Function at 0x4cafa0
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x2b1b98
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xd48
push esi
push edi
push 0x25
call dword [0x2bd080]
call fcn.005481d0
mov dword [ebp - 0x24], eax
mov ecx, edx
shrd eax, ecx, 8
mov ecx, dword [ebp - 0x24]
movzx esi, al
mov eax, ecx
shrd eax, edx, 0x10
movzx eax, al
add esi, eax
movzx eax, cl
mov ecx, 0x2e6da4
add esi, eax
call fcn.00487c90
push eax
call fcn.004b2eb7
add esp, 4
xor ecx, ecx
add esi, eax
call fcn.0055dad0
sub eax, 0xffffff80
add eax, esi
push eax
call fcn.004ab19c
add esp, 4
push 0x100
push 0
push 0x2e90c0
call fcn.004a75b0
add esp, 0xc
mov ecx, 0x2e6da4
call fcn.00474880
push eax
mov ecx, 0x2e6da4
call fcn.00487c90
push eax
push 0x2e90c0
call fcn.004a6e70
add esp, 0xc
mov ecx, 0x2e92dc
call fcn.00474880
push eax
mov ecx, 0x2e92dc
call fcn.00487c90
push eax
push 0x2e9124
call fcn.004a6e70
add esp, 0xc
mov ecx, 0x2e6da4
call fcn.00487c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cb091
sub eax, edx
mov ecx, 0x2e6da4
push eax
call fcn.00487c90
push eax
lea ecx, [ebp - 0x230]
call fcn.00474930
mov dword [ebp - 4], 0
mov ecx, 0x2e6da4
push eax
call fcn.00487ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00474890
mov ecx, 0x2e93dc
call fcn.00487c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cb0e2
sub eax, edx
mov ecx, 0x2e93dc
push eax
call fcn.00487c90
push eax
lea ecx, [ebp - 0xa98]
call fcn.00474930
mov dword [ebp - 4], 1
mov ecx, 0x2e93dc
push eax
call fcn.00487ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.00474890
mov ecx, 0x2e9550
call fcn.00487c90
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4cb133
sub eax, edx
mov ecx, 0x2e9550
push eax
call fcn.00487c90
push eax
lea ecx, [ebp - 0xa80]
call fcn.00474930
mov dword [ebp - 4], 2
mov ecx, 0x2e9550
push eax
call fcn.00487ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa80]
call fcn.00474890
push 0x8000
call dword [0x2bd200]
push eax
call dword [0x2bd204]
push 0x1bdcc0
call dword [0x2bd140]
call fcn.004cf700
test al, al
jne 0x4cb1a7
mov eax, 1
jmp 0x4cf6e2
mov esi, dword [0x2bd108]
push 0x80000041
call esi
test eax, eax
jne 0x4cb1bf
push 0x80000001
call esi
xor ecx, ecx
call fcn.0055dad0
push eax
call fcn.004ab19c
mov dword [ebp - 0x18], 0xeedfd0d1
add esp, 4
mov dword [ebp - 0x14], 0x9524d4ea
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x18], 0x7dbb928a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x604], ecx
lea ecx, [ebp - 0x610]
mov dword [ebp - 0x608], eax
call fcn.00484ed0
push eax
call dword [0x2bd0b0]
mov esi, eax
test esi, esi
je 0x4cb325
mov dword [ebp - 0x18], 0xbefe91d6
mov dword [ebp - 0x14], 0x90049faf
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7a0], ecx
mov dword [ebp - 0x79c], edx
mov dword [ebp - 0x18], 0x9d8f794
mov dword [ebp - 0x14], 0x25e902cd
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x794], ecx
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x18], 0xb0390ce3
mov dword [ebp - 0x14], 0xb289a37a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x18], 0xf63d2b87
mov dword [ebp - 0x14], 0xec85123b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x18], 0x804e7e9f
mov dword [ebp - 0x14], 0x7eadd2b7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x77c], ecx
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x774], ecx
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 0x778], eax
call fcn.00484ad0
push eax
push esi
call dword [0x2bd0e0]
test eax, eax
je 0x4cb325
push 0
push 0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push eax
push 7
push 0
push 0
push 0x20
push 0
push 1
push 0
call dword [0x2e81c0]
lea ecx, [ebp - 0x8b0]
call fcn.0047a600
mov dword [ebp - 4], 3
sub esp, 0x18
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 4
mov byte [ebp - 4], 3
mov edx, 0x1e8c54
lea ecx, [ebp - 0xa0]
call fcn.00558f30
add esp, 0x18
mov byte [ebp - 4], 5
mov ecx, 0x2e9538
call fcn.00474880
mov ecx, dword [ebp - 0xa0]
xor edi, edi
mov dword [ebp - 0x2c], eax
mov edx, dword [ecx + 0x10]
sub edx, eax
je 0x4cb576
nop word [eax + eax]
call fcn.00487c90
mov ecx, 0x2e9538
mov esi, dword [eax + edi]
mov eax, dword [eax + edi + 4]
mov dword [ebp - 0x24], eax
call fcn.00487c90
cmp esi, dword [eax]
jne 0x4cb3e9
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax + 4]
jne 0x4cb3e9
lea ecx, [ebp - 0xa0]
call fcn.0048cb40
mov ecx, eax
call fcn.00487c90
mov ecx, 0x2e9538
mov esi, dword [eax + edi + 8]
mov eax, dword [eax + edi + 0xc]
mov dword [ebp - 0x24], eax
call fcn.00487c90
cmp esi, dword [eax + 8]
jne 0x4cb3e9
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [eax + 0xc]
je 0x4cb3ff
mov ecx, dword [ebp - 0xa0]
inc edi
mov eax, dword [ecx + 0x10]
sub eax, dword [ebp - 0x2c]
cmp edi, eax
jb 0x4cb390
jmp 0x4cb576
mov dword [ebp - 0x18], 0xb1e982c2
mov dword [ebp - 0x14], 0xd82794b2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x614], ecx
lea ecx, [ebp - 0x620]
mov dword [ebp - 0x618], eax
call fcn.00484ed0
mov dword [ebp - 0x18], 0xacf28bc1
mov esi, eax
mov dword [ebp - 0x14], 0x96328afb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x7e0], ecx
mov dword [ebp - 0x7dc], edx
mov dword [ebp - 0x18], 0x10dae081
mov dword [ebp - 0x14], 0x34ab2fde
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7d8], ecx
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x18], 0xb03949c6
mov dword [ebp - 0x14], 0xeebcb36b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x18], 0x8e1602c8
mov dword [ebp - 0x14], 0xa9b43405
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x18], 0x894c729b
mov dword [ebp - 0x14], 0x98dabdb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7bc], ecx
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x18], 0xf5ad54eb
mov dword [ebp - 0x14], 0x6b32148e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7b4], ecx
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x18], 0x4742374e
mov dword [ebp - 0x14], 0x74428611
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x18], 0x227dac2c
mov dword [ebp - 0x14], 0x53bfeed8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7a4], ecx
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 0x7a8], eax
call fcn.00484310
push 0x14
push esi
push eax
push 0
call dword [0x2bd33c]
cmp eax, 7
jne 0x4cb570
lea esi, [eax + 6]
jmp 0x4cf6a4
mov ecx, dword [ebp - 0xa0]
push 0
call fcn.0048a6d0
mov edi, dword [0x2e5b2c]
mov esi, dword [0x2e5b28]
push 0
push 3
push edi
push esi
call fcn.004ca260
add eax, dword [0x2e5b30]
mov dword [ebp - 0x24], eax
mov eax, edx
adc eax, dword [0x2e5b34]
mov edx, dword [ebp - 0x24]
mov ecx, edx
sub ecx, esi
mov dword [ebp - 0x40], eax
sbb eax, edi
or ecx, eax
mov eax, dword [ebp - 0x40]
je 0x4cb5ca
sub esi, edx
mov dword [0x2e5b28], esi
sbb edi, eax
mov dword [0x2e5b2c], edi
jmp 0x4cb5d0
add edx, 1
adc eax, 0
mov dword [ebp - 0x44], eax
mov ecx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], edx
test edi, edi
jl 0x4cb5e9
jg 0x4cb602
cmp esi, 0x176
ja 0x4cb602
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x40], eax
test edi, edi
jg 0x4cb619
jl 0x4cb5f9
test esi, esi
jae 0x4cb619
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], eax
xorps xmm0, xmm0
movlpd qword [0x2e5b28], xmm0
mov esi, dword [0x2e5b28]
mov edi, dword [0x2e5b2c]
push 0
push 3
push edi
push esi
call fcn.004ca260
mov dword [ebp - 0x24], eax
mov eax, edx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x48]
mov ecx, edx
mov dword [0x2e5b30], edx
adc eax, dword [ebp - 0x40]
sub ecx, esi
mov dword [ebp - 0x44], eax
mov dword [0x2e5b34], eax
sbb eax, edi
or ecx, eax
je 0x4cb65d
sub esi, edx
mov dword [0x2e5b28], esi
sbb edi, dword [ebp - 0x44]
mov dword [0x2e5b2c], edi
jmp 0x4cb671
mov eax, dword [ebp - 0x44]
add edx, 1
mov dword [0x2e5b30], edx
adc eax, 0
mov dword [0x2e5b34], eax
test edi, edi
jg 0x4cb689
jl 0x4cb689
cmp esi, 0x176
ja 0x4cb689
test edi, edi
jg 0x4cb694
jl 0x4cb689
test esi, esi
jae 0x4cb694
xorps xmm0, xmm0
movlpd qword [0x2e5b28], xmm0
push 0xa952
call dword [0x2bd1ec]
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x624], ecx
push ecx
lea ecx, [ebp - 0x630]
mov dword [ebp - 0x628], eax
call fcn.00484ed0
add esp, 4
mov ecx, 0x2e92f4
push eax
call fcn.00487bf0
test eax, eax
jne 0x4cb840
call fcn.00547e80
test al, al
je 0x4cb797
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4cb793
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cb793
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cb789
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cb768
cmp esi, 0xe80fd3a
je 0x4cb823
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cb750
mov eax, dword [eax]
jmp 0x4cb720
call fcn.00547c80
test al, al
jne 0x4cb840
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4cb81f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cb81f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cb815
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cb7f8
cmp esi, 0xe80fd3a
je 0x4cb823
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cb7e0
mov eax, dword [eax]
jmp 0x4cb7b0
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2a4], ecx
push ecx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x2a8], eax
call fcn.00484ed0
add esp, 4
mov ecx, 0x2e6d8c
push eax
call fcn.00487bf0
test eax, eax
jne 0x4cb978
call fcn.00547b90
mov byte [ebp - 0x59], al
call fcn.00547570
mov byte [ebp - 0x39], al
call fcn.00547270
cmp byte [ebp - 0x59], 0
jne 0x4cb8d6
cmp byte [ebp - 0x39], 0
jne 0x4cb8d6
test al, al
jne 0x4cb8d6
call fcn.00547cc0
test al, al
je 0x4cb978
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4cb957
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cb957
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cb94d
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cb930
cmp esi, 0xe80fd3a
je 0x4cb95b
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cb912
mov eax, dword [eax]
jmp 0x4cb8e2
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2b4], ecx
push ecx
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2b8], eax
call fcn.00484ed0
add esp, 4
mov ecx, 0x2e94d0
push eax
call fcn.00487bf0
test eax, eax
jne 0x4cb9e0
lea ecx, [eax + 1]
call fcn.00545200
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2c4], ecx
push ecx
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x2c8], eax
call fcn.00484ed0
add esp, 4
mov ecx, 0x2e94b8
push eax
call fcn.00487bf0
test eax, eax
jne 0x4cba45
call fcn.005412f0
mov dword [ebp - 0x18], 0xbaee91e1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x2d4], ecx
push ecx
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2d8], eax
call fcn.00484ed0
add esp, 4
mov ecx, 0x2e9268
push eax
call fcn.00487bf0
mov edi, dword [0x2e5b2c]
push 0
push 3
push edi
push dword [0x2e5b28]
mov dword [ebp - 0x48], eax
call fcn.004ca260
mov esi, eax
add esi, dword [0x2e5b30]
mov ecx, esi
mov dword [0x2e5b30], esi
adc edx, dword [0x2e5b34]
sub ecx, dword [0x2e5b28]
mov eax, edx
mov dword [0x2e5b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0x2e5b28]
je 0x4cbafa
sub eax, esi
mov dword [0x2e5b28], eax
sbb edi, edx
mov dword [0x2e5b2c], edi
jmp 0x4cbb0c
add esi, 1
mov dword [0x2e5b30], esi
adc edx, 0
mov dword [0x2e5b34], edx
test edi, edi
jg 0x4cbb23
jl 0x4cbb23
cmp eax, 0x176
ja 0x4cbb23
test edi, edi
jg 0x4cbb2e
jl 0x4cbb23
test eax, eax
jae 0x4cbb2e
xorps xmm0, xmm0
movlpd qword [0x2e5b28], xmm0
mov esi, dword [0x2bd108]
push 0x80000041
call esi
test eax, eax
jne 0x4cbb46
push 0x80000001
call esi
mov dword [ebp - 0x18], 0xb7f58ae2
mov dword [ebp - 0x14], 0xd7308eaf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x18], 0x7dd7fe82
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2e4], ecx
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2e8], eax
call fcn.00484ed0
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x58], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x34], edi
mov edx, dword [edi + 0x3c]
mov esi, dword [edx + edi + 0x78]
mov eax, dword [edx + edi + 0x7c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esi
lea eax, [esi + edi]
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0x4cbc17
mov edi, dword [eax + 0x18]
test edi, edi
je 0x4cbc17
mov eax, dword [eax + 0x20]
mov esi, dword [ecx + 0x18]
lea eax, [eax + edi*4]
add eax, esi
mov edx, dword [eax - 4]
sub eax, 4
add edx, esi
mov dword [ebp - 0x24], eax
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0x4cbc0d
nop dword [eax]
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0x4cbbf0
cmp esi, 0x53b2070f
je 0x4cbc1b
mov eax, dword [ebp - 0x24]
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0x4cbbd4
mov ecx, dword [ecx]
jmp 0x4cbba1
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
test eax, eax
jne 0x4cbc44
xor esi, esi
jmp 0x4cf6a4
mov dword [ebp - 0x18], 0x96d5aac2
mov dword [ebp - 0x14], 0xd714bf95
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x18], 0x7df7dea2
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f4], ecx
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x2f8], eax
call fcn.00484ed0
push eax
call dword [0x2bd0b0]
mov ecx, eax
call fcn.0055fd70
mov dword [ebp - 0x18], 0xdf9be3af
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0x304], ecx
push ecx
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x308], eax
call fcn.00484ed0
add esp, 4
mov ecx, 0x2e92dc
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
je 0x4cbddc
mov dword [ebp - 0x18], 0xdf9be3af
sub esp, 0x18
mov dword [ebp - 0x14], 0xf940fadb
mov esi, esp
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x314], ecx
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x28], esp
call fcn.00484ed0
push eax
mov ecx, esi
call fcn.004748f0
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x2e92dc
call fcn.00487fb0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x254]
call fcn.005580d0
add esp, 0x30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x254]
call fcn.00486e20
cmp eax, 2
jne 0x4cbdcd
push 1
lea ecx, [ebp - 0x254]
call fcn.00486e00
push eax
mov ecx, 0x2e9328
call fcn.00487e90
push 0
lea ecx, [ebp - 0x254]
call fcn.00486e00
push eax
mov ecx, 0x2e92dc
call fcn.00487e90
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x254]
call fcn.00486f40
push 0
push 0
push 0
push 0x227b00
push 0
push 0
call dword [0x2bd0c8]
push eax
call dword [0x2bd0c0]
cmp dword [0x2e5b24], 0xffffffff
jne 0x4cbebd
nop word [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4cbe8f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cbe8f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cbe85
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cbe68
cmp esi, 0x2fa62ca8
je 0x4cbe93
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cbe50
mov eax, dword [eax]
jmp 0x4cbe20
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp dword [0x2e5b24], 0xffffffff
je 0x4cbe10
mov dword [ebp - 0x18], 0xdf9bb9cf
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x324], ecx
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x328], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0x1f0]
call fcn.004748f0
mov byte [ebp - 4], 9
mov ecx, 0x104
lea eax, [ebp - 0xd50]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x4cbf23
lea eax, [ebp - 0xd50]
push eax
push 0xfc
call dword [0x2bd084]
mov edx, 0xc
lea ecx, [ebp - 0x85c]
call fcn.00557fa0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x18], 0xa7f291e1
mov dword [ebp - 0x14], 0xf940faa2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x334], ecx
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x338], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xa38]
call fcn.004748f0
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xa50]
call fcn.0048c8e0
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x85c]
push ecx
mov edx, eax
lea ecx, [ebp - 0xa68]
call fcn.0048c980
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, 0x2e6d74
push eax
call fcn.00487ec0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa68]
call fcn.00474890
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa50]
call fcn.00474890
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa38]
call fcn.00474890
mov dword [ebp - 0x18], 0xb1fa93e6
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x344], ecx
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x348], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xab0]
call fcn.004748f0
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xae0]
call fcn.0048c8e0
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x85c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x26c]
call fcn.0048c980
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xae0]
call fcn.00474890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xab0]
call fcn.00474890
mov ecx, 0x2e6d74
call fcn.00487c90
mov ecx, eax
call fcn.005588a0
test al, al
je 0x4cc0ea
push 0
mov dl, 1
mov ecx, 0x2e6d74
call fcn.00558370
add esp, 4
lea ecx, [ebp - 0x26c]
call fcn.00487c90
mov ecx, eax
call fcn.005588a0
test al, al
je 0x4cc112
push 0
mov dl, 1
lea ecx, [ebp - 0x26c]
call fcn.00558370
add esp, 4
push 0
mov ecx, 0x2e6d74
call fcn.00487c90
mov esi, dword [0x2bd11c]
push eax
call esi
test eax, eax
jne 0x4cc13d
mov ecx, 0x2e6d74
call fcn.0047a460
test al, al
je 0x4cf3fa
push 0
lea ecx, [ebp - 0x26c]
call fcn.00487c90
push eax
call esi
test eax, eax
jne 0x4cc1e9
mov edi, dword [0x2e5b2c]
push eax
push 3
push edi
push dword [0x2e5b28]
call fcn.004ca260
mov esi, eax
add esi, dword [0x2e5b30]
mov ecx, esi
mov dword [0x2e5b30], esi
adc edx, dword [0x2e5b34]
sub ecx, dword [0x2e5b28]
mov eax, edx
mov dword [0x2e5b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0x2e5b28]
je 0x4cc1aa
sub eax, esi
mov dword [0x2e5b28], eax
sbb edi, edx
mov dword [0x2e5b2c], edi
jmp 0x4cc1bc
add esi, 1
mov dword [0x2e5b30], esi
adc edx, 0
mov dword [0x2e5b34], edx
test edi, edi
jg 0x4cc1d3
jl 0x4cc1d3
cmp eax, 0x176
ja 0x4cc1d3
test edi, edi
jg 0x4cc1de
jl 0x4cc1d3
test eax, eax
jae 0x4cc1de
xorps xmm0, xmm0
movlpd qword [0x2e5b28], xmm0
lea ecx, [ebp - 0x26c]
call fcn.0047a460
lea ecx, [ebp - 0x26c]
call fcn.00487c90
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x58], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x34], edi
mov edx, dword [edi + 0x3c]
mov esi, dword [edx + edi + 0x78]
mov eax, dword [edx + edi + 0x7c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esi
lea eax, [edi + esi]
mov dword [ebp - 0x2c], eax
cmp eax, edi
je 0x4cc277
mov edi, dword [eax + 0x18]
test edi, edi
je 0x4cc277
mov eax, dword [eax + 0x20]
mov esi, dword [ecx + 0x18]
lea eax, [eax + edi*4]
add eax, esi
mov edx, dword [eax - 4]
sub eax, 4
add edx, esi
mov dword [ebp - 0x24], eax
dec edi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0x4cc26d
nop
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0x4cc250
cmp esi, 0x7a5b9fa2
je 0x4cc27b
mov eax, dword [ebp - 0x24]
mov esi, dword [ecx + 0x18]
test edi, edi
jne 0x4cc237
mov ecx, dword [ecx]
jmp 0x4cc204
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
lea eax, [ebp - 0x26c]
mov ecx, 0x2e6dd4
push eax
call fcn.00487e90
call fcn.005449c0
test al, al
je 0x4cc4d2
cmp dword [ebp - 0x48], 0
jne 0x4cc4d2
mov dword [ebp - 0x18], 0xbcf28fe6
mov dword [ebp - 0x14], 0x902ca9b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x18], 0x13faf782
mov dword [ebp - 0x14], 0x14d8469a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0x2e6da4
mov dword [ebp - 0x354], ecx
push ecx
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x358], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0xac8]
mov edx, eax
call fcn.0048c850
add esp, 4
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.00487c90
push eax
push 1
push 0
call dword [0x2bd1dc]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xac8]
call fcn.00474890
call dword [0x2bd098]
cmp eax, 0xb7
je 0x4cf64a
mov edi, dword [0x2bd080]
mov esi, 0x32
push 0x529
call edi
sub esi, 1
jne 0x4cc366
mov dword [ebp - 0x18], 0x9cd5b5dd
sub esp, 0x18
mov dword [ebp - 0x14], 0x952c9ef5
mov esi, esp
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x28], esp
call fcn.00484ed0
push eax
mov ecx, esi
call fcn.004748f0
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x12
call fcn.00539530
mov eax, dword [0x2e93f8]
add esp, 0x18
sub eax, dword [0x2e93f4]
je 0x4cc401
nop word [eax + eax]
push 0x2f
call edi
mov eax, dword [0x2e93f8]
sub eax, dword [0x2e93f4]
jne 0x4cc3f0
push 2
push dword [0x2e5b24]
mov byte [0x2e9081], 1
call dword [0x2bd380]
push dword [0x2e5b24]
call dword [0x2bd388]
call dword [0x2bd384]
nop dword [eax + eax]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x2c], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x24], ecx
cmp ecx, edx
je 0x4cc4a7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cc4a7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
sub ecx, 4
dec edi
mov dword [ebp - 0x70], ecx
mov esi, 0x811c9dc5
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x4cc49d
nop dword [eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x4cc480
cmp esi, 0x2fa62ca8
je 0x4cc4ab
mov ecx, dword [ebp - 0x70]
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x4cc465
mov eax, dword [eax]
jmp 0x4cc440
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
push 0x162
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0x4cc430
mov edi, dword [0x2e5b2c]
push 0
push 3
push edi
push dword [0x2e5b28]
call fcn.004ca260
mov esi, eax
add esi, dword [0x2e5b30]
mov ecx, esi
mov dword [0x2e5b30], esi
adc edx, dword [0x2e5b34]
sub ecx, dword [0x2e5b28]
mov eax, edx
mov dword [0x2e5b34], edx
sbb eax, edi
or ecx, eax
mov eax, dword [0x2e5b28]
je 0x4cc528
sub eax, esi
mov dword [0x2e5b28], eax
sbb edi, edx
mov dword [0x2e5b2c], edi
jmp 0x4cc53a
add esi, 1
mov dword [0x2e5b30], esi
adc edx, 0
mov dword [0x2e5b34], edx
test edi, edi
jg 0x4cc551
jl 0x4cc551
cmp eax, 0x176
ja 0x4cc551
test edi, edi
jg 0x4cc55c
jl 0x4cc551
test eax, eax
jae 0x4cc55c
xorps xmm0, xmm0
movlpd qword [0x2e5b28], xmm0
mov byte [0x2e90b1], 0
mov dword [ebp - 0x18], 0xdf9be3e9
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x364], ecx
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x368], eax
call fcn.00484ed0
lea ecx, [ebp - 0xb10]
mov edi, eax
call fcn.005567d0
mov esi, eax
mov byte [ebp - 4], 0x15
push 0
push 0x2bc7
call fcn.0055c020
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xaf8]
mov eax, dword [0x2e5b24]
mov edx, esi
push edi
mov dword [ebp - 0x2c], eax
call fcn.0048c7b0
mov byte [ebp - 4], 0x16
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x28], esp
mov edx, eax
push 0x2e6da4
call fcn.0048c980
add esp, 4
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
call fcn.0047ae80
add esp, 0x18
mov byte [ebp - 0x39], al
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaf8]
call fcn.00474890
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xb10]
call fcn.00474890
cmp byte [ebp - 0x39], 0
je 0x4cc6fd
cmp byte [0x2e90b1], 0
jne 0x4cc6fd
nop
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4cc6cf
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cc6cf
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cc6c5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cc6a8
cmp esi, 0x2fa62ca8
je 0x4cc6d3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cc690
mov eax, dword [eax]
jmp 0x4cc660
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0x65
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
cmp byte [0x2e90b1], 0
je 0x4cc650
mov edx, 0x2e6d5c
lea ecx, [ebp - 0x8e0]
call fcn.0053a2c0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00487e90
cmp dword [0x2e6d6c], 0
jne 0x4cc7ac
mov edi, dword [0x2bd080]
cmp dword [ebp - 0x1e0], 0
jne 0x4cc7ac
mov edx, 0x2e6d5c
lea ecx, [ebp - 0xc48]
call fcn.0053a2c0
mov esi, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8e0]
push esi
call fcn.00487ec0
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00487ec0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc48]
call fcn.0047a700
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00487e90
push 0
push 0x3f46
call fcn.0055c020
add esp, 8
push eax
call edi
cmp dword [0x2e6d6c], 0
je 0x4cc736
push 0x2c5de0
mov ecx, 0x2e6d5c
call fcn.00487c90
push eax
call fcn.004a6a60
add esp, 8
test eax, eax
je 0x4cc8b6
lea eax, [ebp - 0x814]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x660]
mov dword [ebp - 0x30], eax
nop
lea ecx, [ebp - 0x814]
call fcn.00474d10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x814]
push 1
push 0x2c5af8
call fcn.00474c40
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x660]
call fcn.00474d10
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x660]
push 1
push 0x2c5de0
call fcn.00474c40
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x660]
push 0
push eax
mov ecx, 0x2e6d5c
call fcn.00487c30
cmp eax, 0xffffffff
je 0x4cc85a
lea ecx, [ebp - 0x814]
push ecx
push dword [ebp - 0x650]
mov ecx, 0x2e6d5c
push eax
call fcn.00487d00
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x660]
call fcn.004749f0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x660]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x814]
call fcn.004749f0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x814]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x18
mov ecx, 0x2e6d5c
push 0x2c5de0
call fcn.00487c90
push eax
call fcn.004a6a60
add esp, 8
test eax, eax
jne 0x4cc7e0
mov dword [ebp - 0x18], 0xdf9bb6c7
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x374], ecx
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x378], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xc18]
call fcn.004748f0
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x18], 0xdf9bb9de
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x384], ecx
lea ecx, [ebp - 0x390]
mov dword [ebp - 0x388], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xc00]
call fcn.004748f0
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x18], 0xdf9bbad7
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x394], ecx
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x398], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xbe8]
call fcn.004748f0
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], 0xdf9baed4
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a4], ecx
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x3a8], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xbd0]
call fcn.004748f0
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x18], 0xdf9bb9c0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3b4], ecx
lea ecx, [ebp - 0x3c0]
mov dword [ebp - 0x3b8], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xbb8]
call fcn.004748f0
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x18], 0xdf9ba7d8
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c4], ecx
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x3c8], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xba0]
call fcn.004748f0
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x18], 0xdf9ba4de
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3d4], ecx
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x3d8], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xb88]
call fcn.004748f0
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x18], 0xdf9ba9c1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e4], ecx
lea ecx, [ebp - 0x3f0]
mov dword [ebp - 0x3e8], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xb70]
call fcn.004748f0
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x18], 0xdf9ba2c0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x3f8], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xb58]
call fcn.004748f0
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x18], 0xdf9bb9d4
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x404], ecx
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x408], eax
call fcn.00484ed0
push eax
lea ecx, [ebp - 0xb40]
call fcn.004748f0
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0xb28]
push eax
lea eax, [ebp - 0xc18]
push eax
lea ecx, [ebp - 0x948]
call fcn.00484c90
lea ecx, [ebp - 0x930]
push dword [eax + 4]
push dword [eax]
call fcn.00483ff0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0xc18]
push 0x162c90
push 0xa
push 0x18
push eax
call fcn.004a5617
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x930]
call fcn.0048d840
test eax, eax
je 0x4ccd51
mov dword [ebp - 0x18], 0xbacf97db
mov dword [ebp - 0x14], 0x972997a9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x18], 0x2ddee687
mov dword [ebp - 0x14], 0x71bb298c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x18], 0xd94f1ad4
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6b4], ecx
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x6b8], eax
call fcn.00484be0
push 0x2c5d80
mov esi, eax
call dword [0x2bd06c]
push esi
push eax
call dword [0x2bd0e0]
mov esi, eax
test esi, esi
je 0x4ccd51
push 0
call dword [0x2bd200]
push eax
call esi
mov esi, dword [0x2bd1f8]
push 0x2c6028
call esi
call fcn.005393f0
mov ecx, 0x2e9318
call fcn.00485550
test al, al
je 0x4cd31d
mov ecx, 0x2e9318
call fcn.00485570
test al, al
jne 0x4cd31d
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8b238984
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x18], 0x7dd5f783
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x414], ecx
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x418], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.00485560
test al, al
je 0x4cd31d
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8b238984
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x18], 0x7dd5f783
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x424], ecx
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x428], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
push 0x2c6038
mov byte [0x2e5b23], al
call esi
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0xf9278e84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x434], ecx
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x438], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b3d], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0xf9339e84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x444], ecx
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x448], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b22], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x95218d84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x18], 0xecff78a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x454], ecx
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x458], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b21], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x90289384
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x18], 0xfd4e695
mov dword [ebp - 0x14], 0x14d84687
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x464], ecx
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x468], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b3c], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x89349c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x474], ecx
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x478], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b3e], al
test al, al
je 0x4cd04a
mov byte [0x2e5b20], 0
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x94219d84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x18], 0x7dbbe183
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x484], ecx
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x488], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b20], al
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x8a259784
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x18], 0x1ad5f795
mov dword [ebp - 0x14], 0x14ab349b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x494], ecx
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x498], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
push 0x2c604c
mov byte [0x2e6c0e], al
call esi
mov dword [ebp - 0x18], 0xbdfa91f2
mov dword [ebp - 0x14], 0x97308c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a4], ecx
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x4a8], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e5b3f], al
mov dword [ebp - 0x18], 0x80fe90e0
mov dword [ebp - 0x14], 0x9a2e8cb3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b4], ecx
lea ecx, [ebp - 0x4c0]
mov dword [ebp - 0x4b8], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e90ac], al
mov dword [ebp - 0x18], 0xb8e986f8
mov dword [ebp - 0x14], 0x8b22a5be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x18], 0x18c8e589
mov dword [ebp - 0x14], 0x75bc198c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x18], 0xd94f08d3
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x694], ecx
lea ecx, [ebp - 0x6b0]
mov dword [ebp - 0x698], eax
call fcn.00484be0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e9083], al
mov dword [ebp - 0x18], 0xb8e986f8
mov dword [ebp - 0x14], 0x9627a5be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov dword [ebp - 0x18], 0x18d7f589
mov dword [ebp - 0x14], 0x7fb732a1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], ecx
mov dword [ebp - 0x18], 0xd93c07c2
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
lea ecx, [ebp - 0x730]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], edx
call fcn.00484be0
push eax
mov ecx, 0x2e9318
call fcn.0048cb80
mov ecx, eax
call fcn.0048cde0
mov byte [0x2e90a6], al
call fcn.00539210
push 0x2c59da
lea ecx, [ebp - 0x29c]
call fcn.004748f0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x284]
push 0x2c59da
call fcn.004748f0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x248]
push 0x2c59da
call fcn.004748f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x590]
push eax
mov ecx, 0x2e9400
call fcn.00485430
lea eax, [ebp - 0x86c]
mov ecx, 0x2e9400
push eax
call fcn.004853c0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x590]
call fcn.004895f0
test al, al
jne 0x4ce1bc
nop word [eax + eax]
lea ecx, [ebp - 0x590]
call fcn.00484e00
mov dword [ebp - 0x1f8], 0xbaf682fb
mov edi, eax
mov dword [ebp - 0x1f4], 0xf940fadb
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], edx
mov dword [ebp - 0x200], 0x7dbb92e6
mov dword [ebp - 0x1fc], 0x14d846fe
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x4c4], ecx
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 0x4c8], eax
call fcn.00484ed0
push eax
mov ecx, edi
call fcn.0048cb80
lea ecx, [ebp - 0x960]
push ecx
mov ecx, eax
call fcn.0048cce0
mov esi, eax
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x208], 0x80fc8cf9
mov dword [ebp - 0x204], 0x9c349bac
mov ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x710], ecx
mov dword [ebp - 0x70c], edx
mov dword [ebp - 0x210], 0xfdaff94
mov dword [ebp - 0x20c], 0x7db41995
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x708], eax
mov dword [ebp - 0xe8], 0xe8100cc9
mov dword [ebp - 0xe4], 0xc0cfc619
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x700], eax
mov dword [ebp - 0xf0], 0xae7946e8
mov dword [ebp - 0xec], 0x89c15b7c
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x6f4], ecx
lea ecx, [ebp - 0x710]
mov dword [ebp - 0x6f8], eax
call fcn.00484be0
push 0
push eax
mov ecx, esi
call fcn.00487bf0
mov esi, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x960]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x960]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0x4cd831
mov dword [ebp - 0xf8], 0xaaf782e3
mov dword [ebp - 0xf4], 0xf940fabe
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x100], 0x7dbb92e6
mov dword [ebp - 0xfc], 0x14d846fe
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x4d4], ecx
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x4d8], eax
call fcn.00484ed0
push eax
mov ecx, edi
call fcn.0048cb80
lea ecx, [ebp - 0xb28]
push ecx
mov ecx, eax
call fcn.0048cce0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x29c]
push eax
call fcn.00487ec0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xb28]
call fcn.00474890
mov dword [ebp - 0x78], 0xe1e981a9
mov dword [ebp - 0x74], 0xf940fadb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], 0x7dbb92e6
mov dword [ebp - 0x7c], 0x14d846fe
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
push esi
mov dword [ebp - 0xa4], ecx
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0x29c]
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
je 0x4cd831
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x648]
mov dword [ebp - 0x38], eax
nop word [eax + eax]
mov dword [ebp - 0x108], 0xdf9be998
mov dword [ebp - 0x104], 0xf940fadb
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x110], 0x7dbb92e6
mov dword [ebp - 0x10c], 0x14d846fe
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x4e4], ecx
lea ecx, [ebp - 0x4f0]
mov dword [ebp - 0x4e8], eax
call fcn.00484ed0
lea ecx, [ebp - 0x82c]
mov esi, eax
call fcn.00474d10
mov byte [ebp - 4], 0x3b
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cd6b0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x82c]
call fcn.00474c40
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x118], 0xe1e981a9
mov dword [ebp - 0x114], 0xf940fadb
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x120], 0x7dbb92e6
mov dword [ebp - 0x11c], 0x14d846fe
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x4f4], ecx
lea ecx, [ebp - 0x500]
mov dword [ebp - 0x4f8], eax
call fcn.00484ed0
lea ecx, [ebp - 0x648]
mov esi, eax
call fcn.00474d10
mov byte [ebp - 4], 0x3e
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cd743
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x648]
call fcn.00474c40
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x648]
push 0
push eax
lea ecx, [ebp - 0x29c]
call fcn.00487c30
cmp eax, 0xffffffff
je 0x4cd78f
lea ecx, [ebp - 0x82c]
push ecx
push dword [ebp - 0x638]
lea ecx, [ebp - 0x29c]
push eax
call fcn.00487d00
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x648]
call fcn.004749f0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x648]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x82c]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x78], 0xe1e981a9
mov dword [ebp - 0x74], 0xf940fadb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x80], 0x7dbb92e6
mov dword [ebp - 0x7c], 0x14d846fe
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
push 0
mov dword [ebp - 0xa4], ecx
push ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0x29c]
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
jne 0x4cd630
mov dword [ebp - 0x128], 0xbaf682fb
mov dword [ebp - 0x124], 0xf940fadb
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x130], 0x7dbb92e6
mov dword [ebp - 0x12c], 0x14d846fe
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x504], ecx
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x508], eax
call fcn.00484ed0
push eax
mov ecx, edi
call fcn.0048cb80
lea ecx, [ebp - 0x978]
push ecx
mov ecx, eax
call fcn.0048cce0
mov esi, eax
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x138], 0x80fc8cf9
mov dword [ebp - 0x134], 0x9c349bac
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 0x6ec], edx
mov dword [ebp - 0x140], 0xfdaff94
mov dword [ebp - 0x13c], 0x7db41995
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x148], 0xeb100cc9
mov dword [ebp - 0x144], 0xc0cfc619
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x150], 0xae7946e8
mov dword [ebp - 0x14c], 0x89c15b7c
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x6d4], ecx
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x6d8], eax
call fcn.00484be0
push 0
push eax
mov ecx, esi
call fcn.00487bf0
mov esi, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x978]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x978]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0x4cdcd9
mov dword [ebp - 0x158], 0xaaf782e3
mov dword [ebp - 0x154], 0xf940fabe
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x160], 0x7dbb92e6
mov dword [ebp - 0x15c], 0x14d846fe
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x514], ecx
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x518], eax
call fcn.00484ed0
push eax
mov ecx, edi
call fcn.0048cb80
lea ecx, [ebp - 0x9a8]
push ecx
mov ecx, eax
call fcn.0048cce0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x284]
push eax
call fcn.00487ec0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x9a8]
call fcn.00474890
mov dword [ebp - 0x88], 0xe1e981a9
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
push esi
mov dword [ebp - 0xb4], ecx
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0x284]
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
je 0x4cdcd9
lea eax, [ebp - 0x844]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x678]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x168], 0xdf9be998
mov dword [ebp - 0x164], 0xf940fadb
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x170], 0x7dbb92e6
mov dword [ebp - 0x16c], 0x14d846fe
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x524], ecx
lea ecx, [ebp - 0x530]
mov dword [ebp - 0x528], eax
call fcn.00484ed0
lea ecx, [ebp - 0x844]
mov esi, eax
call fcn.00474d10
mov byte [ebp - 4], 0x4c
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cdb40
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x844]
call fcn.00474c40
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x178], 0xe1e981a9
mov dword [ebp - 0x174], 0xf940fadb
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x180], 0x7dbb92e6
mov dword [ebp - 0x17c], 0x14d846fe
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x534], ecx
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x538], eax
call fcn.00484ed0
lea ecx, [ebp - 0x678]
mov esi, eax
call fcn.00474d10
mov byte [ebp - 4], 0x4f
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4cdbd3
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x678]
call fcn.00474c40
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x678]
push 0
push eax
lea ecx, [ebp - 0x284]
call fcn.00487c30
cmp eax, 0xffffffff
je 0x4cdc1f
lea ecx, [ebp - 0x844]
push ecx
push dword [ebp - 0x668]
lea ecx, [ebp - 0x284]
push eax
call fcn.00487d00
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x678]
call fcn.004749f0
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x678]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x844]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x844]
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x88], 0xe1e981a9
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
push 0
mov dword [ebp - 0xb4], ecx
push ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0x284]
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
jne 0x4cdac6
mov dword [ebp - 0x188], 0xbaf682fb
mov dword [ebp - 0x184], 0xf940fadb
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x190], 0x7dbb92e6
mov dword [ebp - 0x18c], 0x14d846fe
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x544], ecx
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x548], eax
call fcn.00484ed0
push eax
mov ecx, edi
call fcn.0048cb80
lea ecx, [ebp - 0x990]
push ecx
mov ecx, eax
call fcn.0048cce0
mov esi, eax
mov byte [ebp - 4], 0x57
mov dword [ebp - 0x198], 0x80fc8cf9
mov dword [ebp - 0x194], 0x9c349bac
mov ecx, dword [ebp - 0x198]
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x750], ecx
mov dword [ebp - 0x74c], edx
mov dword [ebp - 0x1a0], 0xfdaff94
mov dword [ebp - 0x19c], 0x7db41995
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x744], ecx
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x1a8], 0xea100cc9
mov dword [ebp - 0x1a4], 0xc0cfc619
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x1b0], 0xae7946e8
mov dword [ebp - 0x1ac], 0x89c15b7c
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x734], ecx
lea ecx, [ebp - 0x750]
mov dword [ebp - 0x738], eax
call fcn.00484be0
push 0
push eax
mov ecx, esi
call fcn.00487bf0
mov esi, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x990]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x990]
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x34
test esi, esi
jne 0x4ce191
mov dword [ebp - 0x1b8], 0xaaf782e3
mov dword [ebp - 0x1b4], 0xf940fabe
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x1c0], 0x7dbb92e6
mov dword [ebp - 0x1bc], 0x14d846fe
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x554], ecx
lea ecx, [ebp - 0x560]
mov dword [ebp - 0x558], eax
call fcn.00484ed0
push eax
mov ecx, edi
call fcn.0048cb80
lea ecx, [ebp - 0x8f8]
push ecx
mov ecx, eax
call fcn.0048cce0
mov esi, eax
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x248]
cmp eax, esi
je 0x4cdee3
mov ecx, eax
call fcn.004749f0
push esi
lea ecx, [ebp - 0x248]
call fcn.00474b70
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x8f8]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x8f8]
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x98], 0xe1e981a9
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0xc4], ecx
push ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xc8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0x248]
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
je 0x4ce191
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x690]
mov dword [ebp - 0x50], eax
nop word [eax + eax]
mov dword [ebp - 0x1c8], 0xdf9be998
mov dword [ebp - 0x1c4], 0xf940fadb
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x1d0], 0x7dbb92e6
mov dword [ebp - 0x1cc], 0x14d846fe
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x564], ecx
lea ecx, [ebp - 0x570]
mov dword [ebp - 0x568], eax
call fcn.00484ed0
lea ecx, [ebp - 0x7fc]
mov esi, eax
call fcn.00474d10
mov byte [ebp - 4], 0x60
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ce010
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x7fc]
call fcn.00474c40
mov byte [ebp - 4], 0x61
mov dword [ebp - 0x1d8], 0xe1e981a9
mov dword [ebp - 0x1d4], 0xf940fadb
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x574], ecx
lea ecx, [ebp - 0x580]
mov dword [ebp - 0x578], eax
call fcn.00484ed0
lea ecx, [ebp - 0x690]
mov esi, eax
call fcn.00474d10
mov byte [ebp - 4], 0x63
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ce097
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x690]
call fcn.00474c40
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x690]
push 0
push eax
lea ecx, [ebp - 0x248]
call fcn.00487c30
cmp eax, 0xffffffff
je 0x4ce0e3
lea ecx, [ebp - 0x7fc]
push ecx
push dword [ebp - 0x680]
lea ecx, [ebp - 0x248]
push eax
call fcn.00487d00
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x690]
call fcn.004749f0
mov byte [ebp - 4], 0x61
lea eax, [ebp - 0x690]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x7fc]
call fcn.004749f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x7fc]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x98], 0xe1e981a9
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
push 0
mov dword [ebp - 0xc4], ecx
push ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xc8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0x248]
push eax
call fcn.00487bf0
cmp eax, 0xffffffff
jne 0x4cdf90
lea ecx, [ebp - 0x590]
call fcn.00484db0
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x590]
call fcn.004895f0
test al, al
je 0x4cd3a0
mov esi, dword [0x2bd1f8]
lea eax, [ebp - 0x248]
push eax
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x29c]
call fcn.0055baa0
add esp, 4
cmp byte [0x2e90ae], 0
jne 0x4cf2b1
call fcn.00539490
call fcn.00539350
call fcn.005392b0
call fcn.004ed570
call fcn.004ec2e0
mov ecx, 0x2e92a0
call fcn.004849f0
push 0x2c6068
call esi
mov ecx, 0x2e93d0
call fcn.004849f0
mov esi, dword [0x2bd0c8]
push 0
push 0
push 0
push 0x1caa80
push 0
push 0
call esi
push 0
push 0
push 0
push 0x1ca140
push 0
push 0
mov dword [ebp - 0x44], eax
call esi
mov dword [ebp - 0x40], eax
call fcn.0047b890
test al, al
je 0x4ce340
lea ecx, [ebp - 0x940]
call fcn.0047bec0
mov edi, eax
mov byte [ebp - 4], 0x6b
mov dword [ebp - 0x20], 0xb6fc8cf9
mov dword [ebp - 0x1c], 0xf94089b5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a0], ecx
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x594], ecx
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x598], eax
call fcn.00484ed0
sub esp, 0x10
mov ecx, edi
mov esi, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.0048cb80
push eax
mov ecx, esi
call fcn.00485950
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0x20], 0xb3ee82c3
mov dword [ebp - 0x1c], 0xbc09a5af
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a4], ecx
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x5a8], eax
call fcn.00484ed0
push eax
mov ecx, 0x2e9368
call fcn.0048cb80
mov byte [ebp - 4], 0x6b
mov ecx, eax
call fcn.004858b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.004858a0
call fcn.0047be90
lea ecx, [ebp - 0x880]
call fcn.00507390
mov esi, eax
mov byte [ebp - 4], 0x6d
mov dword [ebp - 0x20], 0xb6fc8cf9
mov dword [ebp - 0x1c], 0xf94089b5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 0x5bc], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b4], ecx
lea ecx, [ebp - 0x5c0]
mov dword [ebp - 0x5b8], eax
call fcn.00484ed0
push eax
mov ecx, esi
call fcn.0048cb80
push eax
lea ecx, [ebp - 0xe0]
call fcn.00485950
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x20], 0xbbf58ac2
mov dword [ebp - 0x1c], 0xba338db4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x20], 0x18dff794
mov dword [ebp - 0x1c], 0x75b13290
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x20], 0xd94f1acb
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
lea ecx, [ebp - 0x770]
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], edx
call fcn.00484be0
push eax
mov ecx, 0x2e9368
call fcn.0048cb80
mov edi, eax
mov byte [ebp - 4], 0x6f
mov dl, byte [edi]
mov cl, byte [ebp - 0xe0]
mov byte [edi], cl
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov byte [ebp - 0xe0], dl
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], esi
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xd8]
push dword [ebp - 0xe0]
call fcn.004896f0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x878]
push dword [ebp - 0x880]
call fcn.004896f0
push 0
push 0x4b707
call fcn.0055c020
add esp, 8
push eax
push dword [ebp - 0x44]
call dword [0x2bd060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4ce547
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ce547
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ce53d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ce520
cmp esi, 0x71948ca4
je 0x4ce54b
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ce503
mov eax, dword [eax]
jmp 0x4ce4d3
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push 0x493e0
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4ce5ef
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ce5ef
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ce5e5
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ce5c8
cmp esi, 0xfaba0065
je 0x4ce5f3
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ce5b0
mov eax, dword [eax]
jmp 0x4ce580
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x34], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x2c], ecx
cmp ecx, esi
je 0x4ce68f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ce68f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x24], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ce685
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ce668
cmp esi, 0xfaba0065
je 0x4ce693
mov ecx, dword [ebp - 0x24]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ce650
mov eax, dword [eax]
jmp 0x4ce620
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
call fcn.004ea740
mov esi, dword [0x2bd0c8]
push 0
push 0
push 0
push 0x1c6d20
push 0
push 0
call esi
push 0
push 0
push 0
push 0x1c3830
push 0
push 0
mov dword [ebp - 0x44], eax
call esi
push 0
push 0
push 0
push 0x1c1e10
push 0
push 0
mov dword [ebp - 0x40], eax
call esi
push 0
push 0
push 0
push 0x1bf740
push 0
push 0
mov dword [ebp - 0x6c], eax
call esi
push 0
push 0
push 0
push 0x1bf460
push 0
push 0
mov dword [ebp - 0x58], eax
call esi
push 0
push 0
push 0
push 0x1be140
push 0
push 0
mov dword [ebp - 0x34], eax
call esi
push 0
push 0
push 0
push 0x1bdcd0
push 0
push 0
mov dword [ebp - 0x2c], eax
call esi
sub esp, 0x18
mov dword [ebp - 0x24], eax
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0x2e6d5c
call fcn.00487fb0
mov byte [ebp - 4], 0x70
sub esp, 0x18
lea eax, [ebp - 0x8c8]
mov dword [ebp - 0x54], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x71
sub esp, 0x18
lea eax, [ebp - 0x8e0]
mov dword [ebp - 0x50], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x72
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x2e6d74
call fcn.00487fb0
mov byte [ebp - 4], 0x73
mov byte [ebp - 4], 0x34
call fcn.005522d0
mov eax, dword fs:[0x30]
add esp, 0x60
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x28], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ce82f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ce82f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x38], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ce825
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ce808
cmp esi, 0x71948ca4
je 0x4ce833
mov ecx, dword [ebp - 0x38]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ce7f0
mov eax, dword [eax]
jmp 0x4ce7c0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
push 0x493e0
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ce8d7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ce8d7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ce8cd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ce8b0
cmp esi, 0x71948ca4
je 0x4ce8db
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ce892
mov eax, dword [eax]
jmp 0x4ce862
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x6c]
call dword [0x2bd060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ce98f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ce98f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ce985
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ce968
cmp esi, 0x71948ca4
je 0x4ce993
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ce950
mov eax, dword [eax]
jmp 0x4ce920
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x493e0
push dword [ebp - 0x34]
call dword [0x2bd060]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4cea3f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cea3f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cea35
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cea18
cmp esi, 0x71948ca4
je 0x4cea43
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cea00
mov eax, dword [eax]
jmp 0x4ce9d0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ceae7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ceae7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ceadd
nop word [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ceac0
cmp esi, 0x71948ca4
je 0x4ceaeb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ceaa2
mov eax, dword [eax]
jmp 0x4cea72
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push 0x493e0
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ceb8f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ceb8f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ceb85
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ceb68
cmp esi, 0xfaba0065
je 0x4ceb93
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ceb50
mov eax, dword [eax]
jmp 0x4ceb20
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x44]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4cec2f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cec2f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cec25
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cec08
cmp esi, 0xfaba0065
je 0x4cec33
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cebf0
mov eax, dword [eax]
jmp 0x4cebc0
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push dword [ebp - 0x6c]
call dword [0x2bd0c0]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4cecd7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cecd7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ceccd
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cecb0
cmp esi, 0xfaba0065
je 0x4cecdb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cec96
mov eax, dword [eax]
jmp 0x4cec66
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x58]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [edx + esi]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ced77
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ced77
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ced6d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4ced50
cmp esi, 0xfaba0065
je 0x4ced7b
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4ced35
mov eax, dword [eax]
jmp 0x4ced05
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x34]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4cee17
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4cee17
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4cee0d
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cedf0
cmp esi, 0xfaba0065
je 0x4cee1b
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cedd5
mov eax, dword [eax]
jmp 0x4ceda5
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x2c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x38], esi
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
lea ecx, [esi + edx]
mov dword [ebp - 0x30], ecx
cmp ecx, esi
je 0x4ceeb7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4ceeb7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x28], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4ceead
nop dword [eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4cee90
cmp esi, 0xfaba0065
je 0x4ceebb
mov ecx, dword [ebp - 0x28]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4cee75
mov eax, dword [eax]
jmp 0x4cee45
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
push dword [ebp - 0x24]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov dword [ebp - 0x20], 0xaff299bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c4], ecx
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 0x5c8], eax
call fcn.00484ed0
mov dword [ebp - 0x20], 0xdf9be3ca
mov esi, eax
mov dword [ebp - 0x1c], 0xf940fadb
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5d8], ecx
lea ecx, [ebp - 0x5e0]
mov dword [ebp - 0x5d4], eax
call fcn.00484ed0
push eax
lea edx, [ebp - 0x1f0]
lea ecx, [ebp - 0x9d8]
call fcn.0048c720
add esp, 4
mov byte [ebp - 4], 0x74
mov edx, eax
push 0x2e6d5c
lea ecx, [ebp - 0x9c0]
call fcn.0048c980
add esp, 4
mov byte [ebp - 4], 0x75
mov edx, eax
push esi
lea ecx, [ebp - 0x910]
call fcn.0048c7b0
add esp, 4
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x9c0]
call fcn.00474890
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x9d8]
call fcn.00474890
mov dword [ebp - 0x20], 0xaff299bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e4], ecx
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0x5e8], eax
call fcn.00484ed0
mov edx, 0x17
lea ecx, [ebp - 0xa08]
mov esi, eax
call fcn.00557fa0
mov byte [ebp - 4], 0x79
lea edx, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0x9f0]
call fcn.0048c8e0
add esp, 4
mov byte [ebp - 4], 0x7a
mov edx, eax
push esi
lea ecx, [ebp - 0x898]
call fcn.0048c7b0
add esp, 4
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x9f0]
call fcn.00474890
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xa08]
call fcn.00474890
mov ecx, 0x2e9410
call fcn.00487c90
sub esp, 0x18
lea ecx, [ebp - 0x898]
mov edi, eax
mov dword [ebp - 0x4c], esp
mov esi, esp
call fcn.00487c90
push eax
mov ecx, esi
call fcn.004748f0
mov byte [ebp - 4], 0x7e
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0x2e6d74
call fcn.00487fb0
mov byte [ebp - 4], 0x7f
mov byte [ebp - 4], 0x7d
mov ecx, edi
call fcn.0055c060
add esp, 0x18
lea eax, [ebp - 0x910]
mov ecx, esp
mov dword [ebp - 0x50], esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], pe_nt_image_headers32
sub esp, 0x18
lea eax, [ebp - 0x898]
mov dword [ebp - 0x60], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7d
call fcn.00538c70
add esp, 0x30
cmp byte [0x2e90ac], 0
je 0x4cf1cb
cmp dword [ebp - 0x48], 0
jne 0x4cf1cb
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0x2e93c0
call fcn.00485950
mov byte [ebp - 4], 0x82
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0x2e9258
call fcn.00485950
mov byte [ebp - 4], 0x83
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0x2e9368
call fcn.00485950
mov byte [ebp - 4], 0x84
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x2e9388
call fcn.00485950
mov byte [ebp - 4], 0x85
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0x2e9378
call fcn.00485950
mov byte [ebp - 4], 0x86
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0x2e9290
call fcn.00485950
mov byte [ebp - 4], 0x87
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x88
mov byte [ebp - 4], 0x7d
call fcn.0053d6c0
add esp, 0x78
test al, al
je 0x4cf1cb
call fcn.00543050
sub esp, 0x18
lea eax, [ebp - 0x26c]
mov ecx, esp
mov dword [ebp - 0x4c], esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x89
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0x2e93c0
call fcn.00485950
mov byte [ebp - 4], 0x8a
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0x2e9258
call fcn.00485950
mov byte [ebp - 4], 0x8b
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x2e9368
call fcn.00485950
mov byte [ebp - 4], 0x8c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0x2e9388
call fcn.00485950
mov byte [ebp - 4], 0x8d
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0x2e9378
call fcn.00485950
mov byte [ebp - 4], 0x8e
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x2e9290
call fcn.00485950
mov byte [ebp - 4], 0x8f
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x90
mov byte [ebp - 4], 0x7d
call fcn.004f7c50
add esp, 0x90
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x898]
call fcn.00474890
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x910]
call fcn.00474890
jmp 0x4cf379
cmp byte [0x2e90ac], 0
je 0x4cf379
cmp dword [ebp - 0x48], 0
jne 0x4cf379
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0x2e93c0
call fcn.00485950
mov byte [ebp - 4], 0x91
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0x2e9258
call fcn.00485950
mov byte [ebp - 4], 0x92
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0x2e9368
call fcn.00485950
mov byte [ebp - 4], 0x93
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x2e9388
call fcn.00485950
mov byte [ebp - 4], 0x94
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0x2e9378
call fcn.00485950
mov byte [ebp - 4], 0x95
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0x2e9290
call fcn.00485950
mov byte [ebp - 4], 0x96
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0x97
mov byte [ebp - 4], 0x34
call fcn.0053d6c0
add esp, 0x78
test al, al
je 0x4cf379
call fcn.00543050
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x248]
call fcn.004749f0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x248]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x284]
call fcn.004749f0
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x284]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x29c]
call fcn.004749f0
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0xa2
lea ecx, [ebp - 0x924]
call fcn.004840b0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x92c]
call fcn.00484130
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8e0]
call fcn.0047a700
push 0x2c6074
call dword [0x2bd1f8]
cmp byte [0x2e90ac], 0
mov esi, dword [ebp - 0x48]
je 0x4cf60d
test esi, esi
je 0x4cf60d
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0x2e93c0
call fcn.00485950
mov byte [ebp - 4], 0xa4
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
push 0x2e9258
call fcn.00485950
mov byte [ebp - 4], 0xa5
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x50], esp
push 0x2e9368
call fcn.00485950
mov byte [ebp - 4], 0xa6
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x60], esp
push 0x2e9388
call fcn.00485950
mov byte [ebp - 4], 0xa7
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x68], esp
push 0x2e9378
call fcn.00485950
mov byte [ebp - 4], 0xa8
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0x2e9290
call fcn.00485950
mov byte [ebp - 4], 0xa9
sub esp, 0x18
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x28], esp
mov ecx, esp
push eax
call fcn.00487fb0
mov byte [ebp - 4], 0xaa
mov byte [ebp - 4], 0x12
call fcn.0053d6c0
add esp, 0x78
test al, al
je 0x4cf60d
mov dword [ebp - 0x20], 0xbcf28fe6
mov dword [ebp - 0x1c], 0x902ca9b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x20], 0x13faf782
mov dword [ebp - 0x1c], 0x14d8469a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
push 0x2e6da4
mov dword [ebp - 0x5f4], ecx
push ecx
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x5f8], eax
call fcn.00484ed0
add esp, 4
lea ecx, [ebp - 0xa20]
mov edx, eax
call fcn.0048c850
add esp, 4
mov byte [ebp - 4], 0xab
mov ecx, eax
call fcn.00487c90
push eax
push 1
push 0
call dword [0x2bd1dc]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xa20]
call fcn.00474890
call dword [0x2bd098]
cmp eax, 0xb7
je 0x4cf64a
mov edi, dword [0x2bd080]
push 0x7595
call edi
mov dword [ebp - 0x20], 0x9cd5b5dd
sub esp, 0x18
mov dword [ebp - 0x1c], 0x952c9ef5
mov esi, esp
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x4c], esp
call fcn.00484ed0
push eax
mov ecx, esi
call fcn.004748f0
mov byte [ebp - 4], 0xac
mov byte [ebp - 4], 0x12
call fcn.00539530
mov eax, dword [0x2e93f8]
add esp, 0x18
sub eax, dword [0x2e93f4]
je 0x4cf601
nop dword [eax]
push 0x64
call edi
mov eax, dword [0x2e93f8]
sub eax, dword [0x2e93f4]
jne 0x4cf5f0
mov esi, dword [ebp - 0x48]
mov byte [0x2e9081], 1
jmp 0x4cf613
mov edi, dword [0x2bd080]
push 0xbbb
call edi
push 2
push dword [0x2e5b24]
call dword [0x2bd380]
push dword [0x2e5b24]
call dword [0x2bd388]
cmp byte [0x2e90ac], 0
je 0x4cf64a
test esi, esi
je 0x4cf64a
push 0x3f3
call edi
jmp 0x4cf641
xor esi, esi
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x26c]
call fcn.004749f0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x85c]
call fcn.004749f0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x85c]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x1f0]
call fcn.004749f0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x9c]
test ecx, ecx
je 0x4cf6b7
call fcn.00475bc0
mov dword [ebp - 4], 0xb6
lea ecx, [ebp - 0x8b0]
call fcn.004749f0
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10