
call edx
jmp 0x4ee73a
movzx ecx, word [edi - 2]
push 0
push 0
push 0
lea eax, [ebp - 8]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
mov eax, dword [ebp - 0x3920]
movzx edx, word [ebx + 0x38]
inc eax
add edi, 0xa
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4ee6c0
push 0xd1
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x60d9d8
call fcn.0055b060
mov ecx, dword [0x6d41e8]
call fcn.00589fa0
mov ecx, dword [0x6d41e8]
cmp dword [ecx + 0x4320], 0
je case.default.0x4eec58
push 1
push 3
call fcn.00589520
mov ecx, dword [0x6d41e8]
mov eax, dword [ecx]
mov edx, dword [eax + 0x54]
push 0
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00599ee0
mov eax, dword [ebx + 0x22]
add eax, 0xffffffec
add esp, 0xc
cmp eax, 3
ja case.default.0x4ee7ed
jmp dword [eax*4 + 0x4f39e4]
push 0x43e
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4ee86c
movzx eax, word [ebx + 0x26]
push 0
push 0
push 0
lea edx, [ebp - 8]
push edx
push eax
mov ecx, esi
call fcn.004e5440
push 0x440
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
jmp 0x4ee86c
push 0x43f
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea edx, [ebp - 0x110]
push edx
jmp 0x4ee86c
push 0x43a
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0059a4c2
add esp, 8
lea ecx, [ebp - 0x110]
push ecx
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d41e8]
add esp, 0xc
push 1
push 3
call fcn.00589520
mov ecx, dword [0x6d41e8]
call fcn.00589fa0
mov ecx, dword [0x6d41e8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp byte [ebx + 0x2a], 1
jne 0x4ee922
mov ecx, dword [ebx + 0x2b]
push ecx
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x760]
mov esi, eax
xor eax, eax
sub edx, dword [ebx + 0x22]
sbb eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0130
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
add esi, 4
push esi
push 0x812
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
cmp byte [ebx + 0x2a], 2
jne 0x4ee96a
mov ecx, dword [0x6d8f5c]
mov eax, dword [ecx + 0x760]
xor edx, edx
add eax, dword [ebx + 0x22]
adc edx, dword [ebx + 0x26]
push edx
push eax
call fcn.004a0130
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push eax
push ecx
push 0x82f
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x13
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
cmp byte [ebx + 0x2a], 3
jne 0x4ee9b2
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x760]
xor eax, eax
sub edx, dword [ebx + 0x22]
sbb eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0130
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
push 0xa4b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
cmp byte [ebx + 0x2a], 4
jne 0x4ee9fa
mov ecx, dword [0x6d8f5c]
mov eax, dword [ecx + 0x760]
xor edx, edx
add eax, dword [ebx + 0x22]
adc edx, dword [ebx + 0x26]
push edx
push eax
call fcn.004a0130
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push eax
push ecx
push 0x97b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
cmp byte [ebx + 0x2a], 5
jne 0x4eea42
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x760]
xor eax, eax
add edx, dword [ebx + 0x22]
adc eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0130
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
push 0x97b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
cmp byte [ebx + 0x2a], 6
jne 0x4eea9e
mov eax, dword [ebx + 0x2b]
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x760]
mov esi, eax
xor eax, eax
add edx, dword [ebx + 0x22]
adc eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0130
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
add esi, 4
push esi
push 0xa1d
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
cmp byte [ebx + 0x2a], 7
jne case.default.0x4eec58
mov ecx, dword [0x6d8f5c]
mov eax, dword [ecx + 0x760]
xor edx, edx
sub eax, dword [ebx + 0x22]
sbb edx, dword [ebx + 0x26]
push edx
push eax
call fcn.004a0130
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push eax
push ecx
push 0xa8b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, byte [ebx + 0x24]
cmp eax, 5
ja case.default.0x4eec58
jmp dword [eax*4 + 0x4f39f4]
movzx edx, word [ebx + 0x22]
push edx
lea eax, [ebx + 0x36]
push eax
push 0x922
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
jmp 0x4eec0e
movzx eax, word [ebx + 0x22]
push eax
lea ecx, [ebx + 0x25]
push ecx
push 0x924
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d8f5c]
movzx eax, word [ebx + 0x22]
mov esi, dword [ecx + 0x728]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc4]
add esp, 0x14
sub esi, eax
push esi
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x22]
push eax
push 0x925
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d8f5c]
movzx eax, word [ebx + 0x22]
mov esi, dword [ecx + 0x728]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc4]
add esp, 0x10
sub esi, eax
push esi
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x22]
push eax
push 0x979
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d8f5c]
add eax, dword [ecx + 0x728]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc4]
push eax
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
add ebx, 0x36
push ebx
push 0x923
jmp 0x4f1e8e
movzx eax, byte [ebx + 0x2a]
dec eax
cmp eax, 7
ja case.default.0x4eec58
jmp dword [eax*4 + 0x4f3a0c]
mov eax, dword [ebx + 0x2b]
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x764]
mov esi, eax
xor eax, eax
sub edx, dword [ebx + 0x22]
sbb eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0190
test esi, esi
je case.default.0x4eec58
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
add esi, 4
push esi
push 0x813
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push eax
push ecx
push 0x822
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x764]
add esp, 0x14
xor eax, eax
sub edx, dword [ebx + 0x22]
sbb eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
push 0x830
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d8f5c]
mov eax, dword [ecx + 0x764]
add esp, 0x14
xor edx, edx
sub eax, dword [ebx + 0x22]
sbb edx, dword [ebx + 0x26]
push edx
push eax
call fcn.004a0190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push eax
push ecx
push 0x835
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x764]
add esp, 0x14
xor eax, eax
add edx, dword [ebx + 0x22]
adc eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
push 0x97a
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
jmp 0x4eee7e
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
push 0x8c8
jmp 0x4eee71
mov ecx, dword [ebx + 0x2b]
push ecx
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push edx
push ecx
add eax, 4
push eax
push 0xa1e
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d8f5c]
mov edx, dword [ecx + 0x764]
add esp, 0x18
xor eax, eax
add edx, dword [ebx + 0x22]
adc eax, dword [ebx + 0x26]
push eax
push edx
call fcn.004a0190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push ecx
push edx
push 0xa30
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov eax, dword [ebx + 0x2f]
mov ecx, dword [0x6d8f5c]
add esp, 0x14
push 0
push eax
call fcn.004a0190
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp byte [ebx + 0x2a], 1
jne 0x4eeeee
mov ecx, dword [ebx + 0x2b]
push ecx
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push edx
push ecx
add eax, 4
push eax
push 0x814
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
mov ecx, dword [0x6d8f5c]
mov eax, dword [ecx + 0x728]
sub eax, dword [ebx + 0x22]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc4]
push eax
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x11
xor edi, edi
push edi
call fcn.004d53d0
push edi
push edi
mov ecx, esi
call fcn.004d53d0
push 2
push edi
mov ecx, esi
call fcn.004d53d0
push 0xa
push edi
mov ecx, esi
call fcn.004d53d0
cmp byte [ebx + 0x26], 0
mov dword [ebp - 0x3920], edi
mov dword [ebp - 0x3928], edi
jbe 0x4ef00e
jmp 0x4eef60
movzx eax, word [ebp - 0x3928]
mov ecx, eax
shl ecx, 4
add ecx, eax
movzx edx, word [ebx + ecx*4 + 0x31]
lea edi, [ebx + ecx*4]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov dword [ebp - 0x3920], eax
test eax, eax
je 0x4eefc2
movzx ecx, word [edi + 0x31]
push 0
push 0
push 0
lea eax, [ebp - 0x3920]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
cmp dword [ebp - 0x3920], 0
jne 0x4eefc2
push 0
push 0x1bd5
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push str.MP_ITEM_BUY_ACK
add edi, 0x29
push edi
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
push eax
call fcn.004caad0
test eax, eax
jne 0x4eeff5
push eax
push 0x1bdb
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov eax, dword [ebp - 0x3928]
movzx edx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3928], eax
cmp eax, edx
jl 0x4eef60
push 0x614
jmp 0x4f3536
mov ecx, dword [0x6d41ec]
push 0
push 4
call fcn.00587f50
mov ecx, dword [0x6d41ec]
push 0
push 0
call fcn.00587a60
movzx eax, word [ebx + 0x22]
push 0
push 0
push eax
push eax
mov ecx, esi
call fcn.004d51d0
movzx ecx, al
push ecx
mov ecx, esi
call fcn.004e8a50
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx edx, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov ecx, dword [0x6d41ec]
call fcn.00588560
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
test eax, eax
je 0x4ef132
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d41ec]
push 0
push 4
call fcn.00587f50
mov ecx, dword [0x6d41ec]
call fcn.00588560
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x2a]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov ecx, dword [0x6d41f8]
call fcn.0058b520
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
test eax, eax
je 0x4ef200
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
cmp word [ebx + 0x26], 5
jne 0x4ef226
push 0x62d
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, dword [0x6d41f8]
push 0
call fcn.0058ae00
mov ecx, dword [0x6d41f8]
call fcn.0058b520
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x11
xor edi, edi
push edi
call fcn.004d53d0
push edi
push edi
mov ecx, esi
call fcn.004d53d0
push 2
push edi
mov ecx, esi
call fcn.004d53d0
push 0xa
push edi
mov ecx, esi
call fcn.004d53d0
cmp byte [ebx + 0x26], 0
mov dword [ebp - 0x3920], edi
mov dword [ebp - 0x3928], edi
jbe case.default.0x4eec58
mov edi, edi
movzx eax, word [ebp - 0x3928]
mov ecx, eax
shl ecx, 4
add ecx, eax
movzx edx, word [ebx + ecx*4 + 0x31]
lea edi, [ebx + ecx*4]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov dword [ebp - 0x3920], eax
test eax, eax
je 0x4ef2f2
movzx ecx, word [edi + 0x31]
push 0
push 0
push 0
lea eax, [ebp - 0x3920]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
cmp dword [ebp - 0x3920], 0
jne 0x4ef2f2
push 0
push 0x1c56
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push str.MP_ITEM_BUY_ACK
add edi, 0x29
push edi
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
mov edi, eax
push edi
call fcn.004caad0
test eax, eax
jne 0x4ef329
push eax
push 0x1c5c
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
jmp 0x4ef36b
mov edx, 0x301
cmp word [ebx + 5], dx
jne 0x4ef36b
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
push eax
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x5dd
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
mov eax, dword [ebp - 0x3928]
movzx ecx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3928], eax
cmp eax, ecx
jl 0x4ef290
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x22]
dec eax
je 0x4ef3b9
dec eax
je 0x4ef3af
dec eax
jne case.default.0x4eec58
push 0x75
jmp 0x4f3536
push 0x5de
jmp 0x4f3536
push 0xcd
jmp 0x4f3536
mov ecx, dword [0x6d41fc]
push 1
call fcn.00582700
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
mov edx, dword [ebx + 0x24]
push edx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4ef45f
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ef45f
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
sub eax, dword [ebx + 0x28]
je 0x4ef45f
mov esi, dword [edi]
mov edx, dword [esi + 0x90]
mov ecx, edi
call edx
sub eax, dword [ebx + 0x28]
mov ecx, edi
push eax
mov eax, dword [esi + 0x94]
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [ebx + 0x22]
push 0
push 0
push 0
lea ecx, [ebp - 8]
push ecx
push edx
mov ecx, esi
call fcn.004e5440
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx eax, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov ecx, dword [0x6d41fc]
call fcn.00582a90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x22]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
test eax, eax
je 0x4ef529
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d41fc]
push 0
call fcn.00582700
mov ecx, dword [0x6d41fc]
call fcn.00582a90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d41f8]
push 1
call fcn.0058ae00
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [ebx + 0x24]
push ecx
mov ecx, esi
call fcn.004d7120
test eax, eax
je 0x4ef5f0
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ef5f0
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
sub eax, dword [ebx + 0x28]
je 0x4ef5f0
mov esi, dword [edi]
mov eax, dword [esi + 0x90]
mov ecx, edi
call eax
sub eax, dword [ebx + 0x28]
mov edx, dword [esi + 0x94]
push eax
mov ecx, edi
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx ecx, word [ebx + 0x22]
push 0
push 0
push 0
lea eax, [ebp - 8]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx edx, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
test eax, eax
je 0x4ef6af
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d420c]
push 0
call fcn.0058a3c0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ef71a
mov edx, dword [edi]
mov eax, dword [edx + 0x68]
push 0
mov ecx, edi
call eax
mov ecx, dword [0x6d420c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
mov ecx, dword [0x6d420c]
call fcn.0058a740
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
push eax
mov ecx, 0x6f7048
call fcn.004d6500
test eax, eax
jne 0x4ef761
push eax
push 0x1d04
push str.ItemManager.cpp
call fcn.0040b590
jmp 0x4f354d
mov ebx, dword [ebx + 0x22]
mov dword [eax + 0x1c], ebx
test ebx, ebx
je 0x4ef7a7
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
mov dword [0x6f705c], eax
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
push eax
call fcn.004415d0
mov ecx, eax
call fcn.0056d570
mov eax, dword [edi + 0x2d8]
test eax, 0x1000
jne 0x4ef7a7
or eax, 0x1000
mov dword [edi + 0x2d8], eax
push 0x5e7
jmp 0x4ef99c
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
test eax, eax
je 0x4ef7fa
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d420c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
mov ecx, dword [0x6d420c]
call fcn.0058a740
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x2a]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
test eax, eax
je 0x4ef8bd
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d4210]
push 0
call fcn.00582e10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4ef928
mov edx, dword [edi]
mov eax, dword [edx + 0x68]
push 0
mov ecx, edi
call eax
mov ecx, dword [0x6d4210]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
mov ecx, dword [0x6d4210]
call fcn.005830a0
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
push eax
mov ecx, 0x6f7048
call fcn.004d6500
test eax, eax
jne 0x4ef96f
push eax
push 0x1d5c
push str.ItemManager.cpp
call fcn.0040b590
jmp 0x4f354d
mov ebx, dword [ebx + 0x22]
mov dword [eax + 0x1c], ebx
test ebx, ebx
jne 0x4ef997
mov dword [0x6f705c], ebx
mov eax, dword [edi + 0x2d8]
test eax, 0x1000
je 0x4ef997
xor eax, 0x1000
mov dword [edi + 0x2d8], eax
push 0x5e8
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
add esp, 0xc
mov ecx, edi
call eax
push eax
mov ecx, esi
call fcn.004e77f0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
test eax, eax
je 0x4efa23
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
mov ecx, dword [0x6d4210]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
mov ecx, dword [0x6d4210]
call fcn.005830a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x22]
fldz
push 0
fst dword [ebp - 0x32]
push 0
fstp dword [ebp - 0x16]
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x3918]
push edx
push eax
mov ecx, esi
call fcn.004e5440
movzx edx, word [ebx + 0x28]
push 0
push 0
push 0
lea ecx, [ebp - 8]
push ecx
push edx
mov ecx, esi
call fcn.004e5440
mov ecx, dword [ebp - 0x3918]
mov eax, dword [ecx]
mov edx, dword [eax + 0x78]
call edx
mov ecx, dword [ebx + 0x24]
sub ecx, eax
test ecx, ecx
jle 0x4efaa7
push ecx
push 0xb0
jmp 0x4efad0
jne 0x4efaca
push 0xb1
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
jmp 0x4efaea
push ecx
push 0xb2
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
cmp dword [ebp - 0x60], 0
je 0x4efafb
lea eax, [ebp - 0x60]
push eax
mov ecx, esi
call fcn.004e0510
mov esi, dword [ebp - 0x3918]
mov edx, dword [ebx + 0x24]
add esi, 0x2c0
mov ecx, 0x11
lea edi, [ebp - 0x3914]
rep movsd dword es:[edi], dword [esi]
mov cx, word [ebx + 0x22]
mov word [ebp - 0x390c], cx
lea ecx, [ebp - 0x3914]
xor eax, eax
push ecx
mov ecx, dword [0x6d41dc]
mov dword [ebp - 0x3910], edx
mov word [ebp - 0x38fe], ax
call fcn.004ccbf0
mov ecx, dword [0x6d4334]
push 7
call fcn.0058e0c0
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov ecx, dword [0x6d4334]
mov esi, eax
push esi
push 2
call fcn.0058e370
mov eax, dword [esi]
mov edx, dword [eax + 0x68]
push 1
mov ecx, esi
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0x1dad
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push 0xb0
jmp 0x4f3536
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
mov ebx, dword [ebx + 0x22]
cmp ebx, 1
jne 0x4efbda
push 0x2a6
jmp 0x4efbf0
cmp ebx, 0x13
jne 0x4efbe6
push 0x38d
jmp 0x4efbf0
cmp ebx, 0x14
jne 0x4efc0a
push 0xa29
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
dec dword [esi + 0x298]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov ecx, dword [ebx + 0x24]
push ecx
mov ecx, esi
mov edi, eax
call fcn.004d7120
test eax, eax
je 0x4efcee
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
movzx ecx, word [ebx + 0x28]
sub eax, ecx
je 0x4efcee
mov esi, dword [edi]
mov edx, dword [esi + 0x90]
mov ecx, edi
call edx
movzx ecx, word [ebx + 0x28]
mov edx, dword [esi + 0x94]
sub eax, ecx
push eax
mov ecx, edi
call edx
mov ecx, edi
call fcn.004d2890
mov eax, dword [eax + 0x50]
push eax
mov ecx, 0x60ddd8
call fcn.00566ad0
mov ecx, edi
call fcn.004d2890
mov ecx, dword [eax + 0x50]
push ecx
mov ecx, 0x6d3f78
call fcn.00473ae0
movzx edx, word [ebx + 0x28]
imul edx, eax
push 0
push edx
call fcn.0040b450
add esp, 8
push eax
movzx eax, word [ebx + 0x28]
push eax
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0xda
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
jmp 0x4efde7
mov ecx, edi
call fcn.004d2890
mov ecx, dword [eax + 0x50]
push ecx
mov ecx, 0x60ddd8
call fcn.00566ad0
mov ecx, edi
call fcn.004d2890
mov edx, dword [eax + 0x50]
push edx
mov ecx, 0x6d3f78
call fcn.00473ae0
cmp word [ebx + 0x28], 0
mov dword [ebp - 0x3918], eax
je 0x4efd8f
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
push eax
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
push eax
mov ecx, esi
call fcn.004e1460
test eax, eax
jne 0x4efd8f
movzx eax, word [ebx + 0x28]
imul eax, dword [ebp - 0x3918]
push 0
push eax
call fcn.0040b450
movzx ecx, word [ebx + 0x28]
add esp, 8
push eax
push ecx
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0xda
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
jmp 0x4efdcb
mov edx, dword [ebp - 0x3918]
push 0
push edx
call fcn.0040b450
add esp, 8
push eax
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0xd9
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
movzx eax, word [ebx + 0x22]
push 0
push 0
push eax
push eax
mov ecx, esi
call fcn.004d51d0
movzx ecx, al
push ecx
mov ecx, esi
call fcn.004e8a50
mov ecx, dword [0x6d41dc]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 0
call eax
mov ecx, dword [0x6d4214]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 0
call eax
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 0x22]
cmp ebx, 9
jne 0x4efe31
push 0x163
jmp 0x4efe3b
cmp ebx, 0xb
jne 0x4efe57
push 0x610
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
jmp 0x4efe83
cmp ebx, 0x85
jne 0x4efe83
push 0x900
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0xfa7
push 0x604150
call fcn.004c9140
add esp, 0x10
mov ecx, dword [0x6d41dc]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 0
call eax
mov ecx, dword [0x6d4214]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x11
xor edi, edi
push edi
call fcn.004d53d0
push edi
push edi
mov ecx, esi
call fcn.004d53d0
push 2
push edi
mov ecx, esi
call fcn.004d53d0
push 0xa
push edi
mov ecx, esi
call fcn.004d53d0
xor eax, eax
mov dword [ebp - 0x3928], edi
mov dword [ebp - 0x3920], eax
mov dword [ebp - 0x3918], eax
cmp byte [ebx + 0x26], al
jbe 0x4f00a6
jmp 0x4eff00
movzx eax, word [ebp - 0x3918]
mov ecx, eax
shl ecx, 4
add ecx, eax
movzx edx, word [ebx + ecx*4 + 0x31]
lea edi, [ebx + ecx*4]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov dword [ebp - 0x3920], eax
test eax, eax
je 0x4eff62
movzx ecx, word [edi + 0x31]
push 0
push 0
push 0
lea eax, [ebp - 0x3920]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
cmp dword [ebp - 0x3920], 0
jne 0x4eff62
push 0
push 0x1e00
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push str.MP_ITEM_BUY_ACK
add edi, 0x29
push edi
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
mov edi, eax
push edi
call fcn.004caad0
test eax, eax
jne 0x4eff97
push eax
push 0x1e06
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov edx, dword [edi]
mov eax, dword [edx + 0x84]
mov ecx, edi
call eax
test ax, ax
je 0x4f008d
cmp dword [ebp - 0x3928], 1
jne 0x4effed
mov ecx, dword [edi + 0x2c0]
mov edx, dword [0x6d8f50]
push ecx
push edx
lea eax, [ebp - 0x110]
push str.Set_QuickPosition_again__CharacterIDX_:__d__ItemDBIdx_:__d
push eax
call fcn.0059a4c2
lea ecx, [ebp - 0x110]
push ecx
push 0x1e0e
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0x1c
mov eax, dword [edi]
lea edx, [ebp - 0xc]
push edx
mov edx, dword [eax + 0x84]
mov ecx, edi
call edx
movzx eax, ax
push eax
call fcn.0055a7b0
lea ecx, [ebp - 0xc]
add esp, 8
mov dword [ebp - 0x3928], 0
mov dword [ebp - 0x391c], ecx
lea esp, [esp]
mov edx, dword [ebp - 0x391c]
cmp word [edx], 0
je 0x4f0067
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
push 0
push 0
mov ecx, edi
call edx
push eax
mov eax, dword [edi]
mov edx, dword [eax + 0x7c]
mov ecx, edi
call edx
mov ecx, dword [ebp - 0x391c]
mov dx, word [ecx]
add dx, word [ebp - 0x3928]
movzx eax, ax
push eax
dec dx
movzx eax, dx
push eax
mov ecx, 0x60d9d8
call fcn.0055bb90
mov eax, dword [ebp - 0x3928]
add dword [ebp - 0x391c], 2
add eax, 0xa
mov dword [ebp - 0x3928], eax
cmp ax, 0x28
jb 0x4f0020
mov dword [ebp - 0x3928], 1
mov eax, dword [ebp - 0x3918]
movzx ecx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3918], eax
cmp eax, ecx
jl 0x4eff00
mov eax, dword [ebx + 0x22]
cmp eax, 1
je case.default.0x4eec58
cmp eax, 2
je case.default.0x4eec58
cmp eax, 3
jne 0x4f00da
mov edx, dword [0x6d44d0]
mov ecx, dword [edx + 0x3fc]
xor esi, esi
mov eax, ecx
or eax, esi
je case.default.0x4eec58
jmp 0x4f013c
mov ecx, edi
call fcn.004d2890
mov eax, dword [eax + 0x4c]
xor esi, esi
xor ecx, ecx
cmp dword [0x6d8a5c], esi
jne 0x4f0121
mov dword [ebp - 0xc], eax
mov eax, ecx
and eax, 0x7fffffff
mov dword [ebp - 8], eax
fild qword [ebp - 0xc]
and ecx, 0x80000000
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], esi
fild qword [ebp - 0xc]
fchs
faddp st(1)
fmul qword [0x5cf8a8]
call fcn.0059a146
mov dword [ebp - 8], edx
push eax
mov ecx, 0x60ddd8
call fcn.00566b00
push eax
mov ecx, 0x6d3f78
mov dword [ebp - 8], esi
call fcn.00473b50
mov ecx, eax
movzx eax, word [ebx + 0x27]
push esi
push ecx
cmp eax, 1
jbe 0x4f01a6
cdq
push edx
push eax
call fcn.0059c940
push edx
push eax
call fcn.0040b450
movzx ecx, word [ebx + 0x27]
add esp, 8
push eax
push ecx
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0xd8
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
call fcn.0040b450
add esp, 8
push eax
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0xd7
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
add esp, 0x14
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 0x11
push 0
mov ecx, esi
call fcn.004d53d0
mov eax, dword [ebx + 0x22]
add eax, 0xffffff9b
cmp eax, 0xb
ja case.0x4f022b.105
jmp dword [eax*4 + 0x4f3a2c]
push 0x162
jmp 0x4f3536
push 0x164
jmp 0x4f3536
push 0x165
jmp 0x4f3536
push 0x667
jmp 0x4f3536
push 0x660
jmp 0x4f3536
push 0x909
jmp 0x4f3536
push 0x908
jmp 0x4f3536
push 0xa14
jmp 0x4f3536
push 0x166
jmp 0x4f3536
mov ecx, dword [0x6d8f5c]
call fcn.0052c810
cmp al, 0x14
je case.default.0x4eec58
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d4214]
push edx
call fcn.00458e40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x22]
push eax
mov ecx, 0x6d8f58
call fcn.0052fc20
mov edi, eax
test edi, edi
je 0x4f031c
cmp byte [edi + 0x128], 1
jne 0x4f031c
xor esi, esi
add ebx, 0x26
mov ecx, dword [ebx]
push ecx
push esi
mov ecx, edi
call fcn.0054bb00
inc esi
add ebx, 4
cmp esi, 0xa
jl 0x4f02e4
mov edx, dword [edi + 0x129]
push edx
mov ecx, 0x6c67b8
call fcn.004316a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0x1e91
push str.ItemManager.cpp
call fcn.0040b590
jmp 0x4f354d
mov eax, dword [ebx + 0x22]
push eax
mov ecx, 0x6d8f58
call fcn.0052fc20
mov esi, eax
test esi, esi
je case.default.0x4eec58
cmp byte [esi + 0x128], 1
jne case.default.0x4eec58
add ebx, 0x26
push ebx
mov ecx, esi
call fcn.0054be20
push esi
mov ecx, 0x6c67b8
call fcn.00435050
mov ecx, dword [esi + 0x129]
push ecx
mov ecx, 0x6c67b8
call fcn.004316a0
mov ecx, esi
call fcn.00549bd0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [0x6d8f5c]
mov eax, dword [edx + 0x73c]
movzx edx, byte [ebx + 0x2a]
mov esi, 1
xor ecx, ecx
sub edx, esi
je 0x4f03c0
sub edx, esi
je 0x4f0415
sub edx, 0x3e
jne 0x4f0451
mov edx, dword [ebx + 0x22]
sub edx, eax
mov eax, dword [ebx + 0x26]
sbb eax, ecx
mov ecx, edx
or ecx, eax
je 0x4f0451
push eax
push edx
call fcn.0040b450
add esp, 8
push eax
push 0x78
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x12
push 0x6c6dd0
call fcn.0044a500
mov edx, dword [0x6d8f5c]
add esp, 0x10
mov ecx, 0x6d2020
cmp dword [edx + 0x40c], esi
jne 0x4f044a
push 0xcc4
jmp 0x4f044c
sub eax, dword [ebx + 0x22]
sbb ecx, dword [ebx + 0x26]
mov edx, eax
or edx, ecx
je 0x4f0451
push ecx
push eax
call fcn.0040b450
add esp, 8
push eax
push 0x76
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x12
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
jmp 0x4f0451
push 0x1c
call fcn.00462210
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push eax
push ecx
mov ecx, dword [0x6d8f5c]
call fcn.004a00f0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x73
jmp 0x4f3536
push 0
push 0x1ee5
push str.ItemManager.cpp
call fcn.0040b590
mov eax, dword [ebx + 0x22]
mov edx, dword [0x6d8f5c]
add esp, 0xc
sub eax, dword [edx + 0x73c]
je 0x4f04e1
push eax
push 0x78
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x12
push 0x6c6dd0
call fcn.0044a500
mov eax, dword [0x6d8f5c]
add esp, 0x10
cmp dword [eax + 0x40c], 1
mov ecx, 0x6d2020
jne 0x4f04da
push 0xcc4
jmp 0x4f04dc
push 0x1c
call fcn.00462210
mov ecx, dword [ebx + 0x22]
push 0
push ecx
mov ecx, dword [0x6d8f5c]
call fcn.004a00f0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push str.MP_ITEM_DIVIDE_NEWITEM_NOTIFY
add ebx, 0x22
push ebx
call fcn.004dabe0
mov edi, eax
movzx edx, word [edi + 0x2c8]
push edx
mov ecx, esi
call fcn.004d51d0
movzx eax, al
test eax, eax
je 0x4f057a
cmp eax, 4
je 0x4f057a
cmp eax, 2
jne 0x4f0555
mov ecx, dword [0x6d42d8]
push edi
call fcn.00552540
push 0x7b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
jmp 0x4f3543
cmp eax, 0xa
jne 0x4f0586
mov ecx, dword [0x6d42c8]
push edi
call fcn.0049c5b0
push 0x7b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
jmp 0x4f3543
mov ecx, dword [0x6d41dc]
push edi
call fcn.004caad0
push 0x7b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
jmp 0x4f3543
push ebx
call fcn.004dfbd0
pop edi
pop esi
mov dword [0x604218], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, 0x604150
call fcn.004c8da0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx + 0x829]
xor ecx, ecx
mov dword [ebp - 0xa], eax
mov word [ebp - 0x10], cx
add eax, 2
lea ecx, [ebp - 0x10]
mov dword [ebp - 0xe], eax
call fcn.00431010
test al, al
je 0x4f06c3
mov edi, edi
movzx eax, al
sub eax, 8
je 0x4f066e
dec eax
jne 0x4f06ab
push 0x4d6540
push 0x1e
push 0x5f
lea edx, [ebp - 0xc34]
push edx
call fcn.004014d0
lea eax, [ebp - 0xc34]
push eax
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx ecx, word [ebx + 0x824]
push ecx
lea edx, [ebp - 0xc34]
push edx
mov ecx, 0x6d5cf0
call fcn.004e5660
jmp 0x4f06ab
push 0x44c5b0
push 0x1e
push 0x50
lea eax, [ebp - 0xa74]
push eax
call fcn.004014d0
lea ecx, [ebp - 0xa74]
push ecx
lea ecx, [ebp - 0x10]
call fcn.00431030
movzx edx, word [ebx + 0x822]
push edx
lea eax, [ebp - 0xa74]
push eax
mov ecx, 0x6d5cf0
call fcn.004e0580
lea ecx, [ebp - 0x10]
call fcn.00431050
lea ecx, [ebp - 0x10]
call fcn.00431010
test al, al
jne 0x4f0620
mov ecx, dword [0x6d42c8]
push ebx
call fcn.0049c970
mov ecx, esi
call fcn.004e7260
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push str.warehouse_info_nack
push 0x1f41
push str.ItemManager.cpp
call fcn.0040b590
mov ecx, dword [0x6d42c8]
add esp, 0xc
push 0
call fcn.0049c320
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [ebx + 0x2a]
lea ecx, [ebp - 0x3918]
push ecx
mov ecx, dword [0x6d42c8]
push edx
mov dword [ebp - 0x3918], 0
call fcn.0049c620
cmp eax, 1
jne 0x4f076a
mov eax, dword [ebp - 0x3918]
push eax
mov ecx, 0x6d5cf0
call fcn.004dfa50
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0x1f4d
push str.ItemManager.cpp
call fcn.0040b590
jmp 0x4f354d
mov edi, 1
cmp dword [ebx + 0x22], edi
jne 0x4f07a8
mov ecx, dword [ebx + 0x34]
mov edx, dword [ebx + 0x2e]
push ecx
push edx
mov ecx, esi
call fcn.004e1460
cmp eax, edi
jne 0x4f07a8
lea eax, [ebx + 0x6e]
push eax
mov ecx, esi
call fcn.004e0510
cmp dword [ebx + 0x26], edi
jne 0x4f07ce
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebx + 0x2e]
push ecx
push edx
mov ecx, esi
call fcn.004e1460
cmp eax, edi
jne 0x4f07ce
lea eax, [ebx + 0xbe]
push eax
mov ecx, esi
call fcn.004e0390
mov ecx, dword [0x6d42c8]
add ebx, 0x2a
push ebx
call fcn.0049c8f0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push ebx
call fcn.004dfd50
pop edi
pop esi
mov dword [0x604218], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
xor eax, eax
mov dword [ebp - 0x3918], eax
mov dword [ebp - 0x3920], eax
cmp byte [ebx + 0x26], al
jbe case.default.0x4eec58
lea ebx, [ebx]
movzx eax, word [ebp - 0x3920]
mov ecx, eax
shl ecx, 4
add ecx, eax
movzx edx, word [ebx + ecx*4 + 0x31]
lea edi, [ebx + ecx*4]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov dword [ebp - 0x3918], eax
test eax, eax
je 0x4f0892
movzx ecx, word [edi + 0x31]
push 0
push 0
push 0
lea eax, [ebp - 0x3918]
push eax
push ecx
mov ecx, esi
call fcn.004e5440
cmp dword [ebp - 0x3918], 0
jne 0x4f0892
push 0
push 0x1f79
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
push str.MP_ITEM_DISSOLUTION_GETITEM
add edi, 0x29
push edi
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
push eax
call fcn.004caad0
test eax, eax
jne 0x4f08c5
push eax
push 0x1f7f
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov eax, dword [ebp - 0x3920]
movzx edx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3920], eax
cmp eax, edx
jl 0x4f0830
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d425c]
test ecx, ecx
je 0x4f0902
push 1
call fcn.0045ba60
push 0x2b4
jmp 0x4f3536
mov ecx, dword [0x6d425c]
test ecx, ecx
je case.default.0x4eec58
push 0
call fcn.0045ba60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
xor edi, edi
push edi
push edi
call fcn.004d53d0
push 2
push edi
mov ecx, esi
call fcn.004d53d0
push 0xa
push edi
mov ecx, esi
call fcn.004d53d0
push 5
push edi
mov ecx, esi
call fcn.004d53d0
mov ecx, 0x604150
call fcn.004c8da0
mov ebx, dword [ebx + 0x22]
cmp ebx, 1
jne 0x4f0977
push 0x926
jmp 0x4f3536
cmp ebx, 5
je 0x4ecf72
cmp ebx, 0xb
jne 0x4f098f
push 0x2f0
jmp 0x4f3536
cmp ebx, 6
jne 0x4f09ba
mov eax, dword [0x6d41e4]
cmp eax, edi
je case.default.0x4eec58
mov dword [eax + 0x4294], edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp ebx, 0x12
jne 0x4f09e5
mov eax, dword [0x6d41e8]
cmp eax, edi
je case.default.0x4eec58
mov dword [eax + 0x431c], edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp ebx, 0x44
jne case.default.0x4eec58
push 0x934
jmp 0x4f3536
xor edi, edi
cmp byte [ebx + 0x26], 0
mov dword [ebp - 0x3918], edi
jbe 0x4f0aa5
lea ebx, [ebx]
movzx eax, word [ebp - 0x3918]
mov ecx, eax
shl ecx, 4
add ecx, eax
movzx edx, word [ebx + ecx*4 + 0x31]
lea eax, [ebx + ecx*4]
mov ecx, dword [0x6d41dc]
push edx
mov dword [ebp - 0x3920], eax
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4f0a51
mov eax, dword [ebp - 0x3920]
add eax, 0x29
push eax
mov ecx, edi
call fcn.004d28e0
jmp 0x4f0a8c
mov ecx, dword [ebp - 0x3920]
add ecx, 0x29
push str.MP_ITEM_MONSTER_OBTAIN_NOTIFY
push ecx
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d41dc]
mov edi, eax
push edi
call fcn.004caad0
test eax, eax
jne 0x4f0a8c
push eax
push 0x1fc9
push str.ItemManager.cpp
call fcn.0040b590
add esp, 0xc
mov eax, dword [ebp - 0x3918]
movzx edx, byte [ebx + 0x26]
inc eax
mov dword [ebp - 0x3918], eax
cmp eax, edx
jl 0x4f0a10
push 0x1013
mov ecx, 0x604150
call fcn.004c56f0
test eax, eax
je 0x4f0ac1
push 0
mov ecx, eax
call fcn.0043d640
test edi, edi
je 0x4f0afd
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x79
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x11
push 0x6c6dd0
call fcn.0044a500
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
add esp, 0x10
mov ecx, edi
call edx
push eax
mov ecx, esi
call fcn.004d5550
mov ecx, 0x60d9d8
call fcn.0055b060
mov eax, dword [edi]
mov edx, dword [eax + 0x78]
mov ecx, edi
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6fa0
test eax, eax
je case.default.0x4eec58
push edi
call fcn.004d5780
mov ecx, 0x6d5cf0
call fcn.004d7820
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x82e
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp word [ebx + 0x22], 0
je 0x4f0b85
mov ecx, dword [0x6d4364]
push ebx
call fcn.004f3fa0
jmp 0x4f0ba4
push 0x311
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, dword [0x6d4364]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
mov ecx, dword [0x6d41dc]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
mov ecx, dword [0x6d41dc]
push 0
call fcn.004ccc30
mov ecx, dword [0x6d41dc]
push 1
call fcn.004cc530
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
xor eax, eax
mov dword [ebp - 0x3918], 0
cmp ax, word [ebx + 0x22]
jae case.default.0x4eec58
lea ecx, [ebx + 0x28]
mov dword [ebp - 0x391c], ecx
mov edi, edi
mov edi, dword [ebp - 0x391c]
add edi, 0xfffffffc
push edi
mov ecx, esi
call fcn.004e7b90
cmp dword [edi + 0x44], 0xa
jne 0x4f0c3f
mov edx, dword [edi]
push edx
mov ecx, esi
call fcn.004d6a30
test eax, eax
je 0x4f0c3f
mov dword [eax + 0x30c], 1
mov eax, dword [ebp - 0x391c]
mov eax, dword [eax]
cmp eax, 0xd845
je 0x4f0c63
cmp eax, 0xd85e
je 0x4f0c63
cmp eax, 0xd84b
je 0x4f0c63
cmp eax, 0xe29a
jne 0x4f0c73
mov ecx, dword [0x6d8f5c]
push 0
push 1
push eax
call fcn.004a1d00
mov eax, dword [ebp - 0x3918]
movzx ecx, word [ebx + 0x22]
add dword [ebp - 0x391c], 0x50
inc eax
mov dword [ebp - 0x3918], eax
cmp eax, ecx
jl 0x4f0c10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp word [ebx + 0x23], 0
jne 0x4f0cf8
cmp byte [ebx + 0x22], 0
je 0x4f0cf8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
push 0x31a
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, dword [0x6d4368]
push ebx
call fcn.00519940
cmp byte [ebx + 0x22], 0
je case.default.0x4eec58
mov ecx, dword [0x6d4368]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edi, word [ebx + 0x22]
push edi
call fcn.004d6f20
mov dword [ebp - 0x3924], eax
test eax, eax
je case.default.0x4eec58
push edi
lea ecx, [esi + 0x1c8]
call fcn.004319e0
mov dword [ebp - 0x3918], eax
test eax, eax
je case.default.0x4eec58
mov edi, dword [ebp - 0x3924]
mov ecx, 0x110
cmp word [edi + 0x4a], cx
jne 0x4f0d7f
call fcn.0042e7d0
mov dword [eax + 4], 0
mov edx, 0x111
cmp word [edi + 0x4a], dx
jne 0x4f0daf
mov eax, dword [0x6d4218]
mov dword [eax + 0x324], 0
mov ecx, dword [0x6d4218]
call fcn.00442a30
mov ecx, dword [0x6d4218]
call fcn.004430a0
cmp word [edi + 0xe0], 0xb
jne 0x4f0f27
xor edi, edi
nop
mov edx, dword [0x6d8f5c]
lea ecx, [edi + 0x186]
push ecx
push edx
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f0de5
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3918]
cmp eax, dword [ecx]
je 0x4f0e21
inc edi
cmp edi, 0x50
jl 0x4f0dc0
xor edi, edi
lea ecx, [ecx]
mov ecx, dword [0x6d8f5c]
lea eax, [edi + 0x50]
push eax
push ecx
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f0e16
mov edx, dword [eax]
mov eax, dword [ebp - 0x3918]
cmp edx, dword [eax]
je 0x4f0ea1
inc edi
cmp edi, 0xa
jl 0x4f0df0
jmp 0x4f0f27
push 0
push 0
push 0
lea edx, [ebp - 0x3920]
push edx
add edi, 0x186
push edi
mov ecx, esi
mov dword [ebp - 0x3920], 0
call fcn.004e5440
mov edi, dword [ebp - 0x3920]
test edi, edi
je 0x4f0f27
push 0xff
lea eax, [ebp - 0x10f]
push 0
push eax
mov byte [ebp - 0x110], 0
call fcn.00599ee0
add esp, 0xc
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x2ee
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
call fcn.0059a4c2
lea edx, [ebp - 0x110]
push edx
jmp 0x4f0f18
push 0
push 0
push 0
lea ecx, [ebp - 0x3920]
push ecx
add edi, 0x50
push edi
mov ecx, esi
mov dword [ebp - 0x3920], 0
call fcn.004e5440
mov edi, dword [ebp - 0x3920]
test edi, edi
je 0x4f0f27
push 0xff
lea edx, [ebp - 0x10f]
push 0
push edx
mov byte [ebp - 0x110], 0
call fcn.00599ee0
add esp, 0xc
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x2ee
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.0059a4c2
lea ecx, [ebp - 0x110]
push ecx
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
mov edx, dword [ebp - 0x3918]
movzx ecx, word [ebx + 0x22]
mov eax, dword [edx]
push eax
push ecx
mov ecx, esi
call fcn.004e1490
movzx edx, word [ebx + 0x22]
mov ecx, dword [0x6d8f5c]
push 0
push 0
push edx
call fcn.004a1d00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x22]
push eax
mov ecx, 0x6da798
call fcn.0056ecf0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx ecx, word [ebx + 0x72]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov edi, eax
test edi, edi
je case.default.0x4eec58
mov ecx, edi
call fcn.004d2860
mov dword [ebp - 0x3918], eax
test eax, 0x100
je 0x4f1103
mov edx, dword [edi + 0x2c4]
push edx
mov ecx, esi
call fcn.004d6f20
cmp dword [ebp - 0x3918], 0x105
mov dword [ebp - 0x3920], eax
je 0x4f10cf
mov eax, dword [ebp - 0x3918]
cmp eax, 0x106
je 0x4f10cf
cmp eax, 0x12c
je 0x4f10cf
mov eax, dword [edi]
mov edx, dword [eax + 0x90]
mov ecx, edi
call edx
cmp eax, 1
jbe 0x4f101b
movzx eax, word [ebx + 0x72]
mov ecx, dword [0x6d41dc]
push 0xffffffffffffffff
push eax
call fcn.004cad90
jmp 0x4f1074
mov eax, dword [ebp - 0x3920]
test eax, eax
je 0x4f1074
cmp word [eax + 0xe0], 0xa
jne 0x4f1074
mov eax, dword [eax]
cmp eax, 0xd838
je 0x4f1074
cmp eax, 0xe1c7
je 0x4f1074
movzx edx, word [ebx + 0x72]
push 0
push 0
push 0
lea ecx, [ebp - 0x3918]
push ecx
push edx
mov ecx, esi
mov dword [ebp - 0x3918], 0
call fcn.004e5440
mov eax, dword [ebp - 0x3918]
test eax, eax
je 0x4f1074
push eax
mov ecx, esi
call fcn.004d7420
push 0xff
lea eax, [ebp - 0x10f]
push 0
push eax
mov byte [ebp - 0x110], 0
call fcn.00599ee0
add esp, 0xc
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x31b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [ebp - 0x110]
push edx
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
mov eax, dword [ebp - 0x3920]
cmp word [eax + 0xe0], 0xa
jne 0x4f10f0
cmp dword [ebx + 0x66], 0
je 0x4f10f0
lea ecx, [ebx + 0x22]
push ecx
mov ecx, esi
call fcn.004e7b90
mov edx, dword [ebx + 0x74]
mov ecx, dword [0x6d8f5c]
push 0
push 1
push edx
call fcn.004a1d00
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [0x6d8f5c]
call fcn.0052c810
cmp al, 6
jne 0x4f116d
mov eax, dword [0x6d8f5c]
push 0
push 6
push eax
mov ecx, 0x60cc24
call fcn.005350f0
mov eax, dword [ebx + 0x22]
add eax, 0xfffffff6
cmp eax, 7
ja case.default.0x4eec58
jmp dword [eax*4 + 0x4f3a5c]
push 0x2ef
jmp 0x4f3536
push 0x2f5
jmp 0x4f3536
push 0x437
jmp 0x4f3536
push 0x434
jmp 0x4f3536
push 0x59b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x29
jmp 0x4f3543
mov ecx, dword [ebx + 0x22]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cc480
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x309
jmp 0x4f3536
push 0x2f1
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
movzx edx, word [ebx + 0x22]
add esp, 0xc
push 0
push edx
mov ecx, esi
call fcn.004e1490
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x2f2
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
movzx eax, word [ebx + 0x22]
add esp, 0xc
push 0
push eax
mov ecx, esi
call fcn.004e1490
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x2f3
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
movzx ecx, word [ebx + 0x22]
add esp, 0xc
push 0
push ecx
mov ecx, esi
call fcn.004e1490
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0xa21
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0xa
push 0x6c6dd0
call fcn.0044a500
movzx edx, word [ebx + 0x22]
add esp, 0xc
push 0
push edx
mov ecx, esi
call fcn.004e1490
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0xa24
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0xa
push 0x6c6dd0
call fcn.0044a500
movzx eax, word [ebx + 0x22]
add esp, 0xc
push 0
push eax
mov ecx, esi
call fcn.004e1490
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d4218]
call fcn.00442660
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [0x6d8f5c]
call fcn.0052c810
cmp al, 6
jne 0x4f13a4
mov ecx, dword [0x6d8f5c]
push 0
push 6
push ecx
mov ecx, 0x60cc24
call fcn.005350f0
mov ecx, dword [0x6d4368]
push 0
add ebx, 0x22
push ebx
call fcn.00519a20
push 0x318
jmp 0x4f3536
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [0x6d8f5c]
call fcn.0052c810
cmp al, 6
jne 0x4f140d
mov edx, dword [0x6d8f5c]
push 0
push 6
push edx
mov ecx, 0x60cc24
call fcn.005350f0
push 0x319
jmp 0x4f3536
mov ecx, dword [0x6d4368]
add ebx, 0x22
push ebx
call fcn.0051a3a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d4368]
add ebx, 0x22
push ebx
call fcn.0051a410
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [0x6d4324]
cmp dword [eax + 0x10], 0
jne 0x4f14c5
mov ecx, dword [ebx + 0x22]
mov eax, dword [0x6d8f50]
push 0x2e
lea edx, [ebp - 0x3900]
mov dword [ebp - 0x38de], ecx
push edx
mov ecx, 0x604d20
mov byte [ebp - 0x38fe], 0
mov dword [ebp - 0x38fd], 0x2910204
mov dword [ebp - 0x38e4], eax
mov dword [ebp - 0x38da], 7
mov dword [ebp - 0x38d6], 0
call fcn.0050f010
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x22]
mov ecx, dword [0x6d41dc]
push 0
push 0
push eax
call fcn.004d4140
push 0x7f
lea ecx, [ebp - 0x8f]
push 0
push ecx
mov byte [ebp - 0x90], 0
call fcn.00599ee0
add esp, 0xc
add ebx, 0x26
push ebx
push 0x2fa
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x90]
push eax
push 2
push 0xfe9
push 0x604150
call fcn.004c9140
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [ebx + 0x22]
push ecx
mov ecx, 0x6d8f58
call fcn.0052fc20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov eax, dword [ebx + 0x22]
dec eax
cmp eax, 6
ja case.default.0x4f15bf
jmp dword [eax*4 + 0x4f3a7c]
push 0x2fd
jmp 0x4f15ee
push 0x312
jmp 0x4f15ee
push 0x313
jmp 0x4f15ee
push 0x315
jmp 0x4f15ee
push 0x316
jmp 0x4f15ee
push 0x398
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
push 0xfe9
mov ecx, 0x604150
call fcn.004c56f0
test eax, eax
je case.default.0x4eec58
push eax
mov ecx, 0x604150
call fcn.004c5440
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebx + 0x22]
push edx
mov ecx, 0x6d8f58
call fcn.0052fc20
test eax, eax
je 0x4f165c
cmp byte [eax + 0x128], 1
jne 0x4f165c
push 1
jmp 0x4f168f
push 0
push 0x219c
push str.ItemManager.cpp
call fcn.0040b590
jmp 0x4f354d
mov edx, dword [ebx + 0x22]
push edx
mov ecx, 0x6d8f58
call fcn.0052fc20
test eax, eax
je 0x4f16b2
cmp byte [eax + 0x128], 1
jne 0x4f16b2
push 0
movzx ecx, word [ebx + 0x26]
push ecx
push eax
mov ecx, 0x6c67b8
call fcn.00434060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0x21aa
push str.ItemManager.cpp
call fcn.0040b590
jmp 0x4f354d
mov edx, dword [ebx + 0x22]
push edx
mov ecx, 0x6d8f58
call fcn.0052fc20
mov dword [ebp - 0x391c], eax
test eax, eax
je case.default.0x4eec58
mov esi, dword [ebx + 0x26]
push esi
mov ecx, 0x6c4ed8
call fcn.004319e0
mov edi, eax
test edi, edi
je case.default.0x4eec58
mov eax, dword [ebx + 0x22]
mov ecx, dword [0x6d8f5c]
cmp eax, dword [ecx + 0x129]
jne 0x4f1718
movzx edx, word [ebx + 0x2a]
push edx
push esi
call fcn.004a2620
cmp byte [edi + 1], 1
jne 0x4f17e6
mov edi, dword [ebp - 0x391c]
mov ecx, edi
or esi, 0xffffffff
call fcn.00549af0
movzx eax, ax
cmp eax, 1
je 0x4f176b
cmp eax, 2
je 0x4f176b
cmp eax, 5
je 0x4f176b
cmp eax, 6
je 0x4f176b
cmp eax, 8
je 0x4f176b
cmp eax, 9
je 0x4f176b
cmp eax, 3
jne 0x4f175f
mov esi, 0x10b
jmp 0x4f1770
cmp eax, 4
jne 0x4f1770
mov esi, 0x10c
jmp 0x4f1770
mov esi, 0x10a
mov eax, dword [edi + 0x129]
mov ecx, dword [0x6d8f5c]
cmp eax, dword [ecx + 0x129]
jne 0x4f178e
mov ecx, 0x605654
call fcn.0051b960
mov ecx, edi
call fcn.0052c810
test al, al
jne 0x4f17ad
push 0
push esi
lea ecx, [edi + 0x284]
mov dword [edi + 0x404], esi
call fcn.0046a940
push 0x19
push edi
mov ecx, 0x60cc24
call fcn.005353d0
push esi
lea ecx, [edi + 0x284]
call fcn.0046ae70
push eax
push 0x19
push edi
mov ecx, 0x60cc24
call fcn.005350f0
lea esi, [ebx + 0x2c]
add edi, 0x517
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
jmp 0x4f1807
mov eax, dword [ebp - 0x391c]
lea edi, [eax + 0x517]
lea esi, [ebx + 0x2c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, 0x6c67b8
call fcn.00435050
mov esi, dword [ebp - 0x391c]
mov ecx, esi
call fcn.0054ae50
mov edx, dword [ebx + 0x26]
mov ecx, dword [ebp - 0x3928]
push edx
call fcn.004d6f20
mov ecx, 0x10c
cmp word [eax + 0x4a], cx
jne case.default.0x4eec58
cmp dword [ebx + 0x4c], 0
mov ecx, esi
jne 0x4f1854
push 0
call fcn.0052cc00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [eax + 0xea]
push edx
call fcn.0052cc00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov esi, eax
test esi, esi
je case.default.0x4eec58
push 0xff
lea ecx, [ebp - 0x10f]
push 0
mov dword [esi + 0x30c], 1
push ecx
mov byte [ebp - 0x110], 0
call fcn.00599ee0
add esp, 0xc
mov ecx, esi
call fcn.004d2860
cmp eax, 0x10c
jne 0x4f18df
mov edi, dword [0x6d8f5c]
mov ecx, esi
call fcn.004d2890
movzx edx, word [eax + 0xea]
push edx
mov ecx, edi
call fcn.004a1400
mov ecx, esi
call fcn.004d2890
add eax, 4
push eax
push 0x30b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [ebp - 0x110]
push ecx
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [ebx + 0x72]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov edi, eax
test edi, edi
je case.default.0x4eec58
push 0xff
lea eax, [ebp - 0x10f]
push 0
mov dword [edi + 0x30c], 1
push eax
mov byte [ebp - 0x110], 0
call fcn.00599ee0
add esp, 0xc
mov ecx, edi
call fcn.004d2890
add eax, 4
push eax
push 0x30b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea ecx, [ebp - 0x110]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
lea edx, [ebp - 0x110]
push edx
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
add ebx, 0x22
push ebx
mov ecx, esi
call fcn.004e7b90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov esi, eax
test esi, esi
je case.default.0x4eec58
push 0xff
lea ecx, [ebp - 0x10f]
push 0
mov dword [esi + 0x30c], 0
push ecx
mov byte [ebp - 0x110], 0
call fcn.00599ee0
add esp, 0xc
mov ecx, esi
call fcn.004d2890
add eax, 4
push eax
push 0x30c
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x110]
jmp 0x4f338c
mov ecx, dword [ebx + 0x22]
push ecx
mov ecx, 0x6d8f58
call fcn.0052fc20
test eax, eax
je case.default.0x4eec58
lea edi, [eax + 0x517]
lea esi, [ebx + 0x2c]
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, 0x6c67b8
call fcn.00435050
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx edx, word [ebx + 0x72]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
test eax, eax
jne 0x4f1ab1
movzx eax, word [ebx + 0x72]
mov ecx, dword [0x6d43fc]
push eax
call fcn.005433a0
test eax, eax
je case.default.0x4eec58
add ebx, 0x22
push ebx
mov ecx, esi
call fcn.004e7b90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
add ebx, 0x22
push ebx
call fcn.004e7b90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x22]
push ecx
mov ecx, 0x6d8f58
call fcn.0052fc20
test eax, eax
je case.default.0x4eec58
mov edx, dword [ebx + 0x26]
push edx
push eax
mov ecx, 0x6d2020
call fcn.00462260
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 0x22], 0x5a
jbe case.default.0x4eec58
push 0x31c
jmp 0x4f3536
push 0x2d9
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov al, byte [ebx + 0x22]
mov ecx, dword [0x6d8f5c]
mov byte [ecx + 0x5a8], al
jmp 0x4f354d
push 0
push 8
mov ecx, 0x6d8700
call fcn.0050bd70
test eax, eax
jne 0x4f1c50
cmp word [0x6d8704], 0x21
je 0x4f1c50
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebx + 0x37]
call fcn.0040b350
fld dword [ebp - 8]
movzx eax, word [ebx + 0x3d]
fnstcw word [ebp - 0x391a]
push eax
movzx eax, word [ebp - 0x391a]
or eax, 0xc00
mov dword [ebp - 0x3924], eax
lea ecx, [ebx + 0x26]
fldcw word [ebp - 0x3924]
push ecx
fistp dword [ebp - 0x3924]
mov dx, word [ebp - 0x3924]
movzx eax, dx
push eax
fldcw word [ebp - 0x391a]
fld dword [ebp - 0x10]
fnstcw word [ebp - 0x391a]
movzx eax, word [ebp - 0x391a]
or eax, 0xc00
mov dword [ebp - 0x3924], eax
movzx eax, word [ebx + 0x3b]
fldcw word [ebp - 0x3924]
fistp dword [ebp - 0x3924]
mov cx, word [ebp - 0x3924]
movzx edx, cx
mov ecx, dword [0x6d43a0]
push edx
fldcw word [ebp - 0x391a]
push eax
call fcn.00446f40
test eax, eax
je 0x4f1c46
mov ecx, dword [0x6d43a0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 1
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x38c
jmp 0x4f3536
push 0x5b1
jmp 0x4f3536
mov ecx, dword [0x6d43a0]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
mov ebx, dword [ebx + 0x22]
cmp ebx, 1
jne 0x4f1c78
push 0x38b
jmp 0x4f1c8b
cmp ebx, 2
je 0x4f1c46
cmp ebx, 3
jne case.default.0x4eec58
push 0x399
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0xff7
push 0x604150
call fcn.004c9140
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 0x22], 1
mov ecx, 0x6c6dd0
jne 0x4f1cd2
push 0x8cf
jmp 0x4f353b
push 0x8d0
jmp 0x4f353b
push 0x8d1
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
xor edi, edi
lea ecx, [ecx]
mov edx, dword [0x6d8f5c]
lea ecx, [edi + 0x186]
push ecx
push edx
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f1d29
mov ecx, dword [eax]
mov edx, dword [0x6d4484]
cmp ecx, dword [edx + 0x250]
je 0x4f1d42
inc edi
cmp edi, 0x50
jl 0x4f1d00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
add edi, 0x186
cmp dword [eax + 0xa], 1
jbe 0x4f1d6f
mov ecx, dword [0x6d41dc]
push 0xffffffffffffffff
push edi
call fcn.004cad90
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
push 0
lea eax, [ebp - 0x3924]
push eax
push edi
mov ecx, esi
mov dword [ebp - 0x3924], 0
call fcn.004e5440
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
xor edi, edi
mov edx, dword [0x6d8f5c]
lea ecx, [edi + 0x186]
push ecx
push edx
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f1dc3
mov ecx, dword [eax]
cmp ecx, dword [ebx + 0x22]
je 0x4f1dd3
inc edi
cmp edi, 0x50
jl 0x4f1da3
push 0x87c
jmp 0x4f3536
add edi, 0x186
cmp dword [eax + 0xa], 1
jbe 0x4f1df7
mov ecx, dword [0x6d41dc]
push 0xffffffffffffffff
push edi
call fcn.004cad90
push 0x87c
jmp 0x4f3536
push 0
push 0
push 0
lea edx, [ebp - 0x3924]
push edx
push edi
mov ecx, esi
mov dword [ebp - 0x3924], 0
call fcn.004e5440
push 0x87c
jmp 0x4f3536
xor edi, edi
mov ecx, dword [0x6d8f5c]
lea eax, [edi + 0x186]
push eax
push ecx
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f1e42
mov edx, dword [eax]
cmp edx, dword [ebx + 0x22]
je 0x4f1e4a
inc edi
cmp edi, 0x50
jl 0x4f1e22
jmp 0x4f1e85
add edi, 0x186
cmp dword [eax + 0xa], 1
jbe 0x4f1e66
mov ecx, dword [0x6d41dc]
push 0xffffffffffffffff
push edi
call fcn.004cad90
jmp 0x4f1e85
push 0
push 0
push 0
lea eax, [ebp - 0x3924]
push eax
push edi
mov ecx, esi
mov dword [ebp - 0x3924], 0
call fcn.004e5440
mov ecx, dword [ebx + 0x2a]
push ecx
push 0x8c8
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x395
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0xff8
push 0x604150
call fcn.004c9140
add esp, 0x10
xor edi, edi
mov eax, dword [0x6d8f5c]
lea edx, [edi + 0x186]
push edx
push eax
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f1f0d
mov ecx, dword [eax]
mov edx, dword [0x6d43a8]
cmp ecx, dword [edx + 0x254]
je 0x4f2167
inc edi
cmp edi, 0x50
jl 0x4f1ee1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov eax, dword [ebx + 0x22]
add eax, 0xfffffffe
cmp eax, 4
ja case.default.0x4eec58
jmp dword [eax*4 + 0x4f3a98]
push 0x390
jmp 0x4f3536
push 0x394
jmp 0x4f3536
push 0x391
jmp 0x4f3536
push 0x392
jmp 0x4f3536
push 0x393
jmp 0x4f3536
push 0
push 0
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [0x6d8f5c]
push 0
push 6
push ecx
mov ecx, 0x60cc24
call fcn.005350f0
push 1
jmp 0x4f2034
mov eax, dword [ebx + 0x22]
dec eax
cmp eax, 5
ja case.default.0x4f1fbd
jmp dword [eax*4 + 0x4f3aac]
push 0x312
jmp 0x4f1fd7
push 0x4a1
jmp 0x4f1fd7
push 0x4a0
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 3
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, dword [0x6d8f5c]
push 0
push 6
push ecx
mov ecx, 0x60cc24
call fcn.005350f0
push 0
mov ecx, dword [0x6d43d4]
call fcn.00443950
mov ecx, dword [0x6d43d4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebx + 0x22]
push ecx
mov ecx, 0x6d8f58
call fcn.0052fc20
test eax, eax
je case.default.0x4eec58
add ebx, 0x26
push ebx
mov ecx, eax
call fcn.0054add0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d43d8]
test ecx, ecx
je case.default.0x4eec58
call fcn.00563f70
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d43d8]
test ecx, ecx
je case.default.0x4eec58
call fcn.00564060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x477
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0xff9
push 0x604150
call fcn.004c9140
mov ebx, dword [0x6d43e8]
add esp, 0x10
test ebx, ebx
je case.default.0x4eec58
xor edi, edi
jmp 0x4f2120
mov eax, dword [0x6d8f5c]
lea edx, [edi + 0x186]
push edx
push eax
mov ecx, esi
call fcn.004d5390
test eax, eax
je 0x4f214e
mov ecx, dword [eax]
cmp ecx, dword [ebx + 0x254]
jne 0x4f214e
movzx edx, word [eax + 8]
cmp edx, dword [ebx + 0x250]
je 0x4f2167
inc edi
cmp edi, 0x50
jl 0x4f2120
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0
push 0
push 0
lea eax, [ebp - 0x3924]
push eax
add edi, 0x186
push edi
mov ecx, esi
mov dword [ebp - 0x3924], 0
call fcn.004e5440
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x312
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d43e8]
add esp, 0xc
call fcn.0043e590
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d43ec]
test ecx, ecx
je case.default.0x4eec58
call fcn.00562bb0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d43ec]
test ecx, ecx
je 0x4f2211
call fcn.004f5b80
push 0x4d1
jmp 0x4f3536
movzx ecx, word [ebx + 0x2e]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4f223b
lea eax, [edi + 0x2c0]
test eax, eax
jne 0x4f2259
mov ecx, dword [0x6d43f0]
call fcn.0055c460
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [eax + 0xe], 0
je 0x4f226f
mov edx, dword [edi + 0x2ce]
push 0
push edx
mov ecx, esi
call fcn.004e0410
mov eax, dword [ebx + 0x6a]
add ebx, 0x6a
push ebx
mov ecx, esi
mov dword [edi + 0x2ce], eax
call fcn.004e0390
lea eax, [edi + 0x2c0]
push eax
mov ecx, edi
call fcn.004d28e0
push edi
mov ecx, 0x6d5cf0
call fcn.004e7610
mov ecx, dword [0x6d43f0]
call fcn.0055d930
mov ecx, 0x60d9d8
call fcn.0055b060
push 0x4d3
jmp 0x4f3536
mov ecx, dword [0x6d43f0]
call fcn.0055c460
push 0x4d4
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
mov ecx, dword [0x6d43f0]
add esp, 0xc
cmp dword [ecx + 0x129c], 0
je case.default.0x4eec58
call fcn.0055c240
mov ecx, dword [0x6d43f0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x54]
push 0
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx ecx, byte [ebx + 0x22]
push ecx
movzx ecx, word [ebx + 0x23]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
lea ecx, [edx + eax + 1]
push ecx
push 0x389
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0xff5
push 0x604150
call fcn.004c9140
add esp, 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x388
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 1
push 0xff6
push 0x604150
call fcn.004c9140
add esp, 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebx + 0x22]
push edx
mov ecx, 0x6d8f58
call fcn.0052fc20
cmp dword [ebx + 0x26], 0xcf77
mov esi, eax
jne 0x4f23db
cmp dword [ebx + 0x2a], 0
jne 0x4f23db
push 0x40c
push esi
mov ecx, 0x6d2020
call fcn.00462260
cmp dword [ebx + 0x26], 0xcf9f
jne case.default.0x4eec58
cmp dword [ebx + 0x2a], 0
jne case.default.0x4eec58
push str.m_ba_082.beff
call fcn.0040c1b0
add esp, 4
push eax
push esi
mov ecx, 0x6d2020
call fcn.00462260
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
movzx eax, word [ebx + 0x22]
push 0
push 0
push eax
push eax
call fcn.004d51d0
movzx ecx, al
push ecx
mov ecx, esi
call fcn.004e8a50
push 0
push 0
mov ecx, esi
call fcn.004d53d0
push 2
push 0
mov ecx, esi
call fcn.004d53d0
push 0xa
push 0
mov ecx, esi
call fcn.004d53d0
push 5
push 0
mov ecx, esi
call fcn.004d53d0
mov ecx, 0x60d9d8
call fcn.0055b060
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebx + 0x26]
push edx
mov ecx, 0x6f7048
call fcn.00584ca0
test eax, eax
je case.default.0x4eec58
mov ecx, dword [ebx + 0x22]
mov dword [eax], ecx
mov edx, dword [ebx + 0x26]
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x2a]
mov dword [eax + 8], ecx
mov edx, dword [ebx + 0x2e]
mov dword [eax + 0xc], edx
mov ecx, dword [ebx + 0x32]
mov dword [eax + 0x10], ecx
mov edx, dword [ebx + 0x26]
push edx
mov ecx, esi
call fcn.004e77f0
mov eax, dword [ebx + 0x26]
push eax
mov ecx, 0x6f7048
call fcn.00584d30
push 0x604
jmp 0x4f3536
mov ebx, dword [ebx + 0x22]
test ebx, ebx
jne 0x4f24e8
push 0x62b
jmp 0x4f3536
cmp ebx, 1
jne 0x4f24f7
push 0x605
jmp 0x4f3536
cmp ebx, 2
jne case.default.0x4eec58
push 0x62e
jmp 0x4f3536
xor ecx, ecx
mov dword [ebp - 0x3918], 0
cmp cx, word [ebx + 0x22]
jae 0x4f2578
lea edi, [ebx + 0x28]
nop
mov edx, dword [edi]
push edx
mov ecx, 0x6f7048
call fcn.00584ca0
mov ecx, dword [edi - 4]
mov dword [eax], ecx
mov edx, dword [edi]
mov dword [eax + 4], edx
mov ecx, dword [edi + 4]
mov dword [eax + 8], ecx
mov edx, dword [edi + 8]
mov dword [eax + 0xc], edx
mov ecx, dword [edi + 0xc]
mov dword [eax + 0x10], ecx
mov edx, dword [edi]
push edx
mov ecx, esi
call fcn.004e77f0
mov eax, dword [edi]
push eax
mov ecx, 0x6f7048
call fcn.00584d30
mov eax, dword [ebp - 0x3918]
movzx ecx, word [ebx + 0x22]
inc eax
add edi, 0x14
mov dword [ebp - 0x3918], eax
cmp eax, ecx
jl 0x4f2520
push 0x606
jmp 0x4f3536
mov esi, dword [0x6d42f8]
push 0x313
mov ecx, 0x604150
call fcn.004c56f0
test eax, eax
je 0x4f25c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x60]
push 0x316
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 8]
push 1
call eax
mov ecx, dword [ebx + 0x22]
dec ecx
push ecx
mov ecx, esi
call fcn.004fa030
mov ecx, esi
call fcn.004fa020
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ebx, dword [ebx + 0x22]
cmp ebx, 0x400
jne 0x4f2602
pop edi
pop esi
mov dword [0x6d7aa8], 0
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp ebx, 0x3ff
jne case.default.0x4eec58
pop edi
pop esi
mov dword [0x6d7aa8], 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
push 0x926
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
mov ecx, 0x6d61e0
call fcn.004fa020
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edi, 0xb24
lea edx, [ebx + 0x680]
lea eax, [ebx + 0x2ca]
lea ecx, [ebx + 0x22]
mov dword [ebp - 0x3918], edi
mov dword [ebp - 0x391c], edx
mov dword [ebp - 0x3928], eax
mov dword [ebp - 0x3920], ecx
mov eax, dword [0x6d8f5c]
add eax, edi
cmp dword [eax], 0
je 0x4f26cb
mov ecx, dword [0x6d4314]
push eax
call fcn.0053aed0
mov eax, dword [0x6d8f5c]
mov ecx, dword [eax + edi]
push ecx
mov ecx, 0x6d5cf0
call fcn.004dfa50
mov edx, dword [0x6d8f5c]
mov dword [edx + edi], 0
mov eax, dword [ebp - 0x3920]
push str.MP_ITEM_QUERY_EQUI_ACK
push eax
mov ecx, esi
call fcn.004dabe0
mov ecx, dword [0x6d4314]
mov edi, eax
push edi
call fcn.0053ae70
test edi, edi
je 0x4f2778
mov ecx, dword [ebp - 0x3928]
push ecx
mov ecx, 0x6d5cf0
call fcn.004e0390
mov edx, dword [ebp - 0x391c]
push edx
mov ecx, 0x6d5cf0
call fcn.004e0510
mov eax, dword [edi]
mov edx, dword [eax + 0x98]
push 0
mov ecx, edi
call edx
push eax
mov ecx, esi
call fcn.004da770
mov edx, dword [edi]
push eax
mov eax, dword [edi + 0x2c0]
push eax
mov eax, dword [edx + 0x8c]
mov ecx, edi
call eax
push eax
mov ecx, esi
call fcn.004d6e70
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
push eax
mov ecx, esi
call fcn.004d6eb0
push eax
push edi
mov ecx, 0x6d5cf0
call fcn.004e5d00
mov ecx, dword [0x6d8f5c]
mov edx, dword [ebp - 0x3918]
mov dword [ecx + edx], edi
mov edi, dword [ebp - 0x3918]
add dword [ebp - 0x3920], 0x44
add dword [ebp - 0x3928], 0x5f
add dword [ebp - 0x391c], 0x50
add edi, 4
mov dword [ebp - 0x3918], edi
cmp edi, 0xb4c
jl 0x4f2693
mov ecx, dword [0x6d4314]
push ebx
call fcn.0053aaa0
mov ecx, dword [0x6d4314]
push ebx
call fcn.0053a8f0
mov ecx, dword [0x6d4314]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov esi, dword [0x6d4300]
test esi, esi
je case.default.0x4eec58
mov eax, dword [ebx + 0x22]
push eax
mov ecx, esi
call fcn.004fa0a0
mov ecx, dword [ebx + 0x26]
push ecx
mov ecx, esi
call fcn.0053bb90
mov edx, dword [esi]
mov eax, dword [edx + 8]
push 1
mov ecx, esi
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx + 0x2c]
push eax
mov dword [ebp - 0x3918], eax
call fcn.004e2400
mov ecx, dword [0x6d4308]
call fcn.004f5580
mov edi, eax
test edi, edi
je 0x4f28e8
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [edi]
mov dword [ebp - 0x3924], eax
mov eax, dword [0x6d8f50]
mov dword [ebp - 0x38e0], eax
mov eax, dword [edx + 0x7c]
mov ecx, edi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call eax
mov edx, dword [edi]
mov word [ebp - 0x38da], ax
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
mov edx, dword [edi]
mov dword [ebp - 0x38d8], eax
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
push 0x2c
lea ecx, [ebp - 0x38fc]
push ecx
mov ecx, 0x604d20
mov dword [ebp - 0x38d4], eax
call fcn.0050f010
mov edx, dword [ebp - 0x3924]
add edx, 4
push edx
push 0x77b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx eax, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov ebx, eax
test ebx, ebx
je 0x4f29d2
mov eax, dword [ebp - 0x3918]
mov ecx, dword [eax]
mov edx, dword [ebx]
mov edx, dword [edx + 0xc8]
push ecx
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x90]
mov ecx, ebx
call edx
test eax, eax
je 0x4f2989
mov eax, dword [ebx]
mov edx, dword [eax + 0x78]
mov ecx, ebx
call edx
push eax
mov ecx, esi
call fcn.004d7120
test eax, eax
jne 0x4f2989
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x98]
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004da770
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x8c]
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x90]
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6eb0
push eax
jmp 0x4f29bf
mov eax, dword [ebx]
mov edx, dword [eax + 0x98]
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004da770
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x8c]
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
push eax
push 0
push ebx
mov ecx, esi
call fcn.004e5d00
mov eax, dword [ebx]
mov edx, dword [eax + 8]
push 1
mov ecx, ebx
call edx
mov ecx, dword [0x6d4308]
call fcn.004f53e0
push 0x779
jmp 0x4f3536
mov ecx, dword [0x6d4308]
call fcn.004f5580
mov esi, eax
test esi, esi
je 0x4f2a9d
cmp dword [ebx + 0x22], 0
jne 0x4f2a9d
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [0x6d8f50]
mov edi, eax
mov eax, dword [esi]
mov dword [ebp - 0x38e0], edx
mov edx, dword [eax + 0x7c]
mov ecx, esi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call edx
mov word [ebp - 0x38da], ax
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
mov dword [ebp - 0x38d8], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x74]
mov ecx, esi
call edx
mov dword [ebp - 0x38d4], eax
push 0x2c
lea eax, [ebp - 0x38fc]
push eax
mov ecx, 0x604d20
call fcn.0050f010
add edi, 4
push edi
push 0x77b
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
test eax, eax
je 0x4f2abc
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 8]
push 1
call eax
mov ecx, dword [0x6d4308]
call fcn.004f53e0
push 0x77a
jmp 0x4f3536
lea eax, [ebx + 0x2c]
push eax
mov dword [ebp - 0x3918], eax
call fcn.004e2400
mov ecx, dword [0x6d430c]
call fcn.004f62c0
mov edi, eax
test edi, edi
je 0x4f2b95
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [edi]
mov dword [ebp - 0x3924], eax
mov eax, dword [0x6d8f50]
mov dword [ebp - 0x38e0], eax
mov eax, dword [edx + 0x7c]
mov ecx, edi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call eax
mov edx, dword [edi]
mov word [ebp - 0x38da], ax
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
mov edx, dword [edi]
mov dword [ebp - 0x38d8], eax
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
push 0x2c
lea ecx, [ebp - 0x38fc]
push ecx
mov ecx, 0x604d20
mov dword [ebp - 0x38d4], eax
call fcn.0050f010
mov edx, dword [ebp - 0x3924]
add edx, 4
push edx
push 0x843
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
mov ecx, dword [0x6d430c]
call fcn.004f6fc0
movzx eax, word [ebx + 0x2a]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov ebx, eax
test ebx, ebx
je 0x4f2c8a
mov eax, dword [ebp - 0x3918]
mov ecx, dword [eax]
mov edx, dword [ebx]
mov edx, dword [edx + 0xc8]
push ecx
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x90]
mov ecx, ebx
call edx
test eax, eax
je 0x4f2c41
mov eax, dword [ebx]
mov edx, dword [eax + 0x78]
mov ecx, ebx
call edx
push eax
mov ecx, esi
call fcn.004d7120
test eax, eax
jne 0x4f2c41
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x98]
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004da770
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x8c]
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x90]
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6eb0
push eax
jmp 0x4f2c77
mov eax, dword [ebx]
mov edx, dword [eax + 0x98]
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004da770
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 0x8c]
push 0
mov ecx, ebx
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
push eax
push 0
push ebx
mov ecx, esi
call fcn.004e5d00
mov eax, dword [ebx]
mov edx, dword [eax + 8]
push 1
mov ecx, ebx
call edx
mov ecx, dword [0x6d430c]
call fcn.004f68b0
push 0x784
jmp 0x4f3536
mov ecx, dword [0x6d430c]
call fcn.004f62c0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x68]
push 0
call eax
movzx ecx, word [ebx + 0x36]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
test eax, eax
je 0x4f2cd4
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 8]
push 1
call eax
mov ecx, dword [0x6d430c]
call fcn.004f68b0
push 0x844
jmp 0x4f3536
mov ecx, dword [0x6d4318]
call fcn.004d3e80
mov esi, eax
test esi, esi
je 0x4f2d94
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [esi]
mov edi, eax
mov eax, dword [0x6d8f50]
mov dword [ebp - 0x38e0], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call eax
mov edx, dword [esi]
mov word [ebp - 0x38da], ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [ebp - 0x38d8], eax
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push 0x2c
lea ecx, [ebp - 0x38fc]
push ecx
mov ecx, 0x604d20
mov dword [ebp - 0x38d4], eax
call fcn.0050f010
add edi, 4
push edi
push 0x846
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx edx, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov esi, eax
test esi, esi
je 0x4f2dc6
movzx edx, byte [ebx + 0x2a]
mov eax, dword [esi]
mov eax, dword [eax + 0xd4]
push edx
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 8]
push 1
mov ecx, esi
call eax
mov ecx, dword [0x6d4318]
call fcn.004f7800
cmp byte [ebx + 0x2a], 3
jne case.default.0x4eec58
push 0x847
jmp 0x4f3536
mov ecx, dword [0x6d4318]
call fcn.004d3e80
mov esi, eax
test esi, esi
je 0x4f2e90
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [esi]
mov edi, eax
mov eax, dword [0x6d8f50]
mov dword [ebp - 0x38e0], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call eax
mov edx, dword [esi]
mov word [ebp - 0x38da], ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [ebp - 0x38d8], eax
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push 0x2c
lea ecx, [ebp - 0x38fc]
push ecx
mov ecx, 0x604d20
mov dword [ebp - 0x38d4], eax
call fcn.0050f010
add edi, 4
push edi
push 0x846
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx edx, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov esi, eax
test esi, esi
je 0x4f2ebf
mov eax, dword [esi]
mov edx, dword [eax + 0xd4]
push 0
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
push 1
mov ecx, esi
call edx
mov ecx, dword [0x6d4318]
call fcn.004f7800
push 0x848
jmp 0x4f3536
mov ecx, dword [0x6d431c]
call fcn.004d3e80
mov esi, eax
test esi, esi
je 0x4f2f80
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [0x6d8f50]
mov edi, eax
mov eax, dword [esi]
mov dword [ebp - 0x38e0], edx
mov edx, dword [eax + 0x7c]
mov ecx, esi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call edx
mov word [ebp - 0x38da], ax
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
mov ecx, esi
call edx
mov dword [ebp - 0x38d8], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x74]
mov ecx, esi
call edx
mov dword [ebp - 0x38d4], eax
push 0x2c
lea eax, [ebp - 0x38fc]
push eax
mov ecx, 0x604d20
call fcn.0050f010
add edi, 4
push edi
push 0x846
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx ecx, word [ebx + 0x26]
push ecx
mov ecx, dword [0x6d41dc]
call fcn.004cae60
mov edi, eax
test edi, edi
je 0x4f2fcf
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc931
je 0x4f2fb6
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc92d
jne 0x4f2fcf
mov edx, dword [edi]
mov eax, dword [edx + 0xd4]
push 0
mov ecx, edi
call eax
mov edx, dword [edi]
mov eax, dword [edx + 8]
push 1
mov ecx, edi
call eax
mov ecx, dword [0x6d431c]
call fcn.004f7800
mov edx, dword [edi]
mov eax, dword [edx + 0x74]
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004e77f0
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc931
jne 0x4f3008
push 0x4d6
jmp 0x4f3536
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
cmp eax, 0xc92d
jne case.default.0x4eec58
push 0x84a
jmp 0x4f3536
mov ecx, dword [0x6d431c]
call fcn.004d3e80
mov esi, eax
test esi, esi
je 0x4f30d1
mov edx, dword [esi]
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6f20
mov edx, dword [esi]
mov edi, eax
mov eax, dword [0x6d8f50]
mov dword [ebp - 0x38e0], eax
mov eax, dword [edx + 0x7c]
mov ecx, esi
mov byte [ebp - 0x38fa], 0
mov dword [ebp - 0x38f9], 0x1f60204
call eax
mov edx, dword [esi]
mov word [ebp - 0x38da], ax
mov eax, dword [edx + 0x78]
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [ebp - 0x38d8], eax
mov eax, dword [edx + 0x74]
mov ecx, esi
call eax
push 0x2c
lea ecx, [ebp - 0x38fc]
push ecx
mov ecx, 0x604d20
mov dword [ebp - 0x38d4], eax
call fcn.0050f010
add edi, 4
push edi
push 0x846
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x10
movzx edx, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push edx
call fcn.004cae60
mov esi, eax
test esi, esi
je 0x4f3100
mov eax, dword [esi]
mov edx, dword [eax + 0xd4]
push 3
mov ecx, esi
call edx
mov eax, dword [esi]
mov edx, dword [eax + 8]
push 1
mov ecx, esi
call edx
mov ecx, dword [0x6d431c]
call fcn.004f7800
push 0x84b
jmp 0x4f3536
movzx eax, word [ebx + 0x26]
mov ecx, dword [0x6d41dc]
push eax
call fcn.004cae60
mov edi, eax
test edi, edi
je case.default.0x4eec58
mov edx, dword [edi]
mov eax, dword [ebx + 0x2a]
mov edx, dword [edx + 0xb0]
push eax
mov ecx, edi
call edx
push edi
mov ecx, 0x6d5cf0
call fcn.004e7610
mov eax, dword [0x6d8f5c]
push eax
call fcn.004415d0
mov ecx, eax
call fcn.0056d8a0
mov ecx, dword [0x6d4218]
call fcn.00442020
mov ecx, dword [0x6d4218]
call fcn.004421e0
mov ecx, dword [0x6d4218]
call fcn.00441c00
mov ecx, dword [0x6d4218]
call fcn.00441cf0
mov ecx, dword [0x6d4218]
call fcn.00441de0
mov ecx, dword [0x6d4218]
call fcn.00441ed0
mov ecx, dword [0x6d4218]
call fcn.00442300
mov ecx, dword [0x6d4218]
call fcn.004430a0
mov ecx, dword [0x6d8f5c]
push ecx
mov ecx, 0x6c67b8
call fcn.00435050
mov edx, dword [edi]
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
test eax, eax
je 0x4f3254
mov edx, dword [edi]
mov eax, dword [edx + 0x78]
mov ecx, edi
call eax
push eax
mov ecx, esi
call fcn.004d7120
test eax, eax
jne 0x4f3254
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x98]
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004da770
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x8c]
push 0
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x90]
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6eb0
push eax
push edi
mov ecx, esi
call fcn.004e5d00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [edi]
mov eax, dword [edx + 0x98]
push 0
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004da770
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x8c]
push 0
mov ecx, edi
call eax
push eax
mov ecx, 0x6d5cf0
call fcn.004d6e70
push eax
push 0
push edi
mov ecx, esi
call fcn.004e5d00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov esi, dword [0x6d4320]
test esi, esi
je case.default.0x4eec58
push 0xc
call fcn.00598cf4
mov ecx, dword [ebx + 0x22]
mov dword [eax], ecx
mov edx, dword [ebx + 0x26]
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x2a]
add esp, 4
mov dword [eax + 8], ecx
push eax
mov ecx, esi
call fcn.004d3970
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov esi, dword [0x6d4320]
test esi, esi
je case.default.0x4eec58
push 0xc
call fcn.00598cf4
mov edx, dword [ebx + 0x22]
mov dword [eax], edx
mov ecx, dword [ebx + 0x26]
mov dword [eax + 4], ecx
mov edx, dword [ebx + 0x2a]
add esp, 4
push eax
mov ecx, esi
mov dword [eax + 8], edx
call fcn.004d3a60
mov eax, dword [ebx + 0x2a]
mov ecx, dword [ebx + 0x26]
mov edx, dword [ebx + 0x22]
push eax
push ecx
push edx
push 0x852
jmp 0x4f3382
mov esi, dword [0x6d4320]
test esi, esi
je case.default.0x4eec58
push 0xc
call fcn.00598cf4
mov ecx, dword [ebx + 0x22]
mov dword [eax], ecx
mov edx, dword [ebx + 0x26]
mov dword [eax + 4], edx
mov ecx, dword [ebx + 0x2a]
add esp, 4
mov dword [eax + 8], ecx
push eax
mov ecx, esi
call fcn.004d3a60
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebx + 0x2a]
mov eax, dword [ebx + 0x26]
mov ecx, dword [ebx + 0x22]
push edx
push eax
push ecx
push 0x857
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
cmp dword [ebx + 0x22], 0
jne 0x4f33d4
push 0x853
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
cmp dword [ebx + 0x22], 1
jne 0x4f33f9
push 0x855
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
cmp dword [ebx + 0x22], 2
jne 0x4f341e
push 0x854
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
cmp dword [ebx + 0x22], 3
jne 0x4f3443
push 0x856
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
cmp dword [ebx + 0x22], 4
jne case.default.0x4eec58
push 0x854
jmp 0x4f3536
push ebx
call fcn.004ebe30
push 0x604300
push 0x6d5be8
mov dword [0x6d5be4], 1
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 0x6d5be8
mov ecx, 0x604304
call fcn.00412fb0
push 5
call fcn.004d41d0
add esp, 4
test eax, eax
je 0x4f34bc
push 1
call fcn.00506750
add esp, 4
test eax, eax
jne 0x4f34b0
push 2
call fcn.00506750
add esp, 4
test eax, eax
je 0x4f34bc
mov dword [0x6d5be0], 5
jmp 0x4f34c6
mov dword [0x6d5be0], 7
cmp dword [0x6d41bc], 0
jne case.default.0x4eec58
push 0
push 0
push 0
push 0x4e9210
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
pop edi
pop esi
mov dword [0x6d41bc], eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d44c8]
test ecx, ecx
je case.default.0x4eec58
call fcn.004f5a40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00599821
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [0x6d44c8]
test ecx, ecx
je 0x4f3531
call fcn.004f5b80
push 0x9e5
mov ecx, 0x6c6dd0
call fcn.00448f80
push eax
push 0x17
push 0x6c6dd0
call fcn.0044a500
add esp, 0xc
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.00599821
mov esp, ebp
pop ebp
ret 8