Function at 0x48f0e0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2a
push 0
push 0
dec ecx
jne 0x48f0e8
push ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x48fe53
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
push eax
mov eax, 0x48fe68
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xb
lea edx, [ebp - 0x18]
mov eax, dword [0x497468]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00409850
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00459a80
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.00459a50
mov edx, dword [ebp - 0x1c]
mov eax, dword [0x4974f4]
mov eax, dword [eax]
call fcn.004794e0
mov eax, dword [0x4971c0]
add eax, 4
mov edx, dword [0x497224]
mov edx, dword [edx]
call fcn.004047d4
mov eax, dword [0x4971c0]
add eax, 8
mov edx, dword [0x4975a4]
mov edx, dword [edx]
call fcn.004047d4
mov eax, dword [0x4971c0]
add eax, 0xc
mov edx, dword [0x4975d4]
mov edx, dword [edx]
call fcn.004047d4
mov eax, dword [0x4971c0]
add eax, 0x10
mov edx, dword [0x497410]
mov edx, dword [edx]
call fcn.004047d4
lea edx, [ebp - 0x20]
mov eax, 0x78
call fcn.0047c2a4
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x410]
call fcn.00459a80
lea edx, [ebp - 0x24]
mov eax, 0x79
call fcn.0047c2a4
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x414]
call fcn.00459a80
lea edx, [ebp - 0x28]
mov eax, 0x33
call fcn.0047c2a4
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
call fcn.00459a80
lea edx, [ebp - 0x2c]
mov eax, 0x34
call fcn.0047c2a4
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
call fcn.00459a80
lea edx, [ebp - 0x30]
mov eax, 0x35
call fcn.0047c2a4
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x314]
call fcn.00459a80
lea edx, [ebp - 0x34]
mov eax, 0x36
call fcn.0047c2a4
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.00459a80
lea edx, [ebp - 0x38]
mov eax, 0x37
call fcn.0047c2a4
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x3c]
mov eax, 0x38
call fcn.0047c2a4
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x40]
mov eax, 0x39
call fcn.0047c2a4
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34c]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x44]
mov eax, 0x3a
call fcn.0047c2a4
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x350]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x48]
mov eax, 0x3b
call fcn.0047c2a4
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x4c]
mov eax, 0x3c
call fcn.0047c2a4
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
call fcn.00459a80
lea edx, [ebp - 0x50]
mov eax, 0x3d
call fcn.0047c2a4
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x54]
mov eax, 0x3e
call fcn.0047c2a4
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x358]
call fcn.00459a80
lea edx, [ebp - 0x58]
mov eax, 0x3f
call fcn.0047c2a4
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
add eax, 0x80
call fcn.004047d4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d0]
add eax, 0x80
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x330]
mov edx, dword [edx + 0x80]
call fcn.004047d4
lea edx, [ebp - 0x5c]
mov eax, 0x40
call fcn.0047c2a4
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
call fcn.00459a80
lea edx, [ebp - 0x60]
mov eax, 0x41
call fcn.0047c2a4
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x64]
mov eax, 0x42
call fcn.0047c2a4
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.00459a80
lea edx, [ebp - 0x68]
mov eax, 0x45
call fcn.0047c2a4
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x6c]
mov eax, 0x46
call fcn.0047c2a4
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
call fcn.00459a80
lea edx, [ebp - 0x70]
mov eax, 0x70
call fcn.0047c2a4
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c8]
call fcn.00459a80
lea edx, [ebp - 0x74]
mov eax, 0x71
call fcn.0047c2a4
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c8]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x78]
mov eax, 0x47
call fcn.0047c2a4
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x7c]
mov eax, 0x55
call fcn.0047c2a4
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
call fcn.00459a80
lea edx, [ebp - 0x80]
mov eax, 0x47
call fcn.0047c2a4
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x84]
mov eax, 0x56
call fcn.0047c2a4
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.00459a80
lea edx, [ebp - 0x88]
mov eax, 0x49
call fcn.0047c2a4
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x8c]
mov eax, 0x4a
call fcn.0047c2a4
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
call fcn.00459a80
lea edx, [ebp - 0x90]
mov eax, 0x4b
call fcn.0047c2a4
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0x94]
mov eax, 0x4c
call fcn.0047c2a4
mov edx, dword [ebp - 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
call fcn.00459a80
lea edx, [ebp - 0x98]
mov eax, 0x37
call fcn.0047c2a4
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
add eax, 0x70
call fcn.004047d4
lea edx, [ebp - 0x9c]
mov eax, 0x3a
call fcn.0047c2a4
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x354]
add eax, 0x70
call fcn.004047d4
lea edx, [ebp - 0xa0]
mov eax, 0x3f
call fcn.0047c2a4
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x33c]
add eax, 0x70
call fcn.004047d4
lea edx, [ebp - 0xa4]
mov eax, 0x3f
call fcn.0047c2a4
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3b0]
add eax, 0x70
call fcn.004047d4
lea edx, [ebp - 0xa8]
mov eax, 0x3f
call fcn.0047c2a4
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x41c]
add eax, 0x70
call fcn.004047d4
lea edx, [ebp - 0xac]
mov eax, 0x58
call fcn.0047c2a4
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0xb0]
mov eax, 0x51
call fcn.0047c2a4
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
call fcn.00459a80
lea edx, [ebp - 0xb4]
mov eax, 0x52
call fcn.0047c2a4
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0xb8]
mov eax, 0x53
call fcn.0047c2a4
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
call fcn.00459a80
lea edx, [ebp - 0xbc]
mov eax, 0x54
call fcn.0047c2a4
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
add eax, 0x80
call fcn.004047d4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3dc]
add eax, 0x80
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x3a0]
mov edx, dword [edx + 0x80]
call fcn.004047d4
lea edx, [ebp - 0xc0]
mov eax, 0x5d
call fcn.0047c2a4
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c0]
call fcn.00459a80
lea edx, [ebp - 0xc4]
mov eax, 0x5e
call fcn.0047c2a4
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c0]
add eax, 0x80
call fcn.004047d4
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
call fcn.00459a50
lea eax, [ebp - 0xc8]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3fc]
call fcn.0046bae0
lea edx, [ebp - 0xcc]
mov eax, 0x72
call fcn.0047c2a4
lea eax, [ebp - 0xcc]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x404]
call fcn.0046bae0
lea edx, [ebp - 0xd0]
mov eax, 0x44
call fcn.0047c2a4
mov edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x408]
call fcn.0046bae0
lea eax, [ebp - 0xd4]
push eax
lea edx, [ebp - 0xd8]
mov eax, 0x75
call fcn.0047c2a4
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [0x497224]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xb
lea edx, [ebp - 0x18]
xor ecx, ecx
pop eax
call fcn.00409850
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3e4]
call fcn.0046bae0
lea eax, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xe0]
mov eax, 0x75
call fcn.0047c2a4
mov eax, dword [ebp - 0xe0]
push eax
mov eax, dword [0x4975a4]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xb
lea edx, [ebp - 0x18]
xor ecx, ecx
pop eax
call fcn.00409850
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3e8]
call fcn.0046bae0
lea eax, [ebp - 0xe4]
push eax
lea edx, [ebp - 0xe8]
mov eax, 0x75
call fcn.0047c2a4
mov eax, dword [ebp - 0xe8]
push eax
mov eax, dword [0x497410]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0xb
lea edx, [ebp - 0x18]
xor ecx, ecx
pop eax
call fcn.00409850
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ec]
call fcn.0046bae0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x39c]
mov dword [ebp - 8], eax
mov ecx, dword [0x497298]
mov ecx, dword [ecx]
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x228]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov ecx, dword [0x497224]
mov ecx, dword [ecx]
mov edx, 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x228]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov ecx, dword [0x4975a4]
mov ecx, dword [ecx]
mov edx, 2
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x228]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov ecx, dword [0x4975d4]
mov ecx, dword [ecx]
mov edx, 3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x228]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov ecx, dword [0x497410]
mov ecx, dword [ecx]
mov edx, 4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x228]
mov ebx, dword [eax]
call dword [ebx + 0x20]
mov ecx, dword [0x497524]
mov ecx, dword [ecx]
mov edx, 5
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x228]
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
call fcn.00459a50
mov edx, dword [ebp - 0xec]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x36c]
call fcn.0046bae0
lea edx, [ebp - 0xf0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.00459a50
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
call fcn.0046bae0
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
call fcn.00459a50
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x374]
call fcn.0046bae0
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
call fcn.00459a50
lea eax, [ebp - 0xf8]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x378]
call fcn.0046bae0
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c0]
call fcn.00459a50
lea eax, [ebp - 0xfc]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c4]
call fcn.0046bae0
lea edx, [ebp - 0x100]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
call fcn.00459a50
lea eax, [ebp - 0x100]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0046bae0
lea edx, [ebp - 0x104]
mov eax, 0x59
call fcn.0047c2a4
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3b8]
call fcn.0046bae0
lea edx, [ebp - 0x108]
mov eax, 0x40
call fcn.0047c2a4
lea eax, [ebp - 0x108]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
call fcn.0046bae0
lea edx, [ebp - 0x10c]
mov eax, 0x5f
call fcn.0047c2a4
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d8]
call fcn.0046bae0
lea edx, [ebp - 0x110]
mov eax, 0x5b
call fcn.0047c2a4
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3b4]
call fcn.0046bae0
lea edx, [ebp - 0x114]
mov eax, 0x53
call fcn.0047c2a4
lea eax, [ebp - 0x114]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0x114]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
call fcn.0046bae0
lea edx, [ebp - 0x118]
mov eax, 0x57
call fcn.0047c2a4
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38c]
call fcn.0046bae0
lea edx, [ebp - 0x11c]
mov eax, 0x74
call fcn.0047c2a4
lea eax, [ebp - 0x11c]
mov edx, 0x48fe78
call fcn.00404a48
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3cc]
call fcn.0046bae0
lea edx, [ebp - 0x120]
mov eax, 0x4d
call fcn.0047c2a4
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3f0]
call fcn.0046bae0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x384]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a8]
call fcn.0046bae0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d8]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d4]
call fcn.0046bae0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3b4]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3ac]
call fcn.0046bae0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x330]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3d0]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x32c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x35c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3a0]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3dc]
mov dword [ebp - 0x134], eax
xor eax, eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x334]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3f4]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov dword [ebp - 0x124], eax
lea edx, [ebp - 0x150]
mov ecx, 0xb
mov eax, dword [ebp - 4]
call fcn.0048ef50
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.004591c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x328]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
call fcn.0045920c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c0]
call fcn.004591c0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x340]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c0]
call fcn.0045920c
mov eax, dword [0x49b840]
call fcn.0047ba28
test al, al
jne 0x48fdb8
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.004910d8
mov eax, dword [0x49b844]
call fcn.0047ba28
test al, al
jne 0x48fdd1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.00493120
mov edx, dword [0x49b840]
mov eax, dword [ebp - 4]
call fcn.0048ebd8
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
call fcn.004945e8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48fe5a
lea eax, [ebp - 0x120]
mov edx, 8
call fcn.004047a4
lea eax, [ebp - 0x100]
mov edx, 6
call fcn.004047a4
lea eax, [ebp - 0xe8]
mov edx, 8
call fcn.004047a4
lea eax, [ebp - 0xc8]
call fcn.00404780
lea eax, [ebp - 0xc4]
mov edx, 0x2a
call fcn.004047a4
lea eax, [ebp - 0x1c]
call fcn.00404780
lea eax, [ebp - 0x10]
call fcn.00404780
ret