Function at 0x4966c2
Capabilities:
Parse pe header
Read .ini file
Validate payment card number using luhn algorithm

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5250b7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2048
call fcn.004e8aa0
push esi
push edi
mov byte [ebp - 0x16c0], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x16bf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov word [ebp - 0x9b4], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x9b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x1900], 4
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x1280], 0
mov dword [ebp - 0x4a4], 0
mov byte [ebp - 0x4e0], 0
xor eax, eax
mov dword [ebp - 0x4df], eax
mov dword [ebp - 0x4db], eax
mov dword [ebp - 0x4d7], eax
mov dword [ebp - 0x4d3], eax
mov dword [ebp - 0x4cf], eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x127c], 0
mov dword [ebp - 0xe14], 0
mov dword [ebp - 0x1938], 0
mov dword [ebp - 0x5b4], 0
mov byte [ebp - 0x1efc], 0
mov ecx, 0xf
xor eax, eax
lea edi, [ebp - 0x1efb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea ecx, [ebp - 0x448]
call fcn.004046f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.004046f0
mov byte [ebp - 4], 1
mov byte [ebp - 0xbd0], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xbcf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1278], 0
xor ecx, ecx
mov dword [ebp - 0x1277], ecx
mov word [ebp - 0x1273], cx
mov byte [ebp - 0x1271], cl
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x5ac], 0
xor edx, edx
mov dword [ebp - 0x5a8], edx
mov dword [ebp - 0x5a4], edx
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x1ebc], 0
mov byte [ebp - 0x1934], 0
mov byte [ebp - 0x1e64], 0
xor eax, eax
mov word [ebp - 0x1e63], ax
mov dword [ebp - 0xe10], 0
mov dword [ebp - 0x1930], 0
xor ecx, ecx
mov dword [ebp - 0x192c], ecx
mov dword [ebp - 0x1928], ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xd0
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0
push str.QC_Procedure
lea eax, [ebp - 0x1efc]
push eax
call fcn.004e894d
add esp, 8
lea ecx, [ebp - 0x1efc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004aa7b3
add esp, 8
push 0x200
lea eax, [ebp - 0x424]
push eax
call fcn.004b7127
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, 0xeb2
push ecx
lea edx, [ebp - 0x424]
push edx
push str._sCID_s.ini
lea eax, [ebp - 0x224]
push eax
call fcn.004e894d
add esp, 0x10
push 0x200
push 0
lea ecx, [ebp - 0xde8]
push ecx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0xde8], pe_nt_image_headers32
mov byte [ebp - 0xde7], 0x3f
mov byte [ebp - 0xde6], 0
mov byte [ebp - 0xde5], 0
mov byte [ebp - 0xddd], 1
push 0x200
push 0
lea edx, [ebp - 0x18c0]
push edx
call fcn.004e8440
add esp, 0xc
push 0
push 0x200
lea eax, [ebp - 0x18c0]
push eax
lea ecx, [ebp - 0xde8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00482188
add esp, 0x14
test eax, eax
jne 0x4969d3
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xb8
mov dword [ebp - 0x1f74], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f74]
jmp 0x49d128
push 0x56e414
push 0
push str.FLASHID0
push 0x561a0c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x672ce8], al
push 0x56e414
push 0
push str.FLASHID1
push 0x561a20
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x672ce9], al
push 0x56e414
push 0
push str.FLASHID2
push 0x561a34
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x672cea], al
push 0x56e414
push 0
push str.FLASHID3
push 0x561a48
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x672ceb], al
push 0x56e414
push 0
push str.FLASHID4
push 0x561a5c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x672cec], al
push 0x56e414
push 0
push str.FLASHID5
push 0x561a70
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov byte [0x672ced], al
push 0x56e414
push 0
push str.InterleaveWay
push 0x561a88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1eb8], eax
push 0x56e414
push 0
push str.SPAREBLOCKRATIO
push 0x561aa0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x538], eax
push 0x56e414
push 0
push str.DRAMSize
push 0x561ab4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x510], eax
push 0x56e414
push 0
push str.DRAMSetting
push 0x561ac8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x12b4], eax
push 0x56e414
push 0
push str.DRAMVENDOR
push 0x561adc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1248], eax
push 0x56e414
push 0
push str.DRAMCLOCK
push 0x561af0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x534], eax
push 0x56e414
push 0
push str.DRAMTESTLOOP
push 0x561b08
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1eb4], eax
push 0x56e414
push 0
push str.SPEEDUPPRETEST
push 0x561b20
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x12b0], eax
push 0x56e414
push 0
push str.SLCREGIONCAPACITY
push 0x561b3c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xe0c], eax
push 0x56e414
push 0
push str.DUALDRAM
push str.TEST
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xe08], eax
push 0x56e414
push 0
push str.ADJUSTTRANNINGFAILBYPASS
push 0x561b70
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xe04], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x561b74
push 0x561b78
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x1248], 5
je 0x496beb
cmp dword [ebp - 0x1248], 6
jne 0x496bf5
mov dword [ebp - 0x1248], 0
push 0x400
push 0
lea eax, [ebp - 0x1214]
push eax
call fcn.004e8440
add esp, 0xc
push 1
lea ecx, [ebp - 0x1214]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00485346
add esp, 0xc
test eax, eax
jne 0x496c79
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc2c]
mov dword [eax + 0xc24], edx
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 2
mov dword [ebp - 0x1f78], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f78]
jmp 0x49d128
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7a3], 0
je 0x496d1c
mov edx, dword [ebp + 8]
cmp dword [edx + 0x128], 0
je 0x496d1c
mov eax, dword [ebp - 0xfb4]
and eax, 0xff
shl eax, 8
mov ecx, dword [ebp - 0xfb3]
and ecx, 0xff
add eax, ecx
mov dword [ebp - 0x1f04], eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x1f04]
cmp eax, dword [edx + 0x128]
jge 0x496d1c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xe5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xe5
mov dword [ebp - 0x1f7c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f7c]
jmp 0x49d128
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7f7], 0
jne 0x496df8
xor ecx, ecx
mov cl, byte [0x672ce8]
mov edx, dword [ebp - 0x11e4]
and edx, 0xff
cmp ecx, edx
jne 0x496d8a
xor eax, eax
mov al, byte [0x672ce9]
mov ecx, dword [ebp - 0x11e3]
and ecx, 0xff
cmp eax, ecx
jne 0x496d8a
xor edx, edx
mov dl, byte [0x672cea]
mov eax, dword [ebp - 0x11e2]
and eax, 0xff
cmp edx, eax
jne 0x496d8a
xor ecx, ecx
mov cl, byte [0x672ceb]
mov edx, dword [ebp - 0x11e1]
and edx, 0xff
cmp ecx, edx
je 0x496df8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 3
push 0x672ce8
mov edx, dword [ebp + 8]
add edx, 0x246
push edx
lea eax, [ebp - 0x1214]
push eax
call fcn.004b2b85
add esp, 0xc
mov dword [ebp - 0x1f80], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f80]
jmp 0x49d128
mov ecx, dword [ebp - 0x1210]
and ecx, 0xff
cmp ecx, 2
jne 0x496e69
mov edx, dword [ebp + 8]
push edx
call fcn.00495b7f
add esp, 4
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x496e67
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x60
mov dword [ebp - 0x1f84], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f84]
jmp 0x49d128
jmp 0x496eb9
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 4
mov dword [ebp - 0x1f88], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f88]
jmp 0x49d128
mov eax, dword [ebp + 8]
cmp dword [eax + 0x9d3], 0
je 0x496f37
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xdd
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xdd
lea eax, [ebp - 0x1214]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049d230
add esp, 8
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x496f37
mov dword [ebp - 0x1f8c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f8c]
jmp 0x49d128
mov edx, dword [ebp + 8]
cmp dword [edx + 0x9cf], 0
je 0x497144
mov byte [ebp - 0x1f1c], 0
xor eax, eax
mov dword [ebp - 0x1f1b], eax
mov dword [ebp - 0x1f17], eax
mov dword [ebp - 0x1f13], eax
mov dword [ebp - 0x1f0f], eax
mov dword [ebp - 0x1f0b], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xdc
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xdc
mov dword [ebp - 0x1254], 0
jmp 0x496fa3
mov eax, dword [ebp - 0x1254]
add eax, 1
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x200
jge 0x4970df
cmp dword [ebp - 0x1254], 0x14
jl 0x496fc5
cmp dword [ebp - 0x1254], 0x27
jle 0x496fd1
cmp dword [ebp - 0x1254], 0x1fe
jl 0x497033
cmp dword [ebp - 0x1254], 0x14
jl 0x49702e
cmp dword [ebp - 0x1254], 0x27
jg 0x49702e
mov ecx, dword [ebp - 0x1254]
and ecx, reloc.WSOCK32.dll_accept
jns 0x496ff6
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
jne 0x49702e
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp - 0x1254]
mov cl, byte [ebp + eax - 0x18bf]
mov byte [ebp + edx - 0x1f30], cl
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp - 0x1254]
mov cl, byte [ebp + eax - 0x18c0]
mov byte [ebp + edx - 0x1f2f], cl
jmp 0x496f94
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe0], 0
jne 0x497063
mov eax, dword [ebp + 8]
cmp dword [eax + 0xdc], 0
jne 0x497063
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe4], 0
jne 0x497063
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe8], 0
je 0x497080
cmp dword [ebp - 0x1254], 0xd8
jl 0x497080
cmp dword [ebp - 0x1254], 0xde
jg 0x497080
jmp 0x496f94
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0x24c]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x18c0]
cmp ecx, eax
je 0x4970da
mov dword [ebp - 0x1f90], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f90]
jmp 0x49d128
jmp 0x496f94
cmp dword [0x56cd54], 0
jle 0x49710e
lea ecx, [ebp - 0x1f1c]
push ecx
mov edx, dword [0x56cd54]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x773]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xef4]
call fcn.00504bdd
mov dword [ebp - 0x1f94], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f94]
jmp 0x49d128
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xd0
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x8c7], 0
je 0x4971bd
mov edx, dword [ebp + 8]
push edx
call fcn.00496594
add esp, 4
test eax, eax
jne 0x4971bd
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xe3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xe3
mov dword [ebp - 0x1f98], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f98]
jmp 0x49d128
mov edx, dword [ebp + 8]
cmp dword [edx + 0xb8], 0
je 0x4973ea
mov eax, dword [ebp + 8]
cmp dword [eax + 0xa4], 0
jne 0x4973ea
push 0x15
push 0x20
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x4ff
push edx
call fcn.004e9200
add esp, 4
push eax
mov eax, dword [ebp + 8]
add eax, 0x4ff
push eax
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov dword [ebp - 0x1254], 0
jmp 0x497236
mov edx, dword [ebp - 0x1254]
add edx, 2
mov dword [ebp - 0x1254], edx
cmp dword [ebp - 0x1254], 0x14
jge 0x497299
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x18ac]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0xbe7]
cmp ecx, eax
je 0x49726b
mov dword [ebp - 0x1930], 1
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x18ab]
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xbe8]
cmp edx, ecx
je 0x497297
mov dword [ebp - 0x1930], 1
jmp 0x497227
push 0x29
push 0x20
lea edx, [ebp - 0x474]
push edx
call fcn.004e8440
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x44c
push eax
call fcn.004e9200
add esp, 4
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x44c
push ecx
lea edx, [ebp - 0x474]
push edx
call fcn.004e8ae0
add esp, 0xc
mov dword [ebp - 0x1254], 0
jmp 0x4972f2
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x28
jge 0x4973ea
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x188a]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x473]
cmp edx, ecx
je 0x497372
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x473]
test eax, eax
je 0x497372
mov dword [ebp - 0x192c], 1
mov dword [ebp - 0x1f9c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1f9c]
jmp 0x49d128
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1889]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x474]
cmp edx, ecx
je 0x4973e5
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x474]
test eax, eax
je 0x4973e5
mov dword [ebp - 0x192c], 1
mov dword [ebp - 0x1fa0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fa0]
jmp 0x49d128
jmp 0x4972e3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 2
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7e7], 0
jne 0x4989fc
push 0x561b7c
lea eax, [ebp - 0x1efc]
push eax
call fcn.004e894d
add esp, 8
lea ecx, [ebp - 0x1efc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004aa7b3
add esp, 8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 8]
add eax, 0x4ff
push eax
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x15
push 0x20
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x1280]
push edx
mov eax, dword [ebp + 8]
add eax, 0x4ff
push eax
lea ecx, [ebp - 0xbe8]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x29
push 0x20
lea eax, [ebp - 0x474]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
lea eax, [ebp - 0x474]
push eax
call fcn.004e8ae0
add esp, 0xc
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x15
push 0x20
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e8440
add esp, 0xc
mov eax, dword [ebp - 0x1280]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e8ae0
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x3f
push 0
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x1280]
push edx
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 9
push 0x20
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e8ae0
add esp, 0xc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe8], 0
je 0x4978f0
mov byte [ebp - 0x1f28], 0x50
mov byte [ebp - 0x1f27], 2
mov byte [ebp - 0x1f26], 0x36
mov byte [ebp - 0x1f25], 0x10
mov edx, dword [ebp + 8]
add edx, 0x4ff
push edx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1f20], eax
mov eax, dword [ebp - 0x1f20]
sub eax, 9
mov dword [ebp - 0x1f24], eax
mov byte [ebp - 0x1f34], 0
xor ecx, ecx
mov dword [ebp - 0x1f33], ecx
mov dword [ebp - 0x1f2f], ecx
cmp dword [0x56cc54], 0
je 0x49762c
lea edx, [ebp - 0x1f28]
push edx
call fcn.004b661e
add esp, 4
mov dword [ebp - 0x1254], 0
jmp 0x497647
mov eax, dword [ebp - 0x1254]
add eax, 1
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 9
jge 0x49775b
mov ecx, dword [ebp - 0x1f24]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
cmp edx, 0x30
jl 0x4976aa
mov eax, dword [ebp - 0x1f24]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
cmp ecx, 0x39
jg 0x4976aa
mov edx, dword [ebp - 0x1f24]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
sub eax, 0x30
mov ecx, dword [ebp - 0x1254]
mov byte [ebp + ecx - 0x1f34], al
mov edx, dword [ebp - 0x1f24]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x41
jl 0x497700
mov ecx, dword [ebp - 0x1f24]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
cmp edx, 0x46
jg 0x497700
mov eax, dword [ebp - 0x1f24]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
sub ecx, 0x37
mov edx, dword [ebp - 0x1254]
mov byte [ebp + edx - 0x1f34], cl
mov eax, dword [ebp - 0x1f24]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
cmp ecx, 0x61
jl 0x497756
mov edx, dword [ebp - 0x1f24]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x66
jg 0x497756
mov ecx, dword [ebp - 0x1f24]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
sub edx, 0x57
mov eax, dword [ebp - 0x1254]
mov byte [ebp + eax - 0x1f34], dl
jmp 0x497638
mov byte [ebp - 0x1934], 0
mov ecx, dword [ebp - 0x17e8]
and ecx, 0xff
mov edx, dword [ebp - 0x1f27]
and edx, 0xff
cmp ecx, edx
jne 0x497799
mov eax, dword [ebp - 0x17e7]
and eax, 0xff
mov ecx, dword [ebp - 0x1f28]
and ecx, 0xff
cmp eax, ecx
je 0x4977a0
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e6]
and edx, 0xff
mov eax, dword [ebp - 0x1f25]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f34]
add eax, ecx
cmp edx, eax
jne 0x4977df
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
mov eax, dword [ebp - 0x1f26]
and eax, 0xff
cmp edx, eax
je 0x4977e6
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e4]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f31]
shl edx, 4
movsx eax, byte [ebp - 0x1f30]
add edx, eax
and edx, 0xff
cmp ecx, edx
jne 0x497838
mov ecx, dword [ebp - 0x17e3]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f33]
shl edx, 4
movsx eax, byte [ebp - 0x1f32]
add edx, eax
and edx, 0xff
cmp ecx, edx
je 0x49783f
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e2]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f2d]
shl edx, 4
movsx eax, byte [ebp - 0x1f2c]
add edx, eax
and edx, 0xff
cmp ecx, edx
jne 0x497891
mov ecx, dword [ebp - 0x17e1]
and ecx, 0xff
movsx edx, byte [ebp - 0x1f2f]
shl edx, 4
movsx eax, byte [ebp - 0x1f2e]
add edx, eax
and edx, 0xff
cmp ecx, edx
je 0x497898
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x1934]
and ecx, 0xff
test ecx, ecx
je 0x4978eb
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x8b
mov dword [ebp - 0x1fa4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fa4]
jmp 0x49d128
jmp 0x498489
mov eax, dword [ebp + 8]
cmp dword [eax + 0xdc], 0
je 0x497af1
mov byte [ebp - 0x1934], 0
mov byte [ebp - 0x1f38], 0x5f
mov byte [ebp - 0x1f37], 0x8d
mov byte [ebp - 0x1f36], 0xb4
mov byte [ebp - 0x1f35], 0xc0
cmp dword [0x56cc54], 0
je 0x49793b
lea ecx, [ebp - 0x1f38]
push ecx
call fcn.004b661e
add esp, 4
mov edx, dword [ebp - 0x17e8]
and edx, 0xff
mov eax, dword [ebp - 0x1f37]
and eax, 0xff
cmp edx, eax
jne 0x497972
mov ecx, dword [ebp - 0x17e7]
and ecx, 0xff
mov edx, dword [ebp - 0x1f38]
and edx, 0xff
cmp ecx, edx
je 0x497979
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e6]
and eax, 0xff
mov ecx, dword [ebp - 0x1f35]
and ecx, 0xff
movsx edx, byte [ebp - 0xbe5]
lea ecx, [ecx + edx - 0x30]
cmp eax, ecx
je 0x4979a6
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
mov eax, dword [ebp - 0x1f36]
and eax, 0xff
cmp edx, eax
je 0x4979c8
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e4]
and ecx, 0xff
movsx edx, byte [ebp - 0xbda]
sub edx, 0x30
shl edx, 4
movsx eax, byte [ebp - 0xbd9]
lea edx, [edx + eax - 0x30]
and edx, 0xff
cmp ecx, edx
je 0x4979fd
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e3]
and eax, 0xff
movsx ecx, byte [ebp - 0xbe4]
sub ecx, 0x30
shl ecx, 4
movsx edx, byte [ebp - 0xbe2]
lea ecx, [ecx + edx - 0x30]
and ecx, 0xff
cmp eax, ecx
je 0x497a31
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e2]
and edx, 0xff
movsx eax, byte [ebp - 0xbd6]
sub eax, 0x30
shl eax, 4
movsx ecx, byte [ebp - 0xbd5]
lea eax, [eax + ecx - 0x30]
and eax, 0xff
cmp edx, eax
je 0x497a65
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e1]
and ecx, 0xff
movsx edx, byte [ebp - 0xbd8]
sub edx, 0x30
shl edx, 4
movsx eax, byte [ebp - 0xbd7]
lea edx, [edx + eax - 0x30]
and edx, 0xff
cmp ecx, edx
je 0x497a9a
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x1934]
and eax, 0xff
test eax, eax
je 0x497aec
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x58
mov dword [ebp - 0x1fa8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fa8]
jmp 0x49d128
jmp 0x498489
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe0], 0
je 0x497e01
lea eax, [ebp - 0x1fac]
push eax
call fcn.00503be6
push eax
lea ecx, [ebp - 0x1f58]
call fcn.004b6d90
mov byte [ebp - 0x1f44], 0
xor ecx, ecx
mov dword [ebp - 0x1f43], ecx
mov dword [ebp - 0x1f48], 0
mov dword [ebp - 0x1f3c], 0
push 0
call fcn.004ea336
add esp, 4
mov dword [ebp - 0x1f4c], eax
lea edx, [ebp - 0x1f4c]
push edx
call fcn.004eb030
add esp, 4
mov dword [ebp - 0x1f50], eax
mov eax, dword [ebp - 0x1f50]
push eax
push 0x561b90
push 5
lea ecx, [ebp - 0x1f44]
push ecx
call fcn.004eb015
add esp, 0x10
lea edx, [ebp - 0x1f44]
push edx
call fcn.004e8897
add esp, 4
mov dword [ebp - 0x1f48], eax
lea ecx, [ebp - 0x1f58]
call fcn.004b6cd0
mov dword [ebp - 0x1f3c], eax
mov byte [ebp - 0x1934], 0
mov byte [ebp - 0x1f54], 0
xor eax, eax
mov word [ebp - 0x1f53], ax
mov byte [ebp - 0x1f51], al
mov dword [ebp - 0x1254], 0
jmp 0x497bdc
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 4
jge 0x497c78
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbd8]
cmp eax, 0x30
jl 0x497c2f
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbd8]
cmp edx, 0x39
jg 0x497c2f
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbd8]
sub ecx, 0x30
mov edx, dword [ebp - 0x1254]
mov byte [ebp + edx - 0x1f54], cl
jmp 0x497c73
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbd8]
cmp ecx, 0x41
jl 0x497c73
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbd8]
cmp eax, 0x46
jg 0x497c73
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbd8]
sub edx, 0x37
mov eax, dword [ebp - 0x1254]
mov byte [ebp + eax - 0x1f54], dl
jmp 0x497bcd
mov ecx, dword [ebp - 0x17e8]
and ecx, 0xff
cmp ecx, 0x8d
jne 0x497c9d
mov edx, dword [ebp - 0x17e7]
and edx, 0xff
cmp edx, 0x5f
je 0x497ca4
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e6]
and ecx, 0xff
mov eax, dword [ebp - 0x1f48]
cdq
mov esi, 0xa
idiv esi
and eax, 0xff
add eax, 0xc0
cmp ecx, eax
je 0x497cd3
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
cmp edx, 0xb4
je 0x497cee
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e4]
and eax, 0xff
cmp eax, 0x29
je 0x497d05
mov byte [ebp - 0x1934], 1
mov ecx, dword [ebp - 0x17e3]
and ecx, 0xff
mov eax, dword [ebp - 0x1f48]
cdq
mov esi, 0xa
idiv esi
mov esi, edx
shl esi, 4
and esi, 0xff
mov eax, dword [ebp - 0x1f3c]
cdq
mov edi, 0xa
idiv edi
and edx, 0xff
add esi, edx
cmp ecx, esi
je 0x497d4b
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e2]
and edx, 0xff
movsx eax, byte [ebp - 0x1f52]
shl eax, 4
movsx ecx, byte [ebp - 0x1f51]
add eax, ecx
and eax, 0xff
cmp edx, eax
je 0x497d7a
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x17e1]
and edx, 0xff
movsx eax, byte [ebp - 0x1f54]
shl eax, 4
movsx ecx, byte [ebp - 0x1f53]
add eax, ecx
and eax, 0xff
cmp edx, eax
je 0x497da9
mov byte [ebp - 0x1934], 1
mov edx, dword [ebp - 0x1934]
and edx, 0xff
test edx, edx
je 0x497dfc
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x58
mov dword [ebp - 0x1fb0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fb0]
jmp 0x49d128
jmp 0x498489
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe4], 0
je 0x4980ab
mov byte [ebp - 0x1f6c], 0
xor edx, edx
mov dword [ebp - 0x1f6b], edx
mov dword [ebp - 0x1f67], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x757]
sub edx, dword [ecx + 0x75b]
mov dword [ebp - 0x1f60], edx
mov eax, dword [ebp + 8]
mov ecx, 9
sub ecx, dword [eax + 0x75b]
mov dword [ebp - 0x1f5c], ecx
mov dword [ebp - 0x1254], 0
jmp 0x497e6d
mov edx, dword [ebp - 0x1254]
add edx, 1
mov dword [ebp - 0x1254], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x1254]
cmp ecx, dword [eax + 0x75b]
jge 0x497f3f
mov edx, dword [ebp - 0x1f60]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x30
jl 0x497ede
mov ecx, dword [ebp - 0x1f60]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
cmp edx, 0x39
jg 0x497ede
mov eax, dword [ebp - 0x1f60]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
sub ecx, 0x30
mov edx, dword [ebp - 0x1f5c]
add edx, dword [ebp - 0x1254]
mov byte [ebp + edx - 0x1f6c], cl
mov eax, dword [ebp - 0x1f60]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0xbe8]
cmp ecx, 0x41
jl 0x497f3a
mov edx, dword [ebp - 0x1f60]
add edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0xbe8]
cmp eax, 0x46
jg 0x497f3a
mov ecx, dword [ebp - 0x1f60]
add ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0xbe8]
sub edx, 0x37
mov eax, dword [ebp - 0x1f5c]
add eax, dword [ebp - 0x1254]
mov byte [ebp + eax - 0x1f6c], dl
jmp 0x497e5e
mov byte [ebp - 0x1934], 0
mov ecx, dword [ebp - 0x17e8]
and ecx, 0xff
cmp ecx, 0x88
jne 0x497f6b
mov edx, dword [ebp - 0x17e7]
and edx, 0xff
cmp edx, 0x58
je 0x497f72
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e6]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f6c]
add ecx, 0x40
cmp eax, ecx
jne 0x497f9f
mov edx, dword [ebp - 0x17e5]
and edx, 0xff
cmp edx, 0x91
je 0x497fa6
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e4]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f69]
shl ecx, 4
movsx edx, byte [ebp - 0x1f68]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
jne 0x497ff6
mov eax, dword [ebp - 0x17e3]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f6b]
shl ecx, 4
movsx edx, byte [ebp - 0x1f6a]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
je 0x497ffd
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x17e2]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f65]
shl ecx, 4
movsx edx, byte [ebp - 0x1f64]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
jne 0x49804d
mov eax, dword [ebp - 0x17e1]
and eax, 0xff
movsx ecx, byte [ebp - 0x1f67]
shl ecx, 4
movsx edx, byte [ebp - 0x1f66]
add ecx, edx
and ecx, 0xff
cmp eax, ecx
je 0x498054
mov byte [ebp - 0x1934], 1
mov eax, dword [ebp - 0x1934]
and eax, 0xff
test eax, eax
je 0x4980a6
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x77
mov dword [ebp - 0x1fb4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fb4]
jmp 0x49d128
jmp 0x498489
mov edx, dword [ebp + 8]
cmp dword [edx + 0xb0], 0
je 0x49824b
mov dword [ebp - 0x1254], 0
jmp 0x4980d6
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x10
jge 0x49814f
push 3
push 0
lea ecx, [ebp - 0x1e64]
push ecx
call fcn.004e8440
add esp, 0xc
push 2
mov edx, dword [ebp - 0x1254]
mov eax, dword [ebp + 8]
lea ecx, [eax + edx + 0x47d]
push ecx
lea edx, [ebp - 0x1e64]
push edx
call fcn.004e8ae0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x12b8]
push eax
lea ecx, [ebp - 0x1e64]
push ecx
call fcn.004e96f1
add esp, 0xc
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x1254]
cdq
sub eax, edx
sar eax, 1
mov dl, byte [ebp - 0xe10]
mov byte [ebp + eax - 0x1278], dl
jmp 0x4980c7
mov dword [ebp - 0x1254], 0
jmp 0x49816a
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x498246
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17e8]
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1277]
cmp edx, ecx
je 0x4981dc
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xe
mov dword [ebp - 0x1fb8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fb8]
jmp 0x49d128
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17e7]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1278]
cmp ecx, eax
je 0x498241
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xf
mov dword [ebp - 0x1fbc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fbc]
jmp 0x49d128
jmp 0x49815b
jmp 0x498489
mov edx, dword [ebp + 8]
cmp dword [edx + 0xec], 0
je 0x498356
mov dword [ebp - 0x1254], 0
jmp 0x498276
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x498356
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17e8]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0x476]
cmp edx, ecx
je 0x4982ea
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xe
mov dword [ebp - 0x1fc0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fc0]
jmp 0x49d128
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17e7]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [edx + 0x475]
cmp ecx, eax
je 0x498351
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xf
mov dword [ebp - 0x1fc4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fc4]
jmp 0x49d128
jmp 0x498267
mov edx, dword [ebp + 8]
cmp dword [edx + 0xf0], 0
je 0x498489
mov dword [ebp - 0x1254], 0
jmp 0x498381
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x10
jge 0x498489
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17e8]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0x47e]
cmp edx, ecx
je 0x498409
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
movsx eax, byte [edx + 0x47e]
test eax, eax
je 0x498409
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xe
mov dword [ebp - 0x1fc8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fc8]
jmp 0x49d128
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x17e7]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ecx + 0x47d]
cmp eax, edx
je 0x498484
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
movsx ecx, byte [eax + 0x47d]
test ecx, ecx
je 0x498484
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xf
mov dword [ebp - 0x1fcc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fcc]
jmp 0x49d128
jmp 0x498372
mov dword [ebp - 0x1254], 0
jmp 0x4984a4
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x28
jge 0x4985a2
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x188a]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x473]
cmp edx, ecx
je 0x498527
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x473]
test eax, eax
je 0x498527
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 3
mov dword [ebp - 0x1fd0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fd0]
jmp 0x49d128
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1889]
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0x474]
cmp eax, edx
je 0x49859d
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x474]
test ecx, ecx
je 0x49859d
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 4
mov dword [ebp - 0x1fd4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fd4]
jmp 0x49d128
jmp 0x498495
mov dword [ebp - 0x1254], 0
jmp 0x4985bd
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x3e
jge 0x498699
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x17be]
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x577]
cmp edx, ecx
je 0x49862f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 5
mov dword [ebp - 0x1fd8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fd8]
jmp 0x49d128
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17bd]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x578]
cmp ecx, eax
je 0x498694
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 6
mov dword [ebp - 0x1fdc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fdc]
jmp 0x49d128
jmp 0x4985ae
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
call fcn.004e9200
add esp, 4
test eax, eax
je 0x4987ad
mov dword [ebp - 0x1254], 0
jmp 0x4986ce
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x4987a8
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1892]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x1e73]
cmp edx, ecx
je 0x49873f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 7
mov dword [ebp - 0x1fe0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fe0]
jmp 0x49d128
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1891]
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x1e74]
cmp ecx, eax
je 0x4987a3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 8
mov dword [ebp - 0x1fe4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fe4]
jmp 0x49d128
jmp 0x4986bf
jmp 0x4988a8
mov dword [ebp - 0x1254], 0
jmp 0x4987c8
mov edx, dword [ebp - 0x1254]
add edx, 2
mov dword [ebp - 0x1254], edx
cmp dword [ebp - 0x1254], 8
jge 0x4988a8
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1892]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [edx + 0xc81]
cmp ecx, eax
je 0x49883c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 9
mov dword [ebp - 0x1fe8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fe8]
jmp 0x49d128
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1891]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ecx + 0xc80]
cmp eax, edx
je 0x4988a3
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0xa
mov dword [ebp - 0x1fec], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1fec]
jmp 0x49d128
jmp 0x4987b9
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x73f], 0
jne 0x49891c
mov edx, dword [ebp - 0x18bf]
and edx, 0xff
test edx, edx
jne 0x4988d4
mov eax, dword [ebp - 0x18c0]
and eax, 0xff
cmp eax, 0x40
je 0x498917
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xb
mov dword [ebp - 0x1ff0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1ff0]
jmp 0x49d128
jmp 0x4989f7
mov edx, dword [ebp + 8]
cmp dword [edx + 0x73f], 1
jne 0x49898e
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 4
jne 0x498949
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x4a
je 0x49898c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xc
mov dword [ebp - 0x1ff4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1ff4]
jmp 0x49d128
jmp 0x4989f7
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 0x84
jne 0x4989b4
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x8a
je 0x4989f7
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xd
mov dword [ebp - 0x1ff8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1ff8]
jmp 0x49d128
jmp 0x499145
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62d]
test ecx, ecx
jne 0x498a34
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x62e]
test eax, eax
jne 0x498a34
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62f]
test edx, edx
jne 0x498a34
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x630]
test ecx, ecx
je 0x498a66
push str.QC_Check_ID_table
lea edx, [ebp - 0x1efc]
push edx
call fcn.004e894d
add esp, 8
lea eax, [ebp - 0x1efc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004aa7b3
add esp, 8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x29
push 0x20
lea eax, [ebp - 0x474]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x44c
push edx
lea eax, [ebp - 0x474]
push eax
call fcn.004e8ae0
add esp, 0xc
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x15
push 0x20
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e8440
add esp, 0xc
mov eax, dword [ebp - 0x1280]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x4ff
push ecx
lea edx, [ebp - 0xbe8]
push edx
call fcn.004e8ae0
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 0x3f
push 0
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x1280]
push edx
mov eax, dword [ebp + 8]
add eax, 0x4ae
push eax
lea ecx, [ebp - 0x578]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
call fcn.004e9200
add esp, 4
mov dword [ebp - 0x1280], eax
push 9
push 0x20
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1280]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x4ed
push edx
lea eax, [ebp - 0x1e74]
push eax
call fcn.004e8ae0
add esp, 0xc
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62d]
test edx, edx
je 0x498cbb
mov dword [ebp - 0x1254], 0
jmp 0x498bbd
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 0x28
jge 0x498cbb
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x188a]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x473]
cmp edx, ecx
je 0x498c40
mov edx, dword [ebp - 0x1254]
movsx eax, byte [ebp + edx - 0x473]
test eax, eax
je 0x498c40
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 3
mov dword [ebp - 0x1ffc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x1ffc]
jmp 0x49d128
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1889]
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0x474]
cmp eax, edx
je 0x498cb6
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x474]
test ecx, ecx
je 0x498cb6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 4
mov dword [ebp - 0x2000], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2000]
jmp 0x49d128
jmp 0x498bae
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62e]
test ecx, ecx
je 0x498dc4
mov dword [ebp - 0x1254], 0
jmp 0x498ce8
mov edx, dword [ebp - 0x1254]
add edx, 2
mov dword [ebp - 0x1254], edx
cmp dword [ebp - 0x1254], 0x3e
jge 0x498dc4
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17be]
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x577]
cmp ecx, eax
je 0x498d5a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 5
mov dword [ebp - 0x2004], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2004]
jmp 0x49d128
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x17bd]
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x578]
cmp eax, edx
je 0x498dbf
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 6
mov dword [ebp - 0x2008], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2008]
jmp 0x49d128
jmp 0x498cd9
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x62f]
test edx, edx
je 0x498fe4
mov eax, dword [ebp + 8]
add eax, 0x4ed
push eax
call fcn.004e9200
add esp, 4
test eax, eax
je 0x498ee9
mov dword [ebp - 0x1254], 0
jmp 0x498e0a
mov ecx, dword [ebp - 0x1254]
add ecx, 2
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 8
jge 0x498ee4
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x1892]
mov ecx, dword [ebp - 0x1254]
movsx edx, byte [ebp + ecx - 0x1e73]
cmp eax, edx
je 0x498e7b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 7
mov dword [ebp - 0x200c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x200c]
jmp 0x49d128
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1891]
mov eax, dword [ebp - 0x1254]
movsx ecx, byte [ebp + eax - 0x1e74]
cmp edx, ecx
je 0x498edf
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 8
mov dword [ebp - 0x2010], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2010]
jmp 0x49d128
jmp 0x498dfb
jmp 0x498fe4
mov dword [ebp - 0x1254], 0
jmp 0x498f04
mov eax, dword [ebp - 0x1254]
add eax, 2
mov dword [ebp - 0x1254], eax
cmp dword [ebp - 0x1254], 8
jge 0x498fe4
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx - 0x1892]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax + 0xc81]
cmp edx, ecx
je 0x498f78
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 9
mov dword [ebp - 0x2014], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2014]
jmp 0x49d128
mov eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1891]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [edx + 0xc80]
cmp ecx, eax
je 0x498fdf
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xa
mov dword [ebp - 0x2018], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2018]
jmp 0x49d128
jmp 0x498ef5
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x630]
test eax, eax
je 0x499145
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x73f], 0
jne 0x49906a
mov edx, dword [ebp - 0x18bf]
and edx, 0xff
test edx, edx
jne 0x499022
mov eax, dword [ebp - 0x18c0]
and eax, 0xff
cmp eax, 0x40
je 0x499065
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0xb
mov dword [ebp - 0x201c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x201c]
jmp 0x49d128
jmp 0x499145
mov edx, dword [ebp + 8]
cmp dword [edx + 0x73f], 1
jne 0x4990dc
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 4
jne 0x499097
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x4a
je 0x4990da
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xc
mov dword [ebp - 0x2020], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2020]
jmp 0x49d128
jmp 0x499145
mov eax, dword [ebp - 0x18bf]
and eax, 0xff
cmp eax, 0x84
jne 0x499102
mov ecx, dword [ebp - 0x18c0]
and ecx, 0xff
cmp ecx, 0x8a
je 0x499145
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0xd
mov dword [ebp - 0x2024], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2024]
jmp 0x49d128
mov eax, 1
test eax, eax
je 0x4991bc
lea ecx, [ebp - 0xbd0]
push ecx
lea edx, [ebp - 0x1214]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0049d148
add esp, 0xc
test eax, eax
jne 0x4991bc
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 5
mov dword [ebp - 0x2028], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2028]
jmp 0x49d128
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1ec], 0
je 0x499404
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7e3]
mov dword [ebp - 0x204c], edx
cmp dword [ebp - 0x204c], 3
ja case.default.0x4991ee
mov eax, dword [ebp - 0x204c]
jmp dword [eax*4 + 0x49d138]
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.SDR_DRVSetting1_SM2246
push 0x561bc0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SDR_DRVSetting2_SM2246
push 0x561bdc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
jmp case.default.0x4991ee
lea eax, [ebp - 0x224]
push eax
push 0
push str.2_5Inch_DRVSetting_1
push 0x561bf8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.2_5Inch_DRVSetting_2
push 0x561c14
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
jmp case.default.0x4991ee
lea edx, [ebp - 0x224]
push edx
push 0
push str.mSATA_DRVSetting_1
push 0x561c2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.mSATA_DRVSetting_2
push 0x561c44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
jmp case.default.0x4991ee
lea ecx, [ebp - 0x224]
push ecx
push 0
push 0x561c48
push 0x561c5c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e68], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.NGFF_DRVSetting_1
push 0x561c74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x124c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.INTERNALCHIPNUM
push 0x561c88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1ebc], eax
lea ecx, [ebp - 0x5ac]
push ecx
lea edx, [ebp - 0x1214]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00485473
add esp, 0xc
mov dword [ebp - 0x1254], 0
jmp 0x49934a
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 4
jge 0x49938a
mov edx, dword [ebp - 0x1254]
cmp dword [ebp + edx*4 - 0x5ac], 0
je 0x499388
mov eax, dword [ebp - 0x1254]
mov ecx, dword [ebp + eax*4 - 0x5ac]
imul ecx, dword [ebp - 0x1ebc]
cmp ecx, 4
jle 0x499386
mov dword [ebp - 0x5b0], 0x11
jmp 0x49938a
jmp 0x49933b
mov edx, dword [ebp - 0x1e68]
add edx, dword [ebp - 0x5b0]
mov eax, dword [ebp - 0xb78]
and eax, 0xff
cmp edx, eax
jne 0x4993c1
mov ecx, dword [ebp - 0x124c]
add ecx, dword [ebp - 0x5b0]
mov edx, dword [ebp - 0xb77]
and edx, 0xff
cmp ecx, edx
je 0x499404
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xd7
mov dword [ebp - 0x202c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x202c]
jmp 0x49d128
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1f0], 0
je 0x49946d
mov edx, dword [ebp - 0xbc5]
and edx, 0xff
and edx, 0xf
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1e8], edx
je 0x49946d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xd8
mov dword [ebp - 0x2030], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2030]
jmp 0x49d128
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1f4], 0
je 0x4994d5
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
sar eax, 4
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7df], eax
je 0x4994d5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xd9
mov dword [ebp - 0x2034], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2034]
jmp 0x49d128
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1f8], 0
je 0x4995b5
mov dword [ebp - 0x1254], 0
jmp 0x499500
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 0xa
jge 0x499551
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx*2 - 0x18ac]
push eax
mov ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ebp + ecx*2 - 0x18ab]
push edx
push 0x561c8c
lea eax, [ebp - 0x4a0]
push eax
call fcn.00502a32
add esp, 0x10
lea ecx, [ebp - 0x4a0]
push ecx
lea ecx, [ebp - 0x448]
call fcn.0050d279
jmp 0x4994f1
lea ecx, [ebp - 0x448]
call fcn.00502bf2
lea ecx, [ebp - 0x448]
call fcn.004079e0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1fc], eax
je 0x4995b5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xda
mov dword [ebp - 0x2038], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2038]
jmp 0x49d128
push str.QC_Check_ISP
lea ecx, [ebp - 0x1efc]
push ecx
call fcn.004e894d
add esp, 8
lea edx, [ebp - 0x1efc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004aa7b3
add esp, 8
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xbff]
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x1924], 0
mov dword [ebp - 0x9d0], 0
mov dword [ebp - 0xe00], 0
mov dword [ebp - 0x1eb0], 0
mov dword [ebp - 0x9cc], 0
mov byte [ebp - 0x1e5c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1e5b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x1920], 0
mov dword [ebp - 0x1a5c], 0
mov dword [ebp - 0x123c], 0
mov byte [ebp - 0x50c], 0
mov dword [ebp - 0x1270], 0
mov dword [ebp - 0x4c8], 0
push 0x100400
call fcn.004e8f2e
add esp, 4
mov dword [ebp - 0x12ac], eax
push 0x100400
push 0
mov eax, dword [ebp - 0x12ac]
push eax
call fcn.004e8440
add esp, 0xc
push 0x100400
call fcn.004e8f2e
add esp, 4
mov dword [ebp - 0x428], eax
push 0x100400
push 0
mov ecx, dword [ebp - 0x428]
push ecx
call fcn.004e8440
add esp, 0xc
push 0x400
push 0
lea edx, [ebp - 0x1e5c]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0xde8], pe_nt_image_headers32
mov byte [ebp - 0xde7], 0xa
mov al, byte [ebp - 0xfe4]
mov byte [ebp - 0xde6], al
mov cl, byte [ebp - 0xfe3]
mov byte [ebp - 0xde5], cl
mov byte [ebp - 0xde4], 1
mov byte [ebp - 0xde0], 0x11
mov byte [ebp - 0xddd], 2
push 0
push 0x400
lea edx, [ebp - 0x1e5c]
push edx
lea eax, [ebp - 0xde8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00482188
add esp, 0x14
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x499776
mov dword [ebp - 0x1920], 1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 6
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 6
jmp 0x49a3d8
mov cl, byte [ebp - 0x1e1e]
mov byte [ebp - 0x50c], cl
push 0x200
push 0
lea edx, [ebp - 0xde8]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0xde8], pe_nt_image_headers32
mov byte [ebp - 0xde7], 0x20
mov byte [ebp - 0xddd], 2
push 0
push 0x400
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0xde8]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00482188
add esp, 0x14
test eax, eax
jne 0x4997fb
mov dword [ebp - 0x1920], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 7
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 7
jmp 0x49a3d8
push 0x100400
push 0
mov edx, dword [ebp - 0x12ac]
push edx
call fcn.004e8440
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xbff]
mov dword [ebp - 0x59c], ecx
mov edx, dword [ebp - 0x59c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xbf3]
push ecx
mov edx, dword [ebp - 0x12ac]
push edx
call fcn.004e8ae0
add esp, 0xc
mov eax, dword [ebp - 0x120a]
and eax, 0xff
and eax, 1
test eax, eax
je 0x49985c
mov dword [ebp - 0x123c], 1
mov dword [ebp - 0x1938], 0
mov ecx, dword [ebp - 0x11ea]
and ecx, 0xff
and ecx, 0x40
test ecx, ecx
je 0x499883
mov dword [ebp - 0x1938], 1
mov edx, dword [ebp - 0x11e5]
and edx, 0xff
and edx, 0x26
test edx, edx
jne 0x4998a8
mov eax, dword [ebp - 0x11e8]
and eax, 0xff
and eax, 1
test eax, eax
je 0x4998bc
mov dword [ebp - 0x1a5c], 1
mov dword [ebp - 0x1938], 0
cmp dword [ebp - 0x1938], 0
je 0x49994d
push 0x200
push 0
lea ecx, [ebp - 0xde8]
push ecx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0xde8], pe_nt_image_headers32
mov byte [ebp - 0xde7], 0x1b
mov byte [ebp - 0xddd], 2
push 0
push 0x400
lea edx, [ebp - 0x16c0]
push edx
lea eax, [ebp - 0xde8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00482188
add esp, 0x14
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
jne 0x49994d
mov dword [ebp - 0x1920], 1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 8
jmp 0x49a3d8
mov dword [ebp - 0x1254], 0
jmp 0x499968
mov ecx, dword [ebp - 0x1254]
add ecx, 2
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 0x400
jge 0x4999ae
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x16c0]
mov ecx, eax
mov edx, dword [ebp - 0x1254]
xor eax, eax
mov al, byte [ebp + edx - 0x16bf]
shl eax, 8
add ecx, eax
mov eax, dword [ebp - 0x1254]
cdq
sub eax, edx
sar eax, 1
mov word [ebp + eax*2 - 0x9b4], cx
jmp 0x499959
mov cl, byte [ebp - 0x11e9]
mov byte [ebp - 0x1f00], cl
mov dl, byte [ebp - 0x1209]
mov byte [ebp - 0x18fc], dl
mov eax, dword [ebp - 0x18fc]
and eax, 0xff
and eax, 7
add eax, 1
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x18fc]
and ecx, 0xff
and ecx, 0x38
sar ecx, 3
add ecx, 1
mov dword [ebp - 0xe00], ecx
cmp dword [ebp - 0x123c], 0
je 0x499a2b
mov edx, dword [ebp - 0x50c]
and edx, 0xff
test edx, edx
je 0x499a2b
mov ecx, dword [ebp - 0x50c]
and ecx, 0xff
mov eax, dword [ebp - 0x9d0]
shl eax, cl
mov dword [ebp - 0x9d0], eax
mov byte [ebp - 0x1284], 1
mov dword [ebp - 0x1900], 8
mov ecx, dword [ebp - 0x1f00]
and ecx, 0xff
and ecx, 1
test ecx, ecx
je 0x499a59
mov dword [ebp - 0x1900], 8
mov edx, dword [ebp - 0x1f00]
and edx, 0xff
and edx, 2
test edx, edx
je 0x499a76
mov dword [ebp - 0x1900], 0x10
mov eax, dword [ebp - 0x1f00]
and eax, 0xff
and eax, 4
test eax, eax
je 0x499a92
mov dword [ebp - 0x1900], 0x20
mov ecx, dword [ebp - 0x1f00]
and ecx, 0xff
and ecx, 8
test ecx, ecx
je 0x499aaf
mov dword [ebp - 0x1900], 0x40
mov dword [ebp - 0x20], 0x40
mov edx, dword [ebp - 0x1f00]
and edx, 0xff
and edx, 0x10
test edx, edx
je 0x499ad2
mov dword [ebp - 0x20], 0x80
jmp 0x499b43
mov eax, dword [ebp - 0x1f00]
and eax, 0xff
and eax, 0x20
test eax, eax
je 0x499aed
mov dword [ebp - 0x20], 0x100
jmp 0x499b43
mov ecx, dword [ebp - 0x1f00]
and ecx, 0xff
and ecx, 0x40
test ecx, ecx
je 0x499b09
mov dword [ebp - 0x20], 0xc0
jmp 0x499b43
mov edx, dword [ebp - 0x1f00]
and edx, 0xff
and edx, 0x80
test edx, edx
je 0x499b28
mov dword [ebp - 0x20], 0x102
jmp 0x499b43
mov eax, dword [ebp - 0x11e5]
and eax, 0xff
and eax, 0x80
test eax, eax
je 0x499b43
mov dword [ebp - 0x20], 0x200
mov ecx, dword [ebp - 0x1900]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x11e7]
and edx, 0xff
and edx, 0xe0
sar edx, 5
add edx, 1
mov dword [ebp - 0x1240], edx
mov eax, dword [ebp - 0x1240]
imul eax, dword [ebp - 0x1900]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x1284]
and ecx, 0xff
mov edx, dword [ebp - 0x4e8]
imul edx, ecx
mov dword [ebp - 0x4e8], edx
cmp dword [ebp - 0x4e8], 0x80
jl 0x499bb1
mov dword [ebp - 0x1270], 1
mov eax, dword [ebp - 0x1211]
and eax, 0xff
cmp dword [ebp - 0x4e8], eax
je 0x499bed
mov dword [ebp - 0x1920], 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 9
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 9
jmp 0x49a3d8
mov eax, dword [ebp - 0x59c]
sub eax, 0x400
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x1270], 0
je 0x499c90
mov eax, dword [ebp - 0x4e8]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x47c]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
mov dword [ebp - 0x4a4], eax
mov ecx, dword [ebp - 0x47c]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
test edx, edx
je 0x499c5b
mov edx, dword [ebp - 0x4a4]
add edx, 1
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x4a4]
add eax, 1
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x478]
and ecx, reloc.WSOCK32.dll_accept
jns 0x499c7d
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x499c90
mov edx, dword [ebp - 0x478]
add edx, 1
mov dword [ebp - 0x478], edx
mov ecx, dword [ebp - 0x4e8]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
mov dword [ebp - 0x1250], eax
mov ecx, dword [ebp - 0x4e8]
shl ecx, 9
mov eax, dword [ebp - 0x9cc]
xor edx, edx
div ecx
test edx, edx
je 0x499ccf
mov edx, dword [ebp - 0x1250]
add edx, 1
mov dword [ebp - 0x1250], edx
mov eax, dword [ebp - 0x1250]
add eax, 1
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x1270], 0
je 0x499d1c
mov ecx, dword [ebp - 0x47c]
shl ecx, 9
push ecx
call fcn.004e8f2e
add esp, 4
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x47c]
shl edx, 9
push edx
push 0
mov eax, dword [ebp - 0x530]
push eax
call fcn.004e8440
add esp, 0xc
jmp 0x499d4f
mov ecx, dword [ebp - 0x4e8]
shl ecx, 9
push ecx
call fcn.004e8f2e
add esp, 4
mov dword [ebp - 0x530], eax
mov edx, dword [ebp - 0x4e8]
shl edx, 9
push edx
push 0
mov eax, dword [ebp - 0x530]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x9d0]
imul ecx, dword [ebp - 0xe00]
mov dword [ebp - 0x1eb0], ecx
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x1eb0]
mov dword [ebp - 0x12a4], edx
cmp dword [ebp - 0x1270], 0
je 0x499db6
mov eax, dword [ebp - 0x47c]
add eax, 1
shl eax, 9
push eax
call fcn.004e8f2e
add esp, 4
mov dword [ebp - 0x4ac], eax
mov ecx, dword [ebp - 0x47c]
add ecx, 1
shl ecx, 9
push ecx
push 0
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e8440
add esp, 0xc
jmp 0x499def
mov eax, dword [ebp - 0x4e8]
add eax, 1
shl eax, 9
push eax
call fcn.004e8f2e
add esp, 4
mov dword [ebp - 0x4ac], eax
mov ecx, dword [ebp - 0x4e8]
add ecx, 1
shl ecx, 9
push ecx
push 0
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e8440
add esp, 0xc
mov dword [ebp - 0x1904], 0
jmp 0x499e0a
mov eax, dword [ebp - 0x1904]
add eax, 1
mov dword [ebp - 0x1904], eax
cmp dword [ebp - 0x1904], 2
jae 0x49a2b3
cmp dword [ebp - 0x1270], 0
je 0x499e2e
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x12bc], ecx
jmp 0x499e3a
mov edx, dword [ebp - 0x4e4]
mov dword [ebp - 0x12bc], edx
push 0x100400
push 0
mov eax, dword [ebp - 0x428]
push eax
call fcn.004e8440
add esp, 0xc
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x598], 0
jmp 0x499e75
mov ecx, dword [ebp - 0x598]
add ecx, 1
mov dword [ebp - 0x598], ecx
mov edx, dword [ebp - 0x598]
cmp edx, dword [ebp - 0x12bc]
jge 0x49a280
mov dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x1270], 0
je 0x499f60
mov eax, dword [ebp - 0x598]
cdq
sub eax, edx
sar eax, 1
cdq
idiv dword [ebp - 0x1eb0]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x598]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x1e60]
imul ecx, dword [ebp - 0x1eb0]
sub eax, ecx
mov dword [ebp - 0x12a8], eax
mov eax, dword [ebp - 0x12a8]
cdq
idiv dword [ebp - 0xe00]
mov dword [ebp - 0x12c0], eax
mov edx, dword [ebp - 0x12c0]
imul edx, dword [ebp - 0xe00]
mov eax, dword [ebp - 0x12a8]
sub eax, edx
mov dword [ebp - 0x1288], eax
mov ecx, dword [ebp - 0x598]
and ecx, reloc.WSOCK32.dll_accept
jns 0x499f17
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x499f27
mov dword [ebp - 0x4c8], 1
jmp 0x499f31
mov dword [ebp - 0x4c8], 0
mov edx, dword [ebp - 0x47c]
mov dword [ebp - 0x57c], edx
push 4
push 0
mov eax, dword [ebp - 0x4ac]
push eax
call fcn.004e8440
add esp, 0xc
cmp dword [ebp - 0x598], 1
jne 0x499f5e
jmp 0x499e66
jmp 0x499fdb
mov eax, dword [ebp - 0x598]
cdq
idiv dword [ebp - 0x1eb0]
mov dword [ebp - 0x1e60], eax
mov ecx, dword [ebp - 0x1e60]
imul ecx, dword [ebp - 0x1eb0]
mov edx, dword [ebp - 0x598]
sub edx, ecx
mov dword [ebp - 0x12a8], edx
mov eax, dword [ebp - 0x12a8]
cdq
idiv dword [ebp - 0xe00]
mov dword [ebp - 0x12c0], eax
mov eax, dword [ebp - 0x12c0]
imul eax, dword [ebp - 0xe00]
mov ecx, dword [ebp - 0x12a8]
sub ecx, eax
mov dword [ebp - 0x1288], ecx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x57c], edx
push 4
push 0
mov eax, dword [ebp - 0x4ac]
push eax
call fcn.004e8440
add esp, 0xc
push 0x10
push 0
lea ecx, [ebp - 0xde8]
push ecx
call fcn.004e8440
add esp, 0xc
push 4
push 0
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0xde8], pe_nt_image_headers32
mov byte [ebp - 0xde7], 0xa
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xc7c]
mov byte [ebp - 0xde6], cl
mov edx, dword [ebp + 8]
mov al, byte [edx + 0xc7e]
mov byte [ebp - 0xde5], al
cmp dword [ebp - 0x1904], 0
je 0x49a045
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0xc7f]
mov byte [ebp - 0xde5], dl
mov al, byte [ebp - 0x1e60]
mov byte [ebp - 0xde4], al
mov byte [ebp - 0xde3], 0
cmp dword [ebp - 0x1a5c], 0
je 0x49a06a
mov byte [ebp - 0xde0], 0x15
jmp 0x49a071
mov byte [ebp - 0xde0], 5
cmp dword [ebp - 0x4c8], 0
je 0x49a08b
mov cl, byte [ebp - 0xde0]
or cl, 0x80
mov byte [ebp - 0xde0], cl
jmp 0x49a09a
mov dl, byte [ebp - 0xde0]
and dl, 0x7f
mov byte [ebp - 0xde0], dl
mov eax, dword [ebp - 0x12c0]
shl eax, 3
or eax, dword [ebp - 0x1288]
mov byte [ebp - 0xdde], al
mov ecx, dword [ebp - 0x57c]
add ecx, 1
mov byte [ebp - 0xddd], cl
cmp dword [ebp - 0x1938], 0
je 0x49a13e
mov dword [ebp - 0x5b4], 1
mov dword [ebp - 0x1f70], 0
jmp 0x49a0ec
mov edx, dword [ebp - 0x1f70]
add edx, 1
mov dword [ebp - 0x1f70], edx
cmp dword [ebp - 0x1f70], 0x200
jge 0x49a126
mov eax, dword [ebp - 0x1f70]
xor ecx, ecx
mov cx, word [ebp + eax*2 - 0x9b4]
mov edx, dword [ebp - 0x1e60]
and edx, 0xffff
cmp ecx, edx
jne 0x49a124
mov dword [ebp - 0x5b4], 0
jmp 0x49a126
jmp 0x49a0dd
cmp dword [ebp - 0x5b4], 0
je 0x49a13e
mov eax, dword [ebp - 0x12bc]
add eax, 1
mov dword [ebp - 0x12bc], eax
cmp dword [ebp - 0x5b4], 0
je 0x49a14c
jmp 0x499e66
lea ecx, [ebp - 0xde8]
push ecx
mov edx, dword [ebp - 0x57c]
add edx, 1
shl edx, 9
push edx
mov eax, dword [ebp - 0x4ac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x232]
push edx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0x21d]
push ecx
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x21c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x236]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x226]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x222]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
call fcn.0047fde5
add esp, 0x28
mov dword [ebp - 0x193c], eax
cmp dword [ebp - 0x193c], 0
je 0x49a271
cmp dword [ebp - 0x598], 0
jne 0x49a1fa
mov eax, dword [ebp - 0x57c]
shl eax, 9
push eax
mov ecx, dword [ebp - 0x4ac]
push ecx
mov edx, dword [ebp - 0x530]
push edx
call fcn.004e8ae0
add esp, 0xc
mov dword [ebp - 0x1244], 0
jmp 0x49a26f
cmp dword [ebp - 0x52c], 0
jne 0x49a232
push 0x400
mov eax, dword [ebp - 0x530]
push eax
mov ecx, dword [ebp - 0x428]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov dword [ebp - 0x1924], 0x400
mov dword [ebp - 0x52c], 1
mov edx, dword [ebp - 0x57c]
shl edx, 9
push edx
mov eax, dword [ebp - 0x4ac]
push eax
mov ecx, dword [ebp - 0x428]
add ecx, dword [ebp - 0x1924]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov edx, dword [ebp - 0x57c]
shl edx, 9
mov eax, dword [ebp - 0x1924]
add eax, edx
mov dword [ebp - 0x1924], eax
jmp 0x49a27b
mov dword [ebp - 0x127c], 1
jmp 0x499e66
cmp dword [ebp - 0x127c], 0
je 0x49a2ae
cmp dword [ebp - 0x1904], 0
jne 0x49a2a1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xd1
jmp 0x49a2ae
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0xd2
jmp 0x499dfb
cmp dword [ebp - 0x127c], 0
je 0x49a2d8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xa
mov dword [ebp - 0x1920], 1
jmp 0x49a3d8
push 0x100
mov ecx, dword [ebp - 0x428]
add ecx, 0x180
push ecx
lea edx, [ebp - 0x1a3c]
push edx
call fcn.004e8ae0
add esp, 0xc
mov eax, dword [ebp + 8]
cmp dword [eax + 0xb8], 0
jne 0x49a315
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x214], 0
je 0x49a3d8
mov dword [ebp - 0x1254], 0
jmp 0x49a330
mov edx, dword [ebp - 0x1254]
add edx, 1
mov dword [ebp - 0x1254], edx
mov eax, dword [ebp - 0x1254]
cmp eax, dword [ebp - 0x59c]
jge 0x49a3d8
cmp dword [ebp - 0x1254], 0
jl 0x49a357
cmp dword [ebp - 0x1254], 0x400
jl 0x49a36f
cmp dword [ebp - 0x1254], 0x20400
jl 0x49a371
cmp dword [ebp - 0x1254], 0x20600
jge 0x49a371
jmp 0x49a321
mov ecx, dword [ebp - 0x428]
add ecx, dword [ebp - 0x1254]
xor edx, edx
mov dl, byte [ecx]
mov eax, dword [ebp - 0x12ac]
add eax, dword [ebp - 0x1254]
xor ecx, ecx
mov cl, byte [eax]
cmp edx, ecx
je 0x49a3d3
mov edx, dword [ebp + 8]
cmp dword [edx + 0xb8], 0
je 0x49a3ad
mov dword [ebp - 0x1928], 1
jmp 0x49a3d1
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x52
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0x52
mov dword [ebp - 0x1920], 1
jmp 0x49a3d8
jmp 0x49a321
cmp dword [ebp - 0x12ac], 0
je 0x49a3f0
mov edx, dword [ebp - 0x12ac]
push edx
call fcn.004e8e1d
add esp, 4
cmp dword [ebp - 0x428], 0
je 0x49a408
mov eax, dword [ebp - 0x428]
push eax
call fcn.004e8e1d
add esp, 4
cmp dword [ebp - 0x530], 0
je 0x49a420
mov ecx, dword [ebp - 0x530]
push ecx
call fcn.004e8e1d
add esp, 4
cmp dword [ebp - 0x4ac], 0
je 0x49a438
mov edx, dword [ebp - 0x4ac]
push edx
call fcn.004e8e1d
add esp, 4
cmp dword [ebp - 0x1920], 0
je 0x49a477
mov dword [ebp - 0x203c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x203c]
jmp 0x49d128
mov eax, dword [ebp + 8]
cmp dword [eax + 0xb8], 0
je 0x49a530
mov dword [ebp - 0x1254], 0
jmp 0x49a4a2
mov ecx, dword [ebp - 0x1254]
add ecx, 1
mov dword [ebp - 0x1254], ecx
cmp dword [ebp - 0x1254], 3
jge 0x49a51d
mov edx, dword [ebp - 0x1254]
cmp dword [ebp + edx*4 - 0x1930], 0
je 0x49a518
mov eax, dword [ebp - 0x1254]
add eax, 0xe0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], eax
lea edx, [ebp - 0x1930]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004abc64
add esp, 8
mov dword [ebp - 0x2040], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2040]
jmp 0x49d128
jmp 0x49a493
lea ecx, [ebp - 0x1930]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004abc64
add esp, 8
push str.QC_Check_CID
lea eax, [ebp - 0x1efc]
push eax
call fcn.004e894d
add esp, 8
lea ecx, [ebp - 0x1efc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004aa7b3
add esp, 8
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x224]
push eax
push 0
push str.EnableWriteProtect
push 0x561cc8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1238], eax
lea ecx, [ebp - 0x224]
push ecx
push 1
push str.ENABLEDUMMYWRITE
push 0x561ce0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x594], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.POWERONSWAPACTIVEBLOCK
push 0x561cfc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x191c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.POWERONREFRESHTIMETH
push 0x561d18
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdfc], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.SCANPAGEDIV
push 0x561d28
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18f8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.REFRESHERRORBITTH
push 0x561d40
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x440], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.REFRESHPAGECNT
push 0x561d54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x43c], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.CMDNUMTRIGREFRESH
push 0x561d6c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x49c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.IDLETIMETRIGREFRESH
push 0x561d84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x126c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.TRIGLOOKAHEADCONTTH
push 0x561d9c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x508], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.CONTREADLENGTH
push 0x561db0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdf8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.MULTICHDIVPROG
push 0x561dc4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18f4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ENPROGWPRO
push 0x561dd4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdf4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.FERRIENDEBUG
push 0x561de8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1eac], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.LOOKAHEAD
push 0x561df8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.FERRIBREDA
push 0x561e08
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENPREREADINPAGE
push 0x561e1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1ea8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DATAFLUSHGPIO
push 0x561e30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DATAFLUSH4V
push 0x561e40
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a58], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.FLASHMAXPE
push 0x561e50
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a54], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SMARTMAXPE
push 0x561e60
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18f0], eax
lea eax, [ebp - 0x224]
push eax
push 0xa
push str.SMARTMINSPARE
push 0x561e74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1918], eax
lea ecx, [ebp - 0x224]
push ecx
push 3
push str.DRAMCACHESIZE
push 0x561e88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.EnableSmart
push 0x561e98
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x438], eax
lea eax, [ebp - 0x224]
push eax
push 1
push str.ENABLE_RTBB_REMAPPING
push 0x561eb4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x590], eax
lea ecx, [ebp - 0x224]
push ecx
push 1
push str.ENABLE_LBA48
push 0x561ec8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENABLE_SYSBLK_CHECKSUM
push 0x561ee4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ENABLE_IDLE_SCAN
push 0x561efc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x12a0], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLE_FILLWL_FLUSHCACHE
push 0x561f1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x494], eax
lea edx, [ebp - 0x224]
push edx
push 0x64
push str.READ_THRESHOLD
push 0x561f30
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4c4], eax
lea eax, [ebp - 0x224]
push eax
push 2
push str.DELAYTIME_D2H
push 0x561f44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1268], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLE_CUSTOM_WLCOUNT
push 0x561f60
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x504], eax
lea edx, [ebp - 0x224]
push edx
push 0x64
push str.CUSTOM_WLCOUNT
push 0x561f74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x58c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DDRCLOCKSETTING
push 0x561f88
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9c8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ASYNCCLOCKSETTING
push 0x561fa0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x524], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENSUPERVISORCLOCKSETTING
push 0x561fc0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18ec], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.EnableEarlyMoveAndretire
push 0x561fe0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a50], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.EarlyMoveThreshold
push 0x561ff8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x500], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.EarlyRetireThreshold
push 0x562014
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18e8], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.EarlyRetirePE
push 0x562028
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdf0], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.DrivingSetting
push 0x56203c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x434], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DrivingSetting2
push 0x562050
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x122c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ONFIDrivingSetting
push 0x562068
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9c4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ONFIDrivingSetting2
push 0x562080
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4fc], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.QUICKERASE
push 0x562090
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x490], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.EnableSyncMode
push 0x5620a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18e4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.EnableNCQ
push 0x5620b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4c0], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SATATXATTENUATION
push 0x5620cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9c0], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.MAXSATASPEED
push 0x5620e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18e0], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.DELAYSATASIGNATURE
push 0x5620f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1228], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTHOURS
push 0x562108
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1224], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTLOOPS
push 0x562118
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x588], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RETURNUNC
push 0x562128
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1264], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.LTSSETUPTIME
push 0x56213c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18dc], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.LTSTESTTIME
push 0x56214c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RDTTYPE
push 0x562158
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x520], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTFLASHTYPE
push 0x56216c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1260], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTECCFAILTH
push 0x562180
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x125c], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RDTERASEFAILTH
push 0x562194
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x129c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTPROGRAMFAILTH
push 0x5621ac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18d8], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTTEMPERATUREFAILTH
push 0x5621c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9bc], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.HIPM
push 0x5621d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x584], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DIPM
push 0x5621e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a4c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.STANDBYMODE
push 0x5621f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18d4], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.PARTIAL2SLUMBER
push 0x562204
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1298], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENCACHEPROGRAM
push 0x562218
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18d0], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.PROGRAMFAILHANDLE
push 0x562230
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1294], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLEDRAMSRT
push 0x562244
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18cc], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.ENABLEFIXTEMPERATURE
push 0x562260
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.ADJUSTTEMPERATURE
push 0x562278
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1220], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ERASECOUNTTH
push 0x56228c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.SPAREBLOCKNUMBERTH
push 0x5622a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1ea4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.SMARTVENDORID
push 0x5622b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x488], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.READRETRYITERATION
push 0x5622d0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18c8], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x5622d4
push 0x5622d8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4bc], eax
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x1e94]
push ecx
lea edx, [ebp - 0x1ea0]
push edx
call fcn.004b676d
add esp, 0xc
lea eax, [ebp - 0x224]
push eax
push 0
push str.TranscendTSBTek
push 0x5622ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.RAMAXEL
push 0x5622f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x51c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x5622fc
push 0x562300
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x562304
push 0x562308
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x430], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.PHYEvent
push 0x562318
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18c4], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.CMD31
push 0x562324
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b4], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DEVICESLEEPMODE
push 0x562338
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1290], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.DISABLESMARTTEMPERATURE
push 0x562354
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x484], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.TOGGLEDASP
push 0x562364
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a48], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DISABLESSC
push 0x562374
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x9b8], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.FORCEENWRITECACHE
push 0x56238c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x121c], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.FLUSHDRAM
push 0x56239c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x42c], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DEVICESLEEPNOSLUMBER
push 0x5623b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xdec], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.TMP102
push 0x5623c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1914], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DISABLEATAWRITECACHE
push 0x5623e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1218], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.OUTPUTUART
push 0x5623f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1258], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.INNODISKFEATURE
push 0x562404
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4f0], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.CUSTOMIZEDFEATURE
push 0x56241c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.APROFEATURE
push 0x56242c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.APROOPTION
push 0x56243c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x518], eax
lea edx, [ebp - 0x224]
push edx
push 0
push 0x562440
push 0x562444
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e88], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x562448
push 0x56244c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4ec], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.IEEE1667
push 0x56245c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x580], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.RDTECCTH
push 0x56246c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x514], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.RDTECCTH1
push 0x56247c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x128c], eax
lea ecx, [ebp - 0x224]
push ecx
push 0
push str.ENABLEPETEST
push 0x562490
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a44], eax
lea edx, [ebp - 0x224]
push edx
push 0
push str.DELAYTOREAD
push 0x5624a0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1a40], eax
lea eax, [ebp - 0x224]
push eax
push 0
push str.DELAYTOWRITE
push 0x5624b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b0], eax
push 0x200
lea ecx, [ebp - 0x424]
push ecx
call fcn.004b7127
add esp, 8
mov edx, dword [ebp + 8]
add edx, 0xeb2
push edx
lea eax, [ebp - 0x424]
push eax
push str._sConfig_s.ini
lea ecx, [ebp - 0x224]
push ecx
call fcn.004e894d
add esp, 0x10
mov byte [ebp - 0x1e84], 0x27
mov byte [ebp - 0x1e83], 0x8b
mov byte [ebp - 0x1e82], 0x8c
mov byte [ebp - 0x1e81], 0x8d
mov byte [ebp - 0x1e80], 0x25
mov byte [ebp - 0x1e7f], 0x8f
mov byte [ebp - 0x1e7e], 0x90
mov byte [ebp - 0x1e7d], 0x91
mov byte [ebp - 0x1e7c], 0x92
mov byte [ebp - 0x1e7b], 0x27
mov byte [ebp - 0x1e7a], 0x94
mov byte [ebp - 0x1e79], 0x95
mov byte [ebp - 0x1e78], 0x96
mov byte [ebp - 0x1e77], 0x97
mov byte [ebp - 0x1e76], 0x29
mov byte [ebp - 0x1e75], 0x99
mov byte [ebp - 0x1910], 0x8f
mov byte [ebp - 0x190f], 0x87
mov byte [ebp - 0x190e], 0x88
mov byte [ebp - 0x190d], 0x23
mov byte [ebp - 0x190c], 0x8a
mov byte [ebp - 0x190b], 0x8b
mov byte [ebp - 0x190a], 0x8c
mov byte [ebp - 0x1909], 0x8d
mov byte [ebp - 0x1908], 0x25
mov byte [ebp - 0x1907], 0x8f
mov dword [ebp - 0xe14], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7e7], 0
je 0x49c076
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x618]
test ecx, ecx
je 0x49b327
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 1
cmp edx, dword [ebp - 0x18e4]
je 0x49b327
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x10
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x619]
test edx, edx
je 0x49b35c
mov eax, dword [ebp - 0x1a3c]
and eax, 0xff
and eax, 2
mov ecx, dword [ebp - 0x4c0]
shl ecx, 1
cmp eax, ecx
je 0x49b35c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x11
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x61c]
test ecx, ecx
je 0x49b392
mov edx, dword [ebp - 0x1a3b]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x18d0]
shl eax, 1
cmp edx, eax
je 0x49b392
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x13
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x61b]
test eax, eax
je 0x49b3c9
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1264]
shl edx, 2
cmp ecx, edx
je 0x49b3c9
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x14
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x620]
test edx, edx
je 0x49b3ff
mov eax, dword [ebp - 0x1a3b]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x18d4]
shl ecx, 3
cmp eax, ecx
je 0x49b3ff
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x15
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x61a]
test ecx, ecx
je 0x49b436
mov edx, dword [ebp - 0x1a3b]
and edx, 0xff
and edx, 0x40
mov eax, dword [ebp - 0x1298]
shl eax, 6
cmp edx, eax
je 0x49b436
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x16
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x61f]
test eax, eax
je 0x49b46d
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x1a4c]
shl edx, 4
cmp ecx, edx
je 0x49b46d
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x17
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x61e]
test edx, edx
je 0x49b4a3
mov eax, dword [ebp - 0x1a3b]
and eax, 0xff
and eax, 0x20
mov ecx, dword [ebp - 0x584]
shl ecx, 5
cmp eax, ecx
je 0x49b4a3
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x18
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62c]
test ecx, ecx
je 0x49b53e
cmp dword [ebp - 0x18e0], 0
jne 0x49b4e4
mov edx, dword [ebp - 0x1a3a]
and edx, 0xff
sar edx, 2
and edx, 3
cmp edx, 1
je 0x49b4e2
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x19
jmp 0x49b53e
cmp dword [ebp - 0x18e0], 1
jne 0x49b513
mov ecx, dword [ebp - 0x1a3a]
and ecx, 0xff
sar ecx, 2
and ecx, 3
cmp ecx, 2
je 0x49b511
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x1a
jmp 0x49b53e
cmp dword [ebp - 0x18e0], 2
jne 0x49b53e
mov eax, dword [ebp - 0x1a3a]
and eax, 0xff
sar eax, 2
and eax, 3
test eax, eax
je 0x49b53e
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x627]
test eax, eax
je 0x49b57b
mov ecx, dword [ebp - 0x1a04]
and ecx, 0xff
mov edx, dword [ebp - 0x1224]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49b57b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x1d
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x64d]
test edx, edx
je 0x49b5d7
mov eax, dword [ebp - 0x1a03]
and eax, 0xff
test eax, eax
je 0x49b5d7
mov ecx, dword [ebp - 0x1a03]
and ecx, 0xff
cmp ecx, 0xff
je 0x49b5d7
mov edx, dword [ebp - 0x1a03]
and edx, 0xff
mov eax, dword [ebp - 0x9bc]
add eax, 0x13
and eax, 0xff
cmp edx, eax
je 0x49b5d7
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x5d
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x628]
test eax, eax
je 0x49b614
mov ecx, dword [ebp - 0x1a02]
and ecx, 0xff
mov edx, dword [ebp - 0x18dc]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49b614
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x40
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x629]
test edx, edx
je 0x49b650
mov eax, dword [ebp - 0x1a01]
and eax, 0xff
mov ecx, dword [ebp - 0x4f8]
and ecx, 0xff
and ecx, 0xff
cmp eax, ecx
je 0x49b650
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x41
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x624]
test ecx, ecx
je 0x49b68b
mov edx, dword [ebp - 0x19ff]
and edx, 0xff
mov eax, dword [ebp - 0x125c]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49b68b
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1e
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x625]
test eax, eax
je 0x49b6c8
mov ecx, dword [ebp - 0x19fd]
and ecx, 0xff
mov edx, dword [ebp - 0x18d8]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49b6c8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x20
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x626]
test edx, edx
je 0x49b704
mov eax, dword [ebp - 0x19fe]
and eax, 0xff
mov ecx, dword [ebp - 0x129c]
and ecx, 0xff
and ecx, 0xff
cmp eax, ecx
je 0x49b704
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x21
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x621]
test ecx, ecx
je 0x49b88a
cmp dword [ebp - 0x1a50], 0
je 0x49b80d
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 0x10
mov eax, dword [ebp - 0x1a50]
shl eax, 4
cmp edx, eax
je 0x49b74c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x22
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x622]
test eax, eax
je 0x49b77b
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, dword [ebp - 0x500]
je 0x49b77b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x23
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x623]
test ecx, ecx
je 0x49b7aa
mov edx, dword [ebp - 0x1a11]
and edx, 0xff
cmp edx, dword [ebp - 0x18e8]
je 0x49b7aa
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x24
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x64a]
test edx, edx
je 0x49b80b
mov eax, dword [ebp - 0x19df]
and eax, 0xff
mov ecx, dword [ebp - 0xdf0]
and ecx, 0xff
cmp eax, ecx
je 0x49b7e0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x4f
mov eax, dword [ebp - 0x19de]
and eax, 0xff
mov ecx, dword [ebp - 0xdf0]
sar ecx, 8
and ecx, 0xff
cmp eax, ecx
je 0x49b80b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x4f
jmp 0x49b88a
mov eax, dword [ebp - 0x1a3c]
and eax, 0xff
and eax, 0x10
test eax, eax
je 0x49b82c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x25
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x622]
test eax, eax
je 0x49b85b
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, 0xff
je 0x49b85b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x26
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x623]
test ecx, ecx
je 0x49b88a
mov edx, dword [ebp - 0x1a11]
and edx, 0xff
cmp edx, 0xff
je 0x49b88a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x27
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63d]
test edx, edx
je 0x49b8c9
mov eax, dword [ebp - 0x19f9]
and eax, 0xff
mov ecx, dword [ebp - 0x514]
and ecx, 0xff
and ecx, 0xff
add ecx, 1
cmp eax, ecx
je 0x49b8c9
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x44
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x62a]
test ecx, ecx
je 0x49b905
mov edx, dword [ebp - 0x19f2]
and edx, 0xff
and edx, 1
mov eax, dword [ebp - 0x48c]
and eax, 1
and eax, 0xff
cmp edx, eax
je 0x49b905
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x28
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x62b]
test eax, eax
je 0x49b98e
mov ecx, dword [ebp - 0x1220]
and ecx, 0xff000000
test ecx, ecx
je 0x49b960
mov edx, dword [ebp - 0x19f1]
and edx, 0xff
mov eax, dword [ebp - 0x1220]
and eax, 0xff
mov ecx, 0x100
sub ecx, eax
add ecx, 0x80
and ecx, 0xff
cmp edx, ecx
je 0x49b95e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x29
jmp 0x49b98e
mov eax, dword [ebp - 0x19f1]
and eax, 0xff
mov ecx, dword [ebp - 0x1220]
and ecx, 0xff
and ecx, 0xff
cmp eax, ecx
je 0x49b98e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x2a
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x61d]
test ecx, ecx
je 0x49b9c8
mov edx, dword [ebp - 0x1a18]
and edx, 0xff
and edx, 0x80
mov eax, dword [ebp - 0x438]
shl eax, 7
cmp edx, eax
je 0x49b9c8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x2b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x631]
test eax, eax
je 0x49ba05
mov ecx, dword [ebp - 0x19fa]
and ecx, 0xff
mov edx, dword [ebp - 0x588]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49ba05
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x2c
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x633]
test edx, edx
je 0x49ba41
mov eax, dword [ebp - 0x19f0]
and eax, 0xff
and eax, 1
mov ecx, dword [ebp - 0x4b8]
and ecx, 1
and ecx, 0xff
cmp eax, ecx
je 0x49ba41
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x32
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x634]
test ecx, ecx
je 0x49ba7f
mov edx, dword [ebp - 0x19f0]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x51c]
shl eax, 1
and eax, 2
and eax, 0xff
cmp edx, eax
je 0x49ba7f
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x33
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x635]
test eax, eax
je 0x49babf
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x4f4]
shl edx, 2
and edx, 4
and edx, 0xff
cmp ecx, edx
je 0x49babf
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x34
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x636]
test edx, edx
je 0x49bafe
mov eax, dword [ebp - 0x19f0]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x430]
shl ecx, 3
and ecx, 8
and ecx, 0xff
cmp eax, ecx
je 0x49bafe
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x35
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x637]
test ecx, ecx
je 0x49bb3d
mov edx, dword [ebp - 0x19f0]
and edx, 0xff
and edx, 0x10
mov eax, dword [ebp - 0x18c4]
shl eax, 4
and eax, 0x10
and eax, 0xff
cmp edx, eax
je 0x49bb3d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x36
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x638]
test eax, eax
je 0x49bb72
mov ecx, dword [ebp - 0xbc5]
and ecx, 0xff
and ecx, 0x10
sar ecx, 4
cmp ecx, dword [ebp - 0x534]
je 0x49bb72
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3a
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x639]
test ecx, ecx
je 0x49bbaa
mov edx, dword [ebp - 0xbbe]
and edx, 0xff
and edx, 0xf0
sar edx, 4
cmp edx, dword [ebp - 0x510]
je 0x49bbaa
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x3c
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63a]
test edx, edx
je 0x49bbdd
mov eax, dword [ebp - 0xbbe]
and eax, 0xff
sar eax, 1
and eax, 7
cmp eax, dword [ebp - 0x1248]
je 0x49bbdd
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x3b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x63b]
test eax, eax
je 0x49bc0f
mov ecx, dword [ebp - 0xbbe]
and ecx, 0xff
and ecx, 1
cmp ecx, dword [ebp - 0x12b4]
je 0x49bc0f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3d
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x64b]
test ecx, ecx
je 0x49bc3e
mov edx, dword [ebp - 0xbb5]
and edx, 0xff
cmp edx, dword [ebp - 0x1eb4]
je 0x49bc3e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x50
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x64c]
test edx, edx
je 0x49bc72
mov eax, dword [ebp - 0xbc5]
and eax, 0xff
and eax, 0x20
sar eax, 5
cmp eax, dword [ebp - 0xe08]
je 0x49bc72
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x5b
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x63c]
test eax, eax
je 0x49bcb2
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x20
mov edx, dword [ebp - 0x4b4]
shl edx, 5
and edx, 0x20
and edx, 0xff
cmp ecx, edx
je 0x49bcb2
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x43
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63e]
test edx, edx
je 0x49bd60
mov eax, dword [ebp + 8]
cmp dword [eax + 0xf0], 0
jne 0x49bd24
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xec], 0
jne 0x49bd24
mov edx, dword [ebp + 8]
cmp dword [edx + 0xdc], 0
jne 0x49bd24
mov eax, dword [ebp + 8]
cmp dword [eax + 0xe0], 0
jne 0x49bd24
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe4], 0
jne 0x49bd24
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe8], 0
jne 0x49bd24
mov eax, dword [ebp + 8]
cmp dword [eax + 0xb0], 0
jne 0x49bd24
mov dword [ebp - 0x2050], 0
jmp 0x49bd2e
mov dword [ebp - 0x2050], 1
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x40
mov edx, dword [ebp - 0x2050]
shl edx, 6
and edx, 0x40
and edx, 0xff
cmp ecx, edx
je 0x49bd60
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x48
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x63f]
test edx, edx
je 0x49bd9c
mov eax, dword [ebp - 0x19ef]
and eax, 0xff
and eax, 1
mov ecx, dword [ebp - 0x1290]
and ecx, 1
and ecx, 0xff
cmp eax, ecx
je 0x49bd9c
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x49
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x640]
test ecx, ecx
je 0x49bdda
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x484]
shl eax, 1
and eax, 2
and eax, 0xff
cmp edx, eax
je 0x49bdda
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4a
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x647]
test eax, eax
je 0x49be1a
mov ecx, dword [ebp - 0x19ef]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1a48]
shl edx, 2
and edx, 4
and edx, 0xff
cmp ecx, edx
je 0x49be1a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x4c
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x648]
test edx, edx
je 0x49be59
mov eax, dword [ebp - 0x19ef]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x9b8]
shl ecx, 3
and ecx, 8
and ecx, 0xff
cmp eax, ecx
je 0x49be59
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x4d
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x649]
test ecx, ecx
je 0x49be94
mov edx, dword [ebp - 0x19ee]
and edx, 0xff
mov eax, dword [ebp - 0x18c8]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49be94
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4e
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x646]
test eax, eax
je 0x49bed1
mov ecx, dword [ebp - 0x19ed]
and ecx, 0xff
mov edx, dword [ebp - 0x488]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49bed1
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x4b
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x641]
test edx, edx
je 0x49bf04
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
and eax, 2
sar eax, 1
cmp eax, dword [ebp - 0x12b0]
je 0x49bf04
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x42
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x642]
test eax, eax
je 0x49bf6c
mov ecx, dword [ebp - 0xbb7]
and ecx, 0xff
and ecx, 0x80
sar ecx, 7
mov edx, dword [ebp + 8]
cmp ecx, dword [edx + 0x74]
je 0x49bf3c
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x2f
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x74], 0
je 0x49bf6c
mov edx, dword [ebp - 0xbb7]
and edx, 0xff
and edx, 0x3f
mov eax, dword [ebp + 8]
cmp edx, dword [eax + 0x7d7]
je 0x49bf6c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x30
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x643]
test eax, eax
je 0x49bfd0
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7bb], 0
jne 0x49bfa9
mov edx, dword [ebp - 0xbbc]
and edx, 0xff
and edx, 0xf
cmp edx, 0xf
je 0x49bfa7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x45
jmp 0x49bfd0
mov ecx, dword [ebp - 0xbbc]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ebp + 8]
cmp ecx, dword [edx + 0x7bb]
je 0x49bfd0
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x45
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x644]
test edx, edx
je 0x49c042
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7bf], 0
jne 0x49c013
mov ecx, dword [ebp - 0xbbc]
and ecx, 0xff
and ecx, 0xf0
sar ecx, 4
cmp ecx, 0xf
je 0x49c011
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x46
jmp 0x49c042
mov eax, dword [ebp - 0xbbc]
and eax, 0xff
and eax, 0xf0
sar eax, 4
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0x7bf]
cmp eax, edx
je 0x49c042
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x46
mov ecx, dword [ebp + 8]
movsx edx, byte [ecx + 0x645]
test edx, edx
je 0x49c076
mov eax, dword [ebp - 0xbc4]
and eax, 0xff
and eax, 1
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0x7b7]
je 0x49c076
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x47
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7e7], 0
jne 0x49d07e
mov ecx, dword [ebp - 0xbcc]
and ecx, 0xff
shl ecx, 8
mov edx, dword [ebp - 0xbcb]
and edx, 0xff
add ecx, edx
cmp ecx, dword [ebp - 0xe0c]
je 0x49c0b8
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x5a
mov ecx, dword [ebp - 0xbc5]
and ecx, 0xff
and ecx, 0xf
cmp ecx, dword [ebp - 0x1eb8]
je 0x49c0dc
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3e
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
and eax, 0xf0
sar eax, 4
cmp eax, dword [ebp - 0x538]
je 0x49c104
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x3f
mov edx, dword [ebp - 0xbbe]
and edx, 0xff
and edx, 0xf0
sar edx, 4
cmp edx, dword [ebp - 0x510]
je 0x49c12e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x3c
mov ecx, dword [ebp - 0xbbe]
and ecx, 0xff
and ecx, 1
cmp ecx, dword [ebp - 0x12b4]
je 0x49c152
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x3d
mov eax, dword [ebp - 0xbbe]
and eax, 0xff
sar eax, 1
and eax, 7
cmp eax, dword [ebp - 0x1248]
je 0x49c177
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x3b
mov edx, dword [ebp - 0xbc5]
and edx, 0xff
and edx, 0x10
sar edx, 4
cmp edx, dword [ebp - 0x534]
je 0x49c19e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x3a
mov ecx, dword [ebp - 0xbc5]
and ecx, 0xff
and ecx, 0x20
sar ecx, 5
cmp ecx, dword [ebp - 0xe08]
je 0x49c1c5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x5b
mov eax, dword [ebp - 0xbc3]
and eax, 0xff
and eax, 2
sar eax, 1
cmp eax, dword [ebp - 0x12b0]
je 0x49c1ea
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x42
mov edx, dword [ebp - 0xbc3]
and edx, 0xff
and edx, 4
sar edx, 2
cmp edx, dword [ebp - 0xe04]
je 0x49c211
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x5c
mov ecx, dword [ebp - 0xbc3]
and ecx, 0xff
and ecx, 8
sar ecx, 3
cmp ecx, dword [ebp - 0x1294]
je 0x49c238
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x6b
mov eax, dword [ebp - 0xbb5]
and eax, 0xff
cmp eax, dword [ebp - 0x1eb4]
je 0x49c258
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x50
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 1
cmp edx, dword [ebp - 0x18e4]
je 0x49c27c
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x10
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x4c0]
shl edx, 1
cmp ecx, edx
je 0x49c2a4
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x11
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1294]
shl edx, 2
cmp ecx, edx
je 0x49c2cd
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x6b
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x18d0]
shl edx, 1
cmp ecx, edx
je 0x49c2f5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x13
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x1264]
shl edx, 2
cmp ecx, edx
je 0x49c31e
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x14
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 8
mov edx, dword [ebp - 0x18d4]
shl edx, 3
cmp ecx, edx
je 0x49c347
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x15
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x40
mov edx, dword [ebp - 0x1298]
shl edx, 6
cmp ecx, edx
je 0x49c370
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x16
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x1a4c]
shl edx, 4
cmp ecx, edx
je 0x49c399
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x17
mov ecx, dword [ebp - 0x1a3b]
and ecx, 0xff
and ecx, 0x20
mov edx, dword [ebp - 0x584]
shl edx, 5
cmp ecx, edx
je 0x49c3c2
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x18
mov ecx, dword [ebp - 0x1a3a]
and ecx, 0xff
and ecx, 1
mov edx, dword [ebp - 0x1258]
and edx, 0xff
cmp ecx, edx
je 0x49c3ee
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x6c
cmp dword [ebp - 0x18e0], 0
jne 0x49c41d
mov ecx, dword [ebp - 0x1a3a]
and ecx, 0xff
sar ecx, 2
and ecx, 3
cmp ecx, 1
je 0x49c41b
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x19
jmp 0x49c477
cmp dword [ebp - 0x18e0], 1
jne 0x49c44b
mov eax, dword [ebp - 0x1a3a]
and eax, 0xff
sar eax, 2
and eax, 3
cmp eax, 2
je 0x49c449
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1a
jmp 0x49c477
cmp dword [ebp - 0x18e0], 2
jne 0x49c477
mov edx, dword [ebp - 0x1a3a]
and edx, 0xff
sar edx, 2
and edx, 3
test edx, edx
je 0x49c477
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x1b
mov ecx, dword [ebp - 0x1a37]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x191c]
shl edx, 1
cmp ecx, edx
je 0x49c49f
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x7f
cmp dword [ebp - 0x1218], 0
je 0x49c4ca
mov ecx, dword [ebp - 0x1a35]
and ecx, 0xff
and ecx, 0x10
test ecx, ecx
je 0x49c4c8
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x6d
jmp 0x49c4ea
mov eax, dword [ebp - 0x1a35]
and eax, 0xff
and eax, 0x10
cmp eax, 0x10
je 0x49c4ea
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x6d
cmp dword [0x56ce80], 0
jne 0x49c4fc
cmp dword [0x6729e0], 0
je 0x49c53e
mov edx, dword [ebp - 0x1a2f]
and edx, 0xff
cmp edx, dword [ebp - 0x1a40]
je 0x49c51d
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x7c
mov ecx, dword [ebp - 0x1a2e]
and ecx, 0xff
cmp ecx, dword [ebp - 0x4b0]
je 0x49c53e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x7d
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 8
mov ecx, dword [ebp - 0x1e88]
shl ecx, 3
cmp eax, ecx
je 0x49c566
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x74
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 0x10
mov ecx, dword [ebp - 0x4ec]
shl ecx, 4
cmp eax, ecx
je 0x49c58e
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x75
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 0x20
mov ecx, dword [ebp - 0x580]
shl ecx, 5
cmp eax, ecx
je 0x49c5b6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x76
mov eax, dword [ebp - 0x1a18]
and eax, 0xff
and eax, 0x40
mov ecx, dword [ebp - 0x4f0]
shl ecx, 6
cmp eax, ecx
je 0x49c5de
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x80
mov eax, dword [ebp - 0x1a16]
and eax, 0xff
and eax, 0x40
mov ecx, dword [ebp - 0x490]
shl ecx, 6
cmp eax, ecx
je 0x49c603
mov dword [ebp - 0xe14], 1
mov edx, dword [ebp - 0x1a16]
and edx, 0xff
and edx, 0x80
mov eax, dword [ebp - 0x1238]
shl eax, 7
cmp edx, eax
je 0x49c62f
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1c
mov edx, dword [ebp - 0x1a04]
and edx, 0xff
mov eax, dword [ebp - 0x1224]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49c65c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x1d
mov edx, dword [ebp - 0x1a03]
and edx, 0xff
test edx, edx
je 0x49c6aa
mov eax, dword [ebp - 0x1a03]
and eax, 0xff
cmp eax, 0xff
je 0x49c6aa
mov ecx, dword [ebp - 0x1a03]
and ecx, 0xff
mov edx, dword [ebp - 0x9bc]
add edx, 0x13
and edx, 0xff
cmp ecx, edx
je 0x49c6aa
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x5d
mov ecx, dword [ebp - 0x1a02]
and ecx, 0xff
mov edx, dword [ebp - 0x18dc]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c6d9
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x40
mov ecx, dword [ebp - 0x1a01]
and ecx, 0xff
mov edx, dword [ebp - 0x4f8]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c708
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x41
mov ecx, dword [ebp - 0x19ff]
and ecx, 0xff
mov edx, dword [ebp - 0x125c]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c737
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x1e
mov ecx, dword [ebp - 0x19fe]
and ecx, 0xff
mov edx, dword [ebp - 0x129c]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c766
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x21
mov ecx, dword [ebp - 0x19fd]
and ecx, 0xff
mov edx, dword [ebp - 0x18d8]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c795
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x20
cmp dword [ebp - 0x1a50], 0
je 0x49c83f
mov ecx, dword [ebp - 0x1a3c]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x1a50]
shl edx, 4
cmp ecx, edx
je 0x49c7cb
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x22
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, dword [ebp - 0x500]
je 0x49c7ec
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x23
mov eax, dword [ebp - 0x1a11]
and eax, 0xff
cmp eax, dword [ebp - 0x18e8]
je 0x49c80c
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x24
mov edx, dword [ebp - 0x19df]
and edx, 0xff
mov eax, dword [ebp - 0x19de]
and eax, 0xff
shl eax, 8
add edx, eax
cmp edx, dword [ebp - 0xdf0]
je 0x49c83d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4f
jmp 0x49c89f
mov edx, dword [ebp - 0x1a3c]
and edx, 0xff
and edx, 0x10
test edx, edx
je 0x49c85f
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x25
mov ecx, dword [ebp - 0x1a12]
and ecx, 0xff
cmp ecx, 0xff
je 0x49c880
mov edx, dword [ebp + 8]
mov dword [edx + 0xc1c], 0x26
mov eax, dword [ebp - 0x1a11]
and eax, 0xff
cmp eax, 0xff
je 0x49c89f
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x27
mov edx, dword [ebp - 0x19fa]
and edx, 0xff
mov eax, dword [ebp - 0x588]
and eax, 0xff
and eax, 0xff
cmp edx, eax
je 0x49c8cc
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x2c
mov edx, dword [ebp - 0x19f9]
and edx, 0xff
mov eax, dword [ebp - 0x514]
and eax, 0xff
add eax, 1
and eax, 0xff
cmp edx, eax
je 0x49c8fc
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x44
mov edx, dword [ebp - 0x19f2]
and edx, 0xff
and edx, 1
mov eax, dword [ebp - 0x48c]
and eax, 1
and eax, 0xff
cmp edx, eax
je 0x49c92a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x28
mov edx, dword [ebp - 0x1220]
and edx, 0xff000000
test edx, edx
je 0x49c977
mov eax, dword [ebp - 0x19f1]
and eax, 0xff
mov ecx, dword [ebp - 0x1220]
and ecx, 0xff
mov edx, 0x100
sub edx, ecx
add edx, 0x80
and edx, 0xff
cmp eax, edx
je 0x49c975
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x29
jmp 0x49c9a6
mov ecx, dword [ebp - 0x19f1]
and ecx, 0xff
mov edx, dword [ebp - 0x1220]
and edx, 0xff
and edx, 0xff
cmp ecx, edx
je 0x49c9a6
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x2a
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 1
mov edx, dword [ebp - 0x4b8]
and edx, 1
and edx, 0xff
cmp ecx, edx
je 0x49c9d5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x32
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 2
mov edx, dword [ebp - 0x51c]
shl edx, 1
and edx, 2
and edx, 0xff
cmp ecx, edx
je 0x49ca06
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x33
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 4
mov edx, dword [ebp - 0x4f4]
shl edx, 2
and edx, 4
and edx, 0xff
cmp ecx, edx
je 0x49ca38
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x34
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 8
mov edx, dword [ebp - 0x430]
shl edx, 3
and edx, 8
and edx, 0xff
cmp ecx, edx
je 0x49ca6a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x35
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x10
mov edx, dword [ebp - 0x18c4]
shl edx, 4
and edx, 0x10
and edx, 0xff
cmp ecx, edx
je 0x49ca9c
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x36
mov ecx, dword [ebp - 0x19f0]
and ecx, 0xff
and ecx, 0x20
mov edx, dword [ebp - 0x4b4]
shl edx, 5
and edx, 0x20
and edx, 0xff
cmp ecx, edx
je 0x49cace
mov eax, dword [ebp + 8]
mov dword [eax + 0xc1c], 0x46
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xf0], 0
jne 0x49cb2e
mov edx, dword [ebp + 8]
cmp dword [edx + 0xec], 0
jne 0x49cb2e
mov eax, dword [ebp + 8]
cmp dword [eax + 0xdc], 0
jne 0x49cb2e
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xe0], 0
jne 0x49cb2e
mov edx, dword [ebp + 8]
cmp dword [edx + 0xe4], 0
jne 0x49cb2e
mov eax, dword [ebp + 8]
cmp dword [eax + 0xe8], 0
jne 0x49cb2e
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xb0], 0
jne 0x49cb2e
mov dword [ebp - 0x2054], 0
jmp 0x49cb38
mov dword [ebp - 0x2054], 1
mov edx, dword [ebp - 0x19f0]
and edx, 0xff
and edx, 0x40
mov eax, dword [ebp - 0x2054]
shl eax, 6
and eax, 0x40
and eax, 0xff
cmp edx, eax
je 0x49cb69
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x48
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 1
mov eax, dword [ebp - 0x1290]
and eax, 1
and eax, 0xff
cmp edx, eax
je 0x49cb97
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x49
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 2
mov eax, dword [ebp - 0x484]
shl eax, 1
and eax, 2
and eax, 0xff
cmp edx, eax
je 0x49cbc7
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4a
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 4
mov eax, dword [ebp - 0x1a48]
shl eax, 2
and eax, 4
and eax, 0xff
cmp edx, eax
je 0x49cbf8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4c
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 8
mov eax, dword [ebp - 0x9b8]
shl eax, 3
and eax, 8
and eax, 0xff
cmp edx, eax
je 0x49cc29
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x4d
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 0x20
mov eax, dword [ebp - 0x121c]
shl eax, 5
and eax, 0x20
and eax, 0xff
cmp edx, eax
je 0x49cc5a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x66
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 0x40
mov eax, dword [ebp - 0x42c]
shl eax, 6
and eax, 0x40
and eax, 0xff
cmp edx, eax
je 0x49cc8b
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc1c], 0x67
mov edx, dword [ebp - 0x19ef]
and edx, 0xff
and edx, 0x80
mov eax, dword [ebp - 0xdec]
shl eax, 7
and eax, 0x80
and eax, 0xff
cmp edx, eax
je 0x49ccc1
mov edx, dword [ebp + 8]
cmp dword [edx + 0xc1c], 0x10
jl 0x49d094
mov dword [ebp - 0xe14], 1
cmp dword [ebp - 0xe14], 0
je 0x49d0ea
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xd3
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xd3
mov dword [ebp - 0x2044], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2044]
jmp 0x49d128
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0
mov dword [ebp - 0x2048], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.0050ce61
mov eax, dword [ebp - 0x2048]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret