Function at 0x4cbe98
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xc], edx
mov ebx, eax
mov edi, dword [0x68906c]
xor eax, eax
push ebp
push 0x4ce3fe
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.00420c34
dec eax
test eax, eax
jl 0x4cbf3e
inc eax
mov dword [ebp - 8], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.00420c08
mov edx, dword [0x490270]
call fcn.004044b8
test al, al
jne 0x4cbefe
mov edx, esi
mov eax, ebx
call fcn.00420c08
mov edx, dword [0x4917f8]
call fcn.004044b8
test al, al
je 0x4cbf38
mov edx, esi
mov eax, ebx
call fcn.00420c08
cmp dword [eax + 0x25c], 0
jne 0x4cbf38
mov edx, dword [0x689150]
mov edx, dword [edx]
mov edx, dword [edx + 0x360]
mov dword [eax + 0x25c], edx
mov edx, dword [0x689150]
mov edx, dword [edx]
mov edx, dword [edx + 0x360]
xchg edx, eax
call fcn.00492600
inc esi
dec dword [ebp - 8]
jne 0x4cbece
call sub.kernel32.dll_GetTickCount
mov dword [ebx + 0x55c], eax
mov byte [ebx + 0x560], 0
xor eax, eax
mov dword [ebx + 0x578], eax
mov byte [ebx + 0x570], 1
xor eax, eax
mov dword [ebx + 0x558], eax
mov byte [ebx + 0x714], 0
call sub.kernel32.dll_GetTickCount
mov dword [ebx + 0x820], eax
mov edx, 0x151
mov eax, dword [ebx + 0x360]
call fcn.00447328
mov edx, dword [0x6889bc]
mov edx, dword [edx]
add edx, 0xffffff12
mov eax, dword [ebx + 0x360]
call fcn.0044728c
mov edx, 0xee
mov eax, dword [ebx + 0x360]
call fcn.004472f4
mov edx, 0xa9
mov eax, dword [ebx + 0x360]
call fcn.004472c0
mov dword [ebx + 0x57c], 0xffffffff
mov dword [ebx + 0x580], 0xffffffff
mov dword [ebx + 0x584], 0xffffffff
mov dword [ebx + 0x588], 0xffffffff
mov eax, dword [edi]
mov edx, 0xaa
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cc02e
mov edx, dword [edi]
mov ecx, 0xaa
mov eax, dword [ebx + 0x364]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x364]
call fcn.0044728c
mov edx, 0x46
mov eax, dword [ebx + 0x364]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x114
mov eax, dword [ebx + 0x38c]
call fcn.004930e8
mov edx, dword [edi]
mov ecx, 0x114
mov eax, dword [ebx + 0x45c]
call fcn.004930e8
mov edx, dword [edi]
mov ecx, 0x132
mov eax, dword [ebx + 0x368]
call fcn.004930e8
mov edx, 0x3c
mov eax, dword [ebx + 0x368]
call fcn.0044728c
mov edx, 1
mov eax, dword [ebx + 0x368]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x378]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x378]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x378]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x37c]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x37c]
call fcn.0044728c
mov edx, 0x32
mov eax, dword [ebx + 0x37c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x380]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x380]
call fcn.0044728c
mov edx, 0x64
mov eax, dword [ebx + 0x380]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x374]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x374]
call fcn.0044728c
mov edx, 0x96
mov eax, dword [ebx + 0x374]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x388]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x388]
call fcn.0044728c
mov edx, 0xc8
mov eax, dword [ebx + 0x388]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x384]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x384]
call fcn.0044728c
mov edx, 0xfa
mov eax, dword [ebx + 0x384]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x370]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x370]
call fcn.0044728c
mov edx, 0x12c
mov eax, dword [ebx + 0x370]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xaa
mov eax, dword [ebx + 0x36c]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x36c]
call fcn.0044728c
mov edx, 0x16
mov eax, dword [ebx + 0x36c]
call fcn.004472c0
mov edx, 0x96
mov eax, dword [ebx + 0x36c]
call fcn.004472f4
mov edx, 0x15e
mov eax, dword [ebx + 0x36c]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x6d2
mov eax, dword [ebx + 0x390]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x390]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x390]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x3ac]
call fcn.004930e8
mov edx, 0x25e
mov eax, dword [ebx + 0x3ac]
call fcn.0044728c
mov edx, 5
mov eax, dword [ebx + 0x3ac]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x6cf
mov eax, dword [ebx + 0x4b0]
call fcn.004930e8
mov edx, 9
mov eax, dword [ebx + 0x4b0]
call fcn.0044728c
mov edx, 9
mov eax, dword [ebx + 0x4b0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x6d0
mov eax, dword [ebx + 0x4b4]
call fcn.004930e8
mov edx, 9
mov eax, dword [ebx + 0x4b4]
call fcn.0044728c
mov edx, 9
mov eax, dword [ebx + 0x4b4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x6d1
mov eax, dword [ebx + 0x550]
call fcn.004930e8
mov edx, 9
mov eax, dword [ebx + 0x550]
call fcn.0044728c
mov edx, 9
mov eax, dword [ebx + 0x550]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x80f
mov eax, dword [ebx + 0x394]
call fcn.004930e8
mov edx, 0xf2
mov eax, dword [ebx + 0x394]
call fcn.0044728c
mov edx, 0x2e
mov eax, dword [ebx + 0x394]
call fcn.004472c0
xor edx, edx
mov eax, dword [ebx + 0x394]
call fcn.00493140
mov edx, dword [edi]
mov ecx, 0x817
mov eax, dword [ebx + 0x398]
call fcn.004930e8
mov edx, 0x199
mov eax, dword [ebx + 0x398]
call fcn.0044728c
mov edx, 0xe
mov eax, dword [ebx + 0x398]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x814
mov eax, dword [ebx + 0x39c]
call fcn.004930e8
mov edx, 0xeb
mov eax, dword [ebx + 0x39c]
call fcn.0044728c
mov edx, 0xe
mov eax, dword [ebx + 0x39c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x815
mov eax, dword [ebx + 0x3a0]
call fcn.004930e8
mov edx, 0x125
mov eax, dword [ebx + 0x3a0]
call fcn.0044728c
mov edx, 0xe
mov eax, dword [ebx + 0x3a0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x813
mov eax, dword [ebx + 0x3a4]
call fcn.004930e8
mov edx, 0xb1
mov eax, dword [ebx + 0x3a4]
call fcn.0044728c
mov edx, 0xe
mov eax, dword [ebx + 0x3a4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x816
mov eax, dword [ebx + 0x3a8]
call fcn.004930e8
mov edx, 0x15f
mov eax, dword [ebx + 0x3a8]
call fcn.0044728c
mov edx, 0xe
mov eax, dword [ebx + 0x3a8]
call fcn.004472c0
mov esi, dword [ebx + 0x518]
mov edx, 0x10
mov eax, esi
call fcn.00447328
mov edx, 0x5a
mov eax, esi
call fcn.004472f4
mov edx, 0x1e
mov eax, esi
call fcn.0044728c
mov edx, 0xc7
mov eax, esi
call fcn.004472c0
mov dl, 1
mov eax, esi
call fcn.00493140
mov edx, dword [edi]
mov ecx, 0x73b
mov eax, dword [ebx + 0x51c]
call fcn.004930e8
mov edx, 0x7a
mov eax, dword [ebx + 0x51c]
call fcn.0044728c
mov edx, 0xc7
mov eax, dword [ebx + 0x51c]
call fcn.004472c0
mov eax, dword [ebx + 0x51c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov edx, dword [edi]
mov ecx, 0x73c
mov eax, dword [ebx + 0x520]
call fcn.004930e8
mov edx, 0x89
mov eax, dword [ebx + 0x520]
call fcn.0044728c
mov edx, 0xc7
mov eax, dword [ebx + 0x520]
call fcn.004472c0
mov eax, dword [ebx + 0x520]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov edx, dword [edi]
mov ecx, 0x6d7
mov eax, dword [ebx + 0x3b0]
call fcn.004930e8
mov edx, 0x34
mov eax, dword [ebx + 0x3b0]
call fcn.0044728c
mov edx, 0x101
mov eax, dword [ebx + 0x3b0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xc6
mov eax, dword [ebx + 0x4b8]
call fcn.004930e8
mov edx, 0x1f
mov eax, dword [ebx + 0x4b8]
call fcn.0044728c
mov edx, 0x221
mov eax, dword [ebx + 0x4b8]
call fcn.004472c0
mov ecx, dword [0x688cd8]
mov ecx, dword [ecx]
lea eax, [ebp - 0xc]
mov edx, 0x4ce414
call fcn.00405480
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x4b8]
call fcn.004922a8
xor edx, edx
mov eax, dword [ebx + 0x4b8]
call fcn.00493140
mov edx, dword [edi]
mov ecx, 0x6d6
mov eax, dword [ebx + 0x3b4]
call fcn.004930e8
mov edx, 0x34
mov eax, dword [ebx + 0x3b4]
call fcn.0044728c
mov edx, 0x162
mov eax, dword [ebx + 0x3b4]
call fcn.004472c0
mov eax, dword [ebx + 0x3b4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3b8]
call fcn.004930e8
mov edx, 0x21a
mov eax, dword [ebx + 0x3b8]
call fcn.0044728c
mov edx, 0x54
mov eax, dword [ebx + 0x3b8]
call fcn.004472c0
xor edx, edx
mov eax, dword [ebx + 0x3b8]
call fcn.00493140
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3bc]
call fcn.004930e8
mov edx, 0x28b
mov eax, dword [ebx + 0x3bc]
call fcn.0044728c
mov edx, 0x54
mov eax, dword [ebx + 0x3bc]
call fcn.004472c0
xor edx, edx
mov eax, dword [ebx + 0x3bc]
call fcn.00493140
mov edx, dword [edi]
mov ecx, 0x73e
mov eax, dword [ebx + 0x3c0]
call fcn.004930e8
mov edx, 0xc5
mov eax, dword [ebx + 0x3c0]
call fcn.0044728c
mov edx, 0x15d
mov eax, dword [ebx + 0x3c0]
call fcn.004472c0
mov eax, dword [ebx + 0x3c0]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov edx, dword [edi]
mov ecx, 0x73d
mov eax, dword [ebx + 0x3c4]
call fcn.004930e8
mov edx, 0x11f
mov eax, dword [ebx + 0x3c4]
call fcn.0044728c
mov edx, 0x15d
mov eax, dword [ebx + 0x3c4]
call fcn.004472c0
mov eax, dword [ebx + 0x3c4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov edx, 0x3c
mov eax, dword [ebx + 0x3c8]
call fcn.004472c0
mov edx, 0xb4
mov eax, dword [ebx + 0x3c8]
call fcn.0044728c
mov edx, 0x149
mov eax, dword [ebx + 0x3c8]
call fcn.004472f4
mov edx, 0x10a
mov eax, dword [ebx + 0x3c8]
call fcn.00447328
mov eax, dword [ebx + 0x3c8]
mov dword [eax + 0x340], 0x9e
mov dword [eax + 0x348], 0xd
mov dword [eax + 0x338], 2
mov dword [eax + 0x344], 0x32
mov dword [eax + 0x34c], 4
mov dword [eax + 0x33c], 5
mov edx, 0x43
mov eax, dword [ebx + 0x554]
call fcn.004472c0
mov edx, 0x206
mov eax, dword [ebx + 0x554]
call fcn.0044728c
mov edx, 0x58
mov eax, dword [ebx + 0x554]
call fcn.004472f4
mov edx, 0x13e
mov eax, dword [ebx + 0x554]
call fcn.00447328
mov dl, 1
mov eax, dword [ebx + 0x554]
call fcn.00493140
mov eax, dword [edi]
mov edx, 0x66c
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cc83d
mov edx, dword [edi]
mov ecx, 0x66c
mov eax, dword [ebx + 0x3cc]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
mov eax, dword [ebx + 0x3cc]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sub edx, 0xc8
mov eax, dword [ebx + 0x3cc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x41c]
call fcn.004930e8
mov edx, 0x126
mov eax, dword [ebx + 0x41c]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x41c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x414]
call fcn.004930e8
mov edx, 0x10
mov eax, dword [ebx + 0x414]
call fcn.0044728c
mov edx, 0x139
mov eax, dword [ebx + 0x414]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x418]
call fcn.004930e8
mov edx, 0x4e
mov eax, dword [ebx + 0x418]
call fcn.0044728c
mov edx, 0x139
mov eax, dword [ebx + 0x418]
call fcn.004472c0
mov eax, dword [ebx + 0x418]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x40c]
call fcn.004930e8
mov edx, 0x8c
mov eax, dword [ebx + 0x40c]
call fcn.0044728c
mov edx, 0x139
mov eax, dword [ebx + 0x40c]
call fcn.004472c0
mov eax, dword [ebx + 0x40c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x410]
call fcn.004930e8
mov edx, 0xca
mov eax, dword [ebx + 0x410]
call fcn.0044728c
mov edx, 0x139
mov eax, dword [ebx + 0x410]
call fcn.004472c0
mov eax, dword [ebx + 0x410]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, 0x13
mov eax, dword [ebx + 0x524]
call fcn.0044728c
mov edx, 0x45
mov eax, dword [ebx + 0x524]
call fcn.004472c0
mov edx, 0xf5
mov eax, dword [ebx + 0x524]
call fcn.004472f4
mov edx, 0xe8
mov eax, dword [ebx + 0x524]
call fcn.00447328
mov eax, dword [ebx + 0x524]
mov dword [eax + 0x34c], 3
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x420]
call fcn.004930e8
mov edx, 0x43
mov eax, dword [ebx + 0x420]
call fcn.004472c0
mov edx, 0x10b
mov eax, dword [ebx + 0x420]
call fcn.0044728c
mov edx, 0xec
mov eax, dword [ebx + 0x420]
call fcn.00447328
mov eax, dword [ebx + 0x420]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov eax, dword [edi]
mov edx, 0x66f
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ccabf
mov edx, dword [edi]
mov ecx, 0x66f
mov eax, dword [ebx + 0x424]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [ebx + 0x3cc]
mov edx, dword [edx + 0x40]
sub edx, eax
dec edx
mov eax, dword [ebx + 0x424]
call fcn.0044728c
mov eax, dword [ebx + 0x3cc]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x424]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x428]
call fcn.004930e8
mov edx, 0x10b
mov eax, dword [ebx + 0x428]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x428]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x42c]
call fcn.004930e8
mov edx, 0x29
mov eax, dword [ebx + 0x42c]
call fcn.0044728c
mov edx, 0x153
mov eax, dword [ebx + 0x42c]
call fcn.004472c0
mov eax, dword [ebx + 0x42c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x430]
call fcn.004930e8
mov edx, 0x97
mov eax, dword [ebx + 0x430]
call fcn.0044728c
mov edx, 0x153
mov eax, dword [ebx + 0x430]
call fcn.004472c0
mov eax, dword [ebx + 0x430]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, 0x113
mov eax, dword [ebx + 0x52c]
call fcn.004472c0
mov edx, 0x19
mov eax, dword [ebx + 0x52c]
call fcn.0044728c
mov edx, 0x24
mov eax, dword [ebx + 0x52c]
call fcn.004472f4
mov edx, 0x22
mov eax, dword [ebx + 0x52c]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x530]
call fcn.004930e8
mov edx, 0xc5
mov eax, dword [ebx + 0x530]
call fcn.0044728c
mov edx, 0xf3
mov eax, dword [ebx + 0x530]
call fcn.004472c0
mov eax, dword [ebx + 0x530]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, 0x60
mov eax, dword [ebx + 0x434]
call fcn.004472c0
mov edx, 0x13
mov eax, dword [ebx + 0x434]
call fcn.0044728c
mov edx, 0xed
mov eax, dword [ebx + 0x434]
call fcn.004472f4
mov edx, 0x7f
mov eax, dword [ebx + 0x434]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x438]
call fcn.004930e8
mov eax, dword [ebx + 0x434]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x438]
call fcn.004472c0
mov eax, dword [ebx + 0x434]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x438]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x434]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x438]
call fcn.00447328
mov eax, dword [ebx + 0x438]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov eax, dword [edi]
mov edx, 0x670
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ccd54
mov edx, dword [edi]
mov ecx, 0x670
mov eax, dword [ebx + 0x43c]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [ebx + 0x3cc]
mov edx, dword [edx + 0x40]
sub edx, eax
dec edx
mov eax, dword [ebx + 0x43c]
call fcn.0044728c
mov eax, dword [ebx + 0x3cc]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x43c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x44c]
call fcn.004930e8
mov edx, 0x10b
mov eax, dword [ebx + 0x44c]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x44c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x444]
call fcn.004930e8
mov edx, 0x29
mov eax, dword [ebx + 0x444]
call fcn.0044728c
mov edx, 0x153
mov eax, dword [ebx + 0x444]
call fcn.004472c0
mov eax, dword [ebx + 0x444]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x448]
call fcn.004930e8
mov edx, 0x97
mov eax, dword [ebx + 0x448]
call fcn.0044728c
mov edx, 0x153
mov eax, dword [ebx + 0x448]
call fcn.004472c0
mov eax, dword [ebx + 0x448]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, 0x113
mov eax, dword [ebx + 0x528]
call fcn.004472c0
mov edx, 0x19
mov eax, dword [ebx + 0x528]
call fcn.0044728c
mov edx, 0x24
mov eax, dword [ebx + 0x528]
call fcn.004472f4
mov edx, 0x22
mov eax, dword [ebx + 0x528]
call fcn.00447328
mov edx, 0xf7
mov eax, dword [ebx + 0x534]
call fcn.004472c0
mov edx, 0x40
mov eax, dword [ebx + 0x534]
call fcn.0044728c
mov edx, 0xb9
mov eax, dword [ebx + 0x534]
call fcn.004472f4
mov edx, 0x13
mov eax, dword [ebx + 0x534]
call fcn.00447328
mov edx, 0x60
mov eax, dword [ebx + 0x440]
call fcn.004472c0
mov edx, 0x13
mov eax, dword [ebx + 0x440]
call fcn.0044728c
mov edx, 0xed
mov eax, dword [ebx + 0x440]
call fcn.004472f4
mov edx, 0x7f
mov eax, dword [ebx + 0x440]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x450]
call fcn.004930e8
mov eax, dword [ebx + 0x440]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x450]
call fcn.004472c0
mov eax, dword [ebx + 0x440]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x450]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x440]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x450]
call fcn.00447328
mov eax, dword [ebx + 0x450]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov edx, 0x52
mov eax, dword [ebx + 0x454]
call fcn.0044728c
mov edx, 0x30
mov eax, dword [ebx + 0x454]
call fcn.004472c0
mov edx, 0xac
mov eax, dword [ebx + 0x454]
call fcn.004472f4
mov edx, 0x10
mov eax, dword [ebx + 0x454]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x869
mov eax, dword [ebx + 0x458]
call fcn.004930e8
mov edx, 0x46
mov eax, dword [ebx + 0x458]
call fcn.0044728c
mov edx, 0x48
mov eax, dword [ebx + 0x458]
call fcn.004472c0
mov edx, 0x10
mov eax, dword [ebx + 0x458]
call fcn.00447328
mov edx, 0xb8
mov eax, dword [ebx + 0x458]
call fcn.004472f4
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov ecx, 0x78
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x350]
mov ecx, 0x64d
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x354]
mov ecx, 0x650
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x358]
mov ecx, 0x64a
call fcn.004930e8
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov eax, dword [edi]
mov edx, 0x666
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd102
mov edx, dword [edi]
mov ecx, 0x666
mov eax, dword [ebx + 0x3d0]
call fcn.004930e8
mov edx, 0xa0
mov eax, dword [ebx + 0x3d0]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sub edx, 0xc7
mov eax, dword [ebx + 0x3d0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x3e4]
call fcn.004930e8
mov edx, 0xa9
mov eax, dword [ebx + 0x3e4]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x3e4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x667
mov eax, dword [ebx + 0x3d8]
call fcn.004930e8
mov edx, 0x11
mov eax, dword [ebx + 0x3d8]
call fcn.0044728c
mov edx, 0x13
mov eax, dword [ebx + 0x3d8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x668
mov eax, dword [ebx + 0x3dc]
call fcn.004930e8
mov edx, 0x3f
mov eax, dword [ebx + 0x3dc]
call fcn.0044728c
mov edx, 0x13
mov eax, dword [ebx + 0x3dc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x669
mov eax, dword [ebx + 0x3e0]
call fcn.004930e8
mov edx, 0x6d
mov eax, dword [ebx + 0x3e0]
call fcn.0044728c
mov edx, 0x13
mov eax, dword [ebx + 0x3e0]
call fcn.004472c0
mov edx, 0x2e
mov eax, dword [ebx + 0x3d4]
call fcn.004472c0
mov edx, 0x19
mov eax, dword [ebx + 0x3d4]
call fcn.0044728c
mov edx, 0x64
mov eax, dword [ebx + 0x3d4]
call fcn.004472f4
mov edx, 0xb0
mov eax, dword [ebx + 0x3d4]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x408]
call fcn.004930e8
mov edx, 0x2b
mov eax, dword [ebx + 0x408]
call fcn.004472c0
mov edx, 0x86
mov eax, dword [ebx + 0x408]
call fcn.0044728c
mov edx, 0xbc
mov eax, dword [ebx + 0x408]
call fcn.00447328
mov eax, dword [ebx + 0x408]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov edx, dword [edi]
mov ecx, 0x66a
mov eax, dword [ebx + 0x3e8]
call fcn.004930e8
mov edx, 0x1c
mov eax, dword [ebx + 0x3e8]
call fcn.0044728c
mov edx, 0xf0
mov eax, dword [ebx + 0x3e8]
call fcn.004472c0
mov eax, dword [ebx + 0x3e8]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov edx, dword [edi]
mov ecx, 0x66b
mov eax, dword [ebx + 0x3ec]
call fcn.004930e8
mov edx, 0x58
mov eax, dword [ebx + 0x3ec]
call fcn.0044728c
mov edx, 0xf0
mov eax, dword [ebx + 0x3ec]
call fcn.004472c0
mov eax, dword [ebx + 0x3ec]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4ced74
mov eax, dword [edi]
mov edx, 0x16e
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd3a9
mov edx, dword [edi]
mov ecx, 0x16e
mov eax, dword [ebx + 0x3f0]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd376
adc edx, 0
mov eax, dword [ebx + 0x3f0]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd39e
adc edx, 0
mov eax, dword [ebx + 0x3f0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x18
mov eax, dword [ebx + 0x3fc]
call fcn.004930e8
mov edx, 0x2e
mov eax, dword [ebx + 0x3fc]
call fcn.0044728c
mov edx, 0x8d
mov eax, dword [ebx + 0x3fc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x18
mov eax, dword [ebx + 0x400]
call fcn.004930e8
mov edx, 0xa8
mov eax, dword [ebx + 0x400]
call fcn.0044728c
mov edx, 0x8d
mov eax, dword [ebx + 0x400]
call fcn.004472c0
mov eax, dword [edi]
mov edx, 0x6de
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd484
mov edx, dword [edi]
mov ecx, 0x6de
mov eax, dword [ebx + 0x460]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd451
adc edx, 0
mov eax, dword [ebx + 0x460]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd479
adc edx, 0
mov eax, dword [ebx + 0x460]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x484]
call fcn.004930e8
mov edx, 0x188
mov eax, dword [ebx + 0x484]
call fcn.0044728c
mov edx, 0x16
mov eax, dword [ebx + 0x484]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x19e
mov eax, dword [ebx + 0x46c]
call fcn.004930e8
mov edx, 0x67
mov eax, dword [ebx + 0x46c]
call fcn.0044728c
mov edx, 0x3b
mov eax, dword [ebx + 0x46c]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x1a4
mov eax, dword [ebx + 0x470]
call fcn.004930e8
mov edx, 0x67
mov eax, dword [ebx + 0x470]
call fcn.0044728c
mov edx, 0xe3
mov eax, dword [ebx + 0x470]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x1a1
mov eax, dword [ebx + 0x474]
call fcn.004930e8
mov edx, 0x14
mov eax, dword [ebx + 0x474]
call fcn.0044728c
mov edx, 0x98
mov eax, dword [ebx + 0x474]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x1a7
mov eax, dword [ebx + 0x478]
call fcn.004930e8
mov edx, 0xa6
mov eax, dword [ebx + 0x478]
call fcn.0044728c
mov edx, 0x98
mov eax, dword [ebx + 0x478]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x6df
mov eax, dword [ebx + 0x464]
call fcn.004930e8
mov edx, 0xef
mov eax, dword [ebx + 0x464]
call fcn.0044728c
mov edx, 0xf7
mov eax, dword [ebx + 0x464]
call fcn.004472c0
mov eax, dword [ebx + 0x464]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4cebbc
mov edx, dword [edi]
mov ecx, 0x6e2
mov eax, dword [ebx + 0x468]
call fcn.004930e8
mov edx, 0x143
mov eax, dword [ebx + 0x468]
call fcn.0044728c
mov edx, 0xf7
mov eax, dword [ebx + 0x468]
call fcn.004472c0
mov edx, 0x65
mov eax, dword [ebx + 0x47c]
call fcn.004472c0
mov edx, 0x3e
mov eax, dword [ebx + 0x47c]
call fcn.0044728c
mov edx, 0x64
mov eax, dword [ebx + 0x47c]
call fcn.004472f4
mov edx, 0x78
mov eax, dword [ebx + 0x47c]
call fcn.00447328
mov edx, 0x3c
mov eax, dword [ebx + 0x488]
call fcn.004472c0
mov edx, 0xde
mov eax, dword [ebx + 0x488]
call fcn.0044728c
mov edx, 0xa7
mov eax, dword [ebx + 0x488]
call fcn.004472f4
mov edx, 0xb4
mov eax, dword [ebx + 0x488]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x480]
call fcn.004930e8
mov edx, 0x3b
mov eax, dword [ebx + 0x480]
call fcn.004472c0
mov edx, 0x185
mov eax, dword [ebx + 0x480]
call fcn.0044728c
mov edx, 0xb6
mov eax, dword [ebx + 0x480]
call fcn.00447328
mov eax, dword [ebx + 0x480]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov eax, dword [edi]
mov edx, 0x6ba
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cd783
mov edx, dword [edi]
mov ecx, 0x6ba
mov eax, dword [ebx + 0x48c]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
mov eax, dword [ebx + 0x48c]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cd778
adc edx, 0
mov eax, dword [ebx + 0x48c]
call fcn.004472c0
mov edx, 0x39
mov eax, dword [ebx + 0x490]
call fcn.004472c0
mov edx, 0x1c
mov eax, dword [ebx + 0x490]
call fcn.0044728c
mov edx, 0x93
mov eax, dword [ebx + 0x490]
call fcn.004472f4
mov edx, 0x6f
mov eax, dword [ebx + 0x490]
call fcn.00447328
mov eax, dword [ebx + 0x490]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, 0x39
mov eax, dword [ebx + 0x494]
call fcn.004472c0
mov edx, 0xc4
mov eax, dword [ebx + 0x494]
call fcn.0044728c
mov edx, 0x93
mov eax, dword [ebx + 0x494]
call fcn.004472f4
mov edx, 0x6f
mov eax, dword [ebx + 0x494]
call fcn.00447328
mov eax, dword [ebx + 0x494]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x4ac]
call fcn.004930e8
mov edx, 0x171
mov eax, dword [ebx + 0x4ac]
call fcn.0044728c
mov edx, 2
mov eax, dword [ebx + 0x4ac]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4a0]
call fcn.004930e8
mov edx, 0xbe
mov eax, dword [ebx + 0x4a0]
call fcn.0044728c
mov edx, 0xb1
mov eax, dword [ebx + 0x4a0]
call fcn.004472c0
mov eax, dword [ebx + 0x4a0]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4bc]
call fcn.004930e8
mov edx, 0x10d
mov eax, dword [ebx + 0x4bc]
call fcn.0044728c
mov edx, 0xb1
mov eax, dword [ebx + 0x4bc]
call fcn.004472c0
mov eax, dword [ebx + 0x4bc]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4a8]
call fcn.004930e8
mov edx, 0x10d
mov eax, dword [ebx + 0x4a8]
call fcn.0044728c
mov edx, 0xca
mov eax, dword [ebx + 0x4a8]
call fcn.004472c0
mov eax, dword [ebx + 0x4a8]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4a4]
call fcn.004930e8
mov edx, 0xbe
mov eax, dword [ebx + 0x4a4]
call fcn.0044728c
mov edx, 0xca
mov eax, dword [ebx + 0x4a4]
call fcn.004472c0
mov eax, dword [ebx + 0x4a4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, 0x102
mov eax, dword [ebx + 0x498]
call fcn.004472c0
mov edx, 0x17
mov eax, dword [ebx + 0x498]
call fcn.0044728c
mov edx, 0x146
mov eax, dword [ebx + 0x498]
call fcn.004472f4
mov edx, 0x5c
mov eax, dword [ebx + 0x498]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x49c]
call fcn.004930e8
mov eax, dword [ebx + 0x498]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x49c]
call fcn.004472c0
mov eax, dword [ebx + 0x498]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x49c]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x498]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x49c]
call fcn.00447328
mov eax, dword [ebx + 0x49c]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov eax, dword [edi]
mov edx, 0x6bb
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cdb18
mov edx, dword [edi]
mov ecx, 0x6bb
mov eax, dword [ebx + 0x4c0]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cdae5
adc edx, 0
mov eax, dword [ebx + 0x4c0]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4cdb0d
adc edx, 0
mov eax, dword [ebx + 0x4c0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x4cc]
call fcn.004930e8
mov edx, 0x171
mov eax, dword [ebx + 0x4cc]
call fcn.0044728c
mov edx, 2
mov eax, dword [ebx + 0x4cc]
call fcn.004472c0
mov edx, 0x39
mov eax, dword [ebx + 0x4c4]
call fcn.004472c0
mov edx, 0x1c
mov eax, dword [ebx + 0x4c4]
call fcn.0044728c
mov edx, 0x93
mov eax, dword [ebx + 0x4c4]
call fcn.004472f4
mov edx, 0x6f
mov eax, dword [ebx + 0x4c4]
call fcn.00447328
mov eax, dword [ebx + 0x4c4]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, 0x39
mov eax, dword [ebx + 0x4c8]
call fcn.004472c0
mov edx, 0xc4
mov eax, dword [ebx + 0x4c8]
call fcn.0044728c
mov edx, 0x93
mov eax, dword [ebx + 0x4c8]
call fcn.004472f4
mov edx, 0x6f
mov eax, dword [ebx + 0x4c8]
call fcn.00447328
mov eax, dword [ebx + 0x4c8]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, 0x151
mov eax, dword [ebx + 0x4d8]
call fcn.004472c0
mov edx, 0x42
mov eax, dword [ebx + 0x4d8]
call fcn.0044728c
mov edx, 0x113
mov eax, dword [ebx + 0x4d8]
call fcn.004472f4
mov edx, 0x10
mov eax, dword [ebx + 0x4d8]
call fcn.00447328
mov edx, 0xcd
mov eax, dword [ebx + 0x4d0]
call fcn.004472c0
mov edx, 0x17
mov eax, dword [ebx + 0x4d0]
call fcn.0044728c
mov edx, 0x146
mov eax, dword [ebx + 0x4d0]
call fcn.004472f4
mov edx, 0x5c
mov eax, dword [ebx + 0x4d0]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x4d4]
call fcn.004930e8
mov eax, dword [ebx + 0x4d0]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x4d4]
call fcn.004472c0
mov eax, dword [ebx + 0x4d0]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x4d4]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.0044728c
mov eax, dword [ebx + 0x4d0]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x4d4]
call fcn.00447328
mov eax, dword [ebx + 0x4d4]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.004930e8
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.004930e8
mov eax, dword [edi]
mov edx, 0x6c0
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4cdd9a
mov edx, dword [edi]
mov ecx, 0x6c0
mov eax, dword [ebx + 0x4dc]
call fcn.004930e8
xor edx, edx
mov eax, dword [ebx + 0x4dc]
call fcn.0044728c
mov edx, 0x4a
mov eax, dword [ebx + 0x4dc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x4fc]
call fcn.004930e8
mov edx, 0x12e
mov eax, dword [ebx + 0x4fc]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x4fc]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x4f4]
call fcn.004930e8
mov edx, 0xad
mov eax, dword [ebx + 0x4f4]
call fcn.0044728c
mov edx, 0x121
mov eax, dword [ebx + 0x4f4]
call fcn.004472c0
mov eax, dword [ebx + 0x4f4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x4f8]
call fcn.004930e8
mov edx, 0xea
mov eax, dword [ebx + 0x4f8]
call fcn.0044728c
mov edx, 0x121
mov eax, dword [ebx + 0x4f8]
call fcn.004472c0
mov eax, dword [ebx + 0x4f8]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x6c1
mov eax, dword [ebx + 0x4e0]
call fcn.004930e8
mov edx, 0x16
mov eax, dword [ebx + 0x4e0]
call fcn.0044728c
mov edx, 0x14
mov eax, dword [ebx + 0x4e0]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x6c2
mov eax, dword [ebx + 0x4e4]
call fcn.004930e8
mov edx, 0x50
mov eax, dword [ebx + 0x4e4]
call fcn.0044728c
mov edx, 0x14
mov eax, dword [ebx + 0x4e4]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x6c3
mov eax, dword [ebx + 0x4e8]
call fcn.004930e8
mov edx, 0x8a
mov eax, dword [ebx + 0x4e8]
call fcn.0044728c
mov edx, 0x14
mov eax, dword [ebx + 0x4e8]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4ec]
call fcn.004930e8
mov edx, 0xaf
mov eax, dword [ebx + 0x4ec]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4ec]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4f0]
call fcn.004930e8
mov edx, 0xe5
mov eax, dword [ebx + 0x4f0]
call fcn.0044728c
mov edx, 0x26
mov eax, dword [ebx + 0x4f0]
call fcn.004472c0
mov edx, 0x1b
mov eax, dword [ebx + 0x500]
call fcn.0044728c
mov edx, 0x32
mov eax, dword [ebx + 0x500]
call fcn.004472c0
mov edx, 0xf9
mov eax, dword [ebx + 0x500]
call fcn.004472f4
mov edx, 0xde
mov eax, dword [ebx + 0x500]
call fcn.00447328
mov eax, dword [ebx + 0x500]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1e
mov dword [eax + 0x348], 3
mov dword [eax + 0x34c], 2
mov eax, dword [edi]
mov edx, 0x6b1
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ce038
mov edx, dword [edi]
mov ecx, 0x6b1
mov eax, dword [ebx + 0x504]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4ce005
adc edx, 0
mov eax, dword [ebx + 0x504]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4ce02d
adc edx, 0
mov eax, dword [ebx + 0x504]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x508]
call fcn.004930e8
mov edx, 0x11
mov eax, dword [ebx + 0x508]
call fcn.0044728c
mov edx, 0x15
mov eax, dword [ebx + 0x508]
call fcn.004472c0
mov eax, dword [ebx + 0x508]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x50c]
call fcn.004930e8
mov edx, 0x11
mov eax, dword [ebx + 0x50c]
call fcn.0044728c
mov edx, 0x37
mov eax, dword [ebx + 0x50c]
call fcn.004472c0
mov eax, dword [ebx + 0x50c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x510]
call fcn.004930e8
mov edx, 0x11
mov eax, dword [ebx + 0x510]
call fcn.0044728c
mov edx, 0x51
mov eax, dword [ebx + 0x510]
call fcn.004472c0
mov eax, dword [ebx + 0x510]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d0440
mov eax, dword [edi]
mov edx, 0x65b
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ce189
mov edx, dword [edi]
mov ecx, 0x65b
mov eax, dword [ebx + 0x514]
call fcn.004930e8
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404528
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4ce154
adc edx, 0
sub edx, 5
mov eax, dword [ebx + 0x514]
call fcn.0044728c
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404528
mov edx, dword [0x688994]
mov edx, dword [edx]
sub edx, eax
sub edx, 0xcd
mov eax, dword [ebx + 0x514]
call fcn.004472c0
xor edx, edx
mov eax, dword [ebx + 0x538]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x538]
call fcn.004472c0
mov edx, dword [0x6889bc]
mov edx, dword [edx]
mov eax, dword [ebx + 0x538]
call fcn.004472f4
mov edx, dword [0x688994]
mov edx, dword [edx]
mov eax, dword [ebx + 0x538]
call fcn.00447328
mov edx, dword [edi]
mov ecx, 0x8f
mov eax, dword [ebx + 0x53c]
call fcn.004930e8
mov edx, dword [0x6889bc]
mov edx, dword [edx]
mov eax, dword [ebx + 0x53c]
sub edx, dword [eax + 0x48]
call fcn.0044728c
xor edx, edx
mov eax, dword [ebx + 0x53c]
call fcn.004472c0
mov eax, dword [edi]
mov edx, 0xe8
call fcn.0048ec40
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4ce245
mov edx, dword [edi]
mov ecx, 0xe8
mov eax, dword [ebx + 0x540]
call fcn.004930e8
mov edx, 0x2a3
mov eax, dword [ebx + 0x540]
call fcn.0044728c
mov edx, 0x1b1
mov eax, dword [ebx + 0x540]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x544]
call fcn.004930e8
mov edx, 0x15
mov eax, dword [ebx + 0x544]
call fcn.0044728c
mov edx, 0x15
mov eax, dword [ebx + 0x544]
call fcn.004472c0
mov edx, dword [edi]
mov ecx, 0x73f
mov eax, dword [ebx + 0x548]
call fcn.004930e8
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, 0x10a
mov eax, dword [ebx + 0x548]
call fcn.0044728c
mov edx, 0x68
mov eax, dword [ebx + 0x548]
call fcn.004472c0
mov eax, dword [ebx + 0x548]
cmp dword [eax + 0x25c], 0
je 0x4ce2d8
mov eax, dword [ebx + 0x548]
mov eax, dword [eax + 0x25c]
mov edx, dword [ebx + 0x548]
call fcn.00492578
mov edx, dword [0x689150]
mov edx, dword [edx]
mov edx, dword [edx + 0x464]
mov eax, dword [ebx + 0x548]
mov dword [eax + 0x25c], edx
mov edx, dword [0x689150]
mov edx, dword [edx]
mov edx, dword [edx + 0x464]
xchg edx, eax
call fcn.00492600
mov eax, dword [0x689150]
mov eax, dword [eax]
mov edx, dword [ebx + 0x548]
mov dword [edx + 0x29c], eax
mov dword [edx + 0x298], 0x556d40
mov edx, dword [edi]
mov ecx, 0x741
mov eax, dword [ebx + 0x54c]
call fcn.004930e8
mov edx, dword [0x6889bc]
mov edx, dword [edx]
sub edx, 0xec
mov eax, dword [ebx + 0x54c]
call fcn.0044728c
mov edx, 0x68
mov eax, dword [ebx + 0x54c]
call fcn.004472c0
mov eax, dword [ebx + 0x54c]
cmp dword [eax + 0x25c], 0
je 0x4ce384
mov eax, dword [ebx + 0x54c]
mov eax, dword [eax + 0x25c]
mov edx, dword [ebx + 0x54c]
call fcn.00492578
mov eax, dword [0x689150]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, dword [ebx + 0x54c]
mov dword [edx + 0x25c], eax
mov eax, dword [0x689150]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, dword [ebx + 0x54c]
call fcn.00492600
mov eax, dword [ebx + 0x54c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4cf0e8
mov eax, dword [0x689150]
mov eax, dword [eax]
mov edx, dword [ebx + 0x54c]
mov dword [edx + 0x29c], eax
mov dword [edx + 0x298], 0x556d40
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ce405
lea eax, [ebp - 0xc]
call fcn.00405158
ret