Function at 0x4e1440
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xb3
push 0
push 0
dec ecx
jne 0x4e1448
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4e670f
push dword fs:[eax]
mov dword fs:[eax], esp
xor edi, edi
mov word [ebp - 0x52], 0
lea eax, [ebp - 0x18]
call fcn.00403c4c
lea eax, [ebp - 0x1c]
call fcn.00403c4c
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov ebx, dword [eax + 0xfc]
mov eax, ebx
call fcn.00476194
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6728
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6784
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e67d8
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6808
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6838
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6868
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, 0x4e6890
mov eax, ebx
call fcn.0048da0c
mov edx, dword [ebp - 8]
call fcn.00475240
mov eax, ebx
call fcn.00476188
mov eax, ebx
call fcn.00487644
mov edx, 0x4e689c
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x260]
mov ecx, 0xff
call fcn.00403ea4
mov edx, 0x4e68b0
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x360]
mov ecx, 0xff
call fcn.00403ea4
mov edx, 0x4e68c8
mov eax, ebx
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x384]
wait
mov edx, 0x4e68dc
mov eax, ebx
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
fcomp qword [ebp - 0x384]
fnstsw ax
sahf
jae 0x4e1737
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov ebx, dword [eax + 0x100]
mov eax, ebx
call fcn.00476194
mov eax, dword [ebx + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e68f0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6930
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e695c
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e6984
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebx + 0x218]
mov edx, 0x4e69b0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xfc]
mov edx, 0x4e69d0
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov edx, 0x4e6890
mov eax, ebx
call fcn.0048da0c
pop edx
call fcn.00475364
mov eax, ebx
call fcn.00476188
mov eax, ebx
call fcn.00487644
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e1737
mov eax, ebx
call fcn.00477ac4
jmp 0x4e172a
mov edx, 0x4e69e4
mov eax, ebx
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x384]
wait
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xfc]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
fcomp qword [ebp - 0x384]
fnstsw ax
sahf
jae 0x4e1723
mov edx, 0x4e689c
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x260]
mov ecx, 0xff
call fcn.00403ea4
mov edx, 0x4e68b0
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x360]
mov ecx, 0xff
call fcn.00403ea4
jmp 0x4e1737
mov eax, ebx
call fcn.00477d7c
cmp byte [ebx + 0x91], 0
je 0x4e1688
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0x100]
call fcn.00476194
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xfc]
call fcn.00476194
lea eax, [ebp - 0xc]
mov edx, 0x4e69f8
call fcn.00403ce4
lea eax, [ebp - 0x37c]
push eax
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x388]
mov eax, 0x4e6a04
call fcn.0040ae68
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6a20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6a30
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a48
call fcn.00403fd8
jne 0x4e182c
lea eax, [ebp - 0xc]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e1938
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6a30
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a64
call fcn.00403fd8
jne 0x4e1883
lea eax, [ebp - 0xc]
mov edx, 0x4e6a74
call fcn.00403ed0
jmp 0x4e1938
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6a30
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a80
call fcn.00403fd8
jne 0x4e18d7
lea eax, [ebp - 0xc]
mov edx, 0x4e69f8
call fcn.00403ed0
jmp 0x4e1938
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6a30
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a94
call fcn.00403fd8
jne 0x4e192b
lea eax, [ebp - 0xc]
mov edx, 0x4e6aa8
call fcn.00403ed0
jmp 0x4e1938
lea eax, [ebp - 0xc]
mov edx, 0x4e6ab4
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6ac0
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6ad8
call fcn.00403fd8
jne 0x4e198f
lea eax, [ebp - 0xc]
mov edx, 0x4e6ab4
call fcn.00403ed0
jmp 0x4e1a9b
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6ac0
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6ae8
call fcn.00403fd8
jne 0x4e19e6
lea eax, [ebp - 0xc]
mov edx, 0x4e6a74
call fcn.00403ed0
jmp 0x4e1a9b
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6ac0
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6af8
call fcn.00403fd8
jne 0x4e1a3a
lea eax, [ebp - 0xc]
mov edx, 0x4e69f8
call fcn.00403ed0
jmp 0x4e1a9b
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6ac0
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6b0c
call fcn.00403fd8
jne 0x4e1a8e
lea eax, [ebp - 0xc]
mov edx, 0x4e6aa8
call fcn.00403ed0
jmp 0x4e1a9b
lea eax, [ebp - 0xc]
mov edx, 0x4e6a58
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6b3c
call fcn.00403fd8
je 0x4e1b25
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6b50
call fcn.00403fd8
jne 0x4e1b37
lea eax, [ebp - 0xc]
mov edx, 0x4e6ab4
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6b64
call fcn.00403fd8
jne 0x4e1b8e
lea eax, [ebp - 0xc]
mov edx, 0x4e69f8
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6b78
call fcn.00403fd8
je 0x4e1ca1
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6b8c
call fcn.00403fd8
je 0x4e1ca1
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e1ca1
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x38c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov edx, 0x4e6ba0
call fcn.00403fd8
jne 0x4e1cb3
lea eax, [ebp - 0xc]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6bb0
call fcn.00403fd8
je 0x4e1d3d
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6bc8
call fcn.00403fd8
jne 0x4e1d4f
lea eax, [ebp - 0xc]
mov edx, 0x4e6bdc
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6be8
call fcn.00403fd8
je 0x4e1dd9
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6c00
call fcn.00403fd8
jne 0x4e1deb
lea eax, [ebp - 0xc]
mov edx, 0x4e6c14
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6c20
call fcn.00403fd8
jne 0x4e1e42
lea eax, [ebp - 0xc]
mov edx, 0x4e6a74
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6c30
call fcn.00403fd8
jne 0x4e1e99
lea eax, [ebp - 0xc]
mov edx, 0x4e6c4c
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6c58
call fcn.00403fd8
jne 0x4e1ef0
lea eax, [ebp - 0xc]
mov edx, 0x4e6c70
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6c7c
call fcn.00403fd8
jne 0x4e1f47
lea eax, [ebp - 0xc]
mov edx, 0x4e6c90
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6c9c
call fcn.00403fd8
jne 0x4e1f9e
lea eax, [ebp - 0xc]
mov edx, 0x4e6cb4
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6cc0
call fcn.00403fd8
jne 0x4e1ff5
lea eax, [ebp - 0xc]
mov edx, 0x4e6cd8
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6ce4
call fcn.00403fd8
jne 0x4e204c
lea eax, [ebp - 0xc]
mov edx, 0x4e6d00
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6d0c
call fcn.00403fd8
jne 0x4e20a3
lea eax, [ebp - 0xc]
mov edx, 0x4e6d24
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6d30
call fcn.00403fd8
jne 0x4e20f7
lea eax, [ebp - 0xc]
mov edx, 0x4e6d4c
call fcn.00403ed0
jmp 0x4e2158
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6b24
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6d58
call fcn.00403fd8
jne 0x4e214b
lea eax, [ebp - 0xc]
mov edx, 0x4e6d74
call fcn.00403ed0
jmp 0x4e2158
lea eax, [ebp - 0xc]
mov edx, 0x4e6aa8
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6d80
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6d94
call fcn.00403fd8
jne 0x4e21f4
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6da4
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6dbc
call fcn.00403fd8
je 0x4e21f4
lea eax, [ebp - 0xc]
mov edx, 0x4e6c4c
call fcn.00403ed0
jmp 0x4e22c7
lea eax, [ebp - 0x388]
lea edx, [ebp - 0x260]
call fcn.00403e6c
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
je 0x4e225c
lea eax, [ebp - 0x388]
lea edx, [ebp - 0x260]
call fcn.00403e6c
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6ab4
call fcn.00403fd8
jne 0x4e226b
lea eax, [ebp - 0xc]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e22c7
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x37c]
lea edx, [ebp - 0x260]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dcc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x37c]
lea edx, [ebp - 0x360]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dcc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6dd8
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x160]
mov ecx, 0xff
call fcn.00403ea4
cmp byte [ebp - 0x160], 0
jne 0x4e2385
push edi
mov esi, 0x4e6de0
lea edi, [ebp - 0x160]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 4
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dec
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x160]
mov ecx, 0xff
call fcn.00403ea4
mov si, 3
lea eax, [ebp - 0x15f]
cmp byte [eax], 0x20
jne 0x4e23d9
mov byte [eax], 0x30
inc eax
dec si
jne 0x4e23d1
lea eax, [ebp - 0x37c]
lea edx, [ebp - 0x160]
call fcn.00403e6c
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
lea eax, [ebp - 0xc]
mov edx, 0x4e6df8
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
fstp qword [ebp - 0x384]
wait
mov eax, 0x4e6e04
call fcn.0040b624
fcomp qword [ebp - 0x384]
fnstsw ax
sahf
ja 0x4e2477
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e6e18
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
je 0x4e2486
lea eax, [ebp - 0xc]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e2493
lea eax, [ebp - 0xc]
mov edx, 0x4e6df8
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov ebx, dword [eax + 0xe4]
jmp 0x4e2e62
mov edx, 0x4e6e34
mov eax, ebx
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x54]
cmp eax, dword [ebp - 8]
jne 0x4e2e6f
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e6e4c
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6e60
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e6e70
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6e84
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e6e94
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6e84
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
mov edx, 0x4e6ea8
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
cmp dword [ebp - 0x37c], 0
je 0x4e2658
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e6ea8
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6ebc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
jmp 0x4e268d
lea eax, [ebp - 0x37c]
push eax
mov byte [ebp - 0x384], 0x31
mov byte [ebp - 0x380], 2
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6ebc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x18]
mov edx, 0x4e6df8
call fcn.00403ed0
mov edx, 0x4e6ec8
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
jne 0x4e26d2
lea eax, [ebp - 0x18]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e26df
lea eax, [ebp - 0x18]
mov edx, 0x4e6df8
call fcn.00403ed0
mov edx, 0x4e6edc
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
jne 0x4e2717
lea eax, [ebp - 0x18]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e2724
lea eax, [ebp - 0x18]
mov edx, 0x4e6df8
call fcn.00403ed0
mov edx, 0x4e6ef0
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
jne 0x4e275c
lea eax, [ebp - 0x18]
mov edx, 0x4e6a58
call fcn.00403ed0
jmp 0x4e2769
lea eax, [ebp - 0x18]
mov edx, 0x4e6df8
call fcn.00403ed0
inc edi
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e6f08
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
mov edx, 0x4e6f2c
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f40
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dcc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
mov edx, 0x4e6f50
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f64
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f74
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
mov edx, 0x4e6f80
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
lea edx, [ebp - 0x37c]
movzx eax, di
call fcn.00408d04
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6fa4
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dec
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
mov edx, 0x4e6fb4
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
mov eax, dword [0x5065b8]
add eax, 0xa093
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e2b89
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
mov edx, 0x4e6fc8
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
jmp 0x4e2beb
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
cmp di, 0x64
ja 0x4e2e5b
mov edx, 0x4e6fdc
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
movzx eax, di
imul esi, eax, 0x33
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x29d]
mov cl, 0x32
call fcn.00402b54
mov edx, 0x4e6ff0
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x1689]
mov cl, 0x32
call fcn.00402b54
mov edx, 0x4e7004
mov eax, ebx
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7018
call fcn.0040ae68
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x2a75]
mov cl, 0x32
call fcn.00402b54
mov edx, 0x4e6fb4
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x3e61]
mov cl, 0x32
call fcn.00402b54
mov edx, 0x4e6f80
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x524d]
mov cl, 0x32
call fcn.00402b54
mov eax, dword [ebp - 4]
mov word [eax + esi + 0x6639], 0x4601
mov edx, 0x4e6ec8
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x7a25]
mov cl, 0x32
call fcn.00402b54
mov edx, 0x4e6edc
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x494]
mov ecx, 0xff
call fcn.00403ea4
lea edx, [ebp - 0x494]
mov eax, dword [ebp - 4]
lea eax, [eax + esi + 0x8e11]
mov cl, 0x32
call fcn.00402b54
mov eax, ebx
call fcn.00477d7c
cmp byte [ebx + 0x91], 0
je 0x4e24a5
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov ebx, dword [eax + 0xec]
jmp 0x4e32e0
mov edx, 0x4e6e34
mov eax, ebx
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x54]
cmp eax, dword [ebp - 8]
jne 0x4e32ed
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e702c
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6e60
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x1c]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov edx, 0x4e7044
mov eax, ebx
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6e84
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x1c]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov eax, 0x4e7054
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6e84
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x1c]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov byte [ebp - 0x384], 0x31
mov byte [ebp - 0x380], 2
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6ebc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x1c]
call fcn.00403ed0
lea eax, [ebp - 0x1c]
mov edx, 0x4e6a58
call fcn.00403ed0
lea eax, [ebp - 0x1c]
mov edx, 0x4e6a58
call fcn.00403ed0
lea eax, [ebp - 0x1c]
mov edx, 0x4e6df8
call fcn.00403ed0
lea eax, [ebp - 0x1c]
mov edx, 0x4e6a58
call fcn.00403ed0
lea eax, [ebp - 0x1c]
mov edx, 0x4e7068
call fcn.00403ed0
inc word [ebp - 0x52]
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f40
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dcc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f64
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f74
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
movzx eax, word [ebp - 0x52]
movzx edx, di
add eax, edx
lea edx, [ebp - 0x37c]
call fcn.00408d04
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6fa4
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dec
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e6f94
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x388]
push eax
xor eax, eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 0x390], 0xb
lea edx, [ebp - 0x394]
xor ecx, ecx
mov eax, 0x4e7074
call fcn.00409984
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e7084
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0x18]
call fcn.00403ed0
movzx eax, word [ebp - 0x52]
movzx edx, di
add eax, edx
cmp eax, 0x64
ja 0x4e32d9
movzx eax, word [ebp - 0x52]
movzx edx, di
add eax, edx
imul esi, eax, 0x33
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x29d], 0
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x1689], 0
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x2a75], 0
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x3e61], 0
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x524d], 0
mov eax, dword [ebp - 4]
mov word [eax + esi + 0x6639], 0x5401
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x7a25], 0
mov eax, dword [ebp - 4]
mov byte [eax + esi + 0x8e11], 0
mov eax, ebx
call fcn.00477d7c
cmp byte [ebx + 0x91], 0
je 0x4e2e81
lea eax, [ebp - 0x10]
push eax
movzx eax, di
movzx edx, word [ebp - 0x52]
add eax, edx
lea edx, [ebp - 0x37c]
call fcn.00408d04
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e7084
call fcn.00409984
mov si, 1
movzx eax, si
mov edx, dword [ebp - 0x10]
cmp byte [edx + eax - 1], 0x20
jne 0x4e334b
lea eax, [ebp - 0x10]
call fcn.00404098
movzx edx, si
mov byte [eax + edx - 1], 0x30
inc esi
cmp si, 5
jne 0x4e332e
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.00403ed0
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e7090
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e33f7
lea eax, [ebp - 0x37c]
push eax
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e7090
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
jmp 0x4e3404
lea eax, [ebp - 0xc]
mov edx, 0x4e70a4
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
xor eax, eax
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e70b0
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e70c0
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x384], eax
mov byte [ebp - 0x380], 0xb
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6dcc
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
lea eax, [ebp - 0xc]
mov edx, 0x4e70dc
call fcn.00403ed0
lea eax, [ebp - 0xc]
mov edx, 0x4e6a58
call fcn.00403ed0
lea eax, [ebp - 0x37c]
push eax
mov byte [ebp - 0x384], 0x20
mov byte [ebp - 0x380], 2
lea edx, [ebp - 0x384]
xor ecx, ecx
mov eax, 0x4e6f20
call fcn.00409984
mov edx, dword [ebp - 0x37c]
lea eax, [ebp - 0xc]
call fcn.00403ed0
lea eax, [ebp - 0xc]
mov edx, 0x4e70e8
call fcn.00403ed0
push dword [ebp - 0xc]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00403f88
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0xc]
call sub.MagicdllPrice.dll_Price_Dll
mov edx, dword [ebp - 4]
mov dword [edx + 0x2cc], eax
lea ecx, [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2cc]
mov edx, 8
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea eax, [ebp - 0x388]
push eax
mov ecx, 0xc
mov edx, 0x421
mov eax, dword [ebp - 0x20]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
add eax, 0x64
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 4]
call fcn.004e8bac
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
mov edx, 0x4e70f4
call fcn.0043293c
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7018
call fcn.0040ae68
mov eax, dword [ebp - 0x37c]
push eax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov ecx, dword [eax + 0x22c]
dec ecx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7018
call fcn.0040ae68
mov eax, dword [ebp - 0x37c]
push eax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov ecx, dword [eax + 0x22c]
dec ecx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7018
call fcn.0040ae68
lea eax, [ebp - 0x37c]
mov edx, 0x4e7104
call fcn.00403ed0
mov eax, dword [ebp - 0x37c]
push eax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov ecx, dword [eax + 0x22c]
dec ecx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov eax, dword [eax + 0x22c]
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov word [edx + eax*2 + 0x1634], 0x63
mov eax, dword [0x5068d4]
mov eax, dword [eax]
add eax, 0x6458
call fcn.00404098
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov edx, dword [edx + 0x2c4]
mov edx, dword [edx + 0x22c]
mov byte [eax + edx - 2], 0x30
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, dword [eax + 0x22c]
inc edx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
call fcn.00495bb8
lea eax, [ebp - 0x388]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e3e00
lea eax, [ebp - 0x388]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov word [ebp - 0x4e], ax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov bx, word [eax + 0x22c]
dec ebx
mov ax, word [ebp - 0x4e]
test ax, ax
jbe 0x4e3e00
mov word [ebp - 0x56], ax
mov si, 1
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
movzx edi, bx
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0x10
mov ecx, 0x96
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 2
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 3
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e3aaf
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
jmp 0x4e3acd
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xb2
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 5
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xbe
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 6
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xca
mov ecx, 6
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 7
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e3c93
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x24]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
jmp 0x4e3cb1
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
add eax, 0x6458
call fcn.00404098
mov byte [eax + edi - 1], 0x30
lea eax, [ebp - 0x37c]
push eax
movzx eax, si
dec eax
mov edx, eax
shl edx, 4
lea edx, [edx + edx*4]
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x30]
call fcn.004040cc
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov word [edx + edi*2 + 0x1636], ax
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov dl, 1
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x37c]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, dword [eax + 0x22c]
inc edx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
call fcn.00495bb8
inc ebx
inc esi
dec word [ebp - 0x56]
jne 0x4e38a0
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov word [eax + 0x645c], 0
lea eax, [ebp - 0x388]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e60b0
lea eax, [ebp - 0x388]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov word [ebp - 0x4e], ax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov bx, word [eax + 0x22c]
dec ebx
mov ax, word [ebp - 0x4e]
test ax, ax
jbe 0x4e60b0
mov word [ebp - 0x56], ax
mov si, 1
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x54
mov ecx, 3
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0x33
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x6639]
mov edx, 0x4e7114
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e49b6
mov eax, dword [0x5068d4]
mov eax, dword [eax]
inc word [eax + 0x645c]
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
call fcn.00476194
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7120
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, 0x4e71ac
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, 0x4e71e8
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7214
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7240
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7264
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov edx, 0x4e6890
mov eax, dword [ebp - 0x5c]
call fcn.0048da0c
pop edx
call fcn.00475364
mov eax, dword [ebp - 0x5c]
call fcn.00476188
mov eax, dword [ebp - 0x5c]
call fcn.00487644
mov eax, dword [ebp - 0x5c]
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e49b6
mov edx, 0x4e702c
mov eax, dword [ebp - 0x5c]
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
movzx edi, bx
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497de8
mov edx, 0x4e702c
mov eax, dword [ebp - 0x5c]
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
mov edx, 0x4e702c
mov eax, dword [ebp - 0x5c]
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 3
call fcn.00497de8
mov edx, 0x4e7288
mov eax, dword [ebp - 0x5c]
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x1a
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0x10
mov ecx, 0x96
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 2
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e4218
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
jmp 0x4e4236
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xb2
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 5
call fcn.00497de8
push 0x4e729c
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 6
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xca
mov ecx, 6
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 7
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e43c5
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
jmp 0x4e43e3
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
add eax, 0x6458
call fcn.00404098
mov byte [eax + edi - 1], 0x31
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov word [eax + edi*2 + 0x1636], 0x58
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xa
call fcn.00497de8
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xb
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x1e
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a74
call fcn.00403fd8
jne 0x4e44a1
push 0x4e72ac
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xc
call fcn.00497de8
jmp 0x4e44bc
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xc
call fcn.00497de8
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xd
call fcn.00497de8
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x59c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x59c]
lea edx, [ebp - 0x38c]
call fcn.00408b84
mov edx, dword [ebp - 0x38c]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
xor edx, edx
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x388]
call fcn.00403e6c
push dword [ebp - 0x388]
lea edx, [ebp - 0x38c]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
movzx eax, word [eax + 0x645c]
call fcn.00408d04
push dword [ebp - 0x38c]
push 0x4e6df8
lea eax, [ebp - 0x37c]
mov edx, 3
call fcn.00403f88
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, dword [eax + 0x22c]
inc edx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
call fcn.00495bb8
inc ebx
mov eax, dword [ebp - 0x5c]
call fcn.00477ac4
mov word [ebp - 0x50], 0
jmp 0x4e49a6
inc word [ebp - 0x50]
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, 0x4e6e4c
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
movzx edi, bx
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, 0x4e72b8
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, 0x4e72d0
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 2
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, 0x4e6e4c
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 3
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov word [eax + edi*2 + 0x1636], 0x58
mov eax, dword [0x5068d4]
mov eax, dword [eax]
add eax, 0x6458
call fcn.00404098
mov byte [eax + edi - 1], 0x30
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x59c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x59c]
lea edx, [ebp - 0x38c]
call fcn.00408b84
mov edx, dword [ebp - 0x38c]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov cx, word [eax + edi*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
xor edx, edx
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x388]
call fcn.00403e6c
push dword [ebp - 0x388]
lea edx, [ebp - 0x38c]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
movzx eax, word [eax + 0x645c]
call fcn.00408d04
push dword [ebp - 0x38c]
lea edx, [ebp - 0x59c]
movzx eax, word [ebp - 0x50]
call fcn.00408d04
push dword [ebp - 0x59c]
lea eax, [ebp - 0x37c]
mov edx, 3
call fcn.00403f88
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, 0x4e72e4
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e4902
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, 0x4e72e4
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 5
call fcn.00497de8
jmp 0x4e4920
push 0x4e6a58
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 5
call fcn.00497de8
push 0x4e6a58
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 6
call fcn.00497de8
push 0x4e6a58
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 7
call fcn.00497de8
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
mov eax, dword [ebp - 0x5c]
call fcn.00477d7c
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, dword [eax + 0x22c]
inc edx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
call fcn.00495bb8
inc ebx
mov eax, dword [ebp - 0x5c]
cmp byte [eax + 0x91], 0
je 0x4e462f
imul eax, dword [ebp - 0x48], 0x33
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x6639]
mov edx, 0x4e7114
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
je 0x4e60a5
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xdf
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
movzx edi, bx
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0x10
mov ecx, 0x96
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 2
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 3
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e4b99
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
jmp 0x4e4bb7
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xb2
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 5
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xbe
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 6
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xca
mov ecx, 6
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 7
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e4d7d
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
jmp 0x4e4d9b
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
add eax, 0x6458
call fcn.00404098
mov byte [eax + edi - 1], 0x31
lea eax, [ebp - 0x37c]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov word [edx + edi*2 + 0x1636], ax
imul eax, dword [ebp - 0x48], 0x33
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x8e11]
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e4e29
push 0x4e72ac
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xa
call fcn.00497de8
jmp 0x4e4e44
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xa
call fcn.00497de8
imul eax, dword [ebp - 0x48], 0x33
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x7a25]
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e4e83
push 0x4e72ac
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xb
call fcn.00497de8
jmp 0x4e4e9e
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xb
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x1e
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a74
call fcn.00403fd8
jne 0x4e4eff
push 0x4e72ac
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xc
call fcn.00497de8
jmp 0x4e4f1a
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xc
call fcn.00497de8
lea eax, [ebp - 0x37c]
imul edx, dword [ebp - 0x48], 0x33
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 0x524d]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xd
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x18
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6df8
call fcn.00403fd8
jne 0x4e50dd
push 0x4e72ac
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xe
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x20
mov ecx, 0xa
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e5042
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x20
mov ecx, 0xa
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
jmp 0x4e5113
lea eax, [ebp - 0x388]
mov edx, dword [0x5065b8]
add edx, 0x6b5
call fcn.00403e6c
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e50bd
lea eax, [ebp - 0x388]
mov edx, dword [0x5065b8]
add edx, 0x6b5
call fcn.00403e6c
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
jmp 0x4e5113
push 0x4e72fc
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
jmp 0x4e5113
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xe
call fcn.00497de8
push 0
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
lea eax, [ebp - 0x37c]
imul edx, dword [ebp - 0x48], 0x33
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 0x2a75]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x10
call fcn.00497de8
mov eax, dword [0x5065b8]
add eax, 0xc7edc
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e5260
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xdc
mov ecx, 3
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00403ec8
cmp eax, 3
jne 0x4e5260
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xdc
mov ecx, 2
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
jne 0x4e523f
lea eax, [ebp - 0x37c]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x1c
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x11
call fcn.00497de8
jmp 0x4e5304
push 0
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x11
call fcn.00497de8
jmp 0x4e5304
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xdc
mov ecx, 3
mov eax, dword [ebp - 0x28]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6a58
call fcn.00403fd8
jne 0x4e52e8
lea eax, [ebp - 0x37c]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x1c
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x11
call fcn.00497de8
jmp 0x4e5304
push 0
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x11
call fcn.00497de8
lea eax, [ebp - 0x37c]
imul edx, dword [ebp - 0x48], 0x33
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 0x29d]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x12
call fcn.00497de8
lea eax, [ebp - 0x37c]
imul edx, dword [ebp - 0x48], 0x33
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 0x1689]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x13
call fcn.00497de8
lea eax, [ebp - 0x37c]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x14
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x14
call fcn.00497de8
lea eax, [ebp - 0x37c]
imul edx, dword [ebp - 0x48], 0x33
mov ecx, dword [ebp - 4]
lea edx, [ecx + edx + 0x3e61]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x15
call fcn.00497de8
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0x98]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
call fcn.00476194
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7310
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7360
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0x4e7378
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
push dword [ebp - 0x388]
push 0x4e7398
lea eax, [ebp - 0x37c]
mov edx, 3
call fcn.00403f88
mov edx, dword [ebp - 0x37c]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
call fcn.00476188
mov eax, dword [ebp - 0x60]
call fcn.00487644
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e583c
mov edx, 0x4e72b8
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
mov eax, dword [0x5065b8]
add eax, 0xa093
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e55c9
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e55a2
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
movzx edx, bx
mov ecx, dword [0x5068d4]
mov ecx, dword [ecx]
mov word [ecx + edx*2 + 0x1636], ax
jmp 0x4e55ee
mov edx, 0x4e73a8
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x54]
movzx edx, bx
mov ecx, dword [0x5068d4]
mov ecx, dword [ecx]
mov word [ecx + edx*2 + 0x1636], ax
jmp 0x4e55ee
mov edx, 0x4e73a8
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x54]
movzx edx, bx
mov ecx, dword [0x5068d4]
mov ecx, dword [ecx]
mov word [ecx + edx*2 + 0x1636], ax
mov edx, 0x4e6d80
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6df8
call fcn.00403fd8
jne 0x4e5679
mov edx, 0x4e73bc
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e569c
mov edx, 0x4e73bc
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
mov eax, dword [0x506748]
fcomp qword [eax]
fnstsw ax
sahf
jbe 0x4e569c
imul eax, dword [ebp - 0x48], 0x33
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x7a25]
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e576c
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
xor edx, edx
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x37c]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
jmp 0x4e607e
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov dl, 1
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x37c]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
jmp 0x4e607e
lea eax, [ebp - 0x388]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00403ec8
cmp eax, 5
jg 0x4e5933
mov eax, dword [ebp - 0x60]
call fcn.00476194
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e73d0
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7438
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0x4e7378
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
push dword [ebp - 0x388]
push 0x4e7398
lea eax, [ebp - 0x37c]
mov edx, 3
call fcn.00403f88
mov edx, dword [ebp - 0x37c]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
call fcn.00476188
mov eax, dword [ebp - 0x60]
call fcn.00487644
jmp 0x4e5ac0
mov eax, dword [ebp - 0x60]
call fcn.00476194
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7450
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e74b8
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0x4e7378
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
push dword [ebp - 0x388]
push 0x4e7398
lea eax, [ebp - 0x37c]
mov edx, 3
call fcn.00403f88
mov edx, dword [ebp - 0x37c]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
call fcn.00476188
mov eax, dword [ebp - 0x60]
call fcn.00487644
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jne 0x4e5ac0
mov eax, dword [ebp - 0x60]
call fcn.00476194
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, dword [eax]
call dword [edx + 0x40]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7450
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov edx, 0x4e7438
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0x4e74d0
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x388]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x38c]
call fcn.00408b84
mov eax, dword [ebp - 0x38c]
mov ecx, 5
mov edx, 1
call fcn.004040cc
push dword [ebp - 0x388]
push 0x4e7398
lea eax, [ebp - 0x37c]
mov edx, 3
call fcn.00403f88
mov edx, dword [ebp - 0x37c]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x218]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 0x60]
call fcn.00476188
mov eax, dword [ebp - 0x60]
call fcn.00487644
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
call dword [edx + 0xf4]
test eax, eax
jle 0x4e5fe1
mov edx, 0x4e72b8
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x37c]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
mov eax, dword [0x5065b8]
add eax, 0xa093
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e5bd9
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e5bb2
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0x53
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x34]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
movzx edx, bx
mov ecx, dword [0x5068d4]
mov ecx, dword [ecx]
mov word [ecx + edx*2 + 0x1636], ax
jmp 0x4e5bfe
mov edx, 0x4e73a8
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x54]
movzx edx, bx
mov ecx, dword [0x5068d4]
mov ecx, dword [ecx]
mov word [ecx + edx*2 + 0x1636], ax
jmp 0x4e5bfe
mov edx, 0x4e73a8
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x54]
movzx edx, bx
mov ecx, dword [0x5068d4]
mov ecx, dword [ecx]
mov word [ecx + edx*2 + 0x1636], ax
mov edx, 0x4e6f2c
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6df8
call fcn.00403fd8
jne 0x4e5d5b
mov edx, 0x4e74f4
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e5cbe
mov edx, 0x4e74f4
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
jmp 0x4e5d93
lea eax, [ebp - 0x388]
mov edx, dword [0x5065b8]
add edx, 0x6b5
call fcn.00403e6c
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e5d3a
lea eax, [ebp - 0x388]
mov edx, dword [0x5065b8]
add edx, 0x6b5
call fcn.00403e6c
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
jmp 0x4e5d93
push 0x4e72fc
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
jmp 0x4e5d93
push 0
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xe
call fcn.00497de8
push 0
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0xf
call fcn.00497de8
mov edx, 0x4e6d80
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
mov edx, 0x4e6df8
call fcn.00403fd8
jne 0x4e5e1e
mov edx, 0x4e73bc
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
lea edx, [ebp - 0x388]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e5e41
mov edx, 0x4e73bc
mov eax, dword [ebp - 0x60]
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
mov eax, dword [0x506748]
fcomp qword [eax]
fnstsw ax
sahf
jbe 0x4e5e41
imul eax, dword [ebp - 0x48], 0x33
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x7a25]
mov edx, 0x4e6fbc
xor ecx, ecx
mov cl, byte [eax]
inc ecx
call fcn.00402c08
jne 0x4e5f11
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
xor edx, edx
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x37c]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
jmp 0x4e607e
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov dl, 1
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x37c]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
jmp 0x4e607e
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7018
call fcn.0040ae68
lea eax, [ebp - 0x37c]
mov edx, 0x4e7504
call fcn.00403ed0
mov eax, dword [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
lea eax, [ebp - 0x37c]
push eax
movzx ecx, bx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
lea eax, [ebp - 0x37c]
mov edx, 0x4e7510
call fcn.00403ed0
mov eax, dword [ebp - 0x37c]
call fcn.004565c8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, dword [eax + 0x22c]
inc edx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
call fcn.00495bb8
inc ebx
inc esi
dec word [ebp - 0x56]
jne 0x4e3eaa
lea eax, [ebp - 0x388]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e66aa
lea eax, [ebp - 0x388]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov word [ebp - 0x4e], ax
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov bx, word [eax + 0x22c]
dec ebx
mov ax, word [ebp - 0x4e]
test ax, ax
jbe 0x4e66aa
mov word [ebp - 0x56], ax
mov si, 1
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
movzx edi, bx
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 1
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0x10
mov ecx, 0x96
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 2
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 4
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 3
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e6359
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xa6
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
jmp 0x4e6377
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 4
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xb2
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 5
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xbe
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 6
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xca
mov ecx, 6
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 7
call fcn.00497de8
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
cmp dword [ebp - 0x37c], 0
je 0x4e653d
lea eax, [ebp - 0x388]
push eax
movzx eax, si
dec eax
imul edx, eax, 0xe7
add edx, 0xd0
mov ecx, 0xc
mov eax, dword [ebp - 0x2c]
call fcn.004040cc
mov eax, dword [ebp - 0x388]
lea edx, [ebp - 0x37c]
call fcn.00408b84
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov dword [ebp - 0x498], eax
fild dword [ebp - 0x498]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x37c]
mov eax, 0x4e7110
call fcn.00409b30
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
jmp 0x4e655b
push 0x4e6df8
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 8
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
add eax, 0x6458
call fcn.00404098
mov byte [eax + edi - 1], 0x30
lea eax, [ebp - 0x37c]
push eax
movzx eax, si
dec eax
mov edx, eax
shl edx, 4
lea edx, [edx + edx*4]
add edx, 0x12
mov ecx, 2
mov eax, dword [ebp - 0x38]
call fcn.004040cc
mov eax, dword [ebp - 0x37c]
call fcn.00408d34
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov word [edx + edi*2 + 0x1636], ax
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf8]
mov edx, 0x4e68dc
call fcn.00476bf8
mov edx, dword [eax]
call dword [edx + 0x4c]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x38c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
xor edx, edx
call fcn.00497d78
mov eax, dword [ebp - 0x38c]
lea edx, [ebp - 0x388]
call fcn.00408b84
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x598]
mov ecx, 0xff
call fcn.00403ea4
lea eax, [ebp - 0x598]
push eax
push 1
lea eax, [ebp - 0x494]
push eax
movzx eax, bx
mov edx, dword [0x5068d4]
mov edx, dword [edx]
mov cx, word [edx + eax*2 + 0x1636]
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov dl, 1
call fcn.004f55f0
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x37c]
call fcn.00403e6c
mov eax, dword [ebp - 0x37c]
push eax
mov ecx, edi
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, 0x19
call fcn.00497de8
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
mov edx, dword [eax + 0x22c]
inc edx
mov eax, dword [0x5068d4]
mov eax, dword [eax]
mov eax, dword [eax + 0x2c4]
call fcn.00495bb8
inc ebx
inc esi
dec word [ebp - 0x56]
jne 0x4e614a
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xf4]
call fcn.00476194
mov eax, dword [0x5069c4]
mov eax, dword [eax]
mov eax, dword [eax + 0xe8]
call fcn.00476194
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e6716
lea eax, [ebp - 0x59c]
call fcn.00403c4c
lea eax, [ebp - 0x38c]
mov edx, 2
call fcn.00403c70
lea eax, [ebp - 0x37c]
call fcn.00403c4c
lea eax, [ebp - 0x40]
mov edx, 0xe
call fcn.00403c70
ret