Function at 0x4f4ce0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61bddd
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x653af8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x2c]
mov dword [esi + 0x2fc], eax
mov al, byte [ebp + 0x28]
mov byte [esi + 0x300], al
call fcn.004f8e50
call fcn.004bee10
mov ebx, eax
call fcn.004bf0b0
cmp byte [ebp + 8], 0
mov edx, 0x601
mov edi, 0x4925d8
mov dword [ebp - 0x3c], 0x602
movzx ecx, word [eax + 6]
mov eax, ecx
mov dword [ebp - 0x38], eax
jne 0x4f5aa1
cmp cx, dx
jb 0x4f50ed
cmp byte [ebp + 0x28], 0
jne 0x4f50ed
movzx eax, word [0x659715]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f4da0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0
push 0x4eb110
push ecx
lea ecx, [esi + 0x1e4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659717]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f4e20
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 1
push 0x4edd20
push eax
lea ecx, [esi + 0x1e4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659719]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f4ea0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 2
push 0x4eb140
push eax
lea ecx, [esi + 0x1e4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65971b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f4f20
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 3
push 0x4edd60
push eax
lea ecx, [esi + 0x1e4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65971d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f4fa0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2e8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 4
push 0x4ea1c0
push ecx
lea ecx, [esi + 0xc4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65971f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5020
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 5
push 0x4ed830
push eax
lea ecx, [esi + 0xc4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659715]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f50a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 6
push 0x4eb110
push ecx
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
jmp 0x4f53e9
movzx eax, word [0x659715]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5121
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2dc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 7
push 0x4eb110
push ecx
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f51aa
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 8
cmp edx, 0x1000
jb 0x4f5199
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c41
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x659717]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f51e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 9
push 0x4edd20
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5269
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xa
cmp edx, 0x1000
jb 0x4f5258
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c46
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x659719]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f52a0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2e0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xb
push 0x4eb140
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5329
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xc
cmp edx, 0x1000
jb 0x4f5318
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c4b
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x65971b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5360
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xd
push 0x4edd60
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f53e9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0xe
cmp edx, 0x1000
jb 0x4f53d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c50
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
cmp ax, word [ebp - 0x3c]
jae 0x4f557c
movzx eax, word [0x65971d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5430
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xf
push 0x4ea1c0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f54b9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x10
cmp edx, 0x1000
jb 0x4f54a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c55
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x65971f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f54f0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x11
push 0x4ed830
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5579
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x12
cmp edx, 0x1000
jb 0x4f5568
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c5a
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x4f5795
cmp byte [ebp + 0x28], 0
jne 0x4f5795
movzx eax, word [0x659723]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f55c8
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1c0]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x13
push 0x4eb610
push ecx
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659725]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5647
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x14
push 0x4eb770
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659727]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f56c6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x15
push 0x4eb6b0
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659729]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5745
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x16
push 0x4eb710
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
jmp 0x4f5a99
movzx eax, word [0x659723]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f57d0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x17
push 0x4eb610
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5859
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x18
cmp edx, 0x1000
jb 0x4f5848
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c5f
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x659725]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5890
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x19
push 0x4eb770
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5919
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1a
cmp edx, 0x1000
jb 0x4f5908
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c64
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x659727]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5950
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1b
push 0x4eb6b0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f59d9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1c
cmp edx, 0x1000
jb 0x4f59c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c69
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x659729]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5a10
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x1d
push 0x4eb710
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5a99
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x1e
cmp edx, 0x1000
jb 0x4f5a88
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c6e
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov edx, 0x601
cmp byte [ebp + 0x10], 0
je 0x4f5fe8
cmp ax, dx
jb 0x4f5d70
movzx eax, word [0x65979b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5ae8
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x3cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x1f
push 0x4ebfa0
push ecx
lea ecx, [esi + 0x184]
call fcn.004fcc00
mov edx, dword [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x492708
cmp edx, 0x10
jb 0x4f5b74
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
mov dword [ebp - 4], 0x20
cmp edx, 0x1000
jb 0x4f5b63
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4f8c73
push edx
push ecx
call fcn.006024e7
add esp, 8
mov dword [ebp - 4], 0xffffffff
movzx eax, word [0x65979d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5ba8
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x3d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x21
push 0x4ec390
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65979f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5c27
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x3d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x22
push 0x4eb260
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597f7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5ca6
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x454]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x23
push 0x4ec020
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597f9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5d25
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x458]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x24
push 0x4ec250
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65979b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5da4
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x3cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x25
push 0x4ebfa0
push ecx
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65979d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5e20
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x3d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x26
push 0x4ec390
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65979f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5ea0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x3d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x27
push 0x4eb260
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597f7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5f20
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x454]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x28
push 0x4ec020
push ecx
lea ecx, [esi + 0x34]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597f9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f5fa0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x458]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x29
push 0x4ec250
push eax
lea ecx, [esi + 0x34]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0xc], 0
jne 0x4f6001
cmp byte [ebp + 0x20], 0
jne 0x4f6001
mov al, byte [ebp + 0x14]
test al, al
je 0x4f62a1
jmp 0x4f6007
cmp byte [ebp + 0x14], 0
je 0x4f601f
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x4fc970
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
mov eax, dword [ebp - 0x38]
mov ecx, 0x601
cmp ax, cx
jb 0x4f619f
cmp byte [ebp + 0x28], 0
jne 0x4f619f
cmp byte [ebp + 0x24], 0
je 0x4f60bf
cmp ax, word [ebp - 0x3c]
jae 0x4f60bf
movzx eax, word [0x659753]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2a
push 0x4ea720
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659755]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x2b
jmp 0x4f6272
movzx eax, word [0x659753]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f60f3
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x208]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x2c
push 0x4ea720
push ecx
lea ecx, [esi + 0xf4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659755]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6172
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
mov dword [ebp - 4], 0x2d
lea ecx, [esi + 0xf4]
jmp 0x4f6275
movzx eax, word [0x659753]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f61d3
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x208]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x2e
push 0x4ea720
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659755]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6250
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
mov dword [ebp - 4], 0x2f
lea ecx, [esi + 4]
push dword [ebx + 0x20c]
lea eax, [ebp - 0x30]
push 0x4eac10
push eax
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0xc], 0
jne 0x4f62b4
mov al, byte [ebp + 0x14]
cmp byte [ebp + 0x10], 0
jne 0x4f62b4
test al, al
jne 0x4f62b4
cmp byte [ebp + 0x18], al
je 0x4f6943
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x659735]
push eax
jb 0x4f66b8
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f62f7
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1cc]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x30
push 0x4ebc60
push ecx
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659737]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6376
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x31
push 0x4ebdc0
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659739]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f63f5
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2fc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x32
push 0x4eb810
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659735]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6474
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x33
push 0x4ebc60
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659737]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f64f0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x34
push 0x4ebdc0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659739]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6570
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2fc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x35
push 0x4eb810
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x4f6828
movzx eax, word [0x659733]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6600
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d8]
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0x39
push 0x4ebeb0
push ecx
lea ecx, [esi + 0x154]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659731]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6680
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d8]
mov dword [ebp - 4], 0x3a
lea ecx, [esi + 0x154]
push 0x4ebb10
jmp 0x4f6810
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f66e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x36
push 0x4ebc60
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659737]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6760
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1dc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x37
push 0x4ebdc0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659739]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f67e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x2fc]
mov dword [ebp - 4], 0x38
lea ecx, [esi + 4]
push 0x4eb810
lea eax, [ebp - 0x30]
push eax
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659733]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6860
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3b
push 0x4ebeb0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659731]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f68e0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x1c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3c
push 0x4ebb10
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0x18], 0
je 0x4f6943
mov ecx, esi
call fcn.004fad90
mov ecx, esi
call fcn.004f08b0
mov ecx, esi
call fcn.004f9200
push 0x186
push 0
push 0x65984b
call fcn.006046d0
add esp, 0xc
cmp byte [ebp + 0xc], 0
jne 0x4f6967
cmp byte [ebp + 0x20], 0
je 0x4f6c7f
mov ecx, dword [esi + 0x2fc]
mov eax, 0x601
cmp word [ebp - 0x38], ax
movzx eax, word [0x65976b]
push eax
jb 0x4f6a84
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x14], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f69b0
sub ecx, dword [ebp - 0x14]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x36c]
lea eax, [esi + 0xf4]
mov dword [ebp - 4], 0x3d
push 0x4ea350
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], eax
push ecx
mov ecx, eax
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65976d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6a34
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3e
push 0x4ea630
push eax
lea ecx, [esi + 0xf4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
jmp 0x4f6b81
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6ab0
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x36c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x3f
push 0x4ea350
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65976d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6b30
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x370]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x40
push 0x4ea630
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
movzx eax, word [0x65976f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6bb5
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x374]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x41
push 0x4ea440
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659771]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f6c31
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x378]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x42
push 0x4ea540
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0xc], 0
jne 0x4f6c92
cmp byte [ebp + 0x14], 0
lea eax, [esi + 0xf4]
mov dword [ebp - 0x14], eax
je 0x4f7d00
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x4f7151
cmp byte [ebp + 0x28], 0
jne 0x4f7151
cmp byte [ebp + 0x24], 0
lea edi, [esi + 0xf4]
jne 0x4f6d4b
movzx eax, word [0x659757]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x43
push 0x4ede80
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659759]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x44
push 0x4ec820
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65975b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x45
push 0x4ed960
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65975f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x46
push 0x4ed880
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659761]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x47
push 0x4eb3d0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65975d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x48
push 0x4edad0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659763]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x49
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov ecx, edi
push 0x4eb4d0
push eax
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659751]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x344]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4a
push 0x4eb2f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659765]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4b
push 0x4ea250
push eax
lea ecx, [esi + 0x124]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65973f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4c
push 0x4eb000
push eax
lea ecx, [esi + 0x124]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659743]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x310]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4d
push 0x4eab10
lea edi, [esi + 0x1b4]
push eax
mov ecx, edi
call fcn.004fcc00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.004ba6a0
movzx eax, word [0x659747]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4e
push 0x4ec7f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659749]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x4f
push 0x4ec3f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65974b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x50
push 0x4ec4f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65974d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x51
push 0x4eb190
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65974f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x52
push 0x4edda0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
lea edi, [esi + 4]
jmp 0x4f7817
cmp byte [ebp + 0x24], 0
jne 0x4f7258
movzx eax, word [0x659757]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7190
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x53
push 0x4ede80
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659759]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7210
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x54
push 0x4ec820
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65975b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7290
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x350]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x55
push 0x4ed960
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65975f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7310
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x358]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x56
push 0x4ed880
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659761]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7390
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x35c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x57
push 0x4eb3d0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65975d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7410
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x354]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x58
push 0x4edad0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659763]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7490
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x360]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x59
push 0x4eb4d0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659751]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7510
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x344]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5a
push 0x4eb2f0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659765]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7590
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x214]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5b
push 0x4ea250
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65973f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
mov dword [ebp - 0x1c], 0
mov edx, edi
mov dword [ebp - 0x18], 0xf
cmovne edx, eax
mov byte [ebp - 0x2c], 0
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x34], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4f7610
sub ecx, dword [ebp - 0x34]
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.004c22a0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x308]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5c
push 0x4eb000
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659743]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
test eax, eax
lea ecx, [ebp - 0x2c]
cmovne edi, eax
push edi
call fcn.004b8ac0
mov dword [ebp - 0x30], 0x492708
push dword [ebx + 0x310]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5d
push 0x4eab10
lea edi, [esi + 4]
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659747]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x318]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5e
push 0x4ec7f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659749]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x31c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x5f
push 0x4ec3f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65974b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x320]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x60
push 0x4ec4f0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65974d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x324]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x61
push 0x4eb190
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65974f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x328]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x62
push 0x4edda0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
mov eax, dword [ebp - 0x3c]
cmp word [ebp - 0x38], ax
jb 0x4f78ee
cmp byte [ebp + 0x24], 0
je 0x4f78c0
movzx eax, word [0x659757]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x348]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x4ede80
push eax
mov dword [ebp - 4], 0x63
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659759]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x34c]
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x30]
push 0x4ec820
push eax
mov dword [ebp - 4], 0x64
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659741]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x65
lea ecx, [esi + 0x154]
jmp 0x4f79ad
cmp byte [ebp + 0x24], 0
je 0x4f7988
movzx eax, word [0x659757]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x348]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x66
push 0x4ede80
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659759]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x34c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x67
push 0x4ec820
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659741]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x68
mov ecx, edi
push dword [ebx + 0x30c]
lea eax, [ebp - 0x30]
push 0x4eaa10
push eax
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659745]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x314]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x69
push 0x4ec7c0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659777]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x384]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6a
push 0x4ee460
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659779]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x388]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6b
push 0x4ee240
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65977b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x38c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6c
push 0x4edfe0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65977d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x390]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6d
push 0x4ee560
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659783]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x39c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6e
push 0x4ee140
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659785]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x6f
push 0x4ee330
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65977f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x394]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x70
push 0x4edfe0
push eax
mov ecx, edi
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659781]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x398]
mov dword [ebp - 4], 0x71
push 0x4ee0e0
lea eax, [ebp - 0x30]
mov ecx, edi
push eax
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0x1c], 0
jne 0x4f7cfa
movzx eax, word [0x659841]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x2d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x72
push 0x4ec5f0
push eax
lea ecx, [esi + 0x94]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659843]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x2d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x73
push 0x4ec6e0
push eax
lea ecx, [esi + 0x94]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0xc], 0
jne 0x4f7d0a
cmp byte [ebp + 0x20], 0
je 0x4f8c15
movzx eax, word [0x659809]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x478]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x74
push 0x4ecc40
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65980f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x484]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x75
push 0x4ed1e0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65981d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4a0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x76
push 0x4ed3b0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659825]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x77
push 0x4ed5d0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659829]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x78
push dword [ebx + 0x4b8]
lea eax, [ebp - 0x30]
push 0x4ecf00
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659831]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4c8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x79
push 0x4ecf60
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659835]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4d0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7a
push 0x4ecfe0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659839]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4d8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7b
push 0x4ed080
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65983b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x2b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7c
push 0x4ec970
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659803]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x46c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7d
push 0x4eca30
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659805]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x470]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7e
push 0x4ecd50
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659807]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x474]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x7f
push 0x4ecb30
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65980b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x47c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x80
push 0x4ed170
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65980d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x81
push dword [ebx + 0x480]
lea eax, [ebp - 0x30]
push 0x4ed2c0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659811]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x488]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x82
push 0x4ed250
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659813]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x48c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x83
push 0x4ed0d0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659815]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x490]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x84
push 0x4ed120
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659817]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x494]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x85
push 0x4ed330
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659819]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x498]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x86
push 0x4ed3f0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65981b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x49c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x87
push 0x4ed370
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659827]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x88
push 0x4ece50
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65981f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4a4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x89
push 0x4ed430
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659821]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x8a
push dword [ebx + 0x4a8]
lea eax, [ebp - 0x30]
push 0x4ed6a0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659823]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8b
push 0x4ed500
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65982b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4bc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8c
push 0x4ece80
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65982d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4c0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8d
push 0x4ecec0
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65982f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4c4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8e
push 0x4ecf30
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659833]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4cc]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x8f
push 0x4ecf90
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659837]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x4d4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x90
push 0x4ed030
push eax
lea ecx, [esi + 0x64]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
cmp byte [ebp + 0xc], 0
je 0x4f8c15
mov eax, 0x601
cmp word [ebp - 0x38], ax
jb 0x4f8817
cmp byte [ebp + 0x28], 0
jne 0x4f8817
movzx eax, word [0x659767]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x91
push 0x4eaf40
push eax
lea ecx, [esi + 0xf4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659773]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x92
push 0x4ed770
push eax
lea ecx, [esi + 0xf4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659769]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x93
push 0x4eafa0
push eax
lea ecx, [esi + 0xf4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659775]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x94
push 0x4ed7d0
push eax
lea ecx, [esi + 0xf4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659789]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x95
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
push 0x4ed850
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65978b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x96
push 0x4edcf0
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65978d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x97
push 0x4eb2c0
push eax
lea ecx, [esi + 0x184]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x98
push 0x4eb5c0
push eax
lea ecx, [esi + 0xc4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597b9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x99
push 0x4edc40
push eax
lea ecx, [esi + 0xc4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
jmp 0x4f8c09
movzx eax, word [0x659767]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x364]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9a
push 0x4eaf40
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659773]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x37c]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9b
push 0x4ed770
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659769]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x368]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9c
push 0x4eafa0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659775]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x380]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9d
push 0x4ed7d0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659789]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
mov dword [ebp - 4], 0x9e
push dword [ebx + 0x3a8]
lea eax, [ebp - 0x30]
push 0x4ed850
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65978b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3ac]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0x9f
push 0x4edcf0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65978d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3b0]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa0
push 0x4eb2c0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597b7]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3e8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa1
push 0x4eb5c0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x6597b9]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3ec]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa2
push 0x4edc40
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65972b]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x2f4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa3
push 0x4eb840
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65978f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x3b4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa4
push 0x4edc90
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65972d]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x2f8]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa5
push 0x4eb8a0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x65972f]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x30]
call fcn.004b84d0
push dword [ebx + 0x1e4]
lea eax, [ebp - 0x30]
mov dword [ebp - 4], 0xa6
push 0x4eba00
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
movzx eax, word [0x659791]
mov ecx, dword [esi + 0x2fc]
push eax
call fcn.0051de50
push eax
lea ecx, [ebp - 0x58]
call fcn.004b84d0
mov dword [ebp - 4], 0xa7
push dword [ebx + 0x3b8]
lea eax, [ebp - 0x58]
push 0x4edcc0
push eax
lea ecx, [esi + 4]
call fcn.004fcc00
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.004ba6a0
mov ecx, esi
call fcn.004f0130
mov ecx, esi
call fcn.004f0270
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00602a00
mov esp, ebp
pop ebp
ret 0x28
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
call fcn.0053accc
int3