Function at 0x491040
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x20]
cmp eax, dword [ecx + 8]
jbe 0x495da2
sub esp, 0xa0
movzx ebx, byte [0x6cfc3b]
cmp bl, 1
jbe 0x491073
add esp, 0xa0
ret
movzx ebx, byte [0x6cfc3b]
cmp bl, 1
jne 0x491086
call fcn.00427b60
ud2
mov byte [0x6cfc3b], 1
call fcn.004e4880
call fcn.004e61a0
call fcn.004f24f0
call fcn.004b1770
call fcn.0045e3e0
call fcn.004f3a70
call fcn.004f7890
call fcn.004fdc50
call fcn.004aeb20
call fcn.004a90b0
call fcn.004b0970
call fcn.00515c90
call fcn.004bd980
call fcn.0051cda0
call fcn.0051d0c0
call fcn.0051eed0
call fcn.004b35d0
call fcn.0051f180
call fcn.004b4da0
call fcn.00520d20
call fcn.00522bc0
call fcn.00524790
call fcn.00525270
call fcn.004be160
call fcn.005253a0
call fcn.00534040
call fcn.0044ceb0
call fcn.0053f6f0
call fcn.00541ba0
call fcn.00542900
mov ebx, 0x5f513d
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be538], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495d8c
mov dword [0x6be53c], ebx
mov dword [esp], 0x5b80c0
call fcn.0040da40
mov eax, dword [esp + 4]
mov ebp, dword [0x612600]
mov dword [eax], ebp
mov ebp, dword [0x612604]
mov dword [eax + 4], ebp
mov ebp, dword [0x612608]
mov dword [eax + 8], ebp
mov ebp, dword [0x61260c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x612610]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x612614]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x612618]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61261c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.004f8600
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495d76
mov dword [0x6bdf78], ebx
mov ebx, 0x5f1ae2
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be598], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495d60
mov dword [0x6be59c], ebx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.004a6bb0
mov ebx, dword [esp + 0x10]
mov dword [0x6be930], ebx
mov ebx, dword [esp + 0x14]
mov dword [0x6be934], ebx
mov ebx, dword [esp + 0x18]
mov dword [0x6be938], ebx
mov ebx, dword [esp + 0x1c]
cmp byte [0x6cfdf8], 0
jne 0x495d4a
mov dword [0x6be93c], ebx
mov dword [esp], 0x5be6a0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495d34
mov dword [0x6bdf90], ebx
xor eax, eax
cmp eax, 0xe
jge 0x49130f
mov dword [esp], 0x5be6a0
mov ebx, dword [0x6bdf90]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612e20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612e20
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xe
jl 0x4912c6
mov ebx, 0x5f8f37
mov dword [esp], ebx
mov dword [esp + 4], 0x2a
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be648], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495d1e
mov dword [0x6be64c], ebx
mov ebx, 0x5f6ef0
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be658], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495d08
mov dword [0x6be65c], ebx
mov ebx, 0x5f518e
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be668], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495cf2
mov dword [0x6be66c], ebx
mov ebx, 0x5f487f
mov dword [esp], ebx
mov dword [esp + 4], 0x19
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be6b0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495cdc
mov dword [0x6be6b4], ebx
mov dword [esp], 0x5bd1c0
mov dword [esp + 4], 0xff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0xff
mov dword [esp + 0x10], 0
call fcn.0043b310
mov ebx, dword [esp + 0x18]
mov dword [0x6be86c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [0x6be870], ebx
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495cc6
mov dword [0x6be868], ebx
mov dword [esp], 0x5be7a0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495cb0
mov dword [0x6bdf98], ebx
xor eax, eax
cmp eax, 0xa
jge 0x4914d1
mov dword [esp], 0x5be7a0
mov ebx, dword [0x6bdf98]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612be0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612be0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0xa
jl 0x491488
mov dword [esp], 0x5be720
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495c9a
mov dword [0x6bdf94], ebx
mov byte [esp + 0x23], 0
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x49159b
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612560
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612560
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x491554
mov dword [esp], 0x5be720
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 1
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 4
jge 0x491648
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612740
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612740
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 4
jl 0x491601
mov dword [esp], 0x5be720
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 4
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x4916f5
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x611f08
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x611f08
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x4916ae
mov dword [esp], 0x5be720
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 6
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x4917a2
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x611f18
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x611f18
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x49175b
mov dword [esp], 0x5be720
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 9
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 1
jge 0x49184f
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x611f28
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x611f28
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 1
jl 0x491808
mov dword [esp], 0x5be720
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 5
mov dword [esp], 0x5be6e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x2c], ebx
xor eax, eax
cmp eax, 2
jge 0x4918fc
mov dword [esp], 0x5be6e0
mov ebx, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612580
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612580
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 2
jl 0x4918b5
mov dword [esp], 0x5be720
mov ebx, dword [0x6bdf94]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x2c]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov dword [esp], 0x5be760
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495c84
mov dword [0x6bdf9c], ebx
mov byte [esp + 0x23], 0
mov ebx, 0x611b14
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 1
mov ebx, 0x611b1c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 2
mov ebx, 0x611b24
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 3
mov ebx, 0x611b2c
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 4
mov ebx, 0x611b30
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 5
mov ebx, 0x611b28
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 6
mov ebx, 0x611b20
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 7
mov ebx, 0x611b18
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 8
mov ebx, 0x611b38
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov byte [esp + 0x23], 9
mov ebx, 0x611b10
mov dword [esp + 0x28], ebx
mov dword [esp], 0x5be760
mov ebx, dword [0x6bdf9c]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x23]
mov dword [esp + 8], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 0xc], ebx
call fcn.00406c60
mov ebx, 0x5f3410
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be5d8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495c6e
mov dword [0x6be5dc], ebx
mov ebx, 0x5f19d2
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be698], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495c58
mov dword [0x6be69c], ebx
mov ebx, 0x5f5065
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be618], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495c42
mov dword [0x6be61c], ebx
mov ebx, 0x5f2ac8
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be650], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495c2c
mov dword [0x6be654], ebx
mov ebx, 0x5f31a8
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004b1b20
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xc]
cmp eax, 1
jne 0x495c20
mov dword [esp + 0x48], edx
mov dword [esp], edx
mov dword [esp + 0x4c], eax
mov dword [esp + 4], eax
mov ebp, 0x5ee212
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
call fcn.00451bb0
movzx ebx, byte [esp + 0x10]
cmp bl, 0
je 0x495c20
mov byte [0x6cfc37], 1
mov dword [esp], 0x5bec60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495c0a
mov dword [0x6bdf8c], ebx
mov dword [esp], 0x5bec60
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495bf4
mov dword [0x6bdf88], ebx
mov dword [esp], 0x5be7e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495bde
mov dword [0x6bdfa4], ebx
xor eax, eax
cmp eax, 6
jge 0x491dbe
mov dword [esp], 0x5be7e0
mov ebx, dword [0x6bdfa4]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612ac0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612ac0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 4
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 6
jl 0x491d75
mov ebx, 0x5f68ff
mov dword [esp], ebx
mov dword [esp + 4], 0x20
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be630], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495bc8
mov dword [0x6be634], ebx
mov ebx, 0x5f6de8
mov dword [esp], ebx
mov dword [esp + 4], 0x21
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be638], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495bb2
mov dword [0x6be63c], ebx
mov dword [esp], 0x5be5a0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495b9c
mov dword [0x6bdfa0], ebx
mov dword [esp], 0x5ca3a0
call fcn.0040da40
mov eax, dword [esp + 4]
mov ebp, 0x5f873c
mov dword [eax], ebp
mov dword [eax + 4], 0x28
mov ecx, 1
mov byte [eax + 8], cl
mov ecx, eax
mov eax, 0x6a6b90
mov dword [esp + 0x68], eax
mov dword [0x6be6a0], eax
mov dword [esp + 0x6c], ecx
cmp byte [0x6cfdf8], 0
jne 0x495b86
mov dword [0x6be6a4], ecx
mov ebx, 0x5f36d0
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be608], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495b70
mov dword [0x6be60c], ebx
mov ebx, 0x5f230f
mov dword [esp], ebx
mov dword [esp + 4], 0x13
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be5f8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495b5a
mov dword [0x6be5fc], ebx
mov ebx, 0x5f3360
mov dword [esp], ebx
mov dword [esp + 4], 0x16
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be600], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495b44
mov dword [0x6be604], ebx
mov ebx, 0x5fa0ab
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be620], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495b2e
mov dword [0x6be624], ebx
mov ebx, 0x5f29d8
mov dword [esp], ebx
mov dword [esp + 4], 0x14
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be690], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495b18
mov dword [0x6be694], ebx
mov ebx, 0x5f3a21
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be628], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495b02
mov dword [0x6be62c], ebx
mov dword [esp], 0x5beae0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495aec
mov dword [0x6bdf84], ebx
xor eax, eax
cmp eax, 0x15
jge 0x492092
mov dword [esp], 0x5beae0
mov ebx, dword [0x6bdf84]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612fc0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612fc0
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 0x15
jl 0x492049
mov ebx, 0x5fb8d3
mov dword [esp], ebx
mov dword [esp + 4], 0x3e
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be6a8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495ad6
mov dword [0x6be6ac], ebx
mov ebx, 0x5f8b2d
mov dword [esp], ebx
mov dword [esp + 4], 0x29
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be5e0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495ac0
mov dword [0x6be5e4], ebx
mov ebx, 0x5f55fc
mov dword [esp], ebx
mov dword [esp + 4], 0x1c
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be5e8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495aaa
mov dword [0x6be5ec], ebx
mov ebx, 0x5f5b18
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be5f0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a94
mov dword [0x6be5f4], ebx
mov ebx, 0x5f4c5a
mov dword [esp], ebx
mov dword [esp + 4], 0x1a
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be670], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a7e
mov dword [0x6be674], ebx
mov ebx, 0x5f7295
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be680], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a68
mov dword [0x6be684], ebx
mov ebx, 0x5f4016
mov dword [esp], ebx
mov dword [esp + 4], 0x18
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be688], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a52
mov dword [0x6be68c], ebx
mov ebx, 0x5f4ff9
mov dword [esp], ebx
mov dword [esp + 4], 0x1b
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be610], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a3c
mov dword [0x6be614], ebx
mov ebx, 0x5f3a38
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be640], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a26
mov dword [0x6be644], ebx
mov ebx, 0x5fb397
mov dword [esp], ebx
mov dword [esp + 4], 0x38
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be678], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495a10
mov dword [0x6be67c], ebx
mov ebx, 0x5f8714
mov dword [esp], ebx
mov dword [esp + 4], 0x28
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be660], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4959fa
mov dword [0x6be664], ebx
xor ebx, ebx
mov dword [esp], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004b0880
mov ecx, dword [esp + 0xc]
mov eax, 0x6a6950
mov dword [esp + 0x60], eax
mov dword [esp], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 4], ecx
call fcn.0045dfd0
mov ebx, dword [esp + 8]
mov dword [0x6be6b8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4959e4
mov dword [0x6be6bc], ebx
mov dword [esp], 0x5b80c0
call fcn.0040da40
mov eax, dword [esp + 4]
mov ebp, dword [0x612620]
mov dword [eax], ebp
mov ebp, dword [0x612624]
mov dword [eax + 4], ebp
mov ebp, dword [0x612628]
mov dword [eax + 8], ebp
mov ebp, dword [0x61262c]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x612630]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x612634]
mov dword [eax + 0x14], ebp
mov ebp, dword [0x612638]
mov dword [eax + 0x18], ebp
mov ebp, dword [0x61263c]
mov dword [eax + 0x1c], ebp
mov edx, 4
mov ecx, 4
mov dword [esp + 0x70], eax
mov dword [esp], eax
mov dword [esp + 0x74], edx
mov dword [esp + 4], edx
mov dword [esp + 0x78], ecx
mov dword [esp + 8], ecx
call fcn.004f8600
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4959ce
mov dword [0x6bdf7c], ebx
mov ebx, 0x5f1e06
mov dword [esp], ebx
mov dword [esp + 4], 0x12
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be518], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4959b8
mov dword [0x6be51c], ebx
mov dword [esp], 0x5beae0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x4959a2
mov dword [0x6bdfac], ebx
xor eax, eax
cmp eax, 5
jge 0x492491
mov dword [esp], 0x5beae0
mov ebx, dword [0x6bdfac]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612a00
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612a00
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 5
jl 0x492448
mov ebx, 0x5f60d0
mov dword [esp], ebx
mov dword [esp + 4], 0x1e
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be520], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x49598c
mov dword [0x6be524], ebx
mov dword [esp], 0x5beaa0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495976
mov dword [0x6be6c0], ebx
mov dword [esp], 0x5be9e0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495960
mov dword [0x6be6c4], ebx
mov ebx, 0x5fad9b
mov dword [esp], ebx
mov dword [esp + 4], 0x36
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be568], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x49594a
mov dword [0x6be56c], ebx
mov dword [esp], 0x5beae0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00406050
mov ebx, dword [esp + 0x14]
cmp byte [0x6cfdf8], 0
jne 0x495934
mov dword [0x6bdfb0], ebx
xor eax, eax
cmp eax, 3
jge 0x492616
mov dword [esp], 0x5beae0
mov ebx, dword [0x6bdfb0]
mov dword [esp + 4], ebx
mov ebx, eax
mov ebp, 0x612680
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
mov ebx, eax
mov ebp, 0x612680
imul ebx, ebx, 0xc
add ebp, ebx
mov dword [esp + 0xc], ebp
add dword [esp + 0xc], 8
call fcn.00406c60
mov eax, dword [esp + 0x24]
inc eax
cmp eax, 3
jl 0x4925cd
mov ebx, 0x5f79a6
mov dword [esp], ebx
mov dword [esp + 4], 0x24
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be528], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x49591e
mov dword [0x6be52c], ebx
mov ebx, 0x5fbb0d
mov dword [esp], ebx
mov dword [esp + 4], 0x40
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be4e8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x495908
mov dword [0x6be4ec], ebx
mov ebx, 0x5f72b7
mov dword [esp], ebx
mov dword [esp + 4], 0x22
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be508], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4958f2
mov dword [0x6be50c], ebx
mov ebx, 0x5fa0dc
mov dword [esp], ebx
mov dword [esp + 4], 0x31
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be4f8], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4958dc
mov dword [0x6be4fc], ebx
mov ebx, 0x5eec82
mov dword [esp], ebx
mov dword [esp + 4], 6
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be540], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4958c6
mov dword [0x6be544], ebx
mov ebx, 0x5f3a66
mov dword [esp], ebx
mov dword [esp + 4], 0x17
call fcn.004af2d0
mov ebx, dword [esp + 8]
mov dword [0x6be5b0], ebx
mov ebx, dword [esp + 0xc]
cmp byte [0x6cfdf8], 0
jne 0x4958b0
mov ebp, 0x6be544
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492724
mov ebp, 0x6be4fc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4926ee
mov ebp, 0x6be50c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4926b8
mov ebp, 0x6be4ec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492682
mov ebp, 0x6be52c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49264c
mov ebp, 0x6bdfb0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4925c6
mov ebp, 0x6be56c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492583
mov ebp, 0x6be6c4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49254d
mov ebp, 0x6be6c0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49250a
mov ebp, 0x6be524
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4924c7
mov ebp, 0x6bdfac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492441
mov ebp, 0x6be51c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4923fe
mov ebp, 0x6bdf7c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4923c8
mov ebp, 0x6be6bc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492334
mov ebp, 0x6be664
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4922e4
mov ebp, 0x6be67c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4922ae
mov ebp, 0x6be644
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492278
mov ebp, 0x6be614
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492242
mov ebp, 0x6be68c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49220c
mov ebp, 0x6be684
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4921d6
mov ebp, 0x6be674
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4921a0
mov ebp, 0x6be5f4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49216a
mov ebp, 0x6be5ec
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492134
mov ebp, 0x6be5e4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4920fe
mov ebp, 0x6be6ac
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4920c8
mov ebp, 0x6bdf84
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x492042
mov ebp, 0x6be62c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491fff
mov ebp, 0x6be694
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491fc9
mov ebp, 0x6be624
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491f93
mov ebp, 0x6be604
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491f5d
mov ebp, 0x6be5fc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491f27
mov ebp, 0x6be60c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491ef1
mov ebp, 0x6be6a4
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.0040e410
jmp 0x491ebb
mov ebp, 0x6bdfa0
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491e6d
mov ebp, 0x6be63c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491e2a
mov ebp, 0x6be634
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491df4
mov ebp, 0x6bdfa4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491d6e
mov ebp, 0x6bdf88
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491d2b
mov ebp, 0x6bdf8c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491ce8
mov byte [0x6cfc37], 0
jmp 0x491ca5
mov ebp, 0x6be654
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491c45
mov ebp, 0x6be61c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491c0f
mov ebp, 0x6be69c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491bd9
mov ebp, 0x6be5dc
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491ba3
mov ebp, 0x6bdf9c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491965
mov ebp, 0x6bdf94
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491514
mov ebp, 0x6bdf98
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491481
mov ebp, 0x6be868
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49143e
mov ebp, 0x6be6b4
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4913e7
mov ebp, 0x6be66c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4913b1
mov ebp, 0x6be65c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49137b
mov ebp, 0x6be64c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491345
mov ebp, 0x6bdf90
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4912bf
mov ebp, 0x6be93c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x49127c
mov ebp, 0x6be59c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491223
mov ebp, 0x6bdf78
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x4911ed
mov ebp, 0x6be53c
mov dword [esp], ebp
mov dword [esp + 4], ebx
call fcn.0040e410
jmp 0x491159
call fcn.0044fe90
jmp fcn.00491040