Function at 0x45fd60
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x472660
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8dc
mov eax, dword [0x4921d0]
mov dword [ebp - 0x10], eax
push edi
mov dword [ebp - 0x8e8], ecx
cmp dword [ebp + 8], 0
je 0x45fd9c
movzx eax, word [ebp + 0xc]
cmp eax, 0x64
jle 0x45fda3
xor al, al
jmp 0x460dfc
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x28f8
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetHeight_void_]
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x28f8
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetWidth_void_]
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x1c
call fcn.00414e30
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x26e8
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetHeight_void_]
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x26e8
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetWidth_void_]
cdq
mov ecx, 0xa
idiv ecx
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x24
call fcn.00414e30
mov dx, word [0x483004]
mov word [ebp - 0x424], dx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x422]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x104
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.ServiceCore.dll_public:_static_bool___cdecl_CWHService::GetWorkDirectory_wchar_t__const__unsigned_short_int_]
add esp, 8
movzx ecx, byte [ebp + 0x10]
test ecx, ecx
je 0x45fe7c
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x424]
push eax
push str._s_sAvertCheatMode
push 0x104
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x11a8
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x14
jmp 0x45fea7
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x424]
push eax
push str._s_s
push 0x104
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x11a8
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x14
mov dx, word [0x483040]
mov word [ebp - 0x21c], dx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x21a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x8e8]
add eax, 0x11a8
push eax
push 0x483044
push 0x104
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
movzx edx, byte [ebp + 0x10]
test edx, edx
je 0x460064
mov ax, word [0x483070]
mov word [ebp - 0x83c], ax
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x83a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x11a8
push ecx
push 0x483074
push 0x104
lea edx, [ebp - 0x83c]
push edx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
lea ecx, [ebp - 0x634]
call dword [sym.imp.WHImage.dll_public:_void___thiscall_CPngImage::constructor_void_]
mov dword [ebp - 4], 0
lea eax, [ebp - 0x83c]
push eax
lea ecx, [ebp - 0x634]
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::LoadImageW_wchar_t_const__]
movzx ecx, al
test ecx, ecx
jne 0x45ffe9
push 0x208
push 0
mov edx, dword [ebp - 0x8e8]
add edx, 0x11a8
push edx
call sub.MSVCR71.dll_memset
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
push str._sAvertCheatMode
push 0x104
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x11a8
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
push 0x208
push 0
lea edx, [ebp - 0x21c]
push edx
call sub.MSVCR71.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x8e8]
add eax, 0x11a8
push eax
push str._sTableResource.INI
push 0x104
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
mov edx, dword [ebp - 0x8e8]
add edx, 0x11a8
push edx
push str._sWaitDistribute.bmp
push 0x104
lea eax, [ebp - 0x83c]
push eax
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
lea ecx, [ebp - 0x83c]
push ecx
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x1a08
call fcn.0044cac0
test eax, eax
jge 0x460051
mov byte [ebp - 0x8e1], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x634]
call dword [sym.imp.WHImage.dll_public_virtual:_void___thiscall_CPngImage::destructor_void_]
mov al, byte [ebp - 0x8e1]
jmp 0x460dfc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x634]
call dword [sym.imp.WHImage.dll_public_virtual:_void___thiscall_CPngImage::destructor_void_]
lea edx, [ebp - 0x21c]
push edx
push str.Color_Name
push 0x483124
mov eax, dword [ebp - 0x8e8]
add eax, 0x100c
push eax
mov ecx, dword [ebp - 0x8e8]
call fcn.00461ab0
lea ecx, [ebp - 0x21c]
push ecx
push str.Color_Member
push 0x48314c
mov edx, dword [ebp - 0x8e8]
add edx, 0x1010
push edx
mov ecx, dword [ebp - 0x8e8]
call fcn.00461ab0
lea eax, [ebp - 0x21c]
push eax
push str.Color_Master
push str.Color
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x1014
push ecx
mov ecx, dword [ebp - 0x8e8]
call fcn.00461ab0
lea edx, [ebp - 0x21c]
push edx
push str.Point_Lock
push 0x483198
mov eax, dword [ebp - 0x8e8]
add eax, 0x44
push eax
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
lea ecx, [ebp - 0x21c]
push ecx
push str.Point_Enter
push 0x4831c4
mov edx, dword [ebp - 0x8e8]
add edx, 0x4c
push edx
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
lea eax, [ebp - 0x21c]
push eax
push str.Point_TableID
push 0x4831f4
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x54
push ecx
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
lea edx, [ebp - 0x21c]
push edx
push str.Point_State
push 0x483220
mov eax, dword [ebp - 0x8e8]
add eax, 0x37c
push eax
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
lea ecx, [ebp - 0x21c]
push ecx
push str.Point_t
push 0x483244
mov edx, dword [ebp - 0x8e8]
add edx, 0x384
push edx
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
lea eax, [ebp - 0x21c]
push eax
push 1
push str.ShowUser
push 0x48326c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x2c], al
lea edx, [ebp - 0x21c]
push edx
push 1
push str.ShowChair
push 0x483294
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x2f], al
lea edx, [ebp - 0x21c]
push edx
push 1
push str.ShowTable
push 0x4832bc
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x30], al
lea edx, [ebp - 0x21c]
push edx
push 0
push str.ShowChip
push 0x4832e4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x2d], al
lea edx, [ebp - 0x21c]
push edx
push 1
push str.ShowFocus
push 0x48330c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x31], al
lea edx, [ebp - 0x21c]
push edx
push 0
push str.ShowEnter
push 0x483334
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x2e], al
lea edx, [ebp - 0x21c]
push edx
push 0
push str.CustomUser
push 0x483360
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x32], al
lea edx, [ebp - 0x21c]
push edx
push 1
push str.ShowTableID
push 0x48338c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x33], al
lea edx, [ebp - 0x21c]
push edx
push 1
push str.RenderImage
push 0x4833b8
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
sub eax, 1
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x8e8]
mov byte [ecx + 0x34], al
lea edx, [ebp - 0x21c]
push edx
push 2
push str.TableItemCount
push 0x4833ec
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x8e8]
mov word [ecx + 0x38], ax
lea edx, [ebp - 0x21c]
push edx
movzx eax, word [ebp + 0xc]
push eax
push str.ChairItemCount
push 0x483420
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x8e8]
mov word [ecx + 0x3a], ax
lea edx, [ebp - 0x21c]
push edx
push 1
push str.UserGenreCount
push 0x483454
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x8e8]
mov word [ecx + 0x3c], ax
lea edx, [ebp - 0x21c]
push edx
push 1
push str.TableGenreCount
push 0x483488
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x8e8]
mov word [ecx + 0x3e], ax
lea edx, [ebp - 0x21c]
push edx
push 1
push str.ChairGenreCount
push str.Attribute
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ecx, dword [ebp - 0x8e8]
mov word [ecx + 0x40], ax
mov dx, word [ebp + 0xc]
push edx
call dword [sym.imp.SkinControl.dll_public:_static_class_CSkinRenderManager____cdecl_CSkinRenderManager::GetInstance_void_]
push eax
mov ecx, dword [ebp - 0x8e8]
call fcn.00460e20
movzx eax, al
test eax, eax
jne 0x4603f2
xor al, al
jmp 0x460dfc
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x13b0
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::IsNull_void_]
movzx ecx, al
test ecx, ecx
jne 0x460448
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x13b0
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetHeight_void_]
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x13b0
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetWidth_void_]
cdq
and edx, 3
add eax, edx
sar eax, 2
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x14
call fcn.00414e30
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x17d0
call fcn.0045de70
movzx edx, al
test edx, edx
jne 0x4604cf
mov eax, dword [ebp - 0x8e8]
movzx ecx, byte [eax + 0x2e]
cmp ecx, 1
je 0x46047e
mov edx, dword [ebp - 0x8e8]
movzx eax, byte [edx + 0x32]
cmp eax, 1
jne 0x4604cf
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x17d0
call fcn.0040dc60
mov ecx, dword [ebp - 0x8e8]
movzx ecx, word [ecx + 0x3e]
cdq
idiv ecx
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x17d0
call fcn.004123c0
mov edx, dword [ebp - 0x8e8]
movzx ecx, word [edx + 0x38]
cdq
idiv ecx
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0xc
call fcn.00414e30
jmp 0x460589
mov edx, dword [ebp - 0x8e8]
movzx eax, byte [edx + 0x35]
test eax, eax
jne 0x46053b
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x17d0
call fcn.0045de70
movzx ecx, al
test ecx, ecx
jne 0x46053b
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x17d0
call fcn.0040dc60
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x17d0
call fcn.004123c0
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0xc
call fcn.00414e30
push 0x28
push 0x28
mov ecx, dword [ebp - 0x8e8]
add ecx, 4
call fcn.00414e30
jmp 0x460589
call dword [sym.imp.AvatarControl.dll_public:_static_class_CFaceItemControl____cdecl_CFaceItemControl::GetInstance_void_]
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 0
jne 0x460557
xor al, al
jmp 0x460dfc
mov edx, dword [ebp - 0x8e8]
add edx, 0xc
push edx
mov ax, word [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x840]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x840]
call dword [edx + 0x44]
push 0x64
push 0x32
mov ecx, dword [ebp - 0x8e8]
add ecx, 4
call fcn.00414e30
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x1e80
call dword [sym.imp.WHImage.dll_public:_bool___thiscall_CPngImage::IsNull_void_]
movzx eax, al
test eax, eax
jne 0x4605fe
mov ecx, dword [ebp - 0x8e8]
movzx edx, byte [ecx + 0x35]
test edx, edx
je 0x4605fe
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x1e80
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetHeight_void_]
mov ecx, dword [ebp - 0x8e8]
movzx ecx, word [ecx + 0x3c]
cdq
idiv ecx
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 0x1e80
call dword [sym.imp.WHImage.dll_public:_int___thiscall_CPngImage::GetWidth_void_]
mov edx, dword [ebp - 0x8e8]
movzx ecx, word [edx + 0x3a]
cdq
idiv ecx
push eax
mov ecx, dword [ebp - 0x8e8]
add ecx, 4
call fcn.00414e30
mov edx, dword [ebp - 0x8e8]
movzx eax, byte [edx + 0x30]
cmp eax, 1
jne 0x460dfa
movzx ecx, word [ebp + 0xc]
cmp ecx, 0x10
je 0x460874
mov word [ebp - 0x844], 0
jmp 0x46063b
mov dx, word [ebp - 0x844]
add dx, 1
mov word [ebp - 0x844], dx
movzx eax, word [ebp - 0x844]
movzx ecx, word [ebp + 0xc]
cmp eax, ecx
jge 0x46086f
mov dx, word [0x4834d0]
mov word [ebp - 0x8c4], dx
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x8c2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x8e8]
movzx ecx, byte [eax + 0x2c]
cmp ecx, 1
jne 0x46086a
movzx edx, word [ebp - 0x844]
add edx, 1
push edx
push str.Rect_Name_d
push 0x40
lea eax, [ebp - 0x8c4]
push eax
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x8c4]
push edx
push 0x4834ec
movzx eax, word [ebp - 0x844]
shl eax, 4
mov ecx, dword [ebp - 0x8e8]
lea edx, [ecx + eax + 0x38c]
push edx
mov ecx, dword [ebp - 0x8e8]
call fcn.004618e0
movzx eax, word [ebp - 0x844]
add eax, 1
push eax
push str.Point_Ready_d
push 0x40
lea ecx, [ebp - 0x8c4]
push ecx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x8c4]
push eax
push 0x48351c
movzx ecx, word [ebp - 0x844]
mov edx, dword [ebp - 0x8e8]
lea eax, [edx + ecx*8 + 0x5c]
push eax
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
movzx ecx, word [ebp - 0x844]
add ecx, 1
push ecx
push str.DrawStyle_d
push 0x40
lea edx, [ebp - 0x8c4]
push edx
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
lea eax, [ebp - 0x21c]
push eax
push 0
lea ecx, [ebp - 0x8c4]
push ecx
push 0x483548
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
movzx edx, word [ebp - 0x844]
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + edx*4 + 0x1018], eax
movzx edx, word [ebp - 0x844]
add edx, 1
push edx
push str.Point_Chair_d
push 0x40
lea eax, [ebp - 0x8c4]
push eax
call dword [sym.imp.MSVCR71.dll__snwprintf]
add esp, 0x10
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x8c4]
push edx
push str.Position
lea eax, [ebp - 0x8cc]
push eax
mov ecx, dword [ebp - 0x8e8]
call fcn.004619e0
movzx ecx, word [ebp - 0x844]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov eax, dword [ebp - 0x8c8]
mov dword [edx + ecx + 0x9d0], eax
movzx ecx, word [ebp - 0x844]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov eax, dword [ebp - 0x8cc]
mov dword [edx + ecx + 0x9cc], eax
movzx ecx, word [ebp - 0x844]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov eax, dword [edx + ecx + 0x9cc]
mov ecx, dword [ebp - 0x8e8]
add eax, dword [ecx + 4]
movzx edx, word [ebp - 0x844]
shl edx, 4
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + edx + 0x9d4], eax
movzx edx, word [ebp - 0x844]
shl edx, 4
mov eax, dword [ebp - 0x8e8]
mov ecx, dword [eax + edx + 0x9d0]
mov edx, dword [ebp - 0x8e8]
add ecx, dword [edx + 8]
movzx eax, word [ebp - 0x844]
shl eax, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + eax + 0x9d8], ecx
jmp 0x460629
jmp 0x460dfa
mov dword [ebp - 0x8d0], 0x54
mov dword [ebp - 0x8d4], 0x22
mov word [ebp - 0x8d8], 0
jmp 0x4608a5
mov ax, word [ebp - 0x8d8]
add ax, 1
mov word [ebp - 0x8d8], ax
movzx ecx, word [ebp - 0x8d8]
movzx edx, word [ebp + 0xc]
cmp ecx, edx
jge 0x460dfa
mov dword [ebp - 0x8e0], 0
mov dword [ebp - 0x8dc], 0
movzx eax, word [ebp - 0x8d8]
cmp eax, 5
jge 0x4609dd
mov ecx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8dc], ecx
movzx edx, word [ebp - 0x8d8]
mov eax, dword [ebp - 0x8e8]
mov ecx, dword [eax + 4]
add ecx, 0xf
imul edx, ecx
add edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8e0], edx
mov edx, dword [ebp - 0x8dc]
add edx, 0x32
movzx eax, word [ebp - 0x8d8]
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + eax*8 + 0x60], edx
mov edx, dword [ebp - 0x8e0]
add edx, 0xd
movzx eax, word [ebp - 0x8d8]
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + eax*8 + 0x5c], edx
movzx edx, word [ebp - 0x8d8]
and edx, 0x80000001
jns 0x460952
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x460998
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x38c], eax
mov eax, dword [ebp - 0x8dc]
sub eax, 0x14
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x390], eax
jmp 0x4609d8
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x38c], eax
mov eax, dword [ebp - 0x8dc]
add eax, 0x2d
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x390], eax
jmp 0x460ceb
movzx eax, word [ebp - 0x8d8]
cmp eax, 5
jl 0x460ad0
movzx ecx, word [ebp - 0x8d8]
cmp ecx, 8
jge 0x460ad0
mov dword [ebp - 0x8d0], 0x161
mov dword [ebp - 0x8d4], 0x46
movzx edx, word [ebp - 0x8d8]
sub edx, 5
mov eax, dword [ebp - 0x8e8]
mov ecx, dword [eax + 8]
add ecx, 0x15
imul edx, ecx
add edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8dc], edx
mov edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8e0], edx
movzx eax, word [ebp - 0x8d8]
sub eax, 5
mov ecx, dword [ebp - 0x8e8]
imul eax, dword [ecx + 8]
mov edx, dword [ebp - 0x8d4]
lea eax, [edx + eax + 0x14]
movzx ecx, word [ebp - 0x8d8]
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx*8 + 0x60], eax
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx*8 + 0x5c], eax
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x38c], eax
mov eax, dword [ebp - 0x8dc]
add eax, 0x28
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x390], eax
jmp 0x460ceb
movzx eax, word [ebp - 0x8d8]
cmp eax, 8
jl 0x460c0d
movzx ecx, word [ebp - 0x8d8]
cmp ecx, 0xd
jge 0x460c0d
mov dword [ebp - 0x8d0], 0x131
mov dword [ebp - 0x8d4], 0xe4
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8dc], edx
movzx eax, word [ebp - 0x8d8]
sub eax, 8
mov ecx, dword [ebp - 0x8e8]
mov edx, dword [ecx + 4]
add edx, 0x10
imul eax, edx
mov ecx, dword [ebp - 0x8d0]
sub ecx, eax
mov dword [ebp - 0x8e0], ecx
mov edx, dword [ebp - 0x8dc]
sub edx, 0x1e
movzx eax, word [ebp - 0x8d8]
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + eax*8 + 0x60], edx
mov edx, dword [ebp - 0x8e0]
add edx, 0xa
movzx eax, word [ebp - 0x8d8]
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + eax*8 + 0x5c], edx
movzx edx, word [ebp - 0x8d8]
sub edx, 8
and edx, 0x80000001
jns 0x460b82
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
jne 0x460bc8
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x38c], eax
mov eax, dword [ebp - 0x8dc]
add eax, 0x2d
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x390], eax
jmp 0x460c08
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x38c], eax
mov eax, dword [ebp - 0x8dc]
sub eax, 0x14
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x390], eax
jmp 0x460ceb
movzx eax, word [ebp - 0x8d8]
cmp eax, 0xd
jl 0x460ceb
mov dword [ebp - 0x8d0], 0x1e
mov dword [ebp - 0x8d4], 0xc1
movzx ecx, word [ebp - 0x8d8]
sub ecx, 0xd
mov edx, dword [ebp - 0x8e8]
mov eax, dword [edx + 8]
add eax, 0x15
imul ecx, eax
mov edx, dword [ebp - 0x8d4]
sub edx, ecx
mov dword [ebp - 0x8dc], edx
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x8e0], eax
movzx ecx, word [ebp - 0x8d8]
sub ecx, 0xd
mov edx, dword [ebp - 0x8e8]
imul ecx, dword [edx + 8]
mov eax, dword [ebp - 0x8d4]
sub eax, ecx
movzx ecx, word [ebp - 0x8d8]
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx*8 + 0x60], eax
mov eax, dword [ebp - 0x8e0]
add eax, 0x32
movzx ecx, word [ebp - 0x8d8]
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx*8 + 0x5c], eax
mov eax, dword [ebp - 0x8e0]
sub eax, 0x19
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x38c], eax
mov eax, dword [ebp - 0x8dc]
add eax, 0x28
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x390], eax
movzx eax, word [ebp - 0x8d8]
shl eax, 4
mov ecx, dword [ebp - 0x8e8]
mov edx, dword [ebp - 0x8dc]
mov dword [ecx + eax + 0x9d0], edx
movzx eax, word [ebp - 0x8d8]
shl eax, 4
mov ecx, dword [ebp - 0x8e8]
mov edx, dword [ebp - 0x8e0]
mov dword [ecx + eax + 0x9cc], edx
movzx eax, word [ebp - 0x8d8]
shl eax, 4
mov ecx, dword [ebp - 0x8e8]
mov edx, dword [ecx + eax + 0x9cc]
mov eax, dword [ebp - 0x8e8]
add edx, dword [eax + 4]
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov eax, dword [ebp - 0x8e8]
mov dword [eax + ecx + 0x9d4], edx
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov eax, dword [edx + ecx + 0x9d0]
mov ecx, dword [ebp - 0x8e8]
add eax, dword [ecx + 8]
movzx edx, word [ebp - 0x8d8]
shl edx, 4
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx + edx + 0x9d8], eax
movzx edx, word [ebp - 0x8d8]
shl edx, 4
mov eax, dword [ebp - 0x8e8]
mov ecx, dword [eax + edx + 0x38c]
add ecx, 0x5a
movzx edx, word [ebp - 0x8d8]
shl edx, 4
mov eax, dword [ebp - 0x8e8]
mov dword [eax + edx + 0x394], ecx
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov eax, dword [edx + ecx + 0x390]
add eax, 0xf
movzx ecx, word [ebp - 0x8d8]
shl ecx, 4
mov edx, dword [ebp - 0x8e8]
mov dword [edx + ecx + 0x398], eax
jmp 0x460893
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.0046c78d
pop edi
mov esp, ebp
pop ebp
ret 0xc