Function at 0x4f75c7
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x74
mov eax, 0x4ab323
call 0x54c6a5
mov ebx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x28], edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.004bf622
mov dword [ebp - 4], edi
call 0x52cc48
push eax
lea ecx, [ebp - 0x2c]
call fcn.004bf36f
xor esi, esi
inc esi
mov byte [ebp - 4], 1
call 0x52cc48
push eax
lea ecx, [ebp - 0x24]
call fcn.004bf36f
mov byte [ebp - 4], 2
call 0x52cc48
push eax
lea ecx, [ebp - 0x1c]
call fcn.004bf36f
mov byte [ebp - 4], 3
call 0x52cc48
push eax
lea ecx, [ebp - 0x20]
call fcn.004bf36f
mov byte [ebp - 4], 4
call 0x52cc48
push eax
lea ecx, [ebp - 0x30]
call fcn.004bf36f
mov byte [ebp - 4], 5
push esi
mov ecx, ebx
mov dword [ebp - 0x54], edi
mov dword [ebx + 0x750], esi
mov dword [ebx + 0x74c], edi
call fcn.00501dac
mov eax, ebx
call 0x5243fb
push edi
push 0x8ef
mov esi, ebx
call fcn.004fd795
lea eax, [ebp + 0xc]
mov dword [ebx + 0x4f4], edi
mov edi, dword [ebx + 0x274]
push eax
call fcn.004cb239
mov ecx, eax
mov byte [ebp - 4], 6
call 0x51f4c8
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov esi, eax
call fcn.004bf355
test esi, esi
je 0x4f76b5
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.004c9180
mov edi, 0x4baec4
lea eax, [ebp - 0x18]
push edi
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4f7718
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004befad
mov esi, 0x4b5f78
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.004c2a78
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
jmp 0x4f771d
mov esi, 0x4b5f78
lea eax, [ebp - 0x18]
push edi
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4f7774
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004befad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.004c2a78
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x18]
push esi
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4f77cb
push 7
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004befad
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.004c2a78
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
mov edi, 0x4bae08
lea eax, [ebp - 0x18]
push edi
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4f7827
push 6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004befad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.004c2a78
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x18]
push 0x4baed0
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4f79aa
mov ecx, ebx
call fcn.004fd565
test eax, eax
je 0x4f7902
cmp dword [ebx + 0x21c], 0
jne 0x4f7902
lea ecx, [ebx + 0x5c]
push 0x4baeec
call fcn.004c0f7b
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.004fd7df
push edi
push 0x8cd
call fcn.004fd7df
push 1
mov ecx, ebx
call fcn.00501dac
cmp dword [ebx + 0x260], edi
je 0x4f78df
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004bf355
xor eax, eax
call 0x54c74a
ret 0x10
cmp dword [ebx + 0x12c], edi
je 0x4f78fa
push 0xb4
push edi
push 0x4d7
call 0x5164f8
add esp, 0xc
cmp dword [ebx + 0x260], edi
jne 0x4f7893
lea eax, [ebp + 8]
push 0x456
push eax
call 0x51ff94
mov byte [ebp - 4], 0xf
push dword [ebx + 0x1c0]
push eax
call fcn.004e4ec0
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004bf355
xor eax, eax
cmp dword [0x4dd264], eax
mov dword [ebx + 0x2d4], 1
jne 0x4f7956
cmp dword [ebx + 0x140], eax
jne 0x4f7956
cmp dword [ebx + 0x21c], eax
je 0x4f795f
push 1
mov edi, ebx
call fcn.00502be6
xor esi, esi
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004bf355
mov eax, esi
jmp 0x4f78d7
lea eax, [ebp - 0x18]
push esi
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4f7a1f
lea eax, [ebp - 0x18]
push edi
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4f7a1f
lea eax, [ebp - 0x18]
push 0x4baec4
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4f7a1f
lea eax, [ebp - 0x18]
push 0x4b9ffc
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4f7a1f
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
push eax
call 0x51d0de
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
jmp 0x4f7b0e
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call 0x51cf12
pop ecx
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x11
call 0x521d7c
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x4c]
call 0x51cf12
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x14
call 0x521d7c
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
push dword [ebp + 0xc]
push dword [ebp - 0x34]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
je 0x4f7afc
lea ecx, [ebp + 0xc]
lea edi, [ebp - 0x34]
call 0x51ee97
test eax, eax
jne 0x4f7afc
mov ecx, edi
lea edi, [ebp + 0xc]
call 0x51ee97
test eax, eax
jne 0x4f7afc
mov esi, 0x4b679c
lea eax, [ebp - 0x50]
push esi
push eax
call 0x51ff3b
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
mov edi, dword [ebx + 0x274]
push eax
call fcn.004c9309
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x50]
push esi
push eax
call 0x51ff3b
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
mov edi, dword [ebx + 0x274]
push eax
call fcn.004c938c
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004bf355
push dword [ebx + 0x54]
lea ecx, [ebp - 0x18]
call fcn.004c1bf4
test eax, eax
jne 0x4f7bda
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call 0x51cf12
pop ecx
mov byte [ebp - 4], 0x19
mov esi, dword [eax]
call 0x530a1e
mov eax, dword [eax + 4]
xor edi, edi
push edi
push esi
push 0x4baefc
mov ecx, eax
call 0x52fe67
neg eax
sbb al, al
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
inc al
add ecx, 0xfffffff0
mov byte [ebp + 0xf], al
call fcn.004bf355
cmp byte [ebp + 0xf], 0
je 0x4f7bdc
lea eax, [ebp - 0x2c]
push 0x4baf0c
push eax
call fcn.004bf640
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.004faeae
cmp dword [ebx + 0x118], edi
je 0x4f7ba8
push edi
push edi
mov ecx, ebx
call fcn.004f1b83
mov esi, eax
jmp 0x4f7961
cmp dword [ebx + 0x438], edi
je 0x4f7bb9
mov ecx, ebx
call fcn.004f5220
jmp 0x4f7ba1
cmp dword [ebp + 0x14], edi
je 0x4f7bb0
lea ecx, [ebx + 0x248]
call 0x51f4c8
test eax, eax
je 0x4f7bb0
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004f7549
jmp 0x4f7ba1
xor edi, edi
cmp dword [ebx + 0x438], edi
jne 0x4f7cb2
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp + 0x14]
call 0x51cf12
pop ecx
mov byte [ebp - 4], 0x1a
mov esi, dword [eax]
call 0x530a1e
mov eax, dword [eax + 4]
push 0x4b679c
push esi
push 0x4baf38
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call 0x530009
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [ebp - 0x34]
call 0x51f4c8
test eax, eax
jne 0x4f7c60
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call 0x51d057
pop ecx
lea ecx, [ebp - 0x34]
push ecx
mov byte [ebp - 4], 0x1d
push eax
mov dword [ebp - 0x28], 1
call 0x51f0c9
test eax, eax
pop ecx
pop ecx
mov byte [ebp + 0xf], 1
jne 0x4f7c64
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x1c
test byte [ebp - 0x28], 1
je 0x4f7c80
mov ecx, dword [ebp - 0x50]
and dword [ebp - 0x28], 0xfffffffe
add ecx, 0xfffffff0
call fcn.004bf355
cmp byte [ebp + 0xf], 0
je 0x4f7ca3
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004f7549
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov esi, eax
call fcn.004bf355
jmp 0x4f7961
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x4baf48
lea esi, [ebp - 0x18]
call fcn.004c0e75
test eax, eax
jle 0x4f7cfd
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call 0x51d8b3
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call 0x51cff8
mov byte [ebp - 4], 0x1f
jmp 0x4f7d35
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0xc]
call 0x51d8b3
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call 0x51cff8
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x30]
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
push 0
push 0x2f
lea ecx, [ebp - 0x20]
call fcn.004c4832
test eax, eax
jge 0x4f7d7c
push 0x4baf54
lea esi, [ebp - 0x20]
call fcn.004c0e75
test eax, eax
jge 0x4f7d7c
push 0x4baf58
call fcn.004c0e75
test eax, eax
jl 0x4f7dcc
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call 0x51d8b3
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call 0x51cff8
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
cmp dword [ebx + 0x1e8], 0
je 0x4f80a6
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x14]
push eax
call 0x521d3d
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x24
call 0x521d3d
add esp, 0x10
mov byte [ebp - 4], 0x25
call 0x52cc48
push eax
lea ecx, [ebp + 0xc]
call fcn.004bf36f
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x26
call 0x51f4c8
test eax, eax
jne 0x4f8081
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
je 0x4f8081
mov esi, 0x4b8f74
lea eax, [ebp - 0x48]
push esi
push eax
call 0x51ff3b
mov byte [ebp - 4], 0x27
mov eax, dword [eax]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
lea eax, [ebp + 0x14]
push eax
call 0x51e7d9
add esp, 0xc
push eax
push edi
push dword [ebp - 0x50]
mov edi, dword [ebx + 0x1e8]
call fcn.00508b26
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x68]
push 0x4b679c
push eax
call 0x51ff3b
mov edi, eax
lea eax, [ebp - 0x64]
push 0x4b8f80
push eax
mov byte [ebp - 4], 0x28
call 0x51ff3b
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
push 0x4b8af8
push eax
mov byte [ebp - 4], 0x29
call 0x51ff3b
add esp, 0x18
mov byte [ebp - 4], 0x2a
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.005088ee
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
push 0x4b679c
push eax
mov byte [ebp - 4], 0x2b
call 0x51ff3b
mov edi, eax
lea eax, [ebp - 0x38]
push 0x4b8f90
push eax
mov byte [ebp - 4], 0x2c
call 0x51ff3b
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x3c]
push 0x4b819c
push eax
mov byte [ebp - 4], 0x2d
call 0x51ff3b
add esp, 0x18
mov byte [ebp - 4], 0x2e
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005088ee
mov byte [ebp - 4], 0x2f
push dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004c0eeb
add esp, 0xc
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.004bf4cc
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x6c]
push esi
push eax
call 0x51ff3b
mov byte [ebp - 4], 0x31
mov edi, dword [eax]
lea eax, [ebp + 0xc]
push eax
call 0x51e7d9
add esp, 0xc
push eax
push 0x4b8fa0
push edi
mov edi, dword [ebx + 0x1e8]
call fcn.00508b26
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x70]
push esi
push eax
call 0x51ff3b
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
push eax
mov ecx, dword [ebx + 0x1e8]
call fcn.005092b2
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x33
call fcn.004bf4cc
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x74]
push esi
push eax
call 0x51ff3b
pop ecx
pop ecx
lea ecx, [ebp + 0xc]
push ecx
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
mov edi, dword [ebx + 0x1e8]
push 0x4b8fa4
push eax
call fcn.00508459
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebx + 0x1e8]
call fcn.005095e8
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
cmp dword [ebx + 0x118], 0
jne 0x4f85a3
lea eax, [ebp - 0x18]
push eax
lea edi, [ebx + 0x54]
push edi
mov esi, ebx
call fcn.004fb530
call 0x52cc48
push eax
lea ecx, [ebp + 0x14]
call fcn.004bf36f
mov byte [ebp - 4], 0x35
call 0x52cc48
push eax
lea ecx, [ebp - 0x4c]
call fcn.004bf36f
mov byte [ebp - 4], 0x36
call 0x52cc48
push eax
lea ecx, [ebp - 0x40]
call fcn.004bf36f
mov byte [ebp - 4], 0x37
call 0x52cc48
push eax
lea ecx, [ebp - 0x3c]
call fcn.004bf36f
mov byte [ebp - 4], 0x38
call 0x52cc48
push eax
lea ecx, [ebp - 0x38]
call fcn.004bf36f
mov byte [ebp - 4], 0x39
call 0x52cc48
push eax
lea ecx, [ebp - 0x48]
call fcn.004bf36f
mov byte [ebp - 4], 0x3a
call 0x52cc48
push eax
lea ecx, [ebp - 0x44]
call fcn.004bf36f
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x3b
call 0x51d8b3
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x3c
call 0x522335
pop ecx
pop ecx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x3d
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
lea eax, [ebp - 0x70]
call 0x51d8b3
pop ecx
push eax
mov byte [ebp - 4], 0x3e
lea eax, [ebp + 0xc]
push eax
call 0x522335
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x6c]
lea esi, [ebx + 0x58]
push eax
mov ecx, esi
call 0x51e156
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x40
call 0x522335
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
call 0x52234d
pop ecx
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x42
call 0x51d8b3
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x43
call 0x522335
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x44
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [ebp - 0x40]
lea edi, [ebp - 0x64]
call 0x51cf98
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call fcn.004bf4cc
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x60]
push esi
push eax
call 0x522335
pop ecx
pop ecx
mov ecx, eax
lea edi, [ebp + 0xc]
mov byte [ebp - 4], 0x46
call 0x51cf98
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x47
call fcn.004bf4cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [ebp - 0x3c]
lea edi, [ebp - 0x5c]
call 0x51cf98
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.004bf4cc
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call 0x51cf12
pop ecx
mov byte [ebp - 4], 0x49
push dword [ebp - 0x40]
push dword [ebp + 0x14]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
je 0x4f84cb
push dword [ebp + 0x14]
push dword [ebp - 0x3c]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
jne 0x4f8342
push dword [ebp - 0x48]
push dword [ebp - 0x38]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
je 0x4f84cb
xor edi, edi
cmp dword [ebx + 0x498], edi
jne 0x4f84cb
cmp dword [ebx + 0x438], edi
jne 0x4f84cb
push 0x4baf48
lea esi, [ebp - 0x18]
call fcn.004c0e75
test eax, eax
jg 0x4f84cb
push edi
push 0x2f
lea ecx, [ebp + 0x14]
call fcn.004c4832
test eax, eax
jge 0x4f84cb
push 0x4baf54
lea esi, [ebp + 0x14]
call fcn.004c0e75
test eax, eax
jge 0x4f84cb
push 0x4baf58
call fcn.004c0e75
test eax, eax
jge 0x4f84cb
push dword [ebp - 0x44]
push dword [ebp - 0x38]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
jne 0x4f83e8
lea eax, [ebp - 0x74]
push 0x4bae98
push eax
call 0x51ff3b
pop ecx
pop ecx
mov byte [ebp - 4], 0x4a
mov edi, dword [ebx + 0x274]
or dword [ebp - 0x28], 2
push eax
call fcn.004c9890
test eax, eax
mov byte [ebp + 0xf], 1
jne 0x4f83ec
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x49
test byte [ebp - 0x28], 2
je 0x4f8404
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004bf355
cmp byte [ebp + 0xf], 0
jne 0x4f84cb
push 0x4baf5c
lea edi, [ebp - 0x50]
call 0x51ee5f
test eax, eax
pop ecx
je 0x4f8436
push 0x4baf6c
lea edi, [ebp - 0x18]
call 0x51ee5f
test eax, eax
pop ecx
jne 0x4f84cb
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call 0x5479c3
test eax, eax
pop ecx
pop ecx
je 0x4f84cb
mov eax, dword [ebx + 0x274]
call fcn.004cbda8
test eax, eax
jne 0x4f84cb
lea esi, [ebx + 0x58]
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], 1
call fcn.004bf4cc
lea ecx, [ebp - 0x1c]
call 0x51f4c8
test eax, eax
je 0x4f84a1
lea eax, [ebp + 0xc]
push esi
push eax
call 0x51e1ca
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4b
call fcn.004bf4cc
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov esi, 0x4b7454
push esi
lea edi, [ebp - 0x1c]
call 0x51ee5f
test eax, eax
pop ecx
jne 0x4f84bc
push esi
mov ecx, edi
call fcn.004bf23d
mov eax, dword [ebp + 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.004bf262
lea eax, [ebp - 0x18]
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
call fcn.004bf4cc
cmp dword [ebx + 0xaec], 0
jne 0x4f8510
push 0x4baa30
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
jne 0x4f8501
push esi
push dword [ebx + 0x274]
call fcn.004c82b0
jmp 0x4f8510
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.004c8549
mov esi, dword [0x4dd494]
call 0x530a1e
mov eax, dword [eax + 4]
push 0
push 0x4baf70
push esi
mov ecx, eax
call 0x52fe67
test eax, eax
je 0x4f8547
mov eax, dword [ebx + 0x168]
or eax, dword [ebx + 0x16c]
jne 0x4f8547
lea ecx, [ebx + 0x58]
call fcn.004bf584
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
and dword [ebx + 0x69c], 0
cmp dword [ebx + 0x27c], 0
mov dword [ebx + 0x698], 1
je 0x4f8630
lea ecx, [ebp - 0x78]
call 0x52e26d
xor ecx, ecx
mov byte [ebp - 4], 0x4d
cmp dword [ebp + 0x10], ecx
je 0x4f85ec
mov eax, dword [ebx + 0x274]
call fcn.004cbda8
test eax, eax
jne 0x4f85ec
mov eax, dword [ebx + 0x27c]
push ecx
push ecx
call fcn.004ce22e
push dword [ebx + 0x27c]
call fcn.004cde92
mov dword [ebp - 4], 0x4c
jmp 0x4f8616
mov byte [ebp - 4], 5
call 0x52e283
mov ecx, dword [ebx + 0x27c]
test ecx, ecx
je 0x4f8630
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x4f795f
cmp dword [ebp - 0x54], edi
mov dword [ebx + 0x27c], edi
jne 0x4f86f1
mov ecx, dword [ebx + 0x274]
call fcn.004c8bd2
cmp edx, edi
jg 0x4f89fa
jl 0x4f866d
cmp eax, 0x3e800
jae 0x4f89fa
mov ecx, dword [ebx + 0x274]
mov eax, ecx
mov dword [ebx + 0x168], edi
mov dword [ebx + 0x16c], edi
mov dword [ebx + 0x170], edi
mov dword [ebx + 0x174], edi
mov dword [ebx + 0x160], edi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x178], edi
mov dword [ebx + 0x17c], edi
mov dword [ebx + 0x598], edi
mov dword [ebx + 0x59c], edi
mov dword [ebx + 0x180], edi
mov dword [ebx + 0x184], edi
call fcn.004cbda8
test eax, eax
jne 0x4f89fa
cmp dword [ebx + 0x118], edi
jne 0x4f89fa
push edi
push edi
mov eax, ecx
call fcn.004c8b19
mov eax, dword [ebx + 0x274]
push edi
push edi
call fcn.004c8d78
jmp 0x4f89fa
lea ecx, [ebp - 0x78]
call 0x52e26d
mov byte [ebp - 4], 0x50
push dword [ebp - 0x24]
call 0x537f9b
mov esi, 0x4b7474
push esi
lea edi, [ebp - 0x24]
call 0x51ee5f
test eax, eax
pop ecx
jne 0x4f876f
push esi
mov eax, edi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004bf05d
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x51
call 0x51a9fe
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov edi, eax
call fcn.004bf355
test edi, edi
je 0x4f876f
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004bf05d
add esp, 0xc
mov byte [ebp - 4], 0x52
push dword [eax]
call 0x537f9b
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
mov dword [ebp - 4], 0x4f
jmp 0x4f8793
mov byte [ebp - 4], 5
call 0x52e283
push esi
lea edi, [ebp - 0x24]
call 0x51ee5f
test eax, eax
pop ecx
je 0x4f87c0
push esi
lea edi, [ebp - 0x1c]
call 0x51ee5f
test eax, eax
pop ecx
jne 0x4f87c0
push esi
mov ecx, edi
call fcn.004bf23d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call 0x520f60
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x54
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x2d
pop edi
push edi
push 0x7c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xc]
push eax
call 0x51f14f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
push 0x3c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
call 0x51f14f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x56
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
push 0x3e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x10]
push eax
call 0x51f14f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x57
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x4baf84
push 0x4baf88
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x74]
push eax
call 0x520db5
add esp, 0x10
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x1c]
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004bf355
mov esi, 0x4baf90
push esi
push 0x4baf94
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x70]
push eax
call 0x520db5
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x59
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004bf355
push esi
push 0x4baf9c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6c]
push eax
call 0x520db5
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x4b70dc
push 0x4bafa4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x68]
push eax
call 0x520db5
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5b
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
push 0x2f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x64]
push eax
call 0x51f14f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5c
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
push 0x3f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call 0x51f14f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
push 0x2a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
call 0x51f14f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5e
call fcn.004bf4cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x58]
push eax
call fcn.004bf4cc
mov ecx, dword [ebx + 0x274]
lea eax, [ebp - 0x1c]
push eax
call fcn.004c863b
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x4f795f
call 0x52cc48
push eax
lea ecx, [ebp + 0xc]
call fcn.004bf36f
mov byte [ebp - 4], 0x5f
call 0x52cc48
push eax
lea ecx, [ebp + 8]
call fcn.004bf36f
mov byte [ebp - 4], 0x60
cmp dword [ebx + 0xaec], edi
je 0x4f8a67
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0xc]
push eax
lea esi, [ebx + 0x54]
lea eax, [ebp + 0x14]
push esi
push eax
call 0x51cb43
add esp, 0x10
push eax
mov ecx, esi
mov byte [ebp - 4], 0x61
call fcn.004bf4cc
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
jmp 0x4f8aba
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0x10]
push eax
call fcn.004cacc4
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x62
call 0x51cb43
add esp, 0x10
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x63
call fcn.004bf4cc
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.004bf355
xor edi, edi
lea ecx, [ebp + 0xc]
call 0x51f4c8
test eax, eax
je 0x4f8ad2
lea ecx, [ebp + 8]
call 0x51f4c8
test eax, eax
jne 0x4f8b10
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0xc]
push eax
call fcn.004c9309
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 8]
push eax
call fcn.004c938c
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x4ac]
call fcn.004bf4cc
lea eax, [ebp + 8]
push eax
lea ecx, [ebx + 0x4b0]
call fcn.004bf4cc
xor edi, edi
cmp dword [ebx + 0xaec], edi
jne 0x4f8b32
push esi
push dword [ebx + 0x274]
call fcn.004c82b0
mov edi, dword [ebx + 0x274]
push esi
call fcn.004c8f5d
xor edi, edi
cmp dword [ebx + 0x118], edi
jne 0x4f8ba1
cmp dword [0x4dd264], edi
jne 0x4f8b59
cmp dword [ebx + 0x140], edi
jne 0x4f8b59
cmp dword [ebx + 0x21c], edi
jne 0x4f8b59
xor esi, esi
inc esi
mov eax, esi
jmp 0x4f8b5e
xor esi, esi
xor eax, eax
inc esi
push eax
mov ecx, ebx
call fcn.005023ae
test eax, eax
jne 0x4f8ba4
mov eax, ebx
call 0x518187
test eax, eax
jne 0x4f8b90
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004bf355
jmp 0x4f795f
mov ecx, ebx
call 0x52d4da
push eax
mov edi, ebx
call fcn.00502be6
jmp 0x4f8b75
xor esi, esi
inc esi
cmp dword [ebx + 0x118], edi
push esi
mov ecx, ebx
je 0x4f8bbc
call fcn.00501dac
mov dword [ebx + 0x118], esi
jmp 0x4f8bc1
call fcn.00501dac
cmp dword [ebx + 0x260], edi
jne 0x4f8b75
cmp dword [ebx + 0x118], edi
jne 0x4f8bf8
mov eax, dword [ebx + 0x274]
lea ecx, [eax + 0xf0]
cmp dword [ecx], edi
je 0x4f8bf2
mov dword [ecx], edi
mov dword [eax + 0xc], esi
mov dword [0x4dd190], esi
mov dword [0x4dd194], esi
mov dword [ebx + 0x128], edi
cmp dword [ebx + 0x260], edi
jne 0x4f8b75
lea eax, [ebp - 0x2c]
push 0x4bafac
push eax
call fcn.004bf640
pop ecx
pop ecx
xor edi, edi
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.004faeae
cmp dword [ebx + 0x260], edi
jne 0x4f8b75
push edi
push 0x8f0
call fcn.004fd795
push 0x1f4
mov ecx, ebx
call fcn.004fd5fa
jmp 0x4f8b75