Function at 0x4861d0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b6510
mov eax, dword fs:[0]
push eax
mov eax, 0x1be0
call fcn.0049e370
mov eax, dword [0x4d0b90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x152c], ecx
mov ecx, 0x4d2930
call fcn.0041bde0
mov dword [ebp - 0x1530], eax
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x1534], eax
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x153c], eax
movzx eax, byte [ebp + 0xc]
cmp eax, 1
je 0x485661
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xb
je 0x48565a
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xc
je 0x48565a
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0xe
jne 0x485661
mov al, 0xcf
jmp 0x48cdf5
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x70], 0
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e9e0], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1535], al
mov dword [ebp - 0x17d4], 0
mov dword [ebp - 0x1844], 0
mov dword [ebp - 0x17c0], 1
mov byte [ebp - 0x155a], 0
mov dword [ebp - 0x1620], 0
mov eax, dword [ebp - 0x152c]
movzx ecx, byte [eax + 0x6c]
cmp ecx, 1
jne 0x4858e9
mov dword [ebp - 0x15ec], 0
jmp 0x4856ec
mov edx, dword [ebp - 0x15ec]
add edx, 1
mov dword [ebp - 0x15ec], edx
cmp dword [ebp - 0x15ec], 0x1adb0
jge 0x4858e9
mov eax, dword [ebp - 0x15ec]
shl eax, 4
mov ecx, dword [ebp - 0x152c]
cmp dword [ecx + eax + 0x1660b0], 0
jne 0x48571a
jmp 0x4858e9
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
mov dword [ebp - 0x1980], eax
mov eax, dword [ebp - 0x15ec]
shl eax, 4
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax + 0x1660b0]
cmp edx, dword [ebp - 0x1980]
jne 0x4858e4
mov dword [ebp - 0x163c], 0
jmp 0x485774
mov eax, dword [ebp - 0x163c]
add eax, 1
mov dword [ebp - 0x163c], eax
cmp dword [ebp - 0x163c], 0x1a
jge 0x4857ab
push 0x4c7ff4
mov ecx, dword [ebp - 0x163c]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x3ea978]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + 0x3ea974]
push edx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x485765
mov eax, dword [ebp - 0x15ec]
shl eax, 4
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax + 0x1660b4]
sub edx, 0xb
mov dword [ebp - 0x15d4], edx
mov dword [ebp - 0x154c], 0
jmp 0x4857e5
mov eax, dword [ebp - 0x154c]
add eax, 1
mov dword [ebp - 0x154c], eax
cmp dword [ebp - 0x154c], 0x1a
jge 0x4858e2
mov ecx, dword [ebp - 0x15d4]
add ecx, dword [ebp - 0x154c]
js 0x485873
mov edx, dword [ebp - 0x15d4]
add edx, dword [ebp - 0x154c]
cmp edx, 0x1adb0
jge 0x485873
mov eax, dword [ebp - 0x15d4]
add eax, dword [ebp - 0x154c]
mov ecx, dword [ebp - 0x152c]
cmp dword [ecx + eax*4 + 0x313bf4], 0
je 0x485873
mov edx, dword [ebp - 0x15d4]
add edx, dword [ebp - 0x154c]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x313bf4]
push ecx
mov edx, dword [ebp - 0x154c]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x3ea978]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x3ea974]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x4858dd
mov ecx, dword [ebp - 0x15d4]
add ecx, dword [ebp - 0x154c]
js 0x4858dd
mov edx, dword [ebp - 0x15d4]
add edx, dword [ebp - 0x154c]
cmp edx, 0x1adb0
jge 0x4858dd
mov eax, dword [ebp - 0x15d4]
add eax, dword [ebp - 0x154c]
mov ecx, dword [ebp - 0x152c]
cmp dword [ecx + eax*4 + 0x313bf4], 0
jne 0x4858dd
push 0x4c7ff8
mov edx, dword [ebp - 0x154c]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x3ea978]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x3ea974]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x4857d6
jmp 0x4858e9
jmp 0x4856dd
push 0
mov ecx, 0x489f860
call fcn.004853e0
movzx ecx, byte [ebp - 0x1535]
mov dword [ebp - 0x1640], ecx
mov edx, dword [ebp - 0x1640]
sub edx, 2
mov dword [ebp - 0x1640], edx
cmp dword [ebp - 0x1640], 0xe4
ja case.0x48592e.4
mov eax, dword [ebp - 0x1640]
movzx ecx, byte [eax + 0x48d080]
jmp dword [ecx*4 + 0x48ce14]
push 1
push 0
mov ecx, dword [ebp - 0x152c]
call fcn.00485400
jmp case.0x48592e.4
mov byte [ebp - 0x155a], 1
push 0
movzx edx, byte [ebp - 0x155a]
push edx
mov ecx, dword [ebp - 0x152c]
call fcn.00485400
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1818], eax
mov eax, dword [ebp - 0x1818]
push eax
mov ecx, 0x5433230
call fcn.0045a440
push 0x4c3d17
imul ecx, dword [ebp - 0x1818], 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x26dec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1a2c], eax
push 0x4c3d27
imul ecx, dword [ebp - 0x1a2c], 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x26dec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485b96
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xa0]
call edx
mov dword [ebp - 0x1a40], eax
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0xa0]
call eax
mov dword [ebp - 0x1bac], eax
mov ecx, 0x489f1d0
call fcn.00460aa0
mov ecx, dword [ebp - 0x1a40]
mov dword [ebp - 0x16a0], ecx
cmp dword [ebp - 0x16a0], 0
je 0x485a7f
cmp dword [ebp - 0x16a0], 1
je 0x485b20
cmp dword [ebp - 0x16a0], 2
je 0x485b3c
jmp 0x485b94
push 0
push 8
push 1
mov ecx, 0x489f1d0
call fcn.00461090
push 0x5a
mov ecx, 0x5433230
call fcn.0045a440
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1570], eax
mov edx, dword [ebp - 0x1570]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1570]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0x11
jne 0x485adc
push 0x12
mov eax, dword [ebp - 0x1570]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x20]
call eax
jmp 0x485b09
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x485b09
push 0x14
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1570]
mov eax, dword [edx + 0x1c]
call eax
jmp 0x485b94
mov ecx, dword [ebp - 0x152c]
call fcn.0048d590
push 0
push 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d230
jmp 0x485b94
push 0
push 8
push 0x1f
mov ecx, 0x489f1d0
call fcn.00461090
push 0x5a
mov ecx, 0x5433230
call fcn.0045a440
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1644], eax
push 0x12
mov ecx, dword [ebp - 0x1644]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1644]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1644]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1644]
mov eax, dword [edx + 0x1c]
call eax
jmp 0x485bca
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xa0]
call edx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0xa0]
call eax
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485c0e
push 0x7fff
lea ecx, [ebp - 0xa28]
push ecx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xb0]
call edx
lea eax, [ebp - 0xa28]
push eax
mov ecx, 0x574bcd8
call fcn.00493870
jmp 0x485c34
push 0x7fff
lea ecx, [ebp - 0xa28]
push ecx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xb0]
call edx
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485c58
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x485c63
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485cc9
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x485cd4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485d2e
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
test eax, eax
jle 0x485d2e
mov ecx, dword [ebp - 0x1530]
mov dl, byte [ecx + 0x79]
sub dl, 1
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x79], dl
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + edx*4 + 0x7c]
push ecx
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x28]
call edx
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485da7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
lea eax, [ebp - 0x640]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 1
imul edx, ecx, 0x63
mov dword [ebp - 0x181c], edx
cmp dword [ebp - 0x181c], 0x3e8
jae 0x485d7b
jmp 0x485d80
call fcn.0049dafa
mov eax, dword [ebp - 0x181c]
mov byte [ebp + eax - 0x640], 0
lea ecx, [ebp - 0x640]
push ecx
mov edx, dword [ebp - 0x1530]
add edx, 9
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x485db2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485de7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a44], eax
mov eax, dword [ebp - 0x1a44]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.004784d0
xor al, al
jmp 0x48cdf5
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485e5d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15d9], al
movzx ecx, byte [ebp - 0x15d9]
cmp ecx, 1
jne 0x485e2d
push 1
mov ecx, 0x489f860
call fcn.00469170
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x32db8], 0
jmp 0x485e5d
push 0
mov ecx, 0x489f860
call fcn.00469170
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x32db8], 1
mov ecx, 0x50a9e78
call fcn.0045a2d0
mov ecx, 0x4793b78
call fcn.004736b0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485e9a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a48], eax
push 1
mov ecx, dword [ebp - 0x1a48]
push ecx
mov ecx, 0x489f860
call fcn.00468670
push 1
mov ecx, 0x489f860
call fcn.00469170
jmp 0x485eab
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1b7c], eax
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485ec6
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x3c990], 0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485ee1
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x3c990], 1
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x485fa2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1561], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1594], ax
lea ecx, [ebp - 0x1594]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x485fa0
movzx ecx, byte [ebp - 0x1561]
cmp ecx, 0x41
jne 0x485f5d
movzx edx, word [ebp - 0x1594]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1820], ecx
jmp 0x485f77
movzx edx, word [ebp - 0x1594]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1820], ecx
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [ebp - 0x1820]
mov dword [edx], eax
movzx eax, word [ebp - 0x1594]
push eax
movzx ecx, byte [ebp - 0x1561]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp 0x485fb8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48609a
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1559], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1590], ax
lea edx, [ebp - 0x1590]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x486098
movzx edx, byte [ebp - 0x1559]
cmp edx, 0x41
jne 0x486038
movzx eax, word [ebp - 0x1590]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x16c4], edx
jmp 0x486052
movzx eax, word [ebp - 0x1590]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x16c4], edx
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx eax, al
test eax, eax
je 0x486071
mov ecx, dword [ebp - 0x16c4]
mov dword [ecx], 1
jmp 0x48607d
mov edx, dword [ebp - 0x16c4]
mov dword [edx], 0
movzx eax, word [ebp - 0x1590]
push eax
movzx ecx, byte [ebp - 0x1559]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp 0x4860b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4861b5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1562], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x157c], ax
lea edx, [ebp - 0x157c]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x4861b3
movzx edx, byte [ebp - 0x1562]
cmp edx, 0x41
jne 0x486130
movzx eax, word [ebp - 0x157c]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x16c8], edx
jmp 0x48614a
movzx eax, word [ebp - 0x157c]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x16c8], edx
push 1
mov ecx, 0x50a9e78
call fcn.00459f70
test eax, eax
jne 0x48616a
push 0xd
mov ecx, 0x50a9e78
call fcn.00459f70
test eax, eax
je 0x48618c
mov eax, dword [ebp - 0x16c8]
mov dword [eax], 1
mov ecx, 0x50a9e78
call fcn.0045a010
mov ecx, 0x50a9e78
call fcn.0045a040
jmp 0x486198
mov ecx, dword [ebp - 0x16c8]
mov dword [ecx], 0
movzx edx, word [ebp - 0x157c]
push edx
movzx eax, byte [ebp - 0x1562]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp 0x4861cb
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4862af
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1563], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x158c], ax
lea ecx, [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x4862ad
movzx ecx, byte [ebp - 0x1563]
cmp ecx, 0x41
jne 0x48624b
movzx edx, word [ebp - 0x158c]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x16cc], ecx
jmp 0x486265
movzx edx, word [ebp - 0x158c]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x16cc], ecx
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x80
je 0x486286
mov eax, dword [ebp - 0x16cc]
mov dword [eax], 1
jmp 0x486292
mov ecx, dword [ebp - 0x16cc]
mov dword [ecx], 0
movzx edx, word [ebp - 0x158c]
push edx
movzx eax, byte [ebp - 0x1563]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp 0x4862c5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48638c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1564], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1588], ax
lea ecx, [ebp - 0x1588]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x48638a
movzx ecx, byte [ebp - 0x1564]
cmp ecx, 0x41
jne 0x486341
movzx edx, word [ebp - 0x1588]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1824], ecx
jmp 0x48635b
movzx edx, word [ebp - 0x1588]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1824], ecx
mov edx, dword [ebp - 0x1824]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + 0x30d90]
mov dword [edx], ecx
movzx edx, word [ebp - 0x1588]
push edx
movzx eax, byte [ebp - 0x1564]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp 0x4863a2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486469
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1565], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1584], ax
lea ecx, [ebp - 0x1584]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x486467
movzx ecx, byte [ebp - 0x1565]
cmp ecx, 0x41
jne 0x48641e
movzx edx, word [ebp - 0x1584]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1828], ecx
jmp 0x486438
movzx edx, word [ebp - 0x1584]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1828], ecx
mov edx, dword [ebp - 0x1828]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + 0x30d94]
mov dword [edx], ecx
movzx edx, word [ebp - 0x1584]
push edx
movzx eax, byte [ebp - 0x1565]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp 0x48647f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486542
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a4c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15da], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x15bc], ax
lea ecx, [ebp - 0x15bc]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x486540
movzx ecx, byte [ebp - 0x15da]
cmp ecx, 0x41
jne 0x48650c
movzx edx, word [ebp - 0x15bc]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x182c], ecx
jmp 0x486526
movzx edx, word [ebp - 0x15bc]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x182c], ecx
mov edx, dword [ebp - 0x1a4c]
push edx
mov ecx, dword [ebp - 0x152c]
call fcn.00477c90
mov ecx, dword [ebp - 0x182c]
mov dword [ecx], eax
jmp 0x486558
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a50], eax
mov edx, dword [ebp - 0x1a50]
push edx
mov ecx, 0x489f860
call fcn.004698d0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x70], eax
push 1
push 8
push 0x24
mov ecx, 0x489f1d0
call fcn.00461090
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e9e0], 1
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1830], eax
mov eax, dword [ebp - 0x1830]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1830]
mov eax, dword [edx + 0x44]
call eax
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4866b0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x16bc], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15db], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x15c0], ax
lea ecx, [ebp - 0x15c0]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x4866ae
movzx ecx, byte [ebp - 0x15db]
cmp ecx, 0x41
jne 0x48667a
movzx edx, word [ebp - 0x15c0]
mov eax, dword [ebp - 0x1534]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x1834], ecx
jmp 0x486694
movzx edx, word [ebp - 0x15c0]
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx*4 + 0x2fdf0]
mov dword [ebp - 0x1834], ecx
movzx edx, word [ebp - 0x16bc]
push edx
mov ecx, 0x489f1d0
call fcn.00465b70
mov ecx, dword [ebp - 0x1834]
mov dword [ecx], eax
jmp 0x4866c6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48672b
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x70], eax
push 0
push 8
push 0x1e
mov ecx, 0x489f1d0
call fcn.00461090
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1838], eax
push 6
mov edx, dword [ebp - 0x1838]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1838]
mov edx, dword [eax + 0x1c]
call edx
jmp case.0x48592e.4
mov ecx, 0x489f1d0
call fcn.00411390
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a58], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1a54], edx
mov ecx, 0x489f1d0
call fcn.00426da0
mov dword [ebp - 0x183c], eax
mov eax, dword [ebp - 0x183c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x183c]
mov eax, dword [edx + 0xc]
call eax
push eax
lea ecx, [ebp - 0x154]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x1a54]
push edx
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
push eax
push 1
mov ecx, dword [ebp - 0x1a58]
push ecx
lea edx, [ebp - 0x154]
push edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048dd10
jmp case.0x48592e.4
mov dword [ebp - 0x1844], 1
mov ecx, 0x489f1d0
call fcn.00411390
push eax
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a60], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1a5c], edx
mov ecx, 0x489f1d0
call fcn.00426da0
mov dword [ebp - 0x1840], eax
mov eax, dword [ebp - 0x1840]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1840]
mov eax, dword [edx + 0xc]
call eax
push eax
lea ecx, [ebp - 0x258]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x1a5c]
push edx
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
mov ecx, dword [ebp - 0x1844]
push ecx
mov edx, dword [ebp - 0x1a60]
push edx
lea eax, [ebp - 0x258]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048dd10
jmp case.0x48592e.4
push 0x4c3d37
mov ecx, dword [ebp - 0x1530]
add ecx, 0x2dd40
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0
mov ecx, 0x489ee80
call fcn.00415a10
jmp case.0x48592e.4
push 0x4c3d47
mov edx, dword [ebp - 0x1530]
add edx, 0x2dd40
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, 0x489f1d0
call fcn.00441430
mov dword [ebp - 0x1a64], eax
push 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
push eax
mov eax, dword [ebp - 0x1a64]
push eax
mov ecx, 0x4927138
call fcn.00445f10
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486947
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1848], eax
push 0x12
mov ecx, dword [ebp - 0x1848]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1848]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486979
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x184c], eax
push 0x14
mov ecx, dword [ebp - 0x184c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x184c]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486ad6
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1634], eax
mov ecx, 0x574bcd8
call fcn.00485370
mov dword [ebp - 0x1638], eax
mov ecx, 0x574bcd8
call fcn.0041cc20
mov dword [ebp - 0x1b80], eax
mov dword [ebp - 0x1598], 0
imul ecx, dword [ebp - 0x1634], 0x28
add ecx, dword [ebp - 0x1638]
mov edx, dword [ebp - 0x1598]
cmp dword [ecx + edx*4], 0x80a
je 0x486ad4
imul eax, dword [ebp - 0x1634], 0x28
add eax, dword [ebp - 0x1638]
mov ecx, dword [ebp - 0x1598]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x1534]
cmp dword [eax + edx*4 + 0x1628], 1
jge 0x486ac0
cmp dword [ebp - 0x1598], 0
jne 0x486a22
mov dword [ebp - 0x1850], 2
jmp 0x486a2c
mov dword [ebp - 0x1850], 1
imul ecx, dword [ebp - 0x1634], 0x28
add ecx, dword [ebp - 0x1638]
mov edx, dword [ebp - 0x1598]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ebp - 0x1850]
mov dword [ecx + eax*4 + 0x1628], edx
imul eax, dword [ebp - 0x1634], 0x28
add eax, dword [ebp - 0x1638]
mov ecx, dword [ebp - 0x1598]
mov edx, dword [eax + ecx*4]
push edx
mov ecx, 0x489f1d0
call fcn.004666d0
imul eax, dword [ebp - 0x1634], 0x28
add eax, dword [ebp - 0x1638]
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ecx + 0x7f344]
mov ecx, dword [ebp - 0x1534]
mov esi, dword [ebp - 0x1598]
mov eax, dword [eax + esi*4]
mov dword [ecx + edx*4 + 0x7f348], eax
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ecx + 0x7f344]
add edx, 1
mov eax, dword [ebp - 0x1534]
mov dword [eax + 0x7f344], edx
mov ecx, dword [ebp - 0x1598]
add ecx, 1
mov dword [ebp - 0x1598], ecx
jmp 0x4869c3
jmp 0x486ae1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486b74
mov edx, dword [ebp - 0x1530]
cmp dword [edx + 0x30d90], 0
jg 0x486b1d
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x30d94], 0
jg 0x486b1d
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x30d98], 0
jle 0x486b30
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1b84], eax
jmp 0x486b72
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a68], eax
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1a68]
push edx
mov ecx, 0x4d2930
call fcn.0046cf00
jmp 0x486b7f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486c96
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1534]
mov eax, dword [edx + 0x7e310]
add eax, 0xa0
push eax
mov ecx, 0x4d2930
call fcn.0046cf00
call fcn.00414cf0
test eax, eax
jne 0x486c3f
mov ecx, dword [ebp - 0x1534]
mov edx, dword [ecx + 0x7e310]
add edx, 0xa0
push edx
mov ecx, 0x489f1d0
call fcn.00460f20
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 0xa0
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 1
and ecx, 0x80000007
jns 0x486c27
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e310], ecx
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp 0x486c96
mov ecx, 0x489f1d0
call fcn.004222b0
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 0xa0
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0xc], ecx
mov eax, dword [ebp - 0x1534]
mov ecx, dword [eax + 0x7e310]
add ecx, 1
and ecx, 0x80000007
jns 0x486c80
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [ebp - 0x1534]
mov dword [edx + 0x7e310], ecx
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x486f29
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x153d], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1554], ax
lea eax, [ebp - 0x1554]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x486f1c
movzx edx, byte [ebp - 0x153d]
cmp edx, 0x41
jne 0x486d1b
movzx eax, word [ebp - 0x1554]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x1544], edx
jmp 0x486d35
movzx eax, word [ebp - 0x1554]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x1544], edx
movzx eax, byte [ebp - 0x1535]
mov dword [ebp - 0x1660], eax
mov ecx, dword [ebp - 0x1660]
sub ecx, 0x19
mov dword [ebp - 0x1660], ecx
cmp dword [ebp - 0x1660], 0xd
ja case.0x486d64.6
mov edx, dword [ebp - 0x1660]
jmp dword [edx*4 + 0x48d168]
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x1544]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1544]
mov dword [edx], eax
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x1544]
mov edx, dword [ecx]
sub edx, eax
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x1544]
imul eax, dword [ecx]
mov edx, dword [ebp - 0x1544]
mov dword [edx], eax
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, eax
mov edx, dword [ebp - 0x1544]
mov eax, dword [edx]
cdq
idiv ecx
mov ecx, dword [ebp - 0x1544]
mov dword [ecx], eax
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, eax
mov edx, dword [ebp - 0x1544]
mov eax, dword [edx]
cdq
idiv ecx
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x1544]
mov dword [ecx], eax
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x16f4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
sub eax, dword [ebp - 0x16f4]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jg 0x486e6b
mov dword [ebp - 0x1624], 1
mov edx, dword [ebp - 0x1624]
add edx, 1
mov dword [ebp - 0x1624], edx
call fcn.004a1817
cdq
idiv dword [ebp - 0x1624]
add edx, dword [ebp - 0x16f4]
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486eb5
mov ecx, dword [ebp - 0x1534]
movzx edx, byte [ecx + 6]
mov eax, dword [ebp - 0x1544]
mov dword [eax], edx
jmp 0x486eb5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
movzx ecx, word [ebp - 0x1554]
cmp ecx, 0x5b
jne 0x486ee9
mov edx, 4
imul eax, edx, 0x5b
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + eax + 0x2fdf0], 0
jne 0x486ee9
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x30f2c], 0
movzx eax, word [ebp - 0x1554]
push eax
movzx ecx, byte [ebp - 0x153d]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
movzx edx, byte [ebp - 0x153d]
cmp edx, 0x41
jne 0x486f1a
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp 0x486f27
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x486f3f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov dword [ebp - 0x1628], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411450
mov dword [ebp - 0x16f8], eax
mov ecx, 0x574bcd8
call fcn.00485300
mov dword [ebp - 0x1a6c], eax
mov dword [ebp - 0x165c], 0
mov eax, dword [ebp - 0x165c]
cmp eax, dword [ebp - 0x16f8]
jge 0x486ff2
imul ecx, dword [ebp - 0x165c], 0x18
mov edx, dword [ebp - 0x1a6c]
mov eax, dword [edx + ecx + 0x10]
mov dword [ebp - 0x1628], eax
cmp dword [ebp - 0x1628], 0
jl 0x486fe1
mov ecx, dword [ebp - 0x1628]
cmp ecx, dword [ebp - 0x16f8]
jge 0x486fe1
mov edx, dword [ebp - 0x1628]
mov eax, dword [ebp - 0x1534]
cmp dword [eax + edx*4 + 0x25c8], 0
jne 0x486fe1
mov ecx, dword [ebp - 0x1628]
mov edx, dword [ebp - 0x1534]
mov dword [edx + ecx*4 + 0x25c8], 1
mov eax, dword [ebp - 0x165c]
add eax, 1
mov dword [ebp - 0x165c], eax
jmp 0x486f78
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4870f9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1854], edx
mov dword [ebp - 0x1630], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411450
mov dword [ebp - 0x16fc], eax
mov dword [ebp - 0x162c], 0
mov eax, dword [ebp - 0x162c]
cmp eax, dword [ebp - 0x16fc]
jge 0x4870a9
mov ecx, dword [ebp - 0x162c]
push ecx
mov ecx, 0x574bcd8
call fcn.00428630
mov dword [ebp - 0x1a70], eax
mov edx, dword [ebp - 0x1a70]
push edx
mov eax, dword [ebp - 0x1854]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x487098
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1630], ecx
jmp 0x4870a9
mov edx, dword [ebp - 0x162c]
add edx, 1
mov dword [ebp - 0x162c], edx
jmp 0x48704d
cmp dword [ebp - 0x1630], 0
jl 0x4870f7
mov eax, dword [ebp - 0x1630]
cmp eax, dword [ebp - 0x16fc]
jge 0x4870f7
mov ecx, dword [ebp - 0x1630]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x25c8], 0
jne 0x4870f7
mov eax, dword [ebp - 0x1630]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x25c8], 1
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp 0x487104
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x487213
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x185c], eax
mov dword [ebp - 0x15fc], 0xffffffff
mov ecx, 0x574bcd8
call fcn.0041be00
mov dword [ebp - 0x1700], eax
mov dword [ebp - 0x15e8], 0
mov ecx, dword [ebp - 0x15e8]
cmp ecx, dword [ebp - 0x1700]
jge 0x4871c3
mov edx, dword [ebp - 0x15e8]
push edx
mov ecx, 0x574bcd8
call fcn.00485320
mov dword [ebp - 0x1858], eax
mov eax, dword [ebp - 0x1858]
push eax
mov ecx, dword [ebp - 0x185c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4871b2
mov edx, dword [ebp - 0x15e8]
mov dword [ebp - 0x15fc], edx
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x15e8]
mov dword [eax + 0x32dbc], ecx
jmp 0x4871c3
mov edx, dword [ebp - 0x15e8]
add edx, 1
mov dword [ebp - 0x15e8], edx
jmp 0x487155
cmp dword [ebp - 0x15fc], 0
jl 0x487211
mov eax, dword [ebp - 0x15fc]
cmp eax, dword [ebp - 0x1700]
jge 0x487211
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x7dfe8], 0
jne 0x487211
mov eax, dword [ebp - 0x15fc]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x7dfe8], 1
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp 0x48721e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov dword [ebp - 0x1600], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411470
mov dword [ebp - 0x1704], eax
mov ecx, 0x574bcd8
call fcn.00485350
mov dword [ebp - 0x1860], eax
mov dword [ebp - 0x1658], 0
mov edx, dword [ebp - 0x1658]
cmp edx, dword [ebp - 0x1704]
jge 0x4872d1
imul eax, dword [ebp - 0x1658], 0x18
mov ecx, dword [ebp - 0x1860]
mov edx, dword [ecx + eax + 0x10]
mov dword [ebp - 0x1600], edx
cmp dword [ebp - 0x1600], 0
jl 0x4872c0
mov eax, dword [ebp - 0x1600]
cmp eax, dword [ebp - 0x1704]
jge 0x4872c0
mov ecx, dword [ebp - 0x1600]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x3ba8], 0
jne 0x4872c0
mov eax, dword [ebp - 0x1600]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x3ba8], 1
mov edx, dword [ebp - 0x1658]
add edx, 1
mov dword [ebp - 0x1658], edx
jmp 0x487257
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4873d8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1868], edx
mov dword [ebp - 0x1608], 0xffffffff
mov ecx, 0x574bcd8
call fcn.00411470
mov dword [ebp - 0x1708], eax
mov dword [ebp - 0x1604], 0
mov eax, dword [ebp - 0x1604]
cmp eax, dword [ebp - 0x1708]
jge 0x487388
mov ecx, dword [ebp - 0x1604]
push ecx
mov ecx, 0x574bcd8
call fcn.00426e00
mov dword [ebp - 0x1864], eax
mov edx, dword [ebp - 0x1864]
push edx
mov eax, dword [ebp - 0x1868]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x487377
mov ecx, dword [ebp - 0x1604]
mov dword [ebp - 0x1608], ecx
jmp 0x487388
mov edx, dword [ebp - 0x1604]
add edx, 1
mov dword [ebp - 0x1604], edx
jmp 0x48732c
cmp dword [ebp - 0x1608], 0
jl 0x4873d6
mov eax, dword [ebp - 0x1608]
cmp eax, dword [ebp - 0x1708]
jge 0x4873d6
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x3ba8], 0
jne 0x4873d6
mov eax, dword [ebp - 0x1608]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x3ba8], 1
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp 0x4873e3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4878e6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15dc], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x15c4], ax
lea edx, [ebp - 0x15c4]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x4878ce
movzx edx, byte [ebp - 0x15dc]
cmp edx, 0x41
jne 0x487473
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x186c], eax
movzx eax, word [ebp - 0x15c4]
mov ecx, dword [ebp - 0x186c]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x15d8], edx
jmp 0x48748d
movzx eax, word [ebp - 0x15c4]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x15d8], edx
movzx eax, byte [ebp - 0x1535]
mov dword [ebp - 0x1654], eax
mov ecx, dword [ebp - 0x1654]
sub ecx, 0x2d
mov dword [ebp - 0x1654], ecx
cmp dword [ebp - 0x1654], 5
ja case.default.0x4874bc
mov edx, dword [ebp - 0x1654]
jmp dword [edx*4 + 0x48d1a0]
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jne 0x487560
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x487547
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c7ffc
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x48756b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.default.0x4874bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
je 0x48760d
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4875f4
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c801c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487618
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.default.0x4874bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jge 0x4876ba
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4876a1
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c803c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x4876c5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.default.0x4874bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jle 0x487767
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x48774e
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c805c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487772
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.default.0x4874bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jg 0x487814
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4877fb
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push 0x4c807c
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x48781f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.default.0x4874bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15d8]
cmp dword [ecx], eax
jl 0x4878c1
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
add eax, 4
mov ecx, dword [ebp - 0x1530]
movzx edx, byte [ecx + 0x79]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x7c], eax
mov edx, dword [ebp - 0x1530]
mov al, byte [edx + 0x79]
add al, 1
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x79], al
mov edx, dword [ebp - 0x1530]
movzx eax, byte [edx + 0x79]
cmp eax, 0xa
jle 0x4878a8
push 0
mov ecx, 0x489f1d0
call fcn.00411310
push eax
push str.GOSUB
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp case.default.0x4874bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x4878e4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x487907
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x487b87
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1566], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x15d0], ax
lea ecx, [ebp - 0x15d0]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 4]
call edx
movzx eax, al
cmp eax, 1
jne 0x487b6f
mov dword [ebp - 0x15a0], 0
movzx ecx, byte [ebp - 0x1566]
cmp ecx, 0x41
jne 0x4879a1
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x1870], eax
movzx edx, word [ebp - 0x15d0]
mov eax, dword [ebp - 0x1870]
lea ecx, [eax + edx*4 + 0x1628]
mov dword [ebp - 0x15a0], ecx
jmp 0x4879c7
movzx edx, byte [ebp - 0x1566]
cmp edx, 0x40
jne 0x4879c7
movzx eax, word [ebp - 0x15d0]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x15a0], edx
movzx eax, byte [ebp - 0x1535]
mov dword [ebp - 0x1650], eax
mov ecx, dword [ebp - 0x1650]
sub ecx, 0x27
mov dword [ebp - 0x1650], ecx
cmp dword [ebp - 0x1650], 0x18
ja case.0x4879fd.6
mov edx, dword [ebp - 0x1650]
movzx eax, byte [edx + 0x48d1d4]
jmp dword [eax*4 + 0x48d1b8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15a0]
cmp dword [ecx], eax
jne 0x487a32
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487a3d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x4879fd.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, dword [ebp - 0x15a0]
cmp dword [edx], eax
je 0x487a70
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487a7b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x4879fd.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15a0]
cmp dword [ecx], eax
jge 0x487aae
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487ab9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x4879fd.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, dword [ebp - 0x15a0]
cmp dword [edx], eax
jle 0x487aec
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487af7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x4879fd.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x15a0]
cmp dword [ecx], eax
jg 0x487b27
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp 0x487b32
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x4879fd.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, dword [ebp - 0x15a0]
cmp dword [edx], eax
jl 0x487b62
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d390
jmp case.0x4879fd.6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x487b85
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x487ba8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1874], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x170c], eax
cmp dword [ebp - 0x170c], 0
je 0x487be8
cmp dword [ebp - 0x170c], 3
je 0x487be8
jmp 0x487c24
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x26dd0], 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x3bc6c], 0
push 0
mov eax, dword [ebp - 0x1874]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xd8]
call eax
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1878], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1710], eax
cmp dword [ebp - 0x1710], 0
je 0x487c67
cmp dword [ebp - 0x1710], 3
je 0x487c67
jmp 0x487ecb
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x4c9004]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0xb04], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c91d8]
movss dword [ebp - 0xafc], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0xaf8], xmm0
movss xmm0, dword [ebp - 0xaf8]
mulss xmm0, dword [ebp - 0xafc]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1ba8], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004b4b00
movsd xmm1, qword [ebp - 0x1ba8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xaf4], xmm1
movss xmm0, dword [ebp - 0xaf8]
mulss xmm0, dword [ebp - 0xafc]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1bcc], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004a6330
movsd xmm1, qword [ebp - 0x1bcc]
mulsd xmm1, xmm0
movsd qword [ebp - 0xaec], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c90a0]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1bb4], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004b4b00
movsd xmm1, qword [ebp - 0x1bb4]
mulsd xmm1, xmm0
movsd qword [ebp - 0xae4], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c90a0]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1bbc], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004a6330
movsd xmm1, qword [ebp - 0x1bbc]
mulsd xmm1, xmm0
movsd qword [ebp - 0xadc], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c90a8]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1bc4], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004b4b00
movsd xmm1, qword [ebp - 0x1bc4]
mulsd xmm1, xmm0
movsd qword [ebp - 0xad4], xmm1
cvtss2sd xmm0, dword [ebp - 0xaf8]
mulsd xmm0, qword [0x4c90a8]
cvtss2sd xmm1, dword [ebp - 0xafc]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1a78], xmm0
movsd xmm0, qword [ebp - 0xb04]
call fcn.004a6330
movsd xmm1, qword [ebp - 0x1a78]
mulsd xmm1, xmm0
movsd qword [ebp - 0xacc], xmm1
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c91d8]
movss dword [ebp - 0xab4], xmm0
lea ecx, [ebp - 0xb0c]
push ecx
push 0
mov edx, dword [ebp - 0x1878]
push edx
mov ecx, 0x574b5f8
call fcn.0044a2f0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x187c], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1714], eax
cmp dword [ebp - 0x1714], 0
je 0x487f0b
cmp dword [ebp - 0x1714], 3
je 0x487f0b
jmp 0x487f1c
mov ecx, dword [ebp - 0x187c]
push ecx
mov ecx, 0x574b5f8
call fcn.00412f20
jmp case.0x48592e.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x16d4], edx
cmp dword [ebp - 0x16d4], 0
je 0x487f4e
cmp dword [ebp - 0x16d4], 2
je 0x487fd8
cmp dword [ebp - 0x16d4], 3
je 0x487f4e
jmp 0x487fee
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x26dd0], 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x26ddc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x26de4], eax
mov eax, dword [ebp - 0x1530]
mov ecx, dword [eax + 0x26de4]
push ecx
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1530]
cvtsi2ss xmm0, dword [edx + 0x26ddc]
push ecx
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
mov ecx, 0x574b5f8
call fcn.0044aa80
jmp 0x487fee
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1718], eax
cmp dword [ebp - 0x1718], 0
je 0x488010
cmp dword [ebp - 0x1718], 3
je 0x488010
jmp 0x488039
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x26dd0], 0
jle 0x488039
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x26dd0], 0
mov ecx, 0x574b5f8
call fcn.0044aa30
jmp case.0x48592e.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x171c], eax
cmp dword [ebp - 0x171c], 0
je 0x48805b
cmp dword [ebp - 0x171c], 3
je 0x48805b
jmp 0x488074
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x32dd0], eax
jmp 0x48807f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1720], edx
cmp dword [ebp - 0x1720], 0
je 0x4880a1
cmp dword [ebp - 0x1720], 3
je 0x4880a1
jmp 0x4880e8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
mov eax, dword [ebp - 0x1530]
fstp qword [eax + 0x32dd8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
mov ecx, dword [ebp - 0x1530]
fstp qword [ecx + 0x32de0]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
mov edx, dword [ebp - 0x1530]
fstp qword [edx + 0x32de8]
jmp 0x4880f5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp st(0)
jmp case.0x48592e.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1724], eax
cmp dword [ebp - 0x1724], 0
je 0x48811a
cmp dword [ebp - 0x1724], 3
je 0x48811a
jmp 0x48825c
mov dword [ebp - 0x15a4], 0
mov dword [ebp - 0x15a4], 0
jmp 0x48813f
mov ecx, dword [ebp - 0x15a4]
add ecx, 1
mov dword [ebp - 0x15a4], ecx
cmp dword [ebp - 0x15a4], 5
jge 0x4881d9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov edx, dword [ebp - 0x15a4]
movsd qword [ebp + edx*8 - 0xdd0], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x15a4]
movsd qword [ebp + eax*8 - 0xd80], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov ecx, dword [ebp - 0x15a4]
movsd qword [ebp + ecx*8 - 0xd30], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
cvtss2sd xmm0, xmm0
mov edx, dword [ebp - 0x15a4]
movsd qword [ebp + edx*8 - 0xce0], xmm0
jmp 0x488130
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xc8c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xc88], eax
mov edi, dword [ebp - 0x1530]
add edi, 0x3bb20
mov ecx, 0x54
lea esi, [ebp - 0xdd0]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x3bc6c], 1
lea ecx, [ebp - 0xce0]
push ecx
lea edx, [ebp - 0xd30]
push edx
lea eax, [ebp - 0xd80]
push eax
lea ecx, [ebp - 0xdd0]
push ecx
mov edx, dword [ebp - 0xc88]
push edx
mov eax, dword [ebp - 0xc8c]
push eax
push 0x1f5
mov ecx, 0x574b5f8
call fcn.0044b160
jmp 0x4882ce
mov dword [ebp - 0x1678], 0
mov dword [ebp - 0x1678], 0
jmp 0x488281
mov ecx, dword [ebp - 0x1678]
add ecx, 1
mov dword [ebp - 0x1678], ecx
cmp dword [ebp - 0x1678], 5
jge 0x4882b8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x488272
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1728], edx
cmp dword [ebp - 0x1728], 0
je 0x4882f3
cmp dword [ebp - 0x1728], 3
je 0x4882f3
jmp 0x488491
mov dword [ebp - 0x159c], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x160c], eax
mov eax, dword [ebp - 0x160c]
mov dword [ebp - 0x16d8], eax
mov ecx, dword [ebp - 0x160c]
push ecx
mov ecx, 0x574b5f8
call fcn.004222d0
lea edx, [eax*4 + 0x27f]
mov dword [ebp - 0x160c], edx
mov dword [ebp - 0x159c], 0
jmp 0x488353
mov eax, dword [ebp - 0x159c]
add eax, 1
mov dword [ebp - 0x159c], eax
cmp dword [ebp - 0x159c], 5
jge 0x4883d9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2sd xmm0, eax
mov ecx, dword [ebp - 0x159c]
movsd qword [ebp + ecx*8 - 0xf20], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2sd xmm0, eax
mov edx, dword [ebp - 0x159c]
movsd qword [ebp + edx*8 - 0xed0], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2sd xmm0, eax
mov eax, dword [ebp - 0x159c]
movsd qword [ebp + eax*8 - 0xe80], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2sd xmm0, eax
mov ecx, dword [ebp - 0x159c]
movsd qword [ebp + ecx*8 - 0xe30], xmm0
jmp 0x488344
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xddc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xdd8], eax
imul edx, dword [ebp - 0x16d8], 0x150
mov eax, dword [ebp - 0x1530]
lea edi, [eax + edx + 0x3bc70]
mov ecx, 0x54
lea esi, [ebp - 0xf20]
rep movsd dword es:[edi], dword [esi]
imul ecx, dword [ebp - 0x16d8], 0x150
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x160c]
mov dword [edx + ecx + 0x3bdb0], eax
imul ecx, dword [ebp - 0x16d8], 0x150
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x3bdbc], 1
lea eax, [ebp - 0xe30]
push eax
lea ecx, [ebp - 0xe80]
push ecx
lea edx, [ebp - 0xed0]
push edx
lea eax, [ebp - 0xf20]
push eax
mov ecx, dword [ebp - 0xdd8]
push ecx
mov edx, dword [ebp - 0xddc]
push edx
mov eax, dword [ebp - 0x160c]
push eax
mov ecx, 0x574b5f8
call fcn.0044b160
jmp 0x488503
mov dword [ebp - 0x1664], 0
mov dword [ebp - 0x1664], 0
jmp 0x4884b6
mov ecx, dword [ebp - 0x1664]
add ecx, 1
mov dword [ebp - 0x1664], ecx
cmp dword [ebp - 0x1664], 5
jge 0x4884ed
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x4884a7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1888], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1884], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1880], eax
mov edx, dword [ebp - 0x1880]
push edx
push 0
push ecx
movss xmm0, dword [ebp - 0x1884]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1888]
movss dword [esp], xmm0
push 0
mov ecx, 0x574b5f8
call fcn.0044a720
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1890], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x188c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1aa8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1aa0]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1a98]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1a90]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1a80]
cvtsd2ss xmm0, qword [ebp - 0x1a80]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a88]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a90]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1a98]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1aa0]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1aa8]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x188c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1890]
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044aea0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4886f3
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x189c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1894], eax
mov eax, dword [ebp - 0x1894]
cdq
and edx, 0xf
add eax, edx
sar eax, 4
push eax
mov eax, dword [ebp - 0x1898]
push eax
mov ecx, dword [ebp - 0x189c]
push ecx
mov ecx, 0x574b5f8
call fcn.00452750
jmp 0x488714
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48876a
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x18a4], eax
push 0
mov ecx, dword [ebp - 0x18a0]
push ecx
mov edx, dword [ebp - 0x18a4]
push edx
mov ecx, 0x574b5f8
call fcn.00454460
jmp 0x488780
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18b0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18ac], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18a8], eax
mov eax, dword [ebp - 0x18a8]
push eax
mov ecx, dword [ebp - 0x18ac]
push ecx
mov edx, dword [ebp - 0x18b0]
push edx
mov ecx, 0x574b5f8
call fcn.00454eb0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x18bc], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x18b8], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15dd], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18b4], eax
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
mov eax, dword [ebp - 0x18b4]
push eax
movzx ecx, byte [ebp - 0x15dd]
push ecx
push ecx
movss xmm0, dword [ebp - 0x18b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x18bc]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x18c0]
push edx
mov ecx, 0x574b5f8
call fcn.00454960
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48896f
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18c8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x172c], edx
mov eax, dword [ebp - 0x172c]
push eax
mov ecx, 0x574bcd8
call fcn.004939f0
mov dword [ebp - 0x16dc], eax
cmp dword [ebp - 0x16dc], 0
jge 0x4888fb
mov ecx, dword [ebp - 0x172c]
push ecx
call fcn.004a1bdb
add esp, 4
mov dword [ebp - 0x16dc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1730], eax
cvtsi2sd xmm0, dword [ebp - 0x1730]
mov edx, dword [ebp - 0x1730]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1ab0], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1ab0]
movss dword [ebp - 0x18c4], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x18c4]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x16dc]
push eax
mov ecx, dword [ebp - 0x18c8]
push ecx
mov ecx, 0x574b5f8
call fcn.00454b70
jmp 0x488990
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4889cf
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xac]
call edx
fstp dword [ebp - 0x18cc]
fld dword [ebp - 0x18cc]
mov eax, dword [ebp - 0x1530]
fstp qword [eax + 0x3b7c8]
jmp 0x4889eb
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0xac]
call edx
fstp st(0)
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488a63
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1734], eax
imul eax, dword [ebp - 0x1734], 0x150
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + eax + 0x3bdbc], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x18d0], eax
mov ecx, dword [ebp - 0x18d0]
push ecx
mov edx, dword [ebp - 0x1734]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xdc]
call eax
jmp 0x488a79
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488aa9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18d4], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x18d4]
mov dword [ecx + 0x3b7fc], edx
jmp 0x488ab4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488afb
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18d8], eax
mov eax, dword [ebp - 0x18d8]
push eax
mov ecx, dword [ebp - 0x18dc]
push ecx
mov ecx, 0x574b5f8
call fcn.00455280
jmp 0x488b11
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488b59
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18e0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18e4], eax
mov edx, dword [ebp - 0x18e0]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x18e4]
mov dword [eax + edx*4 + 0x3b800], ecx
jmp 0x488b6f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488c03
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18e8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18ec], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18f0], eax
mov dword [ebp - 0x1610], 0
mov edx, dword [ebp - 0x18e8]
mov dword [ebp - 0x1610], edx
jmp 0x488bd8
mov eax, dword [ebp - 0x1610]
add eax, 1
mov dword [ebp - 0x1610], eax
mov ecx, dword [ebp - 0x1610]
cmp ecx, dword [ebp - 0x18ec]
jg 0x488c01
mov edx, dword [ebp - 0x1610]
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x18f0]
mov dword [eax + edx*4 + 0x3b800], ecx
jmp 0x488bc9
jmp 0x488c24
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488c6b
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18f8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x18f4], eax
mov edx, dword [ebp - 0x18f4]
push edx
mov eax, dword [ebp - 0x18f8]
push eax
mov ecx, 0x574b5f8
call fcn.00452660
jmp 0x488c81
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488cb0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
push ecx
mov ecx, 0x574b5f8
call fcn.00452850
jmp 0x488cbb
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488d08
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1738], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x1738]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx*4 + 0x1650], eax
mov edx, dword [ebp - 0x1738]
push edx
mov ecx, 0x574b5f8
call fcn.00452710
jmp 0x488d1e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488e05
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x173c], edx
mov eax, dword [ebp - 0x173c]
push eax
mov ecx, 0x574bcd8
call fcn.004939f0
mov dword [ebp - 0x16e0], eax
cmp dword [ebp - 0x16e0], 0
jge 0x488d91
mov ecx, dword [ebp - 0x173c]
push ecx
call fcn.004a1bdb
add esp, 4
mov dword [ebp - 0x16e0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1740], eax
cvtsi2sd xmm0, dword [ebp - 0x1740]
mov edx, dword [ebp - 0x1740]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1ab8], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1ab8]
movss dword [ebp - 0x1900], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1900]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x16e0]
push eax
mov ecx, dword [ebp - 0x1904]
push ecx
mov ecx, 0x574b5f8
call fcn.00452290
jmp 0x488e26
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x488e7a
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x190c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x1908], eax
mov ecx, dword [ebp - 0x1908]
push ecx
mov edx, dword [ebp - 0x190c]
push edx
mov ecx, 0x574b5f8
call fcn.00453ea0
jmp 0x488e90
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1914], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1910], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1744], eax
mov byte [ebp - 0x15de], 0
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx eax, al
test eax, eax
je 0x488eea
mov dword [ebp - 0x1744], 1
movzx ecx, byte [ebp - 0x15de]
push ecx
mov edx, dword [ebp - 0x1744]
push edx
mov eax, dword [ebp - 0x1910]
push eax
mov ecx, dword [ebp - 0x1914]
push ecx
mov ecx, 0x574b5f8
call fcn.0044d680
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x4891bb
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15df], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x1918], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x4c9004]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0xaa4], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c91d8]
movss dword [ebp - 0xa9c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0xa98], xmm0
movss xmm0, dword [ebp - 0xa98]
mulss xmm0, dword [ebp - 0xa9c]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1ac0], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004b4b00
movsd xmm1, qword [ebp - 0x1ac0]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa94], xmm1
movss xmm0, dword [ebp - 0xa98]
mulss xmm0, dword [ebp - 0xa9c]
cvtss2sd xmm0, xmm0
movsd qword [ebp - 0x1ac8], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004a6330
movsd xmm1, qword [ebp - 0x1ac8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa8c], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c90a0]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ad0], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004b4b00
movsd xmm1, qword [ebp - 0x1ad0]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa84], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c90a0]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ad8], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004a6330
movsd xmm1, qword [ebp - 0x1ad8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa7c], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c90a8]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ae0], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004b4b00
movsd xmm1, qword [ebp - 0x1ae0]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa74], xmm1
cvtss2sd xmm0, dword [ebp - 0xa98]
mulsd xmm0, qword [0x4c90a8]
cvtss2sd xmm1, dword [ebp - 0xa9c]
mulsd xmm0, xmm1
movsd qword [ebp - 0x1ae8], xmm0
movsd xmm0, qword [ebp - 0xaa4]
call fcn.004a6330
movsd xmm1, qword [ebp - 0x1ae8]
mulsd xmm1, xmm0
movsd qword [ebp - 0xa6c], xmm1
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c91d8]
movss dword [ebp - 0xa54], xmm0
lea ecx, [ebp - 0xaac]
push ecx
push 0
movzx edx, byte [ebp - 0x15df]
push edx
mov eax, dword [ebp - 0x1918]
push eax
mov ecx, 0x574b5f8
call fcn.0044b540
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48921c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15e0], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x191c], edx
mov eax, dword [ebp - 0x191c]
push eax
movzx ecx, byte [ebp - 0x15e0]
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 0xe0]
call edx
jmp 0x489232
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1920], eax
push 0
mov eax, dword [ebp - 0x1920]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xdc]
call eax
jmp case.0x48592e.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1748], eax
push 0xb
mov ecx, dword [ebp - 0x1748]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1748]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15e1], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1928], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1924], xmm0
push ecx
movss xmm0, dword [ebp - 0x1924]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1928]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x15e1]
push ecx
mov ecx, 0x574b5f8
call fcn.00449cc0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1567], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1930], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x192c], xmm0
movzx edx, byte [ebp - 0x1567]
cmp edx, 5
jl 0x489357
jmp 0x489385
push ecx
movss xmm0, dword [ebp - 0x192c]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1930]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x1567]
push eax
mov ecx, 0x574b5f8
call fcn.00449d40
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48941d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15aa], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15a9], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15e4], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15e3], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15e2], al
movzx ecx, byte [ebp - 0x15e2]
push ecx
movzx edx, byte [ebp - 0x15e3]
push edx
movzx eax, byte [ebp - 0x15e4]
push eax
movzx ecx, byte [ebp - 0x15a9]
push ecx
movzx edx, byte [ebp - 0x15aa]
push edx
mov ecx, 0x574b5f8
call fcn.00449e10
jmp 0x489454
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1940], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x193c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1938], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15ab], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1934], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
mov eax, dword [ebp - 0x1934]
push eax
movzx ecx, byte [ebp - 0x15ab]
push ecx
push ecx
movss xmm0, dword [ebp - 0x1938]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x193c]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1940]
push edx
mov ecx, 0x574b5f8
call fcn.0044cb30
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x194c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1948], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1944], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1b18]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1b10]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1b08]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1b00]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1af8]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1af0]
cvtsd2ss xmm0, qword [ebp - 0x1af0]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1af8]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b00]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b08]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b10]
push ecx
movss dword [esp], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b18]
push ecx
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1944]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1948]
movss dword [esp], xmm0
mov eax, dword [ebp - 0x194c]
push eax
mov ecx, 0x574b5f8
call fcn.0044d020
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1958], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1954], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15ac], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1950], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d360
fstp qword [ebp - 0x1b20]
mov byte [ebp - 0x1568], 0
movzx ecx, byte [ebp - 0x15ac]
cmp ecx, 1
jne 0x4896bf
mov byte [ebp - 0x1568], 1
cvtsd2ss xmm0, qword [ebp - 0x1b20]
push ecx
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x1568]
push edx
push 0
mov eax, dword [ebp - 0x1950]
push eax
push 0
push ecx
movss xmm0, dword [ebp - 0x1954]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1958]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x195c]
push ecx
mov ecx, 0x574b5f8
call fcn.0044cb30
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15ae], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1968], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1964], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15ad], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1960], eax
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 1
mov edx, dword [ebp - 0x1960]
push edx
movzx eax, byte [ebp - 0x15ad]
push eax
push ecx
movss xmm0, dword [ebp - 0x1964]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [ebp - 0x1968]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x15ae]
push ecx
mov ecx, 0x574b5f8
call fcn.0044cb30
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1750], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x196c], eax
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx edx, al
test edx, edx
je 0x489847
push 0
mov eax, dword [ebp - 0x1750]
mov dword [ebp - 0x174c], eax
cvtsi2sd xmm0, dword [ebp - 0x174c]
mov ecx, dword [ebp - 0x174c]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c9540]
movsd qword [ebp - 0x1b28], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b28]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.004144c0
jmp 0x48989c
mov edx, dword [ebp - 0x196c]
push edx
mov eax, dword [ebp - 0x1750]
mov dword [ebp - 0x1754], eax
cvtsi2sd xmm0, dword [ebp - 0x1754]
mov ecx, dword [ebp - 0x1754]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c9540]
movsd qword [ebp - 0x1b30], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b30]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.004144c0
push 0xb
mov edx, dword [ebp - 0x153c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x153c]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1768], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1764], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x175c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1970], eax
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1b88], eax
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x30f58], 0
mov ecx, dword [ebp - 0x1530]
xorps xmm0, xmm0
movsd qword [ecx + 0x30f60], xmm0
mov edx, dword [ebp - 0x1530]
xorps xmm0, xmm0
movsd qword [edx + 0x30f68], xmm0
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x30f70], 0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x30f74], 0
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx edx, al
test edx, edx
je 0x4899da
push 0
mov eax, dword [ebp - 0x175c]
mov dword [ebp - 0x1758], eax
cvtsi2sd xmm0, dword [ebp - 0x1758]
mov ecx, dword [ebp - 0x1758]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c9540]
movsd qword [ebp - 0x1b38], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b38]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1764]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1768]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp 0x489a4b
mov edx, dword [ebp - 0x1970]
push edx
mov eax, dword [ebp - 0x175c]
mov dword [ebp - 0x1760], eax
cvtsi2sd xmm0, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1760]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c9540]
movsd qword [ebp - 0x1b40], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b40]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1764]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x1768]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x16ec], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x16e8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x16e4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1770], eax
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1b8c], eax
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x30f58], 1
cvtsi2ss xmm0, dword [ebp - 0x16ec]
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x1530]
movsd qword [eax + 0x30f60], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16e8]
cvtss2sd xmm0, xmm0
mov ecx, dword [ebp - 0x1530]
movsd qword [ecx + 0x30f68], xmm0
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x16e4]
mov dword [edx + 0x30f70], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x1770]
mov dword [ecx + 0x30f74], edx
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx eax, al
test eax, eax
je 0x489b8a
push 0
mov ecx, dword [ebp - 0x16e4]
mov dword [ebp - 0x176c], ecx
cvtsi2sd xmm0, dword [ebp - 0x176c]
mov edx, dword [ebp - 0x176c]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1b48], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b48]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16ec]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp 0x489bfb
mov eax, dword [ebp - 0x1770]
push eax
mov ecx, dword [ebp - 0x16e4]
mov dword [ebp - 0x1774], ecx
cvtsi2sd xmm0, dword [ebp - 0x1774]
mov edx, dword [ebp - 0x1774]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1b50], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b50]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16e8]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x16ec]
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1684], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1680], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x167c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x177c], eax
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x30f58], 1
cvtsi2sd xmm0, dword [ebp - 0x1684]
mov ecx, dword [ebp - 0x1530]
movsd qword [ecx + 0x30f60], xmm0
cvtsi2sd xmm0, dword [ebp - 0x1680]
mov edx, dword [ebp - 0x1530]
movsd qword [edx + 0x30f68], xmm0
mov eax, dword [ebp - 0x1530]
mov ecx, dword [ebp - 0x167c]
mov dword [eax + 0x30f70], ecx
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x177c]
mov dword [edx + 0x30f74], eax
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx ecx, al
test ecx, ecx
je 0x489d28
push 0
mov edx, dword [ebp - 0x167c]
mov dword [ebp - 0x1778], edx
cvtsi2sd xmm0, dword [ebp - 0x1778]
mov eax, dword [ebp - 0x1778]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4c9540]
movsd qword [ebp - 0x1b58], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b58]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1680]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1684]
neg edx
cvtsi2ss xmm0, edx
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp 0x489da1
mov eax, dword [ebp - 0x177c]
push eax
mov ecx, dword [ebp - 0x167c]
mov dword [ebp - 0x1780], ecx
cvtsi2sd xmm0, dword [ebp - 0x1780]
mov edx, dword [ebp - 0x1780]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1b60], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b60]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1680]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x1684]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1974], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1978], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1614], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1790], eax
mov edx, dword [ebp - 0x1614]
mov dword [ebp - 0x1784], edx
cvtsi2sd xmm0, dword [ebp - 0x1784]
mov eax, dword [ebp - 0x1784]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4c9540]
subsd xmm0, qword [0x4c90e8]
divsd xmm0, qword [0x4c90e8]
cvtsi2sd xmm1, dword [ebp - 0x1974]
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [ebp - 0x168c], ecx
mov edx, dword [ebp - 0x1614]
mov dword [ebp - 0x1788], edx
cvtsi2sd xmm0, dword [ebp - 0x1788]
mov eax, dword [ebp - 0x1788]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4c9540]
subsd xmm0, qword [0x4c90e8]
divsd xmm0, qword [0x4c90e8]
cvtsi2sd xmm1, dword [ebp - 0x1978]
mulsd xmm0, xmm1
cvttsd2si ecx, xmm0
mov dword [ebp - 0x1688], ecx
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x30f58], 1
cvtsi2sd xmm0, dword [ebp - 0x168c]
mov eax, dword [ebp - 0x1530]
movsd qword [eax + 0x30f60], xmm0
cvtsi2sd xmm0, dword [ebp - 0x1688]
mov ecx, dword [ebp - 0x1530]
movsd qword [ecx + 0x30f68], xmm0
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x1614]
mov dword [edx + 0x30f70], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x1790]
mov dword [ecx + 0x30f74], edx
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx eax, al
test eax, eax
je 0x489f66
push 0
mov ecx, dword [ebp - 0x1614]
mov dword [ebp - 0x178c], ecx
cvtsi2sd xmm0, dword [ebp - 0x178c]
mov edx, dword [ebp - 0x178c]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1b68], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b68]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x1688]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x168c]
neg ecx
cvtsi2ss xmm0, ecx
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp 0x489fdf
mov edx, dword [ebp - 0x1790]
push edx
mov eax, dword [ebp - 0x1614]
mov dword [ebp - 0x1794], eax
cvtsi2sd xmm0, dword [ebp - 0x1794]
mov ecx, dword [ebp - 0x1794]
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x4c9540]
movsd qword [ebp - 0x1b70], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b70]
divss xmm0, dword [0x4c94b0]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1688]
neg edx
cvtsi2ss xmm0, edx
push ecx
movss dword [esp], xmm0
mov eax, dword [ebp - 0x168c]
neg eax
cvtsi2ss xmm0, eax
push ecx
movss dword [esp], xmm0
mov ecx, 0x574b5f8
call fcn.0044a190
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x17a8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x17a4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x17a0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1a28], eax
mov ecx, dword [ebp - 0x197c]
mov dword [ebp - 0x1798], ecx
cvtsi2sd xmm0, dword [ebp - 0x1798]
mov edx, dword [ebp - 0x1798]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x4c9540]
movsd qword [ebp - 0x1b78], xmm0
cvtsd2ss xmm0, qword [ebp - 0x1b78]
divss xmm0, dword [0x4c94b0]
cvtss2sd xmm0, xmm0
mov eax, dword [ebp - 0x1530]
mulsd xmm0, qword [eax + 0x3b7c8]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x179c], xmm0
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx ecx, al
test ecx, ecx
je 0x48a0e5
push 0
push ecx
movss xmm0, dword [ebp - 0x179c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a4]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x17a8]
push edx
mov ecx, 0x574b5f8
call fcn.0044d430
jmp 0x48a127
mov eax, dword [ebp - 0x1a28]
push eax
push ecx
movss xmm0, dword [ebp - 0x179c]
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a0]
push ecx
movss dword [esp], xmm0
cvtsi2ss xmm0, dword [ebp - 0x17a4]
push ecx
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x17a8]
push ecx
mov ecx, 0x574b5f8
call fcn.0044d430
jmp case.0x48592e.4
lea ecx, [ebp - 0x1224]
call fcn.004122a0
push 0x304
push 0
lea edx, [ebp - 0x1224]
push edx
call fcn.0049efc0
add esp, 0xc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx eax, al
mov dword [ebp - 0x1224], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx ecx, ax
mov dword [ebp - 0x11e8], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx edx, ax
mov dword [ebp - 0x11e4], edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1208], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1204], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x114c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1148], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x11b0], eax
mov dword [ebp - 0x121c], 1
movss xmm0, dword [0x4c9034]
movss dword [ebp - 0x1200], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1bdc]
call fcn.00411280
mov ecx, dword [eax]
mov dword [ebp - 0x11f8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x11f4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x11f0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x11ec], edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx eax, al
cmp eax, 1
jne 0x48a31b
mov ecx, dword [ebp - 0x121c]
or ecx, 0x10000002
mov dword [ebp - 0x121c], ecx
xorps xmm0, xmm0
movss dword [ebp - 0x1200], xmm0
movss xmm0, dword [0x4c9034]
movss dword [ebp - 0x1144], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
push ecx
movss xmm0, dword [0x4c92b8]
movss dword [esp], xmm0
lea ecx, [ebp - 0x1bec]
call fcn.00411280
mov edx, dword [eax]
mov dword [ebp - 0x11f8], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x11f4], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x11f0], edx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x11ec], eax
cmp dword [ebp - 0x11b0], 0
jne 0x48a32e
mov dword [ebp - 0x11b0], 0x10
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x1984], edx
mov eax, dword [ebp - 0x1984]
push eax
lea ecx, [ebp - 0x1224]
push ecx
mov ecx, 0x574b5f8
call fcn.0044d7f0
jmp case.0x48592e.4
lea ecx, [ebp - 0x1528]
call fcn.004122a0
push 0x304
push 0
lea edx, [ebp - 0x1528]
push edx
call fcn.0049efc0
add esp, 0xc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx eax, al
mov dword [ebp - 0x1528], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x1450], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
movss dword [ebp - 0x144c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x14b4], eax
mov dword [ebp - 0x1520], 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx ecx, al
cmp ecx, 1
jne 0x48a417
mov edx, dword [ebp - 0x1520]
or edx, 0x10000004
mov dword [ebp - 0x1520], edx
xorps xmm0, xmm0
movss dword [ebp - 0x1448], xmm0
cmp dword [ebp - 0x14b4], 0
jne 0x48a42a
mov dword [ebp - 0x14b4], 0x10
lea eax, [ebp - 0x1528]
push eax
mov ecx, 0x574b5f8
call fcn.0044da10
jmp case.0x48592e.4
mov dword [ebp - 0x17c0], 0
mov byte [ebp - 0x156a], 0
movzx ecx, byte [ebp - 0x1535]
cmp ecx, 0xba
jne 0x48a467
mov byte [ebp - 0x156a], 1
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x17c4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1536], al
movzx edx, byte [ebp - 0x1536]
cmp edx, 0x43
je 0x48a4ab
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx eax, ax
mov dword [ebp - 0x17ac], eax
jmp 0x48a4bc
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x17ac], eax
mov ecx, dword [ebp - 0x17ac]
mov dword [ebp - 0x17bc], ecx
movzx edx, byte [ebp - 0x1536]
cmp edx, 0xc4
je 0x48aa64
mov al, byte [ebp - 0x1536]
mov byte [ebp - 0xc80], al
mov ecx, dword [ebp - 0x17bc]
mov dword [ebp - 0xc7c], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx edx, al
mov dword [ebp - 0x1668], edx
mov eax, dword [ebp - 0x1668]
sub eax, 0xbc
mov dword [ebp - 0x1668], eax
cmp dword [ebp - 0x1668], 0xe
ja case.0x48a52b.5
mov ecx, dword [ebp - 0x1668]
jmp dword [ecx*4 + 0x48d1f0]
mov dword [ebp - 0xc78], 0x59
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
cvttss2si edx, xmm0
mov eax, 4
shl eax, 0
mov dword [ebp + eax - 0xc74], edx
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
cvttss2si ecx, xmm0
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx eax, al
mov ecx, 4
imul edx, ecx, 3
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
shl ecx, 2
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x99
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x81
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x17b0], eax
mov ecx, dword [ebp - 0x17b0]
push ecx
mov ecx, 0x574bcd8
call fcn.004939f0
mov dword [ebp - 0x1690], eax
cmp dword [ebp - 0x1690], 0
jge 0x48a65b
mov edx, dword [ebp - 0x17b0]
push edx
call fcn.004a1bdb
add esp, 4
mov dword [ebp - 0x1690], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x1690]
mov dword [ebp + eax - 0xc74], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x47
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, 4
imul edx, ecx, 3
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x7c
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a52b.5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15af], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x16b8], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1569], al
movzx eax, byte [ebp - 0x1569]
cmp eax, 0x43
je 0x48a7b6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx ecx, ax
mov dword [ebp - 0x17b4], ecx
jmp 0x48a7c7
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x17b4], eax
mov edx, dword [ebp - 0x17b4]
mov dword [ebp - 0x1988], edx
mov dword [ebp - 0xc78], 0x1e
movzx eax, byte [ebp - 0x15af]
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
movzx eax, word [ebp - 0x16b8]
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
movzx edx, byte [ebp - 0x1569]
mov eax, 4
shl eax, 1
mov dword [ebp + eax - 0xc74], edx
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [ebp - 0x1988]
mov dword [ebp + edx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x90
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx ecx, ax
mov edx, 4
imul eax, edx, 0
mov dword [ebp + eax - 0xc74], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x9b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0x198c]
push ecx
lea edx, [ebp - 0xbfc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
shl ecx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
shl edx, 1
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
imul edx, ecx, 3
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
shl ecx, 2
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
imul ecx, edx, 5
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
imul ecx, edx, 6
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x9e
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
jmp case.0x48a52b.5
mov dword [ebp - 0xc78], 0x5f
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
imul ecx, edx, 0
mov dword [ebp + ecx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov edx, 4
shl edx, 0
mov dword [ebp + edx - 0xc74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, 4
shl ecx, 1
mov dword [ebp + ecx - 0xc74], eax
movzx edx, byte [ebp - 0x156a]
push edx
mov eax, dword [ebp - 0x17c4]
push eax
lea ecx, [ebp - 0xc80]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00483060
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x1536], al
movzx edx, byte [ebp - 0x1536]
cmp edx, 0x43
je 0x48aa42
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx eax, ax
mov dword [ebp - 0x17b8], eax
jmp 0x48aa53
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x17b8], eax
mov ecx, dword [ebp - 0x17b8]
mov dword [ebp - 0x17bc], ecx
jmp 0x48a4c8
mov edx, dword [ebp - 0x17c0]
push edx
mov eax, dword [ebp - 0x17c4]
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00483240
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00483310
jmp case.0x48592e.4
push 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.00483500
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
push eax
mov ecx, dword [ebp - 0x152c]
call fcn.004835f0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x26cb0], eax
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1694], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
mov dword [ebp - 0x1698], eax
mov edx, dword [ebp - 0x1694]
push edx
mov ecx, 0x574b760
call fcn.0045ea40
mov eax, dword [ebp - 0x1698]
push eax
mov ecx, 0x574b760
call fcn.0045eaa0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x32dc0], 1
mov edx, dword [ebp - 0x1530]
mov eax, dword [ebp - 0x1694]
mov dword [edx + 0x32dc4], eax
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ebp - 0x1698]
mov dword [ecx + 0x32dc8], edx
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x4793ad0
call fcn.00476aa0
movzx eax, al
test eax, eax
je 0x48abd3
push 1
mov ecx, 0x574b760
call fcn.0045ebd0
mov ecx, dword [ebp - 0x1694]
push ecx
mov ecx, 0x4793ad0
call fcn.004770a0
movzx edx, al
test edx, edx
jne 0x48abaa
jmp case.0x48592e.4
mov eax, dword [ebp - 0x1698]
push eax
mov ecx, 0x4793ad0
call fcn.00477120
movzx ecx, al
test ecx, ecx
jne 0x48abc7
jmp case.0x48592e.4
mov ecx, 0x4793ad0
call fcn.00477050
jmp 0x48abdf
push 0
mov ecx, 0x574b760
call fcn.0045ebd0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x156b], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1580], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x156c], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1578], ax
lea edx, [ebp - 0x1580]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48acbd
movzx edx, byte [ebp - 0x156b]
cmp edx, 0x41
jne 0x48ac74
movzx eax, word [ebp - 0x1580]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x17c8], edx
jmp 0x48ac8e
movzx eax, word [ebp - 0x1580]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x17c8], edx
mov eax, dword [ebp - 0x17c8]
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ecx + 0x32dc4]
mov dword [eax], edx
movzx eax, word [ebp - 0x1580]
push eax
movzx ecx, byte [ebp - 0x156b]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
lea edx, [ebp - 0x1578]
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 4]
call eax
movzx ecx, al
cmp ecx, 1
jne 0x48ad50
movzx edx, byte [ebp - 0x156c]
cmp edx, 0x41
jne 0x48ad07
movzx eax, word [ebp - 0x1578]
mov ecx, dword [ebp - 0x1534]
lea edx, [ecx + eax*4 + 0x1628]
mov dword [ebp - 0x17cc], edx
jmp 0x48ad21
movzx eax, word [ebp - 0x1578]
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax*4 + 0x2fdf0]
mov dword [ebp - 0x17cc], edx
mov eax, dword [ebp - 0x17cc]
mov ecx, dword [ebp - 0x1530]
mov edx, dword [ecx + 0x32dc8]
mov dword [eax], edx
movzx eax, word [ebp - 0x1578]
push eax
movzx ecx, byte [ebp - 0x156c]
push ecx
mov ecx, dword [ebp - 0x152c]
call fcn.00477230
jmp case.0x48592e.4
push 0
mov ecx, 0x574b760
call fcn.0045ea40
push 0
mov ecx, 0x574b760
call fcn.0045eaa0
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x32dc0], 0
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x32dc4], 0
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x32dc8], 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x4793ad0
call fcn.00476aa0
movzx edx, al
test edx, edx
je 0x48adca
mov ecx, 0x4793ad0
call fcn.00477020
push 1
mov ecx, 0x574b760
call fcn.0045ebd0
jmp 0x48add6
push 0
mov ecx, 0x574b760
call fcn.0045ebd0
jmp case.0x48592e.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1990], eax
cmp dword [ebp - 0x1990], 0
je 0x48adef
jmp 0x48adfa
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1994], ecx
cmp dword [ebp - 0x1994], 0
je 0x48ae13
jmp 0x48ae1e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x15f8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x15f0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1998], eax
push 0
mov edx, dword [ebp - 0x15f8]
push edx
push 0x1f7
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov eax, dword [ebp - 0x15f0]
push eax
push 0x1f8
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov ecx, dword [ebp - 0x1998]
push ecx
push 0x1f9
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov edx, dword [ebp - 0x15f8]
push edx
push 0x280
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov eax, dword [ebp - 0x15f0]
push eax
push 0x281
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov ecx, dword [ebp - 0x15f8]
push ecx
push 0x284
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov edx, dword [ebp - 0x15f0]
push edx
push 0x285
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov eax, dword [ebp - 0x15f8]
push eax
push 0x288
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov ecx, dword [ebp - 0x15f0]
push ecx
push 0x289
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov edx, dword [ebp - 0x15f8]
push edx
push 0x28c
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov eax, dword [ebp - 0x15f0]
push eax
push 0x28d
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov ecx, dword [ebp - 0x15f8]
push ecx
push 0x290
mov ecx, 0x4927138
call fcn.00445f10
push 0
mov edx, dword [ebp - 0x15f0]
push edx
push 0x291
mov ecx, 0x4927138
call fcn.00445f10
jmp case.0x48592e.4
xor eax, eax
mov ecx, dword [ebp - 0x1530]
add ecx, 0x30f34
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], eax
mov dword [ecx + 0x20], eax
mov dword [ebp - 0xb30], 0x47
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xb14], 1
movss xmm0, dword [0x4c9034]
movss dword [ebp - 0xb1c], xmm0
movss xmm0, dword [0x4c9034]
movss dword [ebp - 0xb18], xmm0
mov dword [ebp - 0xb10], 0
lea edx, [ebp - 0xb30]
push edx
mov ecx, 0x574b5f8
call fcn.0044dc20
jmp case.0x48592e.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17d0], eax
push 0x19
mov eax, dword [ebp - 0x17d0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x17d0]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x48592e.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x15a8], eax
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0x169c], eax
cmp dword [ebp - 0x169c], 0x19
je 0x48b08d
cmp dword [ebp - 0x169c], 0x1a
je 0x48b0a4
cmp dword [ebp - 0x169c], 0x1b
je 0x48b0bb
jmp 0x48b0d0
push 0
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48b0d0
push 0x11
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48b0d0
push 0x13
mov ecx, dword [ebp - 0x15a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x15a8]
mov eax, dword [edx + 0x20]
call eax
jmp case.0x48592e.4
mov dword [ebp - 0x17d4], 1
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x199c], ecx
cmp dword [ebp - 0x199c], 0
je 0x48b0f6
jmp 0x48b3f8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx edx, al
mov dword [ebp - 0x19a0], edx
mov eax, dword [ebp - 0x19a0]
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0x1534]
movzx edx, byte [ecx + 1]
cmp edx, 2
jne 0x48b142
mov dword [ebp - 0xa48], 0
jmp 0x48b15d
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx eax, al
test eax, eax
je 0x48b15d
mov dword [ebp - 0xa48], 0xa
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x26de8], 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + 0x26de9], 0
mov eax, dword [ebp - 0x1530]
mov byte [eax + 0x26dea], 0
mov ecx, dword [ebp - 0x1530]
mov byte [ecx + 0x26deb], 0
mov edx, dword [ebp - 0xa4c]
mov dword [ebp - 0x16f0], edx
cmp dword [ebp - 0x16f0], 0x28
je 0x48b1c5
cmp dword [ebp - 0x16f0], 0x46
je 0x48b267
cmp dword [ebp - 0x16f0], 0x47
je 0x48b28b
jmp 0x48b375
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0xa44], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0xa43], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0xa42], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0xa41], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0xa40], al
mov eax, dword [ebp - 0x1530]
mov cl, byte [ebp - 0xa44]
mov byte [eax + 0x26de8], cl
mov edx, dword [ebp - 0x1530]
mov al, byte [ebp - 0xa43]
mov byte [edx + 0x26de9], al
mov ecx, dword [ebp - 0x1530]
mov dl, byte [ebp - 0xa42]
mov byte [ecx + 0x26dea], dl
mov eax, dword [ebp - 0x1530]
mov cl, byte [ebp - 0xa40]
mov byte [eax + 0x26deb], cl
jmp 0x48b3b5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
divss xmm0, dword [0x4c94b0]
movss dword [ebp - 0xa3c], xmm0
jmp 0x48b3b5
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
movss dword [ebp - 0xa38], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
cvtsi2ss xmm0, eax
movss dword [ebp - 0xa34], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0xa2c], eax
cmp dword [ebp - 0xa30], 0
jne 0x48b2ee
mov dword [ebp - 0xa30], 1
cmp dword [ebp - 0xa2c], 0
je 0x48b333
cmp dword [ebp - 0xa48], 1
jne 0x48b373
cmp dword [ebp - 0xa30], 1
jne 0x48b373
movss xmm0, dword [ebp - 0xa38]
ucomiss xmm0, dword [0x4c9034]
lahf
test ah, 0x44
jp 0x48b373
movss xmm0, dword [ebp - 0xa34]
ucomiss xmm0, dword [0x4c9034]
lahf
test ah, 0x44
jp 0x48b373
xor edx, edx
mov eax, dword [ebp - 0x1530]
add eax, 0x30f34
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], edx
mov dword [eax + 0x20], edx
mov edi, dword [ebp - 0x1530]
add edi, 0x30f34
mov ecx, 9
lea esi, [ebp - 0xa4c]
rep movsd dword es:[edi], dword [esi]
jmp 0x48b3b5
mov ecx, dword [ebp - 0x1534]
movzx edx, byte [ecx + 1]
cmp edx, 2
jne 0x48b390
mov dword [ebp - 0xa4c], 0
jmp 0x48b3b5
mov ecx, 0x69dd128
call fcn.0048dcc0
movzx eax, al
test eax, eax
je 0x48b3b5
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xa48], 0xa
lea ecx, [ebp - 0xa4c]
push ecx
mov ecx, 0x574b5f8
call fcn.0044dc20
cmp dword [ebp - 0x17d4], 0
jne 0x48b3f6
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17d8], eax
push 0xb
mov edx, dword [ebp - 0x17d8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17d8]
mov edx, dword [eax + 0x20]
call edx
jmp 0x48b403
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19a4], eax
cmp dword [ebp - 0x19a4], 0
je 0x48b41c
jmp 0x48b435
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x1678], eax
jmp 0x48b440
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x1678], 0
jmp case.0x48592e.4
mov eax, dword [ebp - 0x1530]
mov dword [eax + 0x1678], 0
mov ecx, 0x4793b64
call fcn.0046c330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b4e2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b2], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b1], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b0], al
movzx ecx, byte [ebp - 0x15b0]
push ecx
movzx edx, byte [ebp - 0x15b1]
push edx
movzx eax, byte [ebp - 0x15b2]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xe8]
call eax
jmp 0x48b503
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b571
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b5], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b4], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b3], al
movzx ecx, byte [ebp - 0x15b3]
push ecx
movzx edx, byte [ebp - 0x15b4]
push edx
movzx eax, byte [ebp - 0x15b5]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xec]
call eax
jmp 0x48b592
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b600
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b8], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b7], al
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x15b6], al
movzx ecx, byte [ebp - 0x15b6]
push ecx
movzx edx, byte [ebp - 0x15b7]
push edx
movzx eax, byte [ebp - 0x15b8]
push eax
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 0xf0]
call eax
jmp 0x48b621
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b67c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx ecx, al
mov dword [ebp - 0x17dc], ecx
push 1
push 1
mov edx, dword [ebp - 0x17dc]
push edx
mov ecx, 0x489f1d0
call fcn.00464250
push 0xa
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x17dc]
push ecx
call fcn.00484890
add esp, 0xc
lea edx, [ebp - 0x1c]
push edx
push 0
mov ecx, 0x574b760
call fcn.0045e760
jmp 0x48b687
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b6af
push 1
mov ecx, 0x489f1d0
call fcn.00464bb0
push 0x4c80bc
push 0
mov ecx, 0x574b760
call fcn.0045e760
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b713
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx eax, ax
cdq
mov ecx, 0x3e8
idiv ecx
mov word [ebp - 0x15c8], ax
movzx edx, word [ebp - 0x15c8]
test edx, edx
jne 0x48b6ee
mov eax, 1
mov word [ebp - 0x15c8], ax
push 1
movzx ecx, word [ebp - 0x15c8]
push ecx
mov ecx, 0x489f1d0
call fcn.00464b10
push 0x4c80c0
push 0
mov ecx, 0x574b760
call fcn.0045e760
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b729
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b765
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19a8], eax
mov edx, dword [ebp - 0x19a8]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
push ecx
mov ecx, 0x489f1d0
call fcn.00465840
jmp 0x48b770
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b7ba
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x16b0], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
push eax
movzx ecx, word [ebp - 0x16b0]
push ecx
mov ecx, 0x489f1d0
call fcn.004655c0
jmp 0x48b7d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b801
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x16c0], ax
movzx edx, word [ebp - 0x16c0]
push edx
mov ecx, 0x489f1d0
call fcn.00465b10
jmp 0x48b80c
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b821
mov ecx, 0x489f1d0
call fcn.00465ac0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48b8f9
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1558], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19ac], eax
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
movzx eax, word [ebp - 0x1558]
sub eax, 1
imul ecx, eax, 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x2de4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx ecx, word [ebp - 0x1558]
mov dword [ebp - 0x19b0], ecx
mov edx, dword [ebp - 0x19b0]
push edx
movzx eax, word [ebp - 0x1558]
sub eax, 1
imul ecx, eax, 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x2de4c]
push eax
mov ecx, 0x489f1d0
call fcn.00465bc0
movzx ecx, word [ebp - 0x1558]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
push ecx
movzx edx, word [ebp - 0x1558]
push edx
mov ecx, 0x574b760
call fcn.0045e760
jmp 0x48b90f
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48ba2d
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x1548], ax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x16a4], eax
mov eax, dword [ebp - 0x16a4]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
movzx eax, word [ebp - 0x1548]
sub eax, 1
imul ecx, eax, 0x104
mov edx, dword [ebp - 0x1530]
lea eax, [edx + ecx + 0x2de4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x16a4], eax
mov ecx, dword [ebp - 0x16a4]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x79204]
push eax
movzx ecx, word [ebp - 0x1548]
sub ecx, 1
imul edx, ecx, 0xa
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2fcc4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
movzx edx, word [ebp - 0x1548]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
push eax
movzx ecx, word [ebp - 0x1548]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
push ecx
mov ecx, 0x489f1d0
call fcn.00465bc0
movzx edx, word [ebp - 0x1548]
sub edx, 1
imul eax, edx, 0x104
mov ecx, dword [ebp - 0x1530]
lea edx, [ecx + eax + 0x2de4c]
push edx
movzx eax, word [ebp - 0x1548]
push eax
mov ecx, 0x574b760
call fcn.0045e760
jmp 0x48ba4e
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bacb
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
mov word [ebp - 0x15cc], ax
movzx ecx, word [ebp - 0x15cc]
sub ecx, 1
imul edx, ecx, 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
mov edx, 1
imul eax, edx, 0
mov byte [ecx + eax], 0
movzx ecx, word [ebp - 0x15cc]
mov dword [ebp - 0x19b8], ecx
mov edx, dword [ebp - 0x19b8]
push edx
mov ecx, 0x489f1d0
call fcn.00465e00
push 0x4c80c4
movzx eax, word [ebp - 0x15cc]
push eax
mov ecx, 0x574b760
call fcn.0045e760
jmp 0x48bad6
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bb57
mov dword [ebp - 0x15f4], 0
jmp 0x48bafc
mov ecx, dword [ebp - 0x15f4]
add ecx, 1
mov dword [ebp - 0x15f4], ecx
cmp dword [ebp - 0x15f4], 0x15
jge 0x48bb57
imul edx, dword [ebp - 0x15f4], 0x104
mov eax, dword [ebp - 0x1530]
lea ecx, [eax + edx + 0x2de4c]
mov edx, 1
imul eax, edx, 0
mov byte [ecx + eax], 0
mov ecx, dword [ebp - 0x15f4]
add ecx, 1
push ecx
mov ecx, 0x489f1d0
call fcn.00465e00
push 0x4c80c8
mov edx, dword [ebp - 0x15f4]
add edx, 1
push edx
mov ecx, 0x574b760
call fcn.0045e760
jmp 0x48baed
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bb95
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19bc], eax
push 0
mov eax, dword [ebp - 0x19bc]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
push edx
mov ecx, 0x489f1d0
call fcn.00463450
jmp 0x48bba0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bbb5
mov ecx, 0x489f1d0
call fcn.00463760
jmp case.0x48592e.4
mov dword [ebp - 0x1618], 0
mov ecx, 0x574bcd8
call fcn.00411490
add eax, 1
mov dword [ebp - 0x19c0], eax
mov eax, dword [ebp - 0x1618]
cmp eax, dword [ebp - 0x19c0]
jge 0x48bc23
mov ecx, dword [ebp - 0x1618]
mov edx, dword [ebp - 0x1534]
cmp dword [edx + ecx*4 + 0x3888], 0
jne 0x48bc12
mov eax, dword [ebp - 0x1618]
mov ecx, dword [ebp - 0x1534]
mov dword [ecx + eax*4 + 0x3888], 1
mov edx, dword [ebp - 0x1618]
add edx, 1
mov dword [ebp - 0x1618], edx
jmp 0x48bbd7
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bca8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx eax, al
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jge 0x48bc5f
mov dword [ebp - 0x166c], 0
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x17e0], eax
mov ecx, dword [ebp - 0x166c]
mov edx, dword [ebp - 0x17e0]
cmp dword [edx + ecx*4 + 0x3888], 0
jne 0x48bca6
mov eax, dword [ebp - 0x166c]
mov ecx, dword [ebp - 0x17e0]
mov dword [ecx + eax*4 + 0x3888], 1
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp 0x48bcb3
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bd85
mov edx, dword [ebp - 0x1530]
cmp dword [edx + 0x30d90], 0
jle 0x48bd7e
mov ecx, 0x489f1d0
call fcn.00460aa0
push 0
push 8
push 7
mov ecx, 0x489f1d0
call fcn.00461090
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1574], eax
push 0x5a
mov ecx, 0x5433230
call fcn.0045a440
mov eax, dword [ebp - 0x1574]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x11
jne 0x48bd3c
push 0x12
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48bd69
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48bd69
push 0x14
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1574]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1574]
mov eax, dword [edx + 0x1c]
call eax
mov al, 0xcf
jmp 0x48cdf5
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bddd
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x30d94], 0
jle 0x48bdd6
push 0
push 8
push 0x1d
mov ecx, 0x489f1d0
call fcn.00461090
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17e4], eax
push 6
mov edx, dword [ebp - 0x17e4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17e4]
mov edx, dword [eax + 0x1c]
call edx
mov al, 0xcf
jmp 0x48cdf5
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bece
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x30d98], 0
jle 0x48bec7
mov ecx, 0x489f1d0
call fcn.00460aa0
push 0
push 8
push 0x19
mov ecx, 0x489f1d0
call fcn.00461090
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1550], eax
push 0x5a
mov ecx, 0x5433230
call fcn.0045a440
mov ecx, 0x489f860
call fcn.004672c0
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x11
jne 0x48be70
push 0x12
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48be9d
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x14]
call eax
cmp eax, 0x13
jne 0x48be9d
push 0x14
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x20]
call eax
push 0
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x20]
call eax
push 6
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1550]
mov eax, dword [edx + 0x1c]
call eax
mov al, 0xcf
jmp 0x48cdf5
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48bf13
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx ecx, al
sub ecx, 1
mov dword [ebp - 0x19c4], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx edx, al
mov eax, dword [ebp - 0x19c4]
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + eax*4 + 0x31108], edx
jmp 0x48bf29
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
mov dword [ebp - 0x1620], 1
cmp dword [ebp + 8], 0
jne 0x48c268
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov edx, dword [ebp - 0x1530]
mov dword [edx + 0x70], 0
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x31158], 2
je 0x48bf9a
cmp dword [ebp - 0x1620], 1
je 0x48bf9a
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x31158], 0
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx edx, al
mov dword [ebp - 0x16ac], edx
push 0
mov ecx, 0x489f860
call fcn.004698d0
mov dword [ebp - 0x16a8], 0
mov dword [ebp - 0x1670], 0
jmp 0x48bfdf
mov eax, dword [ebp - 0x1670]
add eax, 1
mov dword [ebp - 0x1670], eax
mov ecx, dword [ebp - 0x1670]
cmp ecx, dword [ebp - 0x16ac]
jge 0x48c014
mov edx, dword [ebp - 0x1670]
mov eax, dword [ebp - 0x1530]
cmp dword [eax + edx*4 + 0x31108], 1
jne 0x48c012
mov ecx, dword [ebp - 0x16a8]
add ecx, 1
mov dword [ebp - 0x16a8], ecx
jmp 0x48bfd0
mov edx, dword [ebp - 0x16ac]
push edx
mov eax, dword [ebp - 0x16a8]
push eax
mov ecx, 0x508d9c8
call fcn.0041cb90
lea ecx, [ebp - 0x1a3c]
call fcn.00494520
mov dword [ebp - 4], 0
push 0x4c3d57
lea ecx, [ebp - 0x1a3c]
call fcn.004945e0
mov dword [ebp - 0x161c], 0
mov dword [ebp - 0x1674], 0
jmp 0x48c073
mov ecx, dword [ebp - 0x1674]
add ecx, 1
mov dword [ebp - 0x1674], ecx
mov edx, dword [ebp - 0x1674]
cmp edx, dword [ebp - 0x16ac]
jge 0x48c190
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x17e8], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19c8], eax
mov eax, dword [ebp - 0x19c8]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x16d0], edx
mov eax, dword [ebp - 0x1674]
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + eax*4 + 0x31108], 1
jne 0x48c18b
cmp dword [ebp - 0x1620], 1
je 0x48c104
mov edx, dword [ebp - 0x16d0]
push edx
mov eax, dword [ebp - 0x161c]
push eax
mov ecx, dword [ebp - 0x17e8]
push ecx
mov ecx, 0x508d9c8
call fcn.0046f040
jmp 0x48c123
mov edx, dword [ebp - 0x16d0]
push edx
mov eax, dword [ebp - 0x161c]
push eax
mov ecx, dword [ebp - 0x17e8]
push ecx
mov ecx, 0x508d9c8
call fcn.0046fbe0
push 0xa
lea edx, [ebp - 0x50]
push edx
mov eax, dword [ebp - 0x161c]
add eax, 1
push eax
call fcn.0048dec0
add esp, 0xc
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x1a3c]
call fcn.00494630
push 0x4c80cc
lea ecx, [ebp - 0x1a3c]
call fcn.00494630
mov edx, dword [ebp - 0x16d0]
push edx
lea ecx, [ebp - 0x1a3c]
call fcn.00494630
push 0x4c80d0
lea ecx, [ebp - 0x1a3c]
call fcn.00494630
mov eax, dword [ebp - 0x161c]
add eax, 1
mov dword [ebp - 0x161c], eax
jmp 0x48c064
cmp dword [ebp - 0x1620], 1
je 0x48c1a5
mov ecx, 0x508d9c8
call fcn.0046f280
jmp 0x48c1af
mov ecx, 0x508d9c8
call fcn.0046fda0
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x3c990], 0
jle 0x48c1ea
push 6
mov edx, dword [ebp - 0x153c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x153c]
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a3c]
call fcn.00494560
jmp case.0x48592e.4
cmp dword [ebp - 0x1620], 1
je 0x48c23f
mov eax, dword [ebp - 0x1530]
cmp dword [eax + 0x30d90], 0
jg 0x48c211
mov ecx, dword [ebp - 0x1530]
cmp dword [ecx + 0x30d94], 0
jle 0x48c228
push 6
mov edx, dword [ebp - 0x153c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x153c]
mov edx, dword [eax + 0x20]
call edx
jmp 0x48c23d
push 3
mov eax, dword [ebp - 0x153c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48c254
push 6
mov ecx, dword [ebp - 0x153c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x153c]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a3c]
call fcn.00494560
jmp 0x48c2b2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx ecx, al
mov dword [ebp - 0x19cc], ecx
mov dword [ebp - 0x16b4], 0
jmp 0x48c297
mov edx, dword [ebp - 0x16b4]
add edx, 1
mov dword [ebp - 0x16b4], edx
mov eax, dword [ebp - 0x16b4]
cmp eax, dword [ebp - 0x19cc]
jge 0x48c2b2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
jmp 0x48c288
jmp case.0x48592e.4
cmp dword [ebp + 8], 1
jne 0x48c2e2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
movzx ecx, al
mov edx, dword [ebp - 0x152c]
cmp ecx, dword [edx + 0xc7414]
jne 0x48c2e0
mov al, 0xd2
jmp 0x48cdf5
jmp 0x48c2ed
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48c304
push 2
mov ecx, 0x508d9c8
call fcn.0046f250
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48c378
push 0
mov ecx, 0x508d9c8
call fcn.0046f250
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x3115c], 0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x32d90], 0
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x1530]
mov byte [edx + ecx + 0x32da4], 0
push 0x1b30
push 0
mov eax, dword [ebp - 0x1530]
add eax, 0x31260
push eax
call fcn.0049efc0
add esp, 0xc
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x17ec], edx
cmp dword [ebp + 8], 0
jne 0x48c3cc
mov eax, dword [ebp - 0x17ec]
push eax
mov ecx, dword [ebp - 0x1530]
add ecx, 0x3115c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x17ec]
push edx
mov ecx, 0x508d9c8
call fcn.00485390
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
sub eax, 1
mov dword [ebp - 0x1560], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x31264], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul edx, dword [ebp - 0x1560], 0x15c
mov eax, dword [ebp - 0x1530]
movss dword [eax + edx + 0x31268], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul ecx, dword [ebp - 0x1560], 0x15c
mov edx, dword [ebp - 0x1530]
movss dword [edx + ecx + 0x3126c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x31270], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul edx, dword [ebp - 0x1560], 0x15c
mov eax, dword [ebp - 0x1530]
movss dword [eax + edx + 0x31274], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul ecx, dword [ebp - 0x1560], 0x15c
mov edx, dword [ebp - 0x1530]
movss dword [edx + ecx + 0x31278], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x3127c], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul edx, dword [ebp - 0x1560], 0x15c
mov eax, dword [ebp - 0x1530]
movss dword [eax + edx + 0x31280], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul ecx, dword [ebp - 0x1560], 0x15c
mov edx, dword [ebp - 0x1530]
movss dword [edx + ecx + 0x31284], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
cvtsi2ss xmm0, eax
imul eax, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
movss dword [ecx + eax + 0x31288], xmm0
mov ecx, dword [ebp - 0x152c]
call fcn.0048db30
imul edx, dword [ebp - 0x1560], 0x15c
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + edx + 0x3128c], eax
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + eax*4 + 0x79204]
mov dword [ebp - 0x19d0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
mov edx, dword [ecx + eax*4 + 0x79204]
mov dword [ebp - 0x19d4], edx
mov eax, dword [ebp - 0x19d0]
push eax
mov ecx, dword [ebp - 0x1530]
add ecx, 0x32d90
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x19d4]
push edx
mov eax, dword [ebp - 0x1530]
add eax, 0x32da4
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1b90], ecx
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48c665
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1648], eax
mov edx, dword [ebp - 0x1648]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1648]
mov edx, dword [eax + 0x14]
call edx
mov ecx, dword [ebp - 0x152c]
mov dword [ecx + 0x3ead0c], eax
push 0x15
mov edx, dword [ebp - 0x1648]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1648]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48c6b2
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17f0], eax
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + 0x3ead0c]
push ecx
mov edx, dword [ebp - 0x17f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17f0]
mov edx, dword [eax + 0x20]
call edx
mov eax, dword [ebp - 0x152c]
mov dword [eax + 0x3ead0c], 0xffffffff
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48c71b
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19d8], eax
mov ecx, dword [ebp - 0x19d8]
push ecx
mov ecx, 0x489f1d0
call fcn.004852e0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x80
jne 0x48c719
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17f4], eax
push 0x10
mov eax, dword [ebp - 0x17f4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x17f4]
mov eax, dword [edx + 0x20]
call eax
jmp 0x48c735
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x9c]
call edx
jmp case.0x48592e.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17f8], eax
push 2
mov eax, dword [ebp - 0x17f8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x17f8]
mov eax, dword [edx + 0x20]
call eax
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
jmp case.0x48592e.4
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x17fc], eax
push 9
mov edx, dword [ebp - 0x17fc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x17fc]
mov edx, dword [eax + 0x20]
call edx
jmp case.0x48592e.4
cmp dword [ebp + 8], 0
jne 0x48c924
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x153e], al
mov dword [ebp - 0x164c], 0
mov ecx, 0x489f860
call fcn.004853c0
movzx edx, byte [ebp - 0x153e]
cmp edx, 0xe3
je 0x48c91f
mov al, byte [ebp - 0x153e]
mov byte [ebp - 0x1800], al
cmp byte [ebp - 0x1800], 0xdf
je 0x48c846
cmp byte [ebp - 0x1800], 0xe4
je 0x48c8f8
jmp 0x48c909
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19e0], eax
mov ecx, dword [ebp - 0x19dc]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x79204]
mov dword [ebp - 0x19e8], eax
mov ecx, dword [ebp - 0x19e0]
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + ecx*4 + 0x79204]
mov dword [ebp - 0x19e4], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx ecx, ax
push ecx
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x152c]
mov edx, dword [eax + 8]
call edx
cmp dword [ebp + 8], 0
jne 0x48c8e3
mov eax, dword [ebp - 0x164c]
push eax
mov ecx, dword [ebp - 0x19e4]
push ecx
mov edx, dword [ebp - 0x19e8]
push edx
push 0
mov ecx, 0x489f860
call fcn.004677f0
cmp dword [ebp - 0x164c], 0xffffffff
je 0x48c8f6
mov dword [ebp - 0x164c], 0
jmp 0x48c909
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x164c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x153e], al
jmp 0x48c80c
jmp 0x48c9d8
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x153f], al
mov dword [ebp - 0x1b94], 0
movzx eax, byte [ebp - 0x153f]
cmp eax, 0xe3
je 0x48c9d8
mov cl, byte [ebp - 0x153f]
mov byte [ebp - 0x1804], cl
cmp byte [ebp - 0x1804], 0xdf
je 0x48c971
cmp byte [ebp - 0x1804], 0xe4
je 0x48c9b7
jmp 0x48c9c2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1b98], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1b9c], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
jmp 0x48c9c2
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov ecx, dword [ebp - 0x152c]
call fcn.0048d2d0
mov byte [ebp - 0x153f], al
jmp 0x48c93f
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19ec], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19f0], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x19f4], eax
mov edx, dword [ebp - 0x19ec]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x180c], ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x19fc], ecx
mov edx, dword [ebp - 0x19f4]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x19f8], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48cb23
push 0
mov ecx, dword [ebp - 0x19f8]
push ecx
mov edx, dword [ebp - 0x19fc]
push edx
mov eax, dword [ebp - 0x180c]
push eax
mov ecx, 0x489f860
call fcn.004677f0
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1808], eax
push 1
mov ecx, dword [ebp - 0x1808]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1808]
mov eax, dword [edx + 0x20]
call eax
push 0
mov ecx, dword [ebp - 0x180c]
push ecx
mov ecx, 0x489f1d0
call fcn.00463450
mov ecx, 0x489f860
call fcn.0046acd0
push 1
mov ecx, 0x489f860
call fcn.004853e0
push 0
mov ecx, 0x4d2930
call fcn.0046ebf0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a00], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a04], eax
mov edx, dword [ebp - 0x1a00]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a0c], ecx
mov edx, dword [ebp - 0x1a04]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a08], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48cc22
push 0
mov ecx, dword [ebp - 0x1a08]
push ecx
mov edx, dword [ebp - 0x1a0c]
push edx
push 0
mov ecx, 0x489f860
call fcn.004677f0
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1810], eax
push 1
mov eax, dword [ebp - 0x1810]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1810]
mov eax, dword [edx + 0x20]
call eax
push 1
mov ecx, 0x489f860
call fcn.004853e0
push 0
mov ecx, 0x4d2930
call fcn.0046ebf0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov edx, dword [ebp - 0x152c]
mov eax, dword [edx + 0x30]
mov edx, dword [eax + 0x48]
call edx
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a10], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a14], eax
mov edx, dword [ebp - 0x1a10]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a1c], ecx
mov edx, dword [ebp - 0x1a14]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a18], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48ccfa
push 0
mov ecx, dword [ebp - 0x1a18]
push ecx
push 0
mov edx, dword [ebp - 0x1a1c]
push edx
mov ecx, 0x489f860
call fcn.004677f0
push 1
mov ecx, 0x489f860
call fcn.004853e0
push 0
mov ecx, 0x4d2930
call fcn.0046ebf0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
add ecx, 0x30
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax + 0x30]
mov eax, dword [edx + 0x48]
call eax
sub eax, 1
mov ecx, dword [ebp - 0x1530]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1a20], eax
mov edx, dword [ebp - 0x1a20]
mov eax, dword [ebp - 0x152c]
mov ecx, dword [eax + edx*4 + 0x79204]
mov dword [ebp - 0x1a24], ecx
mov ecx, dword [ebp - 0x152c]
call fcn.0048d330
movzx edx, ax
push edx
mov eax, dword [ebp - 0x152c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x152c]
mov eax, dword [edx + 8]
call eax
cmp dword [ebp + 8], 0
jne 0x48cdca
push 0
mov ecx, dword [ebp - 0x1a24]
push ecx
push 0
push 0
mov ecx, 0x489f860
call fcn.004677f0
push 8
mov ecx, 0x489f1d0
call fcn.004113b0
mov dword [ebp - 0x1814], eax
push 1
mov edx, dword [ebp - 0x1814]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1814]
mov edx, dword [eax + 0x20]
call edx
push 1
mov ecx, 0x489f860
call fcn.004853e0
push 0
mov ecx, 0x4d2930
call fcn.0046ebf0
jmp case.0x48592e.4
mov ecx, dword [ebp - 0x152c]
call fcn.0048d300
mov dword [ebp - 0x1ba0], eax
mov eax, dword [ebp - 0x152c]
mov cl, byte [ebp - 0x1535]
mov byte [eax + 0xc741d], cl
mov al, byte [ebp - 0x1535]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049d708
mov esp, ebp
pop ebp
ret 8