Function at 0x491f60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x496cc2
sub esp, 0xa0
movzx ebx, byte [0x6d9c7b]
cmp bl, 1
jbe 0x491f93
add esp, 0xa0
ret
movzx ebx, byte [0x6d9c7b]
cmp bl, 1
jne 0x491fa6
call fcn.00428920
ud2
mov byte [0x6d9c7b], 1
call fcn.005072d0
call fcn.00508bf0
call fcn.00514f40
call fcn.004d41c0
call fcn.0045f300
call fcn.005164c0
call fcn.0051a2e0
call fcn.005206a0
call fcn.004d1570
call fcn.004a9fd0
call fcn.004d33c0
call fcn.004c5e20
call fcn.004e03d0
call fcn.005236f0
call fcn.00523a10
call fcn.00525820
call fcn.004d6020
call fcn.00525ad0
call fcn.004d77f0
call fcn.00527670
call fcn.00529510
call fcn.0052b0e0
call fcn.004cf200
call fcn.004e0bb0
call fcn.0052bc40
call fcn.0053abb0
call fcn.0044ddd0
call fcn.00546260
call fcn.00548710
call fcn.00549470
mov ebx, 0x5fc705
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8578], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496cac
mov dword [0x6c857c], ebx
mov dword [esp], 0x5beec0
call fcn.0040e800
mov eax, dword [esp + 4]
mov ebp, dword [0x61a060]
mov dword [eax], ebp
mov ebp, dword [0x61a064]
mov dword [eax + 4], ebp
mov ebp, dword [0x61a068]
mov dword [eax + 8], ebp
mov ebp, dword [0x61a06c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x61a070]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x61a074]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x61a078]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61a07c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.0051b050
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c96
mov dword [0x6c7fb8], ebx
mov ebx, 0x5f9025
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c85d8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c80
mov dword [0x6c85dc], ebx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.004a7ad0
mov ebx, dword [esp + 0x10]
mov dword [0x6c8970], ebx
mov ebx, dword [esp + 0x14]
mov dword [0x6c8974], ebx
mov ebx, dword [esp + 0x18]
mov dword [0x6c8978], ebx
mov ebx, dword [esp + 0x1c]
cmp byte [0x6d9e38], 0
jne 0x496c6a
mov dword [0x6c897c], ebx
mov dword [esp], 0x5c5620
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496c54
mov dword [0x6c7fd0], ebx
xor eax, eax
cmp eax, 0xe
jge 0x49222f
mov dword [esp], 0x5c5620
mov ebx, dword [0x6c7fd0]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a880
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a880
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xe
jl 0x4921e6
mov ebx, 0x6004ff
mov dword [esp], ebx
mov dword [esp + 4], 0x2a
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8688], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c3e
mov dword [0x6c868c], ebx
mov ebx, 0x5fe4b8
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8698], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c28
mov dword [0x6c869c], ebx
mov ebx, 0x5fc756
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86a8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c12
mov dword [0x6c86ac], ebx
mov ebx, 0x5fbe12
mov dword [esp], ebx
mov dword [esp + 4], 0x19
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86f0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496bfc
mov dword [0x6c86f4], ebx
mov dword [esp], 0x5c4140
mov dword [esp + 4], 0xff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0xff
mov dword [esp + 0x10], 0
call fcn.0043c0d0
mov ebx, dword [esp + 0x18]
mov dword [0x6c88ac], ebx
mov ebx, dword [esp + 0x1c]
mov dword [0x6c88b0], ebx
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496be6
mov dword [0x6c88a8], ebx
mov dword [esp], 0x5c5720
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496bd0
mov dword [0x6c7fd8], ebx
xor eax, eax
cmp eax, 0xa
jge 0x4923f1
mov dword [esp], 0x5c5720
mov ebx, dword [0x6c7fd8]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a640
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a640
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xa
jl 0x4923a8
mov dword [esp], 0x5c56a0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496bba
mov dword [0x6c7fd4], ebx
mov byte [esp + 0x23], 0
mov dword [esp], 0x5c5660
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x4924bb
mov dword [esp], 0x5c5660
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619fc0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619fc0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x492474
mov dword [esp], 0x5c56a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 1
mov dword [esp], 0x5c5660
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 4
jge 0x492568
mov dword [esp], 0x5c5660
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a1a0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a1a0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 4
jl 0x492521
mov dword [esp], 0x5c56a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 4
mov dword [esp], 0x5c5660
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x492615
mov dword [esp], 0x5c5660
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619970
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619970
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x4925ce
mov dword [esp], 0x5c56a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 6
mov dword [esp], 0x5c5660
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x4926c2
mov dword [esp], 0x5c5660
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619980
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619980
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x49267b
mov dword [esp], 0x5c56a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 9
mov dword [esp], 0x5c5660
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x49276f
mov dword [esp], 0x5c5660
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619990
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619990
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x492728
mov dword [esp], 0x5c56a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 5
mov dword [esp], 0x5c5660
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x49281c
mov dword [esp], 0x5c5660
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619fe0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619fe0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x4927d5
mov dword [esp], 0x5c56a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov dword [esp], 0x5c56e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496ba4
mov dword [0x6c7fdc], ebx
mov byte [esp + 0x23], 0
mov ebx, 0x619574
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 1
mov ebx, 0x61957c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 2
mov ebx, 0x619584
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 3
mov ebx, 0x61958c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 4
mov ebx, 0x619590
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 5
mov ebx, 0x619588
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 6
mov ebx, 0x619580
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 7
mov ebx, 0x619578
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 8
mov ebx, 0x619598
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov byte [esp + 0x23], 9
mov ebx, 0x619570
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c56e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407a20
mov ebx, 0x5fa98d
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8618], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b8e
mov dword [0x6c861c], ebx
mov ebx, 0x5f8f15
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86d8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b78
mov dword [0x6c86dc], ebx
mov ebx, 0x5fc62d
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8658], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b62
mov dword [0x6c865c], ebx
mov ebx, 0x5fa030
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8690], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b4c
mov dword [0x6c8694], ebx
mov ebx, 0x5fa725
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d4570
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xc]
cmp eax, 1
jne 0x496b40
mov dword [esp + 0x48], edx
mov dword [esp], edx
mov dword [esp + 0x4c], eax
mov dword [esp + 4], eax
mov ebp, 0x5f56f2
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
call fcn.00452ad0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x496b40
mov byte [0x6d9c77], 1
mov dword [esp], 0x5c5be0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496b2a
mov dword [0x6c7fcc], ebx
mov dword [esp], 0x5c5be0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496b14
mov dword [0x6c7fc8], ebx
mov dword [esp], 0x5c5760
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496afe
mov dword [0x6c7fe4], ebx
xor eax, eax
cmp eax, 6
jge 0x492cde
mov dword [esp], 0x5c5760
mov ebx, dword [0x6c7fe4]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a520
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a520
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 6
jl 0x492c95
mov ebx, 0x5fdec7
mov dword [esp], ebx
mov dword [esp + 4], 0x20
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8670], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496ae8
mov dword [0x6c8674], ebx
mov ebx, 0x5fe3b0
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8678], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496ad2
mov dword [0x6c867c], ebx
mov dword [esp], 0x5c5520
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496abc
mov dword [0x6c7fe0], ebx
mov dword [esp], 0x5d13e0
call fcn.0040e800
mov eax, dword [esp + 4]
mov ebp, 0x5ffd04
mov dword [eax], ebp
mov dword [eax + 4], 0x28
mov ecx, 1
mov byte [eax + 8], cl
mov ecx, eax
mov eax, 0x6b0b90
mov dword [esp + 0x68], eax
mov dword [0x6c86e0], eax
mov dword [esp + 0x6c], ecx
cmp byte [0x6d9e38], 0
jne 0x496aa6
mov dword [0x6c86e4], ecx
mov ebx, 0x5fac63
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8648], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a90
mov dword [0x6c864c], ebx
mov ebx, 0x5f9864
mov dword [esp], ebx
mov dword [esp + 4], 0x13
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8638], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a7a
mov dword [0x6c863c], ebx
mov ebx, 0x5fa8dd
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8640], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a64
mov dword [0x6c8644], ebx
mov ebx, 0x601673
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8660], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a4e
mov dword [0x6c8664], ebx
mov ebx, 0x5f9f40
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86d0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a38
mov dword [0x6c86d4], ebx
mov ebx, 0x5fafb4
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8668], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a22
mov dword [0x6c866c], ebx
mov dword [esp], 0x5c5a60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496a0c
mov dword [0x6c7fc4], ebx
xor eax, eax
cmp eax, 0x15
jge 0x492fb2
mov dword [esp], 0x5c5a60
mov ebx, dword [0x6c7fc4]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61aa20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61aa20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0x15
jl 0x492f69
mov ebx, 0x602e9b
mov dword [esp], ebx
mov dword [esp + 4], 0x3e
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86e8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969f6
mov dword [0x6c86ec], ebx
mov ebx, 0x6000f5
mov dword [esp], ebx
mov dword [esp + 4], 0x29
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8620], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969e0
mov dword [0x6c8624], ebx
mov ebx, 0x5fcbc4
mov dword [esp], ebx
mov dword [esp + 4], 0x1c
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8628], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969ca
mov dword [0x6c862c], ebx
mov ebx, 0x5fd0e0
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8630], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969b4
mov dword [0x6c8634], ebx
mov ebx, 0x5fc207
mov dword [esp], ebx
mov dword [esp + 4], 0x1a
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86b0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x49699e
mov dword [0x6c86b4], ebx
mov ebx, 0x5fe85d
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86c0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496988
mov dword [0x6c86c4], ebx
mov ebx, 0x5fb5a9
mov dword [esp], ebx
mov dword [esp + 4], 0x18
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86c8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496972
mov dword [0x6c86cc], ebx
mov ebx, 0x5fc5c1
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8650], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x49695c
mov dword [0x6c8654], ebx
mov ebx, 0x5fafcb
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8680], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496946
mov dword [0x6c8684], ebx
mov ebx, 0x60295f
mov dword [esp], ebx
mov dword [esp + 4], 0x38
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86b8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496930
mov dword [0x6c86bc], ebx
mov ebx, 0x5ffcdc
mov dword [esp], ebx
mov dword [esp + 4], 0x28
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c86a0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x49691a
mov dword [0x6c86a4], ebx
xor ebx, ebx
mov dword [esp], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004d32d0
mov ecx, dword [esp + 0xc]
mov eax, 0x6b0950
mov dword [esp + 0x60], eax
mov dword [esp], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 4], ecx
call fcn.0045eef0
mov ebx, dword [esp + 8]
mov dword [0x6c86f8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496904
mov dword [0x6c86fc], ebx
mov dword [esp], 0x5beec0
call fcn.0040e800
mov eax, dword [esp + 4]
mov ebp, dword [0x61a080]
mov dword [eax], ebp
mov ebp, dword [0x61a084]
mov dword [eax + 4], ebp
mov ebp, dword [0x61a088]
mov dword [eax + 8], ebp
mov ebp, dword [0x61a08c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x61a090]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x61a094]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x61a098]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61a09c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.0051b050
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4968ee
mov dword [0x6c7fbc], ebx
mov ebx, 0x5f9349
mov dword [esp], ebx
mov dword [esp + 4], 0x12
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8558], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4968d8
mov dword [0x6c855c], ebx
mov dword [esp], 0x5c5a60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x4968c2
mov dword [0x6c7fec], ebx
xor eax, eax
cmp eax, 5
jge 0x4933b1
mov dword [esp], 0x5c5a60
mov ebx, dword [0x6c7fec]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a460
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a460
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 5
jl 0x493368
mov ebx, 0x5fd698
mov dword [esp], ebx
mov dword [esp + 4], 0x1e
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8560], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4968ac
mov dword [0x6c8564], ebx
mov dword [esp], 0x5c5a20
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496896
mov dword [0x6c8700], ebx
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496880
mov dword [0x6c8704], ebx
mov ebx, 0x602363
mov dword [esp], ebx
mov dword [esp + 4], 0x36
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c85a8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x49686a
mov dword [0x6c85ac], ebx
mov dword [esp], 0x5c5a60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406e10
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496854
mov dword [0x6c7ff0], ebx
xor eax, eax
cmp eax, 3
jge 0x493536
mov dword [esp], 0x5c5a60
mov ebx, dword [0x6c7ff0]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a0e0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a0e0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00407a20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 3
jl 0x4934ed
mov ebx, 0x5fef6e
mov dword [esp], ebx
mov dword [esp + 4], 0x24
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8568], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x49683e
mov dword [0x6c856c], ebx
mov ebx, 0x6030d5
mov dword [esp], ebx
mov dword [esp + 4], 0x40
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8528], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496828
mov dword [0x6c852c], ebx
mov ebx, 0x5fe87f
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8548], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496812
mov dword [0x6c854c], ebx
mov ebx, 0x6016a4
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8538], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4967fc
mov dword [0x6c853c], ebx
mov ebx, 0x5f6180
mov dword [esp], ebx
mov dword [esp + 4], 6
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c8580], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4967e6
mov dword [0x6c8584], ebx
mov ebx, 0x5faff9
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d1d20
mov ebx, dword [esp + 8]
mov dword [0x6c85f0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4967d0
mov ebp, 0x6c8584
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493644
mov ebp, 0x6c853c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49360e
mov ebp, 0x6c854c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4935d8
mov ebp, 0x6c852c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4935a2
mov ebp, 0x6c856c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49356c
mov ebp, 0x6c7ff0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4934e6
mov ebp, 0x6c85ac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4934a3
mov ebp, 0x6c8704
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49346d
mov ebp, 0x6c8700
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49342a
mov ebp, 0x6c8564
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4933e7
mov ebp, 0x6c7fec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493361
mov ebp, 0x6c855c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49331e
mov ebp, 0x6c7fbc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4932e8
mov ebp, 0x6c86fc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493254
mov ebp, 0x6c86a4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493204
mov ebp, 0x6c86bc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4931ce
mov ebp, 0x6c8684
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493198
mov ebp, 0x6c8654
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493162
mov ebp, 0x6c86cc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49312c
mov ebp, 0x6c86c4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4930f6
mov ebp, 0x6c86b4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4930c0
mov ebp, 0x6c8634
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49308a
mov ebp, 0x6c862c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x493054
mov ebp, 0x6c8624
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49301e
mov ebp, 0x6c86ec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492fe8
mov ebp, 0x6c7fc4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492f62
mov ebp, 0x6c866c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492f1f
mov ebp, 0x6c86d4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492ee9
mov ebp, 0x6c8664
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492eb3
mov ebp, 0x6c8644
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492e7d
mov ebp, 0x6c863c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492e47
mov ebp, 0x6c864c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492e11
mov ebp, 0x6c86e4
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040f1d0
jmp 0x492ddb
mov ebp, 0x6c7fe0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492d8d
mov ebp, 0x6c867c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492d4a
mov ebp, 0x6c8674
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492d14
mov ebp, 0x6c7fe4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492c8e
mov ebp, 0x6c7fc8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492c4b
mov ebp, 0x6c7fcc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492c08
mov byte [0x6d9c77], 0
jmp 0x492bc5
mov ebp, 0x6c8694
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492b65
mov ebp, 0x6c865c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492b2f
mov ebp, 0x6c86dc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492af9
mov ebp, 0x6c861c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492ac3
mov ebp, 0x6c7fdc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492885
mov ebp, 0x6c7fd4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492434
mov ebp, 0x6c7fd8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4923a1
mov ebp, 0x6c88a8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49235e
mov ebp, 0x6c86f4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492307
mov ebp, 0x6c86ac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4922d1
mov ebp, 0x6c869c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49229b
mov ebp, 0x6c868c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492265
mov ebp, 0x6c7fd0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x4921df
mov ebp, 0x6c897c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49219c
mov ebp, 0x6c85dc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492143
mov ebp, 0x6c7fb8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x49210d
mov ebp, 0x6c857c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f1d0
jmp 0x492079
call fcn.00450db0
jmp fcn.00491f60