Function at 0x4e014c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xe2
push 0
push 0
dec ecx
jne 0x4e0155
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov ecx, 0x7b
lea eax, [ebp - 0x24c]
mov edx, dword [0x4010f8]
call fcn.004045ac
mov ecx, 0x64
lea eax, [ebp - 0x6f4]
mov edx, dword [0x4010f8]
call fcn.004045ac
xor eax, eax
push ebp
push 0x4e46db
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x4c], eax
mov bx, 0x64
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
call fcn.00403db0
add dword [ebp - 0x60], 4
dec bx
jne 0x4e01b7
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x64]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e46f4
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4798
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4834
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e48c4
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4920
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4978
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4a08
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4a44
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4a78
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4ab4
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0xc]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, ebx
call fcn.004875b8
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x54]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4ae8
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4bc4
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4c0c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4c38
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4c6c
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0xc]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, ebx
call fcn.004875b8
mov eax, ebx
call fcn.00498c58
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x58]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4c94
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4d04
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4d34
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4d6c
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0xc]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, ebx
call fcn.004875b8
mov eax, ebx
call fcn.00498c58
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x5c]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4d94
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4dfc
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4e38
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4e68
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4e98
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4ec8
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0xc]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, ebx
call fcn.004875b8
mov eax, ebx
call fcn.00498c58
mov edx, 0x4e4ef0
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x44c]
mov ecx, 0xff
call fcn.00404008
mov edx, 0x4e4f04
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.00404008
mov edx, 0x4e4f1c
mov eax, ebx
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x700]
wait
mov edx, 0x4e4f30
mov eax, ebx
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
fcomp qword [ebp - 0x700]
fnstsw ax
sahf
jae 0x4e0717
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x60]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4f44
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4f84
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4fb0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e4fd8
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5004
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov edx, 0x4e5024
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, ebx
call fcn.004875b8
mov eax, ebx
call fcn.00498c58
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e06ab
jmp 0x4e0699
mov edx, 0x4e5038
mov eax, ebx
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x700]
wait
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
fcomp qword [ebp - 0x700]
fnstsw ax
sahf
jae 0x4e0692
mov edx, 0x4e4ef0
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x44c]
mov ecx, 0xff
call fcn.00404008
mov edx, 0x4e4f04
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.00404008
jmp 0x4e0781
mov eax, ebx
call fcn.0048932c
cmp byte [ebx + 0x91], 0
je 0x4e05f7
jmp 0x4e0781
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov edx, 0x4e4ef0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x44c]
mov ecx, 0xff
call fcn.00404008
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov edx, 0x4e4f04
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.00404008
jmp 0x4e0781
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov edx, 0x4e4ef0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x44c]
mov ecx, 0xff
call fcn.00404008
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
mov edx, 0x4e4f04
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x54c]
mov ecx, 0xff
call fcn.00404008
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x60]
call fcn.004875c4
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x5c]
call fcn.004875c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, dword [eax]
call dword [edx + 0xb8]
test al, al
je 0x4e07c3
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00403e48
jmp 0x4e07d0
lea eax, [ebp - 0x10]
mov edx, 0x4e5058
call fcn.00403e48
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x704]
mov eax, 0x4e5064
call fcn.0040b250
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5080
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5090
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e088e
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e0a37
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5090
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50a4
call fcn.0040413c
jne 0x4e0988
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e50b0
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
call fcn.0040bb1c
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
call fcn.0040bb1c
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004d93c8
mov ebx, eax
test bx, bx
jbe 0x4e0976
lea eax, [ebp - 0x10]
mov edx, 0x4e50a4
call fcn.00404034
jmp 0x4e0a37
lea eax, [ebp - 0x10]
mov edx, 0x4e50d4
call fcn.00404034
jmp 0x4e0a37
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5090
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50e0
call fcn.0040413c
jne 0x4e09d9
lea eax, [ebp - 0x10]
mov edx, 0x4e50e0
call fcn.00404034
jmp 0x4e0a37
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5090
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50ec
call fcn.0040413c
jne 0x4e0a2a
lea eax, [ebp - 0x10]
mov edx, 0x4e50ec
call fcn.00404034
jmp 0x4e0a37
lea eax, [ebp - 0x10]
mov edx, 0x4e50d4
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e50f8
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5110
call fcn.0040413c
jne 0x4e0a88
lea eax, [ebp - 0x10]
mov edx, 0x4e50d4
call fcn.00404034
jmp 0x4e0ae6
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e50f8
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5120
call fcn.0040413c
jne 0x4e0ad9
lea eax, [ebp - 0x10]
mov edx, 0x4e50a4
call fcn.00404034
jmp 0x4e0ae6
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5148
call fcn.0040413c
je 0x4e0b6a
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e515c
call fcn.0040413c
jne 0x4e0b7c
lea eax, [ebp - 0x10]
mov edx, 0x4e50d4
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5170
call fcn.0040413c
jne 0x4e0bd0
lea eax, [ebp - 0x10]
mov edx, 0x4e50e0
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5184
call fcn.0040413c
je 0x4e0cd3
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5198
call fcn.0040413c
je 0x4e0cd3
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
cmp dword [ebp - 0x6f8], 0
je 0x4e0cd3
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x708]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x708]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov edx, 0x4e51ac
call fcn.0040413c
jne 0x4e0ce5
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e51bc
call fcn.0040413c
je 0x4e0d69
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e51d4
call fcn.0040413c
jne 0x4e0d7b
lea eax, [ebp - 0x10]
mov edx, 0x4e51e8
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e51f4
call fcn.0040413c
je 0x4e0dff
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e520c
call fcn.0040413c
jne 0x4e0e11
lea eax, [ebp - 0x10]
mov edx, 0x4e5220
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e522c
call fcn.0040413c
jne 0x4e0e65
lea eax, [ebp - 0x10]
mov edx, 0x4e50a4
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e523c
call fcn.0040413c
jne 0x4e0eb9
lea eax, [ebp - 0x10]
mov edx, 0x4e5058
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5258
call fcn.0040413c
jne 0x4e0f0d
lea eax, [ebp - 0x10]
mov edx, 0x4e5270
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e527c
call fcn.0040413c
jne 0x4e0f61
lea eax, [ebp - 0x10]
mov edx, 0x4e5290
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e529c
call fcn.0040413c
jne 0x4e0fb5
lea eax, [ebp - 0x10]
mov edx, 0x4e52b4
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e52c0
call fcn.0040413c
jne 0x4e1009
lea eax, [ebp - 0x10]
mov edx, 0x4e52dc
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e52e8
call fcn.0040413c
jne 0x4e105d
lea eax, [ebp - 0x10]
mov edx, 0x4e5304
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5310
call fcn.0040413c
jne 0x4e10ae
lea eax, [ebp - 0x10]
mov edx, 0x4e5328
call fcn.00404034
jmp 0x4e110c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5334
call fcn.0040413c
jne 0x4e10ff
lea eax, [ebp - 0x10]
mov edx, 0x4e5350
call fcn.00404034
jmp 0x4e110c
lea eax, [ebp - 0x10]
mov edx, 0x4e50ec
call fcn.00404034
xor eax, eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x40]
call fcn.00403db0
lea eax, [ebp - 0x24]
call fcn.00403db0
lea eax, [ebp - 0x28]
call fcn.00403db0
lea eax, [ebp - 0x2c]
call fcn.00403db0
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x68]
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e535c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5384
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e53ac
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e53f0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, ebx
call fcn.004875b8
jmp 0x4e148c
mov edx, 0x4e5408
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5420
call fcn.0040413c
jne 0x4e1219
mov edx, 0x4e5430
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x24]
call fcn.00408d88
mov edx, 0x4e5408
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5448
call fcn.0040413c
jne 0x4e1278
mov edx, 0x4e5430
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x28]
call fcn.00408d88
mov edx, 0x4e5408
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5458
call fcn.0040413c
jne 0x4e12d7
mov edx, 0x4e5430
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x2c]
call fcn.00408d88
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5148
call fcn.0040413c
je 0x4e13eb
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e515c
call fcn.0040413c
je 0x4e13eb
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e52e8
call fcn.0040413c
je 0x4e13eb
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e523c
call fcn.0040413c
jne 0x4e1485
mov edx, 0x4e5408
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5468
call fcn.0040413c
jne 0x4e1485
mov dword [ebp - 0x44], 1
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 0x4e5430
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov edx, dword [ebp - 0x6f8]
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 4]
call fcn.004ea9bc
mov eax, ebx
call fcn.0048932c
cmp byte [ebx + 0x91], 0
je 0x4e11ba
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5478
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e548c
call fcn.0040413c
jne 0x4e15df
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e549c
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e54b4
call fcn.0040413c
je 0x4e15df
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e1579
lea eax, [ebp - 0x10]
mov edx, 0x4e50ec
call fcn.00404034
jmp 0x4e172c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50a4
call fcn.0040413c
jne 0x4e15cd
lea eax, [ebp - 0x10]
mov edx, 0x4e51e8
call fcn.00404034
jmp 0x4e172c
lea eax, [ebp - 0x10]
mov edx, 0x4e5058
call fcn.00404034
jmp 0x4e172c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e1633
lea eax, [ebp - 0x10]
mov edx, 0x4e54d8
call fcn.00404034
jmp 0x4e172c
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50a4
call fcn.0040413c
jne 0x4e1687
lea eax, [ebp - 0x10]
mov edx, 0x4e5220
call fcn.00404034
jmp 0x4e172c
lea eax, [ebp - 0x44c]
mov edx, 0x4e54dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e16ad
lea eax, [ebp - 0x10]
mov edx, 0x4e50e0
call fcn.00404034
jmp 0x4e172c
lea eax, [ebp - 0x44c]
mov edx, 0x4e54e0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e16d3
lea eax, [ebp - 0x10]
mov edx, 0x4e5058
call fcn.00404034
jmp 0x4e172c
lea eax, [ebp - 0x44c]
mov edx, 0x4e54e4
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e16f9
lea eax, [ebp - 0x10]
mov edx, 0x4e5270
call fcn.00404034
jmp 0x4e172c
lea eax, [ebp - 0x44c]
mov edx, 0x4e54e8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e171f
lea eax, [ebp - 0x10]
mov edx, 0x4e5290
call fcn.00404034
jmp 0x4e172c
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
lea eax, [ebp - 0x54c]
mov edx, 0x4e54ec
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e1755
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e1823
lea eax, [ebp - 0x54c]
mov edx, 0x4e54f0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e177e
lea eax, [ebp - 0x10]
mov edx, 0x4e50d4
call fcn.00404034
jmp 0x4e1823
lea eax, [ebp - 0x54c]
mov edx, 0x4e54dc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e17a4
lea eax, [ebp - 0x10]
mov edx, 0x4e50e0
call fcn.00404034
jmp 0x4e1823
lea eax, [ebp - 0x54c]
mov edx, 0x4e54f4
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e17ca
lea eax, [ebp - 0x10]
mov edx, 0x4e51e8
call fcn.00404034
jmp 0x4e1823
lea eax, [ebp - 0x54c]
mov edx, 0x4e54f8
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e17f0
lea eax, [ebp - 0x10]
mov edx, 0x4e5220
call fcn.00404034
jmp 0x4e1823
lea eax, [ebp - 0x54c]
mov edx, 0x4e54e0
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402d6c
jne 0x4e1816
lea eax, [ebp - 0x10]
mov edx, 0x4e5058
call fcn.00404034
jmp 0x4e1823
lea eax, [ebp - 0x10]
mov edx, 0x4e5504
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5510
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x34c]
mov ecx, 0xff
call fcn.00404008
cmp byte [ebp - 0x34c], 0
jne 0x4e1880
mov esi, 0x4e5514
lea edi, [ebp - 0x34c]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x34c]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 4
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x34c]
mov ecx, 0xff
call fcn.00404008
mov bx, 3
lea eax, [ebp - 0x34b]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
cmp byte [eax], 0x20
jne 0x4e18dd
mov eax, dword [ebp - 0x60]
mov byte [eax], 0x30
inc dword [ebp - 0x60]
dec bx
jne 0x4e18cf
lea eax, [ebp - 0x6f8]
lea edx, [ebp - 0x34c]
call fcn.00403fd0
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x700]
wait
mov eax, 0x4e552c
call fcn.0040ba0c
fcomp qword [ebp - 0x700]
fnstsw ax
sahf
ja 0x4e1977
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5540
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
je 0x4e1986
lea eax, [ebp - 0x10]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e1993
lea eax, [ebp - 0x10]
mov edx, 0x4e5504
call fcn.00404034
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov edx, dword [eax]
call dword [edx + 0xf4]
mov ebx, eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
mov edx, dword [eax]
call dword [edx + 0xf4]
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov bx, 1
movzx esi, bx
mov eax, dword [ebp - 0x14]
cmp byte [eax + esi - 1], 0x20
jne 0x4e1a0f
lea eax, [ebp - 0x14]
call fcn.004041fc
mov byte [eax + esi - 1], 0x30
inc ebx
cmp bx, 5
jne 0x4e19f5
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5568
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
cmp dword [ebp - 0x6f8], 0
je 0x4e1ac6
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5568
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e1ad3
lea eax, [ebp - 0x10]
mov edx, 0x4e5588
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5594
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e55a8
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e55bc
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x7c]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e55d0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e55ec
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5608
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e562c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5650
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5678
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 0x4e569c
mov eax, ebx
call fcn.0049f9cc
call fcn.00486848
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 0x4e56a8
mov eax, ebx
call fcn.0049f9cc
call fcn.00486848
mov eax, ebx
call fcn.004875b8
mov eax, ebx
call fcn.00498c58
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov edx, 0x4e56b4
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e56c0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e56d0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x704]
mov eax, 0x4e56f0
call fcn.0040b250
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5080
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e570c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x704]
mov eax, 0x4e56f0
call fcn.0040b250
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5080
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e55bc
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e26b1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x978]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e209d
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x7c]
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e571c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5750
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e576c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e57a0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e57c0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f8]
call fcn.0040b20c
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e569c
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e570c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f8]
call fcn.0040b20c
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e56a8
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov edx, 0x4e57dc
mov eax, ebx
call fcn.0049f9cc
mov edx, 0x4e57e8
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5678
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
push eax
mov edx, 0x4e5804
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486670
mov eax, ebx
call fcn.004875b8
mov eax, ebx
call fcn.00498c58
mov edx, 0x4e5810
mov eax, ebx
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
mov word [ebp - 0x38], ax
jmp 0x4e2666
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
call fcn.004875c4
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e5820
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e5750
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e5864
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e589c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e58c0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e58e8
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 0x218]
mov edx, 0x4e590c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f8]
call fcn.0040b20c
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, dword [ebp - 0x58]
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e570c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f8]
call fcn.0040b20c
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e569c
mov eax, dword [ebp - 0x58]
call fcn.0049f9cc
pop edx
call fcn.00486794
mov edx, 0x4e56a8
mov eax, dword [ebp - 0x58]
call fcn.0049f9cc
mov edx, 0x4e57e8
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f8]
call fcn.0040b20c
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e57dc
mov eax, dword [ebp - 0x58]
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5678
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
push eax
mov edx, 0x4e5804
mov eax, dword [ebp - 0x58]
call fcn.0049f9cc
pop edx
call fcn.00486670
mov eax, dword [ebp - 0x58]
call fcn.004875b8
mov eax, dword [ebp - 0x58]
call fcn.00498c58
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e25f3
mov edx, 0x4e4f30
mov eax, dword [ebp - 0x58]
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x54]
wait
jmp 0x4e25f3
push dword [ebp - 0x50]
push dword [ebp - 0x54]
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
call fcn.0040bb1c
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 0x4e5928
mov eax, dword [ebp - 0x58]
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
call fcn.0040bb1c
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004d93c8
mov ebx, eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov esi, dword [eax + 0xa8]
mov eax, esi
call fcn.004875c4
mov eax, dword [esi + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [esi + 0x218]
mov edx, 0x4e593c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x218]
mov edx, 0x4e5984
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x218]
mov edx, 0x4e59b8
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x218]
mov edx, 0x4e59e4
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x218]
mov edx, 0x4e5a20
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x218]
mov edx, 0x4e5a48
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
je 0x4e2473
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e241c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d0]
mov edx, 0x4e504c
call fcn.0040413c
je 0x4e2473
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50a4
call fcn.0040413c
jne 0x4e2483
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x8d4]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e2483
mov eax, dword [esi + 0x218]
mov edx, 0x4e5a6c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x4e4adc
mov eax, esi
call fcn.0049f9cc
mov edx, 0x4e504c
call fcn.00486794
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x7c]
mov edx, 0x4e53f0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e569c
mov eax, esi
call fcn.0049f9cc
pop edx
call fcn.00486794
mov eax, esi
call fcn.004875b8
mov edx, 0x4e5810
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
cmp dword [ebp - 0x6f8], 0
jne 0x4e250d
xor eax, eax
jmp 0x4e251e
mov edx, 0x4e5810
mov eax, esi
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
test ax, ax
jbe 0x4e2550
mov word [ebp - 0x5a], ax
mov di, 1
movzx esi, bx
movzx eax, di
add esi, eax
cmp esi, 0x64
ja 0x4e2550
lea eax, [ebp + esi*4 - 0x6f8]
mov edx, 0x4e504c
call fcn.00403e48
inc edi
dec word [ebp - 0x5a]
jne 0x4e252b
mov edx, 0x4e55bc
mov eax, dword [ebp - 0x58]
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e25e5
push dword [ebp - 0x50]
push dword [ebp - 0x54]
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
call fcn.0040bb1c
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, 0x4e5928
mov eax, dword [ebp - 0x58]
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
call fcn.0040bb1c
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004d93c8
mov dword [ebp - 0x48], eax
cmp bx, 0x64
ja 0x4e2603
mov eax, dword [ebp - 0x58]
call fcn.0048932c
mov eax, dword [ebp - 0x58]
cmp byte [eax + 0x91], 0
je 0x4e2296
cmp dword [ebp - 0x48], 0
jle 0x4e2634
mov di, word [ebp - 0x48]
inc edi
cmp di, 0x64
ja 0x4e2634
movzx eax, di
lea eax, [ebp + eax*4 - 0x6f8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
call fcn.00403db0
inc edi
add dword [ebp - 0x60], 4
cmp di, 0x65
jne 0x4e2621
mov bx, 0x64
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e2655
inc dword [ebp - 0x4c]
add dword [ebp - 0x60], 4
dec bx
jne 0x4e2641
mov ax, word [ebp - 0x4c]
mov word [ebp - 0x38], ax
lea eax, [ebp - 0x6f8]
push eax
lea edx, [ebp - 0x704]
movzx eax, word [ebp - 0x38]
call fcn.00408f08
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e26e6
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x30
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x20
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5aa0
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x20
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x20
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5ab0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x20
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, 0x4e5ac4
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e290e
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5ad0
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e29f2
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e54c4
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50a4
call fcn.0040413c
jne 0x4e29bc
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5ae8
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e29f2
lea eax, [ebp - 0x6f8]
push eax
xor eax, eax
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
cmp dword [ebp - 0x44], 1
jne 0x4e2bbd
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x40]
call fcn.00408d88
cmp dword [ebp - 0x6f8], 0
je 0x4e2ac4
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x704]
mov eax, dword [ebp - 0x40]
call fcn.00408d88
mov edx, dword [ebp - 0x704]
lea ecx, [ebp - 0x6f8]
mov eax, dword [ebp - 4]
call fcn.004ea9bc
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b04
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e2de3
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5678
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
mov edx, eax
lea ecx, [ebp - 0x6f8]
mov eax, dword [ebp - 4]
call fcn.004efae0
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov edx, dword [ebp - 0x704]
lea ecx, [ebp - 0x6f8]
mov eax, dword [ebp - 4]
call fcn.004ea9bc
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b04
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e2de3
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5148
call fcn.0040413c
je 0x4e2c8b
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e515c
call fcn.0040413c
je 0x4e2c8b
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5130
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e523c
call fcn.0040413c
jne 0x4e2d81
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e568c
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5678
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
mov edx, eax
lea ecx, [ebp - 0x6f8]
mov eax, dword [ebp - 4]
call fcn.004efae0
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov edx, dword [ebp - 0x704]
lea ecx, [ebp - 0x6f8]
mov eax, dword [ebp - 4]
call fcn.004ea9bc
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b04
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e2de3
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b04
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5b14
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x54]
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5b38
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b48
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e555c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b58
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5b68
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x970]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e3138
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x6f8]
mov eax, 0x4e50c0
call fcn.0040b250
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e5b78
call fcn.0040413c
jb 0x4e3138
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e50b0
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x704]
call fcn.0040b23c
mov eax, dword [ebp - 0x704]
push eax
lea eax, [ebp - 0x6f8]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e4f30
call fcn.004881a8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x708]
call fcn.0040b23c
mov eax, dword [ebp - 0x708]
push eax
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5678
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x714]
call fcn.00408d88
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 4]
pop ecx
call fcn.004f0d84
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e56c0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e319a
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e56c0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5b8c
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e3242
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov byte [ebp - 0x710], 0x31
mov byte [ebp - 0x70c], 2
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e33f1
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5b8c
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e32ea
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov byte [ebp - 0x710], 0x32
mov byte [ebp - 0x70c], 2
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e33f1
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov eax, dword [eax + 0x64]
mov edx, 0x4e5b8c
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50a4
call fcn.0040413c
jne 0x4e338f
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov byte [ebp - 0x710], 0x33
mov byte [ebp - 0x70c], 2
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
jmp 0x4e33f1
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b58
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5b68
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5ba0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5ba0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x10]
call fcn.00404034
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov esi, dword [eax + 0x54]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e3cda
mov eax, esi
call fcn.00489074
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0xf4]
test ax, ax
jbe 0x4e3cda
mov word [ebp - 0x5a], ax
mov bx, 1
lea eax, [ebp - 0x18]
call fcn.00403db0
lea eax, [ebp - 0x18]
push eax
mov edx, 0x4e5bb0
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5bc4
call fcn.00409ccc
lea eax, [ebp - 0x6f8]
push eax
mov edx, 0x4e5bd4
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5b68
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov edx, 0x4e5be8
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5b68
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
mov edx, 0x4e5bfc
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
cmp dword [ebp - 0x6f8], 0
je 0x4e37a9
lea eax, [ebp - 0x6f8]
push eax
mov edx, 0x4e5bfc
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5c10
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
jmp 0x4e37de
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x31
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5c10
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e5504
call fcn.00404034
mov edx, 0x4e5c1c
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e3823
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e3830
lea eax, [ebp - 0x18]
mov edx, 0x4e5504
call fcn.00404034
mov edx, 0x4e5c30
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e3868
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e3875
lea eax, [ebp - 0x18]
mov edx, 0x4e5504
call fcn.00404034
mov edx, 0x4e5c44
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e393f
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov edx, 0x4e5c5c
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5ba0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
jmp 0x4e3959
lea eax, [ebp - 0x18]
mov edx, 0x4e5504
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e5c74
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov edx, 0x4e5c80
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5b28
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e56e4
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov edx, 0x4e5c94
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5ca8
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5cb8
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov edx, 0x4e5cc4
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5ba0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
lea edx, [ebp - 0x6f8]
movzx eax, bx
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e56c0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
mov edx, 0x4e5cd8
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e5ba0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e557c
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
mov edx, 0x4e5ce8
mov eax, esi
call fcn.004881a8
lea edx, [ebp - 0x704]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
mov edx, 0x4e50d4
call fcn.0040413c
jne 0x4e3c4e
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
jmp 0x4e3c5b
lea eax, [ebp - 0x18]
mov edx, 0x4e5d00
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x704]
push eax
xor eax, eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 0x70c], 0xb
lea edx, [ebp - 0x710]
xor ecx, ecx
mov eax, 0x4e56c0
call fcn.00409ccc
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5520
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x18]
call fcn.00404034
mov eax, esi
call fcn.0048932c
inc ebx
dec word [ebp - 0x5a]
jne 0x4e3619
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x58]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e3ebe
mov eax, ebx
call fcn.00489074
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test ax, ax
jbe 0x4e3ebe
mov word [ebp - 0x5a], ax
lea eax, [ebp - 0x18]
call fcn.00403db0
lea eax, [ebp - 0x18]
push eax
mov edx, 0x4e5d0c
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5bc4
call fcn.00409ccc
lea eax, [ebp - 0x6f8]
push eax
mov edx, 0x4e5d24
mov eax, ebx
call fcn.004881a8
lea edx, [ebp - 0x6f8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x6f8]
lea edx, [ebp - 0x704]
call fcn.00408d88
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5b68
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov eax, 0x4e5d34
mov dword [ebp - 0x700], eax
mov byte [ebp - 0x6fc], 0xb
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5b68
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x31
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5c10
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e5504
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e504c
call fcn.00404034
lea eax, [ebp - 0x18]
mov edx, 0x4e5c74
call fcn.00404034
lea eax, [ebp - 0x6f8]
push eax
mov byte [ebp - 0x700], 0x20
mov byte [ebp - 0x6fc], 2
lea edx, [ebp - 0x700]
xor ecx, ecx
mov eax, 0x4e5080
call fcn.00409ccc
mov edx, dword [ebp - 0x6f8]
lea eax, [ebp - 0x18]
call fcn.00404034
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x18]
call fcn.00404034
mov eax, ebx
call fcn.0048932c
dec word [ebp - 0x5a]
jne 0x4e3d14
mov dl, 1
mov eax, dword [0x4100c8]
call fcn.0040318c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x10]
call sub.MagicdllPrice.dll_Price_Dll
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x20]
mov edx, 8
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov word [ebp - 0x2e], 1
mov bx, 0x29
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x60], eax
mov di, 3
mov eax, dword [ebp - 0x60]
mov esi, eax
lea eax, [ebp - 0x704]
push eax
movzx edx, word [ebp - 0x2e]
mov ecx, 0xc
mov eax, dword [ebp - 0x1c]
call fcn.00404230
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00409fb8
call fcn.00402c0c
push edx
push eax
lea eax, [ebp - 0x6f8]
call fcn.00408f38
mov edx, dword [ebp - 0x6f8]
mov eax, esi
call fcn.00403e04
add word [ebp - 0x2e], 0xc
add esi, 0xa4
dec di
jne 0x4e3f19
add dword [ebp - 0x60], 4
dec bx
jne 0x4e3f10
mov word [ebp - 0x2e], 1
mov bx, 1
cmp bx, 9
jne 0x4e3fe8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x960]
mov edx, 0x4e504c
call fcn.0040413c
je 0x4e3fe8
lea eax, [ebp - 0x704]
push eax
movzx edx, word [ebp - 0x2e]
mov ecx, 0xc
mov eax, dword [ebp - 0x20]
call fcn.00404230
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00409fb8
call fcn.00402c0c
jmp 0x4e4089
cmp bx, 0x34
jne 0x4e403e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x960]
mov edx, 0x4e504c
call fcn.0040413c
jne 0x4e403e
lea eax, [ebp - 0x704]
push eax
movzx edx, word [ebp - 0x2e]
mov ecx, 0xc
mov eax, dword [ebp - 0x20]
call fcn.00404230
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00409fb8
call fcn.00402c0c
jmp 0x4e4089
cmp bx, 3
je 0x4e4089
cmp bx, 4
je 0x4e4089
cmp bx, 6
je 0x4e4089
lea eax, [ebp - 0x704]
push eax
movzx edx, word [ebp - 0x2e]
mov ecx, 0xc
mov eax, dword [ebp - 0x20]
call fcn.00404230
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00409fb8
call fcn.00402c0c
add word [ebp - 0x2e], 0xc
inc ebx
cmp bx, 0x36
jne 0x4e3f8f
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 5
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x8c]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 5
call fcn.00462774
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 6
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x84]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 6
call fcn.00462774
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 7
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x80]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 7
call fcn.00462774
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 8
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x88]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 8
call fcn.00462774
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 9
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x80]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x88]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 9
call fcn.00462774
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, dword [eax]
call dword [edx + 0xb8]
test al, al
jne 0x4e436e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x474]
mov edx, dword [eax]
call dword [edx + 0xb8]
test al, al
je 0x4e4411
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 0xa
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x80]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x88]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 0xa
call fcn.00462774
jmp 0x4e4494
lea eax, [ebp - 0x704]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 0xa
call fcn.004626fc
mov eax, dword [ebp - 0x704]
lea edx, [ebp - 0x6f8]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
mov ebx, eax
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x88]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
call fcn.00408f6c
add ebx, eax
mov eax, ebx
lea edx, [ebp - 0x6f8]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 0xa
call fcn.00462774
mov eax, dword [0x5048f8]
mov eax, dword [eax]
mov ebx, dword [eax + 0x70]
push 0x4e504c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2d0]
mov ecx, dword [ebp - 8]
mov edx, 0x10
call fcn.00462774
mov eax, ebx
call fcn.004875c4
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5d48
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5d68
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5d8c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5dac
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5dd0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5df4
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5e18
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e5e38
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0xc]
call fcn.00408f08
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e4adc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x88]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e569c
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x8c]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e56a8
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x84]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e57dc
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x80]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e5804
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
lea edx, [ebp - 0x6f8]
mov eax, dword [ebp - 0x88]
call fcn.00408d88
mov eax, dword [ebp - 0x6f8]
push eax
mov edx, 0x4e5e5c
mov eax, ebx
call fcn.0049f9cc
pop edx
call fcn.00486794
mov edx, 0x4e5e68
mov eax, ebx
call fcn.0049f9cc
mov edx, 0x4e504c
call fcn.00486794
mov eax, ebx
call fcn.0049facc
mov eax, dword [ebp - 0x34]
call fcn.004031bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e46e2
lea eax, [ebp - 0x714]
call fcn.00403db0
lea eax, [ebp - 0x708]
mov edx, 2
call fcn.00403dd4
lea eax, [ebp - 0x6f8]
call fcn.00403db0
lea eax, [ebp - 0x6f4]
mov ecx, 0x64
mov edx, dword [0x4010f8]
call fcn.00404678
lea eax, [ebp - 0x24c]
mov ecx, 0x7b
mov edx, dword [0x4010f8]
call fcn.00404678
lea eax, [ebp - 0x40]
call fcn.00403db0
lea eax, [ebp - 0x2c]
mov edx, 8
call fcn.00403dd4
ret