Function at 0x499e20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x502d73
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebp
push esi
push edi
push fcn.004ae940
push 0x499da0
push 0x10
mov esi, ecx
push 0x10
push esi
mov dword [esp + 0x28], esi
call fcn.004ee664
xor edx, edx
mov dword [esp + 0x24], edx
lea eax, [esi + 0x100]
mov ecx, 0x44
mov byte [eax], 0
mov dword [eax + 4], edx
add eax, 8
dec ecx
jne 0x499e66
mov byte [esi + 0x320], 0
mov dword [esi + 0x324], edx
lea eax, [esi + 0x320]
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [esi + 0x358], 0
mov dword [esi + 0x35c], edx
lea eax, [esi + 0x358]
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
mov byte [eax + 8], 0
mov dword [eax + 0xc], edx
add eax, 8
add eax, 8
mov byte [eax], 0
mov dword [eax + 4], edx
add eax, 8
mov byte [eax], 0
mov dword [eax + 4], edx
add eax, 8
mov byte [eax], 0
mov dword [eax + 4], edx
add eax, 8
mov byte [eax], 0
mov dword [eax + 4], edx
add eax, 8
mov byte [eax], 0
mov dword [eax + 4], edx
mov edi, esi
mov ebp, 0x10
lea esp, [esp]
push 0x44
mov ecx, edi
call fcn.00499cd0
add edi, 0x10
dec ebp
jne 0x499f20
mov byte [esp + 0xc], 1
mov ecx, dword [esp + 0xc]
mov eax, str.SHIRT
mov dword [esi + 0x10c], eax
mov byte [esp + 0xc], 2
mov edx, dword [esp + 0xc]
mov eax, str.TUNIC
mov dword [esi + 0x114], eax
mov byte [esp + 0xc], 3
mov eax, str.CON_ARMOUR
mov dword [esi + 0x11c], eax
mov eax, str.CON_HELM
mov dword [esi + 0x124], eax
mov eax, str.CON_GLOVE
mov dword [esi + 0x12c], eax
mov dword [esi + 0x108], ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + 0xc], 4
mov dword [esi + 0x110], edx
mov edx, dword [esp + 0xc]
mov byte [esp + 0xc], 5
mov eax, str.CON_BOOTS
mov dword [esi + 0x134], eax
mov dword [esi + 0x118], ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + 0xc], 6
mov eax, str.DEX_ARMOUR
mov dword [esi + 0x13c], eax
mov dword [esi + 0x120], edx
mov edx, dword [esp + 0xc]
mov byte [esp + 0xc], 7
mov eax, str.DEX_HELM
mov dword [esi + 0x144], eax
mov dword [esi + 0x128], ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + 0xc], 8
mov eax, str.DEX_GLOVE
mov dword [esi + 0x14c], eax
mov dword [esi + 0x130], edx
mov edx, dword [esp + 0xc]
mov byte [esp + 0xc], 9
mov eax, str.DEX_BOOTS
mov dword [esi + 0x154], eax
mov dword [esi + 0x138], ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + 0xc], 0xa
mov dword [esi + 0x140], edx
mov edx, dword [esp + 0xc]
mov byte [esp + 0xc], 0xb
mov eax, str.ONEHANDED_SWORD
mov dword [esi + 0x15c], eax
mov dword [esi + 0x148], ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + 0xc], 0xc
mov eax, str.TWOHANDED_SWORD
mov dword [esi + 0x164], eax
mov dword [esi + 0x150], edx
mov edx, dword [esp + 0xc]
mov byte [esp + 0xc], 0xd
mov eax, str.ONEHANDED_AXE
mov dword [esi + 0x16c], eax
mov dword [esi + 0x158], ecx
mov ecx, dword [esp + 0xc]
mov byte [esp + 0xc], 0xe
mov eax, str.TWOHANDED_AXE
mov dword [esi + 0x160], edx
mov edx, dword [esp + 0xc]
mov dword [esi + 0x174], eax
mov byte [esp + 0xc], 0xf
mov eax, str.ONEHANDED_BLUNT
mov dword [esi + 0x168], ecx
mov ecx, dword [esp + 0xc]
mov dword [esi + 0x170], edx
mov dword [esi + 0x17c], eax
mov byte [esp + 0xc], 0x10
mov edx, dword [esp + 0xc]
mov eax, str.TWOHANDED_BLUNT
push ebx
mov dword [esi + 0x178], ecx
mov dword [esi + 0x180], edx
mov dword [esi + 0x184], eax
mov byte [esp + 0x10], 0x11
mov ecx, dword [esp + 0x10]
mov eax, 0x522d2c
mov dword [esi + 0x18c], eax
mov byte [esp + 0x10], 0x12
mov edx, dword [esp + 0x10]
mov eax, str.CROSSBOW
mov dword [esi + 0x194], eax
mov byte [esp + 0x10], 0x13
mov eax, str.STAFF
mov dword [esi + 0x19c], eax
mov eax, str.DAGGER
mov dword [esi + 0x1a4], eax
mov eax, str.SHIELD
mov dword [esi + 0x1ac], eax
mov dword [esi + 0x188], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x14
mov dword [esi + 0x190], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x15
mov eax, str.CON_BODY
mov dword [esi + 0x1b4], eax
mov dword [esi + 0x198], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x16
mov eax, str.CON_HEAD
mov dword [esi + 0x1bc], eax
mov dword [esi + 0x1a0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x17
mov eax, str.CON_PELVIS
mov dword [esi + 0x1c4], eax
mov dword [esi + 0x1a8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x18
mov eax, str.CON_PROTECT_A
mov dword [esi + 0x1cc], eax
mov dword [esi + 0x1b0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x19
mov eax, str.DEX_BODY
mov dword [esi + 0x1d4], eax
mov dword [esi + 0x1b8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x1a
mov dword [esi + 0x1c0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x1b
mov eax, str.DEX_HEAD
mov dword [esi + 0x1dc], eax
mov dword [esi + 0x1c8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x1c
mov eax, str.DEX_PELVIS
mov dword [esi + 0x1e4], eax
mov dword [esi + 0x1d0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x1d
mov eax, str.DEX_PROTECT_A
mov dword [esi + 0x1ec], eax
mov dword [esi + 0x1d8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x1e
mov eax, str.COM_BLUNT
mov dword [esi + 0x1e0], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0x1f4], eax
mov byte [esp + 0x10], 0x1f
mov eax, str.COM_SWORD
mov dword [esi + 0x1e8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x20
mov dword [esi + 0x1f0], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0x1fc], eax
mov eax, str.OPP_HAMMER
mov dword [esi + 0x1f8], ecx
mov dword [esi + 0x200], edx
mov dword [esi + 0x204], eax
mov byte [esp + 0x10], 0x21
mov ecx, dword [esp + 0x10]
mov eax, str.OPP_AXE
mov dword [esi + 0x20c], eax
mov byte [esp + 0x10], 0x22
mov edx, dword [esp + 0x10]
mov eax, str.OPP_SLUSHER
mov dword [esi + 0x214], eax
mov byte [esp + 0x10], 0x23
mov eax, str.OPP_TALON
mov dword [esi + 0x21c], eax
mov eax, str.OPP_SYTHE
mov dword [esi + 0x224], eax
mov eax, str.SKILL_A_GUARD
mov dword [esi + 0x22c], eax
mov dword [esi + 0x208], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x24
mov dword [esi + 0x210], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x25
mov eax, str.SKILL_A_ATTACK
mov dword [esi + 0x234], eax
mov dword [esi + 0x218], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x26
mov eax, str.SKILL_A_GUN
mov dword [esi + 0x23c], eax
mov dword [esi + 0x220], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x27
mov eax, str.SKILL_A_KNIFE
mov dword [esi + 0x244], eax
mov dword [esi + 0x228], ecx
mov ecx, dword [esp + 0x10]
mov eax, str.ARROW
mov dword [esi + 0x24c], eax
mov dword [esi + 0x230], edx
mov ebx, 0x28
mov byte [esp + 0x10], bl
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x29
mov eax, str.BOLT
mov dword [esi + 0x254], eax
mov dword [esi + 0x238], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x2a
mov dword [esi + 0x240], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x2b
mov eax, str.AMMO
mov dword [esi + 0x25c], eax
mov dword [esi + 0x248], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x2c
mov eax, str.POTION
mov dword [esi + 0x264], eax
mov dword [esi + 0x250], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x2d
mov eax, str.EXPBOOK
mov dword [esi + 0x26c], eax
mov dword [esi + 0x258], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x2e
mov eax, str.CASHBOOK
mov dword [esi + 0x260], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0x274], eax
mov byte [esp + 0x10], 0x2f
mov eax, str.EVENT_LOTTERY
mov dword [esi + 0x268], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x30
mov dword [esi + 0x270], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0x27c], eax
mov eax, str.PORTAL
mov dword [esi + 0x278], ecx
mov dword [esi + 0x280], edx
mov dword [esi + 0x284], eax
mov byte [esp + 0x10], 0x31
mov ecx, dword [esp + 0x10]
mov eax, str.FIRE_CRACKER
mov dword [esi + 0x28c], eax
mov byte [esp + 0x10], 0x32
mov edx, dword [esp + 0x10]
mov eax, str.SKILLBOOK
mov dword [esi + 0x294], eax
mov byte [esp + 0x10], 0x33
mov eax, str.FIXED_PORTAL
mov dword [esi + 0x29c], eax
mov eax, str.SKILL_ITEM
mov dword [esi + 0x2a4], eax
mov eax, 0x522b8c
mov dword [esi + 0x2ac], eax
mov dword [esi + 0x288], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x34
mov eax, 0x522b88
mov dword [esi + 0x2b4], eax
mov dword [esi + 0x290], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x35
mov eax, 0x522b84
mov dword [esi + 0x2bc], eax
mov dword [esi + 0x298], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x36
mov dword [esi + 0x2a0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x37
mov eax, str.EVENT_DROP
mov dword [esi + 0x2c4], eax
mov dword [esi + 0x2a8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x38
mov eax, str.CAMP_KIT
mov dword [esi + 0x2cc], eax
mov dword [esi + 0x2b0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x39
mov eax, str.SHORT_RANGE_ARMS_KIT
mov dword [esi + 0x2d4], eax
mov dword [esi + 0x2b8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x3a
mov eax, str.LONG_RANGE_ARMS_KIT
mov dword [esi + 0x2dc], eax
mov dword [esi + 0x2c0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x3b
mov eax, str.AIRSHIP_KIT
mov dword [esi + 0x2e4], eax
mov dword [esi + 0x2c8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x3c
mov dword [esi + 0x2d0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x3d
mov eax, str.WORLDWEAPON_K_KIT
mov dword [esi + 0x2ec], eax
mov dword [esi + 0x2d8], ecx
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x3e
mov eax, str.WORLDWEAPON_M_KIT
mov dword [esi + 0x2f4], eax
mov dword [esi + 0x2e0], edx
mov edx, dword [esp + 0x10]
mov byte [esp + 0x10], 0x3f
mov eax, str.MINERAL_KIT
mov dword [esi + 0x2e8], ecx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x2fc], eax
mov byte [esp + 0x10], 0x40
mov eax, str.QUEST_ITEM
mov dword [esi + 0x2f0], edx
mov edx, dword [esp + 0x10]
mov dword [esi + 0x304], eax
mov dword [esi + 0x2f8], ecx
mov dword [esi + 0x300], edx
mov byte [esp + 0x10], 0x41
mov eax, str.NECKLACE
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x30c], eax
mov eax, str.RING
mov byte [esp + 0x10], 0x42
mov edx, dword [esp + 0x10]
mov dword [esi + 0x314], eax
mov eax, str.RUNE
lea ebp, [esi + 4]
mov byte [esp + 0x10], 0x43
mov dword [esi + 0x31c], eax
mov eax, dword [ebp]
test eax, eax
mov dword [esi + 0x308], ecx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x310], edx
mov dword [esi + 0x318], ecx
mov dword [esp + 0x10], 1
jne 0x49a618
xor edx, edx
jmp 0x49a620
mov edx, dword [esi + 8]
sub edx, eax
sar edx, 2
test eax, eax
je 0x49a651
mov ecx, dword [esi + 0xc]
sub ecx, eax
sar ecx, 2
cmp edx, ecx
jae 0x49a651
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a663
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 2
jne 0x49a676
xor ecx, ecx
jmp 0x49a67e
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a6af
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a6af
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a6c1
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 3
jne 0x49a6d4
xor ecx, ecx
jmp 0x49a6dc
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a70d
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a70d
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a71f
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 4
jne 0x49a732
xor ecx, ecx
jmp 0x49a73a
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a76b
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a76b
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a77d
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 5
jne 0x49a790
xor ecx, ecx
jmp 0x49a798
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a7c9
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a7c9
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a7db
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 6
jne 0x49a7ee
xor ecx, ecx
jmp 0x49a7f6
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a827
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a827
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a839
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 7
jne 0x49a84c
xor ecx, ecx
jmp 0x49a854
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a885
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a885
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a897
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 8
jne 0x49a8aa
xor ecx, ecx
jmp 0x49a8b2
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a8e3
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a8e3
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a8f5
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 9
jne 0x49a908
xor ecx, ecx
jmp 0x49a910
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a941
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a941
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a953
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0xa
jne 0x49a966
xor ecx, ecx
jmp 0x49a96e
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a99f
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a99f
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49a9b1
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0xb
jne 0x49a9c4
xor ecx, ecx
jmp 0x49a9cc
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49a9fd
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49a9fd
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49aa0f
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0xc
jne 0x49aa22
xor ecx, ecx
jmp 0x49aa2a
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49aa5b
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49aa5b
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49aa6d
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0xd
jne 0x49aa80
xor ecx, ecx
jmp 0x49aa88
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49aab9
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49aab9
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49aacb
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0xe
jne 0x49aade
xor ecx, ecx
jmp 0x49aae6
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ab17
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ab17
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49ab29
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0xf
jne 0x49ab3c
xor ecx, ecx
jmp 0x49ab44
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ab75
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ab75
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49ab87
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x10
jne 0x49ab9a
xor ecx, ecx
jmp 0x49aba2
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49abd3
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49abd3
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49abe5
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x11
jne 0x49abf8
xor ecx, ecx
jmp 0x49ac00
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ac31
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ac31
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49ac43
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x12
jne 0x49ac56
xor ecx, ecx
jmp 0x49ac5e
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ac8f
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ac8f
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49aca1
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x13
jne 0x49acb4
xor ecx, ecx
jmp 0x49acbc
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49aced
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49aced
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49acff
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x14
jne 0x49ad12
xor ecx, ecx
jmp 0x49ad1a
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ad4b
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ad4b
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49ad5d
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x15
jne 0x49ad70
xor ecx, ecx
jmp 0x49ad78
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ada9
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ada9
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49adbb
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x16
jne 0x49adce
xor ecx, ecx
jmp 0x49add6
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ae07
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ae07
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49ae19
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x17
jne 0x49ae2c
xor ecx, ecx
jmp 0x49ae34
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49ae65
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49ae65
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49ae77
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x18
jne 0x49ae8a
xor ecx, ecx
jmp 0x49ae92
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49aec3
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49aec3
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49aed5
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x19
jne 0x49aee8
xor ecx, ecx
jmp 0x49aef0
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49af21
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49af21
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49af33
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
mov edx, dword [ebp]
test edx, edx
mov dword [esp + 0x10], 0x1a
jne 0x49af46
xor ecx, ecx
jmp 0x49af4e
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
test edx, edx
je 0x49af7f
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x49af7f
mov edx, dword [esp + 0x18]
mov edi, dword [esi + 8]
push edx
push esi
lea eax, [esp + 0x18]
push eax
push 1
push edi
call fcn.004ac4e0
add esp, 0x14
add edi, 4
mov dword [esi + 8], edi
jmp 0x49af91
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.004999c0
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esp + 0x14], 0x1b
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, esi
mov dword [esp + 0x14], 0x1c
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
mov dword [esp + 0x14], 0x1d
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esp + 0x14], 0x1e
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, esi
mov dword [esp + 0x14], 0x1f
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
mov dword [esp + 0x14], 0x20
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esp + 0x14], 0x21
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, esi
mov dword [esp + 0x14], 0x22
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
mov dword [esp + 0x14], 0x23
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esp + 0x14], 0x24
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, esi
mov dword [esp + 0x14], 0x25
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
mov dword [esp + 0x14], 0x26
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esp + 0x14], 0x27
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, esi
mov dword [esp + 0x14], ebx
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
mov dword [esp + 0x14], 0x29
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, esi
mov dword [esp + 0x14], 0x2a
call fcn.00499db0
mov dword [esp + 0x10], 0x2b
lea eax, [esp + 0x10]
lea edi, [esi + 0x10]
push eax
mov ecx, edi
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x2c
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x2d
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x2e
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x2f
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x30
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x31
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x32
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x33
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x34
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x39
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x3a
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x3b
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x3c
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x3d
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x3e
call fcn.00499db0
mov dword [esp + 0x10], 0x3f
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x40
call fcn.00499db0
lea eax, [esp + 0x10]
lea edi, [esi + 0x20]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0xb
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0xc
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0xd
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0xe
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0xf
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x10
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x11
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x12
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x13
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x14
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x1e
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x1f
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x20
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x21
call fcn.00499db0
mov dword [esp + 0x10], 0x22
lea edx, [esp + 0x10]
push edx
mov ecx, edi
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x23
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x24
call fcn.00499db0
lea edx, [esp + 0x10]
lea edi, [esi + 0x30]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x25
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x26
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x27
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], ebx
call fcn.00499db0
lea eax, [esp + 0x10]
lea edi, [esi + 0x40]
push eax
mov ecx, edi
mov dword [esp + 0x14], 4
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 8
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x17
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x1b
call fcn.00499db0
lea ecx, [esp + 0x10]
lea edi, [esi + 0x50]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 3
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 7
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x16
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x1a
call fcn.00499db0
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x14
lea edi, [esi + 0x60]
push edx
mov ecx, edi
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x23
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], ebx
call fcn.00499db0
lea edx, [esp + 0x10]
lea edi, [esi + 0x70]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0xb
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0xd
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0xf
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x1e
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x1f
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x20
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x21
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x22
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x26
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x27
call fcn.00499db0
lea eax, [esp + 0x10]
lea edi, [esi + 0x80]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x11
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x12
call fcn.00499db0
lea edx, [esp + 0x10]
lea edi, [esi + 0x90]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0xc
call fcn.00499db0
mov dword [esp + 0x10], 0xe
lea eax, [esp + 0x10]
push eax
mov ecx, edi
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x10
call fcn.00499db0
lea edx, [esp + 0x10]
lea edi, [esi + 0xa0]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x13
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x24
call fcn.00499db0
lea ecx, [esp + 0x10]
lea edi, [esi + 0xb0]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x15
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x25
call fcn.00499db0
lea eax, [esp + 0x10]
lea edi, [esi + 0xc0]
push eax
mov ecx, edi
mov dword [esp + 0x14], 3
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 7
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x16
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x1a
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x15
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x25
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0xb
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0xc
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0xd
call fcn.00499db0
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0xe
push eax
mov ecx, edi
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0xf
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x10
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x11
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x12
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x13
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x14
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x1e
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x1f
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x20
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x21
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x22
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x23
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x24
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x26
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x27
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], ebx
call fcn.00499db0
lea edx, [esp + 0x10]
lea edi, [esi + 0xd0]
push edx
mov ecx, edi
mov dword [esp + 0x14], 4
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 8
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x17
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x1b
call fcn.00499db0
lea eax, [esp + 0x10]
lea edi, [esi + 0xe0]
push eax
mov ecx, edi
mov dword [esp + 0x14], 5
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 6
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 9
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0xa
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x18
call fcn.00499db0
lea edx, [esp + 0x10]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x19
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x1c
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x1d
call fcn.00499db0
lea edx, [esp + 0x10]
lea edi, [esi + 0xf0]
push edx
mov ecx, edi
mov dword [esp + 0x14], 0x41
call fcn.00499db0
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov dword [esp + 0x14], 0x42
call fcn.00499db0
lea ecx, [esp + 0x10]
push ecx
mov ecx, edi
mov dword [esp + 0x14], 0x43
call fcn.00499db0
mov edi, 0x10
pop ebx
mov eax, dword [ebp + 4]
mov ecx, dword [ebp]
mov edx, eax
sub edx, ecx
sar edx, 2
push edx
push eax
push ecx
call fcn.00499c00
add esp, 0xc
add ebp, 0x10
dec edi
jne 0x49b9a4
mov byte [esp + 0x14], 0
mov ecx, dword [esp + 0x14]
mov eax, str.NONE
mov dword [esi + 0x324], eax
mov byte [esp + 0x14], 1
mov edx, dword [esp + 0x14]
mov eax, 0x522acc
mov dword [esi + 0x32c], eax
mov byte [esp + 0x14], 2
mov eax, 0x522ac8
mov dword [esi + 0x334], eax
mov eax, 0x522ac4
mov dword [esi + 0x33c], eax
mov dword [esi + 0x320], ecx
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x14], 3
mov eax, 0x522ac0
mov dword [esi + 0x344], eax
mov dword [esi + 0x328], edx
mov edx, dword [esp + 0x14]
mov byte [esp + 0x14], 4
mov dword [esi + 0x330], ecx
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x14], 5
mov eax, 0x522abc
mov dword [esi + 0x34c], eax
mov eax, str.LEVEL
mov dword [esi + 0x354], eax
mov dword [esi + 0x338], edx
mov edx, dword [esp + 0x14]
mov byte [esp + 0x14], 6
mov dword [esi + 0x340], ecx
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x14], 0
mov eax, 0x522ab0
mov dword [esi + 0x35c], eax
mov dword [esi + 0x348], edx
mov edx, dword [esp + 0x14]
mov byte [esp + 0x14], 1
mov eax, 0x522aac
mov dword [esi + 0x364], eax
mov dword [esi + 0x350], ecx
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x14], 2
mov eax, 0x522aa8
mov dword [esi + 0x36c], eax
mov dword [esi + 0x358], edx
mov edx, dword [esp + 0x14]
mov dword [esi + 0x360], ecx
mov byte [esp + 0x14], 3
mov ecx, dword [esp + 0x14]
mov eax, str.BDMS
mov dword [esi + 0x374], eax
mov byte [esp + 0x14], 4
mov eax, 0x509c48
mov dword [esi + 0x37c], eax
mov dword [esi + 0x368], edx
mov edx, dword [esp + 0x14]
mov dword [esi + 0x370], ecx
mov byte [esp + 0x14], 5
mov ecx, dword [esp + 0x14]
mov eax, 0x50a7d0
mov dword [esi + 0x384], eax
mov dword [esi + 0x378], edx
mov byte [esp + 0x14], 6
mov edx, dword [esp + 0x14]
mov eax, 0x50a45c
mov dword [esi + 0x38c], eax
mov dword [esi + 0x380], ecx
mov eax, 0x522aa4
mov byte [esp + 0x14], 7
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x394], eax
mov dword [esi + 0x390], ecx
mov ecx, dword [esp + 0x1c]
pop edi
mov dword [esi + 0x388], edx
mov eax, esi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x1c
ret