Function at 0x4d22a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xc], edx
mov ebx, eax
mov edi, dword [0x69034c]
xor eax, eax
push ebp
push 0x4d4820
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.00422010
dec eax
test eax, eax
jl 0x4d2346
inc eax
mov dword [ebp - 8], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.00421fe4
mov edx, dword [0x485aec]
call fcn.004044b4
test al, al
jne 0x4d2306
mov edx, esi
mov eax, ebx
call fcn.00421fe4
mov edx, dword [0x487074]
call fcn.004044b4
test al, al
je 0x4d2340
mov edx, esi
mov eax, ebx
call fcn.00421fe4
cmp dword [eax + 0x25c], 0
jne 0x4d2340
mov edx, dword [0x690414]
mov edx, dword [edx]
mov edx, dword [edx + 0x360]
mov dword [eax + 0x25c], edx
mov edx, dword [0x690414]
mov edx, dword [edx]
mov edx, dword [edx + 0x360]
xchg edx, eax
call fcn.0048818c
inc esi
dec dword [ebp - 8]
jne 0x4d22d6
call sub.kernel32.dll_GetTickCount_1
mov dword [ebx + 0x55c], eax
mov byte [ebx + 0x560], 0
xor eax, eax
mov dword [ebx + 0x578], eax
mov byte [ebx + 0x570], 1
xor eax, eax
mov dword [ebx + 0x558], eax
mov byte [ebx + 0x6f4], 0
call sub.kernel32.dll_GetTickCount_1
mov dword [ebx + 0x7e0], eax
mov edx, 0x151
mov eax, dword [ebx + 0x360]
call fcn.004475a4
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
add edx, 0xffffff12
mov eax, dword [ebx + 0x360]
call fcn.00447508
mov edx, 0xee
mov eax, dword [ebx + 0x360]
call fcn.00447570
mov edx, 0xa9
mov eax, dword [ebx + 0x360]
call fcn.0044753c
mov dword [ebx + 0x57c], 0xffffffff
mov dword [ebx + 0x580], 0xffffffff
mov dword [ebx + 0x584], 0xffffffff
mov dword [ebx + 0x588], 0xffffffff
mov eax, dword [edi]
mov edx, 0xaa
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d2436
mov edx, dword [edi]
mov ecx, 0xaa
mov eax, dword [ebx + 0x364]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x364]
call fcn.00447508
mov edx, 0x46
mov eax, dword [ebx + 0x364]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x114
mov eax, dword [ebx + 0x38c]
call fcn.00488c74
mov edx, dword [edi]
mov ecx, 0x114
mov eax, dword [ebx + 0x45c]
call fcn.00488c74
mov edx, dword [edi]
mov ecx, 0x132
mov eax, dword [ebx + 0x368]
call fcn.00488c74
mov edx, 0x3c
mov eax, dword [ebx + 0x368]
call fcn.00447508
mov edx, 1
mov eax, dword [ebx + 0x368]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x378]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x378]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x378]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x37c]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x37c]
call fcn.00447508
mov edx, 0x32
mov eax, dword [ebx + 0x37c]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x380]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x380]
call fcn.00447508
mov edx, 0x64
mov eax, dword [ebx + 0x380]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x374]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x374]
call fcn.00447508
mov edx, 0x96
mov eax, dword [ebx + 0x374]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x388]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x388]
call fcn.00447508
mov edx, 0xc8
mov eax, dword [ebx + 0x388]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x384]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x384]
call fcn.00447508
mov edx, 0xfa
mov eax, dword [ebx + 0x384]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xb4
mov eax, dword [ebx + 0x370]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x370]
call fcn.00447508
mov edx, 0x12c
mov eax, dword [ebx + 0x370]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xaa
mov eax, dword [ebx + 0x36c]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x36c]
call fcn.00447508
mov edx, 0x16
mov eax, dword [ebx + 0x36c]
call fcn.0044753c
mov edx, 0x96
mov eax, dword [ebx + 0x36c]
call fcn.00447570
mov edx, 0x15e
mov eax, dword [ebx + 0x36c]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x6d2
mov eax, dword [ebx + 0x390]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x390]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x390]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x3ac]
call fcn.00488c74
mov edx, 0x25e
mov eax, dword [ebx + 0x3ac]
call fcn.00447508
mov edx, 5
mov eax, dword [ebx + 0x3ac]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x6d3
mov eax, dword [ebx + 0x4b0]
call fcn.00488c74
mov edx, 9
mov eax, dword [ebx + 0x4b0]
call fcn.00447508
mov edx, 9
mov eax, dword [ebx + 0x4b0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xc1
mov eax, dword [ebx + 0x4b4]
call fcn.00488c74
mov edx, 0x6e
mov eax, dword [ebx + 0x4b4]
call fcn.00447508
mov edx, 0x13
mov eax, dword [ebx + 0x4b4]
call fcn.0044753c
xor edx, edx
mov eax, dword [ebx + 0x4b4]
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0xc1
mov eax, dword [ebx + 0x550]
call fcn.00488c74
mov edx, 0xb9
mov eax, dword [ebx + 0x550]
call fcn.00447508
mov edx, 0x13
mov eax, dword [ebx + 0x550]
call fcn.0044753c
xor edx, edx
mov eax, dword [ebx + 0x550]
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0x80f
mov eax, dword [ebx + 0x394]
call fcn.00488c74
mov edx, 0xf2
mov eax, dword [ebx + 0x394]
call fcn.00447508
mov edx, 0x2e
mov eax, dword [ebx + 0x394]
call fcn.0044753c
xor edx, edx
mov eax, dword [ebx + 0x394]
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0x817
mov eax, dword [ebx + 0x398]
call fcn.00488c74
mov edx, 0x199
mov eax, dword [ebx + 0x398]
call fcn.00447508
mov edx, 0xe
mov eax, dword [ebx + 0x398]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x814
mov eax, dword [ebx + 0x39c]
call fcn.00488c74
mov edx, 0xeb
mov eax, dword [ebx + 0x39c]
call fcn.00447508
mov edx, 0xe
mov eax, dword [ebx + 0x39c]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x815
mov eax, dword [ebx + 0x3a0]
call fcn.00488c74
mov edx, 0x125
mov eax, dword [ebx + 0x3a0]
call fcn.00447508
mov edx, 0xe
mov eax, dword [ebx + 0x3a0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x813
mov eax, dword [ebx + 0x3a4]
call fcn.00488c74
mov edx, 0xb1
mov eax, dword [ebx + 0x3a4]
call fcn.00447508
mov edx, 0xe
mov eax, dword [ebx + 0x3a4]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x816
mov eax, dword [ebx + 0x3a8]
call fcn.00488c74
mov edx, 0x15f
mov eax, dword [ebx + 0x3a8]
call fcn.00447508
mov edx, 0xe
mov eax, dword [ebx + 0x3a8]
call fcn.0044753c
mov esi, dword [ebx + 0x518]
mov edx, 0x10
mov eax, esi
call fcn.004475a4
mov edx, 0x5a
mov eax, esi
call fcn.00447570
mov edx, 0x1e
mov eax, esi
call fcn.00447508
mov edx, 0xc7
mov eax, esi
call fcn.0044753c
mov dl, 1
mov eax, esi
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0x73b
mov eax, dword [ebx + 0x51c]
call fcn.00488c74
mov edx, 0x7a
mov eax, dword [ebx + 0x51c]
call fcn.00447508
mov edx, 0xc7
mov eax, dword [ebx + 0x51c]
call fcn.0044753c
mov eax, dword [ebx + 0x51c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov edx, dword [edi]
mov ecx, 0x73c
mov eax, dword [ebx + 0x520]
call fcn.00488c74
mov edx, 0x89
mov eax, dword [ebx + 0x520]
call fcn.00447508
mov edx, 0xc7
mov eax, dword [ebx + 0x520]
call fcn.0044753c
mov eax, dword [ebx + 0x520]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov edx, dword [edi]
mov ecx, 0x6d7
mov eax, dword [ebx + 0x3b0]
call fcn.00488c74
mov edx, 0x34
mov eax, dword [ebx + 0x3b0]
call fcn.00447508
mov edx, 0x10c
mov eax, dword [ebx + 0x3b0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xc6
mov eax, dword [ebx + 0x4b8]
call fcn.00488c74
mov edx, 0x1f
mov eax, dword [ebx + 0x4b8]
call fcn.00447508
mov edx, 0x221
mov eax, dword [ebx + 0x4b8]
call fcn.0044753c
mov ecx, dword [0x690000]
mov ecx, dword [ecx]
lea eax, [ebp - 0xc]
mov edx, 0x4d4838
call fcn.0040555c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x4b8]
call fcn.00487e34
xor edx, edx
mov eax, dword [ebx + 0x4b8]
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0x6d6
mov eax, dword [ebx + 0x3b4]
call fcn.00488c74
mov edx, 0x34
mov eax, dword [ebx + 0x3b4]
call fcn.00447508
mov edx, 0x162
mov eax, dword [ebx + 0x3b4]
call fcn.0044753c
mov eax, dword [ebx + 0x3b4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3b8]
call fcn.00488c74
mov edx, 0x21a
mov eax, dword [ebx + 0x3b8]
call fcn.00447508
mov edx, 0x54
mov eax, dword [ebx + 0x3b8]
call fcn.0044753c
xor edx, edx
mov eax, dword [ebx + 0x3b8]
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0xcc
mov eax, dword [ebx + 0x3bc]
call fcn.00488c74
mov edx, 0x28b
mov eax, dword [ebx + 0x3bc]
call fcn.00447508
mov edx, 0x54
mov eax, dword [ebx + 0x3bc]
call fcn.0044753c
xor edx, edx
mov eax, dword [ebx + 0x3bc]
call fcn.00488ccc
mov edx, dword [edi]
mov ecx, 0x73e
mov eax, dword [ebx + 0x3c0]
call fcn.00488c74
mov edx, 0xc5
mov eax, dword [ebx + 0x3c0]
call fcn.00447508
mov edx, 0x15d
mov eax, dword [ebx + 0x3c0]
call fcn.0044753c
mov eax, dword [ebx + 0x3c0]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov edx, dword [edi]
mov ecx, 0x73d
mov eax, dword [ebx + 0x3c4]
call fcn.00488c74
mov edx, 0x11f
mov eax, dword [ebx + 0x3c4]
call fcn.00447508
mov edx, 0x15d
mov eax, dword [ebx + 0x3c4]
call fcn.0044753c
mov eax, dword [ebx + 0x3c4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov edx, 0x3c
mov eax, dword [ebx + 0x3c8]
call fcn.0044753c
mov edx, 0xb4
mov eax, dword [ebx + 0x3c8]
call fcn.00447508
mov edx, 0x149
mov eax, dword [ebx + 0x3c8]
call fcn.00447570
mov edx, 0x10a
mov eax, dword [ebx + 0x3c8]
call fcn.004475a4
mov eax, dword [ebx + 0x3c8]
mov dword [eax + 0x340], 0x9e
mov dword [eax + 0x348], 0xd
mov dword [eax + 0x338], 2
mov dword [eax + 0x344], 0x32
mov dword [eax + 0x34c], 4
mov dword [eax + 0x33c], 5
mov edx, 0x43
mov eax, dword [ebx + 0x554]
call fcn.0044753c
mov edx, 0x206
mov eax, dword [ebx + 0x554]
call fcn.00447508
mov edx, 0x58
mov eax, dword [ebx + 0x554]
call fcn.00447570
mov edx, 0x13e
mov eax, dword [ebx + 0x554]
call fcn.004475a4
mov dl, 1
mov eax, dword [ebx + 0x554]
call fcn.00488ccc
mov eax, dword [edi]
mov edx, 0x66c
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d2c5f
mov edx, dword [edi]
mov ecx, 0x66c
mov eax, dword [ebx + 0x3cc]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
mov eax, dword [ebx + 0x3cc]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sub edx, 0xc8
mov eax, dword [ebx + 0x3cc]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x41c]
call fcn.00488c74
mov edx, 0x126
mov eax, dword [ebx + 0x41c]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x41c]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x414]
call fcn.00488c74
mov edx, 0x10
mov eax, dword [ebx + 0x414]
call fcn.00447508
mov edx, 0x139
mov eax, dword [ebx + 0x414]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x418]
call fcn.00488c74
mov edx, 0x4e
mov eax, dword [ebx + 0x418]
call fcn.00447508
mov edx, 0x139
mov eax, dword [ebx + 0x418]
call fcn.0044753c
mov eax, dword [ebx + 0x418]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x40c]
call fcn.00488c74
mov edx, 0x8c
mov eax, dword [ebx + 0x40c]
call fcn.00447508
mov edx, 0x139
mov eax, dword [ebx + 0x40c]
call fcn.0044753c
mov eax, dword [ebx + 0x40c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x410]
call fcn.00488c74
mov edx, 0xca
mov eax, dword [ebx + 0x410]
call fcn.00447508
mov edx, 0x139
mov eax, dword [ebx + 0x410]
call fcn.0044753c
mov eax, dword [ebx + 0x410]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, 0x13
mov eax, dword [ebx + 0x524]
call fcn.00447508
mov edx, 0x45
mov eax, dword [ebx + 0x524]
call fcn.0044753c
mov edx, 0xf5
mov eax, dword [ebx + 0x524]
call fcn.00447570
mov edx, 0xe8
mov eax, dword [ebx + 0x524]
call fcn.004475a4
mov eax, dword [ebx + 0x524]
mov dword [eax + 0x34c], 3
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x420]
call fcn.00488c74
mov edx, 0x43
mov eax, dword [ebx + 0x420]
call fcn.0044753c
mov edx, 0x10b
mov eax, dword [ebx + 0x420]
call fcn.00447508
mov edx, 0xec
mov eax, dword [ebx + 0x420]
call fcn.004475a4
mov eax, dword [ebx + 0x420]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x420]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov eax, dword [edi]
mov edx, 0x66f
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d2ee1
mov edx, dword [edi]
mov ecx, 0x66f
mov eax, dword [ebx + 0x424]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [ebx + 0x3cc]
mov edx, dword [edx + 0x40]
sub edx, eax
dec edx
mov eax, dword [ebx + 0x424]
call fcn.00447508
mov eax, dword [ebx + 0x3cc]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x424]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x428]
call fcn.00488c74
mov edx, 0x10b
mov eax, dword [ebx + 0x428]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x428]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x42c]
call fcn.00488c74
mov edx, 0x29
mov eax, dword [ebx + 0x42c]
call fcn.00447508
mov edx, 0x153
mov eax, dword [ebx + 0x42c]
call fcn.0044753c
mov eax, dword [ebx + 0x42c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x430]
call fcn.00488c74
mov edx, 0x97
mov eax, dword [ebx + 0x430]
call fcn.00447508
mov edx, 0x153
mov eax, dword [ebx + 0x430]
call fcn.0044753c
mov eax, dword [ebx + 0x430]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, 0x113
mov eax, dword [ebx + 0x52c]
call fcn.0044753c
mov edx, 0x19
mov eax, dword [ebx + 0x52c]
call fcn.00447508
mov edx, 0x24
mov eax, dword [ebx + 0x52c]
call fcn.00447570
mov edx, 0x22
mov eax, dword [ebx + 0x52c]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x530]
call fcn.00488c74
mov edx, 0xc5
mov eax, dword [ebx + 0x530]
call fcn.00447508
mov edx, 0xf3
mov eax, dword [ebx + 0x530]
call fcn.0044753c
mov eax, dword [ebx + 0x530]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, 0x60
mov eax, dword [ebx + 0x434]
call fcn.0044753c
mov edx, 0x13
mov eax, dword [ebx + 0x434]
call fcn.00447508
mov edx, 0xed
mov eax, dword [ebx + 0x434]
call fcn.00447570
mov edx, 0x7f
mov eax, dword [ebx + 0x434]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x438]
call fcn.00488c74
mov eax, dword [ebx + 0x434]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x438]
call fcn.0044753c
mov eax, dword [ebx + 0x434]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x438]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.00447508
mov eax, dword [ebx + 0x434]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x438]
call fcn.004475a4
mov eax, dword [ebx + 0x438]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x438]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov eax, dword [edi]
mov edx, 0x670
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d3176
mov edx, dword [edi]
mov ecx, 0x670
mov eax, dword [ebx + 0x43c]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [ebx + 0x3cc]
mov edx, dword [edx + 0x40]
sub edx, eax
dec edx
mov eax, dword [ebx + 0x43c]
call fcn.00447508
mov eax, dword [ebx + 0x3cc]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x43c]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x44c]
call fcn.00488c74
mov edx, 0x10b
mov eax, dword [ebx + 0x44c]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x44c]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x444]
call fcn.00488c74
mov edx, 0x29
mov eax, dword [ebx + 0x444]
call fcn.00447508
mov edx, 0x153
mov eax, dword [ebx + 0x444]
call fcn.0044753c
mov eax, dword [ebx + 0x444]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x448]
call fcn.00488c74
mov edx, 0x97
mov eax, dword [ebx + 0x448]
call fcn.00447508
mov edx, 0x153
mov eax, dword [ebx + 0x448]
call fcn.0044753c
mov eax, dword [ebx + 0x448]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, 0x113
mov eax, dword [ebx + 0x528]
call fcn.0044753c
mov edx, 0x19
mov eax, dword [ebx + 0x528]
call fcn.00447508
mov edx, 0x24
mov eax, dword [ebx + 0x528]
call fcn.00447570
mov edx, 0x22
mov eax, dword [ebx + 0x528]
call fcn.004475a4
mov edx, 0xf7
mov eax, dword [ebx + 0x534]
call fcn.0044753c
mov edx, 0x40
mov eax, dword [ebx + 0x534]
call fcn.00447508
mov edx, 0xb9
mov eax, dword [ebx + 0x534]
call fcn.00447570
mov edx, 0x13
mov eax, dword [ebx + 0x534]
call fcn.004475a4
mov edx, 0x60
mov eax, dword [ebx + 0x440]
call fcn.0044753c
mov edx, 0x13
mov eax, dword [ebx + 0x440]
call fcn.00447508
mov edx, 0xed
mov eax, dword [ebx + 0x440]
call fcn.00447570
mov edx, 0x7f
mov eax, dword [ebx + 0x440]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x450]
call fcn.00488c74
mov eax, dword [ebx + 0x440]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x450]
call fcn.0044753c
mov eax, dword [ebx + 0x440]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x450]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.00447508
mov eax, dword [ebx + 0x440]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x450]
call fcn.004475a4
mov eax, dword [ebx + 0x450]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x450]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov edx, 0x52
mov eax, dword [ebx + 0x454]
call fcn.00447508
mov edx, 0x30
mov eax, dword [ebx + 0x454]
call fcn.0044753c
mov edx, 0xac
mov eax, dword [ebx + 0x454]
call fcn.00447570
mov edx, 0x10
mov eax, dword [ebx + 0x454]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x869
mov eax, dword [ebx + 0x458]
call fcn.00488c74
mov edx, 0x46
mov eax, dword [ebx + 0x458]
call fcn.00447508
mov edx, 0x48
mov eax, dword [ebx + 0x458]
call fcn.0044753c
mov edx, 0x10
mov eax, dword [ebx + 0x458]
call fcn.004475a4
mov edx, 0xb8
mov eax, dword [ebx + 0x458]
call fcn.00447570
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov ecx, 0x78
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x350]
mov ecx, 0x64d
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x354]
mov ecx, 0x650
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov eax, dword [eax + 0x358]
mov ecx, 0x64a
call fcn.00488c74
mov eax, dword [ebx + 0x458]
mov eax, dword [eax + 0x384]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov eax, dword [edi]
mov edx, 0x666
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d3524
mov edx, dword [edi]
mov ecx, 0x666
mov eax, dword [ebx + 0x3d0]
call fcn.00488c74
mov edx, 0xa0
mov eax, dword [ebx + 0x3d0]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sub edx, 0xc7
mov eax, dword [ebx + 0x3d0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x3e4]
call fcn.00488c74
mov edx, 0xa9
mov eax, dword [ebx + 0x3e4]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x3e4]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x667
mov eax, dword [ebx + 0x3d8]
call fcn.00488c74
mov edx, 0x11
mov eax, dword [ebx + 0x3d8]
call fcn.00447508
mov edx, 0x13
mov eax, dword [ebx + 0x3d8]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x668
mov eax, dword [ebx + 0x3dc]
call fcn.00488c74
mov edx, 0x3f
mov eax, dword [ebx + 0x3dc]
call fcn.00447508
mov edx, 0x13
mov eax, dword [ebx + 0x3dc]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x669
mov eax, dword [ebx + 0x3e0]
call fcn.00488c74
mov edx, 0x6d
mov eax, dword [ebx + 0x3e0]
call fcn.00447508
mov edx, 0x13
mov eax, dword [ebx + 0x3e0]
call fcn.0044753c
mov edx, 0x2e
mov eax, dword [ebx + 0x3d4]
call fcn.0044753c
mov edx, 0x19
mov eax, dword [ebx + 0x3d4]
call fcn.00447508
mov edx, 0x64
mov eax, dword [ebx + 0x3d4]
call fcn.00447570
mov edx, 0xb0
mov eax, dword [ebx + 0x3d4]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x408]
call fcn.00488c74
mov edx, 0x2b
mov eax, dword [ebx + 0x408]
call fcn.0044753c
mov edx, 0x86
mov eax, dword [ebx + 0x408]
call fcn.00447508
mov edx, 0xbc
mov eax, dword [ebx + 0x408]
call fcn.004475a4
mov eax, dword [ebx + 0x408]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x408]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov edx, dword [edi]
mov ecx, 0x66a
mov eax, dword [ebx + 0x3e8]
call fcn.00488c74
mov edx, 0x1c
mov eax, dword [ebx + 0x3e8]
call fcn.00447508
mov edx, 0xf0
mov eax, dword [ebx + 0x3e8]
call fcn.0044753c
mov eax, dword [ebx + 0x3e8]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov edx, dword [edi]
mov ecx, 0x66b
mov eax, dword [ebx + 0x3ec]
call fcn.00488c74
mov edx, 0x58
mov eax, dword [ebx + 0x3ec]
call fcn.00447508
mov edx, 0xf0
mov eax, dword [ebx + 0x3ec]
call fcn.0044753c
mov eax, dword [ebx + 0x3ec]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d5084
mov eax, dword [edi]
mov edx, 0x16e
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d37cb
mov edx, dword [edi]
mov ecx, 0x16e
mov eax, dword [ebx + 0x3f0]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d3798
adc edx, 0
mov eax, dword [ebx + 0x3f0]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d37c0
adc edx, 0
mov eax, dword [ebx + 0x3f0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x18
mov eax, dword [ebx + 0x3fc]
call fcn.00488c74
mov edx, 0x2e
mov eax, dword [ebx + 0x3fc]
call fcn.00447508
mov edx, 0x8d
mov eax, dword [ebx + 0x3fc]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x18
mov eax, dword [ebx + 0x400]
call fcn.00488c74
mov edx, 0xa8
mov eax, dword [ebx + 0x400]
call fcn.00447508
mov edx, 0x8d
mov eax, dword [ebx + 0x400]
call fcn.0044753c
mov eax, dword [edi]
mov edx, 0x6de
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d38a6
mov edx, dword [edi]
mov ecx, 0x6de
mov eax, dword [ebx + 0x460]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d3873
adc edx, 0
mov eax, dword [ebx + 0x460]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d389b
adc edx, 0
mov eax, dword [ebx + 0x460]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x484]
call fcn.00488c74
mov edx, 0x188
mov eax, dword [ebx + 0x484]
call fcn.00447508
mov edx, 0x16
mov eax, dword [ebx + 0x484]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x19e
mov eax, dword [ebx + 0x46c]
call fcn.00488c74
mov edx, 0x67
mov eax, dword [ebx + 0x46c]
call fcn.00447508
mov edx, 0x3b
mov eax, dword [ebx + 0x46c]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x1a4
mov eax, dword [ebx + 0x470]
call fcn.00488c74
mov edx, 0x67
mov eax, dword [ebx + 0x470]
call fcn.00447508
mov edx, 0xe3
mov eax, dword [ebx + 0x470]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x1a1
mov eax, dword [ebx + 0x474]
call fcn.00488c74
mov edx, 0x14
mov eax, dword [ebx + 0x474]
call fcn.00447508
mov edx, 0x98
mov eax, dword [ebx + 0x474]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x1a7
mov eax, dword [ebx + 0x478]
call fcn.00488c74
mov edx, 0xa6
mov eax, dword [ebx + 0x478]
call fcn.00447508
mov edx, 0x98
mov eax, dword [ebx + 0x478]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x6df
mov eax, dword [ebx + 0x464]
call fcn.00488c74
mov edx, 0xef
mov eax, dword [ebx + 0x464]
call fcn.00447508
mov edx, 0xf7
mov eax, dword [ebx + 0x464]
call fcn.0044753c
mov eax, dword [ebx + 0x464]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d4ecc
mov edx, dword [edi]
mov ecx, 0x6e2
mov eax, dword [ebx + 0x468]
call fcn.00488c74
mov edx, 0x143
mov eax, dword [ebx + 0x468]
call fcn.00447508
mov edx, 0xf7
mov eax, dword [ebx + 0x468]
call fcn.0044753c
mov edx, 0x65
mov eax, dword [ebx + 0x47c]
call fcn.0044753c
mov edx, 0x3e
mov eax, dword [ebx + 0x47c]
call fcn.00447508
mov edx, 0x64
mov eax, dword [ebx + 0x47c]
call fcn.00447570
mov edx, 0x78
mov eax, dword [ebx + 0x47c]
call fcn.004475a4
mov edx, 0x3c
mov eax, dword [ebx + 0x488]
call fcn.0044753c
mov edx, 0xde
mov eax, dword [ebx + 0x488]
call fcn.00447508
mov edx, 0xa7
mov eax, dword [ebx + 0x488]
call fcn.00447570
mov edx, 0xb4
mov eax, dword [ebx + 0x488]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x480]
call fcn.00488c74
mov edx, 0x3b
mov eax, dword [ebx + 0x480]
call fcn.0044753c
mov edx, 0x185
mov eax, dword [ebx + 0x480]
call fcn.00447508
mov edx, 0xb6
mov eax, dword [ebx + 0x480]
call fcn.004475a4
mov eax, dword [ebx + 0x480]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x480]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov eax, dword [edi]
mov edx, 0x6ba
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d3ba5
mov edx, dword [edi]
mov ecx, 0x6ba
mov eax, dword [ebx + 0x48c]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
mov eax, dword [ebx + 0x48c]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d3b9a
adc edx, 0
mov eax, dword [ebx + 0x48c]
call fcn.0044753c
mov edx, 0x39
mov eax, dword [ebx + 0x490]
call fcn.0044753c
mov edx, 0x1c
mov eax, dword [ebx + 0x490]
call fcn.00447508
mov edx, 0x93
mov eax, dword [ebx + 0x490]
call fcn.00447570
mov edx, 0x6f
mov eax, dword [ebx + 0x490]
call fcn.004475a4
mov eax, dword [ebx + 0x490]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, 0x39
mov eax, dword [ebx + 0x494]
call fcn.0044753c
mov edx, 0xc4
mov eax, dword [ebx + 0x494]
call fcn.00447508
mov edx, 0x93
mov eax, dword [ebx + 0x494]
call fcn.00447570
mov edx, 0x6f
mov eax, dword [ebx + 0x494]
call fcn.004475a4
mov eax, dword [ebx + 0x494]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x4ac]
call fcn.00488c74
mov edx, 0x171
mov eax, dword [ebx + 0x4ac]
call fcn.00447508
mov edx, 2
mov eax, dword [ebx + 0x4ac]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4a0]
call fcn.00488c74
mov edx, 0xbe
mov eax, dword [ebx + 0x4a0]
call fcn.00447508
mov edx, 0xb1
mov eax, dword [ebx + 0x4a0]
call fcn.0044753c
mov eax, dword [ebx + 0x4a0]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4bc]
call fcn.00488c74
mov edx, 0x10d
mov eax, dword [ebx + 0x4bc]
call fcn.00447508
mov edx, 0xb1
mov eax, dword [ebx + 0x4bc]
call fcn.0044753c
mov eax, dword [ebx + 0x4bc]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4a8]
call fcn.00488c74
mov edx, 0x10d
mov eax, dword [ebx + 0x4a8]
call fcn.00447508
mov edx, 0xca
mov eax, dword [ebx + 0x4a8]
call fcn.0044753c
mov eax, dword [ebx + 0x4a8]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x4a4]
call fcn.00488c74
mov edx, 0xbe
mov eax, dword [ebx + 0x4a4]
call fcn.00447508
mov edx, 0xca
mov eax, dword [ebx + 0x4a4]
call fcn.0044753c
mov eax, dword [ebx + 0x4a4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, 0x102
mov eax, dword [ebx + 0x498]
call fcn.0044753c
mov edx, 0x17
mov eax, dword [ebx + 0x498]
call fcn.00447508
mov edx, 0x146
mov eax, dword [ebx + 0x498]
call fcn.00447570
mov edx, 0x5c
mov eax, dword [ebx + 0x498]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x49c]
call fcn.00488c74
mov eax, dword [ebx + 0x498]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x49c]
call fcn.0044753c
mov eax, dword [ebx + 0x498]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x49c]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.00447508
mov eax, dword [ebx + 0x498]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x49c]
call fcn.004475a4
mov eax, dword [ebx + 0x49c]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x49c]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov eax, dword [edi]
mov edx, 0x6bb
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d3f3a
mov edx, dword [edi]
mov ecx, 0x6bb
mov eax, dword [ebx + 0x4c0]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d3f07
adc edx, 0
mov eax, dword [ebx + 0x4c0]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d3f2f
adc edx, 0
mov eax, dword [ebx + 0x4c0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x4cc]
call fcn.00488c74
mov edx, 0x171
mov eax, dword [ebx + 0x4cc]
call fcn.00447508
mov edx, 2
mov eax, dword [ebx + 0x4cc]
call fcn.0044753c
mov edx, 0x39
mov eax, dword [ebx + 0x4c4]
call fcn.0044753c
mov edx, 0x1c
mov eax, dword [ebx + 0x4c4]
call fcn.00447508
mov edx, 0x93
mov eax, dword [ebx + 0x4c4]
call fcn.00447570
mov edx, 0x6f
mov eax, dword [ebx + 0x4c4]
call fcn.004475a4
mov eax, dword [ebx + 0x4c4]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, 0x39
mov eax, dword [ebx + 0x4c8]
call fcn.0044753c
mov edx, 0xc4
mov eax, dword [ebx + 0x4c8]
call fcn.00447508
mov edx, 0x93
mov eax, dword [ebx + 0x4c8]
call fcn.00447570
mov edx, 0x6f
mov eax, dword [ebx + 0x4c8]
call fcn.004475a4
mov eax, dword [ebx + 0x4c8]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1f
mov dword [eax + 0x348], 5
mov dword [eax + 0x34c], 9
mov edx, 0x151
mov eax, dword [ebx + 0x4d8]
call fcn.0044753c
mov edx, 0x42
mov eax, dword [ebx + 0x4d8]
call fcn.00447508
mov edx, 0x113
mov eax, dword [ebx + 0x4d8]
call fcn.00447570
mov edx, 0x10
mov eax, dword [ebx + 0x4d8]
call fcn.004475a4
mov edx, 0xcd
mov eax, dword [ebx + 0x4d0]
call fcn.0044753c
mov edx, 0x17
mov eax, dword [ebx + 0x4d0]
call fcn.00447508
mov edx, 0x146
mov eax, dword [ebx + 0x4d0]
call fcn.00447570
mov edx, 0x5c
mov eax, dword [ebx + 0x4d0]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x78
mov eax, dword [ebx + 0x4d4]
call fcn.00488c74
mov eax, dword [ebx + 0x4d0]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x4d4]
call fcn.0044753c
mov eax, dword [ebx + 0x4d0]
mov ecx, dword [eax + 0x40]
add ecx, dword [eax + 0x48]
mov edx, dword [ebx + 0x4d4]
sub ecx, dword [edx + 0x48]
mov eax, ecx
xchg edx, eax
call fcn.00447508
mov eax, dword [ebx + 0x4d0]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x4d4]
call fcn.004475a4
mov eax, dword [ebx + 0x4d4]
mov dword [eax + 0x378], 1
mov byte [eax + 0x37e], 1
mov edx, dword [edi]
mov eax, dword [eax + 0x350]
mov ecx, 0x863
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x354]
mov ecx, 0x866
call fcn.00488c74
mov edx, dword [edi]
mov eax, dword [ebx + 0x4d4]
mov eax, dword [eax + 0x358]
mov ecx, 0x860
call fcn.00488c74
mov eax, dword [edi]
mov edx, 0x6c0
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d41bc
mov edx, dword [edi]
mov ecx, 0x6c0
mov eax, dword [ebx + 0x4dc]
call fcn.00488c74
xor edx, edx
mov eax, dword [ebx + 0x4dc]
call fcn.00447508
mov edx, 0x4a
mov eax, dword [ebx + 0x4dc]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73a
mov eax, dword [ebx + 0x4fc]
call fcn.00488c74
mov edx, 0x12e
mov eax, dword [ebx + 0x4fc]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x4fc]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x4f4]
call fcn.00488c74
mov edx, 0xad
mov eax, dword [ebx + 0x4f4]
call fcn.00447508
mov edx, 0x121
mov eax, dword [ebx + 0x4f4]
call fcn.0044753c
mov eax, dword [ebx + 0x4f4]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x674
mov eax, dword [ebx + 0x4f8]
call fcn.00488c74
mov edx, 0xea
mov eax, dword [ebx + 0x4f8]
call fcn.00447508
mov edx, 0x121
mov eax, dword [ebx + 0x4f8]
call fcn.0044753c
mov eax, dword [ebx + 0x4f8]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x6c1
mov eax, dword [ebx + 0x4e0]
call fcn.00488c74
mov edx, 0x16
mov eax, dword [ebx + 0x4e0]
call fcn.00447508
mov edx, 0x14
mov eax, dword [ebx + 0x4e0]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x6c2
mov eax, dword [ebx + 0x4e4]
call fcn.00488c74
mov edx, 0x50
mov eax, dword [ebx + 0x4e4]
call fcn.00447508
mov edx, 0x14
mov eax, dword [ebx + 0x4e4]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x6c3
mov eax, dword [ebx + 0x4e8]
call fcn.00488c74
mov edx, 0x8a
mov eax, dword [ebx + 0x4e8]
call fcn.00447508
mov edx, 0x14
mov eax, dword [ebx + 0x4e8]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4ec]
call fcn.00488c74
mov edx, 0xaf
mov eax, dword [ebx + 0x4ec]
call fcn.00447508
mov edx, 0x26
mov eax, dword [ebx + 0x4ec]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0xdb
mov eax, dword [ebx + 0x4f0]
call fcn.00488c74
mov edx, 0xe5
mov eax, dword [ebx + 0x4f0]
call fcn.00447508
mov edx, 0x26
mov eax, dword [ebx + 0x4f0]
call fcn.0044753c
mov edx, 0x1b
mov eax, dword [ebx + 0x500]
call fcn.00447508
mov edx, 0x32
mov eax, dword [ebx + 0x500]
call fcn.0044753c
mov edx, 0xf9
mov eax, dword [ebx + 0x500]
call fcn.00447570
mov edx, 0xde
mov eax, dword [ebx + 0x500]
call fcn.004475a4
mov eax, dword [ebx + 0x500]
mov dword [eax + 0x340], 0x21
mov dword [eax + 0x344], 0x1e
mov dword [eax + 0x348], 3
mov dword [eax + 0x34c], 2
mov eax, dword [edi]
mov edx, 0x6b1
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d445a
mov edx, dword [edi]
mov ecx, 0x6b1
mov eax, dword [ebx + 0x504]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d4427
adc edx, 0
mov eax, dword [ebx + 0x504]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d444f
adc edx, 0
mov eax, dword [ebx + 0x504]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x508]
call fcn.00488c74
mov edx, 0x11
mov eax, dword [ebx + 0x508]
call fcn.00447508
mov edx, 0x15
mov eax, dword [ebx + 0x508]
call fcn.0044753c
mov eax, dword [ebx + 0x508]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x50c]
call fcn.00488c74
mov edx, 0x11
mov eax, dword [ebx + 0x50c]
call fcn.00447508
mov edx, 0x37
mov eax, dword [ebx + 0x50c]
call fcn.0044753c
mov eax, dword [ebx + 0x50c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov edx, dword [edi]
mov ecx, 0x672
mov eax, dword [ebx + 0x510]
call fcn.00488c74
mov edx, 0x11
mov eax, dword [ebx + 0x510]
call fcn.00447508
mov edx, 0x51
mov eax, dword [ebx + 0x510]
call fcn.0044753c
mov eax, dword [ebx + 0x510]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d674c
mov eax, dword [edi]
mov edx, 0x65b
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d45ab
mov edx, dword [edi]
mov ecx, 0x65b
mov eax, dword [ebx + 0x514]
call fcn.00488c74
mov eax, dword [ebp - 4]
mov si, 0xfff9
call fcn.00404524
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, eax
sar edx, 1
jns 0x4d4576
adc edx, 0
sub edx, 5
mov eax, dword [ebx + 0x514]
call fcn.00447508
mov eax, dword [ebp - 4]
mov si, 0xfff8
call fcn.00404524
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
sub edx, eax
sub edx, 0xcd
mov eax, dword [ebx + 0x514]
call fcn.0044753c
xor edx, edx
mov eax, dword [ebx + 0x538]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x538]
call fcn.0044753c
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x538]
call fcn.00447570
mov edx, dword [0x68fcf4]
mov edx, dword [edx]
mov eax, dword [ebx + 0x538]
call fcn.004475a4
mov edx, dword [edi]
mov ecx, 0x8f
mov eax, dword [ebx + 0x53c]
call fcn.00488c74
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x53c]
sub edx, dword [eax + 0x48]
call fcn.00447508
xor edx, edx
mov eax, dword [ebx + 0x53c]
call fcn.0044753c
mov eax, dword [edi]
mov edx, 0xe8
call fcn.00484504
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4d4667
mov edx, dword [edi]
mov ecx, 0xe8
mov eax, dword [ebx + 0x540]
call fcn.00488c74
mov edx, 0x2a3
mov eax, dword [ebx + 0x540]
call fcn.00447508
mov edx, 0x1b1
mov eax, dword [ebx + 0x540]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x14a
mov eax, dword [ebx + 0x544]
call fcn.00488c74
mov edx, 0x15
mov eax, dword [ebx + 0x544]
call fcn.00447508
mov edx, 0x15
mov eax, dword [ebx + 0x544]
call fcn.0044753c
mov edx, dword [edi]
mov ecx, 0x73f
mov eax, dword [ebx + 0x548]
call fcn.00488c74
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, 0x10a
mov eax, dword [ebx + 0x548]
call fcn.00447508
mov edx, 0x68
mov eax, dword [ebx + 0x548]
call fcn.0044753c
mov eax, dword [ebx + 0x548]
cmp dword [eax + 0x25c], 0
je 0x4d46fa
mov eax, dword [ebx + 0x548]
mov eax, dword [eax + 0x25c]
mov edx, dword [ebx + 0x548]
call fcn.00488104
mov edx, dword [0x690414]
mov edx, dword [edx]
mov edx, dword [edx + 0x464]
mov eax, dword [ebx + 0x548]
mov dword [eax + 0x25c], edx
mov edx, dword [0x690414]
mov edx, dword [edx]
mov edx, dword [edx + 0x464]
xchg edx, eax
call fcn.0048818c
mov eax, dword [0x690414]
mov eax, dword [eax]
mov edx, dword [ebx + 0x548]
mov dword [edx + 0x29c], eax
mov dword [edx + 0x298], 0x55bba0
mov edx, dword [edi]
mov ecx, 0x741
mov eax, dword [ebx + 0x54c]
call fcn.00488c74
mov edx, dword [0x68fd1c]
mov edx, dword [edx]
sub edx, 0xec
mov eax, dword [ebx + 0x54c]
call fcn.00447508
mov edx, 0x68
mov eax, dword [ebx + 0x54c]
call fcn.0044753c
mov eax, dword [ebx + 0x54c]
cmp dword [eax + 0x25c], 0
je 0x4d47a6
mov eax, dword [ebx + 0x54c]
mov eax, dword [eax + 0x25c]
mov edx, dword [ebx + 0x54c]
call fcn.00488104
mov eax, dword [0x690414]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, dword [ebx + 0x54c]
mov dword [edx + 0x25c], eax
mov eax, dword [0x690414]
mov eax, dword [eax]
mov eax, dword [eax + 0x464]
mov edx, dword [ebx + 0x54c]
call fcn.0048818c
mov eax, dword [ebx + 0x54c]
mov dword [eax + 0x268], ebx
mov dword [eax + 0x264], 0x4d53f8
mov eax, dword [0x690414]
mov eax, dword [eax]
mov edx, dword [ebx + 0x54c]
mov dword [edx + 0x29c], eax
mov dword [edx + 0x298], 0x55bba0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d4827
lea eax, [ebp - 0xc]
call fcn.00405234
ret