Function at 0x4f2278
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x38
push 0
push 0
dec ecx
jne 0x4f2280
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov ebx, 0x4f9f7c
xor eax, eax
push ebp
push 0x4f3447
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4f7b0c]
mov eax, dword [eax]
add eax, 0x3858
mov dword [ebp - 0xc], eax
mov edx, 0x4f3460
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx], eax
mov edx, 0x4f3470
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 4], eax
mov edx, 0x4f3484
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 8], eax
mov edx, 0x4f3494
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0xc], eax
mov edx, 0x4f34a4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x10], al
mov edx, 0x4f34b8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x11], al
mov edx, 0x4f34cc
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x110]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x110]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x12
mov cl, 2
call fcn.004033dc
mov edx, 0x4f34e4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x18], eax
mov edx, 0x4f34f8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x1c], eax
mov edx, 0x4f350c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x114]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x114]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x20
mov cl, 6
call fcn.004033dc
mov edx, 0x4f3520
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x28], eax
mov edx, 0x4f3538
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x2c], eax
mov edx, 0x4f3550
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x30], eax
mov edx, 0x4f3568
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x34], eax
mov edx, 0x4f3580
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x38], eax
mov edx, 0x4f3598
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x3c], eax
mov edx, 0x4f35b0
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x40], eax
mov edx, 0x4f35c8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x44], eax
mov edx, 0x4f35e0
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x48], eax
mov edx, 0x4f35f8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x4c], eax
mov edx, 0x4f3610
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x50], eax
mov edx, 0x4f3628
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x54], eax
mov edx, 0x4f3640
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x118]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x58
mov cl, 6
call fcn.004033dc
mov edx, 0x4f3654
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x60], eax
mov edx, 0x4f3668
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x64], eax
mov edx, 0x4f367c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x11c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x68
mov cl, 2
call fcn.004033dc
mov edx, 0x4f368c
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x6c], eax
mov edx, 0x4f369c
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x70]
wait
mov edx, 0x4f36ac
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x78]
wait
mov edx, 0x4f36bc
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x80]
wait
mov edx, 0x4f36d0
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x88]
wait
mov edx, 0x4f36e4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x90]
wait
mov edx, 0x4f36f8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x98]
wait
mov edx, 0x4f370c
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xa0]
wait
mov edx, 0x4f3720
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xa8]
wait
mov edx, 0x4f3734
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xb0]
wait
mov edx, 0x4f3748
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xb8]
wait
mov edx, 0x4f375c
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xc0]
wait
mov edx, 0x4f3770
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xc8]
wait
mov edx, 0x4f3784
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xd0]
wait
mov edx, 0x4f3798
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xd8]
wait
mov edx, 0x4f37ac
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xe0]
wait
mov edx, 0x4f37c4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xe8]
wait
mov edx, 0x4f37d4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xf0]
wait
mov edx, 0x4f37e4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0xf8]
wait
mov edx, 0x4f37f8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x100]
wait
mov edx, 0x4f380c
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x108]
wait
mov edx, 0x4f381c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x120]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x120]
mov eax, ebx
call fcn.00404e38
cmp dword [ebx], 0
je 0x4f283d
mov eax, dword [ebx]
mov edx, 0x4f382c
call fcn.004051f0
jne 0x4f2849
mov eax, ebx
mov edx, 0x4f3838
call fcn.00404e38
mov eax, dword [ebx]
mov al, byte [eax]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x110], al
mov edx, 0x4f3844
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x124]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x111
mov cl, 7
call fcn.004033dc
mov edx, 0x4f3858
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x128]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x128]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x119
mov cl, 7
call fcn.004033dc
mov edx, 0x4f386c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x12c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x121
mov cl, 7
call fcn.004033dc
mov edx, 0x4f387c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x130]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x129
mov cl, 7
call fcn.004033dc
mov edx, 0x4f388c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x134]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x131
mov cl, 7
call fcn.004033dc
mov edx, 0x4f38a0
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x13c], eax
mov edx, 0x4f38b4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x140], al
mov edx, 0x4f38c8
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x141], al
mov edx, 0x4f38dc
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x142], al
mov edx, 0x4f38f0
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x138]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x138]
mov eax, ebx
call fcn.00404e38
cmp dword [ebx], 0
jne 0x4f2a47
mov eax, ebx
mov edx, 0x4f382c
call fcn.00404e38
mov eax, dword [ebx]
mov al, byte [eax]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x143], al
mov edx, 0x4f3904
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x144], al
mov edx, 0x4f3918
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x13c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x13c]
mov eax, ebx
call fcn.00404e38
cmp dword [ebx], 0
jne 0x4f2aa5
mov eax, ebx
mov edx, 0x4f382c
call fcn.00404e38
mov eax, dword [ebx]
mov al, byte [eax]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x145], al
mov edx, 0x4f3930
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x146], al
mov edx, 0x4f3944
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x140]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x140]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x147
mov cl, 1
call fcn.004033dc
mov edx, 0x4f3954
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x144]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x149
mov cl, 1
call fcn.004033dc
mov edx, 0x4f396c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x148]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x148]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x14b
mov cl, 3
call fcn.004033dc
mov edx, 0x4f3980
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x14c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x14c]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x14f
mov cl, 0x14
call fcn.004033dc
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x48]
cmp ebx, 0x2f
jle 0x4f2c0c
cmp ebx, 0x3a
jge 0x4f2c0c
lea eax, [ebp - 0x150]
mov edx, ebx
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0xc]
add eax, 0x14f
mov cl, 0x14
call fcn.004033a0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x4c]
cmp ebx, 0x2f
jle 0x4f2c3f
cmp ebx, 0x3a
jge 0x4f2c3f
lea eax, [ebp - 0x150]
mov edx, ebx
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0xc]
add eax, 0x14f
mov cl, 0x14
call fcn.004033a0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x50]
cmp ebx, 0x2f
jle 0x4f2c72
cmp ebx, 0x3a
jge 0x4f2c72
lea eax, [ebp - 0x150]
mov edx, ebx
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0xc]
add eax, 0x14f
mov cl, 0x14
call fcn.004033a0
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax + 0x54]
cmp ebx, 0x2f
jle 0x4f2ca5
cmp ebx, 0x3a
jge 0x4f2ca5
lea eax, [ebp - 0x150]
mov edx, ebx
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x150]
mov eax, dword [ebp - 0xc]
add eax, 0x14f
mov cl, 0x14
call fcn.004033a0
mov edx, 0x4f3990
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x154]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x154]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x164
mov cl, 9
call fcn.004033dc
mov edx, 0x4f39a8
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x158]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x158]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x16e
mov cl, 0x1c
call fcn.004033dc
mov edx, 0x4f39bc
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x15c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x15c]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x18b
mov cl, 0x1c
call fcn.004033dc
mov edx, 0x4f39d0
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x160]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x1a8
mov cl, 0x1c
call fcn.004033dc
mov edx, 0x4f39e4
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x164]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x1c5
mov cl, 0x1c
call fcn.004033dc
mov edx, 0x4f39f8
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x16c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x16c]
lea edx, [ebp - 0x168]
call fcn.00484fc8
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x1e2
mov cl, 0x11
call fcn.004033dc
mov edx, 0x4f3a0c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x170]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x1f4
mov cl, 6
call fcn.004033dc
mov edx, 0x4f3a1c
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x1fb], al
mov edx, 0x4f3a30
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x1fc], al
mov edx, 0x4f3a44
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x278], eax
mov eax, dword [ebp - 0xc]
cmp byte [eax + 0x10], 4
jae 0x4f2f00
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x278]
test eax, eax
jl 0x4f2ef5
dec eax
jle 0x4f2f00
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dword [eax + 0x278], edx
mov edx, 0x4f3a58
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x284], eax
mov edx, 0x4f3a70
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x27c], eax
mov edx, 0x4f3a84
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x280], eax
mov edx, 0x4f3a98
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x1fd], al
mov edx, 0x4f3ab0
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x1fe], al
mov edx, 0x4f3ac4
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, dword [ebp - 0xc]
mov byte [edx + 0x1ff], al
mov edx, 0x4f3adc
mov eax, dword [ebp - 4]
call fcn.0049dc44
mov edx, dword [eax]
call dword [edx + 0x58]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x200], eax
mov edx, 0x4f3af4
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x174]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x174]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x204
mov cl, 1
call fcn.004033dc
mov edx, 0x4f3b04
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x178]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x206
mov cl, 0x10
call fcn.004033dc
mov edx, 0x4f3b18
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x17c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x217
mov cl, 7
call fcn.004033dc
mov edx, 0x4f3b2c
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x180]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x180]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x21f
mov cl, 7
call fcn.004033dc
mov edx, 0x4f3b40
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x184]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x227
mov cl, 0xd
call fcn.004033dc
lea eax, [ebp - 0x188]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x18c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x18c]
mov ecx, 0x14
mov edx, 1
call fcn.00405304
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x235
mov cl, 0x14
call fcn.004033dc
lea eax, [ebp - 0x190]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x194]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x194]
mov ecx, 4
mov edx, 0x15
call fcn.00405304
mov eax, dword [ebp - 0x190]
lea edx, [ebp - 8]
call fcn.00403618
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x24c], eax
lea eax, [ebp - 0x198]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x19c]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x19c]
mov ecx, 1
mov edx, 0x19
call fcn.00405304
mov edx, dword [ebp - 0x198]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x250
mov cl, 1
call fcn.004033dc
lea eax, [ebp - 0x1a0]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x1a4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x1a4]
mov ecx, 4
mov edx, 0x1a
call fcn.00405304
mov eax, dword [ebp - 0x1a0]
lea edx, [ebp - 8]
call fcn.00403618
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x254], eax
xor eax, eax
push ebp
push 0x4f32c3
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1a8]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x1ac]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x1ac]
mov ecx, 6
mov edx, 0x1e
call fcn.00405304
mov eax, dword [ebp - 0x1a8]
lea edx, [ebp - 8]
call fcn.00403618
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x258], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4f32d8
lea eax, [ebp - 0x1b0]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x1b4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x1b4]
mov ecx, 0x12
mov edx, 0x24
call fcn.00405304
mov eax, dword [ebp - 0x1b0]
lea edx, [ebp - 8]
call fcn.004039e0
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x260]
wait
mov eax, dword [ebp - 0xc]
fld qword [eax + 0x260]
fdiv dword [0x4f3b5c]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x260]
wait
lea eax, [ebp - 0x1b8]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x1bc]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x1bc]
mov ecx, 0xc
mov edx, 0x36
call fcn.00405304
mov eax, dword [ebp - 0x1b8]
lea edx, [ebp - 8]
call fcn.004039e0
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x268]
wait
mov eax, dword [ebp - 0xc]
fld qword [eax + 0x268]
fdiv dword [0x4f3b60]
mov eax, dword [ebp - 0xc]
fstp qword [eax + 0x268]
wait
lea eax, [ebp - 0x1c0]
push eax
mov edx, 0x4f3b54
mov eax, dword [ebp - 4]
call fcn.0049dc44
lea edx, [ebp - 0x1c4]
mov ecx, dword [eax]
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x1c4]
mov ecx, 5
mov edx, 0x42
call fcn.00405304
mov edx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x10c]
mov ecx, 0xff
call fcn.00405080
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0xc]
add eax, 0x270
mov cl, 5
call fcn.004033dc
mov eax, dword [ebp - 0xc]
add eax, 0x1e2
mov edx, dword [ebp - 0xc]
add edx, 0x270
mov cl, 0x11
call fcn.004033a0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f344e
lea eax, [ebp - 0x1c4]
mov edx, 0x1d
call fcn.00404e08
lea eax, [ebp - 0x14c]
mov edx, 0x10
call fcn.00404e08
ret