Function at 0x488d7e
Capabilities:
Print debug messages
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x526175
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x34f0
call fcn.004e9ae0
push esi
push edi
mov dword [ebp - 0x2998], 1
mov byte [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 2
mov dword [ebp - 0x1e50], 0
mov byte [ebp - 0x1e4c], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x1e4b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x2804], 0
mov dword [ebp - 0x2854], 0
mov dword [ebp - 0xa28], 0
mov dword [ebp - 0x2ba4], 0
mov dword [ebp - 0x1804], 0
mov dword [ebp - 0x15f4], 0
mov dword [ebp - 0x2ba0], 0
mov dword [ebp - 0x1564], 0
mov dword [ebp - 0x1c24], 0
xor eax, eax
mov dword [ebp - 0x1c20], eax
mov dword [ebp - 0x1c1c], eax
mov dword [ebp - 0x1c18], eax
mov dword [ebp - 0x31e4], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x30
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0
push 0x5616a0
mov ecx, dword [ebp + 8]
add ecx, 0x81b
push ecx
call fcn.004e998d
add esp, 8
cmp dword [0x56e1dc], 0
jle 0x488ef4
mov edx, dword [ebp + 8]
cmp dword [edx + 0xef4], 0
je 0x488ef4
mov eax, dword [0x56e1dc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x773]
push edx
push 6
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xef4]
call fcn.00408d3c
mov ecx, dword [ebp + 8]
add ecx, 0x81b
push ecx
mov edx, dword [0x56e1dc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x773]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xef4]
call fcn.00505c1d
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7bb], 0
jne 0x488f0c
mov dword [ebp - 0xa24], 0xf
jmp 0x488f1b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7bb]
mov dword [ebp - 0xa24], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7bf], 0
jne 0x488f33
mov dword [ebp - 0x1568], 0xf0
jmp 0x488f4b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7bf]
shl edx, 4
and edx, 0xff
mov dword [ebp - 0x1568], edx
mov eax, dword [ebp - 0xa24]
add eax, dword [ebp - 0x1568]
mov dword [ebp - 0x1564], eax
push 0x400
push 0
lea ecx, [ebp - 0x23e4]
push ecx
call fcn.004e9480
add esp, 0xc
push 1
lea edx, [ebp - 0x23e4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00486386
add esp, 0xc
test eax, eax
jne 0x488fb2
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc2c]
mov dword [ecx + 0xc24], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 1
xor eax, eax
jmp 0x48c45b
lea edx, [ebp - 0x1c24]
push edx
lea eax, [ebp - 0x23e4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004864b3
add esp, 0xc
test eax, eax
jne 0x488ff1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xf
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xf
xor eax, eax
jmp 0x48c45b
mov dword [ebp - 0x2800], 0x30
jmp 0x48900c
mov ecx, dword [ebp - 0x2800]
add ecx, 8
mov dword [ebp - 0x2800], ecx
cmp dword [ebp - 0x2800], 0x230
jge 0x48905f
mov edx, dword [ebp - 0x2800]
xor eax, eax
mov al, byte [ebp + edx - 0x23e4]
cmp eax, 0x98
jne 0x48903a
mov dword [ebp - 0x2804], 1
jmp 0x48905f
mov ecx, dword [ebp - 0x2800]
xor edx, edx
mov dl, byte [ebp + ecx - 0x23e4]
cmp edx, 0xec
jne 0x48905d
mov dword [ebp - 0x2854], 1
jmp 0x48905f
jmp 0x488ffd
mov eax, dword [ebp - 0x23e0]
and eax, 0xff
mov dword [ebp - 0x2850], eax
mov ecx, dword [ebp + 8]
mov dl, byte [ebp - 0x21b0]
mov byte [ecx + 0xc7c], dl
mov eax, dword [ebp + 8]
mov cl, byte [ebp - 0x21af]
mov byte [eax + 0xc7e], cl
mov edx, dword [ebp + 8]
mov al, byte [ebp - 0x21ad]
mov byte [edx + 0xc7f], al
mov ecx, dword [ebp - 0x23db]
and ecx, 0xff
and ecx, 3
test ecx, ecx
je 0x4890ba
mov dword [ebp - 0x15f4], 1
mov edx, dword [ebp - 0x23b5]
and edx, 0xff
and edx, 0x26
test edx, edx
jne 0x4890df
mov eax, dword [ebp - 0x23b8]
and eax, 0xff
and eax, 1
test eax, eax
je 0x4890e9
mov dword [ebp - 0x2ba0], 1
mov cl, byte [ebp - 0x21b4]
mov byte [ebp - 0x1c14], cl
mov dl, byte [ebp - 0x21b3]
mov byte [ebp - 0x284c], dl
mov al, byte [ebp - 0x21b2]
mov byte [ebp - 0x2874], al
mov cl, byte [ebp - 0x21b1]
mov byte [ebp - 0x1c4c], cl
cmp dword [ebp - 0x2850], 2
jne 0x4891bf
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e9480
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x2da4]
push eax
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0xf0
mov byte [ebp - 0x1e4b], 4
mov byte [ebp - 0x1e41], 1
push 0
push 0x200
lea ecx, [ebp - 0x2da4]
push ecx
lea edx, [ebp - 0x1e4c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004831c8
add esp, 0x14
test eax, eax
jne 0x4891ba
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xb7
mov edx, dword [ebp + 8]
mov dword [edx + 0xc2c], 0xb7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 2
xor eax, eax
jmp 0x48c45b
jmp 0x489286
cmp dword [ebp - 0x15f4], 0
je 0x489286
push 0x200
push 0
lea ecx, [ebp - 0x1e4c]
push ecx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0xf0
mov byte [ebp - 0x1e4b], 0xa
mov dl, byte [ebp - 0x21b4]
mov byte [ebp - 0x1e4a], dl
mov al, byte [ebp - 0x21b3]
mov byte [ebp - 0x1e49], al
mov byte [ebp - 0x1e48], 1
mov byte [ebp - 0x1e44], 0x11
mov byte [ebp - 0x1e41], 1
push 0x200
push 0
lea ecx, [ebp - 0x2da4]
push ecx
call fcn.004e9480
add esp, 0xc
push 0
push 0x200
lea edx, [ebp - 0x2da4]
push edx
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004831c8
add esp, 0x14
test eax, eax
jne 0x489286
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xb2
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0xb2
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 3
xor eax, eax
jmp 0x48c45b
mov dl, byte [ebp - 0x2d8b]
mov byte [ebp - 0x1800], dl
mov al, byte [ebp - 0x2d8c]
mov byte [ebp - 0x2994], al
push 0x80
push 0
lea ecx, [ebp - 0x1fe4]
push ecx
call fcn.004e9480
add esp, 0xc
push 0x80
push 0
lea edx, [ebp - 0x15f0]
push edx
call fcn.004e9480
add esp, 0xc
cmp dword [ebp - 0x15f4], 0
je 0x48942b
mov dword [ebp - 0x2800], 0
jmp 0x4892f2
mov eax, dword [ebp - 0x2800]
add eax, 1
mov dword [ebp - 0x2800], eax
cmp dword [ebp - 0x2800], 8
jge 0x48942b
mov dword [ebp - 0x2814], 0
jmp 0x48931a
mov ecx, dword [ebp - 0x2814]
add ecx, 1
mov dword [ebp - 0x2814], ecx
cmp dword [ebp - 0x2814], 4
jge 0x489426
mov edx, dword [ebp - 0x1800]
and edx, 0xff
mov eax, 1
mov ecx, dword [ebp - 0x2800]
shl eax, cl
and edx, eax
test edx, edx
je 0x489382
mov edx, dword [ebp - 0x2994]
and edx, 0xff
mov eax, 1
mov ecx, dword [ebp - 0x2814]
shl eax, cl
and edx, eax
test edx, edx
je 0x489382
mov ecx, dword [ebp - 0x2800]
shl ecx, 4
lea edx, [ebp + ecx - 0x15f0]
mov eax, dword [ebp - 0x2814]
mov dword [edx + eax*4], 1
mov ecx, dword [ebp - 0x2800]
shl ecx, 5
lea edx, [ebp + ecx - 0x23e4]
mov eax, dword [ebp - 0x2814]
xor ecx, ecx
mov cl, byte [edx + eax*8 + 0x30]
test ecx, ecx
je 0x4893e3
mov edx, dword [ebp - 0x2800]
shl edx, 5
lea eax, [ebp + edx - 0x23e4]
mov ecx, dword [ebp - 0x2814]
xor edx, edx
mov dl, byte [eax + ecx*8 + 0x30]
cmp edx, 0xff
je 0x4893e3
mov eax, dword [ebp - 0x2800]
shl eax, 4
lea ecx, [ebp + eax - 0x1fe4]
mov edx, dword [ebp - 0x2814]
mov dword [ecx + edx*4], 1
mov eax, dword [ebp - 0x2800]
shl eax, 4
lea ecx, [ebp + eax - 0x1fe4]
mov edx, dword [ebp - 0x2800]
shl edx, 4
lea eax, [ebp + edx - 0x15f0]
mov edx, dword [ebp - 0x2814]
mov esi, dword [ebp - 0x2814]
mov ecx, dword [ecx + edx*4]
cmp ecx, dword [eax + esi*4]
je 0x489421
mov dword [ebp - 0x1804], 1
jmp 0x48930b
jmp 0x4892e3
mov dword [ebp - 0xa20], 1
mov dword [ebp - 0x2848], 0
cmp dword [ebp - 0x2850], 2
jne 0x489557
mov edx, dword [ebp + 8]
xor eax, eax
mov al, byte [edx + 0xc7e]
test eax, eax
jne 0x48946e
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0xc7f]
test edx, edx
je 0x489557
mov dword [ebp - 0x2878], 0
jmp 0x489489
mov eax, dword [ebp - 0x2878]
add eax, 1
mov dword [ebp - 0x2878], eax
cmp dword [ebp - 0x2878], 2
jge 0x489557
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xa0
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0xf0
mov byte [ebp - 0x1e4b], 0xc
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xc7c]
mov byte [ebp - 0x1e4a], cl
cmp dword [ebp - 0x2878], 0
jne 0x4894f0
mov edx, dword [ebp + 8]
mov al, byte [edx + 0xc7e]
mov byte [ebp - 0x1e49], al
jmp 0x4894ff
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0xc7f]
mov byte [ebp - 0x1e49], dl
mov byte [ebp - 0x1e41], 1
push 0
push 0x200
lea eax, [ebp - 0xd3c]
push eax
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004831c8
add esp, 0x14
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0x2998]
and eax, dword [ebp - 0xa20]
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0xa20], 0
jne 0x489552
mov dword [ebp - 0x2848], 0xf
jmp 0x48947a
cmp dword [ebp - 0x1564], 0xff
jne 0x48957c
cmp dword [ebp - 0x1804], 1
je 0x48957c
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7c3], 0
je 0x489697
cmp dword [ebp - 0x2850], 0
jne 0x48959b
mov edx, dword [ebp + 8]
push edx
call fcn.00488751
add esp, 4
mov dword [ebp - 0xa28], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xa1
mov dword [ebp - 0x2878], 0
jmp 0x4895c3
mov ecx, dword [ebp - 0x2878]
add ecx, 1
mov dword [ebp - 0x2878], ecx
cmp dword [ebp - 0x2878], 2
jge 0x489697
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0xf0
mov byte [ebp - 0x1e4b], 0xc
cmp dword [ebp - 0x2878], 0
jne 0x48960b
mov al, byte [ebp - 0x1c14]
mov byte [ebp - 0x1e4a], al
jmp 0x489617
mov cl, byte [ebp - 0x2874]
mov byte [ebp - 0x1e4a], cl
cmp dword [ebp - 0x2878], 0
jne 0x48962e
mov dl, byte [ebp - 0x284c]
mov byte [ebp - 0x1e49], dl
jmp 0x48963a
mov al, byte [ebp - 0x1c4c]
mov byte [ebp - 0x1e49], al
mov byte [ebp - 0x1e41], 1
push 0
push 0x200
lea ecx, [ebp - 0xd3c]
push ecx
lea edx, [ebp - 0x1e4c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004831c8
add esp, 0x14
mov dword [ebp - 0xa20], eax
mov ecx, dword [ebp - 0x2998]
and ecx, dword [ebp - 0xa20]
mov dword [ebp - 0x2998], ecx
cmp dword [ebp - 0xa20], 0
jne 0x489692
mov edx, dword [ebp - 0x2848]
or dl, 0xf0
mov dword [ebp - 0x2848], edx
jmp 0x4895b4
cmp dword [ebp - 0x2998], 0
jne 0x4896d0
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 4
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x2848]
mov dword [ecx + 0xc2c], edx
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 4
xor eax, eax
jmp 0x48c45b
cmp dword [ebp - 0x2850], 0
jne 0x4896e6
cmp dword [ebp - 0xa28], 0
je 0x48996b
xor ecx, ecx
test ecx, ecx
je 0x4897d6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x51
push 0x200
push 0
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 2
push 0
push 0
push 0
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004837dd
add esp, 0x14
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 0
push 0
push 0
push 0
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004837dd
add esp, 0x14
mov edx, dword [ebp - 0x2998]
and edx, eax
mov dword [ebp - 0x2998], edx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 8]
push eax
call fcn.004a7105
add esp, 4
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
jmp 0x4898e0
cmp dword [0x6744a4], 2
jne 0x4898c6
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x51
push 0x200
push 0
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004837dd
add esp, 0x14
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e9480
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 1
push 0
push 0
push 0
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004837dd
add esp, 0x14
mov edx, dword [ebp - 0x2998]
and edx, eax
mov dword [ebp - 0x2998], edx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 8]
push eax
call fcn.004a7105
add esp, 4
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
jmp 0x4898e0
mov edx, dword [ebp + 8]
push edx
call fcn.004ab589
add esp, 4
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
cmp dword [ebp - 0x2998], 0
jne 0x489917
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 5
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 5
xor eax, eax
jmp 0x48c45b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp + 8]
push edx
call fcn.00483b4f
add esp, 4
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48996b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x10
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0x10
mov edx, dword [ebp + 8]
mov dword [edx + 0xc2c], 0x21
xor eax, eax
jmp 0x48c45b
push str.Pretest
mov eax, dword [ebp + 8]
add eax, 0x81b
push eax
call fcn.004e998d
add esp, 8
cmp dword [0x56e1dc], 0
jle 0x4899df
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xef4], 0
je 0x4899df
mov edx, dword [0x56e1dc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x773]
push ecx
push 6
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xef4]
call fcn.00408d3c
mov eax, dword [ebp + 8]
add eax, 0x81b
push eax
mov ecx, dword [0x56e1dc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x773]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0xef4]
call fcn.00505c1d
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x30
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.00486ed6
add esp, 8
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
je 0x489a15
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xc9c], 1
jne 0x489a5b
cmp dword [ebp - 0x2998], 0
jne 0x489a2d
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 6
jmp 0x489a3a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x11
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0x30
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 6
xor eax, eax
jmp 0x48c45b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0x30
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc2c], 0
cmp dword [0x6744a4], 1
je 0x489a87
cmp dword [0x674488], 0
je 0x489ae9
mov edx, dword [0x55c194]
shl edx, 1
mov dword [ebp - 0x31e8], edx
cmp dword [ebp - 0x31e8], 0xffff
jle 0x489aab
mov dword [ebp - 0x31e8], 0xffff
mov eax, dword [ebp - 0x31e8]
push eax
push 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x232]
push edx
call fcn.004b4a85
add esp, 0xc
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x489ae9
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0x13
xor eax, eax
jmp 0x48c45b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x75f]
sub edx, 0x20
mov dword [ebp - 0x1c48], edx
mov dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0x1c48]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x1c48]
cdq
and edx, 0xffff
add eax, edx
sar eax, 0x10
mov dword [ebp - 0x2ba4], eax
mov eax, dword [ebp - 0x1c48]
and eax, 0x8000ffff
jns 0x489b49
dec eax
or eax, 0xffff0000
inc eax
test eax, eax
je 0x489b7f
mov byte [ebp - 0x281c], 1
mov ecx, dword [ebp - 0x2ba4]
add ecx, 1
mov dword [ebp - 0x2ba4], ecx
mov edx, dword [ebp - 0x1c48]
and edx, 0x8000ffff
jns 0x489b79
dec edx
or edx, 0xffff0000
inc edx
mov dword [ebp - 0x1e50], edx
push 0x200
push 0
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e9480
add esp, 0xc
push 0x20
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
push edx
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e9b20
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x747]
mov dword [ebp - 0x34b0], edx
cmp dword [ebp - 0x34b0], 3
ja case.default.0x489bce
mov eax, dword [ebp - 0x34b0]
jmp dword [eax*4 + 0x48c46b]
mov cl, byte [ebp - 0x1e40]
or cl, 0x10
mov byte [ebp - 0x1e40], cl
jmp case.default.0x489bce
mov dl, byte [ebp - 0x1e40]
and dl, 0xef
mov byte [ebp - 0x1e40], dl
jmp case.default.0x489bce
mov al, byte [ebp - 0x1e40]
or al, 4
mov byte [ebp - 0x1e40], al
jmp case.default.0x489bce
mov cl, byte [ebp - 0x1e40]
or cl, 8
mov byte [ebp - 0x1e40], cl
mov byte [ebp - 0x1f64], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x1f63]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x2990], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x298f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xa1c], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xa1b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x17fc], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x17fb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x2b9c], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x2b9b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xb3c], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0xb3b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x31e0], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x31df]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1c10], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1c0f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x27fc], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x27fb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x31c0], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x31bf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x81c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x81b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x41c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x41b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov word [ebp - 0x1560], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x155e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x100
lea edx, [ebp - 0x1f64]
push edx
call fcn.004b8167
add esp, 8
push 0x100
lea eax, [ebp - 0x2990]
push eax
call fcn.004b8167
add esp, 8
push 0x200
lea ecx, [ebp - 0xa1c]
push ecx
call fcn.004b8167
add esp, 8
push 0x200
lea edx, [ebp - 0x17fc]
push edx
call fcn.004b8167
add esp, 8
push 0x200
lea eax, [ebp - 0x2b9c]
push eax
call fcn.004b8167
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, 0xeb2
push ecx
push str.CID_s.ini
lea edx, [ebp - 0xb3c]
push edx
call fcn.004e998d
add esp, 0xc
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0x1f64]
push ecx
call fcn.004e96f0
add esp, 8
mov edx, dword [ebp + 8]
add edx, 0xeb2
push edx
push str.Config_s.ini
lea eax, [ebp - 0xb3c]
push eax
call fcn.004e998d
add esp, 0xc
lea ecx, [ebp - 0xb3c]
push ecx
lea edx, [ebp - 0x2990]
push edx
call fcn.004e96f0
add esp, 8
push str.Firmware2246AAStrongPageTable.bin
lea eax, [ebp - 0xa1c]
push eax
call fcn.004e96f0
add esp, 8
push str.Firmware2246AAWeakPageTable.bin
lea ecx, [ebp - 0x17fc]
push ecx
call fcn.004e96f0
add esp, 8
push str.Firmware2246AA_retry_table_2246.bin
lea edx, [ebp - 0x2b9c]
push edx
call fcn.004e96f0
add esp, 8
lea eax, [ebp - 0x1f64]
push eax
push 0
push str.StrongPageOffset
push 0x561754
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c44], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.DISABLETWOPLANE_DATABASE
push 0x561774
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2844], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.TOSHIBASHIFT
push 0x56178c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2890], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x561794
push 0x5617a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x15fc], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.EXTENDBLOCK
push 0x5617b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2870], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5617c0
push 0x5617cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1570], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x5617d4
push 0x5617e0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2840], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x5617e8
push 0x5617f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23fc], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5617fc
push 0x561808
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x15f8], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x561810
push 0x561820
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2dc0], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x561828
push 0x561834
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e64], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x56183c
push 0x56184c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2dbc], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.ForceOneplane
push 0x561864
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2810], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x56186c
push 0x56187c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x286c], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.InternalInterleave
push 0x561898
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x288c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.STRONGPAGEMODE
push 0x5618b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e60], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FORCESLCMODE
push 0x5618c8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd60], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.ECCLEVEL
push 0x5618dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.R_SLCCMDPATTERN
push 0x5618f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd5c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.SLCCMDPATTERN
push 0x561904
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23f8], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.PWRONINTERFACE
push 0x561918
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23f4], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x56191c
push 0x56192c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1810], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.READRETRYTABLE2
push 0x561940
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa3c], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x561944
push 0x561954
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2db8], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.BLOCKENDURANCE
push 0x561968
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23f0], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.BLOCKENDURANCENUM
push 0x561980
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2868], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.SPAREAREA
push 0x561990
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c40], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.MINIMUM_BLOCK
push 0x5619a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23ec], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.BLOCKCNTPERDIE
push 0x5619b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa38], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.PAGEPERBLOCK
push 0x5619cc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd58], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PLANENUMBER
push 0x5619dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c3c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.BITSPERCELL
push 0x5619ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2db4], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.CMDOPT1
push 0x5619f8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2864], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PROCESS
push 0x561a04
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2888], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.CMDOPT2
push 0x561a10
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd54], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.FLASHINTERFACE
push 0x561a24
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd50], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PAGESIZE
push 0x561a34
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x180c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.F_OPT2
push 0x561a40
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2884], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x561a44
push 0x561a54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x283c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x561a58
push 0x561a6c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e5c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x561a70
push 0x561a84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2838], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x561a88
push 0x561aa0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa34], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x561aa4
push 0x561abc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.DDR_DRVSetting1_SM2246
push 0x561ad8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2db0], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.DDR_DRVSetting2_SM2246
push 0x561af4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.SDR_FlshPLLFreq_SM2246
push 0x561b10
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c38], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.DDR_FlshPLLFreq_SM2246
push 0x561b2c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23e8], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x561b30
push 0x561b48
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x280c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x561b4c
push 0x561b64
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2834], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x561b68
push 0x561b7c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2860], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x561b80
push 0x561b94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd4c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x561b98
push 0x561bac
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x285c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.NGFF_DRVSetting_2
push 0x561bc4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2880], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.TLCTYPE
push 0x561bd0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2858], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.TLCSTBLOCK
push 0x561be0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x287c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x561be4
push 0x561c00
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e58], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.ENPLLFREQUENCYSETTING
push 0x561c1c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2830], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PLLFREQUENCYSETTING
push 0x561c34
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x156c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FLASH_ID0
push 0x561c44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x299c], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.FLASH_ID1
push 0x561c54
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2dac], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.FLASH_ID2
push 0x561c64
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FLASH_ID3
push 0x561c74
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa30], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.FLASH_ID4
push 0x561c84
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd40], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.FLASH_ID5
push 0x561c94
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd48], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FlashOutputDriving_SM2246
push 0x561cb4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa2c], eax
cmp dword [ebp - 0x2db4], 3
jne 0x48a673
cmp dword [ebp - 0x2858], 0
je 0x48a673
lea edx, [ebp - 0x1560]
push edx
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x81c]
push ecx
mov edx, dword [ebp - 0x2858]
push edx
call fcn.0048187c
add esp, 0x10
mov dword [ebp - 0x2998], eax
lea ecx, [ebp - 0x1c34]
call fcn.0050ef40
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050ef40
mov byte [ebp - 4], 1
push 0
push 0x40
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050f0f2
test eax, eax
je 0x48a6ec
push 0
mov ecx, dword [ebp - 0x1c44]
shl ecx, 0xa
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050f294
push 0x400
lea edx, [ebp - 0x1c10]
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050f20f
lea ecx, [ebp - 0x1c34]
call fcn.0050f30d
jmp 0x48a83a
push 0
push 0x40
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050f0f2
test eax, eax
je 0x48a744
push 0
mov ecx, dword [ebp - 0x1c44]
shl ecx, 0xa
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050f294
push 0x400
lea edx, [ebp - 0x1c10]
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050f20f
lea ecx, [ebp - 0x1c34]
call fcn.0050f30d
jmp 0x48a83a
push 0
push 0
push 0x561cb8
lea ecx, [ebp - 0x3450]
call fcn.0050df0f
mov dword [ebp - 0x34b4], eax
mov eax, dword [ebp - 0x34b4]
mov dword [ebp - 0x34b8], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x34b8]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x3454]
call fcn.0050df0f
mov dword [ebp - 0x34bc], eax
mov eax, dword [ebp - 0x34bc]
mov dword [ebp - 0x34c0], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x34c0]
push ecx
lea edx, [ebp - 0x3458]
push edx
call fcn.0050e0d0
mov dword [ebp - 0x34c4], eax
mov eax, dword [ebp - 0x34c4]
mov dword [ebp - 0x34c8], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x34c8]
call fcn.00404710
push eax
call fcn.00515521
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3458]
call fcn.0050dea1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3454]
call fcn.0050dea1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3450]
call fcn.0050dea1
mov dword [ebp - 0x345c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x345c]
jmp 0x48c45b
push 0
push 0x40
lea ecx, [ebp - 0x17fc]
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050f0f2
test eax, eax
je 0x48a892
push 0
mov edx, dword [ebp - 0x1c44]
shl edx, 0xa
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050f294
push 0x400
lea eax, [ebp - 0x27fc]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050f20f
lea ecx, [ebp - 0x1c34]
call fcn.0050f30d
jmp 0x48a9e0
push 0
push 0x40
lea ecx, [ebp - 0x17fc]
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050f0f2
test eax, eax
je 0x48a8ea
push 0
mov edx, dword [ebp - 0x1c44]
shl edx, 0xa
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050f294
push 0x400
lea eax, [ebp - 0x27fc]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050f20f
lea ecx, [ebp - 0x1c34]
call fcn.0050f30d
jmp 0x48a9e0
push 0
push 0
push 0x561cc4
lea ecx, [ebp - 0x3460]
call fcn.0050df0f
mov dword [ebp - 0x34cc], eax
mov ecx, dword [ebp - 0x34cc]
mov dword [ebp - 0x34d0], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x34d0]
push edx
lea eax, [ebp - 0x17fc]
push eax
lea ecx, [ebp - 0x3464]
call fcn.0050df0f
mov dword [ebp - 0x34d4], eax
mov ecx, dword [ebp - 0x34d4]
mov dword [ebp - 0x34d8], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x34d8]
push edx
lea eax, [ebp - 0x3468]
push eax
call fcn.0050e0d0
mov dword [ebp - 0x34dc], eax
mov ecx, dword [ebp - 0x34dc]
mov dword [ebp - 0x34e0], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x34e0]
call fcn.00404710
push eax
call fcn.00515521
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3468]
call fcn.0050dea1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3464]
call fcn.0050dea1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3460]
call fcn.0050dea1
mov dword [ebp - 0x346c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x346c]
jmp 0x48c45b
cmp dword [ebp - 0x1810], 0
jle 0x48abce
cmp dword [ebp - 0x1810], 0x63
je 0x48abce
push 0
push 0x40
lea edx, [ebp - 0x2b9c]
push edx
lea ecx, [ebp - 0x282c]
call fcn.0050f0f2
test eax, eax
je 0x48aa7d
mov eax, dword [ebp - 0x1810]
push eax
push str.RRTable_is__d__n
lea ecx, [ebp - 0x31e0]
push ecx
call fcn.004e998d
add esp, 0xc
lea edx, [ebp - 0x31e0]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0
mov eax, dword [ebp - 0x1810]
sub eax, 1
shl eax, 0xa
push eax
lea ecx, [ebp - 0x282c]
call fcn.0050f294
push 0x400
lea ecx, [ebp - 0x31c0]
push ecx
lea ecx, [ebp - 0x282c]
call fcn.0050f20f
lea ecx, [ebp - 0x282c]
call fcn.0050f30d
jmp 0x48abce
push 0
push 0x40
lea edx, [ebp - 0x2b9c]
push edx
lea ecx, [ebp - 0x282c]
call fcn.0050f0f2
test eax, eax
je 0x48aad8
push 0
mov eax, dword [ebp - 0x1810]
sub eax, 1
shl eax, 0xa
push eax
lea ecx, [ebp - 0x282c]
call fcn.0050f294
push 0x400
lea ecx, [ebp - 0x31c0]
push ecx
lea ecx, [ebp - 0x282c]
call fcn.0050f20f
lea ecx, [ebp - 0x282c]
call fcn.0050f30d
jmp 0x48abce
push 0
push 0
push str._not_found_
lea ecx, [ebp - 0x3470]
call fcn.0050df0f
mov dword [ebp - 0x34e4], eax
mov edx, dword [ebp - 0x34e4]
mov dword [ebp - 0x34e8], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x34e8]
push eax
lea ecx, [ebp - 0x2b9c]
push ecx
lea ecx, [ebp - 0x3474]
call fcn.0050df0f
mov dword [ebp - 0x34ec], eax
mov edx, dword [ebp - 0x34ec]
mov dword [ebp - 0x34f0], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x34f0]
push eax
lea ecx, [ebp - 0x3478]
push ecx
call fcn.0050e0d0
mov dword [ebp - 0x34f4], eax
mov edx, dword [ebp - 0x34f4]
mov dword [ebp - 0x34f8], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x34f8]
call fcn.00404710
push eax
call fcn.00515521
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3478]
call fcn.0050dea1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3474]
call fcn.0050dea1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3470]
call fcn.0050dea1
mov dword [ebp - 0x347c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x347c]
jmp 0x48c45b
cmp dword [ebp - 0x1810], 0
jle 0x48ac04
cmp dword [ebp - 0x1810], 0x63
je 0x48ac04
push 0x400
lea eax, [ebp - 0x31c0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
add edx, 0xf820
push edx
call fcn.004e9b20
add esp, 0xc
push 0x400
lea eax, [ebp - 0x1c10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
add edx, 0xff20
push edx
call fcn.004e9b20
add esp, 0xc
push 0x400
lea eax, [ebp - 0x27fc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
add edx, 0x10320
push edx
call fcn.004e9b20
add esp, 0xc
mov eax, dword [ebp - 0x1e5c]
sar eax, 8
and eax, 0xff
mov byte [ebp - 0x1e48], al
mov ecx, dword [ebp - 0x1e5c]
and ecx, 0xff
mov byte [ebp - 0x1e47], cl
mov edx, dword [ebp - 0x2dbc]
and edx, 0xf
mov byte [ebp - 0x1e41], dl
cmp dword [ebp - 0x15f8], 0
je 0x48ac9a
mov al, byte [ebp - 0x1e41]
or al, 0x10
mov byte [ebp - 0x1e41], al
jmp 0x48aca9
mov cl, byte [ebp - 0x1e41]
and cl, 0xef
mov byte [ebp - 0x1e41], cl
cmp dword [ebp - 0x1e64], 0
je 0x48acc3
mov dl, byte [ebp - 0x1e41]
or dl, 0x20
mov byte [ebp - 0x1e41], dl
jmp 0x48acd1
mov al, byte [ebp - 0x1e41]
and al, 0xdf
mov byte [ebp - 0x1e41], al
cmp dword [ebp - 0x2804], 0
je 0x48ad14
cmp dword [ebp - 0x2890], 0
je 0x48acfa
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
or ecx, 0x20
mov byte [ebp - 0x1e40], cl
jmp 0x48ad12
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
and edx, 0xdf
mov byte [ebp - 0x1e40], dl
jmp 0x48ad27
mov eax, dword [ebp - 0x1e40]
and eax, 0xff
or al, 0x20
mov byte [ebp - 0x1e40], al
cmp dword [ebp - 0x2810], 1
je 0x48ad39
cmp dword [ebp - 0x2844], 1
jne 0x48ad50
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
or ecx, 0x40
mov byte [ebp - 0x1e40], cl
jmp 0x48ad68
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
and edx, 0xbf
mov byte [ebp - 0x1e40], dl
cmp dword [ebp - 0x1e60], 1
jne 0x48ad86
mov eax, dword [ebp - 0x1e40]
and eax, 0xff
or al, 1
mov byte [ebp - 0x1e40], al
jmp 0x48ad9e
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
and ecx, 0xfe
mov byte [ebp - 0x1e40], cl
cmp dword [ebp - 0x286c], 1
jne 0x48adbe
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
or dl, 0x80
mov byte [ebp - 0x1e40], dl
jmp 0x48add2
mov eax, dword [ebp - 0x1e40]
and eax, 0xff
and eax, 0x7f
mov byte [ebp - 0x1e40], al
cmp dword [ebp - 0x288c], 1
jne 0x48adf2
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
or ecx, 2
mov byte [ebp - 0x1e40], cl
jmp 0x48ae0a
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
and edx, 0xfd
mov byte [ebp - 0x1e40], dl
mov eax, dword [ebp - 0x15fc]
shl eax, 4
mov cl, byte [ebp - 0x1e3f]
or cl, al
mov byte [ebp - 0x1e3f], cl
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7fb], 0
je 0x48ae3d
mov al, byte [ebp - 0x1e3f]
or al, 1
mov byte [ebp - 0x1e3f], al
jmp 0x48ae4c
mov cl, byte [ebp - 0x1e3f]
and cl, 0xfe
mov byte [ebp - 0x1e3f], cl
cmp dword [ebp - 0x283c], 0
je 0x48ae66
mov dl, byte [ebp - 0x1e3f]
or dl, 2
mov byte [ebp - 0x1e3f], dl
jmp 0x48ae74
mov al, byte [ebp - 0x1e3f]
and al, 0xfd
mov byte [ebp - 0x1e3f], al
cmp dword [ebp - 0x1e58], 0
je 0x48ae8e
mov cl, byte [ebp - 0x1e3f]
or cl, 4
mov byte [ebp - 0x1e3f], cl
jmp 0x48ae9d
mov dl, byte [ebp - 0x1e3f]
and dl, 0xfb
mov byte [ebp - 0x1e3f], dl
cmp dword [ebp - 0x2838], 0
je 0x48aeb6
mov al, byte [ebp - 0x1e3f]
or al, 8
mov byte [ebp - 0x1e3f], al
jmp 0x48aec5
mov cl, byte [ebp - 0x1e3f]
and cl, 0xf7
mov byte [ebp - 0x1e3f], cl
mov edx, dword [ebp - 0x2870]
sar edx, 8
and edx, 0xff
mov al, byte [ebp - 0x1e3c]
or al, dl
mov byte [ebp - 0x1e3c], al
mov ecx, dword [ebp - 0x2870]
and ecx, 0xff
mov dl, byte [ebp - 0x1e3b]
or dl, cl
mov byte [ebp - 0x1e3b], dl
cmp dword [ebp - 0x23fc], 5
je 0x48af0e
cmp dword [ebp - 0x23fc], 6
jne 0x48af18
mov dword [ebp - 0x23fc], 0
mov al, byte [ebp - 0x2840]
mov byte [ebp - 0x1e3a], al
mov ecx, dword [ebp - 0x23fc]
shl ecx, 1
mov dl, byte [ebp - 0x1e3a]
or dl, cl
mov byte [ebp - 0x1e3a], dl
mov eax, dword [ebp - 0x1570]
and eax, 0xf
shl eax, 4
mov cl, byte [ebp - 0x1e3a]
or cl, al
mov byte [ebp - 0x1e3a], cl
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x74b]
mov byte [ebp - 0x1e39], al
mov cl, byte [ebp - 0x1564]
mov byte [ebp - 0x1e38], cl
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7fb], 0
je 0x48afe3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7eb]
shr ecx, 0x18
and ecx, 0xff
mov byte [ebp - 0x1e37], cl
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x7eb]
shr eax, 0x10
and eax, 0xff
mov byte [ebp - 0x1e36], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7eb]
shr edx, 8
and edx, 0xff
mov byte [ebp - 0x1e35], dl
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7eb]
and ecx, 0xff
mov byte [ebp - 0x1e34], cl
mov byte [ebp - 0x1e3e], 0
jmp 0x48b270
mov dword [ebp - 0x3228], 0
mov dword [ebp - 0x3224], 0
mov dword [ebp - 0x3244], 0
mov dword [ebp - 0x3240], 0x75fc90
mov dword [ebp - 0x323c], 0xebfd10
mov dword [ebp - 0x3238], 0x1d80000
mov dword [ebp - 0x3234], 0x3b00000
mov dword [ebp - 0x3230], 0x7600000
mov dword [ebp - 0x322c], 0xec00000
mov dword [ebp - 0x3220], 0
mov dword [ebp - 0x321c], 0xf2670
mov dword [ebp - 0x3218], 0x1d7c30
mov dword [ebp - 0x3214], 0x3afc50
mov dword [ebp - 0x3210], 0x75fc90
mov dword [ebp - 0x320c], 0xebfd10
mov dword [ebp - 0x3208], 0x1d80000
mov dword [ebp - 0x3204], 0x3b00000
mov dword [ebp - 0x3200], 0x7600000
mov dword [ebp - 0x31fc], 0xec00000
mov dword [ebp - 0x31f8], 0x1d800000
mov dword [ebp - 0x31f4], 0x3b000000
mov dword [ebp - 0x31f0], 0x76000000
mov dword [ebp - 0x31ec], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7b3], 0
jne 0x48b0f0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7af]
mov edx, dword [ebp + ecx*4 - 0x3220]
mov dword [ebp - 0x3228], edx
jmp case.default.0x48b112
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7af]
mov dword [ebp - 0x34fc], ecx
cmp dword [ebp - 0x34fc], 0xf
ja case.default.0x48b112
mov edx, dword [ebp - 0x34fc]
jmp dword [edx*4 + 0x48c47b]
mov dword [ebp - 0x3228], 0x1dd40b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x3aa6a60
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x5971cb0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x6fccf30
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x7740ab0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x950f8b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0xdf94bb0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0xee7c2b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x1bf244b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x1d1c5970
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x1dcf32b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x37e436b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x3a386030
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x3b9e12b0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x6fc81ab0
jmp case.default.0x48b112
mov dword [ebp - 0x3228], 0x773bd2b0
cmp dword [ebp - 0x3228], 0
je 0x48b220
mov eax, dword [ebp + 8]
mov dword [eax + 0x7fb], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x3228]
mov dword [ecx + 0x7eb], edx
mov al, byte [ebp - 0x1e3f]
or al, 1
mov byte [ebp - 0x1e3f], al
mov byte [ebp - 0x1e3e], 0
mov ecx, dword [ebp - 0x3228]
shr ecx, 0x18
and ecx, 0xff
mov byte [ebp - 0x1e37], cl
mov edx, dword [ebp - 0x3228]
shr edx, 0x10
and edx, 0xff
mov byte [ebp - 0x1e36], dl
mov eax, dword [ebp - 0x3228]
shr eax, 8
and eax, 0xff
mov byte [ebp - 0x1e35], al
mov ecx, dword [ebp - 0x3228]
and ecx, 0xff
mov byte [ebp - 0x1e34], cl
mov edx, dword [ebp + 8]
cmp dword [edx + 0x74], 0
je 0x48b2a1
mov al, byte [ebp - 0x1e33]
or al, 0x80
mov byte [ebp - 0x1e33], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7d7]
and edx, 0x3f
mov al, byte [ebp - 0x1e33]
or al, dl
mov byte [ebp - 0x1e33], al
cmp dword [ebp - 0xd60], 0
je 0x48b2bb
mov cl, byte [ebp - 0x1e33]
or cl, 0x40
mov byte [ebp - 0x1e33], cl
jmp 0x48b2ca
mov dl, byte [ebp - 0x1e33]
and dl, 0xbf
mov byte [ebp - 0x1e33], dl
mov al, byte [ebp - 0x1c]
mov byte [ebp - 0x1e32], al
mov cl, byte [ebp - 0x2dc0]
mov byte [ebp - 0x1e31], cl
cmp dword [0x56dee0], 0
je 0x48b30e
mov edx, dword [ebp - 0x287c]
sar edx, 8
and edx, 0xff
mov byte [ebp - 0x1e4a], dl
mov eax, dword [ebp - 0x287c]
and eax, 0xff
mov byte [ebp - 0x1e49], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7a3], 0
je 0x48b344
mov edx, dword [ebp + 8]
cmp dword [edx + 0x78], 0
je 0x48b344
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7db]
sar ecx, 8
mov byte [ebp - 0x1e30], cl
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x7db]
mov byte [ebp - 0x1e2f], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7c3], 0
je 0x48b38a
mov dl, byte [ebp - 0x1e2e]
or dl, 1
mov byte [ebp - 0x1e2e], dl
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0x7c7]
mov byte [ebp - 0x1e38], cl
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x7cb]
shl eax, 4
mov cl, byte [ebp - 0x1e38]
or cl, al
mov byte [ebp - 0x1e38], cl
jmp 0x48b399
mov dl, byte [ebp - 0x1e2e]
and dl, 0xfe
mov byte [ebp - 0x1e2e], dl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7cf], 0
je 0x48b3b6
mov cl, byte [ebp - 0x1e2e]
or cl, 2
mov byte [ebp - 0x1e2e], cl
jmp 0x48b3c5
mov dl, byte [ebp - 0x1e2e]
and dl, 0xfd
mov byte [ebp - 0x1e2e], dl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7d3], 0
je 0x48b3e2
mov cl, byte [ebp - 0x1e2e]
or cl, 8
mov byte [ebp - 0x1e2e], cl
jmp 0x48b3f1
mov dl, byte [ebp - 0x1e2e]
and dl, 0xf7
mov byte [ebp - 0x1e2e], dl
mov dword [ebp - 0x1808], 0x30
push 0xa
push 0x561cec
mov eax, dword [ebp - 0x1808]
lea ecx, [ebp + eax - 0x1e4c]
push ecx
call fcn.004e9b20
add esp, 0xc
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x299c]
mov byte [ebp + edx - 0x1e42], al
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x2dac]
mov byte [ebp + ecx - 0x1e41], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0x10]
mov byte [ebp + eax - 0x1e40], cl
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0xa30]
mov byte [ebp + edx - 0x1e3f], al
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0xd40]
mov byte [ebp + ecx - 0x1e3e], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0xd48]
mov byte [ebp + eax - 0x1e3d], cl
mov eax, dword [ebp - 0xa38]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3c], al
cmp dword [ebp - 0xd58], 0x40
jne 0x48b4c2
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3b], 1
jmp 0x48b56b
cmp dword [ebp - 0xd58], 0x80
jne 0x48b4e1
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3b], 2
jmp 0x48b56b
cmp dword [ebp - 0xd58], 0xc0
jne 0x48b4fd
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3b], 3
jmp 0x48b56b
cmp dword [ebp - 0xd58], 0x100
jne 0x48b519
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3b], 4
jmp 0x48b56b
cmp dword [ebp - 0xd58], 0x102
jne 0x48b535
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3b], 5
jmp 0x48b56b
cmp dword [ebp - 0xd58], 0x200
jne 0x48b551
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3b], 6
jmp 0x48b56b
cmp dword [ebp - 0xd58], 0x204
jne 0x48b56b
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3b], 7
cmp dword [ebp - 0x180c], 4
jne 0x48b584
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3a], 1
jmp 0x48b5cd
cmp dword [ebp - 0x180c], 8
jne 0x48b59d
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3a], 2
jmp 0x48b5cd
cmp dword [ebp - 0x180c], 0x10
jne 0x48b5b6
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3a], 3
jmp 0x48b5cd
cmp dword [ebp - 0x180c], 0x20
jne 0x48b5cd
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3a], 4
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x1c3c]
mov byte [ebp + edx - 0x1e39], al
mov ecx, dword [ebp - 0x2870]
sar ecx, 8
and ecx, 0xff
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e38], cl
mov eax, dword [ebp - 0x2870]
and eax, 0xff
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e37], al
cmp dword [ebp - 0x2db8], 1
jne 0x48b62d
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e36], 0
jmp 0x48b65d
cmp dword [ebp - 0x2db8], 2
jne 0x48b646
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e36], 1
jmp 0x48b65d
cmp dword [ebp - 0x2db8], 4
jne 0x48b65d
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e36], 2
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x2db4]
mov byte [ebp + edx - 0x1e35], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xf4], 0
je 0x48b6bc
mov eax, dword [ebp - 0x2868]
cdq
mov ecx, 0x64
idiv ecx
sar eax, 8
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e34], al
mov eax, dword [ebp - 0x2868]
cdq
mov ecx, 0x64
idiv ecx
and eax, 0xff
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e33], al
jmp 0x48b6eb
mov eax, dword [ebp - 0x23f0]
sar eax, 8
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e34], al
mov edx, dword [ebp - 0x23f0]
and edx, 0xff
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e33], dl
cmp dword [ebp - 0x23f4], 0
jne 0x48b704
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e32], 1
jmp 0x48b712
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e32], 2
mov eax, dword [ebp - 0xd50]
add eax, 1
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e31], al
mov edx, dword [ebp - 0x2864]
and edx, 0xff
or edx, 4
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e30], dl
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x23f8]
mov byte [ebp + ecx - 0x1e2f], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0xd5c]
mov byte [ebp + eax - 0x1e2e], cl
mov edx, dword [ebp - 0x23ec]
sar edx, 8
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e2d], dl
mov ecx, dword [ebp - 0x23ec]
and ecx, 0xff
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e2c], cl
cmp dword [ebp - 0x2890], 0
je 0x48b7b2
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e2b], 1
jmp 0x48b7c0
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e2b], 0
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x2884]
mov byte [ebp + edx - 0x1e2a], al
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x2858]
mov byte [ebp + ecx - 0x1e29], dl
mov dword [ebp - 0x2808], 0
mov dword [ebp - 0x2800], 0
jmp 0x48b80b
mov eax, dword [ebp - 0x2800]
add eax, 1
mov dword [ebp - 0x2800], eax
cmp dword [ebp - 0x2800], 4
jge 0x48b84b
mov ecx, dword [ebp - 0x2800]
cmp dword [ebp + ecx*4 - 0x1c24], 0
je 0x48b849
mov edx, dword [ebp - 0x2800]
mov eax, dword [ebp + edx*4 - 0x1c24]
imul eax, dword [ebp - 0x2db8]
cmp eax, 4
jle 0x48b847
mov dword [ebp - 0x2808], 0x11
jmp 0x48b84b
jmp 0x48b7fc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 0
jne 0x48b924
mov edx, dword [ebp - 0xa34]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x2db0]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0xa34]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x2db0]
add ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x48b91f
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xb
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xb
mov dword [ebp - 0x3480], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x3480]
jmp 0x48c45b
jmp 0x48bbaa
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 1
jne 0x48b9fd
mov edx, dword [ebp - 0x280c]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0x2834]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x280c]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0x2834]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0x280c]
add ecx, dword [ebp - 0x2834]
test ecx, ecx
jne 0x48b9f8
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xc
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xc
mov dword [ebp - 0x3484], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x3484]
jmp 0x48c45b
jmp 0x48bbaa
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 2
jne 0x48bad6
mov edx, dword [ebp - 0x2860]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0xd4c]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x2860]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0xd4c]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0x2860]
add ecx, dword [ebp - 0xd4c]
test ecx, ecx
jne 0x48bad1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xd
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xd
mov dword [ebp - 0x3488], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x3488]
jmp 0x48c45b
jmp 0x48bbaa
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 3
jne 0x48bbaa
mov edx, dword [ebp - 0x285c]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0x2880]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x285c]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0x2880]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0x285c]
add ecx, dword [ebp - 0x2880]
test ecx, ecx
jne 0x48bbaa
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xe
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xe
mov dword [ebp - 0x348c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x348c]
jmp 0x48c45b
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x1c38]
mov byte [ebp + ecx - 0x1e24], dl
cmp dword [ebp - 0x2830], 0
je 0x48bc2a
cmp dword [ebp - 0x156c], 0
jne 0x48bbdf
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e23], 0x12
jmp 0x48bc28
cmp dword [ebp - 0x156c], 1
jne 0x48bbf8
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e23], 0x18
jmp 0x48bc28
cmp dword [ebp - 0x156c], 2
jne 0x48bc11
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e23], 0x1f
jmp 0x48bc28
cmp dword [ebp - 0x156c], 3
jne 0x48bc28
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e23], 0x26
jmp 0x48bc3d
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x23e8]
mov byte [ebp + ecx - 0x1e23], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0xa2c]
mov byte [ebp + eax - 0x1e1c], cl
cmp dword [ebp - 0x2db4], 3
jne 0x48bcce
cmp dword [ebp - 0x2858], 0
je 0x48bcce
push 0x400
lea edx, [ebp - 0x81c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
add ecx, 0x10320
push ecx
call fcn.004e9b20
add esp, 0xc
push 0x400
lea edx, [ebp - 0x41c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
add ecx, 0x10720
push ecx
call fcn.004e9b20
add esp, 0xc
push 0x400
lea edx, [ebp - 0x1560]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
add ecx, 0x10b20
push ecx
call fcn.004e9b20
add esp, 0xc
mov edx, dword [ebp + 8]
cmp dword [edx + 0x797], 0
je 0x48be37
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
mov dword [ebp - 0x3448], ecx
push 0x200
lea edx, [ebp - 0x3444]
push edx
call fcn.004b8167
add esp, 8
lea eax, [ebp - 0x3444]
push eax
push str._sFile_For_Linux_ToolPRET.bin
lea ecx, [ebp - 0x3444]
push ecx
call fcn.004e998d
add esp, 0xc
push 0x561d18
lea edx, [ebp - 0x3444]
push edx
call fcn.004e9834
add esp, 8
mov dword [ebp - 0x344c], eax
mov eax, dword [ebp - 0x344c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x75f]
sub edx, 0x20
push edx
push 1
mov eax, dword [ebp - 0x3448]
add eax, 0x20
push eax
call fcn.004e9694
add esp, 0x10
mov ecx, dword [ebp - 0x344c]
push ecx
call fcn.004e952c
add esp, 4
push 0x200
push 0
lea edx, [ebp - 0x3444]
push edx
call fcn.004e9480
add esp, 0xc
push 0x200
lea eax, [ebp - 0x3444]
push eax
call fcn.004b8167
add esp, 8
lea ecx, [ebp - 0x3444]
push ecx
push str._sFile_For_Linux_ToolPRETH.bin
lea edx, [ebp - 0x3444]
push edx
call fcn.004e998d
add esp, 0xc
push 0x561d40
lea eax, [ebp - 0x3444]
push eax
call fcn.004e9834
add esp, 8
mov dword [ebp - 0x344c], eax
mov ecx, dword [ebp - 0x344c]
push ecx
push 0x200
push 1
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e9694
add esp, 0x10
mov eax, dword [ebp - 0x344c]
push eax
call fcn.004e952c
add esp, 4
cmp dword [0x674174], 0
je 0x48be37
mov dword [ebp - 0x3490], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x3490]
jmp 0x48c45b
push str.Lance_11
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x2da8], 0
mov dword [ebp - 0x1e54], 0
mov ecx, dword [ebp - 0x1e43]
and ecx, 0xff
shl ecx, 0x18
mov edx, dword [ebp - 0x1e44]
and edx, 0xff
shl edx, 0x10
add ecx, edx
mov eax, dword [ebp - 0x1e45]
and eax, 0xff
shl eax, 8
add ecx, eax
mov edx, dword [ebp - 0x1e46]
and edx, 0xff
add ecx, edx
mov dword [ebp - 0x2da8], ecx
mov eax, dword [ebp - 0x1e43]
and eax, 0xff
shl eax, 0x18
mov ecx, dword [ebp - 0x1e44]
and ecx, 0xff
shl ecx, 0x10
add eax, ecx
mov edx, dword [ebp - 0x1e45]
and edx, 0xff
shl edx, 8
add eax, edx
mov ecx, dword [ebp - 0x1e46]
and ecx, 0xff
add eax, ecx
mov dword [ebp - 0x1e54], eax
mov dword [0x673e6c], 1
cmp dword [ebp - 0x2ba4], 1
jle 0x48c18f
mov dword [ebp - 0x2800], 0
jmp 0x48bf10
mov edx, dword [ebp - 0x2800]
add edx, 1
mov dword [ebp - 0x2800], edx
mov eax, dword [ebp - 0x2800]
cmp eax, dword [ebp - 0x2ba4]
jge 0x48c18d
mov ecx, dword [ebp - 0x2ba4]
sub ecx, 1
cmp dword [ebp - 0x2800], ecx
jne 0x48c07f
mov edx, dword [ebp - 0x1e54]
and edx, 0xff
mov byte [ebp - 0x1e46], dl
mov eax, dword [ebp - 0x1e54]
sar eax, 8
and eax, 0xff
mov byte [ebp - 0x1e45], al
mov ecx, dword [ebp - 0x1e54]
sar ecx, 0x10
and ecx, 0xff
mov byte [ebp - 0x1e44], cl
mov edx, dword [ebp - 0x1e54]
sar edx, 0x18
and edx, 0xff
mov byte [ebp - 0x1e43], dl
mov eax, dword [ebp - 0x281c]
and eax, 0xff
test eax, eax
je 0x48bfd2
mov ecx, dword [ebp - 0x1e50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x23a]
mov ecx, dword [ebp - 0x2800]
shl ecx, 6
shl ecx, 0xa
lea edx, [eax + ecx + 0x20]
push edx
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00483d18
add esp, 0x10
mov dword [ebp - 0x2998], eax
jmp 0x48c00a
push 0x10000
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x23a]
mov ecx, dword [ebp - 0x2800]
shl ecx, 6
shl ecx, 0xa
lea edx, [eax + ecx + 0x20]
push edx
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00483d18
add esp, 0x10
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48c07a
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xb4
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0xb4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 7
mov dword [0x673e6c], 0
mov dword [ebp - 0x3494], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x3494]
jmp 0x48c45b
jmp 0x48c177
mov edx, dword [ebp - 0x1e54]
and edx, 0xff
mov byte [ebp - 0x1e46], dl
mov eax, dword [ebp - 0x1e54]
sar eax, 8
and eax, 0xff
mov byte [ebp - 0x1e45], al
mov ecx, dword [ebp - 0x1e54]
sar ecx, 0x10
and ecx, 0xff
mov byte [ebp - 0x1e44], cl
mov edx, dword [ebp - 0x1e54]
sar edx, 0x18
and edx, 0xff
mov byte [ebp - 0x1e43], dl
push 0x10000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
mov edx, dword [ebp - 0x2800]
shl edx, 6
shl edx, 0xa
lea eax, [ecx + edx + 0x20]
push eax
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00483d18
add esp, 0x10
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48c177
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xb4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc2c], 0xb4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 8
mov dword [0x673e6c], 0
mov dword [ebp - 0x3498], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x3498]
jmp 0x48c45b
mov eax, dword [ebp - 0x1e54]
add eax, 0x10000
mov dword [ebp - 0x1e54], eax
jmp 0x48bf01
jmp 0x48c1bf
mov ecx, dword [ebp - 0xd44]
shl ecx, 9
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x23a]
add eax, 0x20
push eax
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00483d18
add esp, 0x10
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48c22f
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xb4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc2c], 0xb4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 9
mov dword [0x673e6c], 0
mov dword [ebp - 0x349c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x349c]
jmp 0x48c45b
mov byte [ebp - 0x1e4b], 0x28
mov eax, dword [ebp - 0x2da8]
and eax, 0xff
mov byte [ebp - 0x1e46], al
mov ecx, dword [ebp - 0x2da8]
sar ecx, 8
and ecx, 0xff
mov byte [ebp - 0x1e45], cl
mov edx, dword [ebp - 0x2da8]
sar edx, 0x10
and edx, 0xff
mov byte [ebp - 0x1e44], dl
mov eax, dword [ebp - 0x2da8]
sar eax, 0x18
and eax, 0xff
mov byte [ebp - 0x1e43], al
push 0x200
lea ecx, [ebp - 0xd3c]
push ecx
lea edx, [ebp - 0x1e4c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00483d18
add esp, 0x10
mov dword [ebp - 0x2998], eax
mov dword [0x673e6c], 0
cmp dword [ebp - 0x2998], 0
jne 0x48c31a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xb5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc2c], 0xb5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xa
mov dword [ebp - 0x34a0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x34a0]
jmp 0x48c45b
cmp dword [0x674484], 1
jne 0x48c3f7
cmp dword [0x6744a4], 1
jne 0x48c3f7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x232]
push edx
call fcn.004b47a1
add esp, 4
test eax, eax
jne 0x48c39a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0x12
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0x11
mov dword [ebp - 0x34a4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x34a4]
jmp 0x48c45b
mov edx, dword [ebp + 8]
push edx
call fcn.004b4883
add esp, 4
test eax, eax
jne 0x48c3f7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0x13
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0x12
mov dword [ebp - 0x34a8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x34a8]
jmp 0x48c45b
push str.Lance_12
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [0x6744a4], 1
je 0x48c414
cmp dword [0x674488], 0
je 0x48c42a
push 0
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x232]
push eax
call fcn.004b4a85
add esp, 0xc
mov dword [ebp - 0x34ac], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050f035
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050f035
mov eax, dword [ebp - 0x34ac]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret