Function at 0x4916a0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d693d
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x616930]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x2c]
mov dword [esi + 0x2fc], eax
mov al, byte [ebp + 0x28]
mov byte [esi + 0x300], al
call fcn.00495810
call fcn.004566e0
mov ebx, eax
call fcn.004567f0
cmp byte [ebp + 8], 0
mov edx, 0x601
mov edi, 0x41ed20
mov dword [ebp - 0x3c], 0x602
movzx ecx, word [eax + 6]
mov eax, ecx
mov dword [ebp - 0x38], eax
jne 0x492461
cmp cx, dx
jb 0x491aad
cmp byte [ebp + 0x28], 0
jne 0x491aad
movzx eax, word [0x62377d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491760
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
push 0x485640
push ecx
lea ecx, [esi + 0x1e4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62377f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4917e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push 0x489b90
push eax
lea ecx, [esi + 0x1e4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623781]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491860
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push 0x485670
push eax
lea ecx, [esi + 0x1e4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623783]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4918e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 3
push 0x489bd0
push eax
lea ecx, [esi + 0x1e4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623785]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491960
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
push 0x484260
push ecx
lea ecx, [esi + 0xc4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623787]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4919e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 5
push 0x4893c0
push eax
lea ecx, [esi + 0xc4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62377d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491a60
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 6
push 0x485640
push ecx
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
jmp 0x491da9
movzx eax, word [0x62377d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491ae1
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 7
push 0x485640
push ecx
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x491b6a
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 8
cmp edx, 0x1000
jb 0x491b59
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495601
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x62377f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491ba0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 9
push 0x489b90
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x491c29
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xa
cmp edx, 0x1000
jb 0x491c18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495606
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x623781]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491c60
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xb
push 0x485670
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x491ce9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xc
cmp edx, 0x1000
jb 0x491cd8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49560b
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x623783]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491d20
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xd
push 0x489bd0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x491da9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xe
cmp edx, 0x1000
jb 0x491d98
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495610
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
cmp ax, word [ebp - 0x3c]
jae 0x491f3c
movzx eax, word [0x623785]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491df0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xf
push 0x484260
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x491e79
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x10
cmp edx, 0x1000
jb 0x491e68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495615
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x623787]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491eb0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x11
push 0x4893c0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x491f39
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x12
cmp edx, 0x1000
jb 0x491f28
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49561a
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x492155
cmp byte [ebp + 0x28], 0
jne 0x492155
movzx eax, word [0x62378b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x491f88
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1c0]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x13
push 0x485e60
push ecx
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62378d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492007
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x14
push 0x485fc0
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62378f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492086
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x15
push 0x485f00
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623791]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492105
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x16
push 0x485f60
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
jmp 0x492459
movzx eax, word [0x62378b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492190
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x17
push 0x485e60
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x492219
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x18
cmp edx, 0x1000
jb 0x492208
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49561f
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x62378d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492250
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x19
push 0x485fc0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x4922d9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1a
cmp edx, 0x1000
jb 0x4922c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495624
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x62378f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492310
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1b
push 0x485f00
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x492399
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1c
cmp edx, 0x1000
jb 0x492388
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495629
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x623791]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4923d0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1d
push 0x485f60
push eax
lea ecx, [esi + 4]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x492459
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1e
cmp edx, 0x1000
jb 0x492448
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49562e
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov edx, 0x601
cmp byte [ebp + 0x10], 0
je 0x4929a8
cmp ax, dx
jb 0x492730
movzx eax, word [0x623803]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4924a8
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x3cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x1f
push 0x486aa0
push ecx
lea ecx, [esi + 0x184]
call fcn.004995b0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x41ee38
cmp edx, 0x10
jb 0x492534
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x20
cmp edx, 0x1000
jb 0x492523
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495633
push edx
push ecx
call fcn.005bc4f7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x623805]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492568
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x3d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x21
push 0x486fd0
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623807]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4925e7
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x3d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x22
push 0x485860
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623861]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492666
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x454]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x23
push 0x486ba0
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623863]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4926e5
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x458]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x24
push 0x486e30
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623803]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492764
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x3cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x25
push 0x486aa0
push ecx
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623805]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4927e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x3d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x26
push 0x486fd0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623807]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492860
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x3d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x27
push 0x485860
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623861]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4928e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x454]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x28
push 0x486ba0
push ecx
lea ecx, [esi + 0x34]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623863]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492960
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x458]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x29
push 0x486e30
push eax
lea ecx, [esi + 0x34]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0xc], 0
jne 0x4929c1
cmp byte [ebp + 0x20], 0
jne 0x4929c1
mov al, byte [ebp + 0x14]
test al, al
je 0x492c61
jmp 0x4929c7
cmp byte [ebp + 0x14], 0
je 0x4929df
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x499320
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x492b5f
cmp byte [ebp + 0x28], 0
jne 0x492b5f
cmp byte [ebp + 0x24], 0
je 0x492a7f
cmp ax, word [ebp - 0x3c]
jae 0x492a7f
movzx eax, word [0x6237bb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2a
push 0x4849e0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237bd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x2b
jmp 0x492c32
movzx eax, word [0x6237bb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492ab3
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x208]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x2c
push 0x4849e0
push ecx
lea ecx, [esi + 0xf4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237bd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492b32
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
mov dword [ebp - 4], 0x2d
lea ecx, [esi + 0xf4]
jmp 0x492c35
movzx eax, word [0x6237bb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492b93
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2e
push 0x4849e0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237bd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492c10
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
mov dword [ebp - 4], 0x2f
lea ecx, [esi + 4]
push dword [ebx + 0x20c]
lea eax, [ebp - 0x30]
push 0x484fc0
push eax
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0xc], 0
jne 0x492c74
mov al, byte [ebp + 0x14]
cmp byte [ebp + 0x10], 0
jne 0x492c74
test al, al
jne 0x492c74
cmp byte [ebp + 0x18], al
je 0x493303
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x62379d]
push eax
jb 0x493078
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492cb7
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x30
push 0x486690
push ecx
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62379f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492d36
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x31
push 0x486830
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492db5
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2fc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x32
push 0x486060
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62379d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492e34
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x33
push 0x486690
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62379f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492eb0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x34
push 0x486830
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492f30
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2fc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x35
push 0x486060
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x4931e8
movzx eax, word [0x62379b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492fc0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x39
push 0x486970
push ecx
lea ecx, [esi + 0x154]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623799]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493040
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d8]
mov dword [ebp - 4], 0x3a
lea ecx, [esi + 0x154]
push 0x486500
jmp 0x4931d0
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4930a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x36
push 0x486690
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62379f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493120
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x37
push 0x486830
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4931a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x2fc]
mov dword [ebp - 4], 0x38
lea ecx, [esi + 4]
push 0x486060
lea eax, [ebp - 0x30]
push eax
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62379b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493220
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3b
push 0x486970
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623799]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4932a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x1c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3c
push 0x486500
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0x18], 0
je 0x493303
mov ecx, esi
call fcn.00497740
mov ecx, esi
call fcn.0048ca90
mov ecx, esi
call fcn.00495bc0
push 0x1b8
push 0
push 0x6238b5
call fcn.005be800
add esp, 0xc
cmp byte [ebp + 0xc], 0
jne 0x493327
cmp byte [ebp + 0x20], 0
je 0x49363f
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x6237d3]
push eax
jb 0x493444
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493370
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x36c]
lea eax, [esi + 0xf4]
mov dword [ebp - 4], 0x3d
push 0x4844d0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
push ecx
mov ecx, eax
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237d5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4933f4
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3e
push 0x4848a0
push eax
lea ecx, [esi + 0xf4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
jmp 0x493541
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493470
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3f
push 0x4844d0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237d5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4934f0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x40
push 0x4848a0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
movzx eax, word [0x6237d7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493575
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x41
push 0x484610
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237d9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4935f1
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x378]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x42
push 0x484760
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0xc], 0
jne 0x493652
cmp byte [ebp + 0x14], 0
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
je 0x4946c0
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x493b11
cmp byte [ebp + 0x28], 0
jne 0x493b11
cmp byte [ebp + 0x24], 0
lea edi, [esi + 0xf4]
jne 0x49370b
movzx eax, word [0x6237bf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x43
push 0x489dc0
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x44
push 0x487670
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x45
push 0x4895c0
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x46
push 0x489490
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x47
push 0x485b80
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x48
push 0x489780
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237cb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x49
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov ecx, edi
push 0x485cd0
push eax
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x344]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4a
push 0x485a50
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237cd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4b
push 0x484380
push eax
lea ecx, [esi + 0x124]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4c
push 0x4854e0
push eax
lea ecx, [esi + 0x124]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237ab]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x310]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4d
push 0x484e70
lea edi, [esi + 0x1b4]
push eax
mov ecx, edi
call fcn.004995b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00451c50
movzx eax, word [0x6237af]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4e
push 0x487640
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4f
push 0x487100
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x50
push 0x487250
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x51
push 0x485740
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x52
push 0x489c90
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
lea edi, [esi + 4]
jmp 0x4941d7
cmp byte [ebp + 0x24], 0
jne 0x493c18
movzx eax, word [0x6237bf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493b50
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x53
push 0x489dc0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493bd0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x54
push 0x487670
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493c50
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x55
push 0x4895c0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493cd0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x56
push 0x489490
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493d50
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x57
push 0x485b80
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493dd0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x58
push 0x489780
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237cb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493e50
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x59
push 0x485cd0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493ed0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x344]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5a
push 0x485a50
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237cd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493f50
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5b
push 0x484380
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x493fd0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.00459b10
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5c
push 0x4854e0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237ab]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
test eax, eax
lea ecx, [ebp - 0x2c]
cmovne edi, eax
push edi
call fcn.0044fb30
mov dword [ebp - 0x30], 0x41ee38
push dword [ebx + 0x310]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5d
push 0x484e70
lea edi, [esi + 4]
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237af]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5e
push 0x487640
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5f
push 0x487100
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x60
push 0x487250
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x61
push 0x485740
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x62
push 0x489c90
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x4942ae
cmp byte [ebp + 0x24], 0
je 0x494280
movzx eax, word [0x6237bf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x348]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x489dc0
push eax
mov dword [ebp - 4], 0x63
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x34c]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x487670
push eax
mov dword [ebp - 4], 0x64
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x65
lea ecx, [esi + 0x154]
jmp 0x49436d
cmp byte [ebp + 0x24], 0
je 0x494348
movzx eax, word [0x6237bf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x66
push 0x489dc0
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237c1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x67
push 0x487670
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237a9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x68
mov ecx, edi
push dword [ebx + 0x30c]
lea eax, [ebp - 0x30]
push 0x484d20
push eax
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237ad]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x69
push 0x487610
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237df]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x384]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6a
push 0x48a5f0
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237e1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6b
push 0x48a2e0
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237e3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6c
push 0x489f70
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237e5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x390]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6d
push 0x48a740
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237eb]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x39c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6e
push 0x48a190
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237ed]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6f
push 0x48a470
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237e7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x394]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x70
push 0x489f70
push eax
mov ecx, edi
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237e9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x398]
mov dword [ebp - 4], 0x71
push 0x48a0c0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0x1c], 0
jne 0x4946ba
movzx eax, word [0x6238ab]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x2d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x72
push 0x4873a0
push eax
lea ecx, [esi + 0x94]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6238ad]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x2d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x73
push 0x4874e0
push eax
lea ecx, [esi + 0x94]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0xc], 0
jne 0x4946ca
cmp byte [ebp + 0x20], 0
je 0x4955d5
movzx eax, word [0x623873]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x478]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x74
push 0x487bb0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623879]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x484]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x75
push 0x4887e0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623887]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x76
push 0x488c20
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62388f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x77
push 0x488fe0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623893]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x78
push dword [ebx + 0x4b8]
lea eax, [ebp - 0x30]
push 0x488070
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62389b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x79
push 0x4881d0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62389f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7a
push 0x488340
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6238a3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7b
push 0x4884c0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6238a5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x2b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7c
push 0x487810
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62386d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x46c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7d
push 0x487920
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62386f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x470]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7e
push 0x487d00
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623871]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x474]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7f
push 0x487a60
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623875]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x47c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x80
push 0x488700
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623877]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x81
push dword [ebx + 0x480]
lea eax, [ebp - 0x30]
push 0x4889c0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62387b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x488]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x82
push 0x4888d0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62387d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x48c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x83
push 0x488580
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62387f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x490]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x84
push 0x488640
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623881]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x494]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x85
push 0x488aa0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623883]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x498]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x86
push 0x488ce0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623885]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x49c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x87
push 0x488b60
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623891]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x88
push 0x487e40
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623889]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4a4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x89
push 0x488da0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62388b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x8a
push dword [ebx + 0x4a8]
lea eax, [ebp - 0x30]
push 0x489100
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62388d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8b
push 0x488ec0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623895]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8c
push 0x487ef0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623897]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8d
push 0x487fb0
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623899]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8e
push 0x488120
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62389d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8f
push 0x488280
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6238a1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x4d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x90
push 0x488400
push eax
lea ecx, [esi + 0x64]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
cmp byte [ebp + 0xc], 0
je 0x4955d5
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x4951d7
cmp byte [ebp + 0x28], 0
jne 0x4951d7
movzx eax, word [0x6237cf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x91
push 0x485340
push eax
lea ecx, [esi + 0xf4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237db]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x92
push 0x489220
push eax
lea ecx, [esi + 0xf4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237d1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x93
push 0x485410
push eax
lea ecx, [esi + 0xf4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237dd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x94
push 0x4892f0
push eax
lea ecx, [esi + 0xf4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x95
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
push 0x4893e0
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x96
push 0x489ae0
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x97
push 0x4859a0
push eax
lea ecx, [esi + 0x184]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62381f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x98
push 0x485e10
push eax
lea ecx, [esi + 0xc4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623821]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x99
push 0x489930
push eax
lea ecx, [esi + 0xc4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
jmp 0x4955c9
movzx eax, word [0x6237cf]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9a
push 0x485340
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237db]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9b
push 0x489220
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237d1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9c
push 0x485410
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237dd]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9d
push 0x4892f0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f1]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
mov dword [ebp - 4], 0x9e
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
push 0x4893e0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f3]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9f
push 0x489ae0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f5]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa0
push 0x4859a0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x62381f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa1
push 0x485e10
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623821]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa2
push 0x489930
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623793]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x2f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa3
push 0x486110
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa4
push 0x489980
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623795]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa5
push 0x4861f0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x623797]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x30]
call fcn.0044f5f0
push dword [ebx + 0x1e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa6
push 0x4863a0
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
movzx eax, word [0x6237f9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.004bace0
push eax
lea ecx, [ebp - 0x58]
call fcn.0044f5f0
mov dword [ebp - 4], 0xa7
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x58]
push 0x489a30
push eax
lea ecx, [esi + 4]
call fcn.004995b0
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.00451c50
mov ecx, esi
call fcn.0048c310
mov ecx, esi
call fcn.0048c450
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bca10
mov esp, ebp
pop ebp
ret 0x28
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
call fcn.004d7f94
int3