Function at 0x492160
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x496ec2
sub esp, 0xa0
movzx ebx, byte [0x6d9c7b]
cmp bl, 1
jbe 0x492193
add esp, 0xa0
ret
movzx ebx, byte [0x6d9c7b]
cmp bl, 1
jne 0x4921a6
call fcn.00428b20
ud2
mov byte [0x6d9c7b], 1
call fcn.005074d0
call fcn.00508df0
call fcn.00515140
call fcn.004d43c0
call fcn.0045f500
call fcn.005166c0
call fcn.0051a4e0
call fcn.005208a0
call fcn.004d1770
call fcn.004aa1d0
call fcn.004d35c0
call fcn.004c6020
call fcn.004e05d0
call fcn.005238f0
call fcn.00523c10
call fcn.00525a20
call fcn.004d6220
call fcn.00525cd0
call fcn.004d79f0
call fcn.00527870
call fcn.00529710
call fcn.0052b2e0
call fcn.004cf400
call fcn.004e0db0
call fcn.0052be40
call fcn.0053adb0
call fcn.0044dfd0
call fcn.00546460
call fcn.00548910
call fcn.00549670
mov ebx, 0x5fcadc
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8578], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496eac
mov dword [0x6c857c], ebx
mov dword [esp], 0x5bf1c0
call fcn.0040ea00
mov eax, dword [esp + 4]
mov ebp, dword [0x61a500]
mov dword [eax], ebp
mov ebp, dword [0x61a504]
mov dword [eax + 4], ebp
mov ebp, dword [0x61a508]
mov dword [eax + 8], ebp
mov ebp, dword [0x61a50c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x61a510]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x61a514]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x61a518]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61a51c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.0051b250
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496e96
mov dword [0x6c7fb8], ebx
mov ebx, 0x5f93e5
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c85d8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496e80
mov dword [0x6c85dc], ebx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.004a7cd0
mov ebx, dword [esp + 0x10]
mov dword [0x6c8970], ebx
mov ebx, dword [esp + 0x14]
mov dword [0x6c8974], ebx
mov ebx, dword [esp + 0x18]
mov dword [0x6c8978], ebx
mov ebx, dword [esp + 0x1c]
cmp byte [0x6d9e38], 0
jne 0x496e6a
mov dword [0x6c897c], ebx
mov dword [esp], 0x5c5920
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496e54
mov dword [0x6c7fd0], ebx
xor eax, eax
cmp eax, 0xe
jge 0x49242f
mov dword [esp], 0x5c5920
mov ebx, dword [0x6c7fd0]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61ad20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61ad20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xe
jl 0x4923e6
mov ebx, 0x6008d6
mov dword [esp], ebx
mov dword [esp + 4], 0x2a
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8688], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496e3e
mov dword [0x6c868c], ebx
mov ebx, 0x5fe88f
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8698], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496e28
mov dword [0x6c869c], ebx
mov ebx, 0x5fcb2d
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86a8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496e12
mov dword [0x6c86ac], ebx
mov ebx, 0x5fc1e9
mov dword [esp], ebx
mov dword [esp + 4], 0x19
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86f0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496dfc
mov dword [0x6c86f4], ebx
mov dword [esp], 0x5c4440
mov dword [esp + 4], 0xff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0xff
mov dword [esp + 0x10], 0
call fcn.0043c2d0
mov ebx, dword [esp + 0x18]
mov dword [0x6c88ac], ebx
mov ebx, dword [esp + 0x1c]
mov dword [0x6c88b0], ebx
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496de6
mov dword [0x6c88a8], ebx
mov dword [esp], 0x5c5a20
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496dd0
mov dword [0x6c7fd8], ebx
xor eax, eax
cmp eax, 0xa
jge 0x4925f1
mov dword [esp], 0x5c5a20
mov ebx, dword [0x6c7fd8]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61aae0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61aae0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xa
jl 0x4925a8
mov dword [esp], 0x5c59a0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496dba
mov dword [0x6c7fd4], ebx
mov byte [esp + 0x23], 0
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x4926bb
mov dword [esp], 0x5c5960
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a460
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a460
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x492674
mov dword [esp], 0x5c59a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 1
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 4
jge 0x492768
mov dword [esp], 0x5c5960
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a640
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a640
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 4
jl 0x492721
mov dword [esp], 0x5c59a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 4
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x492815
mov dword [esp], 0x5c5960
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619e10
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619e10
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x4927ce
mov dword [esp], 0x5c59a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 6
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x4928c2
mov dword [esp], 0x5c5960
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619e20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619e20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x49287b
mov dword [esp], 0x5c59a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 9
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x49296f
mov dword [esp], 0x5c5960
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x619e30
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x619e30
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x492928
mov dword [esp], 0x5c59a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 5
mov dword [esp], 0x5c5960
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x492a1c
mov dword [esp], 0x5c5960
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a480
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a480
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x4929d5
mov dword [esp], 0x5c59a0
mov ebx, dword [0x6c7fd4]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov dword [esp], 0x5c59e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496da4
mov dword [0x6c7fdc], ebx
mov byte [esp + 0x23], 0
mov ebx, 0x619a14
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 1
mov ebx, 0x619a1c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 2
mov ebx, 0x619a24
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 3
mov ebx, 0x619a2c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 4
mov ebx, 0x619a30
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 5
mov ebx, 0x619a28
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 6
mov ebx, 0x619a20
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 7
mov ebx, 0x619a18
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 8
mov ebx, 0x619a38
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov byte [esp + 0x23], 9
mov ebx, 0x619a10
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5c59e0
mov ebx, dword [0x6c7fdc]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00407c20
mov ebx, 0x5fad64
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8618], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496d8e
mov dword [0x6c861c], ebx
mov ebx, 0x5f92d5
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86d8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496d78
mov dword [0x6c86dc], ebx
mov ebx, 0x5fca04
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8658], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496d62
mov dword [0x6c865c], ebx
mov ebx, 0x5fa3f2
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8690], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496d4c
mov dword [0x6c8694], ebx
mov ebx, 0x5faafc
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d4770
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xc]
cmp eax, 1
jne 0x496d40
mov dword [esp + 0x48], edx
mov dword [esp], edx
mov dword [esp + 0x4c], eax
mov dword [esp + 4], eax
mov ebp, 0x5f5ab2
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
call fcn.00452cd0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x496d40
mov byte [0x6d9c77], 1
mov dword [esp], 0x5c5ee0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496d2a
mov dword [0x6c7fcc], ebx
mov dword [esp], 0x5c5ee0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496d14
mov dword [0x6c7fc8], ebx
mov dword [esp], 0x5c5a60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496cfe
mov dword [0x6c7fe4], ebx
xor eax, eax
cmp eax, 6
jge 0x492ede
mov dword [esp], 0x5c5a60
mov ebx, dword [0x6c7fe4]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a9c0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a9c0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 6
jl 0x492e95
mov ebx, 0x5fe29e
mov dword [esp], ebx
mov dword [esp + 4], 0x20
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8670], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496ce8
mov dword [0x6c8674], ebx
mov ebx, 0x5fe787
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8678], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496cd2
mov dword [0x6c867c], ebx
mov dword [esp], 0x5c5820
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496cbc
mov dword [0x6c7fe0], ebx
mov dword [esp], 0x5d16e0
call fcn.0040ea00
mov eax, dword [esp + 4]
mov ebp, 0x6000db
mov dword [eax], ebp
mov dword [eax + 4], 0x28
mov ecx, 1
mov byte [eax + 8], cl
mov ecx, eax
mov eax, 0x6b0b90
mov dword [esp + 0x68], eax
mov dword [0x6c86e0], eax
mov dword [esp + 0x6c], ecx
cmp byte [0x6d9e38], 0
jne 0x496ca6
mov dword [0x6c86e4], ecx
mov ebx, 0x5fb03a
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8648], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c90
mov dword [0x6c864c], ebx
mov ebx, 0x5f9c12
mov dword [esp], ebx
mov dword [esp + 4], 0x13
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8638], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c7a
mov dword [0x6c863c], ebx
mov ebx, 0x5facb4
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8640], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c64
mov dword [0x6c8644], ebx
mov ebx, 0x601a4a
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8660], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c4e
mov dword [0x6c8664], ebx
mov ebx, 0x5fa302
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86d0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c38
mov dword [0x6c86d4], ebx
mov ebx, 0x5fb38b
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8668], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496c22
mov dword [0x6c866c], ebx
mov dword [esp], 0x5c5d60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496c0c
mov dword [0x6c7fc4], ebx
xor eax, eax
cmp eax, 0x15
jge 0x4931b2
mov dword [esp], 0x5c5d60
mov ebx, dword [0x6c7fc4]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61aec0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61aec0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0x15
jl 0x493169
mov ebx, 0x603272
mov dword [esp], ebx
mov dword [esp + 4], 0x3e
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86e8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496bf6
mov dword [0x6c86ec], ebx
mov ebx, 0x6004cc
mov dword [esp], ebx
mov dword [esp + 4], 0x29
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8620], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496be0
mov dword [0x6c8624], ebx
mov ebx, 0x5fcf9b
mov dword [esp], ebx
mov dword [esp + 4], 0x1c
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8628], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496bca
mov dword [0x6c862c], ebx
mov ebx, 0x5fd4b7
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8630], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496bb4
mov dword [0x6c8634], ebx
mov ebx, 0x5fc5de
mov dword [esp], ebx
mov dword [esp + 4], 0x1a
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86b0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b9e
mov dword [0x6c86b4], ebx
mov ebx, 0x5fec34
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86c0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b88
mov dword [0x6c86c4], ebx
mov ebx, 0x5fb980
mov dword [esp], ebx
mov dword [esp + 4], 0x18
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86c8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b72
mov dword [0x6c86cc], ebx
mov ebx, 0x5fc998
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8650], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b5c
mov dword [0x6c8654], ebx
mov ebx, 0x5fb3a2
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8680], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b46
mov dword [0x6c8684], ebx
mov ebx, 0x602d36
mov dword [esp], ebx
mov dword [esp + 4], 0x38
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86b8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b30
mov dword [0x6c86bc], ebx
mov ebx, 0x6000b3
mov dword [esp], ebx
mov dword [esp + 4], 0x28
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c86a0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b1a
mov dword [0x6c86a4], ebx
xor ebx, ebx
mov dword [esp], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004d34d0
mov ecx, dword [esp + 0xc]
mov eax, 0x6b0950
mov dword [esp + 0x60], eax
mov dword [esp], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 4], ecx
call fcn.0045f0f0
mov ebx, dword [esp + 8]
mov dword [0x6c86f8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496b04
mov dword [0x6c86fc], ebx
mov dword [esp], 0x5bf1c0
call fcn.0040ea00
mov eax, dword [esp + 4]
mov ebp, dword [0x61a520]
mov dword [eax], ebp
mov ebp, dword [0x61a524]
mov dword [eax + 4], ebp
mov ebp, dword [0x61a528]
mov dword [eax + 8], ebp
mov ebp, dword [0x61a52c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x61a530]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x61a534]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x61a538]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61a53c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.0051b250
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496aee
mov dword [0x6c7fbc], ebx
mov ebx, 0x5f9709
mov dword [esp], ebx
mov dword [esp + 4], 0x12
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8558], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496ad8
mov dword [0x6c855c], ebx
mov dword [esp], 0x5c5d60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496ac2
mov dword [0x6c7fec], ebx
xor eax, eax
cmp eax, 5
jge 0x4935b1
mov dword [esp], 0x5c5d60
mov ebx, dword [0x6c7fec]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a900
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a900
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 5
jl 0x493568
mov ebx, 0x5fda6f
mov dword [esp], ebx
mov dword [esp + 4], 0x1e
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8560], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496aac
mov dword [0x6c8564], ebx
mov dword [esp], 0x5c5d20
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496a96
mov dword [0x6c8700], ebx
mov dword [esp], 0x5c5c60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496a80
mov dword [0x6c8704], ebx
mov ebx, 0x60273a
mov dword [esp], ebx
mov dword [esp + 4], 0x36
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c85a8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a6a
mov dword [0x6c85ac], ebx
mov dword [esp], 0x5c5d60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00407010
mov ebx, dword [esp + 0x14]
cmp byte [0x6d9e38], 0
jne 0x496a54
mov dword [0x6c7ff0], ebx
xor eax, eax
cmp eax, 3
jge 0x493736
mov dword [esp], 0x5c5d60
mov ebx, dword [0x6c7ff0]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x61a580
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x61a580
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00407c20
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 3
jl 0x4936ed
mov ebx, 0x5ff345
mov dword [esp], ebx
mov dword [esp + 4], 0x24
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8568], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a3e
mov dword [0x6c856c], ebx
mov ebx, 0x6034ac
mov dword [esp], ebx
mov dword [esp + 4], 0x40
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8528], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a28
mov dword [0x6c852c], ebx
mov ebx, 0x5fec56
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8548], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x496a12
mov dword [0x6c854c], ebx
mov ebx, 0x601a7b
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8538], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969fc
mov dword [0x6c853c], ebx
mov ebx, 0x5f6540
mov dword [esp], ebx
mov dword [esp + 4], 6
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c8580], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969e6
mov dword [0x6c8584], ebx
mov ebx, 0x5fb3d0
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004d1f20
mov ebx, dword [esp + 8]
mov dword [0x6c85f0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6d9e38], 0
jne 0x4969d0
mov ebp, 0x6c8584
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493844
mov ebp, 0x6c853c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49380e
mov ebp, 0x6c854c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4937d8
mov ebp, 0x6c852c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4937a2
mov ebp, 0x6c856c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49376c
mov ebp, 0x6c7ff0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4936e6
mov ebp, 0x6c85ac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4936a3
mov ebp, 0x6c8704
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49366d
mov ebp, 0x6c8700
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49362a
mov ebp, 0x6c8564
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4935e7
mov ebp, 0x6c7fec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493561
mov ebp, 0x6c855c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49351e
mov ebp, 0x6c7fbc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4934e8
mov ebp, 0x6c86fc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493454
mov ebp, 0x6c86a4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493404
mov ebp, 0x6c86bc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4933ce
mov ebp, 0x6c8684
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493398
mov ebp, 0x6c8654
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493362
mov ebp, 0x6c86cc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49332c
mov ebp, 0x6c86c4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4932f6
mov ebp, 0x6c86b4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4932c0
mov ebp, 0x6c8634
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49328a
mov ebp, 0x6c862c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493254
mov ebp, 0x6c8624
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49321e
mov ebp, 0x6c86ec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4931e8
mov ebp, 0x6c7fc4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493162
mov ebp, 0x6c866c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49311f
mov ebp, 0x6c86d4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4930e9
mov ebp, 0x6c8664
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4930b3
mov ebp, 0x6c8644
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49307d
mov ebp, 0x6c863c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493047
mov ebp, 0x6c864c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x493011
mov ebp, 0x6c86e4
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040f3d0
jmp 0x492fdb
mov ebp, 0x6c7fe0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492f8d
mov ebp, 0x6c867c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492f4a
mov ebp, 0x6c8674
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492f14
mov ebp, 0x6c7fe4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492e8e
mov ebp, 0x6c7fc8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492e4b
mov ebp, 0x6c7fcc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492e08
mov byte [0x6d9c77], 0
jmp 0x492dc5
mov ebp, 0x6c8694
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492d65
mov ebp, 0x6c865c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492d2f
mov ebp, 0x6c86dc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492cf9
mov ebp, 0x6c861c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492cc3
mov ebp, 0x6c7fdc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492a85
mov ebp, 0x6c7fd4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492634
mov ebp, 0x6c7fd8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4925a1
mov ebp, 0x6c88a8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49255e
mov ebp, 0x6c86f4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492507
mov ebp, 0x6c86ac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4924d1
mov ebp, 0x6c869c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49249b
mov ebp, 0x6c868c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492465
mov ebp, 0x6c7fd0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x4923df
mov ebp, 0x6c897c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49239c
mov ebp, 0x6c85dc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492343
mov ebp, 0x6c7fb8
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x49230d
mov ebp, 0x6c857c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040f3d0
jmp 0x492279
call fcn.00450fb0
jmp fcn.00492160