Function at 0x47db26
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x340
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402a48
mov edx, 0x5211c8
lea ecx, [ebp - 0x32c]
call fcn.00404766
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47dc11
mov word [ebp - 0x1a8], 0x28
mov word [ebp - 0x2c], 0x36
mov word [ebp - 0x160], 0x4e
mov word [ebp - 0x15c], 0xd3
mov word [ebp - 0x230], 0x5f
mov word [ebp - 0xcc], 0x8e
mov word [ebp - 0x114], 0xbe
mov word [ebp - 0x21c], 0x66
mov word [ebp - 0x220], 0x43
mov word [ebp - 0x20c], 0x48
mov word [ebp - 0x1a4], 0x5d
mov word [ebp - 0x34], 0x62
mov word [ebp - 0x110], 0x68
mov word [ebp - 0xc8], 0x6c
jmp 0x47debd
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47dcb5
mov word [ebp - 0x1a8], 0x26
mov word [ebp - 0x2c], 0x3c
and word [ebp - 0x160], 0
and word [ebp - 0x15c], 0
and word [ebp - 0x230], 0
and word [ebp - 0xcc], 0
and word [ebp - 0x114], 0
and word [ebp - 0x21c], 0
mov word [ebp - 0x220], 0x81
and word [ebp - 0x20c], 0
mov word [ebp - 0x1a4], 0xba
mov word [ebp - 0x34], 0x82
mov word [ebp - 0x110], 0x60
mov word [ebp - 0xc8], 0x68
jmp 0x47debd
mov word [ebp - 0x1a8], 0xc9
mov word [ebp - 0x2c], 0x12
mov word [ebp - 0x160], 0xd2
mov word [ebp - 0x15c], 0x3a
mov word [ebp - 0x230], 0xd4
mov word [ebp - 0xcc], 0x2c
mov word [ebp - 0x114], 0x16
mov word [ebp - 0x21c], 0x25
mov word [ebp - 0x220], 0x32
mov word [ebp - 0x20c], 0x1b
mov word [ebp - 0x1a4], 0xd0
mov word [ebp - 0x34], 0x33
mov word [ebp - 0x110], 0x26
mov word [ebp - 0xc8], 0xd9
mov word [ebp - 0x22c], 0x28
mov word [ebp - 0x10c], 0x27
mov word [ebp - 0x108], 0xf
mov word [ebp - 0x28], 0xdd
mov word [ebp - 0x228], 0xd8
mov word [ebp - 0x224], 0xe1
mov word [ebp - 0x1c], 0xcb
mov word [ebp - 0x5c], 0xd0
mov word [ebp - 0x218], 0xcc
mov word [ebp - 0x24], 0xd3
mov word [ebp - 0x18], 0xce
mov word [ebp - 0x58], 0xd5
mov word [ebp - 0x30], 0xdc
mov word [ebp - 0x214], 0xda
mov word [ebp - 0x20], 0xe2
mov word [ebp - 0xc4], 0xde
mov word [ebp - 0x104], 0xd
mov word [ebp - 0x158], 0x15
mov word [ebp - 0xc0], 5
mov word [ebp - 0x210], 0xdf
mov dword [ebp - 0x2cc], 0xe0
mov dword [ebp - 0x2d4], 2
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1a0]
call fcn.004048d4
cmp word [0x521220], 0x1e
jl 0x47debd
mov word [ebp - 0x1a8], 0xbc
mov word [ebp - 0x230], 0xc7
mov word [ebp - 0xc8], 0xcc
mov word [ebp - 0x1a4], 0xd0
mov word [ebp - 0x1c], 0xbe
mov word [ebp - 0x218], 0xbf
mov word [ebp - 0x18], 0xc1
mov word [ebp - 0x5c], 0xc3
mov word [ebp - 0x160], 0xc5
mov word [ebp - 0x24], 0xc6
mov word [ebp - 0x58], pe_nt_image_headers32
mov word [ebp - 0x228], 0xcb
mov word [ebp - 0x214], 0xcd
mov word [ebp - 0x28], 0xd0
mov word [ebp - 0x230], 0xc7
mov word [ebp - 0x30], 0xcf
mov dword [ebp - 0x2cc], 0xd3
mov dword [ebp - 0x2d4], 2
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1a0]
call fcn.004048d4
mov word [ebp - 0xc8], 0xcc
mov word [ebp - 0x224], 0xd4
mov word [ebp - 0x20], 0xd5
mov word [ebp - 0x10c], 0x27
mov word [0x5210dc], 2
mov edx, 0x40ef44
lea ecx, [ebp - 0xf0]
call fcn.004048b0
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x2cc], al
mov dword [ebp - 0x2d4], 0x11
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x208]
call fcn.004048d4
lea edx, [ebp - 0x208]
lea ecx, [ebp - 0x33c]
call fcn.00404766
mov dword [ebp - 0x2cc], 0x4f
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47df6d
push dword [ebp - 0xf0]
push 0x40c65c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
jmp 0x482c73
mov dword [ebp - 0x2cc], 0xc5
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47dfcd
mov dword [ebp - 0x2dc], 0xd2
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47e0bc
push dword [ebp - 0xf0]
push 0x40e1b8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x3a
jne 0x47e0b7
push dword [ebp - 0xf0]
push 0x40ef58
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
jmp 0x482c73
mov dword [ebp - 0x2cc], 0xd1
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47e10c
push dword [ebp - 0xf0]
push 0x40eb3c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
jmp 0x482c73
mov dword [ebp - 0x2cc], 0xc2
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47e15c
push dword [ebp - 0xf0]
push 0x40e3d4
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
jmp 0x482c73
mov dword [ebp - 0x2cc], 0xbe
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47e1b8
mov dword [ebp - 0x2dc], 0xcb
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47e1da
push dword [ebp - 0xf0]
push 0x40bc14
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
jmp 0x482c73
mov dword [ebp - 0x2cc], 0xc4
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47e22a
push dword [ebp - 0xf0]
push 0x40be34
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
jmp 0x482c73
mov ax, word [ebp - 0x1a8]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47e28f
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x2dc], ax
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47ebb3
mov ax, word [ebp - 0x1a8]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47e2e0
push dword [ebp - 0xf0]
push 0x40ef6c
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
jmp 0x47e2fd
push dword [ebp - 0xf0]
push 0x40e434
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x47ebae
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40dfc4
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x230]
jne 0x47e6e6
push dword [ebp - 0xf0]
push 0x40dc20
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40bf4c
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 7
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xcc]
jne 0x47e7d3
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x114]
jne 0x47e910
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x47ea2b
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40ef84
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xdc
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x47eac4
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40ef84
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xcf
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xdf
jne 0x47ebae
push dword [ebp - 0xf0]
push 0x40dd04
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x482c73
mov ax, word [ebp - 0x220]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47f101
push dword [ebp - 0xf0]
push 0x40e640
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x47f0fc
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x8c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xcc]
jne 0x47ee5b
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x114]
jne 0x47ef48
push dword [ebp - 0xf0]
push 0x40c298
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
cmp word [0x521220], 0x1e
jge 0x47eff4
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40ef94
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xd2
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x47f08d
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40ef94
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xc5
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x482c73
mov ax, word [ebp - 0x20c]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47f193
mov dword [ebp - 0x2dc], 0xe2
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47f193
mov dword [ebp - 0x2ec], 0xd5
mov dword [ebp - 0x2f4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47fb5f
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x47fb5a
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x304], 8
mov dword [ebp - 0x2ec], 0x40de68
mov dword [ebp - 0x2f4], 8
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0x284]
call fcn.0040478a
mov dword [ebp - 0x2dc], 0x40de78
mov dword [ebp - 0x2e4], 8
lea edx, [ebp - 0x2e4]
lea ecx, [ebp - 0x274]
call fcn.0040478a
mov dword [ebp - 0x2cc], 0xe2
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00404886
mov edx, eax
lea ecx, [ebp - 0x264]
call fcn.004048d4
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004047a2
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
push 5
call fcn.00404898
add esp, 0x18
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044b7fc
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40dfc4
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x230]
jne 0x47f692
push dword [ebp - 0xf0]
push 0x40dc20
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40bf4c
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 7
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xcc]
jne 0x47f77f
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x114]
jne 0x47f8bc
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x47f9d7
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40ef84
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xdc
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x47fa70
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40ef84
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xcf
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0xdf
jne 0x47fb5a
push dword [ebp - 0xf0]
push 0x40dd04
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x482c73
mov dword [ebp - 0x2cc], 0x1c
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x47ff95
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x47ff90
push dword [ebp - 0xf0]
push 0x40da60
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x3a
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x8c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x25
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x2c
jne 0x47fe12
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x16
jne 0x47ff06
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x482c73
mov dword [ebp - 0x2cc], 0xd2
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x47fff5
mov dword [ebp - 0x2dc], 0xc5
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4803f9
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x4803f4
push dword [ebp - 0xf0]
push 0x40e1b8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x3a
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x8c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x25
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x2c
jne 0x480276
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x16
jne 0x48036a
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x482c73
mov ax, word [ebp - 0x1a4]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
jne 0x48045d
mov dword [ebp - 0x2dc], 0x4c
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4805c4
push dword [ebp - 0xf0]
push 0x40e610
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x3a
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x482c73
mov ax, word [ebp - 0x34]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x480aab
push dword [ebp - 0xf0]
push 0x40e3c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x480aa6
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x8c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xcc]
jne 0x480869
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x114]
jne 0x480960
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x4809b8
mov edx, 0x40ef94
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xd2
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x480a04
mov edx, 0x40ef94
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xc5
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x482c73
mov ax, word [ebp - 0x110]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x48107d
cmp word [0x521220], 0x1e
jge 0x480faf
push dword [ebp - 0xf0]
push 0x40e6b8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x2d4], 0x8002
push 0x5211c8
lea eax, [ebp - 0x2d4]
push eax
call fcn.004047e4
movsx eax, ax
test eax, eax
je 0x480faa
mov edx, 0x40dbc0
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x3a
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x8c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40e01c
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0x25
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x2c
jne 0x480d70
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x16
jne 0x480e64
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1f8]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x1f8]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x480ebc
mov edx, 0x40ef94
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xd2
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x480f08
mov edx, 0x40ef94
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xc5
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x54]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 4
call fcn.00404898
add esp, 0x14
jmp 0x481078
push dword [ebp - 0xf0]
push 0x40e3ec
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
jmp 0x482c73
mov ax, word [ebp - 0xc8]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4810e7
push dword [ebp - 0xf0]
push 0x40e474
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
jmp 0x482c73
mov ax, word [ebp - 0xcc]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x482c73
and dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2d4], 0x8002
push 0x5211f8
lea eax, [ebp - 0x2d4]
push eax
call fcn.00404712
movsx eax, ax
test eax, eax
je 0x482c73
push dword [ebp - 0xf0]
push 0x40bfe8
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0xc0]
jne 0x4813ac
push dword [ebp - 0xf0]
push 0x40c018
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bf4c
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x158]
jne 0x481545
push dword [ebp - 0xf0]
push 0x40dbfc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bf4c
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x22c]
jne 0x4816de
push dword [ebp - 0xf0]
push 0x40c0c0
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bf4c
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x2cc], al
mov dword [ebp - 0x2d4], 0x8011
and dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2e4], 0x8002
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00404886
push eax
push 0x5211f8
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047f6
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00404808
push eax
call fcn.00404892
movsx eax, ax
test eax, eax
je 0x4818da
push dword [ebp - 0xf0]
push 0x40d9cc
call fcn.0040486e
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bf4c
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2dc], 0x40bffc
mov dword [ebp - 0x2e4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 3
call fcn.00404898
add esp, 0x10
lea eax, [ebp - 0x254]
push eax
call fcn.00451b94
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x6c]
call fcn.004048d4
lea eax, [ebp - 0x254]
push eax
call fcn.0044bb2e
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xec]
call fcn.004048d4
mov edx, 0x40e9e8
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1e8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x4819d7
mov edx, 0x40e9f8
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1e8]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40ea0c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xac]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x481aa0
mov edx, 0x40ea1c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0xac]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40ea30
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x170]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x481b66
mov edx, 0x40ea40
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x170]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40ea54
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x154]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x481c2f
mov edx, 0x40ea64
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x154]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov edx, 0x40e958
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x144]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x481cf8
mov edx, 0x40e96c
lea ecx, [ebp - 0x244]
call fcn.004048b0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x144]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x180]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x10c]
jne 0x481def
mov dword [ebp - 0x2cc], 0x40da70
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x180]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x180]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0xdc]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, word [ebp - 0x114]
jne 0x481ee6
mov dword [ebp - 0x2cc], 0x40c298
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0xdc]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.0044506b
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0xdc]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x44]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x2fc], al
mov dword [ebp - 0x304], 0x8011
mov dword [ebp - 0x27c], 0xe3
mov dword [ebp - 0x284], 2
mov dword [ebp - 0x26c], 0xe0
mov dword [ebp - 0x274], 2
and dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2d4], 0x8002
push 0x5211f8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00404658
mov edx, eax
lea ecx, [ebp - 0x264]
call fcn.004048d4
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004047a2
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0xd6
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x30c], ax
mov dword [ebp - 0x314], 0xb
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404886
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.0040488c
push eax
call fcn.00404892
mov word [ebp - 0x31c], ax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
push 5
call fcn.00404898
add esp, 0x18
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x482164
mov dword [ebp - 0x2cc], 0x40d94c
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x44]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x12
jne 0x4820f7
mov dword [ebp - 0x2cc], 0x40e434
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x44]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x7c]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xcd
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xc0
setne cl
and ebx, ecx
test ebx, ebx
jne 0x482275
mov dword [ebp - 0x2cc], 0x40e9ac
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x7c]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x7c]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x4822d0
mov edx, 0x40ea98
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xca
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x48231f
mov edx, 0x40ea98
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xbd
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x48240d
cmp word [0x521220], 0x1e
jge 0x4823be
mov edx, 0x40eab0
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xd7
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x48240d
mov edx, 0x40eab0
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xca
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x9c]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
cmp word [0x521220], 0x1e
jge 0x482468
mov edx, 0x40eacc
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xcf
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x134]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x4824b7
mov edx, 0x40eacc
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xc2
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x134]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x240]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ebx, ebx
cmp ax, 0xd1
setne bl
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
xor ecx, ecx
cmp ax, 0xc4
setne cl
and ebx, ecx
test ebx, ebx
jne 0x482642
mov dword [ebp - 0x2cc], 0x40eae8
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x240]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 0x12
jne 0x4825cf
mov dword [ebp - 0x2cc], 0x40e434
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x240]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x240]
call fcn.004048d4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 2
call fcn.00404898
add esp, 0xc
cmp word [0x521220], 0x1e
jge 0x48269d
mov edx, 0x40eaf8
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xd4
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x100]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x4826ec
mov edx, 0x40eaf8
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xc7
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x100]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.004047c6
push eax
call fcn.004d8bec
xor ecx, ecx
cmp eax, 2
setl cl
neg ecx
mov word [ebp - 0x31c], cx
lea ecx, [ebp - 0x244]
call fcn.00404868
movsx eax, word [ebp - 0x31c]
test eax, eax
je 0x4827da
cmp word [0x521220], 0x1e
jge 0x48278b
mov edx, 0x40eb04
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xd6
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x100]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
jmp 0x4827da
mov edx, 0x40eb04
lea ecx, [ebp - 0x244]
call fcn.004048b0
mov word [ebp - 0x318], 0xc9
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0044b956
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x100]
call fcn.004048d4
lea ecx, [ebp - 0x244]
call fcn.00404868
mov dword [ebp - 0x2cc], 0x40a6cc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x124]
call fcn.00404766
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x2cc], al
mov dword [ebp - 0x2d4], 0x11
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x208]
call fcn.004048d4
lea edx, [ebp - 0x208]
lea ecx, [ebp - 0x34c]
call fcn.00404766
mov ax, word [ebp - 0x108]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4828b8
mov dword [ebp - 0x2cc], 0x40c86c
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x124]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
jmp 0x482a5a
mov ax, word [ebp - 0x28]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x482927
mov dword [ebp - 0x2cc], 0x40eb14
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x124]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
jmp 0x482a5a
mov ax, word [ebp - 0x228]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x482999
mov dword [ebp - 0x2cc], 0x40e8fc
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x124]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
jmp 0x482a5a
mov ax, word [ebp - 0x224]
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x2d4], 0x8002
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x482a08
mov dword [ebp - 0x2cc], 0x40eb28
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x124]
call fcn.00404766
mov ax, word [0x5210dc]
add ax, 1
jo 0x482e57
mov word [0x5210dc], ax
jmp 0x482a5a
lea eax, [ebp - 0x254]
push eax
call fcn.00444aa2
mov dword [ebp - 0x2cc], 0x40bffc
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x124]
call fcn.004048d4
lea ecx, [ebp - 0x254]
call fcn.00404844
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 8
call fcn.00404898
add esp, 0x24
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x284]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.004047d2
push eax
call fcn.004048aa
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.004048b6
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x254]
push eax
push 8
call fcn.00404898
add esp, 0x24
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d4], 8
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0xbc]
call fcn.00404766
push 0x482e36
jmp 0x482d04
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x32c]
push eax
push 3
call fcn.00404898
add esp, 0x10
lea ecx, [ebp - 0x44]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
lea ecx, [ebp - 0x6c]
call fcn.00404844
lea ecx, [ebp - 0x7c]
call fcn.00404844
lea ecx, [ebp - 0x8c]
call fcn.00404844
lea ecx, [ebp - 0x9c]
call fcn.00404844
lea ecx, [ebp - 0xac]
call fcn.00404844
lea ecx, [ebp - 0xdc]
call fcn.00404844
lea ecx, [ebp - 0xec]
call fcn.00404844
lea ecx, [ebp - 0xf0]
call fcn.00404868
lea ecx, [ebp - 0x100]
call fcn.00404844
lea ecx, [ebp - 0x124]
call fcn.00404844
lea ecx, [ebp - 0x134]
call fcn.00404844
lea ecx, [ebp - 0x144]
call fcn.00404844
lea ecx, [ebp - 0x154]
call fcn.00404844
lea ecx, [ebp - 0x170]
call fcn.00404844
lea ecx, [ebp - 0x180]
call fcn.00404844
lea ecx, [ebp - 0x190]
call fcn.00404844
lea ecx, [ebp - 0x1a0]
call fcn.00404844
lea ecx, [ebp - 0x1b8]
call fcn.00404844
lea ecx, [ebp - 0x1c8]
call fcn.00404844
lea ecx, [ebp - 0x1d8]
call fcn.00404844
lea ecx, [ebp - 0x1e8]
call fcn.00404844
lea ecx, [ebp - 0x1f8]
call fcn.00404844
lea ecx, [ebp - 0x208]
call fcn.00404844
lea ecx, [ebp - 0x240]
call fcn.00404844
ret
call fcn.0040477e