Function at 0x4c9024
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4d4686
push dword fs:[eax]
mov dword fs:[eax], esp
test byte [ebx + 0x1c], 0x10
jne 0x4d4668
cmp byte [ebx + 0x1728], 0
jne 0x4d4668
mov eax, dword [ebx + 0xb0c]
call fcn.0047a680
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebx + 0xb14]
call fcn.0047a680
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebx + 0xa5c]
call fcn.0047a680
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebx + 0xb54]
call fcn.00476f24
mov eax, dword [0x545114]
mov eax, dword [eax]
call fcn.0047d570
xor edx, edx
mov eax, dword [ebx + 0x2f8]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x2f8]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x2f8]
call fcn.0043d844
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x2f8]
call fcn.0043d868
mov eax, dword [ebx + 0x2f8]
mov byte [eax + 0x2a9], 1
mov edx, dword [0x545114]
mov edx, dword [edx]
mov cl, 1
xchg edx, eax
call fcn.0047d57c
mov eax, dword [0x545114]
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [ebx + 0x8e0]
call fcn.0047d57c
mov eax, dword [0x5450cc]
mov al, byte [eax + 0x34]
test al, al
je 0x4c9128
sub al, 2
jne 0x4c9e8f
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x173
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4c918d
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4c9150
adc edx, 0
mov eax, dword [ebx + 0x304]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
mov eax, dword [ebx + 0x304]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x304]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 8
mov eax, dword [ebx + 0x83c]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sar edx, 1
jns 0x4c91b9
adc edx, 0
mov eax, dword [ebx + 0x304]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x4c91c9
adc eax, 0
sub eax, 0x9d
add edx, eax
mov eax, dword [ebx + 0x83c]
call fcn.0043d7f8
mov edx, 0x3d
mov eax, dword [ebx + 0x83c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 9
mov eax, dword [ebx + 0x844]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sar edx, 1
jns 0x4c9217
adc edx, 0
mov eax, dword [ebx + 0x304]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x4c9227
adc eax, 0
sub eax, 0x76
add edx, eax
mov eax, dword [ebx + 0x844]
call fcn.0043d7f8
mov edx, 0x29
mov eax, dword [ebx + 0x844]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xa
mov eax, dword [ebx + 0x840]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sar edx, 1
jns 0x4c9273
adc edx, 0
mov eax, dword [ebx + 0x304]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x4c9283
adc eax, 0
sub eax, 0x4e
add edx, eax
mov eax, dword [ebx + 0x840]
call fcn.0043d7f8
mov edx, 0x15
mov eax, dword [ebx + 0x840]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xb
mov eax, dword [ebx + 0x830]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sar edx, 1
jns 0x4c92cf
adc edx, 0
mov eax, dword [ebx + 0x304]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x4c92df
adc eax, 0
sub eax, 0x24
add edx, eax
mov eax, dword [ebx + 0x830]
call fcn.0043d7f8
mov edx, 0xb
mov eax, dword [ebx + 0x830]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x129
mov eax, dword [ebx + 0x850]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x2d
mov eax, dword [ebx + 0x850]
call fcn.0043d7f8
mov edx, 0xcc
mov eax, dword [ebx + 0x850]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x174
mov eax, dword [ebx + 0x854]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x27e
mov eax, dword [ebx + 0x854]
call fcn.0043d7f8
mov edx, 0x6b
mov eax, dword [ebx + 0x854]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x175
mov eax, dword [ebx + 0x86c]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x854]
mov edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x854]
add edx, dword [eax + 0x48]
add edx, 6
mov eax, dword [ebx + 0x86c]
call fcn.0043d7f8
mov edx, 0x6b
mov eax, dword [ebx + 0x86c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x176
mov eax, dword [ebx + 0x610]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x86c]
mov edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x86c]
add edx, dword [eax + 0x48]
add edx, 6
inc edx
mov eax, dword [ebx + 0x610]
call fcn.0043d7f8
mov edx, 0x6b
mov eax, dword [ebx + 0x610]
call fcn.0043d81c
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x19a
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4c9480
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0xc5
mov eax, dword [ebx + 0x84c]
call fcn.0043d7f8
mov edx, 0x56
mov eax, dword [ebx + 0x84c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x19a
mov eax, dword [ebx + 0x84c]
mov si, 0xffa5
call fcn.00404458
xor edx, edx
mov eax, dword [ebx + 0x84c]
call fcn.00473e94
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x82
mov eax, dword [ebx + 0x404]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xdb
mov eax, dword [ebx + 0x404]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x404]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x84
mov eax, dword [ebx + 0x400]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf9
mov eax, dword [ebx + 0x400]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x400]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x86
mov eax, dword [ebx + 0x428]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x117
mov eax, dword [ebx + 0x428]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x428]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x80
mov eax, dword [ebx + 0x3fc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x135
mov eax, dword [ebx + 0x3fc]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x3fc]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x22
mov eax, dword [ebx + 0x60c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x153
mov eax, dword [ebx + 0x60c]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x60c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x24
mov eax, dword [ebx + 0x688]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x171
mov eax, dword [ebx + 0x688]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x688]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1cc
mov eax, dword [ebx + 0x858]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x18f
mov eax, dword [ebx + 0x858]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x858]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x3a
mov eax, dword [ebx + 0x838]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1ad
mov eax, dword [ebx + 0x838]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x838]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x38
mov eax, dword [ebx + 0x848]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1cb
mov eax, dword [ebx + 0x848]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x848]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xda
mov eax, dword [ebx + 0x520]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1e9
mov eax, dword [ebx + 0x520]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x520]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x214
mov eax, dword [ebx + 0x574]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x2f1
mov eax, dword [ebx + 0x574]
call fcn.0043d7f8
mov edx, 0xcc
mov eax, dword [ebx + 0x574]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x8a
mov eax, dword [ebx + 0x424]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x230
mov eax, dword [ebx + 0x424]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x424]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x88
mov eax, dword [ebx + 0x420]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x212
mov eax, dword [ebx + 0x420]
call fcn.0043d7f8
mov edx, 0x68
mov eax, dword [ebx + 0x420]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x118
mov eax, dword [ebx + 0x614]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x614]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x614]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x11a
mov eax, dword [ebx + 0x618]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x618]
call fcn.0043d7f8
mov eax, dword [ebx + 0x614]
mov edx, dword [eax + 0x44]
add edx, 0x19
mov eax, dword [ebx + 0x618]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x11c
mov eax, dword [ebx + 0x61c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x61c]
call fcn.0043d7f8
mov eax, dword [ebx + 0x614]
mov edx, dword [eax + 0x44]
add edx, 0x32
mov eax, dword [ebx + 0x61c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x11e
mov eax, dword [ebx + 0x620]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x620]
call fcn.0043d7f8
mov eax, dword [ebx + 0x614]
mov edx, dword [eax + 0x44]
add edx, 0x4b
mov eax, dword [ebx + 0x620]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x120
mov eax, dword [ebx + 0x624]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x624]
call fcn.0043d7f8
mov eax, dword [ebx + 0x614]
mov edx, dword [eax + 0x44]
add edx, 0x64
mov eax, dword [ebx + 0x624]
call fcn.0043d81c
mov dl, 1
mov eax, dword [ebx + 0x624]
call fcn.00473ff0
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sar edx, 1
jns 0x4c98f1
adc edx, 0
sub edx, 0x73
mov eax, dword [ebx + 0x828]
call fcn.0043d7f8
mov edx, 0x20
mov eax, dword [ebx + 0x828]
call fcn.0043d844
mov edx, 0x3b
mov eax, dword [ebx + 0x828]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x828]
call fcn.0043d868
mov eax, dword [ebx + 0x828]
mov edx, dword [eax + 0x40]
add edx, 0x2b
mov eax, dword [ebx + 0x390]
call fcn.0043d7f8
mov edx, 0x20
mov eax, dword [ebx + 0x390]
call fcn.0043d844
mov edx, 0x3b
mov eax, dword [ebx + 0x390]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x390]
call fcn.0043d868
mov eax, dword [ebx + 0x390]
mov edx, dword [eax + 0x40]
add edx, 0x2b
mov eax, dword [ebx + 0x394]
call fcn.0043d7f8
mov edx, 0x20
mov eax, dword [ebx + 0x394]
call fcn.0043d844
mov edx, 0x3b
mov eax, dword [ebx + 0x394]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x394]
call fcn.0043d868
mov eax, dword [ebx + 0x394]
mov edx, dword [eax + 0x40]
add edx, 0x2b
mov eax, dword [ebx + 0x398]
call fcn.0043d7f8
mov edx, 0x20
mov eax, dword [ebx + 0x398]
call fcn.0043d844
mov edx, 0x3b
mov eax, dword [ebx + 0x398]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x398]
call fcn.0043d868
mov eax, dword [ebx + 0x398]
mov edx, dword [eax + 0x40]
add edx, 0x2b
mov eax, dword [ebx + 0x39c]
call fcn.0043d7f8
mov edx, 0x20
mov eax, dword [ebx + 0x39c]
call fcn.0043d844
mov edx, 0x3b
mov eax, dword [ebx + 0x39c]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x39c]
call fcn.0043d868
mov eax, dword [ebx + 0x39c]
mov edx, dword [eax + 0x40]
add edx, 0x2b
mov eax, dword [ebx + 0x3a0]
call fcn.0043d7f8
mov edx, 0x20
mov eax, dword [ebx + 0x3a0]
call fcn.0043d844
mov edx, 0x3b
mov eax, dword [ebx + 0x3a0]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x3a0]
call fcn.0043d868
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x181
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4c9ae4
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x181
mov eax, dword [ebx + 0x690]
mov si, 0xffa5
call fcn.00404458
mov edx, 5
mov eax, dword [ebx + 0x690]
call fcn.0043d7f8
mov edx, 5
mov eax, dword [ebx + 0x690]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x834]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x860]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x85c]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0xaec]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x870]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0xadc]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0xae4]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0xae0]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0xae8]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x8fc]
call fcn.00473e94
mov edx, 0xd0
mov eax, dword [ebx + 0x8ec]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x8ec]
call fcn.0043d81c
mov edx, 0x184
mov eax, dword [ebx + 0x8ec]
call fcn.0043d844
mov edx, 0x7e
mov eax, dword [ebx + 0x8ec]
call fcn.0043d868
mov edx, dword [ebx + 0x304]
mov eax, dword [ebx + 0x8ec]
call fcn.00473f7c
mov eax, dword [ebx + 0x8ec]
mov byte [eax + 0x2e0], 0
xor edx, edx
mov eax, dword [ebx + 0x8f0]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x8f0]
call fcn.0043d81c
mov edx, 0x184
mov eax, dword [ebx + 0x8f0]
call fcn.0043d844
mov edx, 0x6c
mov eax, dword [ebx + 0x8f0]
call fcn.0043d868
mov eax, dword [ebx + 0x8f0]
mov eax, dword [eax + 0x4c]
sub eax, 0x18
mov edx, dword [ebx + 0x8f0]
mov dword [edx + 0x308], eax
xor edx, edx
mov eax, dword [ebx + 0x82c]
call fcn.0043d7f8
mov edx, 0x70
mov eax, dword [ebx + 0x82c]
call fcn.0043d81c
mov edx, 0x184
mov eax, dword [ebx + 0x82c]
call fcn.0043d844
mov edx, 0x10
mov eax, dword [ebx + 0x82c]
call fcn.0043d868
mov edx, dword [ebx + 0x8ec]
mov eax, dword [ebx + 0x82c]
call fcn.00473f7c
xor edx, edx
mov eax, dword [ebx + 0x82c]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x82c]
call fcn.0047981c
mov eax, dword [ebx + 0x82c]
mov dword [eax + 0x33c], 0xffffff
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x8f4]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
xor edx, edx
mov dword [eax + 0x220], edx
mov dword [eax + 0x224], edx
mov eax, dword [ebx + 0x8f0]
mov edx, dword [eax + 0x48]
mov eax, dword [ebx + 0x8f4]
call fcn.0043d7f8
mov edx, 0xffffffa6
mov eax, dword [ebx + 0x8f4]
call fcn.0043d81c
mov eax, dword [ebx + 0x8f4]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov edx, dword [ebx + 0x8f4]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
pop edx
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x8f4]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x8f4]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x8f4]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x8f4]
call fcn.0043d868
mov eax, dword [ebx + 0x8f4]
mov byte [eax + 0x2ee], 0
xor edx, edx
mov eax, dword [ebx + 0x8fc]
call fcn.00473e94
jmp 0x4caf55
mov eax, dword [0x5451e8]
mov eax, dword [eax]
mov edx, 0x41
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4c9ef4
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4c9eb7
adc edx, 0
mov eax, dword [ebx + 0x304]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
mov eax, dword [ebx + 0x304]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x41
mov eax, dword [ebx + 0x304]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x43
mov eax, dword [ebx + 0x83c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1b8
mov eax, dword [ebx + 0x83c]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x83c]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x42
mov eax, dword [ebx + 0x844]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1dc
mov eax, dword [ebx + 0x844]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x844]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x44
mov eax, dword [ebx + 0x840]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x200
mov eax, dword [ebx + 0x840]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x840]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x45
mov eax, dword [ebx + 0x848]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x224
mov eax, dword [ebx + 0x848]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x848]
call fcn.0043d81c
mov eax, dword [ebx + 0x848]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4dbbcc
mov eax, dword [ebx + 0x848]
mov byte [eax + 0x2c0], 2
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x46
mov eax, dword [ebx + 0x854]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x248
mov eax, dword [ebx + 0x854]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x854]
call fcn.0043d81c
mov eax, dword [ebx + 0x854]
mov byte [eax + 0x2c0], 2
mov edx, 0x26c
mov eax, dword [ebx + 0x850]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x850]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x47
mov eax, dword [ebx + 0x850]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x850]
mov byte [eax + 0x2c0], 2
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x48
mov eax, dword [ebx + 0x834]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x290
mov eax, dword [ebx + 0x834]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x834]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x7f
mov eax, dword [ebx + 0x420]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x2fe
mov eax, dword [ebx + 0x420]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x420]
call fcn.0043d81c
mov eax, dword [ebx + 0x420]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4dbbcc
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x80
mov eax, dword [ebx + 0x424]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x2fe
mov eax, dword [ebx + 0x424]
call fcn.0043d7f8
mov edx, 0x15
mov eax, dword [ebx + 0x424]
call fcn.0043d81c
mov eax, dword [ebx + 0x424]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4dbbcc
mov eax, dword [0x5451e8]
mov eax, dword [eax]
mov edx, 0x81
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ca1cb
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x81
mov eax, dword [ebx + 0x690]
mov si, 0xffa5
call fcn.00404458
mov edx, 5
mov eax, dword [ebx + 0x690]
call fcn.0043d7f8
mov edx, 5
mov eax, dword [ebx + 0x690]
call fcn.0043d81c
mov edx, dword [ebx + 0x690]
mov eax, dword [ebx + 0x610]
call fcn.00473f7c
mov edx, dword [ebx + 0x690]
mov eax, dword [ebx + 0x86c]
call fcn.00473f7c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x86
mov eax, dword [ebx + 0x610]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x3b
mov eax, dword [ebx + 0x610]
call fcn.0043d7f8
mov edx, 0x2c
mov eax, dword [ebx + 0x610]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x87
mov eax, dword [ebx + 0x86c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x51
mov eax, dword [ebx + 0x86c]
call fcn.0043d7f8
mov edx, 0x2d
mov eax, dword [ebx + 0x86c]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x84c]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x688]
call fcn.00473e94
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x404]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x838]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x400]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x428]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x520]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x60c]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x858]
call fcn.00473f7c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x830]
call fcn.00473f7c
mov eax, dword [ebx + 0x830]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4dbc44
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x3fc]
call fcn.00473f7c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x4c
mov eax, dword [ebx + 0x404]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0xcf
sub edx, 0x18
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x404]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x404]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x50
mov eax, dword [ebx + 0x400]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0xb8
sub edx, 0x15
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x400]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x400]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x52
mov eax, dword [ebx + 0x428]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0xa1
sub edx, 0x12
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x428]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x428]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x8f
mov eax, dword [ebx + 0x3fc]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x8a
sub edx, 0xf
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x3fc]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x3fc]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x4e
mov eax, dword [ebx + 0x838]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x73
sub edx, 0xc
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x838]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x838]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x56
mov eax, dword [ebx + 0x60c]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x5c
sub edx, 9
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x60c]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x60c]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x58
mov eax, dword [ebx + 0x858]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x45
sub edx, 6
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x858]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x858]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x5a
mov eax, dword [ebx + 0x830]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x2e
sub edx, 3
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x830]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x830]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x5c
mov eax, dword [ebx + 0xaec]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0x17
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0xaec]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0xaec]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x54
mov eax, dword [ebx + 0x520]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x48]
sub edx, 0xe6
sub edx, 0x1b
mov eax, dword [ebx + 0x304]
add edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x520]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x3a
mov eax, dword [ebx + 0x520]
call fcn.0043d81c
xor edx, edx
mov eax, ebx
call fcn.004eafa8
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x7e
mov eax, dword [ebx + 0x870]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x8b
mov eax, dword [ebx + 0x870]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x870]
call fcn.0043d81c
mov edx, 0x11
mov eax, dword [ebx + 0x870]
call fcn.0043d868
xor edx, edx
mov eax, dword [ebx + 0x614]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x618]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x61c]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x620]
call fcn.00473e94
mov edx, dword [ebx + 0x8f8]
mov eax, dword [ebx + 0x624]
call fcn.00473f7c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x5e
mov eax, dword [ebx + 0x624]
mov si, 0xffa5
call fcn.00404458
mov edx, 3
mov eax, dword [ebx + 0x624]
call fcn.0043d7f8
mov edx, 2
mov eax, dword [ebx + 0x624]
call fcn.0043d81c
mov dl, 1
mov eax, dword [ebx + 0x624]
call fcn.00473ff0
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x6a
mov eax, dword [ebx + 0xadc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x96
mov eax, dword [ebx + 0xadc]
call fcn.0043d7f8
mov edx, 0x208
mov eax, dword [ebx + 0xadc]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x6c
mov eax, dword [ebx + 0xae4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xba
mov eax, dword [ebx + 0xae4]
call fcn.0043d7f8
mov edx, 0x208
mov eax, dword [ebx + 0xae4]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x6e
mov eax, dword [ebx + 0xae0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xde
mov eax, dword [ebx + 0xae0]
call fcn.0043d7f8
mov edx, 0x208
mov eax, dword [ebx + 0xae0]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x70
mov eax, dword [ebx + 0xae8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x102
mov eax, dword [ebx + 0xae8]
call fcn.0043d7f8
mov edx, 0x208
mov eax, dword [ebx + 0xae8]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x91
mov eax, dword [ebx + 0x8fc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x175
mov eax, dword [ebx + 0x8fc]
call fcn.0043d7f8
mov edx, 2
mov eax, dword [ebx + 0x8fc]
call fcn.0043d81c
mov edx, 0xe0
mov eax, dword [ebx + 0x828]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x828]
call fcn.0043d844
mov edx, 4
mov eax, dword [ebx + 0x828]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x828]
call fcn.0043d868
mov edx, 0x104
mov eax, dword [ebx + 0x390]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x390]
call fcn.0043d844
mov edx, 4
mov eax, dword [ebx + 0x390]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x390]
call fcn.0043d868
mov edx, 0x128
mov eax, dword [ebx + 0x394]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x394]
call fcn.0043d844
mov edx, 4
mov eax, dword [ebx + 0x394]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x394]
call fcn.0043d868
mov edx, 0x14c
mov eax, dword [ebx + 0x398]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x398]
call fcn.0043d844
mov edx, 4
mov eax, dword [ebx + 0x398]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x398]
call fcn.0043d868
mov edx, 0x170
mov eax, dword [ebx + 0x39c]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x39c]
call fcn.0043d844
mov edx, 4
mov eax, dword [ebx + 0x39c]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x39c]
call fcn.0043d868
mov edx, 0x194
mov eax, dword [ebx + 0x3a0]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x3a0]
call fcn.0043d844
mov edx, 4
mov eax, dword [ebx + 0x3a0]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x3a0]
call fcn.0043d868
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x73
mov eax, dword [ebx + 0x860]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x3a0]
mov edx, dword [eax + 0x40]
add edx, 0x24
inc edx
mov eax, dword [ebx + 0x860]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x860]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x75
mov eax, dword [ebx + 0x85c]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x3a0]
mov edx, dword [eax + 0x40]
add edx, 0x24
inc edx
mov eax, dword [ebx + 0x85c]
call fcn.0043d7f8
mov edx, 0x1c
mov eax, dword [ebx + 0x85c]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x860]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x85c]
call fcn.00473e94
mov eax, dword [ebx + 0x83c]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4eb1a4
mov eax, dword [ebx + 0x844]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4eb1a4
mov eax, dword [ebx + 0x840]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4eb1a4
mov eax, dword [ebx + 0x834]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4eb1a4
mov eax, dword [ebx + 0x848]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4eb1a4
mov eax, dword [ebx + 0x854]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4eb1a4
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x7b
mov eax, dword [ebx + 0x8f8]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f8]
mov byte [eax + 0x2e0], 0
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x8f8]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x8f8]
sub edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x304]
sub edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x8f8]
call fcn.0043d81c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x8f8]
call fcn.00473f7c
mov edx, 0x14
mov eax, dword [ebx + 0x82c]
call fcn.0043d7f8
mov edx, 3
mov eax, dword [ebx + 0x82c]
call fcn.0043d81c
mov edx, 0x15d
mov eax, dword [ebx + 0x82c]
call fcn.0043d844
mov edx, 0xe
mov eax, dword [ebx + 0x82c]
call fcn.0043d868
mov edx, dword [ebx + 0x8f8]
mov eax, dword [ebx + 0x82c]
call fcn.00473f7c
xor edx, edx
mov eax, dword [ebx + 0x82c]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x82c]
call fcn.0047981c
mov eax, dword [ebx + 0x82c]
mov dword [eax + 0x334], 0xdc802c
mov eax, dword [ebx + 0x82c]
mov dword [eax + 0x33c], 0xffffff
mov edx, 0x6e
mov eax, dword [ebx + 0x8ec]
call fcn.0043d868
mov eax, dword [ebx + 0x8f8]
mov edx, dword [eax + 0x48]
mov eax, dword [ebx + 0x8ec]
call fcn.0043d844
mov eax, dword [ebx + 0x304]
mov edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x8ec]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x8ec]
sub edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x8f8]
sub edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x304]
sub edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x8ec]
call fcn.0043d81c
mov edx, dword [ebx + 0x2f8]
mov eax, dword [ebx + 0x8ec]
call fcn.00473f7c
mov eax, dword [ebx + 0x8ec]
mov byte [eax + 0x2e0], 0
xor edx, edx
mov eax, dword [ebx + 0x8ec]
call fcn.00473e94
mov edx, 2
mov eax, dword [ebx + 0x8f0]
call fcn.0043d7f8
mov edx, 2
mov eax, dword [ebx + 0x8f0]
call fcn.0043d81c
mov eax, dword [ebx + 0x8ec]
mov edx, dword [eax + 0x48]
sub edx, 0x12
mov eax, dword [ebx + 0x8f0]
call fcn.0043d844
mov edx, 0x6c
mov eax, dword [ebx + 0x8f0]
call fcn.0043d868
mov eax, dword [ebx + 0x8f0]
mov eax, dword [eax + 0x4c]
sub eax, 0xc
mov edx, dword [ebx + 0x8f0]
mov dword [edx + 0x308], eax
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x7c
mov eax, dword [ebx + 0x8f4]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x77
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x79
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x76
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x8f4]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov eax, dword [ebx + 0x8f0]
mov edx, dword [eax + 0x48]
inc edx
mov eax, dword [ebx + 0x8f4]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x8f4]
call fcn.0043d81c
mov eax, dword [ebx + 0x8ec]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebx + 0x8f4]
call fcn.0043d868
mov eax, dword [ebx + 0x8f4]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov edx, dword [ebx + 0x8f4]
mov edx, dword [edx + 0x48]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4cae64
adc edx, 0
push edx
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
pop edx
call fcn.0043d7f8
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov edx, dword [ebx + 0x8f4]
mov edx, dword [edx + 0x48]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4caea9
adc edx, 0
push edx
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
pop edx
call fcn.0043d7f8
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
mov edx, dword [ebx + 0x8f4]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x8f4]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
mov edx, dword [ebx + 0x8f4]
mov edx, dword [edx + 0x48]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4caf03
adc edx, 0
push edx
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
pop edx
call fcn.0043d7f8
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x8f4]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x8f4]
call fcn.0047b330
pop edx
call fcn.0043d81c
xor edx, edx
mov eax, ebx
call fcn.004d5780
xor edx, edx
mov eax, ebx
call fcn.004d5774
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x168
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cafc1
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x168
mov eax, dword [ebx + 0x364]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4caf99
adc edx, 0
mov eax, dword [ebx + 0x364]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cafb6
adc edx, 0
mov eax, dword [ebx + 0x364]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x169
mov eax, dword [ebx + 0x7c4]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x16b
mov eax, dword [ebx + 0x7c8]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x16d
mov eax, dword [ebx + 0x7cc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x16f
mov eax, dword [ebx + 0x7d0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x7e
mov eax, dword [ebx + 0x7c4]
call fcn.0043d81c
mov edx, 0x7e
mov eax, dword [ebx + 0x7c8]
call fcn.0043d81c
mov edx, 0x7e
mov eax, dword [ebx + 0x7cc]
call fcn.0043d81c
mov edx, 0x7e
mov eax, dword [ebx + 0x7d0]
call fcn.0043d81c
mov esi, dword [ebx + 0x7c0]
xor edx, edx
mov eax, esi
call fcn.0047981c
mov eax, dword [ebx + 0x364]
mov edx, dword [eax + 0x48]
sub edx, 0x46
mov eax, esi
call fcn.0043d844
mov eax, dword [ebx + 0x364]
mov edx, dword [eax + 0x48]
sub edx, dword [esi + 0x48]
sar edx, 1
jns 0x4cb0a6
adc edx, 0
mov eax, esi
call fcn.0043d7f8
mov eax, dword [ebx + 0x364]
mov edx, dword [eax + 0x4c]
sub edx, dword [esi + 0x4c]
sar edx, 1
jns 0x4cb0c0
adc edx, 0
sub edx, 0xa
mov eax, esi
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x3c
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cb152
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3c
mov eax, dword [ebx + 0x310]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cb10e
adc edx, 0
mov eax, dword [ebx + 0x310]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cb12b
adc edx, 0
mov eax, dword [ebx + 0x310]
call fcn.0043d81c
mov edx, dword [edi + 8]
mov eax, dword [ebx + 0x310]
call fcn.0043d844
mov edx, dword [edi + 4]
mov eax, dword [ebx + 0x310]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3d
mov eax, dword [ebx + 0x73c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x18
mov eax, dword [ebx + 0x73c]
call fcn.0043d7f8
mov edx, 0xcf
mov eax, dword [ebx + 0x73c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3e
mov eax, dword [ebx + 0x740]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xab
mov eax, dword [ebx + 0x740]
call fcn.0043d7f8
mov edx, 0xa5
mov eax, dword [ebx + 0x740]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x35
mov eax, dword [ebx + 0x738]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x81
mov eax, dword [ebx + 0x738]
call fcn.0043d7f8
mov edx, 0xcf
mov eax, dword [ebx + 0x738]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x734]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xfc
mov eax, dword [ebx + 0x734]
call fcn.0043d7f8
mov edx, 0x1c
mov eax, dword [ebx + 0x734]
call fcn.0043d81c
mov edx, 0x60
mov eax, dword [ebx + 0x7f4]
call fcn.0043d7f8
mov edx, 0x53
mov eax, dword [ebx + 0x7f4]
call fcn.0043d81c
mov edx, 0x89
mov eax, dword [ebx + 0x7f4]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x7f4]
call fcn.0047981c
mov edx, 0x60
mov eax, dword [ebx + 0x7f8]
call fcn.0043d7f8
mov edx, 0x73
mov eax, dword [ebx + 0x7f8]
call fcn.0043d81c
mov edx, 0x89
mov eax, dword [ebx + 0x7f8]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x7f8]
call fcn.0047981c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, pe_nt_image_headers32
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cb328
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, pe_nt_image_headers32
mov eax, dword [ebx + 0x454]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cb300
adc edx, 0
mov eax, dword [ebx + 0x454]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cb31d
adc edx, 0
mov eax, dword [ebx + 0x454]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x7a8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf5
mov eax, dword [ebx + 0x7a8]
call fcn.0043d7f8
mov edx, 0x1f
mov eax, dword [ebx + 0x7a8]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebx + 0x7a4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x41
mov eax, dword [ebx + 0x7a4]
call fcn.0043d7f8
mov edx, 0x64
mov eax, dword [ebx + 0x7a4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebx + 0x7a0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x41
mov eax, dword [ebx + 0x7a0]
call fcn.0043d7f8
mov edx, 0x91
mov eax, dword [ebx + 0x7a0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebx + 0x7b4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x41
mov eax, dword [ebx + 0x7b4]
call fcn.0043d7f8
mov edx, 0xbe
mov eax, dword [ebx + 0x7b4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebx + 0x7b0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x41
mov eax, dword [ebx + 0x7b0]
call fcn.0043d7f8
mov edx, 0xeb
mov eax, dword [ebx + 0x7b0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebx + 0x7bc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x41
mov eax, dword [ebx + 0x7bc]
call fcn.0043d7f8
mov edx, 0x118
mov eax, dword [ebx + 0x7bc]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 2
mov eax, dword [ebx + 0x7b8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x41
mov eax, dword [ebx + 0x7b8]
call fcn.0043d7f8
mov edx, 0x145
mov eax, dword [ebx + 0x7b8]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x7ac]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x7a4]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x7a0]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x7b4]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x7b0]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x7bc]
call fcn.00473e94
xor edx, edx
mov eax, dword [ebx + 0x7b8]
call fcn.00473e94
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x3f
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cb593
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3f
mov eax, dword [ebx + 0x314]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cb56b
adc edx, 0
mov eax, dword [ebx + 0x314]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cb588
adc edx, 0
mov eax, dword [ebx + 0x314]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3e
mov eax, dword [ebx + 0x730]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa0
mov eax, dword [ebx + 0x730]
call fcn.0043d7f8
mov edx, 0x1a1
mov eax, dword [ebx + 0x730]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x34
mov eax, dword [ebx + 0x72c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1c0
mov eax, dword [ebx + 0x72c]
call fcn.0043d7f8
mov edx, 0x1a3
mov eax, dword [ebx + 0x72c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x728]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x24b
mov eax, dword [ebx + 0x728]
call fcn.0043d7f8
mov edx, 0x21
mov eax, dword [ebx + 0x728]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x32
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cb6b3
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x32
mov eax, dword [ebx + 0x3a4]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cb68b
adc edx, 0
mov eax, dword [ebx + 0x3a4]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cb6a8
adc edx, 0
mov eax, dword [ebx + 0x3a4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3e
mov eax, dword [ebx + 0x3a8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb6
mov eax, dword [ebx + 0x3a8]
call fcn.0043d7f8
mov edx, 0xfc
mov eax, dword [ebx + 0x3a8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x34
mov eax, dword [ebx + 0x3ac]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x115
mov eax, dword [ebx + 0x3ac]
call fcn.0043d7f8
mov edx, 0xfb
mov eax, dword [ebx + 0x3ac]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x318]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x318]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x318]
call fcn.0043d844
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x318]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x42
mov eax, dword [ebx + 0x31c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x43
mov eax, dword [ebx + 0x320]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x1e1
mov eax, dword [ebx + 0x324]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x45
mov eax, dword [ebx + 0x328]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x46
mov eax, dword [ebx + 0x32c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x195
mov eax, dword [ebx + 0x330]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x48
mov eax, dword [ebx + 0x334]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cb844
adc edx, 0
add edx, 0x86
dec edx
mov eax, dword [ebx + 0x31c]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cb86b
adc edx, 0
add edx, 0x1c6
dec edx
mov eax, dword [ebx + 0x31c]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cb892
adc edx, 0
add edx, 0x2ad
mov eax, dword [ebx + 0x320]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cb8b8
adc edx, 0
add edx, 0x1c6
mov eax, dword [ebx + 0x320]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cb8de
adc edx, 0
add edx, 0x181
sub edx, 0xc
mov eax, dword [ebx + 0x324]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cb907
adc edx, 0
add edx, 0x1c8
sub edx, 4
mov eax, dword [ebx + 0x324]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cb930
adc edx, 0
add edx, 0x15c
mov eax, dword [ebx + 0x328]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cb956
adc edx, 0
add edx, 0x1e6
mov eax, dword [ebx + 0x328]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cb97c
adc edx, 0
add edx, 0x15b
mov eax, dword [ebx + 0x32c]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cb9a2
adc edx, 0
add edx, 0x1fa
mov eax, dword [ebx + 0x32c]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cb9c8
adc edx, 0
add edx, 0x15a
mov eax, dword [ebx + 0x330]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cb9ee
adc edx, 0
add edx, 0x20f
mov eax, dword [ebx + 0x330]
call fcn.0043d81c
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, 0x320
sar edx, 1
jns 0x4cba14
adc edx, 0
add edx, 0x17b
mov eax, dword [ebx + 0x334]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, 0x258
sar edx, 1
jns 0x4cba3a
adc edx, 0
add edx, 0x223
mov eax, dword [ebx + 0x334]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x49
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cbab7
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x49
mov eax, dword [ebx + 0x338]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cba8f
adc edx, 0
mov eax, dword [ebx + 0x338]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cbaac
adc edx, 0
mov eax, dword [ebx + 0x338]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x4a
mov eax, dword [ebx + 0x33c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x4b
mov eax, dword [ebx + 0x340]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x4c
mov eax, dword [ebx + 0x344]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x4d
mov eax, dword [ebx + 0x34c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x4e
mov eax, dword [ebx + 0x350]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x4f
mov eax, dword [ebx + 0x354]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x50
mov eax, dword [ebx + 0x358]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x3e
mov eax, dword [ebx + 0x35c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x360]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x30
mov eax, dword [ebx + 0x33c]
call fcn.0043d7f8
mov edx, 0x9d
mov eax, dword [ebx + 0x33c]
call fcn.0043d81c
mov edx, 0x5d
mov eax, dword [ebx + 0x340]
call fcn.0043d7f8
mov edx, 0x9d
mov eax, dword [ebx + 0x340]
call fcn.0043d81c
mov edx, 0x8a
mov eax, dword [ebx + 0x344]
call fcn.0043d7f8
mov edx, 0x9d
mov eax, dword [ebx + 0x344]
call fcn.0043d81c
mov edx, 0x5d
mov eax, dword [ebx + 0x34c]
call fcn.0043d7f8
mov edx, 0xe7
mov eax, dword [ebx + 0x34c]
call fcn.0043d81c
mov edx, 0x8a
mov eax, dword [ebx + 0x350]
call fcn.0043d7f8
mov edx, 0xe7
mov eax, dword [ebx + 0x350]
call fcn.0043d81c
mov edx, 0x4c
mov eax, dword [ebx + 0x354]
call fcn.0043d7f8
mov edx, 0x134
mov eax, dword [ebx + 0x354]
call fcn.0043d81c
mov edx, 0xaa
mov eax, dword [ebx + 0x358]
call fcn.0043d7f8
mov edx, 0x134
mov eax, dword [ebx + 0x358]
call fcn.0043d81c
mov edx, 0x68
mov eax, dword [ebx + 0x35c]
call fcn.0043d7f8
mov edx, 0x169
mov eax, dword [ebx + 0x35c]
call fcn.0043d81c
mov edx, 0xf8
mov eax, dword [ebx + 0x360]
call fcn.0043d7f8
mov edx, 0x1f
mov eax, dword [ebx + 0x360]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x32
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cbd3f
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x2b1
mov eax, dword [ebx + 0x5f8]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cbd17
adc edx, 0
mov eax, dword [ebx + 0x5f8]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cbd34
adc edx, 0
mov eax, dword [ebx + 0x5f8]
call fcn.0043d81c
mov edx, 0x123
mov eax, dword [ebx + 0x5fc]
call fcn.0043d7f8
mov edx, 8
mov eax, dword [ebx + 0x5fc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x5fc]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x544600]
mov eax, dword [eax]
mov edx, 0xa
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cbdd2
mov edx, dword [0x544600]
mov edx, dword [edx]
mov ecx, 0xa
mov eax, dword [ebx + 0x2fc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x2fc]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x2fc]
call fcn.0043d81c
jmp 0x4cbe27
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0xcf
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cbe27
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xcf
mov eax, dword [ebx + 0x2fc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x2fc]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x2fc]
call fcn.0043d81c
mov edx, 0xa8
mov eax, dword [ebx + 0x36c]
call fcn.0043d7f8
mov edx, 0x57
mov eax, dword [ebx + 0x36c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x36c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x36c]
call fcn.0043d868
mov edx, 0x73
mov eax, dword [ebx + 0x38c]
call fcn.0043d7f8
mov edx, 0x5d
mov eax, dword [ebx + 0x38c]
call fcn.0043d81c
mov edx, 0x12
mov eax, dword [ebx + 0x38c]
call fcn.0043d844
mov edx, 0x12
mov eax, dword [ebx + 0x38c]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x370]
call fcn.0043d7f8
mov edx, 0x7d
mov eax, dword [ebx + 0x370]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x370]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x370]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x374]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x374]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x374]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x374]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x378]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x378]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x378]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x378]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x37c]
call fcn.0043d7f8
mov edx, 0xd7
mov eax, dword [ebx + 0x37c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x37c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x37c]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x380]
call fcn.0043d7f8
mov edx, 0xd7
mov eax, dword [ebx + 0x380]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x380]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x380]
call fcn.0043d868
mov edx, 0x2f
mov eax, dword [ebx + 0x384]
call fcn.0043d7f8
mov edx, 0x50
mov eax, dword [ebx + 0x384]
call fcn.0043d81c
mov edx, 0x2f
mov eax, dword [ebx + 0x384]
call fcn.0043d844
mov edx, 0x57
mov eax, dword [ebx + 0x384]
call fcn.0043d868
mov edx, 0x60
mov eax, dword [ebx + 0x388]
call fcn.0043d7f8
mov edx, 0x7a
mov eax, dword [ebx + 0x388]
call fcn.0043d81c
mov edx, 0x35
mov eax, dword [ebx + 0x388]
call fcn.0043d844
mov edx, 0x70
mov eax, dword [ebx + 0x388]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x560]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x560]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x560]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x560]
call fcn.0043d868
mov edx, 0x54
mov eax, dword [ebx + 0x55c]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x55c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x55c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x55c]
call fcn.0043d868
mov edx, 0x7e
mov eax, dword [ebx + 0x558]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x558]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x558]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x558]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x554]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x554]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x554]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x554]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x3c8]
call fcn.0043d7f8
mov edx, 0x3b
mov eax, dword [ebx + 0x3c8]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x3c8]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x3c8]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x3cc]
call fcn.0043d7f8
mov edx, 0x60
mov eax, dword [ebx + 0x3cc]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x3cc]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x3cc]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x3d0]
call fcn.0043d7f8
mov edx, 0x86
mov eax, dword [ebx + 0x3d0]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x3d0]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x3d0]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x3d4]
call fcn.0043d7f8
mov edx, 0xab
mov eax, dword [ebx + 0x3d4]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x3d4]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x3d4]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x3d8]
call fcn.0043d7f8
mov edx, 0xd0
mov eax, dword [ebx + 0x3d8]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x3d8]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x3d8]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x8dc]
call fcn.0043d7f8
mov edx, 0xf7
mov eax, dword [ebx + 0x8dc]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x8dc]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x8dc]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x18e
mov eax, dword [ebx + 0x42c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x18c
mov eax, dword [ebx + 0x430]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd5
mov eax, dword [ebx + 0x42c]
call fcn.0043d7f8
mov edx, 0x71
mov eax, dword [ebx + 0x42c]
call fcn.0043d81c
mov edx, 0xd5
mov eax, dword [ebx + 0x430]
call fcn.0043d7f8
mov edx, 0x8f
mov eax, dword [ebx + 0x430]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x30c]
mov si, 0xffa5
call fcn.00404458
mov edx, 8
mov eax, dword [ebx + 0x30c]
call fcn.0043d7f8
mov edx, 0x27
mov eax, dword [ebx + 0x30c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x175
mov eax, dword [ebx + 0x308]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x174
mov eax, dword [ebx + 0x368]
mov si, 0xffa5
call fcn.00404458
mov edx, 7
mov eax, dword [ebx + 0x308]
call fcn.0043d7f8
mov edx, 0x80
mov eax, dword [ebx + 0x308]
call fcn.0043d81c
mov edx, 7
mov eax, dword [ebx + 0x368]
call fcn.0043d7f8
mov edx, 0xbb
mov eax, dword [ebx + 0x368]
call fcn.0043d81c
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x180
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cc468
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x180
mov eax, dword [ebx + 0x628]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x628]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x628]
call fcn.0043d81c
mov edx, 0xa8
mov eax, dword [ebx + 0x64c]
call fcn.0043d7f8
mov edx, 0x57
mov eax, dword [ebx + 0x64c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x64c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x64c]
call fcn.0043d868
mov edx, 0x73
mov eax, dword [ebx + 0x63c]
call fcn.0043d7f8
mov edx, 0x5d
mov eax, dword [ebx + 0x63c]
call fcn.0043d81c
mov edx, 0x12
mov eax, dword [ebx + 0x63c]
call fcn.0043d844
mov edx, 0x12
mov eax, dword [ebx + 0x63c]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x650]
call fcn.0043d7f8
mov edx, 0x7d
mov eax, dword [ebx + 0x650]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x650]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x650]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x640]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x640]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x640]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x640]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x654]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x654]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x654]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x654]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x644]
call fcn.0043d7f8
mov edx, 0xd7
mov eax, dword [ebx + 0x644]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x644]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x644]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x658]
call fcn.0043d7f8
mov edx, 0xd7
mov eax, dword [ebx + 0x658]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x658]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x658]
call fcn.0043d868
mov edx, 0x2f
mov eax, dword [ebx + 0x638]
call fcn.0043d7f8
mov edx, 0x50
mov eax, dword [ebx + 0x638]
call fcn.0043d81c
mov edx, 0x2f
mov eax, dword [ebx + 0x638]
call fcn.0043d844
mov edx, 0x57
mov eax, dword [ebx + 0x638]
call fcn.0043d868
mov edx, 0x60
mov eax, dword [ebx + 0x648]
call fcn.0043d7f8
mov edx, 0x7a
mov eax, dword [ebx + 0x648]
call fcn.0043d81c
mov edx, 0x35
mov eax, dword [ebx + 0x648]
call fcn.0043d844
mov edx, 0x70
mov eax, dword [ebx + 0x648]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x684]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x684]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x684]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x684]
call fcn.0043d868
mov edx, 0x54
mov eax, dword [ebx + 0x680]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x680]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x680]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x680]
call fcn.0043d868
mov edx, 0x7e
mov eax, dword [ebx + 0x67c]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x67c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x67c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x67c]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x678]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x678]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x678]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x678]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x65c]
call fcn.0043d7f8
mov edx, 0x3b
mov eax, dword [ebx + 0x65c]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x65c]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x65c]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x660]
call fcn.0043d7f8
mov edx, 0x60
mov eax, dword [ebx + 0x660]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x660]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x660]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x664]
call fcn.0043d7f8
mov edx, 0x86
mov eax, dword [ebx + 0x664]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x664]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x664]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x668]
call fcn.0043d7f8
mov edx, 0xab
mov eax, dword [ebx + 0x668]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x668]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x668]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x66c]
call fcn.0043d7f8
mov edx, 0xd0
mov eax, dword [ebx + 0x66c]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x66c]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x66c]
call fcn.0043d868
mov edx, 0x2e
mov eax, dword [ebx + 0x8d8]
call fcn.0043d7f8
mov edx, 0xf7
mov eax, dword [ebx + 0x8d8]
call fcn.0043d81c
mov edx, 0x1f
mov eax, dword [ebx + 0x8d8]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x8d8]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x18e
mov eax, dword [ebx + 0x670]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x18c
mov eax, dword [ebx + 0x674]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd5
mov eax, dword [ebx + 0x670]
call fcn.0043d7f8
mov edx, 0x71
mov eax, dword [ebx + 0x670]
call fcn.0043d81c
mov edx, 0xd5
mov eax, dword [ebx + 0x674]
call fcn.0043d7f8
mov edx, 0x8f
mov eax, dword [ebx + 0x674]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x62c]
mov si, 0xffa5
call fcn.00404458
mov edx, 8
mov eax, dword [ebx + 0x62c]
call fcn.0043d7f8
mov edx, 0x27
mov eax, dword [ebx + 0x62c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x175
mov eax, dword [ebx + 0x630]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x174
mov eax, dword [ebx + 0x634]
mov si, 0xffa5
call fcn.00404458
mov edx, 7
mov eax, dword [ebx + 0x630]
call fcn.0043d7f8
mov edx, 0x80
mov eax, dword [ebx + 0x630]
call fcn.0043d81c
mov edx, 7
mov eax, dword [ebx + 0x634]
call fcn.0043d7f8
mov edx, 0xbb
mov eax, dword [ebx + 0x634]
call fcn.0043d81c
mov eax, dword [0x544600]
mov eax, dword [eax]
mov edx, 0xa
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ccaae
mov edx, dword [0x544600]
mov edx, dword [edx]
mov ecx, 0xa
mov eax, dword [ebx + 0x458]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x458]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x458]
call fcn.0043d81c
jmp 0x4ccb06
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0xcf
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ccb06
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xcf
mov eax, dword [ebx + 0x458]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x458]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x458]
call fcn.0043d81c
mov edx, 0xa8
mov eax, dword [ebx + 0x468]
call fcn.0043d7f8
mov edx, 0x57
mov eax, dword [ebx + 0x468]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x468]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x468]
call fcn.0043d868
mov edx, 0x73
mov eax, dword [ebx + 0x464]
call fcn.0043d7f8
mov edx, 0x5d
mov eax, dword [ebx + 0x464]
call fcn.0043d81c
mov edx, 0x12
mov eax, dword [ebx + 0x464]
call fcn.0043d844
mov edx, 0x12
mov eax, dword [ebx + 0x464]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x470]
call fcn.0043d7f8
mov edx, 0x7d
mov eax, dword [ebx + 0x470]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x470]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x470]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x474]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x474]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x474]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x474]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x47c]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x47c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x47c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x47c]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x478]
call fcn.0043d7f8
mov edx, 0xd7
mov eax, dword [ebx + 0x478]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x478]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x478]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x480]
call fcn.0043d7f8
mov edx, 0xd7
mov eax, dword [ebx + 0x480]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x480]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x480]
call fcn.0043d868
mov edx, 0x2f
mov eax, dword [ebx + 0x460]
call fcn.0043d7f8
mov edx, 0x50
mov eax, dword [ebx + 0x460]
call fcn.0043d81c
mov edx, 0x2f
mov eax, dword [ebx + 0x460]
call fcn.0043d844
mov edx, 0x57
mov eax, dword [ebx + 0x460]
call fcn.0043d868
mov edx, 0x60
mov eax, dword [ebx + 0x46c]
call fcn.0043d7f8
mov edx, 0x7a
mov eax, dword [ebx + 0x46c]
call fcn.0043d81c
mov edx, 0x35
mov eax, dword [ebx + 0x46c]
call fcn.0043d844
mov edx, 0x70
mov eax, dword [ebx + 0x46c]
call fcn.0043d868
mov edx, 0x2a
mov eax, dword [ebx + 0x564]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x564]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x564]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x564]
call fcn.0043d868
mov edx, 0x54
mov eax, dword [ebx + 0x568]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x568]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x568]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x568]
call fcn.0043d868
mov edx, 0x7e
mov eax, dword [ebx + 0x56c]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x56c]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x56c]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x56c]
call fcn.0043d868
mov edx, 0xa8
mov eax, dword [ebx + 0x570]
call fcn.0043d7f8
mov edx, 0xfe
mov eax, dword [ebx + 0x570]
call fcn.0043d81c
mov edx, 0x22
mov eax, dword [ebx + 0x570]
call fcn.0043d844
mov edx, 0x1f
mov eax, dword [ebx + 0x570]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x45c]
mov si, 0xffa5
call fcn.00404458
mov edx, 8
mov eax, dword [ebx + 0x45c]
call fcn.0043d7f8
mov edx, 0x27
mov eax, dword [ebx + 0x45c]
call fcn.0043d81c
mov eax, dword [0x544764]
mov eax, dword [eax]
mov edx, 0xb4
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ccea2
test edi, edi
je 0x4ccec0
cmp dword [edi + 8], 0x64
jge 0x4ccec0
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 6
mov eax, dword [ebx + 0x300]
mov si, 0xffa5
call fcn.00404458
jmp 0x4ccedc
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xb4
mov eax, dword [ebx + 0x300]
mov si, 0xffa5
call fcn.00404458
xor edx, edx
mov eax, dword [ebx + 0x300]
call fcn.0043d7f8
mov edx, 0x50
mov eax, dword [ebx + 0x300]
call fcn.0043d81c
mov edx, 0x1d
mov eax, dword [ebx + 0x7e4]
call fcn.0043d7f8
mov edx, 0x29
mov eax, dword [ebx + 0x7e4]
call fcn.0043d81c
mov edx, 0x11e
mov eax, dword [ebx + 0x7e4]
call fcn.0043d844
mov edx, 0xa2
mov eax, dword [ebx + 0x7e4]
call fcn.0043d868
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xb7
mov eax, dword [ebx + 0x7ec]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x12b
mov eax, dword [ebx + 0x7ec]
call fcn.0043d7f8
mov edx, 0xd4
mov eax, dword [ebx + 0x7ec]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1ce
mov eax, dword [ebx + 0x69c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x160
mov eax, dword [ebx + 0x69c]
call fcn.0043d7f8
mov edx, 0x53
mov eax, dword [ebx + 0x69c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x744]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe7
mov eax, dword [ebx + 0x744]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x744]
call fcn.0043d81c
mov edx, 0x65
mov eax, dword [ebx + 0x754]
call fcn.0043d7f8
mov edx, 0x21
mov eax, dword [ebx + 0x754]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0x754]
call fcn.0043d844
mov edx, 0x24
mov eax, dword [ebx + 0x754]
call fcn.0043d868
mov edx, 0x28
mov eax, dword [ebx + 0x750]
call fcn.0043d7f8
mov edx, 0x6e
mov eax, dword [ebx + 0x750]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0x750]
call fcn.0043d844
mov edx, 0x24
mov eax, dword [ebx + 0x750]
call fcn.0043d868
mov edx, 0xa0
mov eax, dword [ebx + 0x74c]
call fcn.0043d7f8
mov edx, 0x70
mov eax, dword [ebx + 0x74c]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0x74c]
call fcn.0043d844
mov edx, 0x24
mov eax, dword [ebx + 0x74c]
call fcn.0043d868
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1cf
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd109
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1cf
mov eax, dword [ebx + 0x748]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe6
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cd0eb
adc edx, 0
add edx, 2
mov eax, dword [ebx + 0x748]
call fcn.0043d7f8
mov edx, 0xaf
mov eax, dword [ebx + 0x748]
call fcn.0043d81c
mov eax, dword [0x544600]
mov eax, dword [eax]
mov edx, 0xe
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd17c
mov edx, dword [0x544600]
mov edx, dword [edx]
mov ecx, 0xe
mov eax, dword [ebx + 0x68c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x68c]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x68c]
call fcn.0043d81c
mov edx, dword [edi + 8]
mov eax, dword [ebx + 0x68c]
call fcn.0043d844
mov edx, dword [edi + 4]
mov eax, dword [ebx + 0x68c]
call fcn.0043d868
jmp 0x4cd1ed
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x17b
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd1ed
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x17b
mov eax, dword [ebx + 0x68c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x68c]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x68c]
call fcn.0043d81c
mov edx, dword [edi + 8]
mov eax, dword [ebx + 0x68c]
call fcn.0043d844
mov edx, dword [edi + 4]
mov eax, dword [ebx + 0x68c]
call fcn.0043d868
mov edx, 0xf
mov eax, dword [ebx + 0x804]
call fcn.0043d7f8
mov edx, 0xf
mov eax, dword [ebx + 0x804]
call fcn.0043d81c
mov edx, 0xb2
mov eax, dword [ebx + 0x804]
call fcn.0043d844
mov edx, 0x40
mov eax, dword [ebx + 0x804]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x7e0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd0
mov eax, dword [ebx + 0x7e0]
call fcn.0043d7f8
mov eax, dword [ebx + 0x68c]
mov edx, dword [eax + 0x44]
mov eax, dword [ebx + 0x7e0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x1d
mov eax, dword [ebx + 0x7e8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x12
mov eax, dword [ebx + 0x7e8]
call fcn.0043d7f8
mov edx, 0xda
mov eax, dword [ebx + 0x7e8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x7f0]
mov si, 0xffa5
call fcn.00404458
mov dl, 1
mov eax, dword [ebx + 0x7f0]
call fcn.00473ff0
mov edx, 0x150
mov eax, dword [ebx + 0x7f0]
call fcn.0043d7f8
mov edx, 0x3b
mov eax, dword [ebx + 0x7f0]
call fcn.0043d81c
mov edx, 0xe
mov eax, dword [ebx + 0x7f0]
call fcn.0043d844
mov edx, 0x14
mov eax, dword [ebx + 0x7f0]
call fcn.0043d868
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x180
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd35e
xor edx, edx
mov eax, dword [ebx + 0x874]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x874]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x180
mov eax, dword [ebx + 0x874]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x18f
mov eax, dword [ebx + 0x878]
call fcn.0043d7f8
mov edx, 1
mov eax, dword [ebx + 0x878]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x878]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x5451e8]
mov eax, dword [eax]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd3e0
xor edx, edx
mov eax, dword [ebx + 0xb1c]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0xb1c]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebx + 0xb1c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x227
mov eax, dword [ebx + 0xb20]
call fcn.0043d7f8
mov edx, 1
mov eax, dword [ebx + 0xb20]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0xb20]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x181
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd46e
mov edx, 0x8a
mov eax, dword [ebx + 0x3b0]
call fcn.0043d7f8
mov edx, 0xa3
mov eax, dword [ebx + 0x3b0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x181
mov eax, dword [ebx + 0x3b0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x2b
mov eax, dword [ebx + 0x3b4]
call fcn.0043d7f8
mov edx, 0xaf
mov eax, dword [ebx + 0x3b4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x184
mov eax, dword [ebx + 0x3b4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x5a
mov eax, dword [ebx + 0x3b8]
call fcn.0043d7f8
mov edx, 0xaf
mov eax, dword [ebx + 0x3b8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x183
mov eax, dword [ebx + 0x3b8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd7
mov eax, dword [ebx + 0x3bc]
call fcn.0043d7f8
mov edx, 0xab
mov eax, dword [ebx + 0x3bc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x182
mov eax, dword [ebx + 0x3bc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x123
mov eax, dword [ebx + 0x3c0]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x3c0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x3c0]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x188
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd5ad
mov edx, 0x148
mov eax, dword [ebx + 0x3c4]
call fcn.0043d7f8
mov edx, 0xa3
mov eax, dword [ebx + 0x3c4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x188
mov eax, dword [ebx + 0x3c4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x55
mov eax, dword [ebx + 0x7dc]
call fcn.0043d7f8
mov edx, 0x96
mov eax, dword [ebx + 0x7dc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x189
mov eax, dword [ebx + 0x7dc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x73
mov eax, dword [ebx + 0x7d8]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x7d8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x7d8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1b
mov eax, dword [ebx + 0x7d4]
call fcn.0043d7f8
mov edx, 0x43
mov eax, dword [ebx + 0x7d4]
call fcn.0043d81c
mov edx, 0x3d
mov eax, dword [ebx + 0x7d4]
call fcn.0043d844
mov edx, 0x34
mov eax, dword [ebx + 0x7d4]
call fcn.0043d868
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x7e
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cd6ce
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cd68a
adc edx, 0
mov eax, dword [ebx + 0x3dc]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cd6a7
adc edx, 0
mov eax, dword [ebx + 0x3dc]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x7e
mov eax, dword [ebx + 0x3dc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x33
mov eax, dword [ebx + 0x3e0]
call fcn.0043d7f8
mov edx, 0x1f
mov eax, dword [ebx + 0x3e0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xe8
mov eax, dword [ebx + 0x3e4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x19
mov eax, dword [ebx + 0x3e4]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x3e4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xea
mov eax, dword [ebx + 0x3e8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x39
mov eax, dword [ebx + 0x3e8]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x3e8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xec
mov eax, dword [ebx + 0x3ec]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x59
mov eax, dword [ebx + 0x3ec]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x3ec]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xee
mov eax, dword [ebx + 0x3f0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x79
mov eax, dword [ebx + 0x3f0]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x3f0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xf0
mov eax, dword [ebx + 0x524]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa0
mov eax, dword [ebx + 0x524]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x524]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xf2
mov eax, dword [ebx + 0x528]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xc0
mov eax, dword [ebx + 0x528]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x528]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xf4
mov eax, dword [ebx + 0x52c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe0
mov eax, dword [ebx + 0x52c]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x52c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xf6
mov eax, dword [ebx + 0x530]
mov si, 0xffa5
call fcn.00404458
mov edx, pe_nt_image_headers32
mov eax, dword [ebx + 0x530]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x530]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x84
mov eax, dword [ebx + 0x534]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x19
mov eax, dword [ebx + 0x534]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x534]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x86
mov eax, dword [ebx + 0x538]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x39
mov eax, dword [ebx + 0x538]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x538]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x88
mov eax, dword [ebx + 0x53c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x59
mov eax, dword [ebx + 0x53c]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x53c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x8a
mov eax, dword [ebx + 0x540]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x79
mov eax, dword [ebx + 0x540]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x540]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x8c
mov eax, dword [ebx + 0x550]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa0
mov eax, dword [ebx + 0x550]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x550]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x8e
mov eax, dword [ebx + 0x54c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xc0
mov eax, dword [ebx + 0x54c]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x54c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x90
mov eax, dword [ebx + 0x548]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe0
mov eax, dword [ebx + 0x548]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x548]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x92
mov eax, dword [ebx + 0x544]
mov si, 0xffa5
call fcn.00404458
mov edx, pe_nt_image_headers32
mov eax, dword [ebx + 0x544]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x544]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x81
mov eax, dword [ebx + 0x3f4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x128
mov eax, dword [ebx + 0x3f4]
call fcn.0043d7f8
mov edx, 0x4e
mov eax, dword [ebx + 0x3f4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x7f
mov eax, dword [ebx + 0x3f8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x128
mov eax, dword [ebx + 0x3f8]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0x3f8]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x78
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cdb92
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cdb4e
adc edx, 0
mov eax, dword [ebx + 0x408]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cdb6b
adc edx, 0
mov eax, dword [ebx + 0x408]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x78
mov eax, dword [ebx + 0x408]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x410]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x104
mov eax, dword [ebx + 0x410]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x410]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x7a
mov eax, dword [ebx + 0x40c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x14
mov eax, dword [ebx + 0x40c]
call fcn.0043d7f8
mov edx, 0x12
mov eax, dword [ebx + 0x40c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x7b
mov eax, dword [ebx + 0x414]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0x414]
call fcn.0043d7f8
mov edx, 0xcb
mov eax, dword [ebx + 0x414]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x7c
mov eax, dword [ebx + 0x418]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x61
mov eax, dword [ebx + 0x418]
call fcn.0043d7f8
mov edx, 0xcb
mov eax, dword [ebx + 0x418]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x7d
mov eax, dword [ebx + 0x41c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xac
mov eax, dword [ebx + 0x41c]
call fcn.0043d7f8
mov edx, 0xcb
mov eax, dword [ebx + 0x41c]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x185
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cdd10
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x438]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x438]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x185
mov eax, dword [ebx + 0x438]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x15
mov eax, dword [ebx + 0x440]
call fcn.0043d7f8
mov edx, 0x38
mov eax, dword [ebx + 0x440]
call fcn.0043d81c
mov edx, 0xb4
mov eax, dword [ebx + 0x440]
call fcn.0043d844
mov edx, 0x42
mov eax, dword [ebx + 0x440]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x187
mov eax, dword [ebx + 0x444]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x9b
mov eax, dword [ebx + 0x444]
call fcn.0043d7f8
mov edx, 0x80
mov eax, dword [ebx + 0x444]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x448]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xdc
mov eax, dword [ebx + 0x448]
call fcn.0043d7f8
mov edx, 0x2a
mov eax, dword [ebx + 0x448]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x1c
mov eax, dword [ebx + 0x44c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb
mov eax, dword [ebx + 0x44c]
call fcn.0043d7f8
mov edx, 0x89
mov eax, dword [ebx + 0x44c]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x186
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cde5a
mov eax, dword [ebx + 0x438]
mov edx, dword [eax + 0x40]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x434]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x434]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x186
mov eax, dword [ebx + 0x434]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x15
mov eax, dword [ebx + 0x43c]
call fcn.0043d7f8
mov edx, 0x38
mov eax, dword [ebx + 0x43c]
call fcn.0043d81c
mov edx, 0xb4
mov eax, dword [ebx + 0x43c]
call fcn.0043d844
mov edx, 0x42
mov eax, dword [ebx + 0x43c]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x1c
mov eax, dword [ebx + 0x450]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb
mov eax, dword [ebx + 0x450]
call fcn.0043d7f8
mov edx, 0x89
mov eax, dword [ebx + 0x450]
call fcn.0043d81c
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x12a
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cdf32
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cdefe
adc edx, 0
mov eax, dword [ebx + 0x694]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x694]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x12a
mov eax, dword [ebx + 0x694]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x6f4]
call fcn.0043d7f8
mov edx, 0xd
mov eax, dword [ebx + 0x6f4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x12b
mov eax, dword [ebx + 0x6f4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xea
mov eax, dword [ebx + 0x6f8]
call fcn.0043d7f8
mov edx, 0xd
mov eax, dword [ebx + 0x6f8]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x12c
mov eax, dword [ebx + 0x6f8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x125
mov eax, dword [ebx + 0x6fc]
call fcn.0043d7f8
mov edx, 0xd
mov eax, dword [ebx + 0x6fc]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x12d
mov eax, dword [ebx + 0x6fc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x15d
mov eax, dword [ebx + 0x700]
call fcn.0043d7f8
mov edx, 0xd
mov eax, dword [ebx + 0x700]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x12e
mov eax, dword [ebx + 0x700]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x197
mov eax, dword [ebx + 0x704]
call fcn.0043d7f8
mov edx, 0xd
mov eax, dword [ebx + 0x704]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x12f
mov eax, dword [ebx + 0x704]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x608]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x25e
mov eax, dword [ebx + 0x608]
call fcn.0043d7f8
mov edx, 5
mov eax, dword [ebx + 0x608]
call fcn.0043d81c
mov edx, 0xc5
mov eax, dword [ebx + 0x714]
call fcn.0043d7f8
mov edx, 0x15d
mov eax, dword [ebx + 0x714]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x184
mov eax, dword [ebx + 0x714]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x11f
mov eax, dword [ebx + 0x718]
call fcn.0043d7f8
mov edx, 0x15d
mov eax, dword [ebx + 0x718]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x183
mov eax, dword [ebx + 0x718]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x148
mov eax, dword [ebx + 0x71c]
call fcn.0043d7f8
mov edx, 0x16c
mov eax, dword [ebx + 0x71c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x130
mov eax, dword [ebx + 0x71c]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x71c]
mov edx, dword [eax + 0x40]
add edx, 0x3a
mov eax, dword [ebx + 0x720]
call fcn.0043d7f8
mov edx, 0x16c
mov eax, dword [ebx + 0x720]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x131
mov eax, dword [ebx + 0x720]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x720]
mov edx, dword [eax + 0x40]
add edx, 0x3a
mov eax, dword [ebx + 0x724]
call fcn.0043d7f8
mov edx, 0x16c
mov eax, dword [ebx + 0x724]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x132
mov eax, dword [ebx + 0x724]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb2
mov eax, dword [ebx + 0x70c]
call fcn.0043d7f8
mov edx, 0x3a
mov eax, dword [ebx + 0x70c]
call fcn.0043d81c
mov edx, 0x154
mov eax, dword [ebx + 0x70c]
call fcn.0043d844
mov edx, 0x10e
mov eax, dword [ebx + 0x70c]
call fcn.0043d868
mov edx, 0x205
mov eax, dword [ebx + 0x710]
call fcn.0043d7f8
mov edx, 0x41
mov eax, dword [ebx + 0x710]
call fcn.0043d81c
mov edx, 0x5a
mov eax, dword [ebx + 0x710]
call fcn.0043d844
mov edx, 0x145
mov eax, dword [ebx + 0x710]
call fcn.0043d868
mov edx, 0xf
mov eax, dword [ebx + 0x708]
call fcn.0043d7f8
mov edx, 0x96
mov eax, dword [ebx + 0x708]
call fcn.0043d844
mov edx, 0x19
mov eax, dword [ebx + 0x708]
call fcn.0043d81c
mov edx, 0xb4
mov eax, dword [ebx + 0x708]
call fcn.0043d868
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1a4
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce303
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce2bc
adc edx, 0
mov eax, dword [ebx + 0x890]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4ce2d9
adc edx, 0
sub edx, 0x50
mov eax, dword [ebx + 0x890]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1a4
mov eax, dword [ebx + 0x890]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x146
mov eax, dword [ebx + 0x8d4]
call fcn.0043d7f8
mov edx, 0x2e
mov eax, dword [ebx + 0x8d4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x8d4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1c
mov eax, dword [ebx + 0x894]
call fcn.0043d7f8
mov edx, 0x3d
mov eax, dword [ebx + 0x894]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1bb
mov eax, dword [ebx + 0x894]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x7a
mov eax, dword [ebx + 0x898]
call fcn.0043d7f8
mov edx, 0x3d
mov eax, dword [ebx + 0x898]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1bc
mov eax, dword [ebx + 0x898]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xdc
mov eax, dword [ebx + 0x89c]
call fcn.0043d7f8
mov edx, 0x3d
mov eax, dword [ebx + 0x89c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1bd
mov eax, dword [ebx + 0x89c]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1ab
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce46a
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce41c
adc edx, 0
mov eax, dword [ebx + 0x8a0]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
mov edx, eax
add edx, 0x5c
mov eax, dword [ebx + 0x8a0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1ab
mov eax, dword [ebx + 0x8a0]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1af
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce4e8
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce493
adc edx, 0
mov eax, dword [ebx + 0x8a4]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
mov edx, eax
add edx, edx
mov eax, dword [edi + 4]
add eax, 0x5c
add edx, eax
mov eax, dword [ebx + 0x8a4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1af
mov eax, dword [ebx + 0x8a4]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1b1
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce567
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce511
adc edx, 0
mov eax, dword [ebx + 0x8a8]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
lea edx, [eax + eax*2]
mov eax, dword [edi + 4]
add eax, eax
add eax, 0x5c
add edx, eax
mov eax, dword [ebx + 0x8a8]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1b1
mov eax, dword [ebx + 0x8a8]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1b3
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce5e9
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce590
adc edx, 0
mov eax, dword [ebx + 0x8ac]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
mov edx, eax
shl edx, 2
mov eax, dword [edi + 4]
lea eax, [eax + eax*2]
add eax, 0x5c
add edx, eax
mov eax, dword [ebx + 0x8ac]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1b3
mov eax, dword [ebx + 0x8ac]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1ad
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce660
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce612
adc edx, 0
mov eax, dword [ebx + 0x8b0]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
mov edx, eax
add edx, 0x5c
mov eax, dword [ebx + 0x8b0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1ad
mov eax, dword [ebx + 0x8b0]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1b5
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce6de
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce689
adc edx, 0
mov eax, dword [ebx + 0x8b4]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
mov edx, eax
add edx, edx
mov eax, dword [edi + 4]
add eax, 0x5c
add edx, eax
mov eax, dword [ebx + 0x8b4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1b5
mov eax, dword [ebx + 0x8b4]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1b7
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce75d
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce707
adc edx, 0
mov eax, dword [ebx + 0x8b8]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
lea edx, [eax + eax*2]
mov eax, dword [edi + 4]
add eax, eax
add eax, 0x5c
add edx, eax
mov eax, dword [ebx + 0x8b8]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1b7
mov eax, dword [ebx + 0x8b8]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1b9
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ce7df
mov eax, dword [ebx + 0x890]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ce786
adc edx, 0
mov eax, dword [ebx + 0x8bc]
call fcn.0043d7f8
mov eax, dword [edi + 4]
shl eax, 2
push eax
mov eax, 0xf8
pop edx
sub eax, edx
mov ecx, 5
cdq
idiv ecx
mov edx, eax
shl edx, 2
mov eax, dword [edi + 4]
lea eax, [eax + eax*2]
add eax, 0x5c
add edx, eax
mov eax, dword [ebx + 0x8bc]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1b9
mov eax, dword [ebx + 0x8bc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0x8c0]
call fcn.0043d7f8
mov edx, 0x158
mov eax, dword [ebx + 0x8c0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1c2
mov eax, dword [ebx + 0x8c0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x4d
mov eax, dword [ebx + 0x8c4]
call fcn.0043d7f8
mov edx, 0x158
mov eax, dword [ebx + 0x8c4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1c4
mov eax, dword [ebx + 0x8c4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x81
mov eax, dword [ebx + 0x8c8]
call fcn.0043d7f8
mov edx, 0x158
mov eax, dword [ebx + 0x8c8]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1c6
mov eax, dword [ebx + 0x8c8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb5
mov eax, dword [ebx + 0x8cc]
call fcn.0043d7f8
mov edx, 0x158
mov eax, dword [ebx + 0x8cc]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1c8
mov eax, dword [ebx + 0x8cc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf4
mov eax, dword [ebx + 0x8d0]
call fcn.0043d7f8
mov edx, 0x158
mov eax, dword [ebx + 0x8d0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1ca
mov eax, dword [ebx + 0x8d0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [ebx + 0x894]
mov eax, ebx
call fcn.004fa0b8
xor edx, edx
mov eax, dword [ebx + 0x6a4]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x6a4]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xb0
mov eax, dword [ebx + 0x6a4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xc
mov eax, dword [ebx + 0x778]
call fcn.0043d7f8
mov edx, 0x148
mov eax, dword [ebx + 0x778]
call fcn.0043d81c
mov edx, 0x88
mov eax, dword [ebx + 0x778]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x778]
call fcn.0047981c
mov edx, 0x1be
mov eax, dword [ebx + 0x758]
call fcn.0043d7f8
mov edx, 6
mov eax, dword [ebx + 0x758]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x758]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe0
mov eax, dword [ebx + 0x764]
call fcn.0043d7f8
mov edx, 0x106
mov eax, dword [ebx + 0x764]
call fcn.0043d81c
mov edx, 0x92
mov eax, dword [ebx + 0x774]
call fcn.0043d7f8
mov edx, 0x145
mov eax, dword [ebx + 0x774]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xb6
mov eax, dword [ebx + 0x774]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x14a
mov eax, dword [ebx + 0x76c]
call fcn.0043d7f8
mov edx, 0x145
mov eax, dword [ebx + 0x76c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xb2
mov eax, dword [ebx + 0x76c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x18d
mov eax, dword [ebx + 0x75c]
call fcn.0043d7f8
mov edx, 0x145
mov eax, dword [ebx + 0x75c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xb4
mov eax, dword [ebx + 0x75c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd7
mov eax, dword [ebx + 0x770]
call fcn.0043d7f8
mov edx, 0x163
mov eax, dword [ebx + 0x770]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x184
mov eax, dword [ebx + 0x770]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x103
mov eax, dword [ebx + 0x768]
call fcn.0043d7f8
mov edx, 0x164
mov eax, dword [ebx + 0x768]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0xb1
mov eax, dword [ebx + 0x768]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x12e
mov eax, dword [ebx + 0x760]
call fcn.0043d7f8
mov edx, 0x163
mov eax, dword [ebx + 0x760]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x183
mov eax, dword [ebx + 0x760]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1fe
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cebbb
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ceb77
adc edx, 0
mov eax, dword [ebx + 0x6a8]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4ceb94
adc edx, 0
mov eax, dword [ebx + 0x6a8]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1fe
mov eax, dword [ebx + 0x6a8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0x7fc]
call fcn.0043d7f8
mov edx, 0x10
mov eax, dword [ebx + 0x7fc]
call fcn.0043d81c
mov eax, dword [ebx + 0x7fc]
mov dword [eax + 0x2c8], 0x34
mov dword [eax + 0x2cc], 0x30
mov edx, dword [eax + 0x2c8]
lea edx, [edx + edx*2]
call fcn.0043d844
mov eax, dword [ebx + 0x7fc]
mov edx, dword [eax + 0x2cc]
lea edx, [edx + edx*2]
call fcn.0043d868
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x208
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cec86
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cec3f
adc edx, 0
mov eax, dword [ebx + 0x6a0]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cec5c
adc edx, 0
sub edx, 0x3c
mov eax, dword [ebx + 0x6a0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x208
mov eax, dword [ebx + 0x6a0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xb0
mov eax, dword [ebx + 0x77c]
call fcn.0043d7f8
mov edx, 0xbe
mov eax, dword [ebx + 0x77c]
call fcn.0043d81c
mov edx, 0x16
mov eax, dword [ebx + 0x77c]
call fcn.0043d844
mov edx, 0x20
mov eax, dword [ebx + 0x77c]
call fcn.0043d868
mov eax, dword [ebx + 0x6a8]
mov edx, dword [eax + 0x48]
sub edx, 0x14
sar edx, 1
jns 0x4cecd9
adc edx, 0
mov eax, dword [ebx + 0x800]
call fcn.0043d7f8
mov edx, 0xb4
mov eax, dword [ebx + 0x800]
call fcn.0043d81c
mov edx, 0x14
mov eax, dword [ebx + 0x800]
call fcn.0043d844
mov edx, 0xf
mov eax, dword [ebx + 0x800]
call fcn.0043d868
mov eax, dword [0x544600]
mov eax, dword [eax]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ced7d
mov edx, dword [0x544600]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebx + 0x6ac]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4ced52
adc edx, 0
mov eax, dword [ebx + 0x6ac]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4ced6f
adc edx, 0
sub edx, 0x5a
mov eax, dword [ebx + 0x6ac]
call fcn.0043d81c
mov eax, dword [0x544db8]
mov eax, dword [eax]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cede5
mov edx, dword [0x544db8]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebx + 0x780]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x6ac]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cedbc
adc edx, 0
mov eax, dword [ebx + 0x780]
call fcn.0043d7f8
mov eax, dword [ebx + 0x6ac]
mov edx, dword [eax + 0x4c]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cedda
adc edx, 0
mov eax, dword [ebx + 0x780]
call fcn.0043d81c
mov eax, dword [0x544600]
mov eax, dword [eax]
mov edx, 1
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cee3e
mov edx, dword [0x544600]
mov edx, dword [edx]
mov ecx, 1
mov eax, dword [ebx + 0x784]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x6ac]
mov edx, dword [eax + 0x48]
sub edx, dword [edi + 8]
sub edx, 3
mov eax, dword [ebx + 0x784]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x784]
call fcn.0043d81c
mov eax, dword [0x544600]
mov eax, dword [eax]
mov edx, 5
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cee90
mov edx, dword [0x544600]
mov edx, dword [edx]
mov ecx, 5
mov eax, dword [ebx + 0x788]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x30
mov eax, dword [ebx + 0x788]
call fcn.0043d7f8
mov edx, 0x13e
mov eax, dword [ebx + 0x788]
call fcn.0043d81c
mov eax, dword [0x544600]
mov eax, dword [eax]
mov edx, 3
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4ceee5
mov edx, dword [0x544600]
mov edx, dword [edx]
mov ecx, 3
mov eax, dword [ebx + 0x78c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1d6
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x78c]
call fcn.0043d7f8
mov edx, 0x13e
mov eax, dword [ebx + 0x78c]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0xb4
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cef31
xor edx, edx
mov eax, dword [ebx + 0x484]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x484]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xb4
mov eax, dword [ebx + 0x484]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x248
mov eax, dword [ebx + 0x4bc]
call fcn.0043d7f8
mov edx, 6
mov eax, dword [ebx + 0x4bc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x4bc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd
mov eax, dword [ebx + 0x488]
call fcn.0043d7f8
mov edx, 0x19b
mov eax, dword [ebx + 0x488]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xc6
mov eax, dword [ebx + 0x488]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd
mov eax, dword [ebx + 0x48c]
call fcn.0043d7f8
mov edx, 0x1ad
mov eax, dword [ebx + 0x48c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xc8
mov eax, dword [ebx + 0x48c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x5e
mov eax, dword [ebx + 0x490]
call fcn.0043d7f8
mov edx, 0x1ad
mov eax, dword [ebx + 0x490]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xbe
mov eax, dword [ebx + 0x490]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf3
mov eax, dword [ebx + 0x494]
call fcn.0043d7f8
mov edx, 0x19b
mov eax, dword [ebx + 0x494]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xb6
mov eax, dword [ebx + 0x494]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf3
mov eax, dword [ebx + 0x498]
call fcn.0043d7f8
mov edx, 0x1ad
mov eax, dword [ebx + 0x498]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xc0
mov eax, dword [ebx + 0x498]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x145
mov eax, dword [ebx + 0x49c]
call fcn.0043d7f8
mov edx, 0x19b
mov eax, dword [ebx + 0x49c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xc4
mov eax, dword [ebx + 0x49c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x145
mov eax, dword [ebx + 0x4a0]
call fcn.0043d7f8
mov edx, 0x1ad
mov eax, dword [ebx + 0x4a0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xc2
mov eax, dword [ebx + 0x4a0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x197
mov eax, dword [ebx + 0x4a4]
call fcn.0043d7f8
mov edx, 0x19b
mov eax, dword [ebx + 0x4a4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xb8
mov eax, dword [ebx + 0x4a4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x197
mov eax, dword [ebx + 0x4a8]
call fcn.0043d7f8
mov edx, 0x1ad
mov eax, dword [ebx + 0x4a8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xba
mov eax, dword [ebx + 0x4a8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x211
mov eax, dword [ebx + 0x4ac]
call fcn.0043d7f8
mov edx, 0x19b
mov eax, dword [ebx + 0x4ac]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xca
mov eax, dword [ebx + 0x4ac]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x211
mov eax, dword [ebx + 0x4b0]
call fcn.0043d7f8
mov edx, 0x1ad
mov eax, dword [ebx + 0x4b0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xbc
mov eax, dword [ebx + 0x4b0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x253
mov eax, dword [ebx + 0x4b4]
call fcn.0043d7f8
mov edx, 0xef
mov eax, dword [ebx + 0x4b4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x175
mov eax, dword [ebx + 0x4b4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x253
mov eax, dword [ebx + 0x4b8]
call fcn.0043d7f8
mov edx, 0x123
mov eax, dword [ebx + 0x4b8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x174
mov eax, dword [ebx + 0x4b8]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xcc
mov eax, dword [ebx + 0x4c0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x169
mov eax, dword [ebx + 0x4c8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x202
mov eax, dword [ebx + 0x4c8]
call fcn.0043d7f8
mov edx, 0x11f
mov eax, dword [ebx + 0x4c8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x4c4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x248
mov eax, dword [ebx + 0x4c4]
call fcn.0043d7f8
mov edx, 6
mov eax, dword [ebx + 0x4c4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xe2
mov eax, dword [ebx + 0x4cc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x518]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x13c
mov eax, dword [ebx + 0x518]
call fcn.0043d7f8
mov edx, 1
mov eax, dword [ebx + 0x518]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xe0
mov eax, dword [ebx + 0x51c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xdc
mov eax, dword [ebx + 0x51c]
call fcn.0043d7f8
mov edx, 0x12a
mov eax, dword [ebx + 0x51c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4d0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4d0]
call fcn.0043d7f8
mov edx, 0x65
mov eax, dword [ebx + 0x4d0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4d4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4d4]
call fcn.0043d7f8
mov edx, 0x79
mov eax, dword [ebx + 0x4d4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4d8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4d8]
call fcn.0043d7f8
mov edx, 0x8c
mov eax, dword [ebx + 0x4d8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4dc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4dc]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0x4dc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4e0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4e0]
call fcn.0043d7f8
mov edx, 0xb5
mov eax, dword [ebx + 0x4e0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4e4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4e4]
call fcn.0043d7f8
mov edx, 0xc9
mov eax, dword [ebx + 0x4e4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4e8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4e8]
call fcn.0043d7f8
mov edx, 0xdc
mov eax, dword [ebx + 0x4e8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4ec]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4ec]
call fcn.0043d7f8
mov edx, 0xf0
mov eax, dword [ebx + 0x4ec]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd4
mov eax, dword [ebx + 0x4f0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xd9
mov eax, dword [ebx + 0x4f0]
call fcn.0043d7f8
mov edx, 0x105
mov eax, dword [ebx + 0x4f0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x4f4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x4f4]
call fcn.0043d7f8
mov edx, 0x65
mov eax, dword [ebx + 0x4f4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x4f8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x4f8]
call fcn.0043d7f8
mov edx, 0x79
mov eax, dword [ebx + 0x4f8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x4fc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x4fc]
call fcn.0043d7f8
mov edx, 0x8c
mov eax, dword [ebx + 0x4fc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x500]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x500]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0x500]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x504]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x504]
call fcn.0043d7f8
mov edx, 0xb5
mov eax, dword [ebx + 0x504]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x50c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x50c]
call fcn.0043d7f8
mov edx, 0xc9
mov eax, dword [ebx + 0x50c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x508]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x508]
call fcn.0043d7f8
mov edx, 0xdc
mov eax, dword [ebx + 0x508]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x510]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x510]
call fcn.0043d7f8
mov edx, 0xf0
mov eax, dword [ebx + 0x510]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0xd6
mov eax, dword [ebx + 0x514]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe9
mov eax, dword [ebx + 0x514]
call fcn.0043d7f8
mov edx, 0x105
mov eax, dword [ebx + 0x514]
call fcn.0043d81c
mov edx, 0x96
mov eax, dword [ebx + 0xb60]
call fcn.0043d7f8
mov edx, 0x12f
mov eax, dword [ebx + 0xb60]
call fcn.0043d81c
mov edx, 0x41
mov eax, dword [ebx + 0xb60]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb64]
call fcn.0043d7f8
mov edx, 0x130
mov eax, dword [ebx + 0xb64]
call fcn.0043d81c
mov edx, 0x74
mov eax, dword [ebx + 0xb64]
call fcn.0043d844
mov edx, 0xe
mov eax, dword [ebx + 0xb64]
call fcn.0043d868
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x218
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cf898
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x218
mov eax, dword [ebx + 0x590]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x200
mov eax, dword [ebx + 0x590]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x590]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x594]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf7
mov eax, dword [ebx + 0x594]
call fcn.0043d7f8
mov edx, 5
mov eax, dword [ebx + 0x594]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x175
mov eax, dword [ebx + 0x598]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x103
mov eax, dword [ebx + 0x598]
call fcn.0043d7f8
mov edx, 0x66
mov eax, dword [ebx + 0x598]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x174
mov eax, dword [ebx + 0x59c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x103
mov eax, dword [ebx + 0x59c]
call fcn.0043d7f8
mov edx, 0x9a
mov eax, dword [ebx + 0x59c]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x234
mov eax, dword [ebx + 0x5d4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x5a
mov eax, dword [ebx + 0x5d4]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5d4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x236
mov eax, dword [ebx + 0x5d8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x7c
mov eax, dword [ebx + 0x5d8]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5d8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x22c
mov eax, dword [ebx + 0x5e0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x9e
mov eax, dword [ebx + 0x5e0]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5e0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x238
mov eax, dword [ebx + 0x5dc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xc0
mov eax, dword [ebx + 0x5dc]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5dc]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x23a
mov eax, dword [ebx + 0x5e4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe2
mov eax, dword [ebx + 0x5e4]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5e4]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x218
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cfac7
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x218
mov eax, dword [ebx + 0x5a4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x200
mov eax, dword [ebx + 0x5a4]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x5a4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x5ac]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf7
mov eax, dword [ebx + 0x5ac]
call fcn.0043d7f8
mov edx, 5
mov eax, dword [ebx + 0x5ac]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x175
mov eax, dword [ebx + 0x5a8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x103
mov eax, dword [ebx + 0x5a8]
call fcn.0043d7f8
mov edx, 0x66
mov eax, dword [ebx + 0x5a8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x174
mov eax, dword [ebx + 0x5b0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x103
mov eax, dword [ebx + 0x5b0]
call fcn.0043d7f8
mov edx, 0x9a
mov eax, dword [ebx + 0x5b0]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x22a
mov eax, dword [ebx + 0x5ec]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xc0
mov eax, dword [ebx + 0x5ec]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5ec]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x22c
mov eax, dword [ebx + 0x5e8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe2
mov eax, dword [ebx + 0x5e8]
call fcn.0043d7f8
mov edx, 0xe9
mov eax, dword [ebx + 0x5e8]
call fcn.0043d81c
mov eax, dword [0x544a58]
mov eax, dword [eax]
mov edx, 0x219
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cfc42
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x219
mov eax, dword [ebx + 0x5b4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x122
mov eax, dword [ebx + 0x5b4]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x5b4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x173
mov eax, dword [ebx + 0x5b8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xcd
mov eax, dword [ebx + 0x5b8]
call fcn.0043d7f8
mov edx, 1
mov eax, dword [ebx + 0x5b8]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x220
mov eax, dword [ebx + 0x5f4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x3a
mov eax, dword [ebx + 0x5f4]
call fcn.0043d7f8
mov edx, 0x72
mov eax, dword [ebx + 0x5f4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x21a
mov eax, dword [ebx + 0x5f0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x7e
mov eax, dword [ebx + 0x5f0]
call fcn.0043d7f8
mov edx, 0x72
mov eax, dword [ebx + 0x5f0]
call fcn.0043d81c
mov edx, 0x28
mov eax, dword [ebx + 0x868]
call fcn.0043d7f8
mov edx, 0x5b
mov eax, dword [ebx + 0x868]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0x868]
call fcn.0043d844
mov edx, 0x5a
mov eax, dword [ebx + 0x868]
call fcn.0043d868
mov edx, 0x57
mov eax, dword [ebx + 0x864]
call fcn.0043d7f8
mov edx, 0x5b
mov eax, dword [ebx + 0x864]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0x864]
call fcn.0043d844
mov edx, 0x5a
mov eax, dword [ebx + 0x864]
call fcn.0043d868
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x196
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cfde2
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x196
mov eax, dword [ebx + 0x6b0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4cfdba
adc edx, 0
mov eax, dword [ebx + 0x6b0]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4cfdd7
adc edx, 0
mov eax, dword [ebx + 0x6b0]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x197
mov eax, dword [ebx + 0x79c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x798]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x68
mov eax, dword [ebx + 0x79c]
call fcn.0043d7f8
mov edx, 0x169
mov eax, dword [ebx + 0x79c]
call fcn.0043d81c
mov edx, 0xf8
mov eax, dword [ebx + 0x798]
call fcn.0043d7f8
mov edx, 0x1f
mov eax, dword [ebx + 0x798]
call fcn.0043d81c
mov eax, dword [0x545150]
mov eax, dword [eax]
mov edx, 0x1d1
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4cfeaf
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
mov eax, dword [ebx + 0x808]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x808]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1d1
mov eax, dword [ebx + 0x808]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1b
mov eax, dword [ebx + 0x814]
call fcn.0043d7f8
mov edx, 0x9c
mov eax, dword [ebx + 0x814]
call fcn.0043d81c
mov edx, 0xbe
mov eax, dword [ebx + 0x814]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x814]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x1c
mov eax, dword [ebx + 0x810]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1b
mov eax, dword [ebx + 0x810]
call fcn.0043d7f8
mov edx, 0xc6
mov eax, dword [ebx + 0x810]
call fcn.0043d81c
mov edx, 0x1b
mov eax, dword [ebx + 0x818]
call fcn.0043d7f8
mov edx, 0x38
mov eax, dword [ebx + 0x818]
call fcn.0043d81c
mov edx, 0xbe
mov eax, dword [ebx + 0x818]
call fcn.0043d844
mov edx, 0x21
mov eax, dword [ebx + 0x818]
call fcn.0043d868
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x1c
mov eax, dword [ebx + 0x81c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x1b
mov eax, dword [ebx + 0x81c]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0x81c]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1cf
mov eax, dword [ebx + 0x824]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x49
mov eax, dword [ebx + 0x824]
call fcn.0043d7f8
mov edx, 0xe6
mov eax, dword [ebx + 0x824]
call fcn.0043d81c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x1d2
mov eax, dword [ebx + 0x820]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x7a
mov eax, dword [ebx + 0x820]
call fcn.0043d7f8
mov edx, 0xe7
mov eax, dword [ebx + 0x820]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x80c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf0
mov eax, dword [ebx + 0x80c]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x80c]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x9c
mov eax, dword [ebx + 0x6b4]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x6b4]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4d008c
adc edx, 0
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x6b4]
sub edx, dword [eax + 0x4c]
sub edx, 0x32
sar edx, 1
jns 0x4d00ac
adc edx, 0
call fcn.0043d81c
mov edx, 0x14
mov eax, dword [ebx + 0x6c4]
call fcn.0043d7f8
mov edx, 0x50
mov eax, dword [ebx + 0x6c4]
call fcn.0043d81c
mov edx, 0xcd
mov eax, dword [ebx + 0x6c4]
call fcn.0043d844
mov edx, 0x72
mov eax, dword [ebx + 0x6c4]
call fcn.0043d868
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xa5
mov eax, dword [ebx + 0x6d0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x5f
mov eax, dword [ebx + 0x6d0]
call fcn.0043d7f8
mov edx, 0xd0
mov eax, dword [ebx + 0x6d0]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xad
mov eax, dword [ebx + 0x6d4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa3
mov eax, dword [ebx + 0x6d4]
call fcn.0043d7f8
mov edx, 0xd0
mov eax, dword [ebx + 0x6d4]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x6cc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf5
mov eax, dword [ebx + 0x6cc]
call fcn.0043d7f8
mov edx, 1
mov eax, dword [ebx + 0x6cc]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xab
mov eax, dword [ebx + 0x6c8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x10
mov eax, dword [ebx + 0x6c8]
call fcn.0043d7f8
mov edx, 0x34
mov eax, dword [ebx + 0x6c8]
call fcn.0043d81c
mov edx, 0x19
mov eax, dword [ebx + 0x6c0]
call fcn.0043d7f8
mov edx, 0x132
mov eax, dword [ebx + 0x6c0]
call fcn.0043d81c
mov edx, 0xbe
mov eax, dword [ebx + 0x6c0]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x6c0]
call fcn.0047981c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xa3
mov eax, dword [ebx + 0x6b8]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x6b8]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4d0252
adc edx, 0
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x6b8]
sub edx, dword [eax + 0x4c]
sub edx, 0x32
sar edx, 1
jns 0x4d0272
adc edx, 0
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x40
mov eax, dword [ebx + 0x6f0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xf5
mov eax, dword [ebx + 0x6f0]
call fcn.0043d7f8
mov edx, 1
mov eax, dword [ebx + 0x6f0]
call fcn.0043d81c
mov edx, 0x14
mov eax, dword [ebx + 0x6e8]
call fcn.0043d7f8
mov edx, 0x34
mov eax, dword [ebx + 0x6e8]
call fcn.0043d81c
mov edx, 0xcd
mov eax, dword [ebx + 0x6e8]
call fcn.0043d844
mov edx, 0x72
mov eax, dword [ebx + 0x6e8]
call fcn.0043d868
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xa1
mov eax, dword [ebx + 0x6ec]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xaa
mov eax, dword [ebx + 0x6ec]
call fcn.0043d7f8
mov edx, 0xd0
mov eax, dword [ebx + 0x6ec]
call fcn.0043d81c
mov edx, 0x19
mov eax, dword [ebx + 0x6e4]
call fcn.0043d7f8
mov edx, 0x132
mov eax, dword [ebx + 0x6e4]
call fcn.0043d81c
mov edx, 0xbe
mov eax, dword [ebx + 0x6e4]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x6e4]
call fcn.0047981c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0x9d
mov eax, dword [ebx + 0x6bc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x6b8]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4d03a0
adc edx, 0
mov eax, dword [ebx + 0x6bc]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x6b8]
sub edx, dword [eax + 0x4c]
sub edx, 0x32
sar edx, 1
jns 0x4d03c6
adc edx, 0
mov eax, dword [ebx + 0x6bc]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xa9
mov eax, dword [ebx + 0x6d8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x58
mov eax, dword [ebx + 0x6d8]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0x6d8]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xa7
mov eax, dword [ebx + 0x6e0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe4
mov eax, dword [ebx + 0x6e0]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0x6e0]
call fcn.0043d81c
mov edx, 0x84
mov eax, dword [ebx + 0x6dc]
call fcn.0043d7f8
mov edx, 0x42
mov eax, dword [ebx + 0x6dc]
call fcn.0043d81c
mov edx, 0x98
mov eax, dword [ebx + 0x6dc]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x6dc]
call fcn.0047981c
mov edx, dword [0x545150]
mov edx, dword [edx]
mov ecx, 0x2b
mov eax, dword [ebx + 0x87c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x87c]
sub edx, dword [eax + 0x48]
sar edx, 1
jns 0x4d04ba
adc edx, 0
mov eax, dword [ebx + 0x87c]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
mov eax, dword [ebx + 0x87c]
sub edx, dword [eax + 0x4c]
sar edx, 1
jns 0x4d04dd
adc edx, 0
mov eax, dword [ebx + 0x87c]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xb7
mov eax, dword [ebx + 0x880]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x23
mov eax, dword [ebx + 0x880]
call fcn.0043d7f8
mov edx, 0x70
mov eax, dword [ebx + 0x880]
call fcn.0043d81c
mov edx, dword [0x5451e8]
mov edx, dword [edx]
mov ecx, 0xb9
mov eax, dword [ebx + 0x884]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x73
mov eax, dword [ebx + 0x884]
call fcn.0043d7f8
mov edx, 0x70
mov eax, dword [ebx + 0x884]
call fcn.0043d81c
mov edx, 0x5d
mov eax, dword [ebx + 0x888]
call fcn.0043d7f8
mov edx, 9
mov eax, dword [ebx + 0x888]
call fcn.0043d81c
mov edx, 0x5d
mov eax, dword [ebx + 0x888]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x888]
call fcn.0047981c
mov eax, dword [0x544764]
mov eax, dword [eax]
mov edx, 0x25f
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
je 0x4d0609
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x25f
mov eax, dword [ebx + 0x900]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x54461c]
mov edx, dword [edx]
sub edx, dword [edi + 8]
sar edx, 1
jns 0x4d05e1
adc edx, 0
mov eax, dword [ebx + 0x900]
call fcn.0043d7f8
mov edx, dword [0x54460c]
mov edx, dword [edx]
sub edx, dword [edi + 4]
sar edx, 1
jns 0x4d05fe
adc edx, 0
mov eax, dword [ebx + 0x900]
call fcn.0043d81c
mov eax, dword [ebx + 0x900]
mov edx, dword [eax + 0x48]
sub edx, 0x16
mov eax, dword [ebx + 0x5bc]
call fcn.0043d7f8
mov edx, 2
mov eax, dword [ebx + 0x5bc]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x117
mov eax, dword [ebx + 0x5bc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa
mov eax, dword [ebx + 0x934]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x934]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x934]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x3a
mov eax, dword [ebx + 0x938]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x938]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x938]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x6a
mov eax, dword [ebx + 0x93c]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x93c]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x93c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x9a
mov eax, dword [ebx + 0x940]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x940]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x940]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xca
mov eax, dword [ebx + 0x944]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x944]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x944]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xfa
mov eax, dword [ebx + 0x948]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x948]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x948]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x12a
mov eax, dword [ebx + 0x94c]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x94c]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x94c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x15a
mov eax, dword [ebx + 0x950]
call fcn.0043d7f8
mov edx, 0xc
mov eax, dword [ebx + 0x950]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x260
mov eax, dword [ebx + 0x950]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xe
mov eax, dword [ebx + 0x900]
call fcn.0047c38c
mov edx, 0x24
mov eax, dword [ebx + 0x900]
call fcn.0047c3b8
mov edx, 0x180
mov eax, dword [ebx + 0x900]
call fcn.0047c3dc
mov edx, 0xce
mov eax, dword [ebx + 0x900]
call fcn.0047c400
mov edx, 0x14
mov eax, dword [ebx + 0x924]
call fcn.0043d7f8
mov edx, 0x14
mov eax, dword [ebx + 0x924]
call fcn.0043d81c
mov edx, 0x15c
mov eax, dword [ebx + 0x924]
call fcn.0043d844
mov edx, 0xbc
mov eax, dword [ebx + 0x924]
call fcn.0043d868
mov edx, 0xc
mov eax, dword [ebx + 0x92c]
call fcn.0043d7f8
mov edx, 0x1c
mov eax, dword [ebx + 0x92c]
call fcn.0043d81c
mov edx, 0x15e
mov eax, dword [ebx + 0x92c]
call fcn.0043d844
mov edx, 0x98
mov eax, dword [ebx + 0x92c]
call fcn.0043d868
mov edx, 0xa
mov eax, dword [ebx + 0x954]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x954]
call fcn.0043d81c
mov edx, 0x166
mov eax, dword [ebx + 0x954]
call fcn.0043d844
mov edx, 0xc6
mov eax, dword [ebx + 0x954]
call fcn.0043d868
mov edx, 0xa
mov eax, dword [ebx + 0x95c]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x95c]
call fcn.0043d81c
mov edx, 0x170
mov eax, dword [ebx + 0x95c]
call fcn.0043d844
mov edx, 0xd0
mov eax, dword [ebx + 0x95c]
call fcn.0043d868
xor edx, edx
mov eax, dword [ebx + 0x964]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x964]
call fcn.0043d81c
mov edx, 0x170
mov eax, dword [ebx + 0x964]
call fcn.0043d844
mov edx, 0xd0
mov eax, dword [ebx + 0x964]
call fcn.0043d868
xor edx, edx
mov eax, dword [ebx + 0x96c]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x96c]
call fcn.0043d81c
mov edx, 0x170
mov eax, dword [ebx + 0x96c]
call fcn.0043d844
mov edx, 0xd0
mov eax, dword [ebx + 0x96c]
call fcn.0043d868
xor edx, edx
mov eax, dword [ebx + 0x974]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x974]
call fcn.0043d81c
mov edx, 0x170
mov eax, dword [ebx + 0x974]
call fcn.0043d844
mov edx, 0xd0
mov eax, dword [ebx + 0x974]
call fcn.0043d868
mov edx, 1
mov eax, dword [ebx + 0x97c]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x97c]
call fcn.0043d81c
mov edx, 0x16e
mov eax, dword [ebx + 0x97c]
call fcn.0043d844
mov edx, 0xc6
mov eax, dword [ebx + 0x97c]
call fcn.0043d868
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x928]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x928]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x928]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x928]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x928]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x928]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x928]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x928]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x928]
call fcn.0043d868
mov eax, dword [ebx + 0x928]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x928]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x928]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x928]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x928]
call fcn.0047b29c
mov edx, dword [ebx + 0x928]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x928]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x928]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x928]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x928]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x928]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x930]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x930]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x930]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x930]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x930]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x930]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x930]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x930]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x930]
call fcn.0043d868
mov eax, dword [ebx + 0x930]
mov dword [eax + 0x2d8], 0x11
mov eax, dword [ebx + 0x930]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x930]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x930]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x930]
call fcn.0047b29c
mov edx, dword [ebx + 0x930]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x930]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x930]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x930]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x930]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x930]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x958]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x958]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x958]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x958]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x958]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x958]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x958]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x958]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x958]
call fcn.0043d868
mov eax, dword [ebx + 0x958]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x958]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x958]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x958]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x958]
call fcn.0047b29c
mov edx, dword [ebx + 0x958]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x958]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x958]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x958]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x958]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x958]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x960]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x960]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x960]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x960]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x960]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x960]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x960]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x960]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x960]
call fcn.0043d868
mov eax, dword [ebx + 0x960]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x960]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x960]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x960]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x960]
call fcn.0047b29c
mov edx, dword [ebx + 0x960]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x960]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x960]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x960]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x960]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x960]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x968]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x968]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x968]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x968]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x968]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x968]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x968]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x968]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x968]
call fcn.0043d868
mov eax, dword [ebx + 0x968]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x968]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x968]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x968]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x968]
call fcn.0047b29c
mov edx, dword [ebx + 0x968]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x968]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x968]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x968]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x968]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x968]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x970]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x970]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x970]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x970]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x970]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x970]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x970]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x970]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x970]
call fcn.0043d868
mov eax, dword [ebx + 0x970]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x970]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x970]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x970]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x970]
call fcn.0047b29c
mov edx, dword [ebx + 0x970]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x970]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x970]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x970]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x970]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x970]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x978]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x978]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x978]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x978]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x978]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x978]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x978]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x978]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x978]
call fcn.0043d868
mov eax, dword [ebx + 0x978]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x978]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x978]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x978]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x978]
call fcn.0047b29c
mov edx, dword [ebx + 0x978]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x978]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x978]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x978]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x978]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x978]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x123
mov eax, dword [ebx + 0x980]
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x980]
call fcn.0047b208
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x124
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x980]
call fcn.0047b29c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x126
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x980]
call fcn.0047b330
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0x245
mov si, 0xffa5
call fcn.00404458
mov eax, dword [ebx + 0x980]
call fcn.0047b208
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x980]
call fcn.0047b29c
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf10
mov eax, dword [ebx + 0x980]
mov dword [eax + 0x224], ebx
mov dword [eax + 0x220], 0x4faf9c
mov edx, 0x180
sub edx, dword [eax + 0x48]
inc edx
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x980]
call fcn.0043d81c
mov edx, 0xd0
mov eax, dword [ebx + 0x980]
call fcn.0043d868
mov eax, dword [ebx + 0x980]
mov dword [eax + 0x2d8], 0xc
mov eax, dword [ebx + 0x980]
call fcn.0047b208
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x980]
call fcn.0047b208
mov edx, 1
call fcn.0043d81c
mov eax, dword [ebx + 0x980]
call fcn.0047b29c
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x980]
call fcn.0047b29c
mov edx, dword [ebx + 0x980]
mov edx, dword [edx + 0x4c]
sub edx, dword [eax + 0x4c]
dec edx
push edx
mov eax, dword [ebx + 0x980]
call fcn.0047b29c
pop edx
call fcn.0043d81c
mov eax, dword [ebx + 0x980]
call fcn.0047b330
mov edx, 1
call fcn.0043d7f8
mov eax, dword [ebx + 0x980]
call fcn.0047b208
mov esi, dword [eax + 0x44]
mov eax, dword [ebx + 0x980]
call fcn.0047b208
add esi, dword [eax + 0x4c]
push esi
mov eax, dword [ebx + 0x980]
call fcn.0047b330
pop edx
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x984]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x988]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x98c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x990]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x994]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x998]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x99c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9a0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9a4]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9a8]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9ac]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9b0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9b4]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9b8]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9bc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9c0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xad0]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xb00]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xb5c]
mov si, 0xffa5
call fcn.00404458
xor edx, edx
mov eax, dword [ebx + 0x984]
call fcn.0043d7f8
mov edx, 0x58
mov eax, dword [ebx + 0x988]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x98c]
call fcn.0043d7f8
mov edx, 0x108
mov eax, dword [ebx + 0x990]
call fcn.0043d7f8
xor edx, edx
mov eax, dword [ebx + 0x984]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x988]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x98c]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x990]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x994]
call fcn.0043d7f8
mov edx, 0x58
mov eax, dword [ebx + 0x998]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x99c]
call fcn.0043d7f8
mov edx, 0x108
mov eax, dword [ebx + 0x9a0]
call fcn.0043d7f8
mov edx, 0x1e
mov eax, dword [ebx + 0x994]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x998]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x99c]
call fcn.0043d81c
mov edx, 0x1e
mov eax, dword [ebx + 0x9a0]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x9a4]
call fcn.0043d7f8
mov edx, 0x58
mov eax, dword [ebx + 0x9a8]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x9ac]
call fcn.0043d7f8
mov edx, 0x108
mov eax, dword [ebx + 0x9b0]
call fcn.0043d7f8
mov edx, 0x3c
mov eax, dword [ebx + 0x9a4]
call fcn.0043d81c
mov edx, 0x3c
mov eax, dword [ebx + 0x9a8]
call fcn.0043d81c
mov edx, 0x3c
mov eax, dword [ebx + 0x9ac]
call fcn.0043d81c
mov edx, 0x3c
mov eax, dword [ebx + 0x9b0]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0x9b4]
call fcn.0043d7f8
mov edx, 0x58
mov eax, dword [ebx + 0x9b8]
call fcn.0043d7f8
mov edx, 0xb0
mov eax, dword [ebx + 0x9bc]
call fcn.0043d7f8
mov edx, 0x108
mov eax, dword [ebx + 0x9c0]
call fcn.0043d7f8
mov edx, 0x5a
mov eax, dword [ebx + 0x9b4]
call fcn.0043d81c
mov edx, 0x5a
mov eax, dword [ebx + 0x9b8]
call fcn.0043d81c
mov edx, 0x5a
mov eax, dword [ebx + 0x9bc]
call fcn.0043d81c
mov edx, 0x5a
mov eax, dword [ebx + 0x9c0]
call fcn.0043d81c
xor edx, edx
mov eax, dword [ebx + 0xad0]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0xad0]
call fcn.0043d81c
mov edx, 0x58
mov eax, dword [ebx + 0xb00]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0xb00]
call fcn.0043d81c
mov edx, 0xb0
mov eax, dword [ebx + 0xb5c]
call fcn.0043d7f8
mov edx, 0x78
mov eax, dword [ebx + 0xb5c]
call fcn.0043d81c
mov eax, dword [ebx + 0x924]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x984]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x988]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x98c]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x990]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov eax, dword [ebx + 0x924]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x994]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x998]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x99c]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9a0]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov eax, dword [ebx + 0x924]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x9a4]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9a8]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9ac]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9b0]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov eax, dword [ebx + 0x924]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x9b4]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9b8]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9bc]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9c0]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov eax, dword [ebx + 0x924]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xad0]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb00]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb5c]
mov edx, esi
mov eax, dword [ebx + 0x924]
call fcn.0047cf84
mov edx, 0xa
mov eax, dword [ebx + 0x9c4]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x9c4]
call fcn.0043d81c
mov edx, 0x93
mov eax, dword [ebx + 0x9c8]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x9c8]
call fcn.0043d81c
mov edx, 0xdc
mov eax, dword [ebx + 0x9cc]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x9cc]
call fcn.0043d81c
mov edx, 0x120
mov eax, dword [ebx + 0x9d0]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0x9d0]
call fcn.0043d81c
mov edx, 0xa
mov eax, dword [ebx + 0x9d8]
call fcn.0043d7f8
mov edx, 0xb8
mov eax, dword [ebx + 0x9d8]
call fcn.0043d81c
mov eax, dword [ebx + 0x9d8]
mov edx, dword [eax + 0x48]
mov eax, dword [ebx + 0xad8]
call fcn.0043d844
mov edx, 0x62
mov eax, dword [ebx + 0x9d4]
call fcn.0043d7f8
mov edx, 0xb8
mov eax, dword [ebx + 0x9d4]
call fcn.0043d81c
mov edx, 0x78
mov eax, dword [ebx + 0x9d4]
call fcn.0043d844
xor edx, edx
mov eax, dword [ebx + 0x9d4]
call fcn.0047981c
mov edx, 0xe6
mov eax, dword [ebx + 0x9e0]
call fcn.0043d7f8
mov edx, 0xba
mov eax, dword [ebx + 0x9e0]
call fcn.0043d81c
mov eax, dword [ebx + 0x9e0]
mov eax, dword [eax + 0x68]
mov dl, byte [0x4d4694]
call fcn.00425db8
mov edx, 0x122
mov eax, dword [ebx + 0x9dc]
call fcn.0043d7f8
mov edx, 0xba
mov eax, dword [ebx + 0x9dc]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9dc]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xb6c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xb74]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xbac]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xbb0]
mov si, 0xffa5
call fcn.00404458
mov edx, 8
mov eax, dword [ebx + 0xb6c]
call fcn.0043d7f8
mov edx, 8
mov eax, dword [ebx + 0xb6c]
call fcn.0043d81c
mov edx, 8
mov eax, dword [ebx + 0xb74]
call fcn.0043d7f8
mov edx, 0x26
mov eax, dword [ebx + 0xb74]
call fcn.0043d81c
mov edx, 8
mov eax, dword [ebx + 0xbac]
call fcn.0043d7f8
mov edx, 0x44
mov eax, dword [ebx + 0xbac]
call fcn.0043d81c
mov edx, 8
mov eax, dword [ebx + 0xbb0]
call fcn.0043d7f8
mov edx, 0x62
mov eax, dword [ebx + 0xbb0]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xb68]
call fcn.0043d7f8
mov edx, 7
mov eax, dword [ebx + 0xb68]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xb78]
call fcn.0043d7f8
mov edx, 0x25
mov eax, dword [ebx + 0xb78]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xbb4]
call fcn.0043d7f8
mov edx, 0x43
mov eax, dword [ebx + 0xbb4]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xbb8]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0xbb8]
call fcn.0043d81c
mov edx, 0x50
mov eax, dword [ebx + 0xb68]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xb78]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xbb4]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xbb8]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xb68]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xb78]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbb4]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbb8]
call fcn.0047981c
mov edx, 0x8c
mov eax, dword [ebx + 0xba0]
call fcn.0043d7f8
mov edx, 8
mov eax, dword [ebx + 0xba0]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xba8]
call fcn.0043d7f8
mov edx, 0x26
mov eax, dword [ebx + 0xba8]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xbbc]
call fcn.0043d7f8
mov edx, 0x44
mov eax, dword [ebx + 0xbbc]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xbc0]
call fcn.0043d7f8
mov edx, 0x62
mov eax, dword [ebx + 0xbc0]
call fcn.0043d81c
mov edx, 0x64
mov eax, dword [ebx + 0xba0]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0xba8]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0xbbc]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0xbc0]
call fcn.0043d844
mov edx, 0xfa
mov eax, dword [ebx + 0xb70]
call fcn.0043d7f8
mov edx, 7
mov eax, dword [ebx + 0xb70]
call fcn.0043d81c
mov edx, 0xfa
mov eax, dword [ebx + 0xb7c]
call fcn.0043d7f8
mov edx, 0x25
mov eax, dword [ebx + 0xb7c]
call fcn.0043d81c
mov edx, 0xfa
mov eax, dword [ebx + 0xbc4]
call fcn.0043d7f8
mov edx, 0x43
mov eax, dword [ebx + 0xbc4]
call fcn.0043d81c
mov edx, 0xfa
mov eax, dword [ebx + 0xbc8]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0xbc8]
call fcn.0043d81c
mov edx, 0x2e
mov eax, dword [ebx + 0xb70]
call fcn.0043d844
mov edx, 0x2e
mov eax, dword [ebx + 0xb7c]
call fcn.0043d844
mov edx, 0x2e
mov eax, dword [ebx + 0xbc4]
call fcn.0043d844
mov edx, 0x2e
mov eax, dword [ebx + 0xbc8]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xb70]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xb7c]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbc4]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbc8]
call fcn.0047981c
mov edx, 0x131
mov eax, dword [ebx + 0xb80]
call fcn.0043d7f8
mov edx, 9
mov eax, dword [ebx + 0xb80]
call fcn.0043d81c
mov edx, 0x131
mov eax, dword [ebx + 0xb84]
call fcn.0043d7f8
mov edx, 0x27
mov eax, dword [ebx + 0xb84]
call fcn.0043d81c
mov edx, 0x131
mov eax, dword [ebx + 0xbcc]
call fcn.0043d7f8
mov edx, 0x45
mov eax, dword [ebx + 0xbcc]
call fcn.0043d81c
mov edx, 0x131
mov eax, dword [ebx + 0xbd0]
call fcn.0043d7f8
mov edx, 0x63
mov eax, dword [ebx + 0xbd0]
call fcn.0043d81c
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb6c]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb68]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xba0]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb70]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb80]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb74]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb78]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xba8]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb7c]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb84]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xbac]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbb4]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbbc]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbc4]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbcc]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xbb0]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbb8]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbc0]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbc8]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbd0]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov edx, 8
mov eax, dword [ebx + 0x9e4]
call fcn.0043d7f8
mov edx, 0x82
mov eax, dword [ebx + 0x9e4]
call fcn.0043d81c
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x9e4]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9ec]
mov si, 0xffa5
call fcn.00404458
mov edx, 8
mov eax, dword [ebx + 0x9ec]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0x9ec]
call fcn.0043d81c
mov edx, 0x2c
mov eax, dword [ebx + 0x9f0]
call fcn.0043d7f8
mov edx, 0xa1
mov eax, dword [ebx + 0x9f0]
call fcn.0043d81c
mov edx, 0x3a
mov eax, dword [ebx + 0x9f4]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0x9f4]
call fcn.0043d81c
mov edx, 0x2e
mov eax, dword [ebx + 0x9f4]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0x9f4]
call fcn.0047981c
mov edx, 0x76
mov eax, dword [ebx + 0xa08]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0xa08]
call fcn.0043d81c
mov edx, 0x14
mov eax, dword [ebx + 0xa08]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xa08]
call fcn.0047981c
mov edx, 0x90
mov eax, dword [ebx + 0xa0c]
call fcn.0043d7f8
mov edx, 0xa2
mov eax, dword [ebx + 0xa0c]
call fcn.0043d81c
mov edx, 0xae
mov eax, dword [ebx + 0xa18]
call fcn.0043d7f8
mov edx, 0xa1
mov eax, dword [ebx + 0xa18]
call fcn.0043d81c
mov edx, 0xea
mov eax, dword [ebx + 0x9e8]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0x9e8]
call fcn.0043d81c
mov edx, 0x50
mov eax, dword [ebx + 0x9e8]
call fcn.0043d844
mov eax, dword [ebx + 0x9e8]
mov edx, dword [eax + 0x48]
mov eax, dword [ebx + 0x8e4]
call fcn.0043d844
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x9ec]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9f0]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9f4]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa08]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa0c]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa18]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9e8]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov edx, 8
mov eax, dword [ebx + 0xa04]
call fcn.0043d7f8
mov edx, 0xbe
mov eax, dword [ebx + 0xa04]
call fcn.0043d81c
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa04]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov edx, 8
mov eax, dword [ebx + 0x9f8]
call fcn.0043d7f8
mov edx, 0xdc
mov eax, dword [ebx + 0x9f8]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0x9f8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x2c
mov eax, dword [ebx + 0x9fc]
call fcn.0043d7f8
mov edx, 0xde
mov eax, dword [ebx + 0x9fc]
call fcn.0043d81c
mov edx, 0x3a
mov eax, dword [ebx + 0xa00]
call fcn.0043d7f8
mov edx, 0xdc
mov eax, dword [ebx + 0xa00]
call fcn.0043d81c
mov edx, 0x2e
mov eax, dword [ebx + 0xa00]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xa00]
call fcn.0047981c
mov edx, 0x76
mov eax, dword [ebx + 0xa10]
call fcn.0043d7f8
mov edx, 0xdc
mov eax, dword [ebx + 0xa10]
call fcn.0043d81c
mov edx, 0x14
mov eax, dword [ebx + 0xa10]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xa10]
call fcn.0047981c
mov edx, 0x90
mov eax, dword [ebx + 0xa14]
call fcn.0043d7f8
mov edx, 0xde
mov eax, dword [ebx + 0xa14]
call fcn.0043d81c
mov eax, dword [ebx + 0x954]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0x9f8]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0x9fc]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa00]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa10]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa14]
mov edx, esi
mov eax, dword [ebx + 0x954]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xc1c]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xc20]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xbd4]
mov si, 0xffa5
call fcn.00404458
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xbd8]
mov si, 0xffa5
call fcn.00404458
mov edx, 8
mov eax, dword [ebx + 0xc1c]
call fcn.0043d7f8
mov edx, 8
mov eax, dword [ebx + 0xc1c]
call fcn.0043d81c
mov edx, 8
mov eax, dword [ebx + 0xc20]
call fcn.0043d7f8
mov edx, 0x26
mov eax, dword [ebx + 0xc20]
call fcn.0043d81c
mov edx, 8
mov eax, dword [ebx + 0xbd4]
call fcn.0043d7f8
mov edx, 0x44
mov eax, dword [ebx + 0xbd4]
call fcn.0043d81c
mov edx, 8
mov eax, dword [ebx + 0xbd8]
call fcn.0043d7f8
mov edx, 0x62
mov eax, dword [ebx + 0xbd8]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xc14]
call fcn.0043d7f8
mov edx, 7
mov eax, dword [ebx + 0xc14]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xc18]
call fcn.0043d7f8
mov edx, 0x25
mov eax, dword [ebx + 0xc18]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xbdc]
call fcn.0043d7f8
mov edx, 0x43
mov eax, dword [ebx + 0xbdc]
call fcn.0043d81c
mov edx, 0x2d
mov eax, dword [ebx + 0xbe0]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0xbe0]
call fcn.0043d81c
mov edx, 0x50
mov eax, dword [ebx + 0xc14]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xc18]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xbdc]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xbe0]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xc14]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xc18]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbdc]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbe0]
call fcn.0047981c
mov edx, 0x8c
mov eax, dword [ebx + 0xc0c]
call fcn.0043d7f8
mov edx, 8
mov eax, dword [ebx + 0xc0c]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xc10]
call fcn.0043d7f8
mov edx, 0x26
mov eax, dword [ebx + 0xc10]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xbe4]
call fcn.0043d7f8
mov edx, 0x44
mov eax, dword [ebx + 0xbe4]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xbe8]
call fcn.0043d7f8
mov edx, 0x62
mov eax, dword [ebx + 0xbe8]
call fcn.0043d81c
mov edx, 0x64
mov eax, dword [ebx + 0xc0c]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0xc10]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0xbe4]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0xbe8]
call fcn.0043d844
mov edx, 0xfa
mov eax, dword [ebx + 0xc04]
call fcn.0043d7f8
mov edx, 7
mov eax, dword [ebx + 0xc04]
call fcn.0043d81c
mov edx, 0xfa
mov eax, dword [ebx + 0xc08]
call fcn.0043d7f8
mov edx, 0x25
mov eax, dword [ebx + 0xc08]
call fcn.0043d81c
mov edx, 0xfa
mov eax, dword [ebx + 0xbec]
call fcn.0043d7f8
mov edx, 0x43
mov eax, dword [ebx + 0xbec]
call fcn.0043d81c
mov edx, 0xfa
mov eax, dword [ebx + 0xbf0]
call fcn.0043d7f8
mov edx, 0x61
mov eax, dword [ebx + 0xbf0]
call fcn.0043d81c
mov edx, 0x2e
mov eax, dword [ebx + 0xc04]
call fcn.0043d844
mov edx, 0x2e
mov eax, dword [ebx + 0xc08]
call fcn.0043d844
mov edx, 0x2e
mov eax, dword [ebx + 0xbec]
call fcn.0043d844
mov edx, 0x2e
mov eax, dword [ebx + 0xbf0]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xc04]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xc08]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbec]
call fcn.0047981c
mov edx, 0x4d469c
mov eax, dword [ebx + 0xbf0]
call fcn.0047981c
mov edx, 0x131
mov eax, dword [ebx + 0xc00]
call fcn.0043d7f8
mov edx, 9
mov eax, dword [ebx + 0xc00]
call fcn.0043d81c
mov edx, 0x131
mov eax, dword [ebx + 0xbfc]
call fcn.0043d7f8
mov edx, 0x27
mov eax, dword [ebx + 0xbfc]
call fcn.0043d81c
mov edx, 0x131
mov eax, dword [ebx + 0xbf4]
call fcn.0043d7f8
mov edx, 0x45
mov eax, dword [ebx + 0xbf4]
call fcn.0043d81c
mov edx, 0x131
mov eax, dword [ebx + 0xbf8]
call fcn.0043d7f8
mov edx, 0x63
mov eax, dword [ebx + 0xbf8]
call fcn.0043d81c
mov eax, dword [ebx + 0x95c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xc1c]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc14]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc0c]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc04]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc00]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov eax, dword [ebx + 0x95c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xc20]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc18]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc10]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xc08]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbfc]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov eax, dword [ebx + 0x95c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xbd4]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbdc]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbe4]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbec]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbf4]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov eax, dword [ebx + 0x95c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xbd8]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbe0]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbe8]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbf0]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xbf8]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov edx, 8
mov eax, dword [ebx + 0xb9c]
call fcn.0043d7f8
mov edx, 0x82
mov eax, dword [ebx + 0xb9c]
call fcn.0043d81c
mov eax, dword [ebx + 0x95c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb9c]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov edx, 8
mov eax, dword [ebx + 0xb98]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0xb98]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xb98]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x2c
mov eax, dword [ebx + 0xb94]
call fcn.0043d7f8
mov edx, 0xa1
mov eax, dword [ebx + 0xb94]
call fcn.0043d81c
mov edx, 0x3a
mov eax, dword [ebx + 0xb90]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0xb90]
call fcn.0043d81c
mov edx, 0x2e
mov eax, dword [ebx + 0xb90]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xb90]
call fcn.0047981c
mov edx, 0x76
mov eax, dword [ebx + 0xb8c]
call fcn.0043d7f8
mov edx, 0xa0
mov eax, dword [ebx + 0xb8c]
call fcn.0043d81c
mov edx, 0x14
mov eax, dword [ebx + 0xb8c]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xb8c]
call fcn.0047981c
mov edx, 0x90
mov eax, dword [ebx + 0xb88]
call fcn.0043d7f8
mov edx, 0xa2
mov eax, dword [ebx + 0xb88]
call fcn.0043d81c
mov eax, dword [ebx + 0x95c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb98]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb94]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb90]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb8c]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb88]
mov edx, esi
mov eax, dword [ebx + 0x95c]
call fcn.0047cf84
mov edx, 0xa
mov eax, dword [ebx + 0xa1c]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0xa1c]
call fcn.0043d81c
mov edx, 0x82
mov eax, dword [ebx + 0xa24]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0xa24]
call fcn.0043d81c
mov edx, 0xfc
mov eax, dword [ebx + 0xa28]
call fcn.0043d7f8
mov edx, 0xa
mov eax, dword [ebx + 0xa28]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa1c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa24]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa28]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa2c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xa2c]
call fcn.0043d7f8
mov edx, 0x24
mov eax, dword [ebx + 0xa2c]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa64]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x8c
mov eax, dword [ebx + 0xa64]
call fcn.0043d7f8
mov edx, 0x24
mov eax, dword [ebx + 0xa64]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa54]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xfc
mov eax, dword [ebx + 0xa54]
call fcn.0043d7f8
mov edx, 0x24
mov eax, dword [ebx + 0xa54]
call fcn.0043d81c
mov edx, 0x146
mov eax, dword [ebx + 0xa58]
call fcn.0043d7f8
mov edx, 0x24
mov eax, dword [ebx + 0xa58]
call fcn.0043d81c
mov edx, 0x16
mov eax, dword [ebx + 0xa58]
call fcn.0043d844
mov edx, 0x4d469c
mov eax, dword [ebx + 0xa58]
call fcn.0047981c
mov edx, 0x160
mov eax, dword [ebx + 0xa68]
call fcn.0043d7f8
mov edx, 0x26
mov eax, dword [ebx + 0xa68]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa2c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa64]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa54]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa58]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa68]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa30]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xa30]
call fcn.0043d7f8
mov edx, 0x3c
mov eax, dword [ebx + 0xa30]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa48]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x8c
mov eax, dword [ebx + 0xa48]
call fcn.0043d7f8
mov edx, 0x3c
mov eax, dword [ebx + 0xa48]
call fcn.0043d81c
mov edx, 0xfc
mov eax, dword [ebx + 0xa5c]
call fcn.0043d7f8
mov edx, 0x3c
mov eax, dword [ebx + 0xa5c]
call fcn.0043d81c
mov edx, 0x64
mov eax, dword [ebx + 0xa5c]
call fcn.0043d844
mov edx, 0x64
mov eax, dword [ebx + 0x8e8]
call fcn.0043d844
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa30]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa48]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa5c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa34]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xa34]
call fcn.0043d7f8
mov edx, 0x54
mov eax, dword [ebx + 0xa34]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa4c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x8c
mov eax, dword [ebx + 0xa4c]
call fcn.0043d7f8
mov edx, 0x54
mov eax, dword [ebx + 0xa4c]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa34]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa4c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa38]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xa38]
call fcn.0043d7f8
mov edx, 0x6c
mov eax, dword [ebx + 0xa38]
call fcn.0043d81c
mov edx, 0x8c
mov eax, dword [ebx + 0xa60]
call fcn.0043d7f8
mov edx, 0x6c
mov eax, dword [ebx + 0xa60]
call fcn.0043d81c
mov edx, 0x50
mov eax, dword [ebx + 0xa60]
call fcn.0043d844
mov edx, 0xfc
mov eax, dword [ebx + 0xb58]
call fcn.0043d7f8
mov edx, 0x6c
mov eax, dword [ebx + 0xb58]
call fcn.0043d81c
mov edx, dword [0x544a58]
mov edx, dword [edx]
mov ecx, 0x297
mov eax, dword [ebx + 0xb58]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x50
mov eax, dword [ebx + 0xad4]
call fcn.0043d844
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa38]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa60]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb58]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa3c]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xa3c]
call fcn.0043d7f8
mov edx, 0x84
mov eax, dword [ebx + 0xa3c]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa50]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x8c
mov eax, dword [ebx + 0xa50]
call fcn.0043d7f8
mov edx, 0x84
mov eax, dword [ebx + 0xa50]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa3c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa50]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa40]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xa40]
call fcn.0043d7f8
mov edx, 0x9c
mov eax, dword [ebx + 0xa40]
call fcn.0043d81c
mov edx, 0x82
mov eax, dword [ebx + 0xa20]
call fcn.0043d7f8
mov edx, 0x9c
mov eax, dword [ebx + 0xa20]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa40]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa20]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xaf0]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xaf0]
call fcn.0043d7f8
mov edx, 0xb4
mov eax, dword [ebx + 0xaf0]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xa44]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x8c
mov eax, dword [ebx + 0xa44]
call fcn.0043d7f8
mov edx, 0xb4
mov eax, dword [ebx + 0xa44]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xaf0]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa44]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xaf8]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xaf8]
call fcn.0043d7f8
mov edx, 0xcc
mov eax, dword [ebx + 0xaf8]
call fcn.0043d81c
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xaf4]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x8c
mov eax, dword [ebx + 0xaf4]
call fcn.0043d7f8
mov edx, 0xcc
mov eax, dword [ebx + 0xaf4]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xaf8]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xaf4]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xafc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0x16
mov eax, dword [ebx + 0xafc]
call fcn.0043d7f8
mov edx, 0xe4
mov eax, dword [ebx + 0xafc]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xafc]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, 0xa
mov eax, dword [ebx + 0xb34]
call fcn.0043d7f8
mov edx, 0xfc
mov eax, dword [ebx + 0xb34]
call fcn.0043d81c
mov eax, dword [ebx + 0x964]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb34]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb30]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb38]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb3c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb40]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb44]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb48]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb4c]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb50]
mov edx, esi
mov eax, dword [ebx + 0x964]
call fcn.0047cf84
mov edx, 0x16
mov eax, dword [ebx + 0xb30]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb30]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb30]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb30]
call fcn.0043d868
mov edx, 0x40
mov eax, dword [ebx + 0xb38]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb38]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb38]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb38]
call fcn.0043d868
mov edx, 0x6a
mov eax, dword [ebx + 0xb3c]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb3c]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb3c]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb3c]
call fcn.0043d868
mov edx, 0x94
mov eax, dword [ebx + 0xb40]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb40]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb40]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb40]
call fcn.0043d868
mov edx, 0xbe
mov eax, dword [ebx + 0xb44]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb44]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb44]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb44]
call fcn.0043d868
mov edx, 0xe8
mov eax, dword [ebx + 0xb48]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb48]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb48]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb48]
call fcn.0043d868
mov edx, 0x112
mov eax, dword [ebx + 0xb4c]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb4c]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb4c]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb4c]
call fcn.0043d868
mov edx, 0x13c
mov eax, dword [ebx + 0xb50]
call fcn.0043d7f8
mov edx, 0x114
mov eax, dword [ebx + 0xb50]
call fcn.0043d81c
mov edx, 0x24
mov eax, dword [ebx + 0xb50]
call fcn.0043d844
mov edx, 0x22
mov eax, dword [ebx + 0xb50]
call fcn.0043d868
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xacc]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa
mov eax, dword [ebx + 0xacc]
call fcn.0043d7f8
mov edx, 6
mov eax, dword [ebx + 0xacc]
call fcn.0043d81c
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xacc]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov edx, 0xc
mov eax, dword [ebx + 0xac8]
call fcn.0043d7f8
mov edx, 0x1a
mov eax, dword [ebx + 0xac8]
call fcn.0043d81c
mov edx, 0x88
mov eax, dword [ebx + 0xa6c]
call fcn.0043d7f8
mov edx, 0x1a
mov eax, dword [ebx + 0xa6c]
call fcn.0043d81c
mov edx, 0x10a
mov eax, dword [ebx + 0xa70]
call fcn.0043d7f8
mov edx, 0x1a
mov eax, dword [ebx + 0xa70]
call fcn.0043d81c
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xac8]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa6c]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa70]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov edx, 0xc
mov eax, dword [ebx + 0xb28]
call fcn.0043d7f8
mov edx, 0x30
mov eax, dword [ebx + 0xb28]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa74]
call fcn.0043d7f8
mov edx, 0x46
mov eax, dword [ebx + 0xa74]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa78]
call fcn.0043d7f8
mov edx, 0x5c
mov eax, dword [ebx + 0xa78]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa7c]
call fcn.0043d7f8
mov edx, 0x72
mov eax, dword [ebx + 0xa7c]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa80]
call fcn.0043d7f8
mov edx, 0x88
mov eax, dword [ebx + 0xa80]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa84]
call fcn.0043d7f8
mov edx, 0x9e
mov eax, dword [ebx + 0xa84]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa88]
call fcn.0043d7f8
mov edx, 0xb4
mov eax, dword [ebx + 0xa88]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xa8c]
call fcn.0043d7f8
mov edx, 0xca
mov eax, dword [ebx + 0xa8c]
call fcn.0043d81c
mov edx, 0x66
mov eax, dword [ebx + 0xb24]
call fcn.0043d7f8
mov edx, 0x30
mov eax, dword [ebx + 0xb24]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xb24]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xa90]
call fcn.0043d7f8
mov edx, 0x46
mov eax, dword [ebx + 0xa90]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xa90]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xa94]
call fcn.0043d7f8
mov edx, 0x5c
mov eax, dword [ebx + 0xa94]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xa94]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xa98]
call fcn.0043d7f8
mov edx, 0x72
mov eax, dword [ebx + 0xa98]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xa98]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xa9c]
call fcn.0043d7f8
mov edx, 0x88
mov eax, dword [ebx + 0xa9c]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xa9c]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xaa0]
call fcn.0043d7f8
mov edx, 0x9e
mov eax, dword [ebx + 0xaa0]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xaa0]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xaa4]
call fcn.0043d7f8
mov edx, 0xb4
mov eax, dword [ebx + 0xaa4]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xaa4]
call fcn.0043d844
mov edx, 0x66
mov eax, dword [ebx + 0xaa8]
call fcn.0043d7f8
mov edx, 0xca
mov eax, dword [ebx + 0xaa8]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xaa8]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xb2c]
call fcn.0043d7f8
mov edx, 0x30
mov eax, dword [ebx + 0xb2c]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xb2c]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xac4]
call fcn.0043d7f8
mov edx, 0x46
mov eax, dword [ebx + 0xac4]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xac4]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xac0]
call fcn.0043d7f8
mov edx, 0x5c
mov eax, dword [ebx + 0xac0]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xac0]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xabc]
call fcn.0043d7f8
mov edx, 0x72
mov eax, dword [ebx + 0xabc]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xabc]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xab8]
call fcn.0043d7f8
mov edx, 0x88
mov eax, dword [ebx + 0xab8]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xab8]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xab4]
call fcn.0043d7f8
mov edx, 0x9e
mov eax, dword [ebx + 0xab4]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xab4]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xab0]
call fcn.0043d7f8
mov edx, 0xb4
mov eax, dword [ebx + 0xab0]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xab0]
call fcn.0043d844
mov edx, 0xee
mov eax, dword [ebx + 0xaac]
call fcn.0043d7f8
mov edx, 0xca
mov eax, dword [ebx + 0xaac]
call fcn.0043d81c
mov edx, 0x80
mov eax, dword [ebx + 0xaac]
call fcn.0043d844
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb28]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb24]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb2c]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa74]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa90]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xac4]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa78]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa94]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xac0]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa7c]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa98]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xabc]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa80]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xa9c]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xab8]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa84]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xaa0]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xab4]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa88]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xaa4]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xab0]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov eax, dword [ebx + 0x96c]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xa8c]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xaa8]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov ecx, dword [ebx + 0xaac]
mov edx, esi
mov eax, dword [ebx + 0x96c]
call fcn.0047cf84
mov edx, dword [0x544764]
mov edx, dword [edx]
mov ecx, 0xe4
mov eax, dword [ebx + 0xb04]
mov si, 0xffa5
call fcn.00404458
mov edx, 0xa
mov eax, dword [ebx + 0xb04]
call fcn.0043d7f8
mov edx, 6
mov eax, dword [ebx + 0xb04]
call fcn.0043d81c
mov edx, 0x78
mov eax, dword [ebx + 0xb18]
call fcn.0043d7f8
mov edx, 7
mov eax, dword [ebx + 0xb18]
call fcn.0043d81c
mov eax, dword [ebx + 0x974]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb04]
mov edx, esi
mov eax, dword [ebx + 0x974]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb18]
mov edx, esi
mov eax, dword [ebx + 0x974]
call fcn.0047cf84
mov eax, dword [ebx + 0x974]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb08]
mov edx, esi
mov eax, dword [ebx + 0x974]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb0c]
mov edx, esi
mov eax, dword [ebx + 0x974]
call fcn.0047cf84
mov eax, dword [ebx + 0x974]
call fcn.0047cf60
mov esi, eax
mov ecx, dword [ebx + 0xb10]
mov edx, esi
mov eax, dword [ebx + 0x974]
call fcn.0047cf84
mov ecx, dword [ebx + 0xb14]
mov edx, esi
mov eax, dword [ebx + 0x974]
call fcn.0047cf84
mov edx, 0xc
mov eax, dword [ebx + 0xb08]
call fcn.0043d7f8
mov edx, 0x26
mov eax, dword [ebx + 0xb08]
call fcn.0043d81c
mov edx, 0xc
mov eax, dword [ebx + 0xb10]
call fcn.0043d7f8
mov edx, 0x42
mov eax, dword [ebx + 0xb10]
call fcn.0043d81c
mov edx, 0x50
mov eax, dword [ebx + 0xb0c]
call fcn.0043d7f8
mov edx, 0x24
mov eax, dword [ebx + 0xb0c]
call fcn.0043d81c
mov edx, 0x64
mov eax, dword [ebx + 0xb0c]
call fcn.0043d844
mov edx, 0x50
mov eax, dword [ebx + 0xb14]
call fcn.0043d7f8
mov edx, 0x3e
mov eax, dword [ebx + 0xb14]
call fcn.0043d81c
mov edx, 0x64
mov eax, dword [ebx + 0xb14]
call fcn.0043d844
mov eax, 0x4d46a8
call fcn.0040c448
test al, al
je 0x4d4597
mov edx, 0x4d46a8
mov eax, dword [ebx + 0x97c]
call fcn.0047cff4
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0x97c]
call fcn.0047c9dc
dec eax
test eax, eax
jl 0x4d4597
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x97c]
call fcn.0047c9e8
mov esi, eax
lea ecx, [ebp - 0x10]
xor edx, edx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0040bbf8
mov eax, dword [ebp - 0x1c]
call fcn.00405350
mov edi, eax
mov eax, dword [ebp - 0x10]
call fcn.00405350
cmp edi, eax
je 0x4d4508
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4d458b
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], 0
mov edx, dword [ebp - 8]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edi, eax
mov eax, dword [edi + 0x208]
mov eax, dword [eax + 0xc]
mov dl, byte [0x4d46bc]
call fcn.00425db8
mov eax, dword [edi + 0x208]
mov eax, dword [eax + 0xc]
mov edx, 0xc0c0c0
call fcn.00425aec
mov eax, dword [edi + 0x208]
mov edx, dword [eax + 0xc]
mov eax, dword [edi + 0x68]
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, 0xc0c0c0
mov eax, edi
call fcn.00475d40
mov dword [edi + 0x2e4], 0xc0c0c0
mov dword [edi + 0x2e8], 0xc0c0c0
mov edx, dword [edi + 0x40]
add edx, 6
mov eax, edi
call fcn.0043d7f8
inc dword [ebp - 8]
dec dword [ebp - 0x18]
jne 0x4d448a
jmp 0x4d458b
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4d458b
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], 0
mov edx, dword [ebp - 8]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edi, eax
mov eax, dword [edi + 0x208]
mov eax, dword [eax + 0xc]
mov dl, byte [0x4d46c0]
call fcn.00425db8
mov eax, dword [edi + 0x208]
mov eax, dword [eax + 0xc]
mov edx, 0xffffff
call fcn.00425aec
mov eax, dword [edi + 0x208]
mov edx, dword [eax + 0xc]
mov eax, dword [edi + 0x68]
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, 0xffffff
mov eax, edi
call fcn.00475d40
mov dword [edi + 0x2e4], 0xffffff
mov dword [edi + 0x2e8], 0xffffff
inc dword [ebp - 8]
dec dword [ebp - 0x18]
jne 0x4d451f
inc dword [ebp - 4]
dec dword [ebp - 0x14]
jne 0x4d442e
mov eax, dword [ebx + 0x924]
call fcn.0047ca44
mov edx, eax
add edx, 0x78
mov eax, dword [ebx + 0x924]
call fcn.0047ca00
mov eax, dword [ebx + 0x954]
call fcn.0047ca44
mov edx, eax
add edx, 0x60
mov eax, dword [ebx + 0x954]
call fcn.0047ca00
mov eax, dword [ebx + 0x95c]
call fcn.0047ca44
mov edx, eax
add edx, 0x60
mov eax, dword [ebx + 0x95c]
call fcn.0047ca00
mov eax, dword [ebx + 0x964]
call fcn.0047ca44
mov edx, eax
add edx, 0x60
mov eax, dword [ebx + 0x964]
call fcn.0047ca00
mov eax, dword [ebx + 0x96c]
call fcn.0047ca44
mov edx, eax
add edx, 0x60
mov eax, dword [ebx + 0x96c]
call fcn.0047ca00
mov eax, dword [ebx + 0x974]
call fcn.0047ca44
mov edx, eax
add edx, 0x60
mov eax, dword [ebx + 0x974]
call fcn.0047ca00
mov eax, dword [ebx + 0x97c]
call fcn.0047ca44
mov edx, eax
add edx, 0x60
mov eax, dword [ebx + 0x97c]
call fcn.0047ca00
xor edx, edx
mov eax, dword [ebx + 0x900]
call fcn.0047c24c
mov byte [ebx + 0x1728], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d468d
lea eax, [ebp - 0x1c]
call fcn.00405080
lea eax, [ebp - 0x10]
call fcn.00405080
ret