Function at 0x4d4034
Capabilities:
Inspect section memory permissions
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
cmp dword [0x677008], 0
je 0x4d4052
mov eax, 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [0x677008], 1
call fcn.006613f0
call fcn.0063013c
push 0x67710c
call fcn.004c27e0
add esp, 4
push 0x6772a0
call fcn.004c27e0
add esp, 4
push 0x6775cc
call fcn.004c27e0
add esp, 4
push 0x677744
call fcn.004c27e0
add esp, 4
push 0x677ad8
call fcn.004c27e0
add esp, 4
push 0x678074
call fcn.004c27e0
add esp, 4
push 0x6781ac
call fcn.004c27e0
add esp, 4
push 0x67834c
call fcn.004c27e0
add esp, 4
push 0x6783d0
call fcn.004c27e0
add esp, 4
push 0x67847c
call fcn.004c27e0
add esp, 4
push 0x67878c
call fcn.004c27e0
add esp, 4
push 0x679480
call fcn.004c27e0
add esp, 4
push 0x67964c
call fcn.004c27e0
add esp, 4
push 0x67979c
call fcn.004c27e0
add esp, 4
push 0x67a1a4
call fcn.004c27e0
add esp, 4
push 0x67a288
call fcn.004c27e0
add esp, 4
push 0x67a3ac
call fcn.004c27e0
add esp, 4
push 0x67a484
call fcn.004c27e0
add esp, 4
push 0x67a534
call fcn.004c27e0
add esp, 4
push 0x67a638
call fcn.004c27e0
add esp, 4
push 0x67a718
call fcn.004c27e0
add esp, 4
push 0x67a9e8
call fcn.004c27e0
add esp, 4
push 0x67aa90
call fcn.004c27e0
add esp, 4
push 0x67b078
call fcn.004c27e0
add esp, 4
push 0x67b108
call fcn.004c27e0
add esp, 4
push 0x67b334
call fcn.004c27e0
add esp, 4
push 0x67b73c
call fcn.004c27e0
add esp, 4
push 0x67bb3c
call fcn.004c27e0
add esp, 4
push 0x67bc20
call fcn.004c27e0
add esp, 4
push 0x67c728
call fcn.004c27e0
add esp, 4
push 0x67c894
call fcn.004c27e0
add esp, 4
push 0x67cb0c
call fcn.004c27e0
add esp, 4
push 0x67cc20
call fcn.004c27e0
add esp, 4
push 0x67daa4
call fcn.004c27e0
add esp, 4
push 0x67dcbc
call fcn.004c27e0
add esp, 4
push 0x67de8c
call fcn.004c27e0
add esp, 4
push 0x67e10c
call fcn.004c27e0
add esp, 4
push 0x67e1bc
call fcn.004c27e0
add esp, 4
push 0x67e264
call fcn.004c27e0
add esp, 4
push 0x67e434
call fcn.004c27e0
add esp, 4
push 0x67e5c8
call fcn.004c27e0
add esp, 4
push 0x67e850
call fcn.004c27e0
add esp, 4
push 0x67e9c8
call fcn.004c27e0
add esp, 4
push 0x67eab0
call fcn.004c27e0
add esp, 4
push 0x67eba8
call fcn.004c27e0
add esp, 4
push 0x67ec84
call fcn.004c27e0
add esp, 4
push 0x67f394
call fcn.004c27e0
add esp, 4
push 0x67f54c
call fcn.004c27e0
add esp, 4
push 0x67f6cc
call fcn.004c27e0
add esp, 4
push 0x67fa9c
call fcn.004c27e0
add esp, 4
push 0x67fbe4
call fcn.004c27e0
add esp, 4
push 0x67fe94
call fcn.004c27e0
add esp, 4
push 0x68014c
call fcn.004c27e0
add esp, 4
push 0x680314
call fcn.004c27e0
add esp, 4
push 0x6804b4
call fcn.004c27e0
add esp, 4
push 0x680664
call fcn.004c27e0
add esp, 4
push 0x680718
call fcn.004c27e0
add esp, 4
push 0x680814
call fcn.004c27e0
add esp, 4
push 0x6827a0
call fcn.004c27e0
add esp, 4
push 0x682924
call fcn.004c27e0
add esp, 4
push 0x682eec
call fcn.004c27e0
add esp, 4
push 0x684054
call fcn.004c27e0
add esp, 4
push 0x684224
call fcn.004c27e0
add esp, 4
push 0x6842f0
call fcn.004c27e0
add esp, 4
push 0x684678
call fcn.004c27e0
add esp, 4
push 0x684a28
call fcn.004c27e0
add esp, 4
call fcn.0063919f
cmp eax, 1
jne 0x4d4426
call fcn.00637d7f
cmp eax, 1
jne 0x4d4410
push 0x684aa0
call fcn.0065f1ae
add esp, 4
cmp eax, 1
jne 0x4d43e8
jmp 0x4d440e
push 0x684ab8
call fcn.0065f1ae
add esp, 4
cmp eax, 1
jne 0x4d43fc
jmp 0x4d440e
push 0x684adc
call fcn.0065f1ae
add esp, 4
cmp eax, 1
jne 0x4d440e
jmp 0x4d4424
push 0x684adc
call fcn.0065f1ae
add esp, 4
cmp eax, 1
jne 0x4d4424
jmp 0x4d4424
jmp 0x4d4435
push 0
push 0x684afc
call fcn.006561e4
add esp, 8
mov eax, dword [0x684c00]
and eax, 1
cmp eax, 0
jne 0x4d4485
push dword [0x684bfc]
call fcn.004c1310
add esp, 4
push eax
push 0x684c04
push dword [0x684bf8]
call fcn.004c1310
add esp, 4
push eax
call fcn.004c1470
add esp, 8
push eax
call fcn.004c1470
add esp, 8
inc dword [eax + 4]
mov dword [0x684c14], eax
or dword [0x684c00], 1
xor eax, eax
cmp eax, 0
je 0x4d44f2
mov ebx, 0x684ca0
inc dword [ebx + 4]
mov eax, dword [0x684c5c]
dec dword [eax + 4]
jne 0x4d44a7
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c5c], ebx
mov ebx, 0x684cbc
inc dword [ebx + 4]
mov eax, dword [0x684c98]
dec dword [eax + 4]
jne 0x4d44c8
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c98], ebx
mov ebx, dword [0x684c5c]
inc dword [ebx + 4]
mov eax, dword [0x684c9c]
dec dword [eax + 4]
jne 0x4d44ea
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c9c], ebx
jmp 0x4d4534
mov ebx, 0x684c48
inc dword [ebx + 4]
mov eax, dword [0x684c5c]
dec dword [eax + 4]
jne 0x4d450d
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c5c], ebx
mov ebx, 0x684c64
inc dword [ebx + 4]
mov eax, dword [0x684c98]
dec dword [eax + 4]
jne 0x4d452e
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c98], ebx
xor eax, eax
cmp eax, 0
je 0x4d455e
mov ebx, 0x684ca0
inc dword [ebx + 4]
mov eax, dword [0x684c60]
dec dword [eax + 4]
jne 0x4d4556
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c60], ebx
jmp 0x4d457f
mov ebx, 0x684c48
inc dword [ebx + 4]
mov eax, dword [0x684c60]
dec dword [eax + 4]
jne 0x4d4579
push eax
call fcn.004c1de0
add esp, 4
mov dword [0x684c60], ebx
push 0x684d04
call fcn.004c0670
add esp, 4
mov esi, eax
push esi
call sub.KERNEL32.DLL_LoadLibraryA
mov ebx, eax
push esi
call fcn.004c25f0
add esp, 4
mov edi, ebx
cmp edi, 0
je 0x4d46a3
push 0x684d3c
call fcn.004c0670
add esp, 4
mov esi, eax
push esi
push edi
call sub.KERNEL32.DLL_GetProcAddress
mov ebx, eax
push esi
call fcn.004c25f0
add esp, 4
mov eax, ebx
cmp eax, 0
jne 0x4d45d7
mov eax, 0x661724
mov dword [0x684d28], eax
push 0x684d70
call fcn.004c0670
add esp, 4
mov esi, eax
push esi
push edi
call sub.KERNEL32.DLL_GetProcAddress
mov ebx, eax
push esi
call fcn.004c25f0
add esp, 4
mov eax, ebx
cmp eax, 0
jne 0x4d4609
mov eax, 0x661724
mov dword [0x684d2c], eax
push 0x684da8
call fcn.004c0670
add esp, 4
mov esi, eax
push esi
push edi
call sub.KERNEL32.DLL_GetProcAddress
mov ebx, eax
push esi
call fcn.004c25f0
add esp, 4
mov eax, ebx
cmp eax, 0
jne 0x4d463b
mov eax, 0x661724
mov dword [0x684d30], eax
push 0x684dd0
call fcn.004c0670
add esp, 4
mov esi, eax
push esi
push edi
call sub.KERNEL32.DLL_GetProcAddress
mov ebx, eax
push esi
call fcn.004c25f0
add esp, 4
mov eax, ebx
cmp eax, 0
jne 0x4d466d
mov eax, 0x661724
mov dword [0x684d34], eax
push 0x684e00
call fcn.004c0670
add esp, 4
mov ebx, eax
push ebx
push edi
call sub.KERNEL32.DLL_GetProcAddress
mov esi, eax
push ebx
call fcn.004c25f0
add esp, 4
cmp esi, 0
jne 0x4d469d
mov esi, 0x661724
mov dword [0x684d38], esi
call fcn.00659ca3
push eax
push 0x684e38
push dword [0x684d00]
push 0x684e68
call fcn.004c1470
add esp, 8
push eax
call fcn.004c1470
add esp, 8
push eax
call fcn.004c1470
add esp, 8
push eax
call fcn.004e9b5f
add esp, 4
mov eax, dword [0x684c00]
and eax, 2
cmp eax, 0
jne 0x4d4707
push 4
push 0x684ed0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x684ed4], eax
or dword [0x684c00], 2
mov ebx, 0x684ed8
inc dword [ebx + 4]
mov eax, dword [0x684ed4]
mov eax, dword [eax + 0x18]
dec dword [eax + 4]
jne 0x4d4725
push eax
call fcn.004c1de0
add esp, 4
mov eax, dword [0x684ed4]
mov dword [eax + 0x18], ebx
mov ebx, 0x684ef8
inc dword [ebx + 4]
mov eax, dword [0x684ed4]
mov eax, dword [eax + 0x1c]
dec dword [eax + 4]
jne 0x4d474b
push eax
call fcn.004c1de0
add esp, 4
mov eax, dword [0x684ed4]
mov dword [eax + 0x1c], ebx
mov ebx, 0x684f0c
inc dword [ebx + 4]
mov eax, dword [0x684ed4]
mov eax, dword [eax + 0x20]
dec dword [eax + 4]
jne 0x4d4771
push eax
call fcn.004c1de0
add esp, 4
mov eax, dword [0x684ed4]
mov dword [eax + 0x20], ebx
mov ebx, 0x684f28
inc dword [ebx + 4]
mov eax, dword [0x684ed4]
mov eax, dword [eax + 0x24]
dec dword [eax + 4]
jne 0x4d4797
push eax
call fcn.004c1de0
add esp, 4
mov eax, dword [0x684ed4]
mov dword [eax + 0x24], ebx
mov eax, dword [0x684c00]
and eax, 4
cmp eax, 0
jne 0x4d47ca
push 5
push 0x68528c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685294], eax
or dword [0x684c00], 4
mov eax, dword [0x684c00]
and eax, 8
cmp eax, 0
jne 0x4d47f5
push 5
push 0x685298
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68529c], eax
or dword [0x684c00], 8
mov eax, dword [0x684c00]
and eax, 0x10
cmp eax, 0
jne 0x4d4820
push 5
push 0x6852a0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6852a4], eax
or dword [0x684c00], 0x10
mov eax, dword [0x684c00]
and eax, 0x20
cmp eax, 0
jne 0x4d484b
push 0xf
push 0x6852b8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6852bc], eax
or dword [0x684c00], 0x20
mov eax, dword [0x684c00]
and eax, 0x40
cmp eax, 0
jne 0x4d4876
push 0xf
push 0x6852c0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6852c4], eax
or dword [0x684c00], 0x40
mov eax, dword [0x684c00]
and eax, 0x80
cmp eax, 0
jne 0x4d48a6
push 0xa
push 0x68532c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685330], eax
or dword [0x684c00], 0x80
mov eax, dword [0x684c00]
and eax, 0x100
cmp eax, 0
jne 0x4d48d9
push 0x15e
push 0x685334
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685338], eax
or dword [0x684c00], 0x100
mov eax, dword [0x684c00]
and eax, 0x200
cmp eax, 0
jne 0x4d4910
push 0x15e
push 0xb
push 2
push 0x68533c
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685340], eax
or dword [0x684c00], 0x200
mov eax, dword [0x684c00]
and eax, 0x400
cmp eax, 0
jne 0x4d4947
push 0x15e
push 0xa
push 2
push 0x685344
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685348], eax
or dword [0x684c00], 0x400
mov eax, dword [0x684c00]
and eax, 0x800
cmp eax, 0
jne 0x4d497e
push 0x15e
push 0xa
push 2
push 0x68534c
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685350], eax
or dword [0x684c00], 0x800
mov eax, dword [0x684c00]
and eax, 0x1000
cmp eax, 0
jne 0x4d49b1
push 0x15e
push 0x685354
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685358], eax
or dword [0x684c00], 0x1000
mov eax, dword [0x684c00]
and eax, 0x2000
cmp eax, 0
jne 0x4d49e8
push 0x15e
push 0xa
push 2
push 0x68535c
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685360], eax
or dword [0x684c00], 0x2000
mov eax, dword [0x684c00]
and eax, 0x4000
cmp eax, 0
jne 0x4d4a18
push 0xa
push 0x685364
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685368], eax
or dword [0x684c00], 0x4000
mov eax, dword [0x684c00]
and eax, 0x8000
cmp eax, 0
jne 0x4d4a4b
push 0x15e
push 0x68536c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685370], eax
or dword [0x684c00], 0x8000
mov eax, dword [0x684c00]
and eax, 0x10000
cmp eax, 0
jne 0x4d4a82
push 0x15e
push 0xa
push 2
push 0x685374
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685378], eax
or dword [0x684c00], 0x10000
mov eax, dword [0x684c00]
and eax, 0x20000
cmp eax, 0
jne 0x4d4ab2
push 0xa
push 0x685380
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685384], eax
or dword [0x684c00], 0x20000
mov eax, dword [0x684c00]
and eax, 0x40000
cmp eax, 0
jne 0x4d4ae2
push 4
push 0x685440
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685444], eax
or dword [0x684c00], 0x40000
mov eax, dword [0x684c00]
and eax, 0x80000
cmp eax, 0
jne 0x4d4b12
push 0x14
push 0x685a84
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685a88], eax
or dword [0x684c00], 0x80000
mov eax, dword [0x684c00]
and eax, 0x100000
cmp eax, 0
jne 0x4d4b42
push 0xc
push 0x685ae4
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685ae8], eax
or dword [0x684c00], 0x100000
mov eax, dword [0x684c00]
and eax, 0x200000
cmp eax, 0
jne 0x4d4b72
push 0x33
push 0x685af8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685afc], eax
or dword [0x684c00], 0x200000
mov eax, dword [0x684c00]
and eax, 0x400000
cmp eax, 0
jne 0x4d4ba2
push 5
push 0x685b00
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685b04], eax
or dword [0x684c00], 0x400000
mov eax, dword [0x684c00]
and eax, 0x800000
cmp eax, 0
jne 0x4d4bd2
push 6
push 0x685b08
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685b0c], eax
or dword [0x684c00], 0x800000
mov eax, dword [0x684c00]
and eax, 0x1000000
cmp eax, 0
jne 0x4d4c02
push 5
push 0x685b10
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685b14], eax
or dword [0x684c00], 0x1000000
mov eax, dword [0x684c00]
and eax, 0x2000000
cmp eax, 0
jne 0x4d4c32
push 5
push 0x685b38
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685b3c], eax
or dword [0x684c00], 0x2000000
mov eax, dword [0x684c00]
and eax, 0x4000000
cmp eax, 0
jne 0x4d4c62
push 0xa
push 0x685c34
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685c38], eax
or dword [0x684c00], 0x4000000
mov eax, dword [0x684c00]
and eax, 0x8000000
cmp eax, 0
jne 0x4d4c92
push 0x3b
push 0x685d0c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685d10], eax
or dword [0x684c00], 0x8000000
mov eax, dword [0x684c00]
and eax, 0x10000000
cmp eax, 0
jne 0x4d4cc2
push 4
push 0x685d2c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685d30], eax
or dword [0x684c00], 0x10000000
mov eax, dword [0x684c00]
and eax, 0x20000000
cmp eax, 0
jne 0x4d4cf2
push 0x10
push 0x685ee4
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x685ef0], eax
or dword [0x684c00], 0x20000000
mov eax, dword [0x684c00]
and eax, 0x40000000
cmp eax, 0
jne 0x4d4d26
push 2
push 0x28
push 2
push 0x685efc
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685f00], eax
or dword [0x684c00], 0x40000000
mov eax, dword [0x684c00]
and eax, 0x80000000
cmp eax, 0
jne 0x4d4d60
push 0x96
push 0x96
push 2
push 0x685fcc
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x685fd8], eax
or dword [0x684c00], 0x80000000
mov eax, dword [0x686028]
and eax, 1
cmp eax, 0
jne 0x4d4d8b
push 5
push 0x68602c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686034], eax
or dword [0x686028], 1
mov eax, dword [0x686028]
and eax, 2
cmp eax, 0
jne 0x4d4db6
push 5
push 0x686044
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68604c], eax
or dword [0x686028], 2
mov eax, dword [0x686028]
and eax, 4
cmp eax, 0
jne 0x4d4de1
push 0x43
push 0x686070
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686078], eax
or dword [0x686028], 4
mov eax, dword [0x686028]
and eax, 8
cmp eax, 0
jne 0x4d4e0c
push 0x43
push 0x686084
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68608c], eax
or dword [0x686028], 8
mov eax, dword [0x686028]
and eax, 0x10
cmp eax, 0
jne 0x4d4e4c
push 3
push 0x677200
call fcn.004bfde0
add esp, 8
mov dword [eax + 0x18], 0x19
mov dword [eax + 0x1c], 0x19
mov dword [eax + 0x20], 0x19
inc dword [eax + 4]
mov dword [0x6860a0], eax
or dword [0x686028], 0x10
mov eax, dword [0x686028]
and eax, 0x20
cmp eax, 0
jne 0x4d4e6d
mov eax, dword [0x686004]
imul eax, eax, 6
mov dword [0x6860e4], eax
or dword [0x686028], 0x20
mov eax, dword [0x686028]
and eax, 0x40
cmp eax, 0
jne 0x4d4e9b
push 0x20f58
push 0x686154
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686158], eax
or dword [0x686028], 0x40
mov eax, dword [0x686028]
and eax, 0x80
cmp eax, 0
jne 0x4d4ece
push 0x57e4
push 0x686164
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68616c], eax
or dword [0x686028], 0x80
mov eax, dword [0x686028]
and eax, 0x100
cmp eax, 0
jne 0x4d4f01
push 0x57e4
push 0x686180
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686188], eax
or dword [0x686028], 0x100
mov eax, dword [0x686028]
and eax, 0x200
cmp eax, 0
jne 0x4d4f34
push 0x57e4
push 0x68618c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686194], eax
or dword [0x686028], 0x200
mov eax, dword [0x686028]
and eax, 0x400
cmp eax, 0
jne 0x4d4fb8
push 0xc
push 0x677200
call fcn.004bfde0
add esp, 8
mov dword [eax + 0x18], 0x14
mov dword [eax + 0x1c], 0xf
mov dword [eax + 0x20], 0xa
mov dword [eax + 0x24], 9
mov dword [eax + 0x28], 8
mov dword [eax + 0x2c], 7
mov dword [eax + 0x30], 6
mov dword [eax + 0x34], 5
mov dword [eax + 0x38], 4
mov dword [eax + 0x3c], 3
mov dword [eax + 0x40], 2
mov dword [eax + 0x44], 1
inc dword [eax + 4]
mov dword [0x6861d8], eax
or dword [0x686028], 0x400
mov eax, dword [0x686028]
and eax, 0x800
cmp eax, 0
jne 0x4d503c
push 0xc
push 0x677200
call fcn.004bfde0
add esp, 8
mov dword [eax + 0x18], 0x14
mov dword [eax + 0x1c], 0xf
mov dword [eax + 0x20], 0xa
mov dword [eax + 0x24], 9
mov dword [eax + 0x28], 8
mov dword [eax + 0x2c], 7
mov dword [eax + 0x30], 6
mov dword [eax + 0x34], 5
mov dword [eax + 0x38], 4
mov dword [eax + 0x3c], 3
mov dword [eax + 0x40], 2
mov dword [eax + 0x44], 1
inc dword [eax + 4]
mov dword [0x6861dc], eax
or dword [0x686028], 0x800
mov eax, dword [0x686028]
and eax, 0x1000
cmp eax, 0
jne 0x4d508f
push 5
push 0x677200
call fcn.004bfde0
add esp, 8
mov dword [eax + 0x18], 0x79
mov dword [eax + 0x1c], 0x7a
mov dword [eax + 0x20], 0x7b
mov dword [eax + 0x24], 0x7c
mov dword [eax + 0x28], 0x7d
inc dword [eax + 4]
mov dword [0x6862b8], eax
or dword [0x686028], 0x1000
mov eax, dword [0x686028]
and eax, 0x2000
cmp eax, 0
jne 0x4d50bf
push 0x10
push 0x68632c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686334], eax
or dword [0x686028], 0x2000
mov eax, dword [0x686028]
and eax, 0x4000
cmp eax, 0
jne 0x4d50ef
push 6
push 0x686340
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686344], eax
or dword [0x686028], 0x4000
mov eax, dword [0x686028]
and eax, 0x8000
cmp eax, 0
jne 0x4d511f
push 0x10
push 0x686348
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68634c], eax
or dword [0x686028], 0x8000
mov eax, dword [0x686028]
and eax, 0x10000
cmp eax, 0
jne 0x4d514f
push 0x1c
push 0x686454
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68645c], eax
or dword [0x686028], 0x10000
mov eax, dword [0x686028]
and eax, 0x20000
cmp eax, 0
jne 0x4d5182
push 0xc0
push 0x686460
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68646c], eax
or dword [0x686028], 0x20000
mov eax, dword [0x686028]
and eax, 0x40000
cmp eax, 0
jne 0x4d51b2
push 0x20
push 0x686474
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686478], eax
or dword [0x686028], 0x40000
mov eax, dword [0x686028]
and eax, 0x80000
cmp eax, 0
jne 0x4d51e2
push 0xe
push 0x686494
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68649c], eax
or dword [0x686028], 0x80000
mov eax, dword [0x686028]
and eax, 0x100000
cmp eax, 0
jne 0x4d5212
push 0xe
push 0x6864a0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6864a4], eax
or dword [0x686028], 0x100000
mov eax, dword [0x686028]
and eax, 0x200000
cmp eax, 0
jne 0x4d5242
push 3
push 0x6864ac
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6864b8], eax
or dword [0x686028], 0x200000
mov eax, dword [0x686028]
and eax, 0x400000
cmp eax, 0
jne 0x4d5272
push 0xa
push 0x6864cc
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6864d0], eax
or dword [0x686028], 0x400000
mov eax, dword [0x686028]
and eax, 0x800000
cmp eax, 0
jne 0x4d52a2
push 0xa
push 0x6864d4
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6864d8], eax
or dword [0x686028], 0x800000
mov eax, dword [0x686028]
and eax, 0x1000000
cmp eax, 0
jne 0x4d52d2
push 0xa
push 0x6864dc
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6864e0], eax
or dword [0x686028], 0x1000000
mov eax, dword [0x686028]
and eax, 0x2000000
cmp eax, 0
jne 0x4d5302
push 2
push 0x6864f8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686500], eax
or dword [0x686028], 0x2000000
mov eax, dword [0x686028]
and eax, 0x4000000
cmp eax, 0
jne 0x4d5332
push 0x1b
push 0x68652c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686540], eax
or dword [0x686028], 0x4000000
mov eax, dword [0x686028]
and eax, 0x8000000
cmp eax, 0
jne 0x4d5362
push 2
push 0x686544
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686550], eax
or dword [0x686028], 0x8000000
mov eax, dword [0x686028]
and eax, 0x10000000
cmp eax, 0
jne 0x4d5392
push 3
push 0x686574
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686580], eax
or dword [0x686028], 0x10000000
mov eax, dword [0x686028]
and eax, 0x20000000
cmp eax, 0
jne 0x4d53c2
push 7
push 0x6865ac
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6865b0], eax
or dword [0x686028], 0x20000000
mov eax, dword [0x686028]
and eax, 0x40000000
cmp eax, 0
jne 0x4d53f5
push 0x96
push 0x6865b8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6865cc], eax
or dword [0x686028], 0x40000000
mov eax, dword [0x686028]
and eax, 0x80000000
cmp eax, 0
jne 0x4d5425
push 4
push 0x686644
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686648], eax
or dword [0x686028], 0x80000000
mov eax, dword [0x68664c]
and eax, 1
cmp eax, 0
jne 0x4d5450
push 4
push 0x686650
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686654], eax
or dword [0x68664c], 1
mov eax, dword [0x68664c]
and eax, 2
cmp eax, 0
jne 0x4d547b
push 4
push 0x686658
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68665c], eax
or dword [0x68664c], 2
mov eax, dword [0x68664c]
and eax, 4
cmp eax, 0
jne 0x4d54a6
push 4
push 0x686660
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686664], eax
or dword [0x68664c], 4
mov eax, dword [0x68664c]
and eax, 8
cmp eax, 0
jne 0x4d54d1
push 4
push 0x686668
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68666c], eax
or dword [0x68664c], 8
mov eax, dword [0x68664c]
and eax, 0x10
cmp eax, 0
jne 0x4d54fc
push 4
push 0x686670
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686674], eax
or dword [0x68664c], 0x10
mov eax, dword [0x68664c]
and eax, 0x20
cmp eax, 0
jne 0x4d5527
push 4
push 0x686678
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68667c], eax
or dword [0x68664c], 0x20
mov eax, dword [0x68664c]
and eax, 0x40
cmp eax, 0
jne 0x4d5552
push 4
push 0x686680
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686684], eax
or dword [0x68664c], 0x40
mov eax, dword [0x68664c]
and eax, 0x80
cmp eax, 0
jne 0x4d5582
push 4
push 0x686688
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68668c], eax
or dword [0x68664c], 0x80
mov eax, dword [0x68664c]
and eax, 0x100
cmp eax, 0
jne 0x4d55b2
push 4
push 0x686690
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686694], eax
or dword [0x68664c], 0x100
mov eax, dword [0x68664c]
and eax, 0x200
cmp eax, 0
jne 0x4d55e2
push 4
push 0x686698
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68669c], eax
or dword [0x68664c], 0x200
mov eax, dword [0x68664c]
and eax, 0x400
cmp eax, 0
jne 0x4d5612
push 4
push 0x6866a0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6866a8], eax
or dword [0x68664c], 0x400
mov eax, dword [0x68664c]
and eax, 0x800
cmp eax, 0
jne 0x4d5645
push 0xfa1
push 0x6866cc
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6866d8], eax
or dword [0x68664c], 0x800
mov eax, dword [0x68664c]
and eax, 0x1000
cmp eax, 0
jne 0x4d5675
push 0xa
push 0x686714
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686718], eax
or dword [0x68664c], 0x1000
mov eax, dword [0x68664c]
and eax, 0x2000
cmp eax, 0
jne 0x4d56a5
push 0xa
push 0x68671c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686720], eax
or dword [0x68664c], 0x2000
mov eax, dword [0x68664c]
and eax, 0x4000
cmp eax, 0
jne 0x4d56d5
push 3
push 0x686754
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686758], eax
or dword [0x68664c], 0x4000
mov eax, dword [0x68664c]
and eax, 0x8000
cmp eax, 0
jne 0x4d5709
push 2
push 0x20
push 2
push 0x686a28
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x686a2c], eax
or dword [0x68664c], 0x8000
mov eax, dword [0x68664c]
and eax, 0x10000
cmp eax, 0
jne 0x4d57ad
push 0x10
push 0x677200
call fcn.004bfde0
add esp, 8
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0x14
mov dword [eax + 0x20], 0x12
mov dword [eax + 0x24], 0x10
mov dword [eax + 0x28], 0xe
mov dword [eax + 0x2c], 0xe
mov dword [eax + 0x30], 0xd
mov dword [eax + 0x34], 0xd
mov dword [eax + 0x38], 0xd
mov dword [eax + 0x3c], 0xc
mov dword [eax + 0x40], 0xc
mov dword [eax + 0x44], 0xc
mov dword [eax + 0x48], 0xc
mov dword [eax + 0x4c], 0xb
mov dword [eax + 0x50], 0xb
mov dword [eax + 0x54], 0xb
inc dword [eax + 4]
mov dword [0x686a38], eax
or dword [0x68664c], 0x10000
mov eax, dword [0x68664c]
and eax, 0x20000
cmp eax, 0
jne 0x4d57dd
push 0x11
push 0x686a4c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686a50], eax
or dword [0x68664c], 0x20000
mov eax, dword [0x68664c]
and eax, 0x40000
cmp eax, 0
jne 0x4d580d
push 0x14
push 0x686a8c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686a90], eax
or dword [0x68664c], 0x40000
mov eax, dword [0x68664c]
and eax, 0x80000
cmp eax, 0
jne 0x4d5840
push 0xc8
push 0x686a98
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686a9c], eax
or dword [0x68664c], 0x80000
mov eax, dword [0x68664c]
and eax, 0x100000
cmp eax, 0
jne 0x4d5870
push 0x64
push 0x686ad8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686adc], eax
or dword [0x68664c], 0x100000
mov eax, dword [0x68664c]
and eax, 0x200000
cmp eax, 0
jne 0x4d58a3
push 0x1f5
push 0x686ae0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686ae4], eax
or dword [0x68664c], 0x200000
mov eax, dword [0x68664c]
and eax, 0x400000
cmp eax, 0
jne 0x4d58da
push 0x15e
push 0xa
push 2
push 0x686b9c
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x686ba0], eax
or dword [0x68664c], 0x400000
mov eax, dword [0x68664c]
and eax, 0x800000
cmp eax, 0
jne 0x4d590a
push 8
push 0x686bac
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686bb8], eax
or dword [0x68664c], 0x800000
mov eax, dword [0x68664c]
and eax, 0x1000000
cmp eax, 0
jne 0x4d593a
push 8
push 0x686bbc
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686bc0], eax
or dword [0x68664c], 0x1000000
mov eax, dword [0x68664c]
and eax, 0x2000000
cmp eax, 0
jne 0x4d596a
push 8
push 0x686bc4
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686bc8], eax
or dword [0x68664c], 0x2000000
mov eax, dword [0x68664c]
and eax, 0x4000000
cmp eax, 0
jne 0x4d599a
push 5
push 0x686de8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686dec], eax
or dword [0x68664c], 0x4000000
mov eax, dword [0x68664c]
and eax, 0x8000000
cmp eax, 0
jne 0x4d59cd
push 0x3e8
push 0x686df4
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686dfc], eax
or dword [0x68664c], 0x8000000
mov eax, dword [0x68664c]
and eax, 0x10000000
cmp eax, 0
jne 0x4d59fd
push 3
push 0x686e28
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686e30], eax
or dword [0x68664c], 0x10000000
mov eax, dword [0x68664c]
and eax, 0x20000000
cmp eax, 0
jne 0x4d5a2d
push 3
push 0x686e5c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686e64], eax
or dword [0x68664c], 0x20000000
mov eax, dword [0x68664c]
and eax, 0x40000000
cmp eax, 0
jne 0x4d5a5d
push 0x64
push 0x686e74
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686e78], eax
or dword [0x68664c], 0x40000000
mov eax, dword [0x68664c]
and eax, 0x80000000
cmp eax, 0
jne 0x4d5a97
push 0x98
push 0x98
push 2
push 0x686e90
call fcn.004bfd80
add esp, 0x10
inc dword [eax + 4]
mov dword [0x686e94], eax
or dword [0x68664c], 0x80000000
mov eax, dword [0x686e9c]
and eax, 1
cmp eax, 0
jne 0x4d5ac5
push 0xbb8
push 0x686ea0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686eac], eax
or dword [0x686e9c], 1
mov eax, dword [0x686e9c]
and eax, 2
cmp eax, 0
jne 0x4d5af3
push 0xbb8
push 0x686eb0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686ebc], eax
or dword [0x686e9c], 2
mov eax, dword [0x686e9c]
and eax, 4
cmp eax, 0
jne 0x4d5b1e
push 7
push 0x686f10
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686f14], eax
or dword [0x686e9c], 4
mov eax, dword [0x686e9c]
and eax, 8
cmp eax, 0
jne 0x4d5b4c
push 0x169
push 0x686f4c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686f50], eax
or dword [0x686e9c], 8
mov eax, dword [0x686e9c]
and eax, 0x10
cmp eax, 0
jne 0x4d5b7a
push 0x169
push 0x686f54
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686f58], eax
or dword [0x686e9c], 0x10
mov eax, dword [0x686e9c]
and eax, 0x20
cmp eax, 0
jne 0x4d5ba5
push 0xe
push 0x686fcc
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x686fd0], eax
or dword [0x686e9c], 0x20
mov eax, dword [0x686e9c]
and eax, 0x40
cmp eax, 0
jne 0x4d5bd0
push 0x1d
push 0x687028
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687030], eax
or dword [0x686e9c], 0x40
mov eax, dword [0x686e9c]
and eax, 0x80
cmp eax, 0
jne 0x4d5c00
push 0x45
push 0x6870f8
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6870fc], eax
or dword [0x686e9c], 0x80
mov eax, dword [0x686e9c]
and eax, 0x100
cmp eax, 0
jne 0x4d5c30
push 0x45
push 0x687100
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687104], eax
or dword [0x686e9c], 0x100
mov eax, dword [0x686e9c]
and eax, 0x200
cmp eax, 0
jne 0x4d5c60
push 0x45
push 0x687108
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68710c], eax
or dword [0x686e9c], 0x200
mov eax, dword [0x686e9c]
and eax, 0x400
cmp eax, 0
jne 0x4d5c90
push 3
push 0x687138
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68713c], eax
or dword [0x686e9c], 0x400
mov eax, dword [0x686e9c]
and eax, 0x800
cmp eax, 0
jne 0x4d5cc0
push 3
push 0x687140
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687144], eax
or dword [0x686e9c], 0x800
mov eax, dword [0x686e9c]
and eax, 0x1000
cmp eax, 0
jne 0x4d5cf0
push 0xa
push 0x687194
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687198], eax
or dword [0x686e9c], 0x1000
mov eax, dword [0x686e9c]
and eax, 0x2000
cmp eax, 0
jne 0x4d5d20
push 0x12
push 0x6871f0
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x6871f8], eax
or dword [0x686e9c], 0x2000
mov eax, dword [0x686e9c]
and eax, 0x4000
cmp eax, 0
jne 0x4d5d50
push 0x12
push 0x6871fc
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687200], eax
or dword [0x686e9c], 0x4000
mov eax, dword [0x686e9c]
and eax, 0x8000
cmp eax, 0
jne 0x4d5d80
push 9
push 0x68720c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687214], eax
or dword [0x686e9c], 0x8000
mov eax, dword [0x686e9c]
and eax, 0x10000
cmp eax, 0
jne 0x4d5db0
push 9
push 0x687218
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x68721c], eax
or dword [0x686e9c], 0x10000
mov eax, dword [0x686e9c]
and eax, 0x20000
cmp eax, 0
jne 0x4d5de0
push 0x11
push 0x687250
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687258], eax
or dword [0x686e9c], 0x20000
mov eax, dword [0x686e9c]
and eax, 0x40000
cmp eax, 0
jne 0x4d5e10
push 0x11
push 0x68725c
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687260], eax
or dword [0x686e9c], 0x40000
mov eax, dword [0x686e9c]
and eax, 0x80000
cmp eax, 0
jne 0x4d5e40
push 4
push 0x687268
call fcn.004bfde0
add esp, 8
inc dword [eax + 4]
mov dword [0x687270], eax
or dword [0x686e9c], 0x80000
mov eax, dword [0x686e9c]
and eax, 0x100000
cmp eax, 0
jne 0x4d5e70