Function at 0x487d3e
Capabilities:
Print debug messages
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x525095
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x34f0
call fcn.004e8aa0
push esi
push edi
mov dword [ebp - 0x2998], 1
mov byte [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 2
mov dword [ebp - 0x1e50], 0
mov byte [ebp - 0x1e4c], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x1e4b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x2804], 0
mov dword [ebp - 0x2854], 0
mov dword [ebp - 0xa28], 0
mov dword [ebp - 0x2ba4], 0
mov dword [ebp - 0x1804], 0
mov dword [ebp - 0x15f4], 0
mov dword [ebp - 0x2ba0], 0
mov dword [ebp - 0x1564], 0
mov dword [ebp - 0x1c24], 0
xor eax, eax
mov dword [ebp - 0x1c20], eax
mov dword [ebp - 0x1c1c], eax
mov dword [ebp - 0x1c18], eax
mov dword [ebp - 0x31e4], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x30
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0
push 0x560210
mov ecx, dword [ebp + 8]
add ecx, 0x81b
push ecx
call fcn.004e894d
add esp, 8
cmp dword [0x56cd4c], 0
jle 0x487eb4
mov edx, dword [ebp + 8]
cmp dword [edx + 0xef4], 0
je 0x487eb4
mov eax, dword [0x56cd4c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x773]
push edx
push 6
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xef4]
call fcn.0040848c
mov ecx, dword [ebp + 8]
add ecx, 0x81b
push ecx
mov edx, dword [0x56cd4c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x773]
push ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xef4]
call fcn.00504bdd
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7bb], 0
jne 0x487ecc
mov dword [ebp - 0xa24], 0xf
jmp 0x487edb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7bb]
mov dword [ebp - 0xa24], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7bf], 0
jne 0x487ef3
mov dword [ebp - 0x1568], pe_nt_image_headers32
jmp 0x487f0b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7bf]
shl edx, 4
and edx, 0xff
mov dword [ebp - 0x1568], edx
mov eax, dword [ebp - 0xa24]
add eax, dword [ebp - 0x1568]
mov dword [ebp - 0x1564], eax
push 0x400
push 0
lea ecx, [ebp - 0x23e4]
push ecx
call fcn.004e8440
add esp, 0xc
push 1
lea edx, [ebp - 0x23e4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00485346
add esp, 0xc
test eax, eax
jne 0x487f72
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc2c]
mov dword [ecx + 0xc24], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 1
xor eax, eax
jmp 0x48b41b
lea edx, [ebp - 0x1c24]
push edx
lea eax, [ebp - 0x23e4]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00485473
add esp, 0xc
test eax, eax
jne 0x487fb1
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xf
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xf
xor eax, eax
jmp 0x48b41b
mov dword [ebp - 0x2800], 0x30
jmp 0x487fcc
mov ecx, dword [ebp - 0x2800]
add ecx, 8
mov dword [ebp - 0x2800], ecx
cmp dword [ebp - 0x2800], 0x230
jge 0x48801f
mov edx, dword [ebp - 0x2800]
xor eax, eax
mov al, byte [ebp + edx - 0x23e4]
cmp eax, 0x98
jne 0x487ffa
mov dword [ebp - 0x2804], 1
jmp 0x48801f
mov ecx, dword [ebp - 0x2800]
xor edx, edx
mov dl, byte [ebp + ecx - 0x23e4]
cmp edx, 0xec
jne 0x48801d
mov dword [ebp - 0x2854], 1
jmp 0x48801f
jmp 0x487fbd
mov eax, dword [ebp - 0x23e0]
and eax, 0xff
mov dword [ebp - 0x2850], eax
mov ecx, dword [ebp + 8]
mov dl, byte [ebp - 0x21b0]
mov byte [ecx + 0xc7c], dl
mov eax, dword [ebp + 8]
mov cl, byte [ebp - 0x21af]
mov byte [eax + 0xc7e], cl
mov edx, dword [ebp + 8]
mov al, byte [ebp - 0x21ad]
mov byte [edx + 0xc7f], al
mov ecx, dword [ebp - 0x23db]
and ecx, 0xff
and ecx, 3
test ecx, ecx
je 0x48807a
mov dword [ebp - 0x15f4], 1
mov edx, dword [ebp - 0x23b5]
and edx, 0xff
and edx, 0x26
test edx, edx
jne 0x48809f
mov eax, dword [ebp - 0x23b8]
and eax, 0xff
and eax, 1
test eax, eax
je 0x4880a9
mov dword [ebp - 0x2ba0], 1
mov cl, byte [ebp - 0x21b4]
mov byte [ebp - 0x1c14], cl
mov dl, byte [ebp - 0x21b3]
mov byte [ebp - 0x284c], dl
mov al, byte [ebp - 0x21b2]
mov byte [ebp - 0x2874], al
mov cl, byte [ebp - 0x21b1]
mov byte [ebp - 0x1c4c], cl
cmp dword [ebp - 0x2850], 2
jne 0x48817f
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e8440
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x2da4]
push eax
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], pe_nt_image_headers32
mov byte [ebp - 0x1e4b], 4
mov byte [ebp - 0x1e41], 1
push 0
push 0x200
lea ecx, [ebp - 0x2da4]
push ecx
lea edx, [ebp - 0x1e4c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00482188
add esp, 0x14
test eax, eax
jne 0x48817a
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xb7
mov edx, dword [ebp + 8]
mov dword [edx + 0xc2c], 0xb7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 2
xor eax, eax
jmp 0x48b41b
jmp 0x488246
cmp dword [ebp - 0x15f4], 0
je 0x488246
push 0x200
push 0
lea ecx, [ebp - 0x1e4c]
push ecx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], pe_nt_image_headers32
mov byte [ebp - 0x1e4b], 0xa
mov dl, byte [ebp - 0x21b4]
mov byte [ebp - 0x1e4a], dl
mov al, byte [ebp - 0x21b3]
mov byte [ebp - 0x1e49], al
mov byte [ebp - 0x1e48], 1
mov byte [ebp - 0x1e44], 0x11
mov byte [ebp - 0x1e41], 1
push 0x200
push 0
lea ecx, [ebp - 0x2da4]
push ecx
call fcn.004e8440
add esp, 0xc
push 0
push 0x200
lea edx, [ebp - 0x2da4]
push edx
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00482188
add esp, 0x14
test eax, eax
jne 0x488246
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xb2
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0xb2
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 3
xor eax, eax
jmp 0x48b41b
mov dl, byte [ebp - 0x2d8b]
mov byte [ebp - 0x1800], dl
mov al, byte [ebp - 0x2d8c]
mov byte [ebp - 0x2994], al
push 0x80
push 0
lea ecx, [ebp - 0x1fe4]
push ecx
call fcn.004e8440
add esp, 0xc
push 0x80
push 0
lea edx, [ebp - 0x15f0]
push edx
call fcn.004e8440
add esp, 0xc
cmp dword [ebp - 0x15f4], 0
je 0x4883eb
mov dword [ebp - 0x2800], 0
jmp 0x4882b2
mov eax, dword [ebp - 0x2800]
add eax, 1
mov dword [ebp - 0x2800], eax
cmp dword [ebp - 0x2800], 8
jge 0x4883eb
mov dword [ebp - 0x2814], 0
jmp 0x4882da
mov ecx, dword [ebp - 0x2814]
add ecx, 1
mov dword [ebp - 0x2814], ecx
cmp dword [ebp - 0x2814], 4
jge 0x4883e6
mov edx, dword [ebp - 0x1800]
and edx, 0xff
mov eax, 1
mov ecx, dword [ebp - 0x2800]
shl eax, cl
and edx, eax
test edx, edx
je 0x488342
mov edx, dword [ebp - 0x2994]
and edx, 0xff
mov eax, 1
mov ecx, dword [ebp - 0x2814]
shl eax, cl
and edx, eax
test edx, edx
je 0x488342
mov ecx, dword [ebp - 0x2800]
shl ecx, 4
lea edx, [ebp + ecx - 0x15f0]
mov eax, dword [ebp - 0x2814]
mov dword [edx + eax*4], 1
mov ecx, dword [ebp - 0x2800]
shl ecx, 5
lea edx, [ebp + ecx - 0x23e4]
mov eax, dword [ebp - 0x2814]
xor ecx, ecx
mov cl, byte [edx + eax*8 + 0x30]
test ecx, ecx
je 0x4883a3
mov edx, dword [ebp - 0x2800]
shl edx, 5
lea eax, [ebp + edx - 0x23e4]
mov ecx, dword [ebp - 0x2814]
xor edx, edx
mov dl, byte [eax + ecx*8 + 0x30]
cmp edx, 0xff
je 0x4883a3
mov eax, dword [ebp - 0x2800]
shl eax, 4
lea ecx, [ebp + eax - 0x1fe4]
mov edx, dword [ebp - 0x2814]
mov dword [ecx + edx*4], 1
mov eax, dword [ebp - 0x2800]
shl eax, 4
lea ecx, [ebp + eax - 0x1fe4]
mov edx, dword [ebp - 0x2800]
shl edx, 4
lea eax, [ebp + edx - 0x15f0]
mov edx, dword [ebp - 0x2814]
mov esi, dword [ebp - 0x2814]
mov ecx, dword [ecx + edx*4]
cmp ecx, dword [eax + esi*4]
je 0x4883e1
mov dword [ebp - 0x1804], 1
jmp 0x4882cb
jmp 0x4882a3
mov dword [ebp - 0xa20], 1
mov dword [ebp - 0x2848], 0
cmp dword [ebp - 0x2850], 2
jne 0x488517
mov edx, dword [ebp + 8]
xor eax, eax
mov al, byte [edx + 0xc7e]
test eax, eax
jne 0x48842e
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0xc7f]
test edx, edx
je 0x488517
mov dword [ebp - 0x2878], 0
jmp 0x488449
mov eax, dword [ebp - 0x2878]
add eax, 1
mov dword [ebp - 0x2878], eax
cmp dword [ebp - 0x2878], 2
jge 0x488517
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0xa0
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], pe_nt_image_headers32
mov byte [ebp - 0x1e4b], 0xc
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xc7c]
mov byte [ebp - 0x1e4a], cl
cmp dword [ebp - 0x2878], 0
jne 0x4884b0
mov edx, dword [ebp + 8]
mov al, byte [edx + 0xc7e]
mov byte [ebp - 0x1e49], al
jmp 0x4884bf
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0xc7f]
mov byte [ebp - 0x1e49], dl
mov byte [ebp - 0x1e41], 1
push 0
push 0x200
lea eax, [ebp - 0xd3c]
push eax
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00482188
add esp, 0x14
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0x2998]
and eax, dword [ebp - 0xa20]
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0xa20], 0
jne 0x488512
mov dword [ebp - 0x2848], 0xf
jmp 0x48843a
cmp dword [ebp - 0x1564], 0xff
jne 0x48853c
cmp dword [ebp - 0x1804], 1
je 0x48853c
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7c3], 0
je 0x488657
cmp dword [ebp - 0x2850], 0
jne 0x48855b
mov edx, dword [ebp + 8]
push edx
call fcn.00487711
add esp, 4
mov dword [ebp - 0xa28], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0xa1
mov dword [ebp - 0x2878], 0
jmp 0x488583
mov ecx, dword [ebp - 0x2878]
add ecx, 1
mov dword [ebp - 0x2878], ecx
cmp dword [ebp - 0x2878], 2
jge 0x488657
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], pe_nt_image_headers32
mov byte [ebp - 0x1e4b], 0xc
cmp dword [ebp - 0x2878], 0
jne 0x4885cb
mov al, byte [ebp - 0x1c14]
mov byte [ebp - 0x1e4a], al
jmp 0x4885d7
mov cl, byte [ebp - 0x2874]
mov byte [ebp - 0x1e4a], cl
cmp dword [ebp - 0x2878], 0
jne 0x4885ee
mov dl, byte [ebp - 0x284c]
mov byte [ebp - 0x1e49], dl
jmp 0x4885fa
mov al, byte [ebp - 0x1c4c]
mov byte [ebp - 0x1e49], al
mov byte [ebp - 0x1e41], 1
push 0
push 0x200
lea ecx, [ebp - 0xd3c]
push ecx
lea edx, [ebp - 0x1e4c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00482188
add esp, 0x14
mov dword [ebp - 0xa20], eax
mov ecx, dword [ebp - 0x2998]
and ecx, dword [ebp - 0xa20]
mov dword [ebp - 0x2998], ecx
cmp dword [ebp - 0xa20], 0
jne 0x488652
mov edx, dword [ebp - 0x2848]
or dl, 0xf0
mov dword [ebp - 0x2848], edx
jmp 0x488574
cmp dword [ebp - 0x2998], 0
jne 0x488690
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 4
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x2848]
mov dword [ecx + 0xc2c], edx
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 4
xor eax, eax
jmp 0x48b41b
cmp dword [ebp - 0x2850], 0
jne 0x4886a6
cmp dword [ebp - 0xa28], 0
je 0x48892b
xor ecx, ecx
test ecx, ecx
je 0x488796
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x51
push 0x200
push 0
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 2
push 0
push 0
push 0
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0048279d
add esp, 0x14
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 0
push 0
push 0
push 0
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0048279d
add esp, 0x14
mov edx, dword [ebp - 0x2998]
and edx, eax
mov dword [ebp - 0x2998], edx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 8]
push eax
call fcn.004a60c5
add esp, 4
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
jmp 0x4888a0
cmp dword [0x673014], 2
jne 0x488886
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x51
push 0x200
push 0
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0048279d
add esp, 0x14
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x200
push 0
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1e4c], 0x1b
mov byte [ebp - 0x1e4b], 0
mov byte [ebp - 0x1e48], 1
push 0
push 0
push 0
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0048279d
add esp, 0x14
mov edx, dword [ebp - 0x2998]
and edx, eax
mov dword [ebp - 0x2998], edx
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 8]
push eax
call fcn.004a60c5
add esp, 4
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
jmp 0x4888a0
mov edx, dword [ebp + 8]
push edx
call fcn.004aa549
add esp, 4
mov ecx, dword [ebp - 0x2998]
and ecx, eax
mov dword [ebp - 0x2998], ecx
cmp dword [ebp - 0x2998], 0
jne 0x4888d7
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 5
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 5
xor eax, eax
jmp 0x48b41b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp + 8]
push edx
call fcn.00482b0f
add esp, 4
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48892b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x10
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0x10
mov edx, dword [ebp + 8]
mov dword [edx + 0xc2c], 0x21
xor eax, eax
jmp 0x48b41b
push str.Pretest
mov eax, dword [ebp + 8]
add eax, 0x81b
push eax
call fcn.004e894d
add esp, 8
cmp dword [0x56cd4c], 0
jle 0x48899f
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xef4], 0
je 0x48899f
mov edx, dword [0x56cd4c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x773]
push ecx
push 6
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0xef4]
call fcn.0040848c
mov eax, dword [ebp + 8]
add eax, 0x81b
push eax
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x773]
push eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0xef4]
call fcn.00504bdd
mov edx, dword [ebp + 8]
mov dword [edx + 0xc10], 0x30
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.00485e96
add esp, 8
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
je 0x4889d5
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xc9c], 1
jne 0x488a1b
cmp dword [ebp - 0x2998], 0
jne 0x4889ed
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 6
jmp 0x4889fa
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0x11
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc10], 0x30
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 6
xor eax, eax
jmp 0x48b41b
mov eax, dword [ebp + 8]
mov dword [eax + 0xc10], 0x30
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc2c], 0
cmp dword [0x673014], 1
je 0x488a47
cmp dword [0x672ff8], 0
je 0x488aa9
mov edx, dword [0x55ad6c]
shl edx, 1
mov dword [ebp - 0x31e8], edx
cmp dword [ebp - 0x31e8], 0xffff
jle 0x488a6b
mov dword [ebp - 0x31e8], 0xffff
mov eax, dword [ebp - 0x31e8]
push eax
push 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x232]
push edx
call fcn.004b3a45
add esp, 0xc
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x488aa9
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0x13
xor eax, eax
jmp 0x48b41b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x75f]
sub edx, 0x20
mov dword [ebp - 0x1c48], edx
mov dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0x1c48]
cdq
and edx, 0x1ff
add eax, edx
sar eax, 9
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x1c48]
cdq
and edx, 0xffff
add eax, edx
sar eax, 0x10
mov dword [ebp - 0x2ba4], eax
mov eax, dword [ebp - 0x1c48]
and eax, 0x8000ffff
jns 0x488b09
dec eax
or eax, 0xffff0000
inc eax
test eax, eax
je 0x488b3f
mov byte [ebp - 0x281c], 1
mov ecx, dword [ebp - 0x2ba4]
add ecx, 1
mov dword [ebp - 0x2ba4], ecx
mov edx, dword [ebp - 0x1c48]
and edx, 0x8000ffff
jns 0x488b39
dec edx
or edx, 0xffff0000
inc edx
mov dword [ebp - 0x1e50], edx
push 0x200
push 0
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e8440
add esp, 0xc
push 0x20
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
push edx
lea eax, [ebp - 0x1e4c]
push eax
call fcn.004e8ae0
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x747]
mov dword [ebp - 0x34b0], edx
cmp dword [ebp - 0x34b0], 3
ja case.default.0x488b8e
mov eax, dword [ebp - 0x34b0]
jmp dword [eax*4 + 0x48b42b]
mov cl, byte [ebp - 0x1e40]
or cl, 0x10
mov byte [ebp - 0x1e40], cl
jmp case.default.0x488b8e
mov dl, byte [ebp - 0x1e40]
and dl, 0xef
mov byte [ebp - 0x1e40], dl
jmp case.default.0x488b8e
mov al, byte [ebp - 0x1e40]
or al, 4
mov byte [ebp - 0x1e40], al
jmp case.default.0x488b8e
mov cl, byte [ebp - 0x1e40]
or cl, 8
mov byte [ebp - 0x1e40], cl
mov byte [ebp - 0x1f64], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x1f63]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x2990], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x298f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xa1c], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xa1b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x17fc], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x17fb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x2b9c], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x2b9b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xb3c], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0xb3b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x31e0], 0
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x31df]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1c10], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1c0f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x27fc], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x27fb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x31c0], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x31bf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x81c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x81b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x41c], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x41b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov word [ebp - 0x1560], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x155e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x100
lea edx, [ebp - 0x1f64]
push edx
call fcn.004b7127
add esp, 8
push 0x100
lea eax, [ebp - 0x2990]
push eax
call fcn.004b7127
add esp, 8
push 0x200
lea ecx, [ebp - 0xa1c]
push ecx
call fcn.004b7127
add esp, 8
push 0x200
lea edx, [ebp - 0x17fc]
push edx
call fcn.004b7127
add esp, 8
push 0x200
lea eax, [ebp - 0x2b9c]
push eax
call fcn.004b7127
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, 0xeb2
push ecx
push str.CID_s.ini
lea edx, [ebp - 0xb3c]
push edx
call fcn.004e894d
add esp, 0xc
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0x1f64]
push ecx
call fcn.004e86b0
add esp, 8
mov edx, dword [ebp + 8]
add edx, 0xeb2
push edx
push str.Config_s.ini
lea eax, [ebp - 0xb3c]
push eax
call fcn.004e894d
add esp, 0xc
lea ecx, [ebp - 0xb3c]
push ecx
lea edx, [ebp - 0x2990]
push edx
call fcn.004e86b0
add esp, 8
push str.Firmware2246AAStrongPageTable.bin
lea eax, [ebp - 0xa1c]
push eax
call fcn.004e86b0
add esp, 8
push str.Firmware2246AAWeakPageTable.bin
lea ecx, [ebp - 0x17fc]
push ecx
call fcn.004e86b0
add esp, 8
push str.Firmware2246AA_retry_table_2246.bin
lea edx, [ebp - 0x2b9c]
push edx
call fcn.004e86b0
add esp, 8
lea eax, [ebp - 0x1f64]
push eax
push 0
push str.StrongPageOffset
push 0x5602c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c44], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.DISABLETWOPLANE_DATABASE
push 0x5602e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2844], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.TOSHIBASHIFT
push 0x5602fc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2890], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x560304
push 0x560314
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x15fc], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.EXTENDBLOCK
push 0x560328
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2870], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x560330
push 0x56033c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1570], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x560344
push 0x560350
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2840], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x560358
push 0x560364
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23fc], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x56036c
push 0x560378
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x15f8], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x560380
push 0x560390
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2dc0], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x560398
push 0x5603a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e64], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5603ac
push 0x5603bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2dbc], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.ForceOneplane
push 0x5603d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2810], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x5603dc
push 0x5603ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x286c], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.InternalInterleave
push 0x560408
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x288c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.STRONGPAGEMODE
push 0x560420
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e60], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FORCESLCMODE
push 0x560438
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd60], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.ECCLEVEL
push 0x56044c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.R_SLCCMDPATTERN
push 0x560460
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd5c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.SLCCMDPATTERN
push 0x560474
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23f8], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.PWRONINTERFACE
push 0x560488
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23f4], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x56048c
push 0x56049c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1810], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.READRETRYTABLE2
push 0x5604b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa3c], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5604b4
push 0x5604c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2db8], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.BLOCKENDURANCE
push 0x5604d8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23f0], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.BLOCKENDURANCENUM
push 0x5604f0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2868], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.SPAREAREA
push 0x560500
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c40], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.MINIMUM_BLOCK
push 0x560514
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23ec], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.BLOCKCNTPERDIE
push 0x560528
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa38], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.PAGEPERBLOCK
push 0x56053c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd58], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PLANENUMBER
push 0x56054c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c3c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.BITSPERCELL
push 0x56055c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2db4], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.CMDOPT1
push 0x560568
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2864], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PROCESS
push 0x560574
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2888], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.CMDOPT2
push 0x560580
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd54], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.FLASHINTERFACE
push 0x560594
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd50], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PAGESIZE
push 0x5605a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x180c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.F_OPT2
push 0x5605b0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2884], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5605b4
push 0x5605c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x283c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x5605c8
push 0x5605dc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e5c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x5605e0
push 0x5605f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2838], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5605f8
push 0x560610
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa34], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x560614
push 0x56062c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.DDR_DRVSetting1_SM2246
push 0x560648
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2db0], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.DDR_DRVSetting2_SM2246
push 0x560664
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.SDR_FlshPLLFreq_SM2246
push 0x560680
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1c38], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.DDR_FlshPLLFreq_SM2246
push 0x56069c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x23e8], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5606a0
push 0x5606b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x280c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x5606bc
push 0x5606d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2834], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x5606d8
push 0x5606ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2860], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push 0x5606f0
push 0x560704
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd4c], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push 0x560708
push 0x56071c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x285c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.NGFF_DRVSetting_2
push 0x560734
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2880], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.TLCTYPE
push 0x560740
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2858], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.TLCSTBLOCK
push 0x560750
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x287c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push 0x560754
push 0x560770
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x1e58], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.ENPLLFREQUENCYSETTING
push 0x56078c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2830], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.PLLFREQUENCYSETTING
push 0x5607a4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x156c], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FLASH_ID0
push 0x5607b4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x299c], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.FLASH_ID1
push 0x5607c4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x2dac], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.FLASH_ID2
push 0x5607d4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FLASH_ID3
push 0x5607e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa30], eax
lea edx, [ebp - 0x2990]
push edx
push 0
push str.FLASH_ID4
push 0x5607f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd40], eax
lea eax, [ebp - 0x2990]
push eax
push 0
push str.FLASH_ID5
push 0x560804
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xd48], eax
lea ecx, [ebp - 0x2990]
push ecx
push 0
push str.FlashOutputDriving_SM2246
push 0x560824
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0xa2c], eax
cmp dword [ebp - 0x2db4], 3
jne 0x489633
cmp dword [ebp - 0x2858], 0
je 0x489633
lea edx, [ebp - 0x1560]
push edx
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x81c]
push ecx
mov edx, dword [ebp - 0x2858]
push edx
call fcn.0048083c
add esp, 0x10
mov dword [ebp - 0x2998], eax
lea ecx, [ebp - 0x1c34]
call fcn.0050df00
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050df00
mov byte [ebp - 4], 1
push 0
push 0x40
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050e0b2
test eax, eax
je 0x4896ac
push 0
mov ecx, dword [ebp - 0x1c44]
shl ecx, 0xa
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050e254
push 0x400
lea edx, [ebp - 0x1c10]
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050e1cf
lea ecx, [ebp - 0x1c34]
call fcn.0050e2cd
jmp 0x4897fa
push 0
push 0x40
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050e0b2
test eax, eax
je 0x489704
push 0
mov ecx, dword [ebp - 0x1c44]
shl ecx, 0xa
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050e254
push 0x400
lea edx, [ebp - 0x1c10]
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050e1cf
lea ecx, [ebp - 0x1c34]
call fcn.0050e2cd
jmp 0x4897fa
push 0
push 0
push 0x560828
lea ecx, [ebp - 0x3450]
call fcn.0050cecf
mov dword [ebp - 0x34b4], eax
mov eax, dword [ebp - 0x34b4]
mov dword [ebp - 0x34b8], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x34b8]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea ecx, [ebp - 0x3454]
call fcn.0050cecf
mov dword [ebp - 0x34bc], eax
mov eax, dword [ebp - 0x34bc]
mov dword [ebp - 0x34c0], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x34c0]
push ecx
lea edx, [ebp - 0x3458]
push edx
call fcn.0050d090
mov dword [ebp - 0x34c4], eax
mov eax, dword [ebp - 0x34c4]
mov dword [ebp - 0x34c8], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x34c8]
call fcn.00404710
push eax
call fcn.005144e1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3458]
call fcn.0050ce61
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3454]
call fcn.0050ce61
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3450]
call fcn.0050ce61
mov dword [ebp - 0x345c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x345c]
jmp 0x48b41b
push 0
push 0x40
lea ecx, [ebp - 0x17fc]
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050e0b2
test eax, eax
je 0x489852
push 0
mov edx, dword [ebp - 0x1c44]
shl edx, 0xa
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050e254
push 0x400
lea eax, [ebp - 0x27fc]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050e1cf
lea ecx, [ebp - 0x1c34]
call fcn.0050e2cd
jmp 0x4899a0
push 0
push 0x40
lea ecx, [ebp - 0x17fc]
push ecx
lea ecx, [ebp - 0x1c34]
call fcn.0050e0b2
test eax, eax
je 0x4898aa
push 0
mov edx, dword [ebp - 0x1c44]
shl edx, 0xa
push edx
lea ecx, [ebp - 0x1c34]
call fcn.0050e254
push 0x400
lea eax, [ebp - 0x27fc]
push eax
lea ecx, [ebp - 0x1c34]
call fcn.0050e1cf
lea ecx, [ebp - 0x1c34]
call fcn.0050e2cd
jmp 0x4899a0
push 0
push 0
push 0x560834
lea ecx, [ebp - 0x3460]
call fcn.0050cecf
mov dword [ebp - 0x34cc], eax
mov ecx, dword [ebp - 0x34cc]
mov dword [ebp - 0x34d0], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x34d0]
push edx
lea eax, [ebp - 0x17fc]
push eax
lea ecx, [ebp - 0x3464]
call fcn.0050cecf
mov dword [ebp - 0x34d4], eax
mov ecx, dword [ebp - 0x34d4]
mov dword [ebp - 0x34d8], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x34d8]
push edx
lea eax, [ebp - 0x3468]
push eax
call fcn.0050d090
mov dword [ebp - 0x34dc], eax
mov ecx, dword [ebp - 0x34dc]
mov dword [ebp - 0x34e0], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x34e0]
call fcn.00404710
push eax
call fcn.005144e1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3468]
call fcn.0050ce61
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3464]
call fcn.0050ce61
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3460]
call fcn.0050ce61
mov dword [ebp - 0x346c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x346c]
jmp 0x48b41b
cmp dword [ebp - 0x1810], 0
jle 0x489b8e
cmp dword [ebp - 0x1810], 0x63
je 0x489b8e
push 0
push 0x40
lea edx, [ebp - 0x2b9c]
push edx
lea ecx, [ebp - 0x282c]
call fcn.0050e0b2
test eax, eax
je 0x489a3d
mov eax, dword [ebp - 0x1810]
push eax
push str.RRTable_is__d__n
lea ecx, [ebp - 0x31e0]
push ecx
call fcn.004e894d
add esp, 0xc
lea edx, [ebp - 0x31e0]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0
mov eax, dword [ebp - 0x1810]
sub eax, 1
shl eax, 0xa
push eax
lea ecx, [ebp - 0x282c]
call fcn.0050e254
push 0x400
lea ecx, [ebp - 0x31c0]
push ecx
lea ecx, [ebp - 0x282c]
call fcn.0050e1cf
lea ecx, [ebp - 0x282c]
call fcn.0050e2cd
jmp 0x489b8e
push 0
push 0x40
lea edx, [ebp - 0x2b9c]
push edx
lea ecx, [ebp - 0x282c]
call fcn.0050e0b2
test eax, eax
je 0x489a98
push 0
mov eax, dword [ebp - 0x1810]
sub eax, 1
shl eax, 0xa
push eax
lea ecx, [ebp - 0x282c]
call fcn.0050e254
push 0x400
lea ecx, [ebp - 0x31c0]
push ecx
lea ecx, [ebp - 0x282c]
call fcn.0050e1cf
lea ecx, [ebp - 0x282c]
call fcn.0050e2cd
jmp 0x489b8e
push 0
push 0
push str._not_found_
lea ecx, [ebp - 0x3470]
call fcn.0050cecf
mov dword [ebp - 0x34e4], eax
mov edx, dword [ebp - 0x34e4]
mov dword [ebp - 0x34e8], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x34e8]
push eax
lea ecx, [ebp - 0x2b9c]
push ecx
lea ecx, [ebp - 0x3474]
call fcn.0050cecf
mov dword [ebp - 0x34ec], eax
mov edx, dword [ebp - 0x34ec]
mov dword [ebp - 0x34f0], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x34f0]
push eax
lea ecx, [ebp - 0x3478]
push ecx
call fcn.0050d090
mov dword [ebp - 0x34f4], eax
mov edx, dword [ebp - 0x34f4]
mov dword [ebp - 0x34f8], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x34f8]
call fcn.00404710
push eax
call fcn.005144e1
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3478]
call fcn.0050ce61
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3474]
call fcn.0050ce61
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3470]
call fcn.0050ce61
mov dword [ebp - 0x347c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x347c]
jmp 0x48b41b
cmp dword [ebp - 0x1810], 0
jle 0x489bc4
cmp dword [ebp - 0x1810], 0x63
je 0x489bc4
push 0x400
lea eax, [ebp - 0x31c0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
add edx, 0xf820
push edx
call fcn.004e8ae0
add esp, 0xc
push 0x400
lea eax, [ebp - 0x1c10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
add edx, 0xff20
push edx
call fcn.004e8ae0
add esp, 0xc
push 0x400
lea eax, [ebp - 0x27fc]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x23a]
add edx, 0x10320
push edx
call fcn.004e8ae0
add esp, 0xc
mov eax, dword [ebp - 0x1e5c]
sar eax, 8
and eax, 0xff
mov byte [ebp - 0x1e48], al
mov ecx, dword [ebp - 0x1e5c]
and ecx, 0xff
mov byte [ebp - 0x1e47], cl
mov edx, dword [ebp - 0x2dbc]
and edx, 0xf
mov byte [ebp - 0x1e41], dl
cmp dword [ebp - 0x15f8], 0
je 0x489c5a
mov al, byte [ebp - 0x1e41]
or al, 0x10
mov byte [ebp - 0x1e41], al
jmp 0x489c69
mov cl, byte [ebp - 0x1e41]
and cl, 0xef
mov byte [ebp - 0x1e41], cl
cmp dword [ebp - 0x1e64], 0
je 0x489c83
mov dl, byte [ebp - 0x1e41]
or dl, 0x20
mov byte [ebp - 0x1e41], dl
jmp 0x489c91
mov al, byte [ebp - 0x1e41]
and al, 0xdf
mov byte [ebp - 0x1e41], al
cmp dword [ebp - 0x2804], 0
je 0x489cd4
cmp dword [ebp - 0x2890], 0
je 0x489cba
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
or ecx, 0x20
mov byte [ebp - 0x1e40], cl
jmp 0x489cd2
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
and edx, 0xdf
mov byte [ebp - 0x1e40], dl
jmp 0x489ce7
mov eax, dword [ebp - 0x1e40]
and eax, 0xff
or al, 0x20
mov byte [ebp - 0x1e40], al
cmp dword [ebp - 0x2810], 1
je 0x489cf9
cmp dword [ebp - 0x2844], 1
jne 0x489d10
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
or ecx, 0x40
mov byte [ebp - 0x1e40], cl
jmp 0x489d28
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
and edx, 0xbf
mov byte [ebp - 0x1e40], dl
cmp dword [ebp - 0x1e60], 1
jne 0x489d46
mov eax, dword [ebp - 0x1e40]
and eax, 0xff
or al, 1
mov byte [ebp - 0x1e40], al
jmp 0x489d5e
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
and ecx, 0xfe
mov byte [ebp - 0x1e40], cl
cmp dword [ebp - 0x286c], 1
jne 0x489d7e
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
or dl, 0x80
mov byte [ebp - 0x1e40], dl
jmp 0x489d92
mov eax, dword [ebp - 0x1e40]
and eax, 0xff
and eax, 0x7f
mov byte [ebp - 0x1e40], al
cmp dword [ebp - 0x288c], 1
jne 0x489db2
mov ecx, dword [ebp - 0x1e40]
and ecx, 0xff
or ecx, 2
mov byte [ebp - 0x1e40], cl
jmp 0x489dca
mov edx, dword [ebp - 0x1e40]
and edx, 0xff
and edx, 0xfd
mov byte [ebp - 0x1e40], dl
mov eax, dword [ebp - 0x15fc]
shl eax, 4
mov cl, byte [ebp - 0x1e3f]
or cl, al
mov byte [ebp - 0x1e3f], cl
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7fb], 0
je 0x489dfd
mov al, byte [ebp - 0x1e3f]
or al, 1
mov byte [ebp - 0x1e3f], al
jmp 0x489e0c
mov cl, byte [ebp - 0x1e3f]
and cl, 0xfe
mov byte [ebp - 0x1e3f], cl
cmp dword [ebp - 0x283c], 0
je 0x489e26
mov dl, byte [ebp - 0x1e3f]
or dl, 2
mov byte [ebp - 0x1e3f], dl
jmp 0x489e34
mov al, byte [ebp - 0x1e3f]
and al, 0xfd
mov byte [ebp - 0x1e3f], al
cmp dword [ebp - 0x1e58], 0
je 0x489e4e
mov cl, byte [ebp - 0x1e3f]
or cl, 4
mov byte [ebp - 0x1e3f], cl
jmp 0x489e5d
mov dl, byte [ebp - 0x1e3f]
and dl, 0xfb
mov byte [ebp - 0x1e3f], dl
cmp dword [ebp - 0x2838], 0
je 0x489e76
mov al, byte [ebp - 0x1e3f]
or al, 8
mov byte [ebp - 0x1e3f], al
jmp 0x489e85
mov cl, byte [ebp - 0x1e3f]
and cl, 0xf7
mov byte [ebp - 0x1e3f], cl
mov edx, dword [ebp - 0x2870]
sar edx, 8
and edx, 0xff
mov al, byte [ebp - 0x1e3c]
or al, dl
mov byte [ebp - 0x1e3c], al
mov ecx, dword [ebp - 0x2870]
and ecx, 0xff
mov dl, byte [ebp - 0x1e3b]
or dl, cl
mov byte [ebp - 0x1e3b], dl
cmp dword [ebp - 0x23fc], 5
je 0x489ece
cmp dword [ebp - 0x23fc], 6
jne 0x489ed8
mov dword [ebp - 0x23fc], 0
mov al, byte [ebp - 0x2840]
mov byte [ebp - 0x1e3a], al
mov ecx, dword [ebp - 0x23fc]
shl ecx, 1
mov dl, byte [ebp - 0x1e3a]
or dl, cl
mov byte [ebp - 0x1e3a], dl
mov eax, dword [ebp - 0x1570]
and eax, 0xf
shl eax, 4
mov cl, byte [ebp - 0x1e3a]
or cl, al
mov byte [ebp - 0x1e3a], cl
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x74b]
mov byte [ebp - 0x1e39], al
mov cl, byte [ebp - 0x1564]
mov byte [ebp - 0x1e38], cl
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7fb], 0
je 0x489fa3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7eb]
shr ecx, 0x18
and ecx, 0xff
mov byte [ebp - 0x1e37], cl
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x7eb]
shr eax, 0x10
and eax, 0xff
mov byte [ebp - 0x1e36], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7eb]
shr edx, 8
and edx, 0xff
mov byte [ebp - 0x1e35], dl
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7eb]
and ecx, 0xff
mov byte [ebp - 0x1e34], cl
mov byte [ebp - 0x1e3e], 0
jmp 0x48a230
mov dword [ebp - 0x3228], 0
mov dword [ebp - 0x3224], 0
mov dword [ebp - 0x3244], 0
mov dword [ebp - 0x3240], 0x75fc90
mov dword [ebp - 0x323c], 0xebfd10
mov dword [ebp - 0x3238], 0x1d80000
mov dword [ebp - 0x3234], 0x3b00000
mov dword [ebp - 0x3230], 0x7600000
mov dword [ebp - 0x322c], 0xec00000
mov dword [ebp - 0x3220], 0
mov dword [ebp - 0x321c], 0xf2670
mov dword [ebp - 0x3218], 0x1d7c30
mov dword [ebp - 0x3214], 0x3afc50
mov dword [ebp - 0x3210], 0x75fc90
mov dword [ebp - 0x320c], 0xebfd10
mov dword [ebp - 0x3208], 0x1d80000
mov dword [ebp - 0x3204], 0x3b00000
mov dword [ebp - 0x3200], 0x7600000
mov dword [ebp - 0x31fc], 0xec00000
mov dword [ebp - 0x31f8], 0x1d800000
mov dword [ebp - 0x31f4], 0x3b000000
mov dword [ebp - 0x31f0], 0x76000000
mov dword [ebp - 0x31ec], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x7b3], 0
jne 0x48a0b0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7af]
mov edx, dword [ebp + ecx*4 - 0x3220]
mov dword [ebp - 0x3228], edx
jmp case.default.0x48a0d2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7af]
mov dword [ebp - 0x34fc], ecx
cmp dword [ebp - 0x34fc], 0xf
ja case.default.0x48a0d2
mov edx, dword [ebp - 0x34fc]
jmp dword [edx*4 + 0x48b43b]
mov dword [ebp - 0x3228], 0x1dd40b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x3aa6a60
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x5971cb0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x6fccf30
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x7740ab0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x950f8b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0xdf94bb0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0xee7c2b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x1bf244b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x1d1c5970
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x1dcf32b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x37e436b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x3a386030
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x3b9e12b0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x6fc81ab0
jmp case.default.0x48a0d2
mov dword [ebp - 0x3228], 0x773bd2b0
cmp dword [ebp - 0x3228], 0
je 0x48a1e0
mov eax, dword [ebp + 8]
mov dword [eax + 0x7fb], 1
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x3228]
mov dword [ecx + 0x7eb], edx
mov al, byte [ebp - 0x1e3f]
or al, 1
mov byte [ebp - 0x1e3f], al
mov byte [ebp - 0x1e3e], 0
mov ecx, dword [ebp - 0x3228]
shr ecx, 0x18
and ecx, 0xff
mov byte [ebp - 0x1e37], cl
mov edx, dword [ebp - 0x3228]
shr edx, 0x10
and edx, 0xff
mov byte [ebp - 0x1e36], dl
mov eax, dword [ebp - 0x3228]
shr eax, 8
and eax, 0xff
mov byte [ebp - 0x1e35], al
mov ecx, dword [ebp - 0x3228]
and ecx, 0xff
mov byte [ebp - 0x1e34], cl
mov edx, dword [ebp + 8]
cmp dword [edx + 0x74], 0
je 0x48a261
mov al, byte [ebp - 0x1e33]
or al, 0x80
mov byte [ebp - 0x1e33], al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x7d7]
and edx, 0x3f
mov al, byte [ebp - 0x1e33]
or al, dl
mov byte [ebp - 0x1e33], al
cmp dword [ebp - 0xd60], 0
je 0x48a27b
mov cl, byte [ebp - 0x1e33]
or cl, 0x40
mov byte [ebp - 0x1e33], cl
jmp 0x48a28a
mov dl, byte [ebp - 0x1e33]
and dl, 0xbf
mov byte [ebp - 0x1e33], dl
mov al, byte [ebp - 0x1c]
mov byte [ebp - 0x1e32], al
mov cl, byte [ebp - 0x2dc0]
mov byte [ebp - 0x1e31], cl
cmp dword [0x56ca48], 0
je 0x48a2ce
mov edx, dword [ebp - 0x287c]
sar edx, 8
and edx, 0xff
mov byte [ebp - 0x1e4a], dl
mov eax, dword [ebp - 0x287c]
and eax, 0xff
mov byte [ebp - 0x1e49], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7a3], 0
je 0x48a304
mov edx, dword [ebp + 8]
cmp dword [edx + 0x78], 0
je 0x48a304
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x7db]
sar ecx, 8
mov byte [ebp - 0x1e30], cl
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x7db]
mov byte [ebp - 0x1e2f], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7c3], 0
je 0x48a34a
mov dl, byte [ebp - 0x1e2e]
or dl, 1
mov byte [ebp - 0x1e2e], dl
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0x7c7]
mov byte [ebp - 0x1e38], cl
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x7cb]
shl eax, 4
mov cl, byte [ebp - 0x1e38]
or cl, al
mov byte [ebp - 0x1e38], cl
jmp 0x48a359
mov dl, byte [ebp - 0x1e2e]
and dl, 0xfe
mov byte [ebp - 0x1e2e], dl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7cf], 0
je 0x48a376
mov cl, byte [ebp - 0x1e2e]
or cl, 2
mov byte [ebp - 0x1e2e], cl
jmp 0x48a385
mov dl, byte [ebp - 0x1e2e]
and dl, 0xfd
mov byte [ebp - 0x1e2e], dl
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7d3], 0
je 0x48a3a2
mov cl, byte [ebp - 0x1e2e]
or cl, 8
mov byte [ebp - 0x1e2e], cl
jmp 0x48a3b1
mov dl, byte [ebp - 0x1e2e]
and dl, 0xf7
mov byte [ebp - 0x1e2e], dl
mov dword [ebp - 0x1808], 0x30
push 0xa
push 0x56085c
mov eax, dword [ebp - 0x1808]
lea ecx, [ebp + eax - 0x1e4c]
push ecx
call fcn.004e8ae0
add esp, 0xc
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x299c]
mov byte [ebp + edx - 0x1e42], al
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x2dac]
mov byte [ebp + ecx - 0x1e41], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0x10]
mov byte [ebp + eax - 0x1e40], cl
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0xa30]
mov byte [ebp + edx - 0x1e3f], al
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0xd40]
mov byte [ebp + ecx - 0x1e3e], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0xd48]
mov byte [ebp + eax - 0x1e3d], cl
mov eax, dword [ebp - 0xa38]
cdq
and edx, 0x3ff
add eax, edx
sar eax, 0xa
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3c], al
cmp dword [ebp - 0xd58], 0x40
jne 0x48a482
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3b], 1
jmp 0x48a52b
cmp dword [ebp - 0xd58], 0x80
jne 0x48a4a1
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3b], 2
jmp 0x48a52b
cmp dword [ebp - 0xd58], 0xc0
jne 0x48a4bd
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3b], 3
jmp 0x48a52b
cmp dword [ebp - 0xd58], 0x100
jne 0x48a4d9
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3b], 4
jmp 0x48a52b
cmp dword [ebp - 0xd58], 0x102
jne 0x48a4f5
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3b], 5
jmp 0x48a52b
cmp dword [ebp - 0xd58], 0x200
jne 0x48a511
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3b], 6
jmp 0x48a52b
cmp dword [ebp - 0xd58], 0x204
jne 0x48a52b
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3b], 7
cmp dword [ebp - 0x180c], 4
jne 0x48a544
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3a], 1
jmp 0x48a58d
cmp dword [ebp - 0x180c], 8
jne 0x48a55d
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e3a], 2
jmp 0x48a58d
cmp dword [ebp - 0x180c], 0x10
jne 0x48a576
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e3a], 3
jmp 0x48a58d
cmp dword [ebp - 0x180c], 0x20
jne 0x48a58d
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e3a], 4
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x1c3c]
mov byte [ebp + edx - 0x1e39], al
mov ecx, dword [ebp - 0x2870]
sar ecx, 8
and ecx, 0xff
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e38], cl
mov eax, dword [ebp - 0x2870]
and eax, 0xff
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e37], al
cmp dword [ebp - 0x2db8], 1
jne 0x48a5ed
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e36], 0
jmp 0x48a61d
cmp dword [ebp - 0x2db8], 2
jne 0x48a606
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e36], 1
jmp 0x48a61d
cmp dword [ebp - 0x2db8], 4
jne 0x48a61d
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e36], 2
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x2db4]
mov byte [ebp + edx - 0x1e35], al
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0xf4], 0
je 0x48a67c
mov eax, dword [ebp - 0x2868]
cdq
mov ecx, 0x64
idiv ecx
sar eax, 8
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e34], al
mov eax, dword [ebp - 0x2868]
cdq
mov ecx, 0x64
idiv ecx
and eax, 0xff
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e33], al
jmp 0x48a6ab
mov eax, dword [ebp - 0x23f0]
sar eax, 8
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e34], al
mov edx, dword [ebp - 0x23f0]
and edx, 0xff
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e33], dl
cmp dword [ebp - 0x23f4], 0
jne 0x48a6c4
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e32], 1
jmp 0x48a6d2
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e32], 2
mov eax, dword [ebp - 0xd50]
add eax, 1
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e31], al
mov edx, dword [ebp - 0x2864]
and edx, 0xff
or edx, 4
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e30], dl
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x23f8]
mov byte [ebp + ecx - 0x1e2f], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0xd5c]
mov byte [ebp + eax - 0x1e2e], cl
mov edx, dword [ebp - 0x23ec]
sar edx, 8
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e2d], dl
mov ecx, dword [ebp - 0x23ec]
and ecx, 0xff
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e2c], cl
cmp dword [ebp - 0x2890], 0
je 0x48a772
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e2b], 1
jmp 0x48a780
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e2b], 0
mov edx, dword [ebp - 0x1808]
mov al, byte [ebp - 0x2884]
mov byte [ebp + edx - 0x1e2a], al
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x2858]
mov byte [ebp + ecx - 0x1e29], dl
mov dword [ebp - 0x2808], 0
mov dword [ebp - 0x2800], 0
jmp 0x48a7cb
mov eax, dword [ebp - 0x2800]
add eax, 1
mov dword [ebp - 0x2800], eax
cmp dword [ebp - 0x2800], 4
jge 0x48a80b
mov ecx, dword [ebp - 0x2800]
cmp dword [ebp + ecx*4 - 0x1c24], 0
je 0x48a809
mov edx, dword [ebp - 0x2800]
mov eax, dword [ebp + edx*4 - 0x1c24]
imul eax, dword [ebp - 0x2db8]
cmp eax, 4
jle 0x48a807
mov dword [ebp - 0x2808], 0x11
jmp 0x48a80b
jmp 0x48a7bc
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 0
jne 0x48a8e4
mov edx, dword [ebp - 0xa34]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x2db0]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0xa34]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x2db0]
add ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x48a8df
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xb
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xb
mov dword [ebp - 0x3480], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x3480]
jmp 0x48b41b
jmp 0x48ab6a
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 1
jne 0x48a9bd
mov edx, dword [ebp - 0x280c]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0x2834]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x280c]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0x2834]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0x280c]
add ecx, dword [ebp - 0x2834]
test ecx, ecx
jne 0x48a9b8
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xc
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xc
mov dword [ebp - 0x3484], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x3484]
jmp 0x48b41b
jmp 0x48ab6a
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 2
jne 0x48aa96
mov edx, dword [ebp - 0x2860]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0xd4c]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x2860]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0xd4c]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0x2860]
add ecx, dword [ebp - 0xd4c]
test ecx, ecx
jne 0x48aa91
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xd
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xd
mov dword [ebp - 0x3488], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x3488]
jmp 0x48b41b
jmp 0x48ab6a
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x7e3], 3
jne 0x48ab6a
mov edx, dword [ebp - 0x285c]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e28], dl
mov ecx, dword [ebp - 0x2880]
add ecx, dword [ebp - 0x2808]
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e27], cl
mov eax, dword [ebp - 0x285c]
add eax, dword [ebp - 0x2808]
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e26], al
mov edx, dword [ebp - 0x2880]
add edx, dword [ebp - 0x2808]
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e25], dl
mov ecx, dword [ebp - 0x285c]
add ecx, dword [ebp - 0x2880]
test ecx, ecx
jne 0x48ab6a
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xe
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xe
mov dword [ebp - 0x348c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x348c]
jmp 0x48b41b
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x1c38]
mov byte [ebp + ecx - 0x1e24], dl
cmp dword [ebp - 0x2830], 0
je 0x48abea
cmp dword [ebp - 0x156c], 0
jne 0x48ab9f
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e23], 0x12
jmp 0x48abe8
cmp dword [ebp - 0x156c], 1
jne 0x48abb8
mov ecx, dword [ebp - 0x1808]
mov byte [ebp + ecx - 0x1e23], 0x18
jmp 0x48abe8
cmp dword [ebp - 0x156c], 2
jne 0x48abd1
mov edx, dword [ebp - 0x1808]
mov byte [ebp + edx - 0x1e23], 0x1f
jmp 0x48abe8
cmp dword [ebp - 0x156c], 3
jne 0x48abe8
mov eax, dword [ebp - 0x1808]
mov byte [ebp + eax - 0x1e23], 0x26
jmp 0x48abfd
mov ecx, dword [ebp - 0x1808]
mov dl, byte [ebp - 0x23e8]
mov byte [ebp + ecx - 0x1e23], dl
mov eax, dword [ebp - 0x1808]
mov cl, byte [ebp - 0xa2c]
mov byte [ebp + eax - 0x1e1c], cl
cmp dword [ebp - 0x2db4], 3
jne 0x48ac8e
cmp dword [ebp - 0x2858], 0
je 0x48ac8e
push 0x400
lea edx, [ebp - 0x81c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
add ecx, 0x10320
push ecx
call fcn.004e8ae0
add esp, 0xc
push 0x400
lea edx, [ebp - 0x41c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
add ecx, 0x10720
push ecx
call fcn.004e8ae0
add esp, 0xc
push 0x400
lea edx, [ebp - 0x1560]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
add ecx, 0x10b20
push ecx
call fcn.004e8ae0
add esp, 0xc
mov edx, dword [ebp + 8]
cmp dword [edx + 0x797], 0
je 0x48adf7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
mov dword [ebp - 0x3448], ecx
push 0x200
lea edx, [ebp - 0x3444]
push edx
call fcn.004b7127
add esp, 8
lea eax, [ebp - 0x3444]
push eax
push str._sFile_For_Linux_ToolPRET.bin
lea ecx, [ebp - 0x3444]
push ecx
call fcn.004e894d
add esp, 0xc
push 0x560888
lea edx, [ebp - 0x3444]
push edx
call fcn.004e87f4
add esp, 8
mov dword [ebp - 0x344c], eax
mov eax, dword [ebp - 0x344c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x75f]
sub edx, 0x20
push edx
push 1
mov eax, dword [ebp - 0x3448]
add eax, 0x20
push eax
call fcn.004e8654
add esp, 0x10
mov ecx, dword [ebp - 0x344c]
push ecx
call fcn.004e84ec
add esp, 4
push 0x200
push 0
lea edx, [ebp - 0x3444]
push edx
call fcn.004e8440
add esp, 0xc
push 0x200
lea eax, [ebp - 0x3444]
push eax
call fcn.004b7127
add esp, 8
lea ecx, [ebp - 0x3444]
push ecx
push str._sFile_For_Linux_ToolPRETH.bin
lea edx, [ebp - 0x3444]
push edx
call fcn.004e894d
add esp, 0xc
push 0x5608b0
lea eax, [ebp - 0x3444]
push eax
call fcn.004e87f4
add esp, 8
mov dword [ebp - 0x344c], eax
mov ecx, dword [ebp - 0x344c]
push ecx
push 0x200
push 1
lea edx, [ebp - 0x1e4c]
push edx
call fcn.004e8654
add esp, 0x10
mov eax, dword [ebp - 0x344c]
push eax
call fcn.004e84ec
add esp, 4
cmp dword [0x672ce4], 0
je 0x48adf7
mov dword [ebp - 0x3490], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x3490]
jmp 0x48b41b
push str.Lance_11
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov dword [ebp - 0x2da8], 0
mov dword [ebp - 0x1e54], 0
mov ecx, dword [ebp - 0x1e43]
and ecx, 0xff
shl ecx, 0x18
mov edx, dword [ebp - 0x1e44]
and edx, 0xff
shl edx, 0x10
add ecx, edx
mov eax, dword [ebp - 0x1e45]
and eax, 0xff
shl eax, 8
add ecx, eax
mov edx, dword [ebp - 0x1e46]
and edx, 0xff
add ecx, edx
mov dword [ebp - 0x2da8], ecx
mov eax, dword [ebp - 0x1e43]
and eax, 0xff
shl eax, 0x18
mov ecx, dword [ebp - 0x1e44]
and ecx, 0xff
shl ecx, 0x10
add eax, ecx
mov edx, dword [ebp - 0x1e45]
and edx, 0xff
shl edx, 8
add eax, edx
mov ecx, dword [ebp - 0x1e46]
and ecx, 0xff
add eax, ecx
mov dword [ebp - 0x1e54], eax
mov dword [0x6729dc], 1
cmp dword [ebp - 0x2ba4], 1
jle 0x48b14f
mov dword [ebp - 0x2800], 0
jmp 0x48aed0
mov edx, dword [ebp - 0x2800]
add edx, 1
mov dword [ebp - 0x2800], edx
mov eax, dword [ebp - 0x2800]
cmp eax, dword [ebp - 0x2ba4]
jge 0x48b14d
mov ecx, dword [ebp - 0x2ba4]
sub ecx, 1
cmp dword [ebp - 0x2800], ecx
jne 0x48b03f
mov edx, dword [ebp - 0x1e54]
and edx, 0xff
mov byte [ebp - 0x1e46], dl
mov eax, dword [ebp - 0x1e54]
sar eax, 8
and eax, 0xff
mov byte [ebp - 0x1e45], al
mov ecx, dword [ebp - 0x1e54]
sar ecx, 0x10
and ecx, 0xff
mov byte [ebp - 0x1e44], cl
mov edx, dword [ebp - 0x1e54]
sar edx, 0x18
and edx, 0xff
mov byte [ebp - 0x1e43], dl
mov eax, dword [ebp - 0x281c]
and eax, 0xff
test eax, eax
je 0x48af92
mov ecx, dword [ebp - 0x1e50]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x23a]
mov ecx, dword [ebp - 0x2800]
shl ecx, 6
shl ecx, 0xa
lea edx, [eax + ecx + 0x20]
push edx
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00482cd8
add esp, 0x10
mov dword [ebp - 0x2998], eax
jmp 0x48afca
push 0x10000
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x23a]
mov ecx, dword [ebp - 0x2800]
shl ecx, 6
shl ecx, 0xa
lea edx, [eax + ecx + 0x20]
push edx
lea eax, [ebp - 0x1e4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00482cd8
add esp, 0x10
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48b03a
mov edx, dword [ebp + 8]
mov dword [edx + 0xc24], 0xb4
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0xb4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 7
mov dword [0x6729dc], 0
mov dword [ebp - 0x3494], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x3494]
jmp 0x48b41b
jmp 0x48b137
mov edx, dword [ebp - 0x1e54]
and edx, 0xff
mov byte [ebp - 0x1e46], dl
mov eax, dword [ebp - 0x1e54]
sar eax, 8
and eax, 0xff
mov byte [ebp - 0x1e45], al
mov ecx, dword [ebp - 0x1e54]
sar ecx, 0x10
and ecx, 0xff
mov byte [ebp - 0x1e44], cl
mov edx, dword [ebp - 0x1e54]
sar edx, 0x18
and edx, 0xff
mov byte [ebp - 0x1e43], dl
push 0x10000
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x23a]
mov edx, dword [ebp - 0x2800]
shl edx, 6
shl edx, 0xa
lea eax, [ecx + edx + 0x20]
push eax
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00482cd8
add esp, 0x10
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48b137
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xb4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc2c], 0xb4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 8
mov dword [0x6729dc], 0
mov dword [ebp - 0x3498], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x3498]
jmp 0x48b41b
mov eax, dword [ebp - 0x1e54]
add eax, 0x10000
mov dword [ebp - 0x1e54], eax
jmp 0x48aec1
jmp 0x48b17f
mov ecx, dword [ebp - 0xd44]
shl ecx, 9
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x23a]
add eax, 0x20
push eax
lea ecx, [ebp - 0x1e4c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00482cd8
add esp, 0x10
mov dword [ebp - 0x2998], eax
cmp dword [ebp - 0x2998], 0
jne 0x48b1ef
mov eax, dword [ebp + 8]
mov dword [eax + 0xc24], 0xb4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc2c], 0xb4
mov edx, dword [ebp + 8]
mov dword [edx + 0xc18], 9
mov dword [0x6729dc], 0
mov dword [ebp - 0x349c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x349c]
jmp 0x48b41b
mov byte [ebp - 0x1e4b], 0x28
mov eax, dword [ebp - 0x2da8]
and eax, 0xff
mov byte [ebp - 0x1e46], al
mov ecx, dword [ebp - 0x2da8]
sar ecx, 8
and ecx, 0xff
mov byte [ebp - 0x1e45], cl
mov edx, dword [ebp - 0x2da8]
sar edx, 0x10
and edx, 0xff
mov byte [ebp - 0x1e44], dl
mov eax, dword [ebp - 0x2da8]
sar eax, 0x18
and eax, 0xff
mov byte [ebp - 0x1e43], al
push 0x200
lea ecx, [ebp - 0xd3c]
push ecx
lea edx, [ebp - 0x1e4c]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00482cd8
add esp, 0x10
mov dword [ebp - 0x2998], eax
mov dword [0x6729dc], 0
cmp dword [ebp - 0x2998], 0
jne 0x48b2da
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc24], 0xb5
mov edx, dword [ebp + 8]
mov dword [edx + 0xc2c], 0xb5
mov eax, dword [ebp + 8]
mov dword [eax + 0xc18], 0xa
mov dword [ebp - 0x34a0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x34a0]
jmp 0x48b41b
cmp dword [0x672ff4], 1
jne 0x48b3b7
cmp dword [0x673014], 1
jne 0x48b3b7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x232]
push edx
call fcn.004b3761
add esp, 4
test eax, eax
jne 0x48b35a
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0x12
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0x11
mov dword [ebp - 0x34a4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x34a4]
jmp 0x48b41b
mov edx, dword [ebp + 8]
push edx
call fcn.004b3843
add esp, 4
test eax, eax
jne 0x48b3b7
mov eax, dword [ebp + 8]
mov dword [eax + 0xc2c], 0x13
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc18], 0x12
mov dword [ebp - 0x34a8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x34a8]
jmp 0x48b41b
push str.Lance_12
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [0x673014], 1
je 0x48b3d4
cmp dword [0x672ff8], 0
je 0x48b3ea
push 0
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x232]
push eax
call fcn.004b3a45
add esp, 0xc
mov dword [ebp - 0x34ac], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x282c]
call fcn.0050dff5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c34]
call fcn.0050dff5
mov eax, dword [ebp - 0x34ac]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret