Function at 0x48dbd0
Capabilities:
Parse pe header

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b5c28
push eax
mov dword fs:[0], esp
sub esp, 0x80
push ebx
push ebp
push esi
mov esi, ecx
mov ebp, 0x12c
lea ebx, [esi + 0x6fda8]
mov ecx, dword [ebx]
test ecx, ecx
je 0x48dc07
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebx], 0
add ebx, 4
dec ebp
jne 0x48dbfb
xor eax, eax
lea ecx, [esi + 0x71120]
cmp dword [ecx], 0
je 0x48f7d7
inc eax
add ecx, 4
cmp eax, 0x5c
jl 0x48dc1b
push edi
mov edi, dword [esp + 0xa0]
mov ebp, 0x4bd870
mov eax, edi
mov dl, byte [eax]
mov bl, byte [ebp]
mov cl, dl
cmp dl, bl
jne 0x48dc65
test cl, cl
je 0x48dc61
mov dl, byte [eax + 1]
mov bl, byte [ebp + 1]
mov cl, dl
cmp dl, bl
jne 0x48dc65
add eax, 2
add ebp, 2
test cl, cl
jne 0x48dc3c
xor eax, eax
jmp 0x48dc6a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48e9f2
mov ebx, dword [sym.imp.kernel32.dll_GetProcessHeap]
push 0x18
push 8
call ebx
mov ebp, dword [sym.imp.kernel32.dll_HeapAlloc]
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0
je 0x48dcb1
mov ecx, dword [esi + 0x71128]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.004a5770
jmp 0x48dcb3
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fda8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 1
je 0x48dcec
mov ecx, dword [esi + 0x7112c]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.004a5770
jmp 0x48dcee
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdac], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 2
je 0x48dd22
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48dd24
xor eax, eax
mov dword [esi + 0x6fdb0], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x71130]
mov eax, dword [esp + 0xa4]
push eax
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 8]
push edx
push 0x4c6ebc
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 3
je 0x48dd8a
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48dd8c
xor eax, eax
mov edx, dword [esp + 0xa8]
mov dword [esi + 0x6fdb4], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x71134]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4c6ebc
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 4
je 0x48ddf2
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ddf4
xor eax, eax
mov edx, dword [esp + 0xac]
mov dword [esi + 0x6fdb8], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x71138]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4c6ebc
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 5
je 0x48de5a
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48de5c
xor eax, eax
mov edx, dword [esp + 0xb0]
mov dword [esi + 0x6fdbc], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x71208]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4c6ebc
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 6
je 0x48dec2
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48dec4
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdc0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 7
je 0x48def8
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48defa
xor eax, eax
mov edx, dword [esp + 0xc0]
mov dword [esi + 0x6fdc4], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
mov edx, dword [esp + 0xb8]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
push eax
push ecx
push edx
push 0x4c72f8
lea eax, [esp + 0x2c]
push 0x4c72e8
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x1c
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 8
je 0x48df73
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48df75
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdc8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 9
je 0x48dfa9
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48dfab
xor eax, eax
mov dword [esi + 0x6fdcc], eax
mov eax, dword [esp + 0xa8]
or edi, 0xffffffff
test eax, eax
mov dword [esp + 0x98], edi
jne 0x48e325
mov eax, dword [esi + 0x725dc]
cmp eax, 1
jne 0x48f7b6
mov ecx, dword [esi + 0x725d8]
test ecx, ecx
jne 0x48e140
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xa
je 0x48e029
mov edx, dword [esi + 0x7120c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e02b
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xb
je 0x48e064
mov edx, dword [esi + 0x71210]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e066
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xc
je 0x48e09f
mov edx, dword [esi + 0x71214]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e0a1
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x10], eax
test eax, eax
mov dword [esp + 0x98], 0xd
je 0x48e0da
mov edx, dword [esi + 0x71218]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e0dc
xor eax, eax
mov dword [esi + 0x6fddc], eax
lea edi, [esi + 0x6fde0]
mov dword [esp + 0x10], 4
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0xe
je 0x48e11e
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e120
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48e0f0
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
cmp dword [esi + 0x725d8], 1
jne 0x48f7b6
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0xf
je 0x48e198
mov edx, dword [esi + 0x71234]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e19a
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x10
je 0x48e1d3
mov edx, dword [esi + 0x71238]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e1d5
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x11
je 0x48e20e
mov edx, dword [esi + 0x7123c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e210
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x12
je 0x48e249
mov edx, dword [esi + 0x71240]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e24b
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fddc], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x13
je 0x48e284
mov edx, dword [esi + 0x71244]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e286
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x14
je 0x48e2bf
mov edx, dword [esi + 0x71248]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e2c1
xor eax, eax
mov dword [esi + 0x6fde4], eax
lea edi, [esi + 0x6fde8]
mov dword [esp + 0x10], 2
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x15
je 0x48e303
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e305
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48e2d5
jmp 0x48f7c5
mov eax, dword [esp + 0xa4]
test eax, eax
mov eax, dword [esi + 0x725dc]
je 0x48e6b4
cmp eax, 1
jne 0x48f7b6
mov ecx, dword [esi + 0x725d8]
test ecx, ecx
jne 0x48e48d
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0x15
push 0x43
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0x16
push 0x43
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x16
je 0x48e3b1
mov edx, dword [esi + 0x7121c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e3b3
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x17
je 0x48e3ec
mov edx, dword [esi + 0x71220]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e3ee
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x18
je 0x48e427
mov edx, dword [esi + 0x71224]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e429
xor eax, eax
mov dword [esi + 0x6fdd8], eax
lea edi, [esi + 0x6fddc]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x19
je 0x48e46b
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e46d
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48e43d
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
cmp dword [esi + 0x725d8], 1
jne 0x48f7b6
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0xc
push 0x43
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0xd
push 0x43
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1a
je 0x48e503
mov edx, dword [esi + 0x7124c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e505
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1b
je 0x48e53e
mov edx, dword [esi + 0x71250]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e540
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1c
je 0x48e579
mov edx, dword [esi + 0x71254]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e57b
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1d
je 0x48e5b4
mov edx, dword [esi + 0x71258]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e5b6
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fddc], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1e
je 0x48e5ef
mov edx, dword [esi + 0x7125c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e5f1
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x1f
je 0x48e62a
mov edx, dword [esi + 0x71260]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e62c
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x20
je 0x48e665
mov edx, dword [esi + 0x71264]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e667
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x21
je 0x48f7a5
mov edx, dword [esi + 0x71268]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
mov dword [esp + 0x98], edi
mov dword [esi + 0x6fdec], eax
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
mov ecx, dword [esi + 0x725d8]
test ecx, ecx
jne 0x48e7e9
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x23
je 0x48e70d
mov edx, dword [esi + 0x71228]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e70f
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x24
je 0x48e748
mov edx, dword [esi + 0x7122c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e74a
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x25
je 0x48e783
mov edx, dword [esi + 0x71230]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e785
xor eax, eax
mov dword [esi + 0x6fdd8], eax
lea edi, [esi + 0x6fddc]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x26
je 0x48e7c7
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e7c9
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48e799
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
cmp dword [esi + 0x725d8], 1
jne 0x48f7b6
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x27
je 0x48e841
mov edx, dword [esi + 0x7126c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e843
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x28
je 0x48e87c
mov edx, dword [esi + 0x71270]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e87e
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x29
je 0x48e8b7
mov edx, dword [esi + 0x71274]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e8b9
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2a
je 0x48e8f2
mov edx, dword [esi + 0x71278]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e8f4
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fddc], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2b
je 0x48e92d
mov edx, dword [esi + 0x7127c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e92f
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2c
je 0x48e968
mov edx, dword [esi + 0x71280]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e96a
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2d
je 0x48e9a3
mov edx, dword [esi + 0x71284]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48e9a5
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x2e
je 0x48f7a5
mov edx, dword [esi + 0x71288]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
mov dword [esp + 0x98], edi
mov dword [esi + 0x6fdec], eax
jmp 0x48f7c5
mov ebp, 0x4bd85c
mov eax, edi
mov dl, byte [eax]
mov bl, byte [ebp]
mov cl, dl
cmp dl, bl
jne 0x48ea22
test cl, cl
je 0x48ea1e
mov dl, byte [eax + 1]
mov bl, byte [ebp + 1]
mov cl, dl
cmp dl, bl
jne 0x48ea22
add eax, 2
add ebp, 2
test cl, cl
jne 0x48e9f9
xor eax, eax
jmp 0x48ea27
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48f7c5
mov ebx, dword [sym.imp.kernel32.dll_GetProcessHeap]
push 0x18
push 8
call ebx
mov ebp, dword [sym.imp.kernel32.dll_HeapAlloc]
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x30
je 0x48ea6e
mov ecx, dword [esi + 0x7113c]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.004a5770
jmp 0x48ea70
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fda8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x31
je 0x48eaa9
mov ecx, dword [esi + 0x71140]
push 0
mov edx, dword [ecx + 8]
mov ecx, eax
push edx
push 0
call fcn.004a5770
jmp 0x48eaab
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdac], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x32
je 0x48eadf
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48eae1
xor eax, eax
mov dword [esi + 0x6fdb0], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x71130]
mov eax, dword [esp + 0xa4]
push eax
lea eax, [esp + 0x1c]
mov edx, dword [ecx + 8]
push edx
push 0x4c6ebc
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x33
je 0x48eb47
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48eb49
xor eax, eax
mov edx, dword [esp + 0xa8]
mov dword [esi + 0x6fdb4], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x71134]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4c6ebc
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x34
je 0x48ebaf
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ebb1
xor eax, eax
mov edx, dword [esp + 0xac]
mov dword [esi + 0x6fdb8], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x71138]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4c6ebc
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x35
je 0x48ec17
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ec19
xor eax, eax
mov edx, dword [esp + 0xb0]
mov dword [esi + 0x6fdbc], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x71208]
lea edx, [esp + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x4c6ebc
push edx
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x10
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x36
je 0x48ec7f
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ec81
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdc0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x37
je 0x48ecb5
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ecb7
xor eax, eax
mov edx, dword [esp + 0xc0]
mov dword [esi + 0x6fdc4], eax
mov ecx, 0x1e
xor eax, eax
lea edi, [esp + 0x18]
push edx
mov edx, dword [esp + 0xb8]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
push eax
push ecx
push edx
push 0x4c72f8
lea eax, [esp + 0x2c]
push 0x4c72e8
push eax
call dword [sym.imp.user32.dll_wsprintfA]
add esp, 0x1c
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x38
je 0x48ed30
lea ecx, [esp + 0x18]
push 0
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ed32
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdc8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x39
je 0x48ed66
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ed68
xor eax, eax
mov dword [esi + 0x6fdcc], eax
mov eax, dword [esp + 0xa8]
or edi, 0xffffffff
test eax, eax
mov dword [esp + 0x98], edi
jne 0x48f0e1
mov eax, dword [esi + 0x725dc]
cmp eax, 1
jne 0x48f7b6
cmp dword [esi + 0x725d8], eax
jne 0x48eefb
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3a
je 0x48ede4
mov edx, dword [esi + 0x7120c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ede6
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3b
je 0x48ee1f
mov edx, dword [esi + 0x71210]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ee21
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3c
je 0x48ee5a
mov edx, dword [esi + 0x71214]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ee5c
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3d
je 0x48ee95
mov edx, dword [esi + 0x71218]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ee97
xor eax, eax
mov dword [esi + 0x6fddc], eax
lea edi, [esi + 0x6fde0]
mov dword [esp + 0x10], 4
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3e
je 0x48eed9
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48eedb
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48eeab
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
mov eax, dword [esi + 0x725d8]
test eax, eax
jne 0x48f7b6
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x3f
je 0x48ef54
mov edx, dword [esi + 0x71234]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ef56
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x40
je 0x48ef8f
mov edx, dword [esi + 0x71238]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48ef91
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x41
je 0x48efca
mov edx, dword [esi + 0x7123c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48efcc
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x42
je 0x48f005
mov edx, dword [esi + 0x71240]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f007
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fddc], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x43
je 0x48f040
mov edx, dword [esi + 0x71244]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f042
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x44
je 0x48f07b
mov edx, dword [esi + 0x71248]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f07d
xor eax, eax
mov dword [esi + 0x6fde4], eax
lea edi, [esi + 0x6fde8]
mov dword [esp + 0x10], 2
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x45
je 0x48f0bf
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f0c1
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48f091
jmp 0x48f7c5
mov eax, dword [esp + 0xa4]
test eax, eax
mov eax, dword [esi + 0x725dc]
je 0x48f46f
cmp eax, 1
jne 0x48f7b6
cmp dword [esi + 0x725d8], eax
jne 0x48f247
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0x15
push 0x43
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0x16
push 0x43
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x46
je 0x48f16b
mov edx, dword [esi + 0x7121c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f16d
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x47
je 0x48f1a6
mov edx, dword [esi + 0x71220]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f1a8
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x48
je 0x48f1e1
mov edx, dword [esi + 0x71224]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f1e3
xor eax, eax
mov dword [esi + 0x6fdd8], eax
lea edi, [esi + 0x6fddc]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x49
je 0x48f225
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f227
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48f1f7
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
mov eax, dword [esi + 0x725d8]
test eax, eax
jne 0x48f7b6
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0xc
push 0x43
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0xd
push 0x43
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4a
je 0x48f2be
mov edx, dword [esi + 0x7124c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f2c0
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4b
je 0x48f2f9
mov edx, dword [esi + 0x71250]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f2fb
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4c
je 0x48f334
mov edx, dword [esi + 0x71254]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f336
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4d
je 0x48f36f
mov edx, dword [esi + 0x71258]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f371
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fddc], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4e
je 0x48f3aa
mov edx, dword [esi + 0x7125c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f3ac
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x4f
je 0x48f3e5
mov edx, dword [esi + 0x71260]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f3e7
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x50
je 0x48f420
mov edx, dword [esi + 0x71264]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f422
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x51
je 0x48f7a5
mov edx, dword [esi + 0x71268]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
mov dword [esp + 0x98], edi
mov dword [esi + 0x6fdec], eax
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
cmp dword [esi + 0x725d8], eax
jne 0x48f5a2
push 0
push 0
push 0x17
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x53
je 0x48f4c6
mov edx, dword [esi + 0x71228]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f4c8
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x54
je 0x48f501
mov edx, dword [esi + 0x7122c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f503
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x55
je 0x48f53c
mov edx, dword [esi + 0x71230]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f53e
xor eax, eax
mov dword [esi + 0x6fdd8], eax
lea edi, [esi + 0x6fddc]
mov dword [esp + 0x10], 5
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x56
je 0x48f580
push 0
push 0x4bd988
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f582
xor eax, eax
mov dword [edi], eax
mov eax, dword [esp + 0x10]
add edi, 4
dec eax
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], eax
jne 0x48f552
jmp 0x48f7c5
cmp eax, 1
jne 0x48f7b6
mov eax, dword [esi + 0x725d8]
test eax, eax
jne 0x48f7b6
push 0
push 0
push 0x18
push 0x45
mov ecx, esi
call fcn.00446e60
push 0x18
push 8
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x57
je 0x48f5fb
mov edx, dword [esi + 0x7126c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f5fd
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x58
je 0x48f636
mov edx, dword [esi + 0x71270]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f638
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x59
je 0x48f671
mov edx, dword [esi + 0x71274]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f673
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fdd8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5a
je 0x48f6ac
mov edx, dword [esi + 0x71278]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f6ae
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fddc], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5b
je 0x48f6e7
mov edx, dword [esi + 0x7127c]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f6e9
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde0], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5c
je 0x48f722
mov edx, dword [esi + 0x71280]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f724
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde4], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5d
je 0x48f75d
mov edx, dword [esi + 0x71284]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
jmp 0x48f75f
xor eax, eax
push 0x18
push 8
mov dword [esi + 0x6fde8], eax
call ebx
push eax
call ebp
mov dword [esp + 0x14], eax
test eax, eax
mov dword [esp + 0x98], 0x5e
je 0x48f7a5
mov edx, dword [esi + 0x71288]
push 0
mov ecx, dword [edx + 8]
push ecx
push 0
mov ecx, eax
call fcn.004a5770
mov dword [esp + 0x98], edi
mov dword [esi + 0x6fdec], eax
jmp 0x48f7c5
xor eax, eax
mov dword [esp + 0x98], edi
mov dword [esi + 0x6fdec], eax
jmp 0x48f7c5
push 0
push 0
push 0x19
push 0x45
mov ecx, esi
call fcn.00446e60
push 0
push 0
push 0
push 0
push 0x12
mov ecx, esi
call fcn.00438f60
pop edi
mov ecx, dword [esp + 0x8c]
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x8c
ret 0x24