Function at 0x4cbf20
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov ebx, eax
mov edi, dword [0x68f08c]
xor eax, eax
push ebp
push 0x4cdfef
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.00420c34
dec eax
test eax, eax
jl 0x4cbfc6
inc eax
mov dword [ebp - 8], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.00420c08
mov edx, dword [0x4902f8]
call fcn.004044b8
test al, al
jne 0x4cbf86
mov edx, esi
mov eax, ebx
call fcn.00420c08
mov edx, dword [0x491880]
call fcn.004044b8
test al, al
je 0x4cbfc0
mov edx, esi
mov eax, ebx
call fcn.00420c08
cmp dword [eax + 0x25c], 0
jne 0x4cbfc0
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov edx, dword [edx + 0x360]
mov dword [eax + 0x25c], edx
mov edx, dword [0x68f170]
mov edx, dword [edx]
mov edx, dword [edx + 0x360]
xchg edx, eax
call fcn.00492688
inc esi
dec dword [ebp - 8]
jne 0x4cbf56
call sub.kernel32.dll_GetTickCount
mov dword [ebx + 0x55c], eax
mov byte [ebx + 0x560], 0
xor eax, eax
mov dword [ebx + 0x578], eax
mov byte [ebx + 0x570], 1
xor eax, eax
mov dword [ebx + 0x558], eax
mov byte [ebx + 0x714], 0
call sub.kernel32.dll_GetTickCount
mov dword [ebx + 0x820], eax
mov edx, 0x151
mov eax, dword [ebx + 0x360]
call fcn.00447328
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
add edx, 0xffffff12
mov eax, dword [ebx + 0x360]
call fcn.0044728c
mov edx, 0xee
mov eax, dword [ebx + 0x360]
call fcn.004472f4
mov edx, 0xa9
mov eax, dword [ebx + 0x360]
call fcn.004472c0
mov dword [ebx + 0x57c], 0xffffffff
mov dword [ebx + 0x580], 0xffffffff
mov dword [ebx + 0x584], 0xffffffff
mov dword [ebx + 0x588], 0xffffffff
mov eax, dword [edi]
mov edx, 0xaa
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cc0b6
mov edx, dword [edi]
mov ecx, 0xaa
mov eax, dword [ebx + 0x364]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x364]
call fcn.0044728c
mov edx, 0x46
mov eax, dword [ebx + 0x364]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x114
mov eax, dword [ebx + 0x38c]
call fcn.00493170
mov edx, dword [edi]
mov ecx, 0x114
mov eax, dword [ebx + 0x45c]
call fcn.00493170
mov edx, dword [edi]
mov ecx, 0x132
mov eax, dword [ebx + 0x368]
call fcn.00493170
mov edx, 0x3c
mov eax, dword [ebx + 0x368]
call fcn.0044728c
mov edx, 1
mov eax, dword [ebx + 0x368]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x378]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x378]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x378]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x37c]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x37c]
call fcn.0044728c
mov edx, 0x32
mov eax, dword [ebx + 0x37c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x380]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x380]
call fcn.0044728c
mov edx, 0x64
mov eax, dword [ebx + 0x380]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x374]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x374]
call fcn.0044728c
mov edx, 0x96
mov eax, dword [ebx + 0x374]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x388]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x388]
call fcn.0044728c
mov edx, 0xc8
mov eax, dword [ebx + 0x388]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x384]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x384]
call fcn.0044728c
mov edx, 0xfa
mov eax, dword [ebx + 0x384]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x370]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x370]
call fcn.0044728c
mov edx, 0x12c
mov eax, dword [ebx + 0x370]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xaa
mov eax, dword [ebx + 0x36c]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x36c]
call fcn.0044728c
mov edx, 0x16
mov eax, dword [ebx + 0x36c]
call fcn.004472c0
mov edx, 0x96
mov eax, dword [ebx + 0x36c]
call fcn.004472f4
mov edx, 0x15e
mov eax, dword [ebx + 0x36c]
call fcn.00447328
mov eax, dword [edi]
mov edx, 0xc0
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cc318
mov edx, dword [edi]
mov ecx, 0xc0
mov eax, dword [ebx + 0x390]
call fcn.00493170
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cc2e5
adc edx, 0
mov eax, dword [ebx + 0x390]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x68e9b0]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cc30d
adc edx, 0
mov eax, dword [ebx + 0x390]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x8f
mov eax, dword [ebx + 0x3ac]
call fcn.00493170
mov edx, 0x309
mov eax, dword [ebx + 0x3ac]
call fcn.0044728c
mov edx, 0x18
mov eax, dword [ebx + 0x3ac]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xc2
mov eax, dword [ebx + 0x4b0]
call fcn.00493170
mov edx, 0x21
mov eax, dword [ebx + 0x4b0]
call fcn.0044728c
mov edx, 0x13
mov eax, dword [ebx + 0x4b0]
call fcn.004472c0
mov edx, dword [0x68e5dc]
mov edx, dword [edx]
lea eax, [ebp - 0xc]
mov ecx, 0x4ce008
call fcn.00405480
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x4b0]
call fcn.00492330
mov edx, dword [edi]
mov ecx, 0xc2
mov eax, dword [ebx + 0x4b4]
call fcn.00493170
mov edx, 0x6e
mov eax, dword [ebx + 0x4b4]
call fcn.0044728c
mov edx, 0x13
mov eax, dword [ebx + 0x4b4]
call fcn.004472c0
mov edx, dword [0x68ecf0]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
mov ecx, 0x4ce008
call fcn.00405480
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x4b4]
call fcn.00492330
mov eax, dword [0x68ec10]
cmp byte [eax], 0
je 0x4cc40b
xor edx, edx
mov eax, dword [ebx + 0x4b4]
call fcn.004931c8
mov edx, dword [edi]
mov ecx, 0xc2
mov eax, dword [ebx + 0x550]
call fcn.00493170
mov edx, 0xb9
mov eax, dword [ebx + 0x550]
call fcn.0044728c
mov edx, 0x13
mov eax, dword [ebx + 0x550]
call fcn.004472c0
mov edx, dword [0x68e544]
mov edx, dword [edx]
lea eax, [ebp - 0x14]
mov ecx, 0x4ce008
call fcn.00405480
mov edx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x550]
call fcn.00492330
mov eax, dword [0x68e944]
cmp byte [eax], 0
je 0x4cc477
xor edx, edx
mov eax, dword [ebx + 0x550]
call fcn.004931c8
mov edx, dword [edi]
mov ecx, 0xd2
mov eax, dword [ebx + 0x394]
call fcn.00493170
mov edx, 0xf2
mov eax, dword [ebx + 0x394]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x394]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xd2
mov eax, dword [ebx + 0x398]
call fcn.00493170
mov edx, 0x142
mov eax, dword [ebx + 0x398]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x398]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xd2
mov eax, dword [ebx + 0x39c]
call fcn.00493170
mov edx, 0x192
mov eax, dword [ebx + 0x39c]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x39c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xd2
mov eax, dword [ebx + 0x3a0]
call fcn.00493170
mov edx, 0x1e2
mov eax, dword [ebx + 0x3a0]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x3a0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xd2
mov eax, dword [ebx + 0x3a4]
call fcn.00493170
mov edx, 0x232
mov eax, dword [ebx + 0x3a4]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x3a4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xd2
mov eax, dword [ebx + 0x3a8]
call fcn.00493170
mov edx, 0x282
mov eax, dword [ebx + 0x3a8]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x3a8]
call fcn.004472c0
mov esi, dword [ebx + 0x518]
mov edx, 0x10
mov eax, esi
call fcn.00447328
mov edx, 0x50
mov eax, esi
call fcn.004472f4
mov edx, 0x24
mov eax, esi
call fcn.0044728c
mov edx, 0x147
mov eax, esi
call fcn.004472c0
mov dl, 1
mov eax, esi
call fcn.004931c8
mov edx, dword [edi]
mov ecx, 0x15
mov eax, dword [ebx + 0x51c]
call fcn.00493170
mov edx, 0x81
mov eax, dword [ebx + 0x51c]
call fcn.0044728c
mov edx, 0x149
mov eax, dword [ebx + 0x51c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x16
mov eax, dword [ebx + 0x520]
call fcn.00493170
mov edx, 0x91
mov eax, dword [ebx + 0x520]
call fcn.0044728c
mov edx, 0x149
mov eax, dword [ebx + 0x520]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xc6
mov eax, dword [ebx + 0x3b0]
call fcn.00493170
mov edx, 0x3b
mov eax, dword [ebx + 0x3b0]
call fcn.0044728c
mov edx, 0x1c3
mov eax, dword [ebx + 0x3b0]
call fcn.004472c0
mov eax, dword [ebx + 0x3b0]
xor edx, edx
mov dword [eax + 0x264], edx
mov dword [eax + 0x268], edx
mov edx, dword [edi]
mov ecx, 0xc6
mov eax, dword [ebx + 0x4b8]
call fcn.00493170
mov edx, 0x1f
mov eax, dword [ebx + 0x4b8]
call fcn.0044728c
mov edx, 0x221
mov eax, dword [ebx + 0x4b8]
call fcn.004472c0
mov ecx, dword [0x68ecf0]
mov ecx, dword [ecx]
lea eax, [ebp - 0x18]
mov edx, 0x4ce014
call fcn.00405480
mov edx, dword [ebp - 0x18]
mov eax, dword [ebx + 0x4b8]
call fcn.00492330
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3b4]
call fcn.00493170
mov edx, 0x6c
mov eax, dword [ebx + 0x3b4]
call fcn.0044728c
mov edx, 0x221
mov eax, dword [ebx + 0x3b4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3b8]
call fcn.00493170
mov edx, 0x21a
mov eax, dword [ebx + 0x3b8]
call fcn.0044728c
mov edx, 0x54
mov eax, dword [ebx + 0x3b8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3bc]
call fcn.00493170
mov edx, 0x28b
mov eax, dword [ebx + 0x3bc]
call fcn.0044728c
mov edx, 0x54
mov eax, dword [ebx + 0x3bc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3c0]
call fcn.00493170
mov edx, 0x21a
mov eax, dword [ebx + 0x3c0]
call fcn.0044728c
mov edx, 0x227
mov eax, dword [ebx + 0x3c0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3c4]
call fcn.00493170
mov edx, 0x28b
mov eax, dword [ebx + 0x3c4]
call fcn.0044728c
mov edx, 0x227
mov eax, dword [ebx + 0x3c4]
call fcn.004472c0
mov edx, 0x73
mov eax, dword [ebx + 0x3c8]
call fcn.004472c0
mov edx, 0xbd
mov eax, dword [ebx + 0x3c8]
call fcn.0044728c
mov edx, 0x24c
mov eax, dword [ebx + 0x3c8]
call fcn.004472f4
mov edx, 0x1ae
mov eax, dword [ebx + 0x3c8]
call fcn.00447328
mov eax, dword [edi]
mov edx, 0x22a
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cc862
mov edx, dword [edi]
mov ecx, 0x22a
mov eax, dword [ebx + 0x3cc]
call fcn.00493170
mov edx, 0x1fb
mov eax, dword [ebx + 0x3cc]
call fcn.0044728c
mov edx, 0x96
mov eax, dword [ebx + 0x3cc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x41c]
call fcn.00493170
mov eax, dword [ebx + 0x3cc]
mov edx, dword [eax + 0x48]
sub edx, 0x12
mov eax, dword [ebx + 0x41c]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x41c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x414]
call fcn.00493170
mov edx, 0xf
mov eax, dword [ebx + 0x414]
call fcn.0044728c
mov edx, 0x144
mov eax, dword [ebx + 0x414]
call fcn.004472c0
mov eax, dword [ebx + 0x414]
xor edx, edx
mov dword [eax + 0x264], edx
mov dword [eax + 0x268], edx
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x418]
call fcn.00493170
mov edx, 0x4a
mov eax, dword [ebx + 0x418]
call fcn.0044728c
mov edx, 0x144
mov eax, dword [ebx + 0x418]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x40c]
call fcn.00493170
mov edx, 0x85
mov eax, dword [ebx + 0x40c]
call fcn.0044728c
mov edx, 0x144
mov eax, dword [ebx + 0x40c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x410]
call fcn.00493170
mov edx, 0xca
mov eax, dword [ebx + 0x410]
call fcn.0044728c
mov edx, 0x144
mov eax, dword [ebx + 0x410]
call fcn.004472c0
mov edx, 0xd
mov eax, dword [ebx + 0x524]
call fcn.0044728c
mov edx, 0x41
mov eax, dword [ebx + 0x524]
call fcn.004472c0
mov edx, 0xf8
mov eax, dword [ebx + 0x524]
call fcn.004472f4
mov edx, 0xf6
mov eax, dword [ebx + 0x524]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x420]
call fcn.00493170
mov edx, 0x3d
mov eax, dword [ebx + 0x420]
call fcn.004472c0
mov edx, 0x109
mov eax, dword [ebx + 0x420]
call fcn.0044728c
mov edx, pe_nt_image_headers32
mov eax, dword [ebx + 0x420]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov eax, dword [edi]
mov edx, 0x22c
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cca88
mov edx, dword [edi]
mov ecx, 0x22c
mov eax, dword [ebx + 0x424]
call fcn.00493170
mov edx, 0x17
mov eax, dword [ebx + 0x424]
call fcn.0044728c
mov edx, 0x54
mov eax, dword [ebx + 0x424]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x428]
call fcn.00493170
mov eax, dword [ebx + 0x424]
mov edx, dword [eax + 0x48]
sub edx, 0x12
mov eax, dword [ebx + 0x428]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x428]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x42c]
call fcn.00493170
mov edx, 0x23
mov eax, dword [ebx + 0x42c]
call fcn.0044728c
mov edx, 0x187
mov eax, dword [ebx + 0x42c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x430]
call fcn.00493170
mov edx, 0x87
mov eax, dword [ebx + 0x430]
call fcn.0044728c
mov edx, 0x187
mov eax, dword [ebx + 0x430]
call fcn.004472c0
mov edx, 0x142
mov eax, dword [ebx + 0x52c]
call fcn.004472c0
mov edx, 0x15
mov eax, dword [ebx + 0x52c]
call fcn.0044728c
mov edx, 0x24
mov eax, dword [ebx + 0x52c]
call fcn.004472f4
mov edx, 0x24
mov eax, dword [ebx + 0x52c]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x530]
call fcn.00493170
mov edx, 0xae
mov eax, dword [ebx + 0x530]
call fcn.0044728c
mov edx, 0x127
mov eax, dword [ebx + 0x530]
call fcn.004472c0
mov edx, 0x60
mov eax, dword [ebx + 0x434]
call fcn.004472c0
mov edx, 0x16
mov eax, dword [ebx + 0x434]
call fcn.0044728c
mov edx, 0xc8
mov eax, dword [ebx + 0x434]
call fcn.004472f4
mov edx, 0xb0
mov eax, dword [ebx + 0x434]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x438]
call fcn.00493170
mov eax, dword [ebx + 0x434]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x438]
call fcn.004472c0
mov eax, dword [ebx + 0x434]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x438]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x434]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x438]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov eax, dword [edi]
mov edx, 0x22b
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cccbd
mov edx, dword [edi]
mov ecx, 0x22b
mov eax, dword [ebx + 0x43c]
call fcn.00493170
mov edx, 0x109
mov eax, dword [ebx + 0x43c]
call fcn.0044728c
mov edx, 0x54
mov eax, dword [ebx + 0x43c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x44c]
call fcn.00493170
mov eax, dword [ebx + 0x43c]
mov edx, dword [eax + 0x48]
sub edx, 0x12
mov eax, dword [ebx + 0x44c]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x44c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x444]
call fcn.00493170
mov edx, 0x23
mov eax, dword [ebx + 0x444]
call fcn.0044728c
mov edx, 0x189
mov eax, dword [ebx + 0x444]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x448]
call fcn.00493170
mov edx, 0x87
mov eax, dword [ebx + 0x448]
call fcn.0044728c
mov edx, 0x189
mov eax, dword [ebx + 0x448]
call fcn.004472c0
mov edx, 0x142
mov eax, dword [ebx + 0x528]
call fcn.004472c0
mov edx, 0x15
mov eax, dword [ebx + 0x528]
call fcn.0044728c
mov edx, 0x24
mov eax, dword [ebx + 0x528]
call fcn.004472f4
mov edx, 0x24
mov eax, dword [ebx + 0x528]
call fcn.00447328
mov edx, 0x129
mov eax, dword [ebx + 0x534]
call fcn.004472c0
mov edx, 0x39
mov eax, dword [ebx + 0x534]
call fcn.0044728c
mov edx, 0xa6
mov eax, dword [ebx + 0x534]
call fcn.004472f4
mov edx, 0x10
mov eax, dword [ebx + 0x534]
call fcn.00447328
mov edx, 0x60
mov eax, dword [ebx + 0x440]
call fcn.004472c0
mov edx, 0x16
mov eax, dword [ebx + 0x440]
call fcn.0044728c
mov edx, 0xc8
mov eax, dword [ebx + 0x440]
call fcn.004472f4
mov edx, 0xb0
mov eax, dword [ebx + 0x440]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x450]
call fcn.00493170
mov edx, 0x5a
mov eax, dword [ebx + 0x450]
call fcn.004472c0
mov edx, 0xd4
mov eax, dword [ebx + 0x450]
call fcn.0044728c
mov edx, 0xb7
mov eax, dword [ebx + 0x450]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov edx, 0x50
mov eax, dword [ebx + 0x454]
call fcn.0044728c
mov edx, 0x27
mov eax, dword [ebx + 0x454]
call fcn.004472c0
mov edx, 0x8c
mov eax, dword [ebx + 0x454]
call fcn.004472f4
mov edx, 0x10
mov eax, dword [ebx + 0x454]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x135
mov eax, dword [ebx + 0x458]
call fcn.00493170
mov edx, 0x44
mov eax, dword [ebx + 0x458]
call fcn.0044728c
mov edx, 0x41
mov eax, dword [ebx + 0x458]
call fcn.004472c0
mov edx, 0x10
mov eax, dword [ebx + 0x458]
call fcn.00447328
mov edx, 0x9c
mov eax, dword [ebx + 0x458]
call fcn.004472f4
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov ecx, 0x78
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov eax, dword [edi]
mov edx, 0x162
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd018
mov edx, dword [edi]
mov ecx, 0x162
mov eax, dword [ebx + 0x3d0]
call fcn.00493170
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
sub edx, eax
mov eax, dword [ebx + 0x3d0]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x68e9b0]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd00d
adc edx, 0
mov eax, dword [ebx + 0x3d0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x3e4]
call fcn.00493170
mov eax, dword [ebx + 0x3d0]
mov edx, dword [eax + 0x48]
sub edx, 0x14
mov eax, dword [ebx + 0x3e4]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x3e4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x3d8]
call fcn.00493170
mov edx, 0xd
mov eax, dword [ebx + 0x3d8]
call fcn.0044728c
mov edx, 0x28
mov eax, dword [ebx + 0x3d8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x3dc]
call fcn.00493170
mov edx, 0x41
mov eax, dword [ebx + 0x3dc]
call fcn.0044728c
mov edx, 0x28
mov eax, dword [ebx + 0x3dc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x3e0]
call fcn.00493170
mov edx, 0x75
mov eax, dword [ebx + 0x3e0]
call fcn.0044728c
mov edx, 0x28
mov eax, dword [ebx + 0x3e0]
call fcn.004472c0
mov edx, 0x5c
mov eax, dword [ebx + 0x3d4]
call fcn.004472c0
mov edx, 0x15
mov eax, dword [ebx + 0x3d4]
call fcn.0044728c
mov edx, 0x7a
mov eax, dword [ebx + 0x3d4]
call fcn.004472f4
mov edx, 0x110
mov eax, dword [ebx + 0x3d4]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x408]
call fcn.00493170
mov edx, 0x55
mov eax, dword [ebx + 0x408]
call fcn.004472c0
mov edx, 0x94
mov eax, dword [ebx + 0x408]
call fcn.0044728c
mov edx, 0x11f
mov eax, dword [ebx + 0x408]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x3e8]
call fcn.00493170
mov edx, 0x1b
mov eax, dword [ebx + 0x3e8]
call fcn.0044728c
mov edx, 0x182
mov eax, dword [ebx + 0x3e8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x3ec]
call fcn.00493170
mov edx, 0x65
mov eax, dword [ebx + 0x3ec]
call fcn.0044728c
mov edx, 0x182
mov eax, dword [ebx + 0x3ec]
call fcn.004472c0
mov eax, dword [edi]
mov edx, 0x16e
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd28c
mov edx, dword [edi]
mov ecx, 0x16e
mov eax, dword [ebx + 0x3f0]
call fcn.00493170
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd259
adc edx, 0
mov eax, dword [ebx + 0x3f0]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x68e9b0]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd281
adc edx, 0
mov eax, dword [ebx + 0x3f0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x18
mov eax, dword [ebx + 0x3fc]
call fcn.00493170
mov edx, 0x2e
mov eax, dword [ebx + 0x3fc]
call fcn.0044728c
mov edx, 0x8d
mov eax, dword [ebx + 0x3fc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x18
mov eax, dword [ebx + 0x400]
call fcn.00493170
mov edx, 0xa8
mov eax, dword [ebx + 0x400]
call fcn.0044728c
mov edx, 0x8d
mov eax, dword [ebx + 0x400]
call fcn.004472c0
mov eax, dword [edi]
mov edx, 0x102
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd34f
mov edx, dword [edi]
mov ecx, 0x102
mov eax, dword [ebx + 0x460]
call fcn.00493170
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd334
adc edx, 0
mov eax, dword [ebx + 0x460]
call fcn.0044728c
mov edx, 0x3c
mov eax, dword [ebx + 0x460]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x484]
call fcn.00493170
mov eax, dword [ebx + 0x460]
mov edx, dword [eax + 0x48]
sub edx, 0x14
mov eax, dword [ebx + 0x484]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x484]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x19e
mov eax, dword [ebx + 0x46c]
call fcn.00493170
mov edx, 0x6c
mov eax, dword [ebx + 0x46c]
call fcn.0044728c
mov edx, 0x47
mov eax, dword [ebx + 0x46c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x1a4
mov eax, dword [ebx + 0x470]
call fcn.00493170
mov edx, 0x6c
mov eax, dword [ebx + 0x470]
call fcn.0044728c
mov edx, 0xf2
mov eax, dword [ebx + 0x470]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x1a1
mov eax, dword [ebx + 0x474]
call fcn.00493170
mov edx, 0x19
mov eax, dword [ebx + 0x474]
call fcn.0044728c
mov edx, 0xa5
mov eax, dword [ebx + 0x474]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x1a7
mov eax, dword [ebx + 0x478]
call fcn.00493170
mov edx, 0xb0
mov eax, dword [ebx + 0x478]
call fcn.0044728c
mov edx, 0xa5
mov eax, dword [ebx + 0x478]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x464]
call fcn.00493170
mov edx, 0xfa
mov eax, dword [ebx + 0x464]
call fcn.0044728c
mov edx, 0x104
mov eax, dword [ebx + 0x464]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x468]
call fcn.00493170
mov edx, 0x150
mov eax, dword [ebx + 0x468]
call fcn.0044728c
mov edx, 0x104
mov eax, dword [ebx + 0x468]
call fcn.004472c0
mov eax, dword [ebx + 0x468]
xor edx, edx
mov dword [eax + 0x264], edx
mov dword [eax + 0x268], edx
mov edx, 0x73
mov eax, dword [ebx + 0x47c]
call fcn.004472c0
mov edx, 0x45
mov eax, dword [ebx + 0x47c]
call fcn.0044728c
mov edx, 0x64
mov eax, dword [ebx + 0x47c]
call fcn.004472f4
mov edx, 0x78
mov eax, dword [ebx + 0x47c]
call fcn.00447328
mov edx, 0x47
mov eax, dword [ebx + 0x488]
call fcn.004472c0
mov edx, 0xec
mov eax, dword [ebx + 0x488]
call fcn.0044728c
mov edx, 0xa7
mov eax, dword [ebx + 0x488]
call fcn.004472f4
mov edx, 0xb4
mov eax, dword [ebx + 0x488]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x480]
call fcn.00493170
mov edx, 0x47
mov eax, dword [ebx + 0x480]
call fcn.004472c0
mov edx, 0x193
mov eax, dword [ebx + 0x480]
call fcn.0044728c
mov edx, 0xb4
mov eax, dword [ebx + 0x480]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov eax, dword [edi]
mov edx, 0x1b0
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd616
mov edx, dword [edi]
mov ecx, 0x1b0
mov eax, dword [ebx + 0x48c]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x48c]
call fcn.0044728c
mov edx, 0x40
mov eax, dword [ebx + 0x48c]
call fcn.004472c0
mov edx, 0x49
mov eax, dword [ebx + 0x490]
call fcn.004472c0
mov edx, 0x1c
mov eax, dword [ebx + 0x490]
call fcn.0044728c
mov edx, 0x8b
mov eax, dword [ebx + 0x490]
call fcn.004472f4
mov edx, 0x68
mov eax, dword [ebx + 0x490]
call fcn.00447328
mov edx, 0x49
mov eax, dword [ebx + 0x494]
call fcn.004472c0
mov edx, 0xcb
mov eax, dword [ebx + 0x494]
call fcn.0044728c
mov edx, 0x8b
mov eax, dword [ebx + 0x494]
call fcn.004472f4
mov edx, 0x68
mov eax, dword [ebx + 0x494]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x4ac]
call fcn.00493170
mov eax, dword [ebx + 0x48c]
mov edx, dword [eax + 0x48]
sub edx, 0x14
mov eax, dword [ebx + 0x4ac]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x4ac]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x4a0]
call fcn.00493170
mov edx, 0xbf
mov eax, dword [ebx + 0x4a0]
call fcn.0044728c
mov edx, 0xc2
mov eax, dword [ebx + 0x4a0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x4bc]
call fcn.00493170
mov edx, 0x11b
mov eax, dword [ebx + 0x4bc]
call fcn.0044728c
mov edx, 0xc2
mov eax, dword [ebx + 0x4bc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x4a8]
call fcn.00493170
mov edx, 0x11b
mov eax, dword [ebx + 0x4a8]
call fcn.0044728c
mov edx, 0xd9
mov eax, dword [ebx + 0x4a8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x4a4]
call fcn.00493170
mov edx, 0xbf
mov eax, dword [ebx + 0x4a4]
call fcn.0044728c
mov edx, 0xd9
mov eax, dword [ebx + 0x4a4]
call fcn.004472c0
mov edx, 0x109
mov eax, dword [ebx + 0x498]
call fcn.004472c0
mov edx, 0x18
mov eax, dword [ebx + 0x498]
call fcn.0044728c
mov edx, 0x142
mov eax, dword [ebx + 0x498]
call fcn.004472f4
mov edx, 0x55
mov eax, dword [ebx + 0x498]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x49c]
call fcn.00493170
mov eax, dword [ebx + 0x498]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x49c]
call fcn.004472c0
mov eax, dword [ebx + 0x498]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x49c]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x498]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x49c]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov eax, dword [edi]
mov edx, 0x1b1
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd8bd
mov edx, dword [edi]
mov ecx, 0x1b1
mov eax, dword [ebx + 0x4c0]
call fcn.00493170
mov edx, 0x14
mov eax, dword [ebx + 0x4c0]
call fcn.0044728c
mov edx, 0x40
mov eax, dword [ebx + 0x4c0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x4cc]
call fcn.00493170
mov eax, dword [ebx + 0x4c0]
mov edx, dword [eax + 0x48]
sub edx, 0x14
mov eax, dword [ebx + 0x4cc]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x4cc]
call fcn.004472c0
mov edx, 0x49
mov eax, dword [ebx + 0x4c4]
call fcn.004472c0
mov edx, 0x1c
mov eax, dword [ebx + 0x4c4]
call fcn.0044728c
mov edx, 0x8b
mov eax, dword [ebx + 0x4c4]
call fcn.004472f4
mov edx, 0x68
mov eax, dword [ebx + 0x4c4]
call fcn.00447328
mov edx, 0x49
mov eax, dword [ebx + 0x4c8]
call fcn.004472c0
mov edx, 0xcb
mov eax, dword [ebx + 0x4c8]
call fcn.0044728c
mov edx, 0x8b
mov eax, dword [ebx + 0x4c8]
call fcn.004472f4
mov edx, 0x68
mov eax, dword [ebx + 0x4c8]
call fcn.00447328
mov edx, 0x136
mov eax, dword [ebx + 0x4d8]
call fcn.004472c0
mov edx, 0x39
mov eax, dword [ebx + 0x4d8]
call fcn.0044728c
mov edx, 0x120
mov eax, dword [ebx + 0x4d8]
call fcn.004472f4
mov edx, 0x12
mov eax, dword [ebx + 0x4d8]
call fcn.00447328
mov edx, 0xdb
mov eax, dword [ebx + 0x4d0]
call fcn.004472c0
mov edx, 0x18
mov eax, dword [ebx + 0x4d0]
call fcn.0044728c
mov edx, 0x142
mov eax, dword [ebx + 0x4d0]
call fcn.004472f4
mov edx, 0x55
mov eax, dword [ebx + 0x4d0]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x4d4]
call fcn.00493170
mov eax, dword [ebx + 0x4d0]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x4d4]
call fcn.004472c0
mov eax, dword [ebx + 0x4d0]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x4d4]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x4d0]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x4d4]
call fcn.00447328
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x350]
mov ecx, 0x6c
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x354]
mov ecx, 0x6f
call fcn.00493170
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x358]
mov ecx, 0x72
call fcn.00493170
mov eax, dword [edi]
mov edx, 0x150
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cdad9
mov edx, dword [edi]
mov ecx, 0x150
mov eax, dword [ebx + 0x4dc]
call fcn.00493170
xor edx, edx
mov eax, dword [ebx + 0x4dc]
call fcn.0044728c
mov edx, 0x4a
mov eax, dword [ebx + 0x4dc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x85
mov eax, dword [ebx + 0x4fc]
call fcn.00493170
mov eax, dword [ebx + 0x4dc]
mov edx, dword [eax + 0x48]
sub edx, 0x14
mov eax, dword [ebx + 0x4fc]
call fcn.0044728c
mov edx, 0xc
mov eax, dword [ebx + 0x4fc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x4f4]
call fcn.00493170
mov edx, 0xae
mov eax, dword [ebx + 0x4f4]
call fcn.0044728c
mov edx, 0x14d
mov eax, dword [ebx + 0x4f4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x93
mov eax, dword [ebx + 0x4f8]
call fcn.00493170
mov edx, 0xe5
mov eax, dword [ebx + 0x4f8]
call fcn.0044728c
mov edx, 0x14d
mov eax, dword [ebx + 0x4f8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4e0]
call fcn.00493170
mov edx, 0xd
mov eax, dword [ebx + 0x4e0]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4e0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4e4]
call fcn.00493170
mov edx, 0x43
mov eax, dword [ebx + 0x4e4]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4e4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4e8]
call fcn.00493170
mov edx, 0x79
mov eax, dword [ebx + 0x4e8]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4e8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4ec]
call fcn.00493170
mov edx, 0xaf
mov eax, dword [ebx + 0x4ec]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4ec]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4f0]
call fcn.00493170
mov edx, 0xe5
mov eax, dword [ebx + 0x4f0]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4f0]
call fcn.004472c0
mov edx, 0x17
mov eax, dword [ebx + 0x500]
call fcn.0044728c
mov edx, 0x48
mov eax, dword [ebx + 0x500]
call fcn.004472c0
mov edx, 0xf4
mov eax, dword [ebx + 0x500]
call fcn.004472f4
mov edx, 0xf4
mov eax, dword [ebx + 0x500]
call fcn.00447328
mov eax, dword [edi]
mov edx, 0xe8
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cdd44
mov edx, dword [edi]
mov ecx, 0xe8
mov eax, dword [ebx + 0x504]
call fcn.00493170
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cdcf4
adc edx, 0
sub edx, 5
mov eax, dword [ebx + 0x504]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x68e9b0]
mov edx, dword [edx]
sar edx, 1
jns 0x4cdd1d
adc edx, 0
sub edx, eax
sar edx, 1
jns 0x4cdd26
adc edx, 0
mov eax, dword [0x68e9b0]
mov eax, dword [eax]
sar eax, 1
jns 0x4cdd34
adc eax, 0
add edx, eax
sub edx, 0xa
mov eax, dword [ebx + 0x504]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x508]
call fcn.00493170
mov edx, 0x15
mov eax, dword [ebx + 0x508]
call fcn.0044728c
mov edx, 0x15
mov eax, dword [ebx + 0x508]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x50c]
call fcn.00493170
mov edx, 0x15
mov eax, dword [ebx + 0x50c]
call fcn.0044728c
mov edx, 0x37
mov eax, dword [ebx + 0x50c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x510]
call fcn.00493170
mov edx, 0x15
mov eax, dword [ebx + 0x510]
call fcn.0044728c
mov edx, 0x51
mov eax, dword [ebx + 0x510]
call fcn.004472c0
mov eax, dword [edi]
mov edx, 0xe6
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cde6e
mov edx, dword [edi]
mov ecx, 0xe6
mov eax, dword [ebx + 0x514]
call fcn.00493170
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cde1e
adc edx, 0
sub edx, 5
mov eax, dword [ebx + 0x514]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x68e9b0]
mov edx, dword [edx]
sar edx, 1
jns 0x4cde47
adc edx, 0
sub edx, eax
sar edx, 1
jns 0x4cde50
adc edx, 0
mov eax, dword [0x68e9b0]
mov eax, dword [eax]
sar eax, 1
jns 0x4cde5e
adc eax, 0
add edx, eax
sub edx, 0xa
mov eax, dword [ebx + 0x514]
call fcn.004472c0
xor edx, edx
mov eax, dword [ebx + 0x538]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x538]
call fcn.004472c0
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
mov eax, dword [ebx + 0x538]
call fcn.004472f4
mov edx, dword [0x68e9b0]
mov edx, dword [edx]
mov eax, dword [ebx + 0x538]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x8f
mov eax, dword [ebx + 0x53c]
call fcn.00493170
mov edx, dword [0x68e9d8]
mov edx, dword [edx]
mov eax, dword [ebx + 0x53c]
sub edx, dword [eax + 0x48]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x53c]
call fcn.004472c0
mov eax, dword [edi]
mov edx, 0xe8
call fcn.0048ecc8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cdf2a
mov edx, dword [edi]
mov ecx, 0xe8
mov eax, dword [ebx + 0x540]
call fcn.00493170
mov edx, 0x2a3
mov eax, dword [ebx + 0x540]
call fcn.0044728c
mov edx, 0x1b1
mov eax, dword [ebx + 0x540]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x544]
call fcn.00493170
mov edx, 0x15
mov eax, dword [ebx + 0x544]
call fcn.0044728c
mov edx, 0x15
mov eax, dword [ebx + 0x544]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x548]
call fcn.00493170
mov edx, 0x15
mov eax, dword [ebx + 0x548]
call fcn.0044728c
mov edx, 0x38
mov eax, dword [ebx + 0x548]
call fcn.004472c0
mov eax, dword [ebx + 0x548]
xor edx, edx
mov dword [eax + 0x264], edx
mov dword [eax + 0x268], edx
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x54c]
call fcn.00493170
mov edx, 0x15
mov eax, dword [ebx + 0x54c]
call fcn.0044728c
mov edx, 0x52
mov eax, dword [ebx + 0x54c]
call fcn.004472c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4cdff6
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.0040517c
ret