Function at 0x47d350
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x16c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x120], ecx
mov eax, dword [eax]
mov edx, eax
add edx, dword [eax + 0xc]
je 0x47d3a9
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x47d3a9
xor eax, eax
cmp byte [edx], 0
je 0x47d3a9
mov ebx, dword [ebp - 0x120]
jmp 0x47d39a
cmp byte [edx + eax], 0
je 0x47f299
add eax, 1
cmp ecx, eax
jne 0x47d390
mov dword [ebp - 0x120], ebx
mov ebx, ecx
mov edi, dword [0x5a3fa0]
mov dword [esp + 4], ebx
mov dword [esp], edx
mov dword [ebp - 0x13c], edi
call edi
mov dword [esp + 4], 1
mov dword [ebp - 0x114], eax
mov dword [esp], 0x4f2ffb
call edi
mov dword [ebp - 0x110], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov edx, dword [eax]
cmp edx, 1
jbe 0x47ef44
movsx edx, byte [eax + 0xb]
mov ecx, dword [ebp + 8]
shr edx, 0x1f
mov dword [esp + 4], edx
mov eax, dword [eax + 4]
add eax, 1
mov dword [esp], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
call dword [0x5a3dd4]
mov eax, dword [ebp + 8]
sub esp, 8
mov ebx, dword [eax]
mov edx, dword [ebx + 0xc]
cmp dword [ebx + 4], 0x40e
jne 0x47d43e
add ebx, edx
mov edi, 0x4f2ffd
mov ecx, 3
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
je 0x47d751
lea eax, [ebp - 0x114]
mov dword [esp + 4], 0
mov dword [esp], 0x4f3005
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x140], eax
call dword [0x5a40d4]
sub esp, 8
cmp eax, 0xffffffff
je 0x47ef57
lea eax, [ebp - 0x114]
mov dword [esp + 4], 0xe
mov dword [esp], str.ATDEFAULT_nOK_n
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x13c]
call eax
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
mov dword [esp + 4], 1
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x124], eax
mov dword [esp], eax
call dword [0x5a4188]
mov edx, dword [ebp - 0x30]
sub esp, 8
mov ebx, eax
mov ecx, dword [edx]
test ecx, ecx
je 0x47d4d6
cmp ecx, 0xffffffff
je 0x47d4ef
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
jne 0x47d4ef
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
test ebx, ebx
jne 0x47eec5
mov ebx, dword [ebp - 0x120]
mov ecx, dword [ebx + 0x114]
call dword [0x5a3f18]
mov eax, dword [ebx + 0x11c]
mov ecx, dword [eax + 0x1c0]
mov dword [esp], 0
call dword [0x5a4708]
sub esp, 4
call fcn.00487470
lea esi, [eax + 0x20]
mov dword [eax + 0x3c], 0x2580
mov ebx, eax
mov ecx, esi
call fcn.00479370
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebx + 0x3c]
mov dword [ebp - 0x104], ecx
mov eax, dword [ecx]
add eax, 1
cmp eax, 1
ja 0x47fc96
lea eax, [ebp - 0x104]
mov dword [esp + 4], edx
mov ecx, esi
mov dword [esp], eax
mov dword [ebp - 0x128], eax
call fcn.00479200
mov eax, dword [ebp - 0x104]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x47f591
cmp edx, 0xffffffff
je 0x47d599
lock sub dword [eax], 1
mov eax, dword [ebp - 0x104]
je 0x47f591
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x11c]
mov ebx, dword [eax + 0x2d4]
mov dword [esp + 4], 4
mov dword [esp], 0x4f3018
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov ecx, ebx
mov dword [esp], eax
call dword [0x5a47ec]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f5af
cmp edx, 0xffffffff
je 0x47d5f8
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f5af
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 0x118]
call dword [0x5a3f20]
lea eax, [ebp - 0x60]
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x120]
lea ebx, [eax + 8]
add eax, 0xa8
mov dword [ebp - 0x134], eax
mov eax, dword [0x5a3dc8]
mov dword [ebp - 0x138], eax
nop
lea esi, [esi]
mov edx, dword [ebx + 4]
mov dword [ebp - 0x108], edx
mov eax, dword [edx]
add eax, 1
cmp eax, 1
ja 0x47ee70
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x30], edx
mov eax, dword [edx]
add eax, 1
cmp eax, 1
ja 0x47ee60
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0x48], edx
mov eax, dword [edx]
add eax, 1
cmp eax, 1
ja 0x47ee50
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x60], edx
mov eax, dword [edx]
add eax, 1
cmp eax, 1
ja 0x47ee40
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x128]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x12c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x130]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x120]
mov dword [esp], eax
call fcn.0047b1d0
mov eax, dword [ebp - 0x60]
sub esp, 0x10
mov edx, dword [eax]
test edx, edx
je 0x47ee20
cmp edx, 0xffffffff
je 0x47d6f0
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
je 0x47ee20
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
test edx, edx
je 0x47ee00
cmp edx, 0xffffffff
je 0x47d70f
lock sub dword [eax], 1
mov eax, dword [ebp - 0x48]
je 0x47ee00
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
test edx, edx
je 0x47ede1
cmp edx, 0xffffffff
je 0x47d72e
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47ede1
mov edx, dword [ebp - 0x104]
mov eax, dword [edx + 4]
test eax, eax
je case.0x47d74a.16
cmp dword [ebx], 0x13
ja case.0x47d74a.16
mov ecx, dword [ebx]
jmp dword [ecx*4 + 0x4f317c]
lea esi, [ebx + 0x403]
mov edi, 0x4f3001
mov ecx, 3
repe cmpsb byte [esi], byte es:[edi]
jne 0x47d43e
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
call fcn.00487470
lea esi, [ebx + 0x40b]
mov edi, ebx
mov eax, 0xffff
mov esi, esi
lea edi, [edi]
movzx edx, byte [edi]
mov dword [ebp - 0x120], esi
xor eax, edx
mov edx, 8
mov esi, eax
shr eax, 1
mov ecx, eax
and esi, 1
xor ecx, 0xa001
test esi, esi
cmovne eax, ecx
sub edx, 1
jne 0x47d7a0
mov esi, dword [ebp - 0x120]
add edi, 1
cmp edi, esi
jne 0x47d790
movzx edx, byte [ebx + 0x40c]
movzx ecx, byte [ebx + 0x40b]
shl edx, 8
add edx, ecx
cmp eax, edx
je 0x480350
mov eax, dword [ebp - 0x110]
mov edx, dword [eax]
test edx, edx
je 0x47ee79
cmp edx, 0xffffffff
je 0x47d806
lock sub dword [eax], 1
mov eax, dword [ebp - 0x110]
je 0x47ee79
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
test edx, edx
je 0x47eea2
cmp edx, 0xffffffff
je 0x47d82b
lock sub dword [eax], 1
mov eax, dword [ebp - 0x114]
je 0x47eea2
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp + 4], 1
mov dword [esp], 0x4f3173
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [0x5a417c]
mov eax, dword [ebp - 0x30]
sub esp, 0x10
mov edx, dword [eax]
test edx, edx
je 0x47f3b4
cmp edx, 0xffffffff
je 0x47d8a0
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f3b4
mov eax, dword [ebp - 0x48]
mov esi, dword [0x5a4184]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0x10
lea ecx, [eax + edx*4 + 0x10]
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call esi
mov edi, dword [ebp - 0x120]
sub esp, 8
mov dword [edi + 0xf8], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0x10
lea ecx, [eax + edx*4 + 0x14]
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call esi
mov byte [edi + 0xfc], al
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x18]
call esi
sub esp, 8
test eax, eax
mov eax, dword [ebp - 0x48]
setne byte [edi + 0xfd]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x1c]
call esi
mov dword [edi + 0x100], eax
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x20]
call esi
mov dword [edi + 0x104], eax
mov eax, dword [edi + 0x11c]
sub esp, 8
mov ecx, dword [ebp - 0x124]
mov esi, dword [0x5a4174]
mov edi, dword [eax + 0x1f4]
mov eax, dword [ebp - 0x48]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x10]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x124]
sub esp, 0xc
mov ecx, edi
mov dword [esp], eax
call dword [0x5a481c]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f396
cmp edx, 0xffffffff
je 0x47d9d4
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f396
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov eax, dword [eax + 0x11c]
mov edi, dword [eax + 0x224]
mov eax, dword [ebp - 0x48]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x14]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x124]
sub esp, 0xc
mov ecx, edi
mov dword [esp], eax
call dword [0x5a47ec]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f31e
cmp edx, 0xffffffff
je 0x47da41
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f31e
mov edi, dword [ebp - 0x120]
mov esi, dword [0x5a47f0]
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x27c]
mov eax, dword [edi + 0x100]
mov dword [esp], eax
call esi
mov eax, dword [edi + 0x11c]
sub esp, 4
mov ecx, dword [eax + 0x28c]
mov eax, dword [edi + 0x104]
mov dword [esp], eax
call esi
jmp 0x47dccc
mov dword [esp + 4], 1
mov dword [esp], 0x4f3173
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [0x5a417c]
mov eax, dword [ebp - 0x30]
sub esp, 0x10
mov edx, dword [eax]
test edx, edx
je 0x47f378
cmp edx, 0xffffffff
je 0x47daee
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f378
mov eax, dword [ebp - 0x48]
mov esi, dword [0x5a4184]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0x10
lea ecx, [eax + edx*4 + 0x10]
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call esi
mov edi, dword [ebp - 0x120]
sub esp, 8
mov dword [edi + 0xe8], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0x10
lea ecx, [eax + edx*4 + 0x14]
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call esi
mov byte [edi + 0xec], al
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x18]
call esi
sub esp, 8
test eax, eax
mov eax, dword [ebp - 0x48]
setne byte [edi + 0xed]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x1c]
call esi
mov dword [edi + 0xf0], eax
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x20]
call esi
mov dword [edi + 0xf4], eax
mov eax, dword [edi + 0x11c]
sub esp, 8
mov ecx, dword [ebp - 0x124]
mov esi, dword [0x5a4174]
mov edi, dword [eax + 0x274]
mov eax, dword [ebp - 0x48]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x10]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x124]
sub esp, 0xc
mov ecx, edi
mov dword [esp], eax
call dword [0x5a481c]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f300
cmp edx, 0xffffffff
je 0x47dc22
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f300
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov eax, dword [eax + 0x11c]
mov edi, dword [eax + 0x21c]
mov eax, dword [ebp - 0x48]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x14]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x124]
sub esp, 0xc
mov ecx, edi
mov dword [esp], eax
call dword [0x5a47ec]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f2e2
cmp edx, 0xffffffff
je 0x47dc8f
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f2e2
mov edi, dword [ebp - 0x120]
mov esi, dword [0x5a47f0]
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x24c]
mov eax, dword [edi + 0xf0]
mov dword [esp], eax
call esi
mov eax, dword [edi + 0x11c]
sub esp, 4
mov ecx, dword [eax + 0x254]
mov eax, dword [edi + 0xf4]
mov dword [esp], eax
call esi
sub esp, 4
mov ecx, dword [ebp - 0x12c]
call fcn.004bcd60
jmp 0x47ed43
mov dword [esp + 4], 1
mov dword [esp], 0x4f3173
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [0x5a417c]
mov eax, dword [ebp - 0x30]
sub esp, 0x10
mov edx, dword [eax]
test edx, edx
je 0x47f2c4
cmp edx, 0xffffffff
je 0x47dd4a
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f2c4
mov eax, dword [ebp - 0x48]
mov esi, dword [0x5a4184]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0x10
lea ecx, [eax + edx*4 + 0x10]
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call esi
mov edi, dword [ebp - 0x120]
sub esp, 8
mov dword [edi + 0xd8], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0x10
lea ecx, [eax + edx*4 + 0x14]
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call esi
mov byte [edi + 0xdc], al
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x18]
call esi
sub esp, 8
test eax, eax
mov eax, dword [ebp - 0x48]
setne byte [edi + 0xdd]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x1c]
call esi
mov dword [edi + 0xe0], eax
mov eax, dword [ebp - 0x48]
sub esp, 8
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x20]
call esi
mov dword [edi + 0xe4], eax
mov eax, dword [edi + 0x11c]
sub esp, 8
mov ecx, dword [ebp - 0x124]
mov esi, dword [0x5a4174]
mov edi, dword [eax + 0x214]
mov eax, dword [ebp - 0x48]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x10]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x124]
sub esp, 0xc
mov ecx, edi
mov dword [esp], eax
call dword [0x5a481c]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f35a
cmp edx, 0xffffffff
je 0x47de7e
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f35a
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov eax, dword [eax + 0x11c]
mov edi, dword [eax + 0x1ec]
mov eax, dword [ebp - 0x48]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 2
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x14]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x124]
sub esp, 0xc
mov ecx, edi
mov dword [esp], eax
call dword [0x5a47ec]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47f33c
cmp edx, 0xffffffff
je 0x47deeb
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f33c
mov edi, dword [ebp - 0x120]
mov esi, dword [0x5a47f0]
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x204]
mov eax, dword [edi + 0xe0]
mov dword [esp], eax
call esi
mov eax, dword [edi + 0x11c]
sub esp, 4
mov ecx, dword [eax + 0x26c]
mov eax, dword [edi + 0xe4]
mov dword [esp], eax
call esi
jmp 0x47dccc
mov dword [esp + 4], 3
mov dword [esp], 0x4f315f
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [0x5a417c]
mov eax, dword [ebp - 0x30]
sub esp, 0x10
mov edx, dword [eax]
test edx, edx
je 0x47f3d2
cmp edx, 0xffffffff
je 0x47df98
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47f3d2
mov eax, dword [ebp - 0x48]
mov esi, dword [0x5a4184]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x10]
call esi
mov edi, dword [ebp - 0x120]
sub esp, 8
mov byte [edi + 0xd4], al
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + 8]
mov dword [esp + 4], 0xa
mov dword [esp], 0
lea ecx, [eax + edx*4 + 0x14]
call esi
mov byte [edi + 0xd5], al
mov edx, dword [edi + 0x11c]
sub esp, 8
mov eax, dword [ebp - 0x48]
mov esi, dword [0x5a481c]
mov ecx, dword [edx + 0x180]
mov edx, dword [eax + 8]
lea eax, [eax + edx*4 + 0x10]
mov dword [esp], eax
call esi
mov eax, dword [edi + 0xcc]
sub esp, 4
test eax, eax
je 0x47f518
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], 0
fild qword [ebp - 0x148]
movzx eax, byte [edi + 0xd5]
mov dword [esp + 4], str._.1f
fdiv dword [0x4f31e0]
mov dword [ebp - 0x148], eax
mov eax, dword [0x5a3dcc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
fild dword [ebp - 0x148]
fmulp st(1)
fstp qword [esp + 8]
call dword [0x5a3fd0]
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x198]
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x47e0ab
cmp edx, 0xffffffff
je 0x47dccf
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
jne 0x47dccf
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47dccf
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 0x10c]
call dword [0x5a3f18]
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, dword [ebp - 0x128]
call dword [0x5a4180]
sub esp, 8
cmp eax, 1
mov eax, dword [ebp - 0x120]
je 0x47f910
mov edx, dword [ebp - 0x104]
mov byte [eax + 0x108], 0
mov eax, dword [edx]
test eax, eax
je 0x47e1d6
cmp eax, 0xffffffff
je 0x47e134
lock sub dword [edx], 1
mov edx, dword [ebp - 0x104]
je 0x47e1d6
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
test edx, edx
je 0x47e1ff
cmp edx, 0xffffffff
je 0x47e159
lock sub dword [eax], 1
mov eax, dword [ebp - 0x108]
je 0x47e1ff
add ebx, 8
cmp ebx, dword [ebp - 0x134]
jne 0x47d640
jmp 0x47d7e1
mov esi, dword [ebp - 0x128]
mov dword [esp], 0
mov ecx, esi
call dword [0x5a4194]
mov edi, dword [ebp - 0x120]
sub esp, 4
mov eax, dword [edi + 0x11c]
fstp dword [edi + 0xc0]
mov ecx, dword [eax + 0x130]
mov dword [esp], esi
call dword [0x5a481c]
mov eax, dword [edi + 0x11c]
fld dword [edi + 0xc0]
sub esp, 4
mov ecx, dword [eax + 0x29c]
fstp dword [esp]
call fcn.004017f0
mov edx, dword [ebp - 0x104]
sub esp, 4
mov eax, dword [edx]
test eax, eax
jne 0x47e11f
mov dword [esp], edx
mov dword [esp + 8], 4
mov dword [esp + 4], 2
call dword [0x5a3dc8]
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
test edx, edx
jne 0x47e144
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e159
mov esi, dword [ebp - 0x128]
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, esi
call dword [0x5a4180]
mov edi, dword [ebp - 0x120]
sub esp, 8
mov word [edi + 0xbc], ax
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x110]
mov dword [esp], esi
call dword [0x5a481c]
jmp 0x47e1c3
mov edi, dword [ebp - 0x128]
mov dword [esp], 0
mov ecx, edi
call dword [0x5a4194]
mov eax, dword [ebp - 0x120]
sub esp, 4
fstp dword [eax + 0xb8]
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x74]
mov dword [esp], edi
call dword [0x5a481c]
jmp 0x47e1c3
mov edi, dword [ebp - 0x128]
mov dword [esp], 0
mov ecx, edi
call dword [0x5a4194]
mov eax, dword [ebp - 0x120]
sub esp, 4
fstp dword [eax + 0xb4]
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0xd4]
mov dword [esp], edi
call dword [0x5a481c]
jmp 0x47e1c3
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, dword [ebp - 0x128]
mov esi, dword [0x5a4184]
call esi
mov edi, dword [ebp - 0x120]
mov edx, dword [ebp - 0x128]
sub esp, 8
mov dword [edi + 0xb0], eax
mov eax, dword [edi + 0x11c]
mov edi, dword [0x5a47ec]
mov ecx, dword [eax + 0x120]
mov dword [esp], edx
call edi
mov eax, dword [ebp - 0x120]
sub esp, 4
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x2a8]
call dword [0x5a4824]
test eax, eax
mov edx, dword [ebp - 0x104]
jne case.0x47d74a.16
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov eax, dword [eax + 0x11c]
mov eax, dword [eax + 0x2d4]
mov dword [esp], eax
call dword [0x5a4878]
sub esp, 4
mov ecx, dword [ebp - 0x124]
mov dword [esp + 4], 0xa
mov dword [esp], 0
call esi
mov esi, eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x120]
sub esp, 8
mov eax, dword [eax + 0xb0]
mov ecx, dword [edx]
test ecx, ecx
je 0x47fb08
cmp ecx, 0xffffffff
je 0x47e3ba
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
je 0x47fb08
cmp eax, esi
je 0x47ed43
call fcn.00487470
mov ecx, eax
mov esi, eax
call fcn.0048ae90
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x2d4]
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call edi
sub esp, 4
mov ecx, esi
call fcn.0048ae90
jmp 0x47ed43
mov dword [esp + 4], 7
mov dword [esp], str.tcrd80G
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0x128]
mov dword [esp], eax
call dword [0x5a4190]
mov edx, dword [ebp - 0x30]
sub esp, 0xc
mov esi, eax
mov ecx, dword [edx]
test ecx, ecx
je 0x47f2a6
cmp ecx, 0xffffffff
je 0x47e45f
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
je 0x47f2a6
cmp esi, 0xffffffff
je 0x47ed43
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0xac]
mov esi, dword [eax + 4]
test esi, esi
je 0x47ed43
mov dword [esp + 4], 0x21
mov dword [esp], str.https:__iot.jjyip.com:443_sid2Uid
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
lea ecx, [ebp - 0xc0]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [0x5a3ed0]
mov eax, dword [ebp - 0x30]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x47fee2
cmp edx, 0xffffffff
je 0x47e4d8
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x47fee2
mov esi, dword [ebp - 0x12c]
mov ecx, esi
call dword [0x5a3e28]
mov eax, dword [ebp - 0x120]
mov edi, dword [ebp - 0x124]
add eax, 0xac
mov ecx, edi
mov dword [esp], eax
call dword [0x5a3e14]
sub esp, 4
mov eax, dword [ebp - 0x13c]
mov dword [esp + 4], 3
mov dword [esp], 0x4f30ae
call eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x130]
mov ecx, esi
mov dword [esp + 4], edi
mov edi, dword [0x5a3e24]
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x60]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x47ff00
cmp edx, 0xffffffff
je 0x47e558
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
je 0x47ff00
mov ecx, dword [ebp - 0x124]
mov esi, dword [0x5a3e18]
call esi
lea eax, [ebp - 0x100]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 3
mov dword [esp + 8], 7
mov dword [esp + 4], str.tcrd80G
mov dword [esp], eax
mov eax, dword [0x5a3f98]
mov dword [ebp - 0x148], eax
call eax
lea eax, [ebp - 0x100]
mov ecx, dword [ebp - 0x124]
mov dword [esp], eax
mov eax, dword [0x5a3e10]
mov dword [ebp - 0x14c], eax
call eax
mov eax, dword [ebp - 0x100]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x48028a
cmp edx, 0xffffffff
je 0x47e5de
lock sub dword [eax], 1
mov eax, dword [ebp - 0x100]
je 0x48028a
mov dword [esp + 4], 5
mov dword [esp], str.model
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x60]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x48026c
cmp edx, 0xffffffff
je 0x47e635
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
je 0x48026c
mov ecx, dword [ebp - 0x124]
call esi
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 3
mov dword [esp + 8], 1
mov dword [esp + 4], 0x4f30b8
mov dword [esp], eax
mov eax, dword [ebp - 0x148]
call eax
lea eax, [ebp - 0xfc]
mov ecx, dword [ebp - 0x124]
mov dword [esp], eax
mov eax, dword [ebp - 0x14c]
call eax
mov eax, dword [ebp - 0xfc]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x48024e
cmp edx, 0xffffffff
je 0x47e6ab
lock sub dword [eax], 1
mov eax, dword [ebp - 0xfc]
je 0x48024e
mov dword [esp + 4], 4
mov dword [esp], str.bind
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x60]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x480230
cmp edx, 0xffffffff
je 0x47e702
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
je 0x480230
mov edi, dword [ebp - 0x124]
mov ecx, edi
call esi
mov eax, dword [ebp - 0x12c]
lea ecx, [ebp - 0xa8]
mov dword [esp], eax
call dword [0x5a3e90]
lea eax, [ebp - 0x90]
lea esi, [ebp - 0xa8]
sub esp, 4
mov dword [ebp - 0x148], eax
mov dword [esp], esi
mov ecx, eax
call dword [0x5a410c]
mov eax, dword [ebp - 0x90]
sub esp, 4
lea esi, [ebp - 0x78]
mov dword [esp + 8], 0xa
mov eax, dword [eax + 4]
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [0x5a3fc4]
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x124], edi
mov ecx, edi
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x4f30bf
mov edi, dword [0x5a3e08]
add eax, 0x124
mov dword [ebp - 0x14c], eax
call edi
sub esp, 8
mov ecx, dword [ebp - 0x130]
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x4f30d0
call edi
mov eax, dword [ebp - 0x124]
sub esp, 8
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x14c]
mov dword [esp + 4], eax
mov eax, dword [0x5a4558]
mov dword [esp], edx
mov dword [ebp - 0x150], eax
call eax
mov eax, dword [ebp - 0x60]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x480212
cmp edx, 0xffffffff
je 0x47e7fa
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
je 0x480212
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
test edx, edx
je 0x4801f4
cmp edx, 0xffffffff
je 0x47e819
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x4801f4
mov eax, dword [ebp - 0x130]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [0x5a3f88]
mov dword [esp + 4], 0xffffffff
mov dword [esp], 0x4f30dd
mov ecx, dword [ebp - 0x124]
call edi
mov eax, dword [ebp - 0x130]
sub esp, 8
mov ecx, dword [ebp - 0x14c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
mov eax, dword [ebp - 0x150]
call eax
mov eax, dword [ebp - 0x30]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x4801d6
cmp edx, 0xffffffff
je 0x47e889
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x4801d6
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
test edx, edx
je 0x4801b8
cmp edx, 0xffffffff
je 0x47e8a8
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
je 0x4801b8
lea eax, [ebp - 0xc0]
mov ecx, dword [ebp - 0x14c]
mov dword [esp], eax
call dword [0x5a455c]
sub esp, 4
mov dword [esp], 8
call fcn.0049a540
mov edi, eax
mov eax, dword [ebp - 0x120]
mov ecx, edi
mov dword [esp], eax
call dword [0x5a456c]
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [eax + 0x128], edi
mov dword [esp + 4], edi
lea edi, [ebp - 0x10c]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x4f30ec
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4f310b
mov dword [esp], edi
call dword [0x5a3f6c]
mov ecx, edi
call dword [0x5a3e30]
mov eax, dword [ebp - 0x120]
mov edi, dword [ebp - 0x148]
mov ecx, dword [eax + 0x128]
mov eax, dword [ebp - 0x14c]
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [0x5a4568]
mov eax, dword [ebp - 0x78]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x480060
cmp edx, 0xffffffff
je 0x47e96c
lock sub dword [eax], 1
mov eax, dword [ebp - 0x78]
je 0x480060
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
test edx, edx
je 0x480042
cmp edx, 0xffffffff
je 0x47e991
lock sub dword [eax], 1
mov eax, dword [ebp - 0x90]
je 0x480042
lea ecx, [ebp - 0xa8]
call dword [0x5a3e94]
mov ecx, dword [ebp - 0x12c]
call dword [0x5a3e2c]
lea ecx, [ebp - 0xc0]
call dword [0x5a3ed4]
mov edx, dword [ebp - 0x104]
jmp case.0x47d74a.16
mov eax, dword [ebp - 0x120]
lea ecx, [eax + 0xac]
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [0x5a3fdc]
mov edx, dword [ebp - 0x104]
sub esp, 4
jmp case.0x47d74a.16
mov edi, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x134]
mov dword [esp], edi
call dword [0x5a3fdc]
mov esi, dword [ebp - 0x120]
sub esp, 4
mov eax, dword [esi + 0x11c]
mov ecx, dword [eax + 0xc4]
mov dword [esp], edi
call dword [0x5a481c]
sub esp, 4
mov ecx, dword [ebp - 0x134]
mov dword [esp + 4], 0xa
mov dword [esp], 0
call dword [0x5a4184]
mov edx, dword [esi + 0x11c]
sub esp, 8
cmp eax, 0x134d7c4
mov ecx, dword [edx + 0x1c8]
jbe 0x47f3f0
mov dword [esp], 0
call dword [0x5a4708]
jmp 0x47e1c3
sub eax, 1
lea edi, [ebp - 0x90]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x148], edi
mov ecx, edi
mov dword [esp], eax
call dword [0x5a4174]
sub esp, 0xc
mov ecx, edi
mov esi, dword [0x5a4194]
mov dword [esp], 0
call esi
sub esp, 4
fld qword [0x4f31e8]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x47faaf
mov eax, dword [ebp - 0x90]
mov edx, dword [0x5a3dcc]
cmp eax, edx
je 0x47eaea
mov dword [ebp - 0x90], edx
mov edx, dword [eax]
test edx, edx
je 0x47f865
cmp edx, 0xffffffff
je 0x47eaea
lock sub dword [eax], 1
je 0x47f865
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe0]
mov dword [esp], eax
mov eax, dword [0x5a3f88]
mov dword [ebp - 0x14c], eax
call eax
mov edi, dword [ebp - 0xe0]
lea eax, [ebp - 0x70]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0x78], eax
mov eax, edi
add eax, esi
je 0x47eb2a
test edi, edi
je 0x480b9d
cmp esi, 0xf
mov dword [ebp - 0xdc], esi
ja 0x47fc40
cmp esi, 1
jne 0x47f855
movzx eax, byte [edi]
mov byte [ebp - 0x70], al
lea eax, [ebp - 0x70]
mov dword [ebp - 0x74], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
test edx, edx
je 0x47f8f2
cmp edx, 0xffffffff
je 0x47eb77
lock sub dword [eax], 1
mov eax, dword [ebp - 0xe0]
je 0x47f8f2
mov edx, dword [ebp - 0x78]
mov edi, str.No_Set_InstallHeight
mov ecx, 0x15
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0x70]
seta al
setb cl
sub eax, ecx
cmp edx, edi
movsx eax, al
je 0x47ebae
mov dword [esp], edx
mov dword [ebp - 0x150], eax
call fcn.0049a558
mov eax, dword [ebp - 0x150]
test eax, eax
jne 0x47f922
call fcn.00487470
mov dword [esp + 4], 1
mov dword [esp], 0xb
mov ecx, eax
call fcn.004879f0
sub esp, 8
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
test edx, edx
je 0x47ebf9
cmp edx, 0xffffffff
je 0x47ed43
lock sub dword [eax], 1
mov eax, dword [ebp - 0x90]
jne 0x47ed43
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47ed43
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, dword [ebp - 0x128]
call dword [0x5a4180]
mov edi, dword [ebp - 0x120]
sub esp, 8
mov edx, dword [ebp - 0x104]
mov dword [edi + 0xd0], eax
jmp case.0x47d74a.16
mov esi, dword [ebp - 0x128]
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, esi
call dword [0x5a4184]
mov edi, dword [ebp - 0x120]
sub esp, 8
mov dword [edi + 0xc8], eax
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x158]
mov dword [esp], esi
call dword [0x5a481c]
sub esp, 4
cmp dword [edi + 0xc8], 0x9f
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x148]
jbe 0x47f402
mov dword [esp], 1
call dword [0x5a47f0]
jmp 0x47e1c3
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, dword [ebp - 0x128]
call dword [0x5a4184]
mov edi, dword [ebp - 0x120]
sub esp, 8
test eax, eax
setne al
mov edx, dword [edi + 0x11c]
mov byte [edi + 0xc4], al
movzx eax, al
mov ecx, dword [edx + 0x170]
mov dword [esp], eax
call dword [0x5a47f0]
jmp 0x47e1c3
mov dword [esp + 4], 0xa
mov dword [esp], 0
mov ecx, dword [ebp - 0x128]
call dword [0x5a4180]
mov edi, dword [ebp - 0x120]
sub esp, 8
movzx ecx, byte [edi + 0xd5]
mov dword [edi + 0xcc], eax
test cl, cl
jne 0x47fa50
mov edx, dword [ebp - 0x104]
jmp case.0x47d74a.16
sub eax, 1
mov edi, dword [ebp - 0x124]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x128]
mov ecx, edi
mov dword [esp], eax
call dword [0x5a4174]
sub esp, 0xc
mov ecx, edi
mov dword [esp], 0
call dword [0x5a4194]
sub esp, 4
fld qword [0x4f31e8]
fxch st(1)
fucompi st(1)
fstp st(0)
jbe 0x47f414
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0xa4]
mov dword [esp], edi
call dword [0x5a481c]
sub esp, 4
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
test edx, edx
je 0x47ebf9
cmp edx, 0xffffffff
je 0x47ed43
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
jne 0x47ed43
jmp 0x47ebf9
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d72e
mov dword [esp], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x138]
call eax
jmp 0x47d70f
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d6f0
lock add dword [edx], 1
jmp 0x47d69c
lock add dword [edx], 1
jmp 0x47d685
lock add dword [edx], 1
jmp 0x47d66e
lock add dword [edx], 1
jmp 0x47d657
mov dword [esp], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 2
call dword [0x5a3dc8]
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
test edx, edx
jne 0x47d816
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp + 4], 0xe
mov dword [esp], str._SYSTEMCONFIG_
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0x140]
mov ebx, dword [0x5a4190]
mov dword [esp], eax
call ebx
mov edx, dword [ebp - 0x30]
sub esp, 0xc
mov esi, eax
mov ecx, dword [edx]
test ecx, ecx
je 0x47f5cd
cmp ecx, 0xffffffff
je 0x47ef2a
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
je 0x47f5cd
cmp esi, 0xffffffff
jne 0x47f5ef
lea eax, [ebp - 0x104]
mov dword [ebp - 0x128], eax
jmp 0x47d60a
mov edx, dword [eax + 0xc]
mov ebx, eax
cmp edx, 0x10
jne 0x47d3eb
jmp 0x47d41f
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov ebx, dword [eax + 4]
mov edx, dword [eax]
sub ebx, 1
cmp edx, 1
jbe 0x47fc83
movsx edx, byte [eax + 0xb]
mov ecx, dword [ebp + 8]
shr edx, 0x1f
mov dword [esp + 4], edx
mov eax, dword [eax + 4]
add eax, 1
mov dword [esp], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
call dword [0x5a3dd4]
mov eax, dword [ebp + 8]
sub esp, 8
mov edx, dword [eax]
mov ecx, dword [edx + 0xc]
add edx, ebx
cmp byte [edx + ecx], 0xa
je 0x47d46e
mov eax, dword [ebp - 0x120]
lea ebx, [ebp - 0x30]
mov dword [ebp - 0x124], ebx
mov ecx, ebx
mov eax, dword [eax + 0x11c]
mov eax, dword [eax + 0x110]
mov dword [esp], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
call dword [0x5a4888]
sub esp, 4
mov ecx, ebx
mov dword [esp + 4], 0xa
mov dword [esp], 0
call dword [0x5a4184]
mov edx, dword [ebp - 0x30]
sub esp, 8
mov ecx, dword [edx]
test ecx, ecx
je 0x47f883
cmp ecx, 0xffffffff
je 0x47f01b
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
je 0x47f883
mov ebx, dword [ebp - 0x120]
fldz
fld dword [ebx + 0xc0]
mov ebx, dword [ebp - 0x120]
fucompi st(1)
fstp st(0)
jp 0x47f03b
je 0x47fda3
movzx ebx, byte [ebx + 0xe0]
mov byte [ebp - 0x130], bl
movzx ebx, byte [ebp - 0x130]
mov byte [ebp - 0x128], 2
test bl, bl
je 0x47f06d
cmp bl, 5
setb dl
lea ebx, [edx*4]
mov byte [ebp - 0x128], bl
mov ebx, dword [0x5a3dcc]
lea ecx, [ebp - 0x90]
movsx eax, al
mov dword [esp], eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x90], ebx
mov ebx, dword [0x5a3dec]
call ebx
mov eax, dword [ebp - 0x120]
sub esp, 4
fldz
fld dword [eax + 0xc0]
mov eax, dword [ebp - 0x120]
fucompi st(1)
fstp st(0)
jp 0x47f0b6
je 0x47fdb5
movsx eax, byte [eax + 0xdc]
mov ecx, dword [ebp - 0x148]
mov dword [esp], eax
call ebx
movzx eax, byte [ebp - 0x128]
mov edi, dword [ebp - 0x148]
sub esp, 4
mov ecx, edi
mov dword [ebp - 0x138], eax
mov dword [esp], eax
call ebx
sub esp, 4
mov ecx, dword [ebp + 8]
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [0x5a40d8]
sub esp, 8
cmp eax, 0xffffffff
mov ebx, eax
je 0x48015e
mov ecx, dword [ebp - 0x148]
call dword [0x5a3ddc]
movzx eax, byte [ebp - 0x128]
mov dword [esp + 4], ebx
lea ecx, [ebp - 0x108]
lea esi, [eax + 5]
mov eax, esi
movzx eax, al
mov dword [ebp - 0x13c], eax
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [0x5a40c8]
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x108]
sub esp, 0xc
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x108], eax
mov edx, dword [eax]
test edx, edx
je 0x4802a8
cmp edx, 0xffffffff
je 0x47f179
lock sub dword [eax], 1
je 0x4802a8
mov edi, dword [ebp - 0x90]
mov eax, dword [edi]
cmp eax, 1
jbe 0x48060c
movsx eax, byte [edi + 0xb]
mov ecx, dword [ebp - 0x148]
shr eax, 0x1f
mov dword [esp + 4], eax
mov eax, dword [edi + 4]
add eax, 1
mov dword [esp], eax
call dword [0x5a3dd4]
mov edi, dword [ebp - 0x90]
sub esp, 8
mov eax, dword [edi + 0xc]
lea ebx, [edi + eax]
mov edx, dword [ebp - 0x120]
mov eax, esi
movzx eax, al
mov dword [ebp - 0x12c], edi
mov dword [ebp - 0x14c], edi
sub eax, 2
mov dword [ebp - 0x134], ebx
xor esi, esi
movzx ecx, ax
mov dword [ebp - 0x140], edx
mov eax, 0xffff
mov edi, ebx
movzx edx, byte [edi + esi]
mov dword [ebp - 0x120], ecx
xor eax, edx
mov edx, 8
lea esi, [esi]
mov ebx, eax
shr eax, 1
mov ecx, eax
and ebx, 1
xor ecx, 0xa001
test ebx, ebx
cmovne eax, ecx
sub edx, 1
jne 0x47f200
mov ebx, dword [ebp - 0x120]
add esi, 1
cmp esi, ebx
mov ecx, ebx
jb 0x47f1eb
mov ebx, dword [ebp - 0x140]
mov esi, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x14c]
mov dword [ebp - 0x120], ebx
mov ebx, dword [ebp - 0x134]
cmp byte [ebx + esi - 2], al
je 0x480548
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
test eax, eax
je 0x47f27b
cmp eax, 0xffffffff
je 0x47d7e1
mov ebx, dword [ebp - 0x12c]
lock sub dword [ebx], 1
mov edi, dword [ebp - 0x90]
jne 0x47d7e1
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], edi
call dword [0x5a3dc8]
jmp 0x47d7e1
mov dword [ebp - 0x120], ebx
mov ebx, eax
jmp 0x47d3a9
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
jmp 0x47e45f
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47dd4a
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47dc8f
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47dc22
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47da41
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47deeb
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47de7e
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47daee
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d9d4
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d8a0
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47df98
mov dword [esp], 1
call dword [0x5a4708]
jmp 0x47e1c3
mov dword [esp], 0
call dword [0x5a47f0]
jmp 0x47e1c3
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xf8]
mov dword [esp], eax
mov eax, dword [0x5a3f88]
mov dword [ebp - 0x14c], eax
call eax
mov edi, dword [ebp - 0xf8]
lea eax, [ebp - 0xb8]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0xc0], eax
mov eax, edi
add eax, esi
je 0x47f45a
test edi, edi
je 0x4807fe
cmp esi, 0xf
mov dword [ebp - 0xf4], esi
ja 0x47f803
cmp esi, 1
jne 0x4802cc
movzx eax, byte [edi]
mov byte [ebp - 0xb8], al
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xbc], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
test edx, edx
je 0x47fb32
cmp edx, 0xffffffff
je 0x47f4b0
lock sub dword [eax], 1
mov eax, dword [ebp - 0xf8]
je 0x47fb32
mov edx, dword [ebp - 0xc0]
mov edi, str.OutRange
mov ecx, 9
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0xb8]
seta al
setb cl
sub eax, ecx
cmp edx, edi
movsx eax, al
je 0x47f4ed
mov dword [esp], edx
mov dword [ebp - 0x148], eax
call fcn.0049a558
mov eax, dword [ebp - 0x148]
test eax, eax
jne 0x47fb50
call fcn.00487470
mov dword [esp + 4], 1
mov dword [esp], 0xa
mov ecx, eax
call fcn.004879f0
sub esp, 8
jmp 0x47edb9
call fcn.00487470
mov edi, dword [ebp - 0x124]
mov esi, eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], str.ATCOLLECTFREQ_n
mov ecx, edi
call dword [0x5a3e08]
sub esp, 8
mov ecx, esi
mov dword [esp + 4], 1
mov dword [esp], edi
call fcn.00488a60
mov eax, dword [ebp - 0x30]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x47f573
cmp edx, 0xffffffff
je 0x47dccf
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
jne 0x47dccf
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47dccf
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d599
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d5f8
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
cmp esi, 0xffffffff
je 0x47ef33
mov dword [esp + 4], 0xe
mov dword [esp], str.ATCOLLECTFREQ
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0x140]
mov dword [esp], eax
call ebx
mov edx, dword [ebp - 0x30]
sub esp, 0xc
mov esi, eax
mov ecx, dword [edx]
test ecx, ecx
je 0x47f8d4
cmp ecx, 0xffffffff
je 0x47f64e
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
je 0x47f8d4
cmp esi, 0xffffffff
je 0x47ff1e
mov dword [esp + 4], 0x13
mov dword [esp], str.ATLIMITFILTEROFXCM
mov eax, dword [ebp - 0x13c]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x124]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0x140]
mov dword [esp], eax
call ebx
mov edx, dword [ebp - 0x30]
sub esp, 0xc
mov ebx, eax
mov ecx, dword [edx]
test ecx, ecx
je 0x47f8ad
cmp ecx, 0xffffffff
je 0x47f6b6
lock sub dword [edx], 1
mov edx, dword [ebp - 0x30]
je 0x47f8ad
cmp ebx, 0xffffffff
jne 0x47ef33
call fcn.00487470
mov ebx, eax
mov eax, dword [0x5a3dcc]
lea edi, [ebp - 0x60]
mov dword [esp + 4], str.ATLIMITFILTEROFXCM_n
mov dword [ebp - 0x130], edi
mov dword [esp], edi
mov dword [ebp - 0x60], eax
call dword [0x5a3fd0]
lea eax, [ebp - 0x48]
mov dword [esp + 4], edi
mov dword [ebp - 0x12c], eax
mov dword [esp], eax
call dword [0x5a3f9c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
cmp eax, 1
jbe 0x4807b1
movsx eax, byte [edx + 0xb]
mov ecx, dword [ebp - 0x12c]
shr eax, 0x1f
mov dword [esp + 4], eax
mov eax, dword [edx + 4]
add eax, 1
mov dword [esp], eax
call dword [0x5a3dd4]
mov eax, dword [ebp - 0x48]
sub esp, 8
mov ecx, dword [eax + 0xc]
mov edi, dword [ebp - 0x124]
add eax, ecx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
mov ecx, edi
call dword [0x5a3e08]
sub esp, 8
mov ecx, ebx
mov dword [esp + 4], 1
mov dword [esp], edi
call fcn.00488a60
mov eax, dword [ebp - 0x30]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x48074a
cmp edx, 0xffffffff
je 0x47f787
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x48074a
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
test edx, edx
je 0x48072c
cmp edx, 0xffffffff
je 0x47f7a6
lock sub dword [eax], 1
mov eax, dword [ebp - 0x48]
je 0x48072c
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
test edx, edx
je 0x47f7d9
cmp edx, 0xffffffff
je 0x4807ed
mov edx, 0xffffffff
lock xadd dword [eax], edx
lea eax, [ebp - 0x104]
cmp edx, 1
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x60]
jne 0x47d61c
mov dword [esp], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 2
call dword [0x5a3dc8]
lea eax, [ebp - 0x104]
mov dword [ebp - 0x128], eax
jmp 0x47d61c
lea eax, [ebp - 0xf4]
lea ecx, [ebp - 0xc0]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xf4]
sub esp, 8
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xb8], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc0]
jmp 0x47f481
test esi, esi
jne 0x480890
mov eax, dword [ebp - 0x78]
jmp 0x47eb4b
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47eaea
mov dword [ebp - 0x128], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
mov eax, dword [ebp - 0x128]
jmp 0x47f01b
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
cmp ebx, 0xffffffff
jne 0x47ef33
jmp 0x47f6bf
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
jmp 0x47f64e
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47eb77
mov byte [eax + 0x108], 1
mov edx, dword [ebp - 0x104]
jmp case.0x47d74a.16
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd8]
mov dword [esp], eax
mov eax, dword [ebp - 0x14c]
call eax
mov edi, dword [ebp - 0xd8]
lea eax, [ebp - 0x58]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0x60], eax
mov eax, edi
add eax, esi
je 0x47f95d
test edi, edi
je 0x48092b
cmp esi, 0xf
mov dword [ebp - 0xd4], esi
ja 0x48016f
cmp esi, 1
jne 0x480681
movzx eax, byte [edi]
mov byte [ebp - 0x58], al
lea eax, [ebp - 0x58]
mov dword [ebp - 0x5c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
test edx, edx
je 0x47fa32
cmp edx, 0xffffffff
je 0x47f9aa
lock sub dword [eax], 1
mov eax, dword [ebp - 0xd8]
je 0x47fa32
mov edx, dword [ebp - 0x60]
mov edi, str.OutRange
mov ecx, 9
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0x58]
seta al
setb cl
sub eax, ecx
cmp edx, edi
movsx eax, al
je 0x47f9e1
mov dword [esp], edx
mov dword [ebp - 0x150], eax
call fcn.0049a558
mov eax, dword [ebp - 0x150]
test eax, eax
jne 0x47fc9f
call fcn.00487470
mov dword [esp + 4], 2
mov dword [esp], 0xb
mov ecx, eax
call fcn.004879f0
mov eax, dword [ebp - 0x120]
sub esp, 8
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x29c]
mov dword [esp + 4], 0
mov dword [esp], 2
call fcn.00401810
jmp 0x47ebd1
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47f9aa
mov edx, dword [0x5a3dcc]
mov edi, dword [ebp - 0x124]
mov dword [esp + 4], str._.1f
mov dword [ebp - 0x30], edx
mov edx, 0x10624dd3
mov dword [esp], edi
mul edx
mov eax, edx
shr eax, 6
imul eax, ecx
mov dword [ebp - 0x148], eax
fild dword [ebp - 0x148]
fstp qword [esp + 8]
call dword [0x5a3fd0]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x198]
mov dword [esp], edi
call dword [0x5a481c]
jmp 0x47edb6
mov edi, dword [ebp - 0x120]
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x84]
mov eax, dword [ebp - 0x148]
mov dword [esp], eax
call dword [0x5a481c]
mov eax, dword [edi + 0x11c]
sub esp, 4
mov ecx, dword [ebp - 0x148]
mov edi, dword [eax + 0x29c]
mov dword [esp], 0
call esi
sub esp, 4
mov ecx, edi
fstp dword [esp + 4]
mov dword [esp], 0
call fcn.00401810
jmp 0x47ebd1
mov dword [ebp - 0x148], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], edx
call dword [0x5a3dc8]
mov eax, dword [ebp - 0x148]
jmp 0x47e3ba
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47f4b0
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xf0]
mov dword [esp], eax
mov eax, dword [ebp - 0x14c]
call eax
mov edi, dword [ebp - 0xf0]
lea eax, [ebp - 0xa0]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0xa8], eax
mov eax, edi
add eax, esi
je 0x47fb91
test edi, edi
je 0x480c06
cmp esi, 0xf
mov dword [ebp - 0xec], esi
ja 0x4802e0
cmp esi, 1
jne 0x4806cd
movzx eax, byte [edi]
mov byte [ebp - 0xa0], al
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa4], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xf0]
mov edx, dword [eax]
test edx, edx
je 0x47fdcc
cmp edx, 0xffffffff
je 0x47fbe7
lock sub dword [eax], 1
mov eax, dword [ebp - 0xf0]
je 0x47fdcc
mov eax, dword [ebp - 0xa8]
mov edi, str.InBlindZone
mov ecx, 0xc
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0xa0]
seta dl
setb cl
sub edx, ecx
cmp eax, edi
movsx esi, dl
je 0x47fc18
mov dword [esp], eax
call fcn.0049a558
test esi, esi
jne 0x47fdea
call fcn.00487470
mov dword [esp + 4], 2
mov dword [esp], 0xa
mov ecx, eax
call fcn.004879f0
jmp 0x47f510
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0x78]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xdc]
sub esp, 8
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x70], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xdc]
jmp 0x47f85d
mov ecx, dword [eax + 0xc]
mov edx, eax
cmp ecx, 0x10
jne 0x47ef6d
jmp 0x47efa1
lock add dword [ecx], 1
jmp 0x47d557
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xd0]
mov dword [esp], eax
mov eax, dword [ebp - 0x14c]
call eax
mov edi, dword [ebp - 0xd0]
lea eax, [ebp - 0x40]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0x48], eax
mov eax, edi
add eax, esi
je 0x47fcda
test edi, edi
je 0x480c12
cmp esi, 0xf
mov dword [ebp - 0xcc], esi
ja 0x48063b
cmp esi, 1
jne 0x480403
movzx eax, byte [edi]
mov byte [ebp - 0x40], al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xd0]
mov edx, dword [eax]
test edx, edx
je 0x48052a
cmp edx, 0xffffffff
je 0x47fd27
lock sub dword [eax], 1
mov eax, dword [ebp - 0xd0]
je 0x48052a
mov eax, dword [ebp - 0x48]
mov edi, str.InBlindZone
mov ecx, 0xc
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0x40]
seta dl
setb cl
sub edx, ecx
cmp eax, edi
movsx esi, dl
je 0x47fd52
mov dword [esp], eax
call fcn.0049a558
test esi, esi
jne 0x480426
call fcn.00487470
mov dword [esp + 4], 3
mov dword [esp], 0xb
mov ecx, eax
call fcn.004879f0
mov eax, dword [ebp - 0x120]
sub esp, 8
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x29c]
mov dword [esp + 4], 0
mov dword [esp], 1
call fcn.00401810
jmp 0x47ebd1
movzx ebx, byte [ebx + 0xf0]
mov byte [ebp - 0x130], bl
jmp 0x47f048
movsx eax, byte [eax + 0xec]
mov ecx, dword [ebp - 0x148]
mov dword [esp], eax
call ebx
jmp 0x47f0c8
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47fbe7
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe8]
mov dword [esp], eax
mov eax, dword [ebp - 0x14c]
call eax
mov edi, dword [ebp - 0xe8]
lea eax, [ebp - 0x88]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0x90], eax
mov eax, edi
add eax, esi
je 0x47fe33
test edi, edi
jne 0x47fe33
mov dword [esp], 0x4f2d94
call fcn.0049a570
cmp esi, 0xf
mov dword [ebp - 0xe4], esi
ja 0x4806e0
cmp esi, 1
jne 0x480413
movzx eax, byte [edi]
mov byte [ebp - 0x88], al
lea eax, [ebp - 0x88]
mov dword [ebp - 0x8c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
test edx, edx
je 0x48061d
cmp edx, 0xffffffff
je 0x47fe89
lock sub dword [eax], 1
mov eax, dword [ebp - 0xe8]
je 0x48061d
mov eax, dword [ebp - 0x90]
mov edi, str.LackEnergy
mov ecx, 0xb
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0x88]
seta dl
setb cl
sub edx, ecx
cmp eax, edi
movsx esi, dl
je 0x47feba
mov dword [esp], eax
call fcn.0049a558
test esi, esi
jne 0x47edb9
call fcn.00487470
mov dword [esp + 4], 3
mov dword [esp], 0xa
mov ecx, eax
call fcn.004879f0
jmp 0x47f510
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e4d8
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e558
call fcn.00487470
mov esi, eax
mov eax, dword [0x5a3dcc]
lea edi, [ebp - 0x60]
mov dword [esp + 4], str.ATCOLLECTFREQ_nATDATAFILTER_n
mov dword [ebp - 0x130], edi
mov dword [esp], edi
mov dword [ebp - 0x60], eax
call dword [0x5a3fd0]
lea eax, [ebp - 0x48]
mov dword [esp + 4], edi
mov dword [ebp - 0x12c], eax
mov dword [esp], eax
call dword [0x5a3f9c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx]
cmp eax, 1
jbe 0x4803f0
movsx eax, byte [edx + 0xb]
mov ecx, dword [ebp - 0x12c]
shr eax, 0x1f
mov dword [esp + 4], eax
mov eax, dword [edx + 4]
add eax, 1
mov dword [esp], eax
call dword [0x5a3dd4]
mov eax, dword [ebp - 0x48]
sub esp, 8
mov ecx, dword [eax + 0xc]
mov edi, dword [ebp - 0x124]
add eax, ecx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
mov ecx, edi
call dword [0x5a3e08]
sub esp, 8
mov ecx, esi
mov dword [esp + 4], 1
mov dword [esp], edi
call fcn.00488a60
mov eax, dword [ebp - 0x30]
sub esp, 8
mov edx, dword [eax]
test edx, edx
je 0x480332
cmp edx, 0xffffffff
je 0x47ffe6
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
je 0x480332
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
test edx, edx
je 0x480691
cmp edx, 0xffffffff
je 0x480005
lock sub dword [eax], 1
mov eax, dword [ebp - 0x48]
je 0x480691
mov eax, dword [ebp - 0x60]
mov edx, dword [eax]
test edx, edx
je 0x480024
cmp edx, 0xffffffff
je 0x47f657
lock sub dword [eax], 1
mov eax, dword [ebp - 0x60]
jne 0x47f657
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47f657
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e991
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e96c
movzx edx, byte [ebp - 0x2d]
mov byte [ebp - 0x45], al
lea esi, [ebp - 0x78]
mov ebx, dword [0x5a3fd0]
mov byte [ebp - 0x48], dl
movzx edx, byte [ebp - 0x2e]
mov byte [ebp - 0x47], dl
movzx edx, byte [ebp - 0x2f]
mov byte [ebp - 0x46], dl
fld dword [ebp - 0x48]
mov eax, dword [ebp - 0x120]
mov edi, dword [ebp - 0x120]
fld dword [eax + 0xc0]
mov eax, 4
fldz
fxch st(2)
fstp dword [ebp - 0x124]
fucompi st(1)
fstp st(0)
jp 0x4800cf
je 0x480ab1
sub eax, dword [edi + 0xe4]
mov dword [ebp - 0x120], eax
fild dword [ebp - 0x120]
fstp qword [esp + 8]
fld dword [0x4f31f0]
fstp qword [esp]
call fcn.0049aa00
fld dword [ebp - 0x124]
mov dword [esp + 4], str._.4f
mov dword [esp], esi
fdivrp st(1)
fstp dword [ebp - 0x11c]
fld dword [ebp - 0x11c]
fstp qword [esp + 8]
call ebx
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0x84]
mov dword [esp], esi
call dword [0x5a481c]
push eax
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
test edx, edx
je 0x480145
add edx, 1
je 0x48015e
lock sub dword [eax], 1
mov eax, dword [ebp - 0x78]
jne 0x48015e
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
mov edi, dword [ebp - 0x90]
mov dword [ebp - 0x12c], edi
jmp 0x47f250
lea eax, [ebp - 0xd4]
mov ecx, dword [ebp - 0x130]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xd4]
sub esp, 8
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x58], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x60]
jmp 0x47f97e
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e8a8
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e889
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e819
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e7fa
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e702
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e6ab
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e635
mov dword [esp + 8], 4
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47e5de
mov eax, dword [ebp - 0x108]
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47f179
test esi, esi
je 0x47f84a
lea eax, [ebp - 0xb8]
jmp 0x47f834
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xa8]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xec]
sub esp, 8
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa0], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xec]
mov eax, dword [ebp - 0xa8]
jmp 0x47fbb8
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47ffe6
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
call fcn.00487470
cmp byte [eax + 0x278], 0
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
je 0x4807d0
call fcn.004059a0
mov ebx, dword [ebp + 8]
mov edx, dword [ebx]
mov dword [ebp - 0x30], edx
mov ebx, dword [edx]
add ebx, 1
cmp ebx, 1
ja 0x48094b
lea ebx, [ebp - 0x30]
mov ecx, eax
mov dword [esp], ebx
mov dword [ebp - 0x124], ebx
call fcn.004065f0
mov eax, dword [ebp - 0x30]
sub esp, 4
mov edx, dword [eax]
test edx, edx
je 0x4803ca
cmp edx, 0xffffffff
je 0x47d7e1
lock sub dword [eax], 1
mov eax, dword [ebp - 0x30]
jne 0x47d7e1
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47d7e1
mov ecx, dword [edx + 0xc]
mov eax, edx
cmp ecx, 0x10
jne 0x47ff6b
jmp 0x47ff94
test esi, esi
jne 0x480a20
mov eax, dword [ebp - 0x48]
jmp 0x47fcfb
test esi, esi
jne 0x480c30
mov eax, dword [ebp - 0x90]
jmp 0x47fe5a
mov eax, dword [ebp - 0x128]
mov dword [esp + 4], eax
lea eax, [ebp - 0xc8]
mov dword [esp], eax
mov eax, dword [ebp - 0x14c]
call eax
mov edi, dword [ebp - 0xc8]
lea eax, [ebp - 0x28]
mov esi, dword [edi + 4]
add edi, dword [edi + 0xc]
mov dword [ebp - 0x30], eax
mov eax, edi
add eax, esi
je 0x480461
test edi, edi
je 0x480c4d
cmp esi, 0xf
mov dword [ebp - 0xc4], esi
ja 0x480768
cmp esi, 1
jne 0x4807c4
movzx eax, byte [edi]
mov byte [ebp - 0x28], al
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
test edx, edx
je 0x4806af
cmp edx, 0xffffffff
je 0x4804ae
lock sub dword [eax], 1
mov eax, dword [ebp - 0xc8]
je 0x4806af
mov eax, dword [ebp - 0x30]
mov edi, str.LackEnergy
mov ecx, 0xb
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0x28]
seta dl
setb cl
sub edx, ecx
cmp eax, edi
movsx esi, dl
je 0x4804d9
mov dword [esp], eax
call fcn.0049a558
test esi, esi
jne 0x47ebd4
call fcn.00487470
mov dword [esp + 4], 4
mov dword [esp], 0xb
mov ecx, eax
call fcn.004879f0
mov eax, dword [ebp - 0x120]
sub esp, 8
mov eax, dword [eax + 0x11c]
mov ecx, dword [eax + 0x29c]
mov dword [esp + 4], 0
mov dword [esp], 3
call fcn.00401810
jmp 0x47ebd1
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47fd27
movzx edx, byte [ebx + esi - 1]
sar eax, 8
cmp edx, eax
jne 0x47f250
mov ecx, dword [ebp - 0x138]
mov eax, ebx
add eax, 3
test ecx, ecx
je 0x48058f
mov ebx, dword [ebp - 0x120]
xor edx, edx
mov edi, ebx
movzx ecx, byte [eax + edx]
mov ebx, dword [ebp - 0x124]
mov byte [ebx + edx], cl
add edx, 1
cmp edx, dword [ebp - 0x138]
jb 0x480571
mov dword [ebp - 0x120], edi
mov eax, dword [0x5a3dcc]
mov dword [ebp - 0x78], eax
movzx eax, byte [ebp - 0x30]
cmp al, 0xfd
jb 0x4805db
cmp byte [ebp - 0x128], 1
jbe 0x480d39
cmp al, byte [ebp - 0x2f]
jne 0x4805db
mov ebx, dword [ebp - 0x120]
mov edx, 2
mov edi, ebx
cmp byte [ebp - 0x128], dl
mov ecx, edx
jbe 0x480d02
add edx, 1
cmp al, byte [ebp + edx - 0x31]
je 0x4805be
mov dword [ebp - 0x120], edi
movzx ebx, byte [ebp - 0x130]
fldz
xor edx, edx
mov word [ebp - 0xa8], dx
mov dword [ebp - 0x60], 0
fst dword [ebp - 0x48]
cmp bl, 4
ja case.default.0x480605
fstp st(0)
movzx edx, bl
jmp dword [edx*4 + 0x4f31cc]
mov eax, dword [edi + 0xc]
cmp eax, 0x10
jne 0x47f18a
jmp 0x47f1b6
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47fe89
lea eax, [ebp - 0xcc]
mov ecx, dword [ebp - 0x12c]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xcc]
sub esp, 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xcc]
jmp 0x48040b
test esi, esi
je 0x4801b0
lea eax, [ebp - 0x58]
jmp 0x48019a
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x480005
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x4804ae
test esi, esi
je 0x480327
lea eax, [ebp - 0xa0]
jmp 0x480311
lea eax, [ebp - 0xe4]
lea ecx, [ebp - 0x90]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xe4]
sub esp, 8
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x88], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xe4]
jmp 0x48041b
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47f7a6
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], eax
call dword [0x5a3dc8]
jmp 0x47f787
lea eax, [ebp - 0xc4]
mov ecx, dword [ebp - 0x124]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0049a588
mov edx, dword [ebp - 0xc4]
sub esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.004a0420
mov esi, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x30]
jmp 0x480482
mov ecx, dword [edx + 0xc]
mov eax, edx
cmp ecx, 0x10
jne 0x47f70c
jmp 0x47f735
test esi, esi
je 0x4807a9
lea eax, [ebp - 0x28]
jmp 0x480793
call fcn.00487470
lea ebx, [ebp - 0x114]
mov ecx, eax
mov dword [ebp - 0x140], ebx
call fcn.00487d00
jmp 0x47d7e1
lea eax, [ebp - 0x104]
mov dword [ebp - 0x128], eax
jmp 0x47d61c
mov dword [esp], 0x4f2d94
call fcn.0049a570
mov ecx, dword [ebp - 0x124]
mov ebx, eax
call fcn.004c2760
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], eax
lea ecx, [ebp - 0x110]
call fcn.004c2760
mov ecx, dword [ebp - 0x140]
call fcn.004c2760
mov dword [esp], ebx
call fcn.0049a5a8
mov ebx, eax
mov ecx, dword [ebp - 0x124]
call fcn.004c2760
mov ecx, dword [ebp - 0x128]
call fcn.004c2760
lea ecx, [ebp - 0x108]
call fcn.004c2760
jmp 0x480823
lea eax, [ebp - 0x70]
jmp 0x47fc68
mov ecx, dword [ebp - 0x130]
call fcn.004c2760
jmp 0x480823
mov ecx, dword [ebp - 0x148]
call fcn.004c2760
jmp 0x48084e
mov dword [esp], 0x4f2d94
call fcn.0049a570
mov ecx, dword [ebp - 0x124]
mov ebx, eax
call fcn.004c2760
jmp 0x480823
lock add dword [edx], 1
jmp 0x480395
mov ecx, dword [ebp - 0x12c]
call fcn.004bcd60
jmp 0x48084e
mov ebx, eax
jmp 0x4808b0
lea eax, [ebp - 0x40]
jmp 0x480666
mov byte [ebp - 0x5f], al
movzx eax, byte [ebp - 0x2d]
lea esi, [ebp - 0x78]
movzx edx, byte [ebp - 0x2f]
mov ebx, dword [0x5a3fd0]
mov byte [ebp - 0x5e], al
movzx eax, byte [ebp - 0x2e]
mov byte [ebp - 0x60], dl
mov byte [ebp - 0x5d], al
fild dword [ebp - 0x60]
jmp 0x4800a2
sub eax, dword [edi + 0xf4]
mov dword [ebp - 0x120], eax
fild dword [ebp - 0x120]
fstp qword [esp + 8]
fld dword [0x4f31f0]
fstp qword [esp]
call fcn.0049aa00
fld dword [ebp - 0x124]
mov dword [esp + 4], str._.4f
mov dword [esp], esi
fdivrp st(1)
fstp dword [ebp - 0x11c]
fld dword [ebp - 0x11c]
fstp qword [esp + 8]
call ebx
mov eax, dword [edi + 0x11c]
mov ecx, dword [eax + 0xa4]
mov dword [esp], esi
call dword [0x5a481c]
jmp 0x48012d
movzx edx, byte [ebp - 0x2d]
mov byte [ebp - 0x5d], al
lea esi, [ebp - 0x78]
mov ebx, dword [0x5a3fd0]
mov byte [ebp - 0x60], dl
movzx edx, byte [ebp - 0x2e]
mov byte [ebp - 0x5f], dl
movzx edx, byte [ebp - 0x2f]
mov byte [ebp - 0x5e], dl
fild dword [ebp - 0x60]
jmp 0x4800a2
movzx edx, byte [ebp - 0x2f]
mov byte [ebp - 0xa7], al
lea esi, [ebp - 0x78]
mov ebx, dword [0x5a3fd0]
mov byte [ebp - 0xa8], dl
fild word [ebp - 0xa8]
jmp 0x4800a2
mov byte [ebp - 0x47], al
movzx eax, byte [ebp - 0x2d]
lea esi, [ebp - 0x78]
movzx edx, byte [ebp - 0x2f]
mov ebx, dword [0x5a3fd0]
mov byte [ebp - 0x46], al
movzx eax, byte [ebp - 0x2e]
mov byte [ebp - 0x48], dl
mov byte [ebp - 0x45], al
fld dword [ebp - 0x48]
jmp 0x4800a2
mov ebx, dword [0x5a3fd0]
lea esi, [ebp - 0x78]
jmp 0x4800a2
mov dword [esp], 0x4f2d94
call fcn.0049a570
mov ecx, dword [ebp - 0x124]
mov ebx, eax
call fcn.004a0e40
jmp 0x480994
mov dword [esp], 0x4f2d94
call fcn.0049a570
mov dword [esp], 0x4f2d94
call fcn.0049a570
lea ecx, [ebp - 0xe0]
mov ebx, eax
call fcn.004a0e40
jmp 0x4808d6
lea eax, [ebp - 0x88]
jmp 0x480711
mov dword [esp], 0x4f2d94
call fcn.0049a570
jmp 0x480a19
mov dword [ebp - 0x120], edi
cmp byte [ebp - 0x128], cl
jne 0x4805db
cmp al, 0xfe
je 0x480d58
add al, 1
jne 0x480d40
lea esi, [ebp - 0x78]
mov dword [esp + 4], str.OutRange
mov ebx, dword [0x5a3fd0]
mov dword [esp], esi
call ebx
fldz
jmp 0x4800a2
mov ecx, 1
jmp 0x480d08
lea esi, [ebp - 0x78]
mov dword [esp + 4], str.LackEnergy
mov ebx, dword [0x5a3fd0]
mov dword [esp], esi
call ebx
jmp 0x480d32
lea esi, [ebp - 0x78]
mov dword [esp + 4], str.InBlindZone
mov ebx, dword [0x5a3fd0]
mov dword [esp], esi
call ebx
jmp 0x480d32