Function at 0x56d850
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x56d858
push ebx
push esi
push edi
mov esi, eax
mov edi, 0x5d4e34
xor eax, eax
push ebp
push 0x5721b1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d314c]
mov eax, dword [eax]
mov ebx, dword [eax + 0xb4]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56d8b3
mov edx, 0x5721c8
mov eax, dword [esi + 0x568]
call fcn.00434264
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5721d4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5721e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5721fc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
je 0x56dbb0
mov edx, 0x572228
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov edx, dword [ebp - 0x20]
pop eax
call fcn.00404084
jne 0x56da32
mov edx, 0x572240
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x570]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov edx, dword [ebp - 0x20]
pop eax
call fcn.00404084
jne 0x56da32
mov edx, 0x572254
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov edx, dword [ebp - 0x20]
pop eax
call fcn.00404084
je 0x56dbb0
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x56dbb0
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x572268
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572284
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722cc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
je 0x56dadd
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov edx, 0x5722e8
call fcn.00404084
jne 0x56daed
mov edx, 0x5721c8
mov eax, dword [esi + 0x580]
call fcn.00434264
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x570]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x580]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [edi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56dca2
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5721d4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572318
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57232c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57234c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x494]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 4]
call fcn.00408fb8
lea eax, [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00403d90
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x56de6d
mov edx, 0x5721c8
mov eax, dword [esi + 0x494]
call fcn.00434264
jmp 0x56de6d
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5721d4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572318
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572388
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 4]
call fcn.00408fb8
lea eax, [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00403d90
mov edx, 0x5723a8
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov edx, dword [ebp - 0x20]
pop eax
call fcn.00404084
je 0x56de6d
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x56de6d
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5723bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5723d8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572400
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 8]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [esi + 0x59c]
call fcn.00439f54
cmp al, 1
je 0x56de8b
mov eax, dword [esi + 0x5a0]
call fcn.00439f54
cmp al, 1
jne 0x56de92
mov eax, esi
call fcn.0058cf28
cmp dword [esi + 0x91c], 1
jne 0x56e687
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x572418
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56e018
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
jne 0x56e018
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56df57
mov edx, 0x572444
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56df67
mov edx, 0x5724e4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56df82
mov edx, 0x572574
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57258c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572598
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56dfd8
mov edx, 0x5725d8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56dfe8
mov edx, 0x572618
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56e003
mov edx, 0x572650
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57258c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56e0fa
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e03e
mov edx, 0x572660
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56e04e
mov edx, 0x57270c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56e069
mov edx, 0x572574
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57258c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572598
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e0bf
mov edx, 0x5727ac
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56e0cf
mov edx, 0x5727f0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56e0ea
mov edx, 0x572650
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57258c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56e129
mov edx, 0x5721c8
mov eax, dword [esi + 0x568]
call fcn.00434264
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [edi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x10f8]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e1ff
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56e1ff
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 8
mov edx, 1
call fcn.00404178
lea eax, [ebp - 0x18]
mov edx, 0x572434
call fcn.00403f7c
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56e22e
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x574]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x378]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e300
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x494]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56e32f
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x388]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572854
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x584]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572860
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
mov edx, 0x57286c
call fcn.00404084
jne 0x56e3cd
mov edx, 0x57287c
mov eax, ebx
call fcn.004a2550
mov edx, 0x572888
call fcn.00489c34
jmp 0x56e3fc
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57287c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
mov edx, 0x57286c
call fcn.00404084
jne 0x56e455
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x18]
mov eax, 0x57289c
call fcn.0040b474
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56e484
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728bc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e4f6
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56e55e
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56e58f
lea edx, [ebp - 0x1c]
mov eax, dword [edi]
mov eax, dword [eax + 0x864]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56e5cb
lea edx, [ebp - 0x1c]
mov eax, dword [edi]
mov eax, dword [eax + 0x8cc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5728ec
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [edi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov edx, 0x572948
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x18]
lea eax, [esi + 0x910]
call fcn.00403d4c
mov dword [esi + 0x91c], 2
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x57295c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [edi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x56ecf6
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x572994
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5729ac
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5729cc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5729ec
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572a08
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572a24
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572a38
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572a54
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572a6c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572a8c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572aac
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572ac8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e77d
mov edx, 0x572ae0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56e7e5
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56e7f5
mov edx, 0x572b00
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56e810
mov edx, 0x572b20
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572b40
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x910]
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x10f8]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56e8f4
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56e8f4
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 8
mov edx, 1
call fcn.00404178
lea eax, [ebp - 0x18]
mov edx, 0x572434
call fcn.00403f7c
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56e923
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56e952
mov edx, 0x5721c8
mov eax, dword [esi + 0x568]
call fcn.00434264
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x568]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x574]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x378]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0xbe4]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56ea24
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x494]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56ea53
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x38c]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x388]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572854
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x584]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572860
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
mov edx, 0x57286c
call fcn.00404084
jne 0x56eaf1
mov edx, 0x57287c
mov eax, ebx
call fcn.004a2550
mov edx, 0x572888
call fcn.00489c34
jmp 0x56eb20
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x3dc]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57287c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
mov edx, 0x57286c
call fcn.00404084
jne 0x56eb79
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x18]
mov eax, 0x57289c
call fcn.0040b474
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56eba8
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x588]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x394]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728bc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0xf90]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56ec1a
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x384]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56ec82
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x598]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56ecb3
lea edx, [ebp - 0x1c]
mov eax, dword [edi]
mov eax, dword [eax + 0x864]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
cmp dword [eax + 0x8ec], 1
jne 0x56ecef
lea edx, [ebp - 0x1c]
mov eax, dword [edi]
mov eax, dword [eax + 0x8cc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
cmp dword [esi + 0x918], 2
jne 0x56f978
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x572b60
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572b7c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572b9c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572bb8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572bd8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572bf0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572c0c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572c28
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x470]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
je 0x56edf3
mov edx, 0x572c40
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x470]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57287c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x572c64
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572c80
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572c98
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xd30]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56ee45
mov edx, 0x572cb0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xd34]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56ee67
mov edx, 0x572cd4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xebc]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56ee89
mov edx, 0x572cf8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572d1c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56eedc
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56ef0b
mov edx, 0x572d3c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56ef0b
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56ef0b
mov edx, 0x572d3c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572d58
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572d74
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572d94
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572db0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572dcc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572de8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56ef8f
mov edx, 0x572e04
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56efb3
mov edx, 0x572e24
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572e44
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572e64
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572e84
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56f04b
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56f05b
mov edx, 0x572ea0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8e8], 1
jne 0x56f0a6
mov edx, 0x572ec0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572ee0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572f00
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572f20
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x572f40
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x62438]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x370]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x910]
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x10f8]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f1ae
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56f1ae
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 8
mov edx, 1
call fcn.00404178
lea eax, [ebp - 0x18]
mov edx, 0x572434
call fcn.00403f7c
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56f1dd
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x57c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x378]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x390]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572854
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x37c]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x4e0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728bc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi + 0x510]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f321
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
mov edx, 0x5721c8
call fcn.00489c34
jmp 0x56f334
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
xor edx, edx
call fcn.00489c34
mov eax, dword [esi + 0xd30]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f394
mov eax, dword [esi + 0x608]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f37e
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x624]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56f394
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
mov eax, dword [esi + 0xd34]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f3f4
mov eax, dword [esi + 0x614]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f3de
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x620]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56f3f4
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x65c]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572f6c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f487
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56f4bc
mov eax, dword [edi]
mov eax, dword [eax + 0x408]
call fcn.0042c124
inc eax
lea edx, [ebp - 0x20]
call fcn.00409138
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 0x572f78
call fcn.00403fc0
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572f84
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56f4bc
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56f4bc
mov edx, 0x572f84
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f90
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x68c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x572f9c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi + 0xebc]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f540
mov eax, dword [esi + 0x6e0]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f52a
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x6e4]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x572fa8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56f540
mov edx, 0x572fa8
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
mov eax, dword [esi + 0x6f0]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f5c4
mov eax, dword [esi + 0x778]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f57f
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fc0
call fcn.00489c34
jmp 0x56f62e
mov eax, dword [esi + 0x888]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f5ac
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fcc
call fcn.00489c34
jmp 0x56f62e
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f78
call fcn.00489c34
jmp 0x56f62e
mov eax, dword [esi + 0x778]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f5ee
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fd8
call fcn.00489c34
jmp 0x56f62e
mov eax, dword [esi + 0x888]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56f618
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fe4
call fcn.00489c34
jmp 0x56f62e
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572ff0
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x6f4]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x572ffc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x710]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573008
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x71c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573014
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x720]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573020
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f70c
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x768]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57302c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f74f
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x76c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573038
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x780]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573044
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x850]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573050
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x854]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57305c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56f839
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56f86a
lea edx, [ebp - 0x1c]
mov eax, dword [edi]
mov eax, dword [eax + 0x860]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573068
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
cmp dword [eax + 0x8e8], 1
jne 0x56f91f
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x8b8]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573074
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x8bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573080
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x8c4]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57308c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x8c8]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573098
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [edi]
mov eax, dword [eax + 0xc74]
mov edx, 0x5721c8
call fcn.00404084
jne 0x570910
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x57c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
push 0x5730a4
mov ecx, dword [esi + 0x910]
mov edx, dword [esi + 0x62438]
mov eax, esi
call fcn.00584eb4
jmp 0x570910
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5730b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5730d0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xd30]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f9cc
mov edx, 0x573158
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xd34]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56f9ee
mov edx, 0x573174
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xebc]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56fa10
mov edx, 0x573190
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56fabf
mov edx, 0x5731ac
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56fa7b
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56faaa
mov edx, 0x5731c4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56faaa
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56faaa
mov edx, 0x5731c4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5731dc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56fb51
mov edx, 0x5731ac
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56fb12
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56fb41
mov edx, 0x5731c4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56fb41
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56fb41
mov edx, 0x5731c4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573274
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56fbb9
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56fbc9
mov edx, 0x5732f0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8e8], 1
jne 0x56fbe4
mov edx, 0x573308
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573350
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57335c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5733a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
cmp dword [esi + 0x62490], 0
jne 0x56fca0
mov edx, 0x5733c8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573438
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57347c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573520
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573538
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62440]
call fcn.00489c34
mov edx, 0x572fcc
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62444]
call fcn.00489c34
jmp 0x56fd24
mov edx, 0x573544
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x470]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
je 0x56fd00
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x470]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572860
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x56fd24
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x62438]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572860
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x573554
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xd30]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56fd56
mov edx, 0x57356c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xd34]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56fd78
mov edx, 0x572650
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0xebc]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56fd9a
mov edx, 0x57357c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x56fe49
mov edx, 0x57358c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56fe05
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56fe34
mov edx, 0x57359c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56fe34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56fe34
mov edx, 0x57359c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5735ac
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56fedb
mov edx, 0x57358c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x56fe9c
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56fecb
mov edx, 0x57359c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
jmp 0x56fecb
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x56fecb
mov edx, 0x57359c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5735f8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x56ff43
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x56ff53
mov edx, 0x573638
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [edi]
cmp dword [eax + 0x8e8], 1
jne 0x56ff6e
mov edx, 0x573648
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57258c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [edi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x370]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x910]
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x10f8]
mov edx, 0x5721c8
call fcn.00404084
jne 0x57006b
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x57006b
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 8
mov edx, 1
call fcn.00404178
lea eax, [ebp - 0x18]
mov edx, 0x572434
call fcn.00403f7c
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x57009a
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x57c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x578]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x378]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x390]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572854
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x37c]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x4e0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728bc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi + 0x510]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x5701de
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
mov edx, 0x5721c8
call fcn.00489c34
jmp 0x5701f1
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
xor edx, edx
call fcn.00489c34
mov eax, dword [esi + 0xd30]
mov edx, 0x5721c8
call fcn.00404084
jne 0x570251
mov eax, dword [esi + 0x608]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x57023b
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x624]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x570251
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
mov eax, dword [esi + 0xd34]
mov edx, 0x5721c8
call fcn.00404084
jne 0x5702b1
mov eax, dword [esi + 0x614]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x57029b
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x620]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x5702b1
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x65c]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572f6c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi + 0x674]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x570344
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x570379
mov eax, dword [edi]
mov eax, dword [eax + 0x408]
call fcn.0042c124
inc eax
lea edx, [ebp - 0x20]
call fcn.00409138
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 0x572f78
call fcn.00403fc0
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572f84
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x570379
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x88c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
jne 0x570379
mov edx, 0x572f84
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f90
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x68c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x572f9c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [esi + 0xebc]
mov edx, 0x5721c8
call fcn.00404084
jne 0x5703fd
mov eax, dword [esi + 0x6e0]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x5703e7
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x6e4]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x572fa8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x5703fd
mov edx, 0x572fa8
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
mov eax, dword [esi + 0x6f0]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x570481
mov eax, dword [esi + 0x778]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x57043c
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fc0
call fcn.00489c34
jmp 0x5704eb
mov eax, dword [esi + 0x888]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x570469
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fcc
call fcn.00489c34
jmp 0x5704eb
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f78
call fcn.00489c34
jmp 0x5704eb
mov eax, dword [esi + 0x778]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x5704ab
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fd8
call fcn.00489c34
jmp 0x5704eb
mov eax, dword [esi + 0x888]
mov edx, dword [eax]
call dword [edx + 0xb8]
cmp al, 1
jne 0x5704d5
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572fe4
call fcn.00489c34
jmp 0x5704eb
mov edx, 0x572fb4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572ff0
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x6f4]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
push eax
mov edx, 0x572ffc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x710]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573008
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x71c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573014
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x720]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573020
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x5705c9
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x768]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57302c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
mov eax, dword [eax + 0x8838]
mov edx, 0x5721c8
call fcn.00404084
jne 0x57060c
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x76c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573038
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x780]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573044
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x850]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573050
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x854]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57305c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
call fcn.00403f74
cmp eax, 0xe
jne 0x5706f6
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 0x374]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov ecx, 6
mov edx, 9
call fcn.00404178
mov eax, dword [ebp - 0x18]
mov edx, 0x572434
call fcn.00404084
je 0x570727
lea edx, [ebp - 0x1c]
mov eax, dword [edi]
mov eax, dword [eax + 0x860]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573068
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, dword [edi]
cmp dword [eax + 0x8e8], 1
jne 0x5707dc
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x8b8]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573074
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x8bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573080
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x8c4]
call fcn.00470af8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57308c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x8c8]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573098
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x57366c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [edi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov edx, 0x5736d8
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x18]
lea eax, [esi + 0x62438]
call fcn.00403d4c
mov edx, 0x5736ec
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x18]
mov eax, dword [esi + 0x470]
call fcn.00434264
mov dword [esi + 0x918], 2
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573704
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [edi]
mov edx, dword [edx + 0x62484]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [edi]
mov eax, dword [eax + 0xc74]
mov edx, 0x5721c8
call fcn.00404084
jne 0x5708fe
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x57c]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
push 0x5730a4
mov ecx, dword [esi + 0x910]
mov edx, dword [esi + 0x62438]
mov eax, esi
call fcn.00584974
xor eax, eax
mov dword [esi + 0x940], eax
mov dword [esi + 0x974], 1
mov eax, dword [0x5d314c]
mov eax, dword [eax]
mov eax, dword [eax + 0xec]
call fcn.0048c680
mov eax, dword [esi + 0xd30]
mov edx, 0x5721c8
call fcn.00404084
jne 0x57101b
mov eax, dword [esi + 0x59c]
call fcn.00439f54
cmp al, 1
jne 0x57101b
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573740
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573764
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x570a78
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573784
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5737a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5737c0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x570b2f
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5737e0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573800
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573830
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
cmp dword [esi + 0x62494], 0
jne 0x570c6d
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x57387c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57389c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5738c4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5738e4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573904
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
mov edx, 0x5730a4
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x570c59
mov dword [esi + 0x62494], 1
lea eax, [ebp - 0x10]
call fcn.00403cf8
jmp 0x570c6d
mov edx, 0x573928
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
cmp dword [esi + 0x62494], 1
jne 0x570f11
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x57393c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57389c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573964
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573988
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
mov edx, 0x5730a4
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x570d2b
mov edx, 0x573928
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x58]
jmp 0x570d33
lea eax, [ebp - 0xc]
call fcn.00403cf8
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5739b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5739c8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5739e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573a0c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
mov edx, 0x5730a4
call fcn.00489c34
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
mov edx, 0x572ff0
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573a2c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573a48
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573ab0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c8]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
mov edx, 0x5730a4
call fcn.00489c34
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f78
call fcn.00489c34
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 0xc]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x57101b
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5739b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b08
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b24
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b40
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b60
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 0x10]
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5bc]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5c8]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [esi + 0xd34]
mov edx, 0x5721c8
call fcn.00404084
jne 0x57178f
mov eax, dword [esi + 0x5a0]
call fcn.00439f54
cmp al, 1
jne 0x57178f
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
mov edx, 0x57286c
call fcn.00404084
je 0x57178f
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5ac]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
je 0x57178f
lea edx, [ebp - 0x24]
mov eax, dword [esi + 0x5d4]
call fcn.00470af8
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.00408fb8
mov eax, dword [ebp - 0x20]
mov edx, 0x57286c
call fcn.00404084
je 0x57178f
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573740
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573764
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x5711ec
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573784
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5737a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5737c0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5ac]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x5712a3
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5737e0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573800
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573830
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5ac]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
cmp dword [esi + 0x62498], 0
jne 0x5713e1
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x57387c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57389c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5738c4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5738e4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573904
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5ac]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
mov edx, 0x573b80
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jg 0x5713cd
mov dword [esi + 0x62498], 1
lea eax, [ebp - 0x10]
call fcn.00403cf8
jmp 0x5713e1
mov edx, 0x573928
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x58]
cmp dword [esi + 0x62498], 1
jne 0x571685
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x57393c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57389c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573964
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573988
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
mov edx, 0x573b80
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x57149f
mov edx, 0x573928
mov eax, ebx
call fcn.0048b4c8
lea edx, [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x58]
jmp 0x5714a7
lea eax, [ebp - 0xc]
call fcn.00403cf8
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5739b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5739c8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5739e8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573a0c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
mov edx, 0x573b80
call fcn.00489c34
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
mov edx, 0x572ff0
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573a2c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b8c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573ab0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x62438]
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5ac]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5d4]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
mov edx, 0x573b80
call fcn.00489c34
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f78
call fcn.00489c34
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 0xc]
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x57178f
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x5739b0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b08
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b24
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b40
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573b60
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [ebp - 0x10]
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5b0]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x5ac]
call fcn.00434234
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x5d4]
call fcn.00470af8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
mov eax, dword [esi + 0xfc0]
mov edx, 0x5721c8
call fcn.00404084
jne 0x571adf
mov eax, dword [esi + 0x3f8]
mov eax, dword [eax + 0x1fc]
dec eax
test eax, eax
jl 0x572179
inc eax
mov dword [ebp - 0x14], eax
xor edi, edi
lea eax, [ebp - 0x20]
push eax
mov ecx, 2
mov edx, edi
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
cmp dword [ebp - 0x18], 0
je 0x571ad0
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573bf4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573c14
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573c30
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573c54
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573c74
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x62438]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, edi
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x18]
mov eax, 0x573cb4
call fcn.0040b474
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.0048aa58
mov eax, ebx
call fcn.0049bf2c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x5719a9
cmp dword [esi + 0x974], 1
je 0x5719a9
mov edx, 0x573cd0
mov eax, ebx
call fcn.0048b4c8
mov edx, dword [eax]
call dword [edx + 0x54]
mov dword [esi + 0x984], eax
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573ce8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573d08
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573d28
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x984]
call fcn.00489b10
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, edi
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
jmp 0x571ad0
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573d4c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573d70
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573dcc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573e14
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
mov edx, 0x572f60
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x62438]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x18]
mov eax, 0x573cb4
call fcn.0040b474
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
xor ecx, ecx
mov edx, edi
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, edi
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
mov eax, ebx
call fcn.004a2650
inc edi
dec dword [ebp - 0x14]
jne 0x5717c0
jmp 0x572179
push dword [esi + 0x97c]
push dword [esi + 0x978]
lea edx, [ebp - 0x18]
mov eax, 0x57289c
call fcn.0040b474
mov eax, dword [ebp - 0x18]
push eax
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x20]
mov eax, 0x57289c
call fcn.0040b474
mov edx, dword [ebp - 0x20]
pop eax
call fcn.00404084
jne 0x571b2d
cmp dword [esi + 0x974], 1
jne 0x571be7
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573e38
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573e58
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5722bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573ef8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573f34
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
call fcn.0040a874
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x18]
mov eax, 0x573f94
call fcn.0040b474
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5722f4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea edx, [ebp - 0x18]
mov eax, dword [esi + 0x62438]
call fcn.00408fb8
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x573fb0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
jmp 0x571d10
mov eax, ebx
call fcn.0048aa64
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov edx, 0x573fbc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573fd8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x573ff4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57400c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x574024
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57403c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x574054
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57406c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x574084
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5740a0
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5740bc
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5740d8
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x5740f4
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x574110
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57412c
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x574148
mov eax, dword [ebx + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x57221c
mov eax, ebx
call fcn.004a2550
mov edx, dword [esi + 0x984]
call fcn.00489b10
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
xor edx, edx
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572300
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57230c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 2
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572830
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 3
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57283c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 4
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572848
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 5
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572854
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 6
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x572860
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 7
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x57287c
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 8
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728b0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 9
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728bc
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 0xa
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728c8
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 0xb
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728d4
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 0xc
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x5728e0
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
mov edx, 0xd
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
mov eax, dword [ebp - 0x18]
push eax
mov edx, 0x574168
mov eax, ebx
call fcn.004a2550
pop edx
call fcn.00489c34
lea eax, [ebp - 0x18]
push eax
mov ecx, 2
xor edx, edx
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x18], 0
jne 0x572172
lea eax, [ebp - 0x20]
push eax
mov ecx, 2
mov edx, 1
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x20], 0
jne 0x572172
lea eax, [ebp - 0x24]
push eax
mov ecx, 2
mov edx, 2
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x24], 0
jne 0x572172
lea eax, [ebp - 0x28]
push eax
mov ecx, 2
mov edx, 3
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x28], 0
jne 0x572172
lea eax, [ebp - 0x2c]
push eax
mov ecx, 2
mov edx, 4
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x2c], 0
jne 0x572172
lea eax, [ebp - 0x30]
push eax
mov ecx, 2
mov edx, 5
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x30], 0
jne 0x572172
lea eax, [ebp - 0x34]
push eax
mov ecx, 2
mov edx, 6
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x34], 0
jne 0x572172
lea eax, [ebp - 0x38]
push eax
mov ecx, 2
mov edx, 7
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x38], 0
jne 0x572172
lea eax, [ebp - 0x3c]
push eax
mov ecx, 2
mov edx, 8
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x3c], 0
jne 0x572172
lea eax, [ebp - 0x40]
push eax
mov ecx, 2
mov edx, 9
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x40], 0
jne 0x572172
lea eax, [ebp - 0x44]
push eax
mov ecx, 2
mov edx, 0xa
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x44], 0
jne 0x572172
lea eax, [ebp - 0x48]
push eax
mov ecx, 2
mov edx, 0xb
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x48], 0
jne 0x572172
lea eax, [ebp - 0x4c]
push eax
mov ecx, 2
mov edx, 0xc
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x4c], 0
jne 0x572172
lea eax, [ebp - 0x50]
push eax
mov ecx, 2
mov edx, 0xd
mov eax, dword [esi + 0x3f8]
call fcn.0047c244
cmp dword [ebp - 0x50], 0
je 0x572179
mov eax, ebx
call fcn.004a2650
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5721b8
lea eax, [ebp - 0x50]
mov edx, 0xd
call fcn.00403d1c
lea eax, [ebp - 0x1c]
call fcn.00403cf8
lea eax, [ebp - 0x18]
call fcn.00403cf8
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.00403d1c
ret