Function at 0x48efb6
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8b91
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c8
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x9c], 0
mov ecx, dword [ebp - 0x39c]
call fcn.00404630
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0x20]
call fcn.004d231b
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x94]
call fcn.004d231b
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x98]
push eax
lea ecx, [ebp - 0x20]
call fcn.00404450
mov ecx, dword [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404450
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1964]
push eax
lea ecx, [ebp - 0x20]
call fcn.004044e0
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x196c], 0
je 0x48f06b
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x196c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x19b4]
sub eax, dword [edx + 0x19ac]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x19b0]
sub eax, dword [edx + 0x19a8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x196c], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x196c]
push eax
lea ecx, [ebp - 0x94]
call fcn.004044e0
push 1
lea ecx, [ebp - 0x94]
call fcn.004d25db
lea ecx, [ebp - 0x84]
call fcn.00404130
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x39c]
add ecx, 0x14144
push ecx
lea ecx, [ebp - 0x84]
call fcn.00404280
test eax, eax
je 0x48f12b
lea edx, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x94]
call fcn.004d2566
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x84]
call fcn.004042a0
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f670], 0
je 0x48f5ea
lea ecx, [ebp - 0xac]
call fcn.00404180
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f69c], 0
je 0x48f33b
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f718]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f71c]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f67c], 0
je 0x48f1f2
lea edx, [ebp - 0xac]
push edx
mov eax, dword [ebp - 0x39c]
add eax, 0x10854
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.0044e475
mov ecx, dword [ebp - 0x39c]
add ecx, 0x2820
push ecx
push 0x104
mov edx, dword [ebp - 0x39c]
add edx, 0x948
push edx
push 0x51d334
push 0x51d35c
push 0x51d38c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x48f244
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x538c
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0044e475
mov edx, dword [ebp - 0x39c]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0x39c]
add eax, 0x948
push eax
push 0x51d3a0
push 0x51d3dc
push 0x51d414
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, dword [ebp - 0xa4]
add ecx, 0xc
mov dword [ebp - 0xa4], ecx
lea edx, [ebp - 0xac]
push edx
push 8
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
push 8
mov ecx, dword [ebp - 0x39c]
push ecx
mov edx, dword [ebp - 0x39c]
add edx, 0x948
push edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004caa04
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f678], 0
je 0x48f33b
mov ecx, dword [ebp - 0xa4]
add ecx, 2
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0xa8]
add edx, 2
mov dword [ebp - 0xa8], edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xac]
add ecx, dword [eax + 0x6f8c0]
mov edx, dword [ebp - 0x39c]
sub ecx, dword [edx + 0x6f8b8]
add ecx, 3
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax + 0x6f8c4]
mov edx, dword [ebp - 0x39c]
sub ecx, dword [edx + 0x6f8bc]
add ecx, 1
mov dword [ebp - 0xa0], ecx
lea eax, [ebp - 0xac]
push eax
push 9
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a0], 0
je 0x48f5ea
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f758]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f75c]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f684], 0
je 0x48f43f
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f69c], 0
jne 0x48f3e8
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x10854
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0044e475
mov edx, dword [ebp - 0x39c]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0x39c]
add eax, 0x948
push eax
push str.Enable_Disable_HDMI
push str.middle_spdif_enablehdmi
push 0x51d480
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x48f43a
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x39c]
add edx, 0x10a5c
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.0044e475
mov eax, dword [ebp - 0x39c]
add eax, 0x2820
push eax
push 0x104
mov ecx, dword [ebp - 0x39c]
add ecx, 0x948
push ecx
push str.Enable_Disable_HDMI2
push str.middle_spdif_enablehdmi2
push 0x51d4f4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x48f4f4
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f69c], 0
jne 0x48f4a2
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x538c
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0044e475
mov edx, dword [ebp - 0x39c]
add edx, 0x2820
push edx
push 0x104
mov eax, dword [ebp - 0x39c]
add eax, 0x948
push eax
push str.Enable_Disable_S_PDIF_Output
push str.middle_spdif_enablespdifout
push 0x51d57c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x48f4f4
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x39c]
add edx, 0x1064c
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.0044e475
mov eax, dword [ebp - 0x39c]
add eax, 0x2820
push eax
push 0x104
mov ecx, dword [ebp - 0x39c]
add ecx, 0x948
push ecx
push str.Enable_Disable_S_PDIF_Output2
push str.middle_spdif_enablespdifout2
push 0x51d608
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov edx, dword [ebp - 0xa4]
add edx, 0xc
mov dword [ebp - 0xa4], edx
lea eax, [ebp - 0xac]
push eax
push 0xa
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
push 0xa
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x39c]
add eax, 0x948
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004caa04
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f680], 0
je 0x48f5ea
mov edx, dword [ebp - 0xa4]
add edx, 2
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0xa8]
add eax, 2
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0xac]
add edx, dword [ecx + 0x6f8e0]
mov eax, dword [ebp - 0x39c]
sub edx, dword [eax + 0x6f8d8]
add edx, 3
mov dword [ebp - 0xa4], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0xa8]
add edx, dword [ecx + 0x6f8e4]
mov eax, dword [ebp - 0x39c]
sub edx, dword [eax + 0x6f8dc]
add edx, 1
mov dword [ebp - 0xa0], edx
lea ecx, [ebp - 0xac]
push ecx
push 0xb
mov edx, dword [ebp - 0x39c]
push edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x199c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1998]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x19b4]
sub ecx, dword [eax + 0x19ac]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x19b0]
sub ecx, dword [eax + 0x19a8]
add ecx, 1
push ecx
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00404520
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f6cc]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f6c8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f6e4]
sub eax, dword [edx + 0x51fd0]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f6e0]
sub eax, dword [edx + 0x51fcc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f6dc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f6d8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f670], 0
je 0x4924e6
mov edx, dword [ebp - 0x39c]
add edx, 0x26c0
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.00440384
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f6ec]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f6e8]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f704]
sub ecx, dword [eax + 0x6f6fc]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f700]
sub ecx, dword [eax + 0x6f6f8]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f6fc]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f6f8]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f688], 0
je 0x48f85a
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f8ec]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f8e8]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f904]
sub ecx, dword [eax + 0x6f8fc]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f900]
sub ecx, dword [eax + 0x6f8f8]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f8fc]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f8f8]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f68c], 0
je 0x48f905
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f90c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f908]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f924]
sub ecx, dword [eax + 0x6f91c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f920]
sub ecx, dword [eax + 0x6f918]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f91c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f918]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f690], 0
je 0x48f9b0
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f92c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f928]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f944]
sub ecx, dword [eax + 0x6f93c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f940]
sub ecx, dword [eax + 0x6f938]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f93c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f938]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f80c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f808]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f824]
sub eax, dword [edx + 0x6f81c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f820]
sub eax, dword [edx + 0x6f818]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f81c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f818]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f698], 0
je 0x48faf3
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f88c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f888]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f8a4]
sub eax, dword [edx + 0x6f89c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f8a0]
sub eax, dword [edx + 0x6f898]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f89c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f898]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f69c], 0
je 0x48fc4e
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
je 0x48fbb6
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f70c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f708]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f724]
sub ecx, dword [eax + 0x6f71c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f720]
sub ecx, dword [eax + 0x6f718]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f71c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f718]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x48fc4e
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f72c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f728]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f744]
sub eax, dword [edx + 0x6f73c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f740]
sub eax, dword [edx + 0x6f738]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f73c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f738]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a0], 0
je 0x48fda9
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6ac], 0
je 0x48fd11
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f74c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f748]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f764]
sub ecx, dword [eax + 0x6f75c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f760]
sub ecx, dword [eax + 0x6f758]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f75c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f758]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x48fda9
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f76c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f768]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f784]
sub eax, dword [edx + 0x6f77c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f780]
sub eax, dword [edx + 0x6f778]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f77c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f778]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x120b4], 0
je 0x49066d
push 0xffff00
lea ecx, [ebp - 0x94]
call fcn.004d2609
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f69c], 0
je 0x490052
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f718]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f71c]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f720]
sub ecx, dword [eax + 0x19a8]
add ecx, 0xf
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f724]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f67c], 0
je 0x48feda
push 0x400
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x39c]
add eax, 0x10854
push eax
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x39c]
add edx, 0x10854
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
jmp 0x48ff2d
push 0x400
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x538c
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x39c]
add eax, 0x538c
push eax
lea ecx, [ebp - 0x94]
call fcn.00404590
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f678], 0
je 0x490052
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1244]
add eax, 2
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1240]
add eax, 2
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f8ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f8a8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f8c4]
sub eax, dword [edx + 0x6f8bc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f8c0]
sub eax, dword [edx + 0x6f8b8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x1240]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1244]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
push 1
push 0x14
push 0x64
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1240]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x19ac]
lea eax, [eax + edx - 0x17]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x1244]
mov eax, dword [ebp - 0x39c]
add edx, dword [eax + 0x6f8c0]
mov ecx, dword [ebp - 0x39c]
sub edx, dword [ecx + 0x6f8b8]
add edx, 1
push edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x73af8
call fcn.004cf94d
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a0], 0
je 0x4903a8
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f758]
sub edx, dword [ecx + 0x19a8]
add edx, 0xf
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f75c]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f760]
sub ecx, dword [eax + 0x19a8]
add ecx, 0xf
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f764]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f684], 0
je 0x4901cb
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f69c], 0
jne 0x490172
push 0x400
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x10854
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x39c]
add eax, 0x10854
push eax
lea ecx, [ebp - 0x94]
call fcn.00404590
jmp 0x4901c6
push 0x400
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x39c]
add edx, 0x10a5c
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x10a5c
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
jmp 0x490283
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f69c], 0
jne 0x49022f
push 0x400
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x538c
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x39c]
add eax, 0x538c
push eax
lea ecx, [ebp - 0x94]
call fcn.00404590
jmp 0x490283
push 0x400
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x39c]
add edx, 0x1064c
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x1064c
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f680], 0
je 0x4903a8
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1244]
add ecx, 2
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1240]
add ecx, 2
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1240], ecx
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f8cc]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f8c8]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f8e4]
sub ecx, dword [eax + 0x6f8dc]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f8e0]
sub ecx, dword [eax + 0x6f8d8]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1240]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x1244]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
push 1
push 0x14
push 0x64
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1240]
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x19ac]
lea ecx, [ecx + eax - 0x17]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1244]
mov ecx, dword [ebp - 0x39c]
add eax, dword [ecx + 0x6f8e0]
mov edx, dword [ebp - 0x39c]
sub eax, dword [edx + 0x6f8d8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x73b34
call fcn.004cf94d
push 0
lea ecx, [ebp - 0x94]
call fcn.004d2609
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f514]
sub edx, dword [ecx + 0x19a8]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f518]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f51c]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f520]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
push 0x410
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x39c]
add edx, 0x5594
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0x10
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x5594
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
call fcn.004ae871
test eax, eax
jne 0x490589
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f534]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x123c], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f538]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1240], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f53c]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f540]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1248], ecx
push 0x410
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x579c
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0x10
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x39c]
add eax, 0x579c
push eax
lea ecx, [ebp - 0x94]
call fcn.00404590
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f554]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x123c], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f558]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1240], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f55c]
sub edx, dword [ecx + 0x19a8]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1244], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f560]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1248], eax
push 0x410
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x39c]
add eax, 0x59a4
push eax
lea ecx, [ebp - 0x94]
call fcn.00404590
push 0x10
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x39c]
add edx, 0x59a4
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
call fcn.004ae871
test eax, eax
jne 0x492434
mov dword [ebp - 0xc0], 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xbc]
call fcn.00451940
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x727a0], 0
jne 0x49070f
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f67c], 0
je 0x4906c4
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x49070f
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f684], 0
je 0x4906e2
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6ac], 0
jne 0x49070f
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x490700
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
je 0x490719
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x71540], 0
je 0x490719
mov dword [ebp - 0xc0], 1
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6fd5c], 0
jne 0x490bae
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f694], 0
je 0x49076a
cmp dword [ebp - 0xc0], 0
je 0x49076a
lea ecx, [ebp - 0xbc]
push ecx
push 7
mov edx, dword [ebp - 0x39c]
push edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
jmp 0x490bae
mov eax, dword [ebp - 0x39c]
add eax, 0x6f958
push eax
push 7
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
je 0x4907ba
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x71540], 0
je 0x4907ba
mov dword [ebp - 0x3a0], 0
jmp 0x4907c4
mov dword [ebp - 0x3a0], 1
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8e0], 0
je 0x4907e7
mov edx, dword [ebp - 0x39c]
add edx, 0x6f948
mov dword [ebp - 0x3a4], edx
jmp 0x4907f8
mov eax, dword [ebp - 0x39c]
add eax, 0x6f948
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x368], ecx
mov edx, dword [ebp - 0x3a0]
push edx
push 0x66
mov eax, dword [ebp - 0x368]
push eax
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x8e0], 0
je 0x4908da
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f94c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f948]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f964]
sub edx, dword [ecx + 0x6f95c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f960]
sub edx, dword [ecx + 0x6f958]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f95c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f958]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x490972
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f96c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f968]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f984]
sub ecx, dword [eax + 0x6f97c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f980]
sub ecx, dword [eax + 0x6f978]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f97c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f978]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x727a0], 0
je 0x490a54
lea ecx, [ebp - 0xd0]
call fcn.00404180
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f978]
sub edx, dword [ecx + 0x19a8]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xd0]
add ecx, dword [eax + 0x6f980]
mov edx, dword [ebp - 0x39c]
sub ecx, dword [edx + 0x6f978]
add ecx, 1
mov dword [ebp - 0xc8], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f97c]
sub edx, dword [ecx + 0x19ac]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xcc]
add ecx, dword [eax + 0x6f984]
mov edx, dword [ebp - 0x39c]
sub ecx, dword [edx + 0x6f97c]
add ecx, 1
mov dword [ebp - 0xc4], ecx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xcc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xc8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xc4]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f67c], 0
je 0x490a72
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x490ac5
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f684], 0
je 0x490a90
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6ac], 0
jne 0x490ac5
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x490ab2
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
je 0x490bae
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x71540], 0
je 0x490bae
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f958]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x123c], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x123c]
mov edx, dword [ebp - 0x39c]
add ecx, dword [edx + 0x6f960]
mov eax, dword [ebp - 0x39c]
sub ecx, dword [eax + 0x6f958]
add ecx, 1
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f95c]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1240], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x1240]
mov eax, dword [ebp - 0x39c]
add edx, dword [eax + 0x6f964]
mov ecx, dword [ebp - 0x39c]
sub edx, dword [ecx + 0x6f95c]
add edx, 1
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
sub esp, 0x10
mov edx, esp
mov dword [ebp - 0x36c], esp
push ecx
mov ecx, edx
call fcn.00411650
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov dword [ebp - 0xc0], 1
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6fd58], 0
jne 0x491038
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f694], 0
je 0x490bff
cmp dword [ebp - 0xc0], 0
je 0x490bff
lea eax, [ebp - 0xbc]
push eax
push 6
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
jmp 0x491038
mov edx, dword [ebp - 0x39c]
add edx, 0x6f998
push edx
push 6
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
je 0x490c50
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x71540], 0
je 0x490c50
mov dword [ebp - 0x3a8], 0
jmp 0x490c5a
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x8dc], 0
je 0x490c7d
mov ecx, dword [ebp - 0x39c]
add ecx, 0x6f988
mov dword [ebp - 0x3ac], ecx
jmp 0x490c8f
mov edx, dword [ebp - 0x39c]
add edx, 0x6f9a8
mov dword [ebp - 0x3ac], edx
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x3a8]
push ecx
push 0x66
mov edx, dword [ebp - 0x370]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x8dc], 0
je 0x490d71
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f98c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f988]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9a4]
sub ecx, dword [eax + 0x6f99c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9a0]
sub ecx, dword [eax + 0x6f998]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f99c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f998]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x490e09
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f9ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f9a8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f9c4]
sub eax, dword [edx + 0x6f9bc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f9c0]
sub eax, dword [edx + 0x6f9b8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f9bc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f9b8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x727a0], 0
je 0x490eeb
lea ecx, [ebp - 0xe0]
call fcn.00404180
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9b8]
sub ecx, dword [eax + 0x19a8]
mov dword [ebp - 0xe0], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0xe0]
add eax, dword [edx + 0x6f9c0]
mov ecx, dword [ebp - 0x39c]
sub eax, dword [ecx + 0x6f9b8]
add eax, 1
mov dword [ebp - 0xd8], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9bc]
sub ecx, dword [eax + 0x19ac]
mov dword [ebp - 0xdc], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0xdc]
add eax, dword [edx + 0x6f9c4]
mov ecx, dword [ebp - 0x39c]
sub eax, dword [ecx + 0x6f9bc]
add eax, 1
mov dword [ebp - 0xd4], eax
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xe0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xdc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xd8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xd4]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f67c], 0
je 0x490f09
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
jne 0x490f5c
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f684], 0
je 0x490f27
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
jne 0x490f5c
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
jne 0x490f49
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6ac], 0
je 0x491038
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x71540], 0
je 0x491038
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f998]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x123c], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x123c]
mov ecx, dword [ebp - 0x39c]
add eax, dword [ecx + 0x6f9a0]
mov edx, dword [ebp - 0x39c]
sub eax, dword [edx + 0x6f998]
add eax, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f99c]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1240], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1240]
mov edx, dword [ebp - 0x39c]
add ecx, dword [edx + 0x6f9a4]
mov eax, dword [ebp - 0x39c]
sub ecx, dword [eax + 0x6f99c]
add ecx, 1
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1248], ecx
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x374], esp
push eax
call fcn.00411650
lea ecx, [ebp - 0x94]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6fd54], 0
jne 0x4914c3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f694], 0
je 0x491089
cmp dword [ebp - 0xc0], 0
je 0x491089
lea ecx, [ebp - 0xbc]
push ecx
push 5
mov edx, dword [ebp - 0x39c]
push edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
jmp 0x4914c3
mov eax, dword [ebp - 0x39c]
add eax, 0x6f9d8
push eax
push 5
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
je 0x4910d9
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x71540], 0
je 0x4910d9
mov dword [ebp - 0x3b0], 0
jmp 0x4910e3
mov dword [ebp - 0x3b0], 1
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8d8], 0
je 0x491106
mov edx, dword [ebp - 0x39c]
add edx, 0x6f9c8
mov dword [ebp - 0x3b4], edx
jmp 0x491117
mov eax, dword [ebp - 0x39c]
add eax, 0x6f9e8
mov dword [ebp - 0x3b4], eax
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x3b0]
push edx
push 0x66
mov eax, dword [ebp - 0x378]
push eax
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x8d8], 0
je 0x4911f9
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f9cc]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f9c8]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9e4]
sub edx, dword [ecx + 0x6f9dc]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9e0]
sub edx, dword [ecx + 0x6f9d8]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9dc]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9d8]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x491291
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f9ec]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f9e8]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa04]
sub ecx, dword [eax + 0x6f9fc]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa00]
sub ecx, dword [eax + 0x6f9f8]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9fc]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9f8]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x727a0], 0
je 0x491373
lea ecx, [ebp - 0xf0]
call fcn.00404180
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9f8]
sub edx, dword [ecx + 0x19a8]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xf0]
add ecx, dword [eax + 0x6fa00]
mov edx, dword [ebp - 0x39c]
sub ecx, dword [edx + 0x6f9f8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9fc]
sub edx, dword [ecx + 0x19ac]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0xec]
add ecx, dword [eax + 0x6fa04]
mov edx, dword [ebp - 0x39c]
sub ecx, dword [edx + 0x6f9fc]
add ecx, 1
mov dword [ebp - 0xe4], ecx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0xf0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xec]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xe8]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0xe4]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f67c], 0
je 0x491391
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x4913e4
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f684], 0
je 0x4913af
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6ac], 0
jne 0x4913e4
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x4913d1
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
je 0x4914c3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x71540], 0
je 0x4914c3
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f9d8]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x123c], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x123c]
mov edx, dword [ebp - 0x39c]
add ecx, dword [edx + 0x6f9e0]
mov eax, dword [ebp - 0x39c]
sub ecx, dword [eax + 0x6f9d8]
add ecx, 1
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f9dc]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1240], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x1240]
mov eax, dword [ebp - 0x39c]
add edx, dword [eax + 0x6f9e4]
mov ecx, dword [ebp - 0x39c]
sub edx, dword [ecx + 0x6f9dc]
add edx, 1
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
sub esp, 0x10
mov edx, esp
mov dword [ebp - 0x37c], esp
push ecx
mov ecx, edx
call fcn.00411650
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6fd50], 0
jne 0x49194d
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f694], 0
je 0x491514
cmp dword [ebp - 0xc0], 0
je 0x491514
lea eax, [ebp - 0xbc]
push eax
push 4
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
jmp 0x49194d
mov edx, dword [ebp - 0x39c]
add edx, 0x6fa18
push edx
push 4
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
je 0x491565
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x71540], 0
je 0x491565
mov dword [ebp - 0x3b8], 0
jmp 0x49156f
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x8d4], 0
je 0x491592
mov ecx, dword [ebp - 0x39c]
add ecx, 0x6fa08
mov dword [ebp - 0x3bc], ecx
jmp 0x4915a4
mov edx, dword [ebp - 0x39c]
add edx, 0x6fa28
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x3b8]
push ecx
push 0x66
mov edx, dword [ebp - 0x380]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x8d4], 0
je 0x491686
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fa0c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fa08]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa24]
sub ecx, dword [eax + 0x6fa1c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa20]
sub ecx, dword [eax + 0x6fa18]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa1c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa18]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x49171e
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fa2c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fa28]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa44]
sub eax, dword [edx + 0x6fa3c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa40]
sub eax, dword [edx + 0x6fa38]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa3c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa38]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x727a0], 0
je 0x491800
lea ecx, [ebp - 0x100]
call fcn.00404180
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa38]
sub ecx, dword [eax + 0x19a8]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x100]
add eax, dword [edx + 0x6fa40]
mov ecx, dword [ebp - 0x39c]
sub eax, dword [ecx + 0x6fa38]
add eax, 1
mov dword [ebp - 0xf8], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa3c]
sub ecx, dword [eax + 0x19ac]
mov dword [ebp - 0xfc], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0xfc]
add eax, dword [edx + 0x6fa44]
mov ecx, dword [ebp - 0x39c]
sub eax, dword [ecx + 0x6fa3c]
add eax, 1
mov dword [ebp - 0xf4], eax
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x100]
mov dword [edx], eax
mov ecx, dword [ebp - 0xfc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xf8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f67c], 0
je 0x49181e
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
jne 0x491871
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f684], 0
je 0x49183c
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
jne 0x491871
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
jne 0x49185e
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6ac], 0
je 0x49194d
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x71540], 0
je 0x49194d
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa18]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x123c], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x123c]
mov ecx, dword [ebp - 0x39c]
add eax, dword [ecx + 0x6fa20]
mov edx, dword [ebp - 0x39c]
sub eax, dword [edx + 0x6fa18]
add eax, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa1c]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1240], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1240]
mov edx, dword [ebp - 0x39c]
add ecx, dword [edx + 0x6fa24]
mov eax, dword [ebp - 0x39c]
sub ecx, dword [eax + 0x6fa1c]
add ecx, 1
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1248], ecx
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x384], esp
push eax
call fcn.00411650
lea ecx, [ebp - 0x94]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6fd4c], 0
jne 0x491d72
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6a8], 0
je 0x49198a
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x71540], 0
je 0x49198a
mov dword [ebp - 0x3c0], 0
jmp 0x491994
mov dword [ebp - 0x3c0], 1
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x8d0], 0
je 0x4919b6
mov eax, dword [ebp - 0x39c]
add eax, 0x6fa48
mov dword [ebp - 0x3c4], eax
jmp 0x4919c8
mov ecx, dword [ebp - 0x39c]
add ecx, 0x6fa68
mov dword [ebp - 0x3c4], ecx
mov edx, dword [ebp - 0x3c4]
mov dword [ebp - 0x388], edx
mov eax, dword [ebp - 0x3c0]
push eax
push 0x66
mov ecx, dword [ebp - 0x388]
push ecx
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8d0], 0
je 0x491aaa
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fa4c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fa48]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa64]
sub eax, dword [edx + 0x6fa5c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa60]
sub eax, dword [edx + 0x6fa58]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa5c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa58]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x491b42
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fa6c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fa68]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fa84]
sub edx, dword [ecx + 0x6fa7c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fa80]
sub edx, dword [ecx + 0x6fa78]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fa7c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fa78]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x727a0], 0
je 0x491c24
lea ecx, [ebp - 0x110]
call fcn.00404180
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa78]
sub eax, dword [edx + 0x19a8]
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x110]
add edx, dword [ecx + 0x6fa80]
mov eax, dword [ebp - 0x39c]
sub edx, dword [eax + 0x6fa78]
add edx, 1
mov dword [ebp - 0x108], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa7c]
sub eax, dword [edx + 0x19ac]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x10c]
add edx, dword [ecx + 0x6fa84]
mov eax, dword [ebp - 0x39c]
sub edx, dword [eax + 0x6fa7c]
add edx, 1
mov dword [ebp - 0x104], edx
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x110]
mov dword [ecx], edx
mov eax, dword [ebp - 0x10c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x108]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x104]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x94]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f67c], 0
je 0x491c42
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6a8], 0
jne 0x491c95
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f684], 0
je 0x491c60
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6ac], 0
jne 0x491c95
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6a8], 0
jne 0x491c82
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6ac], 0
je 0x491d72
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x71540], 0
je 0x491d72
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fa58]
sub edx, dword [ecx + 0x19a8]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x123c]
mov eax, dword [ebp - 0x39c]
add edx, dword [eax + 0x6fa60]
mov ecx, dword [ebp - 0x39c]
sub edx, dword [ecx + 0x6fa58]
add edx, 1
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1244], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa5c]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x1240]
mov ecx, dword [ebp - 0x39c]
add eax, dword [ecx + 0x6fa64]
mov edx, dword [ebp - 0x39c]
sub eax, dword [edx + 0x6fa5c]
add eax, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1248], eax
mov edx, dword [ebp - 0x39c]
add edx, 0x123c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x38c], esp
push edx
call fcn.00411650
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6fd48], 0
jne 0x4921fc
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f694], 0
je 0x491dc3
cmp dword [ebp - 0xc0], 0
je 0x491dc3
lea eax, [ebp - 0xbc]
push eax
push 2
mov ecx, dword [ebp - 0x39c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
jmp 0x4921fc
mov edx, dword [ebp - 0x39c]
add edx, 0x6fa98
push edx
push 2
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x26c0
call fcn.004ca9c2
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
je 0x491e14
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x71540], 0
je 0x491e14
mov dword [ebp - 0x3c8], 0
jmp 0x491e1e
mov dword [ebp - 0x3c8], 1
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x8cc], 0
je 0x491e41
mov ecx, dword [ebp - 0x39c]
add ecx, 0x6fa88
mov dword [ebp - 0x3cc], ecx
jmp 0x491e53
mov edx, dword [ebp - 0x39c]
add edx, 0x6faa8
mov dword [ebp - 0x3cc], edx
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x390], eax
mov ecx, dword [ebp - 0x3c8]
push ecx
push 0x66
mov edx, dword [ebp - 0x390]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x8cc], 0
je 0x491f35
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fa8c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fa88]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6faa4]
sub ecx, dword [eax + 0x6fa9c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6faa0]
sub ecx, dword [eax + 0x6fa98]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa9c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa98]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x491fcd
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6faac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6faa8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fac4]
sub eax, dword [edx + 0x6fabc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fac0]
sub eax, dword [edx + 0x6fab8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fabc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fab8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x727a0], 0
je 0x4920af
lea ecx, [ebp - 0x120]
call fcn.00404180
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa98]
sub ecx, dword [eax + 0x19a8]
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x120]
add eax, dword [edx + 0x6faa0]
mov ecx, dword [ebp - 0x39c]
sub eax, dword [ecx + 0x6fa98]
add eax, 1
mov dword [ebp - 0x118], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa9c]
sub ecx, dword [eax + 0x19ac]
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x11c]
add eax, dword [edx + 0x6faa4]
mov ecx, dword [ebp - 0x39c]
sub eax, dword [ecx + 0x6fa9c]
add eax, 1
mov dword [ebp - 0x114], eax
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x120]
mov dword [edx], eax
mov ecx, dword [ebp - 0x11c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x118]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x114]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f67c], 0
je 0x4920cd
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
jne 0x492120
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f684], 0
je 0x4920eb
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
jne 0x492120
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f6a8], 0
jne 0x49210d
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6ac], 0
je 0x4921fc
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x71540], 0
je 0x4921fc
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fa98]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x123c], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x123c]
mov ecx, dword [ebp - 0x39c]
add eax, dword [ecx + 0x6faa0]
mov edx, dword [ebp - 0x39c]
sub eax, dword [edx + 0x6fa98]
add eax, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fa9c]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1240], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x1240]
mov edx, dword [ebp - 0x39c]
add ecx, dword [edx + 0x6faa4]
mov eax, dword [ebp - 0x39c]
sub ecx, dword [eax + 0x6fa9c]
add ecx, 1
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1248], ecx
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x394], esp
push eax
call fcn.00411650
lea ecx, [ebp - 0x94]
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.0040c8a3
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x1af0], 0
je 0x492434
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x727a0], 0
je 0x4922bf
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fd0c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fd08]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd24]
sub edx, dword [ecx + 0x6fd1c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd20]
sub edx, dword [ecx + 0x6fd18]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd1c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd18]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x492357
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fd2c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fd28]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fd44]
sub ecx, dword [eax + 0x6fd3c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fd40]
sub ecx, dword [eax + 0x6fd38]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fd3c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fd38]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
lea ecx, [ebp - 0x130]
call fcn.00404180
lea ecx, [ebp - 0x94]
call fcn.00411670
mov dword [ebp - 0x33c], eax
push 0x52fa5c
push 0x104
lea edx, [ebp - 0x338]
push edx
push 0x530584
push str.spdif_dolbyac3_txt
push 0x51d644
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [ebp - 0x39c]
add eax, 0x6fd18
push eax
lea ecx, [ebp - 0x130]
call fcn.00404110
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x19ac]
neg edx
sub edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x19a8]
neg ecx
add ecx, 0x14
push ecx
lea ecx, [ebp - 0x130]
call fcn.004040f0
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f6a8]
neg eax
sbb eax, eax
and eax, 0x9f9ea0
add eax, 0x606060
push eax
lea ecx, [ebp - 0x94]
call fcn.004d2609
push 0
lea ecx, [ebp - 0x130]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x338]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
mov eax, dword [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x94]
call fcn.004d2609
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x71448], 0
jne 0x4924e1
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a8], 0
jne 0x492471
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f6ac], 0
jne 0x492471
mov dword [ebp - 0x3d0], 0
jmp 0x49247b
mov dword [ebp - 0x3d0], 1
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x71540], 0
je 0x49249e
mov edx, dword [ebp - 0x39c]
add edx, 0x70610
mov dword [ebp - 0x3d4], edx
jmp 0x4924af
mov eax, dword [ebp - 0x39c]
add eax, 0x70630
mov dword [ebp - 0x3d4], eax
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp - 0x398], ecx
mov edx, dword [ebp - 0x3d0]
push edx
push 0x66
mov eax, dword [ebp - 0x398]
push eax
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x39c]
call fcn.00412cc3
jmp 0x4936d3
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6f674], 0
je 0x4936d3
mov ecx, dword [ebp - 0x39c]
add ecx, 0x2718
push ecx
mov ecx, dword [ebp - 0x39c]
call fcn.00440384
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f84c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f848]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f864]
sub eax, dword [edx + 0x6f85c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f860]
sub eax, dword [edx + 0x6f858]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f85c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f858]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x6f69c], 0
jne 0x4925cb
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x6f6a0], 0
je 0x492663
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6f82c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f828]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f844]
sub ecx, dword [eax + 0x6f83c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f840]
sub ecx, dword [eax + 0x6f838]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f83c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f838]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6f86c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6f868]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f884]
sub eax, dword [edx + 0x6f87c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f880]
sub eax, dword [edx + 0x6f878]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f87c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f878]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x120b4], 0
je 0x492967
push 0xffff00
lea ecx, [ebp - 0x94]
call fcn.004d2609
push 0
lea ecx, [ebp - 0x94]
call fcn.004d2609
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f574]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x123c], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f578]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1240], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f57c]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f580]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1248], ecx
push 0x10
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x9cac
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f594]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x123c], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f598]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1240], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f59c]
sub eax, dword [edx + 0x19a8]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1244], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f5a0]
sub ecx, dword [eax + 0x19ac]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1248], ecx
push 0x10
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x9eb4
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
mov edx, dword [ebp - 0x39c]
cmp dword [edx + 0x928], 0
jne 0x492967
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f5b4]
sub edx, dword [ecx + 0x19a8]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6f5b8]
sub eax, dword [edx + 0x19ac]
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6f5bc]
sub ecx, dword [eax + 0x19a8]
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6f5c0]
sub edx, dword [ecx + 0x19ac]
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
push 0x10
mov ecx, dword [ebp - 0x39c]
add ecx, 0x123c
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x39c]
add edx, 0xa0bc
push edx
lea ecx, [ebp - 0x94]
call fcn.00404590
lea eax, [ebp - 0x364]
push eax
mov ecx, dword [0x5348f8]
push ecx
call fcn.004af2e3
add esp, 8
push 0x8800c6
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fc6c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fc68]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc84]
sub eax, dword [edx + 0x6fc7c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc80]
sub eax, dword [edx + 0x6fc78]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc7c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc78]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
push 0xee0086
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fc4c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fc48]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc64]
sub edx, dword [ecx + 0x6fc5c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc60]
sub edx, dword [ecx + 0x6fc58]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc5c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc58]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
cmp dword [ebp - 0x360], 0
jne 0x492d81
push 0xcc0020
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fc8c]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fc88]
push eax
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fca4]
sub ecx, dword [eax + 0x6fc9c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fca0]
sub ecx, dword [eax + 0x6fc98]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fc9c]
sub ecx, dword [eax + 0x19ac]
push ecx
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fc98]
sub ecx, dword [eax + 0x19a8]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404520
cmp dword [ebp - 0x344], 0
je 0x492bfc
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fccc]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fcc8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fce4]
sub eax, dword [edx + 0x6fcdc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fce0]
sub eax, dword [edx + 0x6fcd8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fcdc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fcd8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x492c94
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fcec]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fce8]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd04]
sub edx, dword [ecx + 0x6fcfc]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd00]
sub edx, dword [ecx + 0x6fcf8]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fcfc]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fcf8]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc78]
sub edx, dword [ecx + 0x19a8]
add edx, 0x32
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x123c], edx
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc7c]
sub eax, dword [edx + 0x19ac]
add eax, 7
mov ecx, dword [ebp - 0x39c]
mov dword [ecx + 0x1240], eax
mov edx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x39c]
mov ecx, dword [edx + 0x6fc80]
sub ecx, dword [eax + 0x19a8]
add ecx, 0xfa
mov edx, dword [ebp - 0x39c]
mov dword [edx + 0x1244], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc84]
sub edx, dword [ecx + 0x19ac]
add edx, 0x1e
mov eax, dword [ebp - 0x39c]
mov dword [eax + 0x1248], edx
mov ecx, dword [ebp - 0x340]
push ecx
push str._d_Hz
mov edx, dword [ebp - 0x39c]
add edx, 0x948
push edx
call fcn.004ba7bf
add esp, 0xc
push 0
mov eax, dword [ebp - 0x39c]
add eax, 0x123c
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x39c]
add ecx, 0x948
push ecx
lea ecx, [ebp - 0x94]
call fcn.00404590
jmp 0x492eb1
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fcac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fca8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fcc4]
sub eax, dword [edx + 0x6fcbc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fcc0]
sub eax, dword [edx + 0x6fcb8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fcbc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fcb8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fcec]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fce8]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd04]
sub edx, dword [ecx + 0x6fcfc]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fd00]
sub edx, dword [ecx + 0x6fcf8]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fcfc]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fcf8]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6fd74], 0
jne 0x49300c
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8b0], 0xa
jne 0x492f74
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6facc]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fac8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fae4]
sub eax, dword [edx + 0x6fadc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fae0]
sub eax, dword [edx + 0x6fad8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fadc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fad8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x49300c
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6faec]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fae8]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb04]
sub edx, dword [ecx + 0x6fafc]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb00]
sub edx, dword [ecx + 0x6faf8]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fafc]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6faf8]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6fd70], 0
jne 0x493167
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8b0], 9
jne 0x4930cf
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fb0c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fb08]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb24]
sub eax, dword [edx + 0x6fb1c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb20]
sub eax, dword [edx + 0x6fb18]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb1c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb18]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x493167
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fb2c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fb28]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb44]
sub edx, dword [ecx + 0x6fb3c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb40]
sub edx, dword [ecx + 0x6fb38]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb3c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb38]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6fd6c], 0
jne 0x4932c2
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8b0], 8
jne 0x49322a
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fb4c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fb48]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb64]
sub eax, dword [edx + 0x6fb5c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb60]
sub eax, dword [edx + 0x6fb58]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb5c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb58]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x4932c2
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fb6c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fb68]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb84]
sub edx, dword [ecx + 0x6fb7c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb80]
sub edx, dword [ecx + 0x6fb78]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb7c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fb78]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6fd68], 0
jne 0x49341d
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8b0], 7
jne 0x493385
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fb8c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fb88]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fba4]
sub eax, dword [edx + 0x6fb9c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fba0]
sub eax, dword [edx + 0x6fb98]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb9c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fb98]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x49341d
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fbac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fba8]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fbc4]
sub edx, dword [ecx + 0x6fbbc]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fbc0]
sub edx, dword [ecx + 0x6fbb8]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fbbc]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fbb8]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6fd64], 0
jne 0x493578
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8b0], 6
jne 0x4934e0
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fbcc]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fbc8]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fbe4]
sub eax, dword [edx + 0x6fbdc]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fbe0]
sub eax, dword [edx + 0x6fbd8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fbdc]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fbd8]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x493578
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fbec]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fbe8]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc04]
sub edx, dword [ecx + 0x6fbfc]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc00]
sub edx, dword [ecx + 0x6fbf8]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fbfc]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fbf8]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x6fd60], 0
jne 0x4936d3
mov ecx, dword [ebp - 0x39c]
cmp dword [ecx + 0x8b0], 5
jne 0x49363b
push 0xcc0020
mov edx, dword [ebp - 0x39c]
mov eax, dword [edx + 0x6fc0c]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fc08]
push edx
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc24]
sub eax, dword [edx + 0x6fc1c]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc20]
sub eax, dword [edx + 0x6fc18]
add eax, 1
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc1c]
sub eax, dword [edx + 0x19ac]
push eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ebp - 0x39c]
mov eax, dword [ecx + 0x6fc18]
sub eax, dword [edx + 0x19a8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00404520
jmp 0x4936d3
push 0xcc0020
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx + 0x6fc2c]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x6fc28]
push ecx
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc44]
sub edx, dword [ecx + 0x6fc3c]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc40]
sub edx, dword [ecx + 0x6fc38]
add edx, 1
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc3c]
sub edx, dword [ecx + 0x19ac]
push edx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x39c]
mov edx, dword [eax + 0x6fc38]
sub edx, dword [ecx + 0x19a8]
push edx
lea ecx, [ebp - 0x94]
call fcn.00404520
mov eax, dword [ebp - 0x39c]
mov ecx, dword [eax + 0x196c]
push ecx
mov ecx, dword [ebp - 0x39c]
add ecx, 0x73bac
call fcn.00404790
push 0
mov ecx, dword [ebp - 0x39c]
add ecx, 0x73bac
call fcn.00404680
cmp dword [ebp - 0x10], 0
je 0x493719
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0x94]
call fcn.004d2566
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.00404650
mov ecx, dword [ebp - 0x39c]
call fcn.0043f167
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x84]
call fcn.00404260
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x94]
call fcn.004d2450
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.004d2450
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret