Function at 0x4a7e50
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4bc
mov eax, dword [0x13413f8]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x415], 0
mov byte [ebp - 0x41d], 0
xor eax, eax
mov word [ebp - 0x468], ax
mov byte [ebp - 0x466], al
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x474], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov dword [ebp - 0x410], edx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0xc], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x10], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x14], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], 0
mov eax, dword [ebp - 0x410]
push eax
call fcn.0049aac0
add esp, 4
test eax, eax
jne 0x4a7f4f
xor eax, eax
jmp 0x4a9a6f
cmp dword [ebp + 0xc], 1
jne 0x4a7f5f
mov eax, 1
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.0049eb00
add esp, 4
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], edx
mov edx, dword [ebp - 0x4bc]
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x440], edx
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 0x504c5445
ja 0x4a8010
cmp dword [ebp - 0x42c], 0x504c5445
je 0x4a8721
cmp dword [ebp - 0x42c], 0x49454e44
ja 0x4a7ffb
cmp dword [ebp - 0x42c], 0x49454e44
je 0x4a8dac
cmp dword [ebp - 0x42c], 0x43674249
je 0x4a8066
cmp dword [ebp - 0x42c], 0x49444154
je 0x4a8cda
jmp 0x4a999f
cmp dword [ebp - 0x42c], 0x49484452
je 0x4a808b
jmp 0x4a999f
cmp dword [ebp - 0x42c], 0x66644154
ja 0x4a8051
cmp dword [ebp - 0x42c], 0x66644154
je 0x4a98f6
cmp dword [ebp - 0x42c], 0x6163544c
je 0x4a93ee
cmp dword [ebp - 0x42c], 0x6663544c
je 0x4a9484
jmp 0x4a999f
cmp dword [ebp - 0x42c], 0x74524e53
je 0x4a8a30
jmp 0x4a999f
mov dword [ebp - 0x474], 1
mov edx, dword [ebp - 0x440]
push edx
mov eax, dword [ebp - 0x410]
push eax
call fcn.004af030
add esp, 8
jmp 0x4a9a5b
cmp dword [ebp - 0x460], 0
jne 0x4a80a6
push 0x562254
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov dword [ebp - 0x460], 0
cmp dword [ebp - 0x440], 0xd
je 0x4a80cb
push 0x562264
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.0049eaa0
add esp, 4
mov edx, dword [ebp - 0x410]
mov dword [edx], eax
mov eax, dword [ebp - 0x410]
push eax
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x410]
cmp dword [edx + 4], 0x1000000
jbe 0x4a811b
push 0x5620e8
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x410]
cmp dword [eax], 0x1000000
jbe 0x4a813b
push 0x5620e8
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x410]
mov edx, dword [ebp - 0x410]
mov eax, dword [ecx + 0xac]
cmp eax, dword [edx + 0xb0]
jae 0x4a8192
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
mov al, byte [edx]
mov byte [ebp - 0x450], al
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
add edx, 1
mov eax, dword [ebp - 0x410]
mov dword [eax + 0xac], edx
mov cl, byte [ebp - 0x450]
mov byte [ebp - 0x41e], cl
jmp 0x4a81f1
mov edx, dword [ebp - 0x410]
cmp dword [edx + 0x20], 0
je 0x4a81ea
mov eax, dword [ebp - 0x410]
push eax
call fcn.004ae6b0
add esp, 4
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
mov al, byte [edx]
mov byte [ebp - 0x451], al
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
add edx, 1
mov eax, dword [ebp - 0x410]
mov dword [eax + 0xac], edx
mov cl, byte [ebp - 0x451]
mov byte [ebp - 0x41e], cl
jmp 0x4a81f1
mov byte [ebp - 0x41e], 0
movzx edx, byte [ebp - 0x41e]
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], edx
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1c], 1
je 0x4a823d
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1c], 2
je 0x4a823d
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1c], 4
je 0x4a823d
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1c], 8
je 0x4a823d
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1c], 0x10
je 0x4a823d
push 0x562274
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x410]
mov edx, dword [eax + 0xac]
cmp edx, dword [ecx + 0xb0]
jae 0x4a8294
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
mov dl, byte [ecx]
mov byte [ebp - 0x452], dl
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 0xac], ecx
mov al, byte [ebp - 0x452]
mov byte [ebp - 0x41f], al
jmp 0x4a82f3
mov ecx, dword [ebp - 0x410]
cmp dword [ecx + 0x20], 0
je 0x4a82ec
mov edx, dword [ebp - 0x410]
push edx
call fcn.004ae6b0
add esp, 4
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
mov dl, byte [ecx]
mov byte [ebp - 0x453], dl
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 0xac], ecx
mov al, byte [ebp - 0x453]
mov byte [ebp - 0x41f], al
jmp 0x4a82f3
mov byte [ebp - 0x41f], 0
movzx ecx, byte [ebp - 0x41f]
mov dword [ebp - 0x434], ecx
cmp dword [ebp - 0x434], 6
jle 0x4a831b
push 0x562288
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp - 0x434], 3
jne 0x4a833f
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1c], 0x10
jne 0x4a833f
push 0x562288
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp - 0x434], 3
jne 0x4a8351
mov byte [ebp - 0x415], 3
jmp 0x4a836e
mov eax, dword [ebp - 0x434]
and eax, 1
je 0x4a836e
push 0x562288
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x410]
mov edx, dword [ebp - 0x410]
mov eax, dword [ecx + 0xac]
cmp eax, dword [edx + 0xb0]
jae 0x4a83c5
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
mov al, byte [edx]
mov byte [ebp - 0x455], al
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
add edx, 1
mov eax, dword [ebp - 0x410]
mov dword [eax + 0xac], edx
mov cl, byte [ebp - 0x455]
mov byte [ebp - 0x420], cl
jmp 0x4a8424
mov edx, dword [ebp - 0x410]
cmp dword [edx + 0x20], 0
je 0x4a841d
mov eax, dword [ebp - 0x410]
push eax
call fcn.004ae6b0
add esp, 4
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
mov al, byte [edx]
mov byte [ebp - 0x456], al
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xac]
add edx, 1
mov eax, dword [ebp - 0x410]
mov dword [eax + 0xac], edx
mov cl, byte [ebp - 0x456]
mov byte [ebp - 0x420], cl
jmp 0x4a8424
mov byte [ebp - 0x420], 0
movzx edx, byte [ebp - 0x420]
mov dword [ebp - 0x4ac], edx
cmp dword [ebp - 0x4ac], 0
je 0x4a844c
push 0x562294
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x410]
mov edx, dword [eax + 0xac]
cmp edx, dword [ecx + 0xb0]
jae 0x4a84a3
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
mov dl, byte [ecx]
mov byte [ebp - 0x457], dl
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 0xac], ecx
mov al, byte [ebp - 0x457]
mov byte [ebp - 0x421], al
jmp 0x4a8502
mov ecx, dword [ebp - 0x410]
cmp dword [ecx + 0x20], 0
je 0x4a84fb
mov edx, dword [ebp - 0x410]
push edx
call fcn.004ae6b0
add esp, 4
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
mov dl, byte [ecx]
mov byte [ebp - 0x461], dl
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 0xac], ecx
mov al, byte [ebp - 0x461]
mov byte [ebp - 0x421], al
jmp 0x4a8502
mov byte [ebp - 0x421], 0
movzx ecx, byte [ebp - 0x421]
mov dword [ebp - 0x4b0], ecx
cmp dword [ebp - 0x4b0], 0
je 0x4a852a
push 0x5622a4
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [edx + 0xac]
cmp ecx, dword [eax + 0xb0]
jae 0x4a8581
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x462], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x462]
mov byte [ebp - 0x422], dl
jmp 0x4a85e0
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0x20], 0
je 0x4a85d9
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae6b0
add esp, 4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x463], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x463]
mov byte [ebp - 0x422], dl
jmp 0x4a85e0
mov byte [ebp - 0x422], 0
movzx eax, byte [ebp - 0x422]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 1
jle 0x4a8608
push 0x5622b8
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x410]
cmp dword [ecx], 0
je 0x4a861f
mov edx, dword [ebp - 0x410]
cmp dword [edx + 4], 0
jne 0x4a8631
push 0x5622d0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
movzx eax, byte [ebp - 0x415]
test eax, eax
jne 0x4a86e0
mov ecx, dword [ebp - 0x434]
and ecx, 2
je 0x4a8657
mov dword [ebp - 0x484], 3
jmp 0x4a8661
mov dword [ebp - 0x484], 1
mov edx, dword [ebp - 0x434]
and edx, 4
je 0x4a8678
mov dword [ebp - 0x488], 1
jmp 0x4a8682
mov dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x484]
add eax, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 8], eax
mov ecx, dword [ebp - 0x410]
mov eax, 0x40000000
xor edx, edx
div dword [ecx]
mov ecx, dword [ebp - 0x410]
xor edx, edx
div dword [ecx + 8]
mov edx, dword [ebp - 0x410]
cmp eax, dword [edx + 4]
jae 0x4a86ce
push 0x5620e8
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp + 0xc], 2
jne 0x4a86de
mov eax, 1
jmp 0x4a9a6f
jmp 0x4a871c
mov eax, dword [ebp - 0x410]
mov dword [eax + 8], 1
mov ecx, dword [ebp - 0x410]
mov eax, 0x40000000
xor edx, edx
div dword [ecx]
shr eax, 2
mov edx, dword [ebp - 0x410]
cmp eax, dword [edx + 4]
jae 0x4a871c
push 0x5620e8
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
jmp 0x4a9a5b
cmp dword [ebp - 0x460], 0
je 0x4a873c
push 0x5622e0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp - 0x440], 0x300
jbe 0x4a875a
push 0x5622f0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x440]
xor edx, edx
mov ecx, 3
div ecx
mov dword [ebp - 0x45c], eax
imul edx, dword [ebp - 0x45c], 3
cmp edx, dword [ebp - 0x440]
je 0x4a8790
push 0x5622f0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov dword [ebp - 0x414], 0
jmp 0x4a87ab
mov eax, dword [ebp - 0x414]
add eax, 1
mov dword [ebp - 0x414], eax
mov ecx, dword [ebp - 0x414]
cmp ecx, dword [ebp - 0x45c]
jae 0x4a8a2b
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [edx + 0xac]
cmp ecx, dword [eax + 0xb0]
jae 0x4a8814
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x445], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x445]
mov byte [ebp - 0x423], dl
jmp 0x4a8873
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0x20], 0
je 0x4a886c
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae6b0
add esp, 4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x44d], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x44d]
mov byte [ebp - 0x423], dl
jmp 0x4a8873
mov byte [ebp - 0x423], 0
mov eax, dword [ebp - 0x414]
mov cl, byte [ebp - 0x423]
mov byte [ebp + eax*4 - 0x40c], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [edx + 0xac]
cmp ecx, dword [eax + 0xb0]
jae 0x4a88dd
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x446], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x446]
mov byte [ebp - 0x424], dl
jmp 0x4a893c
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0x20], 0
je 0x4a8935
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae6b0
add esp, 4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x447], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x447]
mov byte [ebp - 0x424], dl
jmp 0x4a893c
mov byte [ebp - 0x424], 0
mov eax, dword [ebp - 0x414]
mov cl, byte [ebp - 0x424]
mov byte [ebp + eax*4 - 0x40b], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [edx + 0xac]
cmp ecx, dword [eax + 0xb0]
jae 0x4a89a6
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x448], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x448]
mov byte [ebp - 0x425], dl
jmp 0x4a8a05
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0x20], 0
je 0x4a89fe
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae6b0
add esp, 4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x449], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x449]
mov byte [ebp - 0x425], dl
jmp 0x4a8a05
mov byte [ebp - 0x425], 0
mov eax, dword [ebp - 0x414]
mov cl, byte [ebp - 0x425]
mov byte [ebp + eax*4 - 0x40a], cl
mov edx, dword [ebp - 0x414]
mov byte [ebp + edx*4 - 0x409], 0xff
jmp 0x4a879c
jmp 0x4a9a5b
cmp dword [ebp - 0x460], 0
je 0x4a8a4b
push 0x5622e0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0
je 0x4a8a66
push 0x562300
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
movzx ecx, byte [ebp - 0x415]
test ecx, ecx
je 0x4a8bd4
cmp dword [ebp + 0xc], 2
jne 0x4a8a92
mov edx, dword [ebp - 0x410]
mov dword [edx + 8], 4
mov eax, 1
jmp 0x4a9a6f
cmp dword [ebp - 0x45c], 0
jne 0x4a8aad
push 0x562310
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x440]
cmp eax, dword [ebp - 0x45c]
jbe 0x4a8acd
push 0x562324
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov byte [ebp - 0x415], 4
mov dword [ebp - 0x414], 0
jmp 0x4a8aef
mov ecx, dword [ebp - 0x414]
add ecx, 1
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x414]
cmp edx, dword [ebp - 0x440]
jae 0x4a8bcf
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x410]
mov edx, dword [eax + 0xac]
cmp edx, dword [ecx + 0xb0]
jae 0x4a8b58
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
mov dl, byte [ecx]
mov byte [ebp - 0x44a], dl
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 0xac], ecx
mov al, byte [ebp - 0x44a]
mov byte [ebp - 0x426], al
jmp 0x4a8bb7
mov ecx, dword [ebp - 0x410]
cmp dword [ecx + 0x20], 0
je 0x4a8bb0
mov edx, dword [ebp - 0x410]
push edx
call fcn.004ae6b0
add esp, 4
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
mov dl, byte [ecx]
mov byte [ebp - 0x44b], dl
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xac]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 0xac], ecx
mov al, byte [ebp - 0x44b]
mov byte [ebp - 0x426], al
jmp 0x4a8bb7
mov byte [ebp - 0x426], 0
mov ecx, dword [ebp - 0x414]
mov dl, byte [ebp - 0x426]
mov byte [ebp + ecx*4 - 0x409], dl
jmp 0x4a8ae0
jmp 0x4a8cd5
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 8]
and ecx, 1
jne 0x4a8bf4
push 0x562334
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 8]
shl eax, 1
cmp dword [ebp - 0x440], eax
je 0x4a8c19
push 0x562324
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov byte [ebp - 0x41d], 1
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1c], 0x10
jne 0x4a8c73
mov dword [ebp - 0x430], 0
jmp 0x4a8c44
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x430]
cmp ecx, dword [eax + 8]
jge 0x4a8c71
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049e840
add esp, 4
mov ecx, dword [ebp - 0x430]
mov word [ebp + ecx*2 - 0xc], ax
jmp 0x4a8c35
jmp 0x4a8cd5
mov dword [ebp - 0x430], 0
jmp 0x4a8c8e
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x430]
cmp ecx, dword [eax + 8]
jge 0x4a8cd5
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049e840
add esp, 4
and eax, 0xff
movzx eax, al
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
movzx ecx, byte [edx + 0x561e30]
imul eax, ecx
mov edx, dword [ebp - 0x430]
mov byte [ebp + edx - 0x468], al
jmp 0x4a8c7f
jmp 0x4a9a5b
cmp dword [ebp - 0x460], 0
je 0x4a8cf5
push 0x5622e0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
movzx eax, byte [ebp - 0x415]
test eax, eax
je 0x4a8d1b
cmp dword [ebp - 0x45c], 0
jne 0x4a8d1b
push 0x562344
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp - 0x444], 0
je 0x4a8d36
push 0x56234c
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp - 0x438], 1
jbe 0x4a8d51
push 0x562370
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp + 0xc], 2
jne 0x4a8d71
movzx ecx, byte [ebp - 0x415]
mov edx, dword [ebp - 0x410]
mov dword [edx + 8], ecx
mov eax, 1
jmp 0x4a9a6f
mov eax, dword [ebp - 0x440]
push eax
lea ecx, [ebp - 0x480]
push ecx
lea edx, [ebp - 0x490]
push edx
mov eax, dword [ebp + 8]
add eax, 4
push eax
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae440
add esp, 0x14
test eax, eax
jne 0x4a8da7
xor eax, eax
jmp 0x4a9a6f
jmp 0x4a9a5b
cmp dword [ebp - 0x460], 0
je 0x4a8dc7
push 0x5622e0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp + 0xc], 0
je 0x4a8dd7
mov eax, 1
jmp 0x4a9a6f
mov edx, dword [ebp + 8]
cmp dword [edx + 4], 0
jne 0x4a8df2
push 0x562390
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
cmp ecx, dword [ebp - 0x438]
je 0x4a8e12
push 0x562398
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp + 8]
mov ecx, dword [edx]
imul ecx, dword [eax + 0x1c]
add ecx, 7
shr ecx, 3
mov dword [ebp - 0x478], ecx
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x478]
imul eax, dword [edx + 4]
mov ecx, dword [ebp - 0x410]
imul eax, dword [ecx + 8]
mov edx, dword [ebp - 0x410]
add eax, dword [edx + 4]
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x474], 0
jne 0x4a8e6b
mov dword [ebp - 0x48c], 1
jmp 0x4a8e75
mov dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x47c]
push ecx
mov edx, dword [ebp - 0x47c]
push edx
mov eax, dword [ebp - 0x490]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
call fcn.004b0d30
add esp, 0x14
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x4b4], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 8], 0
jne 0x4a8ec2
xor eax, eax
jmp 0x4a9a6f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
call fcn.004fa841
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], 0
mov dword [ebp - 0x414], 0
jmp 0x4a8ef6
mov edx, dword [ebp - 0x414]
add edx, 1
mov dword [ebp - 0x414], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x414]
cmp ecx, dword [eax + 0x14]
jae 0x4a905d
imul edx, dword [ebp - 0x414], 0x2c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
cmp dword [ecx + edx + 0x20], 0
je 0x4a9058
imul edx, dword [ebp - 0x414], 0x2c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp + 8]
mov ecx, dword [ecx + edx + 8]
imul ecx, dword [eax + 0x1c]
add ecx, 7
shr ecx, 3
mov dword [ebp - 0x478], ecx
imul edx, dword [ebp - 0x414], 0x2c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0x478]
imul eax, dword [ecx + edx + 0xc]
mov ecx, dword [ebp - 0x410]
imul eax, dword [ecx + 8]
imul edx, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
add eax, dword [ecx + edx + 0xc]
imul edx, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov dword [ecx + edx + 4], eax
cmp dword [ebp - 0x474], 0
jne 0x4a8f9d
mov dword [ebp - 0x494], 1
jmp 0x4a8fa7
mov dword [ebp - 0x494], 0
mov edx, dword [ebp - 0x494]
push edx
imul eax, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
lea eax, [edx + eax + 4]
push eax
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + ecx + 4]
push ecx
imul edx, dword [ebp - 0x414], 0x2c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx]
push edx
imul eax, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 0x20]
push eax
call fcn.004b0d30
add esp, 0x14
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
mov dword [edx + ecx + 0x24], eax
imul eax, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
cmp dword [edx + eax + 0x24], 0
jne 0x4a9029
xor eax, eax
jmp 0x4a9a6f
imul eax, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 0x20]
push eax
call fcn.004fa841
add esp, 4
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov dword [eax + ecx + 0x20], 0
jmp 0x4a8ee7
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 8]
add edx, 1
cmp dword [ebp + 0x10], edx
jne 0x4a907f
cmp dword [ebp + 0x10], 3
je 0x4a907f
movzx eax, byte [ebp - 0x415]
test eax, eax
je 0x4a908a
movzx ecx, byte [ebp - 0x41d]
test ecx, ecx
je 0x4a90a1
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 8]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xc], eax
jmp 0x4a90b3
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 8]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [eax]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x4a4], ecx
mov edx, dword [ebp + 8]
add edx, 8
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp + 8]
add eax, 0xc
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x47c]
mov dword [ebp - 0x498], ecx
mov edx, dword [ebp - 0x470]
push edx
mov eax, dword [ebp - 0x434]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
push edx
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x4a8]
push edx
mov eax, dword [ebp - 0x410]
push eax
call fcn.0049c620
add esp, 0x1c
test eax, eax
jne 0x4a913b
xor eax, eax
jmp 0x4a9a6f
mov dword [ebp - 0x414], 0
jmp 0x4a9156
mov ecx, dword [ebp - 0x414]
add ecx, 1
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x414]
cmp eax, dword [edx + 0x14]
jae 0x4a9241
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
cmp dword [eax + ecx + 0x24], 0
je 0x4a923c
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + ecx + 8]
mov dword [ebp - 0x4a8], ecx
imul edx, dword [ebp - 0x414], 0x2c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 0xc]
mov dword [ebp - 0x4a4], edx
imul eax, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
lea eax, [edx + eax + 0x24]
mov dword [ebp - 0x4a0], eax
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
lea ecx, [eax + ecx + 0x28]
mov dword [ebp - 0x49c], ecx
imul edx, dword [ebp - 0x414], 0x2c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
mov edx, dword [ecx + edx + 4]
mov dword [ebp - 0x498], edx
mov eax, dword [ebp - 0x470]
push eax
mov ecx, dword [ebp - 0x434]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x1c]
push eax
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x4a8]
push eax
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.0049c620
add esp, 0x1c
test eax, eax
jne 0x4a923c
xor eax, eax
jmp 0x4a9a6f
jmp 0x4a9147
movzx edx, byte [ebp - 0x41d]
test edx, edx
je 0x4a92a4
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1c], 0x10
jne 0x4a927c
mov ecx, dword [ebp - 0x410]
mov edx, dword [ecx + 0xc]
push edx
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049b170
add esp, 0xc
test eax, eax
jne 0x4a927a
xor eax, eax
jmp 0x4a9a6f
jmp 0x4a92a4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xc]
push eax
lea ecx, [ebp - 0x468]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0049b230
add esp, 0xc
test eax, eax
jne 0x4a92a4
xor eax, eax
jmp 0x4a9a6f
cmp dword [ebp - 0x474], 0
je 0x4a92ce
cmp dword [0x1343438], 0
je 0x4a92ce
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0xc], 2
jle 0x4a92ce
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049d9a0
add esp, 4
movzx edx, byte [ebp - 0x415]
test edx, edx
je 0x4a933c
movzx eax, byte [ebp - 0x415]
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 8], eax
movzx edx, byte [ebp - 0x415]
mov eax, dword [ebp - 0x410]
mov dword [eax + 0xc], edx
cmp dword [ebp + 0x10], 3
jl 0x4a930b
mov ecx, dword [ebp - 0x410]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0xc], edx
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp - 0x45c]
push edx
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0049e440
add esp, 0x10
test eax, eax
jne 0x4a933a
xor eax, eax
jmp 0x4a9a6f
jmp 0x4a935c
movzx edx, byte [ebp - 0x41d]
test edx, edx
je 0x4a935c
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax + 8]
add ecx, 1
mov edx, dword [ebp - 0x410]
mov dword [edx + 8], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], 0
jne 0x4a938a
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x4b4]
mov dword [ecx + 8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
call fcn.004fa841
add esp, 4
mov edx, dword [ebp + 8]
mov dword [edx + 8], 0
mov dword [ebp - 0x414], 0
jmp 0x4a93a5
mov eax, dword [ebp - 0x414]
add eax, 1
mov dword [ebp - 0x414], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x414]
cmp edx, dword [ecx + 0x14]
jae 0x4a93e4
imul eax, dword [ebp - 0x414], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
mov eax, dword [edx + eax + 0x24]
push eax
call fcn.004fa841
add esp, 4
imul ecx, dword [ebp - 0x414], 0x2c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov dword [eax + ecx + 0x24], 0
jmp 0x4a9396
mov eax, 1
jmp 0x4a9a6f
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0
je 0x4a9409
push 0x5623ac
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x14], 0
jne 0x4a9439
push 0x5623bc
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x410]
push eax
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], eax
mov edx, dword [ebp + 8]
imul eax, dword [edx + 0x14], 0x2c
push eax
call fcn.004a6c50
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
jne 0x4a947f
push 0x561f90
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
jmp 0x4a9a5b
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 0
jne 0x4a949f
push 0x5623d0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x438]
cmp edx, dword [ecx + 0x14]
jb 0x4a94bf
push 0x5623e4
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov dword [ebp - 0x480], 0
imul eax, dword [ebp - 0x438], 0x2c
mov ecx, dword [ebp + 8]
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x41c], eax
mov edx, dword [ebp - 0x41c]
mov dword [edx], 0
mov eax, dword [ebp - 0x41c]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 0x41c]
mov dword [ecx + 0x20], 0
mov edx, dword [ebp - 0x41c]
mov dword [edx + 0x28], 0
mov eax, dword [ebp - 0x410]
push eax
call fcn.0049eaa0
add esp, 4
mov dword [ebp - 0x444], eax
mov ecx, dword [ebp - 0x46c]
cmp ecx, dword [ebp - 0x444]
je 0x4a9544
push 0x5623f4
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x444]
add edx, 1
mov dword [ebp - 0x46c], edx
mov eax, dword [ebp - 0x410]
push eax
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp - 0x41c]
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp - 0x41c]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp - 0x41c]
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049eaa0
add esp, 4
mov ecx, dword [ebp - 0x41c]
mov dword [ecx + 0x14], eax
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049e840
add esp, 4
mov ecx, dword [ebp - 0x41c]
mov word [ecx + 0x18], ax
mov edx, dword [ebp - 0x410]
push edx
call fcn.0049e840
add esp, 4
mov ecx, dword [ebp - 0x41c]
mov word [ecx + 0x1a], ax
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [edx + 0xac]
cmp ecx, dword [eax + 0xb0]
jae 0x4a963c
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x44c], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x44c]
mov byte [ebp - 0x427], dl
jmp 0x4a969b
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0x20], 0
je 0x4a9694
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae6b0
add esp, 4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x454], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x454]
mov byte [ebp - 0x427], dl
jmp 0x4a969b
mov byte [ebp - 0x427], 0
mov eax, dword [ebp - 0x41c]
mov cl, byte [ebp - 0x427]
mov byte [eax + 0x1c], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x410]
mov ecx, dword [edx + 0xac]
cmp ecx, dword [eax + 0xb0]
jae 0x4a9701
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x44e], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x44e]
mov byte [ebp - 0x428], dl
jmp 0x4a9760
mov eax, dword [ebp - 0x410]
cmp dword [eax + 0x20], 0
je 0x4a9759
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.004ae6b0
add esp, 4
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
mov cl, byte [eax]
mov byte [ebp - 0x44f], cl
mov edx, dword [ebp - 0x410]
mov eax, dword [edx + 0xac]
add eax, 1
mov ecx, dword [ebp - 0x410]
mov dword [ecx + 0xac], eax
mov dl, byte [ebp - 0x44f]
mov byte [ebp - 0x428], dl
jmp 0x4a9760
mov byte [ebp - 0x428], 0
mov eax, dword [ebp - 0x41c]
mov cl, byte [ebp - 0x428]
mov byte [eax + 0x1d], cl
cmp dword [ebp - 0x438], 0
jne 0x4a9793
cmp dword [ebp - 0x444], 0
je 0x4a9793
push 0x56240c
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 8], 0
jne 0x4a97b1
push 0x562434
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x41c]
cmp dword [eax + 0xc], 0
jne 0x4a97cf
push 0x562448
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x41c]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x41c]
add edx, dword [eax + 8]
mov ecx, dword [ebp - 0x410]
cmp edx, dword [ecx]
jbe 0x4a97fd
push 0x56245c
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x41c]
mov eax, dword [edx + 0x14]
mov ecx, dword [ebp - 0x41c]
add eax, dword [ecx + 0xc]
mov edx, dword [ebp - 0x410]
cmp eax, dword [edx + 4]
jbe 0x4a982c
push 0x56245c
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0
jne 0x4a98c0
mov ecx, dword [ebp - 0x41c]
cmp dword [ecx + 0x10], 0
je 0x4a9857
push 0x562478
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 0x14], 0
je 0x4a9875
push 0x5624a4
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x410]
mov edx, dword [eax + 8]
cmp edx, dword [ecx]
je 0x4a989a
push 0x5624d0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x410]
mov edx, dword [eax + 0xc]
cmp edx, dword [ecx + 4]
je 0x4a98c0
push 0x5624f8
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
cmp dword [ebp - 0x438], 0
jne 0x4a98e2
mov eax, dword [ebp - 0x41c]
movzx ecx, byte [eax + 0x1c]
cmp ecx, 2
jne 0x4a98e2
mov edx, dword [ebp - 0x41c]
mov byte [edx + 0x1c], 1
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
jmp 0x4a9a5b
cmp dword [ebp - 0x438], 0
je 0x4a9908
cmp dword [ebp - 0x41c], 0
jne 0x4a991a
push 0x562524
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.0049eaa0
add esp, 4
mov dword [ebp - 0x444], eax
mov edx, dword [ebp - 0x46c]
cmp edx, dword [ebp - 0x444]
je 0x4a994f
push 0x5623f4
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x444]
add eax, 1
mov dword [ebp - 0x46c], eax
mov ecx, dword [ebp - 0x440]
sub ecx, 4
push ecx
lea edx, [ebp - 0x480]
push edx
mov eax, dword [ebp - 0x41c]
push eax
mov ecx, dword [ebp - 0x41c]
add ecx, 0x20
push ecx
mov edx, dword [ebp - 0x410]
push edx
call fcn.004ae440
add esp, 0x14
test eax, eax
jne 0x4a999a
xor eax, eax
jmp 0x4a9a6f
jmp 0x4a9a5b
cmp dword [ebp - 0x460], 0
je 0x4a99ba
push 0x5622e0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov eax, dword [ebp - 0x43c]
and eax, 0x20000000
jne 0x4a9a45
mov ecx, dword [ebp - 0x43c]
shr ecx, 0x18
and ecx, 0xff
mov edx, 1
imul eax, edx, 0
mov byte [eax + 0x13414c0], cl
mov ecx, dword [ebp - 0x43c]
shr ecx, 0x10
and ecx, 0xff
mov edx, 1
shl edx, 0
mov byte [edx + 0x13414c0], cl
mov eax, dword [ebp - 0x43c]
shr eax, 8
and eax, 0xff
mov ecx, 1
shl ecx, 1
mov byte [ecx + 0x13414c0], al
mov edx, dword [ebp - 0x43c]
and edx, 0xff
mov eax, 1
imul ecx, eax, 3
mov byte [ecx + 0x13414c0], dl
push 0x13414c0
call fcn.0049e420
add esp, 4
jmp 0x4a9a6f
mov edx, dword [ebp - 0x440]
push edx
mov eax, dword [ebp - 0x410]
push eax
call fcn.004af030
add esp, 8
mov ecx, dword [ebp - 0x410]
push ecx
call fcn.0049eaa0
add esp, 4
jmp 0x4a7f5f
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00472312
mov esp, ebp
pop ebp
ret