Function at 0x4e04f4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffa78
push ebx
push esi
push edi
lea edi, [ebp - 0x1c8]
mov eax, 0x6d5bb8
call fcn.0067eabc
mov dword [ebp - 0x344], 3
lea edx, [ebp + 0x14]
lea eax, [ebp + 0x14]
call fcn.0068e348
inc dword [ebp - 0x344]
lea edx, [ebp + 0x10]
mov word [ebp - 0x350], 0xc
lea eax, [ebp + 0x10]
call fcn.0068e348
inc dword [ebp - 0x344]
lea edx, [ebp + 0xc]
lea eax, [ebp + 0xc]
call fcn.0068e348
inc dword [ebp - 0x344]
cmp dword [ebp + 0x14], 0
je 0x4e0564
mov edx, dword [ebp + 0x14]
mov ecx, dword [edx - 4]
jmp 0x4e0566
xor ecx, ecx
test ecx, ecx
jne 0x4e05c9
mov eax, dword [ebp + 0x10]
push eax
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004dd2d8
add esp, 0xc
dec dword [ebp - 0x344]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0068e424
mov ecx, dword [ebp - 0x360]
mov dword fs:[0], ecx
jmp 0x4e2b09
mov word [ebp - 0x350], 0x18
mov word [ebp - 0x350], 0x24
push 0x730ca0
xor esi, esi
mov dword [ebp - 0x100], esi
lea eax, [ebp - 0x100]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x100]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d45a4
lea eax, [ebp - 0x104]
call fcn.0068e308
inc dword [ebp - 0x344]
xor esi, esi
mov ecx, dword [eax]
lea eax, [ebp - 0x108]
push ecx
push 0x730ca0
mov dword [ebp - 0x108], esi
push eax
inc dword [ebp - 0x344]
call fcn.0053af08
xor edx, edx
add esp, 0x10
mov dword [ebp - 0x10c], edx
lea edx, [ebp + 0xc]
inc dword [ebp - 0x344]
lea eax, [ebp - 0x108]
lea ecx, [ebp - 0x10c]
call fcn.0068e474
lea eax, [ebp - 0x10c]
xor ecx, ecx
push eax
push 0x730ca0
mov dword [ebp - 0x110], ecx
lea esi, [ebp - 0x110]
push esi
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea eax, [ebp - 0x110]
mov edx, dword [eax]
push edx
mov edx, 0x6d4634
lea eax, [ebp - 0x114]
call fcn.0068e308
inc dword [ebp - 0x344]
xor esi, esi
mov ecx, dword [eax]
lea eax, [ebp - 0x118]
push ecx
push 0x730ca0
mov dword [ebp - 0x118], esi
push eax
inc dword [ebp - 0x344]
call fcn.0053af08
xor ecx, ecx
add esp, 0x10
mov dword [ebp - 0x11c], ecx
lea ecx, [ebp - 0x11c]
inc dword [ebp - 0x344]
lea edx, [ebp - 0x118]
pop eax
call fcn.0068e474
lea eax, [ebp - 0x11c]
xor edx, edx
mov dword [ebp - 0x120], edx
lea ecx, [ebp - 0x120]
inc dword [ebp - 0x344]
lea edx, [ebp + 0x10]
call fcn.0068e474
lea eax, [ebp - 0x120]
xor ecx, ecx
push eax
push 0x730ca0
mov dword [ebp - 0x124], ecx
lea esi, [ebp - 0x124]
push esi
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea eax, [ebp - 0x124]
mov edx, dword [eax]
push edx
mov edx, 0x6d4699
lea eax, [ebp - 0x128]
call fcn.0068e308
inc dword [ebp - 0x344]
xor esi, esi
mov ecx, dword [eax]
lea eax, [ebp - 0x12c]
push ecx
push 0x730ca0
mov dword [ebp - 0x12c], esi
push eax
inc dword [ebp - 0x344]
call fcn.0053af08
xor ecx, ecx
add esp, 0x10
mov dword [ebp - 0x130], ecx
lea ecx, [ebp - 0x130]
inc dword [ebp - 0x344]
lea edx, [ebp - 0x12c]
pop eax
call fcn.0068e474
lea eax, [ebp - 0x130]
xor edx, edx
mov dword [ebp - 0x134], edx
lea ecx, [ebp - 0x134]
inc dword [ebp - 0x344]
lea edx, [ebp + 0x14]
call fcn.0068e474
lea eax, [ebp - 0x134]
mov ecx, dword [eax]
push ecx
push 0x730cfc
call fcn.0056d518
add esp, 8
dec dword [ebp - 0x344]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.0068e424
mov word [ebp - 0x350], 0x3c
mov ecx, dword [ebp + 0x14]
push ecx
lea esi, [ebp - 0x2c]
push esi
call fcn.004134bc
add esp, 8
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x30
mov word [ebp - 0x350], 0x48
lea edx, [ebp + 0xc]
lea eax, [ebp - 0x138]
xor ecx, ecx
call fcn.0068c4cc
inc dword [ebp - 0x344]
lea esi, [ebp - 0x138]
inc dword [ebp - 0x344]
mov dword [ebp - 0x364], esi
xor eax, eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x13c]
mov edx, dword [ebp - 0x364]
call fcn.005a775c
lea ecx, [ebp - 0x13c]
mov dl, 1
inc dword [ebp - 0x344]
mov eax, dword [ecx]
xor ecx, ecx
push eax
mov eax, dword [0x5af628]
push 0xa
call fcn.005baf28
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x344]
dec dword [ebp - 0x344]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0068e424
sub dword [ebp - 0x344], 2
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00411d10
mov word [ebp - 0x350], 0x30
mov word [ebp - 0x350], 0x54
mov dl, 1
mov eax, dword [0x5af3e0]
call fcn.004dfa18
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x30
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
call fcn.005bad78
mov word [ebp - 0x350], 0x60
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
push eax
call fcn.00678ee4
pop ecx
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x54], edx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x30
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x44]
call fcn.005ba2f4
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
cmp edx, 0
jne 0x4e0a79
cmp eax, 1
jae 0x4e0ccd
jmp 0x4e0a7f
jge 0x4e0ccd
mov word [ebp - 0x350], 0x6c
push 0x730ca0
xor ecx, ecx
mov dword [ebp - 0x140], ecx
lea eax, [ebp - 0x140]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x140]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d46ce
lea eax, [ebp - 0x144]
call fcn.0068e308
inc dword [ebp - 0x344]
lea edx, [ebp - 0x148]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0x730ca0
mov dword [ebp - 0x148], eax
push edx
inc dword [ebp - 0x344]
call fcn.0053af08
add esp, 0x10
lea ecx, [ebp - 0x148]
mov eax, dword [ecx]
push eax
push 0x730cfc
call fcn.0056d518
add esp, 8
dec dword [ebp - 0x344]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
cmp dword [ebp - 0x54], 0
je 0x4e0b68
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x548], ecx
mov eax, dword [ebp - 0x548]
push eax
call fcn.0067381c
pop ecx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x44], 0
je 0x4e0bc2
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x54c], edx
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x150], ecx
cmp dword [ebp - 0x150], 0
je 0x4e0bc2
mov eax, dword [ebp - 0x150]
mov edx, dword [eax]
mov dword [ebp - 0x14c], edx
mov word [ebp - 0x350], 0x90
mov edx, 3
mov eax, dword [ebp - 0x150]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x78
dec dword [ebp - 0x344]
cmp dword [ebp - 0x34], 0
je 0x4e0c1c
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x550], eax
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0x158], edx
cmp dword [ebp - 0x158], 0
je 0x4e0c1c
mov ecx, dword [ebp - 0x158]
mov eax, dword [ecx]
mov dword [ebp - 0x154], eax
mov word [ebp - 0x350], 0xa8
mov edx, 3
mov eax, dword [ebp - 0x158]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x78
dec dword [ebp - 0x344]
cmp dword [ebp - 8], 0x10
jb 0x4e0c4a
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x554], edx
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x558], eax
mov edx, dword [ebp - 0x558]
push edx
call fcn.0067381c
pop ecx
mov ecx, 0xf
mov dword [ebp - 8], ecx
mov byte [ebp - 0x559], 0
cmp dword [ebp - 8], 0x10
jb 0x4e0c64
mov eax, dword [ebp - 0x1c]
jmp 0x4e0c67
lea eax, [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0xc], edx
add eax, edx
mov dword [ebp - 0x560], eax
mov edx, 2
mov eax, dword [ebp - 0x560]
mov cl, byte [ebp - 0x559]
mov byte [eax], cl
lea eax, [ebp + 0xc]
dec dword [ebp - 0x344]
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0068e424
mov ecx, dword [ebp - 0x360]
mov dword fs:[0], ecx
jmp 0x4e2b09
xor ebx, ebx
mov word [ebp - 0x350], 0x30
xor esi, esi
jmp 0x4e0d2c
cmp esi, dword [ebp - 0xc]
jne 0x4e0ce3
xor esi, esi
mov eax, dword [ebp - 0x54]
cmp byte [eax + ebx], 0
je 0x4e0d2a
mov edx, dword [ebp - 0x54]
mov eax, esi
cmp dword [ebp - 8], 0x10
mov cl, byte [edx + ebx]
jb 0x4e0cff
mov edx, dword [ebp - 0x1c]
jmp 0x4e0d02
lea edx, [ebp - 0x1c]
add edx, eax
cmp cl, byte [edx]
je 0x4e0d2a
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x370], esi
cmp dword [ebp - 8], 0x10
jb 0x4e0d1c
mov ecx, dword [ebp - 0x1c]
jmp 0x4e0d1f
lea ecx, [ebp - 0x1c]
add ecx, dword [ebp - 0x370]
mov dl, byte [ecx]
xor byte [eax + ebx], dl
inc ebx
inc esi
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, ebx
cdq
cmp edx, dword [esp + 4]
jne 0x4e0d47
cmp eax, dword [esp]
pop edx
pop eax
jb 0x4e0cdc
jmp 0x4e0d4b
pop edx
pop eax
jl 0x4e0cdc
mov word [ebp - 0x350], 0xc0
mov ecx, dword [ebp + 0x10]
push ecx
lea esi, [ebp - 0x180]
push esi
call fcn.004134bc
add esp, 8
lea eax, [ebp - 0x180]
inc dword [ebp - 0x344]
cmp dword [eax + 0x24], 0x10
jb 0x4e0d7e
mov edx, dword [eax + 0x10]
jmp 0x4e0d81
lea edx, [eax + 0x10]
mov dword [ebp - 0x374], edx
lea eax, [ebp - 0x9c]
mov dword [ebp - 0xfc], eax
mov ecx, 0x6aa5bc
mov dword [ebp - 0x94], ecx
mov esi, 0x6aa5cc
inc dword [ebp - 0x344]
mov dword [ebp - 0x94], esi
inc dword [ebp - 0x344]
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x378], eax
mov edx, 0x6aa4f8
mov dword [ebp - 0xf8], edx
mov ecx, 0x6aa504
mov ebx, dword [ebp - 0xfc]
mov dword [ebx + 8], ecx
mov ebx, dword [ebp - 0xfc]
push ebx
call fcn.006767ac
pop ecx
mov eax, dword [ebp - 0x378]
mov dword [ebx + 0x30], eax
xor edx, edx
mov dword [ebx + 0x34], edx
mov word [ebp - 0x350], 0xd8
mov ecx, dword [ebx + 0x2c]
push ecx
lea ecx, [ebp - 0x190]
push ecx
call fcn.0040be24
inc dword [ebp - 0x344]
lea eax, [ebp - 0x190]
mov dword [ebp - 0x380], eax
xor edx, edx
mov word [ebp - 0x350], 0xf0
mov dword [ebp - 0x194], edx
add esp, 8
cmp dword [ebp - 0x194], 1
je 0x4e0e46
cmp dword [ebp - 0x194], 3
jne 0x4e0e53
mov ecx, dword [ebp - 0x194]
push ecx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov eax, dword [0x69e7cc]
mov word [ebp - 0x350], 0xe4
cmp dword [0x72b6c8], 0
mov dword [ebp - 0x384], eax
jne 0x4e0f00
mov word [ebp - 0x350], 0x120
xor edx, edx
mov dword [ebp - 0x19c], edx
cmp dword [ebp - 0x19c], 1
je 0x4e0e9d
cmp dword [ebp - 0x19c], 3
jne 0x4e0eaa
mov ecx, dword [ebp - 0x19c]
push ecx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x114
cmp dword [0x72b6c8], 0
jne 0x4e0ed2
inc dword [0x72b6c4]
mov eax, dword [0x72b6c4]
mov dword [0x72b6c8], eax
dec dword [ebp - 0x344]
cmp dword [ebp - 0x19c], 1
je 0x4e0eea
cmp dword [ebp - 0x19c], 3
jne 0x4e0ef7
mov edx, dword [ebp - 0x19c]
push edx
call fcn.0067d1d0
pop ecx
mov word [ebp - 0x350], 0x108
mov ecx, dword [0x72b6c8]
mov dword [ebp - 0x388], ecx
mov word [ebp - 0x350], 0xe4
mov eax, dword [ebp - 0x388]
push eax
mov edx, dword [ebp - 0x380]
push edx
call fcn.00676fcc
add esp, 8
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
jne 0x4e15fb
cmp dword [ebp - 0x384], 0
je 0x4e0f58
mov ecx, dword [ebp - 0x384]
mov dword [ebp - 0x38c], ecx
jmp 0x4e15fb
lea eax, [ebp - 0x384]
test eax, eax
je 0x4e1560
cmp dword [ebp - 0x384], 0
jne 0x4e1560
push 0x18
call fcn.00678f0c
pop ecx
mov dword [ebp - 0x1a0], eax
test eax, eax
je 0x4e14cd
mov word [ebp - 0x350], 0x150
mov edx, dword [ebp - 0x380]
mov ecx, dword [edx + 8]
add ecx, 0x18
mov dword [ebp - 0x394], ecx
mov ecx, dword [ebp - 0x394]
add ecx, 8
push ecx
lea eax, [ebp - 0x39c]
push eax
call fcn.0040bef4
add esp, 8
lea edx, [ebp - 0x39c]
push edx
lea ecx, [edi + 8]
push ecx
call fcn.0040bef4
add esp, 8
mov eax, 0xf
mov dword [edi + 0x24], eax
mov byte [ebp - 0x39d], 0
cmp dword [edi + 0x24], 0x10
jb 0x4e0fea
mov edx, dword [edi + 0x10]
jmp 0x4e0fed
lea edx, [edi + 0x10]
xor eax, eax
mov dword [edi + 0x20], eax
add edx, eax
mov dword [ebp - 0x3a4], edx
mov edx, dword [ebp - 0x3a4]
mov cl, byte [ebp - 0x39d]
mov byte [edx], cl
mov ecx, dword [ebp - 0x394]
cmp dword [ecx + 0x20], 0
jae 0x4e101b
push edi
call fcn.00679c38
pop ecx
mov eax, dword [ebp - 0x394]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x3a8], edx
cmp dword [ebp - 0x3a8], 0xffffffff
jbe 0x4e103d
mov dword [ebp - 0x3a8], 0xffffffff
cmp edi, dword [ebp - 0x394]
jne 0x4e123d
mov dword [ebp - 0x3ac], 0xffffffff
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x3b0], ecx
mov eax, dword [edi + 0x20]
cmp eax, dword [ebp - 0x3b0]
jae 0x4e1071
push edi
call fcn.00679c38
pop ecx
mov edx, dword [edi + 0x20]
sub edx, dword [ebp - 0x3b0]
cmp edx, dword [ebp - 0x3ac]
jae 0x4e1091
mov ecx, dword [edi + 0x20]
sub ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x3ac], ecx
cmp dword [ebp - 0x3ac], 0
jbe 0x4e1159
mov eax, dword [edi + 0x20]
sub eax, dword [ebp - 0x3b0]
sub eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b4], eax
cmp dword [edi + 0x24], 0x10
jb 0x4e10be
mov edx, dword [edi + 0x10]
jmp 0x4e10c1
lea edx, [edi + 0x10]
add edx, dword [ebp - 0x3b0]
add edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b8], edx
cmp dword [edi + 0x24], 0x10
jb 0x4e10de
mov eax, dword [edi + 0x10]
jmp 0x4e10e1
lea eax, [edi + 0x10]
add eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3bc], eax
mov edx, dword [ebp - 0x3b4]
push edx
mov ecx, dword [ebp - 0x3b8]
push ecx
mov ecx, dword [ebp - 0x3bc]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [edi + 0x20]
sub eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3c0], eax
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c4], edx
mov byte [ebp - 0x3c5], 0
cmp dword [edi + 0x24], 0x10
jb 0x4e1137
mov ecx, dword [edi + 0x10]
jmp 0x4e113a
lea ecx, [edi + 0x10]
mov eax, dword [ebp - 0x3c4]
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x3cc], ecx
mov edx, dword [ebp - 0x3cc]
mov cl, byte [ebp - 0x3c5]
mov byte [edx], cl
xor ecx, ecx
mov dword [ebp - 0x3d0], ecx
cmp dword [edi + 0x20], 0
jae 0x4e116e
push edi
call fcn.00679c38
pop ecx
mov eax, dword [edi + 0x20]
cmp eax, dword [ebp - 0x3d0]
jae 0x4e1182
mov edx, dword [edi + 0x20]
mov dword [ebp - 0x3d0], edx
cmp dword [ebp - 0x3d0], 0
jbe 0x4e142b
mov ecx, dword [edi + 0x20]
sub ecx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], ecx
cmp dword [edi + 0x24], 0x10
jb 0x4e11a9
mov eax, dword [edi + 0x10]
jmp 0x4e11ac
lea eax, [edi + 0x10]
add eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d8], eax
cmp dword [edi + 0x24], 0x10
jb 0x4e11c3
mov edx, dword [edi + 0x10]
jmp 0x4e11c6
lea edx, [edi + 0x10]
mov dword [ebp - 0x3dc], edx
mov eax, dword [ebp - 0x3d4]
push eax
mov ecx, dword [ebp - 0x3d8]
push ecx
mov ecx, dword [ebp - 0x3dc]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [edi + 0x20]
sub eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], edx
mov byte [ebp - 0x3e5], 0
cmp dword [edi + 0x24], 0x10
jb 0x4e1216
mov ecx, dword [edi + 0x10]
jmp 0x4e1219
lea ecx, [edi + 0x10]
mov eax, dword [ebp - 0x3e4]
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x3ec], ecx
mov edx, dword [ebp - 0x3ec]
mov cl, byte [ebp - 0x3e5]
mov byte [edx], cl
jmp 0x4e142b
mov esi, dword [ebp - 0x3a8]
lea ecx, [edi + 8]
push ecx
call fcn.0040c11c
pop ecx
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 1
ja 0x4e1263
mov eax, 1
jmp 0x4e126a
mov eax, dword [ebp - 0x3f0]
dec eax
cmp esi, eax
jbe 0x4e1275
push edi
call fcn.00679008
pop ecx
cmp esi, dword [edi + 0x24]
jbe 0x4e1344
mov edx, dword [edi + 0x20]
push edx
push esi
push edi
call fcn.0040bf1c
add esp, 0xc
jmp 0x4e1378
test esi, esi
jne 0x4e1378
mov byte [ebp - 0x409], 0
cmp dword [edi + 0x24], 0x10
jb 0x4e135a
mov ecx, dword [edi + 0x10]
jmp 0x4e135d
lea ecx, [edi + 0x10]
xor eax, eax
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x410], ecx
mov edx, dword [ebp - 0x410]
mov cl, byte [ebp - 0x409]
mov byte [edx], cl
test esi, esi
seta cl
and ecx, 1
test cl, cl
je 0x4e142b
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x414], eax
mov edx, dword [ebp - 0x394]
cmp dword [edx + 0x24], 0x10
jb 0x4e13ab
mov ecx, dword [ebp - 0x394]
mov eax, dword [ecx + 0x10]
jmp 0x4e13b4
mov eax, dword [ebp - 0x394]
add eax, 0x10
mov dword [ebp - 0x418], eax
cmp dword [edi + 0x24], 0x10
jb 0x4e13c5
mov edx, dword [edi + 0x10]
jmp 0x4e13c8
lea edx, [edi + 0x10]
mov dword [ebp - 0x41c], edx
mov eax, dword [ebp - 0x414]
push eax
mov ecx, dword [ebp - 0x418]
push ecx
mov ecx, dword [ebp - 0x41c]
push ecx
call fcn.0067e3dc
add esp, 0xc
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x420], eax
mov byte [ebp - 0x421], 0
cmp dword [edi + 0x24], 0x10
jb 0x4e1409
mov edx, dword [edi + 0x10]
jmp 0x4e140c
lea edx, [edi + 0x10]
mov eax, dword [ebp - 0x420]
mov dword [edi + 0x20], eax
add edx, eax
mov dword [ebp - 0x428], edx
mov edx, dword [ebp - 0x428]
mov cl, byte [ebp - 0x421]
mov byte [edx], cl
dec dword [ebp - 0x344]
push edi
inc dword [ebp - 0x344]
lea ecx, [ebp - 0x228]
push ecx
call fcn.00677ecc
add dword [ebp - 0x344], 4
mov dword [ebp - 0x390], eax
mov eax, 0x6aa528
mov edx, dword [ebp - 0x1a0]
add esp, 8
mov dword [edx], eax
xor eax, eax
mov ecx, dword [ebp - 0x1a0]
mov edx, 0x6aa538
mov dword [ecx + 4], eax
inc dword [ebp - 0x344]
mov eax, dword [ebp - 0x1a0]
mov dword [eax], edx
mov edx, 0x6aa548
inc dword [ebp - 0x344]
mov ecx, dword [ebp - 0x1a0]
mov dword [ecx], edx
mov dword [0x72b6e0], 0x100
mov ecx, dword [ebp - 0x390]
push ecx
mov eax, dword [ebp - 0x1a0]
add eax, 8
push eax
call fcn.0040c148
add esp, 8
add dword [ebp - 0x344], 0xfffffffe
mov word [ebp - 0x350], 0x138
mov edx, dword [ebp - 0x1a0]
jmp 0x4e14d3
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x384], edx
sub dword [ebp - 0x344], 4
push 2
lea eax, [ebp - 0x228]
push eax
call fcn.00678c44
add esp, 8
dec dword [ebp - 0x344]
cmp dword [edi + 0x24], 0x10
jb 0x4e151f
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x42c], ecx
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x430], ecx
mov eax, dword [ebp - 0x430]
push eax
call fcn.0067381c
pop ecx
mov edx, 0xf
mov dword [edi + 0x24], edx
mov byte [ebp - 0x431], 0
cmp dword [edi + 0x24], 0x10
jb 0x4e1539
mov ecx, dword [edi + 0x10]
jmp 0x4e153c
lea ecx, [edi + 0x10]
xor eax, eax
mov dword [edi + 0x20], eax
add ecx, eax
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x438]
mov cl, byte [ebp - 0x431]
mov byte [edx], cl
mov word [ebp - 0x350], 0xe4
mov ecx, 1
cmp ecx, 0xffffffff
jne 0x4e15ba
lea eax, [ebp - 0x360]
push eax
push 0
push 0
push 0
push 1
push 0x40bebc
push 0
lea edx, [ebp - 0x198]
push edx
call fcn.0040c1b0
pop ecx
lea eax, [ebp - 0x198]
inc dword [ebp - 0x344]
mov ecx, 0x6aa514
mov dword [ebp - 0x198], ecx
inc dword [ebp - 0x344]
push eax
push 0x40be64
call fcn.0068ba9c
add esp, 0x24
jmp 0x4e15fb
mov edx, dword [ebp - 0x384]
mov dword [ebp - 0x38c], edx
mov ecx, dword [ebp - 0x384]
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x43c], eax
mov dword [0x69e7cc], ecx
mov edx, dword [ebp - 0x43c]
add edx, 4
push edx
call fcn.0067d1f0
pop ecx
mov ecx, dword [ebp - 0x43c]
push ecx
call fcn.006776c8
pop ecx
mov eax, dword [ebp - 0x38c]
push eax
dec dword [ebp - 0x344]
cmp dword [ebp - 0x194], 1
je 0x4e161a
cmp dword [ebp - 0x194], 3
jne 0x4e1627
mov edx, dword [ebp - 0x194]
push edx
call fcn.0067d1d0
pop ecx
pop ecx
mov word [ebp - 0x350], 0xd8
mov dword [ebp - 0x37c], ecx
mov word [ebp - 0x350], 0xcc
push 0x20
mov eax, dword [ebp - 0x37c]
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
add esp, 8
lea ecx, [ebp - 0x190]
push eax
dec dword [ebp - 0x344]
push 2
push ecx
call fcn.0040bda0
add esp, 8
pop eax
mov word [ebp - 0x350], 0xc0
mov byte [ebx + 0x38], al
cmp dword [ebx + 0x30], 0
jne 0x4e16ab
mov edx, dword [ebx + 0x10]
or edx, 4
mov dword [ebp - 0x440], edx
push 0
cmp dword [ebx + 0x30], 0
jne 0x4e169b
mov ecx, dword [ebp - 0x440]
or ecx, 4
jmp 0x4e16a1
mov ecx, dword [ebp - 0x440]
push ecx
push ebx
call fcn.00673aa0
add esp, 0xc
xor eax, eax
mov edx, 0x6d6aec
mov dword [ebx + 0xc], eax
mov eax, 0x6d6af8
inc dword [ebp - 0x344]
mov dword [ebp - 0xf8], edx
mov edx, dword [ebp - 0xfc]
mov ecx, 0x6aa468
mov dword [edx + 8], eax
mov dword [ebp - 0xf4], ecx
push 0x10
call fcn.00678f0c
pop ecx
mov dword [ebp - 0x22c], eax
test eax, eax
je 0x4e1713
mov word [ebp - 0x350], 0x1c8
mov edx, dword [ebp - 0x22c]
push edx
call fcn.00676f88
pop ecx
mov word [ebp - 0x350], 0x1b0
mov ecx, dword [ebp - 0x22c]
jmp 0x4e1719
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0xb8], ecx
lea eax, [ebp - 0xe8]
mov word [ebp - 0x350], 0xc0
mov dword [ebp - 0xe0], eax
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], edx
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0xd4]
mov dword [ebp - 0xcc], edx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc0], ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
xor ecx, ecx
mov edx, dword [ebp - 0xdc]
xor ebx, ebx
mov dword [edx], ecx
xor edx, edx
mov eax, dword [ebp - 0xcc]
mov dword [eax], edx
xor edx, edx
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], ebx
xor ebx, ebx
mov eax, dword [ebp - 0xe0]
mov dword [eax], edx
xor edx, edx
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], ebx
mov ecx, 0x6d6aa4
mov eax, dword [ebp - 0xc0]
mov dword [eax], edx
lea eax, [ebp - 0xf4]
inc dword [ebp - 0x344]
mov dword [ebp - 0xf4], ecx
push 0
push 0
push eax
call fcn.004dfa6c
add esp, 0xc
inc dword [ebp - 0x344]
cmp dword [ebp - 0xa4], 0
jne 0x4e1802
push 0x1b6
push 0x82
mov edx, dword [ebp - 0x374]
push edx
call fcn.00673884
add esp, 0xc
mov dword [ebp - 0x444], eax
test eax, eax
jne 0x4e1809
xor edx, edx
jmp 0x4e21c5
push 1
mov ecx, dword [ebp - 0x444]
push ecx
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004dfa6c
add esp, 0xc
mov word [ebp - 0x350], 0x1d4
mov eax, dword [ebp - 0xb8]
push eax
lea edx, [ebp - 0x23c]
push edx
call fcn.0040be24
inc dword [ebp - 0x344]
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x448], ecx
xor eax, eax
mov word [ebp - 0x350], 0x1ec
mov dword [ebp - 0x240], eax
add esp, 8
cmp dword [ebp - 0x240], 1
je 0x4e1875
cmp dword [ebp - 0x240], 3
jne 0x4e1882
mov edx, dword [ebp - 0x240]
push edx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov ecx, dword [0x6d5774]
mov word [ebp - 0x350], 0x1e0
cmp dword [0x6d576c], 0
mov dword [ebp - 0x450], ecx
jne 0x4e1932
mov word [ebp - 0x350], 0x21c
xor eax, eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
je 0x4e18cd
cmp dword [ebp - 0x248], 3
jne 0x4e18da
mov edx, dword [ebp - 0x248]
push edx
call fcn.0067d19c
pop ecx
inc dword [ebp - 0x344]
mov word [ebp - 0x350], 0x210
cmp dword [0x6d576c], 0
jne 0x4e1904
inc dword [0x72b6c4]
mov ecx, dword [0x72b6c4]
mov dword [0x6d576c], ecx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x248], 1
je 0x4e191c
cmp dword [ebp - 0x248], 3
jne 0x4e1929
mov eax, dword [ebp - 0x248]
push eax
call fcn.0067d1d0
pop ecx
mov word [ebp - 0x350], 0x204
mov edx, dword [0x6d576c]
mov dword [ebp - 0x454], edx
mov word [ebp - 0x350], 0x1e0
mov ecx, dword [ebp - 0x454]
push ecx
mov eax, dword [ebp - 0x448]
push eax
call fcn.00676fcc
add esp, 8
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0
jne 0x4e20b5
cmp dword [ebp - 0x450], 0
je 0x4e198a
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x458], edx
jmp 0x4e20b5
lea ecx, [ebp - 0x450]
test ecx, ecx
je 0x4e201b
cmp dword [ebp - 0x450], 0
jne 0x4e201b
push 8
call fcn.00678f0c
pop ecx
mov dword [ebp - 0x24c], eax
test eax, eax
je 0x4e1f73
mov word [ebp - 0x350], 0x24c
mov edx, dword [ebp - 0x448]
mov ebx, dword [edx + 8]
add ebx, 0x18
lea eax, [ebx + 8]
push eax
lea edx, [ebp - 0x464]
push edx
call fcn.0040bef4
add esp, 8
lea ecx, [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x26c]
push ecx
call fcn.0040bef4
add esp, 8
mov eax, 0xf
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x465], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4e1a1c
mov edx, dword [ebp - 0x264]
jmp 0x4e1a22
lea edx, [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x254], eax
add edx, eax
mov dword [ebp - 0x46c], edx
mov edx, dword [ebp - 0x46c]
mov cl, byte [ebp - 0x465]
mov byte [edx], cl
cmp dword [ebx + 0x20], 0
jae 0x4e1a53
lea ecx, [ebp - 0x274]
push ecx
call fcn.00679c38
pop ecx
mov esi, dword [ebx + 0x20]
cmp esi, 0xffffffff
jbe 0x4e1a60
mov esi, 0xffffffff
lea eax, [ebp - 0x274]
cmp ebx, eax
jne 0x4e1ca2
mov edi, 0xffffffff
mov dword [ebp - 0x470], esi
mov edx, dword [ebp - 0x254]
cmp edx, dword [ebp - 0x470]
jae 0x4e1a94
lea ecx, [ebp - 0x274]
push ecx
call fcn.00679c38
pop ecx
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x470]
cmp edi, eax
jbe 0x4e1ab0
mov edi, dword [ebp - 0x254]
sub edi, dword [ebp - 0x470]
test edi, edi
jbe 0x4e1b8b
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x470]
sub eax, edi
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x250], 0x10
jb 0x4e1add
mov edx, dword [ebp - 0x264]
jmp 0x4e1ae3
lea edx, [ebp - 0x264]
add edx, dword [ebp - 0x470]
add edx, edi
mov dword [ebp - 0x478], edx
cmp dword [ebp - 0x250], 0x10
jb 0x4e1b02
mov eax, dword [ebp - 0x264]
jmp 0x4e1b08
lea eax, [ebp - 0x264]
add eax, dword [ebp - 0x470]
mov dword [ebp - 0x47c], eax
mov edx, dword [ebp - 0x474]
push edx
mov ecx, dword [ebp - 0x478]
push ecx
mov ecx, dword [ebp - 0x47c]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [ebp - 0x254]
sub eax, edi
mov dword [ebp - 0x480], eax
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x484], edx
mov byte [ebp - 0x485], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4e1b63
mov ecx, dword [ebp - 0x264]
jmp 0x4e1b69
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x254], eax
add ecx, eax
mov dword [ebp - 0x48c], ecx
mov edx, dword [ebp - 0x48c]
mov cl, byte [ebp - 0x485]
mov byte [edx], cl
xor ecx, ecx
mov dword [ebp - 0x490], ecx
cmp dword [ebp - 0x254], 0
jae 0x4e1ba9
lea eax, [ebp - 0x274]
push eax
call fcn.00679c38
pop ecx
mov edx, dword [ebp - 0x254]
cmp edx, dword [ebp - 0x490]
jae 0x4e1bc3
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x490], ecx
cmp dword [ebp - 0x490], 0
jbe 0x4e1eee
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x250], 0x10
jb 0x4e1bf3
mov edx, dword [ebp - 0x264]
jmp 0x4e1bf9
lea edx, [ebp - 0x264]
add edx, dword [ebp - 0x490]
mov dword [ebp - 0x498], edx
cmp dword [ebp - 0x250], 0x10
jb 0x4e1c16
mov eax, dword [ebp - 0x264]
jmp 0x4e1c1c
lea eax, [ebp - 0x264]
mov dword [ebp - 0x49c], eax
mov edx, dword [ebp - 0x494]
push edx
mov ecx, dword [ebp - 0x498]
push ecx
mov ecx, dword [ebp - 0x49c]
push ecx
call fcn.0067e4f5
add esp, 0xc
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x4a0], eax
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a4], edx
mov byte [ebp - 0x4a5], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4e1c75
mov ecx, dword [ebp - 0x264]
jmp 0x4e1c7b
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x254], eax
add ecx, eax
mov dword [ebp - 0x4ac], ecx
mov edx, dword [ebp - 0x4ac]
mov cl, byte [ebp - 0x4a5]
mov byte [edx], cl
jmp 0x4e1eee
mov dword [ebp - 0x4b0], esi
lea ecx, [ebp - 0x26c]
push ecx
call fcn.0040c11c
pop ecx
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 1
ja 0x4e1ccb
mov eax, 1
jmp 0x4e1cd2
mov eax, dword [ebp - 0x4b4]
dec eax
cmp eax, dword [ebp - 0x4b0]
jae 0x4e1ce7
lea edx, [ebp - 0x274]
push edx
call fcn.00679008
pop ecx
mov ecx, dword [ebp - 0x250]
cmp ecx, dword [ebp - 0x4b0]
jae 0x4e1dfa
mov ecx, dword [ebp - 0x254]
push ecx
mov eax, dword [ebp - 0x4b0]
push eax
lea edx, [ebp - 0x274]
push edx
call fcn.0040bf1c
add esp, 0xc
jmp 0x4e1e3f
cmp dword [ebp - 0x4b0], 0
jne 0x4e1e3f
mov byte [ebp - 0x4cd], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4e1e1b
mov ecx, dword [ebp - 0x264]
jmp 0x4e1e21
lea ecx, [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x254], eax
add ecx, eax
mov dword [ebp - 0x4d4], ecx
mov edx, dword [ebp - 0x4d4]
mov cl, byte [ebp - 0x4cd]
mov byte [edx], cl
cmp dword [ebp - 0x4b0], 0
seta cl
and ecx, 1
test cl, cl
je 0x4e1eee
mov dword [ebp - 0x4d8], esi
cmp dword [ebx + 0x24], 0x10
jb 0x4e1e65
mov eax, dword [ebx + 0x10]
jmp 0x4e1e68
lea eax, [ebx + 0x10]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x250], 0x10
jb 0x4e1e7f
mov edx, dword [ebp - 0x264]
jmp 0x4e1e85
lea edx, [ebp - 0x264]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4d8]
push eax
mov ecx, dword [ebp - 0x4dc]
push ecx
mov eax, dword [ebp - 0x4e0]
push eax
call fcn.0067e3dc
add esp, 0xc
mov dword [ebp - 0x4e4], esi
mov byte [ebp - 0x4e5], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4e1ec6
mov edx, dword [ebp - 0x264]
jmp 0x4e1ecc
lea edx, [ebp - 0x264]
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x254], eax
add edx, eax
mov dword [ebp - 0x4ec], edx
mov edx, dword [ebp - 0x4ec]
mov cl, byte [ebp - 0x4e5]
mov byte [edx], cl
dec dword [ebp - 0x344]
lea eax, [ebp - 0x274]
push eax
inc dword [ebp - 0x344]
lea edx, [ebp - 0x2d4]
push edx
call fcn.00677ecc
add dword [ebp - 0x344], 4
mov dword [ebp - 0x45c], eax
mov ecx, 0x6aa528
mov ebx, dword [ebp - 0x24c]
xor edx, edx
add esp, 8
mov dword [ebx], ecx
mov eax, dword [ebp - 0x24c]
mov ecx, 0x6d6a5c
mov dword [eax + 4], edx
mov eax, 0x6d6a78
inc dword [ebp - 0x344]
mov ebx, dword [ebp - 0x24c]
mov dword [ebx], ecx
inc dword [ebp - 0x344]
mov edx, dword [ebp - 0x24c]
mov dword [edx], eax
add dword [ebp - 0x344], 0xfffffffe
mov word [ebp - 0x350], 0x234
mov ecx, dword [ebp - 0x24c]
jmp 0x4e1f79
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x450], ecx
sub dword [ebp - 0x344], 4
push 2
lea eax, [ebp - 0x2d4]
push eax
call fcn.00678c44
add esp, 8
dec dword [ebp - 0x344]
cmp dword [ebp - 0x250], 0x10
jb 0x4e1fcb
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x4f0], edx
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], eax
mov edx, dword [ebp - 0x4f4]
push edx
call fcn.0067381c
pop ecx
mov ecx, 0xf
mov dword [ebp - 0x250], ecx
mov byte [ebp - 0x4f5], 0
cmp dword [ebp - 0x250], 0x10
jb 0x4e1fee
mov eax, dword [ebp - 0x264]
jmp 0x4e1ff4
lea eax, [ebp - 0x264]
xor edx, edx
mov dword [ebp - 0x254], edx
add eax, edx
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov cl, byte [ebp - 0x4f5]
mov byte [eax], cl
mov word [ebp - 0x350], 0x1e0
mov eax, 1
cmp eax, 0xffffffff
jne 0x4e2075
lea edx, [ebp - 0x360]
push edx
push 0
push 0
push 0
push 1
push 0x40bebc
push 0
lea ecx, [ebp - 0x244]
push ecx
call fcn.0040c1b0
pop ecx
mov eax, 0x6aa514
inc dword [ebp - 0x344]
mov dword [ebp - 0x244], eax
inc dword [ebp - 0x344]
lea edx, [ebp - 0x244]
push edx
push 0x40be64
call fcn.0068ba9c
add esp, 0x24
jmp 0x4e20b5
mov ecx, dword [ebp - 0x450]
mov dword [ebp - 0x458], ecx
mov eax, dword [ebp - 0x450]
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x500], edx
mov dword [0x6d5774], eax
mov ecx, dword [ebp - 0x500]
add ecx, 4
push ecx
call fcn.0067d1f0
pop ecx
mov eax, dword [ebp - 0x500]
push eax
call fcn.006776c8
pop ecx
mov edx, dword [ebp - 0x458]
push edx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x240], 1
je 0x4e20d4
cmp dword [ebp - 0x240], 3
jne 0x4e20e1
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.0067d1d0
pop ecx
pop eax
mov word [ebp - 0x350], 0x1d4
mov dword [ebp - 0x44c], eax
mov edx, dword [ebp - 0x44c]
push edx
call fcn.004dfb2c
pop ecx
test al, al
je 0x4e210f
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
jmp 0x4e219f
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0xb4], eax
lea edx, [ebp - 0xe8]
mov dword [ebp - 0xe0], edx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xdc], ecx
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0xd4]
mov dword [ebp - 0xcc], edx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc0], ecx
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xdc]
xor ecx, ecx
mov dword [edx], ecx
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov dword [eax], edx
mov ecx, dword [ebp - 0xbc]
xor ebx, ebx
mov dword [ecx], ebx
mov eax, dword [ebp - 0xe0]
xor edx, edx
mov dword [eax], edx
mov ecx, dword [ebp - 0xd0]
xor ebx, ebx
mov dword [ecx], ebx
mov eax, dword [ebp - 0xc0]
xor edx, edx
mov dword [eax], edx
dec dword [ebp - 0x344]
push 2
lea ecx, [ebp - 0x23c]
push ecx
call fcn.0040bda0
mov word [ebp - 0x350], 0xc0
add esp, 8
lea edx, [ebp - 0xf4]
test edx, edx
jne 0x4e2216
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x504]
mov eax, dword [ecx + 0x10]
or eax, 2
mov dword [ebp - 0x508], eax
push 0
mov edx, dword [ebp - 0x504]
cmp dword [edx + 0x30], 0
jne 0x4e2200
mov ecx, dword [ebp - 0x508]
or ecx, 4
jmp 0x4e2206
mov ecx, dword [ebp - 0x508]
push ecx
mov eax, dword [ebp - 0x504]
push eax
call fcn.00673aa0
add esp, 0xc
inc dword [ebp - 0x344]
dec dword [ebp - 0x344]
cmp dword [ebp - 0x15c], 0x10
jb 0x4e2250
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x50c], edx
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x510], eax
mov edx, dword [ebp - 0x510]
push edx
call fcn.0067381c
pop ecx
mov ecx, 0xf
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 0x511], 0
cmp dword [ebp - 0x15c], 0x10
jb 0x4e2273
mov eax, dword [ebp - 0x170]
jmp 0x4e2279
lea eax, [ebp - 0x170]
xor edx, edx
mov dword [ebp - 0x160], edx
add eax, edx
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
mov cl, byte [ebp - 0x511]
mov byte [eax], cl
mov word [ebp - 0x350], 0x30
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
call dword [edx]
push eax
mov edx, dword [ebp - 0x54]
push edx
lea ecx, [ebp - 0xfc]
push ecx
call fcn.004dfb58
add esp, 0xc
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0xa4], 0
jne 0x4e22da
xor edx, edx
mov dword [ebp - 0x51c], edx
jmp 0x4e230c
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004dfd14
pop ecx
test al, al
jne 0x4e22f3
xor eax, eax
mov dword [ebp - 0x51c], eax
mov edx, dword [ebp - 0xa4]
push edx
call fcn.006801f0
pop ecx
test eax, eax
je 0x4e230c
xor ecx, ecx
mov dword [ebp - 0x51c], ecx
push 2
push 0
lea eax, [ebp - 0xf4]
push eax
call fcn.004dfa6c
add esp, 0xc
cmp dword [ebp - 0x51c], 0
jne 0x4e2375
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x520], edx
mov ecx, dword [ebp - 0x520]
mov eax, dword [ecx + 0x10]
or eax, 2
mov dword [ebp - 0x524], eax
push 0
mov edx, dword [ebp - 0x520]
cmp dword [edx + 0x30], 0
jne 0x4e235f
mov ecx, dword [ebp - 0x524]
or ecx, 4
jmp 0x4e2365
mov ecx, dword [ebp - 0x524]
push ecx
mov eax, dword [ebp - 0x520]
push eax
call fcn.00673aa0
add esp, 0xc
mov word [ebp - 0x350], 0x2c4
push 0x730ca0
xor edx, edx
mov dword [ebp - 0x2d8], edx
lea eax, [ebp - 0x2d8]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x2d8]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d478a
lea eax, [ebp - 0x2dc]
call fcn.0068e308
inc dword [ebp - 0x344]
lea edx, [ebp - 0x2e0]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0x730ca0
mov dword [ebp - 0x2e0], eax
push edx
inc dword [ebp - 0x344]
call fcn.0053af08
xor edx, edx
add esp, 0x10
mov dword [ebp - 0x2e4], edx
lea edx, [ebp + 0x10]
inc dword [ebp - 0x344]
lea eax, [ebp - 0x2e0]
lea ecx, [ebp - 0x2e4]
call fcn.0068e474
lea eax, [ebp - 0x2e4]
xor ecx, ecx
push eax
push 0x730ca0
mov dword [ebp - 0x2e8], ecx
lea eax, [ebp - 0x2e8]
push eax
inc dword [ebp - 0x344]
call fcn.0054bc10
add esp, 8
lea edx, [ebp - 0x2e8]
mov ecx, dword [edx]
push ecx
mov edx, 0x6d47f8
lea eax, [ebp - 0x2ec]
call fcn.0068e308
inc dword [ebp - 0x344]
lea edx, [ebp - 0x2f0]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0x730ca0
mov dword [ebp - 0x2f0], eax
push edx
inc dword [ebp - 0x344]
call fcn.0053af08
xor eax, eax
add esp, 0x10
mov dword [ebp - 0x2f4], eax
lea edx, [ebp - 0x2f0]
inc dword [ebp - 0x344]
lea ecx, [ebp - 0x2f4]
pop eax
call fcn.0068e474
lea edx, [ebp - 0x2f4]
mov ecx, dword [edx]
push ecx
push 0x730cfc
call fcn.0056d518
add esp, 8
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2f4]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2f0]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2ec]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2e8]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2e4]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2dc]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp - 0x2d8]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
dec dword [ebp - 0x344]
mov ecx, 0x6d6aa4
mov dword [ebp - 0xf4], ecx
cmp byte [ebp - 0xa8], 0
je 0x4e25e6
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x528], eax
mov word [ebp - 0x350], 0x30
cmp dword [ebp - 0xa4], 0
jne 0x4e25a1
xor edx, edx
mov dword [ebp - 0x528], edx
jmp 0x4e25d3
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004dfd14
pop ecx
test al, al
jne 0x4e25ba
xor eax, eax
mov dword [ebp - 0x528], eax
mov edx, dword [ebp - 0xa4]
push edx
call fcn.006801f0
pop ecx
test eax, eax
je 0x4e25d3
xor ecx, ecx
mov dword [ebp - 0x528], ecx
push 2
push 0
lea eax, [ebp - 0xf4]
push eax
call fcn.004dfa6c
add esp, 0xc
dec dword [ebp - 0x344]
mov edx, 0x6aa468
mov dword [ebp - 0xf4], edx
push 3
mov ecx, dword [ebp - 0xb8]
push ecx
call fcn.0040bda0
add esp, 8
dec dword [ebp - 0x344]
sub dword [ebp - 0x344], 2
push 0
lea eax, [ebp - 0x9c]
push eax
call fcn.0040ec3c
add esp, 8
dec dword [ebp - 0x344]
cmp dword [ebp - 0x54], 0
je 0x4e2648
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x52c], edx
mov ecx, dword [ebp - 0x52c]
push ecx
call fcn.0067381c
pop ecx
dec dword [ebp - 0x344]
cmp dword [ebp - 0x44], 0
je 0x4e26a2
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x530]
mov dword [ebp - 0x2fc], edx
cmp dword [ebp - 0x2fc], 0
je 0x4e26a2
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ecx]
mov dword [ebp - 0x2f8], eax
mov word [ebp - 0x350], 0x2e8
mov edx, 3
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x30
dec dword [ebp - 0x344]
cmp dword [ebp - 0x34], 0
je 0x4e26fc
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x534], edx
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
je 0x4e26fc
mov edx, dword [ebp - 0x304]
mov ecx, dword [edx]
mov dword [ebp - 0x300], ecx
mov word [ebp - 0x350], 0x300
mov edx, 3
mov eax, dword [ebp - 0x304]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x350], 0x30
dec dword [ebp - 0x344]
cmp dword [ebp - 8], 0x10
jb 0x4e272a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x538], eax
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0x53c], edx
mov ecx, dword [ebp - 0x53c]
push ecx
call fcn.0067381c
pop ecx
mov eax, 0xf
mov dword [ebp - 8], eax
mov byte [ebp - 0x53d], 0
cmp dword [ebp - 8], 0x10
jb 0x4e2744
mov edx, dword [ebp - 0x1c]
jmp 0x4e2747
lea edx, [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0xc], eax
add edx, eax
mov dword [ebp - 0x544], edx
mov edx, dword [ebp - 0x544]
mov cl, byte [ebp - 0x53d]
mov byte [edx], cl
mov word [ebp - 0x350], 0x18
mov word [ebp - 0x350], 0xc
jmp 0x4e2ac3
dec dword [ebp - 0x344]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0068e424
dec dword [ebp - 0x344]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0068e424
mov ecx, dword [ebp - 0x360]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret