Function at 0x4ea9ac
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4ac91d
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push esi
push edi
mov eax, dword [0x4d8684]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
call 0x52cc48
push eax
lea ecx, [esp + 0x1c]
call fcn.004bf36f
and dword [esp + 0x68], 0
call 0x52cc48
push eax
lea ecx, [esp + 0x30]
call fcn.004bf36f
xor edi, edi
inc edi
mov byte [esp + 0x68], 1
call 0x52cc48
push eax
lea ecx, [esp + 0x2c]
call fcn.004bf36f
mov byte [esp + 0x68], 2
call 0x52cc48
push eax
lea ecx, [esp + 0x28]
call fcn.004bf36f
mov byte [esp + 0x68], 3
call 0x52cc48
push eax
lea ecx, [esp + 0x38]
call fcn.004bf36f
mov byte [esp + 0x68], 4
call 0x52cc48
push eax
lea ecx, [esp + 0x34]
call fcn.004bf36f
mov byte [esp + 0x68], 5
call 0x52cc48
push eax
lea ecx, [esp + 0x24]
call fcn.004bf36f
mov byte [esp + 0x68], 6
call 0x52cc48
push eax
lea ecx, [esp + 0x18]
call fcn.004bf36f
mov byte [esp + 0x68], 7
call 0x52cc48
push eax
lea ecx, [esp + 0x20]
call fcn.004bf36f
lea ecx, [esp + 0x14]
mov byte [esp + 0x68], 8
call fcn.004bf584
mov ebx, dword [ebp + 8]
mov ecx, ebx
call fcn.004ea583
cmp dword [ebx + 0x4dc], 0
mov esi, eax
mov dword [esp + 0x38], esi
jne 0x4eb58b
mov eax, 0x190
cmp esi, eax
jl 0x4eab24
mov edx, dword [ebx + 0x4f4]
cmp edx, 0x39
mov ecx, 0xc8
jne 0x4eaad2
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x4eab24
cmp edx, 0x3b
jne 0x4eaae1
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x4eab24
cmp edx, 0x2d
jne 0x4eaaf0
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x4eab24
cmp edx, 0x79
jne 0x4eaaff
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x4eab24
cmp edx, 0x29
jne 0x4eab24
mov dword [esp + 0x38], ecx
lea ecx, [ebx + 0x518]
push 0x4b7104
mov dword [ebx + 0x13c], edi
call fcn.004c0f7b
mov eax, dword [esp + 0x38]
lea ecx, [eax - 0x64]
mov edx, 0x12b
cmp ecx, edx
ja 0x4ebbd5
cmp dword [ebx + 0x4f4], 0x21
lea ecx, [edx + 0x21]
jne 0x4eab52
cmp eax, ecx
je 0x4eab52
mov dword [ebx + 0x4f4], 2
cmp dword [ebx + 0x4f4], 0x2f
jne 0x4eab65
mov dword [ebx + 0x4f4], 5
cmp dword [ebx + 0x4f4], 0x25
jne 0x4eab78
mov dword [ebx + 0x4f4], 2
cmp dword [ebx + 0x4f4], edi
jne 0x4eab8a
mov dword [ebx + 0x4f4], 4
mov eax, dword [ebx + 0x4f4]
xor edi, edi
cmp eax, edi
jne 0x4eac3b
push edi
push 0x4b9fe8
call 0x518858
test eax, eax
pop ecx
pop ecx
je 0x4eabcf
push ebx
call fcn.004e79db
test eax, eax
je 0x4eabcf
lea ecx, [ebx + 0x4cc]
call 0x51f4c8
test eax, eax
je 0x4eabcf
lea ecx, [ebx + 0x4d0]
call 0x51f4c8
lea eax, [ebx + 0x54]
push 0x4b9ffc
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4eac1e
cmp dword [ebx + 0x49c], edi
jne 0x4eac1e
lea ecx, [ebx + 0x4cc]
call 0x51f4c8
neg eax
sbb eax, eax
and eax, 0xffffffe4
add eax, 0x1e
mov dword [ebx + 0x4f4], eax
lea eax, [esp + 0x4c]
push 0x6e
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0xa
jmp 0x4eacb9
push 0x6e
pop eax
push eax
mov dword [ebx + 0x4f4], eax
lea eax, [esp + 0x50]
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 9
jmp 0x4eacb9
cmp eax, 0x1f
jne 0x4eac60
mov eax, dword [esp + 0x38]
add eax, 0xffffff38
push 0x63
pop ecx
cmp ecx, eax
sbb eax, eax
and eax, 0x1e
inc eax
inc eax
mov dword [ebx + 0x4f4], eax
jmp 0x4eb291
cmp eax, 0x6f
je 0x4eb27c
cmp eax, 0x75
je 0x4eb27c
cmp eax, 0x71
jne 0x4eac86
mov dword [ebx + 0x4f4], 0x72
jmp 0x4eb291
cmp eax, 0x73
jne 0x4eace6
lea ecx, [ebx + 0x4cc]
call 0x51f4c8
neg eax
sbb eax, eax
and eax, 0xffffffe4
add eax, 0x1e
mov dword [ebx + 0x4f4], eax
lea eax, [esp + 0x4c]
push 0x6e
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0xb
push eax
lea ecx, [ebx + 0x5c]
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
push 0
push 0x8b1
mov esi, ebx
call fcn.004fd7df
jmp 0x4eb291
cmp eax, 3
jne 0x4ead5c
mov eax, dword [esp + 0x38]
add eax, 0xffffff38
cmp eax, 0x63
ja 0x4ead4d
lea eax, [ebx + 0x54]
push 0x4b9ffc
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4ead19
cmp dword [ebx + 0x49c], edi
je 0x4eadf2
mov esi, dword [0x4dd494]
call 0x530a1e
push 0
mov eax, dword [eax + 4]
push 0x4ba004
push esi
mov ecx, eax
call 0x52fe67
test eax, eax
je 0x4eadf2
mov dword [ebx + 0x4f4], 0x78
jmp 0x4eb291
mov dword [ebx + 0x4f4], 4
jmp 0x4eb291
cmp eax, 0x21
je 0x4ead6a
cmp eax, 5
jne 0x4eaded
cmp dword [esp + 0x38], ecx
jne 0x4ead7f
mov dword [ebx + 0x4f4], 0x2e
jmp 0x4eb291
cmp eax, 5
jne 0x4eaded
lea eax, [esp + 0x4c]
push 0x6e
push eax
call 0x51ff94
pop ecx
pop ecx
lea ecx, [ebx + 0x5c]
push eax
mov byte [esp + 0x6c], 0xc
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.004fd7df
lea eax, [ebx + 0x54]
push 0x4b9ffc
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4eaddc
cmp dword [ebx + 0x49c], edi
je 0x4eadf2
mov esi, dword [0x4dd494]
call 0x530a1e
push edi
jmp 0x4ead26
cmp eax, 0x79
jne 0x4eae01
mov dword [ebx + 0x4f4], 0x28
jmp 0x4eb291
cmp eax, 0x29
jne 0x4eaebe
push 4
lea eax, [esp + 0x50]
lea esi, [ebx + 0x510]
push eax
mov ecx, esi
mov dword [ebx + 0x4f4], 0x2c
call fcn.004befad
lea edi, [ebx + 0x518]
push eax
mov ecx, edi
mov byte [esp + 0x6c], 0xd
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x4ba010
mov dword [ebx + 0x13c], 1
call fcn.004c0e75
test eax, eax
jne 0x4eae72
push 0x4ba01c
call fcn.004c0e75
test eax, eax
je 0x4eae7c
mov dword [ebx + 0x13c], 1
push 0x4ba024
push edi
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4eae97
mov dword [ebx + 0x13c], 3
push 0x4ba028
push edi
call 0x51efe2
test eax, eax
pop ecx
pop ecx
je 0x4eaeb2
mov dword [ebx + 0x13c], 5
and dword [ebx + 0x560], 0
jmp 0x4eb291
cmp eax, 0x2d
jne 0x4eafff
mov edi, 0x4b8360
lea esi, [ebx + 0x510]
push edi
mov dword [ebx + 0x4f4], 0x3a
call fcn.004c0e75
test eax, eax
jl 0x4eafee
push edi
call fcn.004c0e75
inc eax
push eax
lea eax, [esp + 0x50]
push eax
mov ecx, esi
call fcn.004befad
lea esi, [ebx + 0x564]
push eax
mov ecx, esi
mov byte [esp + 0x6c], 0xe
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
call fcn.004c0e75
test eax, eax
jl 0x4eaf69
push edi
lea esi, [ebx + 0x564]
call fcn.004c0e75
push eax
lea eax, [esp + 0x50]
lea esi, [ebx + 0x564]
push eax
mov ecx, esi
call fcn.004befd0
push eax
mov ecx, esi
mov byte [esp + 0x6c], 0xf
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
cmp dword [ebx + 0x13c], 3
jne 0x4eafbe
mov cl, 0x2f
lea esi, [ebx + 0x564]
call fcn.004c4863
test eax, eax
jl 0x4eafb7
mov cl, 0x2f
call fcn.004c4863
push eax
lea eax, [esp + 0x50]
push eax
mov ecx, esi
call fcn.004befad
push eax
mov ecx, esi
mov byte [esp + 0x6c], 0x10
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
jmp 0x4eafbe
mov ecx, esi
call fcn.004bf584
push 0
push 0x8da
mov esi, ebx
call fcn.004fd7df
test eax, eax
je 0x4eafee
lea esi, [ebx + 0x564]
lea ecx, [ebx + 0x4a8]
push esi
call fcn.004bf4cc
push 0x4b5f80
mov ecx, esi
call fcn.004c0f7b
mov eax, dword [ebx + 0x444]
mov dword [ebx + 0x448], eax
jmp 0x4eb291
cmp eax, 0x3b
jne 0x4eb272
add esi, 0xffffff9c
cmp esi, edx
ja 0x4eb225
lea esi, [ebx + 0x50c]
mov edi, esi
call fcn.004cd7eb
and dword [ebx + 0x5a4], 0
mov edi, dword [0x4dd494]
call 0x530a1e
mov eax, dword [eax + 4]
push 1
push 0x4ba030
push edi
mov ecx, eax
call 0x52fe67
test eax, eax
jne 0x4eb04e
and dword [ebx + 0x5a4], eax
push 0x4ba03c
call fcn.004c0e75
xor ecx, ecx
test eax, eax
setge cl
push 0x4ba044
mov dword [ebx + 0x5a8], ecx
call fcn.004c0e75
test eax, eax
jl 0x4eb07d
mov dword [ebx + 0x570], 1
push 0x4ba04c
call fcn.004c0e75
test eax, eax
je 0x4eb095
mov dword [ebx + 0x574], 1
call 0x52cc48
push eax
lea ecx, [esp + 0x3c]
call fcn.004bf36f
xor edi, edi
mov byte [esp + 0x68], 0x11
cmp dword [ebx + 0x574], edi
je 0x4eb0c1
push 0x4ba058
lea ecx, [esp + 0x3c]
call fcn.004bf23d
cmp dword [ebx + 0x5a4], edi
je 0x4eb0d7
push 0x4ba064
lea ecx, [esp + 0x3c]
call fcn.004bf23d
cmp dword [ebx + 0x5a8], edi
je 0x4eb0ed
push 0x4ba070
lea ecx, [esp + 0x3c]
call fcn.004bf23d
cmp dword [ebx + 0x570], edi
je 0x4eb103
push 0x4ba078
lea ecx, [esp + 0x3c]
call fcn.004bf23d
cmp dword [ebx + 0x578], edi
je 0x4eb119
push 0x4ba080
lea ecx, [esp + 0x3c]
call fcn.004bf23d
push 0x4ba088
call fcn.004c0e75
test eax, eax
je 0x4eb135
push 0x4ba090
lea ecx, [esp + 0x3c]
call fcn.004bf23d
push 0x4ba098
call fcn.004c0e75
test eax, eax
je 0x4eb151
push 0x4ba0a0
lea ecx, [esp + 0x3c]
call fcn.004bf23d
push 0x4ba0a8
call fcn.004c0e75
test eax, eax
jne 0x4eb16d
push 0x4ba0b4
call fcn.004c0e75
test eax, eax
je 0x4eb17b
push 0x4ba0c0
lea ecx, [esp + 0x3c]
call fcn.004bf23d
lea ecx, [esp + 0x38]
call 0x51f4c8
test eax, eax
jne 0x4eb212
lea eax, [esp + 0x44]
push 0x4ba0c8
push eax
call 0x51ff3b
lea ecx, [esp + 0x40]
push ecx
push eax
lea eax, [esp + 0x58]
push eax
mov byte [esp + 0x7c], 0x12
call fcn.004c0eeb
add esp, 0x14
push 0x4b5f74
push eax
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x74], 0x13
call fcn.004bf05d
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6c], 0x14
call fcn.004bf4cc
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [esp + 0x68], 0x11
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.004bf355
push edi
push 1
push edi
lea ecx, [esp + 0x44]
mov esi, ebx
call fcn.004faeae
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.004bf355
jmp 0x4eb232
lea ecx, [ebx + 0x50c]
call fcn.004bf584
xor edi, edi
cmp dword [ebx + 0x498], edi
je 0x4eb24e
cmp dword [ebx + 0x21c], edi
jne 0x4eb24e
mov dword [ebx + 0x4f4], 0x38
jmp 0x4eb291
or dword [ebx + 0x44c], 0xffffffff
lea eax, [ebx + 0x4a8]
push eax
mov edi, ebx
mov dword [ebx + 0x4d8], 1
call fcn.004ec969
jmp 0x4eb59c
cmp eax, 0x39
jne 0x4eb291
jmp 0x4eb59c
push 0x64
push 0xc
mov esi, ebx
call fcn.004e7a36
mov dword [ebx + 0x4f4], 0x70
mov eax, dword [ebx + 0x4f4]
cmp eax, 2
jne 0x4eb7ed
mov esi, 0x4b679c
push esi
lea eax, [esp + 0x50]
push 0x4ba224
push eax
call 0x51892e
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], 0x20
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
push ebx
call fcn.004e79db
test eax, eax
je 0x4eb342
push esi
lea eax, [esp + 0x50]
push 0x4b61a8
push eax
call 0x51892e
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x21
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
lea ecx, [esp + 0x18]
call 0x51f4c8
test eax, eax
jne 0x4eb342
lea eax, [ebx + 0x4a4]
push eax
lea eax, [esp + 0x1c]
push eax
call 0x51f7fa
test eax, eax
pop ecx
pop ecx
je 0x4eb342
lea ecx, [esp + 0x1c]
call fcn.004bf584
lea ecx, [esp + 0x1c]
call 0x51f4c8
test eax, eax
jne 0x4eb7cc
push ebx
call fcn.004e79db
test eax, eax
je 0x4eb7cc
mov esi, 0x131
lea eax, [esp + 0x48]
push esi
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x22
push dword [eax]
lea eax, [esp + 0x58]
push 0x4b694c
push eax
call 0x51892e
add esp, 0x14
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x23
call fcn.004bf4cc
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x44]
push 0x12e
push eax
call 0x51ff94
pop ecx
pop ecx
push 0x24
pop edi
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x6c], 0x24
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x40]
push 0x12f
push eax
call 0x51ff94
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0x25
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x3c]
push 0x130
push eax
call 0x51ff94
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x6c], 0x26
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x38]
push esi
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0x27
push eax
lea ecx, [esp + 0x38]
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x50]
push 0x168
push eax
call 0x51ff94
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x28
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x4b6930
push 0x428
lea esi, [esp + 0x5c]
call 0x51ffe3
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x6c], 0x29
call fcn.004bf4cc
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x58]
push 0x4ba23c
push eax
call 0x51ff3b
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x7c], 0x2a
call fcn.004c0eeb
add esp, 0x14
push 2
push 1
push 0
mov ecx, eax
mov esi, ebx
mov byte [esp + 0x74], 0x2b
call fcn.004faeae
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
push dword [esp + 0x2c]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
test eax, eax
jne 0x4eb61f
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
push dword [ebx + 0x4ac]
jne 0x4eb56f
push dword [ebx + 0x4a4]
push 0x4ba254
jmp 0x4eb7a0
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push 0x4ba26c
lea eax, [esp + 0x24]
push eax
call fcn.004bf640
add esp, 0x14
push dword [ebx + 0x284]
lea ecx, [esp + 0x18]
mov edx, ebx
call fcn.004ea85f
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004bf355
xor eax, eax
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push dword [esp + 0x28]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
test eax, eax
jne 0x4eb65b
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x4eb64a
push dword [ebx + 0x4a4]
push 0x4ba288
jmp 0x4eb684
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push 0x4ba294
jmp 0x4eb6a2
push dword [esp + 0x24]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
test eax, eax
jne 0x4eb6ba
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x4eb693
push dword [ebx + 0x4a4]
push 0x4ba2a4
lea eax, [esp + 0x1c]
push eax
call fcn.004bf640
add esp, 0xc
jmp 0x4eb6af
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push 0x4ba2b0
lea eax, [esp + 0x20]
push eax
call fcn.004bf640
add esp, 0x10
mov dword [ebx + 0x4f4], edi
jmp 0x4eb58b
push dword [esp + 0x20]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
test eax, eax
jne 0x4eb72f
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
push dword [ebx + 0x4cc]
jne 0x4eb6fe
push dword [ebx + 0x4a4]
lea eax, [esp + 0x1c]
push dword [ebx + 0x4ac]
push 0x4ba2c0
push eax
call fcn.004bf640
add esp, 0x14
jmp 0x4eb720
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
lea eax, [esp + 0x20]
push dword [ebx + 0x4ac]
push 0x4ba2d0
push eax
call fcn.004bf640
add esp, 0x18
mov dword [ebx + 0x4f4], 0x1e
jmp 0x4eb58b
lea eax, [esp + 0x58]
push 0x416
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0x2c
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.004bf355
cmp byte [esp + 0x13], 0
je 0x4eb782
push dword [ebx + 0x4ac]
push 0x4ba230
jmp 0x4ebb77
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x4eb7b2
push dword [ebx + 0x4a4]
push dword [ebx + 0x4ac]
push 0x4ba2e4
lea eax, [esp + 0x20]
push eax
call fcn.004bf640
add esp, 0x10
jmp 0x4eb58b
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push dword [ebx + 0x4ac]
push 0x4ba2f4
jmp 0x4eb57e
lea esi, [ebx + 0x4ac]
mov ecx, esi
call 0x51f4c8
test eax, eax
je 0x4eb7e9
push 0x4b9ae8
mov ecx, esi
call fcn.004c0f7b
push dword [esi]
jmp 0x4eb778
push 0x1e
pop edi
cmp eax, edi
jne 0x4eb99a
lea eax, [esp + 0x54]
push 0x131
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x2d
push dword [eax]
lea eax, [esp + 0x64]
push 0x4b694c
push eax
call 0x51892e
add esp, 0x14
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x2e
call fcn.004bf4cc
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.004bf355
lea esi, [ebx + 0x4cc]
mov ecx, esi
call 0x51f4c8
test eax, eax
je 0x4eb869
push 0x4b9ae8
mov ecx, esi
call fcn.004c0f7b
lea eax, [esp + 0x58]
push 0x416
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0x2f
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.004bf355
cmp byte [esp + 0x13], 0
je 0x4eb8fa
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x4eb8d1
push dword [ebx + 0x4a4]
push dword [esi]
push dword [ebx + 0x4ac]
push 0x4ba304
jmp 0x4eb57e
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
lea eax, [esp + 0x1c]
push dword [esi]
push dword [ebx + 0x4ac]
push 0x4ba314
push eax
call fcn.004bf640
add esp, 0x18
jmp 0x4eb58b
lea eax, [esp + 0x58]
push 0x428
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0x30
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.004bf355
cmp byte [esp + 0x13], 0
push dword [esi]
je 0x4eb778
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x4eb973
push dword [ebx + 0x4a4]
lea eax, [esp + 0x1c]
push dword [ebx + 0x4ac]
push 0x4ba2c0
push eax
call fcn.004bf640
add esp, 0x14
jmp 0x4eb6af
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
lea eax, [esp + 0x20]
push dword [ebx + 0x4ac]
push 0x4ba2d0
push eax
call fcn.004bf640
add esp, 0x18
jmp 0x4eb6af
cmp eax, 0x20
jne 0x4ebaf3
lea eax, [esp + 0x54]
push 0x131
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x31
push dword [eax]
lea eax, [esp + 0x64]
push 0x4b694c
push eax
call 0x51892e
add esp, 0x14
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x32
call fcn.004bf4cc
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.004bf355
lea eax, [esp + 0x50]
push 0x416
push eax
call 0x51ff94
pop ecx
pop ecx
mov byte [esp + 0x68], 0x33
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x50]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.004bf355
cmp byte [esp + 0x13], 0
je 0x4eba88
lea edi, [ebx + 0x4d0]
mov ecx, edi
call 0x51f4c8
test eax, eax
je 0x4eba57
push 0x4ba328
mov ecx, edi
call fcn.004c0f7b
lea esi, [ebx + 0x4b0]
mov ecx, esi
call 0x51f4c8
test eax, eax
je 0x4eba74
push 0x4ba328
mov ecx, esi
call fcn.004c0f7b
push dword [ebx + 0x4a4]
push dword [edi]
push dword [esi]
push 0x4ba338
jmp 0x4eb57e
push 0x4b6930
push 0x428
lea esi, [esp + 0x60]
call 0x51ffe3
pop ecx
pop ecx
mov byte [esp + 0x68], 0x34
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.004c1bf4
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.004bf355
cmp byte [esp + 0x13], 0
je 0x4ebaeb
lea esi, [ebx + 0x4b0]
mov ecx, esi
call 0x51f4c8
test eax, eax
je 0x4ebb70
push 0x4ba328
jmp 0x4ebb69
lea esi, [ebx + 0x4d0]
jmp 0x4ebb59
cmp eax, 0x2e
jne 0x4ebb1e
lea esi, [ebx + 0x4d0]
mov ecx, esi
call 0x51f4c8
test eax, eax
je 0x4ebb15
push 0x4b9af4
mov ecx, esi
call fcn.004c0f7b
push dword [esi]
push 0x4ba354
jmp 0x4ebb77
cmp eax, 0x6e
jne 0x4ebb2d
push 0x4ba360
jmp 0x4ebbb7
cmp eax, 0x74
jne 0x4ebb39
push 0x4ba36c
jmp 0x4ebbb7
cmp eax, 0x70
je 0x4eb59c
cmp eax, 0x72
jne 0x4ebb4e
push 0x4ba378
jmp 0x4ebbb7
cmp eax, 4
jne 0x4ebb89
lea esi, [ebx + 0x4b0]
mov ecx, esi
call 0x51f4c8
test eax, eax
je 0x4ebb70
push 0x4b9af4
mov ecx, esi
call fcn.004c0f7b
push dword [esi]
push 0x4ba348
lea eax, [esp + 0x1c]
push eax
call fcn.004bf640
add esp, 0xc
jmp 0x4eb58b
cmp eax, 0x2c
jne 0x4ebb95
push 0x4ba384
jmp 0x4ebbb7
cmp eax, 0x78
jne 0x4ebba1
push 0x4ba38c
jmp 0x4ebbb7
cmp eax, 0x28
jne 0x4ebbad
push 0x4ba394
jmp 0x4ebbb7
cmp eax, 0x3a
jne 0x4ebbc5
push 0x4ba39c
lea ecx, [esp + 0x18]
call fcn.004c0f7b
jmp 0x4eb58b
cmp eax, 0x38
jne 0x4eb58b
push 0x4ba3a4
jmp 0x4ebbb7
or dword [ebx + 0x44c], 0xffffffff
push edi
mov ecx, ebx
call fcn.00501dac
cmp dword [ebx + 0x260], 0
jne 0x4eb59c
cmp dword [ebx + 0x4f4], 3
jne 0x4ebc93
cmp dword [ebx + 0x49c], 0
jne 0x4ebc93
lea eax, [ebx + 0x54]
push 0x4b9ffc
push eax
call 0x51efe2
test eax, eax
pop ecx
pop ecx
jne 0x4ebc93
lea esi, [ebx + 0x508]
push 0x4b6f58
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
jne 0x4ebc47
push 0x4ba0d4
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebc93
lea eax, [esp + 0x58]
push 0x4ba0d8
push eax
mov dword [ebx + 0x49c], edi
call 0x51ff3b
pop ecx
pop ecx
push 0
push edi
push 0
mov ecx, eax
mov esi, ebx
mov byte [esp + 0x74], 0x15
call fcn.004faeae
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
push 0x1f4
mov ecx, ebx
call fcn.004fd5fa
jmp 0x4eb59c
xor eax, eax
lea esi, [ebx + 0x508]
push 0x4ba0f4
push esi
mov dword [esp + 0x50], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebcd9
push 0x4ba0fc
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebcd9
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push 0x4ba108
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebcf2
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push 0x4ba120
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd0b
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push 0x4ba130
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd24
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push 0x4ba140
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd3d
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push 0x4ba154
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd52
mov dword [esp + 0x3c], edi
push 0x4ba15c
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd67
mov dword [esp + 0x3c], edi
push 0x4ba168
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd8d
push 0x4ba170
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebd8d
mov dword [esp + 0x3c], edi
push 0x4ba178
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebdb3
push 0x4ba184
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebdb3
mov dword [esp + 0x3c], edi
push 0x4ba198
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebdd9
push 0x4ba1ac
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebdd9
mov dword [esp + 0x3c], edi
push 0x4ba1bc
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ebf06
mov esi, dword [0x4dd494]
call 0x530a1e
mov eax, dword [eax + 4]
push edi
push 0x4ba1c4
push esi
mov ecx, eax
call 0x52fe67
test eax, eax
je 0x4ec035
push dword [esp + 0x4c]
lea ecx, [esp + 0x40]
call fcn.004bf622
lea edi, [esp + 0x3c]
mov byte [esp + 0x68], 0x16
call fcn.004cd7eb
push 0x4ba1d8
mov esi, edi
call fcn.004c0e75
push eax
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call fcn.004befd0
push eax
mov ecx, edi
mov byte [esp + 0x6c], 0x17
call fcn.004bf4cc
mov byte [esp + 0x68], 0x16
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
call fcn.004c1b37
mov ebx, edi
call fcn.004c1ae9
mov esi, dword [esp + 0x3c]
push 0x20
push esi
call 0x547e04
test eax, eax
pop ecx
pop ecx
je 0x4ec01e
sub eax, esi
test eax, eax
jle 0x4ec01e
push 0x20
push esi
call 0x547e04
test eax, eax
pop ecx
pop ecx
jne 0x4ebea3
or eax, 0xffffffff
jmp 0x4ebea5
sub eax, esi
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x44]
call fcn.004befad
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x18
call fcn.004bf4cc
mov byte [esp + 0x68], 0x16
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
lea edi, [esp + 0x3c]
call fcn.004c1b37
mov ebx, edi
call fcn.004c1ae9
mov eax, edi
push eax
call 0x520280
imul eax, eax, 0x3c
test eax, eax
pop ecx
mov dword [esp + 0x44], eax
jle 0x4ec01e
inc eax
mov dword [esp + 0x44], eax
jmp 0x4ec01e
push 0x4ba1e0
push esi
call 0x51f08b
test eax, eax
pop ecx
pop ecx
je 0x4ec039
mov esi, dword [0x4dd494]
call 0x530a1e
mov eax, dword [eax + 4]
push edi
push 0x4ba1c4
push esi
mov ecx, eax
call 0x52fe67
test eax, eax
je 0x4ec035
push dword [esp + 0x4c]
lea ecx, [esp + 0x40]
call fcn.004bf622
lea edi, [esp + 0x3c]
mov byte [esp + 0x68], 0x19
call fcn.004cd7eb
push 0x4ba1e8
mov esi, edi
call fcn.004c0e75
push eax
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call fcn.004befd0
push eax
mov ecx, edi
mov byte [esp + 0x6c], 0x1a
call fcn.004bf4cc
mov byte [esp + 0x68], 0x19
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
call fcn.004c1b37
mov ebx, edi
call fcn.004c1ae9
mov esi, dword [esp + 0x3c]
push 0x20
push esi
call 0x547e04
test eax, eax
pop ecx
pop ecx
je 0x4ec01e
sub eax, esi
test eax, eax
jle 0x4ec01e
push 0x20
push esi
call 0x547e04
test eax, eax
pop ecx
pop ecx
jne 0x4ebfc8
or eax, 0xffffffff
jmp 0x4ebfca
sub eax, esi
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x44]
call fcn.004befad
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x1b
call fcn.004bf4cc
mov byte [esp + 0x68], 0x19
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.004bf355
lea edi, [esp + 0x3c]
call fcn.004c1b37
mov ebx, edi
call fcn.004c1ae9
mov eax, edi
push eax
call 0x520280
test eax, eax
pop ecx
mov dword [esp + 0x44], eax
jle 0x4ec01e
inc dword [esp + 0x44]
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.004bf355
mov ebx, dword [ebp + 8]
xor edi, edi
inc edi
mov dword [esp + 0x3c], edi
xor esi, esi
cmp dword [ebx + 0x498], esi
mov edi, 0x4b9bb8
jne 0x4ec07a
cmp dword [esp + 0x48], esi
jne 0x4ec07a
mov esi, dword [0x4dd494]
call 0x530a1e
mov eax, dword [eax + 4]
push 1
push edi
push esi
mov ecx, eax
call 0x52fe67
test eax, eax
je 0x4ec078
and dword [esp + 0x40], 0
mov dword [esp + 0x3c], 1
xor esi, esi
cmp dword [ebx + 0x438], esi
je 0x4ec095
push 0xa
push 0x8e7
mov esi, ebx
call fcn.004fd795
jmp 0x4eb59c
mov eax, dword [ebx + 0x4f4]
cmp eax, 0x1f
je 0x4ec4a0
cmp eax, 0x21
je 0x4ec4a0
cmp eax, 0x6f
jne 0x4ec0e8
mov dword [ebx + 0x4f4], 0x74
mov eax, dword [ebx + 0x4f4]
cmp eax, 5
jne 0x4ec17d
cmp dword [esp + 0x38], 0x14c
jne 0x4ec17d
mov dword [ebx + 0x4f4], 0x2e
jmp 0x4ec1cb
cmp eax, 0x75
jne 0x4ec0bc
mov eax, dword [ebx + 0x274]
cmp dword [eax + 0x124], esi
je 0x4ec10a
mov ecx, ebx
call fcn.004fcdde
test eax, eax
jne 0x4eb59c
xor edi, edi
push edi
push 0x8b0
mov esi, ebx
mov dword [ebx + 0x10c], edi
call fcn.004fd795
cmp dword [0x4dd264], edi
jne 0x4ec13b
cmp dword [ebx + 0x140], edi
jne 0x4ec13b
cmp dword [ebx + 0x21c], edi
je 0x4eb59c
lea eax, [esp + 0x58]
push 0x54a
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x1d
push dword [ebx + 0x1c0]
push eax
call fcn.004e4ec0
mov byte [esp + 0x78], 8
mov ecx, dword [esp + 0x68]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004bf355
push 1
mov edi, ebx
call fcn.00502be6
jmp 0x4eb59c
cmp eax, 3
je 0x4ec187
cmp eax, 5
jne 0x4ec1cb
cmp dword [esp + 0x40], esi
jne 0x4ec32c
cmp dword [esp + 0x3c], esi
jne 0x4ec32c
mov eax, dword [esp + 0x38]
cmp eax, 0x212
je 0x4ec32c
cmp eax, 0x1a5
je 0x4ec32c
cmp eax, 0x1c2
je 0x4ec32c
cmp eax, 0x1f4
je 0x4ec32c
and dword [ebx + 0x10c], 0
push 0
push 0x8b0
mov esi, ebx
call fcn.004fd795
push 1
push edi
push dword [0x4dd494]
call dword [0x4af2ac]
xor edi, edi
test eax, eax
je 0x4ec215
cmp dword [esp + 0x40], edi
jne 0x4ec215
cmp dword [ebx + 0x498], edi
jne 0x4ec221
push dword [esp + 0x44]
mov ecx, ebx
push 1
call fcn.00502d01
jmp 0x4eb59c
cmp dword [ebx + 0x498], edi
je 0x4ec2cf
cmp dword [ebx + 0x560], edi
jne 0x4ec29a
lea eax, [esp + 0x58]
push 0x26d
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x1f
mov ecx, dword [esp + 0x54]
push dword [ecx]
mov eax, dword [eax]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.004bf640
mov byte [esp + 0x7c], 8
mov ecx, dword [esp + 0x6c]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.004bf355
mov eax, ebx
call fcn.004fd769
cmp eax, edi
push 0xb4
push 0x34
push dword [esp + 0x20]
jne 0x4ec281
call 0x5166a6
jmp 0x4ec288
mov ecx, eax
call 0x516625
add esp, 0xc
cmp eax, 6
jne 0x4ec2bd
mov dword [ebx + 0x560], 1
mov esi, dword [0x4dd494]
call 0x530a1e
mov eax, dword [eax + 4]
push 0x3c
push 0x4b8f54
push esi
mov ecx, eax
call 0x52fe67
mov dword [ebx + 0x584], eax
push edi
push 0x8b4
mov esi, ebx
call fcn.004fd7df
jmp 0x4eb59c
mov eax, dword [ebx + 0x274]
cmp dword [eax + 0x124], edi
je 0x4ec320
lea eax, [esp + 0x18]
push 0x4ba1f0
push eax
call fcn.004bf640
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [esp + 0x24]
mov esi, ebx
call fcn.004faeae
lea eax, [ebx + 0x54]
push eax
mov ecx, ebx
call fcn.004fc1b9
cmp dword [ebx + 0x260], edi
jne 0x4eb59c
mov ecx, ebx
call fcn.004fcdde
jmp 0x4eb59c
push 1
push 0x8b9
jmp 0x4ec089
push 1
push edi
push dword [0x4dd494]
call dword [0x4af2ac]
test eax, eax
je 0x4ec36d
cmp dword [esp + 0x3c], esi
jne 0x4ec34b
cmp dword [esp + 0x40], esi
jne 0x4ec36d
cmp dword [ebx + 0x498], esi
jne 0x4ec36d
and dword [ebx + 0x10c], 0
push 0
push 0x8b0
mov esi, ebx
call fcn.004fd795
jmp 0x4ec203
mov eax, dword [ebx + 0x274]
cmp dword [eax + 0x124], esi
je 0x4ec3f9
cmp dword [esp + 0x3c], 0
jne 0x4ec392
cmp dword [esp + 0x40], 0
je 0x4ec392
call fcn.004cbda8
test eax, eax
je 0x4ec3f9
cmp dword [ebx + 0x498], 0
jne 0x4ec3f9
mov eax, dword [0x4dd494]
mov dword [esp + 0x58], eax
call 0x530a1e
mov eax, dword [eax + 4]
push 0xa
push 0x4b9d50
push dword [esp + 0x60]
lea esi, [ebx + 0x580]
mov edi, dword [esi]
mov ecx, eax
call 0x52fe67
cmp edi, eax
jg 0x4ec3f4
inc edi
mov ecx, ebx
mov dword [esi], edi
call fcn.004fcdde
test eax, eax
jne 0x4eb59c
cmp dword [ebx + 0x260], eax
jne 0x4eb59c
mov dword [ebx + 0x10c], eax
push eax
jmp 0x4ec35c
mov edi, 0x4b9bb8
xor eax, eax
cmp dword [0x4dd264], eax
jne 0x4ec472
cmp dword [ebx + 0x140], eax
jne 0x4ec472
cmp dword [ebx + 0x21c], eax
jne 0x4ec472
and dword [ebx + 0x10c], eax
push eax
push 0x8b0
mov esi, ebx
call fcn.004fd795
push 1
push 0x8b9
call fcn.004fd795
push 1
push edi
push dword [0x4dd494]
call dword [0x4af2ac]
test eax, eax
je 0x4eb59c
xor eax, eax
cmp dword [esp + 0x3c], eax
jne 0x4ec45b
cmp dword [esp + 0x40], eax
jne 0x4eb59c
cmp dword [ebx + 0x498], eax
je 0x4eb59c
push eax
push 0x8e5
jmp 0x4ec089
and dword [ebx + 0x10c], 0
push 0
push 0x8b0
mov esi, ebx
call fcn.004fd795
lea eax, [esp + 0x58]
push 0x179
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x1e
jmp 0x4ec14f
lea ecx, [ebx + 0x4cc]
call fcn.004bf584
lea ecx, [ebx + 0x4d0]
call fcn.004bf584
lea eax, [esp + 0x58]
push 0x179
push eax
call 0x51ff94
mov byte [esp + 0x70], 0x1c
push dword [ebx + 0x1c0]
push eax
call fcn.004e4ec0
mov byte [esp + 0x78], 8
mov ecx, dword [esp + 0x68]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004bf355
push 0
jmp 0x4ec171