Function at 0x497702
Capabilities:
Parse pe header
Read .ini file
Validate payment card number using luhn algorithm

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x526197
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2048
call fcn.004e9ae0
push esi
push edi
mov byte [ebp - 0x16c0], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x16bf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov word [ebp - 0x9b4], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x9b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x1900], 4
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x1280], 0
mov dword [ebp - 0x4a4], 0
mov byte [ebp - 0x4e0], 0
xor eax, eax
mov dword [ebp - 0x4df], eax
mov dword [ebp - 0x4db], eax
mov dword [ebp - 0x4d7], eax
mov dword [ebp - 0x4d3], eax
mov dword [ebp - 0x4cf], eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x127c], 0
mov dword [ebp - 0xe14], 0
mov dword [ebp - 0x1938], 0
mov dword [ebp - 0x5b4], 0
mov byte [ebp - 0x1efc], 0
mov ecx, 0xf
xor eax, eax
lea edi, [ebp - 0x1efb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea ecx, [ebp - 0x448]
call fcn.004046f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.004046f0
mov byte [ebp - 4], 1
mov byte [ebp - 0xbd0], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xbcf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1278], 0
xor ecx, ecx
mov dword [ebp - 0x1277], ecx
mov word [ebp - 0x1273], cx
mov byte [ebp - 0x1271], cl
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x5ac], 0
xor edx, edx
mov dword [ebp - 0x5a8], edx
mov dword [ebp - 0x5a4], edx
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x1ebc], 0
mov byte [ebp - 0x1934], 0
mov byte [ebp - 0x1e64], 0
xor eax, eax
mov word [ebp - 0x1e63], ax
mov dword [ebp - 0xe10], 0
mov dword [ebp - 0x1930], 0
xor ecx, ecx
mov dword [ebp - 0x192c], ecx
mov dword [ebp - 0x1928], ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xd0
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0
push str.QC_Procedure
lea eax, [ebp - 0x1efc]
push eax
call fcn.004e998d
add esp, 8
lea ecx, [ebp - 0x1efc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004ab7f3
add esp, 8
push 0x200
lea eax, [ebp - 0x424]
push eax
call fcn.004b8167
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, 0xeb2
push ecx
lea edx, [ebp - 0x424]
push edx
push str._sCID_s.ini
lea eax, [ebp - 0x224]
push eax
call fcn.004e998d
add esp, 0x10
push 0x200
push 0
lea ecx, [ebp - 0xde8]
push ecx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0xde8], 0xf0
mov byte [ebp - 0xde7], 0x3f
mov byte [ebp - 0xde6], 0
mov byte [ebp - 0xde5], 0
mov byte [ebp - 0xddd], 1
push 0x200
push 0
lea edx, [ebp - 0x18c0]
push edx
call fcn.004e9480
add esp, 0xc
push 0
push 0x200
lea eax, [ebp - 0x18c0]
push eax
lea ecx, [ebp - 0xde8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004831c8
add esp, 0x14
test eax, eax
jne 0x497a13
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xb8
mov dword [ebp - 0x1f74], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f74]
jmp 0x49e168
push 0x56f8a4
push 0
push str.FLASHID0
push 0x562e9c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x674178], al
push 0x56f8a4
push 0
push str.FLASHID1
push 0x562eb0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x674179], al
push 0x56f8a4
push 0
push str.FLASHID2
push 0x562ec4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x67417a], al
push 0x56f8a4
push 0
push str.FLASHID3
push 0x562ed8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x67417b], al
push 0x56f8a4
push 0
push str.FLASHID4
push 0x562eec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x67417c], al
push 0x56f8a4
push 0
push str.FLASHID5
push 0x562f00
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x67417d], al
push 0x56f8a4
push 0
push str.InterleaveWay
push 0x562f18
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1eb8], eax
push 0x56f8a4
push 0
push str.SPAREBLOCKRATIO
push 0x562f30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x538], eax
push 0x56f8a4
push 0
push str.DRAMSize
push 0x562f44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x510], eax
push 0x56f8a4
push 0
push str.DRAMSetting
push 0x562f58
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x12b4], eax
push 0x56f8a4
push 0
push str.DRAMVENDOR
push 0x562f6c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1248], eax
push 0x56f8a4
push 0
push str.DRAMCLOCK
push 0x562f80
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x534], eax
push 0x56f8a4
push 0
push str.DRAMTESTLOOP
push 0x562f98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1eb4], eax
push 0x56f8a4
push 0
push str.SPEEDUPPRETEST
push 0x562fb0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x12b0], eax
push 0x56f8a4
push 0
push str.SLCREGIONCAPACITY
push 0x562fcc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xe0c], eax
push 0x56f8a4
push 0
push str.DUALDRAM
push str.TEST
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xe08], eax
push 0x56f8a4
push 0
push str.ADJUSTTRANNINGFAILBYPASS
push 0x563000
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xe04], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x563004
push 0x563008
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x1248], 5
je 0x497c2b
cmp dword [ebp - 0x1248], 6
jne 0x497c35
mov dword [ebp - 0x1248], 0
push 0x400
push 0
lea eax, [ebp - 0x1214]
push eax
call fcn.004e9480
add esp, 0xc
push 1
lea ecx, [ebp - 0x1214]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00486386
add esp, 0xc
test eax, eax
jne 0x497cb9
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc2c]
mov dword [eax + 0xc24], edx
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 2
mov dword [ebp - 0x1f78], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f78]
jmp 0x49e168
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7a3], 0
je 0x497d5c
mov edx, dword [ebp + 8]
cmp dword [edx + 0x128], 0
je 0x497d5c
mov eax, dword [ebp - 0xfb4]
and eax, 0xff
shl eax, 8
mov ecx, dword [ebp - 0xfb3]
and ecx, 0xff
add eax, ecx
mov dword [ebp - 0x1f04], eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x1f04]
cmp eax, dword [edx + 0x128]
jge 0x497d5c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xe5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xe5
mov dword [ebp - 0x1f7c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f7c]
jmp 0x49e168
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7f7], 0
jne 0x497e38
xor ecx, ecx
mov cl, byte [0x674178]
mov edx, dword [ebp - 0x11e4]
and edx, 0xff
cmp ecx, edx
jne 0x497dca
xor eax, eax
mov al, byte [0x674179]
mov ecx, dword [ebp - 0x11e3]
and ecx, 0xff
cmp eax, ecx
jne 0x497dca
xor edx, edx
mov dl, byte [0x67417a]
mov eax, dword [ebp - 0x11e2]
and eax, 0xff
cmp edx, eax
jne 0x497dca
xor ecx, ecx
mov cl, byte [0x67417b]
mov edx, dword [ebp - 0x11e1]
and edx, 0xff
cmp ecx, edx
je 0x497e38
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 3
push 0x674178
mov edx, dword [ebp + 8]
add edx, 0x246
push edx
lea eax, [ebp - 0x1214]
push eax
call fcn.004b3bc5
add esp, 0xc
mov dword [ebp - 0x1f80], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f80]
jmp 0x49e168
mov ecx, dword [ebp - 0x1210]
and ecx, 0xff
cmp ecx, 2
jne 0x497ea9
mov edx, dword [ebp + 8]
push edx
call fcn.00496bbf
add esp, 4
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x497ea7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x60
mov dword [ebp - 0x1f84], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f84]
jmp 0x49e168
jmp 0x497ef9
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 4
mov dword [ebp - 0x1f88], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f88]
jmp 0x49e168
mov eax, dword [ebp + 8]
cmp dword [eax + 0x9d3], 0
je 0x497f77
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xdd
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xdd
lea eax, [ebp - 0x1214]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049e270
add esp, 8
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x497f77
mov dword [ebp - 0x1f8c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f8c]
jmp 0x49e168
mov edx, dword [ebp + 8]
cmp dword [edx + 0x9cf], 0
je 0x498184
mov byte [ebp - 0x1f1c], 0
xor eax, eax
mov dword [ebp - 0x1f1b], eax
mov dword [ebp - 0x1f17], eax
mov dword [ebp - 0x1f13], eax
mov dword [ebp - 0x1f0f], eax
mov dword [ebp - 0x1f0b], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xdc
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xdc
mov dword [ebp - 0x1254], 0
jmp 0x497fe3
mov eax, dword [ebp - 0x1254]
add eax, 1
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x200
jge 0x49811f
cmp dword [ebp - 0x1254], 0x14
jl 0x498005
cmp dword [ebp - 0x1254], 0x27
jle 0x498011
cmp dword [ebp - 0x1254], 0x1fe
jl 0x498073
cmp dword [ebp - 0x1254], 0x14
jl 0x49806e
cmp dword [ebp - 0x1254], 0x27
jg 0x49806e
mov ecx, dword [ebp - 0x1254]
and ecx, reloc.WSOCK32.dll_accept
jns 0x498036
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
jne 0x49806e
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp - 0x1254]
mov cl, byte [ebp + eax - 0x18bf]
mov byte [ebp + edx - 0x1f30], cl
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp - 0x1254]
mov cl, byte [ebp + eax - 0x18c0]
mov byte [ebp + edx - 0x1f2f], cl
jmp 0x497fd4
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe0], 0
jne 0x4980a3
mov eax, dword [ebp + 8]
cmp dword [eax + 0xdc], 0
jne 0x4980a3
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe4], 0
jne 0x4980a3
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe8], 0
je 0x4980c0
cmp dword [ebp - 0x1254], 0xd8
jl 0x4980c0
cmp dword [ebp - 0x1254], 0xde
jg 0x4980c0
jmp 0x497fd4
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0x24c]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x18c0]
cmp ecx, eax
je 0x49811a
mov dword [ebp - 0x1f90], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f90]
jmp 0x49e168
jmp 0x497fd4
cmp dword [0x56e1e4], 0
jle 0x49814e
lea ecx, [ebp - 0x1f1c]
push ecx
mov edx, dword [0x56e1e4]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x773]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xef4]
call fcn.00505c1d
mov dword [ebp - 0x1f94], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f94]
jmp 0x49e168
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xd0
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x8c7], 0
je 0x4981fd
mov edx, dword [ebp + 8]
push edx
call fcn.004975d4
add esp, 4
test eax, eax
jne 0x4981fd
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xe3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xe3
mov dword [ebp - 0x1f98], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f98]
jmp 0x49e168
mov edx, dword [ebp + 8]
cmp dword [edx + 0xb8], 0
je 0x49842a
mov eax, dword [ebp + 8]
cmp dword [eax + 0xa4], 0
jne 0x49842a
push 0x15
push 0x20
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e9480
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x4ff
push edx
call fcn.004ea2e0
add esp, 4
push eax
mov eax, dword [ebp + 8]
add eax, 0x4ff
push eax
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e9b20
add esp, 0xc
mov dword [ebp - 0x1254], 0
jmp 0x498276
mov edx, dword [ebp - 0x1254]
add edx, 2
mov dword [ebp - 0x1254], edx
cmp dword [ebp - 0x1254], 0x14
jge 0x4982d9
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x18ac]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0xbe7]
cmp ecx, eax
je 0x4982ab
mov dword [ebp - 0x1930], 1
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x18ab]
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xbe8]
cmp edx, ecx
je 0x4982d7
mov dword [ebp - 0x1930], 1
jmp 0x498267
push 0x29
push 0x20
lea edx, [ebp - 0x474]
push edx
call fcn.004e9480
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x44c
push eax
call fcn.004ea2e0
add esp, 4
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x44c
push ecx
lea edx, [ebp - 0x474]
push edx
call fcn.004e9b20
add esp, 0xc
mov dword [ebp - 0x1254], 0
jmp 0x498332
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x28
jge 0x49842a
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x188a]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x473]
cmp edx, ecx
je 0x4983b2
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x473]
test eax, eax
je 0x4983b2
mov dword [ebp - 0x192c], 1
mov dword [ebp - 0x1f9c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1f9c]
jmp 0x49e168
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1889]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x474]
cmp edx, ecx
je 0x498425
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x474]
test eax, eax
je 0x498425
mov dword [ebp - 0x192c], 1
mov dword [ebp - 0x1fa0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fa0]
jmp 0x49e168
jmp 0x498323
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 2
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7e7], 0
jne 0x499a3c
push 0x56300c
lea eax, [ebp - 0x1efc]
push eax
call fcn.004e998d
add esp, 8
lea ecx, [ebp - 0x1efc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004ab7f3
add esp, 8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 8]
add eax, 0x4ff
push eax
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x15
push 0x20
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e9480
add esp, 0xc
mov edx, dword [ebp - 0x1280]
push edx
mov eax, dword [ebp + 8]
add eax, 0x4ff
push eax
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e9b20
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x29
push 0x20
lea eax, [ebp - 0x474]
push eax
call fcn.004e9480
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
lea eax, [ebp - 0x474]
push eax
call fcn.004e9b20
add esp, 0xc
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x15
push 0x20
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e9480
add esp, 0xc
mov eax, dword [ebp - 0x1280]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e9b20
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x3f
push 0
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e9480
add esp, 0xc
mov edx, dword [ebp - 0x1280]
push edx
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e9b20
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 9
push 0x20
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e9480
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e9b20
add esp, 0xc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe8], 0
je 0x498930
mov byte [ebp - 0x1f28], 0x50
mov byte [ebp - 0x1f27], 2
mov byte [ebp - 0x1f26], 0x36
mov byte [ebp - 0x1f25], 0x10
mov edx, dword [ebp + 8]
add edx, 0x4ff
push edx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1f20], eax
mov eax, dword [ebp - 0x1f20]
sub eax, 9
mov dword [ebp - 0x1f24], eax
mov byte [ebp - 0x1f34], 0
xor ecx, ecx
mov dword [ebp - 0x1f33], ecx
mov dword [ebp - 0x1f2f], ecx
cmp dword [0x56e0e4], 0
je 0x49866c
lea edx, [ebp - 0x1f28]
push edx
call fcn.004b765e
add esp, 4
mov dword [ebp - 0x1254], 0
jmp 0x498687
mov eax, dword [ebp - 0x1254]
add eax, 1
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 9
jge 0x49879b
mov ecx, dword [ebp - 0x1f24]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
cmp edx, 0x30
jl 0x4986ea
mov eax, dword [ebp - 0x1f24]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
cmp ecx, 0x39
jg 0x4986ea
mov edx, dword [ebp - 0x1f24]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
sub eax, 0x30
mov ecx, dword [ebp - 0x1254]
mov byte [ebp + ecx - 0x1f34], al
mov edx, dword [ebp - 0x1f24]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x41
jl 0x498740
mov ecx, dword [ebp - 0x1f24]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
cmp edx, 0x46
jg 0x498740
mov eax, dword [ebp - 0x1f24]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
sub ecx, 0x37
mov edx, dword [ebp - 0x1254]
mov byte [ebp + edx - 0x1f34], cl
mov eax, dword [ebp - 0x1f24]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
cmp ecx, 0x61
jl 0x498796
mov edx, dword [ebp - 0x1f24]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x66
jg 0x498796
mov ecx, dword [ebp - 0x1f24]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
sub edx, 0x57
mov eax, dword [ebp - 0x1254]
mov byte [ebp + eax - 0x1f34], dl
jmp 0x498678
mov byte [ebp - 0x1934], 0
mov ecx, dword [ebp - 0x17e8]
and ecx, 0xff
mov edx, dword [ebp - 0x1f27]
and edx, 0xff
cmp ecx, edx
jne 0x4987d9
mov eax, dword [ebp - 0x17e7]
and eax, 0xff
mov ecx, dword [ebp - 0x1f28]
and ecx, 0xff
cmp eax, ecx
je 0x4987e0
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e6]
and edx, 0xff
mov eax, dword [ebp - 0x1f25]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f34]
add eax, ecx
cmp edx, eax
jne 0x49881f
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
mov eax, dword [ebp - 0x1f26]
and eax, 0xff
cmp edx, eax
je 0x498826
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e4]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f31]
shl edx, 4
movsx eax, byte [ebp - 0x1f30]
add edx, eax
and edx, 0xff
cmp ecx, edx
jne 0x498878
mov ecx, dword [ebp - 0x17e3]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f33]
shl edx, 4
movsx eax, byte [ebp - 0x1f32]
add edx, eax
and edx, 0xff
cmp ecx, edx
je 0x49887f
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e2]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f2d]
shl edx, 4
movsx eax, byte [ebp - 0x1f2c]
add edx, eax
and edx, 0xff
cmp ecx, edx
jne 0x4988d1
mov ecx, dword [ebp - 0x17e1]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f2f]
shl edx, 4
movsx eax, byte [ebp - 0x1f2e]
add edx, eax
and edx, 0xff
cmp ecx, edx
je 0x4988d8
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x1934]
and ecx, 0xff
test ecx, ecx
je 0x49892b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x8b
mov dword [ebp - 0x1fa4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fa4]
jmp 0x49e168
jmp 0x4994c9
mov eax, dword [ebp + 8]
cmp dword [eax + 0xdc], 0
je 0x498b31
mov byte [ebp - 0x1934], 0
mov byte [ebp - 0x1f38], 0x5f
mov byte [ebp - 0x1f37], 0x8d
mov byte [ebp - 0x1f36], 0xb4
mov byte [ebp - 0x1f35], 0xc0
cmp dword [0x56e0e4], 0
je 0x49897b
lea ecx, [ebp - 0x1f38]
push ecx
call fcn.004b765e
add esp, 4
mov edx, dword [ebp - 0x17e8]
and edx, 0xff
mov eax, dword [ebp - 0x1f37]
and eax, 0xff
cmp edx, eax
jne 0x4989b2
mov ecx, dword [ebp - 0x17e7]
and ecx, 0xff
mov edx, dword [ebp - 0x1f38]
and edx, 0xff
cmp ecx, edx
je 0x4989b9
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e6]
and eax, 0xff
mov ecx, dword [ebp - 0x1f35]
and ecx, 0xff
movsx edx, byte [ebp - 0xbe5]
lea ecx, [ecx + edx - 0x30]
cmp eax, ecx
je 0x4989e6
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
mov eax, dword [ebp - 0x1f36]
and eax, 0xff
cmp edx, eax
je 0x498a08
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e4]
and ecx, 0xff
movsx edx, byte [ebp - 0xbda]
sub edx, 0x30
shl edx, 4
movsx eax, byte [ebp - 0xbd9]
lea edx, [edx + eax - 0x30]
and edx, 0xff
cmp ecx, edx
je 0x498a3d
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e3]
and eax, 0xff
movsx ecx, byte [ebp - 0xbe4]
sub ecx, 0x30
shl ecx, 4
movsx edx, byte [ebp - 0xbe2]
lea ecx, [ecx + edx - 0x30]
and ecx, 0xff
cmp eax, ecx
je 0x498a71
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e2]
and edx, 0xff
movsx eax, byte [ebp - 0xbd6]
sub eax, 0x30
shl eax, 4
movsx ecx, byte [ebp - 0xbd5]
lea eax, [eax + ecx - 0x30]
and eax, 0xff
cmp edx, eax
je 0x498aa5
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e1]
and ecx, 0xff
movsx edx, byte [ebp - 0xbd8]
sub edx, 0x30
shl edx, 4
movsx eax, byte [ebp - 0xbd7]
lea edx, [edx + eax - 0x30]
and edx, 0xff
cmp ecx, edx
je 0x498ada
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x1934]
and eax, 0xff
test eax, eax
je 0x498b2c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x58
mov dword [ebp - 0x1fa8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fa8]
jmp 0x49e168
jmp 0x4994c9
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe0], 0
je 0x498e41
lea eax, [ebp - 0x1fac]
push eax
call fcn.00504c26
push eax
lea ecx, [ebp - 0x1f58]
call fcn.004b7dd0
mov byte [ebp - 0x1f44], 0
xor ecx, ecx
mov dword [ebp - 0x1f43], ecx
mov dword [ebp - 0x1f48], 0
mov dword [ebp - 0x1f3c], 0
push 0
call fcn.004eb376
add esp, 4
mov dword [ebp - 0x1f4c], eax
lea edx, [ebp - 0x1f4c]
push edx
call fcn.004ec070
add esp, 4
mov dword [ebp - 0x1f50], eax
mov eax, dword [ebp - 0x1f50]
push eax
push 0x563020
push 5
lea ecx, [ebp - 0x1f44]
push ecx
call fcn.004ec055
add esp, 0x10
lea edx, [ebp - 0x1f44]
push edx
call fcn.004e98d7
add esp, 4
mov dword [ebp - 0x1f48], eax
lea ecx, [ebp - 0x1f58]
call fcn.004b7d10
mov dword [ebp - 0x1f3c], eax
mov byte [ebp - 0x1934], 0
mov byte [ebp - 0x1f54], 0
xor eax, eax
mov word [ebp - 0x1f53], ax
mov byte [ebp - 0x1f51], al
mov dword [ebp - 0x1254], 0
jmp 0x498c1c
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 4
jge 0x498cb8
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbd8]
cmp eax, 0x30
jl 0x498c6f
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbd8]
cmp edx, 0x39
jg 0x498c6f
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbd8]
sub ecx, 0x30
mov edx, dword [ebp - 0x1254]
mov byte [ebp + edx - 0x1f54], cl
jmp 0x498cb3
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbd8]
cmp ecx, 0x41
jl 0x498cb3
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbd8]
cmp eax, 0x46
jg 0x498cb3
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbd8]
sub edx, 0x37
mov eax, dword [ebp - 0x1254]
mov byte [ebp + eax - 0x1f54], dl
jmp 0x498c0d
mov ecx, dword [ebp - 0x17e8]
and ecx, 0xff
cmp ecx, 0x8d
jne 0x498cdd
mov edx, dword [ebp - 0x17e7]
and edx, 0xff
cmp edx, 0x5f
je 0x498ce4
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e6]
and ecx, 0xff
mov eax, dword [ebp - 0x1f48]
cdq
mov esi, 0xa
idiv esi
and eax, 0xff
add eax, 0xc0
cmp ecx, eax
je 0x498d13
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
cmp edx, 0xb4
je 0x498d2e
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e4]
and eax, 0xff
cmp eax, 0x29
je 0x498d45
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e3]
and ecx, 0xff
mov eax, dword [ebp - 0x1f48]
cdq
mov esi, 0xa
idiv esi
mov esi, edx
shl esi, 4
and esi, 0xff
mov eax, dword [ebp - 0x1f3c]
cdq
mov edi, 0xa
idiv edi
and edx, 0xff
add esi, edx
cmp ecx, esi
je 0x498d8b
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e2]
and edx, 0xff
movsx eax, byte [ebp - 0x1f52]
shl eax, 4
movsx ecx, byte [ebp - 0x1f51]
add eax, ecx
and eax, 0xff
cmp edx, eax
je 0x498dba
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e1]
and edx, 0xff
movsx eax, byte [ebp - 0x1f54]
shl eax, 4
movsx ecx, byte [ebp - 0x1f53]
add eax, ecx
and eax, 0xff
cmp edx, eax
je 0x498de9
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x1934]
and edx, 0xff
test edx, edx
je 0x498e3c
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x58
mov dword [ebp - 0x1fb0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fb0]
jmp 0x49e168
jmp 0x4994c9
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe4], 0
je 0x4990eb
mov byte [ebp - 0x1f6c], 0
xor edx, edx
mov dword [ebp - 0x1f6b], edx
mov dword [ebp - 0x1f67], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x757]
sub edx, dword [ecx + 0x75b]
mov dword [ebp - 0x1f60], edx
mov eax, dword [ebp + 8]
mov ecx, 9
sub ecx, dword [eax + 0x75b]
mov dword [ebp - 0x1f5c], ecx
mov dword [ebp - 0x1254], 0
jmp 0x498ead
mov edx, dword [ebp - 0x1254]
add edx, 1
mov dword [ebp - 0x1254], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x1254]
cmp ecx, dword [eax + 0x75b]
jge 0x498f7f
mov edx, dword [ebp - 0x1f60]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x30
jl 0x498f1e
mov ecx, dword [ebp - 0x1f60]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
cmp edx, 0x39
jg 0x498f1e
mov eax, dword [ebp - 0x1f60]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
sub ecx, 0x30
mov edx, dword [ebp - 0x1f5c]
add edx, dword [ebp - 0x1254]
mov byte [ebp + edx - 0x1f6c], cl
mov eax, dword [ebp - 0x1f60]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
cmp ecx, 0x41
jl 0x498f7a
mov edx, dword [ebp - 0x1f60]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x46
jg 0x498f7a
mov ecx, dword [ebp - 0x1f60]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
sub edx, 0x37
mov eax, dword [ebp - 0x1f5c]
add eax, dword [ebp - 0x1254]
mov byte [ebp + eax - 0x1f6c], dl
jmp 0x498e9e
mov byte [ebp - 0x1934], 0
mov ecx, dword [ebp - 0x17e8]
and ecx, 0xff
cmp ecx, 0x88
jne 0x498fab
mov edx, dword [ebp - 0x17e7]
and edx, 0xff
cmp edx, 0x58
je 0x498fb2
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e6]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f6c]
add ecx, 0x40
cmp eax, ecx
jne 0x498fdf
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
cmp edx, 0x91
je 0x498fe6
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e4]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f69]
shl ecx, 4
movsx edx, byte [ebp - 0x1f68]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
jne 0x499036
mov eax, dword [ebp - 0x17e3]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f6b]
shl ecx, 4
movsx edx, byte [ebp - 0x1f6a]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
je 0x49903d
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e2]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f65]
shl ecx, 4
movsx edx, byte [ebp - 0x1f64]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
jne 0x49908d
mov eax, dword [ebp - 0x17e1]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f67]
shl ecx, 4
movsx edx, byte [ebp - 0x1f66]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
je 0x499094
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x1934]
and eax, 0xff
test eax, eax
je 0x4990e6
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x77
mov dword [ebp - 0x1fb4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fb4]
jmp 0x49e168
jmp 0x4994c9
mov edx, dword [ebp + 8]
cmp dword [edx + 0xb0], 0
je 0x49928b
mov dword [ebp - 0x1254], 0
jmp 0x499116
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x10
jge 0x49918f
push 3
push 0
lea ecx, [ebp - 0x1e64]
push ecx
call fcn.004e9480
add esp, 0xc
push 2
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp + 8]
lea ecx, [eax + edx + 0x47d]
push ecx
lea edx, [ebp - 0x1e64]
push edx
call fcn.004e9b20
add esp, 0xc
push 0x10
lea eax, [ebp - 0x12b8]
push eax
lea ecx, [ebp - 0x1e64]
push ecx
call fcn.004ea72c
add esp, 0xc
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x1254]
cdq
sub eax, edx
sar eax, 1
mov dl, byte [ebp - 0xe10]
mov byte [ebp + eax - 0x1278], dl
jmp 0x499107
mov dword [ebp - 0x1254], 0
jmp 0x4991aa
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x499286
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17e8]
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1277]
cmp edx, ecx
je 0x49921c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xe
mov dword [ebp - 0x1fb8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fb8]
jmp 0x49e168
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17e7]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1278]
cmp ecx, eax
je 0x499281
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xf
mov dword [ebp - 0x1fbc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fbc]
jmp 0x49e168
jmp 0x49919b
jmp 0x4994c9
mov edx, dword [ebp + 8]
cmp dword [edx + 0xec], 0
je 0x499396
mov dword [ebp - 0x1254], 0
jmp 0x4992b6
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x499396
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17e8]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0x476]
cmp edx, ecx
je 0x49932a
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xe
mov dword [ebp - 0x1fc0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fc0]
jmp 0x49e168
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17e7]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [edx + 0x475]
cmp ecx, eax
je 0x499391
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xf
mov dword [ebp - 0x1fc4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fc4]
jmp 0x49e168
jmp 0x4992a7
mov edx, dword [ebp + 8]
cmp dword [edx + 0xf0], 0
je 0x4994c9
mov dword [ebp - 0x1254], 0
jmp 0x4993c1
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x10
jge 0x4994c9
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17e8]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0x47e]
cmp edx, ecx
je 0x499449
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
movsx eax, byte [edx + 0x47e]
test eax, eax
je 0x499449
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xe
mov dword [ebp - 0x1fc8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fc8]
jmp 0x49e168
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x17e7]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ecx + 0x47d]
cmp eax, edx
je 0x4994c4
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [eax + 0x47d]
test ecx, ecx
je 0x4994c4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xf
mov dword [ebp - 0x1fcc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fcc]
jmp 0x49e168
jmp 0x4993b2
mov dword [ebp - 0x1254], 0
jmp 0x4994e4
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x28
jge 0x4995e2
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x188a]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x473]
cmp edx, ecx
je 0x499567
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x473]
test eax, eax
je 0x499567
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 3
mov dword [ebp - 0x1fd0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fd0]
jmp 0x49e168
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1889]
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0x474]
cmp eax, edx
je 0x4995dd
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x474]
test ecx, ecx
je 0x4995dd
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 4
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fd4]
jmp 0x49e168
jmp 0x4994d5
mov dword [ebp - 0x1254], 0
jmp 0x4995fd
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x3e
jge 0x4996d9
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17be]
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x577]
cmp edx, ecx
je 0x49966f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 5
mov dword [ebp - 0x1fd8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fd8]
jmp 0x49e168
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17bd]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x578]
cmp ecx, eax
je 0x4996d4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 6
mov dword [ebp - 0x1fdc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fdc]
jmp 0x49e168
jmp 0x4995ee
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
call fcn.004ea2e0
add esp, 4
test eax, eax
je 0x4997ed
mov dword [ebp - 0x1254], 0
jmp 0x49970e
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x4997e8
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1892]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x1e73]
cmp edx, ecx
je 0x49977f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 7
mov dword [ebp - 0x1fe0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fe0]
jmp 0x49e168
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1891]
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x1e74]
cmp ecx, eax
je 0x4997e3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 8
mov dword [ebp - 0x1fe4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fe4]
jmp 0x49e168
jmp 0x4996ff
jmp 0x4998e8
mov dword [ebp - 0x1254], 0
jmp 0x499808
mov edx, dword [ebp - 0x1254]
add edx, 2
mov dword [ebp - 0x1254], edx
cmp dword [ebp - 0x1254], 8
jge 0x4998e8
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1892]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [edx + 0xc81]
cmp ecx, eax
je 0x49987c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 9
mov dword [ebp - 0x1fe8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fe8]
jmp 0x49e168
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1891]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ecx + 0xc80]
cmp eax, edx
je 0x4998e3
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0xa
mov dword [ebp - 0x1fec], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1fec]
jmp 0x49e168
jmp 0x4997f9
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x73f], 0
jne 0x49995c
mov edx, dword [ebp - 0x18bf]
and edx, 0xff
test edx, edx
jne 0x499914
mov eax, dword [ebp - 0x18c0]
and eax, 0xff
cmp eax, 0x40
je 0x499957
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xb
mov dword [ebp - 0x1ff0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1ff0]
jmp 0x49e168
jmp 0x499a37
mov edx, dword [ebp + 8]
cmp dword [edx + 0x73f], 1
jne 0x4999ce
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 4
jne 0x499989
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x4a
je 0x4999cc
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xc
mov dword [ebp - 0x1ff4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1ff4]
jmp 0x49e168
jmp 0x499a37
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 0x84
jne 0x4999f4
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x8a
je 0x499a37
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xd
mov dword [ebp - 0x1ff8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1ff8]
jmp 0x49e168
jmp 0x49a185
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62d]
test ecx, ecx
jne 0x499a74
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x62e]
test eax, eax
jne 0x499a74
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62f]
test edx, edx
jne 0x499a74
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x630]
test ecx, ecx
je 0x499aa6
push str.QC_Check_ID_table
lea edx, [ebp - 0x1efc]
push edx
call fcn.004e998d
add esp, 8
lea eax, [ebp - 0x1efc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004ab7f3
add esp, 8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x29
push 0x20
lea eax, [ebp - 0x474]
push eax
call fcn.004e9480
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
lea eax, [ebp - 0x474]
push eax
call fcn.004e9b20
add esp, 0xc
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x15
push 0x20
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e9480
add esp, 0xc
mov eax, dword [ebp - 0x1280]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e9b20
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x3f
push 0
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e9480
add esp, 0xc
mov edx, dword [ebp - 0x1280]
push edx
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e9b20
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
call fcn.004ea2e0
add esp, 4
mov dword [ebp - 0x1280], eax
push 9
push 0x20
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e9480
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e9b20
add esp, 0xc
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62d]
test edx, edx
je 0x499cfb
mov dword [ebp - 0x1254], 0
jmp 0x499bfd
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x28
jge 0x499cfb
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x188a]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x473]
cmp edx, ecx
je 0x499c80
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x473]
test eax, eax
je 0x499c80
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 3
mov dword [ebp - 0x1ffc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x1ffc]
jmp 0x49e168
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1889]
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0x474]
cmp eax, edx
je 0x499cf6
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x474]
test ecx, ecx
je 0x499cf6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 4
mov dword [ebp - 0x2000], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2000]
jmp 0x49e168
jmp 0x499bee
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62e]
test ecx, ecx
je 0x499e04
mov dword [ebp - 0x1254], 0
jmp 0x499d28
mov edx, dword [ebp - 0x1254]
add edx, 2
mov dword [ebp - 0x1254], edx
cmp dword [ebp - 0x1254], 0x3e
jge 0x499e04
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17be]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x577]
cmp ecx, eax
je 0x499d9a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 5
mov dword [ebp - 0x2004], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2004]
jmp 0x49e168
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x17bd]
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x578]
cmp eax, edx
je 0x499dff
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 6
mov dword [ebp - 0x2008], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2008]
jmp 0x49e168
jmp 0x499d19
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62f]
test edx, edx
je 0x49a024
mov eax, dword [ebp + 8]
add eax, 0x4ed
push eax
call fcn.004ea2e0
add esp, 4
test eax, eax
je 0x499f29
mov dword [ebp - 0x1254], 0
jmp 0x499e4a
mov ecx, dword [ebp - 0x1254]
add ecx, 2
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 8
jge 0x499f24
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1892]
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0x1e73]
cmp eax, edx
je 0x499ebb
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 7
mov dword [ebp - 0x200c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x200c]
jmp 0x49e168
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1891]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x1e74]
cmp edx, ecx
je 0x499f1f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 8
mov dword [ebp - 0x2010], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2010]
jmp 0x49e168
jmp 0x499e3b
jmp 0x49a024
mov dword [ebp - 0x1254], 0
jmp 0x499f44
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x49a024
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1892]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0xc81]
cmp edx, ecx
je 0x499fb8
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 9
mov dword [ebp - 0x2014], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2014]
jmp 0x49e168
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1891]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [edx + 0xc80]
cmp ecx, eax
je 0x49a01f
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xa
mov dword [ebp - 0x2018], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2018]
jmp 0x49e168
jmp 0x499f35
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x630]
test eax, eax
je 0x49a185
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x73f], 0
jne 0x49a0aa
mov edx, dword [ebp - 0x18bf]
and edx, 0xff
test edx, edx
jne 0x49a062
mov eax, dword [ebp - 0x18c0]
and eax, 0xff
cmp eax, 0x40
je 0x49a0a5
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xb
mov dword [ebp - 0x201c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x201c]
jmp 0x49e168
jmp 0x49a185
mov edx, dword [ebp + 8]
cmp dword [edx + 0x73f], 1
jne 0x49a11c
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 4
jne 0x49a0d7
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x4a
je 0x49a11a
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xc
mov dword [ebp - 0x2020], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2020]
jmp 0x49e168
jmp 0x49a185
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 0x84
jne 0x49a142
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x8a
je 0x49a185
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xd
mov dword [ebp - 0x2024], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2024]
jmp 0x49e168
mov eax, 1
test eax, eax
je 0x49a1fc
lea ecx, [ebp - 0xbd0]
push ecx
lea edx, [ebp - 0x1214]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0049e188
add esp, 0xc
test eax, eax
jne 0x49a1fc
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 5
mov dword [ebp - 0x2028], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2028]
jmp 0x49e168
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1ec], 0
je 0x49a444
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7e3]
mov dword [ebp - 0x204c], edx
cmp dword [ebp - 0x204c], 3
ja case.default.0x49a22e
mov eax, dword [ebp - 0x204c]
jmp dword [eax*4 + 0x49e178]
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.SDR_DRVSetting1_SM2246
push 0x563050
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SDR_DRVSetting2_SM2246
push 0x56306c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
jmp case.default.0x49a22e
lea eax, [ebp - 0x224]
push eax
push 0
push str.2_5Inch_DRVSetting_1
push 0x563088
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.2_5Inch_DRVSetting_2
push 0x5630a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
jmp case.default.0x49a22e
lea edx, [ebp - 0x224]
push edx
push 0
push str.mSATA_DRVSetting_1
push 0x5630bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.mSATA_DRVSetting_2
push 0x5630d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
jmp case.default.0x49a22e
lea ecx, [ebp - 0x224]
push ecx
push 0
push 0x5630d8
push 0x5630ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.NGFF_DRVSetting_1
push 0x563104
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.INTERNALCHIPNUM
push 0x563118
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1ebc], eax
lea ecx, [ebp - 0x5ac]
push ecx
lea edx, [ebp - 0x1214]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004864b3
add esp, 0xc
mov dword [ebp - 0x1254], 0
jmp 0x49a38a
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 4
jge 0x49a3ca
mov edx, dword [ebp - 0x1254]
cmp dword [ebp + edx*4 - 0x5ac], 0
je 0x49a3c8
mov eax, dword [ebp - 0x1254]
mov ecx, dword [ebp + eax*4 - 0x5ac]
imul ecx, dword [ebp - 0x1ebc]
cmp ecx, 4
jle 0x49a3c6
mov dword [ebp - 0x5b0], 0x11
jmp 0x49a3ca
jmp 0x49a37b
mov edx, dword [ebp - 0x1e68]
add edx, dword [ebp - 0x5b0]
mov eax, dword [ebp - 0xb78]
and eax, 0xff
cmp edx, eax
jne 0x49a401
mov ecx, dword [ebp - 0x124c]
add ecx, dword [ebp - 0x5b0]
mov edx, dword [ebp - 0xb77]
and edx, 0xff
cmp ecx, edx
je 0x49a444
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xd7
mov dword [ebp - 0x202c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x202c]
jmp 0x49e168
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1f0], 0
je 0x49a4ad
mov edx, dword [ebp - 0xbc5]
and edx, 0xff
and edx, 0xf
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1e8], edx
je 0x49a4ad
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xd8
mov dword [ebp - 0x2030], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2030]
jmp 0x49e168
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1f4], 0
je 0x49a515
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
sar eax, 4
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7df], eax
je 0x49a515
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xd9
mov dword [ebp - 0x2034], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2034]
jmp 0x49e168
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1f8], 0
je 0x49a5f5
mov dword [ebp - 0x1254], 0
jmp 0x49a540
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 0xa
jge 0x49a591
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx*2 - 0x18ac]
push eax
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx*2 - 0x18ab]
push edx
push 0x56311c
lea eax, [ebp - 0x4a0]
push eax
call fcn.00503a72
add esp, 0x10
lea ecx, [ebp - 0x4a0]
push ecx
lea ecx, [ebp - 0x448]
call fcn.0050e2b9
jmp 0x49a531
lea ecx, [ebp - 0x448]
call fcn.00503c32
lea ecx, [ebp - 0x448]
call fcn.004082b0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1fc], eax
je 0x49a5f5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xda
mov dword [ebp - 0x2038], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2038]
jmp 0x49e168
push str.QC_Check_ISP
lea ecx, [ebp - 0x1efc]
push ecx
call fcn.004e998d
add esp, 8
lea edx, [ebp - 0x1efc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004ab7f3
add esp, 8
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xbff]
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x1924], 0
mov dword [ebp - 0x9d0], 0
mov dword [ebp - 0xe00], 0
mov dword [ebp - 0x1eb0], 0
mov dword [ebp - 0x9cc], 0
mov byte [ebp - 0x1e5c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1e5b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x1920], 0
mov dword [ebp - 0x1a5c], 0
mov dword [ebp - 0x123c], 0
mov byte [ebp - 0x50c], 0
mov dword [ebp - 0x1270], 0
mov dword [ebp - 0x4c8], 0
push 0x100400
call fcn.004e9f6e
add esp, 4
mov dword [ebp - 0x12ac], eax
push 0x100400
push 0
mov eax, dword [ebp - 0x12ac]
push eax
call fcn.004e9480
add esp, 0xc
push 0x100400
call fcn.004e9f6e
add esp, 4
mov dword [ebp - 0x428], eax
push 0x100400
push 0
mov ecx, dword [ebp - 0x428]
push ecx
call fcn.004e9480
add esp, 0xc
push 0x400
push 0
lea edx, [ebp - 0x1e5c]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0xde8], 0xf0
mov byte [ebp - 0xde7], 0xa
mov al, byte [ebp - 0xfe4]
mov byte [ebp - 0xde6], al
mov cl, byte [ebp - 0xfe3]
mov byte [ebp - 0xde5], cl
mov byte [ebp - 0xde4], 1
mov byte [ebp - 0xde0], 0x11
mov byte [ebp - 0xddd], 2
push 0
push 0x400
lea edx, [ebp - 0x1e5c]
push edx
lea eax, [ebp - 0xde8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004831c8
add esp, 0x14
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x49a7b6
mov dword [ebp - 0x1920], 1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 6
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 6
jmp 0x49b418
mov cl, byte [ebp - 0x1e1e]
mov byte [ebp - 0x50c], cl
push 0x200
push 0
lea edx, [ebp - 0xde8]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0xde8], 0xf0
mov byte [ebp - 0xde7], 0x20
mov byte [ebp - 0xddd], 2
push 0
push 0x400
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0xde8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004831c8
add esp, 0x14
test eax, eax
jne 0x49a83b
mov dword [ebp - 0x1920], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 7
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 7
jmp 0x49b418
push 0x100400
push 0
mov edx, dword [ebp - 0x12ac]
push edx
call fcn.004e9480
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xbff]
mov dword [ebp - 0x59c], ecx
mov edx, dword [ebp - 0x59c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xbf3]
push ecx
mov edx, dword [ebp - 0x12ac]
push edx
call fcn.004e9b20
add esp, 0xc
mov eax, dword [ebp - 0x120a]
and eax, 0xff
and eax, 1
test eax, eax
je 0x49a89c
mov dword [ebp - 0x123c], 1
mov dword [ebp - 0x1938], 0
mov ecx, dword [ebp - 0x11ea]
and ecx, 0xff
and ecx, 0x40
test ecx, ecx
je 0x49a8c3
mov dword [ebp - 0x1938], 1
mov edx, dword [ebp - 0x11e5]
and edx, 0xff
and edx, 0x26
test edx, edx
jne 0x49a8e8
mov eax, dword [ebp - 0x11e8]
and eax, 0xff
and eax, 1
test eax, eax
je 0x49a8fc
mov dword [ebp - 0x1a5c], 1
mov dword [ebp - 0x1938], 0
cmp dword [ebp - 0x1938], 0
je 0x49a98d
push 0x200
push 0
lea ecx, [ebp - 0xde8]
push ecx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0xde8], 0xf0
mov byte [ebp - 0xde7], 0x1b
mov byte [ebp - 0xddd], 2
push 0
push 0x400
lea edx, [ebp - 0x16c0]
push edx
lea eax, [ebp - 0xde8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004831c8
add esp, 0x14
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x49a98d
mov dword [ebp - 0x1920], 1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 8
jmp 0x49b418
mov dword [ebp - 0x1254], 0
jmp 0x49a9a8
mov ecx, dword [ebp - 0x1254]
add ecx, 2
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 0x400
jge 0x49a9ee
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x16c0]
mov ecx, eax
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x16bf]
shl eax, 8
add ecx, eax
mov eax, dword [ebp - 0x1254]
cdq
sub eax, edx
sar eax, 1
mov word [ebp + eax*2 - 0x9b4], cx
jmp 0x49a999
mov cl, byte [ebp - 0x11e9]
mov byte [ebp - 0x1f00], cl
mov dl, byte [ebp - 0x1209]
mov byte [ebp - 0x18fc], dl
mov eax, dword [ebp - 0x18fc]
and eax, 0xff
and eax, 7
add eax, 1
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x18fc]
and ecx, 0xff
and ecx, 0x38
sar ecx, 3
add ecx, 1
mov dword [ebp - 0xe00], ecx
cmp dword [ebp - 0x123c], 0
je 0x49aa6b
mov edx, dword [ebp - 0x50c]
and edx, 0xff
test edx, edx
je 0x49aa6b
mov ecx, dword [ebp - 0x50c]
and ecx, 0xff
mov eax, dword [ebp - 0x9d0]
shl eax, cl
mov dword [ebp - 0x9d0], eax
mov byte [ebp - 0x1284], 1
mov dword [ebp - 0x1900], 8
mov ecx, dword [ebp - 0x1f00]
and ecx, 0xff
and ecx, 1
test ecx, ecx
je 0x49aa99
mov dword [ebp - 0x1900], 8
mov edx, dword [ebp - 0x1f00]
and edx, 0xff
and edx, 2
test edx, edx
je 0x49aab6
mov dword [ebp - 0x1900], 0x10
mov eax, dword [ebp - 0x1f00]
and eax, 0xff
and eax, 4
test eax, eax
je 0x49aad2
mov dword [ebp - 0x1900], 0x20
mov ecx, dword [ebp - 0x1f00]
and ecx, 0xff
and ecx, 8
test ecx, ecx
je 0x49aaef
mov dword [ebp - 0x1900], 0x40
mov dword [ebp - 0x20], 0x40
mov edx, dword [ebp - 0x1f00]
and edx, 0xff
and edx, 0x10
test edx, edx
je 0x49ab12
mov dword [ebp - 0x20], 0x80
jmp 0x49ab83
mov eax, dword [ebp - 0x1f00]
and eax, 0xff
and eax, 0x20
test eax, eax
je 0x49ab2d
mov dword [ebp - 0x20], 0x100
jmp 0x49ab83
mov ecx, dword [ebp - 0x1f00]
and ecx, 0xff
and ecx, 0x40
test ecx, ecx
je 0x49ab49
mov dword [ebp - 0x20], 0xc0
jmp 0x49ab83
mov edx, dword [ebp - 0x1f00]
and edx, 0xff
and edx, 0x80
test edx, edx
je 0x49ab68
mov dword [ebp - 0x20], 0x102
jmp 0x49ab83
mov eax, dword [ebp - 0x11e5]
and eax, 0xff
and eax, 0x80
test eax, eax
je 0x49ab83
mov dword [ebp - 0x20], 0x200
mov ecx, dword [ebp - 0x1900]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x11e7]
and edx, 0xff
and edx, 0xe0
sar edx, 5
add edx, 1
mov dword [ebp - 0x1240], edx
mov eax, dword [ebp - 0x1240]
imul eax, dword [ebp - 0x1900]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x1284]
and ecx, 0xff
mov edx, dword [ebp - 0x4e8]
imul edx, ecx
mov dword [ebp - 0x4e8], edx
cmp dword [ebp - 0x4e8], 0x80
jl 0x49abf1
mov dword [ebp - 0x1270], 1
mov eax, dword [ebp - 0x1211]
and eax, 0xff
cmp dword [ebp - 0x4e8], eax
je 0x49ac2d
mov dword [ebp - 0x1920], 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 9
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 9
jmp 0x49b418
mov eax, dword [ebp - 0x59c]
sub eax, 0x400
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x1270], 0
je 0x49acd0
mov eax, dword [ebp - 0x4e8]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x47c]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x47c]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
test edx, edx
je 0x49ac9b
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x4a4]
add eax, 1
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x478]
and ecx, reloc.WSOCK32.dll_accept
jns 0x49acbd
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x49acd0
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
mov ecx, dword [ebp - 0x4e8]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
mov dword [ebp - 0x1250], eax
mov ecx, dword [ebp - 0x4e8]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
test edx, edx
je 0x49ad0f
mov edx, dword [ebp - 0x1250]
add edx, 1
mov dword [ebp - 0x1250], edx
mov eax, dword [ebp - 0x1250]
add eax, 1
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x1270], 0
je 0x49ad5c
mov ecx, dword [ebp - 0x47c]
shl ecx, 9
push ecx
call fcn.004e9f6e
add esp, 4
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x47c]
shl edx, 9
push edx
push 0
mov eax, dword [ebp - 0x530]
push eax
call fcn.004e9480
add esp, 0xc
jmp 0x49ad8f
mov ecx, dword [ebp - 0x4e8]
shl ecx, 9
push ecx
call fcn.004e9f6e
add esp, 4
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x4e8]
shl edx, 9
push edx
push 0
mov eax, dword [ebp - 0x530]
push eax
call fcn.004e9480
add esp, 0xc
mov ecx, dword [ebp - 0x9d0]
imul ecx, dword [ebp - 0xe00]
mov dword [ebp - 0x1eb0], ecx
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x1eb0]
mov dword [ebp - 0x12a4], edx
cmp dword [ebp - 0x1270], 0
je 0x49adf6
mov eax, dword [ebp - 0x47c]
add eax, 1
shl eax, 9
push eax
call fcn.004e9f6e
add esp, 4
mov dword [ebp - 0x4ac], eax
mov ecx, dword [ebp - 0x47c]
add ecx, 1
shl ecx, 9
push ecx
push 0
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e9480
add esp, 0xc
jmp 0x49ae2f
mov eax, dword [ebp - 0x4e8]
add eax, 1
shl eax, 9
push eax
call fcn.004e9f6e
add esp, 4
mov dword [ebp - 0x4ac], eax
mov ecx, dword [ebp - 0x4e8]
add ecx, 1
shl ecx, 9
push ecx
push 0
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e9480
add esp, 0xc
mov dword [ebp - 0x1904], 0
jmp 0x49ae4a
mov eax, dword [ebp - 0x1904]
add eax, 1
mov dword [ebp - 0x1904], eax
cmp dword [ebp - 0x1904], 2
jae 0x49b2f3
cmp dword [ebp - 0x1270], 0
je 0x49ae6e
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x12bc], ecx
jmp 0x49ae7a
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x12bc], edx
push 0x100400
push 0
mov eax, dword [ebp - 0x428]
push eax
call fcn.004e9480
add esp, 0xc
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x598], 0
jmp 0x49aeb5
mov ecx, dword [ebp - 0x598]
add ecx, 1
mov dword [ebp - 0x598], ecx
mov edx, dword [ebp - 0x598]
cmp edx, dword [ebp - 0x12bc]
jge 0x49b2c0
mov dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x1270], 0
je 0x49afa0
mov eax, dword [ebp - 0x598]
cdq
sub eax, edx
sar eax, 1
cdq
idiv dword [ebp - 0x1eb0]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x598]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x1e60]
imul ecx, dword [ebp - 0x1eb0]
sub eax, ecx
mov dword [ebp - 0x12a8], eax
mov eax, dword [ebp - 0x12a8]
cdq
idiv dword [ebp - 0xe00]
mov dword [ebp - 0x12c0], eax
mov edx, dword [ebp - 0x12c0]
imul edx, dword [ebp - 0xe00]
mov eax, dword [ebp - 0x12a8]
sub eax, edx
mov dword [ebp - 0x1288], eax
mov ecx, dword [ebp - 0x598]
and ecx, reloc.WSOCK32.dll_accept
jns 0x49af57
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x49af67
mov dword [ebp - 0x4c8], 1
jmp 0x49af71
mov dword [ebp - 0x4c8], 0
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x57c], edx
push 4
push 0
mov eax, dword [ebp - 0x4ac]
push eax
call fcn.004e9480
add esp, 0xc
cmp dword [ebp - 0x598], 1
jne 0x49af9e
jmp 0x49aea6
jmp 0x49b01b
mov eax, dword [ebp - 0x598]
cdq
idiv dword [ebp - 0x1eb0]
mov dword [ebp - 0x1e60], eax
mov ecx, dword [ebp - 0x1e60]
imul ecx, dword [ebp - 0x1eb0]
mov edx, dword [ebp - 0x598]
sub edx, ecx
mov dword [ebp - 0x12a8], edx
mov eax, dword [ebp - 0x12a8]
cdq
idiv dword [ebp - 0xe00]
mov dword [ebp - 0x12c0], eax
mov eax, dword [ebp - 0x12c0]
imul eax, dword [ebp - 0xe00]
mov ecx, dword [ebp - 0x12a8]
sub ecx, eax
mov dword [ebp - 0x1288], ecx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x57c], edx
push 4
push 0
mov eax, dword [ebp - 0x4ac]
push eax
call fcn.004e9480
add esp, 0xc
push 0x10
push 0
lea ecx, [ebp - 0xde8]
push ecx
call fcn.004e9480
add esp, 0xc
push 4
push 0
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0xde8], 0xf0
mov byte [ebp - 0xde7], 0xa
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xc7c]
mov byte [ebp - 0xde6], cl
mov edx, dword [ebp + 8]
mov al, byte [edx + 0xc7e]
mov byte [ebp - 0xde5], al
cmp dword [ebp - 0x1904], 0
je 0x49b085
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0xc7f]
mov byte [ebp - 0xde5], dl
mov al, byte [ebp - 0x1e60]
mov byte [ebp - 0xde4], al
mov byte [ebp - 0xde3], 0
cmp dword [ebp - 0x1a5c], 0
je 0x49b0aa
mov byte [ebp - 0xde0], 0x15
jmp 0x49b0b1
mov byte [ebp - 0xde0], 5
cmp dword [ebp - 0x4c8], 0
je 0x49b0cb
mov cl, byte [ebp - 0xde0]
or cl, 0x80
mov byte [ebp - 0xde0], cl
jmp 0x49b0da
mov dl, byte [ebp - 0xde0]
and dl, 0x7f
mov byte [ebp - 0xde0], dl
mov eax, dword [ebp - 0x12c0]
shl eax, 3
or eax, dword [ebp - 0x1288]
mov byte [ebp - 0xdde], al
mov ecx, dword [ebp - 0x57c]
add ecx, 1
mov byte [ebp - 0xddd], cl
cmp dword [ebp - 0x1938], 0
je 0x49b17e
mov dword [ebp - 0x5b4], 1
mov dword [ebp - 0x1f70], 0
jmp 0x49b12c
mov edx, dword [ebp - 0x1f70]
add edx, 1
mov dword [ebp - 0x1f70], edx
cmp dword [ebp - 0x1f70], 0x200
jge 0x49b166
mov eax, dword [ebp - 0x1f70]
xor ecx, ecx
mov cx, word [ebp + eax*2 - 0x9b4]
mov edx, dword [ebp - 0x1e60]
and edx, 0xffff
cmp ecx, edx
jne 0x49b164
mov dword [ebp - 0x5b4], 0
jmp 0x49b166
jmp 0x49b11d
cmp dword [ebp - 0x5b4], 0
je 0x49b17e
mov eax, dword [ebp - 0x12bc]
add eax, 1
mov dword [ebp - 0x12bc], eax
cmp dword [ebp - 0x5b4], 0
je 0x49b18c
jmp 0x49aea6
lea ecx, [ebp - 0xde8]
push ecx
mov edx, dword [ebp - 0x57c]
add edx, 1
shl edx, 9
push edx
mov eax, dword [ebp - 0x4ac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x232]
push edx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0x21d]
push ecx
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x21c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x236]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x226]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x222]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
call fcn.00480e25
add esp, 0x28
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
je 0x49b2b1
cmp dword [ebp - 0x598], 0
jne 0x49b23a
mov eax, dword [ebp - 0x57c]
shl eax, 9
push eax
mov ecx, dword [ebp - 0x4ac]
push ecx
mov edx, dword [ebp - 0x530]
push edx
call fcn.004e9b20
add esp, 0xc
mov dword [ebp - 0x1244], 0
jmp 0x49b2af
cmp dword [ebp - 0x52c], 0
jne 0x49b272
push 0x400
mov eax, dword [ebp - 0x530]
push eax
mov ecx, dword [ebp - 0x428]
push ecx
call fcn.004e9b20
add esp, 0xc
mov dword [ebp - 0x1924], 0x400
mov dword [ebp - 0x52c], 1
mov edx, dword [ebp - 0x57c]
shl edx, 9
push edx
mov eax, dword [ebp - 0x4ac]
push eax
mov ecx, dword [ebp - 0x428]
add ecx, dword [ebp - 0x1924]
push ecx
call fcn.004e9b20
add esp, 0xc
mov edx, dword [ebp - 0x57c]
shl edx, 9
mov eax, dword [ebp - 0x1924]
add eax, edx
mov dword [ebp - 0x1924], eax
jmp 0x49b2bb
mov dword [ebp - 0x127c], 1
jmp 0x49aea6
cmp dword [ebp - 0x127c], 0
je 0x49b2ee
cmp dword [ebp - 0x1904], 0
jne 0x49b2e1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xd1
jmp 0x49b2ee
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xd2
jmp 0x49ae3b
cmp dword [ebp - 0x127c], 0
je 0x49b318
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xa
mov dword [ebp - 0x1920], 1
jmp 0x49b418
push 0x100
mov ecx, dword [ebp - 0x428]
add ecx, 0x180
push ecx
lea edx, [ebp - 0x1a3c]
push edx
call fcn.004e9b20
add esp, 0xc
mov eax, dword [ebp + 8]
cmp dword [eax + 0xb8], 0
jne 0x49b355
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x214], 0
je 0x49b418
mov dword [ebp - 0x1254], 0
jmp 0x49b370
mov edx, dword [ebp - 0x1254]
add edx, 1
mov dword [ebp - 0x1254], edx
mov eax, dword [ebp - 0x1254]
cmp eax, dword [ebp - 0x59c]
jge 0x49b418
cmp dword [ebp - 0x1254], 0
jl 0x49b397
cmp dword [ebp - 0x1254], 0x400
jl 0x49b3af
cmp dword [ebp - 0x1254], 0x20400
jl 0x49b3b1
cmp dword [ebp - 0x1254], 0x20600
jge 0x49b3b1
jmp 0x49b361
mov ecx, dword [ebp - 0x428]
add ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ecx]
mov eax, dword [ebp - 0x12ac]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax]
cmp edx, ecx
je 0x49b413
mov edx, dword [ebp + 8]
cmp dword [edx + 0xb8], 0
je 0x49b3ed
mov dword [ebp - 0x1928], 1
jmp 0x49b411
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x52
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0x52
mov dword [ebp - 0x1920], 1
jmp 0x49b418
jmp 0x49b361
cmp dword [ebp - 0x12ac], 0
je 0x49b430
mov edx, dword [ebp - 0x12ac]
push edx
call fcn.004e9e5d
add esp, 4
cmp dword [ebp - 0x428], 0
je 0x49b448
mov eax, dword [ebp - 0x428]
push eax
call fcn.004e9e5d
add esp, 4
cmp dword [ebp - 0x530], 0
je 0x49b460
mov ecx, dword [ebp - 0x530]
push ecx
call fcn.004e9e5d
add esp, 4
cmp dword [ebp - 0x4ac], 0
je 0x49b478
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e9e5d
add esp, 4
cmp dword [ebp - 0x1920], 0
je 0x49b4b7
mov dword [ebp - 0x203c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x203c]
jmp 0x49e168
mov eax, dword [ebp + 8]
cmp dword [eax + 0xb8], 0
je 0x49b570
mov dword [ebp - 0x1254], 0
jmp 0x49b4e2
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 3
jge 0x49b55d
mov edx, dword [ebp - 0x1254]
cmp dword [ebp + edx*4 - 0x1930], 0
je 0x49b558
mov eax, dword [ebp - 0x1254]
add eax, 0xe0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], eax
lea edx, [ebp - 0x1930]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004acca4
add esp, 8
mov dword [ebp - 0x2040], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2040]
jmp 0x49e168
jmp 0x49b4d3
lea ecx, [ebp - 0x1930]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004acca4
add esp, 8
push str.QC_Check_CID
lea eax, [ebp - 0x1efc]
push eax
call fcn.004e998d
add esp, 8
lea ecx, [ebp - 0x1efc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004ab7f3
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x224]
push eax
push 0
push str.EnableWriteProtect
push 0x563158
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1238], eax
lea ecx, [ebp - 0x224]
push ecx
push 1
push str.ENABLEDUMMYWRITE
push 0x563170
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x594], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.POWERONSWAPACTIVEBLOCK
push 0x56318c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x191c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.POWERONREFRESHTIMETH
push 0x5631a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdfc], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.SCANPAGEDIV
push 0x5631b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18f8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.REFRESHERRORBITTH
push 0x5631d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x440], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.REFRESHPAGECNT
push 0x5631e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x43c], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.CMDNUMTRIGREFRESH
push 0x5631fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x49c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.IDLETIMETRIGREFRESH
push 0x563214
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x126c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.TRIGLOOKAHEADCONTTH
push 0x56322c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x508], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.CONTREADLENGTH
push 0x563240
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdf8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.MULTICHDIVPROG
push 0x563254
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18f4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ENPROGWPRO
push 0x563264
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdf4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.FERRIENDEBUG
push 0x563278
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1eac], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.LOOKAHEAD
push 0x563288
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.FERRIBREDA
push 0x563298
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENPREREADINPAGE
push 0x5632ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1ea8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DATAFLUSHGPIO
push 0x5632c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DATAFLUSH4V
push 0x5632d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a58], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.FLASHMAXPE
push 0x5632e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a54], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SMARTMAXPE
push 0x5632f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18f0], eax
lea eax, [ebp - 0x224]
push eax
push 0xa
push str.SMARTMINSPARE
push 0x563304
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1918], eax
lea ecx, [ebp - 0x224]
push ecx
push 3
push str.DRAMCACHESIZE
push 0x563318
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.EnableSmart
push 0x563328
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x438], eax
lea eax, [ebp - 0x224]
push eax
push 1
push str.ENABLE_RTBB_REMAPPING
push 0x563344
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x590], eax
lea ecx, [ebp - 0x224]
push ecx
push 1
push str.ENABLE_LBA48
push 0x563358
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENABLE_SYSBLK_CHECKSUM
push 0x563374
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ENABLE_IDLE_SCAN
push 0x56338c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x12a0], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLE_FILLWL_FLUSHCACHE
push 0x5633ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x494], eax
lea edx, [ebp - 0x224]
push edx
push 0x64
push str.READ_THRESHOLD
push 0x5633c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4c4], eax
lea eax, [ebp - 0x224]
push eax
push 2
push str.DELAYTIME_D2H
push 0x5633d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1268], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLE_CUSTOM_WLCOUNT
push 0x5633f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x504], eax
lea edx, [ebp - 0x224]
push edx
push 0x64
push str.CUSTOM_WLCOUNT
push 0x563404
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x58c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DDRCLOCKSETTING
push 0x563418
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9c8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ASYNCCLOCKSETTING
push 0x563430
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x524], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENSUPERVISORCLOCKSETTING
push 0x563450
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18ec], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.EnableEarlyMoveAndretire
push 0x563470
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a50], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.EarlyMoveThreshold
push 0x563488
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x500], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.EarlyRetireThreshold
push 0x5634a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18e8], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.EarlyRetirePE
push 0x5634b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdf0], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.DrivingSetting
push 0x5634cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x434], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DrivingSetting2
push 0x5634e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x122c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ONFIDrivingSetting
push 0x5634f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9c4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ONFIDrivingSetting2
push 0x563510
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4fc], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.QUICKERASE
push 0x563520
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x490], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.EnableSyncMode
push 0x563534
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18e4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.EnableNCQ
push 0x563544
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4c0], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SATATXATTENUATION
push 0x56355c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9c0], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.MAXSATASPEED
push 0x563570
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18e0], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.DELAYSATASIGNATURE
push 0x563588
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1228], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTHOURS
push 0x563598
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1224], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTLOOPS
push 0x5635a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x588], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RETURNUNC
push 0x5635b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1264], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.LTSSETUPTIME
push 0x5635cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18dc], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.LTSTESTTIME
push 0x5635dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RDTTYPE
push 0x5635e8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x520], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTFLASHTYPE
push 0x5635fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1260], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTECCFAILTH
push 0x563610
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x125c], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RDTERASEFAILTH
push 0x563624
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x129c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTPROGRAMFAILTH
push 0x56363c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18d8], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTTEMPERATUREFAILTH
push 0x563658
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9bc], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.HIPM
push 0x563664
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x584], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DIPM
push 0x563670
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a4c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.STANDBYMODE
push 0x563680
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18d4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.PARTIAL2SLUMBER
push 0x563694
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1298], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENCACHEPROGRAM
push 0x5636a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18d0], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.PROGRAMFAILHANDLE
push 0x5636c0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1294], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLEDRAMSRT
push 0x5636d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18cc], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENABLEFIXTEMPERATURE
push 0x5636f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ADJUSTTEMPERATURE
push 0x563708
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1220], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ERASECOUNTTH
push 0x56371c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SPAREBLOCKNUMBERTH
push 0x563734
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1ea4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.SMARTVENDORID
push 0x563748
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x488], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.READRETRYITERATION
push 0x563760
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18c8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x563764
push 0x563768
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4bc], eax
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x1e94]
push ecx
lea edx, [ebp - 0x1ea0]
push edx
call fcn.004b77ad
add esp, 0xc
lea eax, [ebp - 0x224]
push eax
push 0
push str.TranscendTSBTek
push 0x56377c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RAMAXEL
push 0x563788
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x51c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x56378c
push 0x563790
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x563794
push 0x563798
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x430], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.PHYEvent
push 0x5637a8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18c4], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.CMD31
push 0x5637b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DEVICESLEEPMODE
push 0x5637c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1290], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.DISABLESMARTTEMPERATURE
push 0x5637e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x484], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.TOGGLEDASP
push 0x5637f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a48], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DISABLESSC
push 0x563804
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9b8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.FORCEENWRITECACHE
push 0x56381c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x121c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.FLUSHDRAM
push 0x56382c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x42c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DEVICESLEEPNOSLUMBER
push 0x563848
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdec], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.TMP102
push 0x563854
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1914], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DISABLEATAWRITECACHE
push 0x563870
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1218], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.OUTPUTUART
push 0x563880
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1258], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.INNODISKFEATURE
push 0x563894
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f0], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.CUSTOMIZEDFEATURE
push 0x5638ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.APROFEATURE
push 0x5638bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.APROOPTION
push 0x5638cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x518], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x5638d0
push 0x5638d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e88], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x5638d8
push 0x5638dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4ec], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.IEEE1667
push 0x5638ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x580], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTECCTH
push 0x5638fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x514], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTECCTH1
push 0x56390c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x128c], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLEPETEST
push 0x563920
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a44], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DELAYTOREAD
push 0x563930
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a40], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DELAYTOWRITE
push 0x563944
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b0], eax
push 0x200
lea ecx, [ebp - 0x424]
push ecx
call fcn.004b8167
add esp, 8
mov edx, dword [ebp + 8]
add edx, 0xeb2
push edx
lea eax, [ebp - 0x424]
push eax
push str._sConfig_s.ini
lea ecx, [ebp - 0x224]
push ecx
call fcn.004e998d
add esp, 0x10
mov byte [ebp - 0x1e84], 0x27
mov byte [ebp - 0x1e83], 0x8b
mov byte [ebp - 0x1e82], 0x8c
mov byte [ebp - 0x1e81], 0x8d
mov byte [ebp - 0x1e80], 0x25
mov byte [ebp - 0x1e7f], 0x8f
mov byte [ebp - 0x1e7e], 0x90
mov byte [ebp - 0x1e7d], 0x91
mov byte [ebp - 0x1e7c], 0x92
mov byte [ebp - 0x1e7b], 0x27
mov byte [ebp - 0x1e7a], 0x94
mov byte [ebp - 0x1e79], 0x95
mov byte [ebp - 0x1e78], 0x96
mov byte [ebp - 0x1e77], 0x97
mov byte [ebp - 0x1e76], 0x29
mov byte [ebp - 0x1e75], 0x99
mov byte [ebp - 0x1910], 0x8f
mov byte [ebp - 0x190f], 0x87
mov byte [ebp - 0x190e], 0x88
mov byte [ebp - 0x190d], 0x23
mov byte [ebp - 0x190c], 0x8a
mov byte [ebp - 0x190b], 0x8b
mov byte [ebp - 0x190a], 0x8c
mov byte [ebp - 0x1909], 0x8d
mov byte [ebp - 0x1908], 0x25
mov byte [ebp - 0x1907], 0x8f
mov dword [ebp - 0xe14], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7e7], 0
je 0x49d0b6
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x618]
test ecx, ecx
je 0x49c367
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 1
cmp edx, dword [ebp - 0x18e4]
je 0x49c367
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x10
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x619]
test edx, edx
je 0x49c39c
mov eax, dword [ebp - 0x1a3c]
and eax, 0xff
and eax, 2
mov ecx, dword [ebp - 0x4c0]
shl ecx, 1
cmp eax, ecx
je 0x49c39c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x11
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x61c]
test ecx, ecx
je 0x49c3d2
mov edx, dword [ebp - 0x1a3b]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x18d0]
shl eax, 1
cmp edx, eax
je 0x49c3d2
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x13
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x61b]
test eax, eax
je 0x49c409
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1264]
shl edx, 2
cmp ecx, edx
je 0x49c409
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x14
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x620]
test edx, edx
je 0x49c43f
mov eax, dword [ebp - 0x1a3b]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x18d4]
shl ecx, 3
cmp eax, ecx
je 0x49c43f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x15
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x61a]
test ecx, ecx
je 0x49c476
mov edx, dword [ebp - 0x1a3b]
and edx, 0xff
and edx, 0x40
mov eax, dword [ebp - 0x1298]
shl eax, 6
cmp edx, eax
je 0x49c476
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x16
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x61f]
test eax, eax
je 0x49c4ad
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x1a4c]
shl edx, 4
cmp ecx, edx
je 0x49c4ad
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x17
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x61e]
test edx, edx
je 0x49c4e3
mov eax, dword [ebp - 0x1a3b]
and eax, 0xff
and eax, 0x20
mov ecx, dword [ebp - 0x584]
shl ecx, 5
cmp eax, ecx
je 0x49c4e3
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x18
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62c]
test ecx, ecx
je 0x49c57e
cmp dword [ebp - 0x18e0], 0
jne 0x49c524
mov edx, dword [ebp - 0x1a3a]
and edx, 0xff
sar edx, 2
and edx, 3
cmp edx, 1
je 0x49c522
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x19
jmp 0x49c57e
cmp dword [ebp - 0x18e0], 1
jne 0x49c553
mov ecx, dword [ebp - 0x1a3a]
and ecx, 0xff
sar ecx, 2
and ecx, 3
cmp ecx, 2
je 0x49c551
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x1a
jmp 0x49c57e
cmp dword [ebp - 0x18e0], 2
jne 0x49c57e
mov eax, dword [ebp - 0x1a3a]
and eax, 0xff
sar eax, 2
and eax, 3
test eax, eax
je 0x49c57e
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x627]
test eax, eax
je 0x49c5bb
mov ecx, dword [ebp - 0x1a04]
and ecx, 0xff
mov edx, dword [ebp - 0x1224]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c5bb
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x1d
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x64d]
test edx, edx
je 0x49c617
mov eax, dword [ebp - 0x1a03]
and eax, 0xff
test eax, eax
je 0x49c617
mov ecx, dword [ebp - 0x1a03]
and ecx, 0xff
cmp ecx, 0xff
je 0x49c617
mov edx, dword [ebp - 0x1a03]
and edx, 0xff
mov eax, dword [ebp - 0x9bc]
add eax, 0x13
and eax, 0xff
cmp edx, eax
je 0x49c617
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x5d
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x628]
test eax, eax
je 0x49c654
mov ecx, dword [ebp - 0x1a02]
and ecx, 0xff
mov edx, dword [ebp - 0x18dc]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c654
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x40
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x629]
test edx, edx
je 0x49c690
mov eax, dword [ebp - 0x1a01]
and eax, 0xff
mov ecx, dword [ebp - 0x4f8]
and ecx, 0xff
and ecx, 0xff
cmp eax, ecx
je 0x49c690
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x41
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x624]
test ecx, ecx
je 0x49c6cb
mov edx, dword [ebp - 0x19ff]
and edx, 0xff
mov eax, dword [ebp - 0x125c]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49c6cb
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1e
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x625]
test eax, eax
je 0x49c708
mov ecx, dword [ebp - 0x19fd]
and ecx, 0xff
mov edx, dword [ebp - 0x18d8]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c708
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x20
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x626]
test edx, edx
je 0x49c744
mov eax, dword [ebp - 0x19fe]
and eax, 0xff
mov ecx, dword [ebp - 0x129c]
and ecx, 0xff
and ecx, 0xff
cmp eax, ecx
je 0x49c744
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x21
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x621]
test ecx, ecx
je 0x49c8ca
cmp dword [ebp - 0x1a50], 0
je 0x49c84d
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 0x10
mov eax, dword [ebp - 0x1a50]
shl eax, 4
cmp edx, eax
je 0x49c78c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x22
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x622]
test eax, eax
je 0x49c7bb
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, dword [ebp - 0x500]
je 0x49c7bb
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x23
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x623]
test ecx, ecx
je 0x49c7ea
mov edx, dword [ebp - 0x1a11]
and edx, 0xff
cmp edx, dword [ebp - 0x18e8]
je 0x49c7ea
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x24
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x64a]
test edx, edx
je 0x49c84b
mov eax, dword [ebp - 0x19df]
and eax, 0xff
mov ecx, dword [ebp - 0xdf0]
and ecx, 0xff
cmp eax, ecx
je 0x49c820
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x4f
mov eax, dword [ebp - 0x19de]
and eax, 0xff
mov ecx, dword [ebp - 0xdf0]
sar ecx, 8
and ecx, 0xff
cmp eax, ecx
je 0x49c84b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x4f
jmp 0x49c8ca
mov eax, dword [ebp - 0x1a3c]
and eax, 0xff
and eax, 0x10
test eax, eax
je 0x49c86c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x25
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x622]
test eax, eax
je 0x49c89b
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, 0xff
je 0x49c89b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x26
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x623]
test ecx, ecx
je 0x49c8ca
mov edx, dword [ebp - 0x1a11]
and edx, 0xff
cmp edx, 0xff
je 0x49c8ca
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x27
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63d]
test edx, edx
je 0x49c909
mov eax, dword [ebp - 0x19f9]
and eax, 0xff
mov ecx, dword [ebp - 0x514]
and ecx, 0xff
and ecx, 0xff
add ecx, 1
cmp eax, ecx
je 0x49c909
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x44
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62a]
test ecx, ecx
je 0x49c945
mov edx, dword [ebp - 0x19f2]
and edx, 0xff
and edx, 1
mov eax, dword [ebp - 0x48c]
and eax, 1
and eax, 0xff
cmp edx, eax
je 0x49c945
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x28
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x62b]
test eax, eax
je 0x49c9ce
mov ecx, dword [ebp - 0x1220]
and ecx, 0xff000000
test ecx, ecx
je 0x49c9a0
mov edx, dword [ebp - 0x19f1]
and edx, 0xff
mov eax, dword [ebp - 0x1220]
and eax, 0xff
mov ecx, 0x100
sub ecx, eax
add ecx, 0x80
and ecx, 0xff
cmp edx, ecx
je 0x49c99e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x29
jmp 0x49c9ce
mov eax, dword [ebp - 0x19f1]
and eax, 0xff
mov ecx, dword [ebp - 0x1220]
and ecx, 0xff
and ecx, 0xff
cmp eax, ecx
je 0x49c9ce
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x2a
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x61d]
test ecx, ecx
je 0x49ca08
mov edx, dword [ebp - 0x1a18]
and edx, 0xff
and edx, 0x80
mov eax, dword [ebp - 0x438]
shl eax, 7
cmp edx, eax
je 0x49ca08
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x2b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x631]
test eax, eax
je 0x49ca45
mov ecx, dword [ebp - 0x19fa]
and ecx, 0xff
mov edx, dword [ebp - 0x588]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49ca45
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x2c
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x633]
test edx, edx
je 0x49ca81
mov eax, dword [ebp - 0x19f0]
and eax, 0xff
and eax, 1
mov ecx, dword [ebp - 0x4b8]
and ecx, 1
and ecx, 0xff
cmp eax, ecx
je 0x49ca81
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x32
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x634]
test ecx, ecx
je 0x49cabf
mov edx, dword [ebp - 0x19f0]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x51c]
shl eax, 1
and eax, 2
and eax, 0xff
cmp edx, eax
je 0x49cabf
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x33
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x635]
test eax, eax
je 0x49caff
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x4f4]
shl edx, 2
and edx, 4
and edx, 0xff
cmp ecx, edx
je 0x49caff
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x34
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x636]
test edx, edx
je 0x49cb3e
mov eax, dword [ebp - 0x19f0]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x430]
shl ecx, 3
and ecx, 8
and ecx, 0xff
cmp eax, ecx
je 0x49cb3e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x35
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x637]
test ecx, ecx
je 0x49cb7d
mov edx, dword [ebp - 0x19f0]
and edx, 0xff
and edx, 0x10
mov eax, dword [ebp - 0x18c4]
shl eax, 4
and eax, 0x10
and eax, 0xff
cmp edx, eax
je 0x49cb7d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x36
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x638]
test eax, eax
je 0x49cbb2
mov ecx, dword [ebp - 0xbc5]
and ecx, 0xff
and ecx, 0x10
sar ecx, 4
cmp ecx, dword [ebp - 0x534]
je 0x49cbb2
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3a
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x639]
test ecx, ecx
je 0x49cbea
mov edx, dword [ebp - 0xbbe]
and edx, 0xff
and edx, 0xf0
sar edx, 4
cmp edx, dword [ebp - 0x510]
je 0x49cbea
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x3c
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63a]
test edx, edx
je 0x49cc1d
mov eax, dword [ebp - 0xbbe]
and eax, 0xff
sar eax, 1
and eax, 7
cmp eax, dword [ebp - 0x1248]
je 0x49cc1d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x3b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x63b]
test eax, eax
je 0x49cc4f
mov ecx, dword [ebp - 0xbbe]
and ecx, 0xff
and ecx, 1
cmp ecx, dword [ebp - 0x12b4]
je 0x49cc4f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3d
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x64b]
test ecx, ecx
je 0x49cc7e
mov edx, dword [ebp - 0xbb5]
and edx, 0xff
cmp edx, dword [ebp - 0x1eb4]
je 0x49cc7e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x50
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x64c]
test edx, edx
je 0x49ccb2
mov eax, dword [ebp - 0xbc5]
and eax, 0xff
and eax, 0x20
sar eax, 5
cmp eax, dword [ebp - 0xe08]
je 0x49ccb2
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x5b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x63c]
test eax, eax
je 0x49ccf2
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x20
mov edx, dword [ebp - 0x4b4]
shl edx, 5
and edx, 0x20
and edx, 0xff
cmp ecx, edx
je 0x49ccf2
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x43
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63e]
test edx, edx
je 0x49cda0
mov eax, dword [ebp + 8]
cmp dword [eax + 0xf0], 0
jne 0x49cd64
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xec], 0
jne 0x49cd64
mov edx, dword [ebp + 8]
cmp dword [edx + 0xdc], 0
jne 0x49cd64
mov eax, dword [ebp + 8]
cmp dword [eax + 0xe0], 0
jne 0x49cd64
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe4], 0
jne 0x49cd64
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe8], 0
jne 0x49cd64
mov eax, dword [ebp + 8]
cmp dword [eax + 0xb0], 0
jne 0x49cd64
mov dword [ebp - 0x2050], 0
jmp 0x49cd6e
mov dword [ebp - 0x2050], 1
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x40
mov edx, dword [ebp - 0x2050]
shl edx, 6
and edx, 0x40
and edx, 0xff
cmp ecx, edx
je 0x49cda0
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x48
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63f]
test edx, edx
je 0x49cddc
mov eax, dword [ebp - 0x19ef]
and eax, 0xff
and eax, 1
mov ecx, dword [ebp - 0x1290]
and ecx, 1
and ecx, 0xff
cmp eax, ecx
je 0x49cddc
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x49
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x640]
test ecx, ecx
je 0x49ce1a
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x484]
shl eax, 1
and eax, 2
and eax, 0xff
cmp edx, eax
je 0x49ce1a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4a
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x647]
test eax, eax
je 0x49ce5a
mov ecx, dword [ebp - 0x19ef]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1a48]
shl edx, 2
and edx, 4
and edx, 0xff
cmp ecx, edx
je 0x49ce5a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x4c
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x648]
test edx, edx
je 0x49ce99
mov eax, dword [ebp - 0x19ef]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x9b8]
shl ecx, 3
and ecx, 8
and ecx, 0xff
cmp eax, ecx
je 0x49ce99
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x4d
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x649]
test ecx, ecx
je 0x49ced4
mov edx, dword [ebp - 0x19ee]
and edx, 0xff
mov eax, dword [ebp - 0x18c8]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49ced4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4e
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x646]
test eax, eax
je 0x49cf11
mov ecx, dword [ebp - 0x19ed]
and ecx, 0xff
mov edx, dword [ebp - 0x488]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49cf11
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x4b
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x641]
test edx, edx
je 0x49cf44
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
and eax, 2
sar eax, 1
cmp eax, dword [ebp - 0x12b0]
je 0x49cf44
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x42
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x642]
test eax, eax
je 0x49cfac
mov ecx, dword [ebp - 0xbb7]
and ecx, 0xff
and ecx, 0x80
sar ecx, 7
mov edx, dword [ebp + 8]
cmp ecx, dword [edx + 0x74]
je 0x49cf7c
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x2f
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x74], 0
je 0x49cfac
mov edx, dword [ebp - 0xbb7]
and edx, 0xff
and edx, 0x3f
mov eax, dword [ebp + 8]
cmp edx, dword [eax + 0x7d7]
je 0x49cfac
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x30
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x643]
test eax, eax
je 0x49d010
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7bb], 0
jne 0x49cfe9
mov edx, dword [ebp - 0xbbc]
and edx, 0xff
and edx, 0xf
cmp edx, 0xf
je 0x49cfe7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x45
jmp 0x49d010
mov ecx, dword [ebp - 0xbbc]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ebp + 8]
cmp ecx, dword [edx + 0x7bb]
je 0x49d010
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x45
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x644]
test edx, edx
je 0x49d082
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7bf], 0
jne 0x49d053
mov ecx, dword [ebp - 0xbbc]
and ecx, 0xff
and ecx, 0xf0
sar ecx, 4
cmp ecx, 0xf
je 0x49d051
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x46
jmp 0x49d082
mov eax, dword [ebp - 0xbbc]
and eax, 0xff
and eax, 0xf0
sar eax, 4
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0x7bf]
cmp eax, edx
je 0x49d082
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x46
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x645]
test edx, edx
je 0x49d0b6
mov eax, dword [ebp - 0xbc4]
and eax, 0xff
and eax, 1
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0x7b7]
je 0x49d0b6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x47
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7e7], 0
jne 0x49e0be
mov ecx, dword [ebp - 0xbcc]
and ecx, 0xff
shl ecx, 8
mov edx, dword [ebp - 0xbcb]
and edx, 0xff
add ecx, edx
cmp ecx, dword [ebp - 0xe0c]
je 0x49d0f8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x5a
mov ecx, dword [ebp - 0xbc5]
and ecx, 0xff
and ecx, 0xf
cmp ecx, dword [ebp - 0x1eb8]
je 0x49d11c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3e
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
and eax, 0xf0
sar eax, 4
cmp eax, dword [ebp - 0x538]
je 0x49d144
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x3f
mov edx, dword [ebp - 0xbbe]
and edx, 0xff
and edx, 0xf0
sar edx, 4
cmp edx, dword [ebp - 0x510]
je 0x49d16e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x3c
mov ecx, dword [ebp - 0xbbe]
and ecx, 0xff
and ecx, 1
cmp ecx, dword [ebp - 0x12b4]
je 0x49d192
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3d
mov eax, dword [ebp - 0xbbe]
and eax, 0xff
sar eax, 1
and eax, 7
cmp eax, dword [ebp - 0x1248]
je 0x49d1b7
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x3b
mov edx, dword [ebp - 0xbc5]
and edx, 0xff
and edx, 0x10
sar edx, 4
cmp edx, dword [ebp - 0x534]
je 0x49d1de
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x3a
mov ecx, dword [ebp - 0xbc5]
and ecx, 0xff
and ecx, 0x20
sar ecx, 5
cmp ecx, dword [ebp - 0xe08]
je 0x49d205
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x5b
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
and eax, 2
sar eax, 1
cmp eax, dword [ebp - 0x12b0]
je 0x49d22a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x42
mov edx, dword [ebp - 0xbc3]
and edx, 0xff
and edx, 4
sar edx, 2
cmp edx, dword [ebp - 0xe04]
je 0x49d251
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x5c
mov ecx, dword [ebp - 0xbc3]
and ecx, 0xff
and ecx, 8
sar ecx, 3
cmp ecx, dword [ebp - 0x1294]
je 0x49d278
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x6b
mov eax, dword [ebp - 0xbb5]
and eax, 0xff
cmp eax, dword [ebp - 0x1eb4]
je 0x49d298
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x50
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 1
cmp edx, dword [ebp - 0x18e4]
je 0x49d2bc
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x10
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x4c0]
shl edx, 1
cmp ecx, edx
je 0x49d2e4
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x11
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1294]
shl edx, 2
cmp ecx, edx
je 0x49d30d
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x6b
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x18d0]
shl edx, 1
cmp ecx, edx
je 0x49d335
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x13
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1264]
shl edx, 2
cmp ecx, edx
je 0x49d35e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x14
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 8
mov edx, dword [ebp - 0x18d4]
shl edx, 3
cmp ecx, edx
je 0x49d387
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x15
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x40
mov edx, dword [ebp - 0x1298]
shl edx, 6
cmp ecx, edx
je 0x49d3b0
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x16
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x1a4c]
shl edx, 4
cmp ecx, edx
je 0x49d3d9
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x17
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x20
mov edx, dword [ebp - 0x584]
shl edx, 5
cmp ecx, edx
je 0x49d402
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x18
mov ecx, dword [ebp - 0x1a3a]
and ecx, 0xff
and ecx, 1
mov edx, dword [ebp - 0x1258]
and edx, 0xff
cmp ecx, edx
je 0x49d42e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x6c
cmp dword [ebp - 0x18e0], 0
jne 0x49d45d
mov ecx, dword [ebp - 0x1a3a]
and ecx, 0xff
sar ecx, 2
and ecx, 3
cmp ecx, 1
je 0x49d45b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x19
jmp 0x49d4b7
cmp dword [ebp - 0x18e0], 1
jne 0x49d48b
mov eax, dword [ebp - 0x1a3a]
and eax, 0xff
sar eax, 2
and eax, 3
cmp eax, 2
je 0x49d489
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1a
jmp 0x49d4b7
cmp dword [ebp - 0x18e0], 2
jne 0x49d4b7
mov edx, dword [ebp - 0x1a3a]
and edx, 0xff
sar edx, 2
and edx, 3
test edx, edx
je 0x49d4b7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x1b
mov ecx, dword [ebp - 0x1a37]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x191c]
shl edx, 1
cmp ecx, edx
je 0x49d4df
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x7f
cmp dword [ebp - 0x1218], 0
je 0x49d50a
mov ecx, dword [ebp - 0x1a35]
and ecx, 0xff
and ecx, 0x10
test ecx, ecx
je 0x49d508
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x6d
jmp 0x49d52a
mov eax, dword [ebp - 0x1a35]
and eax, 0xff
and eax, 0x10
cmp eax, 0x10
je 0x49d52a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x6d
cmp dword [0x56e314], 0
jne 0x49d53c
cmp dword [0x673e70], 0
je 0x49d57e
mov edx, dword [ebp - 0x1a2f]
and edx, 0xff
cmp edx, dword [ebp - 0x1a40]
je 0x49d55d
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x7c
mov ecx, dword [ebp - 0x1a2e]
and ecx, 0xff
cmp ecx, dword [ebp - 0x4b0]
je 0x49d57e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x7d
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x1e88]
shl ecx, 3
cmp eax, ecx
je 0x49d5a6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x74
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 0x10
mov ecx, dword [ebp - 0x4ec]
shl ecx, 4
cmp eax, ecx
je 0x49d5ce
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x75
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 0x20
mov ecx, dword [ebp - 0x580]
shl ecx, 5
cmp eax, ecx
je 0x49d5f6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x76
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 0x40
mov ecx, dword [ebp - 0x4f0]
shl ecx, 6
cmp eax, ecx
je 0x49d61e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x80
mov eax, dword [ebp - 0x1a16]
and eax, 0xff
and eax, 0x40
mov ecx, dword [ebp - 0x490]
shl ecx, 6
cmp eax, ecx
je 0x49d643
mov dword [ebp - 0xe14], 1
mov edx, dword [ebp - 0x1a16]
and edx, 0xff
and edx, 0x80
mov eax, dword [ebp - 0x1238]
shl eax, 7
cmp edx, eax
je 0x49d66f
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1c
mov edx, dword [ebp - 0x1a04]
and edx, 0xff
mov eax, dword [ebp - 0x1224]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49d69c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1d
mov edx, dword [ebp - 0x1a03]
and edx, 0xff
test edx, edx
je 0x49d6ea
mov eax, dword [ebp - 0x1a03]
and eax, 0xff
cmp eax, 0xff
je 0x49d6ea
mov ecx, dword [ebp - 0x1a03]
and ecx, 0xff
mov edx, dword [ebp - 0x9bc]
add edx, 0x13
and edx, 0xff
cmp ecx, edx
je 0x49d6ea
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x5d
mov ecx, dword [ebp - 0x1a02]
and ecx, 0xff
mov edx, dword [ebp - 0x18dc]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49d719
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x40
mov ecx, dword [ebp - 0x1a01]
and ecx, 0xff
mov edx, dword [ebp - 0x4f8]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49d748
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x41
mov ecx, dword [ebp - 0x19ff]
and ecx, 0xff
mov edx, dword [ebp - 0x125c]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49d777
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x1e
mov ecx, dword [ebp - 0x19fe]
and ecx, 0xff
mov edx, dword [ebp - 0x129c]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49d7a6
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x21
mov ecx, dword [ebp - 0x19fd]
and ecx, 0xff
mov edx, dword [ebp - 0x18d8]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49d7d5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x20
cmp dword [ebp - 0x1a50], 0
je 0x49d87f
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x1a50]
shl edx, 4
cmp ecx, edx
je 0x49d80b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x22
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, dword [ebp - 0x500]
je 0x49d82c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x23
mov eax, dword [ebp - 0x1a11]
and eax, 0xff
cmp eax, dword [ebp - 0x18e8]
je 0x49d84c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x24
mov edx, dword [ebp - 0x19df]
and edx, 0xff
mov eax, dword [ebp - 0x19de]
and eax, 0xff
shl eax, 8
add edx, eax
cmp edx, dword [ebp - 0xdf0]
je 0x49d87d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4f
jmp 0x49d8df
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 0x10
test edx, edx
je 0x49d89f
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x25
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, 0xff
je 0x49d8c0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x26
mov eax, dword [ebp - 0x1a11]
and eax, 0xff
cmp eax, 0xff
je 0x49d8df
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x27
mov edx, dword [ebp - 0x19fa]
and edx, 0xff
mov eax, dword [ebp - 0x588]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49d90c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x2c
mov edx, dword [ebp - 0x19f9]
and edx, 0xff
mov eax, dword [ebp - 0x514]
and eax, 0xff
add eax, 1
and eax, 0xff
cmp edx, eax
je 0x49d93c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x44
mov edx, dword [ebp - 0x19f2]
and edx, 0xff
and edx, 1
mov eax, dword [ebp - 0x48c]
and eax, 1
and eax, 0xff
cmp edx, eax
je 0x49d96a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x28
mov edx, dword [ebp - 0x1220]
and edx, 0xff000000
test edx, edx
je 0x49d9b7
mov eax, dword [ebp - 0x19f1]
and eax, 0xff
mov ecx, dword [ebp - 0x1220]
and ecx, 0xff
mov edx, 0x100
sub edx, ecx
add edx, 0x80
and edx, 0xff
cmp eax, edx
je 0x49d9b5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x29
jmp 0x49d9e6
mov ecx, dword [ebp - 0x19f1]
and ecx, 0xff
mov edx, dword [ebp - 0x1220]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49d9e6
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x2a
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 1
mov edx, dword [ebp - 0x4b8]
and edx, 1
and edx, 0xff
cmp ecx, edx
je 0x49da15
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x32
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x51c]
shl edx, 1
and edx, 2
and edx, 0xff
cmp ecx, edx
je 0x49da46
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x33
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x4f4]
shl edx, 2
and edx, 4
and edx, 0xff
cmp ecx, edx
je 0x49da78
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x34
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 8
mov edx, dword [ebp - 0x430]
shl edx, 3
and edx, 8
and edx, 0xff
cmp ecx, edx
je 0x49daaa
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x35
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x18c4]
shl edx, 4
and edx, 0x10
and edx, 0xff
cmp ecx, edx
je 0x49dadc
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x36
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x20
mov edx, dword [ebp - 0x4b4]
shl edx, 5
and edx, 0x20
and edx, 0xff
cmp ecx, edx
je 0x49db0e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x46
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xf0], 0
jne 0x49db6e
mov edx, dword [ebp + 8]
cmp dword [edx + 0xec], 0
jne 0x49db6e
mov eax, dword [ebp + 8]
cmp dword [eax + 0xdc], 0
jne 0x49db6e
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe0], 0
jne 0x49db6e
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe4], 0
jne 0x49db6e
mov eax, dword [ebp + 8]
cmp dword [eax + 0xe8], 0
jne 0x49db6e
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xb0], 0
jne 0x49db6e
mov dword [ebp - 0x2054], 0
jmp 0x49db78
mov dword [ebp - 0x2054], 1
mov edx, dword [ebp - 0x19f0]
and edx, 0xff
and edx, 0x40
mov eax, dword [ebp - 0x2054]
shl eax, 6
and eax, 0x40
and eax, 0xff
cmp edx, eax
je 0x49dba9
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x48
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 1
mov eax, dword [ebp - 0x1290]
and eax, 1
and eax, 0xff
cmp edx, eax
je 0x49dbd7
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x49
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x484]
shl eax, 1
and eax, 2
and eax, 0xff
cmp edx, eax
je 0x49dc07
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4a
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 4
mov eax, dword [ebp - 0x1a48]
shl eax, 2
and eax, 4
and eax, 0xff
cmp edx, eax
je 0x49dc38
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4c
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 8
mov eax, dword [ebp - 0x9b8]
shl eax, 3
and eax, 8
and eax, 0xff
cmp edx, eax
je 0x49dc69
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4d
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 0x20
mov eax, dword [ebp - 0x121c]
shl eax, 5
and eax, 0x20
and eax, 0xff
cmp edx, eax
je 0x49dc9a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x66
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 0x40
mov eax, dword [ebp - 0x42c]
shl eax, 6
and eax, 0x40
and eax, 0xff
cmp edx, eax
je 0x49dccb
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x67
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 0x80
mov eax, dword [ebp - 0xdec]
shl eax, 7
and eax, 0x80
and eax, 0xff
cmp edx, eax
je 0x49dd01
mov edx, dword [ebp + 8]
cmp dword [edx + 0xc1c], 0x10
jl 0x49e0d4
mov dword [ebp - 0xe14], 1
cmp dword [ebp - 0xe14], 0
je 0x49e12a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xd3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xd3
mov dword [ebp - 0x2044], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2044]
jmp 0x49e168
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0
mov dword [ebp - 0x2048], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050dea1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050dea1
mov eax, dword [ebp - 0x2048]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret